<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.988736,2.06051,901,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_3{
style=filled;
color=gray75;
38[label="141.165.228.119;d;2pkt 2fpkt", shape=diamond, color=yellow];
39[label="196.224.48.129;s;2pkt 2fpkt", shape=diamond, color=yellow];
972[label="141.165.228.119;d;2pkt 2fpkt", shape=hexagon, color=black];
973[label="196.224.48.129;s;2pkt 2fpkt", shape=hexagon, color=black];
1525[label="141.165.228.119;d;2pkt 2fpkt", shape=polygon, color=gold];
1526[label="196.224.48.129;s;2pkt 2fpkt", shape=polygon, color=gold];
stat3[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.224.48.129:554, 141.165.228.119:1212}[50%]&lt;BR/&gt;{196.224.48.129:13016, 141.165.228.119:6970}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13016: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 1212: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
38--39[label="1;2pkt 2fpkt"];
38--972[label="1;2pkt 2fpkt"];
38--973[label="1;2pkt 2fpkt"];
38--1525[label="1;2pkt 2fpkt"];
38--1526[label="1;2pkt 2fpkt"];
39--972[label="1;2pkt 2fpkt"];
39--973[label="1;2pkt 2fpkt"];
39--1525[label="1;2pkt 2fpkt"];
39--1526[label="1;2pkt 2fpkt"];
972--973[label="1;2pkt 2fpkt"];
972--1525[label="1;2pkt 2fpkt"];
972--1526[label="1;2pkt 2fpkt"];
973--1525[label="1;2pkt 2fpkt"];
973--1526[label="1;2pkt 2fpkt"];
1525--1526[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.228.119" dst_port="6970" src_ip="196.224.48.129" src_port="13016"/>
      <filter dst_ip="141.165.228.119" dst_port="1212" src_ip="196.224.48.129" src_port="554"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_4{
style=filled;
color=gray75;
50[label="144.52.156.125;d;3pkt 3fpkt", shape=diamond, color=yellow];
53[label="47.12.232.16;s;3pkt 3fpkt", shape=diamond, color=yellow];
1022[label="47.12.232.16;s;1pkt 1fpkt", shape=hexagon, color=black];
stat4[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.12.232.16:64783, 144.52.156.125:21}[33.3333%]&lt;BR/&gt;{47.12.232.16:65141, 144.52.156.125:20}[33.3333%]&lt;BR/&gt;{47.12.232.16:65286, 144.52.156.125:20}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (35.7143%)&lt;BR/&gt; 65141: (21.4286%)&lt;BR/&gt; 65286: (14.2857%)&lt;BR/&gt; 64783: (14.2857%)&lt;BR/&gt; 21: (14.2857%)&gt;];
}
50--53[label="1;3pkt 3fpkt"];
50--1022[label="1;1pkt 1fpkt"];
53--1022[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.52.156.125" dst_port="20" src_ip="47.12.232.16" src_port="65286"/>
      <filter dst_ip="144.52.156.125" dst_port="20" src_ip="47.12.232.16" src_port="65141"/>
      <filter dst_ip="144.52.156.125" dst_port="21" src_ip="47.12.232.16" src_port="64783"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22207,1.96147,901,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_5{
style=filled;
color=gray75;
79[label="148.173.3.51;s;137pkt 137fpkt", shape=diamond, color=yellow];
80[label="213.165.192.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
82[label="206.62.236.188;d;1pkt 1fpkt", shape=diamond, color=yellow];
90[label="16.210.4.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
110[label="16.8.238.178;d;1pkt 1fpkt", shape=diamond, color=yellow];
116[label="1.34.253.157;d;1pkt 1fpkt", shape=diamond, color=yellow];
127[label="16.208.48.28;d;1pkt 1fpkt", shape=diamond, color=yellow];
141[label="212.185.33.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
166[label="16.13.172.206;d;1pkt 1fpkt", shape=diamond, color=yellow];
176[label="93.96.9.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
263[label="16.229.232.116;d;1pkt 1fpkt", shape=diamond, color=yellow];
273[label="208.76.154.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
332[label="208.84.72.31;d;1pkt 1fpkt", shape=diamond, color=yellow];
398[label="16.10.133.114;d;1pkt 1fpkt", shape=diamond, color=yellow];
410[label="213.146.93.211;d;1pkt 1fpkt", shape=diamond, color=yellow];
413[label="209.76.11.160;d;1pkt 1fpkt", shape=diamond, color=yellow];
420[label="195.22.127.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
505[label="16.110.134.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
749[label="93.119.218.84;d;1pkt 1fpkt", shape=diamond, color=yellow];
985[label="148.173.3.51;s;137pkt 137fpkt", shape=hexagon, color=black];
1031[label="16.210.4.1;d;1pkt 1fpkt", shape=hexagon, color=black];
1134[label="16.13.172.206;d;1pkt 1fpkt", shape=hexagon, color=black];
1202[label="16.229.232.116;d;1pkt 1fpkt", shape=hexagon, color=black];
1208[label="212.185.33.158;d;1pkt 1fpkt", shape=hexagon, color=black];
1286[label="213.146.93.211;d;1pkt 1fpkt", shape=hexagon, color=black];
1296[label="93.96.9.5;d;1pkt 1fpkt", shape=hexagon, color=black];
1348[label="1.34.253.157;d;1pkt 1fpkt", shape=hexagon, color=black];
1402[label="16.10.133.114;d;1pkt 1fpkt", shape=hexagon, color=black];
1450[label="208.84.72.31;d;1pkt 1fpkt", shape=hexagon, color=black];
1492[label="16.208.48.28;d;1pkt 1fpkt", shape=hexagon, color=black];
1494[label="195.22.127.74;d;1pkt 1fpkt", shape=hexagon, color=black];
1531[label="148.173.3.51;s;137pkt 137fpkt", shape=polygon, color=gold];
1756[label="148.173.3.51;138pkt 138fpkt", shape=pentagon, color=darkviolet];
2317[label="148.173.3.51;138pkt 138fpkt", shape=invtriangle, color=brown];
2517[label="148.173.3.51;138pkt 138fpkt", shape=invhouse, color=bisque];
stat5[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.173.3.51:*, 212.181.103.80:80}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.1148%)&lt;BR/&gt; 6346: (9.77752%)&lt;BR/&gt; 10001: (1.05386%)&lt;BR/&gt; 21034: (0.819672%)&lt;BR/&gt; 10000: (0.702576%)&gt;];
}
79--80[label="1;1pkt 1fpkt"];
79--82[label="1;1pkt 1fpkt"];
79--90[label="1;1pkt 1fpkt"];
79--110[label="1;1pkt 1fpkt"];
79--116[label="1;1pkt 1fpkt"];
79--127[label="1;1pkt 1fpkt"];
79--141[label="1;1pkt 1fpkt"];
79--166[label="1;1pkt 1fpkt"];
79--176[label="1;1pkt 1fpkt"];
79--263[label="1;1pkt 1fpkt"];
79--273[label="1;1pkt 1fpkt"];
79--332[label="1;1pkt 1fpkt"];
79--398[label="1;1pkt 1fpkt"];
79--410[label="1;1pkt 1fpkt"];
79--413[label="1;1pkt 1fpkt"];
79--420[label="1;1pkt 1fpkt"];
79--505[label="1;1pkt 1fpkt"];
79--555[label="0.182482;25pkt 25fpkt"];
79--703[label="0.0218978;3pkt 3fpkt"];
79--749[label="1;1pkt 1fpkt"];
79--837[label="0.0227273;3pkt 3fpkt"];
79--985[label="1;137pkt 137fpkt"];
79--1031[label="1;1pkt 1fpkt"];
79--1134[label="1;1pkt 1fpkt"];
79--1202[label="1;1pkt 1fpkt"];
79--1208[label="1;1pkt 1fpkt"];
79--1286[label="1;1pkt 1fpkt"];
79--1296[label="1;1pkt 1fpkt"];
79--1348[label="1;1pkt 1fpkt"];
79--1402[label="1;1pkt 1fpkt"];
79--1421[label="0.0227273;3pkt 3fpkt"];
79--1450[label="1;1pkt 1fpkt"];
79--1492[label="1;1pkt 1fpkt"];
79--1494[label="1;1pkt 1fpkt"];
79--1531[label="1;137pkt 137fpkt"];
79--1589[label="0.0247934;3pkt 3fpkt"];
79--1756[label="1;137pkt 137fpkt"];
79--2317[label="1;137pkt 137fpkt"];
79--2517[label="1;137pkt 137fpkt"];
80--985[label="1;1pkt 1fpkt"];
80--1531[label="1;1pkt 1fpkt"];
80--1756[label="1;1pkt 1fpkt"];
80--2317[label="1;1pkt 1fpkt"];
80--2517[label="1;1pkt 1fpkt"];
82--985[label="1;1pkt 1fpkt"];
82--1531[label="1;1pkt 1fpkt"];
82--1756[label="1;1pkt 1fpkt"];
82--2317[label="1;1pkt 1fpkt"];
82--2517[label="1;1pkt 1fpkt"];
90--985[label="1;1pkt 1fpkt"];
90--1031[label="1;1pkt 1fpkt"];
90--1531[label="1;1pkt 1fpkt"];
90--1756[label="1;1pkt 1fpkt"];
90--2317[label="1;1pkt 1fpkt"];
90--2517[label="1;1pkt 1fpkt"];
110--985[label="1;1pkt 1fpkt"];
110--1531[label="1;1pkt 1fpkt"];
110--1756[label="1;1pkt 1fpkt"];
110--2317[label="1;1pkt 1fpkt"];
110--2517[label="1;1pkt 1fpkt"];
116--985[label="1;1pkt 1fpkt"];
116--1348[label="1;1pkt 1fpkt"];
116--1531[label="1;1pkt 1fpkt"];
116--1756[label="1;1pkt 1fpkt"];
116--2317[label="1;1pkt 1fpkt"];
116--2517[label="1;1pkt 1fpkt"];
127--985[label="1;1pkt 1fpkt"];
127--1492[label="1;1pkt 1fpkt"];
127--1531[label="1;1pkt 1fpkt"];
127--1756[label="1;1pkt 1fpkt"];
127--2317[label="1;1pkt 1fpkt"];
127--2517[label="1;1pkt 1fpkt"];
141--985[label="1;1pkt 1fpkt"];
141--1208[label="1;1pkt 1fpkt"];
141--1531[label="1;1pkt 1fpkt"];
141--1756[label="1;1pkt 1fpkt"];
141--2317[label="1;1pkt 1fpkt"];
141--2517[label="1;1pkt 1fpkt"];
166--985[label="1;1pkt 1fpkt"];
166--1134[label="1;1pkt 1fpkt"];
166--1531[label="1;1pkt 1fpkt"];
166--1756[label="1;1pkt 1fpkt"];
166--2317[label="1;1pkt 1fpkt"];
166--2517[label="1;1pkt 1fpkt"];
176--985[label="1;1pkt 1fpkt"];
176--1296[label="1;1pkt 1fpkt"];
176--1531[label="1;1pkt 1fpkt"];
176--1756[label="1;1pkt 1fpkt"];
176--2317[label="1;1pkt 1fpkt"];
176--2517[label="1;1pkt 1fpkt"];
263--985[label="1;1pkt 1fpkt"];
263--1202[label="1;1pkt 1fpkt"];
263--1531[label="1;1pkt 1fpkt"];
263--1756[label="1;1pkt 1fpkt"];
263--2317[label="1;1pkt 1fpkt"];
263--2517[label="1;1pkt 1fpkt"];
273--985[label="1;1pkt 1fpkt"];
273--1531[label="1;1pkt 1fpkt"];
273--1756[label="1;1pkt 1fpkt"];
273--2317[label="1;1pkt 1fpkt"];
273--2517[label="1;1pkt 1fpkt"];
332--985[label="1;1pkt 1fpkt"];
332--1450[label="1;1pkt 1fpkt"];
332--1531[label="1;1pkt 1fpkt"];
332--1756[label="1;1pkt 1fpkt"];
332--2317[label="1;1pkt 1fpkt"];
332--2517[label="1;1pkt 1fpkt"];
398--985[label="1;1pkt 1fpkt"];
398--1402[label="1;1pkt 1fpkt"];
398--1531[label="1;1pkt 1fpkt"];
398--1756[label="1;1pkt 1fpkt"];
398--2317[label="1;1pkt 1fpkt"];
398--2517[label="1;1pkt 1fpkt"];
410--985[label="1;1pkt 1fpkt"];
410--1286[label="1;1pkt 1fpkt"];
410--1531[label="1;1pkt 1fpkt"];
410--1756[label="1;1pkt 1fpkt"];
410--2317[label="1;1pkt 1fpkt"];
410--2517[label="1;1pkt 1fpkt"];
413--985[label="1;1pkt 1fpkt"];
413--1531[label="1;1pkt 1fpkt"];
413--1756[label="1;1pkt 1fpkt"];
413--2317[label="1;1pkt 1fpkt"];
413--2517[label="1;1pkt 1fpkt"];
420--985[label="1;1pkt 1fpkt"];
420--1494[label="1;1pkt 1fpkt"];
420--1531[label="1;1pkt 1fpkt"];
420--1756[label="1;1pkt 1fpkt"];
420--2317[label="1;1pkt 1fpkt"];
420--2517[label="1;1pkt 1fpkt"];
505--985[label="1;1pkt 1fpkt"];
505--1531[label="1;1pkt 1fpkt"];
505--1756[label="1;1pkt 1fpkt"];
505--2317[label="1;1pkt 1fpkt"];
505--2517[label="1;1pkt 1fpkt"];
749--985[label="1;1pkt 1fpkt"];
749--1531[label="1;1pkt 1fpkt"];
749--1756[label="1;1pkt 1fpkt"];
749--2317[label="1;1pkt 1fpkt"];
749--2517[label="1;1pkt 1fpkt"];
985--1031[label="1;1pkt 1fpkt"];
985--1134[label="1;1pkt 1fpkt"];
985--1202[label="1;1pkt 1fpkt"];
985--1208[label="1;1pkt 1fpkt"];
985--1286[label="1;1pkt 1fpkt"];
985--1296[label="1;1pkt 1fpkt"];
985--1348[label="1;1pkt 1fpkt"];
985--1402[label="1;1pkt 1fpkt"];
985--1421[label="0.0227273;3pkt 3fpkt"];
985--1450[label="1;1pkt 1fpkt"];
985--1492[label="1;1pkt 1fpkt"];
985--1494[label="1;1pkt 1fpkt"];
985--1531[label="1;137pkt 137fpkt"];
985--1589[label="0.0247934;3pkt 3fpkt"];
985--1756[label="1;137pkt 137fpkt"];
985--2317[label="1;137pkt 137fpkt"];
985--2517[label="1;137pkt 137fpkt"];
1031--1531[label="1;1pkt 1fpkt"];
1031--1756[label="1;1pkt 1fpkt"];
1031--2317[label="1;1pkt 1fpkt"];
1031--2517[label="1;1pkt 1fpkt"];
1134--1531[label="1;1pkt 1fpkt"];
1134--1756[label="1;1pkt 1fpkt"];
1134--2317[label="1;1pkt 1fpkt"];
1134--2517[label="1;1pkt 1fpkt"];
1202--1531[label="1;1pkt 1fpkt"];
1202--1756[label="1;1pkt 1fpkt"];
1202--2317[label="1;1pkt 1fpkt"];
1202--2517[label="1;1pkt 1fpkt"];
1208--1531[label="1;1pkt 1fpkt"];
1208--1756[label="1;1pkt 1fpkt"];
1208--2317[label="1;1pkt 1fpkt"];
1208--2517[label="1;1pkt 1fpkt"];
1286--1531[label="1;1pkt 1fpkt"];
1286--1756[label="1;1pkt 1fpkt"];
1286--2317[label="1;1pkt 1fpkt"];
1286--2517[label="1;1pkt 1fpkt"];
1296--1531[label="1;1pkt 1fpkt"];
1296--1756[label="1;1pkt 1fpkt"];
1296--2317[label="1;1pkt 1fpkt"];
1296--2517[label="1;1pkt 1fpkt"];
1348--1531[label="1;1pkt 1fpkt"];
1348--1756[label="1;1pkt 1fpkt"];
1348--2317[label="1;1pkt 1fpkt"];
1348--2517[label="1;1pkt 1fpkt"];
1402--1531[label="1;1pkt 1fpkt"];
1402--1756[label="1;1pkt 1fpkt"];
1402--2317[label="1;1pkt 1fpkt"];
1402--2517[label="1;1pkt 1fpkt"];
1450--1531[label="1;1pkt 1fpkt"];
1450--1756[label="1;1pkt 1fpkt"];
1450--2317[label="1;1pkt 1fpkt"];
1450--2517[label="1;1pkt 1fpkt"];
1492--1531[label="1;1pkt 1fpkt"];
1492--1756[label="1;1pkt 1fpkt"];
1492--2317[label="1;1pkt 1fpkt"];
1492--2517[label="1;1pkt 1fpkt"];
1494--1531[label="1;1pkt 1fpkt"];
1494--1756[label="1;1pkt 1fpkt"];
1494--2317[label="1;1pkt 1fpkt"];
1494--2517[label="1;1pkt 1fpkt"];
1531--1589[label="0.0247934;3pkt 3fpkt"];
1531--1756[label="1;137pkt 137fpkt"];
1531--2317[label="1;137pkt 137fpkt"];
1531--2517[label="1;137pkt 137fpkt"];
1756--2317[label="1;138pkt 138fpkt"];
1756--2517[label="1;138pkt 138fpkt"];
2317--2517[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter dst_ip="212.181.103.80" dst_port="80" src_ip="148.173.3.51"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_6{
style=filled;
color=gray75;
99[label="207.97.79.184;s;2pkt 2fpkt", shape=diamond, color=yellow];
100[label="141.165.229.69;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat6[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.21.144.164:25, 141.165.229.69:1037}[33.3333%]&lt;BR/&gt;{207.97.79.184:1069, 141.165.229.69:6970}[33.3333%]&lt;BR/&gt;{207.97.79.184:7070, 141.165.229.69:1171}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7070: (20%)&lt;BR/&gt; 6970: (20%)&lt;BR/&gt; 1171: (20%)&lt;BR/&gt; 1069: (20%)&lt;BR/&gt; 1037: (10%)&gt;];
}
99--100[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.229.69" dst_port="1171" src_ip="207.97.79.184" src_port="7070"/>
      <filter dst_ip="141.165.229.69" dst_port="6970" src_ip="207.97.79.184" src_port="1069"/>
      <filter dst_ip="141.165.229.69" dst_port="1037" src_ip="219.21.144.164" src_port="25"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472845,2.09084,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_7{
style=filled;
color=gray75;
101[label="164.202.196.187;d;2pkt 2fpkt", shape=diamond, color=yellow];
102[label="209.210.10.21;s;2pkt 2fpkt", shape=diamond, color=yellow];
1664[label="209.210.10.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat7[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.210.10.21:7070, 164.202.196.187:1323}[50%]&lt;BR/&gt;{209.210.10.21:60136, 164.202.196.187:6970}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7070: (30%)&lt;BR/&gt; 1323: (30%)&lt;BR/&gt; 60136: (20%)&lt;BR/&gt; 6970: (20%)&gt;];
}
101--102[label="1;2pkt 2fpkt"];
101--1664[label="1;1pkt 1fpkt"];
102--1664[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.202.196.187" dst_port="6970" src_ip="209.210.10.21" src_port="60136"/>
      <filter dst_ip="164.202.196.187" dst_port="1323" src_ip="209.210.10.21" src_port="7070"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_9{
style=filled;
color=gray75;
77[label="144.52.196.192;s;8pkt 8fpkt", shape=diamond, color=yellow];
112[label="46.50.31.75;d;2pkt 2fpkt", shape=diamond, color=yellow];
580[label="46.50.31.74;d;6pkt 6fpkt", shape=diamond, color=yellow];
1276[label="144.52.196.192;s;6pkt 6fpkt", shape=hexagon, color=black];
1507[label="46.50.31.74;d;6pkt 6fpkt", shape=hexagon, color=black];
stat9[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.52.196.192:*, 46.50.31.74:*}[75%]&lt;BR/&gt;{144.52.196.192:*, *:21}[25%]&lt;BR/&gt;{144.52.196.192:*, 46.50.31.75:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (12.5%)&lt;BR/&gt; 36592: (7.14286%)&lt;BR/&gt; 28230: (7.14286%)&lt;BR/&gt; 25198: (7.14286%)&lt;BR/&gt; 12792: (7.14286%)&gt;];
}
77--112[label="1;2pkt 2fpkt"];
77--580[label="1;6pkt 6fpkt"];
77--1276[label="1;6pkt 6fpkt"];
77--1507[label="1;6pkt 6fpkt"];
112--1276[label="1;2pkt 2fpkt"];
580--1276[label="0.666667;4pkt 4fpkt"];
580--1507[label="1;6pkt 6fpkt"];
1276--1507[label="0.666667;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="46.50.31.74" src_ip="144.52.196.192"/>
      <filter dst_ip="46.50.31.75" src_ip="144.52.196.192"/>
      <filter dst_port="21" src_ip="144.52.196.192"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_10{
style=filled;
color=gray75;
130[label="141.165.79.107;s;4pkt 4fpkt", shape=diamond, color=yellow];
131[label="16.233.250.91;d;1pkt 1fpkt", shape=diamond, color=yellow];
1438[label="141.165.79.107;s;4pkt 4fpkt", shape=hexagon, color=black];
stat10[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.165.79.107:3202, 16.244.141.4:6699}[25%]&lt;BR/&gt;{141.165.79.107:3209, 16.233.250.91:6699}[25%]&lt;BR/&gt;{141.165.79.107:3210, 92.242.17.74:80}[25%]&lt;BR/&gt;{141.165.79.107:3211, 92.242.17.74:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (27.7778%)&lt;BR/&gt; 80: (22.2222%)&lt;BR/&gt; 3209: (16.6667%)&lt;BR/&gt; 3211: (11.1111%)&lt;BR/&gt; 3210: (11.1111%)&gt;];
}
130--131[label="1;1pkt 1fpkt"];
130--1438[label="1;4pkt 4fpkt"];
131--1438[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="92.242.17.74" dst_port="80" src_ip="141.165.79.107" src_port="3211"/>
      <filter dst_ip="92.242.17.74" dst_port="80" src_ip="141.165.79.107" src_port="3210"/>
      <filter dst_ip="16.233.250.91" dst_port="6699" src_ip="141.165.79.107" src_port="3209"/>
      <filter dst_ip="16.244.141.4" dst_port="6699" src_ip="141.165.79.107" src_port="3202"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988736,2.06051,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_11{
style=filled;
color=gray75;
133[label="141.165.228.133;d;3pkt 3fpkt", shape=diamond, color=yellow];
134[label="196.224.142.233;s;1pkt 1fpkt", shape=diamond, color=yellow];
1035[label="141.165.228.133;d;3pkt 3fpkt", shape=hexagon, color=black];
1036[label="196.224.142.233;s;1pkt 1fpkt", shape=hexagon, color=black];
1553[label="196.224.142.233;s;1pkt 1fpkt", shape=polygon, color=gold];
stat11[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.28.232.95:80, 141.165.228.133:2196}[33.3333%]&lt;BR/&gt;{219.194.134.156:80, 141.165.228.133:2198}[33.3333%]&lt;BR/&gt;{196.224.142.233:2738, 141.165.228.133:2194}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2738: (27.7778%)&lt;BR/&gt; 2194: (27.7778%)&lt;BR/&gt; 80: (22.2222%)&lt;BR/&gt; 2198: (11.1111%)&lt;BR/&gt; 2196: (11.1111%)&gt;];
}
133--134[label="1;1pkt 1fpkt"];
133--1035[label="1;3pkt 3fpkt"];
133--1036[label="1;1pkt 1fpkt"];
133--1553[label="1;1pkt 1fpkt"];
134--1035[label="1;1pkt 1fpkt"];
134--1036[label="1;1pkt 1fpkt"];
134--1553[label="1;1pkt 1fpkt"];
1035--1036[label="1;1pkt 1fpkt"];
1035--1553[label="1;1pkt 1fpkt"];
1036--1553[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.228.133" dst_port="2194" src_ip="196.224.142.233" src_port="2738"/>
      <filter dst_ip="141.165.228.133" dst_port="2198" src_ip="219.194.134.156" src_port="80"/>
      <filter dst_ip="141.165.228.133" dst_port="2196" src_ip="212.28.232.95" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_12{
style=filled;
color=gray75;
136[label="141.165.56.148;s;2pkt 2fpkt", shape=diamond, color=yellow];
137[label="213.214.162.161;d;2pkt 2fpkt", shape=diamond, color=yellow];
996[label="141.165.56.148;s;2pkt 2fpkt", shape=hexagon, color=black];
stat12[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.165.56.148:5500, 213.214.162.161:4050}[50%]&lt;BR/&gt;{141.165.56.148:5501, 213.214.162.161:4058}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5501: (25%)&lt;BR/&gt; 5500: (25%)&lt;BR/&gt; 4058: (25%)&lt;BR/&gt; 4050: (25%)&gt;];
}
136--137[label="1;2pkt 2fpkt"];
136--996[label="1;2pkt 2fpkt"];
137--996[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.214.162.161" dst_port="4058" src_ip="141.165.56.148" src_port="5501"/>
      <filter dst_ip="213.214.162.161" dst_port="4050" src_ip="141.165.56.148" src_port="5500"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_13{
style=filled;
color=gray75;
135[label="141.165.56.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
138[label="213.214.162.161;s;1pkt 1fpkt", shape=diamond, color=yellow];
1284[label="213.214.162.161;s;1pkt 1fpkt", shape=hexagon, color=black];
stat13[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.214.162.161:4058, 141.165.56.148:5501}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5501: (50%)&lt;BR/&gt; 4058: (50%)&gt;];
}
135--138[label="1;1pkt 1fpkt"];
135--1284[label="1;1pkt 1fpkt"];
138--1284[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.56.148" dst_port="5501" src_ip="213.214.162.161" src_port="4058"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_14{
style=filled;
color=gray75;
149[label="141.165.230.187;s;2pkt 2fpkt", shape=diamond, color=yellow];
150[label="16.80.213.54;d;1pkt 1fpkt", shape=diamond, color=yellow];
998[label="16.80.213.54;d;1pkt 1fpkt", shape=hexagon, color=black];
1129[label="141.165.230.187;s;2pkt 2fpkt", shape=hexagon, color=black];
stat14[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.165.230.187:1847, 16.80.213.54:6699}[50%]&lt;BR/&gt;{141.165.230.187:1532, 16.139.181.117:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1847: (33.3333%)&lt;BR/&gt; 1532: (16.6667%)&gt;];
}
149--150[label="1;1pkt 1fpkt"];
149--998[label="1;1pkt 1fpkt"];
149--1129[label="1;2pkt 2fpkt"];
150--998[label="1;1pkt 1fpkt"];
150--1129[label="1;1pkt 1fpkt"];
998--1129[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="16.139.181.117" dst_port="6699" src_ip="141.165.230.187" src_port="1532"/>
      <filter dst_ip="16.80.213.54" dst_port="6699" src_ip="141.165.230.187" src_port="1847"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988736,2.06051,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_15{
style=filled;
color=gray75;
148[label="141.165.230.187;d;2pkt 2fpkt", shape=diamond, color=yellow];
151[label="16.80.213.54;s;1pkt 1fpkt", shape=diamond, color=yellow];
1041[label="141.165.230.187;d;2pkt 2fpkt", shape=hexagon, color=black];
1042[label="16.80.213.54;s;1pkt 1fpkt", shape=hexagon, color=black];
1548[label="16.80.213.54;s;1pkt 1fpkt", shape=polygon, color=gold];
stat15[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.80.213.54:6699, 141.165.230.187:1847}[50%]&lt;BR/&gt;{16.139.181.117:6699, 141.165.230.187:1532}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1847: (35.7143%)&lt;BR/&gt; 1532: (14.2857%)&gt;];
}
148--151[label="1;1pkt 1fpkt"];
148--1041[label="1;2pkt 2fpkt"];
148--1042[label="1;1pkt 1fpkt"];
148--1548[label="1;1pkt 1fpkt"];
151--1041[label="1;1pkt 1fpkt"];
151--1042[label="1;1pkt 1fpkt"];
151--1548[label="1;1pkt 1fpkt"];
1041--1042[label="1;1pkt 1fpkt"];
1041--1548[label="1;1pkt 1fpkt"];
1042--1548[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.230.187" dst_port="1532" src_ip="16.139.181.117" src_port="6699"/>
      <filter dst_ip="141.165.230.187" dst_port="1847" src_ip="16.80.213.54" src_port="6699"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988736,2.06051,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_16{
style=filled;
color=gray75;
196[label="218.49.167.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
197[label="148.182.151.103;s;3pkt 3fpkt", shape=diamond, color=yellow];
1092[label="148.182.151.103;s;3pkt 3fpkt", shape=hexagon, color=black];
1145[label="218.49.167.230;d;1pkt 1fpkt", shape=hexagon, color=black];
1576[label="218.49.167.230;d;1pkt 1fpkt", shape=polygon, color=gold];
stat16[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.182.151.103:56205, 218.49.167.230:64994}[33.3333%]&lt;BR/&gt;{148.182.151.103:21, 208.103.96.251:60297}[33.3333%]&lt;BR/&gt;{148.182.151.103:56206, 208.103.96.251:113}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64994: (27.7778%)&lt;BR/&gt; 56205: (27.7778%)&lt;BR/&gt; 60297: (11.1111%)&lt;BR/&gt; 56206: (11.1111%)&lt;BR/&gt; 113: (11.1111%)&gt;];
}
196--197[label="1;1pkt 1fpkt"];
196--1092[label="1;1pkt 1fpkt"];
196--1145[label="1;1pkt 1fpkt"];
196--1576[label="1;1pkt 1fpkt"];
197--1092[label="1;3pkt 3fpkt"];
197--1145[label="1;1pkt 1fpkt"];
197--1576[label="1;1pkt 1fpkt"];
1092--1145[label="1;1pkt 1fpkt"];
1092--1576[label="1;1pkt 1fpkt"];
1145--1576[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.103.96.251" dst_port="113" src_ip="148.182.151.103" src_port="56206"/>
      <filter dst_ip="208.103.96.251" dst_port="60297" src_ip="148.182.151.103" src_port="21"/>
      <filter dst_ip="218.49.167.230" dst_port="64994" src_ip="148.182.151.103" src_port="56205"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_17{
style=filled;
color=gray75;
198[label="163.132.156.254;s;1pkt 1fpkt", shape=diamond, color=yellow];
199[label="141.165.107.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
1050[label="163.132.156.254;s;1pkt 1fpkt", shape=hexagon, color=black];
1357[label="141.165.107.60;d;1pkt 1fpkt", shape=hexagon, color=black];
stat17[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.132.156.254:8002, 141.165.107.60:1870}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8002: (50%)&lt;BR/&gt; 1870: (50%)&gt;];
}
198--199[label="1;1pkt 1fpkt"];
198--1050[label="1;1pkt 1fpkt"];
198--1357[label="1;1pkt 1fpkt"];
199--1050[label="1;1pkt 1fpkt"];
199--1357[label="1;1pkt 1fpkt"];
1050--1357[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.107.60" dst_port="1870" src_ip="163.132.156.254" src_port="8002"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,901,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_18{
style=filled;
color=gray75;
205[label="144.52.170.247;s;3pkt 3fpkt", shape=diamond, color=yellow];
206[label="212.6.159.95;d;3pkt 3fpkt", shape=diamond, color=yellow];
1359[label="212.6.159.95;d;3pkt 3fpkt", shape=hexagon, color=black];
2248[label="144.52.170.247;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat18[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.52.170.247:4208, 212.6.159.95:21}[33.3333%]&lt;BR/&gt;{144.52.170.247:4210, 212.6.159.95:20}[33.3333%]&lt;BR/&gt;{144.52.170.247:4291, 212.6.159.95:20}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (31.8182%)&lt;BR/&gt; 4291: (18.1818%)&lt;BR/&gt; 4208: (18.1818%)&lt;BR/&gt; 21: (18.1818%)&lt;BR/&gt; 4210: (13.6364%)&gt;];
}
205--206[label="1;3pkt 3fpkt"];
205--1359[label="1;3pkt 3fpkt"];
205--2248[label="1;2pkt 2fpkt"];
206--1359[label="1;3pkt 3fpkt"];
206--2248[label="1;2pkt 2fpkt"];
1359--2248[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.6.159.95" dst_port="20" src_ip="144.52.170.247" src_port="4291"/>
      <filter dst_ip="212.6.159.95" dst_port="20" src_ip="144.52.170.247" src_port="4210"/>
      <filter dst_ip="212.6.159.95" dst_port="21" src_ip="144.52.170.247" src_port="4208"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22207,1.96147,901,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_19{
style=filled;
color=gray75;
72[label="148.173.54.214;s;733pkt 733fpkt", shape=diamond, color=yellow];
159[label="213.38.52.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
252[label="204.176.130.218;d;1pkt 1fpkt", shape=diamond, color=yellow];
253[label="16.87.27.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
260[label="93.85.88.249;d;1pkt 1fpkt", shape=diamond, color=yellow];
265[label="16.176.247.228;d;1pkt 1fpkt", shape=diamond, color=yellow];
270[label="192.11.115.178;d;1pkt 1fpkt", shape=diamond, color=yellow];
276[label="16.0.125.126;d;1pkt 1fpkt", shape=diamond, color=yellow];
281[label="16.178.67.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
283[label="16.44.50.44;d;17pkt 17fpkt", shape=diamond, color=yellow];
284[label="208.166.208.188;d;1pkt 1fpkt", shape=diamond, color=yellow];
291[label="93.102.84.212;d;1pkt 1fpkt", shape=diamond, color=yellow];
300[label="16.243.220.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
310[label="16.12.5.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
318[label="16.221.12.95;d;1pkt 1fpkt", shape=diamond, color=yellow];
321[label="93.117.154.213;d;1pkt 1fpkt", shape=diamond, color=yellow];
407[label="208.42.145.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
419[label="1.8.29.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
433[label="208.86.101.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
461[label="16.224.131.228;d;37pkt 37fpkt", shape=diamond, color=yellow];
504[label="9.81.72.119;d;73pkt 73fpkt", shape=diamond, color=yellow];
535[label="197.212.202.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
631[label="94.57.179.116;d;18pkt 18fpkt", shape=diamond, color=yellow];
981[label="148.173.54.214;s;733pkt 733fpkt", shape=hexagon, color=black];
1025[label="16.87.27.194;d;1pkt 1fpkt", shape=hexagon, color=black];
1026[label="93.85.88.249;d;1pkt 1fpkt", shape=hexagon, color=black];
1070[label="192.11.115.178;d;1pkt 1fpkt", shape=hexagon, color=black];
1077[label="16.178.67.165;d;1pkt 1fpkt", shape=hexagon, color=black];
1083[label="16.243.220.27;d;1pkt 1fpkt", shape=hexagon, color=black];
1143[label="16.221.12.95;d;1pkt 1fpkt", shape=hexagon, color=black];
1197[label="204.176.130.218;d;1pkt 1fpkt", shape=hexagon, color=black];
1213[label="1.8.29.79;d;1pkt 1fpkt", shape=hexagon, color=black];
1215[label="213.38.52.80;d;1pkt 1fpkt", shape=hexagon, color=black];
1305[label="16.224.131.228;d;35pkt 35fpkt", shape=hexagon, color=black];
1324[label="9.81.72.119;d;37pkt 37fpkt", shape=hexagon, color=black];
1358[label="208.86.101.74;d;1pkt 1fpkt", shape=hexagon, color=black];
1439[label="208.166.208.188;d;1pkt 1fpkt", shape=hexagon, color=black];
1458[label="94.57.179.116;d;17pkt 17fpkt", shape=hexagon, color=black];
1493[label="16.44.50.44;d;17pkt 17fpkt", shape=hexagon, color=black];
1529[label="148.173.54.214;s;733pkt 733fpkt", shape=polygon, color=gold];
1552[label="192.11.115.178;d;1pkt 1fpkt", shape=polygon, color=gold];
1571[label="9.81.72.119;d;37pkt 37fpkt", shape=polygon, color=gold];
2162[label="148.173.54.214;740pkt 740fpkt", shape=pentagon, color=darkviolet];
2457[label="148.173.54.214;740pkt 740fpkt", shape=invtriangle, color=brown];
2564[label="148.173.54.214;740pkt 740fpkt", shape=invhouse, color=bisque];
stat19[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.173.54.214:*, *:6346}[55.4054%]&lt;BR/&gt;{148.173.54.214:6346, *:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (47.8467%)&lt;BR/&gt; 6347: (0.886637%)&lt;BR/&gt; 6348: (0.823306%)&lt;BR/&gt; 6699: (0.379987%)&lt;BR/&gt; 1460: (0.179438%)&gt;];
}
72--159[label="1;1pkt 1fpkt"];
72--252[label="1;1pkt 1fpkt"];
72--253[label="1;1pkt 1fpkt"];
72--260[label="1;1pkt 1fpkt"];
72--265[label="1;1pkt 1fpkt"];
72--270[label="1;1pkt 1fpkt"];
72--276[label="1;1pkt 1fpkt"];
72--281[label="1;1pkt 1fpkt"];
72--283[label="1;17pkt 17fpkt"];
72--284[label="1;1pkt 1fpkt"];
72--291[label="1;1pkt 1fpkt"];
72--300[label="1;1pkt 1fpkt"];
72--310[label="1;1pkt 1fpkt"];
72--318[label="1;1pkt 1fpkt"];
72--321[label="1;1pkt 1fpkt"];
72--407[label="1;1pkt 1fpkt"];
72--419[label="1;1pkt 1fpkt"];
72--433[label="1;1pkt 1fpkt"];
72--461[label="1;37pkt 37fpkt"];
72--504[label="1;73pkt 73fpkt"];
72--535[label="1;1pkt 1fpkt"];
72--631[label="1;18pkt 18fpkt"];
72--981[label="1;733pkt 733fpkt"];
72--1025[label="1;1pkt 1fpkt"];
72--1026[label="1;1pkt 1fpkt"];
72--1070[label="1;1pkt 1fpkt"];
72--1077[label="1;1pkt 1fpkt"];
72--1083[label="1;1pkt 1fpkt"];
72--1143[label="1;1pkt 1fpkt"];
72--1197[label="1;1pkt 1fpkt"];
72--1213[label="1;1pkt 1fpkt"];
72--1215[label="1;1pkt 1fpkt"];
72--1305[label="1;35pkt 35fpkt"];
72--1324[label="1;37pkt 37fpkt"];
72--1358[label="1;1pkt 1fpkt"];
72--1439[label="1;1pkt 1fpkt"];
72--1458[label="1;17pkt 17fpkt"];
72--1493[label="1;17pkt 17fpkt"];
72--1529[label="1;733pkt 733fpkt"];
72--1552[label="1;1pkt 1fpkt"];
72--1571[label="1;37pkt 37fpkt"];
72--2162[label="1;733pkt 733fpkt"];
72--2457[label="1;733pkt 733fpkt"];
72--2564[label="1;733pkt 733fpkt"];
159--981[label="1;1pkt 1fpkt"];
159--1215[label="1;1pkt 1fpkt"];
159--1529[label="1;1pkt 1fpkt"];
159--2162[label="1;1pkt 1fpkt"];
159--2457[label="1;1pkt 1fpkt"];
159--2564[label="1;1pkt 1fpkt"];
252--981[label="1;1pkt 1fpkt"];
252--1197[label="1;1pkt 1fpkt"];
252--1529[label="1;1pkt 1fpkt"];
252--2162[label="1;1pkt 1fpkt"];
252--2457[label="1;1pkt 1fpkt"];
252--2564[label="1;1pkt 1fpkt"];
253--981[label="1;1pkt 1fpkt"];
253--1025[label="1;1pkt 1fpkt"];
253--1529[label="1;1pkt 1fpkt"];
253--2162[label="1;1pkt 1fpkt"];
253--2457[label="1;1pkt 1fpkt"];
253--2564[label="1;1pkt 1fpkt"];
260--981[label="1;1pkt 1fpkt"];
260--1026[label="1;1pkt 1fpkt"];
260--1529[label="1;1pkt 1fpkt"];
260--2162[label="1;1pkt 1fpkt"];
260--2457[label="1;1pkt 1fpkt"];
260--2564[label="1;1pkt 1fpkt"];
265--981[label="1;1pkt 1fpkt"];
265--1529[label="1;1pkt 1fpkt"];
265--2162[label="1;1pkt 1fpkt"];
265--2457[label="1;1pkt 1fpkt"];
265--2564[label="1;1pkt 1fpkt"];
270--981[label="1;1pkt 1fpkt"];
270--1070[label="1;1pkt 1fpkt"];
270--1529[label="1;1pkt 1fpkt"];
270--1552[label="1;1pkt 1fpkt"];
270--2162[label="1;1pkt 1fpkt"];
270--2457[label="1;1pkt 1fpkt"];
270--2564[label="1;1pkt 1fpkt"];
276--981[label="1;1pkt 1fpkt"];
276--1529[label="1;1pkt 1fpkt"];
276--2162[label="1;1pkt 1fpkt"];
276--2457[label="1;1pkt 1fpkt"];
276--2564[label="1;1pkt 1fpkt"];
281--981[label="1;1pkt 1fpkt"];
281--1077[label="1;1pkt 1fpkt"];
281--1529[label="1;1pkt 1fpkt"];
281--2162[label="1;1pkt 1fpkt"];
281--2457[label="1;1pkt 1fpkt"];
281--2564[label="1;1pkt 1fpkt"];
283--981[label="1;17pkt 17fpkt"];
283--1493[label="1;17pkt 17fpkt"];
283--1529[label="1;17pkt 17fpkt"];
283--2162[label="1;17pkt 17fpkt"];
283--2457[label="1;17pkt 17fpkt"];
283--2564[label="1;17pkt 17fpkt"];
284--981[label="1;1pkt 1fpkt"];
284--1439[label="1;1pkt 1fpkt"];
284--1529[label="1;1pkt 1fpkt"];
284--2162[label="1;1pkt 1fpkt"];
284--2457[label="1;1pkt 1fpkt"];
284--2564[label="1;1pkt 1fpkt"];
291--981[label="1;1pkt 1fpkt"];
291--1529[label="1;1pkt 1fpkt"];
291--2162[label="1;1pkt 1fpkt"];
291--2457[label="1;1pkt 1fpkt"];
291--2564[label="1;1pkt 1fpkt"];
300--981[label="1;1pkt 1fpkt"];
300--1083[label="1;1pkt 1fpkt"];
300--1529[label="1;1pkt 1fpkt"];
300--2162[label="1;1pkt 1fpkt"];
300--2457[label="1;1pkt 1fpkt"];
300--2564[label="1;1pkt 1fpkt"];
310--981[label="1;1pkt 1fpkt"];
310--1529[label="1;1pkt 1fpkt"];
310--2162[label="1;1pkt 1fpkt"];
310--2457[label="1;1pkt 1fpkt"];
310--2564[label="1;1pkt 1fpkt"];
318--981[label="1;1pkt 1fpkt"];
318--1143[label="1;1pkt 1fpkt"];
318--1529[label="1;1pkt 1fpkt"];
318--2162[label="1;1pkt 1fpkt"];
318--2457[label="1;1pkt 1fpkt"];
318--2564[label="1;1pkt 1fpkt"];
321--981[label="1;1pkt 1fpkt"];
321--1529[label="1;1pkt 1fpkt"];
321--2162[label="1;1pkt 1fpkt"];
321--2457[label="1;1pkt 1fpkt"];
321--2564[label="1;1pkt 1fpkt"];
407--981[label="1;1pkt 1fpkt"];
407--1529[label="1;1pkt 1fpkt"];
407--2162[label="1;1pkt 1fpkt"];
407--2457[label="1;1pkt 1fpkt"];
407--2564[label="1;1pkt 1fpkt"];
419--981[label="1;1pkt 1fpkt"];
419--1213[label="1;1pkt 1fpkt"];
419--1529[label="1;1pkt 1fpkt"];
419--2162[label="1;1pkt 1fpkt"];
419--2457[label="1;1pkt 1fpkt"];
419--2564[label="1;1pkt 1fpkt"];
433--981[label="1;1pkt 1fpkt"];
433--1358[label="1;1pkt 1fpkt"];
433--1529[label="1;1pkt 1fpkt"];
433--2162[label="1;1pkt 1fpkt"];
433--2457[label="1;1pkt 1fpkt"];
433--2564[label="1;1pkt 1fpkt"];
461--981[label="1;37pkt 37fpkt"];
461--1305[label="1;35pkt 35fpkt"];
461--1529[label="1;37pkt 37fpkt"];
461--2162[label="1;37pkt 37fpkt"];
461--2457[label="1;37pkt 37fpkt"];
461--2564[label="1;37pkt 37fpkt"];
504--981[label="1;73pkt 73fpkt"];
504--1324[label="1;37pkt 37fpkt"];
504--1529[label="1;73pkt 73fpkt"];
504--1571[label="1;37pkt 37fpkt"];
504--2162[label="1;73pkt 73fpkt"];
504--2457[label="1;73pkt 73fpkt"];
504--2564[label="1;73pkt 73fpkt"];
535--981[label="1;1pkt 1fpkt"];
535--1529[label="1;1pkt 1fpkt"];
535--2162[label="1;1pkt 1fpkt"];
535--2457[label="1;1pkt 1fpkt"];
535--2564[label="1;1pkt 1fpkt"];
631--981[label="1;18pkt 18fpkt"];
631--1458[label="1;17pkt 17fpkt"];
631--1529[label="1;18pkt 18fpkt"];
631--2162[label="1;18pkt 18fpkt"];
631--2457[label="1;18pkt 18fpkt"];
631--2564[label="1;18pkt 18fpkt"];
981--1025[label="1;1pkt 1fpkt"];
981--1026[label="1;1pkt 1fpkt"];
981--1070[label="1;1pkt 1fpkt"];
981--1077[label="1;1pkt 1fpkt"];
981--1083[label="1;1pkt 1fpkt"];
981--1143[label="1;1pkt 1fpkt"];
981--1197[label="1;1pkt 1fpkt"];
981--1213[label="1;1pkt 1fpkt"];
981--1215[label="1;1pkt 1fpkt"];
981--1305[label="1;35pkt 35fpkt"];
981--1324[label="1;37pkt 37fpkt"];
981--1358[label="1;1pkt 1fpkt"];
981--1439[label="1;1pkt 1fpkt"];
981--1458[label="1;17pkt 17fpkt"];
981--1493[label="1;17pkt 17fpkt"];
981--1529[label="1;733pkt 733fpkt"];
981--1552[label="1;1pkt 1fpkt"];
981--1571[label="1;37pkt 37fpkt"];
981--2162[label="1;733pkt 733fpkt"];
981--2457[label="1;733pkt 733fpkt"];
981--2564[label="1;733pkt 733fpkt"];
1025--1529[label="1;1pkt 1fpkt"];
1025--2162[label="1;1pkt 1fpkt"];
1025--2457[label="1;1pkt 1fpkt"];
1025--2564[label="1;1pkt 1fpkt"];
1026--1529[label="1;1pkt 1fpkt"];
1026--2162[label="1;1pkt 1fpkt"];
1026--2457[label="1;1pkt 1fpkt"];
1026--2564[label="1;1pkt 1fpkt"];
1070--1529[label="1;1pkt 1fpkt"];
1070--1552[label="1;1pkt 1fpkt"];
1070--2162[label="1;1pkt 1fpkt"];
1070--2457[label="1;1pkt 1fpkt"];
1070--2564[label="1;1pkt 1fpkt"];
1077--1529[label="1;1pkt 1fpkt"];
1077--2162[label="1;1pkt 1fpkt"];
1077--2457[label="1;1pkt 1fpkt"];
1077--2564[label="1;1pkt 1fpkt"];
1083--1529[label="1;1pkt 1fpkt"];
1083--2162[label="1;1pkt 1fpkt"];
1083--2457[label="1;1pkt 1fpkt"];
1083--2564[label="1;1pkt 1fpkt"];
1143--1529[label="1;1pkt 1fpkt"];
1143--2162[label="1;1pkt 1fpkt"];
1143--2457[label="1;1pkt 1fpkt"];
1143--2564[label="1;1pkt 1fpkt"];
1197--1529[label="1;1pkt 1fpkt"];
1197--2162[label="1;1pkt 1fpkt"];
1197--2457[label="1;1pkt 1fpkt"];
1197--2564[label="1;1pkt 1fpkt"];
1213--1529[label="1;1pkt 1fpkt"];
1213--2162[label="1;1pkt 1fpkt"];
1213--2457[label="1;1pkt 1fpkt"];
1213--2564[label="1;1pkt 1fpkt"];
1215--1529[label="1;1pkt 1fpkt"];
1215--2162[label="1;1pkt 1fpkt"];
1215--2457[label="1;1pkt 1fpkt"];
1215--2564[label="1;1pkt 1fpkt"];
1305--1529[label="1;35pkt 35fpkt"];
1305--2162[label="1;35pkt 35fpkt"];
1305--2457[label="1;35pkt 35fpkt"];
1305--2564[label="1;35pkt 35fpkt"];
1324--1529[label="1;37pkt 37fpkt"];
1324--1571[label="1;37pkt 37fpkt"];
1324--2162[label="1;37pkt 37fpkt"];
1324--2457[label="1;37pkt 37fpkt"];
1324--2564[label="1;37pkt 37fpkt"];
1358--1529[label="1;1pkt 1fpkt"];
1358--2162[label="1;1pkt 1fpkt"];
1358--2457[label="1;1pkt 1fpkt"];
1358--2564[label="1;1pkt 1fpkt"];
1439--1529[label="1;1pkt 1fpkt"];
1439--2162[label="1;1pkt 1fpkt"];
1439--2457[label="1;1pkt 1fpkt"];
1439--2564[label="1;1pkt 1fpkt"];
1458--1529[label="1;17pkt 17fpkt"];
1458--2162[label="1;17pkt 17fpkt"];
1458--2457[label="1;17pkt 17fpkt"];
1458--2564[label="1;17pkt 17fpkt"];
1493--1529[label="1;17pkt 17fpkt"];
1493--2162[label="1;17pkt 17fpkt"];
1493--2457[label="1;17pkt 17fpkt"];
1493--2564[label="1;17pkt 17fpkt"];
1529--1552[label="1;1pkt 1fpkt"];
1529--1571[label="1;37pkt 37fpkt"];
1529--2162[label="1;733pkt 733fpkt"];
1529--2457[label="1;733pkt 733fpkt"];
1529--2564[label="1;733pkt 733fpkt"];
1552--2162[label="1;1pkt 1fpkt"];
1552--2457[label="1;1pkt 1fpkt"];
1552--2564[label="1;1pkt 1fpkt"];
1571--2162[label="1;37pkt 37fpkt"];
1571--2457[label="1;37pkt 37fpkt"];
1571--2564[label="1;37pkt 37fpkt"];
2162--2457[label="1;740pkt 740fpkt"];
2162--2564[label="1;740pkt 740fpkt"];
2457--2564[label="1;740pkt 740fpkt"];
</description>
    <slice>
      <filter src_ip="148.173.54.214" src_port="6346"/>
      <filter dst_port="6346" src_ip="148.173.54.214"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,901,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_20{
style=filled;
color=gray75;
103[label="205.105.225.189;d;1696pkt 1696fpkt", shape=diamond, color=yellow];
275[label="144.52.214.189;s;1696pkt 1696fpkt", shape=diamond, color=yellow];
1347[label="144.52.214.189;s;1339pkt 1339fpkt", shape=hexagon, color=black];
2101[label="144.52.214.189;1871pkt 1871fpkt", shape=pentagon, color=darkviolet];
2433[label="144.52.214.189;1871pkt 1871fpkt", shape=invtriangle, color=brown];
stat20[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.52.214.189:21, 205.105.225.189:*}[34.2598%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (17.4318%)&lt;BR/&gt; 3394: (0.059011%)&lt;BR/&gt; 3391: (0.059011%)&lt;BR/&gt; 3390: (0.059011%)&lt;BR/&gt; 3383: (0.059011%)&gt;];
}
103--275[label="1;1696pkt 1696fpkt"];
103--1347[label="1;1339pkt 1339fpkt"];
103--2101[label="1;1696pkt 1696fpkt"];
103--2433[label="1;1696pkt 1696fpkt"];
275--1347[label="1;1339pkt 1339fpkt"];
275--2101[label="1;1696pkt 1696fpkt"];
275--2433[label="1;1696pkt 1696fpkt"];
1347--2101[label="1;1339pkt 1339fpkt"];
1347--2433[label="1;1339pkt 1339fpkt"];
2101--2433[label="1;1871pkt 1871fpkt"];
</description>
    <slice>
      <filter dst_ip="205.105.225.189" src_ip="144.52.214.189" src_port="21"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_21{
style=filled;
color=gray75;
298[label="144.52.232.9;d;13pkt 13fpkt", shape=diamond, color=yellow];
299[label="44.193.178.77;s;2pkt 2fpkt", shape=diamond, color=yellow];
1082[label="44.193.178.77;s;2pkt 2fpkt", shape=hexagon, color=black];
1835[label="44.193.178.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat21[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:20675, 144.52.232.9:20675}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20675: (77.7778%)&lt;BR/&gt; 12079: (16.6667%)&lt;BR/&gt; 6884: (2.77778%)&lt;BR/&gt; 6667: (2.77778%)&gt;];
}
298--299[label="1;2pkt 2fpkt"];
298--1082[label="1;2pkt 2fpkt"];
298--1835[label="1;1pkt 1fpkt"];
299--1082[label="1;2pkt 2fpkt"];
299--1835[label="1;1pkt 1fpkt"];
1082--1835[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.52.232.9" dst_port="20675" src_port="20675"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988736,2.06051,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_22{
style=filled;
color=gray75;
182[label="145.39.47.147;s;123pkt 123fpkt", shape=diamond, color=yellow];
315[label="212.24.241.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
317[label="208.72.73.66;d;1pkt 1fpkt", shape=diamond, color=yellow];
1004[label="145.39.47.147;s;22pkt 22fpkt", shape=hexagon, color=black];
1049[label="208.72.73.66;d;1pkt 1fpkt", shape=hexagon, color=black];
1543[label="208.72.73.66;d;1pkt 1fpkt", shape=polygon, color=gold];
stat22[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.39.47.147:6257, *:6257}[76.4228%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (74.4966%)&lt;BR/&gt; 6699: (12.7517%)&lt;BR/&gt; 2707: (1.67785%)&lt;BR/&gt; 1360: (1.00671%)&lt;BR/&gt; 3714: (0.671141%)&gt;];
}
182--315[label="1;1pkt 1fpkt"];
182--317[label="1;1pkt 1fpkt"];
182--1004[label="1;22pkt 22fpkt"];
182--1049[label="1;1pkt 1fpkt"];
182--1543[label="1;1pkt 1fpkt"];
315--1004[label="1;1pkt 1fpkt"];
317--1004[label="1;1pkt 1fpkt"];
317--1049[label="1;1pkt 1fpkt"];
317--1543[label="1;1pkt 1fpkt"];
1004--1049[label="1;1pkt 1fpkt"];
1004--1543[label="1;1pkt 1fpkt"];
1049--1543[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="145.39.47.147" src_port="6257"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="148.17.166.135"/>
      <from sec="1000011601" usec="0"/>
      <to sec="1000012519" usec="0"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_24{
style=filled;
color=gray75;
324[label="163.132.156.254;d;1pkt 1fpkt", shape=diamond, color=yellow];
325[label="141.165.107.60;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat24[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.165.107.60:1870, 163.132.156.254:8002}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8002: (50%)&lt;BR/&gt; 1870: (50%)&gt;];
}
324--325[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.132.156.254" dst_port="8002" src_ip="141.165.107.60" src_port="1870"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,901,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_25{
style=filled;
color=gray75;
207[label="212.6.159.95;s;3pkt 3fpkt", shape=diamond, color=yellow];
331[label="144.52.170.247;d;4pkt 4fpkt", shape=diamond, color=yellow];
1009[label="212.6.159.95;s;3pkt 3fpkt", shape=hexagon, color=black];
1888[label="212.6.159.95;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2358[label="212.6.159.95;2pkt 2fpkt", shape=invtriangle, color=brown];
2530[label="212.6.159.95;3pkt 3fpkt", shape=invhouse, color=bisque];
stat25[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.88.152.50:4000, 144.52.170.247:3929}[25%]&lt;BR/&gt;{212.6.159.95:21, 144.52.170.247:4208}[25%]&lt;BR/&gt;{212.6.159.95:20, 144.52.170.247:4210}[25%]&lt;BR/&gt;{212.6.159.95:20, 144.52.170.247:4291}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (29.4118%)&lt;BR/&gt; 4291: (17.6471%)&lt;BR/&gt; 4208: (17.6471%)&lt;BR/&gt; 21: (17.6471%)&lt;BR/&gt; 4210: (11.7647%)&gt;];
}
207--331[label="1;3pkt 3fpkt"];
207--1009[label="1;3pkt 3fpkt"];
207--1888[label="1;2pkt 2fpkt"];
207--2358[label="1;2pkt 2fpkt"];
207--2530[label="1;3pkt 3fpkt"];
331--1009[label="1;3pkt 3fpkt"];
331--1888[label="1;2pkt 2fpkt"];
331--2358[label="1;2pkt 2fpkt"];
331--2530[label="1;3pkt 3fpkt"];
1009--1888[label="1;2pkt 2fpkt"];
1009--2358[label="1;2pkt 2fpkt"];
1009--2530[label="1;3pkt 3fpkt"];
1888--2358[label="1;2pkt 2fpkt"];
1888--2530[label="1;2pkt 2fpkt"];
2358--2530[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.52.170.247" dst_port="4291" src_ip="212.6.159.95" src_port="20"/>
      <filter dst_ip="144.52.170.247" dst_port="4210" src_ip="212.6.159.95" src_port="20"/>
      <filter dst_ip="144.52.170.247" dst_port="4208" src_ip="212.6.159.95" src_port="21"/>
      <filter dst_ip="144.52.170.247" dst_port="3929" src_ip="193.88.152.50" src_port="4000"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.177.226.113"/>
      <from sec="1000011601" usec="0"/>
      <to sec="1000012519" usec="0"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929312,2.00887,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_27{
style=filled;
color=gray75;
345[label="213.170.89.185;d;2pkt 2fpkt", shape=diamond, color=yellow];
346[label="148.182.61.11;s;4pkt 4fpkt", shape=diamond, color=yellow];
1304[label="148.182.61.11;s;4pkt 4fpkt", shape=hexagon, color=black];
1590[label="148.182.61.11;s;4pkt 4fpkt", shape=polygon, color=gold];
1645[label="148.182.61.11;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat27[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.182.61.11:1214, 213.181.128.100:4177}[25%]&lt;BR/&gt;{148.182.61.11:1188, 208.12.208.217:1214}[25%]&lt;BR/&gt;{148.182.61.11:1214, 213.170.89.185:4182}[25%]&lt;BR/&gt;{148.182.61.11:1214, 213.170.89.185:4299}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 4299: (13.8889%)&lt;BR/&gt; 4182: (13.8889%)&lt;BR/&gt; 4177: (11.1111%)&lt;BR/&gt; 1188: (11.1111%)&gt;];
}
345--346[label="1;2pkt 2fpkt"];
345--1304[label="1;2pkt 2fpkt"];
345--1590[label="1;2pkt 2fpkt"];
345--1645[label="1;2pkt 2fpkt"];
346--1304[label="1;4pkt 4fpkt"];
346--1590[label="1;4pkt 4fpkt"];
346--1645[label="1;4pkt 4fpkt"];
1304--1590[label="1;4pkt 4fpkt"];
1304--1645[label="1;4pkt 4fpkt"];
1590--1645[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="213.170.89.185" dst_port="4299" src_ip="148.182.61.11" src_port="1214"/>
      <filter dst_ip="213.170.89.185" dst_port="4182" src_ip="148.182.61.11" src_port="1214"/>
      <filter dst_ip="208.12.208.217" dst_port="1214" src_ip="148.182.61.11" src_port="1188"/>
      <filter dst_ip="213.181.128.100" dst_port="4177" src_ip="148.182.61.11" src_port="1214"/>
    </slice>
    <from sec="1000011602" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_28{
style=filled;
color=gray75;
415[label="141.165.152.125;s;51pkt 51fpkt", shape=diamond, color=yellow];
416[label="165.66.121.47;d;1pkt 1fpkt", shape=diamond, color=yellow];
1350[label="141.165.152.125;s;40pkt 40fpkt", shape=hexagon, color=black];
stat28[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.165.152.125:*, 92.33.149.75:80}[49.0196%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.5652%)&lt;BR/&gt; 89: (3.80435%)&lt;BR/&gt; 1681: (2.17391%)&lt;BR/&gt; 1677: (2.17391%)&lt;BR/&gt; 20934: (1.63043%)&gt;];
}
415--416[label="1;1pkt 1fpkt"];
415--1350[label="1;40pkt 40fpkt"];
416--1350[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="92.33.149.75" dst_port="80" src_ip="141.165.152.125"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_29{
style=filled;
color=gray75;
426[label="196.33.93.80;d;2pkt 2fpkt", shape=diamond, color=yellow];
427[label="214.147.4.103;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat29[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.147.4.103:9020, 196.33.93.80:1593}[50%]&lt;BR/&gt;{92.193.25.188:1863, 196.33.93.80:1489}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9020: (33.3333%)&lt;BR/&gt; 1593: (33.3333%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 1489: (16.6667%)&gt;];
}
426--427[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.33.93.80" dst_port="1489" src_ip="92.193.25.188" src_port="1863"/>
      <filter dst_ip="196.33.93.80" dst_port="1593" src_ip="214.147.4.103" src_port="9020"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="204.5.210.99"/>
      <from sec="1000011601" usec="0"/>
      <to sec="1000012516" usec="0"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_31{
style=filled;
color=gray75;
436[label="141.165.229.140;s;3pkt 3fpkt", shape=diamond, color=yellow];
453[label="219.173.144.7;d;1pkt 1fpkt", shape=diamond, color=yellow];
1093[label="141.165.229.140;s;3pkt 3fpkt", shape=hexagon, color=black];
1984[label="141.165.229.140;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2398[label="141.165.229.140;1pkt 1fpkt", shape=invtriangle, color=brown];
stat31[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.165.229.140:3105, 219.173.144.7:7501}[33.3333%]&lt;BR/&gt;{141.165.229.140:3077, 219.173.144.50:7012}[33.3333%]&lt;BR/&gt;{141.165.229.140:3106, 197.82.212.133:21999}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7501: (27.7778%)&lt;BR/&gt; 3105: (27.7778%)&lt;BR/&gt; 21999: (11.1111%)&lt;BR/&gt; 7012: (11.1111%)&lt;BR/&gt; 3106: (11.1111%)&gt;];
}
436--453[label="1;1pkt 1fpkt"];
436--1093[label="1;3pkt 3fpkt"];
436--1984[label="1;1pkt 1fpkt"];
436--2398[label="1;1pkt 1fpkt"];
453--1093[label="1;1pkt 1fpkt"];
453--1984[label="1;1pkt 1fpkt"];
453--2398[label="1;1pkt 1fpkt"];
1093--1984[label="1;1pkt 1fpkt"];
1093--2398[label="1;1pkt 1fpkt"];
1984--2398[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.82.212.133" dst_port="21999" src_ip="141.165.229.140" src_port="3106"/>
      <filter dst_ip="219.173.144.50" dst_port="7012" src_ip="141.165.229.140" src_port="3077"/>
      <filter dst_ip="219.173.144.7" dst_port="7501" src_ip="141.165.229.140" src_port="3105"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988736,2.06051,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_32{
style=filled;
color=gray75;
435[label="141.165.229.140;d;3pkt 3fpkt", shape=diamond, color=yellow];
454[label="219.173.144.7;s;1pkt 1fpkt", shape=diamond, color=yellow];
1149[label="141.165.229.140;d;3pkt 3fpkt", shape=hexagon, color=black];
1561[label="141.165.229.140;d;3pkt 3fpkt", shape=polygon, color=gold];
stat32[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.88.8.0:5190, 141.165.229.140:3009}[33.3333%]&lt;BR/&gt;{219.173.144.7:7501, 141.165.229.140:3105}[33.3333%]&lt;BR/&gt;{219.173.144.50:7012, 141.165.229.140:3077}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7501: (20%)&lt;BR/&gt; 3105: (20%)&lt;BR/&gt; 7012: (15%)&lt;BR/&gt; 5190: (15%)&lt;BR/&gt; 3077: (15%)&gt;];
}
435--454[label="1;1pkt 1fpkt"];
435--1149[label="1;3pkt 3fpkt"];
435--1561[label="1;3pkt 3fpkt"];
454--1149[label="1;1pkt 1fpkt"];
454--1561[label="1;1pkt 1fpkt"];
1149--1561[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.229.140" dst_port="3077" src_ip="219.173.144.50" src_port="7012"/>
      <filter dst_ip="141.165.229.140" dst_port="3105" src_ip="219.173.144.7" src_port="7501"/>
      <filter dst_ip="141.165.229.140" dst_port="3009" src_ip="193.88.8.0" src_port="5190"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637079,2.06364,501,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_33{
style=filled;
color=gray75;
464[label="218.14.142.59;d;260pkt 260fpkt", shape=diamond, color=yellow];
465[label="148.182.84.28;s;289pkt 289fpkt", shape=diamond, color=yellow];
1679[label="148.182.84.28;292pkt 292fpkt", shape=pentagon, color=darkviolet];
2289[label="148.182.84.28;292pkt 292fpkt", shape=invtriangle, color=brown];
stat33[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.182.84.28:21, 218.14.142.59:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 4311: (0.176523%)&lt;BR/&gt; 4310: (0.176523%)&lt;BR/&gt; 4308: (0.176523%)&lt;BR/&gt; 4307: (0.176523%)&gt;];
}
464--465[label="1;260pkt 260fpkt"];
464--1679[label="1;260pkt 260fpkt"];
464--2289[label="1;260pkt 260fpkt"];
465--1679[label="1;289pkt 289fpkt"];
465--2289[label="1;289pkt 289fpkt"];
1679--2289[label="1;292pkt 292fpkt"];
</description>
    <slice>
      <filter dst_ip="218.14.142.59" src_ip="148.182.84.28" src_port="21"/>
    </slice>
    <from sec="1000011604" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988736,2.06051,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_34{
style=filled;
color=gray75;
502[label="218.201.212.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
503[label="145.39.34.152;s;1pkt 1fpkt", shape=diamond, color=yellow];
1259[label="218.201.212.33;d;1pkt 1fpkt", shape=hexagon, color=black];
1260[label="145.39.34.152;s;1pkt 1fpkt", shape=hexagon, color=black];
1565[label="145.39.34.152;s;1pkt 1fpkt", shape=polygon, color=gold];
stat34[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.39.34.152:6699, 218.201.212.33:1432}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1432: (50%)&gt;];
}
502--503[label="1;1pkt 1fpkt"];
502--1259[label="1;1pkt 1fpkt"];
502--1260[label="1;1pkt 1fpkt"];
502--1565[label="1;1pkt 1fpkt"];
503--1259[label="1;1pkt 1fpkt"];
503--1260[label="1;1pkt 1fpkt"];
503--1565[label="1;1pkt 1fpkt"];
1259--1260[label="1;1pkt 1fpkt"];
1259--1565[label="1;1pkt 1fpkt"];
1260--1565[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.201.212.33" dst_port="1432" src_ip="145.39.34.152" src_port="6699"/>
    </slice>
    <from sec="1000011776" usec="0"/>
    <to sec="1000012077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="164.202.243.89"/>
      <from sec="1000011601" usec="0"/>
      <to sec="1000012519" usec="0"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
531[label="196.33.93.80;s;2pkt 2fpkt", shape=diamond, color=yellow];
532[label="214.147.4.103;d;2pkt 2fpkt", shape=diamond, color=yellow];
1356[label="214.147.4.103;d;2pkt 2fpkt", shape=hexagon, color=black];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.33.93.80:1500, 214.147.4.103:80}[50%]&lt;BR/&gt;{196.33.93.80:1593, 214.147.4.103:9020}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9020: (25%)&lt;BR/&gt; 1593: (25%)&lt;BR/&gt; 1500: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
531--532[label="1;2pkt 2fpkt"];
531--1356[label="1;2pkt 2fpkt"];
532--1356[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.147.4.103" dst_port="9020" src_ip="196.33.93.80" src_port="1593"/>
      <filter dst_ip="214.147.4.103" dst_port="80" src_ip="196.33.93.80" src_port="1500"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
570[label="214.147.192.100;d;11pkt 11fpkt", shape=diamond, color=yellow];
571[label="144.52.228.160;s;11pkt 11fpkt", shape=diamond, color=yellow];
1178[label="144.52.228.160;s;11pkt 11fpkt", shape=hexagon, color=black];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.52.228.160:20, 214.147.192.100:*}[72.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (36.3636%)&lt;BR/&gt; 21: (9.09091%)&lt;BR/&gt; 60081: (4.54545%)&lt;BR/&gt; 60080: (4.54545%)&lt;BR/&gt; 60079: (4.54545%)&gt;];
}
570--571[label="1;11pkt 11fpkt"];
570--1178[label="1;11pkt 11fpkt"];
571--1178[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="214.147.192.100" src_ip="144.52.228.160" src_port="20"/>
    </slice>
    <from sec="1000011673" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472845,2.09084,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_38{
style=filled;
color=gray75;
579[label="194.132.5.176;s;100pkt 100fpkt", shape=diamond, color=yellow];
584[label="164.202.197.184;d;86pkt 86fpkt", shape=diamond, color=yellow];
2068[label="194.132.5.176;137pkt 137fpkt", shape=pentagon, color=darkviolet];
stat38[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.132.5.176:8901, 164.202.197.184:*}[88.4892%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8901: (49.8452%)&lt;BR/&gt; 1181: (0.464396%)&lt;BR/&gt; 1180: (0.464396%)&lt;BR/&gt; 1179: (0.464396%)&lt;BR/&gt; 1178: (0.464396%)&gt;];
}
579--584[label="0.988372;85pkt 85fpkt"];
579--2068[label="0.99;99pkt 99fpkt"];
584--2068[label="0.988372;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="164.202.197.184" src_ip="194.132.5.176" src_port="8901"/>
    </slice>
    <from sec="1000011758" usec="0"/>
    <to sec="1000012377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
406[label="141.165.229.69;s;3pkt 3fpkt", shape=diamond, color=yellow];
597[label="207.97.79.184;d;2pkt 2fpkt", shape=diamond, color=yellow];
1435[label="141.165.229.69;s;3pkt 3fpkt", shape=hexagon, color=black];
1806[label="141.165.229.69;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.165.229.69:1037, 219.21.144.164:25}[33.3333%]&lt;BR/&gt;{141.165.229.69:1171, 207.97.79.184:7070}[33.3333%]&lt;BR/&gt;{141.165.229.69:6970, 207.97.79.184:6771}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7070: (18.1818%)&lt;BR/&gt; 6970: (18.1818%)&lt;BR/&gt; 6771: (18.1818%)&lt;BR/&gt; 1171: (18.1818%)&lt;BR/&gt; 1037: (13.6364%)&gt;];
}
406--597[label="1;2pkt 2fpkt"];
406--1435[label="1;3pkt 3fpkt"];
406--1806[label="1;3pkt 3fpkt"];
597--1435[label="1;2pkt 2fpkt"];
597--1806[label="1;2pkt 2fpkt"];
1435--1806[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="207.97.79.184" dst_port="6771" src_ip="141.165.229.69" src_port="6970"/>
      <filter dst_ip="207.97.79.184" dst_port="7070" src_ip="141.165.229.69" src_port="1171"/>
      <filter dst_ip="219.21.144.164" dst_port="25" src_ip="141.165.229.69" src_port="1037"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.165.36.253"/>
      <from sec="1000011601" usec="0"/>
      <to sec="1000012517" usec="0"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="204.18.135.213"/>
      <from sec="1000011601" usec="0"/>
      <to sec="1000012519" usec="0"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="164.202.215.234"/>
      <from sec="1000011646" usec="0"/>
      <to sec="1000012109" usec="0"/>
    </slice>
    <from sec="1000011646" usec="0"/>
    <to sec="1000012109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_43{
style=filled;
color=gray75;
642[label="196.83.73.241;d;6pkt 6fpkt", shape=diamond, color=yellow];
643[label="164.202.227.48;s;6pkt 6fpkt", shape=diamond, color=yellow];
1322[label="164.202.227.48;s;6pkt 6fpkt", shape=hexagon, color=black];
1747[label="164.202.227.48;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat43[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.202.227.48:80, 196.83.73.241:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3079: (6.66667%)&lt;BR/&gt; 3052: (6.66667%)&lt;BR/&gt; 2973: (6.66667%)&lt;BR/&gt; 2966: (6.66667%)&gt;];
}
642--643[label="1;6pkt 6fpkt"];
642--1322[label="1;6pkt 6fpkt"];
642--1747[label="0.833333;5pkt 5fpkt"];
643--1322[label="1;6pkt 6fpkt"];
643--1747[label="0.833333;5pkt 5fpkt"];
1322--1747[label="0.833333;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="196.83.73.241" src_ip="164.202.227.48" src_port="80"/>
    </slice>
    <from sec="1000011756" usec="0"/>
    <to sec="1000012524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_45{
style=filled;
color=gray75;
592[label="219.212.186.57;s;291pkt 291fpkt", shape=diamond, color=yellow];
651[label="141.165.229.130;d;328pkt 328fpkt", shape=diamond, color=yellow];
stat45[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.212.186.57:80, 141.165.229.130:*}[88.7195%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2008: (0.161551%)&lt;BR/&gt; 2007: (0.161551%)&lt;BR/&gt; 2006: (0.161551%)&lt;BR/&gt; 2005: (0.161551%)&gt;];
}
592--651[label="1;291pkt 291fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.229.130" src_ip="219.212.186.57" src_port="80"/>
    </slice>
    <from sec="1000011863" usec="0"/>
    <to sec="1000012513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="219.125.78.60"/>
      <from sec="1000011950" usec="0"/>
      <to sec="1000012132" usec="0"/>
    </slice>
    <from sec="1000011950" usec="0"/>
    <to sec="1000012132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
664[label="160.43.26.81;d;19pkt 19fpkt", shape=diamond, color=yellow];
665[label="193.88.193.64;s;19pkt 19fpkt", shape=diamond, color=yellow];
1271[label="193.88.193.64;s;6pkt 6fpkt", shape=hexagon, color=black];
1396[label="160.43.26.81;d;20pkt 20fpkt", shape=hexagon, color=black];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.88.193.64:*, 160.43.26.81:*}[95%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (3.90625%)&lt;BR/&gt; 43582: (3.125%)&lt;BR/&gt; 43534: (3.125%)&lt;BR/&gt; 43361: (3.125%)&lt;BR/&gt; 43343: (3.125%)&gt;];
}
664--665[label="1;19pkt 19fpkt"];
664--1271[label="1;6pkt 6fpkt"];
664--1396[label="1;19pkt 19fpkt"];
665--1271[label="1;6pkt 6fpkt"];
665--1396[label="1;19pkt 19fpkt"];
1271--1396[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="160.43.26.81" src_ip="193.88.193.64"/>
    </slice>
    <from sec="1000011994" usec="0"/>
    <to sec="1000012119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
662[label="148.173.198.80;d;37pkt 37fpkt", shape=diamond, color=yellow];
667[label="92.134.74.49;s;27pkt 27fpkt", shape=diamond, color=yellow];
1270[label="148.173.198.80;d;37pkt 37fpkt", shape=hexagon, color=black];
1751[label="92.134.74.49;26pkt 26fpkt", shape=pentagon, color=darkviolet];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.134.74.49:80, 148.173.198.80:*}[72.973%]&lt;BR/&gt;{*:53, 148.173.198.80:*}[21.6216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.9134%)&lt;BR/&gt; 53: (6.29921%)&lt;BR/&gt; 64619: (1.5748%)&lt;BR/&gt; 64618: (1.5748%)&lt;BR/&gt; 64617: (1.5748%)&gt;];
}
662--667[label="1;27pkt 27fpkt"];
662--1270[label="1;37pkt 37fpkt"];
662--1751[label="1;26pkt 26fpkt"];
667--1270[label="1;27pkt 27fpkt"];
667--1751[label="1;26pkt 26fpkt"];
1270--1751[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="148.173.198.80" src_port="53"/>
      <filter dst_ip="148.173.198.80" src_ip="92.134.74.49" src_port="80"/>
    </slice>
    <from sec="1000011984" usec="0"/>
    <to sec="1000012475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,053,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
173[label="196.42.83.160;s;943pkt 943fpkt", shape=diamond, color=yellow];
181[label="197.101.55.172;d;208pkt 208fpkt", shape=diamond, color=yellow];
334[label="197.101.55.174;d;92pkt 92fpkt", shape=diamond, color=yellow];
424[label="213.41.180.109;d;104pkt 104fpkt", shape=diamond, color=yellow];
431[label="197.101.6.236;d;464pkt 464fpkt", shape=diamond, color=yellow];
1090[label="197.101.6.236;d;464pkt 464fpkt", shape=hexagon, color=black];
1139[label="197.101.55.172;d;208pkt 208fpkt", shape=hexagon, color=black];
1295[label="196.42.83.160;s;799pkt 799fpkt", shape=hexagon, color=black];
2037[label="196.42.83.160;948pkt 948fpkt", shape=pentagon, color=darkviolet];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.42.83.160:*, 197.101.6.236:80}[48.9451%]&lt;BR/&gt;{196.42.83.160:*, 197.101.55.172:80}[21.9409%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9054%)&lt;BR/&gt; 1024: (0.0827423%)&lt;BR/&gt; 4962: (0.0591017%)&lt;BR/&gt; 4961: (0.0591017%)&lt;BR/&gt; 4958: (0.0591017%)&gt;];
}
173--181[label="1;208pkt 208fpkt"];
173--334[label="1;92pkt 92fpkt"];
173--424[label="1;104pkt 104fpkt"];
173--431[label="1;464pkt 464fpkt"];
173--627[label="0.0493827;8pkt 8fpkt"];
173--1090[label="1;464pkt 464fpkt"];
173--1139[label="1;208pkt 208fpkt"];
173--1295[label="1;799pkt 799fpkt"];
173--1375[label="0.0720721;8pkt 8fpkt"];
173--1599[label="0.00106045;1pkt 1fpkt"];
173--2037[label="1;943pkt 943fpkt"];
181--1139[label="1;208pkt 208fpkt"];
181--1295[label="0.975962;203pkt 203fpkt"];
181--2037[label="1;208pkt 208fpkt"];
334--1295[label="1;92pkt 92fpkt"];
334--2037[label="1;92pkt 92fpkt"];
424--1295[label="0.990385;103pkt 103fpkt"];
424--2037[label="1;104pkt 104fpkt"];
431--1090[label="1;464pkt 464fpkt"];
431--1295[label="0.801724;372pkt 372fpkt"];
431--2037[label="1;464pkt 464fpkt"];
1090--1295[label="0.801724;372pkt 372fpkt"];
1090--2037[label="1;464pkt 464fpkt"];
1139--1295[label="0.975962;203pkt 203fpkt"];
1139--2037[label="1;208pkt 208fpkt"];
1295--1375[label="0.0720721;8pkt 8fpkt"];
1295--1599[label="0.00125156;1pkt 1fpkt"];
1295--2037[label="1;799pkt 799fpkt"];
</description>
    <slice>
      <filter dst_ip="197.101.6.236" dst_port="80" src_ip="196.42.83.160"/>
      <filter dst_ip="197.101.55.172" dst_port="80" src_ip="196.42.83.160"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
653[label="164.202.233.55;d;4pkt 4fpkt", shape=diamond, color=yellow];
670[label="219.21.195.250;s;2pkt 2fpkt", shape=diamond, color=yellow];
1326[label="164.202.233.55;d;4pkt 4fpkt", shape=hexagon, color=black];
2253[label="219.21.195.250;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.21.236.205:1050, 164.202.233.55:25}[25%]&lt;BR/&gt;{219.21.236.205:113, 164.202.233.55:1527}[25%]&lt;BR/&gt;{219.21.195.250:2168, 164.202.233.55:25}[25%]&lt;BR/&gt;{219.21.195.250:113, 164.202.233.55:1530}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (27.2727%)&lt;BR/&gt; 25: (22.7273%)&lt;BR/&gt; 1530: (18.1818%)&lt;BR/&gt; 2168: (13.6364%)&lt;BR/&gt; 1527: (9.09091%)&gt;];
}
653--670[label="1;2pkt 2fpkt"];
653--1326[label="1;4pkt 4fpkt"];
653--2253[label="1;1pkt 1fpkt"];
670--1326[label="1;2pkt 2fpkt"];
670--2253[label="1;1pkt 1fpkt"];
1326--2253[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.202.233.55" dst_port="1530" src_ip="219.21.195.250" src_port="113"/>
      <filter dst_ip="164.202.233.55" dst_port="25" src_ip="219.21.195.250" src_port="2168"/>
      <filter dst_ip="164.202.233.55" dst_port="1527" src_ip="219.21.236.205" src_port="113"/>
      <filter dst_ip="164.202.233.55" dst_port="25" src_ip="219.21.236.205" src_port="1050"/>
    </slice>
    <from sec="1000011896" usec="0"/>
    <to sec="1000012068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="164.202.243.89"/>
      <from sec="1000011601" usec="0"/>
      <to sec="1000012429" usec="0"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
408[label="141.165.158.111;d;7pkt 7fpkt", shape=diamond, color=yellow];
676[label="16.51.34.34;s;4pkt 4fpkt", shape=diamond, color=yellow];
1282[label="16.51.34.34;s;4pkt 4fpkt", shape=hexagon, color=black];
1695[label="16.51.34.34;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2294[label="16.51.34.34;4pkt 4fpkt", shape=invtriangle, color=brown];
2505[label="16.51.34.34;4pkt 4fpkt", shape=invhouse, color=bisque];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.51.34.34:6699, 141.165.158.111:*}[57.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (46.2963%)&lt;BR/&gt; 1329: (11.1111%)&lt;BR/&gt; 1328: (11.1111%)&lt;BR/&gt; 1327: (11.1111%)&lt;BR/&gt; 1326: (11.1111%)&gt;];
}
408--676[label="1;4pkt 4fpkt"];
408--1282[label="1;4pkt 4fpkt"];
408--1695[label="1;4pkt 4fpkt"];
408--2294[label="1;4pkt 4fpkt"];
408--2505[label="1;4pkt 4fpkt"];
676--1282[label="1;4pkt 4fpkt"];
676--1695[label="1;4pkt 4fpkt"];
676--2294[label="1;4pkt 4fpkt"];
676--2505[label="1;4pkt 4fpkt"];
1282--1695[label="1;4pkt 4fpkt"];
1282--2294[label="1;4pkt 4fpkt"];
1282--2505[label="1;4pkt 4fpkt"];
1695--2294[label="1;4pkt 4fpkt"];
1695--2505[label="1;4pkt 4fpkt"];
2294--2505[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.158.111" src_ip="16.51.34.34" src_port="6699"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="197.116.136.0"/>
      <from sec="1000011601" usec="0"/>
      <to sec="1000012519" usec="0"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
682[label="136.190.32.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
683[label="197.116.140.219;s;22pkt 22fpkt", shape=diamond, color=yellow];
1410[label="136.190.32.48;d;1pkt 1fpkt", shape=hexagon, color=black];
1446[label="197.116.140.219;s;22pkt 22fpkt", shape=hexagon, color=black];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.116.140.219:21, 195.145.80.45:*}[27.2727%]&lt;BR/&gt;{197.116.140.219:21, 93.106.197.157:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (41.3043%)&lt;BR/&gt; 0: (8.69565%)&lt;BR/&gt; 64146: (2.17391%)&lt;BR/&gt; 54983: (2.17391%)&lt;BR/&gt; 48898: (2.17391%)&gt;];
}
682--683[label="1;1pkt 1fpkt"];
682--1410[label="1;1pkt 1fpkt"];
682--1446[label="1;1pkt 1fpkt"];
683--1410[label="1;1pkt 1fpkt"];
683--1446[label="1;22pkt 22fpkt"];
1410--1446[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.145.80.45" src_ip="197.116.140.219" src_port="21"/>
      <filter dst_ip="93.106.197.157" src_ip="197.116.140.219" src_port="21"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988736,2.06051,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
690[label="201.39.166.75;s;2pkt 2fpkt", shape=diamond, color=yellow];
691[label="164.202.238.66;d;1pkt 1fpkt", shape=diamond, color=yellow];
1360[label="201.39.166.75;s;2pkt 2fpkt", shape=hexagon, color=black];
1577[label="201.39.166.75;s;2pkt 2fpkt", shape=polygon, color=gold];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.39.166.75:6667, 164.202.224.5:4464}[50%]&lt;BR/&gt;{201.39.166.75:6660, 164.202.238.66:1141}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6660: (28.5714%)&lt;BR/&gt; 1141: (28.5714%)&lt;BR/&gt; 6667: (21.4286%)&lt;BR/&gt; 4464: (21.4286%)&gt;];
}
690--691[label="1;1pkt 1fpkt"];
690--1360[label="1;2pkt 2fpkt"];
690--1577[label="1;2pkt 2fpkt"];
691--1360[label="1;1pkt 1fpkt"];
691--1577[label="1;1pkt 1fpkt"];
1360--1577[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="164.202.238.66" dst_port="1141" src_ip="201.39.166.75" src_port="6660"/>
      <filter dst_ip="164.202.224.5" dst_port="4464" src_ip="201.39.166.75" src_port="6667"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
698[label="192.168.128.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
699[label="160.34.10.166;s;1pkt 1fpkt", shape=diamond, color=yellow];
1361[label="160.34.10.166;s;1pkt 1fpkt", shape=hexagon, color=black];
1453[label="192.168.128.255;d;1pkt 1fpkt", shape=hexagon, color=black];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.34.10.166:4445, 192.168.128.255:4445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4445: (100%)&gt;];
}
698--699[label="1;1pkt 1fpkt"];
698--1361[label="1;1pkt 1fpkt"];
698--1453[label="1;1pkt 1fpkt"];
699--1361[label="1;1pkt 1fpkt"];
699--1453[label="1;1pkt 1fpkt"];
1361--1453[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.128.255" dst_port="4445" src_ip="160.34.10.166" src_port="4445"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="197.116.137.181"/>
      <from sec="1000011604" usec="0"/>
      <to sec="1000012518" usec="0"/>
    </slice>
    <from sec="1000011604" usec="0"/>
    <to sec="1000012518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
673[label="197.116.128.111;s;245pkt 245fpkt", shape=diamond, color=yellow];
732[label="139.133.136.239;d;183pkt 183fpkt", shape=diamond, color=yellow];
1327[label="139.133.136.239;d;164pkt 164fpkt", shape=hexagon, color=black];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.116.128.111:*, 139.133.136.239:80}[74.6939%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9155%)&lt;BR/&gt; 61208: (0.253378%)&lt;BR/&gt; 61207: (0.253378%)&lt;BR/&gt; 61206: (0.253378%)&lt;BR/&gt; 61205: (0.253378%)&gt;];
}
673--732[label="1;183pkt 183fpkt"];
673--1327[label="1;164pkt 164fpkt"];
732--1327[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_ip="139.133.136.239" dst_port="80" src_ip="197.116.128.111"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
742[label="148.173.232.99;s;24pkt 24fpkt", shape=diamond, color=yellow];
744[label="198.4.130.86;d;13pkt 13fpkt", shape=diamond, color=yellow];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.173.232.99:80, 198.4.130.86:*}[54.1667%]&lt;BR/&gt;{148.173.232.99:80, 16.119.224.168:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2973%)&lt;BR/&gt; 53: (4.05405%)&lt;BR/&gt; 22278: (2.7027%)&lt;BR/&gt; 21133: (2.7027%)&lt;BR/&gt; 21125: (2.7027%)&gt;];
}
742--744[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="198.4.130.86" src_ip="148.173.232.99" src_port="80"/>
      <filter dst_ip="16.119.224.168" src_ip="148.173.232.99" src_port="80"/>
    </slice>
    <from sec="1000011988" usec="0"/>
    <to sec="1000012155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
753[label="209.210.10.114;s;2pkt 2fpkt", shape=diamond, color=yellow];
754[label="160.43.31.29;d;2pkt 2fpkt", shape=diamond, color=yellow];
1334[label="209.210.10.114;s;2pkt 2fpkt", shape=hexagon, color=black];
1511[label="160.43.31.29;d;2pkt 2fpkt", shape=hexagon, color=black];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.210.10.114:7070, 160.43.31.29:1101}[50%]&lt;BR/&gt;{209.210.10.114:54185, 160.43.31.29:6970}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54185: (25%)&lt;BR/&gt; 7070: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 1101: (25%)&gt;];
}
753--754[label="1;2pkt 2fpkt"];
753--1334[label="1;2pkt 2fpkt"];
753--1511[label="1;2pkt 2fpkt"];
754--1334[label="1;2pkt 2fpkt"];
754--1511[label="1;2pkt 2fpkt"];
1334--1511[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.43.31.29" dst_port="6970" src_ip="209.210.10.114" src_port="54185"/>
      <filter dst_ip="160.43.31.29" dst_port="1101" src_ip="209.210.10.114" src_port="7070"/>
    </slice>
    <from sec="1000012057" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
417[label="92.66.71.28;s;2pkt 2fpkt", shape=diamond, color=yellow];
763[label="164.202.233.160;d;2pkt 2fpkt", shape=diamond, color=yellow];
776[label="164.202.233.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
1443[label="92.66.71.28;s;2pkt 2fpkt", shape=hexagon, color=black];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.85.32.235:2226, 164.202.233.160:27374}[33.3333%]&lt;BR/&gt;{92.66.71.28:6667, 164.202.233.165:1040}[33.3333%]&lt;BR/&gt;{92.66.71.28:6667, 164.202.233.160:1032}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (42.8571%)&lt;BR/&gt; 1040: (21.4286%)&lt;BR/&gt; 1032: (21.4286%)&lt;BR/&gt; 27374: (7.14286%)&lt;BR/&gt; 2226: (7.14286%)&gt;];
}
417--763[label="0.5;1pkt 1fpkt"];
417--776[label="1;1pkt 1fpkt"];
417--1443[label="1;2pkt 2fpkt"];
763--1443[label="0.5;1pkt 1fpkt"];
776--1443[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.202.233.160" dst_port="1032" src_ip="92.66.71.28" src_port="6667"/>
      <filter dst_ip="164.202.233.165" dst_port="1040" src_ip="92.66.71.28" src_port="6667"/>
      <filter dst_ip="164.202.233.160" dst_port="27374" src_ip="196.85.32.235" src_port="2226"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="204.220.140.233"/>
      <from sec="1000011602" usec="0"/>
      <to sec="1000012518" usec="0"/>
    </slice>
    <from sec="1000011602" usec="0"/>
    <to sec="1000012518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929312,2.00887,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
785[label="160.34.197.156;d;1pkt 1fpkt", shape=diamond, color=yellow];
786[label="168.166.139.247;s;1pkt 1fpkt", shape=diamond, color=yellow];
1379[label="160.34.197.156;d;1pkt 1fpkt", shape=hexagon, color=black];
1380[label="168.166.139.247;s;1pkt 1fpkt", shape=hexagon, color=black];
1594[label="168.166.139.247;s;1pkt 1fpkt", shape=polygon, color=gold];
2247[label="168.166.139.247;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.166.139.247:6699, 160.34.197.156:3950}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3950: (50%)&gt;];
}
785--786[label="1;1pkt 1fpkt"];
785--1379[label="1;1pkt 1fpkt"];
785--1380[label="1;1pkt 1fpkt"];
785--1594[label="1;1pkt 1fpkt"];
785--2247[label="1;1pkt 1fpkt"];
786--1379[label="1;1pkt 1fpkt"];
786--1380[label="1;1pkt 1fpkt"];
786--1594[label="1;1pkt 1fpkt"];
786--2247[label="1;1pkt 1fpkt"];
1379--1380[label="1;1pkt 1fpkt"];
1379--1594[label="1;1pkt 1fpkt"];
1379--2247[label="1;1pkt 1fpkt"];
1380--1594[label="1;1pkt 1fpkt"];
1380--2247[label="1;1pkt 1fpkt"];
1594--2247[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.34.197.156" dst_port="3950" src_ip="168.166.139.247" src_port="6699"/>
    </slice>
    <from sec="1000011681" usec="0"/>
    <to sec="1000012283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988736,2.06051,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
30[label="196.33.93.67;s;46pkt 46fpkt", shape=diamond, color=yellow];
59[label="197.64.46.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
152[label="16.82.206.83;d;5pkt 5fpkt", shape=diamond, color=yellow];
242[label="16.71.121.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
501[label="94.170.128.186;d;3pkt 3fpkt", shape=diamond, color=yellow];
542[label="196.81.61.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
575[label="16.66.194.71;d;6pkt 6fpkt", shape=diamond, color=yellow];
809[label="46.6.59.161;d;2pkt 2fpkt", shape=diamond, color=yellow];
931[label="16.244.109.211;d;1pkt 1fpkt", shape=diamond, color=yellow];
1189[label="196.33.93.67;s;46pkt 46fpkt", shape=hexagon, color=black];
1194[label="197.64.46.233;d;1pkt 1fpkt", shape=hexagon, color=black];
1212[label="16.82.206.83;d;5pkt 5fpkt", shape=hexagon, color=black];
1234[label="196.81.61.194;d;1pkt 1fpkt", shape=hexagon, color=black];
1385[label="16.66.194.71;d;6pkt 6fpkt", shape=hexagon, color=black];
1558[label="196.33.93.67;s;33pkt 33fpkt", shape=polygon, color=gold];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.33.93.67:*, *:1214}[82.6087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (42.4051%)&lt;BR/&gt; 8888: (3.79747%)&lt;BR/&gt; 6346: (1.89873%)&lt;BR/&gt; 10184: (1.58228%)&lt;BR/&gt; 10181: (1.58228%)&gt;];
}
30--59[label="1;1pkt 1fpkt"];
30--152[label="1;5pkt 5fpkt"];
30--242[label="1;1pkt 1fpkt"];
30--501[label="1;3pkt 3fpkt"];
30--542[label="1;1pkt 1fpkt"];
30--575[label="1;6pkt 6fpkt"];
30--809[label="1;2pkt 2fpkt"];
30--931[label="1;1pkt 1fpkt"];
30--1189[label="1;46pkt 46fpkt"];
30--1194[label="1;1pkt 1fpkt"];
30--1212[label="1;5pkt 5fpkt"];
30--1234[label="1;1pkt 1fpkt"];
30--1385[label="1;6pkt 6fpkt"];
30--1558[label="1;33pkt 33fpkt"];
59--1189[label="1;1pkt 1fpkt"];
59--1194[label="1;1pkt 1fpkt"];
59--1558[label="1;1pkt 1fpkt"];
152--1189[label="1;5pkt 5fpkt"];
152--1212[label="1;5pkt 5fpkt"];
152--1558[label="0.8;4pkt 4fpkt"];
242--1189[label="1;1pkt 1fpkt"];
242--1558[label="1;1pkt 1fpkt"];
501--1189[label="1;3pkt 3fpkt"];
501--1558[label="1;3pkt 3fpkt"];
542--1189[label="1;1pkt 1fpkt"];
542--1234[label="1;1pkt 1fpkt"];
542--1558[label="1;1pkt 1fpkt"];
575--1189[label="1;6pkt 6fpkt"];
575--1385[label="1;6pkt 6fpkt"];
575--1558[label="1;6pkt 6fpkt"];
809--1189[label="1;2pkt 2fpkt"];
931--1189[label="1;1pkt 1fpkt"];
1189--1194[label="1;1pkt 1fpkt"];
1189--1212[label="1;5pkt 5fpkt"];
1189--1234[label="1;1pkt 1fpkt"];
1189--1385[label="1;6pkt 6fpkt"];
1189--1558[label="1;33pkt 33fpkt"];
1194--1558[label="1;1pkt 1fpkt"];
1212--1558[label="0.8;4pkt 4fpkt"];
1234--1558[label="1;1pkt 1fpkt"];
1385--1558[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="1214" src_ip="196.33.93.67"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
145[label="197.116.136.7;s;193pkt 193fpkt", shape=diamond, color=yellow];
819[label="212.147.116.145;d;2pkt 2fpkt", shape=diamond, color=yellow];
1287[label="197.116.136.7;s;177pkt 177fpkt", shape=hexagon, color=black];
1627[label="197.116.136.7;193pkt 193fpkt", shape=pentagon, color=darkviolet];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.116.136.7:6667, *:*}[39.3782%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (20%)&lt;BR/&gt; 6665: (4.77876%)&lt;BR/&gt; 6668: (4.42478%)&lt;BR/&gt; 113: (3.71681%)&lt;BR/&gt; 6669: (3.18584%)&gt;];
}
145--819[label="1;2pkt 2fpkt"];
145--1287[label="1;177pkt 177fpkt"];
145--1627[label="1;193pkt 193fpkt"];
819--1287[label="1;2pkt 2fpkt"];
819--1627[label="1;2pkt 2fpkt"];
1287--1627[label="1;177pkt 177fpkt"];
</description>
    <slice>
      <filter src_ip="197.116.136.7" src_port="6667"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
529[label="163.7.59.155;d;61pkt 61fpkt", shape=diamond, color=yellow];
767[label="93.168.148.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
829[label="146.39.210.99;s;1pkt 1fpkt", shape=diamond, color=yellow];
848[label="16.123.67.210;s;1pkt 1fpkt", shape=diamond, color=yellow];
1133[label="163.7.59.155;d;61pkt 61fpkt", shape=hexagon, color=black];
1407[label="93.168.148.82;s;1pkt 1fpkt", shape=hexagon, color=black];
1426[label="16.123.67.210;s;1pkt 1fpkt", shape=hexagon, color=black];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6346, 163.7.59.155:*}[65.5738%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (33.4646%)&lt;BR/&gt; 0: (12.5984%)&lt;BR/&gt; 6347: (7.87402%)&lt;BR/&gt; 3070: (1.5748%)&lt;BR/&gt; 2543: (1.5748%)&gt;];
}
529--767[label="1;1pkt 1fpkt"];
529--829[label="1;1pkt 1fpkt"];
529--848[label="1;1pkt 1fpkt"];
529--1133[label="1;61pkt 61fpkt"];
529--1407[label="1;1pkt 1fpkt"];
529--1426[label="1;1pkt 1fpkt"];
767--1133[label="1;1pkt 1fpkt"];
767--1407[label="1;1pkt 1fpkt"];
829--1133[label="1;1pkt 1fpkt"];
848--1133[label="1;1pkt 1fpkt"];
848--1426[label="1;1pkt 1fpkt"];
1133--1407[label="1;1pkt 1fpkt"];
1133--1426[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.7.59.155" src_port="6346"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
866[label="206.153.56.198;s;2pkt 2fpkt", shape=diamond, color=yellow];
867[label="164.202.233.102;d;1pkt 1fpkt", shape=diamond, color=yellow];
1490[label="164.202.233.102;d;1pkt 1fpkt", shape=hexagon, color=black];
2117[label="206.153.56.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.153.56.198:6667, 164.202.224.5:12076}[50%]&lt;BR/&gt;{206.153.56.198:7000, 164.202.233.102:2144}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (40%)&lt;BR/&gt; 2144: (40%)&lt;BR/&gt; 12076: (10%)&lt;BR/&gt; 6667: (10%)&gt;];
}
866--867[label="1;1pkt 1fpkt"];
866--1490[label="1;1pkt 1fpkt"];
866--2117[label="1;1pkt 1fpkt"];
867--1490[label="1;1pkt 1fpkt"];
867--2117[label="1;1pkt 1fpkt"];
1490--2117[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.202.233.102" dst_port="2144" src_ip="206.153.56.198" src_port="7000"/>
      <filter dst_ip="164.202.224.5" dst_port="12076" src_ip="206.153.56.198" src_port="6667"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
246[label="197.116.136.6;s;133pkt 133fpkt", shape=diamond, color=yellow];
883[label="215.76.59.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
1113[label="197.116.136.6;s;126pkt 126fpkt", shape=hexagon, color=black];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.116.136.6:6667, *:*}[39.0977%]&lt;BR/&gt;{197.116.136.6:*, *:113}[24.812%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (19.8077%)&lt;BR/&gt; 113: (12.1154%)&lt;BR/&gt; 1080: (4.42308%)&lt;BR/&gt; 194: (4.03846%)&lt;BR/&gt; 1027: (1.92308%)&gt;];
}
246--883[label="1;1pkt 1fpkt"];
246--1113[label="1;126pkt 126fpkt"];
883--1113[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="197.116.136.6" src_port="6667"/>
      <filter dst_port="113" src_ip="197.116.136.6"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="141.165.229.203"/>
      <from sec="1000011612" usec="0"/>
      <to sec="1000012519" usec="0"/>
    </slice>
    <from sec="1000011612" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988736,2.06051,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
839[label="148.173.197.132;d;8pkt 8fpkt", shape=diamond, color=yellow];
901[label="219.12.241.254;s;4pkt 4fpkt", shape=diamond, color=yellow];
1423[label="148.173.197.132;d;7pkt 7fpkt", shape=hexagon, color=black];
1593[label="148.173.197.132;d;7pkt 7fpkt", shape=polygon, color=gold];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.12.241.254:80, 148.173.197.132:*}[62.5%]&lt;BR/&gt;{*:0, 148.173.197.132:0}[25%]&lt;BR/&gt;{*:*, 148.173.197.132:1025}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.5385%)&lt;BR/&gt; 0: (15.3846%)&lt;BR/&gt; 1025: (11.5385%)&lt;BR/&gt; 1029: (7.69231%)&lt;BR/&gt; 1028: (7.69231%)&gt;];
}
839--901[label="1;4pkt 4fpkt"];
839--1423[label="1;7pkt 7fpkt"];
839--1593[label="1;7pkt 7fpkt"];
901--1423[label="1;4pkt 4fpkt"];
901--1593[label="1;4pkt 4fpkt"];
1423--1593[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="148.173.197.132" dst_port="1025"/>
      <filter dst_ip="148.173.197.132" src_ip="219.12.241.254" src_port="80"/>
      <filter dst_ip="148.173.197.132"/>
    </slice>
    <from sec="1000011663" usec="0"/>
    <to sec="1000012516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="93.112.104.120"/>
      <from sec="1000012005" usec="0"/>
      <to sec="1000012429" usec="0"/>
    </slice>
    <from sec="1000012005" usec="0"/>
    <to sec="1000012429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="93.112.104.120"/>
      <from sec="1000012005" usec="0"/>
      <to sec="1000012499" usec="0"/>
    </slice>
    <from sec="1000012005" usec="0"/>
    <to sec="1000012499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
864[label="194.31.128.201;s;145pkt 145fpkt", shape=diamond, color=yellow];
913[label="141.165.228.29;d;149pkt 149fpkt", shape=diamond, color=yellow];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.31.128.201:80, 141.165.228.29:*}[97.3154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8299%)&lt;BR/&gt; 1183: (0.340136%)&lt;BR/&gt; 1182: (0.340136%)&lt;BR/&gt; 1181: (0.340136%)&lt;BR/&gt; 1180: (0.340136%)&gt;];
}
864--913[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.228.29" src_ip="194.31.128.201" src_port="80"/>
    </slice>
    <from sec="1000012165" usec="0"/>
    <to sec="1000012394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
896[label="164.202.238.129;d;2pkt 2fpkt", shape=diamond, color=yellow];
921[label="16.246.45.102;s;1pkt 1fpkt", shape=diamond, color=yellow];
1518[label="16.246.45.102;s;1pkt 1fpkt", shape=hexagon, color=black];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.152.73.35:1214, 164.202.238.129:1057}[50%]&lt;BR/&gt;{16.246.45.102:1214, 164.202.238.129:1106}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 1106: (37.5%)&lt;BR/&gt; 1057: (12.5%)&gt;];
}
896--921[label="1;1pkt 1fpkt"];
896--1518[label="1;1pkt 1fpkt"];
921--1518[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.202.238.129" dst_port="1106" src_ip="16.246.45.102" src_port="1214"/>
      <filter dst_ip="164.202.238.129" dst_port="1057" src_ip="153.152.73.35" src_port="1214"/>
    </slice>
    <from sec="1000011709" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.581,2.1405,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="197.116.137.177"/>
      <from sec="1000011601" usec="0"/>
      <to sec="1000012519" usec="0"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
853[label="148.173.216.178;s;180pkt 180fpkt", shape=diamond, color=yellow];
955[label="93.109.1.113;d;2pkt 2fpkt", shape=diamond, color=yellow];
1515[label="93.109.1.113;d;2pkt 2fpkt", shape=hexagon, color=black];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.173.216.178:6257, *:6257}[61.6667%]&lt;BR/&gt;{148.173.216.178:*, *:8888}[21.1111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (61.6848%)&lt;BR/&gt; 8888: (10.3261%)&lt;BR/&gt; 6699: (3.53261%)&lt;BR/&gt; 7777: (2.44565%)&lt;BR/&gt; 80: (1.08696%)&gt;];
}
853--955[label="1;2pkt 2fpkt"];
853--1515[label="1;2pkt 2fpkt"];
955--1515[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="148.173.216.178"/>
      <filter dst_port="6257" src_ip="148.173.216.178" src_port="6257"/>
    </slice>
    <from sec="1000012072" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
949[label="164.202.238.129;s;2pkt 2fpkt", shape=diamond, color=yellow];
959[label="16.246.45.102;d;1pkt 1fpkt", shape=diamond, color=yellow];
1517[label="16.246.45.102;d;1pkt 1fpkt", shape=hexagon, color=black];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.202.238.129:1107, 218.14.229.73:1214}[50%]&lt;BR/&gt;{164.202.238.129:1106, 16.246.45.102:1214}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 1106: (37.5%)&lt;BR/&gt; 1107: (12.5%)&gt;];
}
949--959[label="1;1pkt 1fpkt"];
949--1517[label="1;1pkt 1fpkt"];
959--1517[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="16.246.45.102" dst_port="1214" src_ip="164.202.238.129" src_port="1106"/>
      <filter dst_ip="218.14.229.73" dst_port="1214" src_ip="164.202.238.129" src_port="1107"/>
    </slice>
    <from sec="1000011709" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
951[label="148.182.59.192;s;114pkt 114fpkt", shape=diamond, color=yellow];
961[label="214.24.41.18;d;102pkt 102fpkt", shape=diamond, color=yellow];
1512[label="148.182.59.192;s;115pkt 115fpkt", shape=hexagon, color=black];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.182.59.192:*, 214.24.41.18:80}[88.6957%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54557: (0.453172%)&lt;BR/&gt; 54553: (0.453172%)&lt;BR/&gt; 54552: (0.453172%)&lt;BR/&gt; 54551: (0.453172%)&gt;];
}
951--961[label="1;102pkt 102fpkt"];
951--1512[label="1;114pkt 114fpkt"];
961--1512[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_ip="214.24.41.18" dst_port="80" src_ip="148.182.59.192"/>
    </slice>
    <from sec="1000012097" usec="0"/>
    <to sec="1000012514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929312,2.00887,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
51[label="144.52.156.125;s;3pkt 3fpkt", shape=diamond, color=yellow];
52[label="47.12.232.16;d;3pkt 3fpkt", shape=diamond, color=yellow];
975[label="144.52.156.125;s;1pkt 1fpkt", shape=hexagon, color=black];
1021[label="47.12.232.16;d;3pkt 3fpkt", shape=hexagon, color=black];
1575[label="47.12.232.16;d;3pkt 3fpkt", shape=polygon, color=gold];
1943[label="144.52.156.125;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.52.156.125:21, 47.12.232.16:64783}[33.3333%]&lt;BR/&gt;{144.52.156.125:20, 47.12.232.16:65141}[33.3333%]&lt;BR/&gt;{144.52.156.125:20, 47.12.232.16:65286}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (33.3333%)&lt;BR/&gt; 65286: (16.6667%)&lt;BR/&gt; 65141: (16.6667%)&lt;BR/&gt; 64783: (16.6667%)&lt;BR/&gt; 21: (16.6667%)&gt;];
}
51--52[label="1;3pkt 3fpkt"];
51--975[label="1;1pkt 1fpkt"];
51--1021[label="1;3pkt 3fpkt"];
51--1575[label="1;3pkt 3fpkt"];
51--1943[label="1;2pkt 2fpkt"];
52--975[label="1;1pkt 1fpkt"];
52--1021[label="1;3pkt 3fpkt"];
52--1575[label="1;3pkt 3fpkt"];
52--1943[label="1;2pkt 2fpkt"];
975--1021[label="1;1pkt 1fpkt"];
975--1575[label="1;1pkt 1fpkt"];
1021--1575[label="1;3pkt 3fpkt"];
1021--1943[label="1;2pkt 2fpkt"];
1575--1943[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="47.12.232.16" dst_port="65286" src_ip="144.52.156.125" src_port="20"/>
      <filter dst_ip="47.12.232.16" dst_port="65141" src_ip="144.52.156.125" src_port="20"/>
      <filter dst_ip="47.12.232.16" dst_port="64783" src_ip="144.52.156.125" src_port="21"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0227,1.98055,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
60[label="32.255.231.159;d;157pkt 157fpkt", shape=diamond, color=yellow];
61[label="32.255.231.159;s;148pkt 148fpkt", shape=diamond, color=yellow];
978[label="32.255.231.159;d;157pkt 157fpkt", shape=hexagon, color=black];
1195[label="32.255.231.159;s;102pkt 102fpkt", shape=hexagon, color=black];
1547[label="32.255.231.159;d;70pkt 70fpkt", shape=polygon, color=gold];
2035[label="32.255.231.159;158pkt 158fpkt", shape=pentagon, color=darkviolet];
2411[label="32.255.231.159;158pkt 158fpkt", shape=invtriangle, color=brown];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.255.231.159:13364, 32.255.231.159:*}[90.5063%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13364: (45.7368%)&lt;BR/&gt; 0: (2.94737%)&lt;BR/&gt; 80: (1%)&lt;BR/&gt; 52235: (0.736842%)&lt;BR/&gt; 13535: (0.736842%)&gt;];
}
60--61[label="1;148pkt 148fpkt"];
60--978[label="1;157pkt 157fpkt"];
60--1195[label="1;102pkt 102fpkt"];
60--1547[label="1;70pkt 70fpkt"];
60--2035[label="1;157pkt 157fpkt"];
60--2411[label="1;157pkt 157fpkt"];
61--978[label="1;148pkt 148fpkt"];
61--1195[label="1;102pkt 102fpkt"];
61--1547[label="1;70pkt 70fpkt"];
61--2035[label="1;148pkt 148fpkt"];
61--2411[label="1;148pkt 148fpkt"];
978--1195[label="1;102pkt 102fpkt"];
978--1547[label="1;70pkt 70fpkt"];
978--2035[label="1;157pkt 157fpkt"];
978--2411[label="1;157pkt 157fpkt"];
1195--1547[label="1;70pkt 70fpkt"];
1195--2035[label="1;102pkt 102fpkt"];
1195--2411[label="1;102pkt 102fpkt"];
1547--2035[label="1;70pkt 70fpkt"];
1547--2411[label="1;70pkt 70fpkt"];
2035--2411[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter dst_ip="32.255.231.159" src_ip="32.255.231.159" src_port="13364"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
114[label="141.165.158.111;s;6pkt 6fpkt", shape=diamond, color=yellow];
115[label="16.51.34.34;d;4pkt 4fpkt", shape=diamond, color=yellow];
990[label="141.165.158.111;s;4pkt 4fpkt", shape=hexagon, color=black];
1033[label="16.51.34.34;d;4pkt 4fpkt", shape=hexagon, color=black];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.165.158.111:*, 16.51.34.34:6699}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (47.2222%)&lt;BR/&gt; 1328: (11.1111%)&lt;BR/&gt; 1327: (11.1111%)&lt;BR/&gt; 1326: (11.1111%)&lt;BR/&gt; 1329: (8.33333%)&gt;];
}
114--115[label="1;4pkt 4fpkt"];
114--990[label="1;4pkt 4fpkt"];
114--1033[label="1;4pkt 4fpkt"];
115--990[label="0.75;3pkt 3fpkt"];
115--1033[label="1;4pkt 4fpkt"];
990--1033[label="0.75;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="16.51.34.34" dst_port="6699" src_ip="141.165.158.111"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
118[label="148.177.17.36;d;24pkt 24fpkt", shape=diamond, color=yellow];
119[label="16.170.38.57;s;2pkt 2fpkt", shape=diamond, color=yellow];
877[label="93.169.21.211;s;5pkt 5fpkt", shape=diamond, color=yellow];
992[label="16.170.38.57;s;1pkt 1fpkt", shape=hexagon, color=black];
1283[label="148.177.17.36;d;23pkt 23fpkt", shape=hexagon, color=black];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1863, 148.177.17.36:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (21.8182%)&lt;BR/&gt; 5190: (9.09091%)&lt;BR/&gt; 4000: (5.45455%)&lt;BR/&gt; 61209: (3.63636%)&lt;BR/&gt; 2623: (3.63636%)&gt;];
}
118--119[label="1;2pkt 2fpkt"];
118--877[label="0.2;1pkt 1fpkt"];
118--992[label="1;1pkt 1fpkt"];
118--1283[label="1;23pkt 23fpkt"];
119--992[label="1;1pkt 1fpkt"];
119--1283[label="0.5;1pkt 1fpkt"];
877--1283[label="0.2;1pkt 1fpkt"];
992--1283[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.177.17.36" src_port="1863"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988736,2.06051,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
146[label="148.173.194.98;d;12pkt 12fpkt", shape=diamond, color=yellow];
147[label="204.145.189.145;s;5pkt 5fpkt", shape=diamond, color=yellow];
997[label="204.145.189.145;s;5pkt 5fpkt", shape=hexagon, color=black];
1040[label="148.173.194.98;d;10pkt 10fpkt", shape=hexagon, color=black];
1535[label="204.145.189.145;s;2pkt 2fpkt", shape=polygon, color=gold];
1540[label="148.173.194.98;d;8pkt 8fpkt", shape=polygon, color=gold];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.145.189.0:555, 148.173.194.98:*}[50%]&lt;BR/&gt;{204.145.189.145:*, 148.173.194.98:6970}[41.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6970: (28.5714%)&lt;BR/&gt; 555: (17.8571%)&lt;BR/&gt; 31542: (7.14286%)&lt;BR/&gt; 22022: (7.14286%)&lt;BR/&gt; 8370: (5.95238%)&gt;];
}
146--147[label="1;5pkt 5fpkt"];
146--997[label="1;5pkt 5fpkt"];
146--1040[label="1;10pkt 10fpkt"];
146--1535[label="1;2pkt 2fpkt"];
146--1540[label="1;8pkt 8fpkt"];
146--1598[label="0.0833333;1pkt 1fpkt"];
146--1602[label="0.0833333;1pkt 1fpkt"];
146--1604[label="0.0833333;1pkt 1fpkt"];
147--997[label="1;5pkt 5fpkt"];
147--1040[label="0.8;4pkt 4fpkt"];
147--1535[label="1;2pkt 2fpkt"];
147--1540[label="0.6;3pkt 3fpkt"];
997--1040[label="0.8;4pkt 4fpkt"];
997--1535[label="1;2pkt 2fpkt"];
997--1540[label="0.6;3pkt 3fpkt"];
1040--1535[label="1;2pkt 2fpkt"];
1040--1540[label="1;8pkt 8fpkt"];
1040--1598[label="0.1;1pkt 1fpkt"];
1040--1602[label="0.1;1pkt 1fpkt"];
1040--1604[label="0.1;1pkt 1fpkt"];
1535--1540[label="1;2pkt 2fpkt"];
1540--1598[label="0.125;1pkt 1fpkt"];
1540--1602[label="0.125;1pkt 1fpkt"];
1540--1604[label="0.125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.173.194.98" src_ip="204.145.189.0" src_port="555"/>
      <filter dst_ip="148.173.194.98" dst_port="6970" src_ip="204.145.189.145"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
73[label="148.173.194.114;d;384pkt 384fpkt", shape=diamond, color=yellow];
76[label="16.218.81.33;s;1pkt 1fpkt", shape=diamond, color=yellow];
258[label="192.37.121.247;s;1pkt 1fpkt", shape=diamond, color=yellow];
262[label="16.47.179.223;s;1pkt 1fpkt", shape=diamond, color=yellow];
297[label="16.87.151.86;s;1pkt 1fpkt", shape=diamond, color=yellow];
983[label="16.218.81.33;s;1pkt 1fpkt", shape=hexagon, color=black];
1027[label="16.47.179.223;s;1pkt 1fpkt", shape=hexagon, color=black];
1199[label="192.37.121.247;s;1pkt 1fpkt", shape=hexagon, color=black];
1217[label="16.87.151.86;s;1pkt 1fpkt", shape=hexagon, color=black];
1345[label="148.173.194.114;d;360pkt 360fpkt", shape=hexagon, color=black];
2182[label="16.47.179.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 148.173.194.114:6257}[77.8646%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (79.5485%)&lt;BR/&gt; 6699: (9.96016%)&lt;BR/&gt; 0: (0.398406%)&lt;BR/&gt; 3279: (0.332005%)&lt;BR/&gt; 4694: (0.265604%)&gt;];
}
73--76[label="1;1pkt 1fpkt"];
73--258[label="1;1pkt 1fpkt"];
73--262[label="1;1pkt 1fpkt"];
73--297[label="1;1pkt 1fpkt"];
73--983[label="1;1pkt 1fpkt"];
73--1027[label="1;1pkt 1fpkt"];
73--1199[label="1;1pkt 1fpkt"];
73--1217[label="1;1pkt 1fpkt"];
73--1345[label="1;360pkt 360fpkt"];
73--2182[label="1;1pkt 1fpkt"];
76--983[label="1;1pkt 1fpkt"];
76--1345[label="1;1pkt 1fpkt"];
258--1199[label="1;1pkt 1fpkt"];
258--1345[label="1;1pkt 1fpkt"];
262--1027[label="1;1pkt 1fpkt"];
262--1345[label="1;1pkt 1fpkt"];
262--2182[label="1;1pkt 1fpkt"];
297--1217[label="1;1pkt 1fpkt"];
297--1345[label="1;1pkt 1fpkt"];
983--1345[label="1;1pkt 1fpkt"];
1027--1345[label="1;1pkt 1fpkt"];
1027--2182[label="1;1pkt 1fpkt"];
1199--1345[label="1;1pkt 1fpkt"];
1217--1345[label="1;1pkt 1fpkt"];
1345--2182[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.173.194.114" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929312,2.00887,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
71[label="148.173.54.214;d;496pkt 496fpkt", shape=diamond, color=yellow];
143[label="208.166.208.188;s;1pkt 1fpkt", shape=diamond, color=yellow];
160[label="213.38.52.80;s;1pkt 1fpkt", shape=diamond, color=yellow];
254[label="16.87.27.194;s;1pkt 1fpkt", shape=diamond, color=yellow];
261[label="93.85.88.249;s;1pkt 1fpkt", shape=diamond, color=yellow];
266[label="16.176.247.228;s;1pkt 1fpkt", shape=diamond, color=yellow];
271[label="192.11.115.178;s;1pkt 1fpkt", shape=diamond, color=yellow];
277[label="16.0.125.126;s;1pkt 1fpkt", shape=diamond, color=yellow];
282[label="16.178.67.165;s;1pkt 1fpkt", shape=diamond, color=yellow];
292[label="93.102.84.212;s;1pkt 1fpkt", shape=diamond, color=yellow];
301[label="16.243.220.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
311[label="16.12.5.247;s;1pkt 1fpkt", shape=diamond, color=yellow];
319[label="16.221.12.95;s;1pkt 1fpkt", shape=diamond, color=yellow];
322[label="93.117.154.213;s;1pkt 1fpkt", shape=diamond, color=yellow];
397[label="204.176.130.218;s;1pkt 1fpkt", shape=diamond, color=yellow];
434[label="208.86.101.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
462[label="16.224.131.228;s;35pkt 35fpkt", shape=diamond, color=yellow];
518[label="208.42.145.14;s;1pkt 1fpkt", shape=diamond, color=yellow];
522[label="16.44.50.44;s;17pkt 17fpkt", shape=diamond, color=yellow];
525[label="1.8.29.79;s;1pkt 1fpkt", shape=diamond, color=yellow];
536[label="197.212.202.197;s;1pkt 1fpkt", shape=diamond, color=yellow];
646[label="9.81.72.119;s;73pkt 73fpkt", shape=diamond, color=yellow];
717[label="94.57.179.116;s;18pkt 18fpkt", shape=diamond, color=yellow];
980[label="148.173.54.214;d;496pkt 496fpkt", shape=hexagon, color=black];
1029[label="16.176.247.228;s;1pkt 1fpkt", shape=hexagon, color=black];
1038[label="208.166.208.188;s;1pkt 1fpkt", shape=hexagon, color=black];
1071[label="192.11.115.178;s;1pkt 1fpkt", shape=hexagon, color=black];
1100[label="16.224.131.228;s;17pkt 17fpkt", shape=hexagon, color=black];
1117[label="204.176.130.218;s;1pkt 1fpkt", shape=hexagon, color=black];
1144[label="16.221.12.95;s;1pkt 1fpkt", shape=hexagon, color=black];
1146[label="93.117.154.213;s;1pkt 1fpkt", shape=hexagon, color=black];
1147[label="197.212.202.197;s;1pkt 1fpkt", shape=hexagon, color=black];
1148[label="208.86.101.74;s;1pkt 1fpkt", shape=hexagon, color=black];
1205[label="208.42.145.14;s;1pkt 1fpkt", shape=hexagon, color=black];
1214[label="1.8.29.79;s;1pkt 1fpkt", shape=hexagon, color=black];
1223[label="16.12.5.247;s;1pkt 1fpkt", shape=hexagon, color=black];
1289[label="93.102.84.212;s;1pkt 1fpkt", shape=hexagon, color=black];
1290[label="213.38.52.80;s;1pkt 1fpkt", shape=hexagon, color=black];
1291[label="16.243.220.27;s;1pkt 1fpkt", shape=hexagon, color=black];
1316[label="94.57.179.116;s;13pkt 13fpkt", shape=hexagon, color=black];
1388[label="9.81.72.119;s;49pkt 49fpkt", shape=hexagon, color=black];
1404[label="16.178.67.165;s;1pkt 1fpkt", shape=hexagon, color=black];
1551[label="148.173.54.214;d;496pkt 496fpkt", shape=polygon, color=gold];
1677[label="16.243.220.27;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1733[label="16.44.50.44;17pkt 17fpkt", shape=pentagon, color=darkviolet];
1886[label="16.221.12.95;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2046[label="16.178.67.165;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2150[label="93.102.84.212;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.173.54.214:6346}[59.4758%]&lt;BR/&gt;{*:6346, 148.173.54.214:*}[35.4839%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (47.8741%)&lt;BR/&gt; 6347: (1.19048%)&lt;BR/&gt; 0: (0.680272%)&lt;BR/&gt; 6699: (0.510204%)&lt;BR/&gt; 1604: (0.283447%)&gt;];
}
71--143[label="1;1pkt 1fpkt"];
71--160[label="1;1pkt 1fpkt"];
71--254[label="1;1pkt 1fpkt"];
71--261[label="1;1pkt 1fpkt"];
71--266[label="1;1pkt 1fpkt"];
71--271[label="1;1pkt 1fpkt"];
71--277[label="1;1pkt 1fpkt"];
71--282[label="1;1pkt 1fpkt"];
71--292[label="1;1pkt 1fpkt"];
71--301[label="1;1pkt 1fpkt"];
71--311[label="1;1pkt 1fpkt"];
71--319[label="1;1pkt 1fpkt"];
71--322[label="1;1pkt 1fpkt"];
71--397[label="1;1pkt 1fpkt"];
71--434[label="1;1pkt 1fpkt"];
71--462[label="1;35pkt 35fpkt"];
71--518[label="1;1pkt 1fpkt"];
71--522[label="1;17pkt 17fpkt"];
71--525[label="1;1pkt 1fpkt"];
71--536[label="1;1pkt 1fpkt"];
71--646[label="1;73pkt 73fpkt"];
71--717[label="1;18pkt 18fpkt"];
71--980[label="1;496pkt 496fpkt"];
71--1029[label="1;1pkt 1fpkt"];
71--1038[label="1;1pkt 1fpkt"];
71--1071[label="1;1pkt 1fpkt"];
71--1100[label="1;17pkt 17fpkt"];
71--1117[label="1;1pkt 1fpkt"];
71--1144[label="1;1pkt 1fpkt"];
71--1146[label="1;1pkt 1fpkt"];
71--1147[label="1;1pkt 1fpkt"];
71--1148[label="1;1pkt 1fpkt"];
71--1205[label="1;1pkt 1fpkt"];
71--1214[label="1;1pkt 1fpkt"];
71--1223[label="1;1pkt 1fpkt"];
71--1289[label="1;1pkt 1fpkt"];
71--1290[label="1;1pkt 1fpkt"];
71--1291[label="1;1pkt 1fpkt"];
71--1316[label="1;13pkt 13fpkt"];
71--1388[label="1;49pkt 49fpkt"];
71--1404[label="1;1pkt 1fpkt"];
71--1551[label="1;496pkt 496fpkt"];
71--1677[label="1;1pkt 1fpkt"];
71--1733[label="1;17pkt 17fpkt"];
71--1886[label="1;1pkt 1fpkt"];
71--2046[label="1;1pkt 1fpkt"];
71--2150[label="1;1pkt 1fpkt"];
143--980[label="1;1pkt 1fpkt"];
143--1038[label="1;1pkt 1fpkt"];
143--1551[label="1;1pkt 1fpkt"];
160--980[label="1;1pkt 1fpkt"];
160--1290[label="1;1pkt 1fpkt"];
160--1551[label="1;1pkt 1fpkt"];
254--980[label="1;1pkt 1fpkt"];
254--1551[label="1;1pkt 1fpkt"];
261--980[label="1;1pkt 1fpkt"];
261--1551[label="1;1pkt 1fpkt"];
266--980[label="1;1pkt 1fpkt"];
266--1029[label="1;1pkt 1fpkt"];
266--1551[label="1;1pkt 1fpkt"];
271--980[label="1;1pkt 1fpkt"];
271--1071[label="1;1pkt 1fpkt"];
271--1551[label="1;1pkt 1fpkt"];
277--980[label="1;1pkt 1fpkt"];
277--1551[label="1;1pkt 1fpkt"];
282--980[label="1;1pkt 1fpkt"];
282--1404[label="1;1pkt 1fpkt"];
282--1551[label="1;1pkt 1fpkt"];
282--2046[label="1;1pkt 1fpkt"];
292--980[label="1;1pkt 1fpkt"];
292--1289[label="1;1pkt 1fpkt"];
292--1551[label="1;1pkt 1fpkt"];
292--2150[label="1;1pkt 1fpkt"];
301--980[label="1;1pkt 1fpkt"];
301--1291[label="1;1pkt 1fpkt"];
301--1551[label="1;1pkt 1fpkt"];
301--1677[label="1;1pkt 1fpkt"];
311--980[label="1;1pkt 1fpkt"];
311--1223[label="1;1pkt 1fpkt"];
311--1551[label="1;1pkt 1fpkt"];
319--980[label="1;1pkt 1fpkt"];
319--1144[label="1;1pkt 1fpkt"];
319--1551[label="1;1pkt 1fpkt"];
319--1886[label="1;1pkt 1fpkt"];
322--980[label="1;1pkt 1fpkt"];
322--1146[label="1;1pkt 1fpkt"];
322--1551[label="1;1pkt 1fpkt"];
397--980[label="1;1pkt 1fpkt"];
397--1117[label="1;1pkt 1fpkt"];
397--1551[label="1;1pkt 1fpkt"];
434--980[label="1;1pkt 1fpkt"];
434--1148[label="1;1pkt 1fpkt"];
434--1551[label="1;1pkt 1fpkt"];
462--980[label="1;35pkt 35fpkt"];
462--1100[label="1;17pkt 17fpkt"];
462--1551[label="1;35pkt 35fpkt"];
518--980[label="1;1pkt 1fpkt"];
518--1205[label="1;1pkt 1fpkt"];
518--1551[label="1;1pkt 1fpkt"];
522--980[label="1;17pkt 17fpkt"];
522--1551[label="1;17pkt 17fpkt"];
522--1733[label="1;17pkt 17fpkt"];
525--980[label="1;1pkt 1fpkt"];
525--1214[label="1;1pkt 1fpkt"];
525--1551[label="1;1pkt 1fpkt"];
536--980[label="1;1pkt 1fpkt"];
536--1147[label="1;1pkt 1fpkt"];
536--1551[label="1;1pkt 1fpkt"];
646--980[label="1;73pkt 73fpkt"];
646--1388[label="1;49pkt 49fpkt"];
646--1551[label="1;73pkt 73fpkt"];
717--980[label="1;18pkt 18fpkt"];
717--1316[label="1;13pkt 13fpkt"];
717--1551[label="1;18pkt 18fpkt"];
980--1029[label="1;1pkt 1fpkt"];
980--1038[label="1;1pkt 1fpkt"];
980--1071[label="1;1pkt 1fpkt"];
980--1100[label="1;17pkt 17fpkt"];
980--1117[label="1;1pkt 1fpkt"];
980--1144[label="1;1pkt 1fpkt"];
980--1146[label="1;1pkt 1fpkt"];
980--1147[label="1;1pkt 1fpkt"];
980--1148[label="1;1pkt 1fpkt"];
980--1205[label="1;1pkt 1fpkt"];
980--1214[label="1;1pkt 1fpkt"];
980--1223[label="1;1pkt 1fpkt"];
980--1289[label="1;1pkt 1fpkt"];
980--1290[label="1;1pkt 1fpkt"];
980--1291[label="1;1pkt 1fpkt"];
980--1316[label="1;13pkt 13fpkt"];
980--1388[label="1;49pkt 49fpkt"];
980--1404[label="1;1pkt 1fpkt"];
980--1551[label="1;496pkt 496fpkt"];
980--1677[label="1;1pkt 1fpkt"];
980--1733[label="1;17pkt 17fpkt"];
980--1886[label="1;1pkt 1fpkt"];
980--2046[label="1;1pkt 1fpkt"];
980--2150[label="1;1pkt 1fpkt"];
1029--1551[label="1;1pkt 1fpkt"];
1038--1551[label="1;1pkt 1fpkt"];
1071--1551[label="1;1pkt 1fpkt"];
1100--1551[label="1;17pkt 17fpkt"];
1117--1551[label="1;1pkt 1fpkt"];
1144--1551[label="1;1pkt 1fpkt"];
1144--1886[label="1;1pkt 1fpkt"];
1146--1551[label="1;1pkt 1fpkt"];
1147--1551[label="1;1pkt 1fpkt"];
1148--1551[label="1;1pkt 1fpkt"];
1205--1551[label="1;1pkt 1fpkt"];
1214--1551[label="1;1pkt 1fpkt"];
1223--1551[label="1;1pkt 1fpkt"];
1289--1551[label="1;1pkt 1fpkt"];
1289--2150[label="1;1pkt 1fpkt"];
1290--1551[label="1;1pkt 1fpkt"];
1291--1551[label="1;1pkt 1fpkt"];
1291--1677[label="1;1pkt 1fpkt"];
1316--1551[label="1;13pkt 13fpkt"];
1388--1551[label="1;49pkt 49fpkt"];
1404--1551[label="1;1pkt 1fpkt"];
1404--2046[label="1;1pkt 1fpkt"];
1551--1677[label="1;1pkt 1fpkt"];
1551--1733[label="1;17pkt 17fpkt"];
1551--1886[label="1;1pkt 1fpkt"];
1551--2046[label="1;1pkt 1fpkt"];
1551--2150[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.173.54.214" src_port="6346"/>
      <filter dst_ip="148.173.54.214" dst_port="6346"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
89[label="141.165.228.26;s;10pkt 10fpkt", shape=diamond, color=yellow];
269[label="198.219.90.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
329[label="219.32.240.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
1030[label="198.219.90.230;d;1pkt 1fpkt", shape=hexagon, color=black];
1203[label="141.165.228.26;s;10pkt 10fpkt", shape=hexagon, color=black];
1300[label="219.32.240.232;d;1pkt 1fpkt", shape=hexagon, color=black];
1673[label="141.165.228.26;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.165.228.26:*, *:8888}[40%]&lt;BR/&gt;{141.165.228.26:0, *:0}[30%]&lt;BR/&gt;{141.165.228.26:*, *:6699}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (26.4706%)&lt;BR/&gt; 6699: (19.1176%)&lt;BR/&gt; 8888: (17.6471%)&lt;BR/&gt; 1345: (7.35294%)&lt;BR/&gt; 1344: (7.35294%)&gt;];
}
89--269[label="1;1pkt 1fpkt"];
89--329[label="1;1pkt 1fpkt"];
89--1030[label="1;1pkt 1fpkt"];
89--1203[label="1;10pkt 10fpkt"];
89--1300[label="1;1pkt 1fpkt"];
89--1673[label="1;10pkt 10fpkt"];
269--1030[label="1;1pkt 1fpkt"];
269--1203[label="1;1pkt 1fpkt"];
269--1673[label="1;1pkt 1fpkt"];
329--1203[label="1;1pkt 1fpkt"];
329--1300[label="1;1pkt 1fpkt"];
329--1673[label="1;1pkt 1fpkt"];
1030--1203[label="1;1pkt 1fpkt"];
1030--1673[label="1;1pkt 1fpkt"];
1203--1300[label="1;1pkt 1fpkt"];
1203--1673[label="1;10pkt 10fpkt"];
1300--1673[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="141.165.228.26"/>
      <filter dst_port="6699" src_ip="141.165.228.26"/>
      <filter src_ip="141.165.228.26"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929312,2.00887,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
285[label="164.202.87.176;d;4pkt 4fpkt", shape=diamond, color=yellow];
288[label="46.59.40.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
567[label="213.91.109.203;s;2pkt 2fpkt", shape=diamond, color=yellow];
1039[label="46.59.40.162;s;1pkt 1fpkt", shape=hexagon, color=black];
1174[label="213.91.109.203;s;2pkt 2fpkt", shape=hexagon, color=black];
1288[label="164.202.87.176;d;4pkt 4fpkt", shape=hexagon, color=black];
1539[label="46.59.40.162;s;1pkt 1fpkt", shape=polygon, color=gold];
2041[label="46.59.40.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.59.40.162:1755, 164.202.87.176:1468}[25%]&lt;BR/&gt;{192.0.157.163:8002, 164.202.87.176:1069}[25%]&lt;BR/&gt;{213.91.109.203:5000, 164.202.87.176:5000}[25%]&lt;BR/&gt;{213.91.109.203:5001, 164.202.87.176:1381}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5000: (25%)&lt;BR/&gt; 1755: (18.75%)&lt;BR/&gt; 1468: (18.75%)&lt;BR/&gt; 5001: (12.5%)&lt;BR/&gt; 1381: (12.5%)&gt;];
}
285--288[label="1;1pkt 1fpkt"];
285--567[label="1;2pkt 2fpkt"];
285--1039[label="1;1pkt 1fpkt"];
285--1174[label="1;2pkt 2fpkt"];
285--1288[label="1;4pkt 4fpkt"];
285--1539[label="1;1pkt 1fpkt"];
285--2041[label="1;1pkt 1fpkt"];
288--1039[label="1;1pkt 1fpkt"];
288--1288[label="1;1pkt 1fpkt"];
288--1539[label="1;1pkt 1fpkt"];
288--2041[label="1;1pkt 1fpkt"];
567--1174[label="1;2pkt 2fpkt"];
567--1288[label="1;2pkt 2fpkt"];
1039--1288[label="1;1pkt 1fpkt"];
1039--1539[label="1;1pkt 1fpkt"];
1039--2041[label="1;1pkt 1fpkt"];
1174--1288[label="1;2pkt 2fpkt"];
1288--1539[label="1;1pkt 1fpkt"];
1288--2041[label="1;1pkt 1fpkt"];
1539--2041[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.202.87.176" dst_port="1381" src_ip="213.91.109.203" src_port="5001"/>
      <filter dst_ip="164.202.87.176" dst_port="5000" src_ip="213.91.109.203" src_port="5000"/>
      <filter dst_ip="164.202.87.176" dst_port="1069" src_ip="192.0.157.163" src_port="8002"/>
      <filter dst_ip="164.202.87.176" dst_port="1468" src_ip="46.59.40.162" src_port="1755"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
37[label="196.33.93.73;s;48pkt 48fpkt", shape=diamond, color=yellow];
174[label="212.188.195.75;d;1pkt 1fpkt", shape=diamond, color=yellow];
326[label="92.75.170.71;d;1pkt 1fpkt", shape=diamond, color=yellow];
918[label="47.234.96.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
1051[label="92.75.170.71;d;1pkt 1fpkt", shape=hexagon, color=black];
1482[label="47.234.96.158;d;1pkt 1fpkt", shape=hexagon, color=black];
1818[label="196.33.93.73;50pkt 50fpkt", shape=pentagon, color=darkviolet];
2344[label="196.33.93.73;50pkt 50fpkt", shape=invtriangle, color=brown];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.33.93.73:*, *:8888}[56%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (26.7974%)&lt;BR/&gt; 80: (5.88235%)&lt;BR/&gt; 0: (5.88235%)&lt;BR/&gt; 1025: (4.57516%)&lt;BR/&gt; 6699: (3.92157%)&gt;];
}
37--174[label="1;1pkt 1fpkt"];
37--326[label="1;1pkt 1fpkt"];
37--918[label="1;1pkt 1fpkt"];
37--1051[label="1;1pkt 1fpkt"];
37--1482[label="1;1pkt 1fpkt"];
37--1818[label="1;48pkt 48fpkt"];
37--2344[label="1;48pkt 48fpkt"];
174--1818[label="1;1pkt 1fpkt"];
174--2344[label="1;1pkt 1fpkt"];
326--1051[label="1;1pkt 1fpkt"];
326--1818[label="1;1pkt 1fpkt"];
326--2344[label="1;1pkt 1fpkt"];
918--1482[label="1;1pkt 1fpkt"];
918--1818[label="1;1pkt 1fpkt"];
918--2344[label="1;1pkt 1fpkt"];
1051--1818[label="1;1pkt 1fpkt"];
1051--2344[label="1;1pkt 1fpkt"];
1482--1818[label="1;1pkt 1fpkt"];
1482--2344[label="1;1pkt 1fpkt"];
1818--2344[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="196.33.93.73"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
88[label="141.165.228.26;d;9pkt 9fpkt", shape=diamond, color=yellow];
330[label="219.32.240.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
400[label="198.219.90.230;s;1pkt 1fpkt", shape=diamond, color=yellow];
1053[label="219.32.240.232;s;1pkt 1fpkt", shape=hexagon, color=black];
1121[label="141.165.228.26;d;7pkt 7fpkt", shape=hexagon, color=black];
1204[label="198.219.90.230;s;1pkt 1fpkt", shape=hexagon, color=black];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8888, 141.165.228.26:*}[44.4444%]&lt;BR/&gt;{*:0, 141.165.228.26:0}[33.3333%]&lt;BR/&gt;{*:6699, 141.165.228.26:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (25%)&lt;BR/&gt; 6699: (20%)&lt;BR/&gt; 8888: (17.5%)&lt;BR/&gt; 1345: (10%)&lt;BR/&gt; 1344: (10%)&gt;];
}
88--330[label="1;1pkt 1fpkt"];
88--400[label="1;1pkt 1fpkt"];
88--1053[label="1;1pkt 1fpkt"];
88--1121[label="1;7pkt 7fpkt"];
88--1204[label="1;1pkt 1fpkt"];
330--1053[label="1;1pkt 1fpkt"];
330--1121[label="1;1pkt 1fpkt"];
400--1121[label="1;1pkt 1fpkt"];
400--1204[label="1;1pkt 1fpkt"];
1053--1121[label="1;1pkt 1fpkt"];
1121--1204[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.228.26" src_port="8888"/>
      <filter dst_ip="141.165.228.26" src_port="6699"/>
      <filter dst_ip="141.165.228.26"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
41[label="164.202.232.128;s;36pkt 36fpkt", shape=diamond, color=yellow];
42[label="208.98.223.226;d;1pkt 1fpkt", shape=diamond, color=yellow];
243[label="16.171.214.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
545[label="16.103.102.66;d;1pkt 1fpkt", shape=diamond, color=yellow];
686[label="196.93.32.126;d;1pkt 1fpkt", shape=diamond, color=yellow];
833[label="208.100.55.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
917[label="16.130.36.124;d;3pkt 3fpkt", shape=diamond, color=yellow];
1067[label="208.98.223.226;d;1pkt 1fpkt", shape=hexagon, color=black];
1112[label="164.202.232.128;s;13pkt 13fpkt", shape=hexagon, color=black];
1418[label="208.100.55.167;d;1pkt 1fpkt", shape=hexagon, color=black];
1489[label="16.171.214.233;d;1pkt 1fpkt", shape=hexagon, color=black];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.202.232.128:*, *:1214}[44.4444%]&lt;BR/&gt;{164.202.232.128:*, *:53}[38.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (23.3333%)&lt;BR/&gt; 53: (15.8333%)&lt;BR/&gt; 0: (5%)&lt;BR/&gt; 113: (4.16667%)&lt;BR/&gt; 53338: (3.33333%)&gt;];
}
41--42[label="1;1pkt 1fpkt"];
41--243[label="1;1pkt 1fpkt"];
41--545[label="1;1pkt 1fpkt"];
41--686[label="1;1pkt 1fpkt"];
41--833[label="1;1pkt 1fpkt"];
41--917[label="1;3pkt 3fpkt"];
41--1067[label="1;1pkt 1fpkt"];
41--1112[label="1;13pkt 13fpkt"];
41--1418[label="1;1pkt 1fpkt"];
41--1489[label="1;1pkt 1fpkt"];
42--1067[label="1;1pkt 1fpkt"];
42--1112[label="1;1pkt 1fpkt"];
243--1112[label="1;1pkt 1fpkt"];
243--1489[label="1;1pkt 1fpkt"];
545--1112[label="1;1pkt 1fpkt"];
686--1112[label="1;1pkt 1fpkt"];
833--1112[label="1;1pkt 1fpkt"];
833--1418[label="1;1pkt 1fpkt"];
1067--1112[label="1;1pkt 1fpkt"];
1112--1418[label="1;1pkt 1fpkt"];
1112--1489[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1214" src_ip="164.202.232.128"/>
      <filter dst_port="53" src_ip="164.202.232.128"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
403[label="196.42.119.38;s;266pkt 266fpkt", shape=diamond, color=yellow];
1073[label="196.42.119.38;s;110pkt 110fpkt", shape=hexagon, color=black];
1713[label="196.42.119.38;272pkt 272fpkt", shape=pentagon, color=darkviolet];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.42.119.38:25, *:*}[43.0147%]&lt;BR/&gt;{196.42.119.38:*, *:113}[42.2794%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (21.6049%)&lt;BR/&gt; 113: (21.0648%)&lt;BR/&gt; 0: (14.6605%)&lt;BR/&gt; 65415: (0.231481%)&lt;BR/&gt; 65223: (0.231481%)&gt;];
}
403--1073[label="1;110pkt 110fpkt"];
403--1713[label="1;266pkt 266fpkt"];
1073--1713[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter src_ip="196.42.119.38" src_port="25"/>
      <filter dst_port="113" src_ip="196.42.119.38"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
192[label="144.52.225.57;d;33pkt 33fpkt", shape=diamond, color=yellow];
193[label="197.90.211.173;s;1pkt 1fpkt", shape=diamond, color=yellow];
204[label="92.33.149.56;s;1pkt 1fpkt", shape=diamond, color=yellow];
803[label="208.57.229.113;s;2pkt 2fpkt", shape=diamond, color=yellow];
1088[label="197.90.211.173;s;1pkt 1fpkt", shape=hexagon, color=black];
1141[label="144.52.225.57;d;32pkt 32fpkt", shape=hexagon, color=black];
1399[label="208.57.229.113;s;2pkt 2fpkt", shape=hexagon, color=black];
1613[label="219.21.238.2;16pkt 16fpkt", shape=pentagon, color=darkviolet];
1770[label="92.33.149.56;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2067[label="197.90.211.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2447[label="165.66.99.205;1pkt 1fpkt", shape=invtriangle, color=brown];
2556[label="165.66.99.205;1pkt 1fpkt", shape=invhouse, color=bisque];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.21.238.2:80, 144.52.225.57:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.9462%)&lt;BR/&gt; 8000: (4.30108%)&lt;BR/&gt; 46830: (2.68817%)&lt;BR/&gt; 8080: (2.68817%)&lt;BR/&gt; 52655: (2.15054%)&gt;];
}
192--193[label="1;1pkt 1fpkt"];
192--204[label="1;1pkt 1fpkt"];
192--803[label="1;2pkt 2fpkt"];
192--1088[label="1;1pkt 1fpkt"];
192--1141[label="1;32pkt 32fpkt"];
192--1399[label="1;2pkt 2fpkt"];
192--1613[label="0.875;14pkt 14fpkt"];
192--1770[label="1;2pkt 2fpkt"];
192--1827[label="0.0322581;1pkt 1fpkt"];
192--2067[label="1;1pkt 1fpkt"];
192--2447[label="1;1pkt 1fpkt"];
192--2556[label="1;1pkt 1fpkt"];
193--1088[label="1;1pkt 1fpkt"];
193--1141[label="1;1pkt 1fpkt"];
193--2067[label="1;1pkt 1fpkt"];
204--1141[label="1;1pkt 1fpkt"];
803--1141[label="1;2pkt 2fpkt"];
803--1399[label="1;2pkt 2fpkt"];
1088--1141[label="1;1pkt 1fpkt"];
1088--2067[label="1;1pkt 1fpkt"];
1141--1399[label="1;2pkt 2fpkt"];
1141--1613[label="0.875;14pkt 14fpkt"];
1141--1770[label="1;2pkt 2fpkt"];
1141--1827[label="0.0322581;1pkt 1fpkt"];
1141--2067[label="1;1pkt 1fpkt"];
1141--2447[label="1;1pkt 1fpkt"];
1141--2556[label="1;1pkt 1fpkt"];
2447--2556[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.52.225.57" src_ip="219.21.238.2" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929312,2.00887,053,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
32[label="194.251.76.57;d;714pkt 714fpkt", shape=diamond, color=yellow];
35[label="148.173.141.172;s;776pkt 776fpkt", shape=diamond, color=yellow];
418[label="44.81.191.191;s;790pkt 790fpkt", shape=diamond, color=yellow];
543[label="164.202.196.10;d;131pkt 131fpkt", shape=diamond, color=yellow];
599[label="148.173.194.98;s;13pkt 13fpkt", shape=diamond, color=yellow];
680[label="204.145.189.0;d;12pkt 12fpkt", shape=diamond, color=yellow];
764[label="205.161.86.75;d;18pkt 18fpkt", shape=diamond, color=yellow];
765[label="144.52.153.221;s;18pkt 18fpkt", shape=diamond, color=yellow];
826[label="140.109.68.67;s;85pkt 85fpkt", shape=diamond, color=yellow];
971[label="148.173.141.172;s;95pkt 95fpkt", shape=hexagon, color=black];
1081[label="44.81.191.191;s;638pkt 638fpkt", shape=hexagon, color=black];
1190[label="194.251.76.57;d;409pkt 409fpkt", shape=hexagon, color=black];
1351[label="205.161.86.75;d;18pkt 18fpkt", shape=hexagon, color=black];
1355[label="204.145.189.0;d;12pkt 12fpkt", shape=hexagon, color=black];
1452[label="164.202.196.10;d;126pkt 126fpkt", shape=hexagon, color=black];
1587[label="205.161.86.75;d;18pkt 18fpkt", shape=polygon, color=gold];
1736[label="196.90.56.45;30pkt 30fpkt", shape=pentagon, color=darkviolet];
1893[label="148.173.194.98;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.81.191.191:*, *:80}[45.3242%]&lt;BR/&gt;{148.173.141.172:*, 194.251.76.57:80}[44.5209%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2082%)&lt;BR/&gt; 555: (0.306513%)&lt;BR/&gt; 6970: (0.255428%)&lt;BR/&gt; 25: (0.191571%)&lt;BR/&gt; 4995: (0.140485%)&gt;];
}
32--35[label="0.980392;700pkt 700fpkt"];
32--45[label="0.00140056;1pkt 1fpkt"];
32--250[label="0.0120482;1pkt 1fpkt"];
32--278[label="0.00140056;1pkt 1fpkt"];
32--971[label="1;95pkt 95fpkt"];
32--1024[label="0.0120482;1pkt 1fpkt"];
32--1068[label="0.00140056;1pkt 1fpkt"];
32--1124[label="0.00140056;1pkt 1fpkt"];
32--1190[label="1;409pkt 409fpkt"];
32--1741[label="0.00140056;1pkt 1fpkt"];
32--1964[label="0.0769231;1pkt 1fpkt"];
32--2208[label="0.0113636;1pkt 1fpkt"];
32--2215[label="0.00140056;1pkt 1fpkt"];
35--971[label="1;95pkt 95fpkt"];
35--1190[label="0.977995;400pkt 400fpkt"];
418--1081[label="1;638pkt 638fpkt"];
543--826[label="1;85pkt 85fpkt"];
543--1452[label="1;126pkt 126fpkt"];
543--1736[label="0.966667;29pkt 29fpkt"];
599--680[label="1;12pkt 12fpkt"];
599--1355[label="1;12pkt 12fpkt"];
599--1893[label="1;12pkt 12fpkt"];
680--1355[label="1;12pkt 12fpkt"];
680--1893[label="1;12pkt 12fpkt"];
764--765[label="1;18pkt 18fpkt"];
764--1351[label="1;18pkt 18fpkt"];
764--1587[label="1;18pkt 18fpkt"];
765--1351[label="1;18pkt 18fpkt"];
765--1587[label="1;18pkt 18fpkt"];
826--1452[label="0.964706;82pkt 82fpkt"];
971--1190[label="1;95pkt 95fpkt"];
1190--1741[label="0.00244499;1pkt 1fpkt"];
1190--2215[label="0.00244499;1pkt 1fpkt"];
1351--1587[label="1;18pkt 18fpkt"];
1355--1893[label="1;12pkt 12fpkt"];
1452--1736[label="0.966667;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="44.81.191.191"/>
      <filter dst_ip="194.251.76.57" dst_port="80" src_ip="148.173.141.172"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
186[label="160.43.26.206;s;108pkt 108fpkt", shape=diamond, color=yellow];
213[label="92.107.153.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
774[label="92.106.5.30;d;2pkt 2fpkt", shape=diamond, color=yellow];
1046[label="160.43.26.206;s;108pkt 108fpkt", shape=hexagon, color=black];
1098[label="92.107.153.36;d;1pkt 1fpkt", shape=hexagon, color=black];
2135[label="160.43.26.206;111pkt 111fpkt", shape=pentagon, color=darkviolet];
2448[label="160.43.26.206;112pkt 112fpkt", shape=invtriangle, color=brown];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.43.26.206:*, *:8888}[76.7857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (37.8104%)&lt;BR/&gt; 7777: (3.16027%)&lt;BR/&gt; 4567: (2.25734%)&lt;BR/&gt; 0: (2.0316%)&lt;BR/&gt; 6699: (1.12867%)&gt;];
}
186--213[label="1;1pkt 1fpkt"];
186--774[label="1;2pkt 2fpkt"];
186--1046[label="1;108pkt 108fpkt"];
186--1098[label="1;1pkt 1fpkt"];
186--2135[label="0.990741;107pkt 107fpkt"];
186--2448[label="1;108pkt 108fpkt"];
213--1046[label="1;1pkt 1fpkt"];
213--1098[label="1;1pkt 1fpkt"];
213--2135[label="1;1pkt 1fpkt"];
213--2448[label="1;1pkt 1fpkt"];
774--1046[label="1;2pkt 2fpkt"];
774--2135[label="1;2pkt 2fpkt"];
774--2448[label="1;2pkt 2fpkt"];
1046--1098[label="1;1pkt 1fpkt"];
1046--2135[label="0.990741;107pkt 107fpkt"];
1046--2448[label="1;108pkt 108fpkt"];
1098--2135[label="1;1pkt 1fpkt"];
1098--2448[label="1;1pkt 1fpkt"];
2135--2448[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="160.43.26.206"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,011,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
113[label="46.50.31.75;s;2pkt 2fpkt", shape=diamond, color=yellow];
255[label="144.52.196.192;d;2558pkt 2558fpkt", shape=diamond, color=yellow];
256[label="196.228.78.234;s;2550pkt 2550fpkt", shape=diamond, color=yellow];
581[label="46.50.31.74;s;6pkt 6fpkt", shape=diamond, color=yellow];
1118[label="196.228.78.234;s;2304pkt 2304fpkt", shape=hexagon, color=black];
1122[label="46.50.31.75;s;2pkt 2fpkt", shape=hexagon, color=black];
1185[label="46.50.31.74;s;4pkt 4fpkt", shape=hexagon, color=black];
1346[label="144.52.196.192;d;1818pkt 1818fpkt", shape=hexagon, color=black];
1821[label="46.50.31.74;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2345[label="46.50.31.74;1pkt 1fpkt", shape=invtriangle, color=brown];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.228.78.234:80, 144.52.196.192:*}[99.6873%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8378%)&lt;BR/&gt; 21: (0.043262%)&lt;BR/&gt; 50501: (0.021631%)&lt;BR/&gt; 36592: (0.021631%)&lt;BR/&gt; 28230: (0.021631%)&gt;];
}
113--255[label="1;2pkt 2fpkt"];
113--1122[label="1;2pkt 2fpkt"];
113--1346[label="1;2pkt 2fpkt"];
255--256[label="1;2550pkt 2550fpkt"];
255--581[label="1;6pkt 6fpkt"];
255--1118[label="1;2304pkt 2304fpkt"];
255--1122[label="1;2pkt 2fpkt"];
255--1185[label="1;4pkt 4fpkt"];
255--1346[label="1;1818pkt 1818fpkt"];
255--1598[label="0.0892388;136pkt 136fpkt"];
255--1602[label="0.0892388;136pkt 136fpkt"];
255--1604[label="0.0892388;136pkt 136fpkt"];
255--1821[label="1;1pkt 1fpkt"];
255--2345[label="1;1pkt 1fpkt"];
256--1118[label="1;2304pkt 2304fpkt"];
256--1346[label="0.9967;1812pkt 1812fpkt"];
256--1598[label="0.0892388;136pkt 136fpkt"];
256--1602[label="0.0892388;136pkt 136fpkt"];
256--1604[label="0.0892388;136pkt 136fpkt"];
581--1185[label="1;4pkt 4fpkt"];
581--1346[label="0.666667;4pkt 4fpkt"];
581--1821[label="1;1pkt 1fpkt"];
581--2345[label="1;1pkt 1fpkt"];
1118--1346[label="0.9967;1812pkt 1812fpkt"];
1118--1598[label="0.0892388;136pkt 136fpkt"];
1118--1602[label="0.0892388;136pkt 136fpkt"];
1118--1604[label="0.0892388;136pkt 136fpkt"];
1122--1346[label="1;2pkt 2fpkt"];
1185--1346[label="1;4pkt 4fpkt"];
1346--1598[label="0.0892388;136pkt 136fpkt"];
1346--1602[label="0.0892388;136pkt 136fpkt"];
1346--1604[label="0.0892388;136pkt 136fpkt"];
1821--2345[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.52.196.192" src_ip="196.228.78.234" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929312,2.00887,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
98[label="141.165.159.227;s;617pkt 617fpkt", shape=diamond, color=yellow];
521[label="200.16.85.218;d;138pkt 138fpkt", shape=diamond, color=yellow];
540[label="198.236.43.41;d;51pkt 51fpkt", shape=diamond, color=yellow];
541[label="209.245.142.241;d;34pkt 34fpkt", shape=diamond, color=yellow];
596[label="207.66.50.72;d;39pkt 39fpkt", shape=diamond, color=yellow];
603[label="141.165.212.75;s;111pkt 111fpkt", shape=diamond, color=yellow];
712[label="149.74.88.196;d;23pkt 23fpkt", shape=diamond, color=yellow];
842[label="207.215.182.87;d;16pkt 16fpkt", shape=diamond, color=yellow];
859[label="141.165.228.29;s;162pkt 162fpkt", shape=diamond, color=yellow];
863[label="194.31.128.201;d;151pkt 151fpkt", shape=diamond, color=yellow];
1125[label="200.16.85.218;d;128pkt 128fpkt", shape=hexagon, color=black];
1150[label="209.245.142.241;d;34pkt 34fpkt", shape=hexagon, color=black];
1280[label="141.165.159.227;s;429pkt 429fpkt", shape=hexagon, color=black];
1313[label="149.74.88.196;d;19pkt 19fpkt", shape=hexagon, color=black];
1409[label="141.165.212.75;s;88pkt 88fpkt", shape=hexagon, color=black];
1481[label="194.31.128.201;d;145pkt 145fpkt", shape=hexagon, color=black];
1570[label="149.74.88.196;d;16pkt 16fpkt", shape=polygon, color=gold];
1683[label="141.165.228.29;182pkt 182fpkt", shape=pentagon, color=darkviolet];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.165.159.227:*, *:80}[32.7851%]&lt;BR/&gt;{141.165.159.227:*, *:8080}[28.5088%]&lt;BR/&gt;{141.165.228.29:*, *:*}[20.1754%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5367%)&lt;BR/&gt; 8080: (10.2812%)&lt;BR/&gt; 3128: (1.21695%)&lt;BR/&gt; 9081: (0.923206%)&lt;BR/&gt; 1894: (0.125892%)&gt;];
}
98--521[label="0.65942;91pkt 91fpkt"];
98--540[label="0.686275;35pkt 35fpkt"];
98--541[label="1;34pkt 34fpkt"];
98--596[label="1;39pkt 39fpkt"];
98--712[label="1;23pkt 23fpkt"];
98--842[label="1;16pkt 16fpkt"];
98--1125[label="0.632812;81pkt 81fpkt"];
98--1150[label="1;34pkt 34fpkt"];
98--1280[label="1;429pkt 429fpkt"];
98--1313[label="1;19pkt 19fpkt"];
98--1570[label="1;16pkt 16fpkt"];
521--603[label="0.423423;47pkt 47fpkt"];
521--1125[label="1;128pkt 128fpkt"];
521--1280[label="0.550725;76pkt 76fpkt"];
521--1409[label="0.534091;47pkt 47fpkt"];
540--1280[label="0.54902;28pkt 28fpkt"];
540--1683[label="0.27451;14pkt 14fpkt"];
541--1150[label="1;34pkt 34fpkt"];
541--1280[label="0.676471;23pkt 23fpkt"];
596--1280[label="0.666667;26pkt 26fpkt"];
603--619[label="0.018018;2pkt 2fpkt"];
603--1125[label="0.423423;47pkt 47fpkt"];
603--1242[label="0.00900901;1pkt 1fpkt"];
603--1409[label="1;88pkt 88fpkt"];
603--1598[label="0.0540541;6pkt 6fpkt"];
603--1602[label="0.0540541;6pkt 6fpkt"];
603--1604[label="0.0540541;6pkt 6fpkt"];
712--1280[label="0.695652;16pkt 16fpkt"];
712--1313[label="1;19pkt 19fpkt"];
712--1570[label="1;16pkt 16fpkt"];
842--1280[label="0.625;10pkt 10fpkt"];
859--863[label="1;151pkt 151fpkt"];
859--1481[label="1;145pkt 145fpkt"];
859--1683[label="1;162pkt 162fpkt"];
863--1481[label="1;145pkt 145fpkt"];
863--1683[label="1;151pkt 151fpkt"];
1125--1280[label="0.59375;76pkt 76fpkt"];
1125--1409[label="0.534091;47pkt 47fpkt"];
1150--1280[label="0.676471;23pkt 23fpkt"];
1280--1313[label="0.842105;16pkt 16fpkt"];
1280--1570[label="1;16pkt 16fpkt"];
1313--1570[label="1;16pkt 16fpkt"];
1409--1598[label="0.0681818;6pkt 6fpkt"];
1409--1602[label="0.0681818;6pkt 6fpkt"];
1409--1604[label="0.0681818;6pkt 6fpkt"];
1481--1683[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter src_ip="141.165.228.29"/>
      <filter dst_port="80" src_ip="141.165.159.227"/>
      <filter dst_port="8080" src_ip="141.165.159.227"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929312,2.00887,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
95[label="160.34.253.169;d;8pkt 8fpkt", shape=diamond, color=yellow];
96[label="149.56.237.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
156[label="147.33.173.158;s;1pkt 1fpkt", shape=diamond, color=yellow];
188[label="208.55.244.43;s;1pkt 1fpkt", shape=diamond, color=yellow];
309[label="168.148.141.54;s;1pkt 1fpkt", shape=diamond, color=yellow];
323[label="218.14.190.157;s;1pkt 1fpkt", shape=diamond, color=yellow];
770[label="208.104.206.147;s;1pkt 1fpkt", shape=diamond, color=yellow];
855[label="92.11.4.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
987[label="160.34.253.169;d;8pkt 8fpkt", shape=hexagon, color=black];
1043[label="147.33.173.158;s;1pkt 1fpkt", shape=hexagon, color=black];
1137[label="168.148.141.54;s;1pkt 1fpkt", shape=hexagon, color=black];
1140[label="208.55.244.43;s;1pkt 1fpkt", shape=hexagon, color=black];
1279[label="149.56.237.74;s;1pkt 1fpkt", shape=hexagon, color=black];
1532[label="160.34.253.169;d;8pkt 8fpkt", shape=polygon, color=gold];
1541[label="147.33.173.158;s;1pkt 1fpkt", shape=polygon, color=gold];
1824[label="149.56.237.74;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2027[label="218.14.190.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6346, 160.34.253.169:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 3739: (7.89474%)&lt;BR/&gt; 3212: (7.89474%)&lt;BR/&gt; 3215: (6.57895%)&lt;BR/&gt; 3166: (6.57895%)&gt;];
}
95--96[label="1;1pkt 1fpkt"];
95--156[label="1;1pkt 1fpkt"];
95--188[label="1;1pkt 1fpkt"];
95--309[label="1;1pkt 1fpkt"];
95--323[label="1;1pkt 1fpkt"];
95--770[label="1;1pkt 1fpkt"];
95--855[label="1;1pkt 1fpkt"];
95--987[label="1;8pkt 8fpkt"];
95--1043[label="1;1pkt 1fpkt"];
95--1137[label="1;1pkt 1fpkt"];
95--1140[label="1;1pkt 1fpkt"];
95--1279[label="1;1pkt 1fpkt"];
95--1532[label="1;8pkt 8fpkt"];
95--1541[label="1;1pkt 1fpkt"];
95--1824[label="1;1pkt 1fpkt"];
95--2027[label="1;1pkt 1fpkt"];
96--987[label="1;1pkt 1fpkt"];
96--1279[label="1;1pkt 1fpkt"];
96--1532[label="1;1pkt 1fpkt"];
96--1824[label="1;1pkt 1fpkt"];
156--987[label="1;1pkt 1fpkt"];
156--1043[label="1;1pkt 1fpkt"];
156--1532[label="1;1pkt 1fpkt"];
156--1541[label="1;1pkt 1fpkt"];
188--987[label="1;1pkt 1fpkt"];
188--1140[label="1;1pkt 1fpkt"];
188--1532[label="1;1pkt 1fpkt"];
309--987[label="1;1pkt 1fpkt"];
309--1137[label="1;1pkt 1fpkt"];
309--1532[label="1;1pkt 1fpkt"];
323--987[label="1;1pkt 1fpkt"];
323--1532[label="1;1pkt 1fpkt"];
323--2027[label="1;1pkt 1fpkt"];
770--987[label="1;1pkt 1fpkt"];
770--1532[label="1;1pkt 1fpkt"];
855--987[label="1;1pkt 1fpkt"];
855--1532[label="1;1pkt 1fpkt"];
987--1043[label="1;1pkt 1fpkt"];
987--1137[label="1;1pkt 1fpkt"];
987--1140[label="1;1pkt 1fpkt"];
987--1279[label="1;1pkt 1fpkt"];
987--1532[label="1;8pkt 8fpkt"];
987--1541[label="1;1pkt 1fpkt"];
987--1824[label="1;1pkt 1fpkt"];
987--2027[label="1;1pkt 1fpkt"];
1043--1532[label="1;1pkt 1fpkt"];
1043--1541[label="1;1pkt 1fpkt"];
1137--1532[label="1;1pkt 1fpkt"];
1140--1532[label="1;1pkt 1fpkt"];
1279--1532[label="1;1pkt 1fpkt"];
1279--1824[label="1;1pkt 1fpkt"];
1532--1541[label="1;1pkt 1fpkt"];
1532--1824[label="1;1pkt 1fpkt"];
1532--2027[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.34.253.169" src_port="6346"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
316[label="144.52.225.57;s;32pkt 32fpkt", shape=diamond, color=yellow];
439[label="92.33.149.56;d;1pkt 1fpkt", shape=diamond, color=yellow];
802[label="208.57.229.113;d;2pkt 2fpkt", shape=diamond, color=yellow];
1152[label="92.33.149.56;d;1pkt 1fpkt", shape=hexagon, color=black];
1470[label="208.57.229.113;d;2pkt 2fpkt", shape=hexagon, color=black];
1775[label="144.52.225.57;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2325[label="144.52.225.57;32pkt 32fpkt", shape=invtriangle, color=brown];
2521[label="144.52.225.57;32pkt 32fpkt", shape=invhouse, color=bisque];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.52.225.57:*, 219.21.238.2:80}[43.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.218%)&lt;BR/&gt; 8000: (4.51128%)&lt;BR/&gt; 52655: (2.25564%)&lt;BR/&gt; 52654: (2.25564%)&lt;BR/&gt; 50496: (2.25564%)&gt;];
}
316--439[label="1;1pkt 1fpkt"];
316--802[label="1;2pkt 2fpkt"];
316--1152[label="1;1pkt 1fpkt"];
316--1470[label="1;2pkt 2fpkt"];
316--1775[label="1;31pkt 31fpkt"];
316--2325[label="1;32pkt 32fpkt"];
316--2521[label="1;32pkt 32fpkt"];
439--1152[label="1;1pkt 1fpkt"];
439--1775[label="1;1pkt 1fpkt"];
439--2325[label="1;1pkt 1fpkt"];
439--2521[label="1;1pkt 1fpkt"];
802--1470[label="1;2pkt 2fpkt"];
802--1775[label="1;2pkt 2fpkt"];
802--2325[label="1;2pkt 2fpkt"];
802--2521[label="1;2pkt 2fpkt"];
1152--1775[label="1;1pkt 1fpkt"];
1152--2325[label="1;1pkt 1fpkt"];
1152--2521[label="1;1pkt 1fpkt"];
1470--1775[label="1;2pkt 2fpkt"];
1470--2325[label="1;2pkt 2fpkt"];
1470--2521[label="1;2pkt 2fpkt"];
1775--2325[label="1;31pkt 31fpkt"];
1775--2521[label="1;31pkt 31fpkt"];
2325--2521[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="219.21.238.2" dst_port="80" src_ip="144.52.225.57"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22207,1.96147,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
65[label="164.202.238.110;d;14pkt 14fpkt", shape=diamond, color=yellow];
68[label="196.85.64.115;s;1pkt 1fpkt", shape=diamond, color=yellow];
169[label="197.116.138.223;d;312pkt 312fpkt", shape=diamond, color=yellow];
172[label="94.78.53.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
229[label="219.95.226.228;s;3pkt 3fpkt", shape=diamond, color=yellow];
356[label="144.52.38.236;d;162pkt 162fpkt", shape=diamond, color=yellow];
358[label="213.218.235.134;s;362pkt 362fpkt", shape=diamond, color=yellow];
455[label="215.215.82.57;s;3pkt 3fpkt", shape=diamond, color=yellow];
649[label="219.213.170.242;s;37pkt 37fpkt", shape=diamond, color=yellow];
713[label="197.116.129.94;d;155pkt 155fpkt", shape=diamond, color=yellow];
924[label="164.202.239.245;d;20pkt 20fpkt", shape=diamond, color=yellow];
927[label="196.203.20.176;s;5pkt 5fpkt", shape=diamond, color=yellow];
1156[label="215.215.82.57;s;3pkt 3fpkt", shape=hexagon, color=black];
1162[label="144.52.38.236;d;162pkt 162fpkt", shape=hexagon, color=black];
1294[label="94.78.53.69;s;1pkt 1fpkt", shape=hexagon, color=black];
1343[label="164.202.238.110;d;11pkt 11fpkt", shape=hexagon, color=black];
1374[label="197.116.129.94;d;155pkt 155fpkt", shape=hexagon, color=black];
1484[label="196.203.20.176;s;5pkt 5fpkt", shape=hexagon, color=black];
1555[label="215.215.82.57;s;3pkt 3fpkt", shape=polygon, color=gold];
1689[label="219.220.19.33;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1781[label="209.108.244.60;27pkt 27fpkt", shape=pentagon, color=darkviolet];
1796[label="194.197.29.67;9pkt 9fpkt", shape=pentagon, color=darkviolet];
1839[label="219.95.226.77;12pkt 12fpkt", shape=pentagon, color=darkviolet];
1967[label="213.218.235.134;370pkt 370fpkt", shape=pentagon, color=darkviolet];
2069[label="196.203.20.176;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2160[label="194.97.4.214;44pkt 44fpkt", shape=pentagon, color=darkviolet];
2195[label="219.95.226.228;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2335[label="194.197.29.67;9pkt 9fpkt", shape=invtriangle, color=brown];
2389[label="213.218.235.134;370pkt 370fpkt", shape=invtriangle, color=brown];
2472[label="219.95.226.228;16pkt 16fpkt", shape=invtriangle, color=brown];
2523[label="194.197.29.67;9pkt 9fpkt", shape=invhouse, color=bisque];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[33.5358%]&lt;BR/&gt;{213.218.235.134:*, 197.116.138.223:80}[31.3487%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5091%)&lt;BR/&gt; 53: (1.94468%)&lt;BR/&gt; 46200: (0.194468%)&lt;BR/&gt; 45898: (0.194468%)&lt;BR/&gt; 554: (0.151253%)&gt;];
}
65--68[label="1;1pkt 1fpkt"];
65--358[label="0.928571;13pkt 13fpkt"];
65--1343[label="1;11pkt 11fpkt"];
65--1967[label="0.928571;13pkt 13fpkt"];
65--2389[label="0.928571;13pkt 13fpkt"];
68--1343[label="1;1pkt 1fpkt"];
169--172[label="1;1pkt 1fpkt"];
169--229[label="0.333333;1pkt 1fpkt"];
169--358[label="0.810897;253pkt 253fpkt"];
169--455[label="1;3pkt 3fpkt"];
169--1156[label="1;3pkt 3fpkt"];
169--1294[label="1;1pkt 1fpkt"];
169--1555[label="1;3pkt 3fpkt"];
169--1967[label="0.810897;253pkt 253fpkt"];
169--2097[label="0.111111;2pkt 2fpkt"];
169--2195[label="0.117647;2pkt 2fpkt"];
169--2389[label="0.810897;253pkt 253fpkt"];
169--2472[label="0.125;2pkt 2fpkt"];
172--1294[label="1;1pkt 1fpkt"];
229--2195[label="1;3pkt 3fpkt"];
229--2472[label="1;3pkt 3fpkt"];
356--404[label="0.0272109;4pkt 4fpkt"];
356--649[label="0.783784;29pkt 29fpkt"];
356--948[label="0.020202;2pkt 2fpkt"];
356--1074[label="0.0677966;4pkt 4fpkt"];
356--1162[label="1;162pkt 162fpkt"];
356--1506[label="0.020202;2pkt 2fpkt"];
356--1598[label="0.0925926;15pkt 15fpkt"];
356--1602[label="0.0925926;15pkt 15fpkt"];
356--1604[label="0.0925926;15pkt 15fpkt"];
356--1689[label="0.181818;2pkt 2fpkt"];
356--1796[label="1;9pkt 9fpkt"];
356--2160[label="0.25;11pkt 11fpkt"];
356--2335[label="1;9pkt 9fpkt"];
356--2523[label="1;9pkt 9fpkt"];
358--602[label="0.027027;3pkt 3fpkt"];
358--713[label="0.193548;30pkt 30fpkt"];
358--886[label="0.0895522;6pkt 6fpkt"];
358--924[label="0.1;2pkt 2fpkt"];
358--1225[label="0.027027;3pkt 3fpkt"];
358--1298[label="0.030303;1pkt 1fpkt"];
358--1343[label="0.909091;10pkt 10fpkt"];
358--1374[label="0.193548;30pkt 30fpkt"];
358--1967[label="1;362pkt 362fpkt"];
358--2389[label="1;362pkt 362fpkt"];
455--1156[label="1;3pkt 3fpkt"];
455--1555[label="1;3pkt 3fpkt"];
649--713[label="0.216216;8pkt 8fpkt"];
649--1162[label="0.783784;29pkt 29fpkt"];
649--1374[label="0.216216;8pkt 8fpkt"];
713--1374[label="1;155pkt 155fpkt"];
713--1598[label="0.00645161;1pkt 1fpkt"];
713--1602[label="0.00645161;1pkt 1fpkt"];
713--1604[label="0.00645161;1pkt 1fpkt"];
713--1781[label="0.0740741;2pkt 2fpkt"];
713--1839[label="0.166667;2pkt 2fpkt"];
713--1967[label="0.193548;30pkt 30fpkt"];
713--1980[label="0.0526316;2pkt 2fpkt"];
713--2097[label="0.0555556;1pkt 1fpkt"];
713--2160[label="0.0227273;1pkt 1fpkt"];
713--2195[label="0.176471;3pkt 3fpkt"];
713--2328[label="0.0769231;1pkt 1fpkt"];
713--2389[label="0.193548;30pkt 30fpkt"];
713--2396[label="0.0512821;2pkt 2fpkt"];
713--2472[label="0.1875;3pkt 3fpkt"];
924--927[label="1;5pkt 5fpkt"];
924--1484[label="1;5pkt 5fpkt"];
924--1967[label="0.1;2pkt 2fpkt"];
924--2069[label="1;5pkt 5fpkt"];
924--2389[label="0.1;2pkt 2fpkt"];
927--1484[label="1;5pkt 5fpkt"];
927--2069[label="1;5pkt 5fpkt"];
1156--1555[label="1;3pkt 3fpkt"];
1162--1506[label="0.020202;2pkt 2fpkt"];
1162--1598[label="0.0925926;15pkt 15fpkt"];
1162--1602[label="0.0925926;15pkt 15fpkt"];
1162--1604[label="0.0925926;15pkt 15fpkt"];
1162--1689[label="0.181818;2pkt 2fpkt"];
1162--1796[label="1;9pkt 9fpkt"];
1162--2160[label="0.25;11pkt 11fpkt"];
1162--2335[label="1;9pkt 9fpkt"];
1162--2523[label="1;9pkt 9fpkt"];
1343--1967[label="0.909091;10pkt 10fpkt"];
1343--2389[label="0.909091;10pkt 10fpkt"];
1374--1598[label="0.00645161;1pkt 1fpkt"];
1374--1602[label="0.00645161;1pkt 1fpkt"];
1374--1604[label="0.00645161;1pkt 1fpkt"];
1374--1781[label="0.0740741;2pkt 2fpkt"];
1374--1839[label="0.166667;2pkt 2fpkt"];
1374--1967[label="0.193548;30pkt 30fpkt"];
1374--1980[label="0.0526316;2pkt 2fpkt"];
1374--2097[label="0.0555556;1pkt 1fpkt"];
1374--2160[label="0.0227273;1pkt 1fpkt"];
1374--2195[label="0.176471;3pkt 3fpkt"];
1374--2328[label="0.0769231;1pkt 1fpkt"];
1374--2389[label="0.193548;30pkt 30fpkt"];
1374--2396[label="0.0512821;2pkt 2fpkt"];
1374--2472[label="0.1875;3pkt 3fpkt"];
1484--2069[label="1;5pkt 5fpkt"];
1796--2335[label="1;9pkt 9fpkt"];
1796--2523[label="1;9pkt 9fpkt"];
1967--2389[label="1;370pkt 370fpkt"];
2195--2472[label="1;16pkt 16fpkt"];
2335--2523[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="197.116.138.223" dst_port="80" src_ip="213.218.235.134"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
93[label="144.52.225.56;s;485pkt 485fpkt", shape=diamond, color=yellow];
272[label="92.135.7.203;d;434pkt 434fpkt", shape=diamond, color=yellow];
367[label="219.215.124.196;d;4pkt 4fpkt", shape=diamond, color=yellow];
456[label="92.33.149.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
1157[label="92.33.149.51;d;1pkt 1fpkt", shape=hexagon, color=black];
1169[label="219.215.124.196;d;4pkt 4fpkt", shape=hexagon, color=black];
1771[label="144.52.225.56;488pkt 488fpkt", shape=pentagon, color=darkviolet];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.52.225.56:*, 92.135.7.203:80}[97.3415%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2943%)&lt;BR/&gt; 554: (0.42343%)&lt;BR/&gt; 0: (0.282287%)&lt;BR/&gt; 42467: (0.141143%)&lt;BR/&gt; 42250: (0.141143%)&gt;];
}
93--272[label="1;434pkt 434fpkt"];
93--367[label="1;4pkt 4fpkt"];
93--456[label="1;1pkt 1fpkt"];
93--1157[label="1;1pkt 1fpkt"];
93--1169[label="1;4pkt 4fpkt"];
93--1771[label="0.997938;484pkt 484fpkt"];
272--1771[label="1;434pkt 434fpkt"];
367--1169[label="1;4pkt 4fpkt"];
367--1771[label="1;4pkt 4fpkt"];
456--1157[label="1;1pkt 1fpkt"];
456--1771[label="1;1pkt 1fpkt"];
1157--1771[label="1;1pkt 1fpkt"];
1169--1771[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="92.135.7.203" dst_port="80" src_ip="144.52.225.56"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
251[label="144.52.164.171;s;753pkt 753fpkt", shape=diamond, color=yellow];
373[label="44.145.18.187;d;250pkt 250fpkt", shape=diamond, color=yellow];
457[label="215.216.243.196;d;219pkt 219fpkt", shape=diamond, color=yellow];
1061[label="44.145.18.187;d;250pkt 250fpkt", shape=hexagon, color=black];
1159[label="215.216.243.196;d;149pkt 149fpkt", shape=hexagon, color=black];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.52.164.171:25, *:*}[49.2829%]&lt;BR/&gt;{144.52.164.171:*, *:113}[48.631%]&lt;BR/&gt;{144.52.164.171:*, 44.145.18.187:*}[32.5945%]&lt;BR/&gt;{144.52.164.171:*, 215.216.243.196:*}[26.7275%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25.0771%)&lt;BR/&gt; 113: (24.8612%)&lt;BR/&gt; 48415: (0.123381%)&lt;BR/&gt; 15974: (0.123381%)&lt;BR/&gt; 1814: (0.123381%)&gt;];
}
251--373[label="1;250pkt 250fpkt"];
251--457[label="0.936073;205pkt 205fpkt"];
251--1061[label="1;250pkt 250fpkt"];
251--1159[label="0.90604;135pkt 135fpkt"];
373--1061[label="1;250pkt 250fpkt"];
457--564[label="0.0639269;14pkt 14fpkt"];
457--1159[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter dst_ip="44.145.18.187" src_ip="144.52.164.171"/>
      <filter dst_ip="215.216.243.196" src_ip="144.52.164.171"/>
      <filter src_ip="144.52.164.171" src_port="25"/>
      <filter dst_port="113" src_ip="144.52.164.171"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
92[label="144.52.225.56;d;488pkt 488fpkt", shape=diamond, color=yellow];
94[label="92.135.7.203;s;472pkt 472fpkt", shape=diamond, color=yellow];
214[label="92.33.149.51;s;1pkt 1fpkt", shape=diamond, color=yellow];
228[label="219.215.124.196;s;4pkt 4fpkt", shape=diamond, color=yellow];
1170[label="219.215.124.196;s;4pkt 4fpkt", shape=hexagon, color=black];
1278[label="144.52.225.56;d;390pkt 390fpkt", shape=hexagon, color=black];
1757[label="92.33.149.51;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2125[label="92.135.7.203;476pkt 476fpkt", shape=pentagon, color=darkviolet];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.135.7.203:80, 144.52.225.56:*}[96.748%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4009%)&lt;BR/&gt; 554: (0.326797%)&lt;BR/&gt; 42829: (0.108932%)&lt;BR/&gt; 42828: (0.108932%)&lt;BR/&gt; 42827: (0.108932%)&gt;];
}
92--94[label="1;472pkt 472fpkt"];
92--214[label="1;1pkt 1fpkt"];
92--228[label="1;4pkt 4fpkt"];
92--1170[label="1;4pkt 4fpkt"];
92--1278[label="1;390pkt 390fpkt"];
92--1598[label="0.0553279;27pkt 27fpkt"];
92--1602[label="0.0553279;27pkt 27fpkt"];
92--1604[label="0.0553279;27pkt 27fpkt"];
92--1757[label="1;1pkt 1fpkt"];
92--2125[label="0.991597;472pkt 472fpkt"];
92--2249[label="0.125;1pkt 1fpkt"];
94--1278[label="0.958974;374pkt 374fpkt"];
94--1598[label="0.0444915;21pkt 21fpkt"];
94--1602[label="0.0444915;21pkt 21fpkt"];
94--1604[label="0.0444915;21pkt 21fpkt"];
94--2125[label="1;472pkt 472fpkt"];
214--1278[label="1;1pkt 1fpkt"];
214--1757[label="1;1pkt 1fpkt"];
228--1170[label="1;4pkt 4fpkt"];
228--1278[label="1;4pkt 4fpkt"];
1170--1278[label="1;4pkt 4fpkt"];
1278--1598[label="0.0692308;27pkt 27fpkt"];
1278--1602[label="0.0692308;27pkt 27fpkt"];
1278--1604[label="0.0692308;27pkt 27fpkt"];
1278--1757[label="1;1pkt 1fpkt"];
1278--2125[label="0.958974;374pkt 374fpkt"];
1278--2249[label="0.125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.52.225.56" src_ip="92.135.7.203" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22207,1.96147,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
29[label="196.33.93.67;d;39pkt 39fpkt", shape=diamond, color=yellow];
31[label="16.71.121.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
153[label="16.82.206.83;s;5pkt 5fpkt", shape=diamond, color=yellow];
387[label="94.170.128.186;s;3pkt 3fpkt", shape=diamond, color=yellow];
444[label="196.81.61.194;s;1pkt 1fpkt", shape=diamond, color=yellow];
576[label="16.66.194.71;s;6pkt 6fpkt", shape=diamond, color=yellow];
701[label="144.52.156.176;d;138pkt 138fpkt", shape=diamond, color=yellow];
810[label="46.6.59.161;s;2pkt 2fpkt", shape=diamond, color=yellow];
811[label="215.124.88.9;s;7pkt 7fpkt", shape=diamond, color=yellow];
932[label="16.244.109.211;s;1pkt 1fpkt", shape=diamond, color=yellow];
970[label="16.71.121.217;s;1pkt 1fpkt", shape=hexagon, color=black];
999[label="16.82.206.83;s;4pkt 4fpkt", shape=hexagon, color=black];
1020[label="196.33.93.67;d;39pkt 39fpkt", shape=hexagon, color=black];
1095[label="196.81.61.194;s;1pkt 1fpkt", shape=hexagon, color=black];
1181[label="94.170.128.186;s;3pkt 3fpkt", shape=hexagon, color=black];
1258[label="16.66.194.71;s;6pkt 6fpkt", shape=hexagon, color=black];
1477[label="46.6.59.161;s;2pkt 2fpkt", shape=hexagon, color=black];
1478[label="215.124.88.9;s;5pkt 5fpkt", shape=hexagon, color=black];
1498[label="144.52.156.176;d;138pkt 138fpkt", shape=hexagon, color=black];
1557[label="196.33.93.67;d;39pkt 39fpkt", shape=polygon, color=gold];
2094[label="94.170.128.186;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2161[label="92.175.10.214;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2167[label="92.175.10.217;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2258[label="150.103.65.254;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2273[label="215.124.88.9;6pkt 6fpkt", shape=invtriangle, color=brown];
2431[label="94.170.128.186;2pkt 2fpkt", shape=invtriangle, color=brown];
2552[label="94.170.128.186;3pkt 3fpkt", shape=invhouse, color=bisque];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8888, 144.52.156.176:*}[36.2637%]&lt;BR/&gt;{92.175.10.44:8875, 144.52.156.176:*}[21.978%]&lt;BR/&gt;{*:*, 196.33.93.67:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (16.3793%)&lt;BR/&gt; 1214: (15.7328%)&lt;BR/&gt; 8875: (13.2543%)&lt;BR/&gt; 53: (2.15517%)&lt;BR/&gt; 1024: (1.93966%)&gt;];
}
29--31[label="1;1pkt 1fpkt"];
29--153[label="1;5pkt 5fpkt"];
29--387[label="1;3pkt 3fpkt"];
29--444[label="1;1pkt 1fpkt"];
29--576[label="1;6pkt 6fpkt"];
29--810[label="1;2pkt 2fpkt"];
29--811[label="1;7pkt 7fpkt"];
29--932[label="1;1pkt 1fpkt"];
29--970[label="1;1pkt 1fpkt"];
29--999[label="1;4pkt 4fpkt"];
29--1020[label="1;39pkt 39fpkt"];
29--1095[label="1;1pkt 1fpkt"];
29--1181[label="1;3pkt 3fpkt"];
29--1258[label="1;6pkt 6fpkt"];
29--1477[label="1;2pkt 2fpkt"];
29--1478[label="1;5pkt 5fpkt"];
29--1557[label="1;39pkt 39fpkt"];
29--2094[label="1;3pkt 3fpkt"];
29--2161[label="0.2;1pkt 1fpkt"];
29--2258[label="1;1pkt 1fpkt"];
29--2273[label="1;6pkt 6fpkt"];
29--2431[label="1;2pkt 2fpkt"];
29--2552[label="1;3pkt 3fpkt"];
31--970[label="1;1pkt 1fpkt"];
31--1020[label="1;1pkt 1fpkt"];
31--1557[label="1;1pkt 1fpkt"];
153--999[label="1;4pkt 4fpkt"];
153--1020[label="1;5pkt 5fpkt"];
153--1557[label="1;5pkt 5fpkt"];
387--1020[label="1;3pkt 3fpkt"];
387--1181[label="1;3pkt 3fpkt"];
387--1557[label="1;3pkt 3fpkt"];
387--2094[label="1;3pkt 3fpkt"];
387--2431[label="1;2pkt 2fpkt"];
387--2552[label="1;3pkt 3fpkt"];
444--1020[label="1;1pkt 1fpkt"];
444--1095[label="1;1pkt 1fpkt"];
444--1557[label="1;1pkt 1fpkt"];
576--1020[label="1;6pkt 6fpkt"];
576--1258[label="1;6pkt 6fpkt"];
576--1557[label="1;6pkt 6fpkt"];
701--1498[label="1;138pkt 138fpkt"];
701--2026[label="0.0909091;1pkt 1fpkt"];
701--2161[label="0.2;1pkt 1fpkt"];
701--2167[label="0.333333;1pkt 1fpkt"];
810--1020[label="1;2pkt 2fpkt"];
810--1477[label="1;2pkt 2fpkt"];
810--1557[label="1;2pkt 2fpkt"];
811--1020[label="1;7pkt 7fpkt"];
811--1478[label="1;5pkt 5fpkt"];
811--1557[label="1;7pkt 7fpkt"];
811--2273[label="1;6pkt 6fpkt"];
932--1020[label="1;1pkt 1fpkt"];
932--1557[label="1;1pkt 1fpkt"];
970--1020[label="1;1pkt 1fpkt"];
970--1557[label="1;1pkt 1fpkt"];
999--1020[label="1;4pkt 4fpkt"];
999--1557[label="1;4pkt 4fpkt"];
1020--1095[label="1;1pkt 1fpkt"];
1020--1181[label="1;3pkt 3fpkt"];
1020--1258[label="1;6pkt 6fpkt"];
1020--1477[label="1;2pkt 2fpkt"];
1020--1478[label="1;5pkt 5fpkt"];
1020--1557[label="1;39pkt 39fpkt"];
1020--2094[label="1;3pkt 3fpkt"];
1020--2161[label="0.2;1pkt 1fpkt"];
1020--2258[label="1;1pkt 1fpkt"];
1020--2273[label="1;6pkt 6fpkt"];
1020--2431[label="1;2pkt 2fpkt"];
1020--2552[label="1;3pkt 3fpkt"];
1095--1557[label="1;1pkt 1fpkt"];
1181--1557[label="1;3pkt 3fpkt"];
1181--2094[label="1;3pkt 3fpkt"];
1181--2431[label="1;2pkt 2fpkt"];
1181--2552[label="1;3pkt 3fpkt"];
1258--1557[label="1;6pkt 6fpkt"];
1477--1557[label="1;2pkt 2fpkt"];
1478--1557[label="1;5pkt 5fpkt"];
1478--2273[label="0.8;4pkt 4fpkt"];
1498--2026[label="0.0909091;1pkt 1fpkt"];
1498--2161[label="0.2;1pkt 1fpkt"];
1498--2167[label="0.333333;1pkt 1fpkt"];
1557--2094[label="1;3pkt 3fpkt"];
1557--2161[label="0.2;1pkt 1fpkt"];
1557--2258[label="1;1pkt 1fpkt"];
1557--2273[label="1;6pkt 6fpkt"];
1557--2431[label="1;2pkt 2fpkt"];
1557--2552[label="1;3pkt 3fpkt"];
2094--2431[label="1;2pkt 2fpkt"];
2094--2552[label="1;3pkt 3fpkt"];
2431--2552[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="196.33.93.67"/>
      <filter dst_ip="144.52.156.176" src_port="8888"/>
      <filter dst_ip="144.52.156.176" src_ip="92.175.10.44" src_port="8875"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,501,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
588[label="145.39.47.0;s;148pkt 148fpkt", shape=diamond, color=yellow];
594[label="214.24.37.136;d;146pkt 146fpkt", shape=diamond, color=yellow];
1187[label="145.39.47.0;s;149pkt 149fpkt", shape=hexagon, color=black];
1188[label="214.24.37.136;d;146pkt 146fpkt", shape=hexagon, color=black];
1605[label="145.39.47.0;150pkt 150fpkt", shape=pentagon, color=darkviolet];
2261[label="145.39.47.0;151pkt 151fpkt", shape=invtriangle, color=brown];
2491[label="145.39.47.0;150pkt 150fpkt", shape=invhouse, color=bisque];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.39.47.0:*, 214.24.37.136:21}[32.4503%]&lt;BR/&gt;{145.39.47.0:113, 214.24.37.136:*}[32.4503%]&lt;BR/&gt;{145.39.47.0:*, 214.24.37.136:20}[31.7881%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (16.4904%)&lt;BR/&gt; 21: (16.4904%)&lt;BR/&gt; 20: (16.1538%)&lt;BR/&gt; 80: (0.865385%)&lt;BR/&gt; 10632: (0.336538%)&gt;];
}
588--594[label="1;146pkt 146fpkt"];
588--1187[label="1;148pkt 148fpkt"];
588--1188[label="1;146pkt 146fpkt"];
588--1605[label="1;148pkt 148fpkt"];
588--2261[label="1;148pkt 148fpkt"];
588--2491[label="1;148pkt 148fpkt"];
594--1187[label="1;146pkt 146fpkt"];
594--1188[label="1;146pkt 146fpkt"];
594--1605[label="1;146pkt 146fpkt"];
594--2261[label="1;146pkt 146fpkt"];
594--2491[label="1;146pkt 146fpkt"];
1187--1188[label="1;146pkt 146fpkt"];
1187--1605[label="0.993289;148pkt 148fpkt"];
1187--2261[label="1;149pkt 149fpkt"];
1187--2491[label="0.993289;148pkt 148fpkt"];
1188--1605[label="1;146pkt 146fpkt"];
1188--2261[label="1;146pkt 146fpkt"];
1188--2491[label="1;146pkt 146fpkt"];
1605--2261[label="1;150pkt 150fpkt"];
1605--2491[label="1;150pkt 150fpkt"];
2261--2491[label="1;150pkt 150fpkt"];
</description>
    <slice>
      <filter dst_ip="214.24.37.136" src_ip="145.39.47.0" src_port="113"/>
      <filter dst_ip="214.24.37.136" dst_port="21" src_ip="145.39.47.0"/>
      <filter dst_ip="214.24.37.136" dst_port="20" src_ip="145.39.47.0"/>
    </slice>
    <from sec="1000011832" usec="0"/>
    <to sec="1000012156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
595[label="197.116.138.139;s;448pkt 448fpkt", shape=diamond, color=yellow];
1193[label="197.116.138.139;s;295pkt 295fpkt", shape=hexagon, color=black];
1977[label="197.116.138.139;450pkt 450fpkt", shape=pentagon, color=darkviolet];
2394[label="197.116.138.139;450pkt 450fpkt", shape=invtriangle, color=brown];
2541[label="197.116.138.139;450pkt 450fpkt", shape=invhouse, color=bisque];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.116.138.139:0, *:0}[99.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8089%)&lt;BR/&gt; 1158: (0.0955566%)&lt;BR/&gt; 80: (0.0955566%)&gt;];
}
595--1193[label="1;295pkt 295fpkt"];
595--1977[label="1;448pkt 448fpkt"];
595--2394[label="1;448pkt 448fpkt"];
595--2541[label="1;448pkt 448fpkt"];
1193--1977[label="1;295pkt 295fpkt"];
1193--2394[label="1;295pkt 295fpkt"];
1193--2541[label="1;295pkt 295fpkt"];
1977--2394[label="1;450pkt 450fpkt"];
1977--2541[label="1;450pkt 450fpkt"];
2394--2541[label="1;450pkt 450fpkt"];
</description>
    <slice>
      <filter src_ip="197.116.138.139"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
74[label="148.173.194.114;s;428pkt 428fpkt", shape=diamond, color=yellow];
75[label="16.218.81.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
257[label="192.37.121.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
296[label="16.87.151.86;d;1pkt 1fpkt", shape=diamond, color=yellow];
399[label="16.47.179.223;d;1pkt 1fpkt", shape=diamond, color=yellow];
582[label="213.148.136.14;d;2pkt 2fpkt", shape=diamond, color=yellow];
583[label="148.182.53.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
982[label="148.173.194.114;s;389pkt 389fpkt", shape=hexagon, color=black];
1186[label="213.148.136.14;d;2pkt 2fpkt", shape=hexagon, color=black];
1198[label="192.37.121.247;d;1pkt 1fpkt", shape=hexagon, color=black];
1926[label="148.173.194.114;433pkt 433fpkt", shape=pentagon, color=darkviolet];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.173.194.114:6257, *:6257}[74.023%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (73.5317%)&lt;BR/&gt; 6699: (13.1746%)&lt;BR/&gt; 3658: (0.198413%)&lt;BR/&gt; 4694: (0.15873%)&lt;BR/&gt; 3491: (0.15873%)&gt;];
}
74--75[label="1;1pkt 1fpkt"];
74--257[label="1;1pkt 1fpkt"];
74--296[label="1;1pkt 1fpkt"];
74--399[label="1;1pkt 1fpkt"];
74--582[label="0.5;1pkt 1fpkt"];
74--982[label="1;389pkt 389fpkt"];
74--1186[label="0.5;1pkt 1fpkt"];
74--1198[label="1;1pkt 1fpkt"];
74--1926[label="0.997664;427pkt 427fpkt"];
75--982[label="1;1pkt 1fpkt"];
75--1926[label="1;1pkt 1fpkt"];
257--982[label="1;1pkt 1fpkt"];
257--1198[label="1;1pkt 1fpkt"];
257--1926[label="1;1pkt 1fpkt"];
296--982[label="1;1pkt 1fpkt"];
296--1926[label="1;1pkt 1fpkt"];
399--982[label="1;1pkt 1fpkt"];
399--1926[label="1;1pkt 1fpkt"];
582--583[label="1;1pkt 1fpkt"];
582--982[label="0.5;1pkt 1fpkt"];
582--1186[label="1;2pkt 2fpkt"];
582--1926[label="0.5;1pkt 1fpkt"];
583--1186[label="1;1pkt 1fpkt"];
982--1186[label="0.5;1pkt 1fpkt"];
982--1198[label="1;1pkt 1fpkt"];
982--1926[label="1;389pkt 389fpkt"];
1186--1926[label="0.5;1pkt 1fpkt"];
1198--1926[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="148.173.194.114" src_port="6257"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
520[label="197.116.138.128;s;345pkt 345fpkt", shape=diamond, color=yellow];
1207[label="197.116.138.128;s;242pkt 242fpkt", shape=hexagon, color=black];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.116.138.128:0, *:0}[99.1304%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.1482%)&lt;BR/&gt; 161: (0.425894%)&lt;BR/&gt; 3649: (0.170358%)&lt;BR/&gt; 3598: (0.170358%)&lt;BR/&gt; 4182: (0.0851789%)&gt;];
}
520--1207[label="1;242pkt 242fpkt"];
</description>
    <slice>
      <filter src_ip="197.116.138.128"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
286[label="164.202.87.176;s;4pkt 4fpkt", shape=diamond, color=yellow];
287[label="46.59.40.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
1079[label="46.59.40.162;d;1pkt 1fpkt", shape=hexagon, color=black];
1210[label="164.202.87.176;s;3pkt 3fpkt", shape=hexagon, color=black];
2070[label="164.202.87.176;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2421[label="164.202.87.176;3pkt 3fpkt", shape=invtriangle, color=brown];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.202.87.176:1468, 46.59.40.162:1755}[25%]&lt;BR/&gt;{164.202.87.176:1073, 214.109.142.242:1755}[25%]&lt;BR/&gt;{164.202.87.176:1381, 213.91.109.203:5001}[25%]&lt;BR/&gt;{164.202.87.176:5000, 213.91.109.203:5000}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (28.125%)&lt;BR/&gt; 5000: (25%)&lt;BR/&gt; 1468: (18.75%)&lt;BR/&gt; 5001: (9.375%)&lt;BR/&gt; 1381: (9.375%)&gt;];
}
286--287[label="1;1pkt 1fpkt"];
286--1079[label="1;1pkt 1fpkt"];
286--1210[label="1;3pkt 3fpkt"];
286--2070[label="1;4pkt 4fpkt"];
286--2421[label="1;3pkt 3fpkt"];
287--1079[label="1;1pkt 1fpkt"];
287--1210[label="1;1pkt 1fpkt"];
287--2070[label="1;1pkt 1fpkt"];
287--2421[label="1;1pkt 1fpkt"];
1079--1210[label="1;1pkt 1fpkt"];
1079--2070[label="1;1pkt 1fpkt"];
1079--2421[label="1;1pkt 1fpkt"];
1210--2070[label="1;3pkt 3fpkt"];
1210--2421[label="0.666667;2pkt 2fpkt"];
2070--2421[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="213.91.109.203" dst_port="5000" src_ip="164.202.87.176" src_port="5000"/>
      <filter dst_ip="213.91.109.203" dst_port="5001" src_ip="164.202.87.176" src_port="1381"/>
      <filter dst_ip="214.109.142.242" dst_port="1755" src_ip="164.202.87.176" src_port="1073"/>
      <filter dst_ip="46.59.40.162" dst_port="1755" src_ip="164.202.87.176" src_port="1468"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22207,1.96147,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
26[label="141.165.214.73;d;170pkt 170fpkt", shape=diamond, color=yellow];
28[label="192.181.34.207;s;82pkt 82fpkt", shape=diamond, color=yellow];
58[label="196.34.15.213;s;54pkt 54fpkt", shape=diamond, color=yellow];
195[label="206.135.75.235;s;1pkt 1fpkt", shape=diamond, color=yellow];
295[label="219.169.12.57;s;1pkt 1fpkt", shape=diamond, color=yellow];
349[label="196.168.6.156;d;2pkt 2fpkt", shape=diamond, color=yellow];
617[label="215.64.100.178;s;1pkt 1fpkt", shape=diamond, color=yellow];
967[label="141.165.214.73;d;169pkt 169fpkt", shape=hexagon, color=black];
969[label="192.181.34.207;s;47pkt 47fpkt", shape=hexagon, color=black];
1023[label="196.34.15.213;s;54pkt 54fpkt", shape=hexagon, color=black];
1058[label="196.168.6.156;d;1pkt 1fpkt", shape=hexagon, color=black];
1216[label="219.169.12.57;s;1pkt 1fpkt", shape=hexagon, color=black];
1522[label="141.165.214.73;d;160pkt 160fpkt", shape=polygon, color=gold];
1524[label="192.181.34.207;s;37pkt 37fpkt", shape=polygon, color=gold];
1559[label="219.169.12.57;s;1pkt 1fpkt", shape=polygon, color=gold];
2137[label="192.181.34.207;81pkt 81fpkt", shape=pentagon, color=darkviolet];
2154[label="196.34.15.213;54pkt 54fpkt", shape=pentagon, color=darkviolet];
2212[label="206.135.75.235;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2454[label="196.34.15.213;54pkt 54fpkt", shape=invtriangle, color=brown];
2561[label="196.34.15.213;54pkt 54fpkt", shape=invhouse, color=bisque];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.181.34.207:*, 141.165.214.73:*}[47.093%]&lt;BR/&gt;{196.34.15.213:*, 141.165.214.73:*}[31.3953%]&lt;BR/&gt;{*:*, 141.165.214.73:21}[25.5814%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (13.3171%)&lt;BR/&gt; 0: (1.36585%)&lt;BR/&gt; 20: (0.439024%)&lt;BR/&gt; 65397: (0.390244%)&lt;BR/&gt; 62048: (0.390244%)&gt;];
}
26--28[label="0.987805;81pkt 81fpkt"];
26--58[label="1;54pkt 54fpkt"];
26--195[label="1;1pkt 1fpkt"];
26--295[label="1;1pkt 1fpkt"];
26--617[label="1;1pkt 1fpkt"];
26--967[label="1;169pkt 169fpkt"];
26--969[label="0.978723;46pkt 46fpkt"];
26--1023[label="1;54pkt 54fpkt"];
26--1216[label="1;1pkt 1fpkt"];
26--1522[label="1;160pkt 160fpkt"];
26--1524[label="0.972973;36pkt 36fpkt"];
26--1559[label="1;1pkt 1fpkt"];
26--2137[label="1;81pkt 81fpkt"];
26--2154[label="1;54pkt 54fpkt"];
26--2212[label="1;1pkt 1fpkt"];
26--2454[label="1;54pkt 54fpkt"];
26--2561[label="1;54pkt 54fpkt"];
28--349[label="0.5;1pkt 1fpkt"];
28--967[label="0.987805;81pkt 81fpkt"];
28--969[label="1;47pkt 47fpkt"];
28--1058[label="1;1pkt 1fpkt"];
28--1522[label="0.939024;77pkt 77fpkt"];
28--1524[label="1;37pkt 37fpkt"];
28--2137[label="1;81pkt 81fpkt"];
58--967[label="1;54pkt 54fpkt"];
58--1023[label="1;54pkt 54fpkt"];
58--1522[label="1;54pkt 54fpkt"];
58--2154[label="1;54pkt 54fpkt"];
58--2454[label="1;54pkt 54fpkt"];
58--2561[label="1;54pkt 54fpkt"];
195--967[label="1;1pkt 1fpkt"];
195--1522[label="1;1pkt 1fpkt"];
195--2212[label="1;1pkt 1fpkt"];
295--967[label="1;1pkt 1fpkt"];
295--1216[label="1;1pkt 1fpkt"];
295--1522[label="1;1pkt 1fpkt"];
295--1559[label="1;1pkt 1fpkt"];
349--969[label="0.5;1pkt 1fpkt"];
349--1058[label="1;1pkt 1fpkt"];
349--1524[label="0.5;1pkt 1fpkt"];
617--967[label="1;1pkt 1fpkt"];
617--1522[label="1;1pkt 1fpkt"];
967--969[label="0.978723;46pkt 46fpkt"];
967--1023[label="1;54pkt 54fpkt"];
967--1216[label="1;1pkt 1fpkt"];
967--1522[label="1;160pkt 160fpkt"];
967--1524[label="0.972973;36pkt 36fpkt"];
967--1559[label="1;1pkt 1fpkt"];
967--2137[label="1;81pkt 81fpkt"];
967--2154[label="1;54pkt 54fpkt"];
967--2212[label="1;1pkt 1fpkt"];
967--2454[label="1;54pkt 54fpkt"];
967--2561[label="1;54pkt 54fpkt"];
969--1058[label="1;1pkt 1fpkt"];
969--1522[label="0.978723;46pkt 46fpkt"];
969--1524[label="1;37pkt 37fpkt"];
969--2137[label="0.978723;46pkt 46fpkt"];
1023--1522[label="1;54pkt 54fpkt"];
1023--2154[label="1;54pkt 54fpkt"];
1023--2454[label="1;54pkt 54fpkt"];
1023--2561[label="1;54pkt 54fpkt"];
1058--1524[label="1;1pkt 1fpkt"];
1216--1522[label="1;1pkt 1fpkt"];
1216--1559[label="1;1pkt 1fpkt"];
1522--1524[label="0.972973;36pkt 36fpkt"];
1522--1559[label="1;1pkt 1fpkt"];
1522--2137[label="0.950617;77pkt 77fpkt"];
1522--2154[label="1;54pkt 54fpkt"];
1522--2212[label="1;1pkt 1fpkt"];
1522--2454[label="1;54pkt 54fpkt"];
1522--2561[label="1;54pkt 54fpkt"];
1524--2137[label="0.972973;36pkt 36fpkt"];
2154--2454[label="1;54pkt 54fpkt"];
2154--2561[label="1;54pkt 54fpkt"];
2454--2561[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.214.73" src_ip="192.181.34.207"/>
      <filter dst_ip="141.165.214.73" src_ip="196.34.15.213"/>
      <filter dst_ip="141.165.214.73" dst_port="21"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,002,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
530[label="148.13.168.104;d;42pkt 42fpkt", shape=diamond, color=yellow];
1224[label="148.13.168.104;d;39pkt 39fpkt", shape=hexagon, color=black];
1963[label="148.13.168.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:138, 148.13.168.104:138}[57.1429%]&lt;BR/&gt;{*:137, 148.13.168.104:137}[38.0952%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 138: (57.3171%)&lt;BR/&gt; 137: (37.8049%)&lt;BR/&gt; 1070: (2.43902%)&lt;BR/&gt; 135: (2.43902%)&gt;];
}
530--1224[label="1;39pkt 39fpkt"];
530--1963[label="1;1pkt 1fpkt"];
1224--1963[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.13.168.104" dst_port="138" src_port="138"/>
      <filter dst_ip="148.13.168.104" dst_port="137" src_port="137"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
97[label="141.165.159.227;d;565pkt 565fpkt", shape=diamond, color=yellow];
405[label="207.66.50.72;s;36pkt 36fpkt", shape=diamond, color=yellow];
409[label="200.16.85.218;s;137pkt 137fpkt", shape=diamond, color=yellow];
438[label="209.245.142.241;s;33pkt 33fpkt", shape=diamond, color=yellow];
563[label="149.74.88.196;s;27pkt 27fpkt", shape=diamond, color=yellow];
602[label="141.165.212.75;d;111pkt 111fpkt", shape=diamond, color=yellow];
640[label="207.215.182.87;s;22pkt 22fpkt", shape=diamond, color=yellow];
1076[label="200.16.85.218;s;134pkt 134fpkt", shape=hexagon, color=black];
1151[label="209.245.142.241;s;17pkt 17fpkt", shape=hexagon, color=black];
1164[label="149.74.88.196;s;21pkt 21fpkt", shape=hexagon, color=black];
1225[label="141.165.212.75;d;111pkt 111fpkt", shape=hexagon, color=black];
1281[label="207.66.50.72;s;26pkt 26fpkt", shape=hexagon, color=black];
1464[label="207.215.182.87;s;16pkt 16fpkt", shape=hexagon, color=black];
1894[label="197.130.107.99;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2017[label="206.37.40.151;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2073[label="93.216.250.176;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2228[label="209.245.142.241;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2360[label="197.130.107.99;34pkt 34fpkt", shape=invtriangle, color=brown];
2423[label="93.216.250.176;15pkt 15fpkt", shape=invtriangle, color=brown];
2548[label="93.216.250.176;15pkt 15fpkt", shape=invhouse, color=bisque];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 141.165.159.227:*}[39.028%]&lt;BR/&gt;{*:8080, 141.165.159.227:*}[35.3461%]&lt;BR/&gt;{200.16.85.218:*, *:*}[20.1767%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.1404%)&lt;BR/&gt; 8080: (15.7748%)&lt;BR/&gt; 3128: (1.18138%)&lt;BR/&gt; 9081: (0.833912%)&lt;BR/&gt; 1828: (0.277971%)&gt;];
}
97--405[label="1;36pkt 36fpkt"];
97--409[label="0.656934;90pkt 90fpkt"];
97--437[label="0.673077;35pkt 35fpkt"];
97--438[label="1;33pkt 33fpkt"];
97--563[label="1;27pkt 27fpkt"];
97--640[label="1;22pkt 22fpkt"];
97--1076[label="0.649254;87pkt 87fpkt"];
97--1151[label="1;17pkt 17fpkt"];
97--1164[label="1;21pkt 21fpkt"];
97--1229[label="0.645833;31pkt 31fpkt"];
97--1281[label="1;26pkt 26fpkt"];
97--1464[label="1;16pkt 16fpkt"];
97--1598[label="0.0283186;16pkt 16fpkt"];
97--1602[label="0.0283186;16pkt 16fpkt"];
97--1604[label="0.0283186;16pkt 16fpkt"];
97--1894[label="1;34pkt 34fpkt"];
97--2017[label="1;38pkt 38fpkt"];
97--2228[label="1;33pkt 33fpkt"];
97--2360[label="1;34pkt 34fpkt"];
405--1281[label="1;26pkt 26fpkt"];
409--602[label="0.423423;47pkt 47fpkt"];
409--1076[label="1;134pkt 134fpkt"];
409--1225[label="0.423423;47pkt 47fpkt"];
409--1598[label="0.0145985;2pkt 2fpkt"];
409--1602[label="0.0145985;2pkt 2fpkt"];
409--1604[label="0.0145985;2pkt 2fpkt"];
438--1151[label="1;17pkt 17fpkt"];
438--1598[label="0.151515;5pkt 5fpkt"];
438--1602[label="0.151515;5pkt 5fpkt"];
438--1604[label="0.151515;5pkt 5fpkt"];
438--2228[label="0.969697;32pkt 32fpkt"];
563--1164[label="1;21pkt 21fpkt"];
563--1598[label="0.037037;1pkt 1fpkt"];
563--1602[label="0.037037;1pkt 1fpkt"];
563--1604[label="0.037037;1pkt 1fpkt"];
602--1076[label="0.423423;47pkt 47fpkt"];
602--1225[label="1;111pkt 111fpkt"];
602--1781[label="0.0740741;2pkt 2fpkt"];
602--1967[label="0.027027;3pkt 3fpkt"];
602--2073[label="0.857143;12pkt 12fpkt"];
602--2389[label="0.027027;3pkt 3fpkt"];
602--2423[label="0.8;12pkt 12fpkt"];
602--2548[label="0.8;12pkt 12fpkt"];
640--1464[label="1;16pkt 16fpkt"];
1076--1225[label="0.423423;47pkt 47fpkt"];
1076--1598[label="0.0149254;2pkt 2fpkt"];
1076--1602[label="0.0149254;2pkt 2fpkt"];
1076--1604[label="0.0149254;2pkt 2fpkt"];
1151--1598[label="0.294118;5pkt 5fpkt"];
1151--1602[label="0.294118;5pkt 5fpkt"];
1151--1604[label="0.294118;5pkt 5fpkt"];
1151--2228[label="0.941176;16pkt 16fpkt"];
1164--1598[label="0.047619;1pkt 1fpkt"];
1164--1602[label="0.047619;1pkt 1fpkt"];
1164--1604[label="0.047619;1pkt 1fpkt"];
1225--1781[label="0.0740741;2pkt 2fpkt"];
1225--1967[label="0.027027;3pkt 3fpkt"];
1225--2073[label="0.857143;12pkt 12fpkt"];
1225--2389[label="0.027027;3pkt 3fpkt"];
1225--2423[label="0.8;12pkt 12fpkt"];
1225--2548[label="0.8;12pkt 12fpkt"];
1894--2360[label="1;34pkt 34fpkt"];
2073--2423[label="1;14pkt 14fpkt"];
2073--2548[label="1;14pkt 14fpkt"];
2423--2548[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="200.16.85.218"/>
      <filter dst_ip="141.165.159.227" src_port="80"/>
      <filter dst_ip="141.165.159.227" src_port="8080"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
440[label="148.93.217.24;s;684pkt 684fpkt", shape=diamond, color=yellow];
1231[label="148.93.217.24;s;684pkt 684fpkt", shape=hexagon, color=black];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.93.217.24:0, *:0}[97.807%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.807%)&lt;BR/&gt; 53: (2.19298%)&gt;];
}
440--1231[label="1;684pkt 684fpkt"];
</description>
    <slice>
      <filter src_ip="148.93.217.24"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
442[label="16.168.143.160;s;2070pkt 2070fpkt", shape=diamond, color=yellow];
1232[label="16.168.143.160;s;1105pkt 1105fpkt", shape=hexagon, color=black];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.168.143.160:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
442--1232[label="1;1105pkt 1105fpkt"];
</description>
    <slice>
      <filter src_ip="16.168.143.160"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
247[label="196.42.83.68;s;1069pkt 1069fpkt", shape=diamond, color=yellow];
476[label="197.116.137.166;s;8pkt 8fpkt", shape=diamond, color=yellow];
483[label="94.35.139.219;d;19pkt 19fpkt", shape=diamond, color=yellow];
515[label="196.167.66.64;d;1pkt 1fpkt", shape=diamond, color=yellow];
1250[label="197.116.137.166;s;3pkt 3fpkt", shape=hexagon, color=black];
1274[label="196.42.83.68;s;735pkt 735fpkt", shape=hexagon, color=black];
1801[label="196.42.83.68;1174pkt 1174fpkt", shape=pentagon, color=darkviolet];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.42.83.68:0, *:0}[98.325%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.0695%)&lt;BR/&gt; 80: (0.382187%)&lt;BR/&gt; 53: (0.0664673%)&lt;BR/&gt; 4695: (0.0498504%)&lt;BR/&gt; 3590: (0.0498504%)&gt;];
}
247--483[label="0.0526316;1pkt 1fpkt"];
247--515[label="1;1pkt 1fpkt"];
247--743[label="0.0133333;1pkt 1fpkt"];
247--904[label="0.030303;1pkt 1fpkt"];
247--1274[label="1;735pkt 735fpkt"];
247--1801[label="1;1069pkt 1069fpkt"];
476--483[label="0.75;6pkt 6fpkt"];
476--1250[label="1;3pkt 3fpkt"];
483--977[label="0.0526316;1pkt 1fpkt"];
483--1250[label="1;3pkt 3fpkt"];
483--1274[label="0.0526316;1pkt 1fpkt"];
483--1528[label="0.0526316;1pkt 1fpkt"];
483--1598[label="0.0526316;1pkt 1fpkt"];
483--1602[label="0.0526316;1pkt 1fpkt"];
483--1604[label="0.0526316;1pkt 1fpkt"];
483--1636[label="0.0526316;1pkt 1fpkt"];
483--1801[label="0.0526316;1pkt 1fpkt"];
483--2275[label="0.0526316;1pkt 1fpkt"];
515--1274[label="1;1pkt 1fpkt"];
515--1801[label="1;1pkt 1fpkt"];
1274--1801[label="1;735pkt 735fpkt"];
</description>
    <slice>
      <filter src_ip="196.42.83.68"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
578[label="194.132.5.176;d;100pkt 100fpkt", shape=diamond, color=yellow];
585[label="164.202.197.184;s;86pkt 86fpkt", shape=diamond, color=yellow];
1261[label="164.202.197.184;s;86pkt 86fpkt", shape=hexagon, color=black];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.202.197.184:*, 194.132.5.176:8901}[84.1584%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8901: (49.6324%)&lt;BR/&gt; 1181: (0.551471%)&lt;BR/&gt; 1180: (0.551471%)&lt;BR/&gt; 1179: (0.551471%)&lt;BR/&gt; 1178: (0.551471%)&gt;];
}
578--585[label="0.988372;85pkt 85fpkt"];
578--1261[label="0.988372;85pkt 85fpkt"];
585--1261[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_ip="194.132.5.176" dst_port="8901" src_ip="164.202.197.184"/>
    </slice>
    <from sec="1000011758" usec="0"/>
    <to sec="1000011987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
650[label="141.165.230.41;d;158pkt 158fpkt", shape=diamond, color=yellow];
920[label="162.109.104.167;s;19pkt 19fpkt", shape=diamond, color=yellow];
1265[label="141.165.230.41;d;140pkt 140fpkt", shape=hexagon, color=black];
1516[label="162.109.104.167;s;19pkt 19fpkt", shape=hexagon, color=black];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 141.165.230.41:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1266: (0.595238%)&lt;BR/&gt; 1265: (0.595238%)&lt;BR/&gt; 1264: (0.595238%)&lt;BR/&gt; 1263: (0.595238%)&gt;];
}
650--920[label="1;19pkt 19fpkt"];
650--1265[label="1;140pkt 140fpkt"];
650--1516[label="1;19pkt 19fpkt"];
920--1265[label="0.684211;13pkt 13fpkt"];
920--1516[label="1;19pkt 19fpkt"];
1265--1516[label="0.684211;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.230.41" src_port="80"/>
    </slice>
    <from sec="1000011863" usec="0"/>
    <to sec="1000012480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
655[label="164.202.233.92;d;4pkt 4fpkt", shape=diamond, color=yellow];
1268[label="164.202.233.92;d;4pkt 4fpkt", shape=hexagon, color=black];
1791[label="219.21.239.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.21.239.65:4915, 164.202.233.92:25}[25%]&lt;BR/&gt;{219.21.239.65:113, 164.202.233.92:1529}[25%]&lt;BR/&gt;{219.21.237.95:3007, 164.202.233.92:25}[25%]&lt;BR/&gt;{219.21.237.95:113, 164.202.233.92:1528}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (27.7778%)&lt;BR/&gt; 25: (22.2222%)&lt;BR/&gt; 1529: (16.6667%)&lt;BR/&gt; 4915: (11.1111%)&lt;BR/&gt; 3007: (11.1111%)&gt;];
}
655--1268[label="1;4pkt 4fpkt"];
655--1791[label="1;1pkt 1fpkt"];
1268--1791[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.202.233.92" dst_port="1528" src_ip="219.21.237.95" src_port="113"/>
      <filter dst_ip="164.202.233.92" dst_port="25" src_ip="219.21.237.95" src_port="3007"/>
      <filter dst_ip="164.202.233.92" dst_port="1529" src_ip="219.21.239.65" src_port="113"/>
      <filter dst_ip="164.202.233.92" dst_port="25" src_ip="219.21.239.65" src_port="4915"/>
    </slice>
    <from sec="1000011918" usec="0"/>
    <to sec="1000012041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
421[label="164.202.238.150;d;14pkt 14fpkt", shape=diamond, color=yellow];
422[label="194.50.12.65;s;8pkt 8fpkt", shape=diamond, color=yellow];
1293[label="164.202.238.150;d;11pkt 11fpkt", shape=hexagon, color=black];
1788[label="194.50.12.65;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.41.130.8:1755, 164.202.238.150:*}[28.5714%]&lt;BR/&gt;{194.50.12.65:1755, 164.202.238.150:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (26.8293%)&lt;BR/&gt; 5190: (4.87805%)&lt;BR/&gt; 2103: (4.87805%)&lt;BR/&gt; 1911: (4.87805%)&lt;BR/&gt; 1731: (4.87805%)&gt;];
}
421--422[label="1;8pkt 8fpkt"];
421--1293[label="1;11pkt 11fpkt"];
421--1788[label="1;8pkt 8fpkt"];
422--1293[label="0.75;6pkt 6fpkt"];
422--1788[label="1;8pkt 8fpkt"];
1293--1788[label="0.75;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="164.202.238.150" src_ip="194.50.12.65" src_port="1755"/>
      <filter dst_ip="164.202.238.150" src_ip="168.41.130.8" src_port="1755"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86025,2.02149,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
40[label="164.202.232.128;d;26pkt 26fpkt", shape=diamond, color=yellow];
43[label="208.98.223.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
244[label="16.171.214.233;s;1pkt 1fpkt", shape=diamond, color=yellow];
339[label="16.103.102.66;s;1pkt 1fpkt", shape=diamond, color=yellow];
1066[label="16.171.214.233;s;1pkt 1fpkt", shape=hexagon, color=black];
1302[label="16.103.102.66;s;1pkt 1fpkt", shape=hexagon, color=black];
1792[label="16.103.102.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2206[label="16.171.214.233;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2571[label="16.171.214.233;1pkt 1fpkt", shape=invhouse, color=bisque];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 164.202.232.128:*}[57.6923%]&lt;BR/&gt;{*:1214, 164.202.232.128:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (22.0588%)&lt;BR/&gt; 53: (22.0588%)&lt;BR/&gt; 52212: (7.35294%)&lt;BR/&gt; 53553: (5.88235%)&lt;BR/&gt; 50166: (2.94118%)&gt;];
}
40--43[label="1;1pkt 1fpkt"];
40--244[label="1;1pkt 1fpkt"];
40--339[label="1;1pkt 1fpkt"];
40--1066[label="1;1pkt 1fpkt"];
40--1302[label="1;1pkt 1fpkt"];
40--1792[label="1;1pkt 1fpkt"];
40--2025[label="0.0384615;1pkt 1fpkt"];
40--2206[label="1;1pkt 1fpkt"];
40--2571[label="1;1pkt 1fpkt"];
244--1066[label="1;1pkt 1fpkt"];
244--2206[label="1;1pkt 1fpkt"];
244--2571[label="1;1pkt 1fpkt"];
339--1302[label="1;1pkt 1fpkt"];
339--1792[label="1;1pkt 1fpkt"];
1066--2206[label="1;1pkt 1fpkt"];
1066--2571[label="1;1pkt 1fpkt"];
1302--1792[label="1;1pkt 1fpkt"];
2206--2571[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.202.232.128" src_port="53"/>
      <filter dst_ip="164.202.232.128" src_port="1214"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
359[label="164.202.86.168;d;4pkt 4fpkt", shape=diamond, color=yellow];
481[label="93.100.229.6;s;1pkt 1fpkt", shape=diamond, color=yellow];
561[label="94.41.172.7;s;1pkt 1fpkt", shape=diamond, color=yellow];
1105[label="93.100.229.6;s;1pkt 1fpkt", shape=hexagon, color=black];
1309[label="94.41.172.7;s;1pkt 1fpkt", shape=hexagon, color=black];
1371[label="164.202.86.168;d;4pkt 4fpkt", shape=hexagon, color=black];
1625[label="93.100.229.6;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.100.229.6:41002, 164.202.86.168:3142}[25%]&lt;BR/&gt;{94.41.172.7:41119, 164.202.86.168:3159}[25%]&lt;BR/&gt;{168.176.96.63:2006, 164.202.86.168:41095}[25%]&lt;BR/&gt;{92.115.103.202:21, 164.202.86.168:2293}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41002: (19.2308%)&lt;BR/&gt; 3142: (19.2308%)&lt;BR/&gt; 41119: (15.3846%)&lt;BR/&gt; 3159: (15.3846%)&lt;BR/&gt; 41095: (7.69231%)&gt;];
}
359--481[label="1;1pkt 1fpkt"];
359--561[label="1;1pkt 1fpkt"];
359--1105[label="1;1pkt 1fpkt"];
359--1309[label="1;1pkt 1fpkt"];
359--1371[label="1;4pkt 4fpkt"];
359--1625[label="1;1pkt 1fpkt"];
481--1105[label="1;1pkt 1fpkt"];
481--1371[label="1;1pkt 1fpkt"];
481--1625[label="1;1pkt 1fpkt"];
561--1309[label="1;1pkt 1fpkt"];
561--1371[label="1;1pkt 1fpkt"];
1105--1371[label="1;1pkt 1fpkt"];
1105--1625[label="1;1pkt 1fpkt"];
1309--1371[label="1;1pkt 1fpkt"];
1371--1625[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.202.86.168" dst_port="2293" src_ip="92.115.103.202" src_port="21"/>
      <filter dst_ip="164.202.86.168" dst_port="41095" src_ip="168.176.96.63" src_port="2006"/>
      <filter dst_ip="164.202.86.168" dst_port="3159" src_ip="94.41.172.7" src_port="41119"/>
      <filter dst_ip="164.202.86.168" dst_port="3142" src_ip="93.100.229.6" src_port="41002"/>
    </slice>
    <from sec="1000011607" usec="0"/>
    <to sec="1000012430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0227,1.98055,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
637[label="213.209.107.34;d;21pkt 21fpkt", shape=diamond, color=yellow];
721[label="148.173.198.14;s;43pkt 43fpkt", shape=diamond, color=yellow];
1319[label="148.173.198.14;s;43pkt 43fpkt", shape=hexagon, color=black];
1582[label="148.173.198.14;s;43pkt 43fpkt", shape=polygon, color=gold];
1653[label="148.173.198.14;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2280[label="148.173.198.14;42pkt 42fpkt", shape=invtriangle, color=brown];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.173.198.14:*, 213.209.107.34:80}[42.2222%]&lt;BR/&gt;{148.173.198.14:*, 92.158.45.175:80}[24.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5745%)&lt;BR/&gt; 49617: (1.2766%)&lt;BR/&gt; 49616: (1.2766%)&lt;BR/&gt; 49615: (1.2766%)&lt;BR/&gt; 49614: (1.2766%)&gt;];
}
637--721[label="0.904762;19pkt 19fpkt"];
637--977[label="0.047619;1pkt 1fpkt"];
637--1319[label="0.904762;19pkt 19fpkt"];
637--1528[label="0.047619;1pkt 1fpkt"];
637--1582[label="0.904762;19pkt 19fpkt"];
637--1636[label="0.047619;1pkt 1fpkt"];
637--1653[label="0.904762;19pkt 19fpkt"];
637--2275[label="0.047619;1pkt 1fpkt"];
637--2280[label="0.857143;18pkt 18fpkt"];
721--1319[label="1;43pkt 43fpkt"];
721--1582[label="1;43pkt 43fpkt"];
721--1653[label="1;43pkt 43fpkt"];
721--2280[label="1;42pkt 42fpkt"];
1319--1582[label="1;43pkt 43fpkt"];
1319--1653[label="1;43pkt 43fpkt"];
1319--2280[label="1;42pkt 42fpkt"];
1582--1653[label="1;43pkt 43fpkt"];
1582--2280[label="1;42pkt 42fpkt"];
1653--2280[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="213.209.107.34" dst_port="80" src_ip="148.173.198.14"/>
      <filter dst_ip="92.158.45.175" dst_port="80" src_ip="148.173.198.14"/>
    </slice>
    <from sec="1000011671" usec="0"/>
    <to sec="1000012143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
363[label="144.52.42.233;d;503pkt 503fpkt", shape=diamond, color=yellow];
498[label="212.29.216.170;s;140pkt 140fpkt", shape=diamond, color=yellow];
757[label="212.123.28.167;s;8pkt 8fpkt", shape=diamond, color=yellow];
1311[label="144.52.42.233;d;342pkt 342fpkt", shape=hexagon, color=black];
1336[label="212.123.28.167;s;8pkt 8fpkt", shape=hexagon, color=black];
1401[label="212.29.216.170;s;39pkt 39fpkt", shape=hexagon, color=black];
1671[label="212.123.29.26;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1895[label="94.12.138.99;28pkt 28fpkt", shape=pentagon, color=darkviolet];
1991[label="212.29.85.144;41pkt 41fpkt", shape=pentagon, color=darkviolet];
1998[label="94.12.138.146;68pkt 68fpkt", shape=pentagon, color=darkviolet];
2052[label="94.12.138.167;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2116[label="92.36.208.197;64pkt 64fpkt", shape=pentagon, color=darkviolet];
2403[label="94.12.138.146;68pkt 68fpkt", shape=invtriangle, color=brown];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.29.216.170:80, 144.52.42.233:*}[38.3698%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1765: (0.149477%)&lt;BR/&gt; 1752: (0.149477%)&lt;BR/&gt; 1751: (0.149477%)&lt;BR/&gt; 1749: (0.149477%)&gt;];
}
363--498[label="1;140pkt 140fpkt"];
363--757[label="1;8pkt 8fpkt"];
363--1311[label="1;342pkt 342fpkt"];
363--1336[label="1;8pkt 8fpkt"];
363--1401[label="1;39pkt 39fpkt"];
363--1598[label="0.0854871;43pkt 43fpkt"];
363--1602[label="0.0854871;43pkt 43fpkt"];
363--1604[label="0.0854871;43pkt 43fpkt"];
363--1671[label="1;2pkt 2fpkt"];
363--1895[label="1;28pkt 28fpkt"];
363--1991[label="1;41pkt 41fpkt"];
363--1998[label="1;68pkt 68fpkt"];
363--2052[label="1;27pkt 27fpkt"];
363--2116[label="1;64pkt 64fpkt"];
363--2403[label="1;68pkt 68fpkt"];
498--1401[label="0.974359;38pkt 38fpkt"];
757--1311[label="1;8pkt 8fpkt"];
757--1336[label="1;8pkt 8fpkt"];
1311--1336[label="1;8pkt 8fpkt"];
1311--1401[label="0.025641;1pkt 1fpkt"];
1311--1598[label="0.125731;43pkt 43fpkt"];
1311--1602[label="0.125731;43pkt 43fpkt"];
1311--1604[label="0.125731;43pkt 43fpkt"];
1311--1895[label="1;28pkt 28fpkt"];
1311--1991[label="1;41pkt 41fpkt"];
1311--1998[label="1;68pkt 68fpkt"];
1311--2052[label="1;27pkt 27fpkt"];
1311--2116[label="1;64pkt 64fpkt"];
1311--2403[label="1;68pkt 68fpkt"];
1998--2403[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="144.52.42.233" src_ip="212.29.216.170" src_port="80"/>
    </slice>
    <from sec="1000011611" usec="0"/>
    <to sec="1000012511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
305[label="144.52.68.220;s;33pkt 33fpkt", shape=diamond, color=yellow];
306[label="209.77.77.146;d;3pkt 3fpkt", shape=diamond, color=yellow];
508[label="195.168.212.163;d;1pkt 1fpkt", shape=diamond, color=yellow];
861[label="213.84.253.146;d;2pkt 2fpkt", shape=diamond, color=yellow];
1325[label="195.168.212.163;d;1pkt 1fpkt", shape=hexagon, color=black];
1352[label="209.77.77.146;d;3pkt 3fpkt", shape=hexagon, color=black];
1408[label="144.52.68.220;s;33pkt 33fpkt", shape=hexagon, color=black];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.52.68.220:*, 195.168.2.245:80}[51.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.7895%)&lt;BR/&gt; 1755: (9.21053%)&lt;BR/&gt; 1069: (2.63158%)&lt;BR/&gt; 1068: (2.63158%)&lt;BR/&gt; 1046: (2.63158%)&gt;];
}
305--306[label="0.333333;1pkt 1fpkt"];
305--508[label="1;1pkt 1fpkt"];
305--621[label="0.0606061;2pkt 2fpkt"];
305--861[label="1;2pkt 2fpkt"];
305--1325[label="1;1pkt 1fpkt"];
305--1352[label="0.333333;1pkt 1fpkt"];
305--1408[label="1;33pkt 33fpkt"];
306--1352[label="1;3pkt 3fpkt"];
306--1408[label="0.333333;1pkt 1fpkt"];
508--1325[label="1;1pkt 1fpkt"];
508--1408[label="1;1pkt 1fpkt"];
861--1408[label="1;2pkt 2fpkt"];
1325--1408[label="1;1pkt 1fpkt"];
1352--1408[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.168.2.245" dst_port="80" src_ip="144.52.68.220"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
308[label="196.42.83.160;d;192pkt 192fpkt", shape=diamond, color=yellow];
425[label="213.41.180.109;s;104pkt 104fpkt", shape=diamond, color=yellow];
1086[label="213.41.180.109;s;104pkt 104fpkt", shape=hexagon, color=black];
1353[label="196.42.83.160;d;152pkt 152fpkt", shape=hexagon, color=black];
1833[label="219.21.147.77;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.41.180.109:80, 196.42.83.160:*}[53.886%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5583%)&lt;BR/&gt; 4974: (0.353357%)&lt;BR/&gt; 4964: (0.353357%)&lt;BR/&gt; 4954: (0.353357%)&lt;BR/&gt; 4943: (0.353357%)&gt;];
}
308--425[label="1;104pkt 104fpkt"];
308--478[label="0.0457143;8pkt 8fpkt"];
308--1086[label="1;104pkt 104fpkt"];
308--1353[label="1;152pkt 152fpkt"];
308--1598[label="0.046875;9pkt 9fpkt"];
308--1601[label="0.00520833;1pkt 1fpkt"];
308--1602[label="0.046875;9pkt 9fpkt"];
308--1603[label="0.00520833;1pkt 1fpkt"];
308--1604[label="0.046875;9pkt 9fpkt"];
308--1833[label="0.928571;13pkt 13fpkt"];
425--1086[label="1;104pkt 104fpkt"];
425--1353[label="1;104pkt 104fpkt"];
425--1598[label="0.0865385;9pkt 9fpkt"];
425--1602[label="0.0865385;9pkt 9fpkt"];
425--1604[label="0.0865385;9pkt 9fpkt"];
1086--1353[label="1;104pkt 104fpkt"];
1086--1598[label="0.0865385;9pkt 9fpkt"];
1086--1602[label="0.0865385;9pkt 9fpkt"];
1086--1604[label="0.0865385;9pkt 9fpkt"];
1353--1598[label="0.0592105;9pkt 9fpkt"];
1353--1601[label="0.00657895;1pkt 1fpkt"];
1353--1602[label="0.0592105;9pkt 9fpkt"];
1353--1603[label="0.00657895;1pkt 1fpkt"];
1353--1604[label="0.0592105;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="196.42.83.160" src_ip="213.41.180.109" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
548[label="197.116.136.168;s;305pkt 305fpkt", shape=diamond, color=yellow];
1362[label="197.116.136.168;s;286pkt 286fpkt", shape=hexagon, color=black];
2056[label="197.116.136.168;308pkt 308fpkt", shape=pentagon, color=darkviolet];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.116.136.168:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
548--1362[label="1;286pkt 286fpkt"];
548--2056[label="0.996721;304pkt 304fpkt"];
1362--2056[label="0.996503;285pkt 285fpkt"];
</description>
    <slice>
      <filter src_ip="197.116.136.168"/>
    </slice>
    <from sec="1000011602" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
778[label="197.116.138.29;s;189pkt 189fpkt", shape=diamond, color=yellow];
1363[label="197.116.138.29;s;189pkt 189fpkt", shape=hexagon, color=black];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.116.138.29:0, *:0}[94.709%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.709%)&lt;BR/&gt; 161: (2.38095%)&lt;BR/&gt; 4820: (0.26455%)&lt;BR/&gt; 4770: (0.26455%)&lt;BR/&gt; 4768: (0.26455%)&gt;];
}
778--1363[label="1;189pkt 189fpkt"];
</description>
    <slice>
      <filter src_ip="197.116.138.29"/>
    </slice>
    <from sec="1000011602" usec="0"/>
    <to sec="1000012513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
549[label="164.202.239.54;d;147pkt 147fpkt", shape=diamond, color=yellow];
1365[label="164.202.239.54;d;147pkt 147fpkt", shape=hexagon, color=black];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 164.202.239.54:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4999: (0.680272%)&lt;BR/&gt; 4991: (0.680272%)&lt;BR/&gt; 4985: (0.680272%)&lt;BR/&gt; 4935: (0.680272%)&gt;];
}
549--1365[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_ip="164.202.239.54" src_port="25"/>
    </slice>
    <from sec="1000011602" usec="0"/>
    <to sec="1000012299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
779[label="160.80.8.30;s;289pkt 289fpkt", shape=diamond, color=yellow];
1367[label="160.80.8.30;s;289pkt 289fpkt", shape=hexagon, color=black];
1684[label="160.80.8.30;292pkt 292fpkt", shape=pentagon, color=darkviolet];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.80.8.30:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4927: (0.344828%)&lt;BR/&gt; 3280: (0.344828%)&lt;BR/&gt; 1841: (0.344828%)&lt;BR/&gt; 1815: (0.344828%)&gt;];
}
779--1367[label="1;289pkt 289fpkt"];
779--1684[label="1;289pkt 289fpkt"];
1367--1684[label="1;289pkt 289fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="160.80.8.30"/>
    </slice>
    <from sec="1000011603" usec="0"/>
    <to sec="1000012527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988736,2.06051,020,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
780[label="197.116.136.66;s;200pkt 200fpkt", shape=diamond, color=yellow];
1370[label="197.116.136.66;s;156pkt 156fpkt", shape=hexagon, color=black];
1578[label="197.116.136.66;s;139pkt 139fpkt", shape=polygon, color=gold];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.116.136.66:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
780--1370[label="1;156pkt 156fpkt"];
780--1578[label="1;139pkt 139fpkt"];
1370--1578[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter src_ip="197.116.136.66"/>
    </slice>
    <from sec="1000011606" usec="0"/>
    <to sec="1000012516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
708[label="163.7.173.171;s;219pkt 219fpkt", shape=diamond, color=yellow];
1373[label="163.7.173.171;s;179pkt 179fpkt", shape=hexagon, color=black];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.7.173.171:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
708--1373[label="1;179pkt 179fpkt"];
</description>
    <slice>
      <filter src_ip="163.7.173.171"/>
    </slice>
    <from sec="1000011609" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
191[label="196.129.24.179;d;114pkt 114fpkt", shape=diamond, color=yellow];
355[label="44.92.154.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
817[label="195.168.207.72;s;8pkt 8fpkt", shape=diamond, color=yellow];
885[label="214.133.125.10;s;2pkt 2fpkt", shape=diamond, color=yellow];
1048[label="196.129.24.179;d;114pkt 114fpkt", shape=hexagon, color=black];
1103[label="44.92.154.236;s;1pkt 1fpkt", shape=hexagon, color=black];
1405[label="195.168.207.72;s;8pkt 8fpkt", shape=hexagon, color=black];
1456[label="214.133.125.10;s;2pkt 2fpkt", shape=hexagon, color=black];
1815[label="195.168.207.72;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8000, 196.129.24.179:*}[47.1074%]&lt;BR/&gt;{*:80, 196.129.24.179:*}[28.9256%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (22.4806%)&lt;BR/&gt; 80: (13.5659%)&lt;BR/&gt; 0: (12.4031%)&lt;BR/&gt; 33529: (4.65116%)&lt;BR/&gt; 53: (4.65116%)&gt;];
}
191--355[label="1;1pkt 1fpkt"];
191--817[label="0.125;1pkt 1fpkt"];
191--885[label="1;2pkt 2fpkt"];
191--1048[label="1;114pkt 114fpkt"];
191--1103[label="1;1pkt 1fpkt"];
191--1405[label="0.125;1pkt 1fpkt"];
191--1456[label="1;2pkt 2fpkt"];
191--1815[label="0.125;1pkt 1fpkt"];
191--2124[label="0.214286;15pkt 15fpkt"];
355--1048[label="1;1pkt 1fpkt"];
355--1103[label="1;1pkt 1fpkt"];
817--1048[label="0.125;1pkt 1fpkt"];
817--1405[label="1;8pkt 8fpkt"];
817--1431[label="0.125;1pkt 1fpkt"];
817--1815[label="1;8pkt 8fpkt"];
885--1048[label="1;2pkt 2fpkt"];
885--1456[label="1;2pkt 2fpkt"];
1048--1103[label="1;1pkt 1fpkt"];
1048--1405[label="0.125;1pkt 1fpkt"];
1048--1456[label="1;2pkt 2fpkt"];
1048--1815[label="0.125;1pkt 1fpkt"];
1048--2124[label="0.214286;15pkt 15fpkt"];
1405--1431[label="0.125;1pkt 1fpkt"];
1405--1815[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="196.129.24.179" src_port="8000"/>
      <filter dst_ip="196.129.24.179" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
443[label="144.52.214.219;d;423pkt 423fpkt", shape=diamond, color=yellow];
607[label="44.86.245.35;s;266pkt 266fpkt", shape=diamond, color=yellow];
1153[label="144.52.214.219;d;161pkt 161fpkt", shape=hexagon, color=black];
1412[label="44.86.245.35;s;223pkt 223fpkt", shape=hexagon, color=black];
1958[label="46.58.81.132;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2386[label="46.58.81.132;11pkt 11fpkt", shape=invtriangle, color=brown];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.86.245.35:80, 144.52.214.219:*}[62.8842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2281: (0.182648%)&lt;BR/&gt; 2280: (0.182648%)&lt;BR/&gt; 2279: (0.182648%)&lt;BR/&gt; 2278: (0.182648%)&gt;];
}
443--607[label="1;266pkt 266fpkt"];
443--1153[label="1;161pkt 161fpkt"];
443--1412[label="1;223pkt 223fpkt"];
443--1598[label="0.0330969;14pkt 14fpkt"];
443--1602[label="0.0330969;14pkt 14fpkt"];
443--1604[label="0.0330969;14pkt 14fpkt"];
443--1958[label="1;11pkt 11fpkt"];
443--2386[label="1;11pkt 11fpkt"];
607--1153[label="0.68323;110pkt 110fpkt"];
607--1412[label="1;223pkt 223fpkt"];
607--1598[label="0.0526316;14pkt 14fpkt"];
607--1602[label="0.0526316;14pkt 14fpkt"];
607--1604[label="0.0526316;14pkt 14fpkt"];
1153--1412[label="0.68323;110pkt 110fpkt"];
1153--1598[label="0.0869565;14pkt 14fpkt"];
1153--1602[label="0.0869565;14pkt 14fpkt"];
1153--1604[label="0.0869565;14pkt 14fpkt"];
1153--1958[label="0.363636;4pkt 4fpkt"];
1153--2386[label="0.363636;4pkt 4fpkt"];
1412--1598[label="0.0627803;14pkt 14fpkt"];
1412--1602[label="0.0627803;14pkt 14fpkt"];
1412--1604[label="0.0627803;14pkt 14fpkt"];
1958--2386[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="144.52.214.219" src_ip="44.86.245.35" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
695[label="148.177.243.165;s;528pkt 528fpkt", shape=diamond, color=yellow];
1414[label="148.177.243.165;s;418pkt 418fpkt", shape=hexagon, color=black];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.177.243.165:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
695--1414[label="1;418pkt 418fpkt"];
</description>
    <slice>
      <filter src_ip="148.177.243.165"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
538[label="141.165.228.42;s;11pkt 11fpkt", shape=diamond, color=yellow];
552[label="16.229.140.220;d;1pkt 1fpkt", shape=diamond, color=yellow];
1416[label="16.229.140.220;d;1pkt 1fpkt", shape=hexagon, color=black];
1728[label="141.165.228.42;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.165.228.42:*, 93.21.96.43:6699}[54.5455%]&lt;BR/&gt;{141.165.228.42:6346, 46.15.125.26:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (34.7826%)&lt;BR/&gt; 6346: (10.8696%)&lt;BR/&gt; 1052: (8.69565%)&lt;BR/&gt; 2078: (4.34783%)&lt;BR/&gt; 1976: (4.34783%)&gt;];
}
538--552[label="1;1pkt 1fpkt"];
538--1416[label="1;1pkt 1fpkt"];
538--1728[label="1;10pkt 10fpkt"];
552--1416[label="1;1pkt 1fpkt"];
552--1728[label="1;1pkt 1fpkt"];
1416--1728[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="93.21.96.43" dst_port="6699" src_ip="141.165.228.42"/>
      <filter dst_ip="46.15.125.26" src_ip="141.165.228.42" src_port="6346"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
360[label="204.19.148.226;d;78pkt 78fpkt", shape=diamond, color=yellow];
488[label="52.136.233.47;s;2pkt 2fpkt", shape=diamond, color=yellow];
614[label="148.177.243.160;d;209pkt 209fpkt", shape=diamond, color=yellow];
615[label="144.52.241.81;d;498pkt 498fpkt", shape=diamond, color=yellow];
700[label="215.188.120.37;d;51pkt 51fpkt", shape=diamond, color=yellow];
1364[label="148.177.243.160;d;156pkt 156fpkt", shape=hexagon, color=black];
1366[label="144.52.241.81;d;450pkt 450fpkt", shape=hexagon, color=black];
1419[label="204.19.148.226;d;78pkt 78fpkt", shape=hexagon, color=black];
1460[label="52.136.233.47;s;2pkt 2fpkt", shape=hexagon, color=black];
1702[label="194.229.99.35;15pkt 15fpkt", shape=pentagon, color=darkviolet];
1714[label="215.188.120.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1798[label="193.26.177.67;24pkt 24fpkt", shape=pentagon, color=darkviolet];
1853[label="219.212.74.84;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1919[label="52.53.110.111;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2018[label="46.172.46.151;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2074[label="52.52.60.177;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2111[label="200.3.47.196;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2217[label="200.172.53.239;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2237[label="92.115.107.244;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2250[label="52.54.195.248;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2437[label="200.3.47.196;39pkt 39fpkt", shape=invtriangle, color=brown];
2574[label="200.172.53.239;24pkt 24fpkt", shape=invhouse, color=bisque];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 144.52.241.81:53}[44.8571%]&lt;BR/&gt;{*:0, *:0}[30.5714%]&lt;BR/&gt;{*:53, *:53}[23.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (41.2711%)&lt;BR/&gt; 0: (26.4048%)&lt;BR/&gt; 25: (6.43753%)&lt;BR/&gt; 80: (1.50027%)&lt;BR/&gt; 1024: (0.35461%)&gt;];
}
360--488[label="1;2pkt 2fpkt"];
360--1419[label="1;78pkt 78fpkt"];
360--1460[label="1;2pkt 2fpkt"];
360--1598[label="0.0512821;4pkt 4fpkt"];
360--1599[label="0.0384615;3pkt 3fpkt"];
360--1601[label="0.0384615;3pkt 3fpkt"];
360--1602[label="0.0512821;4pkt 4fpkt"];
360--1603[label="0.0384615;3pkt 3fpkt"];
360--1604[label="0.0512821;4pkt 4fpkt"];
360--1798[label="0.0416667;1pkt 1fpkt"];
360--1919[label="0.0625;1pkt 1fpkt"];
360--2018[label="0.0416667;1pkt 1fpkt"];
360--2074[label="0.0263158;1pkt 1fpkt"];
360--2111[label="0.0263158;1pkt 1fpkt"];
360--2217[label="0.0416667;1pkt 1fpkt"];
360--2237[label="0.0416667;1pkt 1fpkt"];
360--2250[label="0.0263158;1pkt 1fpkt"];
360--2437[label="0.025641;1pkt 1fpkt"];
360--2574[label="0.0416667;1pkt 1fpkt"];
488--1419[label="1;2pkt 2fpkt"];
488--1460[label="1;2pkt 2fpkt"];
614--825[label="0.00478469;1pkt 1fpkt"];
614--1364[label="1;156pkt 156fpkt"];
614--1496[label="0.00478469;1pkt 1fpkt"];
614--1599[label="0.00956938;2pkt 2fpkt"];
614--1798[label="0.0416667;1pkt 1fpkt"];
614--1919[label="0.0625;1pkt 1fpkt"];
614--1936[label="0.0434783;1pkt 1fpkt"];
614--2018[label="0.0416667;1pkt 1fpkt"];
614--2074[label="0.0263158;1pkt 1fpkt"];
614--2111[label="0.0263158;1pkt 1fpkt"];
614--2177[label="0.0285714;1pkt 1fpkt"];
614--2217[label="0.0416667;1pkt 1fpkt"];
614--2237[label="0.0416667;1pkt 1fpkt"];
614--2250[label="0.0263158;1pkt 1fpkt"];
614--2437[label="0.025641;1pkt 1fpkt"];
614--2466[label="0.0285714;1pkt 1fpkt"];
614--2574[label="0.0416667;1pkt 1fpkt"];
615--622[label="0.0421687;21pkt 21fpkt"];
615--629[label="0.111111;1pkt 1fpkt"];
615--825[label="0.0060241;3pkt 3fpkt"];
615--1310[label="0.0421687;21pkt 21fpkt"];
615--1366[label="1;450pkt 450fpkt"];
615--1422[label="0.111111;1pkt 1fpkt"];
615--1496[label="0.0060241;3pkt 3fpkt"];
615--1599[label="0.0502008;25pkt 25fpkt"];
615--1601[label="0.0261044;13pkt 13fpkt"];
615--1603[label="0.0261044;13pkt 13fpkt"];
615--1702[label="0.0666667;1pkt 1fpkt"];
615--1776[label="0.0421687;21pkt 21fpkt"];
615--1798[label="0.0416667;1pkt 1fpkt"];
615--1919[label="0.0625;1pkt 1fpkt"];
615--2018[label="0.0416667;1pkt 1fpkt"];
615--2025[label="0.0178571;1pkt 1fpkt"];
615--2054[label="0.0588235;1pkt 1fpkt"];
615--2074[label="0.0263158;1pkt 1fpkt"];
615--2111[label="0.0263158;1pkt 1fpkt"];
615--2140[label="0.0666667;1pkt 1fpkt"];
615--2151[label="0.0714286;1pkt 1fpkt"];
615--2159[label="0.111111;1pkt 1fpkt"];
615--2177[label="0.0285714;1pkt 1fpkt"];
615--2217[label="0.0416667;1pkt 1fpkt"];
615--2227[label="0.125;1pkt 1fpkt"];
615--2234[label="0.0166667;1pkt 1fpkt"];
615--2237[label="0.0416667;1pkt 1fpkt"];
615--2250[label="0.0263158;1pkt 1fpkt"];
615--2437[label="0.025641;1pkt 1fpkt"];
615--2466[label="0.0285714;1pkt 1fpkt"];
615--2481[label="0.0166667;1pkt 1fpkt"];
615--2574[label="0.0416667;1pkt 1fpkt"];
700--1714[label="1;1pkt 1fpkt"];
700--1798[label="0.0416667;1pkt 1fpkt"];
700--1853[label="0.25;1pkt 1fpkt"];
700--2018[label="0.0416667;1pkt 1fpkt"];
700--2111[label="0.0263158;1pkt 1fpkt"];
700--2217[label="0.0416667;1pkt 1fpkt"];
700--2237[label="0.0416667;1pkt 1fpkt"];
700--2250[label="0.0263158;1pkt 1fpkt"];
700--2437[label="0.025641;1pkt 1fpkt"];
700--2574[label="0.0416667;1pkt 1fpkt"];
1364--1496[label="0.00641026;1pkt 1fpkt"];
1364--1599[label="0.0128205;2pkt 2fpkt"];
1364--1798[label="0.0416667;1pkt 1fpkt"];
1364--1919[label="0.0625;1pkt 1fpkt"];
1364--1936[label="0.0434783;1pkt 1fpkt"];
1364--2018[label="0.0416667;1pkt 1fpkt"];
1364--2074[label="0.0263158;1pkt 1fpkt"];
1364--2111[label="0.0263158;1pkt 1fpkt"];
1364--2177[label="0.0285714;1pkt 1fpkt"];
1364--2217[label="0.0416667;1pkt 1fpkt"];
1364--2237[label="0.0416667;1pkt 1fpkt"];
1364--2250[label="0.0263158;1pkt 1fpkt"];
1364--2437[label="0.025641;1pkt 1fpkt"];
1364--2466[label="0.0285714;1pkt 1fpkt"];
1364--2574[label="0.0416667;1pkt 1fpkt"];
1366--1422[label="0.111111;1pkt 1fpkt"];
1366--1496[label="0.00666667;3pkt 3fpkt"];
1366--1599[label="0.0555556;25pkt 25fpkt"];
1366--1601[label="0.0288889;13pkt 13fpkt"];
1366--1603[label="0.0288889;13pkt 13fpkt"];
1366--1702[label="0.0666667;1pkt 1fpkt"];
1366--1776[label="0.0466667;21pkt 21fpkt"];
1366--1798[label="0.0416667;1pkt 1fpkt"];
1366--1919[label="0.0625;1pkt 1fpkt"];
1366--2018[label="0.0416667;1pkt 1fpkt"];
1366--2025[label="0.0178571;1pkt 1fpkt"];
1366--2074[label="0.0263158;1pkt 1fpkt"];
1366--2111[label="0.0263158;1pkt 1fpkt"];
1366--2140[label="0.0666667;1pkt 1fpkt"];
1366--2159[label="0.111111;1pkt 1fpkt"];
1366--2177[label="0.0285714;1pkt 1fpkt"];
1366--2217[label="0.0416667;1pkt 1fpkt"];
1366--2227[label="0.125;1pkt 1fpkt"];
1366--2234[label="0.0166667;1pkt 1fpkt"];
1366--2237[label="0.0416667;1pkt 1fpkt"];
1366--2250[label="0.0263158;1pkt 1fpkt"];
1366--2437[label="0.025641;1pkt 1fpkt"];
1366--2466[label="0.0285714;1pkt 1fpkt"];
1366--2481[label="0.0166667;1pkt 1fpkt"];
1366--2574[label="0.0416667;1pkt 1fpkt"];
1419--1460[label="1;2pkt 2fpkt"];
1419--1598[label="0.0512821;4pkt 4fpkt"];
1419--1599[label="0.0384615;3pkt 3fpkt"];
1419--1601[label="0.0384615;3pkt 3fpkt"];
1419--1602[label="0.0512821;4pkt 4fpkt"];
1419--1603[label="0.0384615;3pkt 3fpkt"];
1419--1604[label="0.0512821;4pkt 4fpkt"];
1419--1798[label="0.0416667;1pkt 1fpkt"];
1419--1919[label="0.0625;1pkt 1fpkt"];
1419--2018[label="0.0416667;1pkt 1fpkt"];
1419--2074[label="0.0263158;1pkt 1fpkt"];
1419--2111[label="0.0263158;1pkt 1fpkt"];
1419--2217[label="0.0416667;1pkt 1fpkt"];
1419--2237[label="0.0416667;1pkt 1fpkt"];
1419--2250[label="0.0263158;1pkt 1fpkt"];
1419--2437[label="0.025641;1pkt 1fpkt"];
1419--2574[label="0.0416667;1pkt 1fpkt"];
2111--2437[label="1;38pkt 38fpkt"];
2217--2574[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="144.52.241.81" dst_port="53"/>
      <filter dst_port="53" src_port="53"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
854[label="144.52.13.213;d;60pkt 60fpkt", shape=diamond, color=yellow];
1427[label="144.52.13.213;d;60pkt 60fpkt", shape=hexagon, color=black];
1916[label="215.208.178.110;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 144.52.13.213:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1096: (1.23967%)&lt;BR/&gt; 64426: (0.826446%)&lt;BR/&gt; 63067: (0.826446%)&lt;BR/&gt; 58126: (0.826446%)&gt;];
}
854--1427[label="1;60pkt 60fpkt"];
854--1916[label="1;1pkt 1fpkt"];
1427--1916[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.52.13.213" dst_port="80"/>
    </slice>
    <from sec="1000012095" usec="0"/>
    <to sec="1000012338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
129[label="141.165.79.107;d;4pkt 4fpkt", shape=diamond, color=yellow];
132[label="16.233.250.91;s;1pkt 1fpkt", shape=diamond, color=yellow];
851[label="141.165.139.224;d;22pkt 22fpkt", shape=diamond, color=yellow];
916[label="154.226.123.81;s;1pkt 1fpkt", shape=diamond, color=yellow];
963[label="214.98.20.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
1126[label="141.165.79.107;d;4pkt 4fpkt", shape=hexagon, color=black];
1127[label="16.233.250.91;s;1pkt 1fpkt", shape=hexagon, color=black];
1480[label="154.226.123.81;s;1pkt 1fpkt", shape=hexagon, color=black];
1820[label="92.242.17.74;24pkt 24fpkt", shape=pentagon, color=darkviolet];
1876[label="16.233.250.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 141.165.139.224:*}[50%]&lt;BR/&gt;{92.242.17.74:80, 196.139.189.46:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.1667%)&lt;BR/&gt; 6699: (13.3333%)&lt;BR/&gt; 7729: (5%)&lt;BR/&gt; 3209: (4.16667%)&lt;BR/&gt; 3211: (2.5%)&gt;];
}
129--132[label="1;1pkt 1fpkt"];
129--1126[label="1;4pkt 4fpkt"];
129--1127[label="1;1pkt 1fpkt"];
129--1820[label="0.5;2pkt 2fpkt"];
129--1876[label="1;1pkt 1fpkt"];
132--1126[label="1;1pkt 1fpkt"];
132--1127[label="1;1pkt 1fpkt"];
132--1876[label="1;1pkt 1fpkt"];
851--916[label="1;1pkt 1fpkt"];
851--963[label="1;1pkt 1fpkt"];
851--1480[label="1;1pkt 1fpkt"];
851--1820[label="0.181818;4pkt 4fpkt"];
916--1480[label="1;1pkt 1fpkt"];
1126--1127[label="1;1pkt 1fpkt"];
1126--1820[label="0.5;2pkt 2fpkt"];
1126--1876[label="1;1pkt 1fpkt"];
1127--1876[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.139.224"/>
      <filter dst_ip="196.139.189.46" src_ip="92.242.17.74" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
144[label="197.116.136.7;d;203pkt 203fpkt", shape=diamond, color=yellow];
245[label="197.116.136.6;d;123pkt 123fpkt", shape=diamond, color=yellow];
460[label="196.34.41.161;s;70pkt 70fpkt", shape=diamond, color=yellow];
869[label="197.116.136.0;d;16pkt 16fpkt", shape=diamond, color=yellow];
1160[label="196.34.41.161;s;68pkt 68fpkt", shape=hexagon, color=black];
1440[label="197.116.136.0;d;16pkt 16fpkt", shape=hexagon, color=black];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 197.116.136.6:*}[35.9649%]&lt;BR/&gt;{*:*, 197.116.136.7:6667}[23.6842%]&lt;BR/&gt;{196.34.41.161:*, *:*}[20.4678%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (16.6331%)&lt;BR/&gt; 6660: (6.45161%)&lt;BR/&gt; 113: (5.14113%)&lt;BR/&gt; 6665: (3.32661%)&lt;BR/&gt; 6663: (3.32661%)&gt;];
}
144--460[label="0.528571;37pkt 37fpkt"];
144--1160[label="0.514706;35pkt 35fpkt"];
245--460[label="0.442857;31pkt 31fpkt"];
245--1160[label="0.455882;31pkt 31fpkt"];
460--869[label="0.125;2pkt 2fpkt"];
460--1160[label="1;68pkt 68fpkt"];
460--1440[label="0.125;2pkt 2fpkt"];
869--1160[label="0.125;2pkt 2fpkt"];
869--1440[label="1;16pkt 16fpkt"];
1160--1440[label="0.125;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="196.34.41.161"/>
      <filter dst_ip="197.116.136.6"/>
      <filter dst_ip="197.116.136.7" dst_port="6667"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
294[label="194.150.116.224;s;4pkt 4fpkt", shape=diamond, color=yellow];
451[label="164.202.208.149;d;2pkt 2fpkt", shape=diamond, color=yellow];
771[label="164.202.86.165;d;5pkt 5fpkt", shape=diamond, color=yellow];
870[label="164.202.196.53;d;7pkt 7fpkt", shape=diamond, color=yellow];
1131[label="194.150.116.224;s;4pkt 4fpkt", shape=hexagon, color=black];
1411[label="164.202.86.165;d;5pkt 5fpkt", shape=hexagon, color=black];
1442[label="164.202.196.53;d;7pkt 7fpkt", shape=hexagon, color=black];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.202.86.165:*}[35.7143%]&lt;BR/&gt;{*:5001, 164.202.196.53:*}[21.4286%]&lt;BR/&gt;{194.150.116.224:7000, *:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (16.1765%)&lt;BR/&gt; 5000: (11.7647%)&lt;BR/&gt; 0: (11.7647%)&lt;BR/&gt; 5001: (8.82353%)&lt;BR/&gt; 1756: (5.88235%)&gt;];
}
294--451[label="1;2pkt 2fpkt"];
294--771[label="0.25;1pkt 1fpkt"];
294--870[label="0.25;1pkt 1fpkt"];
294--1131[label="1;4pkt 4fpkt"];
294--1411[label="0.25;1pkt 1fpkt"];
294--1442[label="0.25;1pkt 1fpkt"];
451--1131[label="1;2pkt 2fpkt"];
771--1131[label="0.25;1pkt 1fpkt"];
771--1411[label="1;5pkt 5fpkt"];
870--1131[label="0.25;1pkt 1fpkt"];
870--1442[label="1;7pkt 7fpkt"];
1131--1411[label="0.25;1pkt 1fpkt"];
1131--1442[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.202.86.165"/>
      <filter src_ip="194.150.116.224" src_port="7000"/>
      <filter dst_ip="164.202.196.53" src_port="5001"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
606[label="141.165.36.253;s;555pkt 555fpkt", shape=diamond, color=yellow];
1449[label="141.165.36.253;s;521pkt 521fpkt", shape=hexagon, color=black];
2256[label="141.165.36.253;560pkt 560fpkt", shape=pentagon, color=darkviolet];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.165.36.253:27963, *:*}[52.3214%]&lt;BR/&gt;{141.165.36.253:27964, *:*}[47.5%]&lt;BR/&gt;{141.165.36.253:*, *:27960}[22.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27963: (26.2531%)&lt;BR/&gt; 27964: (23.6553%)&lt;BR/&gt; 27960: (11.5526%)&lt;BR/&gt; 27950: (0.733496%)&lt;BR/&gt; 1025: (0.550122%)&gt;];
}
606--1449[label="1;521pkt 521fpkt"];
606--2256[label="1;555pkt 555fpkt"];
1449--2256[label="1;521pkt 521fpkt"];
</description>
    <slice>
      <filter src_ip="141.165.36.253" src_port="27963"/>
      <filter src_ip="141.165.36.253" src_port="27964"/>
      <filter dst_port="27960" src_ip="141.165.36.253"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
783[label="141.165.63.186;d;66pkt 66fpkt", shape=diamond, color=yellow];
1461[label="141.165.63.186;d;66pkt 66fpkt", shape=hexagon, color=black];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.1.96.103:80, 141.165.63.186:*}[53.0303%]&lt;BR/&gt;{215.0.56.96:80, 141.165.63.186:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1218: (0.757576%)&lt;BR/&gt; 1217: (0.757576%)&lt;BR/&gt; 1216: (0.757576%)&lt;BR/&gt; 1215: (0.757576%)&gt;];
}
783--1461[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.63.186" src_ip="214.1.96.103" src_port="80"/>
      <filter dst_ip="141.165.63.186" src_ip="215.0.56.96" src_port="80"/>
    </slice>
    <from sec="1000011659" usec="0"/>
    <to sec="1000012329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
654[label="141.165.229.46;d;1995pkt 1995fpkt", shape=diamond, color=yellow];
661[label="215.238.118.163;s;1582pkt 1582fpkt", shape=diamond, color=yellow];
739[label="215.238.118.162;s;390pkt 390fpkt", shape=diamond, color=yellow];
1269[label="215.238.118.163;s;335pkt 335fpkt", shape=hexagon, color=black];
1467[label="215.238.118.162;s;390pkt 390fpkt", shape=hexagon, color=black];
1509[label="141.165.229.46;d;1995pkt 1995fpkt", shape=hexagon, color=black];
1667[label="215.238.117.23;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2006[label="215.238.117.147;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2043[label="215.238.118.163;1608pkt 1608fpkt", shape=pentagon, color=darkviolet];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.238.118.163:*, 141.165.229.46:80}[26.1622%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.0315%)&lt;BR/&gt; 53: (3.60924%)&lt;BR/&gt; 6346: (3.53705%)&lt;BR/&gt; 6699: (2.16554%)&lt;BR/&gt; 20: (1.62416%)&gt;];
}
654--661[label="1;1582pkt 1582fpkt"];
654--739[label="1;390pkt 390fpkt"];
654--1269[label="1;335pkt 335fpkt"];
654--1467[label="1;390pkt 390fpkt"];
654--1509[label="1;1995pkt 1995fpkt"];
654--1667[label="1;8pkt 8fpkt"];
654--2006[label="1;9pkt 9fpkt"];
654--2043[label="0.983209;1581pkt 1581fpkt"];
661--1269[label="1;335pkt 335fpkt"];
661--1509[label="1;1582pkt 1582fpkt"];
661--2043[label="0.999368;1581pkt 1581fpkt"];
739--1467[label="1;390pkt 390fpkt"];
739--1509[label="1;390pkt 390fpkt"];
1269--1509[label="1;335pkt 335fpkt"];
1269--2043[label="0.997015;334pkt 334fpkt"];
1467--1509[label="1;390pkt 390fpkt"];
1509--1667[label="1;8pkt 8fpkt"];
1509--2006[label="1;9pkt 9fpkt"];
1509--2043[label="0.983209;1581pkt 1581fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.229.46" dst_port="80" src_ip="215.238.118.163"/>
    </slice>
    <from sec="1000011913" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
882[label="141.36.128.216;s;191pkt 191fpkt", shape=diamond, color=yellow];
1497[label="141.36.128.216;s;191pkt 191fpkt", shape=hexagon, color=black];
2165[label="141.36.128.216;191pkt 191fpkt", shape=pentagon, color=darkviolet];
2459[label="141.36.128.216;191pkt 191fpkt", shape=invtriangle, color=brown];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.36.128.216:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3047: (0.52356%)&lt;BR/&gt; 2864: (0.52356%)&lt;BR/&gt; 2777: (0.52356%)&lt;BR/&gt; 2084: (0.52356%)&gt;];
}
882--1497[label="1;191pkt 191fpkt"];
882--2165[label="1;191pkt 191fpkt"];
882--2459[label="1;191pkt 191fpkt"];
1497--2165[label="1;191pkt 191fpkt"];
1497--2459[label="1;191pkt 191fpkt"];
2165--2459[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="141.36.128.216"/>
    </slice>
    <from sec="1000011602" usec="0"/>
    <to sec="1000012526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
943[label="197.116.137.106;s;180pkt 180fpkt", shape=diamond, color=yellow];
1499[label="197.116.137.106;s;180pkt 180fpkt", shape=hexagon, color=black];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.116.137.106:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
943--1499[label="1;180pkt 180fpkt"];
</description>
    <slice>
      <filter src_ip="197.116.137.106"/>
    </slice>
    <from sec="1000011603" usec="0"/>
    <to sec="1000012518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
560[label="164.202.86.168;s;3pkt 3fpkt", shape=diamond, color=yellow];
566[label="93.100.229.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
620[label="94.41.172.7;d;1pkt 1fpkt", shape=diamond, color=yellow];
1502[label="94.41.172.7;d;1pkt 1fpkt", shape=hexagon, color=black];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.202.86.168:3142, 93.100.229.6:41002}[33.3333%]&lt;BR/&gt;{164.202.86.168:3159, 94.41.172.7:41119}[33.3333%]&lt;BR/&gt;{164.202.86.168:2293, 92.115.103.202:21}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41119: (25%)&lt;BR/&gt; 3159: (25%)&lt;BR/&gt; 41002: (16.6667%)&lt;BR/&gt; 3142: (16.6667%)&lt;BR/&gt; 2293: (8.33333%)&gt;];
}
560--566[label="1;1pkt 1fpkt"];
560--620[label="1;1pkt 1fpkt"];
560--1502[label="1;1pkt 1fpkt"];
620--1502[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="92.115.103.202" dst_port="21" src_ip="164.202.86.168" src_port="2293"/>
      <filter dst_ip="94.41.172.7" dst_port="41119" src_ip="164.202.86.168" src_port="3159"/>
      <filter dst_ip="93.100.229.6" dst_port="41002" src_ip="164.202.86.168" src_port="3142"/>
    </slice>
    <from sec="1000011607" usec="0"/>
    <to sec="1000012507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
139[label="196.129.30.11;s;96pkt 96fpkt", shape=diamond, color=yellow];
218[label="196.42.126.171;s;78pkt 78fpkt", shape=diamond, color=yellow];
361[label="196.208.128.52;d;2pkt 2fpkt", shape=diamond, color=yellow];
450[label="196.6.71.119;d;4pkt 4fpkt", shape=diamond, color=yellow];
804[label="196.99.21.147;d;1pkt 1fpkt", shape=diamond, color=yellow];
894[label="196.198.7.106;d;12pkt 12fpkt", shape=diamond, color=yellow];
946[label="196.9.143.236;d;6pkt 6fpkt", shape=diamond, color=yellow];
947[label="196.193.33.125;d;14pkt 14fpkt", shape=diamond, color=yellow];
1013[label="196.42.126.171;s;78pkt 78fpkt", shape=hexagon, color=black];
1245[label="196.208.128.52;d;2pkt 2fpkt", shape=hexagon, color=black];
1504[label="196.9.143.236;d;6pkt 6fpkt", shape=hexagon, color=black];
1505[label="196.193.33.125;d;14pkt 14fpkt", shape=hexagon, color=black];
1644[label="196.129.30.11;96pkt 96fpkt", shape=pentagon, color=darkviolet];
1908[label="196.42.109.106;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2020[label="196.168.6.154;157pkt 157fpkt", shape=pentagon, color=darkviolet];
2048[label="196.42.100.165;36pkt 36fpkt", shape=pentagon, color=darkviolet];
2278[label="196.129.30.11;96pkt 96fpkt", shape=invtriangle, color=brown];
2417[label="196.42.100.165;36pkt 36fpkt", shape=invtriangle, color=brown];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.168.6.154:0, *:0}[38.1068%]&lt;BR/&gt;{196.129.30.11:0, *:0}[23.301%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.0728%)&lt;BR/&gt; 80: (0.463576%)&lt;BR/&gt; 4134: (0.13245%)&lt;BR/&gt; 2702: (0.13245%)&lt;BR/&gt; 4338: (0.0662252%)&gt;];
}
139--361[label="0.5;1pkt 1fpkt"];
139--450[label="0.25;1pkt 1fpkt"];
139--804[label="1;1pkt 1fpkt"];
139--894[label="0.0833333;1pkt 1fpkt"];
139--946[label="0.166667;1pkt 1fpkt"];
139--947[label="0.0714286;1pkt 1fpkt"];
139--1245[label="0.5;1pkt 1fpkt"];
139--1504[label="0.166667;1pkt 1fpkt"];
139--1505[label="0.0714286;1pkt 1fpkt"];
139--1644[label="1;96pkt 96fpkt"];
139--2278[label="1;96pkt 96fpkt"];
218--450[label="0.25;1pkt 1fpkt"];
218--894[label="0.0833333;1pkt 1fpkt"];
218--946[label="0.166667;1pkt 1fpkt"];
218--947[label="0.0714286;1pkt 1fpkt"];
218--1013[label="1;78pkt 78fpkt"];
218--1504[label="0.166667;1pkt 1fpkt"];
218--1505[label="0.0714286;1pkt 1fpkt"];
361--1245[label="1;2pkt 2fpkt"];
361--1644[label="0.5;1pkt 1fpkt"];
361--2278[label="0.5;1pkt 1fpkt"];
450--1013[label="0.25;1pkt 1fpkt"];
450--1644[label="0.25;1pkt 1fpkt"];
450--2278[label="0.25;1pkt 1fpkt"];
804--1644[label="1;1pkt 1fpkt"];
804--2278[label="1;1pkt 1fpkt"];
894--1013[label="0.0833333;1pkt 1fpkt"];
894--1644[label="0.0833333;1pkt 1fpkt"];
894--2020[label="0.0833333;1pkt 1fpkt"];
894--2278[label="0.0833333;1pkt 1fpkt"];
946--1013[label="0.166667;1pkt 1fpkt"];
946--1504[label="1;6pkt 6fpkt"];
946--1644[label="0.166667;1pkt 1fpkt"];
946--2020[label="0.166667;1pkt 1fpkt"];
946--2278[label="0.166667;1pkt 1fpkt"];
947--1013[label="0.0714286;1pkt 1fpkt"];
947--1505[label="1;14pkt 14fpkt"];
947--1644[label="0.0714286;1pkt 1fpkt"];
947--1908[label="0.0714286;1pkt 1fpkt"];
947--2020[label="0.0714286;1pkt 1fpkt"];
947--2048[label="0.0714286;1pkt 1fpkt"];
947--2278[label="0.0714286;1pkt 1fpkt"];
947--2417[label="0.0714286;1pkt 1fpkt"];
1013--1504[label="0.166667;1pkt 1fpkt"];
1013--1505[label="0.0714286;1pkt 1fpkt"];
1245--1644[label="0.5;1pkt 1fpkt"];
1245--2278[label="0.5;1pkt 1fpkt"];
1504--1644[label="0.166667;1pkt 1fpkt"];
1504--2020[label="0.166667;1pkt 1fpkt"];
1504--2278[label="0.166667;1pkt 1fpkt"];
1505--1644[label="0.0714286;1pkt 1fpkt"];
1505--1908[label="0.0714286;1pkt 1fpkt"];
1505--2020[label="0.0714286;1pkt 1fpkt"];
1505--2048[label="0.0714286;1pkt 1fpkt"];
1505--2278[label="0.0714286;1pkt 1fpkt"];
1505--2417[label="0.0714286;1pkt 1fpkt"];
1644--2278[label="1;96pkt 96fpkt"];
2048--2417[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter src_ip="196.168.6.154"/>
      <filter src_ip="196.129.30.11"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22207,1.96147,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
233[label="141.165.231.170;d;181pkt 181fpkt", shape=diamond, color=yellow];
234[label="196.142.193.196;s;143pkt 143fpkt", shape=diamond, color=yellow];
376[label="214.66.8.245;s;4pkt 4fpkt", shape=diamond, color=yellow];
586[label="196.142.143.159;s;11pkt 11fpkt", shape=diamond, color=yellow];
1175[label="141.165.231.170;d;181pkt 181fpkt", shape=hexagon, color=black];
1262[label="196.142.143.159;s;11pkt 11fpkt", shape=hexagon, color=black];
1564[label="141.165.231.170;d;181pkt 181fpkt", shape=polygon, color=gold];
1595[label="196.142.143.159;s;11pkt 11fpkt", shape=polygon, color=gold];
1710[label="196.142.143.37;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2238[label="214.66.8.245;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2301[label="196.142.143.37;18pkt 18fpkt", shape=invtriangle, color=brown];
2483[label="214.66.8.245;3pkt 3fpkt", shape=invtriangle, color=brown];
2509[label="196.142.143.37;18pkt 18fpkt", shape=invhouse, color=bisque];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.142.193.196:80, 141.165.231.170:*}[79.0055%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8087%)&lt;BR/&gt; 3609: (0.382653%)&lt;BR/&gt; 3588: (0.382653%)&lt;BR/&gt; 3586: (0.382653%)&lt;BR/&gt; 3578: (0.382653%)&gt;];
}
233--234[label="1;143pkt 143fpkt"];
233--376[label="1;4pkt 4fpkt"];
233--586[label="1;11pkt 11fpkt"];
233--948[label="0.020202;2pkt 2fpkt"];
233--1175[label="1;181pkt 181fpkt"];
233--1262[label="1;11pkt 11fpkt"];
233--1506[label="0.020202;2pkt 2fpkt"];
233--1564[label="1;181pkt 181fpkt"];
233--1595[label="1;11pkt 11fpkt"];
233--1598[label="0.0110497;2pkt 2fpkt"];
233--1602[label="0.0110497;2pkt 2fpkt"];
233--1604[label="0.0110497;2pkt 2fpkt"];
233--1710[label="1;18pkt 18fpkt"];
233--2238[label="1;4pkt 4fpkt"];
233--2301[label="1;18pkt 18fpkt"];
233--2483[label="1;3pkt 3fpkt"];
233--2509[label="1;18pkt 18fpkt"];
234--1175[label="1;143pkt 143fpkt"];
234--1564[label="1;143pkt 143fpkt"];
376--1175[label="1;4pkt 4fpkt"];
376--1564[label="1;4pkt 4fpkt"];
376--1598[label="0.5;2pkt 2fpkt"];
376--1602[label="0.5;2pkt 2fpkt"];
376--1604[label="0.5;2pkt 2fpkt"];
376--2238[label="1;4pkt 4fpkt"];
376--2483[label="1;3pkt 3fpkt"];
586--1175[label="1;11pkt 11fpkt"];
586--1262[label="1;11pkt 11fpkt"];
586--1564[label="1;11pkt 11fpkt"];
586--1595[label="1;11pkt 11fpkt"];
1175--1262[label="1;11pkt 11fpkt"];
1175--1506[label="0.020202;2pkt 2fpkt"];
1175--1564[label="1;181pkt 181fpkt"];
1175--1595[label="1;11pkt 11fpkt"];
1175--1598[label="0.0110497;2pkt 2fpkt"];
1175--1602[label="0.0110497;2pkt 2fpkt"];
1175--1604[label="0.0110497;2pkt 2fpkt"];
1175--1710[label="1;18pkt 18fpkt"];
1175--2238[label="1;4pkt 4fpkt"];
1175--2301[label="1;18pkt 18fpkt"];
1175--2483[label="1;3pkt 3fpkt"];
1175--2509[label="1;18pkt 18fpkt"];
1262--1564[label="1;11pkt 11fpkt"];
1262--1595[label="1;11pkt 11fpkt"];
1564--1595[label="1;11pkt 11fpkt"];
1564--1598[label="0.0110497;2pkt 2fpkt"];
1564--1602[label="0.0110497;2pkt 2fpkt"];
1564--1604[label="0.0110497;2pkt 2fpkt"];
1564--1710[label="1;18pkt 18fpkt"];
1564--2238[label="1;4pkt 4fpkt"];
1564--2301[label="1;18pkt 18fpkt"];
1564--2483[label="1;3pkt 3fpkt"];
1564--2509[label="1;18pkt 18fpkt"];
1710--2301[label="1;18pkt 18fpkt"];
1710--2509[label="1;18pkt 18fpkt"];
2238--2483[label="1;3pkt 3fpkt"];
2301--2509[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.231.170" src_ip="196.142.193.196" src_port="80"/>
    </slice>
    <from sec="1000011643" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
658[label="212.58.133.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
730[label="148.182.243.21;s;25pkt 25fpkt", shape=diamond, color=yellow];
756[label="213.216.139.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
860[label="212.60.242.101;d;1pkt 1fpkt", shape=diamond, color=yellow];
958[label="219.218.102.81;d;1pkt 1fpkt", shape=diamond, color=yellow];
1510[label="212.58.133.4;d;1pkt 1fpkt", shape=hexagon, color=black];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.182.243.21:6346, *:*}[72%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (45%)&lt;BR/&gt; 1254: (5%)&lt;BR/&gt; 57348: (3.33333%)&lt;BR/&gt; 2965: (3.33333%)&lt;BR/&gt; 1945: (3.33333%)&gt;];
}
658--730[label="1;1pkt 1fpkt"];
658--1510[label="1;1pkt 1fpkt"];
730--756[label="1;1pkt 1fpkt"];
730--860[label="1;1pkt 1fpkt"];
730--958[label="1;1pkt 1fpkt"];
730--1510[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="148.182.243.21" src_port="6346"/>
    </slice>
    <from sec="1000011861" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637548,2.09088,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
395[label="148.182.228.196;s;85pkt 85fpkt", shape=diamond, color=yellow];
711[label="196.33.130.82;s;63pkt 63fpkt", shape=diamond, color=yellow];
755[label="209.224.100.58;d;1pkt 1fpkt", shape=diamond, color=yellow];
794[label="215.78.208.139;d;28pkt 28fpkt", shape=diamond, color=yellow];
813[label="209.224.100.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
929[label="209.224.100.21;d;1pkt 1fpkt", shape=diamond, color=yellow];
1192[label="148.182.228.196;s;70pkt 70fpkt", shape=hexagon, color=black];
1335[label="209.224.100.58;d;1pkt 1fpkt", shape=hexagon, color=black];
1428[label="209.224.100.6;d;1pkt 1fpkt", shape=hexagon, color=black];
1503[label="196.33.130.82;s;63pkt 63fpkt", shape=hexagon, color=black];
1520[label="209.224.100.21;d;1pkt 1fpkt", shape=hexagon, color=black];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.182.228.196:*, *:80}[56.6667%]&lt;BR/&gt;{196.33.130.82:*, *:80}[42%]&lt;BR/&gt;{*:*, 215.78.208.139:80}[23.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1506: (0.634921%)&lt;BR/&gt; 1557: (0.47619%)&lt;BR/&gt; 1525: (0.47619%)&lt;BR/&gt; 1233: (0.47619%)&gt;];
}
395--600[label="0.0235294;2pkt 2fpkt"];
395--755[label="1;1pkt 1fpkt"];
395--794[label="0.214286;6pkt 6fpkt"];
395--813[label="1;1pkt 1fpkt"];
395--837[label="0.0235294;2pkt 2fpkt"];
395--929[label="1;1pkt 1fpkt"];
395--1192[label="1;70pkt 70fpkt"];
395--1219[label="0.0235294;2pkt 2fpkt"];
395--1335[label="1;1pkt 1fpkt"];
395--1421[label="0.0235294;2pkt 2fpkt"];
395--1428[label="1;1pkt 1fpkt"];
395--1520[label="1;1pkt 1fpkt"];
395--1589[label="0.0235294;2pkt 2fpkt"];
711--794[label="0.714286;20pkt 20fpkt"];
711--837[label="0.031746;2pkt 2fpkt"];
711--1421[label="0.031746;2pkt 2fpkt"];
711--1503[label="1;63pkt 63fpkt"];
755--1192[label="1;1pkt 1fpkt"];
755--1335[label="1;1pkt 1fpkt"];
794--1503[label="0.714286;20pkt 20fpkt"];
794--2199[label="0.0714286;2pkt 2fpkt"];
813--1428[label="1;1pkt 1fpkt"];
929--1520[label="1;1pkt 1fpkt"];
1192--1219[label="0.0285714;2pkt 2fpkt"];
1192--1335[label="1;1pkt 1fpkt"];
1192--1421[label="0.0285714;2pkt 2fpkt"];
1192--1589[label="0.0285714;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.182.228.196"/>
      <filter dst_port="80" src_ip="196.33.130.82"/>
      <filter dst_ip="215.78.208.139" dst_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
154[label="141.165.152.125;d;55pkt 55fpkt", shape=diamond, color=yellow];
155[label="165.66.121.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
759[label="141.165.229.84;d;19pkt 19fpkt", shape=diamond, color=yellow];
760[label="46.47.19.145;s;2pkt 2fpkt", shape=diamond, color=yellow];
1080[label="165.66.121.47;s;1pkt 1fpkt", shape=hexagon, color=black];
1337[label="141.165.229.84;d;9pkt 9fpkt", shape=hexagon, color=black];
1827[label="92.33.149.75;31pkt 31fpkt", shape=pentagon, color=darkviolet];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.33.149.75:80, 141.165.152.125:*}[33.3333%]&lt;BR/&gt;{*:80, 141.165.229.84:*}[22.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.9492%)&lt;BR/&gt; 89: (4.23729%)&lt;BR/&gt; 20934: (1.27119%)&lt;BR/&gt; 8066: (1.27119%)&lt;BR/&gt; 6970: (1.27119%)&gt;];
}
154--155[label="1;1pkt 1fpkt"];
154--404[label="0.0545455;3pkt 3fpkt"];
154--1080[label="1;1pkt 1fpkt"];
154--1827[label="0.967742;30pkt 30fpkt"];
155--1080[label="1;1pkt 1fpkt"];
759--760[label="1;2pkt 2fpkt"];
759--1337[label="1;9pkt 9fpkt"];
759--1830[label="0.105263;2pkt 2fpkt"];
760--1337[label="1;2pkt 2fpkt"];
1337--1830[label="0.222222;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.229.84" src_port="80"/>
      <filter dst_ip="141.165.152.125" src_ip="92.33.149.75" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988736,2.06051,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
302[label="213.91.109.13;d;259pkt 259fpkt", shape=diamond, color=yellow];
303[label="141.209.240.231;s;356pkt 356fpkt", shape=diamond, color=yellow];
1044[label="141.209.240.231;s;356pkt 356fpkt", shape=hexagon, color=black];
1542[label="141.209.240.231;s;180pkt 180fpkt", shape=polygon, color=gold];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.209.240.231:*, 213.91.109.13:80}[91.7355%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2402: (0.173762%)&lt;BR/&gt; 2400: (0.173762%)&lt;BR/&gt; 2398: (0.173762%)&lt;BR/&gt; 2397: (0.173762%)&gt;];
}
302--303[label="0.972973;252pkt 252fpkt"];
302--652[label="0.0107527;2pkt 2fpkt"];
302--723[label="0.0103093;1pkt 1fpkt"];
302--1044[label="0.972973;252pkt 252fpkt"];
302--1124[label="0.00772201;2pkt 2fpkt"];
302--1382[label="0.0103093;1pkt 1fpkt"];
302--1542[label="1;180pkt 180fpkt"];
302--1968[label="0.01;2pkt 2fpkt"];
302--2014[label="0.0454545;2pkt 2fpkt"];
302--2215[label="0.00772201;2pkt 2fpkt"];
302--2390[label="0.01;2pkt 2fpkt"];
302--2408[label="0.0454545;2pkt 2fpkt"];
302--2546[label="0.0454545;2pkt 2fpkt"];
303--1044[label="1;356pkt 356fpkt"];
303--1542[label="1;180pkt 180fpkt"];
1044--1542[label="1;180pkt 180fpkt"];
</description>
    <slice>
      <filter dst_ip="213.91.109.13" dst_port="80" src_ip="141.209.240.231"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929312,2.00887,020,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
423[label="148.93.217.27;s;585pkt 585fpkt", shape=diamond, color=yellow];
1084[label="148.93.217.27;s;526pkt 526fpkt", shape=hexagon, color=black];
1560[label="148.93.217.27;s;289pkt 289fpkt", shape=polygon, color=gold];
1676[label="148.93.217.27;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.93.217.27:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
423--1084[label="1;526pkt 526fpkt"];
423--1560[label="1;289pkt 289fpkt"];
423--1676[label="0.666667;2pkt 2fpkt"];
1084--1560[label="1;289pkt 289fpkt"];
1084--1676[label="0.333333;1pkt 1fpkt"];
1560--1676[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="148.93.217.27"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.210.4.1"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000011680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.116.138.1"/>
    </slice>
    <from sec="1000011678" usec="0"/>
    <to sec="1000012484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.244.141.4"/>
    </slice>
    <from sec="1000011631" usec="0"/>
    <to sec="1000012515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
449[label="93.169.21.211;d;6pkt 6fpkt", shape=diamond, color=yellow];
687[label="164.202.215.218;s;1pkt 1fpkt", shape=diamond, color=yellow];
688[label="164.202.224.38;s;2pkt 2fpkt", shape=diamond, color=yellow];
689[label="201.39.166.75;d;2pkt 2fpkt", shape=diamond, color=yellow];
692[label="164.202.238.66;s;1pkt 1fpkt", shape=diamond, color=yellow];
828[label="164.202.224.5;s;73pkt 73fpkt", shape=diamond, color=yellow];
865[label="206.153.56.198;d;2pkt 2fpkt", shape=diamond, color=yellow];
868[label="164.202.233.102;s;1pkt 1fpkt", shape=diamond, color=yellow];
1235[label="93.169.21.211;d;6pkt 6fpkt", shape=hexagon, color=black];
1434[label="206.153.56.198;d;2pkt 2fpkt", shape=hexagon, color=black];
1621[label="164.202.224.5;76pkt 76fpkt", shape=pentagon, color=darkviolet];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.202.224.5:46750, 196.93.37.25:*}[67.4699%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46750: (31.9767%)&lt;BR/&gt; 25: (7.26744%)&lt;BR/&gt; 6667: (6.39535%)&lt;BR/&gt; 7000: (1.74419%)&lt;BR/&gt; 30398: (1.16279%)&gt;];
}
449--687[label="1;1pkt 1fpkt"];
449--688[label="0.5;1pkt 1fpkt"];
449--828[label="0.333333;2pkt 2fpkt"];
449--1235[label="1;6pkt 6fpkt"];
449--1621[label="0.333333;2pkt 2fpkt"];
687--1235[label="1;1pkt 1fpkt"];
688--1235[label="0.5;1pkt 1fpkt"];
689--692[label="1;1pkt 1fpkt"];
689--828[label="0.5;1pkt 1fpkt"];
689--1621[label="0.5;1pkt 1fpkt"];
828--865[label="0.5;1pkt 1fpkt"];
828--1059[label="0.0684932;5pkt 5fpkt"];
828--1235[label="0.333333;2pkt 2fpkt"];
828--1434[label="0.5;1pkt 1fpkt"];
828--1621[label="1;73pkt 73fpkt"];
865--868[label="1;1pkt 1fpkt"];
865--1434[label="1;2pkt 2fpkt"];
865--1621[label="0.5;1pkt 1fpkt"];
868--1434[label="1;1pkt 1fpkt"];
1235--1621[label="0.333333;2pkt 2fpkt"];
1434--1621[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.93.37.25" src_ip="164.202.224.5" src_port="46750"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.173.144.7"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472845,2.09084,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
928[label="148.173.123.100;d;23pkt 23fpkt", shape=diamond, color=yellow];
1646[label="92.175.10.12;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1941[label="219.220.6.124;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.220.6.124:80, *:*}[45.1613%]&lt;BR/&gt;{92.175.10.12:80, 148.173.123.100:*}[35.4839%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9167%)&lt;BR/&gt; 1082: (2.08333%)&lt;BR/&gt; 1081: (2.08333%)&lt;BR/&gt; 1079: (2.08333%)&lt;BR/&gt; 1076: (2.08333%)&gt;];
}
928--1646[label="1;11pkt 11fpkt"];
928--1941[label="0.428571;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="219.220.6.124" src_port="80"/>
      <filter dst_ip="148.173.123.100" src_ip="92.175.10.12" src_port="80"/>
    </slice>
    <from sec="1000011998" usec="0"/>
    <to sec="1000012496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.235.153.12"/>
    </slice>
    <from sec="1000011830" usec="0"/>
    <to sec="1000012415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.42.145.14"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22207,1.96147,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
212[label="160.43.131.243;d;846pkt 846fpkt", shape=diamond, color=yellow];
304[label="144.52.68.220;d;41pkt 41fpkt", shape=diamond, color=yellow];
307[label="209.77.77.146;s;1pkt 1fpkt", shape=diamond, color=yellow];
369[label="160.34.197.23;d;79pkt 79fpkt", shape=diamond, color=yellow];
370[label="194.130.39.108;s;230pkt 230fpkt", shape=diamond, color=yellow];
386[label="168.52.51.198;s;17pkt 17fpkt", shape=diamond, color=yellow];
390[label="207.171.182.53;s;1pkt 1fpkt", shape=diamond, color=yellow];
478[label="146.160.102.28;s;175pkt 175fpkt", shape=diamond, color=yellow];
509[label="195.168.212.163;s;1pkt 1fpkt", shape=diamond, color=yellow];
727[label="141.165.229.202;d;44pkt 44fpkt", shape=diamond, color=yellow];
741[label="193.52.226.134;s;15pkt 15fpkt", shape=diamond, color=yellow];
758[label="160.34.197.20;d;80pkt 80fpkt", shape=diamond, color=yellow];
787[label="196.33.130.98;d;28pkt 28fpkt", shape=diamond, color=yellow];
812[label="213.84.253.146;s;2pkt 2fpkt", shape=diamond, color=yellow];
856[label="92.201.156.80;s;8pkt 8fpkt", shape=diamond, color=yellow];
897[label="209.186.6.0;s;12pkt 12fpkt", shape=diamond, color=yellow];
898[label="209.186.6.14;s;11pkt 11fpkt", shape=diamond, color=yellow];
899[label="209.186.6.8;s;10pkt 10fpkt", shape=diamond, color=yellow];
937[label="195.193.172.63;s;8pkt 8fpkt", shape=diamond, color=yellow];
938[label="195.4.116.45;s;80pkt 80fpkt", shape=diamond, color=yellow];
950[label="209.186.6.15;s;12pkt 12fpkt", shape=diamond, color=yellow];
962[label="193.88.193.65;s;4pkt 4fpkt", shape=diamond, color=yellow];
1011[label="160.43.131.243;d;778pkt 778fpkt", shape=hexagon, color=black];
1045[label="209.77.77.146;s;1pkt 1fpkt", shape=hexagon, color=black];
1065[label="207.171.182.53;s;1pkt 1fpkt", shape=hexagon, color=black];
1085[label="144.52.68.220;d;22pkt 22fpkt", shape=hexagon, color=black];
1323[label="141.165.229.202;d;8pkt 8fpkt", shape=hexagon, color=black];
1386[label="196.33.130.98;d;28pkt 28fpkt", shape=hexagon, color=black];
1400[label="160.34.197.20;d;54pkt 54fpkt", shape=hexagon, color=black];
1488[label="195.4.116.45;s;80pkt 80fpkt", shape=hexagon, color=black];
1508[label="209.186.6.0;s;12pkt 12fpkt", shape=hexagon, color=black];
1538[label="160.43.131.243;d;209pkt 209fpkt", shape=polygon, color=gold];
1626[label="194.97.9.7;12pkt 12fpkt", shape=pentagon, color=darkviolet];
1629[label="209.186.6.8;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1630[label="194.251.76.8;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1632[label="209.186.6.9;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1654[label="209.186.6.15;12pkt 12fpkt", shape=pentagon, color=darkviolet];
1686[label="195.193.172.32;8pkt 8fpkt", shape=pentagon, color=darkviolet];
1705[label="194.42.227.36;20pkt 20fpkt", shape=pentagon, color=darkviolet];
1783[label="195.193.172.63;8pkt 8fpkt", shape=pentagon, color=darkviolet];
1840[label="196.118.22.78;17pkt 17fpkt", shape=pentagon, color=darkviolet];
1912[label="194.130.39.108;229pkt 229fpkt", shape=pentagon, color=darkviolet];
2249[label="92.150.21.248;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2271[label="194.97.9.7;12pkt 12fpkt", shape=invtriangle, color=brown];
2281[label="209.186.6.15;12pkt 12fpkt", shape=invtriangle, color=brown];
2299[label="194.42.227.36;20pkt 20fpkt", shape=invtriangle, color=brown];
2329[label="195.193.172.63;8pkt 8fpkt", shape=invtriangle, color=brown];
2507[label="194.42.227.36;20pkt 20fpkt", shape=invhouse, color=bisque];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 160.43.131.243:*}[68.0611%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4284%)&lt;BR/&gt; 1183: (0.165463%)&lt;BR/&gt; 21: (0.165463%)&lt;BR/&gt; 1250: (0.150421%)&lt;BR/&gt; 1205: (0.150421%)&gt;];
}
212--370[label="0.178261;41pkt 41fpkt"];
212--386[label="1;17pkt 17fpkt"];
212--390[label="1;1pkt 1fpkt"];
212--412[label="0.00636943;1pkt 1fpkt"];
212--478[label="0.771429;135pkt 135fpkt"];
212--612[label="0.00869565;1pkt 1fpkt"];
212--897[label="1;12pkt 12fpkt"];
212--898[label="1;11pkt 11fpkt"];
212--899[label="1;10pkt 10fpkt"];
212--938[label="1;80pkt 80fpkt"];
212--948[label="0.0808081;8pkt 8fpkt"];
212--950[label="1;12pkt 12fpkt"];
212--1011[label="1;778pkt 778fpkt"];
212--1065[label="1;1pkt 1fpkt"];
212--1078[label="0.00636943;1pkt 1fpkt"];
212--1488[label="1;80pkt 80fpkt"];
212--1506[label="0.0808081;8pkt 8fpkt"];
212--1508[label="1;12pkt 12fpkt"];
212--1538[label="1;209pkt 209fpkt"];
212--1598[label="0.146572;124pkt 124fpkt"];
212--1602[label="0.146572;124pkt 124fpkt"];
212--1604[label="0.146572;124pkt 124fpkt"];
212--1626[label="0.583333;7pkt 7fpkt"];
212--1629[label="1;10pkt 10fpkt"];
212--1630[label="0.736842;14pkt 14fpkt"];
212--1632[label="0.909091;10pkt 10fpkt"];
212--1641[label="0.031746;2pkt 2fpkt"];
212--1654[label="1;12pkt 12fpkt"];
212--1661[label="0.138889;5pkt 5fpkt"];
212--1701[label="0.153846;2pkt 2fpkt"];
212--1705[label="0.3;6pkt 6fpkt"];
212--1767[label="0.333333;3pkt 3fpkt"];
212--1840[label="1;17pkt 17fpkt"];
212--1896[label="0.0638298;3pkt 3fpkt"];
212--1912[label="0.179039;41pkt 41fpkt"];
212--1913[label="0.037037;1pkt 1fpkt"];
212--1940[label="0.0987654;8pkt 8fpkt"];
212--1957[label="0.047619;1pkt 1fpkt"];
212--2061[label="0.121212;4pkt 4fpkt"];
212--2156[label="0.0340909;3pkt 3fpkt"];
212--2160[label="0.113636;5pkt 5fpkt"];
212--2192[label="0.2;2pkt 2fpkt"];
212--2249[label="0.5;4pkt 4fpkt"];
212--2271[label="0.583333;7pkt 7fpkt"];
212--2277[label="0.031746;2pkt 2fpkt"];
212--2281[label="1;12pkt 12fpkt"];
212--2297[label="0.153846;2pkt 2fpkt"];
212--2299[label="0.3;6pkt 6fpkt"];
212--2322[label="0.333333;3pkt 3fpkt"];
212--2369[label="0.037037;1pkt 1fpkt"];
212--2507[label="0.3;6pkt 6fpkt"];
304--307[label="1;1pkt 1fpkt"];
304--509[label="1;1pkt 1fpkt"];
304--812[label="1;2pkt 2fpkt"];
304--1045[label="1;1pkt 1fpkt"];
304--1085[label="1;22pkt 22fpkt"];
304--1626[label="0.166667;2pkt 2fpkt"];
304--1940[label="0.0243902;1pkt 1fpkt"];
304--2271[label="0.166667;2pkt 2fpkt"];
304--2489[label="0.12;3pkt 3fpkt"];
307--1045[label="1;1pkt 1fpkt"];
307--1085[label="1;1pkt 1fpkt"];
369--370[label="0.734177;58pkt 58fpkt"];
369--1598[label="0.240506;19pkt 19fpkt"];
369--1602[label="0.240506;19pkt 19fpkt"];
369--1604[label="0.240506;19pkt 19fpkt"];
369--1912[label="0.734177;58pkt 58fpkt"];
370--758[label="0.75;60pkt 60fpkt"];
370--1011[label="0.178261;41pkt 41fpkt"];
370--1400[label="0.833333;45pkt 45fpkt"];
370--1491[label="0.026087;6pkt 6fpkt"];
370--1598[label="0.0652174;15pkt 15fpkt"];
370--1602[label="0.0652174;15pkt 15fpkt"];
370--1604[label="0.0652174;15pkt 15fpkt"];
370--1912[label="1;229pkt 229fpkt"];
386--1011[label="1;17pkt 17fpkt"];
386--1538[label="0.764706;13pkt 13fpkt"];
390--1011[label="1;1pkt 1fpkt"];
390--1065[label="1;1pkt 1fpkt"];
478--727[label="0.0909091;4pkt 4fpkt"];
478--1011[label="0.571429;100pkt 100fpkt"];
478--1323[label="0.5;4pkt 4fpkt"];
478--1353[label="0.0526316;8pkt 8fpkt"];
478--1431[label="0.0514286;9pkt 9fpkt"];
478--1491[label="0.00571429;1pkt 1fpkt"];
478--1598[label="0.0171429;3pkt 3fpkt"];
478--1602[label="0.0171429;3pkt 3fpkt"];
478--1604[label="0.0171429;3pkt 3fpkt"];
509--1085[label="1;1pkt 1fpkt"];
727--741[label="0.866667;13pkt 13fpkt"];
727--937[label="1;8pkt 8fpkt"];
727--1323[label="1;8pkt 8fpkt"];
727--1686[label="1;8pkt 8fpkt"];
727--1783[label="1;8pkt 8fpkt"];
727--2329[label="1;8pkt 8fpkt"];
741--831[label="0.0666667;1pkt 1fpkt"];
741--976[label="0.0666667;1pkt 1fpkt"];
741--1323[label="0.5;4pkt 4fpkt"];
758--856[label="0.75;6pkt 6fpkt"];
758--962[label="1;4pkt 4fpkt"];
758--1400[label="1;54pkt 54fpkt"];
758--1912[label="0.7375;59pkt 59fpkt"];
787--1386[label="1;28pkt 28fpkt"];
787--1705[label="0.65;13pkt 13fpkt"];
787--2160[label="0.0357143;1pkt 1fpkt"];
787--2299[label="0.65;13pkt 13fpkt"];
787--2507[label="0.65;13pkt 13fpkt"];
856--1400[label="0.25;2pkt 2fpkt"];
897--1011[label="1;12pkt 12fpkt"];
897--1508[label="1;12pkt 12fpkt"];
898--1011[label="1;11pkt 11fpkt"];
899--1011[label="0.9;9pkt 9fpkt"];
899--1629[label="1;10pkt 10fpkt"];
937--1783[label="1;8pkt 8fpkt"];
937--2329[label="1;8pkt 8fpkt"];
938--1011[label="0.9875;79pkt 79fpkt"];
938--1488[label="1;80pkt 80fpkt"];
950--1011[label="0.916667;11pkt 11fpkt"];
950--1654[label="1;12pkt 12fpkt"];
950--2281[label="1;12pkt 12fpkt"];
1011--1065[label="1;1pkt 1fpkt"];
1011--1078[label="0.00636943;1pkt 1fpkt"];
1011--1488[label="0.9875;79pkt 79fpkt"];
1011--1506[label="0.0808081;8pkt 8fpkt"];
1011--1508[label="1;12pkt 12fpkt"];
1011--1538[label="1;209pkt 209fpkt"];
1011--1598[label="0.159383;124pkt 124fpkt"];
1011--1602[label="0.159383;124pkt 124fpkt"];
1011--1604[label="0.159383;124pkt 124fpkt"];
1011--1626[label="0.583333;7pkt 7fpkt"];
1011--1629[label="0.9;9pkt 9fpkt"];
1011--1630[label="0.736842;14pkt 14fpkt"];
1011--1632[label="0.909091;10pkt 10fpkt"];
1011--1641[label="0.031746;2pkt 2fpkt"];
1011--1654[label="0.916667;11pkt 11fpkt"];
1011--1661[label="0.138889;5pkt 5fpkt"];
1011--1701[label="0.0769231;1pkt 1fpkt"];
1011--1705[label="0.3;6pkt 6fpkt"];
1011--1767[label="0.333333;3pkt 3fpkt"];
1011--1840[label="1;17pkt 17fpkt"];
1011--1896[label="0.0638298;3pkt 3fpkt"];
1011--1912[label="0.179039;41pkt 41fpkt"];
1011--1913[label="0.037037;1pkt 1fpkt"];
1011--1940[label="0.0864198;7pkt 7fpkt"];
1011--1957[label="0.047619;1pkt 1fpkt"];
1011--2061[label="0.121212;4pkt 4fpkt"];
1011--2156[label="0.0340909;3pkt 3fpkt"];
1011--2160[label="0.113636;5pkt 5fpkt"];
1011--2192[label="0.2;2pkt 2fpkt"];
1011--2249[label="0.5;4pkt 4fpkt"];
1011--2271[label="0.583333;7pkt 7fpkt"];
1011--2277[label="0.031746;2pkt 2fpkt"];
1011--2281[label="0.916667;11pkt 11fpkt"];
1011--2297[label="0.0769231;1pkt 1fpkt"];
1011--2299[label="0.3;6pkt 6fpkt"];
1011--2322[label="0.333333;3pkt 3fpkt"];
1011--2369[label="0.037037;1pkt 1fpkt"];
1011--2507[label="0.3;6pkt 6fpkt"];
1045--1085[label="1;1pkt 1fpkt"];
1386--1705[label="0.65;13pkt 13fpkt"];
1386--2160[label="0.0357143;1pkt 1fpkt"];
1386--2299[label="0.65;13pkt 13fpkt"];
1386--2507[label="0.65;13pkt 13fpkt"];
1400--1912[label="0.814815;44pkt 44fpkt"];
1538--1598[label="0.593301;124pkt 124fpkt"];
1538--1602[label="0.593301;124pkt 124fpkt"];
1538--1604[label="0.593301;124pkt 124fpkt"];
1538--1840[label="0.588235;10pkt 10fpkt"];
1538--1940[label="0.0123457;1pkt 1fpkt"];
1538--2192[label="0.1;1pkt 1fpkt"];
1626--2271[label="1;12pkt 12fpkt"];
1654--2281[label="1;12pkt 12fpkt"];
1705--2299[label="1;20pkt 20fpkt"];
1705--2507[label="1;20pkt 20fpkt"];
1783--2329[label="1;8pkt 8fpkt"];
2299--2507[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="160.43.131.243" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.105.114.16"/>
    </slice>
    <from sec="1000011611" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.109.137.20"/>
    </slice>
    <from sec="1000011814" usec="0"/>
    <to sec="1000011906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
190[label="196.42.76.74;s;549pkt 549fpkt", shape=diamond, color=yellow];
235[label="219.196.73.209;d;5pkt 5fpkt", shape=diamond, color=yellow];
485[label="209.88.108.154;d;70pkt 70fpkt", shape=diamond, color=yellow];
723[label="141.165.229.97;s;97pkt 97fpkt", shape=diamond, color=yellow];
832[label="144.52.38.236;s;91pkt 91fpkt", shape=diamond, color=yellow];
845[label="206.96.152.113;d;136pkt 136fpkt", shape=diamond, color=yellow];
874[label="140.183.70.145;s;2pkt 2fpkt", shape=diamond, color=yellow];
909[label="209.88.104.69;d;92pkt 92fpkt", shape=diamond, color=yellow];
922[label="148.182.236.200;s;216pkt 216fpkt", shape=diamond, color=yellow];
923[label="219.21.237.70;d;93pkt 93fpkt", shape=diamond, color=yellow];
939[label="164.202.197.180;d;12pkt 12fpkt", shape=diamond, color=yellow];
1017[label="219.196.73.209;d;4pkt 4fpkt", shape=hexagon, color=black];
1047[label="196.42.76.74;s;346pkt 346fpkt", shape=hexagon, color=black];
1382[label="141.165.229.97;s;97pkt 97fpkt", shape=hexagon, color=black];
1417[label="144.52.38.236;s;70pkt 70fpkt", shape=hexagon, color=black];
1472[label="209.88.104.69;d;54pkt 54fpkt", shape=hexagon, color=black];
1822[label="196.42.76.74;552pkt 552fpkt", shape=pentagon, color=darkviolet];
2120[label="148.182.236.200;218pkt 218fpkt", shape=pentagon, color=darkviolet];
2441[label="148.182.236.200;218pkt 218fpkt", shape=invtriangle, color=brown];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.42.76.74:*, *:80}[56.7901%]&lt;BR/&gt;{148.182.236.200:*, 219.21.237.70:80}[20.4733%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.846%)&lt;BR/&gt; 0: (0.136893%)&lt;BR/&gt; 2159: (0.102669%)&lt;BR/&gt; 58735: (0.0855578%)&lt;BR/&gt; 58707: (0.0855578%)&gt;];
}
190--235[label="0.8;4pkt 4fpkt"];
190--485[label="1;70pkt 70fpkt"];
190--845[label="1;136pkt 136fpkt"];
190--909[label="1;92pkt 92fpkt"];
190--1017[label="0.75;3pkt 3fpkt"];
190--1047[label="1;346pkt 346fpkt"];
190--1472[label="1;54pkt 54fpkt"];
190--1822[label="1;549pkt 549fpkt"];
235--1017[label="1;4pkt 4fpkt"];
235--1047[label="0.8;4pkt 4fpkt"];
235--1822[label="0.8;4pkt 4fpkt"];
485--1047[label="1;70pkt 70fpkt"];
485--1822[label="1;70pkt 70fpkt"];
723--1382[label="1;97pkt 97fpkt"];
832--1417[label="1;70pkt 70fpkt"];
845--1047[label="0.345588;47pkt 47fpkt"];
845--1822[label="1;136pkt 136fpkt"];
874--939[label="0.5;1pkt 1fpkt"];
909--1047[label="0.315217;29pkt 29fpkt"];
909--1472[label="1;54pkt 54fpkt"];
909--1822[label="1;92pkt 92fpkt"];
922--923[label="1;93pkt 93fpkt"];
922--2120[label="1;216pkt 216fpkt"];
922--2441[label="1;216pkt 216fpkt"];
923--2120[label="1;93pkt 93fpkt"];
923--2441[label="1;93pkt 93fpkt"];
1017--1047[label="0.75;3pkt 3fpkt"];
1017--1822[label="0.75;3pkt 3fpkt"];
1047--1472[label="0.537037;29pkt 29fpkt"];
1047--1822[label="1;346pkt 346fpkt"];
1472--1822[label="1;54pkt 54fpkt"];
2120--2441[label="1;218pkt 218fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="196.42.76.74"/>
      <filter dst_ip="219.21.237.70" dst_port="80" src_ip="148.182.236.200"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
445[label="196.42.83.64;d;260pkt 260fpkt", shape=diamond, color=yellow];
905[label="219.129.122.32;s;33pkt 33fpkt", shape=diamond, color=yellow];
1154[label="196.42.83.64;d;243pkt 243fpkt", shape=hexagon, color=black];
1666[label="196.76.52.22;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2285[label="196.76.52.22;11pkt 11fpkt", shape=invtriangle, color=brown];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 196.42.83.64:*}[68.1507%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (40.5018%)&lt;BR/&gt; 113: (9.13978%)&lt;BR/&gt; 0: (0.537634%)&lt;BR/&gt; 2519: (0.358423%)&lt;BR/&gt; 2512: (0.358423%)&gt;];
}
445--905[label="0.030303;1pkt 1fpkt"];
445--1154[label="1;243pkt 243fpkt"];
445--1666[label="1;11pkt 11fpkt"];
445--2285[label="1;11pkt 11fpkt"];
905--1154[label="0.030303;1pkt 1fpkt"];
1154--1666[label="1;11pkt 11fpkt"];
1154--2285[label="1;11pkt 11fpkt"];
1666--2285[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="196.42.83.64" src_port="25"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.116.138.24"/>
    </slice>
    <from sec="1000011605" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.165.235.24"/>
    </slice>
    <from sec="1000011620" usec="0"/>
    <to sec="1000012481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
107[label="197.14.121.26;s;5pkt 5fpkt", shape=diamond, color=yellow];
108[label="141.165.56.150;d;55pkt 55fpkt", shape=diamond, color=yellow];
988[label="141.165.56.150;d;41pkt 41fpkt", shape=hexagon, color=black];
1672[label="197.14.121.26;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2221[label="194.42.95.240;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2286[label="197.14.121.26;5pkt 5fpkt", shape=invtriangle, color=brown];
2479[label="194.42.95.240;4pkt 4fpkt", shape=invtriangle, color=brown];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.109.78:80, 141.165.56.150:*}[29.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.2881%)&lt;BR/&gt; 6901: (4.23729%)&lt;BR/&gt; 1110: (3.38983%)&lt;BR/&gt; 1863: (2.9661%)&lt;BR/&gt; 4929: (2.11864%)&gt;];
}
107--108[label="1;5pkt 5fpkt"];
107--988[label="0.6;3pkt 3fpkt"];
107--1672[label="1;5pkt 5fpkt"];
107--2286[label="1;5pkt 5fpkt"];
108--988[label="1;41pkt 41fpkt"];
108--1672[label="1;5pkt 5fpkt"];
108--2221[label="1;3pkt 3fpkt"];
108--2286[label="1;5pkt 5fpkt"];
108--2479[label="1;4pkt 4fpkt"];
988--1672[label="0.6;3pkt 3fpkt"];
988--2221[label="1;3pkt 3fpkt"];
988--2286[label="0.6;3pkt 3fpkt"];
988--2479[label="1;4pkt 4fpkt"];
1672--2286[label="1;5pkt 5fpkt"];
2221--2479[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.56.150" src_ip="213.91.109.78" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.42.237.33"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.540822,2.04001,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
572[label="213.209.107.34;s;21pkt 21fpkt", shape=diamond, color=yellow];
636[label="148.173.198.14;d;51pkt 51fpkt", shape=diamond, color=yellow];
1256[label="148.173.198.14;d;20pkt 20fpkt", shape=hexagon, color=black];
1698[label="213.209.107.34;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.209.107.34:80, 148.173.198.14:*}[35.8491%]&lt;BR/&gt;{92.158.45.175:80, 148.173.198.14:*}[20.7547%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2301%)&lt;BR/&gt; 53: (3.53982%)&lt;BR/&gt; 49617: (1.76991%)&lt;BR/&gt; 49616: (1.76991%)&lt;BR/&gt; 49615: (1.76991%)&gt;];
}
572--636[label="0.904762;19pkt 19fpkt"];
572--976[label="0.047619;1pkt 1fpkt"];
572--1256[label="0.95;19pkt 19fpkt"];
572--1698[label="1;21pkt 21fpkt"];
636--1256[label="1;20pkt 20fpkt"];
636--1698[label="0.904762;19pkt 19fpkt"];
636--1707[label="0.0434783;1pkt 1fpkt"];
1256--1698[label="0.95;19pkt 19fpkt"];
1256--1707[label="0.05;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.173.198.14" src_ip="213.209.107.34" src_port="80"/>
      <filter dst_ip="148.173.198.14" src_ip="92.158.45.175" src_port="80"/>
    </slice>
    <from sec="1000011671" usec="0"/>
    <to sec="1000012143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.42.237.34"/>
    </slice>
    <from sec="1000011644" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.107.153.36"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472845,2.09084,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
613[label="215.188.120.37;s;66pkt 66fpkt", shape=diamond, color=yellow];
1709[label="215.188.120.37;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.188.120.37:0, *:0}[98.4848%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.5294%)&lt;BR/&gt; 11019: (0.735294%)&lt;BR/&gt; 179: (0.735294%)&gt;];
}
613--1709[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="215.188.120.37"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.202.232.37"/>
    </slice>
    <from sec="1000011605" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.110.134.38"/>
    </slice>
    <from sec="1000011799" usec="0"/>
    <to sec="1000012081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.76.6.41"/>
    </slice>
    <from sec="1000012134" usec="0"/>
    <to sec="1000012146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.923803,2.04534,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
624[label="148.182.246.42;s;53pkt 53fpkt", shape=diamond, color=yellow];
1729[label="148.182.246.42;53pkt 53fpkt", shape=pentagon, color=darkviolet];
2308[label="148.182.246.42;53pkt 53fpkt", shape=invtriangle, color=brown];
2512[label="148.182.246.42;53pkt 53fpkt", shape=invhouse, color=bisque];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.182.246.42:*, *:8888}[98.1481%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (49.0566%)&lt;BR/&gt; 63062: (0.943396%)&lt;BR/&gt; 63060: (0.943396%)&lt;BR/&gt; 63056: (0.943396%)&lt;BR/&gt; 63054: (0.943396%)&gt;];
}
624--1729[label="0.981132;52pkt 52fpkt"];
624--2308[label="0.981132;52pkt 52fpkt"];
624--2512[label="0.981132;52pkt 52fpkt"];
1729--2308[label="0.981132;52pkt 52fpkt"];
1729--2512[label="0.981132;52pkt 52fpkt"];
2308--2512[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="148.182.246.42"/>
    </slice>
    <from sec="1000011613" usec="0"/>
    <to sec="1000012524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.161.196.45"/>
    </slice>
    <from sec="1000011636" usec="0"/>
    <to sec="1000012525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.52.33.49"/>
    </slice>
    <from sec="1000011604" usec="0"/>
    <to sec="1000011719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.218.51.49"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.173.3.50"/>
    </slice>
    <from sec="1000011642" usec="0"/>
    <to sec="1000012465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.182.214.51"/>
    </slice>
    <from sec="1000011605" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.109.142.53"/>
    </slice>
    <from sec="1000011653" usec="0"/>
    <to sec="1000012523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0227,1.98055,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
293[label="194.150.116.224;d;4pkt 4fpkt", shape=diamond, color=yellow];
452[label="164.202.208.149;s;2pkt 2fpkt", shape=diamond, color=yellow];
772[label="164.202.86.165;s;6pkt 6fpkt", shape=diamond, color=yellow];
871[label="164.202.196.53;s;8pkt 8fpkt", shape=diamond, color=yellow];
1130[label="194.150.116.224;d;4pkt 4fpkt", shape=hexagon, color=black];
1451[label="164.202.86.165;s;6pkt 6fpkt", shape=hexagon, color=black];
1554[label="194.150.116.224;d;4pkt 4fpkt", shape=polygon, color=gold];
1765[label="164.202.196.53;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2047[label="164.202.86.165;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2416[label="164.202.86.165;2pkt 2fpkt", shape=invtriangle, color=brown];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.202.196.53:*, *:*}[50%]&lt;BR/&gt;{164.202.86.165:*, *:*}[37.5%]&lt;BR/&gt;{*:*, 194.150.116.224:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (18.1818%)&lt;BR/&gt; 0: (15.9091%)&lt;BR/&gt; 5000: (9.09091%)&lt;BR/&gt; 1082: (7.95455%)&lt;BR/&gt; 5001: (5.68182%)&gt;];
}
293--452[label="1;2pkt 2fpkt"];
293--772[label="0.25;1pkt 1fpkt"];
293--871[label="0.25;1pkt 1fpkt"];
293--1130[label="1;4pkt 4fpkt"];
293--1451[label="0.25;1pkt 1fpkt"];
293--1554[label="1;4pkt 4fpkt"];
293--1765[label="0.25;1pkt 1fpkt"];
293--2047[label="1;1pkt 1fpkt"];
293--2416[label="0.5;1pkt 1fpkt"];
452--1130[label="1;2pkt 2fpkt"];
452--1554[label="1;2pkt 2fpkt"];
772--1130[label="0.25;1pkt 1fpkt"];
772--1451[label="1;6pkt 6fpkt"];
772--1554[label="0.25;1pkt 1fpkt"];
772--1598[label="0.166667;1pkt 1fpkt"];
772--1602[label="0.166667;1pkt 1fpkt"];
772--1604[label="0.166667;1pkt 1fpkt"];
772--2047[label="1;1pkt 1fpkt"];
772--2416[label="1;2pkt 2fpkt"];
871--1130[label="0.25;1pkt 1fpkt"];
871--1554[label="0.25;1pkt 1fpkt"];
871--1765[label="1;7pkt 7fpkt"];
1130--1451[label="0.25;1pkt 1fpkt"];
1130--1554[label="1;4pkt 4fpkt"];
1130--1765[label="0.25;1pkt 1fpkt"];
1130--2047[label="1;1pkt 1fpkt"];
1130--2416[label="0.5;1pkt 1fpkt"];
1451--1554[label="0.25;1pkt 1fpkt"];
1451--1598[label="0.166667;1pkt 1fpkt"];
1451--1602[label="0.166667;1pkt 1fpkt"];
1451--1604[label="0.166667;1pkt 1fpkt"];
1451--2047[label="1;1pkt 1fpkt"];
1451--2416[label="1;2pkt 2fpkt"];
1554--1765[label="0.25;1pkt 1fpkt"];
1554--2047[label="1;1pkt 1fpkt"];
1554--2416[label="0.5;1pkt 1fpkt"];
2047--2416[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="164.202.196.53"/>
      <filter src_ip="164.202.86.165"/>
      <filter dst_ip="194.150.116.224"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.136.75.55"/>
    </slice>
    <from sec="1000011701" usec="0"/>
    <to sec="1000011777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,053,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
250[label="144.52.1.234;s;83pkt 83fpkt", shape=diamond, color=yellow];
354[label="148.182.59.58;s;227pkt 227fpkt", shape=diamond, color=yellow];
555[label="219.42.5.152;d;156pkt 156fpkt", shape=diamond, color=yellow];
648[label="148.182.59.57;s;166pkt 166fpkt", shape=diamond, color=yellow];
684[label="196.33.93.99;s;92pkt 92fpkt", shape=diamond, color=yellow];
703[label="212.69.111.189;d;398pkt 398fpkt", shape=diamond, color=yellow];
766[label="148.182.59.193;s;190pkt 190fpkt", shape=diamond, color=yellow];
1024[label="144.52.1.234;s;83pkt 83fpkt", shape=hexagon, color=black];
1263[label="148.182.59.57;s;150pkt 150fpkt", shape=hexagon, color=black];
1368[label="219.42.5.152;d;95pkt 95fpkt", shape=hexagon, color=black];
1406[label="148.182.59.193;s;189pkt 189fpkt", shape=hexagon, color=black];
1647[label="204.18.116.12;80pkt 80fpkt", shape=pentagon, color=darkviolet];
1774[label="148.182.59.57;166pkt 166fpkt", shape=pentagon, color=darkviolet];
2208[label="144.52.1.234;88pkt 88fpkt", shape=pentagon, color=darkviolet];
2324[label="148.182.59.57;165pkt 165fpkt", shape=invtriangle, color=brown];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 212.69.111.189:80}[44.7694%]&lt;BR/&gt;{148.182.59.58:*, *:80}[24.9719%]&lt;BR/&gt;{148.182.59.193:*, *:80}[21.3723%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.5515%)&lt;BR/&gt; 10000: (1.50344%)&lt;BR/&gt; 10001: (0.92354%)&lt;BR/&gt; 64028: (0.128866%)&lt;BR/&gt; 64019: (0.128866%)&gt;];
}
250--555[label="0.060241;5pkt 5fpkt"];
250--621[label="0.0123457;1pkt 1fpkt"];
250--1024[label="1;83pkt 83fpkt"];
250--1368[label="0.060241;5pkt 5fpkt"];
250--2208[label="1;83pkt 83fpkt"];
354--555[label="0.185897;29pkt 29fpkt"];
354--703[label="0.687225;156pkt 156fpkt"];
354--1055[label="0.00440529;1pkt 1fpkt"];
354--1368[label="0.305263;29pkt 29fpkt"];
354--1563[label="0.00440529;1pkt 1fpkt"];
555--648[label="0.217949;34pkt 34fpkt"];
555--684[label="0.206522;19pkt 19fpkt"];
555--985[label="0.182482;25pkt 25fpkt"];
555--1024[label="0.060241;5pkt 5fpkt"];
555--1068[label="0.0576923;9pkt 9fpkt"];
555--1124[label="0.0192308;3pkt 3fpkt"];
555--1263[label="0.226667;34pkt 34fpkt"];
555--1368[label="1;95pkt 95fpkt"];
555--1531[label="0.182482;25pkt 25fpkt"];
555--1647[label="0.4;32pkt 32fpkt"];
555--1741[label="0.0576923;9pkt 9fpkt"];
555--1756[label="0.181159;25pkt 25fpkt"];
555--1774[label="0.217949;34pkt 34fpkt"];
555--2208[label="0.0568182;5pkt 5fpkt"];
555--2215[label="0.0192308;3pkt 3fpkt"];
555--2317[label="0.181159;25pkt 25fpkt"];
555--2324[label="0.217949;34pkt 34fpkt"];
555--2517[label="0.181159;25pkt 25fpkt"];
648--703[label="0.554217;92pkt 92fpkt"];
648--1263[label="1;150pkt 150fpkt"];
648--1368[label="0.357895;34pkt 34fpkt"];
648--1774[label="1;166pkt 166fpkt"];
648--2324[label="1;165pkt 165fpkt"];
684--703[label="0.108696;10pkt 10fpkt"];
684--837[label="0.0434783;4pkt 4fpkt"];
684--1055[label="0.0326087;3pkt 3fpkt"];
684--1368[label="0.206522;19pkt 19fpkt"];
684--1421[label="0.0434783;4pkt 4fpkt"];
684--1563[label="0.0326087;3pkt 3fpkt"];
684--1589[label="0.0434783;4pkt 4fpkt"];
684--1598[label="0.0108696;1pkt 1fpkt"];
684--1602[label="0.0108696;1pkt 1fpkt"];
684--1604[label="0.0108696;1pkt 1fpkt"];
703--766[label="0.689474;131pkt 131fpkt"];
703--985[label="0.0218978;3pkt 3fpkt"];
703--1068[label="0.00502513;2pkt 2fpkt"];
703--1263[label="0.613333;92pkt 92fpkt"];
703--1321[label="0.0434783;4pkt 4fpkt"];
703--1406[label="0.693122;131pkt 131fpkt"];
703--1531[label="0.0218978;3pkt 3fpkt"];
703--1741[label="0.00502513;2pkt 2fpkt"];
703--1756[label="0.0217391;3pkt 3fpkt"];
703--1774[label="0.554217;92pkt 92fpkt"];
703--2317[label="0.0217391;3pkt 3fpkt"];
703--2324[label="0.557576;92pkt 92fpkt"];
703--2517[label="0.0217391;3pkt 3fpkt"];
766--1406[label="1;189pkt 189fpkt"];
1024--1368[label="0.060241;5pkt 5fpkt"];
1024--2208[label="1;83pkt 83fpkt"];
1263--1368[label="0.357895;34pkt 34fpkt"];
1263--1774[label="1;150pkt 150fpkt"];
1263--2324[label="0.993333;149pkt 149fpkt"];
1368--1741[label="0.0842105;8pkt 8fpkt"];
1368--1774[label="0.357895;34pkt 34fpkt"];
1368--2208[label="0.0568182;5pkt 5fpkt"];
1368--2324[label="0.357895;34pkt 34fpkt"];
1774--2324[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.182.59.58"/>
      <filter dst_port="80" src_ip="148.182.59.193"/>
      <filter dst_ip="212.69.111.189" dst_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.116.136.64"/>
    </slice>
    <from sec="1000011602" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.202.238.66"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
468[label="144.52.93.33;d;206pkt 206fpkt", shape=diamond, color=yellow];
736[label="219.212.140.201;s;36pkt 36fpkt", shape=diamond, color=yellow];
1163[label="144.52.93.33;d;69pkt 69fpkt", shape=hexagon, color=black];
1660[label="52.36.166.17;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2121[label="219.212.140.201;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2189[label="195.120.173.225;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2283[label="52.36.166.17;13pkt 13fpkt", shape=invtriangle, color=brown];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.212.140.201:80, 144.52.93.33:*}[20.6731%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8762%)&lt;BR/&gt; 4702: (0.49505%)&lt;BR/&gt; 4687: (0.49505%)&lt;BR/&gt; 4686: (0.49505%)&lt;BR/&gt; 4672: (0.49505%)&gt;];
}
468--736[label="1;36pkt 36fpkt"];
468--948[label="0.0505051;5pkt 5fpkt"];
468--1015[label="0.147059;5pkt 5fpkt"];
468--1078[label="0.00636943;1pkt 1fpkt"];
468--1163[label="1;69pkt 69fpkt"];
468--1506[label="0.0505051;5pkt 5fpkt"];
468--1586[label="0.00735294;1pkt 1fpkt"];
468--1598[label="0.00485437;1pkt 1fpkt"];
468--1602[label="0.00485437;1pkt 1fpkt"];
468--1604[label="0.00485437;1pkt 1fpkt"];
468--1626[label="0.0833333;1pkt 1fpkt"];
468--1630[label="0.0526316;1pkt 1fpkt"];
468--1660[label="0.923077;12pkt 12fpkt"];
468--1896[label="0.0212766;1pkt 1fpkt"];
468--1940[label="0.0123457;1pkt 1fpkt"];
468--2121[label="1;43pkt 43fpkt"];
468--2160[label="0.159091;7pkt 7fpkt"];
468--2189[label="0.958333;23pkt 23fpkt"];
468--2271[label="0.0833333;1pkt 1fpkt"];
468--2283[label="0.923077;12pkt 12fpkt"];
736--1163[label="0.0277778;1pkt 1fpkt"];
736--2121[label="1;36pkt 36fpkt"];
1163--1586[label="0.0144928;1pkt 1fpkt"];
1163--1598[label="0.0144928;1pkt 1fpkt"];
1163--1602[label="0.0144928;1pkt 1fpkt"];
1163--1604[label="0.0144928;1pkt 1fpkt"];
1163--1626[label="0.0833333;1pkt 1fpkt"];
1163--1660[label="0.846154;11pkt 11fpkt"];
1163--2121[label="0.186047;8pkt 8fpkt"];
1163--2160[label="0.0227273;1pkt 1fpkt"];
1163--2189[label="0.958333;23pkt 23fpkt"];
1163--2271[label="0.0833333;1pkt 1fpkt"];
1163--2283[label="0.846154;11pkt 11fpkt"];
1660--2283[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="144.52.93.33" src_ip="219.212.140.201" src_port="80"/>
    </slice>
    <from sec="1000011607" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.81.71.72"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.2.184.73"/>
    </slice>
    <from sec="1000011651" usec="0"/>
    <to sec="1000011661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.71.129.74"/>
    </slice>
    <from sec="1000012453" usec="0"/>
    <to sec="1000012525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637079,2.06364,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
957[label="213.181.80.75;s;51pkt 51fpkt", shape=diamond, color=yellow];
1825[label="213.181.80.75;51pkt 51fpkt", shape=pentagon, color=darkviolet];
2346[label="213.181.80.75;51pkt 51fpkt", shape=invtriangle, color=brown];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.181.80.75:80, 196.33.72.124:*}[76.4706%]&lt;BR/&gt;{213.181.80.75:80, 144.52.206.5:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61995: (0.980392%)&lt;BR/&gt; 61994: (0.980392%)&lt;BR/&gt; 61993: (0.980392%)&lt;BR/&gt; 61992: (0.980392%)&gt;];
}
957--1825[label="1;51pkt 51fpkt"];
957--2346[label="1;51pkt 51fpkt"];
1825--2346[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="196.33.72.124" src_ip="213.181.80.75" src_port="80"/>
      <filter dst_ip="144.52.206.5" src_ip="213.181.80.75" src_port="80"/>
    </slice>
    <from sec="1000012259" usec="0"/>
    <to sec="1000012525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.212.200.75"/>
    </slice>
    <from sec="1000011758" usec="0"/>
    <to sec="1000012364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.173.194.77"/>
    </slice>
    <from sec="1000011617" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
1859[label="163.7.52.85;73pkt 73fpkt", shape=pentagon, color=darkviolet];
2010[label="144.52.162.148;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.7.52.85:3027, *:53}[57.3034%]&lt;BR/&gt;{163.7.52.85:53, *:*}[24.7191%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.0674%)&lt;BR/&gt; 3027: (28.6517%)&lt;BR/&gt; 0: (13.4831%)&lt;BR/&gt; 1026: (2.24719%)&lt;BR/&gt; 1024: (1.1236%)&gt;];
}
</description>
    <slice>
      <filter src_ip="163.7.52.85" src_port="53"/>
      <filter dst_port="53" src_ip="163.7.52.85" src_port="3027"/>
    </slice>
    <from sec="1000011648" usec="0"/>
    <to sec="1000012527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.226.123.81"/>
    </slice>
    <from sec="1000012206" usec="0"/>
    <to sec="1000012521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.119.218.84"/>
    </slice>
    <from sec="1000012016" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.182.246.84"/>
    </slice>
    <from sec="1000012469" usec="0"/>
    <to sec="1000012471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.25.123.85"/>
    </slice>
    <from sec="1000011626" usec="0"/>
    <to sec="1000012469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.173.2.86"/>
    </slice>
    <from sec="1000012007" usec="0"/>
    <to sec="1000012459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.182.38.93"/>
    </slice>
    <from sec="1000011673" usec="0"/>
    <to sec="1000012402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.923803,2.04534,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
694[label="148.182.240.93;s;45pkt 45fpkt", shape=diamond, color=yellow];
1884[label="148.182.240.93;45pkt 45fpkt", shape=pentagon, color=darkviolet];
2356[label="148.182.240.93;45pkt 45fpkt", shape=invtriangle, color=brown];
2529[label="148.182.240.93;45pkt 45fpkt", shape=invhouse, color=bisque];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.182.240.93:*, 213.3.65.163:80}[51.1111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.8889%)&lt;BR/&gt; 53: (8.88889%)&lt;BR/&gt; 0: (2.22222%)&lt;BR/&gt; 63844: (1.11111%)&lt;BR/&gt; 62001: (1.11111%)&gt;];
}
694--1455[label="0.0222222;1pkt 1fpkt"];
694--1599[label="0.0666667;3pkt 3fpkt"];
694--1884[label="1;45pkt 45fpkt"];
694--2356[label="1;45pkt 45fpkt"];
694--2529[label="1;45pkt 45fpkt"];
1884--2356[label="1;45pkt 45fpkt"];
1884--2529[label="1;45pkt 45fpkt"];
2356--2529[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="213.3.65.163" dst_port="80" src_ip="148.182.240.93"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637079,2.06364,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
707[label="196.42.67.90;d;69pkt 69fpkt", shape=diamond, color=yellow];
1887[label="197.170.147.95;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2357[label="197.170.147.95;33pkt 33fpkt", shape=invtriangle, color=brown];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.170.147.95:*, 196.42.67.90:80}[49.2754%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2593%)&lt;BR/&gt; 55587: (1.11111%)&lt;BR/&gt; 55574: (1.11111%)&lt;BR/&gt; 55530: (1.11111%)&lt;BR/&gt; 55529: (1.11111%)&gt;];
}
707--1615[label="0.121951;5pkt 5fpkt"];
707--1887[label="1;33pkt 33fpkt"];
707--2357[label="1;33pkt 33fpkt"];
1887--2357[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="196.42.67.90" dst_port="80" src_ip="197.170.147.95"/>
    </slice>
    <from sec="1000011608" usec="0"/>
    <to sec="1000012334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.185.204.95"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.246.45.102"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.37.191.103"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.202.238.104"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.216.162.106"/>
    </slice>
    <from sec="1000011609" usec="0"/>
    <to sec="1000012527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.244.67.112"/>
    </slice>
    <from sec="1000011717" usec="0"/>
    <to sec="1000012521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.201.241.113"/>
    </slice>
    <from sec="1000012116" usec="0"/>
    <to sec="1000012128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.229.232.116"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.76.213.119"/>
    </slice>
    <from sec="1000012316" usec="0"/>
    <to sec="1000012335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.12.19.122"/>
    </slice>
    <from sec="1000011602" usec="0"/>
    <to sec="1000011915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472845,2.09084,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
401[label="197.116.138.130;s;604pkt 604fpkt", shape=diamond, color=yellow];
1952[label="197.116.138.130;609pkt 609fpkt", shape=pentagon, color=darkviolet];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.116.138.130:0, *:0}[83.6066%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (83.512%)&lt;BR/&gt; 161: (8.16158%)&lt;BR/&gt; 4837: (0.0824402%)&lt;BR/&gt; 4835: (0.0824402%)&lt;BR/&gt; 4833: (0.0824402%)&gt;];
}
401--1952[label="0.998344;603pkt 603fpkt"];
</description>
    <slice>
      <filter src_ip="197.116.138.130"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472845,2.09084,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
719[label="148.173.209.135;s;178pkt 178fpkt", shape=diamond, color=yellow];
1970[label="148.173.209.135;177pkt 177fpkt", shape=pentagon, color=darkviolet];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.173.209.135:*, 219.213.81.49:80}[33.7079%]&lt;BR/&gt;{148.173.209.135:*, 206.39.122.33:80}[22.4719%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36993: (0.28169%)&lt;BR/&gt; 36992: (0.28169%)&lt;BR/&gt; 36983: (0.28169%)&lt;BR/&gt; 36969: (0.28169%)&gt;];
}
719--1970[label="1;177pkt 177fpkt"];
</description>
    <slice>
      <filter dst_ip="219.213.81.49" dst_port="80" src_ip="148.173.209.135"/>
      <filter dst_ip="206.39.122.33" dst_port="80" src_ip="148.173.209.135"/>
    </slice>
    <from sec="1000011639" usec="0"/>
    <to sec="1000012486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472845,2.09084,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
693[label="160.67.235.137;s;316pkt 316fpkt", shape=diamond, color=yellow];
1973[label="160.67.235.137;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.67.235.137:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
693--1973[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="160.67.235.137"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.81.95.140"/>
    </slice>
    <from sec="1000011617" usec="0"/>
    <to sec="1000012527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.213.176.144"/>
    </slice>
    <from sec="1000012050" usec="0"/>
    <to sec="1000012181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.215.39.146"/>
    </slice>
    <from sec="1000012179" usec="0"/>
    <to sec="1000012194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
709[label="148.182.228.148;s;19pkt 19fpkt", shape=diamond, color=yellow];
790[label="219.129.124.236;d;4pkt 4fpkt", shape=diamond, color=yellow];
1308[label="148.182.228.148;s;19pkt 19fpkt", shape=hexagon, color=black];
2011[label="148.182.228.148;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2406[label="148.182.228.148;1pkt 1fpkt", shape=invtriangle, color=brown];
2545[label="148.182.228.148;1pkt 1fpkt", shape=invhouse, color=bisque];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.182.228.148:*, 209.36.8.142:80}[26.3158%]&lt;BR/&gt;{148.182.228.148:*, 219.129.124.236:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.6667%)&lt;BR/&gt; 11999: (6.66667%)&lt;BR/&gt; 9470: (6.66667%)&lt;BR/&gt; 5001: (4.44444%)&lt;BR/&gt; 9474: (3.33333%)&gt;];
}
709--790[label="1;4pkt 4fpkt"];
709--1308[label="1;19pkt 19fpkt"];
709--2011[label="1;1pkt 1fpkt"];
709--2406[label="1;1pkt 1fpkt"];
709--2545[label="1;1pkt 1fpkt"];
790--1308[label="1;4pkt 4fpkt"];
790--2011[label="1;1pkt 1fpkt"];
790--2406[label="1;1pkt 1fpkt"];
790--2545[label="1;1pkt 1fpkt"];
1308--2011[label="1;1pkt 1fpkt"];
1308--2406[label="1;1pkt 1fpkt"];
1308--2545[label="1;1pkt 1fpkt"];
2011--2406[label="1;1pkt 1fpkt"];
2011--2545[label="1;1pkt 1fpkt"];
2406--2545[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.129.124.236" src_ip="148.182.228.148"/>
      <filter dst_ip="209.36.8.142" dst_port="80" src_ip="148.182.228.148"/>
    </slice>
    <from sec="1000011609" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.168.6.156"/>
    </slice>
    <from sec="1000012255" usec="0"/>
    <to sec="1000012525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.185.33.158"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.76.11.160"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.6.59.161"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.34.10.166"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.100.55.167"/>
    </slice>
    <from sec="1000011605" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.128.115.168"/>
    </slice>
    <from sec="1000012363" usec="0"/>
    <to sec="1000012411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.116.142.168"/>
    </slice>
    <from sec="1000011603" usec="0"/>
    <to sec="1000012211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472845,2.09084,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
565[label="144.52.33.80;d;130pkt 130fpkt", shape=diamond, color=yellow];
2063[label="92.255.111.171;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 144.52.33.80:*}[71.9424%]&lt;BR/&gt;{*:0, 144.52.33.80:0}[20.1439%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.4558%)&lt;BR/&gt; 0: (19.7279%)&lt;BR/&gt; 49255: (3.40136%)&lt;BR/&gt; 49249: (3.40136%)&lt;BR/&gt; 49237: (3.40136%)&gt;];
}
565--1598[label="0.0538462;7pkt 7fpkt"];
565--1602[label="0.0538462;7pkt 7fpkt"];
565--1604[label="0.0538462;7pkt 7fpkt"];
565--2063[label="0.470588;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="144.52.33.80" src_port="80"/>
      <filter dst_ip="144.52.33.80"/>
    </slice>
    <from sec="1000011618" usec="0"/>
    <to sec="1000012164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.116.140.176"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.64.100.178"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.89.124.179"/>
    </slice>
    <from sec="1000011602" usec="0"/>
    <to sec="1000012456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929312,2.00887,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_240{
style=filled;
color=gray75;
344[label="144.52.1.144;s;558pkt 558fpkt", shape=diamond, color=yellow];
382[label="214.24.37.118;d;226pkt 226fpkt", shape=diamond, color=yellow];
490[label="214.24.37.32;d;84pkt 84fpkt", shape=diamond, color=yellow];
672[label="148.173.209.70;s;111pkt 111fpkt", shape=diamond, color=yellow];
743[label="219.21.173.191;d;75pkt 75fpkt", shape=diamond, color=yellow];
1064[label="214.24.37.118;d;220pkt 220fpkt", shape=hexagon, color=black];
1099[label="144.52.1.144;s;558pkt 558fpkt", shape=hexagon, color=black];
1107[label="214.24.37.32;d;82pkt 82fpkt", shape=hexagon, color=black];
1430[label="148.173.209.70;s;111pkt 111fpkt", shape=hexagon, color=black];
1583[label="214.24.37.118;d;220pkt 220fpkt", shape=polygon, color=gold];
1990[label="144.52.1.144;559pkt 559fpkt", shape=pentagon, color=darkviolet];
2090[label="197.116.137.184;37pkt 37fpkt", shape=pentagon, color=darkviolet];
stat240[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.52.1.144:25, *:*}[35.4463%]&lt;BR/&gt;{144.52.1.144:*, *:113}[34.4114%]&lt;BR/&gt;{144.52.1.144:*, 214.24.37.118:*}[32.0828%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (24.8152%)&lt;BR/&gt; 113: (23.2489%)&lt;BR/&gt; 110: (1.31996%)&lt;BR/&gt; 0: (0.985568%)&lt;BR/&gt; 53: (0.175994%)&gt;];
}
344--382[label="0.964602;218pkt 218fpkt"];
344--490[label="1;84pkt 84fpkt"];
344--1064[label="0.963636;212pkt 212fpkt"];
344--1099[label="1;558pkt 558fpkt"];
344--1107[label="1;82pkt 82fpkt"];
344--1583[label="0.963636;212pkt 212fpkt"];
344--1990[label="0.998208;557pkt 557fpkt"];
382--672[label="0.036036;4pkt 4fpkt"];
382--1064[label="1;220pkt 220fpkt"];
382--1068[label="0.00442478;1pkt 1fpkt"];
382--1099[label="0.964602;218pkt 218fpkt"];
382--1430[label="0.036036;4pkt 4fpkt"];
382--1583[label="1;220pkt 220fpkt"];
382--1741[label="0.00442478;1pkt 1fpkt"];
382--1990[label="0.964602;218pkt 218fpkt"];
490--1099[label="1;84pkt 84fpkt"];
490--1107[label="1;82pkt 82fpkt"];
490--1990[label="1;84pkt 84fpkt"];
672--743[label="0.08;6pkt 6fpkt"];
672--1064[label="0.036036;4pkt 4fpkt"];
672--1430[label="1;111pkt 111fpkt"];
672--1583[label="0.036036;4pkt 4fpkt"];
743--945[label="0.0133333;1pkt 1fpkt"];
743--977[label="0.0133333;1pkt 1fpkt"];
743--1006[label="0.0416667;3pkt 3fpkt"];
743--1274[label="0.0133333;1pkt 1fpkt"];
743--1430[label="0.08;6pkt 6fpkt"];
743--1528[label="0.0133333;1pkt 1fpkt"];
743--1537[label="0.0416667;3pkt 3fpkt"];
743--1636[label="0.0133333;1pkt 1fpkt"];
743--1801[label="0.0133333;1pkt 1fpkt"];
743--2090[label="0.216216;8pkt 8fpkt"];
743--2174[label="0.0133333;1pkt 1fpkt"];
743--2275[label="0.0133333;1pkt 1fpkt"];
743--2465[label="0.0133333;1pkt 1fpkt"];
1064--1068[label="0.00454545;1pkt 1fpkt"];
1064--1099[label="0.963636;212pkt 212fpkt"];
1064--1430[label="0.036036;4pkt 4fpkt"];
1064--1583[label="1;220pkt 220fpkt"];
1064--1741[label="0.00454545;1pkt 1fpkt"];
1064--1990[label="0.963636;212pkt 212fpkt"];
1099--1107[label="1;82pkt 82fpkt"];
1099--1583[label="0.963636;212pkt 212fpkt"];
1099--1990[label="0.998208;557pkt 557fpkt"];
1107--1990[label="1;82pkt 82fpkt"];
1430--1583[label="0.036036;4pkt 4fpkt"];
1583--1741[label="0.00454545;1pkt 1fpkt"];
1583--1990[label="0.963636;212pkt 212fpkt"];
</description>
    <slice>
      <filter dst_ip="214.24.37.118" src_ip="144.52.1.144"/>
      <filter src_ip="144.52.1.144" src_port="25"/>
      <filter dst_port="113" src_ip="144.52.1.144"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.166.208.188"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.161.131.189"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.149.132.192"/>
    </slice>
    <from sec="1000012450" usec="0"/>
    <to sec="1000012509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
2108[label="148.182.41.195;49pkt 49fpkt", shape=pentagon, color=darkviolet];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.182.41.195:*, 213.121.100.150:80}[36.7347%]&lt;BR/&gt;{148.182.41.195:53, *:*}[24.4898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.7143%)&lt;BR/&gt; 53: (17.3469%)&lt;BR/&gt; 59612: (1.02041%)&lt;BR/&gt; 59273: (1.02041%)&lt;BR/&gt; 53343: (1.02041%)&gt;];
}
</description>
    <slice>
      <filter src_ip="148.182.41.195" src_port="53"/>
      <filter dst_ip="213.121.100.150" dst_port="80" src_ip="148.182.41.195"/>
    </slice>
    <from sec="1000011649" usec="0"/>
    <to sec="1000012365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.149.93.196"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
645[label="196.42.96.202;s;22pkt 22fpkt", shape=diamond, color=yellow];
656[label="92.229.176.150;d;3pkt 3fpkt", shape=diamond, color=yellow];
1329[label="92.229.176.150;d;3pkt 3fpkt", shape=hexagon, color=black];
2122[label="196.42.96.202;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2442[label="196.42.96.202;22pkt 22fpkt", shape=invtriangle, color=brown];
2553[label="196.42.96.202;22pkt 22fpkt", shape=invhouse, color=bisque];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.42.96.202:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1218: (3.19149%)&lt;BR/&gt; 1207: (3.19149%)&lt;BR/&gt; 1204: (3.19149%)&lt;BR/&gt; 1217: (2.12766%)&gt;];
}
645--656[label="1;3pkt 3fpkt"];
645--1329[label="1;3pkt 3fpkt"];
645--2122[label="1;22pkt 22fpkt"];
645--2442[label="1;22pkt 22fpkt"];
645--2553[label="1;22pkt 22fpkt"];
656--1329[label="1;3pkt 3fpkt"];
656--2122[label="1;3pkt 3fpkt"];
656--2442[label="1;3pkt 3fpkt"];
656--2553[label="1;3pkt 3fpkt"];
1329--2122[label="1;3pkt 3fpkt"];
1329--2442[label="1;3pkt 3fpkt"];
1329--2553[label="1;3pkt 3fpkt"];
2122--2442[label="1;22pkt 22fpkt"];
2122--2553[label="1;22pkt 22fpkt"];
2442--2553[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="196.42.96.202"/>
    </slice>
    <from sec="1000011773" usec="0"/>
    <to sec="1000012269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.165.229.202"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472845,2.09084,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
568[label="148.182.59.203;s;171pkt 171fpkt", shape=diamond, color=yellow];
2126[label="148.182.59.203;171pkt 171fpkt", shape=pentagon, color=darkviolet];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.182.59.203:*, 213.116.231.146:80}[38.5965%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58084: (0.292398%)&lt;BR/&gt; 58083: (0.292398%)&lt;BR/&gt; 58082: (0.292398%)&lt;BR/&gt; 58081: (0.292398%)&gt;];
}
568--858[label="0.0714286;4pkt 4fpkt"];
568--2126[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_ip="213.116.231.146" dst_port="80" src_ip="148.182.59.203"/>
    </slice>
    <from sec="1000011647" usec="0"/>
    <to sec="1000012321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.116.137.203"/>
    </slice>
    <from sec="1000011616" usec="0"/>
    <to sec="1000012512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.66.99.205"/>
    </slice>
    <from sec="1000011909" usec="0"/>
    <to sec="1000011996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.131.63.207"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.123.67.210"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.173.102.210"/>
    </slice>
    <from sec="1000011797" usec="0"/>
    <to sec="1000012332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.117.154.213"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.229.140.220"/>
    </slice>
    <from sec="1000011604" usec="0"/>
    <to sec="1000012527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.19.67.224"/>
    </slice>
    <from sec="1000011612" usec="0"/>
    <to sec="1000012526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.19.67.225"/>
    </slice>
    <from sec="1000011626" usec="0"/>
    <to sec="1000012524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472845,2.09084,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
935[label="141.165.1.41;d;86pkt 86fpkt", shape=diamond, color=yellow];
2194[label="92.70.22.228;52pkt 52fpkt", shape=pentagon, color=darkviolet];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.70.22.228:80, 141.165.1.41:*}[60.4651%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49357: (0.724638%)&lt;BR/&gt; 49356: (0.724638%)&lt;BR/&gt; 49355: (0.724638%)&lt;BR/&gt; 49354: (0.724638%)&gt;];
}
935--2194[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.1.41" src_ip="92.70.22.228" src_port="80"/>
    </slice>
    <from sec="1000012353" usec="0"/>
    <to sec="1000012492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.136.159.230"/>
    </slice>
    <from sec="1000011604" usec="0"/>
    <to sec="1000011938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.224.142.233"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.92.154.236"/>
    </slice>
    <from sec="1000011604" usec="0"/>
    <to sec="1000012485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.31.6.239"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.83.21.240"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.117.20.244"/>
    </slice>
    <from sec="1000011612" usec="0"/>
    <to sec="1000012504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.15.58.244"/>
    </slice>
    <from sec="1000012360" usec="0"/>
    <to sec="1000012396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.134.104.245"/>
    </slice>
    <from sec="1000011663" usec="0"/>
    <to sec="1000012527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.12.5.247"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.491638,2.14774,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.118.22.249"/>
    </slice>
    <from sec="1000012123" usec="0"/>
    <to sec="1000012529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637079,2.06364,011,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
878[label="47.146.145.254;s;573pkt 573fpkt", shape=diamond, color=yellow];
2259[label="47.146.145.254;571pkt 571fpkt", shape=pentagon, color=darkviolet];
2490[label="47.146.145.254;571pkt 571fpkt", shape=invtriangle, color=brown];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{47.146.145.254:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19969: (0.349854%)&lt;BR/&gt; 61418: (0.262391%)&lt;BR/&gt; 55862: (0.262391%)&lt;BR/&gt; 55483: (0.174927%)&lt;BR/&gt; 53328: (0.174927%)&gt;];
}
878--2259[label="1;571pkt 571fpkt"];
878--2490[label="1;571pkt 571fpkt"];
2259--2490[label="1;571pkt 571fpkt"];
</description>
    <slice>
      <filter src_ip="47.146.145.254"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.65115,2.12128,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
1607[label="148.182.229.0;56pkt 56fpkt", shape=pentagon, color=darkviolet];
2263[label="148.182.229.0;56pkt 56fpkt", shape=invtriangle, color=brown];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.182.229.0:*, *:8888}[96.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (48.2143%)&lt;BR/&gt; 7777: (1.78571%)&lt;BR/&gt; 3792: (0.892857%)&lt;BR/&gt; 3790: (0.892857%)&lt;BR/&gt; 3788: (0.892857%)&gt;];
}
1607--2263[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="148.182.229.0"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733468,2.17024,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.210.4.1"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000011680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22207,1.96147,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
44[label="196.139.189.46;d;4066pkt 4066fpkt", shape=diamond, color=yellow];
226[label="92.193.10.162;s;34pkt 34fpkt", shape=diamond, color=yellow];
280[label="92.201.101.115;s;1pkt 1fpkt", shape=diamond, color=yellow];
379[label="197.116.141.184;d;116pkt 116fpkt", shape=diamond, color=yellow];
412[label="201.17.57.236;s;157pkt 157fpkt", shape=diamond, color=yellow];
528[label="197.83.21.240;s;1pkt 1fpkt", shape=diamond, color=yellow];
534[label="219.213.29.161;s;325pkt 325fpkt", shape=diamond, color=yellow];
612[label="215.140.108.10;s;115pkt 115fpkt", shape=diamond, color=yellow];
726[label="206.237.135.141;s;42pkt 42fpkt", shape=diamond, color=yellow];
799[label="219.25.214.138;s;49pkt 49fpkt", shape=diamond, color=yellow];
808[label="196.114.172.189;s;23pkt 23fpkt", shape=diamond, color=yellow];
841[label="201.17.61.166;s;30pkt 30fpkt", shape=diamond, color=yellow];
843[label="141.165.56.153;d;20pkt 20fpkt", shape=diamond, color=yellow];
847[label="219.25.214.130;s;68pkt 68fpkt", shape=diamond, color=yellow];
850[label="92.193.12.6;s;41pkt 41fpkt", shape=diamond, color=yellow];
893[label="94.32.19.26;s;171pkt 171fpkt", shape=diamond, color=yellow];
911[label="215.140.108.0;s;30pkt 30fpkt", shape=diamond, color=yellow];
914[label="93.117.84.204;s;2pkt 2fpkt", shape=diamond, color=yellow];
930[label="141.165.7.241;d;121pkt 121fpkt", shape=diamond, color=yellow];
933[label="92.193.27.93;s;43pkt 43fpkt", shape=diamond, color=yellow];
941[label="144.52.232.20;d;13pkt 13fpkt", shape=diamond, color=yellow];
1015[label="92.193.10.162;s;34pkt 34fpkt", shape=hexagon, color=black];
1078[label="201.17.57.236;s;157pkt 157fpkt", shape=hexagon, color=black];
1292[label="197.83.21.240;s;1pkt 1fpkt", shape=hexagon, color=black];
1425[label="141.165.56.153;d;20pkt 20fpkt", shape=hexagon, color=black];
1431[label="196.139.189.46;d;3797pkt 3797fpkt", shape=hexagon, color=black];
1475[label="215.140.108.0;s;27pkt 27fpkt", shape=hexagon, color=black];
1479[label="93.117.84.204;s;2pkt 2fpkt", shape=hexagon, color=black];
1485[label="141.165.7.241;d;111pkt 111fpkt", shape=hexagon, color=black];
1486[label="92.193.27.93;s;43pkt 43fpkt", shape=hexagon, color=black];
1586[label="201.17.57.236;s;136pkt 136fpkt", shape=polygon, color=gold];
1606[label="215.140.108.0;29pkt 29fpkt", shape=pentagon, color=darkviolet];
1614[label="194.97.8.3;15pkt 15fpkt", shape=pentagon, color=darkviolet];
1622[label="92.193.12.6;42pkt 42fpkt", shape=pentagon, color=darkviolet];
1623[label="94.108.64.6;24pkt 24fpkt", shape=pentagon, color=darkviolet];
1670[label="94.32.19.26;171pkt 171fpkt", shape=pentagon, color=darkviolet];
1688[label="194.42.237.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1745[label="194.42.151.48;29pkt 29fpkt", shape=pentagon, color=darkviolet];
1746[label="92.37.181.48;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1755[label="198.254.143.50;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1762[label="219.57.75.53;16pkt 16fpkt", shape=pentagon, color=darkviolet];
1767[label="92.193.52.55;9pkt 9fpkt", shape=pentagon, color=darkviolet];
1881[label="92.193.27.93;46pkt 46fpkt", shape=pentagon, color=darkviolet];
1904[label="194.179.75.104;16pkt 16fpkt", shape=pentagon, color=darkviolet];
1911[label="194.97.20.108;87pkt 87fpkt", shape=pentagon, color=darkviolet];
1929[label="213.70.134.116;9pkt 9fpkt", shape=pentagon, color=darkviolet];
1931[label="92.175.235.116;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1957[label="92.150.59.132;21pkt 21fpkt", shape=pentagon, color=darkviolet];
1975[label="219.25.214.138;48pkt 48fpkt", shape=pentagon, color=darkviolet];
1979[label="219.15.4.140;12pkt 12fpkt", shape=pentagon, color=darkviolet];
1980[label="197.117.10.140;38pkt 38fpkt", shape=pentagon, color=darkviolet];
1986[label="206.237.135.141;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2002[label="194.42.227.146;29pkt 29fpkt", shape=pentagon, color=darkviolet];
2016[label="194.42.193.150;26pkt 26fpkt", shape=pentagon, color=darkviolet];
2026[label="92.150.50.157;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2045[label="219.157.177.164;23pkt 23fpkt", shape=pentagon, color=darkviolet];
2060[label="92.39.131.170;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2065[label="92.128.235.172;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2096[label="195.218.84.187;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2100[label="196.114.172.189;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2106[label="92.193.12.194;107pkt 107fpkt", shape=pentagon, color=darkviolet];
2131[label="93.117.84.204;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2145[label="219.190.130.210;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2147[label="92.248.147.210;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2172[label="194.206.73.219;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2200[label="92.115.103.232;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2203[label="194.206.73.233;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2218[label="193.0.190.239;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2265[label="194.97.8.3;14pkt 14fpkt", shape=invtriangle, color=brown];
2269[label="92.193.12.6;41pkt 41fpkt", shape=invtriangle, color=brown];
2270[label="94.108.64.6;24pkt 24fpkt", shape=invtriangle, color=brown];
2314[label="194.42.151.48;29pkt 29fpkt", shape=invtriangle, color=brown];
2321[label="219.57.75.53;16pkt 16fpkt", shape=invtriangle, color=brown];
2322[label="92.193.52.55;9pkt 9fpkt", shape=invtriangle, color=brown];
2328[label="194.97.0.60;13pkt 13fpkt", shape=invtriangle, color=brown];
2364[label="194.179.75.104;15pkt 15fpkt", shape=invtriangle, color=brown];
2368[label="194.97.20.108;88pkt 88fpkt", shape=invtriangle, color=brown];
2374[label="92.175.235.116;20pkt 20fpkt", shape=invtriangle, color=brown];
2393[label="219.25.214.138;48pkt 48fpkt", shape=invtriangle, color=brown];
2395[label="219.15.4.140;12pkt 12fpkt", shape=invtriangle, color=brown];
2396[label="197.117.10.140;39pkt 39fpkt", shape=invtriangle, color=brown];
2419[label="92.128.235.172;16pkt 16fpkt", shape=invtriangle, color=brown];
2451[label="219.190.130.210;10pkt 10fpkt", shape=invtriangle, color=brown];
2474[label="194.206.73.233;20pkt 20fpkt", shape=invtriangle, color=brown];
2489[label="194.42.244.249;25pkt 25fpkt", shape=invtriangle, color=brown];
2493[label="94.108.64.6;23pkt 23fpkt", shape=invhouse, color=bisque];
2520[label="219.57.75.53;16pkt 16fpkt", shape=invhouse, color=bisque];
2558[label="219.190.130.210;10pkt 10fpkt", shape=invhouse, color=bisque];
2570[label="194.206.73.233;21pkt 21fpkt", shape=invhouse, color=bisque];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 196.139.189.46:*}[63.134%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.1921%)&lt;BR/&gt; 53: (4.83232%)&lt;BR/&gt; 8006: (4.14136%)&lt;BR/&gt; 443: (1.08265%)&lt;BR/&gt; 8888: (0.426899%)&gt;];
}
44--226[label="0.852941;29pkt 29fpkt"];
44--280[label="1;1pkt 1fpkt"];
44--362[label="0.116279;5pkt 5fpkt"];
44--383[label="0.00442478;1pkt 1fpkt"];
44--412[label="0.509554;80pkt 80fpkt"];
44--478[label="0.0628571;11pkt 11fpkt"];
44--528[label="1;1pkt 1fpkt"];
44--534[label="1;325pkt 325fpkt"];
44--612[label="0.826087;95pkt 95fpkt"];
44--726[label="1;42pkt 42fpkt"];
44--735[label="0.00584795;1pkt 1fpkt"];
44--799[label="1;49pkt 49fpkt"];
44--806[label="0.428571;12pkt 12fpkt"];
44--808[label="1;23pkt 23fpkt"];
44--814[label="0.126984;8pkt 8fpkt"];
44--817[label="0.125;1pkt 1fpkt"];
44--834[label="0.137931;8pkt 8fpkt"];
44--841[label="1;30pkt 30fpkt"];
44--847[label="1;68pkt 68fpkt"];
44--850[label="0.585366;24pkt 24fpkt"];
44--893[label="1;171pkt 171fpkt"];
44--911[label="0.533333;16pkt 16fpkt"];
44--914[label="1;2pkt 2fpkt"];
44--1015[label="0.852941;29pkt 29fpkt"];
44--1078[label="0.509554;80pkt 80fpkt"];
44--1110[label="0.00458716;1pkt 1fpkt"];
44--1246[label="0.097561;4pkt 4fpkt"];
44--1292[label="1;1pkt 1fpkt"];
44--1405[label="0.125;1pkt 1fpkt"];
44--1431[label="1;3797pkt 3797fpkt"];
44--1474[label="0.413793;12pkt 12fpkt"];
44--1475[label="0.592593;16pkt 16fpkt"];
44--1479[label="1;2pkt 2fpkt"];
44--1586[label="0.536765;73pkt 73fpkt"];
44--1598[label="0.112861;172pkt 172fpkt"];
44--1599[label="0.000384911;1pkt 1fpkt"];
44--1601[label="0.012131;30pkt 30fpkt"];
44--1602[label="0.112861;172pkt 172fpkt"];
44--1603[label="0.0121359;30pkt 30fpkt"];
44--1604[label="0.112861;172pkt 172fpkt"];
44--1606[label="0.551724;16pkt 16fpkt"];
44--1611[label="0.111111;1pkt 1fpkt"];
44--1613[label="0.125;2pkt 2fpkt"];
44--1614[label="0.333333;5pkt 5fpkt"];
44--1619[label="0.0344828;1pkt 1fpkt"];
44--1622[label="0.571429;24pkt 24fpkt"];
44--1623[label="1;24pkt 24fpkt"];
44--1630[label="0.105263;2pkt 2fpkt"];
44--1633[label="1;12pkt 12fpkt"];
44--1635[label="0.5;1pkt 1fpkt"];
44--1641[label="0.15873;10pkt 10fpkt"];
44--1670[label="1;171pkt 171fpkt"];
44--1689[label="0.181818;2pkt 2fpkt"];
44--1690[label="0.0555556;1pkt 1fpkt"];
44--1696[label="0.173913;4pkt 4fpkt"];
44--1707[label="0.0434783;1pkt 1fpkt"];
44--1734[label="0.0731707;3pkt 3fpkt"];
44--1743[label="1;13pkt 13fpkt"];
44--1745[label="0.551724;16pkt 16fpkt"];
44--1746[label="1;6pkt 6fpkt"];
44--1754[label="0.142857;1pkt 1fpkt"];
44--1755[label="1;7pkt 7fpkt"];
44--1762[label="1;16pkt 16fpkt"];
44--1767[label="0.444444;4pkt 4fpkt"];
44--1815[label="0.125;1pkt 1fpkt"];
44--1820[label="0.5;12pkt 12fpkt"];
44--1896[label="0.106383;5pkt 5fpkt"];
44--1897[label="0.176471;18pkt 18fpkt"];
44--1904[label="0.8125;13pkt 13fpkt"];
44--1911[label="0.712644;62pkt 62fpkt"];
44--1913[label="0.148148;4pkt 4fpkt"];
44--1929[label="1;9pkt 9fpkt"];
44--1931[label="1;19pkt 19fpkt"];
44--1933[label="1;3pkt 3fpkt"];
44--1934[label="0.00392157;1pkt 1fpkt"];
44--1940[label="0.0493827;4pkt 4fpkt"];
44--1957[label="0.333333;7pkt 7fpkt"];
44--1960[label="0.0136986;1pkt 1fpkt"];
44--1975[label="1;48pkt 48fpkt"];
44--1979[label="1;12pkt 12fpkt"];
44--1980[label="0.526316;20pkt 20fpkt"];
44--1986[label="0.976744;42pkt 42fpkt"];
44--2002[label="0.758621;22pkt 22fpkt"];
44--2016[label="0.730769;19pkt 19fpkt"];
44--2025[label="0.160714;9pkt 9fpkt"];
44--2026[label="0.181818;2pkt 2fpkt"];
44--2045[label="0.217391;5pkt 5fpkt"];
44--2054[label="0.176471;3pkt 3fpkt"];
44--2060[label="1;14pkt 14fpkt"];
44--2061[label="0.0909091;3pkt 3fpkt"];
44--2065[label="1;16pkt 16fpkt"];
44--2096[label="0.181818;2pkt 2fpkt"];
44--2100[label="1;25pkt 25fpkt"];
44--2106[label="0.551402;59pkt 59fpkt"];
44--2124[label="0.0857143;6pkt 6fpkt"];
44--2130[label="0.0666667;1pkt 1fpkt"];
44--2131[label="1;1pkt 1fpkt"];
44--2145[label="1;9pkt 9fpkt"];
44--2147[label="1;38pkt 38fpkt"];
44--2160[label="0.227273;10pkt 10fpkt"];
44--2172[label="1;21pkt 21fpkt"];
44--2184[label="0.179487;7pkt 7fpkt"];
44--2200[label="1;14pkt 14fpkt"];
44--2203[label="1;21pkt 21fpkt"];
44--2218[label="0.5;1pkt 1fpkt"];
44--2234[label="0.0833333;5pkt 5fpkt"];
44--2265[label="0.357143;5pkt 5fpkt"];
44--2268[label="0.0357143;1pkt 1fpkt"];
44--2269[label="0.585366;24pkt 24fpkt"];
44--2270[label="1;24pkt 24fpkt"];
44--2277[label="0.15873;10pkt 10fpkt"];
44--2293[label="0.0555556;1pkt 1fpkt"];
44--2295[label="0.173913;4pkt 4fpkt"];
44--2314[label="0.551724;16pkt 16fpkt"];
44--2316[label="0.142857;1pkt 1fpkt"];
44--2321[label="1;16pkt 16fpkt"];
44--2322[label="0.444444;4pkt 4fpkt"];
44--2328[label="0.307692;4pkt 4fpkt"];
44--2361[label="0.178218;18pkt 18fpkt"];
44--2364[label="0.866667;13pkt 13fpkt"];
44--2368[label="0.704545;62pkt 62fpkt"];
44--2369[label="0.148148;4pkt 4fpkt"];
44--2374[label="1;20pkt 20fpkt"];
44--2376[label="1;3pkt 3fpkt"];
44--2378[label="0.00390625;1pkt 1fpkt"];
44--2393[label="1;48pkt 48fpkt"];
44--2395[label="1;12pkt 12fpkt"];
44--2396[label="0.512821;20pkt 20fpkt"];
44--2419[label="1;16pkt 16fpkt"];
44--2445[label="0.0666667;1pkt 1fpkt"];
44--2451[label="1;10pkt 10fpkt"];
44--2469[label="0.179487;7pkt 7fpkt"];
44--2474[label="1;20pkt 20fpkt"];
44--2481[label="0.0833333;5pkt 5fpkt"];
44--2489[label="0.84;21pkt 21fpkt"];
44--2493[label="1;23pkt 23fpkt"];
44--2503[label="0.0588235;1pkt 1fpkt"];
44--2506[label="0.173913;4pkt 4fpkt"];
44--2516[label="0.142857;1pkt 1fpkt"];
44--2520[label="1;16pkt 16fpkt"];
44--2531[label="0.176471;18pkt 18fpkt"];
44--2536[label="1;4pkt 4fpkt"];
44--2555[label="0.0666667;1pkt 1fpkt"];
44--2558[label="1;10pkt 10fpkt"];
44--2568[label="0.175;7pkt 7fpkt"];
44--2570[label="1;21pkt 21fpkt"];
226--468[label="0.147059;5pkt 5fpkt"];
226--1015[label="1;34pkt 34fpkt"];
226--1431[label="0.852941;29pkt 29fpkt"];
226--1598[label="0.0588235;2pkt 2fpkt"];
226--1602[label="0.0588235;2pkt 2fpkt"];
226--1604[label="0.0588235;2pkt 2fpkt"];
280--1431[label="1;1pkt 1fpkt"];
379--601[label="0.0227273;2pkt 2fpkt"];
379--1220[label="0.0227273;2pkt 2fpkt"];
379--1619[label="0.0344828;1pkt 1fpkt"];
379--1660[label="0.0769231;1pkt 1fpkt"];
379--1661[label="0.0277778;1pkt 1fpkt"];
379--1696[label="0.0434783;1pkt 1fpkt"];
379--1830[label="0.0263158;1pkt 1fpkt"];
379--1911[label="0.218391;19pkt 19fpkt"];
379--1940[label="0.0123457;1pkt 1fpkt"];
379--2002[label="0.172414;5pkt 5fpkt"];
379--2283[label="0.0769231;1pkt 1fpkt"];
379--2295[label="0.0434783;1pkt 1fpkt"];
379--2368[label="0.227273;20pkt 20fpkt"];
379--2506[label="0.0434783;1pkt 1fpkt"];
412--468[label="0.00636943;1pkt 1fpkt"];
412--550[label="0.0191083;3pkt 3fpkt"];
412--843[label="0.05;1pkt 1fpkt"];
412--1011[label="0.00636943;1pkt 1fpkt"];
412--1078[label="1;157pkt 157fpkt"];
412--1161[label="0.0191083;3pkt 3fpkt"];
412--1163[label="0.0144928;1pkt 1fpkt"];
412--1425[label="0.05;1pkt 1fpkt"];
412--1431[label="0.509554;80pkt 80fpkt"];
412--1491[label="0.165605;26pkt 26fpkt"];
412--1586[label="1;136pkt 136fpkt"];
412--1588[label="0.0191083;3pkt 3fpkt"];
412--1598[label="0.0828025;13pkt 13fpkt"];
412--1602[label="0.0828025;13pkt 13fpkt"];
412--1604[label="0.0828025;13pkt 13fpkt"];
528--1292[label="1;1pkt 1fpkt"];
528--1431[label="1;1pkt 1fpkt"];
534--1431[label="0.895385;291pkt 291fpkt"];
612--759[label="0.0526316;1pkt 1fpkt"];
612--1011[label="0.00869565;1pkt 1fpkt"];
612--1337[label="0.111111;1pkt 1fpkt"];
612--1431[label="0.826087;95pkt 95fpkt"];
612--1598[label="0.0347826;4pkt 4fpkt"];
612--1602[label="0.0347826;4pkt 4fpkt"];
612--1604[label="0.0347826;4pkt 4fpkt"];
726--1431[label="0.880952;37pkt 37fpkt"];
726--1986[label="1;42pkt 42fpkt"];
799--1431[label="1;49pkt 49fpkt"];
799--1975[label="1;48pkt 48fpkt"];
799--2393[label="1;48pkt 48fpkt"];
808--1431[label="1;23pkt 23fpkt"];
808--2100[label="1;23pkt 23fpkt"];
841--1431[label="1;30pkt 30fpkt"];
843--1078[label="0.05;1pkt 1fpkt"];
843--1425[label="1;20pkt 20fpkt"];
843--1586[label="0.05;1pkt 1fpkt"];
843--1614[label="0.2;3pkt 3fpkt"];
843--2265[label="0.142857;2pkt 2fpkt"];
843--2328[label="0.0769231;1pkt 1fpkt"];
847--1431[label="1;68pkt 68fpkt"];
850--1431[label="0.439024;18pkt 18fpkt"];
850--1622[label="1;41pkt 41fpkt"];
850--2269[label="0.97561;40pkt 40fpkt"];
893--1431[label="0.94152;161pkt 161fpkt"];
893--1598[label="0.0175439;3pkt 3fpkt"];
893--1602[label="0.0175439;3pkt 3fpkt"];
893--1604[label="0.0175439;3pkt 3fpkt"];
893--1670[label="1;171pkt 171fpkt"];
911--1431[label="0.533333;16pkt 16fpkt"];
911--1475[label="1;27pkt 27fpkt"];
911--1606[label="1;29pkt 29fpkt"];
914--1431[label="1;2pkt 2fpkt"];
914--1479[label="1;2pkt 2fpkt"];
914--2131[label="1;1pkt 1fpkt"];
930--933[label="1;43pkt 43fpkt"];
930--1485[label="1;111pkt 111fpkt"];
930--1486[label="1;43pkt 43fpkt"];
930--1767[label="0.111111;1pkt 1fpkt"];
930--1881[label="0.956522;44pkt 44fpkt"];
930--2322[label="0.111111;1pkt 1fpkt"];
930--2328[label="0.384615;5pkt 5fpkt"];
933--1485[label="1;43pkt 43fpkt"];
933--1486[label="1;43pkt 43fpkt"];
933--1881[label="1;43pkt 43fpkt"];
941--1598[label="0.307692;4pkt 4fpkt"];
941--1602[label="0.307692;4pkt 4fpkt"];
941--1604[label="0.307692;4pkt 4fpkt"];
941--1614[label="0.461538;6pkt 6fpkt"];
941--1688[label="1;1pkt 1fpkt"];
941--2265[label="0.461538;6pkt 6fpkt"];
1015--1431[label="0.852941;29pkt 29fpkt"];
1015--1598[label="0.0588235;2pkt 2fpkt"];
1015--1602[label="0.0588235;2pkt 2fpkt"];
1015--1604[label="0.0588235;2pkt 2fpkt"];
1078--1161[label="0.0191083;3pkt 3fpkt"];
1078--1163[label="0.0144928;1pkt 1fpkt"];
1078--1425[label="0.05;1pkt 1fpkt"];
1078--1431[label="0.509554;80pkt 80fpkt"];
1078--1491[label="0.165605;26pkt 26fpkt"];
1078--1586[label="1;136pkt 136fpkt"];
1078--1588[label="0.0191083;3pkt 3fpkt"];
1078--1598[label="0.0828025;13pkt 13fpkt"];
1078--1602[label="0.0828025;13pkt 13fpkt"];
1078--1604[label="0.0828025;13pkt 13fpkt"];
1292--1431[label="1;1pkt 1fpkt"];
1425--1586[label="0.05;1pkt 1fpkt"];
1425--1614[label="0.2;3pkt 3fpkt"];
1425--2265[label="0.142857;2pkt 2fpkt"];
1425--2328[label="0.0769231;1pkt 1fpkt"];
1431--1474[label="0.241379;7pkt 7fpkt"];
1431--1475[label="0.592593;16pkt 16fpkt"];
1431--1479[label="1;2pkt 2fpkt"];
1431--1586[label="0.536765;73pkt 73fpkt"];
1431--1598[label="0.112861;172pkt 172fpkt"];
1431--1599[label="0.000384911;1pkt 1fpkt"];
1431--1601[label="0.012131;30pkt 30fpkt"];
1431--1602[label="0.112861;172pkt 172fpkt"];
1431--1603[label="0.0121359;30pkt 30fpkt"];
1431--1604[label="0.112861;172pkt 172fpkt"];
1431--1606[label="0.551724;16pkt 16fpkt"];
1431--1613[label="0.125;2pkt 2fpkt"];
1431--1614[label="0.333333;5pkt 5fpkt"];
1431--1619[label="0.0344828;1pkt 1fpkt"];
1431--1622[label="0.428571;18pkt 18fpkt"];
1431--1630[label="0.105263;2pkt 2fpkt"];
1431--1633[label="1;12pkt 12fpkt"];
1431--1635[label="0.5;1pkt 1fpkt"];
1431--1641[label="0.15873;10pkt 10fpkt"];
1431--1670[label="0.94152;161pkt 161fpkt"];
1431--1689[label="0.181818;2pkt 2fpkt"];
1431--1690[label="0.0555556;1pkt 1fpkt"];
1431--1696[label="0.173913;4pkt 4fpkt"];
1431--1707[label="0.0434783;1pkt 1fpkt"];
1431--1734[label="0.0731707;3pkt 3fpkt"];
1431--1743[label="1;13pkt 13fpkt"];
1431--1745[label="0.482759;14pkt 14fpkt"];
1431--1746[label="1;6pkt 6fpkt"];
1431--1754[label="0.142857;1pkt 1fpkt"];
1431--1755[label="1;7pkt 7fpkt"];
1431--1762[label="0.25;4pkt 4fpkt"];
1431--1767[label="0.444444;4pkt 4fpkt"];
1431--1815[label="0.125;1pkt 1fpkt"];
1431--1820[label="0.5;12pkt 12fpkt"];
1431--1896[label="0.106383;5pkt 5fpkt"];
1431--1897[label="0.176471;18pkt 18fpkt"];
1431--1904[label="0.8125;13pkt 13fpkt"];
1431--1911[label="0.712644;62pkt 62fpkt"];
1431--1913[label="0.111111;3pkt 3fpkt"];
1431--1929[label="1;9pkt 9fpkt"];
1431--1931[label="1;19pkt 19fpkt"];
1431--1933[label="1;3pkt 3fpkt"];
1431--1934[label="0.00392157;1pkt 1fpkt"];
1431--1940[label="0.0493827;4pkt 4fpkt"];
1431--1957[label="0.333333;7pkt 7fpkt"];
1431--1960[label="0.0136986;1pkt 1fpkt"];
1431--1975[label="1;48pkt 48fpkt"];
1431--1979[label="1;12pkt 12fpkt"];
1431--1980[label="0.447368;17pkt 17fpkt"];
1431--1986[label="0.860465;37pkt 37fpkt"];
1431--2002[label="0.655172;19pkt 19fpkt"];
1431--2016[label="0.692308;18pkt 18fpkt"];
1431--2025[label="0.160714;9pkt 9fpkt"];
1431--2026[label="0.181818;2pkt 2fpkt"];
1431--2045[label="0.173913;4pkt 4fpkt"];
1431--2054[label="0.176471;3pkt 3fpkt"];
1431--2060[label="1;14pkt 14fpkt"];
1431--2061[label="0.0909091;3pkt 3fpkt"];
1431--2065[label="0.9375;15pkt 15fpkt"];
1431--2096[label="0.181818;2pkt 2fpkt"];
1431--2100[label="1;25pkt 25fpkt"];
1431--2106[label="0.523364;56pkt 56fpkt"];
1431--2124[label="0.0857143;6pkt 6fpkt"];
1431--2131[label="1;1pkt 1fpkt"];
1431--2145[label="1;9pkt 9fpkt"];
1431--2147[label="0.973684;37pkt 37fpkt"];
1431--2160[label="0.204545;9pkt 9fpkt"];
1431--2172[label="1;21pkt 21fpkt"];
1431--2184[label="0.179487;7pkt 7fpkt"];
1431--2200[label="1;14pkt 14fpkt"];
1431--2203[label="1;21pkt 21fpkt"];
1431--2218[label="0.5;1pkt 1fpkt"];
1431--2234[label="0.0833333;5pkt 5fpkt"];
1431--2265[label="0.357143;5pkt 5fpkt"];
1431--2268[label="0.0357143;1pkt 1fpkt"];
1431--2269[label="0.439024;18pkt 18fpkt"];
1431--2277[label="0.15873;10pkt 10fpkt"];
1431--2293[label="0.0555556;1pkt 1fpkt"];
1431--2295[label="0.173913;4pkt 4fpkt"];
1431--2314[label="0.482759;14pkt 14fpkt"];
1431--2316[label="0.142857;1pkt 1fpkt"];
1431--2321[label="0.25;4pkt 4fpkt"];
1431--2322[label="0.444444;4pkt 4fpkt"];
1431--2328[label="0.307692;4pkt 4fpkt"];
1431--2361[label="0.178218;18pkt 18fpkt"];
1431--2364[label="0.866667;13pkt 13fpkt"];
1431--2368[label="0.704545;62pkt 62fpkt"];
1431--2369[label="0.111111;3pkt 3fpkt"];
1431--2374[label="1;20pkt 20fpkt"];
1431--2376[label="1;3pkt 3fpkt"];
1431--2378[label="0.00390625;1pkt 1fpkt"];
1431--2393[label="1;48pkt 48fpkt"];
1431--2395[label="1;12pkt 12fpkt"];
1431--2396[label="0.435897;17pkt 17fpkt"];
1431--2419[label="0.9375;15pkt 15fpkt"];
1431--2451[label="1;10pkt 10fpkt"];
1431--2469[label="0.179487;7pkt 7fpkt"];
1431--2474[label="1;20pkt 20fpkt"];
1431--2481[label="0.0833333;5pkt 5fpkt"];
1431--2489[label="0.68;17pkt 17fpkt"];
1431--2503[label="0.0588235;1pkt 1fpkt"];
1431--2506[label="0.173913;4pkt 4fpkt"];
1431--2516[label="0.142857;1pkt 1fpkt"];
1431--2520[label="0.25;4pkt 4fpkt"];
1431--2531[label="0.176471;18pkt 18fpkt"];
1431--2536[label="1;4pkt 4fpkt"];
1431--2558[label="1;10pkt 10fpkt"];
1431--2568[label="0.175;7pkt 7fpkt"];
1431--2570[label="1;21pkt 21fpkt"];
1475--1606[label="0.962963;26pkt 26fpkt"];
1479--2131[label="1;1pkt 1fpkt"];
1485--1486[label="1;43pkt 43fpkt"];
1485--1767[label="0.111111;1pkt 1fpkt"];
1485--1881[label="0.934783;43pkt 43fpkt"];
1485--2322[label="0.111111;1pkt 1fpkt"];
1485--2328[label="0.384615;5pkt 5fpkt"];
1486--1881[label="1;43pkt 43fpkt"];
1586--1588[label="0.0220588;3pkt 3fpkt"];
1586--1598[label="0.0955882;13pkt 13fpkt"];
1586--1602[label="0.0955882;13pkt 13fpkt"];
1586--1604[label="0.0955882;13pkt 13fpkt"];
1614--2265[label="1;14pkt 14fpkt"];
1622--2269[label="1;41pkt 41fpkt"];
1623--2270[label="1;24pkt 24fpkt"];
1623--2493[label="1;23pkt 23fpkt"];
1745--2314[label="1;29pkt 29fpkt"];
1762--2321[label="1;16pkt 16fpkt"];
1762--2520[label="1;16pkt 16fpkt"];
1767--2322[label="1;9pkt 9fpkt"];
1904--2364[label="1;15pkt 15fpkt"];
1911--2368[label="1;87pkt 87fpkt"];
1931--2374[label="1;19pkt 19fpkt"];
1975--2393[label="1;48pkt 48fpkt"];
1979--2395[label="1;12pkt 12fpkt"];
1980--2396[label="1;38pkt 38fpkt"];
2065--2419[label="1;16pkt 16fpkt"];
2145--2451[label="1;9pkt 9fpkt"];
2145--2558[label="1;9pkt 9fpkt"];
2203--2474[label="1;20pkt 20fpkt"];
2203--2570[label="1;21pkt 21fpkt"];
2270--2493[label="1;23pkt 23fpkt"];
2321--2520[label="1;16pkt 16fpkt"];
2451--2558[label="1;10pkt 10fpkt"];
2474--2570[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="196.139.189.46" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733468,2.17024,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.173.144.7"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.65115,2.12128,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
1634[label="196.42.108.9;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2274[label="196.42.108.9;24pkt 24fpkt", shape=invtriangle, color=brown];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.42.108.9:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1634--2274[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="196.42.108.9"/>
    </slice>
    <from sec="1000011619" usec="0"/>
    <to sec="1000012295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733468,2.17024,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.235.153.12"/>
    </slice>
    <from sec="1000011830" usec="0"/>
    <to sec="1000012415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933562,2.10348,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
1675[label="196.192.182.27;77pkt 77fpkt", shape=pentagon, color=darkviolet];
2287[label="196.192.182.27;77pkt 77fpkt", shape=invtriangle, color=brown];
2498[label="196.192.182.27;76pkt 76fpkt", shape=invhouse, color=bisque];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.192.182.27:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4927: (0.652174%)&lt;BR/&gt; 4915: (0.652174%)&lt;BR/&gt; 4849: (0.652174%)&lt;BR/&gt; 4848: (0.652174%)&gt;];
}
1675--2287[label="1;77pkt 77fpkt"];
1675--2498[label="1;76pkt 76fpkt"];
2287--2498[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="196.192.182.27"/>
    </slice>
    <from sec="1000011604" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
189[label="196.42.76.74;d;479pkt 479fpkt", shape=diamond, color=yellow];
236[label="219.196.73.209;s;4pkt 4fpkt", shape=diamond, color=yellow];
368[label="209.88.108.154;s;70pkt 70fpkt", shape=diamond, color=yellow];
846[label="206.96.152.113;s;136pkt 136fpkt", shape=diamond, color=yellow];
910[label="209.88.104.69;s;54pkt 54fpkt", shape=diamond, color=yellow];
1008[label="196.42.76.74;d;30pkt 30fpkt", shape=hexagon, color=black];
1063[label="219.196.73.209;s;4pkt 4fpkt", shape=hexagon, color=black];
1172[label="209.88.108.154;s;70pkt 70fpkt", shape=hexagon, color=black];
1473[label="209.88.104.69;s;54pkt 54fpkt", shape=hexagon, color=black];
1656[label="167.159.40.16;64pkt 64fpkt", shape=pentagon, color=darkviolet];
1678[label="47.13.0.28;8pkt 8fpkt", shape=pentagon, color=darkviolet];
1915[label="209.87.135.110;44pkt 44fpkt", shape=pentagon, color=darkviolet];
2058[label="218.185.102.169;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2141[label="219.196.73.209;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2282[label="167.159.40.16;64pkt 64fpkt", shape=invtriangle, color=brown];
2288[label="47.13.0.28;8pkt 8fpkt", shape=invtriangle, color=brown];
2298[label="209.172.103.35;21pkt 21fpkt", shape=invtriangle, color=brown];
2450[label="219.196.73.209;4pkt 4fpkt", shape=invtriangle, color=brown];
2496[label="167.159.40.16;63pkt 63fpkt", shape=invhouse, color=bisque];
2499[label="47.13.0.28;8pkt 8fpkt", shape=invhouse, color=bisque];
2557[label="219.196.73.209;4pkt 4fpkt", shape=invhouse, color=bisque];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.96.152.113:80, 196.42.76.74:*}[26.5107%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58210: (0.288541%)&lt;BR/&gt; 58206: (0.288541%)&lt;BR/&gt; 58205: (0.288541%)&lt;BR/&gt; 58271: (0.247321%)&gt;];
}
189--236[label="1;4pkt 4fpkt"];
189--368[label="1;70pkt 70fpkt"];
189--384[label="0.0350877;2pkt 2fpkt"];
189--846[label="0.772059;105pkt 105fpkt"];
189--910[label="1;54pkt 54fpkt"];
189--1008[label="1;30pkt 30fpkt"];
189--1063[label="1;4pkt 4fpkt"];
189--1172[label="1;70pkt 70fpkt"];
189--1257[label="0.0350877;2pkt 2fpkt"];
189--1473[label="1;54pkt 54fpkt"];
189--1598[label="0.0208768;10pkt 10fpkt"];
189--1602[label="0.0208768;10pkt 10fpkt"];
189--1604[label="0.0208768;10pkt 10fpkt"];
189--1656[label="0.953125;61pkt 61fpkt"];
189--1678[label="1;8pkt 8fpkt"];
189--1915[label="1;44pkt 44fpkt"];
189--2058[label="1;20pkt 20fpkt"];
189--2110[label="0.0344828;2pkt 2fpkt"];
189--2141[label="1;4pkt 4fpkt"];
189--2282[label="0.953125;61pkt 61fpkt"];
189--2288[label="1;8pkt 8fpkt"];
189--2298[label="1;21pkt 21fpkt"];
189--2436[label="0.0344828;2pkt 2fpkt"];
189--2450[label="1;4pkt 4fpkt"];
189--2496[label="0.952381;60pkt 60fpkt"];
189--2499[label="1;8pkt 8fpkt"];
189--2557[label="1;4pkt 4fpkt"];
236--1008[label="0.75;3pkt 3fpkt"];
236--1063[label="1;4pkt 4fpkt"];
236--2141[label="1;4pkt 4fpkt"];
236--2450[label="1;4pkt 4fpkt"];
236--2557[label="1;4pkt 4fpkt"];
368--1008[label="0.533333;16pkt 16fpkt"];
368--1172[label="1;70pkt 70fpkt"];
368--1598[label="0.0857143;6pkt 6fpkt"];
368--1602[label="0.0857143;6pkt 6fpkt"];
368--1604[label="0.0857143;6pkt 6fpkt"];
910--1473[label="1;54pkt 54fpkt"];
1008--1063[label="0.75;3pkt 3fpkt"];
1008--1172[label="0.533333;16pkt 16fpkt"];
1008--1598[label="0.333333;10pkt 10fpkt"];
1008--1602[label="0.333333;10pkt 10fpkt"];
1008--1604[label="0.333333;10pkt 10fpkt"];
1008--1656[label="0.0333333;1pkt 1fpkt"];
1008--2141[label="0.75;3pkt 3fpkt"];
1008--2282[label="0.0333333;1pkt 1fpkt"];
1008--2450[label="0.75;3pkt 3fpkt"];
1008--2557[label="0.75;3pkt 3fpkt"];
1063--2141[label="1;4pkt 4fpkt"];
1063--2450[label="1;4pkt 4fpkt"];
1063--2557[label="1;4pkt 4fpkt"];
1172--1598[label="0.0857143;6pkt 6fpkt"];
1172--1602[label="0.0857143;6pkt 6fpkt"];
1172--1604[label="0.0857143;6pkt 6fpkt"];
1656--2282[label="1;64pkt 64fpkt"];
1656--2496[label="1;63pkt 63fpkt"];
1678--2288[label="1;8pkt 8fpkt"];
1678--2499[label="1;8pkt 8fpkt"];
2141--2450[label="1;4pkt 4fpkt"];
2141--2557[label="1;4pkt 4fpkt"];
2282--2496[label="1;63pkt 63fpkt"];
2288--2499[label="1;8pkt 8fpkt"];
2450--2557[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="196.42.76.74" src_ip="206.96.152.113" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
328[label="196.33.93.99;d;122pkt 122fpkt", shape=diamond, color=yellow];
569[label="148.173.218.67;d;74pkt 74fpkt", shape=diamond, color=yellow];
589[label="219.156.168.223;s;5pkt 5fpkt", shape=diamond, color=yellow];
638[label="148.173.55.40;d;201pkt 201fpkt", shape=diamond, color=yellow];
796[label="213.120.17.153;s;12pkt 12fpkt", shape=diamond, color=yellow];
960[label="92.33.207.84;s;27pkt 27fpkt", shape=diamond, color=yellow];
1052[label="196.33.93.99;d;74pkt 74fpkt", shape=hexagon, color=black];
1177[label="148.173.218.67;d;72pkt 72fpkt", shape=hexagon, color=black];
1264[label="219.156.168.223;s;5pkt 5fpkt", shape=hexagon, color=black];
1519[label="92.33.207.84;s;27pkt 27fpkt", shape=hexagon, color=black];
1687[label="219.157.177.32;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1696[label="213.25.94.34;23pkt 23fpkt", shape=pentagon, color=darkviolet];
1734[label="219.224.182.44;41pkt 41fpkt", shape=pentagon, color=darkviolet];
1855[label="92.33.207.84;29pkt 29fpkt", shape=pentagon, color=darkviolet];
2181[label="219.156.168.223;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2254[label="46.146.111.251;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2292[label="219.157.177.32;11pkt 11fpkt", shape=invtriangle, color=brown];
2295[label="213.25.94.34;23pkt 23fpkt", shape=invtriangle, color=brown];
2468[label="219.156.168.223;4pkt 4fpkt", shape=invtriangle, color=brown];
2502[label="219.157.177.32;11pkt 11fpkt", shape=invhouse, color=bisque];
2506[label="213.25.94.34;23pkt 23fpkt", shape=invhouse, color=bisque];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 148.173.55.40:*}[41.8919%]&lt;BR/&gt;{*:80, 196.33.93.99:*}[22.973%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7162%)&lt;BR/&gt; 10001: (1.54895%)&lt;BR/&gt; 10000: (0.805452%)&lt;BR/&gt; 53: (0.681537%)&lt;BR/&gt; 1101: (0.495663%)&gt;];
}
328--612[label="0.026087;3pkt 3fpkt"];
328--834[label="0.327586;19pkt 19fpkt"];
328--1052[label="1;74pkt 74fpkt"];
328--1598[label="0.00819672;1pkt 1fpkt"];
328--1602[label="0.00819672;1pkt 1fpkt"];
328--1604[label="0.00819672;1pkt 1fpkt"];
328--1641[label="0.0634921;4pkt 4fpkt"];
328--1696[label="0.0869565;2pkt 2fpkt"];
328--1707[label="0.130435;3pkt 3fpkt"];
328--1734[label="0.121951;5pkt 5fpkt"];
328--2045[label="0.173913;4pkt 4fpkt"];
328--2254[label="1;8pkt 8fpkt"];
328--2277[label="0.0634921;4pkt 4fpkt"];
328--2295[label="0.0869565;2pkt 2fpkt"];
328--2506[label="0.0869565;2pkt 2fpkt"];
569--589[label="1;5pkt 5fpkt"];
569--796[label="0.75;9pkt 9fpkt"];
569--960[label="0.962963;26pkt 26fpkt"];
569--1074[label="0.0169492;1pkt 1fpkt"];
569--1177[label="1;72pkt 72fpkt"];
569--1264[label="1;5pkt 5fpkt"];
569--1519[label="0.962963;26pkt 26fpkt"];
569--1641[label="0.031746;2pkt 2fpkt"];
569--1696[label="0.0434783;1pkt 1fpkt"];
569--1855[label="0.896552;26pkt 26fpkt"];
569--2181[label="1;4pkt 4fpkt"];
569--2277[label="0.031746;2pkt 2fpkt"];
569--2295[label="0.0434783;1pkt 1fpkt"];
569--2468[label="1;4pkt 4fpkt"];
569--2506[label="0.0434783;1pkt 1fpkt"];
589--1177[label="1;5pkt 5fpkt"];
589--1264[label="1;5pkt 5fpkt"];
589--2181[label="1;4pkt 4fpkt"];
589--2468[label="1;4pkt 4fpkt"];
638--796[label="0.25;3pkt 3fpkt"];
638--1074[label="0.0338983;2pkt 2fpkt"];
638--1641[label="0.142857;9pkt 9fpkt"];
638--1687[label="1;11pkt 11fpkt"];
638--1696[label="0.217391;5pkt 5fpkt"];
638--1707[label="0.0434783;1pkt 1fpkt"];
638--1734[label="0.195122;8pkt 8fpkt"];
638--1745[label="0.0344828;1pkt 1fpkt"];
638--2045[label="0.130435;3pkt 3fpkt"];
638--2277[label="0.142857;9pkt 9fpkt"];
638--2292[label="1;11pkt 11fpkt"];
638--2295[label="0.217391;5pkt 5fpkt"];
638--2314[label="0.0344828;1pkt 1fpkt"];
638--2502[label="1;11pkt 11fpkt"];
638--2506[label="0.217391;5pkt 5fpkt"];
796--1177[label="0.75;9pkt 9fpkt"];
960--1177[label="0.888889;24pkt 24fpkt"];
960--1519[label="1;27pkt 27fpkt"];
960--1855[label="0.962963;26pkt 26fpkt"];
1052--1598[label="0.0135135;1pkt 1fpkt"];
1052--1602[label="0.0135135;1pkt 1fpkt"];
1052--1604[label="0.0135135;1pkt 1fpkt"];
1052--1641[label="0.031746;2pkt 2fpkt"];
1052--1696[label="0.0434783;1pkt 1fpkt"];
1052--1707[label="0.130435;3pkt 3fpkt"];
1052--1734[label="0.0731707;3pkt 3fpkt"];
1052--2045[label="0.0869565;2pkt 2fpkt"];
1052--2254[label="1;8pkt 8fpkt"];
1052--2277[label="0.031746;2pkt 2fpkt"];
1052--2295[label="0.0434783;1pkt 1fpkt"];
1052--2506[label="0.0434783;1pkt 1fpkt"];
1177--1264[label="1;5pkt 5fpkt"];
1177--1519[label="0.888889;24pkt 24fpkt"];
1177--1641[label="0.031746;2pkt 2fpkt"];
1177--1696[label="0.0434783;1pkt 1fpkt"];
1177--1855[label="0.827586;24pkt 24fpkt"];
1177--2181[label="1;4pkt 4fpkt"];
1177--2277[label="0.031746;2pkt 2fpkt"];
1177--2295[label="0.0434783;1pkt 1fpkt"];
1177--2468[label="1;4pkt 4fpkt"];
1177--2506[label="0.0434783;1pkt 1fpkt"];
1264--2181[label="1;4pkt 4fpkt"];
1264--2468[label="1;4pkt 4fpkt"];
1519--1855[label="0.962963;26pkt 26fpkt"];
1687--2292[label="1;11pkt 11fpkt"];
1687--2502[label="1;11pkt 11fpkt"];
1696--2295[label="1;23pkt 23fpkt"];
1696--2506[label="1;23pkt 23fpkt"];
2181--2468[label="1;4pkt 4fpkt"];
2292--2502[label="1;11pkt 11fpkt"];
2295--2506[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="148.173.55.40" src_port="80"/>
      <filter dst_ip="196.33.93.99" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733468,2.17024,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.110.134.38"/>
    </slice>
    <from sec="1000011799" usec="0"/>
    <to sec="1000012081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.65115,2.12128,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
1716[label="148.182.214.38;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2303[label="148.182.214.38;11pkt 11fpkt", shape=invtriangle, color=brown];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.182.214.38:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1716--2303[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="148.182.214.38"/>
    </slice>
    <from sec="1000011611" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
722[label="141.165.229.97;d;92pkt 92fpkt", shape=diamond, color=yellow];
735[label="219.215.39.155;s;171pkt 171fpkt", shape=diamond, color=yellow];
737[label="144.52.199.88;d;174pkt 174fpkt", shape=diamond, color=yellow];
1381[label="141.165.229.97;d;64pkt 64fpkt", shape=hexagon, color=black];
1394[label="144.52.199.88;d;157pkt 157fpkt", shape=hexagon, color=black];
1723[label="219.140.208.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2022[label="219.215.39.155;171pkt 171fpkt", shape=pentagon, color=darkviolet];
2062[label="195.72.160.170;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2307[label="219.140.208.41;1pkt 1fpkt", shape=invtriangle, color=brown];
2511[label="219.140.208.41;1pkt 1fpkt", shape=invhouse, color=bisque];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.215.39.155:80, 144.52.199.88:*}[61.5385%]&lt;BR/&gt;{*:80, 141.165.229.97:*}[34.0659%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9412%)&lt;BR/&gt; 1772: (0.235018%)&lt;BR/&gt; 1449: (0.235018%)&lt;BR/&gt; 1447: (0.235018%)&lt;BR/&gt; 1446: (0.235018%)&gt;];
}
722--1381[label="1;64pkt 64fpkt"];
722--1723[label="1;1pkt 1fpkt"];
722--2062[label="0.789474;15pkt 15fpkt"];
722--2307[label="1;1pkt 1fpkt"];
722--2511[label="1;1pkt 1fpkt"];
735--737[label="0.982456;168pkt 168fpkt"];
735--1394[label="0.980892;154pkt 154fpkt"];
735--1431[label="0.00584795;1pkt 1fpkt"];
735--2022[label="0.994152;170pkt 170fpkt"];
737--1394[label="1;157pkt 157fpkt"];
737--2022[label="0.982456;168pkt 168fpkt"];
737--2062[label="0.0526316;1pkt 1fpkt"];
1381--2062[label="0.421053;8pkt 8fpkt"];
1394--2022[label="0.980892;154pkt 154fpkt"];
1394--2062[label="0.0526316;1pkt 1fpkt"];
1723--2307[label="1;1pkt 1fpkt"];
1723--2511[label="1;1pkt 1fpkt"];
2307--2511[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.229.97" src_port="80"/>
      <filter dst_ip="144.52.199.88" src_ip="219.215.39.155" src_port="80"/>
    </slice>
    <from sec="1000011611" usec="0"/>
    <to sec="1000012467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.65115,2.12128,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
1742[label="148.182.148.47;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2313[label="148.182.148.47;3pkt 3fpkt", shape=invtriangle, color=brown];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.182.148.47:80, 209.114.25.185:17895}[25%]&lt;BR/&gt;{148.182.148.47:80, 209.114.25.185:17896}[25%]&lt;BR/&gt;{148.182.148.47:80, 209.114.25.185:18035}[25%]&lt;BR/&gt;{148.182.148.47:80, 209.114.25.185:18037}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 18037: (14.2857%)&lt;BR/&gt; 18035: (14.2857%)&lt;BR/&gt; 17896: (14.2857%)&lt;BR/&gt; 17895: (7.14286%)&gt;];
}
1742--2313[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.114.25.185" dst_port="18037" src_ip="148.182.148.47" src_port="80"/>
      <filter dst_ip="209.114.25.185" dst_port="18035" src_ip="148.182.148.47" src_port="80"/>
      <filter dst_ip="209.114.25.185" dst_port="17896" src_ip="148.182.148.47" src_port="80"/>
      <filter dst_ip="209.114.25.185" dst_port="17895" src_ip="148.182.148.47" src_port="80"/>
    </slice>
    <from sec="1000012106" usec="0"/>
    <to sec="1000012526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
231[label="206.135.65.49;s;15pkt 15fpkt", shape=diamond, color=yellow];
232[label="141.165.151.130;d;26pkt 26fpkt", shape=diamond, color=yellow];
1016[label="206.135.65.49;s;9pkt 9fpkt", shape=hexagon, color=black];
1750[label="206.135.65.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2315[label="206.135.65.49;1pkt 1fpkt", shape=invtriangle, color=brown];
2515[label="206.135.65.49;1pkt 1fpkt", shape=invhouse, color=bisque];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.135.65.49:80, 141.165.151.130:*}[65.3846%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4996: (3.77358%)&lt;BR/&gt; 4954: (2.83019%)&lt;BR/&gt; 4948: (2.83019%)&lt;BR/&gt; 4942: (2.83019%)&gt;];
}
231--232[label="1;15pkt 15fpkt"];
231--1016[label="1;9pkt 9fpkt"];
231--1598[label="0.0666667;1pkt 1fpkt"];
231--1602[label="0.0666667;1pkt 1fpkt"];
231--1604[label="0.0666667;1pkt 1fpkt"];
232--1016[label="1;9pkt 9fpkt"];
232--1598[label="0.0384615;1pkt 1fpkt"];
232--1602[label="0.0384615;1pkt 1fpkt"];
232--1604[label="0.0384615;1pkt 1fpkt"];
232--1750[label="1;1pkt 1fpkt"];
232--2315[label="1;1pkt 1fpkt"];
232--2515[label="1;1pkt 1fpkt"];
1016--1598[label="0.111111;1pkt 1fpkt"];
1016--1602[label="0.111111;1pkt 1fpkt"];
1016--1604[label="0.111111;1pkt 1fpkt"];
1750--2315[label="1;1pkt 1fpkt"];
1750--2515[label="1;1pkt 1fpkt"];
2315--2515[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.151.130" src_ip="206.135.65.49" src_port="80"/>
    </slice>
    <from sec="1000011637" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
217[label="92.212.18.81;d;333pkt 333fpkt", shape=diamond, color=yellow];
446[label="196.42.83.64;s;260pkt 260fpkt", shape=diamond, color=yellow];
604[label="164.202.239.226;s;37pkt 37fpkt", shape=diamond, color=yellow];
769[label="164.202.227.51;s;88pkt 88fpkt", shape=diamond, color=yellow];
820[label="164.202.197.180;s;16pkt 16fpkt", shape=diamond, color=yellow];
873[label="140.183.70.145;d;2pkt 2fpkt", shape=diamond, color=yellow];
904[label="219.129.122.32;d;33pkt 33fpkt", shape=diamond, color=yellow];
1059[label="92.212.18.81;d;333pkt 333fpkt", shape=hexagon, color=black];
1230[label="164.202.239.226;s;37pkt 37fpkt", shape=hexagon, color=black];
1413[label="196.42.83.64;s;236pkt 236fpkt", shape=hexagon, color=black];
1447[label="164.202.197.180;s;16pkt 16fpkt", shape=hexagon, color=black];
1448[label="140.183.70.145;d;2pkt 2fpkt", shape=hexagon, color=black];
1674[label="164.202.251.26;33pkt 33fpkt", shape=pentagon, color=darkviolet];
1718[label="164.202.197.39;25pkt 25fpkt", shape=pentagon, color=darkviolet];
1722[label="148.182.59.41;28pkt 28fpkt", shape=pentagon, color=darkviolet];
1724[label="164.202.227.41;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1725[label="164.202.251.41;21pkt 21fpkt", shape=pentagon, color=darkviolet];
1731[label="164.202.251.42;33pkt 33fpkt", shape=pentagon, color=darkviolet];
1759[label="164.202.251.52;15pkt 15fpkt", shape=pentagon, color=darkviolet];
1785[label="196.42.83.64;260pkt 260fpkt", shape=pentagon, color=darkviolet];
1789[label="196.42.83.65;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2128[label="164.202.215.203;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2211[label="164.202.239.234;39pkt 39fpkt", shape=pentagon, color=darkviolet];
2305[label="164.202.197.39;25pkt 25fpkt", shape=invtriangle, color=brown];
2318[label="164.202.251.52;16pkt 16fpkt", shape=invtriangle, color=brown];
2331[label="196.42.83.65;25pkt 25fpkt", shape=invtriangle, color=brown];
2477[label="164.202.239.234;38pkt 38fpkt", shape=invtriangle, color=brown];
2510[label="164.202.197.39;25pkt 25fpkt", shape=invhouse, color=bisque];
2573[label="164.202.239.234;39pkt 39fpkt", shape=invhouse, color=bisque];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 92.212.18.81:*}[27.2941%]&lt;BR/&gt;{196.42.83.64:*, *:25}[22.7059%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (34.0049%)&lt;BR/&gt; 113: (10.534%)&lt;BR/&gt; 0: (5.43689%)&lt;BR/&gt; 53: (2.25728%)&lt;BR/&gt; 1141: (0.946602%)&gt;];
}
217--353[label="0.030303;1pkt 1fpkt"];
217--446[label="0.0115385;3pkt 3fpkt"];
217--511[label="0.003003;1pkt 1fpkt"];
217--544[label="0.003003;1pkt 1fpkt"];
217--604[label="0.027027;1pkt 1fpkt"];
217--769[label="0.477273;42pkt 42fpkt"];
217--820[label="0.3125;5pkt 5fpkt"];
217--828[label="0.0684932;5pkt 5fpkt"];
217--977[label="0.003003;1pkt 1fpkt"];
217--1059[label="1;333pkt 333fpkt"];
217--1060[label="0.0416667;1pkt 1fpkt"];
217--1111[label="0.0041841;1pkt 1fpkt"];
217--1230[label="0.027027;1pkt 1fpkt"];
217--1413[label="0.0127119;3pkt 3fpkt"];
217--1447[label="0.3125;5pkt 5fpkt"];
217--1528[label="0.003003;1pkt 1fpkt"];
217--1601[label="0.033033;11pkt 11fpkt"];
217--1603[label="0.033033;11pkt 11fpkt"];
217--1621[label="0.0657895;5pkt 5fpkt"];
217--1636[label="0.003003;1pkt 1fpkt"];
217--1674[label="0.757576;25pkt 25fpkt"];
217--1691[label="0.030303;1pkt 1fpkt"];
217--1718[label="0.2;5pkt 5fpkt"];
217--1724[label="0.210526;4pkt 4fpkt"];
217--1725[label="0.666667;14pkt 14fpkt"];
217--1731[label="0.515152;17pkt 17fpkt"];
217--1759[label="0.466667;7pkt 7fpkt"];
217--1785[label="0.0115385;3pkt 3fpkt"];
217--1789[label="0.44;11pkt 11fpkt"];
217--1803[label="0.00507614;1pkt 1fpkt"];
217--2191[label="0.003003;1pkt 1fpkt"];
217--2211[label="0.25641;10pkt 10fpkt"];
217--2275[label="0.003003;1pkt 1fpkt"];
217--2305[label="0.2;5pkt 5fpkt"];
217--2318[label="0.5;8pkt 8fpkt"];
217--2331[label="0.44;11pkt 11fpkt"];
217--2477[label="0.263158;10pkt 10fpkt"];
217--2510[label="0.2;5pkt 5fpkt"];
217--2573[label="0.25641;10pkt 10fpkt"];
446--904[label="0.030303;1pkt 1fpkt"];
446--1059[label="0.0115385;3pkt 3fpkt"];
446--1413[label="1;236pkt 236fpkt"];
446--1785[label="1;260pkt 260fpkt"];
604--904[label="0.030303;1pkt 1fpkt"];
604--1059[label="0.027027;1pkt 1fpkt"];
604--1230[label="1;37pkt 37fpkt"];
769--835[label="0.0113636;1pkt 1fpkt"];
769--1059[label="0.477273;42pkt 42fpkt"];
769--1599[label="0.0227273;2pkt 2fpkt"];
769--1601[label="0.0113636;1pkt 1fpkt"];
769--1603[label="0.0113636;1pkt 1fpkt"];
820--873[label="0.5;1pkt 1fpkt"];
820--1059[label="0.3125;5pkt 5fpkt"];
820--1447[label="1;16pkt 16fpkt"];
820--1448[label="0.5;1pkt 1fpkt"];
873--1447[label="0.5;1pkt 1fpkt"];
873--1448[label="1;2pkt 2fpkt"];
873--2128[label="1;1pkt 1fpkt"];
904--1230[label="0.030303;1pkt 1fpkt"];
904--1274[label="0.030303;1pkt 1fpkt"];
904--1413[label="0.030303;1pkt 1fpkt"];
904--1674[label="0.0606061;2pkt 2fpkt"];
904--1718[label="0.08;2pkt 2fpkt"];
904--1722[label="0.0357143;1pkt 1fpkt"];
904--1724[label="0.105263;2pkt 2fpkt"];
904--1725[label="0.047619;1pkt 1fpkt"];
904--1785[label="0.030303;1pkt 1fpkt"];
904--1789[label="0.04;1pkt 1fpkt"];
904--1801[label="0.030303;1pkt 1fpkt"];
904--2211[label="0.030303;1pkt 1fpkt"];
904--2305[label="0.08;2pkt 2fpkt"];
904--2331[label="0.04;1pkt 1fpkt"];
904--2477[label="0.030303;1pkt 1fpkt"];
904--2510[label="0.08;2pkt 2fpkt"];
904--2573[label="0.030303;1pkt 1fpkt"];
1059--1060[label="0.0416667;1pkt 1fpkt"];
1059--1111[label="0.0041841;1pkt 1fpkt"];
1059--1230[label="0.027027;1pkt 1fpkt"];
1059--1413[label="0.0127119;3pkt 3fpkt"];
1059--1447[label="0.3125;5pkt 5fpkt"];
1059--1528[label="0.003003;1pkt 1fpkt"];
1059--1601[label="0.033033;11pkt 11fpkt"];
1059--1603[label="0.033033;11pkt 11fpkt"];
1059--1621[label="0.0657895;5pkt 5fpkt"];
1059--1636[label="0.003003;1pkt 1fpkt"];
1059--1674[label="0.757576;25pkt 25fpkt"];
1059--1691[label="0.030303;1pkt 1fpkt"];
1059--1718[label="0.2;5pkt 5fpkt"];
1059--1724[label="0.210526;4pkt 4fpkt"];
1059--1725[label="0.666667;14pkt 14fpkt"];
1059--1731[label="0.515152;17pkt 17fpkt"];
1059--1759[label="0.466667;7pkt 7fpkt"];
1059--1785[label="0.0115385;3pkt 3fpkt"];
1059--1789[label="0.44;11pkt 11fpkt"];
1059--1803[label="0.00507614;1pkt 1fpkt"];
1059--2191[label="0.003003;1pkt 1fpkt"];
1059--2211[label="0.25641;10pkt 10fpkt"];
1059--2275[label="0.003003;1pkt 1fpkt"];
1059--2305[label="0.2;5pkt 5fpkt"];
1059--2318[label="0.5;8pkt 8fpkt"];
1059--2331[label="0.44;11pkt 11fpkt"];
1059--2477[label="0.263158;10pkt 10fpkt"];
1059--2510[label="0.2;5pkt 5fpkt"];
1059--2573[label="0.25641;10pkt 10fpkt"];
1413--1785[label="1;236pkt 236fpkt"];
1447--1448[label="0.5;1pkt 1fpkt"];
1448--2128[label="1;1pkt 1fpkt"];
1718--2305[label="1;25pkt 25fpkt"];
1718--2510[label="1;25pkt 25fpkt"];
1759--2318[label="1;15pkt 15fpkt"];
1789--2331[label="1;25pkt 25fpkt"];
2211--2477[label="1;38pkt 38fpkt"];
2211--2573[label="1;39pkt 39fpkt"];
2305--2510[label="1;25pkt 25fpkt"];
2477--2573[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="196.42.83.64"/>
      <filter dst_ip="92.212.18.81" src_port="25"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0227,1.98055,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
512[label="197.116.128.111;d;303pkt 303fpkt", shape=diamond, color=yellow];
733[label="139.133.136.239;s;183pkt 183fpkt", shape=diamond, color=yellow];
1273[label="197.116.128.111;d;293pkt 293fpkt", shape=hexagon, color=black];
1328[label="139.133.136.239;s;164pkt 164fpkt", shape=hexagon, color=black];
1574[label="197.116.128.111;d;293pkt 293fpkt", shape=polygon, color=gold];
1732[label="92.193.14.44;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1773[label="207.2.40.57;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2323[label="207.2.40.57;3pkt 3fpkt", shape=invtriangle, color=brown];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.133.136.239:80, 197.116.128.111:*}[60.396%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5185%)&lt;BR/&gt; 1863: (0.24077%)&lt;BR/&gt; 0: (0.24077%)&lt;BR/&gt; 61208: (0.200642%)&lt;BR/&gt; 61207: (0.200642%)&gt;];
}
512--733[label="1;183pkt 183fpkt"];
512--1246[label="0.0243902;1pkt 1fpkt"];
512--1273[label="1;293pkt 293fpkt"];
512--1328[label="1;164pkt 164fpkt"];
512--1574[label="1;293pkt 293fpkt"];
512--1732[label="1;4pkt 4fpkt"];
512--1773[label="1;3pkt 3fpkt"];
512--1896[label="0.0212766;1pkt 1fpkt"];
512--2160[label="0.0454545;2pkt 2fpkt"];
512--2323[label="1;3pkt 3fpkt"];
733--1273[label="1;183pkt 183fpkt"];
733--1328[label="1;164pkt 164fpkt"];
733--1574[label="1;183pkt 183fpkt"];
1273--1328[label="1;164pkt 164fpkt"];
1273--1574[label="1;293pkt 293fpkt"];
1273--1732[label="1;4pkt 4fpkt"];
1273--1896[label="0.0212766;1pkt 1fpkt"];
1273--2160[label="0.0454545;2pkt 2fpkt"];
1328--1574[label="1;164pkt 164fpkt"];
1574--1732[label="1;4pkt 4fpkt"];
1574--1896[label="0.0212766;1pkt 1fpkt"];
1574--2160[label="0.0454545;2pkt 2fpkt"];
1773--2323[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="197.116.128.111" src_ip="139.133.136.239" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933562,2.10348,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
1784[label="196.167.66.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2330[label="196.167.66.64;1pkt 1fpkt", shape=invtriangle, color=brown];
2522[label="196.167.66.64;1pkt 1fpkt", shape=invhouse, color=bisque];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.167.66.64:3725, 164.202.33.23:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3725: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
1784--2330[label="1;1pkt 1fpkt"];
1784--2522[label="1;1pkt 1fpkt"];
2330--2522[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.202.33.23" dst_port="53" src_ip="196.167.66.64" src_port="3725"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.65115,2.12128,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
1790[label="148.182.214.65;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2332[label="148.182.214.65;7pkt 7fpkt", shape=invtriangle, color=brown];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.182.214.65:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1790--2332[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="148.182.214.65"/>
    </slice>
    <from sec="1000011611" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.65115,2.12128,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
1793[label="92.230.166.66;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2333[label="92.230.166.66;14pkt 14fpkt", shape=invtriangle, color=brown];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.230.166.66:25, 164.202.233.78:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1561: (3.57143%)&lt;BR/&gt; 1560: (3.57143%)&lt;BR/&gt; 1559: (3.57143%)&lt;BR/&gt; 1558: (3.57143%)&gt;];
}
1793--2333[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="164.202.233.78" src_ip="92.230.166.66" src_port="25"/>
    </slice>
    <from sec="1000011632" usec="0"/>
    <to sec="1000012477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.65115,2.12128,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
1805[label="141.165.218.69;67pkt 67fpkt", shape=pentagon, color=darkviolet];
2337[label="141.165.218.69;67pkt 67fpkt", shape=invtriangle, color=brown];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.165.218.69:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1805--2337[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter src_ip="141.165.218.69"/>
    </slice>
    <from sec="1000011612" usec="0"/>
    <to sec="1000012522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933562,2.10348,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_293{
style=filled;
color=gray75;
1808[label="145.39.10.71;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2338[label="145.39.10.71;31pkt 31fpkt", shape=invtriangle, color=brown];
2524[label="145.39.10.71;30pkt 30fpkt", shape=invhouse, color=bisque];
stat293[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.39.10.71:80, 209.230.255.58:*}[51.6129%]&lt;BR/&gt;{145.39.10.71:25, *:*}[35.4839%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.3478%)&lt;BR/&gt; 25: (17.9348%)&lt;BR/&gt; 110: (2.71739%)&lt;BR/&gt; 49241: (1.63043%)&lt;BR/&gt; 49154: (1.63043%)&gt;];
}
1808--2338[label="1;31pkt 31fpkt"];
1808--2524[label="1;30pkt 30fpkt"];
2338--2524[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="145.39.10.71" src_port="25"/>
      <filter dst_ip="209.230.255.58" src_ip="145.39.10.71" src_port="80"/>
    </slice>
    <from sec="1000011609" usec="0"/>
    <to sec="1000012525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.65115,2.12128,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
1809[label="144.52.33.71;56pkt 56fpkt", shape=pentagon, color=darkviolet];
2339[label="144.52.33.71;56pkt 56fpkt", shape=invtriangle, color=brown];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.52.33.71:*, 219.129.112.169:80}[23.2143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8571%)&lt;BR/&gt; 0: (14.2857%)&lt;BR/&gt; 49185: (7.14286%)&lt;BR/&gt; 49182: (7.14286%)&lt;BR/&gt; 49176: (7.14286%)&gt;];
}
1809--2339[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="219.129.112.169" dst_port="80" src_ip="144.52.33.71"/>
    </slice>
    <from sec="1000012003" usec="0"/>
    <to sec="1000012164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933562,2.10348,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
1817[label="92.193.29.73;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2343[label="92.193.29.73;18pkt 18fpkt", shape=invtriangle, color=brown];
2525[label="92.193.29.73;18pkt 18fpkt", shape=invhouse, color=bisque];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.193.29.73:80, 196.33.93.37:*}[38.8889%]&lt;BR/&gt;{92.193.29.73:80, 196.42.76.72:*}[27.7778%]&lt;BR/&gt;{92.193.29.73:80, 144.52.225.60:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38206: (2.77778%)&lt;BR/&gt; 38205: (2.77778%)&lt;BR/&gt; 38196: (2.77778%)&lt;BR/&gt; 38195: (2.77778%)&gt;];
}
1817--2343[label="1;18pkt 18fpkt"];
1817--2525[label="1;18pkt 18fpkt"];
2343--2525[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="196.33.93.37" src_ip="92.193.29.73" src_port="80"/>
      <filter dst_ip="196.42.76.72" src_ip="92.193.29.73" src_port="80"/>
      <filter dst_ip="144.52.225.60" src_ip="92.193.29.73" src_port="80"/>
    </slice>
    <from sec="1000011841" usec="0"/>
    <to sec="1000012494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933562,2.10348,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_296{
style=filled;
color=gray75;
1845[label="196.227.41.81;63pkt 63fpkt", shape=pentagon, color=darkviolet];
2349[label="196.227.41.81;63pkt 63fpkt", shape=invtriangle, color=brown];
2526[label="196.227.41.81;64pkt 64fpkt", shape=invhouse, color=bisque];
stat296[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.227.41.81:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4975: (1.57895%)&lt;BR/&gt; 1949: (1.57895%)&lt;BR/&gt; 4833: (0.789474%)&lt;BR/&gt; 4817: (0.789474%)&gt;];
}
1845--2349[label="1;63pkt 63fpkt"];
1845--2526[label="1;63pkt 63fpkt"];
2349--2526[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="196.227.41.81"/>
    </slice>
    <from sec="1000011607" usec="0"/>
    <to sec="1000012527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.65115,2.12128,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
1878[label="164.202.233.92;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2353[label="164.202.233.92;3pkt 3fpkt", shape=invtriangle, color=brown];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.202.233.92:1528, 219.21.237.95:113}[33.3333%]&lt;BR/&gt;{164.202.233.92:25, 219.21.239.65:4915}[33.3333%]&lt;BR/&gt;{164.202.233.92:1529, 219.21.239.65:113}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (33.3333%)&lt;BR/&gt; 4915: (16.6667%)&lt;BR/&gt; 1529: (16.6667%)&lt;BR/&gt; 1528: (16.6667%)&lt;BR/&gt; 25: (16.6667%)&gt;];
}
1878--2353[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="219.21.239.65" dst_port="113" src_ip="164.202.233.92" src_port="1529"/>
      <filter dst_ip="219.21.239.65" dst_port="4915" src_ip="164.202.233.92" src_port="25"/>
      <filter dst_ip="219.21.237.95" dst_port="113" src_ip="164.202.233.92" src_port="1528"/>
    </slice>
    <from sec="1000011921" usec="0"/>
    <to sec="1000012041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933562,2.10348,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
1883[label="196.121.211.93;82pkt 82fpkt", shape=pentagon, color=darkviolet];
2355[label="196.121.211.93;83pkt 83fpkt", shape=invtriangle, color=brown];
2528[label="196.121.211.93;83pkt 83fpkt", shape=invhouse, color=bisque];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.121.211.93:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4999: (0.604839%)&lt;BR/&gt; 4983: (0.604839%)&lt;BR/&gt; 4910: (0.604839%)&lt;BR/&gt; 4737: (0.604839%)&gt;];
}
1883--2355[label="1;82pkt 82fpkt"];
1883--2528[label="1;82pkt 82fpkt"];
2355--2528[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="196.121.211.93"/>
    </slice>
    <from sec="1000011613" usec="0"/>
    <to sec="1000012525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0227,1.98055,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
471[label="141.165.196.212;d;185pkt 185fpkt", shape=diamond, color=yellow];
550[label="148.163.163.61;d;404pkt 404fpkt", shape=diamond, color=yellow];
1161[label="148.163.163.61;d;404pkt 404fpkt", shape=hexagon, color=black];
1588[label="148.163.163.61;d;371pkt 371fpkt", shape=polygon, color=gold];
1811[label="145.54.232.71;71pkt 71fpkt", shape=pentagon, color=darkviolet];
1890[label="92.33.206.96;28pkt 28fpkt", shape=pentagon, color=darkviolet];
1950[label="94.32.19.130;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2114[label="194.228.24.197;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2340[label="145.54.232.71;71pkt 71fpkt", shape=invtriangle, color=brown];
2359[label="92.33.206.96;29pkt 29fpkt", shape=invtriangle, color=brown];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 148.163.163.61:*}[68.5908%]&lt;BR/&gt;{*:80, 141.165.196.212:*}[31.4092%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4475: (0.188442%)&lt;BR/&gt; 4474: (0.188442%)&lt;BR/&gt; 4473: (0.188442%)&lt;BR/&gt; 4472: (0.188442%)&gt;];
}
471--1598[label="0.0162162;3pkt 3fpkt"];
471--1602[label="0.0162162;3pkt 3fpkt"];
471--1604[label="0.0162162;3pkt 3fpkt"];
471--1811[label="1;71pkt 71fpkt"];
471--1890[label="1;28pkt 28fpkt"];
471--1913[label="0.259259;7pkt 7fpkt"];
471--2110[label="0.0172414;1pkt 1fpkt"];
471--2340[label="1;71pkt 71fpkt"];
471--2359[label="0.965517;28pkt 28fpkt"];
471--2369[label="0.259259;7pkt 7fpkt"];
471--2436[label="0.0172414;1pkt 1fpkt"];
550--1078[label="0.0191083;3pkt 3fpkt"];
550--1161[label="1;404pkt 404fpkt"];
550--1240[label="0.0151515;1pkt 1fpkt"];
550--1586[label="0.0220588;3pkt 3fpkt"];
550--1588[label="1;371pkt 371fpkt"];
550--1598[label="0.039604;16pkt 16fpkt"];
550--1602[label="0.039604;16pkt 16fpkt"];
550--1604[label="0.039604;16pkt 16fpkt"];
550--1734[label="0.0487805;2pkt 2fpkt"];
550--1904[label="0.125;2pkt 2fpkt"];
550--1950[label="1;16pkt 16fpkt"];
550--2002[label="0.0344828;1pkt 1fpkt"];
550--2114[label="1;13pkt 13fpkt"];
550--2359[label="0.0344828;1pkt 1fpkt"];
550--2364[label="0.0666667;1pkt 1fpkt"];
1161--1240[label="0.0151515;1pkt 1fpkt"];
1161--1586[label="0.0220588;3pkt 3fpkt"];
1161--1588[label="1;371pkt 371fpkt"];
1161--1598[label="0.039604;16pkt 16fpkt"];
1161--1602[label="0.039604;16pkt 16fpkt"];
1161--1604[label="0.039604;16pkt 16fpkt"];
1161--1734[label="0.0487805;2pkt 2fpkt"];
1161--1904[label="0.125;2pkt 2fpkt"];
1161--1950[label="1;16pkt 16fpkt"];
1161--2002[label="0.0344828;1pkt 1fpkt"];
1161--2114[label="1;13pkt 13fpkt"];
1161--2359[label="0.0344828;1pkt 1fpkt"];
1161--2364[label="0.0666667;1pkt 1fpkt"];
1588--1598[label="0.0431267;16pkt 16fpkt"];
1588--1602[label="0.0431267;16pkt 16fpkt"];
1588--1604[label="0.0431267;16pkt 16fpkt"];
1588--1734[label="0.0487805;2pkt 2fpkt"];
1588--1950[label="0.1875;3pkt 3fpkt"];
1588--2002[label="0.0344828;1pkt 1fpkt"];
1588--2114[label="1;13pkt 13fpkt"];
1588--2359[label="0.0344828;1pkt 1fpkt"];
1811--2340[label="1;71pkt 71fpkt"];
1890--2359[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="148.163.163.61" src_port="80"/>
      <filter dst_ip="141.165.196.212" src_port="80"/>
    </slice>
    <from sec="1000011603" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733468,2.17024,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.246.45.102"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733468,2.17024,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.66.227.106"/>
    </slice>
    <from sec="1000012459" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933562,2.10348,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
1924[label="146.160.106.113;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2373[label="146.160.106.113;6pkt 6fpkt", shape=invtriangle, color=brown];
2534[label="146.160.106.113;5pkt 5fpkt", shape=invhouse, color=bisque];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.160.106.113:80, 144.52.41.182:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2218: (9.375%)&lt;BR/&gt; 2217: (9.375%)&lt;BR/&gt; 2216: (9.375%)&lt;BR/&gt; 2215: (9.375%)&gt;];
}
1924--2373[label="1;5pkt 5fpkt"];
1924--2534[label="1;5pkt 5fpkt"];
2373--2534[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="144.52.41.182" src_ip="146.160.106.113" src_port="80"/>
    </slice>
    <from sec="1000012487" usec="0"/>
    <to sec="1000012525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
343[label="144.52.1.144;d;563pkt 563fpkt", shape=diamond, color=yellow];
383[label="214.24.37.118;s;226pkt 226fpkt", shape=diamond, color=yellow];
491[label="214.24.37.32;s;84pkt 84fpkt", shape=diamond, color=yellow];
663[label="48.88.8.12;s;2pkt 2fpkt", shape=diamond, color=yellow];
671[label="148.173.209.70;d;87pkt 87fpkt", shape=diamond, color=yellow];
751[label="92.193.26.222;s;2pkt 2fpkt", shape=diamond, color=yellow];
1057[label="144.52.1.144;d;563pkt 563fpkt", shape=hexagon, color=black];
1108[label="214.24.37.32;s;82pkt 82fpkt", shape=hexagon, color=black];
1110[label="214.24.37.118;s;218pkt 218fpkt", shape=hexagon, color=black];
1272[label="148.173.209.70;d;63pkt 63fpkt", shape=hexagon, color=black];
1469[label="92.193.26.222;s;2pkt 2fpkt", shape=hexagon, color=black];
1690[label="214.24.37.33;18pkt 18fpkt", shape=pentagon, color=darkviolet];
1693[label="219.129.122.33;12pkt 12fpkt", shape=pentagon, color=darkviolet];
1841[label="219.129.122.78;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1854[label="219.129.122.84;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1932[label="214.24.37.117;49pkt 49fpkt", shape=pentagon, color=darkviolet];
1934[label="214.24.37.118;255pkt 255fpkt", shape=pentagon, color=darkviolet];
1936[label="214.24.37.119;23pkt 23fpkt", shape=pentagon, color=darkviolet];
2293[label="214.24.37.33;18pkt 18fpkt", shape=invtriangle, color=brown];
2347[label="219.129.122.78;12pkt 12fpkt", shape=invtriangle, color=brown];
2375[label="214.24.37.117;47pkt 47fpkt", shape=invtriangle, color=brown];
2378[label="214.24.37.118;256pkt 256fpkt", shape=invtriangle, color=brown];
2503[label="214.24.37.33;17pkt 17fpkt", shape=invhouse, color=bisque];
2535[label="214.24.37.117;47pkt 47fpkt", shape=invhouse, color=bisque];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 144.52.1.144:25}[40.3483%]&lt;BR/&gt;{*:113, 144.52.1.144:*}[37.0102%]&lt;BR/&gt;{214.24.37.118:*, 144.52.1.144:*}[35.9942%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (26.2467%)&lt;BR/&gt; 113: (22.8909%)&lt;BR/&gt; 110: (0.749906%)&lt;BR/&gt; 0: (0.224972%)&lt;BR/&gt; 62979: (0.112486%)&gt;];
}
343--383[label="0.964602;218pkt 218fpkt"];
343--491[label="1;84pkt 84fpkt"];
343--663[label="1;2pkt 2fpkt"];
343--751[label="1;2pkt 2fpkt"];
343--1057[label="1;563pkt 563fpkt"];
343--1108[label="1;82pkt 82fpkt"];
343--1110[label="0.963303;210pkt 210fpkt"];
343--1469[label="1;2pkt 2fpkt"];
343--1690[label="0.888889;16pkt 16fpkt"];
343--1693[label="0.166667;2pkt 2fpkt"];
343--1932[label="0.979592;48pkt 48fpkt"];
343--1934[label="0.968627;247pkt 247fpkt"];
343--1936[label="0.695652;16pkt 16fpkt"];
343--2293[label="0.888889;16pkt 16fpkt"];
343--2347[label="0.0833333;1pkt 1fpkt"];
343--2375[label="0.978723;46pkt 46fpkt"];
343--2378[label="0.96875;248pkt 248fpkt"];
343--2503[label="0.882353;15pkt 15fpkt"];
343--2535[label="0.978723;46pkt 46fpkt"];
383--671[label="0.045977;4pkt 4fpkt"];
383--1057[label="0.964602;218pkt 218fpkt"];
383--1110[label="1;218pkt 218fpkt"];
383--1272[label="0.0634921;4pkt 4fpkt"];
383--1431[label="0.00442478;1pkt 1fpkt"];
383--1934[label="0.995575;225pkt 225fpkt"];
383--2378[label="1;226pkt 226fpkt"];
491--1057[label="1;84pkt 84fpkt"];
491--1108[label="1;82pkt 82fpkt"];
663--1057[label="1;2pkt 2fpkt"];
671--1110[label="0.045977;4pkt 4fpkt"];
671--1272[label="1;63pkt 63fpkt"];
671--1693[label="0.166667;2pkt 2fpkt"];
671--1841[label="0.0909091;1pkt 1fpkt"];
671--1854[label="0.1;1pkt 1fpkt"];
671--1934[label="0.045977;4pkt 4fpkt"];
671--1936[label="0.0869565;2pkt 2fpkt"];
671--2347[label="0.0833333;1pkt 1fpkt"];
671--2378[label="0.045977;4pkt 4fpkt"];
751--1057[label="1;2pkt 2fpkt"];
751--1469[label="1;2pkt 2fpkt"];
1057--1108[label="1;82pkt 82fpkt"];
1057--1110[label="0.963303;210pkt 210fpkt"];
1057--1469[label="1;2pkt 2fpkt"];
1057--1690[label="0.888889;16pkt 16fpkt"];
1057--1693[label="0.166667;2pkt 2fpkt"];
1057--1932[label="0.979592;48pkt 48fpkt"];
1057--1934[label="0.968627;247pkt 247fpkt"];
1057--1936[label="0.695652;16pkt 16fpkt"];
1057--2293[label="0.888889;16pkt 16fpkt"];
1057--2347[label="0.0833333;1pkt 1fpkt"];
1057--2375[label="0.978723;46pkt 46fpkt"];
1057--2378[label="0.96875;248pkt 248fpkt"];
1057--2503[label="0.882353;15pkt 15fpkt"];
1057--2535[label="0.978723;46pkt 46fpkt"];
1110--1272[label="0.0634921;4pkt 4fpkt"];
1110--1431[label="0.00458716;1pkt 1fpkt"];
1110--1934[label="0.995413;217pkt 217fpkt"];
1110--2378[label="1;218pkt 218fpkt"];
1272--1693[label="0.0833333;1pkt 1fpkt"];
1272--1854[label="0.1;1pkt 1fpkt"];
1272--1934[label="0.0634921;4pkt 4fpkt"];
1272--1936[label="0.0869565;2pkt 2fpkt"];
1272--2378[label="0.0634921;4pkt 4fpkt"];
1690--2293[label="1;18pkt 18fpkt"];
1690--2503[label="1;17pkt 17fpkt"];
1841--2347[label="1;11pkt 11fpkt"];
1932--2375[label="1;47pkt 47fpkt"];
1932--2535[label="1;47pkt 47fpkt"];
1934--2378[label="1;255pkt 255fpkt"];
2293--2503[label="1;17pkt 17fpkt"];
2375--2535[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="144.52.1.144" src_ip="214.24.37.118"/>
      <filter dst_ip="144.52.1.144" src_port="113"/>
      <filter dst_ip="144.52.1.144" dst_port="25"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733468,2.17024,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
2377[label="148.182.100.117;74pkt 74fpkt", shape=invtriangle, color=brown];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.182.100.117:*, *:113}[44.5946%]&lt;BR/&gt;{148.182.100.117:25, *:*}[43.2432%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (22.2973%)&lt;BR/&gt; 25: (21.6216%)&lt;BR/&gt; 1024: (6.08108%)&lt;BR/&gt; 53: (6.08108%)&lt;BR/&gt; 62811: (0.675676%)&gt;];
}
</description>
    <slice>
      <filter src_ip="148.182.100.117" src_port="25"/>
      <filter dst_port="113" src_ip="148.182.100.117"/>
    </slice>
    <from sec="1000011645" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733468,2.17024,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.12.19.122"/>
    </slice>
    <from sec="1000011602" usec="0"/>
    <to sec="1000011915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22207,1.96147,011,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
124[label="160.43.131.238;d;2185pkt 2185fpkt", shape=diamond, color=yellow];
279[label="196.226.37.204;s;610pkt 610fpkt", shape=diamond, color=yellow];
380[label="144.52.168.208;d;47pkt 47fpkt", shape=diamond, color=yellow];
384[label="193.88.128.195;s;57pkt 57fpkt", shape=diamond, color=yellow];
660[label="92.175.109.104;s;8pkt 8fpkt", shape=diamond, color=yellow];
761[label="148.173.55.32;d;4pkt 4fpkt", shape=diamond, color=yellow];
762[label="215.208.164.141;s;2pkt 2fpkt", shape=diamond, color=yellow];
806[label="207.129.144.134;s;28pkt 28fpkt", shape=diamond, color=yellow];
948[label="219.95.235.69;s;99pkt 99fpkt", shape=diamond, color=yellow];
1176[label="144.52.168.208;d;47pkt 47fpkt", shape=hexagon, color=black];
1257[label="193.88.128.195;s;57pkt 57fpkt", shape=hexagon, color=black];
1330[label="92.175.109.104;s;8pkt 8fpkt", shape=hexagon, color=black];
1338[label="148.173.55.32;d;4pkt 4fpkt", shape=hexagon, color=black];
1339[label="215.208.164.141;s;2pkt 2fpkt", shape=hexagon, color=black];
1474[label="207.129.144.134;s;29pkt 29fpkt", shape=hexagon, color=black];
1491[label="160.43.131.238;d;2185pkt 2185fpkt", shape=hexagon, color=black];
1506[label="219.95.235.69;s;99pkt 99fpkt", shape=hexagon, color=black];
1572[label="148.173.55.32;d;4pkt 4fpkt", shape=polygon, color=gold];
1573[label="215.208.164.141;s;2pkt 2fpkt", shape=polygon, color=gold];
1581[label="144.52.168.208;d;47pkt 47fpkt", shape=polygon, color=gold];
1637[label="196.235.137.9;47pkt 47fpkt", shape=pentagon, color=darkviolet];
1641[label="213.25.94.10;63pkt 63fpkt", shape=pentagon, color=darkviolet];
1661[label="219.114.44.19;36pkt 36fpkt", shape=pentagon, color=darkviolet];
1701[label="92.150.6.35;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1727[label="212.90.160.42;12pkt 12fpkt", shape=pentagon, color=darkviolet];
1816[label="214.222.237.72;23pkt 23fpkt", shape=pentagon, color=darkviolet];
1864[label="196.106.155.85;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1874[label="46.46.175.90;16pkt 16fpkt", shape=pentagon, color=darkviolet];
1880[label="209.210.10.93;36pkt 36fpkt", shape=pentagon, color=darkviolet];
1891[label="213.181.73.97;21pkt 21fpkt", shape=pentagon, color=darkviolet];
1905[label="92.175.109.104;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1913[label="194.213.78.108;27pkt 27fpkt", shape=pentagon, color=darkviolet];
1947[label="207.14.150.128;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1961[label="46.58.81.133;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1969[label="46.58.81.135;21pkt 21fpkt", shape=pentagon, color=darkviolet];
1988[label="215.208.164.141;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2044[label="155.59.120.164;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2059[label="213.181.73.170;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2061[label="92.201.153.170;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2110[label="193.88.128.195;58pkt 58fpkt", shape=pentagon, color=darkviolet];
2129[label="196.226.37.204;681pkt 681fpkt", shape=pentagon, color=darkviolet];
2192[label="92.150.8.226;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2219[label="212.13.1.240;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2244[label="214.1.117.246;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2277[label="213.25.94.10;63pkt 63fpkt", shape=invtriangle, color=brown];
2297[label="92.150.6.35;13pkt 13fpkt", shape=invtriangle, color=brown];
2342[label="214.222.237.72;23pkt 23fpkt", shape=invtriangle, color=brown];
2352[label="196.106.155.85;1pkt 1fpkt", shape=invtriangle, color=brown];
2354[label="209.210.10.93;36pkt 36fpkt", shape=invtriangle, color=brown];
2365[label="92.175.109.104;7pkt 7fpkt", shape=invtriangle, color=brown];
2369[label="194.213.78.108;27pkt 27fpkt", shape=invtriangle, color=brown];
2382[label="207.14.150.128;11pkt 11fpkt", shape=invtriangle, color=brown];
2387[label="46.58.81.133;3pkt 3fpkt", shape=invtriangle, color=brown];
2391[label="46.58.81.135;21pkt 21fpkt", shape=invtriangle, color=brown];
2415[label="155.59.120.164;34pkt 34fpkt", shape=invtriangle, color=brown];
2436[label="193.88.128.195;58pkt 58fpkt", shape=invtriangle, color=brown];
2444[label="196.226.37.204;681pkt 681fpkt", shape=invtriangle, color=brown];
2471[label="219.247.50.228;33pkt 33fpkt", shape=invtriangle, color=brown];
2478[label="212.13.1.240;29pkt 29fpkt", shape=invtriangle, color=brown];
2488[label="214.1.117.246;5pkt 5fpkt", shape=invtriangle, color=brown];
2537[label="207.14.150.128;12pkt 12fpkt", shape=invhouse, color=bisque];
2540[label="46.58.81.135;21pkt 21fpkt", shape=invhouse, color=bisque];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.226.37.204:80, 160.43.131.238:*}[27.4929%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9616%)&lt;BR/&gt; 2271: (0.0639959%)&lt;BR/&gt; 2270: (0.0575963%)&lt;BR/&gt; 2187: (0.0575963%)&lt;BR/&gt; 137: (0.0511967%)&gt;];
}
124--279[label="1;610pkt 610fpkt"];
124--370[label="0.026087;6pkt 6fpkt"];
124--384[label="0.350877;20pkt 20fpkt"];
124--412[label="0.165605;26pkt 26fpkt"];
124--478[label="0.00571429;1pkt 1fpkt"];
124--601[label="0.0113636;1pkt 1fpkt"];
124--660[label="1;8pkt 8fpkt"];
124--806[label="0.571429;16pkt 16fpkt"];
124--834[label="0.0172414;1pkt 1fpkt"];
124--948[label="0.141414;14pkt 14fpkt"];
124--1078[label="0.165605;26pkt 26fpkt"];
124--1220[label="0.0113636;1pkt 1fpkt"];
124--1257[label="0.350877;20pkt 20fpkt"];
124--1330[label="1;8pkt 8fpkt"];
124--1474[label="0.586207;17pkt 17fpkt"];
124--1491[label="1;2185pkt 2185fpkt"];
124--1506[label="0.141414;14pkt 14fpkt"];
124--1586[label="0.191176;26pkt 26fpkt"];
124--1598[label="0.0321522;49pkt 49fpkt"];
124--1602[label="0.0321522;49pkt 49fpkt"];
124--1604[label="0.0321522;49pkt 49fpkt"];
124--1637[label="0.893617;42pkt 42fpkt"];
124--1641[label="0.333333;21pkt 21fpkt"];
124--1661[label="0.194444;7pkt 7fpkt"];
124--1696[label="0.0434783;1pkt 1fpkt"];
124--1701[label="0.153846;2pkt 2fpkt"];
124--1707[label="0.0869565;2pkt 2fpkt"];
124--1727[label="1;12pkt 12fpkt"];
124--1745[label="0.137931;4pkt 4fpkt"];
124--1816[label="1;23pkt 23fpkt"];
124--1830[label="0.131579;5pkt 5fpkt"];
124--1864[label="1;2pkt 2fpkt"];
124--1874[label="1;16pkt 16fpkt"];
124--1880[label="1;36pkt 36fpkt"];
124--1891[label="1;21pkt 21fpkt"];
124--1905[label="1;7pkt 7fpkt"];
124--1912[label="0.0262009;6pkt 6fpkt"];
124--1913[label="0.259259;7pkt 7fpkt"];
124--1941[label="0.0714286;1pkt 1fpkt"];
124--1947[label="1;11pkt 11fpkt"];
124--1961[label="1;2pkt 2fpkt"];
124--1969[label="1;21pkt 21fpkt"];
124--1980[label="0.421053;16pkt 16fpkt"];
124--2016[label="0.0384615;1pkt 1fpkt"];
124--2044[label="1;34pkt 34fpkt"];
124--2059[label="1;19pkt 19fpkt"];
124--2061[label="0.242424;8pkt 8fpkt"];
124--2110[label="0.344828;20pkt 20fpkt"];
124--2124[label="0.142857;10pkt 10fpkt"];
124--2129[label="0.995595;678pkt 678fpkt"];
124--2156[label="0.215909;19pkt 19fpkt"];
124--2184[label="0.0512821;2pkt 2fpkt"];
124--2192[label="0.6;6pkt 6fpkt"];
124--2219[label="1;30pkt 30fpkt"];
124--2244[label="0.833333;5pkt 5fpkt"];
124--2277[label="0.333333;21pkt 21fpkt"];
124--2295[label="0.0434783;1pkt 1fpkt"];
124--2297[label="0.153846;2pkt 2fpkt"];
124--2314[label="0.137931;4pkt 4fpkt"];
124--2342[label="1;23pkt 23fpkt"];
124--2352[label="1;1pkt 1fpkt"];
124--2354[label="1;36pkt 36fpkt"];
124--2365[label="1;7pkt 7fpkt"];
124--2369[label="0.259259;7pkt 7fpkt"];
124--2382[label="1;11pkt 11fpkt"];
124--2387[label="1;3pkt 3fpkt"];
124--2391[label="1;21pkt 21fpkt"];
124--2396[label="0.410256;16pkt 16fpkt"];
124--2415[label="1;34pkt 34fpkt"];
124--2436[label="0.344828;20pkt 20fpkt"];
124--2444[label="0.995595;678pkt 678fpkt"];
124--2469[label="0.0512821;2pkt 2fpkt"];
124--2471[label="1;33pkt 33fpkt"];
124--2478[label="1;29pkt 29fpkt"];
124--2488[label="0.8;4pkt 4fpkt"];
124--2489[label="0.04;1pkt 1fpkt"];
124--2506[label="0.0434783;1pkt 1fpkt"];
124--2537[label="1;12pkt 12fpkt"];
124--2540[label="1;21pkt 21fpkt"];
124--2568[label="0.075;3pkt 3fpkt"];
279--1491[label="1;610pkt 610fpkt"];
279--1598[label="0.0639344;39pkt 39fpkt"];
279--1602[label="0.0639344;39pkt 39fpkt"];
279--1604[label="0.0639344;39pkt 39fpkt"];
279--2129[label="1;610pkt 610fpkt"];
279--2444[label="1;610pkt 610fpkt"];
380--384[label="0.680851;32pkt 32fpkt"];
380--1176[label="1;47pkt 47fpkt"];
380--1257[label="0.680851;32pkt 32fpkt"];
380--1581[label="1;47pkt 47fpkt"];
380--1913[label="0.037037;1pkt 1fpkt"];
380--2110[label="0.680851;32pkt 32fpkt"];
380--2369[label="0.037037;1pkt 1fpkt"];
380--2436[label="0.680851;32pkt 32fpkt"];
384--1014[label="0.0350877;2pkt 2fpkt"];
384--1176[label="0.680851;32pkt 32fpkt"];
384--1257[label="1;57pkt 57fpkt"];
384--1491[label="0.350877;20pkt 20fpkt"];
384--1581[label="0.680851;32pkt 32fpkt"];
384--2110[label="1;57pkt 57fpkt"];
384--2436[label="1;57pkt 57fpkt"];
660--1330[label="1;8pkt 8fpkt"];
660--1491[label="1;8pkt 8fpkt"];
660--1905[label="1;7pkt 7fpkt"];
660--2365[label="1;7pkt 7fpkt"];
761--762[label="1;2pkt 2fpkt"];
761--1338[label="1;4pkt 4fpkt"];
761--1339[label="1;2pkt 2fpkt"];
761--1572[label="1;4pkt 4fpkt"];
761--1573[label="1;2pkt 2fpkt"];
761--1988[label="0.666667;2pkt 2fpkt"];
761--2192[label="0.5;2pkt 2fpkt"];
762--1338[label="1;2pkt 2fpkt"];
762--1339[label="1;2pkt 2fpkt"];
762--1572[label="1;2pkt 2fpkt"];
762--1573[label="1;2pkt 2fpkt"];
762--1988[label="1;2pkt 2fpkt"];
806--1431[label="0.25;7pkt 7fpkt"];
806--1474[label="1;28pkt 28fpkt"];
806--1491[label="0.571429;16pkt 16fpkt"];
948--1011[label="0.0808081;8pkt 8fpkt"];
948--1162[label="0.020202;2pkt 2fpkt"];
948--1175[label="0.020202;2pkt 2fpkt"];
948--1403[label="0.0909091;9pkt 9fpkt"];
948--1491[label="0.141414;14pkt 14fpkt"];
948--1506[label="1;99pkt 99fpkt"];
948--1564[label="0.020202;2pkt 2fpkt"];
948--1598[label="0.030303;3pkt 3fpkt"];
948--1602[label="0.030303;3pkt 3fpkt"];
948--1604[label="0.030303;3pkt 3fpkt"];
1176--1257[label="0.680851;32pkt 32fpkt"];
1176--1581[label="1;47pkt 47fpkt"];
1176--1913[label="0.037037;1pkt 1fpkt"];
1176--2110[label="0.680851;32pkt 32fpkt"];
1176--2369[label="0.037037;1pkt 1fpkt"];
1176--2436[label="0.680851;32pkt 32fpkt"];
1257--1491[label="0.350877;20pkt 20fpkt"];
1257--1581[label="0.680851;32pkt 32fpkt"];
1257--2110[label="1;57pkt 57fpkt"];
1257--2436[label="1;57pkt 57fpkt"];
1330--1491[label="1;8pkt 8fpkt"];
1330--1905[label="1;7pkt 7fpkt"];
1330--2365[label="1;7pkt 7fpkt"];
1338--1339[label="1;2pkt 2fpkt"];
1338--1572[label="1;4pkt 4fpkt"];
1338--1573[label="1;2pkt 2fpkt"];
1338--1988[label="0.666667;2pkt 2fpkt"];
1338--2192[label="0.5;2pkt 2fpkt"];
1339--1572[label="1;2pkt 2fpkt"];
1339--1573[label="1;2pkt 2fpkt"];
1339--1988[label="1;2pkt 2fpkt"];
1474--1491[label="0.586207;17pkt 17fpkt"];
1491--1506[label="0.141414;14pkt 14fpkt"];
1491--1586[label="0.191176;26pkt 26fpkt"];
1491--1598[label="0.0321522;49pkt 49fpkt"];
1491--1602[label="0.0321522;49pkt 49fpkt"];
1491--1604[label="0.0321522;49pkt 49fpkt"];
1491--1637[label="0.893617;42pkt 42fpkt"];
1491--1641[label="0.333333;21pkt 21fpkt"];
1491--1661[label="0.194444;7pkt 7fpkt"];
1491--1696[label="0.0434783;1pkt 1fpkt"];
1491--1701[label="0.153846;2pkt 2fpkt"];
1491--1707[label="0.0869565;2pkt 2fpkt"];
1491--1727[label="1;12pkt 12fpkt"];
1491--1745[label="0.137931;4pkt 4fpkt"];
1491--1816[label="1;23pkt 23fpkt"];
1491--1830[label="0.131579;5pkt 5fpkt"];
1491--1864[label="1;2pkt 2fpkt"];
1491--1874[label="1;16pkt 16fpkt"];
1491--1880[label="1;36pkt 36fpkt"];
1491--1891[label="1;21pkt 21fpkt"];
1491--1905[label="1;7pkt 7fpkt"];
1491--1912[label="0.0262009;6pkt 6fpkt"];
1491--1913[label="0.259259;7pkt 7fpkt"];
1491--1941[label="0.0714286;1pkt 1fpkt"];
1491--1947[label="1;11pkt 11fpkt"];
1491--1961[label="1;2pkt 2fpkt"];
1491--1969[label="1;21pkt 21fpkt"];
1491--1980[label="0.421053;16pkt 16fpkt"];
1491--2016[label="0.0384615;1pkt 1fpkt"];
1491--2044[label="1;34pkt 34fpkt"];
1491--2059[label="1;19pkt 19fpkt"];
1491--2061[label="0.242424;8pkt 8fpkt"];
1491--2110[label="0.344828;20pkt 20fpkt"];
1491--2124[label="0.142857;10pkt 10fpkt"];
1491--2129[label="0.995595;678pkt 678fpkt"];
1491--2156[label="0.215909;19pkt 19fpkt"];
1491--2184[label="0.0512821;2pkt 2fpkt"];
1491--2192[label="0.6;6pkt 6fpkt"];
1491--2219[label="1;30pkt 30fpkt"];
1491--2244[label="0.833333;5pkt 5fpkt"];
1491--2277[label="0.333333;21pkt 21fpkt"];
1491--2295[label="0.0434783;1pkt 1fpkt"];
1491--2297[label="0.153846;2pkt 2fpkt"];
1491--2314[label="0.137931;4pkt 4fpkt"];
1491--2342[label="1;23pkt 23fpkt"];
1491--2352[label="1;1pkt 1fpkt"];
1491--2354[label="1;36pkt 36fpkt"];
1491--2365[label="1;7pkt 7fpkt"];
1491--2369[label="0.259259;7pkt 7fpkt"];
1491--2382[label="1;11pkt 11fpkt"];
1491--2387[label="1;3pkt 3fpkt"];
1491--2391[label="1;21pkt 21fpkt"];
1491--2396[label="0.410256;16pkt 16fpkt"];
1491--2415[label="1;34pkt 34fpkt"];
1491--2436[label="0.344828;20pkt 20fpkt"];
1491--2444[label="0.995595;678pkt 678fpkt"];
1491--2469[label="0.0512821;2pkt 2fpkt"];
1491--2471[label="1;33pkt 33fpkt"];
1491--2478[label="1;29pkt 29fpkt"];
1491--2488[label="0.8;4pkt 4fpkt"];
1491--2489[label="0.04;1pkt 1fpkt"];
1491--2506[label="0.0434783;1pkt 1fpkt"];
1491--2537[label="1;12pkt 12fpkt"];
1491--2540[label="1;21pkt 21fpkt"];
1491--2568[label="0.075;3pkt 3fpkt"];
1506--1564[label="0.020202;2pkt 2fpkt"];
1506--1598[label="0.030303;3pkt 3fpkt"];
1506--1602[label="0.030303;3pkt 3fpkt"];
1506--1604[label="0.030303;3pkt 3fpkt"];
1572--1573[label="1;2pkt 2fpkt"];
1572--1988[label="0.666667;2pkt 2fpkt"];
1572--2192[label="0.5;2pkt 2fpkt"];
1573--1988[label="1;2pkt 2fpkt"];
1581--1913[label="0.037037;1pkt 1fpkt"];
1581--2110[label="0.680851;32pkt 32fpkt"];
1581--2369[label="0.037037;1pkt 1fpkt"];
1581--2436[label="0.680851;32pkt 32fpkt"];
1641--2277[label="1;63pkt 63fpkt"];
1701--2297[label="1;13pkt 13fpkt"];
1816--2342[label="1;23pkt 23fpkt"];
1864--2352[label="1;1pkt 1fpkt"];
1880--2354[label="1;36pkt 36fpkt"];
1905--2365[label="1;7pkt 7fpkt"];
1913--2369[label="1;27pkt 27fpkt"];
1947--2382[label="1;11pkt 11fpkt"];
1947--2537[label="1;11pkt 11fpkt"];
1961--2387[label="1;2pkt 2fpkt"];
1969--2391[label="1;21pkt 21fpkt"];
1969--2540[label="1;21pkt 21fpkt"];
2044--2415[label="1;34pkt 34fpkt"];
2110--2436[label="1;58pkt 58fpkt"];
2129--2444[label="1;681pkt 681fpkt"];
2219--2478[label="1;29pkt 29fpkt"];
2244--2488[label="1;5pkt 5fpkt"];
2382--2537[label="1;11pkt 11fpkt"];
2391--2540[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="160.43.131.238" src_ip="196.226.37.204" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.923803,2.04534,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
907[label="144.52.41.241;d;90pkt 90fpkt", shape=diamond, color=yellow];
925[label="206.195.8.18;s;22pkt 22fpkt", shape=diamond, color=yellow];
1877[label="93.17.200.92;20pkt 20fpkt", shape=pentagon, color=darkviolet];
1918[label="194.179.88.111;22pkt 22fpkt", shape=pentagon, color=darkviolet];
1956[label="140.211.54.132;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2031[label="94.108.121.158;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2370[label="194.179.88.111;22pkt 22fpkt", shape=invtriangle, color=brown];
2385[label="140.211.54.132;7pkt 7fpkt", shape=invtriangle, color=brown];
2539[label="140.211.54.132;7pkt 7fpkt", shape=invhouse, color=bisque];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.179.88.111:80, 144.52.41.241:*}[25.5556%]&lt;BR/&gt;{206.195.8.18:80, 144.52.41.241:*}[24.4444%]&lt;BR/&gt;{93.17.200.92:80, 144.52.41.241:*}[23.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1838: (1.00503%)&lt;BR/&gt; 1837: (1.00503%)&lt;BR/&gt; 1836: (1.00503%)&lt;BR/&gt; 1835: (1.00503%)&gt;];
}
907--925[label="1;22pkt 22fpkt"];
907--1877[label="1;20pkt 20fpkt"];
907--1918[label="1;22pkt 22fpkt"];
907--1956[label="1;6pkt 6fpkt"];
907--2031[label="1;3pkt 3fpkt"];
907--2370[label="1;22pkt 22fpkt"];
907--2385[label="1;7pkt 7fpkt"];
907--2539[label="1;7pkt 7fpkt"];
1918--2370[label="1;22pkt 22fpkt"];
1956--2385[label="1;6pkt 6fpkt"];
1956--2539[label="1;6pkt 6fpkt"];
2385--2539[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="144.52.41.241" src_ip="194.179.88.111" src_port="80"/>
      <filter dst_ip="144.52.41.241" src_ip="206.195.8.18" src_port="80"/>
      <filter dst_ip="144.52.41.241" src_ip="93.17.200.92" src_port="80"/>
    </slice>
    <from sec="1000012100" usec="0"/>
    <to sec="1000012486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637079,2.06364,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
888[label="197.116.137.134;s;196pkt 196fpkt", shape=diamond, color=yellow];
1966[label="197.116.137.134;219pkt 219fpkt", shape=pentagon, color=darkviolet];
2388[label="197.116.137.134;220pkt 220fpkt", shape=invtriangle, color=brown];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.116.137.134:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
888--1966[label="0.994898;195pkt 195fpkt"];
888--2388[label="1;196pkt 196fpkt"];
1966--2388[label="1;219pkt 219fpkt"];
</description>
    <slice>
      <filter src_ip="197.116.137.134"/>
    </slice>
    <from sec="1000011603" usec="0"/>
    <to sec="1000012526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933562,2.10348,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
1987[label="130.201.136.141;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2400[label="130.201.136.141;22pkt 22fpkt", shape=invtriangle, color=brown];
2542[label="130.201.136.141;21pkt 21fpkt", shape=invhouse, color=bisque];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.201.136.141:*, 219.21.195.83:80}[59.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3636: (2.34375%)&lt;BR/&gt; 3631: (2.34375%)&lt;BR/&gt; 3630: (2.34375%)&lt;BR/&gt; 3629: (2.34375%)&gt;];
}
1987--2400[label="1;21pkt 21fpkt"];
1987--2542[label="1;21pkt 21fpkt"];
2400--2542[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="219.21.195.83" dst_port="80" src_ip="130.201.136.141"/>
    </slice>
    <from sec="1000012146" usec="0"/>
    <to sec="1000012507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
36[label="196.33.93.73;d;56pkt 56fpkt", shape=diamond, color=yellow];
175[label="212.188.195.75;s;1pkt 1fpkt", shape=diamond, color=yellow];
185[label="160.43.26.206;d;88pkt 88fpkt", shape=diamond, color=yellow];
187[label="215.65.34.85;s;1pkt 1fpkt", shape=diamond, color=yellow];
327[label="92.75.170.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
341[label="92.107.153.36;s;1pkt 1fpkt", shape=diamond, color=yellow];
616[label="141.165.108.224;d;24pkt 24fpkt", shape=diamond, color=yellow];
836[label="141.165.229.203;d;47pkt 47fpkt", shape=diamond, color=yellow];
852[label="148.173.216.178;d;68pkt 68fpkt", shape=diamond, color=yellow];
879[label="92.106.5.30;s;2pkt 2fpkt", shape=diamond, color=yellow];
919[label="47.234.96.158;s;1pkt 1fpkt", shape=diamond, color=yellow];
956[label="93.109.1.113;s;2pkt 2fpkt", shape=diamond, color=yellow];
1001[label="212.188.195.75;s;1pkt 1fpkt", shape=hexagon, color=black];
1007[label="160.43.26.206;d;58pkt 58fpkt", shape=hexagon, color=black];
1056[label="92.107.153.36;s;1pkt 1fpkt", shape=hexagon, color=black];
1191[label="196.33.93.73;d;37pkt 37fpkt", shape=hexagon, color=black];
1227[label="92.75.170.71;s;1pkt 1fpkt", shape=hexagon, color=black];
1635[label="219.170.134.9;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1920[label="152.236.185.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1949[label="208.76.204.129;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1985[label="152.244.232.140;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1995[label="92.0.12.145;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2000[label="208.116.207.146;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2077[label="92.105.58.178;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2149[label="92.175.10.212;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2246[label="94.79.58.247;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2399[label="152.244.232.140;6pkt 6fpkt", shape=invtriangle, color=brown];
2401[label="92.0.12.145;4pkt 4fpkt", shape=invtriangle, color=brown];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8888, 160.43.26.206:*}[23.6111%]&lt;BR/&gt;{*:*, 148.173.216.178:*}[23.6111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (29.6471%)&lt;BR/&gt; 0: (6.58824%)&lt;BR/&gt; 6699: (4.47059%)&lt;BR/&gt; 80: (4.47059%)&lt;BR/&gt; 6257: (2.70588%)&gt;];
}
36--175[label="1;1pkt 1fpkt"];
36--327[label="1;1pkt 1fpkt"];
36--919[label="1;1pkt 1fpkt"];
36--1001[label="1;1pkt 1fpkt"];
36--1191[label="1;37pkt 37fpkt"];
36--1227[label="1;1pkt 1fpkt"];
36--1949[label="0.25;1pkt 1fpkt"];
36--1985[label="1;6pkt 6fpkt"];
36--1995[label="0.2;1pkt 1fpkt"];
36--2026[label="0.0909091;1pkt 1fpkt"];
36--2161[label="0.2;1pkt 1fpkt"];
36--2399[label="1;6pkt 6fpkt"];
175--1001[label="1;1pkt 1fpkt"];
175--1191[label="1;1pkt 1fpkt"];
185--187[label="1;1pkt 1fpkt"];
185--341[label="1;1pkt 1fpkt"];
185--879[label="1;2pkt 2fpkt"];
185--1007[label="1;58pkt 58fpkt"];
185--1056[label="1;1pkt 1fpkt"];
185--1635[label="0.5;1pkt 1fpkt"];
185--1920[label="1;1pkt 1fpkt"];
185--1949[label="0.25;1pkt 1fpkt"];
185--2000[label="1;1pkt 1fpkt"];
185--2026[label="0.0909091;1pkt 1fpkt"];
185--2077[label="0.5;1pkt 1fpkt"];
185--2149[label="0.5;1pkt 1fpkt"];
185--2161[label="0.2;1pkt 1fpkt"];
185--2167[label="0.333333;1pkt 1fpkt"];
185--2246[label="0.5;1pkt 1fpkt"];
187--1007[label="1;1pkt 1fpkt"];
327--1191[label="1;1pkt 1fpkt"];
327--1227[label="1;1pkt 1fpkt"];
341--1007[label="1;1pkt 1fpkt"];
341--1056[label="1;1pkt 1fpkt"];
616--1820[label="0.166667;4pkt 4fpkt"];
616--1995[label="0.2;1pkt 1fpkt"];
616--2401[label="0.25;1pkt 1fpkt"];
836--1949[label="0.25;1pkt 1fpkt"];
836--1995[label="0.2;1pkt 1fpkt"];
836--2026[label="0.0909091;1pkt 1fpkt"];
836--2401[label="0.25;1pkt 1fpkt"];
852--956[label="1;2pkt 2fpkt"];
852--2026[label="0.0909091;1pkt 1fpkt"];
852--2077[label="0.5;1pkt 1fpkt"];
852--2246[label="0.5;1pkt 1fpkt"];
879--1007[label="0.5;1pkt 1fpkt"];
1001--1191[label="1;1pkt 1fpkt"];
1007--1056[label="1;1pkt 1fpkt"];
1007--1635[label="0.5;1pkt 1fpkt"];
1007--1920[label="1;1pkt 1fpkt"];
1007--1949[label="0.25;1pkt 1fpkt"];
1007--2000[label="1;1pkt 1fpkt"];
1007--2026[label="0.0909091;1pkt 1fpkt"];
1007--2077[label="0.5;1pkt 1fpkt"];
1007--2149[label="0.5;1pkt 1fpkt"];
1007--2246[label="0.5;1pkt 1fpkt"];
1191--1227[label="1;1pkt 1fpkt"];
1191--1949[label="0.25;1pkt 1fpkt"];
1191--1985[label="1;6pkt 6fpkt"];
1191--1995[label="0.2;1pkt 1fpkt"];
1191--2026[label="0.0909091;1pkt 1fpkt"];
1191--2161[label="0.2;1pkt 1fpkt"];
1191--2399[label="1;6pkt 6fpkt"];
1985--2399[label="1;6pkt 6fpkt"];
1995--2401[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="148.173.216.178"/>
      <filter dst_ip="160.43.26.206" src_port="8888"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
70[label="144.52.164.171;d;766pkt 766fpkt", shape=diamond, color=yellow];
215[label="215.216.243.196;s;219pkt 219fpkt", shape=diamond, color=yellow];
374[label="44.145.18.187;s;250pkt 250fpkt", shape=diamond, color=yellow];
477[label="196.42.119.51;d;352pkt 352fpkt", shape=diamond, color=yellow];
1012[label="215.216.243.196;s;149pkt 149fpkt", shape=hexagon, color=black];
1106[label="44.145.18.187;s;250pkt 250fpkt", shape=hexagon, color=black];
1116[label="144.52.164.171;d;592pkt 592fpkt", shape=hexagon, color=black];
1165[label="196.42.119.51;d;318pkt 318fpkt", shape=hexagon, color=black];
1996[label="128.51.89.145;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2402[label="128.51.89.145;5pkt 5fpkt", shape=invtriangle, color=brown];
2543[label="128.51.89.145;4pkt 4fpkt", shape=invhouse, color=bisque];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 144.52.164.171:25}[36.6726%]&lt;BR/&gt;{*:*, 196.42.119.51:*}[31.4848%]&lt;BR/&gt;{*:113, 144.52.164.171:*}[31.3059%]&lt;BR/&gt;{44.145.18.187:*, 144.52.164.171:*}[22.3614%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (24.0289%)&lt;BR/&gt; 113: (21.3647%)&lt;BR/&gt; 53: (4.64077%)&lt;BR/&gt; 46424: (2.80165%)&lt;BR/&gt; 0: (0.618769%)&gt;];
}
70--215[label="0.936073;205pkt 205fpkt"];
70--374[label="1;250pkt 250fpkt"];
70--1012[label="0.90604;135pkt 135fpkt"];
70--1106[label="1;250pkt 250fpkt"];
70--1116[label="1;592pkt 592fpkt"];
70--1996[label="1;4pkt 4fpkt"];
70--2402[label="1;5pkt 5fpkt"];
70--2543[label="1;4pkt 4fpkt"];
215--477[label="0.0639269;14pkt 14fpkt"];
215--1012[label="1;149pkt 149fpkt"];
215--1116[label="0.652968;143pkt 143fpkt"];
215--1165[label="0.0639269;14pkt 14fpkt"];
374--1106[label="1;250pkt 250fpkt"];
374--1116[label="1;250pkt 250fpkt"];
477--629[label="0.111111;1pkt 1fpkt"];
477--1012[label="0.0939597;14pkt 14fpkt"];
477--1165[label="1;318pkt 318fpkt"];
477--1422[label="0.111111;1pkt 1fpkt"];
477--1599[label="0.00568182;2pkt 2fpkt"];
477--1601[label="0.0284091;10pkt 10fpkt"];
477--1603[label="0.0284091;10pkt 10fpkt"];
477--2159[label="0.111111;1pkt 1fpkt"];
1012--1116[label="0.90604;135pkt 135fpkt"];
1012--1165[label="0.0939597;14pkt 14fpkt"];
1106--1116[label="1;250pkt 250fpkt"];
1116--1996[label="0.5;2pkt 2fpkt"];
1116--2402[label="0.6;3pkt 3fpkt"];
1116--2543[label="0.5;2pkt 2fpkt"];
1165--1422[label="0.111111;1pkt 1fpkt"];
1165--1599[label="0.00628931;2pkt 2fpkt"];
1165--1601[label="0.0314465;10pkt 10fpkt"];
1165--1603[label="0.0314465;10pkt 10fpkt"];
1165--2159[label="0.111111;1pkt 1fpkt"];
1996--2402[label="1;4pkt 4fpkt"];
1996--2543[label="1;4pkt 4fpkt"];
2402--2543[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="196.42.119.51"/>
      <filter dst_ip="144.52.164.171" src_ip="44.145.18.187"/>
      <filter dst_ip="144.52.164.171" src_port="113"/>
      <filter dst_ip="144.52.164.171" dst_port="25"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
377[label="148.173.216.37;d;113pkt 113fpkt", shape=diamond, color=yellow];
573[label="144.52.70.106;d;114pkt 114fpkt", shape=diamond, color=yellow];
601[label="219.214.36.141;s;88pkt 88fpkt", shape=diamond, color=yellow];
1220[label="219.214.36.141;s;88pkt 88fpkt", shape=hexagon, color=black];
1862[label="92.134.68.85;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1879[label="167.159.5.93;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2003[label="206.23.37.147;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2042[label="213.144.178.162;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2404[label="206.23.37.147;11pkt 11fpkt", shape=invtriangle, color=brown];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 148.173.216.37:*}[47.4576%]&lt;BR/&gt;{219.214.36.141:80, 144.52.70.106:*}[32.6271%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7886%)&lt;BR/&gt; 0: (0.422833%)&lt;BR/&gt; 1987: (0.317125%)&lt;BR/&gt; 1986: (0.317125%)&lt;BR/&gt; 1985: (0.317125%)&gt;];
}
377--601[label="0.0681818;6pkt 6fpkt"];
377--1220[label="0.0681818;6pkt 6fpkt"];
377--1598[label="0.00884956;1pkt 1fpkt"];
377--1602[label="0.00884956;1pkt 1fpkt"];
377--1604[label="0.00884956;1pkt 1fpkt"];
377--1862[label="0.714286;5pkt 5fpkt"];
377--2003[label="1;11pkt 11fpkt"];
377--2042[label="1;30pkt 30fpkt"];
377--2404[label="1;11pkt 11fpkt"];
573--601[label="0.875;77pkt 77fpkt"];
573--1220[label="0.875;77pkt 77fpkt"];
573--1879[label="0.818182;9pkt 9fpkt"];
601--1220[label="1;88pkt 88fpkt"];
601--1491[label="0.0113636;1pkt 1fpkt"];
1220--1491[label="0.0113636;1pkt 1fpkt"];
2003--2404[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="148.173.216.37" src_port="80"/>
      <filter dst_ip="144.52.70.106" src_ip="219.214.36.141" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933562,2.10348,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
2004[label="214.24.37.147;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2405[label="214.24.37.147;12pkt 12fpkt", shape=invtriangle, color=brown];
2544[label="214.24.37.147;12pkt 12fpkt", shape=invhouse, color=bisque];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.24.37.147:80, 196.33.130.84:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1627: (4.16667%)&lt;BR/&gt; 1626: (4.16667%)&lt;BR/&gt; 1625: (4.16667%)&lt;BR/&gt; 1624: (4.16667%)&gt;];
}
2004--2405[label="1;12pkt 12fpkt"];
2004--2544[label="1;12pkt 12fpkt"];
2405--2544[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="196.33.130.84" src_ip="214.24.37.147" src_port="80"/>
    </slice>
    <from sec="1000012409" usec="0"/>
    <to sec="1000012477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733468,2.17024,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.59.40.162"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933562,2.10348,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
2081[label="141.75.205.179;48pkt 48fpkt", shape=pentagon, color=darkviolet];
2424[label="141.75.205.179;47pkt 47fpkt", shape=invtriangle, color=brown];
2549[label="141.75.205.179;47pkt 47fpkt", shape=invhouse, color=bisque];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.75.205.179:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4942: (1.05634%)&lt;BR/&gt; 4736: (1.05634%)&lt;BR/&gt; 4713: (1.05634%)&lt;BR/&gt; 4653: (1.05634%)&gt;];
}
2081--2424[label="1;47pkt 47fpkt"];
2081--2549[label="1;47pkt 47fpkt"];
2424--2549[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="141.75.205.179"/>
    </slice>
    <from sec="1000011623" usec="0"/>
    <to sec="1000012523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.65115,2.12128,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
2086[label="197.116.137.181;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2426[label="197.116.137.181;2pkt 2fpkt", shape=invtriangle, color=brown];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.116.137.181:0, 206.252.203.95:0}[50%]&lt;BR/&gt;{197.116.137.181:0, 94.104.0.160:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2086--2426[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="94.104.0.160" src_ip="197.116.137.181"/>
      <filter dst_ip="206.252.203.95" src_ip="197.116.137.181"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22207,1.96147,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
178[label="197.116.131.106;d;300pkt 300fpkt", shape=diamond, color=yellow];
180[label="219.216.198.202;s;16pkt 16fpkt", shape=diamond, color=yellow];
249[label="213.159.9.45;s;109pkt 109fpkt", shape=diamond, color=yellow];
362[label="194.42.245.99;s;43pkt 43fpkt", shape=diamond, color=yellow];
381[label="148.173.217.130;d;9pkt 9fpkt", shape=diamond, color=yellow];
718[label="148.173.209.135;d;250pkt 250fpkt", shape=diamond, color=yellow];
1002[label="197.116.131.106;d;300pkt 300fpkt", shape=hexagon, color=black];
1087[label="219.216.198.202;s;14pkt 14fpkt", shape=hexagon, color=black];
1246[label="194.42.245.99;s;41pkt 41fpkt", shape=hexagon, color=black];
1275[label="213.159.9.45;s;81pkt 81fpkt", shape=hexagon, color=black];
1459[label="148.173.209.135;d;236pkt 236fpkt", shape=hexagon, color=black];
1568[label="219.216.198.202;s;14pkt 14fpkt", shape=polygon, color=gold];
1611[label="92.150.2.2;9pkt 9fpkt", shape=pentagon, color=darkviolet];
1692[label="206.39.122.33;39pkt 39fpkt", shape=pentagon, color=darkviolet];
1707[label="196.34.41.37;23pkt 23fpkt", shape=pentagon, color=darkviolet];
1896[label="194.42.245.99;47pkt 47fpkt", shape=pentagon, color=darkviolet];
1897[label="194.97.48.100;102pkt 102fpkt", shape=pentagon, color=darkviolet];
2088[label="214.173.69.183;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2361[label="194.97.48.100;101pkt 101fpkt", shape=invtriangle, color=brown];
2427[label="214.173.69.183;10pkt 10fpkt", shape=invtriangle, color=brown];
2504[label="206.39.122.33;33pkt 33fpkt", shape=invhouse, color=bisque];
2531[label="194.97.48.100;102pkt 102fpkt", shape=invhouse, color=bisque];
2550[label="214.173.69.183;10pkt 10fpkt", shape=invhouse, color=bisque];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 197.116.131.106:*}[38.8298%]&lt;BR/&gt;{*:80, 148.173.209.135:*}[33.2447%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5787%)&lt;BR/&gt; 53: (0.421274%)&lt;BR/&gt; 52237: (0.131648%)&lt;BR/&gt; 52191: (0.131648%)&lt;BR/&gt; 52190: (0.131648%)&gt;];
}
178--180[label="1;16pkt 16fpkt"];
178--249[label="0.183486;20pkt 20fpkt"];
178--362[label="0.255814;11pkt 11fpkt"];
178--1002[label="1;300pkt 300fpkt"];
178--1087[label="1;14pkt 14fpkt"];
178--1246[label="0.268293;11pkt 11fpkt"];
178--1275[label="0.185185;15pkt 15fpkt"];
178--1568[label="1;14pkt 14fpkt"];
178--1598[label="0.0533333;16pkt 16fpkt"];
178--1602[label="0.0533333;16pkt 16fpkt"];
178--1604[label="0.0533333;16pkt 16fpkt"];
178--1611[label="0.444444;4pkt 4fpkt"];
178--1626[label="0.0833333;1pkt 1fpkt"];
178--1630[label="0.105263;2pkt 2fpkt"];
178--1705[label="0.05;1pkt 1fpkt"];
178--1707[label="0.173913;4pkt 4fpkt"];
178--1896[label="0.234043;11pkt 11fpkt"];
178--1940[label="0.148148;12pkt 12fpkt"];
178--1957[label="0.0952381;2pkt 2fpkt"];
178--2088[label="1;10pkt 10fpkt"];
178--2271[label="0.0833333;1pkt 1fpkt"];
178--2299[label="0.05;1pkt 1fpkt"];
178--2427[label="1;10pkt 10fpkt"];
178--2507[label="0.05;1pkt 1fpkt"];
178--2550[label="1;10pkt 10fpkt"];
180--1002[label="1;16pkt 16fpkt"];
180--1087[label="1;14pkt 14fpkt"];
180--1568[label="1;14pkt 14fpkt"];
180--1598[label="0.1875;3pkt 3fpkt"];
180--1602[label="0.1875;3pkt 3fpkt"];
180--1604[label="0.1875;3pkt 3fpkt"];
249--1002[label="0.183486;20pkt 20fpkt"];
249--1014[label="0.00917431;1pkt 1fpkt"];
249--1275[label="1;81pkt 81fpkt"];
249--1598[label="0.0825688;9pkt 9fpkt"];
249--1602[label="0.0825688;9pkt 9fpkt"];
249--1604[label="0.0825688;9pkt 9fpkt"];
362--381[label="0.333333;3pkt 3fpkt"];
362--468[label="0.0232558;1pkt 1fpkt"];
362--512[label="0.0232558;1pkt 1fpkt"];
362--718[label="0.0465116;2pkt 2fpkt"];
362--1002[label="0.255814;11pkt 11fpkt"];
362--1246[label="1;41pkt 41fpkt"];
362--1273[label="0.0232558;1pkt 1fpkt"];
362--1431[label="0.116279;5pkt 5fpkt"];
362--1433[label="0.0232558;1pkt 1fpkt"];
362--1459[label="0.0465116;2pkt 2fpkt"];
362--1574[label="0.0232558;1pkt 1fpkt"];
362--1598[label="0.0465116;2pkt 2fpkt"];
362--1602[label="0.0465116;2pkt 2fpkt"];
362--1604[label="0.0465116;2pkt 2fpkt"];
362--1896[label="1;43pkt 43fpkt"];
381--1246[label="0.333333;3pkt 3fpkt"];
381--1745[label="0.111111;1pkt 1fpkt"];
381--1896[label="0.333333;3pkt 3fpkt"];
381--2314[label="0.111111;1pkt 1fpkt"];
718--1246[label="0.0487805;2pkt 2fpkt"];
718--1459[label="1;236pkt 236fpkt"];
718--1598[label="0.004;1pkt 1fpkt"];
718--1602[label="0.004;1pkt 1fpkt"];
718--1604[label="0.004;1pkt 1fpkt"];
718--1692[label="1;39pkt 39fpkt"];
718--1896[label="0.0425532;2pkt 2fpkt"];
718--1897[label="0.519608;53pkt 53fpkt"];
718--1940[label="0.0123457;1pkt 1fpkt"];
718--2361[label="0.524752;53pkt 53fpkt"];
718--2504[label="1;33pkt 33fpkt"];
718--2531[label="0.519608;53pkt 53fpkt"];
1002--1087[label="1;14pkt 14fpkt"];
1002--1246[label="0.268293;11pkt 11fpkt"];
1002--1275[label="0.185185;15pkt 15fpkt"];
1002--1568[label="1;14pkt 14fpkt"];
1002--1598[label="0.0533333;16pkt 16fpkt"];
1002--1602[label="0.0533333;16pkt 16fpkt"];
1002--1604[label="0.0533333;16pkt 16fpkt"];
1002--1611[label="0.444444;4pkt 4fpkt"];
1002--1626[label="0.0833333;1pkt 1fpkt"];
1002--1630[label="0.105263;2pkt 2fpkt"];
1002--1705[label="0.05;1pkt 1fpkt"];
1002--1707[label="0.173913;4pkt 4fpkt"];
1002--1896[label="0.234043;11pkt 11fpkt"];
1002--1940[label="0.148148;12pkt 12fpkt"];
1002--1957[label="0.0952381;2pkt 2fpkt"];
1002--2088[label="1;10pkt 10fpkt"];
1002--2271[label="0.0833333;1pkt 1fpkt"];
1002--2299[label="0.05;1pkt 1fpkt"];
1002--2427[label="1;10pkt 10fpkt"];
1002--2507[label="0.05;1pkt 1fpkt"];
1002--2550[label="1;10pkt 10fpkt"];
1087--1568[label="1;14pkt 14fpkt"];
1087--1598[label="0.214286;3pkt 3fpkt"];
1087--1602[label="0.214286;3pkt 3fpkt"];
1087--1604[label="0.214286;3pkt 3fpkt"];
1246--1273[label="0.0243902;1pkt 1fpkt"];
1246--1431[label="0.097561;4pkt 4fpkt"];
1246--1433[label="0.0243902;1pkt 1fpkt"];
1246--1459[label="0.0487805;2pkt 2fpkt"];
1246--1574[label="0.0243902;1pkt 1fpkt"];
1246--1598[label="0.0487805;2pkt 2fpkt"];
1246--1602[label="0.0487805;2pkt 2fpkt"];
1246--1604[label="0.0487805;2pkt 2fpkt"];
1246--1896[label="1;41pkt 41fpkt"];
1275--1598[label="0.111111;9pkt 9fpkt"];
1275--1602[label="0.111111;9pkt 9fpkt"];
1275--1604[label="0.111111;9pkt 9fpkt"];
1459--1598[label="0.00423729;1pkt 1fpkt"];
1459--1602[label="0.00423729;1pkt 1fpkt"];
1459--1604[label="0.00423729;1pkt 1fpkt"];
1459--1692[label="1;39pkt 39fpkt"];
1459--1896[label="0.0425532;2pkt 2fpkt"];
1459--1897[label="0.382353;39pkt 39fpkt"];
1459--1940[label="0.0123457;1pkt 1fpkt"];
1459--2361[label="0.386139;39pkt 39fpkt"];
1459--2504[label="1;33pkt 33fpkt"];
1459--2531[label="0.382353;39pkt 39fpkt"];
1568--1598[label="0.214286;3pkt 3fpkt"];
1568--1602[label="0.214286;3pkt 3fpkt"];
1568--1604[label="0.214286;3pkt 3fpkt"];
1692--2504[label="1;33pkt 33fpkt"];
1897--2361[label="1;101pkt 101fpkt"];
1897--2531[label="1;102pkt 102fpkt"];
2088--2427[label="1;10pkt 10fpkt"];
2088--2550[label="1;10pkt 10fpkt"];
2361--2531[label="1;101pkt 101fpkt"];
2427--2550[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="197.116.131.106" src_port="80"/>
      <filter dst_ip="148.173.209.135" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.65115,2.12128,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
2091[label="196.33.72.185;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2428[label="196.33.72.185;43pkt 43fpkt", shape=invtriangle, color=brown];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.33.72.185:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2091--2428[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter src_ip="196.33.72.185"/>
    </slice>
    <from sec="1000011609" usec="0"/>
    <to sec="1000012507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.65115,2.12128,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
2107[label="197.116.136.194;73pkt 73fpkt", shape=pentagon, color=darkviolet];
2434[label="197.116.136.194;74pkt 74fpkt", shape=invtriangle, color=brown];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.116.136.194:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2107--2434[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter src_ip="197.116.136.194"/>
    </slice>
    <from sec="1000011607" usec="0"/>
    <to sec="1000012526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68904,2.01213,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_320{
style=filled;
color=gray75;
734[label="219.215.39.155;d;198pkt 198fpkt", shape=diamond, color=yellow];
738[label="144.52.199.88;s;172pkt 172fpkt", shape=diamond, color=yellow];
1331[label="144.52.199.88;s;90pkt 90fpkt", shape=hexagon, color=black];
1872[label="144.52.199.88;172pkt 172fpkt", shape=pentagon, color=darkviolet];
2109[label="148.182.59.195;63pkt 63fpkt", shape=pentagon, color=darkviolet];
2435[label="148.182.59.195;64pkt 64fpkt", shape=invtriangle, color=brown];
stat320[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.52.199.88:*, 219.215.39.155:80}[70.2929%]&lt;BR/&gt;{148.182.59.195:*, *:80}[26.7782%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1378: (0.263505%)&lt;BR/&gt; 1377: (0.263505%)&lt;BR/&gt; 1376: (0.263505%)&lt;BR/&gt; 1375: (0.263505%)&gt;];
}
734--738[label="0.976744;168pkt 168fpkt"];
734--1068[label="0.00505051;1pkt 1fpkt"];
734--1331[label="1;90pkt 90fpkt"];
734--1741[label="0.00505051;1pkt 1fpkt"];
734--1872[label="0.976744;168pkt 168fpkt"];
734--2109[label="0.428571;27pkt 27fpkt"];
734--2435[label="0.421875;27pkt 27fpkt"];
738--1331[label="1;90pkt 90fpkt"];
738--1872[label="1;172pkt 172fpkt"];
1331--1872[label="1;90pkt 90fpkt"];
2109--2435[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="148.182.59.195"/>
      <filter dst_ip="219.215.39.155" dst_port="80" src_ip="144.52.199.88"/>
    </slice>
    <from sec="1000011933" usec="0"/>
    <to sec="1000012518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0227,1.98055,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
66[label="164.202.238.110;s;16pkt 16fpkt", shape=diamond, color=yellow];
67[label="196.85.64.115;d;1pkt 1fpkt", shape=diamond, color=yellow];
170[label="197.116.138.223;s;277pkt 277fpkt", shape=diamond, color=yellow];
171[label="94.78.53.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
351[label="215.140.14.210;d;398pkt 398fpkt", shape=diamond, color=yellow];
353[label="164.202.87.33;s;33pkt 33fpkt", shape=diamond, color=yellow];
507[label="164.202.239.245;s;20pkt 20fpkt", shape=diamond, color=yellow];
618[label="148.182.200.180;s;15pkt 15fpkt", shape=diamond, color=yellow];
619[label="213.218.235.134;d;281pkt 281fpkt", shape=diamond, color=yellow];
626[label="197.116.129.94;s;102pkt 102fpkt", shape=diamond, color=yellow];
702[label="213.121.116.84;d;2pkt 2fpkt", shape=diamond, color=yellow];
729[label="92.39.1.252;d;16pkt 16fpkt", shape=diamond, color=yellow];
748[label="215.140.77.66;d;1pkt 1fpkt", shape=diamond, color=yellow];
887[label="197.116.131.115;s;68pkt 68fpkt", shape=diamond, color=yellow];
895[label="197.116.142.176;s;23pkt 23fpkt", shape=diamond, color=yellow];
915[label="144.52.204.131;s;19pkt 19fpkt", shape=diamond, color=yellow];
926[label="196.203.20.176;d;5pkt 5fpkt", shape=diamond, color=yellow];
934[label="219.115.116.178;d;3pkt 3fpkt", shape=diamond, color=yellow];
1060[label="164.202.87.33;s;24pkt 24fpkt", shape=hexagon, color=black];
1136[label="197.116.138.223;s;247pkt 247fpkt", shape=hexagon, color=black];
1242[label="213.218.235.134;d;212pkt 212fpkt", shape=hexagon, color=black];
1333[label="215.140.77.66;d;1pkt 1fpkt", shape=hexagon, color=black];
1389[label="92.39.1.252;d;16pkt 16fpkt", shape=hexagon, color=black];
1483[label="196.203.20.176;d;5pkt 5fpkt", shape=hexagon, color=black];
1487[label="219.115.116.178;d;3pkt 3fpkt", shape=hexagon, color=black];
1500[label="197.116.131.115;s;68pkt 68fpkt", shape=hexagon, color=black];
1596[label="196.203.20.176;d;5pkt 5fpkt", shape=polygon, color=gold];
1659[label="144.52.207.16;52pkt 52fpkt", shape=pentagon, color=darkviolet];
1691[label="164.202.87.33;33pkt 33fpkt", shape=pentagon, color=darkviolet];
1699[label="197.116.143.34;17pkt 17fpkt", shape=pentagon, color=darkviolet];
1782[label="148.182.59.61;26pkt 26fpkt", shape=pentagon, color=darkviolet];
1834[label="148.182.150.77;25pkt 25fpkt", shape=pentagon, color=darkviolet];
1875[label="196.42.67.91;32pkt 32fpkt", shape=pentagon, color=darkviolet];
1885[label="197.116.129.94;103pkt 103fpkt", shape=pentagon, color=darkviolet];
1910[label="148.216.162.107;38pkt 38fpkt", shape=pentagon, color=darkviolet];
1927[label="197.116.131.115;67pkt 67fpkt", shape=pentagon, color=darkviolet];
1928[label="148.182.100.116;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1971[label="148.182.246.135;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1983[label="196.33.129.140;34pkt 34fpkt", shape=pentagon, color=darkviolet];
1994[label="144.52.1.145;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2064[label="144.52.38.172;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2072[label="197.116.142.176;23pkt 23fpkt", shape=pentagon, color=darkviolet];
2113[label="160.43.114.196;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2242[label="164.202.239.245;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2296[label="197.116.143.34;17pkt 17fpkt", shape=invtriangle, color=brown];
2367[label="148.216.162.107;38pkt 38fpkt", shape=invtriangle, color=brown];
2397[label="196.33.129.140;34pkt 34fpkt", shape=invtriangle, color=brown];
2422[label="197.116.142.176;24pkt 24fpkt", shape=invtriangle, color=brown];
2438[label="160.43.114.196;14pkt 14fpkt", shape=invtriangle, color=brown];
2486[label="164.202.239.245;28pkt 28fpkt", shape=invtriangle, color=brown];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 215.140.14.210:*}[31.9838%]&lt;BR/&gt;{197.116.138.223:80, 213.218.235.134:*}[20.4858%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.4102%)&lt;BR/&gt; 53: (5.35784%)&lt;BR/&gt; 0: (2.19007%)&lt;BR/&gt; 3130: (1.25147%)&lt;BR/&gt; 25: (0.586625%)&gt;];
}
66--67[label="1;1pkt 1fpkt"];
66--619[label="0.625;10pkt 10fpkt"];
66--1242[label="0.5;8pkt 8fpkt"];
66--1598[label="0.125;2pkt 2fpkt"];
66--1602[label="0.125;2pkt 2fpkt"];
66--1604[label="0.125;2pkt 2fpkt"];
170--171[label="1;1pkt 1fpkt"];
170--351[label="0.00722022;2pkt 2fpkt"];
170--619[label="0.65704;182pkt 182fpkt"];
170--1136[label="1;247pkt 247fpkt"];
170--1242[label="0.665094;141pkt 141fpkt"];
170--1598[label="0.0577617;16pkt 16fpkt"];
170--1602[label="0.0577617;16pkt 16fpkt"];
170--1604[label="0.0577617;16pkt 16fpkt"];
171--1136[label="1;1pkt 1fpkt"];
351--470[label="0.0540541;4pkt 4fpkt"];
351--603[label="0.153153;17pkt 17fpkt"];
351--618[label="0.0666667;1pkt 1fpkt"];
351--626[label="0.0294118;3pkt 3fpkt"];
351--887[label="0.117647;8pkt 8fpkt"];
351--895[label="0.130435;3pkt 3fpkt"];
351--915[label="0.105263;2pkt 2fpkt"];
351--1136[label="0.00809717;2pkt 2fpkt"];
351--1236[label="0.0818182;9pkt 9fpkt"];
351--1372[label="0.0540541;4pkt 4fpkt"];
351--1409[label="0.147727;13pkt 13fpkt"];
351--1500[label="0.117647;8pkt 8fpkt"];
351--1598[label="0.0427136;17pkt 17fpkt"];
351--1602[label="0.0427136;17pkt 17fpkt"];
351--1604[label="0.0427136;17pkt 17fpkt"];
351--1659[label="0.0192308;1pkt 1fpkt"];
351--1772[label="0.0208333;1pkt 1fpkt"];
351--1782[label="0.730769;19pkt 19fpkt"];
351--1834[label="0.76;19pkt 19fpkt"];
351--1875[label="0.25;8pkt 8fpkt"];
351--1885[label="0.0291262;3pkt 3fpkt"];
351--1910[label="0.0263158;1pkt 1fpkt"];
351--1927[label="0.119403;8pkt 8fpkt"];
351--1928[label="0.142857;1pkt 1fpkt"];
351--1971[label="0.333333;1pkt 1fpkt"];
351--1983[label="0.0882353;3pkt 3fpkt"];
351--1994[label="0.16;4pkt 4fpkt"];
351--2039[label="0.0817121;21pkt 21fpkt"];
351--2064[label="0.0714286;1pkt 1fpkt"];
351--2072[label="0.130435;3pkt 3fpkt"];
351--2113[label="0.846154;11pkt 11fpkt"];
351--2214[label="0.2;3pkt 3fpkt"];
351--2367[label="0.0263158;1pkt 1fpkt"];
351--2397[label="0.0882353;3pkt 3fpkt"];
351--2413[label="0.0813953;21pkt 21fpkt"];
351--2422[label="0.125;3pkt 3fpkt"];
351--2438[label="0.857143;12pkt 12fpkt"];
353--702[label="0.5;1pkt 1fpkt"];
353--835[label="0.030303;1pkt 1fpkt"];
353--1059[label="0.030303;1pkt 1fpkt"];
353--1060[label="1;24pkt 24fpkt"];
353--1599[label="0.0909091;3pkt 3fpkt"];
353--1691[label="1;33pkt 33fpkt"];
507--926[label="1;5pkt 5fpkt"];
507--1483[label="1;5pkt 5fpkt"];
507--1596[label="1;5pkt 5fpkt"];
507--2242[label="1;20pkt 20fpkt"];
507--2486[label="1;20pkt 20fpkt"];
618--619[label="0.2;3pkt 3fpkt"];
618--702[label="0.5;1pkt 1fpkt"];
618--748[label="1;1pkt 1fpkt"];
618--1242[label="0.0666667;1pkt 1fpkt"];
618--1333[label="1;1pkt 1fpkt"];
618--1598[label="0.133333;2pkt 2fpkt"];
618--1602[label="0.133333;2pkt 2fpkt"];
618--1604[label="0.133333;2pkt 2fpkt"];
619--626[label="0.235294;24pkt 24fpkt"];
619--887[label="0.0588235;4pkt 4fpkt"];
619--895[label="0.26087;6pkt 6fpkt"];
619--1136[label="0.736842;182pkt 182fpkt"];
619--1236[label="0.0454545;5pkt 5fpkt"];
619--1242[label="1;212pkt 212fpkt"];
619--1409[label="0.0227273;2pkt 2fpkt"];
619--1500[label="0.0588235;4pkt 4fpkt"];
619--1598[label="0.0640569;18pkt 18fpkt"];
619--1602[label="0.0640569;18pkt 18fpkt"];
619--1604[label="0.0640569;18pkt 18fpkt"];
619--1699[label="0.117647;2pkt 2fpkt"];
619--1772[label="0.0208333;1pkt 1fpkt"];
619--1782[label="0.0384615;1pkt 1fpkt"];
619--1885[label="0.23301;24pkt 24fpkt"];
619--1927[label="0.0597015;4pkt 4fpkt"];
619--1928[label="0.428571;3pkt 3fpkt"];
619--2039[label="0.0233463;6pkt 6fpkt"];
619--2072[label="0.26087;6pkt 6fpkt"];
619--2224[label="0.0666667;1pkt 1fpkt"];
619--2242[label="0.107143;3pkt 3fpkt"];
619--2296[label="0.117647;2pkt 2fpkt"];
619--2413[label="0.0232558;6pkt 6fpkt"];
619--2422[label="0.25;6pkt 6fpkt"];
619--2486[label="0.107143;3pkt 3fpkt"];
626--1242[label="0.156863;16pkt 16fpkt"];
626--1598[label="0.0196078;2pkt 2fpkt"];
626--1602[label="0.0196078;2pkt 2fpkt"];
626--1604[label="0.0196078;2pkt 2fpkt"];
626--1885[label="1;102pkt 102fpkt"];
702--1060[label="0.5;1pkt 1fpkt"];
702--1691[label="0.5;1pkt 1fpkt"];
729--1389[label="1;16pkt 16fpkt"];
729--2064[label="0.214286;3pkt 3fpkt"];
748--1333[label="1;1pkt 1fpkt"];
887--1242[label="0.0294118;2pkt 2fpkt"];
887--1500[label="1;68pkt 68fpkt"];
887--1598[label="0.0441176;3pkt 3fpkt"];
887--1599[label="0.0735294;5pkt 5fpkt"];
887--1601[label="0.0735294;5pkt 5fpkt"];
887--1602[label="0.0441176;3pkt 3fpkt"];
887--1603[label="0.0735294;5pkt 5fpkt"];
887--1604[label="0.0441176;3pkt 3fpkt"];
887--1927[label="1;67pkt 67fpkt"];
895--1242[label="0.217391;5pkt 5fpkt"];
895--2072[label="0.956522;22pkt 22fpkt"];
895--2422[label="1;23pkt 23fpkt"];
915--934[label="1;3pkt 3fpkt"];
915--1487[label="1;3pkt 3fpkt"];
926--1483[label="1;5pkt 5fpkt"];
926--1596[label="1;5pkt 5fpkt"];
926--2242[label="1;5pkt 5fpkt"];
926--2486[label="1;5pkt 5fpkt"];
934--1487[label="1;3pkt 3fpkt"];
1060--1599[label="0.125;3pkt 3fpkt"];
1060--1691[label="1;24pkt 24fpkt"];
1136--1242[label="0.665094;141pkt 141fpkt"];
1136--1598[label="0.0647773;16pkt 16fpkt"];
1136--1602[label="0.0647773;16pkt 16fpkt"];
1136--1604[label="0.0647773;16pkt 16fpkt"];
1242--1409[label="0.0113636;1pkt 1fpkt"];
1242--1500[label="0.0294118;2pkt 2fpkt"];
1242--1598[label="0.0849057;18pkt 18fpkt"];
1242--1602[label="0.0849057;18pkt 18fpkt"];
1242--1604[label="0.0849057;18pkt 18fpkt"];
1242--1699[label="0.117647;2pkt 2fpkt"];
1242--1772[label="0.0208333;1pkt 1fpkt"];
1242--1782[label="0.0384615;1pkt 1fpkt"];
1242--1885[label="0.15534;16pkt 16fpkt"];
1242--1927[label="0.0298507;2pkt 2fpkt"];
1242--1928[label="0.142857;1pkt 1fpkt"];
1242--2039[label="0.0235849;5pkt 5fpkt"];
1242--2072[label="0.217391;5pkt 5fpkt"];
1242--2224[label="0.0666667;1pkt 1fpkt"];
1242--2242[label="0.107143;3pkt 3fpkt"];
1242--2296[label="0.117647;2pkt 2fpkt"];
1242--2413[label="0.0235849;5pkt 5fpkt"];
1242--2422[label="0.208333;5pkt 5fpkt"];
1242--2486[label="0.107143;3pkt 3fpkt"];
1389--2064[label="0.214286;3pkt 3fpkt"];
1483--1596[label="1;5pkt 5fpkt"];
1483--2242[label="1;5pkt 5fpkt"];
1483--2486[label="1;5pkt 5fpkt"];
1500--1598[label="0.0441176;3pkt 3fpkt"];
1500--1599[label="0.0735294;5pkt 5fpkt"];
1500--1601[label="0.0735294;5pkt 5fpkt"];
1500--1602[label="0.0441176;3pkt 3fpkt"];
1500--1603[label="0.0735294;5pkt 5fpkt"];
1500--1604[label="0.0441176;3pkt 3fpkt"];
1500--1927[label="1;67pkt 67fpkt"];
1596--2242[label="1;5pkt 5fpkt"];
1596--2486[label="1;5pkt 5fpkt"];
1699--2296[label="1;17pkt 17fpkt"];
1910--2367[label="1;38pkt 38fpkt"];
1983--2397[label="1;34pkt 34fpkt"];
2072--2422[label="1;23pkt 23fpkt"];
2113--2438[label="1;13pkt 13fpkt"];
2242--2486[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="215.140.14.210" src_port="80"/>
      <filter dst_ip="213.218.235.134" src_ip="197.116.138.223" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.65115,2.12128,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
2119[label="206.153.56.199;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2440[label="206.153.56.199;2pkt 2fpkt", shape=invtriangle, color=brown];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.153.56.199:6667, 164.202.233.24:1383}[50%]&lt;BR/&gt;{206.153.56.199:6667, 144.52.86.158:39461}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 39461: (25%)&lt;BR/&gt; 1383: (25%)&gt;];
}
2119--2440[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.52.86.158" dst_port="39461" src_ip="206.153.56.199" src_port="6667"/>
      <filter dst_ip="164.202.233.24" dst_port="1383" src_ip="206.153.56.199" src_port="6667"/>
    </slice>
    <from sec="1000011605" usec="0"/>
    <to sec="1000012528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733468,2.17024,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.202.215.203"/>
    </slice>
    <from sec="1000011623" usec="0"/>
    <to sec="1000012527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22207,1.96147,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
78[label="148.173.3.51;d;222pkt 222fpkt", shape=diamond, color=yellow];
81[label="213.165.192.76;s;1pkt 1fpkt", shape=diamond, color=yellow];
83[label="206.62.236.188;s;1pkt 1fpkt", shape=diamond, color=yellow];
91[label="16.210.4.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
111[label="16.8.238.178;s;1pkt 1fpkt", shape=diamond, color=yellow];
117[label="1.34.253.157;s;1pkt 1fpkt", shape=diamond, color=yellow];
128[label="16.208.48.28;s;1pkt 1fpkt", shape=diamond, color=yellow];
142[label="212.185.33.158;s;1pkt 1fpkt", shape=diamond, color=yellow];
167[label="16.13.172.206;s;1pkt 1fpkt", shape=diamond, color=yellow];
177[label="93.96.9.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
259[label="16.10.133.114;s;1pkt 1fpkt", shape=diamond, color=yellow];
264[label="16.229.232.116;s;1pkt 1fpkt", shape=diamond, color=yellow];
274[label="208.76.154.207;s;1pkt 1fpkt", shape=diamond, color=yellow];
333[label="208.84.72.31;s;1pkt 1fpkt", shape=diamond, color=yellow];
404[label="219.95.238.45;s;147pkt 147fpkt", shape=diamond, color=yellow];
411[label="213.146.93.211;s;1pkt 1fpkt", shape=diamond, color=yellow];
506[label="16.110.134.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
524[label="209.76.11.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
562[label="196.33.130.82;d;84pkt 84fpkt", shape=diamond, color=yellow];
750[label="93.119.218.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
795[label="215.78.208.139;s;20pkt 20fpkt", shape=diamond, color=yellow];
823[label="168.130.177.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
834[label="219.42.5.152;s;58pkt 58fpkt", shape=diamond, color=yellow];
964[label="219.216.234.161;s;3pkt 3fpkt", shape=diamond, color=yellow];
984[label="148.173.3.51;d;222pkt 222fpkt", shape=hexagon, color=black];
986[label="16.210.4.1;s;1pkt 1fpkt", shape=hexagon, color=black];
989[label="16.8.238.178;s;1pkt 1fpkt", shape=hexagon, color=black];
991[label="1.34.253.157;s;1pkt 1fpkt", shape=hexagon, color=black];
1028[label="16.229.232.116;s;1pkt 1fpkt", shape=hexagon, color=black];
1032[label="208.76.154.207;s;1pkt 1fpkt", shape=hexagon, color=black];
1037[label="212.185.33.158;s;1pkt 1fpkt", shape=hexagon, color=black];
1074[label="219.95.238.45;s;59pkt 59fpkt", shape=hexagon, color=black];
1128[label="209.76.11.160;s;1pkt 1fpkt", shape=hexagon, color=black];
1135[label="16.13.172.206;s;1pkt 1fpkt", shape=hexagon, color=black];
1200[label="16.10.133.114;s;1pkt 1fpkt", shape=hexagon, color=black];
1201[label="206.62.236.188;s;1pkt 1fpkt", shape=hexagon, color=black];
1209[label="213.146.93.211;s;1pkt 1fpkt", shape=hexagon, color=black];
1247[label="196.33.130.82;d;84pkt 84fpkt", shape=hexagon, color=black];
1466[label="215.78.208.139;s;15pkt 15fpkt", shape=hexagon, color=black];
1530[label="148.173.3.51;d;222pkt 222fpkt", shape=polygon, color=gold];
1592[label="196.33.130.82;d;62pkt 62fpkt", shape=polygon, color=gold];
1618[label="93.96.9.5;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1685[label="208.84.72.31;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1744[label="215.173.18.48;17pkt 17fpkt", shape=pentagon, color=darkviolet];
1760[label="213.120.17.53;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1978[label="215.78.208.139;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2028[label="1.34.253.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2130[label="213.5.65.204;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2132[label="213.120.17.205;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2136[label="16.13.172.206;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2267[label="93.96.9.5;1pkt 1fpkt", shape=invtriangle, color=brown];
2291[label="208.84.72.31;1pkt 1fpkt", shape=invtriangle, color=brown];
2319[label="213.120.17.53;4pkt 4fpkt", shape=invtriangle, color=brown];
2351[label="213.70.161.84;5pkt 5fpkt", shape=invtriangle, color=brown];
2410[label="212.185.33.158;1pkt 1fpkt", shape=invtriangle, color=brown];
2412[label="209.76.11.160;1pkt 1fpkt", shape=invtriangle, color=brown];
2445[label="213.5.65.204;15pkt 15fpkt", shape=invtriangle, color=brown];
2446[label="213.120.17.205;22pkt 22fpkt", shape=invtriangle, color=brown];
2449[label="16.13.172.206;1pkt 1fpkt", shape=invtriangle, color=brown];
2501[label="208.84.72.31;1pkt 1fpkt", shape=invhouse, color=bisque];
2518[label="213.120.17.53;5pkt 5fpkt", shape=invhouse, color=bisque];
2555[label="213.5.65.204;15pkt 15fpkt", shape=invhouse, color=bisque];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 148.173.3.51:*}[41.8301%]&lt;BR/&gt;{219.95.238.45:80, *:*}[32.0261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.2174%)&lt;BR/&gt; 6346: (4.02174%)&lt;BR/&gt; 21034: (0.326087%)&lt;BR/&gt; 10001: (0.326087%)&lt;BR/&gt; 1134: (0.289855%)&gt;];
}
78--81[label="1;1pkt 1fpkt"];
78--83[label="1;1pkt 1fpkt"];
78--91[label="1;1pkt 1fpkt"];
78--111[label="1;1pkt 1fpkt"];
78--117[label="1;1pkt 1fpkt"];
78--128[label="1;1pkt 1fpkt"];
78--142[label="1;1pkt 1fpkt"];
78--167[label="1;1pkt 1fpkt"];
78--177[label="1;1pkt 1fpkt"];
78--259[label="1;1pkt 1fpkt"];
78--264[label="1;1pkt 1fpkt"];
78--274[label="1;1pkt 1fpkt"];
78--333[label="1;1pkt 1fpkt"];
78--404[label="0.231293;34pkt 34fpkt"];
78--411[label="1;1pkt 1fpkt"];
78--506[label="1;1pkt 1fpkt"];
78--524[label="1;1pkt 1fpkt"];
78--750[label="1;1pkt 1fpkt"];
78--823[label="1;1pkt 1fpkt"];
78--834[label="0.431034;25pkt 25fpkt"];
78--964[label="1;3pkt 3fpkt"];
78--984[label="1;222pkt 222fpkt"];
78--986[label="1;1pkt 1fpkt"];
78--989[label="1;1pkt 1fpkt"];
78--991[label="1;1pkt 1fpkt"];
78--1028[label="1;1pkt 1fpkt"];
78--1032[label="1;1pkt 1fpkt"];
78--1037[label="1;1pkt 1fpkt"];
78--1074[label="0.20339;12pkt 12fpkt"];
78--1128[label="1;1pkt 1fpkt"];
78--1135[label="1;1pkt 1fpkt"];
78--1200[label="1;1pkt 1fpkt"];
78--1201[label="1;1pkt 1fpkt"];
78--1209[label="1;1pkt 1fpkt"];
78--1530[label="1;222pkt 222fpkt"];
78--1598[label="0.0810811;18pkt 18fpkt"];
78--1602[label="0.0810811;18pkt 18fpkt"];
78--1604[label="0.0810811;18pkt 18fpkt"];
78--1618[label="1;1pkt 1fpkt"];
78--1641[label="0.047619;3pkt 3fpkt"];
78--1685[label="1;1pkt 1fpkt"];
78--1696[label="0.0869565;2pkt 2fpkt"];
78--1734[label="0.097561;4pkt 4fpkt"];
78--1760[label="1;4pkt 4fpkt"];
78--2028[label="1;1pkt 1fpkt"];
78--2045[label="0.0869565;2pkt 2fpkt"];
78--2130[label="0.4;6pkt 6fpkt"];
78--2132[label="1;21pkt 21fpkt"];
78--2136[label="1;1pkt 1fpkt"];
78--2267[label="1;1pkt 1fpkt"];
78--2277[label="0.047619;3pkt 3fpkt"];
78--2291[label="1;1pkt 1fpkt"];
78--2295[label="0.0869565;2pkt 2fpkt"];
78--2319[label="1;4pkt 4fpkt"];
78--2410[label="1;1pkt 1fpkt"];
78--2412[label="1;1pkt 1fpkt"];
78--2445[label="0.4;6pkt 6fpkt"];
78--2446[label="1;22pkt 22fpkt"];
78--2449[label="1;1pkt 1fpkt"];
78--2501[label="1;1pkt 1fpkt"];
78--2506[label="0.0869565;2pkt 2fpkt"];
78--2518[label="1;5pkt 5fpkt"];
78--2555[label="0.4;6pkt 6fpkt"];
81--984[label="1;1pkt 1fpkt"];
81--1530[label="1;1pkt 1fpkt"];
83--984[label="1;1pkt 1fpkt"];
83--1201[label="1;1pkt 1fpkt"];
83--1530[label="1;1pkt 1fpkt"];
91--984[label="1;1pkt 1fpkt"];
91--986[label="1;1pkt 1fpkt"];
91--1530[label="1;1pkt 1fpkt"];
111--984[label="1;1pkt 1fpkt"];
111--989[label="1;1pkt 1fpkt"];
111--1530[label="1;1pkt 1fpkt"];
117--984[label="1;1pkt 1fpkt"];
117--991[label="1;1pkt 1fpkt"];
117--1530[label="1;1pkt 1fpkt"];
117--2028[label="1;1pkt 1fpkt"];
128--984[label="1;1pkt 1fpkt"];
128--1530[label="1;1pkt 1fpkt"];
142--984[label="1;1pkt 1fpkt"];
142--1037[label="1;1pkt 1fpkt"];
142--1530[label="1;1pkt 1fpkt"];
142--2410[label="1;1pkt 1fpkt"];
167--984[label="1;1pkt 1fpkt"];
167--1135[label="1;1pkt 1fpkt"];
167--1530[label="1;1pkt 1fpkt"];
167--2136[label="1;1pkt 1fpkt"];
167--2449[label="1;1pkt 1fpkt"];
177--984[label="1;1pkt 1fpkt"];
177--1530[label="1;1pkt 1fpkt"];
177--1618[label="1;1pkt 1fpkt"];
177--2267[label="1;1pkt 1fpkt"];
259--984[label="1;1pkt 1fpkt"];
259--1200[label="1;1pkt 1fpkt"];
259--1530[label="1;1pkt 1fpkt"];
264--984[label="1;1pkt 1fpkt"];
264--1028[label="1;1pkt 1fpkt"];
264--1530[label="1;1pkt 1fpkt"];
274--984[label="1;1pkt 1fpkt"];
274--1032[label="1;1pkt 1fpkt"];
274--1530[label="1;1pkt 1fpkt"];
333--984[label="1;1pkt 1fpkt"];
333--1530[label="1;1pkt 1fpkt"];
333--1685[label="1;1pkt 1fpkt"];
333--2291[label="1;1pkt 1fpkt"];
333--2501[label="1;1pkt 1fpkt"];
404--569[label="0.0135135;1pkt 1fpkt"];
404--638[label="0.0204082;3pkt 3fpkt"];
404--737[label="0.00680272;1pkt 1fpkt"];
404--759[label="0.0526316;1pkt 1fpkt"];
404--984[label="0.231293;34pkt 34fpkt"];
404--1074[label="1;59pkt 59fpkt"];
404--1162[label="0.0272109;4pkt 4fpkt"];
404--1177[label="0.0138889;1pkt 1fpkt"];
404--1337[label="0.111111;1pkt 1fpkt"];
404--1394[label="0.00680272;1pkt 1fpkt"];
404--1530[label="0.231293;34pkt 34fpkt"];
404--1598[label="0.0680272;10pkt 10fpkt"];
404--1602[label="0.0680272;10pkt 10fpkt"];
404--1604[label="0.0680272;10pkt 10fpkt"];
411--984[label="1;1pkt 1fpkt"];
411--1209[label="1;1pkt 1fpkt"];
411--1530[label="1;1pkt 1fpkt"];
506--984[label="1;1pkt 1fpkt"];
506--1530[label="1;1pkt 1fpkt"];
524--984[label="1;1pkt 1fpkt"];
524--1128[label="1;1pkt 1fpkt"];
524--1530[label="1;1pkt 1fpkt"];
524--2412[label="1;1pkt 1fpkt"];
562--795[label="1;20pkt 20fpkt"];
562--1247[label="1;84pkt 84fpkt"];
562--1466[label="1;15pkt 15fpkt"];
562--1592[label="1;62pkt 62fpkt"];
562--1598[label="0.0119048;1pkt 1fpkt"];
562--1602[label="0.0119048;1pkt 1fpkt"];
562--1604[label="0.0119048;1pkt 1fpkt"];
562--1641[label="0.031746;2pkt 2fpkt"];
562--1696[label="0.0434783;1pkt 1fpkt"];
562--1744[label="0.882353;15pkt 15fpkt"];
562--1845[label="0.015873;1pkt 1fpkt"];
562--1978[label="0.95;19pkt 19fpkt"];
562--2130[label="0.333333;5pkt 5fpkt"];
562--2277[label="0.031746;2pkt 2fpkt"];
562--2295[label="0.0434783;1pkt 1fpkt"];
562--2349[label="0.015873;1pkt 1fpkt"];
562--2351[label="1;5pkt 5fpkt"];
562--2445[label="0.333333;5pkt 5fpkt"];
562--2506[label="0.0434783;1pkt 1fpkt"];
562--2526[label="0.015625;1pkt 1fpkt"];
562--2555[label="0.333333;5pkt 5fpkt"];
750--984[label="1;1pkt 1fpkt"];
750--1530[label="1;1pkt 1fpkt"];
795--1247[label="1;20pkt 20fpkt"];
795--1466[label="1;15pkt 15fpkt"];
795--1592[label="0.75;15pkt 15fpkt"];
795--1978[label="0.95;19pkt 19fpkt"];
823--984[label="1;1pkt 1fpkt"];
823--1530[label="1;1pkt 1fpkt"];
834--984[label="0.431034;25pkt 25fpkt"];
834--1052[label="0.103448;6pkt 6fpkt"];
834--1344[label="0.106383;5pkt 5fpkt"];
834--1431[label="0.137931;8pkt 8fpkt"];
834--1491[label="0.0172414;1pkt 1fpkt"];
834--1530[label="0.431034;25pkt 25fpkt"];
834--1598[label="0.0172414;1pkt 1fpkt"];
834--1602[label="0.0172414;1pkt 1fpkt"];
834--1604[label="0.0172414;1pkt 1fpkt"];
964--984[label="1;3pkt 3fpkt"];
964--1530[label="1;3pkt 3fpkt"];
984--986[label="1;1pkt 1fpkt"];
984--989[label="1;1pkt 1fpkt"];
984--991[label="1;1pkt 1fpkt"];
984--1028[label="1;1pkt 1fpkt"];
984--1032[label="1;1pkt 1fpkt"];
984--1037[label="1;1pkt 1fpkt"];
984--1074[label="0.20339;12pkt 12fpkt"];
984--1128[label="1;1pkt 1fpkt"];
984--1135[label="1;1pkt 1fpkt"];
984--1200[label="1;1pkt 1fpkt"];
984--1201[label="1;1pkt 1fpkt"];
984--1209[label="1;1pkt 1fpkt"];
984--1530[label="1;222pkt 222fpkt"];
984--1598[label="0.0810811;18pkt 18fpkt"];
984--1602[label="0.0810811;18pkt 18fpkt"];
984--1604[label="0.0810811;18pkt 18fpkt"];
984--1618[label="1;1pkt 1fpkt"];
984--1641[label="0.047619;3pkt 3fpkt"];
984--1685[label="1;1pkt 1fpkt"];
984--1696[label="0.0869565;2pkt 2fpkt"];
984--1734[label="0.097561;4pkt 4fpkt"];
984--1760[label="1;4pkt 4fpkt"];
984--2028[label="1;1pkt 1fpkt"];
984--2045[label="0.0869565;2pkt 2fpkt"];
984--2130[label="0.4;6pkt 6fpkt"];
984--2132[label="1;21pkt 21fpkt"];
984--2136[label="1;1pkt 1fpkt"];
984--2267[label="1;1pkt 1fpkt"];
984--2277[label="0.047619;3pkt 3fpkt"];
984--2291[label="1;1pkt 1fpkt"];
984--2295[label="0.0869565;2pkt 2fpkt"];
984--2319[label="1;4pkt 4fpkt"];
984--2410[label="1;1pkt 1fpkt"];
984--2412[label="1;1pkt 1fpkt"];
984--2445[label="0.4;6pkt 6fpkt"];
984--2446[label="1;22pkt 22fpkt"];
984--2449[label="1;1pkt 1fpkt"];
984--2501[label="1;1pkt 1fpkt"];
984--2506[label="0.0869565;2pkt 2fpkt"];
984--2518[label="1;5pkt 5fpkt"];
984--2555[label="0.4;6pkt 6fpkt"];
986--1530[label="1;1pkt 1fpkt"];
989--1530[label="1;1pkt 1fpkt"];
991--1530[label="1;1pkt 1fpkt"];
991--2028[label="1;1pkt 1fpkt"];
1028--1530[label="1;1pkt 1fpkt"];
1032--1530[label="1;1pkt 1fpkt"];
1037--1530[label="1;1pkt 1fpkt"];
1037--2410[label="1;1pkt 1fpkt"];
1074--1162[label="0.0677966;4pkt 4fpkt"];
1074--1177[label="0.0169492;1pkt 1fpkt"];
1074--1530[label="0.20339;12pkt 12fpkt"];
1074--1598[label="0.169492;10pkt 10fpkt"];
1074--1602[label="0.169492;10pkt 10fpkt"];
1074--1604[label="0.169492;10pkt 10fpkt"];
1128--1530[label="1;1pkt 1fpkt"];
1128--2412[label="1;1pkt 1fpkt"];
1135--1530[label="1;1pkt 1fpkt"];
1135--2136[label="1;1pkt 1fpkt"];
1135--2449[label="1;1pkt 1fpkt"];
1200--1530[label="1;1pkt 1fpkt"];
1201--1530[label="1;1pkt 1fpkt"];
1209--1530[label="1;1pkt 1fpkt"];
1247--1466[label="1;15pkt 15fpkt"];
1247--1592[label="1;62pkt 62fpkt"];
1247--1598[label="0.0119048;1pkt 1fpkt"];
1247--1602[label="0.0119048;1pkt 1fpkt"];
1247--1604[label="0.0119048;1pkt 1fpkt"];
1247--1641[label="0.031746;2pkt 2fpkt"];
1247--1696[label="0.0434783;1pkt 1fpkt"];
1247--1744[label="0.882353;15pkt 15fpkt"];
1247--1845[label="0.015873;1pkt 1fpkt"];
1247--1978[label="0.95;19pkt 19fpkt"];
1247--2130[label="0.333333;5pkt 5fpkt"];
1247--2277[label="0.031746;2pkt 2fpkt"];
1247--2295[label="0.0434783;1pkt 1fpkt"];
1247--2349[label="0.015873;1pkt 1fpkt"];
1247--2351[label="1;5pkt 5fpkt"];
1247--2445[label="0.333333;5pkt 5fpkt"];
1247--2506[label="0.0434783;1pkt 1fpkt"];
1247--2526[label="0.015625;1pkt 1fpkt"];
1247--2555[label="0.333333;5pkt 5fpkt"];
1466--1592[label="1;15pkt 15fpkt"];
1466--1978[label="0.933333;14pkt 14fpkt"];
1530--1598[label="0.0810811;18pkt 18fpkt"];
1530--1602[label="0.0810811;18pkt 18fpkt"];
1530--1604[label="0.0810811;18pkt 18fpkt"];
1530--1618[label="1;1pkt 1fpkt"];
1530--1641[label="0.047619;3pkt 3fpkt"];
1530--1685[label="1;1pkt 1fpkt"];
1530--1696[label="0.0869565;2pkt 2fpkt"];
1530--1734[label="0.097561;4pkt 4fpkt"];
1530--1760[label="1;4pkt 4fpkt"];
1530--2028[label="1;1pkt 1fpkt"];
1530--2045[label="0.0869565;2pkt 2fpkt"];
1530--2130[label="0.4;6pkt 6fpkt"];
1530--2132[label="1;21pkt 21fpkt"];
1530--2136[label="1;1pkt 1fpkt"];
1530--2267[label="1;1pkt 1fpkt"];
1530--2277[label="0.047619;3pkt 3fpkt"];
1530--2291[label="1;1pkt 1fpkt"];
1530--2295[label="0.0869565;2pkt 2fpkt"];
1530--2319[label="1;4pkt 4fpkt"];
1530--2410[label="1;1pkt 1fpkt"];
1530--2412[label="1;1pkt 1fpkt"];
1530--2445[label="0.4;6pkt 6fpkt"];
1530--2446[label="1;22pkt 22fpkt"];
1530--2449[label="1;1pkt 1fpkt"];
1530--2501[label="1;1pkt 1fpkt"];
1530--2506[label="0.0869565;2pkt 2fpkt"];
1530--2518[label="1;5pkt 5fpkt"];
1530--2555[label="0.4;6pkt 6fpkt"];
1592--1598[label="0.016129;1pkt 1fpkt"];
1592--1602[label="0.016129;1pkt 1fpkt"];
1592--1604[label="0.016129;1pkt 1fpkt"];
1592--1744[label="0.882353;15pkt 15fpkt"];
1592--1845[label="0.016129;1pkt 1fpkt"];
1592--1978[label="0.7;14pkt 14fpkt"];
1592--2130[label="0.333333;5pkt 5fpkt"];
1592--2349[label="0.016129;1pkt 1fpkt"];
1592--2351[label="1;5pkt 5fpkt"];
1592--2445[label="0.333333;5pkt 5fpkt"];
1592--2526[label="0.016129;1pkt 1fpkt"];
1592--2555[label="0.333333;5pkt 5fpkt"];
1618--2267[label="1;1pkt 1fpkt"];
1685--2291[label="1;1pkt 1fpkt"];
1685--2501[label="1;1pkt 1fpkt"];
1760--2319[label="1;4pkt 4fpkt"];
1760--2518[label="1;4pkt 4fpkt"];
2130--2445[label="1;15pkt 15fpkt"];
2130--2555[label="1;15pkt 15fpkt"];
2132--2446[label="1;21pkt 21fpkt"];
2136--2449[label="1;1pkt 1fpkt"];
2291--2501[label="1;1pkt 1fpkt"];
2319--2518[label="1;4pkt 4fpkt"];
2445--2555[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="219.95.238.45" src_port="80"/>
      <filter dst_ip="148.173.3.51" src_port="80"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.65115,2.12128,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_325{
style=filled;
color=gray75;
2152[label="197.116.150.212;46pkt 46fpkt", shape=pentagon, color=darkviolet];
2453[label="197.116.150.212;46pkt 46fpkt", shape=invtriangle, color=brown];
stat325[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.116.150.212:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2152--2453[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter src_ip="197.116.150.212"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933562,2.10348,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
2155[label="196.129.18.213;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2455[label="196.129.18.213;15pkt 15fpkt", shape=invtriangle, color=brown];
2562[label="196.129.18.213;15pkt 15fpkt", shape=invhouse, color=bisque];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.129.18.213:*, *:25}[26.6667%]&lt;BR/&gt;{196.129.18.213:113, *:*}[26.6667%]&lt;BR/&gt;{196.129.18.213:*, *:113}[20%]&lt;BR/&gt;{196.129.18.213:25, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (23.8636%)&lt;BR/&gt; 25: (22.7273%)&lt;BR/&gt; 53: (6.81818%)&lt;BR/&gt; 54244: (3.40909%)&lt;BR/&gt; 50123: (3.40909%)&gt;];
}
2155--2455[label="1;14pkt 14fpkt"];
2155--2562[label="1;14pkt 14fpkt"];
2455--2562[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="196.129.18.213" src_port="113"/>
      <filter src_ip="196.129.18.213" src_port="25"/>
      <filter dst_port="25" src_ip="196.129.18.213"/>
      <filter dst_port="113" src_ip="196.129.18.213"/>
    </slice>
    <from sec="1000011834" usec="0"/>
    <to sec="1000012398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933562,2.10348,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
2158[label="196.228.200.213;78pkt 78fpkt", shape=pentagon, color=darkviolet];
2456[label="196.228.200.213;78pkt 78fpkt", shape=invtriangle, color=brown];
2563[label="196.228.200.213;78pkt 78fpkt", shape=invhouse, color=bisque];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.228.200.213:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3679: (1.28205%)&lt;BR/&gt; 4902: (0.641026%)&lt;BR/&gt; 4880: (0.641026%)&lt;BR/&gt; 4719: (0.641026%)&gt;];
}
2158--2456[label="1;78pkt 78fpkt"];
2158--2563[label="1;78pkt 78fpkt"];
2456--2563[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="196.228.200.213"/>
    </slice>
    <from sec="1000011604" usec="0"/>
    <to sec="1000012516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933562,2.10348,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
2164[label="141.98.32.216;75pkt 75fpkt", shape=pentagon, color=darkviolet];
2458[label="141.98.32.216;76pkt 76fpkt", shape=invtriangle, color=brown];
2565[label="141.98.32.216;76pkt 76fpkt", shape=invhouse, color=bisque];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.32.216:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3172: (1.32159%)&lt;BR/&gt; 4942: (0.660793%)&lt;BR/&gt; 4916: (0.660793%)&lt;BR/&gt; 4875: (0.660793%)&gt;];
}
2164--2458[label="1;75pkt 75fpkt"];
2164--2565[label="1;75pkt 75fpkt"];
2458--2565[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="141.98.32.216"/>
    </slice>
    <from sec="1000011615" usec="0"/>
    <to sec="1000012527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.65115,2.12128,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
2173[label="94.35.139.219;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2464[label="94.35.139.219;1pkt 1fpkt", shape=invtriangle, color=brown];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{94.35.139.219:2125, 197.116.137.166:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2125: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2173--2464[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.116.137.166" dst_port="80" src_ip="94.35.139.219" src_port="2125"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933562,2.10348,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
2178[label="94.101.213.222;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2467[label="94.101.213.222;30pkt 30fpkt", shape=invtriangle, color=brown];
2567[label="94.101.213.222;31pkt 31fpkt", shape=invhouse, color=bisque];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{94.101.213.222:80, 141.165.158.66:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3149: (1.64835%)&lt;BR/&gt; 3148: (1.64835%)&lt;BR/&gt; 3147: (1.64835%)&lt;BR/&gt; 3146: (1.64835%)&gt;];
}
2178--2467[label="1;30pkt 30fpkt"];
2178--2567[label="1;30pkt 30fpkt"];
2467--2567[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="141.165.158.66" src_ip="94.101.213.222" src_port="80"/>
    </slice>
    <from sec="1000011611" usec="0"/>
    <to sec="1000012525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733468,2.17024,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.171.214.233"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.960374,1.99335,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
46[label="204.180.253.24;d;270pkt 270fpkt", shape=diamond, color=yellow];
49[label="164.202.239.233;s;4870pkt 4870fpkt", shape=diamond, color=yellow];
835[label="196.93.43.208;d;449pkt 449fpkt", shape=diamond, color=yellow];
1114[label="164.202.239.233;s;706pkt 706fpkt", shape=hexagon, color=black];
1432[label="204.180.253.24;d;270pkt 270fpkt", shape=hexagon, color=black];
2207[label="164.202.239.233;5024pkt 5024fpkt", shape=pentagon, color=darkviolet];
2476[label="164.202.239.233;5024pkt 5024fpkt", shape=invtriangle, color=brown];
2572[label="164.202.239.233;5025pkt 5025fpkt", shape=invhouse, color=bisque];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.202.239.233:*, 196.93.43.208:53}[48.1526%]&lt;BR/&gt;{164.202.239.233:*, 196.93.43.214:53}[24.9106%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (44.4242%)&lt;BR/&gt; 3128: (4.34421%)&lt;BR/&gt; 80: (0.790276%)&lt;BR/&gt; 0: (0.577687%)&lt;BR/&gt; 443: (0.129402%)&gt;];
}
46--49[label="1;270pkt 270fpkt"];
46--1114[label="0.411111;111pkt 111fpkt"];
46--1432[label="1;270pkt 270fpkt"];
46--2207[label="1;270pkt 270fpkt"];
46--2476[label="1;270pkt 270fpkt"];
46--2572[label="1;270pkt 270fpkt"];
49--473[label="0.0232558;1pkt 1fpkt"];
49--835[label="0.979955;440pkt 440fpkt"];
49--1114[label="1;706pkt 706fpkt"];
49--1432[label="1;270pkt 270fpkt"];
49--1599[label="0.0792918;206pkt 206fpkt"];
49--2207[label="0.999795;4869pkt 4869fpkt"];
49--2476[label="0.999795;4869pkt 4869fpkt"];
49--2572[label="1;4870pkt 4870fpkt"];
835--1111[label="0.0041841;1pkt 1fpkt"];
835--1599[label="0.00668151;3pkt 3fpkt"];
835--1691[label="0.030303;1pkt 1fpkt"];
835--1917[label="0.00369004;1pkt 1fpkt"];
835--2105[label="0.0117647;1pkt 1fpkt"];
835--2191[label="0.00222717;1pkt 1fpkt"];
835--2207[label="0.979955;440pkt 440fpkt"];
835--2211[label="0.0512821;2pkt 2fpkt"];
835--2476[label="0.979955;440pkt 440fpkt"];
835--2477[label="0.0526316;2pkt 2fpkt"];
835--2572[label="0.979955;440pkt 440fpkt"];
835--2573[label="0.0512821;2pkt 2fpkt"];
1114--1432[label="0.411111;111pkt 111fpkt"];
1114--1599[label="0.291785;206pkt 206fpkt"];
1114--2207[label="0.998584;705pkt 705fpkt"];
1114--2476[label="0.998584;705pkt 705fpkt"];
1114--2572[label="1;706pkt 706fpkt"];
1432--2207[label="1;270pkt 270fpkt"];
1432--2476[label="1;270pkt 270fpkt"];
1432--2572[label="1;270pkt 270fpkt"];
2207--2476[label="1;5024pkt 5024fpkt"];
2207--2572[label="1;5024pkt 5024fpkt"];
2476--2572[label="1;5024pkt 5024fpkt"];
</description>
    <slice>
      <filter dst_ip="196.93.43.208" dst_port="53" src_ip="164.202.239.233"/>
      <filter dst_ip="196.93.43.214" dst_port="53" src_ip="164.202.239.233"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733468,2.17024,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.15.58.244"/>
    </slice>
    <from sec="1000012360" usec="0"/>
    <to sec="1000012396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.733468,2.17024,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.134.104.245"/>
    </slice>
    <from sec="1000011663" usec="0"/>
    <to sec="1000012527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.65115,2.12128,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
2243[label="148.173.29.246;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2487[label="148.173.29.246;9pkt 9fpkt", shape=invtriangle, color=brown];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.173.29.246:*, 204.76.46.9:80}[50%]&lt;BR/&gt;{148.173.29.246:*, 193.67.156.21:80}[30%]&lt;BR/&gt;{148.173.29.246:*, 92.251.39.218:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1129: (5.26316%)&lt;BR/&gt; 1127: (5.26316%)&lt;BR/&gt; 1126: (5.26316%)&lt;BR/&gt; 1115: (5.26316%)&gt;];
}
2243--2487[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="204.76.46.9" dst_port="80" src_ip="148.173.29.246"/>
      <filter dst_ip="193.67.156.21" dst_port="80" src_ip="148.173.29.246"/>
      <filter dst_ip="92.251.39.218" dst_port="80" src_ip="148.173.29.246"/>
    </slice>
    <from sec="1000011844" usec="0"/>
    <to sec="1000011939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89623,2.17893,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="16.210.4.1"/>
    </slice>
    <from sec="1000011601" usec="0"/>
    <to sec="1000011680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89623,2.17893,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.173.144.7"/>
    </slice>
    <from sec="1000012529" usec="0"/>
    <to sec="1000012530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89623,2.17893,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.235.153.12"/>
    </slice>
    <from sec="1000011830" usec="0"/>
    <to sec="1000012415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89623,2.17893,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.202.215.203"/>
    </slice>
    <from sec="1000011623" usec="0"/>
    <to sec="1000012527" usec="0"/>
  </anomaly>

</admd:annotation>
