<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.846152,1.79934,901,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_9{
style=filled;
color=gray75;
54[label="192.3.92.156;d;350pkt 350fpkt", shape=diamond, color=yellow];
263[label="193.243.196.160;d;478pkt 478fpkt", shape=diamond, color=yellow];
498[label="135.246.59.203;d;3pkt 3fpkt", shape=diamond, color=yellow];
500[label="193.227.45.140;s;2pkt 2fpkt", shape=diamond, color=yellow];
633[label="145.208.149.23;d;92pkt 92fpkt", shape=diamond, color=yellow];
718[label="16.203.12.33;s;15pkt 15fpkt", shape=diamond, color=yellow];
999[label="223.81.48.109;s;68pkt 68fpkt", shape=diamond, color=yellow];
1332[label="170.66.135.237;s;15pkt 15fpkt", shape=hexagon, color=black];
1429[label="193.243.196.160;d;412pkt 412fpkt", shape=hexagon, color=black];
1953[label="197.238.197.14;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1959[label="193.176.75.15;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1985[label="216.251.102.23;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2013[label="197.83.42.29;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2058[label="220.4.71.40;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2103[label="197.83.3.54;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2110[label="197.83.3.55;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2249[label="197.83.42.103;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2375[label="193.227.45.140;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2543[label="223.72.133.191;90pkt 90fpkt", shape=pentagon, color=darkviolet];
2556[label="223.240.27.195;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2567[label="220.40.21.200;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2569[label="16.129.211.200;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2666[label="16.203.12.236;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2668[label="170.66.135.237;89pkt 89fpkt", shape=pentagon, color=darkviolet];
2703[label="197.83.37.254;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2773[label="197.83.42.29;25pkt 25fpkt", shape=invtriangle, color=brown];
2798[label="220.4.71.40;11pkt 11fpkt", shape=invtriangle, color=brown];
2974[label="193.227.45.140;35pkt 35fpkt", shape=invtriangle, color=brown];
3070[label="223.72.133.191;90pkt 90fpkt", shape=invtriangle, color=brown];
3076[label="223.240.27.195;17pkt 17fpkt", shape=invtriangle, color=brown];
3144[label="16.203.12.236;29pkt 29fpkt", shape=invtriangle, color=brown];
3205[label="197.83.42.29;25pkt 25fpkt", shape=invhouse, color=bisque];
3281[label="223.81.48.109;112pkt 112fpkt", shape=invhouse, color=bisque];
3368[label="223.240.27.195;13pkt 13fpkt", shape=invhouse, color=bisque];
3406[label="16.203.12.236;30pkt 30fpkt", shape=invhouse, color=bisque];
stat9[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 193.243.196.160:*}[32.2607%]&lt;BR/&gt;{*:80, 192.3.92.156:*}[22.3597%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.3719%)&lt;BR/&gt; 0: (3.91715%)&lt;BR/&gt; 53: (3.33183%)&lt;BR/&gt; 65534: (1.86853%)&lt;BR/&gt; 123: (0.180099%)&gt;];
}
54--56[label="1;14pkt 14fpkt"];
54--227[label="0.111111;1pkt 1fpkt"];
54--587[label="0.027027;1pkt 1fpkt"];
54--615[label="0.0454545;2pkt 2fpkt"];
54--685[label="0.00636943;1pkt 1fpkt"];
54--860[label="0.3;3pkt 3fpkt"];
54--999[label="0.397059;27pkt 27fpkt"];
54--1147[label="0.823529;14pkt 14fpkt"];
54--1261[label="0.108108;4pkt 4fpkt"];
54--1332[label="1;15pkt 15fpkt"];
54--1383[label="0.5;1pkt 1fpkt"];
54--1442[label="0.027027;1pkt 1fpkt"];
54--1447[label="0.05;2pkt 2fpkt"];
54--1546[label="0.0078125;1pkt 1fpkt"];
54--1785[label="0.5;1pkt 1fpkt"];
54--1799[label="0.0277778;1pkt 1fpkt"];
54--1845[label="0.0142857;5pkt 5fpkt"];
54--1852[label="0.00857143;3pkt 3fpkt"];
54--1859[label="0.00285714;1pkt 1fpkt"];
54--1862[label="0.00571429;2pkt 2fpkt"];
54--1864[label="0.0114286;4pkt 4fpkt"];
54--1865[label="0.0885714;31pkt 31fpkt"];
54--1866[label="0.00571429;2pkt 2fpkt"];
54--1867[label="0.0742857;26pkt 26fpkt"];
54--1873[label="0.0142857;5pkt 5fpkt"];
54--1883[label="0.0742857;26pkt 26fpkt"];
54--1889[label="0.0142857;5pkt 5fpkt"];
54--1985[label="1;8pkt 8fpkt"];
54--2013[label="0.125;3pkt 3fpkt"];
54--2103[label="0.157895;3pkt 3fpkt"];
54--2110[label="0.133333;2pkt 2fpkt"];
54--2148[label="0.333333;2pkt 2fpkt"];
54--2271[label="0.241071;27pkt 27fpkt"];
54--2543[label="0.0222222;2pkt 2fpkt"];
54--2668[label="1;89pkt 89fpkt"];
54--2703[label="0.12;3pkt 3fpkt"];
54--2773[label="0.12;3pkt 3fpkt"];
54--3070[label="0.0222222;2pkt 2fpkt"];
54--3205[label="0.12;3pkt 3fpkt"];
54--3281[label="0.241071;27pkt 27fpkt"];
263--372[label="0.333333;1pkt 1fpkt"];
263--475[label="0.0470588;8pkt 8fpkt"];
263--587[label="0.027027;1pkt 1fpkt"];
263--661[label="0.05;1pkt 1fpkt"];
263--680[label="0.04;1pkt 1fpkt"];
263--732[label="0.025;1pkt 1fpkt"];
263--734[label="0.142857;1pkt 1fpkt"];
263--849[label="0.0416667;3pkt 3fpkt"];
263--860[label="0.1;1pkt 1fpkt"];
263--1074[label="0.320312;41pkt 41fpkt"];
263--1429[label="1;412pkt 412fpkt"];
263--1442[label="0.027027;1pkt 1fpkt"];
263--1474[label="0.333333;1pkt 1fpkt"];
263--1503[label="0.0424242;7pkt 7fpkt"];
263--1656[label="0.04;1pkt 1fpkt"];
263--1697[label="0.142857;1pkt 1fpkt"];
263--1799[label="0.0277778;1pkt 1fpkt"];
263--1829[label="0.04;1pkt 1fpkt"];
263--1845[label="0.0230126;11pkt 11fpkt"];
263--1852[label="0.0041841;2pkt 2fpkt"];
263--1853[label="0.0104603;5pkt 5fpkt"];
263--1858[label="0.0041841;2pkt 2fpkt"];
263--1859[label="0.0146444;7pkt 7fpkt"];
263--1862[label="0.0251046;12pkt 12fpkt"];
263--1864[label="0.0041841;2pkt 2fpkt"];
263--1865[label="0.0753138;36pkt 36fpkt"];
263--1866[label="0.0041841;2pkt 2fpkt"];
263--1867[label="0.0481172;23pkt 23fpkt"];
263--1873[label="0.0230126;11pkt 11fpkt"];
263--1883[label="0.0481172;23pkt 23fpkt"];
263--1889[label="0.0230126;11pkt 11fpkt"];
263--1959[label="1;3pkt 3fpkt"];
263--2013[label="0.125;3pkt 3fpkt"];
263--2058[label="1;10pkt 10fpkt"];
263--2103[label="0.263158;5pkt 5fpkt"];
263--2110[label="0.4;6pkt 6fpkt"];
263--2145[label="0.5;1pkt 1fpkt"];
263--2197[label="0.142857;1pkt 1fpkt"];
263--2249[label="0.105263;2pkt 2fpkt"];
263--2375[label="0.485714;17pkt 17fpkt"];
263--2457[label="0.0833333;3pkt 3fpkt"];
263--2460[label="0.111111;2pkt 2fpkt"];
263--2531[label="0.00990099;1pkt 1fpkt"];
263--2543[label="0.0777778;7pkt 7fpkt"];
263--2556[label="0.277778;5pkt 5fpkt"];
263--2567[label="1;2pkt 2fpkt"];
263--2569[label="1;1pkt 1fpkt"];
263--2703[label="0.2;5pkt 5fpkt"];
263--2773[label="0.16;4pkt 4fpkt"];
263--2798[label="1;11pkt 11fpkt"];
263--2974[label="0.485714;17pkt 17fpkt"];
263--3067[label="0.00990099;1pkt 1fpkt"];
263--3070[label="0.0777778;7pkt 7fpkt"];
263--3076[label="0.294118;5pkt 5fpkt"];
263--3205[label="0.16;4pkt 4fpkt"];
263--3362[label="0.01;1pkt 1fpkt"];
263--3368[label="0.384615;5pkt 5fpkt"];
498--500[label="1;2pkt 2fpkt"];
498--2375[label="0.666667;2pkt 2fpkt"];
498--2974[label="0.666667;2pkt 2fpkt"];
500--2375[label="1;2pkt 2fpkt"];
500--2974[label="1;2pkt 2fpkt"];
633--718[label="0.933333;14pkt 14fpkt"];
633--1853[label="0.0434783;4pkt 4fpkt"];
633--1859[label="0.0652174;6pkt 6fpkt"];
633--1953[label="1;11pkt 11fpkt"];
633--2013[label="0.0833333;2pkt 2fpkt"];
633--2103[label="0.0526316;1pkt 1fpkt"];
633--2110[label="0.0666667;1pkt 1fpkt"];
633--2457[label="0.111111;4pkt 4fpkt"];
633--2482[label="0.0326087;3pkt 3fpkt"];
633--2486[label="0.0326087;3pkt 3fpkt"];
633--2501[label="0.0222222;1pkt 1fpkt"];
633--2666[label="0.0333333;1pkt 1fpkt"];
633--2703[label="0.08;2pkt 2fpkt"];
633--2773[label="0.08;2pkt 2fpkt"];
633--3047[label="0.0222222;1pkt 1fpkt"];
633--3205[label="0.08;2pkt 2fpkt"];
633--3352[label="0.0217391;1pkt 1fpkt"];
633--3406[label="0.0333333;1pkt 1fpkt"];
999--1865[label="0.117647;8pkt 8fpkt"];
999--1867[label="0.0588235;4pkt 4fpkt"];
999--1883[label="0.0588235;4pkt 4fpkt"];
999--2271[label="1;68pkt 68fpkt"];
999--3281[label="1;68pkt 68fpkt"];
1332--2668[label="1;15pkt 15fpkt"];
1429--1474[label="0.333333;1pkt 1fpkt"];
1429--1503[label="0.030303;5pkt 5fpkt"];
1429--1656[label="0.04;1pkt 1fpkt"];
1429--1697[label="0.142857;1pkt 1fpkt"];
1429--1829[label="0.04;1pkt 1fpkt"];
1429--1845[label="0.026699;11pkt 11fpkt"];
1429--1852[label="0.00485437;2pkt 2fpkt"];
1429--1853[label="0.0121359;5pkt 5fpkt"];
1429--1858[label="0.00485437;2pkt 2fpkt"];
1429--1859[label="0.0169903;7pkt 7fpkt"];
1429--1862[label="0.0291262;12pkt 12fpkt"];
1429--1864[label="0.00485437;2pkt 2fpkt"];
1429--1865[label="0.0873786;36pkt 36fpkt"];
1429--1866[label="0.00485437;2pkt 2fpkt"];
1429--1867[label="0.0558252;23pkt 23fpkt"];
1429--1873[label="0.026699;11pkt 11fpkt"];
1429--1883[label="0.0558252;23pkt 23fpkt"];
1429--1889[label="0.026699;11pkt 11fpkt"];
1429--1959[label="1;3pkt 3fpkt"];
1429--2013[label="0.0416667;1pkt 1fpkt"];
1429--2058[label="1;10pkt 10fpkt"];
1429--2103[label="0.157895;3pkt 3fpkt"];
1429--2110[label="0.2;3pkt 3fpkt"];
1429--2145[label="0.5;1pkt 1fpkt"];
1429--2197[label="0.142857;1pkt 1fpkt"];
1429--2249[label="0.105263;2pkt 2fpkt"];
1429--2375[label="0.485714;17pkt 17fpkt"];
1429--2457[label="0.0833333;3pkt 3fpkt"];
1429--2460[label="0.111111;2pkt 2fpkt"];
1429--2531[label="0.00990099;1pkt 1fpkt"];
1429--2556[label="0.277778;5pkt 5fpkt"];
1429--2567[label="1;2pkt 2fpkt"];
1429--2703[label="0.12;3pkt 3fpkt"];
1429--2773[label="0.08;2pkt 2fpkt"];
1429--2798[label="1;11pkt 11fpkt"];
1429--2974[label="0.485714;17pkt 17fpkt"];
1429--3067[label="0.00990099;1pkt 1fpkt"];
1429--3076[label="0.294118;5pkt 5fpkt"];
1429--3205[label="0.08;2pkt 2fpkt"];
1429--3362[label="0.01;1pkt 1fpkt"];
1429--3368[label="0.384615;5pkt 5fpkt"];
2013--2773[label="1;24pkt 24fpkt"];
2013--3205[label="1;24pkt 24fpkt"];
2058--2798[label="1;10pkt 10fpkt"];
2375--2974[label="1;35pkt 35fpkt"];
2543--3070[label="1;90pkt 90fpkt"];
2556--3076[label="1;17pkt 17fpkt"];
2556--3368[label="1;13pkt 13fpkt"];
2666--3144[label="1;29pkt 29fpkt"];
2666--3406[label="1;30pkt 30fpkt"];
2773--3205[label="1;25pkt 25fpkt"];
3076--3368[label="1;13pkt 13fpkt"];
3144--3406[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="193.243.196.160" src_port="80"/>
      <filter dst_ip="192.3.92.156" src_port="80"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="16.203.10.31"/>
      <from sec="1020576261" usec="0"/>
      <to sec="1020576437" usec="0"/>
    </slice>
    <from sec="1020576261" usec="0"/>
    <to sec="1020576437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,901,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_12{
style=filled;
color=gray75;
97[label="141.26.134.110;d;7pkt 7fpkt", shape=diamond, color=yellow];
147[label="168.63.166.214;s;5pkt 5fpkt", shape=diamond, color=yellow];
255[label="154.66.162.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
399[label="154.66.61.28;s;6pkt 6fpkt", shape=diamond, color=yellow];
938[label="141.26.155.82;d;17pkt 17fpkt", shape=diamond, color=yellow];
1024[label="154.65.182.215;s;1pkt 1fpkt", shape=diamond, color=yellow];
1339[label="141.26.134.110;d;7pkt 7fpkt", shape=hexagon, color=black];
2007[label="154.66.61.28;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2552[label="154.67.224.193;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2769[label="154.66.61.28;6pkt 6fpkt", shape=invtriangle, color=brown];
3105[label="154.65.182.215;1pkt 1fpkt", shape=invtriangle, color=brown];
3202[label="154.66.61.28;6pkt 6fpkt", shape=invhouse, color=bisque];
stat12[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1214, 141.26.155.82:*}[62.963%]&lt;BR/&gt;{*:1214, 141.26.134.110:*}[25.9259%]&lt;BR/&gt;{154.66.61.28:1214, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (53.9062%)&lt;BR/&gt; 2189: (4.6875%)&lt;BR/&gt; 1154: (3.90625%)&lt;BR/&gt; 3692: (3.125%)&lt;BR/&gt; 1670: (3.125%)&gt;];
}
97--147[label="1;5pkt 5fpkt"];
97--255[label="1;1pkt 1fpkt"];
97--399[label="0.166667;1pkt 1fpkt"];
97--1339[label="1;7pkt 7fpkt"];
97--2007[label="0.2;1pkt 1fpkt"];
97--2769[label="0.166667;1pkt 1fpkt"];
97--3202[label="0.166667;1pkt 1fpkt"];
147--1339[label="1;5pkt 5fpkt"];
255--1339[label="1;1pkt 1fpkt"];
399--938[label="0.333333;2pkt 2fpkt"];
399--1339[label="0.166667;1pkt 1fpkt"];
399--1365[label="0.166667;1pkt 1fpkt"];
399--1825[label="0.166667;1pkt 1fpkt"];
399--2007[label="1;5pkt 5fpkt"];
399--2769[label="1;6pkt 6fpkt"];
399--3202[label="1;6pkt 6fpkt"];
938--1024[label="1;1pkt 1fpkt"];
938--2007[label="0.2;1pkt 1fpkt"];
938--2552[label="1;2pkt 2fpkt"];
938--2769[label="0.333333;2pkt 2fpkt"];
938--3105[label="1;1pkt 1fpkt"];
938--3202[label="0.333333;2pkt 2fpkt"];
1024--3105[label="1;1pkt 1fpkt"];
1339--2007[label="0.2;1pkt 1fpkt"];
1339--2769[label="0.166667;1pkt 1fpkt"];
1339--3202[label="0.166667;1pkt 1fpkt"];
2007--2769[label="1;5pkt 5fpkt"];
2007--3202[label="1;5pkt 5fpkt"];
2769--3202[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="154.66.61.28" src_port="1214"/>
      <filter dst_ip="141.26.155.82" src_port="1214"/>
      <filter dst_ip="141.26.134.110" src_port="1214"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573985,1.85133,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_13{
style=filled;
color=gray75;
1315[label="192.10.18.204;d;13pkt 13fpkt", shape=diamond, color=yellow];
2572[label="193.243.21.202;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3085[label="193.243.21.202;5pkt 5fpkt", shape=invtriangle, color=brown];
stat13[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.243.21.202:80, 192.10.18.204:*}[35.7143%]&lt;BR/&gt;{193.243.21.198:80, 192.10.18.204:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7273%)&lt;BR/&gt; 1059: (6.81818%)&lt;BR/&gt; 1055: (6.81818%)&lt;BR/&gt; 1054: (6.81818%)&lt;BR/&gt; 1062: (4.54545%)&gt;];
}
1315--2572[label="0.75;3pkt 3fpkt"];
1315--3085[label="0.8;4pkt 4fpkt"];
2572--3085[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="192.10.18.204" src_ip="193.243.21.202" src_port="80"/>
      <filter dst_ip="192.10.18.204" src_ip="193.243.21.198" src_port="80"/>
    </slice>
    <from sec="1020576419" usec="0"/>
    <to sec="1020576735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573985,1.85133,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_14{
style=filled;
color=gray75;
213[label="141.26.128.149;d;10pkt 10fpkt", shape=diamond, color=yellow];
214[label="200.4.63.137;s;10pkt 10fpkt", shape=diamond, color=yellow];
2362[label="200.4.63.137;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2965[label="200.4.63.137;9pkt 9fpkt", shape=invtriangle, color=brown];
stat14[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.4.63.137:1503, 141.26.128.149:*}[30%]&lt;BR/&gt;{200.4.63.137:0, 141.26.128.149:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (21.0526%)&lt;BR/&gt; 1503: (15.7895%)&lt;BR/&gt; 49608: (10.5263%)&lt;BR/&gt; 49607: (10.5263%)&lt;BR/&gt; 49609: (5.26316%)&gt;];
}
213--214[label="1;10pkt 10fpkt"];
213--2362[label="1;9pkt 9fpkt"];
213--2965[label="1;9pkt 9fpkt"];
214--2362[label="1;9pkt 9fpkt"];
214--2965[label="1;9pkt 9fpkt"];
2362--2965[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="141.26.128.149" src_ip="200.4.63.137" src_port="1503"/>
      <filter dst_ip="141.26.128.149" src_ip="200.4.63.137"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020575103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22557,1.8707,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_15{
style=filled;
color=gray75;
81[label="192.3.104.175;d;778pkt 778fpkt", shape=diamond, color=yellow];
217[label="145.208.198.227;d;136pkt 136fpkt", shape=diamond, color=yellow];
218[label="215.146.130.230;s;21pkt 21fpkt", shape=diamond, color=yellow];
475[label="197.83.45.130;s;170pkt 170fpkt", shape=diamond, color=yellow];
503[label="145.208.206.249;d;47pkt 47fpkt", shape=diamond, color=yellow];
993[label="192.10.217.173;d;70pkt 70fpkt", shape=diamond, color=yellow];
1504[label="145.208.198.227;d;87pkt 87fpkt", shape=hexagon, color=black];
1665[label="192.10.217.173;d;70pkt 70fpkt", shape=hexagon, color=black];
1833[label="192.10.217.173;d;70pkt 70fpkt", shape=polygon, color=gold];
1928[label="215.56.217.7;80pkt 80fpkt", shape=pentagon, color=darkviolet];
1938[label="215.146.130.11;31pkt 31fpkt", shape=pentagon, color=darkviolet];
1950[label="215.56.216.13;79pkt 79fpkt", shape=pentagon, color=darkviolet];
1954[label="215.56.216.14;77pkt 77fpkt", shape=pentagon, color=darkviolet];
1971[label="215.147.241.17;42pkt 42fpkt", shape=pentagon, color=darkviolet];
1973[label="16.192.102.18;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2098[label="197.83.3.52;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2442[label="222.31.94.163;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2515[label="223.156.21.184;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2650[label="215.146.130.230;44pkt 44fpkt", shape=pentagon, color=darkviolet];
2728[label="215.56.217.7;79pkt 79fpkt", shape=invtriangle, color=brown];
2819[label="197.83.3.52;9pkt 9fpkt", shape=invtriangle, color=brown];
3017[label="222.31.94.163;8pkt 8fpkt", shape=invtriangle, color=brown];
3057[label="223.156.21.184;33pkt 33fpkt", shape=invtriangle, color=brown];
3134[label="215.146.130.230;43pkt 43fpkt", shape=invtriangle, color=brown];
stat15[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 192.3.104.175:*}[55.1079%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.383%)&lt;BR/&gt; 53: (0.271471%)&lt;BR/&gt; 1024: (0.246792%)&lt;BR/&gt; 1075: (0.197433%)&lt;BR/&gt; 1072: (0.172754%)&gt;];
}
81--218[label="0.238095;5pkt 5fpkt"];
81--272[label="0.90795;217pkt 217fpkt"];
81--475[label="0.0176471;3pkt 3fpkt"];
81--685[label="0.00636943;1pkt 1fpkt"];
81--791[label="0.91018;152pkt 152fpkt"];
81--1044[label="0.0588235;3pkt 3fpkt"];
81--1503[label="0.0181818;3pkt 3fpkt"];
81--1546[label="0.0078125;1pkt 1fpkt"];
81--1655[label="1;137pkt 137fpkt"];
81--1674[label="0.103448;3pkt 3fpkt"];
81--1845[label="0.029563;23pkt 23fpkt"];
81--1852[label="0.00128535;1pkt 1fpkt"];
81--1853[label="0.0604113;47pkt 47fpkt"];
81--1859[label="0.101542;79pkt 79fpkt"];
81--1862[label="0.0758355;59pkt 59fpkt"];
81--1865[label="0.0449871;35pkt 35fpkt"];
81--1867[label="0.0475578;37pkt 37fpkt"];
81--1873[label="0.029563;23pkt 23fpkt"];
81--1883[label="0.0475578;37pkt 37fpkt"];
81--1889[label="0.029563;23pkt 23fpkt"];
81--1928[label="0.1125;9pkt 9fpkt"];
81--1938[label="0.0322581;1pkt 1fpkt"];
81--1950[label="0.101266;8pkt 8fpkt"];
81--1954[label="0.103896;8pkt 8fpkt"];
81--1971[label="0.97619;41pkt 41fpkt"];
81--1973[label="1;2pkt 2fpkt"];
81--2050[label="0.125;10pkt 10fpkt"];
81--2053[label="0.125;10pkt 10fpkt"];
81--2098[label="0.333333;3pkt 3fpkt"];
81--2442[label="1;8pkt 8fpkt"];
81--2460[label="0.166667;3pkt 3fpkt"];
81--2482[label="0.0490196;5pkt 5fpkt"];
81--2486[label="0.0485437;5pkt 5fpkt"];
81--2501[label="0.0222222;1pkt 1fpkt"];
81--2534[label="0.881633;216pkt 216fpkt"];
81--2650[label="0.204545;9pkt 9fpkt"];
81--2701[label="0.888235;151pkt 151fpkt"];
81--2728[label="0.113924;9pkt 9fpkt"];
81--2794[label="0.125;10pkt 10fpkt"];
81--2819[label="0.333333;3pkt 3fpkt"];
81--3017[label="1;8pkt 8fpkt"];
81--3047[label="0.0222222;1pkt 1fpkt"];
81--3134[label="0.209302;9pkt 9fpkt"];
81--3163[label="0.888235;151pkt 151fpkt"];
81--3214[label="0.126582;10pkt 10fpkt"];
81--3352[label="0.0434783;2pkt 2fpkt"];
217--475[label="0.0441176;6pkt 6fpkt"];
217--1503[label="0.0441176;6pkt 6fpkt"];
217--1504[label="1;87pkt 87fpkt"];
217--1845[label="0.110294;15pkt 15fpkt"];
217--1853[label="0.0147059;2pkt 2fpkt"];
217--1859[label="0.0147059;2pkt 2fpkt"];
217--1862[label="0.0220588;3pkt 3fpkt"];
217--1865[label="0.0147059;2pkt 2fpkt"];
217--1867[label="0.0294118;4pkt 4fpkt"];
217--1873[label="0.110294;15pkt 15fpkt"];
217--1883[label="0.0294118;4pkt 4fpkt"];
217--1889[label="0.110294;15pkt 15fpkt"];
217--1938[label="0.129032;4pkt 4fpkt"];
217--2382[label="0.011236;1pkt 1fpkt"];
217--2482[label="0.0392157;4pkt 4fpkt"];
217--2486[label="0.0485437;5pkt 5fpkt"];
217--2501[label="0.0444444;2pkt 2fpkt"];
217--2515[label="0.0606061;2pkt 2fpkt"];
217--2650[label="0.340909;15pkt 15fpkt"];
217--2980[label="0.011236;1pkt 1fpkt"];
217--3047[label="0.0444444;2pkt 2fpkt"];
217--3057[label="0.0606061;2pkt 2fpkt"];
217--3063[label="0.00925926;1pkt 1fpkt"];
217--3134[label="0.348837;15pkt 15fpkt"];
217--3317[label="0.0222222;2pkt 2fpkt"];
217--3352[label="0.0434783;2pkt 2fpkt"];
218--503[label="0.761905;16pkt 16fpkt"];
218--1853[label="0.142857;3pkt 3fpkt"];
218--2650[label="1;21pkt 21fpkt"];
218--3134[label="0.952381;20pkt 20fpkt"];
475--488[label="0.0411765;7pkt 7fpkt"];
475--632[label="0.136752;16pkt 16fpkt"];
475--993[label="0.928571;65pkt 65fpkt"];
475--1058[label="0.125;3pkt 3fpkt"];
475--1363[label="0.0151515;1pkt 1fpkt"];
475--1423[label="0.0352941;6pkt 6fpkt"];
475--1429[label="0.0294118;5pkt 5fpkt"];
475--1449[label="0.351351;13pkt 13fpkt"];
475--1503[label="1;165pkt 165fpkt"];
475--1504[label="0.045977;4pkt 4fpkt"];
475--1665[label="0.928571;65pkt 65fpkt"];
475--1794[label="0.0352941;6pkt 6fpkt"];
475--1833[label="0.928571;65pkt 65fpkt"];
475--1845[label="0.0647059;11pkt 11fpkt"];
475--1853[label="0.0411765;7pkt 7fpkt"];
475--1859[label="0.0235294;4pkt 4fpkt"];
475--1862[label="0.0411765;7pkt 7fpkt"];
475--1865[label="0.0117647;2pkt 2fpkt"];
475--1867[label="0.0588235;10pkt 10fpkt"];
475--1873[label="0.0647059;11pkt 11fpkt"];
475--1883[label="0.0588235;10pkt 10fpkt"];
475--1889[label="0.0647059;11pkt 11fpkt"];
503--1938[label="0.516129;16pkt 16fpkt"];
503--2486[label="0.106383;5pkt 5fpkt"];
503--2650[label="0.363636;16pkt 16fpkt"];
503--3134[label="0.348837;15pkt 15fpkt"];
993--1503[label="0.928571;65pkt 65fpkt"];
993--1665[label="1;70pkt 70fpkt"];
993--1833[label="1;70pkt 70fpkt"];
993--1867[label="0.114286;8pkt 8fpkt"];
993--1883[label="0.114286;8pkt 8fpkt"];
1504--1845[label="0.172414;15pkt 15fpkt"];
1504--1853[label="0.0229885;2pkt 2fpkt"];
1504--1859[label="0.0229885;2pkt 2fpkt"];
1504--1862[label="0.0114943;1pkt 1fpkt"];
1504--1873[label="0.172414;15pkt 15fpkt"];
1504--1889[label="0.172414;15pkt 15fpkt"];
1504--1938[label="0.129032;4pkt 4fpkt"];
1504--2482[label="0.045977;4pkt 4fpkt"];
1504--2486[label="0.0574713;5pkt 5fpkt"];
1504--2501[label="0.0444444;2pkt 2fpkt"];
1504--2650[label="0.340909;15pkt 15fpkt"];
1504--3047[label="0.0444444;2pkt 2fpkt"];
1504--3134[label="0.348837;15pkt 15fpkt"];
1504--3352[label="0.0434783;2pkt 2fpkt"];
1665--1833[label="1;70pkt 70fpkt"];
1665--1867[label="0.114286;8pkt 8fpkt"];
1665--1883[label="0.114286;8pkt 8fpkt"];
1833--1867[label="0.114286;8pkt 8fpkt"];
1833--1883[label="0.114286;8pkt 8fpkt"];
1928--2728[label="1;79pkt 79fpkt"];
2098--2819[label="1;9pkt 9fpkt"];
2442--3017[label="1;8pkt 8fpkt"];
2515--3057[label="1;33pkt 33fpkt"];
2650--3134[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="192.3.104.175" src_port="80"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_16{
style=filled;
color=gray75;
233[label="96.155.77.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
234[label="145.208.124.125;s;1pkt 1fpkt", shape=diamond, color=yellow];
2312[label="145.208.124.125;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2935[label="145.208.124.125;2pkt 2fpkt", shape=invtriangle, color=brown];
3291[label="145.208.124.125;3pkt 3fpkt", shape=invhouse, color=bisque];
stat16[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.124.125:49723, 96.155.79.58:80}[33.3333%]&lt;BR/&gt;{145.208.124.125:49718, 96.155.79.61:80}[33.3333%]&lt;BR/&gt;{145.208.124.125:49715, 96.155.77.129:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49715: (27.7778%)&lt;BR/&gt; 49723: (16.6667%)&lt;BR/&gt; 49718: (5.55556%)&gt;];
}
233--234[label="1;1pkt 1fpkt"];
233--2312[label="1;1pkt 1fpkt"];
233--2935[label="1;1pkt 1fpkt"];
233--3291[label="1;1pkt 1fpkt"];
234--2312[label="1;1pkt 1fpkt"];
234--2935[label="1;1pkt 1fpkt"];
234--3291[label="1;1pkt 1fpkt"];
2312--2935[label="1;2pkt 2fpkt"];
2312--3291[label="1;2pkt 2fpkt"];
2935--3291[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="96.155.77.129" dst_port="80" src_ip="145.208.124.125" src_port="49715"/>
      <filter dst_ip="96.155.79.61" dst_port="80" src_ip="145.208.124.125" src_port="49718"/>
      <filter dst_ip="96.155.79.58" dst_port="80" src_ip="145.208.124.125" src_port="49723"/>
    </slice>
    <from sec="1020574874" usec="0"/>
    <to sec="1020576401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_17{
style=filled;
color=gray75;
244[label="151.51.182.63;d;4pkt 4fpkt", shape=diamond, color=yellow];
245[label="96.131.101.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat17[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.74.17.128:0, 151.51.182.63:0}[25%]&lt;BR/&gt;{16.203.8.192:1863, 151.51.182.63:1164}[25%]&lt;BR/&gt;{18.88.56.192:0, 151.51.182.63:0}[25%]&lt;BR/&gt;{96.131.101.202:28967, 151.51.182.63:6699}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (40%)&lt;BR/&gt; 28967: (20%)&lt;BR/&gt; 6699: (20%)&lt;BR/&gt; 1863: (10%)&lt;BR/&gt; 1164: (10%)&gt;];
}
244--245[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.51.182.63" dst_port="6699" src_ip="96.131.101.202" src_port="28967"/>
      <filter dst_ip="151.51.182.63" src_ip="18.88.56.192"/>
      <filter dst_ip="151.51.182.63" dst_port="1164" src_ip="16.203.8.192" src_port="1863"/>
      <filter dst_ip="151.51.182.63" src_ip="212.74.17.128"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_18{
style=filled;
color=gray75;
156[label="192.10.205.6;s;695pkt 695fpkt", shape=diamond, color=yellow];
195[label="22.97.81.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
247[label="214.77.231.81;d;2pkt 2fpkt", shape=diamond, color=yellow];
248[label="135.246.79.12;s;5pkt 5fpkt", shape=diamond, color=yellow];
293[label="17.0.34.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
299[label="17.11.172.53;d;1pkt 1fpkt", shape=diamond, color=yellow];
415[label="130.162.60.107;d;1pkt 1fpkt", shape=diamond, color=yellow];
1440[label="135.246.79.12;s;4pkt 4fpkt", shape=hexagon, color=black];
1922[label="192.10.205.6;711pkt 711fpkt", shape=pentagon, color=darkviolet];
2725[label="192.10.205.6;711pkt 711fpkt", shape=invtriangle, color=brown];
3176[label="192.10.205.6;711pkt 711fpkt", shape=invhouse, color=bisque];
stat18[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.10.205.6:6257, *:6257}[91.3408%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (91.6286%)&lt;BR/&gt; 6699: (3.78122%)&lt;BR/&gt; 0: (0.386915%)&lt;BR/&gt; 8888: (0.140696%)&lt;BR/&gt; 2698: (0.140696%)&gt;];
}
156--195[label="1;1pkt 1fpkt"];
156--247[label="0.5;1pkt 1fpkt"];
156--293[label="1;1pkt 1fpkt"];
156--299[label="1;1pkt 1fpkt"];
156--1922[label="1;695pkt 695fpkt"];
156--2725[label="1;695pkt 695fpkt"];
156--3176[label="1;695pkt 695fpkt"];
195--1922[label="1;1pkt 1fpkt"];
195--2725[label="1;1pkt 1fpkt"];
195--3176[label="1;1pkt 1fpkt"];
247--248[label="0.5;1pkt 1fpkt"];
247--1440[label="0.5;1pkt 1fpkt"];
247--1922[label="0.5;1pkt 1fpkt"];
247--2725[label="0.5;1pkt 1fpkt"];
247--3176[label="0.5;1pkt 1fpkt"];
248--415[label="1;1pkt 1fpkt"];
248--1440[label="1;4pkt 4fpkt"];
293--1922[label="1;1pkt 1fpkt"];
293--2725[label="1;1pkt 1fpkt"];
293--3176[label="1;1pkt 1fpkt"];
299--1922[label="1;1pkt 1fpkt"];
299--2725[label="1;1pkt 1fpkt"];
299--3176[label="1;1pkt 1fpkt"];
415--1440[label="1;1pkt 1fpkt"];
1922--2725[label="1;711pkt 711fpkt"];
1922--3176[label="1;711pkt 711fpkt"];
2725--3176[label="1;711pkt 711fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="192.10.205.6" src_port="6257"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.502244,1.88143,901,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_19{
style=filled;
color=gray75;
91[label="193.193.219.107;d;1pkt 1fpkt", shape=diamond, color=yellow];
100[label="193.193.219.106;d;2pkt 2fpkt", shape=diamond, color=yellow];
251[label="138.189.185.163;s;2pkt 2fpkt", shape=diamond, color=yellow];
2444[label="138.189.185.163;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat19[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.214.248.104:37, 193.193.219.106:32966}[33.3333%]&lt;BR/&gt;{138.189.185.163:53192, 193.193.219.107:36038}[33.3333%]&lt;BR/&gt;{138.189.185.163:53268, 193.193.219.106:32962}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53268: (21.4286%)&lt;BR/&gt; 53192: (21.4286%)&lt;BR/&gt; 36038: (21.4286%)&lt;BR/&gt; 32962: (21.4286%)&lt;BR/&gt; 32966: (7.14286%)&gt;];
}
91--251[label="1;1pkt 1fpkt"];
91--2444[label="1;1pkt 1fpkt"];
100--251[label="0.5;1pkt 1fpkt"];
100--2444[label="0.5;1pkt 1fpkt"];
251--2444[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.193.219.106" dst_port="32962" src_ip="138.189.185.163" src_port="53268"/>
      <filter dst_ip="193.193.219.107" dst_port="36038" src_ip="138.189.185.163" src_port="53192"/>
      <filter dst_ip="193.193.219.106" dst_port="32966" src_ip="138.214.248.104" src_port="37"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020574913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.10.205.35"/>
      <from sec="1020574801" usec="0"/>
      <to sec="1020575576" usec="0"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020575576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_21{
style=filled;
color=gray75;
250[label="192.10.218.255;d;2pkt 2fpkt", shape=diamond, color=yellow];
273[label="116.28.95.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat21[shape=component, label=&lt;Rules:&lt;BR/&gt;{116.28.95.172:6699, 192.10.218.255:2744}[50%]&lt;BR/&gt;{221.200.51.196:0, 192.10.218.255:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (33.3333%)&lt;BR/&gt; 2744: (33.3333%)&lt;BR/&gt; 0: (33.3333%)&gt;];
}
250--273[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.10.218.255" src_ip="221.200.51.196"/>
      <filter dst_ip="192.10.218.255" dst_port="2744" src_ip="116.28.95.172" src_port="6699"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_22{
style=filled;
color=gray75;
150[label="161.40.168.138;s;67pkt 67fpkt", shape=diamond, color=yellow];
283[label="18.94.172.55;d;30pkt 30fpkt", shape=diamond, color=yellow];
321[label="18.94.172.52;d;24pkt 24fpkt", shape=diamond, color=yellow];
403[label="18.94.172.54;d;21pkt 21fpkt", shape=diamond, color=yellow];
739[label="161.40.64.231;s;177pkt 177fpkt", shape=diamond, color=yellow];
796[label="151.41.250.4;s;99pkt 99fpkt", shape=diamond, color=yellow];
838[label="192.3.105.188;s;322pkt 322fpkt", shape=diamond, color=yellow];
1070[label="18.94.172.174;d;12pkt 12fpkt", shape=diamond, color=yellow];
1088[label="161.40.83.10;s;72pkt 72fpkt", shape=diamond, color=yellow];
1178[label="18.94.172.53;d;11pkt 11fpkt", shape=diamond, color=yellow];
1258[label="18.94.172.187;d;9pkt 9fpkt", shape=diamond, color=yellow];
1471[label="161.40.74.12;s;290pkt 290fpkt", shape=hexagon, color=black];
1581[label="161.40.64.231;s;87pkt 87fpkt", shape=hexagon, color=black];
1773[label="18.94.172.187;d;9pkt 9fpkt", shape=hexagon, color=black];
1908[label="151.41.250.4;101pkt 101fpkt", shape=pentagon, color=darkviolet];
2202[label="161.40.65.86;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2241[label="161.40.65.101;142pkt 142fpkt", shape=pentagon, color=darkviolet];
2253[label="161.40.168.103;58pkt 58fpkt", shape=pentagon, color=darkviolet];
2291[label="161.40.87.118;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2371[label="161.40.168.138;67pkt 67fpkt", shape=pentagon, color=darkviolet];
2433[label="161.40.74.161;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2576[label="145.208.43.203;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2653[label="161.40.64.231;177pkt 177fpkt", shape=pentagon, color=darkviolet];
2895[label="161.40.65.101;141pkt 141fpkt", shape=invtriangle, color=brown];
3269[label="161.40.65.101;142pkt 142fpkt", shape=invhouse, color=bisque];
stat22[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:25}[52.3449%]&lt;BR/&gt;{192.3.105.188:*, *:*}[24.357%]&lt;BR/&gt;{*:25, *:*}[24.2814%]&lt;BR/&gt;{161.40.74.12:*, *:*}[21.9365%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (33.5526%)&lt;BR/&gt; 53: (11.0667%)&lt;BR/&gt; 1024: (5.12218%)&lt;BR/&gt; 0: (4.08835%)&lt;BR/&gt; 80: (2.4906%)&gt;];
}
150--283[label="0.533333;16pkt 16fpkt"];
150--321[label="0.5;12pkt 12fpkt"];
150--403[label="0.47619;10pkt 10fpkt"];
150--425[label="0.0625;1pkt 1fpkt"];
150--437[label="0.0285714;1pkt 1fpkt"];
150--565[label="0.0526316;1pkt 1fpkt"];
150--656[label="0.142857;1pkt 1fpkt"];
150--1070[label="0.0833333;1pkt 1fpkt"];
150--1178[label="0.545455;6pkt 6fpkt"];
150--1214[label="0.0555556;1pkt 1fpkt"];
150--1258[label="0.111111;1pkt 1fpkt"];
150--1667[label="0.0833333;1pkt 1fpkt"];
150--1773[label="0.111111;1pkt 1fpkt"];
150--2371[label="1;67pkt 67fpkt"];
283--739[label="0.0333333;1pkt 1fpkt"];
283--796[label="0.0333333;1pkt 1fpkt"];
283--838[label="0.1;3pkt 3fpkt"];
283--1724[label="0.1;3pkt 3fpkt"];
283--1908[label="0.0333333;1pkt 1fpkt"];
283--2202[label="0.166667;3pkt 3fpkt"];
283--2241[label="0.0333333;1pkt 1fpkt"];
283--2291[label="0.0714286;1pkt 1fpkt"];
283--2371[label="0.533333;16pkt 16fpkt"];
283--2653[label="0.0333333;1pkt 1fpkt"];
283--2895[label="0.0333333;1pkt 1fpkt"];
283--3269[label="0.0333333;1pkt 1fpkt"];
321--739[label="0.0416667;1pkt 1fpkt"];
321--838[label="0.25;6pkt 6fpkt"];
321--1088[label="0.0416667;1pkt 1fpkt"];
321--1581[label="0.0416667;1pkt 1fpkt"];
321--1724[label="0.25;6pkt 6fpkt"];
321--2202[label="0.0555556;1pkt 1fpkt"];
321--2253[label="0.0416667;1pkt 1fpkt"];
321--2371[label="0.5;12pkt 12fpkt"];
321--2653[label="0.0416667;1pkt 1fpkt"];
403--624[label="0.047619;1pkt 1fpkt"];
403--796[label="0.0952381;2pkt 2fpkt"];
403--838[label="0.238095;5pkt 5fpkt"];
403--1471[label="0.047619;1pkt 1fpkt"];
403--1724[label="0.238095;5pkt 5fpkt"];
403--1908[label="0.0952381;2pkt 2fpkt"];
403--2241[label="0.047619;1pkt 1fpkt"];
403--2371[label="0.47619;10pkt 10fpkt"];
403--2895[label="0.047619;1pkt 1fpkt"];
403--3269[label="0.047619;1pkt 1fpkt"];
739--1214[label="0.111111;2pkt 2fpkt"];
739--1246[label="0.188406;13pkt 13fpkt"];
739--1258[label="0.222222;2pkt 2fpkt"];
739--1448[label="0.0178571;1pkt 1fpkt"];
739--1568[label="0.0181818;1pkt 1fpkt"];
739--1581[label="1;87pkt 87fpkt"];
739--1671[label="0.344444;31pkt 31fpkt"];
739--1773[label="0.222222;2pkt 2fpkt"];
739--1845[label="0.0169492;3pkt 3fpkt"];
739--1852[label="0.00564972;1pkt 1fpkt"];
739--1853[label="0.0903955;16pkt 16fpkt"];
739--1854[label="0.039548;7pkt 7fpkt"];
739--1859[label="0.079096;14pkt 14fpkt"];
739--1862[label="0.079096;14pkt 14fpkt"];
739--1864[label="0.00564972;1pkt 1fpkt"];
739--1865[label="0.0225989;4pkt 4fpkt"];
739--1866[label="0.0112994;2pkt 2fpkt"];
739--1867[label="0.0112994;2pkt 2fpkt"];
739--1868[label="0.0451977;8pkt 8fpkt"];
739--1870[label="0.0621469;11pkt 11fpkt"];
739--1873[label="0.0169492;3pkt 3fpkt"];
739--1878[label="0.039548;7pkt 7fpkt"];
739--1880[label="0.0282486;5pkt 5fpkt"];
739--1883[label="0.0112994;2pkt 2fpkt"];
739--1884[label="0.0451977;8pkt 8fpkt"];
739--1886[label="0.0621469;11pkt 11fpkt"];
739--1889[label="0.0169492;3pkt 3fpkt"];
739--1894[label="0.0451977;8pkt 8fpkt"];
739--2653[label="0.99435;176pkt 176fpkt"];
796--1908[label="1;99pkt 99fpkt"];
838--927[label="0.222222;12pkt 12fpkt"];
838--1178[label="0.181818;2pkt 2fpkt"];
838--1724[label="1;322pkt 322fpkt"];
1070--1412[label="0.0833333;1pkt 1fpkt"];
1070--1471[label="0.0833333;1pkt 1fpkt"];
1070--1667[label="1;12pkt 12fpkt"];
1070--2371[label="0.0833333;1pkt 1fpkt"];
1070--2433[label="0.0833333;1pkt 1fpkt"];
1070--2547[label="0.0833333;1pkt 1fpkt"];
1070--2576[label="0.2;2pkt 2fpkt"];
1088--1258[label="0.111111;1pkt 1fpkt"];
1088--1773[label="0.111111;1pkt 1fpkt"];
1088--1854[label="0.0277778;2pkt 2fpkt"];
1088--1878[label="0.0277778;2pkt 2fpkt"];
1088--1880[label="0.0277778;2pkt 2fpkt"];
1178--1724[label="0.181818;2pkt 2fpkt"];
1178--2371[label="0.545455;6pkt 6fpkt"];
1178--2576[label="0.1;1pkt 1fpkt"];
1258--1773[label="1;9pkt 9fpkt"];
1258--2371[label="0.111111;1pkt 1fpkt"];
1258--2547[label="0.111111;1pkt 1fpkt"];
1258--2653[label="0.222222;2pkt 2fpkt"];
1471--1667[label="0.0833333;1pkt 1fpkt"];
1581--1671[label="0.356322;31pkt 31fpkt"];
1581--1845[label="0.0344828;3pkt 3fpkt"];
1581--1852[label="0.0114943;1pkt 1fpkt"];
1581--1853[label="0.183908;16pkt 16fpkt"];
1581--1854[label="0.0804598;7pkt 7fpkt"];
1581--1859[label="0.16092;14pkt 14fpkt"];
1581--1862[label="0.16092;14pkt 14fpkt"];
1581--1865[label="0.045977;4pkt 4fpkt"];
1581--1867[label="0.0229885;2pkt 2fpkt"];
1581--1868[label="0.0689655;6pkt 6fpkt"];
1581--1870[label="0.0574713;5pkt 5fpkt"];
1581--1873[label="0.0344828;3pkt 3fpkt"];
1581--1878[label="0.0804598;7pkt 7fpkt"];
1581--1880[label="0.0574713;5pkt 5fpkt"];
1581--1883[label="0.0229885;2pkt 2fpkt"];
1581--1884[label="0.0689655;6pkt 6fpkt"];
1581--1886[label="0.0574713;5pkt 5fpkt"];
1581--1889[label="0.0344828;3pkt 3fpkt"];
1581--1894[label="0.0689655;6pkt 6fpkt"];
1581--2653[label="0.988506;86pkt 86fpkt"];
1773--2371[label="0.111111;1pkt 1fpkt"];
1773--2547[label="0.111111;1pkt 1fpkt"];
1773--2653[label="0.222222;2pkt 2fpkt"];
2241--2895[label="1;141pkt 141fpkt"];
2241--3269[label="1;142pkt 142fpkt"];
2895--3269[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter src_ip="192.3.105.188"/>
      <filter src_ip="161.40.74.12"/>
      <filter src_port="25"/>
      <filter dst_port="25"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_24{
style=filled;
color=gray75;
289[label="22.72.30.125;d;1pkt 1fpkt", shape=diamond, color=yellow];
290[label="144.75.226.135;s;46pkt 46fpkt", shape=diamond, color=yellow];
1372[label="144.75.226.135;s;4pkt 4fpkt", shape=hexagon, color=black];
2355[label="144.75.226.135;45pkt 45fpkt", shape=pentagon, color=darkviolet];
2962[label="144.75.226.135;45pkt 45fpkt", shape=invtriangle, color=brown];
3307[label="144.75.226.135;45pkt 45fpkt", shape=invhouse, color=bisque];
stat24[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.75.226.135:*, 22.120.51.59:6346}[63.0435%]&lt;BR/&gt;{144.75.226.135:6346, *:*}[36.9565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 2802: (1.6129%)&lt;BR/&gt; 50783: (1.34409%)&lt;BR/&gt; 50774: (1.34409%)&lt;BR/&gt; 50764: (1.34409%)&gt;];
}
289--290[label="1;1pkt 1fpkt"];
289--1372[label="1;1pkt 1fpkt"];
289--2355[label="1;1pkt 1fpkt"];
289--2962[label="1;1pkt 1fpkt"];
289--3307[label="1;1pkt 1fpkt"];
290--1372[label="1;4pkt 4fpkt"];
290--2355[label="1;45pkt 45fpkt"];
290--2962[label="1;45pkt 45fpkt"];
290--3307[label="1;45pkt 45fpkt"];
1372--2355[label="1;4pkt 4fpkt"];
1372--2962[label="1;4pkt 4fpkt"];
1372--3307[label="1;4pkt 4fpkt"];
2355--2962[label="1;45pkt 45fpkt"];
2355--3307[label="1;45pkt 45fpkt"];
2962--3307[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter src_ip="144.75.226.135" src_port="6346"/>
      <filter dst_ip="22.120.51.59" dst_port="6346" src_ip="144.75.226.135"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_25{
style=filled;
color=gray75;
300[label="166.3.137.16;d;2pkt 2fpkt", shape=diamond, color=yellow];
301[label="222.31.186.163;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat25[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.31.186.163:1755, 166.3.137.16:1195}[50%]&lt;BR/&gt;{222.31.186.163:4122, 166.3.137.16:1201}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4122: (25%)&lt;BR/&gt; 1755: (25%)&lt;BR/&gt; 1201: (25%)&lt;BR/&gt; 1195: (25%)&gt;];
}
300--301[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="166.3.137.16" dst_port="1201" src_ip="222.31.186.163" src_port="4122"/>
      <filter dst_ip="166.3.137.16" dst_port="1195" src_ip="222.31.186.163" src_port="1755"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_26{
style=filled;
color=gray75;
347[label="19.32.37.218;d;1pkt 1fpkt", shape=diamond, color=yellow];
348[label="151.51.203.142;s;3pkt 3fpkt", shape=diamond, color=yellow];
1382[label="19.32.37.218;d;1pkt 1fpkt", shape=hexagon, color=black];
1468[label="151.51.203.142;s;3pkt 3fpkt", shape=hexagon, color=black];
stat26[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.51.203.142:1475, 18.220.135.172:6699}[33.3333%]&lt;BR/&gt;{151.51.203.142:1032, 16.203.8.173:1863}[33.3333%]&lt;BR/&gt;{151.51.203.142:1666, 19.32.37.218:6699}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (37.5%)&lt;BR/&gt; 1666: (25%)&lt;BR/&gt; 1863: (12.5%)&lt;BR/&gt; 1475: (12.5%)&lt;BR/&gt; 1032: (12.5%)&gt;];
}
347--348[label="1;1pkt 1fpkt"];
347--1382[label="1;1pkt 1fpkt"];
347--1468[label="1;1pkt 1fpkt"];
348--1382[label="1;1pkt 1fpkt"];
348--1468[label="1;3pkt 3fpkt"];
1382--1468[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="19.32.37.218" dst_port="6699" src_ip="151.51.203.142" src_port="1666"/>
      <filter dst_ip="16.203.8.173" dst_port="1863" src_ip="151.51.203.142" src_port="1032"/>
      <filter dst_ip="18.220.135.172" dst_port="6699" src_ip="151.51.203.142" src_port="1475"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="197.129.184.101"/>
      <from sec="1020576377" usec="0"/>
      <to sec="1020576709" usec="0"/>
    </slice>
    <from sec="1020576377" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="197.129.184.101"/>
      <from sec="1020576377" usec="0"/>
      <to sec="1020576709" usec="0"/>
    </slice>
    <from sec="1020576377" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_29{
style=filled;
color=gray75;
208[label="135.246.197.171;d;7pkt 7fpkt", shape=diamond, color=yellow];
337[label="17.0.149.204;s;1pkt 1fpkt", shape=diamond, color=yellow];
365[label="70.102.28.45;s;1pkt 1fpkt", shape=diamond, color=yellow];
1718[label="135.246.197.171;d;7pkt 7fpkt", shape=hexagon, color=black];
2578[label="17.0.149.204;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3088[label="17.0.149.204;1pkt 1fpkt", shape=invtriangle, color=brown];
stat29[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6699, 135.246.197.171:*}[57.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (33.3333%)&lt;BR/&gt; 3149: (13.8889%)&lt;BR/&gt; 3159: (8.33333%)&lt;BR/&gt; 6683: (5.55556%)&lt;BR/&gt; 5050: (5.55556%)&gt;];
}
208--337[label="1;1pkt 1fpkt"];
208--365[label="1;1pkt 1fpkt"];
208--1718[label="1;7pkt 7fpkt"];
208--2578[label="1;1pkt 1fpkt"];
208--3088[label="1;1pkt 1fpkt"];
337--1718[label="1;1pkt 1fpkt"];
337--2578[label="1;1pkt 1fpkt"];
337--3088[label="1;1pkt 1fpkt"];
365--1718[label="1;1pkt 1fpkt"];
1718--2578[label="1;1pkt 1fpkt"];
1718--3088[label="1;1pkt 1fpkt"];
2578--3088[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.246.197.171" src_port="6699"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_30{
style=filled;
color=gray75;
374[label="16.110.147.229;d;1pkt 1fpkt", shape=diamond, color=yellow];
375[label="145.208.0.107;s;36pkt 36fpkt", shape=diamond, color=yellow];
1390[label="16.110.147.229;d;1pkt 1fpkt", shape=hexagon, color=black];
stat30[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.0.107:*, *:80}[97.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.0526%)&lt;BR/&gt; 6699: (3.94737%)&lt;BR/&gt; 1439: (3.94737%)&lt;BR/&gt; 1544: (1.31579%)&lt;BR/&gt; 1542: (1.31579%)&gt;];
}
374--375[label="1;1pkt 1fpkt"];
374--1390[label="1;1pkt 1fpkt"];
375--1390[label="1;1pkt 1fpkt"];
375--1855[label="0.333333;12pkt 12fpkt"];
375--1856[label="0.0277778;1pkt 1fpkt"];
375--1879[label="0.333333;12pkt 12fpkt"];
375--1881[label="0.0277778;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.208.0.107"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_32{
style=filled;
color=gray75;
310[label="134.53.57.135;d;1pkt 1fpkt", shape=diamond, color=yellow];
402[label="135.246.235.222;s;106pkt 106fpkt", shape=diamond, color=yellow];
1603[label="135.246.235.222;s;70pkt 70fpkt", shape=hexagon, color=black];
2628[label="135.246.235.222;106pkt 106fpkt", shape=pentagon, color=darkviolet];
stat32[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.246.235.222:21, 10.244.46.22:*}[41.5094%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (38.1625%)&lt;BR/&gt; 0: (8.83392%)&lt;BR/&gt; 32899: (0.706714%)&lt;BR/&gt; 20: (0.706714%)&lt;BR/&gt; 62717: (0.530035%)&gt;];
}
310--402[label="1;1pkt 1fpkt"];
310--1603[label="1;1pkt 1fpkt"];
310--2628[label="1;1pkt 1fpkt"];
402--1603[label="1;70pkt 70fpkt"];
402--2628[label="1;106pkt 106fpkt"];
1603--2628[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="10.244.46.22" src_ip="135.246.235.222" src_port="21"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_33{
style=filled;
color=gray75;
182[label="204.176.205.90;d;1057pkt 1057fpkt", shape=diamond, color=yellow];
297[label="204.176.205.88;d;184pkt 184fpkt", shape=diamond, color=yellow];
308[label="196.99.97.109;s;1pkt 1fpkt", shape=diamond, color=yellow];
408[label="8.162.191.196;s;469pkt 469fpkt", shape=diamond, color=yellow];
549[label="214.229.122.239;s;349pkt 349fpkt", shape=diamond, color=yellow];
830[label="8.162.191.133;s;126pkt 126fpkt", shape=diamond, color=yellow];
1160[label="207.235.238.254;s;96pkt 96fpkt", shape=diamond, color=yellow];
1750[label="8.162.191.196;s;451pkt 451fpkt", shape=hexagon, color=black];
2274[label="18.203.43.110;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2673[label="214.229.122.239;358pkt 358fpkt", shape=pentagon, color=darkviolet];
2706[label="207.235.238.254;98pkt 98fpkt", shape=pentagon, color=darkviolet];
3148[label="214.229.122.239;358pkt 358fpkt", shape=invtriangle, color=brown];
stat33[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.162.191.196:*, 204.176.205.90:6667}[33.3808%]&lt;BR/&gt;{214.229.122.239:*, 204.176.205.90:*}[25.5516%]&lt;BR/&gt;{*:113, 204.176.205.90:*}[22.4911%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (23.6048%)&lt;BR/&gt; 113: (14.7266%)&lt;BR/&gt; 6668: (9.78016%)&lt;BR/&gt; 6666: (0.620068%)&lt;BR/&gt; 6665: (0.507328%)&gt;];
}
182--308[label="1;1pkt 1fpkt"];
182--408[label="0.916844;430pkt 430fpkt"];
182--539[label="0.0147059;1pkt 1fpkt"];
182--549[label="0.902579;315pkt 315fpkt"];
182--740[label="0.896373;173pkt 173fpkt"];
182--830[label="0.015873;2pkt 2fpkt"];
182--1160[label="0.75;72pkt 72fpkt"];
182--1582[label="0.988571;173pkt 173fpkt"];
182--1750[label="0.953437;430pkt 430fpkt"];
182--1845[label="0.00107643;1pkt 1fpkt"];
182--1873[label="0.00107643;1pkt 1fpkt"];
182--1889[label="0.00107643;1pkt 1fpkt"];
182--2170[label="0.873737;173pkt 173fpkt"];
182--2673[label="0.877095;314pkt 314fpkt"];
182--2706[label="0.72449;71pkt 71fpkt"];
182--3148[label="0.877095;314pkt 314fpkt"];
297--539[label="0.941176;64pkt 64fpkt"];
297--740[label="0.00543478;1pkt 1fpkt"];
297--830[label="0.492063;62pkt 62fpkt"];
297--1160[label="0.0833333;8pkt 8fpkt"];
297--1582[label="0.00571429;1pkt 1fpkt"];
297--2170[label="0.00543478;1pkt 1fpkt"];
297--2274[label="1;1pkt 1fpkt"];
297--2706[label="0.0816327;8pkt 8fpkt"];
408--1750[label="1;451pkt 451fpkt"];
549--2673[label="0.997135;348pkt 348fpkt"];
549--3148[label="0.997135;348pkt 348fpkt"];
1160--2706[label="0.989583;95pkt 95fpkt"];
2673--3148[label="1;358pkt 358fpkt"];
</description>
    <slice>
      <filter dst_ip="204.176.205.90" src_ip="214.229.122.239"/>
      <filter dst_ip="204.176.205.90" src_port="113"/>
      <filter dst_ip="204.176.205.90" dst_port="6667" src_ip="8.162.191.196"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_34{
style=filled;
color=gray75;
416[label="145.208.141.47;d;3pkt 3fpkt", shape=diamond, color=yellow];
417[label="131.8.193.16;s;3pkt 3fpkt", shape=diamond, color=yellow];
1965[label="131.8.193.16;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2744[label="131.8.193.16;2pkt 2fpkt", shape=invtriangle, color=brown];
3187[label="131.8.193.16;3pkt 3fpkt", shape=invhouse, color=bisque];
stat34[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.8.193.16:3018, 145.208.141.47:4865}[33.3333%]&lt;BR/&gt;{131.8.193.16:3393, 145.208.141.47:1287}[33.3333%]&lt;BR/&gt;{131.8.193.16:3405, 145.208.141.47:1389}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4865: (17.8571%)&lt;BR/&gt; 3405: (17.8571%)&lt;BR/&gt; 3018: (17.8571%)&lt;BR/&gt; 1389: (17.8571%)&lt;BR/&gt; 3393: (14.2857%)&gt;];
}
416--417[label="1;3pkt 3fpkt"];
416--1965[label="1;3pkt 3fpkt"];
416--2744[label="1;2pkt 2fpkt"];
416--3187[label="1;3pkt 3fpkt"];
417--1965[label="1;3pkt 3fpkt"];
417--2744[label="1;2pkt 2fpkt"];
417--3187[label="1;3pkt 3fpkt"];
1965--2744[label="1;2pkt 2fpkt"];
1965--3187[label="1;3pkt 3fpkt"];
2744--3187[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.141.47" dst_port="1389" src_ip="131.8.193.16" src_port="3405"/>
      <filter dst_ip="145.208.141.47" dst_port="1287" src_ip="131.8.193.16" src_port="3393"/>
      <filter dst_ip="145.208.141.47" dst_port="4865" src_ip="131.8.193.16" src_port="3018"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573985,1.85133,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
101[label="151.51.28.50;d;74pkt 74fpkt", shape=diamond, color=yellow];
104[label="99.137.169.175;s;14pkt 14fpkt", shape=diamond, color=yellow];
444[label="96.147.138.181;s;352pkt 352fpkt", shape=diamond, color=yellow];
2493[label="99.137.169.175;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2509[label="96.147.138.181;351pkt 351fpkt", shape=pentagon, color=darkviolet];
2536[label="16.129.100.190;38pkt 38fpkt", shape=pentagon, color=darkviolet];
3042[label="99.137.169.175;13pkt 13fpkt", shape=invtriangle, color=brown];
3053[label="96.147.138.181;352pkt 352fpkt", shape=invtriangle, color=brown];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.147.138.181:*, 151.51.83.20:*}[82.5472%]&lt;BR/&gt;{*:80, *:*}[24.2925%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (19.1639%)&lt;BR/&gt; 1214: (7.36755%)&lt;BR/&gt; 53: (3.60099%)&lt;BR/&gt; 6699: (2.73179%)&lt;BR/&gt; 4662: (1.73841%)&gt;];
}
101--104[label="1;14pkt 14fpkt"];
101--444[label="0.027027;2pkt 2fpkt"];
101--640[label="0.027027;2pkt 2fpkt"];
101--1845[label="0.0135135;1pkt 1fpkt"];
101--1859[label="0.540541;40pkt 40fpkt"];
101--1873[label="0.0135135;1pkt 1fpkt"];
101--1889[label="0.0135135;1pkt 1fpkt"];
101--2103[label="0.315789;6pkt 6fpkt"];
101--2493[label="1;14pkt 14fpkt"];
101--2509[label="0.027027;2pkt 2fpkt"];
101--2536[label="1;38pkt 38fpkt"];
101--3042[label="1;13pkt 13fpkt"];
101--3053[label="0.027027;2pkt 2fpkt"];
104--1845[label="0.0714286;1pkt 1fpkt"];
104--1873[label="0.0714286;1pkt 1fpkt"];
104--1889[label="0.0714286;1pkt 1fpkt"];
104--2493[label="1;14pkt 14fpkt"];
104--3042[label="1;13pkt 13fpkt"];
444--1369[label="0.994318;350pkt 350fpkt"];
444--2509[label="1;351pkt 351fpkt"];
444--3053[label="1;352pkt 352fpkt"];
2493--3042[label="1;13pkt 13fpkt"];
2509--3053[label="1;351pkt 351fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="151.51.83.20" src_ip="96.147.138.181"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020575848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
459[label="220.65.150.158;d;6pkt 6fpkt", shape=diamond, color=yellow];
461[label="166.3.61.164;s;8pkt 8fpkt", shape=diamond, color=yellow];
1413[label="166.3.61.164;s;8pkt 8fpkt", shape=hexagon, color=black];
1560[label="220.65.150.158;d;6pkt 6fpkt", shape=hexagon, color=black];
2450[label="166.3.61.164;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.3.61.164:*, 220.65.150.158:2002}[37.5%]&lt;BR/&gt;{166.3.61.164:*, 220.65.150.158:3060}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3060: (20.8333%)&lt;BR/&gt; 2002: (20.8333%)&lt;BR/&gt; 1130: (6.94444%)&lt;BR/&gt; 1128: (6.94444%)&lt;BR/&gt; 1120: (6.94444%)&gt;];
}
459--461[label="1;6pkt 6fpkt"];
459--1413[label="1;6pkt 6fpkt"];
459--1560[label="1;6pkt 6fpkt"];
459--2450[label="1;6pkt 6fpkt"];
461--1413[label="1;8pkt 8fpkt"];
461--1560[label="1;6pkt 6fpkt"];
461--2450[label="1;8pkt 8fpkt"];
1413--1560[label="1;6pkt 6fpkt"];
1413--2450[label="1;8pkt 8fpkt"];
1560--2450[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="220.65.150.158" dst_port="3060" src_ip="166.3.61.164"/>
      <filter dst_ip="220.65.150.158" dst_port="2002" src_ip="166.3.61.164"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.502244,1.88143,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_38{
style=filled;
color=gray75;
390[label="144.75.38.133;s;171pkt 171fpkt", shape=diamond, color=yellow];
464[label="22.67.151.72;d;7pkt 7fpkt", shape=diamond, color=yellow];
709[label="17.216.35.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
2344[label="144.75.38.133;177pkt 177fpkt", shape=pentagon, color=darkviolet];
stat38[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.75.38.133:*, *:1214}[97.1751%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (48.8764%)&lt;BR/&gt; 53066: (1.1236%)&lt;BR/&gt; 16460: (0.421348%)&lt;BR/&gt; 4851: (0.421348%)&lt;BR/&gt; 4664: (0.421348%)&gt;];
}
390--464[label="1;7pkt 7fpkt"];
390--709[label="1;1pkt 1fpkt"];
390--2344[label="1;171pkt 171fpkt"];
464--2344[label="1;7pkt 7fpkt"];
709--2344[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1214" src_ip="144.75.38.133"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
62[label="135.246.219.154;s;417pkt 417fpkt", shape=diamond, color=yellow];
98[label="215.49.131.213;d;1pkt 1fpkt", shape=diamond, color=yellow];
137[label="216.217.95.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
240[label="217.225.25.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
341[label="207.38.243.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
393[label="97.26.150.203;d;1pkt 1fpkt", shape=diamond, color=yellow];
409[label="214.165.18.111;d;1pkt 1fpkt", shape=diamond, color=yellow];
466[label="8.3.55.110;d;1pkt 1fpkt", shape=diamond, color=yellow];
473[label="216.99.148.222;d;1pkt 1fpkt", shape=diamond, color=yellow];
494[label="70.221.119.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
622[label="217.112.28.225;d;1pkt 1fpkt", shape=diamond, color=yellow];
663[label="22.122.193.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
731[label="214.163.13.186;d;1pkt 1fpkt", shape=diamond, color=yellow];
786[label="86.150.178.250;d;1pkt 1fpkt", shape=diamond, color=yellow];
873[label="214.164.21.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
949[label="8.3.58.206;d;1pkt 1fpkt", shape=diamond, color=yellow];
950[label="97.173.220.43;d;2pkt 2fpkt", shape=diamond, color=yellow];
990[label="216.123.98.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
1025[label="16.10.239.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
1340[label="215.49.131.213;d;1pkt 1fpkt", shape=hexagon, color=black];
1388[label="217.225.25.78;d;1pkt 1fpkt", shape=hexagon, color=black];
1397[label="214.165.18.111;d;1pkt 1fpkt", shape=hexagon, color=black];
1523[label="97.26.150.203;d;1pkt 1fpkt", shape=hexagon, color=black];
1647[label="214.164.21.10;d;1pkt 1fpkt", shape=hexagon, color=black];
1772[label="16.10.239.20;d;1pkt 1fpkt", shape=hexagon, color=black];
2415[label="135.246.219.154;420pkt 420fpkt", shape=pentagon, color=darkviolet];
3001[label="135.246.219.154;421pkt 421fpkt", shape=invtriangle, color=brown];
3333[label="135.246.219.154;421pkt 421fpkt", shape=invhouse, color=bisque];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.246.219.154:1106, *:4665}[47.0309%]&lt;BR/&gt;{135.246.219.154:4662, *:*}[33.7292%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1106: (25.7923%)&lt;BR/&gt; 4662: (23.6209%)&lt;BR/&gt; 4665: (23.2101%)&lt;BR/&gt; 4715: (0.586854%)&lt;BR/&gt; 6005: (0.352113%)&gt;];
}
62--98[label="1;1pkt 1fpkt"];
62--137[label="1;1pkt 1fpkt"];
62--240[label="1;1pkt 1fpkt"];
62--341[label="1;1pkt 1fpkt"];
62--393[label="1;1pkt 1fpkt"];
62--409[label="1;1pkt 1fpkt"];
62--466[label="1;1pkt 1fpkt"];
62--473[label="1;1pkt 1fpkt"];
62--494[label="1;1pkt 1fpkt"];
62--622[label="1;1pkt 1fpkt"];
62--663[label="1;1pkt 1fpkt"];
62--731[label="1;1pkt 1fpkt"];
62--786[label="1;1pkt 1fpkt"];
62--873[label="1;1pkt 1fpkt"];
62--949[label="1;1pkt 1fpkt"];
62--950[label="1;2pkt 2fpkt"];
62--990[label="1;1pkt 1fpkt"];
62--1025[label="1;1pkt 1fpkt"];
62--1340[label="1;1pkt 1fpkt"];
62--1388[label="1;1pkt 1fpkt"];
62--1397[label="1;1pkt 1fpkt"];
62--1523[label="1;1pkt 1fpkt"];
62--1647[label="1;1pkt 1fpkt"];
62--1772[label="1;1pkt 1fpkt"];
62--2415[label="0.997602;416pkt 416fpkt"];
62--3001[label="1;417pkt 417fpkt"];
62--3333[label="1;417pkt 417fpkt"];
98--1340[label="1;1pkt 1fpkt"];
98--2415[label="1;1pkt 1fpkt"];
98--3001[label="1;1pkt 1fpkt"];
98--3333[label="1;1pkt 1fpkt"];
137--2415[label="1;1pkt 1fpkt"];
137--3001[label="1;1pkt 1fpkt"];
137--3333[label="1;1pkt 1fpkt"];
240--1388[label="1;1pkt 1fpkt"];
240--2415[label="1;1pkt 1fpkt"];
240--3001[label="1;1pkt 1fpkt"];
240--3333[label="1;1pkt 1fpkt"];
341--2415[label="1;1pkt 1fpkt"];
341--3001[label="1;1pkt 1fpkt"];
341--3333[label="1;1pkt 1fpkt"];
393--1523[label="1;1pkt 1fpkt"];
393--2415[label="1;1pkt 1fpkt"];
393--3001[label="1;1pkt 1fpkt"];
393--3333[label="1;1pkt 1fpkt"];
409--1397[label="1;1pkt 1fpkt"];
409--2415[label="1;1pkt 1fpkt"];
409--3001[label="1;1pkt 1fpkt"];
409--3333[label="1;1pkt 1fpkt"];
466--2415[label="1;1pkt 1fpkt"];
466--3001[label="1;1pkt 1fpkt"];
466--3333[label="1;1pkt 1fpkt"];
473--2415[label="1;1pkt 1fpkt"];
473--3001[label="1;1pkt 1fpkt"];
473--3333[label="1;1pkt 1fpkt"];
494--2415[label="1;1pkt 1fpkt"];
494--3001[label="1;1pkt 1fpkt"];
494--3333[label="1;1pkt 1fpkt"];
622--2415[label="1;1pkt 1fpkt"];
622--3001[label="1;1pkt 1fpkt"];
622--3333[label="1;1pkt 1fpkt"];
663--2415[label="1;1pkt 1fpkt"];
663--3001[label="1;1pkt 1fpkt"];
663--3333[label="1;1pkt 1fpkt"];
731--2415[label="1;1pkt 1fpkt"];
731--3001[label="1;1pkt 1fpkt"];
731--3333[label="1;1pkt 1fpkt"];
786--2415[label="1;1pkt 1fpkt"];
786--3001[label="1;1pkt 1fpkt"];
786--3333[label="1;1pkt 1fpkt"];
873--1647[label="1;1pkt 1fpkt"];
873--2415[label="1;1pkt 1fpkt"];
873--3001[label="1;1pkt 1fpkt"];
873--3333[label="1;1pkt 1fpkt"];
949--2415[label="1;1pkt 1fpkt"];
949--3001[label="1;1pkt 1fpkt"];
949--3333[label="1;1pkt 1fpkt"];
950--2415[label="1;2pkt 2fpkt"];
950--3001[label="1;2pkt 2fpkt"];
950--3333[label="1;2pkt 2fpkt"];
990--2415[label="1;1pkt 1fpkt"];
990--3001[label="1;1pkt 1fpkt"];
990--3333[label="1;1pkt 1fpkt"];
1025--1772[label="1;1pkt 1fpkt"];
1025--2415[label="1;1pkt 1fpkt"];
1025--3001[label="1;1pkt 1fpkt"];
1025--3333[label="1;1pkt 1fpkt"];
1340--2415[label="1;1pkt 1fpkt"];
1340--3001[label="1;1pkt 1fpkt"];
1340--3333[label="1;1pkt 1fpkt"];
1388--2415[label="1;1pkt 1fpkt"];
1388--3001[label="1;1pkt 1fpkt"];
1388--3333[label="1;1pkt 1fpkt"];
1397--2415[label="1;1pkt 1fpkt"];
1397--3001[label="1;1pkt 1fpkt"];
1397--3333[label="1;1pkt 1fpkt"];
1523--2415[label="1;1pkt 1fpkt"];
1523--3001[label="1;1pkt 1fpkt"];
1523--3333[label="1;1pkt 1fpkt"];
1647--2415[label="1;1pkt 1fpkt"];
1647--3001[label="1;1pkt 1fpkt"];
1647--3333[label="1;1pkt 1fpkt"];
1772--2415[label="1;1pkt 1fpkt"];
1772--3001[label="1;1pkt 1fpkt"];
1772--3333[label="1;1pkt 1fpkt"];
2415--3001[label="1;420pkt 420fpkt"];
2415--3333[label="1;420pkt 420fpkt"];
3001--3333[label="1;421pkt 421fpkt"];
</description>
    <slice>
      <filter src_ip="135.246.219.154" src_port="4662"/>
      <filter dst_port="4665" src_ip="135.246.219.154" src_port="1106"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
460[label="166.3.61.164;d;13pkt 13fpkt", shape=diamond, color=yellow];
511[label="220.65.150.158;s;6pkt 6fpkt", shape=diamond, color=yellow];
2423[label="220.65.150.158;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3005[label="220.65.150.158;6pkt 6fpkt", shape=invtriangle, color=brown];
3334[label="220.65.150.158;6pkt 6fpkt", shape=invhouse, color=bisque];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8000, 166.3.61.164:4000}[23.0769%]&lt;BR/&gt;{220.65.150.158:2002, 166.3.61.164:*}[23.0769%]&lt;BR/&gt;{220.65.150.158:3060, 166.3.61.164:*}[23.0769%]&lt;BR/&gt;{*:80, 166.3.61.164:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3060: (20.2703%)&lt;BR/&gt; 2002: (20.2703%)&lt;BR/&gt; 1130: (6.75676%)&lt;BR/&gt; 1128: (6.75676%)&lt;BR/&gt; 1120: (6.75676%)&gt;];
}
460--511[label="1;6pkt 6fpkt"];
460--2423[label="1;6pkt 6fpkt"];
460--3005[label="1;6pkt 6fpkt"];
460--3334[label="1;6pkt 6fpkt"];
511--2423[label="1;6pkt 6fpkt"];
511--3005[label="1;6pkt 6fpkt"];
511--3334[label="1;6pkt 6fpkt"];
2423--3005[label="1;6pkt 6fpkt"];
2423--3334[label="1;6pkt 6fpkt"];
3005--3334[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="166.3.61.164" src_port="80"/>
      <filter dst_ip="166.3.61.164" src_ip="220.65.150.158" src_port="3060"/>
      <filter dst_ip="166.3.61.164" src_ip="220.65.150.158" src_port="2002"/>
      <filter dst_ip="166.3.61.164" dst_port="4000" src_port="8000"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_43{
style=filled;
color=gray75;
266[label="145.208.178.122;s;439pkt 439fpkt", shape=diamond, color=yellow];
513[label="16.203.10.31;d;49pkt 49fpkt", shape=diamond, color=yellow];
699[label="16.203.21.37;d;60pkt 60fpkt", shape=diamond, color=yellow];
714[label="145.208.120.153;s;50pkt 50fpkt", shape=diamond, color=yellow];
1518[label="16.203.10.31;d;49pkt 49fpkt", shape=hexagon, color=black];
1633[label="16.203.21.37;d;60pkt 60fpkt", shape=hexagon, color=black];
stat43[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.178.122:*, *:80}[86.2205%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9293%)&lt;BR/&gt; 57241: (0.212164%)&lt;BR/&gt; 57240: (0.212164%)&lt;BR/&gt; 57239: (0.212164%)&lt;BR/&gt; 57233: (0.212164%)&gt;];
}
266--513[label="0.897959;44pkt 44fpkt"];
266--616[label="0.00461894;2pkt 2fpkt"];
266--699[label="0.616667;37pkt 37fpkt"];
266--902[label="0.0581395;10pkt 10fpkt"];
266--1011[label="0.177778;16pkt 16fpkt"];
266--1518[label="0.897959;44pkt 44fpkt"];
266--1633[label="0.616667;37pkt 37fpkt"];
266--1673[label="0.00626959;2pkt 2fpkt"];
266--1846[label="0.0205011;9pkt 9fpkt"];
266--1855[label="0.134396;59pkt 59fpkt"];
266--1856[label="0.0341686;15pkt 15fpkt"];
266--1860[label="0.022779;10pkt 10fpkt"];
266--1869[label="0.022779;10pkt 10fpkt"];
266--1874[label="0.0205011;9pkt 9fpkt"];
266--1879[label="0.134396;59pkt 59fpkt"];
266--1881[label="0.0341686;15pkt 15fpkt"];
266--1882[label="0.022779;10pkt 10fpkt"];
266--1885[label="0.022779;10pkt 10fpkt"];
266--1890[label="0.0205011;9pkt 9fpkt"];
266--1895[label="0.022779;10pkt 10fpkt"];
513--1518[label="1;49pkt 49fpkt"];
513--1846[label="0.0612245;3pkt 3fpkt"];
513--1855[label="0.0816327;4pkt 4fpkt"];
513--1856[label="0.0408163;2pkt 2fpkt"];
513--1860[label="0.0408163;2pkt 2fpkt"];
513--1874[label="0.0612245;3pkt 3fpkt"];
513--1879[label="0.0816327;4pkt 4fpkt"];
513--1881[label="0.0408163;2pkt 2fpkt"];
513--1882[label="0.0408163;2pkt 2fpkt"];
513--1890[label="0.0612245;3pkt 3fpkt"];
699--714[label="0.18;9pkt 9fpkt"];
699--1633[label="1;60pkt 60fpkt"];
699--1855[label="0.0333333;2pkt 2fpkt"];
699--1856[label="0.0166667;1pkt 1fpkt"];
699--1860[label="0.0166667;1pkt 1fpkt"];
699--1879[label="0.0333333;2pkt 2fpkt"];
699--1881[label="0.0166667;1pkt 1fpkt"];
699--1882[label="0.0166667;1pkt 1fpkt"];
714--1633[label="0.18;9pkt 9fpkt"];
1518--1846[label="0.0612245;3pkt 3fpkt"];
1518--1855[label="0.0816327;4pkt 4fpkt"];
1518--1856[label="0.0408163;2pkt 2fpkt"];
1518--1860[label="0.0408163;2pkt 2fpkt"];
1518--1874[label="0.0612245;3pkt 3fpkt"];
1518--1879[label="0.0816327;4pkt 4fpkt"];
1518--1881[label="0.0408163;2pkt 2fpkt"];
1518--1882[label="0.0408163;2pkt 2fpkt"];
1518--1890[label="0.0612245;3pkt 3fpkt"];
1633--1855[label="0.0333333;2pkt 2fpkt"];
1633--1856[label="0.0166667;1pkt 1fpkt"];
1633--1860[label="0.0166667;1pkt 1fpkt"];
1633--1879[label="0.0333333;2pkt 2fpkt"];
1633--1881[label="0.0166667;1pkt 1fpkt"];
1633--1882[label="0.0166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.208.178.122"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
136[label="192.3.105.184;s;763pkt 763fpkt", shape=diamond, color=yellow];
523[label="168.14.214.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
1459[label="168.14.214.112;d;1pkt 1fpkt", shape=hexagon, color=black];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.3.105.184:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
136--523[label="1;1pkt 1fpkt"];
136--1291[label="0.0526316;1pkt 1fpkt"];
136--1459[label="1;1pkt 1fpkt"];
523--1459[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="192.3.105.184"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_45{
style=filled;
color=gray75;
534[label="141.26.132.133;d;1pkt 1fpkt", shape=diamond, color=yellow];
535[label="146.200.239.163;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat45[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.200.239.163:1214, 141.26.132.133:3197}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3197: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
534--535[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.26.132.133" dst_port="3197" src_ip="146.200.239.163" src_port="1214"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
559[label="215.131.153.88;s;573pkt 573fpkt", shape=diamond, color=yellow];
560[label="166.3.56.82;d;581pkt 581fpkt", shape=diamond, color=yellow];
1494[label="166.3.56.82;d;562pkt 562fpkt", shape=hexagon, color=black];
2212[label="215.131.153.88;572pkt 572fpkt", shape=pentagon, color=darkviolet];
2876[label="215.131.153.88;572pkt 572fpkt", shape=invtriangle, color=brown];
3258[label="215.131.153.88;572pkt 572fpkt", shape=invhouse, color=bisque];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.131.153.88:8000, 166.3.56.82:*}[98.6231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (49.8543%)&lt;BR/&gt; 4466: (0.0874126%)&lt;BR/&gt; 3818: (0.0874126%)&lt;BR/&gt; 3817: (0.0874126%)&lt;BR/&gt; 3816: (0.0874126%)&gt;];
}
559--560[label="1;573pkt 573fpkt"];
559--1494[label="0.996441;560pkt 560fpkt"];
559--2212[label="1;572pkt 572fpkt"];
559--2876[label="1;572pkt 572fpkt"];
559--3258[label="1;572pkt 572fpkt"];
560--1494[label="1;562pkt 562fpkt"];
560--2212[label="1;572pkt 572fpkt"];
560--2225[label="0.181818;4pkt 4fpkt"];
560--2876[label="1;572pkt 572fpkt"];
560--3258[label="1;572pkt 572fpkt"];
1494--2212[label="0.994662;559pkt 559fpkt"];
1494--2876[label="0.994662;559pkt 559fpkt"];
1494--3258[label="0.994662;559pkt 559fpkt"];
2212--2876[label="1;572pkt 572fpkt"];
2212--3258[label="1;572pkt 572fpkt"];
2876--3258[label="1;572pkt 572fpkt"];
</description>
    <slice>
      <filter dst_ip="166.3.56.82" src_ip="215.131.153.88" src_port="8000"/>
    </slice>
    <from sec="1020574811" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
373[label="214.77.231.81;s;1pkt 1fpkt", shape=diamond, color=yellow];
584[label="135.246.79.12;d;5pkt 5fpkt", shape=diamond, color=yellow];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.38.161.17:6699, 135.246.79.12:1480}[20%]&lt;BR/&gt;{18.195.2.18:0, 135.246.79.12:0}[20%]&lt;BR/&gt;{214.77.231.81:6699, 135.246.79.12:1476}[20%]&lt;BR/&gt;{16.203.9.130:1863, 135.246.79.12:1033}[20%]&lt;BR/&gt;{215.50.57.130:0, 135.246.79.12:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (33.3333%)&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 1476: (16.6667%)&lt;BR/&gt; 1863: (8.33333%)&lt;BR/&gt; 1480: (8.33333%)&gt;];
}
373--584[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.246.79.12" src_ip="215.50.57.130"/>
      <filter dst_ip="135.246.79.12" dst_port="1033" src_ip="16.203.9.130" src_port="1863"/>
      <filter dst_ip="135.246.79.12" dst_port="1476" src_ip="214.77.231.81" src_port="6699"/>
      <filter dst_ip="135.246.79.12" src_ip="18.195.2.18"/>
      <filter dst_ip="135.246.79.12" dst_port="1480" src_ip="70.38.161.17" src_port="6699"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="161.40.74.10"/>
      <from sec="1020574802" usec="0"/>
      <to sec="1020576709" usec="0"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
682[label="134.140.221.176;s;1pkt 1fpkt", shape=diamond, color=yellow];
1657[label="134.140.221.176;s;1pkt 1fpkt", shape=hexagon, color=black];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.140.221.176:41000, 166.3.62.194:3252}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41000: (50%)&lt;BR/&gt; 3252: (50%)&gt;];
}
682--683[label="1;1pkt 1fpkt"];
682--1657[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.3.62.194" dst_port="3252" src_ip="134.140.221.176" src_port="41000"/>
    </slice>
    <from sec="1020574807" usec="0"/>
    <to sec="1020576533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23004,1.95335,020,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
602[label="132.136.242.6;s;1pkt 1fpkt", shape=diamond, color=yellow];
721[label="145.208.2.62;d;1pkt 1fpkt", shape=diamond, color=yellow];
1502[label="132.136.242.6;s;1pkt 1fpkt", shape=hexagon, color=black];
1563[label="145.208.2.62;d;1pkt 1fpkt", shape=hexagon, color=black];
1840[label="145.208.2.62;d;1pkt 1fpkt", shape=polygon, color=gold];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.136.242.6:0, 145.208.2.62:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
602--721[label="1;1pkt 1fpkt"];
602--1502[label="1;1pkt 1fpkt"];
602--1563[label="1;1pkt 1fpkt"];
602--1840[label="1;1pkt 1fpkt"];
721--1502[label="1;1pkt 1fpkt"];
721--1563[label="1;1pkt 1fpkt"];
721--1840[label="1;1pkt 1fpkt"];
1502--1563[label="1;1pkt 1fpkt"];
1502--1840[label="1;1pkt 1fpkt"];
1563--1840[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.2.62" src_ip="132.136.242.6"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
197[label="151.41.58.160;d;280pkt 280fpkt", shape=diamond, color=yellow];
599[label="162.157.217.80;s;2pkt 2fpkt", shape=diamond, color=yellow];
617[label="17.75.21.164;s;1pkt 1fpkt", shape=diamond, color=yellow];
670[label="220.192.250.105;s;8pkt 8fpkt", shape=diamond, color=yellow];
887[label="18.194.151.138;s;8pkt 8fpkt", shape=diamond, color=yellow];
975[label="213.212.217.187;s;4pkt 4fpkt", shape=diamond, color=yellow];
1231[label="99.68.229.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
1469[label="17.75.21.164;s;1pkt 1fpkt", shape=hexagon, color=black];
1654[label="213.212.217.187;s;4pkt 4fpkt", shape=hexagon, color=black];
2262[label="220.192.250.105;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2529[label="213.212.217.187;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2699[label="22.17.218.250;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2908[label="220.192.250.105;8pkt 8fpkt", shape=invtriangle, color=brown];
3066[label="213.212.217.187;1pkt 1fpkt", shape=invtriangle, color=brown];
3162[label="22.17.218.250;23pkt 23fpkt", shape=invtriangle, color=brown];
3275[label="220.192.250.105;7pkt 7fpkt", shape=invhouse, color=bisque];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1214, 151.41.58.160:*}[83.2143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (49.2063%)&lt;BR/&gt; 0: (1.5873%)&lt;BR/&gt; 3484: (0.661376%)&lt;BR/&gt; 3421: (0.661376%)&lt;BR/&gt; 3305: (0.661376%)&gt;];
}
197--599[label="1;2pkt 2fpkt"];
197--617[label="1;1pkt 1fpkt"];
197--670[label="1;8pkt 8fpkt"];
197--725[label="1;3pkt 3fpkt"];
197--887[label="1;8pkt 8fpkt"];
197--975[label="1;4pkt 4fpkt"];
197--1231[label="1;1pkt 1fpkt"];
197--1469[label="1;1pkt 1fpkt"];
197--1487[label="1;1pkt 1fpkt"];
197--1654[label="1;4pkt 4fpkt"];
197--2262[label="1;7pkt 7fpkt"];
197--2368[label="1;1pkt 1fpkt"];
197--2529[label="1;1pkt 1fpkt"];
197--2699[label="1;22pkt 22fpkt"];
197--2908[label="1;8pkt 8fpkt"];
197--2970[label="1;1pkt 1fpkt"];
197--3066[label="1;1pkt 1fpkt"];
197--3162[label="1;23pkt 23fpkt"];
197--3275[label="1;7pkt 7fpkt"];
617--1469[label="1;1pkt 1fpkt"];
670--2262[label="1;7pkt 7fpkt"];
670--2908[label="1;8pkt 8fpkt"];
670--3275[label="1;7pkt 7fpkt"];
975--1654[label="1;4pkt 4fpkt"];
975--2529[label="1;1pkt 1fpkt"];
975--3066[label="1;1pkt 1fpkt"];
1654--2529[label="1;1pkt 1fpkt"];
1654--3066[label="1;1pkt 1fpkt"];
2262--2908[label="1;7pkt 7fpkt"];
2262--3275[label="1;7pkt 7fpkt"];
2529--3066[label="1;1pkt 1fpkt"];
2699--3162[label="1;22pkt 22fpkt"];
2908--3275[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="151.41.58.160" src_port="1214"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
538[label="151.210.46.10;s;64pkt 64fpkt", shape=diamond, color=yellow];
727[label="170.64.135.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.210.46.10:53, *:*}[46.875%]&lt;BR/&gt;{151.210.46.10:1193, *:53}[26.5625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (40.7692%)&lt;BR/&gt; 1193: (13.0769%)&lt;BR/&gt; 25: (6.92308%)&lt;BR/&gt; 113: (5.38462%)&lt;BR/&gt; 0: (3.07692%)&gt;];
}
538--727[label="1;1pkt 1fpkt"];
538--1854[label="0.03125;2pkt 2fpkt"];
538--1858[label="0.03125;2pkt 2fpkt"];
538--1864[label="0.015625;1pkt 1fpkt"];
538--1866[label="0.015625;1pkt 1fpkt"];
538--1868[label="0.03125;2pkt 2fpkt"];
538--1870[label="0.03125;2pkt 2fpkt"];
538--1878[label="0.03125;2pkt 2fpkt"];
538--1880[label="0.046875;3pkt 3fpkt"];
538--1884[label="0.03125;2pkt 2fpkt"];
538--1886[label="0.03125;2pkt 2fpkt"];
538--1894[label="0.03125;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="151.210.46.10" src_port="53"/>
      <filter dst_port="53" src_ip="151.210.46.10" src_port="1193"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
126[label="192.3.104.11;d;984pkt 984fpkt", shape=diamond, color=yellow];
573[label="217.99.6.111;s;77pkt 77fpkt", shape=diamond, color=yellow];
711[label="157.163.164.146;s;38pkt 38fpkt", shape=diamond, color=yellow];
742[label="215.69.194.77;s;122pkt 122fpkt", shape=diamond, color=yellow];
1059[label="215.111.53.37;s;215pkt 215fpkt", shape=diamond, color=yellow];
1265[label="197.160.243.68;s;5pkt 5fpkt", shape=diamond, color=yellow];
1601[label="192.3.104.11;d;776pkt 776fpkt", shape=hexagon, color=black];
1934[label="18.76.146.10;21pkt 21fpkt", shape=pentagon, color=darkviolet];
1960[label="18.94.172.15;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2011[label="216.36.149.28;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2067[label="16.192.83.42;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2167[label="16.192.83.75;26pkt 26fpkt", shape=pentagon, color=darkviolet];
2238[label="16.192.83.100;29pkt 29fpkt", shape=pentagon, color=darkviolet];
2276[label="217.99.6.111;76pkt 76fpkt", shape=pentagon, color=darkviolet];
2363[label="197.224.227.137;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2457[label="18.8.204.165;36pkt 36fpkt", shape=pentagon, color=darkviolet];
2638[label="18.94.168.225;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2670[label="217.251.184.237;90pkt 90fpkt", shape=pentagon, color=darkviolet];
2676[label="16.192.72.240;62pkt 62fpkt", shape=pentagon, color=darkviolet];
2677[label="198.104.131.240;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2772[label="216.36.149.28;7pkt 7fpkt", shape=invtriangle, color=brown];
2857[label="16.192.83.75;26pkt 26fpkt", shape=invtriangle, color=brown];
2893[label="16.192.83.100;29pkt 29fpkt", shape=invtriangle, color=brown];
2917[label="217.99.6.111;76pkt 76fpkt", shape=invtriangle, color=brown];
2966[label="197.224.227.137;1pkt 1fpkt", shape=invtriangle, color=brown];
3126[label="18.94.168.225;7pkt 7fpkt", shape=invtriangle, color=brown];
3150[label="16.192.72.240;62pkt 62fpkt", shape=invtriangle, color=brown];
3204[label="216.36.149.28;7pkt 7fpkt", shape=invhouse, color=bisque];
3250[label="16.192.83.75;25pkt 25fpkt", shape=invhouse, color=bisque];
3309[label="197.224.227.137;2pkt 2fpkt", shape=invhouse, color=bisque];
3397[label="18.94.168.225;7pkt 7fpkt", shape=invhouse, color=bisque];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 192.3.104.11:*}[67.6105%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7558%)&lt;BR/&gt; 0: (0.174398%)&lt;BR/&gt; 2853: (0.139519%)&lt;BR/&gt; 2755: (0.139519%)&lt;BR/&gt; 3186: (0.122079%)&gt;];
}
126--429[label="1;2pkt 2fpkt"];
126--573[label="1;77pkt 77fpkt"];
126--609[label="0.0827586;12pkt 12fpkt"];
126--711[label="1;38pkt 38fpkt"];
126--742[label="0.139344;17pkt 17fpkt"];
126--753[label="0.753086;61pkt 61fpkt"];
126--814[label="0.706522;65pkt 65fpkt"];
126--860[label="0.1;1pkt 1fpkt"];
126--1059[label="0.0372093;8pkt 8fpkt"];
126--1265[label="1;5pkt 5fpkt"];
126--1400[label="1;2pkt 2fpkt"];
126--1589[label="0.147826;17pkt 17fpkt"];
126--1601[label="1;776pkt 776fpkt"];
126--1845[label="0.0710441;66pkt 66fpkt"];
126--1846[label="0.00101626;1pkt 1fpkt"];
126--1853[label="0.0528455;52pkt 52fpkt"];
126--1859[label="0.0640244;63pkt 63fpkt"];
126--1862[label="0.0569106;56pkt 56fpkt"];
126--1865[label="0.0497967;49pkt 49fpkt"];
126--1867[label="0.0497967;49pkt 49fpkt"];
126--1873[label="0.0710441;66pkt 66fpkt"];
126--1874[label="0.00101626;1pkt 1fpkt"];
126--1883[label="0.0497967;49pkt 49fpkt"];
126--1889[label="0.0710441;66pkt 66fpkt"];
126--1890[label="0.00101626;1pkt 1fpkt"];
126--1934[label="0.904762;19pkt 19fpkt"];
126--1938[label="0.0967742;3pkt 3fpkt"];
126--1960[label="0.933333;14pkt 14fpkt"];
126--2011[label="1;6pkt 6fpkt"];
126--2014[label="0.0625;1pkt 1fpkt"];
126--2067[label="0.0588235;1pkt 1fpkt"];
126--2167[label="0.0769231;2pkt 2fpkt"];
126--2225[label="0.0454545;1pkt 1fpkt"];
126--2238[label="0.103448;3pkt 3fpkt"];
126--2251[label="1;2pkt 2fpkt"];
126--2276[label="1;76pkt 76fpkt"];
126--2363[label="1;2pkt 2fpkt"];
126--2381[label="0.04;3pkt 3fpkt"];
126--2457[label="0.5;18pkt 18fpkt"];
126--2460[label="0.277778;5pkt 5fpkt"];
126--2531[label="0.643564;65pkt 65fpkt"];
126--2539[label="0.643564;65pkt 65fpkt"];
126--2543[label="0.455556;41pkt 41fpkt"];
126--2587[label="0.121212;4pkt 4fpkt"];
126--2638[label="0.285714;2pkt 2fpkt"];
126--2670[label="1;90pkt 90fpkt"];
126--2676[label="0.0322581;2pkt 2fpkt"];
126--2677[label="1;14pkt 14fpkt"];
126--2772[label="1;7pkt 7fpkt"];
126--2857[label="0.0769231;2pkt 2fpkt"];
126--2893[label="0.103448;3pkt 3fpkt"];
126--2901[label="1;2pkt 2fpkt"];
126--2917[label="1;76pkt 76fpkt"];
126--2966[label="1;1pkt 1fpkt"];
126--2979[label="0.0405405;3pkt 3fpkt"];
126--3067[label="0.643564;65pkt 65fpkt"];
126--3070[label="0.455556;41pkt 41fpkt"];
126--3126[label="0.285714;2pkt 2fpkt"];
126--3150[label="0.0322581;2pkt 2fpkt"];
126--3204[label="1;7pkt 7fpkt"];
126--3250[label="0.08;2pkt 2fpkt"];
126--3272[label="1;2pkt 2fpkt"];
126--3309[label="1;2pkt 2fpkt"];
126--3316[label="0.04;3pkt 3fpkt"];
126--3362[label="0.65;65pkt 65fpkt"];
126--3397[label="0.285714;2pkt 2fpkt"];
573--1601[label="0.909091;70pkt 70fpkt"];
573--1853[label="0.0779221;6pkt 6fpkt"];
573--1859[label="0.0649351;5pkt 5fpkt"];
573--1862[label="0.025974;2pkt 2fpkt"];
573--2276[label="1;76pkt 76fpkt"];
573--2917[label="1;76pkt 76fpkt"];
711--1601[label="0.473684;18pkt 18fpkt"];
711--1859[label="0.0526316;2pkt 2fpkt"];
711--1862[label="0.0526316;2pkt 2fpkt"];
711--1865[label="0.131579;5pkt 5fpkt"];
711--1867[label="0.0789474;3pkt 3fpkt"];
711--1883[label="0.0789474;3pkt 3fpkt"];
742--958[label="0.00854701;1pkt 1fpkt"];
742--1031[label="0.0833333;2pkt 2fpkt"];
742--1057[label="0.0408163;2pkt 2fpkt"];
742--1428[label="0.0163934;2pkt 2fpkt"];
742--1462[label="0.0655738;8pkt 8fpkt"];
742--1589[label="1;115pkt 115fpkt"];
742--1601[label="0.139344;17pkt 17fpkt"];
742--1741[label="0.0833333;2pkt 2fpkt"];
742--1845[label="0.0819672;10pkt 10fpkt"];
742--1853[label="0.0163934;2pkt 2fpkt"];
742--1859[label="0.0327869;4pkt 4fpkt"];
742--1862[label="0.0245902;3pkt 3fpkt"];
742--1865[label="0.0491803;6pkt 6fpkt"];
742--1867[label="0.0491803;6pkt 6fpkt"];
742--1873[label="0.0819672;10pkt 10fpkt"];
742--1883[label="0.0491803;6pkt 6fpkt"];
742--1889[label="0.0819672;10pkt 10fpkt"];
1059--1566[label="0.916279;197pkt 197fpkt"];
1059--1601[label="0.0372093;8pkt 8fpkt"];
1059--1841[label="0.916279;197pkt 197fpkt"];
1059--1859[label="0.0325581;7pkt 7fpkt"];
1059--1862[label="0.055814;12pkt 12fpkt"];
1059--1865[label="0.0930233;20pkt 20fpkt"];
1601--1845[label="0.0850515;66pkt 66fpkt"];
1601--1846[label="0.00128866;1pkt 1fpkt"];
1601--1853[label="0.0670103;52pkt 52fpkt"];
1601--1859[label="0.0811856;63pkt 63fpkt"];
1601--1862[label="0.0721649;56pkt 56fpkt"];
1601--1865[label="0.0399485;31pkt 31fpkt"];
1601--1867[label="0.0373711;29pkt 29fpkt"];
1601--1873[label="0.0850515;66pkt 66fpkt"];
1601--1874[label="0.00128866;1pkt 1fpkt"];
1601--1883[label="0.0373711;29pkt 29fpkt"];
1601--1889[label="0.0850515;66pkt 66fpkt"];
1601--1890[label="0.00128866;1pkt 1fpkt"];
1601--1934[label="0.47619;10pkt 10fpkt"];
1601--1938[label="0.0967742;3pkt 3fpkt"];
1601--1960[label="0.466667;7pkt 7fpkt"];
1601--2011[label="1;6pkt 6fpkt"];
1601--2067[label="0.0588235;1pkt 1fpkt"];
1601--2167[label="0.0384615;1pkt 1fpkt"];
1601--2225[label="0.0454545;1pkt 1fpkt"];
1601--2238[label="0.0344828;1pkt 1fpkt"];
1601--2251[label="1;2pkt 2fpkt"];
1601--2276[label="0.907895;69pkt 69fpkt"];
1601--2363[label="1;2pkt 2fpkt"];
1601--2381[label="0.04;3pkt 3fpkt"];
1601--2457[label="0.305556;11pkt 11fpkt"];
1601--2460[label="0.222222;4pkt 4fpkt"];
1601--2531[label="0.554455;56pkt 56fpkt"];
1601--2539[label="0.554455;56pkt 56fpkt"];
1601--2543[label="0.266667;24pkt 24fpkt"];
1601--2587[label="0.0606061;2pkt 2fpkt"];
1601--2638[label="0.142857;1pkt 1fpkt"];
1601--2670[label="1;90pkt 90fpkt"];
1601--2676[label="0.016129;1pkt 1fpkt"];
1601--2772[label="1;7pkt 7fpkt"];
1601--2857[label="0.0384615;1pkt 1fpkt"];
1601--2893[label="0.0344828;1pkt 1fpkt"];
1601--2901[label="1;2pkt 2fpkt"];
1601--2917[label="0.907895;69pkt 69fpkt"];
1601--2966[label="1;1pkt 1fpkt"];
1601--2979[label="0.0405405;3pkt 3fpkt"];
1601--3067[label="0.554455;56pkt 56fpkt"];
1601--3070[label="0.266667;24pkt 24fpkt"];
1601--3126[label="0.142857;1pkt 1fpkt"];
1601--3150[label="0.016129;1pkt 1fpkt"];
1601--3204[label="1;7pkt 7fpkt"];
1601--3250[label="0.04;1pkt 1fpkt"];
1601--3272[label="1;2pkt 2fpkt"];
1601--3309[label="1;2pkt 2fpkt"];
1601--3316[label="0.04;3pkt 3fpkt"];
1601--3362[label="0.56;56pkt 56fpkt"];
1601--3397[label="0.142857;1pkt 1fpkt"];
2011--2772[label="1;6pkt 6fpkt"];
2011--3204[label="1;6pkt 6fpkt"];
2167--2857[label="1;26pkt 26fpkt"];
2167--3250[label="1;25pkt 25fpkt"];
2238--2893[label="1;29pkt 29fpkt"];
2276--2917[label="1;76pkt 76fpkt"];
2363--2966[label="1;1pkt 1fpkt"];
2363--3309[label="1;2pkt 2fpkt"];
2638--3126[label="1;7pkt 7fpkt"];
2638--3397[label="1;7pkt 7fpkt"];
2676--3150[label="1;62pkt 62fpkt"];
2772--3204[label="1;7pkt 7fpkt"];
2857--3250[label="1;25pkt 25fpkt"];
2966--3309[label="1;1pkt 1fpkt"];
3126--3397[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="192.3.104.11" src_port="80"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
381[label="151.41.250.16;s;242pkt 242fpkt", shape=diamond, color=yellow];
755[label="16.212.163.138;d;1pkt 1fpkt", shape=diamond, color=yellow];
1712[label="151.41.250.16;s;232pkt 232fpkt", shape=hexagon, color=black];
1967[label="151.41.250.16;278pkt 278fpkt", shape=pentagon, color=darkviolet];
2746[label="151.41.250.16;278pkt 278fpkt", shape=invtriangle, color=brown];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.41.250.16:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
381--590[label="0.00609756;1pkt 1fpkt"];
381--755[label="1;1pkt 1fpkt"];
381--1712[label="1;232pkt 232fpkt"];
381--1967[label="1;242pkt 242fpkt"];
381--2746[label="1;242pkt 242fpkt"];
755--1712[label="1;1pkt 1fpkt"];
755--1967[label="1;1pkt 1fpkt"];
755--2746[label="1;1pkt 1fpkt"];
1712--1967[label="1;232pkt 232fpkt"];
1712--2746[label="1;232pkt 232fpkt"];
1967--2746[label="1;278pkt 278fpkt"];
</description>
    <slice>
      <filter src_ip="151.41.250.16"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
483[label="145.208.60.171;d;62pkt 62fpkt", shape=diamond, color=yellow];
554[label="213.35.45.149;s;2pkt 2fpkt", shape=diamond, color=yellow];
761[label="213.35.45.175;s;3pkt 3fpkt", shape=diamond, color=yellow];
1266[label="135.246.218.144;d;7pkt 7fpkt", shape=diamond, color=yellow];
1675[label="145.208.60.171;d;26pkt 26fpkt", shape=hexagon, color=black];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 145.208.60.171:*}[50.7246%]&lt;BR/&gt;{*:53, 145.208.60.171:1044}[23.1884%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (21%)&lt;BR/&gt; 1044: (12.5%)&lt;BR/&gt; 53: (12.5%)&lt;BR/&gt; 5001: (8%)&lt;BR/&gt; 1863: (5%)&gt;];
}
483--554[label="1;2pkt 2fpkt"];
483--761[label="0.333333;1pkt 1fpkt"];
483--1675[label="1;26pkt 26fpkt"];
483--1852[label="0.016129;1pkt 1fpkt"];
483--1858[label="0.016129;1pkt 1fpkt"];
483--1864[label="0.016129;1pkt 1fpkt"];
483--1866[label="0.0322581;2pkt 2fpkt"];
483--1867[label="0.0322581;2pkt 2fpkt"];
483--1883[label="0.0322581;2pkt 2fpkt"];
483--2320[label="0.0243902;1pkt 1fpkt"];
483--2703[label="0.04;1pkt 1fpkt"];
554--1675[label="1;2pkt 2fpkt"];
761--1266[label="0.666667;2pkt 2fpkt"];
761--1675[label="0.333333;1pkt 1fpkt"];
1266--2590[label="0.142857;1pkt 1fpkt"];
1675--1852[label="0.0384615;1pkt 1fpkt"];
1675--1858[label="0.0384615;1pkt 1fpkt"];
1675--1864[label="0.0384615;1pkt 1fpkt"];
1675--1866[label="0.0769231;2pkt 2fpkt"];
1675--1867[label="0.0769231;2pkt 2fpkt"];
1675--1883[label="0.0769231;2pkt 2fpkt"];
1675--2703[label="0.04;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.60.171" src_port="80"/>
      <filter dst_ip="145.208.60.171" dst_port="1044" src_port="53"/>
    </slice>
    <from sec="1020574805" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
758[label="141.26.155.163;d;2pkt 2fpkt", shape=diamond, color=yellow];
763[label="146.186.123.102;s;1pkt 1fpkt", shape=diamond, color=yellow];
1594[label="146.186.123.102;s;1pkt 1fpkt", shape=hexagon, color=black];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.8.215.79:41152, 141.26.155.163:1162}[50%]&lt;BR/&gt;{146.186.123.102:41034, 141.26.155.163:1177}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41034: (37.5%)&lt;BR/&gt; 1177: (37.5%)&lt;BR/&gt; 41152: (12.5%)&lt;BR/&gt; 1162: (12.5%)&gt;];
}
758--763[label="1;1pkt 1fpkt"];
758--1594[label="1;1pkt 1fpkt"];
763--1594[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.26.155.163" dst_port="1177" src_ip="146.186.123.102" src_port="41034"/>
      <filter dst_ip="141.26.155.163" dst_port="1162" src_ip="164.8.215.79" src_port="41152"/>
    </slice>
    <from sec="1020575243" usec="0"/>
    <to sec="1020576120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="97.238.54.32"/>
      <from sec="1020575344" usec="0"/>
      <to sec="1020575518" usec="0"/>
    </slice>
    <from sec="1020575344" usec="0"/>
    <to sec="1020575518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
768[label="135.246.219.199;d;16pkt 16fpkt", shape=diamond, color=yellow];
769[label="193.189.18.131;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.189.18.131:80, 135.246.219.199:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1563: (4.54545%)&lt;BR/&gt; 1562: (4.54545%)&lt;BR/&gt; 1561: (4.54545%)&lt;BR/&gt; 1560: (4.54545%)&gt;];
}
768--769[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="135.246.219.199" src_ip="193.189.18.131" src_port="80"/>
    </slice>
    <from sec="1020575418" usec="0"/>
    <to sec="1020575510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
772[label="213.219.112.186;s;12pkt 12fpkt", shape=diamond, color=yellow];
773[label="135.246.219.118;d;12pkt 12fpkt", shape=diamond, color=yellow];
1511[label="135.246.219.118;d;12pkt 12fpkt", shape=hexagon, color=black];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.219.112.186:554, 135.246.219.118:*}[75%]&lt;BR/&gt;{213.219.112.186:*, 135.246.219.118:6970}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (37.5%)&lt;BR/&gt; 6970: (12.5%)&lt;BR/&gt; 19530: (4.16667%)&lt;BR/&gt; 11082: (4.16667%)&lt;BR/&gt; 10568: (4.16667%)&gt;];
}
772--773[label="1;12pkt 12fpkt"];
772--1511[label="1;12pkt 12fpkt"];
773--1511[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="135.246.219.118" src_ip="213.219.112.186" src_port="554"/>
      <filter dst_ip="135.246.219.118" dst_port="6970" src_ip="213.219.112.186"/>
    </slice>
    <from sec="1020575462" usec="0"/>
    <to sec="1020575575" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="97.62.79.67"/>
      <from sec="1020575119" usec="0"/>
      <to sec="1020575625" usec="0"/>
    </slice>
    <from sec="1020575119" usec="0"/>
    <to sec="1020575625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
846[label="192.158.24.185;s;171pkt 171fpkt", shape=diamond, color=yellow];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.158.24.185:3128, 220.82.232.239:*}[56.1404%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (48.2456%)&lt;BR/&gt; 53: (3.50877%)&lt;BR/&gt; 43679: (0.292398%)&lt;BR/&gt; 43615: (0.292398%)&lt;BR/&gt; 43548: (0.292398%)&gt;];
}
846--1852[label="0.00584795;1pkt 1fpkt"];
846--1854[label="0.00584795;1pkt 1fpkt"];
846--1858[label="0.00584795;1pkt 1fpkt"];
846--1864[label="0.0116959;2pkt 2fpkt"];
846--1866[label="0.0116959;2pkt 2fpkt"];
846--1868[label="0.0116959;2pkt 2fpkt"];
846--1870[label="0.0116959;2pkt 2fpkt"];
846--1878[label="0.00584795;1pkt 1fpkt"];
846--1880[label="0.00584795;1pkt 1fpkt"];
846--1884[label="0.0116959;2pkt 2fpkt"];
846--1886[label="0.0116959;2pkt 2fpkt"];
846--1894[label="0.0116959;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="220.82.232.239" src_ip="192.158.24.185" src_port="3128"/>
    </slice>
    <from sec="1020574804" usec="0"/>
    <to sec="1020576605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22557,1.8707,010,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
395[label="192.10.205.81;d;7pkt 7fpkt", shape=diamond, color=yellow];
396[label="213.35.45.136;s;2pkt 2fpkt", shape=diamond, color=yellow];
1524[label="192.10.205.81;d;2pkt 2fpkt", shape=hexagon, color=black];
1806[label="192.10.205.81;d;2pkt 2fpkt", shape=polygon, color=gold];
2157[label="192.180.23.72;111pkt 111fpkt", shape=pentagon, color=darkviolet];
2851[label="192.180.23.72;110pkt 110fpkt", shape=invtriangle, color=brown];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.180.23.72:*, *:80}[94.0678%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8632%)&lt;BR/&gt; 5001: (1.49573%)&lt;BR/&gt; 3981: (1.06838%)&lt;BR/&gt; 4927: (0.854701%)&lt;BR/&gt; 2108: (0.854701%)&gt;];
}
395--396[label="0.5;1pkt 1fpkt"];
395--698[label="1;2pkt 2fpkt"];
395--1524[label="1;2pkt 2fpkt"];
395--1743[label="1;2pkt 2fpkt"];
395--1806[label="1;2pkt 2fpkt"];
395--2157[label="0.142857;1pkt 1fpkt"];
395--2590[label="0.142857;1pkt 1fpkt"];
395--2851[label="0.142857;1pkt 1fpkt"];
396--857[label="0.5;1pkt 1fpkt"];
396--1524[label="0.5;1pkt 1fpkt"];
396--1806[label="0.5;1pkt 1fpkt"];
1524--1806[label="1;2pkt 2fpkt"];
1524--2157[label="0.5;1pkt 1fpkt"];
1524--2851[label="0.5;1pkt 1fpkt"];
1806--2157[label="0.5;1pkt 1fpkt"];
1806--2851[label="0.5;1pkt 1fpkt"];
2157--2851[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="192.180.23.72"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
751[label="145.208.149.23;s;70pkt 70fpkt", shape=diamond, color=yellow];
1986[label="145.208.149.23;76pkt 76fpkt", shape=pentagon, color=darkviolet];
2758[label="145.208.149.23;75pkt 75fpkt", shape=invtriangle, color=brown];
3194[label="145.208.149.23;76pkt 76fpkt", shape=invhouse, color=bisque];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.149.23:*, 16.203.12.33:80}[22.3684%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4478: (1.3468%)&lt;BR/&gt; 4462: (1.3468%)&lt;BR/&gt; 4644: (0.673401%)&lt;BR/&gt; 4643: (0.673401%)&gt;];
}
751--861[label="0.0416667;2pkt 2fpkt"];
751--1855[label="0.0142857;1pkt 1fpkt"];
751--1856[label="0.0428571;3pkt 3fpkt"];
751--1860[label="0.142857;10pkt 10fpkt"];
751--1879[label="0.0142857;1pkt 1fpkt"];
751--1881[label="0.0428571;3pkt 3fpkt"];
751--1882[label="0.142857;10pkt 10fpkt"];
751--1986[label="1;70pkt 70fpkt"];
751--2758[label="0.985714;69pkt 69fpkt"];
751--3194[label="1;70pkt 70fpkt"];
1986--2758[label="1;75pkt 75fpkt"];
1986--3194[label="1;76pkt 76fpkt"];
2758--3194[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_ip="16.203.12.33" dst_port="80" src_ip="145.208.149.23"/>
    </slice>
    <from sec="1020574922" usec="0"/>
    <to sec="1020576281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
828[label="166.3.61.47;d;2pkt 2fpkt", shape=diamond, color=yellow];
872[label="223.250.40.0;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.250.40.0:1214, 166.3.61.47:2266}[50%]&lt;BR/&gt;{70.117.89.254:6699, 166.3.61.47:2175}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2266: (33.3333%)&lt;BR/&gt; 1214: (33.3333%)&lt;BR/&gt; 6699: (16.6667%)&lt;BR/&gt; 2175: (16.6667%)&gt;];
}
828--872[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.3.61.47" dst_port="2175" src_ip="70.117.89.254" src_port="6699"/>
      <filter dst_ip="166.3.61.47" dst_port="2266" src_ip="223.250.40.0" src_port="1214"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.761847,1.86949,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
840[label="70.211.23.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
897[label="166.3.144.110;s;1pkt 1fpkt", shape=diamond, color=yellow];
1643[label="70.211.23.255;d;1pkt 1fpkt", shape=hexagon, color=black];
2916[label="166.3.144.110;1pkt 1fpkt", shape=invtriangle, color=brown];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.3.144.110:2091, 70.211.23.255:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2091: (50%)&gt;];
}
840--897[label="1;1pkt 1fpkt"];
840--1643[label="1;1pkt 1fpkt"];
840--2916[label="1;1pkt 1fpkt"];
897--1643[label="1;1pkt 1fpkt"];
897--2916[label="1;1pkt 1fpkt"];
1643--2916[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="70.211.23.255" dst_port="6699" src_ip="166.3.144.110" src_port="2091"/>
    </slice>
    <from sec="1020574803" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
664[label="217.174.69.220;d;84pkt 84fpkt", shape=diamond, color=yellow];
901[label="161.40.64.0;s;31pkt 31fpkt", shape=diamond, color=yellow];
1098[label="161.40.77.105;s;12pkt 12fpkt", shape=diamond, color=yellow];
1243[label="161.40.127.16;s;107pkt 107fpkt", shape=diamond, color=yellow];
1248[label="217.132.99.29;d;9pkt 9fpkt", shape=diamond, color=yellow];
1592[label="161.40.64.0;s;19pkt 19fpkt", shape=hexagon, color=black];
2204[label="161.40.97.86;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2250[label="161.40.77.103;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2258[label="161.40.77.105;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2900[label="161.40.77.103;20pkt 20fpkt", shape=invtriangle, color=brown];
3271[label="161.40.77.103;20pkt 20fpkt", shape=invhouse, color=bisque];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 217.174.69.220:*}[37.8378%]&lt;BR/&gt;{161.40.127.16:*, 17.212.57.238:*}[20.2703%]&lt;BR/&gt;{*:113, *:*}[20.2703%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (8.57988%)&lt;BR/&gt; 6667: (3.84615%)&lt;BR/&gt; 21: (3.69822%)&lt;BR/&gt; 6661: (3.5503%)&lt;BR/&gt; 80: (3.40237%)&gt;];
}
664--901[label="0.322581;10pkt 10fpkt"];
664--1098[label="0.0833333;1pkt 1fpkt"];
664--1243[label="0.166667;14pkt 14fpkt"];
664--1412[label="0.0119048;1pkt 1fpkt"];
664--1592[label="0.526316;10pkt 10fpkt"];
664--1859[label="0.0119048;1pkt 1fpkt"];
664--1862[label="0.0119048;1pkt 1fpkt"];
664--1917[label="0.047619;1pkt 1fpkt"];
664--2204[label="0.333333;1pkt 1fpkt"];
664--2250[label="0.55;11pkt 11fpkt"];
664--2258[label="0.0769231;1pkt 1fpkt"];
664--2547[label="0.0119048;1pkt 1fpkt"];
664--2722[label="0.047619;1pkt 1fpkt"];
664--2900[label="0.55;11pkt 11fpkt"];
664--3175[label="0.047619;1pkt 1fpkt"];
664--3271[label="0.55;11pkt 11fpkt"];
901--1592[label="1;19pkt 19fpkt"];
901--1859[label="0.0322581;1pkt 1fpkt"];
901--1862[label="0.0322581;1pkt 1fpkt"];
1098--1248[label="0.111111;1pkt 1fpkt"];
1098--2258[label="1;12pkt 12fpkt"];
1243--1248[label="0.777778;7pkt 7fpkt"];
1248--2258[label="0.111111;1pkt 1fpkt"];
1592--1859[label="0.0526316;1pkt 1fpkt"];
1592--1862[label="0.0526316;1pkt 1fpkt"];
2250--2900[label="1;20pkt 20fpkt"];
2250--3271[label="1;20pkt 20fpkt"];
2900--3271[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="217.174.69.220"/>
      <filter src_port="113"/>
      <filter dst_ip="17.212.57.238" src_ip="161.40.127.16"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.646255,1.90556,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
913[label="70.122.89.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
914[label="135.246.216.68;d;3pkt 3fpkt", shape=diamond, color=yellow];
3014[label="70.122.89.162;1pkt 1fpkt", shape=invtriangle, color=brown];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.194.172.88:6699, 135.246.216.68:4068}[33.3333%]&lt;BR/&gt;{70.122.89.162:6699, 135.246.216.68:3970}[33.3333%]&lt;BR/&gt;{8.138.53.163:6699, 135.246.216.68:4126}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3970: (30%)&lt;BR/&gt; 4126: (10%)&lt;BR/&gt; 4068: (10%)&gt;];
}
913--914[label="1;1pkt 1fpkt"];
913--3014[label="1;1pkt 1fpkt"];
914--3014[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.246.216.68" dst_port="4126" src_ip="8.138.53.163" src_port="6699"/>
      <filter dst_ip="135.246.216.68" dst_port="3970" src_ip="70.122.89.162" src_port="6699"/>
      <filter dst_ip="135.246.216.68" dst_port="4068" src_ip="18.194.172.88" src_port="6699"/>
    </slice>
    <from sec="1020575465" usec="0"/>
    <to sec="1020576673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
943[label="70.122.89.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
944[label="135.246.216.68;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.246.216.68:3970, 70.122.89.162:6699}[50%]&lt;BR/&gt;{135.246.216.68:4066, 70.225.199.189:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3970: (33.3333%)&lt;BR/&gt; 4066: (16.6667%)&gt;];
}
943--944[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="70.225.199.189" dst_port="6699" src_ip="135.246.216.68" src_port="4066"/>
      <filter dst_ip="70.122.89.162" dst_port="6699" src_ip="135.246.216.68" src_port="3970"/>
    </slice>
    <from sec="1020575465" usec="0"/>
    <to sec="1020576619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="151.51.183.40"/>
      <from sec="1020575717" usec="0"/>
      <to sec="1020576517" usec="0"/>
    </slice>
    <from sec="1020575717" usec="0"/>
    <to sec="1020576517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
912[label="192.51.40.160;d;133pkt 133fpkt", shape=diamond, color=yellow];
923[label="16.45.43.186;s;4pkt 4fpkt", shape=diamond, color=yellow];
967[label="16.45.43.147;s;32pkt 32fpkt", shape=diamond, color=yellow];
1635[label="192.51.40.160;d;80pkt 80fpkt", shape=hexagon, color=black];
2325[label="215.22.169.128;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2499[label="197.197.14.177;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2942[label="215.22.169.128;8pkt 8fpkt", shape=invtriangle, color=brown];
3046[label="197.197.14.177;9pkt 9fpkt", shape=invtriangle, color=brown];
3295[label="215.22.169.128;9pkt 9fpkt", shape=invhouse, color=bisque];
3324[label="16.45.43.147;32pkt 32fpkt", shape=invhouse, color=bisque];
3351[label="197.197.14.177;9pkt 9fpkt", shape=invhouse, color=bisque];
3358[label="16.45.43.186;3pkt 3fpkt", shape=invhouse, color=bisque];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.45.43.147:80, 192.51.40.160:*}[23.5294%]&lt;BR/&gt;{*:53, 192.51.40.160:1024}[20.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.1548%)&lt;BR/&gt; 1024: (6.84524%)&lt;BR/&gt; 53: (6.84524%)&lt;BR/&gt; 4582: (0.595238%)&lt;BR/&gt; 4581: (0.595238%)&gt;];
}
912--923[label="1;4pkt 4fpkt"];
912--967[label="1;32pkt 32fpkt"];
912--1447[label="0.025;1pkt 1fpkt"];
912--1635[label="1;80pkt 80fpkt"];
912--1656[label="0.04;1pkt 1fpkt"];
912--1829[label="0.04;1pkt 1fpkt"];
912--1852[label="0.0150376;2pkt 2fpkt"];
912--1858[label="0.0300752;4pkt 4fpkt"];
912--1859[label="0.0075188;1pkt 1fpkt"];
912--1862[label="0.0225564;3pkt 3fpkt"];
912--1864[label="0.0300752;4pkt 4fpkt"];
912--1865[label="0.0225564;3pkt 3fpkt"];
912--1866[label="0.0300752;4pkt 4fpkt"];
912--1867[label="0.0150376;2pkt 2fpkt"];
912--1883[label="0.0150376;2pkt 2fpkt"];
912--2325[label="0.625;5pkt 5fpkt"];
912--2499[label="1;9pkt 9fpkt"];
912--2942[label="0.625;5pkt 5fpkt"];
912--3046[label="1;9pkt 9fpkt"];
912--3295[label="0.666667;6pkt 6fpkt"];
912--3324[label="1;32pkt 32fpkt"];
912--3351[label="1;9pkt 9fpkt"];
912--3358[label="1;3pkt 3fpkt"];
923--1635[label="1;4pkt 4fpkt"];
923--3358[label="1;3pkt 3fpkt"];
967--1635[label="1;32pkt 32fpkt"];
967--1865[label="0.09375;3pkt 3fpkt"];
967--1867[label="0.0625;2pkt 2fpkt"];
967--1883[label="0.0625;2pkt 2fpkt"];
967--3324[label="1;32pkt 32fpkt"];
1635--1656[label="0.04;1pkt 1fpkt"];
1635--1829[label="0.04;1pkt 1fpkt"];
1635--1852[label="0.025;2pkt 2fpkt"];
1635--1858[label="0.05;4pkt 4fpkt"];
1635--1859[label="0.0125;1pkt 1fpkt"];
1635--1862[label="0.0375;3pkt 3fpkt"];
1635--1864[label="0.05;4pkt 4fpkt"];
1635--1865[label="0.0375;3pkt 3fpkt"];
1635--1866[label="0.05;4pkt 4fpkt"];
1635--1867[label="0.025;2pkt 2fpkt"];
1635--1883[label="0.025;2pkt 2fpkt"];
1635--3324[label="1;32pkt 32fpkt"];
1635--3358[label="1;3pkt 3fpkt"];
2325--2942[label="1;8pkt 8fpkt"];
2325--3295[label="1;8pkt 8fpkt"];
2499--3046[label="1;9pkt 9fpkt"];
2499--3351[label="1;9pkt 9fpkt"];
2942--3295[label="1;8pkt 8fpkt"];
3046--3351[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="192.51.40.160" src_ip="16.45.43.147" src_port="80"/>
      <filter dst_ip="192.51.40.160" dst_port="1024" src_port="53"/>
    </slice>
    <from sec="1020575400" usec="0"/>
    <to sec="1020576743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="192.3.92.199"/>
      <from sec="1020574801" usec="0"/>
      <to sec="1020576684" usec="0"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
537[label="158.181.88.184;s;1pkt 1fpkt", shape=diamond, color=yellow];
598[label="141.26.89.237;d;4pkt 4fpkt", shape=diamond, color=yellow];
991[label="158.181.89.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.181.88.184:1214, 141.26.89.237:4901}[25%]&lt;BR/&gt;{154.66.203.253:1214, 141.26.89.237:4724}[25%]&lt;BR/&gt;{158.181.89.27:1214, 141.26.89.237:1052}[25%]&lt;BR/&gt;{158.181.89.27:1214, 141.26.89.237:1062}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 4901: (16.6667%)&lt;BR/&gt; 1062: (16.6667%)&lt;BR/&gt; 4724: (8.33333%)&lt;BR/&gt; 1052: (8.33333%)&gt;];
}
537--598[label="1;1pkt 1fpkt"];
598--991[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.26.89.237" dst_port="1062" src_ip="158.181.89.27" src_port="1214"/>
      <filter dst_ip="141.26.89.237" dst_port="1052" src_ip="158.181.89.27" src_port="1214"/>
      <filter dst_ip="141.26.89.237" dst_port="4724" src_ip="154.66.203.253" src_port="1214"/>
      <filter dst_ip="141.26.89.237" dst_port="4901" src_ip="158.181.88.184" src_port="1214"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="193.243.197.137"/>
      <from sec="1020574802" usec="0"/>
      <to sec="1020576665" usec="0"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
667[label="193.243.198.93;d;2pkt 2fpkt", shape=diamond, color=yellow];
1040[label="193.103.29.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
1167[label="196.99.112.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.99.112.8:0, 193.243.198.93:0}[50%]&lt;BR/&gt;{193.103.29.122:0, 193.243.198.93:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
667--1040[label="1;1pkt 1fpkt"];
667--1167[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.243.198.93" src_ip="193.103.29.122"/>
      <filter dst_ip="193.243.198.93" src_ip="196.99.112.8"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
710[label="192.12.3.119;d;144pkt 144fpkt", shape=diamond, color=yellow];
1195[label="18.97.82.183;s;80pkt 80fpkt", shape=diamond, color=yellow];
2512[label="18.97.82.183;177pkt 177fpkt", shape=pentagon, color=darkviolet];
2527[label="18.97.82.187;122pkt 122fpkt", shape=pentagon, color=darkviolet];
3055[label="18.97.82.183;176pkt 176fpkt", shape=invtriangle, color=brown];
3065[label="18.97.82.187;122pkt 122fpkt", shape=invtriangle, color=brown];
3356[label="18.97.82.183;177pkt 177fpkt", shape=invhouse, color=bisque];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.97.82.183:80, 192.12.3.119:*}[55%]&lt;BR/&gt;{18.97.82.187:80, 192.12.3.119:*}[37.8125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6994%)&lt;BR/&gt; 32772: (0.300601%)&lt;BR/&gt; 53: (0.300601%)&lt;BR/&gt; 2131: (0.200401%)&lt;BR/&gt; 2130: (0.200401%)&gt;];
}
710--1044[label="0.0980392;5pkt 5fpkt"];
710--1294[label="0.108696;10pkt 10fpkt"];
710--1955[label="0.0952381;2pkt 2fpkt"];
710--2512[label="0.465278;67pkt 67fpkt"];
710--2527[label="0.459016;56pkt 56fpkt"];
710--2740[label="0.0952381;2pkt 2fpkt"];
710--3055[label="0.465278;67pkt 67fpkt"];
710--3065[label="0.459016;56pkt 56fpkt"];
710--3356[label="0.465278;67pkt 67fpkt"];
1195--2512[label="1;80pkt 80fpkt"];
1195--3055[label="0.9875;79pkt 79fpkt"];
1195--3356[label="1;80pkt 80fpkt"];
2512--3055[label="1;176pkt 176fpkt"];
2512--3356[label="1;177pkt 177fpkt"];
2527--3065[label="1;122pkt 122fpkt"];
3055--3356[label="1;176pkt 176fpkt"];
</description>
    <slice>
      <filter dst_ip="192.12.3.119" src_ip="18.97.82.183" src_port="80"/>
      <filter dst_ip="192.12.3.119" src_ip="18.97.82.187" src_port="80"/>
    </slice>
    <from sec="1020576344" usec="0"/>
    <to sec="1020576761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="135.246.218.156"/>
      <from sec="1020574820" usec="0"/>
      <to sec="1020576706" usec="0"/>
    </slice>
    <from sec="1020574820" usec="0"/>
    <to sec="1020576706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
747[label="213.50.133.31;s;27pkt 27fpkt", shape=diamond, color=yellow];
2019[label="213.50.133.31;29pkt 29fpkt", shape=pentagon, color=darkviolet];
2776[label="213.50.133.31;29pkt 29fpkt", shape=invtriangle, color=brown];
3206[label="213.50.133.31;29pkt 29fpkt", shape=invhouse, color=bisque];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.50.133.31:*, 193.243.194.149:110}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 2317: (1.75439%)&lt;BR/&gt; 2305: (1.75439%)&lt;BR/&gt; 2295: (1.75439%)&lt;BR/&gt; 2283: (1.75439%)&gt;];
}
747--2019[label="1;27pkt 27fpkt"];
747--2776[label="1;27pkt 27fpkt"];
747--3206[label="1;27pkt 27fpkt"];
2019--2776[label="1;29pkt 29fpkt"];
2019--3206[label="1;29pkt 29fpkt"];
2776--3206[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="193.243.194.149" dst_port="110" src_ip="213.50.133.31"/>
    </slice>
    <from sec="1020574834" usec="0"/>
    <to sec="1020576734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
726[label="151.41.64.60;d;102pkt 102fpkt", shape=diamond, color=yellow];
1060[label="70.35.148.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
1176[label="172.186.136.123;s;8pkt 8fpkt", shape=diamond, color=yellow];
2308[label="172.186.136.123;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2330[label="70.98.165.129;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2932[label="172.186.136.123;7pkt 7fpkt", shape=invtriangle, color=brown];
3289[label="172.186.136.123;7pkt 7fpkt", shape=invhouse, color=bisque];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1214, 151.41.64.60:*}[36.2745%]&lt;BR/&gt;{*:1863, 151.41.64.60:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (24.1007%)&lt;BR/&gt; 1863: (8.63309%)&lt;BR/&gt; 1039: (5.39568%)&lt;BR/&gt; 53: (3.23741%)&lt;BR/&gt; 25: (3.23741%)&gt;];
}
726--1060[label="1;1pkt 1fpkt"];
726--1176[label="1;8pkt 8fpkt"];
726--1852[label="0.0196078;2pkt 2fpkt"];
726--1866[label="0.00980392;1pkt 1fpkt"];
726--2308[label="1;7pkt 7fpkt"];
726--2330[label="1;7pkt 7fpkt"];
726--2370[label="0.00980392;1pkt 1fpkt"];
726--2613[label="0.0416667;1pkt 1fpkt"];
726--2932[label="1;7pkt 7fpkt"];
726--2972[label="0.00980392;1pkt 1fpkt"];
726--3108[label="0.0416667;1pkt 1fpkt"];
726--3289[label="1;7pkt 7fpkt"];
726--3313[label="0.00980392;1pkt 1fpkt"];
1176--2308[label="1;7pkt 7fpkt"];
1176--2932[label="1;7pkt 7fpkt"];
1176--3289[label="1;7pkt 7fpkt"];
2308--2932[label="1;7pkt 7fpkt"];
2308--3289[label="1;7pkt 7fpkt"];
2932--3289[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="151.41.64.60" src_port="1214"/>
      <filter dst_ip="151.41.64.60" src_port="1863"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="70.2.126.250"/>
      <from sec="1020575550" usec="0"/>
      <to sec="1020576436" usec="0"/>
    </slice>
    <from sec="1020575550" usec="0"/>
    <to sec="1020576436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
507[label="99.49.10.122;d;15pkt 15fpkt", shape=diamond, color=yellow];
1078[label="135.246.9.49;s;17pkt 17fpkt", shape=diamond, color=yellow];
1142[label="220.204.104.32;d;2pkt 2fpkt", shape=diamond, color=yellow];
2090[label="135.246.9.49;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2814[label="135.246.9.49;17pkt 17fpkt", shape=invtriangle, color=brown];
3226[label="135.246.9.49;17pkt 17fpkt", shape=invhouse, color=bisque];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.246.9.49:*, 99.49.10.122:*}[88.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6976: (8.82353%)&lt;BR/&gt; 6974: (8.82353%)&lt;BR/&gt; 6972: (8.82353%)&lt;BR/&gt; 6970: (8.82353%)&lt;BR/&gt; 554: (8.82353%)&gt;];
}
507--1078[label="1;15pkt 15fpkt"];
507--2090[label="1;15pkt 15fpkt"];
507--2814[label="1;15pkt 15fpkt"];
507--3226[label="1;15pkt 15fpkt"];
1078--1142[label="1;2pkt 2fpkt"];
1078--2090[label="1;17pkt 17fpkt"];
1078--2814[label="1;17pkt 17fpkt"];
1078--3226[label="1;17pkt 17fpkt"];
1142--2090[label="1;2pkt 2fpkt"];
1142--2814[label="1;2pkt 2fpkt"];
1142--3226[label="1;2pkt 2fpkt"];
2090--2814[label="1;17pkt 17fpkt"];
2090--3226[label="1;17pkt 17fpkt"];
2814--3226[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="99.49.10.122" src_ip="135.246.9.49"/>
    </slice>
    <from sec="1020575882" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573985,1.85133,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
1081[label="192.12.0.4;d;15pkt 15fpkt", shape=diamond, color=yellow];
1082[label="193.235.76.65;s;15pkt 15fpkt", shape=diamond, color=yellow];
2135[label="193.235.76.65;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2839[label="193.235.76.65;14pkt 14fpkt", shape=invtriangle, color=brown];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.235.76.65:80, 192.12.0.4:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 15182: (3.44828%)&lt;BR/&gt; 15181: (3.44828%)&lt;BR/&gt; 15174: (3.44828%)&lt;BR/&gt; 15173: (3.44828%)&gt;];
}
1081--1082[label="1;15pkt 15fpkt"];
1081--1865[label="0.266667;4pkt 4fpkt"];
1081--1867[label="0.0666667;1pkt 1fpkt"];
1081--1883[label="0.0666667;1pkt 1fpkt"];
1081--2135[label="1;14pkt 14fpkt"];
1081--2839[label="1;14pkt 14fpkt"];
1082--1865[label="0.266667;4pkt 4fpkt"];
1082--1867[label="0.0666667;1pkt 1fpkt"];
1082--1883[label="0.0666667;1pkt 1fpkt"];
1082--2135[label="1;14pkt 14fpkt"];
1082--2839[label="1;14pkt 14fpkt"];
2135--2839[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="192.12.0.4" src_ip="193.235.76.65" src_port="80"/>
    </slice>
    <from sec="1020575939" usec="0"/>
    <to sec="1020576242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
1222[label="116.6.4.58;s;78pkt 78fpkt", shape=diamond, color=yellow];
1763[label="116.6.4.58;s;78pkt 78fpkt", shape=hexagon, color=black];
2120[label="116.6.4.58;77pkt 77fpkt", shape=pentagon, color=darkviolet];
2829[label="116.6.4.58;77pkt 77fpkt", shape=invtriangle, color=brown];
3233[label="116.6.4.58;78pkt 78fpkt", shape=invhouse, color=bisque];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{116.6.4.58:*, 151.41.13.221:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3916: (0.64433%)&lt;BR/&gt; 3915: (0.64433%)&lt;BR/&gt; 3914: (0.64433%)&lt;BR/&gt; 3913: (0.64433%)&gt;];
}
1222--1763[label="1;78pkt 78fpkt"];
1222--2120[label="1;77pkt 77fpkt"];
1222--2829[label="1;77pkt 77fpkt"];
1222--3233[label="1;78pkt 78fpkt"];
1763--2120[label="1;77pkt 77fpkt"];
1763--2829[label="1;77pkt 77fpkt"];
1763--3233[label="1;78pkt 78fpkt"];
2120--2829[label="1;77pkt 77fpkt"];
2120--3233[label="1;77pkt 77fpkt"];
2829--3233[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="151.41.13.221" dst_port="80" src_ip="116.6.4.58"/>
    </slice>
    <from sec="1020576275" usec="0"/>
    <to sec="1020576626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.646255,1.90556,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
468[label="192.10.216.62;d;156pkt 156fpkt", shape=diamond, color=yellow];
1166[label="97.73.226.226;s;2pkt 2fpkt", shape=diamond, color=yellow];
1288[label="97.73.233.192;s;1pkt 1fpkt", shape=diamond, color=yellow];
3004[label="8.211.41.158;5pkt 5fpkt", shape=invtriangle, color=brown];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8888, 192.10.216.62:*}[46.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (22.8659%)&lt;BR/&gt; 0: (18.2927%)&lt;BR/&gt; 7777: (7.0122%)&lt;BR/&gt; 4444: (2.43902%)&lt;BR/&gt; 6666: (1.82927%)&gt;];
}
468--1166[label="1;2pkt 2fpkt"];
468--1288[label="1;1pkt 1fpkt"];
468--3004[label="0.2;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.10.216.62" src_port="8888"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
449[label="135.131.161.15;s;197pkt 197fpkt", shape=diamond, color=yellow];
1193[label="17.11.168.204;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.131.161.15:*, *:6346}[83.2487%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (45.202%)&lt;BR/&gt; 6347: (2.77778%)&lt;BR/&gt; 6348: (1.0101%)&lt;BR/&gt; 6349: (0.505051%)&lt;BR/&gt; 4453: (0.505051%)&gt;];
}
449--1193[label="1;1pkt 1fpkt"];
449--1855[label="0.00507614;1pkt 1fpkt"];
449--1879[label="0.00507614;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6346" src_ip="135.131.161.15"/>
    </slice>
    <from sec="1020574965" usec="0"/>
    <to sec="1020576619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
1197[label="192.158.233.30;s;8pkt 8fpkt", shape=diamond, color=yellow];
1198[label="192.184.3.219;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.158.233.30:80, 192.184.3.219:*}[50%]&lt;BR/&gt;{192.158.233.30:80, 152.163.139.94:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53748: (8.33333%)&lt;BR/&gt; 52826: (8.33333%)&lt;BR/&gt; 52553: (8.33333%)&lt;BR/&gt; 49834: (8.33333%)&gt;];
}
1197--1198[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="192.184.3.219" src_ip="192.158.233.30" src_port="80"/>
      <filter dst_ip="152.163.139.94" src_ip="192.158.233.30" src_port="80"/>
    </slice>
    <from sec="1020576350" usec="0"/>
    <to sec="1020576609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
1196[label="192.158.233.30;d;6pkt 6fpkt", shape=diamond, color=yellow];
1199[label="192.184.3.219;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.184.3.219:*, 192.158.233.30:80}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53748: (10%)&lt;BR/&gt; 52826: (10%)&lt;BR/&gt; 52553: (10%)&lt;BR/&gt; 49834: (10%)&gt;];
}
1196--1199[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="192.158.233.30" dst_port="80" src_ip="192.184.3.219"/>
    </slice>
    <from sec="1020576350" usec="0"/>
    <to sec="1020576498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.3.105.78"/>
      <from sec="1020574801" usec="0"/>
      <to sec="1020576709" usec="0"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="193.243.198.107"/>
      <from sec="1020574815" usec="0"/>
      <to sec="1020576616" usec="0"/>
    </slice>
    <from sec="1020574815" usec="0"/>
    <to sec="1020576616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
1191[label="144.75.117.230;s;11pkt 11fpkt", shape=diamond, color=yellow];
1200[label="17.138.99.39;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.75.117.230:*, 17.138.98.55:80}[36.3636%]&lt;BR/&gt;{144.75.117.230:*, 17.138.99.39:80}[27.2727%]&lt;BR/&gt;{144.75.117.230:*, 17.138.113.177:80}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1059: (10.7143%)&lt;BR/&gt; 1063: (7.14286%)&lt;BR/&gt; 1057: (7.14286%)&lt;BR/&gt; 1066: (3.57143%)&gt;];
}
1191--1200[label="1;3pkt 3fpkt"];
1191--1216[label="0.363636;4pkt 4fpkt"];
1191--1869[label="0.0909091;1pkt 1fpkt"];
1191--1885[label="0.0909091;1pkt 1fpkt"];
1191--1895[label="0.0909091;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="17.138.98.55" dst_port="80" src_ip="144.75.117.230"/>
      <filter dst_ip="17.138.113.177" dst_port="80" src_ip="144.75.117.230"/>
      <filter dst_ip="17.138.99.39" dst_port="80" src_ip="144.75.117.230"/>
    </slice>
    <from sec="1020576273" usec="0"/>
    <to sec="1020576502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
193[label="192.144.96.230;s;815pkt 815fpkt", shape=diamond, color=yellow];
410[label="96.147.136.252;d;1pkt 1fpkt", shape=diamond, color=yellow];
956[label="99.38.213.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
1053[label="16.16.55.125;d;1pkt 1fpkt", shape=diamond, color=yellow];
1190[label="223.232.3.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
1219[label="197.197.14.177;d;36pkt 36fpkt", shape=diamond, color=yellow];
1325[label="223.122.210.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
1349[label="192.144.96.230;s;75pkt 75fpkt", shape=hexagon, color=black];
1464[label="96.147.136.252;d;1pkt 1fpkt", shape=hexagon, color=black];
1659[label="16.16.55.125;d;1pkt 1fpkt", shape=hexagon, color=black];
2649[label="192.144.96.230;945pkt 945fpkt", shape=pentagon, color=darkviolet];
3133[label="192.144.96.230;945pkt 945fpkt", shape=invtriangle, color=brown];
3402[label="192.144.96.230;942pkt 942fpkt", shape=invhouse, color=bisque];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.144.96.230:*, *:53}[33.6449%]&lt;BR/&gt;{192.144.96.230:*, *:80}[26.2721%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (22.2045%)&lt;BR/&gt; 80: (13.745%)&lt;BR/&gt; 8888: (1.97875%)&lt;BR/&gt; 6699: (1.81939%)&lt;BR/&gt; 8088: (1.72643%)&gt;];
}
193--410[label="1;1pkt 1fpkt"];
193--423[label="0.016129;1pkt 1fpkt"];
193--510[label="0.0384615;2pkt 2fpkt"];
193--526[label="0.0535714;3pkt 3fpkt"];
193--570[label="0.0292683;6pkt 6fpkt"];
193--588[label="0.0697674;3pkt 3fpkt"];
193--607[label="0.0952381;4pkt 4fpkt"];
193--616[label="0.17552;76pkt 76fpkt"];
193--621[label="0.0344828;2pkt 2fpkt"];
193--625[label="0.0535714;3pkt 3fpkt"];
193--723[label="0.0612245;3pkt 3fpkt"];
193--861[label="0.104167;5pkt 5fpkt"];
193--930[label="0.2;10pkt 10fpkt"];
193--956[label="1;1pkt 1fpkt"];
193--1053[label="1;1pkt 1fpkt"];
193--1122[label="0.155963;17pkt 17fpkt"];
193--1190[label="1;1pkt 1fpkt"];
193--1219[label="0.333333;12pkt 12fpkt"];
193--1308[label="0.0869565;4pkt 4fpkt"];
193--1349[label="0.986667;74pkt 74fpkt"];
193--1418[label="0.025641;1pkt 1fpkt"];
193--1448[label="0.0535714;3pkt 3fpkt"];
193--1464[label="1;1pkt 1fpkt"];
193--1568[label="0.0545455;3pkt 3fpkt"];
193--1624[label="0.0294118;1pkt 1fpkt"];
193--1659[label="1;1pkt 1fpkt"];
193--1673[label="0.15674;50pkt 50fpkt"];
193--1728[label="0.0350877;2pkt 2fpkt"];
193--1846[label="0.00245399;2pkt 2fpkt"];
193--1849[label="0.00428571;3pkt 3fpkt"];
193--1852[label="0.00981595;8pkt 8fpkt"];
193--1854[label="0.0159509;13pkt 13fpkt"];
193--1855[label="0.0122699;10pkt 10fpkt"];
193--1856[label="0.0110429;9pkt 9fpkt"];
193--1858[label="0.0171779;14pkt 14fpkt"];
193--1860[label="0.00122699;1pkt 1fpkt"];
193--1864[label="0.0171779;14pkt 14fpkt"];
193--1866[label="0.0233129;19pkt 19fpkt"];
193--1868[label="0.0245399;20pkt 20fpkt"];
193--1869[label="0.00858896;7pkt 7fpkt"];
193--1870[label="0.0319018;26pkt 26fpkt"];
193--1874[label="0.00245399;2pkt 2fpkt"];
193--1877[label="0.00428571;3pkt 3fpkt"];
193--1878[label="0.0159509;13pkt 13fpkt"];
193--1879[label="0.0122699;10pkt 10fpkt"];
193--1880[label="0.0134969;11pkt 11fpkt"];
193--1881[label="0.0110429;9pkt 9fpkt"];
193--1882[label="0.00122699;1pkt 1fpkt"];
193--1884[label="0.0245399;20pkt 20fpkt"];
193--1885[label="0.00858896;7pkt 7fpkt"];
193--1886[label="0.0319018;26pkt 26fpkt"];
193--1890[label="0.00245399;2pkt 2fpkt"];
193--1893[label="0.00428571;3pkt 3fpkt"];
193--1894[label="0.0245399;20pkt 20fpkt"];
193--1895[label="0.00858896;7pkt 7fpkt"];
193--2649[label="1;815pkt 815fpkt"];
193--3133[label="1;815pkt 815fpkt"];
193--3402[label="0.996319;812pkt 812fpkt"];
410--1349[label="1;1pkt 1fpkt"];
410--1464[label="1;1pkt 1fpkt"];
410--2649[label="1;1pkt 1fpkt"];
410--3133[label="1;1pkt 1fpkt"];
410--3402[label="1;1pkt 1fpkt"];
956--2649[label="1;1pkt 1fpkt"];
956--3133[label="1;1pkt 1fpkt"];
956--3402[label="1;1pkt 1fpkt"];
1053--1349[label="1;1pkt 1fpkt"];
1053--1659[label="1;1pkt 1fpkt"];
1053--2649[label="1;1pkt 1fpkt"];
1053--3133[label="1;1pkt 1fpkt"];
1053--3402[label="1;1pkt 1fpkt"];
1190--2649[label="1;1pkt 1fpkt"];
1190--3133[label="1;1pkt 1fpkt"];
1190--3402[label="1;1pkt 1fpkt"];
1219--1869[label="0.0833333;3pkt 3fpkt"];
1219--1885[label="0.0833333;3pkt 3fpkt"];
1219--1895[label="0.0833333;3pkt 3fpkt"];
1219--2549[label="0.4;8pkt 8fpkt"];
1219--2649[label="0.5;18pkt 18fpkt"];
1219--3072[label="0.4;8pkt 8fpkt"];
1219--3133[label="0.5;18pkt 18fpkt"];
1219--3365[label="0.421053;8pkt 8fpkt"];
1219--3402[label="0.5;18pkt 18fpkt"];
1325--2649[label="1;1pkt 1fpkt"];
1325--3133[label="1;1pkt 1fpkt"];
1325--3402[label="1;1pkt 1fpkt"];
1349--1464[label="1;1pkt 1fpkt"];
1349--1659[label="1;1pkt 1fpkt"];
1349--1846[label="0.0266667;2pkt 2fpkt"];
1349--1849[label="0.04;3pkt 3fpkt"];
1349--1852[label="0.0533333;4pkt 4fpkt"];
1349--1854[label="0.04;3pkt 3fpkt"];
1349--1858[label="0.0533333;4pkt 4fpkt"];
1349--1864[label="0.04;3pkt 3fpkt"];
1349--1866[label="0.04;3pkt 3fpkt"];
1349--1868[label="0.0266667;2pkt 2fpkt"];
1349--1870[label="0.0266667;2pkt 2fpkt"];
1349--1874[label="0.0266667;2pkt 2fpkt"];
1349--1877[label="0.04;3pkt 3fpkt"];
1349--1878[label="0.04;3pkt 3fpkt"];
1349--1880[label="0.04;3pkt 3fpkt"];
1349--1884[label="0.0266667;2pkt 2fpkt"];
1349--1886[label="0.0266667;2pkt 2fpkt"];
1349--1890[label="0.0266667;2pkt 2fpkt"];
1349--1893[label="0.04;3pkt 3fpkt"];
1349--1894[label="0.0266667;2pkt 2fpkt"];
1349--2649[label="1;75pkt 75fpkt"];
1349--3133[label="1;75pkt 75fpkt"];
1349--3402[label="0.96;72pkt 72fpkt"];
1464--2649[label="1;1pkt 1fpkt"];
1464--3133[label="1;1pkt 1fpkt"];
1464--3402[label="1;1pkt 1fpkt"];
1659--2649[label="1;1pkt 1fpkt"];
1659--3133[label="1;1pkt 1fpkt"];
1659--3402[label="1;1pkt 1fpkt"];
2649--3133[label="1;945pkt 945fpkt"];
2649--3402[label="1;942pkt 942fpkt"];
3133--3402[label="1;942pkt 942fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="192.144.96.230"/>
      <filter dst_port="80" src_ip="192.144.96.230"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="151.38.232.129"/>
      <from sec="1020576158" usec="0"/>
      <to sec="1020576619" usec="0"/>
    </slice>
    <from sec="1020576158" usec="0"/>
    <to sec="1020576619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.3.92.199"/>
      <from sec="1020574801" usec="0"/>
      <to sec="1020576684" usec="0"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="18.217.164.31"/>
      <from sec="1020575386" usec="0"/>
      <to sec="1020576612" usec="0"/>
    </slice>
    <from sec="1020575386" usec="0"/>
    <to sec="1020576612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="22.32.99.41"/>
      <from sec="1020576158" usec="0"/>
      <to sec="1020576709" usec="0"/>
    </slice>
    <from sec="1020576158" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
695[label="192.10.17.129;d;228pkt 228fpkt", shape=diamond, color=yellow];
1911[label="213.48.22.5;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2414[label="99.213.52.153;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2449[label="220.158.60.164;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2521[label="192.8.27.186;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2674[label="99.108.192.239;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2718[label="213.48.22.5;6pkt 6fpkt", shape=invtriangle, color=brown];
3020[label="220.158.60.164;4pkt 4fpkt", shape=invtriangle, color=brown];
3060[label="192.8.27.186;8pkt 8fpkt", shape=invtriangle, color=brown];
3149[label="99.108.192.239;3pkt 3fpkt", shape=invtriangle, color=brown];
3171[label="213.48.22.5;5pkt 5fpkt", shape=invhouse, color=bisque];
3338[label="220.158.60.164;4pkt 4fpkt", shape=invhouse, color=bisque];
3408[label="99.108.192.239;2pkt 2fpkt", shape=invhouse, color=bisque];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 192.10.17.129:80}[98.2759%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1605%)&lt;BR/&gt; 110: (1.83946%)&lt;BR/&gt; 1963: (0.668896%)&lt;BR/&gt; 1962: (0.668896%)&lt;BR/&gt; 1607: (0.668896%)&gt;];
}
695--1119[label="1;10pkt 10fpkt"];
695--1264[label="0.375;6pkt 6fpkt"];
695--1303[label="0.0133333;1pkt 1fpkt"];
695--1742[label="1;9pkt 9fpkt"];
695--1846[label="0.0175439;4pkt 4fpkt"];
695--1855[label="0.0131579;3pkt 3fpkt"];
695--1856[label="0.00877193;2pkt 2fpkt"];
695--1860[label="0.0219298;5pkt 5fpkt"];
695--1869[label="0.0307018;7pkt 7fpkt"];
695--1874[label="0.0175439;4pkt 4fpkt"];
695--1879[label="0.0131579;3pkt 3fpkt"];
695--1881[label="0.00877193;2pkt 2fpkt"];
695--1882[label="0.0219298;5pkt 5fpkt"];
695--1885[label="0.0307018;7pkt 7fpkt"];
695--1890[label="0.0175439;4pkt 4fpkt"];
695--1895[label="0.0307018;7pkt 7fpkt"];
695--1911[label="0.333333;2pkt 2fpkt"];
695--2073[label="0.0175439;1pkt 1fpkt"];
695--2096[label="0.0208333;1pkt 1fpkt"];
695--2414[label="1;19pkt 19fpkt"];
695--2449[label="1;4pkt 4fpkt"];
695--2514[label="0.142857;2pkt 2fpkt"];
695--2521[label="1;8pkt 8fpkt"];
695--2595[label="0.0327869;2pkt 2fpkt"];
695--2622[label="0.0588235;1pkt 1fpkt"];
695--2674[label="1;2pkt 2fpkt"];
695--2718[label="0.333333;2pkt 2fpkt"];
695--3000[label="1;19pkt 19fpkt"];
695--3020[label="1;4pkt 4fpkt"];
695--3060[label="1;8pkt 8fpkt"];
695--3096[label="0.0322581;2pkt 2fpkt"];
695--3116[label="0.0588235;1pkt 1fpkt"];
695--3149[label="1;3pkt 3fpkt"];
695--3171[label="0.4;2pkt 2fpkt"];
695--3338[label="1;4pkt 4fpkt"];
695--3408[label="1;2pkt 2fpkt"];
1911--2718[label="1;6pkt 6fpkt"];
1911--3171[label="1;5pkt 5fpkt"];
2414--3000[label="1;19pkt 19fpkt"];
2449--3020[label="1;4pkt 4fpkt"];
2449--3338[label="1;4pkt 4fpkt"];
2521--3060[label="1;8pkt 8fpkt"];
2674--3149[label="1;2pkt 2fpkt"];
2674--3408[label="1;2pkt 2fpkt"];
2718--3171[label="1;5pkt 5fpkt"];
3020--3338[label="1;4pkt 4fpkt"];
3149--3408[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.10.17.129" dst_port="80"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.502244,1.88143,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
968[label="198.91.198.59;s;1pkt 1fpkt", shape=diamond, color=yellow];
1275[label="145.208.144.166;d;2pkt 2fpkt", shape=diamond, color=yellow];
2123[label="198.91.198.59;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.91.198.59:80, 145.208.144.166:1026}[50%]&lt;BR/&gt;{198.91.198.59:80, 145.208.144.166:1074}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1074: (25%)&lt;BR/&gt; 1026: (25%)&gt;];
}
968--1275[label="1;1pkt 1fpkt"];
1275--2123[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.144.166" dst_port="1074" src_ip="198.91.198.59" src_port="80"/>
      <filter dst_ip="145.208.144.166" dst_port="1026" src_ip="198.91.198.59" src_port="80"/>
    </slice>
    <from sec="1020576551" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
886[label="215.52.27.115;d;2pkt 2fpkt", shape=diamond, color=yellow];
1278[label="145.208.99.164;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.99.181:34102, 215.52.27.115:9500}[33.3333%]&lt;BR/&gt;{145.208.99.164:80, 145.64.237.124:3853}[33.3333%]&lt;BR/&gt;{145.208.99.164:33248, 215.52.27.115:9500}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9500: (37.5%)&lt;BR/&gt; 33248: (25%)&lt;BR/&gt; 34102: (12.5%)&lt;BR/&gt; 3853: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
886--1278[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.52.27.115" dst_port="9500" src_ip="145.208.99.164" src_port="33248"/>
      <filter dst_ip="145.64.237.124" dst_port="3853" src_ip="145.208.99.164" src_port="80"/>
      <filter dst_ip="215.52.27.115" dst_port="9500" src_ip="145.208.99.181" src_port="34102"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
1239[label="207.224.122.194;s;1pkt 1fpkt", shape=diamond, color=yellow];
1290[label="151.41.226.120;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.224.122.194:6667, 151.41.226.120:1513}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 1513: (50%)&gt;];
}
1239--1290[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.41.226.120" dst_port="1513" src_ip="207.224.122.194" src_port="6667"/>
    </slice>
    <from sec="1020574808" usec="0"/>
    <to sec="1020576703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="161.40.169.76"/>
      <from sec="1020574868" usec="0"/>
      <to sec="1020576708" usec="0"/>
    </slice>
    <from sec="1020574868" usec="0"/>
    <to sec="1020576708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
1035[label="193.243.200.12;d;199pkt 199fpkt", shape=diamond, color=yellow];
1316[label="192.8.4.85;s;24pkt 24fpkt", shape=diamond, color=yellow];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.213.222.42:80, 193.243.200.12:*}[67.6471%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6547%)&lt;BR/&gt; 53: (1.34529%)&lt;BR/&gt; 23054: (0.44843%)&lt;BR/&gt; 23045: (0.44843%)&lt;BR/&gt; 23043: (0.44843%)&gt;];
}
1035--1116[label="1;138pkt 138fpkt"];
1035--1316[label="0.791667;19pkt 19fpkt"];
1035--1656[label="0.04;1pkt 1fpkt"];
1035--1829[label="0.04;1pkt 1fpkt"];
1035--1859[label="0.00502513;1pkt 1fpkt"];
1035--1865[label="0.0100503;2pkt 2fpkt"];
1035--1867[label="0.0100503;2pkt 2fpkt"];
1035--1883[label="0.0100503;2pkt 2fpkt"];
1035--1921[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.243.200.12" src_ip="220.213.222.42" src_port="80"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
596[label="193.243.202.91;d;440pkt 440fpkt", shape=diamond, color=yellow];
644[label="222.31.160.55;s;29pkt 29fpkt", shape=diamond, color=yellow];
1318[label="96.21.202.184;s;164pkt 164fpkt", shape=diamond, color=yellow];
2664[label="144.209.179.235;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3143[label="144.209.179.235;12pkt 12fpkt", shape=invtriangle, color=brown];
3405[label="144.209.179.235;12pkt 12fpkt", shape=invhouse, color=bisque];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.21.202.184:80, 193.243.202.91:*}[28.1818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.2272%)&lt;BR/&gt; 443: (5.97907%)&lt;BR/&gt; 34295: (1.71898%)&lt;BR/&gt; 53: (1.71898%)&lt;BR/&gt; 33303: (0.298954%)&gt;];
}
596--644[label="1;29pkt 29fpkt"];
596--742[label="0.00819672;1pkt 1fpkt"];
596--1318[label="1;164pkt 164fpkt"];
596--1442[label="0.027027;1pkt 1fpkt"];
596--1491[label="0.208333;20pkt 20fpkt"];
596--1589[label="0.00869565;1pkt 1fpkt"];
596--1799[label="0.0277778;1pkt 1fpkt"];
596--1845[label="0.00227273;1pkt 1fpkt"];
596--1852[label="0.00227273;1pkt 1fpkt"];
596--1853[label="0.00681818;3pkt 3fpkt"];
596--1858[label="0.00909091;4pkt 4fpkt"];
596--1859[label="0.00227273;1pkt 1fpkt"];
596--1862[label="0.00227273;1pkt 1fpkt"];
596--1864[label="0.00681818;3pkt 3fpkt"];
596--1866[label="0.00681818;3pkt 3fpkt"];
596--1867[label="0.00227273;1pkt 1fpkt"];
596--1869[label="0.0136364;6pkt 6fpkt"];
596--1873[label="0.00227273;1pkt 1fpkt"];
596--1883[label="0.00227273;1pkt 1fpkt"];
596--1885[label="0.0136364;6pkt 6fpkt"];
596--1889[label="0.00227273;1pkt 1fpkt"];
596--1895[label="0.0136364;6pkt 6fpkt"];
596--2172[label="1;7pkt 7fpkt"];
596--2249[label="0.157895;3pkt 3fpkt"];
596--2320[label="0.0243902;1pkt 1fpkt"];
596--2532[label="0.00990099;1pkt 1fpkt"];
596--2664[label="1;12pkt 12fpkt"];
596--2860[label="1;6pkt 6fpkt"];
596--3143[label="1;12pkt 12fpkt"];
596--3405[label="1;12pkt 12fpkt"];
2664--3143[label="1;12pkt 12fpkt"];
2664--3405[label="1;12pkt 12fpkt"];
3143--3405[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="193.243.202.91" src_ip="96.21.202.184" src_port="80"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
1299[label="192.4.58.54;s;26pkt 26fpkt", shape=diamond, color=yellow];
1323[label="22.123.8.226;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.4.58.54:27960, *:27960}[57.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27960: (75.9259%)&lt;BR/&gt; 80: (3.7037%)&lt;BR/&gt; 65449: (1.85185%)&lt;BR/&gt; 65360: (1.85185%)&lt;BR/&gt; 12881: (1.85185%)&gt;];
}
1299--1323[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="27960" src_ip="192.4.58.54" src_port="27960"/>
    </slice>
    <from sec="1020575209" usec="0"/>
    <to sec="1020576705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.583469,1.93481,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
1312[label="151.51.203.8;s;82pkt 82fpkt", shape=diamond, color=yellow];
1326[label="220.4.65.150;d;23pkt 23fpkt", shape=diamond, color=yellow];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.51.203.8:*, 220.4.65.150:80}[28.0488%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 443: (6.66667%)&lt;BR/&gt; 1863: (1.90476%)&lt;BR/&gt; 4542: (0.952381%)&lt;BR/&gt; 4541: (0.952381%)&gt;];
}
1312--1326[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="220.4.65.150" dst_port="80" src_ip="151.51.203.8"/>
    </slice>
    <from sec="1020576275" usec="0"/>
    <to sec="1020576708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
284[label="151.51.83.20;d;2640pkt 2640fpkt", shape=diamond, color=yellow];
491[label="96.147.139.32;s;48pkt 48fpkt", shape=diamond, color=yellow];
640[label="96.147.144.184;s;327pkt 327fpkt", shape=diamond, color=yellow];
641[label="96.147.128.170;s;601pkt 601fpkt", shape=diamond, color=yellow];
1270[label="96.147.144.128;s;376pkt 376fpkt", shape=diamond, color=yellow];
1369[label="151.51.83.20;d;1453pkt 1453fpkt", shape=hexagon, color=black];
2400[label="96.147.128.149;124pkt 124fpkt", shape=pentagon, color=darkviolet];
2496[label="96.147.144.176;43pkt 43fpkt", shape=pentagon, color=darkviolet];
2532[label="215.56.165.189;101pkt 101fpkt", shape=pentagon, color=darkviolet];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.147.128.170:*, 151.51.83.20:*}[38.7109%]&lt;BR/&gt;{*:80, 151.51.83.20:*}[21.1836%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.0158%)&lt;BR/&gt; 1214: (7.37791%)&lt;BR/&gt; 53: (3.73709%)&lt;BR/&gt; 6699: (2.45055%)&lt;BR/&gt; 4662: (1.80291%)&gt;];
}
284--444[label="0.994318;350pkt 350fpkt"];
284--491[label="1;48pkt 48fpkt"];
284--640[label="0.993884;325pkt 325fpkt"];
284--641[label="1;601pkt 601fpkt"];
284--1270[label="1;376pkt 376fpkt"];
284--1369[label="1;1453pkt 1453fpkt"];
284--1845[label="0.0430571;40pkt 40fpkt"];
284--1846[label="0.00214247;4pkt 4fpkt"];
284--1852[label="0.00227273;6pkt 6fpkt"];
284--1853[label="0.0128411;16pkt 16fpkt"];
284--1854[label="0.00151515;4pkt 4fpkt"];
284--1855[label="0.00556269;13pkt 13fpkt"];
284--1856[label="0.00801131;17pkt 17fpkt"];
284--1858[label="0.00340909;9pkt 9fpkt"];
284--1859[label="0.0131376;17pkt 17fpkt"];
284--1860[label="0.0095498;21pkt 21fpkt"];
284--1862[label="0.0084317;10pkt 10fpkt"];
284--1864[label="0.00113636;3pkt 3fpkt"];
284--1865[label="0.00679245;9pkt 9fpkt"];
284--1866[label="0.00151515;4pkt 4fpkt"];
284--1867[label="0.0169794;19pkt 19fpkt"];
284--1868[label="0.00189394;5pkt 5fpkt"];
284--1869[label="0.0106572;24pkt 24fpkt"];
284--1870[label="0.00189394;5pkt 5fpkt"];
284--1873[label="0.0430571;40pkt 40fpkt"];
284--1874[label="0.00214247;4pkt 4fpkt"];
284--1878[label="0.00151515;4pkt 4fpkt"];
284--1879[label="0.00556269;13pkt 13fpkt"];
284--1880[label="0.00113636;3pkt 3fpkt"];
284--1881[label="0.00801131;17pkt 17fpkt"];
284--1882[label="0.0095498;21pkt 21fpkt"];
284--1883[label="0.0169794;19pkt 19fpkt"];
284--1884[label="0.00189394;5pkt 5fpkt"];
284--1885[label="0.0106572;24pkt 24fpkt"];
284--1886[label="0.00189394;5pkt 5fpkt"];
284--1889[label="0.0430571;40pkt 40fpkt"];
284--1890[label="0.00214247;4pkt 4fpkt"];
284--1894[label="0.00189394;5pkt 5fpkt"];
284--1895[label="0.0106572;24pkt 24fpkt"];
284--2400[label="1;124pkt 124fpkt"];
284--2496[label="1;43pkt 43fpkt"];
284--2509[label="0.994302;349pkt 349fpkt"];
284--2532[label="0.891089;90pkt 90fpkt"];
284--3053[label="0.994318;350pkt 350fpkt"];
491--1369[label="1;48pkt 48fpkt"];
491--1845[label="0.125;6pkt 6fpkt"];
491--1853[label="0.0208333;1pkt 1fpkt"];
491--1873[label="0.125;6pkt 6fpkt"];
491--1889[label="0.125;6pkt 6fpkt"];
640--1369[label="0.253823;83pkt 83fpkt"];
640--1858[label="0.00917431;3pkt 3fpkt"];
640--1859[label="0.0183486;6pkt 6fpkt"];
640--1860[label="0.0183486;6pkt 6fpkt"];
640--1862[label="0.0122324;4pkt 4fpkt"];
640--1882[label="0.0183486;6pkt 6fpkt"];
641--1369[label="0.18802;113pkt 113fpkt"];
641--1852[label="0.00166389;1pkt 1fpkt"];
641--1853[label="0.00166389;1pkt 1fpkt"];
641--1854[label="0.00166389;1pkt 1fpkt"];
641--1856[label="0.00166389;1pkt 1fpkt"];
641--1858[label="0.00499168;3pkt 3fpkt"];
641--1859[label="0.00332779;2pkt 2fpkt"];
641--1860[label="0.0133111;8pkt 8fpkt"];
641--1862[label="0.00332779;2pkt 2fpkt"];
641--1864[label="0.00499168;3pkt 3fpkt"];
641--1865[label="0.00831947;5pkt 5fpkt"];
641--1866[label="0.00665557;4pkt 4fpkt"];
641--1867[label="0.0183028;11pkt 11fpkt"];
641--1868[label="0.00831947;5pkt 5fpkt"];
641--1869[label="0.0399334;24pkt 24fpkt"];
641--1870[label="0.00831947;5pkt 5fpkt"];
641--1878[label="0.00166389;1pkt 1fpkt"];
641--1880[label="0.00166389;1pkt 1fpkt"];
641--1881[label="0.00166389;1pkt 1fpkt"];
641--1882[label="0.0133111;8pkt 8fpkt"];
641--1883[label="0.0183028;11pkt 11fpkt"];
641--1884[label="0.00831947;5pkt 5fpkt"];
641--1885[label="0.0399334;24pkt 24fpkt"];
641--1886[label="0.00831947;5pkt 5fpkt"];
641--1894[label="0.00831947;5pkt 5fpkt"];
641--1895[label="0.0399334;24pkt 24fpkt"];
1369--1845[label="0.0430571;40pkt 40fpkt"];
1369--1846[label="0.00275292;4pkt 4fpkt"];
1369--1852[label="0.00412939;6pkt 6fpkt"];
1369--1853[label="0.0128411;16pkt 16fpkt"];
1369--1854[label="0.00275292;4pkt 4fpkt"];
1369--1855[label="0.00894701;13pkt 13fpkt"];
1369--1856[label="0.0116999;17pkt 17fpkt"];
1369--1858[label="0.00619408;9pkt 9fpkt"];
1369--1859[label="0.0131376;17pkt 17fpkt"];
1369--1860[label="0.0144529;21pkt 21fpkt"];
1369--1862[label="0.00590219;7pkt 7fpkt"];
1369--1864[label="0.00206469;3pkt 3fpkt"];
1369--1865[label="0.00150943;2pkt 2fpkt"];
1369--1866[label="0.00206469;3pkt 3fpkt"];
1369--1867[label="0.00178731;2pkt 2fpkt"];
1369--1868[label="0.00206469;3pkt 3fpkt"];
1369--1869[label="0.00412939;6pkt 6fpkt"];
1369--1870[label="0.00206469;3pkt 3fpkt"];
1369--1873[label="0.0430571;40pkt 40fpkt"];
1369--1874[label="0.00275292;4pkt 4fpkt"];
1369--1878[label="0.00275292;4pkt 4fpkt"];
1369--1879[label="0.00894701;13pkt 13fpkt"];
1369--1880[label="0.00206469;3pkt 3fpkt"];
1369--1881[label="0.0116999;17pkt 17fpkt"];
1369--1882[label="0.0144529;21pkt 21fpkt"];
1369--1883[label="0.00178731;2pkt 2fpkt"];
1369--1884[label="0.00206469;3pkt 3fpkt"];
1369--1885[label="0.00412939;6pkt 6fpkt"];
1369--1886[label="0.00206469;3pkt 3fpkt"];
1369--1889[label="0.0430571;40pkt 40fpkt"];
1369--1890[label="0.00275292;4pkt 4fpkt"];
1369--1894[label="0.00206469;3pkt 3fpkt"];
1369--1895[label="0.00412939;6pkt 6fpkt"];
1369--2400[label="1;124pkt 124fpkt"];
1369--2496[label="1;43pkt 43fpkt"];
1369--2509[label="0.994302;349pkt 349fpkt"];
1369--2532[label="0.851485;86pkt 86fpkt"];
1369--3053[label="0.994318;350pkt 350fpkt"];
</description>
    <slice>
      <filter dst_ip="151.51.83.20" src_ip="96.147.128.170"/>
      <filter dst_ip="151.51.83.20" src_port="80"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
305[label="166.3.138.88;d;113pkt 113fpkt", shape=diamond, color=yellow];
542[label="97.105.238.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
575[label="216.99.203.225;s;1pkt 1fpkt", shape=diamond, color=yellow];
736[label="17.1.31.173;s;1pkt 1fpkt", shape=diamond, color=yellow];
904[label="8.136.115.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
1113[label="70.172.159.102;s;2pkt 2fpkt", shape=diamond, color=yellow];
1141[label="70.208.223.184;s;2pkt 2fpkt", shape=diamond, color=yellow];
1374[label="166.3.138.88;d;33pkt 33fpkt", shape=hexagon, color=black];
2246[label="70.172.159.102;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2519[label="70.208.223.184;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2658[label="97.105.238.232;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2898[label="70.172.159.102;1pkt 1fpkt", shape=invtriangle, color=brown];
3140[label="97.105.238.232;3pkt 3fpkt", shape=invtriangle, color=brown];
3403[label="97.105.238.232;3pkt 3fpkt", shape=invhouse, color=bisque];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 166.3.138.88:*}[74.5614%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (40.2367%)&lt;BR/&gt; 0: (10.6509%)&lt;BR/&gt; 4736: (3.25444%)&lt;BR/&gt; 4665: (2.66272%)&lt;BR/&gt; 1380: (1.77515%)&gt;];
}
305--542[label="1;1pkt 1fpkt"];
305--575[label="1;1pkt 1fpkt"];
305--736[label="1;1pkt 1fpkt"];
305--904[label="1;1pkt 1fpkt"];
305--1113[label="1;2pkt 2fpkt"];
305--1141[label="1;2pkt 2fpkt"];
305--1374[label="1;33pkt 33fpkt"];
305--1853[label="0.00884956;1pkt 1fpkt"];
305--1859[label="0.00884956;1pkt 1fpkt"];
305--1862[label="0.00884956;1pkt 1fpkt"];
305--1865[label="0.00884956;1pkt 1fpkt"];
305--1867[label="0.00884956;1pkt 1fpkt"];
305--1883[label="0.00884956;1pkt 1fpkt"];
305--2246[label="1;2pkt 2fpkt"];
305--2519[label="1;3pkt 3fpkt"];
305--2658[label="0.666667;2pkt 2fpkt"];
305--2898[label="1;1pkt 1fpkt"];
305--3140[label="0.666667;2pkt 2fpkt"];
305--3403[label="0.666667;2pkt 2fpkt"];
542--1374[label="1;1pkt 1fpkt"];
542--2658[label="1;1pkt 1fpkt"];
542--3140[label="1;1pkt 1fpkt"];
542--3403[label="1;1pkt 1fpkt"];
575--1374[label="1;1pkt 1fpkt"];
736--1374[label="1;1pkt 1fpkt"];
904--1374[label="1;1pkt 1fpkt"];
1113--2246[label="0.5;1pkt 1fpkt"];
1113--2898[label="1;1pkt 1fpkt"];
1141--2519[label="1;2pkt 2fpkt"];
1374--1853[label="0.030303;1pkt 1fpkt"];
1374--1859[label="0.030303;1pkt 1fpkt"];
1374--1862[label="0.030303;1pkt 1fpkt"];
1374--1865[label="0.030303;1pkt 1fpkt"];
1374--1867[label="0.030303;1pkt 1fpkt"];
1374--1883[label="0.030303;1pkt 1fpkt"];
1374--2246[label="0.5;1pkt 1fpkt"];
1374--2519[label="0.333333;1pkt 1fpkt"];
1374--2658[label="0.333333;1pkt 1fpkt"];
1374--3140[label="0.333333;1pkt 1fpkt"];
1374--3403[label="0.333333;1pkt 1fpkt"];
2246--2898[label="1;1pkt 1fpkt"];
2658--3140[label="1;3pkt 3fpkt"];
2658--3403[label="1;3pkt 3fpkt"];
3140--3403[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="166.3.138.88" src_port="4662"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
179[label="166.3.138.88;s;347pkt 347fpkt", shape=diamond, color=yellow];
201[label="8.90.52.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
304[label="8.168.172.133;d;1pkt 1fpkt", shape=diamond, color=yellow];
474[label="97.105.238.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
555[label="214.129.63.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
619[label="17.1.31.173;d;1pkt 1fpkt", shape=diamond, color=yellow];
637[label="216.99.203.225;d;1pkt 1fpkt", shape=diamond, color=yellow];
671[label="214.73.181.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
845[label="8.88.28.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
858[label="8.136.115.135;d;1pkt 1fpkt", shape=diamond, color=yellow];
899[label="8.89.135.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
940[label="8.3.56.116;d;2pkt 2fpkt", shape=diamond, color=yellow];
1027[label="70.172.159.102;d;2pkt 2fpkt", shape=diamond, color=yellow];
1097[label="214.72.85.155;d;1pkt 1fpkt", shape=diamond, color=yellow];
1111[label="70.208.223.184;d;2pkt 2fpkt", shape=diamond, color=yellow];
1112[label="214.222.68.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
1351[label="8.90.52.207;d;1pkt 1fpkt", shape=hexagon, color=black];
1373[label="8.168.172.133;d;1pkt 1fpkt", shape=hexagon, color=black];
1375[label="166.3.138.88;s;103pkt 103fpkt", shape=hexagon, color=black];
1490[label="97.105.238.232;d;1pkt 1fpkt", shape=hexagon, color=black];
1539[label="8.88.28.9;d;1pkt 1fpkt", shape=hexagon, color=black];
2210[label="166.3.138.88;351pkt 351fpkt", shape=pentagon, color=darkviolet];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.3.138.88:*, *:4662}[62.5%]&lt;BR/&gt;{166.3.138.88:4736, *:4665}[33.5227%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (32.8068%)&lt;BR/&gt; 4736: (16.1604%)&lt;BR/&gt; 4665: (15.0061%)&lt;BR/&gt; 4668: (0.425273%)&lt;BR/&gt; 8665: (0.303767%)&gt;];
}
179--201[label="1;1pkt 1fpkt"];
179--304[label="1;1pkt 1fpkt"];
179--474[label="1;1pkt 1fpkt"];
179--555[label="1;1pkt 1fpkt"];
179--619[label="1;1pkt 1fpkt"];
179--637[label="1;1pkt 1fpkt"];
179--671[label="1;1pkt 1fpkt"];
179--845[label="1;1pkt 1fpkt"];
179--858[label="1;1pkt 1fpkt"];
179--899[label="1;1pkt 1fpkt"];
179--940[label="1;2pkt 2fpkt"];
179--1027[label="1;2pkt 2fpkt"];
179--1097[label="1;1pkt 1fpkt"];
179--1111[label="1;2pkt 2fpkt"];
179--1112[label="1;1pkt 1fpkt"];
179--1351[label="1;1pkt 1fpkt"];
179--1373[label="1;1pkt 1fpkt"];
179--1375[label="1;103pkt 103fpkt"];
179--1490[label="1;1pkt 1fpkt"];
179--1539[label="1;1pkt 1fpkt"];
179--1855[label="0.00288184;1pkt 1fpkt"];
179--1856[label="0.00288184;1pkt 1fpkt"];
179--1860[label="0.00288184;1pkt 1fpkt"];
179--1869[label="0.00288184;1pkt 1fpkt"];
179--1879[label="0.00288184;1pkt 1fpkt"];
179--1881[label="0.00288184;1pkt 1fpkt"];
179--1882[label="0.00288184;1pkt 1fpkt"];
179--1885[label="0.00288184;1pkt 1fpkt"];
179--1895[label="0.00288184;1pkt 1fpkt"];
179--2210[label="0.997118;346pkt 346fpkt"];
201--1351[label="1;1pkt 1fpkt"];
201--1375[label="1;1pkt 1fpkt"];
201--2210[label="1;1pkt 1fpkt"];
304--2210[label="1;1pkt 1fpkt"];
474--1375[label="1;1pkt 1fpkt"];
474--1490[label="1;1pkt 1fpkt"];
474--2210[label="1;1pkt 1fpkt"];
555--1375[label="1;1pkt 1fpkt"];
555--2210[label="1;1pkt 1fpkt"];
619--1375[label="1;1pkt 1fpkt"];
619--2210[label="1;1pkt 1fpkt"];
637--1375[label="1;1pkt 1fpkt"];
637--2210[label="1;1pkt 1fpkt"];
671--1375[label="1;1pkt 1fpkt"];
671--2210[label="1;1pkt 1fpkt"];
845--1375[label="1;1pkt 1fpkt"];
845--1539[label="1;1pkt 1fpkt"];
845--2210[label="1;1pkt 1fpkt"];
858--1375[label="1;1pkt 1fpkt"];
858--2210[label="1;1pkt 1fpkt"];
899--1375[label="1;1pkt 1fpkt"];
899--2210[label="1;1pkt 1fpkt"];
940--1375[label="0.5;1pkt 1fpkt"];
940--2210[label="1;2pkt 2fpkt"];
1027--2210[label="1;2pkt 2fpkt"];
1097--1375[label="1;1pkt 1fpkt"];
1097--2210[label="1;1pkt 1fpkt"];
1111--2210[label="1;2pkt 2fpkt"];
1112--2210[label="1;1pkt 1fpkt"];
1351--1375[label="1;1pkt 1fpkt"];
1351--2210[label="1;1pkt 1fpkt"];
1373--1375[label="1;1pkt 1fpkt"];
1373--2210[label="1;1pkt 1fpkt"];
1375--1490[label="1;1pkt 1fpkt"];
1375--1539[label="1;1pkt 1fpkt"];
1375--1855[label="0.00970874;1pkt 1fpkt"];
1375--1856[label="0.00970874;1pkt 1fpkt"];
1375--1860[label="0.00970874;1pkt 1fpkt"];
1375--1869[label="0.00970874;1pkt 1fpkt"];
1375--1879[label="0.00970874;1pkt 1fpkt"];
1375--1881[label="0.00970874;1pkt 1fpkt"];
1375--1882[label="0.00970874;1pkt 1fpkt"];
1375--1885[label="0.00970874;1pkt 1fpkt"];
1375--1895[label="0.00970874;1pkt 1fpkt"];
1375--2210[label="0.990291;102pkt 102fpkt"];
1490--2210[label="1;1pkt 1fpkt"];
1539--2210[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="4662" src_ip="166.3.138.88"/>
      <filter dst_port="4665" src_ip="166.3.138.88" src_port="4736"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
312[label="166.3.56.208;d;17pkt 17fpkt", shape=diamond, color=yellow];
313[label="213.35.45.154;s;5pkt 5fpkt", shape=diamond, color=yellow];
1378[label="166.3.56.208;d;1pkt 1fpkt", shape=hexagon, color=black];
1694[label="213.35.45.154;s;4pkt 4fpkt", shape=hexagon, color=black];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.35.45.154:5001, 166.3.56.208:*}[29.4118%]&lt;BR/&gt;{213.35.45.128:6900, 166.3.56.208:*}[23.5294%]&lt;BR/&gt;{213.35.45.138:6001, 166.3.56.208:*}[23.5294%]&lt;BR/&gt;{213.35.45.210:7431, 166.3.56.208:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (27.7778%)&lt;BR/&gt; 7431: (7.40741%)&lt;BR/&gt; 6900: (7.40741%)&lt;BR/&gt; 6001: (7.40741%)&lt;BR/&gt; 1235: (7.40741%)&gt;];
}
312--313[label="1;5pkt 5fpkt"];
312--1378[label="1;1pkt 1fpkt"];
312--1694[label="1;4pkt 4fpkt"];
312--2590[label="0.3;3pkt 3fpkt"];
313--1378[label="1;1pkt 1fpkt"];
313--1694[label="1;4pkt 4fpkt"];
1378--1694[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.3.56.208" src_ip="213.35.45.154" src_port="5001"/>
      <filter dst_ip="166.3.56.208" src_ip="213.35.45.210" src_port="7431"/>
      <filter dst_ip="166.3.56.208" src_ip="213.35.45.138" src_port="6001"/>
      <filter dst_ip="166.3.56.208" src_ip="213.35.45.128" src_port="6900"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,501,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
324[label="216.182.0.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
1379[label="216.182.0.4;d;1pkt 1fpkt", shape=hexagon, color=black];
1975[label="145.208.113.19;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2751[label="145.208.113.19;3pkt 3fpkt", shape=invtriangle, color=brown];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.113.19:21, 216.182.0.4:2538}[33.3333%]&lt;BR/&gt;{145.208.113.19:80, 207.201.150.21:3365}[33.3333%]&lt;BR/&gt;{145.208.113.19:80, 217.155.124.95:48995}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2538: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 21: (25%)&lt;BR/&gt; 48995: (12.5%)&lt;BR/&gt; 3365: (12.5%)&gt;];
}
324--1379[label="1;1pkt 1fpkt"];
324--1975[label="1;1pkt 1fpkt"];
324--2751[label="1;1pkt 1fpkt"];
1379--1975[label="1;1pkt 1fpkt"];
1379--2751[label="1;1pkt 1fpkt"];
1975--2751[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.124.95" dst_port="48995" src_ip="145.208.113.19" src_port="80"/>
      <filter dst_ip="207.201.150.21" dst_port="3365" src_ip="145.208.113.19" src_port="80"/>
      <filter dst_ip="216.182.0.4" dst_port="2538" src_ip="145.208.113.19" src_port="21"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23004,1.95335,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
226[label="145.208.212.183;d;1pkt 1fpkt", shape=diamond, color=yellow];
227[label="215.144.129.39;s;9pkt 9fpkt", shape=diamond, color=yellow];
1357[label="145.208.212.183;d;1pkt 1fpkt", shape=hexagon, color=black];
1383[label="215.144.129.39;s;2pkt 2fpkt", shape=hexagon, color=black];
1783[label="145.208.212.183;d;1pkt 1fpkt", shape=polygon, color=gold];
1785[label="215.144.129.39;s;2pkt 2fpkt", shape=polygon, color=gold];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.144.129.39:80, 135.246.235.131:*}[66.6667%]&lt;BR/&gt;{215.144.129.39:80, 145.208.212.183:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49341: (18.75%)&lt;BR/&gt; 37442: (9.375%)&lt;BR/&gt; 49283: (3.125%)&lt;BR/&gt; 2748: (3.125%)&gt;];
}
226--227[label="1;1pkt 1fpkt"];
226--1357[label="1;1pkt 1fpkt"];
226--1383[label="1;1pkt 1fpkt"];
226--1783[label="1;1pkt 1fpkt"];
226--1785[label="1;1pkt 1fpkt"];
226--1845[label="1;1pkt 1fpkt"];
226--1873[label="1;1pkt 1fpkt"];
226--1889[label="1;1pkt 1fpkt"];
227--1357[label="1;1pkt 1fpkt"];
227--1383[label="1;2pkt 2fpkt"];
227--1783[label="1;1pkt 1fpkt"];
227--1785[label="1;2pkt 2fpkt"];
227--1845[label="0.111111;1pkt 1fpkt"];
227--1873[label="0.111111;1pkt 1fpkt"];
227--1889[label="0.111111;1pkt 1fpkt"];
1357--1383[label="1;1pkt 1fpkt"];
1357--1783[label="1;1pkt 1fpkt"];
1357--1785[label="1;1pkt 1fpkt"];
1357--1845[label="1;1pkt 1fpkt"];
1357--1873[label="1;1pkt 1fpkt"];
1357--1889[label="1;1pkt 1fpkt"];
1383--1783[label="1;1pkt 1fpkt"];
1383--1785[label="1;2pkt 2fpkt"];
1383--1845[label="0.5;1pkt 1fpkt"];
1383--1873[label="0.5;1pkt 1fpkt"];
1383--1889[label="0.5;1pkt 1fpkt"];
1783--1785[label="1;1pkt 1fpkt"];
1783--1845[label="1;1pkt 1fpkt"];
1783--1873[label="1;1pkt 1fpkt"];
1783--1889[label="1;1pkt 1fpkt"];
1785--1845[label="0.5;1pkt 1fpkt"];
1785--1873[label="0.5;1pkt 1fpkt"];
1785--1889[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.246.235.131" src_ip="215.144.129.39" src_port="80"/>
      <filter dst_ip="145.208.212.183" src_ip="215.144.129.39" src_port="80"/>
    </slice>
    <from sec="1020574819" usec="0"/>
    <to sec="1020575172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
72[label="151.51.182.63;s;4pkt 4fpkt", shape=diamond, color=yellow];
73[label="96.131.101.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
903[label="22.102.167.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
1389[label="151.51.182.63;s;4pkt 4fpkt", shape=hexagon, color=black];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.51.182.63:1265, 22.102.167.69:6699}[25%]&lt;BR/&gt;{151.51.182.63:1164, 16.203.8.192:1863}[25%]&lt;BR/&gt;{151.51.182.63:0, 18.88.56.192:0}[25%]&lt;BR/&gt;{151.51.182.63:6699, 96.131.101.202:28967}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (30%)&lt;BR/&gt; 0: (20%)&lt;BR/&gt; 28967: (15%)&lt;BR/&gt; 1265: (15%)&lt;BR/&gt; 1863: (10%)&gt;];
}
72--73[label="1;1pkt 1fpkt"];
72--903[label="1;1pkt 1fpkt"];
72--1389[label="1;4pkt 4fpkt"];
73--1389[label="1;1pkt 1fpkt"];
903--1389[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="96.131.101.202" dst_port="28967" src_ip="151.51.182.63" src_port="6699"/>
      <filter dst_ip="18.88.56.192" src_ip="151.51.182.63"/>
      <filter dst_ip="16.203.8.192" dst_port="1863" src_ip="151.51.182.63" src_port="1164"/>
      <filter dst_ip="22.102.167.69" dst_port="6699" src_ip="151.51.182.63" src_port="1265"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
138[label="216.217.95.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
1393[label="216.217.95.98;s;1pkt 1fpkt", shape=hexagon, color=black];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.217.95.98:21735, 135.246.219.154:4662}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21735: (50%)&lt;BR/&gt; 4662: (50%)&gt;];
}
138--1393[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.246.219.154" dst_port="4662" src_ip="216.217.95.98" src_port="21735"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020575300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
427[label="108.246.236.136;s;146pkt 146fpkt", shape=diamond, color=yellow];
472[label="108.246.236.136;d;146pkt 146fpkt", shape=diamond, color=yellow];
1399[label="108.246.236.136;s;124pkt 124fpkt", shape=hexagon, color=black];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{108.246.236.136:13364, 108.246.236.136:*}[66.4384%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13364: (33.2933%)&lt;BR/&gt; 80: (3.48558%)&lt;BR/&gt; 0: (2.88462%)&lt;BR/&gt; 13502: (2.52404%)&lt;BR/&gt; 53: (2.16346%)&gt;];
}
427--472[label="1;146pkt 146fpkt"];
427--1399[label="1;124pkt 124fpkt"];
427--1846[label="0.00684932;1pkt 1fpkt"];
427--1854[label="0.0136986;2pkt 2fpkt"];
427--1855[label="0.00684932;1pkt 1fpkt"];
427--1856[label="0.00684932;1pkt 1fpkt"];
427--1860[label="0.00684932;1pkt 1fpkt"];
427--1868[label="0.0205479;3pkt 3fpkt"];
427--1869[label="0.00684932;1pkt 1fpkt"];
427--1870[label="0.0273973;4pkt 4fpkt"];
427--1874[label="0.00684932;1pkt 1fpkt"];
427--1878[label="0.0136986;2pkt 2fpkt"];
427--1879[label="0.00684932;1pkt 1fpkt"];
427--1880[label="0.0136986;2pkt 2fpkt"];
427--1881[label="0.00684932;1pkt 1fpkt"];
427--1882[label="0.00684932;1pkt 1fpkt"];
427--1884[label="0.0205479;3pkt 3fpkt"];
427--1885[label="0.00684932;1pkt 1fpkt"];
427--1886[label="0.0273973;4pkt 4fpkt"];
427--1890[label="0.00684932;1pkt 1fpkt"];
427--1894[label="0.0205479;3pkt 3fpkt"];
427--1895[label="0.00684932;1pkt 1fpkt"];
472--1399[label="1;124pkt 124fpkt"];
472--1846[label="0.00684932;1pkt 1fpkt"];
472--1854[label="0.0136986;2pkt 2fpkt"];
472--1855[label="0.00684932;1pkt 1fpkt"];
472--1856[label="0.00684932;1pkt 1fpkt"];
472--1860[label="0.00684932;1pkt 1fpkt"];
472--1868[label="0.0205479;3pkt 3fpkt"];
472--1869[label="0.00684932;1pkt 1fpkt"];
472--1870[label="0.0273973;4pkt 4fpkt"];
472--1874[label="0.00684932;1pkt 1fpkt"];
472--1878[label="0.0136986;2pkt 2fpkt"];
472--1879[label="0.00684932;1pkt 1fpkt"];
472--1880[label="0.0136986;2pkt 2fpkt"];
472--1881[label="0.00684932;1pkt 1fpkt"];
472--1882[label="0.00684932;1pkt 1fpkt"];
472--1884[label="0.0205479;3pkt 3fpkt"];
472--1885[label="0.00684932;1pkt 1fpkt"];
472--1886[label="0.0273973;4pkt 4fpkt"];
472--1890[label="0.00684932;1pkt 1fpkt"];
472--1894[label="0.0205479;3pkt 3fpkt"];
472--1895[label="0.00684932;1pkt 1fpkt"];
1399--1846[label="0.00806452;1pkt 1fpkt"];
1399--1854[label="0.016129;2pkt 2fpkt"];
1399--1855[label="0.00806452;1pkt 1fpkt"];
1399--1856[label="0.00806452;1pkt 1fpkt"];
1399--1860[label="0.00806452;1pkt 1fpkt"];
1399--1868[label="0.0241935;3pkt 3fpkt"];
1399--1869[label="0.00806452;1pkt 1fpkt"];
1399--1870[label="0.0322581;4pkt 4fpkt"];
1399--1874[label="0.00806452;1pkt 1fpkt"];
1399--1878[label="0.016129;2pkt 2fpkt"];
1399--1879[label="0.00806452;1pkt 1fpkt"];
1399--1880[label="0.016129;2pkt 2fpkt"];
1399--1881[label="0.00806452;1pkt 1fpkt"];
1399--1882[label="0.00806452;1pkt 1fpkt"];
1399--1884[label="0.0241935;3pkt 3fpkt"];
1399--1885[label="0.00806452;1pkt 1fpkt"];
1399--1886[label="0.0322581;4pkt 4fpkt"];
1399--1890[label="0.00806452;1pkt 1fpkt"];
1399--1894[label="0.0241935;3pkt 3fpkt"];
1399--1895[label="0.00806452;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="108.246.236.136" src_ip="108.246.236.136" src_port="13364"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
456[label="213.129.11.195;s;112pkt 112fpkt", shape=diamond, color=yellow];
1402[label="193.243.195.115;d;115pkt 115fpkt", shape=hexagon, color=black];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.129.11.195:*, 193.243.195.115:80}[81.7518%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4581%)&lt;BR/&gt; 25: (1.10132%)&lt;BR/&gt; 1664: (0.440529%)&lt;BR/&gt; 1663: (0.440529%)&lt;BR/&gt; 1662: (0.440529%)&gt;];
}
456--1402[label="0.803571;90pkt 90fpkt"];
1402--1845[label="0.026087;3pkt 3fpkt"];
1402--1873[label="0.026087;3pkt 3fpkt"];
1402--1889[label="0.026087;3pkt 3fpkt"];
1402--1994[label="0.0210526;2pkt 2fpkt"];
1402--2034[label="0.0923077;6pkt 6fpkt"];
1402--2146[label="0.166667;2pkt 2fpkt"];
1402--2763[label="0.0212766;2pkt 2fpkt"];
1402--2846[label="0.166667;2pkt 2fpkt"];
1402--3198[label="0.0212766;2pkt 2fpkt"];
1402--3243[label="0.166667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.243.195.115" dst_port="80" src_ip="213.129.11.195"/>
    </slice>
    <from sec="1020574806" usec="0"/>
    <to sec="1020575112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.761847,1.86949,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
367[label="201.27.184.23;d;100pkt 100fpkt", shape=diamond, color=yellow];
369[label="145.208.60.134;s;100pkt 100fpkt", shape=diamond, color=yellow];
1403[label="201.27.184.23;d;100pkt 100fpkt", shape=hexagon, color=black];
1406[label="145.208.60.134;s;100pkt 100fpkt", shape=hexagon, color=black];
2961[label="145.208.60.134;172pkt 172fpkt", shape=invtriangle, color=brown];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.60.134:*, 201.27.184.23:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 6394: (0.437063%)&lt;BR/&gt; 6393: (0.437063%)&lt;BR/&gt; 6392: (0.437063%)&lt;BR/&gt; 6391: (0.437063%)&gt;];
}
367--369[label="1;100pkt 100fpkt"];
367--1403[label="1;100pkt 100fpkt"];
367--1406[label="1;100pkt 100fpkt"];
367--1869[label="0.33;33pkt 33fpkt"];
367--1885[label="0.33;33pkt 33fpkt"];
367--1895[label="0.33;33pkt 33fpkt"];
367--2961[label="1;100pkt 100fpkt"];
369--1403[label="1;100pkt 100fpkt"];
369--1406[label="1;100pkt 100fpkt"];
369--1869[label="0.33;33pkt 33fpkt"];
369--1885[label="0.33;33pkt 33fpkt"];
369--1895[label="0.33;33pkt 33fpkt"];
369--2961[label="1;100pkt 100fpkt"];
1403--1406[label="1;100pkt 100fpkt"];
1403--1869[label="0.33;33pkt 33fpkt"];
1403--1885[label="0.33;33pkt 33fpkt"];
1403--1895[label="0.33;33pkt 33fpkt"];
1403--2961[label="1;100pkt 100fpkt"];
1406--1869[label="0.33;33pkt 33fpkt"];
1406--1885[label="0.33;33pkt 33fpkt"];
1406--1895[label="0.33;33pkt 33fpkt"];
1406--2961[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_ip="201.27.184.23" dst_port="80" src_ip="145.208.60.134"/>
    </slice>
    <from sec="1020574892" usec="0"/>
    <to sec="1020576266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
132[label="151.38.194.16;s;41pkt 41fpkt", shape=diamond, color=yellow];
177[label="17.192.106.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
311[label="22.35.145.24;d;17pkt 17fpkt", shape=diamond, color=yellow];
382[label="22.112.189.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
1416[label="17.192.106.17;d;1pkt 1fpkt", shape=hexagon, color=black];
1604[label="22.35.145.24;d;17pkt 17fpkt", shape=hexagon, color=black];
1966[label="151.38.194.16;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2745[label="151.38.194.16;42pkt 42fpkt", shape=invtriangle, color=brown];
3188[label="151.38.194.16;41pkt 41fpkt", shape=invhouse, color=bisque];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.38.194.16:*, 22.35.145.24:6346}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 2211: (1.47783%)&lt;BR/&gt; 2194: (1.47783%)&lt;BR/&gt; 2177: (1.47783%)&lt;BR/&gt; 2165: (1.47783%)&gt;];
}
132--177[label="1;1pkt 1fpkt"];
132--311[label="1;17pkt 17fpkt"];
132--382[label="1;1pkt 1fpkt"];
132--1416[label="1;1pkt 1fpkt"];
132--1604[label="1;17pkt 17fpkt"];
132--1966[label="1;41pkt 41fpkt"];
132--2745[label="1;41pkt 41fpkt"];
132--3188[label="0.97561;40pkt 40fpkt"];
177--1416[label="1;1pkt 1fpkt"];
177--1966[label="1;1pkt 1fpkt"];
177--2745[label="1;1pkt 1fpkt"];
311--1604[label="1;17pkt 17fpkt"];
311--1966[label="1;17pkt 17fpkt"];
311--2745[label="1;17pkt 17fpkt"];
311--3188[label="1;17pkt 17fpkt"];
382--1966[label="1;1pkt 1fpkt"];
382--2745[label="1;1pkt 1fpkt"];
382--3188[label="1;1pkt 1fpkt"];
1416--1966[label="1;1pkt 1fpkt"];
1416--2745[label="1;1pkt 1fpkt"];
1604--1966[label="1;17pkt 17fpkt"];
1604--2745[label="1;17pkt 17fpkt"];
1604--3188[label="1;17pkt 17fpkt"];
1966--2745[label="1;42pkt 42fpkt"];
1966--3188[label="1;41pkt 41fpkt"];
2745--3188[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="22.35.145.24" dst_port="6346" src_ip="151.38.194.16"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23004,1.95335,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
211[label="151.51.50.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
212[label="198.91.163.156;s;1pkt 1fpkt", shape=diamond, color=yellow];
1352[label="151.51.50.38;d;1pkt 1fpkt", shape=hexagon, color=black];
1419[label="198.91.163.156;s;1pkt 1fpkt", shape=hexagon, color=black];
1788[label="151.51.50.38;d;1pkt 1fpkt", shape=polygon, color=gold];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.91.163.156:8068, 151.51.50.38:49177}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49177: (50%)&lt;BR/&gt; 8068: (50%)&gt;];
}
211--212[label="1;1pkt 1fpkt"];
211--1352[label="1;1pkt 1fpkt"];
211--1419[label="1;1pkt 1fpkt"];
211--1788[label="1;1pkt 1fpkt"];
212--1352[label="1;1pkt 1fpkt"];
212--1419[label="1;1pkt 1fpkt"];
212--1788[label="1;1pkt 1fpkt"];
1352--1419[label="1;1pkt 1fpkt"];
1352--1788[label="1;1pkt 1fpkt"];
1419--1788[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.51.50.38" dst_port="49177" src_ip="198.91.163.156" src_port="8068"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
84[label="192.3.106.160;d;572pkt 572fpkt", shape=diamond, color=yellow];
232[label="152.17.207.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
413[label="172.141.173.61;s;1pkt 1fpkt", shape=diamond, color=yellow];
450[label="18.170.74.189;s;1pkt 1fpkt", shape=diamond, color=yellow];
505[label="70.16.151.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
717[label="16.192.76.184;s;7pkt 7fpkt", shape=diamond, color=yellow];
820[label="215.219.128.194;s;179pkt 179fpkt", shape=diamond, color=yellow];
1428[label="192.3.106.160;d;444pkt 444fpkt", shape=hexagon, color=black];
1478[label="70.16.151.170;s;1pkt 1fpkt", shape=hexagon, color=black];
2689[label="192.69.211.245;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.219.128.194:80, 192.3.106.160:*}[53.913%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.1311%)&lt;BR/&gt; 21: (0.819672%)&lt;BR/&gt; 0: (0.327869%)&lt;BR/&gt; 113: (0.286885%)&lt;BR/&gt; 5190: (0.245902%)&gt;];
}
84--232[label="1;1pkt 1fpkt"];
84--380[label="1;81pkt 81fpkt"];
84--413[label="1;1pkt 1fpkt"];
84--435[label="0.00625;1pkt 1fpkt"];
84--450[label="1;1pkt 1fpkt"];
84--505[label="1;1pkt 1fpkt"];
84--717[label="1;7pkt 7fpkt"];
84--742[label="0.0163934;2pkt 2fpkt"];
84--820[label="1;179pkt 179fpkt"];
84--1428[label="1;444pkt 444fpkt"];
84--1478[label="1;1pkt 1fpkt"];
84--1589[label="0.0173913;2pkt 2fpkt"];
84--1845[label="0.0367133;21pkt 21fpkt"];
84--1853[label="0.0524476;30pkt 30fpkt"];
84--1859[label="0.0227273;13pkt 13fpkt"];
84--1862[label="0.0227273;13pkt 13fpkt"];
84--1865[label="0.0157343;9pkt 9fpkt"];
84--1867[label="0.013986;8pkt 8fpkt"];
84--1869[label="0.00174825;1pkt 1fpkt"];
84--1873[label="0.0367133;21pkt 21fpkt"];
84--1883[label="0.013986;8pkt 8fpkt"];
84--1885[label="0.00174825;1pkt 1fpkt"];
84--1889[label="0.0367133;21pkt 21fpkt"];
84--1895[label="0.00174825;1pkt 1fpkt"];
84--2665[label="1;81pkt 81fpkt"];
84--2689[label="0.769231;10pkt 10fpkt"];
232--1428[label="1;1pkt 1fpkt"];
413--1428[label="1;1pkt 1fpkt"];
450--1428[label="1;1pkt 1fpkt"];
505--1428[label="1;1pkt 1fpkt"];
505--1478[label="1;1pkt 1fpkt"];
717--1428[label="1;7pkt 7fpkt"];
820--1428[label="1;179pkt 179fpkt"];
1428--1478[label="1;1pkt 1fpkt"];
1428--1589[label="0.0173913;2pkt 2fpkt"];
1428--1845[label="0.0472973;21pkt 21fpkt"];
1428--1853[label="0.0675676;30pkt 30fpkt"];
1428--1859[label="0.0292793;13pkt 13fpkt"];
1428--1862[label="0.0292793;13pkt 13fpkt"];
1428--1865[label="0.0202703;9pkt 9fpkt"];
1428--1867[label="0.018018;8pkt 8fpkt"];
1428--1869[label="0.00225225;1pkt 1fpkt"];
1428--1873[label="0.0472973;21pkt 21fpkt"];
1428--1883[label="0.018018;8pkt 8fpkt"];
1428--1885[label="0.00225225;1pkt 1fpkt"];
1428--1889[label="0.0472973;21pkt 21fpkt"];
1428--1895[label="0.00225225;1pkt 1fpkt"];
1428--2665[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_ip="192.3.106.160" src_ip="215.219.128.194" src_port="80"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
346[label="151.38.164.167;s;16pkt 16fpkt", shape=diamond, color=yellow];
370[label="22.112.143.143;d;2pkt 2fpkt", shape=diamond, color=yellow];
1007[label="17.197.60.155;d;3pkt 3fpkt", shape=diamond, color=yellow];
1433[label="151.38.164.167;s;7pkt 7fpkt", shape=hexagon, color=black];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.38.164.167:*, 22.79.64.93:1214}[31.25%]&lt;BR/&gt;{151.38.164.167:*, 22.71.141.177:1214}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 22026: (5.35714%)&lt;BR/&gt; 21963: (5.35714%)&lt;BR/&gt; 21915: (5.35714%)&lt;BR/&gt; 21851: (5.35714%)&gt;];
}
346--370[label="1;2pkt 2fpkt"];
346--1007[label="1;3pkt 3fpkt"];
346--1433[label="1;7pkt 7fpkt"];
370--1433[label="1;2pkt 2fpkt"];
1007--1433[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="22.71.141.177" dst_port="1214" src_ip="151.38.164.167"/>
      <filter dst_ip="22.79.64.93" dst_port="1214" src_ip="151.38.164.167"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
59[label="198.50.26.120;s;1pkt 1fpkt", shape=diamond, color=yellow];
60[label="151.51.25.219;d;21pkt 21fpkt", shape=diamond, color=yellow];
260[label="18.5.58.106;s;1pkt 1fpkt", shape=diamond, color=yellow];
391[label="70.4.138.176;s;1pkt 1fpkt", shape=diamond, color=yellow];
1202[label="216.7.208.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
1439[label="198.50.26.120;s;1pkt 1fpkt", shape=hexagon, color=black];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 151.51.25.219:6699}[47.619%]&lt;BR/&gt;{17.77.116.95:6699, 151.51.25.219:*}[33.3333%]&lt;BR/&gt;{116.18.220.126:*, 151.51.25.219:*}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1453: (5.76923%)&lt;BR/&gt; 3290: (3.84615%)&lt;BR/&gt; 1464: (3.84615%)&lt;BR/&gt; 1148: (3.84615%)&gt;];
}
59--60[label="1;1pkt 1fpkt"];
59--1439[label="1;1pkt 1fpkt"];
60--260[label="1;1pkt 1fpkt"];
60--391[label="1;1pkt 1fpkt"];
60--1202[label="1;1pkt 1fpkt"];
60--1439[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.51.25.219" src_ip="116.18.220.126"/>
      <filter dst_ip="151.51.25.219" dst_port="6699"/>
      <filter dst_ip="151.51.25.219" src_ip="17.77.116.95" src_port="6699"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,501,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
401[label="150.82.103.239;s;1pkt 1fpkt", shape=diamond, color=yellow];
467[label="141.26.155.113;d;1pkt 1fpkt", shape=diamond, color=yellow];
1444[label="150.82.103.239;s;1pkt 1fpkt", shape=hexagon, color=black];
1527[label="141.26.155.113;d;1pkt 1fpkt", shape=hexagon, color=black];
2672[label="150.82.103.239;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.82.103.239:21, 141.26.155.113:1193}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1193: (50%)&lt;BR/&gt; 21: (50%)&gt;];
}
401--467[label="1;1pkt 1fpkt"];
401--1444[label="1;1pkt 1fpkt"];
401--1527[label="1;1pkt 1fpkt"];
401--2672[label="1;1pkt 1fpkt"];
467--1444[label="1;1pkt 1fpkt"];
467--1527[label="1;1pkt 1fpkt"];
467--2672[label="1;1pkt 1fpkt"];
1444--1527[label="1;1pkt 1fpkt"];
1444--2672[label="1;1pkt 1fpkt"];
1527--2672[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.26.155.113" dst_port="1193" src_ip="150.82.103.239" src_port="21"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020575602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
608[label="192.10.18.196;d;61pkt 61fpkt", shape=diamond, color=yellow];
673[label="220.151.254.158;s;11pkt 11fpkt", shape=diamond, color=yellow];
1446[label="192.10.18.196;d;48pkt 48fpkt", shape=hexagon, color=black];
1576[label="220.151.254.158;s;11pkt 11fpkt", shape=hexagon, color=black];
1979[label="220.151.254.20;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.151.254.20:80, 192.10.18.196:*}[34.4262%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.0921%)&lt;BR/&gt; 8002: (6.25%)&lt;BR/&gt; 1254: (1.31579%)&lt;BR/&gt; 1253: (1.31579%)&lt;BR/&gt; 1252: (1.31579%)&gt;];
}
608--673[label="1;11pkt 11fpkt"];
608--1446[label="1;48pkt 48fpkt"];
608--1576[label="1;11pkt 11fpkt"];
608--1862[label="0.163934;10pkt 10fpkt"];
608--1979[label="1;21pkt 21fpkt"];
673--1446[label="0.727273;8pkt 8fpkt"];
673--1576[label="1;11pkt 11fpkt"];
673--1862[label="0.181818;2pkt 2fpkt"];
1446--1576[label="0.727273;8pkt 8fpkt"];
1446--1862[label="0.208333;10pkt 10fpkt"];
1446--1979[label="0.666667;14pkt 14fpkt"];
1576--1862[label="0.181818;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.10.18.196" src_ip="220.151.254.20" src_port="80"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22557,1.8707,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
583[label="164.99.165.116;d;5pkt 5fpkt", shape=diamond, color=yellow];
645[label="145.208.213.120;s;5pkt 5fpkt", shape=diamond, color=yellow];
1451[label="164.99.165.116;d;5pkt 5fpkt", shape=hexagon, color=black];
1452[label="145.208.213.120;s;5pkt 5fpkt", shape=hexagon, color=black];
1797[label="164.99.165.116;d;5pkt 5fpkt", shape=polygon, color=gold];
1798[label="145.208.213.120;s;5pkt 5fpkt", shape=polygon, color=gold];
2297[label="145.208.213.120;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2928[label="145.208.213.120;4pkt 4fpkt", shape=invtriangle, color=brown];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.213.120:1034, 164.99.165.116:21}[20%]&lt;BR/&gt;{145.208.213.120:1035, 164.99.165.116:11244}[20%]&lt;BR/&gt;{145.208.213.120:1036, 164.99.165.116:11247}[20%]&lt;BR/&gt;{145.208.213.120:1037, 164.99.165.116:11251}[20%]&lt;BR/&gt;{145.208.213.120:1038, 164.99.165.116:11255}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11255: (10.5263%)&lt;BR/&gt; 11251: (10.5263%)&lt;BR/&gt; 11247: (10.5263%)&lt;BR/&gt; 11244: (10.5263%)&lt;BR/&gt; 1038: (10.5263%)&gt;];
}
583--645[label="1;5pkt 5fpkt"];
583--1451[label="1;5pkt 5fpkt"];
583--1452[label="1;5pkt 5fpkt"];
583--1797[label="1;5pkt 5fpkt"];
583--1798[label="1;5pkt 5fpkt"];
583--2297[label="1;4pkt 4fpkt"];
583--2928[label="1;4pkt 4fpkt"];
645--1451[label="1;5pkt 5fpkt"];
645--1452[label="1;5pkt 5fpkt"];
645--1797[label="1;5pkt 5fpkt"];
645--1798[label="1;5pkt 5fpkt"];
645--2297[label="1;4pkt 4fpkt"];
645--2928[label="1;4pkt 4fpkt"];
1451--1452[label="1;5pkt 5fpkt"];
1451--1797[label="1;5pkt 5fpkt"];
1451--1798[label="1;5pkt 5fpkt"];
1451--2297[label="1;4pkt 4fpkt"];
1451--2928[label="1;4pkt 4fpkt"];
1452--1797[label="1;5pkt 5fpkt"];
1452--1798[label="1;5pkt 5fpkt"];
1452--2297[label="1;4pkt 4fpkt"];
1452--2928[label="1;4pkt 4fpkt"];
1797--1798[label="1;5pkt 5fpkt"];
1797--2297[label="1;4pkt 4fpkt"];
1797--2928[label="1;4pkt 4fpkt"];
1798--2297[label="1;4pkt 4fpkt"];
1798--2928[label="1;4pkt 4fpkt"];
2297--2928[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="164.99.165.116" dst_port="11255" src_ip="145.208.213.120" src_port="1038"/>
      <filter dst_ip="164.99.165.116" dst_port="11251" src_ip="145.208.213.120" src_port="1037"/>
      <filter dst_ip="164.99.165.116" dst_port="11247" src_ip="145.208.213.120" src_port="1036"/>
      <filter dst_ip="164.99.165.116" dst_port="11244" src_ip="145.208.213.120" src_port="1035"/>
      <filter dst_ip="164.99.165.116" dst_port="21" src_ip="145.208.213.120" src_port="1034"/>
    </slice>
    <from sec="1020575255" usec="0"/>
    <to sec="1020575299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
649[label="151.51.144.36;d;179pkt 179fpkt", shape=diamond, color=yellow];
716[label="18.19.3.208;s;1pkt 1fpkt", shape=diamond, color=yellow];
1454[label="151.51.144.36;d;179pkt 179fpkt", shape=hexagon, color=black];
1479[label="18.19.3.208;s;1pkt 1fpkt", shape=hexagon, color=black];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 151.51.144.36:0}[78.2123%]&lt;BR/&gt;{*:80, 151.51.144.36:*}[21.7877%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (77.7778%)&lt;BR/&gt; 80: (11.1111%)&lt;BR/&gt; 4564: (0.555556%)&lt;BR/&gt; 4961: (0.277778%)&lt;BR/&gt; 4915: (0.277778%)&gt;];
}
649--716[label="1;1pkt 1fpkt"];
649--1454[label="1;179pkt 179fpkt"];
649--1479[label="1;1pkt 1fpkt"];
649--1845[label="0.00558659;1pkt 1fpkt"];
649--1859[label="0.00558659;1pkt 1fpkt"];
649--1862[label="0.00558659;1pkt 1fpkt"];
649--1873[label="0.00558659;1pkt 1fpkt"];
649--1889[label="0.00558659;1pkt 1fpkt"];
716--1454[label="1;1pkt 1fpkt"];
716--1479[label="1;1pkt 1fpkt"];
1454--1479[label="1;1pkt 1fpkt"];
1454--1845[label="0.00558659;1pkt 1fpkt"];
1454--1859[label="0.00558659;1pkt 1fpkt"];
1454--1862[label="0.00558659;1pkt 1fpkt"];
1454--1873[label="0.00558659;1pkt 1fpkt"];
1454--1889[label="0.00558659;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.51.144.36" src_port="80"/>
      <filter dst_ip="151.51.144.36"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
189[label="70.177.119.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
190[label="192.10.216.62;s;597pkt 597fpkt", shape=diamond, color=yellow];
344[label="8.86.98.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
1159[label="97.211.22.84;d;5pkt 5fpkt", shape=diamond, color=yellow];
1205[label="89.0.168.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
1285[label="8.211.41.158;d;5pkt 5fpkt", shape=diamond, color=yellow];
1286[label="8.95.168.55;d;1pkt 1fpkt", shape=diamond, color=yellow];
1287[label="97.73.233.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
1460[label="70.177.119.33;d;1pkt 1fpkt", shape=hexagon, color=black];
1537[label="8.86.98.153;d;1pkt 1fpkt", shape=hexagon, color=black];
1758[label="89.0.168.142;d;1pkt 1fpkt", shape=hexagon, color=black];
2132[label="192.10.216.62;665pkt 665fpkt", shape=pentagon, color=darkviolet];
2836[label="192.10.216.62;666pkt 666fpkt", shape=invtriangle, color=brown];
3237[label="192.10.216.62;666pkt 666fpkt", shape=invhouse, color=bisque];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.10.216.62:*, *:8888}[66.7656%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (33.8629%)&lt;BR/&gt; 7777: (6.451%)&lt;BR/&gt; 4444: (2.45023%)&lt;BR/&gt; 5555: (1.37825%)&lt;BR/&gt; 4567: (1.01455%)&gt;];
}
189--190[label="1;1pkt 1fpkt"];
189--1460[label="1;1pkt 1fpkt"];
189--2132[label="1;1pkt 1fpkt"];
189--2836[label="1;1pkt 1fpkt"];
189--3237[label="1;1pkt 1fpkt"];
190--344[label="1;1pkt 1fpkt"];
190--1159[label="0.2;1pkt 1fpkt"];
190--1205[label="1;1pkt 1fpkt"];
190--1285[label="0.2;1pkt 1fpkt"];
190--1286[label="1;1pkt 1fpkt"];
190--1287[label="1;1pkt 1fpkt"];
190--1460[label="1;1pkt 1fpkt"];
190--1537[label="1;1pkt 1fpkt"];
190--1758[label="1;1pkt 1fpkt"];
190--2132[label="0.998325;596pkt 596fpkt"];
190--2836[label="1;597pkt 597fpkt"];
190--3237[label="1;597pkt 597fpkt"];
344--1537[label="1;1pkt 1fpkt"];
344--2132[label="1;1pkt 1fpkt"];
344--2836[label="1;1pkt 1fpkt"];
344--3237[label="1;1pkt 1fpkt"];
1159--1481[label="0.8;4pkt 4fpkt"];
1159--2132[label="0.2;1pkt 1fpkt"];
1159--2470[label="0.8;4pkt 4fpkt"];
1159--2836[label="0.2;1pkt 1fpkt"];
1159--3031[label="0.8;4pkt 4fpkt"];
1159--3237[label="0.2;1pkt 1fpkt"];
1205--1758[label="1;1pkt 1fpkt"];
1205--2132[label="1;1pkt 1fpkt"];
1205--2836[label="1;1pkt 1fpkt"];
1205--3237[label="1;1pkt 1fpkt"];
1285--1481[label="0.8;4pkt 4fpkt"];
1285--2132[label="0.2;1pkt 1fpkt"];
1285--2470[label="0.8;4pkt 4fpkt"];
1285--2836[label="0.2;1pkt 1fpkt"];
1285--3031[label="0.8;4pkt 4fpkt"];
1285--3237[label="0.2;1pkt 1fpkt"];
1286--2132[label="1;1pkt 1fpkt"];
1286--2836[label="1;1pkt 1fpkt"];
1286--3237[label="1;1pkt 1fpkt"];
1287--2132[label="1;1pkt 1fpkt"];
1287--2836[label="1;1pkt 1fpkt"];
1287--3237[label="1;1pkt 1fpkt"];
1460--2132[label="1;1pkt 1fpkt"];
1460--2836[label="1;1pkt 1fpkt"];
1460--3237[label="1;1pkt 1fpkt"];
1537--2132[label="1;1pkt 1fpkt"];
1537--2836[label="1;1pkt 1fpkt"];
1537--3237[label="1;1pkt 1fpkt"];
1758--2132[label="1;1pkt 1fpkt"];
1758--2836[label="1;1pkt 1fpkt"];
1758--3237[label="1;1pkt 1fpkt"];
2132--2836[label="1;665pkt 665fpkt"];
2132--3237[label="1;665pkt 665fpkt"];
2836--3237[label="1;666pkt 666fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="192.10.216.62"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
770[label="222.191.114.193;d;130pkt 130fpkt", shape=diamond, color=yellow];
779[label="193.243.202.91;s;570pkt 570fpkt", shape=diamond, color=yellow];
1227[label="96.21.202.184;d;164pkt 164fpkt", shape=diamond, color=yellow];
2220[label="193.243.202.91;573pkt 573fpkt", shape=pentagon, color=darkviolet];
2883[label="193.243.202.91;573pkt 573fpkt", shape=invtriangle, color=brown];
3262[label="193.243.202.91;573pkt 573fpkt", shape=invhouse, color=bisque];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.243.202.91:*, 222.191.114.193:80}[22.6876%]&lt;BR/&gt;{193.243.202.91:*, 96.21.202.184:80}[21.815%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.4959%)&lt;BR/&gt; 443: (3.87147%)&lt;BR/&gt; 34295: (2.6326%)&lt;BR/&gt; 53: (2.6326%)&lt;BR/&gt; 65040: (0.0967867%)&gt;];
}
770--779[label="1;130pkt 130fpkt"];
770--1860[label="0.130769;17pkt 17fpkt"];
770--1882[label="0.130769;17pkt 17fpkt"];
770--2220[label="1;130pkt 130fpkt"];
770--2883[label="1;130pkt 130fpkt"];
770--3262[label="1;130pkt 130fpkt"];
779--1227[label="1;164pkt 164fpkt"];
779--1418[label="0.025641;1pkt 1fpkt"];
779--1482[label="0.0322581;1pkt 1fpkt"];
779--1820[label="0.037037;1pkt 1fpkt"];
779--1846[label="0.00350877;2pkt 2fpkt"];
779--1854[label="0.00526316;3pkt 3fpkt"];
779--1860[label="0.0298246;17pkt 17fpkt"];
779--1865[label="0.00701754;4pkt 4fpkt"];
779--1867[label="0.0105263;6pkt 6fpkt"];
779--1868[label="0.0122807;7pkt 7fpkt"];
779--1869[label="0.0157895;9pkt 9fpkt"];
779--1870[label="0.00701754;4pkt 4fpkt"];
779--1874[label="0.00350877;2pkt 2fpkt"];
779--1878[label="0.00526316;3pkt 3fpkt"];
779--1880[label="0.00350877;2pkt 2fpkt"];
779--1882[label="0.0298246;17pkt 17fpkt"];
779--1883[label="0.0105263;6pkt 6fpkt"];
779--1884[label="0.0122807;7pkt 7fpkt"];
779--1885[label="0.0157895;9pkt 9fpkt"];
779--1886[label="0.00701754;4pkt 4fpkt"];
779--1890[label="0.00350877;2pkt 2fpkt"];
779--1894[label="0.0122807;7pkt 7fpkt"];
779--1895[label="0.0157895;9pkt 9fpkt"];
779--2220[label="1;570pkt 570fpkt"];
779--2883[label="1;570pkt 570fpkt"];
779--3262[label="1;570pkt 570fpkt"];
1227--2220[label="1;164pkt 164fpkt"];
1227--2883[label="1;164pkt 164fpkt"];
1227--3262[label="1;164pkt 164fpkt"];
2220--2883[label="1;573pkt 573fpkt"];
2220--3262[label="1;573pkt 573fpkt"];
2883--3262[label="1;573pkt 573fpkt"];
</description>
    <slice>
      <filter dst_ip="96.21.202.184" dst_port="80" src_ip="193.243.202.91"/>
      <filter dst_ip="222.191.114.193" dst_port="80" src_ip="193.243.202.91"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23004,1.95335,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
704[label="96.146.228.30;s;25pkt 25fpkt", shape=diamond, color=yellow];
705[label="145.208.157.141;d;28pkt 28fpkt", shape=diamond, color=yellow];
1476[label="96.146.228.30;s;24pkt 24fpkt", shape=hexagon, color=black];
1477[label="145.208.157.141;d;28pkt 28fpkt", shape=hexagon, color=black];
1800[label="96.146.228.30;s;24pkt 24fpkt", shape=polygon, color=gold];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.146.228.30:80, 145.208.157.141:*}[82.7586%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49182: (1.93798%)&lt;BR/&gt; 49181: (1.93798%)&lt;BR/&gt; 49180: (1.93798%)&lt;BR/&gt; 49179: (1.93798%)&gt;];
}
704--705[label="0.96;24pkt 24fpkt"];
704--1476[label="1;24pkt 24fpkt"];
704--1477[label="0.96;24pkt 24fpkt"];
704--1800[label="1;24pkt 24fpkt"];
704--1853[label="0.28;7pkt 7fpkt"];
705--1476[label="1;24pkt 24fpkt"];
705--1477[label="1;28pkt 28fpkt"];
705--1800[label="1;24pkt 24fpkt"];
705--1853[label="0.25;7pkt 7fpkt"];
1476--1477[label="1;24pkt 24fpkt"];
1476--1800[label="1;24pkt 24fpkt"];
1476--1853[label="0.291667;7pkt 7fpkt"];
1477--1800[label="1;24pkt 24fpkt"];
1477--1853[label="0.25;7pkt 7fpkt"];
1800--1853[label="0.291667;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.157.141" src_ip="96.146.228.30" src_port="80"/>
    </slice>
    <from sec="1020575112" usec="0"/>
    <to sec="1020575462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
196[label="22.97.81.89;s;1pkt 1fpkt", shape=diamond, color=yellow];
1485[label="22.97.81.89;s;1pkt 1fpkt", shape=hexagon, color=black];
2215[label="22.97.81.89;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.97.81.89:1197, 192.10.205.6:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1197: (50%)&gt;];
}
196--1485[label="1;1pkt 1fpkt"];
196--1521[label="1;1pkt 1fpkt"];
196--2215[label="1;1pkt 1fpkt"];
1485--1521[label="1;1pkt 1fpkt"];
1485--2215[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.10.205.6" dst_port="6699" src_ip="22.97.81.89" src_port="1197"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
725[label="192.181.196.104;s;3pkt 3fpkt", shape=diamond, color=yellow];
1487[label="192.181.196.104;s;1pkt 1fpkt", shape=hexagon, color=black];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.181.196.104:4673, 151.41.58.160:1214}[33.3333%]&lt;BR/&gt;{192.181.196.104:4721, 151.41.58.160:1214}[33.3333%]&lt;BR/&gt;{192.181.196.104:4728, 151.41.58.160:1214}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 4673: (25%)&lt;BR/&gt; 4728: (12.5%)&lt;BR/&gt; 4721: (12.5%)&gt;];
}
725--1487[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.41.58.160" dst_port="1214" src_ip="192.181.196.104" src_port="4728"/>
      <filter dst_ip="151.41.58.160" dst_port="1214" src_ip="192.181.196.104" src_port="4721"/>
      <filter dst_ip="151.41.58.160" dst_port="1214" src_ip="192.181.196.104" src_port="4673"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
82[label="192.3.104.175;s;2011pkt 2011fpkt", shape=diamond, color=yellow];
246[label="193.227.13.97;d;195pkt 195fpkt", shape=diamond, color=yellow];
340[label="201.92.122.192;d;623pkt 623fpkt", shape=diamond, color=yellow];
512[label="193.243.196.160;s;439pkt 439fpkt", shape=diamond, color=yellow];
601[label="193.227.14.218;d;139pkt 139fpkt", shape=diamond, color=yellow];
942[label="135.246.105.220;s;56pkt 56fpkt", shape=diamond, color=yellow];
1110[label="135.246.218.66;s;30pkt 30fpkt", shape=diamond, color=yellow];
1488[label="193.227.14.218;d;57pkt 57fpkt", shape=hexagon, color=black];
1618[label="193.227.13.97;d;120pkt 120fpkt", shape=hexagon, color=black];
1762[label="135.246.218.66;s;28pkt 28fpkt", shape=hexagon, color=black];
2431[label="193.243.196.160;459pkt 459fpkt", shape=pentagon, color=darkviolet];
2506[label="166.3.179.180;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2511[label="166.3.179.181;70pkt 70fpkt", shape=pentagon, color=darkviolet];
3011[label="193.243.196.160;459pkt 459fpkt", shape=invtriangle, color=brown];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.3.104.175:*, 201.92.122.192:80}[20.9635%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8193%)&lt;BR/&gt; 8080: (3.59567%)&lt;BR/&gt; 0: (3.05473%)&lt;BR/&gt; 53: (2.0577%)&lt;BR/&gt; 65534: (1.93042%)&gt;];
}
82--200[label="0.996689;301pkt 301fpkt"];
82--246[label="0.989744;193pkt 193fpkt"];
82--271[label="0.995833;239pkt 239fpkt"];
82--340[label="0.894061;557pkt 557fpkt"];
82--601[label="0.992806;138pkt 138fpkt"];
82--616[label="0.00923788;4pkt 4fpkt"];
82--861[label="0.0208333;1pkt 1fpkt"];
82--902[label="0.0406977;7pkt 7fpkt"];
82--1011[label="0.0333333;3pkt 3fpkt"];
82--1207[label="1;100pkt 100fpkt"];
82--1488[label="0.982456;56pkt 56fpkt"];
82--1618[label="0.983333;118pkt 118fpkt"];
82--1673[label="0.00626959;2pkt 2fpkt"];
82--1846[label="0.0273166;51pkt 51fpkt"];
82--1854[label="0.000497265;1pkt 1fpkt"];
82--1855[label="0.0223769;45pkt 45fpkt"];
82--1856[label="0.0258578;52pkt 52fpkt"];
82--1860[label="0.0367976;74pkt 74fpkt"];
82--1869[label="0.033814;68pkt 68fpkt"];
82--1874[label="0.0273166;51pkt 51fpkt"];
82--1878[label="0.000497265;1pkt 1fpkt"];
82--1879[label="0.0223769;45pkt 45fpkt"];
82--1880[label="0.000497265;1pkt 1fpkt"];
82--1881[label="0.0258578;52pkt 52fpkt"];
82--1882[label="0.0367976;74pkt 74fpkt"];
82--1885[label="0.033814;68pkt 68fpkt"];
82--1890[label="0.0273166;51pkt 51fpkt"];
82--1895[label="0.033814;68pkt 68fpkt"];
246--512[label="0.0102564;2pkt 2fpkt"];
246--1618[label="1;120pkt 120fpkt"];
246--1846[label="0.0205128;4pkt 4fpkt"];
246--1855[label="0.0307692;6pkt 6fpkt"];
246--1856[label="0.025641;5pkt 5fpkt"];
246--1860[label="0.0307692;6pkt 6fpkt"];
246--1869[label="0.0358974;7pkt 7fpkt"];
246--1874[label="0.0205128;4pkt 4fpkt"];
246--1879[label="0.0307692;6pkt 6fpkt"];
246--1881[label="0.025641;5pkt 5fpkt"];
246--1882[label="0.0307692;6pkt 6fpkt"];
246--1885[label="0.0358974;7pkt 7fpkt"];
246--1890[label="0.0205128;4pkt 4fpkt"];
246--1895[label="0.0358974;7pkt 7fpkt"];
246--2431[label="0.0102564;2pkt 2fpkt"];
246--3011[label="0.0102564;2pkt 2fpkt"];
340--512[label="0.123007;54pkt 54fpkt"];
340--691[label="0.0027248;1pkt 1fpkt"];
340--942[label="0.0178571;1pkt 1fpkt"];
340--1110[label="0.2;6pkt 6fpkt"];
340--1412[label="0.003367;1pkt 1fpkt"];
340--1762[label="0.214286;6pkt 6fpkt"];
340--1846[label="0.0401284;25pkt 25fpkt"];
340--1855[label="0.0192616;12pkt 12fpkt"];
340--1856[label="0.0192616;12pkt 12fpkt"];
340--1860[label="0.035313;22pkt 22fpkt"];
340--1869[label="0.0321027;20pkt 20fpkt"];
340--1874[label="0.0401284;25pkt 25fpkt"];
340--1879[label="0.0192616;12pkt 12fpkt"];
340--1881[label="0.0192616;12pkt 12fpkt"];
340--1882[label="0.035313;22pkt 22fpkt"];
340--1885[label="0.0321027;20pkt 20fpkt"];
340--1890[label="0.0401284;25pkt 25fpkt"];
340--1895[label="0.0321027;20pkt 20fpkt"];
340--2431[label="0.119826;55pkt 55fpkt"];
340--2506[label="0.0357143;1pkt 1fpkt"];
340--2511[label="0.0142857;1pkt 1fpkt"];
340--2547[label="0.00160514;1pkt 1fpkt"];
340--3011[label="0.119826;55pkt 55fpkt"];
512--514[label="0.025;1pkt 1fpkt"];
512--526[label="0.0178571;1pkt 1fpkt"];
512--607[label="0.0238095;1pkt 1fpkt"];
512--616[label="0.0184758;8pkt 8fpkt"];
512--621[label="0.0172414;1pkt 1fpkt"];
512--625[label="0.0178571;1pkt 1fpkt"];
512--723[label="0.0204082;1pkt 1fpkt"];
512--733[label="0.125;1pkt 1fpkt"];
512--1418[label="0.025641;1pkt 1fpkt"];
512--1448[label="0.0178571;1pkt 1fpkt"];
512--1568[label="0.0181818;1pkt 1fpkt"];
512--1618[label="0.0166667;2pkt 2fpkt"];
512--1673[label="0.0188088;6pkt 6fpkt"];
512--1728[label="0.0175439;1pkt 1fpkt"];
512--1846[label="0.00683371;3pkt 3fpkt"];
512--1854[label="0.00911162;4pkt 4fpkt"];
512--1855[label="0.0136674;6pkt 6fpkt"];
512--1856[label="0.0410023;18pkt 18fpkt"];
512--1860[label="0.0159453;7pkt 7fpkt"];
512--1868[label="0.0136674;6pkt 6fpkt"];
512--1869[label="0.00683371;3pkt 3fpkt"];
512--1870[label="0.00683371;3pkt 3fpkt"];
512--1874[label="0.00683371;3pkt 3fpkt"];
512--1878[label="0.00911162;4pkt 4fpkt"];
512--1879[label="0.0136674;6pkt 6fpkt"];
512--1880[label="0.0159453;7pkt 7fpkt"];
512--1881[label="0.0410023;18pkt 18fpkt"];
512--1882[label="0.0159453;7pkt 7fpkt"];
512--1884[label="0.0136674;6pkt 6fpkt"];
512--1885[label="0.00683371;3pkt 3fpkt"];
512--1886[label="0.00683371;3pkt 3fpkt"];
512--1890[label="0.00683371;3pkt 3fpkt"];
512--1894[label="0.0136674;6pkt 6fpkt"];
512--1895[label="0.00683371;3pkt 3fpkt"];
512--2431[label="1;439pkt 439fpkt"];
512--3011[label="1;439pkt 439fpkt"];
601--1412[label="0.00719424;1pkt 1fpkt"];
601--1488[label="1;57pkt 57fpkt"];
601--2547[label="0.00719424;1pkt 1fpkt"];
942--1860[label="0.0357143;2pkt 2fpkt"];
942--1882[label="0.0357143;2pkt 2fpkt"];
1110--1762[label="1;28pkt 28fpkt"];
1110--1869[label="0.0666667;2pkt 2fpkt"];
1110--1885[label="0.0666667;2pkt 2fpkt"];
1110--1895[label="0.0666667;2pkt 2fpkt"];
1488--2547[label="0.0175439;1pkt 1fpkt"];
1618--1846[label="0.0333333;4pkt 4fpkt"];
1618--1855[label="0.05;6pkt 6fpkt"];
1618--1856[label="0.0416667;5pkt 5fpkt"];
1618--1860[label="0.05;6pkt 6fpkt"];
1618--1874[label="0.0333333;4pkt 4fpkt"];
1618--1879[label="0.05;6pkt 6fpkt"];
1618--1881[label="0.0416667;5pkt 5fpkt"];
1618--1882[label="0.05;6pkt 6fpkt"];
1618--1890[label="0.0333333;4pkt 4fpkt"];
1618--2431[label="0.0166667;2pkt 2fpkt"];
1618--3011[label="0.0166667;2pkt 2fpkt"];
1762--1869[label="0.0714286;2pkt 2fpkt"];
1762--1885[label="0.0714286;2pkt 2fpkt"];
1762--1895[label="0.0714286;2pkt 2fpkt"];
2431--3011[label="1;459pkt 459fpkt"];
</description>
    <slice>
      <filter dst_ip="201.92.122.192" dst_port="80" src_ip="192.3.104.175"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
688[label="151.51.203.1;d;4pkt 4fpkt", shape=diamond, color=yellow];
689[label="70.128.1.117;s;1pkt 1fpkt", shape=diamond, color=yellow];
1493[label="70.128.1.117;s;1pkt 1fpkt", shape=hexagon, color=black];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.203.8.70:1863, 151.51.203.1:1038}[25%]&lt;BR/&gt;{70.128.1.117:6699, 151.51.203.1:1464}[25%]&lt;BR/&gt;{70.180.0.134:0, 151.51.203.1:0}[25%]&lt;BR/&gt;{223.226.22.160:0, 151.51.203.1:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (33.3333%)&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 1464: (25%)&lt;BR/&gt; 1863: (8.33333%)&lt;BR/&gt; 1038: (8.33333%)&gt;];
}
688--689[label="1;1pkt 1fpkt"];
688--1493[label="1;1pkt 1fpkt"];
689--1493[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.51.203.1" src_ip="223.226.22.160"/>
      <filter dst_ip="151.51.203.1" src_ip="70.180.0.134"/>
      <filter dst_ip="151.51.203.1" dst_port="1464" src_ip="70.128.1.117" src_port="6699"/>
      <filter dst_ip="151.51.203.1" dst_port="1038" src_ip="16.203.8.70" src_port="1863"/>
    </slice>
    <from sec="1020574810" usec="0"/>
    <to sec="1020576683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
302[label="17.100.27.46;d;1pkt 1fpkt", shape=diamond, color=yellow];
303[label="144.75.155.198;s;72pkt 72fpkt", shape=diamond, color=yellow];
1499[label="144.75.155.198;s;72pkt 72fpkt", shape=hexagon, color=black];
2562[label="144.75.155.198;72pkt 72fpkt", shape=pentagon, color=darkviolet];
3080[label="144.75.155.198;72pkt 72fpkt", shape=invtriangle, color=brown];
3371[label="144.75.155.198;72pkt 72fpkt", shape=invhouse, color=bisque];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.75.155.198:*, 17.197.185.242:6346}[95.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 1752: (0.831025%)&lt;BR/&gt; 3749: (0.692521%)&lt;BR/&gt; 3413: (0.692521%)&lt;BR/&gt; 3394: (0.692521%)&gt;];
}
302--303[label="1;1pkt 1fpkt"];
302--1499[label="1;1pkt 1fpkt"];
302--2562[label="1;1pkt 1fpkt"];
302--3080[label="1;1pkt 1fpkt"];
302--3371[label="1;1pkt 1fpkt"];
303--1499[label="1;72pkt 72fpkt"];
303--2562[label="1;72pkt 72fpkt"];
303--3080[label="1;72pkt 72fpkt"];
303--3371[label="1;72pkt 72fpkt"];
1499--2562[label="1;72pkt 72fpkt"];
1499--3080[label="1;72pkt 72fpkt"];
1499--3371[label="1;72pkt 72fpkt"];
2562--3080[label="1;72pkt 72fpkt"];
2562--3371[label="1;72pkt 72fpkt"];
3080--3371[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_ip="17.197.185.242" dst_port="6346" src_ip="144.75.155.198"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020575744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
532[label="96.192.151.158;d;2pkt 2fpkt", shape=diamond, color=yellow];
533[label="135.246.218.154;s;2pkt 2fpkt", shape=diamond, color=yellow];
1501[label="96.192.151.158;d;2pkt 2fpkt", shape=hexagon, color=black];
1653[label="135.246.218.154;s;2pkt 2fpkt", shape=hexagon, color=black];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.246.218.154:2187, 96.192.151.158:554}[50%]&lt;BR/&gt;{135.246.218.154:6970, 96.192.151.158:26794}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26794: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 2187: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
532--533[label="1;2pkt 2fpkt"];
532--1501[label="1;2pkt 2fpkt"];
532--1653[label="1;2pkt 2fpkt"];
533--1501[label="1;2pkt 2fpkt"];
533--1653[label="1;2pkt 2fpkt"];
1501--1653[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="96.192.151.158" dst_port="26794" src_ip="135.246.218.154" src_port="6970"/>
      <filter dst_ip="96.192.151.158" dst_port="554" src_ip="135.246.218.154" src_port="2187"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
806[label="96.182.152.194;d;140pkt 140fpkt", shape=diamond, color=yellow];
807[label="145.208.8.134;s;148pkt 148fpkt", shape=diamond, color=yellow];
1506[label="96.182.152.194;d;62pkt 62fpkt", shape=hexagon, color=black];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.8.134:*, 96.182.152.194:113}[47.2973%]&lt;BR/&gt;{145.208.8.134:25, 96.182.152.194:*}[47.2973%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (25%)&lt;BR/&gt; 25: (25%)&lt;BR/&gt; 50502: (0.428571%)&lt;BR/&gt; 50501: (0.428571%)&lt;BR/&gt; 50500: (0.428571%)&gt;];
}
806--807[label="1;140pkt 140fpkt"];
806--1506[label="1;62pkt 62fpkt"];
807--1506[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="96.182.152.194" src_ip="145.208.8.134" src_port="25"/>
      <filter dst_ip="96.182.152.194" dst_port="113" src_ip="145.208.8.134"/>
    </slice>
    <from sec="1020574811" usec="0"/>
    <to sec="1020576700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700354,1.96391,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="97.62.79.67"/>
      <from sec="1020575119" usec="0"/>
      <to sec="1020575625" usec="0"/>
    </slice>
    <from sec="1020575119" usec="0"/>
    <to sec="1020575625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
48[label="8.95.87.90;s;1pkt 1fpkt", shape=diamond, color=yellow];
188[label="17.124.12.248;s;7pkt 7fpkt", shape=diamond, color=yellow];
235[label="135.246.150.67;d;201pkt 201fpkt", shape=diamond, color=yellow];
384[label="8.136.105.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
385[label="70.109.116.110;s;1pkt 1fpkt", shape=diamond, color=yellow];
516[label="17.2.151.140;s;1pkt 1fpkt", shape=diamond, color=yellow];
839[label="221.141.178.105;s;1pkt 1fpkt", shape=diamond, color=yellow];
892[label="214.129.130.204;s;1pkt 1fpkt", shape=diamond, color=yellow];
1513[label="135.246.150.67;d;98pkt 98fpkt", shape=hexagon, color=black];
1933[label="8.136.105.10;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2424[label="193.240.106.159;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2691[label="17.124.12.248;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3006[label="193.240.106.159;13pkt 13fpkt", shape=invtriangle, color=brown];
3158[label="17.124.12.248;7pkt 7fpkt", shape=invtriangle, color=brown];
3412[label="17.124.12.248;8pkt 8fpkt", shape=invhouse, color=bisque];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 135.246.150.67:1214}[61.3861%]&lt;BR/&gt;{*:1214, 135.246.150.67:*}[40.5941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50.9669%)&lt;BR/&gt; 1345: (0.966851%)&lt;BR/&gt; 4944: (0.828729%)&lt;BR/&gt; 4816: (0.828729%)&lt;BR/&gt; 1098: (0.828729%)&gt;];
}
48--235[label="1;1pkt 1fpkt"];
48--1513[label="1;1pkt 1fpkt"];
188--235[label="1;7pkt 7fpkt"];
188--1513[label="0.571429;4pkt 4fpkt"];
188--2691[label="0.857143;6pkt 6fpkt"];
188--3158[label="0.857143;6pkt 6fpkt"];
188--3412[label="1;7pkt 7fpkt"];
235--384[label="1;1pkt 1fpkt"];
235--385[label="1;1pkt 1fpkt"];
235--516[label="1;1pkt 1fpkt"];
235--839[label="1;1pkt 1fpkt"];
235--892[label="1;1pkt 1fpkt"];
235--1513[label="1;98pkt 98fpkt"];
235--1933[label="1;3pkt 3fpkt"];
235--2424[label="1;12pkt 12fpkt"];
235--2691[label="0.857143;6pkt 6fpkt"];
235--3006[label="1;13pkt 13fpkt"];
235--3058[label="1;1pkt 1fpkt"];
235--3158[label="0.857143;6pkt 6fpkt"];
235--3357[label="1;1pkt 1fpkt"];
235--3412[label="0.875;7pkt 7fpkt"];
384--1933[label="1;1pkt 1fpkt"];
385--1513[label="1;1pkt 1fpkt"];
516--1513[label="1;1pkt 1fpkt"];
839--1513[label="1;1pkt 1fpkt"];
892--1513[label="1;1pkt 1fpkt"];
1513--1933[label="0.333333;1pkt 1fpkt"];
1513--2424[label="0.416667;5pkt 5fpkt"];
1513--2691[label="0.428571;3pkt 3fpkt"];
1513--3006[label="0.461538;6pkt 6fpkt"];
1513--3058[label="1;1pkt 1fpkt"];
1513--3158[label="0.428571;3pkt 3fpkt"];
1513--3357[label="1;1pkt 1fpkt"];
1513--3412[label="0.5;4pkt 4fpkt"];
2424--3006[label="1;12pkt 12fpkt"];
2691--3158[label="1;7pkt 7fpkt"];
2691--3412[label="1;7pkt 7fpkt"];
3158--3412[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="135.246.150.67" src_port="1214"/>
      <filter dst_ip="135.246.150.67" dst_port="1214"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
270[label="192.10.195.2;d;8pkt 8fpkt", shape=diamond, color=yellow];
441[label="213.35.45.146;s;2pkt 2fpkt", shape=diamond, color=yellow];
1519[label="192.10.195.2;d;6pkt 6fpkt", shape=hexagon, color=black];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.35.45.145:5001, 192.10.195.2:*}[25%]&lt;BR/&gt;{213.35.45.146:5001, 192.10.195.2:*}[25%]&lt;BR/&gt;{213.35.45.210:7431, 192.10.195.2:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (28.125%)&lt;BR/&gt; 7431: (9.375%)&lt;BR/&gt; 1085: (9.375%)&lt;BR/&gt; 1080: (9.375%)&lt;BR/&gt; 6900: (6.25%)&gt;];
}
270--441[label="1;2pkt 2fpkt"];
270--1519[label="1;6pkt 6fpkt"];
270--2590[label="0.25;2pkt 2fpkt"];
441--1519[label="1;2pkt 2fpkt"];
1519--2590[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.10.195.2" src_ip="213.35.45.210" src_port="7431"/>
      <filter dst_ip="192.10.195.2" src_ip="213.35.45.146" src_port="5001"/>
      <filter dst_ip="192.10.195.2" src_ip="213.35.45.145" src_port="5001"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
139[label="22.96.142.14;d;7pkt 7fpkt", shape=diamond, color=yellow];
140[label="144.75.254.132;s;20pkt 20fpkt", shape=diamond, color=yellow];
1520[label="22.96.142.14;d;4pkt 4fpkt", shape=hexagon, color=black];
1622[label="144.75.254.132;s;12pkt 12fpkt", shape=hexagon, color=black];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.75.254.132:1214, 22.96.142.14:*}[35%]&lt;BR/&gt;{144.75.254.132:*, 22.122.238.100:1214}[35%]&lt;BR/&gt;{144.75.254.132:1214, 22.78.163.177:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 4123: (4.65116%)&lt;BR/&gt; 1974: (4.65116%)&lt;BR/&gt; 1715: (4.65116%)&lt;BR/&gt; 1442: (4.65116%)&gt;];
}
139--140[label="1;7pkt 7fpkt"];
139--1520[label="1;4pkt 4fpkt"];
139--1622[label="0.714286;5pkt 5fpkt"];
140--1520[label="1;4pkt 4fpkt"];
140--1622[label="1;12pkt 12fpkt"];
1520--1622[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="22.122.238.100" dst_port="1214" src_ip="144.75.254.132"/>
      <filter dst_ip="22.96.142.14" src_ip="144.75.254.132" src_port="1214"/>
      <filter dst_ip="22.78.163.177" src_ip="144.75.254.132" src_port="1214"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
777[label="22.0.74.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
778[label="151.38.141.120;s;2pkt 2fpkt", shape=diamond, color=yellow];
1525[label="22.0.74.119;d;1pkt 1fpkt", shape=hexagon, color=black];
1526[label="151.38.141.120;s;1pkt 1fpkt", shape=hexagon, color=black];
2295[label="151.38.141.120;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2927[label="151.38.141.120;1pkt 1fpkt", shape=invtriangle, color=brown];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.38.141.120:62633, 22.0.74.119:6348}[50%]&lt;BR/&gt;{151.38.141.120:63004, 22.99.192.238:6347}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62633: (28.5714%)&lt;BR/&gt; 6348: (28.5714%)&lt;BR/&gt; 63004: (21.4286%)&lt;BR/&gt; 6347: (21.4286%)&gt;];
}
777--778[label="1;1pkt 1fpkt"];
777--1525[label="1;1pkt 1fpkt"];
777--1526[label="1;1pkt 1fpkt"];
778--1525[label="1;1pkt 1fpkt"];
778--1526[label="1;1pkt 1fpkt"];
778--2295[label="1;1pkt 1fpkt"];
778--2927[label="1;1pkt 1fpkt"];
1525--1526[label="1;1pkt 1fpkt"];
2295--2927[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="22.99.192.238" dst_port="6347" src_ip="151.38.141.120" src_port="63004"/>
      <filter dst_ip="22.0.74.119" dst_port="6348" src_ip="151.38.141.120" src_port="62633"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.761847,1.86949,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
93[label="166.3.71.233;d;3pkt 3fpkt", shape=diamond, color=yellow];
94[label="116.28.23.119;s;1pkt 1fpkt", shape=diamond, color=yellow];
209[label="213.59.6.164;s;1pkt 1fpkt", shape=diamond, color=yellow];
1533[label="213.59.6.164;s;1pkt 1fpkt", shape=hexagon, color=black];
3019[label="213.59.6.164;1pkt 1fpkt", shape=invtriangle, color=brown];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{116.28.23.119:6699, 166.3.71.233:4541}[33.3333%]&lt;BR/&gt;{213.59.6.164:6699, 166.3.71.233:4857}[33.3333%]&lt;BR/&gt;{96.241.191.169:0, 166.3.71.233:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (42.8571%)&lt;BR/&gt; 4857: (28.5714%)&lt;BR/&gt; 4541: (14.2857%)&lt;BR/&gt; 0: (14.2857%)&gt;];
}
93--94[label="1;1pkt 1fpkt"];
93--209[label="1;1pkt 1fpkt"];
93--1533[label="1;1pkt 1fpkt"];
93--3019[label="1;1pkt 1fpkt"];
209--1533[label="1;1pkt 1fpkt"];
209--3019[label="1;1pkt 1fpkt"];
1533--3019[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.3.71.233" src_ip="96.241.191.169"/>
      <filter dst_ip="166.3.71.233" dst_port="4857" src_ip="213.59.6.164" src_port="6699"/>
      <filter dst_ip="166.3.71.233" dst_port="4541" src_ip="116.28.23.119" src_port="6699"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
281[label="166.3.61.47;s;16pkt 16fpkt", shape=diamond, color=yellow];
386[label="86.168.152.217;d;8pkt 8fpkt", shape=diamond, color=yellow];
883[label="22.67.76.205;d;1pkt 1fpkt", shape=diamond, color=yellow];
1558[label="22.67.76.205;d;1pkt 1fpkt", shape=hexagon, color=black];
2086[label="166.3.61.47;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2813[label="166.3.61.47;17pkt 17fpkt", shape=invtriangle, color=brown];
3225[label="166.3.61.47;16pkt 16fpkt", shape=invhouse, color=bisque];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.3.61.47:*, 86.168.152.217:1214}[52.9412%]&lt;BR/&gt;{166.3.61.47:*, 194.199.46.221:1214}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (43.3333%)&lt;BR/&gt; 6699: (6.66667%)&lt;BR/&gt; 2268: (4%)&lt;BR/&gt; 2274: (3.33333%)&lt;BR/&gt; 2273: (3.33333%)&gt;];
}
281--386[label="1;8pkt 8fpkt"];
281--883[label="1;1pkt 1fpkt"];
281--1558[label="1;1pkt 1fpkt"];
281--2086[label="0.9375;15pkt 15fpkt"];
281--2813[label="1;16pkt 16fpkt"];
281--3225[label="0.9375;15pkt 15fpkt"];
386--2086[label="1;8pkt 8fpkt"];
386--2813[label="1;8pkt 8fpkt"];
386--3225[label="1;8pkt 8fpkt"];
883--1558[label="1;1pkt 1fpkt"];
883--2086[label="1;1pkt 1fpkt"];
883--2813[label="1;1pkt 1fpkt"];
883--3225[label="1;1pkt 1fpkt"];
1558--2086[label="1;1pkt 1fpkt"];
1558--2813[label="1;1pkt 1fpkt"];
1558--3225[label="1;1pkt 1fpkt"];
2086--2813[label="1;16pkt 16fpkt"];
2086--3225[label="1;16pkt 16fpkt"];
2813--3225[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="86.168.152.217" dst_port="1214" src_ip="166.3.61.47"/>
      <filter dst_ip="194.199.46.221" dst_port="1214" src_ip="166.3.61.47"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
109[label="18.5.58.106;d;1pkt 1fpkt", shape=diamond, color=yellow];
238[label="198.50.26.120;d;1pkt 1fpkt", shape=diamond, color=yellow];
239[label="151.51.25.219;s;307pkt 307fpkt", shape=diamond, color=yellow];
1086[label="216.7.208.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
1559[label="18.5.58.106;d;1pkt 1fpkt", shape=hexagon, color=black];
2618[label="151.51.25.219;313pkt 313fpkt", shape=pentagon, color=darkviolet];
3112[label="151.51.25.219;312pkt 312fpkt", shape=invtriangle, color=brown];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.51.25.219:6257, *:6257}[52.7157%]&lt;BR/&gt;{151.51.25.219:*, *:6699}[44.0895%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (52.5641%)&lt;BR/&gt; 6699: (23.5577%)&lt;BR/&gt; 0: (0.320513%)&lt;BR/&gt; 1464: (0.267094%)&lt;BR/&gt; 3290: (0.213675%)&gt;];
}
109--239[label="1;1pkt 1fpkt"];
109--1559[label="1;1pkt 1fpkt"];
109--2618[label="1;1pkt 1fpkt"];
109--3112[label="1;1pkt 1fpkt"];
238--239[label="1;1pkt 1fpkt"];
238--2618[label="1;1pkt 1fpkt"];
238--3112[label="1;1pkt 1fpkt"];
239--1086[label="1;1pkt 1fpkt"];
239--1559[label="1;1pkt 1fpkt"];
239--2618[label="1;307pkt 307fpkt"];
239--3112[label="0.996743;306pkt 306fpkt"];
1086--2618[label="1;1pkt 1fpkt"];
1086--3112[label="1;1pkt 1fpkt"];
1559--2618[label="1;1pkt 1fpkt"];
1559--3112[label="1;1pkt 1fpkt"];
2618--3112[label="1;312pkt 312fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="151.51.25.219"/>
      <filter dst_port="6257" src_ip="151.51.25.219" src_port="6257"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
206[label="144.16.248.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
420[label="141.26.138.219;d;10pkt 10fpkt", shape=diamond, color=yellow];
871[label="171.183.134.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
1572[label="141.26.138.219;d;9pkt 9fpkt", shape=hexagon, color=black];
2048[label="144.16.248.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.220.39.24:1214, 141.26.138.219:*}[60%]&lt;BR/&gt;{*:0, 141.26.138.219:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (40.9091%)&lt;BR/&gt; 0: (18.1818%)&lt;BR/&gt; 4905: (9.09091%)&lt;BR/&gt; 1366: (6.81818%)&lt;BR/&gt; 1408: (4.54545%)&gt;];
}
206--420[label="1;1pkt 1fpkt"];
206--1572[label="1;1pkt 1fpkt"];
206--2048[label="1;1pkt 1fpkt"];
420--871[label="1;1pkt 1fpkt"];
420--1572[label="1;9pkt 9fpkt"];
420--2048[label="1;1pkt 1fpkt"];
871--1572[label="1;1pkt 1fpkt"];
1572--2048[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.26.138.219" src_ip="147.220.39.24" src_port="1214"/>
      <filter dst_ip="141.26.138.219"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
603[label="170.64.135.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
665[label="151.210.46.10;d;60pkt 60fpkt", shape=diamond, color=yellow];
1534[label="151.210.46.10;d;26pkt 26fpkt", shape=hexagon, color=black];
1574[label="170.64.135.27;s;1pkt 1fpkt", shape=hexagon, color=black];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 151.210.46.10:53}[33.3333%]&lt;BR/&gt;{215.56.132.164:*, 151.210.46.10:*}[31.6667%]&lt;BR/&gt;{*:53, 151.210.46.10:1193}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (34.0909%)&lt;BR/&gt; 1193: (13.0682%)&lt;BR/&gt; 25: (9.09091%)&lt;BR/&gt; 113: (7.95455%)&lt;BR/&gt; 0: (4.54545%)&gt;];
}
603--665[label="1;1pkt 1fpkt"];
603--1534[label="1;1pkt 1fpkt"];
603--1574[label="1;1pkt 1fpkt"];
665--1056[label="0.316667;19pkt 19fpkt"];
665--1534[label="1;26pkt 26fpkt"];
665--1574[label="1;1pkt 1fpkt"];
665--1852[label="0.05;3pkt 3fpkt"];
665--1858[label="0.0166667;1pkt 1fpkt"];
665--1864[label="0.05;3pkt 3fpkt"];
665--1866[label="0.0166667;1pkt 1fpkt"];
665--1868[label="0.0166667;1pkt 1fpkt"];
665--1870[label="0.0166667;1pkt 1fpkt"];
665--1884[label="0.0166667;1pkt 1fpkt"];
665--1886[label="0.0166667;1pkt 1fpkt"];
665--1894[label="0.0166667;1pkt 1fpkt"];
665--2115[label="0.0212766;1pkt 1fpkt"];
665--2243[label="0.25;1pkt 1fpkt"];
665--2320[label="0.0243902;1pkt 1fpkt"];
665--2453[label="0.3;18pkt 18fpkt"];
1534--1574[label="1;1pkt 1fpkt"];
1534--1852[label="0.115385;3pkt 3fpkt"];
1534--1858[label="0.0384615;1pkt 1fpkt"];
1534--1864[label="0.0384615;1pkt 1fpkt"];
1534--1866[label="0.0384615;1pkt 1fpkt"];
1534--2115[label="0.0384615;1pkt 1fpkt"];
1534--2453[label="0.153846;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="151.210.46.10" src_ip="215.56.132.164"/>
      <filter dst_ip="151.210.46.10" dst_port="53"/>
      <filter dst_ip="151.210.46.10" dst_port="1193" src_port="53"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
851[label="204.103.1.44;s;4pkt 4fpkt", shape=diamond, color=yellow];
1047[label="147.85.37.21;d;1pkt 1fpkt", shape=diamond, color=yellow];
1583[label="204.103.1.44;s;4pkt 4fpkt", shape=hexagon, color=black];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.103.1.44:0, 192.168.1.1:0}[25%]&lt;BR/&gt;{204.103.1.44:0, 192.168.1.2:0}[25%]&lt;BR/&gt;{204.103.1.44:0, 147.85.37.21:0}[25%]&lt;BR/&gt;{204.103.1.44:80, 214.163.129.191:4298}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (77.7778%)&lt;BR/&gt; 4298: (11.1111%)&lt;BR/&gt; 80: (11.1111%)&gt;];
}
851--1047[label="1;1pkt 1fpkt"];
851--1583[label="1;4pkt 4fpkt"];
1047--1583[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.163.129.191" dst_port="4298" src_ip="204.103.1.44" src_port="80"/>
      <filter dst_ip="147.85.37.21" src_ip="204.103.1.44"/>
      <filter dst_ip="192.168.1.2" src_ip="204.103.1.44"/>
      <filter dst_ip="192.168.1.1" src_ip="204.103.1.44"/>
    </slice>
    <from sec="1020574805" usec="0"/>
    <to sec="1020576708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
800[label="151.51.183.29;d;125pkt 125fpkt", shape=diamond, color=yellow];
876[label="221.1.156.34;s;6pkt 6fpkt", shape=diamond, color=yellow];
973[label="221.1.132.155;s;90pkt 90fpkt", shape=diamond, color=yellow];
1587[label="151.51.183.29;d;34pkt 34fpkt", shape=hexagon, color=black];
1905[label="16.203.8.3;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2714[label="16.203.8.3;2pkt 2fpkt", shape=invtriangle, color=brown];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.1.132.155:80, 151.51.183.29:*}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0695%)&lt;BR/&gt; 1863: (1.5444%)&lt;BR/&gt; 1248: (0.772201%)&lt;BR/&gt; 1451: (0.579151%)&lt;BR/&gt; 1450: (0.579151%)&gt;];
}
800--876[label="1;6pkt 6fpkt"];
800--973[label="1;90pkt 90fpkt"];
800--1587[label="1;34pkt 34fpkt"];
800--1859[label="0.08;10pkt 10fpkt"];
800--1862[label="0.032;4pkt 4fpkt"];
800--1905[label="0.5;1pkt 1fpkt"];
800--2515[label="0.212121;7pkt 7fpkt"];
800--2714[label="0.5;1pkt 1fpkt"];
800--3057[label="0.212121;7pkt 7fpkt"];
876--1587[label="1;6pkt 6fpkt"];
876--1859[label="0.333333;2pkt 2fpkt"];
876--1862[label="0.666667;4pkt 4fpkt"];
1587--1859[label="0.294118;10pkt 10fpkt"];
1587--1862[label="0.117647;4pkt 4fpkt"];
1587--1905[label="0.5;1pkt 1fpkt"];
1587--2515[label="0.212121;7pkt 7fpkt"];
1587--2714[label="0.5;1pkt 1fpkt"];
1587--3057[label="0.212121;7pkt 7fpkt"];
1905--2714[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="151.51.183.29" src_ip="221.1.132.155" src_port="80"/>
    </slice>
    <from sec="1020574807" usec="0"/>
    <to sec="1020576468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
626[label="166.3.62.194;s;6pkt 6fpkt", shape=diamond, color=yellow];
681[label="134.140.221.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
707[label="194.226.98.135;d;2pkt 2fpkt", shape=diamond, color=yellow];
1588[label="134.140.221.176;d;1pkt 1fpkt", shape=hexagon, color=black];
2553[label="166.3.62.194;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.3.62.194:*, *:1863}[33.3333%]&lt;BR/&gt;{166.3.62.194:*, 194.226.98.135:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41000: (13.3333%)&lt;BR/&gt; 3252: (13.3333%)&lt;BR/&gt; 41273: (10%)&lt;BR/&gt; 41272: (10%)&lt;BR/&gt; 3299: (10%)&gt;];
}
626--681[label="1;1pkt 1fpkt"];
626--707[label="1;2pkt 2fpkt"];
626--1588[label="1;1pkt 1fpkt"];
626--2553[label="1;5pkt 5fpkt"];
681--1588[label="1;1pkt 1fpkt"];
681--2553[label="1;1pkt 1fpkt"];
707--2553[label="1;2pkt 2fpkt"];
1588--2553[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.226.98.135" src_ip="166.3.62.194"/>
      <filter dst_port="1863" src_ip="166.3.62.194"/>
    </slice>
    <from sec="1020574807" usec="0"/>
    <to sec="1020576743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
744[label="151.51.203.1;s;6pkt 6fpkt", shape=diamond, color=yellow];
803[label="70.128.1.117;d;1pkt 1fpkt", shape=diamond, color=yellow];
1590[label="70.128.1.117;d;1pkt 1fpkt", shape=hexagon, color=black];
1658[label="151.51.203.1;s;5pkt 5fpkt", shape=hexagon, color=black];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.51.203.1:0, *:0}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (53.8462%)&lt;BR/&gt; 6699: (15.3846%)&lt;BR/&gt; 1464: (15.3846%)&lt;BR/&gt; 1863: (7.69231%)&lt;BR/&gt; 1038: (7.69231%)&gt;];
}
744--803[label="1;1pkt 1fpkt"];
744--1590[label="1;1pkt 1fpkt"];
744--1658[label="1;5pkt 5fpkt"];
803--1590[label="1;1pkt 1fpkt"];
803--1658[label="1;1pkt 1fpkt"];
1590--1658[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="151.51.203.1"/>
    </slice>
    <from sec="1020574810" usec="0"/>
    <to sec="1020576704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
76[label="192.10.205.90;d;12pkt 12fpkt", shape=diamond, color=yellow];
77[label="213.151.191.244;s;2pkt 2fpkt", shape=diamond, color=yellow];
172[label="116.6.24.191;s;7pkt 7fpkt", shape=diamond, color=yellow];
1213[label="18.238.87.61;s;1pkt 1fpkt", shape=diamond, color=yellow];
1359[label="192.10.205.90;d;12pkt 12fpkt", shape=hexagon, color=black];
1456[label="116.6.24.191;s;7pkt 7fpkt", shape=hexagon, color=black];
1599[label="213.151.191.244;s;2pkt 2fpkt", shape=hexagon, color=black];
2687[label="213.151.191.244;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{116.6.24.191:6699, 192.10.205.90:*}[58.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (45.5556%)&lt;BR/&gt; 1054: (5.55556%)&lt;BR/&gt; 1053: (5.55556%)&lt;BR/&gt; 1097: (4.44444%)&lt;BR/&gt; 1096: (4.44444%)&gt;];
}
76--77[label="1;2pkt 2fpkt"];
76--172[label="1;7pkt 7fpkt"];
76--1213[label="1;1pkt 1fpkt"];
76--1359[label="1;12pkt 12fpkt"];
76--1456[label="1;7pkt 7fpkt"];
76--1599[label="1;2pkt 2fpkt"];
76--2687[label="1;2pkt 2fpkt"];
77--1359[label="1;2pkt 2fpkt"];
77--1599[label="1;2pkt 2fpkt"];
77--2687[label="1;2pkt 2fpkt"];
172--1359[label="1;7pkt 7fpkt"];
172--1456[label="1;7pkt 7fpkt"];
1213--1359[label="1;1pkt 1fpkt"];
1359--1456[label="1;7pkt 7fpkt"];
1359--1599[label="1;2pkt 2fpkt"];
1359--2687[label="1;2pkt 2fpkt"];
1599--2687[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.10.205.90" src_ip="116.6.24.191" src_port="6699"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23004,1.95335,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
249[label="194.113.118.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
376[label="192.10.218.255;s;5pkt 5fpkt", shape=diamond, color=yellow];
1600[label="194.113.118.176;d;1pkt 1fpkt", shape=hexagon, color=black];
1819[label="194.113.118.176;d;1pkt 1fpkt", shape=polygon, color=gold];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.10.218.255:2656, 22.76.26.87:6699}[20%]&lt;BR/&gt;{192.10.218.255:0, 86.157.67.140:0}[20%]&lt;BR/&gt;{192.10.218.255:0, 221.200.51.196:0}[20%]&lt;BR/&gt;{192.10.218.255:2749, 194.113.118.176:6699}[20%]&lt;BR/&gt;{192.10.218.255:2859, 194.113.118.176:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (37.5%)&lt;BR/&gt; 0: (25%)&lt;BR/&gt; 2749: (18.75%)&lt;BR/&gt; 2859: (12.5%)&lt;BR/&gt; 2656: (6.25%)&gt;];
}
249--376[label="1;1pkt 1fpkt"];
376--1600[label="1;1pkt 1fpkt"];
376--1819[label="1;1pkt 1fpkt"];
1600--1819[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.113.118.176" dst_port="6699" src_ip="192.10.218.255" src_port="2859"/>
      <filter dst_ip="194.113.118.176" dst_port="6699" src_ip="192.10.218.255" src_port="2749"/>
      <filter dst_ip="221.200.51.196" src_ip="192.10.218.255"/>
      <filter dst_ip="86.157.67.140" src_ip="192.10.218.255"/>
      <filter dst_ip="22.76.26.87" dst_port="6699" src_ip="192.10.218.255" src_port="2656"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,501,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
546[label="161.40.127.28;s;31pkt 31fpkt", shape=diamond, color=yellow];
792[label="200.175.26.106;d;5pkt 5fpkt", shape=diamond, color=yellow];
1607[label="161.40.127.28;s;27pkt 27fpkt", shape=hexagon, color=black];
2009[label="161.40.127.28;30pkt 30fpkt", shape=pentagon, color=darkviolet];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.40.127.28:*, *:21}[93.5484%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (48.9247%)&lt;BR/&gt; 2052: (2.15054%)&lt;BR/&gt; 2030: (2.15054%)&lt;BR/&gt; 2020: (2.15054%)&lt;BR/&gt; 2016: (2.15054%)&gt;];
}
546--792[label="1;5pkt 5fpkt"];
546--1135[label="0.857143;6pkt 6fpkt"];
546--1607[label="1;27pkt 27fpkt"];
546--2009[label="1;30pkt 30fpkt"];
792--1607[label="1;5pkt 5fpkt"];
792--2009[label="1;5pkt 5fpkt"];
1607--2009[label="0.962963;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_port="21" src_ip="161.40.127.28"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700354,1.96391,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
1608[label="213.61.197.151;s;171pkt 171fpkt", shape=hexagon, color=black];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.61.197.151:*, 165.89.149.179:25}[78.3626%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (39.1813%)&lt;BR/&gt; 110: (7.89474%)&lt;BR/&gt; 161: (2.92398%)&lt;BR/&gt; 1029: (1.16959%)&lt;BR/&gt; 1541: (0.584795%)&gt;];
}
1608--2406[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.89.149.179" dst_port="25" src_ip="213.61.197.151"/>
    </slice>
    <from sec="1020574803" usec="0"/>
    <to sec="1020576524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
613[label="145.208.122.183;d;235pkt 235fpkt", shape=diamond, color=yellow];
910[label="213.201.40.138;s;16pkt 16fpkt", shape=diamond, color=yellow];
951[label="213.133.63.202;s;9pkt 9fpkt", shape=diamond, color=yellow];
1613[label="213.133.63.202;s;5pkt 5fpkt", shape=hexagon, color=black];
1753[label="145.208.122.183;d;232pkt 232fpkt", shape=hexagon, color=black];
2027[label="99.37.54.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2350[label="213.201.40.134;36pkt 36fpkt", shape=pentagon, color=darkviolet];
2364[label="213.201.40.138;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2419[label="192.202.148.156;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2573[label="213.133.63.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2591[label="192.202.148.210;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 145.208.122.183:*}[90.3361%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.234%)&lt;BR/&gt; 4000: (2.16638%)&lt;BR/&gt; 8000: (1.29983%)&lt;BR/&gt; 4001: (0.693241%)&lt;BR/&gt; 5198: (0.34662%)&gt;];
}
613--910[label="1;16pkt 16fpkt"];
613--951[label="1;9pkt 9fpkt"];
613--1613[label="1;5pkt 5fpkt"];
613--1753[label="1;232pkt 232fpkt"];
613--1845[label="0.0212766;5pkt 5fpkt"];
613--1853[label="0.0170213;4pkt 4fpkt"];
613--1865[label="0.319149;75pkt 75fpkt"];
613--1867[label="0.0425532;10pkt 10fpkt"];
613--1873[label="0.0212766;5pkt 5fpkt"];
613--1883[label="0.0425532;10pkt 10fpkt"];
613--1889[label="0.0212766;5pkt 5fpkt"];
613--2027[label="1;1pkt 1fpkt"];
613--2350[label="1;36pkt 36fpkt"];
613--2364[label="1;35pkt 35fpkt"];
613--2419[label="1;1pkt 1fpkt"];
613--2457[label="0.0277778;1pkt 1fpkt"];
613--2573[label="1;1pkt 1fpkt"];
613--2591[label="0.5;3pkt 3fpkt"];
910--1753[label="1;16pkt 16fpkt"];
910--1865[label="0.0625;1pkt 1fpkt"];
910--1867[label="0.0625;1pkt 1fpkt"];
910--1883[label="0.0625;1pkt 1fpkt"];
910--2364[label="0.9375;15pkt 15fpkt"];
951--1613[label="1;5pkt 5fpkt"];
951--1753[label="0.888889;8pkt 8fpkt"];
951--2573[label="1;1pkt 1fpkt"];
1613--1753[label="1;5pkt 5fpkt"];
1753--1845[label="0.0215517;5pkt 5fpkt"];
1753--1853[label="0.0172414;4pkt 4fpkt"];
1753--1865[label="0.323276;75pkt 75fpkt"];
1753--1867[label="0.0431034;10pkt 10fpkt"];
1753--1873[label="0.0215517;5pkt 5fpkt"];
1753--1883[label="0.0431034;10pkt 10fpkt"];
1753--1889[label="0.0215517;5pkt 5fpkt"];
1753--2027[label="1;1pkt 1fpkt"];
1753--2350[label="1;36pkt 36fpkt"];
1753--2364[label="1;35pkt 35fpkt"];
1753--2419[label="1;1pkt 1fpkt"];
1753--2457[label="0.0277778;1pkt 1fpkt"];
1753--2591[label="0.5;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.122.183" src_port="80"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
585[label="22.108.242.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
586[label="151.38.219.255;s;1pkt 1fpkt", shape=diamond, color=yellow];
1517[label="151.38.219.255;s;1pkt 1fpkt", shape=hexagon, color=black];
1620[label="22.108.242.247;d;1pkt 1fpkt", shape=hexagon, color=black];
2709[label="151.38.219.255;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3165[label="151.38.219.255;1pkt 1fpkt", shape=invtriangle, color=brown];
3416[label="151.38.219.255;1pkt 1fpkt", shape=invhouse, color=bisque];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.38.219.255:3756, 22.108.242.247:411}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3756: (50%)&lt;BR/&gt; 411: (50%)&gt;];
}
585--586[label="1;1pkt 1fpkt"];
585--1517[label="1;1pkt 1fpkt"];
585--1620[label="1;1pkt 1fpkt"];
585--2709[label="1;1pkt 1fpkt"];
585--3165[label="1;1pkt 1fpkt"];
585--3416[label="1;1pkt 1fpkt"];
586--1517[label="1;1pkt 1fpkt"];
586--1620[label="1;1pkt 1fpkt"];
586--2709[label="1;1pkt 1fpkt"];
586--3165[label="1;1pkt 1fpkt"];
586--3416[label="1;1pkt 1fpkt"];
1517--1620[label="1;1pkt 1fpkt"];
1517--2709[label="1;1pkt 1fpkt"];
1517--3165[label="1;1pkt 1fpkt"];
1517--3416[label="1;1pkt 1fpkt"];
1620--2709[label="1;1pkt 1fpkt"];
1620--3165[label="1;1pkt 1fpkt"];
1620--3416[label="1;1pkt 1fpkt"];
2709--3165[label="1;1pkt 1fpkt"];
2709--3416[label="1;1pkt 1fpkt"];
3165--3416[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="22.108.242.247" dst_port="411" src_ip="151.38.219.255" src_port="3756"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
841[label="70.211.23.255;s;1pkt 1fpkt", shape=diamond, color=yellow];
842[label="166.3.144.110;d;2pkt 2fpkt", shape=diamond, color=yellow];
1580[label="70.211.23.255;s;1pkt 1fpkt", shape=hexagon, color=black];
1626[label="166.3.144.110;d;2pkt 2fpkt", shape=hexagon, color=black];
2707[label="70.211.23.255;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.195.231.132:123, 166.3.144.110:1033}[50%]&lt;BR/&gt;{70.211.23.255:6699, 166.3.144.110:2091}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (35.7143%)&lt;BR/&gt; 2091: (35.7143%)&lt;BR/&gt; 1033: (14.2857%)&lt;BR/&gt; 123: (14.2857%)&gt;];
}
841--842[label="1;1pkt 1fpkt"];
841--1580[label="1;1pkt 1fpkt"];
841--1626[label="1;1pkt 1fpkt"];
841--2707[label="1;1pkt 1fpkt"];
842--1580[label="1;1pkt 1fpkt"];
842--1626[label="1;2pkt 2fpkt"];
842--2707[label="1;1pkt 1fpkt"];
1580--1626[label="1;1pkt 1fpkt"];
1580--2707[label="1;1pkt 1fpkt"];
1626--2707[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.3.144.110" dst_port="2091" src_ip="70.211.23.255" src_port="6699"/>
      <filter dst_ip="166.3.144.110" dst_port="1033" src_ip="145.195.231.132" src_port="123"/>
    </slice>
    <from sec="1020574803" usec="0"/>
    <to sec="1020576762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
134[label="151.38.232.141;s;36pkt 36fpkt", shape=diamond, color=yellow];
269[label="22.96.208.218;d;2pkt 2fpkt", shape=diamond, color=yellow];
428[label="22.117.186.227;d;12pkt 12fpkt", shape=diamond, color=yellow];
430[label="17.3.55.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
1344[label="151.38.232.141;s;16pkt 16fpkt", shape=hexagon, color=black];
1628[label="17.3.55.172;d;1pkt 1fpkt", shape=hexagon, color=black];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.38.232.141:*, 22.0.171.216:6346}[35.1351%]&lt;BR/&gt;{151.38.232.141:6346, 22.117.186.227:*}[32.4324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 3416: (2.94118%)&lt;BR/&gt; 3307: (2.20588%)&lt;BR/&gt; 1289: (2.20588%)&lt;BR/&gt; 50361: (1.47059%)&gt;];
}
134--269[label="0.5;1pkt 1fpkt"];
134--428[label="1;12pkt 12fpkt"];
134--430[label="1;1pkt 1fpkt"];
134--1344[label="1;16pkt 16fpkt"];
134--1628[label="1;1pkt 1fpkt"];
269--449[label="0.5;1pkt 1fpkt"];
269--1344[label="0.5;1pkt 1fpkt"];
428--1344[label="0.0833333;1pkt 1fpkt"];
430--1344[label="1;1pkt 1fpkt"];
430--1628[label="1;1pkt 1fpkt"];
1344--1628[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="22.0.171.216" dst_port="6346" src_ip="151.38.232.141"/>
      <filter dst_ip="22.117.186.227" src_ip="151.38.232.141" src_port="6346"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
336[label="135.246.197.171;s;11pkt 11fpkt", shape=diamond, color=yellow];
424[label="17.0.149.204;d;1pkt 1fpkt", shape=diamond, color=yellow];
867[label="86.171.174.184;d;1pkt 1fpkt", shape=diamond, color=yellow];
1632[label="86.171.174.184;d;1pkt 1fpkt", shape=hexagon, color=black];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.246.197.171:*, *:6699}[54.5455%]&lt;BR/&gt;{135.246.197.171:*, 163.41.42.199:80}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (32.1429%)&lt;BR/&gt; 80: (14.2857%)&lt;BR/&gt; 3163: (10.7143%)&lt;BR/&gt; 3149: (7.14286%)&lt;BR/&gt; 6683: (3.57143%)&gt;];
}
336--424[label="1;1pkt 1fpkt"];
336--867[label="1;1pkt 1fpkt"];
336--1268[label="1;1pkt 1fpkt"];
336--1632[label="1;1pkt 1fpkt"];
336--1764[label="1;1pkt 1fpkt"];
867--1632[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="135.246.197.171"/>
      <filter dst_ip="163.41.42.199" dst_port="80" src_ip="135.246.197.171"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
690[label="151.51.4.1;s;3pkt 3fpkt", shape=diamond, color=yellow];
766[label="217.157.187.204;d;1pkt 1fpkt", shape=diamond, color=yellow];
1634[label="217.157.187.204;d;1pkt 1fpkt", shape=hexagon, color=black];
1730[label="151.51.4.1;s;3pkt 3fpkt", shape=hexagon, color=black];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.51.4.1:1044, 16.96.7.141:21}[33.3333%]&lt;BR/&gt;{151.51.4.1:1030, 16.203.8.189:1863}[33.3333%]&lt;BR/&gt;{151.51.4.1:41015, 217.157.187.204:1207}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41015: (25%)&lt;BR/&gt; 1207: (25%)&lt;BR/&gt; 1863: (12.5%)&lt;BR/&gt; 1044: (12.5%)&lt;BR/&gt; 1030: (12.5%)&gt;];
}
690--766[label="1;1pkt 1fpkt"];
690--1634[label="1;1pkt 1fpkt"];
690--1730[label="1;3pkt 3fpkt"];
766--1634[label="1;1pkt 1fpkt"];
766--1730[label="1;1pkt 1fpkt"];
1634--1730[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.157.187.204" dst_port="1207" src_ip="151.51.4.1" src_port="41015"/>
      <filter dst_ip="16.203.8.189" dst_port="1863" src_ip="151.51.4.1" src_port="1030"/>
      <filter dst_ip="16.96.7.141" dst_port="21" src_ip="151.51.4.1" src_port="1044"/>
    </slice>
    <from sec="1020574810" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
105[label="135.246.135.169;s;407pkt 407fpkt", shape=diamond, color=yellow];
142[label="193.232.9.195;d;1pkt 1fpkt", shape=diamond, color=yellow];
917[label="22.72.199.186;d;1pkt 1fpkt", shape=diamond, color=yellow];
1481[label="135.246.135.169;s;405pkt 405fpkt", shape=hexagon, color=black];
1650[label="193.232.9.195;d;1pkt 1fpkt", shape=hexagon, color=black];
2470[label="135.246.135.169;408pkt 408fpkt", shape=pentagon, color=darkviolet];
3031[label="135.246.135.169;407pkt 407fpkt", shape=invtriangle, color=brown];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.246.135.169:*, *:8888}[55.3922%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (27.5767%)&lt;BR/&gt; 7777: (7.48466%)&lt;BR/&gt; 3456: (4.41718%)&lt;BR/&gt; 4444: (1.71779%)&lt;BR/&gt; 4567: (1.59509%)&gt;];
}
105--142[label="1;1pkt 1fpkt"];
105--917[label="1;1pkt 1fpkt"];
105--1159[label="0.8;4pkt 4fpkt"];
105--1285[label="0.8;4pkt 4fpkt"];
105--1481[label="1;405pkt 405fpkt"];
105--1650[label="1;1pkt 1fpkt"];
105--2470[label="1;407pkt 407fpkt"];
105--3031[label="0.997543;406pkt 406fpkt"];
142--1481[label="1;1pkt 1fpkt"];
142--1650[label="1;1pkt 1fpkt"];
142--2470[label="1;1pkt 1fpkt"];
142--3031[label="1;1pkt 1fpkt"];
917--1481[label="1;1pkt 1fpkt"];
917--2470[label="1;1pkt 1fpkt"];
917--3031[label="1;1pkt 1fpkt"];
1481--1650[label="1;1pkt 1fpkt"];
1481--2470[label="1;405pkt 405fpkt"];
1481--3031[label="0.997531;404pkt 404fpkt"];
1650--2470[label="1;1pkt 1fpkt"];
1650--3031[label="1;1pkt 1fpkt"];
2470--3031[label="1;407pkt 407fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="135.246.135.169"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
169[label="141.26.135.31;d;40pkt 40fpkt", shape=diamond, color=yellow];
170[label="147.83.130.231;s;2pkt 2fpkt", shape=diamond, color=yellow];
1652[label="147.83.130.231;s;2pkt 2fpkt", shape=hexagon, color=black];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.167.50.169:1214, 141.26.135.31:*}[32.5%]&lt;BR/&gt;{128.164.35.195:1214, 141.26.135.31:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 2606: (3.40909%)&lt;BR/&gt; 2015: (3.40909%)&lt;BR/&gt; 3140: (1.13636%)&lt;BR/&gt; 3124: (1.13636%)&gt;];
}
169--170[label="1;2pkt 2fpkt"];
169--1652[label="1;2pkt 2fpkt"];
170--1652[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.26.135.31" src_ip="165.167.50.169" src_port="1214"/>
      <filter dst_ip="141.26.135.31" src_ip="128.164.35.195" src_port="1214"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
1062[label="145.208.153.148;s;57pkt 57fpkt", shape=diamond, color=yellow];
1666[label="145.208.153.148;s;57pkt 57fpkt", shape=hexagon, color=black];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.153.148:*, 16.203.37.40:443}[59.6491%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (43.8596%)&lt;BR/&gt; 80: (6.14035%)&lt;BR/&gt; 1150: (0.877193%)&lt;BR/&gt; 1149: (0.877193%)&lt;BR/&gt; 1147: (0.877193%)&gt;];
}
1062--1666[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="16.203.37.40" dst_port="443" src_ip="145.208.153.148"/>
    </slice>
    <from sec="1020575579" usec="0"/>
    <to sec="1020576170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
50[label="151.56.163.145;s;25pkt 25fpkt", shape=diamond, color=yellow];
236[label="22.104.162.250;d;3pkt 3fpkt", shape=diamond, color=yellow];
1668[label="22.104.162.250;d;3pkt 3fpkt", shape=hexagon, color=black];
2393[label="151.56.163.145;25pkt 25fpkt", shape=pentagon, color=darkviolet];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.56.163.145:*, *:1214}[80%]&lt;BR/&gt;{151.56.163.145:*, 17.197.198.4:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (48.2143%)&lt;BR/&gt; 1712: (3.57143%)&lt;BR/&gt; 1502: (3.57143%)&lt;BR/&gt; 1425: (3.57143%)&lt;BR/&gt; 1853: (1.78571%)&gt;];
}
50--236[label="1;3pkt 3fpkt"];
50--1668[label="1;3pkt 3fpkt"];
50--2393[label="1;25pkt 25fpkt"];
236--1668[label="1;3pkt 3fpkt"];
236--2393[label="1;3pkt 3fpkt"];
1668--2393[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="17.197.198.4" src_ip="151.56.163.145"/>
      <filter dst_port="1214" src_ip="151.56.163.145"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
79[label="193.243.194.74;d;18pkt 18fpkt", shape=diamond, color=yellow];
96[label="116.19.220.225;s;1pkt 1fpkt", shape=diamond, color=yellow];
457[label="70.185.44.136;s;3pkt 3fpkt", shape=diamond, color=yellow];
743[label="116.23.78.158;s;3pkt 3fpkt", shape=diamond, color=yellow];
1547[label="116.23.78.158;s;3pkt 3fpkt", shape=hexagon, color=black];
1669[label="193.243.194.74;d;18pkt 18fpkt", shape=hexagon, color=black];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 193.243.194.74:1755}[44.4444%]&lt;BR/&gt;{*:*, 193.243.194.74:80}[38.8889%]&lt;BR/&gt;{212.72.60.34:*, 193.243.194.74:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (25%)&lt;BR/&gt; 0: (19.5652%)&lt;BR/&gt; 80: (15.2174%)&lt;BR/&gt; 1094: (4.34783%)&lt;BR/&gt; 1092: (4.34783%)&gt;];
}
79--96[label="1;1pkt 1fpkt"];
79--457[label="1;3pkt 3fpkt"];
79--743[label="1;3pkt 3fpkt"];
79--922[label="1;2pkt 2fpkt"];
79--1547[label="1;3pkt 3fpkt"];
79--1598[label="1;2pkt 2fpkt"];
79--1669[label="1;18pkt 18fpkt"];
79--1846[label="0.0555556;1pkt 1fpkt"];
79--1869[label="0.0555556;1pkt 1fpkt"];
79--1874[label="0.0555556;1pkt 1fpkt"];
79--1885[label="0.0555556;1pkt 1fpkt"];
79--1890[label="0.0555556;1pkt 1fpkt"];
79--1895[label="0.0555556;1pkt 1fpkt"];
96--1669[label="1;1pkt 1fpkt"];
457--1669[label="1;3pkt 3fpkt"];
743--1547[label="1;3pkt 3fpkt"];
743--1669[label="1;3pkt 3fpkt"];
1547--1669[label="1;3pkt 3fpkt"];
1669--1846[label="0.0555556;1pkt 1fpkt"];
1669--1869[label="0.0555556;1pkt 1fpkt"];
1669--1874[label="0.0555556;1pkt 1fpkt"];
1669--1885[label="0.0555556;1pkt 1fpkt"];
1669--1890[label="0.0555556;1pkt 1fpkt"];
1669--1895[label="0.0555556;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.243.194.74" src_ip="212.72.60.34"/>
      <filter dst_ip="193.243.194.74" dst_port="1755"/>
      <filter dst_ip="193.243.194.74" dst_port="80"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
1117[label="221.40.60.18;s;34pkt 34fpkt", shape=diamond, color=yellow];
1124[label="192.10.193.144;d;2pkt 2fpkt", shape=diamond, color=yellow];
1687[label="221.40.60.18;s;34pkt 34fpkt", shape=hexagon, color=black];
1689[label="192.10.193.144;d;2pkt 2fpkt", shape=hexagon, color=black];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.40.60.18:80, 151.51.43.190:*}[91.1765%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2118: (2.77778%)&lt;BR/&gt; 2117: (2.77778%)&lt;BR/&gt; 53835: (1.38889%)&lt;BR/&gt; 1152: (1.38889%)&gt;];
}
1117--1124[label="1;2pkt 2fpkt"];
1117--1687[label="1;34pkt 34fpkt"];
1117--1689[label="1;2pkt 2fpkt"];
1124--1687[label="1;2pkt 2fpkt"];
1124--1689[label="1;2pkt 2fpkt"];
1687--1689[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="151.51.43.190" src_ip="221.40.60.18" src_port="80"/>
    </slice>
    <from sec="1020576017" usec="0"/>
    <to sec="1020576274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
222[label="145.208.157.237;s;106pkt 106fpkt", shape=diamond, color=yellow];
1084[label="214.253.26.116;d;97pkt 97fpkt", shape=diamond, color=yellow];
1688[label="145.208.157.237;s;82pkt 82fpkt", shape=hexagon, color=black];
2669[label="145.208.157.237;417pkt 417fpkt", shape=pentagon, color=darkviolet];
3146[label="145.208.157.237;417pkt 417fpkt", shape=invtriangle, color=brown];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.157.237:*, 214.253.26.116:80}[23.2614%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4638%)&lt;BR/&gt; 81: (0.536193%)&lt;BR/&gt; 2729: (0.223414%)&lt;BR/&gt; 2728: (0.223414%)&lt;BR/&gt; 2726: (0.223414%)&gt;];
}
222--1084[label="1;97pkt 97fpkt"];
222--1688[label="1;82pkt 82fpkt"];
222--1869[label="0.0377358;4pkt 4fpkt"];
222--1885[label="0.0377358;4pkt 4fpkt"];
222--1895[label="0.0377358;4pkt 4fpkt"];
222--2669[label="1;106pkt 106fpkt"];
222--3146[label="1;106pkt 106fpkt"];
1084--1688[label="0.890244;73pkt 73fpkt"];
1084--1869[label="0.0412371;4pkt 4fpkt"];
1084--1885[label="0.0412371;4pkt 4fpkt"];
1084--1895[label="0.0412371;4pkt 4fpkt"];
1084--2669[label="1;97pkt 97fpkt"];
1084--3146[label="1;97pkt 97fpkt"];
1688--1869[label="0.0487805;4pkt 4fpkt"];
1688--1885[label="0.0487805;4pkt 4fpkt"];
1688--1895[label="0.0487805;4pkt 4fpkt"];
1688--2669[label="1;82pkt 82fpkt"];
1688--3146[label="1;82pkt 82fpkt"];
2669--3146[label="1;417pkt 417fpkt"];
</description>
    <slice>
      <filter dst_ip="214.253.26.116" dst_port="80" src_ip="145.208.157.237"/>
    </slice>
    <from sec="1020574810" usec="0"/>
    <to sec="1020576529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
1118[label="151.51.50.49;s;141pkt 141fpkt", shape=diamond, color=yellow];
1150[label="16.119.5.110;d;89pkt 89fpkt", shape=diamond, color=yellow];
1708[label="151.51.50.49;s;117pkt 117fpkt", shape=hexagon, color=black];
2091[label="151.51.50.49;144pkt 144fpkt", shape=pentagon, color=darkviolet];
2815[label="151.51.50.49;144pkt 144fpkt", shape=invtriangle, color=brown];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.51.50.49:*, 16.119.5.110:80}[61.8056%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5276%)&lt;BR/&gt; 51874: (0.393701%)&lt;BR/&gt; 51873: (0.393701%)&lt;BR/&gt; 51872: (0.393701%)&lt;BR/&gt; 51871: (0.393701%)&gt;];
}
1118--1150[label="1;89pkt 89fpkt"];
1118--1708[label="1;117pkt 117fpkt"];
1118--1869[label="0.0212766;3pkt 3fpkt"];
1118--1885[label="0.0212766;3pkt 3fpkt"];
1118--1895[label="0.0212766;3pkt 3fpkt"];
1118--2091[label="1;141pkt 141fpkt"];
1118--2815[label="1;141pkt 141fpkt"];
1150--1708[label="0.977528;87pkt 87fpkt"];
1150--2091[label="1;89pkt 89fpkt"];
1150--2815[label="1;89pkt 89fpkt"];
1708--1869[label="0.025641;3pkt 3fpkt"];
1708--1885[label="0.025641;3pkt 3fpkt"];
1708--1895[label="0.025641;3pkt 3fpkt"];
1708--2091[label="1;117pkt 117fpkt"];
1708--2815[label="1;117pkt 117fpkt"];
2091--2815[label="1;144pkt 144fpkt"];
</description>
    <slice>
      <filter dst_ip="16.119.5.110" dst_port="80" src_ip="151.51.50.49"/>
    </slice>
    <from sec="1020575232" usec="0"/>
    <to sec="1020576539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
92[label="223.129.106.139;d;967pkt 967fpkt", shape=diamond, color=yellow];
254[label="135.246.173.7;s;1067pkt 1067fpkt", shape=diamond, color=yellow];
1711[label="135.246.173.7;s;1067pkt 1067fpkt", shape=hexagon, color=black];
1926[label="135.246.173.7;1097pkt 1097fpkt", shape=pentagon, color=darkviolet];
2727[label="135.246.173.7;1097pkt 1097fpkt", shape=invtriangle, color=brown];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.246.173.7:*, 223.129.106.139:80}[99.818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9906%)&lt;BR/&gt; 3030: (0.0566572%)&lt;BR/&gt; 3753: (0.0472144%)&lt;BR/&gt; 3752: (0.0472144%)&lt;BR/&gt; 3751: (0.0472144%)&gt;];
}
92--111[label="0.00123153;1pkt 1fpkt"];
92--254[label="0.997932;965pkt 965fpkt"];
92--666[label="0.00395257;1pkt 1fpkt"];
92--1711[label="0.997932;965pkt 965fpkt"];
92--1846[label="0.0299897;29pkt 29fpkt"];
92--1855[label="0.0289555;28pkt 28fpkt"];
92--1856[label="0.0320579;31pkt 31fpkt"];
92--1860[label="0.0372285;36pkt 36fpkt"];
92--1869[label="0.0341262;33pkt 33fpkt"];
92--1874[label="0.0299897;29pkt 29fpkt"];
92--1879[label="0.0289555;28pkt 28fpkt"];
92--1881[label="0.0320579;31pkt 31fpkt"];
92--1882[label="0.0372285;36pkt 36fpkt"];
92--1885[label="0.0341262;33pkt 33fpkt"];
92--1890[label="0.0299897;29pkt 29fpkt"];
92--1895[label="0.0341262;33pkt 33fpkt"];
92--1926[label="0.997932;965pkt 965fpkt"];
92--2547[label="0.00121359;1pkt 1fpkt"];
92--2568[label="0.00390625;1pkt 1fpkt"];
92--2727[label="0.997932;965pkt 965fpkt"];
254--1711[label="1;1067pkt 1067fpkt"];
254--1846[label="0.027179;29pkt 29fpkt"];
254--1855[label="0.0262418;28pkt 28fpkt"];
254--1856[label="0.0290534;31pkt 31fpkt"];
254--1860[label="0.0337395;36pkt 36fpkt"];
254--1869[label="0.0309278;33pkt 33fpkt"];
254--1874[label="0.027179;29pkt 29fpkt"];
254--1879[label="0.0262418;28pkt 28fpkt"];
254--1881[label="0.0290534;31pkt 31fpkt"];
254--1882[label="0.0337395;36pkt 36fpkt"];
254--1885[label="0.0309278;33pkt 33fpkt"];
254--1890[label="0.027179;29pkt 29fpkt"];
254--1895[label="0.0309278;33pkt 33fpkt"];
254--1926[label="1;1067pkt 1067fpkt"];
254--2727[label="1;1067pkt 1067fpkt"];
1711--1846[label="0.027179;29pkt 29fpkt"];
1711--1855[label="0.0262418;28pkt 28fpkt"];
1711--1856[label="0.0290534;31pkt 31fpkt"];
1711--1860[label="0.0337395;36pkt 36fpkt"];
1711--1869[label="0.0309278;33pkt 33fpkt"];
1711--1874[label="0.027179;29pkt 29fpkt"];
1711--1879[label="0.0262418;28pkt 28fpkt"];
1711--1881[label="0.0290534;31pkt 31fpkt"];
1711--1882[label="0.0337395;36pkt 36fpkt"];
1711--1885[label="0.0309278;33pkt 33fpkt"];
1711--1890[label="0.027179;29pkt 29fpkt"];
1711--1895[label="0.0309278;33pkt 33fpkt"];
1711--1926[label="1;1067pkt 1067fpkt"];
1711--2727[label="1;1067pkt 1067fpkt"];
1926--2727[label="1;1097pkt 1097fpkt"];
</description>
    <slice>
      <filter dst_ip="223.129.106.139" dst_port="80" src_ip="135.246.173.7"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
521[label="193.243.196.209;s;56pkt 56fpkt", shape=diamond, color=yellow];
1715[label="193.243.196.209;s;56pkt 56fpkt", shape=hexagon, color=black];
2589[label="193.243.196.209;55pkt 55fpkt", shape=pentagon, color=darkviolet];
3094[label="193.243.196.209;55pkt 55fpkt", shape=invtriangle, color=brown];
3381[label="193.243.196.209;55pkt 55fpkt", shape=invhouse, color=bisque];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.243.196.209:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
521--1715[label="1;56pkt 56fpkt"];
521--2589[label="1;55pkt 55fpkt"];
521--3094[label="1;55pkt 55fpkt"];
521--3381[label="1;55pkt 55fpkt"];
1715--2589[label="1;55pkt 55fpkt"];
1715--3094[label="1;55pkt 55fpkt"];
1715--3381[label="1;55pkt 55fpkt"];
2589--3094[label="1;55pkt 55fpkt"];
2589--3381[label="1;55pkt 55fpkt"];
3094--3381[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter src_ip="193.243.196.209"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
183[label="204.176.205.90;s;1355pkt 1355fpkt", shape=diamond, color=yellow];
298[label="204.176.205.88;s;241pkt 241fpkt", shape=diamond, color=yellow];
307[label="196.99.97.109;d;2pkt 2fpkt", shape=diamond, color=yellow];
476[label="214.229.122.239;d;497pkt 497fpkt", shape=diamond, color=yellow];
662[label="8.162.191.196;d;451pkt 451fpkt", shape=diamond, color=yellow];
668[label="8.162.191.226;d;68pkt 68fpkt", shape=diamond, color=yellow];
729[label="193.243.196.100;s;134pkt 134fpkt", shape=diamond, color=yellow];
850[label="214.33.95.77;d;193pkt 193fpkt", shape=diamond, color=yellow];
890[label="8.162.191.133;d;132pkt 132fpkt", shape=diamond, color=yellow];
898[label="192.161.57.145;d;3pkt 3fpkt", shape=diamond, color=yellow];
925[label="192.161.57.151;d;3pkt 3fpkt", shape=diamond, color=yellow];
1131[label="193.149.56.131;d;1pkt 1fpkt", shape=diamond, color=yellow];
1281[label="207.235.238.254;d;94pkt 94fpkt", shape=diamond, color=yellow];
1289[label="18.203.43.110;d;1pkt 1fpkt", shape=diamond, color=yellow];
1376[label="204.176.205.90;s;167pkt 167fpkt", shape=hexagon, color=black];
1377[label="196.99.97.109;d;1pkt 1fpkt", shape=hexagon, color=black];
1395[label="204.176.205.88;s;67pkt 67fpkt", shape=hexagon, color=black];
1717[label="8.162.191.196;d;430pkt 430fpkt", shape=hexagon, color=black];
1719[label="8.162.191.226;d;62pkt 62fpkt", shape=hexagon, color=black];
2218[label="204.176.205.90;1545pkt 1545fpkt", shape=pentagon, color=darkviolet];
2881[label="204.176.205.90;1545pkt 1545fpkt", shape=invtriangle, color=brown];
3261[label="204.176.205.90;1546pkt 1546fpkt", shape=invhouse, color=bisque];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.176.205.90:*, 214.229.122.239:*}[27.8697%]&lt;BR/&gt;{*:*, *:113}[27.1975%]&lt;BR/&gt;{204.176.205.90:6667, 8.162.191.196:*}[24.819%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (24.1626%)&lt;BR/&gt; 113: (12.3038%)&lt;BR/&gt; 1080: (5.6922%)&lt;BR/&gt; 6668: (5.21785%)&lt;BR/&gt; 6666: (0.503631%)&gt;];
}
183--307[label="1;2pkt 2fpkt"];
183--476[label="0.95171;473pkt 473fpkt"];
183--662[label="0.953437;430pkt 430fpkt"];
183--668[label="0.0147059;1pkt 1fpkt"];
183--850[label="0.896373;173pkt 173fpkt"];
183--890[label="0.0151515;2pkt 2fpkt"];
183--898[label="0.333333;1pkt 1fpkt"];
183--1281[label="0.744681;70pkt 70fpkt"];
183--1376[label="1;167pkt 167fpkt"];
183--1377[label="1;1pkt 1fpkt"];
183--1717[label="1;430pkt 430fpkt"];
183--1719[label="0.016129;1pkt 1fpkt"];
183--1856[label="0.000738007;1pkt 1fpkt"];
183--1881[label="0.000738007;1pkt 1fpkt"];
183--2218[label="0.999262;1354pkt 1354fpkt"];
183--2881[label="0.999262;1354pkt 1354fpkt"];
183--3261[label="1;1355pkt 1355fpkt"];
298--668[label="0.852941;58pkt 58fpkt"];
298--850[label="0.00518135;1pkt 1fpkt"];
298--890[label="0.454545;60pkt 60fpkt"];
298--898[label="0.333333;1pkt 1fpkt"];
298--925[label="0.333333;1pkt 1fpkt"];
298--1131[label="1;1pkt 1fpkt"];
298--1281[label="0.0851064;8pkt 8fpkt"];
298--1289[label="1;1pkt 1fpkt"];
298--1395[label="1;67pkt 67fpkt"];
298--1719[label="0.935484;58pkt 58fpkt"];
307--1376[label="0.5;1pkt 1fpkt"];
307--1377[label="1;1pkt 1fpkt"];
307--2218[label="1;2pkt 2fpkt"];
307--2881[label="1;2pkt 2fpkt"];
307--3261[label="1;2pkt 2fpkt"];
476--1376[label="0.335329;56pkt 56fpkt"];
476--2218[label="1;497pkt 497fpkt"];
476--2881[label="1;497pkt 497fpkt"];
476--3261[label="1;497pkt 497fpkt"];
662--1376[label="0.335329;56pkt 56fpkt"];
662--1717[label="1;430pkt 430fpkt"];
662--2218[label="1;451pkt 451fpkt"];
662--2881[label="1;451pkt 451fpkt"];
662--3261[label="1;451pkt 451fpkt"];
668--729[label="0.0294118;2pkt 2fpkt"];
668--1376[label="0.0147059;1pkt 1fpkt"];
668--1395[label="0.149254;10pkt 10fpkt"];
668--1719[label="1;62pkt 62fpkt"];
668--2218[label="0.0147059;1pkt 1fpkt"];
668--2881[label="0.0147059;1pkt 1fpkt"];
668--3261[label="0.0147059;1pkt 1fpkt"];
729--850[label="0.00746269;1pkt 1fpkt"];
729--890[label="0.484848;64pkt 64fpkt"];
729--898[label="0.333333;1pkt 1fpkt"];
729--925[label="0.666667;2pkt 2fpkt"];
729--1281[label="0.0851064;8pkt 8fpkt"];
729--1719[label="0.0322581;2pkt 2fpkt"];
850--1376[label="0.11976;20pkt 20fpkt"];
850--1395[label="0.0149254;1pkt 1fpkt"];
850--2218[label="0.989637;191pkt 191fpkt"];
850--2881[label="0.989637;191pkt 191fpkt"];
850--3261[label="0.989637;191pkt 191fpkt"];
890--1376[label="0.0151515;2pkt 2fpkt"];
890--1395[label="0.179104;12pkt 12fpkt"];
890--2218[label="0.0151515;2pkt 2fpkt"];
890--2881[label="0.0151515;2pkt 2fpkt"];
890--3261[label="0.0151515;2pkt 2fpkt"];
898--1376[label="0.333333;1pkt 1fpkt"];
898--1395[label="0.333333;1pkt 1fpkt"];
898--2218[label="0.333333;1pkt 1fpkt"];
898--2881[label="0.333333;1pkt 1fpkt"];
898--3261[label="0.333333;1pkt 1fpkt"];
925--1395[label="0.333333;1pkt 1fpkt"];
1131--1395[label="1;1pkt 1fpkt"];
1281--1376[label="0.106383;10pkt 10fpkt"];
1281--2218[label="0.829787;78pkt 78fpkt"];
1281--2881[label="0.829787;78pkt 78fpkt"];
1281--3261[label="0.829787;78pkt 78fpkt"];
1289--1395[label="1;1pkt 1fpkt"];
1376--1377[label="1;1pkt 1fpkt"];
1376--1717[label="0.335329;56pkt 56fpkt"];
1376--1719[label="0.016129;1pkt 1fpkt"];
1376--2218[label="1;167pkt 167fpkt"];
1376--2881[label="1;167pkt 167fpkt"];
1376--3261[label="1;167pkt 167fpkt"];
1377--2218[label="1;1pkt 1fpkt"];
1377--2881[label="1;1pkt 1fpkt"];
1377--3261[label="1;1pkt 1fpkt"];
1395--1719[label="0.16129;10pkt 10fpkt"];
1717--2218[label="1;430pkt 430fpkt"];
1717--2881[label="1;430pkt 430fpkt"];
1717--3261[label="1;430pkt 430fpkt"];
1719--2218[label="0.016129;1pkt 1fpkt"];
1719--2881[label="0.016129;1pkt 1fpkt"];
1719--3261[label="0.016129;1pkt 1fpkt"];
2218--2881[label="1;1545pkt 1545fpkt"];
2218--3261[label="1;1545pkt 1545fpkt"];
2881--3261[label="1;1545pkt 1545fpkt"];
</description>
    <slice>
      <filter dst_port="113"/>
      <filter dst_ip="214.229.122.239" src_ip="204.176.205.90"/>
      <filter dst_ip="8.162.191.196" src_ip="204.176.205.90" src_port="6667"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
1093[label="165.89.195.33;s;20pkt 20fpkt", shape=diamond, color=yellow];
1132[label="222.165.189.190;d;1pkt 1fpkt", shape=diamond, color=yellow];
1731[label="222.165.189.190;d;1pkt 1fpkt", shape=hexagon, color=black];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.89.195.33:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1093--1132[label="1;1pkt 1fpkt"];
1093--1731[label="1;1pkt 1fpkt"];
1132--1731[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="165.89.195.33"/>
    </slice>
    <from sec="1020574810" usec="0"/>
    <to sec="1020576707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
1210[label="193.243.193.29;s;171pkt 171fpkt", shape=diamond, color=yellow];
1734[label="193.243.193.29;s;154pkt 154fpkt", shape=hexagon, color=black];
2015[label="193.243.193.29;175pkt 175fpkt", shape=pentagon, color=darkviolet];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.243.193.29:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1210--1734[label="1;154pkt 154fpkt"];
1210--2015[label="0.994152;170pkt 170fpkt"];
1734--2015[label="0.993506;153pkt 153fpkt"];
</description>
    <slice>
      <filter src_ip="193.243.193.29"/>
    </slice>
    <from sec="1020574813" usec="0"/>
    <to sec="1020576756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
614[label="145.208.122.183;s;213pkt 213fpkt", shape=diamond, color=yellow];
815[label="213.133.63.202;d;11pkt 11fpkt", shape=diamond, color=yellow];
1107[label="144.75.180.25;s;100pkt 100fpkt", shape=diamond, color=yellow];
1215[label="99.37.54.16;d;77pkt 77fpkt", shape=diamond, color=yellow];
1684[label="144.75.180.25;s;65pkt 65fpkt", shape=hexagon, color=black];
1740[label="99.37.54.16;d;70pkt 70fpkt", shape=hexagon, color=black];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.122.183:*, *:80}[60.0639%]&lt;BR/&gt;{144.75.180.25:*, *:80}[28.4345%]&lt;BR/&gt;{*:*, 99.37.54.16:80}[24.2812%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.056%)&lt;BR/&gt; 4000: (1.39925%)&lt;BR/&gt; 0: (1.30597%)&lt;BR/&gt; 8000: (0.839552%)&lt;BR/&gt; 53: (0.839552%)&gt;];
}
614--616[label="0.00469484;1pkt 1fpkt"];
614--815[label="1;11pkt 11fpkt"];
614--1215[label="0.337662;26pkt 26fpkt"];
614--1673[label="0.00469484;1pkt 1fpkt"];
614--1740[label="0.371429;26pkt 26fpkt"];
614--1855[label="0.0140845;3pkt 3fpkt"];
614--1856[label="0.00938967;2pkt 2fpkt"];
614--1869[label="0.0516432;11pkt 11fpkt"];
614--1879[label="0.0140845;3pkt 3fpkt"];
614--1881[label="0.00938967;2pkt 2fpkt"];
614--1885[label="0.0516432;11pkt 11fpkt"];
614--1895[label="0.0516432;11pkt 11fpkt"];
1107--1215[label="0.662338;51pkt 51fpkt"];
1107--1684[label="1;65pkt 65fpkt"];
1107--1740[label="0.628571;44pkt 44fpkt"];
1107--1869[label="0.01;1pkt 1fpkt"];
1107--1885[label="0.01;1pkt 1fpkt"];
1107--1895[label="0.01;1pkt 1fpkt"];
1215--1684[label="0.446154;29pkt 29fpkt"];
1215--1740[label="1;70pkt 70fpkt"];
1215--1869[label="0.0909091;7pkt 7fpkt"];
1215--1885[label="0.0909091;7pkt 7fpkt"];
1215--1895[label="0.0909091;7pkt 7fpkt"];
1684--1740[label="0.446154;29pkt 29fpkt"];
1684--1869[label="0.0153846;1pkt 1fpkt"];
1684--1885[label="0.0153846;1pkt 1fpkt"];
1684--1895[label="0.0153846;1pkt 1fpkt"];
1740--1869[label="0.1;7pkt 7fpkt"];
1740--1885[label="0.1;7pkt 7fpkt"];
1740--1895[label="0.1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.208.122.183"/>
      <filter dst_port="80" src_ip="144.75.180.25"/>
      <filter dst_ip="99.37.54.16" dst_port="80"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.761847,1.86949,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
1119[label="99.213.52.153;s;10pkt 10fpkt", shape=diamond, color=yellow];
1742[label="99.213.52.153;s;9pkt 9fpkt", shape=hexagon, color=black];
3000[label="99.213.52.153;19pkt 19fpkt", shape=invtriangle, color=brown];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.213.52.153:*, 192.10.17.129:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1164: (3.94737%)&lt;BR/&gt; 1163: (3.94737%)&lt;BR/&gt; 1162: (3.94737%)&lt;BR/&gt; 1161: (3.94737%)&gt;];
}
1119--1742[label="1;9pkt 9fpkt"];
1119--1869[label="0.2;2pkt 2fpkt"];
1119--1885[label="0.2;2pkt 2fpkt"];
1119--1895[label="0.2;2pkt 2fpkt"];
1119--2414[label="1;10pkt 10fpkt"];
1119--3000[label="1;10pkt 10fpkt"];
1742--1869[label="0.222222;2pkt 2fpkt"];
1742--1885[label="0.222222;2pkt 2fpkt"];
1742--1895[label="0.222222;2pkt 2fpkt"];
1742--2414[label="1;9pkt 9fpkt"];
1742--3000[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="192.10.17.129" dst_port="80" src_ip="99.213.52.153"/>
    </slice>
    <from sec="1020575603" usec="0"/>
    <to sec="1020576568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
698[label="213.35.45.137;s;2pkt 2fpkt", shape=diamond, color=yellow];
1743[label="213.35.45.137;s;2pkt 2fpkt", shape=hexagon, color=black];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.35.45.137:5001, 192.10.205.81:1073}[50%]&lt;BR/&gt;{213.35.45.137:5001, 192.10.205.81:1079}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 1079: (25%)&lt;BR/&gt; 1073: (25%)&gt;];
}
698--1743[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.10.205.81" dst_port="1079" src_ip="213.35.45.137" src_port="5001"/>
      <filter dst_ip="192.10.205.81" dst_port="1073" src_ip="213.35.45.137" src_port="5001"/>
    </slice>
    <from sec="1020576169" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.799227,1.83029,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
155[label="192.10.205.6;d;41pkt 41fpkt", shape=diamond, color=yellow];
294[label="17.0.34.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
389[label="70.225.45.13;s;1pkt 1fpkt", shape=diamond, color=yellow];
1414[label="70.225.45.13;s;1pkt 1fpkt", shape=hexagon, color=black];
1521[label="192.10.205.6;d;23pkt 23fpkt", shape=hexagon, color=black];
1747[label="17.0.34.5;s;1pkt 1fpkt", shape=hexagon, color=black];
1912[label="17.0.34.5;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3183[label="70.225.45.13;1pkt 1fpkt", shape=invhouse, color=bisque];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 192.10.205.6:6699}[87.8049%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (45%)&lt;BR/&gt; 0: (7.14286%)&lt;BR/&gt; 2815: (3.57143%)&lt;BR/&gt; 2181: (3.57143%)&lt;BR/&gt; 1911: (2.85714%)&gt;];
}
155--196[label="1;1pkt 1fpkt"];
155--294[label="1;1pkt 1fpkt"];
155--389[label="1;1pkt 1fpkt"];
155--1414[label="1;1pkt 1fpkt"];
155--1485[label="1;1pkt 1fpkt"];
155--1521[label="1;23pkt 23fpkt"];
155--1747[label="1;1pkt 1fpkt"];
155--1912[label="1;1pkt 1fpkt"];
155--2215[label="1;1pkt 1fpkt"];
155--3183[label="1;1pkt 1fpkt"];
294--1521[label="1;1pkt 1fpkt"];
294--1747[label="1;1pkt 1fpkt"];
294--1912[label="1;1pkt 1fpkt"];
389--1414[label="1;1pkt 1fpkt"];
389--1521[label="1;1pkt 1fpkt"];
389--3183[label="1;1pkt 1fpkt"];
1414--1521[label="1;1pkt 1fpkt"];
1414--3183[label="1;1pkt 1fpkt"];
1521--1747[label="1;1pkt 1fpkt"];
1521--1912[label="1;1pkt 1fpkt"];
1521--2215[label="1;1pkt 1fpkt"];
1521--3183[label="1;1pkt 1fpkt"];
1747--1912[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.10.205.6" dst_port="6699"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
331[label="145.208.141.47;s;3pkt 3fpkt", shape=diamond, color=yellow];
332[label="131.8.193.16;d;3pkt 3fpkt", shape=diamond, color=yellow];
1751[label="131.8.193.16;d;3pkt 3fpkt", shape=hexagon, color=black];
2088[label="145.208.141.47;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.141.47:1287, 131.8.193.16:3393}[33.3333%]&lt;BR/&gt;{145.208.141.47:1389, 131.8.193.16:3405}[33.3333%]&lt;BR/&gt;{145.208.141.47:4865, 131.8.193.16:3018}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4865: (16.6667%)&lt;BR/&gt; 3405: (16.6667%)&lt;BR/&gt; 3393: (16.6667%)&lt;BR/&gt; 3018: (16.6667%)&lt;BR/&gt; 1389: (16.6667%)&gt;];
}
331--332[label="1;3pkt 3fpkt"];
331--1751[label="1;3pkt 3fpkt"];
331--2088[label="1;3pkt 3fpkt"];
332--1751[label="1;3pkt 3fpkt"];
332--2088[label="1;3pkt 3fpkt"];
1751--2088[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="131.8.193.16" dst_port="3018" src_ip="145.208.141.47" src_port="4865"/>
      <filter dst_ip="131.8.193.16" dst_port="3405" src_ip="145.208.141.47" src_port="1389"/>
      <filter dst_ip="131.8.193.16" dst_port="3393" src_ip="145.208.141.47" src_port="1287"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
674[label="151.148.12.66;s;334pkt 334fpkt", shape=diamond, color=yellow];
1127[label="192.213.244.33;d;2pkt 2fpkt", shape=diamond, color=yellow];
1754[label="192.213.244.33;d;2pkt 2fpkt", shape=hexagon, color=black];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.148.12.66:0, *:0}[99.7015%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
674--1127[label="0.5;1pkt 1fpkt"];
674--1754[label="0.5;1pkt 1fpkt"];
1127--1754[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="151.148.12.66"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
793[label="192.3.105.188;d;90pkt 90fpkt", shape=diamond, color=yellow];
1757[label="192.3.105.188;d;83pkt 83fpkt", shape=hexagon, color=black];
2107[label="18.94.172.54;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2824[label="18.94.172.54;9pkt 9fpkt", shape=invtriangle, color=brown];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 192.3.105.188:*}[47.3118%]&lt;BR/&gt;{*:*, 192.3.105.188:25}[45.1613%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.1579%)&lt;BR/&gt; 0: (2.63158%)&lt;BR/&gt; 3199: (1.05263%)&lt;BR/&gt; 3010: (1.05263%)&lt;BR/&gt; 2977: (1.05263%)&gt;];
}
793--1757[label="1;83pkt 83fpkt"];
793--2107[label="0.75;6pkt 6fpkt"];
793--2510[label="0.142857;1pkt 1fpkt"];
793--2824[label="0.666667;6pkt 6fpkt"];
1757--2107[label="0.75;6pkt 6fpkt"];
1757--2510[label="0.142857;1pkt 1fpkt"];
1757--2824[label="0.666667;6pkt 6fpkt"];
2107--2824[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="192.3.105.188" src_port="25"/>
      <filter dst_ip="192.3.105.188" dst_port="25"/>
    </slice>
    <from sec="1020574803" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
1173[label="204.112.52.195;s;256pkt 256fpkt", shape=diamond, color=yellow];
1760[label="204.112.52.195;s;256pkt 256fpkt", shape=hexagon, color=black];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.112.52.195:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1173--1760[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter src_ip="204.112.52.195"/>
    </slice>
    <from sec="1020574830" usec="0"/>
    <to sec="1020576702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709367,1.89929,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
1268[label="194.26.20.253;d;1pkt 1fpkt", shape=diamond, color=yellow];
1764[label="194.26.20.253;d;1pkt 1fpkt", shape=hexagon, color=black];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.246.197.171:3176, 194.26.20.253:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3176: (50%)&gt;];
}
1268--1764[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.26.20.253" dst_port="6699" src_ip="135.246.197.171" src_port="3176"/>
    </slice>
    <from sec="1020576419" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
1090[label="141.26.155.18;d;8pkt 8fpkt", shape=diamond, color=yellow];
1185[label="147.129.66.25;s;1pkt 1fpkt", shape=diamond, color=yellow];
1768[label="141.26.155.18;d;8pkt 8fpkt", shape=hexagon, color=black];
1995[label="147.129.66.25;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.178.40.134:*, 141.26.155.18:*}[25%]&lt;BR/&gt;{147.178.46.198:*, 141.26.155.18:*}[25%]&lt;BR/&gt;{129.122.41.200:*, 141.26.155.18:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41359: (11.1111%)&lt;BR/&gt; 1299: (11.1111%)&lt;BR/&gt; 41759: (5.55556%)&lt;BR/&gt; 41571: (5.55556%)&lt;BR/&gt; 41561: (5.55556%)&gt;];
}
1090--1185[label="1;1pkt 1fpkt"];
1090--1768[label="1;8pkt 8fpkt"];
1090--1995[label="1;1pkt 1fpkt"];
1185--1768[label="1;1pkt 1fpkt"];
1185--1995[label="1;1pkt 1fpkt"];
1768--1995[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.26.155.18" src_ip="129.122.41.200"/>
      <filter dst_ip="141.26.155.18" src_ip="147.178.46.198"/>
      <filter dst_ip="141.26.155.18" src_ip="147.178.40.134"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23004,1.95335,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
445[label="145.208.60.134;d;100pkt 100fpkt", shape=diamond, color=yellow];
1405[label="145.208.60.134;d;100pkt 100fpkt", shape=hexagon, color=black];
1789[label="201.27.184.23;s;100pkt 100fpkt", shape=polygon, color=gold];
1790[label="145.208.60.134;d;101pkt 101fpkt", shape=polygon, color=gold];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.27.184.23:80, 145.208.60.134:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 6394: (0.498753%)&lt;BR/&gt; 6393: (0.498753%)&lt;BR/&gt; 6392: (0.498753%)&lt;BR/&gt; 6391: (0.498753%)&gt;];
}
445--1405[label="1;100pkt 100fpkt"];
445--1789[label="1;100pkt 100fpkt"];
445--1790[label="1;100pkt 100fpkt"];
445--1865[label="0.03;3pkt 3fpkt"];
445--1867[label="0.33;33pkt 33fpkt"];
445--1883[label="0.33;33pkt 33fpkt"];
445--1987[label="1;100pkt 100fpkt"];
445--2759[label="1;100pkt 100fpkt"];
445--3195[label="1;100pkt 100fpkt"];
1405--1789[label="1;100pkt 100fpkt"];
1405--1790[label="1;100pkt 100fpkt"];
1405--1865[label="0.03;3pkt 3fpkt"];
1405--1867[label="0.33;33pkt 33fpkt"];
1405--1883[label="0.33;33pkt 33fpkt"];
1405--1987[label="1;100pkt 100fpkt"];
1405--2759[label="1;100pkt 100fpkt"];
1405--3195[label="1;100pkt 100fpkt"];
1789--1790[label="1;100pkt 100fpkt"];
1789--1865[label="0.03;3pkt 3fpkt"];
1789--1867[label="0.33;33pkt 33fpkt"];
1789--1883[label="0.33;33pkt 33fpkt"];
1789--1987[label="1;100pkt 100fpkt"];
1789--2759[label="1;100pkt 100fpkt"];
1789--3195[label="1;100pkt 100fpkt"];
1790--1865[label="0.029703;3pkt 3fpkt"];
1790--1867[label="0.326733;33pkt 33fpkt"];
1790--1883[label="0.326733;33pkt 33fpkt"];
1790--1987[label="0.990099;100pkt 100fpkt"];
1790--2759[label="0.990099;100pkt 100fpkt"];
1790--3195[label="0.990099;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.60.134" src_ip="201.27.184.23" src_port="80"/>
    </slice>
    <from sec="1020576016" usec="0"/>
    <to sec="1020576266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23004,1.95335,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
960[label="145.208.178.74;d;216pkt 216fpkt", shape=diamond, color=yellow];
961[label="198.91.198.1;s;107pkt 107fpkt", shape=diamond, color=yellow];
1616[label="145.208.178.74;d;216pkt 216fpkt", shape=hexagon, color=black];
1617[label="198.91.198.1;s;102pkt 102fpkt", shape=hexagon, color=black];
1638[label="198.91.198.59;s;96pkt 96fpkt", shape=hexagon, color=black];
1821[label="145.208.178.74;d;216pkt 216fpkt", shape=polygon, color=gold];
1822[label="198.91.198.1;s;102pkt 102fpkt", shape=polygon, color=gold];
1823[label="198.91.198.59;s;96pkt 96fpkt", shape=polygon, color=gold];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.91.198.1:80, 145.208.178.74:*}[48.8479%]&lt;BR/&gt;{198.91.198.59:80, 145.208.178.74:*}[44.2396%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5000: (0.260643%)&lt;BR/&gt; 4999: (0.260643%)&lt;BR/&gt; 4998: (0.260643%)&lt;BR/&gt; 4997: (0.260643%)&gt;];
}
960--961[label="0.990654;106pkt 106fpkt"];
960--1616[label="1;216pkt 216fpkt"];
960--1617[label="0.990196;101pkt 101fpkt"];
960--1638[label="1;96pkt 96fpkt"];
960--1821[label="1;216pkt 216fpkt"];
960--1822[label="0.990196;101pkt 101fpkt"];
960--1823[label="1;96pkt 96fpkt"];
960--1862[label="0.0601852;13pkt 13fpkt"];
960--1865[label="0.138889;30pkt 30fpkt"];
960--1867[label="0.12037;26pkt 26fpkt"];
960--1883[label="0.12037;26pkt 26fpkt"];
960--2504[label="0.285714;4pkt 4fpkt"];
960--2556[label="0.444444;8pkt 8fpkt"];
960--3050[label="0.307692;4pkt 4fpkt"];
960--3076[label="0.470588;8pkt 8fpkt"];
960--3368[label="0.307692;4pkt 4fpkt"];
961--1250[label="0.0138889;1pkt 1fpkt"];
961--1616[label="0.990654;106pkt 106fpkt"];
961--1617[label="1;102pkt 102fpkt"];
961--1821[label="0.990654;106pkt 106fpkt"];
961--1822[label="1;102pkt 102fpkt"];
961--1862[label="0.00934579;1pkt 1fpkt"];
961--1865[label="0.149533;16pkt 16fpkt"];
961--1867[label="0.0934579;10pkt 10fpkt"];
961--1883[label="0.0934579;10pkt 10fpkt"];
1616--1617[label="0.990196;101pkt 101fpkt"];
1616--1638[label="1;96pkt 96fpkt"];
1616--1821[label="1;216pkt 216fpkt"];
1616--1822[label="0.990196;101pkt 101fpkt"];
1616--1823[label="1;96pkt 96fpkt"];
1616--1862[label="0.0601852;13pkt 13fpkt"];
1616--1865[label="0.138889;30pkt 30fpkt"];
1616--1867[label="0.12037;26pkt 26fpkt"];
1616--1883[label="0.12037;26pkt 26fpkt"];
1616--2504[label="0.285714;4pkt 4fpkt"];
1616--2556[label="0.444444;8pkt 8fpkt"];
1616--3050[label="0.307692;4pkt 4fpkt"];
1616--3076[label="0.470588;8pkt 8fpkt"];
1616--3368[label="0.307692;4pkt 4fpkt"];
1617--1821[label="0.990196;101pkt 101fpkt"];
1617--1822[label="1;102pkt 102fpkt"];
1617--1862[label="0.00980392;1pkt 1fpkt"];
1617--1865[label="0.156863;16pkt 16fpkt"];
1617--1867[label="0.0490196;5pkt 5fpkt"];
1617--1883[label="0.0490196;5pkt 5fpkt"];
1638--1821[label="1;96pkt 96fpkt"];
1638--1823[label="1;96pkt 96fpkt"];
1638--1865[label="0.145833;14pkt 14fpkt"];
1638--1867[label="0.15625;15pkt 15fpkt"];
1638--1883[label="0.15625;15pkt 15fpkt"];
1821--1822[label="0.990196;101pkt 101fpkt"];
1821--1823[label="1;96pkt 96fpkt"];
1821--1862[label="0.0601852;13pkt 13fpkt"];
1821--1865[label="0.138889;30pkt 30fpkt"];
1821--1867[label="0.12037;26pkt 26fpkt"];
1821--1883[label="0.12037;26pkt 26fpkt"];
1821--2504[label="0.285714;4pkt 4fpkt"];
1821--2556[label="0.444444;8pkt 8fpkt"];
1821--3050[label="0.307692;4pkt 4fpkt"];
1821--3076[label="0.470588;8pkt 8fpkt"];
1821--3368[label="0.307692;4pkt 4fpkt"];
1822--1862[label="0.00980392;1pkt 1fpkt"];
1822--1865[label="0.156863;16pkt 16fpkt"];
1822--1867[label="0.0490196;5pkt 5fpkt"];
1822--1883[label="0.0490196;5pkt 5fpkt"];
1823--1865[label="0.145833;14pkt 14fpkt"];
1823--1867[label="0.15625;15pkt 15fpkt"];
1823--1883[label="0.15625;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.178.74" src_ip="198.91.198.1" src_port="80"/>
      <filter dst_ip="145.208.178.74" src_ip="198.91.198.59" src_port="80"/>
    </slice>
    <from sec="1020575728" usec="0"/>
    <to sec="1020576221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19366,1.90049,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
1223[label="145.208.120.152;d;18pkt 18fpkt", shape=diamond, color=yellow];
1228[label="16.129.80.47;s;2pkt 2fpkt", shape=diamond, color=yellow];
1744[label="145.208.120.152;d;18pkt 18fpkt", shape=hexagon, color=black];
1745[label="16.129.80.47;s;2pkt 2fpkt", shape=hexagon, color=black];
1834[label="145.208.120.152;d;18pkt 18fpkt", shape=polygon, color=gold];
1835[label="16.129.80.47;s;2pkt 2fpkt", shape=polygon, color=gold];
2087[label="16.129.80.47;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.120.83.156:80, 145.208.120.152:*}[44.4444%]&lt;BR/&gt;{18.54.89.23:80, 145.208.120.152:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.3443%)&lt;BR/&gt; 49281: (5.7377%)&lt;BR/&gt; 1163: (5.7377%)&lt;BR/&gt; 1162: (4.91803%)&lt;BR/&gt; 21: (4.91803%)&gt;];
}
1223--1228[label="1;2pkt 2fpkt"];
1223--1744[label="1;18pkt 18fpkt"];
1223--1745[label="1;2pkt 2fpkt"];
1223--1834[label="1;18pkt 18fpkt"];
1223--1835[label="1;2pkt 2fpkt"];
1223--2087[label="1;1pkt 1fpkt"];
1228--1744[label="1;2pkt 2fpkt"];
1228--1745[label="1;2pkt 2fpkt"];
1228--1834[label="1;2pkt 2fpkt"];
1228--1835[label="1;2pkt 2fpkt"];
1228--2087[label="1;1pkt 1fpkt"];
1744--1745[label="1;2pkt 2fpkt"];
1744--1834[label="1;18pkt 18fpkt"];
1744--1835[label="1;2pkt 2fpkt"];
1744--2087[label="1;1pkt 1fpkt"];
1745--1834[label="1;2pkt 2fpkt"];
1745--1835[label="1;2pkt 2fpkt"];
1745--2087[label="1;1pkt 1fpkt"];
1834--1835[label="1;2pkt 2fpkt"];
1834--2087[label="1;1pkt 1fpkt"];
1835--2087[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.120.152" src_ip="99.120.83.156" src_port="80"/>
      <filter dst_ip="145.208.120.152" src_ip="18.54.89.23" src_port="80"/>
    </slice>
    <from sec="1020576306" usec="0"/>
    <to sec="1020576567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19366,1.90049,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
1273[label="97.55.198.229;d;2pkt 2fpkt", shape=diamond, color=yellow];
1274[label="151.51.49.85;s;2pkt 2fpkt", shape=diamond, color=yellow];
1765[label="97.55.198.229;d;2pkt 2fpkt", shape=hexagon, color=black];
1839[label="97.55.198.229;d;2pkt 2fpkt", shape=polygon, color=gold];
2198[label="151.51.49.85;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.51.49.85:1025, 97.55.198.229:21}[50%]&lt;BR/&gt;{151.51.49.85:1026, 97.55.198.229:55756}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55756: (27.7778%)&lt;BR/&gt; 1026: (27.7778%)&lt;BR/&gt; 1025: (22.2222%)&lt;BR/&gt; 21: (22.2222%)&gt;];
}
1273--1274[label="1;2pkt 2fpkt"];
1273--1765[label="1;2pkt 2fpkt"];
1273--1839[label="1;2pkt 2fpkt"];
1273--2198[label="1;1pkt 1fpkt"];
1274--1765[label="1;2pkt 2fpkt"];
1274--1839[label="1;2pkt 2fpkt"];
1274--2198[label="1;1pkt 1fpkt"];
1765--1839[label="1;2pkt 2fpkt"];
1765--2198[label="1;1pkt 1fpkt"];
1839--2198[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="97.55.198.229" dst_port="55756" src_ip="151.51.49.85" src_port="1026"/>
      <filter dst_ip="97.55.198.229" dst_port="21" src_ip="151.51.49.85" src_port="1025"/>
    </slice>
    <from sec="1020576544" usec="0"/>
    <to sec="1020576635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
443[label="145.208.144.132;s;329pkt 329fpkt", shape=diamond, color=yellow];
497[label="197.197.17.113;d;255pkt 255fpkt", shape=diamond, color=yellow];
552[label="145.208.198.227;s;271pkt 271fpkt", shape=diamond, color=yellow];
557[label="197.218.0.6;d;481pkt 481fpkt", shape=diamond, color=yellow];
569[label="145.208.205.163;s;175pkt 175fpkt", shape=diamond, color=yellow];
570[label="197.197.17.114;d;205pkt 205fpkt", shape=diamond, color=yellow];
752[label="197.197.0.58;d;34pkt 34fpkt", shape=diamond, color=yellow];
765[label="192.144.96.32;s;86pkt 86fpkt", shape=diamond, color=yellow];
983[label="197.197.12.56;d;47pkt 47fpkt", shape=diamond, color=yellow];
1073[label="222.97.83.150;d;45pkt 45fpkt", shape=diamond, color=yellow];
1308[label="222.97.83.142;d;46pkt 46fpkt", shape=diamond, color=yellow];
1629[label="197.218.0.6;d;302pkt 302fpkt", shape=hexagon, color=black];
2342[label="145.208.144.132;329pkt 329fpkt", shape=pentagon, color=darkviolet];
2445[label="145.208.205.163;174pkt 174fpkt", shape=pentagon, color=darkviolet];
2480[label="151.51.140.172;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2549[label="135.246.135.193;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2642[label="145.208.198.227;271pkt 271fpkt", shape=pentagon, color=darkviolet];
2955[label="145.208.144.132;328pkt 328fpkt", shape=invtriangle, color=brown];
3018[label="145.208.205.163;175pkt 175fpkt", shape=invtriangle, color=brown];
3037[label="151.51.140.172;17pkt 17fpkt", shape=invtriangle, color=brown];
3072[label="135.246.135.193;20pkt 20fpkt", shape=invtriangle, color=brown];
3302[label="145.208.144.132;328pkt 328fpkt", shape=invhouse, color=bisque];
3337[label="145.208.205.163;175pkt 175fpkt", shape=invhouse, color=bisque];
3365[label="135.246.135.193;19pkt 19fpkt", shape=invhouse, color=bisque];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.3.106.160:*, 197.218.0.6:80}[31.0627%]&lt;BR/&gt;{145.208.144.132:*, *:*}[22.4114%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4685%)&lt;BR/&gt; 443: (5.4953%)&lt;BR/&gt; 1422: (0.0723066%)&lt;BR/&gt; 0: (0.0723066%)&lt;BR/&gt; 62259: (0.0602555%)&gt;];
}
443--497[label="0.517647;132pkt 132fpkt"];
443--570[label="0.458537;94pkt 94fpkt"];
443--752[label="0.941176;32pkt 32fpkt"];
443--1073[label="0.355556;16pkt 16fpkt"];
443--1122[label="0.0733945;8pkt 8fpkt"];
443--1308[label="0.717391;33pkt 33fpkt"];
443--1702[label="0.115942;8pkt 8fpkt"];
443--1855[label="0.0638298;21pkt 21fpkt"];
443--1856[label="0.0516717;17pkt 17fpkt"];
443--1860[label="0.0151976;5pkt 5fpkt"];
443--1879[label="0.0638298;21pkt 21fpkt"];
443--1881[label="0.0516717;17pkt 17fpkt"];
443--1882[label="0.0151976;5pkt 5fpkt"];
443--2342[label="1;329pkt 329fpkt"];
443--2955[label="1;328pkt 328fpkt"];
443--3302[label="1;328pkt 328fpkt"];
497--552[label="0.027451;7pkt 7fpkt"];
497--569[label="0.354286;62pkt 62fpkt"];
497--765[label="0.604651;52pkt 52fpkt"];
497--1855[label="0.0509804;13pkt 13fpkt"];
497--1856[label="0.0784314;20pkt 20fpkt"];
497--1860[label="0.00784314;2pkt 2fpkt"];
497--1879[label="0.0509804;13pkt 13fpkt"];
497--1881[label="0.0784314;20pkt 20fpkt"];
497--1882[label="0.00784314;2pkt 2fpkt"];
497--1937[label="0.00784314;2pkt 2fpkt"];
497--2342[label="0.517647;132pkt 132fpkt"];
497--2445[label="0.356322;62pkt 62fpkt"];
497--2642[label="0.027451;7pkt 7fpkt"];
497--2955[label="0.517647;132pkt 132fpkt"];
497--3018[label="0.354286;62pkt 62fpkt"];
497--3302[label="0.517647;132pkt 132fpkt"];
497--3337[label="0.354286;62pkt 62fpkt"];
552--570[label="0.0634146;13pkt 13fpkt"];
552--616[label="0.0221402;6pkt 6fpkt"];
552--902[label="0.0465116;8pkt 8fpkt"];
552--1104[label="0.657895;75pkt 75fpkt"];
552--1673[label="0.0221402;6pkt 6fpkt"];
552--1855[label="0.0774908;21pkt 21fpkt"];
552--1856[label="0.0774908;21pkt 21fpkt"];
552--1860[label="0.0147601;4pkt 4fpkt"];
552--1869[label="0.0147601;4pkt 4fpkt"];
552--1879[label="0.0774908;21pkt 21fpkt"];
552--1881[label="0.0774908;21pkt 21fpkt"];
552--1882[label="0.0147601;4pkt 4fpkt"];
552--1885[label="0.0147601;4pkt 4fpkt"];
552--1895[label="0.0147601;4pkt 4fpkt"];
552--2642[label="1;271pkt 271fpkt"];
557--905[label="0.0105263;1pkt 1fpkt"];
557--1175[label="0.00763359;1pkt 1fpkt"];
557--1629[label="1;302pkt 302fpkt"];
557--1846[label="0.012474;6pkt 6fpkt"];
557--1855[label="0.033264;16pkt 16fpkt"];
557--1856[label="0.031185;15pkt 15fpkt"];
557--1860[label="0.031185;15pkt 15fpkt"];
557--1869[label="0.018711;9pkt 9fpkt"];
557--1874[label="0.012474;6pkt 6fpkt"];
557--1879[label="0.033264;16pkt 16fpkt"];
557--1881[label="0.031185;15pkt 15fpkt"];
557--1882[label="0.031185;15pkt 15fpkt"];
557--1885[label="0.018711;9pkt 9fpkt"];
557--1890[label="0.012474;6pkt 6fpkt"];
557--1895[label="0.018711;9pkt 9fpkt"];
557--1943[label="0.008;1pkt 1fpkt"];
557--2429[label="0.948025;456pkt 456fpkt"];
557--2480[label="0.0588235;1pkt 1fpkt"];
557--2585[label="0.0075188;1pkt 1fpkt"];
557--2735[label="0.00793651;1pkt 1fpkt"];
557--3009[label="0.948025;456pkt 456fpkt"];
557--3037[label="0.0588235;1pkt 1fpkt"];
557--3181[label="0.00793651;1pkt 1fpkt"];
569--570[label="0.108571;19pkt 19fpkt"];
569--983[label="0.978723;46pkt 46fpkt"];
569--1308[label="0.195652;9pkt 9fpkt"];
569--1855[label="0.0628571;11pkt 11fpkt"];
569--1856[label="0.0457143;8pkt 8fpkt"];
569--1879[label="0.0628571;11pkt 11fpkt"];
569--1881[label="0.0457143;8pkt 8fpkt"];
569--2445[label="1;174pkt 174fpkt"];
569--3018[label="1;175pkt 175fpkt"];
569--3337[label="1;175pkt 175fpkt"];
570--1121[label="0.478571;67pkt 67fpkt"];
570--1855[label="0.102439;21pkt 21fpkt"];
570--1856[label="0.0829268;17pkt 17fpkt"];
570--1860[label="0.0146341;3pkt 3fpkt"];
570--1869[label="0.0731707;15pkt 15fpkt"];
570--1879[label="0.102439;21pkt 21fpkt"];
570--1881[label="0.0829268;17pkt 17fpkt"];
570--1882[label="0.0146341;3pkt 3fpkt"];
570--1885[label="0.0731707;15pkt 15fpkt"];
570--1895[label="0.0731707;15pkt 15fpkt"];
570--1937[label="0.00487805;1pkt 1fpkt"];
570--2342[label="0.458537;94pkt 94fpkt"];
570--2445[label="0.109195;19pkt 19fpkt"];
570--2547[label="0.00487805;1pkt 1fpkt"];
570--2549[label="0.05;1pkt 1fpkt"];
570--2642[label="0.0634146;13pkt 13fpkt"];
570--2649[label="0.0341463;7pkt 7fpkt"];
570--2955[label="0.458537;94pkt 94fpkt"];
570--3018[label="0.108571;19pkt 19fpkt"];
570--3072[label="0.05;1pkt 1fpkt"];
570--3133[label="0.0341463;7pkt 7fpkt"];
570--3302[label="0.458537;94pkt 94fpkt"];
570--3337[label="0.108571;19pkt 19fpkt"];
570--3365[label="0.0526316;1pkt 1fpkt"];
570--3402[label="0.0341463;7pkt 7fpkt"];
752--1855[label="0.0882353;3pkt 3fpkt"];
752--1856[label="0.0294118;1pkt 1fpkt"];
752--1879[label="0.0882353;3pkt 3fpkt"];
752--1881[label="0.0294118;1pkt 1fpkt"];
752--1906[label="0.0294118;1pkt 1fpkt"];
752--2342[label="0.941176;32pkt 32fpkt"];
752--2955[label="0.941176;32pkt 32fpkt"];
752--3302[label="0.941176;32pkt 32fpkt"];
765--1073[label="0.577778;26pkt 26fpkt"];
983--1855[label="0.0212766;1pkt 1fpkt"];
983--1856[label="0.0212766;1pkt 1fpkt"];
983--1879[label="0.0212766;1pkt 1fpkt"];
983--1881[label="0.0212766;1pkt 1fpkt"];
983--2445[label="0.957447;45pkt 45fpkt"];
983--3018[label="0.978723;46pkt 46fpkt"];
983--3337[label="0.978723;46pkt 46fpkt"];
1073--1937[label="0.0444444;2pkt 2fpkt"];
1073--2342[label="0.355556;16pkt 16fpkt"];
1073--2547[label="0.0222222;1pkt 1fpkt"];
1073--2955[label="0.333333;15pkt 15fpkt"];
1073--3302[label="0.333333;15pkt 15fpkt"];
1308--2342[label="0.717391;33pkt 33fpkt"];
1308--2445[label="0.195652;9pkt 9fpkt"];
1308--2649[label="0.0869565;4pkt 4fpkt"];
1308--2955[label="0.717391;33pkt 33fpkt"];
1308--3018[label="0.195652;9pkt 9fpkt"];
1308--3133[label="0.0869565;4pkt 4fpkt"];
1308--3302[label="0.717391;33pkt 33fpkt"];
1308--3337[label="0.195652;9pkt 9fpkt"];
1308--3402[label="0.0869565;4pkt 4fpkt"];
1629--1846[label="0.0198675;6pkt 6fpkt"];
1629--1855[label="0.0529801;16pkt 16fpkt"];
1629--1856[label="0.0496689;15pkt 15fpkt"];
1629--1860[label="0.0496689;15pkt 15fpkt"];
1629--1874[label="0.0198675;6pkt 6fpkt"];
1629--1879[label="0.0529801;16pkt 16fpkt"];
1629--1881[label="0.0496689;15pkt 15fpkt"];
1629--1882[label="0.0496689;15pkt 15fpkt"];
1629--1890[label="0.0198675;6pkt 6fpkt"];
1629--1943[label="0.008;1pkt 1fpkt"];
1629--2429[label="0.94702;286pkt 286fpkt"];
1629--2480[label="0.0588235;1pkt 1fpkt"];
1629--2585[label="0.0075188;1pkt 1fpkt"];
1629--2735[label="0.00793651;1pkt 1fpkt"];
1629--3009[label="0.94702;286pkt 286fpkt"];
1629--3037[label="0.0588235;1pkt 1fpkt"];
1629--3181[label="0.00793651;1pkt 1fpkt"];
2342--2955[label="1;328pkt 328fpkt"];
2342--3302[label="1;328pkt 328fpkt"];
2445--3018[label="1;174pkt 174fpkt"];
2445--3337[label="1;174pkt 174fpkt"];
2480--3037[label="1;17pkt 17fpkt"];
2549--3072[label="1;20pkt 20fpkt"];
2549--3365[label="1;19pkt 19fpkt"];
2955--3302[label="1;328pkt 328fpkt"];
3018--3337[label="1;175pkt 175fpkt"];
3072--3365[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter src_ip="145.208.144.132"/>
      <filter dst_ip="197.218.0.6" dst_port="80" src_ip="192.3.106.160"/>
    </slice>
    <from sec="1020574803" usec="0"/>
    <to sec="1020576757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.250.40.0"/>
    </slice>
    <from sec="1020575426" usec="0"/>
    <to sec="1020576387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573985,1.85133,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
924[label="197.182.188.0;s;34pkt 34fpkt", shape=diamond, color=yellow];
1898[label="197.182.188.0;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2711[label="197.182.188.0;33pkt 33fpkt", shape=invtriangle, color=brown];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.182.188.0:80, 192.12.3.119:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1633: (1.5%)&lt;BR/&gt; 1629: (1.5%)&lt;BR/&gt; 1613: (1.5%)&lt;BR/&gt; 1607: (1.5%)&gt;];
}
924--1898[label="1;33pkt 33fpkt"];
924--2711[label="1;33pkt 33fpkt"];
1898--2711[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="192.12.3.119" src_ip="197.182.188.0" src_port="80"/>
    </slice>
    <from sec="1020575773" usec="0"/>
    <to sec="1020575828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,901,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
591[label="193.243.198.54;d;39pkt 39fpkt", shape=diamond, color=yellow];
592[label="193.243.196.214;d;34pkt 34fpkt", shape=diamond, color=yellow];
593[label="193.243.198.34;d;39pkt 39fpkt", shape=diamond, color=yellow];
594[label="193.243.196.29;d;40pkt 40fpkt", shape=diamond, color=yellow];
647[label="151.51.32.16;d;33pkt 33fpkt", shape=diamond, color=yellow];
658[label="193.243.196.209;d;38pkt 38fpkt", shape=diamond, color=yellow];
1458[label="193.243.196.29;d;40pkt 40fpkt", shape=hexagon, color=black];
1515[label="151.51.32.16;d;32pkt 32fpkt", shape=hexagon, color=black];
1564[label="193.243.198.34;d;39pkt 39fpkt", shape=hexagon, color=black];
1692[label="193.243.198.54;d;39pkt 39fpkt", shape=hexagon, color=black];
1748[label="193.243.196.214;d;34pkt 34fpkt", shape=hexagon, color=black];
1902[label="223.72.179.2;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1942[label="96.5.97.12;4pkt 4fpkt", shape=pentagon, color=darkviolet];
1999[label="223.122.19.26;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2175[label="215.56.129.78;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2315[label="215.146.138.126;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2352[label="223.137.109.134;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2367[label="197.180.120.138;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2369[label="18.161.153.138;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2405[label="18.24.127.151;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2438[label="223.81.197.162;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2467[label="223.122.41.169;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2639[label="198.112.173.225;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2713[label="223.72.179.2;5pkt 5fpkt", shape=invtriangle, color=brown];
2734[label="96.5.97.12;5pkt 5fpkt", shape=invtriangle, color=brown];
2766[label="223.122.19.26;6pkt 6fpkt", shape=invtriangle, color=brown];
2936[label="215.146.138.126;5pkt 5fpkt", shape=invtriangle, color=brown];
2969[label="197.180.120.138;6pkt 6fpkt", shape=invtriangle, color=brown];
2971[label="18.161.153.138;5pkt 5fpkt", shape=invtriangle, color=brown];
2995[label="18.24.127.151;5pkt 5fpkt", shape=invtriangle, color=brown];
3127[label="198.112.173.225;5pkt 5fpkt", shape=invtriangle, color=brown];
3312[label="197.180.120.138;6pkt 6fpkt", shape=invhouse, color=bisque];
3329[label="18.24.127.151;6pkt 6fpkt", shape=invhouse, color=bisque];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, *:0}[99.5575%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8099%)&lt;BR/&gt; 137: (0.190114%)&gt;];
}
591--1692[label="1;39pkt 39fpkt"];
591--1902[label="0.2;1pkt 1fpkt"];
591--1925[label="0.0333333;1pkt 1fpkt"];
591--1942[label="0.25;1pkt 1fpkt"];
591--1999[label="0.166667;1pkt 1fpkt"];
591--2175[label="0.166667;1pkt 1fpkt"];
591--2315[label="0.2;1pkt 1fpkt"];
591--2352[label="0.166667;1pkt 1fpkt"];
591--2367[label="0.2;1pkt 1fpkt"];
591--2369[label="0.166667;1pkt 1fpkt"];
591--2405[label="0.166667;1pkt 1fpkt"];
591--2438[label="0.166667;1pkt 1fpkt"];
591--2454[label="0.0555556;1pkt 1fpkt"];
591--2467[label="0.25;1pkt 1fpkt"];
591--2639[label="0.166667;1pkt 1fpkt"];
591--2713[label="0.2;1pkt 1fpkt"];
591--2734[label="0.2;1pkt 1fpkt"];
591--2766[label="0.166667;1pkt 1fpkt"];
591--2936[label="0.2;1pkt 1fpkt"];
591--2969[label="0.166667;1pkt 1fpkt"];
591--2971[label="0.2;1pkt 1fpkt"];
591--2995[label="0.2;1pkt 1fpkt"];
591--3127[label="0.2;1pkt 1fpkt"];
591--3312[label="0.166667;1pkt 1fpkt"];
591--3329[label="0.166667;1pkt 1fpkt"];
592--1748[label="1;34pkt 34fpkt"];
592--1902[label="0.2;1pkt 1fpkt"];
592--1942[label="0.25;1pkt 1fpkt"];
592--1999[label="0.166667;1pkt 1fpkt"];
592--2175[label="0.166667;1pkt 1fpkt"];
592--2315[label="0.2;1pkt 1fpkt"];
592--2367[label="0.2;1pkt 1fpkt"];
592--2369[label="0.166667;1pkt 1fpkt"];
592--2405[label="0.166667;1pkt 1fpkt"];
592--2438[label="0.166667;1pkt 1fpkt"];
592--2454[label="0.0555556;1pkt 1fpkt"];
592--2467[label="0.25;1pkt 1fpkt"];
592--2639[label="0.166667;1pkt 1fpkt"];
592--2713[label="0.2;1pkt 1fpkt"];
592--2734[label="0.2;1pkt 1fpkt"];
592--2766[label="0.166667;1pkt 1fpkt"];
592--2936[label="0.2;1pkt 1fpkt"];
592--2969[label="0.166667;1pkt 1fpkt"];
592--2971[label="0.2;1pkt 1fpkt"];
592--2995[label="0.2;1pkt 1fpkt"];
592--3127[label="0.2;1pkt 1fpkt"];
592--3312[label="0.166667;1pkt 1fpkt"];
592--3329[label="0.166667;1pkt 1fpkt"];
593--1564[label="1;39pkt 39fpkt"];
593--1902[label="0.2;1pkt 1fpkt"];
593--1925[label="0.0333333;1pkt 1fpkt"];
593--1942[label="0.25;1pkt 1fpkt"];
593--1999[label="0.166667;1pkt 1fpkt"];
593--2175[label="0.166667;1pkt 1fpkt"];
593--2315[label="0.2;1pkt 1fpkt"];
593--2352[label="0.166667;1pkt 1fpkt"];
593--2367[label="0.2;1pkt 1fpkt"];
593--2369[label="0.166667;1pkt 1fpkt"];
593--2405[label="0.166667;1pkt 1fpkt"];
593--2438[label="0.166667;1pkt 1fpkt"];
593--2454[label="0.0555556;1pkt 1fpkt"];
593--2467[label="0.25;1pkt 1fpkt"];
593--2639[label="0.166667;1pkt 1fpkt"];
593--2713[label="0.2;1pkt 1fpkt"];
593--2734[label="0.2;1pkt 1fpkt"];
593--2766[label="0.166667;1pkt 1fpkt"];
593--2936[label="0.2;1pkt 1fpkt"];
593--2969[label="0.166667;1pkt 1fpkt"];
593--2971[label="0.2;1pkt 1fpkt"];
593--2995[label="0.2;1pkt 1fpkt"];
593--3127[label="0.2;1pkt 1fpkt"];
593--3312[label="0.166667;1pkt 1fpkt"];
593--3329[label="0.166667;1pkt 1fpkt"];
594--1458[label="1;40pkt 40fpkt"];
594--1925[label="0.0333333;1pkt 1fpkt"];
594--1999[label="0.166667;1pkt 1fpkt"];
594--2175[label="0.166667;1pkt 1fpkt"];
594--2352[label="0.166667;1pkt 1fpkt"];
594--2369[label="0.166667;1pkt 1fpkt"];
594--2405[label="0.166667;1pkt 1fpkt"];
594--2438[label="0.166667;1pkt 1fpkt"];
594--2454[label="0.0555556;1pkt 1fpkt"];
594--2639[label="0.166667;1pkt 1fpkt"];
594--2734[label="0.2;1pkt 1fpkt"];
594--2766[label="0.166667;1pkt 1fpkt"];
594--2969[label="0.166667;1pkt 1fpkt"];
594--3312[label="0.166667;1pkt 1fpkt"];
594--3329[label="0.166667;1pkt 1fpkt"];
647--1515[label="1;32pkt 32fpkt"];
647--1902[label="0.2;1pkt 1fpkt"];
647--1925[label="0.0333333;1pkt 1fpkt"];
647--1999[label="0.166667;1pkt 1fpkt"];
647--2175[label="0.166667;1pkt 1fpkt"];
647--2315[label="0.2;1pkt 1fpkt"];
647--2367[label="0.2;1pkt 1fpkt"];
647--2369[label="0.166667;1pkt 1fpkt"];
647--2405[label="0.166667;1pkt 1fpkt"];
647--2438[label="0.166667;1pkt 1fpkt"];
647--2639[label="0.166667;1pkt 1fpkt"];
647--2713[label="0.2;1pkt 1fpkt"];
647--2766[label="0.166667;1pkt 1fpkt"];
647--2936[label="0.2;1pkt 1fpkt"];
647--2969[label="0.166667;1pkt 1fpkt"];
647--2971[label="0.2;1pkt 1fpkt"];
647--2995[label="0.2;1pkt 1fpkt"];
647--3127[label="0.2;1pkt 1fpkt"];
647--3312[label="0.166667;1pkt 1fpkt"];
647--3329[label="0.166667;1pkt 1fpkt"];
658--1902[label="0.2;1pkt 1fpkt"];
658--1925[label="0.0333333;1pkt 1fpkt"];
658--1942[label="0.25;1pkt 1fpkt"];
658--1999[label="0.166667;1pkt 1fpkt"];
658--2175[label="0.166667;1pkt 1fpkt"];
658--2315[label="0.2;1pkt 1fpkt"];
658--2367[label="0.2;1pkt 1fpkt"];
658--2369[label="0.166667;1pkt 1fpkt"];
658--2405[label="0.166667;1pkt 1fpkt"];
658--2438[label="0.166667;1pkt 1fpkt"];
658--2454[label="0.0555556;1pkt 1fpkt"];
658--2467[label="0.25;1pkt 1fpkt"];
658--2639[label="0.166667;1pkt 1fpkt"];
658--2713[label="0.2;1pkt 1fpkt"];
658--2734[label="0.2;1pkt 1fpkt"];
658--2766[label="0.166667;1pkt 1fpkt"];
658--2936[label="0.2;1pkt 1fpkt"];
658--2969[label="0.166667;1pkt 1fpkt"];
658--2971[label="0.2;1pkt 1fpkt"];
658--2995[label="0.2;1pkt 1fpkt"];
658--3127[label="0.2;1pkt 1fpkt"];
658--3312[label="0.166667;1pkt 1fpkt"];
658--3329[label="0.166667;1pkt 1fpkt"];
1458--1925[label="0.0333333;1pkt 1fpkt"];
1458--1999[label="0.166667;1pkt 1fpkt"];
1458--2175[label="0.166667;1pkt 1fpkt"];
1458--2352[label="0.166667;1pkt 1fpkt"];
1458--2369[label="0.166667;1pkt 1fpkt"];
1458--2405[label="0.166667;1pkt 1fpkt"];
1458--2438[label="0.166667;1pkt 1fpkt"];
1458--2454[label="0.0555556;1pkt 1fpkt"];
1458--2639[label="0.166667;1pkt 1fpkt"];
1458--2734[label="0.2;1pkt 1fpkt"];
1458--2766[label="0.166667;1pkt 1fpkt"];
1458--2969[label="0.166667;1pkt 1fpkt"];
1458--3312[label="0.166667;1pkt 1fpkt"];
1458--3329[label="0.166667;1pkt 1fpkt"];
1515--1902[label="0.2;1pkt 1fpkt"];
1515--1925[label="0.0333333;1pkt 1fpkt"];
1515--1999[label="0.166667;1pkt 1fpkt"];
1515--2175[label="0.166667;1pkt 1fpkt"];
1515--2315[label="0.2;1pkt 1fpkt"];
1515--2367[label="0.2;1pkt 1fpkt"];
1515--2369[label="0.166667;1pkt 1fpkt"];
1515--2405[label="0.166667;1pkt 1fpkt"];
1515--2438[label="0.166667;1pkt 1fpkt"];
1515--2639[label="0.166667;1pkt 1fpkt"];
1515--2713[label="0.2;1pkt 1fpkt"];
1515--2766[label="0.166667;1pkt 1fpkt"];
1515--2936[label="0.2;1pkt 1fpkt"];
1515--2969[label="0.166667;1pkt 1fpkt"];
1515--2971[label="0.2;1pkt 1fpkt"];
1515--2995[label="0.2;1pkt 1fpkt"];
1515--3127[label="0.2;1pkt 1fpkt"];
1515--3312[label="0.166667;1pkt 1fpkt"];
1515--3329[label="0.166667;1pkt 1fpkt"];
1564--1902[label="0.2;1pkt 1fpkt"];
1564--1925[label="0.0333333;1pkt 1fpkt"];
1564--1942[label="0.25;1pkt 1fpkt"];
1564--1999[label="0.166667;1pkt 1fpkt"];
1564--2175[label="0.166667;1pkt 1fpkt"];
1564--2315[label="0.2;1pkt 1fpkt"];
1564--2352[label="0.166667;1pkt 1fpkt"];
1564--2367[label="0.2;1pkt 1fpkt"];
1564--2369[label="0.166667;1pkt 1fpkt"];
1564--2405[label="0.166667;1pkt 1fpkt"];
1564--2438[label="0.166667;1pkt 1fpkt"];
1564--2454[label="0.0555556;1pkt 1fpkt"];
1564--2467[label="0.25;1pkt 1fpkt"];
1564--2639[label="0.166667;1pkt 1fpkt"];
1564--2713[label="0.2;1pkt 1fpkt"];
1564--2734[label="0.2;1pkt 1fpkt"];
1564--2766[label="0.166667;1pkt 1fpkt"];
1564--2936[label="0.2;1pkt 1fpkt"];
1564--2969[label="0.166667;1pkt 1fpkt"];
1564--2971[label="0.2;1pkt 1fpkt"];
1564--2995[label="0.2;1pkt 1fpkt"];
1564--3127[label="0.2;1pkt 1fpkt"];
1564--3312[label="0.166667;1pkt 1fpkt"];
1564--3329[label="0.166667;1pkt 1fpkt"];
1692--1902[label="0.2;1pkt 1fpkt"];
1692--1925[label="0.0333333;1pkt 1fpkt"];
1692--1942[label="0.25;1pkt 1fpkt"];
1692--1999[label="0.166667;1pkt 1fpkt"];
1692--2175[label="0.166667;1pkt 1fpkt"];
1692--2315[label="0.2;1pkt 1fpkt"];
1692--2352[label="0.166667;1pkt 1fpkt"];
1692--2367[label="0.2;1pkt 1fpkt"];
1692--2369[label="0.166667;1pkt 1fpkt"];
1692--2405[label="0.166667;1pkt 1fpkt"];
1692--2438[label="0.166667;1pkt 1fpkt"];
1692--2454[label="0.0555556;1pkt 1fpkt"];
1692--2467[label="0.25;1pkt 1fpkt"];
1692--2639[label="0.166667;1pkt 1fpkt"];
1692--2713[label="0.2;1pkt 1fpkt"];
1692--2734[label="0.2;1pkt 1fpkt"];
1692--2766[label="0.166667;1pkt 1fpkt"];
1692--2936[label="0.2;1pkt 1fpkt"];
1692--2969[label="0.166667;1pkt 1fpkt"];
1692--2971[label="0.2;1pkt 1fpkt"];
1692--2995[label="0.2;1pkt 1fpkt"];
1692--3127[label="0.2;1pkt 1fpkt"];
1692--3312[label="0.166667;1pkt 1fpkt"];
1692--3329[label="0.166667;1pkt 1fpkt"];
1748--1902[label="0.2;1pkt 1fpkt"];
1748--1942[label="0.25;1pkt 1fpkt"];
1748--1999[label="0.166667;1pkt 1fpkt"];
1748--2175[label="0.166667;1pkt 1fpkt"];
1748--2315[label="0.2;1pkt 1fpkt"];
1748--2367[label="0.2;1pkt 1fpkt"];
1748--2369[label="0.166667;1pkt 1fpkt"];
1748--2405[label="0.166667;1pkt 1fpkt"];
1748--2438[label="0.166667;1pkt 1fpkt"];
1748--2454[label="0.0555556;1pkt 1fpkt"];
1748--2467[label="0.25;1pkt 1fpkt"];
1748--2639[label="0.166667;1pkt 1fpkt"];
1748--2713[label="0.2;1pkt 1fpkt"];
1748--2734[label="0.2;1pkt 1fpkt"];
1748--2766[label="0.166667;1pkt 1fpkt"];
1748--2936[label="0.2;1pkt 1fpkt"];
1748--2969[label="0.166667;1pkt 1fpkt"];
1748--2971[label="0.2;1pkt 1fpkt"];
1748--2995[label="0.2;1pkt 1fpkt"];
1748--3127[label="0.2;1pkt 1fpkt"];
1748--3312[label="0.166667;1pkt 1fpkt"];
1748--3329[label="0.166667;1pkt 1fpkt"];
1902--2713[label="1;5pkt 5fpkt"];
1942--2734[label="1;4pkt 4fpkt"];
1999--2766[label="1;6pkt 6fpkt"];
2315--2936[label="1;5pkt 5fpkt"];
2367--2969[label="1;5pkt 5fpkt"];
2367--3312[label="1;5pkt 5fpkt"];
2369--2971[label="1;5pkt 5fpkt"];
2405--2995[label="1;5pkt 5fpkt"];
2405--3329[label="1;6pkt 6fpkt"];
2639--3127[label="1;5pkt 5fpkt"];
2969--3312[label="1;6pkt 6fpkt"];
2995--3329[label="1;5pkt 5fpkt"];
</description>
    <slice/>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,011,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
651[label="141.26.7.123;d;381pkt 381fpkt", shape=diamond, color=yellow];
1279[label="157.54.242.43;s;128pkt 128fpkt", shape=diamond, color=yellow];
1455[label="141.26.7.123;d;129pkt 129fpkt", shape=hexagon, color=black];
1903[label="146.195.193.2;64pkt 64fpkt", shape=pentagon, color=darkviolet];
2074[label="157.54.242.43;131pkt 131fpkt", shape=pentagon, color=darkviolet];
2807[label="157.54.242.43;132pkt 132fpkt", shape=invtriangle, color=brown];
3222[label="157.54.242.43;131pkt 131fpkt", shape=invhouse, color=bisque];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6346, 141.26.7.123:*}[66.4083%]&lt;BR/&gt;{157.54.242.43:*, 141.26.7.123:*}[34.1085%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (30.2007%)&lt;BR/&gt; 6399: (15.8759%)&lt;BR/&gt; 6347: (3.92336%)&lt;BR/&gt; 3926: (0.273723%)&lt;BR/&gt; 3917: (0.273723%)&gt;];
}
651--1279[label="1;128pkt 128fpkt"];
651--1455[label="1;129pkt 129fpkt"];
651--1903[label="0.96875;62pkt 62fpkt"];
651--2074[label="0.969466;127pkt 127fpkt"];
651--2807[label="0.969697;128pkt 128fpkt"];
651--3222[label="0.969466;127pkt 127fpkt"];
1279--1455[label="0.34375;44pkt 44fpkt"];
1279--2074[label="0.992188;127pkt 127fpkt"];
1279--2807[label="1;128pkt 128fpkt"];
1279--3222[label="0.992188;127pkt 127fpkt"];
1455--1903[label="0.3125;20pkt 20fpkt"];
1455--2074[label="0.333333;43pkt 43fpkt"];
1455--2807[label="0.341085;44pkt 44fpkt"];
1455--3222[label="0.333333;43pkt 43fpkt"];
2074--2807[label="1;131pkt 131fpkt"];
2074--3222[label="1;131pkt 131fpkt"];
2807--3222[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_ip="141.26.7.123" src_ip="157.54.242.43"/>
      <filter dst_ip="141.26.7.123" src_port="6346"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.502244,1.88143,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
933[label="203.48.121.26;d;4pkt 4fpkt", shape=diamond, color=yellow];
1907[label="145.208.2.4;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.2.4:0, 203.48.121.26:0}[25%]&lt;BR/&gt;{145.208.2.82:0, 203.48.121.26:0}[25%]&lt;BR/&gt;{145.208.104.109:0, 203.48.121.26:0}[25%]&lt;BR/&gt;{145.208.2.161:0, 203.48.121.26:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
933--1907[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.48.121.26" src_ip="145.208.2.161"/>
      <filter dst_ip="203.48.121.26" src_ip="145.208.104.109"/>
      <filter dst_ip="203.48.121.26" src_ip="145.208.2.82"/>
      <filter dst_ip="203.48.121.26" src_ip="145.208.2.4"/>
    </slice>
    <from sec="1020574805" usec="0"/>
    <to sec="1020576760" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
1008[label="192.10.17.138;d;366pkt 366fpkt", shape=diamond, color=yellow];
1192[label="220.92.50.185;s;345pkt 345fpkt", shape=diamond, color=yellow];
1641[label="192.10.17.138;d;331pkt 331fpkt", shape=hexagon, color=black];
1710[label="220.92.50.185;s;314pkt 314fpkt", shape=hexagon, color=black];
2520[label="220.92.50.185;345pkt 345fpkt", shape=pentagon, color=darkviolet];
2822[label="220.92.50.54;1pkt 1fpkt", shape=invtriangle, color=brown];
3230[label="220.92.50.54;1pkt 1fpkt", shape=invhouse, color=bisque];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.92.50.185:*, 192.10.17.138:25}[93.7158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.0605%)&lt;BR/&gt; 113: (0.26424%)&lt;BR/&gt; 110: (0.26424%)&lt;BR/&gt; 5006: (0.23488%)&lt;BR/&gt; 0: (0.23488%)&gt;];
}
1008--1192[label="1;345pkt 345fpkt"];
1008--1641[label="1;331pkt 331fpkt"];
1008--1710[label="1;314pkt 314fpkt"];
1008--1911[label="0.666667;4pkt 4fpkt"];
1008--2520[label="1;345pkt 345fpkt"];
1008--2718[label="0.666667;4pkt 4fpkt"];
1008--2822[label="1;1pkt 1fpkt"];
1008--3171[label="0.6;3pkt 3fpkt"];
1008--3230[label="1;1pkt 1fpkt"];
1192--1641[label="0.94864;314pkt 314fpkt"];
1192--1710[label="1;314pkt 314fpkt"];
1192--2520[label="1;345pkt 345fpkt"];
1641--1710[label="1;314pkt 314fpkt"];
1641--1911[label="0.5;3pkt 3fpkt"];
1641--2520[label="0.94864;314pkt 314fpkt"];
1641--2718[label="0.5;3pkt 3fpkt"];
1641--2822[label="1;1pkt 1fpkt"];
1641--3171[label="0.4;2pkt 2fpkt"];
1641--3230[label="1;1pkt 1fpkt"];
1710--2520[label="1;314pkt 314fpkt"];
2822--3230[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.10.17.138" dst_port="25" src_ip="220.92.50.185"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.0.186.5"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.40.124.6"/>
    </slice>
    <from sec="1020574811" usec="0"/>
    <to sec="1020576758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.19.136.6"/>
    </slice>
    <from sec="1020574854" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.502244,1.88143,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
506[label="135.246.9.10;s;25pkt 25fpkt", shape=diamond, color=yellow];
1932[label="135.246.9.10;25pkt 25fpkt", shape=pentagon, color=darkviolet];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.246.9.10:*, 99.49.10.122:554}[28%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (14%)&lt;BR/&gt; 6974: (6%)&lt;BR/&gt; 6972: (6%)&lt;BR/&gt; 6970: (6%)&lt;BR/&gt; 80: (6%)&gt;];
}
506--1932[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="99.49.10.122" dst_port="554" src_ip="135.246.9.10"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.73.14.11"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.210.46.12"/>
    </slice>
    <from sec="1020574856" usec="0"/>
    <to sec="1020576747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
905[label="145.208.120.12;s;95pkt 95fpkt", shape=diamond, color=yellow];
1943[label="145.208.120.12;125pkt 125fpkt", shape=pentagon, color=darkviolet];
2735[label="145.208.120.12;126pkt 126fpkt", shape=invtriangle, color=brown];
3181[label="145.208.120.12;126pkt 126fpkt", shape=invhouse, color=bisque];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.120.12:*, 197.218.0.205:80}[23.8095%]&lt;BR/&gt;{145.208.120.12:*, 196.246.128.22:80}[23.0159%]&lt;BR/&gt;{145.208.120.12:*, 197.218.0.33:80}[20.6349%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5763%)&lt;BR/&gt; 2044: (0.423729%)&lt;BR/&gt; 2043: (0.423729%)&lt;BR/&gt; 2042: (0.423729%)&lt;BR/&gt; 2041: (0.423729%)&gt;];
}
905--1629[label="0.0105263;1pkt 1fpkt"];
905--1855[label="0.0105263;1pkt 1fpkt"];
905--1879[label="0.0105263;1pkt 1fpkt"];
905--1943[label="0.989474;94pkt 94fpkt"];
905--2735[label="1;95pkt 95fpkt"];
905--3181[label="1;95pkt 95fpkt"];
1943--2735[label="1;125pkt 125fpkt"];
1943--3181[label="1;125pkt 125fpkt"];
2735--3181[label="1;126pkt 126fpkt"];
</description>
    <slice>
      <filter dst_ip="197.218.0.205" dst_port="80" src_ip="145.208.120.12"/>
      <filter dst_ip="196.246.128.22" dst_port="80" src_ip="145.208.120.12"/>
      <filter dst_ip="197.218.0.33" dst_port="80" src_ip="145.208.120.12"/>
    </slice>
    <from sec="1020574890" usec="0"/>
    <to sec="1020576338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.103.1.13"/>
    </slice>
    <from sec="1020575418" usec="0"/>
    <to sec="1020576636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.225.45.13"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
1963[label="192.206.41.16;78pkt 78fpkt", shape=pentagon, color=darkviolet];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.206.41.16:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4881: (0.641026%)&lt;BR/&gt; 4867: (0.641026%)&lt;BR/&gt; 4761: (0.641026%)&lt;BR/&gt; 4642: (0.641026%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="192.206.41.16"/>
    </slice>
    <from sec="1020574839" usec="0"/>
    <to sec="1020576754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.136.218.21"/>
    </slice>
    <from sec="1020574975" usec="0"/>
    <to sec="1020575092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.502244,1.88143,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
869[label="135.246.27.24;s;61pkt 61fpkt", shape=diamond, color=yellow];
1988[label="135.246.27.24;60pkt 60fpkt", shape=pentagon, color=darkviolet];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.246.27.24:*, *:8888}[67.2131%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (33.8843%)&lt;BR/&gt; 7777: (5.78512%)&lt;BR/&gt; 5555: (4.54545%)&lt;BR/&gt; 6699: (2.47934%)&lt;BR/&gt; 6666: (1.65289%)&gt;];
}
869--1988[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="135.246.27.24"/>
    </slice>
    <from sec="1020574856" usec="0"/>
    <to sec="1020576665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.222.33.24"/>
    </slice>
    <from sec="1020576639" usec="0"/>
    <to sec="1020576669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.216.236.25"/>
    </slice>
    <from sec="1020574844" usec="0"/>
    <to sec="1020576762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.502244,1.88143,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
110[label="155.29.94.30;d;2pkt 2fpkt", shape=diamond, color=yellow];
261[label="151.51.24.26;s;17pkt 17fpkt", shape=diamond, color=yellow];
2000[label="151.51.24.26;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.51.24.26:*, 16.96.7.168:80}[52.9412%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 21: (8.33333%)&lt;BR/&gt; 41178: (5.55556%)&lt;BR/&gt; 41033: (4.16667%)&lt;BR/&gt; 41032: (4.16667%)&gt;];
}
110--261[label="1;2pkt 2fpkt"];
110--2000[label="1;2pkt 2fpkt"];
261--679[label="0.529412;9pkt 9fpkt"];
261--1644[label="0.235294;4pkt 4fpkt"];
261--1856[label="0.117647;2pkt 2fpkt"];
261--1881[label="0.117647;2pkt 2fpkt"];
261--2000[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="16.96.7.168" dst_port="80" src_ip="151.51.24.26"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.64.135.27"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.502244,1.88143,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
520[label="193.243.196.29;s;60pkt 60fpkt", shape=diamond, color=yellow];
2016[label="193.243.196.29;59pkt 59fpkt", shape=pentagon, color=darkviolet];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.243.196.29:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
520--2016[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter src_ip="193.243.196.29"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.40.127.34"/>
    </slice>
    <from sec="1020574819" usec="0"/>
    <to sec="1020576746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
519[label="193.243.198.34;s;60pkt 60fpkt", shape=diamond, color=yellow];
1714[label="193.243.198.34;s;59pkt 59fpkt", shape=hexagon, color=black];
2030[label="193.243.198.34;59pkt 59fpkt", shape=pentagon, color=darkviolet];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.243.198.34:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
519--1714[label="1;59pkt 59fpkt"];
519--2030[label="1;59pkt 59fpkt"];
1714--2030[label="0.983051;58pkt 58fpkt"];
</description>
    <slice>
      <filter src_ip="193.243.198.34"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.243.193.36"/>
    </slice>
    <from sec="1020574818" usec="0"/>
    <to sec="1020576759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.246.218.41"/>
    </slice>
    <from sec="1020576248" usec="0"/>
    <to sec="1020576747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_240{
style=filled;
color=gray75;
958[label="151.51.183.40;d;117pkt 117fpkt", shape=diamond, color=yellow];
1083[label="207.213.173.42;s;4pkt 4fpkt", shape=diamond, color=yellow];
2069[label="207.213.173.42;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2804[label="207.213.173.42;3pkt 3fpkt", shape=invtriangle, color=brown];
3220[label="207.213.173.42;3pkt 3fpkt", shape=invhouse, color=bisque];
stat240[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.83.145.13:80, 151.51.183.40:*}[58.9744%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0769%)&lt;BR/&gt; 33109: (1.92308%)&lt;BR/&gt; 32844: (1.92308%)&lt;BR/&gt; 32826: (1.92308%)&lt;BR/&gt; 1863: (1.92308%)&gt;];
}
958--1083[label="1;4pkt 4fpkt"];
958--1546[label="0.0769231;9pkt 9fpkt"];
958--1589[label="0.00869565;1pkt 1fpkt"];
958--1862[label="0.102564;12pkt 12fpkt"];
958--1867[label="0.00854701;1pkt 1fpkt"];
958--1883[label="0.00854701;1pkt 1fpkt"];
958--1948[label="0.958333;69pkt 69fpkt"];
958--2069[label="1;3pkt 3fpkt"];
958--2738[label="0.971831;69pkt 69fpkt"];
958--2804[label="1;3pkt 3fpkt"];
958--3184[label="0.971831;69pkt 69fpkt"];
958--3220[label="1;3pkt 3fpkt"];
1083--2069[label="1;3pkt 3fpkt"];
1083--2804[label="1;3pkt 3fpkt"];
1083--3220[label="1;3pkt 3fpkt"];
2069--2804[label="1;3pkt 3fpkt"];
2069--3220[label="1;3pkt 3fpkt"];
2804--3220[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="151.51.183.40" src_ip="216.83.145.13" src_port="80"/>
    </slice>
    <from sec="1020575717" usec="0"/>
    <to sec="1020576517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.102.28.45"/>
    </slice>
    <from sec="1020574881" usec="0"/>
    <to sec="1020576494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.40.127.45"/>
    </slice>
    <from sec="1020574818" usec="0"/>
    <to sec="1020576749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.0.150.52"/>
    </slice>
    <from sec="1020575712" usec="0"/>
    <to sec="1020575714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.92.50.54"/>
    </slice>
    <from sec="1020576300" usec="0"/>
    <to sec="1020576510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
518[label="193.243.198.54;s;163pkt 163fpkt", shape=diamond, color=yellow];
1457[label="193.243.198.54;s;132pkt 132fpkt", shape=hexagon, color=black];
2109[label="193.243.198.54;163pkt 163fpkt", shape=pentagon, color=darkviolet];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.243.198.54:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
518--1457[label="1;132pkt 132fpkt"];
518--2109[label="0.993865;162pkt 162fpkt"];
1457--2109[label="0.992424;131pkt 131fpkt"];
</description>
    <slice>
      <filter src_ip="193.243.198.54"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.502244,1.88143,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
1226[label="144.83.30.57;s;24pkt 24fpkt", shape=diamond, color=yellow];
2117[label="144.83.30.57;24pkt 24fpkt", shape=pentagon, color=darkviolet];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.83.30.57:*, 99.16.232.212:80}[54.1667%]&lt;BR/&gt;{144.83.30.57:*, 99.23.203.184:80}[41.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1690: (2.08333%)&lt;BR/&gt; 1689: (2.08333%)&lt;BR/&gt; 1688: (2.08333%)&lt;BR/&gt; 1687: (2.08333%)&gt;];
}
1226--2117[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="99.16.232.212" dst_port="80" src_ip="144.83.30.57"/>
      <filter dst_ip="99.23.203.184" dst_port="80" src_ip="144.83.30.57"/>
    </slice>
    <from sec="1020576414" usec="0"/>
    <to sec="1020576467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.179.124.57"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.0.161.60"/>
    </slice>
    <from sec="1020574876" usec="0"/>
    <to sec="1020574925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.141.173.61"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020575363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.208.24.64"/>
    </slice>
    <from sec="1020576360" usec="0"/>
    <to sec="1020576371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.208.149.65"/>
    </slice>
    <from sec="1020575399" usec="0"/>
    <to sec="1020575401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.208.2.66"/>
    </slice>
    <from sec="1020575506" usec="0"/>
    <to sec="1020576758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.196.129.70"/>
    </slice>
    <from sec="1020574805" usec="0"/>
    <to sec="1020575433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.68.229.71"/>
    </slice>
    <from sec="1020574806" usec="0"/>
    <to sec="1020576756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.241.176.72"/>
    </slice>
    <from sec="1020576423" usec="0"/>
    <to sec="1020576485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.228.37.73"/>
    </slice>
    <from sec="1020574809" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573985,1.85133,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
118[label="16.212.10.74;s;1821pkt 1821fpkt", shape=diamond, color=yellow];
2161[label="16.212.10.74;1821pkt 1821fpkt", shape=pentagon, color=darkviolet];
2853[label="16.212.10.74;1820pkt 1820fpkt", shape=invtriangle, color=brown];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.212.10.74:0, *:0}[99.9451%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.9451%)&lt;BR/&gt; 3501: (0.0274625%)&lt;BR/&gt; 25: (0.0274625%)&gt;];
}
118--2161[label="1;1821pkt 1821fpkt"];
118--2853[label="1;1820pkt 1820fpkt"];
2161--2853[label="1;1820pkt 1820fpkt"];
</description>
    <slice>
      <filter src_ip="16.212.10.74"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020575054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.9.14.75"/>
    </slice>
    <from sec="1020574837" usec="0"/>
    <to sec="1020576762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
740[label="214.33.95.77;s;193pkt 193fpkt", shape=diamond, color=yellow];
1582[label="214.33.95.77;s;175pkt 175fpkt", shape=hexagon, color=black];
2170[label="214.33.95.77;198pkt 198fpkt", shape=pentagon, color=darkviolet];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.33.95.77:*, 204.176.205.90:6667}[49.4949%]&lt;BR/&gt;{214.33.95.77:113, 204.176.205.90:*}[49.4949%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (25.3534%)&lt;BR/&gt; 113: (24.6466%)&lt;BR/&gt; 57736: (0.265018%)&lt;BR/&gt; 57706: (0.265018%)&lt;BR/&gt; 57668: (0.265018%)&gt;];
}
740--1582[label="1;175pkt 175fpkt"];
740--2170[label="1;193pkt 193fpkt"];
1582--2170[label="1;175pkt 175fpkt"];
</description>
    <slice>
      <filter dst_ip="204.176.205.90" src_ip="214.33.95.77" src_port="113"/>
      <filter dst_ip="204.176.205.90" dst_port="6667" src_ip="214.33.95.77"/>
    </slice>
    <from sec="1020574805" usec="0"/>
    <to sec="1020576753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573985,1.85133,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
1005[label="192.3.105.78;s;58pkt 58fpkt", shape=diamond, color=yellow];
2174[label="192.3.105.78;59pkt 59fpkt", shape=pentagon, color=darkviolet];
2861[label="192.3.105.78;58pkt 58fpkt", shape=invtriangle, color=brown];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.3.105.78:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1005--2174[label="1;58pkt 58fpkt"];
1005--2861[label="0.982759;57pkt 57fpkt"];
2174--2861[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter src_ip="192.3.105.78"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.171.222.78"/>
    </slice>
    <from sec="1020574880" usec="0"/>
    <to sec="1020576761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.166.83.79"/>
    </slice>
    <from sec="1020574945" usec="0"/>
    <to sec="1020576755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.246.177.79"/>
    </slice>
    <from sec="1020574901" usec="0"/>
    <to sec="1020576753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.156.47.81"/>
    </slice>
    <from sec="1020574886" usec="0"/>
    <to sec="1020576761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.135.72.81"/>
    </slice>
    <from sec="1020575044" usec="0"/>
    <to sec="1020575828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.3.85.82"/>
    </slice>
    <from sec="1020574809" usec="0"/>
    <to sec="1020576751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.246.144.82"/>
    </slice>
    <from sec="1020575721" usec="0"/>
    <to sec="1020576761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.51.43.83"/>
    </slice>
    <from sec="1020576541" usec="0"/>
    <to sec="1020576654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.84.213.83"/>
    </slice>
    <from sec="1020576724" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.205.73.86"/>
    </slice>
    <from sec="1020574836" usec="0"/>
    <to sec="1020576727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.246.175.87"/>
    </slice>
    <from sec="1020576572" usec="0"/>
    <to sec="1020576606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.153.150.88"/>
    </slice>
    <from sec="1020574851" usec="0"/>
    <to sec="1020576707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.75.106.92"/>
    </slice>
    <from sec="1020575737" usec="0"/>
    <to sec="1020575783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.54.177.92"/>
    </slice>
    <from sec="1020576656" usec="0"/>
    <to sec="1020576680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
129[label="116.6.175.97;s;1pkt 1fpkt", shape=diamond, color=yellow];
268[label="193.243.198.169;d;218pkt 218fpkt", shape=diamond, color=yellow];
462[label="196.173.151.172;s;68pkt 68fpkt", shape=diamond, color=yellow];
478[label="193.243.194.146;d;140pkt 140fpkt", shape=diamond, color=yellow];
540[label="213.48.66.54;s;8pkt 8fpkt", shape=diamond, color=yellow];
757[label="193.184.144.103;s;5pkt 5fpkt", shape=diamond, color=yellow];
981[label="18.161.240.36;s;125pkt 125fpkt", shape=diamond, color=yellow];
1063[label="213.150.17.150;s;63pkt 63fpkt", shape=diamond, color=yellow];
1120[label="212.96.163.170;s;2pkt 2fpkt", shape=diamond, color=yellow];
1434[label="193.243.194.146;d;39pkt 39fpkt", shape=hexagon, color=black];
1483[label="193.243.198.169;d;211pkt 211fpkt", shape=hexagon, color=black];
1611[label="193.184.144.103;s;5pkt 5fpkt", shape=hexagon, color=black];
2040[label="18.161.240.36;128pkt 128fpkt", shape=pentagon, color=darkviolet];
2105[label="213.48.66.54;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2112[label="213.154.164.55;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2233[label="116.6.175.97;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2252[label="193.184.144.103;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2456[label="215.144.190.165;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2473[label="212.96.163.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2481[label="196.173.151.172;70pkt 70fpkt", shape=pentagon, color=darkviolet];
2514[label="116.30.197.183;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2588[label="215.144.190.209;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2615[label="215.144.190.217;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2622[label="215.144.190.220;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2826[label="213.154.164.55;25pkt 25fpkt", shape=invtriangle, color=brown];
2902[label="193.184.144.103;4pkt 4fpkt", shape=invtriangle, color=brown];
3032[label="212.96.163.170;1pkt 1fpkt", shape=invtriangle, color=brown];
3038[label="196.173.151.172;70pkt 70fpkt", shape=invtriangle, color=brown];
3110[label="215.144.190.217;16pkt 16fpkt", shape=invtriangle, color=brown];
3116[label="215.144.190.220;17pkt 17fpkt", shape=invtriangle, color=brown];
3267[label="116.6.175.97;1pkt 1fpkt", shape=invhouse, color=bisque];
3388[label="215.144.190.217;16pkt 16fpkt", shape=invhouse, color=bisque];
3391[label="215.144.190.220;16pkt 16fpkt", shape=invhouse, color=bisque];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 193.243.198.169:80}[32.0652%]&lt;BR/&gt;{*:*, 193.243.194.146:80}[25.3623%]&lt;BR/&gt;{18.161.240.36:*, *:80}[22.4638%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.0072%)&lt;BR/&gt; 554: (1.68459%)&lt;BR/&gt; 443: (1.68459%)&lt;BR/&gt; 6972: (1.03943%)&lt;BR/&gt; 6976: (0.9319%)&gt;];
}
129--268[label="1;1pkt 1fpkt"];
129--1483[label="1;1pkt 1fpkt"];
129--2233[label="1;1pkt 1fpkt"];
129--3267[label="1;1pkt 1fpkt"];
268--462[label="0.911765;62pkt 62fpkt"];
268--508[label="0.0412844;9pkt 9fpkt"];
268--529[label="0.00917431;2pkt 2fpkt"];
268--540[label="0.875;7pkt 7fpkt"];
268--547[label="0.00458716;1pkt 1fpkt"];
268--548[label="0.00917431;2pkt 2fpkt"];
268--756[label="0.0434783;1pkt 1fpkt"];
268--757[label="1;5pkt 5fpkt"];
268--981[label="0.48;60pkt 60fpkt"];
268--1063[label="0.460317;29pkt 29fpkt"];
268--1068[label="0.00917431;2pkt 2fpkt"];
268--1120[label="1;2pkt 2fpkt"];
268--1483[label="1;211pkt 211fpkt"];
268--1571[label="0.00917431;2pkt 2fpkt"];
268--1611[label="1;5pkt 5fpkt"];
268--1846[label="0.0183486;4pkt 4fpkt"];
268--1855[label="0.0137615;3pkt 3fpkt"];
268--1856[label="0.0275229;6pkt 6fpkt"];
268--1860[label="0.0412844;9pkt 9fpkt"];
268--1869[label="0.0183486;4pkt 4fpkt"];
268--1874[label="0.0183486;4pkt 4fpkt"];
268--1879[label="0.0137615;3pkt 3fpkt"];
268--1881[label="0.0275229;6pkt 6fpkt"];
268--1882[label="0.0412844;9pkt 9fpkt"];
268--1885[label="0.0183486;4pkt 4fpkt"];
268--1890[label="0.0183486;4pkt 4fpkt"];
268--1895[label="0.0183486;4pkt 4fpkt"];
268--2040[label="0.46875;60pkt 60fpkt"];
268--2105[label="0.772727;17pkt 17fpkt"];
268--2233[label="1;1pkt 1fpkt"];
268--2252[label="1;5pkt 5fpkt"];
268--2336[label="0.030303;1pkt 1fpkt"];
268--2456[label="0.0666667;1pkt 1fpkt"];
268--2473[label="1;1pkt 1fpkt"];
268--2481[label="0.9;63pkt 63fpkt"];
268--2535[label="0.0412844;9pkt 9fpkt"];
268--2588[label="0.0322581;1pkt 1fpkt"];
268--2615[label="0.125;2pkt 2fpkt"];
268--2622[label="0.0588235;1pkt 1fpkt"];
268--2902[label="1;4pkt 4fpkt"];
268--2951[label="0.03125;1pkt 1fpkt"];
268--3032[label="1;1pkt 1fpkt"];
268--3038[label="0.9;63pkt 63fpkt"];
268--3110[label="0.125;2pkt 2fpkt"];
268--3116[label="0.0588235;1pkt 1fpkt"];
268--3267[label="1;1pkt 1fpkt"];
268--3388[label="0.125;2pkt 2fpkt"];
268--3391[label="0.0625;1pkt 1fpkt"];
462--478[label="0.0882353;6pkt 6fpkt"];
462--1434[label="0.0512821;2pkt 2fpkt"];
462--1483[label="0.911765;62pkt 62fpkt"];
462--1846[label="0.0441176;3pkt 3fpkt"];
462--1856[label="0.0588235;4pkt 4fpkt"];
462--1860[label="0.0147059;1pkt 1fpkt"];
462--1869[label="0.0147059;1pkt 1fpkt"];
462--1874[label="0.0441176;3pkt 3fpkt"];
462--1881[label="0.0588235;4pkt 4fpkt"];
462--1882[label="0.0147059;1pkt 1fpkt"];
462--1885[label="0.0147059;1pkt 1fpkt"];
462--1890[label="0.0441176;3pkt 3fpkt"];
462--1895[label="0.0147059;1pkt 1fpkt"];
462--2481[label="0.985294;67pkt 67fpkt"];
462--3038[label="0.985294;67pkt 67fpkt"];
478--508[label="0.00714286;1pkt 1fpkt"];
478--529[label="0.0142857;2pkt 2fpkt"];
478--547[label="0.0142857;2pkt 2fpkt"];
478--548[label="0.0214286;3pkt 3fpkt"];
478--578[label="0.142857;1pkt 1fpkt"];
478--775[label="0.0214286;3pkt 3fpkt"];
478--1013[label="0.90625;58pkt 58fpkt"];
478--1434[label="1;39pkt 39fpkt"];
478--1571[label="0.0142857;2pkt 2fpkt"];
478--1726[label="0.983051;58pkt 58fpkt"];
478--1846[label="0.0428571;6pkt 6fpkt"];
478--1855[label="0.0428571;6pkt 6fpkt"];
478--1856[label="0.107143;15pkt 15fpkt"];
478--1860[label="0.0214286;3pkt 3fpkt"];
478--1869[label="0.0214286;3pkt 3fpkt"];
478--1874[label="0.0428571;6pkt 6fpkt"];
478--1879[label="0.0428571;6pkt 6fpkt"];
478--1881[label="0.107143;15pkt 15fpkt"];
478--1882[label="0.0214286;3pkt 3fpkt"];
478--1885[label="0.0214286;3pkt 3fpkt"];
478--1890[label="0.0428571;6pkt 6fpkt"];
478--1895[label="0.0214286;3pkt 3fpkt"];
478--2073[label="0.0175439;1pkt 1fpkt"];
478--2112[label="1;24pkt 24fpkt"];
478--2327[label="0.04;1pkt 1fpkt"];
478--2481[label="0.0857143;6pkt 6fpkt"];
478--2514[label="0.0714286;1pkt 1fpkt"];
478--2535[label="0.00714286;1pkt 1fpkt"];
478--2588[label="0.0322581;1pkt 1fpkt"];
478--2592[label="0.0555556;1pkt 1fpkt"];
478--2622[label="0.0588235;1pkt 1fpkt"];
478--2623[label="0.111111;1pkt 1fpkt"];
478--2826[label="1;25pkt 25fpkt"];
478--3038[label="0.0857143;6pkt 6fpkt"];
478--3095[label="0.0555556;1pkt 1fpkt"];
478--3116[label="0.0588235;1pkt 1fpkt"];
478--3298[label="0.0214286;3pkt 3fpkt"];
478--3391[label="0.0625;1pkt 1fpkt"];
540--1483[label="0.875;7pkt 7fpkt"];
540--2105[label="0.875;7pkt 7fpkt"];
757--1483[label="1;5pkt 5fpkt"];
757--1611[label="1;5pkt 5fpkt"];
757--2252[label="1;5pkt 5fpkt"];
757--2902[label="1;4pkt 4fpkt"];
981--1360[label="0.008;1pkt 1fpkt"];
981--1483[label="0.456;57pkt 57fpkt"];
981--1846[label="0.032;4pkt 4fpkt"];
981--1848[label="0.008;1pkt 1fpkt"];
981--1851[label="0.008;1pkt 1fpkt"];
981--1854[label="0.008;1pkt 1fpkt"];
981--1855[label="0.04;5pkt 5fpkt"];
981--1856[label="0.024;3pkt 3fpkt"];
981--1857[label="0.008;1pkt 1fpkt"];
981--1860[label="0.04;5pkt 5fpkt"];
981--1868[label="0.008;1pkt 1fpkt"];
981--1869[label="0.032;4pkt 4fpkt"];
981--1870[label="0.008;1pkt 1fpkt"];
981--1874[label="0.032;4pkt 4fpkt"];
981--1876[label="0.008;1pkt 1fpkt"];
981--1878[label="0.008;1pkt 1fpkt"];
981--1879[label="0.04;5pkt 5fpkt"];
981--1880[label="0.008;1pkt 1fpkt"];
981--1881[label="0.024;3pkt 3fpkt"];
981--1882[label="0.04;5pkt 5fpkt"];
981--1884[label="0.008;1pkt 1fpkt"];
981--1885[label="0.032;4pkt 4fpkt"];
981--1886[label="0.008;1pkt 1fpkt"];
981--1890[label="0.032;4pkt 4fpkt"];
981--1892[label="0.008;1pkt 1fpkt"];
981--1894[label="0.008;1pkt 1fpkt"];
981--1895[label="0.032;4pkt 4fpkt"];
981--2040[label="0.992;124pkt 124fpkt"];
1063--1254[label="0.772727;34pkt 34fpkt"];
1063--1483[label="0.460317;29pkt 29fpkt"];
1063--1860[label="0.0634921;4pkt 4fpkt"];
1063--1869[label="0.015873;1pkt 1fpkt"];
1063--1882[label="0.0634921;4pkt 4fpkt"];
1063--1885[label="0.015873;1pkt 1fpkt"];
1063--1895[label="0.015873;1pkt 1fpkt"];
1120--1483[label="1;2pkt 2fpkt"];
1120--1869[label="0.5;1pkt 1fpkt"];
1120--1885[label="0.5;1pkt 1fpkt"];
1120--1895[label="0.5;1pkt 1fpkt"];
1120--2473[label="1;1pkt 1fpkt"];
1120--3032[label="1;1pkt 1fpkt"];
1434--1726[label="0.461538;18pkt 18fpkt"];
1434--1846[label="0.153846;6pkt 6fpkt"];
1434--1855[label="0.153846;6pkt 6fpkt"];
1434--1856[label="0.102564;4pkt 4fpkt"];
1434--1874[label="0.153846;6pkt 6fpkt"];
1434--1879[label="0.153846;6pkt 6fpkt"];
1434--1881[label="0.102564;4pkt 4fpkt"];
1434--1890[label="0.153846;6pkt 6fpkt"];
1434--2327[label="0.04;1pkt 1fpkt"];
1434--2481[label="0.0512821;2pkt 2fpkt"];
1434--2588[label="0.0322581;1pkt 1fpkt"];
1434--2623[label="0.111111;1pkt 1fpkt"];
1434--3038[label="0.0512821;2pkt 2fpkt"];
1434--3298[label="0.025641;1pkt 1fpkt"];
1483--1571[label="0.00947867;2pkt 2fpkt"];
1483--1611[label="1;5pkt 5fpkt"];
1483--1846[label="0.0189573;4pkt 4fpkt"];
1483--1855[label="0.014218;3pkt 3fpkt"];
1483--1856[label="0.028436;6pkt 6fpkt"];
1483--1860[label="0.042654;9pkt 9fpkt"];
1483--1869[label="0.0189573;4pkt 4fpkt"];
1483--1874[label="0.0189573;4pkt 4fpkt"];
1483--1879[label="0.014218;3pkt 3fpkt"];
1483--1881[label="0.028436;6pkt 6fpkt"];
1483--1882[label="0.042654;9pkt 9fpkt"];
1483--1885[label="0.0189573;4pkt 4fpkt"];
1483--1890[label="0.0189573;4pkt 4fpkt"];
1483--1895[label="0.0189573;4pkt 4fpkt"];
1483--2040[label="0.445312;57pkt 57fpkt"];
1483--2105[label="0.681818;15pkt 15fpkt"];
1483--2233[label="1;1pkt 1fpkt"];
1483--2252[label="1;5pkt 5fpkt"];
1483--2336[label="0.030303;1pkt 1fpkt"];
1483--2456[label="0.0666667;1pkt 1fpkt"];
1483--2473[label="1;1pkt 1fpkt"];
1483--2481[label="0.871429;61pkt 61fpkt"];
1483--2535[label="0.042654;9pkt 9fpkt"];
1483--2588[label="0.0322581;1pkt 1fpkt"];
1483--2615[label="0.125;2pkt 2fpkt"];
1483--2622[label="0.0588235;1pkt 1fpkt"];
1483--2902[label="1;4pkt 4fpkt"];
1483--2951[label="0.03125;1pkt 1fpkt"];
1483--3032[label="1;1pkt 1fpkt"];
1483--3038[label="0.871429;61pkt 61fpkt"];
1483--3110[label="0.125;2pkt 2fpkt"];
1483--3116[label="0.0588235;1pkt 1fpkt"];
1483--3267[label="1;1pkt 1fpkt"];
1483--3388[label="0.125;2pkt 2fpkt"];
1483--3391[label="0.0625;1pkt 1fpkt"];
1611--2252[label="1;5pkt 5fpkt"];
1611--2902[label="1;4pkt 4fpkt"];
2112--2826[label="1;24pkt 24fpkt"];
2233--3267[label="1;1pkt 1fpkt"];
2252--2902[label="1;4pkt 4fpkt"];
2473--3032[label="1;1pkt 1fpkt"];
2481--3038[label="1;70pkt 70fpkt"];
2615--3110[label="1;16pkt 16fpkt"];
2615--3388[label="1;16pkt 16fpkt"];
2622--3116[label="1;17pkt 17fpkt"];
2622--3391[label="1;16pkt 16fpkt"];
3110--3388[label="1;16pkt 16fpkt"];
3116--3391[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="18.161.240.36"/>
      <filter dst_ip="193.243.198.169" dst_port="80"/>
      <filter dst_ip="193.243.194.146" dst_port="80"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.186.233.97"/>
    </slice>
    <from sec="1020574816" usec="0"/>
    <to sec="1020576744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.186.123.102"/>
    </slice>
    <from sec="1020575343" usec="0"/>
    <to sec="1020576120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,504,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
947[label="145.208.153.148;d;68pkt 68fpkt", shape=diamond, color=yellow];
1683[label="145.208.153.148;d;68pkt 68fpkt", shape=hexagon, color=black];
2056[label="16.203.37.40;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2134[label="17.97.177.64;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2838[label="17.97.177.64;11pkt 11fpkt", shape=invtriangle, color=brown];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.203.37.40:443, 145.208.153.148:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (39.5288%)&lt;BR/&gt; 80: (10.4712%)&lt;BR/&gt; 1154: (1.04712%)&lt;BR/&gt; 1153: (1.04712%)&lt;BR/&gt; 1148: (1.04712%)&gt;];
}
947--1683[label="1;68pkt 68fpkt"];
947--1865[label="0.0147059;1pkt 1fpkt"];
947--2026[label="0.16;4pkt 4fpkt"];
947--2056[label="1;34pkt 34fpkt"];
947--2134[label="1;10pkt 10fpkt"];
947--2249[label="0.0526316;1pkt 1fpkt"];
947--2838[label="1;11pkt 11fpkt"];
1683--1865[label="0.0147059;1pkt 1fpkt"];
1683--2026[label="0.16;4pkt 4fpkt"];
1683--2056[label="1;34pkt 34fpkt"];
1683--2134[label="1;10pkt 10fpkt"];
1683--2249[label="0.0526316;1pkt 1fpkt"];
1683--2838[label="1;11pkt 11fpkt"];
2134--2838[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.153.148" src_ip="16.203.37.40" src_port="443"/>
    </slice>
    <from sec="1020575579" usec="0"/>
    <to sec="1020576170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.243.196.106"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.1.145.108"/>
    </slice>
    <from sec="1020576437" usec="0"/>
    <to sec="1020576453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.3.144.110"/>
    </slice>
    <from sec="1020574804" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.182.184.113"/>
    </slice>
    <from sec="1020576750" usec="0"/>
    <to sec="1020576756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="116.16.194.115"/>
    </slice>
    <from sec="1020575598" usec="0"/>
    <to sec="1020575621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.208.34.118"/>
    </slice>
    <from sec="1020574813" usec="0"/>
    <to sec="1020576758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="116.28.23.119"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.33.27.119"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.218.11.121"/>
    </slice>
    <from sec="1020574803" usec="0"/>
    <to sec="1020576727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.73.200.121"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.112.236.121"/>
    </slice>
    <from sec="1020575744" usec="0"/>
    <to sec="1020576083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.103.29.122"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.208.145.122"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.35.148.122"/>
    </slice>
    <from sec="1020575545" usec="0"/>
    <to sec="1020576762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.502244,1.88143,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
1314[label="193.243.192.160;d;71pkt 71fpkt", shape=diamond, color=yellow];
2310[label="197.83.108.125;26pkt 26fpkt", shape=pentagon, color=darkviolet];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.83.108.125:80, 193.243.192.160:*}[38.0282%]&lt;BR/&gt;{223.34.45.240:80, 193.243.192.160:*}[26.7606%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8763%)&lt;BR/&gt; 443: (4.12371%)&lt;BR/&gt; 1332: (1.03093%)&lt;BR/&gt; 1331: (1.03093%)&lt;BR/&gt; 1330: (1.03093%)&gt;];
}
1314--2310[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="193.243.192.160" src_ip="223.34.45.240" src_port="80"/>
      <filter dst_ip="193.243.192.160" src_ip="197.83.108.125" src_port="80"/>
    </slice>
    <from sec="1020576358" usec="0"/>
    <to sec="1020576710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.208.60.128"/>
    </slice>
    <from sec="1020575141" usec="0"/>
    <to sec="1020575810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.3.97.128"/>
    </slice>
    <from sec="1020574807" usec="0"/>
    <to sec="1020576755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
1311[label="151.51.203.8;d;90pkt 90fpkt", shape=diamond, color=yellow];
1320[label="220.4.65.181;s;6pkt 6fpkt", shape=diamond, color=yellow];
1327[label="220.4.65.150;s;23pkt 23fpkt", shape=diamond, color=yellow];
2244[label="193.169.229.101;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2386[label="220.4.65.144;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2401[label="220.4.65.150;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2436[label="220.4.65.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2897[label="193.169.229.101;6pkt 6fpkt", shape=invtriangle, color=brown];
2984[label="220.4.65.144;15pkt 15fpkt", shape=invtriangle, color=brown];
2992[label="220.4.65.150;26pkt 26fpkt", shape=invtriangle, color=brown];
3013[label="220.4.65.162;1pkt 1fpkt", shape=invtriangle, color=brown];
3270[label="193.169.229.101;5pkt 5fpkt", shape=invhouse, color=bisque];
3320[label="220.4.65.144;15pkt 15fpkt", shape=invhouse, color=bisque];
3326[label="220.4.65.150;26pkt 26fpkt", shape=invhouse, color=bisque];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.4.65.150:80, 151.51.203.8:*}[26.5306%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.9961%)&lt;BR/&gt; 443: (10.2317%)&lt;BR/&gt; 4542: (0.965251%)&lt;BR/&gt; 4541: (0.965251%)&lt;BR/&gt; 4527: (0.965251%)&gt;];
}
1311--1320[label="0.5;3pkt 3fpkt"];
1311--1327[label="1;23pkt 23fpkt"];
1311--2244[label="1;5pkt 5fpkt"];
1311--2326[label="0.0645161;2pkt 2fpkt"];
1311--2386[label="0.866667;13pkt 13fpkt"];
1311--2401[label="0.88;22pkt 22fpkt"];
1311--2436[label="1;1pkt 1fpkt"];
1311--2897[label="1;6pkt 6fpkt"];
1311--2984[label="0.866667;13pkt 13fpkt"];
1311--2992[label="0.884615;23pkt 23fpkt"];
1311--3013[label="1;1pkt 1fpkt"];
1311--3270[label="1;5pkt 5fpkt"];
1311--3320[label="0.866667;13pkt 13fpkt"];
1311--3326[label="0.884615;23pkt 23fpkt"];
1327--2401[label="0.956522;22pkt 22fpkt"];
1327--2992[label="1;23pkt 23fpkt"];
1327--3326[label="1;23pkt 23fpkt"];
2244--2897[label="1;5pkt 5fpkt"];
2244--3270[label="1;5pkt 5fpkt"];
2386--2984[label="1;15pkt 15fpkt"];
2386--3320[label="1;15pkt 15fpkt"];
2401--2992[label="1;25pkt 25fpkt"];
2401--3326[label="1;25pkt 25fpkt"];
2436--3013[label="1;1pkt 1fpkt"];
2897--3270[label="1;5pkt 5fpkt"];
2984--3320[label="1;15pkt 15fpkt"];
2992--3326[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="151.51.203.8" src_ip="220.4.65.150" src_port="80"/>
    </slice>
    <from sec="1020576275" usec="0"/>
    <to sec="1020576743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.208.28.131"/>
    </slice>
    <from sec="1020574806" usec="0"/>
    <to sec="1020576758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.35.45.132"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020574906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.52.172.133"/>
    </slice>
    <from sec="1020574872" usec="0"/>
    <to sec="1020576581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573985,1.85133,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
1216[label="17.138.98.55;d;48pkt 48fpkt", shape=diamond, color=yellow];
2164[label="151.38.237.74;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2353[label="166.3.218.134;49pkt 49fpkt", shape=pentagon, color=darkviolet];
2855[label="151.38.237.74;9pkt 9fpkt", shape=invtriangle, color=brown];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 17.138.98.55:80}[56.25%]&lt;BR/&gt;{166.3.218.134:*, *:80}[51.0417%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1107: (1.30435%)&lt;BR/&gt; 1106: (1.30435%)&lt;BR/&gt; 1095: (1.30435%)&lt;BR/&gt; 1093: (1.30435%)&gt;];
}
1216--1869[label="0.145833;7pkt 7fpkt"];
1216--1885[label="0.145833;7pkt 7fpkt"];
1216--1895[label="0.145833;7pkt 7fpkt"];
1216--2164[label="0.777778;7pkt 7fpkt"];
1216--2353[label="0.0625;3pkt 3fpkt"];
1216--2511[label="0.0208333;1pkt 1fpkt"];
1216--2855[label="0.777778;7pkt 7fpkt"];
2164--2855[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="166.3.218.134"/>
      <filter dst_ip="17.138.98.55" dst_port="80"/>
    </slice>
    <from sec="1020574814" usec="0"/>
    <to sec="1020576756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.3.199.135"/>
    </slice>
    <from sec="1020575075" usec="0"/>
    <to sec="1020576567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.5.59.136"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.3.199.139"/>
    </slice>
    <from sec="1020574825" usec="0"/>
    <to sec="1020576651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.2.151.140"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.215.67.146"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.234.210.147"/>
    </slice>
    <from sec="1020575878" usec="0"/>
    <to sec="1020576761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573985,1.85133,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
676[label="213.61.197.151;s;194pkt 194fpkt", shape=diamond, color=yellow];
2406[label="213.61.197.151;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2996[label="213.61.197.151;1pkt 1fpkt", shape=invtriangle, color=brown];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.61.197.151:*, 165.89.149.179:25}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (39.8477%)&lt;BR/&gt; 110: (7.36041%)&lt;BR/&gt; 161: (2.79188%)&lt;BR/&gt; 1029: (1.01523%)&lt;BR/&gt; 16436: (0.507614%)&gt;];
}
676--1608[label="1;171pkt 171fpkt"];
676--2406[label="0.5;1pkt 1fpkt"];
2406--2996[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.89.149.179" dst_port="25" src_ip="213.61.197.151"/>
    </slice>
    <from sec="1020574803" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.3.49.152"/>
    </slice>
    <from sec="1020574851" usec="0"/>
    <to sec="1020576706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.246.72.156"/>
    </slice>
    <from sec="1020574811" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.502244,1.88143,011,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
1237[label="204.103.37.157;s;536pkt 536fpkt", shape=diamond, color=yellow];
2420[label="204.103.37.157;543pkt 543fpkt", shape=pentagon, color=darkviolet];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.103.37.157:119, 99.226.121.163:*}[70.4044%]&lt;BR/&gt;{204.103.37.157:119, 22.65.150.148:*}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 119: (50%)&lt;BR/&gt; 60590: (0.0926784%)&lt;BR/&gt; 60589: (0.0926784%)&lt;BR/&gt; 60588: (0.0926784%)&lt;BR/&gt; 60587: (0.0926784%)&gt;];
}
1237--2420[label="0.998134;535pkt 535fpkt"];
</description>
    <slice>
      <filter dst_ip="99.226.121.163" src_ip="204.103.37.157" src_port="119"/>
      <filter dst_ip="22.65.150.148" src_ip="204.103.37.157" src_port="119"/>
    </slice>
    <from sec="1020574805" usec="0"/>
    <to sec="1020576749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.218.12.158"/>
    </slice>
    <from sec="1020574803" usec="0"/>
    <to sec="1020576729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
720[label="135.246.135.169;d;141pkt 141fpkt", shape=diamond, color=yellow];
918[label="22.72.199.186;s;1pkt 1fpkt", shape=diamond, color=yellow];
1614[label="22.72.199.186;s;1pkt 1fpkt", shape=hexagon, color=black];
2422[label="8.211.41.158;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2523[label="22.72.199.186;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3061[label="22.72.199.186;1pkt 1fpkt", shape=invtriangle, color=brown];
3359[label="22.72.199.186;1pkt 1fpkt", shape=invhouse, color=bisque];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8888, 135.246.135.169:*}[47.5177%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (22.3333%)&lt;BR/&gt; 7777: (8%)&lt;BR/&gt; 3456: (5.33333%)&lt;BR/&gt; 4444: (3.33333%)&lt;BR/&gt; 6666: (2.66667%)&gt;];
}
720--918[label="1;1pkt 1fpkt"];
720--1614[label="1;1pkt 1fpkt"];
720--2422[label="1;4pkt 4fpkt"];
720--2523[label="1;1pkt 1fpkt"];
720--3004[label="0.8;4pkt 4fpkt"];
720--3061[label="1;1pkt 1fpkt"];
720--3359[label="1;1pkt 1fpkt"];
918--1614[label="1;1pkt 1fpkt"];
918--2523[label="1;1pkt 1fpkt"];
918--3061[label="1;1pkt 1fpkt"];
918--3359[label="1;1pkt 1fpkt"];
1614--2523[label="1;1pkt 1fpkt"];
1614--3061[label="1;1pkt 1fpkt"];
1614--3359[label="1;1pkt 1fpkt"];
2422--3004[label="1;4pkt 4fpkt"];
2523--3061[label="1;1pkt 1fpkt"];
2523--3359[label="1;1pkt 1fpkt"];
3061--3359[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.246.135.169" src_port="8888"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
852[label="141.26.229.165;d;256pkt 256fpkt", shape=diamond, color=yellow];
853[label="206.44.153.159;s;258pkt 258fpkt", shape=diamond, color=yellow];
854[label="141.26.233.221;d;257pkt 257fpkt", shape=diamond, color=yellow];
855[label="206.44.153.210;s;255pkt 255fpkt", shape=diamond, color=yellow];
1584[label="141.26.229.165;d;256pkt 256fpkt", shape=hexagon, color=black];
1585[label="206.44.153.159;s;198pkt 198fpkt", shape=hexagon, color=black];
2425[label="206.44.153.159;257pkt 257fpkt", shape=pentagon, color=darkviolet];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.44.153.159:*, 141.26.229.165:7}[24.9513%]&lt;BR/&gt;{206.44.153.159:*, 141.26.233.221:7}[24.9513%]&lt;BR/&gt;{206.44.153.210:*, 141.26.233.221:7}[24.7563%]&lt;BR/&gt;{206.44.153.210:*, 141.26.229.165:7}[24.5614%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7: (49.6258%)&lt;BR/&gt; 0: (0.748417%)&lt;BR/&gt; 65407: (0.143926%)&lt;BR/&gt; 64383: (0.143926%)&lt;BR/&gt; 63868: (0.143926%)&gt;];
}
852--853[label="0.503906;129pkt 129fpkt"];
852--855[label="0.498039;127pkt 127fpkt"];
852--1584[label="1;256pkt 256fpkt"];
852--1585[label="0.5;99pkt 99fpkt"];
852--2425[label="0.503906;129pkt 129fpkt"];
853--854[label="0.501946;129pkt 129fpkt"];
853--1584[label="0.503906;129pkt 129fpkt"];
853--1585[label="1;198pkt 198fpkt"];
853--2425[label="1;257pkt 257fpkt"];
854--855[label="0.501961;128pkt 128fpkt"];
854--1585[label="0.5;99pkt 99fpkt"];
854--2425[label="0.498054;128pkt 128fpkt"];
855--1584[label="0.498039;127pkt 127fpkt"];
1584--1585[label="0.5;99pkt 99fpkt"];
1584--2425[label="0.503906;129pkt 129fpkt"];
1585--2425[label="0.994949;197pkt 197fpkt"];
</description>
    <slice>
      <filter dst_ip="141.26.233.221" dst_port="7" src_ip="206.44.153.159"/>
      <filter dst_ip="141.26.229.165" dst_port="7" src_ip="206.44.153.159"/>
      <filter dst_ip="141.26.233.221" dst_port="7" src_ip="206.44.153.210"/>
      <filter dst_ip="141.26.229.165" dst_port="7" src_ip="206.44.153.210"/>
    </slice>
    <from sec="1020574806" usec="0"/>
    <to sec="1020576754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.51.182.159"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573985,1.85133,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
339[label="193.243.196.100;d;190pkt 190fpkt", shape=diamond, color=yellow];
539[label="8.162.191.226;s;68pkt 68fpkt", shape=diamond, color=yellow];
1091[label="99.106.126.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
2228[label="116.17.1.94;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2430[label="99.106.126.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3010[label="99.106.126.160;1pkt 1fpkt", shape=invtriangle, color=brown];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:113, *:*}[30.4688%]&lt;BR/&gt;{8.162.191.133:*, 193.243.196.100:*}[25%]&lt;BR/&gt;{8.162.191.226:*, 204.176.205.88:*}[25%]&lt;BR/&gt;{*:*, 193.243.196.100:6667}[23.8281%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (19.2748%)&lt;BR/&gt; 113: (14.8855%)&lt;BR/&gt; 6665: (6.48855%)&lt;BR/&gt; 6666: (1.9084%)&lt;BR/&gt; 6668: (1.33588%)&gt;];
}
339--539[label="0.0294118;2pkt 2fpkt"];
339--740[label="0.00526316;1pkt 1fpkt"];
339--830[label="0.492063;62pkt 62fpkt"];
339--1091[label="1;1pkt 1fpkt"];
339--1160[label="0.0833333;8pkt 8fpkt"];
339--1582[label="0.00571429;1pkt 1fpkt"];
339--2170[label="0.00526316;1pkt 1fpkt"];
339--2228[label="1;1pkt 1fpkt"];
339--2430[label="1;1pkt 1fpkt"];
339--2706[label="0.0816327;8pkt 8fpkt"];
339--3010[label="1;1pkt 1fpkt"];
539--650[label="0.015873;1pkt 1fpkt"];
539--1561[label="0.0178571;1pkt 1fpkt"];
1091--2430[label="1;1pkt 1fpkt"];
1091--3010[label="1;1pkt 1fpkt"];
2430--3010[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_port="113"/>
      <filter dst_ip="204.176.205.88" src_ip="8.162.191.226"/>
      <filter dst_ip="193.243.196.100" src_ip="8.162.191.133"/>
      <filter dst_ip="193.243.196.100" dst_port="6667"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.192.166.161"/>
    </slice>
    <from sec="1020575367" usec="0"/>
    <to sec="1020575481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.122.89.162"/>
    </slice>
    <from sec="1020575465" usec="0"/>
    <to sec="1020576248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.246.52.163"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.178.89.163"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.59.6.164"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
493[label="135.246.117.180;d;90pkt 90fpkt", shape=diamond, color=yellow];
1914[label="192.65.221.5;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2448[label="192.66.49.164;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2500[label="192.146.32.177;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2719[label="192.65.221.5;17pkt 17fpkt", shape=invtriangle, color=brown];
3172[label="192.65.221.5;16pkt 16fpkt", shape=invhouse, color=bisque];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 135.246.117.180:*}[91.7526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6732%)&lt;BR/&gt; 1199: (1.30719%)&lt;BR/&gt; 1196: (1.30719%)&lt;BR/&gt; 1195: (1.30719%)&lt;BR/&gt; 1194: (1.30719%)&gt;];
}
493--1853[label="0.0222222;2pkt 2fpkt"];
493--1914[label="1;17pkt 17fpkt"];
493--2448[label="0.222222;2pkt 2fpkt"];
493--2500[label="1;4pkt 4fpkt"];
493--2532[label="0.0222222;2pkt 2fpkt"];
493--2719[label="1;17pkt 17fpkt"];
493--3172[label="1;16pkt 16fpkt"];
1914--2719[label="1;17pkt 17fpkt"];
1914--3172[label="1;16pkt 16fpkt"];
2719--3172[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="135.246.117.180" src_port="80"/>
    </slice>
    <from sec="1020574867" usec="0"/>
    <to sec="1020576227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.96.183.165"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.94.172.166"/>
    </slice>
    <from sec="1020576667" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
1100[label="17.114.49.224;d;168pkt 168fpkt", shape=diamond, color=yellow];
1133[label="151.235.174.145;s;161pkt 161fpkt", shape=diamond, color=yellow];
1677[label="17.114.49.224;d;168pkt 168fpkt", shape=hexagon, color=black];
2475[label="151.235.208.170;65pkt 65fpkt", shape=pentagon, color=darkviolet];
3033[label="151.235.208.170;65pkt 65fpkt", shape=invtriangle, color=brown];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.235.208.170:*, 17.114.49.224:6346}[29.0749%]&lt;BR/&gt;{151.235.174.145:0, *:0}[24.2291%]&lt;BR/&gt;{151.235.174.145:*, 17.114.49.224:6346}[22.9075%]&lt;BR/&gt;{151.235.174.145:*, 17.114.49.224:37852}[22.467%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (33.0144%)&lt;BR/&gt; 37852: (12.2807%)&lt;BR/&gt; 0: (9.09091%)&lt;BR/&gt; 4025: (0.558214%)&lt;BR/&gt; 4005: (0.558214%)&gt;];
}
1100--1133[label="0.645963;104pkt 104fpkt"];
1100--1677[label="1;168pkt 168fpkt"];
1100--1845[label="0.00595238;1pkt 1fpkt"];
1100--1853[label="0.00595238;1pkt 1fpkt"];
1100--1859[label="0.00595238;1pkt 1fpkt"];
1100--1862[label="0.00595238;1pkt 1fpkt"];
1100--1865[label="0.00595238;1pkt 1fpkt"];
1100--1867[label="0.00595238;1pkt 1fpkt"];
1100--1873[label="0.00595238;1pkt 1fpkt"];
1100--1883[label="0.00595238;1pkt 1fpkt"];
1100--1889[label="0.00595238;1pkt 1fpkt"];
1100--2475[label="0.969231;63pkt 63fpkt"];
1100--3033[label="0.969231;63pkt 63fpkt"];
1133--1677[label="0.645963;104pkt 104fpkt"];
1133--1845[label="0.00621118;1pkt 1fpkt"];
1133--1853[label="0.00621118;1pkt 1fpkt"];
1133--1859[label="0.00621118;1pkt 1fpkt"];
1133--1862[label="0.00621118;1pkt 1fpkt"];
1133--1865[label="0.00621118;1pkt 1fpkt"];
1133--1867[label="0.00621118;1pkt 1fpkt"];
1133--1873[label="0.00621118;1pkt 1fpkt"];
1133--1883[label="0.00621118;1pkt 1fpkt"];
1133--1889[label="0.00621118;1pkt 1fpkt"];
1677--1845[label="0.00595238;1pkt 1fpkt"];
1677--1853[label="0.00595238;1pkt 1fpkt"];
1677--1859[label="0.00595238;1pkt 1fpkt"];
1677--1862[label="0.00595238;1pkt 1fpkt"];
1677--1865[label="0.00595238;1pkt 1fpkt"];
1677--1867[label="0.00595238;1pkt 1fpkt"];
1677--1873[label="0.00595238;1pkt 1fpkt"];
1677--1883[label="0.00595238;1pkt 1fpkt"];
1677--1889[label="0.00595238;1pkt 1fpkt"];
1677--2475[label="0.969231;63pkt 63fpkt"];
1677--3033[label="0.969231;63pkt 63fpkt"];
2475--3033[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_ip="17.114.49.224" dst_port="6346" src_ip="151.235.174.145"/>
      <filter dst_ip="17.114.49.224" dst_port="37852" src_ip="151.235.174.145"/>
      <filter src_ip="151.235.174.145"/>
      <filter dst_ip="17.114.49.224" dst_port="6346" src_ip="151.235.208.170"/>
    </slice>
    <from sec="1020574818" usec="0"/>
    <to sec="1020576752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.1.31.173"/>
    </slice>
    <from sec="1020574803" usec="0"/>
    <to sec="1020576761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.140.221.176"/>
    </slice>
    <from sec="1020574819" usec="0"/>
    <to sec="1020576533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
970[label="192.10.214.91;d;234pkt 234fpkt", shape=diamond, color=yellow];
1976[label="223.220.206.19;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2072[label="134.65.69.43;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2503[label="222.30.112.179;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2583[label="223.220.201.206;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2752[label="223.220.206.19;8pkt 8fpkt", shape=invtriangle, color=brown];
2806[label="134.65.69.43;16pkt 16fpkt", shape=invtriangle, color=brown];
2888[label="215.20.189.95;2pkt 2fpkt", shape=invtriangle, color=brown];
3049[label="222.30.112.179;7pkt 7fpkt", shape=invtriangle, color=brown];
3264[label="215.20.189.95;1pkt 1fpkt", shape=invhouse, color=bisque];
3354[label="222.30.112.179;7pkt 7fpkt", shape=invhouse, color=bisque];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 192.10.214.91:*}[99.5726%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8423%)&lt;BR/&gt; 1721: (0.630915%)&lt;BR/&gt; 1719: (0.630915%)&lt;BR/&gt; 1617: (0.630915%)&lt;BR/&gt; 1615: (0.630915%)&gt;];
}
970--1044[label="0.27451;14pkt 14fpkt"];
970--1674[label="0.137931;4pkt 4fpkt"];
970--1865[label="0.115385;27pkt 27fpkt"];
970--1867[label="0.0555556;13pkt 13fpkt"];
970--1883[label="0.0555556;13pkt 13fpkt"];
970--1976[label="1;8pkt 8fpkt"];
970--2039[label="0.0322581;2pkt 2fpkt"];
970--2072[label="1;15pkt 15fpkt"];
970--2503[label="1;8pkt 8fpkt"];
970--2515[label="0.212121;7pkt 7fpkt"];
970--2583[label="1;11pkt 11fpkt"];
970--2752[label="1;8pkt 8fpkt"];
970--2788[label="0.047619;3pkt 3fpkt"];
970--2806[label="1;16pkt 16fpkt"];
970--2888[label="1;2pkt 2fpkt"];
970--3049[label="1;7pkt 7fpkt"];
970--3057[label="0.212121;7pkt 7fpkt"];
970--3264[label="1;1pkt 1fpkt"];
970--3354[label="1;7pkt 7fpkt"];
1976--2752[label="1;8pkt 8fpkt"];
2072--2806[label="1;15pkt 15fpkt"];
2503--3049[label="1;7pkt 7fpkt"];
2503--3354[label="1;7pkt 7fpkt"];
2888--3264[label="1;1pkt 1fpkt"];
3049--3354[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="192.10.214.91" src_port="80"/>
    </slice>
    <from sec="1020575836" usec="0"/>
    <to sec="1020576709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.208.99.181"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.85.127.184"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.201.196.184"/>
    </slice>
    <from sec="1020576213" usec="0"/>
    <to sec="1020576241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
436[label="145.208.157.237;d;180pkt 180fpkt", shape=diamond, color=yellow];
2033[label="197.182.161.35;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2525[label="223.156.21.187;107pkt 107fpkt", shape=pentagon, color=darkviolet];
2785[label="197.182.161.35;22pkt 22fpkt", shape=invtriangle, color=brown];
3063[label="223.156.21.187;108pkt 108fpkt", shape=invtriangle, color=brown];
3210[label="197.182.161.35;21pkt 21fpkt", shape=invhouse, color=bisque];
3360[label="223.156.21.187;107pkt 107fpkt", shape=invhouse, color=bisque];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.156.21.187:80, 145.208.157.237:*}[39.1304%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4709%)&lt;BR/&gt; 81: (0.529101%)&lt;BR/&gt; 2399: (0.352734%)&lt;BR/&gt; 2398: (0.352734%)&lt;BR/&gt; 2394: (0.352734%)&gt;];
}
436--1845[label="0.0888889;16pkt 16fpkt"];
436--1859[label="0.0111111;2pkt 2fpkt"];
436--1873[label="0.0888889;16pkt 16fpkt"];
436--1889[label="0.0888889;16pkt 16fpkt"];
436--2033[label="1;22pkt 22fpkt"];
436--2525[label="0.757009;81pkt 81fpkt"];
436--2785[label="1;22pkt 22fpkt"];
436--3063[label="0.75;81pkt 81fpkt"];
436--3210[label="1;21pkt 21fpkt"];
436--3360[label="0.757009;81pkt 81fpkt"];
2033--2785[label="1;22pkt 22fpkt"];
2033--3210[label="1;21pkt 21fpkt"];
2525--3063[label="1;107pkt 107fpkt"];
2525--3360[label="1;107pkt 107fpkt"];
2785--3210[label="1;21pkt 21fpkt"];
3063--3360[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.157.237" src_ip="223.156.21.187" src_port="80"/>
    </slice>
    <from sec="1020574810" usec="0"/>
    <to sec="1020576340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.42.92.187"/>
    </slice>
    <from sec="1020574809" usec="0"/>
    <to sec="1020576737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.60.195.190"/>
    </slice>
    <from sec="1020574839" usec="0"/>
    <to sec="1020576757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.502244,1.88143,504,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
635[label="192.10.16.6;d;7pkt 7fpkt", shape=diamond, color=yellow];
1000[label="192.188.90.192;s;7pkt 7fpkt", shape=diamond, color=yellow];
2546[label="192.188.90.192;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.188.90.192:443, 192.10.16.6:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4302: (4.6875%)&lt;BR/&gt; 4301: (4.6875%)&lt;BR/&gt; 4288: (4.6875%)&lt;BR/&gt; 4217: (4.6875%)&gt;];
}
635--1000[label="1;7pkt 7fpkt"];
635--2546[label="1;7pkt 7fpkt"];
1000--2546[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="192.10.16.6" src_ip="192.188.90.192" src_port="443"/>
    </slice>
    <from sec="1020575838" usec="0"/>
    <to sec="1020576521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.10.32.195"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.91.32.199"/>
    </slice>
    <from sec="1020574846" usec="0"/>
    <to sec="1020576749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.59.166.211"/>
    </slice>
    <from sec="1020575942" usec="0"/>
    <to sec="1020576313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
760[label="215.72.91.212;s;4pkt 4fpkt", shape=diamond, color=yellow];
879[label="18.16.162.172;s;7pkt 7fpkt", shape=diamond, color=yellow];
1509[label="192.12.3.119;d;22pkt 22fpkt", shape=hexagon, color=black];
2597[label="215.72.91.212;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3097[label="215.72.91.212;3pkt 3fpkt", shape=invtriangle, color=brown];
3382[label="215.72.91.212;4pkt 4fpkt", shape=invhouse, color=bisque];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.16.162.172:80, 192.12.3.119:*}[25.9259%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8372%)&lt;BR/&gt; 1432: (5.81395%)&lt;BR/&gt; 1431: (5.81395%)&lt;BR/&gt; 1429: (5.81395%)&lt;BR/&gt; 1428: (3.48837%)&gt;];
}
760--1509[label="1;4pkt 4fpkt"];
760--2597[label="1;3pkt 3fpkt"];
760--3097[label="1;3pkt 3fpkt"];
760--3382[label="1;4pkt 4fpkt"];
879--1509[label="0.285714;2pkt 2fpkt"];
879--1859[label="0.428571;3pkt 3fpkt"];
879--1862[label="0.142857;1pkt 1fpkt"];
1509--1853[label="0.0909091;2pkt 2fpkt"];
1509--1859[label="0.0909091;2pkt 2fpkt"];
1509--2597[label="1;3pkt 3fpkt"];
1509--3097[label="1;3pkt 3fpkt"];
1509--3382[label="1;4pkt 4fpkt"];
2597--3097[label="1;3pkt 3fpkt"];
2597--3382[label="1;3pkt 3fpkt"];
3097--3382[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.12.3.119" src_ip="18.16.162.172" src_port="80"/>
    </slice>
    <from sec="1020575242" usec="0"/>
    <to sec="1020575786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
219[label="151.51.37.27;d;322pkt 322fpkt", shape=diamond, color=yellow];
563[label="116.18.212.255;s;6pkt 6fpkt", shape=diamond, color=yellow];
638[label="151.51.37.173;d;1pkt 1fpkt", shape=diamond, color=yellow];
859[label="145.208.178.25;d;78pkt 78fpkt", shape=diamond, color=yellow];
1134[label="213.53.13.224;s;65pkt 65fpkt", shape=diamond, color=yellow];
1204[label="151.41.250.4;d;68pkt 68fpkt", shape=diamond, color=yellow];
1317[label="151.51.37.168;d;2pkt 2fpkt", shape=diamond, color=yellow];
1353[label="151.51.37.27;d;79pkt 79fpkt", shape=hexagon, color=black];
1699[label="213.53.13.224;s;56pkt 56fpkt", shape=hexagon, color=black];
2032[label="213.53.84.35;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2097[label="223.237.0.52;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2263[label="16.203.27.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2318[label="213.53.35.127;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2453[label="215.56.132.164;120pkt 120fpkt", shape=pentagon, color=darkviolet];
2488[label="18.94.172.174;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2510[label="18.94.172.181;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2548[label="212.108.6.193;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2561[label="213.53.13.198;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2598[label="220.213.215.212;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2604[label="220.213.215.214;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2611[label="220.213.215.216;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2784[label="213.53.84.35;24pkt 24fpkt", shape=invtriangle, color=brown];
3040[label="18.94.172.174;7pkt 7fpkt", shape=invtriangle, color=brown];
3098[label="220.213.215.212;16pkt 16fpkt", shape=invtriangle, color=brown];
3347[label="18.94.172.174;7pkt 7fpkt", shape=invhouse, color=bisque];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:25}[32.7692%]&lt;BR/&gt;{*:*, 151.51.37.27:110}[25.2308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (22.0145%)&lt;BR/&gt; 25: (20.0415%)&lt;BR/&gt; 113: (6.12669%)&lt;BR/&gt; 53: (1.24611%)&lt;BR/&gt; 995: (0.46729%)&gt;];
}
219--563[label="0.833333;5pkt 5fpkt"];
219--1056[label="0.0847458;10pkt 10fpkt"];
219--1092[label="0.0124224;4pkt 4fpkt"];
219--1134[label="0.461538;30pkt 30fpkt"];
219--1353[label="1;79pkt 79fpkt"];
219--1699[label="0.482143;27pkt 27fpkt"];
219--2032[label="0.291667;7pkt 7fpkt"];
219--2097[label="0.5;2pkt 2fpkt"];
219--2263[label="1;1pkt 1fpkt"];
219--2318[label="0.933333;14pkt 14fpkt"];
219--2453[label="0.0833333;10pkt 10fpkt"];
219--2488[label="0.25;2pkt 2fpkt"];
219--2510[label="0.285714;2pkt 2fpkt"];
219--2548[label="0.5;1pkt 1fpkt"];
219--2561[label="1;10pkt 10fpkt"];
219--2598[label="0.4;6pkt 6fpkt"];
219--2604[label="0.5;8pkt 8fpkt"];
219--2611[label="0.4;4pkt 4fpkt"];
219--2634[label="0.0465116;2pkt 2fpkt"];
219--2784[label="0.291667;7pkt 7fpkt"];
219--3040[label="0.285714;2pkt 2fpkt"];
219--3098[label="0.375;6pkt 6fpkt"];
219--3347[label="0.285714;2pkt 2fpkt"];
563--638[label="1;1pkt 1fpkt"];
563--1353[label="0.333333;2pkt 2fpkt"];
859--1092[label="0.0128205;1pkt 1fpkt"];
859--2488[label="0.125;1pkt 1fpkt"];
859--2510[label="0.142857;1pkt 1fpkt"];
859--2598[label="0.133333;2pkt 2fpkt"];
859--2604[label="0.1875;3pkt 3fpkt"];
859--2611[label="0.3;3pkt 3fpkt"];
859--3098[label="0.1875;3pkt 3fpkt"];
1134--1317[label="0.5;1pkt 1fpkt"];
1134--1353[label="0.107692;7pkt 7fpkt"];
1134--1699[label="1;56pkt 56fpkt"];
1204--2107[label="0.25;2pkt 2fpkt"];
1204--2510[label="0.285714;2pkt 2fpkt"];
1204--2598[label="0.133333;2pkt 2fpkt"];
1204--2604[label="0.25;4pkt 4fpkt"];
1204--2611[label="0.2;2pkt 2fpkt"];
1204--2824[label="0.222222;2pkt 2fpkt"];
1204--3098[label="0.125;2pkt 2fpkt"];
1353--1699[label="0.125;7pkt 7fpkt"];
1353--2032[label="0.125;3pkt 3fpkt"];
1353--2263[label="1;1pkt 1fpkt"];
1353--2318[label="0.133333;2pkt 2fpkt"];
1353--2510[label="0.142857;1pkt 1fpkt"];
1353--2561[label="0.3;3pkt 3fpkt"];
1353--2598[label="0.133333;2pkt 2fpkt"];
1353--2784[label="0.125;3pkt 3fpkt"];
1353--3098[label="0.125;2pkt 2fpkt"];
2032--2784[label="1;24pkt 24fpkt"];
2488--3040[label="1;7pkt 7fpkt"];
2488--3347[label="1;7pkt 7fpkt"];
2598--3098[label="1;15pkt 15fpkt"];
3040--3347[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="25"/>
      <filter dst_ip="151.51.37.27" dst_port="110"/>
    </slice>
    <from sec="1020574804" usec="0"/>
    <to sec="1020576761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.243.194.213"/>
    </slice>
    <from sec="1020574841" usec="0"/>
    <to sec="1020576701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
364[label="215.117.87.198;d;115pkt 115fpkt", shape=diamond, color=yellow];
440[label="166.3.203.213;s;137pkt 137fpkt", shape=diamond, color=yellow];
2601[label="166.3.203.213;137pkt 137fpkt", shape=pentagon, color=darkviolet];
3099[label="166.3.203.213;137pkt 137fpkt", shape=invtriangle, color=brown];
3383[label="166.3.203.213;137pkt 137fpkt", shape=invhouse, color=bisque];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.3.203.213:*, 215.117.87.198:80}[83.9416%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2342: (0.377074%)&lt;BR/&gt; 2341: (0.377074%)&lt;BR/&gt; 2340: (0.377074%)&lt;BR/&gt; 2339: (0.377074%)&gt;];
}
364--440[label="1;115pkt 115fpkt"];
364--2601[label="1;115pkt 115fpkt"];
364--3099[label="1;115pkt 115fpkt"];
364--3383[label="1;115pkt 115fpkt"];
440--1846[label="0.0218978;3pkt 3fpkt"];
440--1874[label="0.0218978;3pkt 3fpkt"];
440--1890[label="0.0218978;3pkt 3fpkt"];
440--2601[label="1;137pkt 137fpkt"];
440--3099[label="1;137pkt 137fpkt"];
440--3383[label="1;137pkt 137fpkt"];
2601--3099[label="1;137pkt 137fpkt"];
2601--3383[label="1;137pkt 137fpkt"];
3099--3383[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_ip="215.117.87.198" dst_port="80" src_ip="166.3.203.213"/>
    </slice>
    <from sec="1020574838" usec="0"/>
    <to sec="1020575037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_345{
style=filled;
color=gray75;
657[label="193.243.196.214;s;77pkt 77fpkt", shape=diamond, color=yellow];
1713[label="193.243.196.214;s;75pkt 75fpkt", shape=hexagon, color=black];
2603[label="193.243.196.214;77pkt 77fpkt", shape=pentagon, color=darkviolet];
3101[label="193.243.196.214;78pkt 78fpkt", shape=invtriangle, color=brown];
3384[label="193.243.196.214;77pkt 77fpkt", shape=invhouse, color=bisque];
stat345[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.243.196.214:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
657--930[label="0.02;1pkt 1fpkt"];
657--1164[label="0.012987;1pkt 1fpkt"];
657--1168[label="0.142857;1pkt 1fpkt"];
657--1171[label="0.0208333;1pkt 1fpkt"];
657--1212[label="0.0833333;1pkt 1fpkt"];
657--1242[label="0.0322581;1pkt 1fpkt"];
657--1713[label="1;75pkt 75fpkt"];
657--2603[label="0.987013;76pkt 76fpkt"];
657--3101[label="1;77pkt 77fpkt"];
657--3384[label="0.987013;76pkt 76fpkt"];
1713--2603[label="0.986667;74pkt 74fpkt"];
1713--3101[label="1;75pkt 75fpkt"];
1713--3384[label="0.986667;74pkt 74fpkt"];
2603--3101[label="1;77pkt 77fpkt"];
2603--3384[label="1;77pkt 77fpkt"];
3101--3384[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter src_ip="193.243.196.214"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="137.68.30.215"/>
    </slice>
    <from sec="1020575070" usec="0"/>
    <to sec="1020575105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.65.182.215"/>
    </slice>
    <from sec="1020575682" usec="0"/>
    <to sec="1020576761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573985,1.85133,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
1225[label="166.3.56.217;s;56pkt 56fpkt", shape=diamond, color=yellow];
1269[label="17.11.224.251;d;2pkt 2fpkt", shape=diamond, color=yellow];
1272[label="22.65.226.125;d;2pkt 2fpkt", shape=diamond, color=yellow];
2612[label="166.3.56.217;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3107[label="166.3.56.217;2pkt 2fpkt", shape=invtriangle, color=brown];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.3.56.217:6257, *:6257}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (79.6875%)&lt;BR/&gt; 6699: (9.375%)&lt;BR/&gt; 1045: (3.125%)&lt;BR/&gt; 1041: (3.125%)&lt;BR/&gt; 1863: (0.78125%)&gt;];
}
1225--1269[label="1;2pkt 2fpkt"];
1225--1272[label="1;2pkt 2fpkt"];
1225--2612[label="1;2pkt 2fpkt"];
1225--3107[label="1;2pkt 2fpkt"];
1269--2612[label="0.5;1pkt 1fpkt"];
1269--3107[label="0.5;1pkt 1fpkt"];
1272--2612[label="0.5;1pkt 1fpkt"];
1272--3107[label="0.5;1pkt 1fpkt"];
2612--3107[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="166.3.56.217" src_port="6257"/>
    </slice>
    <from sec="1020576387" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,502,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
1079[label="213.53.60.222;s;3pkt 3fpkt", shape=diamond, color=yellow];
1686[label="213.53.60.222;s;3pkt 3fpkt", shape=hexagon, color=black];
2625[label="213.53.60.222;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3118[label="213.53.60.222;3pkt 3fpkt", shape=invtriangle, color=brown];
3393[label="213.53.60.222;2pkt 2fpkt", shape=invhouse, color=bisque];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.53.60.222:1028, 151.51.37.26:53}[33.3333%]&lt;BR/&gt;{213.53.60.222:1025, 151.51.141.71:143}[33.3333%]&lt;BR/&gt;{213.53.60.222:1030, 151.51.141.71:22}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (17.8571%)&lt;BR/&gt; 1028: (17.8571%)&lt;BR/&gt; 53: (17.8571%)&lt;BR/&gt; 22: (17.8571%)&lt;BR/&gt; 1025: (14.2857%)&gt;];
}
1079--1686[label="1;3pkt 3fpkt"];
1079--2625[label="1;3pkt 3fpkt"];
1079--3118[label="1;3pkt 3fpkt"];
1079--3393[label="1;2pkt 2fpkt"];
1686--2625[label="1;3pkt 3fpkt"];
1686--3118[label="1;3pkt 3fpkt"];
1686--3393[label="1;2pkt 2fpkt"];
2625--3118[label="1;3pkt 3fpkt"];
2625--3393[label="1;2pkt 2fpkt"];
3118--3393[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="151.51.141.71" dst_port="22" src_ip="213.53.60.222" src_port="1030"/>
      <filter dst_ip="151.51.141.71" dst_port="143" src_ip="213.53.60.222" src_port="1025"/>
      <filter dst_ip="151.51.37.26" dst_port="53" src_ip="213.53.60.222" src_port="1028"/>
    </slice>
    <from sec="1020575912" usec="0"/>
    <to sec="1020576319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.243.200.222"/>
    </slice>
    <from sec="1020576549" usec="0"/>
    <to sec="1020576595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.644216,1.84488,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_351{
style=filled;
color=gray75;
650[label="193.243.196.96;d;63pkt 63fpkt", shape=diamond, color=yellow];
1561[label="193.243.196.96;d;56pkt 56fpkt", shape=hexagon, color=black];
2635[label="213.153.9.225;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat351[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 193.243.196.96:6667}[34.9206%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (17.7686%)&lt;BR/&gt; 6663: (4.95868%)&lt;BR/&gt; 113: (4.95868%)&lt;BR/&gt; 6664: (3.30579%)&lt;BR/&gt; 80: (2.89256%)&gt;];
}
650--1561[label="1;56pkt 56fpkt"];
650--2635[label="1;2pkt 2fpkt"];
1561--2635[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.243.196.96" dst_port="6667"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.99.203.225"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.234.21.229"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.502244,1.88143,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_354{
style=filled;
color=gray75;
1277[label="166.3.71.233;s;2pkt 2fpkt", shape=diamond, color=yellow];
1280[label="70.171.74.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
2659[label="166.3.71.233;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat354[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.3.71.233:0, 96.241.191.169:0}[50%]&lt;BR/&gt;{166.3.71.233:4761, 70.171.74.244:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 4761: (25%)&gt;];
}
1277--1280[label="1;1pkt 1fpkt"];
1277--2659[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="70.171.74.244" dst_port="6699" src_ip="166.3.71.233" src_port="4761"/>
      <filter dst_ip="96.241.191.169" src_ip="166.3.71.233"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="223.220.201.234"/>
    </slice>
    <from sec="1020575261" usec="0"/>
    <to sec="1020575330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.40.64.240"/>
    </slice>
    <from sec="1020574817" usec="0"/>
    <to sec="1020576723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.38.88.242"/>
    </slice>
    <from sec="1020574815" usec="0"/>
    <to sec="1020576707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.138.18.243"/>
    </slice>
    <from sec="1020575420" usec="0"/>
    <to sec="1020575921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.38.168.243"/>
    </slice>
    <from sec="1020574816" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.2.126.250"/>
    </slice>
    <from sec="1020574827" usec="0"/>
    <to sec="1020576697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.489431,1.94664,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.176.143.253"/>
    </slice>
    <from sec="1020576207" usec="0"/>
    <to sec="1020576668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="223.250.40.0"/>
    </slice>
    <from sec="1020575426" usec="0"/>
    <to sec="1020576387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_363{
style=filled;
color=gray75;
1292[label="204.102.28.1;s;252pkt 252fpkt", shape=diamond, color=yellow];
1900[label="204.102.28.1;256pkt 256fpkt", shape=pentagon, color=darkviolet];
2712[label="204.102.28.1;256pkt 256fpkt", shape=invtriangle, color=brown];
3167[label="204.102.28.1;256pkt 256fpkt", shape=invhouse, color=bisque];
stat363[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.102.28.1:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1292--1900[label="0.996032;251pkt 251fpkt"];
1292--2712[label="0.996032;251pkt 251fpkt"];
1292--3167[label="0.996032;251pkt 251fpkt"];
1900--2712[label="1;256pkt 256fpkt"];
1900--3167[label="1;256pkt 256fpkt"];
2712--3167[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter src_ip="204.102.28.1"/>
    </slice>
    <from sec="1020574811" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.208.2.4"/>
    </slice>
    <from sec="1020574805" usec="0"/>
    <to sec="1020576760" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_365{
style=filled;
color=gray75;
1915[label="192.10.16.6;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2720[label="192.10.16.6;19pkt 19fpkt", shape=invtriangle, color=brown];
3173[label="192.10.16.6;18pkt 18fpkt", shape=invhouse, color=bisque];
stat365[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.10.16.6:*, 86.201.165.121:80}[57.8947%]&lt;BR/&gt;{192.10.16.6:*, 215.182.7.158:10001}[36.8421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.9091%)&lt;BR/&gt; 10001: (19.0909%)&lt;BR/&gt; 2982: (2.72727%)&lt;BR/&gt; 2974: (2.72727%)&lt;BR/&gt; 2965: (2.72727%)&gt;];
}
1915--2720[label="1;18pkt 18fpkt"];
1915--3173[label="1;18pkt 18fpkt"];
2720--3173[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="86.201.165.121" dst_port="80" src_ip="192.10.16.6"/>
      <filter dst_ip="215.182.7.158" dst_port="10001" src_ip="192.10.16.6"/>
    </slice>
    <from sec="1020575369" usec="0"/>
    <to sec="1020575534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.19.136.6"/>
    </slice>
    <from sec="1020574854" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
433[label="193.243.195.115;d;186pkt 186fpkt", shape=diamond, color=yellow];
1038[label="192.12.1.159;d;128pkt 128fpkt", shape=diamond, color=yellow];
1054[label="193.243.202.65;d;92pkt 92fpkt", shape=diamond, color=yellow];
1924[label="99.37.54.7;26pkt 26fpkt", shape=pentagon, color=darkviolet];
1994[label="99.37.54.25;95pkt 95fpkt", shape=pentagon, color=darkviolet];
2146[label="192.8.46.68;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2726[label="99.37.54.7;26pkt 26fpkt", shape=invtriangle, color=brown];
2763[label="99.37.54.25;94pkt 94fpkt", shape=invtriangle, color=brown];
2846[label="192.8.46.68;12pkt 12fpkt", shape=invtriangle, color=brown];
3177[label="99.37.54.7;26pkt 26fpkt", shape=invhouse, color=bisque];
3198[label="99.37.54.25;94pkt 94fpkt", shape=invhouse, color=bisque];
3243[label="192.8.46.68;12pkt 12fpkt", shape=invhouse, color=bisque];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[34.5372%]&lt;BR/&gt;{*:*, 192.12.1.159:*}[30.2483%]&lt;BR/&gt;{*:80, 193.243.195.115:*}[26.8623%]&lt;BR/&gt;{99.37.54.25:80, *:*}[21.4447%]&lt;BR/&gt;{*:*, 193.243.202.65:*}[20.7675%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0735%)&lt;BR/&gt; 25: (2.86426%)&lt;BR/&gt; 3913: (0.311333%)&lt;BR/&gt; 3908: (0.311333%)&lt;BR/&gt; 2561: (0.311333%)&gt;];
}
433--1301[label="0.0204082;1pkt 1fpkt"];
433--1402[label="0.00869565;1pkt 1fpkt"];
433--1853[label="0.00537634;1pkt 1fpkt"];
433--1856[label="0.00537634;1pkt 1fpkt"];
433--1859[label="0.0215054;4pkt 4fpkt"];
433--1860[label="0.0591398;11pkt 11fpkt"];
433--1865[label="0.0752688;14pkt 14fpkt"];
433--1867[label="0.0268817;5pkt 5fpkt"];
433--1881[label="0.00537634;1pkt 1fpkt"];
433--1882[label="0.0591398;11pkt 11fpkt"];
433--1883[label="0.0268817;5pkt 5fpkt"];
433--1924[label="0.384615;10pkt 10fpkt"];
433--1994[label="0.284211;27pkt 27fpkt"];
433--2034[label="0.215385;14pkt 14fpkt"];
433--2146[label="0.833333;10pkt 10fpkt"];
433--2726[label="0.384615;10pkt 10fpkt"];
433--2763[label="0.287234;27pkt 27fpkt"];
433--2846[label="0.833333;10pkt 10fpkt"];
433--3177[label="0.384615;10pkt 10fpkt"];
433--3198[label="0.287234;27pkt 27fpkt"];
433--3243[label="0.833333;10pkt 10fpkt"];
1038--1845[label="0.015625;2pkt 2fpkt"];
1038--1846[label="0.015625;2pkt 2fpkt"];
1038--1853[label="0.0078125;1pkt 1fpkt"];
1038--1855[label="0.03125;4pkt 4fpkt"];
1038--1856[label="0.015625;2pkt 2fpkt"];
1038--1860[label="0.0078125;1pkt 1fpkt"];
1038--1862[label="0.0078125;1pkt 1fpkt"];
1038--1865[label="0.0078125;1pkt 1fpkt"];
1038--1867[label="0.0234375;3pkt 3fpkt"];
1038--1869[label="0.03125;4pkt 4fpkt"];
1038--1873[label="0.015625;2pkt 2fpkt"];
1038--1874[label="0.015625;2pkt 2fpkt"];
1038--1879[label="0.03125;4pkt 4fpkt"];
1038--1881[label="0.015625;2pkt 2fpkt"];
1038--1882[label="0.0078125;1pkt 1fpkt"];
1038--1883[label="0.0234375;3pkt 3fpkt"];
1038--1885[label="0.03125;4pkt 4fpkt"];
1038--1889[label="0.015625;2pkt 2fpkt"];
1038--1890[label="0.015625;2pkt 2fpkt"];
1038--1895[label="0.03125;4pkt 4fpkt"];
1038--1924[label="0.153846;4pkt 4fpkt"];
1038--1994[label="0.178947;17pkt 17fpkt"];
1038--2726[label="0.153846;4pkt 4fpkt"];
1038--2763[label="0.180851;17pkt 17fpkt"];
1038--3177[label="0.153846;4pkt 4fpkt"];
1038--3198[label="0.180851;17pkt 17fpkt"];
1054--1855[label="0.108696;10pkt 10fpkt"];
1054--1856[label="0.0217391;2pkt 2fpkt"];
1054--1862[label="0.0652174;6pkt 6fpkt"];
1054--1865[label="0.0978261;9pkt 9fpkt"];
1054--1867[label="0.0869565;8pkt 8fpkt"];
1054--1879[label="0.108696;10pkt 10fpkt"];
1054--1881[label="0.0217391;2pkt 2fpkt"];
1054--1883[label="0.0869565;8pkt 8fpkt"];
1054--1924[label="0.346154;9pkt 9fpkt"];
1054--1994[label="0.206522;19pkt 19fpkt"];
1054--2726[label="0.346154;9pkt 9fpkt"];
1054--2763[label="0.206522;19pkt 19fpkt"];
1054--3177[label="0.346154;9pkt 9fpkt"];
1054--3198[label="0.206522;19pkt 19fpkt"];
1924--2726[label="1;26pkt 26fpkt"];
1924--3177[label="1;26pkt 26fpkt"];
1994--2763[label="1;94pkt 94fpkt"];
1994--3198[label="1;94pkt 94fpkt"];
2146--2846[label="1;12pkt 12fpkt"];
2146--3243[label="1;12pkt 12fpkt"];
2726--3177[label="1;26pkt 26fpkt"];
2763--3198[label="1;94pkt 94fpkt"];
2846--3243[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="192.12.1.159"/>
      <filter dst_ip="193.243.202.65"/>
      <filter dst_port="80"/>
      <filter src_ip="99.37.54.25" src_port="80"/>
      <filter dst_ip="193.243.195.115" src_port="80"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576748" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.73.14.11"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.225.45.13"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_370{
style=filled;
color=gray75;
1952[label="161.40.126.14;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2739[label="161.40.126.14;8pkt 8fpkt", shape=invtriangle, color=brown];
3185[label="161.40.126.14;8pkt 8fpkt", shape=invhouse, color=bisque];
stat370[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.40.126.14:*, 16.96.6.166:21}[62.5%]&lt;BR/&gt;{161.40.126.14:*, 16.96.6.24:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (43.75%)&lt;BR/&gt; 51390: (6.25%)&lt;BR/&gt; 51384: (6.25%)&lt;BR/&gt; 41178: (6.25%)&lt;BR/&gt; 1727: (6.25%)&gt;];
}
1952--2739[label="1;8pkt 8fpkt"];
1952--3185[label="1;8pkt 8fpkt"];
2739--3185[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="16.96.6.24" src_ip="161.40.126.14"/>
      <filter dst_ip="16.96.6.166" dst_port="21" src_ip="161.40.126.14"/>
    </slice>
    <from sec="1020574855" usec="0"/>
    <to sec="1020576751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
165[label="135.246.219.36;d;50pkt 50fpkt", shape=diamond, color=yellow];
1955[label="223.130.16.15;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2139[label="144.5.164.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2740[label="223.130.16.15;21pkt 21fpkt", shape=invtriangle, color=brown];
2842[label="144.5.164.65;1pkt 1fpkt", shape=invtriangle, color=brown];
3241[label="144.5.164.65;2pkt 2fpkt", shape=invhouse, color=bisque];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 135.246.219.36:*}[72.4638%]&lt;BR/&gt;{223.130.16.15:80, *:*}[30.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2594: (2.08333%)&lt;BR/&gt; 2342: (1.5625%)&lt;BR/&gt; 2338: (1.5625%)&lt;BR/&gt; 43737: (1.04167%)&gt;];
}
165--168[label="1;10pkt 10fpkt"];
165--742[label="0.02;1pkt 1fpkt"];
165--849[label="0.06;3pkt 3fpkt"];
165--1294[label="0.02;1pkt 1fpkt"];
165--1589[label="0.02;1pkt 1fpkt"];
165--1845[label="0.08;4pkt 4fpkt"];
165--1853[label="0.16;8pkt 8fpkt"];
165--1873[label="0.08;4pkt 4fpkt"];
165--1889[label="0.08;4pkt 4fpkt"];
165--1955[label="0.0952381;2pkt 2fpkt"];
165--2139[label="1;1pkt 1fpkt"];
165--2740[label="0.0952381;2pkt 2fpkt"];
165--2842[label="1;1pkt 1fpkt"];
165--3241[label="1;2pkt 2fpkt"];
1955--2740[label="1;21pkt 21fpkt"];
2139--2842[label="1;1pkt 1fpkt"];
2139--3241[label="1;1pkt 1fpkt"];
2842--3241[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="223.130.16.15" src_port="80"/>
      <filter dst_ip="135.246.219.36" src_port="80"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
1961[label="217.217.186.15;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2741[label="217.217.186.15;17pkt 17fpkt", shape=invtriangle, color=brown];
3186[label="217.217.186.15;16pkt 16fpkt", shape=invhouse, color=bisque];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.217.186.15:*, 192.12.6.161:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 23751: (3%)&lt;BR/&gt; 23749: (3%)&lt;BR/&gt; 23740: (3%)&lt;BR/&gt; 23738: (3%)&gt;];
}
1961--2741[label="1;17pkt 17fpkt"];
1961--3186[label="1;16pkt 16fpkt"];
2741--3186[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="192.12.6.161" dst_port="80" src_ip="217.217.186.15"/>
    </slice>
    <from sec="1020576442" usec="0"/>
    <to sec="1020576456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
1962[label="151.51.32.16;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2742[label="151.51.32.16;2pkt 2fpkt", shape=invtriangle, color=brown];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.51.32.16:0, 223.171.199.74:0}[33.3333%]&lt;BR/&gt;{151.51.32.16:0, 215.104.91.98:0}[33.3333%]&lt;BR/&gt;{151.51.32.16:0, 197.180.120.138:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1962--2742[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="197.180.120.138" src_ip="151.51.32.16"/>
      <filter dst_ip="215.104.91.98" src_ip="151.51.32.16"/>
      <filter dst_ip="223.171.199.74" src_ip="151.51.32.16"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_374{
style=filled;
color=gray75;
1964[label="192.3.121.16;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2743[label="192.3.121.16;19pkt 19fpkt", shape=invtriangle, color=brown];
stat374[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.3.121.16:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1964--2743[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter src_ip="192.3.121.16"/>
    </slice>
    <from sec="1020574820" usec="0"/>
    <to sec="1020576720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_375{
style=filled;
color=gray75;
470[label="145.208.35.17;s;667pkt 667fpkt", shape=diamond, color=yellow];
964[label="145.208.13.76;s;21pkt 21fpkt", shape=diamond, color=yellow];
965[label="216.158.65.68;d;8pkt 8fpkt", shape=diamond, color=yellow];
1649[label="216.158.65.68;d;8pkt 8fpkt", shape=hexagon, color=black];
1969[label="145.208.35.17;678pkt 678fpkt", shape=pentagon, color=darkviolet];
2748[label="145.208.35.17;677pkt 677fpkt", shape=invtriangle, color=brown];
3190[label="145.208.35.17;678pkt 678fpkt", shape=invhouse, color=bisque];
stat375[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.35.17:53, *:53}[44.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (69.1085%)&lt;BR/&gt; 0: (6.13811%)&lt;BR/&gt; 1024: (0.949945%)&lt;BR/&gt; 80: (0.60285%)&lt;BR/&gt; 1053: (0.493241%)&gt;];
}
470--514[label="0.025;1pkt 1fpkt"];
470--526[label="0.0178571;1pkt 1fpkt"];
470--588[label="0.0232558;1pkt 1fpkt"];
470--607[label="0.0238095;1pkt 1fpkt"];
470--621[label="0.0172414;1pkt 1fpkt"];
470--625[label="0.0178571;1pkt 1fpkt"];
470--723[label="0.0204082;1pkt 1fpkt"];
470--834[label="0.2;1pkt 1fpkt"];
470--835[label="0.2;1pkt 1fpkt"];
470--868[label="0.011994;8pkt 8fpkt"];
470--965[label="0.125;1pkt 1fpkt"];
470--986[label="0.0029985;2pkt 2fpkt"];
470--1162[label="0.0111111;1pkt 1fpkt"];
470--1283[label="0.125;1pkt 1fpkt"];
470--1448[label="0.0178571;1pkt 1fpkt"];
470--1482[label="0.0322581;1pkt 1fpkt"];
470--1568[label="0.0181818;1pkt 1fpkt"];
470--1624[label="0.0294118;1pkt 1fpkt"];
470--1649[label="0.125;1pkt 1fpkt"];
470--1728[label="0.0175439;1pkt 1fpkt"];
470--1820[label="0.037037;1pkt 1fpkt"];
470--1849[label="0.0194903;13pkt 13fpkt"];
470--1852[label="0.0989505;66pkt 66fpkt"];
470--1854[label="0.0674663;45pkt 45fpkt"];
470--1858[label="0.125937;84pkt 84fpkt"];
470--1864[label="0.107946;72pkt 72fpkt"];
470--1866[label="0.110945;74pkt 74fpkt"];
470--1868[label="0.0764618;51pkt 51fpkt"];
470--1870[label="0.065967;44pkt 44fpkt"];
470--1877[label="0.0194903;13pkt 13fpkt"];
470--1878[label="0.0674663;45pkt 45fpkt"];
470--1880[label="0.047976;32pkt 32fpkt"];
470--1884[label="0.0764618;51pkt 51fpkt"];
470--1886[label="0.065967;44pkt 44fpkt"];
470--1893[label="0.0194903;13pkt 13fpkt"];
470--1894[label="0.0764618;51pkt 51fpkt"];
470--1969[label="1;667pkt 667fpkt"];
470--2748[label="0.998501;666pkt 666fpkt"];
470--3190[label="1;667pkt 667fpkt"];
964--965[label="0.75;6pkt 6fpkt"];
964--1649[label="0.75;6pkt 6fpkt"];
965--1565[label="0.125;1pkt 1fpkt"];
965--1649[label="1;8pkt 8fpkt"];
965--1969[label="0.125;1pkt 1fpkt"];
965--2001[label="0.125;1pkt 1fpkt"];
965--2748[label="0.125;1pkt 1fpkt"];
965--3190[label="0.125;1pkt 1fpkt"];
1649--1969[label="0.125;1pkt 1fpkt"];
1649--2001[label="0.125;1pkt 1fpkt"];
1649--2748[label="0.125;1pkt 1fpkt"];
1649--3190[label="0.125;1pkt 1fpkt"];
1969--2748[label="1;677pkt 677fpkt"];
1969--3190[label="1;678pkt 678fpkt"];
2748--3190[label="1;677pkt 677fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="145.208.35.17" src_port="53"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
1974[label="192.3.121.18;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2750[label="192.3.121.18;19pkt 19fpkt", shape=invtriangle, color=brown];
3191[label="192.3.121.18;19pkt 19fpkt", shape=invhouse, color=bisque];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.3.121.18:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1974--2750[label="1;19pkt 19fpkt"];
1974--3191[label="1;19pkt 19fpkt"];
2750--3191[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter src_ip="192.3.121.18"/>
    </slice>
    <from sec="1020574820" usec="0"/>
    <to sec="1020576720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_377{
style=filled;
color=gray75;
1982[label="192.158.233.21;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2755[label="192.158.233.21;4pkt 4fpkt", shape=invtriangle, color=brown];
stat377[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.158.233.21:25, 206.219.75.173:54128}[20%]&lt;BR/&gt;{192.158.233.21:25, 204.60.133.14:4359}[20%]&lt;BR/&gt;{192.158.233.21:25, 204.60.133.14:5306}[20%]&lt;BR/&gt;{192.158.233.21:25, 147.88.205.202:3702}[20%]&lt;BR/&gt;{192.158.233.21:25, 147.88.205.202:3927}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 54128: (11.1111%)&lt;BR/&gt; 5306: (11.1111%)&lt;BR/&gt; 4359: (11.1111%)&lt;BR/&gt; 3927: (11.1111%)&gt;];
}
1982--2755[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="147.88.205.202" dst_port="3927" src_ip="192.158.233.21" src_port="25"/>
      <filter dst_ip="147.88.205.202" dst_port="3702" src_ip="192.158.233.21" src_port="25"/>
      <filter dst_ip="204.60.133.14" dst_port="5306" src_ip="192.158.233.21" src_port="25"/>
      <filter dst_ip="204.60.133.14" dst_port="4359" src_ip="192.158.233.21" src_port="25"/>
      <filter dst_ip="206.219.75.173" dst_port="54128" src_ip="192.158.233.21" src_port="25"/>
    </slice>
    <from sec="1020574871" usec="0"/>
    <to sec="1020576003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_378{
style=filled;
color=gray75;
1983[label="16.129.43.22;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2756[label="16.129.43.22;34pkt 34fpkt", shape=invtriangle, color=brown];
stat378[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.129.43.22:80, 166.3.62.150:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1204: (1.44928%)&lt;BR/&gt; 1203: (1.44928%)&lt;BR/&gt; 1202: (1.44928%)&lt;BR/&gt; 1201: (1.44928%)&gt;];
}
1983--2756[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="166.3.62.150" src_ip="16.129.43.22" src_port="80"/>
    </slice>
    <from sec="1020575968" usec="0"/>
    <to sec="1020576040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
1984[label="204.103.37.23;88pkt 88fpkt", shape=pentagon, color=darkviolet];
2757[label="204.103.37.23;87pkt 87fpkt", shape=invtriangle, color=brown];
3193[label="204.103.37.23;88pkt 88fpkt", shape=invhouse, color=bisque];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.103.37.23:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1984--2757[label="1;87pkt 87fpkt"];
1984--3193[label="1;88pkt 88fpkt"];
2757--3193[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter src_ip="204.103.37.23"/>
    </slice>
    <from sec="1020574805" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
372[label="197.83.183.24;s;3pkt 3fpkt", shape=diamond, color=yellow];
1474[label="197.83.183.24;s;3pkt 3fpkt", shape=hexagon, color=black];
1992[label="197.83.183.24;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2761[label="197.83.183.24;2pkt 2fpkt", shape=invtriangle, color=brown];
3196[label="197.83.183.24;2pkt 2fpkt", shape=invhouse, color=bisque];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.83.183.24:80, 135.246.216.9:2732}[33.3333%]&lt;BR/&gt;{197.83.183.24:80, 192.12.7.40:43465}[33.3333%]&lt;BR/&gt;{197.83.183.24:0, 193.243.196.160:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 43465: (20.8333%)&lt;BR/&gt; 2732: (20.8333%)&lt;BR/&gt; 0: (16.6667%)&gt;];
}
372--492[label="0.333333;1pkt 1fpkt"];
372--1429[label="0.333333;1pkt 1fpkt"];
372--1474[label="1;3pkt 3fpkt"];
372--1853[label="0.333333;1pkt 1fpkt"];
372--1859[label="0.333333;1pkt 1fpkt"];
372--1862[label="0.333333;1pkt 1fpkt"];
372--1865[label="0.333333;1pkt 1fpkt"];
372--1867[label="0.333333;1pkt 1fpkt"];
372--1883[label="0.333333;1pkt 1fpkt"];
372--1992[label="1;2pkt 2fpkt"];
372--2761[label="1;2pkt 2fpkt"];
372--3196[label="1;2pkt 2fpkt"];
1474--1853[label="0.333333;1pkt 1fpkt"];
1474--1859[label="0.333333;1pkt 1fpkt"];
1474--1862[label="0.333333;1pkt 1fpkt"];
1474--1865[label="0.333333;1pkt 1fpkt"];
1474--1867[label="0.333333;1pkt 1fpkt"];
1474--1883[label="0.333333;1pkt 1fpkt"];
1474--1992[label="1;2pkt 2fpkt"];
1474--2761[label="1;2pkt 2fpkt"];
1474--3196[label="1;2pkt 2fpkt"];
1992--2761[label="1;2pkt 2fpkt"];
1992--3196[label="1;2pkt 2fpkt"];
2761--3196[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.243.196.160" src_ip="197.83.183.24"/>
      <filter dst_ip="192.12.7.40" dst_port="43465" src_ip="197.83.183.24" src_port="80"/>
      <filter dst_ip="135.246.216.9" dst_port="2732" src_ip="197.83.183.24" src_port="80"/>
    </slice>
    <from sec="1020574985" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
2004[label="220.138.64.27;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2767[label="220.138.64.27;29pkt 29fpkt", shape=invtriangle, color=brown];
3201[label="220.138.64.27;28pkt 28fpkt", shape=invhouse, color=bisque];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.138.64.27:*, 192.3.92.135:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55432: (1.76471%)&lt;BR/&gt; 54673: (1.76471%)&lt;BR/&gt; 54653: (1.76471%)&lt;BR/&gt; 54593: (1.76471%)&gt;];
}
2004--2767[label="1;28pkt 28fpkt"];
2004--3201[label="1;28pkt 28fpkt"];
2767--3201[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="192.3.92.135" dst_port="80" src_ip="220.138.64.27"/>
    </slice>
    <from sec="1020576655" usec="0"/>
    <to sec="1020576667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_382{
style=filled;
color=gray75;
564[label="145.208.56.139;s;62pkt 62fpkt", shape=diamond, color=yellow];
616[label="197.83.45.130;d;433pkt 433fpkt", shape=diamond, color=yellow];
691[label="166.3.179.182;s;367pkt 367fpkt", shape=diamond, color=yellow];
945[label="192.10.217.173;s;69pkt 69fpkt", shape=diamond, color=yellow];
1001[label="220.100.70.175;d;101pkt 101fpkt", shape=diamond, color=yellow];
1085[label="217.11.179.145;d;1pkt 1fpkt", shape=diamond, color=yellow];
1612[label="192.10.217.173;s;31pkt 31fpkt", shape=hexagon, color=black];
1673[label="197.83.45.130;d;319pkt 319fpkt", shape=hexagon, color=black];
1968[label="135.246.27.17;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2006[label="166.3.49.28;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2240[label="192.10.205.100;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2545[label="166.3.62.192;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2599[label="166.3.16.213;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2682[label="145.208.204.242;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2747[label="135.246.27.17;2pkt 2fpkt", shape=invtriangle, color=brown];
2768[label="166.3.49.28;12pkt 12fpkt", shape=invtriangle, color=brown];
3071[label="166.3.62.192;20pkt 20fpkt", shape=invtriangle, color=brown];
3155[label="145.208.204.242;5pkt 5fpkt", shape=invtriangle, color=brown];
3189[label="135.246.27.17;3pkt 3fpkt", shape=invhouse, color=bisque];
3265[label="145.208.201.95;1pkt 1fpkt", shape=invhouse, color=bisque];
3411[label="145.208.204.242;5pkt 5fpkt", shape=invhouse, color=bisque];
stat382[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 197.83.45.130:80}[49.1448%]&lt;BR/&gt;{166.3.179.182:*, *:80}[41.8472%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8506%)&lt;BR/&gt; 1863: (0.371873%)&lt;BR/&gt; 1072: (0.338066%)&lt;BR/&gt; 1074: (0.30426%)&lt;BR/&gt; 1073: (0.30426%)&gt;];
}
564--616[label="0.258065;16pkt 16fpkt"];
564--621[label="0.0172414;1pkt 1fpkt"];
564--1085[label="1;1pkt 1fpkt"];
564--1673[label="0.258065;16pkt 16fpkt"];
564--1728[label="0.0175439;1pkt 1fpkt"];
564--1854[label="0.0322581;2pkt 2fpkt"];
564--1855[label="0.145161;9pkt 9fpkt"];
564--1856[label="0.0967742;6pkt 6fpkt"];
564--1868[label="0.016129;1pkt 1fpkt"];
564--1870[label="0.016129;1pkt 1fpkt"];
564--1878[label="0.0322581;2pkt 2fpkt"];
564--1879[label="0.145161;9pkt 9fpkt"];
564--1880[label="0.0322581;2pkt 2fpkt"];
564--1881[label="0.0967742;6pkt 6fpkt"];
564--1884[label="0.016129;1pkt 1fpkt"];
564--1886[label="0.016129;1pkt 1fpkt"];
564--1894[label="0.016129;1pkt 1fpkt"];
616--691[label="0.0190736;7pkt 7fpkt"];
616--945[label="0.942029;65pkt 65fpkt"];
616--1387[label="0.0454545;2pkt 2fpkt"];
616--1612[label="0.870968;27pkt 27fpkt"];
616--1673[label="1;319pkt 319fpkt"];
616--1846[label="0.0254042;11pkt 11fpkt"];
616--1855[label="0.0207852;9pkt 9fpkt"];
616--1856[label="0.0138568;6pkt 6fpkt"];
616--1860[label="0.0461894;20pkt 20fpkt"];
616--1869[label="0.0230947;10pkt 10fpkt"];
616--1874[label="0.0254042;11pkt 11fpkt"];
616--1879[label="0.0207852;9pkt 9fpkt"];
616--1881[label="0.0138568;6pkt 6fpkt"];
616--1882[label="0.0461894;20pkt 20fpkt"];
616--1885[label="0.0230947;10pkt 10fpkt"];
616--1890[label="0.0254042;11pkt 11fpkt"];
616--1895[label="0.0230947;10pkt 10fpkt"];
616--1968[label="1;2pkt 2fpkt"];
616--2006[label="0.272727;3pkt 3fpkt"];
616--2240[label="0.375;3pkt 3fpkt"];
616--2431[label="0.0207852;9pkt 9fpkt"];
616--2545[label="0.1;2pkt 2fpkt"];
616--2547[label="0.00230947;1pkt 1fpkt"];
616--2599[label="1;3pkt 3fpkt"];
616--2642[label="0.0221402;6pkt 6fpkt"];
616--2649[label="0.17552;76pkt 76fpkt"];
616--2682[label="0.5;2pkt 2fpkt"];
616--2747[label="1;2pkt 2fpkt"];
616--2768[label="0.25;3pkt 3fpkt"];
616--3011[label="0.0207852;9pkt 9fpkt"];
616--3071[label="0.1;2pkt 2fpkt"];
616--3133[label="0.17552;76pkt 76fpkt"];
616--3155[label="0.6;3pkt 3fpkt"];
616--3189[label="1;3pkt 3fpkt"];
616--3265[label="1;1pkt 1fpkt"];
616--3402[label="0.17552;76pkt 76fpkt"];
616--3411[label="0.6;3pkt 3fpkt"];
691--875[label="0.5;1pkt 1fpkt"];
691--902[label="0.0581395;10pkt 10fpkt"];
691--1001[label="1;101pkt 101fpkt"];
691--1208[label="0.930693;94pkt 94fpkt"];
691--1673[label="0.0219436;7pkt 7fpkt"];
691--1846[label="0.027248;10pkt 10fpkt"];
691--1855[label="0.027248;10pkt 10fpkt"];
691--1856[label="0.027248;10pkt 10fpkt"];
691--1860[label="0.0163488;6pkt 6fpkt"];
691--1869[label="0.0108992;4pkt 4fpkt"];
691--1874[label="0.027248;10pkt 10fpkt"];
691--1879[label="0.027248;10pkt 10fpkt"];
691--1881[label="0.027248;10pkt 10fpkt"];
691--1882[label="0.0163488;6pkt 6fpkt"];
691--1885[label="0.0108992;4pkt 4fpkt"];
691--1890[label="0.027248;10pkt 10fpkt"];
691--1895[label="0.0108992;4pkt 4fpkt"];
945--1612[label="1;31pkt 31fpkt"];
945--1673[label="0.753623;52pkt 52fpkt"];
945--1869[label="0.115942;8pkt 8fpkt"];
945--1885[label="0.115942;8pkt 8fpkt"];
945--1895[label="0.115942;8pkt 8fpkt"];
1612--1673[label="0.870968;27pkt 27fpkt"];
1673--1846[label="0.0344828;11pkt 11fpkt"];
1673--1855[label="0.0282132;9pkt 9fpkt"];
1673--1856[label="0.0188088;6pkt 6fpkt"];
1673--1860[label="0.0626959;20pkt 20fpkt"];
1673--1869[label="0.031348;10pkt 10fpkt"];
1673--1874[label="0.0344828;11pkt 11fpkt"];
1673--1879[label="0.0282132;9pkt 9fpkt"];
1673--1881[label="0.0188088;6pkt 6fpkt"];
1673--1882[label="0.0626959;20pkt 20fpkt"];
1673--1885[label="0.031348;10pkt 10fpkt"];
1673--1890[label="0.0344828;11pkt 11fpkt"];
1673--1895[label="0.031348;10pkt 10fpkt"];
1673--1968[label="1;2pkt 2fpkt"];
1673--2006[label="0.272727;3pkt 3fpkt"];
1673--2240[label="0.375;3pkt 3fpkt"];
1673--2431[label="0.0188088;6pkt 6fpkt"];
1673--2545[label="0.1;2pkt 2fpkt"];
1673--2547[label="0.0031348;1pkt 1fpkt"];
1673--2599[label="1;3pkt 3fpkt"];
1673--2642[label="0.0221402;6pkt 6fpkt"];
1673--2649[label="0.15674;50pkt 50fpkt"];
1673--2682[label="0.5;2pkt 2fpkt"];
1673--2747[label="1;2pkt 2fpkt"];
1673--2768[label="0.25;3pkt 3fpkt"];
1673--3011[label="0.0188088;6pkt 6fpkt"];
1673--3071[label="0.1;2pkt 2fpkt"];
1673--3133[label="0.15674;50pkt 50fpkt"];
1673--3155[label="0.6;3pkt 3fpkt"];
1673--3189[label="1;3pkt 3fpkt"];
1673--3402[label="0.15674;50pkt 50fpkt"];
1673--3411[label="0.6;3pkt 3fpkt"];
1968--2747[label="1;2pkt 2fpkt"];
1968--3189[label="1;2pkt 2fpkt"];
2006--2768[label="1;11pkt 11fpkt"];
2545--3071[label="1;20pkt 20fpkt"];
2682--3155[label="1;4pkt 4fpkt"];
2682--3411[label="1;4pkt 4fpkt"];
2747--3189[label="1;2pkt 2fpkt"];
3155--3411[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="166.3.179.182"/>
      <filter dst_ip="197.83.45.130" dst_port="80"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_383{
style=filled;
color=gray75;
2010[label="166.3.137.28;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2771[label="166.3.137.28;26pkt 26fpkt", shape=invtriangle, color=brown];
stat383[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.3.137.28:*, 215.2.216.155:80}[26.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1638: (1.96078%)&lt;BR/&gt; 1635: (1.96078%)&lt;BR/&gt; 1634: (1.96078%)&lt;BR/&gt; 1633: (1.96078%)&gt;];
}
2010--2771[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="215.2.216.155" dst_port="80" src_ip="166.3.137.28"/>
    </slice>
    <from sec="1020575883" usec="0"/>
    <to sec="1020576569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.37.54.34"/>
    </slice>
    <from sec="1020574813" usec="0"/>
    <to sec="1020575882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.40.127.34"/>
    </slice>
    <from sec="1020574819" usec="0"/>
    <to sec="1020576746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
2054[label="217.228.4.40;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2795[label="217.228.4.40;30pkt 30fpkt", shape=invtriangle, color=brown];
3215[label="217.228.4.40;30pkt 30fpkt", shape=invhouse, color=bisque];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.228.4.40:80, 192.10.205.17:*}[96.7742%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4505%)&lt;BR/&gt; 1157: (1.64835%)&lt;BR/&gt; 1156: (1.64835%)&lt;BR/&gt; 1155: (1.64835%)&lt;BR/&gt; 1154: (1.64835%)&gt;];
}
2054--2795[label="1;30pkt 30fpkt"];
2054--3215[label="1;30pkt 30fpkt"];
2795--3215[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="192.10.205.17" src_ip="217.228.4.40" src_port="80"/>
    </slice>
    <from sec="1020575876" usec="0"/>
    <to sec="1020575894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_387{
style=filled;
color=gray75;
2060[label="144.75.94.40;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2799[label="144.75.94.40;6pkt 6fpkt", shape=invtriangle, color=brown];
stat387[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.75.94.40:*, 99.35.122.36:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50430: (8.33333%)&lt;BR/&gt; 50429: (8.33333%)&lt;BR/&gt; 50427: (8.33333%)&lt;BR/&gt; 50426: (8.33333%)&gt;];
}
2060--2799[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="99.35.122.36" dst_port="80" src_ip="144.75.94.40"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_388{
style=filled;
color=gray75;
362[label="145.208.157.17;d;25pkt 25fpkt", shape=diamond, color=yellow];
2083[label="220.65.195.45;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2811[label="220.65.195.45;2pkt 2fpkt", shape=invtriangle, color=brown];
3223[label="220.65.195.45;2pkt 2fpkt", shape=invhouse, color=bisque];
stat388[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.208.157.17:80}[88%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.1613%)&lt;BR/&gt; 33653: (6.45161%)&lt;BR/&gt; 33652: (6.45161%)&lt;BR/&gt; 110: (4.83871%)&lt;BR/&gt; 65037: (1.6129%)&gt;];
}
362--1860[label="0.08;2pkt 2fpkt"];
362--1869[label="0.08;2pkt 2fpkt"];
362--1882[label="0.08;2pkt 2fpkt"];
362--1885[label="0.08;2pkt 2fpkt"];
362--1895[label="0.08;2pkt 2fpkt"];
362--2083[label="1;2pkt 2fpkt"];
362--2811[label="1;2pkt 2fpkt"];
362--3223[label="1;2pkt 2fpkt"];
2083--2811[label="1;2pkt 2fpkt"];
2083--3223[label="1;2pkt 2fpkt"];
2811--3223[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.157.17" dst_port="80"/>
    </slice>
    <from sec="1020575645" usec="0"/>
    <to sec="1020576692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
102[label="151.51.28.50;s;32pkt 32fpkt", shape=diamond, color=yellow];
103[label="99.137.169.175;d;14pkt 14fpkt", shape=diamond, color=yellow];
2094[label="151.51.28.50;32pkt 32fpkt", shape=pentagon, color=darkviolet];
2817[label="151.51.28.50;32pkt 32fpkt", shape=invtriangle, color=brown];
3227[label="151.51.28.50;32pkt 32fpkt", shape=invhouse, color=bisque];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.51.28.50:*, 99.137.169.175:80}[43.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.7746%)&lt;BR/&gt; 1755: (2.8169%)&lt;BR/&gt; 1219: (1.76056%)&lt;BR/&gt; 1218: (1.76056%)&lt;BR/&gt; 1217: (1.76056%)&gt;];
}
102--103[label="1;14pkt 14fpkt"];
102--1846[label="0.03125;1pkt 1fpkt"];
102--1855[label="0.125;4pkt 4fpkt"];
102--1874[label="0.03125;1pkt 1fpkt"];
102--1879[label="0.125;4pkt 4fpkt"];
102--1890[label="0.03125;1pkt 1fpkt"];
102--2094[label="1;32pkt 32fpkt"];
102--2817[label="1;32pkt 32fpkt"];
102--3227[label="1;32pkt 32fpkt"];
103--1846[label="0.0714286;1pkt 1fpkt"];
103--1874[label="0.0714286;1pkt 1fpkt"];
103--1890[label="0.0714286;1pkt 1fpkt"];
103--2094[label="1;14pkt 14fpkt"];
103--2817[label="1;14pkt 14fpkt"];
103--3227[label="1;14pkt 14fpkt"];
2094--2817[label="1;32pkt 32fpkt"];
2094--3227[label="1;32pkt 32fpkt"];
2817--3227[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="99.137.169.175" dst_port="80" src_ip="151.51.28.50"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="151.0.150.52"/>
    </slice>
    <from sec="1020575713" usec="0"/>
    <to sec="1020575714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_391{
style=filled;
color=gray75;
1218[label="151.51.182.4;d;42pkt 42fpkt", shape=diamond, color=yellow];
2106[label="220.75.146.54;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2823[label="220.75.146.54;9pkt 9fpkt", shape=invtriangle, color=brown];
3231[label="220.75.146.54;8pkt 8fpkt", shape=invhouse, color=bisque];
stat391[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.203.22.148:80, 151.51.182.4:*}[23.8095%]&lt;BR/&gt;{220.75.146.54:80, 151.51.182.4:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2647%)&lt;BR/&gt; 3061: (2.94118%)&lt;BR/&gt; 3060: (2.94118%)&lt;BR/&gt; 3059: (2.94118%)&lt;BR/&gt; 3058: (2.94118%)&gt;];
}
1218--1261[label="0.0540541;2pkt 2fpkt"];
1218--1865[label="0.47619;20pkt 20fpkt"];
1218--1867[label="0.0238095;1pkt 1fpkt"];
1218--1883[label="0.0238095;1pkt 1fpkt"];
1218--2106[label="1;9pkt 9fpkt"];
1218--2823[label="1;9pkt 9fpkt"];
1218--3231[label="1;8pkt 8fpkt"];
2106--2823[label="1;9pkt 9fpkt"];
2106--3231[label="1;8pkt 8fpkt"];
2823--3231[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="151.51.182.4" src_ip="16.203.22.148" src_port="80"/>
      <filter dst_ip="151.51.182.4" src_ip="220.75.146.54" src_port="80"/>
    </slice>
    <from sec="1020576102" usec="0"/>
    <to sec="1020576584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_392{
style=filled;
color=gray75;
2127[label="221.234.76.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2833[label="221.234.76.61;1pkt 1fpkt", shape=invtriangle, color=brown];
3235[label="221.234.76.61;1pkt 1fpkt", shape=invhouse, color=bisque];
stat392[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.234.76.61:4970, 135.246.9.52:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4970: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
2127--2833[label="1;1pkt 1fpkt"];
2127--3235[label="1;1pkt 1fpkt"];
2833--3235[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.246.9.52" dst_port="1214" src_ip="221.234.76.61" src_port="4970"/>
    </slice>
    <from sec="1020574808" usec="0"/>
    <to sec="1020576761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.141.173.61"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020575363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.208.149.65"/>
    </slice>
    <from sec="1020575399" usec="0"/>
    <to sec="1020575401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_395{
style=filled;
color=gray75;
966[label="216.158.65.68;s;8pkt 8fpkt", shape=diamond, color=yellow];
2147[label="216.158.65.68;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2847[label="216.158.65.68;7pkt 7fpkt", shape=invtriangle, color=brown];
3244[label="216.158.65.68;8pkt 8fpkt", shape=invhouse, color=bisque];
stat395[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.158.65.68:80, 145.208.13.76:*}[75%]&lt;BR/&gt;{216.158.65.68:50621, *:53}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.7097%)&lt;BR/&gt; 50621: (11.2903%)&lt;BR/&gt; 53: (11.2903%)&lt;BR/&gt; 2310: (6.45161%)&lt;BR/&gt; 2295: (6.45161%)&gt;];
}
966--2147[label="1;8pkt 8fpkt"];
966--2847[label="1;7pkt 7fpkt"];
966--3244[label="1;8pkt 8fpkt"];
2147--2847[label="1;7pkt 7fpkt"];
2147--3244[label="1;8pkt 8fpkt"];
2847--3244[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.13.76" src_ip="216.158.65.68" src_port="80"/>
      <filter dst_port="53" src_ip="216.158.65.68" src_port="50621"/>
    </slice>
    <from sec="1020575807" usec="0"/>
    <to sec="1020575909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_396{
style=filled;
color=gray75;
2149[label="145.208.149.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2848[label="145.208.149.68;1pkt 1fpkt", shape=invtriangle, color=brown];
3245[label="145.208.149.68;1pkt 1fpkt", shape=invhouse, color=bisque];
stat396[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.149.68:80, 70.199.149.191:1531}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1531: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2149--2848[label="1;1pkt 1fpkt"];
2149--3245[label="1;1pkt 1fpkt"];
2848--3245[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="70.199.149.191" dst_port="1531" src_ip="145.208.149.68" src_port="80"/>
    </slice>
    <from sec="1020576246" usec="0"/>
    <to sec="1020576276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_397{
style=filled;
color=gray75;
2151[label="161.40.65.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2850[label="161.40.65.69;1pkt 1fpkt", shape=invtriangle, color=brown];
stat397[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.40.65.69:80, 18.161.240.156:2630}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2630: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2151--2850[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="18.161.240.156" dst_port="2630" src_ip="161.40.65.69" src_port="80"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.228.37.73"/>
    </slice>
    <from sec="1020574809" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_399{
style=filled;
color=gray75;
1016[label="151.51.215.80;s;493pkt 493fpkt", shape=diamond, color=yellow];
2182[label="151.51.215.80;511pkt 511fpkt", shape=pentagon, color=darkviolet];
2863[label="151.51.215.80;510pkt 510fpkt", shape=invtriangle, color=brown];
3251[label="151.51.215.80;510pkt 510fpkt", shape=invhouse, color=bisque];
stat399[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.51.215.80:53, *:*}[99.8043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (59.8073%)&lt;BR/&gt; 1024: (1.87747%)&lt;BR/&gt; 1025: (0.592885%)&lt;BR/&gt; 32768: (0.395257%)&lt;BR/&gt; 1049: (0.395257%)&gt;];
}
1016--1849[label="0.010142;5pkt 5fpkt"];
1016--1852[label="0.040568;20pkt 20fpkt"];
1016--1854[label="0.0141988;7pkt 7fpkt"];
1016--1858[label="0.0385396;19pkt 19fpkt"];
1016--1864[label="0.0486815;24pkt 24fpkt"];
1016--1866[label="0.0446247;22pkt 22fpkt"];
1016--1868[label="0.00811359;4pkt 4fpkt"];
1016--1870[label="0.0040568;2pkt 2fpkt"];
1016--1877[label="0.010142;5pkt 5fpkt"];
1016--1878[label="0.0141988;7pkt 7fpkt"];
1016--1880[label="0.0121704;6pkt 6fpkt"];
1016--1884[label="0.00811359;4pkt 4fpkt"];
1016--1886[label="0.0040568;2pkt 2fpkt"];
1016--1893[label="0.010142;5pkt 5fpkt"];
1016--1894[label="0.00811359;4pkt 4fpkt"];
1016--2182[label="1;493pkt 493fpkt"];
1016--2863[label="1;493pkt 493fpkt"];
1016--3251[label="1;493pkt 493fpkt"];
2182--2863[label="1;510pkt 510fpkt"];
2182--3251[label="1;510pkt 510fpkt"];
2863--3251[label="1;510pkt 510fpkt"];
</description>
    <slice>
      <filter src_ip="151.51.215.80" src_port="53"/>
    </slice>
    <from sec="1020574804" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_400{
style=filled;
color=gray75;
2188[label="151.38.239.81;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2866[label="151.38.239.81;8pkt 8fpkt", shape=invtriangle, color=brown];
3253[label="151.38.239.81;8pkt 8fpkt", shape=invhouse, color=bisque];
stat400[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.38.239.81:*, 99.41.96.180:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1220: (6.25%)&lt;BR/&gt; 1219: (6.25%)&lt;BR/&gt; 1218: (6.25%)&lt;BR/&gt; 1217: (6.25%)&gt;];
}
2188--2866[label="1;8pkt 8fpkt"];
2188--3253[label="1;8pkt 8fpkt"];
2866--3253[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="99.41.96.180" dst_port="80" src_ip="151.38.239.81"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="135.246.144.82"/>
    </slice>
    <from sec="1020575721" usec="0"/>
    <to sec="1020576761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_403{
style=filled;
color=gray75;
1244[label="16.203.10.25;d;77pkt 77fpkt", shape=diamond, color=yellow];
2206[label="145.208.157.87;32pkt 32fpkt", shape=pentagon, color=darkviolet];
2874[label="145.208.157.87;32pkt 32fpkt", shape=invtriangle, color=brown];
3257[label="145.208.157.87;32pkt 32fpkt", shape=invhouse, color=bisque];
stat403[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.157.87:*, 16.203.10.25:80}[42.3077%]&lt;BR/&gt;{135.246.235.131:*, 16.203.10.25:80}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1865: (1.44509%)&lt;BR/&gt; 1843: (1.44509%)&lt;BR/&gt; 2077: (1.15607%)&lt;BR/&gt; 2074: (1.15607%)&gt;];
}
1244--1387[label="0.0454545;2pkt 2fpkt"];
1244--1846[label="0.038961;3pkt 3fpkt"];
1244--1855[label="0.012987;1pkt 1fpkt"];
1244--1856[label="0.012987;1pkt 1fpkt"];
1244--1860[label="0.012987;1pkt 1fpkt"];
1244--1869[label="0.0649351;5pkt 5fpkt"];
1244--1874[label="0.038961;3pkt 3fpkt"];
1244--1879[label="0.012987;1pkt 1fpkt"];
1244--1881[label="0.012987;1pkt 1fpkt"];
1244--1882[label="0.012987;1pkt 1fpkt"];
1244--1885[label="0.0649351;5pkt 5fpkt"];
1244--1890[label="0.038961;3pkt 3fpkt"];
1244--1895[label="0.0649351;5pkt 5fpkt"];
1244--2206[label="0.96875;31pkt 31fpkt"];
1244--2874[label="0.96875;31pkt 31fpkt"];
1244--3257[label="0.96875;31pkt 31fpkt"];
2206--2874[label="1;32pkt 32fpkt"];
2206--3257[label="1;32pkt 32fpkt"];
2874--3257[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="16.203.10.25" dst_port="80" src_ip="145.208.157.87"/>
      <filter dst_ip="16.203.10.25" dst_port="80" src_ip="135.246.235.131"/>
    </slice>
    <from sec="1020574813" usec="0"/>
    <to sec="1020576725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_404{
style=filled;
color=gray75;
2209[label="192.98.204.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2875[label="192.98.204.87;1pkt 1fpkt", shape=invtriangle, color=brown];
stat404[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.98.204.87:4271, 192.3.36.169:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4271: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2209--2875[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.3.36.169" dst_port="80" src_ip="192.98.204.87" src_port="4271"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.97.81.89"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.75.106.92"/>
    </slice>
    <from sec="1020575737" usec="0"/>
    <to sec="1020575783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_407{
style=filled;
color=gray75;
2231[label="197.182.188.96;83pkt 83fpkt", shape=pentagon, color=darkviolet];
2889[label="197.182.188.96;82pkt 82fpkt", shape=invtriangle, color=brown];
stat407[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.182.188.96:80, 192.12.3.119:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1642: (0.606061%)&lt;BR/&gt; 1641: (0.606061%)&lt;BR/&gt; 1640: (0.606061%)&lt;BR/&gt; 1639: (0.606061%)&gt;];
}
2231--2889[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_ip="192.12.3.119" src_ip="197.182.188.96" src_port="80"/>
    </slice>
    <from sec="1020575773" usec="0"/>
    <to sec="1020575829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="116.6.175.97"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_409{
style=filled;
color=gray75;
2237[label="215.56.169.98;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2892[label="215.56.169.98;12pkt 12fpkt", shape=invtriangle, color=brown];
stat409[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.56.169.98:80, 192.12.4.104:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2341: (4%)&lt;BR/&gt; 2340: (4%)&lt;BR/&gt; 2339: (4%)&lt;BR/&gt; 2337: (4%)&gt;];
}
2237--2892[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="192.12.4.104" src_ip="215.56.169.98" src_port="80"/>
    </slice>
    <from sec="1020576630" usec="0"/>
    <to sec="1020576760" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_410{
style=filled;
color=gray75;
2239[label="221.33.151.100;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2894[label="221.33.151.100;1pkt 1fpkt", shape=invtriangle, color=brown];
stat410[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.33.151.100:80, 192.10.18.193:1154}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1154: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2239--2894[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.10.18.193" dst_port="1154" src_ip="221.33.151.100" src_port="80"/>
    </slice>
    <from sec="1020575774" usec="0"/>
    <to sec="1020575800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_411{
style=filled;
color=gray75;
2257[label="213.153.41.105;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2905[label="213.153.41.105;2pkt 2fpkt", shape=invtriangle, color=brown];
3273[label="213.153.41.105;1pkt 1fpkt", shape=invhouse, color=bisque];
stat411[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.153.41.105:1706, 193.243.196.124:80}[50%]&lt;BR/&gt;{213.153.41.105:1710, 193.243.196.124:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1710: (30%)&lt;BR/&gt; 1706: (20%)&gt;];
}
2257--2905[label="1;2pkt 2fpkt"];
2257--3273[label="1;1pkt 1fpkt"];
2905--3273[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.243.196.124" dst_port="80" src_ip="213.153.41.105" src_port="1710"/>
      <filter dst_ip="193.243.196.124" dst_port="80" src_ip="213.153.41.105" src_port="1706"/>
    </slice>
    <from sec="1020576409" usec="0"/>
    <to sec="1020576500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_412{
style=filled;
color=gray75;
2261[label="151.51.203.105;45pkt 45fpkt", shape=pentagon, color=darkviolet];
2907[label="151.51.203.105;46pkt 46fpkt", shape=invtriangle, color=brown];
stat412[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.51.203.105:*, 75.65.168.167:80}[30.4348%]&lt;BR/&gt;{151.51.203.105:*, 197.83.2.212:80}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.5055%)&lt;BR/&gt; 443: (5.49451%)&lt;BR/&gt; 1945: (2.1978%)&lt;BR/&gt; 1944: (2.1978%)&lt;BR/&gt; 1988: (1.0989%)&gt;];
}
2261--2907[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="75.65.168.167" dst_port="80" src_ip="151.51.203.105"/>
      <filter dst_ip="197.83.2.212" dst_port="80" src_ip="151.51.203.105"/>
    </slice>
    <from sec="1020576025" usec="0"/>
    <to sec="1020576761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.203.27.106"/>
    </slice>
    <from sec="1020575217" usec="0"/>
    <to sec="1020575251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_414{
style=filled;
color=gray75;
992[label="151.51.183.106;s;63pkt 63fpkt", shape=diamond, color=yellow];
1664[label="151.51.183.106;s;63pkt 63fpkt", shape=hexagon, color=black];
2267[label="151.51.183.106;69pkt 69fpkt", shape=pentagon, color=darkviolet];
2912[label="151.51.183.106;68pkt 68fpkt", shape=invtriangle, color=brown];
3279[label="151.51.183.106;68pkt 68fpkt", shape=invhouse, color=bisque];
stat414[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.51.183.106:*, 216.161.34.250:80}[30.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4109%)&lt;BR/&gt; 110: (4.83384%)&lt;BR/&gt; 4998: (0.755287%)&lt;BR/&gt; 4997: (0.755287%)&lt;BR/&gt; 4959: (0.755287%)&gt;];
}
992--1664[label="1;63pkt 63fpkt"];
992--2267[label="1;63pkt 63fpkt"];
992--2912[label="0.984127;62pkt 62fpkt"];
992--3279[label="0.984127;62pkt 62fpkt"];
1664--2267[label="1;63pkt 63fpkt"];
1664--2912[label="0.984127;62pkt 62fpkt"];
1664--3279[label="0.984127;62pkt 62fpkt"];
2267--2912[label="1;68pkt 68fpkt"];
2267--3279[label="1;68pkt 68fpkt"];
2912--3279[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="216.161.34.250" dst_port="80" src_ip="151.51.183.106"/>
    </slice>
    <from sec="1020575031" usec="0"/>
    <to sec="1020576652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_415{
style=filled;
color=gray75;
228[label="145.208.12.109;s;116pkt 116fpkt", shape=diamond, color=yellow];
1736[label="145.208.12.109;s;100pkt 100fpkt", shape=hexagon, color=black];
2270[label="145.208.12.109;128pkt 128fpkt", shape=pentagon, color=darkviolet];
2913[label="145.208.12.109;127pkt 127fpkt", shape=invtriangle, color=brown];
3280[label="145.208.12.109;127pkt 127fpkt", shape=invhouse, color=bisque];
stat415[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.12.109:*, *:80}[97.6562%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7458%)&lt;BR/&gt; 4087: (0.41806%)&lt;BR/&gt; 4086: (0.41806%)&lt;BR/&gt; 4085: (0.41806%)&lt;BR/&gt; 4084: (0.41806%)&gt;];
}
228--1736[label="1;100pkt 100fpkt"];
228--1846[label="0.0172414;2pkt 2fpkt"];
228--1869[label="0.0172414;2pkt 2fpkt"];
228--1874[label="0.0172414;2pkt 2fpkt"];
228--1885[label="0.0172414;2pkt 2fpkt"];
228--1890[label="0.0172414;2pkt 2fpkt"];
228--1895[label="0.0172414;2pkt 2fpkt"];
228--2270[label="1;116pkt 116fpkt"];
228--2913[label="0.991379;115pkt 115fpkt"];
228--3280[label="0.991379;115pkt 115fpkt"];
1736--1846[label="0.02;2pkt 2fpkt"];
1736--1869[label="0.02;2pkt 2fpkt"];
1736--1874[label="0.02;2pkt 2fpkt"];
1736--1885[label="0.02;2pkt 2fpkt"];
1736--1890[label="0.02;2pkt 2fpkt"];
1736--1895[label="0.02;2pkt 2fpkt"];
1736--2270[label="1;100pkt 100fpkt"];
1736--2913[label="0.99;99pkt 99fpkt"];
1736--3280[label="0.99;99pkt 99fpkt"];
2270--2913[label="1;127pkt 127fpkt"];
2270--3280[label="1;127pkt 127fpkt"];
2913--3280[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="145.208.12.109"/>
    </slice>
    <from sec="1020574823" usec="0"/>
    <to sec="1020576717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
2273[label="144.75.173.109;48pkt 48fpkt", shape=pentagon, color=darkviolet];
2915[label="144.75.173.109;47pkt 47fpkt", shape=invtriangle, color=brown];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.75.173.109:*, 99.42.224.19:80}[85.4167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 11215: (1.05263%)&lt;BR/&gt; 11214: (1.05263%)&lt;BR/&gt; 11213: (1.05263%)&lt;BR/&gt; 11212: (1.05263%)&gt;];
}
2273--2915[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="99.42.224.19" dst_port="80" src_ip="144.75.173.109"/>
    </slice>
    <from sec="1020576576" usec="0"/>
    <to sec="1020576711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_417{
style=filled;
color=gray75;
2283[label="166.3.84.114;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2921[label="166.3.84.114;2pkt 2fpkt", shape=invtriangle, color=brown];
stat417[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.3.84.114:80, 223.25.21.204:1207}[50%]&lt;BR/&gt;{166.3.84.114:80, 223.25.21.204:1208}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1208: (25%)&lt;BR/&gt; 1207: (25%)&gt;];
}
2283--2921[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="223.25.21.204" dst_port="1208" src_ip="166.3.84.114" src_port="80"/>
      <filter dst_ip="223.25.21.204" dst_port="1207" src_ip="166.3.84.114" src_port="80"/>
    </slice>
    <from sec="1020575509" usec="0"/>
    <to sec="1020575735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_418{
style=filled;
color=gray75;
434[label="193.243.195.115;s;176pkt 176fpkt", shape=diamond, color=yellow];
455[label="213.129.11.195;d;112pkt 112fpkt", shape=diamond, color=yellow];
1302[label="99.37.54.25;d;66pkt 66fpkt", shape=diamond, color=yellow];
1426[label="213.129.11.195;d;112pkt 112fpkt", shape=hexagon, color=black];
2183[label="221.0.47.81;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2286[label="193.243.195.115;381pkt 381fpkt", shape=pentagon, color=darkviolet];
2923[label="193.243.195.115;381pkt 381fpkt", shape=invtriangle, color=brown];
stat418[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.243.195.115:*, *:80}[46.861%]&lt;BR/&gt;{193.243.195.115:80, 213.129.11.195:*}[38.1166%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1680: (0.239617%)&lt;BR/&gt; 1678: (0.239617%)&lt;BR/&gt; 1671: (0.239617%)&lt;BR/&gt; 1652: (0.239617%)&gt;];
}
434--1302[label="0.318182;21pkt 21fpkt"];
434--1859[label="0.0625;11pkt 11fpkt"];
434--1860[label="0.0397727;7pkt 7fpkt"];
434--1869[label="0.0397727;7pkt 7fpkt"];
434--1882[label="0.0397727;7pkt 7fpkt"];
434--1885[label="0.0397727;7pkt 7fpkt"];
434--1895[label="0.0397727;7pkt 7fpkt"];
434--2286[label="1;176pkt 176fpkt"];
434--2923[label="1;176pkt 176fpkt"];
455--1426[label="1;112pkt 112fpkt"];
455--2286[label="1;112pkt 112fpkt"];
455--2923[label="1;112pkt 112fpkt"];
1302--1869[label="0.0454545;3pkt 3fpkt"];
1302--1885[label="0.0454545;3pkt 3fpkt"];
1302--1895[label="0.0454545;3pkt 3fpkt"];
1302--2183[label="0.166667;4pkt 4fpkt"];
1302--2286[label="0.318182;21pkt 21fpkt"];
1302--2923[label="0.318182;21pkt 21fpkt"];
1426--2286[label="1;112pkt 112fpkt"];
1426--2923[label="1;112pkt 112fpkt"];
2286--2923[label="1;381pkt 381fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="193.243.195.115"/>
      <filter dst_ip="213.129.11.195" src_ip="193.243.195.115" src_port="80"/>
    </slice>
    <from sec="1020575034" usec="0"/>
    <to sec="1020576759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.33.27.119"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.218.11.121"/>
    </slice>
    <from sec="1020574803" usec="0"/>
    <to sec="1020576727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.103.29.122"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
2311[label="223.176.116.125;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2934[label="223.176.116.125;5pkt 5fpkt", shape=invtriangle, color=brown];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.176.116.125:80, 135.246.216.9:3141}[20%]&lt;BR/&gt;{223.176.116.125:80, 135.246.216.9:3155}[20%]&lt;BR/&gt;{223.176.116.125:80, 135.246.216.9:3164}[20%]&lt;BR/&gt;{223.176.116.125:80, 135.246.216.9:3165}[20%]&lt;BR/&gt;{223.176.116.125:80, 135.246.216.9:3166}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3166: (10%)&lt;BR/&gt; 3165: (10%)&lt;BR/&gt; 3164: (10%)&lt;BR/&gt; 3155: (10%)&gt;];
}
2311--2934[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="135.246.216.9" dst_port="3166" src_ip="223.176.116.125" src_port="80"/>
      <filter dst_ip="135.246.216.9" dst_port="3165" src_ip="223.176.116.125" src_port="80"/>
      <filter dst_ip="135.246.216.9" dst_port="3164" src_ip="223.176.116.125" src_port="80"/>
      <filter dst_ip="135.246.216.9" dst_port="3155" src_ip="223.176.116.125" src_port="80"/>
      <filter dst_ip="135.246.216.9" dst_port="3141" src_ip="223.176.116.125" src_port="80"/>
    </slice>
    <from sec="1020575621" usec="0"/>
    <to sec="1020575645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
2316[label="18.221.139.126;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2937[label="18.221.139.126;1pkt 1fpkt", shape=invtriangle, color=brown];
3292[label="18.221.139.126;2pkt 2fpkt", shape=invhouse, color=bisque];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.221.139.126:80, 135.246.105.220:4970}[50%]&lt;BR/&gt;{18.221.139.126:80, 135.246.105.220:4971}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4971: (37.5%)&lt;BR/&gt; 4970: (12.5%)&gt;];
}
2316--2937[label="1;1pkt 1fpkt"];
2316--3292[label="1;1pkt 1fpkt"];
2937--3292[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.246.105.220" dst_port="4971" src_ip="18.221.139.126" src_port="80"/>
      <filter dst_ip="135.246.105.220" dst_port="4970" src_ip="18.221.139.126" src_port="80"/>
    </slice>
    <from sec="1020575984" usec="0"/>
    <to sec="1020576010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_424{
style=filled;
color=gray75;
809[label="193.243.199.126;s;59pkt 59fpkt", shape=diamond, color=yellow];
2317[label="193.243.199.126;58pkt 58fpkt", shape=pentagon, color=darkviolet];
2938[label="193.243.199.126;58pkt 58fpkt", shape=invtriangle, color=brown];
3293[label="193.243.199.126;58pkt 58fpkt", shape=invhouse, color=bisque];
stat424[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.243.199.126:*, *:80}[93.2203%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.5665%)&lt;BR/&gt; 1863: (1.71674%)&lt;BR/&gt; 1199: (0.858369%)&lt;BR/&gt; 1193: (0.858369%)&lt;BR/&gt; 1192: (0.858369%)&gt;];
}
809--861[label="0.104167;5pkt 5fpkt"];
809--1846[label="0.0508475;3pkt 3fpkt"];
809--1855[label="0.0847458;5pkt 5fpkt"];
809--1856[label="0.0677966;4pkt 4fpkt"];
809--1860[label="0.237288;14pkt 14fpkt"];
809--1869[label="0.0338983;2pkt 2fpkt"];
809--1874[label="0.0508475;3pkt 3fpkt"];
809--1879[label="0.0847458;5pkt 5fpkt"];
809--1881[label="0.0677966;4pkt 4fpkt"];
809--1882[label="0.237288;14pkt 14fpkt"];
809--1885[label="0.0338983;2pkt 2fpkt"];
809--1890[label="0.0508475;3pkt 3fpkt"];
809--1895[label="0.0338983;2pkt 2fpkt"];
809--2317[label="1;58pkt 58fpkt"];
809--2938[label="1;58pkt 58fpkt"];
809--3293[label="1;58pkt 58fpkt"];
2317--2938[label="1;58pkt 58fpkt"];
2317--3293[label="1;58pkt 58fpkt"];
2938--3293[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="193.243.199.126"/>
    </slice>
    <from sec="1020574813" usec="0"/>
    <to sec="1020576332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_425{
style=filled;
color=gray75;
2328[label="193.74.158.129;171pkt 171fpkt", shape=pentagon, color=darkviolet];
2944[label="193.74.158.129;171pkt 171fpkt", shape=invtriangle, color=brown];
stat425[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.74.158.129:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2328--2944[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.74.158.129" src_port="1032"/>
    </slice>
    <from sec="1020575816" usec="0"/>
    <to sec="1020576041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_426{
style=filled;
color=gray75;
2333[label="16.162.58.130;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2948[label="16.162.58.130;1pkt 1fpkt", shape=invtriangle, color=brown];
stat426[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.162.58.130:10874, 145.208.136.92:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10874: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2333--2948[label="1;1pkt 1fpkt"];
2333--3298[label="1;1pkt 1fpkt"];
2948--3298[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.208.136.92" dst_port="80" src_ip="16.162.58.130" src_port="10874"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="168.140.231.130"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.35.45.132"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020574906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
242[label="135.246.218.28;d;7pkt 7fpkt", shape=diamond, color=yellow];
243[label="213.35.45.133;s;2pkt 2fpkt", shape=diamond, color=yellow];
258[label="213.35.45.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
572[label="192.10.205.20;d;2pkt 2fpkt", shape=diamond, color=yellow];
1475[label="192.10.205.20;d;2pkt 2fpkt", shape=hexagon, color=black];
1514[label="135.246.218.28;d;7pkt 7fpkt", shape=hexagon, color=black];
1700[label="213.35.45.134;s;1pkt 1fpkt", shape=hexagon, color=black];
2345[label="213.35.45.133;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2590[label="213.35.45.210;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2957[label="213.35.45.133;1pkt 1fpkt", shape=invtriangle, color=brown];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.35.45.210:7431, *:*}[55.5556%]&lt;BR/&gt;{*:5001, 135.246.218.28:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (27.1429%)&lt;BR/&gt; 7431: (17.1429%)&lt;BR/&gt; 1048: (7.14286%)&lt;BR/&gt; 1494: (5.71429%)&lt;BR/&gt; 1268: (5.71429%)&gt;];
}
242--243[label="0.5;1pkt 1fpkt"];
242--258[label="1;1pkt 1fpkt"];
242--1514[label="1;7pkt 7fpkt"];
242--1700[label="1;1pkt 1fpkt"];
242--2345[label="0.5;1pkt 1fpkt"];
242--2590[label="0.142857;1pkt 1fpkt"];
242--2957[label="1;1pkt 1fpkt"];
243--572[label="0.5;1pkt 1fpkt"];
243--1475[label="0.5;1pkt 1fpkt"];
243--1514[label="0.5;1pkt 1fpkt"];
243--2345[label="1;2pkt 2fpkt"];
243--2957[label="1;1pkt 1fpkt"];
258--1514[label="1;1pkt 1fpkt"];
258--1700[label="1;1pkt 1fpkt"];
572--1475[label="1;2pkt 2fpkt"];
572--2345[label="0.5;1pkt 1fpkt"];
1475--2345[label="0.5;1pkt 1fpkt"];
1514--1700[label="1;1pkt 1fpkt"];
1514--2345[label="0.5;1pkt 1fpkt"];
1514--2590[label="0.142857;1pkt 1fpkt"];
1514--2957[label="1;1pkt 1fpkt"];
2345--2957[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="213.35.45.210" src_port="7431"/>
      <filter dst_ip="135.246.218.28" src_port="5001"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.701587,1.81418,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_430{
style=filled;
color=gray75;
677[label="141.26.133.72;d;17pkt 17fpkt", shape=diamond, color=yellow];
678[label="135.31.101.116;s;9pkt 9fpkt", shape=diamond, color=yellow];
1727[label="135.31.101.116;s;9pkt 9fpkt", shape=hexagon, color=black];
2288[label="135.31.101.116;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2359[label="141.165.138.136;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2924[label="135.31.101.116;8pkt 8fpkt", shape=invtriangle, color=brown];
2963[label="141.165.138.136;7pkt 7fpkt", shape=invtriangle, color=brown];
stat430[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.31.101.116:1214, 141.26.133.72:*}[50%]&lt;BR/&gt;{141.165.138.136:1214, 141.26.133.72:*}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 2896: (3.78788%)&lt;BR/&gt; 2893: (3.78788%)&lt;BR/&gt; 2891: (3.78788%)&lt;BR/&gt; 2890: (3.78788%)&gt;];
}
677--678[label="1;9pkt 9fpkt"];
677--1500[label="0.5;1pkt 1fpkt"];
677--1727[label="1;9pkt 9fpkt"];
677--2288[label="1;8pkt 8fpkt"];
677--2359[label="0.875;7pkt 7fpkt"];
677--2924[label="1;8pkt 8fpkt"];
677--2963[label="0.857143;6pkt 6fpkt"];
678--1727[label="1;9pkt 9fpkt"];
678--2288[label="1;8pkt 8fpkt"];
678--2924[label="1;8pkt 8fpkt"];
1727--2288[label="1;8pkt 8fpkt"];
1727--2924[label="1;8pkt 8fpkt"];
2288--2924[label="1;8pkt 8fpkt"];
2359--2963[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="141.26.133.72" src_ip="135.31.101.116" src_port="1214"/>
      <filter dst_ip="141.26.133.72" src_ip="141.165.138.136" src_port="1214"/>
    </slice>
    <from sec="1020574803" usec="0"/>
    <to sec="1020576719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_431{
style=filled;
color=gray75;
1075[label="192.3.80.138;s;131pkt 131fpkt", shape=diamond, color=yellow];
2366[label="192.3.80.138;135pkt 135fpkt", shape=pentagon, color=darkviolet];
2968[label="192.3.80.138;136pkt 136fpkt", shape=invtriangle, color=brown];
3311[label="192.3.80.138;136pkt 136fpkt", shape=invhouse, color=bisque];
stat431[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.3.80.138:*, 16.203.18.34:80}[28.6765%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.0967%)&lt;BR/&gt; 1863: (3.5316%)&lt;BR/&gt; 32736: (0.371747%)&lt;BR/&gt; 32723: (0.371747%)&lt;BR/&gt; 32682: (0.371747%)&gt;];
}
1075--1869[label="0.0152672;2pkt 2fpkt"];
1075--1885[label="0.0152672;2pkt 2fpkt"];
1075--1895[label="0.0152672;2pkt 2fpkt"];
1075--2366[label="1;131pkt 131fpkt"];
1075--2968[label="1;131pkt 131fpkt"];
1075--3311[label="1;131pkt 131fpkt"];
2366--2968[label="1;135pkt 135fpkt"];
2366--3311[label="1;135pkt 135fpkt"];
2968--3311[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_ip="16.203.18.34" dst_port="80" src_ip="192.3.80.138"/>
    </slice>
    <from sec="1020574881" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_432{
style=filled;
color=gray75;
2368[label="18.194.151.138;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2970[label="18.194.151.138;1pkt 1fpkt", shape=invtriangle, color=brown];
stat432[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.194.151.138:3083, 151.41.58.160:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3083: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
2368--2970[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.41.58.160" dst_port="1214" src_ip="18.194.151.138" src_port="3083"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.2.151.140"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_434{
style=filled;
color=gray75;
2379[label="220.138.64.141;53pkt 53fpkt", shape=pentagon, color=darkviolet];
2977[label="220.138.64.141;53pkt 53fpkt", shape=invtriangle, color=brown];
stat434[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.138.64.141:*, 193.243.200.135:80}[98.1132%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0566%)&lt;BR/&gt; 137: (1.88679%)&lt;BR/&gt; 56510: (0.943396%)&lt;BR/&gt; 56369: (0.943396%)&lt;BR/&gt; 56344: (0.943396%)&gt;];
}
2379--2977[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="193.243.200.135" dst_port="80" src_ip="220.138.64.141"/>
    </slice>
    <from sec="1020576339" usec="0"/>
    <to sec="1020576668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_435{
style=filled;
color=gray75;
2380[label="193.243.194.141;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2978[label="193.243.194.141;21pkt 21fpkt", shape=invtriangle, color=brown];
3315[label="193.243.194.141;22pkt 22fpkt", shape=invhouse, color=bisque];
stat435[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.243.194.141:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2380--2978[label="1;21pkt 21fpkt"];
2380--3315[label="1;22pkt 22fpkt"];
2978--3315[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="193.243.194.141"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.215.67.146"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.234.210.147"/>
    </slice>
    <from sec="1020575878" usec="0"/>
    <to sec="1020576761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
2399[label="16.162.58.149;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2991[label="16.162.58.149;1pkt 1fpkt", shape=invtriangle, color=brown];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.162.58.149:27318, 151.51.37.172:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27318: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2399--2991[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.51.37.172" dst_port="80" src_ip="16.162.58.149" src_port="27318"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_439{
style=filled;
color=gray75;
2416[label="216.99.144.155;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3002[label="216.99.144.155;3pkt 3fpkt", shape=invtriangle, color=brown];
stat439[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.99.144.155:80, 192.3.104.11:3841}[33.3333%]&lt;BR/&gt;{216.99.144.155:80, 192.3.104.11:3848}[33.3333%]&lt;BR/&gt;{216.99.144.155:80, 192.3.104.11:3855}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3855: (16.6667%)&lt;BR/&gt; 3848: (16.6667%)&lt;BR/&gt; 3841: (16.6667%)&gt;];
}
2416--3002[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.3.104.11" dst_port="3855" src_ip="216.99.144.155" src_port="80"/>
      <filter dst_ip="192.3.104.11" dst_port="3848" src_ip="216.99.144.155" src_port="80"/>
      <filter dst_ip="192.3.104.11" dst_port="3841" src_ip="216.99.144.155" src_port="80"/>
    </slice>
    <from sec="1020576642" usec="0"/>
    <to sec="1020576756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.178.89.163"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.146.32.165"/>
    </slice>
    <from sec="1020576530" usec="0"/>
    <to sec="1020576536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.96.183.165"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_443{
style=filled;
color=gray75;
2458[label="145.208.141.166;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3024[label="145.208.141.166;1pkt 1fpkt", shape=invtriangle, color=brown];
stat443[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.141.166:8197, 222.154.176.140:8194}[50%]&lt;BR/&gt;{145.208.141.166:8277, 198.3.193.156:8292}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (33.3333%)&lt;BR/&gt; 8277: (33.3333%)&lt;BR/&gt; 8197: (16.6667%)&lt;BR/&gt; 8194: (16.6667%)&gt;];
}
2458--3024[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.3.193.156" dst_port="8292" src_ip="145.208.141.166" src_port="8277"/>
      <filter dst_ip="222.154.176.140" dst_port="8194" src_ip="145.208.141.166" src_port="8197"/>
    </slice>
    <from sec="1020574816" usec="0"/>
    <to sec="1020576761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
2463[label="151.148.205.168;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3026[label="151.148.205.168;26pkt 26fpkt", shape=invtriangle, color=brown];
3340[label="151.148.205.168;25pkt 25fpkt", shape=invhouse, color=bisque];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.148.205.168:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2463--3026[label="1;26pkt 26fpkt"];
2463--3340[label="1;25pkt 25fpkt"];
3026--3340[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="151.148.205.168"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_445{
style=filled;
color=gray75;
2468[label="220.4.65.169;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3029[label="220.4.65.169;2pkt 2fpkt", shape=invtriangle, color=brown];
3342[label="220.4.65.169;1pkt 1fpkt", shape=invhouse, color=bisque];
stat445[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.4.65.169:80, 151.51.203.8:4557}[50%]&lt;BR/&gt;{220.4.65.169:80, 151.51.203.8:4558}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4558: (30%)&lt;BR/&gt; 4557: (20%)&gt;];
}
2468--3029[label="1;2pkt 2fpkt"];
2468--3342[label="1;1pkt 1fpkt"];
3029--3342[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="151.51.203.8" dst_port="4558" src_ip="220.4.65.169" src_port="80"/>
      <filter dst_ip="151.51.203.8" dst_port="4557" src_ip="220.4.65.169" src_port="80"/>
    </slice>
    <from sec="1020576724" usec="0"/>
    <to sec="1020576736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_446{
style=filled;
color=gray75;
2476[label="16.203.57.171;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3034[label="16.203.57.171;19pkt 19fpkt", shape=invtriangle, color=brown];
stat446[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.203.57.171:80, 135.246.5.208:*}[89.4737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3504: (2.63158%)&lt;BR/&gt; 3503: (2.63158%)&lt;BR/&gt; 1236: (2.63158%)&lt;BR/&gt; 1233: (2.63158%)&gt;];
}
2476--3034[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="135.246.5.208" src_ip="16.203.57.171" src_port="80"/>
    </slice>
    <from sec="1020575192" usec="0"/>
    <to sec="1020575907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
531[label="151.51.37.172;s;198pkt 198fpkt", shape=diamond, color=yellow];
882[label="162.201.100.231;d;13pkt 13fpkt", shape=diamond, color=yellow];
2478[label="151.51.37.172;223pkt 223fpkt", shape=pentagon, color=darkviolet];
3035[label="151.51.37.172;223pkt 223fpkt", shape=invtriangle, color=brown];
3344[label="151.51.37.172;223pkt 223fpkt", shape=invhouse, color=bisque];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.51.37.172:80, *:*}[73.0942%]&lt;BR/&gt;{151.51.37.172:*, 204.241.55.19:80}[24.2152%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3182%)&lt;BR/&gt; 0: (1.36364%)&lt;BR/&gt; 1043: (0.511364%)&lt;BR/&gt; 1032: (0.511364%)&lt;BR/&gt; 1030: (0.511364%)&gt;];
}
531--882[label="1;13pkt 13fpkt"];
531--1845[label="0.0353535;7pkt 7fpkt"];
531--1853[label="0.030303;6pkt 6fpkt"];
531--1859[label="0.030303;6pkt 6fpkt"];
531--1862[label="0.0252525;5pkt 5fpkt"];
531--1867[label="0.010101;2pkt 2fpkt"];
531--1873[label="0.0353535;7pkt 7fpkt"];
531--1883[label="0.010101;2pkt 2fpkt"];
531--1889[label="0.0353535;7pkt 7fpkt"];
531--2478[label="1;198pkt 198fpkt"];
531--3035[label="1;198pkt 198fpkt"];
531--3344[label="1;198pkt 198fpkt"];
882--1859[label="0.153846;2pkt 2fpkt"];
882--2478[label="1;13pkt 13fpkt"];
882--3035[label="1;13pkt 13fpkt"];
882--3344[label="1;13pkt 13fpkt"];
2478--3035[label="1;223pkt 223fpkt"];
2478--3344[label="1;223pkt 223fpkt"];
3035--3344[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter src_ip="151.51.37.172" src_port="80"/>
      <filter dst_ip="204.241.55.19" dst_port="80" src_ip="151.51.37.172"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_448{
style=filled;
color=gray75;
2507[label="192.106.186.180;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3051[label="192.106.186.180;3pkt 3fpkt", shape=invtriangle, color=brown];
stat448[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.106.186.180:1244, 192.12.6.237:80}[25%]&lt;BR/&gt;{192.106.186.180:1245, 192.12.6.237:80}[25%]&lt;BR/&gt;{192.106.186.180:1246, 192.12.6.237:80}[25%]&lt;BR/&gt;{192.106.186.180:1247, 192.12.6.237:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1247: (14.2857%)&lt;BR/&gt; 1246: (14.2857%)&lt;BR/&gt; 1245: (14.2857%)&lt;BR/&gt; 1244: (7.14286%)&gt;];
}
2507--3051[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.12.6.237" dst_port="80" src_ip="192.106.186.180" src_port="1247"/>
      <filter dst_ip="192.12.6.237" dst_port="80" src_ip="192.106.186.180" src_port="1246"/>
      <filter dst_ip="192.12.6.237" dst_port="80" src_ip="192.106.186.180" src_port="1245"/>
      <filter dst_ip="192.12.6.237" dst_port="80" src_ip="192.106.186.180" src_port="1244"/>
    </slice>
    <from sec="1020575159" usec="0"/>
    <to sec="1020575185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.208.99.181"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.800872,1.89144,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_450{
style=filled;
color=gray75;
192[label="8.85.127.184;s;1pkt 1fpkt", shape=diamond, color=yellow];
3058[label="8.85.127.184;1pkt 1fpkt", shape=invtriangle, color=brown];
3357[label="8.85.127.184;1pkt 1fpkt", shape=invhouse, color=bisque];
stat450[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.85.127.184:1031, 135.246.150.67:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 1031: (50%)&gt;];
}
192--235[label="1;1pkt 1fpkt"];
192--1513[label="1;1pkt 1fpkt"];
192--3058[label="1;1pkt 1fpkt"];
192--3357[label="1;1pkt 1fpkt"];
3058--3357[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.246.150.67" dst_port="1214" src_ip="8.85.127.184" src_port="1031"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_451{
style=filled;
color=gray75;
2518[label="135.246.216.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3059[label="135.246.216.184;2pkt 2fpkt", shape=invtriangle, color=brown];
stat451[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.246.216.184:3037, 96.162.169.70:7070}[50%]&lt;BR/&gt;{135.246.216.184:6970, 96.162.169.70:6770}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6970: (33.3333%)&lt;BR/&gt; 6770: (33.3333%)&lt;BR/&gt; 7070: (16.6667%)&lt;BR/&gt; 3037: (16.6667%)&gt;];
}
2518--3059[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="96.162.169.70" dst_port="6770" src_ip="135.246.216.184" src_port="6970"/>
      <filter dst_ip="96.162.169.70" dst_port="7070" src_ip="135.246.216.184" src_port="3037"/>
    </slice>
    <from sec="1020575670" usec="0"/>
    <to sec="1020576218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
2550[label="222.30.159.193;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3073[label="222.30.159.193;3pkt 3fpkt", shape=invtriangle, color=brown];
3366[label="222.30.159.193;3pkt 3fpkt", shape=invhouse, color=bisque];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.30.159.193:0, 151.210.46.8:0}[33.3333%]&lt;BR/&gt;{222.30.159.193:0, 192.3.75.14:0}[33.3333%]&lt;BR/&gt;{222.30.159.193:0, 193.243.197.15:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2550--3073[label="1;3pkt 3fpkt"];
2550--3366[label="1;3pkt 3fpkt"];
3073--3366[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.243.197.15" src_ip="222.30.159.193"/>
      <filter dst_ip="192.3.75.14" src_ip="222.30.159.193"/>
      <filter dst_ip="151.210.46.8" src_ip="222.30.159.193"/>
    </slice>
    <from sec="1020574810" usec="0"/>
    <to sec="1020576746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_453{
style=filled;
color=gray75;
878[label="193.243.192.193;s;62pkt 62fpkt", shape=diamond, color=yellow];
2551[label="193.243.192.193;62pkt 62fpkt", shape=pentagon, color=darkviolet];
3074[label="193.243.192.193;62pkt 62fpkt", shape=invtriangle, color=brown];
3367[label="193.243.192.193;62pkt 62fpkt", shape=invhouse, color=bisque];
stat453[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.243.192.193:*, 197.197.16.82:80}[88.7097%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1862: (1.6129%)&lt;BR/&gt; 1923: (0.806452%)&lt;BR/&gt; 1922: (0.806452%)&lt;BR/&gt; 1921: (0.806452%)&gt;];
}
878--1860[label="0.887097;55pkt 55fpkt"];
878--1882[label="0.887097;55pkt 55fpkt"];
878--2551[label="1;62pkt 62fpkt"];
878--3074[label="1;62pkt 62fpkt"];
878--3367[label="1;62pkt 62fpkt"];
2551--3074[label="1;62pkt 62fpkt"];
2551--3367[label="1;62pkt 62fpkt"];
3074--3367[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="197.197.16.82" dst_port="80" src_ip="193.243.192.193"/>
    </slice>
    <from sec="1020575598" usec="0"/>
    <to sec="1020575693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="160.10.32.195"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_455{
style=filled;
color=gray75;
2560[label="8.162.191.196;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3079[label="8.162.191.196;1pkt 1fpkt", shape=invtriangle, color=brown];
3370[label="8.162.191.196;1pkt 1fpkt", shape=invhouse, color=bisque];
stat455[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.162.191.196:2136, 204.176.205.90:6667}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 2136: (50%)&gt;];
}
2560--3079[label="1;1pkt 1fpkt"];
2560--3370[label="1;1pkt 1fpkt"];
3079--3370[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.176.205.90" dst_port="6667" src_ip="8.162.191.196" src_port="2136"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.91.32.199"/>
    </slice>
    <from sec="1020574846" usec="0"/>
    <to sec="1020576749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_457{
style=filled;
color=gray75;
2574[label="99.98.149.202;30pkt 30fpkt", shape=pentagon, color=darkviolet];
3086[label="99.98.149.202;29pkt 29fpkt", shape=invtriangle, color=brown];
3374[label="99.98.149.202;29pkt 29fpkt", shape=invhouse, color=bisque];
stat457[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.98.149.202:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2574--3086[label="1;29pkt 29fpkt"];
2574--3374[label="1;29pkt 29fpkt"];
3086--3374[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter src_ip="99.98.149.202"/>
    </slice>
    <from sec="1020575151" usec="0"/>
    <to sec="1020576366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
1206[label="193.190.59.205;s;3pkt 3fpkt", shape=diamond, color=yellow];
1729[label="193.190.59.205;s;3pkt 3fpkt", shape=hexagon, color=black];
2580[label="193.190.59.205;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3090[label="193.190.59.205;3pkt 3fpkt", shape=invtriangle, color=brown];
3378[label="193.190.59.205;2pkt 2fpkt", shape=invhouse, color=bisque];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.190.59.205:0, 193.243.196.104:0}[33.3333%]&lt;BR/&gt;{193.190.59.205:0, 193.243.194.196:0}[33.3333%]&lt;BR/&gt;{193.190.59.205:0, 193.243.196.199:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1206--1729[label="1;3pkt 3fpkt"];
1206--2580[label="1;2pkt 2fpkt"];
1206--3090[label="1;3pkt 3fpkt"];
1206--3378[label="1;2pkt 2fpkt"];
1729--2580[label="1;2pkt 2fpkt"];
1729--3090[label="1;3pkt 3fpkt"];
1729--3378[label="1;2pkt 2fpkt"];
2580--3090[label="1;2pkt 2fpkt"];
2580--3378[label="1;2pkt 2fpkt"];
3090--3378[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.243.196.199" src_ip="193.190.59.205"/>
      <filter dst_ip="193.243.194.196" src_ip="193.190.59.205"/>
      <filter dst_ip="193.243.196.104" src_ip="193.190.59.205"/>
    </slice>
    <from sec="1020574808" usec="0"/>
    <to sec="1020576759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74378,1.8368,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
1155[label="138.214.249.205;s;166pkt 166fpkt", shape=diamond, color=yellow];
2581[label="138.214.249.205;166pkt 166fpkt", shape=pentagon, color=darkviolet];
3091[label="138.214.249.205;165pkt 165fpkt", shape=invtriangle, color=brown];
3379[label="138.214.249.205;166pkt 166fpkt", shape=invhouse, color=bisque];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.214.249.205:*, 221.245.217.29:8080}[49.3976%]&lt;BR/&gt;{138.214.249.205:*, 221.204.224.159:80}[49.3976%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (24.736%)&lt;BR/&gt; 80: (24.6606%)&lt;BR/&gt; 0: (1.20664%)&lt;BR/&gt; 4331: (0.301659%)&lt;BR/&gt; 4327: (0.301659%)&gt;];
}
1155--1846[label="0.0180723;3pkt 3fpkt"];
1155--1855[label="0.0120482;2pkt 2fpkt"];
1155--1856[label="0.0120482;2pkt 2fpkt"];
1155--1860[label="0.0180723;3pkt 3fpkt"];
1155--1869[label="0.0180723;3pkt 3fpkt"];
1155--1874[label="0.0180723;3pkt 3fpkt"];
1155--1879[label="0.0120482;2pkt 2fpkt"];
1155--1881[label="0.0120482;2pkt 2fpkt"];
1155--1882[label="0.0180723;3pkt 3fpkt"];
1155--1885[label="0.0180723;3pkt 3fpkt"];
1155--1890[label="0.0180723;3pkt 3fpkt"];
1155--1895[label="0.0180723;3pkt 3fpkt"];
1155--2581[label="1;166pkt 166fpkt"];
1155--3091[label="1;165pkt 165fpkt"];
1155--3379[label="1;166pkt 166fpkt"];
2581--3091[label="1;165pkt 165fpkt"];
2581--3379[label="1;166pkt 166fpkt"];
3091--3379[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_ip="221.204.224.159" dst_port="80" src_ip="138.214.249.205"/>
      <filter dst_ip="221.245.217.29" dst_port="8080" src_ip="138.214.249.205"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_460{
style=filled;
color=gray75;
2605[label="217.236.236.214;52pkt 52fpkt", shape=pentagon, color=darkviolet];
3102[label="217.236.236.214;52pkt 52fpkt", shape=invtriangle, color=brown];
stat460[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.236.236.214:80, 151.51.183.1:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60618: (0.961538%)&lt;BR/&gt; 60617: (0.961538%)&lt;BR/&gt; 60613: (0.961538%)&lt;BR/&gt; 60612: (0.961538%)&gt;];
}
2605--3102[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="151.51.183.1" src_ip="217.236.236.214" src_port="80"/>
    </slice>
    <from sec="1020576682" usec="0"/>
    <to sec="1020576755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_461{
style=filled;
color=gray75;
2606[label="206.228.14.215;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3103[label="206.228.14.215;9pkt 9fpkt", shape=invtriangle, color=brown];
stat461[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.228.14.215:*, 166.3.199.139:25}[30%]&lt;BR/&gt;{206.228.14.215:*, 145.208.198.249:25}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4759: (5.26316%)&lt;BR/&gt; 4751: (5.26316%)&lt;BR/&gt; 4616: (5.26316%)&lt;BR/&gt; 4472: (5.26316%)&gt;];
}
2606--3103[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="166.3.199.139" dst_port="25" src_ip="206.228.14.215"/>
      <filter dst_ip="145.208.198.249" dst_port="25" src_ip="206.228.14.215"/>
    </slice>
    <from sec="1020575237" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="137.68.30.215"/>
    </slice>
    <from sec="1020575070" usec="0"/>
    <to sec="1020575105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
2617[label="151.32.90.218;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3111[label="151.32.90.218;33pkt 33fpkt", shape=invtriangle, color=brown];
3389[label="151.32.90.218;32pkt 32fpkt", shape=invhouse, color=bisque];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.32.90.218:4662, *:*}[51.5152%]&lt;BR/&gt;{151.32.90.218:*, *:4662}[39.3939%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (45.4082%)&lt;BR/&gt; 4665: (4.59184%)&lt;BR/&gt; 3100: (4.59184%)&lt;BR/&gt; 61560: (1.53061%)&lt;BR/&gt; 61545: (1.53061%)&gt;];
}
2617--3111[label="1;33pkt 33fpkt"];
2617--3389[label="1;32pkt 32fpkt"];
3111--3389[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="151.32.90.218" src_port="4662"/>
      <filter dst_port="4662" src_ip="151.32.90.218"/>
    </slice>
    <from sec="1020574804" usec="0"/>
    <to sec="1020576754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.846152,1.79934,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
568[label="135.246.216.9;s;86pkt 86fpkt", shape=diamond, color=yellow];
589[label="161.40.75.219;s;382pkt 382fpkt", shape=diamond, color=yellow];
666[label="161.40.75.200;s;253pkt 253fpkt", shape=diamond, color=yellow];
669[label="161.40.75.218;s;349pkt 349fpkt", shape=diamond, color=yellow];
679[label="16.96.7.168;d;205pkt 205fpkt", shape=diamond, color=yellow];
902[label="16.40.33.198;d;172pkt 172fpkt", shape=diamond, color=yellow];
972[label="16.45.9.53;d;313pkt 313fpkt", shape=diamond, color=yellow];
976[label="146.168.78.61;d;109pkt 109fpkt", shape=diamond, color=yellow];
1028[label="166.3.62.212;s;66pkt 66fpkt", shape=diamond, color=yellow];
1055[label="192.164.204.144;d;96pkt 96fpkt", shape=diamond, color=yellow];
1255[label="198.81.175.45;d;95pkt 95fpkt", shape=diamond, color=yellow];
1313[label="145.208.120.152;s;31pkt 31fpkt", shape=diamond, color=yellow];
1484[label="161.40.75.219;s;382pkt 382fpkt", shape=hexagon, color=black];
1489[label="161.40.75.218;s;223pkt 223fpkt", shape=hexagon, color=black];
1575[label="161.40.75.200;s;193pkt 193fpkt", shape=hexagon, color=black];
1644[label="16.96.7.168;d;155pkt 155fpkt", shape=hexagon, color=black];
1701[label="192.10.214.91;s;596pkt 596fpkt", shape=hexagon, color=black];
1725[label="146.168.78.61;d;109pkt 109fpkt", shape=hexagon, color=black];
1936[label="166.3.62.11;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2410[label="145.208.120.152;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2568[label="161.40.75.200;256pkt 256fpkt", shape=pentagon, color=darkviolet];
2596[label="166.3.62.212;65pkt 65fpkt", shape=pentagon, color=darkviolet];
2619[label="161.40.75.219;389pkt 389fpkt", shape=pentagon, color=darkviolet];
2733[label="166.3.62.11;34pkt 34fpkt", shape=invtriangle, color=brown];
2998[label="145.208.120.152;30pkt 30fpkt", shape=invtriangle, color=brown];
3113[label="161.40.75.219;388pkt 388fpkt", shape=invtriangle, color=brown];
3331[label="145.208.120.152;31pkt 31fpkt", shape=invhouse, color=bisque];
3390[label="161.40.75.219;389pkt 389fpkt", shape=invhouse, color=bisque];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.10.214.91:*, *:80}[25.5111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5881%)&lt;BR/&gt; 443: (0.37532%)&lt;BR/&gt; 2164: (0.128158%)&lt;BR/&gt; 2512: (0.10985%)&lt;BR/&gt; 2233: (0.10985%)&gt;];
}
568--902[label="0.232558;20pkt 20fpkt"];
589--679[label="0.0243902;5pkt 5fpkt"];
589--861[label="0.0208333;1pkt 1fpkt"];
589--902[label="0.0465116;8pkt 8fpkt"];
589--976[label="0.256881;28pkt 28fpkt"];
589--1055[label="0.03125;3pkt 3fpkt"];
589--1255[label="0.0105263;1pkt 1fpkt"];
589--1484[label="1;382pkt 382fpkt"];
589--1644[label="0.0258065;4pkt 4fpkt"];
589--1725[label="0.256881;28pkt 28fpkt"];
589--1846[label="0.0235602;9pkt 9fpkt"];
589--1855[label="0.0445026;17pkt 17fpkt"];
589--1856[label="0.0549738;21pkt 21fpkt"];
589--1860[label="0.0366492;14pkt 14fpkt"];
589--1869[label="0.026178;10pkt 10fpkt"];
589--1874[label="0.0235602;9pkt 9fpkt"];
589--1879[label="0.0445026;17pkt 17fpkt"];
589--1881[label="0.0549738;21pkt 21fpkt"];
589--1882[label="0.0366492;14pkt 14fpkt"];
589--1885[label="0.026178;10pkt 10fpkt"];
589--1890[label="0.0235602;9pkt 9fpkt"];
589--1895[label="0.026178;10pkt 10fpkt"];
589--2619[label="1;382pkt 382fpkt"];
589--3113[label="0.997382;381pkt 381fpkt"];
589--3390[label="1;382pkt 382fpkt"];
666--679[label="0.0829268;17pkt 17fpkt"];
666--902[label="0.0116279;2pkt 2fpkt"];
666--1055[label="0.0104167;1pkt 1fpkt"];
666--1186[label="0.0133333;1pkt 1fpkt"];
666--1255[label="0.0210526;2pkt 2fpkt"];
666--1575[label="1;193pkt 193fpkt"];
666--1644[label="0.103226;16pkt 16fpkt"];
666--1846[label="0.0158103;4pkt 4fpkt"];
666--1855[label="0.027668;7pkt 7fpkt"];
666--1856[label="0.055336;14pkt 14fpkt"];
666--1860[label="0.0395257;10pkt 10fpkt"];
666--1869[label="0.0355731;9pkt 9fpkt"];
666--1874[label="0.0158103;4pkt 4fpkt"];
666--1879[label="0.027668;7pkt 7fpkt"];
666--1881[label="0.055336;14pkt 14fpkt"];
666--1882[label="0.0395257;10pkt 10fpkt"];
666--1885[label="0.0355731;9pkt 9fpkt"];
666--1890[label="0.0158103;4pkt 4fpkt"];
666--1895[label="0.0355731;9pkt 9fpkt"];
666--2568[label="1;253pkt 253fpkt"];
669--679[label="0.112195;23pkt 23fpkt"];
669--861[label="0.0625;3pkt 3fpkt"];
669--902[label="0.0581395;10pkt 10fpkt"];
669--1055[label="0.0104167;1pkt 1fpkt"];
669--1255[label="0.0315789;3pkt 3fpkt"];
669--1489[label="1;223pkt 223fpkt"];
669--1644[label="0.116129;18pkt 18fpkt"];
669--1846[label="0.0143266;5pkt 5fpkt"];
669--1855[label="0.0372493;13pkt 13fpkt"];
669--1856[label="0.025788;9pkt 9fpkt"];
669--1860[label="0.0544413;19pkt 19fpkt"];
669--1869[label="0.0744986;26pkt 26fpkt"];
669--1874[label="0.0143266;5pkt 5fpkt"];
669--1879[label="0.0372493;13pkt 13fpkt"];
669--1881[label="0.025788;9pkt 9fpkt"];
669--1882[label="0.0544413;19pkt 19fpkt"];
669--1885[label="0.0744986;26pkt 26fpkt"];
669--1890[label="0.0143266;5pkt 5fpkt"];
669--1895[label="0.0744986;26pkt 26fpkt"];
679--1412[label="0.00487805;1pkt 1fpkt"];
679--1484[label="0.0243902;5pkt 5fpkt"];
679--1489[label="0.0780488;16pkt 16fpkt"];
679--1575[label="0.0673575;13pkt 13fpkt"];
679--1644[label="1;155pkt 155fpkt"];
679--1846[label="0.00487805;1pkt 1fpkt"];
679--1855[label="0.0439024;9pkt 9fpkt"];
679--1856[label="0.0243902;5pkt 5fpkt"];
679--1860[label="0.0195122;4pkt 4fpkt"];
679--1869[label="0.0195122;4pkt 4fpkt"];
679--1874[label="0.00487805;1pkt 1fpkt"];
679--1879[label="0.0439024;9pkt 9fpkt"];
679--1881[label="0.0243902;5pkt 5fpkt"];
679--1882[label="0.0195122;4pkt 4fpkt"];
679--1885[label="0.0195122;4pkt 4fpkt"];
679--1890[label="0.00487805;1pkt 1fpkt"];
679--1895[label="0.0195122;4pkt 4fpkt"];
679--1937[label="0.282927;58pkt 58fpkt"];
679--2000[label="0.529412;9pkt 9fpkt"];
679--2429[label="0.097561;20pkt 20fpkt"];
679--2452[label="0.35122;72pkt 72fpkt"];
679--2547[label="0.00487805;1pkt 1fpkt"];
679--2568[label="0.0829268;17pkt 17fpkt"];
679--2619[label="0.0243902;5pkt 5fpkt"];
679--3009[label="0.097561;20pkt 20fpkt"];
679--3021[label="0.35122;72pkt 72fpkt"];
679--3113[label="0.0243902;5pkt 5fpkt"];
679--3339[label="0.35122;72pkt 72fpkt"];
679--3390[label="0.0243902;5pkt 5fpkt"];
902--971[label="0.0406977;7pkt 7fpkt"];
902--985[label="0.0392157;2pkt 2fpkt"];
902--1028[label="0.0909091;6pkt 6fpkt"];
902--1184[label="0.0116279;2pkt 2fpkt"];
902--1484[label="0.0465116;8pkt 8fpkt"];
902--1489[label="0.0116279;2pkt 2fpkt"];
902--1575[label="0.00581395;1pkt 1fpkt"];
902--1701[label="0.0232558;4pkt 4fpkt"];
902--1846[label="0.0116279;2pkt 2fpkt"];
902--1855[label="0.0465116;8pkt 8fpkt"];
902--1856[label="0.0348837;6pkt 6fpkt"];
902--1860[label="0.0290698;5pkt 5fpkt"];
902--1869[label="0.0523256;9pkt 9fpkt"];
902--1874[label="0.0116279;2pkt 2fpkt"];
902--1879[label="0.0465116;8pkt 8fpkt"];
902--1881[label="0.0348837;6pkt 6fpkt"];
902--1882[label="0.0290698;5pkt 5fpkt"];
902--1885[label="0.0523256;9pkt 9fpkt"];
902--1890[label="0.0116279;2pkt 2fpkt"];
902--1895[label="0.0523256;9pkt 9fpkt"];
902--1906[label="0.0232558;4pkt 4fpkt"];
902--2038[label="0.00729927;1pkt 1fpkt"];
902--2452[label="0.0406977;7pkt 7fpkt"];
902--2568[label="0.0116279;2pkt 2fpkt"];
902--2596[label="0.0923077;6pkt 6fpkt"];
902--2619[label="0.0465116;8pkt 8fpkt"];
902--2642[label="0.0465116;8pkt 8fpkt"];
902--2669[label="0.255814;44pkt 44fpkt"];
902--3021[label="0.0406977;7pkt 7fpkt"];
902--3113[label="0.0465116;8pkt 8fpkt"];
902--3146[label="0.255814;44pkt 44fpkt"];
902--3339[label="0.0406977;7pkt 7fpkt"];
902--3390[label="0.0465116;8pkt 8fpkt"];
972--1701[label="1;313pkt 313fpkt"];
976--1484[label="0.256881;28pkt 28fpkt"];
976--1725[label="1;109pkt 109fpkt"];
976--1846[label="0.0458716;5pkt 5fpkt"];
976--1855[label="0.0642202;7pkt 7fpkt"];
976--1856[label="0.0550459;6pkt 6fpkt"];
976--1860[label="0.0275229;3pkt 3fpkt"];
976--1869[label="0.0275229;3pkt 3fpkt"];
976--1874[label="0.0458716;5pkt 5fpkt"];
976--1879[label="0.0642202;7pkt 7fpkt"];
976--1881[label="0.0550459;6pkt 6fpkt"];
976--1882[label="0.0275229;3pkt 3fpkt"];
976--1885[label="0.0275229;3pkt 3fpkt"];
976--1890[label="0.0458716;5pkt 5fpkt"];
976--1895[label="0.0275229;3pkt 3fpkt"];
976--1937[label="0.743119;81pkt 81fpkt"];
976--2619[label="0.256881;28pkt 28fpkt"];
976--3113[label="0.256881;28pkt 28fpkt"];
976--3390[label="0.256881;28pkt 28fpkt"];
1028--2596[label="1;65pkt 65fpkt"];
1055--1412[label="0.0104167;1pkt 1fpkt"];
1055--1484[label="0.03125;3pkt 3fpkt"];
1055--1489[label="0.0104167;1pkt 1fpkt"];
1055--1575[label="0.0104167;1pkt 1fpkt"];
1055--1855[label="0.0104167;1pkt 1fpkt"];
1055--1869[label="0.0416667;4pkt 4fpkt"];
1055--1879[label="0.0104167;1pkt 1fpkt"];
1055--1885[label="0.0416667;4pkt 4fpkt"];
1055--1895[label="0.0416667;4pkt 4fpkt"];
1055--2452[label="0.9375;90pkt 90fpkt"];
1055--2547[label="0.0104167;1pkt 1fpkt"];
1055--2568[label="0.0104167;1pkt 1fpkt"];
1055--2619[label="0.03125;3pkt 3fpkt"];
1055--3021[label="0.9375;90pkt 90fpkt"];
1055--3113[label="0.03125;3pkt 3fpkt"];
1055--3339[label="0.9375;90pkt 90fpkt"];
1055--3390[label="0.03125;3pkt 3fpkt"];
1255--1313[label="0.0322581;1pkt 1fpkt"];
1255--1484[label="0.0105263;1pkt 1fpkt"];
1255--1489[label="0.0315789;3pkt 3fpkt"];
1255--1575[label="0.0105263;1pkt 1fpkt"];
1255--1869[label="0.0210526;2pkt 2fpkt"];
1255--1885[label="0.0210526;2pkt 2fpkt"];
1255--1895[label="0.0210526;2pkt 2fpkt"];
1255--1936[label="0.0294118;1pkt 1fpkt"];
1255--1937[label="0.0210526;2pkt 2fpkt"];
1255--2410[label="0.0322581;1pkt 1fpkt"];
1255--2452[label="0.810526;77pkt 77fpkt"];
1255--2568[label="0.0210526;2pkt 2fpkt"];
1255--2619[label="0.0105263;1pkt 1fpkt"];
1255--2733[label="0.0294118;1pkt 1fpkt"];
1255--2998[label="0.0333333;1pkt 1fpkt"];
1255--3021[label="0.810526;77pkt 77fpkt"];
1255--3113[label="0.0105263;1pkt 1fpkt"];
1255--3331[label="0.0322581;1pkt 1fpkt"];
1255--3339[label="0.810526;77pkt 77fpkt"];
1255--3390[label="0.0105263;1pkt 1fpkt"];
1313--2410[label="1;31pkt 31fpkt"];
1313--2998[label="1;30pkt 30fpkt"];
1313--3331[label="1;31pkt 31fpkt"];
1484--1644[label="0.0258065;4pkt 4fpkt"];
1484--1725[label="0.256881;28pkt 28fpkt"];
1484--1846[label="0.0235602;9pkt 9fpkt"];
1484--1855[label="0.0445026;17pkt 17fpkt"];
1484--1856[label="0.0549738;21pkt 21fpkt"];
1484--1860[label="0.0366492;14pkt 14fpkt"];
1484--1869[label="0.026178;10pkt 10fpkt"];
1484--1874[label="0.0235602;9pkt 9fpkt"];
1484--1879[label="0.0445026;17pkt 17fpkt"];
1484--1881[label="0.0549738;21pkt 21fpkt"];
1484--1882[label="0.0366492;14pkt 14fpkt"];
1484--1885[label="0.026178;10pkt 10fpkt"];
1484--1890[label="0.0235602;9pkt 9fpkt"];
1484--1895[label="0.026178;10pkt 10fpkt"];
1484--2619[label="1;382pkt 382fpkt"];
1484--3113[label="0.997382;381pkt 381fpkt"];
1484--3390[label="1;382pkt 382fpkt"];
1489--1644[label="0.103226;16pkt 16fpkt"];
1489--1846[label="0.0224215;5pkt 5fpkt"];
1489--1855[label="0.058296;13pkt 13fpkt"];
1489--1856[label="0.0403587;9pkt 9fpkt"];
1489--1860[label="0.0852018;19pkt 19fpkt"];
1489--1869[label="0.0044843;1pkt 1fpkt"];
1489--1874[label="0.0224215;5pkt 5fpkt"];
1489--1879[label="0.058296;13pkt 13fpkt"];
1489--1881[label="0.0403587;9pkt 9fpkt"];
1489--1882[label="0.0852018;19pkt 19fpkt"];
1489--1885[label="0.0044843;1pkt 1fpkt"];
1489--1890[label="0.0224215;5pkt 5fpkt"];
1489--1895[label="0.0044843;1pkt 1fpkt"];
1575--1644[label="0.083871;13pkt 13fpkt"];
1575--1846[label="0.0207254;4pkt 4fpkt"];
1575--1855[label="0.0362694;7pkt 7fpkt"];
1575--1856[label="0.0725389;14pkt 14fpkt"];
1575--1860[label="0.0518135;10pkt 10fpkt"];
1575--1874[label="0.0207254;4pkt 4fpkt"];
1575--1879[label="0.0362694;7pkt 7fpkt"];
1575--1881[label="0.0725389;14pkt 14fpkt"];
1575--1882[label="0.0518135;10pkt 10fpkt"];
1575--1890[label="0.0207254;4pkt 4fpkt"];
1575--2568[label="1;193pkt 193fpkt"];
1644--1846[label="0.00645161;1pkt 1fpkt"];
1644--1855[label="0.0580645;9pkt 9fpkt"];
1644--1856[label="0.0322581;5pkt 5fpkt"];
1644--1860[label="0.0258065;4pkt 4fpkt"];
1644--1874[label="0.00645161;1pkt 1fpkt"];
1644--1879[label="0.0580645;9pkt 9fpkt"];
1644--1881[label="0.0322581;5pkt 5fpkt"];
1644--1882[label="0.0258065;4pkt 4fpkt"];
1644--1890[label="0.00645161;1pkt 1fpkt"];
1644--1937[label="0.367742;57pkt 57fpkt"];
1644--2000[label="0.235294;4pkt 4fpkt"];
1644--2452[label="0.354839;55pkt 55fpkt"];
1644--2547[label="0.00645161;1pkt 1fpkt"];
1644--2568[label="0.103226;16pkt 16fpkt"];
1644--2619[label="0.0258065;4pkt 4fpkt"];
1644--3021[label="0.354839;55pkt 55fpkt"];
1644--3113[label="0.0258065;4pkt 4fpkt"];
1644--3339[label="0.354839;55pkt 55fpkt"];
1644--3390[label="0.0258065;4pkt 4fpkt"];
1701--1709[label="0.0989399;28pkt 28fpkt"];
1701--1869[label="0.011745;7pkt 7fpkt"];
1701--1885[label="0.011745;7pkt 7fpkt"];
1701--1895[label="0.011745;7pkt 7fpkt"];
1725--1846[label="0.0458716;5pkt 5fpkt"];
1725--1855[label="0.0642202;7pkt 7fpkt"];
1725--1856[label="0.0550459;6pkt 6fpkt"];
1725--1860[label="0.0275229;3pkt 3fpkt"];
1725--1869[label="0.0275229;3pkt 3fpkt"];
1725--1874[label="0.0458716;5pkt 5fpkt"];
1725--1879[label="0.0642202;7pkt 7fpkt"];
1725--1881[label="0.0550459;6pkt 6fpkt"];
1725--1882[label="0.0275229;3pkt 3fpkt"];
1725--1885[label="0.0275229;3pkt 3fpkt"];
1725--1890[label="0.0458716;5pkt 5fpkt"];
1725--1895[label="0.0275229;3pkt 3fpkt"];
1725--1937[label="0.743119;81pkt 81fpkt"];
1725--2619[label="0.256881;28pkt 28fpkt"];
1725--3113[label="0.256881;28pkt 28fpkt"];
1725--3390[label="0.256881;28pkt 28fpkt"];
1936--2733[label="1;34pkt 34fpkt"];
2410--2998[label="1;30pkt 30fpkt"];
2410--3331[label="1;31pkt 31fpkt"];
2619--3113[label="1;388pkt 388fpkt"];
2619--3390[label="1;389pkt 389fpkt"];
2998--3331[label="1;30pkt 30fpkt"];
3113--3390[label="1;388pkt 388fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="192.10.214.91"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.562808,1.91757,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_465{
style=filled;
color=gray75;
2631[label="196.78.15.223;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3121[label="196.78.15.223;1pkt 1fpkt", shape=invtriangle, color=brown];
stat465[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.78.15.223:0, 135.246.72.156:0}[50%]&lt;BR/&gt;{196.78.15.223:0, 192.12.6.212:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2631--3121[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.12.6.212" src_ip="196.78.15.223"/>
      <filter dst_ip="135.246.72.156" src_ip="196.78.15.223"/>
    </slice>
    <from sec="1020574806" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.99.203.225"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_467{
style=filled;
color=gray75;
2643[label="192.158.21.228;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3129[label="192.158.21.228;23pkt 23fpkt", shape=invtriangle, color=brown];
3399[label="192.158.21.228;23pkt 23fpkt", shape=invhouse, color=bisque];
stat467[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.158.21.228:*, 99.61.225.251:8000}[78.2609%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (39.1304%)&lt;BR/&gt; 1863: (8.69565%)&lt;BR/&gt; 0: (4.34783%)&lt;BR/&gt; 28045: (2.17391%)&lt;BR/&gt; 27523: (2.17391%)&gt;];
}
2643--3129[label="1;23pkt 23fpkt"];
2643--3399[label="1;23pkt 23fpkt"];
3129--3399[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="99.61.225.251" dst_port="8000" src_ip="192.158.21.228"/>
    </slice>
    <from sec="1020574856" usec="0"/>
    <to sec="1020576744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
2644[label="223.237.170.228;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3130[label="223.237.170.228;2pkt 2fpkt", shape=invtriangle, color=brown];
3400[label="223.237.170.228;2pkt 2fpkt", shape=invhouse, color=bisque];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.237.170.228:80, 193.243.200.12:23094}[50%]&lt;BR/&gt;{223.237.170.228:80, 193.243.200.12:23095}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 23095: (25%)&lt;BR/&gt; 23094: (25%)&gt;];
}
2644--3130[label="1;2pkt 2fpkt"];
2644--3400[label="1;2pkt 2fpkt"];
3130--3400[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.243.200.12" dst_port="23095" src_ip="223.237.170.228" src_port="80"/>
      <filter dst_ip="193.243.200.12" dst_port="23094" src_ip="223.237.170.228" src_port="80"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573985,1.85133,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_469{
style=filled;
color=gray75;
1252[label="151.51.6.208;d;131pkt 131fpkt", shape=diamond, color=yellow];
2667[label="16.203.9.237;86pkt 86fpkt", shape=pentagon, color=darkviolet];
3145[label="16.203.9.237;86pkt 86fpkt", shape=invtriangle, color=brown];
stat469[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.203.9.237:80, 151.51.6.208:*}[64.9254%]&lt;BR/&gt;{16.203.9.248:80, 151.51.6.208:*}[26.8657%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1306: (0.49505%)&lt;BR/&gt; 1305: (0.49505%)&lt;BR/&gt; 1304: (0.49505%)&lt;BR/&gt; 1303: (0.49505%)&gt;];
}
1252--1853[label="0.0458015;6pkt 6fpkt"];
1252--1859[label="0.0152672;2pkt 2fpkt"];
1252--1862[label="0.0152672;2pkt 2fpkt"];
1252--1865[label="0.0152672;2pkt 2fpkt"];
1252--1867[label="0.0152672;2pkt 2fpkt"];
1252--1883[label="0.0152672;2pkt 2fpkt"];
1252--2347[label="0.0555556;2pkt 2fpkt"];
1252--2667[label="0.965116;83pkt 83fpkt"];
1252--3145[label="0.965116;83pkt 83fpkt"];
2667--3145[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_ip="151.51.6.208" src_ip="16.203.9.237" src_port="80"/>
      <filter dst_ip="151.51.6.208" src_ip="16.203.9.248" src_port="80"/>
    </slice>
    <from sec="1020575110" usec="0"/>
    <to sec="1020576756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
2671[label="223.240.7.239;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3147[label="223.240.7.239;3pkt 3fpkt", shape=invtriangle, color=brown];
3407[label="223.240.7.239;4pkt 4fpkt", shape=invhouse, color=bisque];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{223.240.7.239:80, 192.12.3.119:1661}[25%]&lt;BR/&gt;{223.240.7.239:80, 192.12.3.119:1662}[25%]&lt;BR/&gt;{223.240.7.239:80, 192.12.3.119:1687}[25%]&lt;BR/&gt;{223.240.7.239:80, 192.12.3.119:1688}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1688: (15%)&lt;BR/&gt; 1687: (15%)&lt;BR/&gt; 1662: (15%)&lt;BR/&gt; 1661: (5%)&gt;];
}
2671--3147[label="1;3pkt 3fpkt"];
2671--3407[label="1;3pkt 3fpkt"];
3147--3407[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.12.3.119" dst_port="1688" src_ip="223.240.7.239" src_port="80"/>
      <filter dst_ip="192.12.3.119" dst_port="1687" src_ip="223.240.7.239" src_port="80"/>
      <filter dst_ip="192.12.3.119" dst_port="1662" src_ip="223.240.7.239" src_port="80"/>
      <filter dst_ip="192.12.3.119" dst_port="1661" src_ip="223.240.7.239" src_port="80"/>
    </slice>
    <from sec="1020575885" usec="0"/>
    <to sec="1020575912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="151.38.88.242"/>
    </slice>
    <from sec="1020574815" usec="0"/>
    <to sec="1020576707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.636349,1.96998,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="151.61.162.249"/>
    </slice>
    <from sec="1020575032" usec="0"/>
    <to sec="1020575033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.735189,1.90354,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_473{
style=filled;
color=gray75;
2708[label="220.110.192.255;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3164[label="220.110.192.255;16pkt 16fpkt", shape=invtriangle, color=brown];
3415[label="220.110.192.255;17pkt 17fpkt", shape=invhouse, color=bisque];
stat473[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.110.192.255:80, 135.246.219.199:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1583: (3%)&lt;BR/&gt; 1582: (3%)&lt;BR/&gt; 1581: (3%)&lt;BR/&gt; 1580: (3%)&gt;];
}
2708--3164[label="1;16pkt 16fpkt"];
2708--3415[label="1;17pkt 17fpkt"];
3164--3415[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="135.246.219.199" src_ip="220.110.192.255" src_port="80"/>
    </slice>
    <from sec="1020575829" usec="0"/>
    <to sec="1020575832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742617,1.98482,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="145.208.2.4"/>
    </slice>
    <from sec="1020574805" usec="0"/>
    <to sec="1020576760" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742617,1.98482,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.73.14.11"/>
    </slice>
    <from sec="1020576763" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742617,1.98482,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.216.236.25"/>
    </slice>
    <from sec="1020574844" usec="0"/>
    <to sec="1020576762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.680656,1.93282,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_477{
style=filled;
color=gray75;
2002[label="151.51.49.26;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3200[label="151.51.49.26;16pkt 16fpkt", shape=invhouse, color=bisque];
stat477[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.51.49.26:*, 201.130.68.154:80}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 32768: (9.375%)&lt;BR/&gt; 53: (9.375%)&lt;BR/&gt; 65032: (3.125%)&lt;BR/&gt; 61167: (3.125%)&gt;];
}
2002--3200[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="201.130.68.154" dst_port="80" src_ip="151.51.49.26"/>
    </slice>
    <from sec="1020575097" usec="0"/>
    <to sec="1020575998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742617,1.98482,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="151.0.150.52"/>
    </slice>
    <from sec="1020575713" usec="0"/>
    <to sec="1020575714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.792899,1.95632,020,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_479{
style=filled;
color=gray75;
2837[label="145.208.24.64;1pkt 1fpkt", shape=invtriangle, color=brown];
3238[label="145.208.24.64;1pkt 1fpkt", shape=invhouse, color=bisque];
stat479[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.208.24.64:0, 215.249.210.222:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2837--3238[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.249.210.222" src_ip="145.208.24.64"/>
    </slice>
    <from sec="1020576360" usec="0"/>
    <to sec="1020576371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.680656,1.93282,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_480{
style=filled;
color=gray75;
2153[label="220.148.50.70;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3247[label="220.148.50.70;1pkt 1fpkt", shape=invhouse, color=bisque];
stat480[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.148.50.70:1366, 193.243.192.201:80}[50%]&lt;BR/&gt;{220.148.50.70:1367, 193.243.192.201:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1367: (33.3333%)&lt;BR/&gt; 1366: (16.6667%)&gt;];
}
2153--3247[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.243.192.201" dst_port="80" src_ip="220.148.50.70" src_port="1367"/>
      <filter dst_ip="193.243.192.201" dst_port="80" src_ip="220.148.50.70" src_port="1366"/>
    </slice>
    <from sec="1020574962" usec="0"/>
    <to sec="1020574981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742617,1.98482,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.228.37.73"/>
    </slice>
    <from sec="1020574809" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742617,1.98482,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="135.246.144.82"/>
    </slice>
    <from sec="1020575721" usec="0"/>
    <to sec="1020576761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742617,1.98482,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="22.97.81.89"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742617,1.98482,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="16.203.27.106"/>
    </slice>
    <from sec="1020575217" usec="0"/>
    <to sec="1020575251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742617,1.98482,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.218.11.121"/>
    </slice>
    <from sec="1020574811" usec="0"/>
    <to sec="1020576727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742617,1.98482,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.103.29.122"/>
    </slice>
    <from sec="1020574801" usec="0"/>
    <to sec="1020576755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742617,1.98482,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="168.140.231.130"/>
    </slice>
    <from sec="1020574804" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742617,1.98482,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="145.208.99.181"/>
    </slice>
    <from sec="1020574802" usec="0"/>
    <to sec="1020576762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742617,1.98482,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.0.149.204"/>
    </slice>
    <from sec="1020574804" usec="0"/>
    <to sec="1020576763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742617,1.98482,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="154.65.182.215"/>
    </slice>
    <from sec="1020575682" usec="0"/>
    <to sec="1020576761" usec="0"/>
  </anomaly>

</admd:annotation>
