<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.35007,2.36548,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="197.11.24.239" src_port="53"/>
      <filter dst_port="80" proto="udp" src_ip="197.11.24.239" src_port="53"/>
      <filter dst_port="53" proto="tcp" src_ip="197.11.24.239" src_port="53"/>
      <filter dst_port="53" proto="udp" src_ip="197.11.24.239" src_port="53"/>
      <from sec="994482921" usec="0"/>
      <to sec="994483074" usec="0"/>
    </slice>
    <from sec="994482921" usec="0"/>
    <to sec="994483074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_3{
style=filled;
color=gray75;
83[label="196.212.12.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
84[label="211.3.75.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
1475[label="211.3.75.132;s;1pkt 1fpkt", shape=hexagon, color=black];
stat3[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.3.75.132:9807, 196.212.12.185:1045}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9807: (50%)&lt;BR/&gt; 1045: (50%)&gt;];
}
83--84[label="1;1pkt 1fpkt"];
83--1475[label="1;1pkt 1fpkt"];
84--1475[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.212.12.185" dst_port="1045" src_ip="211.3.75.132" src_port="9807"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34151,2.26364,901,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_4{
style=filled;
color=gray75;
13[label="200.140.181.198s;1pkt 1fpkt", shape=rectangle, color=red];
137[label="128.141.144.197;d;2pkt 2fpkt", shape=diamond, color=yellow];
138[label="200.140.181.198;s;2pkt 2fpkt", shape=diamond, color=yellow];
1310[label="200.140.181.198;s;1pkt 1fpkt", shape=hexagon, color=black];
1608[label="128.141.144.197;d;1pkt 1fpkt", shape=hexagon, color=black];
stat4[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.140.181.198:80, 128.141.144.197:1485}[50%]&lt;BR/&gt;{200.140.181.198:80, 128.141.144.197:1502}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1485: (35.7143%)&lt;BR/&gt; 1502: (14.2857%)&gt;];
}
13--137[label="1;1pkt 1fpkt"];
13--138[label="1;1pkt 1fpkt"];
13--1310[label="1;1pkt 1fpkt"];
13--1608[label="1;1pkt 1fpkt"];
13--1996[label="1;1pkt 1fpkt"];
13--2006[label="1;1pkt 1fpkt"];
13--2008[label="1;1pkt 1fpkt"];
13--2009[label="1;1pkt 1fpkt"];
13--2016[label="1;1pkt 1fpkt"];
137--138[label="1;2pkt 2fpkt"];
137--1310[label="1;1pkt 1fpkt"];
137--1608[label="1;1pkt 1fpkt"];
137--1996[label="0.5;1pkt 1fpkt"];
137--2006[label="0.5;1pkt 1fpkt"];
137--2008[label="0.5;1pkt 1fpkt"];
137--2009[label="0.5;1pkt 1fpkt"];
137--2016[label="0.5;1pkt 1fpkt"];
138--1310[label="1;1pkt 1fpkt"];
138--1608[label="1;1pkt 1fpkt"];
138--1996[label="0.5;1pkt 1fpkt"];
138--2006[label="0.5;1pkt 1fpkt"];
138--2008[label="0.5;1pkt 1fpkt"];
138--2009[label="0.5;1pkt 1fpkt"];
138--2016[label="0.5;1pkt 1fpkt"];
1310--1608[label="1;1pkt 1fpkt"];
1310--1996[label="1;1pkt 1fpkt"];
1310--2006[label="1;1pkt 1fpkt"];
1310--2008[label="1;1pkt 1fpkt"];
1310--2009[label="1;1pkt 1fpkt"];
1310--2016[label="1;1pkt 1fpkt"];
1608--1996[label="1;1pkt 1fpkt"];
1608--2006[label="1;1pkt 1fpkt"];
1608--2008[label="1;1pkt 1fpkt"];
1608--2009[label="1;1pkt 1fpkt"];
1608--2016[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.144.197" dst_port="1502" src_ip="200.140.181.198" src_port="80"/>
      <filter dst_ip="128.141.144.197" dst_port="1485" src_ip="200.140.181.198" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_5{
style=filled;
color=gray75;
141[label="160.164.210.177;s;2pkt 2fpkt", shape=diamond, color=yellow];
142[label="74.71.62.29;d;1pkt 1fpkt", shape=diamond, color=yellow];
1336[label="74.71.62.29;d;1pkt 1fpkt", shape=hexagon, color=black];
stat5[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.164.210.177:3278, 74.71.62.29:41001}[50%]&lt;BR/&gt;{160.164.210.177:3267, 13.149.14.176:21}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41001: (37.5%)&lt;BR/&gt; 3278: (37.5%)&lt;BR/&gt; 3267: (12.5%)&lt;BR/&gt; 21: (12.5%)&gt;];
}
141--142[label="1;1pkt 1fpkt"];
141--1336[label="1;1pkt 1fpkt"];
142--1336[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="13.149.14.176" dst_port="21" src_ip="160.164.210.177" src_port="3267"/>
      <filter dst_ip="74.71.62.29" dst_port="41001" src_ip="160.164.210.177" src_port="3278"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02629,2.15283,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_6{
style=filled;
color=gray75;
145[label="147.87.165.21;d;199pkt 199fpkt", shape=diamond, color=yellow];
148[label="13.134.219.149;s;1pkt 1fpkt", shape=diamond, color=yellow];
452[label="110.195.212.19;s;1pkt 1fpkt", shape=diamond, color=yellow];
494[label="219.168.210.169;s;27pkt 27fpkt", shape=diamond, color=yellow];
1311[label="13.134.219.149;s;1pkt 1fpkt", shape=hexagon, color=black];
1416[label="147.87.165.21;d;199pkt 199fpkt", shape=hexagon, color=black];
1453[label="110.195.212.19;s;1pkt 1fpkt", shape=hexagon, color=black];
1921[label="147.87.165.21;d;11pkt 11fpkt", shape=polygon, color=gold];
2058[label="196.43.80.9;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2497[label="219.168.210.169;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2816[label="219.168.210.169;28pkt 28fpkt", shape=invtriangle, color=brown];
stat6[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 147.87.165.21:*}[70.4724%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.057%)&lt;BR/&gt; 21: (1.04563%)&lt;BR/&gt; 2739: (0.570342%)&lt;BR/&gt; 2738: (0.570342%)&lt;BR/&gt; 41013: (0.475285%)&gt;];
}
145--148[label="1;1pkt 1fpkt"];
145--452[label="1;1pkt 1fpkt"];
145--494[label="0.0740741;2pkt 2fpkt"];
145--560[label="0.00502513;1pkt 1fpkt"];
145--638[label="0.0423729;5pkt 5fpkt"];
145--1151[label="0.0816327;8pkt 8fpkt"];
145--1230[label="0.114286;12pkt 12fpkt"];
145--1311[label="1;1pkt 1fpkt"];
145--1416[label="1;199pkt 199fpkt"];
145--1453[label="1;1pkt 1fpkt"];
145--1516[label="0.0075188;1pkt 1fpkt"];
145--1712[label="0.0471698;5pkt 5fpkt"];
145--1921[label="1;11pkt 11fpkt"];
145--1971[label="0.0531915;5pkt 5fpkt"];
145--1996[label="0.0100503;2pkt 2fpkt"];
145--2006[label="0.00502513;1pkt 1fpkt"];
145--2009[label="0.0100503;2pkt 2fpkt"];
145--2016[label="0.0100503;2pkt 2fpkt"];
145--2038[label="0.0776699;8pkt 8fpkt"];
145--2058[label="0.0333333;1pkt 1fpkt"];
145--2183[label="0.0196078;2pkt 2fpkt"];
145--2497[label="0.0714286;2pkt 2fpkt"];
145--2585[label="0.213675;25pkt 25fpkt"];
145--2622[label="0.101695;12pkt 12fpkt"];
145--2713[label="0.0194175;2pkt 2fpkt"];
145--2816[label="0.0714286;2pkt 2fpkt"];
145--2866[label="0.101695;12pkt 12fpkt"];
145--2891[label="0.0194175;2pkt 2fpkt"];
148--1416[label="1;1pkt 1fpkt"];
452--1416[label="1;1pkt 1fpkt"];
452--1453[label="1;1pkt 1fpkt"];
452--1921[label="1;1pkt 1fpkt"];
494--1416[label="0.0740741;2pkt 2fpkt"];
494--1707[label="0.925926;25pkt 25fpkt"];
494--1921[label="0.181818;2pkt 2fpkt"];
494--1981[label="0.925926;25pkt 25fpkt"];
494--1996[label="0.259259;7pkt 7fpkt"];
494--2009[label="0.259259;7pkt 7fpkt"];
494--2016[label="0.259259;7pkt 7fpkt"];
494--2497[label="1;27pkt 27fpkt"];
494--2816[label="1;27pkt 27fpkt"];
1311--1416[label="1;1pkt 1fpkt"];
1311--1921[label="1;1pkt 1fpkt"];
1416--1453[label="1;1pkt 1fpkt"];
1416--1516[label="0.0075188;1pkt 1fpkt"];
1416--1712[label="0.0471698;5pkt 5fpkt"];
1416--1921[label="1;11pkt 11fpkt"];
1416--1971[label="0.0531915;5pkt 5fpkt"];
1416--1996[label="0.0100503;2pkt 2fpkt"];
1416--2006[label="0.00502513;1pkt 1fpkt"];
1416--2009[label="0.0100503;2pkt 2fpkt"];
1416--2016[label="0.0100503;2pkt 2fpkt"];
1416--2038[label="0.0776699;8pkt 8fpkt"];
1416--2058[label="0.0333333;1pkt 1fpkt"];
1416--2183[label="0.0196078;2pkt 2fpkt"];
1416--2497[label="0.0714286;2pkt 2fpkt"];
1416--2585[label="0.213675;25pkt 25fpkt"];
1416--2622[label="0.101695;12pkt 12fpkt"];
1416--2713[label="0.0194175;2pkt 2fpkt"];
1416--2816[label="0.0714286;2pkt 2fpkt"];
1416--2866[label="0.101695;12pkt 12fpkt"];
1416--2891[label="0.0194175;2pkt 2fpkt"];
1453--1921[label="1;1pkt 1fpkt"];
1921--1996[label="0.181818;2pkt 2fpkt"];
1921--2009[label="0.181818;2pkt 2fpkt"];
1921--2016[label="0.181818;2pkt 2fpkt"];
1921--2497[label="0.181818;2pkt 2fpkt"];
1921--2816[label="0.181818;2pkt 2fpkt"];
2497--2816[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.165.21" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_8{
style=filled;
color=gray75;
167[label="144.188.129.162;s;14pkt 14fpkt", shape=diamond, color=yellow];
168[label="147.87.169.148;d;83pkt 83fpkt", shape=diamond, color=yellow];
1423[label="147.87.169.148;d;83pkt 83fpkt", shape=hexagon, color=black];
1433[label="144.188.155.69;s;31pkt 31fpkt", shape=hexagon, color=black];
1925[label="147.87.169.148;d;81pkt 81fpkt", shape=polygon, color=gold];
1926[label="144.188.155.69;s;31pkt 31fpkt", shape=polygon, color=gold];
stat8[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.188.155.69:80, 147.87.169.148:*}[31.0345%]&lt;BR/&gt;{144.188.150.95:80, 147.87.169.148:*}[25.2874%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5356%)&lt;BR/&gt; 3627: (0.773994%)&lt;BR/&gt; 3626: (0.773994%)&lt;BR/&gt; 3625: (0.773994%)&lt;BR/&gt; 3621: (0.773994%)&gt;];
}
167--168[label="1;14pkt 14fpkt"];
167--1423[label="1;14pkt 14fpkt"];
167--1925[label="1;14pkt 14fpkt"];
167--1996[label="0.214286;3pkt 3fpkt"];
167--2009[label="0.214286;3pkt 3fpkt"];
167--2016[label="0.214286;3pkt 3fpkt"];
168--1423[label="1;83pkt 83fpkt"];
168--1433[label="0.870968;27pkt 27fpkt"];
168--1925[label="1;81pkt 81fpkt"];
168--1926[label="0.870968;27pkt 27fpkt"];
168--1996[label="0.13253;11pkt 11fpkt"];
168--2009[label="0.13253;11pkt 11fpkt"];
168--2016[label="0.13253;11pkt 11fpkt"];
1423--1433[label="0.870968;27pkt 27fpkt"];
1423--1925[label="1;81pkt 81fpkt"];
1423--1926[label="0.870968;27pkt 27fpkt"];
1423--1996[label="0.13253;11pkt 11fpkt"];
1423--2009[label="0.13253;11pkt 11fpkt"];
1423--2016[label="0.13253;11pkt 11fpkt"];
1433--1925[label="0.870968;27pkt 27fpkt"];
1433--1926[label="1;31pkt 31fpkt"];
1433--1996[label="0.0322581;1pkt 1fpkt"];
1433--2009[label="0.0322581;1pkt 1fpkt"];
1433--2016[label="0.0322581;1pkt 1fpkt"];
1925--1926[label="0.870968;27pkt 27fpkt"];
1925--1996[label="0.135802;11pkt 11fpkt"];
1925--2009[label="0.135802;11pkt 11fpkt"];
1925--2016[label="0.135802;11pkt 11fpkt"];
1926--1996[label="0.0322581;1pkt 1fpkt"];
1926--2009[label="0.0322581;1pkt 1fpkt"];
1926--2016[label="0.0322581;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.169.148" src_ip="144.188.155.69" src_port="80"/>
      <filter dst_ip="147.87.169.148" src_ip="144.188.150.95" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994482510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40564,2.21838,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_9{
style=filled;
color=gray75;
4[label="197.152.214.7s;1pkt 1fpkt", shape=rectangle, color=red];
74[label="197.11.31.205;d;450pkt 450fpkt", shape=diamond, color=yellow];
231[label="197.152.214.7;s;1pkt 1fpkt", shape=diamond, color=yellow];
1221[label="210.9.53.220;s;129pkt 129fpkt", shape=diamond, color=yellow];
1335[label="197.152.214.7;s;1pkt 1fpkt", shape=hexagon, color=black];
1364[label="197.11.31.205;d;299pkt 299fpkt", shape=hexagon, color=black];
2233[label="211.90.120.75;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2608[label="210.9.53.220;132pkt 132fpkt", shape=pentagon, color=darkviolet];
2861[label="210.9.53.220;132pkt 132fpkt", shape=invtriangle, color=brown];
stat9[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.9.53.220:*, 197.11.31.205:*}[28.3262%]&lt;BR/&gt;{75.129.71.45:*, 197.11.31.205:6667}[20.8155%]&lt;BR/&gt;{75.129.71.45:113, 197.11.31.205:*}[20.8155%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (22.3214%)&lt;BR/&gt; 6669: (12.7126%)&lt;BR/&gt; 6667: (9.90646%)&lt;BR/&gt; 1080: (2.38095%)&lt;BR/&gt; 6668: (1.19048%)&gt;];
}
4--74[label="1;1pkt 1fpkt"];
4--231[label="1;1pkt 1fpkt"];
4--1335[label="1;1pkt 1fpkt"];
4--1364[label="1;1pkt 1fpkt"];
74--231[label="1;1pkt 1fpkt"];
74--487[label="0.602484;194pkt 194fpkt"];
74--1221[label="0.930233;120pkt 120fpkt"];
74--1335[label="1;1pkt 1fpkt"];
74--1364[label="1;299pkt 299fpkt"];
74--2233[label="0.870968;27pkt 27fpkt"];
74--2608[label="0.909091;120pkt 120fpkt"];
74--2861[label="0.909091;120pkt 120fpkt"];
231--1335[label="1;1pkt 1fpkt"];
231--1364[label="1;1pkt 1fpkt"];
1221--1364[label="0.620155;80pkt 80fpkt"];
1221--2608[label="1;129pkt 129fpkt"];
1221--2861[label="1;129pkt 129fpkt"];
1335--1364[label="1;1pkt 1fpkt"];
1364--2233[label="0.548387;17pkt 17fpkt"];
1364--2608[label="0.606061;80pkt 80fpkt"];
1364--2861[label="0.606061;80pkt 80fpkt"];
2608--2861[label="1;132pkt 132fpkt"];
</description>
    <slice>
      <filter dst_ip="197.11.31.205" src_ip="210.9.53.220"/>
      <filter dst_ip="197.11.31.205" src_ip="75.129.71.45" src_port="113"/>
      <filter dst_ip="197.11.31.205" dst_port="6667" src_ip="75.129.71.45"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32913,2.23332,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_10{
style=filled;
color=gray75;
1[label="172.55.122.3s;1pkt 1fpkt", shape=rectangle, color=red];
81[label="196.212.175.201;d;130pkt 130fpkt", shape=diamond, color=yellow];
212[label="212.136.188.234;s;1pkt 1fpkt", shape=diamond, color=yellow];
234[label="172.55.122.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
821[label="141.34.169.3;s;190pkt 190fpkt", shape=diamond, color=yellow];
1367[label="196.212.175.201;d;111pkt 111fpkt", shape=hexagon, color=black];
1535[label="172.55.122.3;s;1pkt 1fpkt", shape=hexagon, color=black];
2035[label="141.34.169.3;190pkt 190fpkt", shape=pentagon, color=darkviolet];
stat10[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 196.212.175.201:*}[41.2371%]&lt;BR/&gt;{141.34.169.3:80, 147.87.129.190:*}[25.4296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.16%)&lt;BR/&gt; 6699: (1.12%)&lt;BR/&gt; 7729: (0.4%)&lt;BR/&gt; 1221: (0.4%)&lt;BR/&gt; 3008: (0.32%)&gt;];
}
1--81[label="1;1pkt 1fpkt"];
1--234[label="1;1pkt 1fpkt"];
1--1367[label="1;1pkt 1fpkt"];
1--1535[label="1;1pkt 1fpkt"];
81--212[label="1;1pkt 1fpkt"];
81--234[label="1;1pkt 1fpkt"];
81--615[label="0.0846154;11pkt 11fpkt"];
81--742[label="0.307692;40pkt 40fpkt"];
81--816[label="0.246914;20pkt 20fpkt"];
81--821[label="0.223077;29pkt 29fpkt"];
81--1142[label="0.208333;20pkt 20fpkt"];
81--1367[label="1;111pkt 111fpkt"];
81--1535[label="1;1pkt 1fpkt"];
81--1654[label="0.344828;40pkt 40fpkt"];
81--1772[label="0.0852713;11pkt 11fpkt"];
81--1864[label="0.246914;20pkt 20fpkt"];
81--1996[label="0.0461538;6pkt 6fpkt"];
81--2006[label="0.0384615;5pkt 5fpkt"];
81--2008[label="0.0384615;5pkt 5fpkt"];
81--2009[label="0.0461538;6pkt 6fpkt"];
81--2016[label="0.0461538;6pkt 6fpkt"];
81--2035[label="0.223077;29pkt 29fpkt"];
81--2128[label="0.307692;40pkt 40fpkt"];
81--2416[label="0.0306122;3pkt 3fpkt"];
81--2514[label="0.206186;20pkt 20fpkt"];
81--2694[label="0.307692;40pkt 40fpkt"];
81--2823[label="0.204082;20pkt 20fpkt"];
212--1367[label="1;1pkt 1fpkt"];
234--1367[label="1;1pkt 1fpkt"];
234--1535[label="1;1pkt 1fpkt"];
821--1367[label="0.153153;17pkt 17fpkt"];
821--1996[label="0.0157895;3pkt 3fpkt"];
821--2006[label="0.0421053;8pkt 8fpkt"];
821--2008[label="0.0315789;6pkt 6fpkt"];
821--2009[label="0.0157895;3pkt 3fpkt"];
821--2016[label="0.0157895;3pkt 3fpkt"];
821--2035[label="1;190pkt 190fpkt"];
1367--1535[label="1;1pkt 1fpkt"];
1367--1654[label="0.36036;40pkt 40fpkt"];
1367--1772[label="0.0990991;11pkt 11fpkt"];
1367--1864[label="0.234568;19pkt 19fpkt"];
1367--1996[label="0.0540541;6pkt 6fpkt"];
1367--2006[label="0.045045;5pkt 5fpkt"];
1367--2008[label="0.027027;3pkt 3fpkt"];
1367--2009[label="0.0540541;6pkt 6fpkt"];
1367--2016[label="0.0540541;6pkt 6fpkt"];
1367--2035[label="0.153153;17pkt 17fpkt"];
1367--2128[label="0.36036;40pkt 40fpkt"];
1367--2416[label="0.0204082;2pkt 2fpkt"];
1367--2514[label="0.154639;15pkt 15fpkt"];
1367--2694[label="0.36036;40pkt 40fpkt"];
1367--2823[label="0.153061;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="196.212.175.201" src_port="80"/>
      <filter dst_ip="147.87.129.190" src_ip="141.34.169.3" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_11{
style=filled;
color=gray75;
238[label="165.22.7.65;d;172pkt 172fpkt", shape=diamond, color=yellow];
239[label="137.51.49.174;s;170pkt 170fpkt", shape=diamond, color=yellow];
stat11[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.51.49.174:7033, 165.22.7.65:*}[97.6879%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7033: (49.4152%)&lt;BR/&gt; 53: (0.438596%)&lt;BR/&gt; 4876: (0.292398%)&lt;BR/&gt; 2391: (0.292398%)&lt;BR/&gt; 2390: (0.292398%)&gt;];
}
238--239[label="0.994118;169pkt 169fpkt"];
239--1774[label="0.00588235;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.22.7.65" src_ip="137.51.49.174" src_port="7033"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_12{
style=filled;
color=gray75;
248[label="160.164.210.177;d;2pkt 2fpkt", shape=diamond, color=yellow];
249[label="74.71.62.29;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat12[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.71.62.29:41001, 160.164.210.177:3278}[50%]&lt;BR/&gt;{13.149.14.176:21, 160.164.210.177:3267}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41001: (33.3333%)&lt;BR/&gt; 3278: (33.3333%)&lt;BR/&gt; 3267: (16.6667%)&lt;BR/&gt; 21: (16.6667%)&gt;];
}
248--249[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.164.210.177" dst_port="3267" src_ip="13.149.14.176" src_port="21"/>
      <filter dst_ip="160.164.210.177" dst_port="3278" src_ip="74.71.62.29" src_port="41001"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34151,2.26364,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_14{
style=filled;
color=gray75;
15[label="146.20.9.236s;4pkt 4fpkt", shape=rectangle, color=red];
131[label="146.20.9.236;s;57pkt 57fpkt", shape=diamond, color=yellow];
233[label="14.137.129.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
240[label="12.73.199.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
241[label="12.12.15.63;d;1pkt 1fpkt", shape=diamond, color=yellow];
252[label="13.135.74.209;d;1pkt 1fpkt", shape=diamond, color=yellow];
270[label="12.82.156.206;d;1pkt 1fpkt", shape=diamond, color=yellow];
340[label="13.135.163.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
379[label="12.3.34.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
449[label="12.79.153.32;d;2pkt 2fpkt", shape=diamond, color=yellow];
466[label="13.248.35.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
954[label="14.137.221.122;d;1pkt 1fpkt", shape=diamond, color=yellow];
1249[label="14.130.59.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
1339[label="13.135.74.209;d;1pkt 1fpkt", shape=hexagon, color=black];
1387[label="12.3.34.158;d;1pkt 1fpkt", shape=hexagon, color=black];
1414[label="146.20.9.236;s;35pkt 35fpkt", shape=hexagon, color=black];
1459[label="14.137.129.60;d;1pkt 1fpkt", shape=hexagon, color=black];
1461[label="13.248.35.136;d;1pkt 1fpkt", shape=hexagon, color=black];
1575[label="12.79.153.32;d;2pkt 2fpkt", shape=hexagon, color=black];
1607[label="12.73.199.89;d;1pkt 1fpkt", shape=hexagon, color=black];
1681[label="14.137.221.122;d;1pkt 1fpkt", shape=hexagon, color=black];
1812[label="12.12.15.63;d;1pkt 1fpkt", shape=hexagon, color=black];
1890[label="14.130.59.244;d;1pkt 1fpkt", shape=hexagon, color=black];
stat14[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.20.9.236:*, *:6346}[78.9474%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (37.7119%)&lt;BR/&gt; 6347: (10.5932%)&lt;BR/&gt; 31506: (2.11864%)&lt;BR/&gt; 30685: (2.11864%)&lt;BR/&gt; 30221: (2.11864%)&gt;];
}
15--131[label="1;4pkt 4fpkt"];
15--270[label="1;1pkt 1fpkt"];
15--449[label="1;2pkt 2fpkt"];
15--954[label="1;1pkt 1fpkt"];
15--1414[label="1;4pkt 4fpkt"];
15--1575[label="1;2pkt 2fpkt"];
15--1681[label="1;1pkt 1fpkt"];
131--233[label="1;1pkt 1fpkt"];
131--240[label="1;1pkt 1fpkt"];
131--241[label="1;1pkt 1fpkt"];
131--252[label="1;1pkt 1fpkt"];
131--270[label="1;1pkt 1fpkt"];
131--340[label="1;1pkt 1fpkt"];
131--379[label="1;1pkt 1fpkt"];
131--449[label="1;2pkt 2fpkt"];
131--466[label="1;1pkt 1fpkt"];
131--728[label="0.0350877;2pkt 2fpkt"];
131--954[label="1;1pkt 1fpkt"];
131--1249[label="1;1pkt 1fpkt"];
131--1339[label="1;1pkt 1fpkt"];
131--1387[label="1;1pkt 1fpkt"];
131--1414[label="1;35pkt 35fpkt"];
131--1459[label="1;1pkt 1fpkt"];
131--1461[label="1;1pkt 1fpkt"];
131--1518[label="0.0350877;2pkt 2fpkt"];
131--1575[label="1;2pkt 2fpkt"];
131--1607[label="1;1pkt 1fpkt"];
131--1681[label="1;1pkt 1fpkt"];
131--1812[label="1;1pkt 1fpkt"];
131--1890[label="1;1pkt 1fpkt"];
233--1414[label="1;1pkt 1fpkt"];
233--1459[label="1;1pkt 1fpkt"];
240--1414[label="1;1pkt 1fpkt"];
240--1607[label="1;1pkt 1fpkt"];
241--1414[label="1;1pkt 1fpkt"];
241--1812[label="1;1pkt 1fpkt"];
252--1339[label="1;1pkt 1fpkt"];
252--1414[label="1;1pkt 1fpkt"];
270--1414[label="1;1pkt 1fpkt"];
340--1414[label="1;1pkt 1fpkt"];
379--1387[label="1;1pkt 1fpkt"];
379--1414[label="1;1pkt 1fpkt"];
449--1414[label="1;2pkt 2fpkt"];
449--1575[label="1;2pkt 2fpkt"];
466--1414[label="1;1pkt 1fpkt"];
466--1461[label="1;1pkt 1fpkt"];
954--1414[label="1;1pkt 1fpkt"];
954--1681[label="1;1pkt 1fpkt"];
1249--1890[label="1;1pkt 1fpkt"];
1339--1414[label="1;1pkt 1fpkt"];
1387--1414[label="1;1pkt 1fpkt"];
1414--1459[label="1;1pkt 1fpkt"];
1414--1461[label="1;1pkt 1fpkt"];
1414--1575[label="1;2pkt 2fpkt"];
1414--1607[label="1;1pkt 1fpkt"];
1414--1681[label="1;1pkt 1fpkt"];
1414--1812[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6346" src_ip="146.20.9.236"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_15{
style=filled;
color=gray75;
295[label="165.22.59.180;d;11pkt 11fpkt", shape=diamond, color=yellow];
296[label="124.3.211.157;s;1pkt 1fpkt", shape=diamond, color=yellow];
1393[label="165.22.59.180;d;3pkt 3fpkt", shape=hexagon, color=black];
stat15[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:21, 165.22.59.180:*}[27.2727%]&lt;BR/&gt;{13.149.14.0:*, 165.22.59.180:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (26.6667%)&lt;BR/&gt; 60106: (10%)&lt;BR/&gt; 41178: (6.66667%)&lt;BR/&gt; 5190: (6.66667%)&lt;BR/&gt; 1729: (6.66667%)&gt;];
}
295--296[label="1;1pkt 1fpkt"];
295--1393[label="1;3pkt 3fpkt"];
296--1393[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.22.59.180" src_ip="13.149.14.0"/>
      <filter dst_ip="165.22.59.180" src_port="21"/>
    </slice>
    <from sec="994482001" usec="0"/>
    <to sec="994483183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02629,2.15283,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_16{
style=filled;
color=gray75;
67[label="196.120.26.60;d;3388pkt 3388fpkt", shape=diamond, color=yellow];
151[label="147.87.187.72;d;419pkt 419fpkt", shape=diamond, color=yellow];
166[label="197.55.180.71;s;2pkt 2fpkt", shape=diamond, color=yellow];
173[label="13.17.33.77;s;214pkt 214fpkt", shape=diamond, color=yellow];
193[label="197.56.170.187;s;181pkt 181fpkt", shape=diamond, color=yellow];
229[label="13.7.21.178;s;1pkt 1fpkt", shape=diamond, color=yellow];
323[label="13.199.7.210;s;505pkt 505fpkt", shape=diamond, color=yellow];
333[label="209.97.111.3;s;48pkt 48fpkt", shape=diamond, color=yellow];
347[label="192.238.250.71;s;85pkt 85fpkt", shape=diamond, color=yellow];
483[label="196.217.132.145;d;380pkt 380fpkt", shape=diamond, color=yellow];
488[label="13.66.114.105;s;321pkt 321fpkt", shape=diamond, color=yellow];
508[label="219.113.42.88;s;20pkt 20fpkt", shape=diamond, color=yellow];
525[label="219.168.40.1;s;12pkt 12fpkt", shape=diamond, color=yellow];
649[label="147.87.182.62;d;102pkt 102fpkt", shape=diamond, color=yellow];
672[label="194.131.140.115;s;26pkt 26fpkt", shape=diamond, color=yellow];
736[label="14.137.171.184;s;1pkt 1fpkt", shape=diamond, color=yellow];
854[label="147.87.235.96;d;101pkt 101fpkt", shape=diamond, color=yellow];
884[label="13.199.171.2;s;6pkt 6fpkt", shape=diamond, color=yellow];
950[label="209.235.124.15;s;25pkt 25fpkt", shape=diamond, color=yellow];
1083[label="13.199.6.69;s;118pkt 118fpkt", shape=diamond, color=yellow];
1187[label="196.212.13.105;d;74pkt 74fpkt", shape=diamond, color=yellow];
1189[label="146.0.115.83;s;94pkt 94fpkt", shape=diamond, color=yellow];
1230[label="219.153.137.229;s;105pkt 105fpkt", shape=diamond, color=yellow];
1347[label="197.55.180.71;s;2pkt 2fpkt", shape=hexagon, color=black];
1370[label="192.238.250.71;s;85pkt 85fpkt", shape=hexagon, color=black];
1382[label="147.87.187.72;d;221pkt 221fpkt", shape=hexagon, color=black];
1388[label="13.17.33.77;s;96pkt 96fpkt", shape=hexagon, color=black];
1451[label="219.168.40.1;s;12pkt 12fpkt", shape=hexagon, color=black];
1563[label="147.87.182.62;d;102pkt 102fpkt", shape=hexagon, color=black];
1632[label="196.217.132.145;d;252pkt 252fpkt", shape=hexagon, color=black];
1643[label="13.66.114.105;s;274pkt 274fpkt", shape=hexagon, color=black];
1693[label="196.120.26.60;d;3388pkt 3388fpkt", shape=hexagon, color=black];
1937[label="197.55.180.71;s;2pkt 2fpkt", shape=polygon, color=gold];
2024[label="219.168.40.1;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2127[label="211.64.239.35;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2153[label="14.209.115.45;66pkt 66fpkt", shape=pentagon, color=darkviolet];
2211[label="209.25.102.66;547pkt 547fpkt", shape=pentagon, color=darkviolet];
2221[label="209.1.178.71;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2230[label="192.14.180.73;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2237[label="211.64.236.76;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2238[label="211.249.240.76;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2257[label="219.155.21.83;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2268[label="219.113.42.88;49pkt 49fpkt", shape=pentagon, color=darkviolet];
2303[label="192.237.98.101;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2328[label="13.66.114.105;334pkt 334fpkt", shape=pentagon, color=darkviolet];
2344[label="75.144.9.112;62pkt 62fpkt", shape=pentagon, color=darkviolet];
2370[label="209.226.7.125;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2403[label="219.1.128.134;32pkt 32fpkt", shape=pentagon, color=darkviolet];
2464[label="192.14.185.156;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2471[label="211.64.238.160;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2496[label="219.154.233.168;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2499[label="192.237.98.170;79pkt 79fpkt", shape=pentagon, color=darkviolet];
2505[label="192.237.98.171;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2510[label="211.64.238.173;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2526[label="219.74.28.183;44pkt 44fpkt", shape=pentagon, color=darkviolet];
2585[label="219.138.125.210;117pkt 117fpkt", shape=pentagon, color=darkviolet];
2590[label="197.153.85.212;49pkt 49fpkt", shape=pentagon, color=darkviolet];
2614[label="209.22.8.224;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2622[label="219.153.137.229;118pkt 118fpkt", shape=pentagon, color=darkviolet];
2627[label="192.14.185.231;64pkt 64fpkt", shape=pentagon, color=darkviolet];
2648[label="112.16.152.242;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2673[label="219.154.140.17;136pkt 136fpkt", shape=invtriangle, color=brown];
2687[label="13.192.33.33;17pkt 17fpkt", shape=invtriangle, color=brown];
2702[label="14.209.115.45;66pkt 66fpkt", shape=invtriangle, color=brown];
2734[label="219.155.21.83;18pkt 18fpkt", shape=invtriangle, color=brown];
2760[label="13.66.114.105;335pkt 335fpkt", shape=invtriangle, color=brown];
2767[label="75.144.9.112;62pkt 62fpkt", shape=invtriangle, color=brown];
2785[label="219.1.128.134;32pkt 32fpkt", shape=invtriangle, color=brown];
2866[label="219.153.137.229;118pkt 118fpkt", shape=invtriangle, color=brown];
2875[label="112.16.152.242;7pkt 7fpkt", shape=invtriangle, color=brown];
stat16[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 196.120.26.60:*}[47.7818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.3343%)&lt;BR/&gt; 53: (3.97425%)&lt;BR/&gt; 8006: (1.52683%)&lt;BR/&gt; 0: (0.269441%)&lt;BR/&gt; 5190: (0.0785869%)&gt;];
}
67--105[label="0.00117878;3pkt 3fpkt"];
67--144[label="0.0295339;64pkt 64fpkt"];
67--166[label="0.5;1pkt 1fpkt"];
67--173[label="0.11215;24pkt 24fpkt"];
67--193[label="1;181pkt 181fpkt"];
67--194[label="0.033046;23pkt 23fpkt"];
67--201[label="0.0625;6pkt 6fpkt"];
67--229[label="1;1pkt 1fpkt"];
67--237[label="1;45pkt 45fpkt"];
67--261[label="0.153061;15pkt 15fpkt"];
67--267[label="0.000590319;2pkt 2fpkt"];
67--323[label="1;505pkt 505fpkt"];
67--333[label="1;48pkt 48fpkt"];
67--347[label="1;85pkt 85fpkt"];
67--369[label="0.0259259;14pkt 14fpkt"];
67--488[label="0.520249;167pkt 167fpkt"];
67--508[label="0.15;3pkt 3fpkt"];
67--525[label="1;12pkt 12fpkt"];
67--563[label="0.00877193;2pkt 2fpkt"];
67--572[label="0.0681818;6pkt 6fpkt"];
67--638[label="0.305085;36pkt 36fpkt"];
67--640[label="0.0735294;5pkt 5fpkt"];
67--641[label="0.0111524;3pkt 3fpkt"];
67--654[label="0.015625;1pkt 1fpkt"];
67--683[label="0.037037;2pkt 2fpkt"];
67--689[label="0.0333333;2pkt 2fpkt"];
67--692[label="0.046875;3pkt 3fpkt"];
67--700[label="0.0645161;4pkt 4fpkt"];
67--702[label="0.0491803;3pkt 3fpkt"];
67--703[label="0.0645161;4pkt 4fpkt"];
67--794[label="0.0606061;4pkt 4fpkt"];
67--801[label="0.0634921;4pkt 4fpkt"];
67--803[label="0.0338983;2pkt 2fpkt"];
67--812[label="0.0612245;3pkt 3fpkt"];
67--819[label="0.112676;8pkt 8fpkt"];
67--825[label="0.00595238;1pkt 1fpkt"];
67--834[label="0.157576;26pkt 26fpkt"];
67--884[label="1;6pkt 6fpkt"];
67--950[label="1;25pkt 25fpkt"];
67--986[label="0.0526316;2pkt 2fpkt"];
67--1078[label="0.0294118;2pkt 2fpkt"];
67--1083[label="0.779661;92pkt 92fpkt"];
67--1151[label="0.0816327;8pkt 8fpkt"];
67--1189[label="1;94pkt 94fpkt"];
67--1230[label="0.142857;15pkt 15fpkt"];
67--1300[label="0.00118064;3pkt 3fpkt"];
67--1320[label="0.0645161;6pkt 6fpkt"];
67--1344[label="0.263158;5pkt 5fpkt"];
67--1347[label="0.5;1pkt 1fpkt"];
67--1370[label="1;85pkt 85fpkt"];
67--1388[label="0.0104167;1pkt 1fpkt"];
67--1398[label="0.0369775;23pkt 23fpkt"];
67--1451[label="1;12pkt 12fpkt"];
67--1484[label="0.000590319;2pkt 2fpkt"];
67--1532[label="0.0232558;1pkt 1fpkt"];
67--1553[label="0.0625;4pkt 4fpkt"];
67--1568[label="0.19403;26pkt 26fpkt"];
67--1611[label="0.0261643;50pkt 50fpkt"];
67--1612[label="0.0625;4pkt 4fpkt"];
67--1634[label="0.0111524;3pkt 3fpkt"];
67--1643[label="0.609489;167pkt 167fpkt"];
67--1693[label="1;3388pkt 3388fpkt"];
67--1698[label="0.030303;1pkt 1fpkt"];
67--1712[label="0.283019;30pkt 30fpkt"];
67--1720[label="0.0612245;3pkt 3fpkt"];
67--1724[label="0.112676;8pkt 8fpkt"];
67--1734[label="0.0705882;6pkt 6fpkt"];
67--1852[label="1;45pkt 45fpkt"];
67--1857[label="0.0338983;2pkt 2fpkt"];
67--1915[label="0.222222;6pkt 6fpkt"];
67--1933[label="0.000590319;2pkt 2fpkt"];
67--1937[label="0.5;1pkt 1fpkt"];
67--1956[label="0.0517241;3pkt 3fpkt"];
67--1971[label="0.255319;24pkt 24fpkt"];
67--1992[label="0.0338983;2pkt 2fpkt"];
67--1996[label="0.0486235;136pkt 136fpkt"];
67--1999[label="0.00448934;4pkt 4fpkt"];
67--2000[label="0.00590319;20pkt 20fpkt"];
67--2003[label="0.00855962;29pkt 29fpkt"];
67--2005[label="0.0112161;38pkt 38fpkt"];
67--2006[label="0.0438422;110pkt 110fpkt"];
67--2007[label="0.00855962;29pkt 29fpkt"];
67--2008[label="0.0486757;136pkt 136fpkt"];
67--2009[label="0.0486235;136pkt 136fpkt"];
67--2012[label="0.00448934;4pkt 4fpkt"];
67--2014[label="0.00855962;29pkt 29fpkt"];
67--2016[label="0.0486235;136pkt 136fpkt"];
67--2019[label="0.00448934;4pkt 4fpkt"];
67--2020[label="0.00855962;29pkt 29fpkt"];
67--2024[label="1;11pkt 11fpkt"];
67--2038[label="0.0776699;8pkt 8fpkt"];
67--2101[label="0.5;4pkt 4fpkt"];
67--2119[label="0.777778;42pkt 42fpkt"];
67--2122[label="0.0652174;3pkt 3fpkt"];
67--2127[label="0.0285714;1pkt 1fpkt"];
67--2153[label="0.030303;2pkt 2fpkt"];
67--2176[label="0.0232558;1pkt 1fpkt"];
67--2194[label="0.112676;8pkt 8fpkt"];
67--2211[label="0.0255941;14pkt 14fpkt"];
67--2221[label="0.0588235;1pkt 1fpkt"];
67--2237[label="1;9pkt 9fpkt"];
67--2238[label="0.030303;1pkt 1fpkt"];
67--2268[label="0.0816327;4pkt 4fpkt"];
67--2290[label="0.108696;5pkt 5fpkt"];
67--2303[label="0.142857;3pkt 3fpkt"];
67--2315[label="0.15;3pkt 3fpkt"];
67--2325[label="0.09375;3pkt 3fpkt"];
67--2328[label="0.517964;173pkt 173fpkt"];
67--2344[label="0.016129;1pkt 1fpkt"];
67--2350[label="0.154639;15pkt 15fpkt"];
67--2359[label="0.0232558;1pkt 1fpkt"];
67--2370[label="0.916667;22pkt 22fpkt"];
67--2403[label="0.03125;1pkt 1fpkt"];
67--2425[label="0.0294118;2pkt 2fpkt"];
67--2431[label="0.00877193;1pkt 1fpkt"];
67--2433[label="0.0243902;1pkt 1fpkt"];
67--2441[label="0.233333;14pkt 14fpkt"];
67--2464[label="0.0357143;1pkt 1fpkt"];
67--2471[label="0.0909091;3pkt 3fpkt"];
67--2496[label="0.0294118;1pkt 1fpkt"];
67--2498[label="0.0294118;1pkt 1fpkt"];
67--2499[label="0.151899;12pkt 12fpkt"];
67--2505[label="0.333333;14pkt 14fpkt"];
67--2510[label="0.125;2pkt 2fpkt"];
67--2518[label="0.0416667;1pkt 1fpkt"];
67--2526[label="1;44pkt 44fpkt"];
67--2527[label="0.0526316;5pkt 5fpkt"];
67--2548[label="0.000590319;2pkt 2fpkt"];
67--2581[label="0.131387;18pkt 18fpkt"];
67--2585[label="0.0512821;6pkt 6fpkt"];
67--2590[label="1;49pkt 49fpkt"];
67--2602[label="0.0293309;64pkt 64fpkt"];
67--2614[label="0.333333;1pkt 1fpkt"];
67--2622[label="0.127119;15pkt 15fpkt"];
67--2627[label="0.015625;1pkt 1fpkt"];
67--2648[label="1;7pkt 7fpkt"];
67--2650[label="0.222222;6pkt 6fpkt"];
67--2673[label="1;136pkt 136fpkt"];
67--2687[label="1;17pkt 17fpkt"];
67--2689[label="0.0652174;3pkt 3fpkt"];
67--2702[label="0.030303;2pkt 2fpkt"];
67--2703[label="0.0483871;3pkt 3fpkt"];
67--2711[label="0.0238095;1pkt 1fpkt"];
67--2752[label="0.142857;3pkt 3fpkt"];
67--2760[label="0.519403;174pkt 174fpkt"];
67--2767[label="0.016129;1pkt 1fpkt"];
67--2785[label="0.03125;1pkt 1fpkt"];
67--2788[label="0.0298507;2pkt 2fpkt"];
67--2791[label="0.0238095;1pkt 1fpkt"];
67--2817[label="0.0294118;1pkt 1fpkt"];
67--2826[label="1;44pkt 44fpkt"];
67--2827[label="0.0526316;5pkt 5fpkt"];
67--2866[label="0.127119;15pkt 15fpkt"];
67--2875[label="1;7pkt 7fpkt"];
67--2892[label="0.119403;8pkt 8fpkt"];
67--2916[label="0.0344828;2pkt 2fpkt"];
151--173[label="0.88785;190pkt 190fpkt"];
151--503[label="0.32;48pkt 48fpkt"];
151--638[label="0.0508475;6pkt 6fpkt"];
151--1151[label="0.0306122;3pkt 3fpkt"];
151--1382[label="1;221pkt 221fpkt"];
151--1388[label="0.989583;95pkt 95fpkt"];
151--1712[label="0.0566038;6pkt 6fpkt"];
151--1971[label="0.0638298;6pkt 6fpkt"];
151--1996[label="0.071599;30pkt 30fpkt"];
151--2006[label="0.00238663;1pkt 1fpkt"];
151--2008[label="0.00238663;1pkt 1fpkt"];
151--2009[label="0.071599;30pkt 30fpkt"];
151--2016[label="0.071599;30pkt 30fpkt"];
151--2038[label="0.0291262;3pkt 3fpkt"];
151--2082[label="0.307692;48pkt 48fpkt"];
151--2183[label="0.0196078;2pkt 2fpkt"];
151--2290[label="0.0869565;4pkt 4fpkt"];
151--2585[label="0.102564;12pkt 12fpkt"];
151--2674[label="0.305732;48pkt 48fpkt"];
151--2713[label="0.0194175;2pkt 2fpkt"];
151--2884[label="0.305732;48pkt 48fpkt"];
151--2891[label="0.0194175;2pkt 2fpkt"];
166--268[label="0.5;1pkt 1fpkt"];
166--1347[label="1;2pkt 2fpkt"];
166--1693[label="0.5;1pkt 1fpkt"];
166--1937[label="1;2pkt 2fpkt"];
173--1382[label="0.443925;95pkt 95fpkt"];
173--1388[label="1;96pkt 96fpkt"];
173--1693[label="0.11215;24pkt 24fpkt"];
173--1996[label="0.116822;25pkt 25fpkt"];
173--2006[label="0.0140187;3pkt 3fpkt"];
173--2009[label="0.116822;25pkt 25fpkt"];
173--2016[label="0.116822;25pkt 25fpkt"];
193--1693[label="1;181pkt 181fpkt"];
193--1996[label="0.0441989;8pkt 8fpkt"];
193--2009[label="0.0441989;8pkt 8fpkt"];
193--2016[label="0.0441989;8pkt 8fpkt"];
229--1693[label="1;1pkt 1fpkt"];
323--1693[label="1;505pkt 505fpkt"];
323--1996[label="0.0653465;33pkt 33fpkt"];
323--2006[label="0.00792079;4pkt 4fpkt"];
323--2008[label="0.00990099;5pkt 5fpkt"];
323--2009[label="0.0653465;33pkt 33fpkt"];
323--2016[label="0.0653465;33pkt 33fpkt"];
333--1693[label="1;48pkt 48fpkt"];
333--2006[label="0.0208333;1pkt 1fpkt"];
333--2008[label="0.0208333;1pkt 1fpkt"];
347--1370[label="1;85pkt 85fpkt"];
347--1693[label="1;85pkt 85fpkt"];
347--1996[label="0.364706;31pkt 31fpkt"];
347--2006[label="0.0117647;1pkt 1fpkt"];
347--2008[label="0.0117647;1pkt 1fpkt"];
347--2009[label="0.364706;31pkt 31fpkt"];
347--2016[label="0.364706;31pkt 31fpkt"];
483--488[label="0.476636;153pkt 153fpkt"];
483--672[label="1;26pkt 26fpkt"];
483--1027[label="0.676471;69pkt 69fpkt"];
483--1632[label="1;252pkt 252fpkt"];
483--1643[label="0.386861;106pkt 106fpkt"];
483--1881[label="0.676471;69pkt 69fpkt"];
483--1996[label="0.0236842;9pkt 9fpkt"];
483--2006[label="0.05;19pkt 19fpkt"];
483--2008[label="0.0657895;25pkt 25fpkt"];
483--2009[label="0.0236842;9pkt 9fpkt"];
483--2016[label="0.0236842;9pkt 9fpkt"];
483--2089[label="0.487805;20pkt 20fpkt"];
483--2254[label="0.64486;69pkt 69fpkt"];
483--2257[label="1;17pkt 17fpkt"];
483--2328[label="0.458084;153pkt 153fpkt"];
483--2433[label="0.146341;6pkt 6fpkt"];
483--2734[label="1;18pkt 18fpkt"];
483--2760[label="0.456716;153pkt 153fpkt"];
483--2791[label="0.142857;6pkt 6fpkt"];
488--1632[label="0.420635;106pkt 106fpkt"];
488--1643[label="1;274pkt 274fpkt"];
488--1693[label="0.520249;167pkt 167fpkt"];
488--1996[label="0.0685358;22pkt 22fpkt"];
488--2006[label="0.0841121;27pkt 27fpkt"];
488--2008[label="0.0280374;9pkt 9fpkt"];
488--2009[label="0.0685358;22pkt 22fpkt"];
488--2016[label="0.0685358;22pkt 22fpkt"];
488--2328[label="0.996885;320pkt 320fpkt"];
488--2760[label="1;321pkt 321fpkt"];
508--1248[label="0.125;2pkt 2fpkt"];
508--1693[label="0.15;3pkt 3fpkt"];
508--2008[label="0.25;5pkt 5fpkt"];
508--2268[label="1;20pkt 20fpkt"];
525--1451[label="1;12pkt 12fpkt"];
525--1693[label="1;12pkt 12fpkt"];
525--2024[label="1;11pkt 11fpkt"];
649--736[label="1;1pkt 1fpkt"];
649--1230[label="0.0392157;4pkt 4fpkt"];
649--1397[label="0.0188679;1pkt 1fpkt"];
649--1563[label="1;102pkt 102fpkt"];
649--2416[label="0.0408163;4pkt 4fpkt"];
649--2482[label="0.0188679;1pkt 1fpkt"];
649--2486[label="0.25;5pkt 5fpkt"];
649--2622[label="0.0392157;4pkt 4fpkt"];
649--2866[label="0.0392157;4pkt 4fpkt"];
672--1632[label="0.653846;17pkt 17fpkt"];
672--2006[label="0.192308;5pkt 5fpkt"];
672--2008[label="0.192308;5pkt 5fpkt"];
736--1563[label="1;1pkt 1fpkt"];
854--1230[label="0.019802;2pkt 2fpkt"];
854--1712[label="0.039604;4pkt 4fpkt"];
854--1971[label="0.0425532;4pkt 4fpkt"];
854--2006[label="0.019802;2pkt 2fpkt"];
854--2058[label="0.433333;13pkt 13fpkt"];
854--2183[label="0.039604;4pkt 4fpkt"];
854--2193[label="0.0103093;1pkt 1fpkt"];
854--2431[label="0.50495;51pkt 51fpkt"];
854--2622[label="0.019802;2pkt 2fpkt"];
854--2713[label="0.039604;4pkt 4fpkt"];
854--2717[label="0.0104167;1pkt 1fpkt"];
854--2866[label="0.019802;2pkt 2fpkt"];
854--2891[label="0.039604;4pkt 4fpkt"];
884--1693[label="1;6pkt 6fpkt"];
950--1693[label="1;25pkt 25fpkt"];
950--2006[label="0.8;20pkt 20fpkt"];
1083--1350[label="0.0508475;6pkt 6fpkt"];
1083--1353[label="0.00847458;1pkt 1fpkt"];
1083--1368[label="0.00847458;1pkt 1fpkt"];
1083--1693[label="0.779661;92pkt 92fpkt"];
1083--1996[label="0.0338983;4pkt 4fpkt"];
1083--2006[label="0.0508475;6pkt 6fpkt"];
1083--2008[label="0.0677966;8pkt 8fpkt"];
1083--2009[label="0.0338983;4pkt 4fpkt"];
1083--2016[label="0.0338983;4pkt 4fpkt"];
1187--2008[label="0.121622;9pkt 9fpkt"];
1187--2230[label="1;17pkt 17fpkt"];
1187--2464[label="0.0714286;2pkt 2fpkt"];
1187--2518[label="0.0416667;1pkt 1fpkt"];
1189--1693[label="1;94pkt 94fpkt"];
1189--2008[label="0.308511;29pkt 29fpkt"];
1230--1416[label="0.114286;12pkt 12fpkt"];
1230--1563[label="0.0392157;4pkt 4fpkt"];
1230--1693[label="0.142857;15pkt 15fpkt"];
1230--1709[label="0.047619;5pkt 5fpkt"];
1230--1750[label="0.00952381;1pkt 1fpkt"];
1230--2006[label="0.0380952;4pkt 4fpkt"];
1230--2008[label="0.0857143;9pkt 9fpkt"];
1230--2622[label="1;105pkt 105fpkt"];
1230--2866[label="1;105pkt 105fpkt"];
1347--1693[label="0.5;1pkt 1fpkt"];
1347--1937[label="1;2pkt 2fpkt"];
1370--1693[label="1;85pkt 85fpkt"];
1370--1996[label="0.364706;31pkt 31fpkt"];
1370--2006[label="0.0117647;1pkt 1fpkt"];
1370--2008[label="0.0117647;1pkt 1fpkt"];
1370--2009[label="0.364706;31pkt 31fpkt"];
1370--2016[label="0.364706;31pkt 31fpkt"];
1382--1388[label="0.989583;95pkt 95fpkt"];
1382--1712[label="0.0566038;6pkt 6fpkt"];
1382--1971[label="0.0638298;6pkt 6fpkt"];
1382--1996[label="0.135747;30pkt 30fpkt"];
1382--2006[label="0.00452489;1pkt 1fpkt"];
1382--2008[label="0.00452489;1pkt 1fpkt"];
1382--2009[label="0.135747;30pkt 30fpkt"];
1382--2016[label="0.135747;30pkt 30fpkt"];
1382--2038[label="0.00970874;1pkt 1fpkt"];
1382--2290[label="0.0434783;2pkt 2fpkt"];
1382--2585[label="0.102564;12pkt 12fpkt"];
1388--1693[label="0.0104167;1pkt 1fpkt"];
1388--1996[label="0.260417;25pkt 25fpkt"];
1388--2009[label="0.260417;25pkt 25fpkt"];
1388--2016[label="0.260417;25pkt 25fpkt"];
1451--1693[label="1;12pkt 12fpkt"];
1451--2024[label="1;11pkt 11fpkt"];
1563--2416[label="0.0408163;4pkt 4fpkt"];
1563--2482[label="0.0188679;1pkt 1fpkt"];
1563--2486[label="0.25;5pkt 5fpkt"];
1563--2622[label="0.0392157;4pkt 4fpkt"];
1563--2866[label="0.0392157;4pkt 4fpkt"];
1632--1643[label="0.420635;106pkt 106fpkt"];
1632--1881[label="0.372549;38pkt 38fpkt"];
1632--1996[label="0.0357143;9pkt 9fpkt"];
1632--2006[label="0.0753968;19pkt 19fpkt"];
1632--2009[label="0.0357143;9pkt 9fpkt"];
1632--2016[label="0.0357143;9pkt 9fpkt"];
1632--2089[label="0.268293;11pkt 11fpkt"];
1632--2254[label="0.35514;38pkt 38fpkt"];
1632--2257[label="0.705882;12pkt 12fpkt"];
1632--2328[label="0.420635;106pkt 106fpkt"];
1632--2433[label="0.121951;5pkt 5fpkt"];
1632--2734[label="0.722222;13pkt 13fpkt"];
1632--2760[label="0.420635;106pkt 106fpkt"];
1632--2791[label="0.119048;5pkt 5fpkt"];
1643--1693[label="0.609489;167pkt 167fpkt"];
1643--1996[label="0.080292;22pkt 22fpkt"];
1643--2006[label="0.0985401;27pkt 27fpkt"];
1643--2008[label="0.0182482;5pkt 5fpkt"];
1643--2009[label="0.080292;22pkt 22fpkt"];
1643--2016[label="0.080292;22pkt 22fpkt"];
1643--2328[label="0.99635;273pkt 273fpkt"];
1643--2760[label="1;274pkt 274fpkt"];
1693--1698[label="0.030303;1pkt 1fpkt"];
1693--1712[label="0.283019;30pkt 30fpkt"];
1693--1720[label="0.0612245;3pkt 3fpkt"];
1693--1724[label="0.112676;8pkt 8fpkt"];
1693--1734[label="0.0705882;6pkt 6fpkt"];
1693--1852[label="1;45pkt 45fpkt"];
1693--1857[label="0.0338983;2pkt 2fpkt"];
1693--1915[label="0.222222;6pkt 6fpkt"];
1693--1933[label="0.000590319;2pkt 2fpkt"];
1693--1937[label="0.5;1pkt 1fpkt"];
1693--1956[label="0.0517241;3pkt 3fpkt"];
1693--1971[label="0.255319;24pkt 24fpkt"];
1693--1992[label="0.0338983;2pkt 2fpkt"];
1693--1996[label="0.0486235;136pkt 136fpkt"];
1693--1999[label="0.00448934;4pkt 4fpkt"];
1693--2000[label="0.00590319;20pkt 20fpkt"];
1693--2003[label="0.00855962;29pkt 29fpkt"];
1693--2005[label="0.0112161;38pkt 38fpkt"];
1693--2006[label="0.0438422;110pkt 110fpkt"];
1693--2007[label="0.00855962;29pkt 29fpkt"];
1693--2008[label="0.0486757;136pkt 136fpkt"];
1693--2009[label="0.0486235;136pkt 136fpkt"];
1693--2012[label="0.00448934;4pkt 4fpkt"];
1693--2014[label="0.00855962;29pkt 29fpkt"];
1693--2016[label="0.0486235;136pkt 136fpkt"];
1693--2019[label="0.00448934;4pkt 4fpkt"];
1693--2020[label="0.00855962;29pkt 29fpkt"];
1693--2024[label="1;11pkt 11fpkt"];
1693--2038[label="0.0776699;8pkt 8fpkt"];
1693--2101[label="0.5;4pkt 4fpkt"];
1693--2119[label="0.777778;42pkt 42fpkt"];
1693--2122[label="0.0652174;3pkt 3fpkt"];
1693--2127[label="0.0285714;1pkt 1fpkt"];
1693--2153[label="0.030303;2pkt 2fpkt"];
1693--2176[label="0.0232558;1pkt 1fpkt"];
1693--2194[label="0.112676;8pkt 8fpkt"];
1693--2211[label="0.0255941;14pkt 14fpkt"];
1693--2221[label="0.0588235;1pkt 1fpkt"];
1693--2237[label="1;9pkt 9fpkt"];
1693--2238[label="0.030303;1pkt 1fpkt"];
1693--2268[label="0.0816327;4pkt 4fpkt"];
1693--2290[label="0.108696;5pkt 5fpkt"];
1693--2303[label="0.142857;3pkt 3fpkt"];
1693--2315[label="0.15;3pkt 3fpkt"];
1693--2325[label="0.09375;3pkt 3fpkt"];
1693--2328[label="0.517964;173pkt 173fpkt"];
1693--2344[label="0.016129;1pkt 1fpkt"];
1693--2350[label="0.154639;15pkt 15fpkt"];
1693--2359[label="0.0232558;1pkt 1fpkt"];
1693--2370[label="0.916667;22pkt 22fpkt"];
1693--2403[label="0.03125;1pkt 1fpkt"];
1693--2425[label="0.0294118;2pkt 2fpkt"];
1693--2431[label="0.00877193;1pkt 1fpkt"];
1693--2433[label="0.0243902;1pkt 1fpkt"];
1693--2441[label="0.233333;14pkt 14fpkt"];
1693--2464[label="0.0357143;1pkt 1fpkt"];
1693--2471[label="0.0909091;3pkt 3fpkt"];
1693--2496[label="0.0294118;1pkt 1fpkt"];
1693--2498[label="0.0294118;1pkt 1fpkt"];
1693--2499[label="0.151899;12pkt 12fpkt"];
1693--2505[label="0.333333;14pkt 14fpkt"];
1693--2510[label="0.125;2pkt 2fpkt"];
1693--2518[label="0.0416667;1pkt 1fpkt"];
1693--2526[label="1;44pkt 44fpkt"];
1693--2527[label="0.0526316;5pkt 5fpkt"];
1693--2548[label="0.000590319;2pkt 2fpkt"];
1693--2581[label="0.131387;18pkt 18fpkt"];
1693--2585[label="0.0512821;6pkt 6fpkt"];
1693--2590[label="1;49pkt 49fpkt"];
1693--2602[label="0.0293309;64pkt 64fpkt"];
1693--2614[label="0.333333;1pkt 1fpkt"];
1693--2622[label="0.127119;15pkt 15fpkt"];
1693--2627[label="0.015625;1pkt 1fpkt"];
1693--2648[label="1;7pkt 7fpkt"];
1693--2650[label="0.222222;6pkt 6fpkt"];
1693--2673[label="1;136pkt 136fpkt"];
1693--2687[label="1;17pkt 17fpkt"];
1693--2689[label="0.0652174;3pkt 3fpkt"];
1693--2702[label="0.030303;2pkt 2fpkt"];
1693--2703[label="0.0483871;3pkt 3fpkt"];
1693--2711[label="0.0238095;1pkt 1fpkt"];
1693--2752[label="0.142857;3pkt 3fpkt"];
1693--2760[label="0.519403;174pkt 174fpkt"];
1693--2767[label="0.016129;1pkt 1fpkt"];
1693--2785[label="0.03125;1pkt 1fpkt"];
1693--2788[label="0.0298507;2pkt 2fpkt"];
1693--2791[label="0.0238095;1pkt 1fpkt"];
1693--2817[label="0.0294118;1pkt 1fpkt"];
1693--2826[label="1;44pkt 44fpkt"];
1693--2827[label="0.0526316;5pkt 5fpkt"];
1693--2866[label="0.127119;15pkt 15fpkt"];
1693--2875[label="1;7pkt 7fpkt"];
1693--2892[label="0.119403;8pkt 8fpkt"];
1693--2916[label="0.0344828;2pkt 2fpkt"];
2153--2702[label="1;66pkt 66fpkt"];
2257--2734[label="1;17pkt 17fpkt"];
2328--2760[label="1;334pkt 334fpkt"];
2344--2767[label="1;62pkt 62fpkt"];
2403--2785[label="1;32pkt 32fpkt"];
2526--2826[label="1;44pkt 44fpkt"];
2622--2866[label="1;118pkt 118fpkt"];
2648--2875[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="196.120.26.60" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_17{
style=filled;
color=gray75;
387[label="13.192.25.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
388[label="146.20.42.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
1427[label="146.20.42.113;s;1pkt 1fpkt", shape=hexagon, color=black];
2348[label="146.20.42.113;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat17[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.20.42.113:1088, 13.192.25.214:25110}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25110: (50%)&lt;BR/&gt; 1088: (50%)&gt;];
}
387--388[label="1;1pkt 1fpkt"];
387--1427[label="1;1pkt 1fpkt"];
387--2348[label="1;1pkt 1fpkt"];
388--1427[label="1;1pkt 1fpkt"];
388--2348[label="1;1pkt 1fpkt"];
1427--2348[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="13.192.25.214" dst_port="25110" src_ip="146.20.42.113" src_port="1088"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34151,2.26364,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_18{
style=filled;
color=gray75;
25[label="219.34.193.220d;66pkt 66fpkt", shape=rectangle, color=red];
178[label="197.11.24.239;s;1476pkt 1476fpkt", shape=diamond, color=yellow];
420[label="219.34.193.220;d;181pkt 181fpkt", shape=diamond, color=yellow];
1155[label="192.136.87.163;d;83pkt 83fpkt", shape=diamond, color=yellow];
1210[label="192.136.87.172;d;95pkt 95fpkt", shape=diamond, color=yellow];
1224[label="192.136.87.133;d;94pkt 94fpkt", shape=diamond, color=yellow];
1509[label="197.11.24.239;s;909pkt 909fpkt", shape=hexagon, color=black];
1741[label="219.34.193.220;d;181pkt 181fpkt", shape=hexagon, color=black];
stat18[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.11.24.239:*, *:80}[91.2158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8817%)&lt;BR/&gt; 53: (0.664506%)&lt;BR/&gt; 65534: (0.502431%)&lt;BR/&gt; 10000: (0.421394%)&lt;BR/&gt; 41618: (0.0810373%)&gt;];
}
25--178[label="1;66pkt 66fpkt"];
25--420[label="1;66pkt 66fpkt"];
25--1509[label="1;66pkt 66fpkt"];
25--1741[label="1;66pkt 66fpkt"];
178--420[label="0.701657;127pkt 127fpkt"];
178--632[label="0.0125;1pkt 1fpkt"];
178--639[label="0.0140845;1pkt 1fpkt"];
178--704[label="0.0144928;1pkt 1fpkt"];
178--799[label="0.0147059;1pkt 1fpkt"];
178--1002[label="0.0531915;5pkt 5fpkt"];
178--1155[label="0.915663;76pkt 76fpkt"];
178--1184[label="0.857143;102pkt 102fpkt"];
178--1210[label="0.821053;78pkt 78fpkt"];
178--1224[label="0.819149;77pkt 77fpkt"];
178--1509[label="1;909pkt 909fpkt"];
178--1715[label="0.0178571;1pkt 1fpkt"];
178--1741[label="0.701657;127pkt 127fpkt"];
178--1855[label="0.0147059;1pkt 1fpkt"];
178--1997[label="0.0352304;52pkt 52fpkt"];
178--2000[label="0.00135501;2pkt 2fpkt"];
178--2001[label="0.0372629;55pkt 55fpkt"];
178--2002[label="0.0359079;53pkt 53fpkt"];
178--2003[label="0.00135501;2pkt 2fpkt"];
178--2004[label="0.045393;67pkt 67fpkt"];
178--2010[label="0.0352304;52pkt 52fpkt"];
178--2013[label="0.0359079;53pkt 53fpkt"];
178--2014[label="0.00135501;2pkt 2fpkt"];
178--2015[label="0.045393;67pkt 67fpkt"];
178--2017[label="0.0352304;52pkt 52fpkt"];
178--2020[label="0.00135501;2pkt 2fpkt"];
178--2021[label="0.045393;67pkt 67fpkt"];
420--1509[label="0.701657;127pkt 127fpkt"];
420--1694[label="0.00552486;1pkt 1fpkt"];
420--1710[label="0.292818;53pkt 53fpkt"];
420--1741[label="1;181pkt 181fpkt"];
420--2004[label="0.0331492;6pkt 6fpkt"];
420--2015[label="0.0331492;6pkt 6fpkt"];
420--2021[label="0.0331492;6pkt 6fpkt"];
1155--1369[label="0.0120482;1pkt 1fpkt"];
1155--1509[label="0.626506;52pkt 52fpkt"];
1155--1861[label="0.0120482;1pkt 1fpkt"];
1155--1997[label="0.0240964;2pkt 2fpkt"];
1155--2000[label="0.0120482;1pkt 1fpkt"];
1155--2001[label="0.0240964;2pkt 2fpkt"];
1155--2002[label="0.060241;5pkt 5fpkt"];
1155--2003[label="0.0240964;2pkt 2fpkt"];
1155--2004[label="0.0481928;4pkt 4fpkt"];
1155--2005[label="0.0120482;1pkt 1fpkt"];
1155--2010[label="0.0240964;2pkt 2fpkt"];
1155--2013[label="0.060241;5pkt 5fpkt"];
1155--2014[label="0.0240964;2pkt 2fpkt"];
1155--2015[label="0.0481928;4pkt 4fpkt"];
1155--2017[label="0.0240964;2pkt 2fpkt"];
1155--2020[label="0.0240964;2pkt 2fpkt"];
1155--2021[label="0.0481928;4pkt 4fpkt"];
1155--2226[label="0.0120482;1pkt 1fpkt"];
1210--1509[label="0.568421;54pkt 54fpkt"];
1210--1997[label="0.0421053;4pkt 4fpkt"];
1210--2001[label="0.0210526;2pkt 2fpkt"];
1210--2002[label="0.0526316;5pkt 5fpkt"];
1210--2004[label="0.0421053;4pkt 4fpkt"];
1210--2010[label="0.0421053;4pkt 4fpkt"];
1210--2013[label="0.0526316;5pkt 5fpkt"];
1210--2015[label="0.0421053;4pkt 4fpkt"];
1210--2017[label="0.0421053;4pkt 4fpkt"];
1210--2021[label="0.0421053;4pkt 4fpkt"];
1224--1509[label="0.489362;46pkt 46fpkt"];
1224--1997[label="0.0212766;2pkt 2fpkt"];
1224--2001[label="0.0319149;3pkt 3fpkt"];
1224--2002[label="0.0319149;3pkt 3fpkt"];
1224--2004[label="0.0319149;3pkt 3fpkt"];
1224--2010[label="0.0212766;2pkt 2fpkt"];
1224--2013[label="0.0319149;3pkt 3fpkt"];
1224--2015[label="0.0319149;3pkt 3fpkt"];
1224--2017[label="0.0212766;2pkt 2fpkt"];
1224--2021[label="0.0319149;3pkt 3fpkt"];
1509--1715[label="0.0178571;1pkt 1fpkt"];
1509--1741[label="0.701657;127pkt 127fpkt"];
1509--1855[label="0.0147059;1pkt 1fpkt"];
1509--1997[label="0.0572057;52pkt 52fpkt"];
1509--2000[label="0.00220022;2pkt 2fpkt"];
1509--2001[label="0.0605061;55pkt 55fpkt"];
1509--2002[label="0.0583058;53pkt 53fpkt"];
1509--2003[label="0.00220022;2pkt 2fpkt"];
1509--2004[label="0.0737074;67pkt 67fpkt"];
1509--2010[label="0.0572057;52pkt 52fpkt"];
1509--2013[label="0.0583058;53pkt 53fpkt"];
1509--2014[label="0.00220022;2pkt 2fpkt"];
1509--2015[label="0.0737074;67pkt 67fpkt"];
1509--2017[label="0.0572057;52pkt 52fpkt"];
1509--2020[label="0.00220022;2pkt 2fpkt"];
1509--2021[label="0.0737074;67pkt 67fpkt"];
1741--2004[label="0.0331492;6pkt 6fpkt"];
1741--2015[label="0.0331492;6pkt 6fpkt"];
1741--2021[label="0.0331492;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="197.11.24.239"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08268,2.23043,901,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_19{
style=filled;
color=gray75;
98[label="149.177.194.208;d;202pkt 202fpkt", shape=diamond, color=yellow];
535[label="198.189.5.35;s;7pkt 7fpkt", shape=diamond, color=yellow];
2124[label="198.189.5.35;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2604[label="208.117.92.219;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2691[label="198.189.5.35;2pkt 2fpkt", shape=invtriangle, color=brown];
2859[label="208.117.92.219;19pkt 19fpkt", shape=invtriangle, color=brown];
2887[label="198.189.5.35;1pkt 1fpkt", shape=invhouse, color=bisque];
stat19[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:21, 149.177.194.208:*}[58.8235%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (31.0757%)&lt;BR/&gt; 20: (4.38247%)&lt;BR/&gt; 1214: (3.38645%)&lt;BR/&gt; 5190: (1.59363%)&lt;BR/&gt; 1863: (1.59363%)&gt;];
}
98--423[label="0.75;3pkt 3fpkt"];
98--469[label="0.03125;1pkt 1fpkt"];
98--535[label="1;7pkt 7fpkt"];
98--627[label="1;1pkt 1fpkt"];
98--693[label="1;3pkt 3fpkt"];
98--993[label="0.9;9pkt 9fpkt"];
98--1594[label="1;155pkt 155fpkt"];
98--1706[label="1;1pkt 1fpkt"];
98--2124[label="1;1pkt 1fpkt"];
98--2604[label="0.894737;17pkt 17fpkt"];
98--2691[label="1;2pkt 2fpkt"];
98--2859[label="0.894737;17pkt 17fpkt"];
98--2887[label="1;1pkt 1fpkt"];
535--1594[label="0.714286;5pkt 5fpkt"];
535--2124[label="1;1pkt 1fpkt"];
535--2691[label="1;2pkt 2fpkt"];
535--2887[label="1;1pkt 1fpkt"];
2124--2691[label="1;1pkt 1fpkt"];
2124--2887[label="1;1pkt 1fpkt"];
2604--2859[label="1;19pkt 19fpkt"];
2691--2887[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.194.208" src_port="21"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699975,2.1774,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_20{
style=filled;
color=gray75;
376[label="200.171.107.41;d;72pkt 72fpkt", shape=diamond, color=yellow];
463[label="165.22.59.161;s;16pkt 16fpkt", shape=diamond, color=yellow];
619[label="165.22.206.183;s;10pkt 10fpkt", shape=diamond, color=yellow];
623[label="165.22.16.38;s;8pkt 8fpkt", shape=diamond, color=yellow];
694[label="165.22.6.142;s;122pkt 122fpkt", shape=diamond, color=yellow];
696[label="163.78.76.145;d;31pkt 31fpkt", shape=diamond, color=yellow];
701[label="192.78.21.143;d;9pkt 9fpkt", shape=diamond, color=yellow];
792[label="203.87.118.125;d;5pkt 5fpkt", shape=diamond, color=yellow];
898[label="129.6.59.96;d;48pkt 48fpkt", shape=diamond, color=yellow];
997[label="205.17.166.146;d;95pkt 95fpkt", shape=diamond, color=yellow];
1010[label="165.22.4.190;s;131pkt 131fpkt", shape=diamond, color=yellow];
1385[label="200.171.107.41;d;56pkt 56fpkt", shape=hexagon, color=black];
1415[label="165.22.59.161;s;16pkt 16fpkt", shape=hexagon, color=black];
1613[label="163.78.76.145;d;23pkt 23fpkt", shape=hexagon, color=black];
1815[label="192.78.21.143;d;9pkt 9fpkt", shape=hexagon, color=black];
1862[label="205.17.166.146;d;95pkt 95fpkt", shape=hexagon, color=black];
2130[label="165.22.6.37;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2173[label="196.217.132.53;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2319[label="165.22.49.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2539[label="165.22.4.190;133pkt 133fpkt", shape=pentagon, color=darkviolet];
2695[label="165.22.6.37;15pkt 15fpkt", shape=invtriangle, color=brown];
stat20[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.22.4.190:*, *:*}[34.0967%]&lt;BR/&gt;{*:*, *:6667}[32.57%]&lt;BR/&gt;{165.22.6.142:*, *:*}[31.0433%]&lt;BR/&gt;{*:113, *:*}[28.7532%]&lt;BR/&gt;{*:*, 205.17.166.146:*}[24.6819%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (16.6141%)&lt;BR/&gt; 113: (16.4564%)&lt;BR/&gt; 6665: (6.62461%)&lt;BR/&gt; 0: (5.25762%)&lt;BR/&gt; 6664: (1.36698%)&gt;];
}
376--463[label="0.375;6pkt 6fpkt"];
376--619[label="0.1;1pkt 1fpkt"];
376--694[label="0.277778;20pkt 20fpkt"];
376--805[label="0.0833333;6pkt 6fpkt"];
376--1010[label="0.277778;20pkt 20fpkt"];
376--1385[label="1;56pkt 56fpkt"];
376--1415[label="0.375;6pkt 6fpkt"];
376--2130[label="0.0714286;1pkt 1fpkt"];
376--2173[label="0.0238095;1pkt 1fpkt"];
376--2539[label="0.277778;20pkt 20fpkt"];
376--2695[label="0.0666667;1pkt 1fpkt"];
463--792[label="0.6;3pkt 3fpkt"];
463--1385[label="0.375;6pkt 6fpkt"];
463--1415[label="1;16pkt 16fpkt"];
619--1385[label="0.1;1pkt 1fpkt"];
623--701[label="0.125;1pkt 1fpkt"];
623--792[label="0.2;1pkt 1fpkt"];
623--898[label="0.25;2pkt 2fpkt"];
623--1815[label="0.125;1pkt 1fpkt"];
694--696[label="0.741935;23pkt 23fpkt"];
694--701[label="0.222222;2pkt 2fpkt"];
694--997[label="0.242105;23pkt 23fpkt"];
694--1385[label="0.357143;20pkt 20fpkt"];
694--1613[label="0.695652;16pkt 16fpkt"];
694--1815[label="0.222222;2pkt 2fpkt"];
694--1862[label="0.242105;23pkt 23fpkt"];
694--2000[label="0.00819672;1pkt 1fpkt"];
694--2003[label="0.00819672;1pkt 1fpkt"];
694--2014[label="0.00819672;1pkt 1fpkt"];
694--2020[label="0.00819672;1pkt 1fpkt"];
696--1010[label="0.0645161;2pkt 2fpkt"];
696--1613[label="1;23pkt 23fpkt"];
696--2173[label="0.0322581;1pkt 1fpkt"];
696--2319[label="1;1pkt 1fpkt"];
696--2539[label="0.0645161;2pkt 2fpkt"];
701--1815[label="1;9pkt 9fpkt"];
701--2130[label="0.111111;1pkt 1fpkt"];
701--2173[label="0.111111;1pkt 1fpkt"];
701--2695[label="0.222222;2pkt 2fpkt"];
792--1415[label="0.6;3pkt 3fpkt"];
898--1010[label="0.895833;43pkt 43fpkt"];
898--2130[label="0.142857;2pkt 2fpkt"];
898--2173[label="0.0238095;1pkt 1fpkt"];
898--2539[label="0.875;42pkt 42fpkt"];
898--2695[label="0.133333;2pkt 2fpkt"];
997--1010[label="0.589474;56pkt 56fpkt"];
997--1862[label="1;95pkt 95fpkt"];
997--2130[label="0.142857;2pkt 2fpkt"];
997--2539[label="0.589474;56pkt 56fpkt"];
997--2695[label="0.133333;2pkt 2fpkt"];
1010--1385[label="0.214286;12pkt 12fpkt"];
1010--1613[label="0.0869565;2pkt 2fpkt"];
1010--1862[label="0.589474;56pkt 56fpkt"];
1010--2539[label="0.992366;130pkt 130fpkt"];
1385--1415[label="0.375;6pkt 6fpkt"];
1385--2130[label="0.0714286;1pkt 1fpkt"];
1385--2539[label="0.214286;12pkt 12fpkt"];
1385--2695[label="0.0666667;1pkt 1fpkt"];
1613--2319[label="1;1pkt 1fpkt"];
1613--2539[label="0.0869565;2pkt 2fpkt"];
1815--2130[label="0.111111;1pkt 1fpkt"];
1815--2173[label="0.111111;1pkt 1fpkt"];
1815--2695[label="0.222222;2pkt 2fpkt"];
1862--2130[label="0.142857;2pkt 2fpkt"];
1862--2539[label="0.589474;56pkt 56fpkt"];
1862--2695[label="0.133333;2pkt 2fpkt"];
2130--2695[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="165.22.4.190"/>
      <filter src_ip="165.22.6.142"/>
      <filter dst_ip="205.17.166.146"/>
      <filter src_port="113"/>
      <filter dst_port="6667"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_21{
style=filled;
color=gray75;
361[label="165.22.7.65;s;204pkt 204fpkt", shape=diamond, color=yellow];
464[label="137.51.49.174;d;202pkt 202fpkt", shape=diamond, color=yellow];
1374[label="165.22.7.65;s;131pkt 131fpkt", shape=hexagon, color=black];
stat21[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.22.7.65:*, 137.51.49.174:7033}[97.0874%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7033: (49.0689%)&lt;BR/&gt; 0: (1.11732%)&lt;BR/&gt; 4876: (0.372439%)&lt;BR/&gt; 53: (0.372439%)&lt;BR/&gt; 2317: (0.27933%)&gt;];
}
361--464[label="0.990099;200pkt 200fpkt"];
361--1374[label="1;131pkt 131fpkt"];
464--478[label="0.0070922;1pkt 1fpkt"];
464--1374[label="0.969466;127pkt 127fpkt"];
464--2149[label="0.015873;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="137.51.49.174" dst_port="7033" src_ip="165.22.7.65"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02629,2.15283,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_22{
style=filled;
color=gray75;
472[label="196.212.170.11;s;2pkt 2fpkt", shape=diamond, color=yellow];
473[label="110.200.35.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
1543[label="196.212.170.11;s;2pkt 2fpkt", shape=hexagon, color=black];
1854[label="110.200.35.37;d;1pkt 1fpkt", shape=hexagon, color=black];
1946[label="196.212.170.11;s;2pkt 2fpkt", shape=polygon, color=gold];
2069[label="196.212.170.11;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2669[label="196.212.170.11;2pkt 2fpkt", shape=invtriangle, color=brown];
stat22[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.212.170.11:2959, 110.200.35.37:6699}[50%]&lt;BR/&gt;{196.212.170.11:2974, 147.67.82.131:123}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (29.1667%)&lt;BR/&gt; 2959: (29.1667%)&lt;BR/&gt; 2974: (20.8333%)&lt;BR/&gt; 123: (20.8333%)&gt;];
}
472--473[label="1;1pkt 1fpkt"];
472--1543[label="1;2pkt 2fpkt"];
472--1854[label="1;1pkt 1fpkt"];
472--1946[label="1;2pkt 2fpkt"];
472--2069[label="1;2pkt 2fpkt"];
472--2669[label="1;2pkt 2fpkt"];
473--1543[label="1;1pkt 1fpkt"];
473--1854[label="1;1pkt 1fpkt"];
473--1946[label="1;1pkt 1fpkt"];
473--2069[label="1;1pkt 1fpkt"];
473--2669[label="1;1pkt 1fpkt"];
1543--1854[label="1;1pkt 1fpkt"];
1543--1946[label="1;2pkt 2fpkt"];
1543--2069[label="1;2pkt 2fpkt"];
1543--2669[label="1;2pkt 2fpkt"];
1854--1946[label="1;1pkt 1fpkt"];
1854--2069[label="1;1pkt 1fpkt"];
1854--2669[label="1;1pkt 1fpkt"];
1946--2069[label="1;2pkt 2fpkt"];
1946--2669[label="1;2pkt 2fpkt"];
2069--2669[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.67.82.131" dst_port="123" src_ip="196.212.170.11" src_port="2974"/>
      <filter dst_ip="110.200.35.37" dst_port="6699" src_ip="196.212.170.11" src_port="2959"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_23{
style=filled;
color=gray75;
471[label="196.212.170.11;d;2pkt 2fpkt", shape=diamond, color=yellow];
474[label="110.200.35.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat23[shape=component, label=&lt;Rules:&lt;BR/&gt;{110.200.35.37:6699, 196.212.170.11:2959}[50%]&lt;BR/&gt;{147.67.82.131:123, 196.212.170.11:2974}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (33.3333%)&lt;BR/&gt; 2959: (33.3333%)&lt;BR/&gt; 2974: (16.6667%)&lt;BR/&gt; 123: (16.6667%)&gt;];
}
471--474[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.212.170.11" dst_port="2974" src_ip="147.67.82.131" src_port="123"/>
      <filter dst_ip="196.212.170.11" dst_port="2959" src_ip="110.200.35.37" src_port="6699"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.33457,2.16064,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_24{
style=filled;
color=gray75;
75[label="197.11.31.205;s;360pkt 360fpkt", shape=diamond, color=yellow];
209[label="193.7.63.255;d;2pkt 2fpkt", shape=diamond, color=yellow];
475[label="197.11.31.204;s;238pkt 238fpkt", shape=diamond, color=yellow];
486[label="75.129.71.45;d;322pkt 322fpkt", shape=diamond, color=yellow];
1409[label="197.11.31.205;s;211pkt 211fpkt", shape=hexagon, color=black];
1636[label="75.129.71.45;d;322pkt 322fpkt", shape=hexagon, color=black];
1809[label="193.7.63.255;d;2pkt 2fpkt", shape=hexagon, color=black];
1939[label="197.11.31.205;s;211pkt 211fpkt", shape=polygon, color=gold];
2566[label="197.11.31.204;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2841[label="197.11.31.204;2pkt 2fpkt", shape=invtriangle, color=brown];
2928[label="197.11.31.204;2pkt 2fpkt", shape=invhouse, color=bisque];
stat24[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.11.31.204:*, *:*}[40%]&lt;BR/&gt;{197.11.31.205:*, 75.129.71.45:*}[35%]&lt;BR/&gt;{197.11.31.205:6667, *:*}[29.1667%]&lt;BR/&gt;{197.11.31.205:*, *:113}[28.1667%]&lt;BR/&gt;{*:*, 75.129.71.45:113}[27%]&lt;BR/&gt;{*:6667, 75.129.71.45:*}[27%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (24.5672%)&lt;BR/&gt; 113: (23.6716%)&lt;BR/&gt; 1080: (1.01493%)&lt;BR/&gt; 4372: (0.328358%)&lt;BR/&gt; 4641: (0.298507%)&gt;];
}
75--209[label="1;2pkt 2fpkt"];
75--486[label="0.652174;210pkt 210fpkt"];
75--1409[label="1;211pkt 211fpkt"];
75--1636[label="0.652174;210pkt 210fpkt"];
75--1809[label="1;2pkt 2fpkt"];
75--1939[label="1;211pkt 211fpkt"];
209--1409[label="1;2pkt 2fpkt"];
209--1809[label="1;2pkt 2fpkt"];
209--1939[label="1;2pkt 2fpkt"];
475--486[label="0.470588;112pkt 112fpkt"];
475--1636[label="0.470588;112pkt 112fpkt"];
475--2566[label="0.333333;1pkt 1fpkt"];
486--1409[label="0.616114;130pkt 130fpkt"];
486--1636[label="1;322pkt 322fpkt"];
486--1939[label="0.616114;130pkt 130fpkt"];
1409--1636[label="0.616114;130pkt 130fpkt"];
1409--1809[label="1;2pkt 2fpkt"];
1409--1939[label="1;211pkt 211fpkt"];
1636--1939[label="0.616114;130pkt 130fpkt"];
1809--1939[label="1;2pkt 2fpkt"];
2566--2841[label="1;2pkt 2fpkt"];
2566--2928[label="1;2pkt 2fpkt"];
2841--2928[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="197.11.31.204"/>
      <filter dst_ip="75.129.71.45" src_ip="197.11.31.205"/>
      <filter src_ip="197.11.31.205" src_port="6667"/>
      <filter dst_port="113" src_ip="197.11.31.205"/>
      <filter dst_ip="75.129.71.45" src_port="6667"/>
      <filter dst_ip="75.129.71.45" dst_port="113"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_25{
style=filled;
color=gray75;
172[label="165.22.36.164;d;238pkt 238fpkt", shape=diamond, color=yellow];
277[label="202.175.193.130;s;119pkt 119fpkt", shape=diamond, color=yellow];
490[label="196.117.183.36;s;95pkt 95fpkt", shape=diamond, color=yellow];
1774[label="165.22.36.164;d;238pkt 238fpkt", shape=hexagon, color=black];
stat25[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.175.193.130:10080, 165.22.36.164:*}[50.4202%]&lt;BR/&gt;{196.117.183.36:82, 165.22.36.164:*}[39.916%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10080: (25.942%)&lt;BR/&gt; 82: (20.6522%)&lt;BR/&gt; 119: (2.6087%)&lt;BR/&gt; 0: (1.5942%)&lt;BR/&gt; 4892: (0.217391%)&gt;];
}
172--239[label="0.00588235;1pkt 1fpkt"];
172--277[label="1;119pkt 119fpkt"];
172--490[label="1;95pkt 95fpkt"];
172--1774[label="1;238pkt 238fpkt"];
277--1774[label="1;119pkt 119fpkt"];
490--1774[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter dst_ip="165.22.36.164" src_ip="202.175.193.130" src_port="10080"/>
      <filter dst_ip="165.22.36.164" src_ip="196.117.183.36" src_port="82"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_26{
style=filled;
color=gray75;
415[label="219.250.198.143;s;432pkt 432fpkt", shape=diamond, color=yellow];
495[label="147.87.124.42;d;432pkt 432fpkt", shape=diamond, color=yellow];
1727[label="147.87.124.42;d;262pkt 262fpkt", shape=hexagon, color=black];
stat26[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.250.198.143:443, 147.87.124.42:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3054: (0.133215%)&lt;BR/&gt; 3053: (0.133215%)&lt;BR/&gt; 3052: (0.133215%)&lt;BR/&gt; 3051: (0.133215%)&gt;];
}
415--495[label="1;432pkt 432fpkt"];
415--1727[label="1;262pkt 262fpkt"];
495--1727[label="1;262pkt 262fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.124.42" src_ip="219.250.198.143" src_port="443"/>
    </slice>
    <from sec="994482004" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_27{
style=filled;
color=gray75;
532[label="192.232.73.127;s;58pkt 58fpkt", shape=diamond, color=yellow];
533[label="149.168.41.12;d;59pkt 59fpkt", shape=diamond, color=yellow];
1523[label="149.168.41.12;d;59pkt 59fpkt", shape=hexagon, color=black];
stat27[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.232.73.127:80, 149.168.41.12:*}[98.3051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1153: (0.852273%)&lt;BR/&gt; 1152: (0.852273%)&lt;BR/&gt; 1146: (0.852273%)&lt;BR/&gt; 1143: (0.852273%)&gt;];
}
532--533[label="1;58pkt 58fpkt"];
532--1523[label="1;58pkt 58fpkt"];
533--1523[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="149.168.41.12" src_ip="192.232.73.127" src_port="80"/>
    </slice>
    <from sec="994482282" usec="0"/>
    <to sec="994482477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699975,2.1774,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_28{
style=filled;
color=gray75;
99[label="165.22.48.1;d;192pkt 192fpkt", shape=diamond, color=yellow];
470[label="165.22.48.150;d;115pkt 115fpkt", shape=diamond, color=yellow];
568[label="219.237.96.226;s;20pkt 20fpkt", shape=diamond, color=yellow];
1019[label="13.160.208.197;s;24pkt 24fpkt", shape=diamond, color=yellow];
1069[label="219.1.186.41;s;15pkt 15fpkt", shape=diamond, color=yellow];
1298[label="165.22.48.1;d;147pkt 147fpkt", shape=hexagon, color=black];
1481[label="165.22.48.150;d;84pkt 84fpkt", shape=hexagon, color=black];
1615[label="196.217.132.25;d;164pkt 164fpkt", shape=hexagon, color=black];
2141[label="219.1.186.41;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2334[label="12.192.72.109;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2529[label="13.8.206.184;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2554[label="13.160.208.195;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2698[label="219.1.186.41;15pkt 15fpkt", shape=invtriangle, color=brown];
stat28[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 196.217.132.25:*}[24.9084%]&lt;BR/&gt;{*:25, 165.22.48.1:*}[23.6264%]&lt;BR/&gt;{*:25, 165.22.48.150:*}[20.8791%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.2563%)&lt;BR/&gt; 113: (2.17654%)&lt;BR/&gt; 80: (2.11608%)&lt;BR/&gt; 0: (1.9347%)&lt;BR/&gt; 53: (0.967352%)&gt;];
}
99--568[label="0.05;1pkt 1fpkt"];
99--1019[label="0.0833333;2pkt 2fpkt"];
99--1069[label="0.333333;5pkt 5fpkt"];
99--1217[label="0.133333;2pkt 2fpkt"];
99--1298[label="1;147pkt 147fpkt"];
99--1997[label="0.0416667;8pkt 8fpkt"];
99--2001[label="0.00520833;1pkt 1fpkt"];
99--2002[label="0.0104167;2pkt 2fpkt"];
99--2004[label="0.00520833;1pkt 1fpkt"];
99--2010[label="0.0416667;8pkt 8fpkt"];
99--2013[label="0.0104167;2pkt 2fpkt"];
99--2015[label="0.00520833;1pkt 1fpkt"];
99--2017[label="0.0416667;8pkt 8fpkt"];
99--2021[label="0.00520833;1pkt 1fpkt"];
99--2141[label="0.333333;5pkt 5fpkt"];
99--2334[label="0.222222;2pkt 2fpkt"];
99--2554[label="0.181818;2pkt 2fpkt"];
99--2698[label="0.333333;5pkt 5fpkt"];
470--1069[label="0.4;6pkt 6fpkt"];
470--1217[label="0.6;9pkt 9fpkt"];
470--1481[label="1;84pkt 84fpkt"];
470--2141[label="0.4;6pkt 6fpkt"];
470--2529[label="0.0625;1pkt 1fpkt"];
470--2698[label="0.4;6pkt 6fpkt"];
568--822[label="0.1;2pkt 2fpkt"];
568--1007[label="0.1;2pkt 2fpkt"];
568--1298[label="0.05;1pkt 1fpkt"];
568--1521[label="0.05;1pkt 1fpkt"];
568--1551[label="0.0833333;1pkt 1fpkt"];
568--1556[label="0.1;2pkt 2fpkt"];
568--1951[label="0.05;1pkt 1fpkt"];
1019--1561[label="0.0833333;1pkt 1fpkt"];
1019--1615[label="0.0416667;1pkt 1fpkt"];
1019--1950[label="0.0833333;1pkt 1fpkt"];
1069--1298[label="0.333333;5pkt 5fpkt"];
1069--1481[label="0.266667;4pkt 4fpkt"];
1069--2141[label="1;15pkt 15fpkt"];
1069--2698[label="1;15pkt 15fpkt"];
1298--1997[label="0.0544218;8pkt 8fpkt"];
1298--2010[label="0.0544218;8pkt 8fpkt"];
1298--2017[label="0.0544218;8pkt 8fpkt"];
1298--2141[label="0.333333;5pkt 5fpkt"];
1298--2698[label="0.333333;5pkt 5fpkt"];
1481--2141[label="0.266667;4pkt 4fpkt"];
1481--2698[label="0.266667;4pkt 4fpkt"];
1615--1999[label="0.0121951;2pkt 2fpkt"];
1615--2000[label="0.0182927;3pkt 3fpkt"];
1615--2003[label="0.0182927;3pkt 3fpkt"];
1615--2005[label="0.0304878;5pkt 5fpkt"];
1615--2007[label="0.0121951;2pkt 2fpkt"];
1615--2012[label="0.0121951;2pkt 2fpkt"];
1615--2014[label="0.0182927;3pkt 3fpkt"];
1615--2019[label="0.0121951;2pkt 2fpkt"];
1615--2020[label="0.0182927;3pkt 3fpkt"];
1615--2077[label="0.333333;3pkt 3fpkt"];
1615--2322[label="0.0555556;1pkt 1fpkt"];
1615--2556[label="0.0357143;1pkt 1fpkt"];
1615--2657[label="0.588235;10pkt 10fpkt"];
1615--2756[label="0.0555556;1pkt 1fpkt"];
2141--2698[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="165.22.48.1" src_port="25"/>
      <filter dst_ip="196.217.132.25" src_port="25"/>
      <filter dst_ip="165.22.48.150" src_port="25"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,901,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_30{
style=filled;
color=gray75;
593[label="150.165.176.228;s;26pkt 26fpkt", shape=diamond, color=yellow];
1496[label="150.165.176.228;s;26pkt 26fpkt", shape=hexagon, color=black];
2619[label="150.165.176.228;25pkt 25fpkt", shape=pentagon, color=darkviolet];
stat30[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.165.176.228:80, 196.217.170.165:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1199: (1.94805%)&lt;BR/&gt; 1198: (1.94805%)&lt;BR/&gt; 1197: (1.94805%)&lt;BR/&gt; 1196: (1.94805%)&gt;];
}
593--594[label="1;26pkt 26fpkt"];
593--1496[label="1;26pkt 26fpkt"];
593--2619[label="1;25pkt 25fpkt"];
1496--2619[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="196.217.170.165" src_ip="150.165.176.228" src_port="80"/>
    </slice>
    <from sec="994482271" usec="0"/>
    <to sec="994482616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31187,2.27766,901,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_31{
style=filled;
color=gray75;
2[label="195.76.98.6s;1pkt 1fpkt", shape=rectangle, color=red];
595[label="195.76.98.6;s;339pkt 339fpkt", shape=diamond, color=yellow];
2045[label="195.76.98.6;340pkt 340fpkt", shape=pentagon, color=darkviolet];
stat31[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.76.98.6:80, 147.87.129.190:*}[98.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1526: (0.220588%)&lt;BR/&gt; 6695: (0.147059%)&lt;BR/&gt; 1748: (0.147059%)&lt;BR/&gt; 1577: (0.147059%)&gt;];
}
2--411[label="1;1pkt 1fpkt"];
2--595[label="1;1pkt 1fpkt"];
2--2045[label="1;1pkt 1fpkt"];
595--2006[label="0.120944;41pkt 41fpkt"];
595--2045[label="1;339pkt 339fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.129.190" src_ip="195.76.98.6" src_port="80"/>
    </slice>
    <from sec="994482022" usec="0"/>
    <to sec="994482984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_32{
style=filled;
color=gray75;
534[label="149.168.41.12;s;59pkt 59fpkt", shape=diamond, color=yellow];
596[label="192.232.73.127;d;58pkt 58fpkt", shape=diamond, color=yellow];
1455[label="149.168.41.12;s;55pkt 55fpkt", shape=hexagon, color=black];
2070[label="149.168.41.12;70pkt 70fpkt", shape=pentagon, color=darkviolet];
stat32[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.168.41.12:*, 192.232.73.127:80}[81.6901%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1143: (0.826446%)&lt;BR/&gt; 1141: (0.826446%)&lt;BR/&gt; 1140: (0.826446%)&lt;BR/&gt; 1139: (0.826446%)&gt;];
}
534--596[label="1;58pkt 58fpkt"];
534--1455[label="1;55pkt 55fpkt"];
534--2002[label="0.389831;23pkt 23fpkt"];
534--2013[label="0.389831;23pkt 23fpkt"];
534--2070[label="0.983051;58pkt 58fpkt"];
596--1455[label="1;55pkt 55fpkt"];
596--2002[label="0.396552;23pkt 23fpkt"];
596--2013[label="0.396552;23pkt 23fpkt"];
596--2070[label="1;58pkt 58fpkt"];
1455--2002[label="0.418182;23pkt 23fpkt"];
1455--2013[label="0.418182;23pkt 23fpkt"];
1455--2070[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_ip="192.232.73.127" dst_port="80" src_ip="149.168.41.12"/>
    </slice>
    <from sec="994482282" usec="0"/>
    <to sec="994483115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_33{
style=filled;
color=gray75;
419[label="160.164.69.96;d;31pkt 31fpkt", shape=diamond, color=yellow];
459[label="147.87.224.166;d;88pkt 88fpkt", shape=diamond, color=yellow];
1183[label="160.164.69.100;d;26pkt 26fpkt", shape=diamond, color=yellow];
1659[label="208.146.129.130;s;110pkt 110fpkt", shape=hexagon, color=black];
2390[label="208.146.129.131;27pkt 27fpkt", shape=pentagon, color=darkviolet];
stat33[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.146.129.130:80, *:*}[63.3028%]&lt;BR/&gt;{*:80, 147.87.224.166:*}[40.367%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51158: (0.35461%)&lt;BR/&gt; 51157: (0.35461%)&lt;BR/&gt; 51156: (0.35461%)&lt;BR/&gt; 51116: (0.35461%)&gt;];
}
419--1659[label="0.903226;28pkt 28fpkt"];
419--1996[label="0.225806;7pkt 7fpkt"];
419--2009[label="0.225806;7pkt 7fpkt"];
419--2016[label="0.225806;7pkt 7fpkt"];
419--2387[label="0.903226;28pkt 28fpkt"];
419--2390[label="0.111111;3pkt 3fpkt"];
419--2782[label="0.111111;3pkt 3fpkt"];
459--1599[label="1;78pkt 78fpkt"];
459--1659[label="0.295455;26pkt 26fpkt"];
459--1996[label="0.113636;10pkt 10fpkt"];
459--2006[label="0.0454545;4pkt 4fpkt"];
459--2009[label="0.113636;10pkt 10fpkt"];
459--2016[label="0.113636;10pkt 10fpkt"];
459--2387[label="0.363636;32pkt 32fpkt"];
459--2390[label="0.222222;6pkt 6fpkt"];
459--2782[label="0.222222;6pkt 6fpkt"];
1183--2008[label="0.384615;10pkt 10fpkt"];
1183--2387[label="0.846154;22pkt 22fpkt"];
1183--2390[label="0.0384615;1pkt 1fpkt"];
1183--2479[label="0.0714286;1pkt 1fpkt"];
1183--2782[label="0.0384615;1pkt 1fpkt"];
1183--2811[label="0.0714286;1pkt 1fpkt"];
1659--1996[label="0.109091;12pkt 12fpkt"];
1659--2006[label="0.0454545;5pkt 5fpkt"];
1659--2009[label="0.109091;12pkt 12fpkt"];
1659--2016[label="0.109091;12pkt 12fpkt"];
1659--2387[label="1;110pkt 110fpkt"];
2390--2782[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="208.146.129.130" src_port="80"/>
      <filter dst_ip="147.87.224.166" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.209.122.102"/>
      <from sec="994482000" usec="0"/>
      <to sec="994483184" usec="0"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
341[label="75.142.43.171;d;299pkt 299fpkt", shape=diamond, color=yellow];
679[label="160.164.22.57;s;120pkt 120fpkt", shape=diamond, color=yellow];
806[label="149.168.145.134;s;63pkt 63fpkt", shape=diamond, color=yellow];
887[label="149.168.7.89;s;128pkt 128fpkt", shape=diamond, color=yellow];
1361[label="75.142.43.171;d;270pkt 270fpkt", shape=hexagon, color=black];
1554[label="149.168.145.134;s;57pkt 57fpkt", shape=hexagon, color=black];
1697[label="149.168.7.89;s;95pkt 95fpkt", shape=hexagon, color=black];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.164.22.57:80, 75.142.43.171:*}[38.5852%]&lt;BR/&gt;{149.168.7.89:80, 75.142.43.171:*}[38.2637%]&lt;BR/&gt;{149.168.145.134:*, *:*}[20.2572%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9031%)&lt;BR/&gt; 64471: (0.193798%)&lt;BR/&gt; 64151: (0.193798%)&lt;BR/&gt; 64148: (0.193798%)&lt;BR/&gt; 63899: (0.193798%)&gt;];
}
341--679[label="1;120pkt 120fpkt"];
341--806[label="0.952381;60pkt 60fpkt"];
341--887[label="0.929688;119pkt 119fpkt"];
341--1361[label="1;270pkt 270fpkt"];
341--1554[label="0.982456;56pkt 56fpkt"];
341--1697[label="0.936842;89pkt 89fpkt"];
341--1996[label="0.0501672;15pkt 15fpkt"];
341--2006[label="0.0367893;11pkt 11fpkt"];
341--2008[label="0.0401338;12pkt 12fpkt"];
341--2009[label="0.0501672;15pkt 15fpkt"];
341--2016[label="0.0501672;15pkt 15fpkt"];
679--1361[label="0.925;111pkt 111fpkt"];
679--1996[label="0.05;6pkt 6fpkt"];
679--2006[label="0.05;6pkt 6fpkt"];
679--2008[label="0.05;6pkt 6fpkt"];
679--2009[label="0.05;6pkt 6fpkt"];
679--2016[label="0.05;6pkt 6fpkt"];
806--1361[label="0.952381;60pkt 60fpkt"];
806--1554[label="1;57pkt 57fpkt"];
806--1996[label="0.0634921;4pkt 4fpkt"];
806--2006[label="0.031746;2pkt 2fpkt"];
806--2008[label="0.031746;2pkt 2fpkt"];
806--2009[label="0.0634921;4pkt 4fpkt"];
806--2016[label="0.0634921;4pkt 4fpkt"];
887--1361[label="0.773438;99pkt 99fpkt"];
887--1697[label="1;95pkt 95fpkt"];
887--1996[label="0.0390625;5pkt 5fpkt"];
887--2006[label="0.0234375;3pkt 3fpkt"];
887--2008[label="0.046875;6pkt 6fpkt"];
887--2009[label="0.0390625;5pkt 5fpkt"];
887--2016[label="0.0390625;5pkt 5fpkt"];
1361--1554[label="0.982456;56pkt 56fpkt"];
1361--1697[label="0.936842;89pkt 89fpkt"];
1361--1996[label="0.0555556;15pkt 15fpkt"];
1361--2006[label="0.0407407;11pkt 11fpkt"];
1361--2008[label="0.0222222;6pkt 6fpkt"];
1361--2009[label="0.0555556;15pkt 15fpkt"];
1361--2016[label="0.0555556;15pkt 15fpkt"];
1554--1996[label="0.0701754;4pkt 4fpkt"];
1554--2006[label="0.0350877;2pkt 2fpkt"];
1554--2009[label="0.0701754;4pkt 4fpkt"];
1554--2016[label="0.0701754;4pkt 4fpkt"];
1697--1996[label="0.0526316;5pkt 5fpkt"];
1697--2006[label="0.0315789;3pkt 3fpkt"];
1697--2009[label="0.0526316;5pkt 5fpkt"];
1697--2016[label="0.0526316;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="149.168.145.134"/>
      <filter dst_ip="75.142.43.171" src_ip="149.168.7.89" src_port="80"/>
      <filter dst_ip="75.142.43.171" src_ip="160.164.22.57" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
634[label="165.22.6.227;d;3pkt 3fpkt", shape=diamond, color=yellow];
705[label="196.180.20.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
1013[label="202.229.138.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.180.30.51:0, 165.22.6.227:0}[33.3333%]&lt;BR/&gt;{196.180.20.132:0, 165.22.6.227:0}[33.3333%]&lt;BR/&gt;{202.229.138.202:873, 165.22.6.227:3350}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (60%)&lt;BR/&gt; 3350: (20%)&lt;BR/&gt; 873: (20%)&gt;];
}
634--705[label="1;1pkt 1fpkt"];
634--1013[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.22.6.227" dst_port="3350" src_ip="202.229.138.202" src_port="873"/>
      <filter dst_ip="165.22.6.227" src_ip="196.180.20.132"/>
      <filter dst_ip="165.22.6.227" src_ip="196.180.30.51"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="147.87.232.214"/>
      <from sec="994482000" usec="0"/>
      <to sec="994483186" usec="0"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10352,2.18513,901,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
235[label="13.192.66.213;d;67pkt 67fpkt", shape=diamond, color=yellow];
719[label="165.22.48.11;s;53pkt 53fpkt", shape=diamond, color=yellow];
902[label="149.52.22.217;s;90pkt 90fpkt", shape=diamond, color=yellow];
1071[label="160.213.207.12;s;59pkt 59fpkt", shape=diamond, color=yellow];
1147[label="128.237.1.126;s;83pkt 83fpkt", shape=diamond, color=yellow];
1775[label="149.52.22.217;s;87pkt 87fpkt", shape=hexagon, color=black];
2033[label="197.11.31.3;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2306[label="149.54.156.101;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2373[label="128.237.1.126;84pkt 84fpkt", shape=pentagon, color=darkviolet];
2423[label="197.11.31.142;47pkt 47fpkt", shape=pentagon, color=darkviolet];
2465[label="149.177.9.157;77pkt 77fpkt", shape=pentagon, color=darkviolet];
2502[label="149.103.43.171;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2601[label="196.217.178.218;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2805[label="149.177.9.157;77pkt 77fpkt", shape=invtriangle, color=brown];
2858[label="196.217.178.218;2pkt 2fpkt", shape=invtriangle, color=brown];
2931[label="196.217.178.218;2pkt 2fpkt", shape=invhouse, color=bisque];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, *:0}[99.6146%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7429%)&lt;BR/&gt; 80: (0.128535%)&lt;BR/&gt; 43567: (0.0642674%)&lt;BR/&gt; 9867: (0.0642674%)&gt;];
}
235--719[label="0.0188679;1pkt 1fpkt"];
235--724[label="0.0149254;1pkt 1fpkt"];
235--902[label="0.0149254;1pkt 1fpkt"];
235--1071[label="0.0169492;1pkt 1fpkt"];
235--1147[label="0.0149254;1pkt 1fpkt"];
235--1775[label="0.0149254;1pkt 1fpkt"];
235--1779[label="0.0149254;1pkt 1fpkt"];
235--2033[label="0.0909091;1pkt 1fpkt"];
235--2306[label="0.1;1pkt 1fpkt"];
235--2373[label="0.0149254;1pkt 1fpkt"];
235--2423[label="0.0212766;1pkt 1fpkt"];
235--2465[label="0.0149254;1pkt 1fpkt"];
235--2502[label="0.0357143;1pkt 1fpkt"];
235--2601[label="1;1pkt 1fpkt"];
235--2805[label="0.0149254;1pkt 1fpkt"];
235--2858[label="0.5;1pkt 1fpkt"];
235--2931[label="0.5;1pkt 1fpkt"];
719--1545[label="0.0714286;1pkt 1fpkt"];
902--1775[label="1;87pkt 87fpkt"];
1147--2373[label="0.987952;82pkt 82fpkt"];
2465--2805[label="1;77pkt 77fpkt"];
2601--2858[label="1;1pkt 1fpkt"];
2601--2931[label="1;1pkt 1fpkt"];
2858--2931[label="1;2pkt 2fpkt"];
</description>
    <slice/>
    <from sec="994482000" usec="0"/>
    <to sec="994483212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_41{
style=filled;
color=gray75;
345[label="165.22.181.150;d;11pkt 11fpkt", shape=diamond, color=yellow];
757[label="192.214.196.195;s;1pkt 1fpkt", shape=diamond, color=yellow];
882[label="110.74.51.238;s;1pkt 1fpkt", shape=diamond, color=yellow];
1242[label="110.246.213.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat41[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.139.92.7:*, 165.22.181.150:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63601: (7.14286%)&lt;BR/&gt; 41602: (7.14286%)&lt;BR/&gt; 41057: (7.14286%)&lt;BR/&gt; 41055: (7.14286%)&lt;BR/&gt; 4856: (7.14286%)&gt;];
}
345--757[label="1;1pkt 1fpkt"];
345--882[label="1;1pkt 1fpkt"];
345--1242[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.22.181.150" src_ip="208.139.92.7"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
660[label="202.78.6.24;s;11pkt 11fpkt", shape=diamond, color=yellow];
758[label="147.87.227.38;d;14pkt 14fpkt", shape=diamond, color=yellow];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.78.6.24:20, 147.87.227.38:*}[50%]&lt;BR/&gt;{202.78.6.15:80, 147.87.227.38:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (28%)&lt;BR/&gt; 113: (8%)&lt;BR/&gt; 21: (8%)&lt;BR/&gt; 80: (6%)&lt;BR/&gt; 39620: (4%)&gt;];
}
660--758[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.227.38" src_ip="202.78.6.24" src_port="20"/>
      <filter dst_ip="147.87.227.38" src_ip="202.78.6.15" src_port="80"/>
    </slice>
    <from sec="994482210" usec="0"/>
    <to sec="994482568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_43{
style=filled;
color=gray75;
748[label="162.185.108.24;d;2pkt 2fpkt", shape=diamond, color=yellow];
785[label="110.185.20.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat43[shape=component, label=&lt;Rules:&lt;BR/&gt;{110.185.20.32:6699, 162.185.108.24:1117}[50%]&lt;BR/&gt;{208.192.165.57:6699, 162.185.108.24:1072}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1117: (33.3333%)&lt;BR/&gt; 1072: (16.6667%)&gt;];
}
748--785[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.185.108.24" dst_port="1072" src_ip="208.192.165.57" src_port="6699"/>
      <filter dst_ip="162.185.108.24" dst_port="1117" src_ip="110.185.20.32" src_port="6699"/>
    </slice>
    <from sec="994482033" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
743[label="203.32.20.62;s;8pkt 8fpkt", shape=diamond, color=yellow];
1826[label="203.32.20.62;s;8pkt 8fpkt", shape=hexagon, color=black];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.32.20.62:21, 165.22.36.38:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (18.75%)&lt;BR/&gt; 2922: (6.25%)&lt;BR/&gt; 2921: (6.25%)&lt;BR/&gt; 2920: (6.25%)&lt;BR/&gt; 2904: (6.25%)&gt;];
}
743--830[label="1;8pkt 8fpkt"];
743--1826[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="165.22.36.38" src_ip="203.32.20.62" src_port="21"/>
    </slice>
    <from sec="994482018" usec="0"/>
    <to sec="994483099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_45{
style=filled;
color=gray75;
877[label="13.132.0.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
878[label="149.180.210.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat45[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.180.210.216:4827, 13.132.0.51:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 4827: (50%)&gt;];
}
877--878[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="13.132.0.51" dst_port="6699" src_ip="149.180.210.216" src_port="4827"/>
    </slice>
    <from sec="994482660" usec="0"/>
    <to sec="994482824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723219,2.20849,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
885[label="147.87.66.249;d;4pkt 4fpkt", shape=diamond, color=yellow];
886[label="14.169.129.29;s;4pkt 4fpkt", shape=diamond, color=yellow];
1688[label="147.87.66.249;d;4pkt 4fpkt", shape=hexagon, color=black];
1689[label="14.169.129.29;s;4pkt 4fpkt", shape=hexagon, color=black];
2684[label="14.169.129.29;3pkt 3fpkt", shape=invtriangle, color=brown];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{14.169.129.29:11636, 147.87.66.249:6970}[25%]&lt;BR/&gt;{14.169.129.29:21540, 147.87.66.249:6970}[25%]&lt;BR/&gt;{14.169.129.29:554, 147.87.66.249:1549}[25%]&lt;BR/&gt;{14.169.129.29:554, 147.87.66.249:1552}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6970: (26.3158%)&lt;BR/&gt; 554: (23.6842%)&lt;BR/&gt; 21540: (13.1579%)&lt;BR/&gt; 11636: (13.1579%)&lt;BR/&gt; 1552: (13.1579%)&gt;];
}
885--886[label="1;4pkt 4fpkt"];
885--1688[label="1;4pkt 4fpkt"];
885--1689[label="1;4pkt 4fpkt"];
885--2684[label="1;3pkt 3fpkt"];
886--1688[label="1;4pkt 4fpkt"];
886--1689[label="1;4pkt 4fpkt"];
886--2684[label="1;3pkt 3fpkt"];
1688--1689[label="1;4pkt 4fpkt"];
1688--2684[label="1;3pkt 3fpkt"];
1689--2684[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.66.249" dst_port="1552" src_ip="14.169.129.29" src_port="554"/>
      <filter dst_ip="147.87.66.249" dst_port="1549" src_ip="14.169.129.29" src_port="554"/>
      <filter dst_ip="147.87.66.249" dst_port="6970" src_ip="14.169.129.29" src_port="21540"/>
      <filter dst_ip="147.87.66.249" dst_port="6970" src_ip="14.169.129.29" src_port="11636"/>
    </slice>
    <from sec="994482728" usec="0"/>
    <to sec="994482801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="147.87.180.9"/>
      <from sec="994482003" usec="0"/>
      <to sec="994483187" usec="0"/>
    </slice>
    <from sec="994482003" usec="0"/>
    <to sec="994483187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
273[label="165.22.52.221;s;59pkt 59fpkt", shape=diamond, color=yellow];
516[label="112.46.14.212;d;9pkt 9fpkt", shape=diamond, color=yellow];
918[label="198.34.130.190;d;15pkt 15fpkt", shape=diamond, color=yellow];
1252[label="198.198.167.11;d;6pkt 6fpkt", shape=diamond, color=yellow];
1617[label="165.22.52.221;s;47pkt 47fpkt", shape=hexagon, color=black];
1737[label="112.46.14.212;d;9pkt 9fpkt", shape=hexagon, color=black];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.22.52.221:80, 14.220.3.152:*}[30.6452%]&lt;BR/&gt;{165.22.52.221:80, 198.34.130.190:*}[24.1935%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.2069%)&lt;BR/&gt; 25: (3.10345%)&lt;BR/&gt; 1171: (1.37931%)&lt;BR/&gt; 1168: (1.37931%)&lt;BR/&gt; 1161: (1.37931%)&gt;];
}
273--516[label="0.888889;8pkt 8fpkt"];
273--722[label="1;19pkt 19fpkt"];
273--918[label="0.866667;13pkt 13fpkt"];
273--1252[label="1;6pkt 6fpkt"];
273--1617[label="1;47pkt 47fpkt"];
273--1737[label="0.888889;8pkt 8fpkt"];
273--1996[label="0.135593;8pkt 8fpkt"];
273--2006[label="0.254237;15pkt 15fpkt"];
273--2008[label="0.305085;18pkt 18fpkt"];
273--2009[label="0.135593;8pkt 8fpkt"];
273--2016[label="0.135593;8pkt 8fpkt"];
516--1617[label="0.777778;7pkt 7fpkt"];
516--1737[label="1;9pkt 9fpkt"];
516--2006[label="0.444444;4pkt 4fpkt"];
516--2008[label="0.444444;4pkt 4fpkt"];
918--1617[label="0.8;12pkt 12fpkt"];
918--1996[label="0.2;3pkt 3fpkt"];
918--2006[label="0.333333;5pkt 5fpkt"];
918--2008[label="0.333333;5pkt 5fpkt"];
918--2009[label="0.2;3pkt 3fpkt"];
918--2016[label="0.2;3pkt 3fpkt"];
1252--2008[label="0.666667;4pkt 4fpkt"];
1617--1737[label="0.777778;7pkt 7fpkt"];
1617--1996[label="0.170213;8pkt 8fpkt"];
1617--2006[label="0.319149;15pkt 15fpkt"];
1617--2008[label="0.191489;9pkt 9fpkt"];
1617--2009[label="0.170213;8pkt 8fpkt"];
1617--2016[label="0.170213;8pkt 8fpkt"];
1737--2006[label="0.444444;4pkt 4fpkt"];
1737--2008[label="0.444444;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="14.220.3.152" src_ip="165.22.52.221" src_port="80"/>
      <filter dst_ip="198.34.130.190" src_ip="165.22.52.221" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699975,2.1774,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
300[label="149.168.35.148;s;259pkt 259fpkt", shape=diamond, color=yellow];
444[label="75.164.254.39;d;9pkt 9fpkt", shape=diamond, color=yellow];
943[label="12.232.45.148;d;26pkt 26fpkt", shape=diamond, color=yellow];
1119[label="13.13.6.236;d;12pkt 12fpkt", shape=diamond, color=yellow];
1145[label="13.194.216.219;d;1pkt 1fpkt", shape=diamond, color=yellow];
1808[label="13.13.6.236;d;12pkt 12fpkt", shape=hexagon, color=black];
2444[label="149.168.35.148;259pkt 259fpkt", shape=pentagon, color=darkviolet];
2799[label="149.168.35.148;259pkt 259fpkt", shape=invtriangle, color=brown];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.168.35.148:80, *:*}[75.8364%]&lt;BR/&gt;{149.168.35.148:*, *:80}[20.4461%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1418: (0.41816%)&lt;BR/&gt; 1417: (0.41816%)&lt;BR/&gt; 53692: (0.358423%)&lt;BR/&gt; 49215: (0.298686%)&gt;];
}
300--441[label="0.193548;6pkt 6fpkt"];
300--444[label="1;9pkt 9fpkt"];
300--943[label="0.615385;16pkt 16fpkt"];
300--1119[label="1;12pkt 12fpkt"];
300--1145[label="1;1pkt 1fpkt"];
300--1493[label="0.193548;6pkt 6fpkt"];
300--1808[label="1;12pkt 12fpkt"];
300--1996[label="0.030888;8pkt 8fpkt"];
300--2001[label="0.019305;5pkt 5fpkt"];
300--2002[label="0.003861;1pkt 1fpkt"];
300--2006[label="0.00772201;2pkt 2fpkt"];
300--2008[label="0.0540541;14pkt 14fpkt"];
300--2009[label="0.030888;8pkt 8fpkt"];
300--2013[label="0.003861;1pkt 1fpkt"];
300--2016[label="0.030888;8pkt 8fpkt"];
300--2444[label="1;259pkt 259fpkt"];
300--2799[label="1;259pkt 259fpkt"];
444--2444[label="1;9pkt 9fpkt"];
444--2799[label="1;9pkt 9fpkt"];
943--1730[label="0.333333;6pkt 6fpkt"];
943--2006[label="0.0769231;2pkt 2fpkt"];
943--2444[label="0.615385;16pkt 16fpkt"];
943--2799[label="0.615385;16pkt 16fpkt"];
1119--1808[label="1;12pkt 12fpkt"];
1119--2008[label="0.333333;4pkt 4fpkt"];
1119--2444[label="1;12pkt 12fpkt"];
1119--2799[label="1;12pkt 12fpkt"];
1145--1996[label="1;1pkt 1fpkt"];
1145--2006[label="1;1pkt 1fpkt"];
1145--2008[label="1;1pkt 1fpkt"];
1145--2009[label="1;1pkt 1fpkt"];
1145--2016[label="1;1pkt 1fpkt"];
1145--2444[label="1;1pkt 1fpkt"];
1145--2799[label="1;1pkt 1fpkt"];
1808--2008[label="0.333333;4pkt 4fpkt"];
1808--2444[label="1;12pkt 12fpkt"];
1808--2799[label="1;12pkt 12fpkt"];
2444--2799[label="1;259pkt 259fpkt"];
</description>
    <slice>
      <filter src_ip="149.168.35.148" src_port="80"/>
      <filter dst_port="80" src_ip="149.168.35.148"/>
    </slice>
    <from sec="994482002" usec="0"/>
    <to sec="994483207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699975,2.1774,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
73[label="149.168.19.177;d;154pkt 154fpkt", shape=diamond, color=yellow];
208[label="210.133.115.194;s;1pkt 1fpkt", shape=diamond, color=yellow];
246[label="218.119.95.59;s;1pkt 1fpkt", shape=diamond, color=yellow];
555[label="13.109.91.162;s;26pkt 26fpkt", shape=diamond, color=yellow];
869[label="218.214.28.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
936[label="219.150.169.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
1363[label="149.168.19.177;d;60pkt 60fpkt", shape=hexagon, color=black];
1408[label="210.133.115.194;s;1pkt 1fpkt", shape=hexagon, color=black];
1609[label="218.119.95.59;s;1pkt 1fpkt", shape=hexagon, color=black];
1645[label="147.87.132.242;d;167pkt 167fpkt", shape=hexagon, color=black];
2090[label="219.150.169.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2115[label="208.196.185.32;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2134[label="208.196.185.38;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2179[label="208.196.185.54;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2181[label="208.196.185.55;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2416[label="209.155.129.139;98pkt 98fpkt", shape=pentagon, color=darkviolet];
2697[label="208.196.185.38;7pkt 7fpkt", shape=invtriangle, color=brown];
2819[label="13.109.91.171;10pkt 10fpkt", shape=invtriangle, color=brown];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 149.168.19.177:*}[34.6847%]&lt;BR/&gt;{*:8888, *:*}[28.3784%]&lt;BR/&gt;{*:80, 147.87.132.242:*}[26.5766%]&lt;BR/&gt;{209.155.129.139:*, *:*}[22.2973%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (14.1818%)&lt;BR/&gt; 80: (13.3636%)&lt;BR/&gt; 8875: (8.18182%)&lt;BR/&gt; 7729: (5.90909%)&lt;BR/&gt; 6699: (4.09091%)&gt;];
}
73--208[label="1;1pkt 1fpkt"];
73--246[label="1;1pkt 1fpkt"];
73--555[label="0.0384615;1pkt 1fpkt"];
73--641[label="0.233766;36pkt 36fpkt"];
73--825[label="0.012987;2pkt 2fpkt"];
73--869[label="1;1pkt 1fpkt"];
73--936[label="1;1pkt 1fpkt"];
73--951[label="0.4;2pkt 2fpkt"];
73--1011[label="0.116883;18pkt 18fpkt"];
73--1363[label="1;60pkt 60fpkt"];
73--1408[label="1;1pkt 1fpkt"];
73--1609[label="1;1pkt 1fpkt"];
73--1634[label="0.233766;36pkt 36fpkt"];
73--2047[label="0.166667;1pkt 1fpkt"];
73--2090[label="1;1pkt 1fpkt"];
73--2115[label="0.2;1pkt 1fpkt"];
73--2134[label="0.166667;1pkt 1fpkt"];
73--2179[label="0.166667;1pkt 1fpkt"];
73--2181[label="0.5;2pkt 2fpkt"];
73--2416[label="0.163265;16pkt 16fpkt"];
73--2697[label="0.285714;2pkt 2fpkt"];
73--2819[label="0.1;1pkt 1fpkt"];
208--1363[label="1;1pkt 1fpkt"];
208--1408[label="1;1pkt 1fpkt"];
246--1363[label="1;1pkt 1fpkt"];
246--1609[label="1;1pkt 1fpkt"];
555--564[label="0.0384615;1pkt 1fpkt"];
555--733[label="0.0384615;1pkt 1fpkt"];
555--1305[label="0.0384615;1pkt 1fpkt"];
555--1394[label="0.461538;12pkt 12fpkt"];
555--1431[label="0.0384615;1pkt 1fpkt"];
555--1593[label="0.0384615;1pkt 1fpkt"];
555--1645[label="0.0384615;1pkt 1fpkt"];
555--1783[label="0.0384615;1pkt 1fpkt"];
555--1932[label="0.0384615;1pkt 1fpkt"];
936--1363[label="1;1pkt 1fpkt"];
936--2090[label="1;1pkt 1fpkt"];
1363--1408[label="1;1pkt 1fpkt"];
1363--1609[label="1;1pkt 1fpkt"];
1363--2090[label="1;1pkt 1fpkt"];
1363--2179[label="0.166667;1pkt 1fpkt"];
1363--2416[label="0.25;15pkt 15fpkt"];
1645--1724[label="0.028169;2pkt 2fpkt"];
1645--1749[label="1;1pkt 1fpkt"];
1645--1996[label="0.0239521;4pkt 4fpkt"];
1645--2006[label="0.011976;2pkt 2fpkt"];
1645--2009[label="0.0239521;4pkt 4fpkt"];
1645--2016[label="0.0239521;4pkt 4fpkt"];
1645--2127[label="0.228571;8pkt 8fpkt"];
1645--2164[label="0.1;1pkt 1fpkt"];
1645--2179[label="0.166667;1pkt 1fpkt"];
1645--2194[label="0.028169;2pkt 2fpkt"];
1645--2238[label="0.151515;5pkt 5fpkt"];
1645--2416[label="0.0714286;7pkt 7fpkt"];
1645--2497[label="0.0357143;1pkt 1fpkt"];
1645--2498[label="0.0294118;1pkt 1fpkt"];
1645--2510[label="0.5;8pkt 8fpkt"];
1645--2547[label="0.181818;2pkt 2fpkt"];
1645--2602[label="0.011976;2pkt 2fpkt"];
1645--2816[label="0.0357143;1pkt 1fpkt"];
1645--2817[label="0.0294118;1pkt 1fpkt"];
1645--2892[label="0.0298507;2pkt 2fpkt"];
2134--2697[label="1;6pkt 6fpkt"];
2819--2921[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="209.155.129.139"/>
      <filter dst_ip="149.168.19.177"/>
      <filter src_port="8888"/>
      <filter dst_ip="147.87.132.242" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
968[label="209.104.193.177;s;4pkt 4fpkt", shape=diamond, color=yellow];
969[label="128.141.151.16;d;4pkt 4fpkt", shape=diamond, color=yellow];
1760[label="128.141.151.16;d;3pkt 3fpkt", shape=hexagon, color=black];
2520[label="209.104.193.177;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.104.193.177:21, 128.141.151.16:1039}[25%]&lt;BR/&gt;{209.104.193.177:57338, 128.141.151.16:1040}[25%]&lt;BR/&gt;{209.104.193.177:57341, 128.141.151.16:1041}[25%]&lt;BR/&gt;{209.104.193.177:57354, 128.141.151.16:1042}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57341: (14.2857%)&lt;BR/&gt; 57338: (14.2857%)&lt;BR/&gt; 1041: (14.2857%)&lt;BR/&gt; 1040: (14.2857%)&lt;BR/&gt; 57354: (10.7143%)&gt;];
}
968--969[label="1;4pkt 4fpkt"];
968--1760[label="1;3pkt 3fpkt"];
968--2520[label="1;3pkt 3fpkt"];
969--1760[label="1;3pkt 3fpkt"];
969--2520[label="1;3pkt 3fpkt"];
1760--2520[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.151.16" dst_port="1042" src_ip="209.104.193.177" src_port="57354"/>
      <filter dst_ip="128.141.151.16" dst_port="1041" src_ip="209.104.193.177" src_port="57341"/>
      <filter dst_ip="128.141.151.16" dst_port="1040" src_ip="209.104.193.177" src_port="57338"/>
      <filter dst_ip="128.141.151.16" dst_port="1039" src_ip="209.104.193.177" src_port="21"/>
    </slice>
    <from sec="994482676" usec="0"/>
    <to sec="994482962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
435[label="146.20.1.86;s;15pkt 15fpkt", shape=diamond, color=yellow];
1762[label="146.20.1.86;s;15pkt 15fpkt", shape=hexagon, color=black];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.20.1.86:*, 13.196.241.72:80}[33.3333%]&lt;BR/&gt;{146.20.1.86:*, 14.184.187.118:80}[26.6667%]&lt;BR/&gt;{146.20.1.86:*, 13.196.245.182:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3447: (3.33333%)&lt;BR/&gt; 3425: (3.33333%)&lt;BR/&gt; 3424: (3.33333%)&lt;BR/&gt; 3423: (3.33333%)&gt;];
}
435--981[label="1;5pkt 5fpkt"];
435--1762[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="13.196.241.72" dst_port="80" src_ip="146.20.1.86"/>
      <filter dst_ip="14.184.187.118" dst_port="80" src_ip="146.20.1.86"/>
      <filter dst_ip="13.196.245.182" dst_port="80" src_ip="146.20.1.86"/>
    </slice>
    <from sec="994482732" usec="0"/>
    <to sec="994482775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666633,2.22286,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
963[label="160.164.116.51;s;243pkt 243fpkt", shape=diamond, color=yellow];
982[label="193.233.131.88;d;135pkt 135fpkt", shape=diamond, color=yellow];
2170[label="160.164.116.51;274pkt 274fpkt", shape=pentagon, color=darkviolet];
2709[label="160.164.116.51;275pkt 275fpkt", shape=invtriangle, color=brown];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.164.116.51:*, 193.233.131.88:80}[49.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8382%)&lt;BR/&gt; 0: (0.323625%)&lt;BR/&gt; 4388: (0.21575%)&lt;BR/&gt; 4385: (0.21575%)&lt;BR/&gt; 4382: (0.21575%)&gt;];
}
963--982[label="1;135pkt 135fpkt"];
963--2170[label="0.995885;242pkt 242fpkt"];
963--2709[label="1;243pkt 243fpkt"];
982--2170[label="1;135pkt 135fpkt"];
982--2709[label="1;135pkt 135fpkt"];
2170--2709[label="1;274pkt 274fpkt"];
</description>
    <slice>
      <filter dst_ip="193.233.131.88" dst_port="80" src_ip="160.164.116.51"/>
    </slice>
    <from sec="994482316" usec="0"/>
    <to sec="994483211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="165.22.36.161"/>
      <from sec="994482003" usec="0"/>
      <to sec="994483097" usec="0"/>
    </slice>
    <from sec="994482003" usec="0"/>
    <to sec="994483097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="138.5.209.33"/>
      <from sec="994482039" usec="0"/>
      <to sec="994483116" usec="0"/>
    </slice>
    <from sec="994482039" usec="0"/>
    <to sec="994483116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="138.5.209.36"/>
      <from sec="994482046" usec="0"/>
      <to sec="994483120" usec="0"/>
    </slice>
    <from sec="994482046" usec="0"/>
    <to sec="994483120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
482[label="144.188.155.69;s;49pkt 49fpkt", shape=diamond, color=yellow];
1045[label="160.164.70.50;d;40pkt 40fpkt", shape=diamond, color=yellow];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.188.155.69:80, 147.87.0.19:*}[42.029%]&lt;BR/&gt;{144.188.155.69:80, 160.164.70.50:*}[28.9855%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8764%)&lt;BR/&gt; 1173: (1.1236%)&lt;BR/&gt; 1171: (1.1236%)&lt;BR/&gt; 1165: (1.1236%)&lt;BR/&gt; 1163: (1.1236%)&gt;];
}
482--1045[label="0.5;20pkt 20fpkt"];
482--2006[label="0.122449;6pkt 6fpkt"];
1045--1062[label="0.846154;11pkt 11fpkt"];
1045--1765[label="0.846154;11pkt 11fpkt"];
1045--1976[label="1;5pkt 5fpkt"];
1045--2006[label="0.175;7pkt 7fpkt"];
1045--2008[label="0.075;3pkt 3fpkt"];
1045--2484[label="0.846154;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="160.164.70.50" src_ip="144.188.155.69" src_port="80"/>
      <filter dst_ip="147.87.0.19" src_ip="144.188.155.69" src_port="80"/>
    </slice>
    <from sec="994482640" usec="0"/>
    <to sec="994483092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
1051[label="219.48.181.60;d;44pkt 44fpkt", shape=diamond, color=yellow];
1836[label="219.48.181.60;d;44pkt 44fpkt", shape=hexagon, color=black];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.168.44.198:*, 219.48.181.60:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2253: (1.13636%)&lt;BR/&gt; 2250: (1.13636%)&lt;BR/&gt; 2249: (1.13636%)&lt;BR/&gt; 2246: (1.13636%)&gt;];
}
1051--1054[label="1;44pkt 44fpkt"];
1051--1836[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="219.48.181.60" dst_port="80" src_ip="149.168.44.198"/>
    </slice>
    <from sec="994482775" usec="0"/>
    <to sec="994482967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02059,2.23106,999,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
1049[label="128.141.129.218;d;13pkt 13fpkt", shape=diamond, color=yellow];
1057[label="75.153.69.167;s;10pkt 10fpkt", shape=diamond, color=yellow];
1837[label="75.153.69.167;s;10pkt 10fpkt", shape=hexagon, color=black];
2920[label="75.153.69.167;6pkt 6fpkt", shape=invhouse, color=bisque];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.153.69.167:6112, 128.141.129.218:*}[76.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6112: (55.1282%)&lt;BR/&gt; 1042: (5.12821%)&lt;BR/&gt; 1041: (5.12821%)&lt;BR/&gt; 1040: (5.12821%)&lt;BR/&gt; 1039: (5.12821%)&gt;];
}
1049--1057[label="1;10pkt 10fpkt"];
1049--1837[label="1;10pkt 10fpkt"];
1049--2920[label="1;6pkt 6fpkt"];
1057--1837[label="1;10pkt 10fpkt"];
1057--2920[label="1;6pkt 6fpkt"];
1837--2920[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.129.218" src_ip="75.153.69.167" src_port="6112"/>
    </slice>
    <from sec="994482714" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484937,2.23777,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
1058[label="13.182.157.130;d;18pkt 18fpkt", shape=diamond, color=yellow];
1059[label="149.180.28.64;s;18pkt 18fpkt", shape=diamond, color=yellow];
2200[label="149.180.28.64;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.180.28.64:80, 13.182.157.130:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1788: (2.83019%)&lt;BR/&gt; 1787: (2.83019%)&lt;BR/&gt; 1786: (2.83019%)&lt;BR/&gt; 1785: (2.83019%)&gt;];
}
1058--1059[label="1;18pkt 18fpkt"];
1058--2008[label="0.444444;8pkt 8fpkt"];
1058--2200[label="1;17pkt 17fpkt"];
1059--2008[label="0.444444;8pkt 8fpkt"];
1059--2200[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="13.182.157.130" src_ip="149.180.28.64" src_port="80"/>
    </slice>
    <from sec="994482802" usec="0"/>
    <to sec="994483078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="147.87.232.214"/>
      <from sec="994482000" usec="0"/>
      <to sec="994483186" usec="0"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="197.11.31.201"/>
      <from sec="994482005" usec="0"/>
      <to sec="994483183" usec="0"/>
    </slice>
    <from sec="994482005" usec="0"/>
    <to sec="994483183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
710[label="128.141.128.93;d;14pkt 14fpkt", shape=diamond, color=yellow];
786[label="110.54.138.232;s;3pkt 3fpkt", shape=diamond, color=yellow];
1095[label="110.20.100.12;s;3pkt 3fpkt", shape=diamond, color=yellow];
1713[label="128.141.128.93;d;13pkt 13fpkt", shape=hexagon, color=black];
1831[label="110.20.100.12;s;2pkt 2fpkt", shape=hexagon, color=black];
2628[label="110.54.138.232;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{110.54.138.232:1214, 128.141.128.93:*}[57.1429%]&lt;BR/&gt;{110.20.100.12:1214, 128.141.128.93:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 3725: (4.7619%)&lt;BR/&gt; 3724: (4.7619%)&lt;BR/&gt; 3723: (4.7619%)&lt;BR/&gt; 3722: (4.7619%)&gt;];
}
710--786[label="1;3pkt 3fpkt"];
710--1095[label="1;3pkt 3fpkt"];
710--1713[label="1;13pkt 13fpkt"];
710--1831[label="1;2pkt 2fpkt"];
710--2628[label="1;7pkt 7fpkt"];
786--1713[label="1;3pkt 3fpkt"];
786--2628[label="1;3pkt 3fpkt"];
1095--1713[label="0.666667;2pkt 2fpkt"];
1095--1831[label="1;2pkt 2fpkt"];
1713--1831[label="1;2pkt 2fpkt"];
1713--2628[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.128.93" src_ip="110.54.138.232" src_port="1214"/>
      <filter dst_ip="128.141.128.93" src_ip="110.20.100.12" src_port="1214"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699975,2.1774,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
326[label="13.65.244.241;s;42pkt 42fpkt", shape=diamond, color=yellow];
944[label="147.87.110.75;d;44pkt 44fpkt", shape=diamond, color=yellow];
948[label="147.87.163.103;d;14pkt 14fpkt", shape=diamond, color=yellow];
966[label="201.38.223.132;s;5pkt 5fpkt", shape=diamond, color=yellow];
984[label="196.212.165.204;d;5pkt 5fpkt", shape=diamond, color=yellow];
1053[label="149.168.44.198;d;50pkt 50fpkt", shape=diamond, color=yellow];
1094[label="147.87.136.230;d;13pkt 13fpkt", shape=diamond, color=yellow];
1248[label="147.87.165.218;d;16pkt 16fpkt", shape=diamond, color=yellow];
1743[label="13.65.247.171;s;17pkt 17fpkt", shape=hexagon, color=black];
1781[label="13.65.192.35;s;39pkt 39fpkt", shape=hexagon, color=black];
2645[label="13.65.244.241;57pkt 57fpkt", shape=pentagon, color=darkviolet];
2874[label="13.65.244.241;57pkt 57fpkt", shape=invtriangle, color=brown];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{13.65.244.241:80, *:*}[24.8908%]&lt;BR/&gt;{*:80, 149.168.44.198:*}[21.8341%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1043: (0.97493%)&lt;BR/&gt; 1054: (0.835655%)&lt;BR/&gt; 2575: (0.696379%)&lt;BR/&gt; 64941: (0.557103%)&gt;];
}
326--948[label="0.214286;3pkt 3fpkt"];
326--984[label="1;5pkt 5fpkt"];
326--1053[label="0.142857;6pkt 6fpkt"];
326--1094[label="0.0769231;1pkt 1fpkt"];
326--1163[label="0.285714;12pkt 12fpkt"];
326--1248[label="0.1875;3pkt 3fpkt"];
326--2006[label="0.047619;2pkt 2fpkt"];
326--2008[label="0.119048;5pkt 5fpkt"];
326--2645[label="1;42pkt 42fpkt"];
326--2874[label="1;42pkt 42fpkt"];
944--1025[label="0.130435;3pkt 3fpkt"];
944--1031[label="0.5625;9pkt 9fpkt"];
944--1581[label="0.0454545;2pkt 2fpkt"];
944--1676[label="1;16pkt 16fpkt"];
944--1743[label="0.117647;2pkt 2fpkt"];
944--2006[label="0.0227273;1pkt 1fpkt"];
944--2008[label="0.113636;5pkt 5fpkt"];
944--2350[label="0.340909;15pkt 15fpkt"];
944--2508[label="0.0833333;2pkt 2fpkt"];
948--966[label="0.4;2pkt 2fpkt"];
948--1781[label="0.357143;5pkt 5fpkt"];
948--2006[label="0.214286;3pkt 3fpkt"];
948--2397[label="0.142857;1pkt 1fpkt"];
948--2645[label="0.214286;3pkt 3fpkt"];
948--2874[label="0.214286;3pkt 3fpkt"];
966--2006[label="0.6;3pkt 3fpkt"];
966--2397[label="0.8;4pkt 4fpkt"];
984--2645[label="1;5pkt 5fpkt"];
984--2874[label="1;5pkt 5fpkt"];
1053--1763[label="1;44pkt 44fpkt"];
1053--2008[label="0.04;2pkt 2fpkt"];
1053--2191[label="1;44pkt 44fpkt"];
1053--2645[label="0.12;6pkt 6fpkt"];
1053--2874[label="0.12;6pkt 6fpkt"];
1094--1581[label="0.153846;2pkt 2fpkt"];
1094--1743[label="0.307692;4pkt 4fpkt"];
1094--2006[label="0.153846;2pkt 2fpkt"];
1094--2008[label="0.0769231;1pkt 1fpkt"];
1094--2508[label="0.615385;8pkt 8fpkt"];
1094--2645[label="0.0769231;1pkt 1fpkt"];
1094--2874[label="0.0769231;1pkt 1fpkt"];
1248--1734[label="0.125;2pkt 2fpkt"];
1248--2008[label="0.25;4pkt 4fpkt"];
1248--2046[label="0.25;3pkt 3fpkt"];
1248--2268[label="0.25;4pkt 4fpkt"];
1248--2359[label="0.0625;1pkt 1fpkt"];
1248--2412[label="0.125;2pkt 2fpkt"];
1248--2645[label="0.1875;3pkt 3fpkt"];
1248--2661[label="0.25;3pkt 3fpkt"];
1248--2786[label="0.125;2pkt 2fpkt"];
1248--2874[label="0.1875;3pkt 3fpkt"];
1743--2508[label="0.941176;16pkt 16fpkt"];
1781--1996[label="0.0512821;2pkt 2fpkt"];
1781--2006[label="0.0512821;2pkt 2fpkt"];
1781--2008[label="0.0769231;3pkt 3fpkt"];
1781--2009[label="0.0512821;2pkt 2fpkt"];
1781--2016[label="0.0512821;2pkt 2fpkt"];
2645--2874[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter src_ip="13.65.244.241" src_port="80"/>
      <filter dst_ip="149.168.44.198" src_port="80"/>
    </slice>
    <from sec="994482003" usec="0"/>
    <to sec="994483213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
1121[label="149.168.18.66;s;10pkt 10fpkt", shape=diamond, color=yellow];
1123[label="219.201.80.116;d;9pkt 9fpkt", shape=diamond, color=yellow];
1889[label="149.168.18.66;s;10pkt 10fpkt", shape=hexagon, color=black];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.168.18.66:*, 219.201.80.116:80}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49792: (5.17241%)&lt;BR/&gt; 49791: (5.17241%)&lt;BR/&gt; 49790: (5.17241%)&lt;BR/&gt; 49789: (5.17241%)&gt;];
}
1121--1123[label="1;9pkt 9fpkt"];
1121--1889[label="1;10pkt 10fpkt"];
1123--1889[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="219.201.80.116" dst_port="80" src_ip="149.168.18.66"/>
    </slice>
    <from sec="994482899" usec="0"/>
    <to sec="994483126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="165.22.36.161"/>
      <from sec="994482003" usec="0"/>
      <to sec="994483181" usec="0"/>
    </slice>
    <from sec="994482003" usec="0"/>
    <to sec="994483181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
900[label="165.22.43.223;s;57pkt 57fpkt", shape=diamond, color=yellow];
917[label="13.214.165.178;d;76pkt 76fpkt", shape=diamond, color=yellow];
1146[label="165.22.59.162;s;28pkt 28fpkt", shape=diamond, color=yellow];
1649[label="13.214.165.178;d;74pkt 74fpkt", shape=hexagon, color=black];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.22.43.223:*, 13.214.165.178:*}[37.1681%]&lt;BR/&gt;{*:25, 13.214.165.178:*}[33.6283%]&lt;BR/&gt;{*:*, 13.214.165.178:113}[32.7434%]&lt;BR/&gt;{165.22.59.162:*, *:*}[24.7788%]&lt;BR/&gt;{165.22.43.223:25, *:*}[20.354%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (24.8936%)&lt;BR/&gt; 113: (21.7021%)&lt;BR/&gt; 80: (1.48936%)&lt;BR/&gt; 0: (0.851064%)&lt;BR/&gt; 4996: (0.638298%)&gt;];
}
900--917[label="0.736842;42pkt 42fpkt"];
900--1649[label="0.736842;42pkt 42fpkt"];
917--1146[label="0.214286;6pkt 6fpkt"];
917--1649[label="1;74pkt 74fpkt"];
1146--1649[label="0.214286;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="165.22.59.162"/>
      <filter dst_ip="13.214.165.178" src_ip="165.22.43.223"/>
      <filter src_ip="165.22.43.223" src_port="25"/>
      <filter dst_ip="13.214.165.178" src_port="25"/>
      <filter dst_ip="13.214.165.178" dst_port="113"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10352,2.18513,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
337[label="147.87.193.49;d;510pkt 510fpkt", shape=diamond, color=yellow];
1108[label="145.12.67.92;s;68pkt 68fpkt", shape=diamond, color=yellow];
1805[label="145.12.67.92;s;68pkt 68fpkt", shape=hexagon, color=black];
2199[label="193.119.6.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2280[label="145.12.67.92;68pkt 68fpkt", shape=pentagon, color=darkviolet];
2300[label="205.56.227.100;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2320[label="192.237.98.104;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2741[label="145.12.67.92;68pkt 68fpkt", shape=invtriangle, color=brown];
2755[label="192.237.98.104;13pkt 13fpkt", shape=invtriangle, color=brown];
2900[label="145.12.67.92;68pkt 68fpkt", shape=invhouse, color=bisque];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 147.87.193.49:*}[81.7647%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.8562%)&lt;BR/&gt; 53: (4.97788%)&lt;BR/&gt; 12293: (0.331858%)&lt;BR/&gt; 12292: (0.331858%)&lt;BR/&gt; 12291: (0.331858%)&gt;];
}
337--503[label="0.126667;19pkt 19fpkt"];
337--702[label="0.0655738;4pkt 4fpkt"];
337--801[label="0.015873;1pkt 1fpkt"];
337--1028[label="0.0491803;3pkt 3fpkt"];
337--1078[label="0.0147059;1pkt 1fpkt"];
337--1108[label="1;68pkt 68fpkt"];
337--1151[label="0.0306122;3pkt 3fpkt"];
337--1300[label="0.00392157;2pkt 2fpkt"];
337--1569[label="1;371pkt 371fpkt"];
337--1805[label="1;68pkt 68fpkt"];
337--1952[label="1;371pkt 371fpkt"];
337--2005[label="0.00392157;2pkt 2fpkt"];
337--2006[label="0.0313725;16pkt 16fpkt"];
337--2007[label="0.00196078;1pkt 1fpkt"];
337--2008[label="0.00392157;2pkt 2fpkt"];
337--2034[label="0.0645161;2pkt 2fpkt"];
337--2038[label="0.0291262;3pkt 3fpkt"];
337--2082[label="0.121795;19pkt 19fpkt"];
337--2119[label="0.12963;7pkt 7fpkt"];
337--2121[label="0.888889;8pkt 8fpkt"];
337--2122[label="0.0217391;1pkt 1fpkt"];
337--2131[label="0.45;9pkt 9fpkt"];
337--2148[label="0.0357143;1pkt 1fpkt"];
337--2199[label="1;1pkt 1fpkt"];
337--2280[label="1;68pkt 68fpkt"];
337--2300[label="1;28pkt 28fpkt"];
337--2320[label="1;12pkt 12fpkt"];
337--2425[label="0.0147059;1pkt 1fpkt"];
337--2431[label="0.0175439;2pkt 2fpkt"];
337--2456[label="1;48pkt 48fpkt"];
337--2499[label="0.0126582;1pkt 1fpkt"];
337--2523[label="0.0377358;2pkt 2fpkt"];
337--2650[label="0.037037;1pkt 1fpkt"];
337--2674[label="0.121019;19pkt 19fpkt"];
337--2689[label="0.0217391;1pkt 1fpkt"];
337--2696[label="0.473684;9pkt 9fpkt"];
337--2703[label="0.0645161;4pkt 4fpkt"];
337--2741[label="1;68pkt 68fpkt"];
337--2755[label="1;13pkt 13fpkt"];
337--2788[label="0.0149254;1pkt 1fpkt"];
337--2825[label="0.037037;2pkt 2fpkt"];
337--2884[label="0.121019;19pkt 19fpkt"];
337--2900[label="1;68pkt 68fpkt"];
337--2923[label="0.0377358;2pkt 2fpkt"];
1108--1805[label="1;68pkt 68fpkt"];
1108--2008[label="0.0147059;1pkt 1fpkt"];
1108--2280[label="1;68pkt 68fpkt"];
1108--2741[label="1;68pkt 68fpkt"];
1108--2900[label="1;68pkt 68fpkt"];
1805--2008[label="0.0147059;1pkt 1fpkt"];
1805--2280[label="1;68pkt 68fpkt"];
1805--2741[label="1;68pkt 68fpkt"];
1805--2900[label="1;68pkt 68fpkt"];
2280--2741[label="1;68pkt 68fpkt"];
2280--2900[label="1;68pkt 68fpkt"];
2320--2755[label="1;12pkt 12fpkt"];
2741--2900[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.193.49" src_port="80"/>
    </slice>
    <from sec="994482078" usec="0"/>
    <to sec="994483213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
1154[label="149.168.169.86;s;15pkt 15fpkt", shape=diamond, color=yellow];
1197[label="110.55.160.23;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.168.169.86:*, *:6699}[53.3333%]&lt;BR/&gt;{149.168.169.86:*, 209.155.129.139:7730}[46.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (28.125%)&lt;BR/&gt; 7730: (21.875%)&lt;BR/&gt; 2535: (6.25%)&lt;BR/&gt; 2527: (3.125%)&lt;BR/&gt; 2526: (3.125%)&gt;];
}
1154--1197[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="149.168.169.86"/>
      <filter dst_ip="209.155.129.139" dst_port="7730" src_ip="149.168.169.86"/>
    </slice>
    <from sec="994482029" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.691,2.25333,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
1153[label="149.168.169.86;d;19pkt 19fpkt", shape=diamond, color=yellow];
1198[label="110.55.160.23;s;1pkt 1fpkt", shape=diamond, color=yellow];
2681[label="110.55.160.23;1pkt 1fpkt", shape=invtriangle, color=brown];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.155.129.139:7730, 149.168.169.86:*}[36.8421%]&lt;BR/&gt;{*:6699, 149.168.169.86:*}[36.8421%]&lt;BR/&gt;{13.8.235.16:80, 149.168.169.86:*}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (21.4286%)&lt;BR/&gt; 7730: (16.6667%)&lt;BR/&gt; 80: (11.9048%)&lt;BR/&gt; 2535: (7.14286%)&lt;BR/&gt; 2532: (2.38095%)&gt;];
}
1153--1198[label="1;1pkt 1fpkt"];
1153--1996[label="0.0526316;1pkt 1fpkt"];
1153--2006[label="0.0526316;1pkt 1fpkt"];
1153--2009[label="0.0526316;1pkt 1fpkt"];
1153--2016[label="0.0526316;1pkt 1fpkt"];
1153--2416[label="0.368421;7pkt 7fpkt"];
1153--2681[label="1;1pkt 1fpkt"];
1198--2681[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.168.169.86" src_port="6699"/>
      <filter dst_ip="149.168.169.86" src_ip="209.155.129.139" src_port="7730"/>
      <filter dst_ip="149.168.169.86" src_ip="13.8.235.16" src_port="80"/>
    </slice>
    <from sec="994482029" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="196.217.132.24"/>
      <from sec="994482000" usec="0"/>
      <to sec="994483188" usec="0"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10352,2.18513,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
177[label="197.11.24.239;d;1304pkt 1304fpkt", shape=diamond, color=yellow];
179[label="147.87.8.182;d;1518pkt 1518fpkt", shape=diamond, color=yellow];
489[label="147.87.26.58;d;154pkt 154fpkt", shape=diamond, color=yellow];
519[label="13.199.7.194;s;56pkt 56fpkt", shape=diamond, color=yellow];
663[label="200.244.73.229;s;21pkt 21fpkt", shape=diamond, color=yellow];
676[label="146.0.116.8;s;80pkt 80fpkt", shape=diamond, color=yellow];
1156[label="192.136.87.163;s;83pkt 83fpkt", shape=diamond, color=yellow];
1163[label="149.161.215.24;d;224pkt 224fpkt", shape=diamond, color=yellow];
1186[label="13.199.7.209;s;120pkt 120fpkt", shape=diamond, color=yellow];
1211[label="192.136.87.172;s;95pkt 95fpkt", shape=diamond, color=yellow];
1225[label="192.136.87.133;s;94pkt 94fpkt", shape=diamond, color=yellow];
1350[label="147.87.8.182;d;359pkt 359fpkt", shape=hexagon, color=black];
1428[label="197.11.24.239;d;344pkt 344fpkt", shape=hexagon, color=black];
1450[label="13.199.7.194;s;56pkt 56fpkt", shape=hexagon, color=black];
1527[label="146.0.116.8;s;80pkt 80fpkt", shape=hexagon, color=black];
2031[label="13.196.242.2;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2044[label="13.47.149.5;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2055[label="146.0.116.8;80pkt 80fpkt", shape=pentagon, color=darkviolet];
2062[label="146.0.116.10;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2071[label="146.0.116.12;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2093[label="192.237.115.21;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2207[label="14.209.115.65;80pkt 80fpkt", shape=pentagon, color=darkviolet];
2219[label="219.8.210.70;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2227[label="192.237.116.73;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2229[label="201.6.178.73;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2252[label="13.192.69.82;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2271[label="14.169.160.88;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2282[label="146.0.115.92;62pkt 62fpkt", shape=pentagon, color=darkviolet];
2394[label="212.202.100.132;46pkt 46fpkt", shape=pentagon, color=darkviolet];
2406[label="192.136.87.136;74pkt 74fpkt", shape=pentagon, color=darkviolet];
2414[label="202.105.29.138;37pkt 37fpkt", shape=pentagon, color=darkviolet];
2455[label="192.237.112.153;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2470[label="192.237.109.160;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2507[label="192.118.158.171;118pkt 118fpkt", shape=pentagon, color=darkviolet];
2513[label="192.136.87.175;85pkt 85fpkt", shape=pentagon, color=darkviolet];
2546[label="209.192.251.191;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2580[label="13.199.7.208;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2613[label="193.119.6.223;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2655[label="13.197.52.253;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2690[label="209.187.228.34;29pkt 29fpkt", shape=invtriangle, color=brown];
2724[label="219.8.210.70;17pkt 17fpkt", shape=invtriangle, color=brown];
2733[label="13.192.69.82;33pkt 33fpkt", shape=invtriangle, color=brown];
2743[label="146.0.115.92;62pkt 62fpkt", shape=invtriangle, color=brown];
2802[label="192.237.112.153;11pkt 11fpkt", shape=invtriangle, color=brown];
2808[label="192.237.109.160;4pkt 4fpkt", shape=invtriangle, color=brown];
2849[label="13.199.7.208;35pkt 35fpkt", shape=invtriangle, color=brown];
2878[label="13.197.52.253;34pkt 34fpkt", shape=invtriangle, color=brown];
2896[label="13.192.69.82;33pkt 33fpkt", shape=invhouse, color=bisque];
2912[label="205.200.11.131;1pkt 1fpkt", shape=invhouse, color=bisque];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 147.87.8.182:*}[45.1818%]&lt;BR/&gt;{*:80, 197.11.24.239:*}[38.6061%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.101%)&lt;BR/&gt; 81: (0.308479%)&lt;BR/&gt; 53: (0.299665%)&lt;BR/&gt; 0: (0.246783%)&lt;BR/&gt; 65534: (0.202715%)&gt;];
}
177--194[label="0.00287356;2pkt 2fpkt"];
177--1078[label="0.0147059;1pkt 1fpkt"];
177--1156[label="0.903614;75pkt 75fpkt"];
177--1185[label="0.857143;102pkt 102fpkt"];
177--1211[label="0.821053;78pkt 78fpkt"];
177--1225[label="0.819149;77pkt 77fpkt"];
177--1398[label="0.00321543;2pkt 2fpkt"];
177--1428[label="1;344pkt 344fpkt"];
177--1996[label="0.0398773;52pkt 52fpkt"];
177--2006[label="0.0437117;57pkt 57fpkt"];
177--2007[label="0.00383436;5pkt 5fpkt"];
177--2008[label="0.0920245;120pkt 120fpkt"];
177--2009[label="0.0398773;52pkt 52fpkt"];
177--2016[label="0.0398773;52pkt 52fpkt"];
177--2406[label="0.972973;72pkt 72fpkt"];
177--2425[label="0.0147059;1pkt 1fpkt"];
177--2507[label="0.864407;102pkt 102fpkt"];
177--2513[label="0.976471;83pkt 83fpkt"];
177--2788[label="0.0149254;1pkt 1fpkt"];
177--2820[label="0.864407;102pkt 102fpkt"];
179--190[label="0.00248756;1pkt 1fpkt"];
179--194[label="0.0201149;14pkt 14fpkt"];
179--338[label="0.4;4pkt 4fpkt"];
179--417[label="1;7pkt 7fpkt"];
179--519[label="0.464286;26pkt 26fpkt"];
179--563[label="0.0877193;20pkt 20fpkt"];
179--567[label="0.0384615;3pkt 3fpkt"];
179--663[label="1;21pkt 21fpkt"];
179--676[label="1;80pkt 80fpkt"];
179--725[label="0.027027;1pkt 1fpkt"];
179--784[label="1;47pkt 47fpkt"];
179--953[label="0.880597;59pkt 59fpkt"];
179--986[label="0.0263158;1pkt 1fpkt"];
179--1083[label="0.152542;18pkt 18fpkt"];
179--1151[label="0.0918367;9pkt 9fpkt"];
179--1186[label="1;120pkt 120fpkt"];
179--1211[label="0.168421;16pkt 16fpkt"];
179--1225[label="0.170213;16pkt 16fpkt"];
179--1229[label="0.023622;3pkt 3fpkt"];
179--1235[label="0.0133333;1pkt 1fpkt"];
179--1350[label="1;359pkt 359fpkt"];
179--1398[label="0.0176849;11pkt 11fpkt"];
179--1450[label="0.464286;26pkt 26fpkt"];
179--1527[label="1;80pkt 80fpkt"];
179--1565[label="0.0384615;3pkt 3fpkt"];
179--1680[label="0.880597;59pkt 59fpkt"];
179--1698[label="0.030303;1pkt 1fpkt"];
179--1742[label="1;7pkt 7fpkt"];
179--1780[label="0.030303;1pkt 1fpkt"];
179--1844[label="0.4;4pkt 4fpkt"];
179--1884[label="0.0133333;1pkt 1fpkt"];
179--1996[label="0.0447958;68pkt 68fpkt"];
179--2006[label="0.0527009;80pkt 80fpkt"];
179--2008[label="0.0467721;71pkt 71fpkt"];
179--2009[label="0.0447958;68pkt 68fpkt"];
179--2016[label="0.0447958;68pkt 68fpkt"];
179--2031[label="1;6pkt 6fpkt"];
179--2034[label="0.0645161;2pkt 2fpkt"];
179--2038[label="0.0873786;9pkt 9fpkt"];
179--2044[label="1;2pkt 2fpkt"];
179--2048[label="0.0357143;1pkt 1fpkt"];
179--2055[label="1;80pkt 80fpkt"];
179--2062[label="1;34pkt 34fpkt"];
179--2071[label="1;19pkt 19fpkt"];
179--2093[label="1;17pkt 17fpkt"];
179--2197[label="0.0361446;3pkt 3fpkt"];
179--2219[label="1;17pkt 17fpkt"];
179--2227[label="1;4pkt 4fpkt"];
179--2229[label="0.666667;8pkt 8fpkt"];
179--2252[label="0.030303;1pkt 1fpkt"];
179--2258[label="0.0128205;1pkt 1fpkt"];
179--2271[label="1;3pkt 3fpkt"];
179--2282[label="0.483871;30pkt 30fpkt"];
179--2303[label="0.0952381;2pkt 2fpkt"];
179--2359[label="0.0232558;1pkt 1fpkt"];
179--2365[label="0.0491803;3pkt 3fpkt"];
179--2372[label="0.0545455;3pkt 3fpkt"];
179--2380[label="0.1;2pkt 2fpkt"];
179--2394[label="1;46pkt 46fpkt"];
179--2455[label="1;11pkt 11fpkt"];
179--2470[label="0.5;2pkt 2fpkt"];
179--2499[label="0.0632911;5pkt 5fpkt"];
179--2505[label="0.0952381;4pkt 4fpkt"];
179--2546[label="1;3pkt 3fpkt"];
179--2580[label="1;35pkt 35fpkt"];
179--2581[label="0.00729927;1pkt 1fpkt"];
179--2613[label="1;11pkt 11fpkt"];
179--2614[label="0.666667;2pkt 2fpkt"];
179--2650[label="0.296296;8pkt 8fpkt"];
179--2655[label="1;33pkt 33fpkt"];
179--2662[label="0.0384615;1pkt 1fpkt"];
179--2724[label="1;17pkt 17fpkt"];
179--2733[label="0.030303;1pkt 1fpkt"];
179--2735[label="0.012987;1pkt 1fpkt"];
179--2743[label="0.483871;30pkt 30fpkt"];
179--2778[label="0.1;2pkt 2fpkt"];
179--2793[label="0.487179;19pkt 19fpkt"];
179--2802[label="1;11pkt 11fpkt"];
179--2808[label="0.5;2pkt 2fpkt"];
179--2849[label="1;35pkt 35fpkt"];
179--2878[label="1;34pkt 34fpkt"];
179--2896[label="0.030303;1pkt 1fpkt"];
179--2912[label="1;1pkt 1fpkt"];
489--519[label="0.535714;30pkt 30fpkt"];
489--727[label="0.175;7pkt 7fpkt"];
489--1083[label="0.0169492;2pkt 2fpkt"];
489--1450[label="0.535714;30pkt 30fpkt"];
489--1781[label="0.179487;7pkt 7fpkt"];
489--1996[label="0.0519481;8pkt 8fpkt"];
489--2009[label="0.0519481;8pkt 8fpkt"];
489--2016[label="0.0519481;8pkt 8fpkt"];
489--2207[label="1;80pkt 80fpkt"];
519--1350[label="0.464286;26pkt 26fpkt"];
519--1450[label="1;56pkt 56fpkt"];
663--2006[label="0.047619;1pkt 1fpkt"];
676--1527[label="1;80pkt 80fpkt"];
676--2055[label="1;80pkt 80fpkt"];
1156--1328[label="0.0120482;1pkt 1fpkt"];
1156--1428[label="0.228916;19pkt 19fpkt"];
1156--1822[label="0.0120482;1pkt 1fpkt"];
1156--1875[label="0.0120482;1pkt 1fpkt"];
1156--1996[label="0.0240964;2pkt 2fpkt"];
1156--2000[label="0.0120482;1pkt 1fpkt"];
1156--2003[label="0.0120482;1pkt 1fpkt"];
1156--2005[label="0.0240964;2pkt 2fpkt"];
1156--2006[label="0.0481928;4pkt 4fpkt"];
1156--2008[label="0.0843373;7pkt 7fpkt"];
1156--2009[label="0.0240964;2pkt 2fpkt"];
1156--2014[label="0.0120482;1pkt 1fpkt"];
1156--2016[label="0.0240964;2pkt 2fpkt"];
1156--2020[label="0.0120482;1pkt 1fpkt"];
1163--1581[label="0.444444;20pkt 20fpkt"];
1163--1781[label="0.0512821;2pkt 2fpkt"];
1163--2008[label="0.03125;7pkt 7fpkt"];
1163--2414[label="1;37pkt 37fpkt"];
1163--2470[label="0.5;2pkt 2fpkt"];
1163--2505[label="0.0238095;1pkt 1fpkt"];
1163--2645[label="0.210526;12pkt 12fpkt"];
1163--2690[label="0.931034;27pkt 27fpkt"];
1163--2808[label="0.5;2pkt 2fpkt"];
1163--2874[label="0.210526;12pkt 12fpkt"];
1186--2008[label="0.291667;35pkt 35fpkt"];
1211--1428[label="0.242105;23pkt 23fpkt"];
1211--1996[label="0.0421053;4pkt 4fpkt"];
1211--2006[label="0.0526316;5pkt 5fpkt"];
1211--2008[label="0.115789;11pkt 11fpkt"];
1211--2009[label="0.0421053;4pkt 4fpkt"];
1211--2016[label="0.0421053;4pkt 4fpkt"];
1225--1428[label="0.159574;15pkt 15fpkt"];
1225--1996[label="0.0212766;2pkt 2fpkt"];
1225--2006[label="0.0425532;4pkt 4fpkt"];
1225--2008[label="0.148936;14pkt 14fpkt"];
1225--2009[label="0.0212766;2pkt 2fpkt"];
1225--2016[label="0.0212766;2pkt 2fpkt"];
1350--1450[label="0.464286;26pkt 26fpkt"];
1350--1996[label="0.189415;68pkt 68fpkt"];
1350--2006[label="0.00278552;1pkt 1fpkt"];
1350--2008[label="0.00278552;1pkt 1fpkt"];
1350--2009[label="0.189415;68pkt 68fpkt"];
1350--2016[label="0.189415;68pkt 68fpkt"];
1350--2038[label="0.0194175;2pkt 2fpkt"];
1350--2044[label="1;2pkt 2fpkt"];
1350--2062[label="1;34pkt 34fpkt"];
1350--2093[label="0.470588;8pkt 8fpkt"];
1350--2365[label="0.0163934;1pkt 1fpkt"];
1350--2372[label="0.0363636;2pkt 2fpkt"];
1350--2455[label="1;11pkt 11fpkt"];
1350--2499[label="0.0253165;2pkt 2fpkt"];
1350--2505[label="0.047619;2pkt 2fpkt"];
1350--2546[label="1;3pkt 3fpkt"];
1350--2580[label="0.885714;31pkt 31fpkt"];
1350--2613[label="0.363636;4pkt 4fpkt"];
1350--2614[label="0.333333;1pkt 1fpkt"];
1350--2650[label="0.148148;4pkt 4fpkt"];
1350--2793[label="0.205128;8pkt 8fpkt"];
1350--2802[label="1;11pkt 11fpkt"];
1350--2849[label="0.885714;31pkt 31fpkt"];
1350--2912[label="1;1pkt 1fpkt"];
1428--1996[label="0.151163;52pkt 52fpkt"];
1428--2009[label="0.151163;52pkt 52fpkt"];
1428--2016[label="0.151163;52pkt 52fpkt"];
1428--2406[label="0.243243;18pkt 18fpkt"];
1428--2513[label="0.270588;23pkt 23fpkt"];
1527--2055[label="1;80pkt 80fpkt"];
2219--2724[label="1;17pkt 17fpkt"];
2252--2733[label="1;33pkt 33fpkt"];
2252--2896[label="1;33pkt 33fpkt"];
2282--2743[label="1;62pkt 62fpkt"];
2455--2802[label="1;11pkt 11fpkt"];
2470--2808[label="1;4pkt 4fpkt"];
2507--2820[label="1;118pkt 118fpkt"];
2580--2849[label="1;35pkt 35fpkt"];
2655--2878[label="1;33pkt 33fpkt"];
2733--2896[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.8.182" src_port="80"/>
      <filter dst_ip="197.11.24.239" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="160.164.116.39"/>
      <from sec="994482008" usec="0"/>
      <to sec="994483178" usec="0"/>
    </slice>
    <from sec="994482008" usec="0"/>
    <to sec="994483178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="149.168.169.32"/>
      <from sec="994482745" usec="0"/>
      <to sec="994483188" usec="0"/>
    </slice>
    <from sec="994482745" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699975,2.1774,504,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
1240[label="147.87.117.66;s;49pkt 49fpkt", shape=diamond, color=yellow];
1244[label="75.97.114.243;d;49pkt 49fpkt", shape=diamond, color=yellow];
1888[label="147.87.117.66;s;49pkt 49fpkt", shape=hexagon, color=black];
2212[label="147.87.117.66;51pkt 51fpkt", shape=pentagon, color=darkviolet];
2721[label="147.87.117.66;50pkt 50fpkt", shape=invtriangle, color=brown];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.117.66:*, 75.97.114.243:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3149: (1.00806%)&lt;BR/&gt; 3148: (1.00806%)&lt;BR/&gt; 3147: (1.00806%)&lt;BR/&gt; 3146: (1.00806%)&gt;];
}
1240--1244[label="1;49pkt 49fpkt"];
1240--1888[label="1;49pkt 49fpkt"];
1240--2212[label="1;49pkt 49fpkt"];
1240--2721[label="0.979592;48pkt 48fpkt"];
1244--1888[label="1;49pkt 49fpkt"];
1244--2212[label="1;49pkt 49fpkt"];
1244--2721[label="0.979592;48pkt 48fpkt"];
1888--2212[label="1;49pkt 49fpkt"];
1888--2721[label="0.979592;48pkt 48fpkt"];
2212--2721[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="75.97.114.243" dst_port="443" src_ip="147.87.117.66"/>
    </slice>
    <from sec="994482771" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.33457,2.16064,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
51[label="196.122.179.12;d;611pkt 611fpkt", shape=diamond, color=yellow];
52[label="13.208.232.240;s;3pkt 3fpkt", shape=diamond, color=yellow];
626[label="74.31.57.245;s;10pkt 10fpkt", shape=diamond, color=yellow];
759[label="209.49.16.102;s;4pkt 4fpkt", shape=diamond, color=yellow];
779[label="110.144.189.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
780[label="75.160.139.200;s;1pkt 1fpkt", shape=diamond, color=yellow];
781[label="74.32.96.108;s;1pkt 1fpkt", shape=diamond, color=yellow];
852[label="12.21.230.163;s;1pkt 1fpkt", shape=diamond, color=yellow];
932[label="13.132.34.119;s;6pkt 6fpkt", shape=diamond, color=yellow];
957[label="110.148.7.102;s;3pkt 3fpkt", shape=diamond, color=yellow];
959[label="13.249.33.178;s;1pkt 1fpkt", shape=diamond, color=yellow];
1250[label="195.89.4.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
1261[label="219.72.4.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
1264[label="12.20.215.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
1277[label="110.195.64.185;s;2pkt 2fpkt", shape=diamond, color=yellow];
1360[label="13.208.232.240;s;3pkt 3fpkt", shape=hexagon, color=black];
1499[label="196.122.179.12;d;517pkt 517fpkt", shape=hexagon, color=black];
1582[label="75.160.139.200;s;1pkt 1fpkt", shape=hexagon, color=black];
1664[label="13.132.34.119;s;6pkt 6fpkt", shape=hexagon, color=black];
1667[label="209.49.16.102;s;4pkt 4fpkt", shape=hexagon, color=black];
1746[label="12.21.230.163;s;1pkt 1fpkt", shape=hexagon, color=black];
1748[label="74.32.96.108;s;1pkt 1fpkt", shape=hexagon, color=black];
1757[label="13.249.33.178;s;1pkt 1fpkt", shape=hexagon, color=black];
1916[label="13.208.232.240;s;1pkt 1fpkt", shape=polygon, color=gold];
1935[label="196.122.179.12;d;474pkt 474fpkt", shape=polygon, color=gold];
1972[label="74.32.96.108;s;1pkt 1fpkt", shape=polygon, color=gold];
2343[label="110.202.174.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2352[label="192.14.145.116;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2517[label="72.189.141.176;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2577[label="13.10.218.206;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2770[label="192.14.145.116;25pkt 25fpkt", shape=invtriangle, color=brown];
2831[label="110.195.64.185;2pkt 2fpkt", shape=invtriangle, color=brown];
2907[label="74.32.96.108;1pkt 1fpkt", shape=invhouse, color=bisque];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6346, 196.122.179.12:*}[62.3476%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (36.2903%)&lt;BR/&gt; 6347: (7.8053%)&lt;BR/&gt; 80: (2.76498%)&lt;BR/&gt; 0: (2.30415%)&lt;BR/&gt; 137: (2.01613%)&gt;];
}
51--52[label="1;3pkt 3fpkt"];
51--129[label="0.5;1pkt 1fpkt"];
51--626[label="1;10pkt 10fpkt"];
51--759[label="1;4pkt 4fpkt"];
51--779[label="1;1pkt 1fpkt"];
51--780[label="1;1pkt 1fpkt"];
51--781[label="1;1pkt 1fpkt"];
51--852[label="1;1pkt 1fpkt"];
51--932[label="1;6pkt 6fpkt"];
51--957[label="1;3pkt 3fpkt"];
51--959[label="1;1pkt 1fpkt"];
51--1180[label="0.5;1pkt 1fpkt"];
51--1250[label="1;1pkt 1fpkt"];
51--1261[label="1;1pkt 1fpkt"];
51--1264[label="1;1pkt 1fpkt"];
51--1277[label="1;2pkt 2fpkt"];
51--1360[label="1;3pkt 3fpkt"];
51--1499[label="1;517pkt 517fpkt"];
51--1582[label="1;1pkt 1fpkt"];
51--1664[label="1;6pkt 6fpkt"];
51--1667[label="1;4pkt 4fpkt"];
51--1746[label="1;1pkt 1fpkt"];
51--1748[label="1;1pkt 1fpkt"];
51--1757[label="1;1pkt 1fpkt"];
51--1916[label="1;1pkt 1fpkt"];
51--1935[label="1;474pkt 474fpkt"];
51--1972[label="1;1pkt 1fpkt"];
51--1997[label="0.00327332;2pkt 2fpkt"];
51--2010[label="0.00327332;2pkt 2fpkt"];
51--2017[label="0.00327332;2pkt 2fpkt"];
51--2343[label="1;1pkt 1fpkt"];
51--2352[label="0.08;2pkt 2fpkt"];
51--2517[label="0.0833333;2pkt 2fpkt"];
51--2577[label="1;1pkt 1fpkt"];
51--2770[label="0.08;2pkt 2fpkt"];
51--2831[label="1;2pkt 2fpkt"];
51--2907[label="1;1pkt 1fpkt"];
52--1360[label="1;3pkt 3fpkt"];
52--1499[label="1;3pkt 3fpkt"];
52--1916[label="1;1pkt 1fpkt"];
52--1935[label="1;3pkt 3fpkt"];
626--1499[label="1;10pkt 10fpkt"];
626--1935[label="0.9;9pkt 9fpkt"];
759--1499[label="1;4pkt 4fpkt"];
759--1667[label="1;4pkt 4fpkt"];
759--1935[label="1;4pkt 4fpkt"];
779--1499[label="1;1pkt 1fpkt"];
779--1935[label="1;1pkt 1fpkt"];
780--1499[label="1;1pkt 1fpkt"];
780--1582[label="1;1pkt 1fpkt"];
780--1935[label="1;1pkt 1fpkt"];
781--1499[label="1;1pkt 1fpkt"];
781--1748[label="1;1pkt 1fpkt"];
781--1935[label="1;1pkt 1fpkt"];
781--1972[label="1;1pkt 1fpkt"];
781--2907[label="1;1pkt 1fpkt"];
852--1499[label="1;1pkt 1fpkt"];
852--1746[label="1;1pkt 1fpkt"];
852--1935[label="1;1pkt 1fpkt"];
932--1499[label="1;6pkt 6fpkt"];
932--1664[label="1;6pkt 6fpkt"];
932--1935[label="1;6pkt 6fpkt"];
957--1499[label="0.666667;2pkt 2fpkt"];
957--1935[label="0.666667;2pkt 2fpkt"];
959--1499[label="1;1pkt 1fpkt"];
959--1757[label="1;1pkt 1fpkt"];
959--1935[label="1;1pkt 1fpkt"];
1277--2831[label="1;2pkt 2fpkt"];
1360--1499[label="1;3pkt 3fpkt"];
1360--1916[label="1;1pkt 1fpkt"];
1360--1935[label="1;3pkt 3fpkt"];
1499--1582[label="1;1pkt 1fpkt"];
1499--1664[label="1;6pkt 6fpkt"];
1499--1667[label="1;4pkt 4fpkt"];
1499--1746[label="1;1pkt 1fpkt"];
1499--1748[label="1;1pkt 1fpkt"];
1499--1757[label="1;1pkt 1fpkt"];
1499--1916[label="1;1pkt 1fpkt"];
1499--1935[label="1;474pkt 474fpkt"];
1499--1972[label="1;1pkt 1fpkt"];
1499--1997[label="0.00386847;2pkt 2fpkt"];
1499--2010[label="0.00386847;2pkt 2fpkt"];
1499--2017[label="0.00386847;2pkt 2fpkt"];
1499--2343[label="1;1pkt 1fpkt"];
1499--2352[label="0.04;1pkt 1fpkt"];
1499--2517[label="0.0416667;1pkt 1fpkt"];
1499--2577[label="1;1pkt 1fpkt"];
1499--2770[label="0.04;1pkt 1fpkt"];
1499--2907[label="1;1pkt 1fpkt"];
1582--1935[label="1;1pkt 1fpkt"];
1664--1935[label="1;6pkt 6fpkt"];
1667--1935[label="1;4pkt 4fpkt"];
1746--1935[label="1;1pkt 1fpkt"];
1748--1935[label="1;1pkt 1fpkt"];
1748--1972[label="1;1pkt 1fpkt"];
1748--2907[label="1;1pkt 1fpkt"];
1757--1935[label="1;1pkt 1fpkt"];
1916--1935[label="1;1pkt 1fpkt"];
1935--1972[label="1;1pkt 1fpkt"];
1935--1997[label="0.00421941;2pkt 2fpkt"];
1935--2010[label="0.00421941;2pkt 2fpkt"];
1935--2017[label="0.00421941;2pkt 2fpkt"];
1935--2343[label="1;1pkt 1fpkt"];
1935--2352[label="0.04;1pkt 1fpkt"];
1935--2517[label="0.0416667;1pkt 1fpkt"];
1935--2577[label="1;1pkt 1fpkt"];
1935--2770[label="0.04;1pkt 1fpkt"];
1935--2907[label="1;1pkt 1fpkt"];
1972--2907[label="1;1pkt 1fpkt"];
2352--2770[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="196.122.179.12" src_port="6346"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
1269[label="192.107.66.56;s;19pkt 19fpkt", shape=diamond, color=yellow];
1270[label="147.87.123.10;d;19pkt 19fpkt", shape=diamond, color=yellow];
1898[label="192.107.66.56;s;19pkt 19fpkt", shape=hexagon, color=black];
2182[label="192.107.66.56;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.107.66.56:80, 147.87.123.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1995: (2.5641%)&lt;BR/&gt; 1994: (2.5641%)&lt;BR/&gt; 1993: (2.5641%)&lt;BR/&gt; 1992: (2.5641%)&gt;];
}
1269--1270[label="1;19pkt 19fpkt"];
1269--1898[label="1;19pkt 19fpkt"];
1269--2182[label="1;19pkt 19fpkt"];
1270--1898[label="1;19pkt 19fpkt"];
1270--2182[label="1;19pkt 19fpkt"];
1898--2182[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.123.10" src_ip="192.107.66.56" src_port="80"/>
    </slice>
    <from sec="994483052" usec="0"/>
    <to sec="994483202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484937,2.23777,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
1268[label="192.107.66.56;d;19pkt 19fpkt", shape=diamond, color=yellow];
1271[label="147.87.123.10;s;19pkt 19fpkt", shape=diamond, color=yellow];
2063[label="147.87.123.10;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.123.10:*, 192.107.66.56:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1995: (2.54237%)&lt;BR/&gt; 1994: (2.54237%)&lt;BR/&gt; 1993: (2.54237%)&lt;BR/&gt; 1992: (2.54237%)&gt;];
}
1268--1271[label="1;19pkt 19fpkt"];
1268--2063[label="1;19pkt 19fpkt"];
1271--2063[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="192.107.66.56" dst_port="80" src_ip="147.87.123.10"/>
    </slice>
    <from sec="994483052" usec="0"/>
    <to sec="994483202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="149.168.148.26"/>
      <from sec="994483069" usec="0"/>
      <to sec="994483188" usec="0"/>
    </slice>
    <from sec="994483069" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
1274[label="196.212.165.108;d;10pkt 10fpkt", shape=diamond, color=yellow];
1275[label="211.5.42.250;s;10pkt 10fpkt", shape=diamond, color=yellow];
1899[label="211.5.42.250;s;10pkt 10fpkt", shape=hexagon, color=black];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.5.42.250:80, 196.212.165.108:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1107: (5%)&lt;BR/&gt; 1105: (5%)&lt;BR/&gt; 1092: (5%)&lt;BR/&gt; 1090: (5%)&gt;];
}
1274--1275[label="1;10pkt 10fpkt"];
1274--1899[label="1;10pkt 10fpkt"];
1275--1899[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="196.212.165.108" src_ip="211.5.42.250" src_port="80"/>
    </slice>
    <from sec="994483073" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484937,2.23777,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
506[label="144.177.224.49;s;3pkt 3fpkt", shape=diamond, color=yellow];
1279[label="147.87.224.178;d;19pkt 19fpkt", shape=diamond, color=yellow];
2432[label="141.128.112.145;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.200.0.145:80, 147.87.224.178:*}[57.8947%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4101: (4.34783%)&lt;BR/&gt; 4091: (4.34783%)&lt;BR/&gt; 4081: (4.34783%)&lt;BR/&gt; 4080: (4.34783%)&gt;];
}
506--1279[label="1;3pkt 3fpkt"];
506--2167[label="1;3pkt 3fpkt"];
1279--2167[label="0.5;3pkt 3fpkt"];
1279--2432[label="1;1pkt 1fpkt"];
1279--2433[label="0.105263;2pkt 2fpkt"];
1279--2791[label="0.105263;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.224.178" src_ip="193.200.0.145" src_port="80"/>
    </slice>
    <from sec="994483096" usec="0"/>
    <to sec="994483149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="147.87.224.178"/>
      <from sec="994483096" usec="0"/>
      <to sec="994483149" usec="0"/>
    </slice>
    <from sec="994483096" usec="0"/>
    <to sec="994483149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
47[label="147.87.122.104;d;105pkt 105fpkt", shape=diamond, color=yellow];
50[label="192.118.158.165;s;105pkt 105fpkt", shape=diamond, color=yellow];
1283[label="147.87.122.104;d;105pkt 105fpkt", shape=hexagon, color=black];
1285[label="192.118.158.165;s;105pkt 105fpkt", shape=hexagon, color=black];
1901[label="147.87.122.104;d;105pkt 105fpkt", shape=polygon, color=gold];
1902[label="192.118.158.165;s;105pkt 105fpkt", shape=polygon, color=gold];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.118.158.165:80, 147.87.122.104:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4145: (0.47619%)&lt;BR/&gt; 4144: (0.47619%)&lt;BR/&gt; 4143: (0.47619%)&lt;BR/&gt; 4142: (0.47619%)&gt;];
}
47--50[label="1;105pkt 105fpkt"];
47--1283[label="1;105pkt 105fpkt"];
47--1285[label="1;105pkt 105fpkt"];
47--1901[label="1;105pkt 105fpkt"];
47--1902[label="1;105pkt 105fpkt"];
47--1996[label="1;105pkt 105fpkt"];
47--2009[label="1;105pkt 105fpkt"];
47--2016[label="1;105pkt 105fpkt"];
50--1283[label="1;105pkt 105fpkt"];
50--1285[label="1;105pkt 105fpkt"];
50--1901[label="1;105pkt 105fpkt"];
50--1902[label="1;105pkt 105fpkt"];
50--1996[label="1;105pkt 105fpkt"];
50--2009[label="1;105pkt 105fpkt"];
50--2016[label="1;105pkt 105fpkt"];
1283--1285[label="1;105pkt 105fpkt"];
1283--1901[label="1;105pkt 105fpkt"];
1283--1902[label="1;105pkt 105fpkt"];
1283--1996[label="1;105pkt 105fpkt"];
1283--2009[label="1;105pkt 105fpkt"];
1283--2016[label="1;105pkt 105fpkt"];
1285--1901[label="1;105pkt 105fpkt"];
1285--1902[label="1;105pkt 105fpkt"];
1285--1996[label="1;105pkt 105fpkt"];
1285--2009[label="1;105pkt 105fpkt"];
1285--2016[label="1;105pkt 105fpkt"];
1901--1902[label="1;105pkt 105fpkt"];
1901--1996[label="1;105pkt 105fpkt"];
1901--2009[label="1;105pkt 105fpkt"];
1901--2016[label="1;105pkt 105fpkt"];
1902--1996[label="1;105pkt 105fpkt"];
1902--2009[label="1;105pkt 105fpkt"];
1902--2016[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.122.104" src_ip="192.118.158.165" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994482038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
57[label="14.216.213.99;s;1pkt 1fpkt", shape=diamond, color=yellow];
58[label="128.141.52.135;d;146pkt 146fpkt", shape=diamond, color=yellow];
93[label="75.162.128.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
117[label="12.81.18.50;s;1pkt 1fpkt", shape=diamond, color=yellow];
125[label="112.16.27.229;s;1pkt 1fpkt", shape=diamond, color=yellow];
129[label="13.241.20.181;s;2pkt 2fpkt", shape=diamond, color=yellow];
165[label="12.75.83.79;s;1pkt 1fpkt", shape=diamond, color=yellow];
206[label="12.54.93.18;s;1pkt 1fpkt", shape=diamond, color=yellow];
210[label="213.52.225.66;s;1pkt 1fpkt", shape=diamond, color=yellow];
774[label="209.204.137.147;s;1pkt 1fpkt", shape=diamond, color=yellow];
840[label="13.212.148.214;s;1pkt 1fpkt", shape=diamond, color=yellow];
938[label="218.114.212.50;s;1pkt 1fpkt", shape=diamond, color=yellow];
1039[label="213.216.64.90;s;1pkt 1fpkt", shape=diamond, color=yellow];
1288[label="128.141.52.135;d;146pkt 146fpkt", shape=hexagon, color=black];
1304[label="12.81.18.50;s;1pkt 1fpkt", shape=hexagon, color=black];
1325[label="12.54.93.18;s;1pkt 1fpkt", shape=hexagon, color=black];
1602[label="13.241.20.181;s;1pkt 1fpkt", shape=hexagon, color=black];
1752[label="213.216.64.90;s;1pkt 1fpkt", shape=hexagon, color=black];
1904[label="128.141.52.135;d;131pkt 131fpkt", shape=polygon, color=gold];
1920[label="12.81.18.50;s;1pkt 1fpkt", shape=polygon, color=gold];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.141.52.135:6346}[72.1088%]&lt;BR/&gt;{*:6346, 128.141.52.135:*}[25.8503%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (49.3197%)&lt;BR/&gt; 52758: (0.680272%)&lt;BR/&gt; 2438: (0.680272%)&lt;BR/&gt; 1491: (0.680272%)&lt;BR/&gt; 0: (0.680272%)&gt;];
}
57--58[label="1;1pkt 1fpkt"];
57--1288[label="1;1pkt 1fpkt"];
57--1904[label="1;1pkt 1fpkt"];
58--93[label="1;1pkt 1fpkt"];
58--117[label="1;1pkt 1fpkt"];
58--125[label="1;1pkt 1fpkt"];
58--129[label="0.5;1pkt 1fpkt"];
58--165[label="1;1pkt 1fpkt"];
58--206[label="1;1pkt 1fpkt"];
58--210[label="1;1pkt 1fpkt"];
58--774[label="1;1pkt 1fpkt"];
58--840[label="1;1pkt 1fpkt"];
58--938[label="1;1pkt 1fpkt"];
58--1039[label="1;1pkt 1fpkt"];
58--1288[label="1;146pkt 146fpkt"];
58--1304[label="1;1pkt 1fpkt"];
58--1325[label="1;1pkt 1fpkt"];
58--1602[label="1;1pkt 1fpkt"];
58--1752[label="1;1pkt 1fpkt"];
58--1904[label="1;131pkt 131fpkt"];
58--1920[label="1;1pkt 1fpkt"];
93--1288[label="1;1pkt 1fpkt"];
93--1904[label="1;1pkt 1fpkt"];
117--1288[label="1;1pkt 1fpkt"];
117--1304[label="1;1pkt 1fpkt"];
117--1904[label="1;1pkt 1fpkt"];
117--1920[label="1;1pkt 1fpkt"];
125--1288[label="1;1pkt 1fpkt"];
125--1904[label="1;1pkt 1fpkt"];
129--1288[label="0.5;1pkt 1fpkt"];
129--1602[label="1;1pkt 1fpkt"];
129--1904[label="0.5;1pkt 1fpkt"];
165--1288[label="1;1pkt 1fpkt"];
165--1904[label="1;1pkt 1fpkt"];
206--1288[label="1;1pkt 1fpkt"];
206--1325[label="1;1pkt 1fpkt"];
206--1904[label="1;1pkt 1fpkt"];
210--1288[label="1;1pkt 1fpkt"];
210--1904[label="1;1pkt 1fpkt"];
774--1288[label="1;1pkt 1fpkt"];
774--1904[label="1;1pkt 1fpkt"];
840--1288[label="1;1pkt 1fpkt"];
840--1904[label="1;1pkt 1fpkt"];
938--1288[label="1;1pkt 1fpkt"];
938--1904[label="1;1pkt 1fpkt"];
1039--1288[label="1;1pkt 1fpkt"];
1039--1752[label="1;1pkt 1fpkt"];
1039--1904[label="1;1pkt 1fpkt"];
1288--1304[label="1;1pkt 1fpkt"];
1288--1325[label="1;1pkt 1fpkt"];
1288--1602[label="1;1pkt 1fpkt"];
1288--1752[label="1;1pkt 1fpkt"];
1288--1904[label="1;131pkt 131fpkt"];
1288--1920[label="1;1pkt 1fpkt"];
1304--1904[label="1;1pkt 1fpkt"];
1304--1920[label="1;1pkt 1fpkt"];
1325--1904[label="1;1pkt 1fpkt"];
1602--1904[label="1;1pkt 1fpkt"];
1752--1904[label="1;1pkt 1fpkt"];
1904--1920[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.52.135" src_port="6346"/>
      <filter dst_ip="128.141.52.135" dst_port="6346"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
133[label="128.141.195.78;d;1327pkt 1327fpkt", shape=diamond, color=yellow];
134[label="75.181.75.214;s;1327pkt 1327fpkt", shape=diamond, color=yellow];
1307[label="128.141.195.78;d;943pkt 943fpkt", shape=hexagon, color=black];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.181.75.214:80, 128.141.195.78:*}[35.0414%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.8974%)&lt;BR/&gt; 53: (4.33695%)&lt;BR/&gt; 6346: (4.30915%)&lt;BR/&gt; 25: (2.11287%)&lt;BR/&gt; 6699: (1.26494%)&gt;];
}
133--134[label="1;1327pkt 1327fpkt"];
133--1307[label="1;943pkt 943fpkt"];
133--1996[label="0.0158252;21pkt 21fpkt"];
133--1997[label="0.0120573;16pkt 16fpkt"];
133--1999[label="0.00112233;1pkt 1fpkt"];
133--2000[label="0.00075358;1pkt 1fpkt"];
133--2001[label="0.0105501;14pkt 14fpkt"];
133--2002[label="0.0075358;10pkt 10fpkt"];
133--2003[label="0.0037679;5pkt 5fpkt"];
133--2004[label="0.00527506;7pkt 7fpkt"];
133--2005[label="0.0037679;5pkt 5fpkt"];
133--2006[label="0.0203466;27pkt 27fpkt"];
133--2007[label="0.0075358;10pkt 10fpkt"];
133--2008[label="0.0248681;33pkt 33fpkt"];
133--2009[label="0.0158252;21pkt 21fpkt"];
133--2010[label="0.0120573;16pkt 16fpkt"];
133--2012[label="0.00112233;1pkt 1fpkt"];
133--2013[label="0.0075358;10pkt 10fpkt"];
133--2014[label="0.0037679;5pkt 5fpkt"];
133--2015[label="0.00527506;7pkt 7fpkt"];
133--2016[label="0.0158252;21pkt 21fpkt"];
133--2017[label="0.0120573;16pkt 16fpkt"];
133--2019[label="0.00112233;1pkt 1fpkt"];
133--2020[label="0.0037679;5pkt 5fpkt"];
133--2021[label="0.00527506;7pkt 7fpkt"];
134--1307[label="1;943pkt 943fpkt"];
134--1996[label="0.0158252;21pkt 21fpkt"];
134--1997[label="0.0120573;16pkt 16fpkt"];
134--1999[label="0.00112233;1pkt 1fpkt"];
134--2000[label="0.00075358;1pkt 1fpkt"];
134--2001[label="0.0105501;14pkt 14fpkt"];
134--2002[label="0.0075358;10pkt 10fpkt"];
134--2003[label="0.0037679;5pkt 5fpkt"];
134--2004[label="0.00527506;7pkt 7fpkt"];
134--2005[label="0.0037679;5pkt 5fpkt"];
134--2006[label="0.0203466;27pkt 27fpkt"];
134--2007[label="0.0075358;10pkt 10fpkt"];
134--2008[label="0.0248681;33pkt 33fpkt"];
134--2009[label="0.0158252;21pkt 21fpkt"];
134--2010[label="0.0120573;16pkt 16fpkt"];
134--2012[label="0.00112233;1pkt 1fpkt"];
134--2013[label="0.0075358;10pkt 10fpkt"];
134--2014[label="0.0037679;5pkt 5fpkt"];
134--2015[label="0.00527506;7pkt 7fpkt"];
134--2016[label="0.0158252;21pkt 21fpkt"];
134--2017[label="0.0120573;16pkt 16fpkt"];
134--2019[label="0.00112233;1pkt 1fpkt"];
134--2020[label="0.0037679;5pkt 5fpkt"];
134--2021[label="0.00527506;7pkt 7fpkt"];
1307--1996[label="0.0222694;21pkt 21fpkt"];
1307--1997[label="0.0169671;16pkt 16fpkt"];
1307--1999[label="0.00112233;1pkt 1fpkt"];
1307--2000[label="0.00106045;1pkt 1fpkt"];
1307--2001[label="0.0148462;14pkt 14fpkt"];
1307--2002[label="0.0106045;10pkt 10fpkt"];
1307--2003[label="0.00530223;5pkt 5fpkt"];
1307--2004[label="0.00742312;7pkt 7fpkt"];
1307--2005[label="0.00530223;5pkt 5fpkt"];
1307--2006[label="0.028632;27pkt 27fpkt"];
1307--2007[label="0.00636267;6pkt 6fpkt"];
1307--2008[label="0.00742312;7pkt 7fpkt"];
1307--2009[label="0.0222694;21pkt 21fpkt"];
1307--2010[label="0.0169671;16pkt 16fpkt"];
1307--2012[label="0.00112233;1pkt 1fpkt"];
1307--2013[label="0.0106045;10pkt 10fpkt"];
1307--2014[label="0.00530223;5pkt 5fpkt"];
1307--2015[label="0.00742312;7pkt 7fpkt"];
1307--2016[label="0.0222694;21pkt 21fpkt"];
1307--2017[label="0.0169671;16pkt 16fpkt"];
1307--2019[label="0.00112233;1pkt 1fpkt"];
1307--2020[label="0.00530223;5pkt 5fpkt"];
1307--2021[label="0.00742312;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.195.78" src_ip="75.181.75.214" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
89[label="147.87.104.88;s;77pkt 77fpkt", shape=diamond, color=yellow];
135[label="110.165.10.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
199[label="110.180.128.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
213[label="192.202.43.159;d;1pkt 1fpkt", shape=diamond, color=yellow];
253[label="209.210.249.128;d;1pkt 1fpkt", shape=diamond, color=yellow];
359[label="13.168.218.182;d;1pkt 1fpkt", shape=diamond, color=yellow];
367[label="12.74.161.254;d;1pkt 1fpkt", shape=diamond, color=yellow];
673[label="110.61.176.75;d;1pkt 1fpkt", shape=diamond, color=yellow];
945[label="75.139.133.21;d;1pkt 1fpkt", shape=diamond, color=yellow];
978[label="13.176.138.195;d;1pkt 1fpkt", shape=diamond, color=yellow];
1042[label="75.198.2.27;d;2pkt 2fpkt", shape=diamond, color=yellow];
1127[label="14.220.143.155;d;9pkt 9fpkt", shape=diamond, color=yellow];
1173[label="13.84.72.103;d;5pkt 5fpkt", shape=diamond, color=yellow];
1308[label="110.165.10.89;d;1pkt 1fpkt", shape=hexagon, color=black];
1319[label="110.180.128.129;d;1pkt 1fpkt", shape=hexagon, color=black];
1462[label="12.74.161.254;d;1pkt 1fpkt", shape=hexagon, color=black];
1505[label="209.210.249.128;d;1pkt 1fpkt", shape=hexagon, color=black];
1530[label="192.202.43.159;d;1pkt 1fpkt", shape=hexagon, color=black];
1603[label="13.168.218.182;d;1pkt 1fpkt", shape=hexagon, color=black];
1675[label="110.61.176.75;d;1pkt 1fpkt", shape=hexagon, color=black];
1677[label="75.139.133.21;d;1pkt 1fpkt", shape=hexagon, color=black];
1755[label="75.198.2.27;d;2pkt 2fpkt", shape=hexagon, color=black];
1802[label="13.176.138.195;d;1pkt 1fpkt", shape=hexagon, color=black];
1846[label="147.87.104.88;s;77pkt 77fpkt", shape=hexagon, color=black];
1987[label="75.198.2.27;d;2pkt 2fpkt", shape=polygon, color=gold];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.104.88:6347, *:*}[73.0769%]&lt;BR/&gt;{147.87.104.88:*, *:6346}[24.359%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6347: (36.1979%)&lt;BR/&gt; 6346: (13.5417%)&lt;BR/&gt; 49198: (1.30208%)&lt;BR/&gt; 49197: (1.30208%)&lt;BR/&gt; 3968: (1.04167%)&gt;];
}
89--135[label="1;1pkt 1fpkt"];
89--199[label="1;1pkt 1fpkt"];
89--213[label="1;1pkt 1fpkt"];
89--253[label="1;1pkt 1fpkt"];
89--357[label="1;1pkt 1fpkt"];
89--359[label="1;1pkt 1fpkt"];
89--367[label="1;1pkt 1fpkt"];
89--673[label="1;1pkt 1fpkt"];
89--945[label="1;1pkt 1fpkt"];
89--978[label="1;1pkt 1fpkt"];
89--1042[label="1;2pkt 2fpkt"];
89--1127[label="0.888889;8pkt 8fpkt"];
89--1173[label="1;5pkt 5fpkt"];
89--1308[label="1;1pkt 1fpkt"];
89--1319[label="1;1pkt 1fpkt"];
89--1462[label="1;1pkt 1fpkt"];
89--1504[label="1;1pkt 1fpkt"];
89--1505[label="1;1pkt 1fpkt"];
89--1530[label="1;1pkt 1fpkt"];
89--1603[label="1;1pkt 1fpkt"];
89--1675[label="1;1pkt 1fpkt"];
89--1677[label="1;1pkt 1fpkt"];
89--1755[label="1;2pkt 2fpkt"];
89--1802[label="1;1pkt 1fpkt"];
89--1846[label="1;77pkt 77fpkt"];
89--1936[label="1;1pkt 1fpkt"];
89--1987[label="1;2pkt 2fpkt"];
135--1308[label="1;1pkt 1fpkt"];
135--1846[label="1;1pkt 1fpkt"];
199--1319[label="1;1pkt 1fpkt"];
199--1846[label="1;1pkt 1fpkt"];
213--1530[label="1;1pkt 1fpkt"];
213--1846[label="1;1pkt 1fpkt"];
253--1505[label="1;1pkt 1fpkt"];
253--1846[label="1;1pkt 1fpkt"];
359--1603[label="1;1pkt 1fpkt"];
359--1846[label="1;1pkt 1fpkt"];
367--1462[label="1;1pkt 1fpkt"];
367--1846[label="1;1pkt 1fpkt"];
673--1675[label="1;1pkt 1fpkt"];
673--1846[label="1;1pkt 1fpkt"];
945--1677[label="1;1pkt 1fpkt"];
945--1846[label="1;1pkt 1fpkt"];
978--1802[label="1;1pkt 1fpkt"];
978--1846[label="1;1pkt 1fpkt"];
1042--1755[label="1;2pkt 2fpkt"];
1042--1846[label="1;2pkt 2fpkt"];
1042--1987[label="1;2pkt 2fpkt"];
1127--1846[label="0.888889;8pkt 8fpkt"];
1173--1846[label="1;5pkt 5fpkt"];
1308--1846[label="1;1pkt 1fpkt"];
1319--1846[label="1;1pkt 1fpkt"];
1462--1846[label="1;1pkt 1fpkt"];
1505--1846[label="1;1pkt 1fpkt"];
1530--1846[label="1;1pkt 1fpkt"];
1603--1846[label="1;1pkt 1fpkt"];
1675--1846[label="1;1pkt 1fpkt"];
1677--1846[label="1;1pkt 1fpkt"];
1755--1846[label="1;2pkt 2fpkt"];
1755--1987[label="1;2pkt 2fpkt"];
1802--1846[label="1;1pkt 1fpkt"];
1846--1936[label="1;1pkt 1fpkt"];
1846--1987[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="147.87.104.88" src_port="6347"/>
      <filter dst_port="6346" src_ip="147.87.104.88"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
161[label="13.196.241.124;d;23pkt 23fpkt", shape=diamond, color=yellow];
162[label="149.180.193.74;s;31pkt 31fpkt", shape=diamond, color=yellow];
1313[label="13.196.241.124;d;23pkt 23fpkt", shape=hexagon, color=black];
2232[label="149.180.193.74;55pkt 55fpkt", shape=pentagon, color=darkviolet];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.180.193.74:*, 13.196.241.124:80}[43.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1061%)&lt;BR/&gt; 19533: (1.51515%)&lt;BR/&gt; 19510: (1.51515%)&lt;BR/&gt; 19509: (1.51515%)&lt;BR/&gt; 19502: (1.51515%)&gt;];
}
161--162[label="1;23pkt 23fpkt"];
161--1313[label="1;23pkt 23fpkt"];
161--1997[label="0.478261;11pkt 11fpkt"];
161--2010[label="0.478261;11pkt 11fpkt"];
161--2017[label="0.478261;11pkt 11fpkt"];
161--2232[label="1;23pkt 23fpkt"];
162--1313[label="1;23pkt 23fpkt"];
162--1997[label="0.354839;11pkt 11fpkt"];
162--2000[label="0.0322581;1pkt 1fpkt"];
162--2001[label="0.16129;5pkt 5fpkt"];
162--2010[label="0.354839;11pkt 11fpkt"];
162--2017[label="0.354839;11pkt 11fpkt"];
162--2232[label="1;31pkt 31fpkt"];
1313--1997[label="0.478261;11pkt 11fpkt"];
1313--2010[label="0.478261;11pkt 11fpkt"];
1313--2017[label="0.478261;11pkt 11fpkt"];
1313--2232[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="13.196.241.124" dst_port="80" src_ip="149.180.193.74"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
48[label="147.87.122.104;s;105pkt 105fpkt", shape=diamond, color=yellow];
49[label="192.118.158.165;d;105pkt 105fpkt", shape=diamond, color=yellow];
1284[label="192.118.158.165;d;105pkt 105fpkt", shape=hexagon, color=black];
1321[label="147.87.122.104;s;105pkt 105fpkt", shape=hexagon, color=black];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.122.104:*, 192.118.158.165:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4145: (0.47619%)&lt;BR/&gt; 4144: (0.47619%)&lt;BR/&gt; 4143: (0.47619%)&lt;BR/&gt; 4142: (0.47619%)&gt;];
}
48--49[label="1;105pkt 105fpkt"];
48--1284[label="1;105pkt 105fpkt"];
48--1321[label="1;105pkt 105fpkt"];
48--1997[label="1;105pkt 105fpkt"];
48--2010[label="1;105pkt 105fpkt"];
48--2017[label="1;105pkt 105fpkt"];
49--1284[label="1;105pkt 105fpkt"];
49--1321[label="1;105pkt 105fpkt"];
49--1997[label="1;105pkt 105fpkt"];
49--2010[label="1;105pkt 105fpkt"];
49--2017[label="1;105pkt 105fpkt"];
1284--1321[label="1;105pkt 105fpkt"];
1284--1997[label="1;105pkt 105fpkt"];
1284--2010[label="1;105pkt 105fpkt"];
1284--2017[label="1;105pkt 105fpkt"];
1321--1997[label="1;105pkt 105fpkt"];
1321--2010[label="1;105pkt 105fpkt"];
1321--2017[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_ip="192.118.158.165" dst_port="80" src_ip="147.87.122.104"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994482038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
218[label="110.187.165.99;d;1pkt 1fpkt", shape=diamond, color=yellow];
221[label="196.212.169.35;s;96pkt 96fpkt", shape=diamond, color=yellow];
335[label="110.192.196.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
457[label="13.132.30.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
530[label="212.183.39.212;d;2pkt 2fpkt", shape=diamond, color=yellow];
1329[label="110.187.165.99;d;1pkt 1fpkt", shape=hexagon, color=black];
1576[label="212.183.39.212;d;2pkt 2fpkt", shape=hexagon, color=black];
1597[label="196.212.169.35;s;80pkt 80fpkt", shape=hexagon, color=black];
1598[label="13.132.30.79;d;1pkt 1fpkt", shape=hexagon, color=black];
1665[label="110.192.196.202;d;1pkt 1fpkt", shape=hexagon, color=black];
2275[label="197.11.26.90;55pkt 55fpkt", shape=pentagon, color=darkviolet];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.11.26.90:0, *:0}[36.4238%]&lt;BR/&gt;{196.212.169.35:*, 219.238.46.215:6346}[24.5033%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (35.2697%)&lt;BR/&gt; 0: (23.6515%)&lt;BR/&gt; 6347: (1.65975%)&lt;BR/&gt; 1819: (0.829876%)&lt;BR/&gt; 1772: (0.829876%)&gt;];
}
218--221[label="1;1pkt 1fpkt"];
218--1329[label="1;1pkt 1fpkt"];
218--1597[label="1;1pkt 1fpkt"];
221--335[label="1;1pkt 1fpkt"];
221--457[label="1;1pkt 1fpkt"];
221--530[label="0.5;1pkt 1fpkt"];
221--1329[label="1;1pkt 1fpkt"];
221--1576[label="0.5;1pkt 1fpkt"];
221--1597[label="1;80pkt 80fpkt"];
221--1598[label="1;1pkt 1fpkt"];
221--1665[label="1;1pkt 1fpkt"];
335--1597[label="1;1pkt 1fpkt"];
335--1665[label="1;1pkt 1fpkt"];
457--1597[label="1;1pkt 1fpkt"];
457--1598[label="1;1pkt 1fpkt"];
530--1576[label="1;2pkt 2fpkt"];
530--1597[label="0.5;1pkt 1fpkt"];
530--2275[label="0.5;1pkt 1fpkt"];
1329--1597[label="1;1pkt 1fpkt"];
1576--1597[label="0.5;1pkt 1fpkt"];
1576--2275[label="0.5;1pkt 1fpkt"];
1597--1598[label="1;1pkt 1fpkt"];
1597--1665[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.238.46.215" dst_port="6346" src_ip="196.212.169.35"/>
      <filter src_ip="197.11.26.90"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
226[label="196.212.160.44;s;778pkt 778fpkt", shape=diamond, color=yellow];
227[label="14.209.115.42;d;713pkt 713fpkt", shape=diamond, color=yellow];
1330[label="196.212.160.44;s;609pkt 609fpkt", shape=hexagon, color=black];
1331[label="14.209.115.42;d;597pkt 597fpkt", shape=hexagon, color=black];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.212.160.44:*, 14.209.115.42:80}[91.6452%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2362: (0.0741565%)&lt;BR/&gt; 2361: (0.0741565%)&lt;BR/&gt; 2360: (0.0741565%)&lt;BR/&gt; 2359: (0.0741565%)&gt;];
}
226--227[label="1;713pkt 713fpkt"];
226--1226[label="0.0204082;2pkt 2fpkt"];
226--1330[label="1;609pkt 609fpkt"];
226--1331[label="1;597pkt 597fpkt"];
226--1997[label="0.119537;93pkt 93fpkt"];
226--2001[label="0.0102828;8pkt 8fpkt"];
226--2002[label="0.00771208;6pkt 6fpkt"];
226--2004[label="0.00899743;7pkt 7fpkt"];
226--2010[label="0.119537;93pkt 93fpkt"];
226--2013[label="0.00771208;6pkt 6fpkt"];
226--2015[label="0.00899743;7pkt 7fpkt"];
226--2017[label="0.119537;93pkt 93fpkt"];
226--2021[label="0.00899743;7pkt 7fpkt"];
227--1330[label="0.914614;557pkt 557fpkt"];
227--1331[label="1;597pkt 597fpkt"];
227--1997[label="0.109397;78pkt 78fpkt"];
227--2001[label="0.00841515;6pkt 6fpkt"];
227--2002[label="0.00841515;6pkt 6fpkt"];
227--2004[label="0.00981767;7pkt 7fpkt"];
227--2010[label="0.109397;78pkt 78fpkt"];
227--2013[label="0.00841515;6pkt 6fpkt"];
227--2015[label="0.00981767;7pkt 7fpkt"];
227--2017[label="0.109397;78pkt 78fpkt"];
227--2021[label="0.00981767;7pkt 7fpkt"];
1330--1331[label="0.932998;557pkt 557fpkt"];
1330--1997[label="0.152709;93pkt 93fpkt"];
1330--2001[label="0.0131363;8pkt 8fpkt"];
1330--2002[label="0.00985222;6pkt 6fpkt"];
1330--2004[label="0.0114943;7pkt 7fpkt"];
1330--2010[label="0.152709;93pkt 93fpkt"];
1330--2013[label="0.00985222;6pkt 6fpkt"];
1330--2015[label="0.0114943;7pkt 7fpkt"];
1330--2017[label="0.152709;93pkt 93fpkt"];
1330--2021[label="0.0114943;7pkt 7fpkt"];
1331--1997[label="0.130653;78pkt 78fpkt"];
1331--2001[label="0.0100503;6pkt 6fpkt"];
1331--2002[label="0.0100503;6pkt 6fpkt"];
1331--2004[label="0.0117253;7pkt 7fpkt"];
1331--2010[label="0.130653;78pkt 78fpkt"];
1331--2013[label="0.0100503;6pkt 6fpkt"];
1331--2015[label="0.0117253;7pkt 7fpkt"];
1331--2017[label="0.130653;78pkt 78fpkt"];
1331--2021[label="0.0117253;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="14.209.115.42" dst_port="80" src_ip="196.212.160.44"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.918716,2.16821,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
108[label="128.141.167.163;d;293pkt 293fpkt", shape=diamond, color=yellow];
113[label="194.220.142.140;s;267pkt 267fpkt", shape=diamond, color=yellow];
222[label="211.198.160.43;s;4pkt 4fpkt", shape=diamond, color=yellow];
1302[label="128.141.167.163;d;293pkt 293fpkt", shape=hexagon, color=black];
1333[label="194.220.142.140;s;267pkt 267fpkt", shape=hexagon, color=black];
1910[label="128.141.167.163;d;293pkt 293fpkt", shape=polygon, color=gold];
1930[label="194.220.142.140;s;181pkt 181fpkt", shape=polygon, color=gold];
2420[label="194.220.142.140;270pkt 270fpkt", shape=pentagon, color=darkviolet];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.220.142.140:*, 128.141.167.163:*}[90.604%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (1.1242%)&lt;BR/&gt; 0: (0.802998%)&lt;BR/&gt; 20: (0.214133%)&lt;BR/&gt; 58155: (0.187366%)&lt;BR/&gt; 58116: (0.187366%)&gt;];
}
108--113[label="0.996255;266pkt 266fpkt"];
108--222[label="1;4pkt 4fpkt"];
108--1302[label="1;293pkt 293fpkt"];
108--1333[label="0.996255;266pkt 266fpkt"];
108--1910[label="1;293pkt 293fpkt"];
108--1930[label="1;181pkt 181fpkt"];
108--2420[label="0.985185;266pkt 266fpkt"];
113--1302[label="0.996255;266pkt 266fpkt"];
113--1333[label="1;267pkt 267fpkt"];
113--1910[label="0.996255;266pkt 266fpkt"];
113--1930[label="1;181pkt 181fpkt"];
113--2420[label="0.996255;266pkt 266fpkt"];
222--1302[label="1;4pkt 4fpkt"];
222--1910[label="1;4pkt 4fpkt"];
1302--1333[label="0.996255;266pkt 266fpkt"];
1302--1910[label="1;293pkt 293fpkt"];
1302--1930[label="1;181pkt 181fpkt"];
1302--2420[label="0.985185;266pkt 266fpkt"];
1333--1910[label="0.996255;266pkt 266fpkt"];
1333--1930[label="1;181pkt 181fpkt"];
1333--2420[label="0.996255;266pkt 266fpkt"];
1910--1930[label="1;181pkt 181fpkt"];
1910--2420[label="0.985185;266pkt 266fpkt"];
1930--2420[label="1;181pkt 181fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.167.163" src_ip="194.220.142.140"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
269[label="196.99.205.154;s;138pkt 138fpkt", shape=diamond, color=yellow];
1348[label="196.99.205.154;s;52pkt 52fpkt", shape=hexagon, color=black];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.99.205.154:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
269--1348[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter src_ip="196.99.205.154"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
279[label="162.185.40.28;d;278pkt 278fpkt", shape=diamond, color=yellow];
1349[label="162.185.40.28;d;188pkt 188fpkt", shape=hexagon, color=black];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6346, 162.185.40.28:*}[70.1439%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (35.1931%)&lt;BR/&gt; 0: (15.8798%)&lt;BR/&gt; 6347: (4.29185%)&lt;BR/&gt; 137: (0.965665%)&lt;BR/&gt; 6355: (0.751073%)&gt;];
}
279--1349[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_ip="162.185.40.28" src_port="6346"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
297[label="128.141.212.121;d;20pkt 20fpkt", shape=diamond, color=yellow];
319[label="13.65.250.119;s;16pkt 16fpkt", shape=diamond, color=yellow];
1354[label="128.141.212.121;d;15pkt 15fpkt", shape=hexagon, color=black];
1356[label="13.65.250.119;s;12pkt 12fpkt", shape=hexagon, color=black];
1913[label="128.141.212.121;d;15pkt 15fpkt", shape=polygon, color=gold];
1914[label="13.65.250.119;s;12pkt 12fpkt", shape=polygon, color=gold];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{13.65.250.119:80, 128.141.212.121:*}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1129: (3.33333%)&lt;BR/&gt; 1127: (3.33333%)&lt;BR/&gt; 1125: (3.33333%)&lt;BR/&gt; 1124: (3.33333%)&gt;];
}
297--319[label="1;16pkt 16fpkt"];
297--1354[label="1;15pkt 15fpkt"];
297--1356[label="1;12pkt 12fpkt"];
297--1913[label="1;15pkt 15fpkt"];
297--1914[label="1;12pkt 12fpkt"];
297--1996[label="0.35;7pkt 7fpkt"];
297--2009[label="0.35;7pkt 7fpkt"];
297--2016[label="0.35;7pkt 7fpkt"];
319--1354[label="0.8;12pkt 12fpkt"];
319--1356[label="1;12pkt 12fpkt"];
319--1913[label="0.8;12pkt 12fpkt"];
319--1914[label="1;12pkt 12fpkt"];
319--1996[label="0.25;4pkt 4fpkt"];
319--2009[label="0.25;4pkt 4fpkt"];
319--2016[label="0.25;4pkt 4fpkt"];
1354--1356[label="1;12pkt 12fpkt"];
1354--1913[label="1;15pkt 15fpkt"];
1354--1914[label="1;12pkt 12fpkt"];
1354--1996[label="0.466667;7pkt 7fpkt"];
1354--2009[label="0.466667;7pkt 7fpkt"];
1354--2016[label="0.466667;7pkt 7fpkt"];
1356--1913[label="1;12pkt 12fpkt"];
1356--1914[label="1;12pkt 12fpkt"];
1356--1996[label="0.333333;4pkt 4fpkt"];
1356--2009[label="0.333333;4pkt 4fpkt"];
1356--2016[label="0.333333;4pkt 4fpkt"];
1913--1914[label="1;12pkt 12fpkt"];
1913--1996[label="0.466667;7pkt 7fpkt"];
1913--2009[label="0.466667;7pkt 7fpkt"];
1913--2016[label="0.466667;7pkt 7fpkt"];
1914--1996[label="0.333333;4pkt 4fpkt"];
1914--2009[label="0.333333;4pkt 4fpkt"];
1914--2016[label="0.333333;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.212.121" src_ip="13.65.250.119" src_port="80"/>
    </slice>
    <from sec="994482001" usec="0"/>
    <to sec="994482261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
90[label="147.87.224.139;d;616pkt 616fpkt", shape=diamond, color=yellow];
190[label="13.199.7.201;s;402pkt 402fpkt", shape=diamond, color=yellow];
1318[label="13.199.7.201;s;102pkt 102fpkt", shape=hexagon, color=black];
1368[label="147.87.224.139;d;181pkt 181fpkt", shape=hexagon, color=black];
2034[label="192.237.99.3;31pkt 31fpkt", shape=pentagon, color=darkviolet];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{13.199.7.201:80, 147.87.224.139:*}[64.366%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2349: (0.15015%)&lt;BR/&gt; 2348: (0.15015%)&lt;BR/&gt; 2347: (0.15015%)&lt;BR/&gt; 2346: (0.15015%)&gt;];
}
90--190[label="0.997512;401pkt 401fpkt"];
90--1083[label="0.0254237;3pkt 3fpkt"];
90--1151[label="0.163265;16pkt 16fpkt"];
90--1318[label="1;102pkt 102fpkt"];
90--1368[label="1;181pkt 181fpkt"];
90--1996[label="0.0974026;60pkt 60fpkt"];
90--2006[label="0.0909091;56pkt 56fpkt"];
90--2008[label="0.0454545;28pkt 28fpkt"];
90--2009[label="0.0974026;60pkt 60fpkt"];
90--2016[label="0.0974026;60pkt 60fpkt"];
90--2034[label="0.806452;25pkt 25fpkt"];
90--2038[label="0.15534;16pkt 16fpkt"];
90--2303[label="0.285714;6pkt 6fpkt"];
90--2499[label="0.64557;51pkt 51fpkt"];
190--1318[label="1;102pkt 102fpkt"];
190--1350[label="0.00278552;1pkt 1fpkt"];
190--1368[label="0.569061;103pkt 103fpkt"];
190--1996[label="0.0920398;37pkt 37fpkt"];
190--2006[label="0.0597015;24pkt 24fpkt"];
190--2009[label="0.0920398;37pkt 37fpkt"];
190--2016[label="0.0920398;37pkt 37fpkt"];
1318--1368[label="1;102pkt 102fpkt"];
1318--1996[label="0.362745;37pkt 37fpkt"];
1318--2009[label="0.362745;37pkt 37fpkt"];
1318--2016[label="0.362745;37pkt 37fpkt"];
1368--1996[label="0.331492;60pkt 60fpkt"];
1368--2006[label="0.0110497;2pkt 2fpkt"];
1368--2008[label="0.00552486;1pkt 1fpkt"];
1368--2009[label="0.331492;60pkt 60fpkt"];
1368--2016[label="0.331492;60pkt 60fpkt"];
1368--2034[label="0.419355;13pkt 13fpkt"];
1368--2038[label="0.038835;4pkt 4fpkt"];
1368--2499[label="0.594937;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.224.139" src_ip="13.199.7.201" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
132[label="128.141.151.82;d;33pkt 33fpkt", shape=diamond, color=yellow];
334[label="219.1.161.68;s;3pkt 3fpkt", shape=diamond, color=yellow];
961[label="219.1.205.173;s;3pkt 3fpkt", shape=diamond, color=yellow];
1060[label="219.1.161.70;s;3pkt 3fpkt", shape=diamond, color=yellow];
1278[label="219.1.161.64;s;2pkt 2fpkt", shape=diamond, color=yellow];
1373[label="128.141.151.82;d;33pkt 33fpkt", shape=hexagon, color=black];
1764[label="219.1.161.70;s;2pkt 2fpkt", shape=hexagon, color=black];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.120.224.172:80, 128.141.151.82:*}[24.2424%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2786: (2.53165%)&lt;BR/&gt; 2785: (2.53165%)&lt;BR/&gt; 2795: (1.89873%)&lt;BR/&gt; 2794: (1.89873%)&gt;];
}
132--334[label="1;3pkt 3fpkt"];
132--961[label="1;3pkt 3fpkt"];
132--1060[label="1;3pkt 3fpkt"];
132--1278[label="1;2pkt 2fpkt"];
132--1373[label="1;33pkt 33fpkt"];
132--1764[label="1;2pkt 2fpkt"];
132--1996[label="0.030303;1pkt 1fpkt"];
132--2006[label="0.272727;9pkt 9fpkt"];
132--2008[label="0.030303;1pkt 1fpkt"];
132--2009[label="0.030303;1pkt 1fpkt"];
132--2016[label="0.030303;1pkt 1fpkt"];
132--2433[label="0.030303;1pkt 1fpkt"];
132--2791[label="0.030303;1pkt 1fpkt"];
334--1373[label="1;3pkt 3fpkt"];
334--2006[label="0.666667;2pkt 2fpkt"];
961--1373[label="1;3pkt 3fpkt"];
961--2006[label="0.666667;2pkt 2fpkt"];
1060--1373[label="1;3pkt 3fpkt"];
1060--1764[label="1;2pkt 2fpkt"];
1060--2008[label="0.333333;1pkt 1fpkt"];
1278--1373[label="1;2pkt 2fpkt"];
1373--1764[label="1;2pkt 2fpkt"];
1373--1996[label="0.030303;1pkt 1fpkt"];
1373--2006[label="0.272727;9pkt 9fpkt"];
1373--2008[label="0.030303;1pkt 1fpkt"];
1373--2009[label="0.030303;1pkt 1fpkt"];
1373--2016[label="0.030303;1pkt 1fpkt"];
1373--2433[label="0.030303;1pkt 1fpkt"];
1373--2791[label="0.030303;1pkt 1fpkt"];
1764--2008[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.151.82" src_ip="208.120.224.172" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
140[label="218.119.95.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
207[label="149.168.19.177;s;38pkt 38fpkt", shape=diamond, color=yellow];
1088[label="219.150.169.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
1377[label="218.119.95.59;d;1pkt 1fpkt", shape=hexagon, color=black];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.168.19.177:*, *:6699}[52.6316%]&lt;BR/&gt;{149.168.19.177:*, 209.155.129.139:7729}[42.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (28.0488%)&lt;BR/&gt; 7729: (19.5122%)&lt;BR/&gt; 1986: (3.65854%)&lt;BR/&gt; 2264: (2.43902%)&lt;BR/&gt; 0: (2.43902%)&gt;];
}
140--207[label="1;1pkt 1fpkt"];
140--1377[label="1;1pkt 1fpkt"];
207--789[label="1;1pkt 1fpkt"];
207--1088[label="1;1pkt 1fpkt"];
207--1377[label="1;1pkt 1fpkt"];
207--1585[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="149.168.19.177"/>
      <filter dst_ip="209.155.129.139" dst_port="7729" src_ip="149.168.19.177"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
364[label="149.168.49.235;s;6pkt 6fpkt", shape=diamond, color=yellow];
365[label="192.193.175.93;d;1pkt 1fpkt", shape=diamond, color=yellow];
1379[label="149.168.49.235;s;2pkt 2fpkt", shape=hexagon, color=black];
1771[label="192.193.175.93;d;1pkt 1fpkt", shape=hexagon, color=black];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.168.49.235:*, 209.155.129.139:7734}[33.3333%]&lt;BR/&gt;{149.168.49.235:*, *:6699}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (35%)&lt;BR/&gt; 1548: (20%)&lt;BR/&gt; 7734: (10%)&lt;BR/&gt; 3224: (10%)&lt;BR/&gt; 0: (10%)&gt;];
}
364--365[label="1;1pkt 1fpkt"];
364--1379[label="1;2pkt 2fpkt"];
364--1771[label="1;1pkt 1fpkt"];
365--1379[label="1;1pkt 1fpkt"];
365--1771[label="1;1pkt 1fpkt"];
1379--1771[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="149.168.49.235"/>
      <filter dst_ip="209.155.129.139" dst_port="7734" src_ip="149.168.49.235"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
369[label="209.25.102.66;s;540pkt 540fpkt", shape=diamond, color=yellow];
856[label="149.168.180.13;d;45pkt 45fpkt", shape=diamond, color=yellow];
1032[label="128.141.208.16;d;46pkt 46fpkt", shape=diamond, color=yellow];
1170[label="147.87.224.161;d;79pkt 79fpkt", shape=diamond, color=yellow];
1380[label="209.25.102.66;s;336pkt 336fpkt", shape=hexagon, color=black];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.25.102.66:80, *:*}[99.4475%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9044%)&lt;BR/&gt; 1316: (0.239006%)&lt;BR/&gt; 1315: (0.239006%)&lt;BR/&gt; 1314: (0.239006%)&lt;BR/&gt; 1311: (0.239006%)&gt;];
}
369--669[label="0.650794;41pkt 41fpkt"];
369--856[label="1;45pkt 45fpkt"];
369--1032[label="0.978261;45pkt 45fpkt"];
369--1170[label="0.974684;77pkt 77fpkt"];
369--1317[label="0.00740741;4pkt 4fpkt"];
369--1352[label="0.0583333;7pkt 7fpkt"];
369--1380[label="1;336pkt 336fpkt"];
369--1693[label="0.0259259;14pkt 14fpkt"];
369--1695[label="0.0111111;6pkt 6fpkt"];
369--1980[label="0.0111111;6pkt 6fpkt"];
369--1996[label="0.00185185;1pkt 1fpkt"];
369--2006[label="0.0277778;15pkt 15fpkt"];
369--2008[label="0.037037;20pkt 20fpkt"];
369--2009[label="0.00185185;1pkt 1fpkt"];
369--2016[label="0.00185185;1pkt 1fpkt"];
369--2211[label="1;540pkt 540fpkt"];
856--1380[label="0.822222;37pkt 37fpkt"];
856--2006[label="0.133333;6pkt 6fpkt"];
856--2008[label="0.0666667;3pkt 3fpkt"];
856--2211[label="1;45pkt 45fpkt"];
1032--1380[label="0.413043;19pkt 19fpkt"];
1032--2006[label="0.173913;8pkt 8fpkt"];
1032--2008[label="0.0869565;4pkt 4fpkt"];
1032--2211[label="0.978261;45pkt 45fpkt"];
1170--2008[label="0.0126582;1pkt 1fpkt"];
1170--2211[label="0.974684;77pkt 77fpkt"];
1380--1695[label="0.00892857;3pkt 3fpkt"];
1380--1980[label="0.00892857;3pkt 3fpkt"];
1380--1996[label="0.00297619;1pkt 1fpkt"];
1380--2006[label="0.0446429;15pkt 15fpkt"];
1380--2009[label="0.00297619;1pkt 1fpkt"];
1380--2016[label="0.00297619;1pkt 1fpkt"];
1380--2211[label="1;336pkt 336fpkt"];
</description>
    <slice>
      <filter src_ip="209.25.102.66" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
262[label="160.164.140.25;d;5pkt 5fpkt", shape=diamond, color=yellow];
263[label="197.32.196.253;s;1pkt 1fpkt", shape=diamond, color=yellow];
1345[label="160.164.140.25;d;5pkt 5fpkt", shape=hexagon, color=black];
1384[label="197.32.196.253;s;1pkt 1fpkt", shape=hexagon, color=black];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.32.196.252:1755, 160.164.140.25:3133}[20%]&lt;BR/&gt;{197.32.196.253:3538, 160.164.140.25:3135}[20%]&lt;BR/&gt;{211.177.53.36:80, 160.164.140.25:3283}[20%]&lt;BR/&gt;{211.177.53.36:80, 160.164.140.25:3286}[20%]&lt;BR/&gt;{211.177.53.36:80, 160.164.140.25:3287}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 3538: (16.6667%)&lt;BR/&gt; 3135: (16.6667%)&lt;BR/&gt; 3287: (8.33333%)&lt;BR/&gt; 3286: (8.33333%)&gt;];
}
262--263[label="1;1pkt 1fpkt"];
262--1345[label="1;5pkt 5fpkt"];
262--1384[label="1;1pkt 1fpkt"];
262--1996[label="0.6;3pkt 3fpkt"];
262--2009[label="0.6;3pkt 3fpkt"];
262--2016[label="0.6;3pkt 3fpkt"];
263--1345[label="1;1pkt 1fpkt"];
263--1384[label="1;1pkt 1fpkt"];
1345--1384[label="1;1pkt 1fpkt"];
1345--1996[label="0.6;3pkt 3fpkt"];
1345--2009[label="0.6;3pkt 3fpkt"];
1345--2016[label="0.6;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="160.164.140.25" dst_port="3287" src_ip="211.177.53.36" src_port="80"/>
      <filter dst_ip="160.164.140.25" dst_port="3286" src_ip="211.177.53.36" src_port="80"/>
      <filter dst_ip="160.164.140.25" dst_port="3283" src_ip="211.177.53.36" src_port="80"/>
      <filter dst_ip="160.164.140.25" dst_port="3135" src_ip="197.32.196.253" src_port="3538"/>
      <filter dst_ip="160.164.140.25" dst_port="3133" src_ip="197.32.196.252" src_port="1755"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
169[label="147.87.169.148;s;83pkt 83fpkt", shape=diamond, color=yellow];
382[label="144.188.129.162;d;14pkt 14fpkt", shape=diamond, color=yellow];
1314[label="147.87.169.148;s;83pkt 83fpkt", shape=hexagon, color=black];
1392[label="144.188.155.69;d;19pkt 19fpkt", shape=hexagon, color=black];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.169.148:*, 144.188.155.69:80}[31.0345%]&lt;BR/&gt;{147.87.169.148:*, 144.188.150.95:80}[25.2874%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4975%)&lt;BR/&gt; 3602: (0.753769%)&lt;BR/&gt; 3601: (0.753769%)&lt;BR/&gt; 3600: (0.753769%)&lt;BR/&gt; 3599: (0.753769%)&gt;];
}
169--382[label="1;14pkt 14fpkt"];
169--1314[label="1;83pkt 83fpkt"];
169--1392[label="0.789474;15pkt 15fpkt"];
169--1997[label="0.13253;11pkt 11fpkt"];
169--2001[label="0.204819;17pkt 17fpkt"];
169--2002[label="0.0963855;8pkt 8fpkt"];
169--2004[label="0.0361446;3pkt 3fpkt"];
169--2010[label="0.13253;11pkt 11fpkt"];
169--2013[label="0.0963855;8pkt 8fpkt"];
169--2015[label="0.0361446;3pkt 3fpkt"];
169--2017[label="0.13253;11pkt 11fpkt"];
169--2021[label="0.0361446;3pkt 3fpkt"];
382--1314[label="1;14pkt 14fpkt"];
382--1997[label="0.214286;3pkt 3fpkt"];
382--2001[label="0.142857;2pkt 2fpkt"];
382--2010[label="0.214286;3pkt 3fpkt"];
382--2017[label="0.214286;3pkt 3fpkt"];
1314--1392[label="0.789474;15pkt 15fpkt"];
1314--1997[label="0.13253;11pkt 11fpkt"];
1314--2001[label="0.204819;17pkt 17fpkt"];
1314--2002[label="0.0963855;8pkt 8fpkt"];
1314--2004[label="0.0361446;3pkt 3fpkt"];
1314--2010[label="0.13253;11pkt 11fpkt"];
1314--2013[label="0.0963855;8pkt 8fpkt"];
1314--2015[label="0.0361446;3pkt 3fpkt"];
1314--2017[label="0.13253;11pkt 11fpkt"];
1314--2021[label="0.0361446;3pkt 3fpkt"];
1392--1997[label="0.0526316;1pkt 1fpkt"];
1392--2001[label="0.526316;10pkt 10fpkt"];
1392--2002[label="0.105263;2pkt 2fpkt"];
1392--2010[label="0.0526316;1pkt 1fpkt"];
1392--2013[label="0.105263;2pkt 2fpkt"];
1392--2017[label="0.0526316;1pkt 1fpkt"];
1392--2169[label="0.210526;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="144.188.155.69" dst_port="80" src_ip="147.87.169.148"/>
      <filter dst_ip="144.188.150.95" dst_port="80" src_ip="147.87.169.148"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994482510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
402[label="147.87.23.231;d;91pkt 91fpkt", shape=diamond, color=yellow];
405[label="213.133.39.80;s;91pkt 91fpkt", shape=diamond, color=yellow];
1396[label="213.133.39.80;s;86pkt 86fpkt", shape=hexagon, color=black];
1488[label="147.87.23.231;d;90pkt 90fpkt", shape=hexagon, color=black];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.133.39.80:80, 147.87.23.231:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1640: (0.558659%)&lt;BR/&gt; 1638: (0.558659%)&lt;BR/&gt; 1636: (0.558659%)&lt;BR/&gt; 1634: (0.558659%)&gt;];
}
402--405[label="1;91pkt 91fpkt"];
402--1396[label="1;86pkt 86fpkt"];
402--1488[label="1;90pkt 90fpkt"];
402--1996[label="0.120879;11pkt 11fpkt"];
402--2006[label="0.120879;11pkt 11fpkt"];
402--2009[label="0.120879;11pkt 11fpkt"];
402--2016[label="0.120879;11pkt 11fpkt"];
405--1396[label="1;86pkt 86fpkt"];
405--1488[label="1;90pkt 90fpkt"];
405--1996[label="0.120879;11pkt 11fpkt"];
405--2006[label="0.120879;11pkt 11fpkt"];
405--2009[label="0.120879;11pkt 11fpkt"];
405--2016[label="0.120879;11pkt 11fpkt"];
1396--1488[label="1;86pkt 86fpkt"];
1396--1996[label="0.127907;11pkt 11fpkt"];
1396--2006[label="0.127907;11pkt 11fpkt"];
1396--2009[label="0.127907;11pkt 11fpkt"];
1396--2016[label="0.127907;11pkt 11fpkt"];
1488--1996[label="0.122222;11pkt 11fpkt"];
1488--2006[label="0.122222;11pkt 11fpkt"];
1488--2009[label="0.122222;11pkt 11fpkt"];
1488--2016[label="0.122222;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.23.231" src_ip="213.133.39.80" src_port="80"/>
    </slice>
    <from sec="994482002" usec="0"/>
    <to sec="994482988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
428[label="128.141.131.40;d;500pkt 500fpkt", shape=diamond, color=yellow];
448[label="198.49.138.103;s;134pkt 134fpkt", shape=diamond, color=yellow];
876[label="196.10.20.33;s;195pkt 195fpkt", shape=diamond, color=yellow];
1402[label="128.141.131.40;d;272pkt 272fpkt", shape=hexagon, color=black];
1759[label="196.10.20.33;s;149pkt 149fpkt", shape=hexagon, color=black];
2117[label="196.10.20.33;346pkt 346fpkt", shape=pentagon, color=darkviolet];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.10.20.33:8000, 128.141.131.40:*}[69.2%]&lt;BR/&gt;{198.49.138.103:80, 128.141.131.40:*}[28.4%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (37.1867%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 8080: (0.313283%)&lt;BR/&gt; 2420: (0.125313%)&lt;BR/&gt; 2419: (0.125313%)&gt;];
}
428--448[label="1;134pkt 134fpkt"];
428--876[label="1;195pkt 195fpkt"];
428--1402[label="1;272pkt 272fpkt"];
428--1759[label="1;149pkt 149fpkt"];
428--2006[label="0.026;13pkt 13fpkt"];
428--2008[label="0.024;12pkt 12fpkt"];
428--2117[label="1;346pkt 346fpkt"];
448--1402[label="0.813433;109pkt 109fpkt"];
448--2006[label="0.0970149;13pkt 13fpkt"];
448--2008[label="0.0895522;12pkt 12fpkt"];
876--2117[label="1;195pkt 195fpkt"];
1402--1759[label="1;149pkt 149fpkt"];
1402--2006[label="0.0477941;13pkt 13fpkt"];
1402--2117[label="0.555147;151pkt 151fpkt"];
1759--2117[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.131.40" src_ip="196.10.20.33" src_port="8000"/>
      <filter dst_ip="128.141.131.40" src_ip="198.49.138.103" src_port="80"/>
    </slice>
    <from sec="994482059" usec="0"/>
    <to sec="994483153" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
446[label="196.217.132.59;s;10pkt 10fpkt", shape=diamond, color=yellow];
447[label="211.143.189.249;d;7pkt 7fpkt", shape=diamond, color=yellow];
1406[label="211.143.189.249;d;3pkt 3fpkt", shape=hexagon, color=black];
1449[label="196.217.132.59;s;10pkt 10fpkt", shape=hexagon, color=black];
2188[label="196.217.132.59;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.217.132.59:80, 211.143.189.249:*}[50%]&lt;BR/&gt;{196.217.132.59:3842, *:53}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.3636%)&lt;BR/&gt; 3842: (13.6364%)&lt;BR/&gt; 53: (13.6364%)&lt;BR/&gt; 64256: (5.68182%)&lt;BR/&gt; 64255: (5.68182%)&gt;];
}
446--447[label="1;7pkt 7fpkt"];
446--1406[label="1;3pkt 3fpkt"];
446--1449[label="1;10pkt 10fpkt"];
446--2188[label="1;10pkt 10fpkt"];
447--1406[label="1;3pkt 3fpkt"];
447--1449[label="1;7pkt 7fpkt"];
447--2188[label="1;7pkt 7fpkt"];
1406--1449[label="1;3pkt 3fpkt"];
1406--2188[label="1;3pkt 3fpkt"];
1449--2188[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="211.143.189.249" src_ip="196.217.132.59" src_port="80"/>
      <filter dst_port="53" src_ip="196.217.132.59" src_port="3842"/>
    </slice>
    <from sec="994482179" usec="0"/>
    <to sec="994482778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
82[label="212.136.188.234;d;1pkt 1fpkt", shape=diamond, color=yellow];
211[label="196.212.175.201;s;7pkt 7fpkt", shape=diamond, color=yellow];
1410[label="196.212.175.201;s;6pkt 6fpkt", shape=hexagon, color=black];
1590[label="212.136.188.234;d;1pkt 1fpkt", shape=hexagon, color=black];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.212.175.201:*, 209.155.129.139:7729}[42.8571%]&lt;BR/&gt;{196.212.175.201:*, *:6699}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (26.6667%)&lt;BR/&gt; 7729: (16.6667%)&lt;BR/&gt; 4965: (13.3333%)&lt;BR/&gt; 0: (13.3333%)&lt;BR/&gt; 1959: (6.66667%)&gt;];
}
82--211[label="1;1pkt 1fpkt"];
82--1410[label="1;1pkt 1fpkt"];
82--1590[label="1;1pkt 1fpkt"];
211--1410[label="1;6pkt 6fpkt"];
211--1590[label="1;1pkt 1fpkt"];
1410--1590[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="196.212.175.201"/>
      <filter dst_ip="209.155.129.139" dst_port="7729" src_ip="196.212.175.201"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
476[label="160.171.152.27;d;4pkt 4fpkt", shape=diamond, color=yellow];
477[label="213.154.255.71;s;4pkt 4fpkt", shape=diamond, color=yellow];
1421[label="160.171.152.27;d;4pkt 4fpkt", shape=hexagon, color=black];
1422[label="213.154.255.71;s;4pkt 4fpkt", shape=hexagon, color=black];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.154.255.71:47878, 160.171.152.27:6970}[25%]&lt;BR/&gt;{213.154.255.71:7070, 160.171.152.27:1047}[25%]&lt;BR/&gt;{213.154.255.71:7070, 160.171.152.27:1049}[25%]&lt;BR/&gt;{213.154.255.71:7070, 160.171.152.27:1257}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7070: (37.5%)&lt;BR/&gt; 47878: (12.5%)&lt;BR/&gt; 6970: (12.5%)&lt;BR/&gt; 1257: (12.5%)&lt;BR/&gt; 1049: (12.5%)&gt;];
}
476--477[label="1;4pkt 4fpkt"];
476--1421[label="1;4pkt 4fpkt"];
476--1422[label="1;4pkt 4fpkt"];
477--1421[label="1;4pkt 4fpkt"];
477--1422[label="1;4pkt 4fpkt"];
1421--1422[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="160.171.152.27" dst_port="1257" src_ip="213.154.255.71" src_port="7070"/>
      <filter dst_ip="160.171.152.27" dst_port="1049" src_ip="213.154.255.71" src_port="7070"/>
      <filter dst_ip="160.171.152.27" dst_port="1047" src_ip="213.154.255.71" src_port="7070"/>
      <filter dst_ip="160.171.152.27" dst_port="6970" src_ip="213.154.255.71" src_port="47878"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
61[label="128.141.52.136;s;5pkt 5fpkt", shape=diamond, color=yellow];
62[label="209.70.106.88;d;2pkt 2fpkt", shape=diamond, color=yellow];
275[label="75.171.4.191;d;3pkt 3fpkt", shape=diamond, color=yellow];
1323[label="128.141.52.136;s;5pkt 5fpkt", shape=hexagon, color=black];
1425[label="75.171.4.191;d;3pkt 3fpkt", shape=hexagon, color=black];
1692[label="209.70.106.88;d;2pkt 2fpkt", shape=hexagon, color=black];
1978[label="128.141.52.136;s;5pkt 5fpkt", shape=polygon, color=gold];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.141.52.136:5500, 209.70.106.88:1230}[20%]&lt;BR/&gt;{128.141.52.136:5501, 209.70.106.88:1553}[20%]&lt;BR/&gt;{128.141.52.136:5500, 75.171.4.191:2289}[20%]&lt;BR/&gt;{128.141.52.136:5501, 75.171.4.191:2314}[20%]&lt;BR/&gt;{128.141.52.136:5501, 75.171.4.191:2490}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5501: (30%)&lt;BR/&gt; 5500: (20%)&lt;BR/&gt; 2490: (10%)&lt;BR/&gt; 2314: (10%)&lt;BR/&gt; 2289: (10%)&gt;];
}
61--62[label="1;2pkt 2fpkt"];
61--275[label="1;3pkt 3fpkt"];
61--1323[label="1;5pkt 5fpkt"];
61--1425[label="1;3pkt 3fpkt"];
61--1692[label="1;2pkt 2fpkt"];
61--1978[label="1;5pkt 5fpkt"];
62--1323[label="1;2pkt 2fpkt"];
62--1692[label="1;2pkt 2fpkt"];
62--1978[label="1;2pkt 2fpkt"];
275--1323[label="1;3pkt 3fpkt"];
275--1425[label="1;3pkt 3fpkt"];
275--1978[label="1;3pkt 3fpkt"];
1323--1425[label="1;3pkt 3fpkt"];
1323--1692[label="1;2pkt 2fpkt"];
1323--1978[label="1;5pkt 5fpkt"];
1425--1978[label="1;3pkt 3fpkt"];
1692--1978[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="75.171.4.191" dst_port="2490" src_ip="128.141.52.136" src_port="5501"/>
      <filter dst_ip="75.171.4.191" dst_port="2314" src_ip="128.141.52.136" src_port="5501"/>
      <filter dst_ip="75.171.4.191" dst_port="2289" src_ip="128.141.52.136" src_port="5500"/>
      <filter dst_ip="209.70.106.88" dst_port="1553" src_ip="128.141.52.136" src_port="5501"/>
      <filter dst_ip="209.70.106.88" dst_port="1230" src_ip="128.141.52.136" src_port="5500"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
383[label="202.175.193.130;d;121pkt 121fpkt", shape=diamond, color=yellow];
478[label="165.22.36.164;s;141pkt 141fpkt", shape=diamond, color=yellow];
1426[label="202.175.193.130;d;121pkt 121fpkt", shape=hexagon, color=black];
1982[label="202.175.193.130;d;119pkt 119fpkt", shape=polygon, color=gold];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.22.36.164:*, 202.175.193.130:10080}[85.1064%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10080: (47.6096%)&lt;BR/&gt; 119: (1.59363%)&lt;BR/&gt; 0: (1.59363%)&lt;BR/&gt; 4818: (0.398406%)&lt;BR/&gt; 4812: (0.398406%)&gt;];
}
383--478[label="1;121pkt 121fpkt"];
383--1426[label="1;121pkt 121fpkt"];
383--1982[label="1;119pkt 119fpkt"];
478--1426[label="1;121pkt 121fpkt"];
478--1982[label="1;119pkt 119fpkt"];
1426--1982[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_ip="202.175.193.130" dst_port="10080" src_ip="165.22.36.164"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.918716,2.16821,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
194[label="219.76.154.84;s;696pkt 696fpkt", shape=diamond, color=yellow];
310[label="147.87.172.25;d;102pkt 102fpkt", shape=diamond, color=yellow];
648[label="160.164.140.76;d;63pkt 63fpkt", shape=diamond, color=yellow];
934[label="196.212.8.108;d;66pkt 66fpkt", shape=diamond, color=yellow];
940[label="149.168.42.116;d;34pkt 34fpkt", shape=diamond, color=yellow];
1089[label="147.87.67.70;d;59pkt 59fpkt", shape=diamond, color=yellow];
1161[label="209.49.1.133;s;2pkt 2fpkt", shape=diamond, color=yellow];
1238[label="149.168.169.32;d;75pkt 75fpkt", shape=diamond, color=yellow];
1431[label="160.171.67.7;d;120pkt 120fpkt", shape=hexagon, color=black];
1440[label="219.76.157.125;s;269pkt 269fpkt", shape=hexagon, color=black];
1962[label="160.164.140.76;d;63pkt 63fpkt", shape=polygon, color=gold];
2137[label="112.13.89.39;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2595[label="13.26.82.216;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2636[label="13.26.82.235;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.76.154.84:80, *:*}[47.9282%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.476%)&lt;BR/&gt; 0: (1.70455%)&lt;BR/&gt; 6346: (1.67298%)&lt;BR/&gt; 8888: (0.883838%)&lt;BR/&gt; 8875: (0.631313%)&gt;];
}
194--281[label="0.0533333;12pkt 12fpkt"];
194--289[label="0.00862069;6pkt 6fpkt"];
194--299[label="0.0735294;30pkt 30fpkt"];
194--301[label="0.0416667;10pkt 10fpkt"];
194--310[label="0.0294118;3pkt 3fpkt"];
194--391[label="0.019685;5pkt 5fpkt"];
194--394[label="0.017341;6pkt 6fpkt"];
194--411[label="0.0196375;13pkt 13fpkt"];
194--412[label="0.00473934;1pkt 1fpkt"];
194--485[label="0.0434783;12pkt 12fpkt"];
194--492[label="0.0857143;9pkt 9fpkt"];
194--521[label="0.047619;5pkt 5fpkt"];
194--579[label="0.108108;8pkt 8fpkt"];
194--934[label="0.0909091;6pkt 6fpkt"];
194--940[label="0.0294118;1pkt 1fpkt"];
194--949[label="0.0416667;1pkt 1fpkt"];
194--971[label="0.105263;2pkt 2fpkt"];
194--1089[label="0.0169492;1pkt 1fpkt"];
194--1120[label="0.166667;2pkt 2fpkt"];
194--1238[label="0.0266667;2pkt 2fpkt"];
194--1286[label="0.00490196;1pkt 1fpkt"];
194--1326[label="0.00355872;1pkt 1fpkt"];
194--1353[label="0.00862069;6pkt 6fpkt"];
194--1372[label="0.163265;96pkt 96fpkt"];
194--1398[label="1;622pkt 622fpkt"];
194--1431[label="0.0333333;4pkt 4fpkt"];
194--1470[label="0.108108;8pkt 8fpkt"];
194--1522[label="0.0361446;3pkt 3fpkt"];
194--1635[label="0.0497925;12pkt 12fpkt"];
194--1640[label="0.1;30pkt 30fpkt"];
194--1645[label="0.00598802;1pkt 1fpkt"];
194--1685[label="0.2;2pkt 2fpkt"];
194--1693[label="0.033046;23pkt 23fpkt"];
194--1695[label="0.00862069;6pkt 6fpkt"];
194--1707[label="0.0351906;12pkt 12fpkt"];
194--1709[label="0.00421941;2pkt 2fpkt"];
194--1903[label="0.00497512;1pkt 1fpkt"];
194--1961[label="0.0853659;21pkt 21fpkt"];
194--1965[label="0.2;2pkt 2fpkt"];
194--1980[label="0.00862069;6pkt 6fpkt"];
194--1981[label="0.0351906;12pkt 12fpkt"];
194--1984[label="0.0542986;12pkt 12fpkt"];
194--1996[label="0.045977;32pkt 32fpkt"];
194--2006[label="0.0387931;27pkt 27fpkt"];
194--2008[label="0.058908;41pkt 41fpkt"];
194--2009[label="0.045977;32pkt 32fpkt"];
194--2016[label="0.045977;32pkt 32fpkt"];
310--427[label="0.481481;26pkt 26fpkt"];
310--1398[label="0.0294118;3pkt 3fpkt"];
310--1418[label="0.519608;53pkt 53fpkt"];
310--1440[label="0.127451;13pkt 13fpkt"];
310--1445[label="0.481481;26pkt 26fpkt"];
310--1996[label="0.00980392;1pkt 1fpkt"];
310--2006[label="0.0294118;3pkt 3fpkt"];
310--2009[label="0.00980392;1pkt 1fpkt"];
310--2016[label="0.00980392;1pkt 1fpkt"];
648--1440[label="0.0952381;6pkt 6fpkt"];
648--1650[label="1;63pkt 63fpkt"];
648--1962[label="1;63pkt 63fpkt"];
648--1996[label="0.031746;2pkt 2fpkt"];
648--2006[label="0.126984;8pkt 8fpkt"];
648--2009[label="0.031746;2pkt 2fpkt"];
648--2016[label="0.031746;2pkt 2fpkt"];
648--2385[label="0.326087;15pkt 15fpkt"];
648--2595[label="0.636364;14pkt 14fpkt"];
648--2636[label="0.857143;6pkt 6fpkt"];
934--937[label="0.685185;37pkt 37fpkt"];
934--1398[label="0.0909091;6pkt 6fpkt"];
934--2006[label="0.0151515;1pkt 1fpkt"];
934--2008[label="0.0757576;5pkt 5fpkt"];
934--2150[label="0.0204082;1pkt 1fpkt"];
934--2591[label="0.80303;53pkt 53fpkt"];
934--2854[label="0.80303;53pkt 53fpkt"];
940--1229[label="0.0294118;1pkt 1fpkt"];
940--1236[label="0.0294118;1pkt 1fpkt"];
940--1398[label="0.0294118;1pkt 1fpkt"];
940--1440[label="0.264706;9pkt 9fpkt"];
940--2006[label="0.264706;9pkt 9fpkt"];
940--2627[label="0.176471;6pkt 6fpkt"];
1089--1398[label="0.0169492;1pkt 1fpkt"];
1089--2006[label="0.0508475;3pkt 3fpkt"];
1089--2008[label="0.0508475;3pkt 3fpkt"];
1089--2137[label="1;6pkt 6fpkt"];
1089--2487[label="0.444444;24pkt 24fpkt"];
1089--2812[label="0.45283;24pkt 24fpkt"];
1161--1431[label="1;2pkt 2fpkt"];
1238--1398[label="0.0266667;2pkt 2fpkt"];
1238--2290[label="0.0652174;3pkt 3fpkt"];
1431--1516[label="0.025;3pkt 3fpkt"];
1431--1517[label="1;1pkt 1fpkt"];
1431--1612[label="0.015625;1pkt 1fpkt"];
1431--1634[label="0.166667;20pkt 20fpkt"];
1431--1956[label="0.0172414;1pkt 1fpkt"];
1431--1996[label="0.05;6pkt 6fpkt"];
1431--2009[label="0.05;6pkt 6fpkt"];
1431--2016[label="0.05;6pkt 6fpkt"];
1431--2056[label="0.111111;1pkt 1fpkt"];
1431--2097[label="0.142857;1pkt 1fpkt"];
1431--2108[label="0.166667;1pkt 1fpkt"];
1431--2148[label="0.0357143;1pkt 1fpkt"];
1431--2164[label="0.1;1pkt 1fpkt"];
1431--2222[label="0.125;1pkt 1fpkt"];
1431--2234[label="0.2;1pkt 1fpkt"];
1431--2352[label="0.12;3pkt 3fpkt"];
1431--2359[label="0.0232558;1pkt 1fpkt"];
1431--2464[label="0.107143;3pkt 3fpkt"];
1431--2486[label="0.05;1pkt 1fpkt"];
1431--2727[label="0.2;1pkt 1fpkt"];
1431--2770[label="0.12;3pkt 3fpkt"];
1440--1467[label="0.0434783;2pkt 2fpkt"];
1440--1593[label="0.0101523;2pkt 2fpkt"];
1440--1645[label="0.0299401;5pkt 5fpkt"];
1440--1650[label="0.0952381;6pkt 6fpkt"];
1440--1695[label="0.0520446;14pkt 14fpkt"];
1440--1707[label="0.0185874;5pkt 5fpkt"];
1440--1962[label="0.0952381;6pkt 6fpkt"];
1440--1980[label="0.0520446;14pkt 14fpkt"];
1440--1981[label="0.0185874;5pkt 5fpkt"];
1440--1996[label="0.0371747;10pkt 10fpkt"];
1440--2006[label="0.0408922;11pkt 11fpkt"];
1440--2008[label="0.00743494;2pkt 2fpkt"];
1440--2009[label="0.0371747;10pkt 10fpkt"];
1440--2016[label="0.0371747;10pkt 10fpkt"];
1962--1996[label="0.031746;2pkt 2fpkt"];
1962--2006[label="0.126984;8pkt 8fpkt"];
1962--2009[label="0.031746;2pkt 2fpkt"];
1962--2016[label="0.031746;2pkt 2fpkt"];
1962--2385[label="0.326087;15pkt 15fpkt"];
1962--2595[label="0.636364;14pkt 14fpkt"];
1962--2636[label="0.857143;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="219.76.154.84" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699975,2.1774,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
196[label="197.98.136.190;s;17pkt 17fpkt", shape=diamond, color=yellow];
1438[label="197.98.136.190;s;7pkt 7fpkt", shape=hexagon, color=black];
2543[label="197.98.136.190;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2836[label="197.98.136.190;14pkt 14fpkt", shape=invtriangle, color=brown];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.98.136.190:80, 128.141.130.166:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1564: (3.7037%)&lt;BR/&gt; 1563: (3.7037%)&lt;BR/&gt; 1545: (3.7037%)&lt;BR/&gt; 1544: (3.7037%)&gt;];
}
196--1438[label="1;7pkt 7fpkt"];
196--1723[label="1;17pkt 17fpkt"];
196--1996[label="0.235294;4pkt 4fpkt"];
196--2009[label="0.235294;4pkt 4fpkt"];
196--2016[label="0.235294;4pkt 4fpkt"];
196--2543[label="1;16pkt 16fpkt"];
196--2836[label="1;14pkt 14fpkt"];
1438--1723[label="1;7pkt 7fpkt"];
1438--1996[label="0.571429;4pkt 4fpkt"];
1438--2009[label="0.571429;4pkt 4fpkt"];
1438--2016[label="0.571429;4pkt 4fpkt"];
1438--2543[label="0.857143;6pkt 6fpkt"];
1438--2836[label="0.857143;6pkt 6fpkt"];
2543--2836[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.130.166" src_ip="197.98.136.190" src_port="80"/>
    </slice>
    <from sec="994482003" usec="0"/>
    <to sec="994482573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
505[label="128.141.164.126;s;32pkt 32fpkt", shape=diamond, color=yellow];
518[label="205.187.11.1;d;10pkt 10fpkt", shape=diamond, color=yellow];
1443[label="128.141.164.126;s;15pkt 15fpkt", shape=hexagon, color=black];
1494[label="205.187.11.1;d;10pkt 10fpkt", shape=hexagon, color=black];
2375[label="128.141.164.126;31pkt 31fpkt", shape=pentagon, color=darkviolet];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.141.164.126:80, 205.187.11.1:*}[34.375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1736: (3.57143%)&lt;BR/&gt; 1738: (2.55102%)&lt;BR/&gt; 1737: (2.55102%)&lt;BR/&gt; 1733: (2.55102%)&gt;];
}
505--518[label="1;10pkt 10fpkt"];
505--1443[label="1;15pkt 15fpkt"];
505--1494[label="1;10pkt 10fpkt"];
505--1996[label="0.03125;1pkt 1fpkt"];
505--2008[label="0.0625;2pkt 2fpkt"];
505--2009[label="0.03125;1pkt 1fpkt"];
505--2016[label="0.03125;1pkt 1fpkt"];
505--2375[label="1;31pkt 31fpkt"];
518--1443[label="0.8;8pkt 8fpkt"];
518--1494[label="1;10pkt 10fpkt"];
518--2375[label="1;10pkt 10fpkt"];
1443--1494[label="0.8;8pkt 8fpkt"];
1443--1996[label="0.0666667;1pkt 1fpkt"];
1443--2009[label="0.0666667;1pkt 1fpkt"];
1443--2016[label="0.0666667;1pkt 1fpkt"];
1443--2375[label="0.933333;14pkt 14fpkt"];
1494--2375[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="205.187.11.1" src_ip="128.141.164.126" src_port="80"/>
    </slice>
    <from sec="994482031" usec="0"/>
    <to sec="994483186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,053,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
418[label="149.168.169.9;d;93pkt 93fpkt", shape=diamond, color=yellow];
1399[label="149.168.169.9;d;71pkt 71fpkt", shape=hexagon, color=black];
1444[label="144.177.224.49;s;3pkt 3fpkt", shape=hexagon, color=black];
2167[label="144.177.224.49;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.196.17.182:80, 149.168.169.9:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.422%)&lt;BR/&gt; 2213: (1.15607%)&lt;BR/&gt; 2206: (1.15607%)&lt;BR/&gt; 2298: (0.867052%)&lt;BR/&gt; 2281: (0.578035%)&gt;];
}
418--1399[label="1;71pkt 71fpkt"];
418--1444[label="1;3pkt 3fpkt"];
418--2145[label="0.586207;17pkt 17fpkt"];
418--2167[label="0.5;3pkt 3fpkt"];
418--2701[label="0.586207;17pkt 17fpkt"];
1399--1444[label="0.666667;2pkt 2fpkt"];
1399--2145[label="0.482759;14pkt 14fpkt"];
1399--2167[label="0.333333;2pkt 2fpkt"];
1399--2701[label="0.482759;14pkt 14fpkt"];
1444--2167[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.168.169.9" src_ip="208.196.17.182" src_port="80"/>
    </slice>
    <from sec="994482010" usec="0"/>
    <to sec="994483149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
146[label="147.87.165.21;s;136pkt 136fpkt", shape=diamond, color=yellow];
451[label="110.195.212.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
1417[label="147.87.165.21;s;128pkt 128fpkt", shape=hexagon, color=black];
1452[label="110.195.212.19;d;1pkt 1fpkt", shape=hexagon, color=black];
1922[label="147.87.165.21;s;9pkt 9fpkt", shape=polygon, color=gold];
1928[label="110.195.212.19;d;1pkt 1fpkt", shape=polygon, color=gold];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.165.21:*, *:80}[86.0294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.2101%)&lt;BR/&gt; 21: (1.63043%)&lt;BR/&gt; 41013: (1.08696%)&lt;BR/&gt; 1131: (1.08696%)&lt;BR/&gt; 41178: (0.543478%)&gt;];
}
146--147[label="1;1pkt 1fpkt"];
146--451[label="1;1pkt 1fpkt"];
146--1226[label="0.0816327;8pkt 8fpkt"];
146--1417[label="1;128pkt 128fpkt"];
146--1452[label="1;1pkt 1fpkt"];
146--1835[label="1;1pkt 1fpkt"];
146--1922[label="1;9pkt 9fpkt"];
146--1928[label="1;1pkt 1fpkt"];
146--1997[label="0.0147059;2pkt 2fpkt"];
146--2004[label="0.316176;43pkt 43fpkt"];
146--2010[label="0.0147059;2pkt 2fpkt"];
146--2015[label="0.316176;43pkt 43fpkt"];
146--2017[label="0.0147059;2pkt 2fpkt"];
146--2021[label="0.316176;43pkt 43fpkt"];
451--1417[label="1;1pkt 1fpkt"];
451--1452[label="1;1pkt 1fpkt"];
451--1922[label="1;1pkt 1fpkt"];
451--1928[label="1;1pkt 1fpkt"];
1417--1452[label="1;1pkt 1fpkt"];
1417--1922[label="1;9pkt 9fpkt"];
1417--1928[label="1;1pkt 1fpkt"];
1417--1997[label="0.015625;2pkt 2fpkt"];
1417--2004[label="0.335938;43pkt 43fpkt"];
1417--2010[label="0.015625;2pkt 2fpkt"];
1417--2015[label="0.335938;43pkt 43fpkt"];
1417--2017[label="0.015625;2pkt 2fpkt"];
1417--2021[label="0.335938;43pkt 43fpkt"];
1452--1922[label="1;1pkt 1fpkt"];
1452--1928[label="1;1pkt 1fpkt"];
1922--1928[label="1;1pkt 1fpkt"];
1922--1997[label="0.222222;2pkt 2fpkt"];
1922--2010[label="0.222222;2pkt 2fpkt"];
1922--2017[label="0.222222;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="147.87.165.21"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
53[label="212.210.184.154;d;1pkt 1fpkt", shape=diamond, color=yellow];
55[label="147.87.132.233;s;190pkt 190fpkt", shape=diamond, color=yellow];
100[label="12.69.187.183;d;1pkt 1fpkt", shape=diamond, color=yellow];
174[label="14.137.38.94;d;1pkt 1fpkt", shape=diamond, color=yellow];
251[label="110.194.193.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
313[label="213.173.169.57;d;1pkt 1fpkt", shape=diamond, color=yellow];
434[label="12.66.18.200;d;1pkt 1fpkt", shape=diamond, color=yellow];
517[label="213.136.121.85;d;1pkt 1fpkt", shape=diamond, color=yellow];
528[label="110.24.38.243;d;1pkt 1fpkt", shape=diamond, color=yellow];
1267[label="13.19.88.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
1287[label="147.87.132.233;s;190pkt 190fpkt", shape=hexagon, color=black];
1315[label="14.137.38.94;d;1pkt 1fpkt", shape=hexagon, color=black];
1355[label="213.173.169.57;d;1pkt 1fpkt", shape=hexagon, color=black];
1456[label="212.210.184.154;d;1pkt 1fpkt", shape=hexagon, color=black];
1463[label="110.194.193.36;d;1pkt 1fpkt", shape=hexagon, color=black];
1666[label="213.136.121.85;d;1pkt 1fpkt", shape=hexagon, color=black];
1668[label="110.24.38.243;d;1pkt 1fpkt", shape=hexagon, color=black];
1767[label="12.69.187.183;d;1pkt 1fpkt", shape=hexagon, color=black];
1897[label="13.19.88.130;d;1pkt 1fpkt", shape=hexagon, color=black];
2631[label="147.87.132.233;196pkt 196fpkt", shape=pentagon, color=darkviolet];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.132.233:*, *:6346}[69.0355%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (34.2327%)&lt;BR/&gt; 80: (7.58853%)&lt;BR/&gt; 6347: (6.32378%)&lt;BR/&gt; 6355: (0.590219%)&lt;BR/&gt; 29588: (0.421585%)&gt;];
}
53--55[label="1;1pkt 1fpkt"];
53--1287[label="1;1pkt 1fpkt"];
53--1456[label="1;1pkt 1fpkt"];
53--2631[label="1;1pkt 1fpkt"];
55--100[label="1;1pkt 1fpkt"];
55--143[label="0.00526316;1pkt 1fpkt"];
55--174[label="1;1pkt 1fpkt"];
55--251[label="1;1pkt 1fpkt"];
55--313[label="1;1pkt 1fpkt"];
55--434[label="1;1pkt 1fpkt"];
55--517[label="1;1pkt 1fpkt"];
55--528[label="1;1pkt 1fpkt"];
55--1226[label="0.0306122;3pkt 3fpkt"];
55--1267[label="1;1pkt 1fpkt"];
55--1287[label="1;190pkt 190fpkt"];
55--1315[label="1;1pkt 1fpkt"];
55--1355[label="1;1pkt 1fpkt"];
55--1456[label="1;1pkt 1fpkt"];
55--1463[label="1;1pkt 1fpkt"];
55--1666[label="1;1pkt 1fpkt"];
55--1668[label="1;1pkt 1fpkt"];
55--1767[label="1;1pkt 1fpkt"];
55--1897[label="1;1pkt 1fpkt"];
55--2004[label="0.0157895;3pkt 3fpkt"];
55--2015[label="0.0157895;3pkt 3fpkt"];
55--2021[label="0.0157895;3pkt 3fpkt"];
55--2631[label="0.994737;189pkt 189fpkt"];
100--1287[label="1;1pkt 1fpkt"];
100--1767[label="1;1pkt 1fpkt"];
100--2631[label="1;1pkt 1fpkt"];
174--1287[label="1;1pkt 1fpkt"];
174--1315[label="1;1pkt 1fpkt"];
174--2631[label="1;1pkt 1fpkt"];
251--1287[label="1;1pkt 1fpkt"];
251--1463[label="1;1pkt 1fpkt"];
251--2631[label="1;1pkt 1fpkt"];
313--1287[label="1;1pkt 1fpkt"];
313--1355[label="1;1pkt 1fpkt"];
313--2631[label="1;1pkt 1fpkt"];
434--1287[label="1;1pkt 1fpkt"];
434--2631[label="1;1pkt 1fpkt"];
517--1287[label="1;1pkt 1fpkt"];
517--1666[label="1;1pkt 1fpkt"];
517--2631[label="1;1pkt 1fpkt"];
528--1287[label="1;1pkt 1fpkt"];
528--1668[label="1;1pkt 1fpkt"];
528--2631[label="1;1pkt 1fpkt"];
1267--1287[label="1;1pkt 1fpkt"];
1267--1897[label="1;1pkt 1fpkt"];
1267--2631[label="1;1pkt 1fpkt"];
1287--1315[label="1;1pkt 1fpkt"];
1287--1355[label="1;1pkt 1fpkt"];
1287--1456[label="1;1pkt 1fpkt"];
1287--1463[label="1;1pkt 1fpkt"];
1287--1666[label="1;1pkt 1fpkt"];
1287--1668[label="1;1pkt 1fpkt"];
1287--1767[label="1;1pkt 1fpkt"];
1287--1897[label="1;1pkt 1fpkt"];
1287--2004[label="0.0157895;3pkt 3fpkt"];
1287--2015[label="0.0157895;3pkt 3fpkt"];
1287--2021[label="0.0157895;3pkt 3fpkt"];
1287--2631[label="0.994737;189pkt 189fpkt"];
1315--2631[label="1;1pkt 1fpkt"];
1355--2631[label="1;1pkt 1fpkt"];
1456--2631[label="1;1pkt 1fpkt"];
1463--2631[label="1;1pkt 1fpkt"];
1666--2631[label="1;1pkt 1fpkt"];
1668--2631[label="1;1pkt 1fpkt"];
1767--2631[label="1;1pkt 1fpkt"];
1897--2631[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6346" src_ip="147.87.132.233"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
152[label="205.68.254.152;s;296pkt 296fpkt", shape=diamond, color=yellow];
372[label="147.87.216.186;d;104pkt 104fpkt", shape=diamond, color=yellow];
436[label="147.87.143.104;d;268pkt 268fpkt", shape=diamond, color=yellow];
1418[label="205.68.254.152;s;119pkt 119fpkt", shape=hexagon, color=black];
1464[label="147.87.216.186;d;85pkt 85fpkt", shape=hexagon, color=black];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.68.254.152:80, 147.87.143.104:*}[26.7819%]&lt;BR/&gt;{*:80, 147.87.216.186:*}[22.4622%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8853%)&lt;BR/&gt; 1452: (0.229358%)&lt;BR/&gt; 1451: (0.229358%)&lt;BR/&gt; 1450: (0.229358%)&lt;BR/&gt; 1449: (0.229358%)&gt;];
}
152--289[label="0.114865;34pkt 34fpkt"];
152--310[label="0.558824;57pkt 57fpkt"];
152--372[label="0.778846;81pkt 81fpkt"];
152--436[label="0.462687;124pkt 124fpkt"];
152--1353[label="0.114865;34pkt 34fpkt"];
152--1418[label="1;119pkt 119fpkt"];
152--1464[label="0.952941;81pkt 81fpkt"];
152--1996[label="0.114865;34pkt 34fpkt"];
152--2006[label="0.0168919;5pkt 5fpkt"];
152--2008[label="0.0371622;11pkt 11fpkt"];
152--2009[label="0.114865;34pkt 34fpkt"];
152--2016[label="0.114865;34pkt 34fpkt"];
372--569[label="0.182692;19pkt 19fpkt"];
372--1418[label="0.634615;66pkt 66fpkt"];
372--1464[label="1;85pkt 85fpkt"];
372--1874[label="0.182692;19pkt 19fpkt"];
372--1996[label="0.326923;34pkt 34fpkt"];
372--2006[label="0.0192308;2pkt 2fpkt"];
372--2008[label="0.00961538;1pkt 1fpkt"];
372--2009[label="0.326923;34pkt 34fpkt"];
372--2016[label="0.326923;34pkt 34fpkt"];
436--560[label="0.0049505;1pkt 1fpkt"];
436--1516[label="0.0075188;1pkt 1fpkt"];
436--1659[label="0.254545;28pkt 28fpkt"];
436--2006[label="0.011194;3pkt 3fpkt"];
436--2008[label="0.0485075;13pkt 13fpkt"];
436--2387[label="0.18543;28pkt 28fpkt"];
1418--1464[label="0.776471;66pkt 66fpkt"];
1418--1996[label="0.285714;34pkt 34fpkt"];
1418--2009[label="0.285714;34pkt 34fpkt"];
1418--2016[label="0.285714;34pkt 34fpkt"];
1464--1874[label="0.0470588;4pkt 4fpkt"];
1464--1996[label="0.4;34pkt 34fpkt"];
1464--2006[label="0.0235294;2pkt 2fpkt"];
1464--2009[label="0.4;34pkt 34fpkt"];
1464--2016[label="0.4;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.216.186" src_port="80"/>
      <filter dst_ip="147.87.143.104" src_ip="205.68.254.152" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
543[label="160.164.82.76;s;3pkt 3fpkt", shape=diamond, color=yellow];
544[label="219.74.28.160;d;3pkt 3fpkt", shape=diamond, color=yellow];
1465[label="160.164.82.76;s;3pkt 3fpkt", shape=hexagon, color=black];
2235[label="160.164.82.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.164.82.76:2137, 219.74.28.160:80}[33.3333%]&lt;BR/&gt;{160.164.82.76:2138, 219.74.28.160:80}[33.3333%]&lt;BR/&gt;{160.164.82.76:2139, 219.74.28.160:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2139: (20%)&lt;BR/&gt; 2138: (15%)&lt;BR/&gt; 2137: (15%)&gt;];
}
543--544[label="1;3pkt 3fpkt"];
543--1465[label="1;3pkt 3fpkt"];
543--2235[label="1;1pkt 1fpkt"];
544--1465[label="1;3pkt 3fpkt"];
544--2235[label="1;1pkt 1fpkt"];
1465--2235[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.74.28.160" dst_port="80" src_ip="160.164.82.76" src_port="2139"/>
      <filter dst_ip="219.74.28.160" dst_port="80" src_ip="160.164.82.76" src_port="2138"/>
      <filter dst_ip="219.74.28.160" dst_port="80" src_ip="160.164.82.76" src_port="2137"/>
    </slice>
    <from sec="994482935" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.918716,2.16821,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
396[label="211.164.87.176;s;1pkt 1fpkt", shape=diamond, color=yellow];
560[label="219.76.153.153;s;202pkt 202fpkt", shape=diamond, color=yellow];
578[label="192.212.33.132;s;194pkt 194fpkt", shape=diamond, color=yellow];
588[label="209.121.220.36;s;11pkt 11fpkt", shape=diamond, color=yellow];
615[label="195.76.27.245;s;136pkt 136fpkt", shape=diamond, color=yellow];
667[label="128.141.243.118;d;11pkt 11fpkt", shape=diamond, color=yellow];
669[label="128.141.130.208;d;63pkt 63fpkt", shape=diamond, color=yellow];
1036[label="128.141.28.0;d;159pkt 159fpkt", shape=diamond, color=yellow];
1061[label="196.10.98.150;s;123pkt 123fpkt", shape=diamond, color=yellow];
1471[label="209.121.220.36;s;8pkt 8fpkt", shape=hexagon, color=black];
1516[label="219.76.153.153;s;133pkt 133fpkt", shape=hexagon, color=black];
1579[label="128.141.243.118;d;11pkt 11fpkt", shape=hexagon, color=black];
1793[label="128.141.28.0;d;159pkt 159fpkt", shape=hexagon, color=black];
1931[label="147.87.132.236;d;40pkt 40fpkt", shape=polygon, color=gold];
2448[label="196.10.98.150;122pkt 122fpkt", shape=pentagon, color=darkviolet];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.76.153.153:80, *:*}[27.1141%]&lt;BR/&gt;{192.212.33.132:80, *:*}[26.0403%]&lt;BR/&gt;{*:80, 128.141.28.0:*}[21.0738%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7087%)&lt;BR/&gt; 44622: (0.145666%)&lt;BR/&gt; 44621: (0.145666%)&lt;BR/&gt; 44620: (0.145666%)&lt;BR/&gt; 44619: (0.145666%)&gt;];
}
396--1352[label="1;1pkt 1fpkt"];
396--1931[label="1;1pkt 1fpkt"];
560--667[label="0.454545;5pkt 5fpkt"];
560--1036[label="0.0566038;9pkt 9fpkt"];
560--1317[label="0.356436;72pkt 72fpkt"];
560--1352[label="0.0416667;5pkt 5fpkt"];
560--1416[label="0.00502513;1pkt 1fpkt"];
560--1431[label="0.025;3pkt 3fpkt"];
560--1489[label="0.00632911;1pkt 1fpkt"];
560--1516[label="1;133pkt 133fpkt"];
560--1579[label="0.454545;5pkt 5fpkt"];
560--1645[label="0.0179641;3pkt 3fpkt"];
560--1793[label="0.0566038;9pkt 9fpkt"];
560--1921[label="0.0909091;1pkt 1fpkt"];
560--1931[label="0.125;5pkt 5fpkt"];
560--1996[label="0.0346535;7pkt 7fpkt"];
560--2006[label="0.0445545;9pkt 9fpkt"];
560--2008[label="0.0247525;5pkt 5fpkt"];
560--2009[label="0.0346535;7pkt 7fpkt"];
560--2016[label="0.0346535;7pkt 7fpkt"];
578--665[label="0.388889;28pkt 28fpkt"];
578--669[label="0.222222;14pkt 14fpkt"];
578--763[label="0.02;1pkt 1fpkt"];
578--971[label="0.105263;2pkt 2fpkt"];
578--1352[label="0.183333;22pkt 22fpkt"];
578--1735[label="1;194pkt 194fpkt"];
578--1931[label="0.55;22pkt 22fpkt"];
578--2006[label="0.0979381;19pkt 19fpkt"];
578--2008[label="0.0876289;17pkt 17fpkt"];
588--667[label="0.545455;6pkt 6fpkt"];
588--1471[label="1;8pkt 8fpkt"];
588--1579[label="0.545455;6pkt 6fpkt"];
615--895[label="0.140351;16pkt 16fpkt"];
615--1352[label="0.15;18pkt 18fpkt"];
615--1353[label="0.0294118;4pkt 4fpkt"];
615--1367[label="0.0990991;11pkt 11fpkt"];
615--1704[label="0.148148;16pkt 16fpkt"];
615--1772[label="1;129pkt 129fpkt"];
615--1931[label="0.25;10pkt 10fpkt"];
615--1996[label="0.0588235;8pkt 8fpkt"];
615--2006[label="0.0367647;5pkt 5fpkt"];
615--2008[label="0.0147059;2pkt 2fpkt"];
615--2009[label="0.0588235;8pkt 8fpkt"];
615--2016[label="0.0588235;8pkt 8fpkt"];
667--1471[label="0.375;3pkt 3fpkt"];
667--1516[label="0.454545;5pkt 5fpkt"];
667--1579[label="1;11pkt 11fpkt"];
669--1212[label="0.0634921;4pkt 4fpkt"];
669--1380[label="0.650794;41pkt 41fpkt"];
669--1735[label="0.222222;14pkt 14fpkt"];
669--2211[label="0.650794;41pkt 41fpkt"];
669--2298[label="0.0634921;4pkt 4fpkt"];
1036--1061[label="1;123pkt 123fpkt"];
1036--1516[label="0.0225564;3pkt 3fpkt"];
1036--1793[label="1;159pkt 159fpkt"];
1036--2006[label="0.0440252;7pkt 7fpkt"];
1036--2150[label="0.163265;8pkt 8fpkt"];
1036--2448[label="1;122pkt 122fpkt"];
1061--1793[label="1;123pkt 123fpkt"];
1061--2448[label="1;122pkt 122fpkt"];
1471--1579[label="0.375;3pkt 3fpkt"];
1516--1579[label="0.454545;5pkt 5fpkt"];
1516--1645[label="0.0225564;3pkt 3fpkt"];
1516--1793[label="0.0225564;3pkt 3fpkt"];
1516--1921[label="0.0909091;1pkt 1fpkt"];
1516--1931[label="0.125;5pkt 5fpkt"];
1516--1996[label="0.0526316;7pkt 7fpkt"];
1516--2006[label="0.0526316;7pkt 7fpkt"];
1516--2009[label="0.0526316;7pkt 7fpkt"];
1516--2016[label="0.0526316;7pkt 7fpkt"];
1793--2006[label="0.0440252;7pkt 7fpkt"];
1793--2150[label="0.163265;8pkt 8fpkt"];
1793--2448[label="1;122pkt 122fpkt"];
1931--1996[label="0.025;1pkt 1fpkt"];
1931--2009[label="0.025;1pkt 1fpkt"];
1931--2016[label="0.025;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="219.76.153.153" src_port="80"/>
      <filter src_ip="192.212.33.132" src_port="80"/>
      <filter dst_ip="128.141.28.0" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
522[label="128.141.204.75;s;86pkt 86fpkt", shape=diamond, color=yellow];
843[label="145.192.8.5;d;41pkt 41fpkt", shape=diamond, color=yellow];
1472[label="128.141.204.75;s;86pkt 86fpkt", shape=hexagon, color=black];
1578[label="145.192.8.5;d;41pkt 41fpkt", shape=hexagon, color=black];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.141.204.75:*, 145.192.8.5:80}[47.6744%]&lt;BR/&gt;{128.141.204.75:*, 209.61.20.213:80}[20.9302%]&lt;BR/&gt;{128.141.204.75:*, 219.201.132.217:80}[20.9302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2004: (0.787402%)&lt;BR/&gt; 2003: (0.787402%)&lt;BR/&gt; 2002: (0.787402%)&lt;BR/&gt; 2001: (0.787402%)&gt;];
}
522--843[label="1;41pkt 41fpkt"];
522--1472[label="1;86pkt 86fpkt"];
522--1578[label="1;41pkt 41fpkt"];
522--2001[label="0.209302;18pkt 18fpkt"];
522--2002[label="0.127907;11pkt 11fpkt"];
522--2004[label="0.0930233;8pkt 8fpkt"];
522--2013[label="0.127907;11pkt 11fpkt"];
522--2015[label="0.0930233;8pkt 8fpkt"];
522--2021[label="0.0930233;8pkt 8fpkt"];
843--1472[label="1;41pkt 41fpkt"];
843--1578[label="1;41pkt 41fpkt"];
843--2002[label="0.0731707;3pkt 3fpkt"];
843--2004[label="0.195122;8pkt 8fpkt"];
843--2013[label="0.0731707;3pkt 3fpkt"];
843--2015[label="0.195122;8pkt 8fpkt"];
843--2021[label="0.195122;8pkt 8fpkt"];
1472--1578[label="1;41pkt 41fpkt"];
1472--2001[label="0.209302;18pkt 18fpkt"];
1472--2002[label="0.127907;11pkt 11fpkt"];
1472--2004[label="0.0930233;8pkt 8fpkt"];
1472--2013[label="0.127907;11pkt 11fpkt"];
1472--2015[label="0.0930233;8pkt 8fpkt"];
1472--2021[label="0.0930233;8pkt 8fpkt"];
1578--2002[label="0.0731707;3pkt 3fpkt"];
1578--2004[label="0.195122;8pkt 8fpkt"];
1578--2013[label="0.0731707;3pkt 3fpkt"];
1578--2015[label="0.195122;8pkt 8fpkt"];
1578--2021[label="0.195122;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="145.192.8.5" dst_port="80" src_ip="128.141.204.75"/>
      <filter dst_ip="219.201.132.217" dst_port="80" src_ip="128.141.204.75"/>
      <filter dst_ip="209.61.20.213" dst_port="80" src_ip="128.141.204.75"/>
    </slice>
    <from sec="994482204" usec="0"/>
    <to sec="994482824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
363[label="149.168.49.235;d;6pkt 6fpkt", shape=diamond, color=yellow];
366[label="192.193.175.93;s;1pkt 1fpkt", shape=diamond, color=yellow];
1378[label="149.168.49.235;d;2pkt 2fpkt", shape=hexagon, color=black];
1478[label="192.193.175.93;s;1pkt 1fpkt", shape=hexagon, color=black];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.155.129.139:7734, 149.168.49.235:*}[33.3333%]&lt;BR/&gt;{*:6699, 149.168.49.235:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (35%)&lt;BR/&gt; 1548: (20%)&lt;BR/&gt; 7734: (10%)&lt;BR/&gt; 3224: (10%)&lt;BR/&gt; 0: (10%)&gt;];
}
363--366[label="1;1pkt 1fpkt"];
363--1378[label="1;2pkt 2fpkt"];
363--1478[label="1;1pkt 1fpkt"];
363--2416[label="0.333333;2pkt 2fpkt"];
366--1378[label="1;1pkt 1fpkt"];
366--1478[label="1;1pkt 1fpkt"];
1378--1478[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.168.49.235" src_port="6699"/>
      <filter dst_ip="149.168.49.235" src_ip="209.155.129.139" src_port="7734"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
548[label="165.22.6.227;s;2pkt 2fpkt", shape=diamond, color=yellow];
633[label="196.180.20.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
1487[label="196.180.20.132;d;1pkt 1fpkt", shape=hexagon, color=black];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.22.6.227:0, 196.180.20.132:0}[50%]&lt;BR/&gt;{165.22.6.227:3350, 202.229.138.202:873}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (75%)&lt;BR/&gt; 3350: (12.5%)&lt;BR/&gt; 873: (12.5%)&gt;];
}
548--633[label="1;1pkt 1fpkt"];
548--1487[label="1;1pkt 1fpkt"];
633--1487[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.229.138.202" dst_port="873" src_ip="165.22.6.227" src_port="3350"/>
      <filter dst_ip="196.180.20.132" src_ip="165.22.6.227"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699975,2.1774,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
78[label="203.185.236.172;s;1134pkt 1134fpkt", shape=diamond, color=yellow];
110[label="165.22.49.95;d;1905pkt 1905fpkt", shape=diamond, color=yellow];
247[label="165.22.48.4;d;35pkt 35fpkt", shape=diamond, color=yellow];
298[label="219.154.87.138;s;14pkt 14fpkt", shape=diamond, color=yellow];
1303[label="165.22.49.95;d;1389pkt 1389fpkt", shape=hexagon, color=black];
1327[label="203.185.236.172;s;1134pkt 1134fpkt", shape=hexagon, color=black];
1439[label="193.135.28.97;s;8pkt 8fpkt", shape=hexagon, color=black];
1610[label="165.22.48.4;d;27pkt 27fpkt", shape=hexagon, color=black];
2322[label="219.1.129.104;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2393[label="209.72.24.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2462[label="219.1.228.155;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2756[label="219.1.129.104;18pkt 18fpkt", shape=invtriangle, color=brown];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 165.22.49.95:1034}[26.7191%]&lt;BR/&gt;{203.185.236.172:3128, 165.22.49.95:*}[21.1788%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (28.1558%)&lt;BR/&gt; 53: (15.7173%)&lt;BR/&gt; 1034: (10.1969%)&lt;BR/&gt; 80: (5.41491%)&lt;BR/&gt; 0: (0.791139%)&gt;];
}
78--79[label="0.377425;428pkt 428fpkt"];
78--110[label="0.477072;541pkt 541fpkt"];
78--247[label="0.628571;22pkt 22fpkt"];
78--281[label="0.168889;38pkt 38fpkt"];
78--301[label="0.3375;81pkt 81fpkt"];
78--1303[label="0.334215;379pkt 379fpkt"];
78--1327[label="1;1134pkt 1134fpkt"];
78--1366[label="0.273799;302pkt 302fpkt"];
78--1610[label="0.703704;19pkt 19fpkt"];
110--187[label="0.0188679;1pkt 1fpkt"];
110--298[label="0.0714286;1pkt 1fpkt"];
110--381[label="0.166667;2pkt 2fpkt"];
110--431[label="0.0178571;1pkt 1fpkt"];
110--493[label="0.125;1pkt 1fpkt"];
110--640[label="0.0147059;1pkt 1fpkt"];
110--683[label="0.0185185;1pkt 1fpkt"];
110--689[label="0.0166667;1pkt 1fpkt"];
110--692[label="0.015625;1pkt 1fpkt"];
110--700[label="0.016129;1pkt 1fpkt"];
110--702[label="0.0163934;1pkt 1fpkt"];
110--703[label="0.016129;1pkt 1fpkt"];
110--794[label="0.0151515;1pkt 1fpkt"];
110--801[label="0.015873;1pkt 1fpkt"];
110--803[label="0.0169492;1pkt 1fpkt"];
110--812[label="0.0204082;1pkt 1fpkt"];
110--922[label="0.0153846;1pkt 1fpkt"];
110--1078[label="0.0147059;1pkt 1fpkt"];
110--1138[label="0.0333333;1pkt 1fpkt"];
110--1303[label="1;1389pkt 1389fpkt"];
110--1327[label="0.477072;541pkt 541fpkt"];
110--1397[label="0.0188679;1pkt 1fpkt"];
110--1439[label="0.125;1pkt 1fpkt"];
110--1532[label="0.0232558;1pkt 1fpkt"];
110--1553[label="0.015625;1pkt 1fpkt"];
110--1612[label="0.015625;1pkt 1fpkt"];
110--1720[label="0.0204082;1pkt 1fpkt"];
110--1857[label="0.0169492;1pkt 1fpkt"];
110--1956[label="0.0172414;1pkt 1fpkt"];
110--1992[label="0.0169492;1pkt 1fpkt"];
110--1996[label="0.00997375;19pkt 19fpkt"];
110--2000[label="0.0115486;22pkt 22fpkt"];
110--2003[label="0.0146982;28pkt 28fpkt"];
110--2005[label="0.0955381;182pkt 182fpkt"];
110--2006[label="0.0125984;24pkt 24fpkt"];
110--2007[label="0.0850394;162pkt 162fpkt"];
110--2008[label="0.0120735;23pkt 23fpkt"];
110--2009[label="0.00997375;19pkt 19fpkt"];
110--2014[label="0.0146982;28pkt 28fpkt"];
110--2016[label="0.00997375;19pkt 19fpkt"];
110--2020[label="0.0146982;28pkt 28fpkt"];
110--2037[label="0.142857;1pkt 1fpkt"];
110--2122[label="0.0217391;1pkt 1fpkt"];
110--2176[label="0.0232558;1pkt 1fpkt"];
110--2220[label="0.0344828;1pkt 1fpkt"];
110--2221[label="0.0588235;1pkt 1fpkt"];
110--2265[label="0.125;1pkt 1fpkt"];
110--2293[label="0.0357143;1pkt 1fpkt"];
110--2305[label="0.310345;9pkt 9fpkt"];
110--2341[label="0.142857;1pkt 1fpkt"];
110--2361[label="0.2;1pkt 1fpkt"];
110--2363[label="0.0740741;2pkt 2fpkt"];
110--2378[label="0.0909091;1pkt 1fpkt"];
110--2393[label="1;1pkt 1fpkt"];
110--2402[label="0.636364;7pkt 7fpkt"];
110--2403[label="0.4375;14pkt 14fpkt"];
110--2425[label="0.0147059;1pkt 1fpkt"];
110--2438[label="0.0909091;1pkt 1fpkt"];
110--2458[label="0.0454545;1pkt 1fpkt"];
110--2462[label="1;5pkt 5fpkt"];
110--2482[label="0.0188679;1pkt 1fpkt"];
110--2574[label="0.037037;1pkt 1fpkt"];
110--2584[label="0.0625;1pkt 1fpkt"];
110--2637[label="0.0666667;5pkt 5fpkt"];
110--2689[label="0.0217391;1pkt 1fpkt"];
110--2703[label="0.016129;1pkt 1fpkt"];
110--2711[label="0.0238095;1pkt 1fpkt"];
110--2766[label="0.142857;1pkt 1fpkt"];
110--2776[label="0.0909091;1pkt 1fpkt"];
110--2785[label="0.4375;14pkt 14fpkt"];
110--2788[label="0.0149254;1pkt 1fpkt"];
110--2795[label="0.0909091;1pkt 1fpkt"];
110--2846[label="0.0357143;1pkt 1fpkt"];
110--2869[label="0.0666667;5pkt 5fpkt"];
110--2916[label="0.0172414;1pkt 1fpkt"];
247--484[label="0.142857;5pkt 5fpkt"];
247--1327[label="0.628571;22pkt 22fpkt"];
247--1610[label="1;27pkt 27fpkt"];
247--2001[label="0.0285714;1pkt 1fpkt"];
247--2002[label="0.0285714;1pkt 1fpkt"];
247--2013[label="0.0285714;1pkt 1fpkt"];
247--2322[label="0.222222;4pkt 4fpkt"];
247--2756[label="0.222222;4pkt 4fpkt"];
298--1303[label="0.0714286;1pkt 1fpkt"];
298--1996[label="0.285714;4pkt 4fpkt"];
298--2009[label="0.285714;4pkt 4fpkt"];
298--2016[label="0.285714;4pkt 4fpkt"];
1303--1327[label="0.334215;379pkt 379fpkt"];
1303--1397[label="0.0188679;1pkt 1fpkt"];
1303--1439[label="0.125;1pkt 1fpkt"];
1303--1532[label="0.0232558;1pkt 1fpkt"];
1303--1553[label="0.015625;1pkt 1fpkt"];
1303--1612[label="0.015625;1pkt 1fpkt"];
1303--1720[label="0.0204082;1pkt 1fpkt"];
1303--1857[label="0.0169492;1pkt 1fpkt"];
1303--1956[label="0.0172414;1pkt 1fpkt"];
1303--1992[label="0.0169492;1pkt 1fpkt"];
1303--1996[label="0.0136789;19pkt 19fpkt"];
1303--2000[label="0.0158387;22pkt 22fpkt"];
1303--2003[label="0.0201584;28pkt 28fpkt"];
1303--2005[label="0.13103;182pkt 182fpkt"];
1303--2006[label="0.0172786;24pkt 24fpkt"];
1303--2007[label="0.0813535;113pkt 113fpkt"];
1303--2008[label="0.000719942;1pkt 1fpkt"];
1303--2009[label="0.0136789;19pkt 19fpkt"];
1303--2014[label="0.0201584;28pkt 28fpkt"];
1303--2016[label="0.0136789;19pkt 19fpkt"];
1303--2020[label="0.0201584;28pkt 28fpkt"];
1303--2122[label="0.0217391;1pkt 1fpkt"];
1303--2176[label="0.0232558;1pkt 1fpkt"];
1303--2221[label="0.0588235;1pkt 1fpkt"];
1303--2265[label="0.125;1pkt 1fpkt"];
1303--2293[label="0.0357143;1pkt 1fpkt"];
1303--2305[label="0.241379;7pkt 7fpkt"];
1303--2341[label="0.142857;1pkt 1fpkt"];
1303--2363[label="0.037037;1pkt 1fpkt"];
1303--2402[label="0.454545;5pkt 5fpkt"];
1303--2403[label="0.3125;10pkt 10fpkt"];
1303--2425[label="0.0147059;1pkt 1fpkt"];
1303--2438[label="0.0909091;1pkt 1fpkt"];
1303--2462[label="0.6;3pkt 3fpkt"];
1303--2482[label="0.0188679;1pkt 1fpkt"];
1303--2574[label="0.037037;1pkt 1fpkt"];
1303--2584[label="0.0625;1pkt 1fpkt"];
1303--2637[label="0.0666667;5pkt 5fpkt"];
1303--2689[label="0.0217391;1pkt 1fpkt"];
1303--2703[label="0.016129;1pkt 1fpkt"];
1303--2711[label="0.0238095;1pkt 1fpkt"];
1303--2766[label="0.142857;1pkt 1fpkt"];
1303--2785[label="0.3125;10pkt 10fpkt"];
1303--2788[label="0.0149254;1pkt 1fpkt"];
1303--2795[label="0.0909091;1pkt 1fpkt"];
1303--2846[label="0.0357143;1pkt 1fpkt"];
1303--2869[label="0.0666667;5pkt 5fpkt"];
1303--2916[label="0.0172414;1pkt 1fpkt"];
1327--1366[label="0.273799;302pkt 302fpkt"];
1327--1610[label="0.703704;19pkt 19fpkt"];
1439--2005[label="0.375;3pkt 3fpkt"];
1439--2007[label="0.375;3pkt 3fpkt"];
1610--2001[label="0.037037;1pkt 1fpkt"];
1610--2002[label="0.037037;1pkt 1fpkt"];
1610--2013[label="0.037037;1pkt 1fpkt"];
1610--2322[label="0.111111;2pkt 2fpkt"];
1610--2756[label="0.111111;2pkt 2fpkt"];
2322--2756[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="165.22.49.95" src_ip="203.185.236.172" src_port="3128"/>
      <filter dst_ip="165.22.49.95" dst_port="1034" src_port="53"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
294[label="147.87.74.152;s;205pkt 205fpkt", shape=diamond, color=yellow];
441[label="196.113.8.193;d;31pkt 31fpkt", shape=diamond, color=yellow];
553[label="194.233.245.107;d;191pkt 191fpkt", shape=diamond, color=yellow];
635[label="147.87.65.246;s;23pkt 23fpkt", shape=diamond, color=yellow];
1493[label="196.113.8.193;d;31pkt 31fpkt", shape=hexagon, color=black];
1630[label="194.233.245.107;d;177pkt 177fpkt", shape=hexagon, color=black];
1730[label="147.87.65.159;s;18pkt 18fpkt", shape=hexagon, color=black];
1821[label="147.87.74.152;s;205pkt 205fpkt", shape=hexagon, color=black];
1958[label="194.233.245.107;d;138pkt 138fpkt", shape=polygon, color=gold];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.74.152:*, 194.233.245.107:113}[37.2093%]&lt;BR/&gt;{147.87.74.152:25, 194.233.245.107:*}[36.8217%]&lt;BR/&gt;{*:80, *:*}[23.2558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (22.1786%)&lt;BR/&gt; 25: (22.0805%)&lt;BR/&gt; 80: (5.74092%)&lt;BR/&gt; 1824: (0.294406%)&lt;BR/&gt; 53888: (0.245339%)&gt;];
}
294--441[label="0.0322581;1pkt 1fpkt"];
294--553[label="1;191pkt 191fpkt"];
294--1493[label="0.0322581;1pkt 1fpkt"];
294--1630[label="1;177pkt 177fpkt"];
294--1821[label="1;205pkt 205fpkt"];
294--1958[label="1;138pkt 138fpkt"];
294--2006[label="0.0097561;2pkt 2fpkt"];
441--635[label="0.478261;11pkt 11fpkt"];
441--650[label="0.35;7pkt 7fpkt"];
441--1493[label="1;31pkt 31fpkt"];
441--1730[label="0.388889;7pkt 7fpkt"];
441--1821[label="0.0322581;1pkt 1fpkt"];
441--2444[label="0.193548;6pkt 6fpkt"];
441--2799[label="0.193548;6pkt 6fpkt"];
553--1630[label="1;177pkt 177fpkt"];
553--1821[label="1;191pkt 191fpkt"];
553--1958[label="1;138pkt 138fpkt"];
635--943[label="0.0869565;2pkt 2fpkt"];
635--1493[label="0.478261;11pkt 11fpkt"];
1493--1730[label="0.388889;7pkt 7fpkt"];
1493--1821[label="0.0322581;1pkt 1fpkt"];
1493--2444[label="0.193548;6pkt 6fpkt"];
1493--2799[label="0.193548;6pkt 6fpkt"];
1630--1821[label="1;177pkt 177fpkt"];
1630--1958[label="1;138pkt 138fpkt"];
1730--1996[label="0.111111;2pkt 2fpkt"];
1730--2006[label="0.111111;2pkt 2fpkt"];
1730--2009[label="0.111111;2pkt 2fpkt"];
1730--2016[label="0.111111;2pkt 2fpkt"];
1821--1958[label="1;138pkt 138fpkt"];
1821--2006[label="0.0097561;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="194.233.245.107" src_ip="147.87.74.152" src_port="25"/>
      <filter dst_ip="194.233.245.107" dst_port="113" src_ip="147.87.74.152"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
591[label="147.87.82.17;d;23pkt 23fpkt", shape=diamond, color=yellow];
602[label="219.93.178.131;s;4pkt 4fpkt", shape=diamond, color=yellow];
1495[label="147.87.82.17;d;23pkt 23fpkt", shape=hexagon, color=black];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.254.72.160:80, 147.87.82.17:*}[39.1304%]&lt;BR/&gt;{163.78.97.223:80, 147.87.82.17:*}[34.7826%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1578: (3%)&lt;BR/&gt; 1576: (3%)&lt;BR/&gt; 1571: (3%)&lt;BR/&gt; 1570: (3%)&gt;];
}
591--602[label="1;4pkt 4fpkt"];
591--1495[label="1;23pkt 23fpkt"];
602--1495[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.82.17" src_ip="219.254.72.160" src_port="80"/>
      <filter dst_ip="147.87.82.17" src_ip="163.78.97.223" src_port="80"/>
    </slice>
    <from sec="994482218" usec="0"/>
    <to sec="994482438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
670[label="219.133.43.140;s;24pkt 24fpkt", shape=diamond, color=yellow];
1498[label="219.133.43.140;s;24pkt 24fpkt", shape=hexagon, color=black];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.133.43.140:80, 196.217.132.92:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4306: (2.08333%)&lt;BR/&gt; 4229: (2.08333%)&lt;BR/&gt; 4176: (2.08333%)&lt;BR/&gt; 4143: (2.08333%)&gt;];
}
670--1498[label="1;24pkt 24fpkt"];
670--2006[label="0.0416667;1pkt 1fpkt"];
1498--2006[label="0.0416667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.217.132.92" src_ip="219.133.43.140" src_port="80"/>
    </slice>
    <from sec="994482392" usec="0"/>
    <to sec="994482680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.918716,2.16821,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
536[label="147.87.163.13;s;3pkt 3fpkt", shape=diamond, color=yellow];
608[label="196.144.131.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
1501[label="147.87.163.13;s;3pkt 3fpkt", shape=hexagon, color=black];
1955[label="147.87.163.13;s;3pkt 3fpkt", shape=polygon, color=gold];
2075[label="147.87.163.13;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.163.13:1702, 209.155.129.139:80}[33.3333%]&lt;BR/&gt;{147.87.163.13:1438, 110.25.103.174:6699}[33.3333%]&lt;BR/&gt;{147.87.163.13:1634, 196.144.131.207:6699}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (37.5%)&lt;BR/&gt; 1634: (20.8333%)&lt;BR/&gt; 1438: (16.6667%)&lt;BR/&gt; 1702: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
536--608[label="1;1pkt 1fpkt"];
536--1501[label="1;3pkt 3fpkt"];
536--1955[label="1;3pkt 3fpkt"];
536--2075[label="1;2pkt 2fpkt"];
608--1501[label="1;1pkt 1fpkt"];
608--1955[label="1;1pkt 1fpkt"];
608--2075[label="1;1pkt 1fpkt"];
1501--1955[label="1;3pkt 3fpkt"];
1501--2075[label="1;2pkt 2fpkt"];
1955--2075[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="196.144.131.207" dst_port="6699" src_ip="147.87.163.13" src_port="1634"/>
      <filter dst_ip="110.25.103.174" dst_port="6699" src_ip="147.87.163.13" src_port="1438"/>
      <filter dst_ip="209.155.129.139" dst_port="80" src_ip="147.87.163.13" src_port="1702"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
77[label="203.185.236.172;d;1152pkt 1152fpkt", shape=diamond, color=yellow];
401[label="165.22.49.67;s;152pkt 152fpkt", shape=diamond, color=yellow];
465[label="165.22.48.4;s;33pkt 33fpkt", shape=diamond, color=yellow];
680[label="165.22.181.150;s;10pkt 10fpkt", shape=diamond, color=yellow];
881[label="110.74.51.238;d;2pkt 2fpkt", shape=diamond, color=yellow];
1294[label="203.185.236.172;d;481pkt 481fpkt", shape=hexagon, color=black];
1434[label="165.22.49.67;s;77pkt 77fpkt", shape=hexagon, color=black];
1853[label="165.22.48.4;s;33pkt 33fpkt", shape=hexagon, color=black];
2149[label="196.217.132.44;63pkt 63fpkt", shape=pentagon, color=darkviolet];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.22.49.95:*, 203.185.236.172:3128}[41.8658%]&lt;BR/&gt;{165.22.48.16:*, 203.185.236.172:3128}[33.3076%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (45.0075%)&lt;BR/&gt; 0: (3.39491%)&lt;BR/&gt; 80: (2.62107%)&lt;BR/&gt; 3130: (0.848727%)&lt;BR/&gt; 2426: (0.224663%)&gt;];
}
77--80[label="0.394353;433pkt 433fpkt"];
77--111[label="0.47309;545pkt 545fpkt"];
77--401[label="0.539474;82pkt 82fpkt"];
77--465[label="0.909091;30pkt 30fpkt"];
77--547[label="0.398374;49pkt 49fpkt"];
77--1294[label="1;481pkt 481fpkt"];
77--1434[label="0.571429;44pkt 44fpkt"];
77--1458[label="0.374775;416pkt 416fpkt"];
77--1500[label="0.327731;195pkt 195fpkt"];
77--1853[label="0.909091;30pkt 30fpkt"];
77--2149[label="0.015873;1pkt 1fpkt"];
401--1159[label="0.00854701;1pkt 1fpkt"];
401--1294[label="0.217105;33pkt 33fpkt"];
401--1434[label="1;77pkt 77fpkt"];
401--1997[label="0.0263158;4pkt 4fpkt"];
401--2001[label="0.0328947;5pkt 5fpkt"];
401--2002[label="0.0328947;5pkt 5fpkt"];
401--2004[label="0.0394737;6pkt 6fpkt"];
401--2010[label="0.0263158;4pkt 4fpkt"];
401--2013[label="0.0328947;5pkt 5fpkt"];
401--2015[label="0.0394737;6pkt 6fpkt"];
401--2017[label="0.0263158;4pkt 4fpkt"];
401--2021[label="0.0394737;6pkt 6fpkt"];
465--1294[label="0.363636;12pkt 12fpkt"];
465--1853[label="1;33pkt 33fpkt"];
680--881[label="0.5;1pkt 1fpkt"];
881--2149[label="0.5;1pkt 1fpkt"];
1294--1434[label="0.428571;33pkt 33fpkt"];
1294--1458[label="0.490644;236pkt 236fpkt"];
1294--1500[label="0.372141;179pkt 179fpkt"];
1294--1853[label="0.363636;12pkt 12fpkt"];
1434--1997[label="0.0519481;4pkt 4fpkt"];
1434--2001[label="0.0649351;5pkt 5fpkt"];
1434--2002[label="0.0649351;5pkt 5fpkt"];
1434--2004[label="0.0519481;4pkt 4fpkt"];
1434--2010[label="0.0519481;4pkt 4fpkt"];
1434--2013[label="0.0649351;5pkt 5fpkt"];
1434--2015[label="0.0519481;4pkt 4fpkt"];
1434--2017[label="0.0519481;4pkt 4fpkt"];
1434--2021[label="0.0519481;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="203.185.236.172" dst_port="3128" src_ip="165.22.49.95"/>
      <filter dst_ip="203.185.236.172" dst_port="3128" src_ip="165.22.48.16"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
357[label="110.184.63.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
1504[label="110.184.63.197;d;1pkt 1fpkt", shape=hexagon, color=black];
1936[label="110.184.63.197;d;1pkt 1fpkt", shape=polygon, color=gold];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.104.88:6347, 110.184.63.197:1108}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6347: (50%)&lt;BR/&gt; 1108: (50%)&gt;];
}
357--1504[label="1;1pkt 1fpkt"];
357--1846[label="1;1pkt 1fpkt"];
357--1936[label="1;1pkt 1fpkt"];
1504--1846[label="1;1pkt 1fpkt"];
1504--1936[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="110.184.63.197" dst_port="1108" src_ip="147.87.104.88" src_port="6347"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
400[label="165.22.59.180;s;8pkt 8fpkt", shape=diamond, color=yellow];
554[label="124.3.211.157;d;1pkt 1fpkt", shape=diamond, color=yellow];
1514[label="165.22.59.180;s;8pkt 8fpkt", shape=hexagon, color=black];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.22.59.180:*, *:21}[37.5%]&lt;BR/&gt;{165.22.59.180:*, 13.149.14.0:*}[37.5%]&lt;BR/&gt;{165.22.59.180:21, *:*}[25%]&lt;BR/&gt;{165.22.59.180:*, 13.149.14.172:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (32.3529%)&lt;BR/&gt; 41178: (11.7647%)&lt;BR/&gt; 60106: (8.82353%)&lt;BR/&gt; 41001: (5.88235%)&lt;BR/&gt; 3377: (5.88235%)&gt;];
}
400--554[label="1;1pkt 1fpkt"];
400--1514[label="1;8pkt 8fpkt"];
554--1514[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="13.149.14.0" src_ip="165.22.59.180"/>
      <filter dst_ip="13.149.14.172" src_ip="165.22.59.180"/>
      <filter src_ip="165.22.59.180" src_port="21"/>
      <filter dst_port="21" src_ip="165.22.59.180"/>
    </slice>
    <from sec="994482001" usec="0"/>
    <to sec="994483183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
644[label="110.192.176.123;s;1pkt 1fpkt", shape=diamond, color=yellow];
1517[label="110.192.176.123;s;1pkt 1fpkt", shape=hexagon, color=black];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{110.192.176.123:6699, 160.171.67.7:1117}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1117: (50%)&gt;];
}
644--1431[label="1;1pkt 1fpkt"];
644--1517[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.171.67.7" dst_port="1117" src_ip="110.192.176.123" src_port="6699"/>
    </slice>
    <from sec="994482003" usec="0"/>
    <to sec="994483182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09785,2.26079,503,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
421[label="196.72.123.198;s;26pkt 26fpkt", shape=diamond, color=yellow];
1265[label="13.158.213.237;d;10pkt 10fpkt", shape=diamond, color=yellow];
2839[label="196.72.123.198;137pkt 137fpkt", shape=invtriangle, color=brown];
2926[label="196.72.123.198;136pkt 136fpkt", shape=invhouse, color=bisque];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.72.123.198:*, 146.0.117.74:80}[27.0073%]&lt;BR/&gt;{196.72.123.198:*, 146.0.115.92:80}[23.3577%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39397: (0.647249%)&lt;BR/&gt; 39396: (0.647249%)&lt;BR/&gt; 39395: (0.647249%)&lt;BR/&gt; 39390: (0.647249%)&gt;];
}
421--728[label="0.461538;12pkt 12fpkt"];
421--1265[label="1;10pkt 10fpkt"];
421--1518[label="0.461538;12pkt 12fpkt"];
421--2839[label="1;26pkt 26fpkt"];
421--2926[label="1;26pkt 26fpkt"];
1265--2839[label="1;10pkt 10fpkt"];
1265--2926[label="1;10pkt 10fpkt"];
2839--2926[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_ip="146.0.117.74" dst_port="80" src_ip="196.72.123.198"/>
      <filter dst_ip="146.0.115.92" dst_port="80" src_ip="196.72.123.198"/>
    </slice>
    <from sec="994482032" usec="0"/>
    <to sec="994483209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
521[label="128.141.204.75;d;105pkt 105fpkt", shape=diamond, color=yellow];
767[label="145.192.8.5;s;41pkt 41fpkt", shape=diamond, color=yellow];
1522[label="128.141.204.75;d;83pkt 83fpkt", shape=hexagon, color=black];
1672[label="145.192.8.5;s;41pkt 41fpkt", shape=hexagon, color=black];
2599[label="219.201.132.217;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.192.8.5:80, 128.141.204.75:*}[39.0476%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2000: (0.696864%)&lt;BR/&gt; 1999: (0.696864%)&lt;BR/&gt; 1998: (0.696864%)&lt;BR/&gt; 1997: (0.696864%)&gt;];
}
521--767[label="1;41pkt 41fpkt"];
521--1398[label="0.047619;5pkt 5fpkt"];
521--1522[label="1;83pkt 83fpkt"];
521--1672[label="1;41pkt 41fpkt"];
521--2006[label="0.171429;18pkt 18fpkt"];
521--2359[label="0.0232558;1pkt 1fpkt"];
521--2409[label="0.222222;2pkt 2fpkt"];
521--2599[label="1;17pkt 17fpkt"];
767--1522[label="0.902439;37pkt 37fpkt"];
767--1672[label="1;41pkt 41fpkt"];
767--2006[label="0.195122;8pkt 8fpkt"];
1522--1672[label="0.902439;37pkt 37fpkt"];
1522--2006[label="0.0481928;4pkt 4fpkt"];
1522--2599[label="0.882353;15pkt 15fpkt"];
1672--2006[label="0.195122;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.204.75" src_ip="145.192.8.5" src_port="80"/>
    </slice>
    <from sec="994482204" usec="0"/>
    <to sec="994482824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
674[label="147.132.155.104;d;2pkt 2fpkt", shape=diamond, color=yellow];
1526[label="147.132.155.104;d;2pkt 2fpkt", shape=hexagon, color=black];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.54.147.41:7442, 147.132.155.104:3729}[50%]&lt;BR/&gt;{149.54.147.41:7443, 147.132.155.104:3731}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7443: (25%)&lt;BR/&gt; 7442: (25%)&lt;BR/&gt; 3731: (25%)&lt;BR/&gt; 3729: (25%)&gt;];
}
674--1526[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.132.155.104" dst_port="3731" src_ip="149.54.147.41" src_port="7443"/>
      <filter dst_ip="147.132.155.104" dst_port="3729" src_ip="149.54.147.41" src_port="7442"/>
    </slice>
    <from sec="994482434" usec="0"/>
    <to sec="994482553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.33457,2.16064,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
342[label="75.142.43.171;s;299pkt 299fpkt", shape=diamond, color=yellow];
454[label="160.164.22.57;d;125pkt 125fpkt", shape=diamond, color=yellow];
790[label="149.168.7.89;d;140pkt 140fpkt", shape=diamond, color=yellow];
907[label="149.168.145.134;d;68pkt 68fpkt", shape=diamond, color=yellow];
1407[label="75.142.43.171;s;250pkt 250fpkt", shape=hexagon, color=black];
1529[label="160.164.22.57;d;115pkt 115fpkt", shape=hexagon, color=black];
1638[label="149.168.145.134;d;68pkt 68fpkt", shape=hexagon, color=black];
1985[label="149.168.145.134;d;65pkt 65fpkt", shape=polygon, color=gold];
2259[label="210.234.155.83;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2503[label="75.142.43.171;299pkt 299fpkt", shape=pentagon, color=darkviolet];
2736[label="210.234.155.83;3pkt 3fpkt", shape=invtriangle, color=brown];
2818[label="75.142.43.171;300pkt 300fpkt", shape=invtriangle, color=brown];
2897[label="210.234.155.83;4pkt 4fpkt", shape=invhouse, color=bisque];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.142.43.171:*, 149.168.7.89:80}[36.3095%]&lt;BR/&gt;{75.142.43.171:*, 160.164.22.57:80}[35.7143%]&lt;BR/&gt;{*:*, 149.168.145.134:*}[20.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8276%)&lt;BR/&gt; 64148: (0.201149%)&lt;BR/&gt; 63899: (0.201149%)&lt;BR/&gt; 63013: (0.201149%)&lt;BR/&gt; 61708: (0.201149%)&gt;];
}
342--454[label="0.96;120pkt 120fpkt"];
342--790[label="0.85;119pkt 119fpkt"];
342--907[label="0.882353;60pkt 60fpkt"];
342--1407[label="1;250pkt 250fpkt"];
342--1529[label="0.965217;111pkt 111fpkt"];
342--1638[label="0.882353;60pkt 60fpkt"];
342--1985[label="0.923077;60pkt 60fpkt"];
342--1997[label="0.0535117;16pkt 16fpkt"];
342--2001[label="0.0501672;15pkt 15fpkt"];
342--2002[label="0.0468227;14pkt 14fpkt"];
342--2004[label="0.0401338;12pkt 12fpkt"];
342--2010[label="0.0535117;16pkt 16fpkt"];
342--2013[label="0.0468227;14pkt 14fpkt"];
342--2015[label="0.0401338;12pkt 12fpkt"];
342--2017[label="0.0535117;16pkt 16fpkt"];
342--2021[label="0.0401338;12pkt 12fpkt"];
342--2503[label="0.989967;296pkt 296fpkt"];
342--2818[label="0.993311;297pkt 297fpkt"];
454--566[label="0.00909091;1pkt 1fpkt"];
454--741[label="0.0108696;1pkt 1fpkt"];
454--1086[label="0.0106383;1pkt 1fpkt"];
454--1157[label="0.0108696;1pkt 1fpkt"];
454--1407[label="0.808;101pkt 101fpkt"];
454--1529[label="1;115pkt 115fpkt"];
454--1997[label="0.072;9pkt 9fpkt"];
454--2001[label="0.048;6pkt 6fpkt"];
454--2002[label="0.04;5pkt 5fpkt"];
454--2004[label="0.04;5pkt 5fpkt"];
454--2010[label="0.072;9pkt 9fpkt"];
454--2013[label="0.04;5pkt 5fpkt"];
454--2015[label="0.04;5pkt 5fpkt"];
454--2017[label="0.072;9pkt 9fpkt"];
454--2021[label="0.04;5pkt 5fpkt"];
454--2503[label="0.952;119pkt 119fpkt"];
454--2818[label="0.952;119pkt 119fpkt"];
790--923[label="0.0126582;1pkt 1fpkt"];
790--1077[label="0.0275229;3pkt 3fpkt"];
790--1407[label="0.635714;89pkt 89fpkt"];
790--1651[label="0.0151515;1pkt 1fpkt"];
790--1997[label="0.0357143;5pkt 5fpkt"];
790--2001[label="0.0357143;5pkt 5fpkt"];
790--2002[label="0.0428571;6pkt 6fpkt"];
790--2004[label="0.0357143;5pkt 5fpkt"];
790--2010[label="0.0357143;5pkt 5fpkt"];
790--2013[label="0.0428571;6pkt 6fpkt"];
790--2015[label="0.0357143;5pkt 5fpkt"];
790--2017[label="0.0357143;5pkt 5fpkt"];
790--2021[label="0.0357143;5pkt 5fpkt"];
790--2259[label="1;4pkt 4fpkt"];
790--2308[label="0.06;3pkt 3fpkt"];
790--2503[label="0.842857;118pkt 118fpkt"];
790--2736[label="1;3pkt 3fpkt"];
790--2818[label="0.842857;118pkt 118fpkt"];
790--2897[label="1;4pkt 4fpkt"];
907--1077[label="0.0294118;2pkt 2fpkt"];
907--1407[label="0.882353;60pkt 60fpkt"];
907--1638[label="1;68pkt 68fpkt"];
907--1985[label="1;65pkt 65fpkt"];
907--1997[label="0.0735294;5pkt 5fpkt"];
907--2001[label="0.0588235;4pkt 4fpkt"];
907--2002[label="0.0588235;4pkt 4fpkt"];
907--2004[label="0.0294118;2pkt 2fpkt"];
907--2010[label="0.0735294;5pkt 5fpkt"];
907--2013[label="0.0588235;4pkt 4fpkt"];
907--2015[label="0.0294118;2pkt 2fpkt"];
907--2017[label="0.0735294;5pkt 5fpkt"];
907--2021[label="0.0294118;2pkt 2fpkt"];
907--2503[label="0.867647;59pkt 59fpkt"];
907--2818[label="0.882353;60pkt 60fpkt"];
1407--1529[label="0.878261;101pkt 101fpkt"];
1407--1638[label="0.882353;60pkt 60fpkt"];
1407--1985[label="0.923077;60pkt 60fpkt"];
1407--1997[label="0.064;16pkt 16fpkt"];
1407--2001[label="0.06;15pkt 15fpkt"];
1407--2002[label="0.056;14pkt 14fpkt"];
1407--2004[label="0.048;12pkt 12fpkt"];
1407--2010[label="0.064;16pkt 16fpkt"];
1407--2013[label="0.056;14pkt 14fpkt"];
1407--2015[label="0.048;12pkt 12fpkt"];
1407--2017[label="0.064;16pkt 16fpkt"];
1407--2021[label="0.048;12pkt 12fpkt"];
1407--2503[label="0.988;247pkt 247fpkt"];
1407--2818[label="0.992;248pkt 248fpkt"];
1529--1997[label="0.0782609;9pkt 9fpkt"];
1529--2001[label="0.0521739;6pkt 6fpkt"];
1529--2002[label="0.0434783;5pkt 5fpkt"];
1529--2004[label="0.0434783;5pkt 5fpkt"];
1529--2010[label="0.0782609;9pkt 9fpkt"];
1529--2013[label="0.0434783;5pkt 5fpkt"];
1529--2015[label="0.0434783;5pkt 5fpkt"];
1529--2017[label="0.0782609;9pkt 9fpkt"];
1529--2021[label="0.0434783;5pkt 5fpkt"];
1529--2503[label="0.956522;110pkt 110fpkt"];
1529--2818[label="0.956522;110pkt 110fpkt"];
1638--1985[label="1;65pkt 65fpkt"];
1638--1997[label="0.0735294;5pkt 5fpkt"];
1638--2001[label="0.0588235;4pkt 4fpkt"];
1638--2002[label="0.0588235;4pkt 4fpkt"];
1638--2004[label="0.0294118;2pkt 2fpkt"];
1638--2010[label="0.0735294;5pkt 5fpkt"];
1638--2013[label="0.0588235;4pkt 4fpkt"];
1638--2015[label="0.0294118;2pkt 2fpkt"];
1638--2017[label="0.0735294;5pkt 5fpkt"];
1638--2021[label="0.0294118;2pkt 2fpkt"];
1638--2503[label="0.867647;59pkt 59fpkt"];
1638--2818[label="0.882353;60pkt 60fpkt"];
1985--1997[label="0.0769231;5pkt 5fpkt"];
1985--2001[label="0.0615385;4pkt 4fpkt"];
1985--2002[label="0.0615385;4pkt 4fpkt"];
1985--2004[label="0.0307692;2pkt 2fpkt"];
1985--2010[label="0.0769231;5pkt 5fpkt"];
1985--2013[label="0.0615385;4pkt 4fpkt"];
1985--2015[label="0.0307692;2pkt 2fpkt"];
1985--2017[label="0.0769231;5pkt 5fpkt"];
1985--2021[label="0.0307692;2pkt 2fpkt"];
1985--2503[label="0.907692;59pkt 59fpkt"];
1985--2818[label="0.923077;60pkt 60fpkt"];
2259--2736[label="1;3pkt 3fpkt"];
2259--2897[label="1;4pkt 4fpkt"];
2503--2818[label="1;299pkt 299fpkt"];
2736--2897[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.168.145.134"/>
      <filter dst_ip="149.168.7.89" dst_port="80" src_ip="75.142.43.171"/>
      <filter dst_ip="160.164.22.57" dst_port="80" src_ip="75.142.43.171"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
153[label="64.119.25.10;d;137pkt 137fpkt", shape=diamond, color=yellow];
154[label="64.119.25.10;s;137pkt 137fpkt", shape=diamond, color=yellow];
1540[label="64.119.25.10;s;95pkt 95fpkt", shape=hexagon, color=black];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.119.25.10:13364, 64.119.25.10:*}[89.781%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13364: (45.393%)&lt;BR/&gt; 0: (3.25203%)&lt;BR/&gt; 13392: (1.89702%)&lt;BR/&gt; 6346: (1.62602%)&lt;BR/&gt; 53: (1.21951%)&gt;];
}
153--154[label="1;137pkt 137fpkt"];
153--1540[label="1;95pkt 95fpkt"];
153--1997[label="0.00729927;1pkt 1fpkt"];
153--2000[label="0.00729927;1pkt 1fpkt"];
153--2001[label="0.00729927;1pkt 1fpkt"];
153--2002[label="0.00729927;1pkt 1fpkt"];
153--2004[label="0.00729927;1pkt 1fpkt"];
153--2010[label="0.00729927;1pkt 1fpkt"];
153--2013[label="0.00729927;1pkt 1fpkt"];
153--2015[label="0.00729927;1pkt 1fpkt"];
153--2017[label="0.00729927;1pkt 1fpkt"];
153--2021[label="0.00729927;1pkt 1fpkt"];
154--1540[label="1;95pkt 95fpkt"];
154--1997[label="0.00729927;1pkt 1fpkt"];
154--2000[label="0.00729927;1pkt 1fpkt"];
154--2001[label="0.00729927;1pkt 1fpkt"];
154--2002[label="0.00729927;1pkt 1fpkt"];
154--2004[label="0.00729927;1pkt 1fpkt"];
154--2010[label="0.00729927;1pkt 1fpkt"];
154--2013[label="0.00729927;1pkt 1fpkt"];
154--2015[label="0.00729927;1pkt 1fpkt"];
154--2017[label="0.00729927;1pkt 1fpkt"];
154--2021[label="0.00729927;1pkt 1fpkt"];
1540--1997[label="0.0105263;1pkt 1fpkt"];
1540--2000[label="0.0105263;1pkt 1fpkt"];
1540--2001[label="0.0105263;1pkt 1fpkt"];
1540--2002[label="0.0105263;1pkt 1fpkt"];
1540--2004[label="0.0105263;1pkt 1fpkt"];
1540--2010[label="0.0105263;1pkt 1fpkt"];
1540--2013[label="0.0105263;1pkt 1fpkt"];
1540--2015[label="0.0105263;1pkt 1fpkt"];
1540--2017[label="0.0105263;1pkt 1fpkt"];
1540--2021[label="0.0105263;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="64.119.25.10" src_ip="64.119.25.10" src_port="13364"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
697[label="128.141.132.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
698[label="72.180.6.238;s;1pkt 1fpkt", shape=diamond, color=yellow];
1542[label="72.180.6.238;s;1pkt 1fpkt", shape=hexagon, color=black];
1814[label="128.141.132.4;d;1pkt 1fpkt", shape=hexagon, color=black];
1945[label="72.180.6.238;s;1pkt 1fpkt", shape=polygon, color=gold];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.180.6.238:4000, 128.141.132.4:2665}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4000: (50%)&lt;BR/&gt; 2665: (50%)&gt;];
}
697--698[label="1;1pkt 1fpkt"];
697--1542[label="1;1pkt 1fpkt"];
697--1814[label="1;1pkt 1fpkt"];
697--1945[label="1;1pkt 1fpkt"];
698--1542[label="1;1pkt 1fpkt"];
698--1814[label="1;1pkt 1fpkt"];
698--1945[label="1;1pkt 1fpkt"];
1542--1814[label="1;1pkt 1fpkt"];
1542--1945[label="1;1pkt 1fpkt"];
1814--1945[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.132.4" dst_port="2665" src_ip="72.180.6.238" src_port="4000"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
636[label="165.22.6.200;s;2pkt 2fpkt", shape=diamond, color=yellow];
637[label="200.16.159.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
1512[label="165.22.6.200;s;2pkt 2fpkt", shape=hexagon, color=black];
1550[label="200.16.159.17;d;1pkt 1fpkt", shape=hexagon, color=black];
2559[label="165.22.6.200;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.22.6.200:41002, 200.16.159.17:21212}[50%]&lt;BR/&gt;{165.22.6.200:1623, 13.149.14.193:21}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41002: (28.5714%)&lt;BR/&gt; 21212: (28.5714%)&lt;BR/&gt; 1623: (21.4286%)&lt;BR/&gt; 21: (21.4286%)&gt;];
}
636--637[label="1;1pkt 1fpkt"];
636--1512[label="1;2pkt 2fpkt"];
636--1550[label="1;1pkt 1fpkt"];
636--2559[label="1;1pkt 1fpkt"];
637--1512[label="1;1pkt 1fpkt"];
637--1550[label="1;1pkt 1fpkt"];
1512--1550[label="1;1pkt 1fpkt"];
1512--2559[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="13.149.14.193" dst_port="21" src_ip="165.22.6.200" src_port="1623"/>
      <filter dst_ip="200.16.159.17" dst_port="21212" src_ip="165.22.6.200" src_port="41002"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
728[label="13.66.97.62;d;109pkt 109fpkt", shape=diamond, color=yellow];
1560[label="147.87.132.242;s;50pkt 50fpkt", shape=hexagon, color=black];
2225[label="160.164.85.73;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2537[label="136.211.122.189;33pkt 33fpkt", shape=pentagon, color=darkviolet];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 13.66.97.62:80}[50.463%]&lt;BR/&gt;{147.87.132.242:*, *:*}[23.1481%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.1712%)&lt;BR/&gt; 53: (2.02703%)&lt;BR/&gt; 6699: (1.12613%)&lt;BR/&gt; 7729: (0.675676%)&lt;BR/&gt; 61801: (0.45045%)&gt;];
}
728--1324[label="0.0458716;5pkt 5fpkt"];
728--1362[label="0.0366972;4pkt 4fpkt"];
728--1497[label="0.025974;2pkt 2fpkt"];
728--1511[label="0.030303;2pkt 2fpkt"];
728--1518[label="1;106pkt 106fpkt"];
728--1560[label="0.04;2pkt 2fpkt"];
728--1694[label="0.00917431;1pkt 1fpkt"];
728--1710[label="0.0550459;6pkt 6fpkt"];
728--1967[label="0.0458716;5pkt 5fpkt"];
728--1997[label="0.110092;12pkt 12fpkt"];
728--2001[label="0.0733945;8pkt 8fpkt"];
728--2002[label="0.0458716;5pkt 5fpkt"];
728--2010[label="0.110092;12pkt 12fpkt"];
728--2013[label="0.0458716;5pkt 5fpkt"];
728--2017[label="0.110092;12pkt 12fpkt"];
728--2225[label="0.0666667;2pkt 2fpkt"];
728--2346[label="0.0183486;2pkt 2fpkt"];
728--2426[label="0.0183486;2pkt 2fpkt"];
728--2537[label="0.0606061;2pkt 2fpkt"];
728--2647[label="0.04;2pkt 2fpkt"];
728--2789[label="0.0183486;2pkt 2fpkt"];
728--2839[label="0.110092;12pkt 12fpkt"];
728--2913[label="0.0183486;2pkt 2fpkt"];
728--2926[label="0.110092;12pkt 12fpkt"];
1560--1997[label="0.08;4pkt 4fpkt"];
1560--2001[label="0.1;5pkt 5fpkt"];
1560--2010[label="0.08;4pkt 4fpkt"];
1560--2017[label="0.08;4pkt 4fpkt"];
1560--2647[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter src_ip="147.87.132.242"/>
      <filter dst_ip="13.66.97.62" dst_port="80"/>
    </slice>
    <from sec="994482003" usec="0"/>
    <to sec="994483185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02629,2.15283,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
302[label="149.177.9.153;d;736pkt 736fpkt", shape=diamond, color=yellow];
395[label="165.22.53.146;d;16pkt 16fpkt", shape=diamond, color=yellow];
497[label="13.214.165.178;s;81pkt 81fpkt", shape=diamond, color=yellow];
498[label="219.237.96.224;s;29pkt 29fpkt", shape=diamond, color=yellow];
540[label="165.22.16.38;d;9pkt 9fpkt", shape=diamond, color=yellow];
546[label="165.22.43.223;d;85pkt 85fpkt", shape=diamond, color=yellow];
565[label="149.168.35.109;d;149pkt 149fpkt", shape=diamond, color=yellow];
577[label="208.123.11.233;s;19pkt 19fpkt", shape=diamond, color=yellow];
614[label="196.217.132.24;d;89pkt 89fpkt", shape=diamond, color=yellow];
616[label="165.22.6.142;d;119pkt 119fpkt", shape=diamond, color=yellow];
622[label="192.78.21.143;s;8pkt 8fpkt", shape=diamond, color=yellow];
651[label="165.22.45.224;d;7pkt 7fpkt", shape=diamond, color=yellow];
730[label="165.22.180.30;d;15pkt 15fpkt", shape=diamond, color=yellow];
731[label="208.123.11.252;s;6pkt 6fpkt", shape=diamond, color=yellow];
732[label="208.123.11.232;s;32pkt 32fpkt", shape=diamond, color=yellow];
750[label="13.160.208.194;s;46pkt 46fpkt", shape=diamond, color=yellow];
771[label="165.22.180.18;d;8pkt 8fpkt", shape=diamond, color=yellow];
783[label="13.160.208.198;s;87pkt 87fpkt", shape=diamond, color=yellow];
804[label="208.123.11.228;s;7pkt 7fpkt", shape=diamond, color=yellow];
811[label="165.22.57.21;d;24pkt 24fpkt", shape=diamond, color=yellow];
822[label="165.22.59.162;d;66pkt 66fpkt", shape=diamond, color=yellow];
826[label="165.22.180.29;d;26pkt 26fpkt", shape=diamond, color=yellow];
827[label="13.160.208.200;s;35pkt 35fpkt", shape=diamond, color=yellow];
897[label="165.22.50.47;d;32pkt 32fpkt", shape=diamond, color=yellow];
899[label="129.6.59.96;s;47pkt 47fpkt", shape=diamond, color=yellow];
905[label="165.22.49.80;d;156pkt 156fpkt", shape=diamond, color=yellow];
912[label="165.22.7.141;d;49pkt 49fpkt", shape=diamond, color=yellow];
935[label="165.22.49.128;d;3pkt 3fpkt", shape=diamond, color=yellow];
1007[label="147.87.103.64;d;61pkt 61fpkt", shape=diamond, color=yellow];
1024[label="208.123.11.235;s;6pkt 6fpkt", shape=diamond, color=yellow];
1093[label="209.144.84.23;s;51pkt 51fpkt", shape=diamond, color=yellow];
1103[label="13.160.208.203;s;13pkt 13fpkt", shape=diamond, color=yellow];
1122[label="141.34.193.168;s;2pkt 2fpkt", shape=diamond, color=yellow];
1233[label="208.123.11.231;s;13pkt 13fpkt", shape=diamond, color=yellow];
1237[label="208.123.11.253;s;10pkt 10fpkt", shape=diamond, color=yellow];
1241[label="165.22.180.4;d;12pkt 12fpkt", shape=diamond, color=yellow];
1469[label="208.123.11.233;s;11pkt 11fpkt", shape=hexagon, color=black];
1508[label="192.78.21.143;s;8pkt 8fpkt", shape=hexagon, color=black];
1519[label="208.123.11.252;s;6pkt 6fpkt", shape=hexagon, color=black];
1520[label="13.214.165.178;s;81pkt 81fpkt", shape=hexagon, color=black];
1521[label="149.168.35.109;d;149pkt 149fpkt", shape=hexagon, color=black];
1544[label="165.22.16.38;d;9pkt 9fpkt", shape=hexagon, color=black];
1551[label="165.22.53.146;d;12pkt 12fpkt", shape=hexagon, color=black];
1561[label="165.22.180.30;d;12pkt 12fpkt", shape=hexagon, color=black];
1562[label="208.123.11.232;s;32pkt 32fpkt", shape=hexagon, color=black];
1566[label="165.22.45.224;d;5pkt 5fpkt", shape=hexagon, color=black];
1600[label="196.217.132.24;d;72pkt 72fpkt", shape=hexagon, color=black];
1628[label="165.22.49.80;d;143pkt 143fpkt", shape=hexagon, color=black];
1663[label="13.160.208.194;s;46pkt 46fpkt", shape=hexagon, color=black];
1705[label="165.22.50.47;d;32pkt 32fpkt", shape=hexagon, color=black];
1716[label="165.22.52.6;d;56pkt 56fpkt", shape=hexagon, color=black];
1787[label="160.164.137.16;d;31pkt 31fpkt", shape=hexagon, color=black];
1950[label="165.22.180.30;d;12pkt 12fpkt", shape=polygon, color=gold];
1951[label="149.168.35.109;d;84pkt 84fpkt", shape=polygon, color=gold];
2244[label="196.178.215.79;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2534[label="208.123.183.187;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2552[label="13.160.208.194;45pkt 45fpkt", shape=pentagon, color=darkviolet];
2558[label="211.171.25.198;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2634[label="208.123.11.234;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2646[label="212.38.9.242;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2653[label="208.123.11.252;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2769[label="194.138.160.112;1pkt 1fpkt", shape=invtriangle, color=brown];
2833[label="208.123.183.187;20pkt 20fpkt", shape=invtriangle, color=brown];
2877[label="208.123.11.252;7pkt 7fpkt", shape=invtriangle, color=brown];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:25}[34.2624%]&lt;BR/&gt;{*:53, 149.177.9.153:1682}[23.6905%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (24.192%)&lt;BR/&gt; 53: (11.8293%)&lt;BR/&gt; 113: (10.1164%)&lt;BR/&gt; 1682: (7.96703%)&lt;BR/&gt; 0: (1.48675%)&gt;];
}
302--566[label="0.0363636;4pkt 4fpkt"];
302--568[label="0.1;2pkt 2fpkt"];
302--640[label="0.0147059;1pkt 1fpkt"];
302--683[label="0.0185185;1pkt 1fpkt"];
302--689[label="0.0166667;1pkt 1fpkt"];
302--692[label="0.015625;1pkt 1fpkt"];
302--700[label="0.016129;1pkt 1fpkt"];
302--702[label="0.0163934;1pkt 1fpkt"];
302--703[label="0.016129;1pkt 1fpkt"];
302--732[label="0.0625;2pkt 2fpkt"];
302--739[label="0.00657895;1pkt 1fpkt"];
302--750[label="0.0434783;2pkt 2fpkt"];
302--794[label="0.0151515;1pkt 1fpkt"];
302--801[label="0.015873;1pkt 1fpkt"];
302--803[label="0.0169492;1pkt 1fpkt"];
302--812[label="0.0204082;1pkt 1fpkt"];
302--827[label="0.0571429;2pkt 2fpkt"];
302--923[label="0.0126582;1pkt 1fpkt"];
302--1015[label="0.00917431;1pkt 1fpkt"];
302--1078[label="0.0147059;1pkt 1fpkt"];
302--1093[label="0.0784314;4pkt 4fpkt"];
302--1237[label="0.2;2pkt 2fpkt"];
302--1532[label="0.0232558;1pkt 1fpkt"];
302--1553[label="0.015625;1pkt 1fpkt"];
302--1556[label="1;451pkt 451fpkt"];
302--1562[label="0.0625;2pkt 2fpkt"];
302--1612[label="0.015625;1pkt 1fpkt"];
302--1651[label="0.0151515;1pkt 1fpkt"];
302--1663[label="0.0434783;2pkt 2fpkt"];
302--1720[label="0.0204082;1pkt 1fpkt"];
302--1785[label="0.0366972;4pkt 4fpkt"];
302--1857[label="0.0169492;1pkt 1fpkt"];
302--1956[label="0.0172414;1pkt 1fpkt"];
302--1992[label="0.0169492;1pkt 1fpkt"];
302--1999[label="0.0013587;1pkt 1fpkt"];
302--2000[label="0.00815217;6pkt 6fpkt"];
302--2003[label="0.00679348;5pkt 5fpkt"];
302--2005[label="0.139946;103pkt 103fpkt"];
302--2007[label="0.0883152;65pkt 65fpkt"];
302--2012[label="0.0013587;1pkt 1fpkt"];
302--2014[label="0.00679348;5pkt 5fpkt"];
302--2019[label="0.0013587;1pkt 1fpkt"];
302--2020[label="0.00679348;5pkt 5fpkt"];
302--2036[label="0.0416667;1pkt 1fpkt"];
302--2086[label="0.0769231;1pkt 1fpkt"];
302--2118[label="0.0277778;1pkt 1fpkt"];
302--2168[label="0.025641;1pkt 1fpkt"];
302--2176[label="0.0232558;1pkt 1fpkt"];
302--2220[label="0.0344828;1pkt 1fpkt"];
302--2221[label="0.0588235;1pkt 1fpkt"];
302--2425[label="0.0147059;1pkt 1fpkt"];
302--2552[label="0.0444444;2pkt 2fpkt"];
302--2584[label="0.0625;1pkt 1fpkt"];
302--2637[label="0.04;3pkt 3fpkt"];
302--2676[label="0.0769231;1pkt 1fpkt"];
302--2686[label="0.0285714;1pkt 1fpkt"];
302--2703[label="0.016129;1pkt 1fpkt"];
302--2708[label="0.025641;1pkt 1fpkt"];
302--2711[label="0.0238095;1pkt 1fpkt"];
302--2788[label="0.0149254;1pkt 1fpkt"];
302--2869[label="0.04;3pkt 3fpkt"];
302--2876[label="0.00671141;1pkt 1fpkt"];
302--2916[label="0.0172414;1pkt 1fpkt"];
302--2936[label="0.00769231;1pkt 1fpkt"];
395--568[label="0.0625;1pkt 1fpkt"];
395--750[label="0.0625;1pkt 1fpkt"];
395--804[label="0.285714;2pkt 2fpkt"];
395--1103[label="0.0769231;1pkt 1fpkt"];
395--1237[label="0.2;2pkt 2fpkt"];
395--1551[label="1;12pkt 12fpkt"];
395--1663[label="0.0625;1pkt 1fpkt"];
395--2534[label="0.0625;1pkt 1fpkt"];
395--2552[label="0.0625;1pkt 1fpkt"];
395--2833[label="0.0625;1pkt 1fpkt"];
497--546[label="0.518519;42pkt 42fpkt"];
497--716[label="0.0461538;3pkt 3fpkt"];
497--811[label="0.25;6pkt 6fpkt"];
497--822[label="0.0909091;6pkt 6fpkt"];
497--1520[label="1;81pkt 81fpkt"];
497--1716[label="0.0535714;3pkt 3fpkt"];
498--540[label="0.222222;2pkt 2fpkt"];
498--612[label="0.0344828;1pkt 1fpkt"];
498--614[label="0.0344828;1pkt 1fpkt"];
498--651[label="0.142857;1pkt 1fpkt"];
498--730[label="0.0666667;1pkt 1fpkt"];
498--822[label="0.0344828;1pkt 1fpkt"];
498--826[label="0.0384615;1pkt 1fpkt"];
498--905[label="0.0344828;1pkt 1fpkt"];
498--912[label="0.0344828;1pkt 1fpkt"];
498--1007[label="0.0344828;1pkt 1fpkt"];
498--1218[label="0.0344828;1pkt 1fpkt"];
498--1544[label="0.222222;2pkt 2fpkt"];
498--1561[label="0.0833333;1pkt 1fpkt"];
498--1566[label="0.2;1pkt 1fpkt"];
498--1600[label="0.0344828;1pkt 1fpkt"];
498--1628[label="0.0344828;1pkt 1fpkt"];
498--1869[label="0.0344828;1pkt 1fpkt"];
498--1950[label="0.0833333;1pkt 1fpkt"];
540--622[label="0.125;1pkt 1fpkt"];
540--690[label="0.333333;1pkt 1fpkt"];
540--750[label="0.222222;2pkt 2fpkt"];
540--899[label="0.222222;2pkt 2fpkt"];
540--1508[label="0.125;1pkt 1fpkt"];
540--1537[label="0.5;1pkt 1fpkt"];
540--1544[label="1;9pkt 9fpkt"];
540--1663[label="0.222222;2pkt 2fpkt"];
540--2552[label="0.222222;2pkt 2fpkt"];
546--568[label="0.15;3pkt 3fpkt"];
546--732[label="0.125;4pkt 4fpkt"];
546--750[label="0.0869565;4pkt 4fpkt"];
546--783[label="0.0235294;2pkt 2fpkt"];
546--804[label="0.142857;1pkt 1fpkt"];
546--1069[label="0.0666667;1pkt 1fpkt"];
546--1520[label="0.518519;42pkt 42fpkt"];
546--1562[label="0.125;4pkt 4fpkt"];
546--1663[label="0.0869565;4pkt 4fpkt"];
546--1792[label="0.0246914;2pkt 2fpkt"];
546--2006[label="0.0117647;1pkt 1fpkt"];
546--2077[label="0.111111;1pkt 1fpkt"];
546--2141[label="0.0666667;1pkt 1fpkt"];
546--2552[label="0.0888889;4pkt 4fpkt"];
546--2556[label="0.0714286;2pkt 2fpkt"];
546--2634[label="0.15;3pkt 3fpkt"];
546--2698[label="0.0666667;1pkt 1fpkt"];
565--568[label="0.05;1pkt 1fpkt"];
565--750[label="0.0434783;2pkt 2fpkt"];
565--827[label="0.0571429;2pkt 2fpkt"];
565--1093[label="0.0784314;4pkt 4fpkt"];
565--1122[label="1;2pkt 2fpkt"];
565--1521[label="1;149pkt 149fpkt"];
565--1663[label="0.0434783;2pkt 2fpkt"];
565--1951[label="1;84pkt 84fpkt"];
565--2522[label="0.363636;12pkt 12fpkt"];
565--2528[label="0.2;6pkt 6fpkt"];
565--2552[label="0.0444444;2pkt 2fpkt"];
565--2556[label="0.0714286;2pkt 2fpkt"];
565--2828[label="0.214286;6pkt 6fpkt"];
577--614[label="0.0526316;1pkt 1fpkt"];
577--651[label="0.142857;1pkt 1fpkt"];
577--716[label="0.0526316;1pkt 1fpkt"];
577--912[label="0.105263;2pkt 2fpkt"];
577--1469[label="1;11pkt 11fpkt"];
577--1566[label="0.2;1pkt 1fpkt"];
577--1600[label="0.0526316;1pkt 1fpkt"];
577--1728[label="0.105263;2pkt 2fpkt"];
614--731[label="0.166667;1pkt 1fpkt"];
614--747[label="0.2;1pkt 1fpkt"];
614--750[label="0.0217391;1pkt 1fpkt"];
614--783[label="0.0229885;2pkt 2fpkt"];
614--804[label="0.142857;1pkt 1fpkt"];
614--827[label="0.0571429;2pkt 2fpkt"];
614--1233[label="0.0769231;1pkt 1fpkt"];
614--1237[label="0.2;2pkt 2fpkt"];
614--1469[label="0.0909091;1pkt 1fpkt"];
614--1519[label="0.166667;1pkt 1fpkt"];
614--1600[label="1;72pkt 72fpkt"];
614--1660[label="0.2;1pkt 1fpkt"];
614--1663[label="0.0217391;1pkt 1fpkt"];
614--1792[label="0.0246914;2pkt 2fpkt"];
614--2000[label="0.0224719;2pkt 2fpkt"];
614--2005[label="0.011236;1pkt 1fpkt"];
614--2244[label="1;1pkt 1fpkt"];
614--2534[label="0.157895;3pkt 3fpkt"];
614--2552[label="0.0222222;1pkt 1fpkt"];
614--2634[label="0.05;1pkt 1fpkt"];
614--2653[label="0.142857;1pkt 1fpkt"];
614--2833[label="0.15;3pkt 3fpkt"];
614--2877[label="0.142857;1pkt 1fpkt"];
616--622[label="0.25;2pkt 2fpkt"];
616--1508[label="0.25;2pkt 2fpkt"];
616--2005[label="0.0168067;2pkt 2fpkt"];
616--2007[label="0.00840336;1pkt 1fpkt"];
622--716[label="0.125;1pkt 1fpkt"];
622--1160[label="0.25;2pkt 2fpkt"];
622--1508[label="1;8pkt 8fpkt"];
622--1544[label="0.125;1pkt 1fpkt"];
622--1716[label="0.125;1pkt 1fpkt"];
651--1233[label="0.142857;1pkt 1fpkt"];
651--1237[label="0.142857;1pkt 1fpkt"];
651--1469[label="0.142857;1pkt 1fpkt"];
651--1566[label="1;5pkt 5fpkt"];
730--732[label="0.0666667;1pkt 1fpkt"];
730--783[label="0.0666667;1pkt 1fpkt"];
730--1019[label="0.0666667;1pkt 1fpkt"];
730--1561[label="1;12pkt 12fpkt"];
730--1562[label="0.0666667;1pkt 1fpkt"];
730--1792[label="0.0666667;1pkt 1fpkt"];
730--1950[label="1;12pkt 12fpkt"];
731--1519[label="1;6pkt 6fpkt"];
731--1600[label="0.166667;1pkt 1fpkt"];
731--1728[label="0.333333;2pkt 2fpkt"];
731--2653[label="1;6pkt 6fpkt"];
731--2877[label="1;6pkt 6fpkt"];
732--771[label="0.25;2pkt 2fpkt"];
732--826[label="0.153846;4pkt 4fpkt"];
732--912[label="0.0625;2pkt 2fpkt"];
732--1007[label="0.0625;2pkt 2fpkt"];
732--1561[label="0.0833333;1pkt 1fpkt"];
732--1562[label="1;32pkt 32fpkt"];
732--1716[label="0.0625;2pkt 2fpkt"];
732--1950[label="0.0833333;1pkt 1fpkt"];
750--771[label="0.25;2pkt 2fpkt"];
750--826[label="0.115385;3pkt 3fpkt"];
750--897[label="0.0625;2pkt 2fpkt"];
750--904[label="0.0434783;2pkt 2fpkt"];
750--905[label="0.0217391;1pkt 1fpkt"];
750--912[label="0.0434783;2pkt 2fpkt"];
750--1521[label="0.0434783;2pkt 2fpkt"];
750--1544[label="0.222222;2pkt 2fpkt"];
750--1551[label="0.0833333;1pkt 1fpkt"];
750--1556[label="0.0434783;2pkt 2fpkt"];
750--1600[label="0.0217391;1pkt 1fpkt"];
750--1626[label="0.0434783;2pkt 2fpkt"];
750--1628[label="0.0217391;1pkt 1fpkt"];
750--1663[label="1;46pkt 46fpkt"];
750--1705[label="0.0625;2pkt 2fpkt"];
750--1716[label="0.0434783;2pkt 2fpkt"];
750--1951[label="0.0434783;2pkt 2fpkt"];
750--2552[label="1;45pkt 45fpkt"];
771--1019[label="0.125;1pkt 1fpkt"];
771--1024[label="0.333333;2pkt 2fpkt"];
771--1562[label="0.25;2pkt 2fpkt"];
771--1663[label="0.25;2pkt 2fpkt"];
771--2552[label="0.25;2pkt 2fpkt"];
783--822[label="0.0909091;6pkt 6fpkt"];
783--826[label="0.0769231;2pkt 2fpkt"];
783--897[label="0.0625;2pkt 2fpkt"];
783--905[label="0.0114943;1pkt 1fpkt"];
783--912[label="0.0408163;2pkt 2fpkt"];
783--1030[label="0.181818;2pkt 2fpkt"];
783--1216[label="0.222222;2pkt 2fpkt"];
783--1536[label="0.0666667;2pkt 2fpkt"];
783--1561[label="0.0833333;1pkt 1fpkt"];
783--1600[label="0.0277778;2pkt 2fpkt"];
783--1604[label="0.1;2pkt 2fpkt"];
783--1627[label="0.0114943;1pkt 1fpkt"];
783--1628[label="0.0114943;1pkt 1fpkt"];
783--1705[label="0.0625;2pkt 2fpkt"];
783--1716[label="0.0357143;2pkt 2fpkt"];
783--1745[label="0.181818;2pkt 2fpkt"];
783--1792[label="1;81pkt 81fpkt"];
783--1950[label="0.0833333;1pkt 1fpkt"];
804--1551[label="0.285714;2pkt 2fpkt"];
804--1600[label="0.142857;1pkt 1fpkt"];
811--827[label="0.0833333;2pkt 2fpkt"];
811--1019[label="0.0833333;2pkt 2fpkt"];
811--1023[label="1;2pkt 2fpkt"];
811--1103[label="0.153846;2pkt 2fpkt"];
811--1520[label="0.25;6pkt 6fpkt"];
811--1791[label="1;2pkt 2fpkt"];
811--2534[label="0.0526316;1pkt 1fpkt"];
811--2554[label="0.181818;2pkt 2fpkt"];
811--2556[label="0.0833333;2pkt 2fpkt"];
811--2833[label="0.05;1pkt 1fpkt"];
822--827[label="0.0571429;2pkt 2fpkt"];
822--1019[label="0.0416667;1pkt 1fpkt"];
822--1520[label="0.0909091;6pkt 6fpkt"];
822--1792[label="0.0606061;4pkt 4fpkt"];
822--2001[label="0.0151515;1pkt 1fpkt"];
822--2002[label="0.0151515;1pkt 1fpkt"];
822--2004[label="0.0151515;1pkt 1fpkt"];
822--2013[label="0.0151515;1pkt 1fpkt"];
822--2015[label="0.0151515;1pkt 1fpkt"];
822--2021[label="0.0151515;1pkt 1fpkt"];
822--2322[label="0.222222;4pkt 4fpkt"];
822--2534[label="0.0526316;1pkt 1fpkt"];
822--2554[label="0.181818;2pkt 2fpkt"];
822--2756[label="0.222222;4pkt 4fpkt"];
822--2833[label="0.05;1pkt 1fpkt"];
826--1019[label="0.166667;4pkt 4fpkt"];
826--1024[label="0.5;3pkt 3fpkt"];
826--1562[label="0.153846;4pkt 4fpkt"];
826--1663[label="0.115385;3pkt 3fpkt"];
826--1792[label="0.0769231;2pkt 2fpkt"];
826--2552[label="0.115385;3pkt 3fpkt"];
827--935[label="0.333333;1pkt 1fpkt"];
827--1085[label="0.0645161;2pkt 2fpkt"];
827--1521[label="0.0571429;2pkt 2fpkt"];
827--1600[label="0.0285714;1pkt 1fpkt"];
827--1787[label="0.0645161;2pkt 2fpkt"];
827--1951[label="0.0571429;2pkt 2fpkt"];
897--1663[label="0.0625;2pkt 2fpkt"];
897--1705[label="1;32pkt 32fpkt"];
897--1792[label="0.0625;2pkt 2fpkt"];
897--2001[label="0.0625;2pkt 2fpkt"];
897--2552[label="0.0625;2pkt 2fpkt"];
899--1160[label="0.117647;2pkt 2fpkt"];
899--1218[label="0.914894;43pkt 43fpkt"];
899--1544[label="0.222222;2pkt 2fpkt"];
899--1869[label="0.914894;43pkt 43fpkt"];
905--1233[label="0.0769231;1pkt 1fpkt"];
905--1628[label="1;143pkt 143fpkt"];
905--1663[label="0.0217391;1pkt 1fpkt"];
905--1792[label="0.0123457;1pkt 1fpkt"];
905--2552[label="0.0222222;1pkt 1fpkt"];
912--1019[label="0.25;6pkt 6fpkt"];
912--1103[label="0.153846;2pkt 2fpkt"];
912--1469[label="0.181818;2pkt 2fpkt"];
912--1562[label="0.0625;2pkt 2fpkt"];
912--1663[label="0.0434783;2pkt 2fpkt"];
912--1792[label="0.0408163;2pkt 2fpkt"];
912--2552[label="0.0444444;2pkt 2fpkt"];
912--2554[label="0.181818;2pkt 2fpkt"];
912--2556[label="0.0714286;2pkt 2fpkt"];
912--2634[label="0.4;8pkt 8fpkt"];
912--2646[label="0.5;1pkt 1fpkt"];
935--2534[label="0.333333;1pkt 1fpkt"];
935--2833[label="0.333333;1pkt 1fpkt"];
1007--1562[label="0.0625;2pkt 2fpkt"];
1007--2556[label="0.0714286;2pkt 2fpkt"];
1007--2558[label="0.235294;4pkt 4fpkt"];
1007--2769[label="1;1pkt 1fpkt"];
1093--1521[label="0.0784314;4pkt 4fpkt"];
1093--1556[label="0.0392157;2pkt 2fpkt"];
1093--1787[label="0.0645161;2pkt 2fpkt"];
1093--1951[label="0.0392157;2pkt 2fpkt"];
1093--2006[label="0.0196078;1pkt 1fpkt"];
1103--1241[label="0.166667;2pkt 2fpkt"];
1122--1521[label="1;2pkt 2fpkt"];
1233--1241[label="0.166667;2pkt 2fpkt"];
1233--1600[label="0.0769231;1pkt 1fpkt"];
1233--1627[label="0.0769231;1pkt 1fpkt"];
1233--1628[label="0.0769231;1pkt 1fpkt"];
1233--1787[label="0.0769231;1pkt 1fpkt"];
1233--1869[label="0.153846;2pkt 2fpkt"];
1237--1566[label="0.2;1pkt 1fpkt"];
1237--1600[label="0.2;2pkt 2fpkt"];
1241--2556[label="0.166667;2pkt 2fpkt"];
1469--1566[label="0.2;1pkt 1fpkt"];
1469--1600[label="0.0909091;1pkt 1fpkt"];
1469--1728[label="0.181818;2pkt 2fpkt"];
1508--1544[label="0.125;1pkt 1fpkt"];
1508--1716[label="0.125;1pkt 1fpkt"];
1519--1600[label="0.166667;1pkt 1fpkt"];
1519--1728[label="0.333333;2pkt 2fpkt"];
1519--2653[label="1;6pkt 6fpkt"];
1519--2877[label="1;6pkt 6fpkt"];
1520--1716[label="0.0535714;3pkt 3fpkt"];
1521--1663[label="0.0434783;2pkt 2fpkt"];
1521--1951[label="1;84pkt 84fpkt"];
1521--2522[label="0.363636;12pkt 12fpkt"];
1521--2528[label="0.2;6pkt 6fpkt"];
1521--2552[label="0.0444444;2pkt 2fpkt"];
1521--2556[label="0.0714286;2pkt 2fpkt"];
1521--2828[label="0.214286;6pkt 6fpkt"];
1544--1663[label="0.222222;2pkt 2fpkt"];
1544--2552[label="0.222222;2pkt 2fpkt"];
1551--1663[label="0.0833333;1pkt 1fpkt"];
1551--2552[label="0.0833333;1pkt 1fpkt"];
1561--1562[label="0.0833333;1pkt 1fpkt"];
1561--1792[label="0.0833333;1pkt 1fpkt"];
1561--1950[label="1;12pkt 12fpkt"];
1562--1716[label="0.0625;2pkt 2fpkt"];
1562--1950[label="0.0833333;1pkt 1fpkt"];
1600--1660[label="0.2;1pkt 1fpkt"];
1600--1663[label="0.0217391;1pkt 1fpkt"];
1600--1792[label="0.0277778;2pkt 2fpkt"];
1600--2000[label="0.0277778;2pkt 2fpkt"];
1600--2005[label="0.0138889;1pkt 1fpkt"];
1600--2534[label="0.157895;3pkt 3fpkt"];
1600--2552[label="0.0222222;1pkt 1fpkt"];
1600--2634[label="0.05;1pkt 1fpkt"];
1600--2653[label="0.142857;1pkt 1fpkt"];
1600--2833[label="0.15;3pkt 3fpkt"];
1600--2877[label="0.142857;1pkt 1fpkt"];
1628--1663[label="0.0217391;1pkt 1fpkt"];
1628--1792[label="0.0123457;1pkt 1fpkt"];
1628--2552[label="0.0222222;1pkt 1fpkt"];
1663--1705[label="0.0625;2pkt 2fpkt"];
1663--1716[label="0.0434783;2pkt 2fpkt"];
1663--1951[label="0.0434783;2pkt 2fpkt"];
1663--2552[label="1;45pkt 45fpkt"];
1705--1792[label="0.0625;2pkt 2fpkt"];
1705--2001[label="0.0625;2pkt 2fpkt"];
1705--2552[label="0.0625;2pkt 2fpkt"];
1716--1792[label="0.0357143;2pkt 2fpkt"];
1716--1857[label="0.0178571;1pkt 1fpkt"];
1716--1956[label="0.0178571;1pkt 1fpkt"];
1716--1992[label="0.0178571;1pkt 1fpkt"];
1716--1997[label="0.0178571;1pkt 1fpkt"];
1716--2005[label="0.0714286;4pkt 4fpkt"];
1716--2007[label="0.160714;9pkt 9fpkt"];
1716--2010[label="0.0178571;1pkt 1fpkt"];
1716--2017[label="0.0178571;1pkt 1fpkt"];
1716--2425[label="0.0178571;1pkt 1fpkt"];
1716--2552[label="0.0444444;2pkt 2fpkt"];
1716--2788[label="0.0178571;1pkt 1fpkt"];
1716--2916[label="0.0178571;1pkt 1fpkt"];
1787--2291[label="0.111111;2pkt 2fpkt"];
1787--2528[label="0.0333333;1pkt 1fpkt"];
1787--2558[label="0.0588235;1pkt 1fpkt"];
1787--2828[label="0.0357143;1pkt 1fpkt"];
1951--2552[label="0.0444444;2pkt 2fpkt"];
1951--2556[label="0.0714286;2pkt 2fpkt"];
2534--2833[label="1;19pkt 19fpkt"];
2653--2877[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="25"/>
      <filter dst_ip="149.177.9.153" dst_port="1682" src_port="53"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
755[label="128.141.129.132;d;4pkt 4fpkt", shape=diamond, color=yellow];
838[label="194.128.161.29;s;3pkt 3fpkt", shape=diamond, color=yellow];
1571[label="128.141.129.132;d;4pkt 4fpkt", shape=hexagon, color=black];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.76.173.51:5190, 128.141.129.132:2100}[25%]&lt;BR/&gt;{194.128.161.29:80, 128.141.129.132:2102}[25%]&lt;BR/&gt;{194.128.161.29:80, 128.141.129.132:2103}[25%]&lt;BR/&gt;{194.128.161.29:80, 128.141.129.132:2104}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.9091%)&lt;BR/&gt; 2104: (13.6364%)&lt;BR/&gt; 2103: (13.6364%)&lt;BR/&gt; 2102: (13.6364%)&lt;BR/&gt; 5190: (9.09091%)&gt;];
}
755--838[label="1;3pkt 3fpkt"];
755--1571[label="1;4pkt 4fpkt"];
755--2006[label="0.5;2pkt 2fpkt"];
838--1571[label="1;3pkt 3fpkt"];
838--2006[label="0.666667;2pkt 2fpkt"];
1571--2006[label="0.5;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.129.132" dst_port="2104" src_ip="194.128.161.29" src_port="80"/>
      <filter dst_ip="128.141.129.132" dst_port="2103" src_ip="194.128.161.29" src_port="80"/>
      <filter dst_ip="128.141.129.132" dst_port="2102" src_ip="194.128.161.29" src_port="80"/>
      <filter dst_ip="128.141.129.132" dst_port="2100" src_ip="195.76.173.51" src_port="5190"/>
    </slice>
    <from sec="994482142" usec="0"/>
    <to sec="994482792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
789[label="218.214.28.135;d;1pkt 1fpkt", shape=diamond, color=yellow];
1585[label="218.214.28.135;d;1pkt 1fpkt", shape=hexagon, color=black];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.168.19.177:2307, 218.214.28.135:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2307: (50%)&gt;];
}
789--1585[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.214.28.135" dst_port="6699" src_ip="149.168.19.177" src_port="2307"/>
    </slice>
    <from sec="994482625" usec="0"/>
    <to sec="994482850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.918716,2.16821,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
834[label="210.234.150.152;s;165pkt 165fpkt", shape=diamond, color=yellow];
883[label="128.141.204.66;d;3pkt 3fpkt", shape=diamond, color=yellow];
1165[label="147.87.235.59;d;26pkt 26fpkt", shape=diamond, color=yellow];
1568[label="210.234.150.152;s;134pkt 134fpkt", shape=hexagon, color=black];
1587[label="128.141.204.66;d;3pkt 3fpkt", shape=hexagon, color=black];
1949[label="128.141.195.65;d;123pkt 123fpkt", shape=polygon, color=gold];
1953[label="128.141.204.66;d;1pkt 1fpkt", shape=polygon, color=gold];
2217[label="203.59.41.70;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.234.150.152:80, *:*}[54.0984%]&lt;BR/&gt;{*:80, 128.141.195.65:*}[40.3279%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1311: (0.856531%)&lt;BR/&gt; 1314: (0.535332%)&lt;BR/&gt; 1756: (0.321199%)&lt;BR/&gt; 1755: (0.321199%)&gt;];
}
834--883[label="0.666667;2pkt 2fpkt"];
834--895[label="0.00877193;1pkt 1fpkt"];
834--1165[label="0.153846;4pkt 4fpkt"];
834--1286[label="0.0121212;2pkt 2fpkt"];
834--1372[label="0.0727273;12pkt 12fpkt"];
834--1489[label="0.0379747;6pkt 6fpkt"];
834--1568[label="1;134pkt 134fpkt"];
834--1587[label="0.666667;2pkt 2fpkt"];
834--1693[label="0.157576;26pkt 26fpkt"];
834--1695[label="0.0242424;4pkt 4fpkt"];
834--1704[label="0.00925926;1pkt 1fpkt"];
834--1707[label="0.0181818;3pkt 3fpkt"];
834--1891[label="0.14;14pkt 14fpkt"];
834--1903[label="0.0121212;2pkt 2fpkt"];
834--1949[label="0.0487805;6pkt 6fpkt"];
834--1953[label="1;1pkt 1fpkt"];
834--1980[label="0.0242424;4pkt 4fpkt"];
834--1981[label="0.0181818;3pkt 3fpkt"];
834--2006[label="0.030303;5pkt 5fpkt"];
834--2008[label="0.193939;32pkt 32fpkt"];
883--1568[label="0.666667;2pkt 2fpkt"];
883--1587[label="1;3pkt 3fpkt"];
883--1953[label="1;1pkt 1fpkt"];
883--2008[label="0.333333;1pkt 1fpkt"];
1165--1568[label="0.153846;4pkt 4fpkt"];
1165--2008[label="0.0769231;2pkt 2fpkt"];
1165--2217[label="1;12pkt 12fpkt"];
1568--1587[label="0.666667;2pkt 2fpkt"];
1568--1693[label="0.19403;26pkt 26fpkt"];
1568--1695[label="0.0298507;4pkt 4fpkt"];
1568--1704[label="0.00925926;1pkt 1fpkt"];
1568--1707[label="0.0223881;3pkt 3fpkt"];
1568--1891[label="0.14;14pkt 14fpkt"];
1568--1903[label="0.0149254;2pkt 2fpkt"];
1568--1949[label="0.0487805;6pkt 6fpkt"];
1568--1953[label="1;1pkt 1fpkt"];
1568--1980[label="0.0298507;4pkt 4fpkt"];
1568--1981[label="0.0223881;3pkt 3fpkt"];
1568--2006[label="0.0373134;5pkt 5fpkt"];
1568--2008[label="0.238806;32pkt 32fpkt"];
1587--1953[label="1;1pkt 1fpkt"];
1587--2008[label="0.333333;1pkt 1fpkt"];
1949--1996[label="0.195122;24pkt 24fpkt"];
1949--2006[label="0.0406504;5pkt 5fpkt"];
1949--2009[label="0.195122;24pkt 24fpkt"];
1949--2016[label="0.195122;24pkt 24fpkt"];
1949--2026[label="0.5;44pkt 44fpkt"];
</description>
    <slice>
      <filter src_ip="210.234.150.152" src_port="80"/>
      <filter dst_ip="128.141.195.65" src_port="80"/>
    </slice>
    <from sec="994482003" usec="0"/>
    <to sec="994483156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
56[label="14.216.213.99;d;1pkt 1fpkt", shape=diamond, color=yellow];
59[label="128.141.52.135;s;127pkt 127fpkt", shape=diamond, color=yellow];
69[label="12.54.93.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
76[label="213.52.225.66;d;1pkt 1fpkt", shape=diamond, color=yellow];
92[label="75.162.128.82;d;1pkt 1fpkt", shape=diamond, color=yellow];
116[label="12.81.18.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
124[label="112.16.27.229;d;1pkt 1fpkt", shape=diamond, color=yellow];
128[label="13.241.20.181;d;1pkt 1fpkt", shape=diamond, color=yellow];
164[label="12.75.83.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
597[label="13.212.148.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
601[label="218.114.212.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
773[label="209.204.137.147;d;1pkt 1fpkt", shape=diamond, color=yellow];
1038[label="213.216.64.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
1289[label="128.141.52.135;s;127pkt 127fpkt", shape=hexagon, color=black];
1306[label="13.241.20.181;d;1pkt 1fpkt", shape=hexagon, color=black];
1365[label="213.52.225.66;d;1pkt 1fpkt", shape=hexagon, color=black];
1588[label="14.216.213.99;d;1pkt 1fpkt", shape=hexagon, color=black];
1591[label="75.162.128.82;d;1pkt 1fpkt", shape=hexagon, color=black];
1673[label="218.114.212.50;d;1pkt 1fpkt", shape=hexagon, color=black];
1789[label="13.212.148.214;d;1pkt 1fpkt", shape=hexagon, color=black];
1929[label="128.141.52.135;s;106pkt 106fpkt", shape=polygon, color=gold];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.141.52.135:6346, *:*}[74.0157%]&lt;BR/&gt;{128.141.52.135:*, *:6346}[25.9843%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 2438: (0.793651%)&lt;BR/&gt; 52864: (0.661376%)&lt;BR/&gt; 52858: (0.661376%)&lt;BR/&gt; 52823: (0.661376%)&gt;];
}
56--59[label="1;1pkt 1fpkt"];
56--1289[label="1;1pkt 1fpkt"];
56--1588[label="1;1pkt 1fpkt"];
56--1929[label="1;1pkt 1fpkt"];
59--69[label="1;1pkt 1fpkt"];
59--76[label="1;1pkt 1fpkt"];
59--92[label="1;1pkt 1fpkt"];
59--116[label="1;1pkt 1fpkt"];
59--124[label="1;1pkt 1fpkt"];
59--128[label="1;1pkt 1fpkt"];
59--164[label="1;1pkt 1fpkt"];
59--597[label="1;1pkt 1fpkt"];
59--601[label="1;1pkt 1fpkt"];
59--773[label="1;1pkt 1fpkt"];
59--1038[label="1;1pkt 1fpkt"];
59--1289[label="1;127pkt 127fpkt"];
59--1306[label="1;1pkt 1fpkt"];
59--1365[label="1;1pkt 1fpkt"];
59--1588[label="1;1pkt 1fpkt"];
59--1591[label="1;1pkt 1fpkt"];
59--1673[label="1;1pkt 1fpkt"];
59--1789[label="1;1pkt 1fpkt"];
59--1929[label="1;106pkt 106fpkt"];
69--1289[label="1;1pkt 1fpkt"];
69--1929[label="1;1pkt 1fpkt"];
76--1289[label="1;1pkt 1fpkt"];
76--1365[label="1;1pkt 1fpkt"];
76--1929[label="1;1pkt 1fpkt"];
92--1289[label="1;1pkt 1fpkt"];
92--1591[label="1;1pkt 1fpkt"];
92--1929[label="1;1pkt 1fpkt"];
116--1289[label="1;1pkt 1fpkt"];
116--1929[label="1;1pkt 1fpkt"];
124--1289[label="1;1pkt 1fpkt"];
124--1929[label="1;1pkt 1fpkt"];
128--1289[label="1;1pkt 1fpkt"];
128--1306[label="1;1pkt 1fpkt"];
128--1929[label="1;1pkt 1fpkt"];
164--1289[label="1;1pkt 1fpkt"];
164--1929[label="1;1pkt 1fpkt"];
597--1289[label="1;1pkt 1fpkt"];
597--1789[label="1;1pkt 1fpkt"];
597--1929[label="1;1pkt 1fpkt"];
601--1289[label="1;1pkt 1fpkt"];
601--1673[label="1;1pkt 1fpkt"];
601--1929[label="1;1pkt 1fpkt"];
773--1289[label="1;1pkt 1fpkt"];
773--1929[label="1;1pkt 1fpkt"];
1038--1289[label="1;1pkt 1fpkt"];
1038--1929[label="1;1pkt 1fpkt"];
1289--1306[label="1;1pkt 1fpkt"];
1289--1365[label="1;1pkt 1fpkt"];
1289--1588[label="1;1pkt 1fpkt"];
1289--1591[label="1;1pkt 1fpkt"];
1289--1673[label="1;1pkt 1fpkt"];
1289--1789[label="1;1pkt 1fpkt"];
1289--1929[label="1;106pkt 106fpkt"];
1306--1929[label="1;1pkt 1fpkt"];
1365--1929[label="1;1pkt 1fpkt"];
1588--1929[label="1;1pkt 1fpkt"];
1591--1929[label="1;1pkt 1fpkt"];
1673--1929[label="1;1pkt 1fpkt"];
1789--1929[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="128.141.52.135" src_port="6346"/>
      <filter dst_port="6346" src_ip="128.141.52.135"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
63[label="209.70.106.88;s;2pkt 2fpkt", shape=diamond, color=yellow];
204[label="128.141.52.136;d;5pkt 5fpkt", shape=diamond, color=yellow];
276[label="75.171.4.191;s;3pkt 3fpkt", shape=diamond, color=yellow];
1322[label="128.141.52.136;d;5pkt 5fpkt", shape=hexagon, color=black];
1589[label="209.70.106.88;s;2pkt 2fpkt", shape=hexagon, color=black];
1618[label="75.171.4.191;s;3pkt 3fpkt", shape=hexagon, color=black];
1911[label="128.141.52.136;d;5pkt 5fpkt", shape=polygon, color=gold];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.70.106.88:1230, 128.141.52.136:5500}[20%]&lt;BR/&gt;{209.70.106.88:1553, 128.141.52.136:5501}[20%]&lt;BR/&gt;{75.171.4.191:2289, 128.141.52.136:5500}[20%]&lt;BR/&gt;{75.171.4.191:2314, 128.141.52.136:5501}[20%]&lt;BR/&gt;{75.171.4.191:2490, 128.141.52.136:5501}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5501: (30%)&lt;BR/&gt; 5500: (20%)&lt;BR/&gt; 2490: (10%)&lt;BR/&gt; 2314: (10%)&lt;BR/&gt; 2289: (10%)&gt;];
}
63--204[label="1;2pkt 2fpkt"];
63--1322[label="1;2pkt 2fpkt"];
63--1589[label="1;2pkt 2fpkt"];
63--1911[label="1;2pkt 2fpkt"];
204--276[label="1;3pkt 3fpkt"];
204--1322[label="1;5pkt 5fpkt"];
204--1589[label="1;2pkt 2fpkt"];
204--1618[label="1;3pkt 3fpkt"];
204--1911[label="1;5pkt 5fpkt"];
276--1322[label="1;3pkt 3fpkt"];
276--1618[label="1;3pkt 3fpkt"];
276--1911[label="1;3pkt 3fpkt"];
1322--1589[label="1;2pkt 2fpkt"];
1322--1618[label="1;3pkt 3fpkt"];
1322--1911[label="1;5pkt 5fpkt"];
1589--1911[label="1;2pkt 2fpkt"];
1618--1911[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.52.136" dst_port="5501" src_ip="75.171.4.191" src_port="2490"/>
      <filter dst_ip="128.141.52.136" dst_port="5501" src_ip="75.171.4.191" src_port="2314"/>
      <filter dst_ip="128.141.52.136" dst_port="5500" src_ip="75.171.4.191" src_port="2289"/>
      <filter dst_ip="128.141.52.136" dst_port="5501" src_ip="209.70.106.88" src_port="1553"/>
      <filter dst_ip="128.141.52.136" dst_port="5500" src_ip="209.70.106.88" src_port="1230"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
423[label="14.168.22.251;s;4pkt 4fpkt", shape=diamond, color=yellow];
693[label="110.18.123.38;s;3pkt 3fpkt", shape=diamond, color=yellow];
993[label="196.14.165.105;s;10pkt 10fpkt", shape=diamond, color=yellow];
1594[label="149.177.194.208;d;155pkt 155fpkt", shape=hexagon, color=black];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:21, 149.177.194.208:*}[51.8987%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (25%)&lt;BR/&gt; 20: (8.72093%)&lt;BR/&gt; 1214: (3.77907%)&lt;BR/&gt; 5190: (2.32558%)&lt;BR/&gt; 1863: (2.03488%)&gt;];
}
423--1594[label="0.75;3pkt 3fpkt"];
693--1594[label="1;3pkt 3fpkt"];
993--1594[label="0.8;8pkt 8fpkt"];
1594--1706[label="1;1pkt 1fpkt"];
1594--2604[label="0.684211;13pkt 13fpkt"];
1594--2691[label="0.5;1pkt 1fpkt"];
1594--2859[label="0.684211;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.194.208" src_port="21"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
219[label="110.187.165.99;s;1pkt 1fpkt", shape=diamond, color=yellow];
220[label="196.212.169.35;d;159pkt 159fpkt", shape=diamond, color=yellow];
336[label="110.192.196.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
349[label="13.132.30.79;s;1pkt 1fpkt", shape=diamond, color=yellow];
531[label="212.183.39.212;s;2pkt 2fpkt", shape=diamond, color=yellow];
1533[label="13.132.30.79;s;1pkt 1fpkt", shape=hexagon, color=black];
1577[label="212.183.39.212;s;2pkt 2fpkt", shape=hexagon, color=black];
1596[label="110.187.165.99;s;1pkt 1fpkt", shape=hexagon, color=black];
1696[label="196.212.169.35;d;131pkt 131fpkt", shape=hexagon, color=black];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 196.212.169.35:6346}[50.3145%]&lt;BR/&gt;{219.238.46.215:6346, 196.212.169.35:*}[23.2704%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (47.3244%)&lt;BR/&gt; 6347: (1.67224%)&lt;BR/&gt; 1161: (1.00334%)&lt;BR/&gt; 4025: (0.668896%)&lt;BR/&gt; 1857: (0.668896%)&gt;];
}
219--220[label="1;1pkt 1fpkt"];
219--1596[label="1;1pkt 1fpkt"];
219--1696[label="1;1pkt 1fpkt"];
220--336[label="1;1pkt 1fpkt"];
220--349[label="1;1pkt 1fpkt"];
220--531[label="1;2pkt 2fpkt"];
220--1533[label="1;1pkt 1fpkt"];
220--1577[label="1;2pkt 2fpkt"];
220--1596[label="1;1pkt 1fpkt"];
220--1696[label="1;131pkt 131fpkt"];
336--1696[label="1;1pkt 1fpkt"];
349--1533[label="1;1pkt 1fpkt"];
349--1696[label="1;1pkt 1fpkt"];
531--1577[label="1;2pkt 2fpkt"];
531--1696[label="1;2pkt 2fpkt"];
1533--1696[label="1;1pkt 1fpkt"];
1577--1696[label="1;2pkt 2fpkt"];
1596--1696[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.212.169.35" dst_port="6346"/>
      <filter dst_ip="196.212.169.35" src_ip="219.238.46.215" src_port="6346"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
126[label="14.137.54.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
127[label="136.211.142.244;s;2pkt 2fpkt", shape=diamond, color=yellow];
1601[label="14.137.54.20;d;1pkt 1fpkt", shape=hexagon, color=black];
1700[label="136.211.142.244;s;1pkt 1fpkt", shape=hexagon, color=black];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.211.142.244:6346, 14.137.54.20:50277}[50%]&lt;BR/&gt;{136.211.142.244:6346, 12.85.36.132:3994}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 50277: (40%)&lt;BR/&gt; 3994: (10%)&gt;];
}
126--127[label="1;1pkt 1fpkt"];
126--1601[label="1;1pkt 1fpkt"];
126--1700[label="1;1pkt 1fpkt"];
127--1601[label="1;1pkt 1fpkt"];
127--1700[label="1;1pkt 1fpkt"];
1601--1700[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="12.85.36.132" dst_port="3994" src_ip="136.211.142.244" src_port="6346"/>
      <filter dst_ip="14.137.54.20" dst_port="50277" src_ip="136.211.142.244" src_port="6346"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
628[label="210.209.122.102;d;40pkt 40fpkt", shape=diamond, color=yellow];
1621[label="210.209.122.102;d;37pkt 37fpkt", shape=hexagon, color=black];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 210.209.122.102:0}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (89.6104%)&lt;BR/&gt; 137: (7.79221%)&lt;BR/&gt; 17760: (1.2987%)&lt;BR/&gt; 179: (1.2987%)&gt;];
}
628--1621[label="1;37pkt 37fpkt"];
628--2036[label="0.0416667;1pkt 1fpkt"];
628--2118[label="0.0277778;1pkt 1fpkt"];
628--2168[label="0.025641;1pkt 1fpkt"];
628--2686[label="0.0285714;1pkt 1fpkt"];
628--2708[label="0.025641;1pkt 1fpkt"];
1621--2118[label="0.0277778;1pkt 1fpkt"];
1621--2168[label="0.027027;1pkt 1fpkt"];
1621--2686[label="0.0285714;1pkt 1fpkt"];
1621--2708[label="0.027027;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.209.122.102"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.33457,2.16064,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
185[label="149.168.172.97;d;141pkt 141fpkt", shape=diamond, color=yellow];
198[label="196.122.181.21;d;98pkt 98fpkt", shape=diamond, color=yellow];
217[label="147.87.216.15;d;244pkt 244fpkt", shape=diamond, color=yellow];
308[label="219.76.157.125;s;292pkt 292fpkt", shape=diamond, color=yellow];
324[label="128.141.33.233;d;155pkt 155fpkt", shape=diamond, color=yellow];
394[label="160.171.67.7;d;346pkt 346fpkt", shape=diamond, color=yellow];
412[label="147.87.132.242;d;211pkt 211fpkt", shape=diamond, color=yellow];
502[label="196.122.181.156;d;129pkt 129fpkt", shape=diamond, color=yellow];
564[label="160.164.116.39;d;120pkt 120fpkt", shape=diamond, color=yellow];
641[label="13.109.91.108;s;269pkt 269fpkt", shape=diamond, color=yellow];
654[label="192.14.185.231;s;64pkt 64fpkt", shape=diamond, color=yellow];
733[label="128.141.115.31;d;151pkt 151fpkt", shape=diamond, color=yellow];
825[label="13.109.91.111;s;168pkt 168fpkt", shape=diamond, color=yellow];
951[label="208.196.185.96;s;5pkt 5fpkt", shape=diamond, color=yellow];
1011[label="13.109.91.110;s;215pkt 215fpkt", shape=diamond, color=yellow];
1048[label="208.196.185.117;s;7pkt 7fpkt", shape=diamond, color=yellow];
1126[label="208.196.185.34;s;3pkt 3fpkt", shape=diamond, color=yellow];
1222[label="110.190.156.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
1358[label="128.141.33.233;d;133pkt 133fpkt", shape=hexagon, color=black];
1394[label="149.168.172.97;d;110pkt 110fpkt", shape=hexagon, color=black];
1442[label="196.122.181.156;d;129pkt 129fpkt", shape=hexagon, color=black];
1467[label="160.164.116.39;d;46pkt 46fpkt", shape=hexagon, color=black];
1634[label="13.109.91.108;s;269pkt 269fpkt", shape=hexagon, color=black];
1650[label="160.164.140.76;d;63pkt 63fpkt", shape=hexagon, color=black];
1783[label="128.141.115.31;d;151pkt 151fpkt", shape=hexagon, color=black];
1927[label="196.122.181.156;d;43pkt 43fpkt", shape=polygon, color=gold];
2027[label="208.196.185.1;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2029[label="208.196.185.2;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2042[label="208.196.185.4;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2047[label="208.196.185.6;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2064[label="208.196.185.10;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2091[label="208.196.185.20;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2097[label="208.196.185.23;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2108[label="208.196.185.28;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2158[label="208.196.185.46;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2164[label="208.196.185.48;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2222[label="13.65.203.71;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2234[label="208.196.185.75;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2354[label="208.196.185.117;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2358[label="208.196.185.121;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2504[label="13.109.91.171;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2547[label="209.214.198.192;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2678[label="208.196.185.20;7pkt 7fpkt", shape=invtriangle, color=brown];
2727[label="208.196.185.75;5pkt 5fpkt", shape=invtriangle, color=brown];
2771[label="208.196.185.117;11pkt 11fpkt", shape=invtriangle, color=brown];
2773[label="208.196.185.121;3pkt 3fpkt", shape=invtriangle, color=brown];
2909[label="208.196.185.121;3pkt 3fpkt", shape=invhouse, color=bisque];
2921[label="13.109.91.171;9pkt 9fpkt", shape=invhouse, color=bisque];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[32.4942%]&lt;BR/&gt;{*:8888, *:*}[30.9091%]&lt;BR/&gt;{*:8875, *:*}[30.2098%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8875: (23.0966%)&lt;BR/&gt; 8888: (14.9718%)&lt;BR/&gt; 80: (9.72559%)&lt;BR/&gt; 7777: (0.538068%)&lt;BR/&gt; 0: (0.538068%)&gt;];
}
185--555[label="0.615385;16pkt 16fpkt"];
185--641[label="0.148936;21pkt 21fpkt"];
185--825[label="0.134752;19pkt 19fpkt"];
185--1011[label="0.156028;22pkt 22fpkt"];
185--1048[label="0.142857;1pkt 1fpkt"];
185--1126[label="0.666667;2pkt 2fpkt"];
185--1394[label="1;110pkt 110fpkt"];
185--1634[label="0.148936;21pkt 21fpkt"];
185--2027[label="0.25;2pkt 2fpkt"];
185--2029[label="0.166667;1pkt 1fpkt"];
185--2064[label="0.2;1pkt 1fpkt"];
185--2091[label="0.285714;2pkt 2fpkt"];
185--2097[label="0.428571;3pkt 3fpkt"];
185--2158[label="0.125;1pkt 1fpkt"];
185--2164[label="0.1;1pkt 1fpkt"];
185--2234[label="0.2;1pkt 1fpkt"];
185--2239[label="0.333333;1pkt 1fpkt"];
185--2340[label="0.25;1pkt 1fpkt"];
185--2354[label="0.5;5pkt 5fpkt"];
185--2358[label="0.333333;1pkt 1fpkt"];
185--2369[label="0.333333;2pkt 2fpkt"];
185--2504[label="0.111111;1pkt 1fpkt"];
185--2678[label="0.285714;2pkt 2fpkt"];
185--2727[label="0.2;1pkt 1fpkt"];
185--2771[label="0.454545;5pkt 5fpkt"];
185--2773[label="0.333333;1pkt 1fpkt"];
185--2819[label="0.1;1pkt 1fpkt"];
185--2909[label="0.333333;1pkt 1fpkt"];
185--2921[label="0.111111;1pkt 1fpkt"];
198--641[label="0.153061;15pkt 15fpkt"];
198--825[label="0.22449;22pkt 22fpkt"];
198--951[label="0.2;1pkt 1fpkt"];
198--1048[label="0.285714;2pkt 2fpkt"];
198--1126[label="0.333333;1pkt 1fpkt"];
198--1634[label="0.153061;15pkt 15fpkt"];
198--2029[label="0.166667;1pkt 1fpkt"];
198--2042[label="0.142857;1pkt 1fpkt"];
198--2047[label="0.166667;1pkt 1fpkt"];
198--2056[label="0.111111;1pkt 1fpkt"];
198--2097[label="0.142857;1pkt 1fpkt"];
198--2222[label="0.125;1pkt 1fpkt"];
198--2340[label="0.25;1pkt 1fpkt"];
198--2354[label="0.2;2pkt 2fpkt"];
198--2358[label="0.333333;1pkt 1fpkt"];
198--2379[label="0.2;1pkt 1fpkt"];
198--2504[label="0.333333;3pkt 3fpkt"];
198--2771[label="0.181818;2pkt 2fpkt"];
198--2773[label="0.333333;1pkt 1fpkt"];
198--2777[label="0.2;1pkt 1fpkt"];
198--2819[label="0.3;3pkt 3fpkt"];
198--2909[label="0.333333;1pkt 1fpkt"];
198--2911[label="0.125;1pkt 1fpkt"];
198--2921[label="0.333333;3pkt 3fpkt"];
217--308[label="0.00819672;2pkt 2fpkt"];
217--555[label="0.0384615;1pkt 1fpkt"];
217--641[label="0.114754;28pkt 28fpkt"];
217--654[label="0.015625;1pkt 1fpkt"];
217--825[label="0.0595238;10pkt 10fpkt"];
217--1011[label="0.15814;34pkt 34fpkt"];
217--1320[label="0.139785;13pkt 13fpkt"];
217--1440[label="0.00819672;2pkt 2fpkt"];
217--1593[label="1;197pkt 197fpkt"];
217--1634[label="0.114754;28pkt 28fpkt"];
217--1915[label="0.259259;7pkt 7fpkt"];
217--1996[label="0.00819672;2pkt 2fpkt"];
217--2009[label="0.00819672;2pkt 2fpkt"];
217--2016[label="0.00819672;2pkt 2fpkt"];
217--2029[label="0.166667;1pkt 1fpkt"];
217--2042[label="0.142857;1pkt 1fpkt"];
217--2097[label="0.142857;1pkt 1fpkt"];
217--2115[label="0.2;1pkt 1fpkt"];
217--2134[label="0.166667;1pkt 1fpkt"];
217--2158[label="0.125;1pkt 1fpkt"];
217--2164[label="0.4;4pkt 4fpkt"];
217--2222[label="0.125;1pkt 1fpkt"];
217--2234[label="0.2;1pkt 1fpkt"];
217--2239[label="0.333333;1pkt 1fpkt"];
217--2365[label="0.131148;8pkt 8fpkt"];
217--2377[label="0.5;1pkt 1fpkt"];
217--2379[label="0.4;2pkt 2fpkt"];
217--2382[label="0.285714;2pkt 2fpkt"];
217--2504[label="0.111111;1pkt 1fpkt"];
217--2518[label="0.0833333;2pkt 2fpkt"];
217--2527[label="0.136842;13pkt 13fpkt"];
217--2627[label="0.015625;1pkt 1fpkt"];
217--2697[label="0.142857;1pkt 1fpkt"];
217--2727[label="0.2;1pkt 1fpkt"];
217--2777[label="0.4;2pkt 2fpkt"];
217--2779[label="0.285714;2pkt 2fpkt"];
217--2819[label="0.1;1pkt 1fpkt"];
217--2827[label="0.136842;13pkt 13fpkt"];
217--2911[label="0.25;2pkt 2fpkt"];
217--2921[label="0.111111;1pkt 1fpkt"];
308--310[label="0.127451;13pkt 13fpkt"];
308--412[label="0.0236967;5pkt 5fpkt"];
308--564[label="0.025;3pkt 3fpkt"];
308--648[label="0.0952381;6pkt 6fpkt"];
308--940[label="0.264706;9pkt 9fpkt"];
308--971[label="0.315789;6pkt 6fpkt"];
308--1440[label="1;269pkt 269fpkt"];
308--1467[label="0.0434783;2pkt 2fpkt"];
308--1593[label="0.0101523;2pkt 2fpkt"];
308--1645[label="0.0299401;5pkt 5fpkt"];
308--1650[label="0.0952381;6pkt 6fpkt"];
308--1695[label="0.0479452;14pkt 14fpkt"];
308--1707[label="0.0205479;6pkt 6fpkt"];
308--1962[label="0.0952381;6pkt 6fpkt"];
308--1980[label="0.0479452;14pkt 14fpkt"];
308--1981[label="0.0205479;6pkt 6fpkt"];
308--1996[label="0.0342466;10pkt 10fpkt"];
308--2006[label="0.0376712;11pkt 11fpkt"];
308--2008[label="0.0136986;4pkt 4fpkt"];
308--2009[label="0.0342466;10pkt 10fpkt"];
308--2016[label="0.0342466;10pkt 10fpkt"];
324--555[label="0.0384615;1pkt 1fpkt"];
324--641[label="0.251613;39pkt 39fpkt"];
324--825[label="0.0322581;5pkt 5fpkt"];
324--951[label="0.2;1pkt 1fpkt"];
324--1011[label="0.135484;21pkt 21fpkt"];
324--1358[label="1;133pkt 133fpkt"];
324--1634[label="0.251613;39pkt 39fpkt"];
324--1996[label="0.0129032;2pkt 2fpkt"];
324--2009[label="0.0129032;2pkt 2fpkt"];
324--2016[label="0.0129032;2pkt 2fpkt"];
324--2027[label="0.125;1pkt 1fpkt"];
324--2042[label="0.285714;2pkt 2fpkt"];
324--2047[label="0.166667;1pkt 1fpkt"];
324--2064[label="0.4;2pkt 2fpkt"];
324--2091[label="0.142857;1pkt 1fpkt"];
324--2115[label="0.2;1pkt 1fpkt"];
324--2164[label="0.1;1pkt 1fpkt"];
324--2358[label="0.333333;1pkt 1fpkt"];
324--2379[label="0.2;1pkt 1fpkt"];
324--2416[label="0.163265;16pkt 16fpkt"];
324--2678[label="0.142857;1pkt 1fpkt"];
324--2773[label="0.333333;1pkt 1fpkt"];
324--2777[label="0.2;1pkt 1fpkt"];
324--2909[label="0.333333;1pkt 1fpkt"];
394--430[label="0.00653595;1pkt 1fpkt"];
394--555[label="0.0769231;2pkt 2fpkt"];
394--560[label="0.0148515;3pkt 3fpkt"];
394--641[label="0.100372;27pkt 27fpkt"];
394--644[label="1;1pkt 1fpkt"];
394--654[label="0.015625;1pkt 1fpkt"];
394--794[label="0.0151515;1pkt 1fpkt"];
394--825[label="0.0654762;11pkt 11fpkt"];
394--951[label="0.2;1pkt 1fpkt"];
394--1011[label="0.0883721;19pkt 19fpkt"];
394--1161[label="1;2pkt 2fpkt"];
394--1213[label="0.0736842;7pkt 7fpkt"];
394--1229[label="0.00787402;1pkt 1fpkt"];
394--1236[label="0.0487805;2pkt 2fpkt"];
394--1292[label="0.00420168;1pkt 1fpkt"];
394--1397[label="0.0188679;1pkt 1fpkt"];
394--1398[label="0.017341;6pkt 6fpkt"];
394--1431[label="1;120pkt 120fpkt"];
394--1516[label="0.0225564;3pkt 3fpkt"];
394--1517[label="1;1pkt 1fpkt"];
394--1612[label="0.015625;1pkt 1fpkt"];
394--1634[label="0.100372;27pkt 27fpkt"];
394--1956[label="0.0172414;1pkt 1fpkt"];
394--1979[label="0.00420168;1pkt 1fpkt"];
394--1996[label="0.017341;6pkt 6fpkt"];
394--2008[label="0.00867052;3pkt 3fpkt"];
394--2009[label="0.017341;6pkt 6fpkt"];
394--2016[label="0.017341;6pkt 6fpkt"];
394--2027[label="0.125;1pkt 1fpkt"];
394--2042[label="0.142857;1pkt 1fpkt"];
394--2047[label="0.166667;1pkt 1fpkt"];
394--2056[label="0.222222;2pkt 2fpkt"];
394--2091[label="0.142857;1pkt 1fpkt"];
394--2097[label="0.142857;1pkt 1fpkt"];
394--2108[label="0.333333;2pkt 2fpkt"];
394--2134[label="0.166667;1pkt 1fpkt"];
394--2148[label="0.0357143;1pkt 1fpkt"];
394--2158[label="0.125;1pkt 1fpkt"];
394--2164[label="0.1;1pkt 1fpkt"];
394--2179[label="0.166667;1pkt 1fpkt"];
394--2222[label="0.5;4pkt 4fpkt"];
394--2234[label="0.4;2pkt 2fpkt"];
394--2352[label="0.2;5pkt 5fpkt"];
394--2359[label="0.0232558;1pkt 1fpkt"];
394--2363[label="0.037037;1pkt 1fpkt"];
394--2365[label="0.0163934;1pkt 1fpkt"];
394--2419[label="0.4;2pkt 2fpkt"];
394--2464[label="0.142857;4pkt 4fpkt"];
394--2482[label="0.0188679;1pkt 1fpkt"];
394--2486[label="0.1;2pkt 2fpkt"];
394--2627[label="0.015625;1pkt 1fpkt"];
394--2678[label="0.142857;1pkt 1fpkt"];
394--2697[label="0.142857;1pkt 1fpkt"];
394--2727[label="0.4;2pkt 2fpkt"];
394--2770[label="0.2;5pkt 5fpkt"];
412--555[label="0.0769231;2pkt 2fpkt"];
412--560[label="0.0148515;3pkt 3fpkt"];
412--641[label="0.0853081;18pkt 18fpkt"];
412--819[label="0.028169;2pkt 2fpkt"];
412--825[label="0.119048;20pkt 20fpkt"];
412--1033[label="1;1pkt 1fpkt"];
412--1048[label="0.142857;1pkt 1fpkt"];
412--1398[label="0.00473934;1pkt 1fpkt"];
412--1440[label="0.0236967;5pkt 5fpkt"];
412--1516[label="0.0225564;3pkt 3fpkt"];
412--1611[label="0.00947867;2pkt 2fpkt"];
412--1634[label="0.0853081;18pkt 18fpkt"];
412--1645[label="1;167pkt 167fpkt"];
412--1724[label="0.028169;2pkt 2fpkt"];
412--1749[label="1;1pkt 1fpkt"];
412--1996[label="0.0189573;4pkt 4fpkt"];
412--2006[label="0.00947867;2pkt 2fpkt"];
412--2009[label="0.0189573;4pkt 4fpkt"];
412--2016[label="0.0189573;4pkt 4fpkt"];
412--2029[label="0.166667;1pkt 1fpkt"];
412--2042[label="0.285714;2pkt 2fpkt"];
412--2127[label="0.228571;8pkt 8fpkt"];
412--2164[label="0.1;1pkt 1fpkt"];
412--2179[label="0.166667;1pkt 1fpkt"];
412--2194[label="0.028169;2pkt 2fpkt"];
412--2238[label="0.151515;5pkt 5fpkt"];
412--2354[label="0.1;1pkt 1fpkt"];
412--2382[label="0.142857;1pkt 1fpkt"];
412--2416[label="0.0918367;9pkt 9fpkt"];
412--2497[label="0.0357143;1pkt 1fpkt"];
412--2498[label="0.0294118;1pkt 1fpkt"];
412--2510[label="0.5;8pkt 8fpkt"];
412--2547[label="0.181818;2pkt 2fpkt"];
412--2602[label="0.00947867;2pkt 2fpkt"];
412--2771[label="0.0909091;1pkt 1fpkt"];
412--2779[label="0.142857;1pkt 1fpkt"];
412--2816[label="0.0357143;1pkt 1fpkt"];
412--2817[label="0.0294118;1pkt 1fpkt"];
412--2892[label="0.0298507;2pkt 2fpkt"];
412--2911[label="0.125;1pkt 1fpkt"];
502--641[label="0.286822;37pkt 37fpkt"];
502--1011[label="0.209302;27pkt 27fpkt"];
502--1048[label="0.285714;2pkt 2fpkt"];
502--1442[label="1;129pkt 129fpkt"];
502--1634[label="0.286822;37pkt 37fpkt"];
502--1927[label="1;43pkt 43fpkt"];
502--2029[label="0.166667;1pkt 1fpkt"];
502--2047[label="0.333333;2pkt 2fpkt"];
502--2056[label="0.111111;1pkt 1fpkt"];
502--2064[label="0.2;1pkt 1fpkt"];
502--2091[label="0.142857;1pkt 1fpkt"];
502--2108[label="0.333333;2pkt 2fpkt"];
502--2115[label="0.2;1pkt 1fpkt"];
502--2134[label="0.333333;2pkt 2fpkt"];
502--2179[label="0.333333;2pkt 2fpkt"];
502--2354[label="0.2;2pkt 2fpkt"];
502--2369[label="0.333333;2pkt 2fpkt"];
502--2382[label="0.428571;3pkt 3fpkt"];
502--2504[label="0.111111;1pkt 1fpkt"];
502--2678[label="0.142857;1pkt 1fpkt"];
502--2697[label="0.285714;2pkt 2fpkt"];
502--2771[label="0.181818;2pkt 2fpkt"];
502--2779[label="0.428571;3pkt 3fpkt"];
502--2819[label="0.1;1pkt 1fpkt"];
502--2911[label="0.375;3pkt 3fpkt"];
502--2921[label="0.111111;1pkt 1fpkt"];
564--641[label="0.125;15pkt 15fpkt"];
564--825[label="0.225;27pkt 27fpkt"];
564--1011[label="0.0916667;11pkt 11fpkt"];
564--1048[label="0.142857;1pkt 1fpkt"];
564--1222[label="1;1pkt 1fpkt"];
564--1440[label="0.0166667;2pkt 2fpkt"];
564--1467[label="1;46pkt 46fpkt"];
564--1634[label="0.125;15pkt 15fpkt"];
564--2006[label="0.00833333;1pkt 1fpkt"];
564--2008[label="0.0666667;8pkt 8fpkt"];
564--2027[label="0.25;2pkt 2fpkt"];
564--2056[label="0.111111;1pkt 1fpkt"];
564--2064[label="0.2;1pkt 1fpkt"];
564--2091[label="0.142857;1pkt 1fpkt"];
564--2108[label="0.166667;1pkt 1fpkt"];
564--2115[label="0.2;1pkt 1fpkt"];
564--2131[label="0.1;2pkt 2fpkt"];
564--2134[label="0.166667;1pkt 1fpkt"];
564--2340[label="0.25;1pkt 1fpkt"];
564--2416[label="0.0102041;1pkt 1fpkt"];
564--2504[label="0.333333;3pkt 3fpkt"];
564--2678[label="0.142857;1pkt 1fpkt"];
564--2696[label="0.105263;2pkt 2fpkt"];
564--2697[label="0.142857;1pkt 1fpkt"];
564--2771[label="0.0909091;1pkt 1fpkt"];
564--2819[label="0.3;3pkt 3fpkt"];
564--2921[label="0.333333;3pkt 3fpkt"];
641--733[label="0.145695;22pkt 22fpkt"];
641--1305[label="0.0188679;2pkt 2fpkt"];
641--1358[label="0.293233;39pkt 39fpkt"];
641--1394[label="0.190909;21pkt 21fpkt"];
641--1431[label="0.166667;20pkt 20fpkt"];
641--1442[label="0.286822;37pkt 37fpkt"];
641--1593[label="0.126904;25pkt 25fpkt"];
641--1634[label="1;269pkt 269fpkt"];
641--1645[label="0.00598802;1pkt 1fpkt"];
641--1693[label="0.0111524;3pkt 3fpkt"];
641--1783[label="0.145695;22pkt 22fpkt"];
641--1927[label="0.488372;21pkt 21fpkt"];
641--1932[label="0.0298507;2pkt 2fpkt"];
654--858[label="0.015625;1pkt 1fpkt"];
654--940[label="0.176471;6pkt 6fpkt"];
654--1020[label="0.0612245;3pkt 3fpkt"];
654--1317[label="0.5625;36pkt 36fpkt"];
654--1593[label="0.015625;1pkt 1fpkt"];
654--1693[label="0.015625;1pkt 1fpkt"];
654--1750[label="0.015625;1pkt 1fpkt"];
654--1996[label="0.015625;1pkt 1fpkt"];
654--2006[label="0.09375;6pkt 6fpkt"];
654--2009[label="0.015625;1pkt 1fpkt"];
654--2016[label="0.015625;1pkt 1fpkt"];
654--2627[label="1;64pkt 64fpkt"];
733--825[label="0.337748;51pkt 51fpkt"];
733--1634[label="0.145695;22pkt 22fpkt"];
733--1783[label="1;151pkt 151fpkt"];
733--2027[label="0.25;2pkt 2fpkt"];
733--2029[label="0.166667;1pkt 1fpkt"];
733--2056[label="0.111111;1pkt 1fpkt"];
733--2091[label="0.142857;1pkt 1fpkt"];
733--2108[label="0.166667;1pkt 1fpkt"];
733--2158[label="0.125;1pkt 1fpkt"];
733--2164[label="0.2;2pkt 2fpkt"];
733--2222[label="0.125;1pkt 1fpkt"];
733--2234[label="0.2;1pkt 1fpkt"];
733--2369[label="0.166667;1pkt 1fpkt"];
733--2678[label="0.142857;1pkt 1fpkt"];
733--2727[label="0.2;1pkt 1fpkt"];
825--1358[label="0.037594;5pkt 5fpkt"];
825--1363[label="0.0333333;2pkt 2fpkt"];
825--1394[label="0.172727;19pkt 19fpkt"];
825--1467[label="0.217391;10pkt 10fpkt"];
825--1593[label="0.0595238;10pkt 10fpkt"];
825--1645[label="0.11976;20pkt 20fpkt"];
825--1693[label="0.00595238;1pkt 1fpkt"];
825--1783[label="0.337748;51pkt 51fpkt"];
951--1358[label="0.2;1pkt 1fpkt"];
1011--1305[label="0.443396;47pkt 47fpkt"];
1011--1358[label="0.075188;10pkt 10fpkt"];
1011--1363[label="0.183333;11pkt 11fpkt"];
1011--1394[label="0.0727273;8pkt 8fpkt"];
1011--1442[label="0.209302;27pkt 27fpkt"];
1011--1467[label="0.23913;11pkt 11fpkt"];
1011--1593[label="0.0761421;15pkt 15fpkt"];
1011--1932[label="0.41791;28pkt 28fpkt"];
1048--1394[label="0.142857;1pkt 1fpkt"];
1048--1442[label="0.285714;2pkt 2fpkt"];
1048--2354[label="0.857143;6pkt 6fpkt"];
1048--2771[label="1;7pkt 7fpkt"];
1222--1467[label="1;1pkt 1fpkt"];
1358--1634[label="0.293233;39pkt 39fpkt"];
1358--1996[label="0.0150376;2pkt 2fpkt"];
1358--2009[label="0.0150376;2pkt 2fpkt"];
1358--2016[label="0.0150376;2pkt 2fpkt"];
1358--2027[label="0.125;1pkt 1fpkt"];
1358--2042[label="0.285714;2pkt 2fpkt"];
1358--2047[label="0.166667;1pkt 1fpkt"];
1358--2064[label="0.4;2pkt 2fpkt"];
1358--2091[label="0.142857;1pkt 1fpkt"];
1358--2164[label="0.1;1pkt 1fpkt"];
1358--2416[label="0.163265;16pkt 16fpkt"];
1358--2678[label="0.142857;1pkt 1fpkt"];
1394--1634[label="0.190909;21pkt 21fpkt"];
1394--2027[label="0.25;2pkt 2fpkt"];
1394--2029[label="0.166667;1pkt 1fpkt"];
1394--2064[label="0.2;1pkt 1fpkt"];
1394--2091[label="0.285714;2pkt 2fpkt"];
1394--2097[label="0.285714;2pkt 2fpkt"];
1394--2158[label="0.125;1pkt 1fpkt"];
1394--2164[label="0.1;1pkt 1fpkt"];
1394--2234[label="0.2;1pkt 1fpkt"];
1394--2239[label="0.333333;1pkt 1fpkt"];
1394--2340[label="0.25;1pkt 1fpkt"];
1394--2354[label="0.5;5pkt 5fpkt"];
1394--2358[label="0.333333;1pkt 1fpkt"];
1394--2369[label="0.333333;2pkt 2fpkt"];
1394--2504[label="0.111111;1pkt 1fpkt"];
1394--2678[label="0.285714;2pkt 2fpkt"];
1394--2727[label="0.2;1pkt 1fpkt"];
1394--2771[label="0.454545;5pkt 5fpkt"];
1394--2773[label="0.333333;1pkt 1fpkt"];
1394--2819[label="0.1;1pkt 1fpkt"];
1394--2909[label="0.333333;1pkt 1fpkt"];
1394--2921[label="0.111111;1pkt 1fpkt"];
1442--1634[label="0.286822;37pkt 37fpkt"];
1442--1927[label="1;43pkt 43fpkt"];
1442--2029[label="0.166667;1pkt 1fpkt"];
1442--2047[label="0.333333;2pkt 2fpkt"];
1442--2056[label="0.111111;1pkt 1fpkt"];
1442--2064[label="0.2;1pkt 1fpkt"];
1442--2091[label="0.142857;1pkt 1fpkt"];
1442--2108[label="0.333333;2pkt 2fpkt"];
1442--2115[label="0.2;1pkt 1fpkt"];
1442--2134[label="0.333333;2pkt 2fpkt"];
1442--2179[label="0.333333;2pkt 2fpkt"];
1442--2354[label="0.2;2pkt 2fpkt"];
1442--2369[label="0.333333;2pkt 2fpkt"];
1442--2382[label="0.428571;3pkt 3fpkt"];
1442--2504[label="0.111111;1pkt 1fpkt"];
1442--2678[label="0.142857;1pkt 1fpkt"];
1442--2697[label="0.285714;2pkt 2fpkt"];
1442--2771[label="0.181818;2pkt 2fpkt"];
1442--2779[label="0.428571;3pkt 3fpkt"];
1442--2819[label="0.1;1pkt 1fpkt"];
1442--2911[label="0.375;3pkt 3fpkt"];
1442--2921[label="0.111111;1pkt 1fpkt"];
1467--2006[label="0.0217391;1pkt 1fpkt"];
1467--2008[label="0.0217391;1pkt 1fpkt"];
1467--2027[label="0.125;1pkt 1fpkt"];
1467--2064[label="0.2;1pkt 1fpkt"];
1467--2108[label="0.166667;1pkt 1fpkt"];
1467--2134[label="0.166667;1pkt 1fpkt"];
1467--2340[label="0.25;1pkt 1fpkt"];
1467--2504[label="0.222222;2pkt 2fpkt"];
1467--2697[label="0.142857;1pkt 1fpkt"];
1467--2819[label="0.2;2pkt 2fpkt"];
1467--2921[label="0.222222;2pkt 2fpkt"];
1634--1645[label="0.00598802;1pkt 1fpkt"];
1634--1693[label="0.0111524;3pkt 3fpkt"];
1634--1783[label="0.145695;22pkt 22fpkt"];
1634--1927[label="0.488372;21pkt 21fpkt"];
1634--1932[label="0.0298507;2pkt 2fpkt"];
1650--1962[label="1;63pkt 63fpkt"];
1650--1996[label="0.031746;2pkt 2fpkt"];
1650--2006[label="0.126984;8pkt 8fpkt"];
1650--2009[label="0.031746;2pkt 2fpkt"];
1650--2016[label="0.031746;2pkt 2fpkt"];
1650--2385[label="0.326087;15pkt 15fpkt"];
1650--2595[label="0.636364;14pkt 14fpkt"];
1650--2636[label="0.857143;6pkt 6fpkt"];
1783--2027[label="0.25;2pkt 2fpkt"];
1783--2029[label="0.166667;1pkt 1fpkt"];
1783--2056[label="0.111111;1pkt 1fpkt"];
1783--2091[label="0.142857;1pkt 1fpkt"];
1783--2108[label="0.166667;1pkt 1fpkt"];
1783--2158[label="0.125;1pkt 1fpkt"];
1783--2164[label="0.2;2pkt 2fpkt"];
1783--2222[label="0.125;1pkt 1fpkt"];
1783--2234[label="0.2;1pkt 1fpkt"];
1783--2369[label="0.166667;1pkt 1fpkt"];
1783--2678[label="0.142857;1pkt 1fpkt"];
1783--2727[label="0.2;1pkt 1fpkt"];
1927--2091[label="0.142857;1pkt 1fpkt"];
1927--2115[label="0.2;1pkt 1fpkt"];
1927--2179[label="0.166667;1pkt 1fpkt"];
1927--2369[label="0.166667;1pkt 1fpkt"];
1927--2382[label="0.428571;3pkt 3fpkt"];
1927--2504[label="0.111111;1pkt 1fpkt"];
1927--2678[label="0.142857;1pkt 1fpkt"];
1927--2779[label="0.428571;3pkt 3fpkt"];
1927--2819[label="0.1;1pkt 1fpkt"];
1927--2911[label="0.375;3pkt 3fpkt"];
1927--2921[label="0.111111;1pkt 1fpkt"];
2091--2678[label="1;7pkt 7fpkt"];
2234--2727[label="1;5pkt 5fpkt"];
2354--2771[label="1;10pkt 10fpkt"];
2358--2773[label="1;3pkt 3fpkt"];
2358--2909[label="1;3pkt 3fpkt"];
2504--2819[label="1;9pkt 9fpkt"];
2504--2921[label="1;9pkt 9fpkt"];
2773--2909[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter src_port="8888"/>
      <filter src_port="8875"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
500[label="128.141.151.65;s;35pkt 35fpkt", shape=diamond, color=yellow];
1158[label="110.0.126.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
1653[label="128.141.151.65;s;35pkt 35fpkt", shape=hexagon, color=black];
1878[label="110.0.126.104;d;1pkt 1fpkt", shape=hexagon, color=black];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.141.151.65:*, 112.40.143.134:80}[25.7143%]&lt;BR/&gt;{128.141.151.65:*, 112.40.143.132:80}[22.8571%]&lt;BR/&gt;{128.141.151.65:*, 200.81.176.181:80}[22.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2222%)&lt;BR/&gt; 6699: (2.77778%)&lt;BR/&gt; 1076: (2.77778%)&lt;BR/&gt; 1223: (1.38889%)&lt;BR/&gt; 1222: (1.38889%)&gt;];
}
500--1158[label="1;1pkt 1fpkt"];
500--1653[label="1;35pkt 35fpkt"];
500--1878[label="1;1pkt 1fpkt"];
500--1997[label="0.228571;8pkt 8fpkt"];
500--2002[label="0.428571;15pkt 15fpkt"];
500--2010[label="0.228571;8pkt 8fpkt"];
500--2013[label="0.428571;15pkt 15fpkt"];
500--2017[label="0.228571;8pkt 8fpkt"];
1158--1653[label="1;1pkt 1fpkt"];
1158--1878[label="1;1pkt 1fpkt"];
1653--1878[label="1;1pkt 1fpkt"];
1653--1997[label="0.228571;8pkt 8fpkt"];
1653--2002[label="0.428571;15pkt 15fpkt"];
1653--2010[label="0.228571;8pkt 8fpkt"];
1653--2013[label="0.428571;15pkt 15fpkt"];
1653--2017[label="0.228571;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="112.40.143.134" dst_port="80" src_ip="128.141.151.65"/>
      <filter dst_ip="200.81.176.181" dst_port="80" src_ip="128.141.151.65"/>
      <filter dst_ip="112.40.143.132" dst_port="80" src_ip="128.141.151.65"/>
    </slice>
    <from sec="994482009" usec="0"/>
    <to sec="994483167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
956[label="197.220.72.161;s;8pkt 8fpkt", shape=diamond, color=yellow];
1656[label="196.113.173.117;d;42pkt 42fpkt", shape=hexagon, color=black];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.120.190.93:*, 196.113.173.117:80}[46.6667%]&lt;BR/&gt;{197.220.72.161:*, 196.113.173.117:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4667: (2%)&lt;BR/&gt; 4660: (2%)&lt;BR/&gt; 4658: (2%)&lt;BR/&gt; 4652: (2%)&gt;];
}
956--1656[label="0.625;5pkt 5fpkt"];
1656--2002[label="0.166667;7pkt 7fpkt"];
1656--2013[label="0.166667;7pkt 7fpkt"];
1656--2876[label="0.0238095;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.113.173.117" dst_port="80" src_ip="197.120.190.93"/>
      <filter dst_ip="196.113.173.117" dst_port="80" src_ip="197.220.72.161"/>
    </slice>
    <from sec="994482019" usec="0"/>
    <to sec="994483054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699975,2.1774,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
317[label="208.146.129.130;d;154pkt 154fpkt", shape=diamond, color=yellow];
437[label="147.87.143.104;s;257pkt 257fpkt", shape=diamond, color=yellow];
537[label="147.87.224.166;s;91pkt 91fpkt", shape=diamond, color=yellow];
1448[label="147.87.143.104;s;257pkt 257fpkt", shape=hexagon, color=black];
1658[label="208.146.129.130;d;144pkt 144fpkt", shape=hexagon, color=black];
2323[label="147.87.143.104;257pkt 257fpkt", shape=pentagon, color=darkviolet];
2757[label="147.87.143.104;256pkt 256fpkt", shape=invtriangle, color=brown];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 208.146.129.130:80}[35%]&lt;BR/&gt;{147.87.143.104:*, 205.68.254.152:80}[28.1818%]&lt;BR/&gt;{147.87.224.166:*, *:80}[20.6818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2607: (0.353107%)&lt;BR/&gt; 1164: (0.282486%)&lt;BR/&gt; 1149: (0.282486%)&lt;BR/&gt; 2717: (0.211864%)&gt;];
}
317--437[label="0.181818;28pkt 28fpkt"];
317--537[label="0.373626;34pkt 34fpkt"];
317--571[label="0.903226;28pkt 28fpkt"];
317--1448[label="0.181818;28pkt 28fpkt"];
317--1658[label="1;144pkt 144fpkt"];
317--1710[label="0.0454545;7pkt 7fpkt"];
317--1997[label="0.0779221;12pkt 12fpkt"];
317--2001[label="0.149351;23pkt 23fpkt"];
317--2002[label="0.012987;2pkt 2fpkt"];
317--2004[label="0.0519481;8pkt 8fpkt"];
317--2010[label="0.0779221;12pkt 12fpkt"];
317--2013[label="0.012987;2pkt 2fpkt"];
317--2015[label="0.0519481;8pkt 8fpkt"];
317--2017[label="0.0779221;12pkt 12fpkt"];
317--2021[label="0.0519481;8pkt 8fpkt"];
317--2323[label="0.181818;28pkt 28fpkt"];
317--2757[label="0.181818;28pkt 28fpkt"];
437--1448[label="1;257pkt 257fpkt"];
437--1538[label="0.00581395;1pkt 1fpkt"];
437--1658[label="0.194444;28pkt 28fpkt"];
437--2001[label="0.0622568;16pkt 16fpkt"];
437--2002[label="0.0077821;2pkt 2fpkt"];
437--2004[label="0.0194553;5pkt 5fpkt"];
437--2013[label="0.0077821;2pkt 2fpkt"];
437--2015[label="0.0194553;5pkt 5fpkt"];
437--2021[label="0.0194553;5pkt 5fpkt"];
437--2323[label="1;257pkt 257fpkt"];
437--2757[label="1;256pkt 256fpkt"];
537--1658[label="0.373626;34pkt 34fpkt"];
537--1997[label="0.10989;10pkt 10fpkt"];
537--2001[label="0.131868;12pkt 12fpkt"];
537--2004[label="0.032967;3pkt 3fpkt"];
537--2010[label="0.10989;10pkt 10fpkt"];
537--2015[label="0.032967;3pkt 3fpkt"];
537--2017[label="0.10989;10pkt 10fpkt"];
537--2021[label="0.032967;3pkt 3fpkt"];
1448--1538[label="0.00581395;1pkt 1fpkt"];
1448--1658[label="0.194444;28pkt 28fpkt"];
1448--2001[label="0.0622568;16pkt 16fpkt"];
1448--2002[label="0.0077821;2pkt 2fpkt"];
1448--2004[label="0.0194553;5pkt 5fpkt"];
1448--2013[label="0.0077821;2pkt 2fpkt"];
1448--2015[label="0.0194553;5pkt 5fpkt"];
1448--2021[label="0.0194553;5pkt 5fpkt"];
1448--2323[label="1;257pkt 257fpkt"];
1448--2757[label="1;256pkt 256fpkt"];
1658--1710[label="0.0486111;7pkt 7fpkt"];
1658--1997[label="0.0833333;12pkt 12fpkt"];
1658--2001[label="0.159722;23pkt 23fpkt"];
1658--2002[label="0.0138889;2pkt 2fpkt"];
1658--2004[label="0.0555556;8pkt 8fpkt"];
1658--2010[label="0.0833333;12pkt 12fpkt"];
1658--2013[label="0.0138889;2pkt 2fpkt"];
1658--2015[label="0.0555556;8pkt 8fpkt"];
1658--2017[label="0.0833333;12pkt 12fpkt"];
1658--2021[label="0.0555556;8pkt 8fpkt"];
1658--2323[label="0.194444;28pkt 28fpkt"];
1658--2757[label="0.194444;28pkt 28fpkt"];
2323--2757[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="147.87.224.166"/>
      <filter dst_ip="208.146.129.130" dst_port="80"/>
      <filter dst_ip="205.68.254.152" dst_port="80" src_ip="147.87.143.104"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
661[label="160.164.75.162;d;16pkt 16fpkt", shape=diamond, color=yellow];
768[label="203.170.181.136;s;11pkt 11fpkt", shape=diamond, color=yellow];
1669[label="160.164.75.162;d;14pkt 14fpkt", shape=hexagon, color=black];
1790[label="203.170.181.136;s;11pkt 11fpkt", shape=hexagon, color=black];
2408[label="203.170.181.136;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.170.181.136:80, 160.164.75.162:*}[68.75%]&lt;BR/&gt;{203.170.181.135:80, 160.164.75.162:*}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4713: (4.03226%)&lt;BR/&gt; 4712: (4.03226%)&lt;BR/&gt; 4711: (4.03226%)&lt;BR/&gt; 4710: (4.03226%)&gt;];
}
661--768[label="1;11pkt 11fpkt"];
661--1669[label="1;14pkt 14fpkt"];
661--1790[label="1;11pkt 11fpkt"];
661--2006[label="0.125;2pkt 2fpkt"];
661--2408[label="1;10pkt 10fpkt"];
768--1669[label="0.818182;9pkt 9fpkt"];
768--1790[label="1;11pkt 11fpkt"];
768--2006[label="0.181818;2pkt 2fpkt"];
768--2408[label="1;10pkt 10fpkt"];
1669--1790[label="0.818182;9pkt 9fpkt"];
1669--2006[label="0.142857;2pkt 2fpkt"];
1669--2408[label="0.8;8pkt 8fpkt"];
1790--2006[label="0.181818;2pkt 2fpkt"];
1790--2408[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="160.164.75.162" src_ip="203.170.181.136" src_port="80"/>
      <filter dst_ip="160.164.75.162" src_ip="203.170.181.135" src_port="80"/>
    </slice>
    <from sec="994482290" usec="0"/>
    <to sec="994483032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
765[label="210.198.228.170;s;77pkt 77fpkt", shape=diamond, color=yellow];
842[label="147.87.29.150;d;78pkt 78fpkt", shape=diamond, color=yellow];
1670[label="147.87.29.150;d;78pkt 78fpkt", shape=hexagon, color=black];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.198.228.170:80, 147.87.29.150:*}[98.7179%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5708%)&lt;BR/&gt; 123: (0.858369%)&lt;BR/&gt; 2314: (0.643777%)&lt;BR/&gt; 2275: (0.643777%)&lt;BR/&gt; 2274: (0.643777%)&gt;];
}
765--842[label="1;77pkt 77fpkt"];
765--1670[label="1;77pkt 77fpkt"];
842--1670[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.29.150" src_ip="210.198.228.170" src_port="80"/>
    </slice>
    <from sec="994482332" usec="0"/>
    <to sec="994482724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
261[label="13.65.234.115;s;98pkt 98fpkt", shape=diamond, color=yellow];
1676[label="147.87.110.75;d;16pkt 16fpkt", shape=hexagon, color=black];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{13.65.234.115:80, *:*}[89.9083%]&lt;BR/&gt;{*:80, 147.87.110.75:*}[23.8532%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2138: (0.877193%)&lt;BR/&gt; 2134: (0.877193%)&lt;BR/&gt; 2124: (0.877193%)&lt;BR/&gt; 2121: (0.877193%)&gt;];
}
261--307[label="0.0816327;8pkt 8fpkt"];
261--411[label="0.0204082;2pkt 2fpkt"];
261--944[label="0.340909;15pkt 15fpkt"];
261--949[label="0.166667;4pkt 4fpkt"];
261--1286[label="0.0612245;6pkt 6fpkt"];
261--1344[label="1;19pkt 19fpkt"];
261--1676[label="0.3125;5pkt 5fpkt"];
261--1693[label="0.153061;15pkt 15fpkt"];
261--1903[label="0.0612245;6pkt 6fpkt"];
261--1996[label="0.0816327;8pkt 8fpkt"];
261--2006[label="0.0102041;1pkt 1fpkt"];
261--2008[label="0.0714286;7pkt 7fpkt"];
261--2009[label="0.0816327;8pkt 8fpkt"];
261--2016[label="0.0816327;8pkt 8fpkt"];
261--2350[label="1;97pkt 97fpkt"];
1676--1743[label="0.0625;1pkt 1fpkt"];
1676--2006[label="0.0625;1pkt 1fpkt"];
1676--2350[label="0.3125;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="13.65.234.115" src_port="80"/>
      <filter dst_ip="147.87.110.75" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
627[label="213.67.65.28;s;1pkt 1fpkt", shape=diamond, color=yellow];
1706[label="213.67.65.28;s;1pkt 1fpkt", shape=hexagon, color=black];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.67.65.28:20, 149.177.194.208:61333}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61333: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
627--1594[label="1;1pkt 1fpkt"];
627--1706[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.177.194.208" dst_port="61333" src_ip="213.67.65.28" src_port="20"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699975,2.1774,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
176[label="147.87.132.238;d;572pkt 572fpkt", shape=diamond, color=yellow];
318[label="208.146.129.130;s;152pkt 152fpkt", shape=diamond, color=yellow];
580[label="166.140.17.5;s;48pkt 48fpkt", shape=diamond, color=yellow];
939[label="219.34.193.220;s;54pkt 54fpkt", shape=diamond, color=yellow];
1050[label="110.190.166.62;s;1pkt 1fpkt", shape=diamond, color=yellow];
1113[label="198.170.75.98;s;4pkt 4fpkt", shape=diamond, color=yellow];
1180[label="219.78.84.66;s;2pkt 2fpkt", shape=diamond, color=yellow];
1257[label="110.167.171.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
1258[label="12.54.231.67;s;1pkt 1fpkt", shape=diamond, color=yellow];
1599[label="147.87.224.166;d;78pkt 78fpkt", shape=hexagon, color=black];
1709[label="147.87.132.238;d;474pkt 474fpkt", shape=hexagon, color=black];
1893[label="110.167.171.52;s;1pkt 1fpkt", shape=hexagon, color=black];
1894[label="12.54.231.67;s;1pkt 1fpkt", shape=hexagon, color=black];
2131[label="219.241.194.37;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2387[label="208.146.129.130;151pkt 151fpkt", shape=pentagon, color=darkviolet];
2696[label="219.241.194.37;19pkt 19fpkt", shape=invtriangle, color=brown];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 147.87.132.238:*}[50.0637%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.3737%)&lt;BR/&gt; 6346: (7.40975%)&lt;BR/&gt; 6347: (0.981634%)&lt;BR/&gt; 0: (0.633312%)&lt;BR/&gt; 10000: (0.50665%)&gt;];
}
176--194[label="0.00524476;3pkt 3fpkt"];
176--267[label="0.00174825;1pkt 1fpkt"];
176--318[label="0.0460526;7pkt 7fpkt"];
176--580[label="1;48pkt 48fpkt"];
176--638[label="0.0338983;4pkt 4fpkt"];
176--686[label="0.0909091;12pkt 12fpkt"];
176--725[label="0.027027;1pkt 1fpkt"];
176--819[label="0.084507;6pkt 6fpkt"];
176--853[label="0.111111;5pkt 5fpkt"];
176--939[label="0.981481;53pkt 53fpkt"];
176--1050[label="1;1pkt 1fpkt"];
176--1113[label="1;4pkt 4fpkt"];
176--1151[label="0.0510204;5pkt 5fpkt"];
176--1180[label="0.5;1pkt 1fpkt"];
176--1195[label="1;17pkt 17fpkt"];
176--1230[label="0.047619;5pkt 5fpkt"];
176--1257[label="1;1pkt 1fpkt"];
176--1258[label="1;1pkt 1fpkt"];
176--1398[label="0.00524476;3pkt 3fpkt"];
176--1484[label="0.00174825;1pkt 1fpkt"];
176--1581[label="0.111111;5pkt 5fpkt"];
176--1709[label="1;474pkt 474fpkt"];
176--1712[label="0.0377358;4pkt 4fpkt"];
176--1724[label="0.084507;6pkt 6fpkt"];
176--1780[label="0.030303;1pkt 1fpkt"];
176--1893[label="1;1pkt 1fpkt"];
176--1894[label="1;1pkt 1fpkt"];
176--1933[label="0.00174825;1pkt 1fpkt"];
176--1971[label="0.0425532;4pkt 4fpkt"];
176--1996[label="0.0926573;53pkt 53fpkt"];
176--2006[label="0.0034965;2pkt 2fpkt"];
176--2008[label="0.0192308;11pkt 11fpkt"];
176--2009[label="0.0926573;53pkt 53fpkt"];
176--2016[label="0.0926573;53pkt 53fpkt"];
176--2038[label="0.0485437;5pkt 5fpkt"];
176--2131[label="0.3;6pkt 6fpkt"];
176--2194[label="0.084507;6pkt 6fpkt"];
176--2290[label="0.23913;11pkt 11fpkt"];
176--2387[label="0.0397351;6pkt 6fpkt"];
176--2409[label="0.555556;5pkt 5fpkt"];
176--2431[label="0.0789474;9pkt 9fpkt"];
176--2535[label="0.0902256;12pkt 12fpkt"];
176--2548[label="0.00174825;1pkt 1fpkt"];
176--2585[label="0.0940171;11pkt 11fpkt"];
176--2622[label="0.0423729;5pkt 5fpkt"];
176--2696[label="0.263158;5pkt 5fpkt"];
176--2834[label="0.0909091;12pkt 12fpkt"];
176--2866[label="0.0423729;5pkt 5fpkt"];
176--2892[label="0.0895522;6pkt 6fpkt"];
318--419[label="0.903226;28pkt 28fpkt"];
318--436[label="0.184211;28pkt 28fpkt"];
318--459[label="0.363636;32pkt 32fpkt"];
318--1183[label="0.846154;22pkt 22fpkt"];
318--1353[label="0.184211;28pkt 28fpkt"];
318--1599[label="0.333333;26pkt 26fpkt"];
318--1659[label="1;110pkt 110fpkt"];
318--1709[label="0.0460526;7pkt 7fpkt"];
318--1996[label="0.0789474;12pkt 12fpkt"];
318--2006[label="0.0328947;5pkt 5fpkt"];
318--2008[label="0.0592105;9pkt 9fpkt"];
318--2009[label="0.0789474;12pkt 12fpkt"];
318--2016[label="0.0789474;12pkt 12fpkt"];
318--2387[label="1;151pkt 151fpkt"];
580--1709[label="1;48pkt 48fpkt"];
939--1709[label="0.981481;53pkt 53fpkt"];
1050--1709[label="1;1pkt 1fpkt"];
1113--1709[label="0.25;1pkt 1fpkt"];
1180--1709[label="0.5;1pkt 1fpkt"];
1257--1893[label="1;1pkt 1fpkt"];
1258--1894[label="1;1pkt 1fpkt"];
1599--1659[label="0.333333;26pkt 26fpkt"];
1599--1996[label="0.128205;10pkt 10fpkt"];
1599--2006[label="0.0512821;4pkt 4fpkt"];
1599--2009[label="0.128205;10pkt 10fpkt"];
1599--2016[label="0.128205;10pkt 10fpkt"];
1599--2387[label="0.333333;26pkt 26fpkt"];
1599--2390[label="0.0740741;2pkt 2fpkt"];
1599--2782[label="0.0740741;2pkt 2fpkt"];
1709--1712[label="0.0377358;4pkt 4fpkt"];
1709--1724[label="0.084507;6pkt 6fpkt"];
1709--1780[label="0.030303;1pkt 1fpkt"];
1709--1933[label="0.0021097;1pkt 1fpkt"];
1709--1971[label="0.0425532;4pkt 4fpkt"];
1709--1996[label="0.111814;53pkt 53fpkt"];
1709--2006[label="0.00421941;2pkt 2fpkt"];
1709--2009[label="0.111814;53pkt 53fpkt"];
1709--2016[label="0.111814;53pkt 53fpkt"];
1709--2038[label="0.0485437;5pkt 5fpkt"];
1709--2131[label="0.3;6pkt 6fpkt"];
1709--2194[label="0.084507;6pkt 6fpkt"];
1709--2290[label="0.23913;11pkt 11fpkt"];
1709--2387[label="0.0397351;6pkt 6fpkt"];
1709--2431[label="0.0789474;9pkt 9fpkt"];
1709--2535[label="0.0902256;12pkt 12fpkt"];
1709--2548[label="0.0021097;1pkt 1fpkt"];
1709--2585[label="0.0940171;11pkt 11fpkt"];
1709--2622[label="0.0423729;5pkt 5fpkt"];
1709--2696[label="0.263158;5pkt 5fpkt"];
1709--2834[label="0.0909091;12pkt 12fpkt"];
1709--2866[label="0.0423729;5pkt 5fpkt"];
1709--2892[label="0.0895522;6pkt 6fpkt"];
2131--2696[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.132.238" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
711[label="128.141.128.93;s;15pkt 15fpkt", shape=diamond, color=yellow];
864[label="110.54.138.232;d;3pkt 3fpkt", shape=diamond, color=yellow];
1164[label="110.20.100.12;d;3pkt 3fpkt", shape=diamond, color=yellow];
1714[label="128.141.128.93;s;12pkt 12fpkt", shape=hexagon, color=black];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.141.128.93:*, 110.54.138.232:1214}[53.3333%]&lt;BR/&gt;{128.141.128.93:*, 110.20.100.12:1214}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 3723: (4.54545%)&lt;BR/&gt; 3722: (4.54545%)&lt;BR/&gt; 3721: (4.54545%)&lt;BR/&gt; 64105: (3.0303%)&gt;];
}
711--864[label="1;3pkt 3fpkt"];
711--1164[label="1;3pkt 3fpkt"];
711--1714[label="1;12pkt 12fpkt"];
864--1714[label="0.666667;2pkt 2fpkt"];
1164--1714[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="110.54.138.232" dst_port="1214" src_ip="128.141.128.93"/>
      <filter dst_ip="110.20.100.12" dst_port="1214" src_ip="128.141.128.93"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
737[label="165.22.49.166;d;20pkt 20fpkt", shape=diamond, color=yellow];
738[label="205.177.148.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
1729[label="165.22.49.166;d;2pkt 2fpkt", shape=hexagon, color=black];
1872[label="205.177.148.46;s;1pkt 1fpkt", shape=hexagon, color=black];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1214, 165.22.49.166:*}[95%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (41.6667%)&lt;BR/&gt; 1331: (8.33333%)&lt;BR/&gt; 20: (8.33333%)&lt;BR/&gt; 1747: (4.16667%)&lt;BR/&gt; 1810: (2.08333%)&gt;];
}
737--738[label="1;1pkt 1fpkt"];
737--1729[label="1;2pkt 2fpkt"];
737--1872[label="1;1pkt 1fpkt"];
738--1729[label="1;1pkt 1fpkt"];
738--1872[label="1;1pkt 1fpkt"];
1729--1872[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.22.49.166" src_port="1214"/>
    </slice>
    <from sec="994482008" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
746[label="110.212.222.192;s;1pkt 1fpkt", shape=diamond, color=yellow];
832[label="196.212.185.118;d;5pkt 5fpkt", shape=diamond, color=yellow];
1733[label="196.212.185.118;d;5pkt 5fpkt", shape=hexagon, color=black];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{110.179.186.55:0, 196.212.185.118:0}[20%]&lt;BR/&gt;{210.128.50.82:0, 196.212.185.118:0}[20%]&lt;BR/&gt;{14.185.90.187:0, 196.212.185.118:0}[20%]&lt;BR/&gt;{110.212.222.192:6699, 196.212.185.118:1048}[20%]&lt;BR/&gt;{213.6.112.249:0, 196.212.185.118:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (72.7273%)&lt;BR/&gt; 6699: (13.6364%)&lt;BR/&gt; 1048: (13.6364%)&gt;];
}
746--832[label="1;1pkt 1fpkt"];
746--1733[label="1;1pkt 1fpkt"];
832--1733[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="196.212.185.118" src_ip="213.6.112.249"/>
      <filter dst_ip="196.212.185.118" dst_port="1048" src_ip="110.212.222.192" src_port="6699"/>
      <filter dst_ip="196.212.185.118" src_ip="14.185.90.187"/>
      <filter dst_ip="196.212.185.118" src_ip="210.128.50.82"/>
      <filter dst_ip="196.212.185.118" src_ip="110.179.186.55"/>
    </slice>
    <from sec="994482025" usec="0"/>
    <to sec="994483186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,502,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
836[label="149.168.35.144;d;4pkt 4fpkt", shape=diamond, color=yellow];
837[label="210.198.230.83;s;1pkt 1fpkt", shape=diamond, color=yellow];
1736[label="210.198.230.83;s;1pkt 1fpkt", shape=hexagon, color=black];
2260[label="210.198.230.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.210.210.69:80, 149.168.35.144:52800}[25%]&lt;BR/&gt;{210.198.230.83:1062, 149.168.35.144:22}[25%]&lt;BR/&gt;{197.43.181.162:80, 149.168.35.144:52783}[25%]&lt;BR/&gt;{210.128.37.184:80, 149.168.35.144:52836}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1062: (28.5714%)&lt;BR/&gt; 22: (28.5714%)&lt;BR/&gt; 80: (21.4286%)&lt;BR/&gt; 52836: (7.14286%)&lt;BR/&gt; 52800: (7.14286%)&gt;];
}
836--837[label="1;1pkt 1fpkt"];
836--1736[label="1;1pkt 1fpkt"];
836--2006[label="0.25;1pkt 1fpkt"];
836--2260[label="1;1pkt 1fpkt"];
837--1736[label="1;1pkt 1fpkt"];
837--2260[label="1;1pkt 1fpkt"];
1736--2260[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.168.35.144" dst_port="52836" src_ip="210.128.37.184" src_port="80"/>
      <filter dst_ip="149.168.35.144" dst_port="52783" src_ip="197.43.181.162" src_port="80"/>
      <filter dst_ip="149.168.35.144" dst_port="22" src_ip="210.198.230.83" src_port="1062"/>
      <filter dst_ip="149.168.35.144" dst_port="52800" src_ip="219.210.210.69" src_port="80"/>
    </slice>
    <from sec="994482119" usec="0"/>
    <to sec="994483210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699975,2.1774,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
662[label="160.164.75.162;s;16pkt 16fpkt", shape=diamond, color=yellow];
845[label="203.170.181.136;d;11pkt 11fpkt", shape=diamond, color=yellow];
1739[label="160.164.75.162;s;14pkt 14fpkt", shape=hexagon, color=black];
1740[label="203.170.181.136;d;9pkt 9fpkt", shape=hexagon, color=black];
2475[label="160.164.75.162;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2810[label="160.164.75.162;15pkt 15fpkt", shape=invtriangle, color=brown];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.164.75.162:*, 203.170.181.136:80}[68.75%]&lt;BR/&gt;{160.164.75.162:*, 203.170.181.135:80}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4713: (3.75%)&lt;BR/&gt; 4712: (3.75%)&lt;BR/&gt; 4711: (3.75%)&lt;BR/&gt; 4710: (3.75%)&gt;];
}
662--845[label="1;11pkt 11fpkt"];
662--1739[label="1;14pkt 14fpkt"];
662--1740[label="1;9pkt 9fpkt"];
662--2002[label="0.375;6pkt 6fpkt"];
662--2004[label="0.125;2pkt 2fpkt"];
662--2013[label="0.375;6pkt 6fpkt"];
662--2015[label="0.125;2pkt 2fpkt"];
662--2021[label="0.125;2pkt 2fpkt"];
662--2475[label="1;15pkt 15fpkt"];
662--2810[label="1;15pkt 15fpkt"];
845--1739[label="0.818182;9pkt 9fpkt"];
845--1740[label="1;9pkt 9fpkt"];
845--2002[label="0.181818;2pkt 2fpkt"];
845--2004[label="0.181818;2pkt 2fpkt"];
845--2013[label="0.181818;2pkt 2fpkt"];
845--2015[label="0.181818;2pkt 2fpkt"];
845--2021[label="0.181818;2pkt 2fpkt"];
845--2475[label="0.909091;10pkt 10fpkt"];
845--2810[label="0.909091;10pkt 10fpkt"];
1739--1740[label="1;9pkt 9fpkt"];
1739--2002[label="0.428571;6pkt 6fpkt"];
1739--2004[label="0.142857;2pkt 2fpkt"];
1739--2013[label="0.428571;6pkt 6fpkt"];
1739--2015[label="0.142857;2pkt 2fpkt"];
1739--2021[label="0.142857;2pkt 2fpkt"];
1739--2475[label="0.928571;13pkt 13fpkt"];
1739--2810[label="0.928571;13pkt 13fpkt"];
1740--2002[label="0.222222;2pkt 2fpkt"];
1740--2004[label="0.222222;2pkt 2fpkt"];
1740--2013[label="0.222222;2pkt 2fpkt"];
1740--2015[label="0.222222;2pkt 2fpkt"];
1740--2021[label="0.222222;2pkt 2fpkt"];
1740--2475[label="0.888889;8pkt 8fpkt"];
1740--2810[label="0.888889;8pkt 8fpkt"];
2475--2810[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="203.170.181.136" dst_port="80" src_ip="160.164.75.162"/>
      <filter dst_ip="203.170.181.135" dst_port="80" src_ip="160.164.75.162"/>
    </slice>
    <from sec="994482290" usec="0"/>
    <to sec="994483033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
417[label="196.193.244.210;s;7pkt 7fpkt", shape=diamond, color=yellow];
1742[label="196.193.244.210;s;7pkt 7fpkt", shape=hexagon, color=black];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.193.244.210:80, 147.87.8.182:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3690: (7.14286%)&lt;BR/&gt; 3520: (7.14286%)&lt;BR/&gt; 2776: (7.14286%)&lt;BR/&gt; 2552: (7.14286%)&gt;];
}
417--1742[label="1;7pkt 7fpkt"];
417--2006[label="0.142857;1pkt 1fpkt"];
1742--2006[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.8.182" src_ip="196.193.244.210" src_port="80"/>
    </slice>
    <from sec="994482386" usec="0"/>
    <to sec="994482954" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
777[label="14.143.165.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
846[label="149.168.169.66;s;10pkt 10fpkt", shape=diamond, color=yellow];
1747[label="14.143.165.232;d;1pkt 1fpkt", shape=hexagon, color=black];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.168.169.66:*, 209.155.129.139:80}[50%]&lt;BR/&gt;{149.168.169.66:*, 209.155.129.139:7729}[30%]&lt;BR/&gt;{149.168.169.66:*, *:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.8333%)&lt;BR/&gt; 6699: (16.6667%)&lt;BR/&gt; 7729: (12.5%)&lt;BR/&gt; 2823: (12.5%)&lt;BR/&gt; 2829: (4.16667%)&gt;];
}
777--846[label="1;1pkt 1fpkt"];
777--1747[label="1;1pkt 1fpkt"];
846--1747[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="149.168.169.66"/>
      <filter dst_ip="209.155.129.139" dst_port="80" src_ip="149.168.169.66"/>
      <filter dst_ip="209.155.129.139" dst_port="7729" src_ip="149.168.169.66"/>
    </slice>
    <from sec="994482376" usec="0"/>
    <to sec="994483035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
1033[label="209.235.11.103;s;1pkt 1fpkt", shape=diamond, color=yellow];
1749[label="209.235.11.103;s;1pkt 1fpkt", shape=hexagon, color=black];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.235.11.103:6699, 147.87.132.242:61922}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61922: (50%)&lt;BR/&gt; 6699: (50%)&gt;];
}
1033--1645[label="1;1pkt 1fpkt"];
1033--1749[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.132.242" dst_port="61922" src_ip="209.235.11.103" src_port="6699"/>
    </slice>
    <from sec="994482521" usec="0"/>
    <to sec="994482913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
575[label="13.8.245.165;s;60pkt 60fpkt", shape=diamond, color=yellow];
858[label="147.87.182.19;d;221pkt 221fpkt", shape=diamond, color=yellow];
1468[label="13.8.245.165;s;60pkt 60fpkt", shape=hexagon, color=black];
1750[label="147.87.182.19;d;122pkt 122fpkt", shape=hexagon, color=black];
2067[label="196.14.87.11;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2150[label="72.185.160.44;49pkt 49fpkt", shape=pentagon, color=darkviolet];
2491[label="13.8.245.165;59pkt 59fpkt", shape=pentagon, color=darkviolet];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 147.87.182.19:*}[75.1748%]&lt;BR/&gt;{13.8.245.165:80, *:*}[20.979%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0484%)&lt;BR/&gt; 78: (0.519031%)&lt;BR/&gt; 3087: (0.432526%)&lt;BR/&gt; 3086: (0.432526%)&lt;BR/&gt; 3085: (0.432526%)&gt;];
}
575--858[label="0.0666667;4pkt 4fpkt"];
575--1317[label="0.2;12pkt 12fpkt"];
575--1468[label="1;60pkt 60fpkt"];
575--1750[label="0.0666667;4pkt 4fpkt"];
575--1996[label="0.0333333;2pkt 2fpkt"];
575--2006[label="0.0166667;1pkt 1fpkt"];
575--2008[label="0.1;6pkt 6fpkt"];
575--2009[label="0.0333333;2pkt 2fpkt"];
575--2016[label="0.0333333;2pkt 2fpkt"];
575--2491[label="1;59pkt 59fpkt"];
858--1230[label="0.00952381;1pkt 1fpkt"];
858--1468[label="0.0666667;4pkt 4fpkt"];
858--1750[label="1;122pkt 122fpkt"];
858--2006[label="0.0180995;4pkt 4fpkt"];
858--2008[label="0.285068;63pkt 63fpkt"];
858--2067[label="1;7pkt 7fpkt"];
858--2150[label="0.816327;40pkt 40fpkt"];
858--2491[label="0.0677966;4pkt 4fpkt"];
858--2518[label="0.0416667;1pkt 1fpkt"];
858--2622[label="0.00847458;1pkt 1fpkt"];
858--2627[label="0.015625;1pkt 1fpkt"];
858--2866[label="0.00847458;1pkt 1fpkt"];
1468--1750[label="0.0666667;4pkt 4fpkt"];
1468--1996[label="0.0333333;2pkt 2fpkt"];
1468--2006[label="0.0166667;1pkt 1fpkt"];
1468--2008[label="0.1;6pkt 6fpkt"];
1468--2009[label="0.0333333;2pkt 2fpkt"];
1468--2016[label="0.0333333;2pkt 2fpkt"];
1468--2491[label="1;59pkt 59fpkt"];
1750--2006[label="0.0327869;4pkt 4fpkt"];
1750--2008[label="0.00819672;1pkt 1fpkt"];
1750--2067[label="1;7pkt 7fpkt"];
1750--2150[label="0.0816327;4pkt 4fpkt"];
1750--2491[label="0.0677966;4pkt 4fpkt"];
1750--2518[label="0.0416667;1pkt 1fpkt"];
1750--2622[label="0.00847458;1pkt 1fpkt"];
1750--2627[label="0.015625;1pkt 1fpkt"];
1750--2866[label="0.00847458;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="13.8.245.165" src_port="80"/>
      <filter dst_ip="147.87.182.19" src_port="80"/>
    </slice>
    <from sec="994482034" usec="0"/>
    <to sec="994483213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
866[label="147.87.169.153;s;45pkt 45fpkt", shape=diamond, color=yellow];
867[label="205.55.139.214;d;51pkt 51fpkt", shape=diamond, color=yellow];
1683[label="147.87.169.153;s;45pkt 45fpkt", shape=hexagon, color=black];
1754[label="205.55.139.214;d;31pkt 31fpkt", shape=hexagon, color=black];
1973[label="147.87.169.153;s;45pkt 45fpkt", shape=polygon, color=gold];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.169.153:*, 205.55.139.214:80}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2273: (1.15207%)&lt;BR/&gt; 2272: (1.15207%)&lt;BR/&gt; 2271: (1.15207%)&lt;BR/&gt; 2270: (1.15207%)&gt;];
}
866--867[label="0.977778;44pkt 44fpkt"];
866--1683[label="1;45pkt 45fpkt"];
866--1754[label="0.935484;29pkt 29fpkt"];
866--1973[label="1;45pkt 45fpkt"];
867--1683[label="0.977778;44pkt 44fpkt"];
867--1754[label="1;31pkt 31fpkt"];
867--1973[label="0.977778;44pkt 44fpkt"];
1683--1754[label="0.935484;29pkt 29fpkt"];
1683--1973[label="1;45pkt 45fpkt"];
1754--1973[label="0.935484;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="205.55.139.214" dst_port="80" src_ip="147.87.169.153"/>
    </slice>
    <from sec="994482597" usec="0"/>
    <to sec="994483055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
871[label="128.141.34.67;s;80pkt 80fpkt", shape=diamond, color=yellow];
1756[label="128.141.34.67;s;80pkt 80fpkt", shape=hexagon, color=black];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.141.34.67:*, 193.99.62.128:80}[42.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.125%)&lt;BR/&gt; 443: (6.875%)&lt;BR/&gt; 50191: (0.625%)&lt;BR/&gt; 50190: (0.625%)&lt;BR/&gt; 50188: (0.625%)&gt;];
}
871--1756[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_ip="193.99.62.128" dst_port="80" src_ip="128.141.34.67"/>
    </slice>
    <from sec="994482626" usec="0"/>
    <to sec="994482855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
967[label="209.104.193.177;d;4pkt 4fpkt", shape=diamond, color=yellow];
970[label="128.141.151.16;s;4pkt 4fpkt", shape=diamond, color=yellow];
1761[label="128.141.151.16;s;3pkt 3fpkt", shape=hexagon, color=black];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.141.151.16:1039, 209.104.193.177:21}[25%]&lt;BR/&gt;{128.141.151.16:1040, 209.104.193.177:57338}[25%]&lt;BR/&gt;{128.141.151.16:1041, 209.104.193.177:57341}[25%]&lt;BR/&gt;{128.141.151.16:1042, 209.104.193.177:57354}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57341: (13.6364%)&lt;BR/&gt; 57338: (13.6364%)&lt;BR/&gt; 1041: (13.6364%)&lt;BR/&gt; 1040: (13.6364%)&lt;BR/&gt; 1039: (13.6364%)&gt;];
}
967--970[label="1;4pkt 4fpkt"];
967--1761[label="1;3pkt 3fpkt"];
970--1761[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.104.193.177" dst_port="57354" src_ip="128.141.151.16" src_port="1042"/>
      <filter dst_ip="209.104.193.177" dst_port="57341" src_ip="128.141.151.16" src_port="1041"/>
      <filter dst_ip="209.104.193.177" dst_port="57338" src_ip="128.141.151.16" src_port="1040"/>
      <filter dst_ip="209.104.193.177" dst_port="21" src_ip="128.141.151.16" src_port="1039"/>
    </slice>
    <from sec="994482676" usec="0"/>
    <to sec="994482961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
981[label="13.196.241.72;d;5pkt 5fpkt", shape=diamond, color=yellow];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.20.1.86:3414, 13.196.241.72:80}[20%]&lt;BR/&gt;{146.20.1.86:3421, 13.196.241.72:80}[20%]&lt;BR/&gt;{146.20.1.86:3422, 13.196.241.72:80}[20%]&lt;BR/&gt;{146.20.1.86:3423, 13.196.241.72:80}[20%]&lt;BR/&gt;{146.20.1.86:3425, 13.196.241.72:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3425: (10%)&lt;BR/&gt; 3423: (10%)&lt;BR/&gt; 3422: (10%)&lt;BR/&gt; 3421: (10%)&gt;];
}
981--1762[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="13.196.241.72" dst_port="80" src_ip="146.20.1.86" src_port="3425"/>
      <filter dst_ip="13.196.241.72" dst_port="80" src_ip="146.20.1.86" src_port="3423"/>
      <filter dst_ip="13.196.241.72" dst_port="80" src_ip="146.20.1.86" src_port="3422"/>
      <filter dst_ip="13.196.241.72" dst_port="80" src_ip="146.20.1.86" src_port="3421"/>
      <filter dst_ip="13.196.241.72" dst_port="80" src_ip="146.20.1.86" src_port="3414"/>
    </slice>
    <from sec="994482744" usec="0"/>
    <to sec="994482767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
139[label="128.141.33.229;d;2pkt 2fpkt", shape=diamond, color=yellow];
245[label="162.38.77.152;s;1pkt 1fpkt", shape=diamond, color=yellow];
1770[label="128.141.33.229;d;2pkt 2fpkt", shape=hexagon, color=black];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.38.77.145:1755, 128.141.33.229:3807}[50%]&lt;BR/&gt;{162.38.77.152:3824, 128.141.33.229:3810}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3824: (30%)&lt;BR/&gt; 3810: (30%)&lt;BR/&gt; 3807: (20%)&lt;BR/&gt; 1755: (20%)&gt;];
}
139--245[label="1;1pkt 1fpkt"];
139--1770[label="1;2pkt 2fpkt"];
245--1770[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.33.229" dst_port="3810" src_ip="162.38.77.152" src_port="3824"/>
      <filter dst_ip="128.141.33.229" dst_port="3807" src_ip="162.38.77.145" src_port="1755"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
931[label="165.22.49.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
1786[label="165.22.49.104;d;1pkt 1fpkt", shape=hexagon, color=black];
1986[label="165.22.49.104;d;1pkt 1fpkt", shape=polygon, color=gold];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.78.76.145:7000, 165.22.49.104:1166}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 1166: (50%)&gt;];
}
931--1786[label="1;1pkt 1fpkt"];
931--1986[label="1;1pkt 1fpkt"];
1786--1986[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.22.49.104" dst_port="1166" src_ip="163.78.76.145" src_port="7000"/>
    </slice>
    <from sec="994482039" usec="0"/>
    <to sec="994483185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
1023[label="219.1.186.8;s;2pkt 2fpkt", shape=diamond, color=yellow];
1791[label="219.1.186.8;s;2pkt 2fpkt", shape=hexagon, color=black];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.1.186.8:113, 165.22.57.21:1111}[50%]&lt;BR/&gt;{219.1.186.8:3092, 165.22.57.21:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3092: (25%)&lt;BR/&gt; 1111: (25%)&lt;BR/&gt; 113: (25%)&lt;BR/&gt; 25: (25%)&gt;];
}
1023--1791[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="165.22.57.21" dst_port="25" src_ip="219.1.186.8" src_port="3092"/>
      <filter dst_ip="165.22.57.21" dst_port="1111" src_ip="219.1.186.8" src_port="113"/>
    </slice>
    <from sec="994482386" usec="0"/>
    <to sec="994483148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
873[label="209.97.36.86;d;20pkt 20fpkt", shape=diamond, color=yellow];
1795[label="209.97.36.86;d;20pkt 20fpkt", shape=hexagon, color=black];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.103.47:*, 209.97.36.86:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4905: (2.5%)&lt;BR/&gt; 4846: (2.5%)&lt;BR/&gt; 4845: (2.5%)&lt;BR/&gt; 4834: (2.5%)&gt;];
}
873--1795[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="209.97.36.86" dst_port="80" src_ip="147.87.103.47"/>
    </slice>
    <from sec="994482629" usec="0"/>
    <to sec="994482840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
1047[label="209.97.251.128;s;20pkt 20fpkt", shape=diamond, color=yellow];
1798[label="209.97.251.128;s;20pkt 20fpkt", shape=hexagon, color=black];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.97.251.128:80, 128.141.236.184:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1480: (2.5%)&lt;BR/&gt; 1479: (2.5%)&lt;BR/&gt; 1478: (2.5%)&lt;BR/&gt; 1477: (2.5%)&gt;];
}
1047--1798[label="1;20pkt 20fpkt"];
1047--2006[label="0.3;6pkt 6fpkt"];
1798--2006[label="0.3;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.236.184" src_ip="209.97.251.128" src_port="80"/>
    </slice>
    <from sec="994482649" usec="0"/>
    <to sec="994482866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699975,2.1774,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
962[label="160.164.116.51;d;309pkt 309fpkt", shape=diamond, color=yellow];
983[label="193.233.131.88;s;135pkt 135fpkt", shape=diamond, color=yellow];
1690[label="193.233.131.88;s;135pkt 135fpkt", shape=hexagon, color=black];
1799[label="160.164.116.51;d;213pkt 213fpkt", shape=hexagon, color=black];
2100[label="209.187.173.25;41pkt 41fpkt", shape=pentagon, color=darkviolet];
2185[label="219.8.216.57;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2223[label="219.8.210.72;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2269[label="193.233.131.88;135pkt 135fpkt", shape=pentagon, color=darkviolet];
2429[label="219.221.161.144;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2725[label="219.8.210.72;18pkt 18fpkt", shape=invtriangle, color=brown];
2738[label="193.233.131.88;135pkt 135fpkt", shape=invtriangle, color=brown];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.233.131.88:80, 160.164.116.51:*}[43.5484%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9145%)&lt;BR/&gt; 4388: (0.25641%)&lt;BR/&gt; 4385: (0.25641%)&lt;BR/&gt; 4382: (0.25641%)&lt;BR/&gt; 4379: (0.25641%)&gt;];
}
962--983[label="1;135pkt 135fpkt"];
962--1690[label="1;135pkt 135fpkt"];
962--1799[label="1;213pkt 213fpkt"];
962--2006[label="0.0161812;5pkt 5fpkt"];
962--2008[label="0.148867;46pkt 46fpkt"];
962--2100[label="1;41pkt 41fpkt"];
962--2185[label="1;4pkt 4fpkt"];
962--2223[label="0.944444;17pkt 17fpkt"];
962--2269[label="1;135pkt 135fpkt"];
962--2429[label="1;27pkt 27fpkt"];
962--2725[label="0.944444;17pkt 17fpkt"];
962--2738[label="1;135pkt 135fpkt"];
983--1690[label="1;135pkt 135fpkt"];
983--1799[label="1;135pkt 135fpkt"];
983--2269[label="1;135pkt 135fpkt"];
983--2738[label="1;135pkt 135fpkt"];
1690--1799[label="1;135pkt 135fpkt"];
1690--2269[label="1;135pkt 135fpkt"];
1690--2738[label="1;135pkt 135fpkt"];
1799--2006[label="0.0234742;5pkt 5fpkt"];
1799--2008[label="0.107981;23pkt 23fpkt"];
1799--2100[label="0.536585;22pkt 22fpkt"];
1799--2269[label="1;135pkt 135fpkt"];
1799--2738[label="1;135pkt 135fpkt"];
2223--2725[label="1;18pkt 18fpkt"];
2269--2738[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_ip="160.164.116.51" src_ip="193.233.131.88" src_port="80"/>
    </slice>
    <from sec="994482649" usec="0"/>
    <to sec="994483200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699975,2.1774,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
972[label="149.168.148.133;s;8pkt 8fpkt", shape=diamond, color=yellow];
975[label="12.194.6.61;d;4pkt 4fpkt", shape=diamond, color=yellow];
1686[label="149.168.148.133;s;8pkt 8fpkt", shape=hexagon, color=black];
1801[label="12.194.6.61;d;4pkt 4fpkt", shape=hexagon, color=black];
2400[label="149.168.148.133;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2784[label="149.168.148.133;8pkt 8fpkt", shape=invtriangle, color=brown];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.168.148.133:*, 219.229.156.29:80}[50%]&lt;BR/&gt;{149.168.148.133:*, 12.194.6.61:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.5128%)&lt;BR/&gt; 16515: (7.69231%)&lt;BR/&gt; 14258: (7.69231%)&lt;BR/&gt; 6175: (7.69231%)&lt;BR/&gt; 1345: (7.69231%)&gt;];
}
972--975[label="1;4pkt 4fpkt"];
972--1686[label="1;8pkt 8fpkt"];
972--1801[label="1;4pkt 4fpkt"];
972--2002[label="0.5;4pkt 4fpkt"];
972--2004[label="0.5;4pkt 4fpkt"];
972--2013[label="0.5;4pkt 4fpkt"];
972--2015[label="0.5;4pkt 4fpkt"];
972--2021[label="0.5;4pkt 4fpkt"];
972--2400[label="1;7pkt 7fpkt"];
972--2784[label="1;8pkt 8fpkt"];
975--1686[label="1;4pkt 4fpkt"];
975--1801[label="1;4pkt 4fpkt"];
975--2400[label="0.75;3pkt 3fpkt"];
975--2784[label="1;4pkt 4fpkt"];
1686--1801[label="1;4pkt 4fpkt"];
1686--2002[label="0.5;4pkt 4fpkt"];
1686--2004[label="0.5;4pkt 4fpkt"];
1686--2013[label="0.5;4pkt 4fpkt"];
1686--2015[label="0.5;4pkt 4fpkt"];
1686--2021[label="0.5;4pkt 4fpkt"];
1686--2400[label="1;7pkt 7fpkt"];
1686--2784[label="1;8pkt 8fpkt"];
1801--2400[label="0.75;3pkt 3fpkt"];
1801--2784[label="1;4pkt 4fpkt"];
2400--2784[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="12.194.6.61" src_ip="149.168.148.133"/>
      <filter dst_ip="219.229.156.29" dst_port="80" src_ip="149.168.148.133"/>
    </slice>
    <from sec="994482337" usec="0"/>
    <to sec="994482927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
280[label="147.87.132.238;s;484pkt 484fpkt", shape=diamond, color=yellow];
1100[label="110.190.166.62;d;1pkt 1fpkt", shape=diamond, color=yellow];
1112[label="198.170.75.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
1179[label="219.78.84.66;d;1pkt 1fpkt", shape=diamond, color=yellow];
1190[label="12.54.231.67;d;1pkt 1fpkt", shape=diamond, color=yellow];
1256[label="110.167.171.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
1710[label="147.87.132.238;s;484pkt 484fpkt", shape=hexagon, color=black];
1806[label="198.170.75.98;d;1pkt 1fpkt", shape=hexagon, color=black];
1989[label="198.170.75.98;d;1pkt 1fpkt", shape=polygon, color=gold];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.132.238:*, *:80}[59.7107%]&lt;BR/&gt;{147.87.132.238:*, *:6346}[34.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.641%)&lt;BR/&gt; 6346: (17.2308%)&lt;BR/&gt; 6347: (1.79487%)&lt;BR/&gt; 10000: (0.820513%)&lt;BR/&gt; 33675: (0.25641%)&gt;];
}
280--317[label="0.0454545;7pkt 7fpkt"];
280--420[label="0.292818;53pkt 53fpkt"];
280--513[label="1;48pkt 48fpkt"];
280--728[label="0.0550459;6pkt 6fpkt"];
280--998[label="0.0344828;1pkt 1fpkt"];
280--1100[label="1;1pkt 1fpkt"];
280--1112[label="1;1pkt 1fpkt"];
280--1179[label="1;1pkt 1fpkt"];
280--1190[label="1;1pkt 1fpkt"];
280--1226[label="0.0510204;5pkt 5fpkt"];
280--1256[label="1;1pkt 1fpkt"];
280--1518[label="0.0566038;6pkt 6fpkt"];
280--1658[label="0.0486111;7pkt 7fpkt"];
280--1710[label="1;484pkt 484fpkt"];
280--1721[label="0.0344828;1pkt 1fpkt"];
280--1741[label="0.292818;53pkt 53fpkt"];
280--1806[label="1;1pkt 1fpkt"];
280--1989[label="1;1pkt 1fpkt"];
280--1994[label="0.0344828;1pkt 1fpkt"];
280--1997[label="0.105372;51pkt 51fpkt"];
280--2001[label="0.0144628;7pkt 7fpkt"];
280--2002[label="0.0413223;20pkt 20fpkt"];
280--2004[label="0.00413223;2pkt 2fpkt"];
280--2010[label="0.105372;51pkt 51fpkt"];
280--2013[label="0.0413223;20pkt 20fpkt"];
280--2015[label="0.00413223;2pkt 2fpkt"];
280--2017[label="0.105372;51pkt 51fpkt"];
280--2021[label="0.00413223;2pkt 2fpkt"];
1100--1710[label="1;1pkt 1fpkt"];
1112--1710[label="1;1pkt 1fpkt"];
1112--1806[label="1;1pkt 1fpkt"];
1112--1989[label="1;1pkt 1fpkt"];
1179--1710[label="1;1pkt 1fpkt"];
1190--1710[label="1;1pkt 1fpkt"];
1256--1710[label="1;1pkt 1fpkt"];
1710--1721[label="0.0344828;1pkt 1fpkt"];
1710--1741[label="0.292818;53pkt 53fpkt"];
1710--1806[label="1;1pkt 1fpkt"];
1710--1989[label="1;1pkt 1fpkt"];
1710--1994[label="0.0344828;1pkt 1fpkt"];
1710--1997[label="0.105372;51pkt 51fpkt"];
1710--2001[label="0.0144628;7pkt 7fpkt"];
1710--2002[label="0.0413223;20pkt 20fpkt"];
1710--2004[label="0.00413223;2pkt 2fpkt"];
1710--2010[label="0.105372;51pkt 51fpkt"];
1710--2013[label="0.0413223;20pkt 20fpkt"];
1710--2015[label="0.00413223;2pkt 2fpkt"];
1710--2017[label="0.105372;51pkt 51fpkt"];
1710--2021[label="0.00413223;2pkt 2fpkt"];
1806--1989[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="147.87.132.238"/>
      <filter dst_port="6346" src_ip="147.87.132.238"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
85[label="12.81.116.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
86[label="136.211.59.133;s;15pkt 15fpkt", shape=diamond, color=yellow];
106[label="12.8.180.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
118[label="14.142.104.35;d;1pkt 1fpkt", shape=diamond, color=yellow];
223[label="12.3.202.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
255[label="12.82.198.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
1110[label="13.168.3.133;d;1pkt 1fpkt", shape=diamond, color=yellow];
1251[label="13.158.31.229;d;1pkt 1fpkt", shape=diamond, color=yellow];
1295[label="136.211.59.133;s;14pkt 14fpkt", shape=hexagon, color=black];
1301[label="12.8.180.20;d;1pkt 1fpkt", shape=hexagon, color=black];
1810[label="12.81.116.33;d;1pkt 1fpkt", shape=hexagon, color=black];
1892[label="13.158.31.229;d;1pkt 1fpkt", shape=hexagon, color=black];
1912[label="136.211.59.133;s;10pkt 10fpkt", shape=polygon, color=gold];
1954[label="12.8.180.20;d;1pkt 1fpkt", shape=polygon, color=gold];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.211.59.133:6346, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 3540: (6%)&lt;BR/&gt; 29646: (5%)&lt;BR/&gt; 3828: (4%)&lt;BR/&gt; 3766: (4%)&gt;];
}
85--86[label="1;1pkt 1fpkt"];
85--1295[label="1;1pkt 1fpkt"];
85--1810[label="1;1pkt 1fpkt"];
85--1912[label="1;1pkt 1fpkt"];
86--106[label="1;1pkt 1fpkt"];
86--118[label="1;1pkt 1fpkt"];
86--223[label="1;1pkt 1fpkt"];
86--255[label="1;1pkt 1fpkt"];
86--1110[label="1;1pkt 1fpkt"];
86--1251[label="1;1pkt 1fpkt"];
86--1295[label="1;14pkt 14fpkt"];
86--1301[label="1;1pkt 1fpkt"];
86--1810[label="1;1pkt 1fpkt"];
86--1892[label="1;1pkt 1fpkt"];
86--1912[label="1;10pkt 10fpkt"];
86--1954[label="1;1pkt 1fpkt"];
106--1295[label="1;1pkt 1fpkt"];
106--1301[label="1;1pkt 1fpkt"];
106--1912[label="1;1pkt 1fpkt"];
106--1954[label="1;1pkt 1fpkt"];
118--1295[label="1;1pkt 1fpkt"];
118--1912[label="1;1pkt 1fpkt"];
223--1295[label="1;1pkt 1fpkt"];
223--1912[label="1;1pkt 1fpkt"];
255--1295[label="1;1pkt 1fpkt"];
255--1912[label="1;1pkt 1fpkt"];
1110--1295[label="1;1pkt 1fpkt"];
1251--1892[label="1;1pkt 1fpkt"];
1295--1301[label="1;1pkt 1fpkt"];
1295--1810[label="1;1pkt 1fpkt"];
1295--1912[label="1;10pkt 10fpkt"];
1295--1954[label="1;1pkt 1fpkt"];
1301--1912[label="1;1pkt 1fpkt"];
1301--1954[label="1;1pkt 1fpkt"];
1810--1912[label="1;1pkt 1fpkt"];
1912--1954[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="136.211.59.133" src_port="6346"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
163[label="197.11.31.204;d;280pkt 280fpkt", shape=diamond, color=yellow];
487[label="75.129.71.45;s;322pkt 322fpkt", shape=diamond, color=yellow];
1816[label="197.11.31.204;d;268pkt 268fpkt", shape=hexagon, color=black];
2289[label="211.3.76.94;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 197.11.31.204:6667}[25.2033%]&lt;BR/&gt;{75.129.71.45:*, 197.11.31.204:*}[22.7642%]&lt;BR/&gt;{75.129.71.45:*, 197.11.31.205:6667}[21.3415%]&lt;BR/&gt;{75.129.71.45:113, 197.11.31.205:*}[21.3415%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (23.0068%)&lt;BR/&gt; 113: (19.9317%)&lt;BR/&gt; 6665: (1.13895%)&lt;BR/&gt; 1080: (1.13895%)&lt;BR/&gt; 6666: (1.02506%)&gt;];
}
163--487[label="0.4;112pkt 112fpkt"];
163--1816[label="1;268pkt 268fpkt"];
163--2289[label="0.75;6pkt 6fpkt"];
487--1364[label="0.434783;130pkt 130fpkt"];
487--1816[label="0.38806;104pkt 104fpkt"];
1816--2289[label="0.75;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="197.11.31.204" src_ip="75.129.71.45"/>
      <filter dst_ip="197.11.31.204" dst_port="6667"/>
      <filter dst_ip="197.11.31.205" src_ip="75.129.71.45" src_port="113"/>
      <filter dst_ip="197.11.31.205" dst_port="6667" src_ip="75.129.71.45"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,010,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
1012[label="165.22.36.168;d;391pkt 391fpkt", shape=diamond, color=yellow];
1149[label="129.183.205.168;s;351pkt 351fpkt", shape=diamond, color=yellow];
1824[label="165.22.36.168;d;391pkt 391fpkt", shape=hexagon, color=black];
1873[label="129.183.205.168;s;351pkt 351fpkt", shape=hexagon, color=black];
1995[label="129.183.205.168;s;351pkt 351fpkt", shape=polygon, color=gold];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.183.205.168:*, 165.22.36.168:6346}[89.7698%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 31425: (0.13624%)&lt;BR/&gt; 31410: (0.13624%)&lt;BR/&gt; 31405: (0.13624%)&lt;BR/&gt; 31395: (0.13624%)&gt;];
}
1012--1149[label="1;351pkt 351fpkt"];
1012--1824[label="1;391pkt 391fpkt"];
1012--1873[label="1;351pkt 351fpkt"];
1012--1995[label="1;351pkt 351fpkt"];
1149--1824[label="1;351pkt 351fpkt"];
1149--1873[label="1;351pkt 351fpkt"];
1149--1995[label="1;351pkt 351fpkt"];
1824--1873[label="1;351pkt 351fpkt"];
1824--1995[label="1;351pkt 351fpkt"];
1873--1995[label="1;351pkt 351fpkt"];
</description>
    <slice>
      <filter dst_ip="165.22.36.168" dst_port="6346" src_ip="129.183.205.168"/>
    </slice>
    <from sec="994482009" usec="0"/>
    <to sec="994483187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
830[label="165.22.36.38;d;10pkt 10fpkt", shape=diamond, color=yellow];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.32.20.62:21, 165.22.36.38:*}[30%]&lt;BR/&gt;{*:53, 165.22.36.38:2744}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (15%)&lt;BR/&gt; 2744: (10%)&lt;BR/&gt; 53: (10%)&lt;BR/&gt; 2922: (5%)&lt;BR/&gt; 2921: (5%)&gt;];
}
830--1826[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="165.22.36.38" src_ip="203.32.20.62" src_port="21"/>
      <filter dst_ip="165.22.36.38" dst_port="2744" src_port="53"/>
    </slice>
    <from sec="994482018" usec="0"/>
    <to sec="994483098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.918716,2.16821,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
485[label="196.217.132.144;d;276pkt 276fpkt", shape=diamond, color=yellow];
1162[label="192.50.53.69;s;60pkt 60fpkt", shape=diamond, color=yellow];
1635[label="196.217.132.144;d;241pkt 241fpkt", shape=hexagon, color=black];
1829[label="192.50.53.69;s;57pkt 57fpkt", shape=hexagon, color=black];
1984[label="196.217.132.144;d;221pkt 221fpkt", shape=polygon, color=gold];
2476[label="85.21.60.163;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2501[label="166.140.16.171;42pkt 42fpkt", shape=pentagon, color=darkviolet];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.50.53.69:80, 196.217.132.144:*}[21.6606%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.4102%)&lt;BR/&gt; 53: (10.4213%)&lt;BR/&gt; 1024: (4.102%)&lt;BR/&gt; 0: (0.997783%)&lt;BR/&gt; 2080: (0.332594%)&gt;];
}
485--683[label="0.0185185;1pkt 1fpkt"];
485--689[label="0.0166667;1pkt 1fpkt"];
485--692[label="0.015625;1pkt 1fpkt"];
485--1078[label="0.0147059;1pkt 1fpkt"];
485--1162[label="1;60pkt 60fpkt"];
485--1398[label="0.0434783;12pkt 12fpkt"];
485--1532[label="0.0232558;1pkt 1fpkt"];
485--1635[label="1;241pkt 241fpkt"];
485--1829[label="1;57pkt 57fpkt"];
485--1984[label="1;221pkt 221fpkt"];
485--1996[label="0.0326087;9pkt 9fpkt"];
485--1999[label="0.00362319;1pkt 1fpkt"];
485--2000[label="0.00724638;2pkt 2fpkt"];
485--2003[label="0.0253623;7pkt 7fpkt"];
485--2005[label="0.0144928;4pkt 4fpkt"];
485--2006[label="0.0144928;4pkt 4fpkt"];
485--2007[label="0.00724638;2pkt 2fpkt"];
485--2008[label="0.0289855;8pkt 8fpkt"];
485--2009[label="0.0326087;9pkt 9fpkt"];
485--2012[label="0.00362319;1pkt 1fpkt"];
485--2014[label="0.0253623;7pkt 7fpkt"];
485--2016[label="0.0326087;9pkt 9fpkt"];
485--2019[label="0.00362319;1pkt 1fpkt"];
485--2020[label="0.0253623;7pkt 7fpkt"];
485--2425[label="0.0147059;1pkt 1fpkt"];
485--2476[label="1;5pkt 5fpkt"];
485--2501[label="0.97619;41pkt 41fpkt"];
485--2788[label="0.0149254;1pkt 1fpkt"];
1162--1635[label="0.95;57pkt 57fpkt"];
1162--1829[label="1;57pkt 57fpkt"];
1162--1984[label="0.766667;46pkt 46fpkt"];
1162--2006[label="0.0166667;1pkt 1fpkt"];
1162--2008[label="0.0833333;5pkt 5fpkt"];
1635--1829[label="1;57pkt 57fpkt"];
1635--1984[label="1;221pkt 221fpkt"];
1635--1996[label="0.0373444;9pkt 9fpkt"];
1635--1999[label="0.00414938;1pkt 1fpkt"];
1635--2000[label="0.00829876;2pkt 2fpkt"];
1635--2003[label="0.0290456;7pkt 7fpkt"];
1635--2005[label="0.0165975;4pkt 4fpkt"];
1635--2006[label="0.0165975;4pkt 4fpkt"];
1635--2007[label="0.00829876;2pkt 2fpkt"];
1635--2008[label="0.033195;8pkt 8fpkt"];
1635--2009[label="0.0373444;9pkt 9fpkt"];
1635--2012[label="0.00414938;1pkt 1fpkt"];
1635--2014[label="0.0290456;7pkt 7fpkt"];
1635--2016[label="0.0373444;9pkt 9fpkt"];
1635--2019[label="0.00414938;1pkt 1fpkt"];
1635--2020[label="0.0290456;7pkt 7fpkt"];
1635--2425[label="0.0147059;1pkt 1fpkt"];
1635--2476[label="1;5pkt 5fpkt"];
1635--2501[label="0.904762;38pkt 38fpkt"];
1635--2788[label="0.0149254;1pkt 1fpkt"];
1829--1984[label="0.807018;46pkt 46fpkt"];
1829--2006[label="0.0175439;1pkt 1fpkt"];
1829--2008[label="0.0877193;5pkt 5fpkt"];
1984--1996[label="0.040724;9pkt 9fpkt"];
1984--1999[label="0.00452489;1pkt 1fpkt"];
1984--2000[label="0.00904977;2pkt 2fpkt"];
1984--2003[label="0.0316742;7pkt 7fpkt"];
1984--2005[label="0.0180995;4pkt 4fpkt"];
1984--2006[label="0.0180995;4pkt 4fpkt"];
1984--2007[label="0.00904977;2pkt 2fpkt"];
1984--2008[label="0.00452489;1pkt 1fpkt"];
1984--2009[label="0.040724;9pkt 9fpkt"];
1984--2012[label="0.00452489;1pkt 1fpkt"];
1984--2014[label="0.0316742;7pkt 7fpkt"];
1984--2016[label="0.040724;9pkt 9fpkt"];
1984--2019[label="0.00452489;1pkt 1fpkt"];
1984--2020[label="0.0316742;7pkt 7fpkt"];
1984--2425[label="0.0147059;1pkt 1fpkt"];
1984--2476[label="1;5pkt 5fpkt"];
1984--2501[label="0.833333;35pkt 35fpkt"];
1984--2788[label="0.0149254;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.217.132.144" src_ip="192.50.53.69" src_port="80"/>
    </slice>
    <from sec="994482001" usec="0"/>
    <to sec="994483201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
440[label="147.87.136.233;s;115pkt 115fpkt", shape=diamond, color=yellow];
754[label="192.237.123.46;d;12pkt 12fpkt", shape=diamond, color=yellow];
782[label="147.87.136.43;s;156pkt 156fpkt", shape=diamond, color=yellow];
952[label="13.197.52.254;d;67pkt 67fpkt", shape=diamond, color=yellow];
1570[label="192.237.123.46;d;12pkt 12fpkt", shape=hexagon, color=black];
1679[label="13.197.52.254;d;68pkt 68fpkt", shape=hexagon, color=black];
1830[label="147.87.136.43;s;156pkt 156fpkt", shape=hexagon, color=black];
2632[label="147.87.136.233;115pkt 115fpkt", shape=pentagon, color=darkviolet];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.136.43:*, *:80}[46.9697%]&lt;BR/&gt;{147.87.136.233:*, *:80}[34.2424%]&lt;BR/&gt;{*:*, 13.197.52.254:80}[24.2424%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.572%)&lt;BR/&gt; 81: (0.42796%)&lt;BR/&gt; 1347: (0.285307%)&lt;BR/&gt; 1345: (0.285307%)&lt;BR/&gt; 1342: (0.285307%)&gt;];
}
440--754[label="0.833333;10pkt 10fpkt"];
440--1570[label="0.833333;10pkt 10fpkt"];
440--1679[label="0.0147059;1pkt 1fpkt"];
440--2001[label="0.165217;19pkt 19fpkt"];
440--2002[label="0.165217;19pkt 19fpkt"];
440--2013[label="0.165217;19pkt 19fpkt"];
440--2632[label="1;115pkt 115fpkt"];
754--782[label="0.166667;2pkt 2fpkt"];
754--1570[label="1;12pkt 12fpkt"];
754--1830[label="0.166667;2pkt 2fpkt"];
754--2001[label="0.166667;2pkt 2fpkt"];
754--2002[label="0.25;3pkt 3fpkt"];
754--2013[label="0.25;3pkt 3fpkt"];
754--2632[label="0.833333;10pkt 10fpkt"];
782--952[label="0.119403;8pkt 8fpkt"];
782--1226[label="0.0102041;1pkt 1fpkt"];
782--1570[label="0.166667;2pkt 2fpkt"];
782--1679[label="0.117647;8pkt 8fpkt"];
782--1830[label="1;156pkt 156fpkt"];
782--2004[label="0.0961538;15pkt 15fpkt"];
782--2015[label="0.0961538;15pkt 15fpkt"];
782--2021[label="0.0961538;15pkt 15fpkt"];
952--1679[label="1;67pkt 67fpkt"];
952--1830[label="0.119403;8pkt 8fpkt"];
1570--1830[label="0.166667;2pkt 2fpkt"];
1570--2001[label="0.166667;2pkt 2fpkt"];
1570--2002[label="0.25;3pkt 3fpkt"];
1570--2013[label="0.25;3pkt 3fpkt"];
1570--2632[label="0.833333;10pkt 10fpkt"];
1679--1830[label="0.117647;8pkt 8fpkt"];
1679--2632[label="0.0147059;1pkt 1fpkt"];
1830--2004[label="0.0961538;15pkt 15fpkt"];
1830--2015[label="0.0961538;15pkt 15fpkt"];
1830--2021[label="0.0961538;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="147.87.136.43"/>
      <filter dst_port="80" src_ip="147.87.136.233"/>
      <filter dst_ip="13.197.52.254" dst_port="80"/>
    </slice>
    <from sec="994482123" usec="0"/>
    <to sec="994483116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34151,2.26364,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
22[label="147.87.8.182d;1pkt 1fpkt", shape=rectangle, color=red];
928[label="196.113.173.117;s;40pkt 40fpkt", shape=diamond, color=yellow];
955[label="197.220.72.161;d;8pkt 8fpkt", shape=diamond, color=yellow];
1194[label="197.120.190.93;d;21pkt 21fpkt", shape=diamond, color=yellow];
1827[label="196.113.173.117;s;40pkt 40fpkt", shape=hexagon, color=black];
1833[label="197.220.72.161;d;8pkt 8fpkt", shape=hexagon, color=black];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.113.173.117:80, 197.120.190.93:*}[48.8372%]&lt;BR/&gt;{196.113.173.117:80, 197.220.72.161:*}[23.2558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4667: (2.11864%)&lt;BR/&gt; 4660: (1.69492%)&lt;BR/&gt; 4658: (1.69492%)&lt;BR/&gt; 4652: (1.69492%)&gt;];
}
22--928[label="1;1pkt 1fpkt"];
22--955[label="1;1pkt 1fpkt"];
22--1827[label="1;1pkt 1fpkt"];
22--1833[label="1;1pkt 1fpkt"];
928--955[label="0.625;5pkt 5fpkt"];
928--1194[label="1;21pkt 21fpkt"];
928--1827[label="1;40pkt 40fpkt"];
928--1833[label="0.625;5pkt 5fpkt"];
928--1996[label="0.025;1pkt 1fpkt"];
928--2006[label="0.075;3pkt 3fpkt"];
928--2008[label="0.4;16pkt 16fpkt"];
928--2009[label="0.025;1pkt 1fpkt"];
928--2016[label="0.025;1pkt 1fpkt"];
955--1827[label="0.625;5pkt 5fpkt"];
955--1833[label="1;8pkt 8fpkt"];
955--2006[label="0.25;2pkt 2fpkt"];
1194--1827[label="1;21pkt 21fpkt"];
1194--2008[label="0.761905;16pkt 16fpkt"];
1827--1833[label="0.625;5pkt 5fpkt"];
1827--1996[label="0.025;1pkt 1fpkt"];
1827--2006[label="0.075;3pkt 3fpkt"];
1827--2008[label="0.4;16pkt 16fpkt"];
1827--2009[label="0.025;1pkt 1fpkt"];
1827--2016[label="0.025;1pkt 1fpkt"];
1833--2006[label="0.25;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="197.120.190.93" src_ip="196.113.173.117" src_port="80"/>
      <filter dst_ip="197.220.72.161" src_ip="196.113.173.117" src_port="80"/>
    </slice>
    <from sec="994482019" usec="0"/>
    <to sec="994483054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
1099[label="128.141.129.218;s;10pkt 10fpkt", shape=diamond, color=yellow];
1105[label="75.153.69.167;d;10pkt 10fpkt", shape=diamond, color=yellow];
1834[label="128.141.129.218;s;10pkt 10fpkt", shape=hexagon, color=black];
2600[label="128.141.129.218;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.141.129.218:*, 75.153.69.167:6112}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6112: (44.8718%)&lt;BR/&gt; 0: (10.2564%)&lt;BR/&gt; 1042: (5.12821%)&lt;BR/&gt; 1041: (5.12821%)&lt;BR/&gt; 1040: (5.12821%)&gt;];
}
1099--1105[label="1;10pkt 10fpkt"];
1099--1834[label="1;10pkt 10fpkt"];
1099--2600[label="1;9pkt 9fpkt"];
1105--1834[label="1;10pkt 10fpkt"];
1105--2600[label="1;9pkt 9fpkt"];
1834--2600[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="75.153.69.167" dst_port="6112" src_ip="128.141.129.218"/>
    </slice>
    <from sec="994482714" usec="0"/>
    <to sec="994483195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
147[label="13.134.219.149;d;1pkt 1fpkt", shape=diamond, color=yellow];
1835[label="13.134.219.149;d;1pkt 1fpkt", shape=hexagon, color=black];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.165.21:1148, 13.134.219.149:41015}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41015: (50%)&lt;BR/&gt; 1148: (50%)&gt;];
}
147--1835[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="13.134.219.149" dst_port="41015" src_ip="147.87.165.21" src_port="1148"/>
    </slice>
    <from sec="994482768" usec="0"/>
    <to sec="994483066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
1054[label="149.168.44.198;s;44pkt 44fpkt", shape=diamond, color=yellow];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.168.44.198:*, 219.48.181.60:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2253: (1.13636%)&lt;BR/&gt; 2250: (1.13636%)&lt;BR/&gt; 2249: (1.13636%)&lt;BR/&gt; 2246: (1.13636%)&gt;];
}
1054--1836[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="219.48.181.60" dst_port="80" src_ip="149.168.44.198"/>
    </slice>
    <from sec="994482775" usec="0"/>
    <to sec="994483109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
1175[label="13.196.241.124;s;5pkt 5fpkt", shape=diamond, color=yellow];
1839[label="13.196.241.124;s;5pkt 5fpkt", shape=hexagon, color=black];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{13.196.241.124:80, 128.141.128.5:1202}[20%]&lt;BR/&gt;{13.196.241.124:80, 128.141.128.5:1203}[20%]&lt;BR/&gt;{13.196.241.124:80, 128.141.128.5:1215}[20%]&lt;BR/&gt;{13.196.241.124:80, 128.141.128.5:1224}[20%]&lt;BR/&gt;{13.196.241.124:80, 128.141.128.5:1229}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1229: (10%)&lt;BR/&gt; 1224: (10%)&lt;BR/&gt; 1215: (10%)&lt;BR/&gt; 1203: (10%)&gt;];
}
1175--1839[label="1;5pkt 5fpkt"];
1175--2008[label="0.2;1pkt 1fpkt"];
1839--2008[label="0.2;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.128.5" dst_port="1229" src_ip="13.196.241.124" src_port="80"/>
      <filter dst_ip="128.141.128.5" dst_port="1224" src_ip="13.196.241.124" src_port="80"/>
      <filter dst_ip="128.141.128.5" dst_port="1215" src_ip="13.196.241.124" src_port="80"/>
      <filter dst_ip="128.141.128.5" dst_port="1203" src_ip="13.196.241.124" src_port="80"/>
      <filter dst_ip="128.141.128.5" dst_port="1202" src_ip="13.196.241.124" src_port="80"/>
    </slice>
    <from sec="994482844" usec="0"/>
    <to sec="994483069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
542[label="160.164.82.76;d;3pkt 3fpkt", shape=diamond, color=yellow];
625[label="219.74.28.160;s;3pkt 3fpkt", shape=diamond, color=yellow];
1483[label="219.74.28.160;s;4pkt 4fpkt", shape=hexagon, color=black];
1842[label="160.164.82.76;d;4pkt 4fpkt", shape=hexagon, color=black];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.74.28.160:80, 160.164.82.76:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2139: (10.7143%)&lt;BR/&gt; 2138: (10.7143%)&lt;BR/&gt; 2137: (10.7143%)&lt;BR/&gt; 2132: (7.14286%)&gt;];
}
542--625[label="1;3pkt 3fpkt"];
542--1842[label="1;3pkt 3fpkt"];
542--2008[label="0.666667;2pkt 2fpkt"];
625--1842[label="1;3pkt 3fpkt"];
625--2008[label="0.666667;2pkt 2fpkt"];
1483--1842[label="0.25;1pkt 1fpkt"];
1483--1996[label="0.25;1pkt 1fpkt"];
1483--2009[label="0.25;1pkt 1fpkt"];
1483--2016[label="0.25;1pkt 1fpkt"];
1842--1996[label="0.25;1pkt 1fpkt"];
1842--2008[label="0.5;2pkt 2fpkt"];
1842--2009[label="0.25;1pkt 1fpkt"];
1842--2016[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.164.82.76" src_ip="219.74.28.160" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
1191[label="208.233.231.58;s;53pkt 53fpkt", shape=diamond, color=yellow];
1845[label="208.233.231.58;s;53pkt 53fpkt", shape=hexagon, color=black];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.233.231.58:80, 196.212.9.122:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2355: (0.943396%)&lt;BR/&gt; 2352: (0.943396%)&lt;BR/&gt; 2351: (0.943396%)&lt;BR/&gt; 2350: (0.943396%)&gt;];
}
1191--1845[label="1;53pkt 53fpkt"];
1191--2008[label="0.943396;50pkt 50fpkt"];
1845--2008[label="0.943396;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="196.212.9.122" src_ip="208.233.231.58" src_port="80"/>
    </slice>
    <from sec="994482984" usec="0"/>
    <to sec="994483014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
539[label="165.22.4.188;s;7pkt 7fpkt", shape=diamond, color=yellow];
1850[label="165.22.4.188;s;7pkt 7fpkt", shape=hexagon, color=black];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.22.4.188:15172, 196.185.93.21:*}[42.8571%]&lt;BR/&gt;{165.22.4.188:*, *:25}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15172: (21.4286%)&lt;BR/&gt; 25: (21.4286%)&lt;BR/&gt; 10196: (7.14286%)&lt;BR/&gt; 2452: (7.14286%)&lt;BR/&gt; 2445: (7.14286%)&gt;];
}
539--1850[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="165.22.4.188"/>
      <filter dst_ip="196.185.93.21" src_ip="165.22.4.188" src_port="15172"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.723219,2.20849,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
237[label="219.74.28.183;s;45pkt 45fpkt", shape=diamond, color=yellow];
1852[label="219.74.28.183;s;45pkt 45fpkt", shape=hexagon, color=black];
2826[label="219.74.28.183;44pkt 44fpkt", shape=invtriangle, color=brown];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.74.28.183:80, 196.120.26.60:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48326: (1.1194%)&lt;BR/&gt; 48317: (1.1194%)&lt;BR/&gt; 48316: (1.1194%)&lt;BR/&gt; 48315: (1.1194%)&gt;];
}
237--1693[label="1;45pkt 45fpkt"];
237--1852[label="1;45pkt 45fpkt"];
237--1996[label="0.0222222;1pkt 1fpkt"];
237--2006[label="0.0666667;3pkt 3fpkt"];
237--2008[label="0.111111;5pkt 5fpkt"];
237--2009[label="0.0222222;1pkt 1fpkt"];
237--2016[label="0.0222222;1pkt 1fpkt"];
237--2526[label="1;44pkt 44fpkt"];
237--2826[label="1;44pkt 44fpkt"];
1852--1996[label="0.0222222;1pkt 1fpkt"];
1852--2006[label="0.0666667;3pkt 3fpkt"];
1852--2008[label="0.111111;5pkt 5fpkt"];
1852--2009[label="0.0222222;1pkt 1fpkt"];
1852--2016[label="0.0222222;1pkt 1fpkt"];
1852--2526[label="1;44pkt 44fpkt"];
1852--2826[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="196.120.26.60" src_ip="219.74.28.183" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
392[label="165.22.6.200;d;3pkt 3fpkt", shape=diamond, color=yellow];
393[label="200.16.159.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
1858[label="165.22.6.200;d;3pkt 3fpkt", shape=hexagon, color=black];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.76.172.2:23226, 165.22.6.200:1195}[33.3333%]&lt;BR/&gt;{200.16.159.17:21212, 165.22.6.200:41002}[33.3333%]&lt;BR/&gt;{13.149.14.193:21, 165.22.6.200:1623}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41002: (21.4286%)&lt;BR/&gt; 21212: (21.4286%)&lt;BR/&gt; 23226: (14.2857%)&lt;BR/&gt; 1623: (14.2857%)&lt;BR/&gt; 1195: (14.2857%)&gt;];
}
392--393[label="1;1pkt 1fpkt"];
392--1858[label="1;3pkt 3fpkt"];
393--1858[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.22.6.200" dst_port="1623" src_ip="13.149.14.193" src_port="21"/>
      <filter dst_ip="165.22.6.200" dst_port="41002" src_ip="200.16.159.17" src_port="21212"/>
      <filter dst_ip="165.22.6.200" dst_port="1195" src_ip="195.76.172.2" src_port="23226"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10352,2.18513,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
1215[label="147.87.103.64;s;15pkt 15fpkt", shape=diamond, color=yellow];
1281[label="194.138.160.112;d;2pkt 2fpkt", shape=diamond, color=yellow];
1867[label="147.87.103.64;s;15pkt 15fpkt", shape=hexagon, color=black];
1900[label="194.138.160.112;d;2pkt 2fpkt", shape=hexagon, color=black];
2203[label="147.87.103.64;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2720[label="147.87.103.64;15pkt 15fpkt", shape=invtriangle, color=brown];
2893[label="147.87.103.64;12pkt 12fpkt", shape=invhouse, color=bisque];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.103.64:*, 75.82.84.51:113}[20%]&lt;BR/&gt;{147.87.103.64:25, 75.82.84.51:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (26.3158%)&lt;BR/&gt; 113: (23.6842%)&lt;BR/&gt; 62913: (4.60526%)&lt;BR/&gt; 33997: (4.60526%)&lt;BR/&gt; 62808: (3.28947%)&gt;];
}
1215--1281[label="1;2pkt 2fpkt"];
1215--1867[label="1;15pkt 15fpkt"];
1215--1900[label="1;2pkt 2fpkt"];
1215--2203[label="1;15pkt 15fpkt"];
1215--2720[label="1;15pkt 15fpkt"];
1215--2893[label="1;12pkt 12fpkt"];
1281--1867[label="1;2pkt 2fpkt"];
1281--1900[label="1;2pkt 2fpkt"];
1281--2203[label="1;2pkt 2fpkt"];
1281--2720[label="1;2pkt 2fpkt"];
1281--2893[label="1;2pkt 2fpkt"];
1867--1900[label="1;2pkt 2fpkt"];
1867--2203[label="1;15pkt 15fpkt"];
1867--2720[label="1;15pkt 15fpkt"];
1867--2893[label="1;12pkt 12fpkt"];
1900--2203[label="1;2pkt 2fpkt"];
1900--2720[label="1;2pkt 2fpkt"];
1900--2893[label="1;2pkt 2fpkt"];
2203--2720[label="1;15pkt 15fpkt"];
2203--2893[label="1;12pkt 12fpkt"];
2720--2893[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="75.82.84.51" src_ip="147.87.103.64" src_port="25"/>
      <filter dst_ip="75.82.84.51" dst_port="113" src_ip="147.87.103.64"/>
    </slice>
    <from sec="994482006" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
745[label="165.22.33.13;s;29pkt 29fpkt", shape=diamond, color=yellow];
848[label="219.88.57.43;d;10pkt 10fpkt", shape=diamond, color=yellow];
1674[label="219.88.57.43;d;10pkt 10fpkt", shape=hexagon, color=black];
1876[label="165.22.33.13;s;29pkt 29fpkt", shape=hexagon, color=black];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.22.33.13:80, 219.88.57.43:*}[34.4828%]&lt;BR/&gt;{165.22.33.13:80, 72.93.85.133:*}[27.5862%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1443: (2.5641%)&lt;BR/&gt; 1442: (2.5641%)&lt;BR/&gt; 1441: (2.5641%)&lt;BR/&gt; 1440: (2.5641%)&gt;];
}
745--848[label="1;10pkt 10fpkt"];
745--1674[label="1;10pkt 10fpkt"];
745--1876[label="1;29pkt 29fpkt"];
745--1996[label="0.0344828;1pkt 1fpkt"];
745--2006[label="0.206897;6pkt 6fpkt"];
745--2008[label="0.137931;4pkt 4fpkt"];
745--2009[label="0.0344828;1pkt 1fpkt"];
745--2016[label="0.0344828;1pkt 1fpkt"];
848--1674[label="1;10pkt 10fpkt"];
848--1876[label="1;10pkt 10fpkt"];
848--2006[label="0.5;5pkt 5fpkt"];
848--2008[label="0.3;3pkt 3fpkt"];
1674--1876[label="1;10pkt 10fpkt"];
1674--2006[label="0.5;5pkt 5fpkt"];
1674--2008[label="0.3;3pkt 3fpkt"];
1876--1996[label="0.0344828;1pkt 1fpkt"];
1876--2006[label="0.206897;6pkt 6fpkt"];
1876--2008[label="0.137931;4pkt 4fpkt"];
1876--2009[label="0.0344828;1pkt 1fpkt"];
1876--2016[label="0.0344828;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.88.57.43" src_ip="165.22.33.13" src_port="80"/>
      <filter dst_ip="72.93.85.133" src_ip="165.22.33.13" src_port="80"/>
    </slice>
    <from sec="994482021" usec="0"/>
    <to sec="994483187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
1227[label="196.212.185.118;s;1pkt 1fpkt", shape=diamond, color=yellow];
1228[label="110.212.222.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
1877[label="196.212.185.118;s;1pkt 1fpkt", shape=hexagon, color=black];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.212.185.118:1048, 110.212.222.192:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1048: (50%)&gt;];
}
1227--1228[label="1;1pkt 1fpkt"];
1227--1877[label="1;1pkt 1fpkt"];
1228--1877[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="110.212.222.192" dst_port="6699" src_ip="196.212.185.118" src_port="1048"/>
    </slice>
    <from sec="994482025" usec="0"/>
    <to sec="994483186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
753[label="197.11.27.48;s;41pkt 41fpkt", shape=diamond, color=yellow];
1879[label="197.11.27.48;s;41pkt 41fpkt", shape=hexagon, color=black];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.11.27.48:*, 209.141.68.7:80}[24.3902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61644: (1.21951%)&lt;BR/&gt; 61616: (1.21951%)&lt;BR/&gt; 61615: (1.21951%)&lt;BR/&gt; 61613: (1.21951%)&gt;];
}
753--1879[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="209.141.68.7" dst_port="80" src_ip="197.11.27.48"/>
    </slice>
    <from sec="994482084" usec="0"/>
    <to sec="994483177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
839[label="203.173.63.4;s;43pkt 43fpkt", shape=diamond, color=yellow];
1090[label="160.164.89.45;d;29pkt 29fpkt", shape=diamond, color=yellow];
1880[label="203.173.63.4;s;43pkt 43fpkt", shape=hexagon, color=black];
2039[label="203.173.63.4;83pkt 83fpkt", shape=pentagon, color=darkviolet];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.173.63.4:80, 160.164.89.10:*}[59.0361%]&lt;BR/&gt;{203.173.63.4:80, 160.164.89.45:*}[38.5542%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1982: (1.0101%)&lt;BR/&gt; 1981: (1.0101%)&lt;BR/&gt; 1980: (1.0101%)&lt;BR/&gt; 1969: (1.0101%)&gt;];
}
839--1090[label="1;29pkt 29fpkt"];
839--1880[label="1;43pkt 43fpkt"];
839--2006[label="0.0232558;1pkt 1fpkt"];
839--2008[label="0.0232558;1pkt 1fpkt"];
839--2039[label="1;43pkt 43fpkt"];
1090--1880[label="1;29pkt 29fpkt"];
1090--2006[label="0.0344828;1pkt 1fpkt"];
1090--2008[label="0.0344828;1pkt 1fpkt"];
1090--2039[label="1;29pkt 29fpkt"];
1880--2006[label="0.0232558;1pkt 1fpkt"];
1880--2008[label="0.0232558;1pkt 1fpkt"];
1880--2039[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="160.164.89.10" src_ip="203.173.63.4" src_port="80"/>
      <filter dst_ip="160.164.89.45" src_ip="203.173.63.4" src_port="80"/>
    </slice>
    <from sec="994482116" usec="0"/>
    <to sec="994483158" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
769[label="149.168.169.66;d;10pkt 10fpkt", shape=diamond, color=yellow];
778[label="14.143.165.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
1882[label="14.143.165.232;s;1pkt 1fpkt", shape=hexagon, color=black];
2629[label="14.143.165.232;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.155.129.139:80, 149.168.169.66:*}[50%]&lt;BR/&gt;{209.155.129.139:7729, 149.168.169.66:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (19.2308%)&lt;BR/&gt; 6699: (15.3846%)&lt;BR/&gt; 2823: (15.3846%)&lt;BR/&gt; 7729: (11.5385%)&lt;BR/&gt; 2829: (3.84615%)&gt;];
}
769--778[label="1;1pkt 1fpkt"];
769--1882[label="1;1pkt 1fpkt"];
769--2416[label="0.8;8pkt 8fpkt"];
769--2629[label="1;1pkt 1fpkt"];
778--1882[label="1;1pkt 1fpkt"];
778--2629[label="1;1pkt 1fpkt"];
1882--2629[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.168.169.66" src_ip="209.155.129.139" src_port="80"/>
      <filter dst_ip="149.168.169.66" src_ip="209.155.129.139" src_port="7729"/>
    </slice>
    <from sec="994482376" usec="0"/>
    <to sec="994483035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
1171[label="147.87.117.66;d;52pkt 52fpkt", shape=diamond, color=yellow];
1245[label="75.97.114.243;s;49pkt 49fpkt", shape=diamond, color=yellow];
1887[label="147.87.117.66;d;52pkt 52fpkt", shape=hexagon, color=black];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.97.114.243:443, 147.87.117.66:*}[94.2308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (48.0392%)&lt;BR/&gt; 80: (1.96078%)&lt;BR/&gt; 3149: (0.980392%)&lt;BR/&gt; 3148: (0.980392%)&lt;BR/&gt; 3147: (0.980392%)&gt;];
}
1171--1245[label="1;49pkt 49fpkt"];
1171--1887[label="1;52pkt 52fpkt"];
1245--1887[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.117.66" src_ip="75.97.114.243" src_port="443"/>
    </slice>
    <from sec="994482771" usec="0"/>
    <to sec="994483137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
88[label="147.87.104.88;d;84pkt 84fpkt", shape=diamond, color=yellow];
136[label="110.165.10.89;s;1pkt 1fpkt", shape=diamond, color=yellow];
200[label="110.180.128.129;s;1pkt 1fpkt", shape=diamond, color=yellow];
214[label="192.202.43.159;s;1pkt 1fpkt", shape=diamond, color=yellow];
250[label="12.74.161.254;s;1pkt 1fpkt", shape=diamond, color=yellow];
254[label="209.210.249.128;s;1pkt 1fpkt", shape=diamond, color=yellow];
358[label="110.184.63.197;s;1pkt 1fpkt", shape=diamond, color=yellow];
360[label="13.168.218.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
480[label="172.8.253.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
545[label="172.0.37.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
851[label="110.61.176.75;s;1pkt 1fpkt", shape=diamond, color=yellow];
855[label="75.139.133.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
979[label="13.176.138.195;s;1pkt 1fpkt", shape=diamond, color=yellow];
1043[label="75.198.2.27;s;2pkt 2fpkt", shape=diamond, color=yellow];
1128[label="14.220.143.155;s;9pkt 9fpkt", shape=diamond, color=yellow];
1174[label="13.84.72.103;s;5pkt 5fpkt", shape=diamond, color=yellow];
1297[label="147.87.104.88;d;84pkt 84fpkt", shape=hexagon, color=black];
1309[label="110.165.10.89;s;1pkt 1fpkt", shape=hexagon, color=black];
1337[label="12.74.161.254;s;1pkt 1fpkt", shape=hexagon, color=black];
1460[label="13.168.218.182;s;1pkt 1fpkt", shape=hexagon, color=black];
1619[label="172.8.253.216;s;1pkt 1fpkt", shape=hexagon, color=black];
1843[label="14.220.143.155;s;9pkt 9fpkt", shape=hexagon, color=black];
1883[label="75.198.2.27;s;2pkt 2fpkt", shape=hexagon, color=black];
1907[label="147.87.104.88;d;84pkt 84fpkt", shape=polygon, color=gold];
1957[label="172.8.253.216;s;1pkt 1fpkt", shape=polygon, color=gold];
1991[label="14.220.143.155;s;9pkt 9fpkt", shape=polygon, color=gold];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 147.87.104.88:6347}[77.6471%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6347: (39.1803%)&lt;BR/&gt; 6346: (9.83607%)&lt;BR/&gt; 3909: (0.983607%)&lt;BR/&gt; 1619: (0.983607%)&lt;BR/&gt; 1618: (0.983607%)&gt;];
}
88--136[label="1;1pkt 1fpkt"];
88--200[label="1;1pkt 1fpkt"];
88--214[label="1;1pkt 1fpkt"];
88--250[label="1;1pkt 1fpkt"];
88--254[label="1;1pkt 1fpkt"];
88--358[label="1;1pkt 1fpkt"];
88--360[label="1;1pkt 1fpkt"];
88--480[label="1;1pkt 1fpkt"];
88--545[label="1;1pkt 1fpkt"];
88--851[label="1;1pkt 1fpkt"];
88--855[label="1;1pkt 1fpkt"];
88--979[label="1;1pkt 1fpkt"];
88--1043[label="1;2pkt 2fpkt"];
88--1128[label="0.888889;8pkt 8fpkt"];
88--1174[label="1;5pkt 5fpkt"];
88--1297[label="1;84pkt 84fpkt"];
88--1309[label="1;1pkt 1fpkt"];
88--1337[label="1;1pkt 1fpkt"];
88--1460[label="1;1pkt 1fpkt"];
88--1619[label="1;1pkt 1fpkt"];
88--1843[label="0.888889;8pkt 8fpkt"];
88--1883[label="1;2pkt 2fpkt"];
88--1907[label="1;84pkt 84fpkt"];
88--1957[label="1;1pkt 1fpkt"];
88--1991[label="0.888889;8pkt 8fpkt"];
136--1297[label="1;1pkt 1fpkt"];
136--1309[label="1;1pkt 1fpkt"];
136--1907[label="1;1pkt 1fpkt"];
200--1297[label="1;1pkt 1fpkt"];
200--1907[label="1;1pkt 1fpkt"];
214--1297[label="1;1pkt 1fpkt"];
214--1907[label="1;1pkt 1fpkt"];
250--1297[label="1;1pkt 1fpkt"];
250--1337[label="1;1pkt 1fpkt"];
250--1907[label="1;1pkt 1fpkt"];
254--1297[label="1;1pkt 1fpkt"];
254--1907[label="1;1pkt 1fpkt"];
358--1297[label="1;1pkt 1fpkt"];
358--1907[label="1;1pkt 1fpkt"];
360--1297[label="1;1pkt 1fpkt"];
360--1460[label="1;1pkt 1fpkt"];
360--1907[label="1;1pkt 1fpkt"];
480--1297[label="1;1pkt 1fpkt"];
480--1619[label="1;1pkt 1fpkt"];
480--1907[label="1;1pkt 1fpkt"];
480--1957[label="1;1pkt 1fpkt"];
545--1297[label="1;1pkt 1fpkt"];
545--1907[label="1;1pkt 1fpkt"];
851--1297[label="1;1pkt 1fpkt"];
851--1907[label="1;1pkt 1fpkt"];
855--1297[label="1;1pkt 1fpkt"];
855--1907[label="1;1pkt 1fpkt"];
979--1297[label="1;1pkt 1fpkt"];
979--1907[label="1;1pkt 1fpkt"];
1043--1297[label="1;2pkt 2fpkt"];
1043--1883[label="1;2pkt 2fpkt"];
1043--1907[label="1;2pkt 2fpkt"];
1128--1297[label="0.888889;8pkt 8fpkt"];
1128--1843[label="1;9pkt 9fpkt"];
1128--1907[label="0.888889;8pkt 8fpkt"];
1128--1991[label="1;9pkt 9fpkt"];
1174--1297[label="1;5pkt 5fpkt"];
1174--1907[label="1;5pkt 5fpkt"];
1297--1309[label="1;1pkt 1fpkt"];
1297--1337[label="1;1pkt 1fpkt"];
1297--1460[label="1;1pkt 1fpkt"];
1297--1619[label="1;1pkt 1fpkt"];
1297--1843[label="0.888889;8pkt 8fpkt"];
1297--1883[label="1;2pkt 2fpkt"];
1297--1907[label="1;84pkt 84fpkt"];
1297--1957[label="1;1pkt 1fpkt"];
1297--1991[label="0.888889;8pkt 8fpkt"];
1309--1907[label="1;1pkt 1fpkt"];
1337--1907[label="1;1pkt 1fpkt"];
1460--1907[label="1;1pkt 1fpkt"];
1619--1907[label="1;1pkt 1fpkt"];
1619--1957[label="1;1pkt 1fpkt"];
1843--1907[label="0.888889;8pkt 8fpkt"];
1843--1991[label="1;9pkt 9fpkt"];
1883--1907[label="1;2pkt 2fpkt"];
1907--1957[label="1;1pkt 1fpkt"];
1907--1991[label="0.888889;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.104.88" dst_port="6347"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02629,2.15283,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
149[label="160.164.80.66;d;31pkt 31fpkt", shape=diamond, color=yellow];
150[label="211.176.131.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
375[label="210.46.191.202;s;21pkt 21fpkt", shape=diamond, color=yellow];
980[label="209.192.65.165;s;49pkt 49fpkt", shape=diamond, color=yellow];
1420[label="210.46.191.202;s;6pkt 6fpkt", shape=hexagon, color=black];
1479[label="211.176.131.148;s;1pkt 1fpkt", shape=hexagon, color=black];
1702[label="160.164.80.66;d;31pkt 31fpkt", shape=hexagon, color=black];
1923[label="210.46.191.202;s;6pkt 6fpkt", shape=polygon, color=gold];
2487[label="209.192.65.165;54pkt 54fpkt", shape=pentagon, color=darkviolet];
2812[label="209.192.65.165;53pkt 53fpkt", shape=invtriangle, color=brown];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 160.164.80.66:*}[31.5789%]&lt;BR/&gt;{209.192.65.165:80, 160.164.65.0:*}[25.2632%]&lt;BR/&gt;{209.192.65.165:80, 147.87.67.70:*}[25.2632%]&lt;BR/&gt;{210.46.191.202:80, *:*}[22.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2095%)&lt;BR/&gt; 3488: (0.988142%)&lt;BR/&gt; 3487: (0.988142%)&lt;BR/&gt; 3467: (0.988142%)&lt;BR/&gt; 3466: (0.988142%)&gt;];
}
149--150[label="1;1pkt 1fpkt"];
149--375[label="0.285714;6pkt 6fpkt"];
149--980[label="0.0645161;2pkt 2fpkt"];
149--1420[label="1;6pkt 6fpkt"];
149--1479[label="1;1pkt 1fpkt"];
149--1702[label="1;31pkt 31fpkt"];
149--1923[label="1;6pkt 6fpkt"];
149--1996[label="0.0322581;1pkt 1fpkt"];
149--2006[label="0.0322581;1pkt 1fpkt"];
149--2008[label="0.0322581;1pkt 1fpkt"];
149--2009[label="0.0322581;1pkt 1fpkt"];
149--2016[label="0.0322581;1pkt 1fpkt"];
149--2487[label="0.16129;5pkt 5fpkt"];
149--2498[label="0.0322581;1pkt 1fpkt"];
149--2812[label="0.16129;5pkt 5fpkt"];
149--2817[label="0.0322581;1pkt 1fpkt"];
150--1479[label="1;1pkt 1fpkt"];
150--1702[label="1;1pkt 1fpkt"];
375--1420[label="1;6pkt 6fpkt"];
375--1702[label="0.285714;6pkt 6fpkt"];
375--1723[label="0.571429;12pkt 12fpkt"];
375--1923[label="1;6pkt 6fpkt"];
375--1996[label="0.047619;1pkt 1fpkt"];
375--2006[label="0.142857;3pkt 3fpkt"];
375--2008[label="0.047619;1pkt 1fpkt"];
375--2009[label="0.047619;1pkt 1fpkt"];
375--2016[label="0.047619;1pkt 1fpkt"];
375--2562[label="1;1pkt 1fpkt"];
375--2840[label="1;1pkt 1fpkt"];
375--2927[label="1;1pkt 1fpkt"];
980--1089[label="0.489796;24pkt 24fpkt"];
980--1702[label="0.0645161;2pkt 2fpkt"];
980--2487[label="1;49pkt 49fpkt"];
980--2812[label="0.979592;48pkt 48fpkt"];
1420--1702[label="1;6pkt 6fpkt"];
1420--1923[label="1;6pkt 6fpkt"];
1420--1996[label="0.166667;1pkt 1fpkt"];
1420--2006[label="0.166667;1pkt 1fpkt"];
1420--2008[label="0.166667;1pkt 1fpkt"];
1420--2009[label="0.166667;1pkt 1fpkt"];
1420--2016[label="0.166667;1pkt 1fpkt"];
1479--1702[label="1;1pkt 1fpkt"];
1702--1923[label="1;6pkt 6fpkt"];
1702--1996[label="0.0322581;1pkt 1fpkt"];
1702--2006[label="0.0322581;1pkt 1fpkt"];
1702--2008[label="0.0322581;1pkt 1fpkt"];
1702--2009[label="0.0322581;1pkt 1fpkt"];
1702--2016[label="0.0322581;1pkt 1fpkt"];
1702--2487[label="0.16129;5pkt 5fpkt"];
1702--2498[label="0.0322581;1pkt 1fpkt"];
1702--2812[label="0.16129;5pkt 5fpkt"];
1702--2817[label="0.0322581;1pkt 1fpkt"];
1923--1996[label="0.166667;1pkt 1fpkt"];
1923--2006[label="0.166667;1pkt 1fpkt"];
1923--2008[label="0.166667;1pkt 1fpkt"];
1923--2009[label="0.166667;1pkt 1fpkt"];
1923--2016[label="0.166667;1pkt 1fpkt"];
2487--2812[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter src_ip="210.46.191.202" src_port="80"/>
      <filter dst_ip="160.164.80.66" src_port="80"/>
      <filter dst_ip="147.87.67.70" src_ip="209.192.65.165" src_port="80"/>
      <filter dst_ip="160.164.65.0" src_ip="209.192.65.165" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,002,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
796[label="165.22.180.27;s;263pkt 263fpkt", shape=diamond, color=yellow];
1541[label="165.22.180.27;s;204pkt 204fpkt", shape=hexagon, color=black];
1944[label="165.22.180.27;s;193pkt 193fpkt", shape=polygon, color=gold];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.22.180.27:*, 54.21.176.101:138}[47.9087%]&lt;BR/&gt;{165.22.180.27:*, 54.21.176.101:137}[23.1939%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 138: (32.7273%)&lt;BR/&gt; 137: (13.8636%)&lt;BR/&gt; 53: (4.01515%)&lt;BR/&gt; 0: (0.454545%)&lt;BR/&gt; 65512: (0.227273%)&gt;];
}
796--1541[label="1;204pkt 204fpkt"];
796--1944[label="1;193pkt 193fpkt"];
1541--1944[label="1;193pkt 193fpkt"];
</description>
    <slice>
      <filter dst_ip="54.21.176.101" dst_port="138" src_ip="165.22.180.27"/>
      <filter dst_ip="54.21.176.101" dst_port="137" src_ip="165.22.180.27"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
865[label="147.87.169.153;d;45pkt 45fpkt", shape=diamond, color=yellow];
868[label="205.55.139.214;s;51pkt 51fpkt", shape=diamond, color=yellow];
1181[label="147.87.179.236;d;7pkt 7fpkt", shape=diamond, color=yellow];
1682[label="147.87.169.153;d;45pkt 45fpkt", shape=hexagon, color=black];
1684[label="205.55.139.214;s;47pkt 47fpkt", shape=hexagon, color=black];
1963[label="147.87.169.153;d;45pkt 45fpkt", shape=polygon, color=gold];
1964[label="205.55.139.214;s;47pkt 47fpkt", shape=polygon, color=gold];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.55.139.214:80, 147.87.169.153:*}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2285: (1.0453%)&lt;BR/&gt; 2284: (1.0453%)&lt;BR/&gt; 2283: (1.0453%)&lt;BR/&gt; 2282: (1.0453%)&gt;];
}
865--868[label="0.977778;44pkt 44fpkt"];
865--1682[label="1;45pkt 45fpkt"];
865--1684[label="0.888889;40pkt 40fpkt"];
865--1963[label="1;45pkt 45fpkt"];
865--1964[label="0.888889;40pkt 40fpkt"];
865--2006[label="0.155556;7pkt 7fpkt"];
865--2008[label="0.133333;6pkt 6fpkt"];
868--1181[label="1;7pkt 7fpkt"];
868--1682[label="0.977778;44pkt 44fpkt"];
868--1684[label="1;47pkt 47fpkt"];
868--1963[label="0.977778;44pkt 44fpkt"];
868--1964[label="1;47pkt 47fpkt"];
868--2006[label="0.137255;7pkt 7fpkt"];
868--2008[label="0.137255;7pkt 7fpkt"];
1181--1684[label="1;7pkt 7fpkt"];
1181--1964[label="1;7pkt 7fpkt"];
1181--2008[label="0.142857;1pkt 1fpkt"];
1682--1684[label="0.888889;40pkt 40fpkt"];
1682--1963[label="1;45pkt 45fpkt"];
1682--1964[label="0.888889;40pkt 40fpkt"];
1682--2006[label="0.155556;7pkt 7fpkt"];
1682--2008[label="0.133333;6pkt 6fpkt"];
1684--1963[label="0.888889;40pkt 40fpkt"];
1684--1964[label="1;47pkt 47fpkt"];
1684--2006[label="0.148936;7pkt 7fpkt"];
1684--2008[label="0.0638298;3pkt 3fpkt"];
1963--1964[label="0.888889;40pkt 40fpkt"];
1963--2006[label="0.155556;7pkt 7fpkt"];
1963--2008[label="0.133333;6pkt 6fpkt"];
1964--2006[label="0.148936;7pkt 7fpkt"];
1964--2008[label="0.0638298;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.169.153" src_ip="205.55.139.214" src_port="80"/>
    </slice>
    <from sec="994482597" usec="0"/>
    <to sec="994483055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936547,2.19943,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
68[label="196.120.26.60;s;2296pkt 2296fpkt", shape=diamond, color=yellow];
180[label="147.87.8.182;s;1314pkt 1314fpkt", shape=diamond, color=yellow];
192[label="197.56.170.187;d;181pkt 181fpkt", shape=diamond, color=yellow];
236[label="219.74.28.183;d;45pkt 45fpkt", shape=diamond, color=yellow];
305[label="128.141.128.5;s;76pkt 76fpkt", shape=diamond, color=yellow];
322[label="13.199.7.210;d;505pkt 505fpkt", shape=diamond, color=yellow];
332[label="209.97.111.3;d;48pkt 48fpkt", shape=diamond, color=yellow];
453[label="13.199.7.209;d;120pkt 120fpkt", shape=diamond, color=yellow];
524[label="219.168.40.1;d;12pkt 12fpkt", shape=diamond, color=yellow];
547[label="165.22.49.66;s;123pkt 123fpkt", shape=diamond, color=yellow];
653[label="192.14.185.231;d;67pkt 67fpkt", shape=diamond, color=yellow];
666[label="128.141.129.208;s;77pkt 77fpkt", shape=diamond, color=yellow];
847[label="149.168.42.116;s;14pkt 14fpkt", shape=diamond, color=yellow];
861[label="209.235.124.15;d;25pkt 25fpkt", shape=diamond, color=yellow];
929[label="13.199.6.69;d;126pkt 126fpkt", shape=diamond, color=yellow];
977[label="13.199.171.2;d;6pkt 6fpkt", shape=diamond, color=yellow];
985[label="192.14.185.215;d;37pkt 37fpkt", shape=diamond, color=yellow];
1034[label="147.87.182.19;s;47pkt 47fpkt", shape=diamond, color=yellow];
1044[label="13.192.69.80;d;148pkt 148fpkt", shape=diamond, color=yellow];
1096[label="197.153.85.212;d;30pkt 30fpkt", shape=diamond, color=yellow];
1098[label="209.97.251.190;d;58pkt 58fpkt", shape=diamond, color=yellow];
1177[label="149.180.238.175;s;67pkt 67fpkt", shape=diamond, color=yellow];
1184[label="192.118.158.171;d;119pkt 119fpkt", shape=diamond, color=yellow];
1188[label="146.0.115.83;d;94pkt 94fpkt", shape=diamond, color=yellow];
1324[label="196.120.26.60;s;1724pkt 1724fpkt", shape=hexagon, color=black];
1497[label="128.141.129.208;s;77pkt 77fpkt", shape=hexagon, color=black];
1518[label="13.66.97.62;d;106pkt 106fpkt", shape=hexagon, color=black];
1657[label="13.199.6.69;d;80pkt 80fpkt", shape=hexagon, color=black];
1794[label="197.153.85.212;d;30pkt 30fpkt", shape=hexagon, color=black];
1851[label="219.74.28.183;d;45pkt 45fpkt", shape=hexagon, color=black];
1967[label="196.120.26.60;s;1724pkt 1724fpkt", shape=polygon, color=gold];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.120.26.60:*, *:80}[43.6761%]&lt;BR/&gt;{147.87.8.182:*, *:80}[28.7085%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.0058%)&lt;BR/&gt; 53: (5.11092%)&lt;BR/&gt; 3128: (0.260057%)&lt;BR/&gt; 0: (0.191063%)&lt;BR/&gt; 81: (0.143297%)&gt;];
}
68--143[label="0.0294795;64pkt 64fpkt"];
68--192[label="1;181pkt 181fpkt"];
68--236[label="1;45pkt 45fpkt"];
68--322[label="1;505pkt 505fpkt"];
68--332[label="1;48pkt 48fpkt"];
68--408[label="0.520249;167pkt 167fpkt"];
68--524[label="1;12pkt 12fpkt"];
68--632[label="0.0875;7pkt 7fpkt"];
68--639[label="0.0704225;5pkt 5fpkt"];
68--653[label="0.0149254;1pkt 1fpkt"];
68--682[label="0.0363636;2pkt 2fpkt"];
68--688[label="0.0298507;2pkt 2fpkt"];
68--691[label="0.0454545;3pkt 3fpkt"];
68--699[label="0.0555556;4pkt 4fpkt"];
68--704[label="0.057971;4pkt 4fpkt"];
68--709[label="0.030303;2pkt 2fpkt"];
68--723[label="0.0545455;3pkt 3fpkt"];
68--728[label="0.0733945;8pkt 8fpkt"];
68--799[label="0.0441176;3pkt 3fpkt"];
68--861[label="1;25pkt 25fpkt"];
68--929[label="0.730159;92pkt 92fpkt"];
68--977[label="1;6pkt 6fpkt"];
68--985[label="0.0540541;2pkt 2fpkt"];
68--1096[label="1;30pkt 30fpkt"];
68--1188[label="1;94pkt 94fpkt"];
68--1226[label="0.0816327;8pkt 8fpkt"];
68--1324[label="1;1724pkt 1724fpkt"];
68--1338[label="0.0261233;50pkt 50fpkt"];
68--1503[label="0.03125;2pkt 2fpkt"];
68--1518[label="0.0754717;8pkt 8fpkt"];
68--1531[label="0.0454545;2pkt 2fpkt"];
68--1548[label="0.0638298;3pkt 3fpkt"];
68--1616[label="0.0526316;3pkt 3fpkt"];
68--1623[label="0.0769231;5pkt 5fpkt"];
68--1625[label="0.0204082;1pkt 1fpkt"];
68--1657[label="0.725;58pkt 58fpkt"];
68--1701[label="0.0447761;3pkt 3fpkt"];
68--1715[label="0.0535714;3pkt 3fpkt"];
68--1794[label="1;30pkt 30fpkt"];
68--1851[label="1;45pkt 45fpkt"];
68--1855[label="0.0441176;3pkt 3fpkt"];
68--1940[label="0.0238095;1pkt 1fpkt"];
68--1942[label="0.03125;2pkt 2fpkt"];
68--1967[label="1;1724pkt 1724fpkt"];
68--1997[label="0.0402393;74pkt 74fpkt"];
68--1999[label="0.003367;3pkt 3fpkt"];
68--2000[label="0.0117596;27pkt 27fpkt"];
68--2001[label="0.0563867;98pkt 98fpkt"];
68--2002[label="0.113106;189pkt 189fpkt"];
68--2003[label="0.0152439;35pkt 35fpkt"];
68--2004[label="0.0734243;113pkt 113fpkt"];
68--2005[label="0.010453;24pkt 24fpkt"];
68--2007[label="0.00261324;6pkt 6fpkt"];
68--2010[label="0.0402393;74pkt 74fpkt"];
68--2012[label="0.003367;3pkt 3fpkt"];
68--2013[label="0.113106;189pkt 189fpkt"];
68--2014[label="0.0152439;35pkt 35fpkt"];
68--2015[label="0.0734243;113pkt 113fpkt"];
68--2017[label="0.0402393;74pkt 74fpkt"];
68--2019[label="0.003367;3pkt 3fpkt"];
68--2020[label="0.0152439;35pkt 35fpkt"];
68--2021[label="0.0733766;113pkt 113fpkt"];
180--189[label="0.00248756;1pkt 1fpkt"];
180--453[label="1;120pkt 120fpkt"];
180--841[label="1;21pkt 21fpkt"];
180--929[label="0.142857;18pkt 18fpkt"];
180--952[label="0.880597;59pkt 59fpkt"];
180--985[label="0.027027;1pkt 1fpkt"];
180--998[label="0.0344828;1pkt 1fpkt"];
180--1044[label="0.0135135;2pkt 2fpkt"];
180--1159[label="0.025641;3pkt 3fpkt"];
180--1210[label="0.168421;16pkt 16fpkt"];
180--1224[label="0.170213;16pkt 16fpkt"];
180--1226[label="0.0918367;9pkt 9fpkt"];
180--1259[label="0.0106383;1pkt 1fpkt"];
180--1559[label="0.00248756;1pkt 1fpkt"];
180--1657[label="0.1125;9pkt 9fpkt"];
180--1679[label="0.867647;59pkt 59fpkt"];
180--1721[label="0.0344828;1pkt 1fpkt"];
180--1948[label="0.00332226;1pkt 1fpkt"];
180--1994[label="0.0344828;1pkt 1fpkt"];
180--1997[label="0.0479452;63pkt 63fpkt"];
180--2001[label="0.04414;58pkt 58fpkt"];
180--2002[label="0.0175038;23pkt 23fpkt"];
180--2004[label="0.064688;85pkt 85fpkt"];
180--2010[label="0.0479452;63pkt 63fpkt"];
180--2013[label="0.0175038;23pkt 23fpkt"];
180--2015[label="0.064688;85pkt 85fpkt"];
180--2017[label="0.0479452;63pkt 63fpkt"];
180--2021[label="0.064688;85pkt 85fpkt"];
192--1324[label="1;181pkt 181fpkt"];
192--1967[label="1;181pkt 181fpkt"];
192--1997[label="0.0441989;8pkt 8fpkt"];
192--2001[label="0.121547;22pkt 22fpkt"];
192--2002[label="0.154696;28pkt 28fpkt"];
192--2010[label="0.0441989;8pkt 8fpkt"];
192--2013[label="0.154696;28pkt 28fpkt"];
192--2017[label="0.0441989;8pkt 8fpkt"];
236--1324[label="0.688889;31pkt 31fpkt"];
236--1851[label="1;45pkt 45fpkt"];
236--1967[label="0.688889;31pkt 31fpkt"];
236--1997[label="0.0222222;1pkt 1fpkt"];
236--2001[label="0.0444444;2pkt 2fpkt"];
236--2002[label="0.0222222;1pkt 1fpkt"];
236--2004[label="0.0222222;1pkt 1fpkt"];
236--2010[label="0.0222222;1pkt 1fpkt"];
236--2013[label="0.0222222;1pkt 1fpkt"];
236--2015[label="0.0222222;1pkt 1fpkt"];
236--2017[label="0.0222222;1pkt 1fpkt"];
236--2021[label="0.0222222;1pkt 1fpkt"];
305--728[label="0.0526316;4pkt 4fpkt"];
305--929[label="0.0263158;2pkt 2fpkt"];
305--1044[label="0.447368;34pkt 34fpkt"];
305--1518[label="0.0526316;4pkt 4fpkt"];
305--1657[label="0.0263158;2pkt 2fpkt"];
322--1324[label="0.843564;426pkt 426fpkt"];
322--1967[label="0.843564;426pkt 426fpkt"];
322--1997[label="0.0653465;33pkt 33fpkt"];
322--2001[label="0.00594059;3pkt 3fpkt"];
322--2002[label="0.138614;70pkt 70fpkt"];
322--2004[label="0.00792079;4pkt 4fpkt"];
322--2010[label="0.0653465;33pkt 33fpkt"];
322--2013[label="0.138614;70pkt 70fpkt"];
322--2015[label="0.00792079;4pkt 4fpkt"];
322--2017[label="0.0653465;33pkt 33fpkt"];
322--2021[label="0.00792079;4pkt 4fpkt"];
332--1324[label="1;48pkt 48fpkt"];
332--1967[label="1;48pkt 48fpkt"];
332--2001[label="0.0208333;1pkt 1fpkt"];
332--2002[label="0.0208333;1pkt 1fpkt"];
332--2004[label="0.0208333;1pkt 1fpkt"];
332--2013[label="0.0208333;1pkt 1fpkt"];
332--2015[label="0.0208333;1pkt 1fpkt"];
332--2021[label="0.0208333;1pkt 1fpkt"];
524--1324[label="1;12pkt 12fpkt"];
524--1967[label="1;12pkt 12fpkt"];
524--2001[label="0.5;6pkt 6fpkt"];
524--2002[label="0.0833333;1pkt 1fpkt"];
524--2013[label="0.0833333;1pkt 1fpkt"];
547--653[label="0.0149254;1pkt 1fpkt"];
547--1159[label="0.00854701;1pkt 1fpkt"];
547--1294[label="0.138211;17pkt 17fpkt"];
547--1997[label="0.0243902;3pkt 3fpkt"];
547--2001[label="0.0569106;7pkt 7fpkt"];
547--2002[label="0.0650407;8pkt 8fpkt"];
547--2004[label="0.0569106;7pkt 7fpkt"];
547--2010[label="0.0243902;3pkt 3fpkt"];
547--2013[label="0.0650407;8pkt 8fpkt"];
547--2015[label="0.0569106;7pkt 7fpkt"];
547--2017[label="0.0243902;3pkt 3fpkt"];
547--2021[label="0.0650407;8pkt 8fpkt"];
653--847[label="0.428571;6pkt 6fpkt"];
653--1021[label="0.0612245;3pkt 3fpkt"];
653--1034[label="0.0212766;1pkt 1fpkt"];
653--1324[label="0.0149254;1pkt 1fpkt"];
653--1466[label="0.2;13pkt 13fpkt"];
653--1694[label="0.0149254;1pkt 1fpkt"];
653--1738[label="0.0612245;3pkt 3fpkt"];
653--1967[label="0.0149254;1pkt 1fpkt"];
653--1997[label="0.0149254;1pkt 1fpkt"];
653--2001[label="0.0597015;4pkt 4fpkt"];
653--2002[label="0.119403;8pkt 8fpkt"];
653--2004[label="0.179104;12pkt 12fpkt"];
653--2010[label="0.0149254;1pkt 1fpkt"];
653--2013[label="0.119403;8pkt 8fpkt"];
653--2015[label="0.179104;12pkt 12fpkt"];
653--2017[label="0.0149254;1pkt 1fpkt"];
653--2021[label="0.179104;12pkt 12fpkt"];
653--2360[label="0.0149254;1pkt 1fpkt"];
666--728[label="0.025974;2pkt 2fpkt"];
666--1026[label="0.025974;2pkt 2fpkt"];
666--1184[label="0.220779;17pkt 17fpkt"];
666--1226[label="0.012987;1pkt 1fpkt"];
666--1497[label="1;77pkt 77fpkt"];
666--1518[label="0.025974;2pkt 2fpkt"];
847--1159[label="0.0714286;1pkt 1fpkt"];
847--2004[label="0.214286;3pkt 3fpkt"];
847--2015[label="0.214286;3pkt 3fpkt"];
847--2021[label="0.214286;3pkt 3fpkt"];
861--1324[label="1;25pkt 25fpkt"];
861--1967[label="1;25pkt 25fpkt"];
929--1177[label="0.0149254;1pkt 1fpkt"];
929--1254[label="0.0123457;1pkt 1fpkt"];
929--1324[label="0.531746;67pkt 67fpkt"];
929--1657[label="1;80pkt 80fpkt"];
929--1967[label="0.531746;67pkt 67fpkt"];
929--1997[label="0.031746;4pkt 4fpkt"];
929--2001[label="0.0238095;3pkt 3fpkt"];
929--2002[label="0.0396825;5pkt 5fpkt"];
929--2004[label="0.0396825;5pkt 5fpkt"];
929--2010[label="0.031746;4pkt 4fpkt"];
929--2013[label="0.0396825;5pkt 5fpkt"];
929--2015[label="0.0396825;5pkt 5fpkt"];
929--2017[label="0.031746;4pkt 4fpkt"];
929--2021[label="0.0396825;5pkt 5fpkt"];
929--2232[label="0.0181818;1pkt 1fpkt"];
977--1324[label="1;6pkt 6fpkt"];
977--1967[label="1;6pkt 6fpkt"];
985--1056[label="0.285714;2pkt 2fpkt"];
985--1130[label="0.0810811;3pkt 3fpkt"];
985--1324[label="0.027027;1pkt 1fpkt"];
985--1694[label="0.0540541;2pkt 2fpkt"];
985--1967[label="0.027027;1pkt 1fpkt"];
985--1997[label="0.108108;4pkt 4fpkt"];
985--2001[label="0.027027;1pkt 1fpkt"];
985--2002[label="0.027027;1pkt 1fpkt"];
985--2004[label="0.027027;1pkt 1fpkt"];
985--2010[label="0.108108;4pkt 4fpkt"];
985--2013[label="0.027027;1pkt 1fpkt"];
985--2015[label="0.027027;1pkt 1fpkt"];
985--2017[label="0.108108;4pkt 4fpkt"];
985--2021[label="0.027027;1pkt 1fpkt"];
985--2098[label="0.0294118;1pkt 1fpkt"];
985--2360[label="0.027027;1pkt 1fpkt"];
985--2639[label="0.027027;1pkt 1fpkt"];
985--2870[label="0.027027;1pkt 1fpkt"];
985--2935[label="0.027027;1pkt 1fpkt"];
1034--2004[label="0.0212766;1pkt 1fpkt"];
1034--2015[label="0.0212766;1pkt 1fpkt"];
1034--2021[label="0.0212766;1pkt 1fpkt"];
1096--1324[label="0.833333;25pkt 25fpkt"];
1096--1794[label="1;30pkt 30fpkt"];
1096--1967[label="0.833333;25pkt 25fpkt"];
1184--1497[label="0.220779;17pkt 17fpkt"];
1324--1338[label="0.0290023;50pkt 50fpkt"];
1324--1503[label="0.03125;2pkt 2fpkt"];
1324--1518[label="0.0471698;5pkt 5fpkt"];
1324--1531[label="0.0454545;2pkt 2fpkt"];
1324--1548[label="0.0638298;3pkt 3fpkt"];
1324--1616[label="0.0526316;3pkt 3fpkt"];
1324--1623[label="0.0769231;5pkt 5fpkt"];
1324--1625[label="0.0204082;1pkt 1fpkt"];
1324--1657[label="0.725;58pkt 58fpkt"];
1324--1701[label="0.0447761;3pkt 3fpkt"];
1324--1715[label="0.0535714;3pkt 3fpkt"];
1324--1794[label="0.833333;25pkt 25fpkt"];
1324--1851[label="0.688889;31pkt 31fpkt"];
1324--1855[label="0.0294118;2pkt 2fpkt"];
1324--1940[label="0.0238095;1pkt 1fpkt"];
1324--1942[label="0.03125;2pkt 2fpkt"];
1324--1967[label="1;1724pkt 1724fpkt"];
1324--1997[label="0.0429234;74pkt 74fpkt"];
1324--1999[label="0.003367;3pkt 3fpkt"];
1324--2000[label="0.0156613;27pkt 27fpkt"];
1324--2001[label="0.0568445;98pkt 98fpkt"];
1324--2002[label="0.113106;189pkt 189fpkt"];
1324--2003[label="0.0203016;35pkt 35fpkt"];
1324--2004[label="0.0734243;113pkt 113fpkt"];
1324--2005[label="0.0139211;24pkt 24fpkt"];
1324--2007[label="0.00116009;2pkt 2fpkt"];
1324--2010[label="0.0429234;74pkt 74fpkt"];
1324--2012[label="0.003367;3pkt 3fpkt"];
1324--2013[label="0.113106;189pkt 189fpkt"];
1324--2014[label="0.0203016;35pkt 35fpkt"];
1324--2015[label="0.0734243;113pkt 113fpkt"];
1324--2017[label="0.0429234;74pkt 74fpkt"];
1324--2019[label="0.003367;3pkt 3fpkt"];
1324--2020[label="0.0203016;35pkt 35fpkt"];
1324--2021[label="0.0733766;113pkt 113fpkt"];
1497--1518[label="0.025974;2pkt 2fpkt"];
1518--1560[label="0.04;2pkt 2fpkt"];
1518--1694[label="0.00943396;1pkt 1fpkt"];
1518--1710[label="0.0566038;6pkt 6fpkt"];
1518--1967[label="0.0471698;5pkt 5fpkt"];
1518--1997[label="0.113208;12pkt 12fpkt"];
1518--2001[label="0.0754717;8pkt 8fpkt"];
1518--2002[label="0.0471698;5pkt 5fpkt"];
1518--2010[label="0.113208;12pkt 12fpkt"];
1518--2013[label="0.0471698;5pkt 5fpkt"];
1518--2017[label="0.113208;12pkt 12fpkt"];
1518--2225[label="0.0666667;2pkt 2fpkt"];
1518--2346[label="0.0188679;2pkt 2fpkt"];
1518--2426[label="0.0188679;2pkt 2fpkt"];
1518--2537[label="0.0606061;2pkt 2fpkt"];
1518--2647[label="0.04;2pkt 2fpkt"];
1518--2789[label="0.0188679;2pkt 2fpkt"];
1518--2839[label="0.113208;12pkt 12fpkt"];
1518--2913[label="0.0188679;2pkt 2fpkt"];
1518--2926[label="0.113208;12pkt 12fpkt"];
1657--1967[label="0.725;58pkt 58fpkt"];
1657--1997[label="0.05;4pkt 4fpkt"];
1657--2001[label="0.0375;3pkt 3fpkt"];
1657--2002[label="0.0625;5pkt 5fpkt"];
1657--2004[label="0.0625;5pkt 5fpkt"];
1657--2010[label="0.05;4pkt 4fpkt"];
1657--2013[label="0.0625;5pkt 5fpkt"];
1657--2015[label="0.0625;5pkt 5fpkt"];
1657--2017[label="0.05;4pkt 4fpkt"];
1657--2021[label="0.0625;5pkt 5fpkt"];
1794--1967[label="0.833333;25pkt 25fpkt"];
1851--1967[label="0.688889;31pkt 31fpkt"];
1851--1997[label="0.0222222;1pkt 1fpkt"];
1851--2001[label="0.0444444;2pkt 2fpkt"];
1851--2002[label="0.0222222;1pkt 1fpkt"];
1851--2004[label="0.0222222;1pkt 1fpkt"];
1851--2010[label="0.0222222;1pkt 1fpkt"];
1851--2013[label="0.0222222;1pkt 1fpkt"];
1851--2015[label="0.0222222;1pkt 1fpkt"];
1851--2017[label="0.0222222;1pkt 1fpkt"];
1851--2021[label="0.0222222;1pkt 1fpkt"];
1967--1997[label="0.0429234;74pkt 74fpkt"];
1967--1999[label="0.003367;3pkt 3fpkt"];
1967--2000[label="0.0156613;27pkt 27fpkt"];
1967--2001[label="0.0568445;98pkt 98fpkt"];
1967--2002[label="0.113106;189pkt 189fpkt"];
1967--2003[label="0.0203016;35pkt 35fpkt"];
1967--2004[label="0.0734243;113pkt 113fpkt"];
1967--2005[label="0.0139211;24pkt 24fpkt"];
1967--2007[label="0.00116009;2pkt 2fpkt"];
1967--2010[label="0.0429234;74pkt 74fpkt"];
1967--2012[label="0.003367;3pkt 3fpkt"];
1967--2013[label="0.113106;189pkt 189fpkt"];
1967--2014[label="0.0203016;35pkt 35fpkt"];
1967--2015[label="0.0734243;113pkt 113fpkt"];
1967--2017[label="0.0429234;74pkt 74fpkt"];
1967--2019[label="0.003367;3pkt 3fpkt"];
1967--2020[label="0.0203016;35pkt 35fpkt"];
1967--2021[label="0.0733766;113pkt 113fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="196.120.26.60"/>
      <filter dst_port="80" src_ip="147.87.8.182"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.918716,2.16821,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
859[label="128.141.236.184;d;199pkt 199fpkt", shape=diamond, color=yellow];
960[label="209.97.251.190;s;58pkt 58fpkt", shape=diamond, color=yellow];
1758[label="209.97.251.190;s;58pkt 58fpkt", shape=hexagon, color=black];
1975[label="209.97.251.190;s;58pkt 58fpkt", shape=polygon, color=gold];
2388[label="208.139.185.130;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2516[label="192.136.87.176;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2545[label="209.97.251.190;57pkt 57fpkt", shape=pentagon, color=darkviolet];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.97.251.190:80, 128.141.236.184:*}[29.1457%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8558%)&lt;BR/&gt; 443: (1.14416%)&lt;BR/&gt; 1475: (0.686499%)&lt;BR/&gt; 1467: (0.686499%)&lt;BR/&gt; 1410: (0.686499%)&gt;];
}
859--960[label="1;58pkt 58fpkt"];
859--1047[label="1;20pkt 20fpkt"];
859--1151[label="0.0306122;3pkt 3fpkt"];
859--1211[label="0.0105263;1pkt 1fpkt"];
859--1225[label="0.0106383;1pkt 1fpkt"];
859--1758[label="1;58pkt 58fpkt"];
859--1798[label="1;20pkt 20fpkt"];
859--1975[label="1;58pkt 58fpkt"];
859--2006[label="0.165829;33pkt 33fpkt"];
859--2008[label="0.0251256;5pkt 5fpkt"];
859--2038[label="0.0291262;3pkt 3fpkt"];
859--2388[label="1;3pkt 3fpkt"];
859--2406[label="0.0135135;1pkt 1fpkt"];
859--2433[label="0.0243902;1pkt 1fpkt"];
859--2516[label="1;4pkt 4fpkt"];
859--2545[label="1;57pkt 57fpkt"];
859--2547[label="0.363636;4pkt 4fpkt"];
859--2791[label="0.0238095;1pkt 1fpkt"];
960--1758[label="1;58pkt 58fpkt"];
960--1975[label="1;58pkt 58fpkt"];
960--2006[label="0.0517241;3pkt 3fpkt"];
960--2545[label="1;57pkt 57fpkt"];
1758--1975[label="1;58pkt 58fpkt"];
1758--2006[label="0.0517241;3pkt 3fpkt"];
1758--2545[label="1;57pkt 57fpkt"];
1975--2006[label="0.0517241;3pkt 3fpkt"];
1975--2545[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.236.184" src_ip="209.97.251.190" src_port="80"/>
    </slice>
    <from sec="994482541" usec="0"/>
    <to sec="994483000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.918716,2.16821,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
1062[label="144.188.146.164;s;13pkt 13fpkt", shape=diamond, color=yellow];
1765[label="144.188.146.164;s;13pkt 13fpkt", shape=hexagon, color=black];
1976[label="144.188.146.164;s;5pkt 5fpkt", shape=polygon, color=gold];
2484[label="144.188.146.164;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.188.146.164:80, 160.164.70.50:*}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.9091%)&lt;BR/&gt; 21: (9.09091%)&lt;BR/&gt; 1175: (4.54545%)&lt;BR/&gt; 1174: (4.54545%)&lt;BR/&gt; 1172: (4.54545%)&gt;];
}
1062--1765[label="1;13pkt 13fpkt"];
1062--1976[label="1;5pkt 5fpkt"];
1062--2008[label="0.153846;2pkt 2fpkt"];
1062--2484[label="1;13pkt 13fpkt"];
1765--1976[label="1;5pkt 5fpkt"];
1765--2008[label="0.153846;2pkt 2fpkt"];
1765--2484[label="1;13pkt 13fpkt"];
1976--2484[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="160.164.70.50" src_ip="144.188.146.164" src_port="80"/>
    </slice>
    <from sec="994482874" usec="0"/>
    <to sec="994483182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.560187,2.22349,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
570[label="145.12.161.92;s;38pkt 38fpkt", shape=diamond, color=yellow];
1018[label="128.141.148.37;d;24pkt 24fpkt", shape=diamond, color=yellow];
1731[label="145.12.161.92;s;36pkt 36fpkt", shape=hexagon, color=black];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.12.161.92:80, 128.141.148.37:*}[51.2195%]&lt;BR/&gt;{145.12.161.92:80, 196.217.132.92:*}[36.5854%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9796%)&lt;BR/&gt; 2744: (1.53061%)&lt;BR/&gt; 2743: (1.53061%)&lt;BR/&gt; 2741: (1.53061%)&lt;BR/&gt; 2740: (1.53061%)&gt;];
}
570--1018[label="0.875;21pkt 21fpkt"];
570--1731[label="1;36pkt 36fpkt"];
570--1996[label="0.0526316;2pkt 2fpkt"];
570--2006[label="0.0789474;3pkt 3fpkt"];
570--2008[label="0.105263;4pkt 4fpkt"];
570--2009[label="0.0526316;2pkt 2fpkt"];
570--2016[label="0.0526316;2pkt 2fpkt"];
1018--1731[label="0.875;21pkt 21fpkt"];
1731--1996[label="0.0555556;2pkt 2fpkt"];
1731--2006[label="0.0833333;3pkt 3fpkt"];
1731--2008[label="0.0833333;3pkt 3fpkt"];
1731--2009[label="0.0555556;2pkt 2fpkt"];
1731--2016[label="0.0555556;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.148.37" src_ip="145.12.161.92" src_port="80"/>
      <filter dst_ip="196.217.132.92" src_ip="145.12.161.92" src_port="80"/>
    </slice>
    <from sec="994482019" usec="0"/>
    <to sec="994483184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699975,2.1774,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
659[label="202.78.6.24;d;11pkt 11fpkt", shape=diamond, color=yellow];
760[label="150.165.176.228;d;26pkt 26fpkt", shape=diamond, color=yellow];
761[label="196.217.170.165;s;26pkt 26fpkt", shape=diamond, color=yellow];
831[label="165.22.33.13;d;25pkt 25fpkt", shape=diamond, color=yellow];
849[label="219.88.57.43;s;10pkt 10fpkt", shape=diamond, color=yellow];
1732[label="165.22.33.13;d;25pkt 25fpkt", shape=hexagon, color=black];
2146[label="219.88.57.43;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2468[label="219.48.204.158;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2490[label="196.217.170.165;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2814[label="196.217.170.165;28pkt 28fpkt", shape=invtriangle, color=brown];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.217.170.165:*, 150.165.176.228:80}[38.2353%]&lt;BR/&gt;{*:*, 165.22.33.13:80}[35.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6321%)&lt;BR/&gt; 20: (1.81347%)&lt;BR/&gt; 1443: (1.03627%)&lt;BR/&gt; 1442: (1.03627%)&lt;BR/&gt; 1441: (1.03627%)&gt;];
}
760--761[label="1;26pkt 26fpkt"];
760--2002[label="0.153846;4pkt 4fpkt"];
760--2004[label="0.307692;8pkt 8fpkt"];
760--2013[label="0.153846;4pkt 4fpkt"];
760--2015[label="0.307692;8pkt 8fpkt"];
760--2021[label="0.307692;8pkt 8fpkt"];
760--2490[label="0.961538;25pkt 25fpkt"];
760--2814[label="0.961538;25pkt 25fpkt"];
761--2002[label="0.153846;4pkt 4fpkt"];
761--2004[label="0.307692;8pkt 8fpkt"];
761--2013[label="0.153846;4pkt 4fpkt"];
761--2015[label="0.307692;8pkt 8fpkt"];
761--2021[label="0.307692;8pkt 8fpkt"];
761--2490[label="0.961538;25pkt 25fpkt"];
761--2814[label="0.961538;25pkt 25fpkt"];
831--849[label="1;10pkt 10fpkt"];
831--1732[label="1;25pkt 25fpkt"];
831--2004[label="0.2;5pkt 5fpkt"];
831--2015[label="0.2;5pkt 5fpkt"];
831--2021[label="0.2;5pkt 5fpkt"];
831--2146[label="0.9;9pkt 9fpkt"];
831--2468[label="0.5;2pkt 2fpkt"];
849--1732[label="1;10pkt 10fpkt"];
849--2004[label="0.5;5pkt 5fpkt"];
849--2015[label="0.5;5pkt 5fpkt"];
849--2021[label="0.5;5pkt 5fpkt"];
849--2146[label="0.9;9pkt 9fpkt"];
1732--2004[label="0.2;5pkt 5fpkt"];
1732--2015[label="0.2;5pkt 5fpkt"];
1732--2021[label="0.2;5pkt 5fpkt"];
1732--2146[label="0.9;9pkt 9fpkt"];
1732--2468[label="0.5;2pkt 2fpkt"];
2490--2814[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="165.22.33.13" dst_port="80"/>
      <filter dst_ip="150.165.176.228" dst_port="80" src_ip="196.217.170.165"/>
    </slice>
    <from sec="994482021" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02629,2.15283,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
976[label="12.194.6.61;s;4pkt 4fpkt", shape=diamond, color=yellow];
1685[label="149.168.148.133;d;10pkt 10fpkt", shape=hexagon, color=black];
1687[label="12.194.6.61;s;4pkt 4fpkt", shape=hexagon, color=black];
1965[label="149.168.148.133;d;10pkt 10fpkt", shape=polygon, color=gold];
1966[label="12.194.6.61;s;4pkt 4fpkt", shape=polygon, color=gold];
2192[label="12.194.6.61;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2716[label="12.194.6.61;3pkt 3fpkt", shape=invtriangle, color=brown];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.229.156.29:80, 149.168.148.133:*}[40%]&lt;BR/&gt;{12.194.6.61:*, 149.168.148.133:*}[40%]&lt;BR/&gt;{219.76.154.84:80, 149.168.148.133:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (15.7895%)&lt;BR/&gt; 16515: (9.21053%)&lt;BR/&gt; 14258: (9.21053%)&lt;BR/&gt; 6175: (9.21053%)&lt;BR/&gt; 1345: (9.21053%)&gt;];
}
976--1685[label="1;4pkt 4fpkt"];
976--1687[label="1;4pkt 4fpkt"];
976--1965[label="1;4pkt 4fpkt"];
976--1966[label="1;4pkt 4fpkt"];
976--2192[label="1;3pkt 3fpkt"];
976--2716[label="1;3pkt 3fpkt"];
1685--1687[label="1;4pkt 4fpkt"];
1685--1965[label="1;10pkt 10fpkt"];
1685--1966[label="1;4pkt 4fpkt"];
1685--2006[label="0.4;4pkt 4fpkt"];
1685--2192[label="1;3pkt 3fpkt"];
1685--2716[label="1;3pkt 3fpkt"];
1687--1965[label="1;4pkt 4fpkt"];
1687--1966[label="1;4pkt 4fpkt"];
1687--2192[label="1;3pkt 3fpkt"];
1687--2716[label="1;3pkt 3fpkt"];
1965--1966[label="1;4pkt 4fpkt"];
1965--2006[label="0.4;4pkt 4fpkt"];
1965--2192[label="1;3pkt 3fpkt"];
1965--2716[label="1;3pkt 3fpkt"];
1966--2192[label="1;3pkt 3fpkt"];
1966--2716[label="1;3pkt 3fpkt"];
2192--2716[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.168.148.133" src_ip="12.194.6.61"/>
      <filter dst_ip="149.168.148.133" src_ip="219.229.156.29" src_port="80"/>
      <filter dst_ip="149.168.148.133" src_ip="219.76.154.84" src_port="80"/>
    </slice>
    <from sec="994482682" usec="0"/>
    <to sec="994482869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.57.3.3"/>
    </slice>
    <from sec="994482991" usec="0"/>
    <to sec="994483029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.204.91.4"/>
    </slice>
    <from sec="994482525" usec="0"/>
    <to sec="994483204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4138,2.32221,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
3[label="219.113.126.6s;2pkt 2fpkt", shape=rectangle, color=red];
2046[label="219.113.126.6;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2661[label="219.113.126.6;12pkt 12fpkt", shape=invtriangle, color=brown];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.113.126.6:80, 149.168.166.207:*}[50%]&lt;BR/&gt;{219.113.126.6:80, 147.87.165.218:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1899: (5.76923%)&lt;BR/&gt; 1897: (5.76923%)&lt;BR/&gt; 4579: (3.84615%)&lt;BR/&gt; 1902: (3.84615%)&gt;];
}
3--2046[label="1;2pkt 2fpkt"];
3--2661[label="1;2pkt 2fpkt"];
2046--2661[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="149.168.166.207" src_ip="219.113.126.6" src_port="80"/>
      <filter dst_ip="147.87.165.218" src_ip="219.113.126.6" src_port="80"/>
    </slice>
    <from sec="994482209" usec="0"/>
    <to sec="994483075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.32.90.8"/>
    </slice>
    <from sec="994482866" usec="0"/>
    <to sec="994483112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.33457,2.16064,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
122[label="147.87.163.13;d;136pkt 136fpkt", shape=diamond, color=yellow];
123[label="210.197.253.119;s;3pkt 3fpkt", shape=diamond, color=yellow];
609[label="196.144.131.207;s;1pkt 1fpkt", shape=diamond, color=yellow];
1305[label="147.87.163.13;d;106pkt 106fpkt", shape=hexagon, color=black];
1474[label="196.144.131.207;s;1pkt 1fpkt", shape=hexagon, color=black];
1593[label="147.87.216.15;d;197pkt 197fpkt", shape=hexagon, color=black];
1932[label="147.87.163.13;d;67pkt 67fpkt", shape=polygon, color=gold];
1934[label="196.144.131.207;s;1pkt 1fpkt", shape=polygon, color=gold];
2056[label="208.196.185.8;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2239[label="208.196.185.77;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2340[label="208.196.185.110;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2357[label="210.197.253.119;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2369[label="208.196.185.124;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2377[label="208.196.185.126;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2379[label="208.196.185.127;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2382[label="13.109.91.128;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2419[label="13.109.91.140;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2578[label="196.144.131.207;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2777[label="208.196.185.127;5pkt 5fpkt", shape=invtriangle, color=brown];
2779[label="13.109.91.128;7pkt 7fpkt", shape=invtriangle, color=brown];
2911[label="13.109.91.128;8pkt 8fpkt", shape=invhouse, color=bisque];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 147.87.163.13:*}[37.7778%]&lt;BR/&gt;{*:8888, 147.87.216.15:*}[23.6111%]&lt;BR/&gt;{13.109.91.110:8875, *:*}[20.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (25.2604%)&lt;BR/&gt; 8875: (16.7535%)&lt;BR/&gt; 80: (4.16667%)&lt;BR/&gt; 6699: (1.82292%)&lt;BR/&gt; 7777: (0.868056%)&gt;];
}
122--123[label="0.666667;2pkt 2fpkt"];
122--555[label="0.0384615;1pkt 1fpkt"];
122--609[label="1;1pkt 1fpkt"];
122--641[label="0.0367647;5pkt 5fpkt"];
122--1011[label="0.433824;59pkt 59fpkt"];
122--1305[label="1;106pkt 106fpkt"];
122--1474[label="1;1pkt 1fpkt"];
122--1634[label="0.0367647;5pkt 5fpkt"];
122--1932[label="1;67pkt 67fpkt"];
122--1934[label="1;1pkt 1fpkt"];
122--2056[label="0.222222;2pkt 2fpkt"];
122--2179[label="0.166667;1pkt 1fpkt"];
122--2181[label="0.5;2pkt 2fpkt"];
122--2239[label="0.333333;1pkt 1fpkt"];
122--2340[label="0.25;1pkt 1fpkt"];
122--2357[label="1;2pkt 2fpkt"];
122--2369[label="0.166667;1pkt 1fpkt"];
122--2377[label="0.5;1pkt 1fpkt"];
122--2379[label="0.2;1pkt 1fpkt"];
122--2382[label="0.142857;1pkt 1fpkt"];
122--2416[label="0.0102041;1pkt 1fpkt"];
122--2419[label="0.6;3pkt 3fpkt"];
122--2578[label="1;1pkt 1fpkt"];
122--2777[label="0.2;1pkt 1fpkt"];
122--2779[label="0.142857;1pkt 1fpkt"];
122--2911[label="0.125;1pkt 1fpkt"];
123--163[label="0.333333;1pkt 1fpkt"];
123--1305[label="0.666667;2pkt 2fpkt"];
123--1816[label="0.333333;1pkt 1fpkt"];
123--1932[label="0.666667;2pkt 2fpkt"];
123--2357[label="1;2pkt 2fpkt"];
609--1305[label="1;1pkt 1fpkt"];
609--1474[label="1;1pkt 1fpkt"];
609--1932[label="1;1pkt 1fpkt"];
609--1934[label="1;1pkt 1fpkt"];
609--2578[label="1;1pkt 1fpkt"];
1305--1474[label="1;1pkt 1fpkt"];
1305--1634[label="0.0188679;2pkt 2fpkt"];
1305--1932[label="1;67pkt 67fpkt"];
1305--1934[label="1;1pkt 1fpkt"];
1305--2056[label="0.111111;1pkt 1fpkt"];
1305--2179[label="0.166667;1pkt 1fpkt"];
1305--2181[label="0.5;2pkt 2fpkt"];
1305--2239[label="0.333333;1pkt 1fpkt"];
1305--2340[label="0.25;1pkt 1fpkt"];
1305--2357[label="1;2pkt 2fpkt"];
1305--2369[label="0.166667;1pkt 1fpkt"];
1305--2377[label="0.5;1pkt 1fpkt"];
1305--2379[label="0.2;1pkt 1fpkt"];
1305--2382[label="0.142857;1pkt 1fpkt"];
1305--2416[label="0.0102041;1pkt 1fpkt"];
1305--2419[label="0.6;3pkt 3fpkt"];
1305--2578[label="1;1pkt 1fpkt"];
1305--2777[label="0.2;1pkt 1fpkt"];
1305--2779[label="0.142857;1pkt 1fpkt"];
1305--2911[label="0.125;1pkt 1fpkt"];
1474--1932[label="1;1pkt 1fpkt"];
1474--1934[label="1;1pkt 1fpkt"];
1474--2578[label="1;1pkt 1fpkt"];
1593--1634[label="0.126904;25pkt 25fpkt"];
1593--1915[label="0.259259;7pkt 7fpkt"];
1593--1996[label="0.0101523;2pkt 2fpkt"];
1593--2009[label="0.0101523;2pkt 2fpkt"];
1593--2016[label="0.0101523;2pkt 2fpkt"];
1593--2029[label="0.166667;1pkt 1fpkt"];
1593--2115[label="0.2;1pkt 1fpkt"];
1593--2134[label="0.166667;1pkt 1fpkt"];
1593--2158[label="0.125;1pkt 1fpkt"];
1593--2164[label="0.3;3pkt 3fpkt"];
1593--2222[label="0.125;1pkt 1fpkt"];
1593--2239[label="0.333333;1pkt 1fpkt"];
1593--2365[label="0.131148;8pkt 8fpkt"];
1593--2377[label="0.5;1pkt 1fpkt"];
1593--2379[label="0.2;1pkt 1fpkt"];
1593--2382[label="0.285714;2pkt 2fpkt"];
1593--2518[label="0.0833333;2pkt 2fpkt"];
1593--2527[label="0.136842;13pkt 13fpkt"];
1593--2627[label="0.015625;1pkt 1fpkt"];
1593--2697[label="0.142857;1pkt 1fpkt"];
1593--2777[label="0.2;1pkt 1fpkt"];
1593--2779[label="0.285714;2pkt 2fpkt"];
1593--2827[label="0.136842;13pkt 13fpkt"];
1593--2911[label="0.25;2pkt 2fpkt"];
1932--1934[label="1;1pkt 1fpkt"];
1932--2056[label="0.111111;1pkt 1fpkt"];
1932--2179[label="0.166667;1pkt 1fpkt"];
1932--2181[label="0.25;1pkt 1fpkt"];
1932--2239[label="0.333333;1pkt 1fpkt"];
1932--2340[label="0.25;1pkt 1fpkt"];
1932--2357[label="1;2pkt 2fpkt"];
1932--2369[label="0.166667;1pkt 1fpkt"];
1932--2382[label="0.142857;1pkt 1fpkt"];
1932--2419[label="0.4;2pkt 2fpkt"];
1932--2578[label="1;1pkt 1fpkt"];
1932--2779[label="0.142857;1pkt 1fpkt"];
1932--2911[label="0.125;1pkt 1fpkt"];
1934--2578[label="1;1pkt 1fpkt"];
2379--2777[label="1;5pkt 5fpkt"];
2382--2779[label="1;7pkt 7fpkt"];
2382--2911[label="1;7pkt 7fpkt"];
2779--2911[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.163.13"/>
      <filter src_ip="13.109.91.110" src_port="8875"/>
      <filter dst_ip="147.87.216.15" src_port="8888"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32913,2.23332,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
5[label="147.87.66.9s;1pkt 1fpkt", shape=rectangle, color=red];
1115[label="201.109.49.191;d;11pkt 11fpkt", shape=diamond, color=yellow];
1118[label="147.87.66.9;s;8pkt 8fpkt", shape=diamond, color=yellow];
1807[label="147.87.66.9;s;8pkt 8fpkt", shape=hexagon, color=black];
1840[label="201.109.49.191;d;11pkt 11fpkt", shape=hexagon, color=black];
2057[label="147.87.66.9;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.65.239:*, 201.109.49.191:80}[31.5789%]&lt;BR/&gt;{147.87.66.9:*, *:80}[31.5789%]&lt;BR/&gt;{147.87.66.9:*, *:554}[26.3158%]&lt;BR/&gt;{147.87.66.9:*, 201.109.49.191:*}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.7692%)&lt;BR/&gt; 554: (17.3077%)&lt;BR/&gt; 1531: (5.76923%)&lt;BR/&gt; 1530: (4.80769%)&lt;BR/&gt; 1529: (4.80769%)&gt;];
}
5--1115[label="1;1pkt 1fpkt"];
5--1118[label="1;1pkt 1fpkt"];
5--1807[label="1;1pkt 1fpkt"];
5--1840[label="1;1pkt 1fpkt"];
5--2057[label="1;1pkt 1fpkt"];
1115--1118[label="0.625;5pkt 5fpkt"];
1115--1694[label="0.545455;6pkt 6fpkt"];
1115--1807[label="0.625;5pkt 5fpkt"];
1115--1840[label="1;11pkt 11fpkt"];
1115--2057[label="0.454545;5pkt 5fpkt"];
1118--1807[label="1;8pkt 8fpkt"];
1118--1840[label="0.625;5pkt 5fpkt"];
1118--2057[label="1;8pkt 8fpkt"];
1807--1840[label="0.625;5pkt 5fpkt"];
1807--2057[label="1;8pkt 8fpkt"];
1840--2057[label="0.454545;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="201.109.49.191" src_ip="147.87.66.9"/>
      <filter dst_port="80" src_ip="147.87.66.9"/>
      <filter dst_port="554" src_ip="147.87.66.9"/>
      <filter dst_ip="201.109.49.191" dst_port="80" src_ip="147.87.65.239"/>
    </slice>
    <from sec="994482887" usec="0"/>
    <to sec="994483166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.163.38.10"/>
    </slice>
    <from sec="994482735" usec="0"/>
    <to sec="994482815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.149.15.14"/>
    </slice>
    <from sec="994482023" usec="0"/>
    <to sec="994483201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.76.6.16"/>
    </slice>
    <from sec="994482253" usec="0"/>
    <to sec="994482264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.16.159.17"/>
    </slice>
    <from sec="994482002" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.54.93.18"/>
    </slice>
    <from sec="994482003" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.11.28.19"/>
    </slice>
    <from sec="994482054" usec="0"/>
    <to sec="994483204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.139.133.21"/>
    </slice>
    <from sec="994483214" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.0.181.24"/>
    </slice>
    <from sec="994482844" usec="0"/>
    <to sec="994483185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.168.143.26"/>
    </slice>
    <from sec="994483107" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484937,2.23777,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
1273[label="149.168.148.26;s;129pkt 129fpkt", shape=diamond, color=yellow];
2104[label="149.168.148.26;131pkt 131fpkt", shape=pentagon, color=darkviolet];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.168.148.26:*, 192.145.160.192:80}[50.3817%]&lt;BR/&gt;{149.168.148.26:*, 192.145.160.94:80}[27.4809%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2308%)&lt;BR/&gt; 554: (0.769231%)&lt;BR/&gt; 1209: (0.384615%)&lt;BR/&gt; 1208: (0.384615%)&lt;BR/&gt; 1207: (0.384615%)&gt;];
}
1273--2104[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_ip="192.145.160.192" dst_port="80" src_ip="149.168.148.26"/>
      <filter dst_ip="192.145.160.94" dst_port="80" src_ip="149.168.148.26"/>
    </slice>
    <from sec="994483069" usec="0"/>
    <to sec="994483190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.19.95.31"/>
    </slice>
    <from sec="994482004" usec="0"/>
    <to sec="994482156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.76.213.31"/>
    </slice>
    <from sec="994482065" usec="0"/>
    <to sec="994483201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.167.19.33"/>
    </slice>
    <from sec="994482285" usec="0"/>
    <to sec="994482303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.35.69.42"/>
    </slice>
    <from sec="994482779" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.11.26.46"/>
    </slice>
    <from sec="994482009" usec="0"/>
    <to sec="994483094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.22.50.47"/>
    </slice>
    <from sec="994482174" usec="0"/>
    <to sec="994483201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484937,2.23777,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
1254[label="149.180.101.48;s;81pkt 81fpkt", shape=diamond, color=yellow];
1259[label="13.192.69.82;d;94pkt 94fpkt", shape=diamond, color=yellow];
2162[label="149.180.101.48;80pkt 80fpkt", shape=pentagon, color=darkviolet];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.180.101.48:*, 13.192.69.82:80}[68.2692%]&lt;BR/&gt;{196.217.155.176:*, 13.192.69.82:80}[20.1923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4677: (0.588235%)&lt;BR/&gt; 4676: (0.588235%)&lt;BR/&gt; 4675: (0.588235%)&lt;BR/&gt; 4674: (0.588235%)&gt;];
}
1254--1259[label="0.876543;71pkt 71fpkt"];
1254--2162[label="1;80pkt 80fpkt"];
1259--2162[label="0.8875;71pkt 71fpkt"];
1259--2232[label="0.0181818;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="13.192.69.82" dst_port="80" src_ip="149.180.101.48"/>
      <filter dst_ip="13.192.69.82" dst_port="80" src_ip="196.217.155.176"/>
    </slice>
    <from sec="994482949" usec="0"/>
    <to sec="994483134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.1.132.48"/>
    </slice>
    <from sec="994482028" usec="0"/>
    <to sec="994482095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
399[label="144.188.155.69;d;50pkt 50fpkt", shape=diamond, color=yellow];
1046[label="160.164.70.50;s;41pkt 41fpkt", shape=diamond, color=yellow];
1797[label="160.164.70.50;s;35pkt 35fpkt", shape=hexagon, color=black];
2169[label="160.164.70.50;49pkt 49fpkt", shape=pentagon, color=darkviolet];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.0.19:*, 144.188.155.69:80}[36.7089%]&lt;BR/&gt;{160.164.70.50:*, 144.188.155.69:80}[30.3797%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48%)&lt;BR/&gt; 21: (1.71429%)&lt;BR/&gt; 1173: (1.14286%)&lt;BR/&gt; 1171: (1.14286%)&lt;BR/&gt; 1165: (1.14286%)&gt;];
}
399--1046[label="0.487805;20pkt 20fpkt"];
399--1797[label="0.571429;20pkt 20fpkt"];
399--2169[label="0.408163;20pkt 20fpkt"];
1046--1797[label="1;35pkt 35fpkt"];
1046--2169[label="1;41pkt 41fpkt"];
1797--2169[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="144.188.155.69" dst_port="80" src_ip="160.164.70.50"/>
      <filter dst_ip="144.188.155.69" dst_port="80" src_ip="147.87.0.19"/>
    </slice>
    <from sec="994482224" usec="0"/>
    <to sec="994483213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484937,2.23777,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
1005[label="197.11.31.201;d;88pkt 88fpkt", shape=diamond, color=yellow];
2174[label="219.226.151.53;75pkt 75fpkt", shape=pentagon, color=darkviolet];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.226.151.53:*, 197.11.31.201:6669}[42.2222%]&lt;BR/&gt;{219.226.151.53:113, 197.11.31.201:*}[42.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (24.2331%)&lt;BR/&gt; 6669: (22.6994%)&lt;BR/&gt; 6667: (2.14724%)&lt;BR/&gt; 52087: (0.613497%)&lt;BR/&gt; 52061: (0.613497%)&gt;];
}
1005--2174[label="0.973333;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="197.11.31.201" src_ip="219.226.151.53" src_port="113"/>
      <filter dst_ip="197.11.31.201" dst_port="6669" src_ip="219.226.151.53"/>
    </slice>
    <from sec="994482005" usec="0"/>
    <to sec="994483195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.42.177.54"/>
    </slice>
    <from sec="994482787" usec="0"/>
    <to sec="994482852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.232.72.55"/>
    </slice>
    <from sec="994482910" usec="0"/>
    <to sec="994482956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.192.165.57"/>
    </slice>
    <from sec="994482035" usec="0"/>
    <to sec="994483192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.87.235.59"/>
    </slice>
    <from sec="994482705" usec="0"/>
    <to sec="994483039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
1052[label="219.48.181.60;s;44pkt 44fpkt", shape=diamond, color=yellow];
1763[label="149.168.44.198;d;44pkt 44fpkt", shape=hexagon, color=black];
2191[label="219.48.181.60;44pkt 44fpkt", shape=pentagon, color=darkviolet];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.48.181.60:80, 149.168.44.198:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2253: (1.13636%)&lt;BR/&gt; 2250: (1.13636%)&lt;BR/&gt; 2249: (1.13636%)&lt;BR/&gt; 2246: (1.13636%)&gt;];
}
1052--1053[label="1;44pkt 44fpkt"];
1052--1763[label="1;44pkt 44fpkt"];
1052--2191[label="1;44pkt 44fpkt"];
1763--2191[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="149.168.44.198" src_ip="219.48.181.60" src_port="80"/>
    </slice>
    <from sec="994482775" usec="0"/>
    <to sec="994482968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.190.166.62"/>
    </slice>
    <from sec="994482756" usec="0"/>
    <to sec="994483018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
921[label="147.87.182.62;s;48pkt 48fpkt", shape=diamond, color=yellow];
1784[label="147.87.182.62;s;24pkt 24fpkt", shape=hexagon, color=black];
2196[label="147.87.182.62;57pkt 57fpkt", shape=pentagon, color=darkviolet];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.182.62:*, 75.227.95.165:80}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8372%)&lt;BR/&gt; 24816: (1.16279%)&lt;BR/&gt; 24594: (1.16279%)&lt;BR/&gt; 24476: (1.16279%)&lt;BR/&gt; 24449: (1.16279%)&gt;];
}
921--1784[label="1;24pkt 24fpkt"];
921--2196[label="1;48pkt 48fpkt"];
1784--2196[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="75.227.95.165" dst_port="80" src_ip="147.87.182.62"/>
    </slice>
    <from sec="994482007" usec="0"/>
    <to sec="994483212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.206.74.64"/>
    </slice>
    <from sec="994483034" usec="0"/>
    <to sec="994483160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.113.85.65"/>
    </slice>
    <from sec="994482265" usec="0"/>
    <to sec="994482281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.87.67.70"/>
    </slice>
    <from sec="994482467" usec="0"/>
    <to sec="994483025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.0.117.74"/>
    </slice>
    <from sec="994482251" usec="0"/>
    <to sec="994483209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.132.30.79"/>
    </slice>
    <from sec="994482004" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484937,2.23777,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
1152[label="136.211.192.79;s;99pkt 99fpkt", shape=diamond, color=yellow];
2243[label="136.211.192.79;99pkt 99fpkt", shape=pentagon, color=darkviolet];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.211.192.79:6257, *:6257}[74.7475%]&lt;BR/&gt;{136.211.192.79:6699, *:*}[24.2424%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (75.2525%)&lt;BR/&gt; 6699: (12.1212%)&lt;BR/&gt; 6698: (0.505051%)&lt;BR/&gt; 4999: (0.505051%)&lt;BR/&gt; 4894: (0.505051%)&gt;];
}
1152--2243[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter src_ip="136.211.192.79" src_port="6699"/>
      <filter dst_port="6257" src_ip="136.211.192.79" src_port="6257"/>
    </slice>
    <from sec="994482024" usec="0"/>
    <to sec="994483208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.113.102.80"/>
    </slice>
    <from sec="994483190" usec="0"/>
    <to sec="994483195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.217.187.80"/>
    </slice>
    <from sec="994483061" usec="0"/>
    <to sec="994483089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
1148[label="128.141.102.81;s;15pkt 15fpkt", shape=diamond, color=yellow];
1868[label="128.141.102.81;s;15pkt 15fpkt", shape=hexagon, color=black];
2248[label="128.141.102.81;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.141.102.81:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8989: (9.78261%)&lt;BR/&gt; 8890: (9.78261%)&lt;BR/&gt; 8845: (9.78261%)&lt;BR/&gt; 7777: (7.6087%)&lt;BR/&gt; 1111: (6.52174%)&gt;];
}
1148--1868[label="1;15pkt 15fpkt"];
1148--2248[label="1;15pkt 15fpkt"];
1868--2248[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="128.141.102.81"/>
    </slice>
    <from sec="994482006" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.180.51.84"/>
    </slice>
    <from sec="994483043" usec="0"/>
    <to sec="994483165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.8.210.85"/>
    </slice>
    <from sec="994483204" usec="0"/>
    <to sec="994483211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.168.7.89"/>
    </slice>
    <from sec="994483214" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.165.10.89"/>
    </slice>
    <from sec="994482003" usec="0"/>
    <to sec="994482134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.186.249.91"/>
    </slice>
    <from sec="994482912" usec="0"/>
    <to sec="994482992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.253.37.94"/>
    </slice>
    <from sec="994482410" usec="0"/>
    <to sec="994482496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484937,2.23777,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
1085[label="160.164.137.16;d;31pkt 31fpkt", shape=diamond, color=yellow];
2291[label="142.198.242.96;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 160.164.137.16:25}[61.7021%]&lt;BR/&gt;{142.198.242.96:*, *:25}[29.7872%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.9184%)&lt;BR/&gt; 61360: (3.06122%)&lt;BR/&gt; 53: (3.06122%)&lt;BR/&gt; 64361: (2.04082%)&lt;BR/&gt; 64347: (2.04082%)&gt;];
}
1085--1093[label="0.0645161;2pkt 2fpkt"];
1085--1233[label="0.0769231;1pkt 1fpkt"];
1085--1787[label="1;31pkt 31fpkt"];
1085--2291[label="0.111111;2pkt 2fpkt"];
1085--2528[label="0.0333333;1pkt 1fpkt"];
1085--2558[label="0.0588235;1pkt 1fpkt"];
1085--2828[label="0.0357143;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="142.198.242.96"/>
      <filter dst_ip="160.164.137.16" dst_port="25"/>
    </slice>
    <from sec="994482049" usec="0"/>
    <to sec="994483112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.86.222.98"/>
    </slice>
    <from sec="994482008" usec="0"/>
    <to sec="994483213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.87.29.99"/>
    </slice>
    <from sec="994482843" usec="0"/>
    <to sec="994483185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.180.248.102"/>
    </slice>
    <from sec="994482672" usec="0"/>
    <to sec="994482700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.87.163.103"/>
    </slice>
    <from sec="994482720" usec="0"/>
    <to sec="994482812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.0.126.104"/>
    </slice>
    <from sec="994482037" usec="0"/>
    <to sec="994483202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666633,2.22286,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
675[label="147.132.155.104;s;2pkt 2fpkt", shape=diamond, color=yellow];
2324[label="147.132.155.104;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2758[label="147.132.155.104;2pkt 2fpkt", shape=invtriangle, color=brown];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.132.155.104:3729, 149.54.147.41:7442}[50%]&lt;BR/&gt;{147.132.155.104:3731, 149.54.147.41:7443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7443: (25%)&lt;BR/&gt; 7442: (25%)&lt;BR/&gt; 3731: (25%)&lt;BR/&gt; 3729: (25%)&gt;];
}
675--2324[label="1;2pkt 2fpkt"];
675--2758[label="1;2pkt 2fpkt"];
2324--2758[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.54.147.41" dst_port="7443" src_ip="147.132.155.104" src_port="3731"/>
      <filter dst_ip="149.54.147.41" dst_port="7442" src_ip="147.132.155.104" src_port="3729"/>
    </slice>
    <from sec="994482434" usec="0"/>
    <to sec="994482554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666633,2.22286,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
1255[label="196.212.13.105;s;45pkt 45fpkt", shape=diamond, color=yellow];
2326[label="196.212.13.105;44pkt 44fpkt", shape=pentagon, color=darkviolet];
2759[label="196.212.13.105;44pkt 44fpkt", shape=invtriangle, color=brown];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.212.13.105:*, 192.14.180.73:80}[37.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1770: (1.12782%)&lt;BR/&gt; 1769: (1.12782%)&lt;BR/&gt; 1768: (1.12782%)&lt;BR/&gt; 1767: (1.12782%)&gt;];
}
1255--2326[label="1;44pkt 44fpkt"];
1255--2759[label="1;44pkt 44fpkt"];
2326--2759[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="192.14.180.73" dst_port="80" src_ip="196.212.13.105"/>
    </slice>
    <from sec="994482954" usec="0"/>
    <to sec="994483195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.204.88.105"/>
    </slice>
    <from sec="994483214" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08268,2.23043,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
377[label="196.217.132.25;d;308pkt 308fpkt", shape=diamond, color=yellow];
2077[label="209.5.186.14;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2329[label="196.180.23.106;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2556[label="13.160.208.196;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2657[label="134.189.198.255;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2761[label="196.180.23.106;10pkt 10fpkt", shape=invtriangle, color=brown];
2906[label="196.180.23.106;10pkt 10fpkt", shape=invhouse, color=bisque];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 196.217.132.25:*}[73.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (42.9847%)&lt;BR/&gt; 53: (4.33673%)&lt;BR/&gt; 113: (3.95408%)&lt;BR/&gt; 0: (1.78571%)&lt;BR/&gt; 1676: (0.510204%)&gt;];
}
377--827[label="0.0285714;1pkt 1fpkt"];
377--1019[label="0.0416667;1pkt 1fpkt"];
377--1615[label="1;164pkt 164fpkt"];
377--1999[label="0.00649351;2pkt 2fpkt"];
377--2000[label="0.00974026;3pkt 3fpkt"];
377--2003[label="0.00974026;3pkt 3fpkt"];
377--2005[label="0.0162338;5pkt 5fpkt"];
377--2007[label="0.0227273;7pkt 7fpkt"];
377--2012[label="0.00649351;2pkt 2fpkt"];
377--2014[label="0.00974026;3pkt 3fpkt"];
377--2019[label="0.00649351;2pkt 2fpkt"];
377--2020[label="0.00974026;3pkt 3fpkt"];
377--2077[label="0.444444;4pkt 4fpkt"];
377--2322[label="0.0555556;1pkt 1fpkt"];
377--2329[label="1;10pkt 10fpkt"];
377--2334[label="0.777778;7pkt 7fpkt"];
377--2556[label="0.0357143;1pkt 1fpkt"];
377--2657[label="1;17pkt 17fpkt"];
377--2756[label="0.0555556;1pkt 1fpkt"];
377--2761[label="1;10pkt 10fpkt"];
377--2906[label="1;10pkt 10fpkt"];
2329--2761[label="1;10pkt 10fpkt"];
2329--2906[label="1;10pkt 10fpkt"];
2761--2906[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="196.217.132.25" src_port="25"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.74.82.109"/>
    </slice>
    <from sec="994483214" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.204.88.109"/>
    </slice>
    <from sec="994482841" usec="0"/>
    <to sec="994482886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.22.56.112"/>
    </slice>
    <from sec="994482015" usec="0"/>
    <to sec="994483210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.141.255.112"/>
    </slice>
    <from sec="994482845" usec="0"/>
    <to sec="994482968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
348[label="196.212.9.122;s;310pkt 310fpkt", shape=diamond, color=yellow];
507[label="211.191.27.193;d;70pkt 70fpkt", shape=diamond, color=yellow];
1492[label="211.191.27.193;d;70pkt 70fpkt", shape=hexagon, color=black];
2360[label="196.212.9.122;320pkt 320fpkt", shape=pentagon, color=darkviolet];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.212.9.122:*, *:80}[81.1856%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3506%)&lt;BR/&gt; 10000: (0.649351%)&lt;BR/&gt; 4379: (0.25974%)&lt;BR/&gt; 4377: (0.25974%)&lt;BR/&gt; 4372: (0.25974%)&gt;];
}
348--507[label="0.0285714;2pkt 2fpkt"];
348--653[label="0.0149254;1pkt 1fpkt"];
348--985[label="0.027027;1pkt 1fpkt"];
348--998[label="0.0344828;1pkt 1fpkt"];
348--1002[label="0.0638298;6pkt 6fpkt"];
348--1226[label="0.0204082;2pkt 2fpkt"];
348--1492[label="0.0285714;2pkt 2fpkt"];
348--1721[label="0.0344828;1pkt 1fpkt"];
348--1994[label="0.0344828;1pkt 1fpkt"];
348--1997[label="0.0709677;22pkt 22fpkt"];
348--2001[label="0.0193548;6pkt 6fpkt"];
348--2002[label="0.00322581;1pkt 1fpkt"];
348--2004[label="0.00645161;2pkt 2fpkt"];
348--2010[label="0.0709677;22pkt 22fpkt"];
348--2013[label="0.00322581;1pkt 1fpkt"];
348--2015[label="0.00645161;2pkt 2fpkt"];
348--2017[label="0.0709677;22pkt 22fpkt"];
348--2021[label="0.00645161;2pkt 2fpkt"];
348--2360[label="1;310pkt 310fpkt"];
507--1492[label="1;70pkt 70fpkt"];
507--2360[label="0.0285714;2pkt 2fpkt"];
1492--2360[label="0.0285714;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="196.212.9.122"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.3.66.124"/>
    </slice>
    <from sec="994482042" usec="0"/>
    <to sec="994483195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.22.56.126"/>
    </slice>
    <from sec="994482011" usec="0"/>
    <to sec="994483196" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.182.143.128"/>
    </slice>
    <from sec="994483101" usec="0"/>
    <to sec="994483205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.13.136.131"/>
    </slice>
    <from sec="994483214" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.48.12.133"/>
    </slice>
    <from sec="994482822" usec="0"/>
    <to sec="994483098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484937,2.23777,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
182[label="147.87.132.239;d;219pkt 219fpkt", shape=diamond, color=yellow];
2264[label="192.253.12.86;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2331[label="209.11.198.107;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2404[label="74.36.160.134;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2565[label="74.118.9.203;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 147.87.132.239:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5822: (0.361011%)&lt;BR/&gt; 5817: (0.361011%)&lt;BR/&gt; 5816: (0.361011%)&lt;BR/&gt; 5791: (0.361011%)&gt;];
}
182--194[label="0.0319635;7pkt 7fpkt"];
182--308[label="0.0136986;3pkt 3fpkt"];
182--414[label="0.0152284;3pkt 3fpkt"];
182--1041[label="0.333333;24pkt 24fpkt"];
182--1176[label="1;12pkt 12fpkt"];
182--1398[label="0.0273973;6pkt 6fpkt"];
182--1440[label="0.0136986;3pkt 3fpkt"];
182--1832[label="0.352941;24pkt 24fpkt"];
182--1996[label="0.191781;42pkt 42fpkt"];
182--2006[label="0.0547945;12pkt 12fpkt"];
182--2008[label="0.0365297;8pkt 8fpkt"];
182--2009[label="0.191781;42pkt 42fpkt"];
182--2016[label="0.191781;42pkt 42fpkt"];
182--2264[label="1;21pkt 21fpkt"];
182--2331[label="1;12pkt 12fpkt"];
182--2404[label="1;16pkt 16fpkt"];
182--2430[label="0.315789;24pkt 24fpkt"];
182--2441[label="0.0333333;2pkt 2fpkt"];
182--2467[label="1;11pkt 11fpkt"];
182--2531[label="0.0148515;3pkt 3fpkt"];
182--2565[label="1;9pkt 9fpkt"];
182--2830[label="0.0147783;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.132.239" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.186.226.136"/>
    </slice>
    <from sec="994483214" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.22.7.141"/>
    </slice>
    <from sec="994482103" usec="0"/>
    <to sec="994483213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.168.68.144"/>
    </slice>
    <from sec="994482877" usec="0"/>
    <to sec="994483161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.11.31.148"/>
    </slice>
    <from sec="994482022" usec="0"/>
    <to sec="994483210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484937,2.23777,501,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
988[label="165.22.59.148;s;19pkt 19fpkt", shape=diamond, color=yellow];
2446[label="165.22.59.148;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.22.59.148:*, *:21}[55%]&lt;BR/&gt;{165.22.59.148:*, 13.149.14.172:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (28.9474%)&lt;BR/&gt; 41178: (6.57895%)&lt;BR/&gt; 64478: (2.63158%)&lt;BR/&gt; 64151: (2.63158%)&lt;BR/&gt; 64149: (2.63158%)&gt;];
}
988--2446[label="0.947368;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="13.149.14.172" src_ip="165.22.59.148"/>
      <filter dst_port="21" src_ip="165.22.59.148"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
1029[label="196.212.12.134;d;18pkt 18fpkt", shape=diamond, color=yellow];
1196[label="172.9.138.26;s;11pkt 11fpkt", shape=diamond, color=yellow];
1896[label="172.9.138.26;s;11pkt 11fpkt", shape=hexagon, color=black];
2102[label="172.9.138.26;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2451[label="219.172.69.152;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.172.69.152:389, 196.212.12.134:*}[54.5455%]&lt;BR/&gt;{172.9.138.26:*, 196.212.12.134:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 389: (15.4412%)&lt;BR/&gt; 1503: (11.7647%)&lt;BR/&gt; 0: (7.35294%)&lt;BR/&gt; 49597: (2.94118%)&lt;BR/&gt; 49596: (2.94118%)&gt;];
}
1029--1196[label="1;11pkt 11fpkt"];
1029--1896[label="1;11pkt 11fpkt"];
1029--2102[label="1;10pkt 10fpkt"];
1029--2451[label="0.166667;3pkt 3fpkt"];
1029--2602[label="0.166667;3pkt 3fpkt"];
1196--1896[label="1;11pkt 11fpkt"];
1196--2102[label="1;10pkt 10fpkt"];
1896--2102[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="196.212.12.134" src_ip="172.9.138.26"/>
      <filter dst_ip="196.212.12.134" src_ip="219.172.69.152" src_port="389"/>
    </slice>
    <from sec="994482049" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
875[label="128.141.130.227;d;222pkt 222fpkt", shape=diamond, color=yellow];
1796[label="128.141.130.227;d;149pkt 149fpkt", shape=hexagon, color=black];
2356[label="211.238.151.119;29pkt 29fpkt", shape=pentagon, color=darkviolet];
2453[label="211.249.240.152;22pkt 22fpkt", shape=pentagon, color=darkviolet];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 128.141.130.227:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1195: (0.35545%)&lt;BR/&gt; 1194: (0.35545%)&lt;BR/&gt; 1193: (0.35545%)&lt;BR/&gt; 1188: (0.35545%)&gt;];
}
875--1796[label="1;149pkt 149fpkt"];
875--2006[label="0.027027;6pkt 6fpkt"];
875--2008[label="0.0495495;11pkt 11fpkt"];
875--2127[label="0.657143;23pkt 23fpkt"];
875--2238[label="0.69697;23pkt 23fpkt"];
875--2356[label="1;29pkt 29fpkt"];
875--2453[label="0.818182;18pkt 18fpkt"];
875--2471[label="0.878788;29pkt 29fpkt"];
1796--2006[label="0.0402685;6pkt 6fpkt"];
1796--2008[label="0.00671141;1pkt 1fpkt"];
1796--2127[label="0.371429;13pkt 13fpkt"];
1796--2238[label="0.363636;12pkt 12fpkt"];
1796--2356[label="1;29pkt 29fpkt"];
1796--2453[label="0.545455;12pkt 12fpkt"];
1796--2471[label="0.515152;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.130.227" src_port="80"/>
    </slice>
    <from sec="994482638" usec="0"/>
    <to sec="994483206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.179.72.155"/>
    </slice>
    <from sec="994482924" usec="0"/>
    <to sec="994483001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.76.172.155"/>
    </slice>
    <from sec="994482019" usec="0"/>
    <to sec="994483211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.171.22.156"/>
    </slice>
    <from sec="994482029" usec="0"/>
    <to sec="994483199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.141.167.163"/>
    </slice>
    <from sec="994482009" usec="0"/>
    <to sec="994483056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.21.230.163"/>
    </slice>
    <from sec="994482454" usec="0"/>
    <to sec="994482857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.87.216.164"/>
    </slice>
    <from sec="994482022" usec="0"/>
    <to sec="994483204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.80.132.165"/>
    </slice>
    <from sec="994483062" usec="0"/>
    <to sec="994483089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.201.25.178"/>
    </slice>
    <from sec="994483083" usec="0"/>
    <to sec="994483098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699975,2.1774,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
158[label="149.168.82.171;d;235pkt 235fpkt", shape=diamond, color=yellow];
414[label="192.212.33.185;s;197pkt 197fpkt", shape=diamond, color=yellow];
445[label="210.105.124.110;s;2pkt 2fpkt", shape=diamond, color=yellow];
665[label="160.164.210.134;d;72pkt 72fpkt", shape=diamond, color=yellow];
686[label="219.1.184.188;s;132pkt 132fpkt", shape=diamond, color=yellow];
763[label="196.212.160.54;d;50pkt 50fpkt", shape=diamond, color=yellow];
888[label="147.87.5.195;d;120pkt 120fpkt", shape=diamond, color=yellow];
971[label="149.168.148.133;d;19pkt 19fpkt", shape=diamond, color=yellow];
1726[label="192.212.33.185;s;189pkt 189fpkt", shape=hexagon, color=black];
1735[label="192.212.33.132;s;194pkt 194fpkt", shape=hexagon, color=black];
1847[label="147.87.5.195;d;120pkt 120fpkt", shape=hexagon, color=black];
2339[label="210.105.124.110;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2364[label="219.1.228.122;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2415[label="12.197.108.139;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2531[label="192.212.33.185;202pkt 202fpkt", shape=pentagon, color=darkviolet];
2535[label="219.1.184.188;133pkt 133fpkt", shape=pentagon, color=darkviolet];
2765[label="210.105.124.110;1pkt 1fpkt", shape=invtriangle, color=brown];
2787[label="12.197.108.139;7pkt 7fpkt", shape=invtriangle, color=brown];
2830[label="192.212.33.185;203pkt 203fpkt", shape=invtriangle, color=brown];
2834[label="219.1.184.188;132pkt 132fpkt", shape=invtriangle, color=brown];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 149.168.82.171:*}[25.9001%]&lt;BR/&gt;{192.212.33.185:80, *:*}[23.5772%]&lt;BR/&gt;{192.212.33.132:80, *:*}[22.5319%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4549%)&lt;BR/&gt; 8080: (0.346878%)&lt;BR/&gt; 1059: (0.222993%)&lt;BR/&gt; 1057: (0.222993%)&lt;BR/&gt; 1056: (0.222993%)&gt;];
}
158--160[label="1;28pkt 28fpkt"];
158--194[label="0.12766;30pkt 30fpkt"];
158--287[label="1;36pkt 36fpkt"];
158--414[label="0.0253807;5pkt 5fpkt"];
158--445[label="1;2pkt 2fpkt"];
158--615[label="0.00735294;1pkt 1fpkt"];
158--686[label="0.136364;18pkt 18fpkt"];
158--725[label="0.027027;1pkt 1fpkt"];
158--742[label="0.00555556;1pkt 1fpkt"];
158--797[label="0.00689655;1pkt 1fpkt"];
158--821[label="0.00526316;1pkt 1fpkt"];
158--915[label="0.0357143;1pkt 1fpkt"];
158--986[label="0.0263158;1pkt 1fpkt"];
158--1028[label="0.0327869;2pkt 2fpkt"];
158--1151[label="0.0102041;1pkt 1fpkt"];
158--1212[label="0.0123457;1pkt 1fpkt"];
158--1398[label="0.123404;29pkt 29fpkt"];
158--1611[label="0.012766;3pkt 3fpkt"];
158--1614[label="0.00909091;1pkt 1fpkt"];
158--1654[label="0.00862069;1pkt 1fpkt"];
158--1711[label="1;26pkt 26fpkt"];
158--1726[label="0.026455;5pkt 5fpkt"];
158--1772[label="0.00775194;1pkt 1fpkt"];
158--1780[label="0.030303;1pkt 1fpkt"];
158--1996[label="0.106383;25pkt 25fpkt"];
158--2006[label="0.093617;22pkt 22fpkt"];
158--2008[label="0.0595745;14pkt 14fpkt"];
158--2009[label="0.106383;25pkt 25fpkt"];
158--2016[label="0.106383;25pkt 25fpkt"];
158--2035[label="0.00526316;1pkt 1fpkt"];
158--2038[label="0.00970874;1pkt 1fpkt"];
158--2048[label="0.285714;8pkt 8fpkt"];
158--2072[label="0.0105263;1pkt 1fpkt"];
158--2339[label="1;1pkt 1fpkt"];
158--2531[label="0.019802;4pkt 4fpkt"];
158--2535[label="0.135338;18pkt 18fpkt"];
158--2602[label="0.00851064;2pkt 2fpkt"];
158--2662[label="0.269231;7pkt 7fpkt"];
158--2670[label="0.0105263;1pkt 1fpkt"];
158--2694[label="0.00537634;1pkt 1fpkt"];
158--2765[label="1;1pkt 1fpkt"];
158--2830[label="0.0246305;5pkt 5fpkt"];
158--2834[label="0.128788;17pkt 17fpkt"];
414--665[label="0.111111;8pkt 8fpkt"];
414--763[label="0.02;1pkt 1fpkt"];
414--971[label="0.0526316;1pkt 1fpkt"];
414--1317[label="0.00507614;1pkt 1fpkt"];
414--1352[label="0.0416667;5pkt 5fpkt"];
414--1640[label="0.00507614;1pkt 1fpkt"];
414--1726[label="1;189pkt 189fpkt"];
414--1996[label="0.00507614;1pkt 1fpkt"];
414--2006[label="0.035533;7pkt 7fpkt"];
414--2008[label="0.0456853;9pkt 9fpkt"];
414--2009[label="0.00507614;1pkt 1fpkt"];
414--2016[label="0.00507614;1pkt 1fpkt"];
414--2531[label="0.994924;196pkt 196fpkt"];
414--2830[label="1;197pkt 197fpkt"];
445--2339[label="1;1pkt 1fpkt"];
445--2765[label="1;1pkt 1fpkt"];
665--742[label="0.291667;21pkt 21fpkt"];
665--1654[label="0.291667;21pkt 21fpkt"];
665--1726[label="0.111111;8pkt 8fpkt"];
665--1735[label="0.388889;28pkt 28fpkt"];
665--2006[label="0.0416667;3pkt 3fpkt"];
665--2128[label="0.291667;21pkt 21fpkt"];
665--2415[label="1;7pkt 7fpkt"];
665--2531[label="0.111111;8pkt 8fpkt"];
665--2694[label="0.291667;21pkt 21fpkt"];
665--2787[label="1;7pkt 7fpkt"];
665--2830[label="0.111111;8pkt 8fpkt"];
686--888[label="0.85;102pkt 102fpkt"];
686--1709[label="0.0909091;12pkt 12fpkt"];
686--1847[label="0.85;102pkt 102fpkt"];
686--1996[label="0.0378788;5pkt 5fpkt"];
686--2006[label="0.0757576;10pkt 10fpkt"];
686--2008[label="0.0833333;11pkt 11fpkt"];
686--2009[label="0.0378788;5pkt 5fpkt"];
686--2016[label="0.0378788;5pkt 5fpkt"];
686--2535[label="0.992424;131pkt 131fpkt"];
686--2834[label="0.984848;130pkt 130fpkt"];
763--1151[label="0.04;2pkt 2fpkt"];
763--1726[label="0.02;1pkt 1fpkt"];
763--1735[label="0.02;1pkt 1fpkt"];
763--2038[label="0.04;2pkt 2fpkt"];
763--2095[label="0.0769231;1pkt 1fpkt"];
763--2376[label="0.333333;8pkt 8fpkt"];
763--2531[label="0.02;1pkt 1fpkt"];
763--2679[label="0.0769231;1pkt 1fpkt"];
763--2830[label="0.02;1pkt 1fpkt"];
888--1611[label="0.00833333;1pkt 1fpkt"];
888--1847[label="1;120pkt 120fpkt"];
888--1996[label="0.0416667;5pkt 5fpkt"];
888--2006[label="0.0333333;4pkt 4fpkt"];
888--2008[label="0.0416667;5pkt 5fpkt"];
888--2009[label="0.0416667;5pkt 5fpkt"];
888--2016[label="0.0416667;5pkt 5fpkt"];
888--2364[label="1;2pkt 2fpkt"];
888--2535[label="0.841667;101pkt 101fpkt"];
888--2602[label="0.00833333;1pkt 1fpkt"];
888--2834[label="0.841667;101pkt 101fpkt"];
971--976[label="1;4pkt 4fpkt"];
971--1398[label="0.105263;2pkt 2fpkt"];
971--1440[label="0.315789;6pkt 6fpkt"];
971--1685[label="1;10pkt 10fpkt"];
971--1687[label="1;4pkt 4fpkt"];
971--1726[label="0.0526316;1pkt 1fpkt"];
971--1735[label="0.105263;2pkt 2fpkt"];
971--1965[label="1;10pkt 10fpkt"];
971--1966[label="1;4pkt 4fpkt"];
971--2006[label="0.210526;4pkt 4fpkt"];
971--2192[label="1;3pkt 3fpkt"];
971--2531[label="0.0526316;1pkt 1fpkt"];
971--2716[label="1;3pkt 3fpkt"];
971--2830[label="0.0526316;1pkt 1fpkt"];
1726--1996[label="0.00529101;1pkt 1fpkt"];
1726--2006[label="0.037037;7pkt 7fpkt"];
1726--2008[label="0.047619;9pkt 9fpkt"];
1726--2009[label="0.00529101;1pkt 1fpkt"];
1726--2016[label="0.00529101;1pkt 1fpkt"];
1726--2531[label="0.994709;188pkt 188fpkt"];
1726--2830[label="1;189pkt 189fpkt"];
1735--1931[label="0.55;22pkt 22fpkt"];
1735--2006[label="0.0979381;19pkt 19fpkt"];
1735--2008[label="0.0876289;17pkt 17fpkt"];
1847--1996[label="0.0416667;5pkt 5fpkt"];
1847--2006[label="0.0333333;4pkt 4fpkt"];
1847--2008[label="0.0416667;5pkt 5fpkt"];
1847--2009[label="0.0416667;5pkt 5fpkt"];
1847--2016[label="0.0416667;5pkt 5fpkt"];
1847--2364[label="1;2pkt 2fpkt"];
1847--2535[label="0.841667;101pkt 101fpkt"];
1847--2602[label="0.00833333;1pkt 1fpkt"];
1847--2834[label="0.841667;101pkt 101fpkt"];
2339--2765[label="1;1pkt 1fpkt"];
2415--2787[label="1;7pkt 7fpkt"];
2531--2830[label="1;202pkt 202fpkt"];
2535--2834[label="1;132pkt 132fpkt"];
</description>
    <slice>
      <filter src_ip="192.212.33.185" src_port="80"/>
      <filter src_ip="192.212.33.132" src_port="80"/>
      <filter dst_ip="149.168.82.171" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
2022[label="147.87.11.1;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.11.1:1049, 192.14.131.7:80}[20%]&lt;BR/&gt;{147.87.11.1:1050, 192.14.131.7:80}[20%]&lt;BR/&gt;{147.87.11.1:1056, 192.14.131.7:80}[20%]&lt;BR/&gt;{147.87.11.1:1057, 192.14.131.7:80}[20%]&lt;BR/&gt;{147.87.11.1:1060, 192.14.131.7:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1060: (10%)&lt;BR/&gt; 1057: (10%)&lt;BR/&gt; 1056: (10%)&lt;BR/&gt; 1050: (10%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="192.14.131.7" dst_port="80" src_ip="147.87.11.1" src_port="1060"/>
      <filter dst_ip="192.14.131.7" dst_port="80" src_ip="147.87.11.1" src_port="1057"/>
      <filter dst_ip="192.14.131.7" dst_port="80" src_ip="147.87.11.1" src_port="1056"/>
      <filter dst_ip="192.14.131.7" dst_port="80" src_ip="147.87.11.1" src_port="1050"/>
      <filter dst_ip="192.14.131.7" dst_port="80" src_ip="147.87.11.1" src_port="1049"/>
    </slice>
    <from sec="994482887" usec="0"/>
    <to sec="994482933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.20.48.189"/>
    </slice>
    <from sec="994482026" usec="0"/>
    <to sec="994483212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.8.140.189"/>
    </slice>
    <from sec="994482732" usec="0"/>
    <to sec="994482896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.38.234.194"/>
    </slice>
    <from sec="994482415" usec="0"/>
    <to sec="994483051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.33457,2.16064,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
264[label="200.171.107.41;s;69pkt 69fpkt", shape=diamond, color=yellow];
462[label="165.22.59.161;d;24pkt 24fpkt", shape=diamond, color=yellow];
469[label="163.78.76.145;s;32pkt 32fpkt", shape=diamond, color=yellow];
538[label="165.22.4.188;d;30pkt 30fpkt", shape=diamond, color=yellow];
618[label="165.22.206.183;d;18pkt 18fpkt", shape=diamond, color=yellow];
690[label="203.87.118.125;s;3pkt 3fpkt", shape=diamond, color=yellow];
903[label="13.164.59.63;s;12pkt 12fpkt", shape=diamond, color=yellow];
1030[label="165.22.52.211;d;11pkt 11fpkt", shape=diamond, color=yellow];
1160[label="165.22.6.37;d;17pkt 17fpkt", shape=diamond, color=yellow];
1216[label="165.22.7.10;d;9pkt 9fpkt", shape=diamond, color=yellow];
1218[label="165.22.4.190;d;124pkt 124fpkt", shape=diamond, color=yellow];
1346[label="200.171.107.41;s;26pkt 26fpkt", shape=hexagon, color=black];
1536[label="165.22.4.188;d;30pkt 30fpkt", shape=hexagon, color=black];
1537[label="203.87.118.125;s;2pkt 2fpkt", shape=hexagon, color=black];
1604[label="165.22.59.161;d;20pkt 20fpkt", shape=hexagon, color=black];
1624[label="13.164.59.63;s;6pkt 6fpkt", shape=hexagon, color=black];
1792[label="13.160.208.198;s;81pkt 81fpkt", shape=hexagon, color=black];
1869[label="165.22.4.190;d;124pkt 124fpkt", shape=hexagon, color=black];
1924[label="200.171.107.41;s;19pkt 19fpkt", shape=polygon, color=gold];
1970[label="13.164.59.63;s;6pkt 6fpkt", shape=polygon, color=gold];
2040[label="195.122.74.4;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2371[label="203.87.118.125;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2775[label="203.87.118.125;2pkt 2fpkt", shape=invtriangle, color=brown];
2910[label="203.87.118.125;2pkt 2fpkt", shape=invhouse, color=bisque];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 165.22.4.190:*}[32.1244%]&lt;BR/&gt;{13.160.208.198:*, *:*}[20.9845%]&lt;BR/&gt;{*:*, *:113}[20.7254%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (14.3815%)&lt;BR/&gt; 25: (9.538%)&lt;BR/&gt; 6667: (8.64382%)&lt;BR/&gt; 6665: (6.1848%)&lt;BR/&gt; 6664: (1.34128%)&gt;];
}
264--462[label="0.25;6pkt 6fpkt"];
264--616[label="0.26087;18pkt 18fpkt"];
264--618[label="0.0555556;1pkt 1fpkt"];
264--1075[label="0.0869565;6pkt 6fpkt"];
264--1160[label="0.0588235;1pkt 1fpkt"];
264--1218[label="0.289855;20pkt 20fpkt"];
264--1346[label="1;26pkt 26fpkt"];
264--1604[label="0.3;6pkt 6fpkt"];
264--1778[label="0.0869565;6pkt 6fpkt"];
264--1869[label="0.289855;20pkt 20fpkt"];
264--1924[label="1;19pkt 19fpkt"];
462--690[label="0.666667;2pkt 2fpkt"];
462--783[label="0.0833333;2pkt 2fpkt"];
462--1019[label="0.0833333;2pkt 2fpkt"];
462--1346[label="0.166667;4pkt 4fpkt"];
462--1537[label="0.5;1pkt 1fpkt"];
462--1604[label="1;20pkt 20fpkt"];
462--1792[label="0.0833333;2pkt 2fpkt"];
462--1924[label="0.210526;4pkt 4fpkt"];
462--2371[label="1;2pkt 2fpkt"];
462--2554[label="0.0909091;1pkt 1fpkt"];
462--2775[label="1;2pkt 2fpkt"];
462--2910[label="1;2pkt 2fpkt"];
469--616[label="0.75;24pkt 24fpkt"];
469--931[label="1;1pkt 1fpkt"];
469--1216[label="0.111111;1pkt 1fpkt"];
469--1218[label="0.0625;2pkt 2fpkt"];
469--1594[label="0.03125;1pkt 1fpkt"];
469--1786[label="1;1pkt 1fpkt"];
469--1869[label="0.0625;2pkt 2fpkt"];
469--1986[label="1;1pkt 1fpkt"];
538--783[label="0.0666667;2pkt 2fpkt"];
538--1536[label="1;30pkt 30fpkt"];
538--1792[label="0.0666667;2pkt 2fpkt"];
538--2529[label="0.5;8pkt 8fpkt"];
618--783[label="0.111111;2pkt 2fpkt"];
618--1078[label="0.0555556;1pkt 1fpkt"];
618--1346[label="0.0555556;1pkt 1fpkt"];
618--1792[label="0.111111;2pkt 2fpkt"];
618--1924[label="0.0555556;1pkt 1fpkt"];
618--2040[label="0.5;1pkt 1fpkt"];
618--2425[label="0.0555556;1pkt 1fpkt"];
618--2788[label="0.0555556;1pkt 1fpkt"];
690--1537[label="1;2pkt 2fpkt"];
690--1544[label="0.333333;1pkt 1fpkt"];
690--1604[label="0.333333;1pkt 1fpkt"];
690--2371[label="1;2pkt 2fpkt"];
690--2775[label="1;2pkt 2fpkt"];
690--2910[label="1;2pkt 2fpkt"];
903--1160[label="0.166667;2pkt 2fpkt"];
903--1624[label="1;6pkt 6fpkt"];
903--1970[label="1;6pkt 6fpkt"];
1030--1217[label="0.0909091;1pkt 1fpkt"];
1030--1745[label="1;11pkt 11fpkt"];
1030--1792[label="0.181818;2pkt 2fpkt"];
1160--1346[label="0.0588235;1pkt 1fpkt"];
1160--1508[label="0.25;2pkt 2fpkt"];
1160--1624[label="0.333333;2pkt 2fpkt"];
1160--1924[label="0.0588235;1pkt 1fpkt"];
1160--1970[label="0.333333;2pkt 2fpkt"];
1216--1792[label="0.222222;2pkt 2fpkt"];
1218--1233[label="0.153846;2pkt 2fpkt"];
1218--1346[label="0.384615;10pkt 10fpkt"];
1218--1869[label="1;124pkt 124fpkt"];
1218--1924[label="0.315789;6pkt 6fpkt"];
1218--2634[label="0.2;4pkt 4fpkt"];
1346--1604[label="0.2;4pkt 4fpkt"];
1346--1869[label="0.384615;10pkt 10fpkt"];
1346--1924[label="1;19pkt 19fpkt"];
1536--1792[label="0.0666667;2pkt 2fpkt"];
1536--2529[label="0.5;8pkt 8fpkt"];
1537--1544[label="0.5;1pkt 1fpkt"];
1537--1604[label="0.5;1pkt 1fpkt"];
1537--2371[label="0.5;1pkt 1fpkt"];
1537--2775[label="0.5;1pkt 1fpkt"];
1537--2910[label="0.5;1pkt 1fpkt"];
1604--1792[label="0.1;2pkt 2fpkt"];
1604--1924[label="0.210526;4pkt 4fpkt"];
1604--2371[label="0.5;1pkt 1fpkt"];
1604--2554[label="0.0909091;1pkt 1fpkt"];
1604--2775[label="0.5;1pkt 1fpkt"];
1604--2910[label="0.5;1pkt 1fpkt"];
1624--1970[label="1;6pkt 6fpkt"];
1792--1950[label="0.0833333;1pkt 1fpkt"];
1869--1924[label="0.315789;6pkt 6fpkt"];
1869--2634[label="0.2;4pkt 4fpkt"];
2371--2775[label="1;2pkt 2fpkt"];
2371--2910[label="1;2pkt 2fpkt"];
2775--2910[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="13.160.208.198"/>
      <filter dst_ip="165.22.4.190"/>
      <filter dst_port="113"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.484937,2.23777,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
1141[label="13.145.221.123;d;1pkt 1fpkt", shape=diamond, color=yellow];
1208[label="136.211.206.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
2563[label="136.211.206.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.211.206.202:4028, 13.145.221.123:6080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6080: (50%)&lt;BR/&gt; 4028: (50%)&gt;];
}
1141--1208[label="1;1pkt 1fpkt"];
1141--2563[label="1;1pkt 1fpkt"];
1208--2563[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="13.145.221.123" dst_port="6080" src_ip="136.211.206.202" src_port="4028"/>
    </slice>
    <from sec="994482003" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.160.208.202"/>
    </slice>
    <from sec="994483214" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666633,2.22286,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
1282[label="219.8.142.206;s;4pkt 4fpkt", shape=diamond, color=yellow];
2576[label="219.8.142.206;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2848[label="219.8.142.206;4pkt 4fpkt", shape=invtriangle, color=brown];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.8.142.206:80, 147.87.103.47:4139}[25%]&lt;BR/&gt;{219.8.142.206:80, 147.87.103.47:4152}[25%]&lt;BR/&gt;{219.8.142.206:80, 147.87.103.47:4153}[25%]&lt;BR/&gt;{219.8.142.206:80, 147.87.103.47:4154}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4154: (13.6364%)&lt;BR/&gt; 4153: (13.6364%)&lt;BR/&gt; 4152: (13.6364%)&lt;BR/&gt; 4139: (9.09091%)&gt;];
}
1282--2576[label="1;3pkt 3fpkt"];
1282--2848[label="1;4pkt 4fpkt"];
2576--2848[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.103.47" dst_port="4154" src_ip="219.8.142.206" src_port="80"/>
      <filter dst_ip="147.87.103.47" dst_port="4153" src_ip="219.8.142.206" src_port="80"/>
      <filter dst_ip="147.87.103.47" dst_port="4152" src_ip="219.8.142.206" src_port="80"/>
      <filter dst_ip="147.87.103.47" dst_port="4139" src_ip="219.8.142.206" src_port="80"/>
    </slice>
    <from sec="994483110" usec="0"/>
    <to sec="994483149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.177.209.207"/>
    </slice>
    <from sec="994482016" usec="0"/>
    <to sec="994483213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.529839,2.19261,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
320[label="149.168.19.3;d;12pkt 12fpkt", shape=diamond, color=yellow];
321[label="211.38.19.211;s;6pkt 6fpkt", shape=diamond, color=yellow];
1357[label="149.168.19.3;d;2pkt 2fpkt", shape=hexagon, color=black];
2587[label="211.38.19.211;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.38.19.212:80, 149.168.19.3:*}[42.8571%]&lt;BR/&gt;{211.38.19.211:1755, 149.168.19.3:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (19.6429%)&lt;BR/&gt; 80: (10.7143%)&lt;BR/&gt; 3625: (5.35714%)&lt;BR/&gt; 3611: (5.35714%)&lt;BR/&gt; 3475: (5.35714%)&gt;];
}
320--321[label="1;6pkt 6fpkt"];
320--2587[label="0.75;6pkt 6fpkt"];
321--2587[label="1;6pkt 6fpkt"];
1357--2587[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.168.19.3" src_ip="211.38.19.211" src_port="1755"/>
      <filter dst_ip="149.168.19.3" src_ip="211.38.19.212" src_port="80"/>
    </slice>
    <from sec="994482024" usec="0"/>
    <to sec="994483173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.36.177.215"/>
    </slice>
    <from sec="994482910" usec="0"/>
    <to sec="994483018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.11.30.216"/>
    </slice>
    <from sec="994482009" usec="0"/>
    <to sec="994483203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.76.70.217"/>
    </slice>
    <from sec="994482620" usec="0"/>
    <to sec="994483083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.33457,2.16064,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
299[label="149.168.35.148;d;408pkt 408fpkt", shape=diamond, color=yellow];
484[label="209.72.188.241;s;342pkt 342fpkt", shape=diamond, color=yellow];
526[label="210.128.208.170;s;4pkt 4fpkt", shape=diamond, color=yellow];
579[label="197.11.27.48;d;74pkt 74fpkt", shape=diamond, color=yellow];
937[label="72.180.6.214;s;54pkt 54fpkt", shape=diamond, color=yellow];
1006[label="128.237.218.159;d;101pkt 101fpkt", shape=diamond, color=yellow];
1470[label="197.11.27.48;d;74pkt 74fpkt", shape=hexagon, color=black];
1640[label="149.168.35.148;d;300pkt 300fpkt", shape=hexagon, color=black];
1782[label="197.11.28.213;d;258pkt 258fpkt", shape=hexagon, color=black];
1866[label="128.237.218.159;d;101pkt 101fpkt", shape=hexagon, color=black];
1961[label="149.168.35.148;d;246pkt 246fpkt", shape=polygon, color=gold];
2308[label="209.23.171.101;50pkt 50fpkt", shape=pentagon, color=darkviolet];
2437[label="209.187.238.146;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2445[label="12.232.45.148;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2494[label="12.205.171.167;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2530[label="219.61.255.184;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2591[label="72.180.6.214;86pkt 86fpkt", shape=pentagon, color=darkviolet];
2594[label="204.163.81.216;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2603[label="204.163.81.219;23pkt 23fpkt", shape=pentagon, color=darkviolet];
2611[label="204.163.81.221;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2794[label="209.187.238.146;14pkt 14fpkt", shape=invtriangle, color=brown];
2800[label="12.232.45.148;36pkt 36fpkt", shape=invtriangle, color=brown];
2829[label="219.61.255.184;21pkt 21fpkt", shape=invtriangle, color=brown];
2854[label="72.180.6.214;87pkt 87fpkt", shape=invtriangle, color=brown];
2915[label="12.232.45.148;36pkt 36fpkt", shape=invhouse, color=bisque];
2924[label="219.61.255.184;21pkt 21fpkt", shape=invhouse, color=bisque];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[26.297%]&lt;BR/&gt;{*:*, 149.168.35.148:80}[22.2719%]&lt;BR/&gt;{209.72.188.241:*, 197.11.28.213:80}[21.5564%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.075%)&lt;BR/&gt; 8088: (4.66153%)&lt;BR/&gt; 53692: (0.182408%)&lt;BR/&gt; 1418: (0.182408%)&lt;BR/&gt; 1417: (0.182408%)&gt;];
}
299--414[label="0.00507614;1pkt 1fpkt"];
299--484[label="0.0380117;13pkt 13fpkt"];
299--1209[label="1;1pkt 1fpkt"];
299--1212[label="0.0123457;1pkt 1fpkt"];
299--1213[label="0.0421053;4pkt 4fpkt"];
299--1398[label="0.0735294;30pkt 30fpkt"];
299--1640[label="1;300pkt 300fpkt"];
299--1726[label="0.00529101;1pkt 1fpkt"];
299--1961[label="1;246pkt 246fpkt"];
299--1996[label="0.0171569;7pkt 7fpkt"];
299--1997[label="0.0245098;10pkt 10fpkt"];
299--2001[label="0.0588235;24pkt 24fpkt"];
299--2002[label="0.0245098;10pkt 10fpkt"];
299--2004[label="0.0514706;21pkt 21fpkt"];
299--2008[label="0.00245098;1pkt 1fpkt"];
299--2009[label="0.0171569;7pkt 7fpkt"];
299--2010[label="0.0245098;10pkt 10fpkt"];
299--2013[label="0.0245098;10pkt 10fpkt"];
299--2015[label="0.0514706;21pkt 21fpkt"];
299--2016[label="0.0171569;7pkt 7fpkt"];
299--2017[label="0.0245098;10pkt 10fpkt"];
299--2021[label="0.0514706;21pkt 21fpkt"];
299--2298[label="0.0123457;1pkt 1fpkt"];
299--2308[label="0.04;2pkt 2fpkt"];
299--2437[label="0.571429;8pkt 8fpkt"];
299--2445[label="0.628571;22pkt 22fpkt"];
299--2494[label="0.368421;7pkt 7fpkt"];
299--2530[label="0.904762;19pkt 19fpkt"];
299--2531[label="0.0049505;1pkt 1fpkt"];
299--2594[label="0.0555556;1pkt 1fpkt"];
299--2603[label="0.0869565;2pkt 2fpkt"];
299--2605[label="1;1pkt 1fpkt"];
299--2611[label="0.125;3pkt 3fpkt"];
299--2794[label="0.571429;8pkt 8fpkt"];
299--2800[label="0.611111;22pkt 22fpkt"];
299--2829[label="0.904762;19pkt 19fpkt"];
299--2830[label="0.00492611;1pkt 1fpkt"];
299--2860[label="1;1pkt 1fpkt"];
299--2915[label="0.611111;22pkt 22fpkt"];
299--2924[label="0.904762;19pkt 19fpkt"];
484--574[label="0.0131579;1pkt 1fpkt"];
484--631[label="0.0142857;3pkt 3fpkt"];
484--1610[label="0.148148;4pkt 4fpkt"];
484--1622[label="0.0128205;2pkt 2fpkt"];
484--1640[label="0.0366667;11pkt 11fpkt"];
484--1782[label="0.848837;219pkt 219fpkt"];
484--1961[label="0.0406504;10pkt 10fpkt"];
484--1997[label="0.0497076;17pkt 17fpkt"];
484--2001[label="0.0175439;6pkt 6fpkt"];
484--2002[label="0.0467836;16pkt 16fpkt"];
484--2004[label="0.0233918;8pkt 8fpkt"];
484--2010[label="0.0497076;17pkt 17fpkt"];
484--2013[label="0.0467836;16pkt 16fpkt"];
484--2015[label="0.0233918;8pkt 8fpkt"];
484--2017[label="0.0497076;17pkt 17fpkt"];
484--2021[label="0.0233918;8pkt 8fpkt"];
526--1782[label="1;4pkt 4fpkt"];
526--2001[label="0.5;2pkt 2fpkt"];
579--937[label="0.314815;17pkt 17fpkt"];
579--1398[label="0.108108;8pkt 8fpkt"];
579--1470[label="1;74pkt 74fpkt"];
579--2008[label="0.0945946;7pkt 7fpkt"];
579--2437[label="0.428571;6pkt 6fpkt"];
579--2530[label="0.0952381;2pkt 2fpkt"];
579--2591[label="0.324324;24pkt 24fpkt"];
579--2794[label="0.428571;6pkt 6fpkt"];
579--2829[label="0.0952381;2pkt 2fpkt"];
579--2854[label="0.337838;25pkt 25fpkt"];
579--2924[label="0.0952381;2pkt 2fpkt"];
937--1470[label="0.314815;17pkt 17fpkt"];
937--2006[label="0.0185185;1pkt 1fpkt"];
937--2008[label="0.203704;11pkt 11fpkt"];
937--2591[label="0.981481;53pkt 53fpkt"];
937--2854[label="1;54pkt 54fpkt"];
1006--1866[label="1;101pkt 101fpkt"];
1006--2594[label="0.166667;3pkt 3fpkt"];
1006--2603[label="0.608696;14pkt 14fpkt"];
1006--2611[label="0.458333;11pkt 11fpkt"];
1470--2008[label="0.0945946;7pkt 7fpkt"];
1470--2437[label="0.428571;6pkt 6fpkt"];
1470--2530[label="0.0952381;2pkt 2fpkt"];
1470--2591[label="0.324324;24pkt 24fpkt"];
1470--2794[label="0.428571;6pkt 6fpkt"];
1470--2829[label="0.0952381;2pkt 2fpkt"];
1470--2854[label="0.337838;25pkt 25fpkt"];
1470--2924[label="0.0952381;2pkt 2fpkt"];
1640--1726[label="0.00529101;1pkt 1fpkt"];
1640--1961[label="1;246pkt 246fpkt"];
1640--1996[label="0.0233333;7pkt 7fpkt"];
1640--1997[label="0.0333333;10pkt 10fpkt"];
1640--2001[label="0.08;24pkt 24fpkt"];
1640--2002[label="0.0333333;10pkt 10fpkt"];
1640--2004[label="0.07;21pkt 21fpkt"];
1640--2009[label="0.0233333;7pkt 7fpkt"];
1640--2010[label="0.0333333;10pkt 10fpkt"];
1640--2013[label="0.0333333;10pkt 10fpkt"];
1640--2015[label="0.07;21pkt 21fpkt"];
1640--2016[label="0.0233333;7pkt 7fpkt"];
1640--2017[label="0.0333333;10pkt 10fpkt"];
1640--2021[label="0.07;21pkt 21fpkt"];
1640--2298[label="0.0123457;1pkt 1fpkt"];
1640--2308[label="0.02;1pkt 1fpkt"];
1640--2437[label="0.571429;8pkt 8fpkt"];
1640--2445[label="0.457143;16pkt 16fpkt"];
1640--2494[label="0.315789;6pkt 6fpkt"];
1640--2530[label="0.904762;19pkt 19fpkt"];
1640--2531[label="0.0049505;1pkt 1fpkt"];
1640--2594[label="0.0555556;1pkt 1fpkt"];
1640--2603[label="0.0434783;1pkt 1fpkt"];
1640--2605[label="1;1pkt 1fpkt"];
1640--2611[label="0.125;3pkt 3fpkt"];
1640--2794[label="0.571429;8pkt 8fpkt"];
1640--2800[label="0.444444;16pkt 16fpkt"];
1640--2829[label="0.904762;19pkt 19fpkt"];
1640--2830[label="0.00492611;1pkt 1fpkt"];
1640--2860[label="1;1pkt 1fpkt"];
1640--2915[label="0.444444;16pkt 16fpkt"];
1640--2924[label="0.904762;19pkt 19fpkt"];
1782--1785[label="0.0733945;8pkt 8fpkt"];
1782--1997[label="0.0542636;14pkt 14fpkt"];
1782--2001[label="0.0155039;4pkt 4fpkt"];
1782--2002[label="0.0465116;12pkt 12fpkt"];
1782--2004[label="0.0310078;8pkt 8fpkt"];
1782--2010[label="0.0542636;14pkt 14fpkt"];
1782--2013[label="0.0465116;12pkt 12fpkt"];
1782--2015[label="0.0310078;8pkt 8fpkt"];
1782--2017[label="0.0542636;14pkt 14fpkt"];
1782--2021[label="0.0310078;8pkt 8fpkt"];
1782--2133[label="0.0333333;2pkt 2fpkt"];
1782--2171[label="0.0190476;2pkt 2fpkt"];
1782--2193[label="0.0309278;3pkt 3fpkt"];
1782--2573[label="0.0107527;1pkt 1fpkt"];
1782--2623[label="0.0114943;1pkt 1fpkt"];
1782--2717[label="0.03125;3pkt 3fpkt"];
1782--2845[label="0.0107527;1pkt 1fpkt"];
1782--2876[label="0.0134228;2pkt 2fpkt"];
1782--2936[label="0.0153846;2pkt 2fpkt"];
1866--2594[label="0.166667;3pkt 3fpkt"];
1866--2603[label="0.608696;14pkt 14fpkt"];
1866--2611[label="0.458333;11pkt 11fpkt"];
1961--1996[label="0.0284553;7pkt 7fpkt"];
1961--1997[label="0.0406504;10pkt 10fpkt"];
1961--2001[label="0.097561;24pkt 24fpkt"];
1961--2002[label="0.0406504;10pkt 10fpkt"];
1961--2004[label="0.0853659;21pkt 21fpkt"];
1961--2009[label="0.0284553;7pkt 7fpkt"];
1961--2010[label="0.0406504;10pkt 10fpkt"];
1961--2013[label="0.0406504;10pkt 10fpkt"];
1961--2015[label="0.0853659;21pkt 21fpkt"];
1961--2016[label="0.0284553;7pkt 7fpkt"];
1961--2017[label="0.0406504;10pkt 10fpkt"];
1961--2021[label="0.0853659;21pkt 21fpkt"];
1961--2308[label="0.02;1pkt 1fpkt"];
1961--2437[label="0.571429;8pkt 8fpkt"];
1961--2445[label="0.457143;16pkt 16fpkt"];
1961--2494[label="0.263158;5pkt 5fpkt"];
1961--2530[label="0.904762;19pkt 19fpkt"];
1961--2594[label="0.0555556;1pkt 1fpkt"];
1961--2603[label="0.0434783;1pkt 1fpkt"];
1961--2605[label="1;1pkt 1fpkt"];
1961--2611[label="0.125;3pkt 3fpkt"];
1961--2794[label="0.571429;8pkt 8fpkt"];
1961--2800[label="0.444444;16pkt 16fpkt"];
1961--2829[label="0.904762;19pkt 19fpkt"];
1961--2860[label="1;1pkt 1fpkt"];
1961--2915[label="0.444444;16pkt 16fpkt"];
1961--2924[label="0.904762;19pkt 19fpkt"];
2437--2794[label="1;14pkt 14fpkt"];
2445--2800[label="1;35pkt 35fpkt"];
2445--2915[label="1;35pkt 35fpkt"];
2530--2829[label="1;21pkt 21fpkt"];
2530--2924[label="1;21pkt 21fpkt"];
2591--2854[label="1;86pkt 86fpkt"];
2800--2915[label="1;36pkt 36fpkt"];
2829--2924[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="149.168.35.148" dst_port="80"/>
      <filter dst_ip="197.11.28.213" dst_port="80" src_ip="209.72.188.241"/>
    </slice>
    <from sec="994482001" usec="0"/>
    <to sec="994483212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.517924,2.26803,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
594[label="196.217.170.165;d;26pkt 26fpkt", shape=diamond, color=yellow];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.165.176.228:80, 196.217.170.165:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1199: (1.92308%)&lt;BR/&gt; 1198: (1.92308%)&lt;BR/&gt; 1197: (1.92308%)&lt;BR/&gt; 1196: (1.92308%)&gt;];
}
594--1496[label="1;26pkt 26fpkt"];
594--2619[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="196.217.170.165" src_ip="150.165.176.228" src_port="80"/>
    </slice>
    <from sec="994482271" usec="0"/>
    <to sec="994482616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.128.211.239"/>
    </slice>
    <from sec="994482025" usec="0"/>
    <to sec="994483200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.551144,2.2976,003,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.87.182.243"/>
    </slice>
    <from sec="994482016" usec="0"/>
    <to sec="994483208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
2030[label="196.212.187.2;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2659[label="196.212.187.2;34pkt 34fpkt", shape=invtriangle, color=brown];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.212.187.2:*, 192.232.72.55:80}[91.1765%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1583: (1.49254%)&lt;BR/&gt; 1553: (1.49254%)&lt;BR/&gt; 1539: (1.49254%)&lt;BR/&gt; 1538: (1.49254%)&gt;];
}
2030--2659[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="192.232.72.55" dst_port="80" src_ip="196.212.187.2"/>
    </slice>
    <from sec="994482910" usec="0"/>
    <to sec="994483173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.237.209.4"/>
    </slice>
    <from sec="994482012" usec="0"/>
    <to sec="994483210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11391,2.29046,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
2053[label="197.32.196.7;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2664[label="197.32.196.7;1pkt 1fpkt", shape=invtriangle, color=brown];
2881[label="197.32.196.7;1pkt 1fpkt", shape=invhouse, color=bisque];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.32.196.7:80, 196.212.176.69:1128}[50%]&lt;BR/&gt;{197.32.196.7:80, 196.212.176.69:1130}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1130: (37.5%)&lt;BR/&gt; 1128: (12.5%)&gt;];
}
2053--2664[label="1;1pkt 1fpkt"];
2053--2881[label="1;1pkt 1fpkt"];
2664--2881[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.212.176.69" dst_port="1130" src_ip="197.32.196.7" src_port="80"/>
      <filter dst_ip="196.212.176.69" dst_port="1128" src_ip="197.32.196.7" src_port="80"/>
    </slice>
    <from sec="994483155" usec="0"/>
    <to sec="994483184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
2060[label="192.232.73.10;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2665[label="192.232.73.10;12pkt 12fpkt", shape=invtriangle, color=brown];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.232.73.10:80, 196.212.9.170:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3893: (4%)&lt;BR/&gt; 3892: (4%)&lt;BR/&gt; 3891: (4%)&lt;BR/&gt; 3887: (4%)&gt;];
}
2060--2665[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="196.212.9.170" src_ip="192.232.73.10" src_port="80"/>
    </slice>
    <from sec="994483204" usec="0"/>
    <to sec="994483209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666633,2.22286,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
1107[label="195.29.39.15;s;10pkt 10fpkt", shape=diamond, color=yellow];
2078[label="195.29.39.15;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2671[label="195.29.39.15;10pkt 10fpkt", shape=invtriangle, color=brown];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.29.39.15:*, 196.212.12.134:1503}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1503: (20.6897%)&lt;BR/&gt; 0: (10.3448%)&lt;BR/&gt; 49609: (5.17241%)&lt;BR/&gt; 49607: (5.17241%)&lt;BR/&gt; 49606: (5.17241%)&gt;];
}
1107--2078[label="1;9pkt 9fpkt"];
1107--2671[label="1;10pkt 10fpkt"];
2078--2671[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="196.212.12.134" dst_port="1503" src_ip="195.29.39.15"/>
    </slice>
    <from sec="994482808" usec="0"/>
    <to sec="994482884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666633,2.22286,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
511[label="128.141.57.235;d;23pkt 23fpkt", shape=diamond, color=yellow];
2085[label="112.28.136.18;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2284[label="205.231.245.92;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2675[label="112.28.136.18;6pkt 6fpkt", shape=invtriangle, color=brown];
2744[label="205.231.245.92;10pkt 10fpkt", shape=invtriangle, color=brown];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.231.245.92:80, 128.141.57.235:*}[47.8261%]&lt;BR/&gt;{112.28.136.18:80, 128.141.57.235:*}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47885: (3.7037%)&lt;BR/&gt; 47884: (3.7037%)&lt;BR/&gt; 47895: (2.77778%)&lt;BR/&gt; 47894: (2.77778%)&gt;];
}
511--2085[label="1;5pkt 5fpkt"];
511--2284[label="1;10pkt 10fpkt"];
511--2675[label="1;6pkt 6fpkt"];
511--2744[label="1;10pkt 10fpkt"];
2085--2675[label="1;5pkt 5fpkt"];
2284--2744[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.57.235" src_ip="205.231.245.92" src_port="80"/>
      <filter dst_ip="128.141.57.235" src_ip="112.28.136.18" src_port="80"/>
    </slice>
    <from sec="994482078" usec="0"/>
    <to sec="994482326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.150.169.20"/>
    </slice>
    <from sec="994482198" usec="0"/>
    <to sec="994483062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="110.168.143.26"/>
    </slice>
    <from sec="994483107" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.132.124.28"/>
    </slice>
    <from sec="994482003" usec="0"/>
    <to sec="994483025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
2125[label="197.11.27.35;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2692[label="197.11.27.35;18pkt 18fpkt", shape=invtriangle, color=brown];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.11.27.35:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2125--2692[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="197.11.27.35"/>
    </slice>
    <from sec="994482020" usec="0"/>
    <to sec="994483192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
2126[label="149.168.198.35;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2693[label="149.168.198.35;14pkt 14fpkt", shape=invtriangle, color=brown];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.168.198.35:*, *:25}[78.5714%]&lt;BR/&gt;{149.168.198.35:25, *:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 62651: (3.7037%)&lt;BR/&gt; 62650: (3.7037%)&lt;BR/&gt; 62645: (3.7037%)&lt;BR/&gt; 62636: (3.7037%)&gt;];
}
2126--2693[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="149.168.198.35" src_port="25"/>
      <filter dst_port="25" src_ip="149.168.198.35"/>
    </slice>
    <from sec="994482209" usec="0"/>
    <to sec="994482916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.35.69.42"/>
    </slice>
    <from sec="994482779" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699975,2.1774,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
112[label="196.212.160.44;d;787pkt 787fpkt", shape=diamond, color=yellow];
228[label="14.209.115.42;s;714pkt 714fpkt", shape=diamond, color=yellow];
1332[label="14.209.115.42;s;291pkt 291fpkt", shape=hexagon, color=black];
2144[label="14.209.115.42;715pkt 715fpkt", shape=pentagon, color=darkviolet];
2509[label="213.199.162.172;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2700[label="14.209.115.42;716pkt 716fpkt", shape=invtriangle, color=brown];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{14.209.115.42:80, 196.212.160.44:*}[89.7243%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2061: (0.0768285%)&lt;BR/&gt; 2060: (0.0768285%)&lt;BR/&gt; 2059: (0.0768285%)&lt;BR/&gt; 2058: (0.0768285%)&gt;];
}
112--228[label="0.987395;705pkt 705fpkt"];
112--1151[label="0.0204082;2pkt 2fpkt"];
112--1332[label="1;291pkt 291fpkt"];
112--1996[label="0.11817;93pkt 93fpkt"];
112--2006[label="0.0952986;75pkt 75fpkt"];
112--2008[label="0.047014;37pkt 37fpkt"];
112--2009[label="0.11817;93pkt 93fpkt"];
112--2016[label="0.11817;93pkt 93fpkt"];
112--2038[label="0.0194175;2pkt 2fpkt"];
112--2144[label="0.984615;704pkt 704fpkt"];
112--2509[label="1;31pkt 31fpkt"];
112--2700[label="0.984637;705pkt 705fpkt"];
228--1332[label="1;291pkt 291fpkt"];
228--1996[label="0.109244;78pkt 78fpkt"];
228--2006[label="0.0980392;70pkt 70fpkt"];
228--2008[label="0.0420168;30pkt 30fpkt"];
228--2009[label="0.109244;78pkt 78fpkt"];
228--2016[label="0.109244;78pkt 78fpkt"];
228--2144[label="0.998599;713pkt 713fpkt"];
228--2700[label="1;714pkt 714fpkt"];
1332--1996[label="0.268041;78pkt 78fpkt"];
1332--2009[label="0.268041;78pkt 78fpkt"];
1332--2016[label="0.268041;78pkt 78fpkt"];
1332--2144[label="0.996564;290pkt 290fpkt"];
1332--2700[label="1;291pkt 291fpkt"];
2144--2700[label="1;715pkt 715fpkt"];
</description>
    <slice>
      <filter dst_ip="196.212.160.44" src_ip="14.209.115.42" src_port="80"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11391,2.29046,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
2154[label="128.141.219.45;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2704[label="128.141.219.45;5pkt 5fpkt", shape=invtriangle, color=brown];
2889[label="128.141.219.45;4pkt 4fpkt", shape=invhouse, color=bisque];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.141.219.45:1082, 156.87.220.144:80}[20%]&lt;BR/&gt;{128.141.219.45:1083, 156.87.220.144:80}[20%]&lt;BR/&gt;{128.141.219.45:1084, 156.87.220.144:80}[20%]&lt;BR/&gt;{128.141.219.45:1085, 156.87.220.144:80}[20%]&lt;BR/&gt;{128.141.219.45:1087, 156.87.220.144:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1087: (10.7143%)&lt;BR/&gt; 1085: (10.7143%)&lt;BR/&gt; 1084: (10.7143%)&lt;BR/&gt; 1083: (10.7143%)&gt;];
}
2154--2704[label="1;5pkt 5fpkt"];
2154--2889[label="1;4pkt 4fpkt"];
2704--2889[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="156.87.220.144" dst_port="80" src_ip="128.141.219.45" src_port="1087"/>
      <filter dst_ip="156.87.220.144" dst_port="80" src_ip="128.141.219.45" src_port="1085"/>
      <filter dst_ip="156.87.220.144" dst_port="80" src_ip="128.141.219.45" src_port="1084"/>
      <filter dst_ip="156.87.220.144" dst_port="80" src_ip="128.141.219.45" src_port="1083"/>
      <filter dst_ip="156.87.220.144" dst_port="80" src_ip="128.141.219.45" src_port="1082"/>
    </slice>
    <from sec="994483002" usec="0"/>
    <to sec="994483162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.42.177.54"/>
    </slice>
    <from sec="994482787" usec="0"/>
    <to sec="994482852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
2187[label="136.211.207.58;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2714[label="136.211.207.58;13pkt 13fpkt", shape=invtriangle, color=brown];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.211.207.58:*, *:113}[50%]&lt;BR/&gt;{136.211.207.58:25, *:*}[50%]&lt;BR/&gt;{136.211.207.58:*, 13.50.9.183:*}[28.5714%]&lt;BR/&gt;{136.211.207.58:*, 13.50.9.185:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (25.9259%)&lt;BR/&gt; 25: (24.0741%)&lt;BR/&gt; 48161: (3.7037%)&lt;BR/&gt; 48157: (3.7037%)&lt;BR/&gt; 48151: (3.7037%)&gt;];
}
2187--2714[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="13.50.9.185" src_ip="136.211.207.58"/>
      <filter dst_ip="13.50.9.183" src_ip="136.211.207.58"/>
      <filter src_ip="136.211.207.58" src_port="25"/>
      <filter dst_port="113" src_ip="136.211.207.58"/>
    </slice>
    <from sec="994482096" usec="0"/>
    <to sec="994483083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="110.190.166.62"/>
    </slice>
    <from sec="994482756" usec="0"/>
    <to sec="994483018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.206.74.64"/>
    </slice>
    <from sec="994483034" usec="0"/>
    <to sec="994483160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.54.231.67"/>
    </slice>
    <from sec="994482968" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_338{
style=filled;
color=gray75;
2240[label="210.198.236.78;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2729[label="210.198.236.78;1pkt 1fpkt", shape=invtriangle, color=brown];
stat338[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.198.236.78:1286, 162.185.33.234:80}[50%]&lt;BR/&gt;{210.198.236.78:1287, 162.185.33.234:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1287: (33.3333%)&lt;BR/&gt; 1286: (16.6667%)&gt;];
}
2240--2729[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.185.33.234" dst_port="80" src_ip="210.198.236.78" src_port="1287"/>
      <filter dst_ip="162.185.33.234" dst_port="80" src_ip="210.198.236.78" src_port="1286"/>
    </slice>
    <from sec="994482866" usec="0"/>
    <to sec="994482900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.132.30.79"/>
    </slice>
    <from sec="994482004" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666633,2.22286,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
439[label="147.87.136.233;d;114pkt 114fpkt", shape=diamond, color=yellow];
655[label="192.237.123.46;s;12pkt 12fpkt", shape=diamond, color=yellow];
857[label="147.87.136.43;d;154pkt 154fpkt", shape=diamond, color=yellow];
2087[label="209.20.3.19;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2157[label="192.237.123.46;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2267[label="219.119.15.88;39pkt 39fpkt", shape=pentagon, color=darkviolet];
2615[label="13.50.26.225;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2621[label="13.196.253.228;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2737[label="219.119.15.88;39pkt 39fpkt", shape=invtriangle, color=brown];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 147.87.136.43:*}[57.0896%]&lt;BR/&gt;{*:80, 147.87.136.233:*}[41.791%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6394%)&lt;BR/&gt; 1293: (0.360577%)&lt;BR/&gt; 1292: (0.360577%)&lt;BR/&gt; 1164: (0.360577%)&lt;BR/&gt; 1162: (0.360577%)&gt;];
}
439--655[label="0.833333;10pkt 10fpkt"];
439--2006[label="0.0438596;5pkt 5fpkt"];
439--2008[label="0.0438596;5pkt 5fpkt"];
439--2157[label="0.409091;9pkt 9fpkt"];
439--2267[label="1;39pkt 39fpkt"];
439--2615[label="1;15pkt 15fpkt"];
439--2737[label="1;39pkt 39fpkt"];
655--857[label="0.166667;2pkt 2fpkt"];
655--2157[label="0.916667;11pkt 11fpkt"];
857--953[label="0.119403;8pkt 8fpkt"];
857--1151[label="0.0102041;1pkt 1fpkt"];
857--1680[label="0.119403;8pkt 8fpkt"];
857--2006[label="0.149351;23pkt 23fpkt"];
857--2008[label="0.0584416;9pkt 9fpkt"];
857--2038[label="0.00970874;1pkt 1fpkt"];
857--2087[label="1;13pkt 13fpkt"];
857--2157[label="0.590909;13pkt 13fpkt"];
857--2505[label="0.309524;13pkt 13fpkt"];
857--2621[label="1;8pkt 8fpkt"];
2267--2737[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.136.43" src_port="80"/>
      <filter dst_ip="147.87.136.233" src_port="80"/>
    </slice>
    <from sec="994482123" usec="0"/>
    <to sec="994483116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666633,2.22286,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
906[label="196.217.169.88;s;13pkt 13fpkt", shape=diamond, color=yellow];
2272[label="196.217.169.88;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2739[label="196.217.169.88;13pkt 13fpkt", shape=invtriangle, color=brown];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.217.169.88:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
906--2272[label="1;13pkt 13fpkt"];
906--2739[label="1;13pkt 13fpkt"];
2272--2739[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="196.217.169.88"/>
    </slice>
    <from sec="994482001" usec="0"/>
    <to sec="994483212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="147.253.37.94"/>
    </slice>
    <from sec="994482410" usec="0"/>
    <to sec="994482496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11391,2.29046,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
2294[label="211.204.93.98;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2746[label="211.204.93.98;32pkt 32fpkt", shape=invtriangle, color=brown];
2902[label="211.204.93.98;31pkt 31fpkt", shape=invhouse, color=bisque];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.204.93.98:80, 147.87.251.17:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1709: (1.59574%)&lt;BR/&gt; 1708: (1.59574%)&lt;BR/&gt; 1707: (1.59574%)&lt;BR/&gt; 1706: (1.59574%)&gt;];
}
2294--2746[label="1;31pkt 31fpkt"];
2294--2902[label="1;31pkt 31fpkt"];
2746--2902[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.251.17" src_ip="211.204.93.98" src_port="80"/>
    </slice>
    <from sec="994482520" usec="0"/>
    <to sec="994482522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
2309[label="204.0.181.101;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2748[label="204.0.181.101;9pkt 9fpkt", shape=invtriangle, color=brown];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.0.181.101:80, 147.87.29.99:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4444%)&lt;BR/&gt; 0: (11.1111%)&lt;BR/&gt; 50614: (5.55556%)&lt;BR/&gt; 50613: (5.55556%)&lt;BR/&gt; 50609: (5.55556%)&gt;];
}
2309--2748[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.29.99" src_ip="204.0.181.101" src_port="80"/>
    </slice>
    <from sec="994482846" usec="0"/>
    <to sec="994483177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11391,2.29046,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_345{
style=filled;
color=gray75;
2318[label="210.128.36.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2753[label="210.128.36.104;2pkt 2fpkt", shape=invtriangle, color=brown];
2905[label="210.128.36.104;1pkt 1fpkt", shape=invhouse, color=bisque];
stat345[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.128.36.104:1038, 196.72.123.202:80}[50%]&lt;BR/&gt;{210.128.36.104:1039, 196.72.123.202:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1039: (37.5%)&lt;BR/&gt; 1038: (12.5%)&gt;];
}
2318--2753[label="1;1pkt 1fpkt"];
2318--2905[label="1;1pkt 1fpkt"];
2753--2905[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.72.123.202" dst_port="80" src_ip="210.128.36.104" src_port="1039"/>
      <filter dst_ip="196.72.123.202" dst_port="80" src_ip="210.128.36.104" src_port="1038"/>
    </slice>
    <from sec="994483008" usec="0"/>
    <to sec="994483067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="165.22.49.104"/>
    </slice>
    <from sec="994482043" usec="0"/>
    <to sec="994483211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_347{
style=filled;
color=gray75;
2332[label="149.168.149.108;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2762[label="149.168.149.108;11pkt 11fpkt", shape=invtriangle, color=brown];
stat347[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.168.149.108:*, 166.145.254.38:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1073: (4.7619%)&lt;BR/&gt; 1072: (4.7619%)&lt;BR/&gt; 1071: (4.7619%)&lt;BR/&gt; 1065: (4.7619%)&gt;];
}
2332--2762[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="166.145.254.38" dst_port="80" src_ip="149.168.149.108"/>
    </slice>
    <from sec="994482698" usec="0"/>
    <to sec="994483102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="149.168.41.112"/>
    </slice>
    <from sec="994483113" usec="0"/>
    <to sec="994483148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666633,2.22286,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
450[label="112.40.143.194;s;2pkt 2fpkt", shape=diamond, color=yellow];
589[label="147.87.235.36;d;15pkt 15fpkt", shape=diamond, color=yellow];
2399[label="112.40.143.133;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2783[label="112.40.143.133;4pkt 4fpkt", shape=invtriangle, color=brown];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{112.40.143.133:80, 147.87.235.36:*}[33.3333%]&lt;BR/&gt;{112.40.143.134:80, 147.87.235.36:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38%)&lt;BR/&gt; 6970: (8%)&lt;BR/&gt; 2629: (6%)&lt;BR/&gt; 2626: (6%)&lt;BR/&gt; 2622: (6%)&gt;];
}
450--589[label="1;2pkt 2fpkt"];
589--2359[label="0.0666667;1pkt 1fpkt"];
589--2399[label="1;4pkt 4fpkt"];
589--2783[label="1;4pkt 4fpkt"];
2399--2783[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.235.36" src_ip="112.40.143.134" src_port="80"/>
      <filter dst_ip="147.87.235.36" src_ip="112.40.143.133" src_port="80"/>
    </slice>
    <from sec="994482203" usec="0"/>
    <to sec="994482405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10352,2.18513,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_350{
style=filled;
color=gray75;
708[label="196.217.148.143;s;134pkt 134fpkt", shape=diamond, color=yellow];
1511[label="196.217.148.143;s;66pkt 66fpkt", shape=hexagon, color=black];
2426[label="196.217.148.143;140pkt 140fpkt", shape=pentagon, color=darkviolet];
2789[label="196.217.148.143;139pkt 139fpkt", shape=invtriangle, color=brown];
2913[label="196.217.148.143;140pkt 140fpkt", shape=invhouse, color=bisque];
stat350[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.217.148.143:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40249: (0.403877%)&lt;BR/&gt; 40248: (0.403877%)&lt;BR/&gt; 40247: (0.403877%)&lt;BR/&gt; 40246: (0.403877%)&gt;];
}
708--728[label="0.0183486;2pkt 2fpkt"];
708--1002[label="0.138298;13pkt 13fpkt"];
708--1511[label="1;66pkt 66fpkt"];
708--1518[label="0.0188679;2pkt 2fpkt"];
708--1997[label="0.0671642;9pkt 9fpkt"];
708--2001[label="0.0820896;11pkt 11fpkt"];
708--2002[label="0.0671642;9pkt 9fpkt"];
708--2004[label="0.00746269;1pkt 1fpkt"];
708--2010[label="0.0671642;9pkt 9fpkt"];
708--2013[label="0.0671642;9pkt 9fpkt"];
708--2015[label="0.00746269;1pkt 1fpkt"];
708--2017[label="0.0671642;9pkt 9fpkt"];
708--2021[label="0.00746269;1pkt 1fpkt"];
708--2426[label="1;134pkt 134fpkt"];
708--2789[label="0.992537;133pkt 133fpkt"];
708--2913[label="1;134pkt 134fpkt"];
1511--1518[label="0.030303;2pkt 2fpkt"];
1511--1997[label="0.136364;9pkt 9fpkt"];
1511--2001[label="0.166667;11pkt 11fpkt"];
1511--2002[label="0.136364;9pkt 9fpkt"];
1511--2004[label="0.0151515;1pkt 1fpkt"];
1511--2010[label="0.136364;9pkt 9fpkt"];
1511--2013[label="0.136364;9pkt 9fpkt"];
1511--2015[label="0.0151515;1pkt 1fpkt"];
1511--2017[label="0.136364;9pkt 9fpkt"];
1511--2021[label="0.0151515;1pkt 1fpkt"];
1511--2426[label="1;66pkt 66fpkt"];
1511--2789[label="0.984848;65pkt 65fpkt"];
1511--2913[label="1;66pkt 66fpkt"];
2426--2789[label="1;139pkt 139fpkt"];
2426--2913[label="1;140pkt 140fpkt"];
2789--2913[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="196.217.148.143"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="14.168.68.144"/>
    </slice>
    <from sec="994482877" usec="0"/>
    <to sec="994483161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
2434[label="147.87.224.145;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2792[label="147.87.224.145;6pkt 6fpkt", shape=invtriangle, color=brown];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.224.145:*, 192.14.131.169:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61090: (8.33333%)&lt;BR/&gt; 61086: (8.33333%)&lt;BR/&gt; 61066: (8.33333%)&lt;BR/&gt; 61044: (8.33333%)&gt;];
}
2434--2792[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="192.14.131.169" dst_port="80" src_ip="147.87.224.145"/>
    </slice>
    <from sec="994483096" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_353{
style=filled;
color=gray75;
2439[label="128.141.130.147;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2796[label="128.141.130.147;10pkt 10fpkt", shape=invtriangle, color=brown];
stat353[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.141.130.147:*, 209.168.144.102:80}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1056: (4.7619%)&lt;BR/&gt; 1055: (4.7619%)&lt;BR/&gt; 1054: (4.7619%)&lt;BR/&gt; 1053: (4.7619%)&gt;];
}
2439--2796[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="209.168.144.102" dst_port="80" src_ip="128.141.130.147"/>
    </slice>
    <from sec="994483135" usec="0"/>
    <to sec="994483212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_354{
style=filled;
color=gray75;
2454[label="149.180.70.153;26pkt 26fpkt", shape=pentagon, color=darkviolet];
2801[label="149.180.70.153;26pkt 26fpkt", shape=invtriangle, color=brown];
stat354[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.180.70.153:*, 14.131.135.28:80}[26.9231%]&lt;BR/&gt;{149.180.70.153:*, 13.192.33.34:80}[26.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49655: (1.92308%)&lt;BR/&gt; 49654: (1.92308%)&lt;BR/&gt; 49653: (1.92308%)&lt;BR/&gt; 49651: (1.92308%)&gt;];
}
2454--2801[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="13.192.33.34" dst_port="80" src_ip="149.180.70.153"/>
      <filter dst_ip="14.131.135.28" dst_port="80" src_ip="149.180.70.153"/>
    </slice>
    <from sec="994482739" usec="0"/>
    <to sec="994483185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11391,2.29046,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_355{
style=filled;
color=gray75;
2469[label="195.76.28.160;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2807[label="195.76.28.160;6pkt 6fpkt", shape=invtriangle, color=brown];
2918[label="195.76.28.160;6pkt 6fpkt", shape=invhouse, color=bisque];
stat355[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.76.28.160:80, 147.87.103.47:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1270: (8.33333%)&lt;BR/&gt; 1269: (8.33333%)&lt;BR/&gt; 1263: (8.33333%)&lt;BR/&gt; 1262: (8.33333%)&gt;];
}
2469--2807[label="1;6pkt 6fpkt"];
2469--2918[label="1;6pkt 6fpkt"];
2807--2918[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.103.47" src_ip="195.76.28.160" src_port="80"/>
    </slice>
    <from sec="994483214" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11391,2.29046,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_356{
style=filled;
color=gray75;
2474[label="13.8.245.161;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2809[label="13.8.245.161;9pkt 9fpkt", shape=invtriangle, color=brown];
2919[label="13.8.245.161;9pkt 9fpkt", shape=invhouse, color=bisque];
stat356[shape=component, label=&lt;Rules:&lt;BR/&gt;{13.8.245.161:80, 147.87.251.175:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1256: (5.55556%)&lt;BR/&gt; 1255: (5.55556%)&lt;BR/&gt; 1254: (5.55556%)&lt;BR/&gt; 1253: (5.55556%)&gt;];
}
2474--2809[label="1;9pkt 9fpkt"];
2474--2919[label="1;9pkt 9fpkt"];
2809--2919[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.251.175" src_ip="13.8.245.161" src_port="80"/>
    </slice>
    <from sec="994482812" usec="0"/>
    <to sec="994483077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_357{
style=filled;
color=gray75;
2492[label="165.22.49.166;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2815[label="165.22.49.166;31pkt 31fpkt", shape=invtriangle, color=brown];
stat357[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.22.49.166:*, *:1214}[96.7742%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (48.3871%)&lt;BR/&gt; 1810: (1.6129%)&lt;BR/&gt; 1809: (1.6129%)&lt;BR/&gt; 1808: (1.6129%)&lt;BR/&gt; 1805: (1.6129%)&gt;];
}
2492--2815[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_port="1214" src_ip="165.22.49.166"/>
    </slice>
    <from sec="994482033" usec="0"/>
    <to sec="994483197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.244.52.174"/>
    </slice>
    <from sec="994483188" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.38.234.194"/>
    </slice>
    <from sec="994482415" usec="0"/>
    <to sec="994483051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10352,2.18513,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_360{
style=filled;
color=gray75;
195[label="128.141.130.166;d;58pkt 58fpkt", shape=diamond, color=yellow];
1723[label="128.141.130.166;d;55pkt 55fpkt", shape=hexagon, color=black];
2562[label="210.46.191.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2644[label="211.37.222.239;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2840[label="210.46.191.202;1pkt 1fpkt", shape=invtriangle, color=brown];
2873[label="211.37.222.239;6pkt 6fpkt", shape=invtriangle, color=brown];
2927[label="210.46.191.202;1pkt 1fpkt", shape=invhouse, color=bisque];
stat360[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.98.136.190:80, 128.141.130.166:*}[29.3103%]&lt;BR/&gt;{210.46.191.202:80, 128.141.130.166:*}[25.8621%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4375%)&lt;BR/&gt; 1614: (1.5625%)&lt;BR/&gt; 1575: (1.5625%)&lt;BR/&gt; 1574: (1.5625%)&lt;BR/&gt; 1547: (1.5625%)&gt;];
}
195--196[label="1;17pkt 17fpkt"];
195--375[label="0.714286;15pkt 15fpkt"];
195--1438[label="1;7pkt 7fpkt"];
195--1723[label="1;55pkt 55fpkt"];
195--1996[label="0.189655;11pkt 11fpkt"];
195--2006[label="0.0689655;4pkt 4fpkt"];
195--2009[label="0.189655;11pkt 11fpkt"];
195--2016[label="0.189655;11pkt 11fpkt"];
195--2543[label="1;16pkt 16fpkt"];
195--2562[label="1;1pkt 1fpkt"];
195--2644[label="1;6pkt 6fpkt"];
195--2836[label="1;14pkt 14fpkt"];
195--2840[label="1;1pkt 1fpkt"];
195--2873[label="1;6pkt 6fpkt"];
195--2927[label="1;1pkt 1fpkt"];
1723--1996[label="0.2;11pkt 11fpkt"];
1723--2006[label="0.0727273;4pkt 4fpkt"];
1723--2009[label="0.2;11pkt 11fpkt"];
1723--2016[label="0.2;11pkt 11fpkt"];
1723--2543[label="1;16pkt 16fpkt"];
1723--2644[label="1;6pkt 6fpkt"];
1723--2836[label="1;14pkt 14fpkt"];
1723--2873[label="1;6pkt 6fpkt"];
2562--2840[label="1;1pkt 1fpkt"];
2562--2927[label="1;1pkt 1fpkt"];
2644--2873[label="1;6pkt 6fpkt"];
2840--2927[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.130.166" src_ip="197.98.136.190" src_port="80"/>
      <filter dst_ip="128.141.130.166" src_ip="210.46.191.202" src_port="80"/>
    </slice>
    <from sec="994482003" usec="0"/>
    <to sec="994483215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666633,2.22286,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
1009[label="128.141.102.81;d;14pkt 14fpkt", shape=diamond, color=yellow];
2567[label="208.97.115.204;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2842[label="208.97.115.204;1pkt 1fpkt", shape=invtriangle, color=brown];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.40.221.128:8890, 128.141.102.81:*}[21.4286%]&lt;BR/&gt;{110.169.139.252:8989, 128.141.102.81:*}[21.4286%]&lt;BR/&gt;{*:8845, 128.141.102.81:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8989: (9.375%)&lt;BR/&gt; 8890: (9.375%)&lt;BR/&gt; 8845: (9.375%)&lt;BR/&gt; 7000: (9.375%)&lt;BR/&gt; 1792: (9.375%)&gt;];
}
1009--2222[label="0.125;1pkt 1fpkt"];
1009--2567[label="1;1pkt 1fpkt"];
1009--2842[label="1;1pkt 1fpkt"];
2567--2842[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.102.81" src_port="8845"/>
      <filter dst_ip="128.141.102.81" src_ip="110.169.139.252" src_port="8989"/>
      <filter dst_ip="128.141.102.81" src_ip="219.40.221.128" src_port="8890"/>
    </slice>
    <from sec="994482006" usec="0"/>
    <to sec="994483185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11391,2.29046,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
2570[label="210.128.59.205;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2843[label="210.128.59.205;9pkt 9fpkt", shape=invtriangle, color=brown];
2929[label="210.128.59.205;9pkt 9fpkt", shape=invhouse, color=bisque];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.128.59.205:80, 128.141.80.212:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49248: (5.55556%)&lt;BR/&gt; 49247: (5.55556%)&lt;BR/&gt; 49246: (5.55556%)&lt;BR/&gt; 49245: (5.55556%)&gt;];
}
2570--2843[label="1;9pkt 9fpkt"];
2570--2929[label="1;9pkt 9fpkt"];
2843--2929[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.80.212" src_ip="210.128.59.205" src_port="80"/>
    </slice>
    <from sec="994482544" usec="0"/>
    <to sec="994482564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_363{
style=filled;
color=gray75;
2583[label="128.141.167.208;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2851[label="128.141.167.208;25pkt 25fpkt", shape=invtriangle, color=brown];
stat363[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.141.167.208:25, *:*}[52%]&lt;BR/&gt;{128.141.167.208:0, *:0}[48%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (48%)&lt;BR/&gt; 25: (26%)&lt;BR/&gt; 63571: (2%)&lt;BR/&gt; 63562: (2%)&lt;BR/&gt; 63421: (2%)&gt;];
}
2583--2851[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="128.141.167.208" src_port="25"/>
      <filter src_ip="128.141.167.208"/>
    </slice>
    <from sec="994482043" usec="0"/>
    <to sec="994483198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.85.43.212"/>
    </slice>
    <from sec="994482003" usec="0"/>
    <to sec="994483212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73897,2.31276,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="165.22.52.216"/>
    </slice>
    <from sec="994482011" usec="0"/>
    <to sec="994483210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_366{
style=filled;
color=gray75;
2597[label="210.105.5.217;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2856[label="210.105.5.217;5pkt 5fpkt", shape=invtriangle, color=brown];
stat366[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.105.5.217:80, 128.141.128.18:4392}[20%]&lt;BR/&gt;{210.105.5.217:80, 128.141.128.18:4393}[20%]&lt;BR/&gt;{210.105.5.217:0, 197.11.28.164:0}[20%]&lt;BR/&gt;{210.105.5.217:80, 197.11.28.164:62458}[20%]&lt;BR/&gt;{210.105.5.217:80, 197.11.28.164:62459}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 0: (20%)&lt;BR/&gt; 62459: (10%)&lt;BR/&gt; 62458: (10%)&lt;BR/&gt; 4393: (10%)&gt;];
}
2597--2856[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="197.11.28.164" dst_port="62459" src_ip="210.105.5.217" src_port="80"/>
      <filter dst_ip="197.11.28.164" dst_port="62458" src_ip="210.105.5.217" src_port="80"/>
      <filter dst_ip="197.11.28.164" src_ip="210.105.5.217"/>
      <filter dst_ip="128.141.128.18" dst_port="4393" src_ip="210.105.5.217" src_port="80"/>
      <filter dst_ip="128.141.128.18" dst_port="4392" src_ip="210.105.5.217" src_port="80"/>
    </slice>
    <from sec="994482171" usec="0"/>
    <to sec="994483206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08268,2.23043,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
1193[label="128.141.8.145;d;16pkt 16fpkt", shape=diamond, color=yellow];
1262[label="211.64.192.220;s;13pkt 13fpkt", shape=diamond, color=yellow];
2609[label="211.64.192.220;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2862[label="211.64.192.220;13pkt 13fpkt", shape=invtriangle, color=brown];
2932[label="211.64.192.220;13pkt 13fpkt", shape=invhouse, color=bisque];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.64.192.220:80, 128.141.8.145:*}[81.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2270: (3.67647%)&lt;BR/&gt; 2269: (3.67647%)&lt;BR/&gt; 2268: (3.67647%)&lt;BR/&gt; 2267: (3.67647%)&gt;];
}
1193--1262[label="1;13pkt 13fpkt"];
1193--2008[label="0.5;8pkt 8fpkt"];
1193--2609[label="1;13pkt 13fpkt"];
1193--2862[label="1;13pkt 13fpkt"];
1193--2932[label="1;13pkt 13fpkt"];
1262--2008[label="0.384615;5pkt 5fpkt"];
1262--2609[label="1;13pkt 13fpkt"];
1262--2862[label="1;13pkt 13fpkt"];
1262--2932[label="1;13pkt 13fpkt"];
2609--2862[label="1;13pkt 13fpkt"];
2609--2932[label="1;13pkt 13fpkt"];
2862--2932[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.8.145" src_ip="211.64.192.220" src_port="80"/>
    </slice>
    <from sec="994482987" usec="0"/>
    <to sec="994483081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666633,2.22286,002,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_368{
style=filled;
color=gray75;
818[label="149.39.216.138;d;29pkt 29fpkt", shape=diamond, color=yellow];
2610[label="149.39.215.220;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2863[label="149.39.215.220;2pkt 2fpkt", shape=invtriangle, color=brown];
stat368[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:138, 149.39.216.138:138}[66.6667%]&lt;BR/&gt;{*:137, 149.39.216.138:137}[23.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 138: (60.6061%)&lt;BR/&gt; 137: (21.2121%)&lt;BR/&gt; 1070: (9.09091%)&lt;BR/&gt; 135: (9.09091%)&gt;];
}
818--2610[label="0.5;1pkt 1fpkt"];
818--2863[label="0.5;1pkt 1fpkt"];
2610--2863[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.39.216.138" dst_port="138" src_port="138"/>
      <filter dst_ip="149.39.216.138" dst_port="137" src_port="137"/>
    </slice>
    <from sec="994482003" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_369{
style=filled;
color=gray75;
2616[label="209.162.33.225;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2864[label="209.162.33.225;7pkt 7fpkt", shape=invtriangle, color=brown];
stat369[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.162.33.225:80, 149.168.149.108:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1087: (7.14286%)&lt;BR/&gt; 1086: (7.14286%)&lt;BR/&gt; 1080: (7.14286%)&lt;BR/&gt; 1079: (7.14286%)&gt;];
}
2616--2864[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="149.168.149.108" src_ip="209.162.33.225" src_port="80"/>
    </slice>
    <from sec="994483066" usec="0"/>
    <to sec="994483204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_370{
style=filled;
color=gray75;
2624[label="194.24.25.230;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2867[label="194.24.25.230;1pkt 1fpkt", shape=invtriangle, color=brown];
stat370[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.24.25.230:65009, 128.141.243.110:65507}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65507: (50%)&lt;BR/&gt; 65009: (50%)&gt;];
}
2624--2867[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.141.243.110" dst_port="65507" src_ip="194.24.25.230" src_port="65009"/>
    </slice>
    <from sec="994483139" usec="0"/>
    <to sec="994483200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08268,2.23043,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
896[label="147.87.132.237;s;78pkt 78fpkt", shape=diamond, color=yellow];
1234[label="208.157.97.165;d;84pkt 84fpkt", shape=diamond, color=yellow];
2639[label="147.87.132.237;77pkt 77fpkt", shape=pentagon, color=darkviolet];
2870[label="147.87.132.237;77pkt 77fpkt", shape=invtriangle, color=brown];
2935[label="147.87.132.237;73pkt 73fpkt", shape=invhouse, color=bisque];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.87.132.237:*, *:80}[46.875%]&lt;BR/&gt;{149.168.35.170:*, 208.157.97.165:80}[39.375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4576%)&lt;BR/&gt; 10000: (1.54242%)&lt;BR/&gt; 6690: (0.642674%)&lt;BR/&gt; 6689: (0.642674%)&lt;BR/&gt; 6981: (0.514139%)&gt;];
}
896--985[label="0.027027;1pkt 1fpkt"];
896--998[label="0.0689655;2pkt 2fpkt"];
896--1091[label="0.0327869;2pkt 2fpkt"];
896--1167[label="0.0615385;4pkt 4fpkt"];
896--1234[label="0.025641;2pkt 2fpkt"];
896--1721[label="0.0689655;2pkt 2fpkt"];
896--1994[label="0.0689655;2pkt 2fpkt"];
896--1997[label="0.0769231;6pkt 6fpkt"];
896--2001[label="0.0384615;3pkt 3fpkt"];
896--2002[label="0.0384615;3pkt 3fpkt"];
896--2004[label="0.0128205;1pkt 1fpkt"];
896--2010[label="0.0769231;6pkt 6fpkt"];
896--2013[label="0.0384615;3pkt 3fpkt"];
896--2015[label="0.0128205;1pkt 1fpkt"];
896--2017[label="0.0769231;6pkt 6fpkt"];
896--2021[label="0.0128205;1pkt 1fpkt"];
896--2639[label="1;77pkt 77fpkt"];
896--2870[label="1;77pkt 77fpkt"];
896--2935[label="1;73pkt 73fpkt"];
1234--2639[label="0.025974;2pkt 2fpkt"];
1234--2870[label="0.025974;2pkt 2fpkt"];
1234--2935[label="0.0273973;2pkt 2fpkt"];
2639--2870[label="1;77pkt 77fpkt"];
2639--2935[label="1;73pkt 73fpkt"];
2870--2935[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="147.87.132.237"/>
      <filter dst_ip="208.157.97.165" dst_port="80" src_ip="149.168.35.170"/>
    </slice>
    <from sec="994482000" usec="0"/>
    <to sec="994483188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
2641[label="134.30.116.238;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2871[label="134.30.116.238;5pkt 5fpkt", shape=invtriangle, color=brown];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.30.116.238:80, 149.168.41.12:1275}[20%]&lt;BR/&gt;{134.30.116.238:80, 149.168.41.12:1276}[20%]&lt;BR/&gt;{134.30.116.238:80, 149.168.41.12:1277}[20%]&lt;BR/&gt;{134.30.116.238:80, 149.168.41.12:1278}[20%]&lt;BR/&gt;{134.30.116.238:80, 149.168.41.12:1279}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1279: (10%)&lt;BR/&gt; 1278: (10%)&lt;BR/&gt; 1277: (10%)&lt;BR/&gt; 1276: (10%)&gt;];
}
2641--2871[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="149.168.41.12" dst_port="1279" src_ip="134.30.116.238" src_port="80"/>
      <filter dst_ip="149.168.41.12" dst_port="1278" src_ip="134.30.116.238" src_port="80"/>
      <filter dst_ip="149.168.41.12" dst_port="1277" src_ip="134.30.116.238" src_port="80"/>
      <filter dst_ip="149.168.41.12" dst_port="1276" src_ip="134.30.116.238" src_port="80"/>
      <filter dst_ip="149.168.41.12" dst_port="1275" src_ip="134.30.116.238" src_port="80"/>
    </slice>
    <from sec="994483049" usec="0"/>
    <to sec="994483195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716237,2.28309,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
2642[label="12.234.9.239;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2872[label="12.234.9.239;1pkt 1fpkt", shape=invtriangle, color=brown];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.234.9.239:1030, 147.87.72.150:110}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 110: (50%)&gt;];
}
2642--2872[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.72.150" dst_port="110" src_ip="12.234.9.239" src_port="1030"/>
    </slice>
    <from sec="994482440" usec="0"/>
    <to sec="994482459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03181,2.33432,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.66.190.15"/>
    </slice>
    <from sec="994483051" usec="0"/>
    <to sec="994483167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12866,2.32004,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_375{
style=filled;
color=gray75;
2680[label="160.164.240.22;4pkt 4fpkt", shape=invtriangle, color=brown];
2885[label="160.164.240.22;4pkt 4fpkt", shape=invhouse, color=bisque];
stat375[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.164.240.22:80, 129.74.82.109:1192}[25%]&lt;BR/&gt;{160.164.240.22:80, 129.74.82.109:1193}[25%]&lt;BR/&gt;{160.164.240.22:80, 129.74.82.109:1194}[25%]&lt;BR/&gt;{160.164.240.22:80, 129.74.82.109:1195}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1195: (12.5%)&lt;BR/&gt; 1194: (12.5%)&lt;BR/&gt; 1193: (12.5%)&lt;BR/&gt; 1192: (12.5%)&gt;];
}
2680--2885[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="129.74.82.109" dst_port="1195" src_ip="160.164.240.22" src_port="80"/>
      <filter dst_ip="129.74.82.109" dst_port="1194" src_ip="160.164.240.22" src_port="80"/>
      <filter dst_ip="129.74.82.109" dst_port="1193" src_ip="160.164.240.22" src_port="80"/>
      <filter dst_ip="129.74.82.109" dst_port="1192" src_ip="160.164.240.22" src_port="80"/>
    </slice>
    <from sec="994483086" usec="0"/>
    <to sec="994483113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03181,2.33432,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="110.168.143.26"/>
    </slice>
    <from sec="994483107" usec="0"/>
    <to sec="994483212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03181,2.33432,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="172.35.69.42"/>
    </slice>
    <from sec="994482779" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03181,2.33432,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="136.211.45.56"/>
    </slice>
    <from sec="994482702" usec="0"/>
    <to sec="994483142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981306,2.24528,503,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
523[label="147.87.68.131;d;168pkt 168fpkt", shape=diamond, color=yellow];
592[label="208.226.58.245;s;29pkt 29fpkt", shape=diamond, color=yellow];
2278[label="209.47.48.91;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2292[label="219.1.149.97;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2899[label="209.47.48.91;42pkt 42fpkt", shape=invhouse, color=bisque];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.47.48.91:80, 147.87.68.131:*}[24.4186%]&lt;BR/&gt;{219.1.149.97:80, 147.87.68.131:*}[20.9302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1290: (0.474684%)&lt;BR/&gt; 1289: (0.474684%)&lt;BR/&gt; 1279: (0.474684%)&lt;BR/&gt; 1277: (0.474684%)&gt;];
}
523--592[label="1;29pkt 29fpkt"];
523--638[label="0.0169492;2pkt 2fpkt"];
523--2008[label="0.0892857;15pkt 15fpkt"];
523--2278[label="0.904762;38pkt 38fpkt"];
523--2292[label="1;35pkt 35fpkt"];
523--2899[label="0.904762;38pkt 38fpkt"];
2278--2899[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="147.87.68.131" src_ip="209.47.48.91" src_port="80"/>
      <filter dst_ip="147.87.68.131" src_ip="219.1.149.97" src_port="80"/>
    </slice>
    <from sec="994482216" usec="0"/>
    <to sec="994483214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03181,2.33432,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="147.253.37.94"/>
    </slice>
    <from sec="994482410" usec="0"/>
    <to sec="994482496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08268,2.23043,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
1082[label="149.168.35.109;s;92pkt 92fpkt", shape=diamond, color=yellow];
2333[label="149.168.35.109;92pkt 92fpkt", shape=pentagon, color=darkviolet];
2763[label="149.168.35.109;93pkt 93fpkt", shape=invtriangle, color=brown];
2908[label="149.168.35.109;92pkt 92fpkt", shape=invhouse, color=bisque];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.168.35.109:25, *:*}[33.3333%]&lt;BR/&gt;{149.168.35.109:*, *:113}[32.2581%]&lt;BR/&gt;{149.168.35.109:30, 203.178.128.12:*}[21.5054%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (19.3767%)&lt;BR/&gt; 113: (16.8022%)&lt;BR/&gt; 30: (10.5691%)&lt;BR/&gt; 110: (2.71003%)&lt;BR/&gt; 0: (1.08401%)&gt;];
}
1082--2333[label="0.98913;91pkt 91fpkt"];
1082--2763[label="1;92pkt 92fpkt"];
1082--2908[label="1;92pkt 92fpkt"];
2333--2763[label="1;92pkt 92fpkt"];
2333--2908[label="0.98913;91pkt 91fpkt"];
2763--2908[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter src_ip="149.168.35.109" src_port="25"/>
      <filter dst_port="113" src_ip="149.168.35.109"/>
      <filter dst_ip="203.178.128.12" src_ip="149.168.35.109" src_port="30"/>
    </slice>
    <from sec="994482008" usec="0"/>
    <to sec="994483208" usec="0"/>
  </anomaly>

</admd:annotation>
