<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.69086,3.27597,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.104.120.112" dst_port="25" proto="tcp" src_ip="215.145.152.0" src_port="61126"/>
      <filter dst_ip="193.104.120.112" dst_port="25" proto="udp" src_ip="215.145.152.0" src_port="61126"/>
      <filter dst_ip="193.104.120.112" dst_port="53" proto="tcp" src_ip="215.145.152.0" src_port="61126"/>
      <filter dst_ip="193.104.120.112" dst_port="53" proto="udp" src_ip="215.145.152.0" src_port="61126"/>
      <filter dst_ip="193.104.120.112" dst_port="80" proto="tcp" src_ip="215.145.152.0" src_port="61126"/>
      <filter dst_ip="193.104.120.112" dst_port="80" proto="udp" src_ip="215.145.152.0" src_port="61126"/>
      <filter dst_ip="193.104.120.112" dst_port="25" proto="tcp" src_ip="215.145.152.0" src_port="53"/>
      <filter dst_ip="193.104.120.112" dst_port="25" proto="udp" src_ip="215.145.152.0" src_port="53"/>
      <filter dst_ip="193.104.120.112" dst_port="53" proto="tcp" src_ip="215.145.152.0" src_port="53"/>
      <filter dst_ip="193.104.120.112" dst_port="53" proto="udp" src_ip="215.145.152.0" src_port="53"/>
      <filter dst_ip="193.104.120.112" dst_port="80" proto="tcp" src_ip="215.145.152.0" src_port="53"/>
      <filter dst_ip="193.104.120.112" dst_port="80" proto="udp" src_ip="215.145.152.0" src_port="53"/>
      <filter dst_ip="130.32.200.14" dst_port="25" proto="tcp" src_ip="215.145.152.0" src_port="61126"/>
      <filter dst_ip="130.32.200.14" dst_port="25" proto="udp" src_ip="215.145.152.0" src_port="61126"/>
      <filter dst_ip="130.32.200.14" dst_port="53" proto="tcp" src_ip="215.145.152.0" src_port="61126"/>
      <filter dst_ip="130.32.200.14" dst_port="53" proto="udp" src_ip="215.145.152.0" src_port="61126"/>
      <filter dst_ip="130.32.200.14" dst_port="80" proto="tcp" src_ip="215.145.152.0" src_port="61126"/>
      <filter dst_ip="130.32.200.14" dst_port="80" proto="udp" src_ip="215.145.152.0" src_port="61126"/>
      <filter dst_ip="130.32.200.14" dst_port="25" proto="tcp" src_ip="215.145.152.0" src_port="53"/>
      <filter dst_ip="130.32.200.14" dst_port="25" proto="udp" src_ip="215.145.152.0" src_port="53"/>
      <filter dst_ip="130.32.200.14" dst_port="53" proto="tcp" src_ip="215.145.152.0" src_port="53"/>
      <filter dst_ip="130.32.200.14" dst_port="53" proto="udp" src_ip="215.145.152.0" src_port="53"/>
      <filter dst_ip="130.32.200.14" dst_port="80" proto="tcp" src_ip="215.145.152.0" src_port="53"/>
      <filter dst_ip="130.32.200.14" dst_port="80" proto="udp" src_ip="215.145.152.0" src_port="53"/>
      <from sec="1005455140" usec="0"/>
      <to sec="1005455143" usec="0"/>
    </slice>
    <from sec="1005455140" usec="0"/>
    <to sec="1005455181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.69086,3.27597,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.224.6.229" dst_port="6699" proto="tcp" src_ip="144.224.37.4" src_port="1636"/>
      <filter dst_ip="144.224.6.229" dst_port="1214" proto="tcp" src_ip="144.224.37.4" src_port="1636"/>
      <filter dst_ip="144.224.6.229" dst_port="80" proto="tcp" src_ip="144.224.37.4" src_port="1636"/>
      <filter dst_ip="144.224.6.229" dst_port="6699" proto="tcp" src_ip="144.224.37.4" src_port="1644"/>
      <filter dst_ip="144.224.6.229" dst_port="1214" proto="tcp" src_ip="144.224.37.4" src_port="1644"/>
      <filter dst_ip="144.224.6.229" dst_port="80" proto="tcp" src_ip="144.224.37.4" src_port="1644"/>
      <filter dst_ip="144.224.6.229" dst_port="6699" proto="tcp" src_ip="144.224.37.4" src_port="1642"/>
      <filter dst_ip="144.224.6.229" dst_port="1214" proto="tcp" src_ip="144.224.37.4" src_port="1642"/>
      <filter dst_ip="144.224.6.229" dst_port="80" proto="tcp" src_ip="144.224.37.4" src_port="1642"/>
      <filter dst_ip="198.236.146.187" dst_port="6699" proto="tcp" src_ip="144.224.37.4" src_port="1636"/>
      <filter dst_ip="198.236.146.187" dst_port="1214" proto="tcp" src_ip="144.224.37.4" src_port="1636"/>
      <filter dst_ip="198.236.146.187" dst_port="80" proto="tcp" src_ip="144.224.37.4" src_port="1636"/>
      <filter dst_ip="198.236.146.187" dst_port="6699" proto="tcp" src_ip="144.224.37.4" src_port="1644"/>
      <filter dst_ip="198.236.146.187" dst_port="1214" proto="tcp" src_ip="144.224.37.4" src_port="1644"/>
      <filter dst_ip="198.236.146.187" dst_port="80" proto="tcp" src_ip="144.224.37.4" src_port="1644"/>
      <filter dst_ip="198.236.146.187" dst_port="6699" proto="tcp" src_ip="144.224.37.4" src_port="1642"/>
      <filter dst_ip="198.236.146.187" dst_port="1214" proto="tcp" src_ip="144.224.37.4" src_port="1642"/>
      <filter dst_ip="198.236.146.187" dst_port="80" proto="tcp" src_ip="144.224.37.4" src_port="1642"/>
      <filter dst_ip="0.169.243.119" dst_port="6699" proto="tcp" src_ip="144.224.37.4" src_port="1636"/>
      <filter dst_ip="0.169.243.119" dst_port="1214" proto="tcp" src_ip="144.224.37.4" src_port="1636"/>
      <filter dst_ip="0.169.243.119" dst_port="80" proto="tcp" src_ip="144.224.37.4" src_port="1636"/>
      <filter dst_ip="0.169.243.119" dst_port="6699" proto="tcp" src_ip="144.224.37.4" src_port="1644"/>
      <filter dst_ip="0.169.243.119" dst_port="1214" proto="tcp" src_ip="144.224.37.4" src_port="1644"/>
      <filter dst_ip="0.169.243.119" dst_port="80" proto="tcp" src_ip="144.224.37.4" src_port="1644"/>
      <filter dst_ip="0.169.243.119" dst_port="6699" proto="tcp" src_ip="144.224.37.4" src_port="1642"/>
      <filter dst_ip="0.169.243.119" dst_port="1214" proto="tcp" src_ip="144.224.37.4" src_port="1642"/>
      <filter dst_ip="0.169.243.119" dst_port="80" proto="tcp" src_ip="144.224.37.4" src_port="1642"/>
      <filter dst_ip="69.118.38.49" dst_port="6699" proto="tcp" src_ip="144.224.37.4" src_port="1636"/>
      <filter dst_ip="69.118.38.49" dst_port="1214" proto="tcp" src_ip="144.224.37.4" src_port="1636"/>
      <filter dst_ip="69.118.38.49" dst_port="80" proto="tcp" src_ip="144.224.37.4" src_port="1636"/>
      <filter dst_ip="69.118.38.49" dst_port="6699" proto="tcp" src_ip="144.224.37.4" src_port="1644"/>
      <filter dst_ip="69.118.38.49" dst_port="1214" proto="tcp" src_ip="144.224.37.4" src_port="1644"/>
      <filter dst_ip="69.118.38.49" dst_port="80" proto="tcp" src_ip="144.224.37.4" src_port="1644"/>
      <filter dst_ip="69.118.38.49" dst_port="6699" proto="tcp" src_ip="144.224.37.4" src_port="1642"/>
      <filter dst_ip="69.118.38.49" dst_port="1214" proto="tcp" src_ip="144.224.37.4" src_port="1642"/>
      <filter dst_ip="69.118.38.49" dst_port="80" proto="tcp" src_ip="144.224.37.4" src_port="1642"/>
      <from sec="1005455211" usec="0"/>
      <to sec="1005455430" usec="0"/>
    </slice>
    <from sec="1005455211" usec="0"/>
    <to sec="1005455430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.69086,3.27597,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="130.154.178.244" dst_port="80" proto="tcp" src_ip="214.16.167.200" src_port="62160"/>
      <filter dst_ip="130.154.178.244" dst_port="20" proto="tcp" src_ip="214.16.167.200" src_port="62160"/>
      <filter dst_ip="130.154.178.244" dst_port="25" proto="tcp" src_ip="214.16.167.200" src_port="62160"/>
      <filter dst_ip="192.11.115.37" dst_port="80" proto="tcp" src_ip="214.16.167.200" src_port="62160"/>
      <filter dst_ip="192.11.115.37" dst_port="20" proto="tcp" src_ip="214.16.167.200" src_port="62160"/>
      <filter dst_ip="192.11.115.37" dst_port="25" proto="tcp" src_ip="214.16.167.200" src_port="62160"/>
      <from sec="1005455180" usec="0"/>
      <to sec="1005455211" usec="0"/>
    </slice>
    <from sec="1005455180" usec="0"/>
    <to sec="1005455212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.69086,3.27597,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="193.104.110.205" src_port="53"/>
      <filter dst_port="80" proto="udp" src_ip="193.104.110.205" src_port="53"/>
      <filter dst_port="53" proto="tcp" src_ip="193.104.110.205" src_port="53"/>
      <filter dst_port="53" proto="udp" src_ip="193.104.110.205" src_port="53"/>
      <from sec="1005455244" usec="0"/>
      <to sec="1005455430" usec="0"/>
    </slice>
    <from sec="1005455244" usec="0"/>
    <to sec="1005455430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.69086,3.27597,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.224.91.21" dst_port="1214" proto="tcp" src_ip="144.224.6.229" src_port="1214"/>
      <filter dst_ip="144.224.91.21" dst_port="1214" proto="tcp" src_ip="144.224.6.229" src_port="1214"/>
      <filter dst_ip="144.224.91.21" dst_port="1214" proto="tcp" src_ip="144.224.6.229" src_port="1214"/>
      <filter dst_ip="144.224.91.21" dst_port="1214" proto="tcp" src_ip="144.224.6.229" src_port="1214"/>
      <filter dst_ip="144.224.91.21" dst_port="1214" proto="tcp" src_ip="144.224.6.229" src_port="2543"/>
      <filter dst_ip="144.224.91.21" dst_port="1214" proto="tcp" src_ip="144.224.6.229" src_port="2543"/>
      <filter dst_ip="144.224.91.21" dst_port="1214" proto="tcp" src_ip="144.224.6.229" src_port="2543"/>
      <filter dst_ip="144.224.91.21" dst_port="1214" proto="tcp" src_ip="144.224.6.229" src_port="2543"/>
      <from sec="1005455022" usec="0"/>
      <to sec="1005455501" usec="0"/>
    </slice>
    <from sec="1005455022" usec="0"/>
    <to sec="1005455501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.69086,3.27597,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.224.88.33" dst_port="80" proto="tcp" src_ip="144.224.6.229" src_port="6699"/>
      <filter dst_ip="144.224.88.33" dst_port="80" proto="tcp" src_ip="144.224.6.229" src_port="6699"/>
      <filter dst_ip="144.224.88.33" dst_port="80" proto="tcp" src_ip="144.224.6.229" src_port="6699"/>
      <filter dst_ip="144.224.88.33" dst_port="80" proto="tcp" src_ip="144.224.6.229" src_port="6699"/>
      <filter dst_ip="144.224.88.33" dst_port="21" proto="tcp" src_ip="144.224.6.229" src_port="6699"/>
      <filter dst_ip="144.224.88.33" dst_port="21" proto="tcp" src_ip="144.224.6.229" src_port="6699"/>
      <filter dst_ip="144.224.88.33" dst_port="21" proto="tcp" src_ip="144.224.6.229" src_port="6699"/>
      <filter dst_ip="144.224.88.33" dst_port="21" proto="tcp" src_ip="144.224.6.229" src_port="6699"/>
      <filter dst_ip="144.224.88.33" dst_port="80" proto="tcp" src_ip="144.224.6.229" src_port="1214"/>
      <filter dst_ip="144.224.88.33" dst_port="80" proto="tcp" src_ip="144.224.6.229" src_port="1214"/>
      <filter dst_ip="144.224.88.33" dst_port="80" proto="tcp" src_ip="144.224.6.229" src_port="1214"/>
      <filter dst_ip="144.224.88.33" dst_port="80" proto="tcp" src_ip="144.224.6.229" src_port="1214"/>
      <filter dst_ip="144.224.88.33" dst_port="21" proto="tcp" src_ip="144.224.6.229" src_port="1214"/>
      <filter dst_ip="144.224.88.33" dst_port="21" proto="tcp" src_ip="144.224.6.229" src_port="1214"/>
      <filter dst_ip="144.224.88.33" dst_port="21" proto="tcp" src_ip="144.224.6.229" src_port="1214"/>
      <filter dst_ip="144.224.88.33" dst_port="21" proto="tcp" src_ip="144.224.6.229" src_port="1214"/>
      <filter dst_ip="144.224.88.33" dst_port="80" proto="tcp" src_ip="202.40.167.237" src_port="6699"/>
      <filter dst_ip="144.224.88.33" dst_port="80" proto="tcp" src_ip="202.40.167.237" src_port="6699"/>
      <filter dst_ip="144.224.88.33" dst_port="80" proto="tcp" src_ip="202.40.167.237" src_port="6699"/>
      <filter dst_ip="144.224.88.33" dst_port="80" proto="tcp" src_ip="202.40.167.237" src_port="6699"/>
      <filter dst_ip="144.224.88.33" dst_port="21" proto="tcp" src_ip="202.40.167.237" src_port="6699"/>
      <filter dst_ip="144.224.88.33" dst_port="21" proto="tcp" src_ip="202.40.167.237" src_port="6699"/>
      <filter dst_ip="144.224.88.33" dst_port="21" proto="tcp" src_ip="202.40.167.237" src_port="6699"/>
      <filter dst_ip="144.224.88.33" dst_port="21" proto="tcp" src_ip="202.40.167.237" src_port="6699"/>
      <filter dst_ip="144.224.88.33" dst_port="80" proto="tcp" src_ip="202.40.167.237" src_port="1214"/>
      <filter dst_ip="144.224.88.33" dst_port="80" proto="tcp" src_ip="202.40.167.237" src_port="1214"/>
      <filter dst_ip="144.224.88.33" dst_port="80" proto="tcp" src_ip="202.40.167.237" src_port="1214"/>
      <filter dst_ip="144.224.88.33" dst_port="80" proto="tcp" src_ip="202.40.167.237" src_port="1214"/>
      <filter dst_ip="144.224.88.33" dst_port="21" proto="tcp" src_ip="202.40.167.237" src_port="1214"/>
      <filter dst_ip="144.224.88.33" dst_port="21" proto="tcp" src_ip="202.40.167.237" src_port="1214"/>
      <filter dst_ip="144.224.88.33" dst_port="21" proto="tcp" src_ip="202.40.167.237" src_port="1214"/>
      <filter dst_ip="144.224.88.33" dst_port="21" proto="tcp" src_ip="202.40.167.237" src_port="1214"/>
      <from sec="1005454895" usec="0"/>
      <to sec="1005455212" usec="0"/>
    </slice>
    <from sec="1005454895" usec="0"/>
    <to sec="1005455212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.69086,3.27597,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.224.6.229" dst_port="1214" proto="tcp" src_port="1214"/>
      <filter dst_ip="144.224.6.229" dst_port="1214" proto="tcp" src_port="1214"/>
      <filter dst_ip="144.224.6.229" dst_port="1214" proto="tcp" src_port="1214"/>
      <filter dst_ip="144.224.6.229" dst_port="1214" proto="tcp" src_port="1214"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455501" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.97.30.18"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455358" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,901,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_13{
style=filled;
color=gray75;
119[label="130.131.9.111;d;464pkt 464fpkt", shape=diamond, color=yellow];
290[label="133.28.14.98;d;84pkt 84fpkt", shape=diamond, color=yellow];
319[label="198.28.251.191;s;75pkt 75fpkt", shape=diamond, color=yellow];
395[label="133.28.88.10;d;92pkt 92fpkt", shape=diamond, color=yellow];
580[label="133.28.91.29;d;123pkt 123fpkt", shape=diamond, color=yellow];
613[label="198.87.172.52;s;63pkt 63fpkt", shape=diamond, color=yellow];
825[label="215.145.146.32;99pkt 99fpkt", shape=pentagon, color=darkviolet];
861[label="215.145.152.38;12pkt 12fpkt", shape=pentagon, color=darkviolet];
921[label="198.87.172.52;63pkt 63fpkt", shape=pentagon, color=darkviolet];
1006[label="69.82.226.72;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1096[label="216.208.89.90;38pkt 38fpkt", shape=pentagon, color=darkviolet];
1152[label="215.145.146.104;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1194[label="213.99.230.114;122pkt 122fpkt", shape=pentagon, color=darkviolet];
1207[label="215.145.146.117;14pkt 14fpkt", shape=pentagon, color=darkviolet];
1281[label="216.82.122.137;78pkt 78fpkt", shape=pentagon, color=darkviolet];
1354[label="216.38.69.155;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1394[label="192.10.58.164;12pkt 12fpkt", shape=pentagon, color=darkviolet];
1432[label="215.145.146.172;23pkt 23fpkt", shape=pentagon, color=darkviolet];
1647[label="198.87.168.224;21pkt 21fpkt", shape=pentagon, color=darkviolet];
1851[label="215.145.146.32;100pkt 100fpkt", shape=invtriangle, color=brown];
1873[label="215.145.152.38;12pkt 12fpkt", shape=invtriangle, color=brown];
1913[label="198.87.172.52;63pkt 63fpkt", shape=invtriangle, color=brown];
2192[label="216.38.69.155;5pkt 5fpkt", shape=invtriangle, color=brown];
2219[label="192.10.58.164;11pkt 11fpkt", shape=invtriangle, color=brown];
2498[label="215.145.146.32;99pkt 99fpkt", shape=invhouse, color=bisque];
stat13[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.67.66.73:80, 130.131.9.111:*}[23.6444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.2619%)&lt;BR/&gt; 8888: (2.23661%)&lt;BR/&gt; 0: (0.588582%)&lt;BR/&gt; 7777: (0.500294%)&lt;BR/&gt; 7729: (0.470865%)&gt;];
}
119--319[label="0.266667;20pkt 20fpkt"];
119--523[label="0.011236;2pkt 2fpkt"];
119--654[label="0.30819;143pkt 143fpkt"];
119--668[label="0.30819;143pkt 143fpkt"];
119--682[label="0.30819;143pkt 143fpkt"];
119--825[label="0.020202;2pkt 2fpkt"];
119--861[label="0.0833333;1pkt 1fpkt"];
119--1006[label="0.5;1pkt 1fpkt"];
119--1152[label="0.157895;3pkt 3fpkt"];
119--1194[label="0.97541;119pkt 119fpkt"];
119--1214[label="0.00966184;2pkt 2fpkt"];
119--1354[label="0.2;1pkt 1fpkt"];
119--1394[label="0.25;3pkt 3fpkt"];
119--1432[label="0.0434783;1pkt 1fpkt"];
119--1647[label="0.047619;1pkt 1fpkt"];
119--1851[label="0.02;2pkt 2fpkt"];
119--1873[label="0.0833333;1pkt 1fpkt"];
119--2192[label="0.2;1pkt 1fpkt"];
119--2219[label="0.272727;3pkt 3fpkt"];
119--2498[label="0.020202;2pkt 2fpkt"];
290--825[label="0.0238095;2pkt 2fpkt"];
290--1207[label="0.0714286;1pkt 1fpkt"];
290--1851[label="0.0238095;2pkt 2fpkt"];
290--2498[label="0.0238095;2pkt 2fpkt"];
319--395[label="0.32;24pkt 24fpkt"];
319--580[label="0.04;3pkt 3fpkt"];
319--654[label="0.0533333;4pkt 4fpkt"];
319--668[label="0.0533333;4pkt 4fpkt"];
319--682[label="0.0533333;4pkt 4fpkt"];
395--613[label="0.031746;2pkt 2fpkt"];
395--654[label="0.0108696;1pkt 1fpkt"];
395--668[label="0.0108696;1pkt 1fpkt"];
395--682[label="0.0108696;1pkt 1fpkt"];
395--921[label="0.031746;2pkt 2fpkt"];
395--1281[label="0.435897;34pkt 34fpkt"];
395--1913[label="0.031746;2pkt 2fpkt"];
580--594[label="0.166667;1pkt 1fpkt"];
580--739[label="0.030303;1pkt 1fpkt"];
580--929[label="0.285714;2pkt 2fpkt"];
580--957[label="0.25;4pkt 4fpkt"];
580--995[label="0.272727;3pkt 3fpkt"];
580--1026[label="0.4;2pkt 2fpkt"];
580--1089[label="0.125;1pkt 1fpkt"];
580--1096[label="0.105263;4pkt 4fpkt"];
580--1102[label="0.2;2pkt 2fpkt"];
580--1650[label="0.142857;1pkt 1fpkt"];
580--1670[label="0.181818;2pkt 2fpkt"];
580--1688[label="0.166667;2pkt 2fpkt"];
580--1728[label="0.105263;2pkt 2fpkt"];
580--1918[label="0.25;2pkt 2fpkt"];
580--1936[label="0.266667;4pkt 4fpkt"];
580--1964[label="0.272727;3pkt 3fpkt"];
580--1979[label="0.333333;2pkt 2fpkt"];
580--2023[label="0.125;1pkt 1fpkt"];
580--2030[label="0.2;2pkt 2fpkt"];
580--2282[label="0.4;2pkt 2fpkt"];
580--2413[label="0.181818;2pkt 2fpkt"];
580--2518[label="0.0952381;2pkt 2fpkt"];
580--2532[label="0.25;2pkt 2fpkt"];
580--2540[label="0.266667;4pkt 4fpkt"];
580--2557[label="0.272727;3pkt 3fpkt"];
580--2592[label="0.2;2pkt 2fpkt"];
580--2814[label="0.181818;2pkt 2fpkt"];
613--637[label="0.031746;2pkt 2fpkt"];
613--652[label="0.031746;2pkt 2fpkt"];
613--654[label="0.047619;3pkt 3fpkt"];
613--668[label="0.047619;3pkt 3fpkt"];
613--682[label="0.047619;3pkt 3fpkt"];
613--921[label="1;63pkt 63fpkt"];
613--1913[label="1;63pkt 63fpkt"];
825--1851[label="1;99pkt 99fpkt"];
825--2498[label="1;99pkt 99fpkt"];
861--1873[label="1;12pkt 12fpkt"];
921--1913[label="1;63pkt 63fpkt"];
1354--2192[label="1;5pkt 5fpkt"];
1394--2219[label="1;11pkt 11fpkt"];
1851--2498[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.9.111" src_ip="215.67.66.73" src_port="80"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.129.38.23"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455358" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="216.129.38.23"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455268" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="170.82.42.227"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455358" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="68.169.1.101"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455448" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,901,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_19{
style=filled;
color=gray75;
148[label="214.222.151.242;s;1pkt 1fpkt", shape=diamond, color=yellow];
1707[label="214.222.151.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2424[label="214.222.151.242;1pkt 1fpkt", shape=invtriangle, color=brown];
2821[label="214.222.151.242;1pkt 1fpkt", shape=invhouse, color=bisque];
stat19[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.222.151.242:6699, 144.224.91.200:2535}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2535: (50%)&gt;];
}
148--1707[label="1;1pkt 1fpkt"];
148--2424[label="1;1pkt 1fpkt"];
148--2821[label="1;1pkt 1fpkt"];
1707--2424[label="1;1pkt 1fpkt"];
1707--2821[label="1;1pkt 1fpkt"];
2424--2821[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.91.200" dst_port="2535" src_ip="214.222.151.242" src_port="6699"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="130.131.232.93"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455088" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_21{
style=filled;
color=gray75;
194[label="132.118.104.16;s;74pkt 74fpkt", shape=diamond, color=yellow];
216[label="133.28.47.205;d;481pkt 481fpkt", shape=diamond, color=yellow];
394[label="69.166.131.1;s;57pkt 57fpkt", shape=diamond, color=yellow];
406[label="193.97.30.26;d;41pkt 41fpkt", shape=diamond, color=yellow];
616[label="213.136.74.91;s;18pkt 18fpkt", shape=diamond, color=yellow];
692[label="69.166.131.1;73pkt 73fpkt", shape=pentagon, color=darkviolet];
695[label="69.166.131.2;166pkt 166fpkt", shape=pentagon, color=darkviolet];
943[label="198.236.216.57;9pkt 9fpkt", shape=pentagon, color=darkviolet];
1100[label="213.136.74.91;18pkt 18fpkt", shape=pentagon, color=darkviolet];
1106[label="216.132.62.94;73pkt 73fpkt", shape=pentagon, color=darkviolet];
1155[label="201.104.18.105;33pkt 33fpkt", shape=pentagon, color=darkviolet];
1272[label="216.208.87.135;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1300[label="217.245.108.143;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1410[label="216.245.166.168;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1474[label="69.162.159.182;68pkt 68fpkt", shape=pentagon, color=darkviolet];
1477[label="132.118.110.183;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1690[label="213.107.88.237;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1757[label="69.166.131.1;73pkt 73fpkt", shape=invtriangle, color=brown];
1759[label="69.166.131.2;165pkt 165fpkt", shape=invtriangle, color=brown];
1925[label="198.236.216.57;10pkt 10fpkt", shape=invtriangle, color=brown];
2028[label="213.136.74.91;18pkt 18fpkt", shape=invtriangle, color=brown];
2033[label="216.132.62.94;73pkt 73fpkt", shape=invtriangle, color=brown];
2140[label="216.208.87.135;12pkt 12fpkt", shape=invtriangle, color=brown];
2261[label="132.118.110.183;19pkt 19fpkt", shape=invtriangle, color=brown];
2414[label="213.107.88.237;12pkt 12fpkt", shape=invtriangle, color=brown];
2590[label="213.136.74.91;18pkt 18fpkt", shape=invhouse, color=bisque];
2594[label="216.132.62.94;73pkt 73fpkt", shape=invhouse, color=bisque];
2727[label="132.118.110.183;19pkt 19fpkt", shape=invhouse, color=bisque];
2815[label="213.107.88.237;12pkt 12fpkt", shape=invhouse, color=bisque];
stat21[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.28.47.205:*}[55.1724%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4848%)&lt;BR/&gt; 110: (1.09923%)&lt;BR/&gt; 5002: (0.534759%)&lt;BR/&gt; 10008: (0.445633%)&lt;BR/&gt; 10473: (0.386215%)&gt;];
}
194--216[label="0.959459;71pkt 71fpkt"];
194--771[label="1;74pkt 74fpkt"];
216--394[label="0.0175439;1pkt 1fpkt"];
216--616[label="1;18pkt 18fpkt"];
216--654[label="0.122661;59pkt 59fpkt"];
216--668[label="0.122661;59pkt 59fpkt"];
216--682[label="0.122661;59pkt 59fpkt"];
216--692[label="0.0136986;1pkt 1fpkt"];
216--695[label="0.373494;62pkt 62fpkt"];
216--771[label="0.810606;107pkt 107fpkt"];
216--943[label="0.444444;4pkt 4fpkt"];
216--1100[label="1;18pkt 18fpkt"];
216--1106[label="0.0136986;1pkt 1fpkt"];
216--1155[label="0.545455;18pkt 18fpkt"];
216--1272[label="0.153846;2pkt 2fpkt"];
216--1300[label="1;10pkt 10fpkt"];
216--1354[label="0.2;1pkt 1fpkt"];
216--1410[label="0.307692;4pkt 4fpkt"];
216--1431[label="0.891304;82pkt 82fpkt"];
216--1477[label="0.736842;14pkt 14fpkt"];
216--1690[label="0.384615;5pkt 5fpkt"];
216--1757[label="0.0136986;1pkt 1fpkt"];
216--1759[label="0.375758;62pkt 62fpkt"];
216--1925[label="0.5;5pkt 5fpkt"];
216--2028[label="1;18pkt 18fpkt"];
216--2033[label="0.0136986;1pkt 1fpkt"];
216--2140[label="0.166667;2pkt 2fpkt"];
216--2192[label="0.2;1pkt 1fpkt"];
216--2261[label="0.736842;14pkt 14fpkt"];
216--2414[label="0.333333;4pkt 4fpkt"];
216--2590[label="1;18pkt 18fpkt"];
216--2594[label="0.0136986;1pkt 1fpkt"];
216--2727[label="0.736842;14pkt 14fpkt"];
216--2815[label="0.333333;4pkt 4fpkt"];
394--654[label="0.0877193;5pkt 5fpkt"];
394--668[label="0.0877193;5pkt 5fpkt"];
394--682[label="0.0877193;5pkt 5fpkt"];
394--692[label="0.982456;56pkt 56fpkt"];
394--1757[label="0.982456;56pkt 56fpkt"];
406--695[label="0.560976;23pkt 23fpkt"];
406--1207[label="0.357143;5pkt 5fpkt"];
406--1474[label="0.0487805;2pkt 2fpkt"];
406--1759[label="0.560976;23pkt 23fpkt"];
616--1100[label="1;18pkt 18fpkt"];
616--2028[label="1;18pkt 18fpkt"];
616--2590[label="1;18pkt 18fpkt"];
692--1757[label="1;73pkt 73fpkt"];
695--1759[label="1;165pkt 165fpkt"];
943--1925[label="1;9pkt 9fpkt"];
1100--2028[label="1;18pkt 18fpkt"];
1100--2590[label="1;18pkt 18fpkt"];
1106--2033[label="1;73pkt 73fpkt"];
1106--2594[label="1;73pkt 73fpkt"];
1272--2140[label="1;12pkt 12fpkt"];
1477--2261[label="1;19pkt 19fpkt"];
1477--2727[label="1;19pkt 19fpkt"];
1690--2414[label="1;12pkt 12fpkt"];
1690--2815[label="1;12pkt 12fpkt"];
2028--2590[label="1;18pkt 18fpkt"];
2033--2594[label="1;73pkt 73fpkt"];
2261--2727[label="1;19pkt 19fpkt"];
2414--2815[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.47.205" src_port="80"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="130.147.224.34"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455088" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="68.109.32.126"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455348" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_25{
style=filled;
color=gray75;
245[label="130.154.178.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
246[label="214.16.167.200;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat25[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.16.167.200:62145, 130.154.178.244:20}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62145: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
245--246[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.154.178.244" dst_port="20" src_ip="214.16.167.200" src_port="62145"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.94.22.204"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455358" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_27{
style=filled;
color=gray75;
155[label="69.193.30.191;s;14pkt 14fpkt", shape=diamond, color=yellow];
424[label="193.104.110.35;d;327pkt 327fpkt", shape=diamond, color=yellow];
500[label="70.210.164.94;s;15pkt 15fpkt", shape=diamond, color=yellow];
712[label="212.95.105.5;35pkt 35fpkt", shape=pentagon, color=darkviolet];
962[label="202.173.106.63;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1107[label="70.210.164.94;18pkt 18fpkt", shape=pentagon, color=darkviolet];
1144[label="197.122.186.102;127pkt 127fpkt", shape=pentagon, color=darkviolet];
1381[label="198.149.2.162;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1506[label="69.193.30.191;21pkt 21fpkt", shape=pentagon, color=darkviolet];
1522[label="216.208.116.195;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1634[label="213.187.28.220;43pkt 43fpkt", shape=pentagon, color=darkviolet];
1641[label="213.187.28.223;45pkt 45fpkt", shape=pentagon, color=darkviolet];
1739[label="193.137.83.250;8pkt 8fpkt", shape=pentagon, color=darkviolet];
1771[label="212.95.105.5;34pkt 34fpkt", shape=invtriangle, color=brown];
1940[label="202.173.106.63;12pkt 12fpkt", shape=invtriangle, color=brown];
2209[label="198.149.2.162;5pkt 5fpkt", shape=invtriangle, color=brown];
2283[label="69.193.30.191;21pkt 21fpkt", shape=invtriangle, color=brown];
2378[label="213.187.28.223;44pkt 44fpkt", shape=invtriangle, color=brown];
2445[label="193.137.83.250;7pkt 7fpkt", shape=invtriangle, color=brown];
2543[label="202.173.106.63;11pkt 11fpkt", shape=invhouse, color=bisque];
2695[label="198.149.2.162;4pkt 4fpkt", shape=invhouse, color=bisque];
2793[label="213.187.28.223;45pkt 45fpkt", shape=invhouse, color=bisque];
stat27[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 193.104.110.35:*}[70.5882%]&lt;BR/&gt;{197.122.186.102:80, *:*}[24.0987%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4322: (0.29274%)&lt;BR/&gt; 1536: (0.29274%)&lt;BR/&gt; 4977: (0.234192%)&lt;BR/&gt; 4976: (0.234192%)&gt;];
}
155--282[label="0.142857;2pkt 2fpkt"];
155--424[label="0.5;7pkt 7fpkt"];
155--654[label="0.214286;3pkt 3fpkt"];
155--668[label="0.214286;3pkt 3fpkt"];
155--682[label="0.214286;3pkt 3fpkt"];
155--1506[label="1;14pkt 14fpkt"];
155--2283[label="1;14pkt 14fpkt"];
424--500[label="0.8;12pkt 12fpkt"];
424--654[label="0.134557;44pkt 44fpkt"];
424--668[label="0.134557;44pkt 44fpkt"];
424--682[label="0.134557;44pkt 44fpkt"];
424--694[label="1;2pkt 2fpkt"];
424--712[label="0.0571429;2pkt 2fpkt"];
424--962[label="0.636364;7pkt 7fpkt"];
424--967[label="1;10pkt 10fpkt"];
424--1106[label="0.0136986;1pkt 1fpkt"];
424--1107[label="0.666667;12pkt 12fpkt"];
424--1112[label="0.0251046;6pkt 6fpkt"];
424--1142[label="0.433333;13pkt 13fpkt"];
424--1144[label="0.456693;58pkt 58fpkt"];
424--1253[label="0.0434783;1pkt 1fpkt"];
424--1323[label="0.15;3pkt 3fpkt"];
424--1381[label="1;4pkt 4fpkt"];
424--1445[label="0.944444;34pkt 34fpkt"];
424--1504[label="0.2;1pkt 1fpkt"];
424--1506[label="0.333333;7pkt 7fpkt"];
424--1522[label="1;3pkt 3fpkt"];
424--1634[label="0.186047;8pkt 8fpkt"];
424--1641[label="0.177778;8pkt 8fpkt"];
424--1739[label="0.75;6pkt 6fpkt"];
424--1771[label="0.0294118;1pkt 1fpkt"];
424--1940[label="0.666667;8pkt 8fpkt"];
424--1943[label="1;9pkt 9fpkt"];
424--2033[label="0.0136986;1pkt 1fpkt"];
424--2035[label="0.0251046;6pkt 6fpkt"];
424--2054[label="0.433333;13pkt 13fpkt"];
424--2125[label="0.0434783;1pkt 1fpkt"];
424--2173[label="0.157895;3pkt 3fpkt"];
424--2209[label="1;5pkt 5fpkt"];
424--2244[label="0.942857;33pkt 33fpkt"];
424--2281[label="0.2;1pkt 1fpkt"];
424--2283[label="0.333333;7pkt 7fpkt"];
424--2378[label="0.159091;7pkt 7fpkt"];
424--2445[label="0.714286;5pkt 5fpkt"];
424--2543[label="0.636364;7pkt 7fpkt"];
424--2594[label="0.0136986;1pkt 1fpkt"];
424--2675[label="0.15;3pkt 3fpkt"];
424--2695[label="1;4pkt 4fpkt"];
424--2740[label="0.2;1pkt 1fpkt"];
424--2793[label="0.177778;8pkt 8fpkt"];
500--1107[label="1;15pkt 15fpkt"];
712--1771[label="1;34pkt 34fpkt"];
962--1940[label="1;11pkt 11fpkt"];
962--2543[label="1;11pkt 11fpkt"];
1381--2209[label="1;4pkt 4fpkt"];
1381--2695[label="1;4pkt 4fpkt"];
1506--2283[label="1;21pkt 21fpkt"];
1641--2378[label="1;44pkt 44fpkt"];
1641--2793[label="1;45pkt 45fpkt"];
1739--2445[label="1;7pkt 7fpkt"];
1940--2543[label="1;11pkt 11fpkt"];
2209--2695[label="1;4pkt 4fpkt"];
2378--2793[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter src_ip="197.122.186.102" src_port="80"/>
      <filter dst_ip="193.104.110.35" src_port="80"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_28{
style=filled;
color=gray75;
124[label="1.37.47.250;s;1pkt 1fpkt", shape=diamond, color=yellow];
286[label="133.28.32.113;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat28[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.37.47.250:6699, 133.28.32.113:1047}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1047: (50%)&gt;];
}
124--286[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.32.113" dst_port="1047" src_ip="1.37.47.250" src_port="6699"/>
    </slice>
    <from sec="1005454807" usec="0"/>
    <to sec="1005454933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_29{
style=filled;
color=gray75;
192[label="70.138.34.171;s;6pkt 6fpkt", shape=diamond, color=yellow];
287[label="144.224.88.111;d;87pkt 87fpkt", shape=diamond, color=yellow];
523[label="215.145.146.119;s;178pkt 178fpkt", shape=diamond, color=yellow];
583[label="130.131.3.143;d;46pkt 46fpkt", shape=diamond, color=yellow];
801[label="216.91.80.25;1pkt 1fpkt", shape=pentagon, color=darkviolet];
852[label="69.166.218.36;2pkt 2fpkt", shape=pentagon, color=darkviolet];
858[label="216.83.232.37;9pkt 9fpkt", shape=pentagon, color=darkviolet];
1164[label="215.145.146.107;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1214[label="215.145.146.119;207pkt 207fpkt", shape=pentagon, color=darkviolet];
1687[label="216.132.56.235;79pkt 79fpkt", shape=pentagon, color=darkviolet];
1866[label="69.166.218.36;2pkt 2fpkt", shape=invtriangle, color=brown];
1871[label="216.83.232.37;10pkt 10fpkt", shape=invtriangle, color=brown];
2412[label="216.132.56.235;78pkt 78fpkt", shape=invtriangle, color=brown];
2509[label="216.83.232.37;10pkt 10fpkt", shape=invhouse, color=bisque];
2813[label="216.132.56.235;78pkt 78fpkt", shape=invhouse, color=bisque];
stat29[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.145.146.119:80, *:*}[49.2823%]&lt;BR/&gt;{*:*, 144.224.88.111:*}[20.8134%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7069%)&lt;BR/&gt; 81: (0.800493%)&lt;BR/&gt; 1093: (0.492611%)&lt;BR/&gt; 0: (0.492611%)&lt;BR/&gt; 1111: (0.431034%)&gt;];
}
192--287[label="1;6pkt 6fpkt"];
287--523[label="0.0689655;6pkt 6fpkt"];
287--654[label="0.0574713;5pkt 5fpkt"];
287--668[label="0.0574713;5pkt 5fpkt"];
287--682[label="0.0574713;5pkt 5fpkt"];
287--852[label="1;2pkt 2fpkt"];
287--858[label="0.555556;5pkt 5fpkt"];
287--1164[label="0.105263;2pkt 2fpkt"];
287--1214[label="0.0689655;6pkt 6fpkt"];
287--1394[label="0.0833333;1pkt 1fpkt"];
287--1433[label="0.015873;1pkt 1fpkt"];
287--1687[label="0.151899;12pkt 12fpkt"];
287--1866[label="1;2pkt 2fpkt"];
287--1871[label="0.6;6pkt 6fpkt"];
287--2219[label="0.0909091;1pkt 1fpkt"];
287--2238[label="0.015873;1pkt 1fpkt"];
287--2412[label="0.153846;12pkt 12fpkt"];
287--2509[label="0.6;6pkt 6fpkt"];
287--2716[label="0.016129;1pkt 1fpkt"];
287--2813[label="0.153846;12pkt 12fpkt"];
523--572[label="0.2;6pkt 6fpkt"];
523--583[label="0.0869565;4pkt 4fpkt"];
523--627[label="0.011236;2pkt 2fpkt"];
523--642[label="0.011236;2pkt 2fpkt"];
523--654[label="0.0786517;14pkt 14fpkt"];
523--668[label="0.0786517;14pkt 14fpkt"];
523--682[label="0.0786517;14pkt 14fpkt"];
523--1214[label="1;178pkt 178fpkt"];
583--791[label="0.181818;2pkt 2fpkt"];
583--801[label="1;1pkt 1fpkt"];
583--869[label="0.047619;1pkt 1fpkt"];
583--1115[label="0.521739;24pkt 24fpkt"];
583--1214[label="0.0869565;4pkt 4fpkt"];
583--1438[label="0.181818;4pkt 4fpkt"];
583--1881[label="0.047619;1pkt 1fpkt"];
583--2038[label="0.521739;24pkt 24fpkt"];
583--2597[label="0.521739;24pkt 24fpkt"];
852--1866[label="1;2pkt 2fpkt"];
858--1871[label="1;9pkt 9fpkt"];
858--2509[label="1;9pkt 9fpkt"];
1687--2412[label="1;78pkt 78fpkt"];
1687--2813[label="1;78pkt 78fpkt"];
1871--2509[label="1;10pkt 10fpkt"];
2412--2813[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.88.111"/>
      <filter src_ip="215.145.146.119" src_port="80"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,901,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_30{
style=filled;
color=gray75;
79[label="144.224.91.21;d;63pkt 63fpkt", shape=diamond, color=yellow];
260[label="192.196.60.164;s;1pkt 1fpkt", shape=diamond, color=yellow];
302[label="209.24.248.167;s;1pkt 1fpkt", shape=diamond, color=yellow];
327[label="2.26.196.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
578[label="69.161.190.237;s;1pkt 1fpkt", shape=diamond, color=yellow];
846[label="209.53.119.35;2pkt 2fpkt", shape=pentagon, color=darkviolet];
987[label="193.16.72.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1083[label="202.90.166.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1408[label="50.129.173.167;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1541[label="69.197.148.198;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1604[label="209.33.104.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2020[label="202.90.166.87;1pkt 1fpkt", shape=invtriangle, color=brown];
2305[label="69.197.148.198;3pkt 3fpkt", shape=invtriangle, color=brown];
2348[label="209.33.104.211;1pkt 1fpkt", shape=invtriangle, color=brown];
2513[label="193.16.193.42;1pkt 1fpkt", shape=invhouse, color=bisque];
2552[label="193.16.72.68;1pkt 1fpkt", shape=invhouse, color=bisque];
2752[label="69.197.148.198;3pkt 3fpkt", shape=invhouse, color=bisque];
stat30[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1214, 144.224.91.21:*}[46.875%]&lt;BR/&gt;{*:*, 144.224.91.21:1214}[45.3125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (47.093%)&lt;BR/&gt; 5000: (2.32558%)&lt;BR/&gt; 1061: (2.32558%)&lt;BR/&gt; 1050: (2.32558%)&lt;BR/&gt; 0: (2.32558%)&gt;];
}
79--260[label="1;1pkt 1fpkt"];
79--302[label="1;1pkt 1fpkt"];
79--327[label="1;1pkt 1fpkt"];
79--515[label="0.015873;1pkt 1fpkt"];
79--578[label="1;1pkt 1fpkt"];
79--636[label="0.015873;1pkt 1fpkt"];
79--651[label="0.015873;1pkt 1fpkt"];
79--846[label="0.5;1pkt 1fpkt"];
79--897[label="1;1pkt 1fpkt"];
79--987[label="1;1pkt 1fpkt"];
79--1083[label="1;1pkt 1fpkt"];
79--1103[label="1;1pkt 1fpkt"];
79--1364[label="0.015873;1pkt 1fpkt"];
79--1408[label="1;1pkt 1fpkt"];
79--1434[label="1;1pkt 1fpkt"];
79--1541[label="1;3pkt 3fpkt"];
79--1604[label="1;1pkt 1fpkt"];
79--1902[label="1;1pkt 1fpkt"];
79--2020[label="1;1pkt 1fpkt"];
79--2031[label="1;1pkt 1fpkt"];
79--2239[label="1;1pkt 1fpkt"];
79--2305[label="1;3pkt 3fpkt"];
79--2348[label="1;1pkt 1fpkt"];
79--2513[label="1;1pkt 1fpkt"];
79--2552[label="1;1pkt 1fpkt"];
79--2752[label="1;3pkt 3fpkt"];
987--2552[label="1;1pkt 1fpkt"];
1083--2020[label="1;1pkt 1fpkt"];
1541--2305[label="1;3pkt 3fpkt"];
1541--2752[label="1;3pkt 3fpkt"];
1604--2348[label="1;1pkt 1fpkt"];
2305--2752[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.91.21" src_port="1214"/>
      <filter dst_ip="144.224.91.21" dst_port="1214"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_31{
style=filled;
color=gray75;
203[label="133.28.86.50;d;93pkt 93fpkt", shape=diamond, color=yellow];
878[label="70.192.143.44;2pkt 2fpkt", shape=pentagon, color=darkviolet];
957[label="209.78.3.61;16pkt 16fpkt", shape=pentagon, color=darkviolet];
1102[label="50.154.210.92;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1220[label="217.196.99.121;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1371[label="43.12.110.158;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1439[label="68.117.6.174;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1494[label="208.103.211.188;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1650[label="43.56.143.225;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1670[label="208.62.173.230;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1688[label="1.98.46.236;12pkt 12fpkt", shape=pentagon, color=darkviolet];
1888[label="70.192.143.44;2pkt 2fpkt", shape=invtriangle, color=brown];
1936[label="209.78.3.61;15pkt 15fpkt", shape=invtriangle, color=brown];
2030[label="50.154.210.92;10pkt 10fpkt", shape=invtriangle, color=brown];
2104[label="217.196.99.121;1pkt 1fpkt", shape=invtriangle, color=brown];
2272[label="208.103.211.188;3pkt 3fpkt", shape=invtriangle, color=brown];
2413[label="1.98.46.236;11pkt 11fpkt", shape=invtriangle, color=brown];
2518[label="70.192.143.44;21pkt 21fpkt", shape=invhouse, color=bisque];
2540[label="209.78.3.61;15pkt 15fpkt", shape=invhouse, color=bisque];
2592[label="50.154.210.92;10pkt 10fpkt", shape=invhouse, color=bisque];
2639[label="217.196.99.121;1pkt 1fpkt", shape=invhouse, color=bisque];
2733[label="208.103.211.188;2pkt 2fpkt", shape=invhouse, color=bisque];
2814[label="1.98.46.236;11pkt 11fpkt", shape=invhouse, color=bisque];
stat31[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8888, 133.28.86.50:*}[46.9512%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (45.4198%)&lt;BR/&gt; 8877: (1.52672%)&lt;BR/&gt; 0: (1.52672%)&lt;BR/&gt; 7777: (0.954198%)&lt;BR/&gt; 64919: (0.763359%)&gt;];
}
203--311[label="0.2;1pkt 1fpkt"];
203--422[label="0.2;2pkt 2fpkt"];
203--559[label="0.125;1pkt 1fpkt"];
203--594[label="0.166667;1pkt 1fpkt"];
203--713[label="0.153846;2pkt 2fpkt"];
203--739[label="0.030303;1pkt 1fpkt"];
203--878[label="0.5;1pkt 1fpkt"];
203--957[label="0.125;2pkt 2fpkt"];
203--1102[label="0.1;1pkt 1fpkt"];
203--1189[label="0.5;1pkt 1fpkt"];
203--1220[label="1;1pkt 1fpkt"];
203--1371[label="0.5;1pkt 1fpkt"];
203--1439[label="0.25;1pkt 1fpkt"];
203--1494[label="0.5;1pkt 1fpkt"];
203--1650[label="0.142857;1pkt 1fpkt"];
203--1670[label="0.0909091;1pkt 1fpkt"];
203--1688[label="0.166667;2pkt 2fpkt"];
203--1888[label="0.5;1pkt 1fpkt"];
203--1936[label="0.133333;2pkt 2fpkt"];
203--2030[label="0.1;1pkt 1fpkt"];
203--2086[label="0.333333;1pkt 1fpkt"];
203--2104[label="1;1pkt 1fpkt"];
203--2272[label="0.666667;2pkt 2fpkt"];
203--2413[label="0.181818;2pkt 2fpkt"];
203--2518[label="0.190476;4pkt 4fpkt"];
203--2540[label="0.133333;2pkt 2fpkt"];
203--2592[label="0.1;1pkt 1fpkt"];
203--2639[label="1;1pkt 1fpkt"];
203--2733[label="0.5;1pkt 1fpkt"];
203--2814[label="0.181818;2pkt 2fpkt"];
878--1888[label="1;2pkt 2fpkt"];
878--2518[label="1;2pkt 2fpkt"];
957--1936[label="1;15pkt 15fpkt"];
957--2540[label="1;15pkt 15fpkt"];
1102--2030[label="1;10pkt 10fpkt"];
1102--2592[label="1;10pkt 10fpkt"];
1220--2104[label="1;1pkt 1fpkt"];
1220--2639[label="1;1pkt 1fpkt"];
1494--2272[label="1;2pkt 2fpkt"];
1494--2733[label="1;2pkt 2fpkt"];
1688--2413[label="1;11pkt 11fpkt"];
1688--2814[label="1;11pkt 11fpkt"];
1888--2518[label="1;2pkt 2fpkt"];
1936--2540[label="1;15pkt 15fpkt"];
2030--2592[label="1;10pkt 10fpkt"];
2104--2639[label="1;1pkt 1fpkt"];
2272--2733[label="1;2pkt 2fpkt"];
2413--2814[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.86.50" src_port="8888"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.99.145.37"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455268" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="68.22.132.202"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455185" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_34{
style=filled;
color=gray75;
77[label="144.224.37.4;d;4pkt 4fpkt", shape=diamond, color=yellow];
353[label="69.118.38.49;s;1pkt 1fpkt", shape=diamond, color=yellow];
520[label="198.236.146.187;s;1pkt 1fpkt", shape=diamond, color=yellow];
903[label="69.118.38.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1469[label="68.1.178.180;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2257[label="68.1.178.180;1pkt 1fpkt", shape=invtriangle, color=brown];
2723[label="68.1.178.180;1pkt 1fpkt", shape=invhouse, color=bisque];
stat34[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.118.38.49:6699, 144.224.37.4:1642}[25%]&lt;BR/&gt;{0.169.243.119:6699, 144.224.37.4:1644}[25%]&lt;BR/&gt;{68.1.178.180:6699, 144.224.37.4:1614}[25%]&lt;BR/&gt;{198.236.146.187:6699, 144.224.37.4:1636}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1614: (20%)&lt;BR/&gt; 1642: (15%)&lt;BR/&gt; 1636: (10%)&lt;BR/&gt; 1644: (5%)&gt;];
}
77--353[label="1;1pkt 1fpkt"];
77--520[label="1;1pkt 1fpkt"];
77--903[label="1;1pkt 1fpkt"];
77--1469[label="1;1pkt 1fpkt"];
77--2257[label="1;1pkt 1fpkt"];
77--2723[label="1;1pkt 1fpkt"];
353--903[label="1;1pkt 1fpkt"];
1469--2257[label="1;1pkt 1fpkt"];
1469--2723[label="1;1pkt 1fpkt"];
2257--2723[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.37.4" dst_port="1636" src_ip="198.236.146.187" src_port="6699"/>
      <filter dst_ip="144.224.37.4" dst_port="1614" src_ip="68.1.178.180" src_port="6699"/>
      <filter dst_ip="144.224.37.4" dst_port="1644" src_ip="0.169.243.119" src_port="6699"/>
      <filter dst_ip="144.224.37.4" dst_port="1642" src_ip="69.118.38.49" src_port="6699"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.62.223.44"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455358" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
96[label="193.104.110.11;d;456pkt 456fpkt", shape=diamond, color=yellow];
361[label="199.129.229.96;s;31pkt 31fpkt", shape=diamond, color=yellow];
507[label="213.194.152.231;s;11pkt 11fpkt", shape=diamond, color=yellow];
837[label="198.28.208.34;34pkt 34fpkt", shape=pentagon, color=darkviolet];
936[label="198.28.210.55;36pkt 36fpkt", shape=pentagon, color=darkviolet];
988[label="202.210.143.68;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1124[label="199.129.229.96;33pkt 33fpkt", shape=pentagon, color=darkviolet];
1151[label="134.0.139.104;27pkt 27fpkt", shape=pentagon, color=darkviolet];
1294[label="208.237.172.142;18pkt 18fpkt", shape=pentagon, color=darkviolet];
1301[label="216.245.212.143;14pkt 14fpkt", shape=pentagon, color=darkviolet];
1412[label="216.245.213.168;40pkt 40fpkt", shape=pentagon, color=darkviolet];
1421[label="69.45.135.170;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1534[label="213.117.99.197;63pkt 63fpkt", shape=pentagon, color=darkviolet];
1575[label="154.48.42.204;41pkt 41fpkt", shape=pentagon, color=darkviolet];
1651[label="213.194.152.225;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1746[label="69.11.67.252;14pkt 14fpkt", shape=pentagon, color=darkviolet];
1858[label="198.28.208.34;34pkt 34fpkt", shape=invtriangle, color=brown];
2059[label="134.0.139.104;26pkt 26fpkt", shape=invtriangle, color=brown];
2154[label="208.237.172.142;17pkt 17fpkt", shape=invtriangle, color=brown];
2159[label="216.245.212.143;14pkt 14fpkt", shape=invtriangle, color=brown];
2301[label="213.117.99.197;62pkt 62fpkt", shape=invtriangle, color=brown];
2331[label="154.48.42.204;40pkt 40fpkt", shape=invtriangle, color=brown];
2502[label="198.28.208.34;34pkt 34fpkt", shape=invhouse, color=bisque];
2662[label="208.237.172.142;17pkt 17fpkt", shape=invhouse, color=bisque];
2664[label="216.245.212.143;14pkt 14fpkt", shape=invhouse, color=bisque];
2708[label="216.245.213.168;40pkt 40fpkt", shape=invhouse, color=bisque];
2770[label="154.48.42.204;36pkt 36fpkt", shape=invhouse, color=bisque];
2808[label="213.194.152.231;6pkt 6fpkt", shape=invhouse, color=bisque];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 193.104.110.11:*}[70.7602%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7473%)&lt;BR/&gt; 2295: (0.210615%)&lt;BR/&gt; 40615: (0.168492%)&lt;BR/&gt; 40566: (0.168492%)&lt;BR/&gt; 40565: (0.168492%)&gt;];
}
96--361[label="0.83871;26pkt 26fpkt"];
96--396[label="0.00460829;1pkt 1fpkt"];
96--507[label="1;11pkt 11fpkt"];
96--654[label="0.0767544;35pkt 35fpkt"];
96--668[label="0.0767544;35pkt 35fpkt"];
96--682[label="0.0767544;35pkt 35fpkt"];
96--837[label="0.0294118;1pkt 1fpkt"];
96--936[label="0.138889;5pkt 5fpkt"];
96--988[label="1;3pkt 3fpkt"];
96--1124[label="0.787879;26pkt 26fpkt"];
96--1151[label="0.259259;7pkt 7fpkt"];
96--1294[label="0.333333;6pkt 6fpkt"];
96--1301[label="0.714286;10pkt 10fpkt"];
96--1412[label="0.65;26pkt 26fpkt"];
96--1421[label="0.153846;2pkt 2fpkt"];
96--1534[label="0.047619;3pkt 3fpkt"];
96--1575[label="0.243902;10pkt 10fpkt"];
96--1651[label="0.923077;12pkt 12fpkt"];
96--1746[label="0.714286;10pkt 10fpkt"];
96--1858[label="0.0294118;1pkt 1fpkt"];
96--2059[label="0.269231;7pkt 7fpkt"];
96--2154[label="0.294118;5pkt 5fpkt"];
96--2159[label="0.714286;10pkt 10fpkt"];
96--2301[label="0.0483871;3pkt 3fpkt"];
96--2331[label="0.225;9pkt 9fpkt"];
96--2502[label="0.0294118;1pkt 1fpkt"];
96--2662[label="0.294118;5pkt 5fpkt"];
96--2664[label="0.714286;10pkt 10fpkt"];
96--2708[label="0.65;26pkt 26fpkt"];
96--2770[label="0.138889;5pkt 5fpkt"];
96--2808[label="1;6pkt 6fpkt"];
361--654[label="0.0967742;3pkt 3fpkt"];
361--668[label="0.0967742;3pkt 3fpkt"];
361--682[label="0.0967742;3pkt 3fpkt"];
361--1124[label="1;31pkt 31fpkt"];
507--2808[label="0.5;3pkt 3fpkt"];
837--1858[label="1;34pkt 34fpkt"];
837--2502[label="1;34pkt 34fpkt"];
1151--2059[label="1;26pkt 26fpkt"];
1294--2154[label="1;17pkt 17fpkt"];
1294--2662[label="1;17pkt 17fpkt"];
1301--2159[label="1;14pkt 14fpkt"];
1301--2664[label="1;14pkt 14fpkt"];
1412--2708[label="1;40pkt 40fpkt"];
1534--2301[label="1;62pkt 62fpkt"];
1575--2331[label="1;40pkt 40fpkt"];
1575--2770[label="1;36pkt 36fpkt"];
1858--2502[label="1;34pkt 34fpkt"];
2154--2662[label="1;17pkt 17fpkt"];
2159--2664[label="1;14pkt 14fpkt"];
2331--2770[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="193.104.110.11" src_port="80"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
169[label="68.169.1.101;d;9pkt 9fpkt", shape=diamond, color=yellow];
314[label="160.62.120.81;s;19pkt 19fpkt", shape=diamond, color=yellow];
370[label="43.128.13.191;d;1pkt 1fpkt", shape=diamond, color=yellow];
474[label="69.53.112.19;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.62.120.81:*, 68.169.1.101:*}[47.3684%]&lt;BR/&gt;{160.62.120.81:*, 69.53.112.19:1214}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (21.2121%)&lt;BR/&gt; 21: (6.06061%)&lt;BR/&gt; 2197: (3.0303%)&lt;BR/&gt; 2196: (3.0303%)&lt;BR/&gt; 2173: (3.0303%)&gt;];
}
169--314[label="1;9pkt 9fpkt"];
314--370[label="1;1pkt 1fpkt"];
314--474[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="68.169.1.101" src_ip="160.62.120.81"/>
      <filter dst_ip="69.53.112.19" dst_port="1214" src_ip="160.62.120.81"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="43.128.13.191"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455268" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
80[label="144.224.91.21;s;20pkt 20fpkt", shape=diamond, color=yellow];
86[label="209.33.104.211;d;1pkt 1fpkt", shape=diamond, color=yellow];
259[label="192.196.60.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
379[label="69.197.148.198;d;4pkt 4fpkt", shape=diamond, color=yellow];
392[label="195.148.129.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
420[label="202.90.166.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.91.21:*, *:1214}[52.1739%]&lt;BR/&gt;{144.224.91.21:1214, *:*}[43.4783%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (48.2143%)&lt;BR/&gt; 34522: (3.57143%)&lt;BR/&gt; 27960: (3.57143%)&lt;BR/&gt; 4816: (3.57143%)&lt;BR/&gt; 2244: (3.57143%)&gt;];
}
80--86[label="1;1pkt 1fpkt"];
80--259[label="1;1pkt 1fpkt"];
80--379[label="0.25;1pkt 1fpkt"];
80--392[label="1;1pkt 1fpkt"];
80--420[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="144.224.91.21" src_port="1214"/>
      <filter dst_port="1214" src_ip="144.224.91.21"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="130.131.17.251"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455178" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_41{
style=filled;
color=gray75;
266[label="216.82.111.238;s;27pkt 27fpkt", shape=diamond, color=yellow];
398[label="133.28.118.208;d;61pkt 61fpkt", shape=diamond, color=yellow];
773[label="198.28.219.16;17pkt 17fpkt", shape=pentagon, color=darkviolet];
845[label="216.82.111.35;37pkt 37fpkt", shape=pentagon, color=darkviolet];
863[label="2.176.177.39;18pkt 18fpkt", shape=pentagon, color=darkviolet];
1693[label="216.82.111.238;27pkt 27fpkt", shape=pentagon, color=darkviolet];
1813[label="198.28.219.16;17pkt 17fpkt", shape=invtriangle, color=brown];
1863[label="216.82.111.35;36pkt 36fpkt", shape=invtriangle, color=brown];
1875[label="2.176.177.39;18pkt 18fpkt", shape=invtriangle, color=brown];
2416[label="216.82.111.238;27pkt 27fpkt", shape=invtriangle, color=brown];
stat41[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.28.118.208:*}[46.6165%]&lt;BR/&gt;{216.82.111.35:80, 130.131.142.169:*}[20.3008%]&lt;BR/&gt;{216.82.111.238:80, *:*}[20.3008%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1228%)&lt;BR/&gt; 1234: (0.701754%)&lt;BR/&gt; 1220: (0.701754%)&lt;BR/&gt; 1219: (0.701754%)&lt;BR/&gt; 1210: (0.701754%)&gt;];
}
266--398[label="0.148148;4pkt 4fpkt"];
266--654[label="0.444444;12pkt 12fpkt"];
266--668[label="0.444444;12pkt 12fpkt"];
266--682[label="0.444444;12pkt 12fpkt"];
266--1693[label="1;27pkt 27fpkt"];
266--2416[label="1;27pkt 27fpkt"];
398--773[label="0.176471;3pkt 3fpkt"];
398--791[label="0.0909091;1pkt 1fpkt"];
398--845[label="0.216216;8pkt 8fpkt"];
398--863[label="0.666667;12pkt 12fpkt"];
398--1410[label="0.0769231;1pkt 1fpkt"];
398--1693[label="0.148148;4pkt 4fpkt"];
398--1813[label="0.176471;3pkt 3fpkt"];
398--1863[label="0.194444;7pkt 7fpkt"];
398--1875[label="0.666667;12pkt 12fpkt"];
398--2416[label="0.148148;4pkt 4fpkt"];
773--1813[label="1;17pkt 17fpkt"];
845--1863[label="1;36pkt 36fpkt"];
863--1875[label="1;18pkt 18fpkt"];
1693--2416[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="216.82.111.238" src_port="80"/>
      <filter dst_ip="133.28.118.208" src_port="80"/>
      <filter dst_ip="130.131.142.169" src_ip="216.82.111.35" src_port="80"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="69.82.196.113"/>
      <from sec="1005454856" usec="0"/>
      <to sec="1005455356" usec="0"/>
    </slice>
    <from sec="1005454856" usec="0"/>
    <to sec="1005455356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="130.131.0.90"/>
      <from sec="1005454872" usec="0"/>
      <to sec="1005455443" usec="0"/>
    </slice>
    <from sec="1005454872" usec="0"/>
    <to sec="1005455443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="69.27.160.39"/>
      <from sec="1005455048" usec="0"/>
      <to sec="1005455178" usec="0"/>
    </slice>
    <from sec="1005455048" usec="0"/>
    <to sec="1005455178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="69.68.105.185"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455268" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
204[label="133.28.86.50;s;125pkt 125fpkt", shape=diamond, color=yellow];
309[label="133.28.86.129;s;80pkt 80fpkt", shape=diamond, color=yellow];
310[label="1.23.133.202;d;5pkt 5fpkt", shape=diamond, color=yellow];
313[label="1.98.46.236;d;11pkt 11fpkt", shape=diamond, color=yellow];
417[label="69.4.220.170;d;1pkt 1fpkt", shape=diamond, color=yellow];
421[label="68.0.226.87;d;10pkt 10fpkt", shape=diamond, color=yellow];
425[label="217.196.99.120;d;14pkt 14fpkt", shape=diamond, color=yellow];
426[label="43.56.143.225;d;7pkt 7fpkt", shape=diamond, color=yellow];
518[label="193.97.216.19;s;57pkt 57fpkt", shape=diamond, color=yellow];
558[label="1.3.81.112;d;8pkt 8fpkt", shape=diamond, color=yellow];
592[label="144.224.91.239;s;33pkt 33fpkt", shape=diamond, color=yellow];
593[label="208.62.217.113;d;6pkt 6fpkt", shape=diamond, color=yellow];
724[label="133.28.91.7;35pkt 35fpkt", shape=pentagon, color=darkviolet];
815[label="133.28.91.29;228pkt 228fpkt", shape=pentagon, color=darkviolet];
991[label="130.131.232.68;60pkt 60fpkt", shape=pentagon, color=darkviolet];
997[label="133.28.42.70;12pkt 12fpkt", shape=pentagon, color=darkviolet];
1247[label="133.28.86.129;103pkt 103fpkt", shape=pentagon, color=darkviolet];
1293[label="144.224.154.142;17pkt 17fpkt", shape=pentagon, color=darkviolet];
1309[label="193.97.210.145;62pkt 62fpkt", shape=pentagon, color=darkviolet];
1424[label="133.28.86.171;35pkt 35fpkt", shape=pentagon, color=darkviolet];
1682[label="193.97.210.233;34pkt 34fpkt", shape=pentagon, color=darkviolet];
1698[label="144.224.91.239;36pkt 36fpkt", shape=pentagon, color=darkviolet];
1779[label="133.28.91.7;34pkt 34fpkt", shape=invtriangle, color=brown];
1843[label="133.28.91.29;227pkt 227fpkt", shape=invtriangle, color=brown];
1960[label="130.131.232.68;60pkt 60fpkt", shape=invtriangle, color=brown];
1965[label="133.28.42.70;12pkt 12fpkt", shape=invtriangle, color=brown];
2232[label="133.28.86.171;35pkt 35fpkt", shape=invtriangle, color=brown];
2410[label="193.97.210.233;33pkt 33fpkt", shape=invtriangle, color=brown];
2495[label="133.28.91.29;228pkt 228fpkt", shape=invhouse, color=bisque];
2554[label="130.131.232.68;60pkt 60fpkt", shape=invhouse, color=bisque];
2558[label="133.28.42.70;12pkt 12fpkt", shape=invhouse, color=bisque];
2713[label="133.28.86.171;35pkt 35fpkt", shape=invhouse, color=bisque];
2811[label="193.97.210.233;34pkt 34fpkt", shape=invhouse, color=bisque];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:8888}[68.3313%]&lt;BR/&gt;{133.28.91.29:*, *:*}[27.771%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (32.8188%)&lt;BR/&gt; 7777: (7.86164%)&lt;BR/&gt; 5555: (3.08748%)&lt;BR/&gt; 4444: (1.48656%)&lt;BR/&gt; 6699: (0.943396%)&gt;];
}
204--310[label="0.2;1pkt 1fpkt"];
204--313[label="0.181818;2pkt 2fpkt"];
204--421[label="0.2;2pkt 2fpkt"];
204--425[label="0.142857;2pkt 2fpkt"];
204--426[label="0.142857;1pkt 1fpkt"];
204--558[label="0.125;1pkt 1fpkt"];
204--593[label="0.166667;1pkt 1fpkt"];
309--310[label="0.2;1pkt 1fpkt"];
309--313[label="0.0909091;1pkt 1fpkt"];
309--421[label="0.1;1pkt 1fpkt"];
309--425[label="0.142857;2pkt 2fpkt"];
309--426[label="0.142857;1pkt 1fpkt"];
309--593[label="0.166667;1pkt 1fpkt"];
309--1247[label="1;80pkt 80fpkt"];
310--378[label="0.2;1pkt 1fpkt"];
310--518[label="0.2;1pkt 1fpkt"];
310--1247[label="0.2;1pkt 1fpkt"];
313--518[label="0.0909091;1pkt 1fpkt"];
313--724[label="0.0909091;1pkt 1fpkt"];
313--815[label="0.181818;2pkt 2fpkt"];
313--1247[label="0.0909091;1pkt 1fpkt"];
313--1608[label="0.0909091;1pkt 1fpkt"];
313--1682[label="0.0909091;1pkt 1fpkt"];
313--1779[label="0.0909091;1pkt 1fpkt"];
313--1843[label="0.181818;2pkt 2fpkt"];
313--2351[label="0.0909091;1pkt 1fpkt"];
313--2410[label="0.0909091;1pkt 1fpkt"];
313--2495[label="0.181818;2pkt 2fpkt"];
313--2811[label="0.0909091;1pkt 1fpkt"];
417--518[label="1;1pkt 1fpkt"];
421--991[label="0.1;1pkt 1fpkt"];
421--1247[label="0.1;1pkt 1fpkt"];
421--1293[label="0.1;1pkt 1fpkt"];
421--1309[label="0.1;1pkt 1fpkt"];
421--1960[label="0.1;1pkt 1fpkt"];
421--2554[label="0.1;1pkt 1fpkt"];
425--592[label="0.0714286;1pkt 1fpkt"];
425--724[label="0.0714286;1pkt 1fpkt"];
425--815[label="0.142857;2pkt 2fpkt"];
425--997[label="0.0833333;1pkt 1fpkt"];
425--1247[label="0.142857;2pkt 2fpkt"];
425--1424[label="0.0714286;1pkt 1fpkt"];
425--1698[label="0.0714286;1pkt 1fpkt"];
425--1779[label="0.0714286;1pkt 1fpkt"];
425--1843[label="0.142857;2pkt 2fpkt"];
425--1965[label="0.0833333;1pkt 1fpkt"];
425--2232[label="0.0714286;1pkt 1fpkt"];
425--2495[label="0.142857;2pkt 2fpkt"];
425--2558[label="0.0833333;1pkt 1fpkt"];
425--2713[label="0.0714286;1pkt 1fpkt"];
426--724[label="0.142857;1pkt 1fpkt"];
426--815[label="0.285714;2pkt 2fpkt"];
426--997[label="0.142857;1pkt 1fpkt"];
426--1247[label="0.142857;1pkt 1fpkt"];
426--1424[label="0.142857;1pkt 1fpkt"];
426--1779[label="0.142857;1pkt 1fpkt"];
426--1843[label="0.285714;2pkt 2fpkt"];
426--1965[label="0.142857;1pkt 1fpkt"];
426--2232[label="0.142857;1pkt 1fpkt"];
426--2495[label="0.285714;2pkt 2fpkt"];
426--2558[label="0.142857;1pkt 1fpkt"];
426--2713[label="0.142857;1pkt 1fpkt"];
518--558[label="0.125;1pkt 1fpkt"];
558--815[label="0.25;2pkt 2fpkt"];
558--997[label="0.125;1pkt 1fpkt"];
558--1843[label="0.25;2pkt 2fpkt"];
558--1965[label="0.125;1pkt 1fpkt"];
558--2495[label="0.25;2pkt 2fpkt"];
558--2558[label="0.125;1pkt 1fpkt"];
592--1698[label="1;33pkt 33fpkt"];
593--815[label="0.333333;2pkt 2fpkt"];
593--1247[label="0.166667;1pkt 1fpkt"];
593--1309[label="0.166667;1pkt 1fpkt"];
593--1843[label="0.333333;2pkt 2fpkt"];
593--2495[label="0.333333;2pkt 2fpkt"];
724--1779[label="1;34pkt 34fpkt"];
815--1843[label="1;227pkt 227fpkt"];
815--2495[label="1;228pkt 228fpkt"];
991--1960[label="1;60pkt 60fpkt"];
991--2554[label="1;60pkt 60fpkt"];
997--1965[label="1;12pkt 12fpkt"];
997--2558[label="1;12pkt 12fpkt"];
1424--2232[label="1;35pkt 35fpkt"];
1424--2713[label="1;35pkt 35fpkt"];
1682--2410[label="1;33pkt 33fpkt"];
1682--2811[label="1;34pkt 34fpkt"];
1843--2495[label="1;227pkt 227fpkt"];
1960--2554[label="1;60pkt 60fpkt"];
1965--2558[label="1;12pkt 12fpkt"];
2232--2713[label="1;35pkt 35fpkt"];
2410--2811[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter src_ip="133.28.91.29"/>
      <filter dst_port="8888"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.224.203.106"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455268" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.11.112.146"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455262" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.80513,3.23749,901,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
3[label="209.59.224.9s;1pkt 1fpkt", shape=rectangle, color=red];
438[label="209.59.224.9;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.59.224.9:6346, 144.224.152.229:36147}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36147: (50%)&lt;BR/&gt; 6346: (50%)&gt;];
}
3--438[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.152.229" dst_port="36147" src_ip="209.59.224.9" src_port="6346"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="69.38.59.22"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455268" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.86584,3.18319,901,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
11[label="133.28.76.86s;3pkt 3fpkt", shape=rectangle, color=red];
85[label="209.163.53.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
305[label="68.89.197.153;d;2pkt 2fpkt", shape=diamond, color=yellow];
442[label="43.108.76.125;d;1pkt 1fpkt", shape=diamond, color=yellow];
1076[label="133.28.76.86;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1467[label="43.136.145.180;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2016[label="133.28.76.86;6pkt 6fpkt", shape=invtriangle, color=brown];
2584[label="133.28.76.86;6pkt 6fpkt", shape=invhouse, color=bisque];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.28.76.86:*, 68.89.197.153:6699}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (46%)&lt;BR/&gt; 2612: (10%)&lt;BR/&gt; 2616: (8%)&lt;BR/&gt; 2615: (8%)&lt;BR/&gt; 2613: (8%)&gt;];
}
11--72[label="0.333333;1pkt 1fpkt"];
11--85[label="1;1pkt 1fpkt"];
11--442[label="1;1pkt 1fpkt"];
11--624[label="0.333333;1pkt 1fpkt"];
11--639[label="0.333333;1pkt 1fpkt"];
11--1076[label="0.333333;1pkt 1fpkt"];
11--1467[label="1;1pkt 1fpkt"];
11--2016[label="0.666667;2pkt 2fpkt"];
11--2584[label="0.666667;2pkt 2fpkt"];
85--1076[label="1;1pkt 1fpkt"];
85--2016[label="1;1pkt 1fpkt"];
85--2584[label="1;1pkt 1fpkt"];
305--1076[label="1;2pkt 2fpkt"];
305--2016[label="1;2pkt 2fpkt"];
305--2584[label="1;2pkt 2fpkt"];
442--2016[label="1;1pkt 1fpkt"];
442--2584[label="1;1pkt 1fpkt"];
1076--2016[label="1;5pkt 5fpkt"];
1076--2584[label="1;5pkt 5fpkt"];
2016--2584[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="68.89.197.153" dst_port="6699" src_ip="133.28.76.86"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.224.88.79"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455247" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="199.182.254.106"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455125" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="150.52.42.242"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455358" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="130.154.167.247"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455265" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="69.53.112.19"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455268" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
311[label="1.23.133.202;s;5pkt 5fpkt", shape=diamond, color=yellow];
476[label="193.97.196.205;d;54pkt 54fpkt", shape=diamond, color=yellow];
760[label="1.211.65.14;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1728[label="68.11.216.248;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1804[label="1.211.65.14;4pkt 4fpkt", shape=invtriangle, color=brown];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8888, 193.97.196.205:*}[31.6456%]&lt;BR/&gt;{68.11.216.248:8888, *:*}[24.0506%]&lt;BR/&gt;{*:80, 193.97.196.205:*}[20.2532%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (27.5862%)&lt;BR/&gt; 80: (9.1954%)&lt;BR/&gt; 7777: (8.04598%)&lt;BR/&gt; 5555: (1.72414%)&lt;BR/&gt; 1704: (1.72414%)&gt;];
}
311--476[label="0.2;1pkt 1fpkt"];
476--523[label="0.0925926;5pkt 5fpkt"];
476--654[label="0.185185;10pkt 10fpkt"];
476--668[label="0.185185;10pkt 10fpkt"];
476--682[label="0.185185;10pkt 10fpkt"];
476--713[label="0.0769231;1pkt 1fpkt"];
476--739[label="0.030303;1pkt 1fpkt"];
476--760[label="0.2;1pkt 1fpkt"];
476--825[label="0.0185185;1pkt 1fpkt"];
476--1203[label="0.28;7pkt 7fpkt"];
476--1214[label="0.0925926;5pkt 5fpkt"];
476--1574[label="0.166667;1pkt 1fpkt"];
476--1728[label="0.105263;2pkt 2fpkt"];
476--1804[label="0.25;1pkt 1fpkt"];
476--1851[label="0.0185185;1pkt 1fpkt"];
476--2095[label="0.291667;7pkt 7fpkt"];
476--2330[label="0.2;1pkt 1fpkt"];
476--2498[label="0.0185185;1pkt 1fpkt"];
476--2518[label="0.047619;1pkt 1fpkt"];
476--2632[label="0.291667;7pkt 7fpkt"];
760--1804[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="68.11.216.248" src_port="8888"/>
      <filter dst_ip="193.97.196.205" src_port="8888"/>
      <filter dst_ip="193.97.196.205" src_port="80"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
89[label="144.224.151.98;d;3pkt 3fpkt", shape=diamond, color=yellow];
485[label="215.214.139.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
1355[label="43.215.102.155;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2193[label="43.215.102.155;2pkt 2fpkt", shape=invtriangle, color=brown];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.214.139.172:1404, 144.224.151.98:1214}[33.3333%]&lt;BR/&gt;{43.215.102.155:2082, 144.224.151.98:1214}[33.3333%]&lt;BR/&gt;{43.215.102.155:2088, 144.224.151.98:1214}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 2088: (18.75%)&lt;BR/&gt; 2082: (18.75%)&lt;BR/&gt; 1404: (12.5%)&gt;];
}
89--485[label="1;1pkt 1fpkt"];
89--1355[label="1;2pkt 2fpkt"];
89--2193[label="1;2pkt 2fpkt"];
1355--2193[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.151.98" dst_port="1214" src_ip="43.215.102.155" src_port="2088"/>
      <filter dst_ip="144.224.151.98" dst_port="1214" src_ip="43.215.102.155" src_port="2082"/>
      <filter dst_ip="144.224.151.98" dst_port="1214" src_ip="215.214.139.172" src_port="1404"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="200.109.225.208"/>
      <from sec="1005454814" usec="0"/>
      <to sec="1005455213" usec="0"/>
    </slice>
    <from sec="1005454814" usec="0"/>
    <to sec="1005455213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="69.161.190.237"/>
      <from sec="1005454943" usec="0"/>
      <to sec="1005455445" usec="0"/>
    </slice>
    <from sec="1005454943" usec="0"/>
    <to sec="1005455445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.38.207.213"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455358" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
226[label="43.0.136.117;d;2pkt 2fpkt", shape=diamond, color=yellow];
533[label="160.62.123.204;s;22pkt 22fpkt", shape=diamond, color=yellow];
557[label="43.250.131.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.62.123.204:*, *:1214}[72.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (32%)&lt;BR/&gt; 61949: (4%)&lt;BR/&gt; 61931: (4%)&lt;BR/&gt; 61601: (4%)&lt;BR/&gt; 41277: (4%)&gt;];
}
226--533[label="1;2pkt 2fpkt"];
533--557[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1214" src_ip="160.62.123.204"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="43.174.90.127"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455356" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="150.52.42.242"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455358" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="160.62.85.106"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455448" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.224.232.82"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455358" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="130.49.228.178"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455356" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
74[label="160.62.119.12;d;320pkt 320fpkt", shape=diamond, color=yellow];
493[label="130.131.9.174;d;87pkt 87fpkt", shape=diamond, color=yellow];
785[label="69.16.235.20;40pkt 40fpkt", shape=pentagon, color=darkviolet];
810[label="69.16.228.27;37pkt 37fpkt", shape=pentagon, color=darkviolet];
848[label="69.16.230.35;54pkt 54fpkt", shape=pentagon, color=darkviolet];
922[label="69.16.227.52;50pkt 50fpkt", shape=pentagon, color=darkviolet];
939[label="193.150.213.56;12pkt 12fpkt", shape=pentagon, color=darkviolet];
950[label="216.204.58.60;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1310[label="69.16.227.145;51pkt 51fpkt", shape=pentagon, color=darkviolet];
1673[label="69.162.41.231;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1821[label="69.16.235.20;41pkt 41fpkt", shape=invtriangle, color=brown];
1930[label="216.204.58.60;19pkt 19fpkt", shape=invtriangle, color=brown];
2166[label="69.16.227.145;50pkt 50fpkt", shape=invtriangle, color=brown];
2401[label="69.162.41.231;9pkt 9fpkt", shape=invtriangle, color=brown];
2670[label="69.16.227.145;50pkt 50fpkt", shape=invhouse, color=bisque];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 160.62.119.12:*}[45.31%]&lt;BR/&gt;{*:25, 133.28.52.195:*}[30.5246%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.9953%)&lt;BR/&gt; 113: (2.00236%)&lt;BR/&gt; 110: (0.942285%)&lt;BR/&gt; 53: (0.588928%)&lt;BR/&gt; 0: (0.471143%)&gt;];
}
74--264[label="0.00373134;1pkt 1fpkt"];
74--560[label="0.352941;6pkt 6fpkt"];
74--655[label="0.003125;1pkt 1fpkt"];
74--669[label="0.003125;1pkt 1fpkt"];
74--683[label="0.003125;1pkt 1fpkt"];
74--785[label="0.075;3pkt 3fpkt"];
74--810[label="0.189189;7pkt 7fpkt"];
74--820[label="0.0294118;1pkt 1fpkt"];
74--848[label="0.0740741;4pkt 4fpkt"];
74--922[label="0.16;8pkt 8fpkt"];
74--939[label="1;12pkt 12fpkt"];
74--950[label="0.0526316;1pkt 1fpkt"];
74--1084[label="0.00684932;1pkt 1fpkt"];
74--1199[label="0.0681818;3pkt 3fpkt"];
74--1310[label="0.156863;8pkt 8fpkt"];
74--1558[label="0.00358423;1pkt 1fpkt"];
74--1673[label="0.1;1pkt 1fpkt"];
74--1821[label="0.0731707;3pkt 3fpkt"];
74--1848[label="0.030303;1pkt 1fpkt"];
74--1930[label="0.0526316;1pkt 1fpkt"];
74--2166[label="0.16;8pkt 8fpkt"];
74--2319[label="0.00358423;1pkt 1fpkt"];
74--2401[label="0.111111;1pkt 1fpkt"];
74--2670[label="0.16;8pkt 8fpkt"];
493--950[label="0.315789;6pkt 6fpkt"];
493--1166[label="0.117647;4pkt 4fpkt"];
493--1310[label="0.0196078;1pkt 1fpkt"];
493--1544[label="0.4;2pkt 2fpkt"];
493--1821[label="0.0243902;1pkt 1fpkt"];
493--1930[label="0.315789;6pkt 6fpkt"];
493--2070[label="0.121212;4pkt 4fpkt"];
493--2166[label="0.02;1pkt 1fpkt"];
493--2308[label="0.25;1pkt 1fpkt"];
493--2616[label="0.121212;4pkt 4fpkt"];
493--2670[label="0.02;1pkt 1fpkt"];
493--2755[label="0.25;1pkt 1fpkt"];
785--1821[label="1;40pkt 40fpkt"];
950--1930[label="1;19pkt 19fpkt"];
1310--2166[label="1;50pkt 50fpkt"];
1310--2670[label="1;50pkt 50fpkt"];
1673--2401[label="1;9pkt 9fpkt"];
2166--2670[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.119.12" src_port="25"/>
      <filter dst_ip="133.28.52.195" src_port="25"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="68.18.45.10"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455358" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.62.74.149"/>
      <from sec="1005454809" usec="0"/>
      <to sec="1005455448" usec="0"/>
    </slice>
    <from sec="1005454809" usec="0"/>
    <to sec="1005455448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="199.65.69.200"/>
      <from sec="1005454837" usec="0"/>
      <to sec="1005455448" usec="0"/>
    </slice>
    <from sec="1005454837" usec="0"/>
    <to sec="1005455448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
357[label="130.138.25.153;d;135pkt 135fpkt", shape=diamond, color=yellow];
579[label="196.229.98.155;s;20pkt 20fpkt", shape=diamond, color=yellow];
833[label="198.28.213.33;20pkt 20fpkt", shape=pentagon, color=darkviolet];
1131[label="208.245.162.98;49pkt 49fpkt", shape=pentagon, color=darkviolet];
1372[label="199.169.206.158;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1483[label="198.28.251.184;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1856[label="198.28.213.33;21pkt 21fpkt", shape=invtriangle, color=brown];
2266[label="198.28.251.184;10pkt 10fpkt", shape=invtriangle, color=brown];
2324[label="201.153.107.202;34pkt 34fpkt", shape=invtriangle, color=brown];
2766[label="201.153.107.202;33pkt 33fpkt", shape=invhouse, color=bisque];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.245.162.98:80, 130.138.25.153:*}[27.5281%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4040: (0.445104%)&lt;BR/&gt; 4032: (0.445104%)&lt;BR/&gt; 4031: (0.445104%)&lt;BR/&gt; 4023: (0.445104%)&gt;];
}
357--579[label="0.95;19pkt 19fpkt"];
357--654[label="0.0518519;7pkt 7fpkt"];
357--668[label="0.0518519;7pkt 7fpkt"];
357--682[label="0.0518519;7pkt 7fpkt"];
357--825[label="0.010101;1pkt 1fpkt"];
357--833[label="0.05;1pkt 1fpkt"];
357--1106[label="0.0273973;2pkt 2fpkt"];
357--1131[label="1;49pkt 49fpkt"];
357--1372[label="1;5pkt 5fpkt"];
357--1433[label="0.015873;1pkt 1fpkt"];
357--1483[label="0.1;1pkt 1fpkt"];
357--1512[label="0.0714286;1pkt 1fpkt"];
357--1851[label="0.01;1pkt 1fpkt"];
357--1856[label="0.047619;1pkt 1fpkt"];
357--2033[label="0.0273973;2pkt 2fpkt"];
357--2238[label="0.015873;1pkt 1fpkt"];
357--2266[label="0.1;1pkt 1fpkt"];
357--2289[label="0.0714286;1pkt 1fpkt"];
357--2324[label="0.617647;21pkt 21fpkt"];
357--2498[label="0.010101;1pkt 1fpkt"];
357--2594[label="0.0273973;2pkt 2fpkt"];
357--2716[label="0.016129;1pkt 1fpkt"];
357--2743[label="0.0714286;1pkt 1fpkt"];
357--2766[label="0.606061;20pkt 20fpkt"];
833--1856[label="1;20pkt 20fpkt"];
1483--2266[label="1;10pkt 10fpkt"];
2324--2766[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.25.153" src_ip="208.245.162.98" src_port="80"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="216.249.88.36"/>
      <from sec="1005455195" usec="0"/>
      <to sec="1005455448" usec="0"/>
    </slice>
    <from sec="1005455195" usec="0"/>
    <to sec="1005455448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
195[label="130.131.141.148;d;68pkt 68fpkt", shape=diamond, color=yellow];
588[label="69.16.210.0;s;7pkt 7fpkt", shape=diamond, color=yellow];
689[label="69.16.210.0;16pkt 16fpkt", shape=pentagon, color=darkviolet];
1296[label="69.16.210.142;59pkt 59fpkt", shape=pentagon, color=darkviolet];
1755[label="69.16.210.0;16pkt 16fpkt", shape=invtriangle, color=brown];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.16.210.142:80, 130.131.141.148:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6988%)&lt;BR/&gt; 3456: (1.20482%)&lt;BR/&gt; 3472: (0.903614%)&lt;BR/&gt; 3471: (0.903614%)&lt;BR/&gt; 3468: (0.903614%)&gt;];
}
195--588[label="0.142857;1pkt 1fpkt"];
195--689[label="0.5625;9pkt 9fpkt"];
195--1296[label="0.474576;28pkt 28fpkt"];
195--1755[label="0.5625;9pkt 9fpkt"];
588--689[label="1;7pkt 7fpkt"];
588--1755[label="1;7pkt 7fpkt"];
689--1755[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.141.148" src_ip="69.16.210.142" src_port="80"/>
    </slice>
    <from sec="1005454933" usec="0"/>
    <to sec="1005455489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
235[label="69.164.62.113;s;8pkt 8fpkt", shape=diamond, color=yellow];
372[label="160.62.85.106;d;2pkt 2fpkt", shape=diamond, color=yellow];
600[label="160.62.120.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
1184[label="69.164.62.113;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2081[label="69.164.62.113;8pkt 8fpkt", shape=invtriangle, color=brown];
2624[label="69.164.62.113;7pkt 7fpkt", shape=invhouse, color=bisque];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.164.62.113:6667, 130.154.233.44:*}[25%]&lt;BR/&gt;{69.164.62.113:*, 160.62.85.106:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (23.5294%)&lt;BR/&gt; 6668: (7.35294%)&lt;BR/&gt; 6666: (7.35294%)&lt;BR/&gt; 6662: (7.35294%)&lt;BR/&gt; 3009: (7.35294%)&gt;];
}
235--372[label="1;2pkt 2fpkt"];
235--600[label="1;1pkt 1fpkt"];
235--1184[label="1;8pkt 8fpkt"];
235--2081[label="1;8pkt 8fpkt"];
235--2624[label="1;7pkt 7fpkt"];
372--1184[label="1;2pkt 2fpkt"];
372--2081[label="1;2pkt 2fpkt"];
372--2624[label="1;2pkt 2fpkt"];
600--1184[label="1;1pkt 1fpkt"];
600--2081[label="1;1pkt 1fpkt"];
600--2624[label="1;1pkt 1fpkt"];
1184--2081[label="1;8pkt 8fpkt"];
1184--2624[label="1;7pkt 7fpkt"];
2081--2624[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.85.106" src_ip="69.164.62.113"/>
      <filter dst_ip="130.154.233.44" src_ip="69.164.62.113" src_port="6667"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="43.137.45.91"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455448" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="163.93.83.205"/>
      <from sec="1005454800" usec="0"/>
      <to sec="1005455448" usec="0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="71.102.54.230"/>
      <from sec="1005454807" usec="0"/>
      <to sec="1005455436" usec="0"/>
    </slice>
    <from sec="1005454807" usec="0"/>
    <to sec="1005455436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.113.21.160"/>
      <from sec="1005455172" usec="0"/>
      <to sec="1005455423" usec="0"/>
    </slice>
    <from sec="1005455172" usec="0"/>
    <to sec="1005455423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="196.160.73.214"/>
      <from sec="1005455215" usec="0"/>
      <to sec="1005455448" usec="0"/>
    </slice>
    <from sec="1005455215" usec="0"/>
    <to sec="1005455448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787712,3.23153,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
225[label="0.64.187.65;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.64.187.65:6699, 130.49.228.176:4000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 4000: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="130.49.228.176" dst_port="4000" src_ip="0.64.187.65" src_port="6699"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749369,3.20786,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
445[label="160.62.119.0;s;21pkt 21fpkt", shape=diamond, color=yellow];
685[label="160.62.119.0;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.62.119.0:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
445--685[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="160.62.119.0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.42.175.0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.22.186.0"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
589[label="133.28.131.9;d;98pkt 98fpkt", shape=diamond, color=yellow];
620[label="216.83.137.1;s;50pkt 50fpkt", shape=diamond, color=yellow];
693[label="216.83.137.1;70pkt 70fpkt", shape=pentagon, color=darkviolet];
938[label="216.83.138.56;24pkt 24fpkt", shape=pentagon, color=darkviolet];
1758[label="216.83.137.1;70pkt 70fpkt", shape=invtriangle, color=brown];
2455[label="216.83.137.1;71pkt 71fpkt", shape=invhouse, color=bisque];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.83.137.1:80, 133.28.131.9:*}[59.6639%]&lt;BR/&gt;{216.83.138.56:80, 133.28.131.9:*}[21.0084%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8695%)&lt;BR/&gt; 1382: (0.652742%)&lt;BR/&gt; 1381: (0.652742%)&lt;BR/&gt; 1380: (0.652742%)&lt;BR/&gt; 1379: (0.652742%)&gt;];
}
589--620[label="1;50pkt 50fpkt"];
589--693[label="0.7;49pkt 49fpkt"];
589--837[label="0.323529;11pkt 11fpkt"];
589--936[label="0.277778;10pkt 10fpkt"];
589--938[label="1;24pkt 24fpkt"];
589--1758[label="0.7;49pkt 49fpkt"];
589--1858[label="0.323529;11pkt 11fpkt"];
589--2455[label="0.704225;50pkt 50fpkt"];
589--2502[label="0.323529;11pkt 11fpkt"];
620--693[label="0.98;49pkt 49fpkt"];
620--1758[label="0.98;49pkt 49fpkt"];
620--2455[label="1;50pkt 50fpkt"];
693--1758[label="1;70pkt 70fpkt"];
693--2455[label="1;70pkt 70fpkt"];
1758--2455[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.131.9" src_ip="216.83.137.1" src_port="80"/>
      <filter dst_ip="133.28.131.9" src_ip="216.83.138.56" src_port="80"/>
    </slice>
    <from sec="1005455291" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.224.222.2"/>
    </slice>
    <from sec="1005455306" usec="0"/>
    <to sec="1005455464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
347[label="0.82.104.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
700[label="0.82.104.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1764[label="0.82.104.3;1pkt 1fpkt", shape=invtriangle, color=brown];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.82.104.3:51308, 144.224.152.229:6346}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51308: (50%)&lt;BR/&gt; 6346: (50%)&gt;];
}
347--700[label="1;1pkt 1fpkt"];
347--1764[label="1;1pkt 1fpkt"];
700--1764[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.152.229" dst_port="6346" src_ip="0.82.104.3" src_port="51308"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.45.121.4"/>
    </slice>
    <from sec="1005455417" usec="0"/>
    <to sec="1005455473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.16.178.4"/>
    </slice>
    <from sec="1005454833" usec="0"/>
    <to sec="1005455494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749369,3.20786,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
537[label="192.11.119.240;d;77pkt 77fpkt", shape=diamond, color=yellow];
710[label="192.89.194.4;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 192.11.119.240:6667}[46.1538%]&lt;BR/&gt;{*:113, 192.11.119.240:*}[29.4872%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (22.7848%)&lt;BR/&gt; 113: (14.557%)&lt;BR/&gt; 6666: (3.16456%)&lt;BR/&gt; 6668: (2.53165%)&lt;BR/&gt; 6669: (1.89873%)&gt;];
}
537--710[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.11.119.240" src_port="113"/>
      <filter dst_ip="192.11.119.240" dst_port="6667"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749369,3.20786,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
103[label="193.97.210.200;d;23pkt 23fpkt", shape=diamond, color=yellow];
268[label="213.200.170.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
713[label="1.172.134.5;13pkt 13fpkt", shape=pentagon, color=darkviolet];
739[label="204.101.48.10;33pkt 33fpkt", shape=pentagon, color=darkviolet];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.101.48.10:8888, *:*}[50%]&lt;BR/&gt;{*:8888, 193.97.210.200:*}[22.7273%]&lt;BR/&gt;{*:5555, *:*}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (30.7143%)&lt;BR/&gt; 5555: (10.7143%)&lt;BR/&gt; 0: (4.28571%)&lt;BR/&gt; 6699: (3.57143%)&lt;BR/&gt; 1757: (1.42857%)&gt;];
}
103--268[label="1;1pkt 1fpkt"];
103--713[label="0.0769231;1pkt 1fpkt"];
103--739[label="0.0869565;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_port="5555"/>
      <filter src_ip="204.101.48.10" src_port="8888"/>
      <filter dst_ip="193.97.210.200" src_port="8888"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.176.74.6"/>
    </slice>
    <from sec="1005454804" usec="0"/>
    <to sec="1005455494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
298[label="213.218.81.6;s;15pkt 15fpkt", shape=diamond, color=yellow];
718[label="213.218.81.6;14pkt 14fpkt", shape=pentagon, color=darkviolet];
1776[label="213.218.81.6;14pkt 14fpkt", shape=invtriangle, color=brown];
2463[label="213.218.81.6;14pkt 14fpkt", shape=invhouse, color=bisque];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.218.81.6:80, 133.28.193.154:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49286: (3.50877%)&lt;BR/&gt; 49285: (3.50877%)&lt;BR/&gt; 49284: (3.50877%)&lt;BR/&gt; 49283: (3.50877%)&gt;];
}
298--718[label="1;14pkt 14fpkt"];
298--1776[label="1;14pkt 14fpkt"];
298--2463[label="1;14pkt 14fpkt"];
718--1776[label="1;14pkt 14fpkt"];
718--2463[label="1;14pkt 14fpkt"];
1776--2463[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.193.154" src_ip="213.218.81.6" src_port="80"/>
    </slice>
    <from sec="1005454948" usec="0"/>
    <to sec="1005455041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.98.166.6"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.80.229.6"/>
    </slice>
    <from sec="1005454814" usec="0"/>
    <to sec="1005455503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
403[label="130.131.237.220;d;110pkt 110fpkt", shape=diamond, color=yellow];
726[label="69.16.210.7;56pkt 56fpkt", shape=pentagon, color=darkviolet];
909[label="213.27.66.50;41pkt 41fpkt", shape=pentagon, color=darkviolet];
1341[label="216.82.45.153;36pkt 36fpkt", shape=pentagon, color=darkviolet];
1416[label="69.16.213.169;44pkt 44fpkt", shape=pentagon, color=darkviolet];
1437[label="69.16.198.173;36pkt 36fpkt", shape=pentagon, color=darkviolet];
2228[label="69.16.213.169;44pkt 44fpkt", shape=invtriangle, color=brown];
2709[label="69.16.213.169;44pkt 44fpkt", shape=invhouse, color=bisque];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.16.210.7:80, 130.131.237.220:*}[22.807%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3139: (0.486618%)&lt;BR/&gt; 3138: (0.486618%)&lt;BR/&gt; 3137: (0.486618%)&lt;BR/&gt; 3136: (0.486618%)&gt;];
}
403--726[label="0.446429;25pkt 25fpkt"];
403--909[label="0.487805;20pkt 20fpkt"];
403--1341[label="0.416667;15pkt 15fpkt"];
403--1416[label="0.454545;20pkt 20fpkt"];
403--1437[label="0.416667;15pkt 15fpkt"];
403--2228[label="0.454545;20pkt 20fpkt"];
403--2709[label="0.454545;20pkt 20fpkt"];
1416--2228[label="1;44pkt 44fpkt"];
1416--2709[label="1;44pkt 44fpkt"];
2228--2709[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.237.220" src_ip="69.16.210.7" src_port="80"/>
    </slice>
    <from sec="1005454814" usec="0"/>
    <to sec="1005455502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
511[label="165.25.198.44;d;94pkt 94fpkt", shape=diamond, color=yellow];
584[label="216.11.47.8;s;87pkt 87fpkt", shape=diamond, color=yellow];
728[label="216.11.47.8;122pkt 122fpkt", shape=pentagon, color=darkviolet];
1782[label="216.11.47.8;123pkt 123fpkt", shape=invtriangle, color=brown];
2464[label="216.11.47.8;123pkt 123fpkt", shape=invhouse, color=bisque];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.11.47.8:80, 165.25.198.44:*}[66.9231%]&lt;BR/&gt;{216.11.47.8:80, 165.25.194.29:*}[27.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49928: (0.455373%)&lt;BR/&gt; 49927: (0.455373%)&lt;BR/&gt; 49926: (0.455373%)&lt;BR/&gt; 49925: (0.455373%)&gt;];
}
511--584[label="1;87pkt 87fpkt"];
511--728[label="0.925532;87pkt 87fpkt"];
511--1272[label="0.230769;3pkt 3fpkt"];
511--1782[label="0.925532;87pkt 87fpkt"];
511--2140[label="0.25;3pkt 3fpkt"];
511--2464[label="0.925532;87pkt 87fpkt"];
584--728[label="1;87pkt 87fpkt"];
584--1782[label="1;87pkt 87fpkt"];
584--2464[label="1;87pkt 87fpkt"];
728--1782[label="1;122pkt 122fpkt"];
728--2464[label="1;122pkt 122fpkt"];
1782--2464[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.198.44" src_ip="216.11.47.8" src_port="80"/>
      <filter dst_ip="165.25.194.29" src_ip="216.11.47.8" src_port="80"/>
    </slice>
    <from sec="1005455130" usec="0"/>
    <to sec="1005455448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.112.110.8"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.131.3.9"/>
    </slice>
    <from sec="1005455352" usec="0"/>
    <to sec="1005455469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.62.119.9"/>
    </slice>
    <from sec="1005454815" usec="0"/>
    <to sec="1005455498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.145.146.9"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.59.224.9"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.18.45.10"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
609[label="193.97.196.206;d;3pkt 3fpkt", shape=diamond, color=yellow];
886[label="170.96.57.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1894[label="170.96.57.46;1pkt 1fpkt", shape=invtriangle, color=brown];
2521[label="170.96.57.46;1pkt 1fpkt", shape=invhouse, color=bisque];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.101.48.10:8888, 193.97.196.206:1087}[33.3333%]&lt;BR/&gt;{170.96.57.46:6699, 193.97.196.206:1294}[33.3333%]&lt;BR/&gt;{217.198.32.194:8888, 193.97.196.206:1206}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (33.3333%)&lt;BR/&gt; 1294: (33.3333%)&lt;BR/&gt; 8888: (16.6667%)&lt;BR/&gt; 1206: (8.33333%)&lt;BR/&gt; 1087: (8.33333%)&gt;];
}
609--739[label="0.333333;1pkt 1fpkt"];
609--886[label="1;1pkt 1fpkt"];
609--1516[label="0.333333;1pkt 1fpkt"];
609--1894[label="1;1pkt 1fpkt"];
609--2521[label="1;1pkt 1fpkt"];
886--1894[label="1;1pkt 1fpkt"];
886--2521[label="1;1pkt 1fpkt"];
1894--2521[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.97.196.206" dst_port="1206" src_ip="217.198.32.194" src_port="8888"/>
      <filter dst_ip="193.97.196.206" dst_port="1294" src_ip="170.96.57.46" src_port="6699"/>
      <filter dst_ip="193.97.196.206" dst_port="1087" src_ip="204.101.48.10" src_port="8888"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.16.181.10"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.85.35.11"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.82.137.11"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.168.56.12"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.89.173.13"/>
    </slice>
    <from sec="1005454812" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.209.6.14"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.135.19.14"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
172[label="160.62.222.182;d;110pkt 110fpkt", shape=diamond, color=yellow];
763[label="43.154.74.15;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1087[label="69.198.250.87;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1732[label="216.88.196.249;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2440[label="216.88.196.249;8pkt 8fpkt", shape=invtriangle, color=brown];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1214, 160.62.222.182:*}[99.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (49.6324%)&lt;BR/&gt; 3541: (1.10294%)&lt;BR/&gt; 3426: (1.10294%)&lt;BR/&gt; 3408: (1.10294%)&lt;BR/&gt; 3376: (1.10294%)&gt;];
}
172--763[label="0.333333;1pkt 1fpkt"];
172--1087[label="0.428571;3pkt 3fpkt"];
172--1732[label="0.5;4pkt 4fpkt"];
172--2440[label="0.5;4pkt 4fpkt"];
1732--2440[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.222.182" src_port="1214"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.130.47.16"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.99.241.16"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.62.81.19"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.53.112.19"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.28.192.21"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.19.72.22"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.62.121.23"/>
    </slice>
    <from sec="1005454834" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.221.221.23"/>
    </slice>
    <from sec="1005454914" usec="0"/>
    <to sec="1005454959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.244.39.25"/>
    </slice>
    <from sec="1005454810" usec="0"/>
    <to sec="1005455506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.62.121.25"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.155.9.26"/>
    </slice>
    <from sec="1005455049" usec="0"/>
    <to sec="1005455410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.47.30.29"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.4.32.29"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.19.210.32"/>
    </slice>
    <from sec="1005454804" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.198.4.33"/>
    </slice>
    <from sec="1005454933" usec="0"/>
    <to sec="1005455506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.224.90.33"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,012,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.104.91.33"/>
    </slice>
    <from sec="1005455036" usec="0"/>
    <to sec="1005455116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.113.121.34"/>
    </slice>
    <from sec="1005455359" usec="0"/>
    <to sec="1005455474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.166.131.34"/>
    </slice>
    <from sec="1005455394" usec="0"/>
    <to sec="1005455404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.199.236.34"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.241.6.35"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.191.89.35"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.145.146.35"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.11.115.36"/>
    </slice>
    <from sec="1005455287" usec="0"/>
    <to sec="1005455311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.101.227.37"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.74.6.38"/>
    </slice>
    <from sec="1005455123" usec="0"/>
    <to sec="1005455487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.101.240.38"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
297[label="2.176.182.39;s;2pkt 2fpkt", shape=diamond, color=yellow];
864[label="2.176.182.39;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1876[label="2.176.182.39;1pkt 1fpkt", shape=invtriangle, color=brown];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.176.182.39:80, 144.224.206.51:1168}[50%]&lt;BR/&gt;{2.176.182.39:80, 144.224.206.51:1170}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1170: (30%)&lt;BR/&gt; 1168: (20%)&gt;];
}
297--864[label="1;2pkt 2fpkt"];
297--1876[label="1;1pkt 1fpkt"];
864--1876[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.206.51" dst_port="1170" src_ip="2.176.182.39" src_port="80"/>
      <filter dst_ip="144.224.206.51" dst_port="1168" src_ip="2.176.182.39" src_port="80"/>
    </slice>
    <from sec="1005454948" usec="0"/>
    <to sec="1005455003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.37.17.40"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.16.193.42"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.53.0.45"/>
    </slice>
    <from sec="1005455116" usec="0"/>
    <to sec="1005455179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.130.40.45"/>
    </slice>
    <from sec="1005454810" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,053,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.163.87.45"/>
    </slice>
    <from sec="1005455245" usec="0"/>
    <to sec="1005455302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889902,3.19508,999,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
316[label="68.0.197.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
887[label="68.0.197.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2522[label="68.0.197.46;1pkt 1fpkt", shape=invhouse, color=bisque];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.0.197.46:2359, 144.224.71.40:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2359: (50%)&gt;];
}
316--887[label="1;1pkt 1fpkt"];
316--2522[label="1;1pkt 1fpkt"];
887--2522[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.71.40" dst_port="6699" src_ip="68.0.197.46" src_port="2359"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.128.181.47"/>
    </slice>
    <from sec="1005455339" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.62.222.47"/>
    </slice>
    <from sec="1005454805" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.148.129.48"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.54.57.49"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.163.43.50"/>
    </slice>
    <from sec="1005454992" usec="0"/>
    <to sec="1005455030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.47.134.50"/>
    </slice>
    <from sec="1005455129" usec="0"/>
    <to sec="1005455503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.80.148.51"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.195.215.51"/>
    </slice>
    <from sec="1005454807" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.107.31.53"/>
    </slice>
    <from sec="1005455284" usec="0"/>
    <to sec="1005455403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.62.121.54"/>
    </slice>
    <from sec="1005454843" usec="0"/>
    <to sec="1005455386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.151.58.55"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005454998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.41.60.56"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.238.28.57"/>
    </slice>
    <from sec="1005454855" usec="0"/>
    <to sec="1005455502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.130.49.58"/>
    </slice>
    <from sec="1005454994" usec="0"/>
    <to sec="1005455157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.216.104.60"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.138.106.60"/>
    </slice>
    <from sec="1005454910" usec="0"/>
    <to sec="1005454946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.197.202.60"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
385[label="165.25.200.248;d;39pkt 39fpkt", shape=diamond, color=yellow];
959[label="213.219.23.62;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1180[label="213.205.149.112;9pkt 9fpkt", shape=pentagon, color=darkviolet];
1563[label="0.120.98.202;22pkt 22fpkt", shape=pentagon, color=darkviolet];
1938[label="213.219.23.62;20pkt 20fpkt", shape=invtriangle, color=brown];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.120.98.202:80, 165.25.200.248:*}[32.2034%]&lt;BR/&gt;{213.219.23.62:80, 165.25.200.248:*}[23.7288%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4108: (1.37615%)&lt;BR/&gt; 4107: (1.37615%)&lt;BR/&gt; 4103: (1.37615%)&lt;BR/&gt; 4102: (1.37615%)&gt;];
}
385--654[label="0.153846;6pkt 6fpkt"];
385--668[label="0.153846;6pkt 6fpkt"];
385--682[label="0.153846;6pkt 6fpkt"];
385--898[label="1;6pkt 6fpkt"];
385--959[label="0.631579;12pkt 12fpkt"];
385--1180[label="0.888889;8pkt 8fpkt"];
385--1563[label="0.5;11pkt 11fpkt"];
385--1903[label="1;5pkt 5fpkt"];
385--1938[label="0.6;12pkt 12fpkt"];
959--1938[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.200.248" src_ip="0.120.98.202" src_port="80"/>
      <filter dst_ip="165.25.200.248" src_ip="213.219.23.62" src_port="80"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.34.25.63"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.62.113.63"/>
    </slice>
    <from sec="1005454805" usec="0"/>
    <to sec="1005455492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.27.194.63"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.64.187.65"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.157.112.66"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.16.93.67"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.35.178.67"/>
    </slice>
    <from sec="1005454954" usec="0"/>
    <to sec="1005455456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.71.250.67"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
576[label="165.25.135.107;d;170pkt 170fpkt", shape=diamond, color=yellow];
986[label="216.48.28.68;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1034[label="216.70.93.77;35pkt 35fpkt", shape=pentagon, color=darkviolet];
1135[label="212.94.139.100;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1956[label="216.48.28.68;4pkt 4fpkt", shape=invtriangle, color=brown];
1986[label="216.70.93.77;36pkt 36fpkt", shape=invtriangle, color=brown];
2049[label="212.94.139.100;13pkt 13fpkt", shape=invtriangle, color=brown];
2551[label="216.48.28.68;4pkt 4fpkt", shape=invhouse, color=bisque];
2569[label="216.70.93.77;35pkt 35fpkt", shape=invhouse, color=bisque];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 165.25.135.107:*}[81.1594%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6825%)&lt;BR/&gt; 1249: (0.952381%)&lt;BR/&gt; 1498: (0.634921%)&lt;BR/&gt; 1493: (0.634921%)&lt;BR/&gt; 1478: (0.634921%)&gt;];
}
576--986[label="1;5pkt 5fpkt"];
576--1034[label="0.142857;5pkt 5fpkt"];
576--1135[label="0.538462;7pkt 7fpkt"];
576--1460[label="0.5;10pkt 10fpkt"];
576--1563[label="0.136364;3pkt 3fpkt"];
576--1956[label="1;4pkt 4fpkt"];
576--1986[label="0.138889;5pkt 5fpkt"];
576--2049[label="0.538462;7pkt 7fpkt"];
576--2551[label="1;4pkt 4fpkt"];
576--2569[label="0.142857;5pkt 5fpkt"];
986--1956[label="1;4pkt 4fpkt"];
986--2551[label="1;4pkt 4fpkt"];
1034--1986[label="1;35pkt 35fpkt"];
1034--2569[label="1;35pkt 35fpkt"];
1135--2049[label="1;13pkt 13fpkt"];
1956--2551[label="1;4pkt 4fpkt"];
1986--2569[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.135.107" src_port="80"/>
    </slice>
    <from sec="1005454853" usec="0"/>
    <to sec="1005455495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.97.28.70"/>
    </slice>
    <from sec="1005454858" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.62.223.70"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.211.227.70"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.210.131.72"/>
    </slice>
    <from sec="1005454892" usec="0"/>
    <to sec="1005455462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.28.8.73"/>
    </slice>
    <from sec="1005454982" usec="0"/>
    <to sec="1005455460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.118.109.73"/>
    </slice>
    <from sec="1005454967" usec="0"/>
    <to sec="1005455109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.89.164.73"/>
    </slice>
    <from sec="1005455272" usec="0"/>
    <to sec="1005455464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.107.166.73"/>
    </slice>
    <from sec="1005454813" usec="0"/>
    <to sec="1005455478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.16.208.73"/>
    </slice>
    <from sec="1005454810" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.193.8.74"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.224.53.75"/>
    </slice>
    <from sec="1005454813" usec="0"/>
    <to sec="1005455478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.157.112.75"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.13.156.75"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.191.49.77"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.144.90.78"/>
    </slice>
    <from sec="1005454806" usec="0"/>
    <to sec="1005455472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.196.147.79"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.3.253.79"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
585[label="133.28.0.99;d;118pkt 118fpkt", shape=diamond, color=yellow];
817[label="132.118.137.29;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1046[label="198.167.59.80;46pkt 46fpkt", shape=pentagon, color=darkviolet];
1845[label="132.118.137.29;1pkt 1fpkt", shape=invtriangle, color=brown];
1996[label="198.167.59.80;46pkt 46fpkt", shape=invtriangle, color=brown];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.167.59.80:80, 133.28.0.99:*}[35.9375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4987: (0.704225%)&lt;BR/&gt; 4978: (0.704225%)&lt;BR/&gt; 4946: (0.704225%)&lt;BR/&gt; 4945: (0.704225%)&gt;];
}
585--817[label="1;2pkt 2fpkt"];
585--1046[label="0.782609;36pkt 36fpkt"];
585--1429[label="1;18pkt 18fpkt"];
585--1711[label="0.0338983;4pkt 4fpkt"];
585--1724[label="0.0240964;2pkt 2fpkt"];
585--1845[label="1;1pkt 1fpkt"];
585--1996[label="0.782609;36pkt 36fpkt"];
585--2236[label="1;17pkt 17fpkt"];
585--2427[label="0.0338983;4pkt 4fpkt"];
585--2437[label="0.0240964;2pkt 2fpkt"];
585--2823[label="0.0338983;4pkt 4fpkt"];
817--1845[label="1;1pkt 1fpkt"];
1046--1996[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.0.99" src_ip="198.167.59.80" src_port="80"/>
    </slice>
    <from sec="1005455143" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.41.79.80"/>
    </slice>
    <from sec="1005454809" usec="0"/>
    <to sec="1005455502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.11.84.80"/>
    </slice>
    <from sec="1005454908" usec="0"/>
    <to sec="1005454916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.186.111.81"/>
    </slice>
    <from sec="1005454932" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.161.201.81"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.145.165.82"/>
    </slice>
    <from sec="1005455126" usec="0"/>
    <to sec="1005455319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.184.76.83"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.96.167.83"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.11.114.84"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.28.157.84"/>
    </slice>
    <from sec="1005455284" usec="0"/>
    <to sec="1005455404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.11.114.85"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.16.200.85"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.28.171.86"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.188.182.86"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.21.202.86"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.129.134.87"/>
    </slice>
    <from sec="1005455139" usec="0"/>
    <to sec="1005455279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.151.144.87"/>
    </slice>
    <from sec="1005454898" usec="0"/>
    <to sec="1005455440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.69.205.87"/>
    </slice>
    <from sec="1005454803" usec="0"/>
    <to sec="1005455265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.143.186.88"/>
    </slice>
    <from sec="1005454806" usec="0"/>
    <to sec="1005455492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.70.143.90"/>
    </slice>
    <from sec="1005455094" usec="0"/>
    <to sec="1005455498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.137.45.91"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.199.8.93"/>
    </slice>
    <from sec="1005455317" usec="0"/>
    <to sec="1005455347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.54.182.94"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.59.111.95"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749369,3.20786,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
612[label="193.97.196.80;d;3pkt 3fpkt", shape=diamond, color=yellow];
1119[label="0.42.105.96;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.198.32.205:8888, 193.97.196.80:4707}[25%]&lt;BR/&gt;{212.211.35.228:7000, 193.97.196.80:4667}[25%]&lt;BR/&gt;{0.42.105.96:2124, 193.97.193.31:3254}[25%]&lt;BR/&gt;{0.42.105.96:2124, 193.97.196.80:3229}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2124: (30%)&lt;BR/&gt; 3229: (20%)&lt;BR/&gt; 8888: (10%)&lt;BR/&gt; 7000: (10%)&lt;BR/&gt; 4707: (10%)&gt;];
}
612--1119[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.97.196.80" dst_port="3229" src_ip="0.42.105.96" src_port="2124"/>
      <filter dst_ip="193.97.193.31" dst_port="3254" src_ip="0.42.105.96" src_port="2124"/>
      <filter dst_ip="193.97.196.80" dst_port="4667" src_ip="212.211.35.228" src_port="7000"/>
      <filter dst_ip="193.97.196.80" dst_port="4707" src_ip="217.198.32.205" src_port="8888"/>
    </slice>
    <from sec="1005454810" usec="0"/>
    <to sec="1005455504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.214.144.96"/>
    </slice>
    <from sec="1005455230" usec="0"/>
    <to sec="1005455495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.28.150.96"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.43.3.98"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
183[label="215.214.139.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
1130[label="144.224.151.98;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2047[label="144.224.151.98;3pkt 3fpkt", shape=invtriangle, color=brown];
2603[label="144.224.151.98;2pkt 2fpkt", shape=invhouse, color=bisque];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.151.98:1214, 215.214.139.172:1404}[33.3333%]&lt;BR/&gt;{144.224.151.98:1214, 43.215.102.155:2082}[33.3333%]&lt;BR/&gt;{144.224.151.98:1214, 43.215.102.155:2088}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 1404: (22.2222%)&lt;BR/&gt; 2088: (16.6667%)&lt;BR/&gt; 2082: (11.1111%)&gt;];
}
183--1130[label="1;1pkt 1fpkt"];
183--2047[label="1;1pkt 1fpkt"];
183--2603[label="1;1pkt 1fpkt"];
1130--2047[label="1;3pkt 3fpkt"];
1130--2603[label="1;2pkt 2fpkt"];
2047--2603[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="43.215.102.155" dst_port="2088" src_ip="144.224.151.98" src_port="1214"/>
      <filter dst_ip="43.215.102.155" dst_port="2082" src_ip="144.224.151.98" src_port="1214"/>
      <filter dst_ip="215.214.139.172" dst_port="1404" src_ip="144.224.151.98" src_port="1214"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
104[label="130.154.75.148;d;120pkt 120fpkt", shape=diamond, color=yellow];
733[label="195.130.57.9;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1132[label="69.16.208.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2275[label="70.208.228.189;1pkt 1fpkt", shape=invtriangle, color=brown];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1863, 130.154.75.148:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (12.5%)&lt;BR/&gt; 110: (8.06452%)&lt;BR/&gt; 5190: (6.45161%)&lt;BR/&gt; 21: (6.45161%)&lt;BR/&gt; 1214: (4.43548%)&gt;];
}
104--733[label="1;2pkt 2fpkt"];
104--1132[label="1;1pkt 1fpkt"];
104--2275[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.154.75.148" src_port="1863"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
282[label="160.62.118.219;d;107pkt 107fpkt", shape=diamond, color=yellow];
723[label="193.20.16.7;25pkt 25fpkt", shape=pentagon, color=darkviolet];
1142[label="0.144.123.102;30pkt 30fpkt", shape=pentagon, color=darkviolet];
1253[label="216.245.213.130;23pkt 23fpkt", shape=pentagon, color=darkviolet];
1323[label="216.38.69.149;20pkt 20fpkt", shape=pentagon, color=darkviolet];
1445[label="208.254.133.176;36pkt 36fpkt", shape=pentagon, color=darkviolet];
1504[label="175.189.235.190;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1583[label="216.245.167.205;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1700[label="213.208.110.240;26pkt 26fpkt", shape=pentagon, color=darkviolet];
1778[label="193.20.16.7;25pkt 25fpkt", shape=invtriangle, color=brown];
2054[label="0.144.123.102;30pkt 30fpkt", shape=invtriangle, color=brown];
2125[label="216.245.213.130;23pkt 23fpkt", shape=invtriangle, color=brown];
2173[label="216.38.69.149;19pkt 19fpkt", shape=invtriangle, color=brown];
2244[label="208.254.133.176;35pkt 35fpkt", shape=invtriangle, color=brown];
2281[label="175.189.235.190;5pkt 5fpkt", shape=invtriangle, color=brown];
2335[label="216.245.167.205;6pkt 6fpkt", shape=invtriangle, color=brown];
2419[label="213.208.110.240;25pkt 25fpkt", shape=invtriangle, color=brown];
2675[label="216.38.69.149;20pkt 20fpkt", shape=invhouse, color=bisque];
2740[label="175.189.235.190;5pkt 5fpkt", shape=invhouse, color=bisque];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 160.62.118.219:*}[48.3333%]&lt;BR/&gt;{*:80, 193.104.110.35:*}[25.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6815%)&lt;BR/&gt; 4422: (0.530786%)&lt;BR/&gt; 4424: (0.424628%)&lt;BR/&gt; 2839: (0.424628%)&lt;BR/&gt; 2838: (0.424628%)&gt;];
}
282--654[label="0.11215;12pkt 12fpkt"];
282--668[label="0.11215;12pkt 12fpkt"];
282--682[label="0.11215;12pkt 12fpkt"];
282--723[label="1;25pkt 25fpkt"];
282--1142[label="0.0666667;2pkt 2fpkt"];
282--1253[label="0.130435;3pkt 3fpkt"];
282--1323[label="0.1;2pkt 2fpkt"];
282--1445[label="0.0277778;1pkt 1fpkt"];
282--1504[label="0.2;1pkt 1fpkt"];
282--1506[label="0.0952381;2pkt 2fpkt"];
282--1583[label="0.166667;1pkt 1fpkt"];
282--1700[label="0.115385;3pkt 3fpkt"];
282--1778[label="1;25pkt 25fpkt"];
282--2054[label="0.0666667;2pkt 2fpkt"];
282--2125[label="0.130435;3pkt 3fpkt"];
282--2173[label="0.105263;2pkt 2fpkt"];
282--2244[label="0.0285714;1pkt 1fpkt"];
282--2281[label="0.2;1pkt 1fpkt"];
282--2283[label="0.0952381;2pkt 2fpkt"];
282--2335[label="0.166667;1pkt 1fpkt"];
282--2419[label="0.12;3pkt 3fpkt"];
282--2675[label="0.1;2pkt 2fpkt"];
282--2740[label="0.2;1pkt 1fpkt"];
723--1778[label="1;25pkt 25fpkt"];
1142--2054[label="1;30pkt 30fpkt"];
1253--2125[label="1;23pkt 23fpkt"];
1323--2173[label="1;19pkt 19fpkt"];
1323--2675[label="1;20pkt 20fpkt"];
1445--2244[label="1;35pkt 35fpkt"];
1504--2281[label="1;5pkt 5fpkt"];
1504--2740[label="1;5pkt 5fpkt"];
1583--2335[label="1;6pkt 6fpkt"];
1700--2419[label="1;25pkt 25fpkt"];
2173--2675[label="1;19pkt 19fpkt"];
2281--2740[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.118.219" src_port="80"/>
      <filter dst_ip="193.104.110.35" src_port="80"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.16.187.102"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.16.208.102"/>
    </slice>
    <from sec="1005455220" usec="0"/>
    <to sec="1005455497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.27.178.104"/>
    </slice>
    <from sec="1005454967" usec="0"/>
    <to sec="1005455293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
505[label="133.28.208.182;d;140pkt 140fpkt", shape=diamond, color=yellow];
925[label="69.163.43.53;28pkt 28fpkt", shape=pentagon, color=darkviolet];
951[label="213.14.100.60;3pkt 3fpkt", shape=pentagon, color=darkviolet];
960[label="213.171.91.62;20pkt 20fpkt", shape=pentagon, color=darkviolet];
1157[label="215.145.146.105;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1366[label="132.118.111.157;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1915[label="69.163.43.53;28pkt 28fpkt", shape=invtriangle, color=brown];
1931[label="213.14.100.60;4pkt 4fpkt", shape=invtriangle, color=brown];
2062[label="215.145.146.105;10pkt 10fpkt", shape=invtriangle, color=brown];
2199[label="132.118.111.157;6pkt 6fpkt", shape=invtriangle, color=brown];
2538[label="213.14.100.60;3pkt 3fpkt", shape=invhouse, color=bisque];
2689[label="132.118.111.157;5pkt 5fpkt", shape=invhouse, color=bisque];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.28.208.182:*}[92.9032%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8099%)&lt;BR/&gt; 4156: (0.760456%)&lt;BR/&gt; 4155: (0.760456%)&lt;BR/&gt; 4154: (0.760456%)&lt;BR/&gt; 4398: (0.570342%)&gt;];
}
505--523[label="0.00714286;1pkt 1fpkt"];
505--825[label="0.010101;1pkt 1fpkt"];
505--925[label="1;28pkt 28fpkt"];
505--951[label="1;3pkt 3fpkt"];
505--960[label="1;20pkt 20fpkt"];
505--1157[label="0.0909091;1pkt 1fpkt"];
505--1173[label="0.0277778;1pkt 1fpkt"];
505--1214[label="0.00714286;1pkt 1fpkt"];
505--1580[label="0.00714286;1pkt 1fpkt"];
505--1644[label="0.0125;1pkt 1fpkt"];
505--1851[label="0.01;1pkt 1fpkt"];
505--1915[label="1;28pkt 28fpkt"];
505--1931[label="1;4pkt 4fpkt"];
505--2062[label="0.1;1pkt 1fpkt"];
505--2199[label="0.166667;1pkt 1fpkt"];
505--2333[label="0.00714286;1pkt 1fpkt"];
505--2379[label="0.0126582;1pkt 1fpkt"];
505--2498[label="0.010101;1pkt 1fpkt"];
505--2538[label="1;3pkt 3fpkt"];
925--1915[label="1;28pkt 28fpkt"];
951--1931[label="1;3pkt 3fpkt"];
951--2538[label="1;3pkt 3fpkt"];
1157--2062[label="1;10pkt 10fpkt"];
1366--2199[label="1;5pkt 5fpkt"];
1366--2689[label="1;5pkt 5fpkt"];
1931--2538[label="1;3pkt 3fpkt"];
2199--2689[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.208.182" src_port="80"/>
    </slice>
    <from sec="1005454945" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.219.193.106"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.202.174.107"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.8.19.108"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
408[label="144.224.156.197;d;44pkt 44fpkt", shape=diamond, color=yellow];
1169[label="214.29.108.108;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1369[label="69.77.51.158;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2072[label="214.29.108.108;6pkt 6fpkt", shape=invtriangle, color=brown];
2201[label="69.77.51.158;9pkt 9fpkt", shape=invtriangle, color=brown];
2691[label="69.77.51.158;10pkt 10fpkt", shape=invhouse, color=bisque];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.145.146.172:80, 144.224.156.197:*}[26.087%]&lt;BR/&gt;{69.77.51.158:80, 144.224.156.197:*}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38442: (2.32558%)&lt;BR/&gt; 38441: (2.32558%)&lt;BR/&gt; 38440: (2.32558%)&lt;BR/&gt; 38439: (2.32558%)&gt;];
}
408--1169[label="0.714286;5pkt 5fpkt"];
408--1369[label="1;10pkt 10fpkt"];
408--1432[label="0.521739;12pkt 12fpkt"];
408--1433[label="0.181818;8pkt 8fpkt"];
408--2072[label="0.666667;4pkt 4fpkt"];
408--2201[label="1;9pkt 9fpkt"];
408--2238[label="0.181818;8pkt 8fpkt"];
408--2691[label="1;10pkt 10fpkt"];
408--2716[label="0.159091;7pkt 7fpkt"];
1169--2072[label="1;6pkt 6fpkt"];
1369--2201[label="1;9pkt 9fpkt"];
1369--2691[label="1;10pkt 10fpkt"];
2201--2691[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.156.197" src_ip="215.145.146.172" src_port="80"/>
      <filter dst_ip="144.224.156.197" src_ip="69.77.51.158" src_port="80"/>
    </slice>
    <from sec="1005454940" usec="0"/>
    <to sec="1005455309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.11.114.108"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.163.113.111"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.28.32.113"/>
    </slice>
    <from sec="1005454809" usec="0"/>
    <to sec="1005454934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.71.48.113"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.20.136.114"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.157.194.115"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.67334,3.25262,999,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
17[label="134.0.19.135s;4pkt 4fpkt", shape=rectangle, color=red];
1199[label="69.16.235.115;44pkt 44fpkt", shape=pentagon, color=darkviolet];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.16.235.115:25, 133.28.52.195:*}[76.5957%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.875%)&lt;BR/&gt; 80: (3.125%)&lt;BR/&gt; 1344: (2.08333%)&lt;BR/&gt; 3691: (1.04167%)&lt;BR/&gt; 3681: (1.04167%)&gt;];
}
17--1199[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.52.195" src_ip="69.16.235.115" src_port="25"/>
    </slice>
    <from sec="1005454805" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.137.123.116"/>
    </slice>
    <from sec="1005455057" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.227.24.117"/>
    </slice>
    <from sec="1005455314" usec="0"/>
    <to sec="1005455464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.229.108.117"/>
    </slice>
    <from sec="1005454889" usec="0"/>
    <to sec="1005455163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.212.125.118"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.17.141.118"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.40.231.118"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.20.219.119"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.97.15.120"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.85.72.122"/>
    </slice>
    <from sec="1005454808" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.11.118.122"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.45.134.122"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.3.150.122"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.104.205.125"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.109.32.126"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.101.167.126"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.104.119.128"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.160.21.130"/>
    </slice>
    <from sec="1005454823" usec="0"/>
    <to sec="1005455506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.52.134.131"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.82.232.132"/>
    </slice>
    <from sec="1005454990" usec="0"/>
    <to sec="1005455375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,011,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
604[label="160.62.75.134;s;11pkt 11fpkt", shape=diamond, color=yellow];
1269[label="160.62.75.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2137[label="160.62.75.134;1pkt 1fpkt", shape=invtriangle, color=brown];
2655[label="160.62.75.134;1pkt 1fpkt", shape=invhouse, color=bisque];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.62.75.134:1243, *:*}[27.2727%]&lt;BR/&gt;{160.62.75.134:12345, *:*}[27.2727%]&lt;BR/&gt;{160.62.75.134:27374, *:*}[27.2727%]&lt;BR/&gt;{160.62.75.134:*, 193.45.90.79:*}[27.2727%]&lt;BR/&gt;{160.62.75.134:*, 208.138.117.96:*}[27.2727%]&lt;BR/&gt;{160.62.75.134:*, 216.42.116.227:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (14.2857%)&lt;BR/&gt; 2852: (14.2857%)&lt;BR/&gt; 27374: (10.7143%)&lt;BR/&gt; 12345: (10.7143%)&lt;BR/&gt; 1243: (10.7143%)&gt;];
}
604--1269[label="1;1pkt 1fpkt"];
604--2137[label="1;1pkt 1fpkt"];
604--2655[label="1;1pkt 1fpkt"];
1269--2137[label="1;1pkt 1fpkt"];
1269--2655[label="1;1pkt 1fpkt"];
2137--2655[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.42.116.227" src_ip="160.62.75.134"/>
      <filter dst_ip="208.138.117.96" src_ip="160.62.75.134"/>
      <filter dst_ip="193.45.90.79" src_ip="160.62.75.134"/>
      <filter src_ip="160.62.75.134" src_port="27374"/>
      <filter src_ip="160.62.75.134" src_port="12345"/>
      <filter src_ip="160.62.75.134" src_port="1243"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.40.188.135"/>
    </slice>
    <from sec="1005455075" usec="0"/>
    <to sec="1005455499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749369,3.20786,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
294[label="69.54.128.136;s;47pkt 47fpkt", shape=diamond, color=yellow];
1276[label="69.54.128.136;49pkt 49fpkt", shape=pentagon, color=darkviolet];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.54.128.136:80, 193.165.196.212:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45374: (1.04167%)&lt;BR/&gt; 45361: (1.04167%)&lt;BR/&gt; 45360: (1.04167%)&lt;BR/&gt; 45344: (1.04167%)&gt;];
}
294--1276[label="0.978723;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="193.165.196.212" src_ip="69.54.128.136" src_port="80"/>
    </slice>
    <from sec="1005454880" usec="0"/>
    <to sec="1005455461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749369,3.20786,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
255[label="43.116.155.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
1277[label="43.116.155.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.116.155.136:6346, 130.131.213.230:1186}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 1186: (50%)&gt;];
}
255--1277[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.213.230" dst_port="1186" src_ip="43.116.155.136" src_port="6346"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.128.35.137"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.198.54.137"/>
    </slice>
    <from sec="1005455031" usec="0"/>
    <to sec="1005455488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.181.112.137"/>
    </slice>
    <from sec="1005455026" usec="0"/>
    <to sec="1005455189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.162.169.137"/>
    </slice>
    <from sec="1005454815" usec="0"/>
    <to sec="1005455505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.172.4.138"/>
    </slice>
    <from sec="1005454955" usec="0"/>
    <to sec="1005455408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.153.240.139"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.105.225.142"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.97.57.143"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.86.68.144"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.174.131.144"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.58.115.146"/>
    </slice>
    <from sec="1005454804" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.110.136.146"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.200.206.146"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.221.83.148"/>
    </slice>
    <from sec="1005454805" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.229.227.148"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.89.161.150"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.199.25.151"/>
    </slice>
    <from sec="1005454981" usec="0"/>
    <to sec="1005455001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.131.102.151"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.126.165.154"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.27.178.154"/>
    </slice>
    <from sec="1005455276" usec="0"/>
    <to sec="1005455381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749369,3.20786,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
171[label="133.28.42.155;s;2pkt 2fpkt", shape=diamond, color=yellow];
263[label="2.220.86.199;d;1pkt 1fpkt", shape=diamond, color=yellow];
1352[label="133.28.42.155;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.28.42.155:4606, 43.105.172.24:6699}[33.3333%]&lt;BR/&gt;{133.28.42.155:0, 43.66.4.149:0}[33.3333%]&lt;BR/&gt;{133.28.42.155:1297, 2.220.86.199:6699}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (41.6667%)&lt;BR/&gt; 1297: (25%)&lt;BR/&gt; 4606: (16.6667%)&lt;BR/&gt; 0: (16.6667%)&gt;];
}
171--263[label="1;1pkt 1fpkt"];
171--1352[label="1;2pkt 2fpkt"];
263--1352[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="2.220.86.199" dst_port="6699" src_ip="133.28.42.155" src_port="1297"/>
      <filter dst_ip="43.66.4.149" src_ip="133.28.42.155"/>
      <filter dst_ip="43.105.172.24" dst_port="6699" src_ip="133.28.42.155" src_port="4606"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.38.68.155"/>
    </slice>
    <from sec="1005454957" usec="0"/>
    <to sec="1005455423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.47.88.156"/>
    </slice>
    <from sec="1005454862" usec="0"/>
    <to sec="1005455375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.48.153.156"/>
    </slice>
    <from sec="1005454827" usec="0"/>
    <to sec="1005455433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.193.187.157"/>
    </slice>
    <from sec="1005455367" usec="0"/>
    <to sec="1005455422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.113.21.160"/>
    </slice>
    <from sec="1005455173" usec="0"/>
    <to sec="1005455423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.69.127.161"/>
    </slice>
    <from sec="1005454810" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.54.122.162"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.99.66.163"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.194.6.164"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
555[label="160.62.75.134;d;12pkt 12fpkt", shape=diamond, color=yellow];
1393[label="135.101.7.164;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2218[label="135.101.7.164;1pkt 1fpkt", shape=invtriangle, color=brown];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 160.62.75.134:1243}[23.0769%]&lt;BR/&gt;{*:*, 160.62.75.134:12345}[23.0769%]&lt;BR/&gt;{*:*, 160.62.75.134:27374}[23.0769%]&lt;BR/&gt;{193.45.90.79:*, 160.62.75.134:*}[23.0769%]&lt;BR/&gt;{208.138.117.96:*, 160.62.75.134:*}[23.0769%]&lt;BR/&gt;{216.42.116.227:*, 160.62.75.134:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27374: (10%)&lt;BR/&gt; 12345: (10%)&lt;BR/&gt; 1243: (10%)&lt;BR/&gt; 6667: (6.66667%)&lt;BR/&gt; 6661: (6.66667%)&gt;];
}
555--1393[label="0.5;1pkt 1fpkt"];
1393--2218[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.75.134" src_ip="216.42.116.227"/>
      <filter dst_ip="160.62.75.134" src_ip="208.138.117.96"/>
      <filter dst_ip="160.62.75.134" src_ip="193.45.90.79"/>
      <filter dst_ip="160.62.75.134" dst_port="27374"/>
      <filter dst_ip="160.62.75.134" dst_port="12345"/>
      <filter dst_ip="160.62.75.134" dst_port="1243"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.196.60.164"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.39.69.164"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.150.193.165"/>
    </slice>
    <from sec="1005454806" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.106.212.166"/>
    </slice>
    <from sec="1005454992" usec="0"/>
    <to sec="1005455461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.245.215.166"/>
    </slice>
    <from sec="1005455082" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.116.118.167"/>
    </slice>
    <from sec="1005455390" usec="0"/>
    <to sec="1005455453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.29.107.168"/>
    </slice>
    <from sec="1005455126" usec="0"/>
    <to sec="1005455436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.50.195.168"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.109.225.168"/>
    </slice>
    <from sec="1005455224" usec="0"/>
    <to sec="1005455393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.84.84.170"/>
    </slice>
    <from sec="1005455264" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.25.10.171"/>
    </slice>
    <from sec="1005455264" usec="0"/>
    <to sec="1005455342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.179.195.173"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.199.11.174"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.207.69.174"/>
    </slice>
    <from sec="1005454808" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.68864,3.23498,999,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
20[label="165.25.65.176s;6pkt 6fpkt", shape=rectangle, color=red];
1443[label="165.25.65.176;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2242[label="165.25.65.176;21pkt 21fpkt", shape=invtriangle, color=brown];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.25.65.176:*, 130.147.157.21:119}[59.0909%]&lt;BR/&gt;{165.25.65.176:119, 130.147.157.21:*}[40.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 119: (50%)&lt;BR/&gt; 1265: (3.06122%)&lt;BR/&gt; 1264: (3.06122%)&lt;BR/&gt; 1263: (3.06122%)&lt;BR/&gt; 1156: (3.06122%)&gt;];
}
20--1443[label="1;6pkt 6fpkt"];
20--2242[label="0.833333;5pkt 5fpkt"];
1443--2242[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="130.147.157.21" src_ip="165.25.65.176" src_port="119"/>
      <filter dst_ip="130.147.157.21" dst_port="119" src_ip="165.25.65.176"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.38.69.176"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
506[label="133.28.28.177;d;21pkt 21fpkt", shape=diamond, color=yellow];
1007[label="0.106.5.73;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1446[label="198.87.136.176;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2245[label="198.87.136.176;16pkt 16fpkt", shape=invtriangle, color=brown];
2803[label="192.26.115.230;99pkt 99fpkt", shape=invhouse, color=bisque];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.26.115.230:*, 192.11.119.255:53}[59.2593%]&lt;BR/&gt;{*:80, *:*}[38.5185%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (26.2658%)&lt;BR/&gt; 80: (23.7342%)&lt;BR/&gt; 3079: (0.949367%)&lt;BR/&gt; 61392: (0.632911%)&lt;BR/&gt; 61390: (0.632911%)&gt;];
}
506--1007[label="1;5pkt 5fpkt"];
506--1446[label="0.0588235;1pkt 1fpkt"];
506--1711[label="0.047619;1pkt 1fpkt"];
506--2245[label="0.0625;1pkt 1fpkt"];
506--2392[label="0.380952;8pkt 8fpkt"];
506--2427[label="0.047619;1pkt 1fpkt"];
506--2801[label="0.380952;8pkt 8fpkt"];
506--2803[label="0.047619;1pkt 1fpkt"];
506--2823[label="0.047619;1pkt 1fpkt"];
1446--2245[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="192.11.119.255" dst_port="53" src_ip="192.26.115.230"/>
    </slice>
    <from sec="1005454825" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.150.244.176"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.135.17.177"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.22.42.177"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.10.49.177"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.152.51.177"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.93.107.177"/>
    </slice>
    <from sec="1005454951" usec="0"/>
    <to sec="1005455195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.107.119.178"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749369,3.20786,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
568[label="200.146.35.179;s;2pkt 2fpkt", shape=diamond, color=yellow];
1462[label="200.146.35.179;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.146.35.179:0, 193.165.196.212:0}[50%]&lt;BR/&gt;{200.146.35.179:6699, 193.165.196.212:53447}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (66.6667%)&lt;BR/&gt; 53447: (16.6667%)&lt;BR/&gt; 6699: (16.6667%)&gt;];
}
568--1462[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.165.196.212" dst_port="53447" src_ip="200.146.35.179" src_port="6699"/>
      <filter dst_ip="193.165.196.212" src_ip="200.146.35.179"/>
    </slice>
    <from sec="1005454806" usec="0"/>
    <to sec="1005455470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.87.80.180"/>
    </slice>
    <from sec="1005455195" usec="0"/>
    <to sec="1005455289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.23.40.183"/>
    </slice>
    <from sec="1005454861" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.233.240.184"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.113.21.187"/>
    </slice>
    <from sec="1005454812" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.139.171.187"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.221.177.187"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.217.196.187"/>
    </slice>
    <from sec="1005454937" usec="0"/>
    <to sec="1005455471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.162.208.187"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.208.228.189"/>
    </slice>
    <from sec="1005454804" usec="0"/>
    <to sec="1005455263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
340[label="68.70.115.179;d;1pkt 1fpkt", shape=diamond, color=yellow];
1502[label="160.62.104.190;26pkt 26fpkt", shape=pentagon, color=darkviolet];
2279[label="160.62.104.190;25pkt 25fpkt", shape=invtriangle, color=brown];
2739[label="160.62.104.190;26pkt 26fpkt", shape=invhouse, color=bisque];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.62.104.190:*, *:1214}[96.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (48.0769%)&lt;BR/&gt; 2803: (2.5641%)&lt;BR/&gt; 2935: (1.92308%)&lt;BR/&gt; 2914: (1.92308%)&lt;BR/&gt; 2910: (1.92308%)&gt;];
}
340--1502[label="1;1pkt 1fpkt"];
340--2279[label="1;1pkt 1fpkt"];
340--2739[label="1;1pkt 1fpkt"];
1502--2279[label="1;25pkt 25fpkt"];
1502--2739[label="1;26pkt 26fpkt"];
2279--2739[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_port="1214" src_ip="160.62.104.190"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.166.18.191"/>
    </slice>
    <from sec="1005454861" usec="0"/>
    <to sec="1005455264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.197.135.192"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.21.144.193"/>
    </slice>
    <from sec="1005455074" usec="0"/>
    <to sec="1005455472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
587[label="144.224.154.247;d;21pkt 21fpkt", shape=diamond, color=yellow];
1515[label="192.20.242.193;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1550[label="198.167.48.200;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2313[label="198.167.48.200;19pkt 19fpkt", shape=invtriangle, color=brown];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.20.242.193:80, 144.224.154.247:*}[28.9474%]&lt;BR/&gt;{198.167.48.200:80, 144.224.227.109:*}[28.9474%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38622: (2.17391%)&lt;BR/&gt; 38617: (2.17391%)&lt;BR/&gt; 46471: (1.44928%)&lt;BR/&gt; 46470: (1.44928%)&gt;];
}
587--1515[label="1;10pkt 10fpkt"];
587--1550[label="0.105263;2pkt 2fpkt"];
587--2313[label="0.105263;2pkt 2fpkt"];
1550--2313[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.227.109" src_ip="198.167.48.200" src_port="80"/>
      <filter dst_ip="144.224.154.247" src_ip="192.20.242.193" src_port="80"/>
    </slice>
    <from sec="1005454872" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749369,3.20786,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
219[label="130.131.232.81;d;4pkt 4fpkt", shape=diamond, color=yellow];
1516[label="217.198.32.194;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.198.32.194:8888, *:*}[72.7273%]&lt;BR/&gt;{*:6699, 130.131.232.81:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (37.5%)&lt;BR/&gt; 6699: (12.5%)&lt;BR/&gt; 56316: (8.33333%)&lt;BR/&gt; 64594: (4.16667%)&lt;BR/&gt; 56335: (4.16667%)&gt;];
}
219--1516[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="217.198.32.194" src_port="8888"/>
      <filter dst_ip="130.131.232.81" src_port="6699"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.11.116.194"/>
    </slice>
    <from sec="1005454807" usec="0"/>
    <to sec="1005455506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.11.118.195"/>
    </slice>
    <from sec="1005454806" usec="0"/>
    <to sec="1005455506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.82.181.195"/>
    </slice>
    <from sec="1005454823" usec="0"/>
    <to sec="1005455477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.80.250.195"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.138.8.197"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.192.42.199"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.199.84.199"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.80.220.199"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.62.123.200"/>
    </slice>
    <from sec="1005454837" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.4.66.201"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.75553,3.22231,999,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_354{
style=filled;
color=gray75;
24[label="197.6.122.202s;1pkt 1fpkt", shape=rectangle, color=red];
1564[label="197.6.122.202;71pkt 71fpkt", shape=pentagon, color=darkviolet];
2325[label="197.6.122.202;71pkt 71fpkt", shape=invtriangle, color=brown];
2767[label="197.6.122.202;71pkt 71fpkt", shape=invhouse, color=bisque];
stat354[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.6.122.202:*, 144.224.109.53:*}[94.3662%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 871: (2.80374%)&lt;BR/&gt; 62655: (0.934579%)&lt;BR/&gt; 45663: (0.934579%)&lt;BR/&gt; 63986: (0.700935%)&lt;BR/&gt; 63691: (0.700935%)&gt;];
}
24--1564[label="1;1pkt 1fpkt"];
24--2325[label="1;1pkt 1fpkt"];
24--2767[label="1;1pkt 1fpkt"];
1564--2325[label="1;71pkt 71fpkt"];
1564--2767[label="1;71pkt 71fpkt"];
2325--2767[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.109.53" src_ip="197.6.122.202"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.62.123.202"/>
    </slice>
    <from sec="1005455285" usec="0"/>
    <to sec="1005455400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749369,3.20786,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_356{
style=filled;
color=gray75;
334[label="68.22.132.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
1566[label="68.22.132.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat356[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.22.132.202:6348, 130.131.213.230:1212}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6348: (50%)&lt;BR/&gt; 1212: (50%)&gt;];
}
334--1566[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.213.230" dst_port="1212" src_ip="68.22.132.202" src_port="6348"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.85.17.203"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.105.34.203"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.94.22.204"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_360{
style=filled;
color=gray75;
308[label="133.28.86.129;d;37pkt 37fpkt", shape=diamond, color=yellow];
369[label="193.97.196.200;d;43pkt 43fpkt", shape=diamond, color=yellow];
422[label="68.0.226.87;s;10pkt 10fpkt", shape=diamond, color=yellow];
464[label="130.131.232.68;d;67pkt 67fpkt", shape=diamond, color=yellow];
521[label="43.232.166.173;s;7pkt 7fpkt", shape=diamond, color=yellow];
559[label="1.3.81.112;s;8pkt 8fpkt", shape=diamond, color=yellow];
929[label="43.99.186.53;7pkt 7fpkt", shape=pentagon, color=darkviolet];
995[label="209.5.198.69;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1026[label="209.21.208.75;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1089[label="209.59.148.88;8pkt 8fpkt", shape=pentagon, color=darkviolet];
1574[label="217.198.32.204;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1918[label="43.99.186.53;8pkt 8fpkt", shape=invtriangle, color=brown];
1964[label="209.5.198.69;11pkt 11fpkt", shape=invtriangle, color=brown];
1979[label="209.21.208.75;6pkt 6fpkt", shape=invtriangle, color=brown];
2023[label="209.59.148.88;8pkt 8fpkt", shape=invtriangle, color=brown];
2282[label="1.127.18.191;5pkt 5fpkt", shape=invtriangle, color=brown];
2330[label="217.198.32.204;5pkt 5fpkt", shape=invtriangle, color=brown];
2532[label="43.99.186.53;8pkt 8fpkt", shape=invhouse, color=bisque];
2557[label="209.5.198.69;11pkt 11fpkt", shape=invhouse, color=bisque];
stat360[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8888, *:*}[56.7164%]&lt;BR/&gt;{*:*, 130.131.232.68:*}[33.3333%]&lt;BR/&gt;{*:*, 193.97.196.200:*}[21.393%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (30.2583%)&lt;BR/&gt; 80: (5.71956%)&lt;BR/&gt; 4567: (4.98155%)&lt;BR/&gt; 0: (4.42804%)&lt;BR/&gt; 7777: (4.05904%)&gt;];
}
308--311[label="0.2;1pkt 1fpkt"];
308--422[label="0.1;1pkt 1fpkt"];
308--521[label="0.142857;1pkt 1fpkt"];
308--594[label="0.166667;1pkt 1fpkt"];
308--654[label="0.027027;1pkt 1fpkt"];
308--668[label="0.027027;1pkt 1fpkt"];
308--682[label="0.027027;1pkt 1fpkt"];
308--739[label="0.121212;4pkt 4fpkt"];
308--957[label="0.0625;1pkt 1fpkt"];
308--995[label="0.0909091;1pkt 1fpkt"];
308--1026[label="0.2;1pkt 1fpkt"];
308--1189[label="0.5;1pkt 1fpkt"];
308--1574[label="0.166667;1pkt 1fpkt"];
308--1650[label="0.142857;1pkt 1fpkt"];
308--1688[label="0.0833333;1pkt 1fpkt"];
308--1936[label="0.0666667;1pkt 1fpkt"];
308--1964[label="0.0909091;1pkt 1fpkt"];
308--1979[label="0.166667;1pkt 1fpkt"];
308--2086[label="0.333333;1pkt 1fpkt"];
308--2282[label="0.2;1pkt 1fpkt"];
308--2330[label="0.2;1pkt 1fpkt"];
308--2413[label="0.0909091;1pkt 1fpkt"];
308--2540[label="0.0666667;1pkt 1fpkt"];
308--2557[label="0.0909091;1pkt 1fpkt"];
308--2814[label="0.0909091;1pkt 1fpkt"];
369--521[label="0.142857;1pkt 1fpkt"];
369--559[label="0.125;1pkt 1fpkt"];
369--713[label="0.0769231;1pkt 1fpkt"];
369--739[label="0.030303;1pkt 1fpkt"];
369--929[label="0.142857;1pkt 1fpkt"];
369--957[label="0.0625;1pkt 1fpkt"];
369--995[label="0.0909091;1pkt 1fpkt"];
369--1439[label="0.25;1pkt 1fpkt"];
369--1670[label="0.0909091;1pkt 1fpkt"];
369--1918[label="0.125;1pkt 1fpkt"];
369--1936[label="0.0666667;1pkt 1fpkt"];
369--1964[label="0.0909091;1pkt 1fpkt"];
369--2282[label="0.2;1pkt 1fpkt"];
369--2532[label="0.125;1pkt 1fpkt"];
369--2540[label="0.0666667;1pkt 1fpkt"];
369--2557[label="0.0909091;1pkt 1fpkt"];
422--464[label="0.1;1pkt 1fpkt"];
464--521[label="0.142857;1pkt 1fpkt"];
464--654[label="0.0447761;3pkt 3fpkt"];
464--668[label="0.0447761;3pkt 3fpkt"];
464--682[label="0.0447761;3pkt 3fpkt"];
464--739[label="0.030303;1pkt 1fpkt"];
464--1089[label="0.125;1pkt 1fpkt"];
464--1193[label="0.65;26pkt 26fpkt"];
464--1574[label="0.166667;1pkt 1fpkt"];
464--2023[label="0.125;1pkt 1fpkt"];
464--2089[label="0.65;26pkt 26fpkt"];
464--2330[label="0.2;1pkt 1fpkt"];
464--2629[label="0.666667;26pkt 26fpkt"];
559--580[label="0.25;2pkt 2fpkt"];
929--1918[label="1;7pkt 7fpkt"];
929--2532[label="1;7pkt 7fpkt"];
995--1964[label="1;11pkt 11fpkt"];
995--2557[label="1;11pkt 11fpkt"];
1026--1979[label="1;5pkt 5fpkt"];
1089--2023[label="1;8pkt 8fpkt"];
1574--2330[label="1;5pkt 5fpkt"];
1918--2532[label="1;8pkt 8fpkt"];
1964--2557[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.232.68"/>
      <filter dst_ip="193.97.196.200"/>
      <filter src_port="8888"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.82.235.204"/>
    </slice>
    <from sec="1005454976" usec="0"/>
    <to sec="1005455504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.169.74.206"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.152.208.206"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.148.169.207"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.229.108.209"/>
    </slice>
    <from sec="1005455306" usec="0"/>
    <to sec="1005455433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_366{
style=filled;
color=gray75;
599[label="43.232.205.209;s;3pkt 3fpkt", shape=diamond, color=yellow];
1602[label="43.232.205.209;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2346[label="43.232.205.209;3pkt 3fpkt", shape=invtriangle, color=brown];
2778[label="43.232.205.209;3pkt 3fpkt", shape=invhouse, color=bisque];
stat366[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.232.205.209:8888, 193.97.216.19:1465}[33.3333%]&lt;BR/&gt;{43.232.205.209:8888, 133.28.10.145:1895}[33.3333%]&lt;BR/&gt;{43.232.205.209:8888, 133.28.98.158:3633}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (50%)&lt;BR/&gt; 3633: (16.6667%)&lt;BR/&gt; 1895: (16.6667%)&lt;BR/&gt; 1465: (16.6667%)&gt;];
}
599--1602[label="1;3pkt 3fpkt"];
599--2346[label="1;3pkt 3fpkt"];
599--2778[label="1;3pkt 3fpkt"];
1602--2346[label="1;3pkt 3fpkt"];
1602--2778[label="1;3pkt 3fpkt"];
2346--2778[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.98.158" dst_port="3633" src_ip="43.232.205.209" src_port="8888"/>
      <filter dst_ip="133.28.10.145" dst_port="1895" src_ip="43.232.205.209" src_port="8888"/>
      <filter dst_ip="193.97.216.19" dst_port="1465" src_ip="43.232.205.209" src_port="8888"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.1.212.209"/>
    </slice>
    <from sec="1005455153" usec="0"/>
    <to sec="1005455191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.101.234.211"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.219.50.212"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.160.73.214"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889902,3.19508,999,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
312[label="193.97.199.239;d;3pkt 3fpkt", shape=diamond, color=yellow];
1154[label="43.142.16.105;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1618[label="193.141.150.215;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2783[label="193.141.150.215;1pkt 1fpkt", shape=invhouse, color=bisque];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.101.48.10:8888, 193.97.199.239:2208}[33.3333%]&lt;BR/&gt;{43.142.16.105:6699, 193.97.199.239:4580}[33.3333%]&lt;BR/&gt;{193.141.150.215:5100, 193.97.199.239:4685}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5100: (25%)&lt;BR/&gt; 4685: (25%)&lt;BR/&gt; 6699: (16.6667%)&lt;BR/&gt; 4580: (16.6667%)&lt;BR/&gt; 8888: (8.33333%)&gt;];
}
312--739[label="0.333333;1pkt 1fpkt"];
312--1154[label="1;1pkt 1fpkt"];
312--1618[label="1;1pkt 1fpkt"];
312--2783[label="1;1pkt 1fpkt"];
1618--2783[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.97.199.239" dst_port="4685" src_ip="193.141.150.215" src_port="5100"/>
      <filter dst_ip="193.97.199.239" dst_port="4580" src_ip="43.142.16.105" src_port="6699"/>
      <filter dst_ip="193.97.199.239" dst_port="2208" src_ip="204.101.48.10" src_port="8888"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.98.72.216"/>
    </slice>
    <from sec="1005454832" usec="0"/>
    <to sec="1005455503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.37.182.217"/>
    </slice>
    <from sec="1005454806" usec="0"/>
    <to sec="1005455506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.216.232.217"/>
    </slice>
    <from sec="1005455247" usec="0"/>
    <to sec="1005455326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.170.206.219"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.83.108.221"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.109.161.221"/>
    </slice>
    <from sec="1005455054" usec="0"/>
    <to sec="1005455475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.158.165.221"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.102.140.222"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.112.233.222"/>
    </slice>
    <from sec="1005454805" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.163.200.223"/>
    </slice>
    <from sec="1005454807" usec="0"/>
    <to sec="1005455502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.27.60.224"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749369,3.20786,002,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_383{
style=filled;
color=gray75;
402[label="130.32.200.224;s;2pkt 2fpkt", shape=diamond, color=yellow];
1648[label="130.32.200.224;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat383[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.32.200.224:137, 130.32.200.14:137}[50%]&lt;BR/&gt;{130.32.200.224:138, 130.32.200.14:138}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 138: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
402--1648[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.32.200.14" dst_port="138" src_ip="130.32.200.224" src_port="138"/>
      <filter dst_ip="130.32.200.14" dst_port="137" src_ip="130.32.200.224" src_port="137"/>
    </slice>
    <from sec="1005454845" usec="0"/>
    <to sec="1005455197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.76.70.225"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.162.38.226"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
466[label="193.183.67.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
1656[label="193.183.67.226;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2386[label="193.183.67.226;1pkt 1fpkt", shape=invtriangle, color=brown];
2797[label="193.183.67.226;1pkt 1fpkt", shape=invhouse, color=bisque];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.183.67.226:0, 192.11.114.108:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
466--1656[label="1;1pkt 1fpkt"];
466--2386[label="1;1pkt 1fpkt"];
466--2797[label="1;1pkt 1fpkt"];
1656--2386[label="1;1pkt 1fpkt"];
1656--2797[label="1;1pkt 1fpkt"];
2386--2797[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.11.114.108" src_ip="193.183.67.226"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.107.88.227"/>
    </slice>
    <from sec="1005455457" usec="0"/>
    <to sec="1005455467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.162.41.229"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.138.107.230"/>
    </slice>
    <from sec="1005455441" usec="0"/>
    <to sec="1005455447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.24.212.230"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.116.86.231"/>
    </slice>
    <from sec="1005454831" usec="0"/>
    <to sec="1005455500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.211.3.232"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.115.126.233"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.135.58.234"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.187.131.234"/>
    </slice>
    <from sec="1005455258" usec="0"/>
    <to sec="1005455359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749369,3.20786,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_396{
style=filled;
color=gray75;
560[label="69.162.41.235;s;17pkt 17fpkt", shape=diamond, color=yellow];
1686[label="69.162.41.235;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat396[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.162.41.235:25, 160.62.119.12:*}[58.8235%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 56720: (5.26316%)&lt;BR/&gt; 3637: (5.26316%)&lt;BR/&gt; 4576: (2.63158%)&lt;BR/&gt; 4011: (2.63158%)&gt;];
}
560--1686[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.119.12" src_ip="69.162.41.235" src_port="25"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.97.199.236"/>
    </slice>
    <from sec="1005455258" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.161.190.237"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.190.228.237"/>
    </slice>
    <from sec="1005454907" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.202.44.239"/>
    </slice>
    <from sec="1005454804" usec="0"/>
    <to sec="1005455341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.8.156.240"/>
    </slice>
    <from sec="1005454806" usec="0"/>
    <to sec="1005455506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.12.158.245"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.137.27.246"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.10.14.247"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.66.189.247"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.0.56.248"/>
    </slice>
    <from sec="1005454803" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.217.141.248"/>
    </slice>
    <from sec="1005455073" usec="0"/>
    <to sec="1005455107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.228.18.249"/>
    </slice>
    <from sec="1005455283" usec="0"/>
    <to sec="1005455420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.43.215.249"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.189.31.250"/>
    </slice>
    <from sec="1005454812" usec="0"/>
    <to sec="1005455478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.37.47.250"/>
    </slice>
    <from sec="1005454809" usec="0"/>
    <to sec="1005454933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.26.120.250"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.402588,3.24669,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.5.12.252"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_414{
style=filled;
color=gray75;
415[label="160.62.112.96;d;54pkt 54fpkt", shape=diamond, color=yellow];
704[label="157.66.89.4;45pkt 45fpkt", shape=pentagon, color=darkviolet];
1128[label="43.181.53.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2045[label="43.181.53.98;1pkt 1fpkt", shape=invtriangle, color=brown];
stat414[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.66.89.4:7033, 160.62.112.96:*}[66.6667%]&lt;BR/&gt;{*:1214, 160.62.112.96:*}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7033: (37.6238%)&lt;BR/&gt; 1214: (9.90099%)&lt;BR/&gt; 41536: (1.48515%)&lt;BR/&gt; 41772: (0.990099%)&lt;BR/&gt; 41771: (0.990099%)&gt;];
}
415--704[label="0.666667;30pkt 30fpkt"];
415--1128[label="1;1pkt 1fpkt"];
415--1749[label="1;1pkt 1fpkt"];
415--2045[label="1;1pkt 1fpkt"];
415--2451[label="1;1pkt 1fpkt"];
1128--2045[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.112.96" src_port="1214"/>
      <filter dst_ip="160.62.112.96" src_ip="157.66.89.4" src_port="7033"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.42.175.0"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
687[label="196.203.180.0;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1753[label="196.203.180.0;3pkt 3fpkt", shape=invtriangle, color=brown];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.203.180.0:80, 193.104.110.35:1876}[33.3333%]&lt;BR/&gt;{196.203.180.0:80, 193.104.110.35:1923}[33.3333%]&lt;BR/&gt;{196.203.180.0:80, 193.104.110.35:1930}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1930: (16.6667%)&lt;BR/&gt; 1923: (16.6667%)&lt;BR/&gt; 1876: (16.6667%)&gt;];
}
687--1753[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.104.110.35" dst_port="1930" src_ip="196.203.180.0" src_port="80"/>
      <filter dst_ip="193.104.110.35" dst_port="1923" src_ip="196.203.180.0" src_port="80"/>
      <filter dst_ip="193.104.110.35" dst_port="1876" src_ip="196.203.180.0" src_port="80"/>
    </slice>
    <from sec="1005455304" usec="0"/>
    <to sec="1005455340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.22.186.0"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.217.203.2"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_419{
style=filled;
color=gray75;
699[label="165.105.88.3;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1763[label="165.105.88.3;2pkt 2fpkt", shape=invtriangle, color=brown];
2458[label="165.105.88.3;2pkt 2fpkt", shape=invhouse, color=bisque];
stat419[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.105.88.3:3396, 165.18.205.67:80}[50%]&lt;BR/&gt;{165.105.88.3:3129, 165.25.197.163:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3396: (25%)&lt;BR/&gt; 3129: (25%)&gt;];
}
699--1763[label="1;2pkt 2fpkt"];
699--2458[label="1;2pkt 2fpkt"];
1763--2458[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.197.163" dst_port="80" src_ip="165.105.88.3" src_port="3129"/>
      <filter dst_ip="165.18.205.67" dst_port="80" src_ip="165.105.88.3" src_port="3396"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_420{
style=filled;
color=gray75;
703[label="208.62.4.4;18pkt 18fpkt", shape=pentagon, color=darkviolet];
1766[label="208.62.4.4;19pkt 19fpkt", shape=invtriangle, color=brown];
stat420[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.62.4.4:80, 144.224.152.201:*}[94.7368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61764: (2.7027%)&lt;BR/&gt; 61763: (2.7027%)&lt;BR/&gt; 61762: (2.7027%)&lt;BR/&gt; 61761: (2.7027%)&gt;];
}
703--1766[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.152.201" src_ip="208.62.4.4" src_port="80"/>
    </slice>
    <from sec="1005454979" usec="0"/>
    <to sec="1005455459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_421{
style=filled;
color=gray75;
707[label="192.11.123.4;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1768[label="192.11.123.4;1pkt 1fpkt", shape=invtriangle, color=brown];
stat421[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.11.123.4:795, 23.237.93.15:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 795: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
707--1768[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="23.237.93.15" dst_port="53" src_ip="192.11.123.4" src_port="795"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.176.74.6"/>
    </slice>
    <from sec="1005454804" usec="0"/>
    <to sec="1005455494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
725[label="215.145.146.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1780[label="215.145.146.7;1pkt 1fpkt", shape=invtriangle, color=brown];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.145.146.7:11999, 130.131.233.55:61839}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61839: (50%)&lt;BR/&gt; 11999: (50%)&gt;];
}
725--1780[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.233.55" dst_port="61839" src_ip="215.145.146.7" src_port="11999"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_424{
style=filled;
color=gray75;
727[label="130.131.3.8;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1781[label="130.131.3.8;1pkt 1fpkt", shape=invtriangle, color=brown];
stat424[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.131.3.8:3731, 209.217.165.40:1214}[50%]&lt;BR/&gt;{130.131.3.8:1214, 195.140.215.176:1766}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 3731: (33.3333%)&lt;BR/&gt; 1766: (16.6667%)&gt;];
}
727--1781[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.140.215.176" dst_port="1766" src_ip="130.131.3.8" src_port="1214"/>
      <filter dst_ip="209.217.165.40" dst_port="1214" src_ip="130.131.3.8" src_port="3731"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.112.110.8"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.145.146.9"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.59.224.9"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.18.45.10"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
741[label="133.28.157.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1791[label="133.28.157.10;1pkt 1fpkt", shape=invtriangle, color=brown];
2468[label="133.28.157.10;1pkt 1fpkt", shape=invhouse, color=bisque];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.28.157.10:80, 133.192.249.179:1497}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1497: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
741--1791[label="1;1pkt 1fpkt"];
741--2468[label="1;1pkt 1fpkt"];
1791--2468[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.192.249.179" dst_port="1497" src_ip="133.28.157.10" src_port="80"/>
    </slice>
    <from sec="1005454885" usec="0"/>
    <to sec="1005454907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="141.85.35.11"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.225.96.12"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_432{
style=filled;
color=gray75;
753[label="2.176.182.12;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1798[label="2.176.182.12;5pkt 5fpkt", shape=invtriangle, color=brown];
2471[label="2.176.182.12;5pkt 5fpkt", shape=invhouse, color=bisque];
stat432[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.176.182.12:7093, 133.28.47.241:1477}[20%]&lt;BR/&gt;{2.176.182.12:80, 133.28.47.241:1515}[20%]&lt;BR/&gt;{2.176.182.12:80, 133.28.47.241:1516}[20%]&lt;BR/&gt;{2.176.182.12:80, 133.28.47.241:1517}[20%]&lt;BR/&gt;{2.176.182.12:80, 133.28.47.241:1519}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 7093: (10%)&lt;BR/&gt; 1519: (10%)&lt;BR/&gt; 1517: (10%)&lt;BR/&gt; 1516: (10%)&gt;];
}
753--1798[label="1;5pkt 5fpkt"];
753--2471[label="1;5pkt 5fpkt"];
1798--2471[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.47.241" dst_port="1519" src_ip="2.176.182.12" src_port="80"/>
      <filter dst_ip="133.28.47.241" dst_port="1517" src_ip="2.176.182.12" src_port="80"/>
      <filter dst_ip="133.28.47.241" dst_port="1516" src_ip="2.176.182.12" src_port="80"/>
      <filter dst_ip="133.28.47.241" dst_port="1515" src_ip="2.176.182.12" src_port="80"/>
      <filter dst_ip="133.28.47.241" dst_port="1477" src_ip="2.176.182.12" src_port="7093"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_433{
style=filled;
color=gray75;
197[label="133.28.76.86;d;5pkt 5fpkt", shape=diamond, color=yellow];
754[label="209.163.53.13;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1346[label="68.89.197.153;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1799[label="209.163.53.13;1pkt 1fpkt", shape=invtriangle, color=brown];
2188[label="68.89.197.153;2pkt 2fpkt", shape=invtriangle, color=brown];
2472[label="209.163.53.13;1pkt 1fpkt", shape=invhouse, color=bisque];
2682[label="68.89.197.153;2pkt 2fpkt", shape=invhouse, color=bisque];
stat433[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.163.53.13:6699, 133.28.76.86:2612}[20%]&lt;BR/&gt;{43.106.42.80:6699, 133.28.76.86:2611}[20%]&lt;BR/&gt;{43.108.76.125:6699, 133.28.76.86:2613}[20%]&lt;BR/&gt;{68.89.197.153:6699, 133.28.76.86:2615}[20%]&lt;BR/&gt;{68.89.197.153:6699, 133.28.76.86:2616}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2616: (14.2857%)&lt;BR/&gt; 2615: (14.2857%)&lt;BR/&gt; 2612: (14.2857%)&lt;BR/&gt; 2613: (3.57143%)&gt;];
}
197--754[label="1;1pkt 1fpkt"];
197--1346[label="1;2pkt 2fpkt"];
197--1799[label="1;1pkt 1fpkt"];
197--2188[label="1;2pkt 2fpkt"];
197--2472[label="1;1pkt 1fpkt"];
197--2682[label="1;2pkt 2fpkt"];
754--1799[label="1;1pkt 1fpkt"];
754--2472[label="1;1pkt 1fpkt"];
1346--2188[label="1;2pkt 2fpkt"];
1346--2682[label="1;2pkt 2fpkt"];
1799--2472[label="1;1pkt 1fpkt"];
2188--2682[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.76.86" dst_port="2616" src_ip="68.89.197.153" src_port="6699"/>
      <filter dst_ip="133.28.76.86" dst_port="2615" src_ip="68.89.197.153" src_port="6699"/>
      <filter dst_ip="133.28.76.86" dst_port="2613" src_ip="43.108.76.125" src_port="6699"/>
      <filter dst_ip="133.28.76.86" dst_port="2611" src_ip="43.106.42.80" src_port="6699"/>
      <filter dst_ip="133.28.76.86" dst_port="2612" src_ip="209.163.53.13" src_port="6699"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.89.173.13"/>
    </slice>
    <from sec="1005454812" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.209.6.14"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.135.19.14"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.246.21.14"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.86584,3.18319,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
4[label="130.131.50.15s;236pkt 236fpkt", shape=rectangle, color=red];
279[label="130.154.167.242;d;259pkt 259fpkt", shape=diamond, color=yellow];
762[label="130.131.50.15;299pkt 299fpkt", shape=pentagon, color=darkviolet];
1022[label="198.5.73.75;36pkt 36fpkt", shape=pentagon, color=darkviolet];
1251[label="196.187.58.130;23pkt 23fpkt", shape=pentagon, color=darkviolet];
1327[label="216.38.68.150;8pkt 8fpkt", shape=pentagon, color=darkviolet];
1356[label="216.38.68.156;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1385[label="201.113.206.162;37pkt 37fpkt", shape=pentagon, color=darkviolet];
1425[label="213.164.174.171;37pkt 37fpkt", shape=pentagon, color=darkviolet];
1435[label="213.164.174.173;37pkt 37fpkt", shape=pentagon, color=darkviolet];
1488[label="0.174.122.187;37pkt 37fpkt", shape=pentagon, color=darkviolet];
1642[label="196.219.34.223;37pkt 37fpkt", shape=pentagon, color=darkviolet];
1806[label="130.131.50.15;299pkt 299fpkt", shape=invtriangle, color=brown];
1977[label="198.5.73.75;37pkt 37fpkt", shape=invtriangle, color=brown];
2123[label="196.187.58.130;22pkt 22fpkt", shape=invtriangle, color=brown];
2177[label="216.38.68.150;7pkt 7fpkt", shape=invtriangle, color=brown];
2212[label="201.113.206.162;37pkt 37fpkt", shape=invtriangle, color=brown];
2233[label="213.164.174.171;36pkt 36fpkt", shape=invtriangle, color=brown];
2269[label="0.174.122.187;36pkt 36fpkt", shape=invtriangle, color=brown];
2565[label="198.5.73.75;37pkt 37fpkt", shape=invhouse, color=bisque];
2646[label="196.187.58.130;23pkt 23fpkt", shape=invhouse, color=bisque];
2697[label="201.113.206.162;36pkt 36fpkt", shape=invhouse, color=bisque];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, *:0}[35.2723%]&lt;BR/&gt;{130.131.50.15:*, *:80}[34.7772%]&lt;BR/&gt;{*:*, 130.154.167.242:*}[32.0545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (34.217%)&lt;BR/&gt; 80: (24.5993%)&lt;BR/&gt; 53: (5.94945%)&lt;BR/&gt; 1025: (4.43896%)&lt;BR/&gt; 25: (1.20222%)&gt;];
}
4--6[label="0.0127119;3pkt 3fpkt"];
4--13[label="0.139831;33pkt 33fpkt"];
4--32[label="0.0338983;8pkt 8fpkt"];
4--43[label="0.0127119;3pkt 3fpkt"];
4--52[label="0.0338983;8pkt 8fpkt"];
4--57[label="0.0127119;3pkt 3fpkt"];
4--64[label="0.0338983;8pkt 8fpkt"];
4--655[label="0.00423729;1pkt 1fpkt"];
4--669[label="0.00423729;1pkt 1fpkt"];
4--673[label="0.135593;32pkt 32fpkt"];
4--683[label="0.00423729;1pkt 1fpkt"];
4--762[label="1;236pkt 236fpkt"];
4--1806[label="1;236pkt 236fpkt"];
279--657[label="0.003861;1pkt 1fpkt"];
279--659[label="0.011583;3pkt 3fpkt"];
279--661[label="0.027027;7pkt 7fpkt"];
279--664[label="0.011583;3pkt 3fpkt"];
279--671[label="0.003861;1pkt 1fpkt"];
279--672[label="0.011583;3pkt 3fpkt"];
279--674[label="0.027027;7pkt 7fpkt"];
279--677[label="0.011583;3pkt 3fpkt"];
279--681[label="0.042471;11pkt 11fpkt"];
279--716[label="0.0238095;1pkt 1fpkt"];
279--902[label="0.0238095;1pkt 1fpkt"];
279--1022[label="0.0277778;1pkt 1fpkt"];
279--1028[label="0.0434783;1pkt 1fpkt"];
279--1060[label="0.0322581;1pkt 1fpkt"];
279--1251[label="0.0434783;1pkt 1fpkt"];
279--1327[label="0.125;1pkt 1fpkt"];
279--1356[label="0.166667;1pkt 1fpkt"];
279--1385[label="0.027027;1pkt 1fpkt"];
279--1402[label="0.125;1pkt 1fpkt"];
279--1425[label="0.027027;1pkt 1fpkt"];
279--1435[label="0.027027;1pkt 1fpkt"];
279--1488[label="0.027027;1pkt 1fpkt"];
279--1642[label="0.027027;1pkt 1fpkt"];
279--1774[label="0.0238095;1pkt 1fpkt"];
279--1977[label="0.027027;1pkt 1fpkt"];
279--2123[label="0.0454545;1pkt 1fpkt"];
279--2177[label="0.142857;1pkt 1fpkt"];
279--2212[label="0.027027;1pkt 1fpkt"];
279--2233[label="0.0277778;1pkt 1fpkt"];
279--2269[label="0.0277778;1pkt 1fpkt"];
279--2397[label="0.03125;1pkt 1fpkt"];
279--2565[label="0.027027;1pkt 1fpkt"];
279--2646[label="0.0434783;1pkt 1fpkt"];
279--2697[label="0.0277778;1pkt 1fpkt"];
762--1806[label="1;299pkt 299fpkt"];
1022--1977[label="1;36pkt 36fpkt"];
1022--2565[label="1;36pkt 36fpkt"];
1251--2123[label="1;22pkt 22fpkt"];
1251--2646[label="1;23pkt 23fpkt"];
1327--2177[label="1;7pkt 7fpkt"];
1385--2212[label="1;37pkt 37fpkt"];
1385--2697[label="1;36pkt 36fpkt"];
1425--2233[label="1;36pkt 36fpkt"];
1488--2269[label="1;36pkt 36fpkt"];
1977--2565[label="1;37pkt 37fpkt"];
2123--2646[label="1;22pkt 22fpkt"];
2212--2697[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="130.154.167.242"/>
      <filter dst_port="80" src_ip="130.131.50.15"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_439{
style=filled;
color=gray75;
764[label="193.98.139.15;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1807[label="193.98.139.15;2pkt 2fpkt", shape=invtriangle, color=brown];
2477[label="193.98.139.15;1pkt 1fpkt", shape=invhouse, color=bisque];
stat439[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.98.139.15:80, 144.224.121.17:1085}[50%]&lt;BR/&gt;{193.98.139.15:80, 133.28.157.181:1559}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1559: (37.5%)&lt;BR/&gt; 1085: (12.5%)&gt;];
}
764--1807[label="1;1pkt 1fpkt"];
764--2477[label="1;1pkt 1fpkt"];
1807--2477[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.157.181" dst_port="1559" src_ip="193.98.139.15" src_port="80"/>
      <filter dst_ip="144.224.121.17" dst_port="1085" src_ip="193.98.139.15" src_port="80"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.71.178.15"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
766[label="216.245.213.15;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1809[label="216.245.213.15;2pkt 2fpkt", shape=invtriangle, color=brown];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.245.213.15:80, 144.224.90.43:1897}[50%]&lt;BR/&gt;{216.245.213.15:80, 144.224.90.43:1898}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1898: (25%)&lt;BR/&gt; 1897: (25%)&gt;];
}
766--1809[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.90.43" dst_port="1898" src_ip="216.245.213.15" src_port="80"/>
      <filter dst_ip="144.224.90.43" dst_port="1897" src_ip="216.245.213.15" src_port="80"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_442{
style=filled;
color=gray75;
768[label="133.28.2.16;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1810[label="133.28.2.16;4pkt 4fpkt", shape=invtriangle, color=brown];
2478[label="133.28.2.16;4pkt 4fpkt", shape=invhouse, color=bisque];
stat442[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.28.2.16:60742, 213.97.140.6:1214}[20%]&lt;BR/&gt;{133.28.2.16:60966, 213.119.169.202:1214}[20%]&lt;BR/&gt;{133.28.2.16:60971, 213.119.169.202:1214}[20%]&lt;BR/&gt;{133.28.2.16:60972, 213.119.169.202:1214}[20%]&lt;BR/&gt;{133.28.2.16:60973, 213.119.169.202:1214}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 60973: (11.5385%)&lt;BR/&gt; 60972: (11.5385%)&lt;BR/&gt; 60971: (11.5385%)&lt;BR/&gt; 60966: (11.5385%)&gt;];
}
768--1810[label="1;4pkt 4fpkt"];
768--2478[label="1;4pkt 4fpkt"];
1810--2478[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="213.119.169.202" dst_port="1214" src_ip="133.28.2.16" src_port="60973"/>
      <filter dst_ip="213.119.169.202" dst_port="1214" src_ip="133.28.2.16" src_port="60972"/>
      <filter dst_ip="213.119.169.202" dst_port="1214" src_ip="133.28.2.16" src_port="60971"/>
      <filter dst_ip="213.119.169.202" dst_port="1214" src_ip="133.28.2.16" src_port="60966"/>
      <filter dst_ip="213.97.140.6" dst_port="1214" src_ip="133.28.2.16" src_port="60742"/>
    </slice>
    <from sec="1005454803" usec="0"/>
    <to sec="1005455490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.130.47.16"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="160.62.81.19"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.53.112.19"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_446{
style=filled;
color=gray75;
782[label="208.93.31.20;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1818[label="208.93.31.20;5pkt 5fpkt", shape=invtriangle, color=brown];
stat446[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.93.31.20:80, 193.104.110.205:3048}[20%]&lt;BR/&gt;{208.93.31.20:80, 193.104.110.205:3060}[20%]&lt;BR/&gt;{208.93.31.20:80, 193.104.110.205:3061}[20%]&lt;BR/&gt;{208.93.31.20:80, 193.104.110.205:3062}[20%]&lt;BR/&gt;{208.93.31.20:80, 193.104.110.205:3144}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3144: (11.1111%)&lt;BR/&gt; 3062: (11.1111%)&lt;BR/&gt; 3061: (11.1111%)&lt;BR/&gt; 3060: (11.1111%)&gt;];
}
782--1818[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="193.104.110.205" dst_port="3144" src_ip="208.93.31.20" src_port="80"/>
      <filter dst_ip="193.104.110.205" dst_port="3062" src_ip="208.93.31.20" src_port="80"/>
      <filter dst_ip="193.104.110.205" dst_port="3061" src_ip="208.93.31.20" src_port="80"/>
      <filter dst_ip="193.104.110.205" dst_port="3060" src_ip="208.93.31.20" src_port="80"/>
      <filter dst_ip="193.104.110.205" dst_port="3048" src_ip="208.93.31.20" src_port="80"/>
    </slice>
    <from sec="1005455403" usec="0"/>
    <to sec="1005455475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
783[label="160.62.119.20;24pkt 24fpkt", shape=pentagon, color=darkviolet];
1819[label="160.62.119.20;25pkt 25fpkt", shape=invtriangle, color=brown];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.62.119.20:25, 193.128.213.161:*}[44%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 62077: (2.04082%)&lt;BR/&gt; 58534: (2.04082%)&lt;BR/&gt; 57937: (2.04082%)&lt;BR/&gt; 57474: (2.04082%)&gt;];
}
783--1819[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="193.128.213.161" src_ip="160.62.119.20" src_port="25"/>
    </slice>
    <from sec="1005454852" usec="0"/>
    <to sec="1005455502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_448{
style=filled;
color=gray75;
789[label="69.38.59.22;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1823[label="69.38.59.22;4pkt 4fpkt", shape=invtriangle, color=brown];
2484[label="69.38.59.22;4pkt 4fpkt", shape=invhouse, color=bisque];
stat448[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.38.59.22:20, 144.224.109.53:35597}[25%]&lt;BR/&gt;{69.38.59.22:20, 144.224.109.53:35598}[25%]&lt;BR/&gt;{69.38.59.22:21, 144.224.109.53:56686}[25%]&lt;BR/&gt;{69.38.59.22:21, 144.224.109.53:56687}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (25%)&lt;BR/&gt; 20: (25%)&lt;BR/&gt; 56687: (12.5%)&lt;BR/&gt; 56686: (12.5%)&lt;BR/&gt; 35598: (12.5%)&gt;];
}
789--1823[label="1;4pkt 4fpkt"];
789--2484[label="1;4pkt 4fpkt"];
1823--2484[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.109.53" dst_port="56687" src_ip="69.38.59.22" src_port="21"/>
      <filter dst_ip="144.224.109.53" dst_port="56686" src_ip="69.38.59.22" src_port="21"/>
      <filter dst_ip="144.224.109.53" dst_port="35598" src_ip="69.38.59.22" src_port="20"/>
      <filter dst_ip="144.224.109.53" dst_port="35597" src_ip="69.38.59.22" src_port="20"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949886,3.20102,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_449{
style=filled;
color=gray75;
317[label="68.19.72.22;s;1pkt 1fpkt", shape=diamond, color=yellow];
1824[label="68.19.72.22;1pkt 1fpkt", shape=invtriangle, color=brown];
2485[label="68.19.72.22;1pkt 1fpkt", shape=invhouse, color=bisque];
stat449[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.19.72.22:6422, 130.131.213.230:1150}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6422: (50%)&lt;BR/&gt; 1150: (50%)&gt;];
}
317--1824[label="1;1pkt 1fpkt"];
317--2485[label="1;1pkt 1fpkt"];
1824--2485[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.213.230" dst_port="1150" src_ip="68.19.72.22" src_port="6422"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_450{
style=filled;
color=gray75;
792[label="216.129.38.23;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1825[label="216.129.38.23;1pkt 1fpkt", shape=invtriangle, color=brown];
2486[label="216.129.38.23;1pkt 1fpkt", shape=invhouse, color=bisque];
stat450[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.129.38.23:1214, 165.25.43.142:44626}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44626: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
792--1825[label="1;1pkt 1fpkt"];
792--2486[label="1;1pkt 1fpkt"];
1825--2486[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.43.142" dst_port="44626" src_ip="216.129.38.23" src_port="1214"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
796[label="0.113.21.24;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1827[label="0.113.21.24;3pkt 3fpkt", shape=invtriangle, color=brown];
2487[label="0.113.21.24;2pkt 2fpkt", shape=invhouse, color=bisque];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.113.21.24:4000, 130.131.232.93:2407}[33.3333%]&lt;BR/&gt;{0.113.21.24:4000, 130.131.232.93:2411}[33.3333%]&lt;BR/&gt;{0.113.21.24:4000, 130.131.232.93:2415}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4000: (50%)&lt;BR/&gt; 2415: (21.4286%)&lt;BR/&gt; 2411: (21.4286%)&lt;BR/&gt; 2407: (7.14286%)&gt;];
}
796--1827[label="1;2pkt 2fpkt"];
796--2487[label="1;2pkt 2fpkt"];
1827--2487[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.232.93" dst_port="2415" src_ip="0.113.21.24" src_port="4000"/>
      <filter dst_ip="130.131.232.93" dst_port="2411" src_ip="0.113.21.24" src_port="4000"/>
      <filter dst_ip="130.131.232.93" dst_port="2407" src_ip="0.113.21.24" src_port="4000"/>
    </slice>
    <from sec="1005454807" usec="0"/>
    <to sec="1005455008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.244.39.25"/>
    </slice>
    <from sec="1005454810" usec="0"/>
    <to sec="1005455506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_454{
style=filled;
color=gray75;
804[label="193.116.87.26;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1832[label="193.116.87.26;1pkt 1fpkt", shape=invtriangle, color=brown];
2489[label="193.116.87.26;1pkt 1fpkt", shape=invhouse, color=bisque];
stat454[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.116.87.26:4474, 133.28.148.147:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4474: (50%)&lt;BR/&gt; 23: (50%)&gt;];
}
804--1832[label="1;1pkt 1fpkt"];
804--2489[label="1;1pkt 1fpkt"];
1832--2489[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.148.147" dst_port="23" src_ip="193.116.87.26" src_port="4474"/>
    </slice>
    <from sec="1005455340" usec="0"/>
    <to sec="1005455377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_455{
style=filled;
color=gray75;
805[label="192.11.116.26;27pkt 27fpkt", shape=pentagon, color=darkviolet];
1833[label="192.11.116.26;28pkt 28fpkt", shape=invtriangle, color=brown];
stat455[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.11.116.26:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
805--1833[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="192.11.116.26"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
808[label="193.104.93.27;40pkt 40fpkt", shape=pentagon, color=darkviolet];
1837[label="193.104.93.27;41pkt 41fpkt", shape=invtriangle, color=brown];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.104.93.27:0, *:0}[97.561%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.5309%)&lt;BR/&gt; 1026: (1.23457%)&lt;BR/&gt; 53: (1.23457%)&gt;];
}
808--1837[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter src_ip="193.104.93.27"/>
    </slice>
    <from sec="1005454824" usec="0"/>
    <to sec="1005455330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.4.32.29"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
826[label="197.49.184.32;25pkt 25fpkt", shape=pentagon, color=darkviolet];
1852[label="197.49.184.32;26pkt 26fpkt", shape=invtriangle, color=brown];
2499[label="197.49.184.32;25pkt 25fpkt", shape=invhouse, color=bisque];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.49.184.32:80, 130.138.113.205:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48252: (1.97368%)&lt;BR/&gt; 48250: (1.97368%)&lt;BR/&gt; 48249: (1.97368%)&lt;BR/&gt; 48248: (1.97368%)&gt;];
}
826--1852[label="1;25pkt 25fpkt"];
826--2499[label="1;25pkt 25fpkt"];
1852--2499[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.113.205" src_ip="197.49.184.32" src_port="80"/>
    </slice>
    <from sec="1005454938" usec="0"/>
    <to sec="1005455281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
283[label="1.82.137.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
350[label="196.160.84.71;d;1pkt 1fpkt", shape=diamond, color=yellow];
830[label="144.224.88.33;6pkt 6fpkt", shape=pentagon, color=darkviolet];
1855[label="144.224.88.33;7pkt 7fpkt", shape=invtriangle, color=brown];
2501[label="144.224.88.33;7pkt 7fpkt", shape=invhouse, color=bisque];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.88.33:*, *:6699}[57.1429%]&lt;BR/&gt;{144.224.88.33:0, *:0}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (36.3636%)&lt;BR/&gt; 6699: (31.8182%)&lt;BR/&gt; 1775: (9.09091%)&lt;BR/&gt; 1770: (9.09091%)&lt;BR/&gt; 3469: (6.81818%)&gt;];
}
283--830[label="1;1pkt 1fpkt"];
283--1855[label="1;1pkt 1fpkt"];
283--2501[label="1;1pkt 1fpkt"];
350--830[label="1;1pkt 1fpkt"];
350--1855[label="1;1pkt 1fpkt"];
350--2501[label="1;1pkt 1fpkt"];
830--1855[label="1;6pkt 6fpkt"];
830--2501[label="1;6pkt 6fpkt"];
1855--2501[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="144.224.88.33"/>
      <filter src_ip="144.224.88.33"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="142.241.6.35"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_461{
style=filled;
color=gray75;
842[label="214.126.94.35;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1860[label="214.126.94.35;1pkt 1fpkt", shape=invtriangle, color=brown];
2504[label="214.126.94.35;1pkt 1fpkt", shape=invhouse, color=bisque];
stat461[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.126.94.35:113, 130.154.185.89:4769}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4769: (50%)&lt;BR/&gt; 113: (50%)&gt;];
}
842--1860[label="1;1pkt 1fpkt"];
842--2504[label="1;1pkt 1fpkt"];
1860--2504[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.154.185.89" dst_port="4769" src_ip="214.126.94.35" src_port="113"/>
    </slice>
    <from sec="1005455257" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_462{
style=filled;
color=gray75;
409[label="193.104.72.36;s;12pkt 12fpkt", shape=diamond, color=yellow];
850[label="193.104.72.36;17pkt 17fpkt", shape=pentagon, color=darkviolet];
1865[label="193.104.72.36;17pkt 17fpkt", shape=invtriangle, color=brown];
2505[label="193.104.72.36;17pkt 17fpkt", shape=invhouse, color=bisque];
stat462[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.104.72.36:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
409--850[label="1;12pkt 12fpkt"];
409--1865[label="1;12pkt 12fpkt"];
409--2505[label="1;12pkt 12fpkt"];
850--1865[label="1;17pkt 17fpkt"];
850--2505[label="1;17pkt 17fpkt"];
1865--2505[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="193.104.72.36"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
853[label="43.212.78.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1867[label="43.212.78.37;1pkt 1fpkt", shape=invtriangle, color=brown];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.212.78.37:8888, 144.224.91.110:4805}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (50%)&lt;BR/&gt; 4805: (50%)&gt;];
}
853--1867[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.91.110" dst_port="4805" src_ip="43.212.78.37" src_port="8888"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.101.227.37"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.74.6.38"/>
    </slice>
    <from sec="1005455123" usec="0"/>
    <to sec="1005455487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.101.240.38"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.37.17.40"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
868[label="70.138.34.42;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1880[label="70.138.34.42;4pkt 4fpkt", shape=invtriangle, color=brown];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.138.34.42:80, 133.28.208.182:4317}[25%]&lt;BR/&gt;{70.138.34.42:80, 133.28.208.182:4318}[25%]&lt;BR/&gt;{70.138.34.42:80, 133.28.208.182:4319}[25%]&lt;BR/&gt;{70.138.34.42:80, 133.28.208.182:4320}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4320: (12.5%)&lt;BR/&gt; 4319: (12.5%)&lt;BR/&gt; 4318: (12.5%)&lt;BR/&gt; 4317: (12.5%)&gt;];
}
868--1880[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.208.182" dst_port="4320" src_ip="70.138.34.42" src_port="80"/>
      <filter dst_ip="133.28.208.182" dst_port="4319" src_ip="70.138.34.42" src_port="80"/>
      <filter dst_ip="133.28.208.182" dst_port="4318" src_ip="70.138.34.42" src_port="80"/>
      <filter dst_ip="133.28.208.182" dst_port="4317" src_ip="70.138.34.42" src_port="80"/>
    </slice>
    <from sec="1005455438" usec="0"/>
    <to sec="1005455451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.16.193.42"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
879[label="204.208.160.44;27pkt 27fpkt", shape=pentagon, color=darkviolet];
1889[label="204.208.160.44;26pkt 26fpkt", shape=invtriangle, color=brown];
2519[label="204.208.160.44;27pkt 27fpkt", shape=invhouse, color=bisque];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.208.160.44:80, 133.28.193.154:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49403: (1.875%)&lt;BR/&gt; 49402: (1.875%)&lt;BR/&gt; 49401: (1.875%)&lt;BR/&gt; 49399: (1.875%)&gt;];
}
879--1889[label="1;26pkt 26fpkt"];
879--2519[label="1;27pkt 27fpkt"];
1889--2519[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.193.154" src_ip="204.208.160.44" src_port="80"/>
    </slice>
    <from sec="1005455418" usec="0"/>
    <to sec="1005455444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
880[label="160.62.223.44;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1890[label="160.62.223.44;2pkt 2fpkt", shape=invtriangle, color=brown];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.62.223.44:1477, 43.41.149.129:41315}[50%]&lt;BR/&gt;{160.62.223.44:1080, 69.209.24.160:21}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41315: (25%)&lt;BR/&gt; 1477: (25%)&lt;BR/&gt; 1080: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
880--1890[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="69.209.24.160" dst_port="21" src_ip="160.62.223.44" src_port="1080"/>
      <filter dst_ip="43.41.149.129" dst_port="41315" src_ip="160.62.223.44" src_port="1477"/>
    </slice>
    <from sec="1005454803" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.53.0.45"/>
    </slice>
    <from sec="1005455116" usec="0"/>
    <to sec="1005455179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_473{
style=filled;
color=gray75;
885[label="133.28.153.45;21pkt 21fpkt", shape=pentagon, color=darkviolet];
1893[label="133.28.153.45;21pkt 21fpkt", shape=invtriangle, color=brown];
stat473[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.28.153.45:*, 198.214.144.96:80}[38.0952%]&lt;BR/&gt;{133.28.153.45:*, 212.60.208.230:80}[33.3333%]&lt;BR/&gt;{133.28.153.45:*, 212.45.90.104:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1798: (2.38095%)&lt;BR/&gt; 1797: (2.38095%)&lt;BR/&gt; 1796: (2.38095%)&lt;BR/&gt; 1794: (2.38095%)&gt;];
}
885--1893[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="198.214.144.96" dst_port="80" src_ip="133.28.153.45"/>
      <filter dst_ip="212.60.208.230" dst_port="80" src_ip="133.28.153.45"/>
      <filter dst_ip="212.45.90.104" dst_port="80" src_ip="133.28.153.45"/>
    </slice>
    <from sec="1005455355" usec="0"/>
    <to sec="1005455494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.0.197.46"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_475{
style=filled;
color=gray75;
896[label="214.114.233.47;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1901[label="214.114.233.47;2pkt 2fpkt", shape=invtriangle, color=brown];
2525[label="214.114.233.47;2pkt 2fpkt", shape=invhouse, color=bisque];
stat475[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.114.233.47:80, 133.28.14.40:1601}[50%]&lt;BR/&gt;{214.114.233.47:80, 133.28.14.40:1602}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1602: (25%)&lt;BR/&gt; 1601: (25%)&gt;];
}
896--1901[label="1;2pkt 2fpkt"];
896--2525[label="1;2pkt 2fpkt"];
1901--2525[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.14.40" dst_port="1602" src_ip="214.114.233.47" src_port="80"/>
      <filter dst_ip="133.28.14.40" dst_port="1601" src_ip="214.114.233.47" src_port="80"/>
    </slice>
    <from sec="1005455010" usec="0"/>
    <to sec="1005455030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_476{
style=filled;
color=gray75;
897[label="43.37.31.48;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1902[label="43.37.31.48;1pkt 1fpkt", shape=invtriangle, color=brown];
stat476[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.37.31.48:2543, 144.224.91.21:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2543: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
897--1902[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.91.21" dst_port="1214" src_ip="43.37.31.48" src_port="2543"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.148.129.48"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.118.38.49"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.54.57.49"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_480{
style=filled;
color=gray75;
906[label="216.83.244.49;14pkt 14fpkt", shape=pentagon, color=darkviolet];
1909[label="216.83.244.49;14pkt 14fpkt", shape=invtriangle, color=brown];
stat480[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.83.244.49:80, 193.97.199.243:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1099: (3.57143%)&lt;BR/&gt; 1098: (3.57143%)&lt;BR/&gt; 1097: (3.57143%)&lt;BR/&gt; 1096: (3.57143%)&gt;];
}
906--1909[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="193.97.199.243" src_ip="216.83.244.49" src_port="80"/>
    </slice>
    <from sec="1005455451" usec="0"/>
    <to sec="1005455459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_481{
style=filled;
color=gray75;
912[label="134.0.19.51;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1911[label="134.0.19.51;12pkt 12fpkt", shape=invtriangle, color=brown];
stat481[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.0.19.51:80, 130.131.50.15:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3155: (4%)&lt;BR/&gt; 3147: (4%)&lt;BR/&gt; 3140: (4%)&lt;BR/&gt; 3138: (4%)&gt;];
}
912--1911[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.50.15" src_ip="134.0.19.51" src_port="80"/>
    </slice>
    <from sec="1005455102" usec="0"/>
    <to sec="1005455112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_482{
style=filled;
color=gray75;
913[label="69.163.43.51;31pkt 31fpkt", shape=pentagon, color=darkviolet];
1912[label="69.163.43.51;31pkt 31fpkt", shape=invtriangle, color=brown];
2530[label="69.163.43.51;31pkt 31fpkt", shape=invhouse, color=bisque];
stat482[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.163.43.51:80, 165.25.200.142:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3521: (1.6129%)&lt;BR/&gt; 3517: (1.6129%)&lt;BR/&gt; 3513: (1.6129%)&lt;BR/&gt; 3511: (1.6129%)&gt;];
}
913--1912[label="1;31pkt 31fpkt"];
913--2530[label="1;31pkt 31fpkt"];
1912--2530[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.200.142" src_ip="69.163.43.51" src_port="80"/>
    </slice>
    <from sec="1005455046" usec="0"/>
    <to sec="1005455131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
923[label="130.131.233.52;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1914[label="130.131.233.52;4pkt 4fpkt", shape=invtriangle, color=brown];
2531[label="130.131.233.52;4pkt 4fpkt", shape=invhouse, color=bisque];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.131.233.52:2788, 43.135.198.166:8888}[25%]&lt;BR/&gt;{130.131.233.52:2789, 43.51.81.169:7777}[25%]&lt;BR/&gt;{130.131.233.52:2787, 1.172.8.175:7777}[25%]&lt;BR/&gt;{130.131.233.52:2508, 217.198.32.194:8888}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (25%)&lt;BR/&gt; 7777: (25%)&lt;BR/&gt; 2789: (12.5%)&lt;BR/&gt; 2788: (12.5%)&lt;BR/&gt; 2787: (12.5%)&gt;];
}
923--1914[label="1;4pkt 4fpkt"];
923--2531[label="1;4pkt 4fpkt"];
1914--2531[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="217.198.32.194" dst_port="8888" src_ip="130.131.233.52" src_port="2508"/>
      <filter dst_ip="1.172.8.175" dst_port="7777" src_ip="130.131.233.52" src_port="2787"/>
      <filter dst_ip="43.51.81.169" dst_port="7777" src_ip="130.131.233.52" src_port="2789"/>
      <filter dst_ip="43.135.198.166" dst_port="8888" src_ip="130.131.233.52" src_port="2788"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
926[label="69.162.45.53;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1916[label="69.162.45.53;4pkt 4fpkt", shape=invtriangle, color=brown];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.162.45.53:80, 165.25.200.142:3414}[25%]&lt;BR/&gt;{69.162.45.53:80, 165.25.200.142:3415}[25%]&lt;BR/&gt;{69.162.45.53:80, 165.25.200.142:3416}[25%]&lt;BR/&gt;{69.162.45.53:80, 165.25.200.142:3417}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3417: (12.5%)&lt;BR/&gt; 3416: (12.5%)&lt;BR/&gt; 3415: (12.5%)&lt;BR/&gt; 3414: (12.5%)&gt;];
}
926--1916[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.200.142" dst_port="3417" src_ip="69.162.45.53" src_port="80"/>
      <filter dst_ip="165.25.200.142" dst_port="3416" src_ip="69.162.45.53" src_port="80"/>
      <filter dst_ip="165.25.200.142" dst_port="3415" src_ip="69.162.45.53" src_port="80"/>
      <filter dst_ip="165.25.200.142" dst_port="3414" src_ip="69.162.45.53" src_port="80"/>
    </slice>
    <from sec="1005454969" usec="0"/>
    <to sec="1005454993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_485{
style=filled;
color=gray75;
927[label="160.62.121.53;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1917[label="160.62.121.53;3pkt 3fpkt", shape=invtriangle, color=brown];
stat485[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.62.121.53:25, 167.109.35.44:1863}[33.3333%]&lt;BR/&gt;{160.62.121.53:48338, 69.164.62.113:6667}[33.3333%]&lt;BR/&gt;{160.62.121.53:25, 50.190.228.237:1154}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (33.3333%)&lt;BR/&gt; 48338: (16.6667%)&lt;BR/&gt; 6667: (16.6667%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 1154: (16.6667%)&gt;];
}
927--1917[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="50.190.228.237" dst_port="1154" src_ip="160.62.121.53" src_port="25"/>
      <filter dst_ip="69.164.62.113" dst_port="6667" src_ip="160.62.121.53" src_port="48338"/>
      <filter dst_ip="167.109.35.44" dst_port="1863" src_ip="160.62.121.53" src_port="25"/>
    </slice>
    <from sec="1005454816" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.151.58.55"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005454998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_487{
style=filled;
color=gray75;
933[label="160.62.74.55;20pkt 20fpkt", shape=pentagon, color=darkviolet];
1920[label="160.62.74.55;20pkt 20fpkt", shape=invtriangle, color=brown];
stat487[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.62.74.55:*, 198.160.1.86:8901}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8901: (50%)&lt;BR/&gt; 2574: (2.5%)&lt;BR/&gt; 2573: (2.5%)&lt;BR/&gt; 2572: (2.5%)&lt;BR/&gt; 2571: (2.5%)&gt;];
}
933--1920[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="198.160.1.86" dst_port="8901" src_ip="160.62.74.55"/>
    </slice>
    <from sec="1005454988" usec="0"/>
    <to sec="1005455484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.41.60.56"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
944[label="192.85.36.58;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1926[label="192.85.36.58;11pkt 11fpkt", shape=invtriangle, color=brown];
2536[label="192.85.36.58;10pkt 10fpkt", shape=invhouse, color=bisque];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.85.36.58:*, 130.154.16.195:138}[54.5455%]&lt;BR/&gt;{192.85.36.58:*, 130.154.16.195:137}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 138: (30.6452%)&lt;BR/&gt; 137: (29.0323%)&lt;BR/&gt; 145: (9.67742%)&lt;BR/&gt; 140: (9.67742%)&lt;BR/&gt; 144: (6.45161%)&gt;];
}
944--1926[label="1;10pkt 10fpkt"];
944--2536[label="1;10pkt 10fpkt"];
1926--2536[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="130.154.16.195" dst_port="138" src_ip="192.85.36.58"/>
      <filter dst_ip="130.154.16.195" dst_port="137" src_ip="192.85.36.58"/>
    </slice>
    <from sec="1005454894" usec="0"/>
    <to sec="1005455502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_490{
style=filled;
color=gray75;
946[label="192.51.73.58;19pkt 19fpkt", shape=pentagon, color=darkviolet];
1927[label="192.51.73.58;20pkt 20fpkt", shape=invtriangle, color=brown];
2537[label="192.51.73.58;19pkt 19fpkt", shape=invhouse, color=bisque];
stat490[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.51.73.58:*, 193.104.65.65:25}[50%]&lt;BR/&gt;{192.51.73.58:113, 193.104.65.65:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (25.8621%)&lt;BR/&gt; 25: (24.1379%)&lt;BR/&gt; 34257: (2.58621%)&lt;BR/&gt; 34255: (2.58621%)&lt;BR/&gt; 34254: (2.58621%)&gt;];
}
946--1927[label="1;19pkt 19fpkt"];
946--2537[label="1;19pkt 19fpkt"];
1927--2537[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="193.104.65.65" src_ip="192.51.73.58" src_port="113"/>
      <filter dst_ip="193.104.65.65" dst_port="25" src_ip="192.51.73.58"/>
    </slice>
    <from sec="1005454967" usec="0"/>
    <to sec="1005455079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
949[label="214.128.176.59;45pkt 45fpkt", shape=pentagon, color=darkviolet];
1929[label="214.128.176.59;46pkt 46fpkt", shape=invtriangle, color=brown];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.128.176.59:80, 144.224.206.51:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1146: (1.0989%)&lt;BR/&gt; 1145: (1.0989%)&lt;BR/&gt; 1144: (1.0989%)&lt;BR/&gt; 1143: (1.0989%)&gt;];
}
949--1929[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.206.51" src_ip="214.128.176.59" src_port="80"/>
    </slice>
    <from sec="1005454881" usec="0"/>
    <to sec="1005454906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.216.104.60"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.197.202.60"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_494{
style=filled;
color=gray75;
958[label="70.216.3.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1937[label="70.216.3.61;1pkt 1fpkt", shape=invtriangle, color=brown];
stat494[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.216.3.61:6699, 165.25.216.68:1451}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1451: (50%)&gt;];
}
958--1937[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.216.68" dst_port="1451" src_ip="70.216.3.61" src_port="6699"/>
    </slice>
    <from sec="1005454807" usec="0"/>
    <to sec="1005455502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.34.25.63"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.27.194.63"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_497{
style=filled;
color=gray75;
967[label="1.242.3.64;10pkt 10fpkt", shape=pentagon, color=darkviolet];
1943[label="1.242.3.64;9pkt 9fpkt", shape=invtriangle, color=brown];
stat497[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.242.3.64:80, 193.104.110.35:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1802: (5.26316%)&lt;BR/&gt; 1788: (5.26316%)&lt;BR/&gt; 1609: (5.26316%)&lt;BR/&gt; 1608: (5.26316%)&gt;];
}
967--1943[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="193.104.110.35" src_ip="1.242.3.64" src_port="80"/>
    </slice>
    <from sec="1005455103" usec="0"/>
    <to sec="1005455287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_498{
style=filled;
color=gray75;
969[label="214.157.112.64;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1945[label="214.157.112.64;2pkt 2fpkt", shape=invtriangle, color=brown];
stat498[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.157.112.64:80, 133.28.152.180:1639}[50%]&lt;BR/&gt;{214.157.112.64:80, 133.28.152.180:1642}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1642: (25%)&lt;BR/&gt; 1639: (25%)&gt;];
}
969--1945[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.152.180" dst_port="1642" src_ip="214.157.112.64" src_port="80"/>
      <filter dst_ip="133.28.152.180" dst_port="1639" src_ip="214.157.112.64" src_port="80"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_499{
style=filled;
color=gray75;
970[label="192.39.202.64;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1946[label="192.39.202.64;3pkt 3fpkt", shape=invtriangle, color=brown];
stat499[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.39.202.64:80, 193.104.110.205:3118}[33.3333%]&lt;BR/&gt;{192.39.202.64:80, 193.104.110.205:3133}[33.3333%]&lt;BR/&gt;{192.39.202.64:80, 193.104.110.205:3134}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3134: (16.6667%)&lt;BR/&gt; 3133: (16.6667%)&lt;BR/&gt; 3118: (16.6667%)&gt;];
}
970--1946[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.104.110.205" dst_port="3134" src_ip="192.39.202.64" src_port="80"/>
      <filter dst_ip="193.104.110.205" dst_port="3133" src_ip="192.39.202.64" src_port="80"/>
      <filter dst_ip="193.104.110.205" dst_port="3118" src_ip="192.39.202.64" src_port="80"/>
    </slice>
    <from sec="1005455425" usec="0"/>
    <to sec="1005455505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_500{
style=filled;
color=gray75;
971[label="193.104.65.65;131pkt 131fpkt", shape=pentagon, color=darkviolet];
1947[label="193.104.65.65;130pkt 130fpkt", shape=invtriangle, color=brown];
stat500[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.104.65.65:25, *:*}[44.2748%]&lt;BR/&gt;{193.104.65.65:*, *:113}[34.3511%]&lt;BR/&gt;{193.104.65.65:0, *:0}[21.374%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (22.0307%)&lt;BR/&gt; 0: (21.4559%)&lt;BR/&gt; 113: (17.2414%)&lt;BR/&gt; 63961: (0.383142%)&lt;BR/&gt; 63774: (0.383142%)&gt;];
}
971--1947[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter src_ip="193.104.65.65" src_port="25"/>
      <filter dst_port="113" src_ip="193.104.65.65"/>
      <filter src_ip="193.104.65.65"/>
    </slice>
    <from sec="1005454817" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_501{
style=filled;
color=gray75;
972[label="195.90.133.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1948[label="195.90.133.65;1pkt 1fpkt", shape=invtriangle, color=brown];
2547[label="195.90.133.65;1pkt 1fpkt", shape=invhouse, color=bisque];
stat501[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.90.133.65:6699, 193.165.196.212:60738}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60738: (50%)&lt;BR/&gt; 6699: (50%)&gt;];
}
972--1948[label="1;1pkt 1fpkt"];
972--2547[label="1;1pkt 1fpkt"];
1948--2547[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.165.196.212" dst_port="60738" src_ip="195.90.133.65" src_port="6699"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.133.235.65"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.16.93.67"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.71.250.67"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.16.72.68"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_506{
style=filled;
color=gray75;
989[label="2.141.145.68;31pkt 31fpkt", shape=pentagon, color=darkviolet];
1958[label="2.141.145.68;31pkt 31fpkt", shape=invtriangle, color=brown];
stat506[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.141.145.68:80, 144.224.53.70:*}[51.6129%]&lt;BR/&gt;{2.141.145.68:80, 165.25.76.42:*}[48.3871%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3670: (1.6129%)&lt;BR/&gt; 3669: (1.6129%)&lt;BR/&gt; 3667: (1.6129%)&lt;BR/&gt; 3666: (1.6129%)&gt;];
}
989--1958[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.53.70" src_ip="2.141.145.68" src_port="80"/>
      <filter dst_ip="165.25.76.42" src_ip="2.141.145.68" src_port="80"/>
    </slice>
    <from sec="1005454895" usec="0"/>
    <to sec="1005455317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_507{
style=filled;
color=gray75;
990[label="165.25.216.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1959[label="165.25.216.68;2pkt 2fpkt", shape=invtriangle, color=brown];
2553[label="165.25.216.68;2pkt 2fpkt", shape=invhouse, color=bisque];
stat507[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.25.216.68:1451, 70.216.3.61:6699}[50%]&lt;BR/&gt;{165.25.216.68:1728, 195.8.111.175:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1451: (30%)&lt;BR/&gt; 1728: (20%)&gt;];
}
990--1959[label="1;1pkt 1fpkt"];
990--2553[label="1;1pkt 1fpkt"];
1959--2553[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.8.111.175" dst_port="6699" src_ip="165.25.216.68" src_port="1728"/>
      <filter dst_ip="70.216.3.61" dst_port="6699" src_ip="165.25.216.68" src_port="1451"/>
    </slice>
    <from sec="1005454807" usec="0"/>
    <to sec="1005455502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_508{
style=filled;
color=gray75;
998[label="144.224.109.70;55pkt 55fpkt", shape=pentagon, color=darkviolet];
1966[label="144.224.109.70;55pkt 55fpkt", shape=invtriangle, color=brown];
2559[label="144.224.109.70;54pkt 54fpkt", shape=invhouse, color=bisque];
stat508[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.109.70:0, *:0}[65.4545%]&lt;BR/&gt;{144.224.109.70:25, *:*}[34.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (65.2439%)&lt;BR/&gt; 25: (17.378%)&lt;BR/&gt; 64331: (0.914634%)&lt;BR/&gt; 64211: (0.914634%)&lt;BR/&gt; 64202: (0.914634%)&gt;];
}
998--1966[label="1;55pkt 55fpkt"];
998--2559[label="1;54pkt 54fpkt"];
1966--2559[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter src_ip="144.224.109.70" src_port="25"/>
      <filter src_ip="144.224.109.70"/>
    </slice>
    <from sec="1005454808" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_509{
style=filled;
color=gray75;
1001[label="214.157.112.72;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1967[label="214.157.112.72;2pkt 2fpkt", shape=invtriangle, color=brown];
stat509[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.157.112.72:80, 133.28.152.180:1632}[50%]&lt;BR/&gt;{214.157.112.72:80, 133.28.152.180:1634}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1634: (25%)&lt;BR/&gt; 1632: (25%)&gt;];
}
1001--1967[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.152.180" dst_port="1634" src_ip="214.157.112.72" src_port="80"/>
      <filter dst_ip="133.28.152.180" dst_port="1632" src_ip="214.157.112.72" src_port="80"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
1011[label="214.157.112.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1970[label="214.157.112.73;1pkt 1fpkt", shape=invtriangle, color=brown];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.157.112.73:80, 133.28.152.180:1640}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1640: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1011--1970[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.152.180" dst_port="1640" src_ip="214.157.112.73" src_port="80"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_511{
style=filled;
color=gray75;
1017[label="192.150.224.74;64pkt 64fpkt", shape=pentagon, color=darkviolet];
1974[label="192.150.224.74;65pkt 65fpkt", shape=invtriangle, color=brown];
stat511[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.150.224.74:80, 192.11.121.50:*}[96.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 19614: (0.775194%)&lt;BR/&gt; 19613: (0.775194%)&lt;BR/&gt; 19612: (0.775194%)&lt;BR/&gt; 19611: (0.775194%)&gt;];
}
1017--1974[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_ip="192.11.121.50" src_ip="192.150.224.74" src_port="80"/>
    </slice>
    <from sec="1005455029" usec="0"/>
    <to sec="1005455460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_512{
style=filled;
color=gray75;
1019[label="70.4.12.75;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1975[label="70.4.12.75;2pkt 2fpkt", shape=invtriangle, color=brown];
2563[label="70.4.12.75;2pkt 2fpkt", shape=invhouse, color=bisque];
stat512[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.4.12.75:80, 133.28.14.40:1634}[50%]&lt;BR/&gt;{70.4.12.75:80, 133.28.14.40:1635}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1635: (25%)&lt;BR/&gt; 1634: (25%)&gt;];
}
1019--1975[label="1;2pkt 2fpkt"];
1019--2563[label="1;2pkt 2fpkt"];
1975--2563[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.14.40" dst_port="1635" src_ip="70.4.12.75" src_port="80"/>
      <filter dst_ip="133.28.14.40" dst_port="1634" src_ip="70.4.12.75" src_port="80"/>
    </slice>
    <from sec="1005455278" usec="0"/>
    <to sec="1005455352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
1020[label="192.10.50.75;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1976[label="192.10.50.75;14pkt 14fpkt", shape=invtriangle, color=brown];
2564[label="192.10.50.75;13pkt 13fpkt", shape=invhouse, color=bisque];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.10.50.75:80, 165.25.213.168:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1308: (3.75%)&lt;BR/&gt; 1307: (3.75%)&lt;BR/&gt; 1292: (3.75%)&lt;BR/&gt; 1291: (3.75%)&gt;];
}
1020--1976[label="1;13pkt 13fpkt"];
1020--2564[label="1;13pkt 13fpkt"];
1976--2564[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.213.168" src_ip="192.10.50.75" src_port="80"/>
    </slice>
    <from sec="1005455047" usec="0"/>
    <to sec="1005455156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.13.156.75"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_515{
style=filled;
color=gray75;
1036[label="69.162.44.78;25pkt 25fpkt", shape=pentagon, color=darkviolet];
1987[label="69.162.44.78;26pkt 26fpkt", shape=invtriangle, color=brown];
2570[label="69.162.44.78;26pkt 26fpkt", shape=invhouse, color=bisque];
stat515[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.162.44.78:80, 133.28.208.182:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4378: (1.94805%)&lt;BR/&gt; 4375: (1.94805%)&lt;BR/&gt; 4374: (1.94805%)&lt;BR/&gt; 4361: (1.94805%)&gt;];
}
1036--1987[label="1;25pkt 25fpkt"];
1036--2570[label="1;25pkt 25fpkt"];
1987--2570[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.208.182" src_ip="69.162.44.78" src_port="80"/>
    </slice>
    <from sec="1005455448" usec="0"/>
    <to sec="1005455462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_516{
style=filled;
color=gray75;
1038[label="214.157.112.78;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1988[label="214.157.112.78;3pkt 3fpkt", shape=invtriangle, color=brown];
stat516[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.157.112.78:80, 133.28.152.180:1630}[33.3333%]&lt;BR/&gt;{214.157.112.78:80, 133.28.152.180:1633}[33.3333%]&lt;BR/&gt;{214.157.112.78:80, 133.28.152.180:1644}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1644: (16.6667%)&lt;BR/&gt; 1633: (16.6667%)&lt;BR/&gt; 1630: (16.6667%)&gt;];
}
1038--1988[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.152.180" dst_port="1644" src_ip="214.157.112.78" src_port="80"/>
      <filter dst_ip="133.28.152.180" dst_port="1633" src_ip="214.157.112.78" src_port="80"/>
      <filter dst_ip="133.28.152.180" dst_port="1630" src_ip="214.157.112.78" src_port="80"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
1040[label="193.104.85.79;39pkt 39fpkt", shape=pentagon, color=darkviolet];
1990[label="193.104.85.79;40pkt 40fpkt", shape=invtriangle, color=brown];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.104.85.79:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1040--1990[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter src_ip="193.104.85.79"/>
    </slice>
    <from sec="1005454823" usec="0"/>
    <to sec="1005455274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.196.147.79"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.3.253.79"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.41.79.80"/>
    </slice>
    <from sec="1005454809" usec="0"/>
    <to sec="1005455502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_521{
style=filled;
color=gray75;
1049[label="160.62.120.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1998[label="160.62.120.80;1pkt 1fpkt", shape=invtriangle, color=brown];
stat521[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.62.120.80:1426, 69.164.62.113:6666}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6666: (50%)&lt;BR/&gt; 1426: (50%)&gt;];
}
1049--1998[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="69.164.62.113" dst_port="6666" src_ip="160.62.120.80" src_port="1426"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_522{
style=filled;
color=gray75;
1050[label="193.97.196.80;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1999[label="193.97.196.80;3pkt 3fpkt", shape=invtriangle, color=brown];
stat522[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.97.196.80:3229, 0.42.105.96:2124}[33.3333%]&lt;BR/&gt;{193.97.196.80:4707, 217.198.32.205:8888}[33.3333%]&lt;BR/&gt;{193.97.196.80:4667, 212.211.35.228:7000}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (16.6667%)&lt;BR/&gt; 7000: (16.6667%)&lt;BR/&gt; 4707: (16.6667%)&lt;BR/&gt; 4667: (16.6667%)&lt;BR/&gt; 3229: (16.6667%)&gt;];
}
1050--1999[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="212.211.35.228" dst_port="7000" src_ip="193.97.196.80" src_port="4667"/>
      <filter dst_ip="217.198.32.205" dst_port="8888" src_ip="193.97.196.80" src_port="4707"/>
      <filter dst_ip="0.42.105.96" dst_port="2124" src_ip="193.97.196.80" src_port="3229"/>
    </slice>
    <from sec="1005454811" usec="0"/>
    <to sec="1005455505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_523{
style=filled;
color=gray75;
1051[label="193.29.197.80;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2000[label="193.29.197.80;2pkt 2fpkt", shape=invtriangle, color=brown];
2574[label="193.29.197.80;2pkt 2fpkt", shape=invhouse, color=bisque];
stat523[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.29.197.80:25, 160.62.121.25:4760}[50%]&lt;BR/&gt;{193.29.197.80:25, 160.62.121.25:4774}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4774: (25%)&lt;BR/&gt; 4760: (25%)&gt;];
}
1051--2000[label="1;2pkt 2fpkt"];
1051--2574[label="1;2pkt 2fpkt"];
2000--2574[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.121.25" dst_port="4774" src_ip="193.29.197.80" src_port="25"/>
      <filter dst_ip="160.62.121.25" dst_port="4760" src_ip="193.29.197.80" src_port="25"/>
    </slice>
    <from sec="1005454873" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
1053[label="213.99.224.80;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2002[label="213.99.224.80;7pkt 7fpkt", shape=invtriangle, color=brown];
2576[label="213.99.224.80;7pkt 7fpkt", shape=invhouse, color=bisque];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.99.224.80:80, 133.28.171.86:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1639: (7.5%)&lt;BR/&gt; 1638: (7.5%)&lt;BR/&gt; 1637: (7.5%)&lt;BR/&gt; 1633: (7.5%)&gt;];
}
1053--2002[label="1;6pkt 6fpkt"];
1053--2576[label="1;6pkt 6fpkt"];
2002--2576[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.171.86" src_ip="213.99.224.80" src_port="80"/>
    </slice>
    <from sec="1005455054" usec="0"/>
    <to sec="1005455119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.161.201.81"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_526{
style=filled;
color=gray75;
1059[label="215.122.144.82;102pkt 102fpkt", shape=pentagon, color=darkviolet];
2006[label="215.122.144.82;102pkt 102fpkt", shape=invtriangle, color=brown];
2578[label="215.122.144.82;102pkt 102fpkt", shape=invhouse, color=bisque];
stat526[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.122.144.82:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1059--2006[label="1;102pkt 102fpkt"];
1059--2578[label="1;102pkt 102fpkt"];
2006--2578[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter src_ip="215.122.144.82"/>
    </slice>
    <from sec="1005454804" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_527{
style=filled;
color=gray75;
1062[label="70.160.181.82;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2007[label="70.160.181.82;18pkt 18fpkt", shape=invtriangle, color=brown];
2579[label="70.160.181.82;18pkt 18fpkt", shape=invhouse, color=bisque];
stat527[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.160.181.82:80, 130.131.142.16:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1182: (2.83019%)&lt;BR/&gt; 1179: (2.83019%)&lt;BR/&gt; 1178: (2.83019%)&lt;BR/&gt; 1172: (2.83019%)&gt;];
}
1062--2007[label="1;17pkt 17fpkt"];
1062--2579[label="1;17pkt 17fpkt"];
2007--2579[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.142.16" src_ip="70.160.181.82" src_port="80"/>
    </slice>
    <from sec="1005455060" usec="0"/>
    <to sec="1005455403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_528{
style=filled;
color=gray75;
1063[label="144.224.232.82;689pkt 689fpkt", shape=pentagon, color=darkviolet];
2008[label="144.224.232.82;690pkt 690fpkt", shape=invtriangle, color=brown];
2580[label="144.224.232.82;689pkt 689fpkt", shape=invhouse, color=bisque];
stat528[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.232.82:*, *:27960}[40.7246%]&lt;BR/&gt;{144.224.232.82:27963, *:*}[33.7681%]&lt;BR/&gt;{144.224.232.82:27964, *:*}[33.6232%]&lt;BR/&gt;{144.224.232.82:27965, *:*}[31.5942%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27960: (20.3337%)&lt;BR/&gt; 27963: (16.9004%)&lt;BR/&gt; 27964: (16.8279%)&lt;BR/&gt; 27965: (15.764%)&lt;BR/&gt; 1025: (1.59574%)&gt;];
}
1063--2008[label="1;689pkt 689fpkt"];
1063--2580[label="1;689pkt 689fpkt"];
2008--2580[label="1;689pkt 689fpkt"];
</description>
    <slice>
      <filter src_ip="144.224.232.82" src_port="27963"/>
      <filter src_ip="144.224.232.82" src_port="27964"/>
      <filter src_ip="144.224.232.82" src_port="27965"/>
      <filter dst_port="27960" src_ip="144.224.232.82"/>
    </slice>
    <from sec="1005454803" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.184.76.83"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.96.167.83"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.16.200.85"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_532{
style=filled;
color=gray75;
1079[label="70.217.198.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2017[label="70.217.198.86;1pkt 1fpkt", shape=invtriangle, color=brown];
stat532[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.217.198.86:1747, 160.62.121.14:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1747: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1079--2017[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.121.14" dst_port="80" src_ip="70.217.198.86" src_port="1747"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.21.202.86"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.151.144.87"/>
    </slice>
    <from sec="1005454898" usec="0"/>
    <to sec="1005455440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="146.69.205.87"/>
    </slice>
    <from sec="1005454803" usec="0"/>
    <to sec="1005455265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_536{
style=filled;
color=gray75;
1086[label="192.150.224.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2022[label="192.150.224.87;1pkt 1fpkt", shape=invtriangle, color=brown];
2587[label="192.150.224.87;1pkt 1fpkt", shape=invhouse, color=bisque];
stat536[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.150.224.87:25, 133.28.163.83:1898}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1898: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
1086--2022[label="1;1pkt 1fpkt"];
1086--2587[label="1;1pkt 1fpkt"];
2022--2587[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.163.83" dst_port="1898" src_ip="192.150.224.87" src_port="25"/>
    </slice>
    <from sec="1005455201" usec="0"/>
    <to sec="1005455208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_537{
style=filled;
color=gray75;
1097[label="133.28.101.90;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2026[label="133.28.101.90;2pkt 2fpkt", shape=invtriangle, color=brown];
stat537[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.28.101.90:1040, 43.172.102.222:6699}[50%]&lt;BR/&gt;{133.28.101.90:1044, 69.97.76.231:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1044: (25%)&lt;BR/&gt; 1040: (25%)&gt;];
}
1097--2026[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="69.97.76.231" dst_port="6699" src_ip="133.28.101.90" src_port="1044"/>
      <filter dst_ip="43.172.102.222" dst_port="6699" src_ip="133.28.101.90" src_port="1040"/>
    </slice>
    <from sec="1005455394" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.137.45.91"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_539{
style=filled;
color=gray75;
1103[label="217.14.229.92;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2031[label="217.14.229.92;1pkt 1fpkt", shape=invtriangle, color=brown];
stat539[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.14.229.92:1214, 144.224.91.21:1203}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 1203: (50%)&gt;];
}
1103--2031[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.91.21" dst_port="1203" src_ip="217.14.229.92" src_port="1214"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_540{
style=filled;
color=gray75;
363[label="216.132.62.95;s;115pkt 115fpkt", shape=diamond, color=yellow];
393[label="193.97.30.35;d;72pkt 72fpkt", shape=diamond, color=yellow];
484[label="165.25.176.157;d;59pkt 59fpkt", shape=diamond, color=yellow];
711[label="198.174.51.5;2pkt 2fpkt", shape=pentagon, color=darkviolet];
746[label="216.163.66.11;8pkt 8fpkt", shape=pentagon, color=darkviolet];
900[label="198.87.218.48;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1112[label="216.132.62.95;239pkt 239fpkt", shape=pentagon, color=darkviolet];
1391[label="201.119.88.163;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1397[label="213.68.95.164;7pkt 7fpkt", shape=pentagon, color=darkviolet];
1587[label="196.199.16.206;14pkt 14fpkt", shape=pentagon, color=darkviolet];
1607[label="198.28.196.212;27pkt 27fpkt", shape=pentagon, color=darkviolet];
1770[label="198.174.51.5;2pkt 2fpkt", shape=invtriangle, color=brown];
2035[label="216.132.62.95;239pkt 239fpkt", shape=invtriangle, color=brown];
2221[label="213.68.95.164;8pkt 8fpkt", shape=invtriangle, color=brown];
2338[label="196.199.16.206;13pkt 13fpkt", shape=invtriangle, color=brown];
2461[label="198.174.51.5;2pkt 2fpkt", shape=invhouse, color=bisque];
stat540[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.132.62.95:80, *:*}[62.3037%]&lt;BR/&gt;{*:80, 193.97.30.35:*}[20.6806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.569%)&lt;BR/&gt; 1032: (0.554187%)&lt;BR/&gt; 1039: (0.492611%)&lt;BR/&gt; 1033: (0.492611%)&lt;BR/&gt; 1027: (0.492611%)&gt;];
}
363--393[label="0.0555556;4pkt 4fpkt"];
363--424[label="0.0521739;6pkt 6fpkt"];
363--484[label="0.0847458;5pkt 5fpkt"];
363--496[label="0.0566038;6pkt 6fpkt"];
363--654[label="0.191304;22pkt 22fpkt"];
363--668[label="0.191304;22pkt 22fpkt"];
363--682[label="0.191304;22pkt 22fpkt"];
363--1112[label="1;115pkt 115fpkt"];
363--2035[label="1;115pkt 115fpkt"];
393--654[label="0.138889;10pkt 10fpkt"];
393--668[label="0.138889;10pkt 10fpkt"];
393--682[label="0.138889;10pkt 10fpkt"];
393--711[label="1;2pkt 2fpkt"];
393--746[label="0.75;6pkt 6fpkt"];
393--1112[label="0.166667;12pkt 12fpkt"];
393--1391[label="1;4pkt 4fpkt"];
393--1397[label="0.428571;3pkt 3fpkt"];
393--1587[label="0.0714286;1pkt 1fpkt"];
393--1770[label="1;2pkt 2fpkt"];
393--2035[label="0.166667;12pkt 12fpkt"];
393--2221[label="0.5;4pkt 4fpkt"];
393--2338[label="0.0769231;1pkt 1fpkt"];
393--2461[label="1;2pkt 2fpkt"];
484--654[label="0.186441;11pkt 11fpkt"];
484--668[label="0.186441;11pkt 11fpkt"];
484--682[label="0.186441;11pkt 11fpkt"];
484--773[label="0.235294;4pkt 4fpkt"];
484--791[label="0.0909091;1pkt 1fpkt"];
484--833[label="0.2;4pkt 4fpkt"];
484--900[label="1;1pkt 1fpkt"];
484--1112[label="0.118644;7pkt 7fpkt"];
484--1607[label="0.555556;15pkt 15fpkt"];
484--1647[label="0.047619;1pkt 1fpkt"];
484--1813[label="0.235294;4pkt 4fpkt"];
484--1856[label="0.190476;4pkt 4fpkt"];
484--2035[label="0.118644;7pkt 7fpkt"];
711--1770[label="1;2pkt 2fpkt"];
711--2461[label="1;2pkt 2fpkt"];
1112--2035[label="1;239pkt 239fpkt"];
1397--2221[label="1;7pkt 7fpkt"];
1587--2338[label="1;13pkt 13fpkt"];
1770--2461[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="216.132.62.95" src_port="80"/>
      <filter dst_ip="193.97.30.35" src_port="80"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_541{
style=filled;
color=gray75;
1113[label="192.75.96.95;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2036[label="192.75.96.95;1pkt 1fpkt", shape=invtriangle, color=brown];
stat541[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.75.96.95:1030, 192.11.119.245:6664}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6664: (50%)&lt;BR/&gt; 1030: (50%)&gt;];
}
1113--2036[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.11.119.245" dst_port="6664" src_ip="192.75.96.95" src_port="1030"/>
    </slice>
    <from sec="1005454806" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="139.59.111.95"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_543{
style=filled;
color=gray75;
1120[label="160.62.112.96;128pkt 128fpkt", shape=pentagon, color=darkviolet];
2041[label="160.62.112.96;128pkt 128fpkt", shape=invtriangle, color=brown];
stat543[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.62.112.96:*, *:1214}[60.9375%]&lt;BR/&gt;{160.62.112.96:*, 157.66.89.4:7033}[35.9375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (30.4688%)&lt;BR/&gt; 7033: (17.9688%)&lt;BR/&gt; 3278: (0.78125%)&lt;BR/&gt; 49296: (0.390625%)&lt;BR/&gt; 48621: (0.390625%)&gt;];
}
1120--2041[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="1214" src_ip="160.62.112.96"/>
      <filter dst_ip="157.66.89.4" dst_port="7033" src_ip="160.62.112.96"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_544{
style=filled;
color=gray75;
532[label="160.62.123.204;d;15pkt 15fpkt", shape=diamond, color=yellow];
860[label="43.250.131.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1125[label="69.16.208.97;1pkt 1fpkt", shape=pentagon, color=darkviolet];
1206[label="43.0.136.117;2pkt 2fpkt", shape=pentagon, color=darkviolet];
1924[label="213.238.28.57;1pkt 1fpkt", shape=invtriangle, color=brown];
2043[label="69.16.208.97;1pkt 1fpkt", shape=invtriangle, color=brown];
stat544[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.16.209.204:1863, 160.62.123.204:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 61772: (7.14286%)&lt;BR/&gt; 62012: (4.7619%)&lt;BR/&gt; 61949: (4.7619%)&lt;BR/&gt; 61931: (4.7619%)&gt;];
}
532--860[label="1;1pkt 1fpkt"];
532--1125[label="1;1pkt 1fpkt"];
532--1206[label="1;2pkt 2fpkt"];
532--1924[label="1;1pkt 1fpkt"];
532--2043[label="1;1pkt 1fpkt"];
1125--2043[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.123.204" src_ip="69.16.209.204" src_port="1863"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.43.3.98"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_546{
style=filled;
color=gray75;
214[label="68.80.50.99;s;1pkt 1fpkt", shape=diamond, color=yellow];
1133[label="68.80.50.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2048[label="68.80.50.99;1pkt 1fpkt", shape=invtriangle, color=brown];
stat546[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.80.50.99:6346, 130.131.213.230:1124}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 1124: (50%)&gt;];
}
214--1133[label="1;1pkt 1fpkt"];
214--2048[label="1;1pkt 1fpkt"];
1133--2048[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.213.230" dst_port="1124" src_ip="68.80.50.99" src_port="6346"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_547{
style=filled;
color=gray75;
1138[label="213.27.178.101;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2051[label="213.27.178.101;43pkt 43fpkt", shape=invtriangle, color=brown];
stat547[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.27.178.101:80, 160.62.119.22:*}[93.0233%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.6744%)&lt;BR/&gt; 110: (2.32558%)&lt;BR/&gt; 4892: (1.16279%)&lt;BR/&gt; 4890: (1.16279%)&lt;BR/&gt; 4884: (1.16279%)&gt;];
}
1138--2051[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.119.22" src_ip="213.27.178.101" src_port="80"/>
    </slice>
    <from sec="1005454807" usec="0"/>
    <to sec="1005455441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.142.16.105"/>
    </slice>
    <from sec="1005454873" usec="0"/>
    <to sec="1005455481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,011,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
270[label="133.28.118.209;d;190pkt 190fpkt", shape=diamond, color=yellow];
1156[label="214.196.52.105;59pkt 59fpkt", shape=pentagon, color=darkviolet];
2061[label="214.196.52.105;58pkt 58fpkt", shape=invtriangle, color=brown];
2610[label="214.196.52.105;59pkt 59fpkt", shape=invhouse, color=bisque];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.107.119.178:21, 133.28.118.209:*}[67.8756%]&lt;BR/&gt;{214.196.52.105:80, 133.28.118.209:*}[30.5699%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.694%)&lt;BR/&gt; 21: (17.8962%)&lt;BR/&gt; 4992: (0.546448%)&lt;BR/&gt; 4990: (0.546448%)&lt;BR/&gt; 4984: (0.546448%)&gt;];
}
270--654[label="0.0526316;10pkt 10fpkt"];
270--668[label="0.0526316;10pkt 10fpkt"];
270--682[label="0.0526316;10pkt 10fpkt"];
270--1156[label="0.949153;56pkt 56fpkt"];
270--2061[label="0.948276;55pkt 55fpkt"];
270--2610[label="0.949153;56pkt 56fpkt"];
1156--2061[label="1;58pkt 58fpkt"];
1156--2610[label="1;59pkt 59fpkt"];
2061--2610[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.118.209" src_ip="214.107.119.178" src_port="21"/>
      <filter dst_ip="133.28.118.209" src_ip="214.196.52.105" src_port="80"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.16.250.105"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.219.193.106"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.202.174.107"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_553{
style=filled;
color=gray75;
1168[label="193.215.86.108;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2071[label="193.215.86.108;3pkt 3fpkt", shape=invtriangle, color=brown];
2617[label="193.215.86.108;3pkt 3fpkt", shape=invhouse, color=bisque];
stat553[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.215.86.108:6112, 193.172.68.116:53095}[25%]&lt;BR/&gt;{193.215.86.108:6113, 193.172.68.116:53465}[25%]&lt;BR/&gt;{193.215.86.108:6113, 193.172.68.116:53651}[25%]&lt;BR/&gt;{193.215.86.108:6113, 193.172.68.116:53808}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6113: (45%)&lt;BR/&gt; 53808: (15%)&lt;BR/&gt; 53651: (15%)&lt;BR/&gt; 53465: (15%)&lt;BR/&gt; 53095: (5%)&gt;];
}
1168--2071[label="1;3pkt 3fpkt"];
1168--2617[label="1;3pkt 3fpkt"];
2071--2617[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.172.68.116" dst_port="53808" src_ip="193.215.86.108" src_port="6113"/>
      <filter dst_ip="193.172.68.116" dst_port="53651" src_ip="193.215.86.108" src_port="6113"/>
      <filter dst_ip="193.172.68.116" dst_port="53465" src_ip="193.215.86.108" src_port="6113"/>
      <filter dst_ip="193.172.68.116" dst_port="53095" src_ip="193.215.86.108" src_port="6112"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.11.114.108"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.163.113.111"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_556{
style=filled;
color=gray75;
1181[label="1.227.24.113;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2079[label="1.227.24.113;42pkt 42fpkt", shape=invtriangle, color=brown];
stat556[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.227.24.113:80, 193.104.110.35:*}[97.6744%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4619: (1.17647%)&lt;BR/&gt; 2608: (1.17647%)&lt;BR/&gt; 2528: (1.17647%)&lt;BR/&gt; 2517: (1.17647%)&gt;];
}
1181--2079[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="193.104.110.35" src_ip="1.227.24.113" src_port="80"/>
    </slice>
    <from sec="1005455337" usec="0"/>
    <to sec="1005455480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="170.71.48.113"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_558{
style=filled;
color=gray75;
1188[label="69.82.196.113;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2085[label="69.82.196.113;1pkt 1fpkt", shape=invtriangle, color=brown];
2627[label="69.82.196.113;1pkt 1fpkt", shape=invhouse, color=bisque];
stat558[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.82.196.113:80, 133.28.157.65:2366}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2366: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1188--2085[label="1;1pkt 1fpkt"];
1188--2627[label="1;1pkt 1fpkt"];
2085--2627[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.157.65" dst_port="2366" src_ip="69.82.196.113" src_port="80"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_559{
style=filled;
color=gray75;
594[label="208.62.217.113;s;6pkt 6fpkt", shape=diamond, color=yellow];
1189[label="208.62.217.113;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2086[label="208.62.217.113;3pkt 3fpkt", shape=invtriangle, color=brown];
stat559[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.62.217.113:7777, 133.28.91.29:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7777: (50%)&lt;BR/&gt; 61891: (13.6364%)&lt;BR/&gt; 61664: (13.6364%)&lt;BR/&gt; 2047: (9.09091%)&lt;BR/&gt; 2659: (4.54545%)&gt;];
}
594--1189[label="1;2pkt 2fpkt"];
594--2086[label="1;3pkt 3fpkt"];
1189--2086[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.91.29" src_ip="208.62.217.113" src_port="7777"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.99.58.116"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.137.123.116"/>
    </slice>
    <from sec="1005455057" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.212.125.118"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.17.141.118"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.40.231.118"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.20.219.119"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.97.15.120"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
1218[label="43.58.188.120;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2102[label="43.58.188.120;2pkt 2fpkt", shape=invtriangle, color=brown];
2637[label="43.58.188.120;2pkt 2fpkt", shape=invhouse, color=bisque];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.58.188.120:1214, 165.25.43.142:43820}[50%]&lt;BR/&gt;{43.58.188.120:1214, 165.25.43.142:43881}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 43881: (25%)&lt;BR/&gt; 43820: (25%)&gt;];
}
1218--2102[label="1;2pkt 2fpkt"];
1218--2637[label="1;2pkt 2fpkt"];
2102--2637[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.43.142" dst_port="43881" src_ip="43.58.188.120" src_port="1214"/>
      <filter dst_ip="165.25.43.142" dst_port="43820" src_ip="43.58.188.120" src_port="1214"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.85.72.122"/>
    </slice>
    <from sec="1005454808" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_569{
style=filled;
color=gray75;
1228[label="165.136.118.123;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2109[label="165.136.118.123;2pkt 2fpkt", shape=invtriangle, color=brown];
stat569[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.136.118.123:2561, 165.25.133.33:80}[50%]&lt;BR/&gt;{165.136.118.123:2555, 165.25.190.100:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2561: (25%)&lt;BR/&gt; 2555: (25%)&gt;];
}
1228--2109[label="1;2pkt 2fpkt"];
1228--2642[label="1;2pkt 2fpkt"];
2109--2642[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.190.100" dst_port="80" src_ip="165.136.118.123" src_port="2555"/>
      <filter dst_ip="165.25.133.33" dst_port="80" src_ip="165.136.118.123" src_port="2561"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.104.205.125"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.109.32.126"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_572{
style=filled;
color=gray75;
1237[label="43.174.90.127;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2115[label="43.174.90.127;2pkt 2fpkt", shape=invtriangle, color=brown];
stat572[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.174.90.127:1214, 165.25.43.142:44505}[50%]&lt;BR/&gt;{43.174.90.127:1214, 165.25.43.142:44583}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 44583: (25%)&lt;BR/&gt; 44505: (25%)&gt;];
}
1237--2115[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.43.142" dst_port="44583" src_ip="43.174.90.127" src_port="1214"/>
      <filter dst_ip="165.25.43.142" dst_port="44505" src_ip="43.174.90.127" src_port="1214"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_573{
style=filled;
color=gray75;
1239[label="213.187.28.128;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2116[label="213.187.28.128;20pkt 20fpkt", shape=invtriangle, color=brown];
stat573[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.187.28.128:80, 133.28.24.0:*}[85%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3740: (2.5%)&lt;BR/&gt; 3458: (2.5%)&lt;BR/&gt; 3455: (2.5%)&lt;BR/&gt; 3453: (2.5%)&gt;];
}
1239--2116[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.24.0" src_ip="213.187.28.128" src_port="80"/>
    </slice>
    <from sec="1005454871" usec="0"/>
    <to sec="1005455498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_574{
style=filled;
color=gray75;
1245[label="69.209.25.129;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2119[label="69.209.25.129;2pkt 2fpkt", shape=invtriangle, color=brown];
stat574[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.209.25.129:46472, 160.62.81.10:21}[50%]&lt;BR/&gt;{69.209.25.129:46474, 160.62.81.10:41178}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46474: (25%)&lt;BR/&gt; 46472: (25%)&lt;BR/&gt; 41178: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
1245--2119[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.81.10" dst_port="41178" src_ip="69.209.25.129" src_port="46474"/>
      <filter dst_ip="160.62.81.10" dst_port="21" src_ip="69.209.25.129" src_port="46472"/>
    </slice>
    <from sec="1005455310" usec="0"/>
    <to sec="1005455500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_575{
style=filled;
color=gray75;
1246[label="216.38.68.129;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2120[label="216.38.68.129;24pkt 24fpkt", shape=invtriangle, color=brown];
2645[label="216.38.68.129;25pkt 25fpkt", shape=invhouse, color=bisque];
stat575[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.38.68.129:*, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 7707: (2.02703%)&lt;BR/&gt; 7699: (2.02703%)&lt;BR/&gt; 7680: (2.02703%)&lt;BR/&gt; 7660: (2.02703%)&gt;];
}
1246--2120[label="1;24pkt 24fpkt"];
1246--2645[label="1;25pkt 25fpkt"];
2120--2645[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="216.38.68.129"/>
    </slice>
    <from sec="1005454929" usec="0"/>
    <to sec="1005455338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.141.232.130"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.52.134.131"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.83.14.132"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_579{
style=filled;
color=gray75;
1259[label="199.104.38.132;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2130[label="199.104.38.132;7pkt 7fpkt", shape=invtriangle, color=brown];
stat579[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.104.38.132:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1259--2130[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="199.104.38.132"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.225.107.132"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_581{
style=filled;
color=gray75;
498[label="205.203.26.20;d;27pkt 27fpkt", shape=diamond, color=yellow];
1263[label="192.11.112.132;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2132[label="192.11.112.132;30pkt 30fpkt", shape=invtriangle, color=brown];
stat581[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.11.112.132:80, 205.203.26.20:*}[96.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2248: (1.72414%)&lt;BR/&gt; 2247: (1.72414%)&lt;BR/&gt; 2246: (1.72414%)&lt;BR/&gt; 2245: (1.72414%)&gt;];
}
498--1263[label="1;27pkt 27fpkt"];
498--2132[label="1;27pkt 27fpkt"];
1263--2132[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="205.203.26.20" src_ip="192.11.112.132" src_port="80"/>
    </slice>
    <from sec="1005454898" usec="0"/>
    <to sec="1005455502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_583{
style=filled;
color=gray75;
1267[label="213.187.28.134;29pkt 29fpkt", shape=pentagon, color=darkviolet];
2135[label="213.187.28.134;29pkt 29fpkt", shape=invtriangle, color=brown];
2653[label="213.187.28.134;28pkt 28fpkt", shape=invhouse, color=bisque];
stat583[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.187.28.134:80, 133.28.24.0:*}[86.2069%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33049: (1.74419%)&lt;BR/&gt; 33047: (1.74419%)&lt;BR/&gt; 3754: (1.74419%)&lt;BR/&gt; 3457: (1.74419%)&gt;];
}
1267--2135[label="1;29pkt 29fpkt"];
1267--2653[label="1;28pkt 28fpkt"];
2135--2653[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.24.0" src_ip="213.187.28.134" src_port="80"/>
    </slice>
    <from sec="1005454901" usec="0"/>
    <to sec="1005455498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_584{
style=filled;
color=gray75;
1268[label="166.179.64.134;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2136[label="166.179.64.134;43pkt 43fpkt", shape=invtriangle, color=brown];
2654[label="166.179.64.134;43pkt 43fpkt", shape=invhouse, color=bisque];
stat584[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.179.64.134:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1268--2136[label="1;43pkt 43fpkt"];
1268--2654[label="1;43pkt 43fpkt"];
2136--2654[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter src_ip="166.179.64.134"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_585{
style=filled;
color=gray75;
1274[label="216.243.137.135;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2142[label="216.243.137.135;10pkt 10fpkt", shape=invtriangle, color=brown];
2658[label="216.243.137.135;10pkt 10fpkt", shape=invhouse, color=bisque];
stat585[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.243.137.135:80, 144.224.244.117:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2558: (5%)&lt;BR/&gt; 2557: (5%)&lt;BR/&gt; 2556: (5%)&lt;BR/&gt; 2555: (5%)&gt;];
}
1274--2142[label="1;10pkt 10fpkt"];
1274--2658[label="1;10pkt 10fpkt"];
2142--2658[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.244.117" src_ip="216.243.137.135" src_port="80"/>
    </slice>
    <from sec="1005455052" usec="0"/>
    <to sec="1005455383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.116.155.136"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.128.35.137"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.172.4.138"/>
    </slice>
    <from sec="1005454955" usec="0"/>
    <to sec="1005455408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="135.153.240.139"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.151.130.140"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="143.111.142.141"/>
    </slice>
    <from sec="1005454803" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_592{
style=filled;
color=gray75;
1291[label="130.131.237.141;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2153[label="130.131.237.141;10pkt 10fpkt", shape=invtriangle, color=brown];
stat592[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.131.237.141:*, 213.208.109.65:80}[54.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1311: (4.7619%)&lt;BR/&gt; 1310: (4.7619%)&lt;BR/&gt; 1292: (4.7619%)&lt;BR/&gt; 1287: (4.7619%)&gt;];
}
1291--2153[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="213.208.109.65" dst_port="80" src_ip="130.131.237.141"/>
    </slice>
    <from sec="1005455275" usec="0"/>
    <to sec="1005455500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.105.225.142"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.97.57.143"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.76.75.143"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.86.68.144"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.174.131.144"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_598{
style=filled;
color=gray75;
1305[label="130.32.200.144;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2162[label="130.32.200.144;1pkt 1fpkt", shape=invtriangle, color=brown];
2667[label="130.32.200.144;1pkt 1fpkt", shape=invhouse, color=bisque];
stat598[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.32.200.144:137, 130.32.200.14:137}[50%]&lt;BR/&gt;{130.32.200.144:138, 130.32.200.14:138}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (75%)&lt;BR/&gt; 138: (25%)&gt;];
}
1305--2162[label="1;1pkt 1fpkt"];
1305--2667[label="1;1pkt 1fpkt"];
2162--2667[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.32.200.14" dst_port="138" src_ip="130.32.200.144" src_port="138"/>
      <filter dst_ip="130.32.200.14" dst_port="137" src_ip="130.32.200.144" src_port="137"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_599{
style=filled;
color=gray75;
1306[label="133.28.10.145;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2163[label="133.28.10.145;1pkt 1fpkt", shape=invtriangle, color=brown];
2668[label="133.28.10.145;1pkt 1fpkt", shape=invhouse, color=bisque];
stat599[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.28.10.145:2017, 68.90.8.247:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2017: (50%)&gt;];
}
1306--2163[label="1;1pkt 1fpkt"];
1306--2668[label="1;1pkt 1fpkt"];
2163--2668[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="68.90.8.247" dst_port="6699" src_ip="133.28.10.145" src_port="2017"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_600{
style=filled;
color=gray75;
1308[label="135.186.101.145;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2165[label="135.186.101.145;3pkt 3fpkt", shape=invtriangle, color=brown];
stat600[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.186.101.145:80, 160.62.119.22:1541}[33.3333%]&lt;BR/&gt;{135.186.101.145:80, 160.62.119.22:1542}[33.3333%]&lt;BR/&gt;{135.186.101.145:80, 160.62.119.22:1546}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1546: (16.6667%)&lt;BR/&gt; 1542: (16.6667%)&lt;BR/&gt; 1541: (16.6667%)&gt;];
}
1308--2165[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.119.22" dst_port="1546" src_ip="135.186.101.145" src_port="80"/>
      <filter dst_ip="160.62.119.22" dst_port="1542" src_ip="135.186.101.145" src_port="80"/>
      <filter dst_ip="160.62.119.22" dst_port="1541" src_ip="135.186.101.145" src_port="80"/>
    </slice>
    <from sec="1005455355" usec="0"/>
    <to sec="1005455467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.110.136.146"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.200.206.146"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.67.147.147"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.229.227.148"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_605{
style=filled;
color=gray75;
1324[label="70.218.184.149;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2174[label="70.218.184.149;18pkt 18fpkt", shape=invtriangle, color=brown];
2676[label="70.218.184.149;19pkt 19fpkt", shape=invhouse, color=bisque];
stat605[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.218.184.149:80, 165.25.200.142:*}[89.4737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3567: (2.67857%)&lt;BR/&gt; 3566: (2.67857%)&lt;BR/&gt; 3565: (2.67857%)&lt;BR/&gt; 3564: (2.67857%)&gt;];
}
1324--2174[label="1;18pkt 18fpkt"];
1324--2676[label="1;19pkt 19fpkt"];
2174--2676[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.200.142" src_ip="70.218.184.149" src_port="80"/>
    </slice>
    <from sec="1005455194" usec="0"/>
    <to sec="1005455503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_606{
style=filled;
color=gray75;
1325[label="166.42.16.150;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2175[label="166.42.16.150;21pkt 21fpkt", shape=invtriangle, color=brown];
stat606[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.42.16.150:*, 133.28.147.19:80}[59.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4805: (2.32558%)&lt;BR/&gt; 4802: (2.32558%)&lt;BR/&gt; 4801: (2.32558%)&lt;BR/&gt; 4800: (2.32558%)&gt;];
}
1325--2175[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.147.19" dst_port="80" src_ip="166.42.16.150"/>
    </slice>
    <from sec="1005455440" usec="0"/>
    <to sec="1005455488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_607{
style=filled;
color=gray75;
1328[label="70.215.68.150;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2178[label="70.215.68.150;5pkt 5fpkt", shape=invtriangle, color=brown];
2677[label="70.215.68.150;5pkt 5fpkt", shape=invhouse, color=bisque];
stat607[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.215.68.150:1214, 160.62.120.81:1417}[20%]&lt;BR/&gt;{70.215.68.150:1214, 160.62.120.81:1420}[20%]&lt;BR/&gt;{70.215.68.150:1214, 160.62.120.81:1422}[20%]&lt;BR/&gt;{70.215.68.150:1214, 160.62.120.81:1429}[20%]&lt;BR/&gt;{70.215.68.150:1214, 160.62.120.81:1431}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 1431: (10%)&lt;BR/&gt; 1429: (10%)&lt;BR/&gt; 1422: (10%)&lt;BR/&gt; 1420: (10%)&gt;];
}
1328--2178[label="1;5pkt 5fpkt"];
1328--2677[label="1;5pkt 5fpkt"];
2178--2677[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.120.81" dst_port="1431" src_ip="70.215.68.150" src_port="1214"/>
      <filter dst_ip="160.62.120.81" dst_port="1429" src_ip="70.215.68.150" src_port="1214"/>
      <filter dst_ip="160.62.120.81" dst_port="1422" src_ip="70.215.68.150" src_port="1214"/>
      <filter dst_ip="160.62.120.81" dst_port="1420" src_ip="70.215.68.150" src_port="1214"/>
      <filter dst_ip="160.62.120.81" dst_port="1417" src_ip="70.215.68.150" src_port="1214"/>
    </slice>
    <from sec="1005454815" usec="0"/>
    <to sec="1005455499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.33.12.152"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_609{
style=filled;
color=gray75;
1338[label="193.8.79.152;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2183[label="193.8.79.152;3pkt 3fpkt", shape=invtriangle, color=brown];
2678[label="193.8.79.152;3pkt 3fpkt", shape=invhouse, color=bisque];
stat609[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.8.79.152:4315, 193.97.31.186:80}[33.3333%]&lt;BR/&gt;{193.8.79.152:4290, 193.104.119.128:80}[33.3333%]&lt;BR/&gt;{193.8.79.152:4342, 193.104.119.128:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4342: (16.6667%)&lt;BR/&gt; 4315: (16.6667%)&lt;BR/&gt; 4290: (16.6667%)&gt;];
}
1338--2183[label="1;3pkt 3fpkt"];
1338--2678[label="1;3pkt 3fpkt"];
2183--2678[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.104.119.128" dst_port="80" src_ip="193.8.79.152" src_port="4342"/>
      <filter dst_ip="193.104.119.128" dst_port="80" src_ip="193.8.79.152" src_port="4290"/>
      <filter dst_ip="193.97.31.186" dst_port="80" src_ip="193.8.79.152" src_port="4315"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_610{
style=filled;
color=gray75;
1339[label="208.243.99.152;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2184[label="208.243.99.152;2pkt 2fpkt", shape=invtriangle, color=brown];
stat610[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.243.99.152:0, 130.131.38.206:0}[33.3333%]&lt;BR/&gt;{208.243.99.152:80, 130.131.38.206:1754}[33.3333%]&lt;BR/&gt;{208.243.99.152:80, 130.131.38.206:1755}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (40%)&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 1755: (20%)&lt;BR/&gt; 1754: (10%)&gt;];
}
1339--2184[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.38.206" dst_port="1755" src_ip="208.243.99.152" src_port="80"/>
      <filter dst_ip="130.131.38.206" dst_port="1754" src_ip="208.243.99.152" src_port="80"/>
      <filter dst_ip="130.131.38.206" src_ip="208.243.99.152"/>
    </slice>
    <from sec="1005455282" usec="0"/>
    <to sec="1005455324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
1340[label="69.76.24.153;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2185[label="69.76.24.153;2pkt 2fpkt", shape=invtriangle, color=brown];
2679[label="69.76.24.153;2pkt 2fpkt", shape=invhouse, color=bisque];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.76.24.153:80, 133.28.157.88:3800}[33.3333%]&lt;BR/&gt;{69.76.24.153:80, 133.28.157.88:3802}[33.3333%]&lt;BR/&gt;{69.76.24.153:80, 133.28.157.88:3804}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3804: (21.4286%)&lt;BR/&gt; 3802: (21.4286%)&lt;BR/&gt; 3800: (7.14286%)&gt;];
}
1340--2185[label="1;2pkt 2fpkt"];
1340--2679[label="1;2pkt 2fpkt"];
2185--2679[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.157.88" dst_port="3804" src_ip="69.76.24.153" src_port="80"/>
      <filter dst_ip="133.28.157.88" dst_port="3802" src_ip="69.76.24.153" src_port="80"/>
      <filter dst_ip="133.28.157.88" dst_port="3800" src_ip="69.76.24.153" src_port="80"/>
    </slice>
    <from sec="1005455416" usec="0"/>
    <to sec="1005455424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
1342[label="216.38.68.153;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2186[label="216.38.68.153;16pkt 16fpkt", shape=invtriangle, color=brown];
2680[label="216.38.68.153;15pkt 15fpkt", shape=invhouse, color=bisque];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.38.68.153:*, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 22016: (3.19149%)&lt;BR/&gt; 21982: (3.19149%)&lt;BR/&gt; 21980: (3.19149%)&lt;BR/&gt; 21975: (3.19149%)&gt;];
}
1342--2186[label="1;16pkt 16fpkt"];
1342--2680[label="1;15pkt 15fpkt"];
2186--2680[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="216.38.68.153"/>
    </slice>
    <from sec="1005455295" usec="0"/>
    <to sec="1005455424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_613{
style=filled;
color=gray75;
1345[label="193.104.119.153;75pkt 75fpkt", shape=pentagon, color=darkviolet];
2187[label="193.104.119.153;75pkt 75fpkt", shape=invtriangle, color=brown];
2681[label="193.104.119.153;75pkt 75fpkt", shape=invhouse, color=bisque];
stat613[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.104.119.153:80, 193.206.48.226:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4449: (0.666667%)&lt;BR/&gt; 4441: (0.666667%)&lt;BR/&gt; 4426: (0.666667%)&lt;BR/&gt; 4269: (0.666667%)&gt;];
}
1345--2187[label="1;75pkt 75fpkt"];
1345--2681[label="1;75pkt 75fpkt"];
2187--2681[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_ip="193.206.48.226" src_ip="193.104.119.153" src_port="80"/>
    </slice>
    <from sec="1005455263" usec="0"/>
    <to sec="1005455336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_614{
style=filled;
color=gray75;
1347[label="216.38.68.154;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2189[label="216.38.68.154;21pkt 21fpkt", shape=invtriangle, color=brown];
2683[label="216.38.68.154;20pkt 20fpkt", shape=invhouse, color=bisque];
stat614[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.38.68.154:*, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 14202: (2.41935%)&lt;BR/&gt; 14019: (2.41935%)&lt;BR/&gt; 13963: (2.41935%)&lt;BR/&gt; 13918: (2.41935%)&gt;];
}
1347--2189[label="1;21pkt 21fpkt"];
1347--2683[label="1;20pkt 20fpkt"];
2189--2683[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="216.38.68.154"/>
    </slice>
    <from sec="1005454809" usec="0"/>
    <to sec="1005455444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.48.153.156"/>
    </slice>
    <from sec="1005454827" usec="0"/>
    <to sec="1005455433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_616{
style=filled;
color=gray75;
1370[label="216.38.68.158;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2202[label="216.38.68.158;6pkt 6fpkt", shape=invtriangle, color=brown];
stat616[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.38.68.158:*, 160.62.98.30:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 8927: (8.33333%)&lt;BR/&gt; 8170: (8.33333%)&lt;BR/&gt; 8120: (8.33333%)&lt;BR/&gt; 3310: (8.33333%)&gt;];
}
1370--2202[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.98.30" dst_port="25" src_ip="216.38.68.158"/>
    </slice>
    <from sec="1005454814" usec="0"/>
    <to sec="1005455378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_617{
style=filled;
color=gray75;
1377[label="70.177.69.160;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2206[label="70.177.69.160;4pkt 4fpkt", shape=invtriangle, color=brown];
stat617[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.177.69.160:80, 160.62.119.22:1153}[25%]&lt;BR/&gt;{70.177.69.160:80, 160.62.119.22:1163}[25%]&lt;BR/&gt;{70.177.69.160:80, 160.62.119.22:1164}[25%]&lt;BR/&gt;{70.177.69.160:80, 160.62.119.22:1166}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1166: (14.2857%)&lt;BR/&gt; 1164: (14.2857%)&lt;BR/&gt; 1163: (14.2857%)&lt;BR/&gt; 1153: (7.14286%)&gt;];
}
1377--2206[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.119.22" dst_port="1166" src_ip="70.177.69.160" src_port="80"/>
      <filter dst_ip="160.62.119.22" dst_port="1164" src_ip="70.177.69.160" src_port="80"/>
      <filter dst_ip="160.62.119.22" dst_port="1163" src_ip="70.177.69.160" src_port="80"/>
      <filter dst_ip="160.62.119.22" dst_port="1153" src_ip="70.177.69.160" src_port="80"/>
    </slice>
    <from sec="1005455174" usec="0"/>
    <to sec="1005455324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_618{
style=filled;
color=gray75;
1379[label="69.11.72.161;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2207[label="69.11.72.161;1pkt 1fpkt", shape=invtriangle, color=brown];
2694[label="69.11.72.161;1pkt 1fpkt", shape=invhouse, color=bisque];
stat618[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.11.72.161:80, 133.28.171.86:1904}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1904: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1379--2207[label="1;1pkt 1fpkt"];
1379--2694[label="1;1pkt 1fpkt"];
2207--2694[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.171.86" dst_port="1904" src_ip="69.11.72.161" src_port="80"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.69.127.161"/>
    </slice>
    <from sec="1005454810" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_620{
style=filled;
color=gray75;
1382[label="144.224.110.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2210[label="144.224.110.162;1pkt 1fpkt", shape=invtriangle, color=brown];
2696[label="144.224.110.162;2pkt 2fpkt", shape=invhouse, color=bisque];
stat620[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.110.162:80, 197.34.219.65:43698}[50%]&lt;BR/&gt;{144.224.110.162:80, 219.60.200.218:1870}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43698: (37.5%)&lt;BR/&gt; 1870: (12.5%)&gt;];
}
1382--2210[label="1;1pkt 1fpkt"];
1382--2696[label="1;1pkt 1fpkt"];
2210--2696[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.60.200.218" dst_port="1870" src_ip="144.224.110.162" src_port="80"/>
      <filter dst_ip="197.34.219.65" dst_port="43698" src_ip="144.224.110.162" src_port="80"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_621{
style=filled;
color=gray75;
1388[label="133.28.29.163;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2214[label="133.28.29.163;2pkt 2fpkt", shape=invtriangle, color=brown];
2699[label="133.28.29.163;1pkt 1fpkt", shape=invhouse, color=bisque];
stat621[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.28.29.163:0, 214.199.69.172:0}[50%]&lt;BR/&gt;{133.28.29.163:0, 193.250.251.183:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1388--2214[label="1;2pkt 2fpkt"];
1388--2699[label="1;1pkt 1fpkt"];
2214--2699[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.250.251.183" src_ip="133.28.29.163"/>
      <filter dst_ip="214.199.69.172" src_ip="133.28.29.163"/>
    </slice>
    <from sec="1005455226" usec="0"/>
    <to sec="1005455437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.188.65.163"/>
    </slice>
    <from sec="1005454805" usec="0"/>
    <to sec="1005455486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.99.66.163"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.194.6.164"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.196.60.164"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.80305,3.19601,999,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_626{
style=filled;
color=gray75;
39[label="160.62.221.164s;2pkt 2fpkt", shape=rectangle, color=red];
198[label="160.62.119.12;s;231pkt 231fpkt", shape=diamond, color=yellow];
273[label="69.162.41.235;d;10pkt 10fpkt", shape=diamond, color=yellow];
1398[label="160.62.221.164;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2222[label="160.62.221.164;19pkt 19fpkt", shape=invtriangle, color=brown];
stat626[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.62.119.12:*, *:25}[73.0159%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.5035%)&lt;BR/&gt; 113: (3.90071%)&lt;BR/&gt; 80: (1.06383%)&lt;BR/&gt; 2763: (0.70922%)&lt;BR/&gt; 2745: (0.70922%)&gt;];
}
39--273[label="0.5;1pkt 1fpkt"];
39--1398[label="1;2pkt 2fpkt"];
39--2222[label="1;2pkt 2fpkt"];
198--273[label="0.6;6pkt 6fpkt"];
198--654[label="0.004329;1pkt 1fpkt"];
198--668[label="0.004329;1pkt 1fpkt"];
198--682[label="0.004329;1pkt 1fpkt"];
273--1398[label="0.3;3pkt 3fpkt"];
273--1561[label="0.5;1pkt 1fpkt"];
273--2222[label="0.3;3pkt 3fpkt"];
1398--2222[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="160.62.119.12"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_627{
style=filled;
color=gray75;
1400[label="196.199.104.165;45pkt 45fpkt", shape=pentagon, color=darkviolet];
2224[label="196.199.104.165;45pkt 45fpkt", shape=invtriangle, color=brown];
2705[label="196.199.104.165;45pkt 45fpkt", shape=invhouse, color=bisque];
stat627[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.199.104.165:80, 193.165.196.212:*}[91.1111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44806: (1.11111%)&lt;BR/&gt; 44795: (1.11111%)&lt;BR/&gt; 44758: (1.11111%)&lt;BR/&gt; 44754: (1.11111%)&gt;];
}
1400--2224[label="1;45pkt 45fpkt"];
1400--2705[label="1;45pkt 45fpkt"];
2224--2705[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="193.165.196.212" src_ip="196.199.104.165" src_port="80"/>
    </slice>
    <from sec="1005454939" usec="0"/>
    <to sec="1005455354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.106.212.166"/>
    </slice>
    <from sec="1005454992" usec="0"/>
    <to sec="1005455461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.50.195.168"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_630{
style=filled;
color=gray75;
1414[label="130.131.50.169;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2227[label="130.131.50.169;2pkt 2fpkt", shape=invtriangle, color=brown];
stat630[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.131.50.169:80, 192.8.160.98:1055}[50%]&lt;BR/&gt;{130.131.50.169:80, 192.8.160.98:1056}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1056: (25%)&lt;BR/&gt; 1055: (25%)&gt;];
}
1414--2227[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.8.160.98" dst_port="1056" src_ip="130.131.50.169" src_port="80"/>
      <filter dst_ip="192.8.160.98" dst_port="1055" src_ip="130.131.50.169" src_port="80"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
1418[label="147.135.1.170;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2229[label="147.135.1.170;27pkt 27fpkt", shape=invtriangle, color=brown];
2710[label="147.135.1.170;27pkt 27fpkt", shape=invhouse, color=bisque];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.135.1.170:25, 133.28.113.114:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 62184: (1.85185%)&lt;BR/&gt; 62183: (1.85185%)&lt;BR/&gt; 62182: (1.85185%)&lt;BR/&gt; 62181: (1.85185%)&gt;];
}
1418--2229[label="1;27pkt 27fpkt"];
1418--2710[label="1;27pkt 27fpkt"];
2229--2710[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.113.114" src_ip="147.135.1.170" src_port="25"/>
    </slice>
    <from sec="1005454830" usec="0"/>
    <to sec="1005455499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_632{
style=filled;
color=gray75;
1419[label="130.71.72.170;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2230[label="130.71.72.170;42pkt 42fpkt", shape=invtriangle, color=brown];
2711[label="130.71.72.170;43pkt 43fpkt", shape=invhouse, color=bisque];
stat632[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.71.72.170:0, *:0}[93.0233%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.9688%)&lt;BR/&gt; 53: (3.51562%)&lt;BR/&gt; 37787: (1.17188%)&lt;BR/&gt; 34084: (1.17188%)&lt;BR/&gt; 1470: (1.17188%)&gt;];
}
1419--2230[label="1;42pkt 42fpkt"];
1419--2711[label="1;43pkt 43fpkt"];
2230--2711[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter src_ip="130.71.72.170"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.83.37.171"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_634{
style=filled;
color=gray75;
1429[label="208.42.86.172;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2236[label="208.42.86.172;17pkt 17fpkt", shape=invtriangle, color=brown];
stat634[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.42.86.172:80, 133.28.0.99:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4055: (2.85714%)&lt;BR/&gt; 4054: (2.85714%)&lt;BR/&gt; 4053: (2.85714%)&lt;BR/&gt; 4052: (2.85714%)&gt;];
}
1429--2236[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.0.99" src_ip="208.42.86.172" src_port="80"/>
    </slice>
    <from sec="1005455278" usec="0"/>
    <to sec="1005455303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_635{
style=filled;
color=gray75;
1434[label="43.157.169.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2239[label="43.157.169.173;1pkt 1fpkt", shape=invtriangle, color=brown];
stat635[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.157.169.173:64907, 144.224.91.21:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64907: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
1434--2239[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.91.21" dst_port="1214" src_ip="43.157.169.173" src_port="64907"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.207.69.174"/>
    </slice>
    <from sec="1005454808" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.38.69.176"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_638{
style=filled;
color=gray75;
1447[label="195.140.215.176;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2246[label="195.140.215.176;1pkt 1fpkt", shape=invtriangle, color=brown];
stat638[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.140.215.176:1766, 130.131.3.8:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1766: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
1447--2246[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.3.8" dst_port="1214" src_ip="195.140.215.176" src_port="1766"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.135.17.177"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_640{
style=filled;
color=gray75;
1456[label="214.26.69.178;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2251[label="214.26.69.178;3pkt 3fpkt", shape=invtriangle, color=brown];
stat640[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.26.69.178:80, 165.25.132.221:4666}[25%]&lt;BR/&gt;{214.26.69.178:80, 165.25.132.221:4667}[25%]&lt;BR/&gt;{214.26.69.178:80, 165.25.132.221:4668}[25%]&lt;BR/&gt;{214.26.69.178:80, 165.25.132.221:4669}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4669: (14.2857%)&lt;BR/&gt; 4668: (14.2857%)&lt;BR/&gt; 4667: (14.2857%)&lt;BR/&gt; 4666: (7.14286%)&gt;];
}
1456--2251[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.132.221" dst_port="4669" src_ip="214.26.69.178" src_port="80"/>
      <filter dst_ip="165.25.132.221" dst_port="4668" src_ip="214.26.69.178" src_port="80"/>
      <filter dst_ip="165.25.132.221" dst_port="4667" src_ip="214.26.69.178" src_port="80"/>
      <filter dst_ip="165.25.132.221" dst_port="4666" src_ip="214.26.69.178" src_port="80"/>
    </slice>
    <from sec="1005455421" usec="0"/>
    <to sec="1005455463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
1459[label="215.145.133.178;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2253[label="215.145.133.178;2pkt 2fpkt", shape=invtriangle, color=brown];
2719[label="215.145.133.178;1pkt 1fpkt", shape=invhouse, color=bisque];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.145.133.178:39900, 144.224.110.162:80}[50%]&lt;BR/&gt;{215.145.133.178:39903, 144.224.110.162:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39903: (30%)&lt;BR/&gt; 39900: (20%)&gt;];
}
1459--2253[label="1;2pkt 2fpkt"];
1459--2719[label="1;1pkt 1fpkt"];
2253--2719[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.110.162" dst_port="80" src_ip="215.145.133.178" src_port="39903"/>
      <filter dst_ip="144.224.110.162" dst_port="80" src_ip="215.145.133.178" src_port="39900"/>
    </slice>
    <from sec="1005455265" usec="0"/>
    <to sec="1005455297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_642{
style=filled;
color=gray75;
1461[label="130.49.228.178;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2254[label="130.49.228.178;1pkt 1fpkt", shape=invtriangle, color=brown];
2720[label="130.49.228.178;1pkt 1fpkt", shape=invhouse, color=bisque];
stat642[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.49.228.178:0, 196.144.180.164:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1461--2254[label="1;1pkt 1fpkt"];
1461--2720[label="1;1pkt 1fpkt"];
2254--2720[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.144.180.164" src_ip="130.49.228.178"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
1463[label="68.70.115.179;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2255[label="68.70.115.179;1pkt 1fpkt", shape=invtriangle, color=brown];
2721[label="68.70.115.179;1pkt 1fpkt", shape=invhouse, color=bisque];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.70.115.179:1214, 160.62.104.190:2803}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2803: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
1463--2255[label="1;1pkt 1fpkt"];
1463--2721[label="1;1pkt 1fpkt"];
2255--2721[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.104.190" dst_port="2803" src_ip="68.70.115.179" src_port="1214"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_644{
style=filled;
color=gray75;
1468[label="133.28.152.180;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2256[label="133.28.152.180;19pkt 19fpkt", shape=invtriangle, color=brown];
2722[label="133.28.152.180;20pkt 20fpkt", shape=invhouse, color=bisque];
stat644[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.28.152.180:*, 2.244.56.245:80}[85%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1638: (2.54237%)&lt;BR/&gt; 1637: (2.54237%)&lt;BR/&gt; 1627: (2.54237%)&lt;BR/&gt; 1625: (2.54237%)&gt;];
}
1468--2256[label="1;19pkt 19fpkt"];
1468--2722[label="1;20pkt 20fpkt"];
2256--2722[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="2.244.56.245" dst_port="80" src_ip="133.28.152.180"/>
    </slice>
    <from sec="1005455285" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.21.97.181"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
1479[label="70.140.245.183;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2263[label="70.140.245.183;7pkt 7fpkt", shape=invtriangle, color=brown];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.140.245.183:*, 192.11.113.100:143}[57.1429%]&lt;BR/&gt;{70.140.245.183:*, 192.11.113.90:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 143: (28.5714%)&lt;BR/&gt; 80: (21.4286%)&lt;BR/&gt; 1954: (7.14286%)&lt;BR/&gt; 1953: (7.14286%)&lt;BR/&gt; 1952: (7.14286%)&gt;];
}
1479--2263[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="192.11.113.100" dst_port="143" src_ip="70.140.245.183"/>
      <filter dst_ip="192.11.113.90" dst_port="80" src_ip="70.140.245.183"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.233.240.184"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.139.171.187"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.162.208.187"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_650{
style=filled;
color=gray75;
1503[label="70.16.152.190;201pkt 201fpkt", shape=pentagon, color=darkviolet];
2280[label="70.16.152.190;201pkt 201fpkt", shape=invtriangle, color=brown];
stat650[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.16.152.190:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1503--2280[label="1;201pkt 201fpkt"];
</description>
    <slice>
      <filter src_ip="70.16.152.190"/>
    </slice>
    <from sec="1005454806" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.197.135.192"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
1510[label="43.116.168.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2287[label="43.116.168.192;1pkt 1fpkt", shape=invtriangle, color=brown];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.116.168.192:1069, 144.224.6.229:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 1069: (50%)&gt;];
}
1510--2287[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.6.229" dst_port="1214" src_ip="43.116.168.192" src_port="1069"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_653{
style=filled;
color=gray75;
1511[label="192.250.172.192;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2288[label="192.250.172.192;10pkt 10fpkt", shape=invtriangle, color=brown];
stat653[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.250.172.192:80, 193.104.110.35:*}[60%]&lt;BR/&gt;{192.250.172.192:80, 160.62.118.219:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3129: (5%)&lt;BR/&gt; 3111: (5%)&lt;BR/&gt; 3105: (5%)&lt;BR/&gt; 3099: (5%)&gt;];
}
1511--2288[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="193.104.110.35" src_ip="192.250.172.192" src_port="80"/>
      <filter dst_ip="160.62.118.219" src_ip="192.250.172.192" src_port="80"/>
    </slice>
    <from sec="1005455271" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.21.144.193"/>
    </slice>
    <from sec="1005455074" usec="0"/>
    <to sec="1005455472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_655{
style=filled;
color=gray75;
1518[label="216.38.68.194;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2292[label="216.38.68.194;1pkt 1fpkt", shape=invtriangle, color=brown];
2744[label="216.38.68.194;1pkt 1fpkt", shape=invhouse, color=bisque];
stat655[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.38.68.194:60711, 160.62.121.54:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60711: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
1518--2292[label="1;1pkt 1fpkt"];
1518--2744[label="1;1pkt 1fpkt"];
2292--2744[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.121.54" dst_port="25" src_ip="216.38.68.194" src_port="60711"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="170.80.250.195"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.233.6.196"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_658{
style=filled;
color=gray75;
362[label="213.21.97.181;d;1pkt 1fpkt", shape=diamond, color=yellow];
1530[label="193.97.210.196;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2296[label="193.97.210.196;2pkt 2fpkt", shape=invtriangle, color=brown];
2748[label="193.97.210.196;2pkt 2fpkt", shape=invhouse, color=bisque];
stat658[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.97.210.196:3243, 141.89.231.51:6699}[50%]&lt;BR/&gt;{193.97.210.196:3424, 213.21.97.181:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3424: (28.5714%)&lt;BR/&gt; 3243: (21.4286%)&gt;];
}
362--1530[label="1;1pkt 1fpkt"];
362--2296[label="1;1pkt 1fpkt"];
362--2748[label="1;1pkt 1fpkt"];
1530--2296[label="1;2pkt 2fpkt"];
1530--2748[label="1;2pkt 2fpkt"];
2296--2748[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.21.97.181" dst_port="6699" src_ip="193.97.210.196" src_port="3424"/>
      <filter dst_ip="141.89.231.51" dst_port="6699" src_ip="193.97.210.196" src_port="3243"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.28.212.196"/>
    </slice>
    <from sec="1005455484" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="150.80.220.196"/>
    </slice>
    <from sec="1005454868" usec="0"/>
    <to sec="1005455489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.138.8.197"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_662{
style=filled;
color=gray75;
1537[label="193.97.210.197;39pkt 39fpkt", shape=pentagon, color=darkviolet];
2303[label="193.97.210.197;38pkt 38fpkt", shape=invtriangle, color=brown];
stat662[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.97.210.197:*, *:8888}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (42.8571%)&lt;BR/&gt; 4567: (2.5974%)&lt;BR/&gt; 7777: (1.2987%)&lt;BR/&gt; 4444: (1.2987%)&lt;BR/&gt; 4379: (1.2987%)&gt;];
}
1537--2303[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="193.97.210.197"/>
    </slice>
    <from sec="1005454806" usec="0"/>
    <to sec="1005455484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.199.20.198"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.192.42.199"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_665{
style=filled;
color=gray75;
1545[label="43.192.70.199;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2309[label="43.192.70.199;1pkt 1fpkt", shape=invtriangle, color=brown];
stat665[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.192.70.199:6699, 133.28.42.70:3697}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3697: (50%)&gt;];
}
1545--2309[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.42.70" dst_port="3697" src_ip="43.192.70.199" src_port="6699"/>
    </slice>
    <from sec="1005454804" usec="0"/>
    <to sec="1005455506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.199.84.199"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="150.80.220.199"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_668{
style=filled;
color=gray75;
1554[label="193.97.196.200;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2315[label="193.97.196.200;2pkt 2fpkt", shape=invtriangle, color=brown];
2759[label="193.97.196.200;2pkt 2fpkt", shape=invhouse, color=bisque];
stat668[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.97.196.200:3812, 208.144.37.92:8888}[50%]&lt;BR/&gt;{193.97.196.200:1273, 1.172.173.234:7777}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (25%)&lt;BR/&gt; 7777: (25%)&lt;BR/&gt; 3812: (25%)&lt;BR/&gt; 1273: (25%)&gt;];
}
1554--2315[label="1;2pkt 2fpkt"];
1554--2759[label="1;2pkt 2fpkt"];
2315--2759[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="1.172.173.234" dst_port="7777" src_ip="193.97.196.200" src_port="1273"/>
      <filter dst_ip="208.144.37.92" dst_port="8888" src_ip="193.97.196.200" src_port="3812"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_669{
style=filled;
color=gray75;
471[label="213.200.170.84;d;1pkt 1fpkt", shape=diamond, color=yellow];
1556[label="193.97.210.200;132pkt 132fpkt", shape=pentagon, color=darkviolet];
2317[label="193.97.210.200;131pkt 131fpkt", shape=invtriangle, color=brown];
2761[label="193.97.210.200;131pkt 131fpkt", shape=invhouse, color=bisque];
stat669[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.97.210.200:*, *:8888}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (37.3418%)&lt;BR/&gt; 7777: (3.03797%)&lt;BR/&gt; 6699: (2.40506%)&lt;BR/&gt; 4444: (1.89873%)&lt;BR/&gt; 5555: (1.13924%)&gt;];
}
471--1556[label="1;1pkt 1fpkt"];
471--2317[label="1;1pkt 1fpkt"];
471--2761[label="1;1pkt 1fpkt"];
1556--2317[label="1;131pkt 131fpkt"];
1556--2761[label="1;131pkt 131fpkt"];
2317--2761[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="193.97.210.200"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_670{
style=filled;
color=gray75;
1557[label="165.71.31.201;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2318[label="165.71.31.201;1pkt 1fpkt", shape=invtriangle, color=brown];
2762[label="165.71.31.201;1pkt 1fpkt", shape=invhouse, color=bisque];
stat670[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.71.31.201:0, 165.96.223.145:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1557--2318[label="1;1pkt 1fpkt"];
1557--2762[label="1;1pkt 1fpkt"];
2318--2762[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.96.223.145" src_ip="165.71.31.201"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.4.66.201"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_672{
style=filled;
color=gray75;
1567[label="193.97.210.202;76pkt 76fpkt", shape=pentagon, color=darkviolet];
2326[label="193.97.210.202;76pkt 76fpkt", shape=invtriangle, color=brown];
2768[label="193.97.210.202;76pkt 76fpkt", shape=invhouse, color=bisque];
stat672[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.97.210.202:*, *:8888}[68.4211%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (34.2105%)&lt;BR/&gt; 7777: (3.28947%)&lt;BR/&gt; 4444: (3.28947%)&lt;BR/&gt; 1030: (1.97368%)&lt;BR/&gt; 1025: (1.97368%)&gt;];
}
1567--2326[label="1;76pkt 76fpkt"];
1567--2768[label="1;76pkt 76fpkt"];
2326--2768[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="193.97.210.202"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.85.17.203"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_674{
style=filled;
color=gray75;
1572[label="216.38.68.203;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2328[label="216.38.68.203;3pkt 3fpkt", shape=invtriangle, color=brown];
stat674[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.38.68.203:55636, 160.62.98.30:25}[25%]&lt;BR/&gt;{216.38.68.203:54046, 165.25.64.72:25}[25%]&lt;BR/&gt;{216.38.68.203:50549, 165.18.154.123:25}[25%]&lt;BR/&gt;{216.38.68.203:52867, 160.62.113.213:25}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 55636: (14.2857%)&lt;BR/&gt; 54046: (14.2857%)&lt;BR/&gt; 52867: (14.2857%)&lt;BR/&gt; 50549: (7.14286%)&gt;];
}
1572--2328[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.113.213" dst_port="25" src_ip="216.38.68.203" src_port="52867"/>
      <filter dst_ip="165.18.154.123" dst_port="25" src_ip="216.38.68.203" src_port="50549"/>
      <filter dst_ip="165.25.64.72" dst_port="25" src_ip="216.38.68.203" src_port="54046"/>
      <filter dst_ip="160.62.98.30" dst_port="25" src_ip="216.38.68.203" src_port="55636"/>
    </slice>
    <from sec="1005454854" usec="0"/>
    <to sec="1005455409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.94.22.204"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_676{
style=filled;
color=gray75;
400[label="70.20.10.205;s;100pkt 100fpkt", shape=diamond, color=yellow];
1580[label="70.20.10.205;147pkt 147fpkt", shape=pentagon, color=darkviolet];
2333[label="70.20.10.205;146pkt 146fpkt", shape=invtriangle, color=brown];
stat676[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.20.10.205:80, 160.62.119.22:*}[95.9184%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4996: (0.381679%)&lt;BR/&gt; 4994: (0.381679%)&lt;BR/&gt; 4991: (0.381679%)&lt;BR/&gt; 4989: (0.381679%)&gt;];
}
400--654[label="0.05;5pkt 5fpkt"];
400--668[label="0.05;5pkt 5fpkt"];
400--682[label="0.05;5pkt 5fpkt"];
400--1580[label="1;100pkt 100fpkt"];
400--2333[label="1;100pkt 100fpkt"];
1580--2333[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.119.22" src_ip="70.20.10.205" src_port="80"/>
    </slice>
    <from sec="1005454816" usec="0"/>
    <to sec="1005455500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_677{
style=filled;
color=gray75;
1585[label="216.172.248.205;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2337[label="216.172.248.205;2pkt 2fpkt", shape=invtriangle, color=brown];
stat677[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.172.248.205:1214, 165.25.43.23:3717}[33.3333%]&lt;BR/&gt;{216.172.248.205:1214, 165.25.43.23:3732}[33.3333%]&lt;BR/&gt;{216.172.248.205:1214, 165.25.43.23:3734}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 3734: (20%)&lt;BR/&gt; 3717: (20%)&lt;BR/&gt; 3732: (10%)&gt;];
}
1585--2337[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.43.23" dst_port="3734" src_ip="216.172.248.205" src_port="1214"/>
      <filter dst_ip="165.25.43.23" dst_port="3732" src_ip="216.172.248.205" src_port="1214"/>
      <filter dst_ip="165.25.43.23" dst_port="3717" src_ip="216.172.248.205" src_port="1214"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_678{
style=filled;
color=gray75;
1588[label="208.1.35.206;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2339[label="208.1.35.206;3pkt 3fpkt", shape=invtriangle, color=brown];
stat678[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.1.35.206:21228, 133.28.147.19:80}[33.3333%]&lt;BR/&gt;{208.1.35.206:21229, 133.28.147.19:80}[33.3333%]&lt;BR/&gt;{208.1.35.206:21239, 133.28.147.19:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 21239: (16.6667%)&lt;BR/&gt; 21229: (16.6667%)&lt;BR/&gt; 21228: (16.6667%)&gt;];
}
1588--2339[label="1;3pkt 3fpkt"];
1588--2773[label="1;3pkt 3fpkt"];
2339--2773[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.147.19" dst_port="80" src_ip="208.1.35.206" src_port="21239"/>
      <filter dst_ip="133.28.147.19" dst_port="80" src_ip="208.1.35.206" src_port="21229"/>
      <filter dst_ip="133.28.147.19" dst_port="80" src_ip="208.1.35.206" src_port="21228"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.169.74.206"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.152.208.206"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_681{
style=filled;
color=gray75;
1596[label="212.94.26.208;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2343[label="212.94.26.208;14pkt 14fpkt", shape=invtriangle, color=brown];
2776[label="212.94.26.208;14pkt 14fpkt", shape=invhouse, color=bisque];
stat681[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.94.26.208:8888, 193.172.73.197:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (50%)&lt;BR/&gt; 2923: (3.57143%)&lt;BR/&gt; 2919: (3.57143%)&lt;BR/&gt; 2912: (3.57143%)&lt;BR/&gt; 2908: (3.57143%)&gt;];
}
1596--2343[label="1;14pkt 14fpkt"];
1596--2776[label="1;14pkt 14fpkt"];
2343--2776[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="193.172.73.197" src_ip="212.94.26.208" src_port="8888"/>
    </slice>
    <from sec="1005454803" usec="0"/>
    <to sec="1005455488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.210.103.209"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.101.234.211"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.219.50.212"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_685{
style=filled;
color=gray75;
1610[label="214.109.187.213;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2352[label="214.109.187.213;1pkt 1fpkt", shape=invtriangle, color=brown];
2781[label="214.109.187.213;1pkt 1fpkt", shape=invhouse, color=bisque];
stat685[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.109.187.213:41470, 133.28.185.3:25}[50%]&lt;BR/&gt;{214.109.187.213:39837, 133.28.133.141:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 39837: (37.5%)&lt;BR/&gt; 41470: (12.5%)&gt;];
}
1610--2352[label="1;1pkt 1fpkt"];
1610--2781[label="1;1pkt 1fpkt"];
2352--2781[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.133.141" dst_port="25" src_ip="214.109.187.213" src_port="39837"/>
      <filter dst_ip="133.28.185.3" dst_port="25" src_ip="214.109.187.213" src_port="41470"/>
    </slice>
    <from sec="1005455437" usec="0"/>
    <to sec="1005455486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.86584,3.18319,999,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_686{
style=filled;
color=gray75;
30[label="214.222.151.242s;2pkt 2fpkt", shape=rectangle, color=red];
199[label="160.62.72.124;d;3pkt 3fpkt", shape=diamond, color=yellow];
1611[label="192.38.207.213;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2353[label="192.38.207.213;1pkt 1fpkt", shape=invtriangle, color=brown];
2782[label="192.38.207.213;1pkt 1fpkt", shape=invhouse, color=bisque];
stat686[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.209.24.231:21, 160.62.72.124:1028}[25%]&lt;BR/&gt;{214.222.151.242:6699, 144.224.91.200:2535}[25%]&lt;BR/&gt;{192.38.207.213:41001, 160.62.72.124:1073}[25%]&lt;BR/&gt;{192.38.207.213:41002, 160.62.72.124:1144}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41002: (27.7778%)&lt;BR/&gt; 1144: (27.7778%)&lt;BR/&gt; 41001: (11.1111%)&lt;BR/&gt; 1073: (11.1111%)&lt;BR/&gt; 6699: (5.55556%)&gt;];
}
30--148[label="1;1pkt 1fpkt"];
30--199[label="0.5;1pkt 1fpkt"];
30--1611[label="0.5;1pkt 1fpkt"];
30--1707[label="1;1pkt 1fpkt"];
30--2353[label="1;1pkt 1fpkt"];
30--2424[label="1;1pkt 1fpkt"];
30--2782[label="1;1pkt 1fpkt"];
30--2821[label="1;1pkt 1fpkt"];
199--1611[label="1;2pkt 2fpkt"];
199--2353[label="1;1pkt 1fpkt"];
199--2782[label="1;1pkt 1fpkt"];
1611--2353[label="1;1pkt 1fpkt"];
1611--2782[label="1;1pkt 1fpkt"];
2353--2782[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.72.124" dst_port="1144" src_ip="192.38.207.213" src_port="41002"/>
      <filter dst_ip="160.62.72.124" dst_port="1073" src_ip="192.38.207.213" src_port="41001"/>
      <filter dst_ip="144.224.91.200" dst_port="2535" src_ip="214.222.151.242" src_port="6699"/>
      <filter dst_ip="160.62.72.124" dst_port="1028" src_ip="69.209.24.231" src_port="21"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
1617[label="212.82.132.215;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2357[label="212.82.132.215;3pkt 3fpkt", shape=invtriangle, color=brown];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.132.215:8888, 165.25.194.100:3676}[25%]&lt;BR/&gt;{212.82.132.215:8888, 144.224.154.142:4778}[25%]&lt;BR/&gt;{212.82.132.215:8888, 193.97.210.202:1047}[25%]&lt;BR/&gt;{212.82.132.215:8888, 193.97.210.202:1048}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (50%)&lt;BR/&gt; 3676: (14.2857%)&lt;BR/&gt; 1048: (14.2857%)&lt;BR/&gt; 1047: (14.2857%)&lt;BR/&gt; 4778: (7.14286%)&gt;];
}
1617--2357[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.97.210.202" dst_port="1048" src_ip="212.82.132.215" src_port="8888"/>
      <filter dst_ip="193.97.210.202" dst_port="1047" src_ip="212.82.132.215" src_port="8888"/>
      <filter dst_ip="144.224.154.142" dst_port="4778" src_ip="212.82.132.215" src_port="8888"/>
      <filter dst_ip="165.25.194.100" dst_port="3676" src_ip="212.82.132.215" src_port="8888"/>
    </slice>
    <from sec="1005454843" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.141.150.215"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.98.72.216"/>
    </slice>
    <from sec="1005454832" usec="0"/>
    <to sec="1005455503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.87.217.216"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005454908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_691{
style=filled;
color=gray75;
1623[label="68.17.36.217;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2363[label="68.17.36.217;1pkt 1fpkt", shape=invtriangle, color=brown];
stat691[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.17.36.217:1214, 160.62.104.190:2812}[50%]&lt;BR/&gt;{68.17.36.217:1214, 160.62.104.190:2815}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 2815: (33.3333%)&lt;BR/&gt; 2812: (16.6667%)&gt;];
}
1623--2363[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.104.190" dst_port="2815" src_ip="68.17.36.217" src_port="1214"/>
      <filter dst_ip="160.62.104.190" dst_port="2812" src_ip="68.17.36.217" src_port="1214"/>
    </slice>
    <from sec="1005454834" usec="0"/>
    <to sec="1005455499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.99.145.217"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.37.182.217"/>
    </slice>
    <from sec="1005454806" usec="0"/>
    <to sec="1005455506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.216.232.217"/>
    </slice>
    <from sec="1005455247" usec="0"/>
    <to sec="1005455326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
1633[label="165.18.230.219;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2371[label="165.18.230.219;1pkt 1fpkt", shape=invtriangle, color=brown];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.18.230.219:4445, 192.168.128.255:4445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4445: (100%)&gt;];
}
1633--2371[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.128.255" dst_port="4445" src_ip="165.18.230.219" src_port="4445"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="141.83.108.221"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.109.161.221"/>
    </slice>
    <from sec="1005455054" usec="0"/>
    <to sec="1005455475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.102.140.222"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.112.233.222"/>
    </slice>
    <from sec="1005454805" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
1644[label="198.167.48.224;80pkt 80fpkt", shape=pentagon, color=darkviolet];
2379[label="198.167.48.224;79pkt 79fpkt", shape=invtriangle, color=brown];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.167.48.224:80, 133.28.222.222:*}[25%]&lt;BR/&gt;{198.167.48.224:80, 193.104.120.132:*}[23.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1151: (1.25786%)&lt;BR/&gt; 56945: (0.628931%)&lt;BR/&gt; 46446: (0.628931%)&lt;BR/&gt; 46442: (0.628931%)&gt;];
}
1644--2379[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.222.222" src_ip="198.167.48.224" src_port="80"/>
      <filter dst_ip="193.104.120.132" src_ip="198.167.48.224" src_port="80"/>
    </slice>
    <from sec="1005454872" usec="0"/>
    <to sec="1005455485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_701{
style=filled;
color=gray75;
284[label="130.131.37.118;d;134pkt 134fpkt", shape=diamond, color=yellow];
1111[label="0.106.202.94;17pkt 17fpkt", shape=pentagon, color=darkviolet];
1646[label="69.90.131.224;29pkt 29fpkt", shape=pentagon, color=darkviolet];
2380[label="69.90.131.224;29pkt 29fpkt", shape=invtriangle, color=brown];
stat701[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.102.94.233:80, 130.131.37.118:*}[51.4085%]&lt;BR/&gt;{69.90.131.224:80, 130.131.37.118:*}[20.4225%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1751: (0.717703%)&lt;BR/&gt; 1739: (0.717703%)&lt;BR/&gt; 1734: (0.717703%)&lt;BR/&gt; 1723: (0.717703%)&gt;];
}
284--654[label="0.149254;20pkt 20fpkt"];
284--668[label="0.149254;20pkt 20fpkt"];
284--682[label="0.149254;20pkt 20fpkt"];
284--1111[label="0.705882;12pkt 12fpkt"];
284--1646[label="0.896552;26pkt 26fpkt"];
284--1679[label="1;72pkt 72fpkt"];
284--2380[label="0.896552;26pkt 26fpkt"];
284--2407[label="1;72pkt 72fpkt"];
1646--2380[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.37.118" src_ip="204.102.94.233" src_port="80"/>
      <filter dst_ip="130.131.37.118" src_ip="69.90.131.224" src_port="80"/>
    </slice>
    <from sec="1005454803" usec="0"/>
    <to sec="1005455479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.162.38.226"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_703{
style=filled;
color=gray75;
1654[label="69.162.41.226;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2384[label="69.162.41.226;2pkt 2fpkt", shape=invtriangle, color=brown];
stat703[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.162.41.226:25, 160.62.221.164:2756}[50%]&lt;BR/&gt;{69.162.41.226:25, 160.62.221.164:2777}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2777: (25%)&lt;BR/&gt; 2756: (25%)&gt;];
}
1654--2384[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.221.164" dst_port="2777" src_ip="69.162.41.226" src_port="25"/>
      <filter dst_ip="160.62.221.164" dst_port="2756" src_ip="69.162.41.226" src_port="25"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_704{
style=filled;
color=gray75;
1655[label="193.206.48.226;96pkt 96fpkt", shape=pentagon, color=darkviolet];
2385[label="193.206.48.226;96pkt 96fpkt", shape=invtriangle, color=brown];
stat704[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.206.48.226:*, 193.104.119.153:80}[79.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4449: (0.520833%)&lt;BR/&gt; 4441: (0.520833%)&lt;BR/&gt; 4426: (0.520833%)&lt;BR/&gt; 4269: (0.520833%)&gt;];
}
1655--2385[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_ip="193.104.119.153" dst_port="80" src_ip="193.206.48.226"/>
    </slice>
    <from sec="1005455262" usec="0"/>
    <to sec="1005455499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_705{
style=filled;
color=gray75;
1658[label="69.162.41.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2387[label="69.162.41.228;1pkt 1fpkt", shape=invtriangle, color=brown];
stat705[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.162.41.228:25, 160.62.121.25:4766}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4766: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
1658--2387[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.121.25" dst_port="4766" src_ip="69.162.41.228" src_port="25"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_706{
style=filled;
color=gray75;
1664[label="212.254.73.229;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2391[label="212.254.73.229;1pkt 1fpkt", shape=invtriangle, color=brown];
stat706[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.254.73.229:6699, 193.165.196.212:34364}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34364: (50%)&lt;BR/&gt; 6699: (50%)&gt;];
}
1664--2391[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.165.196.212" dst_port="34364" src_ip="212.254.73.229" src_port="6699"/>
    </slice>
    <from sec="1005454833" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_707{
style=filled;
color=gray75;
158[label="68.109.32.126;d;1pkt 1fpkt", shape=diamond, color=yellow];
217[label="209.59.224.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
1666[label="144.224.152.229;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2394[label="144.224.152.229;10pkt 10fpkt", shape=invtriangle, color=brown];
stat707[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.224.152.229:6346, *:*}[60%]&lt;BR/&gt;{144.224.152.229:*, *:6346}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 36147: (6.81818%)&lt;BR/&gt; 1060: (6.81818%)&lt;BR/&gt; 51308: (4.54545%)&lt;BR/&gt; 42545: (4.54545%)&gt;];
}
158--1666[label="1;1pkt 1fpkt"];
158--2394[label="1;1pkt 1fpkt"];
217--1666[label="1;1pkt 1fpkt"];
217--2394[label="1;1pkt 1fpkt"];
1666--2394[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="144.224.152.229" src_port="6346"/>
      <filter dst_port="6346" src_ip="144.224.152.229"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.782929,3.18997,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_708{
style=filled;
color=gray75;
570[label="71.102.54.230;s;3pkt 3fpkt", shape=diamond, color=yellow];
1667[label="71.102.54.230;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2395[label="71.102.54.230;4pkt 4fpkt", shape=invtriangle, color=brown];
stat708[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.102.54.230:1214, 165.25.43.142:44581}[25%]&lt;BR/&gt;{71.102.54.230:1214, 165.25.43.142:44582}[25%]&lt;BR/&gt;{71.102.54.230:1214, 165.25.43.142:44619}[25%]&lt;BR/&gt;{71.102.54.230:1214, 165.25.43.142:44650}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 44619: (15%)&lt;BR/&gt; 44582: (15%)&lt;BR/&gt; 44650: (10%)&lt;BR/&gt; 44581: (10%)&gt;];
}
570--1667[label="0.666667;2pkt 2fpkt"];
570--2395[label="1;3pkt 3fpkt"];
1667--2395[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.43.142" dst_port="44650" src_ip="71.102.54.230" src_port="1214"/>
      <filter dst_ip="165.25.43.142" dst_port="44619" src_ip="71.102.54.230" src_port="1214"/>
      <filter dst_ip="165.25.43.142" dst_port="44582" src_ip="71.102.54.230" src_port="1214"/>
      <filter dst_ip="165.25.43.142" dst_port="44581" src_ip="71.102.54.230" src_port="1214"/>
    </slice>
    <from sec="1005454807" usec="0"/>
    <to sec="1005455498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.138.107.230"/>
    </slice>
    <from sec="1005455441" usec="0"/>
    <to sec="1005455447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.215.171.230"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
1671[label="212.60.208.230;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2399[label="212.60.208.230;21pkt 21fpkt", shape=invtriangle, color=brown];
2805[label="212.60.208.230;20pkt 20fpkt", shape=invhouse, color=bisque];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.60.208.230:80, 193.97.30.24:*}[42.8571%]&lt;BR/&gt;{212.60.208.230:80, 133.28.153.45:*}[38.0952%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49390: (2.41935%)&lt;BR/&gt; 49389: (2.41935%)&lt;BR/&gt; 49387: (2.41935%)&lt;BR/&gt; 49385: (2.41935%)&gt;];
}
1671--2399[label="1;21pkt 21fpkt"];
1671--2805[label="1;20pkt 20fpkt"];
2399--2805[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="193.97.30.24" src_ip="212.60.208.230" src_port="80"/>
      <filter dst_ip="133.28.153.45" src_ip="212.60.208.230" src_port="80"/>
    </slice>
    <from sec="1005455018" usec="0"/>
    <to sec="1005455494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.24.212.230"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.116.86.231"/>
    </slice>
    <from sec="1005454831" usec="0"/>
    <to sec="1005455500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
1675[label="205.105.123.231;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2403[label="205.105.123.231;10pkt 10fpkt", shape=invtriangle, color=brown];
2807[label="205.105.123.231;10pkt 10fpkt", shape=invhouse, color=bisque];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.105.123.231:80, 193.104.64.2:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2435: (5%)&lt;BR/&gt; 2432: (5%)&lt;BR/&gt; 2431: (5%)&lt;BR/&gt; 2424: (5%)&gt;];
}
1675--2403[label="1;10pkt 10fpkt"];
1675--2807[label="1;10pkt 10fpkt"];
2403--2807[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="193.104.64.2" src_ip="205.105.123.231" src_port="80"/>
    </slice>
    <from sec="1005455094" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.211.3.232"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_716{
style=filled;
color=gray75;
1677[label="215.4.36.232;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2405[label="215.4.36.232;4pkt 4fpkt", shape=invtriangle, color=brown];
stat716[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.4.36.232:3403, 193.104.65.65:25}[25%]&lt;BR/&gt;{215.4.36.232:113, 193.104.65.65:34259}[25%]&lt;BR/&gt;{215.4.36.232:3432, 193.104.65.81:25}[25%]&lt;BR/&gt;{215.4.36.232:113, 193.104.65.81:53513}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (25%)&lt;BR/&gt; 25: (25%)&lt;BR/&gt; 53513: (12.5%)&lt;BR/&gt; 34259: (12.5%)&lt;BR/&gt; 3432: (12.5%)&gt;];
}
1677--2405[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="193.104.65.81" dst_port="53513" src_ip="215.4.36.232" src_port="113"/>
      <filter dst_ip="193.104.65.81" dst_port="25" src_ip="215.4.36.232" src_port="3432"/>
      <filter dst_ip="193.104.65.65" dst_port="34259" src_ip="215.4.36.232" src_port="113"/>
      <filter dst_ip="193.104.65.65" dst_port="25" src_ip="215.4.36.232" src_port="3403"/>
    </slice>
    <from sec="1005455093" usec="0"/>
    <to sec="1005455195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_717{
style=filled;
color=gray75;
1678[label="214.222.134.232;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2406[label="214.222.134.232;1pkt 1fpkt", shape=invtriangle, color=brown];
2810[label="214.222.134.232;1pkt 1fpkt", shape=invhouse, color=bisque];
stat717[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.222.134.232:9807, 193.165.196.212:59972}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59972: (50%)&lt;BR/&gt; 9807: (50%)&gt;];
}
1678--2406[label="1;1pkt 1fpkt"];
1678--2810[label="1;1pkt 1fpkt"];
2406--2810[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.165.196.212" dst_port="59972" src_ip="214.222.134.232" src_port="9807"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_718{
style=filled;
color=gray75;
1679[label="204.102.94.233;72pkt 72fpkt", shape=pentagon, color=darkviolet];
2407[label="204.102.94.233;72pkt 72fpkt", shape=invtriangle, color=brown];
stat718[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.102.94.233:80, 130.131.37.118:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1689: (0.694444%)&lt;BR/&gt; 1688: (0.694444%)&lt;BR/&gt; 1687: (0.694444%)&lt;BR/&gt; 1686: (0.694444%)&gt;];
}
1679--2407[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.37.118" src_ip="204.102.94.233" src_port="80"/>
    </slice>
    <from sec="1005454949" usec="0"/>
    <to sec="1005454965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.115.126.233"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.135.58.234"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.161.190.237"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_722{
style=filled;
color=gray75;
1696[label="134.168.51.239;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2417[label="134.168.51.239;2pkt 2fpkt", shape=invtriangle, color=brown];
2817[label="134.168.51.239;2pkt 2fpkt", shape=invhouse, color=bisque];
stat722[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.168.51.239:80, 160.62.119.22:4765}[50%]&lt;BR/&gt;{134.168.51.239:80, 160.62.119.22:4772}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4772: (25%)&lt;BR/&gt; 4765: (25%)&gt;];
}
1696--2417[label="1;2pkt 2fpkt"];
1696--2817[label="1;2pkt 2fpkt"];
2417--2817[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.119.22" dst_port="4772" src_ip="134.168.51.239" src_port="80"/>
      <filter dst_ip="160.62.119.22" dst_port="4765" src_ip="134.168.51.239" src_port="80"/>
    </slice>
    <from sec="1005454918" usec="0"/>
    <to sec="1005455041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_723{
style=filled;
color=gray75;
1699[label="193.97.199.239;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2418[label="193.97.199.239;3pkt 3fpkt", shape=invtriangle, color=brown];
2818[label="193.97.199.239;2pkt 2fpkt", shape=invhouse, color=bisque];
stat723[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.97.199.239:2208, 204.101.48.10:8888}[33.3333%]&lt;BR/&gt;{193.97.199.239:4580, 43.142.16.105:6699}[33.3333%]&lt;BR/&gt;{193.97.199.239:4685, 193.141.150.215:5100}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (18.75%)&lt;BR/&gt; 5100: (18.75%)&lt;BR/&gt; 4685: (18.75%)&lt;BR/&gt; 4580: (18.75%)&lt;BR/&gt; 8888: (12.5%)&gt;];
}
1699--2418[label="1;3pkt 3fpkt"];
1699--2818[label="1;2pkt 2fpkt"];
2418--2818[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.141.150.215" dst_port="5100" src_ip="193.97.199.239" src_port="4685"/>
      <filter dst_ip="43.142.16.105" dst_port="6699" src_ip="193.97.199.239" src_port="4580"/>
      <filter dst_ip="204.101.48.10" dst_port="8888" src_ip="193.97.199.239" src_port="2208"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_724{
style=filled;
color=gray75;
1701[label="192.11.119.240;70pkt 70fpkt", shape=pentagon, color=darkviolet];
2420[label="192.11.119.240;69pkt 69fpkt", shape=invtriangle, color=brown];
2819[label="192.11.119.240;69pkt 69fpkt", shape=invhouse, color=bisque];
stat724[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.11.119.240:6667, *:*}[55.7143%]&lt;BR/&gt;{192.11.119.240:*, *:113}[38.5714%]&lt;BR/&gt;{192.11.119.240:*, 195.93.30.241:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (27.6442%)&lt;BR/&gt; 113: (19.4712%)&lt;BR/&gt; 6668: (1.44231%)&lt;BR/&gt; 4355: (1.44231%)&lt;BR/&gt; 39263: (0.721154%)&gt;];
}
1701--2420[label="1;69pkt 69fpkt"];
1701--2819[label="1;69pkt 69fpkt"];
2420--2819[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_ip="195.93.30.241" src_ip="192.11.119.240"/>
      <filter src_ip="192.11.119.240" src_port="6667"/>
      <filter dst_port="113" src_ip="192.11.119.240"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_725{
style=filled;
color=gray75;
1703[label="133.28.47.241;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2421[label="133.28.47.241;3pkt 3fpkt", shape=invtriangle, color=brown];
2820[label="133.28.47.241;3pkt 3fpkt", shape=invhouse, color=bisque];
stat725[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.28.47.241:1525, 215.215.134.249:80}[33.3333%]&lt;BR/&gt;{133.28.47.241:1531, 215.215.134.249:80}[33.3333%]&lt;BR/&gt;{133.28.47.241:1532, 215.215.134.249:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1532: (16.6667%)&lt;BR/&gt; 1531: (16.6667%)&lt;BR/&gt; 1525: (16.6667%)&gt;];
}
1703--2421[label="1;3pkt 3fpkt"];
1703--2820[label="1;3pkt 3fpkt"];
2421--2820[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.215.134.249" dst_port="80" src_ip="133.28.47.241" src_port="1532"/>
      <filter dst_ip="215.215.134.249" dst_port="80" src_ip="133.28.47.241" src_port="1531"/>
      <filter dst_ip="215.215.134.249" dst_port="80" src_ip="133.28.47.241" src_port="1525"/>
    </slice>
    <from sec="1005455403" usec="0"/>
    <to sec="1005455408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_726{
style=filled;
color=gray75;
1704[label="213.124.110.241;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2422[label="213.124.110.241;1pkt 1fpkt", shape=invtriangle, color=brown];
stat726[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.124.110.241:0, 165.25.131.142:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1704--2422[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.131.142" src_ip="213.124.110.241"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.130.184.244"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.12.158.245"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.137.27.246"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_730{
style=filled;
color=gray75;
1715[label="170.109.8.247;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2431[label="170.109.8.247;1pkt 1fpkt", shape=invtriangle, color=brown];
2827[label="170.109.8.247;2pkt 2fpkt", shape=invhouse, color=bisque];
stat730[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.109.8.247:1214, 165.25.43.23:3762}[50%]&lt;BR/&gt;{170.109.8.247:1214, 165.25.43.23:3783}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 3783: (30%)&lt;BR/&gt; 3762: (20%)&gt;];
}
1715--2431[label="1;1pkt 1fpkt"];
1715--2827[label="1;2pkt 2fpkt"];
2431--2827[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.25.43.23" dst_port="3783" src_ip="170.109.8.247" src_port="1214"/>
      <filter dst_ip="165.25.43.23" dst_port="3762" src_ip="170.109.8.247" src_port="1214"/>
    </slice>
    <from sec="1005454803" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.10.14.247"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_732{
style=filled;
color=gray75;
1717[label="133.28.86.247;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2433[label="133.28.86.247;4pkt 4fpkt", shape=invtriangle, color=brown];
2828[label="133.28.86.247;5pkt 5fpkt", shape=invhouse, color=bisque];
stat732[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.28.86.247:1241, 213.116.118.167:80}[20%]&lt;BR/&gt;{133.28.86.247:1242, 213.116.118.167:80}[20%]&lt;BR/&gt;{133.28.86.247:1247, 213.116.118.167:80}[20%]&lt;BR/&gt;{133.28.86.247:1248, 213.116.118.167:80}[20%]&lt;BR/&gt;{133.28.86.247:1253, 213.116.118.167:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1253: (10.7143%)&lt;BR/&gt; 1248: (10.7143%)&lt;BR/&gt; 1247: (10.7143%)&lt;BR/&gt; 1242: (10.7143%)&gt;];
}
1717--2433[label="1;4pkt 4fpkt"];
1717--2828[label="1;5pkt 5fpkt"];
2433--2828[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="213.116.118.167" dst_port="80" src_ip="133.28.86.247" src_port="1253"/>
      <filter dst_ip="213.116.118.167" dst_port="80" src_ip="133.28.86.247" src_port="1248"/>
      <filter dst_ip="213.116.118.167" dst_port="80" src_ip="133.28.86.247" src_port="1247"/>
      <filter dst_ip="213.116.118.167" dst_port="80" src_ip="133.28.86.247" src_port="1242"/>
      <filter dst_ip="213.116.118.167" dst_port="80" src_ip="133.28.86.247" src_port="1241"/>
    </slice>
    <from sec="1005455389" usec="0"/>
    <to sec="1005455458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_733{
style=filled;
color=gray75;
1719[label="130.154.167.247;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2434[label="130.154.167.247;1pkt 1fpkt", shape=invtriangle, color=brown];
stat733[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.154.167.247:0, 214.131.98.231:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1719--2434[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.131.98.231" src_ip="130.154.167.247"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.50.208.247"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_735{
style=filled;
color=gray75;
1722[label="68.97.224.247;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2436[label="68.97.224.247;1pkt 1fpkt", shape=invtriangle, color=brown];
2830[label="68.97.224.247;1pkt 1fpkt", shape=invhouse, color=bisque];
stat735[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.97.224.247:80, 133.28.150.96:3992}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3992: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1722--2436[label="1;1pkt 1fpkt"];
1722--2830[label="1;1pkt 1fpkt"];
2436--2830[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.150.96" dst_port="3992" src_ip="68.97.224.247" src_port="80"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.228.18.249"/>
    </slice>
    <from sec="1005455283" usec="0"/>
    <to sec="1005455420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.43.215.249"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_738{
style=filled;
color=gray75;
1734[label="69.197.250.249;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2442[label="69.197.250.249;2pkt 2fpkt", shape=invtriangle, color=brown];
stat738[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.197.250.249:8888, 193.97.216.19:4217}[50%]&lt;BR/&gt;{69.197.250.249:8888, 130.131.233.52:2674}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (50%)&lt;BR/&gt; 4217: (25%)&lt;BR/&gt; 2674: (25%)&gt;];
}
1734--2442[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.233.52" dst_port="2674" src_ip="69.197.250.249" src_port="8888"/>
      <filter dst_ip="193.97.216.19" dst_port="4217" src_ip="69.197.250.249" src_port="8888"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.189.31.250"/>
    </slice>
    <from sec="1005454812" usec="0"/>
    <to sec="1005455478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_740{
style=filled;
color=gray75;
1740[label="148.8.87.250;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2446[label="148.8.87.250;1pkt 1fpkt", shape=invtriangle, color=brown];
stat740[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.8.87.250:50242, 193.97.195.127:80}[50%]&lt;BR/&gt;{148.8.87.250:50255, 193.97.195.127:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50255: (33.3333%)&lt;BR/&gt; 50242: (16.6667%)&gt;];
}
1740--2446[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.97.195.127" dst_port="80" src_ip="148.8.87.250" src_port="50255"/>
      <filter dst_ip="193.97.195.127" dst_port="80" src_ip="148.8.87.250" src_port="50242"/>
    </slice>
    <from sec="1005455252" usec="0"/>
    <to sec="1005455295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.521953,3.25253,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.156.85.251"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91834,3.17712,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_742{
style=filled;
color=gray75;
359[label="69.6.64.252;s;61pkt 61fpkt", shape=diamond, color=yellow];
1745[label="69.6.64.252;124pkt 124fpkt", shape=pentagon, color=darkviolet];
2448[label="69.6.64.252;124pkt 124fpkt", shape=invtriangle, color=brown];
2835[label="69.6.64.252;123pkt 123fpkt", shape=invhouse, color=bisque];
stat742[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.6.64.252:80, 160.62.119.22:*}[79.8387%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4444%)&lt;BR/&gt; 53: (5.55556%)&lt;BR/&gt; 10638: (0.462963%)&lt;BR/&gt; 10416: (0.462963%)&lt;BR/&gt; 10392: (0.462963%)&gt;];
}
359--654[label="0.147541;9pkt 9fpkt"];
359--659[label="0.0163934;1pkt 1fpkt"];
359--661[label="0.0163934;1pkt 1fpkt"];
359--668[label="0.147541;9pkt 9fpkt"];
359--672[label="0.0163934;1pkt 1fpkt"];
359--674[label="0.0163934;1pkt 1fpkt"];
359--682[label="0.147541;9pkt 9fpkt"];
359--1745[label="1;61pkt 61fpkt"];
359--2448[label="1;61pkt 61fpkt"];
359--2835[label="0.983607;60pkt 60fpkt"];
1745--2448[label="1;124pkt 124fpkt"];
1745--2835[label="1;123pkt 123fpkt"];
2448--2835[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.119.22" src_ip="69.6.64.252" src_port="80"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.46206,3.22901,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_743{
style=filled;
color=gray75;
1749[label="217.32.67.255;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2451[label="217.32.67.255;1pkt 1fpkt", shape=invtriangle, color=brown];
stat743[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.32.67.255:1214, 160.62.112.96:41767}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41767: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
1749--2451[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.62.112.96" dst_port="41767" src_ip="217.32.67.255" src_port="1214"/>
    </slice>
    <from sec="1005454805" usec="0"/>
    <to sec="1005455488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.922421,3.21885,999,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_744{
style=filled;
color=gray75;
181[label="68.18.45.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
2467[label="68.18.45.10;1pkt 1fpkt", shape=invhouse, color=bisque];
stat744[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.18.45.10:6346, 130.131.213.230:1235}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 1235: (50%)&gt;];
}
181--2467[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.131.213.230" dst_port="1235" src_ip="68.18.45.10" src_port="6346"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.89.173.13"/>
    </slice>
    <from sec="1005454812" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.209.6.14"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.135.19.14"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.85201,3.20111,999,1 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_748{
style=filled;
color=gray75;
40[label="130.131.213.230s;2pkt 2fpkt", shape=rectangle, color=red];
617[label="196.160.73.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
759[label="43.246.21.14;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2476[label="43.246.21.14;1pkt 1fpkt", shape=invhouse, color=bisque];
stat748[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.246.21.14:1419, 144.224.6.229:1214}[50%]&lt;BR/&gt;{130.131.213.230:1347, 196.160.73.214:6346}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1419: (30%)&lt;BR/&gt; 1214: (30%)&lt;BR/&gt; 6346: (20%)&lt;BR/&gt; 1347: (20%)&gt;];
}
40--72[label="0.5;1pkt 1fpkt"];
40--617[label="1;1pkt 1fpkt"];
40--624[label="0.5;1pkt 1fpkt"];
40--639[label="0.5;1pkt 1fpkt"];
40--759[label="1;1pkt 1fpkt"];
40--2476[label="1;1pkt 1fpkt"];
759--2476[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.160.73.214" dst_port="6346" src_ip="130.131.213.230" src_port="1347"/>
      <filter dst_ip="144.224.6.229" dst_port="1214" src_ip="43.246.21.14" src_port="1419"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.53.112.19"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.4.32.29"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.97.58.32"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.19.210.32"/>
    </slice>
    <from sec="1005454804" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.101.227.37"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.37.17.40"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.68.181.43"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.148.129.48"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.238.28.57"/>
    </slice>
    <from sec="1005454855" usec="0"/>
    <to sec="1005455502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.197.202.60"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.216.3.61"/>
    </slice>
    <from sec="1005454807" usec="0"/>
    <to sec="1005455502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.34.25.63"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.27.194.63"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.16.93.67"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709088,3.23993,999,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_763{
style=filled;
color=gray75;
1971[label="43.107.166.73;1pkt 1fpkt", shape=invtriangle, color=brown];
2560[label="43.107.166.73;1pkt 1fpkt", shape=invhouse, color=bisque];
stat763[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.107.166.73:6699, 144.224.53.75:3484}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3484: (50%)&gt;];
}
1971--2560[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.53.75" dst_port="3484" src_ip="43.107.166.73" src_port="6699"/>
    </slice>
    <from sec="1005454813" usec="0"/>
    <to sec="1005455478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.13.156.75"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.196.147.79"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="86.3.253.79"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.93.98.82"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.96.167.83"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.16.200.85"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.151.144.87"/>
    </slice>
    <from sec="1005454898" usec="0"/>
    <to sec="1005455440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.90.166.87"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.137.45.91"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="139.59.111.95"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.43.3.98"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.181.53.98"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.130.188.103"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.202.174.107"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.11.114.108"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.163.113.111"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="170.71.48.113"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.2.195.113"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005454876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.99.58.116"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.137.123.116"/>
    </slice>
    <from sec="1005455057" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.212.125.118"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.17.141.118"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.20.219.119"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="86.210.157.130"/>
    </slice>
    <from sec="1005454803" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="135.153.240.139"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="145.97.57.143"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.86.68.144"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.174.131.144"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.110.136.146"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.229.227.148"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.16.199.156"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626457,3.23406,999,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
1389[label="43.188.65.163;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2700[label="43.188.65.163;1pkt 1fpkt", shape=invhouse, color=bisque];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.188.65.163:6699, 133.28.101.155:3944}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3944: (50%)&gt;];
}
1389--2700[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.28.101.155" dst_port="3944" src_ip="43.188.65.163" src_port="6699"/>
    </slice>
    <from sec="1005454805" usec="0"/>
    <to sec="1005455486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="167.70.188.163"/>
    </slice>
    <from sec="1005455384" usec="0"/>
    <to sec="1005455454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.194.6.164"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.196.60.164"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.106.212.166"/>
    </slice>
    <from sec="1005454992" usec="0"/>
    <to sec="1005455461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.50.195.168"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.135.17.177"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.139.171.187"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.162.208.187"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.208.228.189"/>
    </slice>
    <from sec="1005454804" usec="0"/>
    <to sec="1005455263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="170.80.250.195"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.192.42.199"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.192.70.199"/>
    </slice>
    <from sec="1005454804" usec="0"/>
    <to sec="1005455506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.199.84.199"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="150.80.220.199"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.4.66.201"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.666237,3.21632,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_811{
style=filled;
color=gray75;
1561[label="160.62.123.201;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2322[label="160.62.123.201;1pkt 1fpkt", shape=invtriangle, color=brown];
2764[label="160.62.123.201;1pkt 1fpkt", shape=invhouse, color=bisque];
stat811[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.62.123.201:0, 196.252.235.232:0}[50%]&lt;BR/&gt;{160.62.123.201:56720, 69.162.41.235:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (75%)&lt;BR/&gt; 56720: (12.5%)&lt;BR/&gt; 25: (12.5%)&gt;];
}
1561--2322[label="1;1pkt 1fpkt"];
1561--2764[label="1;1pkt 1fpkt"];
2322--2764[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="69.162.41.235" dst_port="25" src_ip="160.62.123.201" src_port="56720"/>
      <filter dst_ip="196.252.235.232" src_ip="160.62.123.201"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.16.228.201"/>
    </slice>
    <from sec="1005455239" usec="0"/>
    <to sec="1005455504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.94.22.204"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="142.148.169.207"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.210.103.209"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.33.104.211"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.101.234.211"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.626457,3.23406,999,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_818{
style=filled;
color=gray75;
1622[label="198.87.217.216;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2785[label="198.87.217.216;1pkt 1fpkt", shape=invhouse, color=bisque];
stat818[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.87.217.216:1176, 144.224.91.91:2570}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2570: (50%)&lt;BR/&gt; 1176: (50%)&gt;];
}
1622--2785[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.224.91.91" dst_port="2570" src_ip="198.87.217.216" src_port="1176"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005454908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.37.182.217"/>
    </slice>
    <from sec="1005454806" usec="0"/>
    <to sec="1005455506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="165.18.230.219"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.109.161.221"/>
    </slice>
    <from sec="1005455054" usec="0"/>
    <to sec="1005455475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.158.165.221"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.102.140.222"/>
    </slice>
    <from sec="1005454801" usec="0"/>
    <to sec="1005455508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.112.233.222"/>
    </slice>
    <from sec="1005454805" usec="0"/>
    <to sec="1005455507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.76.70.225"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.19.177.225"/>
    </slice>
    <from sec="1005454800" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.162.38.226"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.24.212.230"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.211.3.232"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.135.58.234"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.161.190.237"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.12.158.245"/>
    </slice>
    <from sec="1005455508" usec="0"/>
    <to sec="1005455509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.137.27.246"/>
    </slice>
    <from sec="1005454802" usec="0"/>
    <to sec="1005455209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.671851,3.25754,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.228.18.249"/>
    </slice>
    <from sec="1005455283" usec="0"/>
    <to sec="1005455420" usec="0"/>
  </anomaly>

</admd:annotation>
