<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.156,2.0796,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="6699" proto="tcp" src_ip="133.19.153.164" src_port="1214"/>
      <filter dst_port="80" proto="tcp" src_ip="133.19.153.164" src_port="1214"/>
      <from sec="1026018499" usec="0"/>
      <to sec="1026019619" usec="0"/>
    </slice>
    <from sec="1026018499" usec="0"/>
    <to sec="1026019619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.156,2.0796,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.6.180.179" dst_port="80" proto="tcp" src_ip="208.77.224.47" src_port="2846"/>
      <from sec="1026018050" usec="0"/>
      <to sec="1026019445" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="195.6.180.179" dst_port="80" proto="tcp" src_ip="154.213.17.130" src_port="2846"/>
      <from sec="1026018985" usec="0"/>
      <to sec="1026019015" usec="0"/>
    </slice>
    <from sec="1026018050" usec="0"/>
    <to sec="1026019445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34366,2.02542,901,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_3{
style=filled;
color=gray75;
92[label="208.218.30.56;d;1pkt 1fpkt", shape=diamond, color=yellow];
93[label="214.36.217.67;s;366pkt 366fpkt", shape=diamond, color=yellow];
1011[label="133.19.229.69;d;363pkt 363fpkt", shape=diamond, color=yellow];
1293[label="214.36.217.67;s;363pkt 363fpkt", shape=hexagon, color=black];
1786[label="214.36.217.67;s;363pkt 363fpkt", shape=polygon, color=gold];
stat3[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.36.217.67:*, 133.19.229.69:*}[99.1803%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 871: (0.343407%)&lt;BR/&gt; 65534: (0.137363%)&lt;BR/&gt; 65528: (0.137363%)&lt;BR/&gt; 65526: (0.137363%)&lt;BR/&gt; 65521: (0.137363%)&gt;];
}
92--93[label="1;1pkt 1fpkt"];
92--1293[label="1;1pkt 1fpkt"];
92--1786[label="1;1pkt 1fpkt"];
93--1011[label="1;363pkt 363fpkt"];
93--1293[label="1;363pkt 363fpkt"];
93--1786[label="1;363pkt 363fpkt"];
1011--1293[label="0.991736;360pkt 360fpkt"];
1011--1786[label="0.991736;360pkt 360fpkt"];
1293--1786[label="1;363pkt 363fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.229.69" src_ip="214.36.217.67"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22438,1.96931,901,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_4{
style=filled;
color=gray75;
8[label="192.44.121.61s;3pkt 3fpkt", shape=rectangle, color=red];
95[label="133.19.35.72;s;6pkt 6fpkt", shape=diamond, color=yellow];
96[label="56.158.232.8;d;2pkt 2fpkt", shape=diamond, color=yellow];
352[label="114.146.226.144;d;2pkt 2fpkt", shape=diamond, color=yellow];
426[label="210.49.193.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
1403[label="210.49.193.30;d;1pkt 1fpkt", shape=hexagon, color=black];
1701[label="157.149.139.59;d;11pkt 11fpkt", shape=hexagon, color=black];
stat4[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.44.121.61:*, 157.149.139.59:22}[33.3333%]&lt;BR/&gt;{192.44.121.61:*, 157.149.139.59:110}[27.7778%]&lt;BR/&gt;{133.19.35.72:*, *:6699}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (23.0769%)&lt;BR/&gt; 22: (13.4615%)&lt;BR/&gt; 110: (9.61538%)&lt;BR/&gt; 2973: (7.69231%)&lt;BR/&gt; 3244: (3.84615%)&gt;];
}
8--95[label="0.333333;1pkt 1fpkt"];
8--127[label="0.333333;1pkt 1fpkt"];
8--426[label="1;1pkt 1fpkt"];
8--476[label="0.333333;1pkt 1fpkt"];
8--554[label="0.333333;1pkt 1fpkt"];
8--631[label="1;1pkt 1fpkt"];
8--1403[label="1;1pkt 1fpkt"];
8--1701[label="0.333333;1pkt 1fpkt"];
95--96[label="1;2pkt 2fpkt"];
95--352[label="1;2pkt 2fpkt"];
95--426[label="1;1pkt 1fpkt"];
95--1403[label="1;1pkt 1fpkt"];
426--1403[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="133.19.35.72"/>
      <filter dst_ip="157.149.139.59" dst_port="22" src_ip="192.44.121.61"/>
      <filter dst_ip="157.149.139.59" dst_port="110" src_ip="192.44.121.61"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_5{
style=filled;
color=gray75;
101[label="112.209.99.112;d;3pkt 3fpkt", shape=diamond, color=yellow];
103[label="133.19.135.98;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat5[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.135.98:*, 112.209.99.112:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (22.2222%)&lt;BR/&gt; 19555: (11.1111%)&lt;BR/&gt; 19554: (11.1111%)&lt;BR/&gt; 1088: (11.1111%)&lt;BR/&gt; 1086: (11.1111%)&gt;];
}
101--103[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="112.209.99.112" src_ip="133.19.135.98"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026018305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24548,1.91235,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_6{
style=filled;
color=gray75;
7[label="133.19.219.56s;2pkt 2fpkt", shape=rectangle, color=red];
122[label="116.87.226.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
123[label="133.19.219.56;s;1pkt 1fpkt", shape=diamond, color=yellow];
254[label="207.193.208.197;s;1pkt 1fpkt", shape=diamond, color=yellow];
1396[label="207.193.208.197;s;1pkt 1fpkt", shape=hexagon, color=black];
2090[label="133.19.219.56;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2552[label="207.193.208.197;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2827[label="133.19.219.56;1pkt 1fpkt", shape=invtriangle, color=brown];
stat6[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.219.56:1623, 116.87.226.76:1858}[50%]&lt;BR/&gt;{207.193.208.197:1565, 157.149.237.47:5199}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1858: (27.7778%)&lt;BR/&gt; 1623: (27.7778%)&lt;BR/&gt; 5199: (22.2222%)&lt;BR/&gt; 1565: (22.2222%)&gt;];
}
7--122[label="1;1pkt 1fpkt"];
7--123[label="1;1pkt 1fpkt"];
7--140[label="0.5;1pkt 1fpkt"];
7--254[label="1;1pkt 1fpkt"];
7--1259[label="0.5;1pkt 1fpkt"];
7--1396[label="1;1pkt 1fpkt"];
7--1745[label="0.5;1pkt 1fpkt"];
7--2090[label="1;1pkt 1fpkt"];
7--2552[label="1;1pkt 1fpkt"];
7--2827[label="1;1pkt 1fpkt"];
122--123[label="1;1pkt 1fpkt"];
122--2090[label="1;1pkt 1fpkt"];
122--2827[label="1;1pkt 1fpkt"];
123--2090[label="1;1pkt 1fpkt"];
123--2827[label="1;1pkt 1fpkt"];
254--1259[label="1;1pkt 1fpkt"];
254--1396[label="1;1pkt 1fpkt"];
254--1745[label="1;1pkt 1fpkt"];
254--2552[label="1;1pkt 1fpkt"];
1396--1745[label="1;1pkt 1fpkt"];
1396--2552[label="1;1pkt 1fpkt"];
2090--2827[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.237.47" dst_port="5199" src_ip="207.193.208.197" src_port="1565"/>
      <filter dst_ip="116.87.226.76" dst_port="1858" src_ip="133.19.219.56" src_port="1623"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24548,1.91235,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_7{
style=filled;
color=gray75;
24[label="209.86.178.153s;2pkt 2fpkt", shape=rectangle, color=red];
134[label="209.86.178.153;s;5pkt 5fpkt", shape=diamond, color=yellow];
135[label="133.19.81.56;d;5pkt 5fpkt", shape=diamond, color=yellow];
206[label="154.213.27.175;d;3pkt 3fpkt", shape=diamond, color=yellow];
328[label="105.33.144.106;s;5pkt 5fpkt", shape=diamond, color=yellow];
1242[label="112.229.240.128;s;2pkt 2fpkt", shape=diamond, color=yellow];
1322[label="105.33.144.106;s;5pkt 5fpkt", shape=hexagon, color=black];
1442[label="154.213.27.175;d;3pkt 3fpkt", shape=hexagon, color=black];
2565[label="192.17.168.202;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3071[label="192.17.168.202;7pkt 7fpkt", shape=invtriangle, color=brown];
stat7[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.17.168.202:*, *:80}[28.5714%]&lt;BR/&gt;{209.86.178.153:1755, 133.19.81.56:*}[23.8095%]&lt;BR/&gt;{105.33.144.106:*, *:*}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (13.6364%)&lt;BR/&gt; 80: (13.6364%)&lt;BR/&gt; 22: (12.5%)&lt;BR/&gt; 110: (9.09091%)&lt;BR/&gt; 1841: (5.68182%)&gt;];
}
24--134[label="0.5;1pkt 1fpkt"];
24--135[label="0.5;1pkt 1fpkt"];
24--206[label="0.5;1pkt 1fpkt"];
24--328[label="0.5;1pkt 1fpkt"];
24--1322[label="0.5;1pkt 1fpkt"];
24--1442[label="0.5;1pkt 1fpkt"];
134--135[label="0.6;3pkt 3fpkt"];
135--1242[label="0.5;1pkt 1fpkt"];
206--328[label="0.333333;1pkt 1fpkt"];
206--479[label="0.333333;1pkt 1fpkt"];
206--1322[label="0.333333;1pkt 1fpkt"];
206--1442[label="1;3pkt 3fpkt"];
206--2390[label="0.333333;1pkt 1fpkt"];
206--2565[label="0.333333;1pkt 1fpkt"];
206--3071[label="0.333333;1pkt 1fpkt"];
328--441[label="0.6;3pkt 3fpkt"];
328--1315[label="0.6;3pkt 3fpkt"];
328--1322[label="1;5pkt 5fpkt"];
328--1442[label="0.333333;1pkt 1fpkt"];
328--1768[label="0.6;3pkt 3fpkt"];
1322--1442[label="0.333333;1pkt 1fpkt"];
1322--1768[label="0.6;3pkt 3fpkt"];
1442--2390[label="0.333333;1pkt 1fpkt"];
1442--2565[label="0.333333;1pkt 1fpkt"];
1442--3071[label="0.333333;1pkt 1fpkt"];
2565--3071[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="105.33.144.106"/>
      <filter dst_port="80" src_ip="192.17.168.202"/>
      <filter dst_ip="133.19.81.56" src_ip="209.86.178.153" src_port="1755"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_8{
style=filled;
color=gray75;
144[label="62.149.90.1;d;3101pkt 3101fpkt", shape=diamond, color=yellow];
145[label="157.149.10.29;s;2935pkt 2935fpkt", shape=diamond, color=yellow];
stat8[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.149.10.29:3001, 62.149.90.1:*}[73.3957%]&lt;BR/&gt;{157.149.10.29:3002, 62.149.90.1:*}[26.6043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3001: (36.6634%)&lt;BR/&gt; 3002: (13.3366%)&lt;BR/&gt; 56430: (0.0331345%)&lt;BR/&gt; 56299: (0.0331345%)&lt;BR/&gt; 56223: (0.0331345%)&gt;];
}
144--145[label="1;2935pkt 2935fpkt"];
</description>
    <slice>
      <filter dst_ip="62.149.90.1" src_ip="157.149.10.29" src_port="3001"/>
      <filter dst_ip="62.149.90.1" src_ip="157.149.10.29" src_port="3002"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24548,1.91235,901,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_9{
style=filled;
color=gray75;
36[label="192.23.145.231s;3pkt 3fpkt", shape=rectangle, color=red];
69[label="209.201.228.107;d;86pkt 86fpkt", shape=diamond, color=yellow];
147[label="192.23.145.231;s;1pkt 1fpkt", shape=diamond, color=yellow];
692[label="192.30.0.133;s;11pkt 11fpkt", shape=diamond, color=yellow];
1466[label="192.30.0.133;s;11pkt 11fpkt", shape=hexagon, color=black];
1613[label="192.23.145.231;s;1pkt 1fpkt", shape=hexagon, color=black];
2160[label="207.160.179.73;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2464[label="105.34.34.169;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2716[label="62.179.133.254;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3138[label="62.179.133.254;13pkt 13fpkt", shape=invtriangle, color=brown];
stat9[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 209.201.228.107:80}[43.299%]&lt;BR/&gt;{208.55.145.253:*, 209.201.228.107:8888}[23.7113%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.8079%)&lt;BR/&gt; 8888: (7.61589%)&lt;BR/&gt; 554: (5.62914%)&lt;BR/&gt; 0: (2.64901%)&lt;BR/&gt; 6972: (1.98675%)&gt;];
}
36--69[label="0.333333;1pkt 1fpkt"];
36--95[label="0.666667;2pkt 2fpkt"];
36--96[label="1;2pkt 2fpkt"];
36--147[label="1;1pkt 1fpkt"];
36--1613[label="1;1pkt 1fpkt"];
69--147[label="1;1pkt 1fpkt"];
69--595[label="1;9pkt 9fpkt"];
69--692[label="0.363636;4pkt 4fpkt"];
69--1466[label="0.363636;4pkt 4fpkt"];
69--1613[label="1;1pkt 1fpkt"];
69--1798[label="0.0348837;3pkt 3fpkt"];
69--1808[label="0.0697674;6pkt 6fpkt"];
69--1828[label="0.0232558;2pkt 2fpkt"];
69--1831[label="0.0116279;1pkt 1fpkt"];
69--1833[label="0.0348837;3pkt 3fpkt"];
69--1844[label="0.0697674;6pkt 6fpkt"];
69--1860[label="0.0232558;2pkt 2fpkt"];
69--1863[label="0.0116279;1pkt 1fpkt"];
69--1865[label="0.0348837;3pkt 3fpkt"];
69--1873[label="0.0697674;6pkt 6fpkt"];
69--2160[label="1;4pkt 4fpkt"];
69--2464[label="1;8pkt 8fpkt"];
69--2531[label="1;6pkt 6fpkt"];
69--2716[label="0.846154;11pkt 11fpkt"];
69--3055[label="1;5pkt 5fpkt"];
69--3138[label="0.846154;11pkt 11fpkt"];
69--3319[label="1;6pkt 6fpkt"];
147--1613[label="1;1pkt 1fpkt"];
692--1466[label="1;11pkt 11fpkt"];
2716--3138[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="209.201.228.107" dst_port="80"/>
      <filter dst_ip="209.201.228.107" dst_port="8888" src_ip="208.55.145.253"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19342,1.93272,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_11{
style=filled;
color=gray75;
16[label="157.149.209.102s;3pkt 3fpkt", shape=rectangle, color=red];
149[label="195.151.117.140;d;3pkt 3fpkt", shape=diamond, color=yellow];
150[label="157.149.209.102;s;1422pkt 1422fpkt", shape=diamond, color=yellow];
169[label="36.39.158.209;d;1504pkt 1504fpkt", shape=diamond, color=yellow];
178[label="195.148.213.51;d;3pkt 3fpkt", shape=diamond, color=yellow];
189[label="195.144.199.32;d;4pkt 4fpkt", shape=diamond, color=yellow];
205[label="195.149.43.123;d;3pkt 3fpkt", shape=diamond, color=yellow];
210[label="36.33.98.194;d;3pkt 3fpkt", shape=diamond, color=yellow];
213[label="195.150.26.210;d;3pkt 3fpkt", shape=diamond, color=yellow];
1364[label="195.144.199.32;d;3pkt 3fpkt", shape=hexagon, color=black];
1371[label="36.33.98.194;d;1pkt 1fpkt", shape=hexagon, color=black];
1404[label="195.148.213.51;d;3pkt 3fpkt", shape=hexagon, color=black];
1446[label="195.150.26.210;d;3pkt 3fpkt", shape=hexagon, color=black];
2245[label="157.149.209.102;1531pkt 1531fpkt", shape=pentagon, color=darkviolet];
stat11[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.149.209.102:5050, 36.39.158.209:*}[98.564%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (49.3763%)&lt;BR/&gt; 5049: (0.155937%)&lt;BR/&gt; 3686: (0.0891067%)&lt;BR/&gt; 3151: (0.0891067%)&lt;BR/&gt; 4193: (0.0779684%)&gt;];
}
16--150[label="1;3pkt 3fpkt"];
16--169[label="0.333333;1pkt 1fpkt"];
16--189[label="0.333333;1pkt 1fpkt"];
16--210[label="0.333333;1pkt 1fpkt"];
16--1364[label="0.333333;1pkt 1fpkt"];
16--2245[label="1;3pkt 3fpkt"];
149--150[label="1;3pkt 3fpkt"];
149--2245[label="1;3pkt 3fpkt"];
150--169[label="0.987342;1404pkt 1404fpkt"];
150--178[label="1;3pkt 3fpkt"];
150--189[label="0.75;3pkt 3fpkt"];
150--205[label="1;3pkt 3fpkt"];
150--210[label="1;3pkt 3fpkt"];
150--213[label="1;3pkt 3fpkt"];
150--1364[label="1;3pkt 3fpkt"];
150--1371[label="1;1pkt 1fpkt"];
150--1404[label="1;3pkt 3fpkt"];
150--1446[label="1;3pkt 3fpkt"];
150--2245[label="0.999297;1421pkt 1421fpkt"];
169--2245[label="1;1504pkt 1504fpkt"];
178--1404[label="1;3pkt 3fpkt"];
178--2245[label="1;3pkt 3fpkt"];
189--1364[label="1;3pkt 3fpkt"];
189--2245[label="1;4pkt 4fpkt"];
205--2245[label="1;3pkt 3fpkt"];
210--1371[label="1;1pkt 1fpkt"];
210--2245[label="1;3pkt 3fpkt"];
213--1446[label="1;3pkt 3fpkt"];
213--2245[label="0.666667;2pkt 2fpkt"];
1364--2245[label="1;3pkt 3fpkt"];
1371--2245[label="1;1pkt 1fpkt"];
1404--2245[label="1;3pkt 3fpkt"];
1446--2245[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="36.39.158.209" src_ip="157.149.209.102" src_port="5050"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_12{
style=filled;
color=gray75;
195[label="208.77.208.145;d;2pkt 2fpkt", shape=diamond, color=yellow];
196[label="192.246.37.200;s;1pkt 1fpkt", shape=diamond, color=yellow];
1313[label="208.77.208.145;d;2pkt 2fpkt", shape=hexagon, color=black];
stat12[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.82.193.66:1863, 208.77.208.145:1179}[50%]&lt;BR/&gt;{192.246.37.200:6699, 208.77.208.145:1184}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (30%)&lt;BR/&gt; 1184: (30%)&lt;BR/&gt; 1863: (20%)&lt;BR/&gt; 1179: (20%)&gt;];
}
195--196[label="1;1pkt 1fpkt"];
195--1313[label="1;2pkt 2fpkt"];
196--1313[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.77.208.145" dst_port="1184" src_ip="192.246.37.200" src_port="6699"/>
      <filter dst_ip="208.77.208.145" dst_port="1179" src_ip="62.82.193.66" src_port="1863"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026018210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_15{
style=filled;
color=gray75;
68[label="154.213.40.154;d;7pkt 7fpkt", shape=diamond, color=yellow];
235[label="192.244.86.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
430[label="193.173.154.185;s;1pkt 1fpkt", shape=diamond, color=yellow];
1150[label="60.47.53.29;s;1pkt 1fpkt", shape=diamond, color=yellow];
1693[label="154.213.40.154;d;7pkt 7fpkt", shape=hexagon, color=black];
1700[label="60.47.53.29;s;1pkt 1fpkt", shape=hexagon, color=black];
1901[label="212.68.154.5;65pkt 65fpkt", shape=pentagon, color=darkviolet];
2517[label="193.173.154.185;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat15[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.68.154.5:80, 133.19.229.19:*}[24.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.0714%)&lt;BR/&gt; 6699: (6.54762%)&lt;BR/&gt; 60658: (2.38095%)&lt;BR/&gt; 1129: (2.38095%)&lt;BR/&gt; 0: (2.38095%)&gt;];
}
68--235[label="1;1pkt 1fpkt"];
68--430[label="1;1pkt 1fpkt"];
68--1150[label="1;1pkt 1fpkt"];
68--1693[label="1;7pkt 7fpkt"];
68--1700[label="1;1pkt 1fpkt"];
68--1901[label="0.285714;2pkt 2fpkt"];
68--2517[label="1;1pkt 1fpkt"];
235--1693[label="1;1pkt 1fpkt"];
430--1693[label="1;1pkt 1fpkt"];
430--2517[label="1;1pkt 1fpkt"];
1150--1693[label="1;1pkt 1fpkt"];
1150--1700[label="1;1pkt 1fpkt"];
1693--1700[label="1;1pkt 1fpkt"];
1693--1901[label="0.285714;2pkt 2fpkt"];
1693--2517[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.229.19" src_ip="212.68.154.5" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_16{
style=filled;
color=gray75;
257[label="133.19.217.5;d;4pkt 4fpkt", shape=diamond, color=yellow];
258[label="209.151.21.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
1434[label="133.19.217.5;d;4pkt 4fpkt", shape=hexagon, color=black];
2346[label="209.151.21.135;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat16[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.170.187.69:31200, 133.19.217.5:4415}[25%]&lt;BR/&gt;{62.82.192.105:1863, 133.19.217.5:4453}[25%]&lt;BR/&gt;{192.170.187.124:31200, 133.19.217.5:4432}[25%]&lt;BR/&gt;{209.151.21.135:9292, 133.19.217.5:1545}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31200: (20%)&lt;BR/&gt; 9292: (20%)&lt;BR/&gt; 1545: (20%)&lt;BR/&gt; 4453: (10%)&lt;BR/&gt; 4432: (10%)&gt;];
}
257--258[label="1;1pkt 1fpkt"];
257--1434[label="1;4pkt 4fpkt"];
257--2346[label="1;1pkt 1fpkt"];
258--1434[label="1;1pkt 1fpkt"];
258--2346[label="1;1pkt 1fpkt"];
1434--2346[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.217.5" dst_port="1545" src_ip="209.151.21.135" src_port="9292"/>
      <filter dst_ip="133.19.217.5" dst_port="4432" src_ip="192.170.187.124" src_port="31200"/>
      <filter dst_ip="133.19.217.5" dst_port="4453" src_ip="62.82.192.105" src_port="1863"/>
      <filter dst_ip="133.19.217.5" dst_port="4415" src_ip="192.170.187.69" src_port="31200"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19342,1.93272,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_17{
style=filled;
color=gray75;
26[label="171.70.136.170s;2pkt 2fpkt", shape=rectangle, color=red];
211[label="200.74.107.180;d;1pkt 1fpkt", shape=diamond, color=yellow];
267[label="114.12.157.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
269[label="171.70.136.170;s;254pkt 254fpkt", shape=diamond, color=yellow];
463[label="201.91.34.223;d;1pkt 1fpkt", shape=diamond, color=yellow];
751[label="85.86.73.46;d;1pkt 1fpkt", shape=diamond, color=yellow];
960[label="195.109.12.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
971[label="195.66.180.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
1436[label="171.70.136.170;s;178pkt 178fpkt", shape=hexagon, color=black];
1505[label="85.86.73.46;d;1pkt 1fpkt", shape=hexagon, color=black];
2468[label="171.70.136.170;255pkt 255fpkt", shape=pentagon, color=darkviolet];
stat17[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.70.136.170:*, *:4662}[50.5882%]&lt;BR/&gt;{171.70.136.170:1025, *:4665}[43.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (25.8621%)&lt;BR/&gt; 4665: (23.9224%)&lt;BR/&gt; 4662: (22.9885%)&lt;BR/&gt; 18200: (0.502874%)&lt;BR/&gt; 4661: (0.431034%)&gt;];
}
26--267[label="1;1pkt 1fpkt"];
26--269[label="1;2pkt 2fpkt"];
26--1436[label="1;2pkt 2fpkt"];
26--1505[label="1;1pkt 1fpkt"];
26--2468[label="1;2pkt 2fpkt"];
211--269[label="1;1pkt 1fpkt"];
211--1436[label="1;1pkt 1fpkt"];
211--2468[label="1;1pkt 1fpkt"];
267--269[label="1;1pkt 1fpkt"];
267--1436[label="1;1pkt 1fpkt"];
267--2468[label="1;1pkt 1fpkt"];
269--463[label="1;1pkt 1fpkt"];
269--751[label="1;1pkt 1fpkt"];
269--960[label="1;1pkt 1fpkt"];
269--971[label="1;1pkt 1fpkt"];
269--1436[label="1;178pkt 178fpkt"];
269--1505[label="1;1pkt 1fpkt"];
269--1877[label="0.745342;120pkt 120fpkt"];
269--2468[label="1;254pkt 254fpkt"];
463--1436[label="1;1pkt 1fpkt"];
463--2468[label="1;1pkt 1fpkt"];
751--2468[label="1;1pkt 1fpkt"];
960--1436[label="1;1pkt 1fpkt"];
960--2468[label="1;1pkt 1fpkt"];
971--2468[label="1;1pkt 1fpkt"];
1436--1505[label="1;1pkt 1fpkt"];
1436--1877[label="0.745342;120pkt 120fpkt"];
1436--2468[label="1;178pkt 178fpkt"];
1505--2468[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="4662" src_ip="171.70.136.170"/>
      <filter dst_port="4665" src_ip="171.70.136.170" src_port="1025"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_18{
style=filled;
color=gray75;
271[label="154.213.86.90;d;1551pkt 1551fpkt", shape=diamond, color=yellow];
272[label="215.114.228.183;s;1324pkt 1324fpkt", shape=diamond, color=yellow];
834[label="157.149.201.52;d;71pkt 71fpkt", shape=diamond, color=yellow];
905[label="157.149.76.45;d;46pkt 46fpkt", shape=diamond, color=yellow];
2510[label="215.114.228.183;1350pkt 1350fpkt", shape=pentagon, color=darkviolet];
3039[label="215.114.228.183;1349pkt 1349fpkt", shape=invtriangle, color=brown];
3307[label="215.114.228.183;1350pkt 1350fpkt", shape=invhouse, color=bisque];
stat18[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.114.228.183:80, 154.213.86.90:*}[74.6487%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4306%)&lt;BR/&gt; 81: (0.837949%)&lt;BR/&gt; 82: (0.73143%)&lt;BR/&gt; 1093: (0.0710126%)&lt;BR/&gt; 1116: (0.0639114%)&gt;];
}
271--272[label="0.944109;1250pkt 1250fpkt"];
271--1797[label="0.101049;106pkt 106fpkt"];
271--1807[label="0.100444;113pkt 113fpkt"];
271--1812[label="0.0940632;122pkt 122fpkt"];
271--1819[label="0.086858;115pkt 115fpkt"];
271--1832[label="0.101049;106pkt 106fpkt"];
271--1843[label="0.100444;113pkt 113fpkt"];
271--1847[label="0.0940632;122pkt 122fpkt"];
271--1855[label="0.086858;115pkt 115fpkt"];
271--1864[label="0.101049;106pkt 106fpkt"];
271--1872[label="0.100444;113pkt 113fpkt"];
271--1876[label="0.0940632;122pkt 122fpkt"];
271--1881[label="0.086858;115pkt 115fpkt"];
271--2510[label="0.925926;1250pkt 1250fpkt"];
271--3039[label="0.926612;1250pkt 1250fpkt"];
271--3307[label="0.925926;1250pkt 1250fpkt"];
272--735[label="0.0126582;2pkt 2fpkt"];
272--834[label="0.309859;22pkt 22fpkt"];
272--905[label="0.826087;38pkt 38fpkt"];
272--1797[label="0.100095;105pkt 105fpkt"];
272--1807[label="0.0977778;110pkt 110fpkt"];
272--1812[label="0.0909792;118pkt 118fpkt"];
272--1819[label="0.0830816;110pkt 110fpkt"];
272--1832[label="0.100095;105pkt 105fpkt"];
272--1843[label="0.0977778;110pkt 110fpkt"];
272--1847[label="0.0909792;118pkt 118fpkt"];
272--1855[label="0.0830816;110pkt 110fpkt"];
272--1864[label="0.100095;105pkt 105fpkt"];
272--1872[label="0.0977778;110pkt 110fpkt"];
272--1876[label="0.0909792;118pkt 118fpkt"];
272--1881[label="0.0830816;110pkt 110fpkt"];
272--2510[label="1;1324pkt 1324fpkt"];
272--3039[label="0.999245;1323pkt 1323fpkt"];
272--3307[label="1;1324pkt 1324fpkt"];
834--1409[label="0.648649;24pkt 24fpkt"];
834--1797[label="0.0422535;3pkt 3fpkt"];
834--1807[label="0.028169;2pkt 2fpkt"];
834--1812[label="0.0704225;5pkt 5fpkt"];
834--1819[label="0.028169;2pkt 2fpkt"];
834--1832[label="0.0422535;3pkt 3fpkt"];
834--1843[label="0.028169;2pkt 2fpkt"];
834--1847[label="0.0704225;5pkt 5fpkt"];
834--1855[label="0.028169;2pkt 2fpkt"];
834--1864[label="0.0422535;3pkt 3fpkt"];
834--1872[label="0.028169;2pkt 2fpkt"];
834--1876[label="0.0704225;5pkt 5fpkt"];
834--1881[label="0.028169;2pkt 2fpkt"];
834--2359[label="0.631579;24pkt 24fpkt"];
834--2510[label="0.309859;22pkt 22fpkt"];
834--3039[label="0.309859;22pkt 22fpkt"];
834--3307[label="0.309859;22pkt 22fpkt"];
905--1409[label="0.216216;8pkt 8fpkt"];
905--1797[label="0.0217391;1pkt 1fpkt"];
905--1807[label="0.0217391;1pkt 1fpkt"];
905--1812[label="0.0217391;1pkt 1fpkt"];
905--1819[label="0.0217391;1pkt 1fpkt"];
905--1832[label="0.0217391;1pkt 1fpkt"];
905--1843[label="0.0217391;1pkt 1fpkt"];
905--1847[label="0.0217391;1pkt 1fpkt"];
905--1855[label="0.0217391;1pkt 1fpkt"];
905--1864[label="0.0217391;1pkt 1fpkt"];
905--1872[label="0.0217391;1pkt 1fpkt"];
905--1876[label="0.0217391;1pkt 1fpkt"];
905--1881[label="0.0217391;1pkt 1fpkt"];
905--2359[label="0.210526;8pkt 8fpkt"];
905--2510[label="0.826087;38pkt 38fpkt"];
905--3039[label="0.826087;38pkt 38fpkt"];
905--3307[label="0.826087;38pkt 38fpkt"];
2510--3039[label="1;1349pkt 1349fpkt"];
2510--3307[label="1;1350pkt 1350fpkt"];
3039--3307[label="1;1349pkt 1349fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.86.90" src_ip="215.114.228.183" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24548,1.91235,901,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_19{
style=filled;
color=gray75;
42[label="171.70.172.233d;2pkt 2fpkt", shape=rectangle, color=red];
151[label="171.70.172.233;d;149pkt 149fpkt", shape=diamond, color=yellow];
274[label="114.202.245.177;s;1pkt 1fpkt", shape=diamond, color=yellow];
338[label="112.8.73.155;s;1pkt 1fpkt", shape=diamond, color=yellow];
492[label="201.226.33.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
540[label="85.72.55.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
546[label="85.182.135.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
736[label="36.128.165.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
817[label="207.9.41.150;s;1pkt 1fpkt", shape=diamond, color=yellow];
867[label="36.82.17.248;s;2pkt 2fpkt", shape=diamond, color=yellow];
910[label="201.125.24.232;s;2pkt 2fpkt", shape=diamond, color=yellow];
1053[label="36.134.24.76;s;1pkt 1fpkt", shape=diamond, color=yellow];
1163[label="36.84.52.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
1331[label="85.182.135.198;s;1pkt 1fpkt", shape=hexagon, color=black];
1375[label="85.72.55.227;s;1pkt 1fpkt", shape=hexagon, color=black];
1508[label="207.9.41.150;s;1pkt 1fpkt", shape=hexagon, color=black];
1671[label="114.202.245.177;s;1pkt 1fpkt", shape=hexagon, color=black];
1928[label="201.226.33.12;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2194[label="207.161.14.85;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2399[label="207.9.41.150;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2488[label="114.202.245.177;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2705[label="36.82.17.248;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2971[label="207.9.41.150;2pkt 2fpkt", shape=invtriangle, color=brown];
stat19[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 171.70.172.233:*}[95.9732%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (48.3333%)&lt;BR/&gt; 4665: (1.38889%)&lt;BR/&gt; 4122: (1.38889%)&lt;BR/&gt; 3319: (1.38889%)&lt;BR/&gt; 4402: (1.11111%)&gt;];
}
42--151[label="1;2pkt 2fpkt"];
42--274[label="1;1pkt 1fpkt"];
42--546[label="1;1pkt 1fpkt"];
42--1331[label="1;1pkt 1fpkt"];
42--1671[label="1;1pkt 1fpkt"];
42--2488[label="1;1pkt 1fpkt"];
151--274[label="1;1pkt 1fpkt"];
151--338[label="1;1pkt 1fpkt"];
151--492[label="1;1pkt 1fpkt"];
151--530[label="1;1pkt 1fpkt"];
151--540[label="1;1pkt 1fpkt"];
151--546[label="1;1pkt 1fpkt"];
151--683[label="1;1pkt 1fpkt"];
151--736[label="1;1pkt 1fpkt"];
151--817[label="1;1pkt 1fpkt"];
151--867[label="1;2pkt 2fpkt"];
151--910[label="1;2pkt 2fpkt"];
151--969[label="1;2pkt 2fpkt"];
151--1053[label="1;1pkt 1fpkt"];
151--1100[label="1;1pkt 1fpkt"];
151--1163[label="1;1pkt 1fpkt"];
151--1331[label="1;1pkt 1fpkt"];
151--1375[label="1;1pkt 1fpkt"];
151--1427[label="1;1pkt 1fpkt"];
151--1508[label="1;1pkt 1fpkt"];
151--1533[label="1;1pkt 1fpkt"];
151--1656[label="1;1pkt 1fpkt"];
151--1671[label="1;1pkt 1fpkt"];
151--1928[label="1;2pkt 2fpkt"];
151--2194[label="1;1pkt 1fpkt"];
151--2207[label="1;2pkt 2fpkt"];
151--2228[label="1;1pkt 1fpkt"];
151--2399[label="1;3pkt 3fpkt"];
151--2488[label="1;1pkt 1fpkt"];
151--2705[label="1;3pkt 3fpkt"];
151--2879[label="1;3pkt 3fpkt"];
151--2971[label="1;2pkt 2fpkt"];
274--1671[label="1;1pkt 1fpkt"];
274--2488[label="1;1pkt 1fpkt"];
546--1331[label="1;1pkt 1fpkt"];
817--2399[label="1;1pkt 1fpkt"];
817--2971[label="1;1pkt 1fpkt"];
867--2705[label="1;2pkt 2fpkt"];
1508--2399[label="1;1pkt 1fpkt"];
1508--2971[label="1;1pkt 1fpkt"];
1671--2488[label="1;1pkt 1fpkt"];
2399--2971[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.172.233" src_port="4662"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16809,2.02023,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_21{
style=filled;
color=gray75;
29[label="124.111.210.193s;140pkt 140fpkt", shape=rectangle, color=red];
199[label="124.111.210.193;s;158pkt 158fpkt", shape=diamond, color=yellow];
316[label="124.111.210.193;d;161pkt 161fpkt", shape=diamond, color=yellow];
stat21[shape=component, label=&lt;Rules:&lt;BR/&gt;{124.111.210.193:13364, 124.111.210.193:*}[91.3043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13364: (46.5142%)&lt;BR/&gt; 0: (3.37691%)&lt;BR/&gt; 13355: (1.30719%)&lt;BR/&gt; 80: (1.30719%)&lt;BR/&gt; 53: (1.30719%)&gt;];
}
29--199[label="1;140pkt 140fpkt"];
29--316[label="1;140pkt 140fpkt"];
29--1814[label="0.00714286;1pkt 1fpkt"];
29--1815[label="0.00714286;1pkt 1fpkt"];
29--1820[label="0.00714286;1pkt 1fpkt"];
29--1822[label="0.0214286;3pkt 3fpkt"];
29--1828[label="0.00714286;1pkt 1fpkt"];
29--1831[label="0.00714286;1pkt 1fpkt"];
29--1849[label="0.00714286;1pkt 1fpkt"];
29--1850[label="0.00714286;1pkt 1fpkt"];
29--1856[label="0.00714286;1pkt 1fpkt"];
29--1860[label="0.00714286;1pkt 1fpkt"];
29--1863[label="0.00714286;1pkt 1fpkt"];
29--1879[label="0.00714286;1pkt 1fpkt"];
29--1882[label="0.00714286;1pkt 1fpkt"];
199--316[label="1;158pkt 158fpkt"];
199--1814[label="0.00632911;1pkt 1fpkt"];
199--1815[label="0.00632911;1pkt 1fpkt"];
199--1820[label="0.00632911;1pkt 1fpkt"];
199--1822[label="0.0189873;3pkt 3fpkt"];
199--1828[label="0.00632911;1pkt 1fpkt"];
199--1831[label="0.00632911;1pkt 1fpkt"];
199--1849[label="0.00632911;1pkt 1fpkt"];
199--1850[label="0.00632911;1pkt 1fpkt"];
199--1856[label="0.00632911;1pkt 1fpkt"];
199--1860[label="0.00632911;1pkt 1fpkt"];
199--1863[label="0.00632911;1pkt 1fpkt"];
199--1879[label="0.00632911;1pkt 1fpkt"];
199--1882[label="0.00632911;1pkt 1fpkt"];
316--1814[label="0.00621118;1pkt 1fpkt"];
316--1815[label="0.00621118;1pkt 1fpkt"];
316--1820[label="0.00621118;1pkt 1fpkt"];
316--1822[label="0.0186335;3pkt 3fpkt"];
316--1828[label="0.00621118;1pkt 1fpkt"];
316--1831[label="0.00621118;1pkt 1fpkt"];
316--1849[label="0.00621118;1pkt 1fpkt"];
316--1850[label="0.00621118;1pkt 1fpkt"];
316--1856[label="0.00621118;1pkt 1fpkt"];
316--1860[label="0.00621118;1pkt 1fpkt"];
316--1863[label="0.00621118;1pkt 1fpkt"];
316--1879[label="0.00621118;1pkt 1fpkt"];
316--1882[label="0.00621118;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="124.111.210.193" src_ip="124.111.210.193" src_port="13364"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22438,1.96931,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_22{
style=filled;
color=gray75;
20[label="154.213.8.125s;2pkt 2fpkt", shape=rectangle, color=red];
297[label="70.97.163.28;d;1pkt 1fpkt", shape=diamond, color=yellow];
317[label="62.193.80.243;d;1pkt 1fpkt", shape=diamond, color=yellow];
437[label="63.46.28.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
495[label="85.85.131.129;d;2pkt 2fpkt", shape=diamond, color=yellow];
632[label="154.213.8.125;s;81pkt 81fpkt", shape=diamond, color=yellow];
818[label="56.164.26.71;d;2pkt 2fpkt", shape=diamond, color=yellow];
1167[label="145.242.224.186;d;2pkt 2fpkt", shape=diamond, color=yellow];
1628[label="85.85.131.129;d;2pkt 2fpkt", shape=hexagon, color=black];
1705[label="56.164.26.71;d;2pkt 2fpkt", shape=hexagon, color=black];
stat22[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.8.125:6257, *:6257}[85.1852%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (77.0833%)&lt;BR/&gt; 6699: (11.4583%)&lt;BR/&gt; 1735: (1.5625%)&lt;BR/&gt; 1675: (1.5625%)&lt;BR/&gt; 1394: (1.5625%)&gt;];
}
20--297[label="1;1pkt 1fpkt"];
20--317[label="1;1pkt 1fpkt"];
20--632[label="1;2pkt 2fpkt"];
297--632[label="1;1pkt 1fpkt"];
317--632[label="1;1pkt 1fpkt"];
437--632[label="1;1pkt 1fpkt"];
495--632[label="1;2pkt 2fpkt"];
495--1628[label="1;2pkt 2fpkt"];
632--760[label="1;2pkt 2fpkt"];
632--818[label="1;2pkt 2fpkt"];
632--1167[label="1;2pkt 2fpkt"];
632--1475[label="1;1pkt 1fpkt"];
632--1628[label="1;2pkt 2fpkt"];
632--1687[label="1;2pkt 2fpkt"];
632--1705[label="1;2pkt 2fpkt"];
632--1862[label="0.17284;14pkt 14fpkt"];
818--1705[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="154.213.8.125" src_port="6257"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_23{
style=filled;
color=gray75;
115[label="154.213.43.78;s;720pkt 720fpkt", shape=diamond, color=yellow];
172[label="60.112.93.245;d;2pkt 2fpkt", shape=diamond, color=yellow];
251[label="207.9.64.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
259[label="70.79.16.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
275[label="205.174.31.237;d;1pkt 1fpkt", shape=diamond, color=yellow];
326[label="70.73.156.43;d;1pkt 1fpkt", shape=diamond, color=yellow];
407[label="85.68.103.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
408[label="85.154.142.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
448[label="85.181.115.243;d;1pkt 1fpkt", shape=diamond, color=yellow];
911[label="154.213.51.139;s;8pkt 8fpkt", shape=diamond, color=yellow];
923[label="85.117.153.78;d;4pkt 4fpkt", shape=diamond, color=yellow];
984[label="209.177.241.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
996[label="114.67.156.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
1285[label="85.181.115.243;d;1pkt 1fpkt", shape=hexagon, color=black];
1301[label="85.68.103.148;d;1pkt 1fpkt", shape=hexagon, color=black];
1302[label="85.154.142.233;d;1pkt 1fpkt", shape=hexagon, color=black];
1435[label="70.79.16.187;d;1pkt 1fpkt", shape=hexagon, color=black];
1521[label="154.213.43.78;s;462pkt 462fpkt", shape=hexagon, color=black];
2169[label="154.213.43.78;727pkt 727fpkt", shape=pentagon, color=darkviolet];
stat23[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.43.78:6257, *:6257}[95.5285%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (95.9969%)&lt;BR/&gt; 6699: (1.44628%)&lt;BR/&gt; 80: (0.232438%)&lt;BR/&gt; 1383: (0.129132%)&lt;BR/&gt; 1213: (0.129132%)&gt;];
}
115--172[label="0.5;1pkt 1fpkt"];
115--251[label="1;1pkt 1fpkt"];
115--259[label="1;1pkt 1fpkt"];
115--275[label="1;1pkt 1fpkt"];
115--326[label="1;1pkt 1fpkt"];
115--407[label="1;1pkt 1fpkt"];
115--408[label="1;1pkt 1fpkt"];
115--448[label="1;1pkt 1fpkt"];
115--923[label="0.25;1pkt 1fpkt"];
115--996[label="1;1pkt 1fpkt"];
115--1285[label="1;1pkt 1fpkt"];
115--1301[label="1;1pkt 1fpkt"];
115--1302[label="1;1pkt 1fpkt"];
115--1435[label="1;1pkt 1fpkt"];
115--1521[label="1;462pkt 462fpkt"];
115--1798[label="0.00277778;2pkt 2fpkt"];
115--1833[label="0.00277778;2pkt 2fpkt"];
115--1862[label="0.0944444;68pkt 68fpkt"];
115--1865[label="0.00277778;2pkt 2fpkt"];
115--2169[label="1;720pkt 720fpkt"];
172--421[label="0.5;1pkt 1fpkt"];
172--1521[label="0.5;1pkt 1fpkt"];
172--2169[label="0.5;1pkt 1fpkt"];
172--2417[label="0.5;1pkt 1fpkt"];
172--2984[label="0.5;1pkt 1fpkt"];
251--1521[label="1;1pkt 1fpkt"];
251--2169[label="1;1pkt 1fpkt"];
259--1435[label="1;1pkt 1fpkt"];
259--1521[label="1;1pkt 1fpkt"];
259--2169[label="1;1pkt 1fpkt"];
275--1521[label="1;1pkt 1fpkt"];
275--2169[label="1;1pkt 1fpkt"];
326--1521[label="1;1pkt 1fpkt"];
326--2169[label="1;1pkt 1fpkt"];
407--1301[label="1;1pkt 1fpkt"];
407--1521[label="1;1pkt 1fpkt"];
407--2169[label="1;1pkt 1fpkt"];
408--1302[label="1;1pkt 1fpkt"];
408--1521[label="1;1pkt 1fpkt"];
408--2169[label="1;1pkt 1fpkt"];
448--1285[label="1;1pkt 1fpkt"];
448--1521[label="1;1pkt 1fpkt"];
448--2169[label="1;1pkt 1fpkt"];
911--923[label="0.25;1pkt 1fpkt"];
911--984[label="1;1pkt 1fpkt"];
923--1521[label="0.25;1pkt 1fpkt"];
923--2169[label="0.25;1pkt 1fpkt"];
923--2417[label="0.25;1pkt 1fpkt"];
923--2984[label="0.25;1pkt 1fpkt"];
996--1521[label="1;1pkt 1fpkt"];
996--2169[label="1;1pkt 1fpkt"];
1285--1521[label="1;1pkt 1fpkt"];
1285--2169[label="1;1pkt 1fpkt"];
1301--1521[label="1;1pkt 1fpkt"];
1301--2169[label="1;1pkt 1fpkt"];
1302--1521[label="1;1pkt 1fpkt"];
1302--2169[label="1;1pkt 1fpkt"];
1435--1521[label="1;1pkt 1fpkt"];
1435--2169[label="1;1pkt 1fpkt"];
1521--1798[label="0.004329;2pkt 2fpkt"];
1521--1833[label="0.004329;2pkt 2fpkt"];
1521--1862[label="0.101732;47pkt 47fpkt"];
1521--1865[label="0.004329;2pkt 2fpkt"];
1521--2169[label="1;462pkt 462fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="154.213.43.78" src_port="6257"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_25{
style=filled;
color=gray75;
288[label="157.149.27.44;d;2pkt 2fpkt", shape=diamond, color=yellow];
342[label="205.42.237.143;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat25[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.42.237.143:6699, 157.149.27.44:2513}[50%]&lt;BR/&gt;{36.84.52.223:6699, 157.149.27.44:2198}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2513: (33.3333%)&lt;BR/&gt; 2198: (16.6667%)&gt;];
}
288--342[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.27.44" dst_port="2198" src_ip="36.84.52.223" src_port="6699"/>
      <filter dst_ip="157.149.27.44" dst_port="2513" src_ip="205.42.237.143" src_port="6699"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,901,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_26{
style=filled;
color=gray75;
343[label="133.19.119.197;d;20pkt 20fpkt", shape=diamond, color=yellow];
371[label="200.242.93.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
932[label="192.143.10.109;s;11pkt 11fpkt", shape=diamond, color=yellow];
1625[label="200.242.93.232;s;1pkt 1fpkt", shape=hexagon, color=black];
1695[label="133.19.119.197;d;20pkt 20fpkt", shape=hexagon, color=black];
2660[label="200.242.93.232;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat26[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.143.10.109:*, 133.19.119.197:1214}[55%]&lt;BR/&gt;{*:80, 133.19.119.197:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (37.037%)&lt;BR/&gt; 80: (9.25926%)&lt;BR/&gt; 62218: (4.62963%)&lt;BR/&gt; 2561: (2.77778%)&lt;BR/&gt; 2558: (2.77778%)&gt;];
}
343--371[label="1;1pkt 1fpkt"];
343--932[label="1;11pkt 11fpkt"];
343--944[label="1;1pkt 1fpkt"];
343--1564[label="1;1pkt 1fpkt"];
343--1625[label="1;1pkt 1fpkt"];
343--1695[label="1;20pkt 20fpkt"];
343--1783[label="1;1pkt 1fpkt"];
343--1901[label="0.1;2pkt 2fpkt"];
343--2026[label="1;1pkt 1fpkt"];
343--2660[label="1;1pkt 1fpkt"];
371--1625[label="1;1pkt 1fpkt"];
371--1695[label="1;1pkt 1fpkt"];
371--2660[label="1;1pkt 1fpkt"];
932--1695[label="1;11pkt 11fpkt"];
1625--1695[label="1;1pkt 1fpkt"];
1625--2660[label="1;1pkt 1fpkt"];
1695--1783[label="1;1pkt 1fpkt"];
1695--1901[label="0.1;2pkt 2fpkt"];
1695--2026[label="1;1pkt 1fpkt"];
1695--2660[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.119.197" src_port="80"/>
      <filter dst_ip="133.19.119.197" dst_port="1214" src_ip="192.143.10.109"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_27{
style=filled;
color=gray75;
76[label="171.70.143.200;d;112pkt 112fpkt", shape=diamond, color=yellow];
78[label="201.28.189.21;s;4pkt 4fpkt", shape=diamond, color=yellow];
487[label="114.128.53.120;s;5pkt 5fpkt", shape=diamond, color=yellow];
694[label="217.77.250.210;s;2pkt 2fpkt", shape=diamond, color=yellow];
741[label="208.198.100.36;s;3pkt 3fpkt", shape=diamond, color=yellow];
800[label="159.245.61.164;s;6pkt 6fpkt", shape=diamond, color=yellow];
801[label="194.36.11.111;s;5pkt 5fpkt", shape=diamond, color=yellow];
929[label="200.128.23.213;s;4pkt 4fpkt", shape=diamond, color=yellow];
937[label="219.164.94.223;s;6pkt 6fpkt", shape=diamond, color=yellow];
1055[label="220.60.127.112;s;3pkt 3fpkt", shape=diamond, color=yellow];
2448[label="159.245.61.164;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2599[label="217.77.250.210;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2607[label="200.128.23.213;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3005[label="159.245.61.164;7pkt 7fpkt", shape=invtriangle, color=brown];
3082[label="217.77.250.210;6pkt 6fpkt", shape=invtriangle, color=brown];
3290[label="159.245.61.164;6pkt 6fpkt", shape=invhouse, color=bisque];
stat27[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:3128, 171.70.143.200:*}[61.0169%]&lt;BR/&gt;{*:8080, 171.70.143.200:*}[33.0508%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (34.7594%)&lt;BR/&gt; 8080: (13.6364%)&lt;BR/&gt; 113: (2.13904%)&lt;BR/&gt; 3179: (1.3369%)&lt;BR/&gt; 3141: (1.3369%)&gt;];
}
76--78[label="1;4pkt 4fpkt"];
76--228[label="1;1pkt 1fpkt"];
76--376[label="1;11pkt 11fpkt"];
76--460[label="0.666667;2pkt 2fpkt"];
76--487[label="0.2;1pkt 1fpkt"];
76--694[label="1;2pkt 2fpkt"];
76--741[label="1;3pkt 3fpkt"];
76--800[label="1;6pkt 6fpkt"];
76--801[label="0.8;4pkt 4fpkt"];
76--929[label="1;4pkt 4fpkt"];
76--937[label="1;6pkt 6fpkt"];
76--1055[label="1;3pkt 3fpkt"];
76--1134[label="1;1pkt 1fpkt"];
76--1571[label="1;8pkt 8fpkt"];
76--1610[label="1;1pkt 1fpkt"];
76--2335[label="1;1pkt 1fpkt"];
76--2448[label="0.833333;5pkt 5fpkt"];
76--2599[label="1;7pkt 7fpkt"];
76--2607[label="1;5pkt 5fpkt"];
76--3005[label="0.857143;6pkt 6fpkt"];
76--3082[label="1;6pkt 6fpkt"];
76--3290[label="0.833333;5pkt 5fpkt"];
694--2599[label="1;2pkt 2fpkt"];
694--3082[label="1;2pkt 2fpkt"];
800--2448[label="0.833333;5pkt 5fpkt"];
800--3005[label="1;6pkt 6fpkt"];
800--3290[label="0.833333;5pkt 5fpkt"];
929--2607[label="1;4pkt 4fpkt"];
2448--3005[label="1;6pkt 6fpkt"];
2448--3290[label="1;6pkt 6fpkt"];
2599--3082[label="1;6pkt 6fpkt"];
3005--3290[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.143.200" src_port="3128"/>
      <filter dst_ip="171.70.143.200" src_port="8080"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_30{
style=filled;
color=gray75;
120[label="133.19.72.146;d;1086pkt 1086fpkt", shape=diamond, color=yellow];
219[label="206.163.33.103;s;1353pkt 1353fpkt", shape=diamond, color=yellow];
406[label="63.73.14.144;s;1pkt 1fpkt", shape=diamond, color=yellow];
710[label="134.232.146.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
945[label="157.149.204.69;d;10pkt 10fpkt", shape=diamond, color=yellow];
1329[label="206.163.33.103;s;1303pkt 1303fpkt", shape=hexagon, color=black];
1394[label="63.73.14.144;s;1pkt 1fpkt", shape=hexagon, color=black];
2149[label="36.35.198.71;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2348[label="60.58.111.135;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat30[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.163.33.103:80, 133.19.72.146:*}[55.7754%]&lt;BR/&gt;{206.163.33.103:80, 157.149.156.140:*}[29.9936%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7354%)&lt;BR/&gt; 6257: (1.7843%)&lt;BR/&gt; 8888: (1.51996%)&lt;BR/&gt; 4444: (0.26434%)&lt;BR/&gt; 7777: (0.237906%)&gt;];
}
120--219[label="0.804788;874pkt 874fpkt"];
120--406[label="1;1pkt 1fpkt"];
120--410[label="1;1pkt 1fpkt"];
120--522[label="1;1pkt 1fpkt"];
120--1320[label="1;1pkt 1fpkt"];
120--1329[label="0.76151;827pkt 827fpkt"];
120--1394[label="1;1pkt 1fpkt"];
120--1397[label="1;1pkt 1fpkt"];
120--1797[label="0.0219256;23pkt 23fpkt"];
120--1807[label="0.0414365;45pkt 45fpkt"];
120--1812[label="0.0561694;61pkt 61fpkt"];
120--1819[label="0.0478821;52pkt 52fpkt"];
120--1832[label="0.0219256;23pkt 23fpkt"];
120--1843[label="0.0414365;45pkt 45fpkt"];
120--1847[label="0.0561694;61pkt 61fpkt"];
120--1855[label="0.0478821;52pkt 52fpkt"];
120--1862[label="0.0294659;32pkt 32fpkt"];
120--1864[label="0.0219256;23pkt 23fpkt"];
120--1872[label="0.0414365;45pkt 45fpkt"];
120--1876[label="0.0561694;61pkt 61fpkt"];
120--1881[label="0.0478821;52pkt 52fpkt"];
120--2080[label="1;2pkt 2fpkt"];
120--2149[label="1;27pkt 27fpkt"];
120--2213[label="0.434783;10pkt 10fpkt"];
120--2348[label="1;1pkt 1fpkt"];
120--2822[label="1;2pkt 2fpkt"];
120--2884[label="0.454545;10pkt 10fpkt"];
120--3229[label="0.434783;10pkt 10fpkt"];
219--945[label="0.8;8pkt 8fpkt"];
219--1329[label="1;1303pkt 1303fpkt"];
219--1797[label="0.115348;121pkt 121fpkt"];
219--1807[label="0.0577778;65pkt 65fpkt"];
219--1812[label="0.0470316;61pkt 61fpkt"];
219--1819[label="0.0392749;52pkt 52fpkt"];
219--1832[label="0.115348;121pkt 121fpkt"];
219--1843[label="0.0577778;65pkt 65fpkt"];
219--1847[label="0.0470316;61pkt 61fpkt"];
219--1855[label="0.0392749;52pkt 52fpkt"];
219--1864[label="0.115348;121pkt 121fpkt"];
219--1872[label="0.0577778;65pkt 65fpkt"];
219--1876[label="0.0470316;61pkt 61fpkt"];
219--1881[label="0.0392749;52pkt 52fpkt"];
406--1394[label="1;1pkt 1fpkt"];
710--945[label="1;1pkt 1fpkt"];
945--1329[label="0.7;7pkt 7fpkt"];
1329--1797[label="0.115348;121pkt 121fpkt"];
1329--1807[label="0.0577778;65pkt 65fpkt"];
1329--1812[label="0.0470316;61pkt 61fpkt"];
1329--1819[label="0.0399079;52pkt 52fpkt"];
1329--1832[label="0.115348;121pkt 121fpkt"];
1329--1843[label="0.0577778;65pkt 65fpkt"];
1329--1847[label="0.0470316;61pkt 61fpkt"];
1329--1855[label="0.0399079;52pkt 52fpkt"];
1329--1864[label="0.115348;121pkt 121fpkt"];
1329--1872[label="0.0577778;65pkt 65fpkt"];
1329--1876[label="0.0470316;61pkt 61fpkt"];
1329--1881[label="0.0399079;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.72.146" src_ip="206.163.33.103" src_port="80"/>
      <filter dst_ip="157.149.156.140" src_ip="206.163.33.103" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_31{
style=filled;
color=gray75;
156[label="154.213.136.69;d;116pkt 116fpkt", shape=diamond, color=yellow];
303[label="60.101.194.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
436[label="85.133.214.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
1312[label="85.133.214.227;s;1pkt 1fpkt", shape=hexagon, color=black];
2155[label="36.231.225.72;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2857[label="36.231.225.72;1pkt 1fpkt", shape=invtriangle, color=brown];
3211[label="36.231.225.72;1pkt 1fpkt", shape=invhouse, color=bisque];
stat31[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 154.213.136.69:6257}[88.7931%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (85.2459%)&lt;BR/&gt; 6699: (6.14754%)&lt;BR/&gt; 1802: (1.63934%)&lt;BR/&gt; 0: (1.63934%)&lt;BR/&gt; 1273: (1.22951%)&gt;];
}
156--303[label="1;1pkt 1fpkt"];
156--415[label="1;1pkt 1fpkt"];
156--436[label="1;1pkt 1fpkt"];
156--450[label="1;1pkt 1fpkt"];
156--587[label="1;1pkt 1fpkt"];
156--877[label="1;2pkt 2fpkt"];
156--1312[label="1;1pkt 1fpkt"];
156--1370[label="1;1pkt 1fpkt"];
156--1477[label="1;1pkt 1fpkt"];
156--1489[label="1;1pkt 1fpkt"];
156--1579[label="1;2pkt 2fpkt"];
156--1862[label="0.508621;59pkt 59fpkt"];
156--2155[label="1;1pkt 1fpkt"];
156--2200[label="1;1pkt 1fpkt"];
156--2857[label="1;1pkt 1fpkt"];
156--3211[label="1;1pkt 1fpkt"];
436--1312[label="1;1pkt 1fpkt"];
2155--2857[label="1;1pkt 1fpkt"];
2155--3211[label="1;1pkt 1fpkt"];
2857--3211[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.136.69" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_32{
style=filled;
color=gray75;
2430[label="193.98.245.158;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat32[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.98.245.158:1074, 209.201.234.248:80}[25%]&lt;BR/&gt;{193.98.245.158:1076, 209.201.234.248:80}[25%]&lt;BR/&gt;{193.98.245.158:1078, 209.201.234.248:80}[25%]&lt;BR/&gt;{193.98.245.158:1080, 209.201.234.248:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1080: (12.5%)&lt;BR/&gt; 1078: (12.5%)&lt;BR/&gt; 1076: (12.5%)&lt;BR/&gt; 1074: (12.5%)&gt;];
}
2430--2994[label="1;3pkt 3fpkt"];
2430--3283[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.201.234.248" dst_port="80" src_ip="193.98.245.158" src_port="1080"/>
      <filter dst_ip="209.201.234.248" dst_port="80" src_ip="193.98.245.158" src_port="1078"/>
      <filter dst_ip="209.201.234.248" dst_port="80" src_ip="193.98.245.158" src_port="1076"/>
      <filter dst_ip="209.201.234.248" dst_port="80" src_ip="193.98.245.158" src_port="1074"/>
    </slice>
    <from sec="1026019288" usec="0"/>
    <to sec="1026019333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.201.230.144"/>
      <from sec="1026018000" usec="0"/>
      <to sec="1026019636" usec="0"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.496475,1.97206,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_34{
style=filled;
color=gray75;
268[label="171.70.136.170;d;78pkt 78fpkt", shape=diamond, color=yellow];
464[label="201.91.34.223;s;1pkt 1fpkt", shape=diamond, color=yellow];
1019[label="195.66.180.158;s;1pkt 1fpkt", shape=diamond, color=yellow];
2634[label="201.91.34.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat34[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 171.70.136.170:*}[73.0769%]&lt;BR/&gt;{*:0, 171.70.136.170:0}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (37.037%)&lt;BR/&gt; 0: (19.7531%)&lt;BR/&gt; 1025: (2.46914%)&lt;BR/&gt; 3365: (1.85185%)&lt;BR/&gt; 3681: (1.23457%)&gt;];
}
268--464[label="1;1pkt 1fpkt"];
268--1019[label="1;1pkt 1fpkt"];
268--2634[label="1;1pkt 1fpkt"];
464--2634[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.136.170" src_port="4662"/>
      <filter dst_ip="171.70.136.170"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.763503,1.93656,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_35{
style=filled;
color=gray75;
474[label="208.67.77.158;s;1pkt 1fpkt", shape=diamond, color=yellow];
475[label="210.163.118.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
1335[label="208.67.77.158;s;1pkt 1fpkt", shape=hexagon, color=black];
1677[label="210.163.118.148;d;1pkt 1fpkt", shape=hexagon, color=black];
2991[label="208.67.77.158;1pkt 1fpkt", shape=invtriangle, color=brown];
stat35[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.67.77.158:3658, 210.163.118.148:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3658: (50%)&gt;];
}
474--475[label="1;1pkt 1fpkt"];
474--1335[label="1;1pkt 1fpkt"];
474--1677[label="1;1pkt 1fpkt"];
474--2991[label="1;1pkt 1fpkt"];
475--1335[label="1;1pkt 1fpkt"];
475--1677[label="1;1pkt 1fpkt"];
475--2991[label="1;1pkt 1fpkt"];
1335--1677[label="1;1pkt 1fpkt"];
1335--2991[label="1;1pkt 1fpkt"];
1677--2991[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.163.118.148" dst_port="6699" src_ip="208.67.77.158" src_port="3658"/>
    </slice>
    <from sec="1026018003" usec="0"/>
    <to sec="1026019640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
482[label="154.19.143.208;s;7pkt 7fpkt", shape=diamond, color=yellow];
483[label="60.64.165.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.19.143.208:*, *:25}[42.8571%]&lt;BR/&gt;{154.19.143.208:*, 204.185.138.242:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25%)&lt;BR/&gt; 2846: (12.5%)&lt;BR/&gt; 22: (12.5%)&lt;BR/&gt; 63447: (6.25%)&lt;BR/&gt; 33242: (6.25%)&gt;];
}
482--483[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.185.138.242" src_ip="154.19.143.208"/>
      <filter dst_port="25" src_ip="154.19.143.208"/>
    </slice>
    <from sec="1026018008" usec="0"/>
    <to sec="1026019612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.496475,1.97206,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_38{
style=filled;
color=gray75;
98[label="171.70.136.106;d;8pkt 8fpkt", shape=diamond, color=yellow];
399[label="204.243.196.200;s;1pkt 1fpkt", shape=diamond, color=yellow];
900[label="62.194.40.133;s;1pkt 1fpkt", shape=diamond, color=yellow];
2578[label="85.140.97.206;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat38[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.237.222.43:6699, 171.70.136.106:*}[22.2222%]&lt;BR/&gt;{*:1214, 171.70.136.106:*}[22.2222%]&lt;BR/&gt;{85.140.97.206:6699, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (33.3333%)&lt;BR/&gt; 1214: (16.6667%)&lt;BR/&gt; 4551: (8.33333%)&lt;BR/&gt; 4518: (8.33333%)&lt;BR/&gt; 4464: (8.33333%)&gt;];
}
98--399[label="1;1pkt 1fpkt"];
98--489[label="1;1pkt 1fpkt"];
98--900[label="1;1pkt 1fpkt"];
98--1546[label="1;1pkt 1fpkt"];
98--2578[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="85.140.97.206" src_port="6699"/>
      <filter dst_ip="171.70.136.106" src_port="1214"/>
      <filter dst_ip="171.70.136.106" src_ip="85.237.222.43" src_port="6699"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
488[label="133.19.216.17;d;178pkt 178fpkt", shape=diamond, color=yellow];
496[label="194.168.88.123;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:27960, 133.19.216.17:27960}[60.6742%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27960: (79.8883%)&lt;BR/&gt; 27961: (5.30726%)&lt;BR/&gt; 27970: (2.23464%)&lt;BR/&gt; 29990: (1.11732%)&lt;BR/&gt; 27969: (1.11732%)&gt;];
}
488--496[label="1;1pkt 1fpkt"];
488--1813[label="0.578652;103pkt 103fpkt"];
488--1848[label="0.578652;103pkt 103fpkt"];
488--1878[label="0.578652;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.216.17" dst_port="27960" src_port="27960"/>
    </slice>
    <from sec="1026018036" usec="0"/>
    <to sec="1026018518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611097,1.9521,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_40{
style=filled;
color=gray75;
313[label="157.149.48.96;d;341pkt 341fpkt", shape=diamond, color=yellow];
811[label="194.44.32.96;s;44pkt 44fpkt", shape=diamond, color=yellow];
2574[label="201.41.95.205;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3073[label="201.41.95.205;14pkt 14fpkt", shape=invtriangle, color=brown];
stat40[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.187.144.61:80, 157.149.48.96:*}[32.1937%]&lt;BR/&gt;{194.44.32.96:80, 157.149.48.96:*}[28.49%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3139: (0.363196%)&lt;BR/&gt; 3137: (0.363196%)&lt;BR/&gt; 3135: (0.363196%)&lt;BR/&gt; 3133: (0.363196%)&gt;];
}
313--480[label="0.00879765;3pkt 3fpkt"];
313--499[label="0.974138;113pkt 113fpkt"];
313--607[label="0.00322581;1pkt 1fpkt"];
313--811[label="0.795455;35pkt 35fpkt"];
313--1511[label="0.00641026;1pkt 1fpkt"];
313--1570[label="0.00890208;3pkt 3fpkt"];
313--1797[label="0.00293255;1pkt 1fpkt"];
313--1807[label="0.167155;57pkt 57fpkt"];
313--1812[label="0.0410557;14pkt 14fpkt"];
313--1819[label="0.058651;20pkt 20fpkt"];
313--1832[label="0.00293255;1pkt 1fpkt"];
313--1843[label="0.167155;57pkt 57fpkt"];
313--1847[label="0.0410557;14pkt 14fpkt"];
313--1855[label="0.058651;20pkt 20fpkt"];
313--1864[label="0.00293255;1pkt 1fpkt"];
313--1872[label="0.167155;57pkt 57fpkt"];
313--1876[label="0.0410557;14pkt 14fpkt"];
313--1881[label="0.058651;20pkt 20fpkt"];
313--2034[label="0.162162;6pkt 6fpkt"];
313--2109[label="0.748344;113pkt 113fpkt"];
313--2223[label="0.833333;90pkt 90fpkt"];
313--2355[label="0.8;4pkt 4fpkt"];
313--2571[label="0.00497512;1pkt 1fpkt"];
313--2574[label="0.928571;13pkt 13fpkt"];
313--2834[label="0.748344;113pkt 113fpkt"];
313--3073[label="0.928571;13pkt 13fpkt"];
811--2223[label="1;44pkt 44fpkt"];
2574--3073[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.48.96" src_ip="205.187.144.61" src_port="80"/>
      <filter dst_ip="157.149.48.96" src_ip="194.44.32.96" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_41{
style=filled;
color=gray75;
367[label="133.19.216.210;s;115pkt 115fpkt", shape=diamond, color=yellow];
503[label="131.27.145.78;d;8pkt 8fpkt", shape=diamond, color=yellow];
759[label="194.138.109.182;d;3pkt 3fpkt", shape=diamond, color=yellow];
1350[label="131.27.145.78;d;8pkt 8fpkt", shape=hexagon, color=black];
1467[label="194.138.109.182;d;3pkt 3fpkt", shape=hexagon, color=black];
2598[label="133.19.216.210;115pkt 115fpkt", shape=pentagon, color=darkviolet];
stat41[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.216.210:*, *:80}[99.1304%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6032%)&lt;BR/&gt; 1470: (0.793651%)&lt;BR/&gt; 1443: (0.793651%)&lt;BR/&gt; 1440: (0.793651%)&lt;BR/&gt; 1427: (0.793651%)&gt;];
}
367--503[label="1;8pkt 8fpkt"];
367--559[label="1;12pkt 12fpkt"];
367--759[label="1;3pkt 3fpkt"];
367--1350[label="1;8pkt 8fpkt"];
367--1467[label="1;3pkt 3fpkt"];
367--1798[label="0.165217;19pkt 19fpkt"];
367--1808[label="0.0347826;4pkt 4fpkt"];
367--1815[label="0.0695652;8pkt 8fpkt"];
367--1820[label="0.243478;28pkt 28fpkt"];
367--1833[label="0.165217;19pkt 19fpkt"];
367--1844[label="0.0347826;4pkt 4fpkt"];
367--1850[label="0.0695652;8pkt 8fpkt"];
367--1856[label="0.243478;28pkt 28fpkt"];
367--1865[label="0.165217;19pkt 19fpkt"];
367--1873[label="0.0347826;4pkt 4fpkt"];
367--1879[label="0.0695652;8pkt 8fpkt"];
367--1882[label="0.243478;28pkt 28fpkt"];
367--2598[label="1;115pkt 115fpkt"];
503--1350[label="1;8pkt 8fpkt"];
503--2598[label="1;8pkt 8fpkt"];
759--1467[label="1;3pkt 3fpkt"];
759--1815[label="0.666667;2pkt 2fpkt"];
759--1820[label="0.666667;2pkt 2fpkt"];
759--1850[label="0.666667;2pkt 2fpkt"];
759--1856[label="0.666667;2pkt 2fpkt"];
759--1879[label="0.666667;2pkt 2fpkt"];
759--1882[label="0.666667;2pkt 2fpkt"];
759--2598[label="1;3pkt 3fpkt"];
1350--2598[label="1;8pkt 8fpkt"];
1467--1815[label="0.666667;2pkt 2fpkt"];
1467--1820[label="0.666667;2pkt 2fpkt"];
1467--1850[label="0.666667;2pkt 2fpkt"];
1467--1856[label="0.666667;2pkt 2fpkt"];
1467--1879[label="0.666667;2pkt 2fpkt"];
1467--1882[label="0.666667;2pkt 2fpkt"];
1467--2598[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.19.216.210"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026018863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="173.138.195.161"/>
      <from sec="1026018000" usec="0"/>
      <to sec="1026019638" usec="0"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="171.17.167.144"/>
      <from sec="1026018000" usec="0"/>
      <to sec="1026019547" usec="0"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_45{
style=filled;
color=gray75;
233[label="62.46.138.129;d;2pkt 2fpkt", shape=diamond, color=yellow];
234[label="209.201.224.92;s;382pkt 382fpkt", shape=diamond, color=yellow];
358[label="205.8.193.195;d;1pkt 1fpkt", shape=diamond, color=yellow];
543[label="209.201.224.93;s;430pkt 430fpkt", shape=diamond, color=yellow];
1539[label="205.8.193.195;d;1pkt 1fpkt", shape=hexagon, color=black];
1584[label="209.201.224.92;s;275pkt 275fpkt", shape=hexagon, color=black];
stat45[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.224.93:0, *:0}[52.9557%]&lt;BR/&gt;{209.201.224.92:0, *:0}[47.0443%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
233--234[label="0.5;1pkt 1fpkt"];
233--543[label="0.5;1pkt 1fpkt"];
233--1584[label="0.5;1pkt 1fpkt"];
234--1584[label="1;275pkt 275fpkt"];
358--543[label="1;1pkt 1fpkt"];
358--1539[label="1;1pkt 1fpkt"];
543--1539[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="209.201.224.93"/>
      <filter src_ip="209.201.224.92"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
542[label="157.149.232.10;s;41pkt 41fpkt", shape=diamond, color=yellow];
545[label="195.20.56.8;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.149.232.10:*, 159.2.96.40:80}[28.5714%]&lt;BR/&gt;{157.149.232.10:*, 159.2.96.45:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.0465%)&lt;BR/&gt; 1024: (5.81395%)&lt;BR/&gt; 53: (5.81395%)&lt;BR/&gt; 1863: (4.65116%)&lt;BR/&gt; 6699: (2.32558%)&gt;];
}
542--545[label="0.5;1pkt 1fpkt"];
542--1004[label="0.0243902;1pkt 1fpkt"];
542--1045[label="0.0243902;1pkt 1fpkt"];
542--1081[label="0.0243902;1pkt 1fpkt"];
542--1626[label="0.0243902;1pkt 1fpkt"];
542--1798[label="0.0731707;3pkt 3fpkt"];
542--1820[label="0.536585;22pkt 22fpkt"];
542--1822[label="0.0731707;3pkt 3fpkt"];
542--1833[label="0.0731707;3pkt 3fpkt"];
542--1856[label="0.536585;22pkt 22fpkt"];
542--1865[label="0.0731707;3pkt 3fpkt"];
542--1882[label="0.536585;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="159.2.96.45" dst_port="80" src_ip="157.149.232.10"/>
      <filter dst_ip="159.2.96.40" dst_port="80" src_ip="157.149.232.10"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
444[label="171.70.143.83;d;10pkt 10fpkt", shape=diamond, color=yellow];
567[label="192.2.176.99;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.2.176.99:5001, 171.70.143.83:*}[20%]&lt;BR/&gt;{192.2.176.120:6001, 171.70.143.83:*}[20%]&lt;BR/&gt;{192.2.176.124:5001, 171.70.143.83:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (29.1667%)&lt;BR/&gt; 6001: (8.33333%)&lt;BR/&gt; 3303: (8.33333%)&lt;BR/&gt; 3285: (8.33333%)&lt;BR/&gt; 7431: (4.16667%)&gt;];
}
444--567[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.143.83" src_ip="192.2.176.124" src_port="5001"/>
      <filter dst_ip="171.70.143.83" src_ip="192.2.176.120" src_port="6001"/>
      <filter dst_ip="171.70.143.83" src_ip="192.2.176.99" src_port="5001"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
126[label="154.213.136.19;s;579pkt 579fpkt", shape=diamond, color=yellow];
265[label="205.10.131.64;d;1pkt 1fpkt", shape=diamond, color=yellow];
300[label="217.9.191.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
455[label="195.238.86.49;d;1pkt 1fpkt", shape=diamond, color=yellow];
461[label="114.67.72.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.136.19:6257, *:6257}[94.8187%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (94.7684%)&lt;BR/&gt; 6699: (2.22985%)&lt;BR/&gt; 4037: (0.171527%)&lt;BR/&gt; 3281: (0.171527%)&lt;BR/&gt; 1066: (0.171527%)&gt;];
}
126--248[label="1;1pkt 1fpkt"];
126--265[label="1;1pkt 1fpkt"];
126--300[label="1;1pkt 1fpkt"];
126--431[label="1;1pkt 1fpkt"];
126--455[label="1;1pkt 1fpkt"];
126--461[label="1;1pkt 1fpkt"];
126--618[label="0.333333;1pkt 1fpkt"];
126--923[label="0.25;1pkt 1fpkt"];
126--979[label="1;1pkt 1fpkt"];
126--1363[label="1;1pkt 1fpkt"];
126--1393[label="1;1pkt 1fpkt"];
126--1582[label="1;1pkt 1fpkt"];
126--1862[label="0.0880829;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="154.213.136.19" src_port="6257"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
127[label="133.19.219.136;d;16pkt 16fpkt", shape=diamond, color=yellow];
184[label="62.2.16.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
631[label="85.149.184.174;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.19.219.136:6346}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 4633: (5.55556%)&lt;BR/&gt; 3052: (5.55556%)&lt;BR/&gt; 61919: (2.77778%)&lt;BR/&gt; 22253: (2.77778%)&gt;];
}
127--184[label="1;1pkt 1fpkt"];
127--631[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.219.136" dst_port="6346"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
167[label="157.149.242.162;d;2pkt 2fpkt", shape=diamond, color=yellow];
293[label="105.58.83.254;s;1pkt 1fpkt", shape=diamond, color=yellow];
634[label="193.82.101.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
1281[label="157.149.242.162;d;2pkt 2fpkt", shape=hexagon, color=black];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.82.101.3:3169, 157.149.242.162:22}[50%]&lt;BR/&gt;{105.58.83.254:15195, 157.149.242.162:22}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 15195: (25%)&lt;BR/&gt; 3169: (25%)&gt;];
}
167--293[label="1;1pkt 1fpkt"];
167--634[label="1;1pkt 1fpkt"];
167--1281[label="1;2pkt 2fpkt"];
293--1281[label="1;1pkt 1fpkt"];
634--1281[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.242.162" dst_port="22" src_ip="105.58.83.254" src_port="15195"/>
      <filter dst_ip="157.149.242.162" dst_port="22" src_ip="193.82.101.3" src_port="3169"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
645[label="192.168.128.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
646[label="171.72.175.109;s;1pkt 1fpkt", shape=diamond, color=yellow];
1447[label="171.72.175.109;s;1pkt 1fpkt", shape=hexagon, color=black];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.72.175.109:4445, 192.168.128.255:4445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4445: (100%)&gt;];
}
645--646[label="1;1pkt 1fpkt"];
645--1447[label="1;1pkt 1fpkt"];
646--1447[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.128.255" dst_port="4445" src_ip="171.72.175.109" src_port="4445"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
454[label="214.138.17.192;s;110pkt 110fpkt", shape=diamond, color=yellow];
647[label="171.70.83.54;d;141pkt 141fpkt", shape=diamond, color=yellow];
1676[label="214.138.17.192;s;108pkt 108fpkt", shape=hexagon, color=black];
2534[label="214.138.17.192;110pkt 110fpkt", shape=pentagon, color=darkviolet];
3057[label="214.138.17.192;109pkt 109fpkt", shape=invtriangle, color=brown];
3321[label="214.138.17.192;109pkt 109fpkt", shape=invhouse, color=bisque];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.138.17.192:*, 171.70.83.54:80}[45.0867%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6172%)&lt;BR/&gt; 1135: (1.38282%)&lt;BR/&gt; 53: (1.38282%)&lt;BR/&gt; 1159: (0.800582%)&lt;BR/&gt; 4965: (0.436681%)&gt;];
}
454--597[label="0.00909091;1pkt 1fpkt"];
454--601[label="0.00909091;1pkt 1fpkt"];
454--647[label="0.709091;78pkt 78fpkt"];
454--997[label="0.00909091;1pkt 1fpkt"];
454--1376[label="0.00909091;1pkt 1fpkt"];
454--1449[label="0.00909091;1pkt 1fpkt"];
454--1648[label="0.00909091;1pkt 1fpkt"];
454--1676[label="1;108pkt 108fpkt"];
454--1798[label="0.118182;13pkt 13fpkt"];
454--1803[label="0.00909091;1pkt 1fpkt"];
454--1808[label="0.0545455;6pkt 6fpkt"];
454--1814[label="0.0181818;2pkt 2fpkt"];
454--1815[label="0.0454545;5pkt 5fpkt"];
454--1820[label="0.00909091;1pkt 1fpkt"];
454--1827[label="0.00909091;1pkt 1fpkt"];
454--1828[label="0.0545455;6pkt 6fpkt"];
454--1833[label="0.118182;13pkt 13fpkt"];
454--1838[label="0.00909091;1pkt 1fpkt"];
454--1844[label="0.0545455;6pkt 6fpkt"];
454--1849[label="0.0181818;2pkt 2fpkt"];
454--1850[label="0.0454545;5pkt 5fpkt"];
454--1856[label="0.00909091;1pkt 1fpkt"];
454--1859[label="0.00909091;1pkt 1fpkt"];
454--1860[label="0.0545455;6pkt 6fpkt"];
454--1865[label="0.118182;13pkt 13fpkt"];
454--1868[label="0.00909091;1pkt 1fpkt"];
454--1873[label="0.0545455;6pkt 6fpkt"];
454--1879[label="0.0454545;5pkt 5fpkt"];
454--1882[label="0.00909091;1pkt 1fpkt"];
454--2534[label="1;110pkt 110fpkt"];
454--3057[label="1;109pkt 109fpkt"];
454--3321[label="1;109pkt 109fpkt"];
647--1676[label="0.722222;78pkt 78fpkt"];
647--1798[label="0.0496454;7pkt 7fpkt"];
647--1808[label="0.0425532;6pkt 6fpkt"];
647--1815[label="0.035461;5pkt 5fpkt"];
647--1820[label="0.0141844;2pkt 2fpkt"];
647--1822[label="0.0070922;1pkt 1fpkt"];
647--1833[label="0.0496454;7pkt 7fpkt"];
647--1844[label="0.0425532;6pkt 6fpkt"];
647--1850[label="0.035461;5pkt 5fpkt"];
647--1856[label="0.0141844;2pkt 2fpkt"];
647--1865[label="0.0496454;7pkt 7fpkt"];
647--1873[label="0.0425532;6pkt 6fpkt"];
647--1879[label="0.035461;5pkt 5fpkt"];
647--1882[label="0.0141844;2pkt 2fpkt"];
647--2534[label="0.709091;78pkt 78fpkt"];
647--3057[label="0.706422;77pkt 77fpkt"];
647--3321[label="0.706422;77pkt 77fpkt"];
1676--1798[label="0.12037;13pkt 13fpkt"];
1676--1803[label="0.00925926;1pkt 1fpkt"];
1676--1808[label="0.0555556;6pkt 6fpkt"];
1676--1814[label="0.0185185;2pkt 2fpkt"];
1676--1815[label="0.0462963;5pkt 5fpkt"];
1676--1820[label="0.00925926;1pkt 1fpkt"];
1676--1827[label="0.00925926;1pkt 1fpkt"];
1676--1828[label="0.0555556;6pkt 6fpkt"];
1676--1833[label="0.12037;13pkt 13fpkt"];
1676--1838[label="0.00925926;1pkt 1fpkt"];
1676--1844[label="0.0555556;6pkt 6fpkt"];
1676--1849[label="0.0185185;2pkt 2fpkt"];
1676--1850[label="0.0462963;5pkt 5fpkt"];
1676--1856[label="0.00925926;1pkt 1fpkt"];
1676--1859[label="0.00925926;1pkt 1fpkt"];
1676--1860[label="0.0555556;6pkt 6fpkt"];
1676--1865[label="0.12037;13pkt 13fpkt"];
1676--1868[label="0.00925926;1pkt 1fpkt"];
1676--1873[label="0.0555556;6pkt 6fpkt"];
1676--1879[label="0.0462963;5pkt 5fpkt"];
1676--1882[label="0.00925926;1pkt 1fpkt"];
1676--2534[label="1;108pkt 108fpkt"];
1676--3057[label="0.990741;107pkt 107fpkt"];
1676--3321[label="0.990741;107pkt 107fpkt"];
2534--3057[label="1;109pkt 109fpkt"];
2534--3321[label="1;109pkt 109fpkt"];
3057--3321[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.83.54" dst_port="80" src_ip="214.138.17.192"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.712811,1.89934,501,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
619[label="200.94.199.4;d;13pkt 13fpkt", shape=diamond, color=yellow];
742[label="200.21.114.170;d;8pkt 8fpkt", shape=diamond, color=yellow];
794[label="209.201.230.214;s;8pkt 8fpkt", shape=diamond, color=yellow];
802[label="157.149.192.186;s;21pkt 21fpkt", shape=diamond, color=yellow];
1548[label="200.21.114.170;d;8pkt 8fpkt", shape=hexagon, color=black];
1551[label="157.149.192.186;s;21pkt 21fpkt", shape=hexagon, color=black];
1605[label="209.201.230.214;s;8pkt 8fpkt", shape=hexagon, color=black];
2519[label="157.149.192.186;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3045[label="157.149.192.186;22pkt 22fpkt", shape=invtriangle, color=brown];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:21, 200.94.199.4:*}[27.2727%]&lt;BR/&gt;{209.201.230.214:21, *:*}[24.2424%]&lt;BR/&gt;{157.149.192.186:*, 200.94.199.4:*}[24.2424%]&lt;BR/&gt;{*:*, 200.21.114.170:*}[24.2424%]&lt;BR/&gt;{157.149.192.186:3630, *:53}[21.2121%]&lt;BR/&gt;{157.149.192.186:*, *:113}[21.2121%]&lt;BR/&gt;{157.149.192.186:21, *:*}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (24.8092%)&lt;BR/&gt; 113: (13.7405%)&lt;BR/&gt; 53: (11.4504%)&lt;BR/&gt; 3630: (9.92366%)&lt;BR/&gt; 4458: (2.29008%)&gt;];
}
619--655[label="0.0769231;1pkt 1fpkt"];
619--794[label="0.5;4pkt 4fpkt"];
619--802[label="0.615385;8pkt 8fpkt"];
619--1551[label="0.615385;8pkt 8fpkt"];
619--1605[label="0.5;4pkt 4fpkt"];
619--2235[label="0.0769231;1pkt 1fpkt"];
619--2519[label="0.615385;8pkt 8fpkt"];
619--3045[label="0.615385;8pkt 8fpkt"];
742--794[label="0.25;2pkt 2fpkt"];
742--802[label="0.5;4pkt 4fpkt"];
742--1548[label="1;8pkt 8fpkt"];
742--1551[label="0.5;4pkt 4fpkt"];
742--1605[label="0.25;2pkt 2fpkt"];
742--2519[label="0.5;4pkt 4fpkt"];
742--3045[label="0.5;4pkt 4fpkt"];
794--1548[label="0.25;2pkt 2fpkt"];
794--1605[label="1;8pkt 8fpkt"];
802--1548[label="0.5;4pkt 4fpkt"];
802--1551[label="1;21pkt 21fpkt"];
802--1818[label="0.047619;1pkt 1fpkt"];
802--1854[label="0.047619;1pkt 1fpkt"];
802--2519[label="1;21pkt 21fpkt"];
802--3045[label="1;21pkt 21fpkt"];
1548--1551[label="0.5;4pkt 4fpkt"];
1548--1605[label="0.25;2pkt 2fpkt"];
1548--2519[label="0.5;4pkt 4fpkt"];
1548--3045[label="0.5;4pkt 4fpkt"];
1551--1818[label="0.047619;1pkt 1fpkt"];
1551--1854[label="0.047619;1pkt 1fpkt"];
1551--2519[label="1;21pkt 21fpkt"];
1551--3045[label="1;21pkt 21fpkt"];
2519--3045[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="200.21.114.170"/>
      <filter dst_ip="200.94.199.4" src_ip="157.149.192.186"/>
      <filter src_ip="157.149.192.186" src_port="21"/>
      <filter dst_port="113" src_ip="157.149.192.186"/>
      <filter src_ip="209.201.230.214" src_port="21"/>
      <filter dst_ip="200.94.199.4" src_port="21"/>
      <filter dst_port="53" src_ip="157.149.192.186" src_port="3630"/>
    </slice>
    <from sec="1026018072" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
662[label="205.58.183.46;d;1pkt 1fpkt", shape=diamond, color=yellow];
663[label="133.19.186.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
1421[label="205.58.183.46;d;1pkt 1fpkt", shape=hexagon, color=black];
1542[label="133.19.186.3;s;1pkt 1fpkt", shape=hexagon, color=black];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.186.3:0, 205.58.183.46:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
662--663[label="1;1pkt 1fpkt"];
662--1421[label="1;1pkt 1fpkt"];
662--1542[label="1;1pkt 1fpkt"];
663--1421[label="1;1pkt 1fpkt"];
663--1542[label="1;1pkt 1fpkt"];
1421--1542[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.58.183.46" src_ip="133.19.186.3"/>
    </slice>
    <from sec="1026018003" usec="0"/>
    <to sec="1026019637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24548,1.91235,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
37[label="171.70.172.233s;265pkt 265fpkt", shape=rectangle, color=red];
152[label="171.70.172.233;s;341pkt 341fpkt", shape=diamond, color=yellow];
218[label="195.18.118.121;d;1pkt 1fpkt", shape=diamond, color=yellow];
292[label="195.22.108.241;d;7pkt 7fpkt", shape=diamond, color=yellow];
348[label="85.72.55.227;d;1pkt 1fpkt", shape=diamond, color=yellow];
360[label="195.107.215.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
363[label="85.182.135.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
370[label="36.54.32.180;d;1pkt 1fpkt", shape=diamond, color=yellow];
387[label="195.155.49.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
416[label="114.202.245.177;d;1pkt 1fpkt", shape=diamond, color=yellow];
467[label="36.45.85.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
491[label="201.226.33.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
532[label="36.36.141.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
593[label="195.23.106.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
611[label="36.128.165.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
621[label="195.148.172.85;d;1pkt 1fpkt", shape=diamond, color=yellow];
622[label="217.12.10.181;d;1pkt 1fpkt", shape=diamond, color=yellow];
673[label="159.45.180.245;d;2pkt 2fpkt", shape=diamond, color=yellow];
682[label="207.177.160.108;d;1pkt 1fpkt", shape=diamond, color=yellow];
792[label="201.125.24.232;d;2pkt 2fpkt", shape=diamond, color=yellow];
810[label="36.82.17.248;d;2pkt 2fpkt", shape=diamond, color=yellow];
814[label="36.128.149.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
816[label="207.9.41.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
868[label="195.23.2.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
872[label="200.181.137.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
931[label="195.27.40.122;d;1pkt 1fpkt", shape=diamond, color=yellow];
933[label="201.37.3.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
963[label="36.134.24.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
968[label="201.228.23.98;d;2pkt 2fpkt", shape=diamond, color=yellow];
1105[label="195.149.19.32;d;2pkt 2fpkt", shape=diamond, color=yellow];
1108[label="36.84.52.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
1159[label="85.12.95.100;d;1pkt 1fpkt", shape=diamond, color=yellow];
1169[label="201.192.35.149;d;1pkt 1fpkt", shape=diamond, color=yellow];
1239[label="112.90.53.61;d;1pkt 1fpkt", shape=diamond, color=yellow];
1240[label="195.27.106.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
1271[label="195.107.215.11;d;1pkt 1fpkt", shape=hexagon, color=black];
1384[label="195.148.172.85;d;1pkt 1fpkt", shape=hexagon, color=black];
1458[label="195.155.49.148;d;1pkt 1fpkt", shape=hexagon, color=black];
1461[label="159.45.180.245;d;2pkt 2fpkt", shape=hexagon, color=black];
1480[label="195.22.108.241;d;7pkt 7fpkt", shape=hexagon, color=black];
1494[label="36.45.85.162;d;1pkt 1fpkt", shape=hexagon, color=black];
1501[label="36.128.165.52;d;1pkt 1fpkt", shape=hexagon, color=black];
1507[label="36.128.149.193;d;2pkt 2fpkt", shape=hexagon, color=black];
1514[label="195.23.2.87;d;1pkt 1fpkt", shape=hexagon, color=black];
1515[label="207.9.41.150;d;1pkt 1fpkt", shape=hexagon, color=black];
1540[label="85.182.135.198;d;1pkt 1fpkt", shape=hexagon, color=black];
1661[label="36.84.52.11;d;2pkt 2fpkt", shape=hexagon, color=black];
1670[label="114.202.245.177;d;1pkt 1fpkt", shape=hexagon, color=black];
1689[label="195.149.19.32;d;2pkt 2fpkt", shape=hexagon, color=black];
1733[label="85.72.55.227;d;1pkt 1fpkt", shape=hexagon, color=black];
2663[label="171.70.172.233;343pkt 343fpkt", shape=pentagon, color=darkviolet];
3112[label="171.70.172.233;344pkt 344fpkt", shape=invtriangle, color=brown];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.70.172.233:*, *:4662}[81.1047%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (42.6946%)&lt;BR/&gt; 3319: (6.4978%)&lt;BR/&gt; 4665: (5.61674%)&lt;BR/&gt; 4227: (0.256975%)&lt;BR/&gt; 4652: (0.220264%)&gt;];
}
37--152[label="1;265pkt 265fpkt"];
37--218[label="1;1pkt 1fpkt"];
37--292[label="1;7pkt 7fpkt"];
37--348[label="1;1pkt 1fpkt"];
37--363[label="1;1pkt 1fpkt"];
37--370[label="1;1pkt 1fpkt"];
37--387[label="1;1pkt 1fpkt"];
37--416[label="1;1pkt 1fpkt"];
37--467[label="1;1pkt 1fpkt"];
37--491[label="1;1pkt 1fpkt"];
37--532[label="1;1pkt 1fpkt"];
37--593[label="1;1pkt 1fpkt"];
37--611[label="1;1pkt 1fpkt"];
37--621[label="1;1pkt 1fpkt"];
37--622[label="1;1pkt 1fpkt"];
37--673[label="1;2pkt 2fpkt"];
37--682[label="1;1pkt 1fpkt"];
37--792[label="1;2pkt 2fpkt"];
37--810[label="1;2pkt 2fpkt"];
37--814[label="1;1pkt 1fpkt"];
37--816[label="1;1pkt 1fpkt"];
37--872[label="1;1pkt 1fpkt"];
37--931[label="1;1pkt 1fpkt"];
37--933[label="1;1pkt 1fpkt"];
37--963[label="1;1pkt 1fpkt"];
37--968[label="1;2pkt 2fpkt"];
37--1105[label="1;2pkt 2fpkt"];
37--1108[label="1;1pkt 1fpkt"];
37--1159[label="1;1pkt 1fpkt"];
37--1169[label="1;1pkt 1fpkt"];
37--1239[label="1;1pkt 1fpkt"];
37--1240[label="1;1pkt 1fpkt"];
37--1384[label="1;1pkt 1fpkt"];
37--1458[label="1;1pkt 1fpkt"];
37--1461[label="1;2pkt 2fpkt"];
37--1480[label="1;7pkt 7fpkt"];
37--1494[label="1;1pkt 1fpkt"];
37--1501[label="1;1pkt 1fpkt"];
37--1507[label="1;2pkt 2fpkt"];
37--1515[label="1;1pkt 1fpkt"];
37--1540[label="1;1pkt 1fpkt"];
37--1661[label="1;2pkt 2fpkt"];
37--1670[label="1;1pkt 1fpkt"];
37--1689[label="1;2pkt 2fpkt"];
37--1733[label="1;1pkt 1fpkt"];
37--2663[label="0.996226;264pkt 264fpkt"];
37--3112[label="1;265pkt 265fpkt"];
152--218[label="1;1pkt 1fpkt"];
152--292[label="1;7pkt 7fpkt"];
152--348[label="1;1pkt 1fpkt"];
152--360[label="1;1pkt 1fpkt"];
152--363[label="1;1pkt 1fpkt"];
152--370[label="1;1pkt 1fpkt"];
152--387[label="1;1pkt 1fpkt"];
152--416[label="1;1pkt 1fpkt"];
152--467[label="1;1pkt 1fpkt"];
152--491[label="1;1pkt 1fpkt"];
152--532[label="1;1pkt 1fpkt"];
152--593[label="1;1pkt 1fpkt"];
152--611[label="1;1pkt 1fpkt"];
152--621[label="1;1pkt 1fpkt"];
152--622[label="1;1pkt 1fpkt"];
152--673[label="1;2pkt 2fpkt"];
152--682[label="1;1pkt 1fpkt"];
152--792[label="1;2pkt 2fpkt"];
152--810[label="1;2pkt 2fpkt"];
152--814[label="1;1pkt 1fpkt"];
152--816[label="1;1pkt 1fpkt"];
152--868[label="1;1pkt 1fpkt"];
152--872[label="1;1pkt 1fpkt"];
152--931[label="1;1pkt 1fpkt"];
152--933[label="1;1pkt 1fpkt"];
152--963[label="1;1pkt 1fpkt"];
152--968[label="1;2pkt 2fpkt"];
152--1105[label="1;2pkt 2fpkt"];
152--1108[label="1;1pkt 1fpkt"];
152--1159[label="1;1pkt 1fpkt"];
152--1169[label="1;1pkt 1fpkt"];
152--1239[label="1;1pkt 1fpkt"];
152--1240[label="1;1pkt 1fpkt"];
152--1271[label="1;1pkt 1fpkt"];
152--1384[label="1;1pkt 1fpkt"];
152--1458[label="1;1pkt 1fpkt"];
152--1461[label="1;2pkt 2fpkt"];
152--1480[label="1;7pkt 7fpkt"];
152--1494[label="1;1pkt 1fpkt"];
152--1501[label="1;1pkt 1fpkt"];
152--1507[label="1;2pkt 2fpkt"];
152--1514[label="1;1pkt 1fpkt"];
152--1515[label="1;1pkt 1fpkt"];
152--1540[label="1;1pkt 1fpkt"];
152--1661[label="1;2pkt 2fpkt"];
152--1670[label="1;1pkt 1fpkt"];
152--1689[label="1;2pkt 2fpkt"];
152--1733[label="1;1pkt 1fpkt"];
152--2663[label="0.997067;340pkt 340fpkt"];
152--3112[label="1;341pkt 341fpkt"];
218--2663[label="1;1pkt 1fpkt"];
218--3112[label="1;1pkt 1fpkt"];
292--1480[label="1;7pkt 7fpkt"];
292--2663[label="1;7pkt 7fpkt"];
292--3112[label="1;7pkt 7fpkt"];
348--1733[label="1;1pkt 1fpkt"];
348--2663[label="1;1pkt 1fpkt"];
348--3112[label="1;1pkt 1fpkt"];
360--1271[label="1;1pkt 1fpkt"];
360--2663[label="1;1pkt 1fpkt"];
360--3112[label="1;1pkt 1fpkt"];
363--1540[label="1;1pkt 1fpkt"];
363--2663[label="1;1pkt 1fpkt"];
363--3112[label="1;1pkt 1fpkt"];
370--2663[label="1;1pkt 1fpkt"];
370--3112[label="1;1pkt 1fpkt"];
387--1458[label="1;1pkt 1fpkt"];
387--2663[label="1;1pkt 1fpkt"];
387--3112[label="1;1pkt 1fpkt"];
416--1670[label="1;1pkt 1fpkt"];
416--2663[label="1;1pkt 1fpkt"];
416--3112[label="1;1pkt 1fpkt"];
467--2663[label="1;1pkt 1fpkt"];
467--3112[label="1;1pkt 1fpkt"];
491--2663[label="1;1pkt 1fpkt"];
491--3112[label="1;1pkt 1fpkt"];
532--2663[label="1;1pkt 1fpkt"];
532--3112[label="1;1pkt 1fpkt"];
593--2663[label="1;1pkt 1fpkt"];
593--3112[label="1;1pkt 1fpkt"];
611--1501[label="1;1pkt 1fpkt"];
611--2663[label="1;1pkt 1fpkt"];
611--3112[label="1;1pkt 1fpkt"];
621--1384[label="1;1pkt 1fpkt"];
621--2663[label="1;1pkt 1fpkt"];
621--3112[label="1;1pkt 1fpkt"];
622--2663[label="1;1pkt 1fpkt"];
622--3112[label="1;1pkt 1fpkt"];
673--2663[label="1;2pkt 2fpkt"];
673--3112[label="1;2pkt 2fpkt"];
682--2663[label="1;1pkt 1fpkt"];
682--3112[label="1;1pkt 1fpkt"];
792--2663[label="1;2pkt 2fpkt"];
792--3112[label="1;2pkt 2fpkt"];
810--2663[label="1;2pkt 2fpkt"];
810--3112[label="1;2pkt 2fpkt"];
814--1507[label="1;1pkt 1fpkt"];
814--2663[label="1;1pkt 1fpkt"];
814--3112[label="1;1pkt 1fpkt"];
816--2663[label="1;1pkt 1fpkt"];
816--3112[label="1;1pkt 1fpkt"];
868--1514[label="1;1pkt 1fpkt"];
868--2663[label="1;1pkt 1fpkt"];
868--3112[label="1;1pkt 1fpkt"];
872--2663[label="1;1pkt 1fpkt"];
872--3112[label="1;1pkt 1fpkt"];
931--2663[label="1;1pkt 1fpkt"];
931--3112[label="1;1pkt 1fpkt"];
933--2663[label="1;1pkt 1fpkt"];
933--3112[label="1;1pkt 1fpkt"];
963--2663[label="1;1pkt 1fpkt"];
963--3112[label="1;1pkt 1fpkt"];
968--2663[label="1;2pkt 2fpkt"];
968--3112[label="1;2pkt 2fpkt"];
1105--1689[label="1;2pkt 2fpkt"];
1105--2663[label="1;2pkt 2fpkt"];
1105--3112[label="1;2pkt 2fpkt"];
1108--1661[label="1;1pkt 1fpkt"];
1108--2663[label="1;1pkt 1fpkt"];
1108--3112[label="1;1pkt 1fpkt"];
1159--2663[label="1;1pkt 1fpkt"];
1159--3112[label="1;1pkt 1fpkt"];
1169--2663[label="1;1pkt 1fpkt"];
1169--3112[label="1;1pkt 1fpkt"];
1239--2663[label="1;1pkt 1fpkt"];
1239--3112[label="1;1pkt 1fpkt"];
1240--2663[label="1;1pkt 1fpkt"];
1240--3112[label="1;1pkt 1fpkt"];
1271--2663[label="1;1pkt 1fpkt"];
1271--3112[label="1;1pkt 1fpkt"];
1384--2663[label="1;1pkt 1fpkt"];
1384--3112[label="1;1pkt 1fpkt"];
1458--2663[label="1;1pkt 1fpkt"];
1458--3112[label="1;1pkt 1fpkt"];
1461--2663[label="1;2pkt 2fpkt"];
1461--3112[label="1;2pkt 2fpkt"];
1480--2663[label="1;7pkt 7fpkt"];
1480--3112[label="1;7pkt 7fpkt"];
1494--2663[label="1;1pkt 1fpkt"];
1494--3112[label="1;1pkt 1fpkt"];
1501--2663[label="1;1pkt 1fpkt"];
1501--3112[label="1;1pkt 1fpkt"];
1507--2663[label="1;2pkt 2fpkt"];
1507--3112[label="1;2pkt 2fpkt"];
1514--2663[label="1;1pkt 1fpkt"];
1514--3112[label="1;1pkt 1fpkt"];
1515--2663[label="1;1pkt 1fpkt"];
1515--3112[label="1;1pkt 1fpkt"];
1540--2663[label="1;1pkt 1fpkt"];
1540--3112[label="1;1pkt 1fpkt"];
1661--2663[label="1;2pkt 2fpkt"];
1661--3112[label="1;2pkt 2fpkt"];
1670--2663[label="1;1pkt 1fpkt"];
1670--3112[label="1;1pkt 1fpkt"];
1689--2663[label="1;2pkt 2fpkt"];
1689--3112[label="1;2pkt 2fpkt"];
1733--2663[label="1;1pkt 1fpkt"];
1733--3112[label="1;1pkt 1fpkt"];
2663--3112[label="1;343pkt 343fpkt"];
</description>
    <slice>
      <filter dst_port="4662" src_ip="171.70.172.233"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="112.189.166.117"/>
      <from sec="1026018001" usec="0"/>
      <to sec="1026019638" usec="0"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.763503,1.93656,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
790[label="154.213.137.138;s;2pkt 2fpkt", shape=diamond, color=yellow];
793[label="160.131.80.31;d;1pkt 1fpkt", shape=diamond, color=yellow];
1573[label="154.213.137.138;s;2pkt 2fpkt", shape=hexagon, color=black];
2955[label="154.213.137.138;1pkt 1fpkt", shape=invtriangle, color=brown];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.137.138:54262, 160.131.80.31:6699}[50%]&lt;BR/&gt;{154.213.137.138:53509, 115.162.136.135:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 54262: (33.3333%)&lt;BR/&gt; 53509: (16.6667%)&gt;];
}
790--793[label="1;1pkt 1fpkt"];
790--1573[label="1;2pkt 2fpkt"];
790--2955[label="1;1pkt 1fpkt"];
793--1573[label="1;1pkt 1fpkt"];
793--2955[label="1;1pkt 1fpkt"];
1573--2955[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="115.162.136.135" dst_port="6699" src_ip="154.213.137.138" src_port="53509"/>
      <filter dst_ip="160.131.80.31" dst_port="6699" src_ip="154.213.137.138" src_port="54262"/>
    </slice>
    <from sec="1026018015" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22438,1.96931,501,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
4[label="208.132.172.40s;1pkt 1fpkt", shape=rectangle, color=red];
750[label="133.19.217.171;d;47pkt 47fpkt", shape=diamond, color=yellow];
815[label="208.132.172.40;s;15pkt 15fpkt", shape=diamond, color=yellow];
1556[label="208.132.172.40;s;13pkt 13fpkt", shape=hexagon, color=black];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{112.189.166.161:80, 133.19.217.171:*}[27.6596%]&lt;BR/&gt;{208.132.172.40:21, 133.19.217.171:*}[25.5319%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (22.3684%)&lt;BR/&gt; 80: (19.0789%)&lt;BR/&gt; 2740: (2.63158%)&lt;BR/&gt; 1085: (2.63158%)&lt;BR/&gt; 3127: (1.97368%)&gt;];
}
4--750[label="1;1pkt 1fpkt"];
4--815[label="1;1pkt 1fpkt"];
4--1556[label="1;1pkt 1fpkt"];
750--815[label="1;15pkt 15fpkt"];
750--1556[label="1;13pkt 13fpkt"];
750--1812[label="0.0638298;3pkt 3fpkt"];
750--1819[label="0.234043;11pkt 11fpkt"];
750--1847[label="0.0638298;3pkt 3fpkt"];
750--1855[label="0.234043;11pkt 11fpkt"];
750--1876[label="0.0638298;3pkt 3fpkt"];
750--1881[label="0.234043;11pkt 11fpkt"];
815--1556[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.217.171" src_ip="208.132.172.40" src_port="21"/>
      <filter dst_ip="133.19.217.171" src_ip="112.189.166.161" src_port="80"/>
    </slice>
    <from sec="1026018415" usec="0"/>
    <to sec="1026019023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
181[label="208.67.144.173;d;305pkt 305fpkt", shape=diamond, color=yellow];
829[label="208.136.101.96;s;6pkt 6fpkt", shape=diamond, color=yellow];
1148[label="214.162.151.0;s;59pkt 59fpkt", shape=diamond, color=yellow];
1886[label="214.162.151.0;59pkt 59fpkt", shape=pentagon, color=darkviolet];
2020[label="214.162.151.35;26pkt 26fpkt", shape=pentagon, color=darkviolet];
2397[label="112.184.6.150;64pkt 64fpkt", shape=pentagon, color=darkviolet];
2400[label="158.92.0.151;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2410[label="112.184.6.153;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2642[label="112.184.6.226;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2675[label="112.184.6.237;139pkt 139fpkt", shape=pentagon, color=darkviolet];
2721[label="214.162.151.0;59pkt 59fpkt", shape=invtriangle, color=brown];
2793[label="214.162.151.35;26pkt 26fpkt", shape=invtriangle, color=brown];
2972[label="158.92.0.151;24pkt 24fpkt", shape=invtriangle, color=brown];
3181[label="214.162.151.35;25pkt 25fpkt", shape=invhouse, color=bisque];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 208.67.144.173:*}[40.669%]&lt;BR/&gt;{112.184.6.237:80, 133.19.169.138:*}[22.007%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.1923%)&lt;BR/&gt; 8004: (4.02644%)&lt;BR/&gt; 8001: (0.721154%)&lt;BR/&gt; 1148: (0.300481%)&lt;BR/&gt; 2672: (0.240385%)&gt;];
}
181--296[label="1;1pkt 1fpkt"];
181--373[label="1;35pkt 35fpkt"];
181--586[label="1;67pkt 67fpkt"];
181--829[label="1;6pkt 6fpkt"];
181--1148[label="0.0508475;3pkt 3fpkt"];
181--1337[label="1;35pkt 35fpkt"];
181--1441[label="1;47pkt 47fpkt"];
181--1797[label="0.095082;29pkt 29fpkt"];
181--1807[label="0.0229508;7pkt 7fpkt"];
181--1812[label="0.0295082;9pkt 9fpkt"];
181--1819[label="0.042623;13pkt 13fpkt"];
181--1832[label="0.095082;29pkt 29fpkt"];
181--1843[label="0.0229508;7pkt 7fpkt"];
181--1847[label="0.0295082;9pkt 9fpkt"];
181--1855[label="0.042623;13pkt 13fpkt"];
181--1864[label="0.095082;29pkt 29fpkt"];
181--1872[label="0.0229508;7pkt 7fpkt"];
181--1876[label="0.0295082;9pkt 9fpkt"];
181--1881[label="0.042623;13pkt 13fpkt"];
181--1886[label="0.0508475;3pkt 3fpkt"];
181--2014[label="1;35pkt 35fpkt"];
181--2020[label="0.153846;4pkt 4fpkt"];
181--2397[label="0.21875;14pkt 14fpkt"];
181--2400[label="1;25pkt 25fpkt"];
181--2410[label="0.2;2pkt 2fpkt"];
181--2642[label="0.8;4pkt 4fpkt"];
181--2675[label="0.100719;14pkt 14fpkt"];
181--2721[label="0.0508475;3pkt 3fpkt"];
181--2789[label="1;35pkt 35fpkt"];
181--2793[label="0.153846;4pkt 4fpkt"];
181--2972[label="1;24pkt 24fpkt"];
181--3181[label="0.16;4pkt 4fpkt"];
1148--1362[label="0.220339;13pkt 13fpkt"];
1148--1443[label="0.169492;10pkt 10fpkt"];
1148--1761[label="0.169492;10pkt 10fpkt"];
1148--1797[label="0.0338983;2pkt 2fpkt"];
1148--1812[label="0.101695;6pkt 6fpkt"];
1148--1819[label="0.0847458;5pkt 5fpkt"];
1148--1832[label="0.0338983;2pkt 2fpkt"];
1148--1847[label="0.101695;6pkt 6fpkt"];
1148--1855[label="0.0847458;5pkt 5fpkt"];
1148--1864[label="0.0338983;2pkt 2fpkt"];
1148--1876[label="0.101695;6pkt 6fpkt"];
1148--1881[label="0.0847458;5pkt 5fpkt"];
1148--1886[label="0.983051;58pkt 58fpkt"];
1148--2721[label="0.983051;58pkt 58fpkt"];
1886--2721[label="1;59pkt 59fpkt"];
2020--2793[label="1;26pkt 26fpkt"];
2020--3181[label="1;25pkt 25fpkt"];
2400--2972[label="1;24pkt 24fpkt"];
2793--3181[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="208.67.144.173" src_port="80"/>
      <filter dst_ip="133.19.169.138" src_ip="112.184.6.237" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="171.70.0.181"/>
      <from sec="1026018000" usec="0"/>
      <to sec="1026019548" usec="0"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
833[label="154.198.76.110;d;162pkt 162fpkt", shape=diamond, color=yellow];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 154.198.76.110:6257}[72.8395%]&lt;BR/&gt;{*:6699, 154.198.76.110:*}[23.4568%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (72.8395%)&lt;BR/&gt; 6699: (13.5802%)&lt;BR/&gt; 2573: (0.308642%)&lt;BR/&gt; 2572: (0.308642%)&lt;BR/&gt; 2570: (0.308642%)&gt;];
}
833--1862[label="0.0123457;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="154.198.76.110" src_port="6699"/>
      <filter dst_ip="154.198.76.110" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="221.25.47.114"/>
      <from sec="1026018002" usec="0"/>
      <to sec="1026019638" usec="0"/>
    </slice>
    <from sec="1026018002" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
847[label="209.201.226.71;d;9pkt 9fpkt", shape=diamond, color=yellow];
848[label="209.193.34.5;s;6pkt 6fpkt", shape=diamond, color=yellow];
1691[label="209.201.226.71;d;6pkt 6fpkt", shape=hexagon, color=black];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.193.34.5:80, 209.201.226.71:*}[77.7778%]&lt;BR/&gt;{*:53, 209.201.226.71:1024}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.4762%)&lt;BR/&gt; 1024: (9.52381%)&lt;BR/&gt; 53: (9.52381%)&lt;BR/&gt; 2048: (7.14286%)&lt;BR/&gt; 2047: (7.14286%)&gt;];
}
847--848[label="1;6pkt 6fpkt"];
847--1691[label="1;6pkt 6fpkt"];
848--1691[label="0.666667;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.201.226.71" src_ip="209.193.34.5" src_port="80"/>
      <filter dst_ip="209.201.226.71" dst_port="1024" src_port="53"/>
    </slice>
    <from sec="1026019155" usec="0"/>
    <to sec="1026019590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
788[label="154.213.180.180;s;2pkt 2fpkt", shape=diamond, color=yellow];
859[label="61.83.75.29;d;1pkt 1fpkt", shape=diamond, color=yellow];
1544[label="154.213.180.180;s;2pkt 2fpkt", shape=hexagon, color=black];
1684[label="61.83.75.29;d;1pkt 1fpkt", shape=hexagon, color=black];
2499[label="154.213.180.180;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3033[label="154.213.180.180;1pkt 1fpkt", shape=invtriangle, color=brown];
3303[label="154.213.180.180;1pkt 1fpkt", shape=invhouse, color=bisque];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.180.180:4747, 61.83.75.29:6699}[50%]&lt;BR/&gt;{154.213.180.180:4284, 62.90.155.112:5190}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (38.8889%)&lt;BR/&gt; 4747: (38.8889%)&lt;BR/&gt; 5190: (11.1111%)&lt;BR/&gt; 4284: (11.1111%)&gt;];
}
788--859[label="1;1pkt 1fpkt"];
788--1544[label="1;2pkt 2fpkt"];
788--1684[label="1;1pkt 1fpkt"];
788--2499[label="1;1pkt 1fpkt"];
788--3033[label="1;1pkt 1fpkt"];
788--3303[label="1;1pkt 1fpkt"];
859--1544[label="1;1pkt 1fpkt"];
859--1684[label="1;1pkt 1fpkt"];
859--2499[label="1;1pkt 1fpkt"];
859--3033[label="1;1pkt 1fpkt"];
859--3303[label="1;1pkt 1fpkt"];
1544--1684[label="1;1pkt 1fpkt"];
1544--2499[label="1;1pkt 1fpkt"];
1544--3033[label="1;1pkt 1fpkt"];
1544--3303[label="1;1pkt 1fpkt"];
1684--2499[label="1;1pkt 1fpkt"];
1684--3033[label="1;1pkt 1fpkt"];
1684--3303[label="1;1pkt 1fpkt"];
2499--3033[label="1;1pkt 1fpkt"];
2499--3303[label="1;1pkt 1fpkt"];
3033--3303[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="62.90.155.112" dst_port="5190" src_ip="154.213.180.180" src_port="4284"/>
      <filter dst_ip="61.83.75.29" dst_port="6699" src_ip="154.213.180.180" src_port="4747"/>
    </slice>
    <from sec="1026018010" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
743[label="133.19.219.131;s;265pkt 265fpkt", shape=diamond, color=yellow];
812[label="63.41.201.148;d;2pkt 2fpkt", shape=diamond, color=yellow];
869[label="60.43.14.73;d;2pkt 2fpkt", shape=diamond, color=yellow];
1550[label="133.19.219.131;s;190pkt 190fpkt", shape=hexagon, color=black];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.219.131:6257, *:6257}[88.3019%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (88.2353%)&lt;BR/&gt; 6699: (4.0305%)&lt;BR/&gt; 8888: (1.41612%)&lt;BR/&gt; 1721: (0.326797%)&lt;BR/&gt; 1719: (0.326797%)&gt;];
}
743--812[label="1;2pkt 2fpkt"];
743--869[label="1;2pkt 2fpkt"];
743--1550[label="1;190pkt 190fpkt"];
812--1550[label="1;2pkt 2fpkt"];
869--1550[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="133.19.219.131" src_port="6257"/>
    </slice>
    <from sec="1026018302" usec="0"/>
    <to sec="1026019625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="168.31.56.99"/>
      <from sec="1026018000" usec="0"/>
      <to sec="1026019634" usec="0"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
276[label="173.138.194.119;s;311pkt 311fpkt", shape=diamond, color=yellow];
334[label="173.138.194.118;s;299pkt 299fpkt", shape=diamond, color=yellow];
896[label="208.221.123.199;d;119pkt 119fpkt", shape=diamond, color=yellow];
1095[label="60.196.118.41;d;57pkt 57fpkt", shape=diamond, color=yellow];
1324[label="173.138.194.118;s;115pkt 115fpkt", shape=hexagon, color=black];
1437[label="173.138.194.119;s;260pkt 260fpkt", shape=hexagon, color=black];
2299[label="173.138.194.119;318pkt 318fpkt", shape=pentagon, color=darkviolet];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.194.119:*, *:80}[43.4842%]&lt;BR/&gt;{173.138.194.118:*, *:80}[40.7407%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.831%)&lt;BR/&gt; 1493: (0.20284%)&lt;BR/&gt; 1113: (0.169033%)&lt;BR/&gt; 1033: (0.169033%)&lt;BR/&gt; 443: (0.169033%)&gt;];
}
276--896[label="0.12605;15pkt 15fpkt"];
276--1095[label="0.175439;10pkt 10fpkt"];
276--1437[label="1;260pkt 260fpkt"];
276--1798[label="0.0482315;15pkt 15fpkt"];
276--1808[label="0.0546624;17pkt 17fpkt"];
276--1815[label="0.0289389;9pkt 9fpkt"];
276--1820[label="0.0289389;9pkt 9fpkt"];
276--1822[label="0.0257235;8pkt 8fpkt"];
276--1828[label="0.0321543;10pkt 10fpkt"];
276--1831[label="0.0450161;14pkt 14fpkt"];
276--1833[label="0.0482315;15pkt 15fpkt"];
276--1844[label="0.0546624;17pkt 17fpkt"];
276--1850[label="0.0289389;9pkt 9fpkt"];
276--1856[label="0.0289389;9pkt 9fpkt"];
276--1860[label="0.0321543;10pkt 10fpkt"];
276--1863[label="0.0450161;14pkt 14fpkt"];
276--1865[label="0.0482315;15pkt 15fpkt"];
276--1873[label="0.0546624;17pkt 17fpkt"];
276--1879[label="0.0289389;9pkt 9fpkt"];
276--1882[label="0.0289389;9pkt 9fpkt"];
276--2299[label="1;311pkt 311fpkt"];
334--498[label="0.00854701;1pkt 1fpkt"];
334--896[label="0.268908;32pkt 32fpkt"];
334--1095[label="0.122807;7pkt 7fpkt"];
334--1324[label="1;115pkt 115fpkt"];
334--1798[label="0.0702341;21pkt 21fpkt"];
334--1808[label="0.0602007;18pkt 18fpkt"];
334--1815[label="0.0367893;11pkt 11fpkt"];
334--1820[label="0.0401338;12pkt 12fpkt"];
334--1822[label="0.0133779;4pkt 4fpkt"];
334--1828[label="0.0468227;14pkt 14fpkt"];
334--1831[label="0.0635452;19pkt 19fpkt"];
334--1833[label="0.0702341;21pkt 21fpkt"];
334--1844[label="0.0602007;18pkt 18fpkt"];
334--1850[label="0.0367893;11pkt 11fpkt"];
334--1856[label="0.0401338;12pkt 12fpkt"];
334--1860[label="0.0468227;14pkt 14fpkt"];
334--1863[label="0.0635452;19pkt 19fpkt"];
334--1865[label="0.0702341;21pkt 21fpkt"];
334--1873[label="0.0602007;18pkt 18fpkt"];
334--1879[label="0.0367893;11pkt 11fpkt"];
334--1882[label="0.0401338;12pkt 12fpkt"];
896--1324[label="0.0782609;9pkt 9fpkt"];
896--1437[label="0.10084;12pkt 12fpkt"];
896--1798[label="0.0504202;6pkt 6fpkt"];
896--1808[label="0.0252101;3pkt 3fpkt"];
896--1815[label="0.0168067;2pkt 2fpkt"];
896--1820[label="0.0252101;3pkt 3fpkt"];
896--1822[label="0.0252101;3pkt 3fpkt"];
896--1828[label="0.0504202;6pkt 6fpkt"];
896--1831[label="0.0588235;7pkt 7fpkt"];
896--1833[label="0.0504202;6pkt 6fpkt"];
896--1844[label="0.0252101;3pkt 3fpkt"];
896--1850[label="0.0168067;2pkt 2fpkt"];
896--1856[label="0.0252101;3pkt 3fpkt"];
896--1860[label="0.0504202;6pkt 6fpkt"];
896--1863[label="0.0588235;7pkt 7fpkt"];
896--1865[label="0.0504202;6pkt 6fpkt"];
896--1873[label="0.0252101;3pkt 3fpkt"];
896--1879[label="0.0168067;2pkt 2fpkt"];
896--1882[label="0.0252101;3pkt 3fpkt"];
896--2059[label="0.361345;43pkt 43fpkt"];
896--2299[label="0.12605;15pkt 15fpkt"];
896--2811[label="0.361345;43pkt 43fpkt"];
1095--1324[label="0.0526316;3pkt 3fpkt"];
1095--1437[label="0.175439;10pkt 10fpkt"];
1095--1798[label="0.0526316;3pkt 3fpkt"];
1095--1808[label="0.0175439;1pkt 1fpkt"];
1095--1815[label="0.0350877;2pkt 2fpkt"];
1095--1822[label="0.0526316;3pkt 3fpkt"];
1095--1828[label="0.0350877;2pkt 2fpkt"];
1095--1831[label="0.0701754;4pkt 4fpkt"];
1095--1833[label="0.0526316;3pkt 3fpkt"];
1095--1844[label="0.0175439;1pkt 1fpkt"];
1095--1850[label="0.0350877;2pkt 2fpkt"];
1095--1860[label="0.0350877;2pkt 2fpkt"];
1095--1863[label="0.0701754;4pkt 4fpkt"];
1095--1865[label="0.0526316;3pkt 3fpkt"];
1095--1873[label="0.0175439;1pkt 1fpkt"];
1095--1879[label="0.0350877;2pkt 2fpkt"];
1095--2059[label="0.473684;27pkt 27fpkt"];
1095--2299[label="0.175439;10pkt 10fpkt"];
1095--2811[label="0.473684;27pkt 27fpkt"];
1324--1798[label="0.182609;21pkt 21fpkt"];
1324--1808[label="0.156522;18pkt 18fpkt"];
1324--1815[label="0.0347826;4pkt 4fpkt"];
1324--1820[label="0.0173913;2pkt 2fpkt"];
1324--1822[label="0.00869565;1pkt 1fpkt"];
1324--1833[label="0.182609;21pkt 21fpkt"];
1324--1844[label="0.156522;18pkt 18fpkt"];
1324--1850[label="0.0347826;4pkt 4fpkt"];
1324--1856[label="0.0173913;2pkt 2fpkt"];
1324--1865[label="0.182609;21pkt 21fpkt"];
1324--1873[label="0.156522;18pkt 18fpkt"];
1324--1879[label="0.0347826;4pkt 4fpkt"];
1324--1882[label="0.0173913;2pkt 2fpkt"];
1437--1798[label="0.0576923;15pkt 15fpkt"];
1437--1808[label="0.0653846;17pkt 17fpkt"];
1437--1815[label="0.0346154;9pkt 9fpkt"];
1437--1820[label="0.0346154;9pkt 9fpkt"];
1437--1822[label="0.0307692;8pkt 8fpkt"];
1437--1828[label="0.0346154;9pkt 9fpkt"];
1437--1831[label="0.0115385;3pkt 3fpkt"];
1437--1833[label="0.0576923;15pkt 15fpkt"];
1437--1844[label="0.0653846;17pkt 17fpkt"];
1437--1850[label="0.0346154;9pkt 9fpkt"];
1437--1856[label="0.0346154;9pkt 9fpkt"];
1437--1860[label="0.0346154;9pkt 9fpkt"];
1437--1863[label="0.0115385;3pkt 3fpkt"];
1437--1865[label="0.0576923;15pkt 15fpkt"];
1437--1873[label="0.0653846;17pkt 17fpkt"];
1437--1879[label="0.0346154;9pkt 9fpkt"];
1437--1882[label="0.0346154;9pkt 9fpkt"];
1437--2299[label="1;260pkt 260fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="173.138.194.119"/>
      <filter dst_port="80" src_ip="173.138.194.118"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="173.138.245.241"/>
      <from sec="1026018001" usec="0"/>
      <to sec="1026019636" usec="0"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.166.14.187"/>
      <from sec="1026018562" usec="0"/>
      <to sec="1026019184" usec="0"/>
    </slice>
    <from sec="1026018562" usec="0"/>
    <to sec="1026019184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.19.0.130"/>
      <from sec="1026018595" usec="0"/>
      <to sec="1026018898" usec="0"/>
    </slice>
    <from sec="1026018595" usec="0"/>
    <to sec="1026018898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.201.231.175"/>
      <from sec="1026018000" usec="0"/>
      <to sec="1026019548" usec="0"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
73[label="209.201.225.46;s;25pkt 25fpkt", shape=diamond, color=yellow];
74[label="213.48.30.170;d;3pkt 3fpkt", shape=diamond, color=yellow];
950[label="200.77.97.119;d;41pkt 41fpkt", shape=diamond, color=yellow];
1166[label="223.230.148.107;d;120pkt 120fpkt", shape=diamond, color=yellow];
1585[label="209.201.225.46;s;18pkt 18fpkt", shape=hexagon, color=black];
1734[label="223.230.148.107;d;120pkt 120fpkt", shape=hexagon, color=black];
1911[label="173.138.202.7;37pkt 37fpkt", shape=pentagon, color=darkviolet];
2055[label="209.201.225.46;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2396[label="209.201.226.149;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2617[label="157.149.135.217;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2735[label="173.138.202.7;37pkt 37fpkt", shape=invtriangle, color=brown];
2810[label="209.201.225.46;24pkt 24fpkt", shape=invtriangle, color=brown];
2970[label="209.201.226.149;31pkt 31fpkt", shape=invtriangle, color=brown];
3092[label="157.149.135.217;22pkt 22fpkt", shape=invtriangle, color=brown];
3338[label="157.149.135.217;23pkt 23fpkt", shape=invhouse, color=bisque];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.228.107:80, 223.230.148.107:*}[29.4776%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.9481%)&lt;BR/&gt; 53: (6.14187%)&lt;BR/&gt; 1024: (4.84429%)&lt;BR/&gt; 5999: (3.63322%)&lt;BR/&gt; 110: (2.07612%)&gt;];
}
73--74[label="1;3pkt 3fpkt"];
73--950[label="0.04;1pkt 1fpkt"];
73--1166[label="0.04;1pkt 1fpkt"];
73--1585[label="1;18pkt 18fpkt"];
73--1734[label="0.04;1pkt 1fpkt"];
73--2055[label="1;24pkt 24fpkt"];
73--2810[label="1;24pkt 24fpkt"];
74--1585[label="1;3pkt 3fpkt"];
74--2055[label="0.666667;2pkt 2fpkt"];
74--2810[label="0.666667;2pkt 2fpkt"];
950--1565[label="1;30pkt 30fpkt"];
950--1585[label="0.0555556;1pkt 1fpkt"];
950--1797[label="0.0487805;2pkt 2fpkt"];
950--1807[label="0.0487805;2pkt 2fpkt"];
950--1812[label="0.0731707;3pkt 3fpkt"];
950--1819[label="0.0487805;2pkt 2fpkt"];
950--1832[label="0.0487805;2pkt 2fpkt"];
950--1843[label="0.0487805;2pkt 2fpkt"];
950--1847[label="0.0731707;3pkt 3fpkt"];
950--1855[label="0.0487805;2pkt 2fpkt"];
950--1864[label="0.0487805;2pkt 2fpkt"];
950--1872[label="0.0487805;2pkt 2fpkt"];
950--1876[label="0.0731707;3pkt 3fpkt"];
950--1881[label="0.0487805;2pkt 2fpkt"];
950--1911[label="0.027027;1pkt 1fpkt"];
950--2055[label="0.0416667;1pkt 1fpkt"];
950--2173[label="0.0243902;1pkt 1fpkt"];
950--2617[label="0.0454545;1pkt 1fpkt"];
950--2735[label="0.027027;1pkt 1fpkt"];
950--2810[label="0.0416667;1pkt 1fpkt"];
950--2864[label="0.0243902;1pkt 1fpkt"];
950--3092[label="0.0454545;1pkt 1fpkt"];
950--3216[label="0.0243902;1pkt 1fpkt"];
950--3338[label="0.0434783;1pkt 1fpkt"];
1166--1734[label="1;120pkt 120fpkt"];
1166--2055[label="0.0416667;1pkt 1fpkt"];
1166--2264[label="0.65;78pkt 78fpkt"];
1166--2396[label="0.16129;5pkt 5fpkt"];
1166--2810[label="0.0416667;1pkt 1fpkt"];
1166--2908[label="0.65;78pkt 78fpkt"];
1166--2970[label="0.16129;5pkt 5fpkt"];
1166--3240[label="0.65;78pkt 78fpkt"];
1585--2055[label="0.944444;17pkt 17fpkt"];
1585--2810[label="0.944444;17pkt 17fpkt"];
1734--2055[label="0.0416667;1pkt 1fpkt"];
1734--2264[label="0.65;78pkt 78fpkt"];
1734--2396[label="0.16129;5pkt 5fpkt"];
1734--2810[label="0.0416667;1pkt 1fpkt"];
1734--2908[label="0.65;78pkt 78fpkt"];
1734--2970[label="0.16129;5pkt 5fpkt"];
1734--3240[label="0.65;78pkt 78fpkt"];
1911--2735[label="1;37pkt 37fpkt"];
2055--2810[label="1;24pkt 24fpkt"];
2396--2970[label="1;31pkt 31fpkt"];
2617--3092[label="1;22pkt 22fpkt"];
2617--3338[label="1;22pkt 22fpkt"];
3092--3338[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="223.230.148.107" src_ip="209.201.228.107" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
920[label="194.64.10.98;d;14pkt 14fpkt", shape=diamond, color=yellow];
964[label="133.19.0.130;s;14pkt 14fpkt", shape=diamond, color=yellow];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.0.130:*, 194.64.10.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32819: (3.57143%)&lt;BR/&gt; 32818: (3.57143%)&lt;BR/&gt; 32817: (3.57143%)&lt;BR/&gt; 32816: (3.57143%)&gt;];
}
920--964[label="1;14pkt 14fpkt"];
920--1822[label="0.142857;2pkt 2fpkt"];
964--1822[label="0.142857;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.64.10.98" dst_port="80" src_ip="133.19.0.130"/>
    </slice>
    <from sec="1026018595" usec="0"/>
    <to sec="1026018898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.496475,1.97206,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
930[label="208.67.72.86;s;25pkt 25fpkt", shape=diamond, color=yellow];
2198[label="208.67.72.86;25pkt 25fpkt", shape=pentagon, color=darkviolet];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.67.72.86:*, 205.178.177.182:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1513: (2%)&lt;BR/&gt; 1511: (2%)&lt;BR/&gt; 1510: (2%)&lt;BR/&gt; 1509: (2%)&gt;];
}
930--972[label="1;25pkt 25fpkt"];
930--2198[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="205.178.177.182" dst_port="80" src_ip="208.67.72.86"/>
    </slice>
    <from sec="1026018741" usec="0"/>
    <to sec="1026019011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.712811,1.89934,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
391[label="157.149.50.225;d;398pkt 398fpkt", shape=diamond, color=yellow];
564[label="207.163.86.25;s;12pkt 12fpkt", shape=diamond, color=yellow];
973[label="207.139.215.48;s;102pkt 102fpkt", shape=diamond, color=yellow];
1273[label="157.149.50.225;d;384pkt 384fpkt", shape=hexagon, color=black];
1915[label="207.139.215.8;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1976[label="207.163.86.25;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2032[label="207.139.215.41;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2413[label="207.163.158.154;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2665[label="207.137.15.234;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2736[label="207.139.215.8;6pkt 6fpkt", shape=invtriangle, color=brown];
2799[label="207.139.215.41;11pkt 11fpkt", shape=invtriangle, color=brown];
2982[label="207.163.158.154;13pkt 13fpkt", shape=invtriangle, color=brown];
3086[label="207.139.229.212;1pkt 1fpkt", shape=invtriangle, color=brown];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.139.215.48:80, 157.149.50.225:*}[25.3133%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8118%)&lt;BR/&gt; 8080: (1.96484%)&lt;BR/&gt; 443: (1.44778%)&lt;BR/&gt; 1755: (0.568769%)&lt;BR/&gt; 1485: (0.206825%)&gt;];
}
391--564[label="1;12pkt 12fpkt"];
391--973[label="0.990196;101pkt 101fpkt"];
391--1273[label="1;384pkt 384fpkt"];
391--1807[label="0.00502513;2pkt 2fpkt"];
391--1812[label="0.0226131;9pkt 9fpkt"];
391--1819[label="0.0150754;6pkt 6fpkt"];
391--1829[label="0.00251256;1pkt 1fpkt"];
391--1843[label="0.00502513;2pkt 2fpkt"];
391--1847[label="0.0226131;9pkt 9fpkt"];
391--1855[label="0.0150754;6pkt 6fpkt"];
391--1861[label="0.00251256;1pkt 1fpkt"];
391--1872[label="0.00502513;2pkt 2fpkt"];
391--1876[label="0.0226131;9pkt 9fpkt"];
391--1881[label="0.0150754;6pkt 6fpkt"];
391--1915[label="1;5pkt 5fpkt"];
391--1976[label="1;11pkt 11fpkt"];
391--2032[label="1;10pkt 10fpkt"];
391--2413[label="1;13pkt 13fpkt"];
391--2437[label="0.00310559;1pkt 1fpkt"];
391--2665[label="1;1pkt 1fpkt"];
391--2736[label="1;6pkt 6fpkt"];
391--2799[label="1;11pkt 11fpkt"];
391--2982[label="1;13pkt 13fpkt"];
391--2998[label="0.00310559;1pkt 1fpkt"];
391--3086[label="1;1pkt 1fpkt"];
564--1273[label="1;12pkt 12fpkt"];
564--1807[label="0.0833333;1pkt 1fpkt"];
564--1843[label="0.0833333;1pkt 1fpkt"];
564--1872[label="0.0833333;1pkt 1fpkt"];
564--1976[label="1;11pkt 11fpkt"];
973--1273[label="0.95098;97pkt 97fpkt"];
1273--1807[label="0.00520833;2pkt 2fpkt"];
1273--1812[label="0.0234375;9pkt 9fpkt"];
1273--1819[label="0.015625;6pkt 6fpkt"];
1273--1829[label="0.00260417;1pkt 1fpkt"];
1273--1843[label="0.00520833;2pkt 2fpkt"];
1273--1847[label="0.0234375;9pkt 9fpkt"];
1273--1855[label="0.015625;6pkt 6fpkt"];
1273--1861[label="0.00260417;1pkt 1fpkt"];
1273--1872[label="0.00520833;2pkt 2fpkt"];
1273--1876[label="0.0234375;9pkt 9fpkt"];
1273--1881[label="0.015625;6pkt 6fpkt"];
1273--1915[label="1;5pkt 5fpkt"];
1273--1976[label="1;11pkt 11fpkt"];
1273--2032[label="0.7;7pkt 7fpkt"];
1273--2413[label="1;13pkt 13fpkt"];
1273--2437[label="0.00310559;1pkt 1fpkt"];
1273--2665[label="1;1pkt 1fpkt"];
1273--2736[label="1;6pkt 6fpkt"];
1273--2799[label="0.727273;8pkt 8fpkt"];
1273--2982[label="1;13pkt 13fpkt"];
1273--2998[label="0.00310559;1pkt 1fpkt"];
1273--3086[label="1;1pkt 1fpkt"];
1915--2736[label="1;5pkt 5fpkt"];
2032--2799[label="1;10pkt 10fpkt"];
2413--2982[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.50.225" src_ip="207.139.215.48" src_port="80"/>
    </slice>
    <from sec="1026018073" usec="0"/>
    <to sec="1026019623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.834851,1.91673,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
643[label="201.80.137.213;d;5pkt 5fpkt", shape=diamond, color=yellow];
992[label="173.138.218.207;s;4pkt 4fpkt", shape=diamond, color=yellow];
1026[label="169.26.196.55;d;3pkt 3fpkt", shape=diamond, color=yellow];
1044[label="112.96.101.2;d;4pkt 4fpkt", shape=diamond, color=yellow];
1090[label="173.138.246.119;s;2pkt 2fpkt", shape=diamond, color=yellow];
1119[label="201.96.89.2;d;2pkt 2fpkt", shape=diamond, color=yellow];
1151[label="173.138.245.230;s;7pkt 7fpkt", shape=diamond, color=yellow];
1609[label="169.26.196.55;d;3pkt 3fpkt", shape=hexagon, color=black];
1725[label="173.138.246.119;s;2pkt 2fpkt", shape=hexagon, color=black];
2300[label="173.138.246.119;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2338[label="173.138.220.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2586[label="173.138.218.207;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3331[label="173.138.218.207;4pkt 4fpkt", shape=invhouse, color=bisque];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.245.230:*, *:*}[33.3333%]&lt;BR/&gt;{*:0, *:0}[23.8095%]&lt;BR/&gt;{*:*, 201.80.137.213:*}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (31.7073%)&lt;BR/&gt; 6667: (9.7561%)&lt;BR/&gt; 1025: (7.31707%)&lt;BR/&gt; 6666: (6.09756%)&lt;BR/&gt; 23: (6.09756%)&gt;];
}
643--992[label="0.25;1pkt 1fpkt"];
643--1090[label="0.5;1pkt 1fpkt"];
643--1151[label="0.2;1pkt 1fpkt"];
643--1725[label="0.5;1pkt 1fpkt"];
643--1877[label="0.2;1pkt 1fpkt"];
643--2300[label="1;1pkt 1fpkt"];
643--2586[label="0.333333;1pkt 1fpkt"];
643--3331[label="0.25;1pkt 1fpkt"];
992--1026[label="0.333333;1pkt 1fpkt"];
992--1044[label="0.25;1pkt 1fpkt"];
992--1609[label="0.333333;1pkt 1fpkt"];
992--2586[label="1;3pkt 3fpkt"];
992--3331[label="1;4pkt 4fpkt"];
1026--1609[label="1;3pkt 3fpkt"];
1026--2338[label="1;1pkt 1fpkt"];
1026--3331[label="0.333333;1pkt 1fpkt"];
1044--2586[label="0.333333;1pkt 1fpkt"];
1044--3331[label="0.25;1pkt 1fpkt"];
1090--1725[label="1;2pkt 2fpkt"];
1090--1877[label="1;2pkt 2fpkt"];
1090--2300[label="1;1pkt 1fpkt"];
1119--1151[label="0.5;1pkt 1fpkt"];
1609--2338[label="1;1pkt 1fpkt"];
1609--3331[label="0.333333;1pkt 1fpkt"];
1725--1877[label="1;2pkt 2fpkt"];
1725--2300[label="1;1pkt 1fpkt"];
2586--3331[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="173.138.245.230"/>
      <filter dst_ip="201.80.137.213"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
1007[label="133.19.0.206;d;2pkt 2fpkt", shape=diamond, color=yellow];
1008[label="222.182.0.178;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.82.193.54:1863, 133.19.0.206:1029}[50%]&lt;BR/&gt;{222.182.0.178:6699, 133.19.0.206:1056}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (33.3333%)&lt;BR/&gt; 1056: (33.3333%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 1029: (16.6667%)&gt;];
}
1007--1008[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.0.206" dst_port="1056" src_ip="222.182.0.178" src_port="6699"/>
      <filter dst_ip="133.19.0.206" dst_port="1029" src_ip="62.82.193.54" src_port="1863"/>
    </slice>
    <from sec="1026018011" usec="0"/>
    <to sec="1026019637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
1022[label="194.139.203.80;s;93pkt 93fpkt", shape=diamond, color=yellow];
1023[label="171.70.143.45;d;92pkt 92fpkt", shape=diamond, color=yellow];
1728[label="171.70.143.45;d;92pkt 92fpkt", shape=hexagon, color=black];
2183[label="194.139.203.80;128pkt 128fpkt", shape=pentagon, color=darkviolet];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.139.203.80:80, 171.70.143.45:*}[99.2188%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49457: (0.493827%)&lt;BR/&gt; 49456: (0.493827%)&lt;BR/&gt; 49455: (0.493827%)&lt;BR/&gt; 49454: (0.493827%)&gt;];
}
1022--1023[label="1;92pkt 92fpkt"];
1022--1654[label="0.0107527;1pkt 1fpkt"];
1022--1728[label="1;92pkt 92fpkt"];
1022--2183[label="1;93pkt 93fpkt"];
1023--1728[label="1;92pkt 92fpkt"];
1023--2183[label="1;92pkt 92fpkt"];
1728--2183[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.143.45" src_ip="194.139.203.80" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
1025[label="154.213.17.130;s;6pkt 6fpkt", shape=diamond, color=yellow];
1027[label="195.6.180.179;d;5pkt 5fpkt", shape=diamond, color=yellow];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.17.130:*, 195.6.180.179:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 2803: (9.09091%)&lt;BR/&gt; 2802: (9.09091%)&lt;BR/&gt; 2801: (9.09091%)&lt;BR/&gt; 2798: (9.09091%)&gt;];
}
1025--1027[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="195.6.180.179" dst_port="80" src_ip="154.213.17.130"/>
    </slice>
    <from sec="1026018840" usec="0"/>
    <to sec="1026019170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
1024[label="154.213.17.130;d;8pkt 8fpkt", shape=diamond, color=yellow];
1028[label="195.6.180.179;s;5pkt 5fpkt", shape=diamond, color=yellow];
1637[label="195.6.180.179;s;5pkt 5fpkt", shape=hexagon, color=black];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.6.180.179:80, 154.213.17.130:*}[62.5%]&lt;BR/&gt;{194.44.36.107:80, 154.213.17.130:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2222%)&lt;BR/&gt; 2803: (8.33333%)&lt;BR/&gt; 2802: (8.33333%)&lt;BR/&gt; 2801: (8.33333%)&lt;BR/&gt; 2798: (8.33333%)&gt;];
}
1024--1028[label="1;5pkt 5fpkt"];
1024--1637[label="1;5pkt 5fpkt"];
1024--2262[label="0.25;2pkt 2fpkt"];
1024--2907[label="0.25;2pkt 2fpkt"];
1028--1637[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.17.130" src_ip="195.6.180.179" src_port="80"/>
      <filter dst_ip="154.213.17.130" src_ip="194.44.36.107" src_port="80"/>
    </slice>
    <from sec="1026018840" usec="0"/>
    <to sec="1026019170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.201.228.180"/>
      <from sec="1026018000" usec="0"/>
      <to sec="1026019636" usec="0"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.712811,1.89934,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
224[label="208.227.37.83;s;61pkt 61fpkt", shape=diamond, color=yellow];
493[label="208.77.230.0;s;30pkt 30fpkt", shape=diamond, color=yellow];
894[label="208.218.30.61;s;146pkt 146fpkt", shape=diamond, color=yellow];
1047[label="112.170.68.252;d;17pkt 17fpkt", shape=diamond, color=yellow];
1118[label="208.175.193.142;d;12pkt 12fpkt", shape=diamond, color=yellow];
1345[label="208.77.230.0;s;30pkt 30fpkt", shape=hexagon, color=black];
1681[label="208.227.37.83;s;54pkt 54fpkt", shape=hexagon, color=black];
1889[label="208.77.230.0;29pkt 29fpkt", shape=pentagon, color=darkviolet];
2105[label="208.218.30.61;157pkt 157fpkt", shape=pentagon, color=darkviolet];
2191[label="209.201.225.82;178pkt 178fpkt", shape=pentagon, color=darkviolet];
2272[label="209.201.224.109;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2723[label="208.77.230.0;30pkt 30fpkt", shape=invtriangle, color=brown];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.225.82:0, *:0}[37.0062%]&lt;BR/&gt;{208.218.30.61:0, *:0}[32.4324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.6149%)&lt;BR/&gt; 1553: (0.12837%)&lt;BR/&gt; 1433: (0.12837%)&lt;BR/&gt; 1025: (0.0641849%)&lt;BR/&gt; 80: (0.0641849%)&gt;];
}
224--1047[label="0.0588235;1pkt 1fpkt"];
224--1118[label="0.0833333;1pkt 1fpkt"];
224--1681[label="1;54pkt 54fpkt"];
493--1047[label="0.0588235;1pkt 1fpkt"];
493--1118[label="0.0833333;1pkt 1fpkt"];
493--1345[label="1;30pkt 30fpkt"];
493--1889[label="1;29pkt 29fpkt"];
493--2723[label="1;30pkt 30fpkt"];
894--1047[label="0.0588235;1pkt 1fpkt"];
894--1118[label="0.0833333;1pkt 1fpkt"];
894--2105[label="1;146pkt 146fpkt"];
1047--1345[label="0.0588235;1pkt 1fpkt"];
1047--1681[label="0.0588235;1pkt 1fpkt"];
1047--1889[label="0.0588235;1pkt 1fpkt"];
1047--2105[label="0.0588235;1pkt 1fpkt"];
1047--2191[label="0.0588235;1pkt 1fpkt"];
1047--2272[label="0.0588235;1pkt 1fpkt"];
1047--2723[label="0.0588235;1pkt 1fpkt"];
1118--1345[label="0.0833333;1pkt 1fpkt"];
1118--1681[label="0.0833333;1pkt 1fpkt"];
1118--1889[label="0.0833333;1pkt 1fpkt"];
1118--1952[label="0.0833333;1pkt 1fpkt"];
1118--2105[label="0.0833333;1pkt 1fpkt"];
1118--2191[label="0.0833333;1pkt 1fpkt"];
1118--2723[label="0.0833333;1pkt 1fpkt"];
1118--2758[label="0.0833333;1pkt 1fpkt"];
1118--3161[label="0.0833333;1pkt 1fpkt"];
1345--1889[label="1;29pkt 29fpkt"];
1345--2723[label="1;30pkt 30fpkt"];
1889--2723[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter src_ip="209.201.225.82"/>
      <filter src_ip="208.218.30.61"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
1063[label="194.231.29.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
1065[label="154.213.161.245;s;3pkt 3fpkt", shape=diamond, color=yellow];
1658[label="194.231.29.176;d;1pkt 1fpkt", shape=hexagon, color=black];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.161.245:1626, 194.231.29.176:1214}[33.3333%]&lt;BR/&gt;{154.213.161.245:1627, 210.40.4.129:1214}[33.3333%]&lt;BR/&gt;{154.213.161.245:1628, 210.40.4.129:1214}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 1626: (30%)&lt;BR/&gt; 1628: (10%)&lt;BR/&gt; 1627: (10%)&gt;];
}
1063--1065[label="1;1pkt 1fpkt"];
1063--1658[label="1;1pkt 1fpkt"];
1065--1658[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.40.4.129" dst_port="1214" src_ip="154.213.161.245" src_port="1628"/>
      <filter dst_ip="210.40.4.129" dst_port="1214" src_ip="154.213.161.245" src_port="1627"/>
      <filter dst_ip="194.231.29.176" dst_port="1214" src_ip="154.213.161.245" src_port="1626"/>
    </slice>
    <from sec="1026018856" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
1033[label="214.4.215.167;d;31pkt 31fpkt", shape=diamond, color=yellow];
1067[label="157.149.64.77;s;143pkt 143fpkt", shape=diamond, color=yellow];
1638[label="214.4.215.167;d;31pkt 31fpkt", shape=hexagon, color=black];
1690[label="157.149.64.77;s;143pkt 143fpkt", shape=hexagon, color=black];
2056[label="157.149.74.47;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2167[label="157.149.64.77;156pkt 156fpkt", shape=pentagon, color=darkviolet];
2861[label="157.149.64.77;156pkt 156fpkt", shape=invtriangle, color=brown];
3213[label="157.149.64.77;157pkt 157fpkt", shape=invhouse, color=bisque];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.149.64.77:*, 214.4.215.203:80}[26.9006%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3755%)&lt;BR/&gt; 443: (1.26354%)&lt;BR/&gt; 41461: (0.421179%)&lt;BR/&gt; 41460: (0.421179%)&lt;BR/&gt; 41459: (0.421179%)&gt;];
}
1033--1067[label="0.774194;24pkt 24fpkt"];
1033--1638[label="1;31pkt 31fpkt"];
1033--1690[label="0.774194;24pkt 24fpkt"];
1033--2056[label="0.5;7pkt 7fpkt"];
1033--2167[label="0.774194;24pkt 24fpkt"];
1033--2861[label="0.774194;24pkt 24fpkt"];
1033--3213[label="0.774194;24pkt 24fpkt"];
1067--1638[label="0.774194;24pkt 24fpkt"];
1067--1690[label="1;143pkt 143fpkt"];
1067--1831[label="0.00699301;1pkt 1fpkt"];
1067--1863[label="0.00699301;1pkt 1fpkt"];
1067--2167[label="0.993007;142pkt 142fpkt"];
1067--2861[label="0.993007;142pkt 142fpkt"];
1067--3213[label="1;143pkt 143fpkt"];
1638--1690[label="0.774194;24pkt 24fpkt"];
1638--2056[label="0.5;7pkt 7fpkt"];
1638--2167[label="0.774194;24pkt 24fpkt"];
1638--2861[label="0.774194;24pkt 24fpkt"];
1638--3213[label="0.774194;24pkt 24fpkt"];
1690--1831[label="0.00699301;1pkt 1fpkt"];
1690--1863[label="0.00699301;1pkt 1fpkt"];
1690--2167[label="0.993007;142pkt 142fpkt"];
1690--2861[label="0.993007;142pkt 142fpkt"];
1690--3213[label="1;143pkt 143fpkt"];
2167--2861[label="1;156pkt 156fpkt"];
2167--3213[label="1;156pkt 156fpkt"];
2861--3213[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_ip="214.4.215.203" dst_port="80" src_ip="157.149.64.77"/>
    </slice>
    <from sec="1026018117" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
82[label="209.201.226.87;d;107pkt 107fpkt", shape=diamond, color=yellow];
1030[label="105.32.154.220;s;8pkt 8fpkt", shape=diamond, color=yellow];
1069[label="204.236.5.21;s;6pkt 6fpkt", shape=diamond, color=yellow];
1234[label="192.92.139.142;s;5pkt 5fpkt", shape=diamond, color=yellow];
1251[label="209.201.226.87;d;67pkt 67fpkt", shape=hexagon, color=black];
1932[label="62.126.160.13;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1961[label="204.236.5.21;23pkt 23fpkt", shape=pentagon, color=darkviolet];
2102[label="209.168.144.60;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2376[label="192.92.139.142;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2500[label="193.80.211.180;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2584[label="192.18.132.207;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2626[label="105.32.154.220;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2747[label="62.126.160.13;5pkt 5fpkt", shape=invtriangle, color=brown];
2763[label="204.236.5.21;24pkt 24fpkt", shape=invtriangle, color=brown];
2831[label="209.168.144.60;5pkt 5fpkt", shape=invtriangle, color=brown];
2962[label="192.92.139.142;4pkt 4fpkt", shape=invtriangle, color=brown];
3152[label="62.126.160.13;5pkt 5fpkt", shape=invhouse, color=bisque];
3198[label="209.168.144.60;5pkt 5fpkt", shape=invhouse, color=bisque];
3269[label="192.92.139.142;5pkt 5fpkt", shape=invhouse, color=bisque];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 209.201.226.87:1755}[45.9459%]&lt;BR/&gt;{204.236.5.21:*, 209.201.226.87:80}[21.6216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.6316%)&lt;BR/&gt; 1755: (19.5724%)&lt;BR/&gt; 0: (5.59211%)&lt;BR/&gt; 43387: (0.822368%)&lt;BR/&gt; 43381: (0.822368%)&gt;];
}
82--1030[label="1;8pkt 8fpkt"];
82--1069[label="1;6pkt 6fpkt"];
82--1234[label="1;5pkt 5fpkt"];
82--1251[label="1;67pkt 67fpkt"];
82--1815[label="0.0747664;8pkt 8fpkt"];
82--1820[label="0.0934579;10pkt 10fpkt"];
82--1822[label="0.0841121;9pkt 9fpkt"];
82--1850[label="0.0747664;8pkt 8fpkt"];
82--1856[label="0.0934579;10pkt 10fpkt"];
82--1879[label="0.0747664;8pkt 8fpkt"];
82--1882[label="0.0934579;10pkt 10fpkt"];
82--1932[label="1;5pkt 5fpkt"];
82--1961[label="1;23pkt 23fpkt"];
82--2102[label="1;5pkt 5fpkt"];
82--2376[label="1;4pkt 4fpkt"];
82--2500[label="1;1pkt 1fpkt"];
82--2584[label="0.692308;9pkt 9fpkt"];
82--2626[label="1;7pkt 7fpkt"];
82--2747[label="1;5pkt 5fpkt"];
82--2763[label="1;24pkt 24fpkt"];
82--2831[label="1;5pkt 5fpkt"];
82--2962[label="1;4pkt 4fpkt"];
82--3152[label="1;5pkt 5fpkt"];
82--3198[label="1;5pkt 5fpkt"];
82--3269[label="1;5pkt 5fpkt"];
1030--1251[label="0.25;2pkt 2fpkt"];
1030--2626[label="1;7pkt 7fpkt"];
1069--1961[label="1;6pkt 6fpkt"];
1069--2763[label="1;6pkt 6fpkt"];
1234--2376[label="1;4pkt 4fpkt"];
1234--2962[label="1;4pkt 4fpkt"];
1234--3269[label="1;5pkt 5fpkt"];
1251--1815[label="0.119403;8pkt 8fpkt"];
1251--1820[label="0.149254;10pkt 10fpkt"];
1251--1822[label="0.134328;9pkt 9fpkt"];
1251--1850[label="0.119403;8pkt 8fpkt"];
1251--1856[label="0.149254;10pkt 10fpkt"];
1251--1879[label="0.119403;8pkt 8fpkt"];
1251--1882[label="0.149254;10pkt 10fpkt"];
1251--1932[label="0.8;4pkt 4fpkt"];
1251--1961[label="0.73913;17pkt 17fpkt"];
1251--2102[label="0.4;2pkt 2fpkt"];
1251--2500[label="1;1pkt 1fpkt"];
1251--2626[label="0.142857;1pkt 1fpkt"];
1251--2747[label="0.8;4pkt 4fpkt"];
1251--2763[label="0.75;18pkt 18fpkt"];
1251--2831[label="0.4;2pkt 2fpkt"];
1251--3152[label="0.8;4pkt 4fpkt"];
1251--3198[label="0.4;2pkt 2fpkt"];
1932--2747[label="1;5pkt 5fpkt"];
1932--3152[label="1;5pkt 5fpkt"];
1961--2763[label="1;23pkt 23fpkt"];
2102--2831[label="1;5pkt 5fpkt"];
2102--3198[label="1;5pkt 5fpkt"];
2376--2962[label="1;4pkt 4fpkt"];
2376--3269[label="1;4pkt 4fpkt"];
2747--3152[label="1;5pkt 5fpkt"];
2831--3198[label="1;5pkt 5fpkt"];
2962--3269[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.201.226.87" dst_port="1755"/>
      <filter dst_ip="209.201.226.87" dst_port="80" src_ip="204.236.5.21"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22438,1.96931,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
38[label="154.213.141.237s;2pkt 2fpkt", shape=rectangle, color=red];
1031[label="194.40.194.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
1080[label="154.213.141.237;s;11pkt 11fpkt", shape=diamond, color=yellow];
1177[label="36.86.242.92;d;1pkt 1fpkt", shape=diamond, color=yellow];
1659[label="194.40.194.235;d;1pkt 1fpkt", shape=hexagon, color=black];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.141.237:*, 212.68.128.29:80}[25%]&lt;BR/&gt;{154.213.141.237:*, *:6699}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (21.875%)&lt;BR/&gt; 80: (21.875%)&lt;BR/&gt; 3096: (12.5%)&lt;BR/&gt; 3050: (6.25%)&lt;BR/&gt; 3225: (3.125%)&gt;];
}
38--76[label="0.5;1pkt 1fpkt"];
38--376[label="0.5;1pkt 1fpkt"];
38--1031[label="1;1pkt 1fpkt"];
38--1080[label="0.5;1pkt 1fpkt"];
38--1659[label="1;1pkt 1fpkt"];
1031--1080[label="1;1pkt 1fpkt"];
1031--1659[label="1;1pkt 1fpkt"];
1080--1177[label="1;1pkt 1fpkt"];
1080--1659[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="154.213.141.237"/>
      <filter dst_ip="212.68.128.29" dst_port="80" src_ip="154.213.141.237"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
344[label="133.19.119.197;s;33pkt 33fpkt", shape=diamond, color=yellow];
473[label="200.242.93.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
888[label="192.143.10.109;d;11pkt 11fpkt", shape=diamond, color=yellow];
1082[label="144.108.105.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
1717[label="144.108.105.38;d;1pkt 1fpkt", shape=hexagon, color=black];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.119.197:1214, 192.143.10.109:*}[33.3333%]&lt;BR/&gt;{133.19.119.197:*, *:80}[27.2727%]&lt;BR/&gt;{133.19.119.197:*, *:1214}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (39.3617%)&lt;BR/&gt; 80: (9.57447%)&lt;BR/&gt; 3665: (3.19149%)&lt;BR/&gt; 62218: (2.12766%)&lt;BR/&gt; 2561: (2.12766%)&gt;];
}
344--473[label="1;1pkt 1fpkt"];
344--888[label="1;11pkt 11fpkt"];
344--1082[label="1;1pkt 1fpkt"];
344--1717[label="1;1pkt 1fpkt"];
344--1820[label="0.0606061;2pkt 2fpkt"];
344--1822[label="0.030303;1pkt 1fpkt"];
344--1828[label="0.030303;1pkt 1fpkt"];
344--1856[label="0.0606061;2pkt 2fpkt"];
344--1860[label="0.030303;1pkt 1fpkt"];
344--1882[label="0.0606061;2pkt 2fpkt"];
1082--1717[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.19.119.197"/>
      <filter dst_port="1214" src_ip="133.19.119.197"/>
      <filter dst_ip="192.143.10.109" src_ip="133.19.119.197" src_port="1214"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.669535,1.98832,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
1085[label="133.19.216.186;s;1pkt 1fpkt", shape=diamond, color=yellow];
1086[label="62.118.234.163;d;1pkt 1fpkt", shape=diamond, color=yellow];
3046[label="133.19.216.186;1pkt 1fpkt", shape=invtriangle, color=brown];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.216.186:1649, 62.118.234.163:9000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9000: (50%)&lt;BR/&gt; 1649: (50%)&gt;];
}
1085--1086[label="1;1pkt 1fpkt"];
1085--3046[label="1;1pkt 1fpkt"];
1086--3046[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="62.118.234.163" dst_port="9000" src_ip="133.19.216.186" src_port="1649"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
1097[label="133.19.0.206;s;7pkt 7fpkt", shape=diamond, color=yellow];
1098[label="222.182.0.178;d;1pkt 1fpkt", shape=diamond, color=yellow];
2576[label="133.19.0.206;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3074[label="133.19.0.206;6pkt 6fpkt", shape=invtriangle, color=brown];
3329[label="133.19.0.206;7pkt 7fpkt", shape=invhouse, color=bisque];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.0.206:*, 157.132.177.92:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.9286%)&lt;BR/&gt; 6699: (8.92857%)&lt;BR/&gt; 1056: (8.92857%)&lt;BR/&gt; 1863: (7.14286%)&lt;BR/&gt; 1106: (7.14286%)&gt;];
}
1097--1098[label="1;1pkt 1fpkt"];
1097--1831[label="0.714286;5pkt 5fpkt"];
1097--1863[label="0.714286;5pkt 5fpkt"];
1097--2576[label="1;7pkt 7fpkt"];
1097--3074[label="1;6pkt 6fpkt"];
1097--3329[label="1;7pkt 7fpkt"];
1098--2576[label="1;1pkt 1fpkt"];
1098--3074[label="1;1pkt 1fpkt"];
1098--3329[label="1;1pkt 1fpkt"];
2576--3074[label="1;6pkt 6fpkt"];
2576--3329[label="1;7pkt 7fpkt"];
3074--3329[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="157.132.177.92" dst_port="80" src_ip="133.19.0.206"/>
    </slice>
    <from sec="1026018011" usec="0"/>
    <to sec="1026019654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
250[label="208.77.224.47;d;513pkt 513fpkt", shape=diamond, color=yellow];
695[label="154.213.43.98;d;297pkt 297fpkt", shape=diamond, color=yellow];
733[label="201.217.251.179;s;43pkt 43fpkt", shape=diamond, color=yellow];
758[label="85.243.2.206;s;1pkt 1fpkt", shape=diamond, color=yellow];
862[label="208.67.149.64;d;113pkt 113fpkt", shape=diamond, color=yellow];
875[label="194.242.133.176;s;9pkt 9fpkt", shape=diamond, color=yellow];
924[label="154.41.116.222;d;25pkt 25fpkt", shape=diamond, color=yellow];
1106[label="207.16.16.205;s;28pkt 28fpkt", shape=diamond, color=yellow];
1128[label="171.70.203.23;d;49pkt 49fpkt", shape=diamond, color=yellow];
1409[label="215.114.228.137;s;37pkt 37fpkt", shape=hexagon, color=black];
1456[label="201.217.251.179;s;43pkt 43fpkt", shape=hexagon, color=black];
1631[label="208.67.149.64;d;72pkt 72fpkt", shape=hexagon, color=black];
1908[label="205.192.49.7;42pkt 42fpkt", shape=pentagon, color=darkviolet];
1947[label="205.218.202.18;5pkt 5fpkt", shape=pentagon, color=darkviolet];
1963[label="62.89.68.22;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2034[label="205.187.130.42;37pkt 37fpkt", shape=pentagon, color=darkviolet];
2223[label="194.44.32.96;108pkt 108fpkt", shape=pentagon, color=darkviolet];
2256[label="217.151.28.106;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2302[label="212.68.156.120;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2359[label="215.114.228.137;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2364[label="63.20.195.139;50pkt 50fpkt", shape=pentagon, color=darkviolet];
2416[label="213.218.199.155;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2495[label="201.217.251.179;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2573[label="207.16.16.205;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2733[label="205.192.49.7;42pkt 42fpkt", shape=invtriangle, color=brown];
2755[label="60.196.114.16;8pkt 8fpkt", shape=invtriangle, color=brown];
2764[label="62.89.68.22;8pkt 8fpkt", shape=invtriangle, color=brown];
2903[label="217.151.28.106;7pkt 7fpkt", shape=invtriangle, color=brown];
3030[label="201.217.251.179;43pkt 43fpkt", shape=invtriangle, color=brown];
3072[label="207.16.16.205;31pkt 31fpkt", shape=invtriangle, color=brown];
3164[label="62.89.68.22;9pkt 9fpkt", shape=invhouse, color=bisque];
3301[label="201.217.251.179;42pkt 42fpkt", shape=invhouse, color=bisque];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 208.77.224.47:*}[40.0157%]&lt;BR/&gt;{*:*, 154.213.43.98:*}[23.2576%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.2314%)&lt;BR/&gt; 6346: (7.30028%)&lt;BR/&gt; 2189: (0.275482%)&lt;BR/&gt; 2663: (0.192837%)&lt;BR/&gt; 1797: (0.192837%)&gt;];
}
250--480[label="0.0298913;11pkt 11fpkt"];
250--499[label="0.0172414;2pkt 2fpkt"];
250--562[label="0.0724638;5pkt 5fpkt"];
250--607[label="0.0741935;23pkt 23fpkt"];
250--640[label="0.027027;1pkt 1fpkt"];
250--730[label="0.0114943;4pkt 4fpkt"];
250--733[label="1;43pkt 43fpkt"];
250--1048[label="0.00473934;1pkt 1fpkt"];
250--1106[label="0.0357143;1pkt 1fpkt"];
250--1380[label="0.0724638;5pkt 5fpkt"];
250--1409[label="0.027027;1pkt 1fpkt"];
250--1456[label="1;43pkt 43fpkt"];
250--1511[label="0.0897436;14pkt 14fpkt"];
250--1570[label="0.0267062;9pkt 9fpkt"];
250--1797[label="0.0214425;11pkt 11fpkt"];
250--1807[label="0.0331384;17pkt 17fpkt"];
250--1812[label="0.0272904;14pkt 14fpkt"];
250--1819[label="0.0194932;10pkt 10fpkt"];
250--1832[label="0.0214425;11pkt 11fpkt"];
250--1843[label="0.0331384;17pkt 17fpkt"];
250--1847[label="0.0272904;14pkt 14fpkt"];
250--1855[label="0.0194932;10pkt 10fpkt"];
250--1864[label="0.0214425;11pkt 11fpkt"];
250--1872[label="0.0331384;17pkt 17fpkt"];
250--1876[label="0.0272904;14pkt 14fpkt"];
250--1881[label="0.0194932;10pkt 10fpkt"];
250--1908[label="0.0952381;4pkt 4fpkt"];
250--1947[label="0.6;3pkt 3fpkt"];
250--1994[label="0.130435;3pkt 3fpkt"];
250--2034[label="0.810811;30pkt 30fpkt"];
250--2109[label="0.0463576;7pkt 7fpkt"];
250--2223[label="0.0462963;5pkt 5fpkt"];
250--2256[label="0.166667;1pkt 1fpkt"];
250--2262[label="0.012987;1pkt 1fpkt"];
250--2359[label="0.0263158;1pkt 1fpkt"];
250--2364[label="0.02;1pkt 1fpkt"];
250--2416[label="0.117647;2pkt 2fpkt"];
250--2454[label="0.0204082;1pkt 1fpkt"];
250--2495[label="1;42pkt 42fpkt"];
250--2573[label="0.0645161;2pkt 2fpkt"];
250--2636[label="0.0652174;6pkt 6fpkt"];
250--2688[label="0.0606061;2pkt 2fpkt"];
250--2704[label="0.0327869;2pkt 2fpkt"];
250--2733[label="0.0952381;4pkt 4fpkt"];
250--2834[label="0.0463576;7pkt 7fpkt"];
250--2889[label="0.0238095;1pkt 1fpkt"];
250--2903[label="0.142857;1pkt 1fpkt"];
250--2907[label="0.0128205;1pkt 1fpkt"];
250--3030[label="1;43pkt 43fpkt"];
250--3072[label="0.0645161;2pkt 2fpkt"];
250--3301[label="1;42pkt 42fpkt"];
695--758[label="1;1pkt 1fpkt"];
695--1106[label="0.0357143;1pkt 1fpkt"];
695--1812[label="0.020202;6pkt 6fpkt"];
695--1819[label="0.010101;3pkt 3fpkt"];
695--1847[label="0.020202;6pkt 6fpkt"];
695--1855[label="0.010101;3pkt 3fpkt"];
695--1876[label="0.020202;6pkt 6fpkt"];
695--1881[label="0.010101;3pkt 3fpkt"];
695--2135[label="0.150943;8pkt 8fpkt"];
695--2364[label="0.02;1pkt 1fpkt"];
695--2573[label="0.0322581;1pkt 1fpkt"];
695--2673[label="0.0740741;2pkt 2fpkt"];
695--3072[label="0.0322581;1pkt 1fpkt"];
733--1456[label="1;43pkt 43fpkt"];
733--1797[label="0.0697674;3pkt 3fpkt"];
733--1807[label="0.0232558;1pkt 1fpkt"];
733--1812[label="0.0232558;1pkt 1fpkt"];
733--1832[label="0.0697674;3pkt 3fpkt"];
733--1843[label="0.0232558;1pkt 1fpkt"];
733--1847[label="0.0232558;1pkt 1fpkt"];
733--1864[label="0.0697674;3pkt 3fpkt"];
733--1872[label="0.0232558;1pkt 1fpkt"];
733--1876[label="0.0232558;1pkt 1fpkt"];
733--2495[label="1;42pkt 42fpkt"];
733--3030[label="1;43pkt 43fpkt"];
733--3301[label="1;42pkt 42fpkt"];
862--875[label="1;9pkt 9fpkt"];
862--1106[label="0.178571;5pkt 5fpkt"];
862--1631[label="1;72pkt 72fpkt"];
862--1812[label="0.0176991;2pkt 2fpkt"];
862--1819[label="0.0176991;2pkt 2fpkt"];
862--1847[label="0.0176991;2pkt 2fpkt"];
862--1855[label="0.0176991;2pkt 2fpkt"];
862--1876[label="0.0176991;2pkt 2fpkt"];
862--1881[label="0.0176991;2pkt 2fpkt"];
862--1930[label="0.0833333;5pkt 5fpkt"];
862--1942[label="0.555556;5pkt 5fpkt"];
862--2302[label="0.1;1pkt 1fpkt"];
862--2561[label="0.636364;7pkt 7fpkt"];
862--2573[label="0.193548;6pkt 6fpkt"];
862--2745[label="0.0833333;5pkt 5fpkt"];
862--2755[label="0.625;5pkt 5fpkt"];
862--3069[label="0.636364;7pkt 7fpkt"];
862--3072[label="0.193548;6pkt 6fpkt"];
862--3158[label="0.555556;5pkt 5fpkt"];
875--1631[label="1;9pkt 9fpkt"];
924--2302[label="0.9;9pkt 9fpkt"];
924--2364[label="0.04;1pkt 1fpkt"];
924--2475[label="0.24;6pkt 6fpkt"];
924--3019[label="0.24;6pkt 6fpkt"];
924--3298[label="0.24;6pkt 6fpkt"];
1106--1128[label="0.0714286;2pkt 2fpkt"];
1106--1631[label="0.178571;5pkt 5fpkt"];
1106--2573[label="0.964286;27pkt 27fpkt"];
1106--3072[label="0.964286;27pkt 27fpkt"];
1128--1963[label="1;9pkt 9fpkt"];
1128--2573[label="0.0645161;2pkt 2fpkt"];
1128--2764[label="1;8pkt 8fpkt"];
1128--3072[label="0.0645161;2pkt 2fpkt"];
1128--3164[label="1;9pkt 9fpkt"];
1409--1797[label="0.0810811;3pkt 3fpkt"];
1409--1807[label="0.0540541;2pkt 2fpkt"];
1409--1812[label="0.108108;4pkt 4fpkt"];
1409--1819[label="0.0540541;2pkt 2fpkt"];
1409--1832[label="0.0810811;3pkt 3fpkt"];
1409--1843[label="0.0540541;2pkt 2fpkt"];
1409--1847[label="0.108108;4pkt 4fpkt"];
1409--1855[label="0.0540541;2pkt 2fpkt"];
1409--1864[label="0.0810811;3pkt 3fpkt"];
1409--1872[label="0.0540541;2pkt 2fpkt"];
1409--1876[label="0.108108;4pkt 4fpkt"];
1409--1881[label="0.0540541;2pkt 2fpkt"];
1409--2359[label="0.972973;36pkt 36fpkt"];
1456--1797[label="0.0697674;3pkt 3fpkt"];
1456--1807[label="0.0232558;1pkt 1fpkt"];
1456--1812[label="0.0232558;1pkt 1fpkt"];
1456--1832[label="0.0697674;3pkt 3fpkt"];
1456--1843[label="0.0232558;1pkt 1fpkt"];
1456--1847[label="0.0232558;1pkt 1fpkt"];
1456--1864[label="0.0697674;3pkt 3fpkt"];
1456--1872[label="0.0232558;1pkt 1fpkt"];
1456--1876[label="0.0232558;1pkt 1fpkt"];
1456--2495[label="1;42pkt 42fpkt"];
1456--3030[label="1;43pkt 43fpkt"];
1456--3301[label="1;42pkt 42fpkt"];
1631--1812[label="0.0277778;2pkt 2fpkt"];
1631--1819[label="0.0277778;2pkt 2fpkt"];
1631--1847[label="0.0277778;2pkt 2fpkt"];
1631--1855[label="0.0277778;2pkt 2fpkt"];
1631--1876[label="0.0277778;2pkt 2fpkt"];
1631--1881[label="0.0277778;2pkt 2fpkt"];
1631--1930[label="0.0833333;5pkt 5fpkt"];
1631--1942[label="0.111111;1pkt 1fpkt"];
1631--2561[label="0.636364;7pkt 7fpkt"];
1631--2573[label="0.193548;6pkt 6fpkt"];
1631--2745[label="0.0833333;5pkt 5fpkt"];
1631--2755[label="0.125;1pkt 1fpkt"];
1631--3069[label="0.636364;7pkt 7fpkt"];
1631--3072[label="0.193548;6pkt 6fpkt"];
1631--3158[label="0.111111;1pkt 1fpkt"];
1908--2733[label="1;42pkt 42fpkt"];
1963--2764[label="1;8pkt 8fpkt"];
1963--3164[label="1;9pkt 9fpkt"];
2256--2903[label="1;6pkt 6fpkt"];
2495--3030[label="1;42pkt 42fpkt"];
2495--3301[label="1;42pkt 42fpkt"];
2573--3072[label="1;31pkt 31fpkt"];
2755--3158[label="1;8pkt 8fpkt"];
2764--3164[label="1;8pkt 8fpkt"];
3030--3301[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.43.98"/>
      <filter dst_ip="208.77.224.47" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
1121[label="114.73.19.43;d;2pkt 2fpkt", shape=diamond, color=yellow];
1122[label="208.227.38.223;s;2pkt 2fpkt", shape=diamond, color=yellow];
1680[label="208.227.38.223;s;2pkt 2fpkt", shape=hexagon, color=black];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.227.38.223:4390, 114.73.19.43:7070}[50%]&lt;BR/&gt;{208.227.38.223:6970, 114.73.19.43:6770}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7070: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 6770: (25%)&lt;BR/&gt; 4390: (25%)&gt;];
}
1121--1122[label="1;2pkt 2fpkt"];
1121--1680[label="1;2pkt 2fpkt"];
1122--1680[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="114.73.19.43" dst_port="6770" src_ip="208.227.38.223" src_port="6970"/>
      <filter dst_ip="114.73.19.43" dst_port="7070" src_ip="208.227.38.223" src_port="4390"/>
    </slice>
    <from sec="1026018009" usec="0"/>
    <to sec="1026019630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.496475,1.97206,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
1061[label="194.139.203.80;d;93pkt 93fpkt", shape=diamond, color=yellow];
1062[label="171.70.143.45;s;109pkt 109fpkt", shape=diamond, color=yellow];
2046[label="171.70.143.45;158pkt 158fpkt", shape=pentagon, color=darkviolet];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.70.143.45:*, 194.139.203.80:80}[81.1321%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1667%)&lt;BR/&gt; 110: (5.83333%)&lt;BR/&gt; 49457: (0.416667%)&lt;BR/&gt; 49456: (0.416667%)&lt;BR/&gt; 49455: (0.416667%)&gt;];
}
1061--1062[label="0.989247;92pkt 92fpkt"];
1061--1225[label="0.0107527;1pkt 1fpkt"];
1061--1828[label="0.0537634;5pkt 5fpkt"];
1061--1831[label="0.0107527;1pkt 1fpkt"];
1061--1860[label="0.0537634;5pkt 5fpkt"];
1061--1863[label="0.0107527;1pkt 1fpkt"];
1061--2046[label="0.989247;92pkt 92fpkt"];
1061--2231[label="0.0107527;1pkt 1fpkt"];
1062--1123[label="0.254237;15pkt 15fpkt"];
1062--1828[label="0.0366972;4pkt 4fpkt"];
1062--1831[label="0.00917431;1pkt 1fpkt"];
1062--1860[label="0.0366972;4pkt 4fpkt"];
1062--1863[label="0.00917431;1pkt 1fpkt"];
1062--2046[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_ip="194.139.203.80" dst_port="80" src_ip="171.70.143.45"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
1077[label="209.201.228.107;s;126pkt 126fpkt", shape=diamond, color=yellow];
1165[label="62.179.133.254;d;11pkt 11fpkt", shape=diamond, color=yellow];
2264[label="209.201.228.107;127pkt 127fpkt", shape=pentagon, color=darkviolet];
2908[label="209.201.228.107;127pkt 127fpkt", shape=invtriangle, color=brown];
3240[label="209.201.228.107;127pkt 127fpkt", shape=invhouse, color=bisque];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.228.107:80, 223.230.148.107:*}[61.7188%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4556%)&lt;BR/&gt; 1558: (0.675676%)&lt;BR/&gt; 4490: (0.482625%)&lt;BR/&gt; 4489: (0.482625%)&lt;BR/&gt; 4488: (0.482625%)&gt;];
}
1077--1133[label="0.666667;20pkt 20fpkt"];
1077--1165[label="1;11pkt 11fpkt"];
1077--1166[label="0.658333;79pkt 79fpkt"];
1077--1734[label="0.658333;79pkt 79fpkt"];
1077--1807[label="0.015873;2pkt 2fpkt"];
1077--1843[label="0.015873;2pkt 2fpkt"];
1077--1872[label="0.015873;2pkt 2fpkt"];
1077--2264[label="0.992063;125pkt 125fpkt"];
1077--2908[label="0.992063;125pkt 125fpkt"];
1077--3240[label="0.992063;125pkt 125fpkt"];
1165--2264[label="1;11pkt 11fpkt"];
1165--2908[label="1;11pkt 11fpkt"];
1165--3240[label="1;11pkt 11fpkt"];
2264--2908[label="1;127pkt 127fpkt"];
2264--3240[label="1;127pkt 127fpkt"];
2908--3240[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_ip="223.230.148.107" src_ip="209.201.228.107" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
560[label="133.19.230.5;s;27pkt 27fpkt", shape=diamond, color=yellow];
1137[label="194.100.77.178;d;2pkt 2fpkt", shape=diamond, color=yellow];
1423[label="133.19.230.5;s;25pkt 25fpkt", shape=hexagon, color=black];
1906[label="133.19.230.5;45pkt 45fpkt", shape=pentagon, color=darkviolet];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.230.5:80, *:*}[97.8261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4949%)&lt;BR/&gt; 1188: (2.0202%)&lt;BR/&gt; 1187: (2.0202%)&lt;BR/&gt; 1086: (2.0202%)&lt;BR/&gt; 1085: (2.0202%)&gt;];
}
560--1137[label="1;2pkt 2fpkt"];
560--1423[label="1;25pkt 25fpkt"];
560--1906[label="0.962963;26pkt 26fpkt"];
1137--1423[label="1;2pkt 2fpkt"];
1137--1906[label="1;2pkt 2fpkt"];
1423--1906[label="0.96;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="133.19.230.5" src_port="80"/>
    </slice>
    <from sec="1026018016" usec="0"/>
    <to sec="1026019611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611097,1.9521,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
1112[label="115.65.214.75;s;2pkt 2fpkt", shape=diamond, color=yellow];
2164[label="115.65.214.75;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2859[label="115.65.214.75;1pkt 1fpkt", shape=invtriangle, color=brown];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{115.65.214.75:4529, 157.149.128.98:21}[50%]&lt;BR/&gt;{115.65.214.75:4531, 157.149.128.98:20}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4531: (37.5%)&lt;BR/&gt; 20: (37.5%)&lt;BR/&gt; 4529: (12.5%)&lt;BR/&gt; 21: (12.5%)&gt;];
}
1112--1147[label="1;2pkt 2fpkt"];
1112--2164[label="1;1pkt 1fpkt"];
1112--2859[label="1;1pkt 1fpkt"];
2164--2859[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.128.98" dst_port="20" src_ip="115.65.214.75" src_port="4531"/>
      <filter dst_ip="157.149.128.98" dst_port="21" src_ip="115.65.214.75" src_port="4529"/>
    </slice>
    <from sec="1026019118" usec="0"/>
    <to sec="1026019322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
1064[label="194.231.29.176;s;1pkt 1fpkt", shape=diamond, color=yellow];
1161[label="154.213.161.245;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.231.29.176:1214, 154.213.161.245:1626}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1626: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
1064--1161[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.161.245" dst_port="1626" src_ip="194.231.29.176" src_port="1214"/>
    </slice>
    <from sec="1026018856" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.712811,1.89934,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
89[label="133.19.153.164;s;954pkt 954fpkt", shape=diamond, color=yellow];
197[label="85.142.248.97;d;1pkt 1fpkt", shape=diamond, color=yellow];
204[label="209.220.228.105;d;1pkt 1fpkt", shape=diamond, color=yellow];
337[label="209.81.206.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
350[label="36.181.141.209;d;3pkt 3fpkt", shape=diamond, color=yellow];
466[label="63.232.131.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
468[label="60.109.172.145;d;2pkt 2fpkt", shape=diamond, color=yellow];
648[label="56.133.87.149;d;1pkt 1fpkt", shape=diamond, color=yellow];
778[label="209.220.209.183;d;3pkt 3fpkt", shape=diamond, color=yellow];
846[label="209.181.62.182;d;1pkt 1fpkt", shape=diamond, color=yellow];
946[label="85.85.192.77;d;1pkt 1fpkt", shape=diamond, color=yellow];
1017[label="209.220.139.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
1196[label="208.214.53.175;d;1pkt 1fpkt", shape=diamond, color=yellow];
1287[label="60.109.172.145;d;2pkt 2fpkt", shape=hexagon, color=black];
1314[label="85.142.248.97;d;1pkt 1fpkt", shape=hexagon, color=black];
1321[label="209.220.228.105;d;1pkt 1fpkt", shape=hexagon, color=black];
1417[label="36.181.141.209;d;3pkt 3fpkt", shape=hexagon, color=black];
1450[label="63.232.131.247;d;1pkt 1fpkt", shape=hexagon, color=black];
1493[label="209.220.209.183;d;3pkt 3fpkt", shape=hexagon, color=black];
2451[label="133.19.153.164;958pkt 958fpkt", shape=pentagon, color=darkviolet];
3008[label="133.19.153.164;959pkt 959fpkt", shape=invtriangle, color=brown];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.153.164:1214, *:1214}[79.9791%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (89.6344%)&lt;BR/&gt; 3276: (0.103484%)&lt;BR/&gt; 3118: (0.103484%)&lt;BR/&gt; 1610: (0.103484%)&lt;BR/&gt; 1028: (0.103484%)&gt;];
}
89--197[label="1;1pkt 1fpkt"];
89--204[label="1;1pkt 1fpkt"];
89--337[label="1;1pkt 1fpkt"];
89--350[label="1;3pkt 3fpkt"];
89--466[label="1;1pkt 1fpkt"];
89--468[label="1;2pkt 2fpkt"];
89--648[label="1;1pkt 1fpkt"];
89--778[label="1;3pkt 3fpkt"];
89--846[label="1;1pkt 1fpkt"];
89--946[label="1;1pkt 1fpkt"];
89--1017[label="1;1pkt 1fpkt"];
89--1196[label="1;1pkt 1fpkt"];
89--1287[label="1;2pkt 2fpkt"];
89--1314[label="1;1pkt 1fpkt"];
89--1321[label="1;1pkt 1fpkt"];
89--1417[label="1;3pkt 3fpkt"];
89--1450[label="1;1pkt 1fpkt"];
89--1493[label="1;3pkt 3fpkt"];
89--2451[label="0.998952;953pkt 953fpkt"];
89--3008[label="1;954pkt 954fpkt"];
197--1314[label="1;1pkt 1fpkt"];
197--2451[label="1;1pkt 1fpkt"];
197--3008[label="1;1pkt 1fpkt"];
204--1321[label="1;1pkt 1fpkt"];
204--2451[label="1;1pkt 1fpkt"];
204--3008[label="1;1pkt 1fpkt"];
337--2451[label="1;1pkt 1fpkt"];
337--3008[label="1;1pkt 1fpkt"];
350--1417[label="1;3pkt 3fpkt"];
350--2451[label="1;3pkt 3fpkt"];
350--3008[label="1;3pkt 3fpkt"];
466--1450[label="1;1pkt 1fpkt"];
466--2451[label="1;1pkt 1fpkt"];
466--3008[label="1;1pkt 1fpkt"];
468--1287[label="1;2pkt 2fpkt"];
468--2451[label="1;2pkt 2fpkt"];
468--3008[label="1;2pkt 2fpkt"];
648--2451[label="1;1pkt 1fpkt"];
648--3008[label="1;1pkt 1fpkt"];
778--1493[label="1;3pkt 3fpkt"];
778--2451[label="1;3pkt 3fpkt"];
778--3008[label="1;3pkt 3fpkt"];
846--2451[label="1;1pkt 1fpkt"];
846--3008[label="1;1pkt 1fpkt"];
946--2451[label="1;1pkt 1fpkt"];
946--3008[label="1;1pkt 1fpkt"];
1017--2451[label="1;1pkt 1fpkt"];
1017--3008[label="1;1pkt 1fpkt"];
1196--2451[label="1;1pkt 1fpkt"];
1196--3008[label="1;1pkt 1fpkt"];
1287--2451[label="1;2pkt 2fpkt"];
1287--3008[label="1;2pkt 2fpkt"];
1314--2451[label="1;1pkt 1fpkt"];
1314--3008[label="1;1pkt 1fpkt"];
1321--2451[label="1;1pkt 1fpkt"];
1321--3008[label="1;1pkt 1fpkt"];
1417--2451[label="1;3pkt 3fpkt"];
1417--3008[label="1;3pkt 3fpkt"];
1450--2451[label="1;1pkt 1fpkt"];
1450--3008[label="1;1pkt 1fpkt"];
1493--2451[label="1;3pkt 3fpkt"];
1493--3008[label="1;3pkt 3fpkt"];
2451--3008[label="1;958pkt 958fpkt"];
</description>
    <slice>
      <filter dst_port="1214" src_ip="133.19.153.164" src_port="1214"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
1173[label="62.82.232.206;d;1pkt 1fpkt", shape=diamond, color=yellow];
1198[label="157.149.70.213;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.149.70.213:110, 205.218.93.163:4567}[50%]&lt;BR/&gt;{157.149.70.213:47454, 62.82.232.206:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47454: (33.3333%)&lt;BR/&gt; 25: (33.3333%)&lt;BR/&gt; 4567: (16.6667%)&lt;BR/&gt; 110: (16.6667%)&gt;];
}
1173--1198[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="62.82.232.206" dst_port="25" src_ip="157.149.70.213" src_port="47454"/>
      <filter dst_ip="205.218.93.163" dst_port="4567" src_ip="157.149.70.213" src_port="110"/>
    </slice>
    <from sec="1026019343" usec="0"/>
    <to sec="1026019469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
1172[label="205.187.130.42;s;2pkt 2fpkt", shape=diamond, color=yellow];
1200[label="171.70.138.161;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.187.130.42:80, 171.70.138.161:1303}[50%]&lt;BR/&gt;{205.187.130.42:80, 171.70.138.161:1304}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1304: (25%)&lt;BR/&gt; 1303: (25%)&gt;];
}
1172--1200[label="1;2pkt 2fpkt"];
1172--2034[label="0.5;1pkt 1fpkt"];
1200--2034[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.138.161" dst_port="1304" src_ip="205.187.130.42" src_port="80"/>
      <filter dst_ip="171.70.138.161" dst_port="1303" src_ip="205.187.130.42" src_port="80"/>
    </slice>
    <from sec="1026019380" usec="0"/>
    <to sec="1026019405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
256[label="216.91.232.106;d;110pkt 110fpkt", shape=diamond, color=yellow];
429[label="209.201.230.209;d;207pkt 207fpkt", shape=diamond, color=yellow];
513[label="213.48.30.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
701[label="200.129.239.166;s;2pkt 2fpkt", shape=diamond, color=yellow];
1213[label="218.6.115.65;s;70pkt 70fpkt", shape=diamond, color=yellow];
1218[label="105.45.163.57;s;1pkt 1fpkt", shape=diamond, color=yellow];
2078[label="192.240.37.53;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2221[label="192.17.227.94;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2582[label="195.41.243.206;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2681[label="193.119.214.238;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2807[label="192.23.80.46;1pkt 1fpkt", shape=invtriangle, color=brown];
2820[label="192.240.37.53;3pkt 3fpkt", shape=invtriangle, color=brown];
2887[label="192.17.227.94;1pkt 1fpkt", shape=invtriangle, color=brown];
3120[label="193.119.214.238;2pkt 2fpkt", shape=invtriangle, color=brown];
3193[label="192.240.37.53;3pkt 3fpkt", shape=invhouse, color=bisque];
3230[label="192.17.227.94;2pkt 2fpkt", shape=invhouse, color=bisque];
3353[label="193.119.214.238;1pkt 1fpkt", shape=invhouse, color=bisque];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 216.91.232.106:*}[34.4828%]&lt;BR/&gt;{*:*, 209.201.230.209:6667}[31.6614%]&lt;BR/&gt;{*:113, *:*}[23.511%]&lt;BR/&gt;{218.6.115.65:*, 209.201.230.209:*}[21.9436%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (22.1951%)&lt;BR/&gt; 113: (13.6585%)&lt;BR/&gt; 6668: (1.70732%)&lt;BR/&gt; 0: (1.46341%)&lt;BR/&gt; 80: (1.21951%)&gt;];
}
256--513[label="1;1pkt 1fpkt"];
256--701[label="0.5;1pkt 1fpkt"];
256--2582[label="1;1pkt 1fpkt"];
429--701[label="0.5;1pkt 1fpkt"];
429--1213[label="1;70pkt 70fpkt"];
429--1218[label="1;1pkt 1fpkt"];
429--1807[label="0.00483092;1pkt 1fpkt"];
429--1843[label="0.00483092;1pkt 1fpkt"];
429--1872[label="0.00483092;1pkt 1fpkt"];
429--1877[label="0.00621118;1pkt 1fpkt"];
429--2078[label="0.333333;1pkt 1fpkt"];
429--2221[label="1;1pkt 1fpkt"];
429--2681[label="1;1pkt 1fpkt"];
429--2807[label="1;1pkt 1fpkt"];
429--2820[label="0.333333;1pkt 1fpkt"];
429--2887[label="1;1pkt 1fpkt"];
429--3120[label="1;2pkt 2fpkt"];
429--3193[label="0.333333;1pkt 1fpkt"];
429--3230[label="1;2pkt 2fpkt"];
429--3353[label="1;1pkt 1fpkt"];
2078--2820[label="1;3pkt 3fpkt"];
2078--3193[label="1;3pkt 3fpkt"];
2221--2887[label="1;1pkt 1fpkt"];
2221--3230[label="1;1pkt 1fpkt"];
2681--3120[label="1;1pkt 1fpkt"];
2681--3353[label="1;1pkt 1fpkt"];
2820--3193[label="1;3pkt 3fpkt"];
2887--3230[label="1;1pkt 1fpkt"];
3120--3353[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.91.232.106"/>
      <filter src_port="113"/>
      <filter dst_ip="209.201.230.209" src_ip="218.6.115.65"/>
      <filter dst_ip="209.201.230.209" dst_port="6667"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
1084[label="133.19.216.186;d;1pkt 1fpkt", shape=diamond, color=yellow];
1220[label="62.118.234.163;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.118.234.163:9000, 133.19.216.186:1649}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9000: (50%)&lt;BR/&gt; 1649: (50%)&gt;];
}
1084--1220[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.216.186" dst_port="1649" src_ip="62.118.234.163" src_port="9000"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
1212[label="154.213.40.154;s;4pkt 4fpkt", shape=diamond, color=yellow];
1221[label="60.47.53.29;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.40.154:1129, 60.47.53.29:6699}[25%]&lt;BR/&gt;{154.213.40.154:1042, 62.82.192.61:1863}[25%]&lt;BR/&gt;{154.213.40.154:1214, 212.68.154.5:80}[25%]&lt;BR/&gt;{154.213.40.154:1217, 212.68.154.5:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (20%)&lt;BR/&gt; 1129: (20%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 1863: (10%)&lt;BR/&gt; 1217: (10%)&gt;];
}
1212--1221[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.68.154.5" dst_port="80" src_ip="154.213.40.154" src_port="1217"/>
      <filter dst_ip="212.68.154.5" dst_port="80" src_ip="154.213.40.154" src_port="1214"/>
      <filter dst_ip="62.82.192.61" dst_port="1863" src_ip="154.213.40.154" src_port="1042"/>
      <filter dst_ip="60.47.53.29" dst_port="6699" src_ip="154.213.40.154" src_port="1129"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="173.138.195.166"/>
      <from sec="1026018551" usec="0"/>
      <to sec="1026019635" usec="0"/>
    </slice>
    <from sec="1026018551" usec="0"/>
    <to sec="1026019635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
232[label="154.213.199.29;s;787pkt 787fpkt", shape=diamond, color=yellow];
809[label="115.235.246.78;d;14pkt 14fpkt", shape=diamond, color=yellow];
1238[label="112.71.109.238;d;2pkt 2fpkt", shape=diamond, color=yellow];
1429[label="154.213.199.29;s;515pkt 515fpkt", shape=hexagon, color=black];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.199.29:80, *:*}[99.6188%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7724%)&lt;BR/&gt; 0: (0.455235%)&lt;BR/&gt; 2024: (0.265554%)&lt;BR/&gt; 1271: (0.227618%)&lt;BR/&gt; 2025: (0.189681%)&gt;];
}
232--809[label="1;14pkt 14fpkt"];
232--1238[label="1;2pkt 2fpkt"];
232--1429[label="1;515pkt 515fpkt"];
232--1797[label="0.0457433;36pkt 36fpkt"];
232--1807[label="0.0419314;33pkt 33fpkt"];
232--1812[label="0.0622618;49pkt 49fpkt"];
232--1819[label="0.0343075;27pkt 27fpkt"];
232--1832[label="0.0457433;36pkt 36fpkt"];
232--1843[label="0.0419314;33pkt 33fpkt"];
232--1847[label="0.0622618;49pkt 49fpkt"];
232--1855[label="0.0343075;27pkt 27fpkt"];
232--1864[label="0.0457433;36pkt 36fpkt"];
232--1872[label="0.0419314;33pkt 33fpkt"];
232--1876[label="0.0622618;49pkt 49fpkt"];
232--1881[label="0.0343075;27pkt 27fpkt"];
809--1429[label="1;14pkt 14fpkt"];
809--1812[label="0.142857;2pkt 2fpkt"];
809--1819[label="0.214286;3pkt 3fpkt"];
809--1847[label="0.142857;2pkt 2fpkt"];
809--1855[label="0.214286;3pkt 3fpkt"];
809--1876[label="0.142857;2pkt 2fpkt"];
809--1881[label="0.214286;3pkt 3fpkt"];
1429--1797[label="0.0699029;36pkt 36fpkt"];
1429--1807[label="0.0640777;33pkt 33fpkt"];
1429--1812[label="0.0951456;49pkt 49fpkt"];
1429--1819[label="0.0524272;27pkt 27fpkt"];
1429--1832[label="0.0699029;36pkt 36fpkt"];
1429--1843[label="0.0640777;33pkt 33fpkt"];
1429--1847[label="0.0951456;49pkt 49fpkt"];
1429--1855[label="0.0524272;27pkt 27fpkt"];
1429--1864[label="0.0699029;36pkt 36fpkt"];
1429--1872[label="0.0640777;33pkt 33fpkt"];
1429--1876[label="0.0951456;49pkt 49fpkt"];
1429--1881[label="0.0524272;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="154.213.199.29" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798219,2.00493,999,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
1244[label="212.229.9.144;d;1pkt 1fpkt", shape=diamond, color=yellow];
1245[label="157.149.222.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
3304[label="157.149.222.180;1pkt 1fpkt", shape=invhouse, color=bisque];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.149.222.180:49027, 212.229.9.144:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49027: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
1244--1245[label="1;1pkt 1fpkt"];
1244--3304[label="1;1pkt 1fpkt"];
1245--3304[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.229.9.144" dst_port="25" src_ip="157.149.222.180" src_port="49027"/>
    </slice>
    <from sec="1026019593" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.712811,1.89934,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
79[label="70.111.109.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
80[label="133.19.24.92;s;152pkt 152fpkt", shape=diamond, color=yellow];
1250[label="70.111.109.169;d;1pkt 1fpkt", shape=hexagon, color=black];
2214[label="133.19.24.92;165pkt 165fpkt", shape=pentagon, color=darkviolet];
2885[label="133.19.24.92;165pkt 165fpkt", shape=invtriangle, color=brown];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.24.92:6257, *:6257}[81.9277%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (81.8182%)&lt;BR/&gt; 6699: (9.09091%)&lt;BR/&gt; 4889: (0.309917%)&lt;BR/&gt; 4820: (0.309917%)&lt;BR/&gt; 4765: (0.309917%)&gt;];
}
79--80[label="1;1pkt 1fpkt"];
79--1250[label="1;1pkt 1fpkt"];
80--1250[label="1;1pkt 1fpkt"];
80--1862[label="0.0657895;10pkt 10fpkt"];
80--2214[label="0.993421;151pkt 151fpkt"];
80--2885[label="0.993421;151pkt 151fpkt"];
2214--2885[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="133.19.24.92" src_port="6257"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
372[label="133.19.169.138;d;73pkt 73fpkt", shape=diamond, color=yellow];
1272[label="133.19.169.138;d;195pkt 195fpkt", shape=hexagon, color=black];
1942[label="60.196.114.16;9pkt 9fpkt", shape=pentagon, color=darkviolet];
1972[label="208.132.170.24;60pkt 60fpkt", shape=pentagon, color=darkviolet];
2017[label="206.98.240.33;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2202[label="208.140.103.87;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2664[label="208.129.194.233;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2690[label="112.167.42.242;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2769[label="208.132.170.24;61pkt 61fpkt", shape=invtriangle, color=brown];
2791[label="206.98.240.33;4pkt 4fpkt", shape=invtriangle, color=brown];
2876[label="208.140.103.87;4pkt 4fpkt", shape=invtriangle, color=brown];
3125[label="112.167.42.242;2pkt 2fpkt", shape=invtriangle, color=brown];
3158[label="60.196.114.16;9pkt 9fpkt", shape=invhouse, color=bisque];
3167[label="208.132.170.24;60pkt 60fpkt", shape=invhouse, color=bisque];
3179[label="206.98.240.33;3pkt 3fpkt", shape=invhouse, color=bisque];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{112.184.6.237:80, 133.19.169.138:*}[45.6522%]&lt;BR/&gt;{208.132.170.24:80, 133.19.169.138:*}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.187%)&lt;BR/&gt; 4236: (0.406504%)&lt;BR/&gt; 4235: (0.406504%)&lt;BR/&gt; 4234: (0.406504%)&lt;BR/&gt; 4115: (0.406504%)&gt;];
}
372--1272[label="0.0136986;1pkt 1fpkt"];
372--1942[label="0.111111;1pkt 1fpkt"];
372--2017[label="0.666667;2pkt 2fpkt"];
372--2410[label="0.3;3pkt 3fpkt"];
372--2675[label="0.69863;51pkt 51fpkt"];
372--2791[label="0.5;2pkt 2fpkt"];
372--3158[label="0.111111;1pkt 1fpkt"];
372--3179[label="0.666667;2pkt 2fpkt"];
1272--1797[label="0.025641;5pkt 5fpkt"];
1272--1807[label="0.0153846;3pkt 3fpkt"];
1272--1832[label="0.025641;5pkt 5fpkt"];
1272--1843[label="0.0153846;3pkt 3fpkt"];
1272--1864[label="0.025641;5pkt 5fpkt"];
1272--1872[label="0.0153846;3pkt 3fpkt"];
1272--1972[label="0.983333;59pkt 59fpkt"];
1272--2017[label="0.333333;1pkt 1fpkt"];
1272--2202[label="1;5pkt 5fpkt"];
1272--2410[label="0.3;3pkt 3fpkt"];
1272--2642[label="0.2;1pkt 1fpkt"];
1272--2664[label="1;2pkt 2fpkt"];
1272--2675[label="0.532374;74pkt 74fpkt"];
1272--2690[label="1;2pkt 2fpkt"];
1272--2769[label="0.983607;60pkt 60fpkt"];
1272--2791[label="0.5;2pkt 2fpkt"];
1272--2876[label="1;4pkt 4fpkt"];
1272--3125[label="1;2pkt 2fpkt"];
1272--3167[label="0.983333;59pkt 59fpkt"];
1272--3179[label="0.333333;1pkt 1fpkt"];
1942--2755[label="1;8pkt 8fpkt"];
1942--3158[label="1;9pkt 9fpkt"];
1972--2769[label="1;60pkt 60fpkt"];
1972--3167[label="1;60pkt 60fpkt"];
2017--2791[label="1;3pkt 3fpkt"];
2017--3179[label="1;3pkt 3fpkt"];
2202--2876[label="1;4pkt 4fpkt"];
2690--3125[label="1;2pkt 2fpkt"];
2769--3167[label="1;60pkt 60fpkt"];
2791--3179[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.169.138" src_ip="112.184.6.237" src_port="80"/>
      <filter dst_ip="133.19.169.138" src_ip="208.132.170.24" src_port="80"/>
    </slice>
    <from sec="1026018004" usec="0"/>
    <to sec="1026019603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,501,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
403[label="200.94.199.5;d;4pkt 4fpkt", shape=diamond, color=yellow];
508[label="171.70.37.140;s;4pkt 4fpkt", shape=diamond, color=yellow];
1278[label="200.94.199.5;d;5pkt 5fpkt", shape=hexagon, color=black];
2366[label="171.70.37.140;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.70.37.140:21, 200.94.199.5:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (47.2222%)&lt;BR/&gt; 4050: (11.1111%)&lt;BR/&gt; 4037: (11.1111%)&lt;BR/&gt; 4025: (11.1111%)&lt;BR/&gt; 4008: (11.1111%)&gt;];
}
403--508[label="1;4pkt 4fpkt"];
403--1278[label="1;4pkt 4fpkt"];
403--2366[label="1;4pkt 4fpkt"];
508--1278[label="1;4pkt 4fpkt"];
508--2366[label="1;4pkt 4fpkt"];
1278--2366[label="0.8;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="200.94.199.5" src_ip="171.70.37.140" src_port="21"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
411[label="133.19.66.56;d;71pkt 71fpkt", shape=diamond, color=yellow];
471[label="61.199.115.234;s;3pkt 3fpkt", shape=diamond, color=yellow];
1279[label="133.19.66.56;d;65pkt 65fpkt", shape=hexagon, color=black];
1332[label="61.199.115.234;s;3pkt 3fpkt", shape=hexagon, color=black];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.19.66.56:6699}[77.4648%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (47.1831%)&lt;BR/&gt; 6257: (2.8169%)&lt;BR/&gt; 1961: (1.40845%)&lt;BR/&gt; 1958: (1.40845%)&lt;BR/&gt; 1947: (1.40845%)&gt;];
}
411--471[label="1;3pkt 3fpkt"];
411--1279[label="1;65pkt 65fpkt"];
411--1332[label="1;3pkt 3fpkt"];
411--1862[label="0.0140845;1pkt 1fpkt"];
471--1279[label="1;3pkt 3fpkt"];
471--1332[label="1;3pkt 3fpkt"];
1279--1332[label="1;3pkt 3fpkt"];
1279--1862[label="0.0153846;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.66.56" dst_port="6699"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
417[label="157.149.237.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
418[label="192.2.176.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
1280[label="157.149.237.8;d;1pkt 1fpkt", shape=hexagon, color=black];
1399[label="192.2.176.96;s;1pkt 1fpkt", shape=hexagon, color=black];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.2.176.96:5001, 157.149.237.8:3319}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 3319: (50%)&gt;];
}
417--418[label="1;1pkt 1fpkt"];
417--1280[label="1;1pkt 1fpkt"];
417--1399[label="1;1pkt 1fpkt"];
418--1280[label="1;1pkt 1fpkt"];
418--1399[label="1;1pkt 1fpkt"];
1280--1399[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.237.8" dst_port="3319" src_ip="192.2.176.96" src_port="5001"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
72[label="209.201.225.46;d;9pkt 9fpkt", shape=diamond, color=yellow];
75[label="213.48.30.170;s;3pkt 3fpkt", shape=diamond, color=yellow];
1291[label="209.201.225.46;d;9pkt 9fpkt", shape=hexagon, color=black];
1292[label="213.48.30.170;s;3pkt 3fpkt", shape=hexagon, color=black];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{105.33.24.145:*, 209.201.225.46:80}[33.3333%]&lt;BR/&gt;{213.48.30.170:*, 209.201.225.46:*}[33.3333%]&lt;BR/&gt;{*:*, 209.201.225.46:21}[22.2222%]&lt;BR/&gt;{85.31.194.34:*, 209.201.225.46:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 21: (12.5%)&lt;BR/&gt; 52414: (8.33333%)&lt;BR/&gt; 52409: (8.33333%)&lt;BR/&gt; 2881: (8.33333%)&gt;];
}
72--75[label="1;3pkt 3fpkt"];
72--1291[label="1;9pkt 9fpkt"];
72--1292[label="1;3pkt 3fpkt"];
75--1291[label="1;3pkt 3fpkt"];
75--1292[label="1;3pkt 3fpkt"];
1291--1292[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.201.225.46" src_ip="213.48.30.170"/>
      <filter dst_ip="209.201.225.46" src_ip="85.31.194.34"/>
      <filter dst_ip="209.201.225.46" dst_port="21"/>
      <filter dst_ip="209.201.225.46" dst_port="80" src_ip="105.33.24.145"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
522[label="85.166.135.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
1320[label="85.166.135.226;s;1pkt 1fpkt", shape=hexagon, color=black];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.166.135.226:3313, 133.19.72.146:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3313: (50%)&gt;];
}
522--1320[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.72.146" dst_port="6699" src_ip="85.166.135.226" src_port="3313"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
537[label="209.201.228.165;s;146pkt 146fpkt", shape=diamond, color=yellow];
1327[label="209.201.228.165;s;144pkt 144fpkt", shape=hexagon, color=black];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.228.165:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
537--1327[label="1;144pkt 144fpkt"];
</description>
    <slice>
      <filter src_ip="209.201.228.165"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
368[label="133.19.157.153;d;8pkt 8fpkt", shape=diamond, color=yellow];
551[label="36.33.148.143;s;1pkt 1fpkt", shape=diamond, color=yellow];
1334[label="36.33.148.143;s;1pkt 1fpkt", shape=hexagon, color=black];
2267[label="56.165.79.108;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 133.19.157.153:6257}[50%]&lt;BR/&gt;{*:6699, 133.19.157.153:*}[37.5%]&lt;BR/&gt;{36.36.37.105:*, 133.19.157.153:*}[25%]&lt;BR/&gt;{56.165.79.108:*, 133.19.157.153:*}[25%]&lt;BR/&gt;{36.231.128.231:*, 133.19.157.153:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (36.3636%)&lt;BR/&gt; 6699: (31.8182%)&lt;BR/&gt; 2443: (13.6364%)&lt;BR/&gt; 3077: (9.09091%)&lt;BR/&gt; 3083: (4.54545%)&gt;];
}
368--551[label="1;1pkt 1fpkt"];
368--1334[label="1;1pkt 1fpkt"];
368--2267[label="1;1pkt 1fpkt"];
551--1334[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.157.153" src_ip="36.231.128.231"/>
      <filter dst_ip="133.19.157.153" src_ip="56.165.79.108"/>
      <filter dst_ip="133.19.157.153" src_ip="36.36.37.105"/>
      <filter dst_ip="133.19.157.153" src_port="6699"/>
      <filter dst_ip="133.19.157.153" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1026018002" usec="0"/>
    <to sec="1026019502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.712811,1.89934,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
373[label="207.116.51.33;s;35pkt 35fpkt", shape=diamond, color=yellow];
1337[label="207.116.51.33;s;35pkt 35fpkt", shape=hexagon, color=black];
2014[label="207.116.51.33;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2789[label="207.116.51.33;35pkt 35fpkt", shape=invtriangle, color=brown];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.116.51.33:80, 208.67.144.173:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1879: (1.42857%)&lt;BR/&gt; 1878: (1.42857%)&lt;BR/&gt; 1877: (1.42857%)&lt;BR/&gt; 1874: (1.42857%)&gt;];
}
373--1337[label="1;35pkt 35fpkt"];
373--1797[label="0.114286;4pkt 4fpkt"];
373--1807[label="0.114286;4pkt 4fpkt"];
373--1812[label="0.114286;4pkt 4fpkt"];
373--1819[label="0.114286;4pkt 4fpkt"];
373--1832[label="0.114286;4pkt 4fpkt"];
373--1843[label="0.114286;4pkt 4fpkt"];
373--1847[label="0.114286;4pkt 4fpkt"];
373--1855[label="0.114286;4pkt 4fpkt"];
373--1864[label="0.114286;4pkt 4fpkt"];
373--1872[label="0.114286;4pkt 4fpkt"];
373--1876[label="0.114286;4pkt 4fpkt"];
373--1881[label="0.114286;4pkt 4fpkt"];
373--2014[label="1;35pkt 35fpkt"];
373--2789[label="1;35pkt 35fpkt"];
1337--1797[label="0.114286;4pkt 4fpkt"];
1337--1807[label="0.114286;4pkt 4fpkt"];
1337--1812[label="0.114286;4pkt 4fpkt"];
1337--1819[label="0.114286;4pkt 4fpkt"];
1337--1832[label="0.114286;4pkt 4fpkt"];
1337--1843[label="0.114286;4pkt 4fpkt"];
1337--1847[label="0.114286;4pkt 4fpkt"];
1337--1855[label="0.114286;4pkt 4fpkt"];
1337--1864[label="0.114286;4pkt 4fpkt"];
1337--1872[label="0.114286;4pkt 4fpkt"];
1337--1876[label="0.114286;4pkt 4fpkt"];
1337--1881[label="0.114286;4pkt 4fpkt"];
1337--2014[label="1;35pkt 35fpkt"];
1337--2789[label="1;35pkt 35fpkt"];
2014--2789[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="208.67.144.173" src_ip="207.116.51.33" src_port="80"/>
    </slice>
    <from sec="1026018004" usec="0"/>
    <to sec="1026018600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
223[label="147.136.34.28;s;112pkt 112fpkt", shape=diamond, color=yellow];
284[label="208.237.114.173;d;1272pkt 1272fpkt", shape=diamond, color=yellow];
298[label="63.20.236.108;s;127pkt 127fpkt", shape=diamond, color=yellow];
386[label="62.82.197.95;s;9pkt 9fpkt", shape=diamond, color=yellow];
536[label="204.2.130.247;s;483pkt 483fpkt", shape=diamond, color=yellow];
719[label="157.149.70.198;d;145pkt 145fpkt", shape=diamond, color=yellow];
796[label="218.138.134.206;s;110pkt 110fpkt", shape=diamond, color=yellow];
858[label="63.20.236.14;s;57pkt 57fpkt", shape=diamond, color=yellow];
870[label="60.196.118.42;s;22pkt 22fpkt", shape=diamond, color=yellow];
1057[label="154.213.17.161;d;117pkt 117fpkt", shape=diamond, color=yellow];
1070[label="157.149.202.126;d;69pkt 69fpkt", shape=diamond, color=yellow];
1338[label="147.136.34.28;s;112pkt 112fpkt", shape=hexagon, color=black];
1344[label="62.82.197.95;s;10pkt 10fpkt", shape=hexagon, color=black];
1362[label="208.237.114.173;d;1272pkt 1272fpkt", shape=hexagon, color=black];
1639[label="157.149.202.126;d;68pkt 68fpkt", shape=hexagon, color=black];
1678[label="157.149.70.198;d;136pkt 136fpkt", shape=hexagon, color=black];
1939[label="63.20.236.14;123pkt 123fpkt", shape=pentagon, color=darkviolet];
1989[label="147.136.34.28;112pkt 112fpkt", shape=pentagon, color=darkviolet];
2188[label="194.4.202.81;32pkt 32fpkt", shape=pentagon, color=darkviolet];
2220[label="60.219.188.94;64pkt 64fpkt", shape=pentagon, color=darkviolet];
2252[label="206.64.164.104;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2314[label="212.68.149.125;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2433[label="62.53.190.159;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2467[label="63.20.250.169;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2482[label="62.82.197.175;64pkt 64fpkt", shape=pentagon, color=darkviolet];
2579[label="218.138.134.206;140pkt 140fpkt", shape=pentagon, color=darkviolet];
2609[label="195.193.80.214;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2629[label="217.14.85.221;36pkt 36fpkt", shape=pentagon, color=darkviolet];
2673[label="215.124.63.236;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2692[label="200.69.177.242;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2730[label="62.90.164.5;30pkt 30fpkt", shape=invtriangle, color=brown];
2752[label="63.20.236.14;122pkt 122fpkt", shape=invtriangle, color=brown];
2902[label="206.64.164.104;12pkt 12fpkt", shape=invtriangle, color=brown];
2995[label="62.53.190.159;26pkt 26fpkt", shape=invtriangle, color=brown];
3023[label="62.82.197.175;64pkt 64fpkt", shape=invtriangle, color=brown];
3099[label="217.14.85.221;37pkt 37fpkt", shape=invtriangle, color=brown];
3127[label="200.69.177.242;16pkt 16fpkt", shape=invtriangle, color=brown];
3237[label="206.64.164.104;11pkt 11fpkt", shape=invhouse, color=bisque];
3284[label="62.53.190.159;27pkt 27fpkt", shape=invhouse, color=bisque];
3299[label="62.82.197.175;63pkt 63fpkt", shape=invhouse, color=bisque];
3341[label="217.14.85.221;36pkt 36fpkt", shape=invhouse, color=bisque];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 208.237.114.173:*}[55.5702%]&lt;BR/&gt;{204.2.130.247:80, *:*}[21.2682%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4%)&lt;BR/&gt; 443: (0.371429%)&lt;BR/&gt; 7892: (0.190476%)&lt;BR/&gt; 54717: (0.0666667%)&lt;BR/&gt; 2020: (0.0571429%)&gt;];
}
223--284[label="1;112pkt 112fpkt"];
223--1338[label="1;112pkt 112fpkt"];
223--1362[label="1;112pkt 112fpkt"];
223--1797[label="0.133929;15pkt 15fpkt"];
223--1807[label="0.276786;31pkt 31fpkt"];
223--1812[label="0.0535714;6pkt 6fpkt"];
223--1819[label="0.0357143;4pkt 4fpkt"];
223--1832[label="0.133929;15pkt 15fpkt"];
223--1843[label="0.276786;31pkt 31fpkt"];
223--1847[label="0.0535714;6pkt 6fpkt"];
223--1855[label="0.0357143;4pkt 4fpkt"];
223--1864[label="0.133929;15pkt 15fpkt"];
223--1872[label="0.276786;31pkt 31fpkt"];
223--1876[label="0.0535714;6pkt 6fpkt"];
223--1881[label="0.0357143;4pkt 4fpkt"];
223--1989[label="1;112pkt 112fpkt"];
284--298[label="0.606299;77pkt 77fpkt"];
284--386[label="0.333333;3pkt 3fpkt"];
284--536[label="0.0724638;35pkt 35fpkt"];
284--607[label="0.0516129;16pkt 16fpkt"];
284--616[label="0.640625;41pkt 41fpkt"];
284--730[label="0.00862069;3pkt 3fpkt"];
284--754[label="1;1pkt 1fpkt"];
284--796[label="1;110pkt 110fpkt"];
284--858[label="0.210526;12pkt 12fpkt"];
284--870[label="1;22pkt 22fpkt"];
284--1048[label="0.895735;189pkt 189fpkt"];
284--1148[label="0.220339;13pkt 13fpkt"];
284--1338[label="1;112pkt 112fpkt"];
284--1344[label="1;10pkt 10fpkt"];
284--1362[label="1;1272pkt 1272fpkt"];
284--1381[label="0.487805;20pkt 20fpkt"];
284--1511[label="0.0512821;8pkt 8fpkt"];
284--1553[label="1;1pkt 1fpkt"];
284--1797[label="0.0409914;43pkt 43fpkt"];
284--1807[label="0.0444444;50pkt 50fpkt"];
284--1812[label="0.0455975;58pkt 58fpkt"];
284--1819[label="0.0573899;73pkt 73fpkt"];
284--1832[label="0.0409914;43pkt 43fpkt"];
284--1843[label="0.0444444;50pkt 50fpkt"];
284--1847[label="0.0455975;58pkt 58fpkt"];
284--1855[label="0.0573899;73pkt 73fpkt"];
284--1864[label="0.0409914;43pkt 43fpkt"];
284--1872[label="0.0444444;50pkt 50fpkt"];
284--1876[label="0.0455975;58pkt 58fpkt"];
284--1881[label="0.0573899;73pkt 73fpkt"];
284--1886[label="0.220339;13pkt 13fpkt"];
284--1901[label="0.0461538;3pkt 3fpkt"];
284--1908[label="0.571429;24pkt 24fpkt"];
284--1939[label="0.463415;57pkt 57fpkt"];
284--1989[label="1;112pkt 112fpkt"];
284--1994[label="0.217391;5pkt 5fpkt"];
284--2109[label="0.013245;2pkt 2fpkt"];
284--2220[label="0.6875;44pkt 44fpkt"];
284--2242[label="0.390476;41pkt 41fpkt"];
284--2314[label="1;2pkt 2fpkt"];
284--2364[label="0.16;8pkt 8fpkt"];
284--2482[label="0.046875;3pkt 3fpkt"];
284--2571[label="0.0348259;7pkt 7fpkt"];
284--2579[label="1;140pkt 140fpkt"];
284--2609[label="1;11pkt 11fpkt"];
284--2629[label="1;36pkt 36fpkt"];
284--2673[label="0.851852;23pkt 23fpkt"];
284--2688[label="0.0909091;3pkt 3fpkt"];
284--2692[label="1;16pkt 16fpkt"];
284--2703[label="0.0718686;35pkt 35fpkt"];
284--2704[label="0.0491803;3pkt 3fpkt"];
284--2721[label="0.220339;13pkt 13fpkt"];
284--2733[label="0.571429;24pkt 24fpkt"];
284--2752[label="0.467213;57pkt 57fpkt"];
284--2834[label="0.013245;2pkt 2fpkt"];
284--2889[label="0.0714286;3pkt 3fpkt"];
284--3023[label="0.046875;3pkt 3fpkt"];
284--3099[label="1;37pkt 37fpkt"];
284--3127[label="1;16pkt 16fpkt"];
284--3299[label="0.047619;3pkt 3fpkt"];
284--3341[label="1;36pkt 36fpkt"];
298--419[label="0.0393701;5pkt 5fpkt"];
298--452[label="0.0314961;4pkt 4fpkt"];
298--1057[label="0.222222;26pkt 26fpkt"];
298--1295[label="0.00787402;1pkt 1fpkt"];
298--1362[label="0.606299;77pkt 77fpkt"];
298--1411[label="0.0314961;4pkt 4fpkt"];
298--1438[label="0.0393701;5pkt 5fpkt"];
298--1760[label="0.0393701;5pkt 5fpkt"];
298--1773[label="0.00787402;1pkt 1fpkt"];
298--1797[label="0.0472441;6pkt 6fpkt"];
298--1807[label="0.023622;3pkt 3fpkt"];
298--1812[label="0.00787402;1pkt 1fpkt"];
298--1819[label="0.00787402;1pkt 1fpkt"];
298--1832[label="0.0472441;6pkt 6fpkt"];
298--1843[label="0.023622;3pkt 3fpkt"];
298--1847[label="0.00787402;1pkt 1fpkt"];
298--1855[label="0.00787402;1pkt 1fpkt"];
298--1864[label="0.0472441;6pkt 6fpkt"];
298--1872[label="0.023622;3pkt 3fpkt"];
298--1876[label="0.00787402;1pkt 1fpkt"];
298--1881[label="0.00787402;1pkt 1fpkt"];
386--719[label="0.666667;6pkt 6fpkt"];
386--1362[label="0.333333;3pkt 3fpkt"];
386--1678[label="0.666667;6pkt 6fpkt"];
536--1276[label="0.291925;141pkt 141fpkt"];
536--1362[label="0.0724638;35pkt 35fpkt"];
536--1797[label="0.0165631;8pkt 8fpkt"];
536--1807[label="0.0331263;16pkt 16fpkt"];
536--1812[label="0.0351967;17pkt 17fpkt"];
536--1819[label="0.0351967;17pkt 17fpkt"];
536--1832[label="0.0165631;8pkt 8fpkt"];
536--1843[label="0.0331263;16pkt 16fpkt"];
536--1847[label="0.0351967;17pkt 17fpkt"];
536--1855[label="0.0351967;17pkt 17fpkt"];
536--1864[label="0.0165631;8pkt 8fpkt"];
536--1872[label="0.0331263;16pkt 16fpkt"];
536--1876[label="0.0351967;17pkt 17fpkt"];
536--1881[label="0.0351967;17pkt 17fpkt"];
536--2703[label="0.99793;482pkt 482fpkt"];
719--730[label="0.0275862;4pkt 4fpkt"];
719--1106[label="0.0357143;1pkt 1fpkt"];
719--1511[label="0.0344828;5pkt 5fpkt"];
719--1678[label="1;136pkt 136fpkt"];
719--1797[label="0.0137931;2pkt 2fpkt"];
719--1807[label="0.0413793;6pkt 6fpkt"];
719--1812[label="0.0413793;6pkt 6fpkt"];
719--1819[label="0.00689655;1pkt 1fpkt"];
719--1832[label="0.0137931;2pkt 2fpkt"];
719--1843[label="0.0413793;6pkt 6fpkt"];
719--1847[label="0.0413793;6pkt 6fpkt"];
719--1855[label="0.00689655;1pkt 1fpkt"];
719--1864[label="0.0137931;2pkt 2fpkt"];
719--1872[label="0.0413793;6pkt 6fpkt"];
719--1876[label="0.0413793;6pkt 6fpkt"];
719--1881[label="0.00689655;1pkt 1fpkt"];
719--1902[label="0.0666667;2pkt 2fpkt"];
719--1939[label="0.00813008;1pkt 1fpkt"];
719--1994[label="0.0869565;2pkt 2fpkt"];
719--2110[label="0.0606061;2pkt 2fpkt"];
719--2131[label="0.0588235;1pkt 1fpkt"];
719--2135[label="0.0566038;3pkt 3fpkt"];
719--2188[label="0.03125;1pkt 1fpkt"];
719--2248[label="0.09375;3pkt 3fpkt"];
719--2308[label="0.075;3pkt 3fpkt"];
719--2424[label="0.0666667;1pkt 1fpkt"];
719--2433[label="0.148148;4pkt 4fpkt"];
719--2467[label="0.05;1pkt 1fpkt"];
719--2482[label="0.484375;31pkt 31fpkt"];
719--2514[label="0.117647;2pkt 2fpkt"];
719--2573[label="0.0322581;1pkt 1fpkt"];
719--2688[label="0.030303;1pkt 1fpkt"];
719--2704[label="0.0163934;1pkt 1fpkt"];
719--2730[label="0.0666667;2pkt 2fpkt"];
719--2752[label="0.00819672;1pkt 1fpkt"];
719--2935[label="0.075;3pkt 3fpkt"];
719--2995[label="0.153846;4pkt 4fpkt"];
719--3023[label="0.484375;31pkt 31fpkt"];
719--3072[label="0.0322581;1pkt 1fpkt"];
719--3254[label="0.075;3pkt 3fpkt"];
719--3284[label="0.148148;4pkt 4fpkt"];
719--3299[label="0.492063;31pkt 31fpkt"];
796--1362[label="1;110pkt 110fpkt"];
796--1812[label="0.0363636;4pkt 4fpkt"];
796--1819[label="0.209091;23pkt 23fpkt"];
796--1847[label="0.0363636;4pkt 4fpkt"];
796--1855[label="0.209091;23pkt 23fpkt"];
796--1876[label="0.0363636;4pkt 4fpkt"];
796--1881[label="0.209091;23pkt 23fpkt"];
796--2579[label="0.990909;109pkt 109fpkt"];
858--1362[label="0.210526;12pkt 12fpkt"];
858--1438[label="0.122807;7pkt 7fpkt"];
858--1760[label="0.122807;7pkt 7fpkt"];
858--1812[label="0.0350877;2pkt 2fpkt"];
858--1847[label="0.0350877;2pkt 2fpkt"];
858--1876[label="0.0350877;2pkt 2fpkt"];
858--1939[label="1;57pkt 57fpkt"];
858--2752[label="1;57pkt 57fpkt"];
870--1362[label="1;22pkt 22fpkt"];
870--1819[label="0.0454545;1pkt 1fpkt"];
870--1855[label="0.0454545;1pkt 1fpkt"];
870--1881[label="0.0454545;1pkt 1fpkt"];
1057--1570[label="0.034188;4pkt 4fpkt"];
1057--1812[label="0.00854701;1pkt 1fpkt"];
1057--1819[label="0.00854701;1pkt 1fpkt"];
1057--1847[label="0.00854701;1pkt 1fpkt"];
1057--1855[label="0.00854701;1pkt 1fpkt"];
1057--1876[label="0.00854701;1pkt 1fpkt"];
1057--1881[label="0.00854701;1pkt 1fpkt"];
1057--1998[label="0.128205;5pkt 5fpkt"];
1057--2541[label="0.598291;70pkt 70fpkt"];
1057--2704[label="0.0491803;3pkt 3fpkt"];
1057--2780[label="0.125;5pkt 5fpkt"];
1057--3174[label="0.128205;5pkt 5fpkt"];
1057--3324[label="0.598291;70pkt 70fpkt"];
1070--1639[label="1;68pkt 68fpkt"];
1070--2131[label="0.0588235;1pkt 1fpkt"];
1070--2252[label="1;11pkt 11fpkt"];
1070--2482[label="0.375;24pkt 24fpkt"];
1070--2704[label="0.0655738;4pkt 4fpkt"];
1070--2902[label="1;12pkt 12fpkt"];
1070--3023[label="0.375;24pkt 24fpkt"];
1070--3237[label="1;11pkt 11fpkt"];
1070--3299[label="0.380952;24pkt 24fpkt"];
1338--1362[label="1;112pkt 112fpkt"];
1338--1797[label="0.133929;15pkt 15fpkt"];
1338--1807[label="0.276786;31pkt 31fpkt"];
1338--1812[label="0.0535714;6pkt 6fpkt"];
1338--1819[label="0.0357143;4pkt 4fpkt"];
1338--1832[label="0.133929;15pkt 15fpkt"];
1338--1843[label="0.276786;31pkt 31fpkt"];
1338--1847[label="0.0535714;6pkt 6fpkt"];
1338--1855[label="0.0357143;4pkt 4fpkt"];
1338--1864[label="0.133929;15pkt 15fpkt"];
1338--1872[label="0.276786;31pkt 31fpkt"];
1338--1876[label="0.0535714;6pkt 6fpkt"];
1338--1881[label="0.0357143;4pkt 4fpkt"];
1338--1989[label="1;112pkt 112fpkt"];
1344--1362[label="1;10pkt 10fpkt"];
1344--1797[label="0.1;1pkt 1fpkt"];
1344--1807[label="0.2;2pkt 2fpkt"];
1344--1832[label="0.1;1pkt 1fpkt"];
1344--1843[label="0.2;2pkt 2fpkt"];
1344--1864[label="0.1;1pkt 1fpkt"];
1344--1872[label="0.2;2pkt 2fpkt"];
1362--1381[label="0.487805;20pkt 20fpkt"];
1362--1511[label="0.0512821;8pkt 8fpkt"];
1362--1553[label="1;1pkt 1fpkt"];
1362--1797[label="0.0409914;43pkt 43fpkt"];
1362--1807[label="0.0444444;50pkt 50fpkt"];
1362--1812[label="0.0455975;58pkt 58fpkt"];
1362--1819[label="0.0573899;73pkt 73fpkt"];
1362--1832[label="0.0409914;43pkt 43fpkt"];
1362--1843[label="0.0444444;50pkt 50fpkt"];
1362--1847[label="0.0455975;58pkt 58fpkt"];
1362--1855[label="0.0573899;73pkt 73fpkt"];
1362--1864[label="0.0409914;43pkt 43fpkt"];
1362--1872[label="0.0444444;50pkt 50fpkt"];
1362--1876[label="0.0455975;58pkt 58fpkt"];
1362--1881[label="0.0573899;73pkt 73fpkt"];
1362--1886[label="0.220339;13pkt 13fpkt"];
1362--1901[label="0.0461538;3pkt 3fpkt"];
1362--1908[label="0.571429;24pkt 24fpkt"];
1362--1939[label="0.463415;57pkt 57fpkt"];
1362--1989[label="1;112pkt 112fpkt"];
1362--1994[label="0.217391;5pkt 5fpkt"];
1362--2109[label="0.013245;2pkt 2fpkt"];
1362--2220[label="0.6875;44pkt 44fpkt"];
1362--2242[label="0.390476;41pkt 41fpkt"];
1362--2314[label="1;2pkt 2fpkt"];
1362--2364[label="0.16;8pkt 8fpkt"];
1362--2482[label="0.046875;3pkt 3fpkt"];
1362--2571[label="0.0348259;7pkt 7fpkt"];
1362--2579[label="1;140pkt 140fpkt"];
1362--2609[label="1;11pkt 11fpkt"];
1362--2629[label="1;36pkt 36fpkt"];
1362--2673[label="0.851852;23pkt 23fpkt"];
1362--2688[label="0.0909091;3pkt 3fpkt"];
1362--2692[label="1;16pkt 16fpkt"];
1362--2703[label="0.0718686;35pkt 35fpkt"];
1362--2704[label="0.0491803;3pkt 3fpkt"];
1362--2721[label="0.220339;13pkt 13fpkt"];
1362--2733[label="0.571429;24pkt 24fpkt"];
1362--2752[label="0.467213;57pkt 57fpkt"];
1362--2834[label="0.013245;2pkt 2fpkt"];
1362--2889[label="0.0714286;3pkt 3fpkt"];
1362--3023[label="0.046875;3pkt 3fpkt"];
1362--3099[label="1;37pkt 37fpkt"];
1362--3127[label="1;16pkt 16fpkt"];
1362--3299[label="0.047619;3pkt 3fpkt"];
1362--3341[label="1;36pkt 36fpkt"];
1639--2131[label="0.0588235;1pkt 1fpkt"];
1639--2252[label="1;11pkt 11fpkt"];
1639--2482[label="0.375;24pkt 24fpkt"];
1639--2704[label="0.0655738;4pkt 4fpkt"];
1639--2902[label="1;12pkt 12fpkt"];
1639--3023[label="0.375;24pkt 24fpkt"];
1639--3237[label="1;11pkt 11fpkt"];
1639--3299[label="0.380952;24pkt 24fpkt"];
1678--1797[label="0.0147059;2pkt 2fpkt"];
1678--1807[label="0.0441176;6pkt 6fpkt"];
1678--1812[label="0.0441176;6pkt 6fpkt"];
1678--1819[label="0.00735294;1pkt 1fpkt"];
1678--1832[label="0.0147059;2pkt 2fpkt"];
1678--1843[label="0.0441176;6pkt 6fpkt"];
1678--1847[label="0.0441176;6pkt 6fpkt"];
1678--1855[label="0.00735294;1pkt 1fpkt"];
1678--1864[label="0.0147059;2pkt 2fpkt"];
1678--1872[label="0.0441176;6pkt 6fpkt"];
1678--1876[label="0.0441176;6pkt 6fpkt"];
1678--1881[label="0.00735294;1pkt 1fpkt"];
1678--1902[label="0.0666667;2pkt 2fpkt"];
1678--1939[label="0.00813008;1pkt 1fpkt"];
1678--1994[label="0.0869565;2pkt 2fpkt"];
1678--2110[label="0.030303;1pkt 1fpkt"];
1678--2131[label="0.0588235;1pkt 1fpkt"];
1678--2188[label="0.03125;1pkt 1fpkt"];
1678--2248[label="0.09375;3pkt 3fpkt"];
1678--2308[label="0.075;3pkt 3fpkt"];
1678--2424[label="0.0666667;1pkt 1fpkt"];
1678--2433[label="0.148148;4pkt 4fpkt"];
1678--2467[label="0.05;1pkt 1fpkt"];
1678--2482[label="0.484375;31pkt 31fpkt"];
1678--2514[label="0.117647;2pkt 2fpkt"];
1678--2688[label="0.030303;1pkt 1fpkt"];
1678--2704[label="0.0163934;1pkt 1fpkt"];
1678--2730[label="0.0666667;2pkt 2fpkt"];
1678--2752[label="0.00819672;1pkt 1fpkt"];
1678--2935[label="0.075;3pkt 3fpkt"];
1678--2995[label="0.153846;4pkt 4fpkt"];
1678--3023[label="0.484375;31pkt 31fpkt"];
1678--3254[label="0.075;3pkt 3fpkt"];
1678--3284[label="0.148148;4pkt 4fpkt"];
1678--3299[label="0.492063;31pkt 31fpkt"];
1939--2752[label="1;122pkt 122fpkt"];
2252--2902[label="1;11pkt 11fpkt"];
2252--3237[label="1;11pkt 11fpkt"];
2433--2995[label="1;26pkt 26fpkt"];
2433--3284[label="1;27pkt 27fpkt"];
2482--3023[label="1;64pkt 64fpkt"];
2482--3299[label="1;63pkt 63fpkt"];
2629--3099[label="1;36pkt 36fpkt"];
2629--3341[label="1;36pkt 36fpkt"];
2692--3127[label="1;16pkt 16fpkt"];
2902--3237[label="1;11pkt 11fpkt"];
2995--3284[label="1;26pkt 26fpkt"];
3023--3299[label="1;63pkt 63fpkt"];
3099--3341[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter src_ip="204.2.130.247" src_port="80"/>
      <filter dst_ip="208.237.114.173" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
379[label="154.213.137.182;d;11pkt 11fpkt", shape=diamond, color=yellow];
396[label="85.148.237.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
1340[label="154.213.137.182;d;1pkt 1fpkt", shape=hexagon, color=black];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.68.154.5:80, 154.213.137.182:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.9231%)&lt;BR/&gt; 6699: (15.3846%)&lt;BR/&gt; 3264: (11.5385%)&lt;BR/&gt; 7891: (3.84615%)&lt;BR/&gt; 3305: (3.84615%)&gt;];
}
379--396[label="1;1pkt 1fpkt"];
379--1340[label="1;1pkt 1fpkt"];
379--1901[label="0.454545;5pkt 5fpkt"];
379--2688[label="0.181818;2pkt 2fpkt"];
396--1340[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.137.182" src_ip="212.68.154.5" src_port="80"/>
    </slice>
    <from sec="1026018012" usec="0"/>
    <to sec="1026018919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
380[label="154.213.137.182;s;13pkt 13fpkt", shape=diamond, color=yellow];
1341[label="154.213.137.182;s;2pkt 2fpkt", shape=hexagon, color=black];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.137.182:*, 212.68.154.5:80}[38.4615%]&lt;BR/&gt;{154.213.137.182:*, *:6699}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.3333%)&lt;BR/&gt; 6699: (20%)&lt;BR/&gt; 3264: (6.66667%)&lt;BR/&gt; 3237: (6.66667%)&lt;BR/&gt; 7891: (3.33333%)&gt;];
}
380--395[label="0.5;1pkt 1fpkt"];
380--1341[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="154.213.137.182"/>
      <filter dst_ip="212.68.154.5" dst_port="80" src_ip="154.213.137.182"/>
    </slice>
    <from sec="1026018012" usec="0"/>
    <to sec="1026018919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31552,1.98986,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
84[label="157.149.237.13;d;37pkt 37fpkt", shape=diamond, color=yellow];
186[label="192.246.195.33;s;1pkt 1fpkt", shape=diamond, color=yellow];
392[label="193.94.119.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
625[label="192.246.133.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
1252[label="157.149.237.13;d;37pkt 37fpkt", shape=hexagon, color=black];
1311[label="192.246.195.33;s;1pkt 1fpkt", shape=hexagon, color=black];
1346[label="193.94.119.216;s;1pkt 1fpkt", shape=hexagon, color=black];
1741[label="157.149.237.13;d;35pkt 35fpkt", shape=polygon, color=gold];
2387[label="192.250.39.147;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:7743, 157.149.237.13:*}[78.3784%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (40.0862%)&lt;BR/&gt; 20: (3.87931%)&lt;BR/&gt; 80: (3.44828%)&lt;BR/&gt; 1863: (2.58621%)&lt;BR/&gt; 3428: (2.15517%)&gt;];
}
84--85[label="1;1pkt 1fpkt"];
84--186[label="1;1pkt 1fpkt"];
84--392[label="1;1pkt 1fpkt"];
84--625[label="1;1pkt 1fpkt"];
84--1252[label="1;37pkt 37fpkt"];
84--1253[label="1;1pkt 1fpkt"];
84--1311[label="1;1pkt 1fpkt"];
84--1346[label="1;1pkt 1fpkt"];
84--1741[label="1;35pkt 35fpkt"];
84--1742[label="1;1pkt 1fpkt"];
84--1797[label="0.027027;1pkt 1fpkt"];
84--1807[label="0.027027;1pkt 1fpkt"];
84--1812[label="0.027027;1pkt 1fpkt"];
84--1819[label="0.027027;1pkt 1fpkt"];
84--1832[label="0.027027;1pkt 1fpkt"];
84--1843[label="0.027027;1pkt 1fpkt"];
84--1847[label="0.027027;1pkt 1fpkt"];
84--1855[label="0.027027;1pkt 1fpkt"];
84--1864[label="0.027027;1pkt 1fpkt"];
84--1872[label="0.027027;1pkt 1fpkt"];
84--1876[label="0.027027;1pkt 1fpkt"];
84--1881[label="0.027027;1pkt 1fpkt"];
84--2387[label="1;2pkt 2fpkt"];
84--2627[label="1;1pkt 1fpkt"];
186--1252[label="1;1pkt 1fpkt"];
186--1311[label="1;1pkt 1fpkt"];
186--1741[label="1;1pkt 1fpkt"];
392--1252[label="1;1pkt 1fpkt"];
392--1346[label="1;1pkt 1fpkt"];
392--1741[label="1;1pkt 1fpkt"];
625--1252[label="1;1pkt 1fpkt"];
625--1741[label="1;1pkt 1fpkt"];
1252--1253[label="1;1pkt 1fpkt"];
1252--1311[label="1;1pkt 1fpkt"];
1252--1346[label="1;1pkt 1fpkt"];
1252--1741[label="1;35pkt 35fpkt"];
1252--1742[label="1;1pkt 1fpkt"];
1252--1797[label="0.027027;1pkt 1fpkt"];
1252--1807[label="0.027027;1pkt 1fpkt"];
1252--1812[label="0.027027;1pkt 1fpkt"];
1252--1819[label="0.027027;1pkt 1fpkt"];
1252--1832[label="0.027027;1pkt 1fpkt"];
1252--1843[label="0.027027;1pkt 1fpkt"];
1252--1847[label="0.027027;1pkt 1fpkt"];
1252--1855[label="0.027027;1pkt 1fpkt"];
1252--1864[label="0.027027;1pkt 1fpkt"];
1252--1872[label="0.027027;1pkt 1fpkt"];
1252--1876[label="0.027027;1pkt 1fpkt"];
1252--1881[label="0.027027;1pkt 1fpkt"];
1252--2387[label="1;2pkt 2fpkt"];
1252--2627[label="1;1pkt 1fpkt"];
1311--1741[label="1;1pkt 1fpkt"];
1346--1741[label="1;1pkt 1fpkt"];
1741--1742[label="1;1pkt 1fpkt"];
1741--1797[label="0.0285714;1pkt 1fpkt"];
1741--1807[label="0.0285714;1pkt 1fpkt"];
1741--1812[label="0.0285714;1pkt 1fpkt"];
1741--1819[label="0.0285714;1pkt 1fpkt"];
1741--1832[label="0.0285714;1pkt 1fpkt"];
1741--1843[label="0.0285714;1pkt 1fpkt"];
1741--1847[label="0.0285714;1pkt 1fpkt"];
1741--1855[label="0.0285714;1pkt 1fpkt"];
1741--1864[label="0.0285714;1pkt 1fpkt"];
1741--1872[label="0.0285714;1pkt 1fpkt"];
1741--1876[label="0.0285714;1pkt 1fpkt"];
1741--1881[label="0.0285714;1pkt 1fpkt"];
1741--2387[label="1;2pkt 2fpkt"];
1741--2627[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.237.13" src_port="7743"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22438,1.96931,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
11[label="209.201.226.87s;2pkt 2fpkt", shape=rectangle, color=red];
83[label="209.201.226.87;s;2041pkt 2041fpkt", shape=diamond, color=yellow];
111[label="56.166.126.172;d;321pkt 321fpkt", shape=diamond, color=yellow];
230[label="62.213.1.99;d;1pkt 1fpkt", shape=diamond, color=yellow];
231[label="112.230.49.206;d;341pkt 341fpkt", shape=diamond, color=yellow];
1068[label="204.236.5.21;d;6pkt 6fpkt", shape=diamond, color=yellow];
1170[label="85.151.91.96;d;204pkt 204fpkt", shape=diamond, color=yellow];
1353[label="209.201.226.87;s;2041pkt 2041fpkt", shape=hexagon, color=black];
1460[label="112.230.49.206;d;341pkt 341fpkt", shape=hexagon, color=black];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.226.87:*, 112.230.49.206:*}[69.6227%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (16.2703%)&lt;BR/&gt; 6699: (6.71952%)&lt;BR/&gt; 53: (3.45413%)&lt;BR/&gt; 1433: (2.81238%)&lt;BR/&gt; 25: (1.46282%)&gt;];
}
11--83[label="1;2pkt 2fpkt"];
11--111[label="0.5;1pkt 1fpkt"];
11--231[label="0.5;1pkt 1fpkt"];
11--1353[label="1;2pkt 2fpkt"];
11--1460[label="0.5;1pkt 1fpkt"];
83--111[label="1;321pkt 321fpkt"];
83--230[label="1;1pkt 1fpkt"];
83--231[label="1;341pkt 341fpkt"];
83--1068[label="1;6pkt 6fpkt"];
83--1170[label="1;204pkt 204fpkt"];
83--1353[label="1;2041pkt 2041fpkt"];
83--1460[label="1;341pkt 341fpkt"];
83--1797[label="0.00667302;7pkt 7fpkt"];
83--1798[label="0.000489956;1pkt 1fpkt"];
83--1807[label="0.0275556;31pkt 31fpkt"];
83--1808[label="0.0132288;27pkt 27fpkt"];
83--1809[label="0.00828729;9pkt 9fpkt"];
83--1810[label="0.00169062;2pkt 2fpkt"];
83--1811[label="0.00538951;11pkt 11fpkt"];
83--1812[label="0.0339244;44pkt 44fpkt"];
83--1814[label="0.00391965;8pkt 8fpkt"];
83--1815[label="0.0132288;27pkt 27fpkt"];
83--1816[label="0.00700935;12pkt 12fpkt"];
83--1818[label="0.00342969;7pkt 7fpkt"];
83--1819[label="0.0317221;42pkt 42fpkt"];
83--1820[label="0.0161685;33pkt 33fpkt"];
83--1822[label="0.00244978;5pkt 5fpkt"];
83--1827[label="0.00195982;4pkt 4fpkt"];
83--1828[label="0.0102891;21pkt 21fpkt"];
83--1829[label="0.00483092;3pkt 3fpkt"];
83--1831[label="0.010779;22pkt 22fpkt"];
83--1832[label="0.00667302;7pkt 7fpkt"];
83--1833[label="0.000489956;1pkt 1fpkt"];
83--1842[label="0.00342969;7pkt 7fpkt"];
83--1843[label="0.0275556;31pkt 31fpkt"];
83--1844[label="0.0132288;27pkt 27fpkt"];
83--1845[label="0.00828729;9pkt 9fpkt"];
83--1846[label="0.00538951;11pkt 11fpkt"];
83--1847[label="0.0339244;44pkt 44fpkt"];
83--1849[label="0.00391965;8pkt 8fpkt"];
83--1850[label="0.0132288;27pkt 27fpkt"];
83--1851[label="0.00700525;12pkt 12fpkt"];
83--1854[label="0.00342969;7pkt 7fpkt"];
83--1855[label="0.0317221;42pkt 42fpkt"];
83--1856[label="0.0161685;33pkt 33fpkt"];
83--1859[label="0.00195982;4pkt 4fpkt"];
83--1860[label="0.0102891;21pkt 21fpkt"];
83--1861[label="0.00483092;3pkt 3fpkt"];
83--1862[label="0.00146987;3pkt 3fpkt"];
83--1863[label="0.010779;22pkt 22fpkt"];
83--1864[label="0.00667302;7pkt 7fpkt"];
83--1865[label="0.000489956;1pkt 1fpkt"];
83--1871[label="0.00342969;7pkt 7fpkt"];
83--1872[label="0.0275556;31pkt 31fpkt"];
83--1873[label="0.0132288;27pkt 27fpkt"];
83--1874[label="0.00828729;9pkt 9fpkt"];
83--1875[label="0.00538951;11pkt 11fpkt"];
83--1876[label="0.0339244;44pkt 44fpkt"];
83--1879[label="0.0132288;27pkt 27fpkt"];
83--1880[label="0.00700935;12pkt 12fpkt"];
83--1881[label="0.0317221;42pkt 42fpkt"];
83--1882[label="0.0161685;33pkt 33fpkt"];
83--1883[label="0.000489956;1pkt 1fpkt"];
111--1353[label="1;321pkt 321fpkt"];
111--1797[label="0.0186916;6pkt 6fpkt"];
111--1798[label="0.00311526;1pkt 1fpkt"];
111--1807[label="0.0218069;7pkt 7fpkt"];
111--1808[label="0.0218069;7pkt 7fpkt"];
111--1809[label="0.00934579;3pkt 3fpkt"];
111--1810[label="0.00311526;1pkt 1fpkt"];
111--1811[label="0.00623053;2pkt 2fpkt"];
111--1812[label="0.0342679;11pkt 11fpkt"];
111--1814[label="0.00311526;1pkt 1fpkt"];
111--1815[label="0.00934579;3pkt 3fpkt"];
111--1816[label="0.00623053;2pkt 2fpkt"];
111--1818[label="0.00311526;1pkt 1fpkt"];
111--1819[label="0.0373832;12pkt 12fpkt"];
111--1820[label="0.0124611;4pkt 4fpkt"];
111--1832[label="0.0186916;6pkt 6fpkt"];
111--1833[label="0.00311526;1pkt 1fpkt"];
111--1842[label="0.00311526;1pkt 1fpkt"];
111--1843[label="0.0218069;7pkt 7fpkt"];
111--1844[label="0.0218069;7pkt 7fpkt"];
111--1845[label="0.00934579;3pkt 3fpkt"];
111--1846[label="0.00623053;2pkt 2fpkt"];
111--1847[label="0.0342679;11pkt 11fpkt"];
111--1849[label="0.00311526;1pkt 1fpkt"];
111--1850[label="0.00934579;3pkt 3fpkt"];
111--1851[label="0.00623053;2pkt 2fpkt"];
111--1854[label="0.00311526;1pkt 1fpkt"];
111--1855[label="0.0373832;12pkt 12fpkt"];
111--1856[label="0.0124611;4pkt 4fpkt"];
111--1864[label="0.0186916;6pkt 6fpkt"];
111--1865[label="0.00311526;1pkt 1fpkt"];
111--1871[label="0.00311526;1pkt 1fpkt"];
111--1872[label="0.0218069;7pkt 7fpkt"];
111--1873[label="0.0218069;7pkt 7fpkt"];
111--1874[label="0.00934579;3pkt 3fpkt"];
111--1875[label="0.00623053;2pkt 2fpkt"];
111--1876[label="0.0342679;11pkt 11fpkt"];
111--1879[label="0.00934579;3pkt 3fpkt"];
111--1880[label="0.00623053;2pkt 2fpkt"];
111--1881[label="0.0373832;12pkt 12fpkt"];
111--1882[label="0.0124611;4pkt 4fpkt"];
230--1353[label="1;1pkt 1fpkt"];
231--1353[label="1;341pkt 341fpkt"];
231--1460[label="1;341pkt 341fpkt"];
231--1807[label="0.00879765;3pkt 3fpkt"];
231--1808[label="0.00293255;1pkt 1fpkt"];
231--1810[label="0.00293255;1pkt 1fpkt"];
231--1811[label="0.00879765;3pkt 3fpkt"];
231--1812[label="0.0175953;6pkt 6fpkt"];
231--1814[label="0.00879765;3pkt 3fpkt"];
231--1815[label="0.0146628;5pkt 5fpkt"];
231--1818[label="0.00879765;3pkt 3fpkt"];
231--1819[label="0.0175953;6pkt 6fpkt"];
231--1820[label="0.0146628;5pkt 5fpkt"];
231--1822[label="0.0146628;5pkt 5fpkt"];
231--1827[label="0.00879765;3pkt 3fpkt"];
231--1828[label="0.0146628;5pkt 5fpkt"];
231--1831[label="0.0615836;21pkt 21fpkt"];
231--1842[label="0.00293255;1pkt 1fpkt"];
231--1843[label="0.00879765;3pkt 3fpkt"];
231--1844[label="0.00293255;1pkt 1fpkt"];
231--1846[label="0.00879765;3pkt 3fpkt"];
231--1847[label="0.0175953;6pkt 6fpkt"];
231--1849[label="0.00879765;3pkt 3fpkt"];
231--1850[label="0.0146628;5pkt 5fpkt"];
231--1854[label="0.00879765;3pkt 3fpkt"];
231--1855[label="0.0175953;6pkt 6fpkt"];
231--1856[label="0.0146628;5pkt 5fpkt"];
231--1859[label="0.00879765;3pkt 3fpkt"];
231--1860[label="0.0146628;5pkt 5fpkt"];
231--1862[label="0.00293255;1pkt 1fpkt"];
231--1863[label="0.0615836;21pkt 21fpkt"];
231--1871[label="0.00293255;1pkt 1fpkt"];
231--1872[label="0.00879765;3pkt 3fpkt"];
231--1873[label="0.00293255;1pkt 1fpkt"];
231--1875[label="0.00879765;3pkt 3fpkt"];
231--1876[label="0.0175953;6pkt 6fpkt"];
231--1879[label="0.0146628;5pkt 5fpkt"];
231--1881[label="0.0175953;6pkt 6fpkt"];
231--1882[label="0.0146628;5pkt 5fpkt"];
231--1883[label="0.00293255;1pkt 1fpkt"];
1068--1353[label="1;6pkt 6fpkt"];
1170--1353[label="1;204pkt 204fpkt"];
1170--1827[label="0.00490196;1pkt 1fpkt"];
1170--1828[label="0.0784314;16pkt 16fpkt"];
1170--1829[label="0.0147059;3pkt 3fpkt"];
1170--1859[label="0.00490196;1pkt 1fpkt"];
1170--1860[label="0.0784314;16pkt 16fpkt"];
1170--1861[label="0.0147059;3pkt 3fpkt"];
1170--1862[label="0.00980392;2pkt 2fpkt"];
1353--1460[label="1;341pkt 341fpkt"];
1353--1797[label="0.00667302;7pkt 7fpkt"];
1353--1798[label="0.000489956;1pkt 1fpkt"];
1353--1807[label="0.0275556;31pkt 31fpkt"];
1353--1808[label="0.0132288;27pkt 27fpkt"];
1353--1809[label="0.00828729;9pkt 9fpkt"];
1353--1810[label="0.00169062;2pkt 2fpkt"];
1353--1811[label="0.00538951;11pkt 11fpkt"];
1353--1812[label="0.0339244;44pkt 44fpkt"];
1353--1814[label="0.00391965;8pkt 8fpkt"];
1353--1815[label="0.0132288;27pkt 27fpkt"];
1353--1816[label="0.00700935;12pkt 12fpkt"];
1353--1818[label="0.00342969;7pkt 7fpkt"];
1353--1819[label="0.0317221;42pkt 42fpkt"];
1353--1820[label="0.0161685;33pkt 33fpkt"];
1353--1822[label="0.00244978;5pkt 5fpkt"];
1353--1827[label="0.00195982;4pkt 4fpkt"];
1353--1828[label="0.0102891;21pkt 21fpkt"];
1353--1829[label="0.00483092;3pkt 3fpkt"];
1353--1831[label="0.010779;22pkt 22fpkt"];
1353--1832[label="0.00667302;7pkt 7fpkt"];
1353--1833[label="0.000489956;1pkt 1fpkt"];
1353--1842[label="0.00342969;7pkt 7fpkt"];
1353--1843[label="0.0275556;31pkt 31fpkt"];
1353--1844[label="0.0132288;27pkt 27fpkt"];
1353--1845[label="0.00828729;9pkt 9fpkt"];
1353--1846[label="0.00538951;11pkt 11fpkt"];
1353--1847[label="0.0339244;44pkt 44fpkt"];
1353--1849[label="0.00391965;8pkt 8fpkt"];
1353--1850[label="0.0132288;27pkt 27fpkt"];
1353--1851[label="0.00700525;12pkt 12fpkt"];
1353--1854[label="0.00342969;7pkt 7fpkt"];
1353--1855[label="0.0317221;42pkt 42fpkt"];
1353--1856[label="0.0161685;33pkt 33fpkt"];
1353--1859[label="0.00195982;4pkt 4fpkt"];
1353--1860[label="0.0102891;21pkt 21fpkt"];
1353--1861[label="0.00483092;3pkt 3fpkt"];
1353--1862[label="0.00146987;3pkt 3fpkt"];
1353--1863[label="0.010779;22pkt 22fpkt"];
1353--1864[label="0.00667302;7pkt 7fpkt"];
1353--1865[label="0.000489956;1pkt 1fpkt"];
1353--1871[label="0.00342969;7pkt 7fpkt"];
1353--1872[label="0.0275556;31pkt 31fpkt"];
1353--1873[label="0.0132288;27pkt 27fpkt"];
1353--1874[label="0.00828729;9pkt 9fpkt"];
1353--1875[label="0.00538951;11pkt 11fpkt"];
1353--1876[label="0.0339244;44pkt 44fpkt"];
1353--1879[label="0.0132288;27pkt 27fpkt"];
1353--1880[label="0.00700935;12pkt 12fpkt"];
1353--1881[label="0.0317221;42pkt 42fpkt"];
1353--1882[label="0.0161685;33pkt 33fpkt"];
1353--1883[label="0.000489956;1pkt 1fpkt"];
1460--1807[label="0.00879765;3pkt 3fpkt"];
1460--1808[label="0.00293255;1pkt 1fpkt"];
1460--1810[label="0.00293255;1pkt 1fpkt"];
1460--1811[label="0.00879765;3pkt 3fpkt"];
1460--1812[label="0.0175953;6pkt 6fpkt"];
1460--1814[label="0.00879765;3pkt 3fpkt"];
1460--1815[label="0.0146628;5pkt 5fpkt"];
1460--1818[label="0.00879765;3pkt 3fpkt"];
1460--1819[label="0.0175953;6pkt 6fpkt"];
1460--1820[label="0.0146628;5pkt 5fpkt"];
1460--1822[label="0.0146628;5pkt 5fpkt"];
1460--1827[label="0.00879765;3pkt 3fpkt"];
1460--1828[label="0.0146628;5pkt 5fpkt"];
1460--1831[label="0.0615836;21pkt 21fpkt"];
1460--1842[label="0.00293255;1pkt 1fpkt"];
1460--1843[label="0.00879765;3pkt 3fpkt"];
1460--1844[label="0.00293255;1pkt 1fpkt"];
1460--1846[label="0.00879765;3pkt 3fpkt"];
1460--1847[label="0.0175953;6pkt 6fpkt"];
1460--1849[label="0.00879765;3pkt 3fpkt"];
1460--1850[label="0.0146628;5pkt 5fpkt"];
1460--1854[label="0.00879765;3pkt 3fpkt"];
1460--1855[label="0.0175953;6pkt 6fpkt"];
1460--1856[label="0.0146628;5pkt 5fpkt"];
1460--1859[label="0.00879765;3pkt 3fpkt"];
1460--1860[label="0.0146628;5pkt 5fpkt"];
1460--1862[label="0.00293255;1pkt 1fpkt"];
1460--1863[label="0.0615836;21pkt 21fpkt"];
1460--1871[label="0.00293255;1pkt 1fpkt"];
1460--1872[label="0.00879765;3pkt 3fpkt"];
1460--1873[label="0.00293255;1pkt 1fpkt"];
1460--1875[label="0.00879765;3pkt 3fpkt"];
1460--1876[label="0.0175953;6pkt 6fpkt"];
1460--1879[label="0.0146628;5pkt 5fpkt"];
1460--1881[label="0.0175953;6pkt 6fpkt"];
1460--1882[label="0.0146628;5pkt 5fpkt"];
1460--1883[label="0.00293255;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="112.230.49.206" src_ip="209.201.226.87"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
102[label="112.209.99.112;s;2pkt 2fpkt", shape=diamond, color=yellow];
241[label="133.19.135.98;d;5pkt 5fpkt", shape=diamond, color=yellow];
1354[label="112.209.99.112;s;2pkt 2fpkt", shape=hexagon, color=black];
2284[label="112.209.99.112;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{112.209.99.19:8688, 133.19.135.98:1461}[20%]&lt;BR/&gt;{112.209.98.32:8600, 133.19.135.98:1457}[20%]&lt;BR/&gt;{62.82.192.75:1863, 133.19.135.98:1027}[20%]&lt;BR/&gt;{112.209.99.112:19554, 133.19.135.98:51200}[20%]&lt;BR/&gt;{112.209.99.112:19555, 133.19.135.98:51201}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51201: (20%)&lt;BR/&gt; 19555: (20%)&lt;BR/&gt; 51200: (15%)&lt;BR/&gt; 19554: (15%)&lt;BR/&gt; 8688: (5%)&gt;];
}
102--241[label="1;2pkt 2fpkt"];
102--1354[label="1;2pkt 2fpkt"];
102--2284[label="1;1pkt 1fpkt"];
241--1354[label="1;2pkt 2fpkt"];
241--2284[label="1;1pkt 1fpkt"];
1354--2284[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.135.98" dst_port="51201" src_ip="112.209.99.112" src_port="19555"/>
      <filter dst_ip="133.19.135.98" dst_port="51200" src_ip="112.209.99.112" src_port="19554"/>
      <filter dst_ip="133.19.135.98" dst_port="1027" src_ip="62.82.192.75" src_port="1863"/>
      <filter dst_ip="133.19.135.98" dst_port="1457" src_ip="112.209.98.32" src_port="8600"/>
      <filter dst_ip="133.19.135.98" dst_port="1461" src_ip="112.209.99.19" src_port="8688"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026018305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.712811,1.89934,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
104[label="209.201.226.141;d;54pkt 54fpkt", shape=diamond, color=yellow];
107[label="60.74.36.119;s;51pkt 51fpkt", shape=diamond, color=yellow];
1356[label="60.74.36.119;s;36pkt 36fpkt", shape=hexagon, color=black];
2297[label="60.74.36.119;51pkt 51fpkt", shape=pentagon, color=darkviolet];
2929[label="60.74.36.119;50pkt 50fpkt", shape=invtriangle, color=brown];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.74.36.119:*, 209.201.226.141:*}[94.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (1.23967%)&lt;BR/&gt; 38835: (1.03306%)&lt;BR/&gt; 38834: (1.03306%)&lt;BR/&gt; 38833: (1.03306%)&lt;BR/&gt; 38832: (1.03306%)&gt;];
}
104--107[label="1;51pkt 51fpkt"];
104--1356[label="1;36pkt 36fpkt"];
104--2297[label="1;51pkt 51fpkt"];
104--2929[label="1;50pkt 50fpkt"];
107--1356[label="1;36pkt 36fpkt"];
107--2297[label="1;51pkt 51fpkt"];
107--2929[label="1;50pkt 50fpkt"];
1356--2297[label="1;36pkt 36fpkt"];
1356--2929[label="0.972222;35pkt 35fpkt"];
2297--2929[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="209.201.226.141" src_ip="60.74.36.119"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
146[label="216.91.232.104;d;134pkt 134fpkt", shape=diamond, color=yellow];
666[label="206.76.29.201;s;1pkt 1fpkt", shape=diamond, color=yellow];
1181[label="209.141.250.138;s;1pkt 1fpkt", shape=diamond, color=yellow];
1222[label="194.8.192.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
1357[label="216.91.232.104;d;82pkt 82fpkt", shape=hexagon, color=black];
1903[label="194.8.192.5;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 216.91.232.104:0}[35.0746%]&lt;BR/&gt;{200.77.163.21:*, 216.91.232.104:6666}[20.8955%]&lt;BR/&gt;{200.77.163.21:113, 216.91.232.104:*}[20.8955%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (42.7273%)&lt;BR/&gt; 113: (11.3636%)&lt;BR/&gt; 6666: (9.09091%)&lt;BR/&gt; 6667: (2.72727%)&lt;BR/&gt; 6660: (2.72727%)&gt;];
}
146--666[label="1;1pkt 1fpkt"];
146--1181[label="1;1pkt 1fpkt"];
146--1222[label="1;1pkt 1fpkt"];
146--1357[label="1;82pkt 82fpkt"];
146--1903[label="1;1pkt 1fpkt"];
666--1357[label="1;1pkt 1fpkt"];
1181--1357[label="1;1pkt 1fpkt"];
1222--1357[label="1;1pkt 1fpkt"];
1222--1903[label="1;1pkt 1fpkt"];
1357--1903[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.91.232.104" src_ip="200.77.163.21" src_port="113"/>
      <filter dst_ip="216.91.232.104" dst_port="6666" src_ip="200.77.163.21"/>
      <filter dst_ip="216.91.232.104"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
515[label="85.30.78.156;d;1pkt 1fpkt", shape=diamond, color=yellow];
1358[label="133.19.66.56;s;427pkt 427fpkt", shape=hexagon, color=black];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.66.56:6257, *:6257}[81.9672%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (81.8925%)&lt;BR/&gt; 6699: (8.8785%)&lt;BR/&gt; 1855: (0.233645%)&lt;BR/&gt; 1335: (0.233645%)&lt;BR/&gt; 4878: (0.116822%)&gt;];
}
515--1358[label="1;1pkt 1fpkt"];
1358--1862[label="0.0702576;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="133.19.66.56" src_port="6257"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.712811,1.89934,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
179[label="85.156.125.173;d;1pkt 1fpkt", shape=diamond, color=yellow];
207[label="200.237.55.121;d;1pkt 1fpkt", shape=diamond, color=yellow];
282[label="85.74.83.166;d;1pkt 1fpkt", shape=diamond, color=yellow];
421[label="154.213.210.155;s;660pkt 660fpkt", shape=diamond, color=yellow];
651[label="62.179.50.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
1260[label="200.237.55.121;d;1pkt 1fpkt", shape=hexagon, color=black];
1361[label="85.74.83.166;d;1pkt 1fpkt", shape=hexagon, color=black];
1414[label="62.179.50.187;d;1pkt 1fpkt", shape=hexagon, color=black];
1481[label="85.156.125.173;d;1pkt 1fpkt", shape=hexagon, color=black];
2417[label="154.213.210.155;672pkt 672fpkt", shape=pentagon, color=darkviolet];
2984[label="154.213.210.155;672pkt 672fpkt", shape=invtriangle, color=brown];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.210.155:6257, *:6257}[97.6226%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (97.4404%)&lt;BR/&gt; 6699: (1.09344%)&lt;BR/&gt; 4162: (0.124254%)&lt;BR/&gt; 2961: (0.124254%)&lt;BR/&gt; 1359: (0.124254%)&gt;];
}
179--421[label="1;1pkt 1fpkt"];
179--1481[label="1;1pkt 1fpkt"];
179--2417[label="1;1pkt 1fpkt"];
179--2984[label="1;1pkt 1fpkt"];
207--421[label="1;1pkt 1fpkt"];
207--1260[label="1;1pkt 1fpkt"];
207--2417[label="1;1pkt 1fpkt"];
207--2984[label="1;1pkt 1fpkt"];
282--421[label="1;1pkt 1fpkt"];
282--1361[label="1;1pkt 1fpkt"];
282--2417[label="1;1pkt 1fpkt"];
282--2984[label="1;1pkt 1fpkt"];
421--651[label="1;1pkt 1fpkt"];
421--923[label="0.25;1pkt 1fpkt"];
421--1260[label="1;1pkt 1fpkt"];
421--1361[label="1;1pkt 1fpkt"];
421--1414[label="1;1pkt 1fpkt"];
421--1481[label="1;1pkt 1fpkt"];
421--1862[label="0.0545455;36pkt 36fpkt"];
421--2417[label="0.998485;659pkt 659fpkt"];
421--2984[label="0.998485;659pkt 659fpkt"];
651--1414[label="1;1pkt 1fpkt"];
651--2417[label="1;1pkt 1fpkt"];
651--2984[label="1;1pkt 1fpkt"];
1260--2417[label="1;1pkt 1fpkt"];
1260--2984[label="1;1pkt 1fpkt"];
1361--2417[label="1;1pkt 1fpkt"];
1361--2984[label="1;1pkt 1fpkt"];
1414--2417[label="1;1pkt 1fpkt"];
1414--2984[label="1;1pkt 1fpkt"];
1481--2417[label="1;1pkt 1fpkt"];
1481--2984[label="1;1pkt 1fpkt"];
2417--2984[label="1;672pkt 672fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="154.213.210.155" src_port="6257"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
431[label="36.55.182.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
1363[label="36.55.182.176;d;1pkt 1fpkt", shape=hexagon, color=black];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.136.19:1055, 36.55.182.176:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1055: (50%)&gt;];
}
431--1363[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="36.55.182.176" dst_port="6699" src_ip="154.213.136.19" src_port="1055"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
582[label="133.19.216.95;d;4pkt 4fpkt", shape=diamond, color=yellow];
629[label="85.146.217.56;s;1pkt 1fpkt", shape=diamond, color=yellow];
1365[label="133.19.216.95;d;4pkt 4fpkt", shape=hexagon, color=black];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.82.193.5:1863, 133.19.216.95:1641}[25%]&lt;BR/&gt;{85.146.217.56:6699, 133.19.216.95:2006}[25%]&lt;BR/&gt;{194.120.183.63:7729, 133.19.216.95:2003}[25%]&lt;BR/&gt;{194.120.183.63:7729, 133.19.216.95:2005}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7729: (22.2222%)&lt;BR/&gt; 6699: (16.6667%)&lt;BR/&gt; 2006: (16.6667%)&lt;BR/&gt; 2005: (11.1111%)&lt;BR/&gt; 2003: (11.1111%)&gt;];
}
582--629[label="1;1pkt 1fpkt"];
582--1365[label="1;4pkt 4fpkt"];
629--1365[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.216.95" dst_port="2005" src_ip="194.120.183.63" src_port="7729"/>
      <filter dst_ip="133.19.216.95" dst_port="2003" src_ip="194.120.183.63" src_port="7729"/>
      <filter dst_ip="133.19.216.95" dst_port="2006" src_ip="85.146.217.56" src_port="6699"/>
      <filter dst_ip="133.19.216.95" dst_port="1641" src_ip="62.82.193.5" src_port="1863"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026018715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
587[label="85.214.105.190;s;1pkt 1fpkt", shape=diamond, color=yellow];
1370[label="85.214.105.190;s;1pkt 1fpkt", shape=hexagon, color=black];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.214.105.190:6699, 154.213.136.69:2595}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2595: (50%)&gt;];
}
587--1370[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.136.69" dst_port="2595" src_ip="85.214.105.190" src_port="6699"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
617[label="157.149.180.243;d;17pkt 17fpkt", shape=diamond, color=yellow];
1382[label="157.149.180.243;d;17pkt 17fpkt", shape=hexagon, color=black];
1891[label="112.236.160.1;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2657[label="194.4.225.231;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2724[label="112.236.160.1;14pkt 14fpkt", shape=invtriangle, color=brown];
3110[label="194.4.225.231;24pkt 24fpkt", shape=invtriangle, color=brown];
3143[label="112.236.160.1;14pkt 14fpkt", shape=invhouse, color=bisque];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 157.149.180.243:*}[28.8462%]&lt;BR/&gt;{112.236.160.1:80, *:*}[26.9231%]&lt;BR/&gt;{194.4.225.231:80, 171.70.143.90:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3871%)&lt;BR/&gt; 1760: (2.01613%)&lt;BR/&gt; 1759: (2.01613%)&lt;BR/&gt; 1863: (1.6129%)&lt;BR/&gt; 1789: (1.6129%)&gt;];
}
617--1382[label="1;17pkt 17fpkt"];
617--1807[label="0.235294;4pkt 4fpkt"];
617--1843[label="0.235294;4pkt 4fpkt"];
617--1872[label="0.235294;4pkt 4fpkt"];
617--1891[label="0.142857;2pkt 2fpkt"];
617--1894[label="0.117647;2pkt 2fpkt"];
617--2148[label="0.470588;8pkt 8fpkt"];
617--2269[label="0.0714286;1pkt 1fpkt"];
617--2657[label="0.0588235;1pkt 1fpkt"];
617--2724[label="0.142857;2pkt 2fpkt"];
617--2853[label="0.470588;8pkt 8fpkt"];
617--2910[label="0.0714286;1pkt 1fpkt"];
617--3110[label="0.0588235;1pkt 1fpkt"];
617--3143[label="0.142857;2pkt 2fpkt"];
617--3348[label="0.0588235;1pkt 1fpkt"];
1382--1807[label="0.235294;4pkt 4fpkt"];
1382--1843[label="0.235294;4pkt 4fpkt"];
1382--1872[label="0.235294;4pkt 4fpkt"];
1382--1891[label="0.142857;2pkt 2fpkt"];
1382--1894[label="0.117647;2pkt 2fpkt"];
1382--2148[label="0.470588;8pkt 8fpkt"];
1382--2269[label="0.0714286;1pkt 1fpkt"];
1382--2657[label="0.0588235;1pkt 1fpkt"];
1382--2724[label="0.142857;2pkt 2fpkt"];
1382--2853[label="0.470588;8pkt 8fpkt"];
1382--2910[label="0.0714286;1pkt 1fpkt"];
1382--3110[label="0.0588235;1pkt 1fpkt"];
1382--3143[label="0.142857;2pkt 2fpkt"];
1382--3348[label="0.0588235;1pkt 1fpkt"];
1891--2724[label="1;14pkt 14fpkt"];
1891--3143[label="1;14pkt 14fpkt"];
2657--3110[label="1;24pkt 24fpkt"];
2657--3348[label="1;24pkt 24fpkt"];
2724--3143[label="1;14pkt 14fpkt"];
3110--3348[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="112.236.160.1" src_port="80"/>
      <filter dst_ip="157.149.180.243" src_port="80"/>
      <filter dst_ip="171.70.143.90" src_ip="194.4.225.231" src_port="80"/>
    </slice>
    <from sec="1026018029" usec="0"/>
    <to sec="1026019602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
366[label="133.19.216.210;d;69pkt 69fpkt", shape=diamond, color=yellow];
397[label="131.27.145.78;s;8pkt 8fpkt", shape=diamond, color=yellow];
1385[label="131.27.145.78;s;8pkt 8fpkt", shape=hexagon, color=black];
2170[label="201.97.104.78;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2171[label="131.27.145.78;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2189[label="194.138.108.82;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2863[label="131.27.145.78;11pkt 11fpkt", shape=invtriangle, color=brown];
3215[label="131.27.145.78;12pkt 12fpkt", shape=invhouse, color=bisque];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.138.108.42:80, 133.19.216.210:*}[23.1884%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6032%)&lt;BR/&gt; 1427: (2.38095%)&lt;BR/&gt; 1426: (2.38095%)&lt;BR/&gt; 1425: (2.38095%)&lt;BR/&gt; 1424: (2.38095%)&gt;];
}
366--381[label="1;12pkt 12fpkt"];
366--397[label="1;8pkt 8fpkt"];
366--1385[label="1;8pkt 8fpkt"];
366--1797[label="0.144928;10pkt 10fpkt"];
366--1807[label="0.0144928;1pkt 1fpkt"];
366--1812[label="0.0289855;2pkt 2fpkt"];
366--1819[label="0.26087;18pkt 18fpkt"];
366--1832[label="0.144928;10pkt 10fpkt"];
366--1843[label="0.0144928;1pkt 1fpkt"];
366--1847[label="0.0289855;2pkt 2fpkt"];
366--1855[label="0.26087;18pkt 18fpkt"];
366--1864[label="0.144928;10pkt 10fpkt"];
366--1872[label="0.0144928;1pkt 1fpkt"];
366--1876[label="0.0289855;2pkt 2fpkt"];
366--1881[label="0.26087;18pkt 18fpkt"];
366--2170[label="1;4pkt 4fpkt"];
366--2171[label="1;11pkt 11fpkt"];
366--2189[label="1;3pkt 3fpkt"];
366--2863[label="1;11pkt 11fpkt"];
366--3215[label="1;12pkt 12fpkt"];
397--1385[label="1;8pkt 8fpkt"];
397--2171[label="0.875;7pkt 7fpkt"];
397--2863[label="0.875;7pkt 7fpkt"];
397--3215[label="1;8pkt 8fpkt"];
1385--2171[label="0.875;7pkt 7fpkt"];
1385--2863[label="0.875;7pkt 7fpkt"];
1385--3215[label="1;8pkt 8fpkt"];
2171--2863[label="1;11pkt 11fpkt"];
2171--3215[label="1;11pkt 11fpkt"];
2863--3215[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.216.210" src_ip="194.138.108.42" src_port="80"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026018863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
378[label="154.213.27.140;s;1241pkt 1241fpkt", shape=diamond, color=yellow];
623[label="218.252.118.25;d;102pkt 102fpkt", shape=diamond, color=yellow];
628[label="195.236.136.48;d;133pkt 133fpkt", shape=diamond, color=yellow];
884[label="62.82.194.29;d;28pkt 28fpkt", shape=diamond, color=yellow];
887[label="157.149.148.161;s;105pkt 105fpkt", shape=diamond, color=yellow];
1339[label="154.213.27.140;s;161pkt 161fpkt", shape=hexagon, color=black];
1386[label="218.252.118.25;d;79pkt 79fpkt", shape=hexagon, color=black];
2128[label="154.213.43.67;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2440[label="157.149.148.161;105pkt 105fpkt", shape=pentagon, color=darkviolet];
2456[label="171.70.217.164;68pkt 68fpkt", shape=pentagon, color=darkviolet];
3010[label="171.70.217.164;68pkt 68fpkt", shape=invtriangle, color=brown];
3292[label="171.70.217.164;67pkt 67fpkt", shape=invhouse, color=bisque];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.27.140:*, 195.236.136.48:80}[28.14%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6801%)&lt;BR/&gt; 443: (0.228519%)&lt;BR/&gt; 52981: (0.0914077%)&lt;BR/&gt; 52917: (0.0914077%)&lt;BR/&gt; 52916: (0.0914077%)&gt;];
}
378--623[label="0.882353;90pkt 90fpkt"];
378--628[label="1;133pkt 133fpkt"];
378--678[label="0.625;30pkt 30fpkt"];
378--681[label="0.376712;55pkt 55fpkt"];
378--731[label="0.00456621;1pkt 1fpkt"];
378--884[label="0.0357143;1pkt 1fpkt"];
378--957[label="0.016129;1pkt 1fpkt"];
378--1073[label="1;85pkt 85fpkt"];
378--1339[label="1;161pkt 161fpkt"];
378--1386[label="0.911392;72pkt 72fpkt"];
378--1502[label="0.625;30pkt 30fpkt"];
378--1640[label="1;61pkt 61fpkt"];
378--1770[label="0.636364;28pkt 28fpkt"];
378--1798[label="0.00644641;8pkt 8fpkt"];
378--1808[label="0.0306205;38pkt 38fpkt"];
378--1815[label="0.0378727;47pkt 47fpkt"];
378--1820[label="0.0386785;48pkt 48fpkt"];
378--1822[label="0.0354553;44pkt 44fpkt"];
378--1828[label="0.0193392;24pkt 24fpkt"];
378--1831[label="0.0419017;52pkt 52fpkt"];
378--1833[label="0.00644641;8pkt 8fpkt"];
378--1844[label="0.0306205;38pkt 38fpkt"];
378--1850[label="0.0378727;47pkt 47fpkt"];
378--1856[label="0.0386785;48pkt 48fpkt"];
378--1860[label="0.0193392;24pkt 24fpkt"];
378--1863[label="0.0419017;52pkt 52fpkt"];
378--1865[label="0.00644641;8pkt 8fpkt"];
378--1873[label="0.0306205;38pkt 38fpkt"];
378--1879[label="0.0378727;47pkt 47fpkt"];
378--1882[label="0.0386785;48pkt 48fpkt"];
623--1339[label="0.607843;62pkt 62fpkt"];
623--1386[label="1;79pkt 79fpkt"];
623--1815[label="0.127451;13pkt 13fpkt"];
623--1820[label="0.166667;17pkt 17fpkt"];
623--1822[label="0.0294118;3pkt 3fpkt"];
623--1850[label="0.127451;13pkt 13fpkt"];
623--1856[label="0.166667;17pkt 17fpkt"];
623--1879[label="0.127451;13pkt 13fpkt"];
623--1882[label="0.166667;17pkt 17fpkt"];
884--887[label="0.25;7pkt 7fpkt"];
884--1822[label="0.142857;4pkt 4fpkt"];
884--2128[label="0.392857;11pkt 11fpkt"];
884--2440[label="0.25;7pkt 7fpkt"];
884--2456[label="0.321429;9pkt 9fpkt"];
884--3010[label="0.321429;9pkt 9fpkt"];
884--3292[label="0.321429;9pkt 9fpkt"];
887--2440[label="1;105pkt 105fpkt"];
1339--1386[label="0.78481;62pkt 62fpkt"];
1339--1798[label="0.0496894;8pkt 8fpkt"];
1339--1808[label="0.236025;38pkt 38fpkt"];
1339--1833[label="0.0496894;8pkt 8fpkt"];
1339--1844[label="0.236025;38pkt 38fpkt"];
1339--1865[label="0.0496894;8pkt 8fpkt"];
1339--1873[label="0.236025;38pkt 38fpkt"];
1386--1815[label="0.0253165;2pkt 2fpkt"];
1386--1850[label="0.0253165;2pkt 2fpkt"];
1386--1879[label="0.0253165;2pkt 2fpkt"];
2456--3010[label="1;68pkt 68fpkt"];
2456--3292[label="1;67pkt 67fpkt"];
3010--3292[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="195.236.136.48" dst_port="80" src_ip="154.213.27.140"/>
    </slice>
    <from sec="1026018009" usec="0"/>
    <to sec="1026019661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
248[label="60.169.201.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
1393[label="60.169.201.80;d;1pkt 1fpkt", shape=hexagon, color=black];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.136.19:6699, 60.169.201.80:1151}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1151: (50%)&gt;];
}
248--1393[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="60.169.201.80" dst_port="1151" src_ip="154.213.136.19" src_port="6699"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
410[label="114.141.183.241;s;1pkt 1fpkt", shape=diamond, color=yellow];
1397[label="114.141.183.241;s;1pkt 1fpkt", shape=hexagon, color=black];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{114.141.183.241:6699, 133.19.72.146:1501}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1501: (50%)&gt;];
}
410--1397[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.72.146" dst_port="1501" src_ip="114.141.183.241" src_port="6699"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
222[label="147.136.34.28;d;112pkt 112fpkt", shape=diamond, color=yellow];
385[label="62.82.197.95;d;33pkt 33fpkt", shape=diamond, color=yellow];
423[label="208.237.114.173;s;2586pkt 2586fpkt", shape=diamond, color=yellow];
459[label="204.2.130.247;d;457pkt 457fpkt", shape=diamond, color=yellow];
756[label="115.120.81.26;d;69pkt 69fpkt", shape=diamond, color=yellow];
795[label="218.138.134.206;d;110pkt 110fpkt", shape=diamond, color=yellow];
935[label="219.50.18.227;d;179pkt 179fpkt", shape=diamond, color=yellow];
982[label="212.26.149.77;d;2pkt 2fpkt", shape=diamond, color=yellow];
1066[label="208.210.79.247;d;72pkt 72fpkt", shape=diamond, color=yellow];
1109[label="157.149.202.126;s;56pkt 56fpkt", shape=diamond, color=yellow];
1343[label="62.82.197.95;d;20pkt 20fpkt", shape=hexagon, color=black];
1401[label="208.237.114.173;s;2506pkt 2506fpkt", shape=hexagon, color=black];
1623[label="204.2.130.247;d;353pkt 353fpkt", shape=hexagon, color=black];
2473[label="208.237.114.173;2604pkt 2604fpkt", shape=pentagon, color=darkviolet];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.237.114.173:*, *:80}[83.7759%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7216%)&lt;BR/&gt; 7892: (0.163773%)&lt;BR/&gt; 32768: (0.0873458%)&lt;BR/&gt; 53: (0.0873458%)&lt;BR/&gt; 48437: (0.0327547%)&gt;];
}
222--423[label="1;112pkt 112fpkt"];
222--1401[label="1;112pkt 112fpkt"];
222--1798[label="0.133929;15pkt 15fpkt"];
222--1808[label="0.276786;31pkt 31fpkt"];
222--1815[label="0.0535714;6pkt 6fpkt"];
222--1820[label="0.0357143;4pkt 4fpkt"];
222--1822[label="0.0535714;6pkt 6fpkt"];
222--1833[label="0.133929;15pkt 15fpkt"];
222--1844[label="0.276786;31pkt 31fpkt"];
222--1850[label="0.0535714;6pkt 6fpkt"];
222--1856[label="0.0357143;4pkt 4fpkt"];
222--1865[label="0.133929;15pkt 15fpkt"];
222--1873[label="0.276786;31pkt 31fpkt"];
222--1879[label="0.0535714;6pkt 6fpkt"];
222--1882[label="0.0357143;4pkt 4fpkt"];
222--2473[label="1;112pkt 112fpkt"];
385--423[label="0.636364;21pkt 21fpkt"];
385--1109[label="0.181818;6pkt 6fpkt"];
385--1306[label="0.181818;6pkt 6fpkt"];
385--1343[label="1;20pkt 20fpkt"];
385--1401[label="0.636364;21pkt 21fpkt"];
385--1815[label="0.030303;1pkt 1fpkt"];
385--1820[label="0.0909091;3pkt 3fpkt"];
385--1822[label="0.151515;5pkt 5fpkt"];
385--1850[label="0.030303;1pkt 1fpkt"];
385--1856[label="0.0909091;3pkt 3fpkt"];
385--1879[label="0.030303;1pkt 1fpkt"];
385--1882[label="0.0909091;3pkt 3fpkt"];
385--1957[label="0.181818;6pkt 6fpkt"];
385--2473[label="0.636364;21pkt 21fpkt"];
385--2760[label="0.181818;6pkt 6fpkt"];
423--445[label="0.5;2pkt 2fpkt"];
423--459[label="0.0765864;35pkt 35fpkt"];
423--671[label="0.0952381;8pkt 8fpkt"];
423--728[label="0.603175;38pkt 38fpkt"];
423--731[label="0.863014;189pkt 189fpkt"];
423--737[label="0.702703;52pkt 52fpkt"];
423--753[label="1;1pkt 1fpkt"];
423--756[label="1;69pkt 69fpkt"];
423--795[label="1;110pkt 110fpkt"];
423--797[label="0.218182;12pkt 12fpkt"];
423--935[label="1;179pkt 179fpkt"];
423--954[label="0.485294;33pkt 33fpkt"];
423--957[label="0.580645;36pkt 36fpkt"];
423--961[label="0.402778;29pkt 29fpkt"];
423--982[label="1;2pkt 2fpkt"];
423--1012[label="0.615385;32pkt 32fpkt"];
423--1037[label="0.0144928;1pkt 1fpkt"];
423--1066[label="1;72pkt 72fpkt"];
423--1343[label="1;20pkt 20fpkt"];
423--1401[label="1;2506pkt 2506fpkt"];
423--1454[label="0.702128;33pkt 33fpkt"];
423--1455[label="0.875;189pkt 189fpkt"];
423--1623[label="0.0991501;35pkt 35fpkt"];
423--1645[label="0.5;2pkt 2fpkt"];
423--1673[label="0.0151515;1pkt 1fpkt"];
423--1685[label="0.432836;29pkt 29fpkt"];
423--1798[label="0.0262712;62pkt 62fpkt"];
423--1808[label="0.0282289;73pkt 73fpkt"];
423--1815[label="0.0514308;133pkt 133fpkt"];
423--1820[label="0.0607115;157pkt 157fpkt"];
423--1822[label="0.0604053;155pkt 155fpkt"];
423--1828[label="0.0128866;30pkt 30fpkt"];
423--1831[label="0.0203001;46pkt 46fpkt"];
423--1833[label="0.0262712;62pkt 62fpkt"];
423--1844[label="0.0282289;73pkt 73fpkt"];
423--1850[label="0.0514308;133pkt 133fpkt"];
423--1856[label="0.0607115;157pkt 157fpkt"];
423--1860[label="0.0128866;30pkt 30fpkt"];
423--1863[label="0.0203001;46pkt 46fpkt"];
423--1865[label="0.0262712;62pkt 62fpkt"];
423--1873[label="0.0282289;73pkt 73fpkt"];
423--1879[label="0.0514308;133pkt 133fpkt"];
423--1882[label="0.0607115;157pkt 157fpkt"];
423--2473[label="1;2586pkt 2586fpkt"];
459--1401[label="0.0765864;35pkt 35fpkt"];
459--1623[label="1;353pkt 353fpkt"];
459--1798[label="0.0175055;8pkt 8fpkt"];
459--1808[label="0.0350109;16pkt 16fpkt"];
459--1815[label="0.0371991;17pkt 17fpkt"];
459--1820[label="0.0371991;17pkt 17fpkt"];
459--1822[label="0.0371991;17pkt 17fpkt"];
459--1828[label="0.0371991;17pkt 17fpkt"];
459--1831[label="0.0196937;9pkt 9fpkt"];
459--1833[label="0.0175055;8pkt 8fpkt"];
459--1844[label="0.0350109;16pkt 16fpkt"];
459--1850[label="0.0371991;17pkt 17fpkt"];
459--1856[label="0.0371991;17pkt 17fpkt"];
459--1860[label="0.0371991;17pkt 17fpkt"];
459--1863[label="0.0196937;9pkt 9fpkt"];
459--1865[label="0.0175055;8pkt 8fpkt"];
459--1873[label="0.0350109;16pkt 16fpkt"];
459--1879[label="0.0371991;17pkt 17fpkt"];
459--1882[label="0.0371991;17pkt 17fpkt"];
459--2473[label="0.0765864;35pkt 35fpkt"];
756--1401[label="1;69pkt 69fpkt"];
756--2473[label="1;69pkt 69fpkt"];
795--1401[label="1;110pkt 110fpkt"];
795--1815[label="0.0363636;4pkt 4fpkt"];
795--1820[label="0.209091;23pkt 23fpkt"];
795--1822[label="0.209091;23pkt 23fpkt"];
795--1850[label="0.0363636;4pkt 4fpkt"];
795--1856[label="0.209091;23pkt 23fpkt"];
795--1879[label="0.0363636;4pkt 4fpkt"];
795--1882[label="0.209091;23pkt 23fpkt"];
795--2473[label="1;110pkt 110fpkt"];
935--1401[label="1;179pkt 179fpkt"];
935--2473[label="1;179pkt 179fpkt"];
982--1401[label="1;2pkt 2fpkt"];
982--1828[label="0.5;1pkt 1fpkt"];
982--1831[label="1;2pkt 2fpkt"];
982--1860[label="0.5;1pkt 1fpkt"];
982--1863[label="1;2pkt 2fpkt"];
982--2473[label="1;2pkt 2fpkt"];
1066--1401[label="0.416667;30pkt 30fpkt"];
1066--1831[label="0.388889;28pkt 28fpkt"];
1066--1863[label="0.388889;28pkt 28fpkt"];
1066--2473[label="1;72pkt 72fpkt"];
1343--1401[label="1;20pkt 20fpkt"];
1343--1815[label="0.05;1pkt 1fpkt"];
1343--1820[label="0.15;3pkt 3fpkt"];
1343--1822[label="0.25;5pkt 5fpkt"];
1343--1850[label="0.05;1pkt 1fpkt"];
1343--1856[label="0.15;3pkt 3fpkt"];
1343--1879[label="0.05;1pkt 1fpkt"];
1343--1882[label="0.15;3pkt 3fpkt"];
1343--2473[label="1;20pkt 20fpkt"];
1401--1454[label="0.702128;33pkt 33fpkt"];
1401--1455[label="0.875;189pkt 189fpkt"];
1401--1623[label="0.0991501;35pkt 35fpkt"];
1401--1645[label="0.5;2pkt 2fpkt"];
1401--1673[label="0.0151515;1pkt 1fpkt"];
1401--1685[label="0.432836;29pkt 29fpkt"];
1401--1798[label="0.0262712;62pkt 62fpkt"];
1401--1808[label="0.0291301;73pkt 73fpkt"];
1401--1815[label="0.0530726;133pkt 133fpkt"];
1401--1820[label="0.0626496;157pkt 157fpkt"];
1401--1822[label="0.0618516;155pkt 155fpkt"];
1401--1828[label="0.0128866;30pkt 30fpkt"];
1401--1831[label="0.00397176;9pkt 9fpkt"];
1401--1833[label="0.0262712;62pkt 62fpkt"];
1401--1844[label="0.0291301;73pkt 73fpkt"];
1401--1850[label="0.0530726;133pkt 133fpkt"];
1401--1856[label="0.0626496;157pkt 157fpkt"];
1401--1860[label="0.0128866;30pkt 30fpkt"];
1401--1863[label="0.00397176;9pkt 9fpkt"];
1401--1865[label="0.0262712;62pkt 62fpkt"];
1401--1873[label="0.0291301;73pkt 73fpkt"];
1401--1879[label="0.0530726;133pkt 133fpkt"];
1401--1882[label="0.0626496;157pkt 157fpkt"];
1401--2473[label="1;2506pkt 2506fpkt"];
1623--1798[label="0.0226629;8pkt 8fpkt"];
1623--1808[label="0.0453258;16pkt 16fpkt"];
1623--1815[label="0.0481586;17pkt 17fpkt"];
1623--1820[label="0.0481586;17pkt 17fpkt"];
1623--1822[label="0.0481586;17pkt 17fpkt"];
1623--1828[label="0.00849858;3pkt 3fpkt"];
1623--1831[label="0.00849858;3pkt 3fpkt"];
1623--1833[label="0.0226629;8pkt 8fpkt"];
1623--1844[label="0.0453258;16pkt 16fpkt"];
1623--1850[label="0.0481586;17pkt 17fpkt"];
1623--1856[label="0.0481586;17pkt 17fpkt"];
1623--1860[label="0.00849858;3pkt 3fpkt"];
1623--1863[label="0.00849858;3pkt 3fpkt"];
1623--1865[label="0.0226629;8pkt 8fpkt"];
1623--1873[label="0.0453258;16pkt 16fpkt"];
1623--1879[label="0.0481586;17pkt 17fpkt"];
1623--1882[label="0.0481586;17pkt 17fpkt"];
1623--2473[label="0.0991501;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="208.237.114.173"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
285[label="36.134.163.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
1402[label="36.134.163.14;d;1pkt 1fpkt", shape=hexagon, color=black];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.40.214:1270, 36.134.163.14:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1270: (50%)&gt;];
}
285--424[label="1;1pkt 1fpkt"];
285--1402[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="36.134.163.14" dst_port="6699" src_ip="154.213.40.214" src_port="1270"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34366,2.02542,020,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
216[label="134.232.146.179;d;1pkt 1fpkt", shape=diamond, color=yellow];
217[label="157.149.204.69;s;4pkt 4fpkt", shape=diamond, color=yellow];
1328[label="134.232.146.179;d;1pkt 1fpkt", shape=hexagon, color=black];
1415[label="157.149.204.69;s;4pkt 4fpkt", shape=hexagon, color=black];
1754[label="134.232.146.179;d;1pkt 1fpkt", shape=polygon, color=gold];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.149.204.69:34651, 219.169.143.21:6667}[25%]&lt;BR/&gt;{157.149.204.69:0, 134.232.146.179:0}[25%]&lt;BR/&gt;{157.149.204.69:34652, 215.14.86.186:6667}[25%]&lt;BR/&gt;{157.149.204.69:34656, 215.14.86.186:6667}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (45.4545%)&lt;BR/&gt; 6667: (27.2727%)&lt;BR/&gt; 34656: (9.09091%)&lt;BR/&gt; 34652: (9.09091%)&lt;BR/&gt; 34651: (9.09091%)&gt;];
}
216--217[label="1;1pkt 1fpkt"];
216--1328[label="1;1pkt 1fpkt"];
216--1415[label="1;1pkt 1fpkt"];
216--1754[label="1;1pkt 1fpkt"];
217--1328[label="1;1pkt 1fpkt"];
217--1415[label="1;4pkt 4fpkt"];
217--1754[label="1;1pkt 1fpkt"];
1328--1415[label="1;1pkt 1fpkt"];
1328--1754[label="1;1pkt 1fpkt"];
1415--1754[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.14.86.186" dst_port="6667" src_ip="157.149.204.69" src_port="34656"/>
      <filter dst_ip="215.14.86.186" dst_port="6667" src_ip="157.149.204.69" src_port="34652"/>
      <filter dst_ip="134.232.146.179" src_ip="157.149.204.69"/>
      <filter dst_ip="219.169.143.21" dst_port="6667" src_ip="157.149.204.69" src_port="34651"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
447[label="173.138.27.60;s;4pkt 4fpkt", shape=diamond, color=yellow];
653[label="60.196.114.241;d;3pkt 3fpkt", shape=diamond, color=yellow];
773[label="62.99.93.88;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.77.224.47:*, 60.196.114.241:80}[33.3333%]&lt;BR/&gt;{173.138.27.60:0, *:0}[33.3333%]&lt;BR/&gt;{173.138.27.60:53, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 53: (12.5%)&lt;BR/&gt; 47051: (6.25%)&lt;BR/&gt; 37590: (6.25%)&gt;];
}
447--653[label="0.333333;1pkt 1fpkt"];
447--773[label="1;1pkt 1fpkt"];
447--1416[label="0.5;1pkt 1fpkt"];
653--1416[label="1;2pkt 2fpkt"];
653--2059[label="0.666667;2pkt 2fpkt"];
653--2811[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="173.138.27.60" src_port="53"/>
      <filter src_ip="173.138.27.60"/>
      <filter dst_ip="60.196.114.241" dst_port="80" src_ip="208.77.224.47"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
359[label="205.8.193.195;s;1105pkt 1105fpkt", shape=diamond, color=yellow];
1419[label="205.8.193.195;s;745pkt 745fpkt", shape=hexagon, color=black];
2546[label="205.8.193.195;1121pkt 1121fpkt", shape=pentagon, color=darkviolet];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.8.193.195:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 1791: (0.0504881%)&lt;BR/&gt; 1790: (0.0504881%)&lt;BR/&gt; 1789: (0.0504881%)&lt;BR/&gt; 1788: (0.0504881%)&gt;];
}
359--1419[label="1;745pkt 745fpkt"];
359--2546[label="0.999095;1104pkt 1104fpkt"];
1419--2546[label="0.998658;744pkt 744fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="205.8.193.195"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
557[label="60.64.165.192;s;1pkt 1fpkt", shape=diamond, color=yellow];
606[label="154.19.143.208;d;3pkt 3fpkt", shape=diamond, color=yellow];
1422[label="154.19.143.208;d;3pkt 3fpkt", shape=hexagon, color=black];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.82.232.102:25, 154.19.143.208:1397}[33.3333%]&lt;BR/&gt;{60.64.165.192:2846, 154.19.143.208:22}[33.3333%]&lt;BR/&gt;{62.82.232.206:25, 154.19.143.208:1396}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (28.5714%)&lt;BR/&gt; 2846: (21.4286%)&lt;BR/&gt; 22: (21.4286%)&lt;BR/&gt; 1397: (14.2857%)&lt;BR/&gt; 1396: (14.2857%)&gt;];
}
557--606[label="1;1pkt 1fpkt"];
557--1422[label="1;1pkt 1fpkt"];
606--1422[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="154.19.143.208" dst_port="1396" src_ip="62.82.232.206" src_port="25"/>
      <filter dst_ip="154.19.143.208" dst_port="22" src_ip="60.64.165.192" src_port="2846"/>
      <filter dst_ip="154.19.143.208" dst_port="1397" src_ip="62.82.232.102" src_port="25"/>
    </slice>
    <from sec="1026018008" usec="0"/>
    <to sec="1026019612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
561[label="205.131.254.6;s;52pkt 52fpkt", shape=diamond, color=yellow];
575[label="171.70.208.177;d;8pkt 8fpkt", shape=diamond, color=yellow];
747[label="171.70.197.27;d;34pkt 34fpkt", shape=diamond, color=yellow];
1424[label="205.131.254.6;s;47pkt 47fpkt", shape=hexagon, color=black];
1503[label="171.70.197.27;d;34pkt 34fpkt", shape=hexagon, color=black];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.131.254.6:80, 171.70.197.27:*}[65.3846%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49200: (1.14286%)&lt;BR/&gt; 49199: (1.14286%)&lt;BR/&gt; 49198: (1.14286%)&lt;BR/&gt; 49197: (1.14286%)&gt;];
}
561--575[label="1;8pkt 8fpkt"];
561--577[label="0.153846;8pkt 8fpkt"];
561--747[label="1;34pkt 34fpkt"];
561--1424[label="1;47pkt 47fpkt"];
561--1473[label="0.153846;8pkt 8fpkt"];
561--1503[label="1;34pkt 34fpkt"];
561--1797[label="0.0576923;3pkt 3fpkt"];
561--1807[label="0.0384615;2pkt 2fpkt"];
561--1812[label="0.0769231;4pkt 4fpkt"];
561--1819[label="0.0769231;4pkt 4fpkt"];
561--1832[label="0.0576923;3pkt 3fpkt"];
561--1843[label="0.0384615;2pkt 2fpkt"];
561--1847[label="0.0769231;4pkt 4fpkt"];
561--1855[label="0.0769231;4pkt 4fpkt"];
561--1864[label="0.0576923;3pkt 3fpkt"];
561--1872[label="0.0384615;2pkt 2fpkt"];
561--1876[label="0.0769231;4pkt 4fpkt"];
561--1881[label="0.0769231;4pkt 4fpkt"];
575--1424[label="1;8pkt 8fpkt"];
747--1424[label="0.852941;29pkt 29fpkt"];
747--1503[label="1;34pkt 34fpkt"];
747--1812[label="0.0588235;2pkt 2fpkt"];
747--1819[label="0.117647;4pkt 4fpkt"];
747--1847[label="0.0588235;2pkt 2fpkt"];
747--1855[label="0.117647;4pkt 4fpkt"];
747--1876[label="0.0588235;2pkt 2fpkt"];
747--1881[label="0.117647;4pkt 4fpkt"];
1424--1473[label="0.170213;8pkt 8fpkt"];
1424--1503[label="0.852941;29pkt 29fpkt"];
1424--1797[label="0.0638298;3pkt 3fpkt"];
1424--1807[label="0.0425532;2pkt 2fpkt"];
1424--1812[label="0.0851064;4pkt 4fpkt"];
1424--1832[label="0.0638298;3pkt 3fpkt"];
1424--1843[label="0.0425532;2pkt 2fpkt"];
1424--1847[label="0.0851064;4pkt 4fpkt"];
1424--1864[label="0.0638298;3pkt 3fpkt"];
1424--1872[label="0.0425532;2pkt 2fpkt"];
1424--1876[label="0.0851064;4pkt 4fpkt"];
1503--1812[label="0.0588235;2pkt 2fpkt"];
1503--1819[label="0.117647;4pkt 4fpkt"];
1503--1847[label="0.0588235;2pkt 2fpkt"];
1503--1855[label="0.117647;4pkt 4fpkt"];
1503--1876[label="0.0588235;2pkt 2fpkt"];
1503--1881[label="0.117647;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.197.27" src_ip="205.131.254.6" src_port="80"/>
    </slice>
    <from sec="1026018016" usec="0"/>
    <to sec="1026018596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
683[label="207.177.160.108;s;1pkt 1fpkt", shape=diamond, color=yellow];
1427[label="207.177.160.108;s;1pkt 1fpkt", shape=hexagon, color=black];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.177.160.108:4662, 171.70.172.233:4209}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 4209: (50%)&gt;];
}
683--1427[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.172.233" dst_port="4209" src_ip="207.177.160.108" src_port="4662"/>
    </slice>
    <from sec="1026018340" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
688[label="63.81.115.122;s;301pkt 301fpkt", shape=diamond, color=yellow];
1428[label="63.81.115.122;s;288pkt 288fpkt", shape=hexagon, color=black];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{63.81.115.122:*, *:27374}[50.4983%]&lt;BR/&gt;{63.81.115.122:*, *:12345}[49.5017%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27374: (25.2971%)&lt;BR/&gt; 12345: (24.7029%)&lt;BR/&gt; 2388: (0.169779%)&lt;BR/&gt; 2377: (0.169779%)&lt;BR/&gt; 2376: (0.169779%)&gt;];
}
688--1428[label="1;288pkt 288fpkt"];
</description>
    <slice>
      <filter dst_port="27374" src_ip="63.81.115.122"/>
      <filter dst_port="12345" src_ip="63.81.115.122"/>
    </slice>
    <from sec="1026018396" usec="0"/>
    <to sec="1026018656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22438,1.96931,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
30[label="171.70.143.200s;4pkt 4fpkt", shape=rectangle, color=red];
77[label="171.70.143.200;s;180pkt 180fpkt", shape=diamond, color=yellow];
481[label="219.106.53.106;d;11pkt 11fpkt", shape=diamond, color=yellow];
680[label="218.53.104.80;d;2pkt 2fpkt", shape=diamond, color=yellow];
693[label="217.77.250.210;d;2pkt 2fpkt", shape=diamond, color=yellow];
819[label="210.181.193.157;d;5pkt 5fpkt", shape=diamond, color=yellow];
956[label="208.198.100.36;d;3pkt 3fpkt", shape=diamond, color=yellow];
1014[label="159.245.61.164;d;6pkt 6fpkt", shape=diamond, color=yellow];
1101[label="200.128.23.213;d;4pkt 4fpkt", shape=diamond, color=yellow];
1430[label="171.70.143.200;s;77pkt 77fpkt", shape=hexagon, color=black];
1462[label="218.53.104.80;d;2pkt 2fpkt", shape=hexagon, color=black];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.70.143.200:*, *:3128}[59.8901%]&lt;BR/&gt;{171.70.143.200:*, *:8080}[35.1648%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (32.7703%)&lt;BR/&gt; 8080: (15.8784%)&lt;BR/&gt; 80: (1.01351%)&lt;BR/&gt; 3041: (0.844595%)&lt;BR/&gt; 3053: (0.675676%)&gt;];
}
30--76[label="0.25;1pkt 1fpkt"];
30--77[label="0.5;2pkt 2fpkt"];
30--376[label="0.25;1pkt 1fpkt"];
30--481[label="0.25;1pkt 1fpkt"];
30--549[label="0.25;1pkt 1fpkt"];
30--618[label="0.333333;1pkt 1fpkt"];
30--956[label="0.333333;1pkt 1fpkt"];
30--1430[label="0.5;2pkt 2fpkt"];
30--1571[label="0.25;1pkt 1fpkt"];
30--2412[label="0.25;1pkt 1fpkt"];
77--356[label="0.923077;12pkt 12fpkt"];
77--481[label="1;11pkt 11fpkt"];
77--680[label="1;2pkt 2fpkt"];
77--693[label="1;2pkt 2fpkt"];
77--819[label="1;5pkt 5fpkt"];
77--956[label="1;3pkt 3fpkt"];
77--1014[label="1;6pkt 6fpkt"];
77--1101[label="1;4pkt 4fpkt"];
77--1430[label="1;77pkt 77fpkt"];
77--1462[label="1;2pkt 2fpkt"];
77--1495[label="0.909091;10pkt 10fpkt"];
77--1822[label="0.00555556;1pkt 1fpkt"];
77--1828[label="0.00555556;1pkt 1fpkt"];
77--1860[label="0.00555556;1pkt 1fpkt"];
481--1430[label="0.454545;5pkt 5fpkt"];
680--1430[label="0.5;1pkt 1fpkt"];
680--1462[label="1;2pkt 2fpkt"];
693--1430[label="1;2pkt 2fpkt"];
819--1430[label="0.4;2pkt 2fpkt"];
956--1430[label="0.666667;2pkt 2fpkt"];
1014--1430[label="0.5;3pkt 3fpkt"];
1430--1462[label="0.5;1pkt 1fpkt"];
1430--1495[label="0.818182;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="171.70.143.200"/>
      <filter dst_port="8080" src_ip="171.70.143.200"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24548,1.91235,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
5[label="114.51.191.44s;4pkt 4fpkt", shape=rectangle, color=red];
130[label="157.149.192.81;d;11pkt 11fpkt", shape=diamond, color=yellow];
509[label="114.51.191.44;s;11pkt 11fpkt", shape=diamond, color=yellow];
1432[label="114.51.191.44;s;6pkt 6fpkt", shape=hexagon, color=black];
2042[label="114.51.191.44;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2804[label="114.51.191.44;11pkt 11fpkt", shape=invtriangle, color=brown];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{114.51.191.44:*, 157.149.192.81:31336}[63.6364%]&lt;BR/&gt;{114.51.191.44:*, 157.149.192.81:31337}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31336: (33.3333%)&lt;BR/&gt; 31337: (16.6667%)&lt;BR/&gt; 4000: (5.55556%)&lt;BR/&gt; 3981: (5.55556%)&lt;BR/&gt; 4627: (4.62963%)&gt;];
}
5--130[label="1;4pkt 4fpkt"];
5--509[label="1;4pkt 4fpkt"];
5--1432[label="0.5;2pkt 2fpkt"];
5--2042[label="1;4pkt 4fpkt"];
5--2804[label="1;4pkt 4fpkt"];
130--509[label="1;11pkt 11fpkt"];
130--1432[label="1;6pkt 6fpkt"];
130--2042[label="1;11pkt 11fpkt"];
130--2804[label="1;11pkt 11fpkt"];
509--1432[label="1;6pkt 6fpkt"];
509--2042[label="1;11pkt 11fpkt"];
509--2804[label="1;11pkt 11fpkt"];
1432--2042[label="1;6pkt 6fpkt"];
1432--2804[label="1;6pkt 6fpkt"];
2042--2804[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.192.81" dst_port="31336" src_ip="114.51.191.44"/>
      <filter dst_ip="157.149.192.81" dst_port="31337" src_ip="114.51.191.44"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19342,1.93272,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
6[label="133.19.81.56s;2pkt 2fpkt", shape=rectangle, color=red];
133[label="209.86.178.153;d;5pkt 5fpkt", shape=diamond, color=yellow];
136[label="133.19.81.56;s;7pkt 7fpkt", shape=diamond, color=yellow];
208[label="200.237.55.121;s;1pkt 1fpkt", shape=diamond, color=yellow];
283[label="85.74.83.166;s;1pkt 1fpkt", shape=diamond, color=yellow];
420[label="154.213.210.155;d;31pkt 31fpkt", shape=diamond, color=yellow];
652[label="62.179.50.187;s;1pkt 1fpkt", shape=diamond, color=yellow];
1241[label="112.229.240.128;d;2pkt 2fpkt", shape=diamond, color=yellow];
1310[label="85.156.125.173;s;1pkt 1fpkt", shape=hexagon, color=black];
1433[label="209.86.178.153;d;1pkt 1fpkt", shape=hexagon, color=black];
1614[label="85.74.83.166;s;1pkt 1fpkt", shape=hexagon, color=black];
1713[label="133.19.81.56;s;7pkt 7fpkt", shape=hexagon, color=black];
2088[label="133.19.81.56;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2458[label="85.74.83.166;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 154.213.210.155:6257}[51.2821%]&lt;BR/&gt;{*:*, 154.213.210.155:6699}[23.0769%]&lt;BR/&gt;{133.19.81.56:*, *:1755}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (28.9855%)&lt;BR/&gt; 1755: (22.4638%)&lt;BR/&gt; 6699: (11.5942%)&lt;BR/&gt; 1046: (4.34783%)&lt;BR/&gt; 1057: (3.62319%)&gt;];
}
6--133[label="0.5;1pkt 1fpkt"];
6--136[label="0.5;1pkt 1fpkt"];
6--283[label="1;1pkt 1fpkt"];
6--420[label="0.5;1pkt 1fpkt"];
6--1433[label="1;1pkt 1fpkt"];
6--1614[label="1;1pkt 1fpkt"];
6--1713[label="0.5;1pkt 1fpkt"];
6--2088[label="0.5;1pkt 1fpkt"];
6--2458[label="1;1pkt 1fpkt"];
133--136[label="1;5pkt 5fpkt"];
133--1433[label="1;1pkt 1fpkt"];
133--1713[label="1;5pkt 5fpkt"];
133--2088[label="1;5pkt 5fpkt"];
136--1241[label="1;2pkt 2fpkt"];
136--1433[label="1;1pkt 1fpkt"];
136--1713[label="1;7pkt 7fpkt"];
136--2088[label="1;7pkt 7fpkt"];
208--420[label="1;1pkt 1fpkt"];
283--420[label="1;1pkt 1fpkt"];
283--1614[label="1;1pkt 1fpkt"];
283--2458[label="1;1pkt 1fpkt"];
420--652[label="1;1pkt 1fpkt"];
420--1266[label="0.5;1pkt 1fpkt"];
420--1310[label="1;1pkt 1fpkt"];
420--1614[label="1;1pkt 1fpkt"];
420--1862[label="0.225806;7pkt 7fpkt"];
420--2458[label="1;1pkt 1fpkt"];
1241--1713[label="1;2pkt 2fpkt"];
1241--2088[label="1;2pkt 2fpkt"];
1433--1713[label="1;1pkt 1fpkt"];
1433--2088[label="1;1pkt 1fpkt"];
1614--2458[label="1;1pkt 1fpkt"];
1713--2088[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="1755" src_ip="133.19.81.56"/>
      <filter dst_ip="154.213.210.155" dst_port="6699"/>
      <filter dst_ip="154.213.210.155" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
586[label="208.140.116.229;s;67pkt 67fpkt", shape=diamond, color=yellow];
1441[label="208.140.116.229;s;47pkt 47fpkt", shape=hexagon, color=black];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.140.116.229:8004, 208.67.144.173:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8004: (50%)&lt;BR/&gt; 3996: (0.877193%)&lt;BR/&gt; 2388: (0.877193%)&lt;BR/&gt; 2369: (0.877193%)&lt;BR/&gt; 2309: (0.877193%)&gt;];
}
586--1441[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="208.67.144.173" src_ip="208.140.116.229" src_port="8004"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
355[label="70.202.227.107;d;1pkt 1fpkt", shape=diamond, color=yellow];
1451[label="70.202.227.107;d;1pkt 1fpkt", shape=hexagon, color=black];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.40.214:1269, 70.202.227.107:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1269: (50%)&gt;];
}
355--424[label="1;1pkt 1fpkt"];
355--1451[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="70.202.227.107" dst_port="6699" src_ip="154.213.40.214" src_port="1269"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
654[label="154.213.141.45;s;5pkt 5fpkt", shape=diamond, color=yellow];
689[label="70.105.49.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
1464[label="70.105.49.89;d;1pkt 1fpkt", shape=hexagon, color=black];
2045[label="154.213.141.45;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2806[label="154.213.141.45;5pkt 5fpkt", shape=invtriangle, color=brown];
3188[label="154.213.141.45;4pkt 4fpkt", shape=invhouse, color=bisque];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.141.45:3902, 212.68.128.29:80}[20%]&lt;BR/&gt;{154.213.141.45:3903, 70.5.42.89:80}[20%]&lt;BR/&gt;{154.213.141.45:3904, 70.105.49.89:6699}[20%]&lt;BR/&gt;{154.213.141.45:3701, 62.82.193.120:1863}[20%]&lt;BR/&gt;{154.213.141.45:3743, 208.57.139.156:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (20%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 3904: (10%)&lt;BR/&gt; 3903: (10%)&lt;BR/&gt; 3902: (10%)&gt;];
}
654--689[label="1;1pkt 1fpkt"];
654--1464[label="1;1pkt 1fpkt"];
654--1815[label="0.2;1pkt 1fpkt"];
654--1820[label="0.2;1pkt 1fpkt"];
654--1822[label="0.2;1pkt 1fpkt"];
654--1850[label="0.2;1pkt 1fpkt"];
654--1856[label="0.2;1pkt 1fpkt"];
654--1879[label="0.2;1pkt 1fpkt"];
654--1882[label="0.2;1pkt 1fpkt"];
654--2045[label="1;4pkt 4fpkt"];
654--2806[label="1;5pkt 5fpkt"];
654--3188[label="1;4pkt 4fpkt"];
689--1464[label="1;1pkt 1fpkt"];
689--2806[label="1;1pkt 1fpkt"];
1464--2806[label="1;1pkt 1fpkt"];
2045--2806[label="1;4pkt 4fpkt"];
2045--3188[label="1;4pkt 4fpkt"];
2806--3188[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.57.139.156" dst_port="6699" src_ip="154.213.141.45" src_port="3743"/>
      <filter dst_ip="62.82.193.120" dst_port="1863" src_ip="154.213.141.45" src_port="3701"/>
      <filter dst_ip="70.105.49.89" dst_port="6699" src_ip="154.213.141.45" src_port="3904"/>
      <filter dst_ip="70.5.42.89" dst_port="80" src_ip="154.213.141.45" src_port="3903"/>
      <filter dst_ip="212.68.128.29" dst_port="80" src_ip="154.213.141.45" src_port="3902"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34366,2.02542,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
90[label="154.213.42.236;d;25pkt 25fpkt", shape=diamond, color=yellow];
91[label="192.246.148.140;s;1pkt 1fpkt", shape=diamond, color=yellow];
630[label="193.174.8.208;s;2pkt 2fpkt", shape=diamond, color=yellow];
1256[label="154.213.42.236;d;25pkt 25fpkt", shape=hexagon, color=black];
1391[label="192.246.148.140;s;1pkt 1fpkt", shape=hexagon, color=black];
1465[label="193.174.8.208;s;2pkt 2fpkt", shape=hexagon, color=black];
1791[label="193.174.8.208;s;2pkt 2fpkt", shape=polygon, color=gold];
1792[label="154.213.42.236;d;25pkt 25fpkt", shape=polygon, color=gold];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.90.8.186:80, 154.213.42.236:*}[40%]&lt;BR/&gt;{215.114.136.78:80, 154.213.42.236:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.5301%)&lt;BR/&gt; 6699: (10.241%)&lt;BR/&gt; 4028: (3.61446%)&lt;BR/&gt; 4025: (3.61446%)&lt;BR/&gt; 1863: (3.61446%)&gt;];
}
90--91[label="1;1pkt 1fpkt"];
90--630[label="1;2pkt 2fpkt"];
90--1256[label="1;25pkt 25fpkt"];
90--1391[label="1;1pkt 1fpkt"];
90--1465[label="1;2pkt 2fpkt"];
90--1791[label="1;2pkt 2fpkt"];
90--1792[label="1;25pkt 25fpkt"];
90--1797[label="0.12;3pkt 3fpkt"];
90--1807[label="0.12;3pkt 3fpkt"];
90--1812[label="0.04;1pkt 1fpkt"];
90--1819[label="0.04;1pkt 1fpkt"];
90--1832[label="0.12;3pkt 3fpkt"];
90--1843[label="0.12;3pkt 3fpkt"];
90--1847[label="0.04;1pkt 1fpkt"];
90--1855[label="0.04;1pkt 1fpkt"];
90--1864[label="0.12;3pkt 3fpkt"];
90--1872[label="0.12;3pkt 3fpkt"];
90--1876[label="0.04;1pkt 1fpkt"];
90--1881[label="0.04;1pkt 1fpkt"];
91--1256[label="1;1pkt 1fpkt"];
91--1391[label="1;1pkt 1fpkt"];
91--1792[label="1;1pkt 1fpkt"];
630--1256[label="1;2pkt 2fpkt"];
630--1465[label="1;2pkt 2fpkt"];
630--1791[label="1;2pkt 2fpkt"];
630--1792[label="1;2pkt 2fpkt"];
1256--1391[label="1;1pkt 1fpkt"];
1256--1465[label="1;2pkt 2fpkt"];
1256--1791[label="1;2pkt 2fpkt"];
1256--1792[label="1;25pkt 25fpkt"];
1256--1797[label="0.12;3pkt 3fpkt"];
1256--1807[label="0.12;3pkt 3fpkt"];
1256--1812[label="0.04;1pkt 1fpkt"];
1256--1819[label="0.04;1pkt 1fpkt"];
1256--1832[label="0.12;3pkt 3fpkt"];
1256--1843[label="0.12;3pkt 3fpkt"];
1256--1847[label="0.04;1pkt 1fpkt"];
1256--1855[label="0.04;1pkt 1fpkt"];
1256--1864[label="0.12;3pkt 3fpkt"];
1256--1872[label="0.12;3pkt 3fpkt"];
1256--1876[label="0.04;1pkt 1fpkt"];
1256--1881[label="0.04;1pkt 1fpkt"];
1391--1792[label="1;1pkt 1fpkt"];
1465--1791[label="1;2pkt 2fpkt"];
1465--1792[label="1;2pkt 2fpkt"];
1791--1792[label="1;2pkt 2fpkt"];
1792--1797[label="0.12;3pkt 3fpkt"];
1792--1807[label="0.12;3pkt 3fpkt"];
1792--1812[label="0.04;1pkt 1fpkt"];
1792--1819[label="0.04;1pkt 1fpkt"];
1792--1832[label="0.12;3pkt 3fpkt"];
1792--1843[label="0.12;3pkt 3fpkt"];
1792--1847[label="0.04;1pkt 1fpkt"];
1792--1855[label="0.04;1pkt 1fpkt"];
1792--1864[label="0.12;3pkt 3fpkt"];
1792--1872[label="0.12;3pkt 3fpkt"];
1792--1876[label="0.04;1pkt 1fpkt"];
1792--1881[label="0.04;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.42.236" src_ip="62.90.8.186" src_port="80"/>
      <filter dst_ip="154.213.42.236" src_ip="215.114.136.78" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
142[label="207.193.208.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
1474[label="207.193.208.197;d;1pkt 1fpkt", shape=hexagon, color=black];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.149.237.47:5199, 207.193.208.197:1565}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5199: (50%)&lt;BR/&gt; 1565: (50%)&gt;];
}
142--1474[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.193.208.197" dst_port="1565" src_ip="157.149.237.47" src_port="5199"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
578[label="194.192.234.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
1475[label="194.192.234.233;d;1pkt 1fpkt", shape=hexagon, color=black];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.8.125:6699, 194.192.234.233:4500}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 4500: (50%)&gt;];
}
578--632[label="1;1pkt 1fpkt"];
578--1475[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.192.234.233" dst_port="4500" src_ip="154.213.8.125" src_port="6699"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
415[label="195.163.105.75;s;1pkt 1fpkt", shape=diamond, color=yellow];
1477[label="195.163.105.75;s;1pkt 1fpkt", shape=hexagon, color=black];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.163.105.75:6699, 154.213.136.69:2592}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2592: (50%)&gt;];
}
415--1477[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.136.69" dst_port="2592" src_ip="195.163.105.75" src_port="6699"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
446[label="56.217.49.37;d;3pkt 3fpkt", shape=diamond, color=yellow];
1486[label="56.217.49.37;d;2pkt 2fpkt", shape=hexagon, color=black];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.77.227.202:1225, 56.217.49.37:1214}[33.3333%]&lt;BR/&gt;{208.77.227.202:1346, 56.217.49.37:1214}[33.3333%]&lt;BR/&gt;{208.77.227.202:4788, 56.217.49.37:1214}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 4788: (20%)&lt;BR/&gt; 1225: (20%)&lt;BR/&gt; 1346: (10%)&gt;];
}
446--1486[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="56.217.49.37" dst_port="1214" src_ip="208.77.227.202" src_port="4788"/>
      <filter dst_ip="56.217.49.37" dst_port="1214" src_ip="208.77.227.202" src_port="1346"/>
      <filter dst_ip="56.217.49.37" dst_port="1214" src_ip="208.77.227.202" src_port="1225"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026018816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
450[label="85.209.149.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
1489[label="85.209.149.217;s;1pkt 1fpkt", shape=hexagon, color=black];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.209.149.217:1040, 154.213.136.69:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1040: (50%)&gt;];
}
450--1489[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.136.69" dst_port="6699" src_ip="85.209.149.217" src_port="1040"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
177[label="157.149.156.140;s;249pkt 249fpkt", shape=diamond, color=yellow];
356[label="219.11.218.164;d;13pkt 13fpkt", shape=diamond, color=yellow];
1282[label="157.149.156.140;s;233pkt 233fpkt", shape=hexagon, color=black];
1495[label="219.11.218.164;d;11pkt 11fpkt", shape=hexagon, color=black];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.149.156.140:*, 207.54.193.195:80}[20.3065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.0277%)&lt;BR/&gt; 3128: (8.69565%)&lt;BR/&gt; 8080: (8.10277%)&lt;BR/&gt; 8000: (1.18577%)&lt;BR/&gt; 113: (0.592885%)&gt;];
}
177--356[label="0.0769231;1pkt 1fpkt"];
177--1282[label="1;233pkt 233fpkt"];
177--1495[label="0.0909091;1pkt 1fpkt"];
177--1798[label="0.196787;49pkt 49fpkt"];
177--1808[label="0.0481928;12pkt 12fpkt"];
177--1815[label="0.0481928;12pkt 12fpkt"];
177--1820[label="0.0441767;11pkt 11fpkt"];
177--1822[label="0.0321285;8pkt 8fpkt"];
177--1833[label="0.196787;49pkt 49fpkt"];
177--1844[label="0.0481928;12pkt 12fpkt"];
177--1850[label="0.0481928;12pkt 12fpkt"];
177--1856[label="0.0441767;11pkt 11fpkt"];
177--1865[label="0.196787;49pkt 49fpkt"];
177--1873[label="0.0481928;12pkt 12fpkt"];
177--1879[label="0.0481928;12pkt 12fpkt"];
177--1882[label="0.0441767;11pkt 11fpkt"];
356--1282[label="0.0769231;1pkt 1fpkt"];
356--1430[label="0.692308;9pkt 9fpkt"];
356--1495[label="1;11pkt 11fpkt"];
1282--1495[label="0.0909091;1pkt 1fpkt"];
1282--1798[label="0.2103;49pkt 49fpkt"];
1282--1808[label="0.0515021;12pkt 12fpkt"];
1282--1815[label="0.0515021;12pkt 12fpkt"];
1282--1820[label="0.0472103;11pkt 11fpkt"];
1282--1822[label="0.0343348;8pkt 8fpkt"];
1282--1833[label="0.2103;49pkt 49fpkt"];
1282--1844[label="0.0515021;12pkt 12fpkt"];
1282--1850[label="0.0515021;12pkt 12fpkt"];
1282--1856[label="0.0472103;11pkt 11fpkt"];
1282--1865[label="0.2103;49pkt 49fpkt"];
1282--1873[label="0.0515021;12pkt 12fpkt"];
1282--1879[label="0.0515021;12pkt 12fpkt"];
1282--1882[label="0.0472103;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="207.54.193.195" dst_port="80" src_ip="157.149.156.140"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
687[label="63.81.115.122;d;158pkt 158fpkt", shape=diamond, color=yellow];
1504[label="63.81.115.122;d;158pkt 158fpkt", shape=hexagon, color=black];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 63.81.115.122:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
687--1504[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter dst_ip="63.81.115.122"/>
    </slice>
    <from sec="1026018396" usec="0"/>
    <to sec="1026018656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
109[label="193.89.95.32;s;2pkt 2fpkt", shape=diamond, color=yellow];
1520[label="193.89.95.32;s;2pkt 2fpkt", shape=hexagon, color=black];
2007[label="193.89.95.32;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.89.95.32:6699, 208.67.77.98:3071}[50%]&lt;BR/&gt;{193.89.95.32:6699, 208.67.77.98:3952}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3952: (25%)&lt;BR/&gt; 3071: (25%)&gt;];
}
109--1520[label="1;2pkt 2fpkt"];
109--1711[label="1;2pkt 2fpkt"];
109--2007[label="1;2pkt 2fpkt"];
1520--1711[label="1;2pkt 2fpkt"];
1520--2007[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.67.77.98" dst_port="3952" src_ip="193.89.95.32" src_port="6699"/>
      <filter dst_ip="208.67.77.98" dst_port="3071" src_ip="193.89.95.32" src_port="6699"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
125[label="154.213.136.19;d;1344pkt 1344fpkt", shape=diamond, color=yellow];
180[label="85.156.125.173;s;2pkt 2fpkt", shape=diamond, color=yellow];
201[label="193.93.190.199;s;1pkt 1fpkt", shape=diamond, color=yellow];
249[label="60.169.201.80;s;1pkt 1fpkt", shape=diamond, color=yellow];
255[label="154.213.8.125;d;46pkt 46fpkt", shape=diamond, color=yellow];
266[label="205.10.131.64;s;1pkt 1fpkt", shape=diamond, color=yellow];
286[label="36.134.163.14;s;2pkt 2fpkt", shape=diamond, color=yellow];
438[label="63.46.28.230;s;3pkt 3fpkt", shape=diamond, color=yellow];
462[label="114.67.72.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
980[label="63.117.73.240;s;1pkt 1fpkt", shape=diamond, color=yellow];
1168[label="145.242.224.186;s;2pkt 2fpkt", shape=diamond, color=yellow];
1265[label="36.134.163.14;s;2pkt 2fpkt", shape=hexagon, color=black];
1303[label="205.10.131.64;s;1pkt 1fpkt", shape=hexagon, color=black];
1367[label="63.46.28.230;s;2pkt 2fpkt", shape=hexagon, color=black];
1523[label="154.213.136.19;d;918pkt 918fpkt", shape=hexagon, color=black];
1611[label="60.169.201.80;s;1pkt 1fpkt", shape=hexagon, color=black];
1692[label="145.242.224.186;s;2pkt 2fpkt", shape=hexagon, color=black];
2118[label="205.10.131.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2619[label="105.42.81.218;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2683[label="63.117.73.240;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 154.213.136.19:6257}[92.2198%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (96.4331%)&lt;BR/&gt; 6699: (0.982486%)&lt;BR/&gt; 80: (0.213584%)&lt;BR/&gt; 1062: (0.106792%)&lt;BR/&gt; 52075: (0.0854336%)&gt;];
}
125--180[label="0.5;1pkt 1fpkt"];
125--201[label="1;1pkt 1fpkt"];
125--249[label="1;1pkt 1fpkt"];
125--266[label="1;1pkt 1fpkt"];
125--286[label="0.5;1pkt 1fpkt"];
125--438[label="0.333333;1pkt 1fpkt"];
125--462[label="1;1pkt 1fpkt"];
125--514[label="0.5;1pkt 1fpkt"];
125--730[label="0.00287356;1pkt 1fpkt"];
125--980[label="1;1pkt 1fpkt"];
125--1265[label="0.5;1pkt 1fpkt"];
125--1303[label="1;1pkt 1fpkt"];
125--1367[label="0.5;1pkt 1fpkt"];
125--1523[label="1;918pkt 918fpkt"];
125--1589[label="0.5;1pkt 1fpkt"];
125--1611[label="1;1pkt 1fpkt"];
125--1862[label="0.323661;435pkt 435fpkt"];
125--1877[label="0.00621118;1pkt 1fpkt"];
125--2118[label="1;1pkt 1fpkt"];
125--2662[label="0.5;1pkt 1fpkt"];
125--2683[label="1;1pkt 1fpkt"];
180--420[label="0.5;1pkt 1fpkt"];
180--1310[label="1;1pkt 1fpkt"];
201--1523[label="1;1pkt 1fpkt"];
249--1523[label="1;1pkt 1fpkt"];
249--1611[label="1;1pkt 1fpkt"];
255--438[label="0.333333;1pkt 1fpkt"];
255--443[label="0.5;1pkt 1fpkt"];
255--1168[label="1;2pkt 2fpkt"];
255--1367[label="0.5;1pkt 1fpkt"];
255--1406[label="0.5;1pkt 1fpkt"];
255--1692[label="1;2pkt 2fpkt"];
255--1862[label="0.326087;15pkt 15fpkt"];
255--2619[label="0.111111;1pkt 1fpkt"];
266--1303[label="1;1pkt 1fpkt"];
266--1523[label="1;1pkt 1fpkt"];
266--2118[label="1;1pkt 1fpkt"];
286--1265[label="1;2pkt 2fpkt"];
286--1523[label="0.5;1pkt 1fpkt"];
438--1367[label="1;2pkt 2fpkt"];
438--1523[label="0.333333;1pkt 1fpkt"];
438--1862[label="0.333333;1pkt 1fpkt"];
462--1523[label="1;1pkt 1fpkt"];
980--1523[label="1;1pkt 1fpkt"];
980--2683[label="1;1pkt 1fpkt"];
1168--1692[label="1;2pkt 2fpkt"];
1265--1523[label="0.5;1pkt 1fpkt"];
1303--1523[label="1;1pkt 1fpkt"];
1303--2118[label="1;1pkt 1fpkt"];
1367--1523[label="0.5;1pkt 1fpkt"];
1367--1862[label="0.5;1pkt 1fpkt"];
1523--1589[label="0.5;1pkt 1fpkt"];
1523--1611[label="1;1pkt 1fpkt"];
1523--1862[label="0.305011;280pkt 280fpkt"];
1523--1877[label="0.00621118;1pkt 1fpkt"];
1523--2118[label="1;1pkt 1fpkt"];
1523--2662[label="0.5;1pkt 1fpkt"];
1523--2683[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.136.19" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
174[label="154.95.63.171;s;778pkt 778fpkt", shape=diamond, color=yellow];
289[label="63.103.191.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
1525[label="63.103.191.11;d;1pkt 1fpkt", shape=hexagon, color=black];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.95.63.171:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
174--289[label="1;1pkt 1fpkt"];
174--1525[label="1;1pkt 1fpkt"];
289--1525[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="154.95.63.171"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
530[label="207.193.13.59;s;1pkt 1fpkt", shape=diamond, color=yellow];
1533[label="207.193.13.59;s;1pkt 1fpkt", shape=hexagon, color=black];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.193.13.59:4662, 171.70.172.233:3949}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 3949: (50%)&gt;];
}
530--1533[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.172.233" dst_port="3949" src_ip="207.193.13.59" src_port="4662"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
893[label="209.201.231.172;s;284pkt 284fpkt", shape=diamond, color=yellow];
1536[label="209.201.231.172;s;284pkt 284fpkt", shape=hexagon, color=black];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.231.172:0, *:0}[99.6479%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.6479%)&lt;BR/&gt; 2250: (0.176056%)&lt;BR/&gt; 80: (0.176056%)&gt;];
}
893--1536[label="1;284pkt 284fpkt"];
</description>
    <slice>
      <filter src_ip="209.201.231.172"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
349[label="194.194.214.88;d;1094pkt 1094fpkt", shape=diamond, color=yellow];
1538[label="194.194.214.88;d;975pkt 975fpkt", shape=hexagon, color=black];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 194.194.214.88:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
349--1538[label="1;975pkt 975fpkt"];
</description>
    <slice>
      <filter dst_ip="194.194.214.88"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
489[label="85.137.80.13;s;1pkt 1fpkt", shape=diamond, color=yellow];
1546[label="85.137.80.13;s;1pkt 1fpkt", shape=hexagon, color=black];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.137.80.13:6699, 171.70.136.106:4524}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 4524: (50%)&gt;];
}
489--1546[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.136.106" dst_port="4524" src_ip="85.137.80.13" src_port="6699"/>
    </slice>
    <from sec="1026018037" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
676[label="209.201.228.23;s;115pkt 115fpkt", shape=diamond, color=yellow];
684[label="201.41.95.207;d;90pkt 90fpkt", shape=diamond, color=yellow];
1549[label="209.201.228.23;s;115pkt 115fpkt", shape=hexagon, color=black];
1970[label="209.201.228.23;126pkt 126fpkt", shape=pentagon, color=darkviolet];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.228.23:*, 201.41.95.207:80}[70.8661%]&lt;BR/&gt;{209.201.228.23:*, 201.41.95.49:80}[29.1339%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40457: (0.44843%)&lt;BR/&gt; 40456: (0.44843%)&lt;BR/&gt; 40455: (0.44843%)&lt;BR/&gt; 40454: (0.44843%)&gt;];
}
676--684[label="1;90pkt 90fpkt"];
676--1549[label="1;115pkt 115fpkt"];
676--1815[label="0.2;23pkt 23fpkt"];
676--1850[label="0.2;23pkt 23fpkt"];
676--1879[label="0.2;23pkt 23fpkt"];
676--1970[label="0.991304;114pkt 114fpkt"];
684--1549[label="1;90pkt 90fpkt"];
684--1815[label="0.255556;23pkt 23fpkt"];
684--1850[label="0.255556;23pkt 23fpkt"];
684--1879[label="0.255556;23pkt 23fpkt"];
684--1970[label="1;90pkt 90fpkt"];
1549--1815[label="0.2;23pkt 23fpkt"];
1549--1850[label="0.2;23pkt 23fpkt"];
1549--1879[label="0.2;23pkt 23fpkt"];
1549--1970[label="0.991304;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_ip="201.41.95.207" dst_port="80" src_ip="209.201.228.23"/>
      <filter dst_ip="201.41.95.49" dst_port="80" src_ip="209.201.228.23"/>
    </slice>
    <from sec="1026018226" usec="0"/>
    <to sec="1026019219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31552,1.98986,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
87[label="154.19.143.149;s;62pkt 62fpkt", shape=diamond, color=yellow];
764[label="158.148.237.90;d;2pkt 2fpkt", shape=diamond, color=yellow];
766[label="158.153.26.128;d;3pkt 3fpkt", shape=diamond, color=yellow];
871[label="215.44.199.69;d;3pkt 3fpkt", shape=diamond, color=yellow];
1074[label="165.97.118.190;d;2pkt 2fpkt", shape=diamond, color=yellow];
1470[label="158.153.26.128;d;2pkt 2fpkt", shape=hexagon, color=black];
1518[label="154.19.143.149;s;57pkt 57fpkt", shape=hexagon, color=black];
1554[label="215.44.199.69;d;4pkt 4fpkt", shape=hexagon, color=black];
1555[label="158.148.237.90;d;2pkt 2fpkt", shape=hexagon, color=black];
1663[label="165.97.118.190;d;2pkt 2fpkt", shape=hexagon, color=black];
1764[label="158.153.26.128;d;3pkt 3fpkt", shape=polygon, color=gold];
1784[label="165.97.118.190;d;2pkt 2fpkt", shape=polygon, color=gold];
2394[label="154.19.143.149;99pkt 99fpkt", shape=pentagon, color=darkviolet];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.19.143.149:7867, *:*}[31.3131%]&lt;BR/&gt;{154.19.143.149:0, *:0}[23.2323%]&lt;BR/&gt;{154.19.143.149:7866, *:7866}[23.2323%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (32.5103%)&lt;BR/&gt; 7866: (29.2181%)&lt;BR/&gt; 7867: (14.8148%)&lt;BR/&gt; 1024: (2.6749%)&lt;BR/&gt; 53: (2.6749%)&gt;];
}
87--764[label="0.5;1pkt 1fpkt"];
87--766[label="0.333333;1pkt 1fpkt"];
87--871[label="0.333333;1pkt 1fpkt"];
87--1074[label="1;2pkt 2fpkt"];
87--1470[label="0.5;1pkt 1fpkt"];
87--1518[label="1;57pkt 57fpkt"];
87--1554[label="0.5;2pkt 2fpkt"];
87--1555[label="0.5;1pkt 1fpkt"];
87--1663[label="1;2pkt 2fpkt"];
87--1764[label="0.666667;2pkt 2fpkt"];
87--1784[label="1;2pkt 2fpkt"];
87--2394[label="1;62pkt 62fpkt"];
764--1518[label="0.5;1pkt 1fpkt"];
764--1555[label="1;2pkt 2fpkt"];
764--2394[label="1;2pkt 2fpkt"];
766--1470[label="1;2pkt 2fpkt"];
766--1518[label="0.333333;1pkt 1fpkt"];
766--1764[label="0.666667;2pkt 2fpkt"];
766--2394[label="1;3pkt 3fpkt"];
871--1518[label="0.333333;1pkt 1fpkt"];
871--1554[label="1;3pkt 3fpkt"];
871--2394[label="1;3pkt 3fpkt"];
1074--1518[label="1;2pkt 2fpkt"];
1074--1663[label="1;2pkt 2fpkt"];
1074--1784[label="1;2pkt 2fpkt"];
1074--2394[label="1;2pkt 2fpkt"];
1470--1518[label="0.5;1pkt 1fpkt"];
1470--1764[label="1;2pkt 2fpkt"];
1470--2394[label="1;2pkt 2fpkt"];
1518--1554[label="0.5;2pkt 2fpkt"];
1518--1555[label="0.5;1pkt 1fpkt"];
1518--1663[label="1;2pkt 2fpkt"];
1518--1764[label="0.666667;2pkt 2fpkt"];
1518--1784[label="1;2pkt 2fpkt"];
1518--2394[label="1;57pkt 57fpkt"];
1554--2394[label="1;4pkt 4fpkt"];
1555--2394[label="1;2pkt 2fpkt"];
1663--1784[label="1;2pkt 2fpkt"];
1663--2394[label="1;2pkt 2fpkt"];
1764--2394[label="1;3pkt 3fpkt"];
1784--2394[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="154.19.143.149" src_port="7867"/>
      <filter dst_port="7866" src_ip="154.19.143.149" src_port="7866"/>
      <filter src_ip="154.19.143.149"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
789[label="154.213.137.138;d;3pkt 3fpkt", shape=diamond, color=yellow];
857[label="160.131.80.31;s;1pkt 1fpkt", shape=diamond, color=yellow];
928[label="105.46.107.212;s;1pkt 1fpkt", shape=diamond, color=yellow];
1558[label="105.46.107.212;s;1pkt 1fpkt", shape=hexagon, color=black];
1683[label="160.131.80.31;s;1pkt 1fpkt", shape=hexagon, color=black];
2603[label="105.46.107.212;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.131.80.31:6699, 154.213.137.138:54262}[33.3333%]&lt;BR/&gt;{192.26.212.195:0, 154.213.137.138:0}[33.3333%]&lt;BR/&gt;{105.46.107.212:6699, 154.213.137.138:54264}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (43.75%)&lt;BR/&gt; 54264: (25%)&lt;BR/&gt; 54262: (18.75%)&lt;BR/&gt; 0: (12.5%)&gt;];
}
789--857[label="1;1pkt 1fpkt"];
789--928[label="1;1pkt 1fpkt"];
789--1558[label="1;1pkt 1fpkt"];
789--1683[label="1;1pkt 1fpkt"];
789--2603[label="1;1pkt 1fpkt"];
857--1683[label="1;1pkt 1fpkt"];
928--1558[label="1;1pkt 1fpkt"];
928--2603[label="1;1pkt 1fpkt"];
1558--2603[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.137.138" dst_port="54264" src_ip="105.46.107.212" src_port="6699"/>
      <filter dst_ip="154.213.137.138" src_ip="192.26.212.195"/>
      <filter dst_ip="154.213.137.138" dst_port="54262" src_ip="160.131.80.31" src_port="6699"/>
    </slice>
    <from sec="1026018015" usec="0"/>
    <to sec="1026019480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
314[label="157.149.48.96;s;272pkt 272fpkt", shape=diamond, color=yellow];
637[label="200.209.79.83;d;2pkt 2fpkt", shape=diamond, color=yellow];
1529[label="157.149.48.96;s;272pkt 272fpkt", shape=hexagon, color=black];
1561[label="200.209.79.83;d;2pkt 2fpkt", shape=hexagon, color=black];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.149.48.96:*, 205.187.144.61:80}[41.5441%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0876%)&lt;BR/&gt; 18058: (0.364964%)&lt;BR/&gt; 6970: (0.364964%)&lt;BR/&gt; 1184: (0.364964%)&lt;BR/&gt; 554: (0.364964%)&gt;];
}
314--498[label="0.965812;113pkt 113fpkt"];
314--637[label="1;2pkt 2fpkt"];
314--1529[label="1;272pkt 272fpkt"];
314--1561[label="1;2pkt 2fpkt"];
314--1798[label="0.0257353;7pkt 7fpkt"];
314--1808[label="0.202206;55pkt 55fpkt"];
314--1815[label="0.0147059;4pkt 4fpkt"];
314--1820[label="0.00735294;2pkt 2fpkt"];
314--1828[label="0.00367647;1pkt 1fpkt"];
314--1831[label="0.0404412;11pkt 11fpkt"];
314--1833[label="0.0257353;7pkt 7fpkt"];
314--1844[label="0.202206;55pkt 55fpkt"];
314--1850[label="0.0147059;4pkt 4fpkt"];
314--1856[label="0.00735294;2pkt 2fpkt"];
314--1860[label="0.00367647;1pkt 1fpkt"];
314--1863[label="0.0404412;11pkt 11fpkt"];
314--1865[label="0.0257353;7pkt 7fpkt"];
314--1873[label="0.202206;55pkt 55fpkt"];
314--1879[label="0.0147059;4pkt 4fpkt"];
314--1882[label="0.00735294;2pkt 2fpkt"];
637--1529[label="1;2pkt 2fpkt"];
637--1561[label="1;2pkt 2fpkt"];
1529--1561[label="1;2pkt 2fpkt"];
1529--1798[label="0.0257353;7pkt 7fpkt"];
1529--1808[label="0.202206;55pkt 55fpkt"];
1529--1815[label="0.0147059;4pkt 4fpkt"];
1529--1820[label="0.00735294;2pkt 2fpkt"];
1529--1828[label="0.00367647;1pkt 1fpkt"];
1529--1831[label="0.0404412;11pkt 11fpkt"];
1529--1833[label="0.0257353;7pkt 7fpkt"];
1529--1844[label="0.202206;55pkt 55fpkt"];
1529--1850[label="0.0147059;4pkt 4fpkt"];
1529--1856[label="0.00735294;2pkt 2fpkt"];
1529--1860[label="0.00367647;1pkt 1fpkt"];
1529--1863[label="0.0404412;11pkt 11fpkt"];
1529--1865[label="0.0257353;7pkt 7fpkt"];
1529--1873[label="0.202206;55pkt 55fpkt"];
1529--1879[label="0.0147059;4pkt 4fpkt"];
1529--1882[label="0.00735294;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="205.187.144.61" dst_port="80" src_ip="157.149.48.96"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
616[label="206.209.191.100;s;64pkt 64fpkt", shape=diamond, color=yellow];
1381[label="206.209.191.100;s;41pkt 41fpkt", shape=hexagon, color=black];
1567[label="133.77.71.96;d;97pkt 97fpkt", shape=hexagon, color=black];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.77.71.96:*}[60.625%]&lt;BR/&gt;{206.209.191.100:80, 208.237.114.173:*}[25.625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56853: (0.742574%)&lt;BR/&gt; 65187: (0.49505%)&lt;BR/&gt; 48112: (0.49505%)&lt;BR/&gt; 48061: (0.49505%)&gt;];
}
616--907[label="0.016129;1pkt 1fpkt"];
616--952[label="0.015625;1pkt 1fpkt"];
616--1295[label="0.015625;1pkt 1fpkt"];
616--1362[label="0.640625;41pkt 41fpkt"];
616--1381[label="1;41pkt 41fpkt"];
616--1567[label="0.015625;1pkt 1fpkt"];
616--1666[label="0.016129;1pkt 1fpkt"];
616--1773[label="0.015625;1pkt 1fpkt"];
616--1807[label="0.015625;1pkt 1fpkt"];
616--1812[label="0.203125;13pkt 13fpkt"];
616--1819[label="0.109375;7pkt 7fpkt"];
616--1843[label="0.015625;1pkt 1fpkt"];
616--1847[label="0.203125;13pkt 13fpkt"];
616--1855[label="0.109375;7pkt 7fpkt"];
616--1872[label="0.015625;1pkt 1fpkt"];
616--1876[label="0.203125;13pkt 13fpkt"];
616--1881[label="0.109375;7pkt 7fpkt"];
616--2242[label="1;64pkt 64fpkt"];
1381--1567[label="0.0243902;1pkt 1fpkt"];
1381--1773[label="0.0243902;1pkt 1fpkt"];
1381--1807[label="0.0243902;1pkt 1fpkt"];
1381--1812[label="0.0243902;1pkt 1fpkt"];
1381--1819[label="0.0243902;1pkt 1fpkt"];
1381--1843[label="0.0243902;1pkt 1fpkt"];
1381--1847[label="0.0243902;1pkt 1fpkt"];
1381--1855[label="0.0243902;1pkt 1fpkt"];
1381--1872[label="0.0243902;1pkt 1fpkt"];
1381--1876[label="0.0243902;1pkt 1fpkt"];
1381--1881[label="0.0243902;1pkt 1fpkt"];
1381--2242[label="1;41pkt 41fpkt"];
1567--1797[label="0.0721649;7pkt 7fpkt"];
1567--1812[label="0.14433;14pkt 14fpkt"];
1567--1819[label="0.0515464;5pkt 5fpkt"];
1567--1832[label="0.0721649;7pkt 7fpkt"];
1567--1847[label="0.14433;14pkt 14fpkt"];
1567--1855[label="0.0515464;5pkt 5fpkt"];
1567--1864[label="0.0721649;7pkt 7fpkt"];
1567--1876[label="0.14433;14pkt 14fpkt"];
1567--1881[label="0.0515464;5pkt 5fpkt"];
1567--1913[label="0.25;2pkt 2fpkt"];
1567--2242[label="0.0103093;1pkt 1fpkt"];
1567--2397[label="0.015625;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.77.71.96" src_port="80"/>
      <filter dst_ip="208.237.114.173" src_ip="206.209.191.100" src_port="80"/>
    </slice>
    <from sec="1026018003" usec="0"/>
    <to sec="1026018969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
524[label="209.225.16.66;d;566pkt 566fpkt", shape=diamond, color=yellow];
675[label="209.201.228.23;d;124pkt 124fpkt", shape=diamond, color=yellow];
685[label="201.41.95.207;s;90pkt 90fpkt", shape=diamond, color=yellow];
1060[label="171.70.143.243;d;54pkt 54fpkt", shape=diamond, color=yellow];
1570[label="194.44.34.237;s;337pkt 337fpkt", shape=hexagon, color=black];
1930[label="204.244.62.13;60pkt 60fpkt", shape=pentagon, color=darkviolet];
2068[label="201.41.95.49;37pkt 37fpkt", shape=pentagon, color=darkviolet];
2206[label="207.116.32.89;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2583[label="201.41.95.207;89pkt 89fpkt", shape=pentagon, color=darkviolet];
2745[label="204.244.62.13;60pkt 60fpkt", shape=invtriangle, color=brown];
3226[label="207.116.32.89;33pkt 33fpkt", shape=invhouse, color=bisque];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 209.225.16.66:*}[46.0644%]&lt;BR/&gt;{194.44.34.237:80, *:*}[29.9642%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0782%)&lt;BR/&gt; 48444: (0.337154%)&lt;BR/&gt; 47748: (0.337154%)&lt;BR/&gt; 46241: (0.337154%)&lt;BR/&gt; 48443: (0.303439%)&gt;];
}
524--607[label="0.00322581;1pkt 1fpkt"];
524--730[label="0.0258621;9pkt 9fpkt"];
524--803[label="0.0184049;3pkt 3fpkt"];
524--1148[label="0.576271;34pkt 34fpkt"];
524--1178[label="1;37pkt 37fpkt"];
524--1443[label="1;240pkt 240fpkt"];
524--1570[label="0.0326409;11pkt 11fpkt"];
524--1761[label="1;240pkt 240fpkt"];
524--1797[label="0.0565371;32pkt 32fpkt"];
524--1807[label="0.0671378;38pkt 38fpkt"];
524--1812[label="0.0795053;45pkt 45fpkt"];
524--1819[label="0.0918728;52pkt 52fpkt"];
524--1832[label="0.0565371;32pkt 32fpkt"];
524--1843[label="0.0671378;38pkt 38fpkt"];
524--1847[label="0.0795053;45pkt 45fpkt"];
524--1855[label="0.0918728;52pkt 52fpkt"];
524--1864[label="0.0565371;32pkt 32fpkt"];
524--1872[label="0.0671378;38pkt 38fpkt"];
524--1876[label="0.0795053;45pkt 45fpkt"];
524--1881[label="0.0918728;52pkt 52fpkt"];
524--1886[label="0.576271;34pkt 34fpkt"];
524--1930[label="0.116667;7pkt 7fpkt"];
524--1949[label="0.774194;24pkt 24fpkt"];
524--2020[label="0.538462;14pkt 14fpkt"];
524--2135[label="0.188679;10pkt 10fpkt"];
524--2159[label="0.941176;16pkt 16fpkt"];
524--2248[label="0.15625;5pkt 5fpkt"];
524--2308[label="0.2;8pkt 8fpkt"];
524--2410[label="0.1;1pkt 1fpkt"];
524--2525[label="1;26pkt 26fpkt"];
524--2571[label="0.0248756;5pkt 5fpkt"];
524--2673[label="0.0740741;2pkt 2fpkt"];
524--2721[label="0.576271;34pkt 34fpkt"];
524--2745[label="0.116667;7pkt 7fpkt"];
524--2793[label="0.538462;14pkt 14fpkt"];
524--2935[label="0.2;8pkt 8fpkt"];
524--3049[label="1;26pkt 26fpkt"];
524--3181[label="0.52;13pkt 13fpkt"];
524--3254[label="0.2;8pkt 8fpkt"];
524--3314[label="1;26pkt 26fpkt"];
675--685[label="1;90pkt 90fpkt"];
675--1570[label="0.0564516;7pkt 7fpkt"];
675--1812[label="0.185484;23pkt 23fpkt"];
675--1847[label="0.185484;23pkt 23fpkt"];
675--1876[label="0.185484;23pkt 23fpkt"];
675--2068[label="0.675676;25pkt 25fpkt"];
675--2583[label="1;89pkt 89fpkt"];
685--1812[label="0.255556;23pkt 23fpkt"];
685--1847[label="0.255556;23pkt 23fpkt"];
685--1876[label="0.255556;23pkt 23fpkt"];
685--2583[label="1;89pkt 89fpkt"];
1060--1570[label="0.185185;10pkt 10fpkt"];
1060--2206[label="1;33pkt 33fpkt"];
1060--3226[label="1;33pkt 33fpkt"];
1570--1615[label="0.00746269;1pkt 1fpkt"];
1570--1654[label="0.0137931;2pkt 2fpkt"];
1570--1745[label="0.025;2pkt 2fpkt"];
1570--1761[label="0.025;6pkt 6fpkt"];
1570--1767[label="0.0909091;2pkt 2fpkt"];
1570--1797[label="0.0267062;9pkt 9fpkt"];
1570--1807[label="0.0326409;11pkt 11fpkt"];
1570--1812[label="0.00593472;2pkt 2fpkt"];
1570--1819[label="0.00593472;2pkt 2fpkt"];
1570--1832[label="0.0267062;9pkt 9fpkt"];
1570--1843[label="0.0326409;11pkt 11fpkt"];
1570--1847[label="0.00593472;2pkt 2fpkt"];
1570--1855[label="0.00593472;2pkt 2fpkt"];
1570--1864[label="0.0267062;9pkt 9fpkt"];
1570--1872[label="0.0326409;11pkt 11fpkt"];
1570--1876[label="0.00593472;2pkt 2fpkt"];
1570--1881[label="0.00593472;2pkt 2fpkt"];
1930--2745[label="1;60pkt 60fpkt"];
2206--3226[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter src_ip="194.44.34.237" src_port="80"/>
      <filter dst_ip="209.225.16.66" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
376[label="219.106.53.106;s;11pkt 11fpkt", shape=diamond, color=yellow];
1571[label="219.106.53.106;s;8pkt 8fpkt", shape=hexagon, color=black];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.106.53.106:3128, 171.70.143.200:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (50%)&lt;BR/&gt; 3168: (5.26316%)&lt;BR/&gt; 3157: (5.26316%)&lt;BR/&gt; 3142: (5.26316%)&lt;BR/&gt; 3086: (5.26316%)&gt;];
}
376--1571[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.143.200" src_ip="219.106.53.106" src_port="3128"/>
    </slice>
    <from sec="1026018007" usec="0"/>
    <to sec="1026019603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
726[label="171.70.204.98;d;533pkt 533fpkt", shape=diamond, color=yellow];
955[label="208.136.220.48;s;326pkt 326fpkt", shape=diamond, color=yellow];
1574[label="208.136.220.48;s;279pkt 279fpkt", shape=hexagon, color=black];
2061[label="62.20.198.48;51pkt 51fpkt", shape=pentagon, color=darkviolet];
2063[label="208.136.220.48;326pkt 326fpkt", shape=pentagon, color=darkviolet];
2812[label="62.20.198.48;51pkt 51fpkt", shape=invtriangle, color=brown];
3190[label="62.20.198.48;51pkt 51fpkt", shape=invhouse, color=bisque];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.136.220.48:80, 171.70.204.98:*}[60.8209%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.7434%)&lt;BR/&gt; 8897: (5.25665%)&lt;BR/&gt; 3136: (0.123686%)&lt;BR/&gt; 3135: (0.123686%)&lt;BR/&gt; 3134: (0.123686%)&gt;];
}
726--955[label="1;326pkt 326fpkt"];
726--1574[label="1;279pkt 279fpkt"];
726--1797[label="0.00187617;1pkt 1fpkt"];
726--1807[label="0.00187617;1pkt 1fpkt"];
726--1812[label="0.00375235;2pkt 2fpkt"];
726--1819[label="0.00187617;1pkt 1fpkt"];
726--1832[label="0.00187617;1pkt 1fpkt"];
726--1843[label="0.00187617;1pkt 1fpkt"];
726--1847[label="0.00375235;2pkt 2fpkt"];
726--1855[label="0.00187617;1pkt 1fpkt"];
726--1864[label="0.00187617;1pkt 1fpkt"];
726--1872[label="0.00187617;1pkt 1fpkt"];
726--1876[label="0.00375235;2pkt 2fpkt"];
726--1881[label="0.00187617;1pkt 1fpkt"];
726--2061[label="0.941176;48pkt 48fpkt"];
726--2063[label="1;326pkt 326fpkt"];
726--2812[label="0.941176;48pkt 48fpkt"];
726--3190[label="0.941176;48pkt 48fpkt"];
955--1574[label="1;279pkt 279fpkt"];
955--1797[label="0.00306748;1pkt 1fpkt"];
955--1807[label="0.00306748;1pkt 1fpkt"];
955--1812[label="0.00613497;2pkt 2fpkt"];
955--1819[label="0.00306748;1pkt 1fpkt"];
955--1832[label="0.00306748;1pkt 1fpkt"];
955--1843[label="0.00306748;1pkt 1fpkt"];
955--1847[label="0.00613497;2pkt 2fpkt"];
955--1855[label="0.00306748;1pkt 1fpkt"];
955--1864[label="0.00306748;1pkt 1fpkt"];
955--1872[label="0.00306748;1pkt 1fpkt"];
955--1876[label="0.00613497;2pkt 2fpkt"];
955--1881[label="0.00306748;1pkt 1fpkt"];
955--2063[label="1;326pkt 326fpkt"];
1574--1797[label="0.00358423;1pkt 1fpkt"];
1574--1807[label="0.00358423;1pkt 1fpkt"];
1574--1812[label="0.00716846;2pkt 2fpkt"];
1574--1819[label="0.00358423;1pkt 1fpkt"];
1574--1832[label="0.00358423;1pkt 1fpkt"];
1574--1843[label="0.00358423;1pkt 1fpkt"];
1574--1847[label="0.00716846;2pkt 2fpkt"];
1574--1855[label="0.00358423;1pkt 1fpkt"];
1574--1864[label="0.00358423;1pkt 1fpkt"];
1574--1872[label="0.00358423;1pkt 1fpkt"];
1574--1876[label="0.00716846;2pkt 2fpkt"];
1574--1881[label="0.00358423;1pkt 1fpkt"];
1574--2063[label="1;279pkt 279fpkt"];
2061--2812[label="1;51pkt 51fpkt"];
2061--3190[label="1;51pkt 51fpkt"];
2812--3190[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.204.98" src_ip="208.136.220.48" src_port="80"/>
    </slice>
    <from sec="1026018009" usec="0"/>
    <to sec="1026019656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
807[label="133.19.217.171;s;32pkt 32fpkt", shape=diamond, color=yellow];
873[label="208.132.172.40;d;15pkt 15fpkt", shape=diamond, color=yellow];
1552[label="133.19.217.171;s;23pkt 23fpkt", shape=hexagon, color=black];
1577[label="208.132.172.40;d;13pkt 13fpkt", shape=hexagon, color=black];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.217.171:*, 208.132.172.40:21}[37.5%]&lt;BR/&gt;{133.19.217.171:*, 62.90.17.101:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (22.8916%)&lt;BR/&gt; 80: (17.4699%)&lt;BR/&gt; 5190: (2.40964%)&lt;BR/&gt; 3127: (2.40964%)&lt;BR/&gt; 2859: (2.40964%)&gt;];
}
807--873[label="1;15pkt 15fpkt"];
807--1552[label="1;23pkt 23fpkt"];
807--1577[label="1;13pkt 13fpkt"];
807--1815[label="0.03125;1pkt 1fpkt"];
807--1820[label="0.03125;1pkt 1fpkt"];
807--1850[label="0.03125;1pkt 1fpkt"];
807--1856[label="0.03125;1pkt 1fpkt"];
807--1879[label="0.03125;1pkt 1fpkt"];
807--1882[label="0.03125;1pkt 1fpkt"];
873--1552[label="0.466667;7pkt 7fpkt"];
873--1577[label="1;13pkt 13fpkt"];
1552--1577[label="0.538462;7pkt 7fpkt"];
1552--1815[label="0.0434783;1pkt 1fpkt"];
1552--1820[label="0.0434783;1pkt 1fpkt"];
1552--1850[label="0.0434783;1pkt 1fpkt"];
1552--1856[label="0.0434783;1pkt 1fpkt"];
1552--1879[label="0.0434783;1pkt 1fpkt"];
1552--1882[label="0.0434783;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.132.172.40" dst_port="21" src_ip="133.19.217.171"/>
      <filter dst_ip="62.90.17.101" dst_port="80" src_ip="133.19.217.171"/>
    </slice>
    <from sec="1026018415" usec="0"/>
    <to sec="1026019023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
877[label="60.129.22.87;s;2pkt 2fpkt", shape=diamond, color=yellow];
1579[label="60.129.22.87;s;2pkt 2fpkt", shape=hexagon, color=black];
2200[label="60.129.22.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.129.22.87:3592, 154.213.136.69:6699}[50%]&lt;BR/&gt;{60.129.22.87:6257, 154.213.136.69:6257}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (40%)&lt;BR/&gt; 6699: (30%)&lt;BR/&gt; 3592: (30%)&gt;];
}
877--1579[label="1;2pkt 2fpkt"];
877--2200[label="1;1pkt 1fpkt"];
1579--2200[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.136.69" dst_port="6257" src_ip="60.129.22.87" src_port="6257"/>
      <filter dst_ip="154.213.136.69" dst_port="6699" src_ip="60.129.22.87" src_port="3592"/>
    </slice>
    <from sec="1026018645" usec="0"/>
    <to sec="1026019662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
553[label="133.77.71.96;s;110pkt 110fpkt", shape=diamond, color=yellow];
878[label="194.120.173.8;d;7pkt 7fpkt", shape=diamond, color=yellow];
962[label="171.70.212.184;s;86pkt 86fpkt", shape=diamond, color=yellow];
970[label="156.23.54.208;d;122pkt 122fpkt", shape=diamond, color=yellow];
1378[label="133.77.71.96;s;110pkt 110fpkt", shape=hexagon, color=black];
1576[label="171.70.212.184;s;25pkt 25fpkt", shape=hexagon, color=black];
1580[label="194.120.173.8;d;7pkt 7fpkt", shape=hexagon, color=black];
2224[label="133.77.71.96;148pkt 148fpkt", shape=pentagon, color=darkviolet];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.77.71.96:*, *:80}[42.7273%]&lt;BR/&gt;{*:*, 156.23.54.208:80}[36.9697%]&lt;BR/&gt;{171.70.212.184:*, *:80}[26.0606%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0488%)&lt;BR/&gt; 21: (0.97561%)&lt;BR/&gt; 57293: (0.406504%)&lt;BR/&gt; 2375: (0.325203%)&lt;BR/&gt; 2374: (0.325203%)&gt;];
}
553--878[label="0.142857;1pkt 1fpkt"];
553--1378[label="1;110pkt 110fpkt"];
553--1580[label="0.142857;1pkt 1fpkt"];
553--1798[label="0.0181818;2pkt 2fpkt"];
553--1808[label="0.00909091;1pkt 1fpkt"];
553--1815[label="0.190909;21pkt 21fpkt"];
553--1820[label="0.0363636;4pkt 4fpkt"];
553--1822[label="0.0454545;5pkt 5fpkt"];
553--1833[label="0.0181818;2pkt 2fpkt"];
553--1844[label="0.00909091;1pkt 1fpkt"];
553--1850[label="0.190909;21pkt 21fpkt"];
553--1856[label="0.0363636;4pkt 4fpkt"];
553--1865[label="0.0181818;2pkt 2fpkt"];
553--1873[label="0.00909091;1pkt 1fpkt"];
553--1879[label="0.190909;21pkt 21fpkt"];
553--1882[label="0.0363636;4pkt 4fpkt"];
553--2224[label="0.990909;109pkt 109fpkt"];
878--962[label="0.857143;6pkt 6fpkt"];
878--1378[label="0.142857;1pkt 1fpkt"];
878--1576[label="0.857143;6pkt 6fpkt"];
878--1580[label="1;7pkt 7fpkt"];
878--2224[label="0.142857;1pkt 1fpkt"];
962--970[label="0.313953;27pkt 27fpkt"];
962--1576[label="1;25pkt 25fpkt"];
962--1580[label="0.857143;6pkt 6fpkt"];
962--1815[label="0.0465116;4pkt 4fpkt"];
962--1820[label="0.0116279;1pkt 1fpkt"];
962--1822[label="0.0232558;2pkt 2fpkt"];
962--1850[label="0.0465116;4pkt 4fpkt"];
962--1856[label="0.0116279;1pkt 1fpkt"];
962--1879[label="0.0465116;4pkt 4fpkt"];
962--1882[label="0.0116279;1pkt 1fpkt"];
970--1306[label="0.00819672;1pkt 1fpkt"];
970--1822[label="0.0491803;6pkt 6fpkt"];
970--1957[label="0.00819672;1pkt 1fpkt"];
970--2298[label="0.0943396;5pkt 5fpkt"];
970--2760[label="0.00819672;1pkt 1fpkt"];
970--2930[label="0.0961538;5pkt 5fpkt"];
1378--1580[label="0.142857;1pkt 1fpkt"];
1378--1798[label="0.0181818;2pkt 2fpkt"];
1378--1808[label="0.00909091;1pkt 1fpkt"];
1378--1815[label="0.190909;21pkt 21fpkt"];
1378--1820[label="0.0363636;4pkt 4fpkt"];
1378--1822[label="0.0454545;5pkt 5fpkt"];
1378--1833[label="0.0181818;2pkt 2fpkt"];
1378--1844[label="0.00909091;1pkt 1fpkt"];
1378--1850[label="0.190909;21pkt 21fpkt"];
1378--1856[label="0.0363636;4pkt 4fpkt"];
1378--1865[label="0.0181818;2pkt 2fpkt"];
1378--1873[label="0.00909091;1pkt 1fpkt"];
1378--1879[label="0.190909;21pkt 21fpkt"];
1378--1882[label="0.0363636;4pkt 4fpkt"];
1378--2224[label="0.990909;109pkt 109fpkt"];
1576--1580[label="0.857143;6pkt 6fpkt"];
1576--1815[label="0.16;4pkt 4fpkt"];
1576--1820[label="0.04;1pkt 1fpkt"];
1576--1822[label="0.08;2pkt 2fpkt"];
1576--1850[label="0.16;4pkt 4fpkt"];
1576--1856[label="0.04;1pkt 1fpkt"];
1576--1879[label="0.16;4pkt 4fpkt"];
1576--1882[label="0.04;1pkt 1fpkt"];
1580--2224[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="133.77.71.96"/>
      <filter dst_port="80" src_ip="171.70.212.184"/>
      <filter dst_ip="156.23.54.208" dst_port="80"/>
    </slice>
    <from sec="1026018003" usec="0"/>
    <to sec="1026019651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
975[label="133.19.217.230;s;2pkt 2fpkt", shape=diamond, color=yellow];
985[label="85.157.128.23;d;1pkt 1fpkt", shape=diamond, color=yellow];
1581[label="133.19.217.230;s;2pkt 2fpkt", shape=hexagon, color=black];
1583[label="85.157.128.23;d;1pkt 1fpkt", shape=hexagon, color=black];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.217.230:2928, 85.157.128.23:6699}[50%]&lt;BR/&gt;{133.19.217.230:2925, 70.128.33.180:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2928: (33.3333%)&lt;BR/&gt; 2925: (16.6667%)&gt;];
}
975--985[label="1;1pkt 1fpkt"];
975--1581[label="1;2pkt 2fpkt"];
975--1583[label="1;1pkt 1fpkt"];
985--1581[label="1;1pkt 1fpkt"];
985--1583[label="1;1pkt 1fpkt"];
1581--1583[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="70.128.33.180" dst_port="6699" src_ip="133.19.217.230" src_port="2925"/>
      <filter dst_ip="85.157.128.23" dst_port="6699" src_ip="133.19.217.230" src_port="2928"/>
    </slice>
    <from sec="1026018776" usec="0"/>
    <to sec="1026019194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
979[label="63.117.73.240;d;1pkt 1fpkt", shape=diamond, color=yellow];
1582[label="63.117.73.240;d;1pkt 1fpkt", shape=hexagon, color=black];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.136.19:6699, 63.117.73.240:52075}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52075: (50%)&lt;BR/&gt; 6699: (50%)&gt;];
}
979--1582[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="63.117.73.240" dst_port="52075" src_ip="154.213.136.19" src_port="6699"/>
    </slice>
    <from sec="1026018805" usec="0"/>
    <to sec="1026019271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
401[label="208.67.77.98;s;234pkt 234fpkt", shape=diamond, color=yellow];
402[label="208.67.81.150;s;704pkt 704fpkt", shape=diamond, color=yellow];
457[label="171.70.203.174;s;607pkt 607fpkt", shape=diamond, color=yellow];
722[label="114.203.17.185;d;2pkt 2fpkt", shape=diamond, color=yellow];
724[label="85.134.208.175;d;14pkt 14fpkt", shape=diamond, color=yellow];
786[label="200.153.141.189;d;2pkt 2fpkt", shape=diamond, color=yellow];
881[label="171.70.138.211;s;522pkt 522fpkt", shape=diamond, color=yellow];
897[label="114.67.168.60;d;9pkt 9fpkt", shape=diamond, color=yellow];
953[label="85.8.129.108;d;2pkt 2fpkt", shape=diamond, color=yellow];
1298[label="208.67.81.150;s;704pkt 704fpkt", shape=hexagon, color=black];
1569[label="85.134.208.175;d;8pkt 8fpkt", shape=hexagon, color=black];
1586[label="208.67.77.98;s;112pkt 112fpkt", shape=hexagon, color=black];
2232[label="208.67.77.98;236pkt 236fpkt", shape=pentagon, color=darkviolet];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.70.203.174:*, *:*}[29.2671%]&lt;BR/&gt;{171.70.138.211:*, *:*}[25.1688%]&lt;BR/&gt;{208.67.81.150:*, *:8888}[22.999%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (32.1451%)&lt;BR/&gt; 7777: (6.35298%)&lt;BR/&gt; 3456: (2.64575%)&lt;BR/&gt; 4444: (1.8853%)&lt;BR/&gt; 5555: (1.25158%)&gt;];
}
401--722[label="1;2pkt 2fpkt"];
401--724[label="0.0714286;1pkt 1fpkt"];
401--786[label="1;2pkt 2fpkt"];
401--897[label="0.111111;1pkt 1fpkt"];
401--953[label="0.5;1pkt 1fpkt"];
401--1146[label="0.0304569;6pkt 6fpkt"];
401--1569[label="0.125;1pkt 1fpkt"];
401--1586[label="1;112pkt 112fpkt"];
401--2232[label="0.995726;233pkt 233fpkt"];
402--724[label="0.214286;3pkt 3fpkt"];
402--897[label="0.111111;1pkt 1fpkt"];
402--1146[label="0.0304569;6pkt 6fpkt"];
402--1298[label="1;704pkt 704fpkt"];
402--1569[label="0.25;2pkt 2fpkt"];
457--724[label="0.214286;3pkt 3fpkt"];
457--897[label="0.333333;3pkt 3fpkt"];
457--1146[label="0.411168;81pkt 81fpkt"];
457--1569[label="0.25;2pkt 2fpkt"];
722--1586[label="0.5;1pkt 1fpkt"];
722--2232[label="1;2pkt 2fpkt"];
724--881[label="0.285714;4pkt 4fpkt"];
724--1298[label="0.214286;3pkt 3fpkt"];
724--1569[label="1;8pkt 8fpkt"];
724--1586[label="0.0714286;1pkt 1fpkt"];
724--2052[label="0.214286;3pkt 3fpkt"];
724--2232[label="0.0714286;1pkt 1fpkt"];
786--1586[label="0.5;1pkt 1fpkt"];
786--2232[label="1;2pkt 2fpkt"];
881--897[label="0.444444;4pkt 4fpkt"];
881--1146[label="0.395939;78pkt 78fpkt"];
881--1569[label="0.375;3pkt 3fpkt"];
897--1298[label="0.111111;1pkt 1fpkt"];
897--1586[label="0.111111;1pkt 1fpkt"];
897--2232[label="0.111111;1pkt 1fpkt"];
953--1522[label="0.5;1pkt 1fpkt"];
953--1586[label="0.5;1pkt 1fpkt"];
953--2232[label="0.5;1pkt 1fpkt"];
1298--1569[label="0.25;2pkt 2fpkt"];
1569--1586[label="0.125;1pkt 1fpkt"];
1569--2232[label="0.125;1pkt 1fpkt"];
1586--2232[label="0.991071;111pkt 111fpkt"];
</description>
    <slice>
      <filter src_ip="171.70.203.174"/>
      <filter src_ip="171.70.138.211"/>
      <filter dst_port="8888" src_ip="208.67.81.150"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
128[label="133.19.219.136;s;57pkt 57fpkt", shape=diamond, color=yellow];
129[label="85.149.184.174;d;1pkt 1fpkt", shape=diamond, color=yellow];
170[label="70.78.64.110;d;1pkt 1fpkt", shape=diamond, color=yellow];
183[label="62.2.16.180;d;1pkt 1fpkt", shape=diamond, color=yellow];
193[label="214.67.187.229;d;1pkt 1fpkt", shape=diamond, color=yellow];
413[label="85.160.120.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
432[label="85.176.158.237;d;1pkt 1fpkt", shape=diamond, color=yellow];
472[label="60.89.40.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
580[label="85.5.119.223;d;2pkt 2fpkt", shape=diamond, color=yellow];
740[label="175.142.59.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
1299[label="85.149.184.174;d;1pkt 1fpkt", shape=hexagon, color=black];
1482[label="85.176.158.237;d;1pkt 1fpkt", shape=hexagon, color=black];
1484[label="214.67.187.229;d;1pkt 1fpkt", shape=hexagon, color=black];
1560[label="70.78.64.110;d;1pkt 1fpkt", shape=hexagon, color=black];
1588[label="133.19.219.136;s;53pkt 53fpkt", shape=hexagon, color=black];
1669[label="85.160.120.12;d;1pkt 1fpkt", shape=hexagon, color=black];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.219.136:6346, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 4977: (1.6%)&lt;BR/&gt; 3052: (1.6%)&lt;BR/&gt; 2646: (1.6%)&lt;BR/&gt; 1715: (1.6%)&gt;];
}
128--129[label="1;1pkt 1fpkt"];
128--170[label="1;1pkt 1fpkt"];
128--183[label="1;1pkt 1fpkt"];
128--193[label="1;1pkt 1fpkt"];
128--413[label="1;1pkt 1fpkt"];
128--432[label="1;1pkt 1fpkt"];
128--472[label="1;1pkt 1fpkt"];
128--580[label="1;2pkt 2fpkt"];
128--740[label="1;1pkt 1fpkt"];
128--1299[label="1;1pkt 1fpkt"];
128--1482[label="1;1pkt 1fpkt"];
128--1484[label="1;1pkt 1fpkt"];
128--1560[label="1;1pkt 1fpkt"];
128--1588[label="1;53pkt 53fpkt"];
128--1669[label="1;1pkt 1fpkt"];
129--1299[label="1;1pkt 1fpkt"];
129--1588[label="1;1pkt 1fpkt"];
170--1560[label="1;1pkt 1fpkt"];
170--1588[label="1;1pkt 1fpkt"];
183--1588[label="1;1pkt 1fpkt"];
193--1484[label="1;1pkt 1fpkt"];
193--1588[label="1;1pkt 1fpkt"];
413--1588[label="1;1pkt 1fpkt"];
413--1669[label="1;1pkt 1fpkt"];
432--1482[label="1;1pkt 1fpkt"];
432--1588[label="1;1pkt 1fpkt"];
472--1588[label="1;1pkt 1fpkt"];
580--1588[label="1;2pkt 2fpkt"];
740--1588[label="1;1pkt 1fpkt"];
1299--1588[label="1;1pkt 1fpkt"];
1482--1588[label="1;1pkt 1fpkt"];
1484--1588[label="1;1pkt 1fpkt"];
1560--1588[label="1;1pkt 1fpkt"];
1588--1669[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="133.19.219.136" src_port="6346"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
280[label="208.237.114.168;d;81pkt 81fpkt", shape=diamond, color=yellow];
281[label="112.163.254.19;s;48pkt 48fpkt", shape=diamond, color=yellow];
1590[label="112.163.254.19;s;48pkt 48fpkt", shape=hexagon, color=black];
1958[label="112.163.254.19;48pkt 48fpkt", shape=pentagon, color=darkviolet];
2178[label="60.44.30.80;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{112.163.254.19:*, 208.237.114.168:80}[59.2593%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.822%)&lt;BR/&gt; 25: (2.11864%)&lt;BR/&gt; 0: (1.27119%)&lt;BR/&gt; 1155: (0.847458%)&lt;BR/&gt; 1154: (0.847458%)&gt;];
}
280--281[label="1;48pkt 48fpkt"];
280--1590[label="1;48pkt 48fpkt"];
280--1798[label="0.0617284;5pkt 5fpkt"];
280--1808[label="0.0740741;6pkt 6fpkt"];
280--1815[label="0.0864198;7pkt 7fpkt"];
280--1820[label="0.0740741;6pkt 6fpkt"];
280--1822[label="0.037037;3pkt 3fpkt"];
280--1828[label="0.0246914;2pkt 2fpkt"];
280--1833[label="0.0617284;5pkt 5fpkt"];
280--1844[label="0.0740741;6pkt 6fpkt"];
280--1850[label="0.0864198;7pkt 7fpkt"];
280--1856[label="0.0740741;6pkt 6fpkt"];
280--1860[label="0.0246914;2pkt 2fpkt"];
280--1865[label="0.0617284;5pkt 5fpkt"];
280--1873[label="0.0740741;6pkt 6fpkt"];
280--1879[label="0.0864198;7pkt 7fpkt"];
280--1882[label="0.0740741;6pkt 6fpkt"];
280--1958[label="1;48pkt 48fpkt"];
280--2178[label="1;11pkt 11fpkt"];
281--1590[label="1;48pkt 48fpkt"];
281--1798[label="0.104167;5pkt 5fpkt"];
281--1808[label="0.125;6pkt 6fpkt"];
281--1815[label="0.0625;3pkt 3fpkt"];
281--1820[label="0.104167;5pkt 5fpkt"];
281--1822[label="0.0625;3pkt 3fpkt"];
281--1833[label="0.104167;5pkt 5fpkt"];
281--1844[label="0.125;6pkt 6fpkt"];
281--1850[label="0.0625;3pkt 3fpkt"];
281--1856[label="0.104167;5pkt 5fpkt"];
281--1865[label="0.104167;5pkt 5fpkt"];
281--1873[label="0.125;6pkt 6fpkt"];
281--1879[label="0.0625;3pkt 3fpkt"];
281--1882[label="0.104167;5pkt 5fpkt"];
281--1958[label="1;48pkt 48fpkt"];
1590--1798[label="0.104167;5pkt 5fpkt"];
1590--1808[label="0.125;6pkt 6fpkt"];
1590--1815[label="0.0625;3pkt 3fpkt"];
1590--1820[label="0.104167;5pkt 5fpkt"];
1590--1822[label="0.0625;3pkt 3fpkt"];
1590--1833[label="0.104167;5pkt 5fpkt"];
1590--1844[label="0.125;6pkt 6fpkt"];
1590--1850[label="0.0625;3pkt 3fpkt"];
1590--1856[label="0.104167;5pkt 5fpkt"];
1590--1865[label="0.104167;5pkt 5fpkt"];
1590--1873[label="0.125;6pkt 6fpkt"];
1590--1879[label="0.0625;3pkt 3fpkt"];
1590--1882[label="0.104167;5pkt 5fpkt"];
1590--1958[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="208.237.114.168" dst_port="80" src_ip="112.163.254.19"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
644[label="209.201.228.160;s;111pkt 111fpkt", shape=diamond, color=yellow];
1591[label="209.201.228.160;s;109pkt 109fpkt", shape=hexagon, color=black];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.228.160:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
644--1591[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter src_ip="209.201.228.160"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
832[label="168.31.166.87;s;365pkt 365fpkt", shape=diamond, color=yellow];
1593[label="168.31.166.87;s;350pkt 350fpkt", shape=hexagon, color=black];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.31.166.87:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
832--1593[label="1;350pkt 350fpkt"];
</description>
    <slice>
      <filter src_ip="168.31.166.87"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
345[label="208.77.225.24;s;1587pkt 1587fpkt", shape=diamond, color=yellow];
538[label="173.138.195.183;s;935pkt 935fpkt", shape=diamond, color=yellow];
615[label="173.138.195.165;s;168pkt 168fpkt", shape=diamond, color=yellow];
850[label="62.144.119.135;d;33pkt 33fpkt", shape=diamond, color=yellow];
1013[label="62.144.119.139;d;29pkt 29fpkt", shape=diamond, color=yellow];
1036[label="208.237.114.168;s;72pkt 72fpkt", shape=diamond, color=yellow];
1124[label="62.144.119.134;d;28pkt 28fpkt", shape=diamond, color=yellow];
1512[label="62.144.119.135;d;28pkt 28fpkt", shape=hexagon, color=black];
1596[label="173.138.195.183;s;915pkt 915fpkt", shape=hexagon, color=black];
1604[label="173.138.195.165;s;167pkt 167fpkt", shape=hexagon, color=black];
1655[label="62.144.119.139;d;29pkt 29fpkt", shape=hexagon, color=black];
1973[label="208.77.225.24;1594pkt 1594fpkt", shape=pentagon, color=darkviolet];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.77.225.24:*, *:25}[57.3847%]&lt;BR/&gt;{173.138.195.183:*, *:25}[28.17%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.9884%)&lt;BR/&gt; 80: (0.931065%)&lt;BR/&gt; 4133: (0.0716204%)&lt;BR/&gt; 3464: (0.0716204%)&lt;BR/&gt; 3383: (0.0716204%)&gt;];
}
345--850[label="0.242424;8pkt 8fpkt"];
345--1013[label="0.310345;9pkt 9fpkt"];
345--1124[label="0.321429;9pkt 9fpkt"];
345--1512[label="0.142857;4pkt 4fpkt"];
345--1655[label="0.310345;9pkt 9fpkt"];
345--1973[label="0.99937;1586pkt 1586fpkt"];
538--596[label="1;1pkt 1fpkt"];
538--599[label="0.882353;45pkt 45fpkt"];
538--659[label="0.888889;32pkt 32fpkt"];
538--850[label="0.666667;22pkt 22fpkt"];
538--1013[label="0.62069;18pkt 18fpkt"];
538--1124[label="0.535714;15pkt 15fpkt"];
538--1448[label="1;1pkt 1fpkt"];
538--1512[label="0.785714;22pkt 22fpkt"];
538--1596[label="1;915pkt 915fpkt"];
538--1655[label="0.62069;18pkt 18fpkt"];
538--1797[label="0.00106952;1pkt 1fpkt"];
538--1807[label="0.00213904;2pkt 2fpkt"];
538--1812[label="0.00106952;1pkt 1fpkt"];
538--1819[label="0.00106952;1pkt 1fpkt"];
538--1832[label="0.00106952;1pkt 1fpkt"];
538--1843[label="0.00213904;2pkt 2fpkt"];
538--1847[label="0.00106952;1pkt 1fpkt"];
538--1855[label="0.00106952;1pkt 1fpkt"];
538--1864[label="0.00106952;1pkt 1fpkt"];
538--1872[label="0.00213904;2pkt 2fpkt"];
538--1876[label="0.00106952;1pkt 1fpkt"];
538--1881[label="0.00106952;1pkt 1fpkt"];
538--2509[label="1;1pkt 1fpkt"];
538--3038[label="1;1pkt 1fpkt"];
615--1013[label="0.0344828;1pkt 1fpkt"];
615--1124[label="0.0357143;1pkt 1fpkt"];
615--1604[label="1;167pkt 167fpkt"];
615--1655[label="0.0344828;1pkt 1fpkt"];
850--1036[label="0.030303;1pkt 1fpkt"];
850--1512[label="1;28pkt 28fpkt"];
850--1596[label="0.666667;22pkt 22fpkt"];
850--1973[label="0.242424;8pkt 8fpkt"];
850--2383[label="0.030303;1pkt 1fpkt"];
850--2966[label="0.030303;1pkt 1fpkt"];
850--3273[label="0.030303;1pkt 1fpkt"];
1013--1596[label="0.62069;18pkt 18fpkt"];
1013--1604[label="0.0344828;1pkt 1fpkt"];
1013--1655[label="1;29pkt 29fpkt"];
1013--1973[label="0.310345;9pkt 9fpkt"];
1013--2383[label="0.0344828;1pkt 1fpkt"];
1013--2966[label="0.0344828;1pkt 1fpkt"];
1013--3273[label="0.0344828;1pkt 1fpkt"];
1036--1194[label="0.8;20pkt 20fpkt"];
1036--1512[label="0.0357143;1pkt 1fpkt"];
1124--1596[label="0.535714;15pkt 15fpkt"];
1124--1604[label="0.0357143;1pkt 1fpkt"];
1124--1973[label="0.321429;9pkt 9fpkt"];
1124--2666[label="0.0357143;1pkt 1fpkt"];
1124--3113[label="0.0357143;1pkt 1fpkt"];
1124--3350[label="0.0357143;1pkt 1fpkt"];
1512--1596[label="0.785714;22pkt 22fpkt"];
1512--1973[label="0.142857;4pkt 4fpkt"];
1596--1655[label="0.62069;18pkt 18fpkt"];
1596--1797[label="0.0010929;1pkt 1fpkt"];
1596--1807[label="0.00218579;2pkt 2fpkt"];
1596--1812[label="0.0010929;1pkt 1fpkt"];
1596--1819[label="0.0010929;1pkt 1fpkt"];
1596--1832[label="0.0010929;1pkt 1fpkt"];
1596--1843[label="0.00218579;2pkt 2fpkt"];
1596--1847[label="0.0010929;1pkt 1fpkt"];
1596--1855[label="0.0010929;1pkt 1fpkt"];
1596--1864[label="0.0010929;1pkt 1fpkt"];
1596--1872[label="0.00218579;2pkt 2fpkt"];
1596--1876[label="0.0010929;1pkt 1fpkt"];
1596--1881[label="0.0010929;1pkt 1fpkt"];
1596--2509[label="1;1pkt 1fpkt"];
1596--3038[label="1;1pkt 1fpkt"];
1604--1655[label="0.0344828;1pkt 1fpkt"];
1655--1973[label="0.310345;9pkt 9fpkt"];
1655--2383[label="0.0344828;1pkt 1fpkt"];
1655--2966[label="0.0344828;1pkt 1fpkt"];
1655--3273[label="0.0344828;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="208.77.225.24"/>
      <filter dst_port="25" src_ip="173.138.195.183"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
783[label="209.181.62.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
1600[label="209.181.62.182;s;1pkt 1fpkt", shape=hexagon, color=black];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.181.62.182:3010, 133.19.153.164:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3010: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
783--1600[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.153.164" dst_port="1214" src_ip="209.181.62.182" src_port="3010"/>
    </slice>
    <from sec="1026018002" usec="0"/>
    <to sec="1026019637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
228[label="218.165.84.208;s;1pkt 1fpkt", shape=diamond, color=yellow];
1610[label="218.165.84.208;s;1pkt 1fpkt", shape=hexagon, color=black];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.165.84.208:8080, 171.70.143.200:3148}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 3148: (50%)&gt;];
}
228--1610[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.143.200" dst_port="3148" src_ip="218.165.84.208" src_port="8080"/>
    </slice>
    <from sec="1026018924" usec="0"/>
    <to sec="1026018978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.712811,1.89934,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
110[label="208.77.205.139;s;445pkt 445fpkt", shape=diamond, color=yellow];
598[label="63.210.175.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
729[label="208.77.205.214;s;140pkt 140fpkt", shape=diamond, color=yellow];
805[label="214.4.215.164;d;46pkt 46fpkt", shape=diamond, color=yellow];
1123[label="214.4.215.195;d;59pkt 59fpkt", shape=diamond, color=yellow];
1624[label="63.210.175.207;d;1pkt 1fpkt", shape=hexagon, color=black];
2298[label="154.213.136.119;53pkt 53fpkt", shape=pentagon, color=darkviolet];
2435[label="157.149.61.160;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2930[label="154.213.136.119;52pkt 52fpkt", shape=invtriangle, color=brown];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.77.205.139:*, *:80}[36.8074%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.5547%)&lt;BR/&gt; 53: (6.75182%)&lt;BR/&gt; 25: (5.23114%)&lt;BR/&gt; 113: (3.28467%)&lt;BR/&gt; 110: (3.04136%)&gt;];
}
110--516[label="1;1pkt 1fpkt"];
110--598[label="1;1pkt 1fpkt"];
110--731[label="0.00456621;1pkt 1fpkt"];
110--805[label="0.0434783;2pkt 2fpkt"];
110--949[label="1;99pkt 99fpkt"];
110--1037[label="0.0144928;1pkt 1fpkt"];
110--1040[label="0.015873;1pkt 1fpkt"];
110--1091[label="0.0175439;1pkt 1fpkt"];
110--1123[label="0.0169492;1pkt 1fpkt"];
110--1179[label="0.0208333;1pkt 1fpkt"];
110--1277[label="1;77pkt 77fpkt"];
110--1624[label="1;1pkt 1fpkt"];
110--1646[label="0.0175439;1pkt 1fpkt"];
110--1698[label="0.0212766;1pkt 1fpkt"];
110--1715[label="1;1pkt 1fpkt"];
110--1798[label="0.0426966;19pkt 19fpkt"];
110--1808[label="0.00674157;3pkt 3fpkt"];
110--1814[label="0.00224719;1pkt 1fpkt"];
110--1815[label="0.011236;5pkt 5fpkt"];
110--1820[label="0.0157303;7pkt 7fpkt"];
110--1822[label="0.0157303;7pkt 7fpkt"];
110--1827[label="0.00449438;2pkt 2fpkt"];
110--1828[label="0.0179775;8pkt 8fpkt"];
110--1831[label="0.0134831;6pkt 6fpkt"];
110--1833[label="0.0426966;19pkt 19fpkt"];
110--1844[label="0.00674157;3pkt 3fpkt"];
110--1849[label="0.00224719;1pkt 1fpkt"];
110--1850[label="0.011236;5pkt 5fpkt"];
110--1856[label="0.0157303;7pkt 7fpkt"];
110--1859[label="0.00449438;2pkt 2fpkt"];
110--1860[label="0.0179775;8pkt 8fpkt"];
110--1863[label="0.0134831;6pkt 6fpkt"];
110--1865[label="0.0426966;19pkt 19fpkt"];
110--1873[label="0.00674157;3pkt 3fpkt"];
110--1879[label="0.011236;5pkt 5fpkt"];
110--1882[label="0.0157303;7pkt 7fpkt"];
598--1277[label="1;1pkt 1fpkt"];
598--1624[label="1;1pkt 1fpkt"];
729--1123[label="0.0169492;1pkt 1fpkt"];
805--1815[label="0.0652174;3pkt 3fpkt"];
805--1820[label="0.304348;14pkt 14fpkt"];
805--1850[label="0.0652174;3pkt 3fpkt"];
805--1856[label="0.304348;14pkt 14fpkt"];
805--1879[label="0.0652174;3pkt 3fpkt"];
805--1882[label="0.304348;14pkt 14fpkt"];
805--2298[label="0.0869565;4pkt 4fpkt"];
805--2435[label="0.08;2pkt 2fpkt"];
805--2930[label="0.0869565;4pkt 4fpkt"];
1123--2046[label="0.457627;27pkt 27fpkt"];
1123--2056[label="0.357143;5pkt 5fpkt"];
2298--2930[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="208.77.205.139"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.712811,1.89934,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
863[label="208.67.149.64;s;99pkt 99fpkt", shape=diamond, color=yellow];
922[label="194.242.133.176;d;9pkt 9fpkt", shape=diamond, color=yellow];
1632[label="208.67.149.64;s;53pkt 53fpkt", shape=hexagon, color=black];
2119[label="208.67.149.64;110pkt 110fpkt", shape=pentagon, color=darkviolet];
2838[label="208.67.149.64;111pkt 111fpkt", shape=invtriangle, color=brown];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.67.149.64:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2182: (0.65445%)&lt;BR/&gt; 2180: (0.65445%)&lt;BR/&gt; 2177: (0.65445%)&lt;BR/&gt; 2174: (0.65445%)&gt;];
}
863--922[label="1;9pkt 9fpkt"];
863--1632[label="1;53pkt 53fpkt"];
863--1815[label="0.0808081;8pkt 8fpkt"];
863--1820[label="0.0909091;9pkt 9fpkt"];
863--1822[label="0.030303;3pkt 3fpkt"];
863--1828[label="0.10101;10pkt 10fpkt"];
863--1850[label="0.0808081;8pkt 8fpkt"];
863--1856[label="0.0909091;9pkt 9fpkt"];
863--1860[label="0.10101;10pkt 10fpkt"];
863--1879[label="0.0808081;8pkt 8fpkt"];
863--1882[label="0.0909091;9pkt 9fpkt"];
863--2119[label="0.989899;98pkt 98fpkt"];
863--2838[label="1;99pkt 99fpkt"];
922--1632[label="1;9pkt 9fpkt"];
922--1822[label="0.222222;2pkt 2fpkt"];
922--2119[label="1;9pkt 9fpkt"];
922--2838[label="1;9pkt 9fpkt"];
1632--1815[label="0.150943;8pkt 8fpkt"];
1632--1820[label="0.169811;9pkt 9fpkt"];
1632--1822[label="0.0566038;3pkt 3fpkt"];
1632--1850[label="0.150943;8pkt 8fpkt"];
1632--1856[label="0.169811;9pkt 9fpkt"];
1632--1879[label="0.150943;8pkt 8fpkt"];
1632--1882[label="0.169811;9pkt 9fpkt"];
1632--2119[label="0.981132;52pkt 52fpkt"];
1632--2838[label="1;53pkt 53fpkt"];
2119--2838[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="208.67.149.64"/>
    </slice>
    <from sec="1026018118" usec="0"/>
    <to sec="1026019424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
981[label="115.141.163.65;d;29pkt 29fpkt", shape=diamond, color=yellow];
1636[label="115.141.163.65;d;29pkt 29fpkt", shape=hexagon, color=black];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.149.237.47:*, 115.141.163.65:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5793: (1.72414%)&lt;BR/&gt; 5776: (1.72414%)&lt;BR/&gt; 5727: (1.72414%)&lt;BR/&gt; 5706: (1.72414%)&gt;];
}
981--1636[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="115.141.163.65" dst_port="80" src_ip="157.149.237.47"/>
    </slice>
    <from sec="1026018836" usec="0"/>
    <to sec="1026019069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
1073[label="158.210.34.202;d;85pkt 85fpkt", shape=diamond, color=yellow];
1640[label="158.210.34.202;d;61pkt 61fpkt", shape=hexagon, color=black];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.27.140:*, 158.210.34.202:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56143: (0.684932%)&lt;BR/&gt; 56140: (0.684932%)&lt;BR/&gt; 56139: (0.684932%)&lt;BR/&gt; 56138: (0.684932%)&gt;];
}
1073--1640[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_ip="158.210.34.202" dst_port="80" src_ip="154.213.27.140"/>
    </slice>
    <from sec="1026019106" usec="0"/>
    <to sec="1026019282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
1075[label="157.149.45.42;d;9pkt 9fpkt", shape=diamond, color=yellow];
1076[label="192.247.211.240;s;3pkt 3fpkt", shape=diamond, color=yellow];
1199[label="192.247.16.174;s;5pkt 5fpkt", shape=diamond, color=yellow];
1642[label="157.149.45.42;d;3pkt 3fpkt", shape=hexagon, color=black];
2477[label="192.247.16.174;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.247.16.174:*, 157.149.45.42:80}[55.5556%]&lt;BR/&gt;{192.247.211.240:*, 157.149.45.42:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9167%)&lt;BR/&gt; 49294: (6.25%)&lt;BR/&gt; 49293: (6.25%)&lt;BR/&gt; 49292: (6.25%)&lt;BR/&gt; 49291: (6.25%)&gt;];
}
1075--1076[label="1;3pkt 3fpkt"];
1075--1199[label="1;5pkt 5fpkt"];
1075--1642[label="1;3pkt 3fpkt"];
1075--1828[label="0.555556;5pkt 5fpkt"];
1075--1860[label="0.555556;5pkt 5fpkt"];
1075--2477[label="1;4pkt 4fpkt"];
1076--1642[label="1;3pkt 3fpkt"];
1199--1828[label="1;5pkt 5fpkt"];
1199--1860[label="1;5pkt 5fpkt"];
1199--2477[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.45.42" dst_port="80" src_ip="192.247.16.174"/>
      <filter dst_ip="157.149.45.42" dst_port="80" src_ip="192.247.211.240"/>
    </slice>
    <from sec="1026019159" usec="0"/>
    <to sec="1026019437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
899[label="60.89.5.28;d;1pkt 1fpkt", shape=diamond, color=yellow];
1649[label="60.89.5.28;d;1pkt 1fpkt", shape=hexagon, color=black];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.77.227.202:3833, 60.89.5.28:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3833: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
899--1649[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="60.89.5.28" dst_port="1214" src_ip="208.77.227.202" src_port="3833"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
1001[label="200.175.234.212;d;1pkt 1fpkt", shape=diamond, color=yellow];
1651[label="200.175.234.212;d;1pkt 1fpkt", shape=hexagon, color=black];
2030[label="173.138.197.40;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.197.40:*, *:53}[60%]&lt;BR/&gt;{173.138.197.40:*, *:25}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (25%)&lt;BR/&gt; 1989: (12.5%)&lt;BR/&gt; 25: (12.5%)&lt;BR/&gt; 20: (12.5%)&lt;BR/&gt; 56335: (4.16667%)&gt;];
}
1001--1002[label="1;1pkt 1fpkt"];
1001--1651[label="1;1pkt 1fpkt"];
1001--2030[label="1;1pkt 1fpkt"];
1651--2030[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="173.138.197.40"/>
      <filter dst_port="25" src_ip="173.138.197.40"/>
    </slice>
    <from sec="1026018002" usec="0"/>
    <to sec="1026019662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,053,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
384[label="154.213.136.57;d;51pkt 51fpkt", shape=diamond, color=yellow];
1048[label="60.24.62.154;s;211pkt 211fpkt", shape=diamond, color=yellow];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.24.62.154:80, 208.237.114.173:*}[72.4138%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6183%)&lt;BR/&gt; 3019: (0.381679%)&lt;BR/&gt; 1039: (0.381679%)&lt;BR/&gt; 1035: (0.381679%)&lt;BR/&gt; 54438: (0.19084%)&gt;];
}
384--1048[label="0.0196078;1pkt 1fpkt"];
384--1797[label="0.0196078;1pkt 1fpkt"];
384--1807[label="0.215686;11pkt 11fpkt"];
384--1832[label="0.0196078;1pkt 1fpkt"];
384--1843[label="0.215686;11pkt 11fpkt"];
384--1864[label="0.0196078;1pkt 1fpkt"];
384--1872[label="0.215686;11pkt 11fpkt"];
384--1997[label="0.0243902;1pkt 1fpkt"];
384--2514[label="0.0588235;1pkt 1fpkt"];
384--2779[label="0.0243902;1pkt 1fpkt"];
384--3173[label="0.0243902;1pkt 1fpkt"];
1048--1362[label="0.895735;189pkt 189fpkt"];
1048--1500[label="0.0133333;1pkt 1fpkt"];
1048--1797[label="0.0331754;7pkt 7fpkt"];
1048--1807[label="0.00473934;1pkt 1fpkt"];
1048--1812[label="0.0663507;14pkt 14fpkt"];
1048--1819[label="0.0379147;8pkt 8fpkt"];
1048--1832[label="0.0331754;7pkt 7fpkt"];
1048--1843[label="0.00473934;1pkt 1fpkt"];
1048--1847[label="0.0663507;14pkt 14fpkt"];
1048--1855[label="0.0379147;8pkt 8fpkt"];
1048--1864[label="0.0331754;7pkt 7fpkt"];
1048--1872[label="0.00473934;1pkt 1fpkt"];
1048--1876[label="0.0663507;14pkt 14fpkt"];
1048--1881[label="0.0379147;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="208.237.114.173" src_ip="60.24.62.154" src_port="80"/>
    </slice>
    <from sec="1026018014" usec="0"/>
    <to sec="1026019365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
1100[label="85.12.95.100;s;1pkt 1fpkt", shape=diamond, color=yellow];
1656[label="85.12.95.100;s;1pkt 1fpkt", shape=hexagon, color=black];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.12.95.100:4662, 171.70.172.233:4204}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 4204: (50%)&gt;];
}
1100--1656[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.172.233" dst_port="4204" src_ip="85.12.95.100" src_port="4662"/>
    </slice>
    <from sec="1026018319" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
760[label="70.84.37.209;d;2pkt 2fpkt", shape=diamond, color=yellow];
1687[label="70.84.37.209;d;2pkt 2fpkt", shape=hexagon, color=black];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.8.125:6257, 70.84.37.209:6257}[50%]&lt;BR/&gt;{154.213.8.125:6699, 70.84.37.209:3169}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (50%)&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 3169: (25%)&gt;];
}
760--1687[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="70.84.37.209" dst_port="3169" src_ip="154.213.8.125" src_port="6699"/>
      <filter dst_ip="70.84.37.209" dst_port="6257" src_ip="154.213.8.125" src_port="6257"/>
    </slice>
    <from sec="1026018534" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
143[label="216.91.232.106;s;464pkt 464fpkt", shape=diamond, color=yellow];
260[label="213.48.30.20;d;2pkt 2fpkt", shape=diamond, color=yellow];
261[label="216.91.232.104;s;256pkt 256fpkt", shape=diamond, color=yellow];
633[label="218.6.115.65;d;260pkt 260fpkt", shape=diamond, color=yellow];
635[label="209.201.230.209;s;121pkt 121fpkt", shape=diamond, color=yellow];
827[label="200.129.239.166;d;2pkt 2fpkt", shape=diamond, color=yellow];
902[label="194.162.96.165;d;198pkt 198fpkt", shape=diamond, color=yellow];
1078[label="218.6.115.14;d;6pkt 6fpkt", shape=diamond, color=yellow];
1526[label="209.201.230.209;s;64pkt 64fpkt", shape=hexagon, color=black];
1566[label="194.162.96.165;d;134pkt 134fpkt", shape=hexagon, color=black];
1694[label="218.6.115.65;d;249pkt 249fpkt", shape=hexagon, color=black];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:113}[32.5527%]&lt;BR/&gt;{*:6667, *:*}[32.3185%]&lt;BR/&gt;{*:*, 218.6.115.65:*}[30.445%]&lt;BR/&gt;{216.91.232.104:*, *:*}[29.9766%]&lt;BR/&gt;{216.91.232.106:*, 194.162.96.165:*}[23.185%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (17.7677%)&lt;BR/&gt; 6667: (17.426%)&lt;BR/&gt; 1080: (8.05809%)&lt;BR/&gt; 6668: (2.59112%)&lt;BR/&gt; 6666: (0.968109%)&gt;];
}
143--260[label="1;2pkt 2fpkt"];
143--633[label="0.346154;90pkt 90fpkt"];
143--827[label="0.5;1pkt 1fpkt"];
143--902[label="0.959596;190pkt 190fpkt"];
143--1078[label="0.333333;2pkt 2fpkt"];
143--1566[label="1;134pkt 134fpkt"];
143--1694[label="0.361446;90pkt 90fpkt"];
143--1828[label="0.00215517;1pkt 1fpkt"];
143--1860[label="0.00215517;1pkt 1fpkt"];
261--633[label="0.371094;95pkt 95fpkt"];
261--1078[label="0.333333;2pkt 2fpkt"];
261--1694[label="0.365462;91pkt 91fpkt"];
261--1798[label="0.00390625;1pkt 1fpkt"];
261--1820[label="0.00390625;1pkt 1fpkt"];
261--1831[label="0.00390625;1pkt 1fpkt"];
261--1833[label="0.00390625;1pkt 1fpkt"];
261--1856[label="0.00390625;1pkt 1fpkt"];
261--1863[label="0.00390625;1pkt 1fpkt"];
261--1865[label="0.00390625;1pkt 1fpkt"];
261--1882[label="0.00390625;1pkt 1fpkt"];
633--635[label="0.578512;70pkt 70fpkt"];
633--1526[label="0.625;40pkt 40fpkt"];
633--1694[label="1;249pkt 249fpkt"];
635--827[label="0.5;1pkt 1fpkt"];
635--1078[label="0.333333;2pkt 2fpkt"];
635--1526[label="1;64pkt 64fpkt"];
635--1694[label="0.561983;68pkt 68fpkt"];
635--1831[label="0.00826446;1pkt 1fpkt"];
635--1863[label="0.00826446;1pkt 1fpkt"];
827--1526[label="0.5;1pkt 1fpkt"];
902--1566[label="1;134pkt 134fpkt"];
1078--1526[label="0.333333;2pkt 2fpkt"];
1526--1694[label="0.625;40pkt 40fpkt"];
</description>
    <slice>
      <filter src_ip="216.91.232.104"/>
      <filter dst_ip="218.6.115.65"/>
      <filter src_port="6667"/>
      <filter dst_port="113"/>
      <filter dst_ip="194.162.96.165" src_ip="216.91.232.106"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
711[label="216.20.125.194;s;268pkt 268fpkt", shape=diamond, color=yellow];
947[label="216.20.125.228;s;335pkt 335fpkt", shape=diamond, color=yellow];
1094[label="154.198.225.129;d;82pkt 82fpkt", shape=diamond, color=yellow];
1697[label="216.20.125.194;s;253pkt 253fpkt", shape=hexagon, color=black];
2651[label="216.20.125.228;341pkt 341fpkt", shape=pentagon, color=darkviolet];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.20.125.228:53, *:*}[50.8955%]&lt;BR/&gt;{216.20.125.194:53, *:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.1009%)&lt;BR/&gt; 1863: (0.664582%)&lt;BR/&gt; 6667: (0.312744%)&lt;BR/&gt; 63096: (0.195465%)&lt;BR/&gt; 4865: (0.195465%)&gt;];
}
711--1094[label="0.0609756;5pkt 5fpkt"];
711--1665[label="0.0649351;5pkt 5fpkt"];
711--1697[label="1;253pkt 253fpkt"];
711--1810[label="0.00373134;1pkt 1fpkt"];
711--1811[label="0.0634328;17pkt 17fpkt"];
711--1814[label="0.00373134;1pkt 1fpkt"];
711--1818[label="0.0634328;17pkt 17fpkt"];
711--1827[label="0.00373134;1pkt 1fpkt"];
711--1842[label="0.0261194;7pkt 7fpkt"];
711--1846[label="0.0634328;17pkt 17fpkt"];
711--1849[label="0.00373134;1pkt 1fpkt"];
711--1854[label="0.0634328;17pkt 17fpkt"];
711--1859[label="0.00373134;1pkt 1fpkt"];
711--1871[label="0.0261194;7pkt 7fpkt"];
711--1875[label="0.0634328;17pkt 17fpkt"];
711--1883[label="0.00373134;1pkt 1fpkt"];
947--1094[label="0.195122;16pkt 16fpkt"];
947--1665[label="0.207792;16pkt 16fpkt"];
947--1811[label="0.0567164;19pkt 19fpkt"];
947--1818[label="0.0567164;19pkt 19fpkt"];
947--1842[label="0.0208955;7pkt 7fpkt"];
947--1846[label="0.0567164;19pkt 19fpkt"];
947--1854[label="0.0567164;19pkt 19fpkt"];
947--1871[label="0.0208955;7pkt 7fpkt"];
947--1875[label="0.0567164;19pkt 19fpkt"];
947--2651[label="1;335pkt 335fpkt"];
1094--1665[label="1;77pkt 77fpkt"];
1094--1697[label="0.0609756;5pkt 5fpkt"];
1094--1811[label="0.0487805;4pkt 4fpkt"];
1094--1818[label="0.146341;12pkt 12fpkt"];
1094--1842[label="0.121951;10pkt 10fpkt"];
1094--1846[label="0.0487805;4pkt 4fpkt"];
1094--1854[label="0.146341;12pkt 12fpkt"];
1094--1871[label="0.121951;10pkt 10fpkt"];
1094--1875[label="0.0487805;4pkt 4fpkt"];
1094--2426[label="0.333333;1pkt 1fpkt"];
1094--2506[label="0.047619;1pkt 1fpkt"];
1094--2643[label="0.0357143;1pkt 1fpkt"];
1094--2651[label="0.195122;16pkt 16fpkt"];
1094--2990[label="0.25;1pkt 1fpkt"];
1094--3080[label="0.0625;1pkt 1fpkt"];
1094--3282[label="0.333333;1pkt 1fpkt"];
1697--1810[label="0.00395257;1pkt 1fpkt"];
1697--1811[label="0.0671937;17pkt 17fpkt"];
1697--1814[label="0.00395257;1pkt 1fpkt"];
1697--1818[label="0.0671937;17pkt 17fpkt"];
1697--1827[label="0.00395257;1pkt 1fpkt"];
1697--1842[label="0.027668;7pkt 7fpkt"];
1697--1846[label="0.0671937;17pkt 17fpkt"];
1697--1849[label="0.00395257;1pkt 1fpkt"];
1697--1854[label="0.0671937;17pkt 17fpkt"];
1697--1859[label="0.00395257;1pkt 1fpkt"];
1697--1871[label="0.027668;7pkt 7fpkt"];
1697--1875[label="0.0671937;17pkt 17fpkt"];
1697--1883[label="0.00395257;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="216.20.125.228" src_port="53"/>
      <filter src_ip="216.20.125.194" src_port="53"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,502,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
476[label="192.44.121.61;s;20pkt 20fpkt", shape=diamond, color=yellow];
554[label="157.149.139.59;d;12pkt 12fpkt", shape=diamond, color=yellow];
2106[label="192.44.121.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2833[label="192.44.121.61;1pkt 1fpkt", shape=invtriangle, color=brown];
3199[label="192.44.121.61;1pkt 1fpkt", shape=invhouse, color=bisque];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.44.121.61:*, 157.149.139.59:22}[35%]&lt;BR/&gt;{192.44.121.61:*, 157.149.182.232:110}[25%]&lt;BR/&gt;{192.44.121.61:*, 157.149.139.59:110}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (24.2857%)&lt;BR/&gt; 110: (21.4286%)&lt;BR/&gt; 3060: (7.14286%)&lt;BR/&gt; 16001: (4.28571%)&lt;BR/&gt; 3016: (2.85714%)&gt;];
}
476--554[label="1;12pkt 12fpkt"];
476--1701[label="1;11pkt 11fpkt"];
476--2106[label="1;1pkt 1fpkt"];
476--2833[label="1;1pkt 1fpkt"];
476--3199[label="1;1pkt 1fpkt"];
554--1701[label="1;11pkt 11fpkt"];
554--2106[label="1;1pkt 1fpkt"];
554--2833[label="1;1pkt 1fpkt"];
554--3199[label="1;1pkt 1fpkt"];
2106--2833[label="1;1pkt 1fpkt"];
2106--3199[label="1;1pkt 1fpkt"];
2833--3199[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.139.59" dst_port="110" src_ip="192.44.121.61"/>
      <filter dst_ip="157.149.139.59" dst_port="22" src_ip="192.44.121.61"/>
      <filter dst_ip="157.149.182.232" dst_port="110" src_ip="192.44.121.61"/>
    </slice>
    <from sec="1026018003" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
1127[label="133.19.173.159;s;79pkt 79fpkt", shape=diamond, color=yellow];
1164[label="62.82.240.163;d;53pkt 53fpkt", shape=diamond, color=yellow];
1707[label="133.19.173.159;s;79pkt 79fpkt", shape=hexagon, color=black];
2432[label="133.19.173.159;100pkt 100fpkt", shape=pentagon, color=darkviolet];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.173.159:*, 62.82.240.163:80}[64%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3569%)&lt;BR/&gt; 2765: (0.643087%)&lt;BR/&gt; 2762: (0.643087%)&lt;BR/&gt; 2761: (0.643087%)&lt;BR/&gt; 2756: (0.643087%)&gt;];
}
1127--1164[label="1;53pkt 53fpkt"];
1127--1707[label="1;79pkt 79fpkt"];
1127--2432[label="1;79pkt 79fpkt"];
1164--1707[label="1;53pkt 53fpkt"];
1164--2432[label="1;53pkt 53fpkt"];
1707--2432[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_ip="62.82.240.163" dst_port="80" src_ip="133.19.173.159"/>
    </slice>
    <from sec="1026018552" usec="0"/>
    <to sec="1026019651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
913[label="63.20.236.201;s;55pkt 55fpkt", shape=diamond, color=yellow];
1202[label="133.19.216.146;d;129pkt 129fpkt", shape=diamond, color=yellow];
1211[label="62.82.197.89;s;104pkt 104fpkt", shape=diamond, color=yellow];
1708[label="133.19.216.146;d;57pkt 57fpkt", shape=hexagon, color=black];
1710[label="62.82.197.89;s;43pkt 43fpkt", shape=hexagon, color=black];
2564[label="63.20.236.201;59pkt 59fpkt", shape=pentagon, color=darkviolet];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.82.197.89:80, 133.19.216.146:*}[55.615%]&lt;BR/&gt;{63.20.236.201:80, *:*}[32.0856%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7763%)&lt;BR/&gt; 2599: (0.447427%)&lt;BR/&gt; 2598: (0.447427%)&lt;BR/&gt; 2597: (0.447427%)&lt;BR/&gt; 2596: (0.447427%)&gt;];
}
913--958[label="0.0727273;4pkt 4fpkt"];
913--1202[label="0.0363636;2pkt 2fpkt"];
913--1295[label="0.218182;12pkt 12fpkt"];
913--1630[label="1;35pkt 35fpkt"];
913--1708[label="0.0363636;2pkt 2fpkt"];
913--1773[label="0.218182;12pkt 12fpkt"];
913--1812[label="0.0727273;4pkt 4fpkt"];
913--1819[label="0.0545455;3pkt 3fpkt"];
913--1847[label="0.0727273;4pkt 4fpkt"];
913--1855[label="0.0545455;3pkt 3fpkt"];
913--1876[label="0.0727273;4pkt 4fpkt"];
913--1881[label="0.0545455;3pkt 3fpkt"];
913--2564[label="0.981818;54pkt 54fpkt"];
1202--1211[label="1;104pkt 104fpkt"];
1202--1708[label="1;57pkt 57fpkt"];
1202--1710[label="1;43pkt 43fpkt"];
1202--1901[label="0.0923077;6pkt 6fpkt"];
1202--2289[label="0.2;3pkt 3fpkt"];
1202--2357[label="0.12963;7pkt 7fpkt"];
1202--2564[label="0.0338983;2pkt 2fpkt"];
1211--1708[label="0.754386;43pkt 43fpkt"];
1211--1710[label="1;43pkt 43fpkt"];
1708--1710[label="1;43pkt 43fpkt"];
1708--1901[label="0.0526316;3pkt 3fpkt"];
1708--2289[label="0.2;3pkt 3fpkt"];
1708--2357[label="0.0925926;5pkt 5fpkt"];
1708--2564[label="0.0350877;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="63.20.236.201" src_port="80"/>
      <filter dst_ip="133.19.216.146" src_ip="62.82.197.89" src_port="80"/>
    </slice>
    <from sec="1026018057" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
1205[label="157.149.66.139;s;9pkt 9fpkt", shape=diamond, color=yellow];
1206[label="216.16.67.58;d;9pkt 9fpkt", shape=diamond, color=yellow];
1709[label="157.149.66.139;s;9pkt 9fpkt", shape=hexagon, color=black];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.149.66.139:80, 216.16.67.58:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38423: (5.55556%)&lt;BR/&gt; 37080: (5.55556%)&lt;BR/&gt; 37075: (5.55556%)&lt;BR/&gt; 37060: (5.55556%)&gt;];
}
1205--1206[label="1;9pkt 9fpkt"];
1205--1709[label="1;9pkt 9fpkt"];
1206--1709[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="216.16.67.58" src_ip="157.149.66.139" src_port="80"/>
    </slice>
    <from sec="1026019468" usec="0"/>
    <to sec="1026019634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
242[label="154.213.41.53;d;2pkt 2fpkt", shape=diamond, color=yellow];
243[label="192.2.176.126;s;1pkt 1fpkt", shape=diamond, color=yellow];
1712[label="154.213.41.53;d;2pkt 2fpkt", shape=hexagon, color=black];
2316[label="192.2.176.126;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.2.176.126:5001, 154.213.41.53:2127}[50%]&lt;BR/&gt;{112.138.142.255:38823, 154.213.41.53:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (33.3333%)&lt;BR/&gt; 2127: (33.3333%)&lt;BR/&gt; 38823: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
242--243[label="1;1pkt 1fpkt"];
242--1712[label="1;2pkt 2fpkt"];
242--2316[label="1;1pkt 1fpkt"];
243--1712[label="1;1pkt 1fpkt"];
243--2316[label="1;1pkt 1fpkt"];
1712--2316[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.41.53" dst_port="80" src_ip="112.138.142.255" src_port="38823"/>
      <filter dst_ip="154.213.41.53" dst_port="2127" src_ip="192.2.176.126" src_port="5001"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
516[label="61.82.245.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
949[label="62.100.49.66;d;99pkt 99fpkt", shape=diamond, color=yellow];
1277[label="208.77.205.139;s;77pkt 77fpkt", shape=hexagon, color=black];
1715[label="61.82.245.15;d;1pkt 1fpkt", shape=hexagon, color=black];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.77.205.139:*, 62.100.49.66:80}[62.6582%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.8876%)&lt;BR/&gt; 53: (4.21348%)&lt;BR/&gt; 123: (1.96629%)&lt;BR/&gt; 0: (1.68539%)&lt;BR/&gt; 6699: (1.40449%)&gt;];
}
516--1277[label="1;1pkt 1fpkt"];
516--1715[label="1;1pkt 1fpkt"];
949--1277[label="0.233766;18pkt 18fpkt"];
949--1798[label="0.040404;4pkt 4fpkt"];
949--1808[label="0.020202;2pkt 2fpkt"];
949--1815[label="0.030303;3pkt 3fpkt"];
949--1820[label="0.030303;3pkt 3fpkt"];
949--1822[label="0.030303;3pkt 3fpkt"];
949--1828[label="0.040404;4pkt 4fpkt"];
949--1831[label="0.040404;4pkt 4fpkt"];
949--1833[label="0.040404;4pkt 4fpkt"];
949--1844[label="0.020202;2pkt 2fpkt"];
949--1850[label="0.030303;3pkt 3fpkt"];
949--1856[label="0.030303;3pkt 3fpkt"];
949--1860[label="0.040404;4pkt 4fpkt"];
949--1863[label="0.040404;4pkt 4fpkt"];
949--1865[label="0.040404;4pkt 4fpkt"];
949--1873[label="0.020202;2pkt 2fpkt"];
949--1879[label="0.030303;3pkt 3fpkt"];
949--1882[label="0.030303;3pkt 3fpkt"];
1277--1624[label="1;1pkt 1fpkt"];
1277--1715[label="1;1pkt 1fpkt"];
1277--1798[label="0.246753;19pkt 19fpkt"];
1277--1808[label="0.038961;3pkt 3fpkt"];
1277--1833[label="0.246753;19pkt 19fpkt"];
1277--1844[label="0.038961;3pkt 3fpkt"];
1277--1865[label="0.246753;19pkt 19fpkt"];
1277--1873[label="0.038961;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="62.100.49.66" dst_port="80" src_ip="208.77.205.139"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
641[label="115.88.38.132;d;2pkt 2fpkt", shape=diamond, color=yellow];
642[label="171.70.228.141;s;2pkt 2fpkt", shape=diamond, color=yellow];
1716[label="171.70.228.141;s;2pkt 2fpkt", shape=hexagon, color=black];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.70.228.141:6972, 115.88.38.132:16026}[50%]&lt;BR/&gt;{171.70.228.141:54042, 115.88.38.132:554}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54042: (25%)&lt;BR/&gt; 16026: (25%)&lt;BR/&gt; 6972: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
641--642[label="1;2pkt 2fpkt"];
641--1716[label="1;2pkt 2fpkt"];
642--1716[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="115.88.38.132" dst_port="554" src_ip="171.70.228.141" src_port="54042"/>
      <filter dst_ip="115.88.38.132" dst_port="16026" src_ip="171.70.228.141" src_port="6972"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
1152[label="154.213.28.229;s;100pkt 100fpkt", shape=diamond, color=yellow];
1724[label="154.213.28.229;s;100pkt 100fpkt", shape=hexagon, color=black];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.28.229:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1152--1724[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter src_ip="154.213.28.229"/>
    </slice>
    <from sec="1026018002" usec="0"/>
    <to sec="1026019633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
1102[label="60.150.227.193;d;51pkt 51fpkt", shape=diamond, color=yellow];
1126[label="154.213.16.41;s;51pkt 51fpkt", shape=diamond, color=yellow];
1729[label="60.150.227.193;d;51pkt 51fpkt", shape=hexagon, color=black];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.16.41:*, 60.150.227.193:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1733: (0.980392%)&lt;BR/&gt; 1732: (0.980392%)&lt;BR/&gt; 1731: (0.980392%)&lt;BR/&gt; 1730: (0.980392%)&gt;];
}
1102--1126[label="1;51pkt 51fpkt"];
1102--1729[label="1;51pkt 51fpkt"];
1126--1729[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="60.150.227.193" dst_port="80" src_ip="154.213.16.41"/>
    </slice>
    <from sec="1026018844" usec="0"/>
    <to sec="1026019509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.675266,1.95668,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
1032[label="194.40.194.235;s;1pkt 1fpkt", shape=diamond, color=yellow];
1038[label="154.213.141.237;d;11pkt 11fpkt", shape=diamond, color=yellow];
1219[label="36.86.242.92;s;1pkt 1fpkt", shape=diamond, color=yellow];
1731[label="194.40.194.235;s;1pkt 1fpkt", shape=hexagon, color=black];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.68.128.29:80, 154.213.141.237:*}[27.2727%]&lt;BR/&gt;{*:6699, 154.213.141.237:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (21.4286%)&lt;BR/&gt; 80: (21.4286%)&lt;BR/&gt; 3096: (10.7143%)&lt;BR/&gt; 3050: (7.14286%)&lt;BR/&gt; 0: (7.14286%)&gt;];
}
1032--1038[label="1;1pkt 1fpkt"];
1032--1731[label="1;1pkt 1fpkt"];
1038--1219[label="1;1pkt 1fpkt"];
1038--1731[label="1;1pkt 1fpkt"];
1038--1997[label="0.272727;3pkt 3fpkt"];
1038--2364[label="0.0909091;1pkt 1fpkt"];
1038--2779[label="0.272727;3pkt 3fpkt"];
1038--3173[label="0.272727;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.141.237" src_port="6699"/>
      <filter dst_ip="154.213.141.237" src_ip="212.68.128.29" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
721[label="157.149.16.16;d;61pkt 61fpkt", shape=diamond, color=yellow];
1208[label="60.196.118.128;s;1pkt 1fpkt", shape=diamond, color=yellow];
1498[label="157.149.16.16;d;38pkt 38fpkt", shape=hexagon, color=black];
1736[label="60.196.118.128;s;1pkt 1fpkt", shape=hexagon, color=black];
2381[label="62.89.68.144;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2946[label="60.196.118.131;5pkt 5fpkt", shape=invtriangle, color=brown];
2965[label="62.89.68.144;9pkt 9fpkt", shape=invtriangle, color=brown];
3259[label="60.196.118.131;5pkt 5fpkt", shape=invhouse, color=bisque];
3271[label="62.89.68.144;10pkt 10fpkt", shape=invhouse, color=bisque];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 157.149.16.16:25}[49.2754%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (42.446%)&lt;BR/&gt; 995: (3.95683%)&lt;BR/&gt; 110: (3.23741%)&lt;BR/&gt; 57130: (1.79856%)&lt;BR/&gt; 56139: (1.79856%)&gt;];
}
721--1208[label="1;1pkt 1fpkt"];
721--1498[label="1;38pkt 38fpkt"];
721--1736[label="1;1pkt 1fpkt"];
721--2292[label="0.1;1pkt 1fpkt"];
721--2330[label="0.166667;1pkt 1fpkt"];
721--2381[label="0.666667;6pkt 6fpkt"];
721--2581[label="0.153846;2pkt 2fpkt"];
721--2925[label="0.1;1pkt 1fpkt"];
721--2946[label="0.2;1pkt 1fpkt"];
721--2965[label="0.666667;6pkt 6fpkt"];
721--3259[label="0.2;1pkt 1fpkt"];
721--3271[label="0.6;6pkt 6fpkt"];
1208--1736[label="1;1pkt 1fpkt"];
1498--2292[label="0.1;1pkt 1fpkt"];
1498--2330[label="0.166667;1pkt 1fpkt"];
1498--2381[label="0.333333;3pkt 3fpkt"];
1498--2581[label="0.0769231;1pkt 1fpkt"];
1498--2925[label="0.1;1pkt 1fpkt"];
1498--2946[label="0.2;1pkt 1fpkt"];
1498--2965[label="0.333333;3pkt 3fpkt"];
1498--3259[label="0.2;1pkt 1fpkt"];
1498--3271[label="0.3;3pkt 3fpkt"];
2381--2965[label="1;9pkt 9fpkt"];
2381--3271[label="1;9pkt 9fpkt"];
2946--3259[label="1;5pkt 5fpkt"];
2965--3271[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.16.16" dst_port="25"/>
    </slice>
    <from sec="1026018005" usec="0"/>
    <to sec="1026019595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31552,1.98986,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
942[label="154.213.199.28;s;578pkt 578fpkt", shape=diamond, color=yellow];
1563[label="154.213.199.28;s;413pkt 413fpkt", shape=hexagon, color=black];
1775[label="154.213.199.28;s;345pkt 345fpkt", shape=polygon, color=gold];
1992[label="154.213.199.28;587pkt 587fpkt", shape=pentagon, color=darkviolet];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.199.28:53, *:53}[21.6354%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (59.1264%)&lt;BR/&gt; 0: (2.70411%)&lt;BR/&gt; 1024: (1.56006%)&lt;BR/&gt; 1025: (0.832033%)&lt;BR/&gt; 32768: (0.650026%)&gt;];
}
942--1563[label="1;413pkt 413fpkt"];
942--1775[label="1;345pkt 345fpkt"];
942--1804[label="0.00346021;2pkt 2fpkt"];
942--1810[label="0.00692042;4pkt 4fpkt"];
942--1811[label="0.0259516;15pkt 15fpkt"];
942--1814[label="0.00346021;2pkt 2fpkt"];
942--1818[label="0.0484429;28pkt 28fpkt"];
942--1827[label="0.0138408;8pkt 8fpkt"];
942--1839[label="0.00346021;2pkt 2fpkt"];
942--1842[label="0.0415225;24pkt 24fpkt"];
942--1846[label="0.0259516;15pkt 15fpkt"];
942--1849[label="0.00346021;2pkt 2fpkt"];
942--1854[label="0.0484429;28pkt 28fpkt"];
942--1859[label="0.0138408;8pkt 8fpkt"];
942--1869[label="0.00346021;2pkt 2fpkt"];
942--1871[label="0.0415225;24pkt 24fpkt"];
942--1875[label="0.0259516;15pkt 15fpkt"];
942--1883[label="0.0138408;8pkt 8fpkt"];
942--1992[label="1;578pkt 578fpkt"];
1563--1775[label="1;345pkt 345fpkt"];
1563--1804[label="0.00484262;2pkt 2fpkt"];
1563--1810[label="0.00968523;4pkt 4fpkt"];
1563--1811[label="0.0363196;15pkt 15fpkt"];
1563--1814[label="0.00484262;2pkt 2fpkt"];
1563--1818[label="0.0677966;28pkt 28fpkt"];
1563--1827[label="0.00242131;1pkt 1fpkt"];
1563--1839[label="0.00484262;2pkt 2fpkt"];
1563--1842[label="0.0581114;24pkt 24fpkt"];
1563--1846[label="0.0363196;15pkt 15fpkt"];
1563--1849[label="0.00484262;2pkt 2fpkt"];
1563--1854[label="0.0677966;28pkt 28fpkt"];
1563--1859[label="0.00242131;1pkt 1fpkt"];
1563--1869[label="0.00484262;2pkt 2fpkt"];
1563--1871[label="0.0581114;24pkt 24fpkt"];
1563--1875[label="0.0363196;15pkt 15fpkt"];
1563--1883[label="0.0193705;8pkt 8fpkt"];
1563--1992[label="1;413pkt 413fpkt"];
1775--1804[label="0.0057971;2pkt 2fpkt"];
1775--1810[label="0.0115942;4pkt 4fpkt"];
1775--1811[label="0.0434783;15pkt 15fpkt"];
1775--1814[label="0.0057971;2pkt 2fpkt"];
1775--1818[label="0.0811594;28pkt 28fpkt"];
1775--1839[label="0.0057971;2pkt 2fpkt"];
1775--1842[label="0.0695652;24pkt 24fpkt"];
1775--1846[label="0.0434783;15pkt 15fpkt"];
1775--1849[label="0.0057971;2pkt 2fpkt"];
1775--1854[label="0.0811594;28pkt 28fpkt"];
1775--1869[label="0.0057971;2pkt 2fpkt"];
1775--1871[label="0.0695652;24pkt 24fpkt"];
1775--1875[label="0.0434783;15pkt 15fpkt"];
1775--1883[label="0.0231884;8pkt 8fpkt"];
1775--1992[label="1;345pkt 345fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="154.213.199.28" src_port="53"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34366,2.02542,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
323[label="171.70.138.228;s;76pkt 76fpkt", shape=diamond, color=yellow];
497[label="209.203.85.195;d;25pkt 25fpkt", shape=diamond, color=yellow];
1347[label="209.203.85.195;d;24pkt 24fpkt", shape=hexagon, color=black];
1488[label="171.70.138.228;s;47pkt 47fpkt", shape=hexagon, color=black];
1778[label="209.203.85.195;d;24pkt 24fpkt", shape=polygon, color=gold];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.70.138.228:*, 209.203.85.195:80}[32.8947%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3974: (1.27551%)&lt;BR/&gt; 3973: (1.27551%)&lt;BR/&gt; 3972: (1.27551%)&lt;BR/&gt; 3971: (1.27551%)&gt;];
}
323--497[label="1;25pkt 25fpkt"];
323--1347[label="1;24pkt 24fpkt"];
323--1488[label="1;47pkt 47fpkt"];
323--1778[label="1;24pkt 24fpkt"];
323--1798[label="0.0263158;2pkt 2fpkt"];
323--1808[label="0.276316;21pkt 21fpkt"];
323--1815[label="0.0789474;6pkt 6fpkt"];
323--1820[label="0.0263158;2pkt 2fpkt"];
323--1822[label="0.0526316;4pkt 4fpkt"];
323--1833[label="0.0263158;2pkt 2fpkt"];
323--1844[label="0.276316;21pkt 21fpkt"];
323--1850[label="0.0789474;6pkt 6fpkt"];
323--1856[label="0.0263158;2pkt 2fpkt"];
323--1865[label="0.0263158;2pkt 2fpkt"];
323--1873[label="0.276316;21pkt 21fpkt"];
323--1879[label="0.0789474;6pkt 6fpkt"];
323--1882[label="0.0263158;2pkt 2fpkt"];
497--1347[label="1;24pkt 24fpkt"];
497--1488[label="0.96;24pkt 24fpkt"];
497--1778[label="1;24pkt 24fpkt"];
497--1808[label="0.08;2pkt 2fpkt"];
497--1815[label="0.24;6pkt 6fpkt"];
497--1820[label="0.08;2pkt 2fpkt"];
497--1822[label="0.16;4pkt 4fpkt"];
497--1844[label="0.08;2pkt 2fpkt"];
497--1850[label="0.24;6pkt 6fpkt"];
497--1856[label="0.08;2pkt 2fpkt"];
497--1873[label="0.08;2pkt 2fpkt"];
497--1879[label="0.24;6pkt 6fpkt"];
497--1882[label="0.08;2pkt 2fpkt"];
1347--1488[label="1;24pkt 24fpkt"];
1347--1778[label="1;24pkt 24fpkt"];
1347--1808[label="0.0833333;2pkt 2fpkt"];
1347--1815[label="0.25;6pkt 6fpkt"];
1347--1820[label="0.0833333;2pkt 2fpkt"];
1347--1822[label="0.166667;4pkt 4fpkt"];
1347--1844[label="0.0833333;2pkt 2fpkt"];
1347--1850[label="0.25;6pkt 6fpkt"];
1347--1856[label="0.0833333;2pkt 2fpkt"];
1347--1873[label="0.0833333;2pkt 2fpkt"];
1347--1879[label="0.25;6pkt 6fpkt"];
1347--1882[label="0.0833333;2pkt 2fpkt"];
1488--1778[label="1;24pkt 24fpkt"];
1488--1798[label="0.0425532;2pkt 2fpkt"];
1488--1808[label="0.446809;21pkt 21fpkt"];
1488--1815[label="0.12766;6pkt 6fpkt"];
1488--1820[label="0.0425532;2pkt 2fpkt"];
1488--1822[label="0.0851064;4pkt 4fpkt"];
1488--1833[label="0.0425532;2pkt 2fpkt"];
1488--1844[label="0.446809;21pkt 21fpkt"];
1488--1850[label="0.12766;6pkt 6fpkt"];
1488--1856[label="0.0425532;2pkt 2fpkt"];
1488--1865[label="0.0425532;2pkt 2fpkt"];
1488--1873[label="0.446809;21pkt 21fpkt"];
1488--1879[label="0.12766;6pkt 6fpkt"];
1488--1882[label="0.0425532;2pkt 2fpkt"];
1778--1808[label="0.0833333;2pkt 2fpkt"];
1778--1815[label="0.25;6pkt 6fpkt"];
1778--1820[label="0.0833333;2pkt 2fpkt"];
1778--1822[label="0.166667;4pkt 4fpkt"];
1778--1844[label="0.0833333;2pkt 2fpkt"];
1778--1850[label="0.25;6pkt 6fpkt"];
1778--1856[label="0.0833333;2pkt 2fpkt"];
1778--1873[label="0.0833333;2pkt 2fpkt"];
1778--1879[label="0.25;6pkt 6fpkt"];
1778--1882[label="0.0833333;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.203.85.195" dst_port="80" src_ip="171.70.138.228"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31552,1.98986,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
944[label="144.108.105.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
1564[label="144.108.105.38;s;1pkt 1fpkt", shape=hexagon, color=black];
1783[label="144.108.105.38;s;1pkt 1fpkt", shape=polygon, color=gold];
2026[label="144.108.105.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.108.105.38:1214, 133.19.119.197:3665}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3665: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
944--1564[label="1;1pkt 1fpkt"];
944--1695[label="1;1pkt 1fpkt"];
944--1783[label="1;1pkt 1fpkt"];
944--2026[label="1;1pkt 1fpkt"];
1564--1695[label="1;1pkt 1fpkt"];
1564--1783[label="1;1pkt 1fpkt"];
1564--2026[label="1;1pkt 1fpkt"];
1783--2026[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.119.197" dst_port="3665" src_ip="144.108.105.38" src_port="1214"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
512[label="194.4.135.102;s;23pkt 23fpkt", shape=diamond, color=yellow];
735[label="171.70.59.98;d;158pkt 158fpkt", shape=diamond, color=yellow];
907[label="209.201.225.51;d;62pkt 62fpkt", shape=diamond, color=yellow];
1654[label="171.70.59.98;d;145pkt 145fpkt", shape=hexagon, color=black];
2086[label="207.24.165.55;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2133[label="112.238.134.68;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2242[label="206.209.191.100;105pkt 105fpkt", shape=pentagon, color=darkviolet];
2447[label="207.116.37.164;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2449[label="201.41.95.164;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2776[label="60.52.160.28;1pkt 1fpkt", shape=invtriangle, color=brown];
2826[label="207.24.165.55;18pkt 18fpkt", shape=invtriangle, color=brown];
2845[label="112.238.134.68;30pkt 30fpkt", shape=invtriangle, color=brown];
3006[label="201.41.95.164;12pkt 12fpkt", shape=invtriangle, color=brown];
3195[label="207.24.165.55;18pkt 18fpkt", shape=invhouse, color=bisque];
3205[label="112.238.134.68;30pkt 30fpkt", shape=invhouse, color=bisque];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 171.70.59.98:*}[40.1015%]&lt;BR/&gt;{206.209.191.100:80, *:*}[26.6497%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.8023%)&lt;BR/&gt; 53: (2.47093%)&lt;BR/&gt; 1026: (1.88953%)&lt;BR/&gt; 25: (0.726744%)&lt;BR/&gt; 32449: (0.363372%)&gt;];
}
512--735[label="0.0434783;1pkt 1fpkt"];
512--1654[label="0.0434783;1pkt 1fpkt"];
512--1797[label="0.26087;6pkt 6fpkt"];
512--1807[label="0.130435;3pkt 3fpkt"];
512--1832[label="0.26087;6pkt 6fpkt"];
512--1843[label="0.130435;3pkt 3fpkt"];
512--1864[label="0.26087;6pkt 6fpkt"];
512--1872[label="0.130435;3pkt 3fpkt"];
735--1022[label="0.0107527;1pkt 1fpkt"];
735--1409[label="0.027027;1pkt 1fpkt"];
735--1570[label="0.0126582;2pkt 2fpkt"];
735--1654[label="1;145pkt 145fpkt"];
735--1797[label="0.00632911;1pkt 1fpkt"];
735--1807[label="0.0316456;5pkt 5fpkt"];
735--1812[label="0.0253165;4pkt 4fpkt"];
735--1819[label="0.227848;36pkt 36fpkt"];
735--1832[label="0.00632911;1pkt 1fpkt"];
735--1843[label="0.0316456;5pkt 5fpkt"];
735--1847[label="0.0253165;4pkt 4fpkt"];
735--1855[label="0.227848;36pkt 36fpkt"];
735--1864[label="0.00632911;1pkt 1fpkt"];
735--1872[label="0.0316456;5pkt 5fpkt"];
735--1876[label="0.0253165;4pkt 4fpkt"];
735--1881[label="0.227848;36pkt 36fpkt"];
735--1975[label="0.0196078;1pkt 1fpkt"];
735--2086[label="0.0555556;1pkt 1fpkt"];
735--2133[label="0.833333;25pkt 25fpkt"];
735--2183[label="0.0078125;1pkt 1fpkt"];
735--2359[label="0.0263158;1pkt 1fpkt"];
735--2424[label="0.0666667;1pkt 1fpkt"];
735--2447[label="0.36;9pkt 9fpkt"];
735--2449[label="0.0769231;1pkt 1fpkt"];
735--2510[label="0.0126582;2pkt 2fpkt"];
735--2571[label="0.00632911;1pkt 1fpkt"];
735--2574[label="0.0714286;1pkt 1fpkt"];
735--2826[label="0.0555556;1pkt 1fpkt"];
735--2845[label="0.833333;25pkt 25fpkt"];
735--3006[label="0.0833333;1pkt 1fpkt"];
735--3039[label="0.0126582;2pkt 2fpkt"];
735--3073[label="0.0714286;1pkt 1fpkt"];
735--3195[label="0.0555556;1pkt 1fpkt"];
735--3205[label="0.833333;25pkt 25fpkt"];
735--3307[label="0.0126582;2pkt 2fpkt"];
907--1459[label="0.0967742;6pkt 6fpkt"];
907--1666[label="1;62pkt 62fpkt"];
907--1811[label="0.0645161;4pkt 4fpkt"];
907--1818[label="0.0806452;5pkt 5fpkt"];
907--1822[label="0.016129;1pkt 1fpkt"];
907--1842[label="0.0483871;3pkt 3fpkt"];
907--1846[label="0.0645161;4pkt 4fpkt"];
907--1854[label="0.0806452;5pkt 5fpkt"];
907--1871[label="0.0483871;3pkt 3fpkt"];
907--1875[label="0.0645161;4pkt 4fpkt"];
907--2086[label="0.111111;2pkt 2fpkt"];
907--2139[label="0.037037;1pkt 1fpkt"];
907--2242[label="0.016129;1pkt 1fpkt"];
907--2480[label="0.04;1pkt 1fpkt"];
907--2622[label="0.145161;9pkt 9fpkt"];
907--2776[label="1;1pkt 1fpkt"];
907--2826[label="0.111111;2pkt 2fpkt"];
907--3022[label="0.04;1pkt 1fpkt"];
907--3095[label="0.145161;9pkt 9fpkt"];
907--3195[label="0.111111;2pkt 2fpkt"];
907--3340[label="0.145161;9pkt 9fpkt"];
1654--1797[label="0.00689655;1pkt 1fpkt"];
1654--1807[label="0.0344828;5pkt 5fpkt"];
1654--1812[label="0.0275862;4pkt 4fpkt"];
1654--1819[label="0.248276;36pkt 36fpkt"];
1654--1832[label="0.00689655;1pkt 1fpkt"];
1654--1843[label="0.0344828;5pkt 5fpkt"];
1654--1847[label="0.0275862;4pkt 4fpkt"];
1654--1855[label="0.248276;36pkt 36fpkt"];
1654--1864[label="0.00689655;1pkt 1fpkt"];
1654--1872[label="0.0344828;5pkt 5fpkt"];
1654--1876[label="0.0275862;4pkt 4fpkt"];
1654--1881[label="0.248276;36pkt 36fpkt"];
1654--1975[label="0.0196078;1pkt 1fpkt"];
1654--2086[label="0.0555556;1pkt 1fpkt"];
1654--2133[label="0.833333;25pkt 25fpkt"];
1654--2183[label="0.0078125;1pkt 1fpkt"];
1654--2424[label="0.0666667;1pkt 1fpkt"];
1654--2447[label="0.36;9pkt 9fpkt"];
1654--2449[label="0.0769231;1pkt 1fpkt"];
1654--2571[label="0.00689655;1pkt 1fpkt"];
1654--2574[label="0.0714286;1pkt 1fpkt"];
1654--2826[label="0.0555556;1pkt 1fpkt"];
1654--2845[label="0.833333;25pkt 25fpkt"];
1654--3006[label="0.0833333;1pkt 1fpkt"];
1654--3073[label="0.0714286;1pkt 1fpkt"];
1654--3195[label="0.0555556;1pkt 1fpkt"];
1654--3205[label="0.833333;25pkt 25fpkt"];
2086--2826[label="1;18pkt 18fpkt"];
2086--3195[label="1;18pkt 18fpkt"];
2133--2845[label="1;30pkt 30fpkt"];
2133--3205[label="1;30pkt 30fpkt"];
2449--3006[label="1;12pkt 12fpkt"];
2826--3195[label="1;18pkt 18fpkt"];
2845--3205[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="206.209.191.100" src_port="80"/>
      <filter dst_ip="171.70.59.98" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611097,1.9521,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
1056[label="133.19.230.5;d;54pkt 54fpkt", shape=diamond, color=yellow];
2070[label="60.40.92.50;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2411[label="201.121.104.153;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2491[label="194.100.77.178;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2981[label="201.121.104.153;1pkt 1fpkt", shape=invtriangle, color=brown];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.40.92.52:*, 133.19.230.5:80}[22.2222%]&lt;BR/&gt;{60.40.92.50:*, 133.19.230.5:80}[20.3704%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 17746: (2.17391%)&lt;BR/&gt; 4910: (1.44928%)&lt;BR/&gt; 4782: (1.44928%)&lt;BR/&gt; 4749: (1.44928%)&gt;];
}
1056--1822[label="0.148148;8pkt 8fpkt"];
1056--1828[label="0.0185185;1pkt 1fpkt"];
1056--1860[label="0.0185185;1pkt 1fpkt"];
1056--2070[label="1;11pkt 11fpkt"];
1056--2411[label="1;1pkt 1fpkt"];
1056--2491[label="1;2pkt 2fpkt"];
1056--2981[label="1;1pkt 1fpkt"];
2411--2981[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.230.5" dst_port="80" src_ip="60.40.92.52"/>
      <filter dst_ip="133.19.230.5" dst_port="80" src_ip="60.40.92.50"/>
    </slice>
    <from sec="1026018609" usec="0"/>
    <to sec="1026019494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611097,1.9521,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
1129[label="171.70.203.23;s;132pkt 132fpkt", shape=diamond, color=yellow];
1969[label="171.70.203.23;161pkt 161fpkt", shape=pentagon, color=darkviolet];
2767[label="171.70.203.23;162pkt 162fpkt", shape=invtriangle, color=brown];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.70.203.23:*, *:80}[71.6049%]&lt;BR/&gt;{171.70.203.23:*, 176.77.199.141:53}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.7143%)&lt;BR/&gt; 53: (11.3187%)&lt;BR/&gt; 443: (2.96703%)&lt;BR/&gt; 4383: (0.32967%)&lt;BR/&gt; 4382: (0.32967%)&gt;];
}
1129--1827[label="0.0606061;8pkt 8fpkt"];
1129--1828[label="0.227273;30pkt 30fpkt"];
1129--1859[label="0.0606061;8pkt 8fpkt"];
1129--1860[label="0.227273;30pkt 30fpkt"];
1129--1969[label="0.992424;131pkt 131fpkt"];
1129--2767[label="1;132pkt 132fpkt"];
1969--2767[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="171.70.203.23"/>
      <filter dst_ip="176.77.199.141" dst_port="53" src_ip="171.70.203.23"/>
    </slice>
    <from sec="1026018675" usec="0"/>
    <to sec="1026019443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.104.167.0"/>
    </slice>
    <from sec="1026019643" usec="0"/>
    <to sec="1026019663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.149.59.1"/>
    </slice>
    <from sec="1026018018" usec="0"/>
    <to sec="1026019479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.82.101.3"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.29.8.7"/>
    </slice>
    <from sec="1026018016" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.712811,1.89934,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_240{
style=filled;
color=gray75;
332[label="154.198.81.234;d;254pkt 254fpkt", shape=diamond, color=yellow];
1372[label="154.198.81.234;d;221pkt 221fpkt", shape=hexagon, color=black];
1912[label="63.212.147.8;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2274[label="206.242.25.110;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2330[label="60.196.118.131;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2343[label="62.144.119.134;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2429[label="219.81.245.158;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2572[label="217.44.172.204;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2913[label="206.242.25.110;5pkt 5fpkt", shape=invtriangle, color=brown];
2993[label="219.81.245.158;8pkt 8fpkt", shape=invtriangle, color=brown];
stat240[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 154.198.81.234:25}[70.922%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (42.037%)&lt;BR/&gt; 113: (6.94444%)&lt;BR/&gt; 53: (1.11111%)&lt;BR/&gt; 4542: (0.37037%)&lt;BR/&gt; 4417: (0.37037%)&gt;];
}
332--1372[label="1;221pkt 221fpkt"];
332--1908[label="0.0238095;1pkt 1fpkt"];
332--1912[label="0.846154;11pkt 11fpkt"];
332--2274[label="0.6;3pkt 3fpkt"];
332--2330[label="0.166667;1pkt 1fpkt"];
332--2343[label="0.0909091;1pkt 1fpkt"];
332--2429[label="0.75;6pkt 6fpkt"];
332--2572[label="0.222222;2pkt 2fpkt"];
332--2733[label="0.0238095;1pkt 1fpkt"];
332--2913[label="0.6;3pkt 3fpkt"];
332--2993[label="0.75;6pkt 6fpkt"];
1372--1908[label="0.0238095;1pkt 1fpkt"];
1372--1912[label="0.538462;7pkt 7fpkt"];
1372--2274[label="0.6;3pkt 3fpkt"];
1372--2330[label="0.166667;1pkt 1fpkt"];
1372--2343[label="0.0909091;1pkt 1fpkt"];
1372--2429[label="0.75;6pkt 6fpkt"];
1372--2733[label="0.0238095;1pkt 1fpkt"];
1372--2913[label="0.6;3pkt 3fpkt"];
1372--2993[label="0.75;6pkt 6fpkt"];
2274--2913[label="1;5pkt 5fpkt"];
2330--2946[label="1;5pkt 5fpkt"];
2330--3259[label="1;5pkt 5fpkt"];
2429--2993[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="154.198.81.234" dst_port="25"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.496475,1.97206,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
1186[label="206.140.5.54;d;45pkt 45fpkt", shape=diamond, color=yellow];
1187[label="157.149.194.7;s;48pkt 48fpkt", shape=diamond, color=yellow];
1910[label="157.149.194.7;48pkt 48fpkt", shape=pentagon, color=darkviolet];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.149.194.7:*, 206.140.5.54:110}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 56630: (1.06383%)&lt;BR/&gt; 56629: (1.06383%)&lt;BR/&gt; 56628: (1.06383%)&lt;BR/&gt; 56627: (1.06383%)&gt;];
}
1186--1187[label="1;45pkt 45fpkt"];
1186--1910[label="0.977778;44pkt 44fpkt"];
1187--1910[label="0.979167;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="206.140.5.54" dst_port="110" src_ip="157.149.194.7"/>
    </slice>
    <from sec="1026018022" usec="0"/>
    <to sec="1026019660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.229.66.9"/>
    </slice>
    <from sec="1026018019" usec="0"/>
    <to sec="1026019658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.71.237.10"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.67.72.12"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.234.17"/>
    </slice>
    <from sec="1026018747" usec="0"/>
    <to sec="1026019088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.201.229.18"/>
    </slice>
    <from sec="1026018624" usec="0"/>
    <to sec="1026019510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.202.19"/>
    </slice>
    <from sec="1026018274" usec="0"/>
    <to sec="1026018834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.232.20"/>
    </slice>
    <from sec="1026018019" usec="0"/>
    <to sec="1026019646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
702[label="209.201.230.144;d;71pkt 71fpkt", shape=diamond, color=yellow];
836[label="208.77.225.135;d;61pkt 61fpkt", shape=diamond, color=yellow];
838[label="208.77.225.170;d;57pkt 57fpkt", shape=diamond, color=yellow];
993[label="209.201.228.160;d;52pkt 52fpkt", shape=diamond, color=yellow];
1510[label="208.77.225.135;d;61pkt 61fpkt", shape=hexagon, color=black];
1971[label="194.18.56.24;3pkt 3fpkt", shape=pentagon, color=darkviolet];
1984[label="205.54.87.27;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2072[label="194.136.166.51;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2129[label="60.196.117.67;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2452[label="205.187.162.164;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2702[label="204.244.62.247;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2768[label="194.18.56.24;3pkt 3fpkt", shape=invtriangle, color=brown];
3166[label="194.18.56.24;3pkt 3fpkt", shape=invhouse, color=bisque];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 209.201.230.144:0}[28.4%]&lt;BR/&gt;{*:0, 208.77.225.135:0}[24.4%]&lt;BR/&gt;{*:0, 208.77.225.170:0}[22.8%]&lt;BR/&gt;{*:0, 209.201.228.160:0}[20.8%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
702--1971[label="0.333333;1pkt 1fpkt"];
702--1984[label="0.2;1pkt 1fpkt"];
702--2008[label="0.0357143;1pkt 1fpkt"];
702--2072[label="0.333333;1pkt 1fpkt"];
702--2082[label="0.0625;1pkt 1fpkt"];
702--2111[label="0.030303;1pkt 1fpkt"];
702--2129[label="0.2;1pkt 1fpkt"];
702--2452[label="0.25;1pkt 1fpkt"];
702--2702[label="0.25;1pkt 1fpkt"];
702--2768[label="0.333333;1pkt 1fpkt"];
702--2823[label="0.0625;1pkt 1fpkt"];
702--2835[label="0.0294118;1pkt 1fpkt"];
702--3166[label="0.333333;1pkt 1fpkt"];
836--1510[label="1;61pkt 61fpkt"];
836--1971[label="0.333333;1pkt 1fpkt"];
836--2072[label="0.333333;1pkt 1fpkt"];
836--2111[label="0.030303;1pkt 1fpkt"];
836--2129[label="0.2;1pkt 1fpkt"];
836--2452[label="0.25;1pkt 1fpkt"];
836--2768[label="0.333333;1pkt 1fpkt"];
836--2835[label="0.0294118;1pkt 1fpkt"];
836--3166[label="0.333333;1pkt 1fpkt"];
838--1971[label="0.333333;1pkt 1fpkt"];
838--2072[label="0.333333;1pkt 1fpkt"];
838--2129[label="0.2;1pkt 1fpkt"];
838--2452[label="0.25;1pkt 1fpkt"];
838--2768[label="0.333333;1pkt 1fpkt"];
838--3166[label="0.333333;1pkt 1fpkt"];
993--1984[label="0.2;1pkt 1fpkt"];
993--2008[label="0.0357143;1pkt 1fpkt"];
993--2111[label="0.030303;1pkt 1fpkt"];
993--2835[label="0.0294118;1pkt 1fpkt"];
1510--1971[label="0.333333;1pkt 1fpkt"];
1510--2072[label="0.333333;1pkt 1fpkt"];
1510--2111[label="0.030303;1pkt 1fpkt"];
1510--2129[label="0.2;1pkt 1fpkt"];
1510--2452[label="0.25;1pkt 1fpkt"];
1510--2768[label="0.333333;1pkt 1fpkt"];
1510--2835[label="0.0294118;1pkt 1fpkt"];
1510--3166[label="0.333333;1pkt 1fpkt"];
1971--2768[label="1;3pkt 3fpkt"];
1971--3166[label="1;3pkt 3fpkt"];
2768--3166[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.201.230.144"/>
      <filter dst_ip="208.77.225.135"/>
      <filter dst_ip="208.77.225.170"/>
      <filter dst_ip="209.201.228.160"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
458[label="208.77.225.24;d;492pkt 492fpkt", shape=diamond, color=yellow];
835[label="208.77.225.26;d;75pkt 75fpkt", shape=diamond, color=yellow];
1010[label="208.77.205.214;d;69pkt 69fpkt", shape=diamond, color=yellow];
1595[label="208.77.225.24;d;464pkt 464fpkt", shape=hexagon, color=black];
1900[label="171.32.36.5;13pkt 13fpkt", shape=pentagon, color=darkviolet];
1920[label="62.48.21.10;12pkt 12fpkt", shape=pentagon, color=darkviolet];
1978[label="60.196.118.26;11pkt 11fpkt", shape=pentagon, color=darkviolet];
1985[label="60.196.118.27;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2000[label="62.219.99.30;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2276[label="207.210.134.110;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2347[label="60.163.43.135;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2362[label="62.144.119.139;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2538[label="205.218.202.192;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2637[label="205.218.202.224;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2647[label="152.71.117.227;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2701[label="62.168.246.246;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2739[label="62.48.21.10;12pkt 12fpkt", shape=invtriangle, color=brown];
2773[label="60.196.118.27;13pkt 13fpkt", shape=invtriangle, color=brown];
2782[label="62.219.99.30;9pkt 9fpkt", shape=invtriangle, color=brown];
2915[label="207.210.134.110;31pkt 31fpkt", shape=invtriangle, color=brown];
2951[label="60.163.43.135;8pkt 8fpkt", shape=invtriangle, color=brown];
2956[label="62.144.119.139;9pkt 9fpkt", shape=invtriangle, color=brown];
3151[label="62.48.21.10;12pkt 12fpkt", shape=invhouse, color=bisque];
3170[label="60.196.118.27;13pkt 13fpkt", shape=invhouse, color=bisque];
3265[label="62.144.119.139;9pkt 9fpkt", shape=invhouse, color=bisque];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 208.77.225.24:*}[75.463%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.5978%)&lt;BR/&gt; 113: (0.99631%)&lt;BR/&gt; 53: (0.442804%)&lt;BR/&gt; 2636: (0.221402%)&lt;BR/&gt; 4970: (0.184502%)&gt;];
}
458--1595[label="1;464pkt 464fpkt"];
458--1900[label="1;13pkt 13fpkt"];
458--1920[label="1;12pkt 12fpkt"];
458--1978[label="0.727273;8pkt 8fpkt"];
458--1985[label="0.615385;8pkt 8fpkt"];
458--2000[label="1;9pkt 9fpkt"];
458--2343[label="0.727273;8pkt 8fpkt"];
458--2347[label="0.375;3pkt 3fpkt"];
458--2362[label="0.888889;8pkt 8fpkt"];
458--2538[label="1;6pkt 6fpkt"];
458--2637[label="1;4pkt 4fpkt"];
458--2647[label="1;13pkt 13fpkt"];
458--2701[label="0.727273;8pkt 8fpkt"];
458--2739[label="1;12pkt 12fpkt"];
458--2773[label="0.615385;8pkt 8fpkt"];
458--2782[label="1;9pkt 9fpkt"];
458--2951[label="0.375;3pkt 3fpkt"];
458--2956[label="0.888889;8pkt 8fpkt"];
458--3151[label="1;12pkt 12fpkt"];
458--3170[label="0.615385;8pkt 8fpkt"];
458--3265[label="0.888889;8pkt 8fpkt"];
835--1978[label="0.181818;2pkt 2fpkt"];
835--1985[label="0.384615;5pkt 5fpkt"];
835--2347[label="0.625;5pkt 5fpkt"];
835--2507[label="0.5;1pkt 1fpkt"];
835--2773[label="0.384615;5pkt 5fpkt"];
835--2951[label="0.625;5pkt 5fpkt"];
835--3037[label="0.5;1pkt 1fpkt"];
835--3170[label="0.384615;5pkt 5fpkt"];
1010--1978[label="0.0909091;1pkt 1fpkt"];
1010--2276[label="0.733333;22pkt 22fpkt"];
1010--2915[label="0.741935;23pkt 23fpkt"];
1595--1900[label="1;13pkt 13fpkt"];
1595--1920[label="1;12pkt 12fpkt"];
1595--1978[label="0.545455;6pkt 6fpkt"];
1595--1985[label="0.461538;6pkt 6fpkt"];
1595--2000[label="1;9pkt 9fpkt"];
1595--2343[label="0.727273;8pkt 8fpkt"];
1595--2347[label="0.375;3pkt 3fpkt"];
1595--2362[label="0.888889;8pkt 8fpkt"];
1595--2538[label="1;6pkt 6fpkt"];
1595--2637[label="0.75;3pkt 3fpkt"];
1595--2647[label="1;13pkt 13fpkt"];
1595--2701[label="0.727273;8pkt 8fpkt"];
1595--2739[label="1;12pkt 12fpkt"];
1595--2773[label="0.461538;6pkt 6fpkt"];
1595--2782[label="1;9pkt 9fpkt"];
1595--2951[label="0.375;3pkt 3fpkt"];
1595--2956[label="0.888889;8pkt 8fpkt"];
1595--3151[label="1;12pkt 12fpkt"];
1595--3170[label="0.461538;6pkt 6fpkt"];
1595--3265[label="0.888889;8pkt 8fpkt"];
1920--2739[label="1;12pkt 12fpkt"];
1920--3151[label="1;12pkt 12fpkt"];
1985--2773[label="1;13pkt 13fpkt"];
1985--3170[label="1;13pkt 13fpkt"];
2000--2782[label="1;9pkt 9fpkt"];
2276--2915[label="1;30pkt 30fpkt"];
2347--2951[label="1;8pkt 8fpkt"];
2362--2956[label="1;9pkt 9fpkt"];
2362--3265[label="1;9pkt 9fpkt"];
2739--3151[label="1;12pkt 12fpkt"];
2773--3170[label="1;13pkt 13fpkt"];
2956--3265[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="208.77.225.24" src_port="25"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.496475,1.97206,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
895[label="208.77.225.26;s;142pkt 142fpkt", shape=diamond, color=yellow];
1981[label="208.77.225.26;142pkt 142fpkt", shape=pentagon, color=darkviolet];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.77.225.26:*, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2890: (0.352113%)&lt;BR/&gt; 2888: (0.352113%)&lt;BR/&gt; 2886: (0.352113%)&lt;BR/&gt; 2884: (0.352113%)&gt;];
}
895--1981[label="0.992958;141pkt 141fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="208.77.225.26"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.52.160.28"/>
    </slice>
    <from sec="1026018430" usec="0"/>
    <to sec="1026018495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.10.18.31"/>
    </slice>
    <from sec="1026018039" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.131.80.31"/>
    </slice>
    <from sec="1026018185" usec="0"/>
    <to sec="1026019300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.219.32"/>
    </slice>
    <from sec="1026018021" usec="0"/>
    <to sec="1026019658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
2012[label="209.201.231.32;100pkt 100fpkt", shape=pentagon, color=darkviolet];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.231.32:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="209.201.231.32"/>
    </slice>
    <from sec="1026018008" usec="0"/>
    <to sec="1026019662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.246.195.33"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026018989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.28.51.34"/>
    </slice>
    <from sec="1026018029" usec="0"/>
    <to sec="1026019649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.1.40.35"/>
    </slice>
    <from sec="1026018007" usec="0"/>
    <to sec="1026019660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.235.174.35"/>
    </slice>
    <from sec="1026018013" usec="0"/>
    <to sec="1026019655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.834851,1.91673,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
335[label="209.201.228.209;d;3pkt 3fpkt", shape=diamond, color=yellow];
451[label="209.13.44.156;s;1pkt 1fpkt", shape=diamond, color=yellow];
1050[label="213.48.5.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
1373[label="209.201.228.209;d;3pkt 3fpkt", shape=hexagon, color=black];
2024[label="213.48.5.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3279[label="209.13.44.156;1pkt 1fpkt", shape=invhouse, color=bisque];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.48.5.37:0, 209.201.228.209:0}[33.3333%]&lt;BR/&gt;{194.137.236.135:0, 209.201.228.209:0}[33.3333%]&lt;BR/&gt;{209.13.44.156:0, 209.201.228.209:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
335--451[label="1;1pkt 1fpkt"];
335--1050[label="1;1pkt 1fpkt"];
335--1373[label="1;3pkt 3fpkt"];
335--2024[label="1;1pkt 1fpkt"];
335--3279[label="1;1pkt 1fpkt"];
451--1373[label="1;1pkt 1fpkt"];
451--3279[label="1;1pkt 1fpkt"];
1050--1373[label="1;1pkt 1fpkt"];
1050--2024[label="1;1pkt 1fpkt"];
1373--2024[label="1;1pkt 1fpkt"];
1373--3279[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.201.228.209" src_ip="209.13.44.156"/>
      <filter dst_ip="209.201.228.209" src_ip="194.137.236.135"/>
      <filter dst_ip="209.201.228.209" src_ip="213.48.5.37"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.246.133.38"/>
    </slice>
    <from sec="1026018319" usec="0"/>
    <to sec="1026018435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
854[label="157.149.16.43;s;61pkt 61fpkt", shape=diamond, color=yellow];
2037[label="157.149.16.43;63pkt 63fpkt", shape=pentagon, color=darkviolet];
2801[label="157.149.16.43;63pkt 63fpkt", shape=invtriangle, color=brown];
3185[label="157.149.16.43;62pkt 62fpkt", shape=invhouse, color=bisque];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.149.16.43:80, 70.148.60.82:*}[50.7937%]&lt;BR/&gt;{157.149.16.43:80, 62.124.76.147:*}[41.2698%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64759: (0.803213%)&lt;BR/&gt; 34753: (0.803213%)&lt;BR/&gt; 3270: (0.803213%)&lt;BR/&gt; 3269: (0.803213%)&gt;];
}
854--2037[label="1;61pkt 61fpkt"];
854--2801[label="1;61pkt 61fpkt"];
854--3185[label="0.983607;60pkt 60fpkt"];
2037--2801[label="1;63pkt 63fpkt"];
2037--3185[label="1;62pkt 62fpkt"];
2801--3185[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="70.148.60.82" src_ip="157.149.16.43" src_port="80"/>
      <filter dst_ip="62.124.76.147" src_ip="157.149.16.43" src_port="80"/>
    </slice>
    <from sec="1026018030" usec="0"/>
    <to sec="1026019659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.23.80.46"/>
    </slice>
    <from sec="1026018019" usec="0"/>
    <to sec="1026019640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.232.47"/>
    </slice>
    <from sec="1026018009" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.46.154.49"/>
    </slice>
    <from sec="1026018016" usec="0"/>
    <to sec="1026019590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
500[label="133.19.203.51;s;64pkt 64fpkt", shape=diamond, color=yellow];
2073[label="133.19.203.51;63pkt 63fpkt", shape=pentagon, color=darkviolet];
2816[label="133.19.203.51;64pkt 64fpkt", shape=invtriangle, color=brown];
3191[label="133.19.203.51;63pkt 63fpkt", shape=invhouse, color=bisque];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.203.51:*, 204.3.150.106:80}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3124: (0.787402%)&lt;BR/&gt; 3123: (0.787402%)&lt;BR/&gt; 3122: (0.787402%)&lt;BR/&gt; 3121: (0.787402%)&gt;];
}
500--2073[label="1;63pkt 63fpkt"];
500--2816[label="1;64pkt 64fpkt"];
500--3191[label="1;63pkt 63fpkt"];
2073--2816[label="1;63pkt 63fpkt"];
2073--3191[label="1;63pkt 63fpkt"];
2816--3191[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_ip="204.3.150.106" dst_port="80" src_ip="133.19.203.51"/>
    </slice>
    <from sec="1026018142" usec="0"/>
    <to sec="1026018247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.19.218.52"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.496475,1.97206,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
175[label="208.129.167.55;s;59pkt 59fpkt", shape=diamond, color=yellow];
290[label="208.67.91.0;d;87pkt 87fpkt", shape=diamond, color=yellow];
1201[label="208.129.167.45;s;22pkt 22fpkt", shape=diamond, color=yellow];
2048[label="208.129.167.45;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2087[label="208.129.167.55;59pkt 59fpkt", shape=pentagon, color=darkviolet];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.129.167.55:32262, 208.67.91.0:*}[61.4583%]&lt;BR/&gt;{208.129.167.45:31353, 208.67.91.0:*}[26.0417%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32262: (35.119%)&lt;BR/&gt; 31353: (12.5%)&lt;BR/&gt; 80: (1.98413%)&lt;BR/&gt; 2116: (0.595238%)&lt;BR/&gt; 2115: (0.595238%)&gt;];
}
175--290[label="1;59pkt 59fpkt"];
175--2087[label="1;59pkt 59fpkt"];
290--1201[label="0.727273;16pkt 16fpkt"];
290--1980[label="0.0114943;1pkt 1fpkt"];
290--2048[label="0.64;16pkt 16fpkt"];
290--2087[label="1;59pkt 59fpkt"];
1201--2048[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="208.67.91.0" src_ip="208.129.167.55" src_port="32262"/>
      <filter dst_ip="208.67.91.0" src_ip="208.129.167.45" src_port="31353"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.148.127.57"/>
    </slice>
    <from sec="1026018019" usec="0"/>
    <to sec="1026019658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="105.45.163.57"/>
    </slice>
    <from sec="1026018005" usec="0"/>
    <to sec="1026019654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.148.127.58"/>
    </slice>
    <from sec="1026018019" usec="0"/>
    <to sec="1026019658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="115.88.37.59"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.14.56.63"/>
    </slice>
    <from sec="1026018175" usec="0"/>
    <to sec="1026019636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.29.173.63"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.496475,1.97206,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
958[label="133.19.246.72;d;87pkt 87fpkt", shape=diamond, color=yellow];
1950[label="62.228.106.19;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2120[label="62.145.159.64;27pkt 27fpkt", shape=pentagon, color=darkviolet];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.145.159.64:80, 133.19.246.72:*}[31.0345%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1503: (0.769231%)&lt;BR/&gt; 1502: (0.769231%)&lt;BR/&gt; 1501: (0.769231%)&lt;BR/&gt; 1500: (0.769231%)&gt;];
}
958--1812[label="0.0114943;1pkt 1fpkt"];
958--1819[label="0.0344828;3pkt 3fpkt"];
958--1847[label="0.0114943;1pkt 1fpkt"];
958--1855[label="0.0344828;3pkt 3fpkt"];
958--1876[label="0.0114943;1pkt 1fpkt"];
958--1881[label="0.0344828;3pkt 3fpkt"];
958--1950[label="1;16pkt 16fpkt"];
958--2120[label="1;27pkt 27fpkt"];
958--2219[label="0.111111;3pkt 3fpkt"];
958--2564[label="0.0677966;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.246.72" src_ip="62.145.159.64" src_port="80"/>
    </slice>
    <from sec="1026018314" usec="0"/>
    <to sec="1026019420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.2.176.67"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.148.127.68"/>
    </slice>
    <from sec="1026018019" usec="0"/>
    <to sec="1026019658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.203.73.69"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.148.127.70"/>
    </slice>
    <from sec="1026018019" usec="0"/>
    <to sec="1026019658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.149.135.70"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.148.127.71"/>
    </slice>
    <from sec="1026018019" usec="0"/>
    <to sec="1026019658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.19.28.74"/>
    </slice>
    <from sec="1026018028" usec="0"/>
    <to sec="1026019653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.213.161.74"/>
    </slice>
    <from sec="1026018958" usec="0"/>
    <to sec="1026018968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.163.105.75"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.1.217.79"/>
    </slice>
    <from sec="1026018334" usec="0"/>
    <to sec="1026018379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.144.119.80"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.169.201.80"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.160.151.81"/>
    </slice>
    <from sec="1026018835" usec="0"/>
    <to sec="1026018849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.566855,2.00793,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
972[label="205.178.177.182;d;26pkt 26fpkt", shape=diamond, color=yellow];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.67.72.86:*, 205.178.177.182:80}[96.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0769%)&lt;BR/&gt; 32768: (1.92308%)&lt;BR/&gt; 1513: (1.92308%)&lt;BR/&gt; 1511: (1.92308%)&lt;BR/&gt; 1510: (1.92308%)&gt;];
}
972--2198[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="205.178.177.182" dst_port="80" src_ip="208.67.72.86"/>
    </slice>
    <from sec="1026018741" usec="0"/>
    <to sec="1026019140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.177.27.87"/>
    </slice>
    <from sec="1026018004" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.238.104.87"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.202.151.90"/>
    </slice>
    <from sec="1026018007" usec="0"/>
    <to sec="1026019427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.496475,1.97206,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
712[label="133.19.9.184;d;34pkt 34fpkt", shape=diamond, color=yellow];
916[label="206.69.121.92;s;1pkt 1fpkt", shape=diamond, color=yellow];
2215[label="206.69.121.92;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4665, 133.19.9.184:2319}[73.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2319: (37.5%)&lt;BR/&gt; 4665: (34.7222%)&lt;BR/&gt; 4662: (5.55556%)&lt;BR/&gt; 0: (5.55556%)&lt;BR/&gt; 4668: (4.16667%)&gt;];
}
712--916[label="1;1pkt 1fpkt"];
712--2215[label="1;1pkt 1fpkt"];
916--2215[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.9.184" dst_port="2319" src_port="4665"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.2.176.96"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.496475,1.97206,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
969[label="201.228.23.98;s;2pkt 2fpkt", shape=diamond, color=yellow];
2228[label="201.228.23.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.228.23.98:4662, 171.70.172.233:4268}[50%]&lt;BR/&gt;{201.228.23.98:4662, 171.70.172.233:4298}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 4298: (33.3333%)&lt;BR/&gt; 4268: (16.6667%)&gt;];
}
969--2228[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.172.233" dst_port="4298" src_ip="201.228.23.98" src_port="4662"/>
      <filter dst_ip="171.70.172.233" dst_port="4268" src_ip="201.228.23.98" src_port="4662"/>
    </slice>
    <from sec="1026018680" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.244.86.98"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.2.176.98"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026018268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.44.36.99"/>
    </slice>
    <from sec="1026018675" usec="0"/>
    <to sec="1026019442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="105.32.64.100"/>
    </slice>
    <from sec="1026018020" usec="0"/>
    <to sec="1026019643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.240.80.104"/>
    </slice>
    <from sec="1026018261" usec="0"/>
    <to sec="1026018635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.149.249.104"/>
    </slice>
    <from sec="1026018012" usec="0"/>
    <to sec="1026019660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.69.35.105"/>
    </slice>
    <from sec="1026018591" usec="0"/>
    <to sec="1026018598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.89.68.106"/>
    </slice>
    <from sec="1026018016" usec="0"/>
    <to sec="1026019479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.248.76.106"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24548,1.91235,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
18[label="171.70.136.106s;1pkt 1fpkt", shape=rectangle, color=red];
124[label="70.108.83.125;d;24pkt 24fpkt", shape=diamond, color=yellow];
227[label="85.137.80.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
237[label="204.243.196.200;d;1pkt 1fpkt", shape=diamond, color=yellow];
238[label="171.70.136.106;s;84pkt 84fpkt", shape=diamond, color=yellow];
312[label="56.217.237.166;d;3pkt 3fpkt", shape=diamond, color=yellow];
327[label="36.39.60.113;d;4pkt 4fpkt", shape=diamond, color=yellow];
581[label="56.170.42.207;d;8pkt 8fpkt", shape=diamond, color=yellow];
841[label="62.194.40.133;d;1pkt 1fpkt", shape=diamond, color=yellow];
1021[label="85.119.16.44;d;1pkt 1fpkt", shape=diamond, color=yellow];
1342[label="85.137.80.13;d;1pkt 1fpkt", shape=hexagon, color=black];
1727[label="85.119.16.44;d;2pkt 2fpkt", shape=hexagon, color=black];
2259[label="171.70.136.106;83pkt 83fpkt", shape=pentagon, color=darkviolet];
2905[label="171.70.136.106;83pkt 83fpkt", shape=invtriangle, color=brown];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.70.136.106:*, 70.108.83.125:1214}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (39.0572%)&lt;BR/&gt; 6699: (8.24916%)&lt;BR/&gt; 3497: (2.6936%)&lt;BR/&gt; 4578: (1.0101%)&lt;BR/&gt; 4524: (0.841751%)&gt;];
}
18--238[label="1;1pkt 1fpkt"];
18--1021[label="1;1pkt 1fpkt"];
18--1727[label="1;1pkt 1fpkt"];
18--2259[label="1;1pkt 1fpkt"];
18--2905[label="1;1pkt 1fpkt"];
124--238[label="1;24pkt 24fpkt"];
124--2259[label="1;24pkt 24fpkt"];
124--2905[label="1;24pkt 24fpkt"];
227--238[label="1;1pkt 1fpkt"];
227--1342[label="1;1pkt 1fpkt"];
227--2259[label="1;1pkt 1fpkt"];
227--2905[label="1;1pkt 1fpkt"];
237--238[label="1;1pkt 1fpkt"];
237--2259[label="1;1pkt 1fpkt"];
237--2905[label="1;1pkt 1fpkt"];
238--312[label="1;3pkt 3fpkt"];
238--327[label="1;4pkt 4fpkt"];
238--581[label="1;8pkt 8fpkt"];
238--841[label="1;1pkt 1fpkt"];
238--1021[label="1;1pkt 1fpkt"];
238--1342[label="1;1pkt 1fpkt"];
238--1727[label="1;2pkt 2fpkt"];
238--2259[label="1;83pkt 83fpkt"];
238--2905[label="1;83pkt 83fpkt"];
312--2259[label="1;3pkt 3fpkt"];
312--2905[label="1;3pkt 3fpkt"];
327--2259[label="1;4pkt 4fpkt"];
327--2905[label="1;4pkt 4fpkt"];
581--2259[label="1;8pkt 8fpkt"];
581--2905[label="1;8pkt 8fpkt"];
841--2259[label="1;1pkt 1fpkt"];
841--2905[label="1;1pkt 1fpkt"];
1021--1727[label="1;1pkt 1fpkt"];
1021--2259[label="1;1pkt 1fpkt"];
1021--2905[label="1;1pkt 1fpkt"];
1342--2259[label="1;1pkt 1fpkt"];
1342--2905[label="1;1pkt 1fpkt"];
1727--2259[label="1;2pkt 2fpkt"];
1727--2905[label="1;2pkt 2fpkt"];
2259--2905[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_ip="70.108.83.125" dst_port="1214" src_ip="171.70.136.106"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.149.249.106"/>
    </slice>
    <from sec="1026018251" usec="0"/>
    <to sec="1026019584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.8.129.108"/>
    </slice>
    <from sec="1026018010" usec="0"/>
    <to sec="1026019448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.149.204.109"/>
    </slice>
    <from sec="1026018007" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.95.245.109"/>
    </slice>
    <from sec="1026018004" usec="0"/>
    <to sec="1026019420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.103.91.110"/>
    </slice>
    <from sec="1026018055" usec="0"/>
    <to sec="1026019605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.149.249.110"/>
    </slice>
    <from sec="1026018009" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.149.56.112"/>
    </slice>
    <from sec="1026018413" usec="0"/>
    <to sec="1026018417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.70.177.120"/>
    </slice>
    <from sec="1026019199" usec="0"/>
    <to sec="1026019336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.28.240.120"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
277[label="157.149.32.227;d;125pkt 125fpkt", shape=diamond, color=yellow];
1478[label="157.149.32.227;d;52pkt 52fpkt", shape=hexagon, color=black];
2260[label="105.59.174.106;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2263[label="192.246.111.107;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2307[label="192.23.200.121;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2472[label="105.34.99.173;35pkt 35fpkt", shape=pentagon, color=darkviolet];
2540[label="61.196.108.193;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2558[label="85.114.9.200;36pkt 36fpkt", shape=pentagon, color=darkviolet];
2906[label="105.59.174.106;7pkt 7fpkt", shape=invtriangle, color=brown];
3060[label="61.196.108.193;19pkt 19fpkt", shape=invtriangle, color=brown];
3323[label="61.196.108.193;19pkt 19fpkt", shape=invhouse, color=bisque];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{105.34.99.173:*, 157.149.32.227:80}[20%]&lt;BR/&gt;{85.114.9.200:*, *:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8559%)&lt;BR/&gt; 35205: (0.576369%)&lt;BR/&gt; 35124: (0.576369%)&lt;BR/&gt; 34613: (0.576369%)&lt;BR/&gt; 34585: (0.576369%)&gt;];
}
277--388[label="1;7pkt 7fpkt"];
277--1478[label="1;52pkt 52fpkt"];
277--1798[label="0.072;9pkt 9fpkt"];
277--1808[label="0.104;13pkt 13fpkt"];
277--1815[label="0.048;6pkt 6fpkt"];
277--1820[label="0.016;2pkt 2fpkt"];
277--1828[label="0.08;10pkt 10fpkt"];
277--1833[label="0.072;9pkt 9fpkt"];
277--1844[label="0.104;13pkt 13fpkt"];
277--1850[label="0.048;6pkt 6fpkt"];
277--1856[label="0.016;2pkt 2fpkt"];
277--1860[label="0.08;10pkt 10fpkt"];
277--1865[label="0.072;9pkt 9fpkt"];
277--1873[label="0.104;13pkt 13fpkt"];
277--1879[label="0.048;6pkt 6fpkt"];
277--1882[label="0.016;2pkt 2fpkt"];
277--2260[label="0.333333;2pkt 2fpkt"];
277--2263[label="1;12pkt 12fpkt"];
277--2307[label="0.3125;5pkt 5fpkt"];
277--2472[label="1;35pkt 35fpkt"];
277--2540[label="0.3;6pkt 6fpkt"];
277--2558[label="0.305556;11pkt 11fpkt"];
277--2906[label="0.285714;2pkt 2fpkt"];
277--3060[label="0.315789;6pkt 6fpkt"];
277--3323[label="0.315789;6pkt 6fpkt"];
1478--1798[label="0.173077;9pkt 9fpkt"];
1478--1808[label="0.25;13pkt 13fpkt"];
1478--1815[label="0.115385;6pkt 6fpkt"];
1478--1820[label="0.0384615;2pkt 2fpkt"];
1478--1833[label="0.173077;9pkt 9fpkt"];
1478--1844[label="0.25;13pkt 13fpkt"];
1478--1850[label="0.115385;6pkt 6fpkt"];
1478--1856[label="0.0384615;2pkt 2fpkt"];
1478--1865[label="0.173077;9pkt 9fpkt"];
1478--1873[label="0.25;13pkt 13fpkt"];
1478--1879[label="0.115385;6pkt 6fpkt"];
1478--1882[label="0.0384615;2pkt 2fpkt"];
1478--2260[label="0.333333;2pkt 2fpkt"];
1478--2263[label="1;12pkt 12fpkt"];
1478--2906[label="0.285714;2pkt 2fpkt"];
2260--2906[label="1;6pkt 6fpkt"];
2540--3060[label="1;19pkt 19fpkt"];
2540--3323[label="1;19pkt 19fpkt"];
3060--3323[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="85.114.9.200"/>
      <filter dst_ip="157.149.32.227" dst_port="80" src_ip="105.34.99.173"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.98.224.122"/>
    </slice>
    <from sec="1026018969" usec="0"/>
    <to sec="1026019077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.213.136.123"/>
    </slice>
    <from sec="1026018144" usec="0"/>
    <to sec="1026019281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.228.196.123"/>
    </slice>
    <from sec="1026018016" usec="0"/>
    <to sec="1026019662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.149.15.127"/>
    </slice>
    <from sec="1026018938" usec="0"/>
    <to sec="1026019188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.2.176.127"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026018042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.227.240.129"/>
    </slice>
    <from sec="1026018178" usec="0"/>
    <to sec="1026019251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.150.4.130"/>
    </slice>
    <from sec="1026018594" usec="0"/>
    <to sec="1026018630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.82.192.131"/>
    </slice>
    <from sec="1026018969" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.496475,1.97206,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
1134[label="201.120.165.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
2335[label="201.120.165.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.120.165.132:8080, 171.70.143.200:3209}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 3209: (50%)&gt;];
}
1134--2335[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.143.200" dst_port="3209" src_ip="201.120.165.132" src_port="8080"/>
    </slice>
    <from sec="1026018097" usec="0"/>
    <to sec="1026019355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.82.192.132"/>
    </slice>
    <from sec="1026018125" usec="0"/>
    <to sec="1026019329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.82.192.133"/>
    </slice>
    <from sec="1026018083" usec="0"/>
    <to sec="1026019290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
541[label="208.77.225.135;s;138pkt 138fpkt", shape=diamond, color=yellow];
1597[label="208.77.225.135;s;138pkt 138fpkt", shape=hexagon, color=black];
2353[label="208.77.225.135;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2953[label="208.77.225.135;2pkt 2fpkt", shape=invtriangle, color=brown];
3263[label="208.77.225.135;2pkt 2fpkt", shape=invhouse, color=bisque];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.77.225.135:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
541--1597[label="1;138pkt 138fpkt"];
541--2353[label="1;2pkt 2fpkt"];
541--2953[label="1;2pkt 2fpkt"];
541--3263[label="1;2pkt 2fpkt"];
1597--2353[label="1;2pkt 2fpkt"];
1597--2953[label="1;2pkt 2fpkt"];
1597--3263[label="1;2pkt 2fpkt"];
2353--2953[label="1;2pkt 2fpkt"];
2353--3263[label="1;2pkt 2fpkt"];
2953--3263[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="208.77.225.135"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.213.160.136"/>
    </slice>
    <from sec="1026018938" usec="0"/>
    <to sec="1026019510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.77.227.137"/>
    </slice>
    <from sec="1026018170" usec="0"/>
    <to sec="1026019481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
860[label="154.198.137.141;d;209pkt 209fpkt", shape=diamond, color=yellow];
2145[label="85.140.198.70;29pkt 29fpkt", shape=pentagon, color=darkviolet];
2241[label="105.34.179.100;37pkt 37fpkt", shape=pentagon, color=darkviolet];
2444[label="159.101.84.162;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2851[label="85.140.198.70;29pkt 29fpkt", shape=invtriangle, color=brown];
2896[label="105.34.179.100;38pkt 38fpkt", shape=invtriangle, color=brown];
3233[label="105.34.179.100;37pkt 37fpkt", shape=invhouse, color=bisque];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{105.42.168.139:*, 154.198.137.141:80}[21.1454%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8734%)&lt;BR/&gt; 1806: (0.506329%)&lt;BR/&gt; 1805: (0.506329%)&lt;BR/&gt; 1804: (0.506329%)&lt;BR/&gt; 1803: (0.506329%)&gt;];
}
860--1815[label="0.0334928;7pkt 7fpkt"];
860--1820[label="0.0478469;10pkt 10fpkt"];
860--1822[label="0.0287081;6pkt 6fpkt"];
860--1828[label="0.105263;22pkt 22fpkt"];
860--1831[label="0.0287081;6pkt 6fpkt"];
860--1850[label="0.0334928;7pkt 7fpkt"];
860--1856[label="0.0478469;10pkt 10fpkt"];
860--1860[label="0.105263;22pkt 22fpkt"];
860--1863[label="0.0287081;6pkt 6fpkt"];
860--1879[label="0.0334928;7pkt 7fpkt"];
860--1882[label="0.0478469;10pkt 10fpkt"];
860--2145[label="0.37931;11pkt 11fpkt"];
860--2241[label="1;37pkt 37fpkt"];
860--2363[label="1;47pkt 47fpkt"];
860--2444[label="1;16pkt 16fpkt"];
860--2851[label="0.37931;11pkt 11fpkt"];
860--2896[label="1;38pkt 38fpkt"];
860--3002[label="1;16pkt 16fpkt"];
860--3233[label="1;37pkt 37fpkt"];
2145--2851[label="1;29pkt 29fpkt"];
2241--2896[label="1;37pkt 37fpkt"];
2241--3233[label="1;37pkt 37fpkt"];
2444--3002[label="1;16pkt 16fpkt"];
2896--3233[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="154.198.137.141" dst_port="80" src_ip="105.42.168.139"/>
    </slice>
    <from sec="1026018386" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.201.226.140"/>
    </slice>
    <from sec="1026018002" usec="0"/>
    <to sec="1026019625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.77.2.142"/>
    </slice>
    <from sec="1026018234" usec="0"/>
    <to sec="1026019586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.73.14.144"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="105.58.136.145"/>
    </slice>
    <from sec="1026018488" usec="0"/>
    <to sec="1026019613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.77.205.145"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="105.42.214.147"/>
    </slice>
    <from sec="1026018018" usec="0"/>
    <to sec="1026019654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.234.16.150"/>
    </slice>
    <from sec="1026019474" usec="0"/>
    <to sec="1026019482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611097,1.9521,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
1029[label="208.67.92.152;s;156pkt 156fpkt", shape=diamond, color=yellow];
1130[label="60.75.169.53;d;2pkt 2fpkt", shape=diamond, color=yellow];
2403[label="208.67.92.152;162pkt 162fpkt", shape=pentagon, color=darkviolet];
2975[label="208.67.92.152;161pkt 161fpkt", shape=invtriangle, color=brown];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.67.92.152:6257, *:6257}[90.1235%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (90.1247%)&lt;BR/&gt; 6699: (4.7817%)&lt;BR/&gt; 1165: (0.4158%)&lt;BR/&gt; 7719: (0.31185%)&lt;BR/&gt; 2278: (0.31185%)&gt;];
}
1029--1130[label="1;2pkt 2fpkt"];
1029--1862[label="0.0961538;15pkt 15fpkt"];
1029--2403[label="1;156pkt 156fpkt"];
1029--2975[label="0.99359;155pkt 155fpkt"];
1130--2403[label="1;2pkt 2fpkt"];
1130--2975[label="1;2pkt 2fpkt"];
2403--2975[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="208.67.92.152" src_port="6257"/>
    </slice>
    <from sec="1026018967" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.248.216.152"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026018560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
2409[label="133.19.235.152;80pkt 80fpkt", shape=pentagon, color=darkviolet];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.235.152:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="133.19.235.152"/>
    </slice>
    <from sec="1026018008" usec="0"/>
    <to sec="1026019662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.496475,1.97206,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
221[label="132.42.156.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
549[label="133.19.157.153;s;34pkt 34fpkt", shape=diamond, color=yellow];
603[label="36.33.148.143;d;1pkt 1fpkt", shape=diamond, color=yellow];
618[label="85.142.230.134;d;3pkt 3fpkt", shape=diamond, color=yellow];
752[label="56.138.12.62;d;2pkt 2fpkt", shape=diamond, color=yellow];
2412[label="133.19.157.153;34pkt 34fpkt", shape=pentagon, color=darkviolet];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.157.153:6257, *:6257}[62.8571%]&lt;BR/&gt;{133.19.157.153:*, *:6699}[22.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (65.3333%)&lt;BR/&gt; 6699: (17.3333%)&lt;BR/&gt; 3084: (2%)&lt;BR/&gt; 3082: (2%)&lt;BR/&gt; 2443: (2%)&gt;];
}
221--549[label="1;1pkt 1fpkt"];
221--2412[label="1;1pkt 1fpkt"];
549--603[label="1;1pkt 1fpkt"];
549--618[label="0.666667;2pkt 2fpkt"];
549--752[label="1;2pkt 2fpkt"];
549--2412[label="1;34pkt 34fpkt"];
603--2412[label="1;1pkt 1fpkt"];
618--2412[label="0.666667;2pkt 2fpkt"];
752--2412[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="133.19.157.153"/>
      <filter dst_port="6257" src_ip="133.19.157.153" src_port="6257"/>
    </slice>
    <from sec="1026018002" usec="0"/>
    <to sec="1026019622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.13.44.156"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.496475,1.97206,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_345{
style=filled;
color=gray75;
555[label="154.213.141.156;s;3pkt 3fpkt", shape=diamond, color=yellow];
2422[label="154.213.141.156;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat345[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.141.156:1454, 62.82.192.41:1863}[20%]&lt;BR/&gt;{154.213.141.156:2553, 61.118.241.49:6699}[20%]&lt;BR/&gt;{154.213.141.156:2589, 194.120.183.63:7732}[20%]&lt;BR/&gt;{154.213.141.156:2590, 210.65.160.153:6699}[20%]&lt;BR/&gt;{154.213.141.156:2552, 210.87.47.228:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (35.7143%)&lt;BR/&gt; 2553: (14.2857%)&lt;BR/&gt; 2552: (14.2857%)&lt;BR/&gt; 7732: (7.14286%)&lt;BR/&gt; 2590: (7.14286%)&gt;];
}
555--2422[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.87.47.228" dst_port="6699" src_ip="154.213.141.156" src_port="2552"/>
      <filter dst_ip="210.65.160.153" dst_port="6699" src_ip="154.213.141.156" src_port="2590"/>
      <filter dst_ip="194.120.183.63" dst_port="7732" src_ip="154.213.141.156" src_port="2589"/>
      <filter dst_ip="61.118.241.49" dst_port="6699" src_ip="154.213.141.156" src_port="2553"/>
      <filter dst_ip="62.82.192.41" dst_port="1863" src_ip="154.213.141.156" src_port="1454"/>
    </slice>
    <from sec="1026018004" usec="0"/>
    <to sec="1026019651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.67.77.158"/>
    </slice>
    <from sec="1026018003" usec="0"/>
    <to sec="1026019640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.66.180.158"/>
    </slice>
    <from sec="1026018741" usec="0"/>
    <to sec="1026019293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.195.161"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
377[label="154.213.27.140;d;604pkt 604fpkt", shape=diamond, color=yellow];
668[label="212.68.134.210;s;37pkt 37fpkt", shape=diamond, color=yellow];
824[label="171.70.217.164;d;64pkt 64fpkt", shape=diamond, color=yellow];
882[label="154.213.43.67;d;28pkt 28fpkt", shape=diamond, color=yellow];
885[label="62.82.194.29;s;28pkt 28fpkt", shape=diamond, color=yellow];
886[label="157.149.148.161;d;110pkt 110fpkt", shape=diamond, color=yellow];
1559[label="157.149.148.161;d;105pkt 105fpkt", shape=hexagon, color=black];
1949[label="204.244.62.19;31pkt 31fpkt", shape=pentagon, color=darkviolet];
1998[label="62.82.194.29;39pkt 39fpkt", shape=pentagon, color=darkviolet];
2054[label="194.88.167.46;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2126[label="62.82.218.66;57pkt 57fpkt", shape=pentagon, color=darkviolet];
2135[label="205.154.144.68;53pkt 53fpkt", shape=pentagon, color=darkviolet];
2148[label="62.53.163.71;51pkt 51fpkt", shape=pentagon, color=darkviolet];
2230[label="222.130.48.98;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2370[label="205.69.162.141;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2541[label="62.82.194.193;196pkt 196fpkt", shape=pentagon, color=darkviolet];
2597[label="212.68.134.210;75pkt 75fpkt", shape=pentagon, color=darkviolet];
2713[label="62.20.18.252;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2780[label="62.82.194.29;40pkt 40fpkt", shape=invtriangle, color=brown];
2809[label="194.88.167.46;6pkt 6fpkt", shape=invtriangle, color=brown];
2842[label="62.82.218.66;57pkt 57fpkt", shape=invtriangle, color=brown];
2959[label="205.69.162.141;41pkt 41fpkt", shape=invtriangle, color=brown];
3174[label="62.82.194.29;39pkt 39fpkt", shape=invhouse, color=bisque];
3202[label="62.82.218.66;57pkt 57fpkt", shape=invhouse, color=bisque];
3266[label="205.69.162.141;42pkt 42fpkt", shape=invhouse, color=bisque];
3324[label="62.82.194.193;194pkt 194fpkt", shape=invhouse, color=bisque];
3348[label="194.4.225.231;25pkt 25fpkt", shape=invhouse, color=bisque];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 154.213.27.140:*}[53.2215%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7317%)&lt;BR/&gt; 1395: (0.219512%)&lt;BR/&gt; 1389: (0.219512%)&lt;BR/&gt; 1388: (0.219512%)&lt;BR/&gt; 1287: (0.219512%)&gt;];
}
377--480[label="0.502717;185pkt 185fpkt"];
377--556[label="0.0322581;1pkt 1fpkt"];
377--668[label="0.621622;23pkt 23fpkt"];
377--744[label="0.384615;55pkt 55fpkt"];
377--885[label="0.0357143;1pkt 1fpkt"];
377--1570[label="0.513353;173pkt 173fpkt"];
377--1797[label="0.00662252;4pkt 4fpkt"];
377--1807[label="0.0645695;39pkt 39fpkt"];
377--1812[label="0.057947;35pkt 35fpkt"];
377--1819[label="0.0298013;18pkt 18fpkt"];
377--1832[label="0.00662252;4pkt 4fpkt"];
377--1843[label="0.0645695;39pkt 39fpkt"];
377--1847[label="0.057947;35pkt 35fpkt"];
377--1855[label="0.0298013;18pkt 18fpkt"];
377--1864[label="0.00662252;4pkt 4fpkt"];
377--1872[label="0.0645695;39pkt 39fpkt"];
377--1876[label="0.057947;35pkt 35fpkt"];
377--1881[label="0.0298013;18pkt 18fpkt"];
377--1901[label="0.0153846;1pkt 1fpkt"];
377--1949[label="0.225806;7pkt 7fpkt"];
377--1994[label="0.0434783;1pkt 1fpkt"];
377--1998[label="0.179487;7pkt 7fpkt"];
377--2054[label="1;5pkt 5fpkt"];
377--2135[label="0.113208;6pkt 6fpkt"];
377--2148[label="0.0196078;1pkt 1fpkt"];
377--2154[label="0.408163;60pkt 60fpkt"];
377--2230[label="1;13pkt 13fpkt"];
377--2242[label="0.0952381;10pkt 10fpkt"];
377--2269[label="0.0714286;1pkt 1fpkt"];
377--2308[label="0.025;1pkt 1fpkt"];
377--2370[label="1;42pkt 42fpkt"];
377--2454[label="0.0612245;3pkt 3fpkt"];
377--2475[label="0.483871;30pkt 30fpkt"];
377--2514[label="0.352941;6pkt 6fpkt"];
377--2541[label="0.173469;34pkt 34fpkt"];
377--2597[label="0.626667;47pkt 47fpkt"];
377--2704[label="0.278689;17pkt 17fpkt"];
377--2713[label="1;11pkt 11fpkt"];
377--2780[label="0.175;7pkt 7fpkt"];
377--2809[label="1;6pkt 6fpkt"];
377--2910[label="0.0714286;1pkt 1fpkt"];
377--2935[label="0.025;1pkt 1fpkt"];
377--2959[label="1;41pkt 41fpkt"];
377--3019[label="0.47619;30pkt 30fpkt"];
377--3174[label="0.179487;7pkt 7fpkt"];
377--3254[label="0.025;1pkt 1fpkt"];
377--3266[label="1;42pkt 42fpkt"];
377--3298[label="0.47619;30pkt 30fpkt"];
377--3324[label="0.175258;34pkt 34fpkt"];
377--3348[label="0.04;1pkt 1fpkt"];
668--855[label="0.027027;1pkt 1fpkt"];
668--1797[label="0.108108;4pkt 4fpkt"];
668--1807[label="0.162162;6pkt 6fpkt"];
668--1812[label="0.0540541;2pkt 2fpkt"];
668--1819[label="0.0540541;2pkt 2fpkt"];
668--1832[label="0.108108;4pkt 4fpkt"];
668--1843[label="0.162162;6pkt 6fpkt"];
668--1847[label="0.0540541;2pkt 2fpkt"];
668--1855[label="0.0540541;2pkt 2fpkt"];
668--1864[label="0.108108;4pkt 4fpkt"];
668--1872[label="0.162162;6pkt 6fpkt"];
668--1876[label="0.0540541;2pkt 2fpkt"];
668--1881[label="0.0540541;2pkt 2fpkt"];
668--2597[label="1;37pkt 37fpkt"];
824--885[label="0.321429;9pkt 9fpkt"];
824--1998[label="0.230769;9pkt 9fpkt"];
824--2126[label="0.0877193;5pkt 5fpkt"];
824--2131[label="0.0588235;1pkt 1fpkt"];
824--2289[label="0.0666667;1pkt 1fpkt"];
824--2364[label="0.1;5pkt 5fpkt"];
824--2541[label="0.515625;33pkt 33fpkt"];
824--2780[label="0.225;9pkt 9fpkt"];
824--2842[label="0.0877193;5pkt 5fpkt"];
824--3174[label="0.230769;9pkt 9fpkt"];
824--3202[label="0.0877193;5pkt 5fpkt"];
824--3324[label="0.515625;33pkt 33fpkt"];
882--885[label="0.392857;11pkt 11fpkt"];
882--1998[label="0.392857;11pkt 11fpkt"];
882--2110[label="0.107143;3pkt 3fpkt"];
882--2541[label="0.0357143;1pkt 1fpkt"];
882--2688[label="0.178571;5pkt 5fpkt"];
882--2780[label="0.392857;11pkt 11fpkt"];
882--3174[label="0.392857;11pkt 11fpkt"];
882--3324[label="0.0357143;1pkt 1fpkt"];
885--886[label="0.25;7pkt 7fpkt"];
885--1559[label="0.25;7pkt 7fpkt"];
885--1998[label="0.964286;27pkt 27fpkt"];
885--2780[label="1;28pkt 28fpkt"];
885--3174[label="0.964286;27pkt 27fpkt"];
886--1559[label="1;105pkt 105fpkt"];
886--1998[label="0.153846;6pkt 6fpkt"];
886--2131[label="0.117647;2pkt 2fpkt"];
886--2373[label="0.117647;2pkt 2fpkt"];
886--2467[label="0.2;4pkt 4fpkt"];
886--2482[label="0.015625;1pkt 1fpkt"];
886--2541[label="0.290909;32pkt 32fpkt"];
886--2674[label="0.322222;29pkt 29fpkt"];
886--2704[label="0.0163934;1pkt 1fpkt"];
886--2780[label="0.175;7pkt 7fpkt"];
886--3023[label="0.015625;1pkt 1fpkt"];
886--3117[label="0.322222;29pkt 29fpkt"];
886--3174[label="0.153846;6pkt 6fpkt"];
886--3299[label="0.015873;1pkt 1fpkt"];
886--3324[label="0.290909;32pkt 32fpkt"];
886--3351[label="0.322222;29pkt 29fpkt"];
1559--1998[label="0.153846;6pkt 6fpkt"];
1559--2131[label="0.117647;2pkt 2fpkt"];
1559--2373[label="0.117647;2pkt 2fpkt"];
1559--2467[label="0.2;4pkt 4fpkt"];
1559--2482[label="0.015625;1pkt 1fpkt"];
1559--2541[label="0.304762;32pkt 32fpkt"];
1559--2674[label="0.322222;29pkt 29fpkt"];
1559--2704[label="0.0163934;1pkt 1fpkt"];
1559--2780[label="0.175;7pkt 7fpkt"];
1559--3023[label="0.015625;1pkt 1fpkt"];
1559--3117[label="0.322222;29pkt 29fpkt"];
1559--3174[label="0.153846;6pkt 6fpkt"];
1559--3299[label="0.015873;1pkt 1fpkt"];
1559--3324[label="0.304762;32pkt 32fpkt"];
1559--3351[label="0.322222;29pkt 29fpkt"];
1998--2780[label="1;39pkt 39fpkt"];
1998--3174[label="1;39pkt 39fpkt"];
2054--2809[label="1;5pkt 5fpkt"];
2126--2842[label="1;57pkt 57fpkt"];
2126--3202[label="1;57pkt 57fpkt"];
2148--2853[label="1;50pkt 50fpkt"];
2370--2959[label="1;41pkt 41fpkt"];
2370--3266[label="1;42pkt 42fpkt"];
2541--3324[label="1;194pkt 194fpkt"];
2780--3174[label="1;39pkt 39fpkt"];
2842--3202[label="1;57pkt 57fpkt"];
2959--3266[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.27.140" src_port="80"/>
    </slice>
    <from sec="1026018009" usec="0"/>
    <to sec="1026019656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.82.193.164"/>
    </slice>
    <from sec="1026018021" usec="0"/>
    <to sec="1026019598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.67.69.165"/>
    </slice>
    <from sec="1026018113" usec="0"/>
    <to sec="1026019641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.99.31.168"/>
    </slice>
    <from sec="1026018066" usec="0"/>
    <to sec="1026019496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.167.202.168"/>
    </slice>
    <from sec="1026018024" usec="0"/>
    <to sec="1026019650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="140.90.107.169"/>
    </slice>
    <from sec="1026018006" usec="0"/>
    <to sec="1026019658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_355{
style=filled;
color=gray75;
610[label="157.149.16.43;d;95pkt 95fpkt", shape=diamond, color=yellow];
825[label="193.173.196.174;s;3pkt 3fpkt", shape=diamond, color=yellow];
856[label="105.33.87.225;s;62pkt 62fpkt", shape=diamond, color=yellow];
967[label="157.149.16.32;d;25pkt 25fpkt", shape=diamond, color=yellow];
1627[label="157.149.16.43;d;79pkt 79fpkt", shape=hexagon, color=black];
2402[label="192.17.145.151;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2478[label="193.173.196.174;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2618[label="105.46.229.217;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2974[label="192.17.145.151;12pkt 12fpkt", shape=invtriangle, color=brown];
3021[label="193.173.196.174;11pkt 11fpkt", shape=invtriangle, color=brown];
3093[label="105.46.229.217;11pkt 11fpkt", shape=invtriangle, color=brown];
3339[label="105.46.229.217;10pkt 10fpkt", shape=invhouse, color=bisque];
stat355[shape=component, label=&lt;Rules:&lt;BR/&gt;{105.33.87.225:*, 157.149.16.32:*}[24.3243%]&lt;BR/&gt;{105.33.87.225:*, 157.149.16.43:80}[20.2703%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.9412%)&lt;BR/&gt; 22: (2.64706%)&lt;BR/&gt; 1067: (0.882353%)&lt;BR/&gt; 55864: (0.735294%)&lt;BR/&gt; 55863: (0.735294%)&gt;];
}
610--825[label="0.666667;2pkt 2fpkt"];
610--856[label="0.419355;26pkt 26fpkt"];
610--1627[label="1;79pkt 79fpkt"];
610--1798[label="0.0315789;3pkt 3fpkt"];
610--1808[label="0.0210526;2pkt 2fpkt"];
610--1815[label="0.0842105;8pkt 8fpkt"];
610--1820[label="0.0210526;2pkt 2fpkt"];
610--1822[label="0.0421053;4pkt 4fpkt"];
610--1828[label="0.0315789;3pkt 3fpkt"];
610--1831[label="0.0315789;3pkt 3fpkt"];
610--1833[label="0.0315789;3pkt 3fpkt"];
610--1844[label="0.0210526;2pkt 2fpkt"];
610--1850[label="0.0842105;8pkt 8fpkt"];
610--1856[label="0.0210526;2pkt 2fpkt"];
610--1860[label="0.0315789;3pkt 3fpkt"];
610--1863[label="0.0315789;3pkt 3fpkt"];
610--1865[label="0.0315789;3pkt 3fpkt"];
610--1873[label="0.0210526;2pkt 2fpkt"];
610--1879[label="0.0842105;8pkt 8fpkt"];
610--1882[label="0.0210526;2pkt 2fpkt"];
610--2292[label="0.9;9pkt 9fpkt"];
610--2402[label="1;12pkt 12fpkt"];
610--2478[label="0.2;2pkt 2fpkt"];
610--2540[label="0.05;1pkt 1fpkt"];
610--2558[label="0.0277778;1pkt 1fpkt"];
610--2618[label="0.3;3pkt 3fpkt"];
610--2925[label="0.9;9pkt 9fpkt"];
610--2974[label="1;12pkt 12fpkt"];
610--3021[label="0.181818;2pkt 2fpkt"];
610--3060[label="0.0526316;1pkt 1fpkt"];
610--3093[label="0.272727;3pkt 3fpkt"];
610--3323[label="0.0526316;1pkt 1fpkt"];
610--3339[label="0.3;3pkt 3fpkt"];
825--967[label="0.333333;1pkt 1fpkt"];
825--1627[label="0.666667;2pkt 2fpkt"];
825--1822[label="0.666667;2pkt 2fpkt"];
825--2478[label="1;3pkt 3fpkt"];
825--3021[label="1;3pkt 3fpkt"];
856--967[label="0.96;24pkt 24fpkt"];
856--1627[label="0.419355;26pkt 26fpkt"];
856--1808[label="0.0322581;2pkt 2fpkt"];
856--1820[label="0.016129;1pkt 1fpkt"];
856--1844[label="0.0322581;2pkt 2fpkt"];
856--1856[label="0.016129;1pkt 1fpkt"];
856--1873[label="0.0322581;2pkt 2fpkt"];
856--1882[label="0.016129;1pkt 1fpkt"];
967--2478[label="0.1;1pkt 1fpkt"];
967--3021[label="0.0909091;1pkt 1fpkt"];
1627--1798[label="0.0379747;3pkt 3fpkt"];
1627--1808[label="0.0253165;2pkt 2fpkt"];
1627--1815[label="0.101266;8pkt 8fpkt"];
1627--1820[label="0.0253165;2pkt 2fpkt"];
1627--1822[label="0.0506329;4pkt 4fpkt"];
1627--1828[label="0.0126582;1pkt 1fpkt"];
1627--1833[label="0.0379747;3pkt 3fpkt"];
1627--1844[label="0.0253165;2pkt 2fpkt"];
1627--1850[label="0.101266;8pkt 8fpkt"];
1627--1856[label="0.0253165;2pkt 2fpkt"];
1627--1860[label="0.0126582;1pkt 1fpkt"];
1627--1865[label="0.0379747;3pkt 3fpkt"];
1627--1873[label="0.0253165;2pkt 2fpkt"];
1627--1879[label="0.101266;8pkt 8fpkt"];
1627--1882[label="0.0253165;2pkt 2fpkt"];
1627--2292[label="0.9;9pkt 9fpkt"];
1627--2402[label="1;12pkt 12fpkt"];
1627--2478[label="0.2;2pkt 2fpkt"];
1627--2540[label="0.05;1pkt 1fpkt"];
1627--2618[label="0.3;3pkt 3fpkt"];
1627--2925[label="0.9;9pkt 9fpkt"];
1627--2974[label="1;12pkt 12fpkt"];
1627--3021[label="0.181818;2pkt 2fpkt"];
1627--3060[label="0.0526316;1pkt 1fpkt"];
1627--3093[label="0.272727;3pkt 3fpkt"];
1627--3323[label="0.0526316;1pkt 1fpkt"];
1627--3339[label="0.3;3pkt 3fpkt"];
2402--2974[label="1;12pkt 12fpkt"];
2478--3021[label="1;10pkt 10fpkt"];
2618--3093[label="1;10pkt 10fpkt"];
2618--3339[label="1;10pkt 10fpkt"];
3093--3339[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.16.32" src_ip="105.33.87.225"/>
      <filter dst_ip="157.149.16.43" dst_port="80" src_ip="105.33.87.225"/>
    </slice>
    <from sec="1026018014" usec="0"/>
    <to sec="1026019627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.213.44.175"/>
    </slice>
    <from sec="1026018205" usec="0"/>
    <to sec="1026019663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.182.0.178"/>
    </slice>
    <from sec="1026018012" usec="0"/>
    <to sec="1026019655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.235.145.178"/>
    </slice>
    <from sec="1026018031" usec="0"/>
    <to sec="1026019659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.232.146.179"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.2.16.180"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.149.222.180"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
215[label="154.198.74.248;d;2572pkt 2572fpkt", shape=diamond, color=yellow];
1897[label="194.105.3.4;101pkt 101fpkt", shape=pentagon, color=darkviolet];
2172[label="85.49.181.78;93pkt 93fpkt", shape=pentagon, color=darkviolet];
2199[label="205.76.94.86;87pkt 87fpkt", shape=pentagon, color=darkviolet];
2421[label="212.193.116.156;58pkt 58fpkt", shape=pentagon, color=darkviolet];
2504[label="207.100.85.182;91pkt 91fpkt", shape=pentagon, color=darkviolet];
2591[label="63.40.46.209;48pkt 48fpkt", shape=pentagon, color=darkviolet];
2727[label="194.105.3.4;101pkt 101fpkt", shape=invtriangle, color=brown];
2875[label="205.76.94.86;87pkt 87fpkt", shape=invtriangle, color=brown];
2987[label="212.193.116.156;57pkt 57fpkt", shape=invtriangle, color=brown];
3036[label="207.100.85.182;91pkt 91fpkt", shape=invtriangle, color=brown];
3077[label="63.40.46.209;49pkt 49fpkt", shape=invtriangle, color=brown];
3146[label="194.105.3.4;101pkt 101fpkt", shape=invhouse, color=bisque];
3224[label="205.76.94.86;87pkt 87fpkt", shape=invhouse, color=bisque];
3280[label="212.193.116.156;57pkt 57fpkt", shape=invhouse, color=bisque];
3306[label="207.100.85.182;91pkt 91fpkt", shape=invhouse, color=bisque];
3332[label="63.40.46.209;48pkt 48fpkt", shape=invhouse, color=bisque];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6346, 154.198.74.248:*}[71.3843%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (40.6127%)&lt;BR/&gt; 6347: (4.94894%)&lt;BR/&gt; 6348: (0.720084%)&lt;BR/&gt; 6349: (0.405865%)&lt;BR/&gt; 0: (0.209479%)&gt;];
}
215--1897[label="0.980198;99pkt 99fpkt"];
215--2172[label="0.978495;91pkt 91fpkt"];
215--2199[label="0.988506;86pkt 86fpkt"];
215--2421[label="1;58pkt 58fpkt"];
215--2504[label="0.989011;90pkt 90fpkt"];
215--2591[label="0.979167;47pkt 47fpkt"];
215--2727[label="0.980198;99pkt 99fpkt"];
215--2875[label="0.988506;86pkt 86fpkt"];
215--2987[label="1;57pkt 57fpkt"];
215--3036[label="0.989011;90pkt 90fpkt"];
215--3077[label="0.979592;48pkt 48fpkt"];
215--3146[label="0.980198;99pkt 99fpkt"];
215--3224[label="0.988506;86pkt 86fpkt"];
215--3280[label="1;57pkt 57fpkt"];
215--3306[label="0.989011;90pkt 90fpkt"];
215--3332[label="0.979167;47pkt 47fpkt"];
1897--2727[label="1;101pkt 101fpkt"];
1897--3146[label="1;101pkt 101fpkt"];
2199--2875[label="1;87pkt 87fpkt"];
2199--3224[label="1;87pkt 87fpkt"];
2421--2987[label="1;57pkt 57fpkt"];
2421--3280[label="1;57pkt 57fpkt"];
2504--3036[label="1;91pkt 91fpkt"];
2504--3306[label="1;91pkt 91fpkt"];
2591--3077[label="1;48pkt 48fpkt"];
2591--3332[label="1;48pkt 48fpkt"];
2727--3146[label="1;101pkt 101fpkt"];
2875--3224[label="1;87pkt 87fpkt"];
2987--3280[label="1;57pkt 57fpkt"];
3036--3306[label="1;91pkt 91fpkt"];
3077--3332[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="154.198.74.248" src_port="6346"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.19.216.186"/>
    </slice>
    <from sec="1026018002" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.75.216.186"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.101.194.191"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.56.94.192"/>
    </slice>
    <from sec="1026018006" usec="0"/>
    <to sec="1026019662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.139.229.193"/>
    </slice>
    <from sec="1026019035" usec="0"/>
    <to sec="1026019085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.27.6.194"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.138.192.197"/>
    </slice>
    <from sec="1026018008" usec="0"/>
    <to sec="1026019659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617371,1.91986,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_370{
style=filled;
color=gray75;
428[label="154.0.188.198;s;862pkt 862fpkt", shape=diamond, color=yellow];
1309[label="154.0.188.198;s;862pkt 862fpkt", shape=hexagon, color=black];
2555[label="154.0.188.198;874pkt 874fpkt", shape=pentagon, color=darkviolet];
stat370[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.0.188.198:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
428--1309[label="1;862pkt 862fpkt"];
428--2555[label="0.99884;861pkt 861fpkt"];
1309--2555[label="0.99884;861pkt 861fpkt"];
</description>
    <slice>
      <filter src_ip="154.0.188.198"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.246.37.200"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026018205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.76.29.201"/>
    </slice>
    <from sec="1026018009" usec="0"/>
    <to sec="1026019657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.240.116.204"/>
    </slice>
    <from sec="1026018781" usec="0"/>
    <to sec="1026019180" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.131.175.205"/>
    </slice>
    <from sec="1026018013" usec="0"/>
    <to sec="1026019663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.243.2.206"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.210.175.207"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.19.218.208"/>
    </slice>
    <from sec="1026018002" usec="0"/>
    <to sec="1026019636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.24.116.211"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026018171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.139.229.212"/>
    </slice>
    <from sec="1026019435" usec="0"/>
    <to sec="1026019486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.160.160.215"/>
    </slice>
    <from sec="1026018129" usec="0"/>
    <to sec="1026018205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.5.200.215"/>
    </slice>
    <from sec="1026018026" usec="0"/>
    <to sec="1026019656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.94.119.216"/>
    </slice>
    <from sec="1026018086" usec="0"/>
    <to sec="1026019546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.59.193.219"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.201.230.221"/>
    </slice>
    <from sec="1026018459" usec="0"/>
    <to sec="1026019382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.213.28.225"/>
    </slice>
    <from sec="1026018024" usec="0"/>
    <to sec="1026019654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.496475,1.97206,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
1043[label="209.201.228.226;s;280pkt 280fpkt", shape=diamond, color=yellow];
2646[label="209.201.228.226;281pkt 281fpkt", shape=pentagon, color=darkviolet];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.228.226:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1043--2646[label="1;280pkt 280fpkt"];
</description>
    <slice>
      <filter src_ip="209.201.228.226"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.128.196.227"/>
    </slice>
    <from sec="1026018002" usec="0"/>
    <to sec="1026019642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.133.214.227"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026018437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.19.217.230"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.245.59.233"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_391{
style=filled;
color=gray75;
333[label="154.198.81.234;s;495pkt 495fpkt", shape=diamond, color=yellow];
1444[label="154.198.81.234;s;292pkt 292fpkt", shape=hexagon, color=black];
2666[label="154.198.81.234;526pkt 526fpkt", shape=pentagon, color=darkviolet];
3113[label="154.198.81.234;527pkt 527fpkt", shape=invtriangle, color=brown];
3350[label="154.198.81.234;527pkt 527fpkt", shape=invhouse, color=bisque];
stat391[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.198.81.234:25, *:*}[63.1879%]&lt;BR/&gt;{154.198.81.234:*, *:113}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (34.4529%)&lt;BR/&gt; 113: (14.5543%)&lt;BR/&gt; 0: (1.7744%)&lt;BR/&gt; 3361: (0.211238%)&lt;BR/&gt; 2241: (0.211238%)&gt;];
}
333--1124[label="0.0357143;1pkt 1fpkt"];
333--1444[label="1;292pkt 292fpkt"];
333--1819[label="0.0020202;1pkt 1fpkt"];
333--1855[label="0.0020202;1pkt 1fpkt"];
333--1881[label="0.0020202;1pkt 1fpkt"];
333--2666[label="0.99798;494pkt 494fpkt"];
333--3113[label="1;495pkt 495fpkt"];
333--3350[label="1;495pkt 495fpkt"];
1444--1819[label="0.00342466;1pkt 1fpkt"];
1444--1855[label="0.00342466;1pkt 1fpkt"];
1444--1881[label="0.00342466;1pkt 1fpkt"];
1444--2666[label="0.996575;291pkt 291fpkt"];
1444--3113[label="1;292pkt 292fpkt"];
1444--3350[label="1;292pkt 292fpkt"];
2666--3113[label="1;526pkt 526fpkt"];
2666--3350[label="1;526pkt 526fpkt"];
3113--3350[label="1;527pkt 527fpkt"];
</description>
    <slice>
      <filter src_ip="154.198.81.234" src_port="25"/>
      <filter dst_port="113" src_ip="154.198.81.234"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.213.140.235"/>
    </slice>
    <from sec="1026018148" usec="0"/>
    <to sec="1026019589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.40.194.235"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="105.56.208.235"/>
    </slice>
    <from sec="1026018004" usec="0"/>
    <to sec="1026018922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.44.34.237"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.88.165.238"/>
    </slice>
    <from sec="1026018067" usec="0"/>
    <to sec="1026019649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.141.183.241"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.148.153.246"/>
    </slice>
    <from sec="1026018012" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.102.165.253"/>
    </slice>
    <from sec="1026018390" usec="0"/>
    <to sec="1026018415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.467317,2.03283,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.212.229.255"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.29.8.7"/>
    </slice>
    <from sec="1026018016" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_404{
style=filled;
color=gray75;
1909[label="216.133.155.7;140pkt 140fpkt", shape=pentagon, color=darkviolet];
2734[label="216.133.155.7;140pkt 140fpkt", shape=invtriangle, color=brown];
3149[label="216.133.155.7;141pkt 141fpkt", shape=invhouse, color=bisque];
stat404[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.133.155.7:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1909--2734[label="1;140pkt 140fpkt"];
1909--3149[label="1;140pkt 140fpkt"];
2734--3149[label="1;140pkt 140fpkt"];
</description>
    <slice>
      <filter src_ip="216.133.155.7"/>
    </slice>
    <from sec="1026018003" usec="0"/>
    <to sec="1026019658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_405{
style=filled;
color=gray75;
1917[label="200.233.238.8;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2738[label="200.233.238.8;2pkt 2fpkt", shape=invtriangle, color=brown];
3150[label="200.233.238.8;2pkt 2fpkt", shape=invhouse, color=bisque];
stat405[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.233.238.8:80, 171.70.143.80:3035}[50%]&lt;BR/&gt;{200.233.238.8:80, 171.70.143.80:3036}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3036: (25%)&lt;BR/&gt; 3035: (25%)&gt;];
}
1917--2738[label="1;2pkt 2fpkt"];
1917--3150[label="1;2pkt 2fpkt"];
2738--3150[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.143.80" dst_port="3036" src_ip="200.233.238.8" src_port="80"/>
      <filter dst_ip="171.70.143.80" dst_port="3035" src_ip="200.233.238.8" src_port="80"/>
    </slice>
    <from sec="1026018866" usec="0"/>
    <to sec="1026018910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.71.237.10"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_407{
style=filled;
color=gray75;
1931[label="154.213.136.13;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2746[label="154.213.136.13;14pkt 14fpkt", shape=invtriangle, color=brown];
stat407[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.136.13:*, 212.68.149.120:80}[57.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8571%)&lt;BR/&gt; 1863: (7.14286%)&lt;BR/&gt; 50042: (3.57143%)&lt;BR/&gt; 50036: (3.57143%)&lt;BR/&gt; 50035: (3.57143%)&gt;];
}
1931--2746[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="212.68.149.120" dst_port="80" src_ip="154.213.136.13"/>
    </slice>
    <from sec="1026018829" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_408{
style=filled;
color=gray75;
770[label="171.70.203.13;s;110pkt 110fpkt", shape=diamond, color=yellow];
1483[label="171.70.203.13;s;82pkt 82fpkt", shape=hexagon, color=black];
1933[label="171.70.203.13;111pkt 111fpkt", shape=pentagon, color=darkviolet];
2748[label="171.70.203.13;110pkt 110fpkt", shape=invtriangle, color=brown];
3153[label="171.70.203.13;111pkt 111fpkt", shape=invhouse, color=bisque];
stat408[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.70.203.13:*, *:8888}[32.4324%]&lt;BR/&gt;{171.70.203.13:*, 62.41.133.152:80}[25.2252%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (16.2214%)&lt;BR/&gt; 80: (12.7863%)&lt;BR/&gt; 7777: (5.62977%)&lt;BR/&gt; 3456: (2.8626%)&lt;BR/&gt; 4444: (2.09924%)&gt;];
}
770--1146[label="0.0818182;9pkt 9fpkt"];
770--1483[label="1;82pkt 82fpkt"];
770--1798[label="0.00909091;1pkt 1fpkt"];
770--1808[label="0.00909091;1pkt 1fpkt"];
770--1815[label="0.00909091;1pkt 1fpkt"];
770--1820[label="0.00909091;1pkt 1fpkt"];
770--1822[label="0.00909091;1pkt 1fpkt"];
770--1828[label="0.00909091;1pkt 1fpkt"];
770--1831[label="0.00909091;1pkt 1fpkt"];
770--1833[label="0.00909091;1pkt 1fpkt"];
770--1844[label="0.00909091;1pkt 1fpkt"];
770--1850[label="0.00909091;1pkt 1fpkt"];
770--1856[label="0.00909091;1pkt 1fpkt"];
770--1860[label="0.00909091;1pkt 1fpkt"];
770--1863[label="0.00909091;1pkt 1fpkt"];
770--1865[label="0.00909091;1pkt 1fpkt"];
770--1873[label="0.00909091;1pkt 1fpkt"];
770--1879[label="0.00909091;1pkt 1fpkt"];
770--1882[label="0.00909091;1pkt 1fpkt"];
770--1933[label="1;110pkt 110fpkt"];
770--2748[label="0.990909;109pkt 109fpkt"];
770--3153[label="1;110pkt 110fpkt"];
1483--1798[label="0.0121951;1pkt 1fpkt"];
1483--1808[label="0.0121951;1pkt 1fpkt"];
1483--1815[label="0.0121951;1pkt 1fpkt"];
1483--1820[label="0.0121951;1pkt 1fpkt"];
1483--1822[label="0.0121951;1pkt 1fpkt"];
1483--1828[label="0.0121951;1pkt 1fpkt"];
1483--1833[label="0.0121951;1pkt 1fpkt"];
1483--1844[label="0.0121951;1pkt 1fpkt"];
1483--1850[label="0.0121951;1pkt 1fpkt"];
1483--1856[label="0.0121951;1pkt 1fpkt"];
1483--1860[label="0.0121951;1pkt 1fpkt"];
1483--1865[label="0.0121951;1pkt 1fpkt"];
1483--1873[label="0.0121951;1pkt 1fpkt"];
1483--1879[label="0.0121951;1pkt 1fpkt"];
1483--1882[label="0.0121951;1pkt 1fpkt"];
1483--1933[label="1;82pkt 82fpkt"];
1483--2748[label="0.987805;81pkt 81fpkt"];
1483--3153[label="1;82pkt 82fpkt"];
1933--2748[label="1;110pkt 110fpkt"];
1933--3153[label="1;111pkt 111fpkt"];
2748--3153[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="171.70.203.13"/>
      <filter dst_ip="62.41.133.152" dst_port="80" src_ip="171.70.203.13"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_409{
style=filled;
color=gray75;
442[label="154.213.27.10;s;517pkt 517fpkt", shape=diamond, color=yellow];
599[label="63.20.233.206;d;51pkt 51fpkt", shape=diamond, color=yellow];
659[label="63.20.233.215;d;36pkt 36fpkt", shape=diamond, color=yellow];
1153[label="157.149.16.16;s;49pkt 49fpkt", shape=diamond, color=yellow];
1316[label="154.213.27.10;s;119pkt 119fpkt", shape=hexagon, color=black];
1941[label="157.149.16.16;49pkt 49fpkt", shape=pentagon, color=darkviolet];
2247[label="157.149.28.103;23pkt 23fpkt", shape=pentagon, color=darkviolet];
2331[label="157.149.144.131;26pkt 26fpkt", shape=pentagon, color=darkviolet];
2383[label="133.19.230.144;40pkt 40fpkt", shape=pentagon, color=darkviolet];
2754[label="157.149.16.16;48pkt 48fpkt", shape=invtriangle, color=brown];
2899[label="157.149.28.103;24pkt 24fpkt", shape=invtriangle, color=brown];
2966[label="133.19.230.144;40pkt 40fpkt", shape=invtriangle, color=brown];
3157[label="157.149.16.16;48pkt 48fpkt", shape=invhouse, color=bisque];
3236[label="157.149.28.103;23pkt 23fpkt", shape=invhouse, color=bisque];
3273[label="133.19.230.144;41pkt 41fpkt", shape=invhouse, color=bisque];
stat409[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.27.10:*, *:25}[53.8147%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.9735%)&lt;BR/&gt; 110: (2.91005%)&lt;BR/&gt; 113: (1.14638%)&lt;BR/&gt; 1027: (0.881834%)&lt;BR/&gt; 53: (0.881834%)&gt;];
}
442--599[label="0.0196078;1pkt 1fpkt"];
442--614[label="0.0598291;7pkt 7fpkt"];
442--1124[label="0.0357143;1pkt 1fpkt"];
442--1316[label="1;119pkt 119fpkt"];
599--1153[label="0.0204082;1pkt 1fpkt"];
599--1316[label="0.0196078;1pkt 1fpkt"];
599--1596[label="0.882353;45pkt 45fpkt"];
599--1941[label="0.0204082;1pkt 1fpkt"];
599--2331[label="0.0384615;1pkt 1fpkt"];
599--2383[label="0.075;3pkt 3fpkt"];
599--2754[label="0.0208333;1pkt 1fpkt"];
599--2966[label="0.075;3pkt 3fpkt"];
599--3157[label="0.0208333;1pkt 1fpkt"];
599--3273[label="0.0731707;3pkt 3fpkt"];
659--1153[label="0.0277778;1pkt 1fpkt"];
659--1596[label="0.888889;32pkt 32fpkt"];
659--1941[label="0.0277778;1pkt 1fpkt"];
659--2247[label="0.0434783;1pkt 1fpkt"];
659--2383[label="0.0555556;2pkt 2fpkt"];
659--2754[label="0.0277778;1pkt 1fpkt"];
659--2899[label="0.0416667;1pkt 1fpkt"];
659--2966[label="0.0555556;2pkt 2fpkt"];
659--3157[label="0.0277778;1pkt 1fpkt"];
659--3236[label="0.0434783;1pkt 1fpkt"];
659--3273[label="0.0555556;2pkt 2fpkt"];
1153--1941[label="1;49pkt 49fpkt"];
1153--2754[label="1;48pkt 48fpkt"];
1153--3157[label="1;48pkt 48fpkt"];
1941--2754[label="1;48pkt 48fpkt"];
1941--3157[label="1;48pkt 48fpkt"];
2247--2899[label="1;23pkt 23fpkt"];
2247--3236[label="1;23pkt 23fpkt"];
2383--2966[label="1;40pkt 40fpkt"];
2383--3273[label="1;40pkt 40fpkt"];
2754--3157[label="1;48pkt 48fpkt"];
2899--3236[label="1;23pkt 23fpkt"];
2966--3273[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="154.213.27.10"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.187.154.19"/>
    </slice>
    <from sec="1026019589" usec="0"/>
    <to sec="1026019605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="173.138.232.20"/>
    </slice>
    <from sec="1026018019" usec="0"/>
    <to sec="1026019646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_412{
style=filled;
color=gray75;
1964[label="133.19.217.22;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2765[label="133.19.217.22;22pkt 22fpkt", shape=invtriangle, color=brown];
stat412[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.217.22:*, 62.90.17.11:80}[40.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.186%)&lt;BR/&gt; 5190: (4.65116%)&lt;BR/&gt; 1051: (4.65116%)&lt;BR/&gt; 1043: (4.65116%)&lt;BR/&gt; 1039: (4.65116%)&gt;];
}
1964--2765[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="62.90.17.11" dst_port="80" src_ip="133.19.217.22"/>
    </slice>
    <from sec="1026019634" usec="0"/>
    <to sec="1026019662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_413{
style=filled;
color=gray75;
1982[label="206.190.34.27;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2772[label="206.190.34.27;4pkt 4fpkt", shape=invtriangle, color=brown];
stat413[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.190.34.27:80, 157.149.178.168:1385}[25%]&lt;BR/&gt;{206.190.34.27:80, 157.149.178.168:1386}[25%]&lt;BR/&gt;{206.190.34.27:80, 157.149.178.168:1472}[25%]&lt;BR/&gt;{206.190.34.27:80, 157.149.178.168:1476}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1476: (14.2857%)&lt;BR/&gt; 1472: (14.2857%)&lt;BR/&gt; 1386: (14.2857%)&lt;BR/&gt; 1385: (7.14286%)&gt;];
}
1982--2772[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.178.168" dst_port="1476" src_ip="206.190.34.27" src_port="80"/>
      <filter dst_ip="157.149.178.168" dst_port="1472" src_ip="206.190.34.27" src_port="80"/>
      <filter dst_ip="157.149.178.168" dst_port="1386" src_ip="206.190.34.27" src_port="80"/>
      <filter dst_ip="157.149.178.168" dst_port="1385" src_ip="206.190.34.27" src_port="80"/>
    </slice>
    <from sec="1026018984" usec="0"/>
    <to sec="1026019510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_414{
style=filled;
color=gray75;
1993[label="208.64.33.29;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2777[label="208.64.33.29;2pkt 2fpkt", shape=invtriangle, color=brown];
3171[label="208.64.33.29;1pkt 1fpkt", shape=invhouse, color=bisque];
stat414[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.64.33.29:80, 209.201.229.18:1135}[50%]&lt;BR/&gt;{208.64.33.29:80, 209.201.229.18:1136}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1136: (30%)&lt;BR/&gt; 1135: (20%)&gt;];
}
1993--2777[label="1;2pkt 2fpkt"];
1993--3171[label="1;1pkt 1fpkt"];
2777--3171[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.201.229.18" dst_port="1136" src_ip="208.64.33.29" src_port="80"/>
      <filter dst_ip="209.201.229.18" dst_port="1135" src_ip="208.64.33.29" src_port="80"/>
    </slice>
    <from sec="1026018812" usec="0"/>
    <to sec="1026018840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_415{
style=filled;
color=gray75;
1996[label="133.19.92.29;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2778[label="133.19.92.29;15pkt 15fpkt", shape=invtriangle, color=brown];
3172[label="133.19.92.29;14pkt 14fpkt", shape=invhouse, color=bisque];
stat415[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.92.29:*, 159.44.138.149:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49166: (3.40909%)&lt;BR/&gt; 49165: (3.40909%)&lt;BR/&gt; 49164: (3.40909%)&lt;BR/&gt; 49163: (3.40909%)&gt;];
}
1996--2778[label="1;15pkt 15fpkt"];
1996--3172[label="1;14pkt 14fpkt"];
2778--3172[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="159.44.138.149" dst_port="80" src_ip="133.19.92.29"/>
    </slice>
    <from sec="1026018598" usec="0"/>
    <to sec="1026018607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
2011[label="209.201.228.32;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2787[label="209.201.228.32;18pkt 18fpkt", shape=invtriangle, color=brown];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.228.32:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2011--2787[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="209.201.228.32"/>
    </slice>
    <from sec="1026018206" usec="0"/>
    <to sec="1026019657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_417{
style=filled;
color=gray75;
874[label="154.213.41.33;s;60pkt 60fpkt", shape=diamond, color=yellow];
2013[label="154.213.41.33;63pkt 63fpkt", shape=pentagon, color=darkviolet];
2788[label="154.213.41.33;63pkt 63fpkt", shape=invtriangle, color=brown];
3177[label="154.213.41.33;62pkt 62fpkt", shape=invhouse, color=bisque];
stat417[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.41.33:*, 194.106.196.77:80}[41.2698%]&lt;BR/&gt;{154.213.41.33:*, 215.124.63.236:80}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1935%)&lt;BR/&gt; 8080: (0.806452%)&lt;BR/&gt; 1197: (0.806452%)&lt;BR/&gt; 1196: (0.806452%)&lt;BR/&gt; 1195: (0.806452%)&gt;];
}
874--1822[label="0.2;12pkt 12fpkt"];
874--2013[label="1;60pkt 60fpkt"];
874--2788[label="1;60pkt 60fpkt"];
874--3177[label="0.983333;59pkt 59fpkt"];
2013--2788[label="1;63pkt 63fpkt"];
2013--3177[label="1;62pkt 62fpkt"];
2788--3177[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="194.106.196.77" dst_port="80" src_ip="154.213.41.33"/>
      <filter dst_ip="215.124.63.236" dst_port="80" src_ip="154.213.41.33"/>
    </slice>
    <from sec="1026018004" usec="0"/>
    <to sec="1026018901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_418{
style=filled;
color=gray75;
1096[label="133.19.74.33;s;22pkt 22fpkt", shape=diamond, color=yellow];
2015[label="133.19.74.33;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2790[label="133.19.74.33;22pkt 22fpkt", shape=invtriangle, color=brown];
3178[label="133.19.74.33;22pkt 22fpkt", shape=invhouse, color=bisque];
stat418[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.74.33:*, 131.95.225.40:8888}[40.9091%]&lt;BR/&gt;{133.19.74.33:*, 201.237.43.197:8888}[40.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (43.1818%)&lt;BR/&gt; 6699: (2.27273%)&lt;BR/&gt; 6680: (2.27273%)&lt;BR/&gt; 4617: (2.27273%)&lt;BR/&gt; 2453: (2.27273%)&gt;];
}
1096--2015[label="1;22pkt 22fpkt"];
1096--2790[label="1;22pkt 22fpkt"];
1096--3178[label="1;22pkt 22fpkt"];
2015--2790[label="1;22pkt 22fpkt"];
2015--3178[label="1;22pkt 22fpkt"];
2790--3178[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="201.237.43.197" dst_port="8888" src_ip="133.19.74.33"/>
      <filter dst_ip="131.95.225.40" dst_port="8888" src_ip="133.19.74.33"/>
    </slice>
    <from sec="1026018010" usec="0"/>
    <to sec="1026019661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.28.51.34"/>
    </slice>
    <from sec="1026018029" usec="0"/>
    <to sec="1026019649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611097,1.9521,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_420{
style=filled;
color=gray75;
898[label="133.19.229.36;s;61pkt 61fpkt", shape=diamond, color=yellow];
2023[label="133.19.229.36;62pkt 62fpkt", shape=pentagon, color=darkviolet];
2795[label="133.19.229.36;62pkt 62fpkt", shape=invtriangle, color=brown];
stat420[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.229.36:25, *:*}[61.2903%]&lt;BR/&gt;{133.19.229.36:0, *:0}[38.7097%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (38.9189%)&lt;BR/&gt; 25: (30.5405%)&lt;BR/&gt; 64830: (0.810811%)&lt;BR/&gt; 62997: (0.810811%)&lt;BR/&gt; 62442: (0.810811%)&gt;];
}
898--2023[label="1;61pkt 61fpkt"];
898--2795[label="1;61pkt 61fpkt"];
2023--2795[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter src_ip="133.19.229.36" src_port="25"/>
      <filter src_ip="133.19.229.36"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.48.5.37"/>
    </slice>
    <from sec="1026018041" usec="0"/>
    <to sec="1026019642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
2043[label="209.201.231.44;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2805[label="209.201.231.44;17pkt 17fpkt", shape=invtriangle, color=brown];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.231.44:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2043--2805[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="209.201.231.44"/>
    </slice>
    <from sec="1026018154" usec="0"/>
    <to sec="1026019392" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.712811,1.89934,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
137[label="173.138.195.173;d;85pkt 85fpkt", shape=diamond, color=yellow];
158[label="173.138.194.119;d;366pkt 366fpkt", shape=diamond, color=yellow];
212[label="173.138.194.118;d;285pkt 285fpkt", shape=diamond, color=yellow];
511[label="208.77.224.47;s;2025pkt 2025fpkt", shape=diamond, color=yellow];
579[label="173.138.194.99;d;254pkt 254fpkt", shape=diamond, color=yellow];
1016[label="201.50.14.247;d;9pkt 9fpkt", shape=diamond, color=yellow];
1231[label="62.171.39.7;d;3pkt 3fpkt", shape=diamond, color=yellow];
1323[label="173.138.194.118;d;74pkt 74fpkt", shape=hexagon, color=black];
1416[label="60.196.114.241;d;2pkt 2fpkt", shape=hexagon, color=black];
1476[label="173.138.194.99;d;128pkt 128fpkt", shape=hexagon, color=black];
1607[label="201.50.14.247;d;9pkt 9fpkt", shape=hexagon, color=black];
2059[label="208.77.224.47;2158pkt 2158fpkt", shape=pentagon, color=darkviolet];
2811[label="208.77.224.47;2159pkt 2159fpkt", shape=invtriangle, color=brown];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.77.224.47:*, *:80}[52.7778%]&lt;BR/&gt;{208.77.224.47:8080, *:*}[46.713%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (27.4448%)&lt;BR/&gt; 80: (22.3171%)&lt;BR/&gt; 3130: (0.23819%)&lt;BR/&gt; 2083: (0.086013%)&lt;BR/&gt; 2043: (0.086013%)&gt;];
}
137--511[label="1;85pkt 85fpkt"];
137--1809[label="0.0117647;1pkt 1fpkt"];
137--1845[label="0.0117647;1pkt 1fpkt"];
137--1866[label="0.0117647;1pkt 1fpkt"];
137--1874[label="0.0117647;1pkt 1fpkt"];
137--2059[label="1;85pkt 85fpkt"];
137--2811[label="1;85pkt 85fpkt"];
158--511[label="0.964481;353pkt 353fpkt"];
158--2059[label="1;366pkt 366fpkt"];
158--2811[label="1;366pkt 366fpkt"];
212--511[label="0.912281;260pkt 260fpkt"];
212--1323[label="1;74pkt 74fpkt"];
212--2059[label="1;285pkt 285fpkt"];
212--2811[label="1;285pkt 285fpkt"];
511--579[label="0.984252;250pkt 250fpkt"];
511--608[label="0.0724638;5pkt 5fpkt"];
511--653[label="0.666667;2pkt 2fpkt"];
511--731[label="0.00456621;1pkt 1fpkt"];
511--798[label="1;87pkt 87fpkt"];
511--851[label="1;43pkt 43fpkt"];
511--896[label="0.319328;38pkt 38fpkt"];
511--1016[label="1;9pkt 9fpkt"];
511--1095[label="0.473684;27pkt 27fpkt"];
511--1231[label="1;3pkt 3fpkt"];
511--1323[label="1;74pkt 74fpkt"];
511--1416[label="0.5;1pkt 1fpkt"];
511--1425[label="0.0724638;5pkt 5fpkt"];
511--1455[label="0.00462963;1pkt 1fpkt"];
511--1476[label="1;128pkt 128fpkt"];
511--1607[label="1;9pkt 9fpkt"];
511--1645[label="0.25;1pkt 1fpkt"];
511--1762[label="0.0588235;4pkt 4fpkt"];
511--1798[label="0.0237037;48pkt 48fpkt"];
511--1808[label="0.0330864;67pkt 67fpkt"];
511--1809[label="0.00092081;1pkt 1fpkt"];
511--1815[label="0.0197531;40pkt 40fpkt"];
511--1820[label="0.025679;52pkt 52fpkt"];
511--1822[label="0.0241975;49pkt 49fpkt"];
511--1828[label="0.0202469;41pkt 41fpkt"];
511--1831[label="0.00888889;18pkt 18fpkt"];
511--1833[label="0.0237037;48pkt 48fpkt"];
511--1844[label="0.0330864;67pkt 67fpkt"];
511--1845[label="0.00092081;1pkt 1fpkt"];
511--1850[label="0.0197531;40pkt 40fpkt"];
511--1856[label="0.025679;52pkt 52fpkt"];
511--1860[label="0.0202469;41pkt 41fpkt"];
511--1863[label="0.00888889;18pkt 18fpkt"];
511--1865[label="0.0237037;48pkt 48fpkt"];
511--1866[label="0.00093633;1pkt 1fpkt"];
511--1873[label="0.0330864;67pkt 67fpkt"];
511--1874[label="0.00092081;1pkt 1fpkt"];
511--1879[label="0.0197531;40pkt 40fpkt"];
511--1882[label="0.025679;52pkt 52fpkt"];
511--2059[label="0.999506;2024pkt 2024fpkt"];
511--2811[label="1;2025pkt 2025fpkt"];
579--1476[label="1;128pkt 128fpkt"];
579--2059[label="1;254pkt 254fpkt"];
579--2811[label="1;254pkt 254fpkt"];
1016--1607[label="1;9pkt 9fpkt"];
1016--1808[label="0.111111;1pkt 1fpkt"];
1016--1815[label="0.111111;1pkt 1fpkt"];
1016--1820[label="0.111111;1pkt 1fpkt"];
1016--1822[label="0.111111;1pkt 1fpkt"];
1016--1844[label="0.111111;1pkt 1fpkt"];
1016--1850[label="0.111111;1pkt 1fpkt"];
1016--1856[label="0.111111;1pkt 1fpkt"];
1016--1873[label="0.111111;1pkt 1fpkt"];
1016--1879[label="0.111111;1pkt 1fpkt"];
1016--1882[label="0.111111;1pkt 1fpkt"];
1016--2059[label="1;9pkt 9fpkt"];
1016--2811[label="1;9pkt 9fpkt"];
1231--1822[label="0.333333;1pkt 1fpkt"];
1231--1828[label="0.333333;1pkt 1fpkt"];
1231--1831[label="0.333333;1pkt 1fpkt"];
1231--1860[label="0.333333;1pkt 1fpkt"];
1231--1863[label="0.333333;1pkt 1fpkt"];
1231--2059[label="1;3pkt 3fpkt"];
1231--2811[label="1;3pkt 3fpkt"];
1323--2059[label="1;74pkt 74fpkt"];
1323--2811[label="1;74pkt 74fpkt"];
1416--2059[label="0.5;1pkt 1fpkt"];
1416--2811[label="0.5;1pkt 1fpkt"];
1476--2059[label="1;128pkt 128fpkt"];
1476--2811[label="1;128pkt 128fpkt"];
1607--1808[label="0.111111;1pkt 1fpkt"];
1607--1815[label="0.111111;1pkt 1fpkt"];
1607--1820[label="0.111111;1pkt 1fpkt"];
1607--1822[label="0.111111;1pkt 1fpkt"];
1607--1844[label="0.111111;1pkt 1fpkt"];
1607--1850[label="0.111111;1pkt 1fpkt"];
1607--1856[label="0.111111;1pkt 1fpkt"];
1607--1873[label="0.111111;1pkt 1fpkt"];
1607--1879[label="0.111111;1pkt 1fpkt"];
1607--1882[label="0.111111;1pkt 1fpkt"];
1607--2059[label="1;9pkt 9fpkt"];
1607--2811[label="1;9pkt 9fpkt"];
2059--2811[label="1;2158pkt 2158fpkt"];
</description>
    <slice>
      <filter src_ip="208.77.224.47" src_port="8080"/>
      <filter dst_port="80" src_ip="208.77.224.47"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.46.154.49"/>
    </slice>
    <from sec="1026018016" usec="0"/>
    <to sec="1026019590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_425{
style=filled;
color=gray75;
2080[label="206.40.26.54;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2822[label="206.40.26.54;2pkt 2fpkt", shape=invtriangle, color=brown];
stat425[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.40.26.54:1979, 133.19.72.146:6699}[50%]&lt;BR/&gt;{206.40.26.54:6257, 133.19.72.146:6257}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (50%)&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 1979: (25%)&gt;];
}
2080--2822[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.72.146" dst_port="6257" src_ip="206.40.26.54" src_port="6257"/>
      <filter dst_ip="133.19.72.146" dst_port="6699" src_ip="206.40.26.54" src_port="1979"/>
    </slice>
    <from sec="1026019094" usec="0"/>
    <to sec="1026019274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_426{
style=filled;
color=gray75;
2084[label="209.201.230.54;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2824[label="209.201.230.54;22pkt 22fpkt", shape=invtriangle, color=brown];
stat426[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.230.54:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2084--2824[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="209.201.230.54"/>
    </slice>
    <from sec="1026018070" usec="0"/>
    <to sec="1026019522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_427{
style=filled;
color=gray75;
2103[label="216.55.181.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2832[label="216.55.181.60;1pkt 1fpkt", shape=invtriangle, color=brown];
stat427[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.55.181.60:23, 154.198.77.84:1042}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1042: (50%)&lt;BR/&gt; 23: (50%)&gt;];
}
2103--2832[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="154.198.77.84" dst_port="1042" src_ip="216.55.181.60" src_port="23"/>
    </slice>
    <from sec="1026018784" usec="0"/>
    <to sec="1026019280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_428{
style=filled;
color=gray75;
2113[label="157.149.36.63;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2836[label="157.149.36.63;1pkt 1fpkt", shape=invtriangle, color=brown];
3200[label="157.149.36.63;1pkt 1fpkt", shape=invhouse, color=bisque];
stat428[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.149.36.63:8197, 204.38.181.205:8194}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8197: (50%)&lt;BR/&gt; 8194: (50%)&gt;];
}
2113--2836[label="1;1pkt 1fpkt"];
2113--3200[label="1;1pkt 1fpkt"];
2836--3200[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.38.181.205" dst_port="8194" src_ip="157.149.36.63" src_port="8197"/>
    </slice>
    <from sec="1026018031" usec="0"/>
    <to sec="1026019655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
2127[label="208.77.245.66;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2843[label="208.77.245.66;21pkt 21fpkt", shape=invtriangle, color=brown];
3203[label="208.77.245.66;21pkt 21fpkt", shape=invhouse, color=bisque];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.77.245.66:0, *:0}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.2381%)&lt;BR/&gt; 58880: (2.38095%)&lt;BR/&gt; 80: (2.38095%)&gt;];
}
2127--2843[label="1;21pkt 21fpkt"];
2127--3203[label="1;21pkt 21fpkt"];
2843--3203[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="208.77.245.66"/>
    </slice>
    <from sec="1026018012" usec="0"/>
    <to sec="1026019171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.148.127.68"/>
    </slice>
    <from sec="1026018019" usec="0"/>
    <to sec="1026019658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_431{
style=filled;
color=gray75;
2136[label="133.19.229.68;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2847[label="133.19.229.68;22pkt 22fpkt", shape=invtriangle, color=brown];
stat431[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.229.68:0, *:0}[54.5455%]&lt;BR/&gt;{133.19.229.68:21, *:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (54.5455%)&lt;BR/&gt; 21: (11.3636%)&lt;BR/&gt; 63100: (2.27273%)&lt;BR/&gt; 63095: (2.27273%)&lt;BR/&gt; 61733: (2.27273%)&gt;];
}
2136--2847[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="133.19.229.68" src_port="21"/>
      <filter src_ip="133.19.229.68"/>
    </slice>
    <from sec="1026018052" usec="0"/>
    <to sec="1026019409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.148.127.70"/>
    </slice>
    <from sec="1026018019" usec="0"/>
    <to sec="1026019658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.763503,1.93656,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_433{
style=filled;
color=gray75;
556[label="62.53.163.71;s;31pkt 31fpkt", shape=diamond, color=yellow];
1104[label="133.19.173.159;d;83pkt 83fpkt", shape=diamond, color=yellow];
1110[label="62.82.240.163;s;53pkt 53fpkt", shape=diamond, color=yellow];
1662[label="62.82.240.163;s;41pkt 41fpkt", shape=hexagon, color=black];
2853[label="62.53.163.71;50pkt 50fpkt", shape=invtriangle, color=brown];
stat433[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.82.240.163:80, 133.19.173.159:*}[39.8496%]&lt;BR/&gt;{62.53.163.71:80, *:*}[38.3459%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8062%)&lt;BR/&gt; 2695: (0.775194%)&lt;BR/&gt; 2776: (0.581395%)&lt;BR/&gt; 2726: (0.581395%)&lt;BR/&gt; 2723: (0.581395%)&gt;];
}
556--1104[label="0.0322581;1pkt 1fpkt"];
556--1819[label="0.0322581;1pkt 1fpkt"];
556--1855[label="0.0322581;1pkt 1fpkt"];
556--1881[label="0.0322581;1pkt 1fpkt"];
556--2148[label="1;31pkt 31fpkt"];
556--2853[label="0.967742;30pkt 30fpkt"];
1104--1110[label="1;53pkt 53fpkt"];
1104--1662[label="1;41pkt 41fpkt"];
1104--1997[label="0.219512;9pkt 9fpkt"];
1104--2148[label="0.0196078;1pkt 1fpkt"];
1104--2327[label="0.117647;2pkt 2fpkt"];
1104--2357[label="0.166667;9pkt 9fpkt"];
1104--2594[label="0.166667;1pkt 1fpkt"];
1104--2657[label="0.125;3pkt 3fpkt"];
1104--2779[label="0.219512;9pkt 9fpkt"];
1104--2853[label="0.02;1pkt 1fpkt"];
1104--2944[label="0.125;2pkt 2fpkt"];
1104--3079[label="0.166667;1pkt 1fpkt"];
1104--3110[label="0.125;3pkt 3fpkt"];
1104--3173[label="0.219512;9pkt 9fpkt"];
1104--3258[label="0.117647;2pkt 2fpkt"];
1104--3333[label="0.166667;1pkt 1fpkt"];
1104--3348[label="0.12;3pkt 3fpkt"];
1110--1662[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter src_ip="62.53.163.71" src_port="80"/>
      <filter dst_ip="133.19.173.159" src_ip="62.82.240.163" src_port="80"/>
    </slice>
    <from sec="1026018044" usec="0"/>
    <to sec="1026019602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.169.201.80"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.712811,1.89934,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_435{
style=filled;
color=gray75;
977[label="112.189.188.81;s;13pkt 13fpkt", shape=diamond, color=yellow];
1103[label="133.19.64.190;d;2pkt 2fpkt", shape=diamond, color=yellow];
1706[label="133.19.64.190;d;2pkt 2fpkt", shape=hexagon, color=black];
2186[label="112.189.188.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2868[label="112.189.188.81;1pkt 1fpkt", shape=invtriangle, color=brown];
stat435[shape=component, label=&lt;Rules:&lt;BR/&gt;{112.189.188.81:80, 133.19.229.19:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.5789%)&lt;BR/&gt; 3882: (13.1579%)&lt;BR/&gt; 1995: (13.1579%)&lt;BR/&gt; 2756: (5.26316%)&lt;BR/&gt; 23: (5.26316%)&gt;];
}
977--1103[label="0.5;1pkt 1fpkt"];
977--1706[label="0.5;1pkt 1fpkt"];
977--2186[label="1;1pkt 1fpkt"];
977--2868[label="1;1pkt 1fpkt"];
1103--1706[label="1;2pkt 2fpkt"];
1103--2186[label="1;1pkt 1fpkt"];
1103--2868[label="1;1pkt 1fpkt"];
1706--2186[label="1;1pkt 1fpkt"];
1706--2868[label="1;1pkt 1fpkt"];
2186--2868[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.229.19" src_ip="112.189.188.81" src_port="80"/>
    </slice>
    <from sec="1026018792" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_436{
style=filled;
color=gray75;
2190[label="209.201.224.82;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2870[label="209.201.224.82;16pkt 16fpkt", shape=invtriangle, color=brown];
stat436[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.224.82:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2190--2870[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="209.201.224.82"/>
    </slice>
    <from sec="1026018121" usec="0"/>
    <to sec="1026019422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
2196[label="171.70.143.85;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2873[label="171.70.143.85;25pkt 25fpkt", shape=invtriangle, color=brown];
3222[label="171.70.143.85;25pkt 25fpkt", shape=invhouse, color=bisque];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.70.143.85:*, 63.27.6.195:80}[84%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6216%)&lt;BR/&gt; 1863: (2.02703%)&lt;BR/&gt; 1249: (2.02703%)&lt;BR/&gt; 1248: (2.02703%)&lt;BR/&gt; 1233: (2.02703%)&gt;];
}
2196--2873[label="1;24pkt 24fpkt"];
2196--3222[label="1;24pkt 24fpkt"];
2873--3222[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="63.27.6.195" dst_port="80" src_ip="171.70.143.85"/>
    </slice>
    <from sec="1026018154" usec="0"/>
    <to sec="1026019617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.238.104.87"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_439{
style=filled;
color=gray75;
2207[label="36.148.66.89;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2879[label="36.148.66.89;3pkt 3fpkt", shape=invtriangle, color=brown];
stat439[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.148.66.89:4662, 171.70.172.233:3245}[33.3333%]&lt;BR/&gt;{36.148.66.89:4662, 171.70.172.233:4294}[33.3333%]&lt;BR/&gt;{36.148.66.89:4662, 171.70.172.233:4403}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 4403: (20%)&lt;BR/&gt; 4294: (20%)&lt;BR/&gt; 3245: (10%)&gt;];
}
2207--2879[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.172.233" dst_port="4403" src_ip="36.148.66.89" src_port="4662"/>
      <filter dst_ip="171.70.172.233" dst_port="4294" src_ip="36.148.66.89" src_port="4662"/>
      <filter dst_ip="171.70.172.233" dst_port="3245" src_ip="36.148.66.89" src_port="4662"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_440{
style=filled;
color=gray75;
2208[label="194.4.160.89;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2880[label="194.4.160.89;13pkt 13fpkt", shape=invtriangle, color=brown];
stat440[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.4.160.89:80, 157.149.64.77:*}[53.8462%]&lt;BR/&gt;{194.4.160.89:80, 154.213.136.54:*}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62375: (3.84615%)&lt;BR/&gt; 62374: (3.84615%)&lt;BR/&gt; 62373: (3.84615%)&lt;BR/&gt; 62372: (3.84615%)&gt;];
}
2208--2880[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.64.77" src_ip="194.4.160.89" src_port="80"/>
      <filter dst_ip="154.213.136.54" src_ip="194.4.160.89" src_port="80"/>
    </slice>
    <from sec="1026018675" usec="0"/>
    <to sec="1026019660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.202.151.90"/>
    </slice>
    <from sec="1026018007" usec="0"/>
    <to sec="1026019427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_442{
style=filled;
color=gray75;
2218[label="207.245.199.93;59pkt 59fpkt", shape=pentagon, color=darkviolet];
2886[label="207.245.199.93;58pkt 58fpkt", shape=invtriangle, color=brown];
stat442[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.245.199.93:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 35455: (0.854701%)&lt;BR/&gt; 35351: (0.854701%)&lt;BR/&gt; 35306: (0.854701%)&lt;BR/&gt; 35212: (0.854701%)&gt;];
}
2218--2886[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="207.245.199.93"/>
    </slice>
    <from sec="1026018012" usec="0"/>
    <to sec="1026019662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_443{
style=filled;
color=gray75;
2226[label="208.246.206.96;49pkt 49fpkt", shape=pentagon, color=darkviolet];
2888[label="208.246.206.96;48pkt 48fpkt", shape=invtriangle, color=brown];
stat443[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.246.206.96:*, 217.70.197.253:113}[42.8571%]&lt;BR/&gt;{208.246.206.96:25, 217.70.197.253:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (28.3505%)&lt;BR/&gt; 113: (21.6495%)&lt;BR/&gt; 41526: (1.03093%)&lt;BR/&gt; 41523: (1.03093%)&lt;BR/&gt; 41508: (1.03093%)&gt;];
}
2226--2888[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="217.70.197.253" src_ip="208.246.206.96" src_port="25"/>
      <filter dst_ip="217.70.197.253" dst_port="113" src_ip="208.246.206.96"/>
    </slice>
    <from sec="1026018120" usec="0"/>
    <to sec="1026019628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.244.86.98"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.2.176.98"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026018268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="105.32.64.100"/>
    </slice>
    <from sec="1026018020" usec="0"/>
    <to sec="1026019643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
2251[label="171.70.136.104;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2901[label="171.70.136.104;12pkt 12fpkt", shape=invtriangle, color=brown];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.70.136.104:*, 212.26.135.129:80}[66.6667%]&lt;BR/&gt;{171.70.136.104:*, 212.26.205.249:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2223: (4.16667%)&lt;BR/&gt; 2221: (4.16667%)&lt;BR/&gt; 2218: (4.16667%)&lt;BR/&gt; 2217: (4.16667%)&gt;];
}
2251--2901[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="212.26.135.129" dst_port="80" src_ip="171.70.136.104"/>
      <filter dst_ip="212.26.205.249" dst_port="80" src_ip="171.70.136.104"/>
    </slice>
    <from sec="1026018288" usec="0"/>
    <to sec="1026019441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="160.248.76.106"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_449{
style=filled;
color=gray75;
2265[label="216.145.238.107;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2909[label="216.145.238.107;20pkt 20fpkt", shape=invtriangle, color=brown];
stat449[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.145.238.107:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2265--2909[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="216.145.238.107"/>
    </slice>
    <from sec="1026018046" usec="0"/>
    <to sec="1026019663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="157.149.204.109"/>
    </slice>
    <from sec="1026018007" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,502,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_451{
style=filled;
color=gray75;
2282[label="209.201.227.111;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2918[label="209.201.227.111;2pkt 2fpkt", shape=invtriangle, color=brown];
3242[label="209.201.227.111;2pkt 2fpkt", shape=invhouse, color=bisque];
stat451[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.227.111:22, 74.24.22.160:1347}[50%]&lt;BR/&gt;{209.201.227.111:80, 222.162.32.203:32962}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32962: (25%)&lt;BR/&gt; 1347: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 22: (25%)&gt;];
}
2282--2918[label="1;2pkt 2fpkt"];
2282--3242[label="1;2pkt 2fpkt"];
2918--3242[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="222.162.32.203" dst_port="32962" src_ip="209.201.227.111" src_port="80"/>
      <filter dst_ip="74.24.22.160" dst_port="1347" src_ip="209.201.227.111" src_port="22"/>
    </slice>
    <from sec="1026018664" usec="0"/>
    <to sec="1026019569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
161[label="209.201.242.25;d;6pkt 6fpkt", shape=diamond, color=yellow];
162[label="192.2.176.113;s;5pkt 5fpkt", shape=diamond, color=yellow];
291[label="192.2.176.100;s;2pkt 2fpkt", shape=diamond, color=yellow];
294[label="133.19.154.203;d;13pkt 13fpkt", shape=diamond, color=yellow];
295[label="192.2.176.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
677[label="192.2.176.112;s;1pkt 1fpkt", shape=diamond, color=yellow];
808[label="192.2.176.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
1400[label="192.2.176.113;s;5pkt 5fpkt", shape=hexagon, color=black];
1440[label="133.19.154.203;d;13pkt 13fpkt", shape=hexagon, color=black];
1714[label="209.201.242.25;d;6pkt 6fpkt", shape=hexagon, color=black];
1730[label="192.2.176.112;s;1pkt 1fpkt", shape=hexagon, color=black];
2285[label="192.2.176.112;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2287[label="192.2.176.113;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2919[label="192.2.176.112;4pkt 4fpkt", shape=invtriangle, color=brown];
2921[label="192.2.176.113;2pkt 2fpkt", shape=invtriangle, color=brown];
3244[label="192.2.176.113;2pkt 2fpkt", shape=invhouse, color=bisque];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:5001, 133.19.154.203:*}[36.8421%]&lt;BR/&gt;{*:5001, 209.201.242.25:*}[31.5789%]&lt;BR/&gt;{192.2.176.113:5001, *:*}[26.3158%]&lt;BR/&gt;{192.2.176.112:5001, *:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (41.0448%)&lt;BR/&gt; 1254: (5.22388%)&lt;BR/&gt; 1052: (5.22388%)&lt;BR/&gt; 1230: (4.47761%)&lt;BR/&gt; 7431: (2.98507%)&gt;];
}
161--162[label="0.6;3pkt 3fpkt"];
161--291[label="1;2pkt 2fpkt"];
161--1400[label="0.6;3pkt 3fpkt"];
161--1714[label="1;6pkt 6fpkt"];
161--2287[label="1;2pkt 2fpkt"];
161--2919[label="0.25;1pkt 1fpkt"];
161--2921[label="1;2pkt 2fpkt"];
161--3244[label="1;2pkt 2fpkt"];
162--294[label="0.4;2pkt 2fpkt"];
162--1400[label="1;5pkt 5fpkt"];
162--1440[label="0.4;2pkt 2fpkt"];
162--1714[label="0.6;3pkt 3fpkt"];
162--2287[label="1;2pkt 2fpkt"];
162--2921[label="1;2pkt 2fpkt"];
162--3244[label="1;2pkt 2fpkt"];
291--1714[label="1;2pkt 2fpkt"];
294--295[label="1;1pkt 1fpkt"];
294--677[label="1;1pkt 1fpkt"];
294--808[label="1;1pkt 1fpkt"];
294--1400[label="0.4;2pkt 2fpkt"];
294--1440[label="1;13pkt 13fpkt"];
294--1730[label="1;1pkt 1fpkt"];
294--2285[label="1;3pkt 3fpkt"];
294--2919[label="0.75;3pkt 3fpkt"];
295--1440[label="1;1pkt 1fpkt"];
677--1440[label="1;1pkt 1fpkt"];
677--1730[label="1;1pkt 1fpkt"];
677--2285[label="1;1pkt 1fpkt"];
677--2919[label="1;1pkt 1fpkt"];
808--1440[label="1;1pkt 1fpkt"];
1400--1440[label="0.4;2pkt 2fpkt"];
1400--1714[label="0.6;3pkt 3fpkt"];
1400--2287[label="1;2pkt 2fpkt"];
1400--2921[label="1;2pkt 2fpkt"];
1400--3244[label="1;2pkt 2fpkt"];
1440--1730[label="1;1pkt 1fpkt"];
1440--2285[label="1;3pkt 3fpkt"];
1440--2919[label="0.75;3pkt 3fpkt"];
1714--2287[label="1;2pkt 2fpkt"];
1714--2919[label="0.25;1pkt 1fpkt"];
1714--2921[label="1;2pkt 2fpkt"];
1714--3244[label="1;2pkt 2fpkt"];
1730--2285[label="1;1pkt 1fpkt"];
1730--2919[label="1;1pkt 1fpkt"];
2285--2919[label="1;3pkt 3fpkt"];
2287--2921[label="1;2pkt 2fpkt"];
2287--3244[label="1;2pkt 2fpkt"];
2921--3244[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="192.2.176.113" src_port="5001"/>
      <filter src_ip="192.2.176.112" src_port="5001"/>
      <filter dst_ip="133.19.154.203" src_port="5001"/>
      <filter dst_ip="209.201.242.25" src_port="5001"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_453{
style=filled;
color=gray75;
2304[label="173.138.201.120;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2932[label="173.138.201.120;2pkt 2fpkt", shape=invtriangle, color=brown];
3252[label="173.138.201.120;3pkt 3fpkt", shape=invhouse, color=bisque];
stat453[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.201.120:63509, 62.90.155.24:5190}[33.3333%]&lt;BR/&gt;{173.138.201.120:63755, 62.90.157.41:5190}[33.3333%]&lt;BR/&gt;{173.138.201.120:80, 194.133.150.66:2835}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (37.5%)&lt;BR/&gt; 63755: (18.75%)&lt;BR/&gt; 63509: (18.75%)&lt;BR/&gt; 2835: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
2304--2932[label="1;2pkt 2fpkt"];
2304--3252[label="1;3pkt 3fpkt"];
2932--3252[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.133.150.66" dst_port="2835" src_ip="173.138.201.120" src_port="80"/>
      <filter dst_ip="62.90.157.41" dst_port="5190" src_ip="173.138.201.120" src_port="63755"/>
      <filter dst_ip="62.90.155.24" dst_port="5190" src_ip="173.138.201.120" src_port="63509"/>
    </slice>
    <from sec="1026018080" usec="0"/>
    <to sec="1026019661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.28.240.120"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_455{
style=filled;
color=gray75;
2306[label="133.19.77.121;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2934[label="133.19.77.121;1pkt 1fpkt", shape=invtriangle, color=brown];
stat455[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.77.121:3065, 215.114.228.183:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3065: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2306--2934[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.114.228.183" dst_port="80" src_ip="133.19.77.121" src_port="3065"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.96.153.126"/>
    </slice>
    <from sec="1026018067" usec="0"/>
    <to sec="1026018078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.2.176.126"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.2.176.127"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026018042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
2334[label="216.144.114.132;155pkt 155fpkt", shape=pentagon, color=darkviolet];
2948[label="216.144.114.132;154pkt 154fpkt", shape=invtriangle, color=brown];
3260[label="216.144.114.132;154pkt 154fpkt", shape=invhouse, color=bisque];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.144.114.132:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2334--2948[label="1;154pkt 154fpkt"];
2334--3260[label="1;154pkt 154fpkt"];
2948--3260[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter src_ip="216.144.114.132"/>
    </slice>
    <from sec="1026018018" usec="0"/>
    <to sec="1026019639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_460{
style=filled;
color=gray75;
2367[label="192.28.64.140;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2958[label="192.28.64.140;14pkt 14fpkt", shape=invtriangle, color=brown];
stat460[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.28.64.140:*, 154.213.161.208:143}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 143: (50%)&lt;BR/&gt; 63790: (3.57143%)&lt;BR/&gt; 63789: (3.57143%)&lt;BR/&gt; 63788: (3.57143%)&lt;BR/&gt; 63787: (3.57143%)&gt;];
}
2367--2958[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="154.213.161.208" dst_port="143" src_ip="192.28.64.140"/>
    </slice>
    <from sec="1026018006" usec="0"/>
    <to sec="1026019568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_461{
style=filled;
color=gray75;
105[label="209.201.226.141;s;51pkt 51fpkt", shape=diamond, color=yellow];
106[label="60.74.36.119;d;51pkt 51fpkt", shape=diamond, color=yellow];
1355[label="60.74.36.119;d;19pkt 19fpkt", shape=hexagon, color=black];
1519[label="209.201.226.141;s;36pkt 36fpkt", shape=hexagon, color=black];
2371[label="209.201.226.141;51pkt 51fpkt", shape=pentagon, color=darkviolet];
2960[label="209.201.226.141;50pkt 50fpkt", shape=invtriangle, color=brown];
3267[label="209.201.226.141;50pkt 50fpkt", shape=invhouse, color=bisque];
stat461[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.226.141:*, 60.74.36.119:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38818: (1.13636%)&lt;BR/&gt; 38817: (1.13636%)&lt;BR/&gt; 38816: (1.13636%)&lt;BR/&gt; 38815: (1.13636%)&lt;BR/&gt; 38814: (1.13636%)&gt;];
}
105--106[label="1;51pkt 51fpkt"];
105--1355[label="1;19pkt 19fpkt"];
105--1519[label="1;36pkt 36fpkt"];
105--2371[label="1;51pkt 51fpkt"];
105--2960[label="1;50pkt 50fpkt"];
105--3267[label="1;50pkt 50fpkt"];
106--1355[label="1;19pkt 19fpkt"];
106--1519[label="1;36pkt 36fpkt"];
106--2371[label="1;51pkt 51fpkt"];
106--2960[label="1;50pkt 50fpkt"];
106--3267[label="1;50pkt 50fpkt"];
1355--1519[label="1;19pkt 19fpkt"];
1355--2371[label="1;19pkt 19fpkt"];
1355--2960[label="0.947368;18pkt 18fpkt"];
1355--3267[label="0.947368;18pkt 18fpkt"];
1519--2371[label="1;36pkt 36fpkt"];
1519--2960[label="0.972222;35pkt 35fpkt"];
1519--3267[label="0.972222;35pkt 35fpkt"];
2371--2960[label="1;50pkt 50fpkt"];
2371--3267[label="1;50pkt 50fpkt"];
2960--3267[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="60.74.36.119" src_ip="209.201.226.141"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="115.73.130.151"/>
    </slice>
    <from sec="1026018107" usec="0"/>
    <to sec="1026019481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
2404[label="133.19.185.152;64pkt 64fpkt", shape=pentagon, color=darkviolet];
2976[label="133.19.185.152;65pkt 65fpkt", shape=invtriangle, color=brown];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.185.152:*, 206.43.179.109:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5000: (0.775194%)&lt;BR/&gt; 4999: (0.775194%)&lt;BR/&gt; 4998: (0.775194%)&lt;BR/&gt; 4997: (0.775194%)&gt;];
}
2404--2976[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_ip="206.43.179.109" dst_port="80" src_ip="133.19.185.152"/>
    </slice>
    <from sec="1026018983" usec="0"/>
    <to sec="1026019583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_465{
style=filled;
color=gray75;
2408[label="62.82.220.152;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2980[label="62.82.220.152;3pkt 3fpkt", shape=invtriangle, color=brown];
stat465[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.82.220.152:80, 157.149.53.244:1214}[33.3333%]&lt;BR/&gt;{62.82.220.152:80, 157.149.53.244:1215}[33.3333%]&lt;BR/&gt;{62.82.220.152:80, 157.149.53.244:1222}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1222: (16.6667%)&lt;BR/&gt; 1215: (16.6667%)&lt;BR/&gt; 1214: (16.6667%)&gt;];
}
2408--2980[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.53.244" dst_port="1222" src_ip="62.82.220.152" src_port="80"/>
      <filter dst_ip="157.149.53.244" dst_port="1215" src_ip="62.82.220.152" src_port="80"/>
      <filter dst_ip="157.149.53.244" dst_port="1214" src_ip="62.82.220.152" src_port="80"/>
    </slice>
    <from sec="1026019288" usec="0"/>
    <to sec="1026019298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.13.44.156"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_467{
style=filled;
color=gray75;
220[label="133.19.217.156;s;10pkt 10fpkt", shape=diamond, color=yellow];
2423[label="133.19.217.156;110pkt 110fpkt", shape=pentagon, color=darkviolet];
2988[label="133.19.217.156;110pkt 110fpkt", shape=invtriangle, color=brown];
3281[label="133.19.217.156;110pkt 110fpkt", shape=invhouse, color=bisque];
stat467[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.217.156:*, 205.61.32.68:80}[36.036%]&lt;BR/&gt;{133.19.217.156:*, 62.144.120.172:80}[22.5225%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9706%)&lt;BR/&gt; 5050: (0.588235%)&lt;BR/&gt; 1467: (0.588235%)&lt;BR/&gt; 1466: (0.588235%)&lt;BR/&gt; 1465: (0.588235%)&gt;];
}
220--324[label="0.7;7pkt 7fpkt"];
220--1798[label="0.1;1pkt 1fpkt"];
220--1820[label="0.1;1pkt 1fpkt"];
220--1822[label="0.2;2pkt 2fpkt"];
220--1833[label="0.1;1pkt 1fpkt"];
220--1856[label="0.1;1pkt 1fpkt"];
220--1865[label="0.1;1pkt 1fpkt"];
220--1882[label="0.1;1pkt 1fpkt"];
220--2423[label="0.9;9pkt 9fpkt"];
220--2988[label="0.9;9pkt 9fpkt"];
220--3281[label="0.9;9pkt 9fpkt"];
2423--2988[label="1;110pkt 110fpkt"];
2423--3281[label="1;110pkt 110fpkt"];
2988--3281[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_ip="205.61.32.68" dst_port="80" src_ip="133.19.217.156"/>
      <filter dst_ip="62.144.120.172" dst_port="80" src_ip="133.19.217.156"/>
    </slice>
    <from sec="1026018003" usec="0"/>
    <to sec="1026019463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.66.180.158"/>
    </slice>
    <from sec="1026018741" usec="0"/>
    <to sec="1026019293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_469{
style=filled;
color=gray75;
2434[label="62.82.220.159;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2996[label="62.82.220.159;17pkt 17fpkt", shape=invtriangle, color=brown];
3285[label="62.82.220.159;18pkt 18fpkt", shape=invhouse, color=bisque];
stat469[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.82.220.159:80, 157.149.180.74:*}[72.2222%]&lt;BR/&gt;{62.82.220.159:80, 171.70.131.172:*}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33601: (2.83019%)&lt;BR/&gt; 33523: (2.83019%)&lt;BR/&gt; 33466: (2.83019%)&lt;BR/&gt; 33457: (2.83019%)&gt;];
}
2434--2996[label="1;17pkt 17fpkt"];
2434--3285[label="1;18pkt 18fpkt"];
2996--3285[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.180.74" src_ip="62.82.220.159" src_port="80"/>
      <filter dst_ip="171.70.131.172" src_ip="62.82.220.159" src_port="80"/>
    </slice>
    <from sec="1026018703" usec="0"/>
    <to sec="1026019081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
2437[label="60.69.101.160;322pkt 322fpkt", shape=pentagon, color=darkviolet];
2998[label="60.69.101.160;322pkt 322fpkt", shape=invtriangle, color=brown];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.69.101.160:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 927: (0.621118%)&lt;BR/&gt; 461: (0.621118%)&lt;BR/&gt; 2260: (0.465839%)&lt;BR/&gt; 1734: (0.465839%)&lt;BR/&gt; 1305: (0.465839%)&gt;];
}
2437--2998[label="1;322pkt 322fpkt"];
</description>
    <slice>
      <filter src_ip="60.69.101.160"/>
    </slice>
    <from sec="1026018005" usec="0"/>
    <to sec="1026019656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
2446[label="173.138.194.163;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3004[label="173.138.194.163;3pkt 3fpkt", shape=invtriangle, color=brown];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.194.163:0, 214.162.209.130:0}[33.3333%]&lt;BR/&gt;{173.138.194.163:0, 213.218.44.140:0}[33.3333%]&lt;BR/&gt;{173.138.194.163:1040, 194.88.165.169:23}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (66.6667%)&lt;BR/&gt; 1040: (16.6667%)&lt;BR/&gt; 23: (16.6667%)&gt;];
}
2446--3004[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="194.88.165.169" dst_port="23" src_ip="173.138.194.163" src_port="1040"/>
      <filter dst_ip="213.218.44.140" src_ip="173.138.194.163"/>
      <filter dst_ip="214.162.209.130" src_ip="173.138.194.163"/>
    </slice>
    <from sec="1026018002" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.67.69.165"/>
    </slice>
    <from sec="1026018113" usec="0"/>
    <to sec="1026019641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.99.31.168"/>
    </slice>
    <from sec="1026018066" usec="0"/>
    <to sec="1026019496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_474{
style=filled;
color=gray75;
2466[label="171.70.143.169;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3014[label="171.70.143.169;10pkt 10fpkt", shape=invtriangle, color=brown];
3295[label="171.70.143.169;10pkt 10fpkt", shape=invhouse, color=bisque];
stat474[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.70.143.169:*, *:6699}[60%]&lt;BR/&gt;{171.70.143.169:*, 60.219.150.46:7890}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (31.0345%)&lt;BR/&gt; 7890: (13.7931%)&lt;BR/&gt; 7892: (5.17241%)&lt;BR/&gt; 1066: (5.17241%)&lt;BR/&gt; 1064: (5.17241%)&gt;];
}
2466--3014[label="1;9pkt 9fpkt"];
2466--3295[label="1;9pkt 9fpkt"];
3014--3295[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="171.70.143.169"/>
      <filter dst_ip="60.219.150.46" dst_port="7890" src_ip="171.70.143.169"/>
    </slice>
    <from sec="1026018044" usec="0"/>
    <to sec="1026019489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_475{
style=filled;
color=gray75;
1142[label="208.67.144.173;s;107pkt 107fpkt", shape=diamond, color=yellow];
2474[label="208.67.144.173;106pkt 106fpkt", shape=pentagon, color=darkviolet];
3018[label="208.67.144.173;107pkt 107fpkt", shape=invtriangle, color=brown];
3297[label="208.67.144.173;107pkt 107fpkt", shape=invhouse, color=bisque];
stat475[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.67.144.173:*, 158.92.0.151:80}[23.3645%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2645: (0.468384%)&lt;BR/&gt; 2644: (0.468384%)&lt;BR/&gt; 2643: (0.468384%)&lt;BR/&gt; 2642: (0.468384%)&gt;];
}
1142--1798[label="0.00934579;1pkt 1fpkt"];
1142--1815[label="0.0747664;8pkt 8fpkt"];
1142--1820[label="0.046729;5pkt 5fpkt"];
1142--1828[label="0.252336;27pkt 27fpkt"];
1142--1833[label="0.00934579;1pkt 1fpkt"];
1142--1850[label="0.0747664;8pkt 8fpkt"];
1142--1856[label="0.046729;5pkt 5fpkt"];
1142--1860[label="0.252336;27pkt 27fpkt"];
1142--1865[label="0.00934579;1pkt 1fpkt"];
1142--1879[label="0.0747664;8pkt 8fpkt"];
1142--1882[label="0.046729;5pkt 5fpkt"];
1142--2474[label="1;106pkt 106fpkt"];
1142--3018[label="1;107pkt 107fpkt"];
1142--3297[label="1;107pkt 107fpkt"];
2474--3018[label="1;106pkt 106fpkt"];
2474--3297[label="1;106pkt 106fpkt"];
3018--3297[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_ip="158.92.0.151" dst_port="80" src_ip="208.67.144.173"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="114.202.245.177"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.232.146.179"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="157.149.222.180"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_479{
style=filled;
color=gray75;
2503[label="154.213.136.181;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3035[label="154.213.136.181;3pkt 3fpkt", shape=invtriangle, color=brown];
3305[label="154.213.136.181;3pkt 3fpkt", shape=invhouse, color=bisque];
stat479[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.136.181:50079, 205.69.35.105:80}[33.3333%]&lt;BR/&gt;{154.213.136.181:50080, 205.69.35.105:80}[33.3333%]&lt;BR/&gt;{154.213.136.181:50081, 205.69.35.105:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50081: (16.6667%)&lt;BR/&gt; 50080: (16.6667%)&lt;BR/&gt; 50079: (16.6667%)&gt;];
}
2503--3035[label="1;3pkt 3fpkt"];
2503--3305[label="1;3pkt 3fpkt"];
3035--3305[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="205.69.35.105" dst_port="80" src_ip="154.213.136.181" src_port="50081"/>
      <filter dst_ip="205.69.35.105" dst_port="80" src_ip="154.213.136.181" src_port="50080"/>
      <filter dst_ip="205.69.35.105" dst_port="80" src_ip="154.213.136.181" src_port="50079"/>
    </slice>
    <from sec="1026018591" usec="0"/>
    <to sec="1026018598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.173.154.185"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_482{
style=filled;
color=gray75;
2526[label="173.138.195.188;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3050[label="173.138.195.188;28pkt 28fpkt", shape=invtriangle, color=brown];
3315[label="173.138.195.188;28pkt 28fpkt", shape=invhouse, color=bisque];
stat482[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.195.188:80, 194.63.78.217:*}[60.7143%]&lt;BR/&gt;{173.138.195.188:80, 62.0.243.195:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4622: (1.78571%)&lt;BR/&gt; 4292: (1.78571%)&lt;BR/&gt; 4214: (1.78571%)&lt;BR/&gt; 4213: (1.78571%)&gt;];
}
2526--3050[label="1;28pkt 28fpkt"];
2526--3315[label="1;28pkt 28fpkt"];
3050--3315[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="194.63.78.217" src_ip="173.138.195.188" src_port="80"/>
      <filter dst_ip="62.0.243.195" src_ip="173.138.195.188" src_port="80"/>
    </slice>
    <from sec="1026019064" usec="0"/>
    <to sec="1026019651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
2528[label="115.127.32.190;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3052[label="115.127.32.190;7pkt 7fpkt", shape=invtriangle, color=brown];
3317[label="115.127.32.190;7pkt 7fpkt", shape=invhouse, color=bisque];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{115.127.32.190:80, 133.19.196.225:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1212: (7.14286%)&lt;BR/&gt; 1211: (7.14286%)&lt;BR/&gt; 1210: (7.14286%)&lt;BR/&gt; 1208: (7.14286%)&gt;];
}
2528--3052[label="1;7pkt 7fpkt"];
2528--3317[label="1;7pkt 7fpkt"];
3052--3317[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.196.225" src_ip="115.127.32.190" src_port="80"/>
    </slice>
    <from sec="1026018378" usec="0"/>
    <to sec="1026018421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
2529[label="194.139.80.190;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3053[label="194.139.80.190;11pkt 11fpkt", shape=invtriangle, color=brown];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.139.80.190:80, 157.149.138.27:*}[58.3333%]&lt;BR/&gt;{194.139.80.190:80, 157.149.6.117:*}[41.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49891: (4.34783%)&lt;BR/&gt; 49890: (4.34783%)&lt;BR/&gt; 49887: (4.34783%)&lt;BR/&gt; 49884: (4.34783%)&gt;];
}
2529--3053[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.138.27" src_ip="194.139.80.190" src_port="80"/>
      <filter dst_ip="157.149.6.117" src_ip="194.139.80.190" src_port="80"/>
    </slice>
    <from sec="1026018756" usec="0"/>
    <to sec="1026019569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_485{
style=filled;
color=gray75;
2530[label="62.125.99.190;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3054[label="62.125.99.190;5pkt 5fpkt", shape=invtriangle, color=brown];
3318[label="62.125.99.190;5pkt 5fpkt", shape=invhouse, color=bisque];
stat485[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.125.99.190:80, 157.149.201.5:1173}[20%]&lt;BR/&gt;{62.125.99.190:80, 157.149.201.5:1174}[20%]&lt;BR/&gt;{62.125.99.190:80, 157.149.201.5:1175}[20%]&lt;BR/&gt;{62.125.99.190:80, 157.149.201.5:1181}[20%]&lt;BR/&gt;{62.125.99.190:80, 157.149.201.5:1182}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1182: (10%)&lt;BR/&gt; 1181: (10%)&lt;BR/&gt; 1175: (10%)&lt;BR/&gt; 1174: (10%)&gt;];
}
2530--3054[label="1;5pkt 5fpkt"];
2530--3318[label="1;5pkt 5fpkt"];
3054--3318[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.201.5" dst_port="1182" src_ip="62.125.99.190" src_port="80"/>
      <filter dst_ip="157.149.201.5" dst_port="1181" src_ip="62.125.99.190" src_port="80"/>
      <filter dst_ip="157.149.201.5" dst_port="1175" src_ip="62.125.99.190" src_port="80"/>
      <filter dst_ip="157.149.201.5" dst_port="1174" src_ip="62.125.99.190" src_port="80"/>
      <filter dst_ip="157.149.201.5" dst_port="1173" src_ip="62.125.99.190" src_port="80"/>
    </slice>
    <from sec="1026019122" usec="0"/>
    <to sec="1026019574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.101.194.191"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_487{
style=filled;
color=gray75;
2539[label="217.201.82.193;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3059[label="217.201.82.193;18pkt 18fpkt", shape=invtriangle, color=brown];
3322[label="217.201.82.193;18pkt 18fpkt", shape=invhouse, color=bisque];
stat487[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.201.82.193:80, 216.130.229.105:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1744: (2.77778%)&lt;BR/&gt; 1743: (2.77778%)&lt;BR/&gt; 1736: (2.77778%)&lt;BR/&gt; 1735: (2.77778%)&gt;];
}
2539--3059[label="1;18pkt 18fpkt"];
2539--3322[label="1;18pkt 18fpkt"];
3059--3322[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="216.130.229.105" src_ip="217.201.82.193" src_port="80"/>
    </slice>
    <from sec="1026018949" usec="0"/>
    <to sec="1026019566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.139.229.193"/>
    </slice>
    <from sec="1026019035" usec="0"/>
    <to sec="1026019085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
176[label="157.149.156.140;d;925pkt 925fpkt", shape=diamond, color=yellow];
460[label="201.50.149.237;s;3pkt 3fpkt", shape=diamond, color=yellow];
803[label="204.245.164.204;s;163pkt 163fpkt", shape=diamond, color=yellow];
2453[label="60.123.177.164;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2547[label="207.54.193.195;53pkt 53fpkt", shape=pentagon, color=darkviolet];
2571[label="204.245.164.204;201pkt 201fpkt", shape=pentagon, color=darkviolet];
3009[label="60.123.177.164;1pkt 1fpkt", shape=invtriangle, color=brown];
3063[label="207.54.193.195;53pkt 53fpkt", shape=invtriangle, color=brown];
3291[label="60.123.177.164;1pkt 1fpkt", shape=invhouse, color=bisque];
3326[label="207.54.193.195;53pkt 53fpkt", shape=invhouse, color=bisque];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.163.33.103:80, 157.149.156.140:*}[49.3671%]&lt;BR/&gt;{204.245.164.204:80, *:*}[21.308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2806%)&lt;BR/&gt; 3128: (0.722146%)&lt;BR/&gt; 8080: (0.515818%)&lt;BR/&gt; 0: (0.275103%)&lt;BR/&gt; 113: (0.206327%)&gt;];
}
176--219[label="0.507027;469pkt 469fpkt"];
176--460[label="0.333333;1pkt 1fpkt"];
176--607[label="0.00322581;1pkt 1fpkt"];
176--801[label="0.2;1pkt 1fpkt"];
176--803[label="0.944785;154pkt 154fpkt"];
176--1329[label="0.507027;469pkt 469fpkt"];
176--1511[label="0.00641026;1pkt 1fpkt"];
176--1797[label="0.132973;123pkt 123fpkt"];
176--1807[label="0.0259459;24pkt 24fpkt"];
176--1812[label="0.0118919;11pkt 11fpkt"];
176--1819[label="0.0183784;17pkt 17fpkt"];
176--1832[label="0.132973;123pkt 123fpkt"];
176--1843[label="0.0259459;24pkt 24fpkt"];
176--1847[label="0.0118919;11pkt 11fpkt"];
176--1855[label="0.0183784;17pkt 17fpkt"];
176--1864[label="0.132973;123pkt 123fpkt"];
176--1872[label="0.0259459;24pkt 24fpkt"];
176--1876[label="0.0118919;11pkt 11fpkt"];
176--1881[label="0.0183784;17pkt 17fpkt"];
176--2453[label="1;1pkt 1fpkt"];
176--2547[label="0.981132;52pkt 52fpkt"];
176--2571[label="0.905473;182pkt 182fpkt"];
176--3009[label="1;1pkt 1fpkt"];
176--3063[label="0.981132;52pkt 52fpkt"];
176--3291[label="1;1pkt 1fpkt"];
176--3326[label="0.981132;52pkt 52fpkt"];
803--855[label="0.025641;2pkt 2fpkt"];
803--1443[label="0.00613497;1pkt 1fpkt"];
803--1761[label="0.00613497;1pkt 1fpkt"];
803--1812[label="0.0368098;6pkt 6fpkt"];
803--1819[label="0.0797546;13pkt 13fpkt"];
803--1847[label="0.0368098;6pkt 6fpkt"];
803--1855[label="0.0797546;13pkt 13fpkt"];
803--1876[label="0.0368098;6pkt 6fpkt"];
803--1881[label="0.0797546;13pkt 13fpkt"];
803--2571[label="0.993865;162pkt 162fpkt"];
2453--3009[label="1;1pkt 1fpkt"];
2453--3291[label="1;1pkt 1fpkt"];
2547--3063[label="1;53pkt 53fpkt"];
2547--3326[label="1;53pkt 53fpkt"];
3009--3291[label="1;1pkt 1fpkt"];
3063--3326[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter src_ip="204.245.164.204" src_port="80"/>
      <filter dst_ip="157.149.156.140" src_ip="206.163.33.103" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_490{
style=filled;
color=gray75;
2549[label="205.131.242.195;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3064[label="205.131.242.195;13pkt 13fpkt", shape=invtriangle, color=brown];
stat490[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.131.242.195:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2549--3064[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="205.131.242.195"/>
    </slice>
    <from sec="1026018007" usec="0"/>
    <to sec="1026019147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
565[label="154.213.17.166;s;52pkt 52fpkt", shape=diamond, color=yellow];
604[label="157.149.70.198;s;170pkt 170fpkt", shape=diamond, color=yellow];
671[label="212.199.28.50;d;84pkt 84fpkt", shape=diamond, color=yellow];
728[label="212.26.204.36;d;63pkt 63fpkt", shape=diamond, color=yellow];
957[label="212.26.244.100;d;62pkt 62fpkt", shape=diamond, color=yellow];
961[label="212.199.18.196;d;72pkt 72fpkt", shape=diamond, color=yellow];
1012[label="212.26.204.38;d;52pkt 52fpkt", shape=diamond, color=yellow];
1051[label="209.201.234.231;s;158pkt 158fpkt", shape=diamond, color=yellow];
1454[label="212.26.204.36;d;47pkt 47fpkt", shape=hexagon, color=black];
1608[label="157.149.180.74;s;36pkt 36fpkt", shape=hexagon, color=black];
1685[label="212.199.18.196;d;67pkt 67fpkt", shape=hexagon, color=black];
1893[label="157.149.48.2;32pkt 32fpkt", shape=pentagon, color=darkviolet];
1979[label="154.213.136.26;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2093[label="154.213.136.57;70pkt 70fpkt", shape=pentagon, color=darkviolet];
2152[label="171.70.143.72;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2204[label="171.70.198.87;31pkt 31fpkt", shape=pentagon, color=darkviolet];
2438[label="209.201.242.160;82pkt 82fpkt", shape=pentagon, color=darkviolet];
2554[label="157.149.70.198;172pkt 172fpkt", shape=pentagon, color=darkviolet];
2600[label="208.67.66.211;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2726[label="157.149.48.2;31pkt 31fpkt", shape=invtriangle, color=brown];
2771[label="154.213.136.26;12pkt 12fpkt", shape=invtriangle, color=brown];
2829[label="154.213.136.57;70pkt 70fpkt", shape=invtriangle, color=brown];
2856[label="171.70.143.72;25pkt 25fpkt", shape=invtriangle, color=brown];
2878[label="171.70.198.87;30pkt 30fpkt", shape=invtriangle, color=brown];
2999[label="209.201.242.160;83pkt 83fpkt", shape=invtriangle, color=brown];
3066[label="157.149.70.198;172pkt 172fpkt", shape=invtriangle, color=brown];
3145[label="157.149.48.2;31pkt 31fpkt", shape=invhouse, color=bisque];
3169[label="154.213.136.26;12pkt 12fpkt", shape=invhouse, color=bisque];
3197[label="154.213.136.57;70pkt 70fpkt", shape=invhouse, color=bisque];
3225[label="171.70.198.87;31pkt 31fpkt", shape=invhouse, color=bisque];
3286[label="209.201.242.160;82pkt 82fpkt", shape=invhouse, color=bisque];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[93.1596%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.5773%)&lt;BR/&gt; 53: (1.80412%)&lt;BR/&gt; 443: (1.00515%)&lt;BR/&gt; 0: (0.309278%)&lt;BR/&gt; 2247: (0.154639%)&gt;];
}
565--671[label="0.326923;17pkt 17fpkt"];
565--961[label="0.211538;11pkt 11fpkt"];
565--1685[label="0.192308;10pkt 10fpkt"];
565--1828[label="0.0769231;4pkt 4fpkt"];
565--1860[label="0.0769231;4pkt 4fpkt"];
604--671[label="0.0238095;2pkt 2fpkt"];
604--728[label="0.015873;1pkt 1fpkt"];
604--954[label="0.0147059;1pkt 1fpkt"];
604--957[label="0.016129;1pkt 1fpkt"];
604--1012[label="0.0192308;1pkt 1fpkt"];
604--1798[label="0.0176471;3pkt 3fpkt"];
604--1808[label="0.0823529;14pkt 14fpkt"];
604--1815[label="0.0117647;2pkt 2fpkt"];
604--1820[label="0.0117647;2pkt 2fpkt"];
604--1822[label="0.0470588;8pkt 8fpkt"];
604--1828[label="0.0352941;6pkt 6fpkt"];
604--1831[label="0.00588235;1pkt 1fpkt"];
604--1833[label="0.0176471;3pkt 3fpkt"];
604--1844[label="0.0823529;14pkt 14fpkt"];
604--1850[label="0.0117647;2pkt 2fpkt"];
604--1856[label="0.0117647;2pkt 2fpkt"];
604--1860[label="0.0352941;6pkt 6fpkt"];
604--1863[label="0.00588235;1pkt 1fpkt"];
604--1865[label="0.0176471;3pkt 3fpkt"];
604--1873[label="0.0823529;14pkt 14fpkt"];
604--1879[label="0.0117647;2pkt 2fpkt"];
604--1882[label="0.0117647;2pkt 2fpkt"];
604--2554[label="1;170pkt 170fpkt"];
604--3066[label="1;170pkt 170fpkt"];
671--1015[label="0.05;2pkt 2fpkt"];
671--1051[label="0.0595238;5pkt 5fpkt"];
671--1401[label="0.0952381;8pkt 8fpkt"];
671--1633[label="0.05;2pkt 2fpkt"];
671--1808[label="0.0595238;5pkt 5fpkt"];
671--1815[label="0.047619;4pkt 4fpkt"];
671--1820[label="0.047619;4pkt 4fpkt"];
671--1822[label="0.0357143;3pkt 3fpkt"];
671--1828[label="0.0714286;6pkt 6fpkt"];
671--1844[label="0.0595238;5pkt 5fpkt"];
671--1850[label="0.047619;4pkt 4fpkt"];
671--1856[label="0.047619;4pkt 4fpkt"];
671--1860[label="0.0714286;6pkt 6fpkt"];
671--1873[label="0.0595238;5pkt 5fpkt"];
671--1879[label="0.047619;4pkt 4fpkt"];
671--1882[label="0.047619;4pkt 4fpkt"];
671--1893[label="0.125;4pkt 4fpkt"];
671--1898[label="0.25;2pkt 2fpkt"];
671--2039[label="0.05;2pkt 2fpkt"];
671--2152[label="0.32;8pkt 8fpkt"];
671--2204[label="0.322581;10pkt 10fpkt"];
671--2473[label="0.0952381;8pkt 8fpkt"];
671--2554[label="0.0238095;2pkt 2fpkt"];
671--2726[label="0.129032;4pkt 4fpkt"];
671--2728[label="0.25;2pkt 2fpkt"];
671--2856[label="0.32;8pkt 8fpkt"];
671--2878[label="0.3;9pkt 9fpkt"];
671--3066[label="0.0238095;2pkt 2fpkt"];
671--3145[label="0.129032;4pkt 4fpkt"];
671--3225[label="0.322581;10pkt 10fpkt"];
728--966[label="0.0263158;1pkt 1fpkt"];
728--1401[label="0.603175;38pkt 38fpkt"];
728--1454[label="1;47pkt 47fpkt"];
728--1608[label="0.0277778;1pkt 1fpkt"];
728--1798[label="0.0634921;4pkt 4fpkt"];
728--1808[label="0.0793651;5pkt 5fpkt"];
728--1815[label="0.0793651;5pkt 5fpkt"];
728--1820[label="0.174603;11pkt 11fpkt"];
728--1822[label="0.031746;2pkt 2fpkt"];
728--1828[label="0.031746;2pkt 2fpkt"];
728--1831[label="0.015873;1pkt 1fpkt"];
728--1833[label="0.0634921;4pkt 4fpkt"];
728--1844[label="0.0793651;5pkt 5fpkt"];
728--1850[label="0.0793651;5pkt 5fpkt"];
728--1856[label="0.174603;11pkt 11fpkt"];
728--1860[label="0.031746;2pkt 2fpkt"];
728--1863[label="0.015873;1pkt 1fpkt"];
728--1865[label="0.0634921;4pkt 4fpkt"];
728--1873[label="0.0793651;5pkt 5fpkt"];
728--1879[label="0.0793651;5pkt 5fpkt"];
728--1882[label="0.174603;11pkt 11fpkt"];
728--1979[label="0.0909091;1pkt 1fpkt"];
728--2052[label="0.206349;13pkt 13fpkt"];
728--2093[label="0.015873;1pkt 1fpkt"];
728--2438[label="0.015873;1pkt 1fpkt"];
728--2473[label="0.603175;38pkt 38fpkt"];
728--2554[label="0.015873;1pkt 1fpkt"];
728--2600[label="0.6;3pkt 3fpkt"];
728--2771[label="0.0833333;1pkt 1fpkt"];
728--2829[label="0.015873;1pkt 1fpkt"];
728--2999[label="0.015873;1pkt 1fpkt"];
728--3066[label="0.015873;1pkt 1fpkt"];
728--3169[label="0.0833333;1pkt 1fpkt"];
728--3197[label="0.015873;1pkt 1fpkt"];
728--3286[label="0.015873;1pkt 1fpkt"];
957--1401[label="0.516129;32pkt 32fpkt"];
957--1815[label="0.0483871;3pkt 3fpkt"];
957--1820[label="0.0806452;5pkt 5fpkt"];
957--1822[label="0.016129;1pkt 1fpkt"];
957--1828[label="0.0483871;3pkt 3fpkt"];
957--1831[label="0.016129;1pkt 1fpkt"];
957--1850[label="0.0483871;3pkt 3fpkt"];
957--1856[label="0.0806452;5pkt 5fpkt"];
957--1860[label="0.0483871;3pkt 3fpkt"];
957--1863[label="0.016129;1pkt 1fpkt"];
957--1879[label="0.0483871;3pkt 3fpkt"];
957--1882[label="0.0806452;5pkt 5fpkt"];
957--1979[label="0.181818;2pkt 2fpkt"];
957--1986[label="0.0740741;4pkt 4fpkt"];
957--2052[label="0.129032;8pkt 8fpkt"];
957--2473[label="0.580645;36pkt 36fpkt"];
957--2554[label="0.016129;1pkt 1fpkt"];
957--2669[label="0.153846;2pkt 2fpkt"];
957--2771[label="0.166667;2pkt 2fpkt"];
957--3066[label="0.016129;1pkt 1fpkt"];
957--3115[label="0.153846;2pkt 2fpkt"];
957--3169[label="0.166667;2pkt 2fpkt"];
961--1051[label="0.0416667;3pkt 3fpkt"];
961--1306[label="0.0972222;7pkt 7fpkt"];
961--1401[label="0.402778;29pkt 29fpkt"];
961--1685[label="1;67pkt 67fpkt"];
961--1815[label="0.0833333;6pkt 6fpkt"];
961--1820[label="0.0833333;6pkt 6fpkt"];
961--1822[label="0.222222;16pkt 16fpkt"];
961--1828[label="0.0555556;4pkt 4fpkt"];
961--1850[label="0.0833333;6pkt 6fpkt"];
961--1856[label="0.0833333;6pkt 6fpkt"];
961--1860[label="0.0555556;4pkt 4fpkt"];
961--1879[label="0.0833333;6pkt 6fpkt"];
961--1882[label="0.0833333;6pkt 6fpkt"];
961--1893[label="0.125;4pkt 4fpkt"];
961--1957[label="0.0972222;7pkt 7fpkt"];
961--2204[label="0.354839;11pkt 11fpkt"];
961--2473[label="0.402778;29pkt 29fpkt"];
961--2726[label="0.129032;4pkt 4fpkt"];
961--2760[label="0.0972222;7pkt 7fpkt"];
961--2878[label="0.366667;11pkt 11fpkt"];
961--3145[label="0.129032;4pkt 4fpkt"];
961--3225[label="0.354839;11pkt 11fpkt"];
1012--1401[label="0.615385;32pkt 32fpkt"];
1012--1808[label="0.0769231;4pkt 4fpkt"];
1012--1815[label="0.0192308;1pkt 1fpkt"];
1012--1820[label="0.115385;6pkt 6fpkt"];
1012--1822[label="0.0192308;1pkt 1fpkt"];
1012--1844[label="0.0769231;4pkt 4fpkt"];
1012--1850[label="0.0192308;1pkt 1fpkt"];
1012--1856[label="0.115385;6pkt 6fpkt"];
1012--1873[label="0.0769231;4pkt 4fpkt"];
1012--1879[label="0.0192308;1pkt 1fpkt"];
1012--1882[label="0.115385;6pkt 6fpkt"];
1012--2052[label="0.115385;6pkt 6fpkt"];
1012--2438[label="0.0192308;1pkt 1fpkt"];
1012--2473[label="0.615385;32pkt 32fpkt"];
1012--2554[label="0.0192308;1pkt 1fpkt"];
1012--2669[label="0.0769231;1pkt 1fpkt"];
1012--2999[label="0.0192308;1pkt 1fpkt"];
1012--3066[label="0.0192308;1pkt 1fpkt"];
1012--3115[label="0.0769231;1pkt 1fpkt"];
1012--3286[label="0.0192308;1pkt 1fpkt"];
1051--1646[label="0.0175439;1pkt 1fpkt"];
1051--1673[label="0.0151515;1pkt 1fpkt"];
1051--1685[label="0.0447761;3pkt 3fpkt"];
1051--1721[label="0.016129;1pkt 1fpkt"];
1051--1808[label="0.00632911;1pkt 1fpkt"];
1051--1815[label="0.00632911;1pkt 1fpkt"];
1051--1820[label="0.0189873;3pkt 3fpkt"];
1051--1822[label="0.126582;20pkt 20fpkt"];
1051--1828[label="0.240506;38pkt 38fpkt"];
1051--1831[label="0.0126582;2pkt 2fpkt"];
1051--1844[label="0.00632911;1pkt 1fpkt"];
1051--1850[label="0.00632911;1pkt 1fpkt"];
1051--1856[label="0.0189873;3pkt 3fpkt"];
1051--1860[label="0.240506;38pkt 38fpkt"];
1051--1863[label="0.0126582;2pkt 2fpkt"];
1051--1873[label="0.00632911;1pkt 1fpkt"];
1051--1879[label="0.00632911;1pkt 1fpkt"];
1051--1882[label="0.0189873;3pkt 3fpkt"];
1454--1798[label="0.0851064;4pkt 4fpkt"];
1454--1808[label="0.106383;5pkt 5fpkt"];
1454--1815[label="0.106383;5pkt 5fpkt"];
1454--1820[label="0.234043;11pkt 11fpkt"];
1454--1822[label="0.0212766;1pkt 1fpkt"];
1454--1833[label="0.0851064;4pkt 4fpkt"];
1454--1844[label="0.106383;5pkt 5fpkt"];
1454--1850[label="0.106383;5pkt 5fpkt"];
1454--1856[label="0.234043;11pkt 11fpkt"];
1454--1865[label="0.0851064;4pkt 4fpkt"];
1454--1873[label="0.106383;5pkt 5fpkt"];
1454--1879[label="0.106383;5pkt 5fpkt"];
1454--1882[label="0.234043;11pkt 11fpkt"];
1454--1979[label="0.0909091;1pkt 1fpkt"];
1454--2052[label="0.191489;9pkt 9fpkt"];
1454--2093[label="0.0212766;1pkt 1fpkt"];
1454--2438[label="0.0212766;1pkt 1fpkt"];
1454--2473[label="0.702128;33pkt 33fpkt"];
1454--2771[label="0.0833333;1pkt 1fpkt"];
1454--2829[label="0.0212766;1pkt 1fpkt"];
1454--2999[label="0.0212766;1pkt 1fpkt"];
1454--3169[label="0.0833333;1pkt 1fpkt"];
1454--3197[label="0.0212766;1pkt 1fpkt"];
1454--3286[label="0.0212766;1pkt 1fpkt"];
1608--1822[label="0.333333;12pkt 12fpkt"];
1685--1815[label="0.0895522;6pkt 6fpkt"];
1685--1820[label="0.0895522;6pkt 6fpkt"];
1685--1822[label="0.238806;16pkt 16fpkt"];
1685--1828[label="0.0597015;4pkt 4fpkt"];
1685--1850[label="0.0895522;6pkt 6fpkt"];
1685--1856[label="0.0895522;6pkt 6fpkt"];
1685--1860[label="0.0597015;4pkt 4fpkt"];
1685--1879[label="0.0895522;6pkt 6fpkt"];
1685--1882[label="0.0895522;6pkt 6fpkt"];
1685--1957[label="0.104478;7pkt 7fpkt"];
1685--2204[label="0.354839;11pkt 11fpkt"];
1685--2473[label="0.432836;29pkt 29fpkt"];
1685--2760[label="0.104478;7pkt 7fpkt"];
1685--2878[label="0.366667;11pkt 11fpkt"];
1685--3225[label="0.354839;11pkt 11fpkt"];
1893--2726[label="1;31pkt 31fpkt"];
1893--3145[label="1;31pkt 31fpkt"];
1979--2771[label="1;11pkt 11fpkt"];
1979--3169[label="1;11pkt 11fpkt"];
2093--2829[label="1;70pkt 70fpkt"];
2093--3197[label="1;70pkt 70fpkt"];
2152--2856[label="1;25pkt 25fpkt"];
2204--2878[label="1;30pkt 30fpkt"];
2204--3225[label="1;31pkt 31fpkt"];
2438--2999[label="1;82pkt 82fpkt"];
2438--3286[label="1;82pkt 82fpkt"];
2554--3066[label="1;172pkt 172fpkt"];
2726--3145[label="1;31pkt 31fpkt"];
2771--3169[label="1;12pkt 12fpkt"];
2829--3197[label="1;70pkt 70fpkt"];
2878--3225[label="1;30pkt 30fpkt"];
2999--3286[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
    </slice>
    <from sec="1026018003" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_492{
style=filled;
color=gray75;
2560[label="133.19.105.200;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3068[label="133.19.105.200;3pkt 3fpkt", shape=invtriangle, color=brown];
stat492[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.105.200:2702, 70.74.227.22:6699}[33.3333%]&lt;BR/&gt;{133.19.105.200:2701, 194.120.183.63:7729}[33.3333%]&lt;BR/&gt;{133.19.105.200:2650, 62.82.192.220:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7729: (16.6667%)&lt;BR/&gt; 6699: (16.6667%)&lt;BR/&gt; 2702: (16.6667%)&lt;BR/&gt; 2701: (16.6667%)&lt;BR/&gt; 2650: (16.6667%)&gt;];
}
2560--3068[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="62.82.192.220" dst_port="1863" src_ip="133.19.105.200" src_port="2650"/>
      <filter dst_ip="194.120.183.63" dst_port="7729" src_ip="133.19.105.200" src_port="2701"/>
      <filter dst_ip="70.74.227.22" dst_port="6699" src_ip="133.19.105.200" src_port="2702"/>
    </slice>
    <from sec="1026018125" usec="0"/>
    <to sec="1026019541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.243.2.206"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_495{
style=filled;
color=gray75;
2602[label="209.201.226.211;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3084[label="209.201.226.211;2pkt 2fpkt", shape=invtriangle, color=brown];
3335[label="209.201.226.211;3pkt 3fpkt", shape=invhouse, color=bisque];
stat495[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.226.211:65000, 222.145.71.157:65000}[33.3333%]&lt;BR/&gt;{209.201.226.211:0, 215.77.107.40:0}[33.3333%]&lt;BR/&gt;{209.201.226.211:500, 215.77.107.40:500}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65000: (37.5%)&lt;BR/&gt; 0: (37.5%)&lt;BR/&gt; 500: (25%)&gt;];
}
2602--3084[label="1;2pkt 2fpkt"];
2602--3335[label="1;3pkt 3fpkt"];
3084--3335[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.77.107.40" dst_port="500" src_ip="209.201.226.211" src_port="500"/>
      <filter dst_ip="215.77.107.40" src_ip="209.201.226.211"/>
      <filter dst_ip="222.145.71.157" dst_port="65000" src_ip="209.201.226.211" src_port="65000"/>
    </slice>
    <from sec="1026018008" usec="0"/>
    <to sec="1026019582" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_496{
style=filled;
color=gray75;
2605[label="209.201.225.212;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3085[label="209.201.225.212;6pkt 6fpkt", shape=invtriangle, color=brown];
3336[label="209.201.225.212;6pkt 6fpkt", shape=invhouse, color=bisque];
stat496[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.201.225.212:80, 85.234.16.150:*}[66.6667%]&lt;BR/&gt;{209.201.225.212:*, 217.44.54.88:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 60828: (8.33333%)&lt;BR/&gt; 1375: (8.33333%)&lt;BR/&gt; 1374: (8.33333%)&lt;BR/&gt; 1373: (8.33333%)&gt;];
}
2605--3085[label="1;6pkt 6fpkt"];
2605--3336[label="1;6pkt 6fpkt"];
3085--3336[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="217.44.54.88" src_ip="209.201.225.212"/>
      <filter dst_ip="85.234.16.150" src_ip="209.201.225.212" src_port="80"/>
    </slice>
    <from sec="1026018601" usec="0"/>
    <to sec="1026019482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_497{
style=filled;
color=gray75;
2611[label="171.70.136.214;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3089[label="171.70.136.214;11pkt 11fpkt", shape=invtriangle, color=brown];
stat497[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.70.136.214:*, 200.1.217.79:80}[36.3636%]&lt;BR/&gt;{171.70.136.214:*, 70.188.11.137:80}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1558: (4.54545%)&lt;BR/&gt; 1551: (4.54545%)&lt;BR/&gt; 1549: (4.54545%)&lt;BR/&gt; 1547: (4.54545%)&gt;];
}
2611--3089[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="200.1.217.79" dst_port="80" src_ip="171.70.136.214"/>
      <filter dst_ip="70.188.11.137" dst_port="80" src_ip="171.70.136.214"/>
    </slice>
    <from sec="1026018239" usec="0"/>
    <to sec="1026019428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.160.160.215"/>
    </slice>
    <from sec="1026018129" usec="0"/>
    <to sec="1026018205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="112.59.193.219"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.28.230.224"/>
    </slice>
    <from sec="1026018002" usec="0"/>
    <to sec="1026018321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_501{
style=filled;
color=gray75;
784[label="216.145.238.22;d;148pkt 148fpkt", shape=diamond, color=yellow];
821[label="207.16.20.177;s;113pkt 113fpkt", shape=diamond, color=yellow];
2487[label="207.16.20.177;112pkt 112fpkt", shape=pentagon, color=darkviolet];
2644[label="131.163.181.226;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3026[label="207.16.20.177;112pkt 112fpkt", shape=invtriangle, color=brown];
3103[label="131.163.181.226;12pkt 12fpkt", shape=invtriangle, color=brown];
3300[label="207.16.20.177;113pkt 113fpkt", shape=invhouse, color=bisque];
3345[label="131.163.181.226;12pkt 12fpkt", shape=invhouse, color=bisque];
stat501[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.16.20.177:80, 216.145.238.22:*}[71.0692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.3665%)&lt;BR/&gt; 0: (6.79305%)&lt;BR/&gt; 53: (0.473934%)&lt;BR/&gt; 4630: (0.394945%)&lt;BR/&gt; 4629: (0.394945%)&gt;];
}
784--821[label="1;113pkt 113fpkt"];
784--1570[label="0.0675676;10pkt 10fpkt"];
784--1797[label="0.00675676;1pkt 1fpkt"];
784--1807[label="0.00675676;1pkt 1fpkt"];
784--1811[label="0.00675676;1pkt 1fpkt"];
784--1814[label="0.00675676;1pkt 1fpkt"];
784--1818[label="0.00675676;1pkt 1fpkt"];
784--1827[label="0.00675676;1pkt 1fpkt"];
784--1832[label="0.00675676;1pkt 1fpkt"];
784--1843[label="0.00675676;1pkt 1fpkt"];
784--1846[label="0.00675676;1pkt 1fpkt"];
784--1849[label="0.00675676;1pkt 1fpkt"];
784--1854[label="0.00675676;1pkt 1fpkt"];
784--1859[label="0.00675676;1pkt 1fpkt"];
784--1864[label="0.00675676;1pkt 1fpkt"];
784--1872[label="0.00675676;1pkt 1fpkt"];
784--1875[label="0.00675676;1pkt 1fpkt"];
784--1883[label="0.00675676;1pkt 1fpkt"];
784--1975[label="0.0588235;3pkt 3fpkt"];
784--2008[label="0.0357143;1pkt 1fpkt"];
784--2082[label="0.0625;1pkt 1fpkt"];
784--2111[label="0.030303;1pkt 1fpkt"];
784--2243[label="0.047619;1pkt 1fpkt"];
784--2487[label="1;112pkt 112fpkt"];
784--2644[label="0.0909091;1pkt 1fpkt"];
784--2823[label="0.0625;1pkt 1fpkt"];
784--2835[label="0.0294118;1pkt 1fpkt"];
784--2897[label="0.047619;1pkt 1fpkt"];
784--3026[label="1;112pkt 112fpkt"];
784--3103[label="0.0833333;1pkt 1fpkt"];
784--3234[label="0.0454545;1pkt 1fpkt"];
784--3300[label="1;113pkt 113fpkt"];
784--3345[label="0.0833333;1pkt 1fpkt"];
821--2487[label="1;112pkt 112fpkt"];
821--3026[label="1;112pkt 112fpkt"];
821--3300[label="1;113pkt 113fpkt"];
2487--3026[label="1;112pkt 112fpkt"];
2487--3300[label="1;112pkt 112fpkt"];
2644--3103[label="1;11pkt 11fpkt"];
2644--3345[label="1;11pkt 11fpkt"];
3026--3300[label="1;112pkt 112fpkt"];
3103--3345[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="216.145.238.22" src_ip="207.16.20.177" src_port="80"/>
    </slice>
    <from sec="1026018005" usec="0"/>
    <to sec="1026019303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_502{
style=filled;
color=gray75;
2645[label="157.149.208.226;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3104[label="157.149.208.226;4pkt 4fpkt", shape=invtriangle, color=brown];
stat502[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.149.208.226:0, 194.99.66.13:0}[25%]&lt;BR/&gt;{157.149.208.226:0, 210.58.241.45:0}[25%]&lt;BR/&gt;{157.149.208.226:0, 56.131.215.180:0}[25%]&lt;BR/&gt;{157.149.208.226:0, 201.113.38.241:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2645--3104[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="201.113.38.241" src_ip="157.149.208.226"/>
      <filter dst_ip="56.131.215.180" src_ip="157.149.208.226"/>
      <filter dst_ip="210.58.241.45" src_ip="157.149.208.226"/>
      <filter dst_ip="194.99.66.13" src_ip="157.149.208.226"/>
    </slice>
    <from sec="1026018678" usec="0"/>
    <to sec="1026019266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_503{
style=filled;
color=gray75;
2648[label="60.230.180.227;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3105[label="60.230.180.227;9pkt 9fpkt", shape=invtriangle, color=brown];
stat503[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.230.180.227:80, 171.70.64.156:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1170: (5.55556%)&lt;BR/&gt; 1169: (5.55556%)&lt;BR/&gt; 1168: (5.55556%)&lt;BR/&gt; 1167: (5.55556%)&gt;];
}
2648--3105[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="171.70.64.156" src_ip="60.230.180.227" src_port="80"/>
    </slice>
    <from sec="1026019467" usec="0"/>
    <to sec="1026019660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.133.214.227"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026018437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_505{
style=filled;
color=gray75;
577[label="208.77.205.139;d;105pkt 105fpkt", shape=diamond, color=yellow];
780[label="63.210.175.207;s;1pkt 1fpkt", shape=diamond, color=yellow];
1473[label="208.77.205.139;d;93pkt 93fpkt", shape=hexagon, color=black];
1896[label="62.53.187.3;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2047[label="194.4.160.45;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2654[label="194.4.205.230;32pkt 32fpkt", shape=pentagon, color=darkviolet];
2785[label="200.242.151.32;15pkt 15fpkt", shape=invtriangle, color=brown];
3076[label="63.210.175.207;1pkt 1fpkt", shape=invtriangle, color=brown];
3108[label="194.4.205.230;33pkt 33fpkt", shape=invtriangle, color=brown];
3176[label="200.242.151.32;14pkt 14fpkt", shape=invhouse, color=bisque];
stat505[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 208.77.205.139:*}[31.7204%]&lt;BR/&gt;{*:53, *:*}[26.3441%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.982%)&lt;BR/&gt; 53: (14.4144%)&lt;BR/&gt; 0: (2.1021%)&lt;BR/&gt; 123: (1.2012%)&lt;BR/&gt; 31100: (0.600601%)&gt;];
}
577--730[label="0.0761905;8pkt 8fpkt"];
577--780[label="1;1pkt 1fpkt"];
577--1180[label="0.0232558;1pkt 1fpkt"];
577--1424[label="0.170213;8pkt 8fpkt"];
577--1473[label="1;93pkt 93fpkt"];
577--1699[label="0.0232558;1pkt 1fpkt"];
577--1797[label="0.0285714;3pkt 3fpkt"];
577--1807[label="0.0190476;2pkt 2fpkt"];
577--1811[label="0.00952381;1pkt 1fpkt"];
577--1812[label="0.0190476;2pkt 2fpkt"];
577--1832[label="0.0285714;3pkt 3fpkt"];
577--1843[label="0.0190476;2pkt 2fpkt"];
577--1846[label="0.00952381;1pkt 1fpkt"];
577--1847[label="0.0190476;2pkt 2fpkt"];
577--1864[label="0.0285714;3pkt 3fpkt"];
577--1872[label="0.0190476;2pkt 2fpkt"];
577--1875[label="0.00952381;1pkt 1fpkt"];
577--1876[label="0.0190476;2pkt 2fpkt"];
577--1896[label="0.2;1pkt 1fpkt"];
577--2047[label="0.0294118;1pkt 1fpkt"];
577--2141[label="0.0294118;1pkt 1fpkt"];
577--2350[label="0.027027;1pkt 1fpkt"];
577--2513[label="0.05;2pkt 2fpkt"];
577--2654[label="0.09375;3pkt 3fpkt"];
577--2785[label="0.0666667;1pkt 1fpkt"];
577--3076[label="1;1pkt 1fpkt"];
577--3108[label="0.0909091;3pkt 3fpkt"];
577--3176[label="0.0714286;1pkt 1fpkt"];
780--1473[label="1;1pkt 1fpkt"];
780--3076[label="1;1pkt 1fpkt"];
1473--1699[label="0.0232558;1pkt 1fpkt"];
1473--1797[label="0.0322581;3pkt 3fpkt"];
1473--1807[label="0.0215054;2pkt 2fpkt"];
1473--1811[label="0.0107527;1pkt 1fpkt"];
1473--1812[label="0.0215054;2pkt 2fpkt"];
1473--1832[label="0.0322581;3pkt 3fpkt"];
1473--1843[label="0.0215054;2pkt 2fpkt"];
1473--1846[label="0.0107527;1pkt 1fpkt"];
1473--1847[label="0.0215054;2pkt 2fpkt"];
1473--1864[label="0.0322581;3pkt 3fpkt"];
1473--1872[label="0.0215054;2pkt 2fpkt"];
1473--1875[label="0.0107527;1pkt 1fpkt"];
1473--1876[label="0.0215054;2pkt 2fpkt"];
1473--1896[label="0.2;1pkt 1fpkt"];
1473--2047[label="0.0294118;1pkt 1fpkt"];
1473--2141[label="0.0294118;1pkt 1fpkt"];
1473--2350[label="0.027027;1pkt 1fpkt"];
1473--2513[label="0.05;2pkt 2fpkt"];
1473--2654[label="0.09375;3pkt 3fpkt"];
1473--2785[label="0.0666667;1pkt 1fpkt"];
1473--3076[label="1;1pkt 1fpkt"];
1473--3108[label="0.0909091;3pkt 3fpkt"];
1473--3176[label="0.0714286;1pkt 1fpkt"];
2654--3108[label="1;32pkt 32fpkt"];
2785--3176[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_port="53"/>
      <filter dst_ip="208.77.205.139" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.245.59.233"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611097,1.9521,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_507{
style=filled;
color=gray75;
1034[label="171.70.37.161;d;11pkt 11fpkt", shape=diamond, color=yellow];
1035[label="193.101.129.234;s;4pkt 4fpkt", shape=diamond, color=yellow];
2620[label="193.97.128.218;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2667[label="193.101.129.234;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3094[label="193.97.128.218;4pkt 4fpkt", shape=invtriangle, color=brown];
3114[label="193.101.129.234;8pkt 8fpkt", shape=invtriangle, color=brown];
stat507[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.101.129.234:*, 171.70.37.161:80}[47.0588%]&lt;BR/&gt;{193.97.128.218:*, *:80}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.25%)&lt;BR/&gt; 56708: (5%)&lt;BR/&gt; 56707: (5%)&lt;BR/&gt; 56706: (5%)&lt;BR/&gt; 56703: (5%)&gt;];
}
1034--1035[label="1;4pkt 4fpkt"];
1034--2620[label="0.6;3pkt 3fpkt"];
1034--2667[label="0.5;4pkt 4fpkt"];
1034--3094[label="0.75;3pkt 3fpkt"];
1034--3114[label="0.5;4pkt 4fpkt"];
1035--2667[label="1;4pkt 4fpkt"];
1035--3114[label="1;4pkt 4fpkt"];
2620--3094[label="1;4pkt 4fpkt"];
2667--3114[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="193.97.128.218"/>
      <filter dst_ip="171.70.37.161" dst_port="80" src_ip="193.101.129.234"/>
    </slice>
    <from sec="1026018883" usec="0"/>
    <to sec="1026019442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="105.56.208.235"/>
    </slice>
    <from sec="1026018004" usec="0"/>
    <to sec="1026018922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_509{
style=filled;
color=gray75;
823[label="206.174.73.237;s;3pkt 3fpkt", shape=diamond, color=yellow];
2677[label="206.174.73.237;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3118[label="206.174.73.237;2pkt 2fpkt", shape=invtriangle, color=brown];
3352[label="206.174.73.237;2pkt 2fpkt", shape=invhouse, color=bisque];
stat509[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.174.73.237:80, 133.19.196.225:1341}[33.3333%]&lt;BR/&gt;{206.174.73.237:80, 133.19.196.225:1342}[33.3333%]&lt;BR/&gt;{206.174.73.237:80, 133.19.196.225:1343}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1343: (22.2222%)&lt;BR/&gt; 1342: (22.2222%)&lt;BR/&gt; 1341: (5.55556%)&gt;];
}
823--2677[label="1;2pkt 2fpkt"];
823--3118[label="1;2pkt 2fpkt"];
823--3352[label="1;2pkt 2fpkt"];
2677--3118[label="1;2pkt 2fpkt"];
2677--3352[label="1;2pkt 2fpkt"];
3118--3352[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.196.225" dst_port="1343" src_ip="206.174.73.237" src_port="80"/>
      <filter dst_ip="133.19.196.225" dst_port="1342" src_ip="206.174.73.237" src_port="80"/>
      <filter dst_ip="133.19.196.225" dst_port="1341" src_ip="206.174.73.237" src_port="80"/>
    </slice>
    <from sec="1026018666" usec="0"/>
    <to sec="1026019007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
2680[label="133.19.172.238;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3119[label="133.19.172.238;1pkt 1fpkt", shape=invtriangle, color=brown];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.19.172.238:4556, 212.146.45.159:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 4556: (50%)&gt;];
}
2680--3119[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.146.45.159" dst_port="6699" src_ip="133.19.172.238" src_port="4556"/>
    </slice>
    <from sec="1026018013" usec="0"/>
    <to sec="1026019582" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_511{
style=filled;
color=gray75;
2686[label="193.109.248.240;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3122[label="193.109.248.240;27pkt 27fpkt", shape=invtriangle, color=brown];
3354[label="193.109.248.240;26pkt 26fpkt", shape=invhouse, color=bisque];
stat511[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.109.248.240:*, 157.149.206.145:110}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 2861: (1.89873%)&lt;BR/&gt; 2858: (1.89873%)&lt;BR/&gt; 2855: (1.89873%)&lt;BR/&gt; 2852: (1.89873%)&gt;];
}
2686--3122[label="1;26pkt 26fpkt"];
2686--3354[label="1;26pkt 26fpkt"];
3122--3354[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.206.145" dst_port="110" src_ip="193.109.248.240"/>
    </slice>
    <from sec="1026018035" usec="0"/>
    <to sec="1026019642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="114.141.183.241"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
2691[label="154.198.81.242;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3126[label="154.198.81.242;2pkt 2fpkt", shape=invtriangle, color=brown];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.198.81.242:1209, 217.82.69.185:53}[50%]&lt;BR/&gt;{154.198.81.242:1209, 112.190.112.223:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1209: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
2691--3126[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="112.190.112.223" dst_port="53" src_ip="154.198.81.242" src_port="1209"/>
      <filter dst_ip="217.82.69.185" dst_port="53" src_ip="154.198.81.242" src_port="1209"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.181.115.243"/>
    </slice>
    <from sec="1026018003" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.830222,1.94902,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_515{
style=filled;
color=gray75;
1113[label="213.249.113.103;d;43pkt 43fpkt", shape=diamond, color=yellow];
1132[label="154.213.210.248;s;43pkt 43fpkt", shape=diamond, color=yellow];
2708[label="154.213.210.248;52pkt 52fpkt", shape=pentagon, color=darkviolet];
3132[label="154.213.210.248;51pkt 51fpkt", shape=invtriangle, color=brown];
3357[label="154.213.210.248;52pkt 52fpkt", shape=invhouse, color=bisque];
stat515[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.210.248:*, 213.249.113.103:80}[98.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5851%)&lt;BR/&gt; 1380: (1.03734%)&lt;BR/&gt; 1379: (1.03734%)&lt;BR/&gt; 1376: (1.03734%)&lt;BR/&gt; 1375: (1.03734%)&gt;];
}
1113--1132[label="1;43pkt 43fpkt"];
1113--1828[label="0.186047;8pkt 8fpkt"];
1113--1831[label="0.0465116;2pkt 2fpkt"];
1113--1860[label="0.186047;8pkt 8fpkt"];
1113--1863[label="0.0465116;2pkt 2fpkt"];
1113--2708[label="1;43pkt 43fpkt"];
1113--3132[label="1;43pkt 43fpkt"];
1113--3357[label="1;43pkt 43fpkt"];
1132--1828[label="0.186047;8pkt 8fpkt"];
1132--1831[label="0.0465116;2pkt 2fpkt"];
1132--1860[label="0.186047;8pkt 8fpkt"];
1132--1863[label="0.0465116;2pkt 2fpkt"];
1132--2708[label="1;43pkt 43fpkt"];
1132--3132[label="1;43pkt 43fpkt"];
1132--3357[label="1;43pkt 43fpkt"];
2708--3132[label="1;51pkt 51fpkt"];
2708--3357[label="1;52pkt 52fpkt"];
3132--3357[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="213.249.113.103" dst_port="80" src_ip="154.213.210.248"/>
    </slice>
    <from sec="1026018532" usec="0"/>
    <to sec="1026019650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813122,2.01049,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_516{
style=filled;
color=gray75;
2710[label="205.253.58.249;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3134[label="205.253.58.249;9pkt 9fpkt", shape=invtriangle, color=brown];
3359[label="205.253.58.249;8pkt 8fpkt", shape=invhouse, color=bisque];
stat516[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.253.58.249:80, 133.19.218.238:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1299: (5.76923%)&lt;BR/&gt; 1282: (5.76923%)&lt;BR/&gt; 1281: (5.76923%)&lt;BR/&gt; 1280: (5.76923%)&gt;];
}
2710--3134[label="1;9pkt 9fpkt"];
2710--3359[label="1;8pkt 8fpkt"];
3134--3359[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="133.19.218.238" src_ip="205.253.58.249" src_port="80"/>
    </slice>
    <from sec="1026018788" usec="0"/>
    <to sec="1026018838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
2711[label="193.173.128.251;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3135[label="193.173.128.251;12pkt 12fpkt", shape=invtriangle, color=brown];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.173.128.251:*, 157.149.242.203:110}[50%]&lt;BR/&gt;{193.173.128.251:*, 157.149.135.217:110}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 54238: (4.34783%)&lt;BR/&gt; 54236: (4.34783%)&lt;BR/&gt; 54233: (4.34783%)&lt;BR/&gt; 54231: (4.34783%)&gt;];
}
2711--3135[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="157.149.135.217" dst_port="110" src_ip="193.173.128.251"/>
      <filter dst_ip="157.149.242.203" dst_port="110" src_ip="193.173.128.251"/>
    </slice>
    <from sec="1026018123" usec="0"/>
    <to sec="1026019627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587655,2.01347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_518{
style=filled;
color=gray75;
2715[label="154.213.210.253;43pkt 43fpkt", shape=pentagon, color=darkviolet];
3136[label="154.213.210.253;43pkt 43fpkt", shape=invtriangle, color=brown];
stat518[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.213.210.253:*, 140.14.56.181:80}[27.907%]&lt;BR/&gt;{154.213.210.253:*, 215.114.192.209:80}[27.907%]&lt;BR/&gt;{154.213.210.253:*, 212.152.180.164:80}[23.2558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1460: (1.16279%)&lt;BR/&gt; 1458: (1.16279%)&lt;BR/&gt; 1457: (1.16279%)&lt;BR/&gt; 1456: (1.16279%)&gt;];
}
2715--3136[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="215.114.192.209" dst_port="80" src_ip="154.213.210.253"/>
      <filter dst_ip="140.14.56.181" dst_port="80" src_ip="154.213.210.253"/>
      <filter dst_ip="212.152.180.164" dst_port="80" src_ip="154.213.210.253"/>
    </slice>
    <from sec="1026018420" usec="0"/>
    <to sec="1026019482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648209,2.04862,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.212.229.255"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026019154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.29.8.7"/>
    </slice>
    <from sec="1026018016" usec="0"/>
    <to sec="1026019660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7309,2.02988,502,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_521{
style=filled;
color=gray75;
1953[label="62.187.154.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3162[label="62.187.154.19;1pkt 1fpkt", shape=invhouse, color=bisque];
stat521[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.187.154.19:3825, 154.19.143.153:22}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3825: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
1953--3162[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="154.19.143.153" dst_port="22" src_ip="62.187.154.19" src_port="3825"/>
    </slice>
    <from sec="1026019589" usec="0"/>
    <to sec="1026019605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.28.51.34"/>
    </slice>
    <from sec="1026018029" usec="0"/>
    <to sec="1026019649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.23.80.46"/>
    </slice>
    <from sec="1026018019" usec="0"/>
    <to sec="1026019640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.148.127.68"/>
    </slice>
    <from sec="1026018019" usec="0"/>
    <to sec="1026019658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.148.127.70"/>
    </slice>
    <from sec="1026018019" usec="0"/>
    <to sec="1026019658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.169.201.80"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.202.151.90"/>
    </slice>
    <from sec="1026018007" usec="0"/>
    <to sec="1026019427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="160.248.76.106"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.96.153.126"/>
    </slice>
    <from sec="1026018067" usec="0"/>
    <to sec="1026018078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.2.176.127"/>
    </slice>
    <from sec="1026018001" usec="0"/>
    <to sec="1026018042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.907705,1.89618,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_531{
style=filled;
color=gray75;
264[label="173.138.197.152;s;70pkt 70fpkt", shape=diamond, color=yellow];
501[label="208.58.0.160;d;25pkt 25fpkt", shape=diamond, color=yellow];
690[label="208.14.4.56;d;4pkt 4fpkt", shape=diamond, color=yellow];
1018[label="208.169.233.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
1383[label="208.58.0.160;d;24pkt 24fpkt", shape=hexagon, color=black];
1635[label="208.169.233.233;d;1pkt 1fpkt", shape=hexagon, color=black];
2405[label="173.138.197.152;70pkt 70fpkt", shape=pentagon, color=darkviolet];
2977[label="173.138.197.152;71pkt 71fpkt", shape=invtriangle, color=brown];
3275[label="173.138.197.152;70pkt 70fpkt", shape=invhouse, color=bisque];
stat531[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.197.152:80, 208.58.0.160:*}[35.2113%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.0476%)&lt;BR/&gt; 0: (4.7619%)&lt;BR/&gt; 53: (3.57143%)&lt;BR/&gt; 64633: (0.892857%)&lt;BR/&gt; 64632: (0.892857%)&gt;];
}
264--412[label="1;6pkt 6fpkt"];
264--501[label="1;25pkt 25fpkt"];
264--690[label="1;4pkt 4fpkt"];
264--915[label="1;1pkt 1fpkt"];
264--1018[label="1;1pkt 1fpkt"];
264--1359[label="1;33pkt 33fpkt"];
264--1383[label="1;24pkt 24fpkt"];
264--1635[label="1;1pkt 1fpkt"];
264--1686[label="1;1pkt 1fpkt"];
264--1797[label="0.0857143;6pkt 6fpkt"];
264--1807[label="0.0714286;5pkt 5fpkt"];
264--1812[label="0.3;21pkt 21fpkt"];
264--1819[label="0.357143;25pkt 25fpkt"];
264--1832[label="0.0857143;6pkt 6fpkt"];
264--1843[label="0.0714286;5pkt 5fpkt"];
264--1847[label="0.3;21pkt 21fpkt"];
264--1855[label="0.357143;25pkt 25fpkt"];
264--1864[label="0.0857143;6pkt 6fpkt"];
264--1872[label="0.0714286;5pkt 5fpkt"];
264--1876[label="0.3;21pkt 21fpkt"];
264--1881[label="0.357143;25pkt 25fpkt"];
264--2405[label="0.985714;69pkt 69fpkt"];
264--2977[label="1;70pkt 70fpkt"];
264--3275[label="0.985714;69pkt 69fpkt"];
501--1359[label="0.4;10pkt 10fpkt"];
501--1383[label="1;24pkt 24fpkt"];
501--1812[label="0.4;10pkt 10fpkt"];
501--1819[label="0.4;10pkt 10fpkt"];
501--1847[label="0.4;10pkt 10fpkt"];
501--1855[label="0.4;10pkt 10fpkt"];
501--1876[label="0.4;10pkt 10fpkt"];
501--1881[label="0.4;10pkt 10fpkt"];
501--2405[label="1;25pkt 25fpkt"];
501--2977[label="1;25pkt 25fpkt"];
501--3275[label="1;25pkt 25fpkt"];
690--2405[label="1;4pkt 4fpkt"];
690--2977[label="1;4pkt 4fpkt"];
690--3275[label="1;4pkt 4fpkt"];
1018--1635[label="1;1pkt 1fpkt"];
1018--2405[label="1;1pkt 1fpkt"];
1018--2977[label="1;1pkt 1fpkt"];
1018--3275[label="1;1pkt 1fpkt"];
1383--1812[label="0.416667;10pkt 10fpkt"];
1383--1819[label="0.416667;10pkt 10fpkt"];
1383--1847[label="0.416667;10pkt 10fpkt"];
1383--1855[label="0.416667;10pkt 10fpkt"];
1383--1876[label="0.416667;10pkt 10fpkt"];
1383--1881[label="0.416667;10pkt 10fpkt"];
1383--2405[label="1;24pkt 24fpkt"];
1383--2977[label="1;24pkt 24fpkt"];
1383--3275[label="1;24pkt 24fpkt"];
1635--2405[label="1;1pkt 1fpkt"];
1635--2977[label="1;1pkt 1fpkt"];
1635--3275[label="1;1pkt 1fpkt"];
2405--2977[label="1;70pkt 70fpkt"];
2405--3275[label="1;70pkt 70fpkt"];
2977--3275[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="208.58.0.160" src_ip="173.138.197.152" src_port="80"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.99.31.168"/>
    </slice>
    <from sec="1026018066" usec="0"/>
    <to sec="1026019496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.131.175.205"/>
    </slice>
    <from sec="1026018013" usec="0"/>
    <to sec="1026019654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.243.2.206"/>
    </slice>
    <from sec="1026019664" usec="0"/>
    <to sec="1026019665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.24.116.211"/>
    </slice>
    <from sec="1026018000" usec="0"/>
    <to sec="1026018171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="207.139.229.212"/>
    </slice>
    <from sec="1026019435" usec="0"/>
    <to sec="1026019486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.28.230.224"/>
    </slice>
    <from sec="1026018007" usec="0"/>
    <to sec="1026018321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.780418,2.06474,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.133.214.227"/>
    </slice>
    <from sec="1026018003" usec="0"/>
    <to sec="1026018437" usec="0"/>
  </anomaly>

</admd:annotation>
