<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="75.97.120.235" dst_port="80" proto="tcp" src_ip="141.133.232.10" src_port="53"/>
      <filter dst_ip="75.97.120.235" dst_port="80" proto="udp" src_ip="141.133.232.10" src_port="53"/>
      <filter dst_ip="75.97.120.235" dst_port="53" proto="tcp" src_ip="141.133.232.10" src_port="53"/>
      <filter dst_ip="75.97.120.235" dst_port="53" proto="udp" src_ip="141.133.232.10" src_port="53"/>
      <filter dst_ip="75.97.120.235" dst_port="3869" proto="tcp" src_ip="141.133.232.10" src_port="53"/>
      <filter dst_ip="75.97.120.235" dst_port="3869" proto="udp" src_ip="141.133.232.10" src_port="53"/>
      <filter dst_ip="219.253.59.207" dst_port="80" proto="tcp" src_ip="141.133.232.10" src_port="53"/>
      <filter dst_ip="219.253.59.207" dst_port="80" proto="udp" src_ip="141.133.232.10" src_port="53"/>
      <filter dst_ip="219.253.59.207" dst_port="53" proto="tcp" src_ip="141.133.232.10" src_port="53"/>
      <filter dst_ip="219.253.59.207" dst_port="53" proto="udp" src_ip="141.133.232.10" src_port="53"/>
      <filter dst_ip="219.253.59.207" dst_port="3869" proto="tcp" src_ip="141.133.232.10" src_port="53"/>
      <filter dst_ip="219.253.59.207" dst_port="3869" proto="udp" src_ip="141.133.232.10" src_port="53"/>
      <from sec="1031548493" usec="0"/>
      <to sec="1031548498" usec="0"/>
    </slice>
    <from sec="1031548483" usec="0"/>
    <to sec="1031548500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="151.145.181.80" dst_port="80" proto="tcp" src_ip="141.133.135.33"/>
      <filter dst_ip="151.145.181.80" dst_port="80" proto="udp" src_ip="141.133.135.33"/>
      <filter dst_ip="151.145.181.80" dst_port="53" proto="tcp" src_ip="141.133.135.33"/>
      <filter dst_ip="151.145.181.80" dst_port="53" proto="udp" src_ip="141.133.135.33"/>
      <from sec="1031548543" usec="0"/>
      <to sec="1031548552" usec="0"/>
    </slice>
    <from sec="1031548534" usec="0"/>
    <to sec="1031548560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="44.31.20.89" dst_port="80" proto="tcp" src_ip="141.133.232.38" src_port="4919"/>
      <filter dst_ip="44.31.20.89" dst_port="80" proto="udp" src_ip="141.133.232.38" src_port="4919"/>
      <filter dst_ip="44.31.20.89" dst_port="80" proto="tcp" src_ip="141.133.232.38" src_port="1039"/>
      <filter dst_ip="44.31.20.89" dst_port="80" proto="udp" src_ip="141.133.232.38" src_port="1039"/>
      <from sec="1031548486" usec="0"/>
      <to sec="1031548655" usec="0"/>
    </slice>
    <from sec="1031548178" usec="0"/>
    <to sec="1031548655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.198.235.133" dst_port="80" proto="tcp" src_ip="141.133.201.86" src_port="53"/>
      <filter dst_ip="213.198.235.133" dst_port="80" proto="udp" src_ip="141.133.201.86" src_port="53"/>
      <filter dst_ip="213.198.235.133" dst_port="80" proto="tcp" src_ip="141.133.201.86" src_port="25"/>
      <filter dst_ip="213.198.235.133" dst_port="80" proto="udp" src_ip="141.133.201.86" src_port="25"/>
      <filter dst_ip="213.198.235.133" dst_port="80" proto="tcp" src_ip="141.133.201.86" src_port="80"/>
      <filter dst_ip="213.198.235.133" dst_port="80" proto="udp" src_ip="141.133.201.86" src_port="80"/>
      <from sec="1031548371" usec="0"/>
      <to sec="1031548477" usec="0"/>
    </slice>
    <from sec="1031548370" usec="0"/>
    <to sec="1031548477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="75.156.8.210" dst_port="80" proto="tcp" src_ip="209.88.197.117" src_port="53"/>
      <filter dst_ip="75.156.8.210" dst_port="80" proto="udp" src_ip="209.88.197.117" src_port="53"/>
      <filter dst_ip="75.156.8.210" dst_port="1024" proto="tcp" src_ip="209.88.197.117" src_port="53"/>
      <filter dst_ip="75.156.8.210" dst_port="1024" proto="udp" src_ip="209.88.197.117" src_port="53"/>
      <filter dst_ip="75.156.8.210" dst_port="80" proto="tcp" src_ip="209.88.197.117" src_port="80"/>
      <filter dst_ip="75.156.8.210" dst_port="80" proto="udp" src_ip="209.88.197.117" src_port="80"/>
      <filter dst_ip="75.156.8.210" dst_port="1024" proto="tcp" src_ip="209.88.197.117" src_port="80"/>
      <filter dst_ip="75.156.8.210" dst_port="1024" proto="udp" src_ip="209.88.197.117" src_port="80"/>
      <filter dst_ip="75.156.8.210" dst_port="80" proto="tcp" src_ip="209.88.197.117" src_port="1148"/>
      <filter dst_ip="75.156.8.210" dst_port="80" proto="udp" src_ip="209.88.197.117" src_port="1148"/>
      <filter dst_ip="75.156.8.210" dst_port="1024" proto="tcp" src_ip="209.88.197.117" src_port="1148"/>
      <filter dst_ip="75.156.8.210" dst_port="1024" proto="udp" src_ip="209.88.197.117" src_port="1148"/>
      <filter dst_ip="209.85.226.212" dst_port="80" proto="tcp" src_ip="209.88.197.117" src_port="53"/>
      <filter dst_ip="209.85.226.212" dst_port="80" proto="udp" src_ip="209.88.197.117" src_port="53"/>
      <filter dst_ip="209.85.226.212" dst_port="1024" proto="tcp" src_ip="209.88.197.117" src_port="53"/>
      <filter dst_ip="209.85.226.212" dst_port="1024" proto="udp" src_ip="209.88.197.117" src_port="53"/>
      <filter dst_ip="209.85.226.212" dst_port="80" proto="tcp" src_ip="209.88.197.117" src_port="80"/>
      <filter dst_ip="209.85.226.212" dst_port="80" proto="udp" src_ip="209.88.197.117" src_port="80"/>
      <filter dst_ip="209.85.226.212" dst_port="1024" proto="tcp" src_ip="209.88.197.117" src_port="80"/>
      <filter dst_ip="209.85.226.212" dst_port="1024" proto="udp" src_ip="209.88.197.117" src_port="80"/>
      <filter dst_ip="209.85.226.212" dst_port="80" proto="tcp" src_ip="209.88.197.117" src_port="1148"/>
      <filter dst_ip="209.85.226.212" dst_port="80" proto="udp" src_ip="209.88.197.117" src_port="1148"/>
      <filter dst_ip="209.85.226.212" dst_port="1024" proto="tcp" src_ip="209.88.197.117" src_port="1148"/>
      <filter dst_ip="209.85.226.212" dst_port="1024" proto="udp" src_ip="209.88.197.117" src_port="1148"/>
      <from sec="1031548403" usec="0"/>
      <to sec="1031548420" usec="0"/>
    </slice>
    <from sec="1031548403" usec="0"/>
    <to sec="1031548420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="72.172.10.193" dst_port="80" proto="tcp" src_ip="162.73.36.165" src_port="3079"/>
      <filter dst_ip="72.172.10.193" dst_port="80" proto="udp" src_ip="162.73.36.165" src_port="3079"/>
      <filter dst_ip="72.172.10.193" dst_port="53" proto="tcp" src_ip="162.73.36.165" src_port="3079"/>
      <filter dst_ip="72.172.10.193" dst_port="53" proto="udp" src_ip="162.73.36.165" src_port="3079"/>
      <filter dst_ip="72.60.46.145" dst_port="80" proto="tcp" src_ip="162.73.36.165" src_port="3079"/>
      <filter dst_ip="72.60.46.145" dst_port="80" proto="udp" src_ip="162.73.36.165" src_port="3079"/>
      <filter dst_ip="72.60.46.145" dst_port="53" proto="tcp" src_ip="162.73.36.165" src_port="3079"/>
      <filter dst_ip="72.60.46.145" dst_port="53" proto="udp" src_ip="162.73.36.165" src_port="3079"/>
      <from sec="1031548510" usec="0"/>
      <to sec="1031548574" usec="0"/>
    </slice>
    <from sec="1031548510" usec="0"/>
    <to sec="1031548584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="140.121.195.97" dst_port="80" proto="tcp" src_ip="141.133.20.186" src_port="80"/>
      <filter dst_ip="140.121.195.97" dst_port="80" proto="tcp" src_ip="141.133.20.186" src_port="21"/>
      <from sec="1031548338" usec="0"/>
      <to sec="1031548359" usec="0"/>
    </slice>
    <from sec="1031548338" usec="0"/>
    <to sec="1031548364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="46.140.78.1" dst_port="80" proto="tcp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="46.140.78.1" dst_port="80" proto="udp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="46.140.78.1" dst_port="25" proto="tcp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="46.140.78.1" dst_port="25" proto="udp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="46.140.78.1" dst_port="53" proto="tcp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="46.140.78.1" dst_port="53" proto="udp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="141.133.16.24" dst_port="80" proto="tcp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="141.133.16.24" dst_port="80" proto="udp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="141.133.16.24" dst_port="25" proto="tcp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="141.133.16.24" dst_port="25" proto="udp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="141.133.16.24" dst_port="53" proto="tcp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="141.133.16.24" dst_port="53" proto="udp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="194.65.5.180" dst_port="25" proto="tcp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="194.65.5.180" dst_port="25" proto="udp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="141.133.26.203" src_port="1037"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="141.133.26.203" src_port="1037"/>
      <from sec="1031548607" usec="0"/>
      <to sec="1031548626" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="46.140.78.1" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="46.140.78.1" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="46.140.78.1" dst_port="25" proto="tcp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="46.140.78.1" dst_port="25" proto="udp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="46.140.78.1" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="46.140.78.1" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="141.133.16.24" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="141.133.16.24" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="141.133.16.24" dst_port="25" proto="tcp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="141.133.16.24" dst_port="25" proto="udp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="141.133.16.24" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="141.133.16.24" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="194.65.5.180" dst_port="25" proto="tcp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="194.65.5.180" dst_port="25" proto="udp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="1037"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="1037"/>
      <from sec="1031548610" usec="0"/>
      <to sec="1031548630" usec="0"/>
    </slice>
    <from sec="1031548607" usec="0"/>
    <to sec="1031548632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.53.97.111" dst_port="80" proto="tcp" src_ip="136.65.182.234" src_port="53"/>
      <filter dst_ip="193.53.97.111" dst_port="80" proto="udp" src_ip="136.65.182.234" src_port="53"/>
      <filter dst_ip="193.53.97.111" dst_port="53" proto="tcp" src_ip="136.65.182.234" src_port="53"/>
      <filter dst_ip="193.53.97.111" dst_port="53" proto="udp" src_ip="136.65.182.234" src_port="53"/>
      <from sec="1031548522" usec="0"/>
      <to sec="1031548535" usec="0"/>
    </slice>
    <from sec="1031548510" usec="0"/>
    <to sec="1031548535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.103.193.224" dst_port="137" proto="tcp" src_ip="208.50.233.246" src_port="137"/>
      <filter dst_ip="208.103.193.224" dst_port="137" proto="udp" src_ip="208.50.233.246" src_port="137"/>
      <filter dst_ip="208.103.193.224" dst_port="53" proto="tcp" src_ip="208.50.233.246" src_port="137"/>
      <filter dst_ip="208.103.193.224" dst_port="53" proto="udp" src_ip="208.50.233.246" src_port="137"/>
      <filter dst_ip="208.103.193.224" dst_port="137" proto="tcp" src_ip="208.50.233.246" src_port="53"/>
      <filter dst_ip="208.103.193.224" dst_port="137" proto="udp" src_ip="208.50.233.246" src_port="53"/>
      <filter dst_ip="208.103.193.224" dst_port="53" proto="tcp" src_ip="208.50.233.246" src_port="53"/>
      <filter dst_ip="208.103.193.224" dst_port="53" proto="udp" src_ip="208.50.233.246" src_port="53"/>
      <filter dst_ip="208.103.193.224" dst_port="137" proto="tcp" src_ip="208.50.233.246" src_port="80"/>
      <filter dst_ip="208.103.193.224" dst_port="137" proto="udp" src_ip="208.50.233.246" src_port="80"/>
      <filter dst_ip="208.103.193.224" dst_port="53" proto="tcp" src_ip="208.50.233.246" src_port="80"/>
      <filter dst_ip="208.103.193.224" dst_port="53" proto="udp" src_ip="208.50.233.246" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="137" proto="tcp" src_ip="208.50.233.246" src_port="137"/>
      <filter dst_ip="208.103.149.174" dst_port="137" proto="udp" src_ip="208.50.233.246" src_port="137"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="208.50.233.246" src_port="137"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="208.50.233.246" src_port="137"/>
      <filter dst_ip="208.103.149.174" dst_port="137" proto="tcp" src_ip="208.50.233.246" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="137" proto="udp" src_ip="208.50.233.246" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="208.50.233.246" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="208.50.233.246" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="137" proto="tcp" src_ip="208.50.233.246" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="137" proto="udp" src_ip="208.50.233.246" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="208.50.233.246" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="208.50.233.246" src_port="80"/>
      <from sec="1031548380" usec="0"/>
      <to sec="1031548388" usec="0"/>
    </slice>
    <from sec="1031548370" usec="0"/>
    <to sec="1031548388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.103.152.48" dst_port="32782" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.152.48" dst_port="32782" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.152.48" dst_port="32782" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.152.48" dst_port="32782" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.152.48" dst_port="32782" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.152.48" dst_port="32782" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.152.48" dst_port="32782" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.152.48" dst_port="32782" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.152.48" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.152.48" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.152.48" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.152.48" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.152.48" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.152.48" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.152.48" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.152.48" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.152.48" dst_port="32782" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.152.48" dst_port="32782" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.152.48" dst_port="32782" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.152.48" dst_port="32782" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.152.48" dst_port="32782" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.152.48" dst_port="32782" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.152.48" dst_port="32782" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.152.48" dst_port="32782" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.152.48" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.152.48" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.152.48" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.152.48" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.152.48" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.152.48" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.152.48" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.152.48" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <from sec="1031548336" usec="0"/>
      <to sec="1031548354" usec="0"/>
    </slice>
    <from sec="1031548335" usec="0"/>
    <to sec="1031548354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.78.226.59" dst_port="53" proto="tcp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="53" proto="udp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="53" proto="tcp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="53" proto="udp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="53" proto="tcp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="53" proto="udp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="53" proto="tcp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="53" proto="udp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="80" proto="tcp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="80" proto="udp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="80" proto="tcp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="80" proto="udp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="80" proto="tcp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="80" proto="udp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="80" proto="tcp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="80" proto="udp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="21" proto="tcp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="21" proto="udp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="21" proto="tcp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="21" proto="udp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="21" proto="tcp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="21" proto="udp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="21" proto="tcp" src_ip="208.88.0.233"/>
      <filter dst_ip="208.78.226.59" dst_port="21" proto="udp" src_ip="208.88.0.233"/>
      <from sec="1031548006" usec="0"/>
      <to sec="1031548655" usec="0"/>
    </slice>
    <from sec="1031548006" usec="0"/>
    <to sec="1031548655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="205.239.184.55" src_port="21"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="205.239.184.55" src_port="21"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="205.239.184.55" src_port="21"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="205.239.184.55" src_port="21"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="205.239.184.55" src_port="21"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="205.239.184.55" src_port="21"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="205.239.184.55" src_port="21"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="205.239.184.55" src_port="21"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="205.239.184.55" src_port="53"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="205.239.184.55" src_port="53"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="205.239.184.55" src_port="53"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="205.239.184.55" src_port="53"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="205.239.184.55" src_port="53"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="205.239.184.55" src_port="53"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="205.239.184.55" src_port="53"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="205.239.184.55" src_port="53"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="205.239.184.55" src_port="80"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="205.239.184.55" src_port="80"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="205.239.184.55" src_port="80"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="205.239.184.55" src_port="80"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="205.239.184.55" src_port="80"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="205.239.184.55" src_port="80"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="205.239.184.55" src_port="80"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="205.239.184.55" src_port="80"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.224.67" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <from sec="1031548353" usec="0"/>
      <to sec="1031548659" usec="0"/>
    </slice>
    <from sec="1031548353" usec="0"/>
    <to sec="1031548659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07263,1.92615,901,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_13{
style=filled;
color=gray75;
0[label="209.65.246.0s;3pkt 3fpkt", shape=rectangle, color=red];
91[label="141.133.201.69d;3pkt 3fpkt", shape=rectangle, color=red];
205[label="219.253.59.207;d;2664pkt 2664fpkt", shape=diamond, color=yellow];
264[label="219.253.59.54;d;141pkt 141fpkt", shape=diamond, color=yellow];
270[label="208.103.137.20;d;9pkt 9fpkt", shape=diamond, color=yellow];
271[label="209.65.246.0;s;17pkt 17fpkt", shape=diamond, color=yellow];
380[label="209.65.246.36;s;17pkt 17fpkt", shape=diamond, color=yellow];
593[label="218.45.121.54;s;2pkt 2fpkt", shape=diamond, color=yellow];
711[label="208.103.137.22;d;8pkt 8fpkt", shape=diamond, color=yellow];
775[label="219.253.59.1;d;7pkt 7fpkt", shape=diamond, color=yellow];
818[label="218.115.71.33;s;1pkt 1fpkt", shape=diamond, color=yellow];
881[label="208.103.137.69;d;6pkt 6fpkt", shape=diamond, color=yellow];
1672[label="219.253.59.207;d;324pkt 324fpkt", shape=hexagon, color=black];
1727[label="209.65.246.36;s;15pkt 15fpkt", shape=hexagon, color=black];
1825[label="218.115.71.33;s;1pkt 1fpkt", shape=hexagon, color=black];
1847[label="208.103.137.20;d;9pkt 9fpkt", shape=hexagon, color=black];
1947[label="219.253.59.54;d;141pkt 141fpkt", shape=hexagon, color=black];
1948[label="218.45.121.54;s;2pkt 2fpkt", shape=hexagon, color=black];
2024[label="209.65.246.17;s;16pkt 16fpkt", shape=hexagon, color=black];
2052[label="208.103.144.31;d;8pkt 8fpkt", shape=hexagon, color=black];
2408[label="214.213.127.43;60pkt 60fpkt", shape=pentagon, color=darkviolet];
2976[label="214.213.127.43;60pkt 60fpkt", shape=invtriangle, color=brown];
3273[label="214.213.127.43;60pkt 60fpkt", shape=invhouse, color=bisque];
stat13[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 219.253.59.207:53}[77.9141%]&lt;BR/&gt;{*:53, *:*}[24.9489%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.6156%)&lt;BR/&gt; 3869: (4.64466%)&lt;BR/&gt; 0: (4.05708%)&lt;BR/&gt; 4337: (2.43425%)&lt;BR/&gt; 80: (2.37829%)&gt;];
}
0--91[label="0.666667;2pkt 2fpkt"];
0--270[label="0.333333;1pkt 1fpkt"];
0--271[label="1;3pkt 3fpkt"];
0--711[label="0.333333;1pkt 1fpkt"];
0--881[label="0.333333;1pkt 1fpkt"];
0--1847[label="0.333333;1pkt 1fpkt"];
0--2266[label="1;3pkt 3fpkt"];
0--2273[label="1;3pkt 3fpkt"];
91--270[label="0.333333;1pkt 1fpkt"];
91--271[label="0.666667;2pkt 2fpkt"];
91--567[label="0.333333;1pkt 1fpkt"];
91--711[label="0.333333;1pkt 1fpkt"];
91--1847[label="0.333333;1pkt 1fpkt"];
91--2266[label="0.666667;2pkt 2fpkt"];
91--2273[label="0.666667;2pkt 2fpkt"];
205--271[label="0.0588235;1pkt 1fpkt"];
205--272[label="0.0526316;1pkt 1fpkt"];
205--300[label="0.0588235;1pkt 1fpkt"];
205--380[label="0.0588235;1pkt 1fpkt"];
205--593[label="0.5;1pkt 1fpkt"];
205--999[label="0.00251889;1pkt 1fpkt"];
205--1231[label="0.166667;1pkt 1fpkt"];
205--1232[label="0.142857;1pkt 1fpkt"];
205--1672[label="1;324pkt 324fpkt"];
205--1727[label="0.0666667;1pkt 1fpkt"];
205--1948[label="0.5;1pkt 1fpkt"];
205--1957[label="0.00251889;1pkt 1fpkt"];
205--2024[label="0.0625;1pkt 1fpkt"];
205--2251[label="0.0170576;16pkt 16fpkt"];
205--2253[label="0.0431682;115pkt 115fpkt"];
205--2256[label="0.0630631;168pkt 168fpkt"];
205--2260[label="0.0138425;29pkt 29fpkt"];
205--2266[label="0.0322823;86pkt 86fpkt"];
205--2273[label="0.0322823;86pkt 86fpkt"];
205--2298[label="0.0714286;1pkt 1fpkt"];
205--2299[label="0.0166667;1pkt 1fpkt"];
205--2308[label="0.111111;1pkt 1fpkt"];
205--2408[label="0.0166667;1pkt 1fpkt"];
205--2615[label="0.166667;1pkt 1fpkt"];
205--2689[label="0.0666667;1pkt 1fpkt"];
205--2916[label="0.0714286;1pkt 1fpkt"];
205--2917[label="0.0169492;1pkt 1fpkt"];
205--2976[label="0.0166667;1pkt 1fpkt"];
205--3122[label="0.0666667;1pkt 1fpkt"];
205--3240[label="0.0769231;1pkt 1fpkt"];
205--3241[label="0.0169492;1pkt 1fpkt"];
205--3269[label="0.00242131;1pkt 1fpkt"];
205--3273[label="0.0166667;1pkt 1fpkt"];
205--3336[label="0.0666667;1pkt 1fpkt"];
264--271[label="0.0588235;1pkt 1fpkt"];
264--272[label="0.0526316;1pkt 1fpkt"];
264--300[label="0.0588235;1pkt 1fpkt"];
264--380[label="0.0588235;1pkt 1fpkt"];
264--463[label="0.0070922;1pkt 1fpkt"];
264--593[label="0.5;1pkt 1fpkt"];
264--999[label="0.0070922;1pkt 1fpkt"];
264--1230[label="0.2;1pkt 1fpkt"];
264--1231[label="0.166667;1pkt 1fpkt"];
264--1232[label="0.142857;1pkt 1fpkt"];
264--1727[label="0.0666667;1pkt 1fpkt"];
264--1947[label="1;141pkt 141fpkt"];
264--1948[label="0.5;1pkt 1fpkt"];
264--1957[label="0.0070922;1pkt 1fpkt"];
264--2024[label="0.0625;1pkt 1fpkt"];
264--2253[label="0.0141844;2pkt 2fpkt"];
264--2256[label="0.0070922;1pkt 1fpkt"];
264--2260[label="0.0070922;1pkt 1fpkt"];
264--2266[label="0.163121;23pkt 23fpkt"];
264--2273[label="0.163121;23pkt 23fpkt"];
264--2299[label="0.0166667;1pkt 1fpkt"];
264--2308[label="0.111111;1pkt 1fpkt"];
264--2917[label="0.0169492;1pkt 1fpkt"];
264--3241[label="0.0169492;1pkt 1fpkt"];
264--3269[label="0.0070922;1pkt 1fpkt"];
270--271[label="0.111111;1pkt 1fpkt"];
270--272[label="0.111111;1pkt 1fpkt"];
270--300[label="0.111111;1pkt 1fpkt"];
270--380[label="0.111111;1pkt 1fpkt"];
270--1727[label="0.111111;1pkt 1fpkt"];
270--1847[label="1;9pkt 9fpkt"];
270--2024[label="0.111111;1pkt 1fpkt"];
270--2266[label="0.666667;6pkt 6fpkt"];
270--2273[label="0.666667;6pkt 6fpkt"];
271--283[label="0.0588235;1pkt 1fpkt"];
271--711[label="0.125;1pkt 1fpkt"];
271--712[label="0.0625;1pkt 1fpkt"];
271--734[label="0.0833333;1pkt 1fpkt"];
271--752[label="0.0588235;1pkt 1fpkt"];
271--881[label="0.166667;1pkt 1fpkt"];
271--1154[label="0.125;1pkt 1fpkt"];
271--1495[label="0.0588235;1pkt 1fpkt"];
271--1594[label="0.0909091;1pkt 1fpkt"];
271--1672[label="0.0588235;1pkt 1fpkt"];
271--1847[label="0.111111;1pkt 1fpkt"];
271--1947[label="0.0588235;1pkt 1fpkt"];
271--2025[label="0.0833333;1pkt 1fpkt"];
271--2052[label="0.125;1pkt 1fpkt"];
271--2140[label="0.0588235;1pkt 1fpkt"];
271--2251[label="0.117647;2pkt 2fpkt"];
271--2253[label="0.117647;2pkt 2fpkt"];
271--2256[label="0.117647;2pkt 2fpkt"];
271--2260[label="0.117647;2pkt 2fpkt"];
271--2266[label="0.823529;14pkt 14fpkt"];
271--2273[label="0.823529;14pkt 14fpkt"];
380--711[label="0.125;1pkt 1fpkt"];
380--712[label="0.0625;1pkt 1fpkt"];
380--734[label="0.0833333;1pkt 1fpkt"];
380--752[label="0.0588235;1pkt 1fpkt"];
380--775[label="0.142857;1pkt 1fpkt"];
380--881[label="0.166667;1pkt 1fpkt"];
380--1154[label="0.125;1pkt 1fpkt"];
380--1594[label="0.0909091;1pkt 1fpkt"];
380--1672[label="0.0588235;1pkt 1fpkt"];
380--1727[label="1;15pkt 15fpkt"];
380--1772[label="0.142857;1pkt 1fpkt"];
380--1847[label="0.111111;1pkt 1fpkt"];
380--1947[label="0.0588235;1pkt 1fpkt"];
380--2025[label="0.0833333;1pkt 1fpkt"];
380--2052[label="0.125;1pkt 1fpkt"];
380--2140[label="0.0588235;1pkt 1fpkt"];
380--2251[label="0.117647;2pkt 2fpkt"];
380--2253[label="0.117647;2pkt 2fpkt"];
380--2256[label="0.117647;2pkt 2fpkt"];
380--2260[label="0.117647;2pkt 2fpkt"];
380--2266[label="0.764706;13pkt 13fpkt"];
380--2273[label="0.764706;13pkt 13fpkt"];
593--1947[label="0.5;1pkt 1fpkt"];
593--1948[label="1;2pkt 2fpkt"];
593--2266[label="0.5;1pkt 1fpkt"];
593--2273[label="0.5;1pkt 1fpkt"];
711--1727[label="0.125;1pkt 1fpkt"];
711--2024[label="0.125;1pkt 1fpkt"];
711--2266[label="0.625;5pkt 5fpkt"];
711--2273[label="0.625;5pkt 5fpkt"];
775--818[label="1;1pkt 1fpkt"];
775--1727[label="0.142857;1pkt 1fpkt"];
775--1772[label="1;7pkt 7fpkt"];
775--1825[label="1;1pkt 1fpkt"];
775--2247[label="0.285714;2pkt 2fpkt"];
818--1772[label="1;1pkt 1fpkt"];
818--1825[label="1;1pkt 1fpkt"];
818--2247[label="1;1pkt 1fpkt"];
881--1727[label="0.166667;1pkt 1fpkt"];
881--2024[label="0.166667;1pkt 1fpkt"];
881--2266[label="0.666667;4pkt 4fpkt"];
881--2273[label="0.666667;4pkt 4fpkt"];
1672--1727[label="0.0666667;1pkt 1fpkt"];
1672--1957[label="0.00308642;1pkt 1fpkt"];
1672--2024[label="0.0625;1pkt 1fpkt"];
1672--2251[label="0.0493827;16pkt 16fpkt"];
1672--2253[label="0.154321;50pkt 50fpkt"];
1672--2256[label="0.0246914;8pkt 8fpkt"];
1672--2260[label="0.00617284;2pkt 2fpkt"];
1672--2266[label="0.0987654;32pkt 32fpkt"];
1672--2273[label="0.0987654;32pkt 32fpkt"];
1672--2299[label="0.0166667;1pkt 1fpkt"];
1672--2308[label="0.111111;1pkt 1fpkt"];
1672--2917[label="0.0169492;1pkt 1fpkt"];
1672--3241[label="0.0169492;1pkt 1fpkt"];
1672--3269[label="0.00308642;1pkt 1fpkt"];
1727--1772[label="0.142857;1pkt 1fpkt"];
1727--1847[label="0.111111;1pkt 1fpkt"];
1727--1947[label="0.0666667;1pkt 1fpkt"];
1727--2025[label="0.0833333;1pkt 1fpkt"];
1727--2052[label="0.125;1pkt 1fpkt"];
1727--2140[label="0.0666667;1pkt 1fpkt"];
1727--2251[label="0.133333;2pkt 2fpkt"];
1727--2253[label="0.133333;2pkt 2fpkt"];
1727--2256[label="0.133333;2pkt 2fpkt"];
1727--2260[label="0.133333;2pkt 2fpkt"];
1727--2266[label="0.8;12pkt 12fpkt"];
1727--2273[label="0.8;12pkt 12fpkt"];
1825--2247[label="1;1pkt 1fpkt"];
1847--2024[label="0.111111;1pkt 1fpkt"];
1847--2266[label="0.666667;6pkt 6fpkt"];
1847--2273[label="0.666667;6pkt 6fpkt"];
1947--1948[label="0.5;1pkt 1fpkt"];
1947--1957[label="0.0070922;1pkt 1fpkt"];
1947--2024[label="0.0625;1pkt 1fpkt"];
1947--2253[label="0.0141844;2pkt 2fpkt"];
1947--2256[label="0.0070922;1pkt 1fpkt"];
1947--2260[label="0.0070922;1pkt 1fpkt"];
1947--2266[label="0.163121;23pkt 23fpkt"];
1947--2273[label="0.163121;23pkt 23fpkt"];
1947--2299[label="0.0166667;1pkt 1fpkt"];
1947--2308[label="0.111111;1pkt 1fpkt"];
1947--2917[label="0.0169492;1pkt 1fpkt"];
1947--3241[label="0.0169492;1pkt 1fpkt"];
1947--3269[label="0.0070922;1pkt 1fpkt"];
1948--2266[label="0.5;1pkt 1fpkt"];
1948--2273[label="0.5;1pkt 1fpkt"];
2024--2025[label="0.0833333;1pkt 1fpkt"];
2024--2052[label="0.125;1pkt 1fpkt"];
2024--2140[label="0.0625;1pkt 1fpkt"];
2024--2251[label="0.125;2pkt 2fpkt"];
2024--2253[label="0.125;2pkt 2fpkt"];
2024--2256[label="0.125;2pkt 2fpkt"];
2024--2260[label="0.125;2pkt 2fpkt"];
2024--2266[label="0.8125;13pkt 13fpkt"];
2024--2273[label="0.8125;13pkt 13fpkt"];
2052--2256[label="0.25;2pkt 2fpkt"];
2052--2266[label="0.5;4pkt 4fpkt"];
2052--2273[label="0.5;4pkt 4fpkt"];
2052--3349[label="0.5;1pkt 1fpkt"];
2408--2976[label="1;60pkt 60fpkt"];
2408--3273[label="1;60pkt 60fpkt"];
2976--3273[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter src_port="53"/>
      <filter dst_ip="219.253.59.207" dst_port="53"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="209.65.246.0" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="209.65.246.0" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="209.65.246.0" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="209.65.246.0" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="209.65.246.0" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="209.65.246.0" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="209.65.246.0" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="209.65.246.0" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="209.65.246.0" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="209.65.246.0" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="209.65.246.0" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="209.65.246.0" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="209.65.246.0" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="209.65.246.0" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="209.65.246.0" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="209.65.246.0" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="209.65.246.0" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="209.65.246.0" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="209.65.246.0" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="209.65.246.0" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="209.65.246.0" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="209.65.246.0" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="209.65.246.0" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="209.65.246.0" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="141.133.201.88" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="141.133.201.88" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="141.133.201.88" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="141.133.201.88" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="141.133.201.88" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="141.133.201.88" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="141.133.201.88" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="141.133.201.88" src_port="53"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="141.133.201.88" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="141.133.201.88" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="141.133.201.88" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="141.133.201.88" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="141.133.201.88" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="141.133.201.88" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="141.133.201.88" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="141.133.201.88" src_port="80"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="141.133.201.88" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="141.133.201.88" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="141.133.201.88" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="141.133.201.88" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="141.133.201.88" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="141.133.201.88" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="tcp" src_ip="141.133.201.88" src_port="21"/>
      <filter dst_ip="141.133.201.88" dst_port="21" proto="udp" src_ip="141.133.201.88" src_port="21"/>
      <from sec="1031548354" usec="0"/>
      <to sec="1031548419" usec="0"/>
    </slice>
    <from sec="1031548354" usec="0"/>
    <to sec="1031548419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="75.97.120.20" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="75.97.120.20" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="75.97.120.20" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="75.97.120.20" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="75.97.120.20" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="75.97.120.20" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="75.97.120.20" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="75.97.120.20" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="215.6.152.92" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="215.6.152.92" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="215.6.152.92" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="215.6.152.92" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="215.6.152.92" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="215.6.152.92" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="215.6.152.92" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="215.6.152.92" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="215.6.152.92" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="215.6.152.92" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="215.6.152.92" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="215.6.152.92" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="215.6.152.92" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="215.6.152.92" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="215.6.152.92" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="215.6.152.92" src_port="80"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="215.6.152.92" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="215.6.152.92" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="215.6.152.92" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="215.6.152.92" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="215.6.152.92" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="215.6.152.92" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="215.6.152.92" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="215.6.152.92" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="215.6.152.92" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="215.6.152.92" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="215.6.152.92" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="215.6.152.92" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="215.6.152.92" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="215.6.152.92" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="215.6.152.92" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="215.6.152.92" src_port="53"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="215.6.152.92" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="215.6.152.92" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="215.6.152.92" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="215.6.152.92" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="215.6.152.92" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="215.6.152.92" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="tcp" src_ip="215.6.152.92" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="80" proto="udp" src_ip="215.6.152.92" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="215.6.152.92" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="215.6.152.92" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="215.6.152.92" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="215.6.152.92" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="215.6.152.92" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="215.6.152.92" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="tcp" src_ip="215.6.152.92" src_port="21"/>
      <filter dst_ip="141.133.201.98" dst_port="21" proto="udp" src_ip="215.6.152.92" src_port="21"/>
      <from sec="1031548403" usec="0"/>
      <to sec="1031548419" usec="0"/>
    </slice>
    <from sec="1031548403" usec="0"/>
    <to sec="1031548420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.129.201.135" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <from sec="1031548370" usec="0"/>
      <to sec="1031548580" usec="0"/>
    </slice>
    <from sec="1031548370" usec="0"/>
    <to sec="1031548580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.92039,1.92082,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_17{
style=filled;
color=gray75;
80[label="218.128.220.247s;1pkt 1fpkt", shape=rectangle, color=red];
110[label="136.65.40.157d;1pkt 1fpkt", shape=rectangle, color=red];
1644[label="136.65.40.157;d;35pkt 35fpkt", shape=diamond, color=yellow];
1646[label="218.128.220.247;s;23pkt 23fpkt", shape=diamond, color=yellow];
2183[label="136.65.40.157;d;35pkt 35fpkt", shape=hexagon, color=black];
2897[label="218.128.220.247;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3231[label="218.128.220.247;22pkt 22fpkt", shape=invtriangle, color=brown];
stat17[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.128.220.247:80, 136.65.40.157:*}[65.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2277: (2.51799%)&lt;BR/&gt; 2271: (1.79856%)&lt;BR/&gt; 2269: (1.79856%)&lt;BR/&gt; 2268: (1.79856%)&gt;];
}
80--110[label="1;1pkt 1fpkt"];
80--1644[label="1;1pkt 1fpkt"];
80--1646[label="1;1pkt 1fpkt"];
80--2183[label="1;1pkt 1fpkt"];
80--2897[label="1;1pkt 1fpkt"];
80--3231[label="1;1pkt 1fpkt"];
110--1644[label="1;1pkt 1fpkt"];
110--1646[label="1;1pkt 1fpkt"];
110--2183[label="1;1pkt 1fpkt"];
110--2897[label="1;1pkt 1fpkt"];
110--3231[label="1;1pkt 1fpkt"];
1644--1646[label="1;23pkt 23fpkt"];
1644--2183[label="1;35pkt 35fpkt"];
1644--2897[label="1;22pkt 22fpkt"];
1644--3231[label="1;22pkt 22fpkt"];
1646--2183[label="1;23pkt 23fpkt"];
1646--2897[label="1;22pkt 22fpkt"];
1646--3231[label="1;22pkt 22fpkt"];
2183--2897[label="1;22pkt 22fpkt"];
2183--3231[label="1;22pkt 22fpkt"];
2897--3231[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.40.157" src_ip="218.128.220.247" src_port="80"/>
    </slice>
    <from sec="1031548476" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.65.168.162" dst_port="80" proto="tcp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="80" proto="udp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="80" proto="tcp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="80" proto="udp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="80" proto="tcp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="80" proto="udp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="80" proto="tcp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="80" proto="udp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="21" proto="tcp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="21" proto="udp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="21" proto="tcp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="21" proto="udp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="21" proto="tcp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="21" proto="udp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="21" proto="tcp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="21" proto="udp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="25" proto="tcp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="25" proto="udp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="25" proto="tcp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="25" proto="udp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="25" proto="tcp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="25" proto="udp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="25" proto="tcp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="25" proto="udp" src_ip="44.197.5.242" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="25" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="25" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="25" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="25" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="25" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="25" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="25" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="136.65.168.162" dst_port="25" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <from sec="1031548445" usec="0"/>
      <to sec="1031548462" usec="0"/>
    </slice>
    <from sec="1031548438" usec="0"/>
    <to sec="1031548462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835652,1.94964,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_19{
style=filled;
color=gray75;
72[label="164.15.242.213s;3pkt 3fpkt", shape=rectangle, color=red];
113[label="136.65.183.163d;3pkt 3fpkt", shape=rectangle, color=red];
237[label="192.14.159.215;d;10pkt 10fpkt", shape=diamond, color=yellow];
238[label="164.15.242.213;s;10pkt 10fpkt", shape=diamond, color=yellow];
1679[label="164.15.242.213;s;10pkt 10fpkt", shape=hexagon, color=black];
2802[label="216.139.6.203;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat19[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.15.242.213:20, 192.14.159.215:*}[40%]&lt;BR/&gt;{216.139.6.203:80, 136.65.183.163:*}[33.3333%]&lt;BR/&gt;{164.15.242.213:21, 192.14.159.215:*}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (26.8293%)&lt;BR/&gt; 21: (14.6341%)&lt;BR/&gt; 80: (8.53659%)&lt;BR/&gt; 1235: (6.09756%)&lt;BR/&gt; 1211: (4.87805%)&gt;];
}
72--113[label="0.333333;1pkt 1fpkt"];
72--237[label="1;3pkt 3fpkt"];
72--238[label="1;3pkt 3fpkt"];
72--1679[label="1;3pkt 3fpkt"];
113--237[label="0.333333;1pkt 1fpkt"];
113--238[label="0.333333;1pkt 1fpkt"];
113--1679[label="0.333333;1pkt 1fpkt"];
113--2802[label="0.666667;2pkt 2fpkt"];
237--238[label="1;10pkt 10fpkt"];
237--1679[label="1;10pkt 10fpkt"];
238--1679[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="192.14.159.215" src_ip="164.15.242.213" src_port="20"/>
      <filter dst_ip="192.14.159.215" src_ip="164.15.242.213" src_port="21"/>
      <filter dst_ip="136.65.183.163" src_ip="216.139.6.203" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.73.51.165" dst_port="80" proto="tcp" src_ip="209.129.201.135" src_port="53"/>
      <filter dst_ip="213.73.51.165" dst_port="80" proto="udp" src_ip="209.129.201.135" src_port="53"/>
      <filter dst_ip="213.73.51.165" dst_port="80" proto="tcp" src_ip="209.129.201.135" src_port="53"/>
      <filter dst_ip="213.73.51.165" dst_port="80" proto="udp" src_ip="209.129.201.135" src_port="53"/>
      <filter dst_ip="213.73.51.165" dst_port="80" proto="tcp" src_ip="209.129.201.135" src_port="53"/>
      <filter dst_ip="213.73.51.165" dst_port="80" proto="udp" src_ip="209.129.201.135" src_port="53"/>
      <filter dst_ip="213.73.51.165" dst_port="80" proto="tcp" src_ip="209.129.201.135" src_port="53"/>
      <filter dst_ip="213.73.51.165" dst_port="80" proto="udp" src_ip="209.129.201.135" src_port="53"/>
      <filter dst_ip="213.73.51.165" dst_port="53" proto="tcp" src_ip="209.129.201.135" src_port="53"/>
      <filter dst_ip="213.73.51.165" dst_port="53" proto="udp" src_ip="209.129.201.135" src_port="53"/>
      <filter dst_ip="213.73.51.165" dst_port="53" proto="tcp" src_ip="209.129.201.135" src_port="53"/>
      <filter dst_ip="213.73.51.165" dst_port="53" proto="udp" src_ip="209.129.201.135" src_port="53"/>
      <filter dst_ip="213.73.51.165" dst_port="53" proto="tcp" src_ip="209.129.201.135" src_port="53"/>
      <filter dst_ip="213.73.51.165" dst_port="53" proto="udp" src_ip="209.129.201.135" src_port="53"/>
      <filter dst_ip="213.73.51.165" dst_port="53" proto="tcp" src_ip="209.129.201.135" src_port="53"/>
      <filter dst_ip="213.73.51.165" dst_port="53" proto="udp" src_ip="209.129.201.135" src_port="53"/>
      <from sec="1031548338" usec="0"/>
      <to sec="1031548364" usec="0"/>
    </slice>
    <from sec="1031548338" usec="0"/>
    <to sec="1031548364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="tcp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="udp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="tcp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="udp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="tcp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="udp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="tcp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="udp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="tcp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="udp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="tcp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="udp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="tcp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="udp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="tcp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="udp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="tcp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="udp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="tcp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="udp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="tcp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="udp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="tcp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="udp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="tcp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="udp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="tcp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="udp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="tcp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="udp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="tcp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="udp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="tcp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="udp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="tcp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="udp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="tcp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="udp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="tcp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="udp" src_ip="208.90.50.198" src_port="137"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="tcp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="udp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="tcp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="udp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="tcp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="udp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="tcp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="80" proto="udp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="tcp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="udp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="tcp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="udp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="tcp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="udp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="tcp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="53" proto="udp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="tcp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="udp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="tcp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="udp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="tcp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="udp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="tcp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="137" proto="udp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="tcp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="udp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="tcp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="udp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="tcp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="udp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="tcp" src_ip="208.90.50.198" src_port="21"/>
      <filter dst_ip="208.103.57.169" dst_port="21" proto="udp" src_ip="208.90.50.198" src_port="21"/>
      <from sec="1031548511" usec="0"/>
      <to sec="1031548522" usec="0"/>
    </slice>
    <from sec="1031548510" usec="0"/>
    <to sec="1031548535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <from sec="1031548496" usec="0"/>
      <to sec="1031548560" usec="0"/>
    </slice>
    <from sec="1031548486" usec="0"/>
    <to sec="1031548560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="207.137.165.177" dst_port="21" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <from sec="1031548608" usec="0"/>
      <to sec="1031548632" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="164.15.207.14" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="164.15.207.14" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="141.133.74.5" src_port="21"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="80" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="53" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="tcp" src_ip="141.133.74.5" src_port="53"/>
      <filter dst_ip="194.65.5.180" dst_port="21" proto="udp" src_ip="141.133.74.5" src_port="53"/>
      <from sec="1031548610" usec="0"/>
      <to sec="1031548630" usec="0"/>
    </slice>
    <from sec="1031548607" usec="0"/>
    <to sec="1031548632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.20.184" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <from sec="1031548387" usec="0"/>
      <to sec="1031548644" usec="0"/>
    </slice>
    <from sec="1031548387" usec="0"/>
    <to sec="1031548644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="80" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.74.184" dst_port="21" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <from sec="1031548635" usec="0"/>
      <to sec="1031548655" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="80" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="141.133.239.197" dst_port="21" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <from sec="1031548631" usec="0"/>
      <to sec="1031548649" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="tcp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="udp" src_ip="141.133.74.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="tcp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="udp" src_ip="75.97.103.231" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="80" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="tcp" src_ip="141.133.20.184" src_port="80"/>
      <filter dst_ip="219.132.188.174" dst_port="21" proto="udp" src_ip="141.133.20.184" src_port="80"/>
      <from sec="1031548633" usec="0"/>
      <to sec="1031548652" usec="0"/>
    </slice>
    <from sec="1031548631" usec="0"/>
    <to sec="1031548655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="213.7.24.46" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="213.7.24.46" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="75.97.116.8" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="75.97.116.8" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.191" dst_port="1730" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <from sec="1031548631" usec="0"/>
      <to sec="1031548654" usec="0"/>
    </slice>
    <from sec="1031548631" usec="0"/>
    <to sec="1031548655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.85.226.195" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.226.195" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.226.195" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.226.195" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.226.195" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.226.195" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.226.195" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.226.195" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.226.195" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.226.195" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.226.195" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.226.195" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.226.195" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.226.195" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.226.195" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.226.195" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.226.195" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.226.195" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.226.195" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.226.195" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.226.195" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.226.195" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.226.195" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.226.195" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.226.195" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.226.195" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.226.195" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.226.195" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.226.195" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.226.195" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.226.195" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.226.195" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <from sec="1031548354" usec="0"/>
      <to sec="1031548597" usec="0"/>
    </slice>
    <from sec="1031548353" usec="0"/>
    <to sec="1031548597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="213.129.233.120" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="213.129.233.120" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="213.129.233.120" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="213.129.233.120" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="213.129.233.120" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="213.129.233.120" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="213.129.233.120" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="213.129.233.120" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="213.129.233.120" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="213.129.233.120" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="213.129.233.120" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="213.129.233.120" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="213.129.233.120" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="213.129.233.120" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="213.129.233.120" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="213.129.233.120" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="213.129.233.120" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="213.129.233.120" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="213.129.233.120" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="213.129.233.120" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="213.129.233.120" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="213.129.233.120" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="213.129.233.120" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="213.129.233.120" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="72.172.49.48" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="72.172.49.48" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="72.172.49.48" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="72.172.49.48" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="72.172.49.48" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="72.172.49.48" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="72.172.49.48" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="72.172.49.48" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="72.172.49.48" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="72.172.49.48" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="72.172.49.48" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="72.172.49.48" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="72.172.49.48" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="72.172.49.48" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="72.172.49.48" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="72.172.49.48" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="72.172.49.48" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="72.172.49.48" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="72.172.49.48" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="72.172.49.48" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="72.172.49.48" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="72.172.49.48" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="72.172.49.48" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="72.172.49.48" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.148.242" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <from sec="1031548420" usec="0"/>
      <to sec="1031548580" usec="0"/>
    </slice>
    <from sec="1031548419" usec="0"/>
    <to sec="1031548580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="44.28.102.80" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="44.28.102.80" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="44.28.102.80" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="44.28.102.80" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="44.28.102.80" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="44.28.102.80" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="44.28.102.80" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="44.28.102.80" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="44.28.102.80" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="44.28.102.80" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="44.28.102.80" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="44.28.102.80" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="44.28.102.80" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="44.28.102.80" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="44.28.102.80" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="44.28.102.80" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="44.28.102.80" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="44.28.102.80" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="44.28.102.80" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="44.28.102.80" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="44.28.102.80" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="44.28.102.80" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="44.28.102.80" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="44.28.102.80" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.88.200.250" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <from sec="1031548639" usec="0"/>
      <to sec="1031548658" usec="0"/>
    </slice>
    <from sec="1031548629" usec="0"/>
    <to sec="1031548659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="tcp" src_ip="217.177.78.230" src_port="80"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="udp" src_ip="217.177.78.230" src_port="80"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="tcp" src_ip="217.177.78.230" src_port="80"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="udp" src_ip="217.177.78.230" src_port="80"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="tcp" src_ip="217.177.78.230" src_port="80"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="udp" src_ip="217.177.78.230" src_port="80"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="tcp" src_ip="217.177.78.230" src_port="80"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="udp" src_ip="217.177.78.230" src_port="80"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="tcp" src_ip="217.177.78.230" src_port="80"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="udp" src_ip="217.177.78.230" src_port="80"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="tcp" src_ip="217.177.78.230" src_port="80"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="udp" src_ip="217.177.78.230" src_port="80"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="tcp" src_ip="217.177.78.230" src_port="80"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="udp" src_ip="217.177.78.230" src_port="80"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="tcp" src_ip="217.177.78.230" src_port="80"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="udp" src_ip="217.177.78.230" src_port="80"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="tcp" src_ip="217.177.78.230" src_port="25"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="udp" src_ip="217.177.78.230" src_port="25"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="tcp" src_ip="217.177.78.230" src_port="25"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="udp" src_ip="217.177.78.230" src_port="25"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="tcp" src_ip="217.177.78.230" src_port="25"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="udp" src_ip="217.177.78.230" src_port="25"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="tcp" src_ip="217.177.78.230" src_port="25"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="udp" src_ip="217.177.78.230" src_port="25"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="tcp" src_ip="217.177.78.230" src_port="25"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="udp" src_ip="217.177.78.230" src_port="25"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="tcp" src_ip="217.177.78.230" src_port="25"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="udp" src_ip="217.177.78.230" src_port="25"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="tcp" src_ip="217.177.78.230" src_port="25"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="udp" src_ip="217.177.78.230" src_port="25"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="tcp" src_ip="217.177.78.230" src_port="25"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="udp" src_ip="217.177.78.230" src_port="25"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="tcp" src_ip="217.177.78.230" src_port="53"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="udp" src_ip="217.177.78.230" src_port="53"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="tcp" src_ip="217.177.78.230" src_port="53"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="udp" src_ip="217.177.78.230" src_port="53"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="tcp" src_ip="217.177.78.230" src_port="53"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="udp" src_ip="217.177.78.230" src_port="53"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="tcp" src_ip="217.177.78.230" src_port="53"/>
      <filter dst_ip="209.85.226.250" dst_port="6619" proto="udp" src_ip="217.177.78.230" src_port="53"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="tcp" src_ip="217.177.78.230" src_port="53"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="udp" src_ip="217.177.78.230" src_port="53"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="tcp" src_ip="217.177.78.230" src_port="53"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="udp" src_ip="217.177.78.230" src_port="53"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="tcp" src_ip="217.177.78.230" src_port="53"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="udp" src_ip="217.177.78.230" src_port="53"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="tcp" src_ip="217.177.78.230" src_port="53"/>
      <filter dst_ip="209.85.226.250" dst_port="80" proto="udp" src_ip="217.177.78.230" src_port="53"/>
      <from sec="1031548644" usec="0"/>
      <to sec="1031548659" usec="0"/>
    </slice>
    <from sec="1031548644" usec="0"/>
    <to sec="1031548659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="75.97.120.235" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="75.97.120.235" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="75.97.120.235" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="75.97.120.235" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="75.97.120.235" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="75.97.120.235" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="75.97.120.235" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="75.97.120.235" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="75.97.120.235" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="75.97.120.235" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="75.97.120.235" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="75.97.120.235" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="75.97.120.235" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="75.97.120.235" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="75.97.120.235" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="75.97.120.235" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="80"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="tcp" src_ip="75.97.120.20" src_port="53"/>
      <filter dst_ip="208.78.231.74" dst_port="80" proto="udp" src_ip="75.97.120.20" src_port="53"/>
      <from sec="1031548563" usec="0"/>
      <to sec="1031548578" usec="0"/>
    </slice>
    <from sec="1031548563" usec="0"/>
    <to sec="1031548580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="209.85.210.122" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <from sec="1031548613" usec="0"/>
      <to sec="1031548630" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="72.81.154.138" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="72.81.154.138" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="162.73.208.198" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="162.73.208.198" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="213.102.102.139" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <from sec="1031548613" usec="0"/>
      <to sec="1031548630" usec="0"/>
    </slice>
    <from sec="1031548613" usec="0"/>
    <to sec="1031548630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.65.201" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <from sec="1031548556" usec="0"/>
      <to sec="1031548560" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="204.234.148.153" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.103.149.174" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <from sec="1031548547" usec="0"/>
      <to sec="1031548563" usec="0"/>
    </slice>
    <from sec="1031548546" usec="0"/>
    <to sec="1031548564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="207.75.214.103" dst_port="80" proto="tcp" src_ip="164.15.207.15"/>
      <filter dst_ip="207.75.214.103" dst_port="4662" proto="tcp" src_ip="164.15.207.15"/>
      <from sec="1031548087" usec="0"/>
      <to sec="1031548654" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="207.75.214.103" dst_port="80" proto="tcp" src_ip="162.73.5.75"/>
      <filter dst_ip="207.75.214.103" dst_port="4662" proto="tcp" src_ip="162.73.5.75"/>
      <from sec="1031548087" usec="0"/>
      <to sec="1031548106" usec="0"/>
    </slice>
    <from sec="1031548087" usec="0"/>
    <to sec="1031548654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.72.135.123" dst_port="80" proto="tcp" src_ip="141.133.197.76" src_port="2034"/>
      <from sec="1031548591" usec="0"/>
      <to sec="1031548599" usec="0"/>
    </slice>
    <from sec="1031548584" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.36.205.173" dst_port="80" proto="tcp" src_ip="209.85.226.195"/>
      <filter dst_ip="75.71.16.253" dst_port="80" proto="tcp" src_ip="209.85.226.195"/>
      <from sec="1031547706" usec="0"/>
      <to sec="1031548631" usec="0"/>
    </slice>
    <from sec="1031547706" usec="0"/>
    <to sec="1031548631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="209.12.82.1" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <from sec="1031548510" usec="0"/>
      <to sec="1031548535" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="208.204.89.251" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <from sec="1031548510" usec="0"/>
      <to sec="1031548535" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="72.105.50.7" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <from sec="1031548510" usec="0"/>
      <to sec="1031548533" usec="0"/>
    </slice>
    <from sec="1031548510" usec="0"/>
    <to sec="1031548535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="80" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="53" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="216.196.83.6" dst_port="21" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <from sec="1031548338" usec="0"/>
      <to sec="1031548357" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="136.65.162.167" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="151.244.50.1" src_port="21"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="80" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="53" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="tcp" src_ip="151.244.50.1" src_port="53"/>
      <filter dst_ip="219.200.219.2" dst_port="21" proto="udp" src_ip="151.244.50.1" src_port="53"/>
      <from sec="1031548339" usec="0"/>
      <to sec="1031548355" usec="0"/>
    </slice>
    <from sec="1031548338" usec="0"/>
    <to sec="1031548364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="tcp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="udp" src_ip="209.85.226.195" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="tcp" src_ip="206.166.11.16" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="udp" src_ip="206.166.11.16" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="tcp" src_ip="206.166.11.16" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="udp" src_ip="206.166.11.16" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="tcp" src_ip="206.166.11.16" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="udp" src_ip="206.166.11.16" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="tcp" src_ip="206.166.11.16" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="80" proto="udp" src_ip="206.166.11.16" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="tcp" src_ip="206.166.11.16" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="udp" src_ip="206.166.11.16" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="tcp" src_ip="206.166.11.16" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="udp" src_ip="206.166.11.16" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="tcp" src_ip="206.166.11.16" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="udp" src_ip="206.166.11.16" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="tcp" src_ip="206.166.11.16" src_port="21"/>
      <filter dst_ip="206.166.11.16" dst_port="21" proto="udp" src_ip="206.166.11.16" src_port="21"/>
      <from sec="1031548338" usec="0"/>
      <to sec="1031548584" usec="0"/>
    </slice>
    <from sec="1031548338" usec="0"/>
    <to sec="1031548584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="tcp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="udp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="tcp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="udp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="tcp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="udp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="tcp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="udp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="tcp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="udp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="tcp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="udp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="tcp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="udp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="tcp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="udp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="tcp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="udp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="tcp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="udp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="tcp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="udp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="tcp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="udp" src_ip="141.133.239.176" src_port="80"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="tcp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="udp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="tcp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="udp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="tcp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="udp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="tcp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="80" proto="udp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="tcp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="udp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="tcp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="udp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="tcp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="udp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="tcp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="53" proto="udp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="tcp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="udp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="tcp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="udp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="tcp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="udp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="tcp" src_ip="141.133.239.176" src_port="21"/>
      <filter dst_ip="141.133.239.218" dst_port="21" proto="udp" src_ip="141.133.239.176" src_port="21"/>
      <from sec="1031548538" usec="0"/>
      <to sec="1031548546" usec="0"/>
    </slice>
    <from sec="1031548534" usec="0"/>
    <to sec="1031548560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.180.129.27" dst_port="80" proto="tcp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="193.180.129.27" dst_port="80" proto="udp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="193.180.129.27" dst_port="53" proto="tcp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="193.180.129.27" dst_port="53" proto="udp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="193.180.129.27" dst_port="3869" proto="tcp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="193.180.129.27" dst_port="3869" proto="udp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="193.180.129.27" dst_port="80" proto="tcp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="193.180.129.27" dst_port="80" proto="udp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="193.180.129.27" dst_port="53" proto="tcp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="193.180.129.27" dst_port="53" proto="udp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="193.180.129.27" dst_port="3869" proto="tcp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="193.180.129.27" dst_port="3869" proto="udp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="219.253.59.207" dst_port="80" proto="tcp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="219.253.59.207" dst_port="80" proto="udp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="219.253.59.207" dst_port="53" proto="tcp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="219.253.59.207" dst_port="53" proto="udp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="219.253.59.207" dst_port="3869" proto="tcp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="219.253.59.207" dst_port="3869" proto="udp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="219.253.59.207" dst_port="80" proto="tcp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="219.253.59.207" dst_port="80" proto="udp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="219.253.59.207" dst_port="53" proto="tcp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="219.253.59.207" dst_port="53" proto="udp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="219.253.59.207" dst_port="3869" proto="tcp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="219.253.59.207" dst_port="3869" proto="udp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="141.133.63.145" dst_port="80" proto="tcp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="141.133.63.145" dst_port="80" proto="udp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="141.133.63.145" dst_port="53" proto="tcp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="141.133.63.145" dst_port="53" proto="udp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="141.133.63.145" dst_port="3869" proto="tcp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="141.133.63.145" dst_port="3869" proto="udp" src_ip="141.133.54.29" src_port="53"/>
      <filter dst_ip="141.133.63.145" dst_port="80" proto="tcp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="141.133.63.145" dst_port="80" proto="udp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="141.133.63.145" dst_port="53" proto="tcp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="141.133.63.145" dst_port="53" proto="udp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="141.133.63.145" dst_port="3869" proto="tcp" src_ip="141.133.54.29" src_port="80"/>
      <filter dst_ip="141.133.63.145" dst_port="3869" proto="udp" src_ip="141.133.54.29" src_port="80"/>
      <from sec="1031548645" usec="0"/>
      <to sec="1031548653" usec="0"/>
    </slice>
    <from sec="1031548644" usec="0"/>
    <to sec="1031548659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="195.30.72.52" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="195.30.72.52" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="195.30.72.52" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="195.30.72.52" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="195.30.72.52" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="195.30.72.52" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="195.30.72.52" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="195.30.72.52" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="195.30.72.52" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="195.30.72.52" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="195.30.72.52" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="195.30.72.52" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="195.30.72.52" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="195.30.72.52" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="195.30.72.52" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="195.30.72.52" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="195.30.72.52" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="195.30.72.52" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="195.30.72.52" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="195.30.72.52" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="195.30.72.52" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="195.30.72.52" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="195.30.72.52" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="195.30.72.52" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="208.78.226.59" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="80"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="53"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="tcp" src_ip="86.84.56.195" src_port="21"/>
      <filter dst_ip="141.133.197.65" dst_port="21" proto="udp" src_ip="86.84.56.195" src_port="21"/>
      <from sec="1031548650" usec="0"/>
      <to sec="1031548657" usec="0"/>
    </slice>
    <from sec="1031548644" usec="0"/>
    <to sec="1031548659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
1088[label="151.244.39.9;s;80pkt 80fpkt", shape=diamond, color=yellow];
1186[label="75.70.13.29;d;12pkt 12fpkt", shape=diamond, color=yellow];
2003[label="151.244.39.9;s;33pkt 33fpkt", shape=hexagon, color=black];
2165[label="75.70.13.29;d;12pkt 12fpkt", shape=hexagon, color=black];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.39.9:*, 75.116.221.217:80}[24.3902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5401%)&lt;BR/&gt; 1625: (1.45985%)&lt;BR/&gt; 1624: (1.45985%)&lt;BR/&gt; 1623: (1.45985%)&lt;BR/&gt; 1622: (1.45985%)&gt;];
}
1088--1186[label="0.833333;10pkt 10fpkt"];
1088--2003[label="1;33pkt 33fpkt"];
1088--2165[label="0.833333;10pkt 10fpkt"];
1088--2258[label="0.15;12pkt 12fpkt"];
1186--2003[label="0.833333;10pkt 10fpkt"];
1186--2165[label="1;12pkt 12fpkt"];
1186--2258[label="0.833333;10pkt 10fpkt"];
1186--2616[label="0.166667;2pkt 2fpkt"];
2003--2165[label="0.833333;10pkt 10fpkt"];
2003--2258[label="0.363636;12pkt 12fpkt"];
2165--2258[label="0.833333;10pkt 10fpkt"];
2165--2616[label="0.166667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="75.116.221.217" dst_port="80" src_ip="151.244.39.9"/>
    </slice>
    <from sec="1031548058" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07263,1.92615,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
85[label="136.65.110.34d;103pkt 103fpkt", shape=rectangle, color=red];
162[label="136.65.110.34;d;1070pkt 1070fpkt", shape=diamond, color=yellow];
172[label="44.5.108.238;s;57pkt 57fpkt", shape=diamond, color=yellow];
366[label="205.193.218.10;s;383pkt 383fpkt", shape=diamond, color=yellow];
1559[label="167.150.112.48;s;9pkt 9fpkt", shape=diamond, color=yellow];
1660[label="136.65.110.34;d;1070pkt 1070fpkt", shape=hexagon, color=black];
2290[label="209.164.96.3;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2728[label="208.173.87.172;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2771[label="209.206.217.191;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2847[label="44.43.98.223;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2863[label="208.34.114.232;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2867[label="205.222.132.233;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3146[label="208.173.87.172;11pkt 11fpkt", shape=invtriangle, color=brown];
3352[label="208.173.87.172;11pkt 11fpkt", shape=invhouse, color=bisque];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.193.218.10:*, 136.65.110.34:80}[36.5225%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6751%)&lt;BR/&gt; 0: (0.577617%)&lt;BR/&gt; 45059: (0.108303%)&lt;BR/&gt; 1334: (0.108303%)&lt;BR/&gt; 34128: (0.0902527%)&gt;];
}
85--162[label="0.864078;89pkt 89fpkt"];
85--172[label="0.298246;17pkt 17fpkt"];
85--366[label="0.660194;68pkt 68fpkt"];
85--1660[label="0.864078;89pkt 89fpkt"];
85--2248[label="0.00970874;1pkt 1fpkt"];
85--2254[label="0.00970874;1pkt 1fpkt"];
85--2258[label="0.00970874;1pkt 1fpkt"];
85--2263[label="0.00970874;1pkt 1fpkt"];
85--2270[label="0.00970874;1pkt 1fpkt"];
162--172[label="1;57pkt 57fpkt"];
162--366[label="1;383pkt 383fpkt"];
162--1559[label="1;9pkt 9fpkt"];
162--1660[label="1;1070pkt 1070fpkt"];
162--2248[label="0.0570093;61pkt 61fpkt"];
162--2254[label="0.0551402;59pkt 59fpkt"];
162--2258[label="0.0728972;78pkt 78fpkt"];
162--2263[label="0.0570093;61pkt 61fpkt"];
162--2270[label="0.0570093;61pkt 61fpkt"];
162--2290[label="0.875;21pkt 21fpkt"];
162--2728[label="1;11pkt 11fpkt"];
162--2771[label="1;6pkt 6fpkt"];
162--2847[label="1;2pkt 2fpkt"];
162--2863[label="1;6pkt 6fpkt"];
162--2867[label="1;7pkt 7fpkt"];
162--3146[label="1;11pkt 11fpkt"];
162--3352[label="1;11pkt 11fpkt"];
172--1660[label="1;57pkt 57fpkt"];
172--2248[label="0.298246;17pkt 17fpkt"];
172--2254[label="0.245614;14pkt 14fpkt"];
172--2258[label="0.122807;7pkt 7fpkt"];
172--2263[label="0.298246;17pkt 17fpkt"];
172--2270[label="0.298246;17pkt 17fpkt"];
366--1660[label="1;383pkt 383fpkt"];
366--2248[label="0.0130548;5pkt 5fpkt"];
366--2254[label="0.0182768;7pkt 7fpkt"];
366--2258[label="0.0809399;31pkt 31fpkt"];
366--2263[label="0.0130548;5pkt 5fpkt"];
366--2270[label="0.0130548;5pkt 5fpkt"];
1559--1660[label="1;9pkt 9fpkt"];
1660--2248[label="0.0570093;61pkt 61fpkt"];
1660--2254[label="0.0551402;59pkt 59fpkt"];
1660--2258[label="0.0728972;78pkt 78fpkt"];
1660--2263[label="0.0570093;61pkt 61fpkt"];
1660--2270[label="0.0570093;61pkt 61fpkt"];
1660--2290[label="0.875;21pkt 21fpkt"];
1660--2728[label="1;11pkt 11fpkt"];
1660--2771[label="1;6pkt 6fpkt"];
1660--2847[label="1;2pkt 2fpkt"];
1660--2863[label="1;6pkt 6fpkt"];
1660--2867[label="1;7pkt 7fpkt"];
1660--3146[label="1;11pkt 11fpkt"];
1660--3352[label="1;11pkt 11fpkt"];
2728--3146[label="1;11pkt 11fpkt"];
2728--3352[label="1;11pkt 11fpkt"];
3146--3352[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.110.34" dst_port="80" src_ip="205.193.218.10"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="18.14.168.72"/>
      <from sec="1031547600" usec="0"/>
      <to sec="1031547798" usec="0"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031547798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.997935,2.01813,503,1 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
35[label="162.73.41.101s;1pkt 1fpkt", shape=rectangle, color=red];
177[label="162.73.41.101;s;29pkt 29fpkt", shape=diamond, color=yellow];
569[label="206.222.162.224;d;1pkt 1fpkt", shape=diamond, color=yellow];
1534[label="206.222.160.238;d;27pkt 27fpkt", shape=diamond, color=yellow];
3044[label="162.73.41.101;29pkt 29fpkt", shape=invtriangle, color=brown];
3305[label="162.73.41.101;29pkt 29fpkt", shape=invhouse, color=bisque];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.41.101:*, 206.222.160.238:80}[93.1034%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2759%)&lt;BR/&gt; 61412: (2.15517%)&lt;BR/&gt; 61429: (1.72414%)&lt;BR/&gt; 61428: (1.72414%)&lt;BR/&gt; 61427: (1.72414%)&gt;];
}
35--177[label="1;1pkt 1fpkt"];
35--1534[label="1;1pkt 1fpkt"];
35--3044[label="1;1pkt 1fpkt"];
35--3305[label="1;1pkt 1fpkt"];
177--569[label="1;1pkt 1fpkt"];
177--1534[label="1;27pkt 27fpkt"];
177--3044[label="1;29pkt 29fpkt"];
177--3305[label="1;29pkt 29fpkt"];
569--3044[label="1;1pkt 1fpkt"];
569--3305[label="1;1pkt 1fpkt"];
1534--3044[label="1;27pkt 27fpkt"];
1534--3305[label="1;27pkt 27fpkt"];
3044--3305[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="206.222.160.238" dst_port="80" src_ip="162.73.41.101"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="2.243.142.124"/>
      <from sec="1031547600" usec="0"/>
      <to sec="1031547671" usec="0"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031547671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826429,1.99503,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
17[label="208.78.229.48s;2pkt 2fpkt", shape=rectangle, color=red];
224[label="73.8.124.146;d;3639pkt 3639fpkt", shape=diamond, color=yellow];
226[label="208.78.229.48;s;5154pkt 5154fpkt", shape=diamond, color=yellow];
227[label="18.192.76.175;d;347pkt 347fpkt", shape=diamond, color=yellow];
228[label="18.214.99.136;d;879pkt 879fpkt", shape=diamond, color=yellow];
851[label="134.198.196.96;d;7pkt 7fpkt", shape=diamond, color=yellow];
1639[label="74.123.204.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
1945[label="208.78.229.48;s;3975pkt 3975fpkt", shape=hexagon, color=black];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.78.229.48:*, 73.8.124.146:80}[23.3023%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.4859%)&lt;BR/&gt; 21: (8.77963%)&lt;BR/&gt; 53: (2.6421%)&lt;BR/&gt; 25: (1.94944%)&lt;BR/&gt; 6699: (1.80663%)&gt;];
}
17--226[label="1;2pkt 2fpkt"];
17--228[label="0.5;1pkt 1fpkt"];
17--1639[label="1;1pkt 1fpkt"];
17--1945[label="0.5;1pkt 1fpkt"];
224--226[label="1;3639pkt 3639fpkt"];
224--1945[label="0.75158;2735pkt 2735fpkt"];
224--2247[label="0.0155119;30pkt 30fpkt"];
224--2248[label="0.0211597;77pkt 77fpkt"];
224--2251[label="0.0010661;1pkt 1fpkt"];
224--2252[label="0.0382883;34pkt 34fpkt"];
224--2253[label="0.00412201;15pkt 15fpkt"];
224--2254[label="0.0285793;104pkt 104fpkt"];
224--2255[label="0.0308151;62pkt 62fpkt"];
224--2256[label="0.00632042;23pkt 23fpkt"];
224--2257[label="0.0201613;45pkt 45fpkt"];
224--2258[label="0.0294037;107pkt 107fpkt"];
224--2260[label="0.000477327;1pkt 1fpkt"];
224--2263[label="0.0211597;77pkt 77fpkt"];
224--2266[label="0.00494641;18pkt 18fpkt"];
224--2267[label="0.0201613;45pkt 45fpkt"];
224--2270[label="0.0211597;77pkt 77fpkt"];
224--2272[label="0.000618047;2pkt 2fpkt"];
224--2273[label="0.00494641;18pkt 18fpkt"];
224--2274[label="0.0201613;45pkt 45fpkt"];
226--227[label="1;347pkt 347fpkt"];
226--228[label="1;879pkt 879fpkt"];
226--851[label="1;7pkt 7fpkt"];
226--1639[label="1;1pkt 1fpkt"];
226--1658[label="1;273pkt 273fpkt"];
226--1945[label="1;3975pkt 3975fpkt"];
226--2186[label="1;273pkt 273fpkt"];
226--2247[label="0.0356774;69pkt 69fpkt"];
226--2248[label="0.0430995;188pkt 188fpkt"];
226--2251[label="0.0021322;2pkt 2fpkt"];
226--2252[label="0.0382883;34pkt 34fpkt"];
226--2253[label="0.00377448;16pkt 16fpkt"];
226--2254[label="0.0272485;133pkt 133fpkt"];
226--2255[label="0.0308151;62pkt 62fpkt"];
226--2256[label="0.00446255;23pkt 23fpkt"];
226--2257[label="0.0201613;45pkt 45fpkt"];
226--2258[label="0.0232659;107pkt 107fpkt"];
226--2260[label="0.000477327;1pkt 1fpkt"];
226--2263[label="0.0431094;188pkt 188fpkt"];
226--2266[label="0.00349243;18pkt 18fpkt"];
226--2267[label="0.0201613;45pkt 45fpkt"];
226--2270[label="0.0431094;188pkt 188fpkt"];
226--2272[label="0.000618047;2pkt 2fpkt"];
226--2273[label="0.00349243;18pkt 18fpkt"];
226--2274[label="0.0201613;45pkt 45fpkt"];
227--1945[label="1;347pkt 347fpkt"];
227--2247[label="0.0979827;34pkt 34fpkt"];
227--2248[label="0.302594;105pkt 105fpkt"];
227--2251[label="0.00288184;1pkt 1fpkt"];
227--2263[label="0.302594;105pkt 105fpkt"];
227--2270[label="0.302594;105pkt 105fpkt"];
228--1945[label="1;879pkt 879fpkt"];
228--2247[label="0.00568828;5pkt 5fpkt"];
228--2248[label="0.00682594;6pkt 6fpkt"];
228--2253[label="0.00113766;1pkt 1fpkt"];
228--2254[label="0.032992;29pkt 29fpkt"];
228--2263[label="0.00682594;6pkt 6fpkt"];
228--2270[label="0.00682594;6pkt 6fpkt"];
851--1945[label="1;7pkt 7fpkt"];
1945--2247[label="0.0356774;69pkt 69fpkt"];
1945--2248[label="0.0472956;188pkt 188fpkt"];
1945--2251[label="0.0021322;2pkt 2fpkt"];
1945--2252[label="0.0382883;34pkt 34fpkt"];
1945--2253[label="0.00402516;16pkt 16fpkt"];
1945--2254[label="0.0334591;133pkt 133fpkt"];
1945--2255[label="0.0308151;62pkt 62fpkt"];
1945--2256[label="0.00578616;23pkt 23fpkt"];
1945--2257[label="0.015681;35pkt 35fpkt"];
1945--2258[label="0.0241509;96pkt 96fpkt"];
1945--2260[label="0.000477327;1pkt 1fpkt"];
1945--2263[label="0.0472956;188pkt 188fpkt"];
1945--2266[label="0.00427673;17pkt 17fpkt"];
1945--2267[label="0.015681;35pkt 35fpkt"];
1945--2270[label="0.0472956;188pkt 188fpkt"];
1945--2272[label="0.000309023;1pkt 1fpkt"];
1945--2273[label="0.00427673;17pkt 17fpkt"];
1945--2274[label="0.015681;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="73.8.124.146" dst_port="80" src_ip="208.78.229.48"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.522387,2.02397,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
234[label="44.8.62.240;d;2pkt 2fpkt", shape=diamond, color=yellow];
2281[label="151.244.38.2;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.38.2:1554, 205.7.166.92:1755}[20%]&lt;BR/&gt;{151.244.38.2:1556, 205.7.166.92:1755}[20%]&lt;BR/&gt;{151.244.38.2:0, 44.8.62.240:0}[20%]&lt;BR/&gt;{151.244.38.2:1480, 44.8.62.240:554}[20%]&lt;BR/&gt;{151.244.38.2:6970, 44.8.62.240:9008}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (16.6667%)&lt;BR/&gt; 1480: (16.6667%)&lt;BR/&gt; 554: (16.6667%)&lt;BR/&gt; 0: (16.6667%)&lt;BR/&gt; 9008: (8.33333%)&gt;];
}
234--235[label="1;2pkt 2fpkt"];
234--2281[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="44.8.62.240" dst_port="9008" src_ip="151.244.38.2" src_port="6970"/>
      <filter dst_ip="44.8.62.240" dst_port="554" src_ip="151.244.38.2" src_port="1480"/>
      <filter dst_ip="44.8.62.240" src_ip="151.244.38.2"/>
      <filter dst_ip="205.7.166.92" dst_port="1755" src_ip="151.244.38.2" src_port="1556"/>
      <filter dst_ip="205.7.166.92" dst_port="1755" src_ip="151.244.38.2" src_port="1554"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
244[label="136.65.112.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
245[label="215.6.194.219;d;1pkt 1fpkt", shape=diamond, color=yellow];
1756[label="136.65.112.69;s;1pkt 1fpkt", shape=hexagon, color=black];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.112.69:49260, 215.6.194.219:8006}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49260: (50%)&lt;BR/&gt; 8006: (50%)&gt;];
}
244--245[label="1;1pkt 1fpkt"];
244--1756[label="1;1pkt 1fpkt"];
245--1756[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.6.194.219" dst_port="8006" src_ip="136.65.112.69" src_port="49260"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
243[label="136.65.112.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
246[label="215.6.194.219;s;1pkt 1fpkt", shape=diamond, color=yellow];
1757[label="215.6.194.219;s;1pkt 1fpkt", shape=hexagon, color=black];
2126[label="136.65.112.69;d;1pkt 1fpkt", shape=hexagon, color=black];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.6.194.219:8006, 136.65.112.69:49260}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49260: (50%)&lt;BR/&gt; 8006: (50%)&gt;];
}
243--246[label="1;1pkt 1fpkt"];
243--1757[label="1;1pkt 1fpkt"];
243--2126[label="1;1pkt 1fpkt"];
246--1757[label="1;1pkt 1fpkt"];
246--2126[label="1;1pkt 1fpkt"];
1757--2126[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.112.69" dst_port="49260" src_ip="215.6.194.219" src_port="8006"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826429,1.99503,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
32[label="164.15.206.96s;1pkt 1fpkt", shape=rectangle, color=red];
251[label="213.73.81.131;d;2pkt 2fpkt", shape=diamond, color=yellow];
252[label="164.15.206.96;s;50pkt 50fpkt", shape=diamond, color=yellow];
1758[label="164.15.206.96;s;48pkt 48fpkt", shape=hexagon, color=black];
1843[label="213.73.81.131;d;2pkt 2fpkt", shape=hexagon, color=black];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.15.206.96:*, 72.105.48.132:80}[46%]&lt;BR/&gt;{164.15.206.96:*, 72.31.10.233:80}[24%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0874%)&lt;BR/&gt; 3705: (2.42718%)&lt;BR/&gt; 3565: (1.94175%)&lt;BR/&gt; 113: (1.45631%)&lt;BR/&gt; 25: (1.45631%)&gt;];
}
32--251[label="1;1pkt 1fpkt"];
32--252[label="1;1pkt 1fpkt"];
32--1758[label="1;1pkt 1fpkt"];
32--1843[label="1;1pkt 1fpkt"];
32--2258[label="1;1pkt 1fpkt"];
251--252[label="1;2pkt 2fpkt"];
251--1758[label="1;2pkt 2fpkt"];
251--1843[label="1;2pkt 2fpkt"];
251--2248[label="0.5;1pkt 1fpkt"];
251--2254[label="0.5;1pkt 1fpkt"];
251--2258[label="0.5;1pkt 1fpkt"];
251--2263[label="0.5;1pkt 1fpkt"];
251--2270[label="0.5;1pkt 1fpkt"];
252--1096[label="0.04;2pkt 2fpkt"];
252--1758[label="1;48pkt 48fpkt"];
252--1843[label="1;2pkt 2fpkt"];
252--2128[label="0.04;2pkt 2fpkt"];
252--2241[label="0.04;2pkt 2fpkt"];
252--2248[label="0.06;3pkt 3fpkt"];
252--2254[label="0.24;12pkt 12fpkt"];
252--2258[label="0.02;1pkt 1fpkt"];
252--2263[label="0.06;3pkt 3fpkt"];
252--2270[label="0.06;3pkt 3fpkt"];
1758--1843[label="1;2pkt 2fpkt"];
1758--2128[label="0.0416667;2pkt 2fpkt"];
1758--2241[label="0.0416667;2pkt 2fpkt"];
1758--2248[label="0.0625;3pkt 3fpkt"];
1758--2254[label="0.25;12pkt 12fpkt"];
1758--2258[label="0.0208333;1pkt 1fpkt"];
1758--2263[label="0.0625;3pkt 3fpkt"];
1758--2270[label="0.0625;3pkt 3fpkt"];
1843--2248[label="0.5;1pkt 1fpkt"];
1843--2254[label="0.5;1pkt 1fpkt"];
1843--2258[label="0.5;1pkt 1fpkt"];
1843--2263[label="0.5;1pkt 1fpkt"];
1843--2270[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="72.105.48.132" dst_port="80" src_ip="164.15.206.96"/>
      <filter dst_ip="72.31.10.233" dst_port="80" src_ip="164.15.206.96"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
259[label="141.133.32.26;d;7pkt 7fpkt", shape=diamond, color=yellow];
260[label="44.88.72.152;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.80.33.110:80, 141.133.32.26:*}[28.5714%]&lt;BR/&gt;{44.88.72.198:80, 141.133.32.26:*}[28.5714%]&lt;BR/&gt;{*:5001, 141.133.32.26:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.25%)&lt;BR/&gt; 5001: (18.75%)&lt;BR/&gt; 1362: (12.5%)&lt;BR/&gt; 1367: (6.25%)&lt;BR/&gt; 1357: (6.25%)&gt;];
}
259--260[label="1;1pkt 1fpkt"];
259--476[label="0.285714;2pkt 2fpkt"];
259--1266[label="0.142857;1pkt 1fpkt"];
259--1770[label="0.285714;2pkt 2fpkt"];
259--2247[label="0.428571;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.32.26" src_port="5001"/>
      <filter dst_ip="141.133.32.26" src_ip="44.88.72.198" src_port="80"/>
      <filter dst_ip="141.133.32.26" src_ip="193.80.33.110" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
267[label="141.133.73.238;d;1pkt 1fpkt", shape=diamond, color=yellow];
268[label="44.23.185.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
1846[label="141.133.73.238;d;1pkt 1fpkt", shape=hexagon, color=black];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.23.185.216:1755, 141.133.73.238:2119}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2119: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
267--268[label="1;1pkt 1fpkt"];
267--1846[label="1;1pkt 1fpkt"];
268--1846[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.73.238" dst_port="2119" src_ip="44.23.185.216" src_port="1755"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
544[label="136.65.54.210;d;73pkt 73fpkt", shape=diamond, color=yellow];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.31.31:80, 136.65.54.210:*}[26.0274%]&lt;BR/&gt;{213.7.17.82:80, 136.65.54.210:*}[20.5479%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.7808%)&lt;BR/&gt; 443: (7.53425%)&lt;BR/&gt; 1269: (1.36986%)&lt;BR/&gt; 1863: (0.684932%)&lt;BR/&gt; 1319: (0.684932%)&gt;];
}
544--1962[label="0.0273973;2pkt 2fpkt"];
544--2247[label="0.0410959;3pkt 3fpkt"];
544--3277[label="0.0273973;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.54.210" src_ip="213.7.31.31" src_port="80"/>
      <filter dst_ip="136.65.54.210" src_ip="213.7.17.82" src_port="80"/>
    </slice>
    <from sec="1031547642" usec="0"/>
    <to sec="1031548027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845953,1.98323,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
286[label="32.160.192.164;d;137pkt 137fpkt", shape=diamond, color=yellow];
287[label="32.160.192.164;s;131pkt 131fpkt", shape=diamond, color=yellow];
1730[label="32.160.192.164;s;58pkt 58fpkt", shape=hexagon, color=black];
2131[label="32.160.192.164;d;137pkt 137fpkt", shape=hexagon, color=black];
2703[label="32.160.192.164;141pkt 141fpkt", shape=pentagon, color=darkviolet];
3343[label="32.160.192.164;141pkt 141fpkt", shape=invhouse, color=bisque];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.160.192.164:13364, 32.160.192.164:*}[90.1408%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13364: (45.1678%)&lt;BR/&gt; 80: (2.34899%)&lt;BR/&gt; 0: (2.14765%)&lt;BR/&gt; 13392: (1.20805%)&lt;BR/&gt; 4662: (1.14094%)&gt;];
}
286--287[label="1;131pkt 131fpkt"];
286--1730[label="1;58pkt 58fpkt"];
286--2131[label="1;137pkt 137fpkt"];
286--2248[label="0.0145985;2pkt 2fpkt"];
286--2252[label="0.00729927;1pkt 1fpkt"];
286--2254[label="0.00729927;1pkt 1fpkt"];
286--2256[label="0.00729927;1pkt 1fpkt"];
286--2258[label="0.0218978;3pkt 3fpkt"];
286--2263[label="0.0145985;2pkt 2fpkt"];
286--2270[label="0.0145985;2pkt 2fpkt"];
286--2703[label="0.992701;136pkt 136fpkt"];
286--3343[label="0.992701;136pkt 136fpkt"];
287--1730[label="1;58pkt 58fpkt"];
287--2131[label="1;131pkt 131fpkt"];
287--2248[label="0.0152672;2pkt 2fpkt"];
287--2252[label="0.00763359;1pkt 1fpkt"];
287--2254[label="0.00763359;1pkt 1fpkt"];
287--2256[label="0.00763359;1pkt 1fpkt"];
287--2258[label="0.0229008;3pkt 3fpkt"];
287--2263[label="0.0152672;2pkt 2fpkt"];
287--2270[label="0.0152672;2pkt 2fpkt"];
287--2703[label="0.992366;130pkt 130fpkt"];
287--3343[label="0.992366;130pkt 130fpkt"];
1730--2131[label="1;58pkt 58fpkt"];
1730--2248[label="0.0344828;2pkt 2fpkt"];
1730--2252[label="0.0172414;1pkt 1fpkt"];
1730--2254[label="0.0172414;1pkt 1fpkt"];
1730--2258[label="0.0172414;1pkt 1fpkt"];
1730--2263[label="0.0344828;2pkt 2fpkt"];
1730--2270[label="0.0344828;2pkt 2fpkt"];
1730--2703[label="0.982759;57pkt 57fpkt"];
1730--3343[label="0.982759;57pkt 57fpkt"];
2131--2248[label="0.0145985;2pkt 2fpkt"];
2131--2252[label="0.00729927;1pkt 1fpkt"];
2131--2254[label="0.00729927;1pkt 1fpkt"];
2131--2256[label="0.00729927;1pkt 1fpkt"];
2131--2258[label="0.0218978;3pkt 3fpkt"];
2131--2263[label="0.0145985;2pkt 2fpkt"];
2131--2270[label="0.0145985;2pkt 2fpkt"];
2131--2703[label="0.992701;136pkt 136fpkt"];
2131--3343[label="0.992701;136pkt 136fpkt"];
2703--3343[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter dst_ip="32.160.192.164" src_ip="32.160.192.164" src_port="13364"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="18.9.5.218"/>
      <from sec="1031547600" usec="0"/>
      <to sec="1031547716" usec="0"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031547716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845953,1.98323,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
310[label="141.133.150.17;d;29pkt 29fpkt", shape=diamond, color=yellow];
311[label="46.168.117.98;s;5pkt 5fpkt", shape=diamond, color=yellow];
1205[label="72.206.107.160;s;7pkt 7fpkt", shape=diamond, color=yellow];
2138[label="141.133.150.17;d;29pkt 29fpkt", shape=hexagon, color=black];
2694[label="72.206.107.160;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3338[label="72.206.107.160;6pkt 6fpkt", shape=invhouse, color=bisque];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.73.90.9:80, 141.133.150.17:*}[31.0345%]&lt;BR/&gt;{72.206.107.160:80, 141.133.150.17:*}[24.1379%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2500: (3.20513%)&lt;BR/&gt; 2499: (2.5641%)&lt;BR/&gt; 2497: (2.5641%)&lt;BR/&gt; 2496: (2.5641%)&gt;];
}
310--311[label="1;5pkt 5fpkt"];
310--1205[label="1;7pkt 7fpkt"];
310--2138[label="1;29pkt 29fpkt"];
310--2247[label="0.0689655;2pkt 2fpkt"];
310--2255[label="0.37931;11pkt 11fpkt"];
310--2257[label="0.0689655;2pkt 2fpkt"];
310--2267[label="0.0689655;2pkt 2fpkt"];
310--2274[label="0.0689655;2pkt 2fpkt"];
310--2694[label="1;2pkt 2fpkt"];
310--3338[label="1;6pkt 6fpkt"];
311--2138[label="1;5pkt 5fpkt"];
311--2247[label="0.2;1pkt 1fpkt"];
311--2255[label="0.4;2pkt 2fpkt"];
1205--2138[label="1;7pkt 7fpkt"];
1205--2255[label="0.285714;2pkt 2fpkt"];
1205--2257[label="0.142857;1pkt 1fpkt"];
1205--2267[label="0.142857;1pkt 1fpkt"];
1205--2274[label="0.142857;1pkt 1fpkt"];
1205--2694[label="1;2pkt 2fpkt"];
1205--3338[label="1;6pkt 6fpkt"];
2138--2247[label="0.0689655;2pkt 2fpkt"];
2138--2255[label="0.37931;11pkt 11fpkt"];
2138--2257[label="0.0689655;2pkt 2fpkt"];
2138--2267[label="0.0689655;2pkt 2fpkt"];
2138--2274[label="0.0689655;2pkt 2fpkt"];
2138--2694[label="1;2pkt 2fpkt"];
2138--3338[label="1;6pkt 6fpkt"];
2694--3338[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.150.17" src_ip="213.73.90.9" src_port="80"/>
      <filter dst_ip="141.133.150.17" src_ip="72.206.107.160" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
317[label="209.88.193.107;d;1pkt 1fpkt", shape=diamond, color=yellow];
318[label="156.84.162.75;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{156.84.162.75:5002, 209.88.193.107:1076}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5002: (50%)&lt;BR/&gt; 1076: (50%)&gt;];
}
317--318[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.88.193.107" dst_port="1076" src_ip="156.84.162.75" src_port="5002"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737329,2.04056,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
50[label="208.78.231.135s;1pkt 1fpkt", shape=rectangle, color=red];
324[label="212.46.146.51;d;2pkt 2fpkt", shape=diamond, color=yellow];
327[label="208.78.231.135;s;55pkt 55fpkt", shape=diamond, color=yellow];
342[label="218.107.46.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.78.231.135:80, 207.15.64.131:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.7458%)&lt;BR/&gt; 21: (5.9322%)&lt;BR/&gt; 38187: (2.54237%)&lt;BR/&gt; 20: (2.54237%)&lt;BR/&gt; 62294: (1.69492%)&gt;];
}
50--327[label="1;1pkt 1fpkt"];
50--342[label="1;1pkt 1fpkt"];
324--327[label="1;2pkt 2fpkt"];
327--342[label="1;1pkt 1fpkt"];
327--1383[label="0.0363636;2pkt 2fpkt"];
327--2247[label="0.0545455;3pkt 3fpkt"];
327--2257[label="0.0363636;2pkt 2fpkt"];
327--2267[label="0.0363636;2pkt 2fpkt"];
327--2274[label="0.0363636;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="207.15.64.131" src_ip="208.78.231.135" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851534,2.00135,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
434[label="136.65.168.162;d;391pkt 391fpkt", shape=diamond, color=yellow];
629[label="136.65.162.144;d;223pkt 223fpkt", shape=diamond, color=yellow];
1416[label="44.66.188.129;s;33pkt 33fpkt", shape=diamond, color=yellow];
2347[label="195.150.101.23;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2819[label="205.46.204.209;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3189[label="205.46.204.209;36pkt 36fpkt", shape=invtriangle, color=brown];
3376[label="205.46.204.209;36pkt 36fpkt", shape=invhouse, color=bisque];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.65.162.144:80}[34.5912%]&lt;BR/&gt;{44.197.5.242:*, 136.65.168.162:80}[34.434%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4778%)&lt;BR/&gt; 24883: (0.261097%)&lt;BR/&gt; 24881: (0.261097%)&lt;BR/&gt; 24852: (0.261097%)&lt;BR/&gt; 24481: (0.261097%)&gt;];
}
434--534[label="0.560102;219pkt 219fpkt"];
434--1057[label="0.0285714;1pkt 1fpkt"];
434--1416[label="0.575758;19pkt 19fpkt"];
434--2103[label="0.575758;19pkt 19fpkt"];
434--2248[label="0.0485934;19pkt 19fpkt"];
434--2254[label="0.0255754;10pkt 10fpkt"];
434--2258[label="0.0434783;17pkt 17fpkt"];
434--2263[label="0.0485934;19pkt 19fpkt"];
434--2270[label="0.0485934;19pkt 19fpkt"];
434--2289[label="0.5;5pkt 5fpkt"];
434--2347[label="1;11pkt 11fpkt"];
434--2633[label="0.0294118;1pkt 1fpkt"];
434--2819[label="0.416667;15pkt 15fpkt"];
434--3189[label="0.416667;15pkt 15fpkt"];
434--3376[label="0.416667;15pkt 15fpkt"];
629--846[label="0.025;1pkt 1fpkt"];
629--1057[label="0.0571429;2pkt 2fpkt"];
629--1163[label="0.275862;8pkt 8fpkt"];
629--1416[label="0.030303;1pkt 1fpkt"];
629--1738[label="1;163pkt 163fpkt"];
629--2103[label="0.030303;1pkt 1fpkt"];
629--2248[label="0.0807175;18pkt 18fpkt"];
629--2254[label="0.0269058;6pkt 6fpkt"];
629--2258[label="0.112108;25pkt 25fpkt"];
629--2263[label="0.0807175;18pkt 18fpkt"];
629--2270[label="0.0807175;18pkt 18fpkt"];
629--2289[label="0.3;3pkt 3fpkt"];
629--2314[label="0.916667;11pkt 11fpkt"];
629--2361[label="0.45;9pkt 9fpkt"];
629--2633[label="0.0588235;2pkt 2fpkt"];
629--2819[label="0.333333;12pkt 12fpkt"];
629--3189[label="0.333333;12pkt 12fpkt"];
629--3319[label="0.037037;1pkt 1fpkt"];
629--3376[label="0.333333;12pkt 12fpkt"];
1416--1541[label="1;9pkt 9fpkt"];
1416--1738[label="0.030303;1pkt 1fpkt"];
1416--2103[label="1;33pkt 33fpkt"];
1416--2256[label="0.030303;1pkt 1fpkt"];
1416--2258[label="0.151515;5pkt 5fpkt"];
2819--3189[label="1;36pkt 36fpkt"];
2819--3376[label="1;36pkt 36fpkt"];
3189--3376[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.162.144" dst_port="80"/>
      <filter dst_ip="136.65.168.162" dst_port="80" src_ip="44.197.5.242"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
291[label="136.65.162.89;d;277pkt 277fpkt", shape=diamond, color=yellow];
361[label="208.78.234.36;d;8pkt 8fpkt", shape=diamond, color=yellow];
362[label="204.213.180.82;s;32pkt 32fpkt", shape=diamond, color=yellow];
485[label="194.208.167.22;s;9pkt 9fpkt", shape=diamond, color=yellow];
533[label="72.105.59.192;s;2pkt 2fpkt", shape=diamond, color=yellow];
563[label="195.144.254.63;s;5pkt 5fpkt", shape=diamond, color=yellow];
599[label="209.85.201.2;d;423pkt 423fpkt", shape=diamond, color=yellow];
1288[label="141.133.251.149;d;94pkt 94fpkt", shape=diamond, color=yellow];
1366[label="209.85.201.16;d;374pkt 374fpkt", shape=diamond, color=yellow];
1394[label="162.73.208.218;d;91pkt 91fpkt", shape=diamond, color=yellow];
1395[label="141.133.242.151;d;21pkt 21fpkt", shape=diamond, color=yellow];
1719[label="72.105.59.192;s;2pkt 2fpkt", shape=hexagon, color=black];
1724[label="195.144.254.63;s;5pkt 5fpkt", shape=hexagon, color=black];
1992[label="193.47.0.32;s;86pkt 86fpkt", shape=hexagon, color=black];
2372[label="193.47.0.32;88pkt 88fpkt", shape=pentagon, color=darkviolet];
2409[label="74.2.161.43;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2416[label="74.2.161.48;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2425[label="72.105.59.51;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2443[label="72.105.59.60;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2502[label="205.213.129.80;23pkt 23fpkt", shape=pentagon, color=darkviolet];
2526[label="75.158.55.88;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2567[label="195.144.252.106;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2775[label="72.105.59.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2977[label="74.2.161.43;21pkt 21fpkt", shape=invtriangle, color=brown];
3015[label="205.213.129.80;24pkt 24fpkt", shape=invtriangle, color=brown];
3030[label="75.158.55.88;18pkt 18fpkt", shape=invtriangle, color=brown];
3052[label="195.144.252.106;18pkt 18fpkt", shape=invtriangle, color=brown];
3170[label="72.105.59.192;1pkt 1fpkt", shape=invtriangle, color=brown];
3298[label="75.158.55.88;18pkt 18fpkt", shape=invhouse, color=bisque];
3363[label="72.105.59.192;1pkt 1fpkt", shape=invhouse, color=bisque];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 209.85.201.2:25}[29.4077%]&lt;BR/&gt;{*:*, 209.85.201.16:25}[26.0627%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (42.0566%)&lt;BR/&gt; 995: (2.54188%)&lt;BR/&gt; 443: (1.79087%)&lt;BR/&gt; 113: (1.61756%)&lt;BR/&gt; 110: (1.29983%)&gt;];
}
291--362[label="0.3125;10pkt 10fpkt"];
291--485[label="0.666667;6pkt 6fpkt"];
291--533[label="1;2pkt 2fpkt"];
291--563[label="1;5pkt 5fpkt"];
291--1144[label="0.0568182;5pkt 5fpkt"];
291--1516[label="0.193548;6pkt 6fpkt"];
291--1719[label="1;2pkt 2fpkt"];
291--1724[label="1;5pkt 5fpkt"];
291--1992[label="0.0581395;5pkt 5fpkt"];
291--2372[label="0.0568182;5pkt 5fpkt"];
291--2409[label="0.047619;1pkt 1fpkt"];
291--2416[label="0.285714;4pkt 4fpkt"];
291--2425[label="0.1;1pkt 1fpkt"];
291--2443[label="0.111111;1pkt 1fpkt"];
291--2502[label="0.0869565;2pkt 2fpkt"];
291--2526[label="0.5;9pkt 9fpkt"];
291--2567[label="0.882353;15pkt 15fpkt"];
291--2775[label="1;1pkt 1fpkt"];
291--2977[label="0.047619;1pkt 1fpkt"];
291--3015[label="0.0833333;2pkt 2fpkt"];
291--3030[label="0.5;9pkt 9fpkt"];
291--3052[label="0.888889;16pkt 16fpkt"];
291--3170[label="1;1pkt 1fpkt"];
291--3298[label="0.5;9pkt 9fpkt"];
291--3363[label="1;1pkt 1fpkt"];
361--362[label="0.875;7pkt 7fpkt"];
362--599[label="0.03125;1pkt 1fpkt"];
362--1366[label="0.03125;1pkt 1fpkt"];
362--1395[label="0.047619;1pkt 1fpkt"];
485--1688[label="0.666667;2pkt 2fpkt"];
533--1719[label="1;2pkt 2fpkt"];
533--2775[label="1;1pkt 1fpkt"];
533--3170[label="1;1pkt 1fpkt"];
533--3363[label="1;1pkt 1fpkt"];
563--1724[label="1;5pkt 5fpkt"];
599--906[label="0.0625;1pkt 1fpkt"];
599--1816[label="0.0769231;1pkt 1fpkt"];
599--2425[label="0.1;1pkt 1fpkt"];
599--2443[label="0.333333;3pkt 3fpkt"];
599--2502[label="0.0869565;2pkt 2fpkt"];
599--2608[label="0.0625;1pkt 1fpkt"];
599--3015[label="0.0833333;2pkt 2fpkt"];
1288--1295[label="1;62pkt 62fpkt"];
1288--1516[label="0.0645161;2pkt 2fpkt"];
1288--2051[label="1;90pkt 90fpkt"];
1288--2443[label="0.111111;1pkt 1fpkt"];
1288--2502[label="0.173913;4pkt 4fpkt"];
1288--2526[label="0.0555556;1pkt 1fpkt"];
1288--2660[label="0.0909091;1pkt 1fpkt"];
1288--3015[label="0.166667;4pkt 4fpkt"];
1288--3030[label="0.0555556;1pkt 1fpkt"];
1288--3298[label="0.0555556;1pkt 1fpkt"];
1366--1816[label="0.0769231;1pkt 1fpkt"];
1366--2425[label="0.1;1pkt 1fpkt"];
1366--2443[label="0.222222;2pkt 2fpkt"];
1366--2502[label="0.0434783;1pkt 1fpkt"];
1366--2608[label="0.0625;1pkt 1fpkt"];
1366--3015[label="0.0416667;1pkt 1fpkt"];
1394--1516[label="0.451613;14pkt 14fpkt"];
1394--1992[label="0.0581395;5pkt 5fpkt"];
1394--2372[label="0.0568182;5pkt 5fpkt"];
1394--2409[label="0.333333;7pkt 7fpkt"];
1394--2416[label="0.214286;3pkt 3fpkt"];
1394--2977[label="0.333333;7pkt 7fpkt"];
1719--2775[label="1;1pkt 1fpkt"];
1719--3170[label="1;1pkt 1fpkt"];
1719--3363[label="1;1pkt 1fpkt"];
1992--2026[label="0.139535;12pkt 12fpkt"];
1992--2208[label="0.0116279;1pkt 1fpkt"];
1992--2250[label="0.0116279;1pkt 1fpkt"];
1992--2251[label="0.0116279;1pkt 1fpkt"];
1992--2253[label="0.0116279;1pkt 1fpkt"];
1992--2256[label="0.0116279;1pkt 1fpkt"];
1992--2260[label="0.0232558;2pkt 2fpkt"];
1992--2262[label="0.0116279;1pkt 1fpkt"];
1992--2266[label="0.0232558;2pkt 2fpkt"];
1992--2269[label="0.0116279;1pkt 1fpkt"];
1992--2273[label="0.0232558;2pkt 2fpkt"];
1992--2372[label="1;86pkt 86fpkt"];
2409--2977[label="1;21pkt 21fpkt"];
2502--3015[label="1;23pkt 23fpkt"];
2526--3030[label="1;18pkt 18fpkt"];
2526--3298[label="1;18pkt 18fpkt"];
2567--3052[label="1;17pkt 17fpkt"];
2775--3170[label="1;1pkt 1fpkt"];
2775--3363[label="1;1pkt 1fpkt"];
3030--3298[label="1;18pkt 18fpkt"];
3170--3363[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.85.201.2" dst_port="25"/>
      <filter dst_ip="209.85.201.16" dst_port="25"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851534,2.00135,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
294[label="44.197.5.243;s;360pkt 360fpkt", shape=diamond, color=yellow];
363[label="209.85.201.81;d;220pkt 220fpkt", shape=diamond, color=yellow];
1099[label="141.133.242.185;d;48pkt 48fpkt", shape=diamond, color=yellow];
2555[label="204.188.50.102;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2890[label="44.197.5.243;363pkt 363fpkt", shape=pentagon, color=darkviolet];
3047[label="204.188.50.102;14pkt 14fpkt", shape=invtriangle, color=brown];
3226[label="44.197.5.243;362pkt 362fpkt", shape=invtriangle, color=brown];
3306[label="204.188.50.102;14pkt 14fpkt", shape=invhouse, color=bisque];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.197.5.243:*, 209.85.201.81:80}[52.1531%]&lt;BR/&gt;{44.197.5.243:*, 209.88.196.132:80}[32.0574%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47265: (0.143369%)&lt;BR/&gt; 47264: (0.143369%)&lt;BR/&gt; 47263: (0.143369%)&lt;BR/&gt; 47262: (0.143369%)&gt;];
}
294--363[label="0.990909;218pkt 218fpkt"];
294--539[label="0.617512;134pkt 134fpkt"];
294--1099[label="0.166667;8pkt 8fpkt"];
294--1924[label="0.617512;134pkt 134fpkt"];
294--2248[label="0.0222222;8pkt 8fpkt"];
294--2254[label="0.466667;168pkt 168fpkt"];
294--2263[label="0.0222222;8pkt 8fpkt"];
294--2270[label="0.0222222;8pkt 8fpkt"];
294--2890[label="1;360pkt 360fpkt"];
294--3226[label="1;360pkt 360fpkt"];
363--2254[label="0.763636;168pkt 168fpkt"];
363--2890[label="0.990909;218pkt 218fpkt"];
363--3226[label="0.990909;218pkt 218fpkt"];
1099--2248[label="0.208333;10pkt 10fpkt"];
1099--2254[label="0.0416667;2pkt 2fpkt"];
1099--2258[label="0.166667;8pkt 8fpkt"];
1099--2263[label="0.208333;10pkt 10fpkt"];
1099--2270[label="0.208333;10pkt 10fpkt"];
1099--2555[label="0.0714286;1pkt 1fpkt"];
1099--2890[label="0.166667;8pkt 8fpkt"];
1099--3047[label="0.0714286;1pkt 1fpkt"];
1099--3226[label="0.166667;8pkt 8fpkt"];
1099--3306[label="0.0714286;1pkt 1fpkt"];
2555--3047[label="1;14pkt 14fpkt"];
2555--3306[label="1;14pkt 14fpkt"];
2890--3226[label="1;362pkt 362fpkt"];
3047--3306[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="209.85.201.81" dst_port="80" src_ip="44.197.5.243"/>
      <filter dst_ip="209.88.196.132" dst_port="80" src_ip="44.197.5.243"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
360[label="141.133.48.142;s;119pkt 119fpkt", shape=diamond, color=yellow];
364[label="206.48.237.63;d;118pkt 118fpkt", shape=diamond, color=yellow];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.48.142:*, 206.48.237.63:80}[52.9412%]&lt;BR/&gt;{141.133.48.142:*, 206.48.237.63:443}[46.2185%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.7932%)&lt;BR/&gt; 443: (23.2068%)&lt;BR/&gt; 1444: (0.421941%)&lt;BR/&gt; 1443: (0.421941%)&lt;BR/&gt; 1442: (0.421941%)&gt;];
}
360--364[label="1;118pkt 118fpkt"];
360--1123[label="0.02;1pkt 1fpkt"];
360--2254[label="0.0168067;2pkt 2fpkt"];
364--2254[label="0.00847458;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.48.237.63" dst_port="80" src_ip="141.133.48.142"/>
      <filter dst_ip="206.48.237.63" dst_port="443" src_ip="141.133.48.142"/>
    </slice>
    <from sec="1031547659" usec="0"/>
    <to sec="1031547764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737329,2.04056,502,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
18[label="219.249.8.50s;1pkt 1fpkt", shape=rectangle, color=red];
171[label="219.249.8.50;s;1pkt 1fpkt", shape=diamond, color=yellow];
368[label="208.78.227.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.249.8.50:61825, 208.78.227.40:22}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61825: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
18--171[label="1;1pkt 1fpkt"];
18--368[label="1;1pkt 1fpkt"];
171--368[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.78.227.40" dst_port="22" src_ip="219.249.8.50" src_port="61825"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
176[label="162.73.41.101;d;1pkt 1fpkt", shape=diamond, color=yellow];
370[label="206.222.162.224;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.222.162.224:6060, 162.73.41.101:61397}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61397: (50%)&lt;BR/&gt; 6060: (50%)&gt;];
}
176--370[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.41.101" dst_port="61397" src_ip="206.222.162.224" src_port="6060"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07263,1.92615,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
46[label="151.244.4.131s;3pkt 3fpkt", shape=rectangle, color=red];
247[label="205.7.170.172;d;4pkt 4fpkt", shape=diamond, color=yellow];
248[label="151.244.4.131;s;775pkt 775fpkt", shape=diamond, color=yellow];
382[label="213.73.51.165;d;290pkt 290fpkt", shape=diamond, color=yellow];
681[label="141.133.201.11;s;15pkt 15fpkt", shape=diamond, color=yellow];
814[label="213.198.250.72;d;121pkt 121fpkt", shape=diamond, color=yellow];
1160[label="213.73.93.36;d;32pkt 32fpkt", shape=diamond, color=yellow];
1284[label="72.31.12.4;d;107pkt 107fpkt", shape=diamond, color=yellow];
1617[label="213.198.235.133;d;42pkt 42fpkt", shape=diamond, color=yellow];
1680[label="205.7.170.172;d;4pkt 4fpkt", shape=hexagon, color=black];
1716[label="213.73.3.242;d;19pkt 19fpkt", shape=hexagon, color=black];
2319[label="141.133.201.11;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2616[label="151.244.4.131;1041pkt 1041fpkt", shape=pentagon, color=darkviolet];
2707[label="151.244.39.165;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2727[label="136.65.44.172;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2927[label="141.133.201.11;17pkt 17fpkt", shape=invtriangle, color=brown];
3132[label="151.244.39.165;34pkt 34fpkt", shape=invtriangle, color=brown];
3145[label="136.65.44.172;11pkt 11fpkt", shape=invtriangle, color=brown];
3248[label="141.133.201.11;18pkt 18fpkt", shape=invhouse, color=bisque];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.4.131:*, 209.180.201.40:80}[27.2399%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6146%)&lt;BR/&gt; 443: (0.289017%)&lt;BR/&gt; 1049: (0.17341%)&lt;BR/&gt; 1052: (0.134875%)&lt;BR/&gt; 1053: (0.115607%)&gt;];
}
46--247[label="0.333333;1pkt 1fpkt"];
46--248[label="1;3pkt 3fpkt"];
46--382[label="0.666667;2pkt 2fpkt"];
46--1680[label="0.333333;1pkt 1fpkt"];
46--2248[label="0.333333;1pkt 1fpkt"];
46--2254[label="0.333333;1pkt 1fpkt"];
46--2258[label="0.333333;1pkt 1fpkt"];
46--2263[label="0.333333;1pkt 1fpkt"];
46--2270[label="0.333333;1pkt 1fpkt"];
46--2616[label="1;3pkt 3fpkt"];
247--248[label="0.75;3pkt 3fpkt"];
247--1680[label="1;4pkt 4fpkt"];
247--2248[label="1;4pkt 4fpkt"];
247--2254[label="0.25;1pkt 1fpkt"];
247--2258[label="0.25;1pkt 1fpkt"];
247--2263[label="1;4pkt 4fpkt"];
247--2270[label="1;4pkt 4fpkt"];
247--2616[label="0.75;3pkt 3fpkt"];
248--282[label="0.04;1pkt 1fpkt"];
248--313[label="0.00631579;3pkt 3fpkt"];
248--382[label="0.0689655;20pkt 20fpkt"];
248--449[label="0.0394737;12pkt 12fpkt"];
248--520[label="0.0789474;6pkt 6fpkt"];
248--521[label="0.0235294;2pkt 2fpkt"];
248--581[label="0.0102041;3pkt 3fpkt"];
248--651[label="0.193878;19pkt 19fpkt"];
248--757[label="0.192623;47pkt 47fpkt"];
248--814[label="0.0165289;2pkt 2fpkt"];
248--876[label="0.00465116;1pkt 1fpkt"];
248--900[label="0.0526316;9pkt 9fpkt"];
248--1093[label="0.153846;4pkt 4fpkt"];
248--1096[label="0.00890208;3pkt 3fpkt"];
248--1173[label="1;188pkt 188fpkt"];
248--1186[label="0.166667;2pkt 2fpkt"];
248--1284[label="0.0280374;3pkt 3fpkt"];
248--1359[label="0.0252101;3pkt 3fpkt"];
248--1497[label="0.0178571;2pkt 2fpkt"];
248--1511[label="0.0169492;1pkt 1fpkt"];
248--1585[label="0.015625;1pkt 1fpkt"];
248--1595[label="0.0235294;2pkt 2fpkt"];
248--1617[label="0.142857;6pkt 6fpkt"];
248--1680[label="0.75;3pkt 3fpkt"];
248--1716[label="0.0526316;1pkt 1fpkt"];
248--1808[label="0.00806452;3pkt 3fpkt"];
248--1891[label="0.153846;4pkt 4fpkt"];
248--1918[label="0.162162;12pkt 12fpkt"];
248--2021[label="0.0454545;1pkt 1fpkt"];
248--2030[label="0.178218;36pkt 36fpkt"];
248--2128[label="0.00890208;3pkt 3fpkt"];
248--2165[label="0.166667;2pkt 2fpkt"];
248--2241[label="0.00890208;3pkt 3fpkt"];
248--2248[label="0.0658065;51pkt 51fpkt"];
248--2254[label="0.0412903;32pkt 32fpkt"];
248--2258[label="0.0348387;27pkt 27fpkt"];
248--2263[label="0.0658065;51pkt 51fpkt"];
248--2270[label="0.0658065;51pkt 51fpkt"];
248--2616[label="1;775pkt 775fpkt"];
382--570[label="0.00344828;1pkt 1fpkt"];
382--575[label="0.775862;225pkt 225fpkt"];
382--681[label="0.0666667;1pkt 1fpkt"];
382--2011[label="0.0965517;28pkt 28fpkt"];
382--2248[label="0.175862;51pkt 51fpkt"];
382--2254[label="0.062069;18pkt 18fpkt"];
382--2258[label="0.182759;53pkt 53fpkt"];
382--2263[label="0.175862;51pkt 51fpkt"];
382--2270[label="0.175862;51pkt 51fpkt"];
382--2319[label="0.0555556;1pkt 1fpkt"];
382--2616[label="0.0689655;20pkt 20fpkt"];
382--2639[label="0.0108696;1pkt 1fpkt"];
382--2727[label="0.0909091;1pkt 1fpkt"];
382--2788[label="0.00344828;1pkt 1fpkt"];
382--2927[label="0.0588235;1pkt 1fpkt"];
382--3091[label="0.0107527;1pkt 1fpkt"];
382--3145[label="0.0909091;1pkt 1fpkt"];
382--3248[label="0.0555556;1pkt 1fpkt"];
382--3351[label="0.0833333;1pkt 1fpkt"];
382--3367[label="0.00344828;1pkt 1fpkt"];
681--694[label="0.0833333;1pkt 1fpkt"];
681--1716[label="0.4;6pkt 6fpkt"];
681--2254[label="0.266667;4pkt 4fpkt"];
681--2319[label="1;15pkt 15fpkt"];
681--2927[label="1;15pkt 15fpkt"];
681--3248[label="1;15pkt 15fpkt"];
814--1010[label="0.00826446;1pkt 1fpkt"];
814--1066[label="0.0661157;8pkt 8fpkt"];
814--1327[label="0.0526316;4pkt 4fpkt"];
814--1779[label="0.00826446;1pkt 1fpkt"];
814--1892[label="0.00826446;1pkt 1fpkt"];
814--2065[label="0.0571429;4pkt 4fpkt"];
814--2248[label="0.0330579;4pkt 4fpkt"];
814--2254[label="0.157025;19pkt 19fpkt"];
814--2263[label="0.0330579;4pkt 4fpkt"];
814--2270[label="0.0330579;4pkt 4fpkt"];
814--2616[label="0.0165289;2pkt 2fpkt"];
814--2707[label="0.363636;12pkt 12fpkt"];
814--3132[label="0.352941;12pkt 12fpkt"];
1160--1823[label="0.0625;2pkt 2fpkt"];
1160--1873[label="0.09375;3pkt 3fpkt"];
1160--2254[label="0.03125;1pkt 1fpkt"];
1160--2258[label="0.09375;3pkt 3fpkt"];
1160--2522[label="0.1875;6pkt 6fpkt"];
1160--2727[label="0.0909091;1pkt 1fpkt"];
1160--3028[label="0.1875;6pkt 6fpkt"];
1160--3145[label="0.0909091;1pkt 1fpkt"];
1160--3351[label="0.0833333;1pkt 1fpkt"];
1284--1663[label="0.0186916;2pkt 2fpkt"];
1284--1823[label="0.0186916;2pkt 2fpkt"];
1284--1852[label="0.28972;31pkt 31fpkt"];
1284--2187[label="0.0186916;2pkt 2fpkt"];
1284--2248[label="0.00934579;1pkt 1fpkt"];
1284--2254[label="0.0560748;6pkt 6fpkt"];
1284--2258[label="0.0280374;3pkt 3fpkt"];
1284--2263[label="0.00934579;1pkt 1fpkt"];
1284--2270[label="0.00934579;1pkt 1fpkt"];
1284--2300[label="0.00934579;1pkt 1fpkt"];
1284--2463[label="0.0280374;3pkt 3fpkt"];
1284--2616[label="0.0280374;3pkt 3fpkt"];
1284--2788[label="0.0186916;2pkt 2fpkt"];
1284--2996[label="0.0280374;3pkt 3fpkt"];
1284--3367[label="0.0186916;2pkt 2fpkt"];
1617--1629[label="0.238095;10pkt 10fpkt"];
1617--2258[label="0.0952381;4pkt 4fpkt"];
1617--2616[label="0.142857;6pkt 6fpkt"];
1680--2248[label="1;4pkt 4fpkt"];
1680--2254[label="0.25;1pkt 1fpkt"];
1680--2258[label="0.25;1pkt 1fpkt"];
1680--2263[label="1;4pkt 4fpkt"];
1680--2270[label="1;4pkt 4fpkt"];
1680--2616[label="0.75;3pkt 3fpkt"];
1716--1779[label="0.157895;3pkt 3fpkt"];
1716--2248[label="0.157895;3pkt 3fpkt"];
1716--2254[label="0.210526;4pkt 4fpkt"];
1716--2263[label="0.157895;3pkt 3fpkt"];
1716--2270[label="0.157895;3pkt 3fpkt"];
1716--2319[label="0.333333;6pkt 6fpkt"];
1716--2616[label="0.0526316;1pkt 1fpkt"];
1716--2927[label="0.352941;6pkt 6fpkt"];
1716--3248[label="0.333333;6pkt 6fpkt"];
2319--2927[label="1;17pkt 17fpkt"];
2319--3248[label="1;18pkt 18fpkt"];
2707--3132[label="1;33pkt 33fpkt"];
2727--3145[label="1;11pkt 11fpkt"];
2727--3351[label="1;11pkt 11fpkt"];
2927--3248[label="1;17pkt 17fpkt"];
3145--3351[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="209.180.201.40" dst_port="80" src_ip="151.244.4.131"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
390[label="74.131.117.64;d;1pkt 1fpkt", shape=diamond, color=yellow];
391[label="151.244.161.251;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.161.251:4276, 75.97.97.38:1863}[25%]&lt;BR/&gt;{151.244.161.251:1809, 74.131.117.64:1800}[25%]&lt;BR/&gt;{151.244.161.251:1569, 72.162.49.163:1721}[25%]&lt;BR/&gt;{151.244.161.251:1810, 72.162.49.181:51719}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1809: (20%)&lt;BR/&gt; 1800: (20%)&lt;BR/&gt; 51719: (10%)&lt;BR/&gt; 4276: (10%)&lt;BR/&gt; 1863: (10%)&gt;];
}
390--391[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="72.162.49.181" dst_port="51719" src_ip="151.244.161.251" src_port="1810"/>
      <filter dst_ip="72.162.49.163" dst_port="1721" src_ip="151.244.161.251" src_port="1569"/>
      <filter dst_ip="74.131.117.64" dst_port="1800" src_ip="151.244.161.251" src_port="1809"/>
      <filter dst_ip="75.97.97.38" dst_port="1863" src_ip="151.244.161.251" src_port="4276"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
241[label="136.65.180.232;s;79pkt 79fpkt", shape=diamond, color=yellow];
398[label="143.110.100.197;d;3pkt 3fpkt", shape=diamond, color=yellow];
757[label="220.116.237.235;d;244pkt 244fpkt", shape=diamond, color=yellow];
864[label="162.73.86.39;s;79pkt 79fpkt", shape=diamond, color=yellow];
1653[label="215.6.194.149;d;1pkt 1fpkt", shape=diamond, color=yellow];
2030[label="220.116.237.235;d;202pkt 202fpkt", shape=hexagon, color=black];
2105[label="141.133.145.124;s;113pkt 113fpkt", shape=hexagon, color=black];
2455[label="151.244.195.63;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2513[label="162.73.75.83;42pkt 42fpkt", shape=pentagon, color=darkviolet];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 220.116.237.235:80}[54.8315%]&lt;BR/&gt;{141.133.145.124:*, 218.195.30.31:80}[20.4494%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.141%)&lt;BR/&gt; 53: (0.769231%)&lt;BR/&gt; 1863: (0.448718%)&lt;BR/&gt; 22: (0.448718%)&lt;BR/&gt; 61404: (0.192308%)&gt;];
}
241--398[label="1;3pkt 3fpkt"];
241--757[label="0.405063;32pkt 32fpkt"];
241--900[label="0.0506329;4pkt 4fpkt"];
241--1348[label="0.233333;7pkt 7fpkt"];
241--1653[label="1;1pkt 1fpkt"];
241--2030[label="0.405063;32pkt 32fpkt"];
241--2120[label="0.233333;7pkt 7fpkt"];
757--864[label="0.78481;62pkt 62fpkt"];
757--1182[label="0.0353982;4pkt 4fpkt"];
757--2030[label="1;202pkt 202fpkt"];
757--2105[label="0.0353982;4pkt 4fpkt"];
757--2248[label="0.00819672;2pkt 2fpkt"];
757--2258[label="0.00409836;1pkt 1fpkt"];
757--2263[label="0.00819672;2pkt 2fpkt"];
757--2270[label="0.00819672;2pkt 2fpkt"];
757--2455[label="0.117647;2pkt 2fpkt"];
757--2457[label="0.168033;41pkt 41fpkt"];
757--2513[label="0.690476;29pkt 29fpkt"];
757--2616[label="0.192623;47pkt 47fpkt"];
757--2992[label="0.168033;41pkt 41fpkt"];
864--2030[label="0.78481;62pkt 62fpkt"];
2030--2105[label="0.0353982;4pkt 4fpkt"];
2030--2248[label="0.00990099;2pkt 2fpkt"];
2030--2258[label="0.0049505;1pkt 1fpkt"];
2030--2263[label="0.00990099;2pkt 2fpkt"];
2030--2270[label="0.00990099;2pkt 2fpkt"];
2030--2455[label="0.117647;2pkt 2fpkt"];
2030--2457[label="0.20297;41pkt 41fpkt"];
2030--2616[label="0.178218;36pkt 36fpkt"];
2030--2992[label="0.20297;41pkt 41fpkt"];
2105--2258[label="0.0619469;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="220.116.237.235" dst_port="80"/>
      <filter dst_ip="218.195.30.31" dst_port="80" src_ip="141.133.145.124"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.637465,2.04059,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
412[label="141.133.73.238;s;1pkt 1fpkt", shape=diamond, color=yellow];
413[label="44.23.185.216;d;1pkt 1fpkt", shape=diamond, color=yellow];
3222[label="141.133.73.238;1pkt 1fpkt", shape=invtriangle, color=brown];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.73.238:2119, 44.23.185.216:1755}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2119: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
412--413[label="1;1pkt 1fpkt"];
412--3222[label="1;1pkt 1fpkt"];
413--3222[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="44.23.185.216" dst_port="1755" src_ip="141.133.73.238" src_port="2119"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
285[label="212.46.135.165;s;1pkt 1fpkt", shape=diamond, color=yellow];
424[label="208.78.224.196;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.222.4.3:0, 208.78.224.196:0}[50%]&lt;BR/&gt;{212.46.135.165:0, 208.78.224.196:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
285--424[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.78.224.196" src_ip="212.46.135.165"/>
      <filter dst_ip="208.78.224.196" src_ip="208.222.4.3"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
427[label="162.73.153.72;d;2pkt 2fpkt", shape=diamond, color=yellow];
428[label="75.222.249.120;s;1pkt 1fpkt", shape=diamond, color=yellow];
1805[label="75.222.249.120;s;1pkt 1fpkt", shape=hexagon, color=black];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.82.34.51:0, 162.73.153.72:0}[50%]&lt;BR/&gt;{75.222.249.120:6699, 162.73.153.72:4586}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (37.5%)&lt;BR/&gt; 4586: (37.5%)&lt;BR/&gt; 0: (25%)&gt;];
}
427--428[label="1;1pkt 1fpkt"];
427--1805[label="1;1pkt 1fpkt"];
428--1805[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.153.72" dst_port="4586" src_ip="75.222.249.120" src_port="6699"/>
      <filter dst_ip="162.73.153.72" src_ip="195.82.34.51"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.748983,2.07268,999,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
295[label="2.143.116.240;d;1pkt 1fpkt", shape=diamond, color=yellow];
433[label="141.133.138.237;s;2pkt 2fpkt", shape=diamond, color=yellow];
3390[label="141.133.138.237;2pkt 2fpkt", shape=invhouse, color=bisque];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.138.237:49165, 24.1.76.204:123}[50%]&lt;BR/&gt;{141.133.138.237:49159, 2.143.116.240:8082}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49159: (30%)&lt;BR/&gt; 8082: (30%)&lt;BR/&gt; 49165: (20%)&lt;BR/&gt; 123: (20%)&gt;];
}
295--433[label="1;1pkt 1fpkt"];
295--3390[label="1;1pkt 1fpkt"];
433--3390[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="2.143.116.240" dst_port="8082" src_ip="141.133.138.237" src_port="49159"/>
      <filter dst_ip="24.1.76.204" dst_port="123" src_ip="141.133.138.237" src_port="49165"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.522387,2.02397,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
355[label="75.111.53.42;d;139pkt 139fpkt", shape=diamond, color=yellow];
513[label="151.244.178.76;s;137pkt 137fpkt", shape=diamond, color=yellow];
811[label="141.133.201.91;s;64pkt 64fpkt", shape=diamond, color=yellow];
2488[label="151.244.178.76;136pkt 136fpkt", shape=pentagon, color=darkviolet];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.178.76:*, 75.111.53.42:80}[57.4257%]&lt;BR/&gt;{141.133.201.91:*, *:80}[30.6931%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7899%)&lt;BR/&gt; 36196: (0.315126%)&lt;BR/&gt; 36195: (0.315126%)&lt;BR/&gt; 36194: (0.315126%)&lt;BR/&gt; 36193: (0.315126%)&gt;];
}
355--513[label="0.846715;116pkt 116fpkt"];
355--568[label="0.00719424;1pkt 1fpkt"];
355--811[label="0.34375;22pkt 22fpkt"];
355--2074[label="0.00719424;1pkt 1fpkt"];
355--2248[label="0.179856;25pkt 25fpkt"];
355--2254[label="0.00719424;1pkt 1fpkt"];
355--2263[label="0.179856;25pkt 25fpkt"];
355--2270[label="0.179856;25pkt 25fpkt"];
355--2488[label="0.852941;116pkt 116fpkt"];
355--2533[label="0.278481;22pkt 22fpkt"];
355--3035[label="0.278481;22pkt 22fpkt"];
513--1592[label="0.0461538;3pkt 3fpkt"];
513--2248[label="0.0510949;7pkt 7fpkt"];
513--2254[label="0.00729927;1pkt 1fpkt"];
513--2263[label="0.0510949;7pkt 7fpkt"];
513--2270[label="0.0510949;7pkt 7fpkt"];
513--2488[label="1;136pkt 136fpkt"];
811--1267[label="0.03125;2pkt 2fpkt"];
811--1986[label="0.0344828;2pkt 2fpkt"];
811--2248[label="0.5;32pkt 32fpkt"];
811--2254[label="0.375;24pkt 24fpkt"];
811--2263[label="0.5;32pkt 32fpkt"];
811--2270[label="0.5;32pkt 32fpkt"];
811--2533[label="1;64pkt 64fpkt"];
811--3035[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="141.133.201.91"/>
      <filter dst_ip="75.111.53.42" dst_port="80" src_ip="151.244.178.76"/>
    </slice>
    <from sec="1031547605" usec="0"/>
    <to sec="1031547828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07263,1.92615,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
15[label="164.15.221.44s;11pkt 11fpkt", shape=rectangle, color=red];
288[label="164.15.206.101;s;614pkt 614fpkt", shape=diamond, color=yellow];
292[label="136.65.162.89;s;527pkt 527fpkt", shape=diamond, color=yellow];
532[label="72.105.59.192;d;8pkt 8fpkt", shape=diamond, color=yellow];
673[label="164.15.232.28;s;61pkt 61fpkt", shape=diamond, color=yellow];
767[label="209.85.201.16;s;784pkt 784fpkt", shape=diamond, color=yellow];
903[label="164.15.194.164;s;19pkt 19fpkt", shape=diamond, color=yellow];
907[label="75.155.47.87;d;178pkt 178fpkt", shape=diamond, color=yellow];
1021[label="75.158.55.95;d;50pkt 50fpkt", shape=diamond, color=yellow];
1028[label="164.15.221.42;s;58pkt 58fpkt", shape=diamond, color=yellow];
1136[label="75.158.55.88;d;58pkt 58fpkt", shape=diamond, color=yellow];
1166[label="164.15.221.44;s;49pkt 49fpkt", shape=diamond, color=yellow];
1280[label="141.133.242.151;s;34pkt 34fpkt", shape=diamond, color=yellow];
1378[label="72.105.59.44;d;15pkt 15fpkt", shape=diamond, color=yellow];
1398[label="164.15.232.141;s;92pkt 92fpkt", shape=diamond, color=yellow];
1406[label="72.105.59.59;d;12pkt 12fpkt", shape=diamond, color=yellow];
1417[label="72.105.59.35;d;21pkt 21fpkt", shape=diamond, color=yellow];
1427[label="209.85.227.1;s;187pkt 187fpkt", shape=diamond, color=yellow];
1434[label="72.105.59.61;d;8pkt 8fpkt", shape=diamond, color=yellow];
1437[label="72.105.59.42;d;5pkt 5fpkt", shape=diamond, color=yellow];
1449[label="72.105.59.37;d;5pkt 5fpkt", shape=diamond, color=yellow];
1450[label="72.105.59.40;d;7pkt 7fpkt", shape=diamond, color=yellow];
1451[label="72.105.59.43;d;5pkt 5fpkt", shape=diamond, color=yellow];
1477[label="164.15.15.162;s;111pkt 111fpkt", shape=diamond, color=yellow];
1517[label="75.158.55.90;d;39pkt 39fpkt", shape=diamond, color=yellow];
1518[label="74.2.161.43;d;40pkt 40fpkt", shape=diamond, color=yellow];
1566[label="164.15.206.99;s;38pkt 38fpkt", shape=diamond, color=yellow];
1567[label="209.129.201.129;s;79pkt 79fpkt", shape=diamond, color=yellow];
1602[label="209.172.156.41;d;40pkt 40fpkt", shape=diamond, color=yellow];
1749[label="164.15.232.28;s;60pkt 60fpkt", shape=hexagon, color=black];
1980[label="164.15.221.42;s;45pkt 45fpkt", shape=hexagon, color=black];
1983[label="75.158.55.88;d;52pkt 52fpkt", shape=hexagon, color=black];
2111[label="72.105.59.42;d;5pkt 5fpkt", shape=hexagon, color=black];
2157[label="209.12.82.11;d;43pkt 43fpkt", shape=hexagon, color=black];
2291[label="164.15.215.3;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2301[label="164.15.233.5;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2365[label="164.15.232.28;61pkt 61fpkt", shape=pentagon, color=darkviolet];
2423[label="164.15.214.50;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2661[label="164.15.194.148;39pkt 39fpkt", shape=pentagon, color=darkviolet];
2912[label="164.15.215.3;21pkt 21fpkt", shape=invtriangle, color=brown];
3106[label="164.15.194.148;39pkt 39fpkt", shape=invtriangle, color=brown];
3239[label="164.15.215.3;20pkt 20fpkt", shape=invhouse, color=bisque];
3242[label="164.15.233.5;29pkt 29fpkt", shape=invhouse, color=bisque];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:25}[38.4005%]&lt;BR/&gt;{209.85.201.16:25, *:*}[25.8427%]&lt;BR/&gt;{164.15.206.101:*, *:*}[20.2908%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.4688%)&lt;BR/&gt; 80: (6.0648%)&lt;BR/&gt; 0: (5.98172%)&lt;BR/&gt; 53: (2.88009%)&lt;BR/&gt; 113: (0.733869%)&gt;];
}
15--1166[label="1;11pkt 11fpkt"];
15--1378[label="0.0909091;1pkt 1fpkt"];
15--1406[label="0.0909091;1pkt 1fpkt"];
15--1417[label="0.0909091;1pkt 1fpkt"];
15--1434[label="0.125;1pkt 1fpkt"];
15--1437[label="0.2;1pkt 1fpkt"];
15--1449[label="0.2;1pkt 1fpkt"];
15--1450[label="0.142857;1pkt 1fpkt"];
15--1451[label="0.2;1pkt 1fpkt"];
15--2111[label="0.2;1pkt 1fpkt"];
15--2173[label="0.2;1pkt 1fpkt"];
288--532[label="0.25;2pkt 2fpkt"];
288--686[label="0.727273;8pkt 8fpkt"];
288--907[label="0.0280899;5pkt 5fpkt"];
288--1021[label="0.42;21pkt 21fpkt"];
288--1136[label="0.37931;22pkt 22fpkt"];
288--1287[label="0.375;15pkt 15fpkt"];
288--1289[label="0.36;18pkt 18fpkt"];
288--1378[label="0.133333;2pkt 2fpkt"];
288--1400[label="0.0384615;1pkt 1fpkt"];
288--1406[label="0.0833333;1pkt 1fpkt"];
288--1478[label="0.7;28pkt 28fpkt"];
288--1517[label="0.307692;12pkt 12fpkt"];
288--1518[label="0.525;21pkt 21fpkt"];
288--1983[label="0.423077;22pkt 22fpkt"];
288--2099[label="0.375;15pkt 15fpkt"];
288--2124[label="0.7;28pkt 28fpkt"];
288--2160[label="0.36;18pkt 18fpkt"];
288--2247[label="0.00814332;5pkt 5fpkt"];
288--2255[label="0.0114007;7pkt 7fpkt"];
288--2257[label="0.00325733;2pkt 2fpkt"];
288--2267[label="0.00325733;2pkt 2fpkt"];
288--2274[label="0.00325733;2pkt 2fpkt"];
292--532[label="0.25;2pkt 2fpkt"];
292--1021[label="0.02;1pkt 1fpkt"];
292--1136[label="0.172414;10pkt 10fpkt"];
292--1143[label="0.0617284;5pkt 5fpkt"];
292--1289[label="0.12;6pkt 6fpkt"];
292--1400[label="0.0384615;1pkt 1fpkt"];
292--1450[label="0.142857;1pkt 1fpkt"];
292--1478[label="0.125;5pkt 5fpkt"];
292--1518[label="0.025;1pkt 1fpkt"];
292--1921[label="0.0632911;5pkt 5fpkt"];
292--1983[label="0.173077;9pkt 9fpkt"];
292--2124[label="0.125;5pkt 5fpkt"];
292--2160[label="0.12;6pkt 6fpkt"];
532--1477[label="0.5;4pkt 4fpkt"];
673--907[label="0.0163934;1pkt 1fpkt"];
673--1021[label="0.3;15pkt 15fpkt"];
673--1136[label="0.12069;7pkt 7fpkt"];
673--1287[label="0.25;10pkt 10fpkt"];
673--1289[label="0.02;1pkt 1fpkt"];
673--1517[label="0.307692;12pkt 12fpkt"];
673--1518[label="0.025;1pkt 1fpkt"];
673--1749[label="1;60pkt 60fpkt"];
673--1983[label="0.115385;6pkt 6fpkt"];
673--2099[label="0.25;10pkt 10fpkt"];
673--2160[label="0.02;1pkt 1fpkt"];
673--2365[label="1;61pkt 61fpkt"];
767--1378[label="0.0666667;1pkt 1fpkt"];
767--1400[label="0.0384615;1pkt 1fpkt"];
767--1406[label="0.25;3pkt 3fpkt"];
767--1434[label="0.125;1pkt 1fpkt"];
767--1450[label="0.285714;2pkt 2fpkt"];
903--1371[label="0.5;1pkt 1fpkt"];
903--1378[label="0.0666667;1pkt 1fpkt"];
907--929[label="0.0114943;1pkt 1fpkt"];
907--1028[label="0.0344828;2pkt 2fpkt"];
907--1398[label="0.608696;56pkt 56fpkt"];
907--1427[label="0.00561798;1pkt 1fpkt"];
907--1749[label="0.0166667;1pkt 1fpkt"];
907--1980[label="0.0222222;1pkt 1fpkt"];
907--2107[label="0.00561798;1pkt 1fpkt"];
907--2247[label="0.0674157;12pkt 12fpkt"];
907--2255[label="0.0786517;14pkt 14fpkt"];
907--2257[label="0.0730337;13pkt 13fpkt"];
907--2267[label="0.0730337;13pkt 13fpkt"];
907--2274[label="0.0730337;13pkt 13fpkt"];
907--2276[label="0.55;11pkt 11fpkt"];
907--2291[label="0.047619;1pkt 1fpkt"];
907--2365[label="0.0163934;1pkt 1fpkt"];
907--2908[label="0.52381;11pkt 11fpkt"];
907--2912[label="0.047619;1pkt 1fpkt"];
907--3239[label="0.05;1pkt 1fpkt"];
907--3242[label="0.0344828;1pkt 1fpkt"];
1021--1028[label="0.04;2pkt 2fpkt"];
1021--1166[label="0.0816327;4pkt 4fpkt"];
1021--1280[label="0.0294118;1pkt 1fpkt"];
1021--1364[label="0.075;3pkt 3fpkt"];
1021--1567[label="0.02;1pkt 1fpkt"];
1021--1749[label="0.3;15pkt 15fpkt"];
1021--1980[label="0.0444444;2pkt 2fpkt"];
1021--2365[label="0.3;15pkt 15fpkt"];
1021--2589[label="0.0714286;3pkt 3fpkt"];
1021--3066[label="0.0714286;3pkt 3fpkt"];
1028--1136[label="0.0344828;2pkt 2fpkt"];
1028--1287[label="0.075;3pkt 3fpkt"];
1028--1378[label="0.0666667;1pkt 1fpkt"];
1028--1400[label="0.0384615;1pkt 1fpkt"];
1028--1417[label="0.047619;1pkt 1fpkt"];
1028--1434[label="0.125;1pkt 1fpkt"];
1028--1517[label="0.128205;5pkt 5fpkt"];
1028--1518[label="0.025;1pkt 1fpkt"];
1028--1750[label="0.0294118;1pkt 1fpkt"];
1028--1980[label="1;45pkt 45fpkt"];
1028--1983[label="0.0384615;2pkt 2fpkt"];
1028--2099[label="0.075;3pkt 3fpkt"];
1136--1166[label="0.102041;5pkt 5fpkt"];
1136--1364[label="0.05;2pkt 2fpkt"];
1136--1749[label="0.103448;6pkt 6fpkt"];
1136--1980[label="0.0444444;2pkt 2fpkt"];
1136--1983[label="1;52pkt 52fpkt"];
1136--2365[label="0.12069;7pkt 7fpkt"];
1136--2589[label="0.047619;2pkt 2fpkt"];
1136--2661[label="0.025641;1pkt 1fpkt"];
1136--3064[label="0.0344828;2pkt 2fpkt"];
1136--3066[label="0.047619;2pkt 2fpkt"];
1136--3106[label="0.025641;1pkt 1fpkt"];
1136--3242[label="0.0344828;1pkt 1fpkt"];
1136--3311[label="0.0344828;2pkt 2fpkt"];
1166--1287[label="0.125;5pkt 5fpkt"];
1166--1378[label="0.0666667;1pkt 1fpkt"];
1166--1400[label="0.0769231;2pkt 2fpkt"];
1166--1406[label="0.0833333;1pkt 1fpkt"];
1166--1417[label="0.0952381;2pkt 2fpkt"];
1166--1434[label="0.125;1pkt 1fpkt"];
1166--1437[label="0.2;1pkt 1fpkt"];
1166--1449[label="0.4;2pkt 2fpkt"];
1166--1450[label="0.142857;1pkt 1fpkt"];
1166--1451[label="0.2;1pkt 1fpkt"];
1166--1517[label="0.025641;1pkt 1fpkt"];
1166--1518[label="0.025;1pkt 1fpkt"];
1166--1983[label="0.0816327;4pkt 4fpkt"];
1166--2099[label="0.125;5pkt 5fpkt"];
1166--2111[label="0.2;1pkt 1fpkt"];
1166--2173[label="0.4;2pkt 2fpkt"];
1280--1517[label="0.0294118;1pkt 1fpkt"];
1378--1427[label="0.0666667;1pkt 1fpkt"];
1378--1955[label="0.0666667;1pkt 1fpkt"];
1378--1980[label="0.0666667;1pkt 1fpkt"];
1378--2107[label="0.0666667;1pkt 1fpkt"];
1398--1417[label="0.0952381;2pkt 2fpkt"];
1398--1750[label="0.0294118;1pkt 1fpkt"];
1398--2247[label="0.0217391;2pkt 2fpkt"];
1398--2255[label="0.076087;7pkt 7fpkt"];
1398--2257[label="0.0326087;3pkt 3fpkt"];
1398--2267[label="0.0326087;3pkt 3fpkt"];
1398--2274[label="0.0326087;3pkt 3fpkt"];
1406--1427[label="0.0833333;1pkt 1fpkt"];
1406--1566[label="0.0833333;1pkt 1fpkt"];
1406--1955[label="0.0833333;1pkt 1fpkt"];
1406--1965[label="0.0833333;1pkt 1fpkt"];
1406--2011[label="0.0833333;1pkt 1fpkt"];
1406--2107[label="0.0833333;1pkt 1fpkt"];
1406--2226[label="0.0833333;1pkt 1fpkt"];
1406--2423[label="0.0833333;1pkt 1fpkt"];
1417--1427[label="0.047619;1pkt 1fpkt"];
1417--1477[label="0.0952381;2pkt 2fpkt"];
1417--2107[label="0.047619;1pkt 1fpkt"];
1417--2333[label="0.0952381;2pkt 2fpkt"];
1417--2938[label="0.0952381;2pkt 2fpkt"];
1417--3242[label="0.0952381;2pkt 2fpkt"];
1427--1434[label="0.125;1pkt 1fpkt"];
1427--1437[label="0.2;1pkt 1fpkt"];
1427--1449[label="0.2;1pkt 1fpkt"];
1427--1450[label="0.142857;1pkt 1fpkt"];
1427--1451[label="0.2;1pkt 1fpkt"];
1427--1501[label="0.0111111;1pkt 1fpkt"];
1427--1503[label="0.0113636;1pkt 1fpkt"];
1427--1504[label="0.010989;1pkt 1fpkt"];
1427--1602[label="0.025;1pkt 1fpkt"];
1427--1614[label="0.0555556;1pkt 1fpkt"];
1427--1891[label="0.0384615;1pkt 1fpkt"];
1427--1921[label="0.0126582;1pkt 1fpkt"];
1427--1936[label="0.00534759;1pkt 1fpkt"];
1427--1973[label="0.0188679;1pkt 1fpkt"];
1427--2028[label="0.00534759;1pkt 1fpkt"];
1427--2059[label="0.02;1pkt 1fpkt"];
1427--2094[label="0.010989;1pkt 1fpkt"];
1427--2107[label="1;187pkt 187fpkt"];
1427--2111[label="0.2;1pkt 1fpkt"];
1427--2128[label="0.00534759;1pkt 1fpkt"];
1427--2135[label="0.0133333;1pkt 1fpkt"];
1427--2157[label="0.0232558;1pkt 1fpkt"];
1427--2173[label="0.2;1pkt 1fpkt"];
1427--2220[label="0.00534759;1pkt 1fpkt"];
1427--2241[label="0.00534759;1pkt 1fpkt"];
1434--1980[label="0.125;1pkt 1fpkt"];
1434--2107[label="0.125;1pkt 1fpkt"];
1437--2107[label="0.2;1pkt 1fpkt"];
1437--2111[label="1;5pkt 5fpkt"];
1449--1965[label="0.2;1pkt 1fpkt"];
1449--2107[label="0.2;1pkt 1fpkt"];
1449--2173[label="1;5pkt 5fpkt"];
1449--2226[label="0.2;1pkt 1fpkt"];
1450--2107[label="0.142857;1pkt 1fpkt"];
1451--2107[label="0.2;1pkt 1fpkt"];
1451--2423[label="0.2;1pkt 1fpkt"];
1477--1570[label="0.0133333;1pkt 1fpkt"];
1477--1575[label="0.0188679;1pkt 1fpkt"];
1477--2041[label="0.0169492;1pkt 1fpkt"];
1477--2145[label="0.0188679;1pkt 1fpkt"];
1477--2251[label="0.00900901;1pkt 1fpkt"];
1477--2253[label="0.018018;2pkt 2fpkt"];
1477--2256[label="0.108108;12pkt 12fpkt"];
1477--2260[label="0.108108;12pkt 12fpkt"];
1477--2266[label="0.108108;12pkt 12fpkt"];
1477--2273[label="0.108108;12pkt 12fpkt"];
1517--1749[label="0.307692;12pkt 12fpkt"];
1517--1980[label="0.128205;5pkt 5fpkt"];
1517--2365[label="0.307692;12pkt 12fpkt"];
1517--2554[label="0.025641;1pkt 1fpkt"];
1517--2589[label="0.025641;1pkt 1fpkt"];
1517--2683[label="0.025641;1pkt 1fpkt"];
1517--3046[label="0.025641;1pkt 1fpkt"];
1517--3066[label="0.025641;1pkt 1fpkt"];
1517--3242[label="0.0344828;1pkt 1fpkt"];
1518--1567[label="0.025;1pkt 1fpkt"];
1518--1582[label="0.025;1pkt 1fpkt"];
1518--1749[label="0.025;1pkt 1fpkt"];
1518--1980[label="0.025;1pkt 1fpkt"];
1518--2365[label="0.025;1pkt 1fpkt"];
1518--2792[label="0.0434783;1pkt 1fpkt"];
1566--2247[label="0.0789474;3pkt 3fpkt"];
1567--2124[label="0.05;2pkt 2fpkt"];
1567--2255[label="0.0126582;1pkt 1fpkt"];
1602--2107[label="0.025;1pkt 1fpkt"];
1602--2248[label="0.025;1pkt 1fpkt"];
1602--2254[label="0.025;1pkt 1fpkt"];
1602--2258[label="0.05;2pkt 2fpkt"];
1602--2263[label="0.025;1pkt 1fpkt"];
1602--2270[label="0.025;1pkt 1fpkt"];
1749--1983[label="0.115385;6pkt 6fpkt"];
1749--2099[label="0.25;10pkt 10fpkt"];
1749--2160[label="0.02;1pkt 1fpkt"];
1749--2365[label="1;60pkt 60fpkt"];
1980--1983[label="0.0444444;2pkt 2fpkt"];
1980--2099[label="0.075;3pkt 3fpkt"];
1983--2365[label="0.115385;6pkt 6fpkt"];
1983--2589[label="0.047619;2pkt 2fpkt"];
1983--2661[label="0.025641;1pkt 1fpkt"];
1983--3064[label="0.0192308;1pkt 1fpkt"];
1983--3066[label="0.047619;2pkt 2fpkt"];
1983--3106[label="0.025641;1pkt 1fpkt"];
1983--3242[label="0.0344828;1pkt 1fpkt"];
1983--3311[label="0.0192308;1pkt 1fpkt"];
2157--2248[label="0.0697674;3pkt 3fpkt"];
2157--2254[label="0.0232558;1pkt 1fpkt"];
2157--2258[label="0.186047;8pkt 8fpkt"];
2157--2263[label="0.0697674;3pkt 3fpkt"];
2157--2270[label="0.0697674;3pkt 3fpkt"];
2291--2912[label="1;21pkt 21fpkt"];
2291--3239[label="1;20pkt 20fpkt"];
2301--3242[label="1;1pkt 1fpkt"];
2661--3106[label="1;39pkt 39fpkt"];
2912--3239[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="164.15.206.101"/>
      <filter dst_port="25"/>
      <filter src_ip="209.85.201.16" src_port="25"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
548[label="142.43.12.39;d;21pkt 21fpkt", shape=diamond, color=yellow];
1721[label="142.43.12.39;d;17pkt 17fpkt", shape=hexagon, color=black];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.45.28.232:*, 142.43.12.39:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48161: (2.63158%)&lt;BR/&gt; 48160: (2.63158%)&lt;BR/&gt; 47918: (2.63158%)&lt;BR/&gt; 47917: (2.63158%)&gt;];
}
548--549[label="0.25;1pkt 1fpkt"];
548--1721[label="1;17pkt 17fpkt"];
548--1722[label="1;21pkt 21fpkt"];
548--2254[label="0.428571;9pkt 9fpkt"];
1721--1722[label="1;17pkt 17fpkt"];
1721--2254[label="0.529412;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="142.43.12.39" dst_port="80" src_ip="136.45.28.232"/>
    </slice>
    <from sec="1031547654" usec="0"/>
    <to sec="1031547855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="76.118.62.47"/>
      <from sec="1031547704" usec="0"/>
      <to sec="1031548215" usec="0"/>
    </slice>
    <from sec="1031547704" usec="0"/>
    <to sec="1031548215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.522387,2.02397,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
499[label="47.79.22.79;d;5pkt 5fpkt", shape=diamond, color=yellow];
540[label="201.164.28.201;d;4pkt 4fpkt", shape=diamond, color=yellow];
574[label="162.73.36.47;s;4391pkt 4391fpkt", shape=diamond, color=yellow];
2415[label="162.73.36.47;4632pkt 4632fpkt", shape=pentagon, color=darkviolet];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.36.47:*, *:80}[61.839%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.9289%)&lt;BR/&gt; 8080: (8.25399%)&lt;BR/&gt; 3128: (6.59322%)&lt;BR/&gt; 113: (1.92648%)&lt;BR/&gt; 8000: (1.18468%)&gt;];
}
499--574[label="1;5pkt 5fpkt"];
499--2415[label="1;5pkt 5fpkt"];
540--574[label="1;4pkt 4fpkt"];
540--2415[label="1;4pkt 4fpkt"];
574--1047[label="1;10pkt 10fpkt"];
574--1513[label="0.0613718;17pkt 17fpkt"];
574--1875[label="1;10pkt 10fpkt"];
574--2098[label="0.0613718;17pkt 17fpkt"];
574--2238[label="0.0613718;17pkt 17fpkt"];
574--2248[label="0.0419532;183pkt 183fpkt"];
574--2254[label="0.0325666;143pkt 143fpkt"];
574--2258[label="0.0302892;133pkt 133fpkt"];
574--2263[label="0.0419629;183pkt 183fpkt"];
574--2270[label="0.0419629;183pkt 183fpkt"];
574--2415[label="0.999772;4390pkt 4390fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="162.73.36.47"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826429,1.99503,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
49[label="209.129.201.135s;1pkt 1fpkt", shape=rectangle, color=red];
575[label="209.129.201.135;s;1892pkt 1892fpkt", shape=diamond, color=yellow];
1633[label="74.132.5.214;d;63pkt 63fpkt", shape=diamond, color=yellow];
1635[label="74.134.0.19;d;41pkt 41fpkt", shape=diamond, color=yellow];
2178[label="74.132.5.214;d;63pkt 63fpkt", shape=hexagon, color=black];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.129.201.135:*, *:80}[99.26%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6602%)&lt;BR/&gt; 32768: (0.218447%)&lt;BR/&gt; 53: (0.218447%)&lt;BR/&gt; 56590: (0.0728155%)&lt;BR/&gt; 56583: (0.0728155%)&gt;];
}
49--575[label="1;1pkt 1fpkt"];
575--601[label="1;5pkt 5fpkt"];
575--651[label="0.0102041;1pkt 1fpkt"];
575--694[label="0.166667;2pkt 2fpkt"];
575--729[label="0.028169;2pkt 2fpkt"];
575--764[label="0.333333;1pkt 1fpkt"];
575--814[label="0.173554;21pkt 21fpkt"];
575--822[label="1;33pkt 33fpkt"];
575--826[label="0.5;1pkt 1fpkt"];
575--838[label="0.354839;44pkt 44fpkt"];
575--882[label="0.0298507;4pkt 4fpkt"];
575--900[label="0.0175439;3pkt 3fpkt"];
575--936[label="0.217391;15pkt 15fpkt"];
575--1029[label="0.12931;15pkt 15fpkt"];
575--1069[label="0.750831;226pkt 226fpkt"];
575--1096[label="0.00296736;1pkt 1fpkt"];
575--1123[label="0.04;2pkt 2fpkt"];
575--1147[label="0.0197368;3pkt 3fpkt"];
575--1159[label="0.0121951;1pkt 1fpkt"];
575--1165[label="0.625;40pkt 40fpkt"];
575--1254[label="0.469388;46pkt 46fpkt"];
575--1265[label="0.0434783;2pkt 2fpkt"];
575--1267[label="0.115385;9pkt 9fpkt"];
575--1355[label="0.493976;41pkt 41fpkt"];
575--1373[label="0.00680272;1pkt 1fpkt"];
575--1493[label="0.016129;1pkt 1fpkt"];
575--1494[label="0.0985915;7pkt 7fpkt"];
575--1511[label="0.59322;35pkt 35fpkt"];
575--1585[label="0.015625;1pkt 1fpkt"];
575--1592[label="0.0615385;4pkt 4fpkt"];
575--1611[label="0.0133333;1pkt 1fpkt"];
575--1615[label="0.166667;1pkt 1fpkt"];
575--1633[label="1;63pkt 63fpkt"];
575--1635[label="1;41pkt 41fpkt"];
575--1716[label="0.210526;4pkt 4fpkt"];
575--1761[label="0.0416667;2pkt 2fpkt"];
575--1808[label="0.655914;244pkt 244fpkt"];
575--1866[label="0.428571;3pkt 3fpkt"];
575--1978[label="0.290909;16pkt 16fpkt"];
575--1986[label="0.12069;7pkt 7fpkt"];
575--1997[label="0.625;40pkt 40fpkt"];
575--2018[label="0.0347826;4pkt 4fpkt"];
575--2034[label="0.333333;1pkt 1fpkt"];
575--2128[label="0.00296736;1pkt 1fpkt"];
575--2149[label="0.12931;15pkt 15fpkt"];
575--2178[label="1;63pkt 63fpkt"];
575--2241[label="0.00296736;1pkt 1fpkt"];
575--2248[label="0.0776956;147pkt 147fpkt"];
575--2253[label="0.00211416;4pkt 4fpkt"];
575--2254[label="0.0761099;144pkt 144fpkt"];
575--2258[label="0.0708245;134pkt 134fpkt"];
575--2263[label="0.0776956;147pkt 147fpkt"];
575--2270[label="0.0776956;147pkt 147fpkt"];
1633--2178[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="209.129.201.135"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2859,1.9997,999,1 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
82[label="212.46.146.251s;1pkt 1fpkt", shape=rectangle, color=red];
100[label="209.129.201.112d;1pkt 1fpkt", shape=rectangle, color=red];
103[label="209.88.197.121d;1pkt 1fpkt", shape=rectangle, color=red];
214[label="219.3.97.173;d;1pkt 1fpkt", shape=diamond, color=yellow];
576[label="212.46.146.251;s;1pkt 1fpkt", shape=diamond, color=yellow];
1674[label="219.3.97.173;d;1pkt 1fpkt", shape=hexagon, color=black];
1753[label="212.46.146.251;s;1pkt 1fpkt", shape=hexagon, color=black];
2201[label="219.3.97.173;d;1pkt 1fpkt", shape=polygon, color=gold];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.46.146.251:194, 219.3.97.173:52203}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52203: (50%)&lt;BR/&gt; 194: (50%)&gt;];
}
82--100[label="1;1pkt 1fpkt"];
82--103[label="1;1pkt 1fpkt"];
82--214[label="1;1pkt 1fpkt"];
82--576[label="1;1pkt 1fpkt"];
82--1674[label="1;1pkt 1fpkt"];
82--1753[label="1;1pkt 1fpkt"];
82--2201[label="1;1pkt 1fpkt"];
100--103[label="1;1pkt 1fpkt"];
100--214[label="1;1pkt 1fpkt"];
100--576[label="1;1pkt 1fpkt"];
100--1674[label="1;1pkt 1fpkt"];
100--1753[label="1;1pkt 1fpkt"];
100--2201[label="1;1pkt 1fpkt"];
103--214[label="1;1pkt 1fpkt"];
103--576[label="1;1pkt 1fpkt"];
103--1674[label="1;1pkt 1fpkt"];
103--1753[label="1;1pkt 1fpkt"];
103--2201[label="1;1pkt 1fpkt"];
214--576[label="1;1pkt 1fpkt"];
214--1674[label="1;1pkt 1fpkt"];
214--1753[label="1;1pkt 1fpkt"];
214--2201[label="1;1pkt 1fpkt"];
576--1674[label="1;1pkt 1fpkt"];
576--1753[label="1;1pkt 1fpkt"];
576--2201[label="1;1pkt 1fpkt"];
1674--1753[label="1;1pkt 1fpkt"];
1674--2201[label="1;1pkt 1fpkt"];
1753--2201[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.3.97.173" dst_port="52203" src_ip="212.46.146.251" src_port="194"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649378,1.99623,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
577[label="136.87.12.21;d;130pkt 130fpkt", shape=diamond, color=yellow];
578[label="204.188.49.216;s;87pkt 87fpkt", shape=diamond, color=yellow];
2831[label="204.188.49.216;111pkt 111fpkt", shape=pentagon, color=darkviolet];
3196[label="204.188.49.216;106pkt 106fpkt", shape=invtriangle, color=brown];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.188.49.216:*, 136.87.12.21:80}[85.3846%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4911: (0.460829%)&lt;BR/&gt; 4910: (0.460829%)&lt;BR/&gt; 4909: (0.460829%)&lt;BR/&gt; 4908: (0.460829%)&gt;];
}
577--578[label="1;87pkt 87fpkt"];
577--2248[label="0.192308;25pkt 25fpkt"];
577--2254[label="0.00769231;1pkt 1fpkt"];
577--2263[label="0.192308;25pkt 25fpkt"];
577--2270[label="0.192308;25pkt 25fpkt"];
577--2831[label="1;111pkt 111fpkt"];
577--3196[label="1;106pkt 106fpkt"];
578--2248[label="0.264368;23pkt 23fpkt"];
578--2263[label="0.264368;23pkt 23fpkt"];
578--2270[label="0.264368;23pkt 23fpkt"];
578--2831[label="1;87pkt 87fpkt"];
578--3196[label="0.942529;82pkt 82fpkt"];
2831--3196[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_ip="136.87.12.21" dst_port="80" src_ip="204.188.49.216"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031547924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749014,1.94966,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
223[label="44.88.72.253;s;4pkt 4fpkt", shape=diamond, color=yellow];
389[label="44.88.72.251;s;4pkt 4fpkt", shape=diamond, color=yellow];
579[label="209.88.195.99;d;2pkt 2fpkt", shape=diamond, color=yellow];
590[label="209.88.219.128;d;1pkt 1fpkt", shape=diamond, color=yellow];
716[label="209.88.195.100;d;12pkt 12fpkt", shape=diamond, color=yellow];
2129[label="209.88.195.100;d;12pkt 12fpkt", shape=hexagon, color=black];
2901[label="44.88.72.251;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3233[label="44.88.72.251;4pkt 4fpkt", shape=invtriangle, color=brown];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:5001, 209.88.195.100:*}[47.0588%]&lt;BR/&gt;{44.88.72.253:5001, *:*}[29.4118%]&lt;BR/&gt;{44.88.72.251:5001, *:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (39.5349%)&lt;BR/&gt; 1118: (5.81395%)&lt;BR/&gt; 1115: (5.81395%)&lt;BR/&gt; 1108: (5.81395%)&lt;BR/&gt; 6900: (4.65116%)&gt;];
}
223--580[label="0.666667;2pkt 2fpkt"];
223--590[label="1;1pkt 1fpkt"];
223--716[label="0.25;1pkt 1fpkt"];
223--1754[label="0.666667;2pkt 2fpkt"];
223--2129[label="0.25;1pkt 1fpkt"];
389--579[label="0.5;1pkt 1fpkt"];
389--716[label="0.75;3pkt 3fpkt"];
389--2129[label="0.75;3pkt 3fpkt"];
389--2901[label="1;4pkt 4fpkt"];
389--3233[label="1;4pkt 4fpkt"];
579--2901[label="0.5;1pkt 1fpkt"];
579--3233[label="0.5;1pkt 1fpkt"];
716--949[label="0.666667;2pkt 2fpkt"];
716--2129[label="1;12pkt 12fpkt"];
716--2901[label="0.75;3pkt 3fpkt"];
716--3233[label="0.75;3pkt 3fpkt"];
2129--2901[label="0.75;3pkt 3fpkt"];
2129--3233[label="0.75;3pkt 3fpkt"];
2901--3233[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="44.88.72.253" src_port="5001"/>
      <filter src_ip="44.88.72.251" src_port="5001"/>
      <filter dst_ip="209.88.195.100" src_port="5001"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
752[label="208.103.141.164;d;104pkt 104fpkt", shape=diamond, color=yellow];
1484[label="141.133.251.192;d;135pkt 135fpkt", shape=diamond, color=yellow];
2140[label="208.103.141.164;d;104pkt 104fpkt", shape=hexagon, color=black];
2659[label="44.250.41.148;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2725[label="151.160.151.171;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3105[label="44.250.41.148;3pkt 3fpkt", shape=invtriangle, color=brown];
3143[label="151.160.151.171;1pkt 1fpkt", shape=invtriangle, color=brown];
3349[label="151.160.151.171;2pkt 2fpkt", shape=invhouse, color=bisque];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 141.133.251.192:33367}[44.6281%]&lt;BR/&gt;{*:53, 208.103.141.164:32828}[30.5785%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (45.5966%)&lt;BR/&gt; 32828: (21.4489%)&lt;BR/&gt; 33367: (16.4773%)&lt;BR/&gt; 0: (7.67045%)&lt;BR/&gt; 123: (0.568182%)&gt;];
}
752--780[label="0.00961538;1pkt 1fpkt"];
752--1231[label="0.166667;1pkt 1fpkt"];
752--1232[label="0.142857;1pkt 1fpkt"];
752--1727[label="0.0666667;1pkt 1fpkt"];
752--2024[label="0.0625;1pkt 1fpkt"];
752--2140[label="1;104pkt 104fpkt"];
752--2251[label="0.00961538;1pkt 1fpkt"];
752--2253[label="0.0288462;3pkt 3fpkt"];
752--2256[label="0.0192308;2pkt 2fpkt"];
752--2266[label="0.221154;23pkt 23fpkt"];
752--2273[label="0.221154;23pkt 23fpkt"];
752--2308[label="0.111111;1pkt 1fpkt"];
752--2615[label="0.166667;1pkt 1fpkt"];
752--2653[label="0.142857;1pkt 1fpkt"];
752--2725[label="1;1pkt 1fpkt"];
752--2726[label="0.0188679;1pkt 1fpkt"];
752--3143[label="1;1pkt 1fpkt"];
752--3144[label="0.0188679;1pkt 1fpkt"];
752--3349[label="0.5;1pkt 1fpkt"];
752--3350[label="0.0185185;1pkt 1fpkt"];
1484--2266[label="0.192593;26pkt 26fpkt"];
1484--2273[label="0.192593;26pkt 26fpkt"];
1484--2299[label="0.0166667;1pkt 1fpkt"];
1484--2438[label="0.0714286;1pkt 1fpkt"];
1484--2451[label="0.166667;1pkt 1fpkt"];
1484--2659[label="0.5;1pkt 1fpkt"];
1484--2726[label="0.0188679;1pkt 1fpkt"];
1484--2917[label="0.0169492;1pkt 1fpkt"];
1484--3105[label="0.333333;1pkt 1fpkt"];
1484--3144[label="0.0188679;1pkt 1fpkt"];
1484--3241[label="0.0169492;1pkt 1fpkt"];
1484--3350[label="0.0185185;1pkt 1fpkt"];
2140--2251[label="0.00961538;1pkt 1fpkt"];
2140--2253[label="0.0288462;3pkt 3fpkt"];
2140--2256[label="0.0192308;2pkt 2fpkt"];
2140--2266[label="0.221154;23pkt 23fpkt"];
2140--2273[label="0.221154;23pkt 23fpkt"];
2140--2308[label="0.111111;1pkt 1fpkt"];
2140--2615[label="0.166667;1pkt 1fpkt"];
2140--2653[label="0.142857;1pkt 1fpkt"];
2140--2725[label="1;1pkt 1fpkt"];
2140--2726[label="0.0188679;1pkt 1fpkt"];
2140--3143[label="1;1pkt 1fpkt"];
2140--3144[label="0.0188679;1pkt 1fpkt"];
2140--3349[label="0.5;1pkt 1fpkt"];
2140--3350[label="0.0185185;1pkt 1fpkt"];
2659--3105[label="1;2pkt 2fpkt"];
2725--3143[label="1;1pkt 1fpkt"];
2725--3349[label="1;1pkt 1fpkt"];
3143--3349[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.251.192" dst_port="33367" src_port="53"/>
      <filter dst_ip="208.103.141.164" dst_port="32828" src_port="53"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00559,1.97327,999,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
8[label="141.133.131.29s;1pkt 1fpkt", shape=rectangle, color=red];
146[label="162.73.208.218d;1pkt 1fpkt", shape=rectangle, color=red];
273[label="46.195.219.93;d;2pkt 2fpkt", shape=diamond, color=yellow];
595[label="141.133.131.29;s;3pkt 3fpkt", shape=diamond, color=yellow];
2366[label="141.133.131.29;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2956[label="141.133.131.29;1pkt 1fpkt", shape=invtriangle, color=brown];
3265[label="141.133.131.29;1pkt 1fpkt", shape=invhouse, color=bisque];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.131.29:1378, 46.195.219.88:1755}[33.3333%]&lt;BR/&gt;{141.133.131.29:1342, 46.195.219.93:1755}[33.3333%]&lt;BR/&gt;{141.133.131.29:1380, 46.195.219.93:1755}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 1380: (35%)&lt;BR/&gt; 1342: (10%)&lt;BR/&gt; 1378: (5%)&gt;];
}
8--146[label="1;1pkt 1fpkt"];
8--273[label="1;1pkt 1fpkt"];
8--595[label="1;1pkt 1fpkt"];
8--2366[label="1;1pkt 1fpkt"];
8--2956[label="1;1pkt 1fpkt"];
8--3265[label="1;1pkt 1fpkt"];
146--273[label="1;1pkt 1fpkt"];
146--595[label="1;1pkt 1fpkt"];
146--2366[label="1;1pkt 1fpkt"];
146--2956[label="1;1pkt 1fpkt"];
146--3265[label="1;1pkt 1fpkt"];
273--595[label="1;2pkt 2fpkt"];
273--2366[label="1;1pkt 1fpkt"];
273--2956[label="1;1pkt 1fpkt"];
273--3265[label="1;1pkt 1fpkt"];
595--2366[label="1;1pkt 1fpkt"];
595--2956[label="1;1pkt 1fpkt"];
595--3265[label="1;1pkt 1fpkt"];
2366--2956[label="1;1pkt 1fpkt"];
2366--3265[label="1;1pkt 1fpkt"];
2956--3265[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="46.195.219.93" dst_port="1755" src_ip="141.133.131.29" src_port="1380"/>
      <filter dst_ip="46.195.219.93" dst_port="1755" src_ip="141.133.131.29" src_port="1342"/>
      <filter dst_ip="46.195.219.88" dst_port="1755" src_ip="141.133.131.29" src_port="1378"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
610[label="200.148.29.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
611[label="162.73.33.155;s;31pkt 31fpkt", shape=diamond, color=yellow];
2081[label="162.73.33.155;s;27pkt 27fpkt", shape=hexagon, color=black];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.33.155:*, *:4662}[64.5161%]&lt;BR/&gt;{162.73.33.155:1573, *:4665}[32.2581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (31.3559%)&lt;BR/&gt; 4665: (16.9492%)&lt;BR/&gt; 1573: (16.9492%)&lt;BR/&gt; 3212: (2.54237%)&lt;BR/&gt; 3266: (1.69492%)&gt;];
}
610--611[label="1;1pkt 1fpkt"];
610--2081[label="1;1pkt 1fpkt"];
611--2081[label="1;27pkt 27fpkt"];
611--2258[label="0.0322581;1pkt 1fpkt"];
2081--2258[label="0.037037;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="4662" src_ip="162.73.33.155"/>
      <filter dst_port="4665" src_ip="162.73.33.155" src_port="1573"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="18.9.5.218"/>
      <from sec="1031547600" usec="0"/>
      <to sec="1031547716" usec="0"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031547716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.836843,2.02787,999,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
185[label="162.73.0.234;s;33pkt 33fpkt", shape=diamond, color=yellow];
371[label="18.206.14.226;d;1pkt 1fpkt", shape=diamond, color=yellow];
432[label="18.197.52.212;d;1pkt 1fpkt", shape=diamond, color=yellow];
455[label="18.37.244.205;d;1pkt 1fpkt", shape=diamond, color=yellow];
622[label="72.207.74.91;d;1pkt 1fpkt", shape=diamond, color=yellow];
1171[label="212.89.175.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
1413[label="76.68.133.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
1631[label="47.85.72.95;d;1pkt 1fpkt", shape=diamond, color=yellow];
1699[label="18.206.14.226;d;1pkt 1fpkt", shape=hexagon, color=black];
2133[label="18.197.52.212;d;1pkt 1fpkt", shape=hexagon, color=black];
2176[label="47.85.72.95;d;1pkt 1fpkt", shape=hexagon, color=black];
3384[label="162.73.0.234;49pkt 49fpkt", shape=invhouse, color=bisque];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.0.234:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (5.43478%)&lt;BR/&gt; 8624: (2.17391%)&lt;BR/&gt; 8273: (2.17391%)&lt;BR/&gt; 6361: (2.17391%)&lt;BR/&gt; 6347: (2.17391%)&gt;];
}
185--371[label="1;1pkt 1fpkt"];
185--432[label="1;1pkt 1fpkt"];
185--455[label="1;1pkt 1fpkt"];
185--622[label="1;1pkt 1fpkt"];
185--1171[label="1;1pkt 1fpkt"];
185--1413[label="1;1pkt 1fpkt"];
185--1631[label="1;1pkt 1fpkt"];
185--1699[label="1;1pkt 1fpkt"];
185--2133[label="1;1pkt 1fpkt"];
185--2176[label="1;1pkt 1fpkt"];
185--3384[label="0.969697;32pkt 32fpkt"];
371--1699[label="1;1pkt 1fpkt"];
371--3384[label="1;1pkt 1fpkt"];
432--2133[label="1;1pkt 1fpkt"];
432--3384[label="1;1pkt 1fpkt"];
455--3384[label="1;1pkt 1fpkt"];
622--3384[label="1;1pkt 1fpkt"];
1171--3384[label="1;1pkt 1fpkt"];
1413--3384[label="1;1pkt 1fpkt"];
1631--2176[label="1;1pkt 1fpkt"];
1631--3384[label="1;1pkt 1fpkt"];
1699--3384[label="1;1pkt 1fpkt"];
2133--3384[label="1;1pkt 1fpkt"];
2176--3384[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="162.73.0.234"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.522387,2.02397,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
470[label="151.244.102.110;s;40pkt 40fpkt", shape=diamond, color=yellow];
626[label="47.65.250.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
2575[label="151.244.102.110;40pkt 40fpkt", shape=pentagon, color=darkviolet];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.102.110:1214, *:1214}[75.6098%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (87.6543%)&lt;BR/&gt; 3500: (1.85185%)&lt;BR/&gt; 63350: (1.23457%)&lt;BR/&gt; 63279: (1.23457%)&lt;BR/&gt; 63193: (1.23457%)&gt;];
}
470--626[label="1;1pkt 1fpkt"];
470--2575[label="0.975;39pkt 39fpkt"];
626--2575[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1214" src_ip="151.244.102.110" src_port="1214"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06546,1.97208,999,1 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
38[label="164.15.206.115s;14pkt 14fpkt", shape=rectangle, color=red];
250[label="164.15.206.115;s;357pkt 357fpkt", shape=diamond, color=yellow];
657[label="207.20.203.165;d;4pkt 4fpkt", shape=diamond, color=yellow];
686[label="207.20.203.167;d;11pkt 11fpkt", shape=diamond, color=yellow];
1400[label="72.105.59.51;d;26pkt 26fpkt", shape=diamond, color=yellow];
2117[label="207.20.203.165;d;4pkt 4fpkt", shape=hexagon, color=black];
3064[label="164.15.206.115;358pkt 358fpkt", shape=invtriangle, color=brown];
3311[label="164.15.206.115;359pkt 359fpkt", shape=invhouse, color=bisque];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.15.206.115:*, *:25}[79.6438%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (43.9541%)&lt;BR/&gt; 113: (5.82524%)&lt;BR/&gt; 3442: (0.264784%)&lt;BR/&gt; 3317: (0.264784%)&lt;BR/&gt; 3201: (0.264784%)&gt;];
}
38--250[label="1;14pkt 14fpkt"];
38--657[label="1;4pkt 4fpkt"];
38--2117[label="1;4pkt 4fpkt"];
38--3064[label="1;14pkt 14fpkt"];
38--3311[label="1;14pkt 14fpkt"];
250--657[label="1;4pkt 4fpkt"];
250--686[label="0.272727;3pkt 3fpkt"];
250--1136[label="0.0344828;2pkt 2fpkt"];
250--1400[label="0.0384615;1pkt 1fpkt"];
250--1983[label="0.0192308;1pkt 1fpkt"];
250--2117[label="1;4pkt 4fpkt"];
250--3064[label="0.994398;355pkt 355fpkt"];
250--3311[label="0.997199;356pkt 356fpkt"];
657--2117[label="1;4pkt 4fpkt"];
657--3064[label="1;4pkt 4fpkt"];
657--3311[label="1;4pkt 4fpkt"];
686--3064[label="0.272727;3pkt 3fpkt"];
686--3311[label="0.272727;3pkt 3fpkt"];
1400--1427[label="0.0384615;1pkt 1fpkt"];
1400--1965[label="0.0384615;1pkt 1fpkt"];
1400--1980[label="0.0384615;1pkt 1fpkt"];
1400--2019[label="0.0384615;1pkt 1fpkt"];
1400--2107[label="0.0384615;1pkt 1fpkt"];
1400--2226[label="0.0384615;1pkt 1fpkt"];
1400--2291[label="0.047619;1pkt 1fpkt"];
1400--2333[label="0.0384615;1pkt 1fpkt"];
1400--2430[label="0.0769231;2pkt 2fpkt"];
1400--2912[label="0.047619;1pkt 1fpkt"];
1400--2938[label="0.0384615;1pkt 1fpkt"];
1400--3064[label="0.0384615;1pkt 1fpkt"];
1400--3239[label="0.05;1pkt 1fpkt"];
1400--3311[label="0.0384615;1pkt 1fpkt"];
2117--3064[label="1;4pkt 4fpkt"];
2117--3311[label="1;4pkt 4fpkt"];
3064--3311[label="1;358pkt 358fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="164.15.206.115"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="141.133.41.35"/>
      <from sec="1031547820" usec="0"/>
      <to sec="1031547856" usec="0"/>
    </slice>
    <from sec="1031547820" usec="0"/>
    <to sec="1031547856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.522387,2.02397,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
210[label="73.11.212.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
307[label="208.144.192.104;s;1pkt 1fpkt", shape=diamond, color=yellow];
697[label="162.73.33.42;d;6pkt 6fpkt", shape=diamond, color=yellow];
1125[label="170.101.126.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
1486[label="170.97.68.243;s;1pkt 1fpkt", shape=diamond, color=yellow];
2359[label="170.101.126.27;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6699, 162.73.33.42:*}[66.6667%]&lt;BR/&gt;{*:1214, 162.73.33.42:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (31.8182%)&lt;BR/&gt; 1214: (18.1818%)&lt;BR/&gt; 2114: (13.6364%)&lt;BR/&gt; 3289: (9.09091%)&lt;BR/&gt; 3276: (9.09091%)&gt;];
}
210--697[label="1;1pkt 1fpkt"];
307--697[label="1;1pkt 1fpkt"];
697--1125[label="1;1pkt 1fpkt"];
697--1486[label="1;1pkt 1fpkt"];
697--1697[label="1;1pkt 1fpkt"];
697--2359[label="1;1pkt 1fpkt"];
1125--2359[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.33.42" src_port="6699"/>
      <filter dst_ip="162.73.33.42" src_port="1214"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
705[label="209.85.227.49;s;138pkt 138fpkt", shape=diamond, color=yellow];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.85.227.49:0, *:0}[99.2754%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.2754%)&lt;BR/&gt; 4735: (0.362319%)&lt;BR/&gt; 111: (0.362319%)&gt;];
}
705--1202[label="0.00724638;1pkt 1fpkt"];
705--1936[label="0.00724638;1pkt 1fpkt"];
705--2220[label="0.00724638;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="209.85.227.49"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.748983,2.07268,999,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
417[label="193.44.177.203;d;22pkt 22fpkt", shape=diamond, color=yellow];
715[label="164.15.206.152;s;42pkt 42fpkt", shape=diamond, color=yellow];
3333[label="164.15.206.152;43pkt 43fpkt", shape=invhouse, color=bisque];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.15.206.152:25, 193.44.177.203:*}[67.3913%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.0654%)&lt;BR/&gt; 3838: (1.40187%)&lt;BR/&gt; 3836: (1.40187%)&lt;BR/&gt; 3797: (1.40187%)&lt;BR/&gt; 3747: (1.40187%)&gt;];
}
417--715[label="0.909091;20pkt 20fpkt"];
417--3333[label="0.863636;19pkt 19fpkt"];
715--1750[label="0.0588235;2pkt 2fpkt"];
715--3333[label="0.97619;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="193.44.177.203" src_ip="164.15.206.152" src_port="25"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.842484,2.0456,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
604[label="164.15.192.223;s;10pkt 10fpkt", shape=diamond, color=yellow];
725[label="150.136.166.49;d;56pkt 56fpkt", shape=diamond, color=yellow];
1250[label="150.136.166.50;d;41pkt 41fpkt", shape=diamond, color=yellow];
3153[label="164.15.216.177;91pkt 91fpkt", shape=invtriangle, color=brown];
3356[label="164.15.216.177;92pkt 92fpkt", shape=invhouse, color=bisque];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.15.216.177:*, 150.136.166.38:*}[25.2874%]&lt;BR/&gt;{164.15.216.177:113, *:*}[24.7126%]&lt;BR/&gt;{*:*, 150.136.166.50:*}[23.5632%]&lt;BR/&gt;{209.85.224.16:*, 150.136.166.49:*}[22.9885%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (21.5517%)&lt;BR/&gt; 6663: (5%)&lt;BR/&gt; 6666: (4.31034%)&lt;BR/&gt; 6664: (4.13793%)&lt;BR/&gt; 6661: (3.7931%)&gt;];
}
604--725[label="0.2;2pkt 2fpkt"];
604--1250[label="0.1;1pkt 1fpkt"];
725--793[label="0.678571;38pkt 38fpkt"];
725--2088[label="0.678571;38pkt 38fpkt"];
725--3153[label="0.214286;12pkt 12fpkt"];
725--3254[label="0.714286;40pkt 40fpkt"];
725--3356[label="0.214286;12pkt 12fpkt"];
1250--2088[label="0.658537;27pkt 27fpkt"];
1250--3153[label="0.219512;9pkt 9fpkt"];
1250--3254[label="0.707317;29pkt 29fpkt"];
1250--3356[label="0.243902;10pkt 10fpkt"];
3153--3356[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_ip="150.136.166.50"/>
      <filter dst_ip="150.136.166.38" src_ip="164.15.216.177"/>
      <filter src_ip="164.15.216.177" src_port="113"/>
      <filter dst_ip="150.136.166.49" src_ip="209.85.224.16"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
457[label="164.15.195.89;s;1pkt 1fpkt", shape=diamond, color=yellow];
747[label="207.217.197.83;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.15.195.89:2731, 207.217.197.83:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2731: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
457--747[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.217.197.83" dst_port="25" src_ip="164.15.195.89" src_port="2731"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
220[label="136.170.184.53;s;1230pkt 1230fpkt", shape=diamond, color=yellow];
748[label="46.210.183.120;d;38pkt 38fpkt", shape=diamond, color=yellow];
758[label="136.134.7.188;s;541pkt 541fpkt", shape=diamond, color=yellow];
894[label="162.2.7.181;s;737pkt 737fpkt", shape=diamond, color=yellow];
896[label="208.78.227.33;s;328pkt 328fpkt", shape=diamond, color=yellow];
985[label="208.78.230.207;s;309pkt 309fpkt", shape=diamond, color=yellow];
1016[label="208.78.230.227;s;84pkt 84fpkt", shape=diamond, color=yellow];
1224[label="161.115.31.226;s;241pkt 241fpkt", shape=diamond, color=yellow];
1773[label="136.181.241.83;s;461pkt 461fpkt", shape=hexagon, color=black];
1853[label="162.2.7.181;s;423pkt 423fpkt", shape=hexagon, color=black];
2083[label="161.115.31.226;s;219pkt 219fpkt", shape=hexagon, color=black];
2285[label="219.249.94.2;111pkt 111fpkt", shape=pentagon, color=darkviolet];
2434[label="136.170.184.53;1302pkt 1302fpkt", shape=pentagon, color=darkviolet];
2511[label="136.3.209.82;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2985[label="136.170.184.53;1302pkt 1302fpkt", shape=invtriangle, color=brown];
3022[label="136.3.209.82;11pkt 11fpkt", shape=invtriangle, color=brown];
3362[label="136.134.7.188;580pkt 580fpkt", shape=invhouse, color=bisque];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.170.184.53:0, *:0}[30.5913%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.2811%)&lt;BR/&gt; 65534: (0.35944%)&lt;BR/&gt; 53: (0.35944%)&gt;];
}
220--748[label="0.0263158;1pkt 1fpkt"];
220--1012[label="0.0172414;1pkt 1fpkt"];
220--2434[label="1;1230pkt 1230fpkt"];
220--2985[label="1;1230pkt 1230fpkt"];
748--758[label="0.0263158;1pkt 1fpkt"];
748--894[label="0.0263158;1pkt 1fpkt"];
748--896[label="0.0263158;1pkt 1fpkt"];
748--985[label="0.0263158;1pkt 1fpkt"];
748--1016[label="0.0263158;1pkt 1fpkt"];
748--1115[label="0.0263158;1pkt 1fpkt"];
748--1224[label="0.0263158;1pkt 1fpkt"];
748--1773[label="0.0263158;1pkt 1fpkt"];
748--1812[label="0.0263158;1pkt 1fpkt"];
748--1853[label="0.0263158;1pkt 1fpkt"];
748--1916[label="0.0555556;1pkt 1fpkt"];
748--2036[label="0.0263158;1pkt 1fpkt"];
748--2083[label="0.0263158;1pkt 1fpkt"];
748--2285[label="0.0263158;1pkt 1fpkt"];
748--2434[label="0.0263158;1pkt 1fpkt"];
748--2511[label="0.0833333;1pkt 1fpkt"];
748--2804[label="0.0416667;1pkt 1fpkt"];
748--2846[label="0.0294118;1pkt 1fpkt"];
748--2985[label="0.0263158;1pkt 1fpkt"];
748--3022[label="0.0909091;1pkt 1fpkt"];
748--3362[label="0.0263158;1pkt 1fpkt"];
758--3362[label="0.998152;540pkt 540fpkt"];
894--1853[label="1;423pkt 423fpkt"];
1016--1202[label="0.0119048;1pkt 1fpkt"];
1016--1936[label="0.0119048;1pkt 1fpkt"];
1016--2220[label="0.0119048;1pkt 1fpkt"];
1224--2083[label="1;219pkt 219fpkt"];
2434--2985[label="1;1302pkt 1302fpkt"];
2511--3022[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="136.170.184.53"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
749[label="46.210.183.120;s;2066pkt 2066fpkt", shape=diamond, color=yellow];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.210.183.120:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59298: (0.0726041%)&lt;BR/&gt; 58377: (0.0726041%)&lt;BR/&gt; 46167: (0.0726041%)&lt;BR/&gt; 34225: (0.0726041%)&lt;BR/&gt; 10949: (0.0726041%)&gt;];
}
</description>
    <slice>
      <filter src_ip="46.210.183.120"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
84[label="75.155.47.30d;1pkt 1fpkt", shape=rectangle, color=red];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.53.57:80, 75.155.47.30:43654}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43654: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
84--790[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="75.155.47.30" dst_port="43654" src_ip="136.65.53.57" src_port="80"/>
    </slice>
    <from sec="1031548596" usec="0"/>
    <to sec="1031548614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
848[label="136.65.172.22;s;119pkt 119fpkt", shape=diamond, color=yellow];
857[label="172.12.71.138;d;82pkt 82fpkt", shape=diamond, color=yellow];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.172.22:*, 172.12.71.138:80}[68.9076%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10148: (0.497512%)&lt;BR/&gt; 10147: (0.497512%)&lt;BR/&gt; 10146: (0.497512%)&lt;BR/&gt; 10145: (0.497512%)&gt;];
}
848--857[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_ip="172.12.71.138" dst_port="80" src_ip="136.65.172.22"/>
    </slice>
    <from sec="1031547736" usec="0"/>
    <to sec="1031548055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.133.48.136"/>
      <from sec="1031547886" usec="0"/>
      <to sec="1031547989" usec="0"/>
    </slice>
    <from sec="1031547886" usec="0"/>
    <to sec="1031547989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826429,1.99503,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
48[label="208.78.254.131s;1pkt 1fpkt", shape=rectangle, color=red];
863[label="208.78.254.131;s;178pkt 178fpkt", shape=diamond, color=yellow];
868[label="160.81.192.253;d;2pkt 2fpkt", shape=diamond, color=yellow];
1562[label="142.8.1.160;d;2pkt 2fpkt", shape=diamond, color=yellow];
1791[label="208.78.254.131;s;178pkt 178fpkt", shape=hexagon, color=black];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.78.254.131:*, 219.200.219.2:80}[34.8315%]&lt;BR/&gt;{208.78.254.131:*, 140.121.194.222:80}[29.7753%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.6288%)&lt;BR/&gt; 443: (1.38504%)&lt;BR/&gt; 53: (1.10803%)&lt;BR/&gt; 21: (0.969529%)&lt;BR/&gt; 6288: (0.554017%)&gt;];
}
48--863[label="1;1pkt 1fpkt"];
48--868[label="1;1pkt 1fpkt"];
48--1791[label="1;1pkt 1fpkt"];
863--868[label="1;2pkt 2fpkt"];
863--936[label="0.0289855;2pkt 2fpkt"];
863--1029[label="0.0172414;2pkt 2fpkt"];
863--1161[label="0.0581395;5pkt 5fpkt"];
863--1562[label="1;2pkt 2fpkt"];
863--1585[label="0.015625;1pkt 1fpkt"];
863--1615[label="0.166667;1pkt 1fpkt"];
863--1791[label="1;178pkt 178fpkt"];
863--2149[label="0.0172414;2pkt 2fpkt"];
863--2258[label="0.0561798;10pkt 10fpkt"];
868--1791[label="1;2pkt 2fpkt"];
1562--1791[label="1;2pkt 2fpkt"];
1791--2149[label="0.0172414;2pkt 2fpkt"];
1791--2258[label="0.0561798;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="219.200.219.2" dst_port="80" src_ip="208.78.254.131"/>
      <filter dst_ip="140.121.194.222" dst_port="80" src_ip="208.78.254.131"/>
    </slice>
    <from sec="1031547823" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
225[label="208.78.229.48;d;22pkt 22fpkt", shape=diamond, color=yellow];
416[label="194.240.12.152;s;1pkt 1fpkt", shape=diamond, color=yellow];
701[label="73.8.124.146;s;3pkt 3fpkt", shape=diamond, color=yellow];
877[label="18.214.99.136;s;3pkt 3fpkt", shape=diamond, color=yellow];
1616[label="170.81.28.126;s;2pkt 2fpkt", shape=diamond, color=yellow];
2014[label="208.78.229.48;d;22pkt 22fpkt", shape=hexagon, color=black];
2546[label="134.198.196.96;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2601[label="170.81.28.126;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 208.78.229.48:1755}[40.9091%]&lt;BR/&gt;{134.198.196.96:*, 208.78.229.48:80}[31.8182%]&lt;BR/&gt;{*:0, 208.78.229.48:0}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (22.9508%)&lt;BR/&gt; 1755: (22.1311%)&lt;BR/&gt; 80: (16.3934%)&lt;BR/&gt; 1099: (3.27869%)&lt;BR/&gt; 1094: (3.27869%)&gt;];
}
225--416[label="1;1pkt 1fpkt"];
225--701[label="1;3pkt 3fpkt"];
225--877[label="1;3pkt 3fpkt"];
225--1616[label="1;2pkt 2fpkt"];
225--2014[label="1;22pkt 22fpkt"];
225--2546[label="1;6pkt 6fpkt"];
225--2601[label="1;2pkt 2fpkt"];
416--2014[label="1;1pkt 1fpkt"];
701--2014[label="1;3pkt 3fpkt"];
877--2014[label="1;3pkt 3fpkt"];
1616--2014[label="1;2pkt 2fpkt"];
1616--2601[label="1;2pkt 2fpkt"];
2014--2546[label="1;6pkt 6fpkt"];
2014--2601[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.78.229.48" dst_port="1755"/>
      <filter dst_ip="208.78.229.48" dst_port="80" src_ip="134.198.196.96"/>
      <filter dst_ip="208.78.229.48"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
406[label="44.88.72.157;s;3pkt 3fpkt", shape=diamond, color=yellow];
878[label="209.88.219.16;d;6pkt 6fpkt", shape=diamond, color=yellow];
1760[label="44.88.72.157;s;2pkt 2fpkt", shape=hexagon, color=black];
2686[label="44.88.72.157;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.88.72.157:5001, 209.88.219.16:*}[50%]&lt;BR/&gt;{44.88.72.155:6001, 209.88.219.16:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (38.4615%)&lt;BR/&gt; 1183: (15.3846%)&lt;BR/&gt; 1185: (11.5385%)&lt;BR/&gt; 1181: (11.5385%)&lt;BR/&gt; 6001: (7.69231%)&gt;];
}
406--878[label="1;3pkt 3fpkt"];
406--1760[label="1;2pkt 2fpkt"];
406--2686[label="1;2pkt 2fpkt"];
878--1760[label="1;2pkt 2fpkt"];
878--2686[label="1;2pkt 2fpkt"];
1760--2686[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.88.219.16" src_ip="44.88.72.157" src_port="5001"/>
      <filter dst_ip="209.88.219.16" src_ip="44.88.72.155" src_port="6001"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.29262,2.03246,999,0 0 0 1 1 1 0 0 0 0 0 1 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
888[label="162.73.145.12;s;4pkt 4fpkt", shape=diamond, color=yellow];
889[label="209.195.252.73;d;4pkt 4fpkt", shape=diamond, color=yellow];
1802[label="162.73.145.12;s;4pkt 4fpkt", shape=hexagon, color=black];
1803[label="209.195.252.73;d;4pkt 4fpkt", shape=hexagon, color=black];
2212[label="209.195.252.73;d;4pkt 4fpkt", shape=polygon, color=gold];
3251[label="162.73.145.12;3pkt 3fpkt", shape=invhouse, color=bisque];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.145.12:1248, 209.195.252.73:3200}[25%]&lt;BR/&gt;{162.73.145.12:1249, 209.195.252.73:2002}[25%]&lt;BR/&gt;{162.73.145.12:1250, 209.195.252.73:3200}[25%]&lt;BR/&gt;{162.73.145.12:1251, 209.195.252.73:2002}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2002: (26.087%)&lt;BR/&gt; 3200: (23.913%)&lt;BR/&gt; 1251: (13.0435%)&lt;BR/&gt; 1250: (13.0435%)&lt;BR/&gt; 1249: (13.0435%)&gt;];
}
888--889[label="1;4pkt 4fpkt"];
888--1802[label="1;4pkt 4fpkt"];
888--1803[label="1;4pkt 4fpkt"];
888--2212[label="1;4pkt 4fpkt"];
888--3251[label="1;3pkt 3fpkt"];
889--1802[label="1;4pkt 4fpkt"];
889--1803[label="1;4pkt 4fpkt"];
889--2212[label="1;4pkt 4fpkt"];
889--3251[label="1;3pkt 3fpkt"];
1802--1803[label="1;4pkt 4fpkt"];
1802--2212[label="1;4pkt 4fpkt"];
1802--3251[label="1;3pkt 3fpkt"];
1803--2212[label="1;4pkt 4fpkt"];
1803--3251[label="1;3pkt 3fpkt"];
2212--3251[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.195.252.73" dst_port="2002" src_ip="162.73.145.12" src_port="1251"/>
      <filter dst_ip="209.195.252.73" dst_port="3200" src_ip="162.73.145.12" src_port="1250"/>
      <filter dst_ip="209.195.252.73" dst_port="2002" src_ip="162.73.145.12" src_port="1249"/>
      <filter dst_ip="209.195.252.73" dst_port="3200" src_ip="162.73.145.12" src_port="1248"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
606[label="209.88.200.23;s;6pkt 6fpkt", shape=diamond, color=yellow];
892[label="209.196.93.126;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.88.200.23:*, 209.196.93.126:2002}[33.3333%]&lt;BR/&gt;{209.88.200.23:*, 209.196.93.126:3004}[33.3333%]&lt;BR/&gt;{209.88.200.23:4000, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3004: (20%)&lt;BR/&gt; 2002: (20%)&lt;BR/&gt; 4000: (10%)&lt;BR/&gt; 1732: (10%)&lt;BR/&gt; 1729: (10%)&gt;];
}
606--892[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="209.88.200.23" src_port="4000"/>
      <filter dst_ip="209.196.93.126" dst_port="3004" src_ip="209.88.200.23"/>
      <filter dst_ip="209.196.93.126" dst_port="2002" src_ip="209.88.200.23"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
426[label="153.119.164.18;s;32pkt 32fpkt", shape=diamond, color=yellow];
901[label="76.64.64.213;d;11pkt 11fpkt", shape=diamond, color=yellow];
994[label="44.238.94.168;d;1pkt 1fpkt", shape=diamond, color=yellow];
1009[label="76.69.64.21;d;4pkt 4fpkt", shape=diamond, color=yellow];
1107[label="46.136.36.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
1374[label="76.8.97.114;d;1pkt 1fpkt", shape=diamond, color=yellow];
2084[label="76.64.64.213;d;11pkt 11fpkt", shape=hexagon, color=black];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.119.164.18:*, 76.64.64.213:1214}[34.375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 2939: (2.45902%)&lt;BR/&gt; 2931: (2.45902%)&lt;BR/&gt; 2923: (2.45902%)&lt;BR/&gt; 2921: (2.45902%)&gt;];
}
426--901[label="1;11pkt 11fpkt"];
426--994[label="1;1pkt 1fpkt"];
426--1009[label="1;4pkt 4fpkt"];
426--1107[label="1;1pkt 1fpkt"];
426--1374[label="1;1pkt 1fpkt"];
426--2084[label="1;11pkt 11fpkt"];
901--2084[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="76.64.64.213" dst_port="1214" src_ip="153.119.164.18"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.92039,1.92082,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
78[label="44.197.5.244s;1pkt 1fpkt", shape=rectangle, color=red];
619[label="136.87.128.102;d;147pkt 147fpkt", shape=diamond, color=yellow];
904[label="44.197.5.244;s;109pkt 109fpkt", shape=diamond, color=yellow];
2141[label="136.87.128.102;d;147pkt 147fpkt", shape=hexagon, color=black];
2869[label="54.88.54.234;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2893[label="44.197.5.244;112pkt 112fpkt", shape=pentagon, color=darkviolet];
3228[label="44.197.5.244;112pkt 112fpkt", shape=invtriangle, color=brown];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.197.5.244:*, 136.87.128.102:80}[38.6243%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2936%)&lt;BR/&gt; 8080: (0.706436%)&lt;BR/&gt; 45475: (0.470958%)&lt;BR/&gt; 59965: (0.392465%)&lt;BR/&gt; 59809: (0.392465%)&gt;];
}
78--619[label="1;1pkt 1fpkt"];
78--904[label="1;1pkt 1fpkt"];
78--2141[label="1;1pkt 1fpkt"];
78--2893[label="1;1pkt 1fpkt"];
78--3228[label="1;1pkt 1fpkt"];
619--904[label="0.642202;70pkt 70fpkt"];
619--2141[label="1;147pkt 147fpkt"];
619--2248[label="0.136054;20pkt 20fpkt"];
619--2254[label="0.0544218;8pkt 8fpkt"];
619--2258[label="0.0952381;14pkt 14fpkt"];
619--2263[label="0.136054;20pkt 20fpkt"];
619--2270[label="0.136054;20pkt 20fpkt"];
619--2289[label="0.1;1pkt 1fpkt"];
619--2819[label="0.111111;4pkt 4fpkt"];
619--2869[label="1;9pkt 9fpkt"];
619--2893[label="0.625;70pkt 70fpkt"];
619--3189[label="0.111111;4pkt 4fpkt"];
619--3228[label="0.625;70pkt 70fpkt"];
619--3319[label="0.037037;1pkt 1fpkt"];
619--3376[label="0.111111;4pkt 4fpkt"];
904--2141[label="0.642202;70pkt 70fpkt"];
904--2248[label="0.0733945;8pkt 8fpkt"];
904--2254[label="0.0458716;5pkt 5fpkt"];
904--2258[label="0.0917431;10pkt 10fpkt"];
904--2263[label="0.0733945;8pkt 8fpkt"];
904--2270[label="0.0733945;8pkt 8fpkt"];
904--2893[label="1;109pkt 109fpkt"];
904--3228[label="1;109pkt 109fpkt"];
2141--2248[label="0.136054;20pkt 20fpkt"];
2141--2254[label="0.0544218;8pkt 8fpkt"];
2141--2258[label="0.0952381;14pkt 14fpkt"];
2141--2263[label="0.136054;20pkt 20fpkt"];
2141--2270[label="0.136054;20pkt 20fpkt"];
2141--2289[label="0.1;1pkt 1fpkt"];
2141--2819[label="0.111111;4pkt 4fpkt"];
2141--2869[label="1;9pkt 9fpkt"];
2141--2893[label="0.625;70pkt 70fpkt"];
2141--3189[label="0.111111;4pkt 4fpkt"];
2141--3228[label="0.625;70pkt 70fpkt"];
2141--3319[label="0.037037;1pkt 1fpkt"];
2141--3376[label="0.111111;4pkt 4fpkt"];
2893--3228[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_ip="136.87.128.102" dst_port="80" src_ip="44.197.5.244"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749014,1.94966,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
909[label="164.15.200.43;s;14pkt 14fpkt", shape=diamond, color=yellow];
912[label="220.134.101.46;d;15pkt 15fpkt", shape=diamond, color=yellow];
1861[label="164.15.200.43;s;14pkt 14fpkt", shape=hexagon, color=black];
2340[label="164.15.214.21;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2851[label="164.15.201.224;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2942[label="164.15.214.21;10pkt 10fpkt", shape=invtriangle, color=brown];
3206[label="164.15.201.224;2pkt 2fpkt", shape=invtriangle, color=brown];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.15.200.43:*, 201.90.2.34:*}[27.7778%]&lt;BR/&gt;{164.15.214.21:*, *:*}[27.7778%]&lt;BR/&gt;{*:*, 220.134.101.46:6667}[22.2222%]&lt;BR/&gt;{209.85.224.16:*, 220.134.101.46:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (11.7647%)&lt;BR/&gt; 6666: (8.82353%)&lt;BR/&gt; 113: (5.88235%)&lt;BR/&gt; 8081: (2.94118%)&lt;BR/&gt; 8080: (2.94118%)&gt;];
}
909--912[label="0.214286;3pkt 3fpkt"];
909--1118[label="0.0714286;1pkt 1fpkt"];
909--1861[label="1;14pkt 14fpkt"];
912--1861[label="0.214286;3pkt 3fpkt"];
912--2088[label="0.533333;8pkt 8fpkt"];
912--2340[label="0.2;2pkt 2fpkt"];
912--2851[label="0.333333;1pkt 1fpkt"];
912--2942[label="0.2;2pkt 2fpkt"];
912--3206[label="0.5;1pkt 1fpkt"];
912--3254[label="0.533333;8pkt 8fpkt"];
2340--2942[label="1;10pkt 10fpkt"];
2851--3206[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="164.15.214.21"/>
      <filter dst_ip="201.90.2.34" src_ip="164.15.200.43"/>
      <filter dst_ip="220.134.101.46" src_ip="209.85.224.16"/>
      <filter dst_ip="220.134.101.46" dst_port="6667"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
802[label="151.244.179.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
914[label="142.8.0.154;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.179.236:1393, 142.8.0.154:23109}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23109: (50%)&lt;BR/&gt; 1393: (50%)&gt;];
}
802--914[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.8.0.154" dst_port="23109" src_ip="151.244.179.236" src_port="1393"/>
    </slice>
    <from sec="1031547603" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="18.220.118.167"/>
      <from sec="1031547606" usec="0"/>
      <to sec="1031548215" usec="0"/>
    </slice>
    <from sec="1031547606" usec="0"/>
    <to sec="1031548215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.133.192.35"/>
      <from sec="1031548451" usec="0"/>
      <to sec="1031548605" usec="0"/>
    </slice>
    <from sec="1031548451" usec="0"/>
    <to sec="1031548605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
647[label="209.88.204.210;s;109pkt 109fpkt", shape=diamond, color=yellow];
1745[label="209.88.204.210;s;47pkt 47fpkt", shape=hexagon, color=black];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.88.204.210:*, 216.4.146.185:80}[41.2844%]&lt;BR/&gt;{209.88.204.210:*, 144.100.39.118:80}[25.6881%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.359%)&lt;BR/&gt; 1863: (1.28205%)&lt;BR/&gt; 1911: (0.641026%)&lt;BR/&gt; 1910: (0.641026%)&lt;BR/&gt; 1909: (0.641026%)&gt;];
}
647--936[label="0.0144928;1pkt 1fpkt"];
647--1396[label="0.0138889;1pkt 1fpkt"];
647--1745[label="1;47pkt 47fpkt"];
647--2248[label="0.00917431;1pkt 1fpkt"];
647--2254[label="0.00917431;1pkt 1fpkt"];
647--2263[label="0.00917431;1pkt 1fpkt"];
647--2270[label="0.00917431;1pkt 1fpkt"];
1745--2248[label="0.0212766;1pkt 1fpkt"];
1745--2254[label="0.0212766;1pkt 1fpkt"];
1745--2263[label="0.0212766;1pkt 1fpkt"];
1745--2270[label="0.0212766;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.4.146.185" dst_port="80" src_ip="209.88.204.210"/>
      <filter dst_ip="144.100.39.118" dst_port="80" src_ip="209.88.204.210"/>
    </slice>
    <from sec="1031547607" usec="0"/>
    <to sec="1031548112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
580[label="209.88.210.51;d;3pkt 3fpkt", shape=diamond, color=yellow];
949[label="44.88.72.248;s;3pkt 3fpkt", shape=diamond, color=yellow];
1754[label="209.88.210.51;d;3pkt 3fpkt", shape=hexagon, color=black];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.88.72.253:5001, 209.88.210.51:3123}[20%]&lt;BR/&gt;{44.88.72.253:5001, 209.88.210.51:3127}[20%]&lt;BR/&gt;{44.88.72.248:5001, 209.88.195.100:1109}[20%]&lt;BR/&gt;{44.88.72.248:5001, 209.88.195.100:1112}[20%]&lt;BR/&gt;{44.88.72.248:5001, 209.88.210.51:3125}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 3125: (16.6667%)&lt;BR/&gt; 3127: (11.1111%)&lt;BR/&gt; 3123: (11.1111%)&lt;BR/&gt; 1112: (5.55556%)&gt;];
}
580--949[label="0.333333;1pkt 1fpkt"];
580--1754[label="1;3pkt 3fpkt"];
949--1754[label="0.333333;1pkt 1fpkt"];
949--2129[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.88.210.51" dst_port="3125" src_ip="44.88.72.248" src_port="5001"/>
      <filter dst_ip="209.88.195.100" dst_port="1112" src_ip="44.88.72.248" src_port="5001"/>
      <filter dst_ip="209.88.195.100" dst_port="1109" src_ip="44.88.72.248" src_port="5001"/>
      <filter dst_ip="209.88.210.51" dst_port="3127" src_ip="44.88.72.253" src_port="5001"/>
      <filter dst_ip="209.88.210.51" dst_port="3123" src_ip="44.88.72.253" src_port="5001"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
11[label="141.133.48.32s;3pkt 3fpkt", shape=rectangle, color=red];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.156.0:1436, 2.246.167.29:6699}[33.3333%]&lt;BR/&gt;{141.133.48.32:1041, 200.108.62.131:80}[33.3333%]&lt;BR/&gt;{141.133.48.32:1042, 200.108.62.131:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 6699: (16.6667%)&lt;BR/&gt; 1436: (16.6667%)&lt;BR/&gt; 1042: (16.6667%)&lt;BR/&gt; 1041: (16.6667%)&gt;];
}
11--52[label="0.333333;1pkt 1fpkt"];
11--65[label="1;1pkt 1fpkt"];
11--869[label="0.333333;1pkt 1fpkt"];
11--1197[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.108.62.131" dst_port="80" src_ip="141.133.48.32" src_port="1042"/>
      <filter dst_ip="200.108.62.131" dst_port="80" src_ip="141.133.48.32" src_port="1041"/>
      <filter dst_ip="2.246.167.29" dst_port="6699" src_ip="136.65.156.0" src_port="1436"/>
    </slice>
    <from sec="1031548644" usec="0"/>
    <to sec="1031548659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845953,1.98323,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
959[label="136.65.156.0;d;51pkt 51fpkt", shape=diamond, color=yellow];
962[label="86.57.73.112;s;2pkt 2fpkt", shape=diamond, color=yellow];
1076[label="86.85.106.146;s;2pkt 2fpkt", shape=diamond, color=yellow];
1198[label="195.144.56.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
1436[label="170.127.1.224;s;1pkt 1fpkt", shape=diamond, color=yellow];
1832[label="136.65.156.0;d;16pkt 16fpkt", shape=hexagon, color=black];
1886[label="86.85.106.146;s;2pkt 2fpkt", shape=hexagon, color=black];
2624[label="195.144.56.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3321[label="195.144.56.134;1pkt 1fpkt", shape=invhouse, color=bisque];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 136.65.156.0:6257}[84.3137%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (77.9221%)&lt;BR/&gt; 6699: (9.74026%)&lt;BR/&gt; 54229: (2.5974%)&lt;BR/&gt; 1376: (2.5974%)&lt;BR/&gt; 1374: (1.94805%)&gt;];
}
959--962[label="1;2pkt 2fpkt"];
959--1076[label="1;2pkt 2fpkt"];
959--1198[label="1;1pkt 1fpkt"];
959--1436[label="1;1pkt 1fpkt"];
959--1832[label="1;16pkt 16fpkt"];
959--1886[label="1;2pkt 2fpkt"];
959--2624[label="1;1pkt 1fpkt"];
959--3321[label="1;1pkt 1fpkt"];
962--1832[label="1;2pkt 2fpkt"];
1076--1832[label="1;2pkt 2fpkt"];
1076--1886[label="1;2pkt 2fpkt"];
1198--2624[label="1;1pkt 1fpkt"];
1198--3321[label="1;1pkt 1fpkt"];
1832--1886[label="1;2pkt 2fpkt"];
2624--3321[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.156.0" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1031547899" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
965[label="76.41.181.138;d;3pkt 3fpkt", shape=diamond, color=yellow];
966[label="151.244.36.132;s;5pkt 5fpkt", shape=diamond, color=yellow];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.36.132:6700, 76.41.181.138:*}[33.3333%]&lt;BR/&gt;{151.244.36.132:*, 44.64.181.132:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6700: (37.5%)&lt;BR/&gt; 4255: (12.5%)&lt;BR/&gt; 4241: (12.5%)&lt;BR/&gt; 7780: (6.25%)&lt;BR/&gt; 7743: (6.25%)&gt;];
}
965--966[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="44.64.181.132" src_ip="151.244.36.132"/>
      <filter dst_ip="76.41.181.138" src_ip="151.244.36.132" src_port="6700"/>
    </slice>
    <from sec="1031547916" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737329,2.04056,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
81[label="209.85.226.250s;1pkt 1fpkt", shape=rectangle, color=red];
968[label="75.158.149.51;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.85.226.250:20797, 75.158.149.51:80}[50%]&lt;BR/&gt;{209.85.226.250:23444, 75.158.149.51:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 20797: (33.3333%)&lt;BR/&gt; 23444: (16.6667%)&gt;];
}
81--568[label="1;1pkt 1fpkt"];
81--968[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="75.158.149.51" dst_port="80" src_ip="209.85.226.250" src_port="23444"/>
      <filter dst_ip="75.158.149.51" dst_port="80" src_ip="209.85.226.250" src_port="20797"/>
    </slice>
    <from sec="1031547708" usec="0"/>
    <to sec="1031548655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
915[label="136.65.112.46;d;3pkt 3fpkt", shape=diamond, color=yellow];
978[label="72.105.59.226;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.97.97.28:80, 136.65.112.46:1030}[33.3333%]&lt;BR/&gt;{72.105.59.226:80, 136.65.112.46:1255}[33.3333%]&lt;BR/&gt;{72.105.59.226:80, 136.65.112.46:1256}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1256: (20%)&lt;BR/&gt; 1255: (20%)&lt;BR/&gt; 1030: (10%)&gt;];
}
915--978[label="1;2pkt 2fpkt"];
915--2247[label="0.333333;1pkt 1fpkt"];
915--2255[label="0.333333;1pkt 1fpkt"];
915--2257[label="0.333333;1pkt 1fpkt"];
915--2267[label="0.333333;1pkt 1fpkt"];
915--2274[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.112.46" dst_port="1256" src_ip="72.105.59.226" src_port="80"/>
      <filter dst_ip="136.65.112.46" dst_port="1255" src_ip="72.105.59.226" src_port="80"/>
      <filter dst_ip="136.65.112.46" dst_port="1030" src_ip="75.97.97.28" src_port="80"/>
    </slice>
    <from sec="1031547604" usec="0"/>
    <to sec="1031548511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="164.15.194.151"/>
      <from sec="1031547600" usec="0"/>
      <to sec="1031548509" usec="0"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
182[label="208.78.226.59;d;5593pkt 5593fpkt", shape=diamond, color=yellow];
635[label="141.133.32.0;d;48pkt 48fpkt", shape=diamond, color=yellow];
763[label="136.65.162.88;d;409pkt 409fpkt", shape=diamond, color=yellow];
773[label="208.78.226.56;d;740pkt 740fpkt", shape=diamond, color=yellow];
906[label="205.213.129.128;s;16pkt 16fpkt", shape=diamond, color=yellow];
1001[label="205.213.129.131;s;17pkt 17fpkt", shape=diamond, color=yellow];
1230[label="217.72.18.128;s;5pkt 5fpkt", shape=diamond, color=yellow];
1247[label="204.213.169.29;s;31pkt 31fpkt", shape=diamond, color=yellow];
1485[label="209.85.227.199;d;224pkt 224fpkt", shape=diamond, color=yellow];
1781[label="205.213.129.36;s;26pkt 26fpkt", shape=hexagon, color=black];
1862[label="209.52.141.53;s;6pkt 6fpkt", shape=hexagon, color=black];
2146[label="208.78.226.56;d;740pkt 740fpkt", shape=hexagon, color=black];
2289[label="54.92.43.3;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2298[label="214.213.127.5;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2308[label="213.52.202.8;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2438[label="209.90.128.59;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2439[label="220.65.12.60;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2445[label="172.202.107.60;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2447[label="172.202.107.61;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2587[label="72.206.49.117;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2608[label="205.213.129.128;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2689[label="74.86.5.158;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2916[label="214.213.127.5;14pkt 14fpkt", shape=invtriangle, color=brown];
3065[label="72.206.49.117;17pkt 17fpkt", shape=invtriangle, color=brown];
3122[label="74.86.5.158;15pkt 15fpkt", shape=invtriangle, color=brown];
3240[label="214.213.127.5;13pkt 13fpkt", shape=invhouse, color=bisque];
3336[label="74.86.5.158;15pkt 15fpkt", shape=invhouse, color=bisque];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 208.78.226.59:53}[77.7483%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (56.8371%)&lt;BR/&gt; 1024: (2.58181%)&lt;BR/&gt; 52756: (1.07005%)&lt;BR/&gt; 0: (1.07005%)&lt;BR/&gt; 80: (0.877193%)&gt;];
}
182--333[label="0.0285714;1pkt 1fpkt"];
182--493[label="0.142857;1pkt 1fpkt"];
182--861[label="1;1pkt 1fpkt"];
182--906[label="0.0625;1pkt 1fpkt"];
182--973[label="1;4pkt 4fpkt"];
182--1001[label="0.0588235;1pkt 1fpkt"];
182--1100[label="1;1pkt 1fpkt"];
182--1119[label="1;1pkt 1fpkt"];
182--1144[label="0.0113636;1pkt 1fpkt"];
182--1213[label="0.763158;29pkt 29fpkt"];
182--1230[label="0.2;1pkt 1fpkt"];
182--1247[label="0.0322581;1pkt 1fpkt"];
182--1362[label="1;1pkt 1fpkt"];
182--1416[label="0.030303;1pkt 1fpkt"];
182--1598[label="0.0344828;1pkt 1fpkt"];
182--1604[label="1;4pkt 4fpkt"];
182--1795[label="1;4088pkt 4088fpkt"];
182--1816[label="0.0769231;1pkt 1fpkt"];
182--1835[label="1;4pkt 4fpkt"];
182--1862[label="0.166667;1pkt 1fpkt"];
182--1946[label="1;29pkt 29fpkt"];
182--1970[label="0.0285714;1pkt 1fpkt"];
182--1992[label="0.0116279;1pkt 1fpkt"];
182--2082[label="1;1pkt 1fpkt"];
182--2103[label="0.030303;1pkt 1fpkt"];
182--2208[label="1;4088pkt 4088fpkt"];
182--2250[label="1;817pkt 817fpkt"];
182--2251[label="0.166311;156pkt 156fpkt"];
182--2253[label="0.303138;1285pkt 1285fpkt"];
182--2256[label="0.359378;2010pkt 2010fpkt"];
182--2260[label="0.167542;351pkt 351fpkt"];
182--2262[label="1;819pkt 819fpkt"];
182--2266[label="0.062757;351pkt 351fpkt"];
182--2269[label="1;819pkt 819fpkt"];
182--2273[label="0.062757;351pkt 351fpkt"];
182--2289[label="0.1;1pkt 1fpkt"];
182--2298[label="0.0714286;1pkt 1fpkt"];
182--2308[label="0.111111;1pkt 1fpkt"];
182--2318[label="0.666667;4pkt 4fpkt"];
182--2372[label="0.0113636;1pkt 1fpkt"];
182--2438[label="0.0714286;1pkt 1fpkt"];
182--2447[label="0.2;1pkt 1fpkt"];
182--2587[label="0.0555556;1pkt 1fpkt"];
182--2597[label="1;3pkt 3fpkt"];
182--2608[label="0.0625;1pkt 1fpkt"];
182--2615[label="0.166667;1pkt 1fpkt"];
182--2689[label="0.0666667;1pkt 1fpkt"];
182--2916[label="0.0714286;1pkt 1fpkt"];
182--2926[label="0.6;3pkt 3fpkt"];
182--3065[label="0.0588235;1pkt 1fpkt"];
182--3122[label="0.0666667;1pkt 1fpkt"];
182--3240[label="0.0769231;1pkt 1fpkt"];
182--3336[label="0.0666667;1pkt 1fpkt"];
635--1247[label="0.0322581;1pkt 1fpkt"];
635--1770[label="0.125;6pkt 6fpkt"];
635--1781[label="0.923077;24pkt 24fpkt"];
635--2247[label="0.0625;3pkt 3fpkt"];
635--2605[label="0.0333333;1pkt 1fpkt"];
763--906[label="0.0625;1pkt 1fpkt"];
763--1001[label="0.0588235;1pkt 1fpkt"];
763--1144[label="0.0113636;1pkt 1fpkt"];
763--1230[label="0.2;1pkt 1fpkt"];
763--1247[label="0.0645161;2pkt 2fpkt"];
763--1416[label="0.030303;1pkt 1fpkt"];
763--1816[label="0.0769231;1pkt 1fpkt"];
763--1992[label="0.0116279;1pkt 1fpkt"];
763--2103[label="0.030303;1pkt 1fpkt"];
763--2251[label="0.00488998;2pkt 2fpkt"];
763--2253[label="0.0342298;14pkt 14fpkt"];
763--2256[label="0.0929095;38pkt 38fpkt"];
763--2260[label="0.00977995;4pkt 4fpkt"];
763--2266[label="0.0782396;32pkt 32fpkt"];
763--2273[label="0.0782396;32pkt 32fpkt"];
763--2298[label="0.0714286;1pkt 1fpkt"];
763--2364[label="0.0555556;1pkt 1fpkt"];
763--2372[label="0.0113636;1pkt 1fpkt"];
763--2408[label="0.0166667;1pkt 1fpkt"];
763--2438[label="0.0714286;1pkt 1fpkt"];
763--2439[label="0.25;1pkt 1fpkt"];
763--2497[label="0.0263158;1pkt 1fpkt"];
763--2608[label="0.0625;1pkt 1fpkt"];
763--2916[label="0.0714286;1pkt 1fpkt"];
763--2955[label="0.0555556;1pkt 1fpkt"];
763--2976[label="0.0166667;1pkt 1fpkt"];
763--3240[label="0.0769231;1pkt 1fpkt"];
763--3273[label="0.0166667;1pkt 1fpkt"];
773--906[label="0.0625;1pkt 1fpkt"];
773--1001[label="0.0588235;1pkt 1fpkt"];
773--1144[label="0.0113636;1pkt 1fpkt"];
773--1247[label="0.0322581;1pkt 1fpkt"];
773--1816[label="0.0769231;1pkt 1fpkt"];
773--2146[label="1;740pkt 740fpkt"];
773--2251[label="0.0121622;9pkt 9fpkt"];
773--2253[label="0.102703;76pkt 76fpkt"];
773--2256[label="0.152703;113pkt 113fpkt"];
773--2260[label="0.0121622;9pkt 9fpkt"];
773--2266[label="0.0121622;9pkt 9fpkt"];
773--2273[label="0.0121622;9pkt 9fpkt"];
773--2372[label="0.0113636;1pkt 1fpkt"];
773--2408[label="0.0166667;1pkt 1fpkt"];
773--2438[label="0.0714286;1pkt 1fpkt"];
773--2439[label="0.25;1pkt 1fpkt"];
773--2445[label="0.333333;1pkt 1fpkt"];
773--2447[label="0.2;1pkt 1fpkt"];
773--2451[label="0.166667;1pkt 1fpkt"];
773--2608[label="0.0625;1pkt 1fpkt"];
773--2976[label="0.0166667;1pkt 1fpkt"];
773--3273[label="0.0166667;1pkt 1fpkt"];
906--1363[label="0.0625;1pkt 1fpkt"];
906--1366[label="0.0625;1pkt 1fpkt"];
906--1485[label="0.0625;1pkt 1fpkt"];
906--1795[label="0.0625;1pkt 1fpkt"];
906--1816[label="1;13pkt 13fpkt"];
906--2146[label="0.0625;1pkt 1fpkt"];
906--2208[label="0.0625;1pkt 1fpkt"];
906--2250[label="0.0625;1pkt 1fpkt"];
906--2253[label="0.25;4pkt 4fpkt"];
906--2256[label="0.375;6pkt 6fpkt"];
906--2262[label="0.0625;1pkt 1fpkt"];
906--2269[label="0.0625;1pkt 1fpkt"];
906--2608[label="1;16pkt 16fpkt"];
1001--1214[label="0.0588235;1pkt 1fpkt"];
1001--1363[label="0.0588235;1pkt 1fpkt"];
1001--1484[label="0.0588235;1pkt 1fpkt"];
1001--1485[label="0.0588235;1pkt 1fpkt"];
1001--1795[label="0.0588235;1pkt 1fpkt"];
1001--2146[label="0.0588235;1pkt 1fpkt"];
1001--2208[label="0.0588235;1pkt 1fpkt"];
1001--2250[label="0.0588235;1pkt 1fpkt"];
1001--2253[label="0.235294;4pkt 4fpkt"];
1001--2256[label="0.470588;8pkt 8fpkt"];
1001--2262[label="0.0588235;1pkt 1fpkt"];
1001--2269[label="0.0588235;1pkt 1fpkt"];
1230--1363[label="0.2;1pkt 1fpkt"];
1230--1795[label="0.2;1pkt 1fpkt"];
1230--1947[label="0.2;1pkt 1fpkt"];
1230--2208[label="0.2;1pkt 1fpkt"];
1230--2253[label="0.2;1pkt 1fpkt"];
1230--2266[label="0.2;1pkt 1fpkt"];
1230--2273[label="0.2;1pkt 1fpkt"];
1247--1251[label="0.0322581;1pkt 1fpkt"];
1247--1484[label="0.0322581;1pkt 1fpkt"];
1247--1485[label="0.0322581;1pkt 1fpkt"];
1247--1795[label="0.0322581;1pkt 1fpkt"];
1247--2146[label="0.0322581;1pkt 1fpkt"];
1247--2208[label="0.0322581;1pkt 1fpkt"];
1247--2250[label="0.0322581;1pkt 1fpkt"];
1247--2253[label="0.0967742;3pkt 3fpkt"];
1247--2256[label="0.225806;7pkt 7fpkt"];
1247--2260[label="0.0322581;1pkt 1fpkt"];
1247--2262[label="0.0322581;1pkt 1fpkt"];
1247--2266[label="0.258065;8pkt 8fpkt"];
1247--2269[label="0.0322581;1pkt 1fpkt"];
1247--2273[label="0.258065;8pkt 8fpkt"];
1485--1816[label="0.0769231;1pkt 1fpkt"];
1485--2251[label="0.00892857;2pkt 2fpkt"];
1485--2253[label="0.0803571;18pkt 18fpkt"];
1485--2256[label="0.125;28pkt 28fpkt"];
1485--2260[label="0.0178571;4pkt 4fpkt"];
1485--2266[label="0.0178571;4pkt 4fpkt"];
1485--2273[label="0.0178571;4pkt 4fpkt"];
1485--2364[label="0.0555556;1pkt 1fpkt"];
1485--2438[label="0.0714286;1pkt 1fpkt"];
1485--2447[label="0.2;1pkt 1fpkt"];
1485--2608[label="0.0625;1pkt 1fpkt"];
1485--2955[label="0.0555556;1pkt 1fpkt"];
1781--2247[label="0.0769231;2pkt 2fpkt"];
1862--2208[label="0.166667;1pkt 1fpkt"];
1862--2248[label="0.333333;2pkt 2fpkt"];
1862--2254[label="0.333333;2pkt 2fpkt"];
1862--2258[label="0.166667;1pkt 1fpkt"];
1862--2263[label="0.333333;2pkt 2fpkt"];
1862--2270[label="0.333333;2pkt 2fpkt"];
1862--2433[label="0.833333;5pkt 5fpkt"];
2146--2251[label="0.0121622;9pkt 9fpkt"];
2146--2253[label="0.102703;76pkt 76fpkt"];
2146--2256[label="0.152703;113pkt 113fpkt"];
2146--2260[label="0.0121622;9pkt 9fpkt"];
2146--2266[label="0.0121622;9pkt 9fpkt"];
2146--2273[label="0.0121622;9pkt 9fpkt"];
2146--2372[label="0.0113636;1pkt 1fpkt"];
2146--2408[label="0.0166667;1pkt 1fpkt"];
2146--2438[label="0.0714286;1pkt 1fpkt"];
2146--2439[label="0.25;1pkt 1fpkt"];
2146--2445[label="0.333333;1pkt 1fpkt"];
2146--2447[label="0.2;1pkt 1fpkt"];
2146--2451[label="0.166667;1pkt 1fpkt"];
2146--2608[label="0.0625;1pkt 1fpkt"];
2146--2976[label="0.0166667;1pkt 1fpkt"];
2146--3273[label="0.0166667;1pkt 1fpkt"];
2298--2916[label="1;14pkt 14fpkt"];
2298--3240[label="1;13pkt 13fpkt"];
2587--3065[label="1;17pkt 17fpkt"];
2689--3122[label="1;15pkt 15fpkt"];
2689--3336[label="1;15pkt 15fpkt"];
2916--3240[label="1;13pkt 13fpkt"];
3122--3336[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="208.78.226.59" dst_port="53"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="18.220.118.167"/>
      <from sec="1031547606" usec="0"/>
      <to sec="1031548215" usec="0"/>
    </slice>
    <from sec="1031547606" usec="0"/>
    <to sec="1031548215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="208.85.170.192"/>
      <from sec="1031547667" usec="0"/>
      <to sec="1031548139" usec="0"/>
    </slice>
    <from sec="1031547667" usec="0"/>
    <to sec="1031548139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
677[label="151.244.42.14;s;8pkt 8fpkt", shape=diamond, color=yellow];
1051[label="208.209.151.81;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.42.14:80, 208.209.151.80:*}[50%]&lt;BR/&gt;{151.244.42.14:80, 208.209.151.81:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62898: (9.09091%)&lt;BR/&gt; 58725: (9.09091%)&lt;BR/&gt; 34126: (9.09091%)&lt;BR/&gt; 50653: (4.54545%)&gt;];
}
677--1051[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="208.209.151.80" src_ip="151.244.42.14" src_port="80"/>
      <filter dst_ip="208.209.151.81" src_ip="151.244.42.14" src_port="80"/>
    </slice>
    <from sec="1031547674" usec="0"/>
    <to sec="1031547994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
187[label="164.15.207.15;s;1396pkt 1396fpkt", shape=diamond, color=yellow];
299[label="164.15.207.14;s;2239pkt 2239fpkt", shape=diamond, color=yellow];
305[label="207.137.165.177;d;217pkt 217fpkt", shape=diamond, color=yellow];
495[label="206.166.11.75;d;84pkt 84fpkt", shape=diamond, color=yellow];
527[label="200.56.96.184;d;23pkt 23fpkt", shape=diamond, color=yellow];
648[label="206.166.11.16;d;286pkt 286fpkt", shape=diamond, color=yellow];
900[label="193.80.48.156;d;171pkt 171fpkt", shape=diamond, color=yellow];
934[label="75.97.118.47;d;24pkt 24fpkt", shape=diamond, color=yellow];
943[label="213.7.28.141;d;30pkt 30fpkt", shape=diamond, color=yellow];
974[label="75.109.37.59;d;56pkt 56fpkt", shape=diamond, color=yellow];
1039[label="209.85.210.122;s;309pkt 309fpkt", shape=diamond, color=yellow];
1056[label="193.47.48.32;d;25pkt 25fpkt", shape=diamond, color=yellow];
1159[label="72.31.10.236;d;82pkt 82fpkt", shape=diamond, color=yellow];
1239[label="141.133.1.206;s;52pkt 52fpkt", shape=diamond, color=yellow];
1257[label="207.20.203.74;d;88pkt 88fpkt", shape=diamond, color=yellow];
1271[label="193.47.85.11;d;42pkt 42fpkt", shape=diamond, color=yellow];
1326[label="140.121.5.24;d;156pkt 156fpkt", shape=diamond, color=yellow];
1489[label="209.10.219.1;d;47pkt 47fpkt", shape=diamond, color=yellow];
1528[label="136.65.198.55;s;26pkt 26fpkt", shape=diamond, color=yellow];
1574[label="75.84.20.50;d;53pkt 53fpkt", shape=diamond, color=yellow];
1607[label="72.105.50.201;d;44pkt 44fpkt", shape=diamond, color=yellow];
1852[label="164.15.207.14;s;1786pkt 1786fpkt", shape=hexagon, color=black];
1871[label="209.85.210.122;s;97pkt 97fpkt", shape=hexagon, color=black];
1928[label="213.7.28.141;d;25pkt 25fpkt", shape=hexagon, color=black];
1973[label="193.180.129.27;d;53pkt 53fpkt", shape=hexagon, color=black];
2028[label="207.137.165.177;d;202pkt 202fpkt", shape=hexagon, color=black];
2086[label="141.133.1.206;s;52pkt 52fpkt", shape=hexagon, color=black];
2112[label="140.121.5.24;d;156pkt 156fpkt", shape=hexagon, color=black];
2300[label="141.133.192.5;123pkt 123fpkt", shape=pentagon, color=darkviolet];
2646[label="136.134.73.145;40pkt 40fpkt", shape=pentagon, color=darkviolet];
2814[label="141.133.1.206;53pkt 53fpkt", shape=pentagon, color=darkviolet];
2862[label="141.133.74.232;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3098[label="136.134.73.145;39pkt 39fpkt", shape=invtriangle, color=brown];
3213[label="141.133.74.232;31pkt 31fpkt", shape=invtriangle, color=brown];
3372[label="141.133.1.206;52pkt 52fpkt", shape=invhouse, color=bisque];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.15.207.14:*, *:80}[42.326%]&lt;BR/&gt;{164.15.207.15:*, *:80}[27.8728%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0281%)&lt;BR/&gt; 443: (1.86203%)&lt;BR/&gt; 0: (0.0854701%)&lt;BR/&gt; 2438: (0.0671551%)&lt;BR/&gt; 2437: (0.0610501%)&gt;];
}
187--305[label="0.281106;61pkt 61fpkt"];
187--495[label="0.154762;13pkt 13fpkt"];
187--527[label="0.130435;3pkt 3fpkt"];
187--581[label="0.207483;61pkt 61fpkt"];
187--639[label="0.269231;21pkt 21fpkt"];
187--648[label="0.153846;44pkt 44fpkt"];
187--876[label="0.00465116;1pkt 1fpkt"];
187--882[label="0.0149254;2pkt 2fpkt"];
187--900[label="0.0701754;12pkt 12fpkt"];
187--925[label="0.0348837;3pkt 3fpkt"];
187--943[label="0.166667;5pkt 5fpkt"];
187--954[label="0.03125;1pkt 1fpkt"];
187--964[label="0.333333;3pkt 3fpkt"];
187--974[label="0.535714;30pkt 30fpkt"];
187--1024[label="0.00909091;1pkt 1fpkt"];
187--1056[label="0.16;4pkt 4fpkt"];
187--1091[label="0.0263158;1pkt 1fpkt"];
187--1096[label="0.041543;14pkt 14fpkt"];
187--1123[label="0.02;1pkt 1fpkt"];
187--1135[label="0.131783;17pkt 17fpkt"];
187--1147[label="0.0131579;2pkt 2fpkt"];
187--1148[label="0.0131579;2pkt 2fpkt"];
187--1159[label="0.426829;35pkt 35fpkt"];
187--1237[label="0.0521739;6pkt 6fpkt"];
187--1257[label="0.0454545;4pkt 4fpkt"];
187--1267[label="0.0128205;1pkt 1fpkt"];
187--1271[label="0.357143;15pkt 15fpkt"];
187--1282[label="0.015625;2pkt 2fpkt"];
187--1284[label="0.364486;39pkt 39fpkt"];
187--1359[label="0.0168067;2pkt 2fpkt"];
187--1373[label="0.00680272;1pkt 1fpkt"];
187--1376[label="0.0291262;3pkt 3fpkt"];
187--1396[label="0.291667;21pkt 21fpkt"];
187--1483[label="0.0430108;4pkt 4fpkt"];
187--1489[label="0.106383;5pkt 5fpkt"];
187--1493[label="0.016129;1pkt 1fpkt"];
187--1494[label="0.028169;2pkt 2fpkt"];
187--1497[label="0.00892857;1pkt 1fpkt"];
187--1501[label="0.0444444;4pkt 4fpkt"];
187--1503[label="0.0454545;4pkt 4fpkt"];
187--1504[label="0.043956;4pkt 4fpkt"];
187--1520[label="0.136364;6pkt 6fpkt"];
187--1585[label="0.09375;6pkt 6fpkt"];
187--1592[label="0.0461538;3pkt 3fpkt"];
187--1595[label="0.235294;20pkt 20fpkt"];
187--1607[label="0.204545;9pkt 9fpkt"];
187--1718[label="0.130435;3pkt 3fpkt"];
187--1928[label="0.2;5pkt 5fpkt"];
187--1986[label="0.0172414;1pkt 1fpkt"];
187--2018[label="0.0173913;2pkt 2fpkt"];
187--2028[label="0.30198;61pkt 61fpkt"];
187--2050[label="0.015748;2pkt 2fpkt"];
187--2094[label="0.043956;4pkt 4fpkt"];
187--2128[label="0.041543;14pkt 14fpkt"];
187--2143[label="0.0430108;4pkt 4fpkt"];
187--2241[label="0.041543;14pkt 14fpkt"];
187--2248[label="0.0916905;128pkt 128fpkt"];
187--2254[label="0.0830946;116pkt 116fpkt"];
187--2258[label="0.00358166;5pkt 5fpkt"];
187--2263[label="0.0916905;128pkt 128fpkt"];
187--2270[label="0.0916905;128pkt 128fpkt"];
299--305[label="0.672811;146pkt 146fpkt"];
299--494[label="0.264706;18pkt 18fpkt"];
299--495[label="0.107143;9pkt 9fpkt"];
299--521[label="0.0117647;1pkt 1fpkt"];
299--527[label="0.0434783;1pkt 1fpkt"];
299--581[label="0.261905;77pkt 77fpkt"];
299--639[label="0.423077;33pkt 33fpkt"];
299--648[label="0.227273;65pkt 65fpkt"];
299--730[label="0.0133333;1pkt 1fpkt"];
299--876[label="0.0325581;7pkt 7fpkt"];
299--882[label="0.00746269;1pkt 1fpkt"];
299--899[label="0.0588235;1pkt 1fpkt"];
299--900[label="0.0760234;13pkt 13fpkt"];
299--922[label="0.00826446;1pkt 1fpkt"];
299--925[label="0.0348837;3pkt 3fpkt"];
299--934[label="0.0833333;2pkt 2fpkt"];
299--943[label="0.2;6pkt 6fpkt"];
299--964[label="0.666667;6pkt 6fpkt"];
299--974[label="0.446429;25pkt 25fpkt"];
299--1049[label="0.00564972;1pkt 1fpkt"];
299--1056[label="0.16;4pkt 4fpkt"];
299--1096[label="0.074184;25pkt 25fpkt"];
299--1135[label="0.193798;25pkt 25fpkt"];
299--1138[label="0.00446429;1pkt 1fpkt"];
299--1147[label="0.0131579;2pkt 2fpkt"];
299--1148[label="0.0460526;7pkt 7fpkt"];
299--1159[label="0.390244;32pkt 32fpkt"];
299--1237[label="0.0956522;11pkt 11fpkt"];
299--1254[label="0.0102041;1pkt 1fpkt"];
299--1257[label="0.0909091;8pkt 8fpkt"];
299--1271[label="0.452381;19pkt 19fpkt"];
299--1282[label="0.0078125;1pkt 1fpkt"];
299--1284[label="0.317757;34pkt 34fpkt"];
299--1359[label="0.0504202;6pkt 6fpkt"];
299--1373[label="0.0544218;8pkt 8fpkt"];
299--1376[label="0.0582524;6pkt 6fpkt"];
299--1396[label="0.277778;20pkt 20fpkt"];
299--1415[label="0.3;18pkt 18fpkt"];
299--1483[label="0.129032;12pkt 12fpkt"];
299--1489[label="0.148936;7pkt 7fpkt"];
299--1493[label="0.0322581;2pkt 2fpkt"];
299--1494[label="0.028169;2pkt 2fpkt"];
299--1497[label="0.0625;7pkt 7fpkt"];
299--1501[label="0.133333;12pkt 12fpkt"];
299--1503[label="0.147727;13pkt 13fpkt"];
299--1504[label="0.131868;12pkt 12fpkt"];
299--1520[label="0.113636;5pkt 5fpkt"];
299--1574[label="0.207547;11pkt 11fpkt"];
299--1585[label="0.21875;14pkt 14fpkt"];
299--1592[label="0.0153846;1pkt 1fpkt"];
299--1595[label="0.270588;23pkt 23fpkt"];
299--1605[label="0.0344828;2pkt 2fpkt"];
299--1607[label="0.227273;10pkt 10fpkt"];
299--1718[label="0.0434783;1pkt 1fpkt"];
299--1852[label="1;1786pkt 1786fpkt"];
299--1928[label="0.24;6pkt 6fpkt"];
299--1973[label="0.283019;15pkt 15fpkt"];
299--1978[label="0.0181818;1pkt 1fpkt"];
299--2018[label="0.00869565;1pkt 1fpkt"];
299--2028[label="0.673267;136pkt 136fpkt"];
299--2050[label="0.0472441;6pkt 6fpkt"];
299--2059[label="0.28;14pkt 14fpkt"];
299--2094[label="0.131868;12pkt 12fpkt"];
299--2128[label="0.074184;25pkt 25fpkt"];
299--2135[label="0.0133333;1pkt 1fpkt"];
299--2143[label="0.129032;12pkt 12fpkt"];
299--2154[label="0.00446429;1pkt 1fpkt"];
299--2241[label="0.074184;25pkt 25fpkt"];
299--2248[label="0.0558285;125pkt 125fpkt"];
299--2254[label="0.0522555;117pkt 117fpkt"];
299--2258[label="0.0629745;141pkt 141fpkt"];
299--2263[label="0.0553819;124pkt 124fpkt"];
299--2270[label="0.0553819;124pkt 124fpkt"];
305--1427[label="0.00534759;1pkt 1fpkt"];
305--1852[label="0.626728;136pkt 136fpkt"];
305--2028[label="1;202pkt 202fpkt"];
305--2107[label="0.00534759;1pkt 1fpkt"];
305--2248[label="0.0645161;14pkt 14fpkt"];
305--2254[label="0.0645161;14pkt 14fpkt"];
305--2258[label="0.0829493;18pkt 18fpkt"];
305--2263[label="0.0645161;14pkt 14fpkt"];
305--2270[label="0.0645161;14pkt 14fpkt"];
495--570[label="0.178571;15pkt 15fpkt"];
495--793[label="0.0119048;1pkt 1fpkt"];
495--1661[label="0.0833333;7pkt 7fpkt"];
495--1852[label="0.107143;9pkt 9fpkt"];
495--2088[label="0.0119048;1pkt 1fpkt"];
495--2248[label="0.107143;9pkt 9fpkt"];
495--2254[label="0.0952381;8pkt 8fpkt"];
495--2258[label="0.0595238;5pkt 5fpkt"];
495--2263[label="0.107143;9pkt 9fpkt"];
495--2270[label="0.107143;9pkt 9fpkt"];
495--2788[label="0.178571;15pkt 15fpkt"];
495--3254[label="0.0119048;1pkt 1fpkt"];
495--3367[label="0.178571;15pkt 15fpkt"];
527--1661[label="0.478261;11pkt 11fpkt"];
527--1718[label="1;23pkt 23fpkt"];
527--1852[label="0.0434783;1pkt 1fpkt"];
527--2248[label="0.217391;5pkt 5fpkt"];
527--2254[label="0.782609;18pkt 18fpkt"];
527--2263[label="0.217391;5pkt 5fpkt"];
527--2270[label="0.217391;5pkt 5fpkt"];
648--1427[label="0.00534759;1pkt 1fpkt"];
648--1852[label="0.146853;42pkt 42fpkt"];
648--2107[label="0.00534759;1pkt 1fpkt"];
648--2248[label="0.0454545;13pkt 13fpkt"];
648--2254[label="0.0524476;15pkt 15fpkt"];
648--2258[label="0.0769231;22pkt 22fpkt"];
648--2263[label="0.0454545;13pkt 13fpkt"];
648--2270[label="0.0454545;13pkt 13fpkt"];
648--2788[label="0.524476;150pkt 150fpkt"];
648--3367[label="0.524476;150pkt 150fpkt"];
900--1039[label="0.0175439;3pkt 3fpkt"];
900--1239[label="0.0192308;1pkt 1fpkt"];
900--1306[label="0.008;1pkt 1fpkt"];
900--1528[label="0.153846;4pkt 4fpkt"];
900--1663[label="0.0116959;2pkt 2fpkt"];
900--1815[label="0.0172414;1pkt 1fpkt"];
900--1823[label="0.0233918;4pkt 4fpkt"];
900--1852[label="0.0701754;12pkt 12fpkt"];
900--1871[label="0.0206186;2pkt 2fpkt"];
900--1892[label="0.0409357;7pkt 7fpkt"];
900--1950[label="0.00636943;1pkt 1fpkt"];
900--2011[label="0.0409357;7pkt 7fpkt"];
900--2086[label="0.0192308;1pkt 1fpkt"];
900--2088[label="0.00584795;1pkt 1fpkt"];
900--2164[label="0.153846;4pkt 4fpkt"];
900--2187[label="0.0116959;2pkt 2fpkt"];
900--2215[label="0.0222222;1pkt 1fpkt"];
900--2225[label="0.00636943;1pkt 1fpkt"];
900--2248[label="0.0467836;8pkt 8fpkt"];
900--2254[label="0.0584795;10pkt 10fpkt"];
900--2258[label="0.0467836;8pkt 8fpkt"];
900--2263[label="0.0467836;8pkt 8fpkt"];
900--2270[label="0.0467836;8pkt 8fpkt"];
900--2463[label="0.0116959;2pkt 2fpkt"];
900--2616[label="0.0584795;10pkt 10fpkt"];
900--2753[label="0.0233918;4pkt 4fpkt"];
900--2788[label="0.0292398;5pkt 5fpkt"];
900--2814[label="0.0188679;1pkt 1fpkt"];
900--2862[label="0.0967742;3pkt 3fpkt"];
900--2996[label="0.0116959;2pkt 2fpkt"];
900--3213[label="0.0967742;3pkt 3fpkt"];
900--3254[label="0.00584795;1pkt 1fpkt"];
900--3358[label="0.0233918;4pkt 4fpkt"];
900--3367[label="0.0292398;5pkt 5fpkt"];
900--3372[label="0.0192308;1pkt 1fpkt"];
934--1852[label="0.0833333;2pkt 2fpkt"];
934--2088[label="0.0833333;2pkt 2fpkt"];
934--2248[label="0.0416667;1pkt 1fpkt"];
934--2263[label="0.0416667;1pkt 1fpkt"];
934--2270[label="0.0416667;1pkt 1fpkt"];
934--2457[label="0.333333;8pkt 8fpkt"];
934--2992[label="0.333333;8pkt 8fpkt"];
934--3254[label="0.0833333;2pkt 2fpkt"];
943--1852[label="0.2;6pkt 6fpkt"];
943--1928[label="1;25pkt 25fpkt"];
943--2258[label="0.0666667;2pkt 2fpkt"];
943--2646[label="0.1;3pkt 3fpkt"];
943--3098[label="0.1;3pkt 3fpkt"];
974--1852[label="0.446429;25pkt 25fpkt"];
1039--1202[label="0.0042735;1pkt 1fpkt"];
1039--1326[label="0.25641;40pkt 40fpkt"];
1039--1443[label="0.0954545;21pkt 21fpkt"];
1039--1871[label="1;97pkt 97fpkt"];
1039--1936[label="0.0042735;1pkt 1fpkt"];
1039--2112[label="0.25641;40pkt 40fpkt"];
1039--2220[label="0.0042735;1pkt 1fpkt"];
1039--2248[label="0.012945;4pkt 4fpkt"];
1039--2254[label="0.00970874;3pkt 3fpkt"];
1039--2258[label="0.038835;12pkt 12fpkt"];
1039--2263[label="0.012945;4pkt 4fpkt"];
1039--2270[label="0.012945;4pkt 4fpkt"];
1056--1427[label="0.04;1pkt 1fpkt"];
1056--1663[label="0.16;4pkt 4fpkt"];
1056--1852[label="0.16;4pkt 4fpkt"];
1056--2107[label="0.04;1pkt 1fpkt"];
1056--2187[label="0.16;4pkt 4fpkt"];
1056--2254[label="0.04;1pkt 1fpkt"];
1056--2258[label="0.04;1pkt 1fpkt"];
1056--2463[label="0.16;4pkt 4fpkt"];
1056--2996[label="0.16;4pkt 4fpkt"];
1159--1276[label="0.0609756;5pkt 5fpkt"];
1159--1852[label="0.390244;32pkt 32fpkt"];
1159--2096[label="0.0609756;5pkt 5fpkt"];
1159--2254[label="0.109756;9pkt 9fpkt"];
1159--2258[label="0.0487805;4pkt 4fpkt"];
1239--1373[label="0.0192308;1pkt 1fpkt"];
1239--2086[label="1;52pkt 52fpkt"];
1239--2248[label="0.461538;24pkt 24fpkt"];
1239--2254[label="0.0384615;2pkt 2fpkt"];
1239--2258[label="0.384615;20pkt 20fpkt"];
1239--2263[label="0.461538;24pkt 24fpkt"];
1239--2270[label="0.461538;24pkt 24fpkt"];
1239--2814[label="1;52pkt 52fpkt"];
1239--3372[label="0.980769;51pkt 51fpkt"];
1257--1664[label="0.0568182;5pkt 5fpkt"];
1257--1852[label="0.0681818;6pkt 6fpkt"];
1257--2248[label="0.0227273;2pkt 2fpkt"];
1257--2254[label="0.0454545;4pkt 4fpkt"];
1257--2258[label="0.102273;9pkt 9fpkt"];
1257--2263[label="0.0227273;2pkt 2fpkt"];
1257--2270[label="0.0227273;2pkt 2fpkt"];
1257--2788[label="0.0227273;2pkt 2fpkt"];
1257--3367[label="0.0227273;2pkt 2fpkt"];
1271--1852[label="0.333333;14pkt 14fpkt"];
1271--2248[label="0.0238095;1pkt 1fpkt"];
1271--2254[label="0.047619;2pkt 2fpkt"];
1271--2263[label="0.0238095;1pkt 1fpkt"];
1271--2270[label="0.0238095;1pkt 1fpkt"];
1326--1453[label="0.301282;47pkt 47fpkt"];
1326--2112[label="1;156pkt 156fpkt"];
1326--2794[label="0.945205;69pkt 69fpkt"];
1489--1852[label="0.148936;7pkt 7fpkt"];
1489--2248[label="0.0425532;2pkt 2fpkt"];
1489--2254[label="0.0425532;2pkt 2fpkt"];
1489--2258[label="0.0425532;2pkt 2fpkt"];
1489--2263[label="0.0425532;2pkt 2fpkt"];
1489--2270[label="0.0425532;2pkt 2fpkt"];
1489--2788[label="0.0212766;1pkt 1fpkt"];
1489--3367[label="0.0212766;1pkt 1fpkt"];
1528--2164[label="1;26pkt 26fpkt"];
1528--2258[label="0.269231;7pkt 7fpkt"];
1574--1656[label="0.0566038;3pkt 3fpkt"];
1574--1664[label="0.0754717;4pkt 4fpkt"];
1574--1852[label="0.0754717;4pkt 4fpkt"];
1574--2185[label="0.0566038;3pkt 3fpkt"];
1574--2248[label="0.0377358;2pkt 2fpkt"];
1574--2254[label="0.0377358;2pkt 2fpkt"];
1574--2258[label="0.0943396;5pkt 5fpkt"];
1574--2263[label="0.0377358;2pkt 2fpkt"];
1574--2270[label="0.0377358;2pkt 2fpkt"];
1574--2300[label="0.0188679;1pkt 1fpkt"];
1574--2312[label="0.0188679;1pkt 1fpkt"];
1607--1852[label="0.181818;8pkt 8fpkt"];
1607--2254[label="0.0227273;1pkt 1fpkt"];
1607--2258[label="0.0227273;1pkt 1fpkt"];
1852--1928[label="0.24;6pkt 6fpkt"];
1852--1973[label="0.283019;15pkt 15fpkt"];
1852--1978[label="0.0181818;1pkt 1fpkt"];
1852--2018[label="0.00869565;1pkt 1fpkt"];
1852--2028[label="0.673267;136pkt 136fpkt"];
1852--2050[label="0.0472441;6pkt 6fpkt"];
1852--2059[label="0.18;9pkt 9fpkt"];
1852--2094[label="0.0879121;8pkt 8fpkt"];
1852--2128[label="0.0356083;12pkt 12fpkt"];
1852--2135[label="0.0133333;1pkt 1fpkt"];
1852--2143[label="0.0860215;8pkt 8fpkt"];
1852--2241[label="0.0356083;12pkt 12fpkt"];
1852--2248[label="0.0699888;125pkt 125fpkt"];
1852--2254[label="0.0655095;117pkt 117fpkt"];
1852--2258[label="0.0789474;141pkt 141fpkt"];
1852--2263[label="0.0694289;124pkt 124fpkt"];
1852--2270[label="0.0694289;124pkt 124fpkt"];
1871--1936[label="0.0103093;1pkt 1fpkt"];
1871--2220[label="0.0103093;1pkt 1fpkt"];
1871--2248[label="0.0412371;4pkt 4fpkt"];
1871--2254[label="0.0309278;3pkt 3fpkt"];
1871--2258[label="0.0515464;5pkt 5fpkt"];
1871--2263[label="0.0412371;4pkt 4fpkt"];
1871--2270[label="0.0412371;4pkt 4fpkt"];
1928--2258[label="0.04;1pkt 1fpkt"];
1973--2107[label="0.0188679;1pkt 1fpkt"];
1973--2248[label="0.0943396;5pkt 5fpkt"];
1973--2254[label="0.0566038;3pkt 3fpkt"];
1973--2258[label="0.0188679;1pkt 1fpkt"];
1973--2263[label="0.0943396;5pkt 5fpkt"];
1973--2270[label="0.0943396;5pkt 5fpkt"];
1973--2801[label="0.0754717;4pkt 4fpkt"];
1973--3182[label="0.0754717;4pkt 4fpkt"];
2028--2107[label="0.00534759;1pkt 1fpkt"];
2028--2248[label="0.0693069;14pkt 14fpkt"];
2028--2254[label="0.0693069;14pkt 14fpkt"];
2028--2258[label="0.0891089;18pkt 18fpkt"];
2028--2263[label="0.0693069;14pkt 14fpkt"];
2028--2270[label="0.0693069;14pkt 14fpkt"];
2086--2248[label="0.461538;24pkt 24fpkt"];
2086--2254[label="0.0384615;2pkt 2fpkt"];
2086--2258[label="0.384615;20pkt 20fpkt"];
2086--2263[label="0.461538;24pkt 24fpkt"];
2086--2270[label="0.461538;24pkt 24fpkt"];
2086--2814[label="1;52pkt 52fpkt"];
2086--3372[label="0.980769;51pkt 51fpkt"];
2112--2794[label="0.945205;69pkt 69fpkt"];
2646--3098[label="1;39pkt 39fpkt"];
2814--3372[label="1;52pkt 52fpkt"];
2862--3213[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="164.15.207.14"/>
      <filter dst_port="80" src_ip="164.15.207.15"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.88.217.36"/>
      <from sec="1031547760" usec="0"/>
      <to sec="1031548032" usec="0"/>
    </slice>
    <from sec="1031547760" usec="0"/>
    <to sec="1031548032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749014,1.94966,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
567[label="141.133.201.69;d;413pkt 413fpkt", shape=diamond, color=yellow];
1932[label="209.200.29.133;s;18pkt 18fpkt", shape=hexagon, color=black];
2405[label="44.32.49.42;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2783[label="44.22.172.193;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2790[label="44.28.99.196;89pkt 89fpkt", shape=pentagon, color=darkviolet];
2974[label="44.32.49.42;15pkt 15fpkt", shape=invtriangle, color=brown];
3175[label="44.22.172.193;1pkt 1fpkt", shape=invtriangle, color=brown];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.28.99.196:80, 141.133.201.69:*}[21.2919%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5471%)&lt;BR/&gt; 88: (0.362319%)&lt;BR/&gt; 1604: (0.271739%)&lt;BR/&gt; 1395: (0.271739%)&lt;BR/&gt; 1394: (0.271739%)&gt;];
}
567--689[label="1;18pkt 18fpkt"];
567--1071[label="0.722222;13pkt 13fpkt"];
567--1292[label="0.187879;31pkt 31fpkt"];
567--1402[label="0.0652174;3pkt 3fpkt"];
567--1488[label="0.04375;7pkt 7fpkt"];
567--1790[label="1;218pkt 218fpkt"];
567--1932[label="0.722222;13pkt 13fpkt"];
567--2053[label="0.202614;31pkt 31fpkt"];
567--2255[label="0.22276;92pkt 92fpkt"];
567--2257[label="0.0266344;11pkt 11fpkt"];
567--2267[label="0.0266344;11pkt 11fpkt"];
567--2274[label="0.0266344;11pkt 11fpkt"];
567--2405[label="1;15pkt 15fpkt"];
567--2494[label="1;6pkt 6fpkt"];
567--2783[label="1;1pkt 1fpkt"];
567--2790[label="1;89pkt 89fpkt"];
567--2932[label="0.0909091;1pkt 1fpkt"];
567--2974[label="1;15pkt 15fpkt"];
567--3175[label="1;1pkt 1fpkt"];
2405--2974[label="1;15pkt 15fpkt"];
2783--3175[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.201.69" src_ip="44.28.99.196" src_port="80"/>
    </slice>
    <from sec="1031547782" usec="0"/>
    <to sec="1031548584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737329,2.04056,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
43[label="136.65.153.125s;2pkt 2fpkt", shape=rectangle, color=red];
555[label="18.126.25.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
839[label="136.65.153.125;s;7pkt 7fpkt", shape=diamond, color=yellow];
1089[label="213.149.21.83;d;3pkt 3fpkt", shape=diamond, color=yellow];
1440[label="18.141.162.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.153.125:6699, 213.149.21.83:*}[42.8571%]&lt;BR/&gt;{136.65.153.125:*, 74.150.46.82:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (42.8571%)&lt;BR/&gt; 1050: (10.7143%)&lt;BR/&gt; 1049: (10.7143%)&lt;BR/&gt; 2736: (7.14286%)&lt;BR/&gt; 1490: (7.14286%)&gt;];
}
43--839[label="1;2pkt 2fpkt"];
43--1089[label="1;2pkt 2fpkt"];
555--839[label="1;1pkt 1fpkt"];
839--1089[label="1;3pkt 3fpkt"];
839--1440[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.149.21.83" src_ip="136.65.153.125" src_port="6699"/>
      <filter dst_ip="74.150.46.82" dst_port="80" src_ip="136.65.153.125"/>
    </slice>
    <from sec="1031547684" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00087,1.95488,503,1 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
64[label="141.133.20.184s;1pkt 1fpkt", shape=rectangle, color=red];
397[label="141.133.20.184;s;878pkt 878fpkt", shape=diamond, color=yellow];
882[label="75.111.202.32;d;134pkt 134fpkt", shape=diamond, color=yellow];
1091[label="219.234.25.81;d;38pkt 38fpkt", shape=diamond, color=yellow];
1702[label="141.133.20.184;s;111pkt 111fpkt", shape=hexagon, color=black];
2753[label="141.133.20.184;953pkt 953fpkt", shape=pentagon, color=darkviolet];
2793[label="141.133.65.198;120pkt 120fpkt", shape=pentagon, color=darkviolet];
3358[label="141.133.20.184;953pkt 953fpkt", shape=invhouse, color=bisque];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.20.184:*, *:80}[77.8559%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.1731%)&lt;BR/&gt; 1863: (1.14492%)&lt;BR/&gt; 8888: (0.815558%)&lt;BR/&gt; 143: (0.392095%)&lt;BR/&gt; 1025: (0.360728%)&gt;];
}
64--397[label="1;1pkt 1fpkt"];
64--1091[label="1;1pkt 1fpkt"];
64--2753[label="1;1pkt 1fpkt"];
64--3358[label="1;1pkt 1fpkt"];
397--729[label="0.0140845;1pkt 1fpkt"];
397--876[label="0.00930233;2pkt 2fpkt"];
397--882[label="0.641791;86pkt 86fpkt"];
397--900[label="0.0233918;4pkt 4fpkt"];
397--930[label="0.0634921;4pkt 4fpkt"];
397--1069[label="0.013289;4pkt 4fpkt"];
397--1091[label="0.526316;20pkt 20fpkt"];
397--1147[label="0.00657895;1pkt 1fpkt"];
397--1285[label="0.789474;30pkt 30fpkt"];
397--1355[label="0.060241;5pkt 5fpkt"];
397--1373[label="0.0136054;2pkt 2fpkt"];
397--1493[label="0.419355;26pkt 26fpkt"];
397--1611[label="0.0266667;2pkt 2fpkt"];
397--1702[label="1;111pkt 111fpkt"];
397--2018[label="0.747826;86pkt 86fpkt"];
397--2248[label="0.0307517;27pkt 27fpkt"];
397--2254[label="0.022779;20pkt 20fpkt"];
397--2258[label="0.0615034;54pkt 54fpkt"];
397--2263[label="0.0307517;27pkt 27fpkt"];
397--2270[label="0.0307517;27pkt 27fpkt"];
397--2753[label="0.998861;877pkt 877fpkt"];
397--3358[label="0.998861;877pkt 877fpkt"];
882--917[label="0.0172414;2pkt 2fpkt"];
882--1423[label="0.0454545;4pkt 4fpkt"];
882--1568[label="0.0779221;6pkt 6fpkt"];
882--1588[label="0.00793651;1pkt 1fpkt"];
882--1702[label="0.225225;25pkt 25fpkt"];
882--1852[label="0.00746269;1pkt 1fpkt"];
882--2018[label="1;115pkt 115fpkt"];
882--2074[label="0.0223881;3pkt 3fpkt"];
882--2248[label="0.0298507;4pkt 4fpkt"];
882--2254[label="0.00746269;1pkt 1fpkt"];
882--2258[label="0.00746269;1pkt 1fpkt"];
882--2263[label="0.0298507;4pkt 4fpkt"];
882--2270[label="0.0298507;4pkt 4fpkt"];
882--2636[label="1;12pkt 12fpkt"];
882--2753[label="0.641791;86pkt 86fpkt"];
882--2788[label="0.00746269;1pkt 1fpkt"];
882--2793[label="0.0166667;2pkt 2fpkt"];
882--2904[label="0.00746269;1pkt 1fpkt"];
882--3090[label="1;13pkt 13fpkt"];
882--3235[label="0.00746269;1pkt 1fpkt"];
882--3358[label="0.641791;86pkt 86fpkt"];
882--3367[label="0.00746269;1pkt 1fpkt"];
1091--2753[label="0.526316;20pkt 20fpkt"];
1091--3358[label="0.526316;20pkt 20fpkt"];
1702--2018[label="0.225225;25pkt 25fpkt"];
1702--2248[label="0.243243;27pkt 27fpkt"];
1702--2254[label="0.18018;20pkt 20fpkt"];
1702--2258[label="0.027027;3pkt 3fpkt"];
1702--2263[label="0.243243;27pkt 27fpkt"];
1702--2270[label="0.243243;27pkt 27fpkt"];
1702--2753[label="0.990991;110pkt 110fpkt"];
1702--3358[label="0.990991;110pkt 110fpkt"];
2753--3358[label="1;953pkt 953fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="141.133.20.184"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
1103[label="192.168.128.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
1104[label="162.66.245.178;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.66.245.178:4445, 192.168.128.255:4445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4445: (100%)&gt;];
}
1103--1104[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.128.255" dst_port="4445" src_ip="162.66.245.178" src_port="4445"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="208.78.224.141"/>
      <from sec="1031547603" usec="0"/>
      <to sec="1031548605" usec="0"/>
    </slice>
    <from sec="1031547603" usec="0"/>
    <to sec="1031548605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649378,1.99623,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
1146[label="209.88.200.185;s;53pkt 53fpkt", shape=diamond, color=yellow];
2758[label="209.88.200.185;60pkt 60fpkt", shape=pentagon, color=darkviolet];
3163[label="209.88.200.185;60pkt 60fpkt", shape=invtriangle, color=brown];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.88.200.185:*, 204.105.32.132:80}[31.1475%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.4624%)&lt;BR/&gt; 1755: (8.67052%)&lt;BR/&gt; 0: (1.7341%)&lt;BR/&gt; 1724: (0.867052%)&lt;BR/&gt; 1719: (0.867052%)&gt;];
}
1146--1147[label="0.207547;11pkt 11fpkt"];
1146--2248[label="0.0377358;2pkt 2fpkt"];
1146--2254[label="0.0754717;4pkt 4fpkt"];
1146--2258[label="0.0377358;2pkt 2fpkt"];
1146--2263[label="0.0377358;2pkt 2fpkt"];
1146--2270[label="0.0377358;2pkt 2fpkt"];
1146--2758[label="0.981132;52pkt 52fpkt"];
1146--3163[label="0.981132;52pkt 52fpkt"];
2758--3163[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="204.105.32.132" dst_port="80" src_ip="209.88.200.185"/>
    </slice>
    <from sec="1031547614" usec="0"/>
    <to sec="1031548667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.522387,2.02397,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
505[label="141.133.32.216;d;4pkt 4fpkt", shape=diamond, color=yellow];
506[label="44.88.72.156;s;1pkt 1fpkt", shape=diamond, color=yellow];
1178[label="44.88.72.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
2620[label="44.88.72.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.88.72.133:5001, 141.133.32.216:61359}[25%]&lt;BR/&gt;{44.88.72.134:5001, 141.133.32.216:61360}[25%]&lt;BR/&gt;{44.88.72.154:5001, 141.133.32.216:61358}[25%]&lt;BR/&gt;{44.88.72.156:5001, 141.133.32.216:61357}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 61360: (14.2857%)&lt;BR/&gt; 61359: (14.2857%)&lt;BR/&gt; 61357: (14.2857%)&lt;BR/&gt; 61358: (7.14286%)&gt;];
}
505--506[label="1;1pkt 1fpkt"];
505--1178[label="1;1pkt 1fpkt"];
505--2620[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.32.216" dst_port="61357" src_ip="44.88.72.156" src_port="5001"/>
      <filter dst_ip="141.133.32.216" dst_port="61358" src_ip="44.88.72.154" src_port="5001"/>
      <filter dst_ip="141.133.32.216" dst_port="61360" src_ip="44.88.72.134" src_port="5001"/>
      <filter dst_ip="141.133.32.216" dst_port="61359" src_ip="44.88.72.133" src_port="5001"/>
    </slice>
    <from sec="1031547603" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="74.9.155.47"/>
      <from sec="1031548092" usec="0"/>
      <to sec="1031548217" usec="0"/>
    </slice>
    <from sec="1031548092" usec="0"/>
    <to sec="1031548217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
1208[label="220.18.130.104;s;1pkt 1fpkt", shape=diamond, color=yellow];
1209[label="141.133.73.34;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.97.97.37:1863, 141.133.73.34:1026}[50%]&lt;BR/&gt;{220.18.130.104:80, 141.133.73.34:1247}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1247: (33.3333%)&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 1026: (16.6667%)&gt;];
}
1208--1209[label="1;1pkt 1fpkt"];
1208--2255[label="1;1pkt 1fpkt"];
1209--2255[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.73.34" dst_port="1247" src_ip="220.18.130.104" src_port="80"/>
      <filter dst_ip="141.133.73.34" dst_port="1026" src_ip="75.97.97.37" src_port="1863"/>
    </slice>
    <from sec="1031548180" usec="0"/>
    <to sec="1031548352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649378,1.99623,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
707[label="209.140.161.65;d;82pkt 82fpkt", shape=diamond, color=yellow];
1211[label="215.6.208.100;s;28pkt 28fpkt", shape=diamond, color=yellow];
2465[label="44.1.122.69;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2832[label="195.3.66.216;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2997[label="44.1.122.69;14pkt 14fpkt", shape=invtriangle, color=brown];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8000, 209.140.161.65:*}[46.9027%]&lt;BR/&gt;{215.6.208.100:80, *:*}[24.7788%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (27.8571%)&lt;BR/&gt; 80: (10.7143%)&lt;BR/&gt; 1863: (5%)&lt;BR/&gt; 39461: (2.5%)&lt;BR/&gt; 32776: (2.5%)&gt;];
}
707--1211[label="0.0357143;1pkt 1fpkt"];
707--2247[label="0.0121951;1pkt 1fpkt"];
707--2266[label="0.0121951;1pkt 1fpkt"];
707--2273[label="0.0121951;1pkt 1fpkt"];
707--2465[label="0.714286;10pkt 10fpkt"];
707--2729[label="0.0731707;3pkt 3fpkt"];
707--2832[label="1;2pkt 2fpkt"];
707--2997[label="0.714286;10pkt 10fpkt"];
1211--1479[label="0.25;7pkt 7fpkt"];
1211--2247[label="0.0714286;2pkt 2fpkt"];
1211--2255[label="0.142857;4pkt 4fpkt"];
1211--2257[label="0.178571;5pkt 5fpkt"];
1211--2267[label="0.178571;5pkt 5fpkt"];
1211--2274[label="0.178571;5pkt 5fpkt"];
2465--2997[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="215.6.208.100" src_port="80"/>
      <filter dst_ip="209.140.161.65" src_port="8000"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16938,2.02742,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
269[label="153.119.164.30;s;31pkt 31fpkt", shape=diamond, color=yellow];
425[label="193.182.187.210;d;4pkt 4fpkt", shape=diamond, color=yellow];
733[label="74.35.108.231;d;1pkt 1fpkt", shape=diamond, color=yellow];
753[label="193.182.187.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
1019[label="75.64.108.95;d;1pkt 1fpkt", shape=diamond, color=yellow];
1215[label="18.67.24.82;d;1pkt 1fpkt", shape=diamond, color=yellow];
1684[label="153.119.164.30;s;31pkt 31fpkt", shape=hexagon, color=black];
1766[label="193.182.187.217;d;1pkt 1fpkt", shape=hexagon, color=black];
1904[label="74.35.108.231;d;1pkt 1fpkt", shape=hexagon, color=black];
2040[label="75.64.108.95;d;1pkt 1fpkt", shape=hexagon, color=black];
2080[label="193.182.187.210;d;4pkt 4fpkt", shape=hexagon, color=black];
2242[label="153.119.164.30;s;31pkt 31fpkt", shape=polygon, color=gold];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.119.164.30:*, *:1214}[67.7419%]&lt;BR/&gt;{153.119.164.30:1214, *:*}[32.2581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 64793: (2.31481%)&lt;BR/&gt; 3283: (2.31481%)&lt;BR/&gt; 1884: (2.31481%)&lt;BR/&gt; 1749: (2.31481%)&gt;];
}
269--425[label="1;4pkt 4fpkt"];
269--733[label="1;1pkt 1fpkt"];
269--753[label="1;1pkt 1fpkt"];
269--1019[label="1;1pkt 1fpkt"];
269--1215[label="1;1pkt 1fpkt"];
269--1684[label="1;31pkt 31fpkt"];
269--1766[label="1;1pkt 1fpkt"];
269--1904[label="1;1pkt 1fpkt"];
269--2040[label="1;1pkt 1fpkt"];
269--2080[label="1;4pkt 4fpkt"];
269--2242[label="1;31pkt 31fpkt"];
425--1684[label="1;4pkt 4fpkt"];
425--2080[label="1;4pkt 4fpkt"];
425--2242[label="1;4pkt 4fpkt"];
733--1684[label="1;1pkt 1fpkt"];
733--1904[label="1;1pkt 1fpkt"];
733--2242[label="1;1pkt 1fpkt"];
753--1684[label="1;1pkt 1fpkt"];
753--1766[label="1;1pkt 1fpkt"];
753--2242[label="1;1pkt 1fpkt"];
1019--1684[label="1;1pkt 1fpkt"];
1019--2040[label="1;1pkt 1fpkt"];
1019--2242[label="1;1pkt 1fpkt"];
1215--1684[label="1;1pkt 1fpkt"];
1215--2242[label="1;1pkt 1fpkt"];
1684--1766[label="1;1pkt 1fpkt"];
1684--1904[label="1;1pkt 1fpkt"];
1684--2040[label="1;1pkt 1fpkt"];
1684--2080[label="1;4pkt 4fpkt"];
1684--2242[label="1;31pkt 31fpkt"];
1766--2242[label="1;1pkt 1fpkt"];
1904--2242[label="1;1pkt 1fpkt"];
2040--2242[label="1;1pkt 1fpkt"];
2080--2242[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="153.119.164.30" src_port="1214"/>
      <filter dst_port="1214" src_ip="153.119.164.30"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
644[label="158.17.38.139;s;29pkt 29fpkt", shape=diamond, color=yellow];
1912[label="136.65.6.211;d;73pkt 73fpkt", shape=hexagon, color=black];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.17.38.139:80, 136.65.6.211:*}[39.726%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.5882%)&lt;BR/&gt; 81: (2.94118%)&lt;BR/&gt; 1863: (1.47059%)&lt;BR/&gt; 3763: (0.980392%)&lt;BR/&gt; 3762: (0.980392%)&gt;];
}
644--782[label="1;29pkt 29fpkt"];
644--1912[label="1;29pkt 29fpkt"];
1912--2247[label="0.0958904;7pkt 7fpkt"];
1912--2729[label="0.0243902;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.6.211" src_ip="158.17.38.139" src_port="80"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
645[label="141.133.199.18;s;347pkt 347fpkt", shape=diamond, color=yellow];
778[label="219.43.168.97;d;67pkt 67fpkt", shape=diamond, color=yellow];
1582[label="209.170.122.141;s;176pkt 176fpkt", shape=diamond, color=yellow];
1596[label="164.15.193.118;s;124pkt 124fpkt", shape=diamond, color=yellow];
1777[label="141.133.199.18;s;248pkt 248fpkt", shape=hexagon, color=black];
2145[label="72.105.61.206;d;53pkt 53fpkt", shape=hexagon, color=black];
2363[label="136.65.133.28;84pkt 84fpkt", shape=pentagon, color=darkviolet];
2403[label="164.15.14.42;197pkt 197fpkt", shape=pentagon, color=darkviolet];
2611[label="136.65.192.129;63pkt 63fpkt", shape=pentagon, color=darkviolet];
2972[label="164.15.14.42;198pkt 198fpkt", shape=invtriangle, color=brown];
3077[label="136.65.192.129;62pkt 62fpkt", shape=invtriangle, color=brown];
3316[label="136.65.192.129;63pkt 63fpkt", shape=invhouse, color=bisque];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.199.18:54039, *:53}[24.8413%]&lt;BR/&gt;{*:53, *:*}[23.9347%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.1272%)&lt;BR/&gt; 54039: (14.4768%)&lt;BR/&gt; 3840: (5.17241%)&lt;BR/&gt; 41199: (4.4887%)&lt;BR/&gt; 1024: (2.94293%)&gt;];
}
645--778[label="0.0149254;1pkt 1fpkt"];
645--1012[label="0.0172414;1pkt 1fpkt"];
645--1127[label="0.0227273;1pkt 1fpkt"];
645--1228[label="0.0419355;13pkt 13fpkt"];
645--1375[label="0.0147059;1pkt 1fpkt"];
645--1570[label="0.0133333;1pkt 1fpkt"];
645--1575[label="0.0188679;1pkt 1fpkt"];
645--1624[label="0.047619;1pkt 1fpkt"];
645--1649[label="0.0322581;1pkt 1fpkt"];
645--1777[label="1;248pkt 248fpkt"];
645--1860[label="0.0149254;1pkt 1fpkt"];
645--2041[label="0.0169492;1pkt 1fpkt"];
645--2145[label="0.0188679;1pkt 1fpkt"];
645--2253[label="0.146974;51pkt 51fpkt"];
645--2256[label="0.178674;62pkt 62fpkt"];
645--2260[label="0.00288184;1pkt 1fpkt"];
645--2266[label="0.0230548;8pkt 8fpkt"];
645--2273[label="0.0230548;8pkt 8fpkt"];
778--788[label="0.0149254;1pkt 1fpkt"];
778--897[label="0.0149254;1pkt 1fpkt"];
778--989[label="0.0149254;1pkt 1fpkt"];
778--991[label="0.0149254;1pkt 1fpkt"];
778--1097[label="0.0149254;1pkt 1fpkt"];
778--1264[label="0.0149254;1pkt 1fpkt"];
778--1272[label="0.0149254;1pkt 1fpkt"];
778--1582[label="0.0149254;1pkt 1fpkt"];
778--1596[label="0.0149254;1pkt 1fpkt"];
778--1686[label="0.0149254;1pkt 1fpkt"];
778--1777[label="0.0149254;1pkt 1fpkt"];
778--1860[label="1;67pkt 67fpkt"];
778--1864[label="0.0149254;1pkt 1fpkt"];
778--1892[label="0.0447761;3pkt 3fpkt"];
778--1913[label="0.0149254;1pkt 1fpkt"];
778--2011[label="0.0447761;3pkt 3fpkt"];
778--2019[label="0.0149254;1pkt 1fpkt"];
778--2206[label="0.0149254;1pkt 1fpkt"];
778--2251[label="0.0149254;1pkt 1fpkt"];
778--2253[label="0.179104;12pkt 12fpkt"];
778--2256[label="0.253731;17pkt 17fpkt"];
778--2260[label="0.0149254;1pkt 1fpkt"];
778--2266[label="0.0149254;1pkt 1fpkt"];
778--2273[label="0.0149254;1pkt 1fpkt"];
778--2363[label="0.0149254;1pkt 1fpkt"];
778--2387[label="0.142857;1pkt 1fpkt"];
778--2403[label="0.0149254;1pkt 1fpkt"];
778--2478[label="0.0149254;1pkt 1fpkt"];
778--2504[label="0.0149254;1pkt 1fpkt"];
778--2568[label="0.025;1pkt 1fpkt"];
778--2611[label="0.015873;1pkt 1fpkt"];
778--2640[label="0.0769231;1pkt 1fpkt"];
778--2972[label="0.0149254;1pkt 1fpkt"];
778--3004[label="0.0149254;1pkt 1fpkt"];
778--3053[label="0.0243902;1pkt 1fpkt"];
778--3077[label="0.016129;1pkt 1fpkt"];
778--3092[label="0.0769231;1pkt 1fpkt"];
778--3287[label="0.0149254;1pkt 1fpkt"];
778--3308[label="0.0243902;1pkt 1fpkt"];
778--3316[label="0.015873;1pkt 1fpkt"];
778--3326[label="0.0769231;1pkt 1fpkt"];
1582--1860[label="0.0149254;1pkt 1fpkt"];
1582--2041[label="0.0169492;1pkt 1fpkt"];
1582--2145[label="0.0188679;1pkt 1fpkt"];
1582--2253[label="0.0454545;8pkt 8fpkt"];
1582--2256[label="0.147727;26pkt 26fpkt"];
1582--2266[label="0.00568182;1pkt 1fpkt"];
1582--2273[label="0.00568182;1pkt 1fpkt"];
1596--1860[label="0.0149254;1pkt 1fpkt"];
1596--2041[label="0.0169492;1pkt 1fpkt"];
1596--2253[label="0.0564516;7pkt 7fpkt"];
1596--2256[label="0.0483871;6pkt 6fpkt"];
1777--1860[label="0.0149254;1pkt 1fpkt"];
1777--2041[label="0.0169492;1pkt 1fpkt"];
1777--2145[label="0.0188679;1pkt 1fpkt"];
1777--2253[label="0.205645;51pkt 51fpkt"];
1777--2256[label="0.25;62pkt 62fpkt"];
1777--2266[label="0.016129;4pkt 4fpkt"];
1777--2273[label="0.016129;4pkt 4fpkt"];
2145--2187[label="0.0188679;1pkt 1fpkt"];
2145--2206[label="0.0188679;1pkt 1fpkt"];
2145--2236[label="0.0377358;2pkt 2fpkt"];
2145--2251[label="0.0188679;1pkt 1fpkt"];
2145--2253[label="0.245283;13pkt 13fpkt"];
2145--2256[label="0.415094;22pkt 22fpkt"];
2145--2260[label="0.0377358;2pkt 2fpkt"];
2145--2266[label="0.0377358;2pkt 2fpkt"];
2145--2273[label="0.0377358;2pkt 2fpkt"];
2145--2312[label="0.0188679;1pkt 1fpkt"];
2145--2339[label="0.25;1pkt 1fpkt"];
2145--2348[label="0.0377358;2pkt 2fpkt"];
2145--2371[label="0.0188679;1pkt 1fpkt"];
2145--2383[label="0.0188679;1pkt 1fpkt"];
2145--2396[label="0.0188679;1pkt 1fpkt"];
2145--2457[label="0.0943396;5pkt 5fpkt"];
2145--2463[label="0.0188679;1pkt 1fpkt"];
2145--2478[label="0.0188679;1pkt 1fpkt"];
2145--2504[label="0.0188679;1pkt 1fpkt"];
2145--2554[label="0.0188679;1pkt 1fpkt"];
2145--2611[label="0.0188679;1pkt 1fpkt"];
2145--2965[label="0.0188679;1pkt 1fpkt"];
2145--2992[label="0.0943396;5pkt 5fpkt"];
2145--2996[label="0.0188679;1pkt 1fpkt"];
2145--3004[label="0.0188679;1pkt 1fpkt"];
2145--3046[label="0.0188679;1pkt 1fpkt"];
2145--3077[label="0.0188679;1pkt 1fpkt"];
2145--3287[label="0.0188679;1pkt 1fpkt"];
2145--3316[label="0.0188679;1pkt 1fpkt"];
2403--2972[label="1;197pkt 197fpkt"];
2611--3077[label="1;62pkt 62fpkt"];
2611--3316[label="1;63pkt 63fpkt"];
3077--3316[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter src_port="53"/>
      <filter dst_port="53" src_ip="141.133.199.18" src_port="54039"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="141.133.156.10"/>
      <from sec="1031547601" usec="0"/>
      <to sec="1031548608" usec="0"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
1172[label="46.47.143.195;d;25pkt 25fpkt", shape=diamond, color=yellow];
1245[label="208.78.231.223;s;94pkt 94fpkt", shape=diamond, color=yellow];
1258[label="209.88.197.118;s;140pkt 140fpkt", shape=diamond, color=yellow];
1981[label="209.88.197.118;s;103pkt 103fpkt", shape=hexagon, color=black];
2592[label="209.88.197.119;51pkt 51fpkt", shape=pentagon, color=darkviolet];
3070[label="209.88.197.119;51pkt 51fpkt", shape=invtriangle, color=brown];
3313[label="209.88.197.119;52pkt 52fpkt", shape=invhouse, color=bisque];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.78.231.223:0, *:0}[30.5195%]&lt;BR/&gt;{209.88.197.118:*, *:8888}[26.2987%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (18.4109%)&lt;BR/&gt; 80: (14.6318%)&lt;BR/&gt; 8888: (13.5659%)&lt;BR/&gt; 1433: (2.81008%)&lt;BR/&gt; 7777: (2.13178%)&gt;];
}
1172--1245[label="0.04;1pkt 1fpkt"];
1172--1258[label="0.04;1pkt 1fpkt"];
1172--1981[label="0.04;1pkt 1fpkt"];
1172--2592[label="0.04;1pkt 1fpkt"];
1172--3070[label="0.04;1pkt 1fpkt"];
1172--3313[label="0.04;1pkt 1fpkt"];
1258--1981[label="1;103pkt 103fpkt"];
2592--3070[label="1;51pkt 51fpkt"];
2592--3313[label="1;51pkt 51fpkt"];
3070--3313[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="209.88.197.118"/>
      <filter src_ip="208.78.231.223"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826429,1.99503,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
73[label="213.73.71.224s;3pkt 3fpkt", shape=rectangle, color=red];
97[label="209.88.202.97d;1pkt 1fpkt", shape=rectangle, color=red];
108[label="136.65.244.152d;1pkt 1fpkt", shape=rectangle, color=red];
695[label="213.73.71.224;s;13pkt 13fpkt", shape=diamond, color=yellow];
1187[label="136.65.53.14;d;11pkt 11fpkt", shape=diamond, color=yellow];
1319[label="209.88.202.97;d;11pkt 11fpkt", shape=diamond, color=yellow];
1441[label="136.65.244.152;d;7pkt 7fpkt", shape=diamond, color=yellow];
1879[label="141.133.201.11;d;16pkt 16fpkt", shape=hexagon, color=black];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 141.133.201.11:*}[28.3019%]&lt;BR/&gt;{213.73.71.224:80, *:*}[24.5283%]&lt;BR/&gt;{*:*, 136.65.53.14:*}[20.7547%]&lt;BR/&gt;{*:*, 209.88.202.97:*}[20.7547%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.619%)&lt;BR/&gt; 1045: (3.96825%)&lt;BR/&gt; 2238: (3.1746%)&lt;BR/&gt; 1065: (2.38095%)&lt;BR/&gt; 1063: (2.38095%)&gt;];
}
73--97[label="1;1pkt 1fpkt"];
73--108[label="1;1pkt 1fpkt"];
73--695[label="1;3pkt 3fpkt"];
73--1187[label="0.333333;1pkt 1fpkt"];
73--1319[label="0.333333;1pkt 1fpkt"];
73--1441[label="0.333333;1pkt 1fpkt"];
73--2255[label="0.333333;1pkt 1fpkt"];
73--2257[label="0.666667;2pkt 2fpkt"];
73--2267[label="0.666667;2pkt 2fpkt"];
73--2274[label="0.666667;2pkt 2fpkt"];
97--695[label="1;1pkt 1fpkt"];
97--1319[label="1;1pkt 1fpkt"];
97--2257[label="1;1pkt 1fpkt"];
97--2267[label="1;1pkt 1fpkt"];
97--2274[label="1;1pkt 1fpkt"];
108--695[label="1;1pkt 1fpkt"];
108--1441[label="1;1pkt 1fpkt"];
108--2257[label="1;1pkt 1fpkt"];
108--2267[label="1;1pkt 1fpkt"];
108--2274[label="1;1pkt 1fpkt"];
695--698[label="0.0769231;1pkt 1fpkt"];
695--841[label="0.166667;1pkt 1fpkt"];
695--1187[label="0.0909091;1pkt 1fpkt"];
695--1319[label="0.0909091;1pkt 1fpkt"];
695--1441[label="0.285714;2pkt 2fpkt"];
695--1879[label="0.0769231;1pkt 1fpkt"];
695--1880[label="0.166667;1pkt 1fpkt"];
695--2216[label="0.166667;1pkt 1fpkt"];
695--2255[label="0.153846;2pkt 2fpkt"];
695--2257[label="0.307692;4pkt 4fpkt"];
695--2267[label="0.307692;4pkt 4fpkt"];
695--2274[label="0.307692;4pkt 4fpkt"];
1187--2255[label="0.272727;3pkt 3fpkt"];
1187--2257[label="0.0909091;1pkt 1fpkt"];
1187--2267[label="0.0909091;1pkt 1fpkt"];
1187--2274[label="0.0909091;1pkt 1fpkt"];
1187--2798[label="0.363636;4pkt 4fpkt"];
1187--3179[label="0.363636;4pkt 4fpkt"];
1319--2255[label="0.454545;5pkt 5fpkt"];
1319--2257[label="0.272727;3pkt 3fpkt"];
1319--2267[label="0.272727;3pkt 3fpkt"];
1319--2274[label="0.272727;3pkt 3fpkt"];
1319--2798[label="0.272727;3pkt 3fpkt"];
1319--3179[label="0.272727;3pkt 3fpkt"];
1441--2257[label="0.714286;5pkt 5fpkt"];
1441--2267[label="0.714286;5pkt 5fpkt"];
1441--2274[label="0.714286;5pkt 5fpkt"];
1879--2155[label="0.4375;7pkt 7fpkt"];
1879--2255[label="0.0625;1pkt 1fpkt"];
1879--3133[label="0.0625;1pkt 1fpkt"];
1879--3345[label="0.0625;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.88.202.97"/>
      <filter dst_ip="136.65.53.14"/>
      <filter src_ip="213.73.71.224" src_port="80"/>
      <filter dst_ip="141.133.201.11" src_port="80"/>
    </slice>
    <from sec="1031547703" usec="0"/>
    <to sec="1031548657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00559,1.97327,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
126[label="213.73.71.224d;2pkt 2fpkt", shape=rectangle, color=red];
694[label="213.73.71.224;d;12pkt 12fpkt", shape=diamond, color=yellow];
842[label="209.88.13.86;s;7pkt 7fpkt", shape=diamond, color=yellow];
1320[label="209.88.202.97;s;9pkt 9fpkt", shape=diamond, color=yellow];
1621[label="136.65.244.152;s;45pkt 45fpkt", shape=diamond, color=yellow];
2521[label="209.88.13.86;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2677[label="136.65.244.152;44pkt 44fpkt", shape=pentagon, color=darkviolet];
3116[label="136.65.244.152;44pkt 44fpkt", shape=invtriangle, color=brown];
3334[label="136.65.244.152;44pkt 44fpkt", shape=invhouse, color=bisque];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.244.152:*, 214.80.80.140:80}[25.3521%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7685%)&lt;BR/&gt; 2238: (1.38889%)&lt;BR/&gt; 2237: (1.15741%)&lt;BR/&gt; 2235: (0.925926%)&lt;BR/&gt; 2234: (0.925926%)&gt;];
}
126--694[label="1;2pkt 2fpkt"];
126--1320[label="0.5;1pkt 1fpkt"];
126--1621[label="0.5;1pkt 1fpkt"];
126--2258[label="1;2pkt 2fpkt"];
126--2677[label="0.5;1pkt 1fpkt"];
126--3116[label="0.5;1pkt 1fpkt"];
126--3334[label="0.5;1pkt 1fpkt"];
694--842[label="0.142857;1pkt 1fpkt"];
694--1086[label="0.1;1pkt 1fpkt"];
694--1320[label="0.111111;1pkt 1fpkt"];
694--1621[label="0.166667;2pkt 2fpkt"];
694--2011[label="0.166667;2pkt 2fpkt"];
694--2061[label="0.1;1pkt 1fpkt"];
694--2258[label="0.416667;5pkt 5fpkt"];
694--2319[label="0.0833333;1pkt 1fpkt"];
694--2521[label="0.111111;1pkt 1fpkt"];
694--2677[label="0.166667;2pkt 2fpkt"];
694--2788[label="0.0833333;1pkt 1fpkt"];
694--2927[label="0.0833333;1pkt 1fpkt"];
694--3116[label="0.166667;2pkt 2fpkt"];
694--3248[label="0.0833333;1pkt 1fpkt"];
694--3334[label="0.166667;2pkt 2fpkt"];
694--3367[label="0.0833333;1pkt 1fpkt"];
842--2521[label="1;7pkt 7fpkt"];
1320--2258[label="0.111111;1pkt 1fpkt"];
1621--2258[label="0.0666667;3pkt 3fpkt"];
1621--2677[label="1;44pkt 44fpkt"];
1621--3116[label="1;44pkt 44fpkt"];
1621--3334[label="1;44pkt 44fpkt"];
2677--3116[label="1;44pkt 44fpkt"];
2677--3334[label="1;44pkt 44fpkt"];
3116--3334[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="214.80.80.140" dst_port="80" src_ip="136.65.244.152"/>
    </slice>
    <from sec="1031547712" usec="0"/>
    <to sec="1031548657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.522387,2.02397,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
1206[label="162.73.153.198;s;74pkt 74fpkt", shape=diamond, color=yellow];
2794[label="162.73.153.198;73pkt 73fpkt", shape=pentagon, color=darkviolet];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.153.198:*, 140.121.5.24:80}[93.2432%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3998: (0.680272%)&lt;BR/&gt; 3997: (0.680272%)&lt;BR/&gt; 3996: (0.680272%)&lt;BR/&gt; 3995: (0.680272%)&gt;];
}
1206--1326[label="0.932432;69pkt 69fpkt"];
1206--1443[label="0.0135135;1pkt 1fpkt"];
1206--2112[label="0.932432;69pkt 69fpkt"];
1206--2794[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="140.121.5.24" dst_port="80" src_ip="162.73.153.198"/>
    </slice>
    <from sec="1031548178" usec="0"/>
    <to sec="1031548411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.522387,2.02397,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
1246[label="136.65.110.37;s;12pkt 12fpkt", shape=diamond, color=yellow];
2392[label="136.65.110.37;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.110.37:53, *:*}[41.1765%]&lt;BR/&gt;{136.65.110.37:32769, *:53}[35.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (37.5%)&lt;BR/&gt; 32769: (19.6429%)&lt;BR/&gt; 80: (10.7143%)&lt;BR/&gt; 1024: (5.35714%)&lt;BR/&gt; 30903: (3.57143%)&gt;];
}
1246--1331[label="1;1pkt 1fpkt"];
1246--2247[label="0.166667;2pkt 2fpkt"];
1246--2257[label="0.0833333;1pkt 1fpkt"];
1246--2267[label="0.0833333;1pkt 1fpkt"];
1246--2274[label="0.0833333;1pkt 1fpkt"];
1246--2392[label="0.916667;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="136.65.110.37" src_port="53"/>
      <filter dst_port="53" src_ip="136.65.110.37" src_port="32769"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
1314[label="141.133.116.118;s;44pkt 44fpkt", shape=diamond, color=yellow];
1342[label="75.21.38.96;d;28pkt 28fpkt", shape=diamond, color=yellow];
2004[label="141.133.116.118;s;44pkt 44fpkt", shape=hexagon, color=black];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.116.118:*, 75.21.38.96:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1379%)&lt;BR/&gt; 1083: (1.72414%)&lt;BR/&gt; 1162: (1.2931%)&lt;BR/&gt; 1161: (1.2931%)&lt;BR/&gt; 1160: (1.2931%)&gt;];
}
1314--1342[label="0.642857;18pkt 18fpkt"];
1314--2004[label="1;44pkt 44fpkt"];
1314--2258[label="0.0909091;4pkt 4fpkt"];
1342--2004[label="0.642857;18pkt 18fpkt"];
2004--2258[label="0.0909091;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="75.21.38.96" dst_port="80" src_ip="141.133.116.118"/>
    </slice>
    <from sec="1031548086" usec="0"/>
    <to sec="1031548417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826429,1.99503,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
9[label="194.213.23.31s;1pkt 1fpkt", shape=rectangle, color=red];
1346[label="141.133.104.175;d;3pkt 3fpkt", shape=diamond, color=yellow];
1347[label="194.213.23.31;s;3pkt 3fpkt", shape=diamond, color=yellow];
2069[label="141.133.104.175;d;3pkt 3fpkt", shape=hexagon, color=black];
2070[label="194.213.23.31;s;3pkt 3fpkt", shape=hexagon, color=black];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.213.23.31:113, 141.133.104.175:2307}[33.3333%]&lt;BR/&gt;{194.213.23.31:1052, 141.133.104.175:25}[33.3333%]&lt;BR/&gt;{194.213.23.31:1053, 141.133.104.175:110}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1052: (19.2308%)&lt;BR/&gt; 25: (19.2308%)&lt;BR/&gt; 2307: (15.3846%)&lt;BR/&gt; 1053: (15.3846%)&lt;BR/&gt; 113: (15.3846%)&gt;];
}
9--1346[label="1;1pkt 1fpkt"];
9--1347[label="1;1pkt 1fpkt"];
9--2069[label="1;1pkt 1fpkt"];
9--2070[label="1;1pkt 1fpkt"];
1346--1347[label="1;3pkt 3fpkt"];
1346--2069[label="1;3pkt 3fpkt"];
1346--2070[label="1;3pkt 3fpkt"];
1347--2069[label="1;3pkt 3fpkt"];
1347--2070[label="1;3pkt 3fpkt"];
2069--2070[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.104.175" dst_port="110" src_ip="194.213.23.31" src_port="1053"/>
      <filter dst_ip="141.133.104.175" dst_port="25" src_ip="194.213.23.31" src_port="1052"/>
      <filter dst_ip="141.133.104.175" dst_port="2307" src_ip="194.213.23.31" src_port="113"/>
    </slice>
    <from sec="1031548297" usec="0"/>
    <to sec="1031548389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851534,2.00135,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
348[label="141.133.239.218;d;487pkt 487fpkt", shape=diamond, color=yellow];
1191[label="205.187.105.203;s;8pkt 8fpkt", shape=diamond, color=yellow];
2327[label="205.7.218.14;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2385[label="205.7.218.36;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2674[label="205.45.61.152;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2759[label="205.161.27.186;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2933[label="205.7.218.14;24pkt 24fpkt", shape=invtriangle, color=brown];
3113[label="205.45.61.152;4pkt 4fpkt", shape=invtriangle, color=brown];
3164[label="205.161.27.186;14pkt 14fpkt", shape=invtriangle, color=brown];
3360[label="205.161.27.186;13pkt 13fpkt", shape=invhouse, color=bisque];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.7.161.81:80, 141.133.239.218:*}[30.7847%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4108%)&lt;BR/&gt; 6006: (0.3367%)&lt;BR/&gt; 1569: (0.3367%)&lt;BR/&gt; 1560: (0.3367%)&lt;BR/&gt; 1509: (0.3367%)&gt;];
}
348--491[label="0.276316;21pkt 21fpkt"];
348--931[label="0.0983607;6pkt 6fpkt"];
348--1037[label="0.224771;49pkt 49fpkt"];
348--1191[label="1;8pkt 8fpkt"];
348--1352[label="0.0804598;14pkt 14fpkt"];
348--1446[label="0.946903;107pkt 107fpkt"];
348--1968[label="0.276316;21pkt 21fpkt"];
348--2013[label="0.0804598;14pkt 14fpkt"];
348--2068[label="0.954545;105pkt 105fpkt"];
348--2247[label="0.0246407;12pkt 12fpkt"];
348--2255[label="0.00821355;4pkt 4fpkt"];
348--2257[label="0.246407;120pkt 120fpkt"];
348--2267[label="0.246407;120pkt 120fpkt"];
348--2274[label="0.246407;120pkt 120fpkt"];
348--2305[label="0.0857143;6pkt 6fpkt"];
348--2327[label="0.708333;17pkt 17fpkt"];
348--2385[label="1;3pkt 3fpkt"];
348--2414[label="0.269231;21pkt 21fpkt"];
348--2506[label="0.944444;153pkt 153fpkt"];
348--2674[label="0.25;1pkt 1fpkt"];
348--2690[label="0.222749;47pkt 47fpkt"];
348--2759[label="1;13pkt 13fpkt"];
348--2920[label="0.0857143;6pkt 6fpkt"];
348--2933[label="0.708333;17pkt 17fpkt"];
348--3018[label="0.944444;153pkt 153fpkt"];
348--3113[label="0.25;1pkt 1fpkt"];
348--3164[label="1;14pkt 14fpkt"];
348--3360[label="1;13pkt 13fpkt"];
1191--2255[label="0.5;4pkt 4fpkt"];
1191--2257[label="0.25;2pkt 2fpkt"];
1191--2267[label="0.25;2pkt 2fpkt"];
1191--2274[label="0.25;2pkt 2fpkt"];
2327--2933[label="1;24pkt 24fpkt"];
2674--3113[label="1;4pkt 4fpkt"];
2759--3164[label="1;13pkt 13fpkt"];
2759--3360[label="1;13pkt 13fpkt"];
3164--3360[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.239.218" src_ip="205.7.161.81" src_port="80"/>
    </slice>
    <from sec="1031547605" usec="0"/>
    <to sec="1031548672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649378,1.99623,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
498[label="136.65.6.211;s;124pkt 124fpkt", shape=diamond, color=yellow];
511[label="158.17.38.139;d;79pkt 79fpkt", shape=diamond, color=yellow];
2824[label="136.65.6.211;85pkt 85fpkt", shape=pentagon, color=darkviolet];
3191[label="136.65.6.211;85pkt 85fpkt", shape=invtriangle, color=brown];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.6.211:*, 158.17.38.139:80}[63.7097%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4531%)&lt;BR/&gt; 81: (1.34048%)&lt;BR/&gt; 1863: (1.20643%)&lt;BR/&gt; 3763: (0.536193%)&lt;BR/&gt; 3762: (0.536193%)&gt;];
}
498--511[label="1;79pkt 79fpkt"];
498--1355[label="0.0722892;6pkt 6fpkt"];
498--2248[label="0.233871;29pkt 29fpkt"];
498--2254[label="0.0806452;10pkt 10fpkt"];
498--2263[label="0.233871;29pkt 29fpkt"];
498--2270[label="0.233871;29pkt 29fpkt"];
498--2824[label="1;85pkt 85fpkt"];
498--3191[label="1;85pkt 85fpkt"];
511--2248[label="0.265823;21pkt 21fpkt"];
511--2254[label="0.0759494;6pkt 6fpkt"];
511--2263[label="0.265823;21pkt 21fpkt"];
511--2270[label="0.265823;21pkt 21fpkt"];
511--2824[label="0.696203;55pkt 55fpkt"];
511--3191[label="0.696203;55pkt 55fpkt"];
2824--3191[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="158.17.38.139" dst_port="80" src_ip="136.65.6.211"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
289[label="162.73.153.72;s;4pkt 4fpkt", shape=diamond, color=yellow];
290[label="75.222.249.120;d;1pkt 1fpkt", shape=diamond, color=yellow];
481[label="18.175.72.227;d;1pkt 1fpkt", shape=diamond, color=yellow];
756[label="192.134.184.102;d;1pkt 1fpkt", shape=diamond, color=yellow];
1367[label="18.246.23.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.153.72:4584, 192.134.184.102:6699}[25%]&lt;BR/&gt;{162.73.153.72:4586, 75.222.249.120:6699}[25%]&lt;BR/&gt;{162.73.153.72:4601, 18.246.23.196:6699}[25%]&lt;BR/&gt;{162.73.153.72:4604, 18.175.72.227:6699}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 4604: (12.5%)&lt;BR/&gt; 4601: (12.5%)&lt;BR/&gt; 4586: (12.5%)&lt;BR/&gt; 4584: (12.5%)&gt;];
}
289--290[label="1;1pkt 1fpkt"];
289--481[label="1;1pkt 1fpkt"];
289--756[label="1;1pkt 1fpkt"];
289--1367[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="18.175.72.227" dst_port="6699" src_ip="162.73.153.72" src_port="4604"/>
      <filter dst_ip="18.246.23.196" dst_port="6699" src_ip="162.73.153.72" src_port="4601"/>
      <filter dst_ip="75.222.249.120" dst_port="6699" src_ip="162.73.153.72" src_port="4586"/>
      <filter dst_ip="192.134.184.102" dst_port="6699" src_ip="162.73.153.72" src_port="4584"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
721[label="164.15.194.128;s;122pkt 122fpkt", shape=diamond, color=yellow];
886[label="193.23.34.65;d;104pkt 104fpkt", shape=diamond, color=yellow];
1371[label="74.68.165.189;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.15.194.128:*, 193.23.34.65:21}[84.5528%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (45.614%)&lt;BR/&gt; 25: (2.41228%)&lt;BR/&gt; 6667: (0.657895%)&lt;BR/&gt; 5190: (0.657895%)&lt;BR/&gt; 80: (0.657895%)&gt;];
}
721--886[label="1;104pkt 104fpkt"];
721--1371[label="0.5;1pkt 1fpkt"];
721--1417[label="0.047619;1pkt 1fpkt"];
721--2252[label="0.0409836;5pkt 5fpkt"];
886--2252[label="0.0480769;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="193.23.34.65" dst_port="21" src_ip="164.15.194.128"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737329,2.04056,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
111[label="212.160.10.162d;1pkt 1fpkt", shape=rectangle, color=red];
1384[label="164.15.210.204;s;85pkt 85fpkt", shape=diamond, color=yellow];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.15.210.204:*, 212.160.10.168:25}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.186%)&lt;BR/&gt; 5190: (2.90698%)&lt;BR/&gt; 53: (2.90698%)&lt;BR/&gt; 41410: (1.16279%)&lt;BR/&gt; 110: (1.16279%)&gt;];
}
111--1384[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.160.10.168" dst_port="25" src_ip="164.15.210.204"/>
    </slice>
    <from sec="1031547603" usec="0"/>
    <to sec="1031548601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737329,2.04056,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
6[label="151.244.168.15s;1pkt 1fpkt", shape=rectangle, color=red];
1419[label="214.81.59.57;d;17pkt 17fpkt", shape=diamond, color=yellow];
1420[label="151.244.168.15;s;17pkt 17fpkt", shape=diamond, color=yellow];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.168.15:*, 214.81.59.57:80}[64.7059%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.8571%)&lt;BR/&gt; 21: (5.71429%)&lt;BR/&gt; 1053: (4.28571%)&lt;BR/&gt; 57867: (2.85714%)&lt;BR/&gt; 57866: (2.85714%)&gt;];
}
6--1419[label="1;1pkt 1fpkt"];
6--1420[label="1;1pkt 1fpkt"];
1419--1420[label="1;17pkt 17fpkt"];
1419--2258[label="0.294118;5pkt 5fpkt"];
1420--2258[label="0.294118;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="214.81.59.57" dst_port="80" src_ip="151.244.168.15"/>
    </slice>
    <from sec="1031547958" usec="0"/>
    <to sec="1031548603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826429,1.99503,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
25[label="213.149.21.83s;1pkt 1fpkt", shape=rectangle, color=red];
1053[label="136.65.153.125;d;12pkt 12fpkt", shape=diamond, color=yellow];
1324[label="18.141.162.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
1429[label="213.149.21.83;s;3pkt 3fpkt", shape=diamond, color=yellow];
2109[label="213.149.21.83;s;3pkt 3fpkt", shape=hexagon, color=black];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.80.51.55:80, 136.65.153.125:*}[41.6667%]&lt;BR/&gt;{213.149.21.83:*, 136.65.153.125:6699}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (35%)&lt;BR/&gt; 80: (15%)&lt;BR/&gt; 1050: (10%)&lt;BR/&gt; 1049: (7.5%)&lt;BR/&gt; 1048: (7.5%)&gt;];
}
25--1053[label="1;1pkt 1fpkt"];
25--1429[label="1;1pkt 1fpkt"];
25--2109[label="1;1pkt 1fpkt"];
1053--1324[label="1;1pkt 1fpkt"];
1053--1429[label="1;3pkt 3fpkt"];
1053--1770[label="0.0833333;1pkt 1fpkt"];
1053--1962[label="0.166667;2pkt 2fpkt"];
1053--2109[label="1;3pkt 3fpkt"];
1053--2257[label="0.0833333;1pkt 1fpkt"];
1053--2267[label="0.0833333;1pkt 1fpkt"];
1053--2274[label="0.0833333;1pkt 1fpkt"];
1053--3277[label="0.416667;5pkt 5fpkt"];
1429--2109[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.153.125" src_ip="193.80.51.55" src_port="80"/>
      <filter dst_ip="136.65.153.125" dst_port="6699" src_ip="213.149.21.83"/>
    </slice>
    <from sec="1031547684" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737329,2.04056,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
28[label="162.73.87.87s;1pkt 1fpkt", shape=rectangle, color=red];
1473[label="162.73.87.87;s;4pkt 4fpkt", shape=diamond, color=yellow];
1474[label="201.36.1.164;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.87.87:3405, 201.36.1.78:80}[25%]&lt;BR/&gt;{162.73.87.87:3406, 201.36.1.164:80}[25%]&lt;BR/&gt;{162.73.87.87:3407, 201.36.1.164:80}[25%]&lt;BR/&gt;{162.73.87.87:3411, 201.36.1.164:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3407: (21.4286%)&lt;BR/&gt; 3406: (14.2857%)&lt;BR/&gt; 3411: (7.14286%)&lt;BR/&gt; 3405: (7.14286%)&gt;];
}
28--1473[label="1;1pkt 1fpkt"];
28--1474[label="1;1pkt 1fpkt"];
28--2258[label="1;1pkt 1fpkt"];
1473--1474[label="1;2pkt 2fpkt"];
1473--2258[label="0.75;3pkt 3fpkt"];
1474--2258[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="201.36.1.164" dst_port="80" src_ip="162.73.87.87" src_port="3411"/>
      <filter dst_ip="201.36.1.164" dst_port="80" src_ip="162.73.87.87" src_port="3407"/>
      <filter dst_ip="201.36.1.164" dst_port="80" src_ip="162.73.87.87" src_port="3406"/>
      <filter dst_ip="201.36.1.78" dst_port="80" src_ip="162.73.87.87" src_port="3405"/>
    </slice>
    <from sec="1031548350" usec="0"/>
    <to sec="1031548542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747653,1.99621,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
63[label="141.133.239.176s;2pkt 2fpkt", shape=rectangle, color=red];
668[label="141.133.239.176;s;274pkt 274fpkt", shape=diamond, color=yellow];
1082[label="201.98.92.151;d;2pkt 2fpkt", shape=diamond, color=yellow];
1476[label="207.58.146.197;d;8pkt 8fpkt", shape=diamond, color=yellow];
2738[label="141.133.239.176;362pkt 362fpkt", shape=pentagon, color=darkviolet];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.239.176:*, *:80}[91.7355%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3704%)&lt;BR/&gt; 113: (1.54321%)&lt;BR/&gt; 21: (1.54321%)&lt;BR/&gt; 1763: (0.308642%)&lt;BR/&gt; 1762: (0.308642%)&gt;];
}
63--668[label="1;2pkt 2fpkt"];
63--1476[label="1;2pkt 2fpkt"];
63--2738[label="1;2pkt 2fpkt"];
668--1082[label="1;2pkt 2fpkt"];
668--1476[label="1;8pkt 8fpkt"];
668--2248[label="0.0328467;9pkt 9fpkt"];
668--2254[label="0.0182482;5pkt 5fpkt"];
668--2258[label="0.040146;11pkt 11fpkt"];
668--2263[label="0.0328467;9pkt 9fpkt"];
668--2270[label="0.0328467;9pkt 9fpkt"];
668--2738[label="0.99635;273pkt 273fpkt"];
1082--2738[label="1;2pkt 2fpkt"];
1476--2738[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="141.133.239.176"/>
    </slice>
    <from sec="1031547632" usec="0"/>
    <to sec="1031548669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="136.87.131.178"/>
      <from sec="1031547600" usec="0"/>
      <to sec="1031548608" usec="0"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="141.133.74.5"/>
      <from sec="1031547611" usec="0"/>
      <to sec="1031548608" usec="0"/>
    </slice>
    <from sec="1031547611" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="141.133.239.206"/>
      <from sec="1031548186" usec="0"/>
      <to sec="1031548518" usec="0"/>
    </slice>
    <from sec="1031548186" usec="0"/>
    <to sec="1031548518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835283,2.0532,503,1 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
44[label="44.66.188.129s;1pkt 1fpkt", shape=rectangle, color=red];
2103[label="44.66.188.129;s;33pkt 33fpkt", shape=hexagon, color=black];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.66.188.129:*, 136.65.168.162:80}[57.5758%]&lt;BR/&gt;{44.66.188.129:*, 136.65.182.192:80}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1176%)&lt;BR/&gt; 53: (4.41176%)&lt;BR/&gt; 13282: (2.94118%)&lt;BR/&gt; 59966: (1.47059%)&lt;BR/&gt; 45828: (1.47059%)&gt;];
}
44--1416[label="1;1pkt 1fpkt"];
44--1541[label="1;1pkt 1fpkt"];
44--2103[label="1;1pkt 1fpkt"];
2103--2256[label="0.030303;1pkt 1fpkt"];
2103--2258[label="0.151515;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.168.162" dst_port="80" src_ip="44.66.188.129"/>
      <filter dst_ip="136.65.182.192" dst_port="80" src_ip="44.66.188.129"/>
    </slice>
    <from sec="1031547926" usec="0"/>
    <to sec="1031548579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.835652,1.94964,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
104[label="200.70.24.133d;1pkt 1fpkt", shape=rectangle, color=red];
1212[label="208.78.229.184;s;4pkt 4fpkt", shape=diamond, color=yellow];
1428[label="200.70.24.133;d;9pkt 9fpkt", shape=diamond, color=yellow];
1524[label="200.70.5.165;d;4pkt 4fpkt", shape=diamond, color=yellow];
1543[label="162.73.162.145;s;1pkt 1fpkt", shape=diamond, color=yellow];
1608[label="151.244.4.205;s;38pkt 38fpkt", shape=diamond, color=yellow];
2108[label="200.70.24.133;d;8pkt 8fpkt", shape=hexagon, color=black];
2648[label="162.73.162.145;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2810[label="151.244.4.205;39pkt 39fpkt", shape=pentagon, color=darkviolet];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.4.205:21, *:*}[36.7347%]&lt;BR/&gt;{151.244.4.205:0, *:0}[24.4898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (30%)&lt;BR/&gt; 0: (20.9524%)&lt;BR/&gt; 1883: (2.38095%)&lt;BR/&gt; 1897: (1.90476%)&lt;BR/&gt; 1774: (1.90476%)&gt;];
}
104--1428[label="1;1pkt 1fpkt"];
104--1543[label="1;1pkt 1fpkt"];
104--2108[label="1;1pkt 1fpkt"];
104--2272[label="1;1pkt 1fpkt"];
104--2648[label="1;1pkt 1fpkt"];
1212--1428[label="0.5;2pkt 2fpkt"];
1212--1524[label="0.5;2pkt 2fpkt"];
1212--2108[label="0.5;2pkt 2fpkt"];
1212--2272[label="1;4pkt 4fpkt"];
1428--1543[label="1;1pkt 1fpkt"];
1428--1608[label="0.222222;2pkt 2fpkt"];
1428--2108[label="1;8pkt 8fpkt"];
1428--2272[label="0.444444;4pkt 4fpkt"];
1428--2648[label="1;1pkt 1fpkt"];
1428--2810[label="0.222222;2pkt 2fpkt"];
1524--1608[label="0.5;2pkt 2fpkt"];
1524--2272[label="1;4pkt 4fpkt"];
1524--2810[label="0.5;2pkt 2fpkt"];
1543--2108[label="1;1pkt 1fpkt"];
1543--2272[label="1;1pkt 1fpkt"];
1543--2648[label="1;1pkt 1fpkt"];
1608--1636[label="0.6;3pkt 3fpkt"];
1608--2108[label="0.25;2pkt 2fpkt"];
1608--2272[label="0.0789474;3pkt 3fpkt"];
1608--2810[label="0.973684;37pkt 37fpkt"];
2108--2272[label="0.5;4pkt 4fpkt"];
2108--2648[label="1;1pkt 1fpkt"];
2108--2810[label="0.25;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="151.244.4.205" src_port="21"/>
      <filter src_ip="151.244.4.205"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
1042[label="136.88.206.101;s;330pkt 330fpkt", shape=diamond, color=yellow];
1544[label="143.22.47.224;d;91pkt 91fpkt", shape=diamond, color=yellow];
1547[label="143.22.80.250;d;128pkt 128fpkt", shape=diamond, color=yellow];
1993[label="136.88.206.101;s;114pkt 114fpkt", shape=hexagon, color=black];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.88.206.101:*, 143.22.80.250:80}[37.7581%]&lt;BR/&gt;{136.88.206.101:*, *:443}[25.9587%]&lt;BR/&gt;{136.88.206.101:*, 143.22.47.224:80}[24.1888%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.727%)&lt;BR/&gt; 443: (13.273%)&lt;BR/&gt; 4171: (0.226244%)&lt;BR/&gt; 4039: (0.226244%)&lt;BR/&gt; 3992: (0.226244%)&gt;];
}
1042--1544[label="0.901099;82pkt 82fpkt"];
1042--1547[label="1;128pkt 128fpkt"];
1042--1993[label="1;114pkt 114fpkt"];
1042--2248[label="0.0121212;4pkt 4fpkt"];
1042--2254[label="0.0030303;1pkt 1fpkt"];
1042--2258[label="0.0636364;21pkt 21fpkt"];
1042--2263[label="0.0121212;4pkt 4fpkt"];
1042--2270[label="0.0121212;4pkt 4fpkt"];
1544--1993[label="0.043956;4pkt 4fpkt"];
1544--2258[label="0.21978;20pkt 20fpkt"];
1993--2248[label="0.0350877;4pkt 4fpkt"];
1993--2254[label="0.00877193;1pkt 1fpkt"];
1993--2258[label="0.0350877;4pkt 4fpkt"];
1993--2263[label="0.0350877;4pkt 4fpkt"];
1993--2270[label="0.0350877;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="136.88.206.101"/>
      <filter dst_ip="143.22.80.250" dst_port="80" src_ip="136.88.206.101"/>
      <filter dst_ip="143.22.47.224" dst_port="80" src_ip="136.88.206.101"/>
    </slice>
    <from sec="1031547624" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826429,1.99503,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
60[label="201.36.1.164s;1pkt 1fpkt", shape=rectangle, color=red];
109[label="208.78.231.154d;1pkt 1fpkt", shape=rectangle, color=red];
1475[label="201.36.1.164;s;2pkt 2fpkt", shape=diamond, color=yellow];
1545[label="162.73.87.87;d;4pkt 4fpkt", shape=diamond, color=yellow];
2115[label="201.36.1.164;s;2pkt 2fpkt", shape=hexagon, color=black];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.36.1.78:80, 162.73.87.87:3405}[25%]&lt;BR/&gt;{201.36.1.164:80, 162.73.87.87:3406}[25%]&lt;BR/&gt;{201.36.1.164:80, 162.73.87.87:3407}[25%]&lt;BR/&gt;{201.36.1.164:80, 162.73.87.87:3411}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3407: (25%)&lt;BR/&gt; 3406: (15%)&lt;BR/&gt; 3411: (5%)&lt;BR/&gt; 3405: (5%)&gt;];
}
60--109[label="1;1pkt 1fpkt"];
60--1475[label="1;1pkt 1fpkt"];
60--1545[label="1;1pkt 1fpkt"];
60--2115[label="1;1pkt 1fpkt"];
60--2257[label="1;1pkt 1fpkt"];
60--2267[label="1;1pkt 1fpkt"];
60--2274[label="1;1pkt 1fpkt"];
109--1475[label="1;1pkt 1fpkt"];
109--1545[label="1;1pkt 1fpkt"];
109--2115[label="1;1pkt 1fpkt"];
109--2257[label="1;1pkt 1fpkt"];
109--2267[label="1;1pkt 1fpkt"];
109--2274[label="1;1pkt 1fpkt"];
1475--1545[label="1;2pkt 2fpkt"];
1475--2115[label="1;2pkt 2fpkt"];
1475--2257[label="1;2pkt 2fpkt"];
1475--2267[label="1;2pkt 2fpkt"];
1475--2274[label="1;2pkt 2fpkt"];
1545--2115[label="1;2pkt 2fpkt"];
1545--2257[label="0.75;3pkt 3fpkt"];
1545--2267[label="0.75;3pkt 3fpkt"];
1545--2274[label="0.75;3pkt 3fpkt"];
2115--2257[label="1;2pkt 2fpkt"];
2115--2267[label="1;2pkt 2fpkt"];
2115--2274[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.87.87" dst_port="3411" src_ip="201.36.1.164" src_port="80"/>
      <filter dst_ip="162.73.87.87" dst_port="3407" src_ip="201.36.1.164" src_port="80"/>
      <filter dst_ip="162.73.87.87" dst_port="3406" src_ip="201.36.1.164" src_port="80"/>
      <filter dst_ip="162.73.87.87" dst_port="3405" src_ip="201.36.1.78" src_port="80"/>
    </slice>
    <from sec="1031548350" usec="0"/>
    <to sec="1031548547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826429,1.99503,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
58[label="136.65.168.162s;3pkt 3fpkt", shape=rectangle, color=red];
296[label="136.65.168.162;s;230pkt 230fpkt", shape=diamond, color=yellow];
856[label="163.36.251.252;d;2pkt 2fpkt", shape=diamond, color=yellow];
1557[label="151.145.177.88;d;4pkt 4fpkt", shape=diamond, color=yellow];
1806[label="136.65.168.162;s;96pkt 96fpkt", shape=hexagon, color=black];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.168.162:80, *:*}[99.5671%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49514: (0.447761%)&lt;BR/&gt; 44675: (0.447761%)&lt;BR/&gt; 44674: (0.447761%)&lt;BR/&gt; 44673: (0.447761%)&gt;];
}
58--296[label="1;3pkt 3fpkt"];
58--1557[label="1;3pkt 3fpkt"];
296--414[label="0.13913;32pkt 32fpkt"];
296--856[label="0.5;1pkt 1fpkt"];
296--1557[label="1;4pkt 4fpkt"];
296--1806[label="1;96pkt 96fpkt"];
296--2017[label="0.104348;24pkt 24fpkt"];
296--2247[label="0.0478261;11pkt 11fpkt"];
296--2255[label="0.104348;24pkt 24fpkt"];
296--2257[label="0.0478261;11pkt 11fpkt"];
296--2267[label="0.0478261;11pkt 11fpkt"];
296--2274[label="0.0478261;11pkt 11fpkt"];
856--1806[label="0.5;1pkt 1fpkt"];
1806--2017[label="0.0729167;7pkt 7fpkt"];
1806--2247[label="0.114583;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="136.65.168.162" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
167[label="136.65.6.194;s;28pkt 28fpkt", shape=diamond, color=yellow];
1560[label="18.55.131.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
1563[label="73.9.95.188;d;2pkt 2fpkt", shape=diamond, color=yellow];
1643[label="76.49.163.205;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.6.194:*, *:6699}[96.5517%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (48.4375%)&lt;BR/&gt; 3039: (3.125%)&lt;BR/&gt; 3037: (3.125%)&lt;BR/&gt; 3034: (3.125%)&lt;BR/&gt; 7952: (1.5625%)&gt;];
}
167--1560[label="1;1pkt 1fpkt"];
167--1563[label="0.5;1pkt 1fpkt"];
167--1643[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="136.65.6.194"/>
    </slice>
    <from sec="1031548428" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
166[label="136.65.6.194;d;26pkt 26fpkt", shape=diamond, color=yellow];
1561[label="18.55.131.169;s;1pkt 1fpkt", shape=diamond, color=yellow];
1564[label="73.9.95.188;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6699, 136.65.6.194:*}[96.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (48.2759%)&lt;BR/&gt; 3076: (3.44828%)&lt;BR/&gt; 3037: (3.44828%)&lt;BR/&gt; 3034: (3.44828%)&lt;BR/&gt; 7952: (1.72414%)&gt;];
}
166--1561[label="1;1pkt 1fpkt"];
166--1564[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.6.194" src_port="6699"/>
    </slice>
    <from sec="1031548428" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
501[label="141.133.140.35;s;284pkt 284fpkt", shape=diamond, color=yellow];
517[label="141.133.194.214;s;351pkt 351fpkt", shape=diamond, color=yellow];
521[label="213.73.3.242;d;85pkt 85fpkt", shape=diamond, color=yellow];
523[label="141.133.232.157;s;428pkt 428fpkt", shape=diamond, color=yellow];
541[label="208.78.234.8;s;187pkt 187fpkt", shape=diamond, color=yellow];
566[label="141.133.215.33;s;130pkt 130fpkt", shape=diamond, color=yellow];
679[label="75.97.120.20;d;98pkt 98fpkt", shape=diamond, color=yellow];
682[label="75.97.120.235;d;357pkt 357fpkt", shape=diamond, color=yellow];
1063[label="141.133.201.69;s;165pkt 165fpkt", shape=diamond, color=yellow];
1306[label="141.133.63.145;s;125pkt 125fpkt", shape=diamond, color=yellow];
1551[label="75.159.177.105;d;73pkt 73fpkt", shape=diamond, color=yellow];
1779[label="141.133.116.116;s;142pkt 142fpkt", shape=hexagon, color=black];
2185[label="141.133.154.111;s;75pkt 75fpkt", shape=hexagon, color=black];
2309[label="208.78.234.8;223pkt 223fpkt", shape=pentagon, color=darkviolet];
3181[label="151.244.240.201;58pkt 58fpkt", shape=invtriangle, color=brown];
3369[label="151.244.240.201;59pkt 59fpkt", shape=invhouse, color=bisque];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[98.3383%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2606%)&lt;BR/&gt; 443: (0.246479%)&lt;BR/&gt; 7891: (0.193662%)&lt;BR/&gt; 1355: (0.0880282%)&lt;BR/&gt; 1345: (0.0880282%)&gt;];
}
501--730[label="0.146667;11pkt 11fpkt"];
501--876[label="0.0186047;4pkt 4fpkt"];
501--882[label="0.00746269;1pkt 1fpkt"];
501--930[label="0.174603;11pkt 11fpkt"];
501--936[label="0.0144928;1pkt 1fpkt"];
501--970[label="0.213115;26pkt 26fpkt"];
501--1054[label="0.0137615;3pkt 3fpkt"];
501--1123[label="0.02;1pkt 1fpkt"];
501--1148[label="0.0328947;5pkt 5fpkt"];
501--1297[label="0.0561798;5pkt 5fpkt"];
501--1301[label="0.306931;31pkt 31fpkt"];
501--1359[label="0.0336134;4pkt 4fpkt"];
501--1373[label="0.0136054;2pkt 2fpkt"];
501--1493[label="0.0322581;2pkt 2fpkt"];
501--1494[label="0.028169;2pkt 2fpkt"];
501--1497[label="0.0267857;3pkt 3fpkt"];
501--1592[label="0.0153846;1pkt 1fpkt"];
501--2018[label="0.00869565;1pkt 1fpkt"];
501--2050[label="0.0393701;5pkt 5fpkt"];
501--2135[label="0.146667;11pkt 11fpkt"];
501--2248[label="0.140845;40pkt 40fpkt"];
501--2254[label="0.00352113;1pkt 1fpkt"];
501--2258[label="0.0387324;11pkt 11fpkt"];
501--2263[label="0.140845;40pkt 40fpkt"];
501--2270[label="0.140845;40pkt 40fpkt"];
517--679[label="0.163265;16pkt 16fpkt"];
517--682[label="0.0911681;32pkt 32fpkt"];
517--876[label="0.0139535;3pkt 3fpkt"];
517--1148[label="0.0197368;3pkt 3fpkt"];
517--1265[label="0.0217391;1pkt 1fpkt"];
517--1359[label="0.0252101;3pkt 3fpkt"];
517--1373[label="0.0204082;3pkt 3fpkt"];
517--1497[label="0.0267857;3pkt 3fpkt"];
517--1506[label="0.5;3pkt 3fpkt"];
517--1715[label="1;141pkt 141fpkt"];
517--1787[label="0.163265;16pkt 16fpkt"];
517--1788[label="0.206667;31pkt 31fpkt"];
517--2050[label="0.023622;3pkt 3fpkt"];
517--2248[label="0.025641;9pkt 9fpkt"];
517--2254[label="0.136752;48pkt 48fpkt"];
517--2258[label="0.011396;4pkt 4fpkt"];
517--2263[label="0.025641;9pkt 9fpkt"];
517--2270[label="0.025641;9pkt 9fpkt"];
521--523[label="0.0117647;1pkt 1fpkt"];
521--541[label="0.0823529;7pkt 7fpkt"];
521--542[label="0.015625;1pkt 1fpkt"];
521--566[label="0.0117647;1pkt 1fpkt"];
521--570[label="0.0117647;1pkt 1fpkt"];
521--575[label="0.0588235;5pkt 5fpkt"];
521--656[label="0.105882;9pkt 9fpkt"];
521--681[label="0.466667;7pkt 7fpkt"];
521--1716[label="1;19pkt 19fpkt"];
521--1779[label="0.105882;9pkt 9fpkt"];
521--1868[label="0.0117647;1pkt 1fpkt"];
521--1892[label="0.0117647;1pkt 1fpkt"];
521--1950[label="0.0117647;1pkt 1fpkt"];
521--2063[label="0.923077;24pkt 24fpkt"];
521--2225[label="0.0117647;1pkt 1fpkt"];
521--2248[label="0.0352941;3pkt 3fpkt"];
521--2254[label="0.0470588;4pkt 4fpkt"];
521--2258[label="0.0705882;6pkt 6fpkt"];
521--2263[label="0.0352941;3pkt 3fpkt"];
521--2270[label="0.0352941;3pkt 3fpkt"];
521--2309[label="0.0823529;7pkt 7fpkt"];
521--2319[label="0.388889;7pkt 7fpkt"];
521--2616[label="0.0235294;2pkt 2fpkt"];
521--2709[label="0.0235294;2pkt 2fpkt"];
521--2788[label="0.0117647;1pkt 1fpkt"];
521--2800[label="0.0344828;2pkt 2fpkt"];
521--2927[label="0.411765;7pkt 7fpkt"];
521--3181[label="0.0344828;2pkt 2fpkt"];
521--3248[label="0.388889;7pkt 7fpkt"];
521--3367[label="0.0117647;1pkt 1fpkt"];
521--3369[label="0.0338983;2pkt 2fpkt"];
523--729[label="0.0140845;1pkt 1fpkt"];
523--876[label="0.00465116;1pkt 1fpkt"];
523--1147[label="0.0197368;3pkt 3fpkt"];
523--1148[label="0.0197368;3pkt 3fpkt"];
523--1265[label="0.0217391;1pkt 1fpkt"];
523--1359[label="0.0168067;2pkt 2fpkt"];
523--1373[label="0.0136054;2pkt 2fpkt"];
523--1380[label="0.122807;7pkt 7fpkt"];
523--1497[label="0.0267857;3pkt 3fpkt"];
523--1551[label="1;73pkt 73fpkt"];
523--1717[label="1;86pkt 86fpkt"];
523--1973[label="0.0943396;5pkt 5fpkt"];
523--2044[label="0.107143;6pkt 6fpkt"];
523--2050[label="0.015748;2pkt 2fpkt"];
523--2248[label="0.0280374;12pkt 12fpkt"];
523--2254[label="0.067757;29pkt 29fpkt"];
523--2258[label="0.0607477;26pkt 26fpkt"];
523--2263[label="0.0280374;12pkt 12fpkt"];
523--2270[label="0.0280374;12pkt 12fpkt"];
541--679[label="0.0204082;2pkt 2fpkt"];
541--729[label="0.0422535;3pkt 3fpkt"];
541--936[label="0.0144928;1pkt 1fpkt"];
541--976[label="1;99pkt 99fpkt"];
541--1008[label="0.166667;3pkt 3fpkt"];
541--1029[label="0.0172414;2pkt 2fpkt"];
541--1123[label="0.12;6pkt 6fpkt"];
541--1148[label="0.00657895;1pkt 1fpkt"];
541--1265[label="0.217391;10pkt 10fpkt"];
541--1359[label="0.00840336;1pkt 1fpkt"];
541--1497[label="0.00892857;1pkt 1fpkt"];
541--1761[label="0.0625;3pkt 3fpkt"];
541--1787[label="0.0204082;2pkt 2fpkt"];
541--1808[label="0.0106952;2pkt 2fpkt"];
541--2050[label="0.00787402;1pkt 1fpkt"];
541--2149[label="0.0172414;2pkt 2fpkt"];
541--2248[label="0.0213904;4pkt 4fpkt"];
541--2254[label="0.0481283;9pkt 9fpkt"];
541--2258[label="0.00534759;1pkt 1fpkt"];
541--2263[label="0.0213904;4pkt 4fpkt"];
541--2270[label="0.0213904;4pkt 4fpkt"];
541--2309[label="0.994652;186pkt 186fpkt"];
566--679[label="0.0510204;5pkt 5fpkt"];
566--682[label="0.261538;34pkt 34fpkt"];
566--1054[label="0.0538462;7pkt 7fpkt"];
566--1148[label="0.115385;15pkt 15fpkt"];
566--1605[label="0.12069;7pkt 7fpkt"];
566--1716[label="0.0526316;1pkt 1fpkt"];
566--1787[label="0.0510204;5pkt 5fpkt"];
566--1788[label="0.261538;34pkt 34fpkt"];
566--2050[label="0.11811;15pkt 15fpkt"];
679--1066[label="0.0714286;7pkt 7fpkt"];
679--1087[label="0.0847458;5pkt 5fpkt"];
679--1554[label="0.131868;12pkt 12fpkt"];
679--1656[label="0.0533333;4pkt 4fpkt"];
679--1779[label="0.0612245;6pkt 6fpkt"];
679--1787[label="1;98pkt 98fpkt"];
679--1883[label="0.0714286;7pkt 7fpkt"];
679--2185[label="0.0533333;4pkt 4fpkt"];
679--2254[label="0.0816327;8pkt 8fpkt"];
679--2258[label="0.0408163;4pkt 4fpkt"];
679--2309[label="0.0204082;2pkt 2fpkt"];
682--1066[label="0.105727;24pkt 24fpkt"];
682--1087[label="0.559322;33pkt 33fpkt"];
682--1554[label="0.340659;31pkt 31fpkt"];
682--1656[label="0.32;24pkt 24fpkt"];
682--1779[label="0.232394;33pkt 33fpkt"];
682--1788[label="1;150pkt 150fpkt"];
682--1883[label="0.16;24pkt 24fpkt"];
682--2074[label="0.00280112;1pkt 1fpkt"];
682--2185[label="0.32;24pkt 24fpkt"];
682--2254[label="0.0952381;34pkt 34fpkt"];
682--2258[label="0.00560224;2pkt 2fpkt"];
1063--1148[label="0.0394737;6pkt 6fpkt"];
1063--1304[label="0.183673;9pkt 9fpkt"];
1063--1373[label="0.047619;7pkt 7fpkt"];
1063--1605[label="0.0517241;3pkt 3fpkt"];
1063--2050[label="0.0472441;6pkt 6fpkt"];
1063--2258[label="0.0666667;11pkt 11fpkt"];
1063--2467[label="0.993939;164pkt 164fpkt"];
1063--2998[label="0.993939;164pkt 164fpkt"];
1306--1497[label="0.0357143;4pkt 4fpkt"];
1306--1540[label="0.888889;8pkt 8fpkt"];
1306--1605[label="0.0517241;3pkt 3fpkt"];
1306--2050[label="0.016;2pkt 2fpkt"];
1306--2258[label="0.072;9pkt 9fpkt"];
1306--3097[label="0.166667;1pkt 1fpkt"];
1779--1787[label="0.0612245;6pkt 6fpkt"];
1779--1978[label="0.109091;6pkt 6fpkt"];
1779--1986[label="0.0689655;4pkt 4fpkt"];
1779--2248[label="0.0352113;5pkt 5fpkt"];
1779--2254[label="0.0211268;3pkt 3fpkt"];
1779--2258[label="0.0211268;3pkt 3fpkt"];
1779--2263[label="0.0352113;5pkt 5fpkt"];
1779--2270[label="0.0352113;5pkt 5fpkt"];
2185--2241[label="0.0266667;2pkt 2fpkt"];
3181--3369[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
    </slice>
    <from sec="1031547602" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649378,1.99623,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
1259[label="47.66.206.21;d;123pkt 123fpkt", shape=diamond, color=yellow];
1589[label="151.244.39.184;s;136pkt 136fpkt", shape=diamond, color=yellow];
2754[label="151.244.39.184;143pkt 143fpkt", shape=pentagon, color=darkviolet];
3160[label="151.244.39.184;143pkt 143fpkt", shape=invtriangle, color=brown];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.39.184:*, 47.66.206.21:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2488: (0.366972%)&lt;BR/&gt; 2487: (0.366972%)&lt;BR/&gt; 2486: (0.366972%)&lt;BR/&gt; 2485: (0.366972%)&gt;];
}
1259--1589[label="1;123pkt 123fpkt"];
1259--2248[label="0.0569106;7pkt 7fpkt"];
1259--2254[label="0.0487805;6pkt 6fpkt"];
1259--2258[label="0.0650407;8pkt 8fpkt"];
1259--2263[label="0.0569106;7pkt 7fpkt"];
1259--2270[label="0.0569106;7pkt 7fpkt"];
1259--2754[label="0.99187;122pkt 122fpkt"];
1259--3160[label="0.99187;122pkt 122fpkt"];
1589--2248[label="0.0514706;7pkt 7fpkt"];
1589--2254[label="0.0441176;6pkt 6fpkt"];
1589--2258[label="0.0588235;8pkt 8fpkt"];
1589--2263[label="0.0514706;7pkt 7fpkt"];
1589--2270[label="0.0514706;7pkt 7fpkt"];
1589--2754[label="0.992647;135pkt 135fpkt"];
1589--3160[label="0.992647;135pkt 135fpkt"];
2754--3160[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_ip="47.66.206.21" dst_port="80" src_ip="151.244.39.184"/>
    </slice>
    <from sec="1031547605" usec="0"/>
    <to sec="1031548667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="208.85.184.159"/>
      <from sec="1031547795" usec="0"/>
      <to sec="1031548497" usec="0"/>
    </slice>
    <from sec="1031547795" usec="0"/>
    <to sec="1031548497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649378,1.99623,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
168[label="136.65.174.191;s;14pkt 14fpkt", shape=diamond, color=yellow];
981[label="18.140.203.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
995[label="18.217.109.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
1109[label="192.217.168.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
1234[label="18.9.155.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
1612[label="72.174.69.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
2770[label="136.65.174.191;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3168[label="136.65.174.191;13pkt 13fpkt", shape=invtriangle, color=brown];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.174.191:*, *:6699}[78.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (40.2174%)&lt;BR/&gt; 1863: (6.52174%)&lt;BR/&gt; 3296: (4.34783%)&lt;BR/&gt; 3291: (4.34783%)&lt;BR/&gt; 3267: (4.34783%)&gt;];
}
168--981[label="1;1pkt 1fpkt"];
168--995[label="1;1pkt 1fpkt"];
168--1109[label="1;1pkt 1fpkt"];
168--1234[label="1;1pkt 1fpkt"];
168--1612[label="1;1pkt 1fpkt"];
168--2248[label="0.0714286;1pkt 1fpkt"];
168--2263[label="0.0714286;1pkt 1fpkt"];
168--2270[label="0.0714286;1pkt 1fpkt"];
168--2770[label="1;14pkt 14fpkt"];
168--3168[label="1;13pkt 13fpkt"];
981--2770[label="1;1pkt 1fpkt"];
981--3168[label="1;1pkt 1fpkt"];
995--2770[label="1;1pkt 1fpkt"];
995--3168[label="1;1pkt 1fpkt"];
1109--2770[label="1;1pkt 1fpkt"];
1109--3168[label="1;1pkt 1fpkt"];
1234--2770[label="1;1pkt 1fpkt"];
1234--3168[label="1;1pkt 1fpkt"];
1612--2770[label="1;1pkt 1fpkt"];
1612--3168[label="1;1pkt 1fpkt"];
2770--3168[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="136.65.174.191"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
165[label="209.85.224.105;s;2917pkt 2917fpkt", shape=diamond, color=yellow];
186[label="219.200.219.2;d;123pkt 123fpkt", shape=diamond, color=yellow];
524[label="136.65.162.167;s;654pkt 654fpkt", shape=diamond, color=yellow];
568[label="209.85.226.250;s;1571pkt 1571fpkt", shape=diamond, color=yellow];
581[label="72.31.12.49;d;294pkt 294fpkt", shape=diamond, color=yellow];
618[label="164.15.14.38;s;5pkt 5fpkt", shape=diamond, color=yellow];
639[label="192.68.205.209;d;78pkt 78fpkt", shape=diamond, color=yellow];
810[label="141.133.8.17;s;130pkt 130fpkt", shape=diamond, color=yellow];
840[label="207.49.190.141;d;90pkt 90fpkt", shape=diamond, color=yellow];
867[label="220.134.220.56;d;65pkt 65fpkt", shape=diamond, color=yellow];
899[label="72.105.61.147;d;17pkt 17fpkt", shape=diamond, color=yellow];
922[label="72.105.48.142;d;121pkt 121fpkt", shape=diamond, color=yellow];
954[label="2.50.141.120;d;32pkt 32fpkt", shape=diamond, color=yellow];
956[label="141.133.8.6;s;90pkt 90fpkt", shape=diamond, color=yellow];
997[label="215.6.200.117;d;6pkt 6fpkt", shape=diamond, color=yellow];
1003[label="75.84.20.131;d;5pkt 5fpkt", shape=diamond, color=yellow];
1024[label="72.105.48.140;d;110pkt 110fpkt", shape=diamond, color=yellow];
1061[label="213.7.30.200;d;24pkt 24fpkt", shape=diamond, color=yellow];
1165[label="214.80.178.144;d;64pkt 64fpkt", shape=diamond, color=yellow];
1219[label="141.133.20.186;s;81pkt 81fpkt", shape=diamond, color=yellow];
1279[label="209.12.82.1;d;92pkt 92fpkt", shape=diamond, color=yellow];
1282[label="74.8.134.12;d;128pkt 128fpkt", shape=diamond, color=yellow];
1285[label="213.120.72.29;d;38pkt 38fpkt", shape=diamond, color=yellow];
1304[label="75.97.103.231;d;49pkt 49fpkt", shape=diamond, color=yellow];
1313[label="75.81.20.148;d;76pkt 76fpkt", shape=diamond, color=yellow];
1338[label="205.7.161.93;d;120pkt 120fpkt", shape=diamond, color=yellow];
1396[label="72.206.68.90;d;72pkt 72fpkt", shape=diamond, color=yellow];
1415[label="72.105.50.7;d;60pkt 60fpkt", shape=diamond, color=yellow];
1423[label="209.88.9.180;s;88pkt 88fpkt", shape=diamond, color=yellow];
1493[label="153.9.48.143;d;62pkt 62fpkt", shape=diamond, color=yellow];
1494[label="153.9.48.211;d;71pkt 71fpkt", shape=diamond, color=yellow];
1520[label="209.10.138.209;d;44pkt 44fpkt", shape=diamond, color=yellow];
1568[label="136.134.19.238;s;77pkt 77fpkt", shape=diamond, color=yellow];
1592[label="75.111.218.30;d;65pkt 65fpkt", shape=diamond, color=yellow];
1613[label="209.7.190.89;d;16pkt 16fpkt", shape=diamond, color=yellow];
1627[label="219.184.100.223;d;23pkt 23fpkt", shape=diamond, color=yellow];
1765[label="164.15.14.38;s;2pkt 2fpkt", shape=hexagon, color=black];
1869[label="141.133.8.17;s;130pkt 130fpkt", shape=hexagon, color=black];
1887[label="75.158.149.51;d;2pkt 2fpkt", shape=hexagon, color=black];
1985[label="72.105.48.142;d;100pkt 100fpkt", shape=hexagon, color=black];
1997[label="214.80.178.144;d;64pkt 64fpkt", shape=hexagon, color=black];
2018[label="75.111.202.32;d;115pkt 115fpkt", shape=hexagon, color=black];
2059[label="72.105.50.7;d;50pkt 50fpkt", shape=hexagon, color=black];
2074[label="209.85.226.250;s;1386pkt 1386fpkt", shape=hexagon, color=black];
2175[label="219.184.100.223;d;22pkt 22fpkt", shape=hexagon, color=black];
2296[label="208.78.224.4;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2424[label="141.133.253.50;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2508[label="209.88.202.81;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2635[label="136.65.192.138;46pkt 46fpkt", shape=pentagon, color=darkviolet];
2680[label="136.65.153.153;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2915[label="208.78.224.4;6pkt 6fpkt", shape=invtriangle, color=brown];
2981[label="141.133.253.50;5pkt 5fpkt", shape=invtriangle, color=brown];
3019[label="209.88.202.81;15pkt 15fpkt", shape=invtriangle, color=brown];
3089[label="136.65.192.138;46pkt 46fpkt", shape=invtriangle, color=brown];
3097[label="141.133.63.145;6pkt 6fpkt", shape=invtriangle, color=brown];
3118[label="136.65.153.153;26pkt 26fpkt", shape=invtriangle, color=brown];
3325[label="136.65.192.138;46pkt 46fpkt", shape=invhouse, color=bisque];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.85.224.105:*, *:80}[42.1076%]&lt;BR/&gt;{209.85.226.250:*, *:80}[22.7569%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6178%)&lt;BR/&gt; 0: (0.247934%)&lt;BR/&gt; 443: (0.108471%)&lt;BR/&gt; 1680: (0.0464876%)&lt;BR/&gt; 1641: (0.0464876%)&gt;];
}
165--186[label="0.0731707;9pkt 9fpkt"];
165--341[label="0.216561;34pkt 34fpkt"];
165--438[label="1;2pkt 2fpkt"];
165--495[label="0.214286;18pkt 18fpkt"];
165--527[label="0.826087;19pkt 19fpkt"];
165--538[label="1;5pkt 5fpkt"];
165--581[label="0.139456;41pkt 41fpkt"];
165--639[label="0.25641;20pkt 20fpkt"];
165--671[label="1;2pkt 2fpkt"];
165--729[label="0.0140845;1pkt 1fpkt"];
165--873[label="1;8pkt 8fpkt"];
165--882[label="0.00746269;1pkt 1fpkt"];
165--899[label="0.176471;3pkt 3fpkt"];
165--922[label="0.140496;17pkt 17fpkt"];
165--928[label="0.642857;27pkt 27fpkt"];
165--954[label="0.78125;25pkt 25fpkt"];
165--974[label="0.0178571;1pkt 1fpkt"];
165--1003[label="0.2;1pkt 1fpkt"];
165--1024[label="0.154545;17pkt 17fpkt"];
165--1025[label="0.305882;26pkt 26fpkt"];
165--1061[label="0.0416667;1pkt 1fpkt"];
165--1101[label="0.0979592;24pkt 24fpkt"];
165--1138[label="0.00446429;1pkt 1fpkt"];
165--1142[label="0.119522;30pkt 30fpkt"];
165--1165[label="0.1875;12pkt 12fpkt"];
165--1202[label="0.0042735;1pkt 1fpkt"];
165--1220[label="0.0357143;1pkt 1fpkt"];
165--1237[label="0.495652;57pkt 57fpkt"];
165--1254[label="0.0102041;1pkt 1fpkt"];
165--1279[label="0.282609;26pkt 26fpkt"];
165--1282[label="0.398438;51pkt 51fpkt"];
165--1285[label="0.0526316;2pkt 2fpkt"];
165--1313[label="1;76pkt 76fpkt"];
165--1332[label="0.714286;5pkt 5fpkt"];
165--1355[label="0.0120482;1pkt 1fpkt"];
165--1376[label="0.378641;39pkt 39fpkt"];
165--1396[label="0.0138889;1pkt 1fpkt"];
165--1397[label="0.581395;25pkt 25fpkt"];
165--1411[label="0.977778;44pkt 44fpkt"];
165--1415[label="0.05;3pkt 3fpkt"];
165--1489[label="0.617021;29pkt 29fpkt"];
165--1493[label="0.0322581;2pkt 2fpkt"];
165--1494[label="0.056338;4pkt 4fpkt"];
165--1511[label="0.0169492;1pkt 1fpkt"];
165--1520[label="0.0454545;2pkt 2fpkt"];
165--1574[label="0.0566038;3pkt 3fpkt"];
165--1592[label="0.0153846;1pkt 1fpkt"];
165--1600[label="0.0983607;6pkt 6fpkt"];
165--1613[label="1;16pkt 16fpkt"];
165--1614[label="0.722222;13pkt 13fpkt"];
165--1661[label="1;337pkt 337fpkt"];
165--1718[label="0.826087;19pkt 19fpkt"];
165--1733[label="1;2pkt 2fpkt"];
165--1775[label="0.147368;14pkt 14fpkt"];
165--1905[label="0.22549;23pkt 23fpkt"];
165--1936[label="0.0042735;1pkt 1fpkt"];
165--1941[label="1;7pkt 7fpkt"];
165--1985[label="0.14;14pkt 14fpkt"];
165--1997[label="0.1875;12pkt 12fpkt"];
165--2018[label="0.00869565;1pkt 1fpkt"];
165--2059[label="0.02;1pkt 1fpkt"];
165--2154[label="0.00446429;1pkt 1fpkt"];
165--2157[label="0.581395;25pkt 25fpkt"];
165--2158[label="0.0983607;6pkt 6fpkt"];
165--2220[label="0.0042735;1pkt 1fpkt"];
165--2248[label="0.0606788;177pkt 177fpkt"];
165--2254[label="0.0668495;195pkt 195fpkt"];
165--2258[label="0.0785053;229pkt 229fpkt"];
165--2263[label="0.0606788;177pkt 177fpkt"];
165--2270[label="0.0606788;177pkt 177fpkt"];
186--187[label="0.00813008;1pkt 1fpkt"];
186--863[label="0.398374;49pkt 49fpkt"];
186--1661[label="0.0162602;2pkt 2fpkt"];
186--1791[label="0.398374;49pkt 49fpkt"];
186--2248[label="0.0162602;2pkt 2fpkt"];
186--2254[label="0.0569106;7pkt 7fpkt"];
186--2263[label="0.0162602;2pkt 2fpkt"];
186--2270[label="0.0162602;2pkt 2fpkt"];
524--581[label="0.0102041;3pkt 3fpkt"];
524--730[label="0.0133333;1pkt 1fpkt"];
524--840[label="1;90pkt 90fpkt"];
524--876[label="0.027907;6pkt 6fpkt"];
524--900[label="0.0409357;7pkt 7fpkt"];
524--1054[label="0.137615;30pkt 30fpkt"];
524--1096[label="0.00890208;3pkt 3fpkt"];
524--1135[label="0.0310078;4pkt 4fpkt"];
524--1160[label="0.0625;2pkt 2fpkt"];
524--1161[label="0.0348837;3pkt 3fpkt"];
524--1254[label="0.173469;17pkt 17fpkt"];
524--1279[label="0.163043;15pkt 15fpkt"];
524--1284[label="0.0186916;2pkt 2fpkt"];
524--1304[label="0.122449;6pkt 6fpkt"];
524--1338[label="0.966667;116pkt 116fpkt"];
524--1415[label="0.216667;13pkt 13fpkt"];
524--1520[label="0.409091;18pkt 18fpkt"];
524--1585[label="0.015625;1pkt 1fpkt"];
524--1595[label="0.0117647;1pkt 1fpkt"];
524--1600[label="0.0491803;3pkt 3fpkt"];
524--1823[label="1;290pkt 290fpkt"];
524--1978[label="0.309091;17pkt 17fpkt"];
524--2059[label="0.26;13pkt 13fpkt"];
524--2128[label="0.00890208;3pkt 3fpkt"];
524--2135[label="0.0133333;1pkt 1fpkt"];
524--2158[label="0.0491803;3pkt 3fpkt"];
524--2241[label="0.00890208;3pkt 3fpkt"];
524--2248[label="0.0198777;13pkt 13fpkt"];
524--2254[label="0.0856269;56pkt 56fpkt"];
524--2258[label="0.0932722;61pkt 61fpkt"];
524--2263[label="0.0198777;13pkt 13fpkt"];
524--2270[label="0.0198777;13pkt 13fpkt"];
568--581[label="0.0272109;8pkt 8fpkt"];
568--682[label="0.00560224;2pkt 2fpkt"];
568--867[label="1;65pkt 65fpkt"];
568--882[label="0.0223881;3pkt 3fpkt"];
568--899[label="0.117647;2pkt 2fpkt"];
568--922[label="0.123967;15pkt 15fpkt"];
568--954[label="0.1875;6pkt 6fpkt"];
568--968[label="1;2pkt 2fpkt"];
568--1024[label="0.109091;12pkt 12fpkt"];
568--1202[label="0.0042735;1pkt 1fpkt"];
568--1237[label="0.0782609;9pkt 9fpkt"];
568--1285[label="0.131579;5pkt 5fpkt"];
568--1396[label="0.0138889;1pkt 1fpkt"];
568--1493[label="0.0483871;3pkt 3fpkt"];
568--1494[label="0.028169;2pkt 2fpkt"];
568--1520[label="0.0454545;2pkt 2fpkt"];
568--1592[label="0.0461538;3pkt 3fpkt"];
568--1615[label="0.166667;1pkt 1fpkt"];
568--1627[label="1;23pkt 23fpkt"];
568--1788[label="0.00666667;1pkt 1fpkt"];
568--1887[label="1;2pkt 2fpkt"];
568--1936[label="0.0042735;1pkt 1fpkt"];
568--1985[label="0.08;8pkt 8fpkt"];
568--2018[label="0.026087;3pkt 3fpkt"];
568--2074[label="1;1386pkt 1386fpkt"];
568--2175[label="1;22pkt 22fpkt"];
568--2220[label="0.0042735;1pkt 1fpkt"];
568--2248[label="0.0299173;47pkt 47fpkt"];
568--2254[label="0.0420115;66pkt 66fpkt"];
568--2258[label="0.0566518;89pkt 89fpkt"];
568--2263[label="0.0299173;47pkt 47fpkt"];
568--2270[label="0.0299173;47pkt 47fpkt"];
581--793[label="0.0238095;7pkt 7fpkt"];
581--1276[label="0.0210526;2pkt 2fpkt"];
581--1477[label="0.00900901;1pkt 1fpkt"];
581--1661[label="0.0238095;7pkt 7fpkt"];
581--1663[label="0.085034;25pkt 25fpkt"];
581--1736[label="0.0408163;12pkt 12fpkt"];
581--1823[label="0.0103448;3pkt 3fpkt"];
581--1852[label="0.261905;77pkt 77fpkt"];
581--2011[label="0.0136054;4pkt 4fpkt"];
581--2074[label="0.0272109;8pkt 8fpkt"];
581--2088[label="0.0238095;7pkt 7fpkt"];
581--2096[label="0.0215054;2pkt 2fpkt"];
581--2187[label="0.0816327;24pkt 24fpkt"];
581--2248[label="0.0612245;18pkt 18fpkt"];
581--2254[label="0.0612245;18pkt 18fpkt"];
581--2258[label="0.0442177;13pkt 13fpkt"];
581--2263[label="0.0612245;18pkt 18fpkt"];
581--2270[label="0.0612245;18pkt 18fpkt"];
581--2463[label="0.085034;25pkt 25fpkt"];
581--2616[label="0.0102041;3pkt 3fpkt"];
581--2788[label="0.0952381;28pkt 28fpkt"];
581--2996[label="0.085034;25pkt 25fpkt"];
581--3254[label="0.0238095;7pkt 7fpkt"];
581--3367[label="0.0952381;28pkt 28fpkt"];
618--899[label="0.2;1pkt 1fpkt"];
618--1003[label="0.2;1pkt 1fpkt"];
618--1765[label="1;2pkt 2fpkt"];
639--1427[label="0.0128205;1pkt 1fpkt"];
639--1661[label="0.0384615;3pkt 3fpkt"];
639--1852[label="0.397436;31pkt 31fpkt"];
639--2107[label="0.0128205;1pkt 1fpkt"];
639--2248[label="0.179487;14pkt 14fpkt"];
639--2254[label="0.153846;12pkt 12fpkt"];
639--2258[label="0.102564;8pkt 8fpkt"];
639--2263[label="0.179487;14pkt 14fpkt"];
639--2270[label="0.179487;14pkt 14fpkt"];
810--922[label="0.561983;68pkt 68fpkt"];
810--1869[label="1;130pkt 130fpkt"];
810--1985[label="0.68;68pkt 68fpkt"];
810--2248[label="0.161538;21pkt 21fpkt"];
810--2254[label="0.0923077;12pkt 12fpkt"];
810--2263[label="0.161538;21pkt 21fpkt"];
810--2270[label="0.161538;21pkt 21fpkt"];
840--1823[label="1;90pkt 90fpkt"];
840--2254[label="0.477778;43pkt 43fpkt"];
867--2074[label="1;65pkt 65fpkt"];
899--1128[label="0.117647;2pkt 2fpkt"];
899--1765[label="0.5;1pkt 1fpkt"];
899--2011[label="0.0588235;1pkt 1fpkt"];
899--2074[label="0.117647;2pkt 2fpkt"];
899--2090[label="0.117647;2pkt 2fpkt"];
899--2236[label="0.117647;2pkt 2fpkt"];
899--2254[label="0.0588235;1pkt 1fpkt"];
899--2258[label="0.176471;3pkt 3fpkt"];
899--2348[label="0.117647;2pkt 2fpkt"];
899--2457[label="0.117647;2pkt 2fpkt"];
899--2463[label="0.0588235;1pkt 1fpkt"];
899--2635[label="0.0588235;1pkt 1fpkt"];
899--2788[label="0.176471;3pkt 3fpkt"];
899--2992[label="0.117647;2pkt 2fpkt"];
899--2996[label="0.0588235;1pkt 1fpkt"];
899--3089[label="0.0588235;1pkt 1fpkt"];
899--3325[label="0.0588235;1pkt 1fpkt"];
899--3367[label="0.176471;3pkt 3fpkt"];
922--1865[label="0.00925926;1pkt 1fpkt"];
922--1869[label="0.561983;68pkt 68fpkt"];
922--1985[label="1;100pkt 100fpkt"];
922--2011[label="0.0330579;4pkt 4fpkt"];
922--2074[label="0.0743802;9pkt 9fpkt"];
922--2248[label="0.107438;13pkt 13fpkt"];
922--2254[label="0.0661157;8pkt 8fpkt"];
922--2258[label="0.0165289;2pkt 2fpkt"];
922--2263[label="0.107438;13pkt 13fpkt"];
922--2270[label="0.107438;13pkt 13fpkt"];
922--2680[label="0.037037;1pkt 1fpkt"];
922--2788[label="0.0330579;4pkt 4fpkt"];
922--3118[label="0.0384615;1pkt 1fpkt"];
922--3367[label="0.0330579;4pkt 4fpkt"];
954--2074[label="0.1875;6pkt 6fpkt"];
954--2258[label="0.03125;1pkt 1fpkt"];
956--1257[label="0.306818;27pkt 27fpkt"];
956--1396[label="0.0277778;2pkt 2fpkt"];
997--1219[label="1;6pkt 6fpkt"];
1003--1765[label="0.5;1pkt 1fpkt"];
1024--1865[label="0.222222;24pkt 24fpkt"];
1024--2011[label="0.0363636;4pkt 4fpkt"];
1024--2074[label="0.0909091;10pkt 10fpkt"];
1024--2248[label="0.154545;17pkt 17fpkt"];
1024--2254[label="0.0181818;2pkt 2fpkt"];
1024--2258[label="0.0272727;3pkt 3fpkt"];
1024--2263[label="0.154545;17pkt 17fpkt"];
1024--2270[label="0.154545;17pkt 17fpkt"];
1024--2457[label="0.0909091;10pkt 10fpkt"];
1024--2680[label="0.259259;7pkt 7fpkt"];
1024--2788[label="0.0454545;5pkt 5fpkt"];
1024--2992[label="0.0909091;10pkt 10fpkt"];
1024--3118[label="0.269231;7pkt 7fpkt"];
1024--3367[label="0.0454545;5pkt 5fpkt"];
1061--1086[label="0.4;4pkt 4fpkt"];
1061--1320[label="0.333333;3pkt 3fpkt"];
1061--1892[label="0.0833333;2pkt 2fpkt"];
1061--2061[label="0.4;4pkt 4fpkt"];
1061--2258[label="0.125;3pkt 3fpkt"];
1061--2296[label="0.571429;4pkt 4fpkt"];
1061--2915[label="0.666667;4pkt 4fpkt"];
1165--1997[label="1;64pkt 64fpkt"];
1165--2258[label="0.0625;4pkt 4fpkt"];
1165--2457[label="0.015625;1pkt 1fpkt"];
1165--2680[label="0.111111;3pkt 3fpkt"];
1165--2992[label="0.015625;1pkt 1fpkt"];
1165--3118[label="0.115385;3pkt 3fpkt"];
1219--1493[label="0.0645161;4pkt 4fpkt"];
1219--2258[label="0.666667;54pkt 54fpkt"];
1279--1405[label="0.2;10pkt 10fpkt"];
1279--1427[label="0.0108696;1pkt 1fpkt"];
1279--1661[label="0.0108696;1pkt 1fpkt"];
1279--1664[label="0.0326087;3pkt 3fpkt"];
1279--2107[label="0.0108696;1pkt 1fpkt"];
1279--2248[label="0.0326087;3pkt 3fpkt"];
1279--2254[label="0.0326087;3pkt 3fpkt"];
1279--2258[label="0.0869565;8pkt 8fpkt"];
1279--2263[label="0.0326087;3pkt 3fpkt"];
1279--2270[label="0.0326087;3pkt 3fpkt"];
1282--1852[label="0.0078125;1pkt 1fpkt"];
1282--2011[label="0.171875;22pkt 22fpkt"];
1282--2248[label="0.0546875;7pkt 7fpkt"];
1282--2254[label="0.015625;2pkt 2fpkt"];
1282--2263[label="0.0546875;7pkt 7fpkt"];
1282--2270[label="0.0546875;7pkt 7fpkt"];
1282--2788[label="0.0078125;1pkt 1fpkt"];
1282--3367[label="0.0078125;1pkt 1fpkt"];
1285--1663[label="0.0263158;1pkt 1fpkt"];
1285--1702[label="0.184211;7pkt 7fpkt"];
1285--2074[label="0.131579;5pkt 5fpkt"];
1285--2248[label="0.0526316;2pkt 2fpkt"];
1285--2254[label="0.105263;4pkt 4fpkt"];
1285--2258[label="0.0263158;1pkt 1fpkt"];
1285--2263[label="0.0526316;2pkt 2fpkt"];
1285--2270[label="0.0526316;2pkt 2fpkt"];
1285--2463[label="0.0263158;1pkt 1fpkt"];
1285--2753[label="0.789474;30pkt 30fpkt"];
1285--2996[label="0.0263158;1pkt 1fpkt"];
1285--3358[label="0.789474;30pkt 30fpkt"];
1304--1306[label="0.44898;22pkt 22fpkt"];
1304--1823[label="0.122449;6pkt 6fpkt"];
1304--2258[label="0.0612245;3pkt 3fpkt"];
1304--2467[label="0.183673;9pkt 9fpkt"];
1304--2800[label="0.122449;6pkt 6fpkt"];
1304--2998[label="0.183673;9pkt 9fpkt"];
1304--3097[label="0.166667;1pkt 1fpkt"];
1304--3181[label="0.122449;6pkt 6fpkt"];
1304--3369[label="0.142857;7pkt 7fpkt"];
1396--1661[label="0.0138889;1pkt 1fpkt"];
1396--1663[label="0.125;9pkt 9fpkt"];
1396--1664[label="0.0138889;1pkt 1fpkt"];
1396--1745[label="0.0212766;1pkt 1fpkt"];
1396--1852[label="0.277778;20pkt 20fpkt"];
1396--2011[label="0.0138889;1pkt 1fpkt"];
1396--2074[label="0.0138889;1pkt 1fpkt"];
1396--2187[label="0.125;9pkt 9fpkt"];
1396--2248[label="0.0972222;7pkt 7fpkt"];
1396--2254[label="0.0972222;7pkt 7fpkt"];
1396--2258[label="0.0277778;2pkt 2fpkt"];
1396--2263[label="0.0972222;7pkt 7fpkt"];
1396--2270[label="0.0972222;7pkt 7fpkt"];
1396--2424[label="0.166667;1pkt 1fpkt"];
1396--2463[label="0.125;9pkt 9fpkt"];
1396--2788[label="0.0416667;3pkt 3fpkt"];
1396--2981[label="0.2;1pkt 1fpkt"];
1396--2996[label="0.125;9pkt 9fpkt"];
1396--3367[label="0.0416667;3pkt 3fpkt"];
1415--1427[label="0.0166667;1pkt 1fpkt"];
1415--1823[label="0.133333;8pkt 8fpkt"];
1415--1852[label="0.15;9pkt 9fpkt"];
1415--2059[label="1;50pkt 50fpkt"];
1415--2107[label="0.0166667;1pkt 1fpkt"];
1415--2258[label="0.05;3pkt 3fpkt"];
1415--2788[label="0.0833333;5pkt 5fpkt"];
1415--3367[label="0.0833333;5pkt 5fpkt"];
1423--1493[label="0.0483871;3pkt 3fpkt"];
1423--1494[label="0.056338;4pkt 4fpkt"];
1423--1592[label="0.0923077;6pkt 6fpkt"];
1423--2018[label="0.0454545;4pkt 4fpkt"];
1493--1568[label="0.0645161;4pkt 4fpkt"];
1493--1661[label="0.016129;1pkt 1fpkt"];
1493--1852[label="0.0322581;2pkt 2fpkt"];
1493--2074[label="0.0483871;3pkt 3fpkt"];
1493--2248[label="0.0483871;3pkt 3fpkt"];
1493--2254[label="0.016129;1pkt 1fpkt"];
1493--2258[label="0.0645161;4pkt 4fpkt"];
1493--2263[label="0.0483871;3pkt 3fpkt"];
1493--2270[label="0.0483871;3pkt 3fpkt"];
1493--2753[label="0.419355;26pkt 26fpkt"];
1493--3358[label="0.419355;26pkt 26fpkt"];
1494--1568[label="0.056338;4pkt 4fpkt"];
1494--1852[label="0.028169;2pkt 2fpkt"];
1494--1949[label="0.533333;8pkt 8fpkt"];
1494--2074[label="0.028169;2pkt 2fpkt"];
1494--2248[label="0.056338;4pkt 4fpkt"];
1494--2254[label="0.0140845;1pkt 1fpkt"];
1494--2258[label="0.0140845;1pkt 1fpkt"];
1494--2263[label="0.056338;4pkt 4fpkt"];
1494--2270[label="0.056338;4pkt 4fpkt"];
1494--2508[label="0.133333;2pkt 2fpkt"];
1494--2970[label="0.47619;10pkt 10fpkt"];
1494--3019[label="0.133333;2pkt 2fpkt"];
1494--3272[label="0.47619;10pkt 10fpkt"];
1520--1823[label="0.0909091;4pkt 4fpkt"];
1520--1852[label="0.0909091;4pkt 4fpkt"];
1520--2074[label="0.0227273;1pkt 1fpkt"];
1520--2254[label="0.0681818;3pkt 3fpkt"];
1520--2258[label="0.0909091;4pkt 4fpkt"];
1568--1592[label="0.107692;7pkt 7fpkt"];
1568--1605[label="0.0172414;1pkt 1fpkt"];
1568--1973[label="0.0188679;1pkt 1fpkt"];
1568--2018[label="0.0649351;5pkt 5fpkt"];
1568--2050[label="0.012987;1pkt 1fpkt"];
1568--2248[label="0.0519481;4pkt 4fpkt"];
1568--2254[label="0.0519481;4pkt 4fpkt"];
1568--2258[label="0.038961;3pkt 3fpkt"];
1568--2263[label="0.0519481;4pkt 4fpkt"];
1568--2270[label="0.0519481;4pkt 4fpkt"];
1592--2066[label="0.4;18pkt 18fpkt"];
1592--2074[label="0.0307692;2pkt 2fpkt"];
1592--2248[label="0.0461538;3pkt 3fpkt"];
1592--2254[label="0.0307692;2pkt 2fpkt"];
1592--2258[label="0.0307692;2pkt 2fpkt"];
1592--2263[label="0.0461538;3pkt 3fpkt"];
1592--2270[label="0.0461538;3pkt 3fpkt"];
1592--2457[label="0.184615;12pkt 12fpkt"];
1592--2488[label="0.0461538;3pkt 3fpkt"];
1592--2904[label="0.0153846;1pkt 1fpkt"];
1592--2992[label="0.184615;12pkt 12fpkt"];
1592--3235[label="0.0153846;1pkt 1fpkt"];
1613--2258[label="0.25;4pkt 4fpkt"];
1627--2074[label="0.826087;19pkt 19fpkt"];
1627--2175[label="1;22pkt 22fpkt"];
1627--2258[label="0.173913;4pkt 4fpkt"];
1869--1985[label="0.68;68pkt 68fpkt"];
1869--2248[label="0.161538;21pkt 21fpkt"];
1869--2254[label="0.0923077;12pkt 12fpkt"];
1869--2263[label="0.161538;21pkt 21fpkt"];
1869--2270[label="0.161538;21pkt 21fpkt"];
1887--2074[label="1;2pkt 2fpkt"];
1985--2011[label="0.04;4pkt 4fpkt"];
1985--2074[label="0.08;8pkt 8fpkt"];
1985--2248[label="0.13;13pkt 13fpkt"];
1985--2254[label="0.08;8pkt 8fpkt"];
1985--2258[label="0.01;1pkt 1fpkt"];
1985--2263[label="0.13;13pkt 13fpkt"];
1985--2270[label="0.13;13pkt 13fpkt"];
1985--2680[label="0.037037;1pkt 1fpkt"];
1985--2788[label="0.03;3pkt 3fpkt"];
1985--3118[label="0.0384615;1pkt 1fpkt"];
1985--3367[label="0.03;3pkt 3fpkt"];
1997--2258[label="0.0625;4pkt 4fpkt"];
1997--2457[label="0.015625;1pkt 1fpkt"];
1997--2680[label="0.111111;3pkt 3fpkt"];
1997--2992[label="0.015625;1pkt 1fpkt"];
1997--3118[label="0.115385;3pkt 3fpkt"];
2018--2074[label="0.026087;3pkt 3fpkt"];
2018--2248[label="0.0347826;4pkt 4fpkt"];
2018--2254[label="0.00869565;1pkt 1fpkt"];
2018--2258[label="0.00869565;1pkt 1fpkt"];
2018--2263[label="0.0347826;4pkt 4fpkt"];
2018--2270[label="0.0347826;4pkt 4fpkt"];
2018--2753[label="0.747826;86pkt 86fpkt"];
2018--2788[label="0.00869565;1pkt 1fpkt"];
2018--2904[label="0.00869565;1pkt 1fpkt"];
2018--3235[label="0.00869565;1pkt 1fpkt"];
2018--3358[label="0.747826;86pkt 86fpkt"];
2018--3367[label="0.00869565;1pkt 1fpkt"];
2059--2107[label="0.02;1pkt 1fpkt"];
2059--2258[label="0.06;3pkt 3fpkt"];
2059--2788[label="0.1;5pkt 5fpkt"];
2059--3367[label="0.1;5pkt 5fpkt"];
2074--2175[label="0.818182;18pkt 18fpkt"];
2074--2220[label="0.0042735;1pkt 1fpkt"];
2074--2248[label="0.0339105;47pkt 47fpkt"];
2074--2254[label="0.047619;66pkt 66fpkt"];
2074--2258[label="0.0642136;89pkt 89fpkt"];
2074--2263[label="0.0339105;47pkt 47fpkt"];
2074--2270[label="0.0339105;47pkt 47fpkt"];
2175--2258[label="0.181818;4pkt 4fpkt"];
2296--2915[label="1;6pkt 6fpkt"];
2424--2981[label="1;5pkt 5fpkt"];
2508--3019[label="1;15pkt 15fpkt"];
2635--3089[label="1;46pkt 46fpkt"];
2635--3325[label="1;46pkt 46fpkt"];
2680--3118[label="1;26pkt 26fpkt"];
3089--3325[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="209.85.224.105"/>
      <filter dst_port="80" src_ip="209.85.226.250"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.747653,1.99621,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
12[label="141.133.95.33s;1pkt 1fpkt", shape=rectangle, color=red];
125[label="72.162.8.208d;1pkt 1fpkt", shape=rectangle, color=red];
1615[label="72.162.8.208;d;6pkt 6fpkt", shape=diamond, color=yellow];
1640[label="141.133.95.33;s;22pkt 22fpkt", shape=diamond, color=yellow];
2558[label="151.244.234.102;28pkt 28fpkt", shape=pentagon, color=darkviolet];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.95.33:*, *:80}[40.7407%]&lt;BR/&gt;{151.244.234.102:*, 206.52.152.170:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1113: (4.31034%)&lt;BR/&gt; 1142: (1.72414%)&lt;BR/&gt; 1110: (1.72414%)&lt;BR/&gt; 1108: (1.72414%)&gt;];
}
12--125[label="1;1pkt 1fpkt"];
12--1615[label="1;1pkt 1fpkt"];
12--1640[label="1;1pkt 1fpkt"];
125--1615[label="1;1pkt 1fpkt"];
125--1640[label="1;1pkt 1fpkt"];
1615--1640[label="0.166667;1pkt 1fpkt"];
1615--1791[label="0.166667;1pkt 1fpkt"];
1615--2074[label="0.166667;1pkt 1fpkt"];
1615--2558[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="141.133.95.33"/>
      <filter dst_ip="206.52.152.170" dst_port="80" src_ip="151.244.234.102"/>
    </slice>
    <from sec="1031547914" usec="0"/>
    <to sec="1031548594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="164.15.143.161"/>
      <from sec="1031548101" usec="0"/>
      <to sec="1031548608" usec="0"/>
    </slice>
    <from sec="1031548101" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737329,2.04056,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
57[label="136.65.40.157s;1pkt 1fpkt", shape=rectangle, color=red];
1645[label="136.65.40.157;s;38pkt 38fpkt", shape=diamond, color=yellow];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.40.157:*, 218.128.220.247:80}[60.5263%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2277: (2.5641%)&lt;BR/&gt; 2279: (1.28205%)&lt;BR/&gt; 2278: (1.28205%)&lt;BR/&gt; 2274: (1.28205%)&gt;];
}
57--1645[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.128.220.247" dst_port="80" src_ip="136.65.40.157"/>
    </slice>
    <from sec="1031548476" usec="0"/>
    <to sec="1031548659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737329,2.04056,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
116[label="136.65.162.167d;1pkt 1fpkt", shape=rectangle, color=red];
1651[label="205.186.41.141;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.186.41.141:80, 136.65.162.167:62569}[50%]&lt;BR/&gt;{205.186.41.141:80, 136.65.162.167:62609}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62569: (33.3333%)&lt;BR/&gt; 62609: (16.6667%)&gt;];
}
116--1651[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.162.167" dst_port="62609" src_ip="205.186.41.141" src_port="80"/>
      <filter dst_ip="136.65.162.167" dst_port="62569" src_ip="205.186.41.141" src_port="80"/>
    </slice>
    <from sec="1031548513" usec="0"/>
    <to sec="1031548630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.841301,1.96807,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
54[label="141.133.16.150s;2pkt 2fpkt", shape=rectangle, color=red];
1659[label="220.41.201.252;d;8pkt 8fpkt", shape=diamond, color=yellow];
2667[label="141.133.16.150;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3108[label="141.133.16.150;15pkt 15fpkt", shape=invtriangle, color=brown];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.16.150:*, 220.41.201.252:80}[50%]&lt;BR/&gt;{141.133.16.150:*, 44.30.217.175:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49539: (5%)&lt;BR/&gt; 49538: (5%)&lt;BR/&gt; 49541: (3.75%)&lt;BR/&gt; 49540: (3.75%)&gt;];
}
54--1659[label="1;2pkt 2fpkt"];
54--2667[label="1;2pkt 2fpkt"];
54--3108[label="1;2pkt 2fpkt"];
1659--2090[label="0.125;1pkt 1fpkt"];
1659--2236[label="0.125;1pkt 1fpkt"];
1659--2348[label="0.125;1pkt 1fpkt"];
1659--2667[label="0.875;7pkt 7fpkt"];
1659--3108[label="0.875;7pkt 7fpkt"];
2667--3108[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="220.41.201.252" dst_port="80" src_ip="141.133.16.150"/>
      <filter dst_ip="44.30.217.175" dst_port="80" src_ip="141.133.16.150"/>
    </slice>
    <from sec="1031548149" usec="0"/>
    <to sec="1031548670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.737329,2.04056,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
37[label="209.85.224.105s;2pkt 2fpkt", shape=rectangle, color=red];
538[label="46.40.155.50;d;5pkt 5fpkt", shape=diamond, color=yellow];
1025[label="209.12.82.201;d;85pkt 85fpkt", shape=diamond, color=yellow];
1332[label="207.134.67.103;d;7pkt 7fpkt", shape=diamond, color=yellow];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.85.224.16:*, 209.12.82.201:80}[53.0612%]&lt;BR/&gt;{209.85.224.105:*, 209.12.82.201:80}[26.5306%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4949%)&lt;BR/&gt; 3208: (1.0101%)&lt;BR/&gt; 0: (1.0101%)&lt;BR/&gt; 4826: (0.505051%)&lt;BR/&gt; 4824: (0.505051%)&gt;];
}
37--165[label="1;2pkt 2fpkt"];
37--671[label="0.5;1pkt 1fpkt"];
37--1332[label="0.5;1pkt 1fpkt"];
37--1661[label="0.5;1pkt 1fpkt"];
37--2254[label="0.5;1pkt 1fpkt"];
37--2258[label="0.5;1pkt 1fpkt"];
538--1661[label="0.2;1pkt 1fpkt"];
538--2248[label="0.2;1pkt 1fpkt"];
538--2254[label="0.2;1pkt 1fpkt"];
538--2263[label="0.2;1pkt 1fpkt"];
538--2270[label="0.2;1pkt 1fpkt"];
1025--1427[label="0.0117647;1pkt 1fpkt"];
1025--1661[label="0.223529;19pkt 19fpkt"];
1025--2088[label="0.611765;52pkt 52fpkt"];
1025--2107[label="0.0117647;1pkt 1fpkt"];
1025--2248[label="0.0470588;4pkt 4fpkt"];
1025--2254[label="0.105882;9pkt 9fpkt"];
1025--2258[label="0.0235294;2pkt 2fpkt"];
1025--2263[label="0.0470588;4pkt 4fpkt"];
1025--2270[label="0.0470588;4pkt 4fpkt"];
1025--3254[label="0.611765;52pkt 52fpkt"];
1332--2258[label="0.857143;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="209.12.82.201" dst_port="80" src_ip="209.85.224.16"/>
      <filter dst_ip="209.12.82.201" dst_port="80" src_ip="209.85.224.105"/>
    </slice>
    <from sec="1031547602" usec="0"/>
    <to sec="1031548655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
323[label="136.65.162.149;d;3pkt 3fpkt", shape=diamond, color=yellow];
354[label="195.144.248.240;s;1pkt 1fpkt", shape=diamond, color=yellow];
1688[label="136.65.162.149;d;3pkt 3fpkt", shape=hexagon, color=black];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.144.248.240:1089, 136.65.162.149:22}[33.3333%]&lt;BR/&gt;{194.208.167.22:3885, 136.65.162.149:22}[33.3333%]&lt;BR/&gt;{194.208.167.22:4311, 136.65.162.149:22}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 1089: (21.4286%)&lt;BR/&gt; 4311: (14.2857%)&lt;BR/&gt; 3885: (14.2857%)&gt;];
}
323--354[label="1;1pkt 1fpkt"];
323--485[label="0.666667;2pkt 2fpkt"];
323--1688[label="1;3pkt 3fpkt"];
354--1688[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.162.149" dst_port="22" src_ip="194.208.167.22" src_port="4311"/>
      <filter dst_ip="136.65.162.149" dst_port="22" src_ip="194.208.167.22" src_port="3885"/>
      <filter dst_ip="136.65.162.149" dst_port="22" src_ip="195.144.248.240" src_port="1089"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
170[label="18.14.168.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
1696[label="18.14.168.72;s;1pkt 1fpkt", shape=hexagon, color=black];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.14.168.72:6699, 136.65.6.194:3756}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3756: (50%)&gt;];
}
170--1696[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.6.194" dst_port="3756" src_ip="18.14.168.72" src_port="6699"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031547798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
181[label="170.127.32.222;s;1pkt 1fpkt", shape=diamond, color=yellow];
1697[label="170.127.32.222;s;1pkt 1fpkt", shape=hexagon, color=black];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.127.32.222:6699, 162.73.33.42:3284}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3284: (50%)&gt;];
}
181--697[label="1;1pkt 1fpkt"];
181--1697[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.33.42" dst_port="3284" src_ip="170.127.32.222" src_port="6699"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23757,1.95444,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
258[label="86.57.117.25;s;1pkt 1fpkt", shape=diamond, color=yellow];
378[label="86.63.128.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
379[label="162.73.5.75;d;115pkt 115fpkt", shape=diamond, color=yellow];
388[label="201.139.235.49;s;1pkt 1fpkt", shape=diamond, color=yellow];
430[label="86.57.112.0;s;1pkt 1fpkt", shape=diamond, color=yellow];
462[label="86.57.15.247;s;1pkt 1fpkt", shape=diamond, color=yellow];
478[label="86.2.173.150;s;1pkt 1fpkt", shape=diamond, color=yellow];
605[label="201.139.234.121;s;1pkt 1fpkt", shape=diamond, color=yellow];
625[label="87.104.27.53;s;1pkt 1fpkt", shape=diamond, color=yellow];
631[label="192.14.163.215;s;1pkt 1fpkt", shape=diamond, color=yellow];
654[label="86.60.210.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
687[label="86.62.68.167;s;1pkt 1fpkt", shape=diamond, color=yellow];
709[label="86.62.70.238;s;1pkt 1fpkt", shape=diamond, color=yellow];
833[label="218.134.13.249;s;2pkt 2fpkt", shape=diamond, color=yellow];
1045[label="201.252.73.119;s;1pkt 1fpkt", shape=diamond, color=yellow];
1084[label="195.100.196.145;s;1pkt 1fpkt", shape=diamond, color=yellow];
1330[label="216.149.96.104;s;1pkt 1fpkt", shape=diamond, color=yellow];
1379[label="47.73.164.150;s;1pkt 1fpkt", shape=diamond, color=yellow];
1599[label="86.62.50.153;s;7pkt 7fpkt", shape=diamond, color=yellow];
1700[label="162.73.5.75;d;106pkt 106fpkt", shape=hexagon, color=black];
1739[label="192.14.163.215;s;1pkt 1fpkt", shape=hexagon, color=black];
1768[label="87.104.27.53;s;1pkt 1fpkt", shape=hexagon, color=black];
1919[label="86.60.210.181;s;1pkt 1fpkt", shape=hexagon, color=black];
2000[label="195.100.196.145;s;1pkt 1fpkt", shape=hexagon, color=black];
2077[label="201.139.235.49;s;1pkt 1fpkt", shape=hexagon, color=black];
2227[label="192.14.163.215;s;1pkt 1fpkt", shape=polygon, color=gold];
2712[label="86.62.68.167;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2749[label="86.57.32.181;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2898[label="218.134.13.249;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3135[label="86.62.68.167;1pkt 1fpkt", shape=invtriangle, color=brown];
3159[label="86.57.32.181;2pkt 2fpkt", shape=invtriangle, color=brown];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 162.73.5.75:*}[93.0435%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (46.7308%)&lt;BR/&gt; 0: (3.84615%)&lt;BR/&gt; 4866: (0.961538%)&lt;BR/&gt; 4092: (0.961538%)&lt;BR/&gt; 4891: (0.769231%)&gt;];
}
258--379[label="1;1pkt 1fpkt"];
258--1700[label="1;1pkt 1fpkt"];
378--379[label="1;1pkt 1fpkt"];
378--1700[label="1;1pkt 1fpkt"];
379--388[label="1;1pkt 1fpkt"];
379--430[label="1;1pkt 1fpkt"];
379--462[label="1;1pkt 1fpkt"];
379--478[label="1;1pkt 1fpkt"];
379--605[label="1;1pkt 1fpkt"];
379--625[label="1;1pkt 1fpkt"];
379--631[label="1;1pkt 1fpkt"];
379--654[label="1;1pkt 1fpkt"];
379--687[label="1;1pkt 1fpkt"];
379--709[label="1;1pkt 1fpkt"];
379--833[label="1;2pkt 2fpkt"];
379--1045[label="1;1pkt 1fpkt"];
379--1084[label="1;1pkt 1fpkt"];
379--1330[label="1;1pkt 1fpkt"];
379--1379[label="1;1pkt 1fpkt"];
379--1599[label="1;7pkt 7fpkt"];
379--1700[label="1;106pkt 106fpkt"];
379--1739[label="1;1pkt 1fpkt"];
379--1768[label="1;1pkt 1fpkt"];
379--1919[label="1;1pkt 1fpkt"];
379--2000[label="1;1pkt 1fpkt"];
379--2077[label="1;1pkt 1fpkt"];
379--2227[label="1;1pkt 1fpkt"];
379--2712[label="1;1pkt 1fpkt"];
379--2749[label="1;2pkt 2fpkt"];
379--2898[label="1;2pkt 2fpkt"];
379--3135[label="1;1pkt 1fpkt"];
379--3159[label="1;2pkt 2fpkt"];
388--1700[label="1;1pkt 1fpkt"];
388--2077[label="1;1pkt 1fpkt"];
430--1700[label="1;1pkt 1fpkt"];
462--1700[label="1;1pkt 1fpkt"];
478--1700[label="1;1pkt 1fpkt"];
605--1700[label="1;1pkt 1fpkt"];
625--1700[label="1;1pkt 1fpkt"];
625--1768[label="1;1pkt 1fpkt"];
631--1700[label="1;1pkt 1fpkt"];
631--1739[label="1;1pkt 1fpkt"];
631--2227[label="1;1pkt 1fpkt"];
654--1700[label="1;1pkt 1fpkt"];
654--1919[label="1;1pkt 1fpkt"];
687--1700[label="1;1pkt 1fpkt"];
687--2712[label="1;1pkt 1fpkt"];
687--3135[label="1;1pkt 1fpkt"];
709--1700[label="1;1pkt 1fpkt"];
833--1700[label="1;2pkt 2fpkt"];
833--2898[label="1;2pkt 2fpkt"];
1045--1700[label="1;1pkt 1fpkt"];
1084--1700[label="1;1pkt 1fpkt"];
1084--2000[label="1;1pkt 1fpkt"];
1330--1700[label="1;1pkt 1fpkt"];
1379--1700[label="1;1pkt 1fpkt"];
1599--1700[label="0.857143;6pkt 6fpkt"];
1700--1739[label="1;1pkt 1fpkt"];
1700--1768[label="1;1pkt 1fpkt"];
1700--1919[label="1;1pkt 1fpkt"];
1700--2000[label="1;1pkt 1fpkt"];
1700--2077[label="1;1pkt 1fpkt"];
1700--2227[label="1;1pkt 1fpkt"];
1700--2712[label="1;1pkt 1fpkt"];
1700--2749[label="1;2pkt 2fpkt"];
1700--2898[label="1;2pkt 2fpkt"];
1700--3135[label="1;1pkt 1fpkt"];
1700--3159[label="1;2pkt 2fpkt"];
1739--2227[label="1;1pkt 1fpkt"];
2712--3135[label="1;1pkt 1fpkt"];
2749--3159[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.5.75" src_port="4662"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
393[label="54.88.198.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
1701[label="54.88.198.217;s;1pkt 1fpkt", shape=hexagon, color=black];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.88.198.217:5900, 141.133.197.95:3445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5900: (50%)&lt;BR/&gt; 3445: (50%)&gt;];
}
393--1701[label="1;1pkt 1fpkt"];
393--1728[label="1;1pkt 1fpkt"];
1701--1728[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.197.95" dst_port="3445" src_ip="54.88.198.217" src_port="5900"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.522387,2.02397,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
423[label="193.47.85.212;s;2pkt 2fpkt", shape=diamond, color=yellow];
2827[label="193.47.85.212;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.47.85.212:80, 209.85.224.7:3833}[50%]&lt;BR/&gt;{193.47.85.212:80, 209.85.224.7:3960}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3960: (33.3333%)&lt;BR/&gt; 3833: (16.6667%)&gt;];
}
423--1705[label="1;1pkt 1fpkt"];
423--2247[label="0.5;1pkt 1fpkt"];
423--2255[label="0.5;1pkt 1fpkt"];
423--2827[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.85.224.7" dst_port="3960" src_ip="193.47.85.212" src_port="80"/>
      <filter dst_ip="209.85.224.7" dst_port="3833" src_ip="193.47.85.212" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749014,1.94966,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
180[label="162.73.33.42;s;5pkt 5fpkt", shape=diamond, color=yellow];
209[label="73.11.212.21;d;1pkt 1fpkt", shape=diamond, color=yellow];
306[label="208.144.192.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
796[label="86.198.12.128;d;1pkt 1fpkt", shape=diamond, color=yellow];
1708[label="208.144.192.104;d;1pkt 1fpkt", shape=hexagon, color=black];
2404[label="162.73.33.42;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2973[label="162.73.33.42;5pkt 5fpkt", shape=invtriangle, color=brown];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.33.42:3289, 73.11.212.21:1214}[20%]&lt;BR/&gt;{162.73.33.42:3276, 208.144.192.104:1214}[20%]&lt;BR/&gt;{162.73.33.42:3169, 86.198.12.128:6699}[20%]&lt;BR/&gt;{162.73.33.42:3144, 86.85.78.219:6699}[20%]&lt;BR/&gt;{162.73.33.42:3268, 192.108.145.226:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (26.3158%)&lt;BR/&gt; 1214: (23.6842%)&lt;BR/&gt; 3276: (13.1579%)&lt;BR/&gt; 3289: (10.5263%)&lt;BR/&gt; 3169: (10.5263%)&gt;];
}
180--209[label="1;1pkt 1fpkt"];
180--306[label="1;1pkt 1fpkt"];
180--796[label="1;1pkt 1fpkt"];
180--1708[label="1;1pkt 1fpkt"];
180--2404[label="1;5pkt 5fpkt"];
180--2973[label="1;5pkt 5fpkt"];
209--2404[label="1;1pkt 1fpkt"];
209--2973[label="1;1pkt 1fpkt"];
306--1708[label="1;1pkt 1fpkt"];
306--2404[label="1;1pkt 1fpkt"];
306--2973[label="1;1pkt 1fpkt"];
796--2404[label="1;1pkt 1fpkt"];
796--2973[label="1;1pkt 1fpkt"];
1708--2404[label="1;1pkt 1fpkt"];
1708--2973[label="1;1pkt 1fpkt"];
2404--2973[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="192.108.145.226" dst_port="6699" src_ip="162.73.33.42" src_port="3268"/>
      <filter dst_ip="86.85.78.219" dst_port="6699" src_ip="162.73.33.42" src_port="3144"/>
      <filter dst_ip="86.198.12.128" dst_port="6699" src_ip="162.73.33.42" src_port="3169"/>
      <filter dst_ip="208.144.192.104" dst_port="1214" src_ip="162.73.33.42" src_port="3276"/>
      <filter dst_ip="73.11.212.21" dst_port="1214" src_ip="162.73.33.42" src_port="3289"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749014,1.94966,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
515[label="205.7.142.18;s;50pkt 50fpkt", shape=diamond, color=yellow];
516[label="141.133.194.214;d;346pkt 346fpkt", shape=diamond, color=yellow];
1446[label="205.7.161.81;s;113pkt 113fpkt", shape=diamond, color=yellow];
1448[label="205.7.161.93;s;120pkt 120fpkt", shape=diamond, color=yellow];
1713[label="205.7.142.18;s;50pkt 50fpkt", shape=hexagon, color=black];
1714[label="141.133.194.214;d;346pkt 346fpkt", shape=hexagon, color=black];
2068[label="205.7.161.81;s;110pkt 110fpkt", shape=hexagon, color=black];
2150[label="209.170.122.139;d;119pkt 119fpkt", shape=hexagon, color=black];
2334[label="205.7.142.18;50pkt 50fpkt", shape=pentagon, color=darkviolet];
2498[label="205.7.219.79;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2506[label="205.7.161.81;162pkt 162fpkt", shape=pentagon, color=darkviolet];
2538[label="205.7.161.93;122pkt 122fpkt", shape=pentagon, color=darkviolet];
3018[label="205.7.161.81;162pkt 162fpkt", shape=invtriangle, color=brown];
3038[label="205.7.161.93;122pkt 122fpkt", shape=invtriangle, color=brown];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 141.133.194.214:*}[44.4898%]&lt;BR/&gt;{205.7.161.81:80, 141.133.239.218:*}[20.8163%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9931%)&lt;BR/&gt; 7891: (0.582936%)&lt;BR/&gt; 1024: (0.158983%)&lt;BR/&gt; 53: (0.158983%)&lt;BR/&gt; 47007: (0.132485%)&gt;];
}
515--516[label="1;50pkt 50fpkt"];
515--1713[label="1;50pkt 50fpkt"];
515--1714[label="1;50pkt 50fpkt"];
515--2247[label="0.04;2pkt 2fpkt"];
515--2334[label="1;50pkt 50fpkt"];
516--561[label="0.175824;16pkt 16fpkt"];
516--683[label="0.0924855;32pkt 32fpkt"];
516--1263[label="0.00943396;1pkt 1fpkt"];
516--1266[label="0.025;1pkt 1fpkt"];
516--1352[label="0.0172414;3pkt 3fpkt"];
516--1488[label="0.01875;3pkt 3fpkt"];
516--1713[label="1;50pkt 50fpkt"];
516--1714[label="1;346pkt 346fpkt"];
516--1723[label="0.242424;16pkt 16fpkt"];
516--2013[label="0.0172414;3pkt 3fpkt"];
516--2247[label="0.0260116;9pkt 9fpkt"];
516--2255[label="0.0289017;10pkt 10fpkt"];
516--2257[label="0.0115607;4pkt 4fpkt"];
516--2267[label="0.0115607;4pkt 4fpkt"];
516--2274[label="0.0115607;4pkt 4fpkt"];
516--2315[label="0.025641;1pkt 1fpkt"];
516--2327[label="0.0833333;2pkt 2fpkt"];
516--2334[label="1;50pkt 50fpkt"];
516--2420[label="0.0277778;1pkt 1fpkt"];
516--2498[label="1;15pkt 15fpkt"];
516--2506[label="0.0185185;3pkt 3fpkt"];
516--2515[label="0.142857;1pkt 1fpkt"];
516--2538[label="0.0163934;2pkt 2fpkt"];
516--2933[label="0.0833333;2pkt 2fpkt"];
516--3018[label="0.0185185;3pkt 3fpkt"];
516--3025[label="0.125;1pkt 1fpkt"];
516--3038[label="0.0163934;2pkt 2fpkt"];
1446--2068[label="0.990909;109pkt 109fpkt"];
1446--2150[label="0.0442478;5pkt 5fpkt"];
1446--2257[label="0.734513;83pkt 83fpkt"];
1446--2267[label="0.734513;83pkt 83fpkt"];
1446--2274[label="0.734513;83pkt 83fpkt"];
1446--2506[label="1;113pkt 113fpkt"];
1446--3018[label="1;113pkt 113fpkt"];
1448--2150[label="0.0336134;4pkt 4fpkt"];
1448--2538[label="1;120pkt 120fpkt"];
1448--3038[label="1;120pkt 120fpkt"];
1713--1714[label="1;50pkt 50fpkt"];
1713--2247[label="0.04;2pkt 2fpkt"];
1713--2334[label="1;50pkt 50fpkt"];
1714--1723[label="0.242424;16pkt 16fpkt"];
1714--2013[label="0.0172414;3pkt 3fpkt"];
1714--2247[label="0.0260116;9pkt 9fpkt"];
1714--2255[label="0.0289017;10pkt 10fpkt"];
1714--2257[label="0.0115607;4pkt 4fpkt"];
1714--2267[label="0.0115607;4pkt 4fpkt"];
1714--2274[label="0.0115607;4pkt 4fpkt"];
1714--2315[label="0.025641;1pkt 1fpkt"];
1714--2327[label="0.0833333;2pkt 2fpkt"];
1714--2334[label="1;50pkt 50fpkt"];
1714--2420[label="0.0277778;1pkt 1fpkt"];
1714--2498[label="1;15pkt 15fpkt"];
1714--2506[label="0.0185185;3pkt 3fpkt"];
1714--2515[label="0.142857;1pkt 1fpkt"];
1714--2538[label="0.0163934;2pkt 2fpkt"];
1714--2933[label="0.0833333;2pkt 2fpkt"];
1714--3018[label="0.0185185;3pkt 3fpkt"];
1714--3025[label="0.125;1pkt 1fpkt"];
1714--3038[label="0.0163934;2pkt 2fpkt"];
2068--2150[label="0.0454545;5pkt 5fpkt"];
2068--2257[label="0.754545;83pkt 83fpkt"];
2068--2267[label="0.754545;83pkt 83fpkt"];
2068--2274[label="0.754545;83pkt 83fpkt"];
2068--2506[label="1;110pkt 110fpkt"];
2068--3018[label="1;110pkt 110fpkt"];
2150--2247[label="0.00840336;1pkt 1fpkt"];
2150--2255[label="0.0168067;2pkt 2fpkt"];
2150--2257[label="0.00840336;1pkt 1fpkt"];
2150--2267[label="0.00840336;1pkt 1fpkt"];
2150--2274[label="0.00840336;1pkt 1fpkt"];
2150--2311[label="0.0416667;2pkt 2fpkt"];
2150--2327[label="0.0416667;1pkt 1fpkt"];
2150--2358[label="0.00840336;1pkt 1fpkt"];
2150--2390[label="0.0444444;2pkt 2fpkt"];
2150--2506[label="0.0420168;5pkt 5fpkt"];
2150--2538[label="0.0336134;4pkt 4fpkt"];
2150--2557[label="0.0425532;2pkt 2fpkt"];
2150--2564[label="0.047619;1pkt 1fpkt"];
2150--2566[label="0.0425532;2pkt 2fpkt"];
2150--2923[label="0.0377358;2pkt 2fpkt"];
2150--2933[label="0.0416667;1pkt 1fpkt"];
2150--3018[label="0.0420168;5pkt 5fpkt"];
2150--3038[label="0.0336134;4pkt 4fpkt"];
2150--3051[label="0.0425532;2pkt 2fpkt"];
2150--3246[label="0.0384615;2pkt 2fpkt"];
2506--3018[label="1;162pkt 162fpkt"];
2538--3038[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.194.214" src_port="80"/>
      <filter dst_ip="141.133.239.218" src_ip="205.7.161.81" src_port="80"/>
    </slice>
    <from sec="1031547605" usec="0"/>
    <to sec="1031548605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
547[label="46.171.78.201;s;20pkt 20fpkt", shape=diamond, color=yellow];
672[label="162.73.84.138;d;20pkt 20fpkt", shape=diamond, color=yellow];
1720[label="46.171.78.201;s;20pkt 20fpkt", shape=hexagon, color=black];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{46.171.78.201:80, 162.73.84.138:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1450: (2.5%)&lt;BR/&gt; 1449: (2.5%)&lt;BR/&gt; 1448: (2.5%)&lt;BR/&gt; 1447: (2.5%)&gt;];
}
547--672[label="1;20pkt 20fpkt"];
547--1720[label="1;20pkt 20fpkt"];
672--1720[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.84.138" src_ip="46.171.78.201" src_port="80"/>
    </slice>
    <from sec="1031547649" usec="0"/>
    <to sec="1031547836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
549[label="136.45.28.232;s;4pkt 4fpkt", shape=diamond, color=yellow];
1462[label="219.143.45.112;d;3pkt 3fpkt", shape=diamond, color=yellow];
1722[label="136.45.28.232;s;21pkt 21fpkt", shape=hexagon, color=black];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.45.28.232:*, 142.43.12.39:80}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.2857%)&lt;BR/&gt; 55873: (3.57143%)&lt;BR/&gt; 49454: (3.57143%)&lt;BR/&gt; 48993: (3.57143%)&lt;BR/&gt; 48983: (3.57143%)&gt;];
}
549--1462[label="1;3pkt 3fpkt"];
549--1721[label="0.25;1pkt 1fpkt"];
549--1722[label="0.25;1pkt 1fpkt"];
1722--2254[label="0.428571;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="142.43.12.39" dst_port="80" src_ip="136.45.28.232"/>
    </slice>
    <from sec="1031547654" usec="0"/>
    <to sec="1031548384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
198[label="209.129.201.112;d;1130pkt 1130fpkt", shape=diamond, color=yellow];
281[label="194.226.36.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
376[label="170.79.242.100;s;1pkt 1fpkt", shape=diamond, color=yellow];
421[label="195.139.89.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
442[label="208.144.139.61;s;1pkt 1fpkt", shape=diamond, color=yellow];
585[label="72.206.229.213;s;1pkt 1fpkt", shape=diamond, color=yellow];
614[label="46.195.198.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
616[label="72.206.229.214;s;1pkt 1fpkt", shape=diamond, color=yellow];
723[label="72.2.103.67;s;1pkt 1fpkt", shape=diamond, color=yellow];
728[label="204.45.111.195;s;1pkt 1fpkt", shape=diamond, color=yellow];
809[label="141.133.8.17;d;130pkt 130fpkt", shape=diamond, color=yellow];
971[label="195.87.96.201;s;1pkt 1fpkt", shape=diamond, color=yellow];
1020[label="72.178.23.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
1156[label="75.111.8.44;s;2pkt 2fpkt", shape=diamond, color=yellow];
1294[label="44.88.77.168;s;51pkt 51fpkt", shape=diamond, color=yellow];
1349[label="213.73.51.165;s;280pkt 280fpkt", shape=diamond, color=yellow];
1425[label="172.230.173.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
1536[label="74.114.8.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
1569[label="216.7.83.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
1586[label="86.32.22.196;s;1pkt 1fpkt", shape=diamond, color=yellow];
1726[label="209.129.201.112;d;448pkt 448fpkt", shape=hexagon, color=black];
1810[label="207.43.195.227;s;53pkt 53fpkt", shape=hexagon, color=black];
1903[label="46.195.198.17;s;1pkt 1fpkt", shape=hexagon, color=black];
1942[label="170.79.242.100;s;1pkt 1fpkt", shape=hexagon, color=black];
1953[label="204.45.111.195;s;1pkt 1fpkt", shape=hexagon, color=black];
2358[label="213.7.3.27;131pkt 131fpkt", shape=pentagon, color=darkviolet];
2364[label="204.213.180.28;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2458[label="205.137.242.64;86pkt 86fpkt", shape=pentagon, color=darkviolet];
2509[label="213.7.31.82;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2565[label="75.97.96.106;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2595[label="72.235.121.122;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2610[label="72.105.48.129;32pkt 32fpkt", shape=pentagon, color=darkviolet];
2726[label="219.184.39.172;53pkt 53fpkt", shape=pentagon, color=darkviolet];
2729[label="75.97.97.172;41pkt 41fpkt", shape=pentagon, color=darkviolet];
2789[label="86.32.22.196;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2906[label="18.168.191.255;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2955[label="204.213.180.28;18pkt 18fpkt", shape=invtriangle, color=brown];
2993[label="205.137.242.64;86pkt 86fpkt", shape=invtriangle, color=brown];
3020[label="213.7.31.82;2pkt 2fpkt", shape=invtriangle, color=brown];
3076[label="72.105.48.129;32pkt 32fpkt", shape=invtriangle, color=brown];
3087[label="207.224.50.136;1pkt 1fpkt", shape=invtriangle, color=brown];
3133[label="213.73.51.165;281pkt 281fpkt", shape=invtriangle, color=brown];
3144[label="219.184.39.172;53pkt 53fpkt", shape=invtriangle, color=brown];
3194[label="72.206.229.214;1pkt 1fpkt", shape=invtriangle, color=brown];
3237[label="18.168.191.255;1pkt 1fpkt", shape=invtriangle, color=brown];
3282[label="205.137.242.64;86pkt 86fpkt", shape=invhouse, color=bisque];
3345[label="213.73.51.165;281pkt 281fpkt", shape=invhouse, color=bisque];
3350[label="219.184.39.172;54pkt 54fpkt", shape=invhouse, color=bisque];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 209.129.201.112:*}[26.7745%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.1587%)&lt;BR/&gt; 53: (9.34261%)&lt;BR/&gt; 1863: (4.21972%)&lt;BR/&gt; 5190: (1.2141%)&lt;BR/&gt; 6699: (1.11045%)&gt;];
}
198--281[label="1;1pkt 1fpkt"];
198--315[label="0.0596546;38pkt 38fpkt"];
198--376[label="1;1pkt 1fpkt"];
198--421[label="1;1pkt 1fpkt"];
198--442[label="1;1pkt 1fpkt"];
198--585[label="1;1pkt 1fpkt"];
198--614[label="1;1pkt 1fpkt"];
198--616[label="1;1pkt 1fpkt"];
198--621[label="0.0108225;5pkt 5fpkt"];
198--695[label="0.230769;3pkt 3fpkt"];
198--702[label="0.0254777;4pkt 4fpkt"];
198--723[label="1;1pkt 1fpkt"];
198--728[label="1;1pkt 1fpkt"];
198--746[label="0.037037;2pkt 2fpkt"];
198--769[label="0.0784314;4pkt 4fpkt"];
198--779[label="0.0491071;11pkt 11fpkt"];
198--795[label="0.111111;1pkt 1fpkt"];
198--830[label="0.590909;52pkt 52fpkt"];
198--902[label="0.0176991;2pkt 2fpkt"];
198--923[label="0.0384615;4pkt 4fpkt"];
198--924[label="0.0131579;1pkt 1fpkt"];
198--971[label="1;1pkt 1fpkt"];
198--1020[label="1;1pkt 1fpkt"];
198--1030[label="0.0314961;4pkt 4fpkt"];
198--1070[label="0.159322;47pkt 47fpkt"];
198--1126[label="0.0952381;8pkt 8fpkt"];
198--1156[label="1;2pkt 2fpkt"];
198--1190[label="1;1pkt 1fpkt"];
198--1263[label="0.0566038;6pkt 6fpkt"];
198--1294[label="0.372549;19pkt 19fpkt"];
198--1349[label="0.0857143;24pkt 24fpkt"];
198--1360[label="0.0128205;1pkt 1fpkt"];
198--1382[label="0.0350877;4pkt 4fpkt"];
198--1390[label="0.0296296;4pkt 4fpkt"];
198--1425[label="1;1pkt 1fpkt"];
198--1536[label="1;1pkt 1fpkt"];
198--1569[label="1;1pkt 1fpkt"];
198--1586[label="1;1pkt 1fpkt"];
198--1726[label="1;448pkt 448fpkt"];
198--1767[label="0.0146628;5pkt 5fpkt"];
198--1810[label="0.0377358;2pkt 2fpkt"];
198--1813[label="0.0697674;3pkt 3fpkt"];
198--1884[label="0.159322;47pkt 47fpkt"];
198--1903[label="1;1pkt 1fpkt"];
198--1942[label="1;1pkt 1fpkt"];
198--1953[label="1;1pkt 1fpkt"];
198--1994[label="0.529412;36pkt 36fpkt"];
198--2005[label="1;1pkt 1fpkt"];
198--2047[label="0.0363636;4pkt 4fpkt"];
198--2091[label="0.0350877;4pkt 4fpkt"];
198--2247[label="0.0221239;25pkt 25fpkt"];
198--2251[label="0.010661;10pkt 10fpkt"];
198--2253[label="0.00619469;7pkt 7fpkt"];
198--2255[label="0.0336283;38pkt 38fpkt"];
198--2256[label="0.00619469;7pkt 7fpkt"];
198--2257[label="0.0380531;43pkt 43fpkt"];
198--2260[label="0.00530973;6pkt 6fpkt"];
198--2266[label="0.0079646;9pkt 9fpkt"];
198--2267[label="0.0380531;43pkt 43fpkt"];
198--2273[label="0.0079646;9pkt 9fpkt"];
198--2274[label="0.0380531;43pkt 43fpkt"];
198--2299[label="0.0666667;4pkt 4fpkt"];
198--2308[label="0.111111;1pkt 1fpkt"];
198--2311[label="0.0416667;2pkt 2fpkt"];
198--2323[label="0.0645161;2pkt 2fpkt"];
198--2358[label="0.0305344;4pkt 4fpkt"];
198--2364[label="0.0555556;1pkt 1fpkt"];
198--2390[label="0.0222222;1pkt 1fpkt"];
198--2458[label="0.244186;21pkt 21fpkt"];
198--2497[label="0.105263;4pkt 4fpkt"];
198--2509[label="1;1pkt 1fpkt"];
198--2541[label="0.0131579;1pkt 1fpkt"];
198--2557[label="0.0212766;1pkt 1fpkt"];
198--2565[label="0.5;2pkt 2fpkt"];
198--2566[label="0.0212766;1pkt 1fpkt"];
198--2595[label="1;1pkt 1fpkt"];
198--2610[label="0.03125;1pkt 1fpkt"];
198--2637[label="0.0941176;8pkt 8fpkt"];
198--2656[label="0.0625;1pkt 1fpkt"];
198--2682[label="0.0666667;1pkt 1fpkt"];
198--2697[label="0.0588235;2pkt 2fpkt"];
198--2726[label="0.0188679;1pkt 1fpkt"];
198--2729[label="0.0243902;1pkt 1fpkt"];
198--2789[label="1;1pkt 1fpkt"];
198--2906[label="1;1pkt 1fpkt"];
198--2917[label="0.0677966;4pkt 4fpkt"];
198--2923[label="0.0188679;1pkt 1fpkt"];
198--2955[label="0.0555556;1pkt 1fpkt"];
198--2993[label="0.244186;21pkt 21fpkt"];
198--3020[label="1;2pkt 2fpkt"];
198--3039[label="0.012987;1pkt 1fpkt"];
198--3051[label="0.0212766;1pkt 1fpkt"];
198--3076[label="0.03125;1pkt 1fpkt"];
198--3087[label="1;1pkt 1fpkt"];
198--3102[label="0.0625;1pkt 1fpkt"];
198--3133[label="0.0854093;24pkt 24fpkt"];
198--3144[label="0.0188679;1pkt 1fpkt"];
198--3194[label="1;1pkt 1fpkt"];
198--3237[label="1;1pkt 1fpkt"];
198--3241[label="0.0677966;4pkt 4fpkt"];
198--3246[label="0.0192308;1pkt 1fpkt"];
198--3282[label="0.244186;21pkt 21fpkt"];
198--3345[label="0.0854093;24pkt 24fpkt"];
198--3350[label="0.0185185;1pkt 1fpkt"];
281--1726[label="1;1pkt 1fpkt"];
376--1726[label="1;1pkt 1fpkt"];
376--1942[label="1;1pkt 1fpkt"];
421--1726[label="1;1pkt 1fpkt"];
442--1726[label="1;1pkt 1fpkt"];
585--1726[label="1;1pkt 1fpkt"];
614--1726[label="1;1pkt 1fpkt"];
614--1903[label="1;1pkt 1fpkt"];
616--1726[label="1;1pkt 1fpkt"];
616--3194[label="1;1pkt 1fpkt"];
723--1726[label="1;1pkt 1fpkt"];
728--1726[label="1;1pkt 1fpkt"];
728--1953[label="1;1pkt 1fpkt"];
809--923[label="0.653846;68pkt 68fpkt"];
809--2247[label="0.161538;21pkt 21fpkt"];
809--2610[label="0.625;20pkt 20fpkt"];
809--3076[label="0.625;20pkt 20fpkt"];
1020--1726[label="1;1pkt 1fpkt"];
1156--1726[label="0.5;1pkt 1fpkt"];
1294--1618[label="0.481481;13pkt 13fpkt"];
1294--1726[label="0.0784314;4pkt 4fpkt"];
1294--2255[label="0.137255;7pkt 7fpkt"];
1294--2257[label="0.0588235;3pkt 3fpkt"];
1294--2267[label="0.0588235;3pkt 3fpkt"];
1294--2274[label="0.0588235;3pkt 3fpkt"];
1349--1726[label="0.0321429;9pkt 9fpkt"];
1349--1879[label="0.0625;1pkt 1fpkt"];
1349--2247[label="0.128571;36pkt 36fpkt"];
1349--2257[label="0.164286;46pkt 46fpkt"];
1349--2267[label="0.164286;46pkt 46fpkt"];
1349--2274[label="0.164286;46pkt 46fpkt"];
1349--3133[label="0.996429;279pkt 279fpkt"];
1349--3345[label="0.996429;279pkt 279fpkt"];
1569--1726[label="1;1pkt 1fpkt"];
1586--1726[label="1;1pkt 1fpkt"];
1586--2789[label="1;1pkt 1fpkt"];
1726--1767[label="0.00879765;3pkt 3fpkt"];
1726--1810[label="0.0377358;2pkt 2fpkt"];
1726--1813[label="0.0465116;2pkt 2fpkt"];
1726--1903[label="1;1pkt 1fpkt"];
1726--1942[label="1;1pkt 1fpkt"];
1726--1953[label="1;1pkt 1fpkt"];
1726--1994[label="0.176471;12pkt 12fpkt"];
1726--2047[label="0.0363636;4pkt 4fpkt"];
1726--2091[label="0.0175439;2pkt 2fpkt"];
1726--2247[label="0.0558036;25pkt 25fpkt"];
1726--2251[label="0.0223214;10pkt 10fpkt"];
1726--2253[label="0.015625;7pkt 7fpkt"];
1726--2256[label="0.0111607;5pkt 5fpkt"];
1726--2260[label="0.0111607;5pkt 5fpkt"];
1726--2266[label="0.0111607;5pkt 5fpkt"];
1726--2273[label="0.0111607;5pkt 5fpkt"];
1726--2308[label="0.111111;1pkt 1fpkt"];
1726--2311[label="0.0208333;1pkt 1fpkt"];
1726--2364[label="0.0555556;1pkt 1fpkt"];
1726--2390[label="0.0222222;1pkt 1fpkt"];
1726--2458[label="0.116279;10pkt 10fpkt"];
1726--2509[label="1;1pkt 1fpkt"];
1726--2595[label="1;1pkt 1fpkt"];
1726--2656[label="0.0625;1pkt 1fpkt"];
1726--2729[label="0.0243902;1pkt 1fpkt"];
1726--2789[label="1;1pkt 1fpkt"];
1726--2906[label="1;1pkt 1fpkt"];
1726--2955[label="0.0555556;1pkt 1fpkt"];
1726--2993[label="0.116279;10pkt 10fpkt"];
1726--3020[label="1;2pkt 2fpkt"];
1726--3102[label="0.0625;1pkt 1fpkt"];
1726--3133[label="0.0320285;9pkt 9fpkt"];
1726--3194[label="1;1pkt 1fpkt"];
1726--3237[label="1;1pkt 1fpkt"];
1726--3282[label="0.116279;10pkt 10fpkt"];
1726--3345[label="0.0320285;9pkt 9fpkt"];
1810--1943[label="0.113208;6pkt 6fpkt"];
1810--2211[label="0.264151;14pkt 14fpkt"];
1810--2224[label="0.113208;6pkt 6fpkt"];
1810--2247[label="0.113208;6pkt 6fpkt"];
2364--2955[label="1;18pkt 18fpkt"];
2458--2993[label="1;86pkt 86fpkt"];
2458--3282[label="1;86pkt 86fpkt"];
2509--3020[label="1;1pkt 1fpkt"];
2610--3076[label="1;32pkt 32fpkt"];
2726--3144[label="1;53pkt 53fpkt"];
2726--3350[label="1;53pkt 53fpkt"];
2906--3237[label="1;1pkt 1fpkt"];
2993--3282[label="1;86pkt 86fpkt"];
3133--3345[label="1;281pkt 281fpkt"];
3144--3350[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="209.129.201.112" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
405[label="164.15.143.164;s;266pkt 266fpkt", shape=diamond, color=yellow];
1729[label="164.15.143.164;s;266pkt 266fpkt", shape=hexagon, color=black];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.15.143.164:*, *:25}[95.8647%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.3083%)&lt;BR/&gt; 113: (1.12782%)&lt;BR/&gt; 0: (1.12782%)&lt;BR/&gt; 15568: (0.18797%)&lt;BR/&gt; 7887: (0.18797%)&gt;];
}
405--1729[label="1;266pkt 266fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="164.15.143.164"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
191[label="212.18.254.39;d;10pkt 10fpkt", shape=diamond, color=yellow];
573[label="141.133.130.139;s;2pkt 2fpkt", shape=diamond, color=yellow];
607[label="141.133.153.146;s;2pkt 2fpkt", shape=diamond, color=yellow];
1732[label="141.133.153.146;s;2pkt 2fpkt", shape=hexagon, color=black];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.129.201.112:*, 212.18.254.39:21}[40%]&lt;BR/&gt;{*:*, 212.18.254.39:20}[20%]&lt;BR/&gt;{141.133.130.139:*, 212.18.254.39:*}[20%]&lt;BR/&gt;{141.133.153.146:*, 212.18.254.39:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (31.25%)&lt;BR/&gt; 20: (15.625%)&lt;BR/&gt; 49159: (9.375%)&lt;BR/&gt; 49158: (9.375%)&lt;BR/&gt; 49197: (6.25%)&gt;];
}
191--199[label="0.5;5pkt 5fpkt"];
191--573[label="1;2pkt 2fpkt"];
191--575[label="0.1;1pkt 1fpkt"];
191--607[label="1;2pkt 2fpkt"];
191--1732[label="1;2pkt 2fpkt"];
191--2011[label="0.4;4pkt 4fpkt"];
607--1732[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.254.39" src_ip="141.133.153.146"/>
      <filter dst_ip="212.18.254.39" src_ip="141.133.130.139"/>
      <filter dst_ip="212.18.254.39" dst_port="20"/>
      <filter dst_ip="212.18.254.39" dst_port="21" src_ip="209.129.201.112"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
472[label="217.161.117.191;d;2pkt 2fpkt", shape=diamond, color=yellow];
860[label="73.54.129.200;d;208pkt 208fpkt", shape=diamond, color=yellow];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.39.22:*, 73.54.129.200:80}[99.0476%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5238%)&lt;BR/&gt; 7070: (0.238095%)&lt;BR/&gt; 6970: (0.238095%)&lt;BR/&gt; 6770: (0.238095%)&lt;BR/&gt; 1546: (0.238095%)&gt;];
}
472--473[label="1;2pkt 2fpkt"];
472--1736[label="1;2pkt 2fpkt"];
860--1736[label="1;208pkt 208fpkt"];
</description>
    <slice>
      <filter dst_ip="73.54.129.200" dst_port="80" src_ip="151.244.39.22"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
480[label="141.133.76.185;s;620pkt 620fpkt", shape=diamond, color=yellow];
1737[label="141.133.76.185;s;514pkt 514fpkt", shape=hexagon, color=black];
2756[label="141.133.76.185;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3162[label="141.133.76.185;3pkt 3fpkt", shape=invtriangle, color=brown];
3359[label="141.133.76.185;3pkt 3fpkt", shape=invhouse, color=bisque];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.76.185:25, *:*}[50%]&lt;BR/&gt;{141.133.76.185:*, *:113}[48.0707%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25.1531%)&lt;BR/&gt; 113: (23.9283%)&lt;BR/&gt; 53: (1.13736%)&lt;BR/&gt; 4355: (0.262467%)&lt;BR/&gt; 4633: (0.174978%)&gt;];
}
480--1737[label="1;514pkt 514fpkt"];
480--2251[label="0.0016129;1pkt 1fpkt"];
480--2253[label="0.0016129;1pkt 1fpkt"];
480--2256[label="0.0016129;1pkt 1fpkt"];
480--2260[label="0.00322581;2pkt 2fpkt"];
480--2266[label="0.00483871;3pkt 3fpkt"];
480--2273[label="0.00483871;3pkt 3fpkt"];
480--2756[label="0.333333;1pkt 1fpkt"];
480--3162[label="0.333333;1pkt 1fpkt"];
480--3359[label="0.333333;1pkt 1fpkt"];
1737--2251[label="0.00194553;1pkt 1fpkt"];
1737--2253[label="0.00194553;1pkt 1fpkt"];
1737--2256[label="0.00194553;1pkt 1fpkt"];
1737--2260[label="0.00389105;2pkt 2fpkt"];
1737--2266[label="0.00583658;3pkt 3fpkt"];
1737--2273[label="0.00583658;3pkt 3fpkt"];
2756--3162[label="1;3pkt 3fpkt"];
2756--3359[label="1;3pkt 3fpkt"];
3162--3359[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="141.133.76.185" src_port="25"/>
      <filter dst_port="113" src_ip="141.133.76.185"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
1541[label="136.65.182.192;d;9pkt 9fpkt", shape=diamond, color=yellow];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.66.188.129:*, 136.65.182.192:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 14007: (5.55556%)&lt;BR/&gt; 13871: (5.55556%)&lt;BR/&gt; 13282: (5.55556%)&lt;BR/&gt; 13127: (5.55556%)&gt;];
}
1541--2103[label="1;9pkt 9fpkt"];
1541--2258[label="0.222222;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.182.192" dst_port="80" src_ip="44.66.188.129"/>
    </slice>
    <from sec="1031548281" usec="0"/>
    <to sec="1031548579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
347[label="141.133.54.111;d;7pkt 7fpkt", shape=diamond, color=yellow];
510[label="205.129.52.35;s;5pkt 5fpkt", shape=diamond, color=yellow];
558[label="141.133.239.210;d;15pkt 15fpkt", shape=diamond, color=yellow];
1743[label="205.129.52.35;s;5pkt 5fpkt", shape=hexagon, color=black];
1828[label="141.133.239.210;d;15pkt 15fpkt", shape=hexagon, color=black];
2355[label="205.129.52.26;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2382[label="205.129.52.35;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2951[label="205.129.52.26;7pkt 7fpkt", shape=invtriangle, color=brown];
2963[label="205.129.52.35;6pkt 6fpkt", shape=invtriangle, color=brown];
3261[label="205.129.52.26;7pkt 7fpkt", shape=invhouse, color=bisque];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.129.52.36:80, 141.133.239.210:*}[30.4348%]&lt;BR/&gt;{205.129.52.35:80, 141.133.54.111:*}[21.7391%]&lt;BR/&gt;{205.129.52.26:80, 141.133.239.210:*}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1077: (3.125%)&lt;BR/&gt; 1076: (3.125%)&lt;BR/&gt; 1071: (3.125%)&lt;BR/&gt; 1068: (3.125%)&gt;];
}
347--510[label="1;5pkt 5fpkt"];
347--1743[label="1;5pkt 5fpkt"];
347--2247[label="0.428571;3pkt 3fpkt"];
347--2355[label="0.285714;2pkt 2fpkt"];
347--2382[label="0.833333;5pkt 5fpkt"];
347--2951[label="0.285714;2pkt 2fpkt"];
347--2963[label="0.833333;5pkt 5fpkt"];
347--3261[label="0.285714;2pkt 2fpkt"];
510--1743[label="1;5pkt 5fpkt"];
510--2247[label="0.2;1pkt 1fpkt"];
510--2382[label="1;5pkt 5fpkt"];
510--2963[label="1;5pkt 5fpkt"];
558--1043[label="0.133333;2pkt 2fpkt"];
558--1828[label="1;15pkt 15fpkt"];
558--2355[label="0.714286;5pkt 5fpkt"];
558--2951[label="0.714286;5pkt 5fpkt"];
558--3261[label="0.714286;5pkt 5fpkt"];
1743--2247[label="0.2;1pkt 1fpkt"];
1743--2382[label="1;5pkt 5fpkt"];
1743--2963[label="1;5pkt 5fpkt"];
1828--2355[label="0.714286;5pkt 5fpkt"];
1828--2951[label="0.714286;5pkt 5fpkt"];
1828--3261[label="0.714286;5pkt 5fpkt"];
2355--2951[label="1;7pkt 7fpkt"];
2355--3261[label="1;7pkt 7fpkt"];
2382--2963[label="1;6pkt 6fpkt"];
2951--3261[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.239.210" src_ip="205.129.52.36" src_port="80"/>
      <filter dst_ip="141.133.239.210" src_ip="205.129.52.26" src_port="80"/>
      <filter dst_ip="141.133.54.111" src_ip="205.129.52.35" src_port="80"/>
    </slice>
    <from sec="1031547604" usec="0"/>
    <to sec="1031548586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
336[label="193.182.179.142;d;294pkt 294fpkt", shape=diamond, color=yellow];
674[label="162.73.68.138;s;90pkt 90fpkt", shape=diamond, color=yellow];
675[label="162.73.68.169;s;62pkt 62fpkt", shape=diamond, color=yellow];
1273[label="162.73.85.63;s;58pkt 58fpkt", shape=diamond, color=yellow];
1303[label="162.73.68.234;s;7pkt 7fpkt", shape=diamond, color=yellow];
1826[label="162.73.68.169;s;62pkt 62fpkt", shape=hexagon, color=black];
2284[label="162.73.90.2;104pkt 104fpkt", shape=pentagon, color=darkviolet];
2717[label="162.73.68.169;61pkt 61fpkt", shape=pentagon, color=darkviolet];
2870[label="162.73.68.234;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3138[label="162.73.68.169;61pkt 61fpkt", shape=invtriangle, color=brown];
3215[label="162.73.68.234;10pkt 10fpkt", shape=invtriangle, color=brown];
3385[label="162.73.68.234;10pkt 10fpkt", shape=invhouse, color=bisque];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.90.2:*, *:80}[26.4631%]&lt;BR/&gt;{162.73.68.138:*, 193.182.179.142:80}[21.6285%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4318%)&lt;BR/&gt; 0: (3.13631%)&lt;BR/&gt; 49673: (0.301568%)&lt;BR/&gt; 49672: (0.301568%)&lt;BR/&gt; 49671: (0.301568%)&gt;];
}
336--501[label="0.0387324;11pkt 11fpkt"];
336--634[label="1;10pkt 10fpkt"];
336--652[label="0.505263;48pkt 48fpkt"];
336--674[label="0.944444;85pkt 85fpkt"];
336--675[label="0.66129;41pkt 41fpkt"];
336--1182[label="0.141593;16pkt 16fpkt"];
336--1273[label="0.706897;41pkt 41fpkt"];
336--1303[label="1;7pkt 7fpkt"];
336--1741[label="1;8pkt 8fpkt"];
336--1746[label="0.505263;48pkt 48fpkt"];
336--1826[label="0.66129;41pkt 41fpkt"];
336--2105[label="0.141593;16pkt 16fpkt"];
336--2248[label="0.0136054;4pkt 4fpkt"];
336--2254[label="0.112245;33pkt 33fpkt"];
336--2258[label="0.0340136;10pkt 10fpkt"];
336--2263[label="0.0136054;4pkt 4fpkt"];
336--2270[label="0.0136054;4pkt 4fpkt"];
336--2284[label="0.461538;48pkt 48fpkt"];
336--2717[label="0.672131;41pkt 41fpkt"];
336--2870[label="1;10pkt 10fpkt"];
336--3138[label="0.672131;41pkt 41fpkt"];
336--3215[label="1;10pkt 10fpkt"];
336--3385[label="1;10pkt 10fpkt"];
674--2254[label="0.166667;15pkt 15fpkt"];
675--1826[label="1;62pkt 62fpkt"];
675--2254[label="0.0645161;4pkt 4fpkt"];
675--2717[label="1;61pkt 61fpkt"];
675--3138[label="1;61pkt 61fpkt"];
1273--2258[label="0.0689655;4pkt 4fpkt"];
1303--2870[label="1;7pkt 7fpkt"];
1303--3215[label="1;7pkt 7fpkt"];
1303--3385[label="1;7pkt 7fpkt"];
1826--2254[label="0.0645161;4pkt 4fpkt"];
1826--2717[label="1;61pkt 61fpkt"];
1826--3138[label="1;61pkt 61fpkt"];
2717--3138[label="1;61pkt 61fpkt"];
2870--3215[label="1;10pkt 10fpkt"];
2870--3385[label="1;10pkt 10fpkt"];
3215--3385[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="162.73.90.2"/>
      <filter dst_ip="193.182.179.142" dst_port="80" src_ip="162.73.68.138"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
691[label="141.133.41.35;d;52pkt 52fpkt", shape=diamond, color=yellow];
693[label="221.35.123.156;s;26pkt 26fpkt", shape=diamond, color=yellow];
1751[label="221.35.123.156;s;26pkt 26fpkt", shape=hexagon, color=black];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.35.123.156:80, 141.133.41.35:*}[50%]&lt;BR/&gt;{221.35.123.157:80, 141.133.41.35:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1260: (1.44231%)&lt;BR/&gt; 1258: (1.44231%)&lt;BR/&gt; 1256: (1.44231%)&lt;BR/&gt; 1255: (1.44231%)&gt;];
}
691--693[label="1;26pkt 26fpkt"];
691--1751[label="1;26pkt 26fpkt"];
693--1751[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.41.35" src_ip="221.35.123.157" src_port="80"/>
      <filter dst_ip="141.133.41.35" src_ip="221.35.123.156" src_port="80"/>
    </slice>
    <from sec="1031547820" usec="0"/>
    <to sec="1031547856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
403[label="141.132.17.54;s;6pkt 6fpkt", shape=diamond, color=yellow];
1013[label="133.6.101.68;d;1pkt 1fpkt", shape=diamond, color=yellow];
1759[label="141.132.17.54;s;6pkt 6fpkt", shape=hexagon, color=black];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.132.17.54:*, *:6346}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 64513: (11.5385%)&lt;BR/&gt; 64359: (7.69231%)&lt;BR/&gt; 62653: (7.69231%)&lt;BR/&gt; 61810: (7.69231%)&gt;];
}
403--1013[label="1;1pkt 1fpkt"];
403--1759[label="1;6pkt 6fpkt"];
1013--1759[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6346" src_ip="141.132.17.54"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16938,2.02742,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
740[label="209.235.198.215;d;2pkt 2fpkt", shape=diamond, color=yellow];
1763[label="209.235.198.215;d;2pkt 2fpkt", shape=hexagon, color=black];
2230[label="209.235.198.215;d;2pkt 2fpkt", shape=polygon, color=gold];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.36.40:1214, 209.235.198.215:23589}[50%]&lt;BR/&gt;{151.244.36.40:1214, 209.235.198.215:23955}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 23955: (25%)&lt;BR/&gt; 23589: (25%)&gt;];
}
740--1763[label="1;2pkt 2fpkt"];
740--1956[label="1;2pkt 2fpkt"];
740--2230[label="1;2pkt 2fpkt"];
1763--1956[label="1;2pkt 2fpkt"];
1763--2230[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.235.198.215" dst_port="23955" src_ip="151.244.36.40" src_port="1214"/>
      <filter dst_ip="209.235.198.215" dst_port="23589" src_ip="151.244.36.40" src_port="1214"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
628[label="208.78.224.129;s;713pkt 713fpkt", shape=diamond, color=yellow];
1771[label="208.78.224.129;s;462pkt 462fpkt", shape=hexagon, color=black];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.78.224.129:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
628--1771[label="1;462pkt 462fpkt"];
</description>
    <slice>
      <filter src_ip="208.78.224.129"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.836843,2.02787,503,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
546[label="46.171.78.201;d;20pkt 20fpkt", shape=diamond, color=yellow];
551[label="158.46.66.104;d;6pkt 6fpkt", shape=diamond, color=yellow];
836[label="162.73.84.138;s;26pkt 26fpkt", shape=diamond, color=yellow];
1785[label="162.73.84.138;s;26pkt 26fpkt", shape=hexagon, color=black];
3324[label="162.73.84.138;27pkt 27fpkt", shape=invhouse, color=bisque];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.84.138:*, 46.171.78.201:80}[71.4286%]&lt;BR/&gt;{162.73.84.138:*, 158.46.66.104:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1450: (1.90476%)&lt;BR/&gt; 1449: (1.90476%)&lt;BR/&gt; 1448: (1.90476%)&lt;BR/&gt; 1447: (1.90476%)&gt;];
}
546--836[label="1;20pkt 20fpkt"];
546--1785[label="1;20pkt 20fpkt"];
546--2254[label="0.4;8pkt 8fpkt"];
546--3324[label="0.95;19pkt 19fpkt"];
551--836[label="1;6pkt 6fpkt"];
551--1785[label="1;6pkt 6fpkt"];
551--2254[label="0.833333;5pkt 5fpkt"];
551--3324[label="1;6pkt 6fpkt"];
836--1785[label="1;26pkt 26fpkt"];
836--2254[label="0.5;13pkt 13fpkt"];
836--3324[label="0.961538;25pkt 25fpkt"];
1785--2254[label="0.5;13pkt 13fpkt"];
1785--3324[label="0.961538;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="46.171.78.201" dst_port="80" src_ip="162.73.84.138"/>
      <filter dst_ip="158.46.66.104" dst_port="80" src_ip="162.73.84.138"/>
    </slice>
    <from sec="1031547649" usec="0"/>
    <to sec="1031548586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
689[label="209.200.249.46;s;18pkt 18fpkt", shape=diamond, color=yellow];
1071[label="209.200.29.133;s;18pkt 18fpkt", shape=diamond, color=yellow];
1790[label="141.133.201.69;d;218pkt 218fpkt", shape=hexagon, color=black];
2494[label="44.30.24.78;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.28.99.196:80, 141.133.201.69:*}[25.641%]&lt;BR/&gt;{44.28.100.184:80, 141.133.201.69:*}[21.3675%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1280: (0.384615%)&lt;BR/&gt; 1279: (0.384615%)&lt;BR/&gt; 1257: (0.384615%)&lt;BR/&gt; 1254: (0.384615%)&gt;];
}
689--1790[label="1;18pkt 18fpkt"];
1071--1790[label="0.166667;3pkt 3fpkt"];
1071--1932[label="1;18pkt 18fpkt"];
1790--1932[label="0.166667;3pkt 3fpkt"];
1790--2405[label="0.666667;10pkt 10fpkt"];
1790--2494[label="0.833333;5pkt 5fpkt"];
1790--2790[label="0.674157;60pkt 60fpkt"];
1790--2932[label="0.0909091;1pkt 1fpkt"];
1790--2974[label="0.666667;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.201.69" src_ip="44.28.99.196" src_port="80"/>
      <filter dst_ip="141.133.201.69" src_ip="44.28.100.184" src_port="80"/>
    </slice>
    <from sec="1031547782" usec="0"/>
    <to sec="1031548269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
249[label="194.226.24.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
401[label="209.88.202.136;d;9pkt 9fpkt", shape=diamond, color=yellow];
1798[label="194.226.24.12;s;1pkt 1fpkt", shape=hexagon, color=black];
2015[label="209.88.202.136;d;6pkt 6fpkt", shape=hexagon, color=black];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.98.93.30:2222, 209.88.202.136:*}[22.2222%]&lt;BR/&gt;{86.1.3.223:6666, 209.88.202.136:*}[22.2222%]&lt;BR/&gt;{*:7743, 209.88.202.136:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (11.7647%)&lt;BR/&gt; 1344: (11.7647%)&lt;BR/&gt; 7743: (8.82353%)&lt;BR/&gt; 6666: (8.82353%)&lt;BR/&gt; 2222: (8.82353%)&gt;];
}
249--401[label="1;1pkt 1fpkt"];
249--1798[label="1;1pkt 1fpkt"];
249--2015[label="1;1pkt 1fpkt"];
401--1798[label="1;1pkt 1fpkt"];
401--2015[label="1;6pkt 6fpkt"];
1798--2015[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.88.202.136" src_port="7743"/>
      <filter dst_ip="209.88.202.136" src_ip="86.1.3.223" src_port="6666"/>
      <filter dst_ip="209.88.202.136" src_ip="210.98.93.30" src_port="2222"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
597[label="72.110.154.223;s;2pkt 2fpkt", shape=diamond, color=yellow];
718[label="141.133.32.150;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.110.154.223:80, 141.133.32.150:3675}[50%]&lt;BR/&gt;{72.110.154.223:80, 141.133.32.150:3684}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3684: (25%)&lt;BR/&gt; 3675: (25%)&gt;];
}
597--718[label="1;2pkt 2fpkt"];
597--1800[label="1;1pkt 1fpkt"];
597--1848[label="1;1pkt 1fpkt"];
597--2247[label="0.5;1pkt 1fpkt"];
597--2255[label="0.5;1pkt 1fpkt"];
597--2257[label="0.5;1pkt 1fpkt"];
597--2267[label="0.5;1pkt 1fpkt"];
597--2274[label="0.5;1pkt 1fpkt"];
718--1800[label="1;1pkt 1fpkt"];
718--1848[label="1;1pkt 1fpkt"];
718--2247[label="0.5;1pkt 1fpkt"];
718--2255[label="0.5;1pkt 1fpkt"];
718--2257[label="0.5;1pkt 1fpkt"];
718--2267[label="0.5;1pkt 1fpkt"];
718--2274[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.32.150" dst_port="3684" src_ip="72.110.154.223" src_port="80"/>
      <filter dst_ip="141.133.32.150" dst_port="3675" src_ip="72.110.154.223" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
887[label="162.73.145.12;d;4pkt 4fpkt", shape=diamond, color=yellow];
890[label="209.195.252.73;s;4pkt 4fpkt", shape=diamond, color=yellow];
1804[label="209.195.252.73;s;4pkt 4fpkt", shape=hexagon, color=black];
1898[label="162.73.145.12;d;4pkt 4fpkt", shape=hexagon, color=black];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.195.252.73:2002, 162.73.145.12:1249}[25%]&lt;BR/&gt;{209.195.252.73:2002, 162.73.145.12:1251}[25%]&lt;BR/&gt;{209.195.252.73:3200, 162.73.145.12:1248}[25%]&lt;BR/&gt;{209.195.252.73:3200, 162.73.145.12:1250}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3200: (25%)&lt;BR/&gt; 2002: (25%)&lt;BR/&gt; 1251: (12.5%)&lt;BR/&gt; 1250: (12.5%)&lt;BR/&gt; 1249: (12.5%)&gt;];
}
887--890[label="1;4pkt 4fpkt"];
887--1804[label="1;4pkt 4fpkt"];
887--1898[label="1;4pkt 4fpkt"];
890--1804[label="1;4pkt 4fpkt"];
890--1898[label="1;4pkt 4fpkt"];
1804--1898[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.145.12" dst_port="1250" src_ip="209.195.252.73" src_port="3200"/>
      <filter dst_ip="162.73.145.12" dst_port="1248" src_ip="209.195.252.73" src_port="3200"/>
      <filter dst_ip="162.73.145.12" dst_port="1251" src_ip="209.195.252.73" src_port="2002"/>
      <filter dst_ip="162.73.145.12" dst_port="1249" src_ip="209.195.252.73" src_port="2002"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.29854,1.98792,503,0 0 0 1 1 1 0 0 0 1 0 1 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
206[label="208.78.234.60;d;677pkt 677fpkt", shape=diamond, color=yellow];
280[label="209.90.183.10;s;52pkt 52fpkt", shape=diamond, color=yellow];
320[label="215.6.172.55;s;66pkt 66fpkt", shape=diamond, color=yellow];
321[label="162.73.179.2;d;486pkt 486fpkt", shape=diamond, color=yellow];
365[label="44.66.118.160;s;395pkt 395fpkt", shape=diamond, color=yellow];
475[label="74.2.164.143;s;19pkt 19fpkt", shape=diamond, color=yellow];
761[label="141.133.139.47;d;166pkt 166fpkt", shape=diamond, color=yellow];
769[label="219.161.212.153;s;51pkt 51fpkt", shape=diamond, color=yellow];
798[label="216.96.57.190;s;57pkt 57fpkt", shape=diamond, color=yellow];
902[label="207.43.195.227;s;113pkt 113fpkt", shape=diamond, color=yellow];
988[label="75.111.202.32;s;128pkt 128fpkt", shape=diamond, color=yellow];
1055[label="74.2.164.72;s;77pkt 77fpkt", shape=diamond, color=yellow];
1199[label="136.65.152.153;d;66pkt 66fpkt", shape=diamond, color=yellow];
1422[label="209.88.9.180;d;87pkt 87fpkt", shape=diamond, color=yellow];
1480[label="136.134.19.238;d;74pkt 74fpkt", shape=diamond, color=yellow];
1587[label="151.148.230.254;d;89pkt 89fpkt", shape=diamond, color=yellow];
1593[label="207.178.139.77;s;247pkt 247fpkt", shape=diamond, color=yellow];
1687[label="162.73.179.2;d;133pkt 133fpkt", shape=hexagon, color=black];
1769[label="215.6.172.55;s;59pkt 59fpkt", shape=hexagon, color=black];
1878[label="215.6.144.70;s;51pkt 51fpkt", shape=hexagon, color=black];
1943[label="208.78.234.60;d;433pkt 433fpkt", shape=hexagon, color=black];
2224[label="208.78.234.60;d;433pkt 433fpkt", shape=polygon, color=gold];
2229[label="209.90.183.10;s;31pkt 31fpkt", shape=polygon, color=gold];
2429[label="158.17.32.52;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2452[label="207.217.163.62;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2492[label="207.178.139.77;258pkt 258fpkt", shape=pentagon, color=darkviolet];
2583[label="74.88.249.113;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2651[label="72.172.32.146;41pkt 41fpkt", shape=pentagon, color=darkviolet];
2665[label="204.234.148.149;63pkt 63fpkt", shape=pentagon, color=darkviolet];
2695[label="44.66.118.160;395pkt 395fpkt", shape=pentagon, color=darkviolet];
2767[label="216.96.57.190;56pkt 56fpkt", shape=pentagon, color=darkviolet];
3278[label="215.6.172.55;74pkt 74fpkt", shape=invhouse, color=bisque];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 208.78.234.60:*}[26.8335%]&lt;BR/&gt;{*:80, 162.73.179.2:*}[20.9664%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.031%)&lt;BR/&gt; 53: (1.84656%)&lt;BR/&gt; 53663: (0.091818%)&lt;BR/&gt; 443: (0.091818%)&lt;BR/&gt; 52140: (0.071414%)&gt;];
}
206--280[label="0.0384615;2pkt 2fpkt"];
206--315[label="0.0470958;30pkt 30fpkt"];
206--320[label="1;66pkt 66fpkt"];
206--345[label="0.04;2pkt 2fpkt"];
206--475[label="0.105263;2pkt 2fpkt"];
206--491[label="0.184211;14pkt 14fpkt"];
206--612[label="0.0142857;1pkt 1fpkt"];
206--649[label="0.0121951;1pkt 1fpkt"];
206--746[label="0.0555556;3pkt 3fpkt"];
206--769[label="0.0392157;2pkt 2fpkt"];
206--798[label="0.22807;13pkt 13fpkt"];
206--801[label="0.03125;1pkt 1fpkt"];
206--902[label="0.0530973;6pkt 6fpkt"];
206--924[label="0.0131579;1pkt 1fpkt"];
206--988[label="0.015625;2pkt 2fpkt"];
206--1022[label="0.0425532;2pkt 2fpkt"];
206--1030[label="0.0393701;5pkt 5fpkt"];
206--1037[label="0.00458716;1pkt 1fpkt"];
206--1055[label="0.025974;2pkt 2fpkt"];
206--1126[label="0.047619;4pkt 4fpkt"];
206--1164[label="0.0869565;2pkt 2fpkt"];
206--1263[label="0.0188679;2pkt 2fpkt"];
206--1352[label="0.0172414;3pkt 3fpkt"];
206--1382[label="0.0263158;3pkt 3fpkt"];
206--1390[label="0.0592593;8pkt 8fpkt"];
206--1488[label="0.0125;2pkt 2fpkt"];
206--1512[label="0.0188679;1pkt 1fpkt"];
206--1593[label="0.554656;137pkt 137fpkt"];
206--1769[label="1;59pkt 59fpkt"];
206--1810[label="0.113208;6pkt 6fpkt"];
206--1813[label="0.0465116;2pkt 2fpkt"];
206--1821[label="0.03125;1pkt 1fpkt"];
206--1870[label="0.0204082;1pkt 1fpkt"];
206--1943[label="1;433pkt 433fpkt"];
206--1968[label="0.184211;14pkt 14fpkt"];
206--2002[label="0.0645161;2pkt 2fpkt"];
206--2013[label="0.0172414;3pkt 3fpkt"];
206--2047[label="0.0636364;7pkt 7fpkt"];
206--2091[label="0.0263158;3pkt 3fpkt"];
206--2155[label="0.0121951;1pkt 1fpkt"];
206--2224[label="1;433pkt 433fpkt"];
206--2229[label="0.0645161;2pkt 2fpkt"];
206--2247[label="0.0398818;27pkt 27fpkt"];
206--2255[label="0.0901034;61pkt 61fpkt"];
206--2257[label="0.0694239;47pkt 47fpkt"];
206--2266[label="0.0014771;1pkt 1fpkt"];
206--2267[label="0.0694239;47pkt 47fpkt"];
206--2273[label="0.0014771;1pkt 1fpkt"];
206--2274[label="0.0694239;47pkt 47fpkt"];
206--2323[label="0.0322581;1pkt 1fpkt"];
206--2358[label="0.0381679;5pkt 5fpkt"];
206--2414[label="0.179487;14pkt 14fpkt"];
206--2429[label="0.5;1pkt 1fpkt"];
206--2492[label="0.531008;137pkt 137fpkt"];
206--2541[label="0.0131579;1pkt 1fpkt"];
206--2564[label="0.0952381;2pkt 2fpkt"];
206--2583[label="1;2pkt 2fpkt"];
206--2605[label="0.1;3pkt 3fpkt"];
206--2637[label="0.0470588;4pkt 4fpkt"];
206--2642[label="0.0114943;1pkt 1fpkt"];
206--2651[label="0.829268;34pkt 34fpkt"];
206--2665[label="0.174603;11pkt 11fpkt"];
206--2690[label="0.00473934;1pkt 1fpkt"];
206--2726[label="0.132075;7pkt 7fpkt"];
206--2767[label="0.232143;13pkt 13fpkt"];
206--2798[label="0.0869565;2pkt 2fpkt"];
206--2825[label="0.0172414;1pkt 1fpkt"];
206--2855[label="0.0135135;1pkt 1fpkt"];
206--3039[label="0.012987;1pkt 1fpkt"];
206--3094[label="0.0114943;1pkt 1fpkt"];
206--3144[label="0.132075;7pkt 7fpkt"];
206--3179[label="0.0909091;2pkt 2fpkt"];
206--3192[label="0.0172414;1pkt 1fpkt"];
206--3210[label="0.0133333;1pkt 1fpkt"];
206--3278[label="0.945946;70pkt 70fpkt"];
206--3327[label="0.0116279;1pkt 1fpkt"];
206--3350[label="0.12963;7pkt 7fpkt"];
280--322[label="0.0961538;5pkt 5fpkt"];
280--1480[label="0.0192308;1pkt 1fpkt"];
280--1556[label="0.4;4pkt 4fpkt"];
280--1943[label="0.0384615;2pkt 2fpkt"];
280--2002[label="1;31pkt 31fpkt"];
280--2224[label="0.0384615;2pkt 2fpkt"];
280--2229[label="1;31pkt 31fpkt"];
280--2255[label="0.0576923;3pkt 3fpkt"];
280--2257[label="0.0961538;5pkt 5fpkt"];
280--2267[label="0.0961538;5pkt 5fpkt"];
280--2274[label="0.0961538;5pkt 5fpkt"];
320--1769[label="1;59pkt 59fpkt"];
320--1943[label="0.772727;51pkt 51fpkt"];
320--2224[label="0.772727;51pkt 51fpkt"];
320--2247[label="0.0606061;4pkt 4fpkt"];
320--2255[label="0.0757576;5pkt 5fpkt"];
320--2257[label="0.0606061;4pkt 4fpkt"];
320--2267[label="0.0606061;4pkt 4fpkt"];
320--2274[label="0.0606061;4pkt 4fpkt"];
320--3278[label="0.984848;65pkt 65fpkt"];
321--331[label="0.0212766;1pkt 1fpkt"];
321--365[label="1;395pkt 395fpkt"];
321--460[label="0.010453;3pkt 3fpkt"];
321--552[label="0.00869565;1pkt 1fpkt"];
321--798[label="0.403509;23pkt 23fpkt"];
321--1687[label="1;133pkt 133fpkt"];
321--1878[label="0.0196078;1pkt 1fpkt"];
321--1962[label="0.0127119;3pkt 3fpkt"];
321--2247[label="0.0288066;14pkt 14fpkt"];
321--2255[label="0.0246914;12pkt 12fpkt"];
321--2257[label="0.00205761;1pkt 1fpkt"];
321--2267[label="0.00205761;1pkt 1fpkt"];
321--2274[label="0.00205761;1pkt 1fpkt"];
321--2468[label="0.016129;2pkt 2fpkt"];
321--2605[label="0.0666667;2pkt 2fpkt"];
321--2695[label="1;395pkt 395fpkt"];
321--2767[label="0.410714;23pkt 23fpkt"];
321--2999[label="0.016;2pkt 2fpkt"];
321--3277[label="0.00967742;3pkt 3fpkt"];
365--1687[label="0.699248;93pkt 93fpkt"];
365--2255[label="0.0278481;11pkt 11fpkt"];
365--2695[label="1;395pkt 395fpkt"];
475--829[label="0.157895;3pkt 3fpkt"];
475--1587[label="0.0526316;1pkt 1fpkt"];
475--1710[label="1;15pkt 15fpkt"];
475--1943[label="0.105263;2pkt 2fpkt"];
475--2100[label="0.157895;3pkt 3fpkt"];
475--2224[label="0.105263;2pkt 2fpkt"];
475--2247[label="0.315789;6pkt 6fpkt"];
475--2257[label="0.0526316;1pkt 1fpkt"];
475--2267[label="0.0526316;1pkt 1fpkt"];
475--2274[label="0.0526316;1pkt 1fpkt"];
761--779[label="0.0120482;2pkt 2fpkt"];
761--1030[label="0.00787402;1pkt 1fpkt"];
761--1043[label="0.0126582;1pkt 1fpkt"];
761--1268[label="0.106918;17pkt 17fpkt"];
761--2247[label="0.0240964;4pkt 4fpkt"];
761--2255[label="0.0120482;2pkt 2fpkt"];
761--2358[label="0.00763359;1pkt 1fpkt"];
761--2452[label="0.3;6pkt 6fpkt"];
761--2642[label="0.0114943;1pkt 1fpkt"];
761--2651[label="0.146341;6pkt 6fpkt"];
761--2825[label="0.0172414;1pkt 1fpkt"];
761--3094[label="0.0114943;1pkt 1fpkt"];
761--3192[label="0.0172414;1pkt 1fpkt"];
761--3327[label="0.0116279;1pkt 1fpkt"];
769--789[label="0.0196078;1pkt 1fpkt"];
769--919[label="0.0196078;1pkt 1fpkt"];
769--1214[label="0.0196078;1pkt 1fpkt"];
769--1388[label="0.0196078;1pkt 1fpkt"];
769--1484[label="0.0196078;1pkt 1fpkt"];
769--1584[label="0.0196078;1pkt 1fpkt"];
769--1662[label="0.0196078;1pkt 1fpkt"];
769--1726[label="0.0392157;2pkt 2fpkt"];
769--1813[label="1;43pkt 43fpkt"];
769--1943[label="0.0392157;2pkt 2fpkt"];
769--1959[label="0.5;1pkt 1fpkt"];
769--2046[label="0.0196078;1pkt 1fpkt"];
769--2199[label="0.0196078;1pkt 1fpkt"];
769--2224[label="0.0392157;2pkt 2fpkt"];
769--2251[label="0.0196078;1pkt 1fpkt"];
769--2253[label="0.0196078;1pkt 1fpkt"];
769--2256[label="0.0196078;1pkt 1fpkt"];
769--2260[label="0.0196078;1pkt 1fpkt"];
769--2266[label="0.0980392;5pkt 5fpkt"];
769--2273[label="0.0980392;5pkt 5fpkt"];
798--812[label="0.122807;7pkt 7fpkt"];
798--813[label="0.122807;7pkt 7fpkt"];
798--1687[label="0.315789;18pkt 18fpkt"];
798--1943[label="0.22807;13pkt 13fpkt"];
798--2224[label="0.22807;13pkt 13fpkt"];
798--2247[label="0.175439;10pkt 10fpkt"];
798--2255[label="0.0175439;1pkt 1fpkt"];
798--2257[label="0.0350877;2pkt 2fpkt"];
798--2267[label="0.0350877;2pkt 2fpkt"];
798--2274[label="0.0350877;2pkt 2fpkt"];
798--2767[label="1;56pkt 56fpkt"];
902--1726[label="0.0176991;2pkt 2fpkt"];
902--1755[label="0.123894;14pkt 14fpkt"];
902--1810[label="1;53pkt 53fpkt"];
902--1943[label="0.0530973;6pkt 6fpkt"];
902--2211[label="0.123894;14pkt 14fpkt"];
902--2224[label="0.0530973;6pkt 6fpkt"];
902--2247[label="0.0530973;6pkt 6fpkt"];
902--2255[label="0.0442478;5pkt 5fpkt"];
902--2257[label="0.0353982;4pkt 4fpkt"];
902--2267[label="0.0353982;4pkt 4fpkt"];
902--2274[label="0.0353982;4pkt 4fpkt"];
988--1131[label="0.00819672;1pkt 1fpkt"];
988--1422[label="0.045977;4pkt 4fpkt"];
988--1480[label="0.0810811;6pkt 6fpkt"];
988--1587[label="0.011236;1pkt 1fpkt"];
988--1755[label="0.664062;85pkt 85fpkt"];
988--2211[label="0.46875;60pkt 60fpkt"];
988--2247[label="0.0234375;3pkt 3fpkt"];
988--2255[label="0.101562;13pkt 13fpkt"];
1055--1068[label="0.119048;5pkt 5fpkt"];
1055--1199[label="0.0454545;3pkt 3fpkt"];
1055--1319[label="0.0909091;1pkt 1fpkt"];
1055--1943[label="0.025974;2pkt 2fpkt"];
1055--2057[label="0.119048;5pkt 5fpkt"];
1055--2224[label="0.025974;2pkt 2fpkt"];
1055--2255[label="0.155844;12pkt 12fpkt"];
1055--2257[label="0.038961;3pkt 3fpkt"];
1055--2267[label="0.038961;3pkt 3fpkt"];
1055--2274[label="0.038961;3pkt 3fpkt"];
1199--1268[label="0.0151515;1pkt 1fpkt"];
1199--1431[label="0.774194;24pkt 24fpkt"];
1199--2255[label="0.136364;9pkt 9fpkt"];
1199--2257[label="0.0606061;4pkt 4fpkt"];
1199--2267[label="0.0606061;4pkt 4fpkt"];
1199--2274[label="0.0606061;4pkt 4fpkt"];
1199--2420[label="0.111111;4pkt 4fpkt"];
1422--2255[label="0.091954;8pkt 8fpkt"];
1422--2310[label="0.0114943;1pkt 1fpkt"];
1422--2642[label="0.0344828;3pkt 3fpkt"];
1422--2825[label="0.0689655;4pkt 4fpkt"];
1422--3094[label="0.0344828;3pkt 3fpkt"];
1422--3192[label="0.0689655;4pkt 4fpkt"];
1422--3327[label="0.0348837;3pkt 3fpkt"];
1480--2002[label="0.0322581;1pkt 1fpkt"];
1480--2013[label="0.0135135;1pkt 1fpkt"];
1480--2229[label="0.0322581;1pkt 1fpkt"];
1480--2247[label="0.0540541;4pkt 4fpkt"];
1480--2255[label="0.027027;2pkt 2fpkt"];
1480--2257[label="0.0540541;4pkt 4fpkt"];
1480--2267[label="0.0540541;4pkt 4fpkt"];
1480--2274[label="0.0540541;4pkt 4fpkt"];
1480--2360[label="0.0185185;1pkt 1fpkt"];
1480--2642[label="0.0540541;4pkt 4fpkt"];
1480--2825[label="0.0689655;4pkt 4fpkt"];
1480--2953[label="0.0185185;1pkt 1fpkt"];
1480--3094[label="0.0540541;4pkt 4fpkt"];
1480--3192[label="0.0689655;4pkt 4fpkt"];
1480--3263[label="0.0185185;1pkt 1fpkt"];
1480--3327[label="0.0540541;4pkt 4fpkt"];
1587--2247[label="0.0561798;5pkt 5fpkt"];
1587--2255[label="0.0224719;2pkt 2fpkt"];
1587--2257[label="0.0337079;3pkt 3fpkt"];
1587--2267[label="0.0337079;3pkt 3fpkt"];
1587--2274[label="0.0337079;3pkt 3fpkt"];
1587--2323[label="0.0322581;1pkt 1fpkt"];
1587--2382[label="0.166667;1pkt 1fpkt"];
1587--2963[label="0.166667;1pkt 1fpkt"];
1593--1943[label="0.174089;43pkt 43fpkt"];
1593--2224[label="0.174089;43pkt 43fpkt"];
1593--2247[label="0.0242915;6pkt 6fpkt"];
1593--2255[label="0.0283401;7pkt 7fpkt"];
1593--2257[label="0.109312;27pkt 27fpkt"];
1593--2267[label="0.109312;27pkt 27fpkt"];
1593--2274[label="0.109312;27pkt 27fpkt"];
1593--2492[label="0.995951;246pkt 246fpkt"];
1687--1878[label="0.0196078;1pkt 1fpkt"];
1687--2247[label="0.105263;14pkt 14fpkt"];
1687--2468[label="0.00806452;1pkt 1fpkt"];
1687--2695[label="0.699248;93pkt 93fpkt"];
1687--2767[label="0.321429;18pkt 18fpkt"];
1687--2999[label="0.008;1pkt 1fpkt"];
1769--1943[label="0.864407;51pkt 51fpkt"];
1769--2224[label="0.864407;51pkt 51fpkt"];
1769--2247[label="0.0677966;4pkt 4fpkt"];
1769--2255[label="0.0847458;5pkt 5fpkt"];
1769--2257[label="0.0677966;4pkt 4fpkt"];
1769--2267[label="0.0677966;4pkt 4fpkt"];
1769--2274[label="0.0677966;4pkt 4fpkt"];
1769--3278[label="0.983051;58pkt 58fpkt"];
1878--2255[label="0.0392157;2pkt 2fpkt"];
1878--2468[label="0.980392;50pkt 50fpkt"];
1878--2999[label="1;51pkt 51fpkt"];
1943--1968[label="0.157895;12pkt 12fpkt"];
1943--2002[label="0.0645161;2pkt 2fpkt"];
1943--2013[label="0.0172414;3pkt 3fpkt"];
1943--2047[label="0.0545455;6pkt 6fpkt"];
1943--2091[label="0.0175439;2pkt 2fpkt"];
1943--2155[label="0.0121951;1pkt 1fpkt"];
1943--2224[label="1;433pkt 433fpkt"];
1943--2229[label="0.0645161;2pkt 2fpkt"];
1943--2247[label="0.0623557;27pkt 27fpkt"];
1943--2255[label="0.140878;61pkt 61fpkt"];
1943--2257[label="0.0554273;24pkt 24fpkt"];
1943--2267[label="0.0554273;24pkt 24fpkt"];
1943--2274[label="0.0554273;24pkt 24fpkt"];
1943--2323[label="0.0322581;1pkt 1fpkt"];
1943--2358[label="0.0305344;4pkt 4fpkt"];
1943--2414[label="0.153846;12pkt 12fpkt"];
1943--2429[label="0.5;1pkt 1fpkt"];
1943--2492[label="0.166667;43pkt 43fpkt"];
1943--2541[label="0.0131579;1pkt 1fpkt"];
1943--2564[label="0.047619;1pkt 1fpkt"];
1943--2583[label="1;2pkt 2fpkt"];
1943--2605[label="0.1;3pkt 3fpkt"];
1943--2651[label="0.829268;34pkt 34fpkt"];
1943--2665[label="0.15873;10pkt 10fpkt"];
1943--2690[label="0.00473934;1pkt 1fpkt"];
1943--2726[label="0.0754717;4pkt 4fpkt"];
1943--2767[label="0.232143;13pkt 13fpkt"];
1943--2798[label="0.0869565;2pkt 2fpkt"];
1943--3039[label="0.012987;1pkt 1fpkt"];
1943--3144[label="0.0754717;4pkt 4fpkt"];
1943--3179[label="0.0909091;2pkt 2fpkt"];
1943--3278[label="0.675676;50pkt 50fpkt"];
1943--3350[label="0.0740741;4pkt 4fpkt"];
2224--2229[label="0.0645161;2pkt 2fpkt"];
2224--2247[label="0.0623557;27pkt 27fpkt"];
2224--2255[label="0.140878;61pkt 61fpkt"];
2224--2257[label="0.0554273;24pkt 24fpkt"];
2224--2267[label="0.0554273;24pkt 24fpkt"];
2224--2274[label="0.0554273;24pkt 24fpkt"];
2224--2323[label="0.0322581;1pkt 1fpkt"];
2224--2358[label="0.0305344;4pkt 4fpkt"];
2224--2414[label="0.153846;12pkt 12fpkt"];
2224--2429[label="0.5;1pkt 1fpkt"];
2224--2492[label="0.166667;43pkt 43fpkt"];
2224--2541[label="0.0131579;1pkt 1fpkt"];
2224--2564[label="0.047619;1pkt 1fpkt"];
2224--2583[label="1;2pkt 2fpkt"];
2224--2605[label="0.1;3pkt 3fpkt"];
2224--2651[label="0.829268;34pkt 34fpkt"];
2224--2665[label="0.15873;10pkt 10fpkt"];
2224--2690[label="0.00473934;1pkt 1fpkt"];
2224--2726[label="0.0754717;4pkt 4fpkt"];
2224--2767[label="0.232143;13pkt 13fpkt"];
2224--2798[label="0.0869565;2pkt 2fpkt"];
2224--3039[label="0.012987;1pkt 1fpkt"];
2224--3144[label="0.0754717;4pkt 4fpkt"];
2224--3179[label="0.0909091;2pkt 2fpkt"];
2224--3278[label="0.675676;50pkt 50fpkt"];
2224--3350[label="0.0740741;4pkt 4fpkt"];
2229--2255[label="0.0967742;3pkt 3fpkt"];
2229--2257[label="0.16129;5pkt 5fpkt"];
2229--2267[label="0.16129;5pkt 5fpkt"];
2229--2274[label="0.16129;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="208.78.234.60" src_port="80"/>
      <filter dst_ip="162.73.179.2" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
482[label="209.88.210.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
483[label="44.88.72.243;s;1pkt 1fpkt", shape=diamond, color=yellow];
1811[label="44.88.72.243;s;1pkt 1fpkt", shape=hexagon, color=black];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.88.72.243:5001, 209.88.210.80:1078}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 1078: (50%)&gt;];
}
482--483[label="1;1pkt 1fpkt"];
482--1811[label="1;1pkt 1fpkt"];
483--1811[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.88.210.80" dst_port="1078" src_ip="44.88.72.243" src_port="5001"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
322[label="209.88.15.166;d;165pkt 165fpkt", shape=diamond, color=yellow];
678[label="44.26.93.144;s;8pkt 8fpkt", shape=diamond, color=yellow];
1827[label="44.26.93.144;s;8pkt 8fpkt", shape=hexagon, color=black];
2002[label="209.90.183.10;s;31pkt 31fpkt", shape=hexagon, color=black];
2737[label="205.116.174.176;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 209.88.15.166:*}[85.8639%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7664%)&lt;BR/&gt; 2569: (0.700935%)&lt;BR/&gt; 2568: (0.700935%)&lt;BR/&gt; 2567: (0.700935%)&lt;BR/&gt; 2559: (0.700935%)&gt;];
}
322--678[label="1;8pkt 8fpkt"];
322--871[label="0.00606061;1pkt 1fpkt"];
322--1827[label="1;8pkt 8fpkt"];
322--2002[label="0.16129;5pkt 5fpkt"];
322--2229[label="0.16129;5pkt 5fpkt"];
322--2247[label="0.0848485;14pkt 14fpkt"];
322--2257[label="0.0848485;14pkt 14fpkt"];
322--2267[label="0.0848485;14pkt 14fpkt"];
322--2274[label="0.0848485;14pkt 14fpkt"];
322--2310[label="0.00606061;1pkt 1fpkt"];
322--2323[label="0.0322581;1pkt 1fpkt"];
322--2737[label="1;2pkt 2fpkt"];
678--1827[label="1;8pkt 8fpkt"];
2002--2224[label="0.0645161;2pkt 2fpkt"];
2002--2229[label="1;31pkt 31fpkt"];
2002--2255[label="0.0967742;3pkt 3fpkt"];
2002--2257[label="0.16129;5pkt 5fpkt"];
2002--2267[label="0.16129;5pkt 5fpkt"];
2002--2274[label="0.16129;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="209.88.15.166" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
967[label="208.217.85.48;s;2pkt 2fpkt", shape=diamond, color=yellow];
1077[label="208.103.138.246;d;2pkt 2fpkt", shape=diamond, color=yellow];
1833[label="208.217.85.48;s;2pkt 2fpkt", shape=hexagon, color=black];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.217.85.48:1028, 208.103.138.246:80}[50%]&lt;BR/&gt;{208.217.85.48:4975, 208.103.138.246:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4975: (25%)&lt;BR/&gt; 1028: (25%)&gt;];
}
967--1077[label="1;2pkt 2fpkt"];
967--1833[label="1;2pkt 2fpkt"];
1077--1833[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.103.138.246" dst_port="80" src_ip="208.217.85.48" src_port="4975"/>
      <filter dst_ip="208.103.138.246" dst_port="80" src_ip="208.217.85.48" src_port="1028"/>
    </slice>
    <from sec="1031547920" usec="0"/>
    <to sec="1031548034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
945[label="151.244.226.92;s;9pkt 9fpkt", shape=diamond, color=yellow];
979[label="193.173.253.147;d;1pkt 1fpkt", shape=diamond, color=yellow];
1837[label="193.173.253.147;d;1pkt 1fpkt", shape=hexagon, color=black];
1930[label="151.244.226.92;s;9pkt 9fpkt", shape=hexagon, color=black];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.226.92:*, 193.173.253.237:80}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45%)&lt;BR/&gt; 3020: (10%)&lt;BR/&gt; 123: (10%)&lt;BR/&gt; 3022: (5%)&lt;BR/&gt; 3021: (5%)&gt;];
}
945--979[label="1;1pkt 1fpkt"];
945--1837[label="1;1pkt 1fpkt"];
945--1930[label="1;9pkt 9fpkt"];
945--2258[label="0.111111;1pkt 1fpkt"];
979--1837[label="1;1pkt 1fpkt"];
979--1930[label="1;1pkt 1fpkt"];
1837--1930[label="1;1pkt 1fpkt"];
1930--2258[label="0.111111;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.173.253.237" dst_port="80" src_ip="151.244.226.92"/>
    </slice>
    <from sec="1031547798" usec="0"/>
    <to sec="1031548249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826429,1.99503,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
56[label="141.133.202.154s;3pkt 3fpkt", shape=rectangle, color=red];
163[label="136.65.110.34;s;806pkt 806fpkt", shape=diamond, color=yellow];
1192[label="208.138.49.124;d;4pkt 4fpkt", shape=diamond, color=yellow];
1334[label="194.146.150.55;d;3pkt 3fpkt", shape=diamond, color=yellow];
1558[label="167.150.112.48;d;9pkt 9fpkt", shape=diamond, color=yellow];
1623[label="208.7.103.241;d;15pkt 15fpkt", shape=diamond, color=yellow];
1838[label="136.65.110.34;s;696pkt 696fpkt", shape=hexagon, color=black];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.110.34:80, *:*}[99.7525%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1216: (0.195312%)&lt;BR/&gt; 2252: (0.130208%)&lt;BR/&gt; 2150: (0.130208%)&lt;BR/&gt; 1969: (0.130208%)&gt;];
}
56--163[label="0.333333;1pkt 1fpkt"];
163--1192[label="1;4pkt 4fpkt"];
163--1334[label="1;3pkt 3fpkt"];
163--1558[label="1;9pkt 9fpkt"];
163--1623[label="1;15pkt 15fpkt"];
163--1838[label="1;696pkt 696fpkt"];
163--2247[label="0.0694789;56pkt 56fpkt"];
163--2255[label="0.0719603;58pkt 58fpkt"];
163--2257[label="0.0707196;57pkt 57fpkt"];
163--2267[label="0.0707196;57pkt 57fpkt"];
163--2274[label="0.0707196;57pkt 57fpkt"];
1192--1838[label="1;4pkt 4fpkt"];
1192--2255[label="0.5;2pkt 2fpkt"];
1334--1838[label="1;3pkt 3fpkt"];
1623--1838[label="0.666667;10pkt 10fpkt"];
1623--2257[label="0.133333;2pkt 2fpkt"];
1623--2267[label="0.133333;2pkt 2fpkt"];
1623--2274[label="0.133333;2pkt 2fpkt"];
1838--2247[label="0.0804598;56pkt 56fpkt"];
1838--2255[label="0.0833333;58pkt 58fpkt"];
1838--2257[label="0.0818966;57pkt 57fpkt"];
1838--2267[label="0.0818966;57pkt 57fpkt"];
1838--2274[label="0.0818966;57pkt 57fpkt"];
</description>
    <slice>
      <filter src_ip="136.65.110.34" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16938,2.02742,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
200[label="162.73.36.6;d;8pkt 8fpkt", shape=diamond, color=yellow];
201[label="194.225.218.190;s;1pkt 1fpkt", shape=diamond, color=yellow];
1840[label="162.73.36.6;d;8pkt 8fpkt", shape=hexagon, color=black];
1841[label="194.225.218.190;s;1pkt 1fpkt", shape=hexagon, color=black];
2223[label="194.225.218.190;s;1pkt 1fpkt", shape=polygon, color=gold];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:7743, 162.73.36.6:*}[37.5%]&lt;BR/&gt;{75.97.96.134:1863, 162.73.36.6:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (28.9474%)&lt;BR/&gt; 3100: (13.1579%)&lt;BR/&gt; 1863: (10.5263%)&lt;BR/&gt; 64995: (5.26316%)&lt;BR/&gt; 6688: (5.26316%)&gt;];
}
200--201[label="1;1pkt 1fpkt"];
200--1840[label="1;8pkt 8fpkt"];
200--1841[label="1;1pkt 1fpkt"];
200--2223[label="1;1pkt 1fpkt"];
201--1840[label="1;1pkt 1fpkt"];
201--1841[label="1;1pkt 1fpkt"];
201--2223[label="1;1pkt 1fpkt"];
1840--1841[label="1;1pkt 1fpkt"];
1840--2223[label="1;1pkt 1fpkt"];
1841--2223[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.36.6" src_port="7743"/>
      <filter dst_ip="162.73.36.6" src_ip="75.97.96.134" src_port="1863"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
192[label="136.65.113.96;d;47pkt 47fpkt", shape=diamond, color=yellow];
193[label="131.157.253.18;s;1pkt 1fpkt", shape=diamond, color=yellow];
436[label="192.223.206.13;s;1pkt 1fpkt", shape=diamond, color=yellow];
459[label="170.72.66.51;s;1pkt 1fpkt", shape=diamond, color=yellow];
1752[label="131.157.253.18;s;1pkt 1fpkt", shape=hexagon, color=black];
1849[label="192.223.206.13;s;1pkt 1fpkt", shape=hexagon, color=black];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 136.65.113.96:6257}[82.9787%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (75.9615%)&lt;BR/&gt; 6970: (8.65385%)&lt;BR/&gt; 4006: (2.88462%)&lt;BR/&gt; 1128: (2.88462%)&lt;BR/&gt; 1114: (1.92308%)&gt;];
}
192--193[label="1;1pkt 1fpkt"];
192--436[label="1;1pkt 1fpkt"];
192--459[label="1;1pkt 1fpkt"];
192--1752[label="1;1pkt 1fpkt"];
192--1849[label="1;1pkt 1fpkt"];
193--1752[label="1;1pkt 1fpkt"];
436--1849[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.113.96" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16938,2.02742,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
367[label="136.65.174.191;d;9pkt 9fpkt", shape=diamond, color=yellow];
996[label="18.217.109.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
1095[label="18.140.203.152;s;1pkt 1fpkt", shape=diamond, color=yellow];
1110[label="192.217.168.112;s;1pkt 1fpkt", shape=diamond, color=yellow];
1235[label="18.9.155.142;s;1pkt 1fpkt", shape=diamond, color=yellow];
1695[label="136.65.174.191;d;9pkt 9fpkt", shape=hexagon, color=black];
1851[label="18.217.109.37;s;1pkt 1fpkt", shape=hexagon, color=black];
1910[label="192.217.168.112;s;1pkt 1fpkt", shape=hexagon, color=black];
2205[label="136.65.174.191;d;9pkt 9fpkt", shape=polygon, color=gold];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6699, 136.65.174.191:*}[66.6667%]&lt;BR/&gt;{*:1863, 136.65.174.191:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (36.3636%)&lt;BR/&gt; 1863: (9.09091%)&lt;BR/&gt; 3291: (7.57576%)&lt;BR/&gt; 3266: (7.57576%)&lt;BR/&gt; 3267: (6.06061%)&gt;];
}
367--996[label="1;1pkt 1fpkt"];
367--1095[label="1;1pkt 1fpkt"];
367--1110[label="1;1pkt 1fpkt"];
367--1235[label="1;1pkt 1fpkt"];
367--1695[label="1;9pkt 9fpkt"];
367--1851[label="1;1pkt 1fpkt"];
367--1910[label="1;1pkt 1fpkt"];
367--2205[label="1;9pkt 9fpkt"];
367--2247[label="0.111111;1pkt 1fpkt"];
996--1695[label="1;1pkt 1fpkt"];
996--1851[label="1;1pkt 1fpkt"];
996--2205[label="1;1pkt 1fpkt"];
1095--1695[label="1;1pkt 1fpkt"];
1095--2205[label="1;1pkt 1fpkt"];
1110--1695[label="1;1pkt 1fpkt"];
1110--1910[label="1;1pkt 1fpkt"];
1110--2205[label="1;1pkt 1fpkt"];
1235--1695[label="1;1pkt 1fpkt"];
1235--2205[label="1;1pkt 1fpkt"];
1695--1851[label="1;1pkt 1fpkt"];
1695--1910[label="1;1pkt 1fpkt"];
1695--2205[label="1;9pkt 9fpkt"];
1695--2247[label="0.111111;1pkt 1fpkt"];
1851--2205[label="1;1pkt 1fpkt"];
1910--2205[label="1;1pkt 1fpkt"];
2205--2247[label="0.111111;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.174.191" src_port="6699"/>
      <filter dst_ip="136.65.174.191" src_port="1863"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
737[label="215.111.187.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
738[label="141.133.221.79;s;2pkt 2fpkt", shape=diamond, color=yellow];
1855[label="215.111.187.80;d;1pkt 1fpkt", shape=hexagon, color=black];
1958[label="141.133.221.79;s;2pkt 2fpkt", shape=hexagon, color=black];
2499[label="141.133.221.79;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.221.79:8277, 215.111.187.80:8292}[50%]&lt;BR/&gt;{141.133.221.79:8196, 212.123.196.246:8194}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (31.25%)&lt;BR/&gt; 8277: (31.25%)&lt;BR/&gt; 8196: (18.75%)&lt;BR/&gt; 8194: (18.75%)&gt;];
}
737--738[label="1;1pkt 1fpkt"];
737--1855[label="1;1pkt 1fpkt"];
737--1958[label="1;1pkt 1fpkt"];
737--2499[label="1;1pkt 1fpkt"];
738--1855[label="1;1pkt 1fpkt"];
738--1958[label="1;2pkt 2fpkt"];
738--2499[label="1;2pkt 2fpkt"];
1855--1958[label="1;1pkt 1fpkt"];
1855--2499[label="1;1pkt 1fpkt"];
1958--2499[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.123.196.246" dst_port="8194" src_ip="141.133.221.79" src_port="8196"/>
      <filter dst_ip="215.111.187.80" dst_port="8292" src_ip="141.133.221.79" src_port="8277"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23136,1.99972,503,0 0 0 1 1 1 0 0 0 0 1 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
637[label="54.83.199.192;s;23pkt 23fpkt", shape=diamond, color=yellow];
655[label="141.133.206.116;d;35pkt 35fpkt", shape=diamond, color=yellow];
760[label="195.148.138.91;s;29pkt 29fpkt", shape=diamond, color=yellow];
1006[label="141.133.206.117;d;27pkt 27fpkt", shape=diamond, color=yellow];
1742[label="54.83.199.192;s;13pkt 13fpkt", shape=hexagon, color=black];
1809[label="195.148.138.91;s;29pkt 29fpkt", shape=hexagon, color=black];
1857[label="141.133.206.117;d;22pkt 22fpkt", shape=hexagon, color=black];
2218[label="195.148.138.91;s;26pkt 26fpkt", shape=polygon, color=gold];
3171[label="54.83.199.192;21pkt 21fpkt", shape=invtriangle, color=brown];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.83.199.192:*, *:80}[34.8485%]&lt;BR/&gt;{195.148.138.91:*, 141.133.206.116:80}[31.8182%]&lt;BR/&gt;{*:*, 141.133.206.117:80}[25.7576%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.5556%)&lt;BR/&gt; 25: (4%)&lt;BR/&gt; 65449: (1.11111%)&lt;BR/&gt; 65251: (1.11111%)&lt;BR/&gt; 65202: (1.11111%)&gt;];
}
637--655[label="0.478261;11pkt 11fpkt"];
637--1006[label="0.347826;8pkt 8fpkt"];
637--1742[label="1;13pkt 13fpkt"];
637--1857[label="0.272727;6pkt 6fpkt"];
637--2248[label="0.173913;4pkt 4fpkt"];
637--2254[label="0.0869565;2pkt 2fpkt"];
637--2263[label="0.173913;4pkt 4fpkt"];
637--2270[label="0.173913;4pkt 4fpkt"];
637--3171[label="1;21pkt 21fpkt"];
655--760[label="0.724138;21pkt 21fpkt"];
655--1742[label="0.230769;3pkt 3fpkt"];
655--1809[label="0.724138;21pkt 21fpkt"];
655--2218[label="0.692308;18pkt 18fpkt"];
655--2248[label="0.0571429;2pkt 2fpkt"];
655--2254[label="0.0285714;1pkt 1fpkt"];
655--2258[label="0.0285714;1pkt 1fpkt"];
655--2263[label="0.0571429;2pkt 2fpkt"];
655--2270[label="0.0571429;2pkt 2fpkt"];
655--2502[label="0.130435;3pkt 3fpkt"];
655--3015[label="0.125;3pkt 3fpkt"];
655--3171[label="0.52381;11pkt 11fpkt"];
760--1006[label="0.296296;8pkt 8fpkt"];
760--1809[label="1;29pkt 29fpkt"];
760--1857[label="0.363636;8pkt 8fpkt"];
760--2218[label="1;26pkt 26fpkt"];
760--2248[label="0.103448;3pkt 3fpkt"];
760--2254[label="0.103448;3pkt 3fpkt"];
760--2258[label="0.0344828;1pkt 1fpkt"];
760--2263[label="0.103448;3pkt 3fpkt"];
760--2270[label="0.103448;3pkt 3fpkt"];
1006--1742[label="0.461538;6pkt 6fpkt"];
1006--1809[label="0.296296;8pkt 8fpkt"];
1006--1857[label="1;22pkt 22fpkt"];
1006--2218[label="0.307692;8pkt 8fpkt"];
1006--2248[label="0.037037;1pkt 1fpkt"];
1006--2254[label="0.148148;4pkt 4fpkt"];
1006--2263[label="0.037037;1pkt 1fpkt"];
1006--2270[label="0.037037;1pkt 1fpkt"];
1006--2526[label="0.111111;2pkt 2fpkt"];
1006--3030[label="0.111111;2pkt 2fpkt"];
1006--3171[label="0.333333;7pkt 7fpkt"];
1006--3298[label="0.111111;2pkt 2fpkt"];
1742--1857[label="0.461538;6pkt 6fpkt"];
1742--2248[label="0.307692;4pkt 4fpkt"];
1742--2254[label="0.153846;2pkt 2fpkt"];
1742--2263[label="0.307692;4pkt 4fpkt"];
1742--2270[label="0.307692;4pkt 4fpkt"];
1742--3171[label="0.846154;11pkt 11fpkt"];
1809--1857[label="0.363636;8pkt 8fpkt"];
1809--2218[label="1;26pkt 26fpkt"];
1809--2248[label="0.103448;3pkt 3fpkt"];
1809--2254[label="0.103448;3pkt 3fpkt"];
1809--2258[label="0.0344828;1pkt 1fpkt"];
1809--2263[label="0.103448;3pkt 3fpkt"];
1809--2270[label="0.103448;3pkt 3fpkt"];
1857--2218[label="0.363636;8pkt 8fpkt"];
1857--2248[label="0.0454545;1pkt 1fpkt"];
1857--2254[label="0.181818;4pkt 4fpkt"];
1857--2263[label="0.0454545;1pkt 1fpkt"];
1857--2270[label="0.0454545;1pkt 1fpkt"];
1857--2526[label="0.0555556;1pkt 1fpkt"];
1857--3030[label="0.0555556;1pkt 1fpkt"];
1857--3171[label="0.238095;5pkt 5fpkt"];
1857--3298[label="0.0555556;1pkt 1fpkt"];
2218--2248[label="0.115385;3pkt 3fpkt"];
2218--2254[label="0.115385;3pkt 3fpkt"];
2218--2263[label="0.115385;3pkt 3fpkt"];
2218--2270[label="0.115385;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="54.83.199.192"/>
      <filter dst_ip="141.133.206.117" dst_port="80"/>
      <filter dst_ip="141.133.206.116" dst_port="80" src_ip="195.148.138.91"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
768[label="208.78.224.136;s;144pkt 144fpkt", shape=diamond, color=yellow];
1859[label="208.78.224.136;s;141pkt 141fpkt", shape=hexagon, color=black];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.78.224.136:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
768--1859[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter src_ip="208.78.224.136"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
638[label="208.78.234.39;s;284pkt 284fpkt", shape=diamond, color=yellow];
855[label="207.182.165.59;d;36pkt 36fpkt", shape=diamond, color=yellow];
879[label="208.78.234.191;s;30pkt 30fpkt", shape=diamond, color=yellow];
1460[label="204.43.84.100;d;6pkt 6fpkt", shape=diamond, color=yellow];
1491[label="75.155.47.69;d;86pkt 86fpkt", shape=diamond, color=yellow];
1863[label="208.78.234.39;s;261pkt 261fpkt", shape=hexagon, color=black];
2396[label="208.78.234.39;290pkt 290fpkt", shape=pentagon, color=darkviolet];
2773[label="208.78.234.191;29pkt 29fpkt", shape=pentagon, color=darkviolet];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.78.234.39:32778, *:53}[33.9506%]&lt;BR/&gt;{208.78.234.39:80, 75.155.47.69:*}[25.9259%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.5616%)&lt;BR/&gt; 53: (16.7319%)&lt;BR/&gt; 32778: (15.7534%)&lt;BR/&gt; 1138: (0.342466%)&lt;BR/&gt; 1170: (0.244618%)&gt;];
}
638--855[label="0.194444;7pkt 7fpkt"];
638--913[label="0.0185185;1pkt 1fpkt"];
638--1012[label="0.0172414;1pkt 1fpkt"];
638--1375[label="0.0147059;1pkt 1fpkt"];
638--1460[label="1;6pkt 6fpkt"];
638--1491[label="0.953488;82pkt 82fpkt"];
638--1570[label="0.0133333;1pkt 1fpkt"];
638--1575[label="0.0188679;1pkt 1fpkt"];
638--1863[label="1;261pkt 261fpkt"];
638--2041[label="0.0169492;1pkt 1fpkt"];
638--2145[label="0.0188679;1pkt 1fpkt"];
638--2247[label="0.0140845;4pkt 4fpkt"];
638--2251[label="0.00352113;1pkt 1fpkt"];
638--2253[label="0.0528169;15pkt 15fpkt"];
638--2255[label="0.0105634;3pkt 3fpkt"];
638--2256[label="0.126761;36pkt 36fpkt"];
638--2257[label="0.0352113;10pkt 10fpkt"];
638--2267[label="0.0352113;10pkt 10fpkt"];
638--2274[label="0.0352113;10pkt 10fpkt"];
638--2396[label="0.996479;283pkt 283fpkt"];
855--879[label="0.966667;29pkt 29fpkt"];
855--1863[label="0.194444;7pkt 7fpkt"];
855--2396[label="0.194444;7pkt 7fpkt"];
855--2773[label="0.965517;28pkt 28fpkt"];
879--1491[label="0.0333333;1pkt 1fpkt"];
879--2773[label="1;29pkt 29fpkt"];
1460--1863[label="1;6pkt 6fpkt"];
1460--2257[label="0.666667;4pkt 4fpkt"];
1460--2267[label="0.666667;4pkt 4fpkt"];
1460--2274[label="0.666667;4pkt 4fpkt"];
1460--2396[label="1;6pkt 6fpkt"];
1491--1863[label="0.872093;75pkt 75fpkt"];
1491--2247[label="0.0232558;2pkt 2fpkt"];
1491--2255[label="0.0232558;2pkt 2fpkt"];
1491--2257[label="0.0116279;1pkt 1fpkt"];
1491--2267[label="0.0116279;1pkt 1fpkt"];
1491--2274[label="0.0116279;1pkt 1fpkt"];
1491--2396[label="0.953488;82pkt 82fpkt"];
1491--2773[label="0.0344828;1pkt 1fpkt"];
1863--2041[label="0.0169492;1pkt 1fpkt"];
1863--2247[label="0.0153257;4pkt 4fpkt"];
1863--2251[label="0.00383142;1pkt 1fpkt"];
1863--2253[label="0.0574713;15pkt 15fpkt"];
1863--2255[label="0.0114943;3pkt 3fpkt"];
1863--2256[label="0.137931;36pkt 36fpkt"];
1863--2257[label="0.0383142;10pkt 10fpkt"];
1863--2267[label="0.0383142;10pkt 10fpkt"];
1863--2274[label="0.0383142;10pkt 10fpkt"];
1863--2396[label="0.996169;260pkt 260fpkt"];
</description>
    <slice>
      <filter dst_ip="75.155.47.69" src_ip="208.78.234.39" src_port="80"/>
      <filter dst_port="53" src_ip="208.78.234.39" src_port="32778"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
977[label="72.105.59.226;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.112.46:1255, 72.105.59.226:80}[50%]&lt;BR/&gt;{136.65.112.46:1256, 72.105.59.226:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1256: (25%)&lt;BR/&gt; 1255: (25%)&gt;];
}
977--1033[label="1;2pkt 2fpkt"];
977--1867[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="72.105.59.226" dst_port="80" src_ip="136.65.112.46" src_port="1256"/>
      <filter dst_ip="72.105.59.226" dst_port="80" src_ip="136.65.112.46" src_port="1255"/>
    </slice>
    <from sec="1031547981" usec="0"/>
    <to sec="1031548063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
2799[label="193.32.118.201;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2873[label="72.81.147.234;22pkt 22fpkt", shape=pentagon, color=darkviolet];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.81.147.234:80, 141.133.116.116:*}[95.6522%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1358: (2.17391%)&lt;BR/&gt; 1357: (2.17391%)&lt;BR/&gt; 1356: (2.17391%)&lt;BR/&gt; 1354: (2.17391%)&gt;];
}
2799--3180[label="1;1pkt 1fpkt"];
2873--3218[label="1;22pkt 22fpkt"];
2873--3388[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.116.116" src_ip="72.81.147.234" src_port="80"/>
    </slice>
    <from sec="1031548221" usec="0"/>
    <to sec="1031548288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
690[label="194.226.84.149;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.226.84.149:7743, 141.133.38.75:2819}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (50%)&lt;BR/&gt; 2819: (50%)&gt;];
}
690--824[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.38.75" dst_port="2819" src_ip="194.226.84.149" src_port="7743"/>
    </slice>
    <from sec="1031547789" usec="0"/>
    <to sec="1031548095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
703[label="209.129.201.129;d;50pkt 50fpkt", shape=diamond, color=yellow];
1062[label="195.91.122.145;s;24pkt 24fpkt", shape=diamond, color=yellow];
1882[label="195.91.122.145;s;10pkt 10fpkt", shape=hexagon, color=black];
2647[label="195.91.122.145;23pkt 23fpkt", shape=pentagon, color=darkviolet];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.91.122.145:*, 209.129.201.129:80}[48%]&lt;BR/&gt;{*:25, 209.129.201.129:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3271%)&lt;BR/&gt; 25: (4.6729%)&lt;BR/&gt; 1088: (1.86916%)&lt;BR/&gt; 1087: (1.86916%)&lt;BR/&gt; 1086: (1.86916%)&gt;];
}
703--1062[label="1;24pkt 24fpkt"];
703--1882[label="1;10pkt 10fpkt"];
703--2254[label="0.12;6pkt 6fpkt"];
703--2258[label="0.08;4pkt 4fpkt"];
703--2409[label="0.047619;1pkt 1fpkt"];
703--2647[label="1;23pkt 23fpkt"];
703--2977[label="0.047619;1pkt 1fpkt"];
1062--1882[label="1;10pkt 10fpkt"];
1062--2258[label="0.166667;4pkt 4fpkt"];
1062--2647[label="1;23pkt 23fpkt"];
1882--2647[label="0.9;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="209.129.201.129" src_port="25"/>
      <filter dst_ip="209.129.201.129" dst_port="80" src_ip="195.91.122.145"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.522387,2.02397,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
976[label="213.237.171.235;d;99pkt 99fpkt", shape=diamond, color=yellow];
2800[label="151.244.240.201;58pkt 58fpkt", shape=pentagon, color=darkviolet];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.78.234.8:*, 213.237.171.235:80}[63.0573%]&lt;BR/&gt;{151.244.240.201:*, *:80}[35.0318%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0446%)&lt;BR/&gt; 443: (0.636943%)&lt;BR/&gt; 59987: (0.318471%)&lt;BR/&gt; 59985: (0.318471%)&lt;BR/&gt; 59984: (0.318471%)&gt;];
}
976--2309[label="1;99pkt 99fpkt"];
2800--3181[label="1;58pkt 58fpkt"];
2800--3369[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="151.244.240.201"/>
      <filter dst_ip="213.237.171.235" dst_port="80" src_ip="208.78.234.8"/>
    </slice>
    <from sec="1031547963" usec="0"/>
    <to sec="1031548581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
666[label="209.88.204.2;d;38pkt 38fpkt", shape=diamond, color=yellow];
1083[label="194.194.140.140;s;3pkt 3fpkt", shape=diamond, color=yellow];
1889[label="194.194.140.140;s;3pkt 3fpkt", shape=hexagon, color=black];
2837[label="194.235.138.218;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:7743, 209.88.204.2:*}[44.7368%]&lt;BR/&gt;{*:*, 209.88.204.2:7743}[39.4737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (43.4783%)&lt;BR/&gt; 2777: (3.26087%)&lt;BR/&gt; 1445: (3.26087%)&lt;BR/&gt; 1437: (3.26087%)&lt;BR/&gt; 32161: (2.17391%)&gt;];
}
666--1083[label="1;3pkt 3fpkt"];
666--1889[label="1;3pkt 3fpkt"];
666--2837[label="1;2pkt 2fpkt"];
1083--1889[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.88.204.2" src_port="7743"/>
      <filter dst_ip="209.88.204.2" dst_port="7743"/>
    </slice>
    <from sec="1031547632" usec="0"/>
    <to sec="1031548268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16938,2.02742,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
188[label="72.92.166.118;d;1pkt 1fpkt", shape=diamond, color=yellow];
298[label="72.48.128.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
359[label="18.139.140.118;d;1pkt 1fpkt", shape=diamond, color=yellow];
373[label="151.244.37.166;s;315pkt 315fpkt", shape=diamond, color=yellow];
865[label="76.70.91.213;d;1pkt 1fpkt", shape=diamond, color=yellow];
980[label="76.64.217.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
1463[label="18.23.176.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
1641[label="18.199.32.199;d;1pkt 1fpkt", shape=diamond, color=yellow];
1792[label="76.70.91.213;d;1pkt 1fpkt", shape=hexagon, color=black];
1902[label="72.48.128.104;d;1pkt 1fpkt", shape=hexagon, color=black];
1939[label="151.244.37.166;s;253pkt 253fpkt", shape=hexagon, color=black];
2113[label="18.23.176.45;d;1pkt 1fpkt", shape=hexagon, color=black];
2222[label="151.244.37.166;s;253pkt 253fpkt", shape=polygon, color=gold];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.37.166:6346, *:*}[99.3651%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (49.7593%)&lt;BR/&gt; 3744: (0.481348%)&lt;BR/&gt; 57358: (0.361011%)&lt;BR/&gt; 4182: (0.361011%)&lt;BR/&gt; 3740: (0.361011%)&gt;];
}
188--373[label="1;1pkt 1fpkt"];
188--1939[label="1;1pkt 1fpkt"];
188--2222[label="1;1pkt 1fpkt"];
298--373[label="1;1pkt 1fpkt"];
298--1902[label="1;1pkt 1fpkt"];
298--1939[label="1;1pkt 1fpkt"];
298--2222[label="1;1pkt 1fpkt"];
359--373[label="1;1pkt 1fpkt"];
359--1939[label="1;1pkt 1fpkt"];
359--2222[label="1;1pkt 1fpkt"];
373--865[label="1;1pkt 1fpkt"];
373--980[label="1;1pkt 1fpkt"];
373--1463[label="1;1pkt 1fpkt"];
373--1641[label="1;1pkt 1fpkt"];
373--1792[label="1;1pkt 1fpkt"];
373--1902[label="1;1pkt 1fpkt"];
373--1939[label="1;253pkt 253fpkt"];
373--2113[label="1;1pkt 1fpkt"];
373--2222[label="1;253pkt 253fpkt"];
865--1792[label="1;1pkt 1fpkt"];
865--1939[label="1;1pkt 1fpkt"];
865--2222[label="1;1pkt 1fpkt"];
980--1939[label="1;1pkt 1fpkt"];
980--2222[label="1;1pkt 1fpkt"];
1463--1939[label="1;1pkt 1fpkt"];
1463--2113[label="1;1pkt 1fpkt"];
1463--2222[label="1;1pkt 1fpkt"];
1792--1939[label="1;1pkt 1fpkt"];
1792--2222[label="1;1pkt 1fpkt"];
1902--1939[label="1;1pkt 1fpkt"];
1902--2222[label="1;1pkt 1fpkt"];
1939--2113[label="1;1pkt 1fpkt"];
1939--2222[label="1;253pkt 253fpkt"];
2113--2222[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="151.244.37.166" src_port="6346"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
77[label="141.133.148.242s;1pkt 1fpkt", shape=rectangle, color=red];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.148.242:2898, 213.129.233.120:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2898: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
77--522[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.129.233.120" dst_port="80" src_ip="141.133.148.242" src_port="2898"/>
    </slice>
    <from sec="1031548363" usec="0"/>
    <to sec="1031548560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_240{
style=filled;
color=gray75;
1122[label="208.78.227.35;s;233pkt 233fpkt", shape=diamond, color=yellow];
1911[label="208.78.227.35;s;174pkt 174fpkt", shape=hexagon, color=black];
stat240[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.78.227.35:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1122--1911[label="1;174pkt 174fpkt"];
</description>
    <slice>
      <filter src_ip="208.78.227.35"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
1032[label="208.78.230.206;s;347pkt 347fpkt", shape=diamond, color=yellow];
1915[label="208.78.230.206;s;325pkt 325fpkt", shape=hexagon, color=black];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.78.230.206:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1032--1915[label="1;325pkt 325fpkt"];
</description>
    <slice>
      <filter src_ip="208.78.230.206"/>
    </slice>
    <from sec="1031547604" usec="0"/>
    <to sec="1031548607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
357[label="162.73.82.251;d;281pkt 281fpkt", shape=diamond, color=yellow];
670[label="74.2.186.65;s;175pkt 175fpkt", shape=diamond, color=yellow];
1194[label="141.133.192.5;d;90pkt 90fpkt", shape=diamond, color=yellow];
1748[label="74.2.186.65;s;157pkt 157fpkt", shape=hexagon, color=black];
1917[label="208.78.229.84;d;66pkt 66fpkt", shape=hexagon, color=black];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.97.118.40:80, 162.73.82.251:*}[36.1868%]&lt;BR/&gt;{74.2.186.65:80, 162.73.82.251:*}[29.9611%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.2133%)&lt;BR/&gt; 1863: (2.0156%)&lt;BR/&gt; 443: (1.62549%)&lt;BR/&gt; 5190: (0.650195%)&lt;BR/&gt; 123: (0.650195%)&gt;];
}
357--670[label="0.542857;95pkt 95fpkt"];
357--1748[label="0.605096;95pkt 95fpkt"];
357--1784[label="0.853211;186pkt 186fpkt"];
357--2247[label="0.0213523;6pkt 6fpkt"];
670--806[label="0.0105263;1pkt 1fpkt"];
670--821[label="0.00571429;1pkt 1fpkt"];
670--1194[label="0.0222222;2pkt 2fpkt"];
670--1200[label="0.0142857;2pkt 2fpkt"];
670--1305[label="0.0171429;3pkt 3fpkt"];
670--1492[label="0.0204082;1pkt 1fpkt"];
670--1553[label="0.0333333;3pkt 3fpkt"];
670--1662[label="0.00571429;1pkt 1fpkt"];
670--1748[label="1;157pkt 157fpkt"];
670--1874[label="0.00571429;1pkt 1fpkt"];
670--1917[label="0.0151515;1pkt 1fpkt"];
670--2104[label="0.0171429;3pkt 3fpkt"];
670--2199[label="0.00571429;1pkt 1fpkt"];
670--2245[label="0.0171429;3pkt 3fpkt"];
670--2247[label="0.0114286;2pkt 2fpkt"];
670--2255[label="0.0342857;6pkt 6fpkt"];
1194--1357[label="0.411111;37pkt 37fpkt"];
1194--1748[label="0.0222222;2pkt 2fpkt"];
1194--2255[label="0.511111;46pkt 46fpkt"];
1194--2693[label="0.411111;37pkt 37fpkt"];
1748--1874[label="0.00636943;1pkt 1fpkt"];
1748--1917[label="0.0151515;1pkt 1fpkt"];
1748--2104[label="0.0127389;2pkt 2fpkt"];
1748--2199[label="0.00636943;1pkt 1fpkt"];
1748--2245[label="0.0127389;2pkt 2fpkt"];
1748--2247[label="0.0127389;2pkt 2fpkt"];
1748--2255[label="0.0382166;6pkt 6fpkt"];
1917--2565[label="0.5;2pkt 2fpkt"];
1917--2676[label="0.5;1pkt 1fpkt"];
1917--2729[label="0.0243902;1pkt 1fpkt"];
1917--3115[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.82.251" src_ip="75.97.118.40" src_port="80"/>
      <filter dst_ip="162.73.82.251" src_ip="74.2.186.65" src_port="80"/>
    </slice>
    <from sec="1031547605" usec="0"/>
    <to sec="1031548605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
358[label="162.73.82.251;s;432pkt 432fpkt", shape=diamond, color=yellow];
543[label="75.97.118.40;d;321pkt 321fpkt", shape=diamond, color=yellow];
1694[label="162.73.82.251;s;52pkt 52fpkt", shape=hexagon, color=black];
1925[label="75.97.118.40;d;321pkt 321fpkt", shape=hexagon, color=black];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.82.251:*, 75.97.118.40:80}[61.588%]&lt;BR/&gt;{162.73.82.251:*, 74.2.186.65:80}[31.1159%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49606: (0.17762%)&lt;BR/&gt; 49605: (0.17762%)&lt;BR/&gt; 49603: (0.17762%)&lt;BR/&gt; 49602: (0.17762%)&gt;];
}
358--543[label="0.894081;287pkt 287fpkt"];
358--1049[label="0.819209;145pkt 145fpkt"];
358--1694[label="1;52pkt 52fpkt"];
358--1925[label="0.894081;287pkt 287fpkt"];
358--2248[label="0.0138889;6pkt 6fpkt"];
358--2254[label="0.0833333;36pkt 36fpkt"];
358--2263[label="0.0138889;6pkt 6fpkt"];
358--2270[label="0.0138889;6pkt 6fpkt"];
543--1694[label="0.653846;34pkt 34fpkt"];
543--1925[label="1;321pkt 321fpkt"];
543--2248[label="0.0124611;4pkt 4fpkt"];
543--2254[label="0.0747664;24pkt 24fpkt"];
543--2263[label="0.0124611;4pkt 4fpkt"];
543--2270[label="0.0124611;4pkt 4fpkt"];
1694--1925[label="0.653846;34pkt 34fpkt"];
1694--2248[label="0.115385;6pkt 6fpkt"];
1694--2254[label="0.288462;15pkt 15fpkt"];
1694--2263[label="0.115385;6pkt 6fpkt"];
1694--2270[label="0.115385;6pkt 6fpkt"];
1925--2248[label="0.0124611;4pkt 4fpkt"];
1925--2254[label="0.0747664;24pkt 24fpkt"];
1925--2263[label="0.0124611;4pkt 4fpkt"];
1925--2270[label="0.0124611;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="75.97.118.40" dst_port="80" src_ip="162.73.82.251"/>
      <filter dst_ip="74.2.186.65" dst_port="80" src_ip="162.73.82.251"/>
    </slice>
    <from sec="1031547642" usec="0"/>
    <to sec="1031548157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
862[label="193.4.24.158;d;8pkt 8fpkt", shape=diamond, color=yellow];
950[label="141.133.8.34;s;8pkt 8fpkt", shape=diamond, color=yellow];
1931[label="193.4.24.158;d;8pkt 8fpkt", shape=hexagon, color=black];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.8.34:*, 193.4.24.158:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2036: (6.25%)&lt;BR/&gt; 2025: (6.25%)&lt;BR/&gt; 2024: (6.25%)&lt;BR/&gt; 2023: (6.25%)&gt;];
}
862--950[label="1;8pkt 8fpkt"];
862--1931[label="1;8pkt 8fpkt"];
950--1931[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="193.4.24.158" dst_port="80" src_ip="141.133.8.34"/>
    </slice>
    <from sec="1031547820" usec="0"/>
    <to sec="1031548097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
1085[label="220.144.97.22;s;9pkt 9fpkt", shape=diamond, color=yellow];
1183[label="141.133.106.83;d;13pkt 13fpkt", shape=diamond, color=yellow];
1934[label="141.133.106.83;d;13pkt 13fpkt", shape=hexagon, color=black];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.144.97.22:80, 141.133.106.83:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3020: (4.28571%)&lt;BR/&gt; 3019: (4.28571%)&lt;BR/&gt; 3018: (4.28571%)&lt;BR/&gt; 3017: (4.28571%)&gt;];
}
1085--1183[label="1;9pkt 9fpkt"];
1085--1934[label="1;9pkt 9fpkt"];
1085--2255[label="0.333333;3pkt 3fpkt"];
1183--1934[label="1;13pkt 13fpkt"];
1183--2255[label="0.230769;3pkt 3fpkt"];
1183--2257[label="0.307692;4pkt 4fpkt"];
1183--2267[label="0.307692;4pkt 4fpkt"];
1183--2274[label="0.307692;4pkt 4fpkt"];
1934--2255[label="0.230769;3pkt 3fpkt"];
1934--2257[label="0.307692;4pkt 4fpkt"];
1934--2267[label="0.307692;4pkt 4fpkt"];
1934--2274[label="0.307692;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.106.83" src_ip="220.144.97.22" src_port="80"/>
    </slice>
    <from sec="1031548048" usec="0"/>
    <to sec="1031548369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06546,1.97208,503,1 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
86[label="141.133.232.38d;1pkt 1fpkt", shape=rectangle, color=red];
276[label="141.133.232.38;d;67pkt 67fpkt", shape=diamond, color=yellow];
1204[label="44.31.20.89;s;61pkt 61fpkt", shape=diamond, color=yellow];
1938[label="141.133.232.38;d;67pkt 67fpkt", shape=hexagon, color=black];
3031[label="44.31.20.89;120pkt 120fpkt", shape=invtriangle, color=brown];
3299[label="44.31.20.89;120pkt 120fpkt", shape=invhouse, color=bisque];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.31.20.89:80, 141.133.232.38:*}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5000: (0.573394%)&lt;BR/&gt; 4999: (0.573394%)&lt;BR/&gt; 4998: (0.573394%)&lt;BR/&gt; 4997: (0.573394%)&gt;];
}
86--3031[label="1;1pkt 1fpkt"];
86--3299[label="1;1pkt 1fpkt"];
276--1204[label="1;61pkt 61fpkt"];
276--1938[label="1;67pkt 67fpkt"];
276--3031[label="0.910448;61pkt 61fpkt"];
276--3299[label="0.910448;61pkt 61fpkt"];
1204--1938[label="1;61pkt 61fpkt"];
1204--3031[label="1;61pkt 61fpkt"];
1204--3299[label="1;61pkt 61fpkt"];
1938--3031[label="0.910448;61pkt 61fpkt"];
1938--3299[label="0.910448;61pkt 61fpkt"];
3031--3299[label="1;120pkt 120fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.232.38" src_ip="44.31.20.89" src_port="80"/>
    </slice>
    <from sec="1031548165" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
726[label="209.88.200.23;d;9pkt 9fpkt", shape=diamond, color=yellow];
727[label="209.196.93.126;s;4pkt 4fpkt", shape=diamond, color=yellow];
1952[label="209.196.93.126;s;4pkt 4fpkt", shape=hexagon, color=black];
2602[label="209.196.93.126;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8000, 209.88.200.23:4000}[44.4444%]&lt;BR/&gt;{209.196.93.126:2002, 209.88.200.23:*}[22.2222%]&lt;BR/&gt;{209.196.93.126:3004, 209.88.200.23:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2002: (19.4444%)&lt;BR/&gt; 3004: (16.6667%)&lt;BR/&gt; 4000: (13.8889%)&lt;BR/&gt; 8000: (11.1111%)&lt;BR/&gt; 1681: (11.1111%)&gt;];
}
726--727[label="1;4pkt 4fpkt"];
726--1952[label="1;4pkt 4fpkt"];
726--2602[label="1;1pkt 1fpkt"];
727--1952[label="1;4pkt 4fpkt"];
727--2602[label="1;1pkt 1fpkt"];
1952--2602[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.88.200.23" src_ip="209.196.93.126" src_port="3004"/>
      <filter dst_ip="209.88.200.23" src_ip="209.196.93.126" src_port="2002"/>
      <filter dst_ip="209.88.200.23" dst_port="4000" src_port="8000"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
446[label="151.244.36.40;s;13pkt 13fpkt", shape=diamond, color=yellow];
736[label="204.45.96.220;d;8pkt 8fpkt", shape=diamond, color=yellow];
1956[label="151.244.36.40;s;11pkt 11fpkt", shape=hexagon, color=black];
2027[label="204.45.96.220;d;8pkt 8fpkt", shape=hexagon, color=black];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.36.40:1214, 204.45.96.220:*}[69.2308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (47.5%)&lt;BR/&gt; 1637: (5%)&lt;BR/&gt; 1636: (5%)&lt;BR/&gt; 1635: (5%)&lt;BR/&gt; 1634: (5%)&gt;];
}
446--736[label="1;8pkt 8fpkt"];
446--740[label="1;2pkt 2fpkt"];
446--1381[label="0.125;1pkt 1fpkt"];
446--1763[label="1;2pkt 2fpkt"];
446--1956[label="1;11pkt 11fpkt"];
446--2027[label="1;8pkt 8fpkt"];
446--2045[label="0.125;1pkt 1fpkt"];
446--2230[label="1;2pkt 2fpkt"];
736--1956[label="0.875;7pkt 7fpkt"];
736--2027[label="1;8pkt 8fpkt"];
1956--2027[label="0.875;7pkt 7fpkt"];
1956--2045[label="0.125;1pkt 1fpkt"];
1956--2230[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="204.45.96.220" src_ip="151.244.36.40" src_port="1214"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
450[label="193.40.233.186;s;291pkt 291fpkt", shape=diamond, color=yellow];
525[label="141.133.48.228;d;135pkt 135fpkt", shape=diamond, color=yellow];
743[label="162.73.66.20;d;94pkt 94fpkt", shape=diamond, color=yellow];
1515[label="141.133.65.233;d;46pkt 46fpkt", shape=diamond, color=yellow];
1907[label="193.40.233.186;s;257pkt 257fpkt", shape=hexagon, color=black];
1920[label="141.133.48.228;d;135pkt 135fpkt", shape=hexagon, color=black];
1960[label="162.73.66.20;d;94pkt 94fpkt", shape=hexagon, color=black];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.40.233.186:80, 141.133.48.228:*}[41.5282%]&lt;BR/&gt;{193.40.233.186:80, 162.73.66.20:*}[31.2292%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8099%)&lt;BR/&gt; 3544: (0.190114%)&lt;BR/&gt; 3543: (0.190114%)&lt;BR/&gt; 3542: (0.190114%)&lt;BR/&gt; 3541: (0.190114%)&gt;];
}
450--525[label="0.925926;125pkt 125fpkt"];
450--743[label="1;94pkt 94fpkt"];
450--1515[label="1;46pkt 46fpkt"];
450--1907[label="1;257pkt 257fpkt"];
450--1920[label="0.925926;125pkt 125fpkt"];
450--1960[label="1;94pkt 94fpkt"];
450--2247[label="0.0103093;3pkt 3fpkt"];
450--2255[label="0.0103093;3pkt 3fpkt"];
450--2257[label="0.04811;14pkt 14fpkt"];
450--2267[label="0.04811;14pkt 14fpkt"];
450--2274[label="0.04811;14pkt 14fpkt"];
525--1907[label="0.925926;125pkt 125fpkt"];
525--1920[label="1;135pkt 135fpkt"];
525--2247[label="0.0296296;4pkt 4fpkt"];
525--2278[label="0.125;1pkt 1fpkt"];
743--1907[label="1;94pkt 94fpkt"];
743--1960[label="1;94pkt 94fpkt"];
743--2247[label="0.0212766;2pkt 2fpkt"];
1515--1907[label="0.5;23pkt 23fpkt"];
1515--2247[label="0.0217391;1pkt 1fpkt"];
1515--2255[label="0.0217391;1pkt 1fpkt"];
1515--2257[label="0.282609;13pkt 13fpkt"];
1515--2267[label="0.282609;13pkt 13fpkt"];
1515--2274[label="0.282609;13pkt 13fpkt"];
1907--1920[label="0.925926;125pkt 125fpkt"];
1907--1960[label="1;94pkt 94fpkt"];
1907--2247[label="0.0116732;3pkt 3fpkt"];
1907--2255[label="0.0116732;3pkt 3fpkt"];
1920--2247[label="0.0296296;4pkt 4fpkt"];
1920--2278[label="0.125;1pkt 1fpkt"];
1960--2247[label="0.0212766;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.48.228" src_ip="193.40.233.186" src_port="80"/>
      <filter dst_ip="162.73.66.20" src_ip="193.40.233.186" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
744[label="136.87.133.40;d;142pkt 142fpkt", shape=diamond, color=yellow];
1000[label="142.87.98.110;s;1pkt 1fpkt", shape=diamond, color=yellow];
1625[label="72.198.201.100;s;1pkt 1fpkt", shape=diamond, color=yellow];
1961[label="142.87.98.110;s;1pkt 1fpkt", shape=hexagon, color=black];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6346, 136.87.133.40:*}[55.6338%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (28.9655%)&lt;BR/&gt; 6347: (9.31034%)&lt;BR/&gt; 6348: (6.55172%)&lt;BR/&gt; 6349: (1.03448%)&lt;BR/&gt; 2604: (1.03448%)&gt;];
}
744--1000[label="1;1pkt 1fpkt"];
744--1625[label="1;1pkt 1fpkt"];
744--1961[label="1;1pkt 1fpkt"];
1000--1961[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.87.133.40" src_port="6346"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
905[label="192.34.145.43;d;1pkt 1fpkt", shape=diamond, color=yellow];
1966[label="192.34.145.43;d;1pkt 1fpkt", shape=hexagon, color=black];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.6.194:3716, 192.34.145.43:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3716: (50%)&gt;];
}
905--1966[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.34.145.43" dst_port="6699" src_ip="136.65.6.194" src_port="3716"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
1120[label="162.73.13.238;s;25pkt 25fpkt", shape=diamond, color=yellow];
1242[label="156.169.148.210;d;21pkt 21fpkt", shape=diamond, color=yellow];
1971[label="162.73.13.238;s;20pkt 20fpkt", shape=hexagon, color=black];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.13.238:*, 156.169.148.210:80}[84%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.9394%)&lt;BR/&gt; 443: (6.06061%)&lt;BR/&gt; 3755: (2.27273%)&lt;BR/&gt; 3754: (2.27273%)&lt;BR/&gt; 3745: (2.27273%)&gt;];
}
1120--1242[label="1;21pkt 21fpkt"];
1120--1971[label="1;20pkt 20fpkt"];
1120--2248[label="0.08;2pkt 2fpkt"];
1120--2254[label="0.08;2pkt 2fpkt"];
1120--2258[label="0.04;1pkt 1fpkt"];
1120--2263[label="0.08;2pkt 2fpkt"];
1120--2270[label="0.08;2pkt 2fpkt"];
1242--1971[label="0.8;16pkt 16fpkt"];
1242--2248[label="0.0952381;2pkt 2fpkt"];
1242--2254[label="0.0952381;2pkt 2fpkt"];
1242--2258[label="0.047619;1pkt 1fpkt"];
1242--2263[label="0.0952381;2pkt 2fpkt"];
1242--2270[label="0.0952381;2pkt 2fpkt"];
1971--2248[label="0.1;2pkt 2fpkt"];
1971--2254[label="0.1;2pkt 2fpkt"];
1971--2258[label="0.05;1pkt 1fpkt"];
1971--2263[label="0.1;2pkt 2fpkt"];
1971--2270[label="0.1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="156.169.148.210" dst_port="80" src_ip="162.73.13.238"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_253{
style=filled;
color=gray75;
1121[label="161.115.239.200;s;275pkt 275fpkt", shape=diamond, color=yellow];
1972[label="161.115.239.200;s;275pkt 275fpkt", shape=hexagon, color=black];
stat253[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.115.239.200:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1121--1972[label="1;275pkt 275fpkt"];
</description>
    <slice>
      <filter src_ip="161.115.239.200"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
1618[label="141.133.144.81;d;27pkt 27fpkt", shape=diamond, color=yellow];
1994[label="44.88.77.171;s;68pkt 68fpkt", shape=hexagon, color=black];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.88.77.171:80, 209.129.201.112:*}[40%]&lt;BR/&gt;{*:80, 141.133.144.81:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4737%)&lt;BR/&gt; 34588: (1.05263%)&lt;BR/&gt; 34586: (1.05263%)&lt;BR/&gt; 1794: (1.05263%)&lt;BR/&gt; 1684: (1.05263%)&gt;];
}
1618--1994[label="0.185185;5pkt 5fpkt"];
1618--2255[label="0.111111;3pkt 3fpkt"];
1618--2257[label="0.0740741;2pkt 2fpkt"];
1618--2267[label="0.0740741;2pkt 2fpkt"];
1618--2274[label="0.0740741;2pkt 2fpkt"];
1994--2197[label="0.148148;8pkt 8fpkt"];
1994--2247[label="0.0147059;1pkt 1fpkt"];
1994--2255[label="0.102941;7pkt 7fpkt"];
1994--2257[label="0.0147059;1pkt 1fpkt"];
1994--2267[label="0.0147059;1pkt 1fpkt"];
1994--2274[label="0.0147059;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.144.81" src_port="80"/>
      <filter dst_ip="209.129.201.112" src_ip="44.88.77.171" src_port="80"/>
    </slice>
    <from sec="1031547643" usec="0"/>
    <to sec="1031548582" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
1190[label="44.172.204.77;s;1pkt 1fpkt", shape=diamond, color=yellow];
2005[label="44.172.204.77;s;1pkt 1fpkt", shape=hexagon, color=black];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.172.204.77:6699, 209.129.201.112:35125}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35125: (50%)&lt;BR/&gt; 6699: (50%)&gt;];
}
1190--2005[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.129.201.112" dst_port="35125" src_ip="44.172.204.77" src_port="6699"/>
    </slice>
    <from sec="1031548105" usec="0"/>
    <to sec="1031548407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
1328[label="141.133.239.206;d;75pkt 75fpkt", shape=diamond, color=yellow];
1329[label="205.197.13.218;s;6pkt 6fpkt", shape=diamond, color=yellow];
2009[label="205.197.13.218;s;6pkt 6fpkt", shape=hexagon, color=black];
2630[label="195.198.209.136;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.68.113.157:80, 141.133.239.206:*}[36%]&lt;BR/&gt;{205.113.75.243:80, 141.133.239.206:*}[22.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.625%)&lt;BR/&gt; 21: (4.6875%)&lt;BR/&gt; 3486: (1.5625%)&lt;BR/&gt; 3414: (1.5625%)&lt;BR/&gt; 3408: (1.5625%)&gt;];
}
1328--1329[label="1;6pkt 6fpkt"];
1328--2009[label="1;6pkt 6fpkt"];
1328--2630[label="1;9pkt 9fpkt"];
1328--2687[label="0.931034;27pkt 27fpkt"];
1328--3120[label="0.928571;26pkt 26fpkt"];
1329--2009[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.239.206" src_ip="213.68.113.157" src_port="80"/>
      <filter dst_ip="141.133.239.206" src_ip="205.113.75.243" src_port="80"/>
    </slice>
    <from sec="1031548186" usec="0"/>
    <to sec="1031548532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749014,1.94966,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
1350[label="74.110.31.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
1351[label="136.65.7.88;s;2pkt 2fpkt", shape=diamond, color=yellow];
2012[label="74.110.31.5;d;1pkt 1fpkt", shape=hexagon, color=black];
2525[label="136.65.7.88;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3029[label="136.65.7.88;1pkt 1fpkt", shape=invtriangle, color=brown];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.7.88:14241, 74.110.31.5:6699}[50%]&lt;BR/&gt;{136.65.7.88:14208, 75.97.97.93:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14241: (25%)&lt;BR/&gt; 14208: (25%)&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 1863: (25%)&gt;];
}
1350--1351[label="1;1pkt 1fpkt"];
1350--2012[label="1;1pkt 1fpkt"];
1351--2012[label="1;1pkt 1fpkt"];
1351--2525[label="1;1pkt 1fpkt"];
1351--3029[label="1;1pkt 1fpkt"];
2525--3029[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="75.97.97.93" dst_port="1863" src_ip="136.65.7.88" src_port="14208"/>
      <filter dst_ip="74.110.31.5" dst_port="6699" src_ip="136.65.7.88" src_port="14241"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749014,1.94966,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
884[label="209.88.192.147;d;97pkt 97fpkt", shape=diamond, color=yellow];
885[label="194.202.190.4;s;89pkt 89fpkt", shape=diamond, color=yellow];
1801[label="194.202.190.4;s;48pkt 48fpkt", shape=hexagon, color=black];
2020[label="209.88.192.147;d;89pkt 89fpkt", shape=hexagon, color=black];
2295[label="194.202.190.4;106pkt 106fpkt", shape=pentagon, color=darkviolet];
2914[label="194.202.190.4;107pkt 107fpkt", shape=invtriangle, color=brown];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.202.190.4:7743, 209.88.192.147:*}[48.5981%]&lt;BR/&gt;{194.202.190.4:*, 209.88.192.147:9743}[47.6636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (25.5597%)&lt;BR/&gt; 9743: (24.4403%)&lt;BR/&gt; 4980: (0.559701%)&lt;BR/&gt; 2370: (0.559701%)&lt;BR/&gt; 2366: (0.559701%)&gt;];
}
884--885[label="1;89pkt 89fpkt"];
884--1801[label="1;48pkt 48fpkt"];
884--2020[label="1;89pkt 89fpkt"];
884--2295[label="0.989691;96pkt 96fpkt"];
884--2914[label="1;97pkt 97fpkt"];
885--1801[label="1;48pkt 48fpkt"];
885--2020[label="1;89pkt 89fpkt"];
885--2295[label="0.988764;88pkt 88fpkt"];
885--2914[label="1;89pkt 89fpkt"];
1801--2020[label="1;48pkt 48fpkt"];
1801--2295[label="0.979167;47pkt 47fpkt"];
1801--2914[label="1;48pkt 48fpkt"];
2020--2295[label="0.988764;88pkt 88fpkt"];
2020--2914[label="1;89pkt 89fpkt"];
2295--2914[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_ip="209.88.192.147" src_ip="194.202.190.4" src_port="7743"/>
      <filter dst_ip="209.88.192.147" dst_port="9743" src_ip="194.202.190.4"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749014,1.94966,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
893[label="136.170.185.158;s;227pkt 227fpkt", shape=diamond, color=yellow];
1143[label="193.47.0.32;d;81pkt 81fpkt", shape=diamond, color=yellow];
2022[label="136.170.185.158;s;210pkt 210fpkt", shape=hexagon, color=black];
2691[label="136.170.185.158;236pkt 236fpkt", shape=pentagon, color=darkviolet];
3123[label="136.170.185.158;235pkt 235fpkt", shape=invtriangle, color=brown];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, *:*}[36.3934%]&lt;BR/&gt;{136.170.185.158:53, *:*}[29.1803%]&lt;BR/&gt;{*:*, 193.47.0.32:*}[26.5574%]&lt;BR/&gt;{*:*, *:113}[20.3279%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (26.7442%)&lt;BR/&gt; 25: (14.3074%)&lt;BR/&gt; 113: (11.4257%)&lt;BR/&gt; 1948: (6.37007%)&lt;BR/&gt; 1024: (0.606673%)&gt;];
}
893--1143[label="0.160494;13pkt 13fpkt"];
893--1150[label="0.04;1pkt 1fpkt"];
893--1375[label="0.0147059;1pkt 1fpkt"];
893--1570[label="0.0133333;1pkt 1fpkt"];
893--1921[label="0.164557;13pkt 13fpkt"];
893--2022[label="1;210pkt 210fpkt"];
893--2041[label="0.0169492;1pkt 1fpkt"];
893--2097[label="0.04;1pkt 1fpkt"];
893--2237[label="0.04;1pkt 1fpkt"];
893--2251[label="0.0132159;3pkt 3fpkt"];
893--2253[label="0.00881057;2pkt 2fpkt"];
893--2256[label="0.0220264;5pkt 5fpkt"];
893--2260[label="0.00881057;2pkt 2fpkt"];
893--2266[label="0.0352423;8pkt 8fpkt"];
893--2273[label="0.0352423;8pkt 8fpkt"];
893--2691[label="0.995595;226pkt 226fpkt"];
893--3123[label="0.991189;225pkt 225fpkt"];
1143--1427[label="0.0123457;1pkt 1fpkt"];
1143--1510[label="0.0617284;5pkt 5fpkt"];
1143--1685[label="0.148148;12pkt 12fpkt"];
1143--1698[label="0.0123457;1pkt 1fpkt"];
1143--1921[label="1;79pkt 79fpkt"];
1143--2022[label="0.160494;13pkt 13fpkt"];
1143--2107[label="0.0123457;1pkt 1fpkt"];
1143--2213[label="0.0987654;8pkt 8fpkt"];
1143--2249[label="0.0123457;1pkt 1fpkt"];
1143--2251[label="0.0123457;1pkt 1fpkt"];
1143--2253[label="0.0123457;1pkt 1fpkt"];
1143--2256[label="0.0123457;1pkt 1fpkt"];
1143--2260[label="0.0246914;2pkt 2fpkt"];
1143--2264[label="0.0123457;1pkt 1fpkt"];
1143--2266[label="0.0246914;2pkt 2fpkt"];
1143--2271[label="0.0123457;1pkt 1fpkt"];
1143--2273[label="0.0246914;2pkt 2fpkt"];
1143--2371[label="0.0123457;1pkt 1fpkt"];
1143--2683[label="0.148148;12pkt 12fpkt"];
1143--2691[label="0.160494;13pkt 13fpkt"];
1143--3123[label="0.160494;13pkt 13fpkt"];
2022--2041[label="0.0169492;1pkt 1fpkt"];
2022--2097[label="0.04;1pkt 1fpkt"];
2022--2237[label="0.04;1pkt 1fpkt"];
2022--2251[label="0.0142857;3pkt 3fpkt"];
2022--2253[label="0.00952381;2pkt 2fpkt"];
2022--2256[label="0.0238095;5pkt 5fpkt"];
2022--2260[label="0.00952381;2pkt 2fpkt"];
2022--2266[label="0.0380952;8pkt 8fpkt"];
2022--2273[label="0.0380952;8pkt 8fpkt"];
2022--2691[label="0.995238;209pkt 209fpkt"];
2022--3123[label="0.990476;208pkt 208fpkt"];
2691--3123[label="1;235pkt 235fpkt"];
</description>
    <slice>
      <filter dst_ip="193.47.0.32"/>
      <filter src_port="25"/>
      <filter dst_port="113"/>
      <filter src_ip="136.170.185.158" src_port="53"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
435[label="192.223.206.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
2023[label="192.223.206.13;d;1pkt 1fpkt", shape=hexagon, color=black];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.113.96:6970, 192.223.206.13:1128}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6970: (50%)&lt;BR/&gt; 1128: (50%)&gt;];
}
435--2023[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.223.206.13" dst_port="1128" src_ip="136.65.113.96" src_port="6970"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
301[label="208.78.231.154;d;329pkt 329fpkt", shape=diamond, color=yellow];
801[label="204.234.148.149;s;32pkt 32fpkt", shape=diamond, color=yellow];
1144[label="193.47.0.32;s;88pkt 88fpkt", shape=diamond, color=yellow];
1516[label="74.2.161.33;s;31pkt 31fpkt", shape=diamond, color=yellow];
2026[label="208.78.231.154;d;223pkt 223fpkt", shape=hexagon, color=black];
2051[label="141.133.251.149;d;90pkt 90fpkt", shape=hexagon, color=black];
2660[label="209.90.183.148;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 208.78.231.154:*}[58.4369%]&lt;BR/&gt;{*:25, *:*}[27.5311%]&lt;BR/&gt;{*:53, *:*}[21.492%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (19.7139%)&lt;BR/&gt; 53: (19.3408%)&lt;BR/&gt; 1026: (11.3184%)&lt;BR/&gt; 80: (4.97512%)&lt;BR/&gt; 443: (3.85572%)&gt;];
}
301--801[label="0.03125;1pkt 1fpkt"];
301--1144[label="0.136364;12pkt 12fpkt"];
301--1516[label="0.0322581;1pkt 1fpkt"];
301--1821[label="0.03125;1pkt 1fpkt"];
301--1992[label="0.139535;12pkt 12fpkt"];
301--2026[label="1;223pkt 223fpkt"];
301--2248[label="0.00303951;1pkt 1fpkt"];
301--2253[label="0.0121581;4pkt 4fpkt"];
301--2254[label="0.00303951;1pkt 1fpkt"];
301--2258[label="0.00303951;1pkt 1fpkt"];
301--2263[label="0.00303951;1pkt 1fpkt"];
301--2266[label="0.0395137;13pkt 13fpkt"];
301--2270[label="0.00303951;1pkt 1fpkt"];
301--2273[label="0.0395137;13pkt 13fpkt"];
301--2372[label="0.136364;12pkt 12fpkt"];
301--2458[label="0.0116279;1pkt 1fpkt"];
301--2660[label="0.0909091;1pkt 1fpkt"];
301--2665[label="0.015873;1pkt 1fpkt"];
301--2993[label="0.0116279;1pkt 1fpkt"];
301--3282[label="0.0116279;1pkt 1fpkt"];
801--1080[label="0.28125;9pkt 9fpkt"];
801--1821[label="1;32pkt 32fpkt"];
801--2026[label="0.03125;1pkt 1fpkt"];
801--2116[label="0.28125;9pkt 9fpkt"];
801--2665[label="1;32pkt 32fpkt"];
1144--1394[label="0.0568182;5pkt 5fpkt"];
1144--1795[label="0.0113636;1pkt 1fpkt"];
1144--1992[label="1;86pkt 86fpkt"];
1144--2026[label="0.136364;12pkt 12fpkt"];
1144--2146[label="0.0113636;1pkt 1fpkt"];
1144--2208[label="0.0113636;1pkt 1fpkt"];
1144--2250[label="0.0113636;1pkt 1fpkt"];
1144--2251[label="0.0113636;1pkt 1fpkt"];
1144--2253[label="0.0113636;1pkt 1fpkt"];
1144--2256[label="0.0113636;1pkt 1fpkt"];
1144--2260[label="0.0227273;2pkt 2fpkt"];
1144--2262[label="0.0113636;1pkt 1fpkt"];
1144--2266[label="0.0227273;2pkt 2fpkt"];
1144--2269[label="0.0113636;1pkt 1fpkt"];
1144--2273[label="0.0227273;2pkt 2fpkt"];
1144--2372[label="1;88pkt 88fpkt"];
1516--2026[label="0.0322581;1pkt 1fpkt"];
1516--2051[label="0.0645161;2pkt 2fpkt"];
2026--2248[label="0.0044843;1pkt 1fpkt"];
2026--2253[label="0.0179372;4pkt 4fpkt"];
2026--2254[label="0.0044843;1pkt 1fpkt"];
2026--2258[label="0.0044843;1pkt 1fpkt"];
2026--2263[label="0.0044843;1pkt 1fpkt"];
2026--2266[label="0.058296;13pkt 13fpkt"];
2026--2270[label="0.0044843;1pkt 1fpkt"];
2026--2273[label="0.058296;13pkt 13fpkt"];
2026--2372[label="0.136364;12pkt 12fpkt"];
2026--2660[label="0.0909091;1pkt 1fpkt"];
2026--2665[label="0.015873;1pkt 1fpkt"];
2051--2443[label="0.111111;1pkt 1fpkt"];
2051--2502[label="0.173913;4pkt 4fpkt"];
2051--2660[label="0.0909091;1pkt 1fpkt"];
2051--3015[label="0.166667;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.78.231.154"/>
      <filter src_port="25"/>
      <filter src_port="53"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
464[label="216.197.36.24;d;1pkt 1fpkt", shape=diamond, color=yellow];
465[label="141.133.204.75;s;1pkt 1fpkt", shape=diamond, color=yellow];
2031[label="141.133.204.75;s;1pkt 1fpkt", shape=hexagon, color=black];
2142[label="216.197.36.24;d;1pkt 1fpkt", shape=hexagon, color=black];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.204.75:1092, 216.197.36.24:1755}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 1092: (50%)&gt;];
}
464--465[label="1;1pkt 1fpkt"];
464--2031[label="1;1pkt 1fpkt"];
464--2142[label="1;1pkt 1fpkt"];
465--2031[label="1;1pkt 1fpkt"];
465--2142[label="1;1pkt 1fpkt"];
2031--2142[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.197.36.24" dst_port="1755" src_ip="141.133.204.75" src_port="1092"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
1007[label="193.182.1.111;d;6pkt 6fpkt", shape=diamond, color=yellow];
1105[label="209.88.210.184;s;6pkt 6fpkt", shape=diamond, color=yellow];
2032[label="193.182.1.111;d;5pkt 5fpkt", shape=hexagon, color=black];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.88.210.184:6972, 193.182.1.111:*}[50%]&lt;BR/&gt;{209.88.210.184:6974, 193.182.1.111:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6972: (23.5294%)&lt;BR/&gt; 6974: (17.6471%)&lt;BR/&gt; 49304: (8.82353%)&lt;BR/&gt; 31198: (8.82353%)&lt;BR/&gt; 29438: (8.82353%)&gt;];
}
1007--1105[label="1;6pkt 6fpkt"];
1007--2032[label="1;5pkt 5fpkt"];
1105--2032[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="193.182.1.111" src_ip="209.88.210.184" src_port="6972"/>
      <filter dst_ip="193.182.1.111" src_ip="209.88.210.184" src_port="6974"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16938,2.02742,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
325[label="212.46.146.51;s;2pkt 2fpkt", shape=diamond, color=yellow];
326[label="208.78.231.135;d;15pkt 15fpkt", shape=diamond, color=yellow];
1689[label="212.46.146.51;s;2pkt 2fpkt", shape=hexagon, color=black];
2035[label="208.78.231.135;d;15pkt 15fpkt", shape=hexagon, color=black];
2231[label="208.78.231.135;d;9pkt 9fpkt", shape=polygon, color=gold];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.162.132.129:*, 208.78.231.135:80}[20%]&lt;BR/&gt;{75.178.2.165:*, 208.78.231.135:21}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (17.4419%)&lt;BR/&gt; 21: (16.2791%)&lt;BR/&gt; 0: (6.97674%)&lt;BR/&gt; 62294: (5.81395%)&lt;BR/&gt; 2985: (5.81395%)&gt;];
}
325--326[label="1;2pkt 2fpkt"];
325--1689[label="1;2pkt 2fpkt"];
325--2035[label="1;2pkt 2fpkt"];
325--2231[label="1;2pkt 2fpkt"];
326--1689[label="1;2pkt 2fpkt"];
326--2035[label="1;15pkt 15fpkt"];
326--2231[label="1;9pkt 9fpkt"];
326--2258[label="0.133333;2pkt 2fpkt"];
1689--2035[label="1;2pkt 2fpkt"];
1689--2231[label="1;2pkt 2fpkt"];
2035--2231[label="1;9pkt 9fpkt"];
2035--2258[label="0.133333;2pkt 2fpkt"];
2231--2258[label="0.222222;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.78.231.135" dst_port="21" src_ip="75.178.2.165"/>
      <filter dst_ip="208.78.231.135" dst_port="80" src_ip="218.162.132.129"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
776[label="209.85.244.3;d;1434pkt 1434fpkt", shape=diamond, color=yellow];
777[label="44.250.37.188;s;1406pkt 1406fpkt", shape=diamond, color=yellow];
2037[label="209.85.244.3;d;1191pkt 1191fpkt", shape=hexagon, color=black];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.250.37.188:*, 209.85.244.3:53}[98.0474%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.124%)&lt;BR/&gt; 65480: (0.0372116%)&lt;BR/&gt; 65477: (0.0372116%)&lt;BR/&gt; 65419: (0.0372116%)&lt;BR/&gt; 65413: (0.0372116%)&gt;];
}
776--777[label="1;1406pkt 1406fpkt"];
776--2037[label="1;1191pkt 1191fpkt"];
776--2253[label="0.0516039;74pkt 74fpkt"];
776--2256[label="0.0509066;73pkt 73fpkt"];
777--2037[label="0.97733;1164pkt 1164fpkt"];
777--2253[label="0.0504979;71pkt 71fpkt"];
777--2256[label="0.0512091;72pkt 72fpkt"];
2037--2253[label="0.0621327;74pkt 74fpkt"];
2037--2256[label="0.061293;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="209.85.244.3" dst_port="53" src_ip="44.250.37.188"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
315[label="193.80.34.27;s;637pkt 637fpkt", shape=diamond, color=yellow];
755[label="208.103.141.169;d;336pkt 336fpkt", shape=diamond, color=yellow];
1382[label="193.80.33.108;s;114pkt 114fpkt", shape=diamond, color=yellow];
1479[label="136.65.180.232;d;46pkt 46fpkt", shape=diamond, color=yellow];
1654[label="215.6.194.149;s;1pkt 1fpkt", shape=diamond, color=yellow];
2047[label="193.80.34.24;s;110pkt 110fpkt", shape=hexagon, color=black];
2091[label="193.80.33.108;s;114pkt 114fpkt", shape=hexagon, color=black];
2156[label="209.85.210.122;d;142pkt 142fpkt", shape=hexagon, color=black];
2516[label="209.9.50.84;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2666[label="215.6.194.149;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.80.34.27:80, *:*}[49.1473%]&lt;BR/&gt;{*:80, 208.103.141.169:*}[26.2791%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3679%)&lt;BR/&gt; 53: (0.199601%)&lt;BR/&gt; 0: (0.199601%)&lt;BR/&gt; 2600: (0.133067%)&lt;BR/&gt; 2574: (0.133067%)&gt;];
}
315--339[label="0.152;19pkt 19fpkt"];
315--369[label="0.0666667;30pkt 30fpkt"];
315--698[label="0.0486656;31pkt 31fpkt"];
315--717[label="0.576744;124pkt 124fpkt"];
315--755[label="0.199405;67pkt 67fpkt"];
315--806[label="0.0105263;1pkt 1fpkt"];
315--829[label="0.0517241;3pkt 3fpkt"];
315--1068[label="0.119048;5pkt 5fpkt"];
315--1133[label="0.134454;16pkt 16fpkt"];
315--1662[label="0.0941915;60pkt 60fpkt"];
315--1692[label="0.145299;17pkt 17fpkt"];
315--1726[label="0.00446429;2pkt 2fpkt"];
315--1807[label="0.172727;38pkt 38fpkt"];
315--1917[label="0.0151515;1pkt 1fpkt"];
315--1943[label="0.0554273;24pkt 24fpkt"];
315--2057[label="0.119048;5pkt 5fpkt"];
315--2100[label="0.0517241;3pkt 3fpkt"];
315--2150[label="0.134454;16pkt 16fpkt"];
315--2197[label="0.185185;10pkt 10fpkt"];
315--2199[label="0.0941915;60pkt 60fpkt"];
315--2224[label="0.0554273;24pkt 24fpkt"];
315--2247[label="0.0596546;38pkt 38fpkt"];
315--2255[label="0.0455259;29pkt 29fpkt"];
315--2257[label="0.0361068;23pkt 23fpkt"];
315--2267[label="0.0361068;23pkt 23fpkt"];
315--2274[label="0.0361068;23pkt 23fpkt"];
755--779[label="0.116071;26pkt 26fpkt"];
755--1263[label="0.0754717;8pkt 8fpkt"];
755--1360[label="0.807692;63pkt 63fpkt"];
755--1382[label="0.0526316;6pkt 6fpkt"];
755--1390[label="0.0518519;7pkt 7fpkt"];
755--1807[label="1;220pkt 220fpkt"];
755--2047[label="0.0636364;7pkt 7fpkt"];
755--2091[label="0.0526316;6pkt 6fpkt"];
755--2247[label="0.139881;47pkt 47fpkt"];
755--2255[label="0.0595238;20pkt 20fpkt"];
755--2257[label="0.0505952;17pkt 17fpkt"];
755--2267[label="0.0505952;17pkt 17fpkt"];
755--2274[label="0.0505952;17pkt 17fpkt"];
755--2353[label="0.461538;6pkt 6fpkt"];
755--2516[label="1;2pkt 2fpkt"];
1382--1479[label="0.0652174;3pkt 3fpkt"];
1382--1597[label="0.0701754;8pkt 8fpkt"];
1382--1662[label="0.00877193;1pkt 1fpkt"];
1382--1692[label="0.00877193;1pkt 1fpkt"];
1382--1726[label="0.0175439;2pkt 2fpkt"];
1382--1755[label="0.0175439;2pkt 2fpkt"];
1382--1943[label="0.0175439;2pkt 2fpkt"];
1382--2091[label="1;114pkt 114fpkt"];
1382--2156[label="0.0701754;8pkt 8fpkt"];
1382--2199[label="0.00877193;1pkt 1fpkt"];
1382--2224[label="0.0175439;2pkt 2fpkt"];
1382--2247[label="0.0350877;4pkt 4fpkt"];
1382--2255[label="0.0526316;6pkt 6fpkt"];
1382--2257[label="0.0614035;7pkt 7fpkt"];
1382--2267[label="0.0614035;7pkt 7fpkt"];
1382--2274[label="0.0614035;7pkt 7fpkt"];
1479--1654[label="1;1pkt 1fpkt"];
1479--2047[label="0.0434783;2pkt 2fpkt"];
1479--2091[label="0.0652174;3pkt 3fpkt"];
1479--2257[label="0.0434783;2pkt 2fpkt"];
1479--2267[label="0.0434783;2pkt 2fpkt"];
1479--2274[label="0.0434783;2pkt 2fpkt"];
1479--2666[label="1;1pkt 1fpkt"];
1654--2666[label="1;1pkt 1fpkt"];
2047--2104[label="0.118182;13pkt 13fpkt"];
2047--2156[label="0.0181818;2pkt 2fpkt"];
2047--2199[label="0.0181818;2pkt 2fpkt"];
2047--2211[label="0.0181818;2pkt 2fpkt"];
2047--2224[label="0.0545455;6pkt 6fpkt"];
2047--2245[label="0.118182;13pkt 13fpkt"];
2047--2247[label="0.0363636;4pkt 4fpkt"];
2047--2255[label="0.0454545;5pkt 5fpkt"];
2047--2257[label="0.0363636;4pkt 4fpkt"];
2047--2267[label="0.0363636;4pkt 4fpkt"];
2047--2274[label="0.0363636;4pkt 4fpkt"];
2091--2156[label="0.0701754;8pkt 8fpkt"];
2091--2199[label="0.00877193;1pkt 1fpkt"];
2091--2224[label="0.0175439;2pkt 2fpkt"];
2091--2247[label="0.0350877;4pkt 4fpkt"];
2091--2255[label="0.0526316;6pkt 6fpkt"];
2091--2257[label="0.0614035;7pkt 7fpkt"];
2091--2267[label="0.0614035;7pkt 7fpkt"];
2091--2274[label="0.0614035;7pkt 7fpkt"];
2156--2247[label="0.0140845;2pkt 2fpkt"];
2156--2255[label="0.0492958;7pkt 7fpkt"];
2156--2257[label="0.0915493;13pkt 13fpkt"];
2156--2267[label="0.0915493;13pkt 13fpkt"];
2156--2274[label="0.0915493;13pkt 13fpkt"];
2156--2902[label="0.142857;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="193.80.34.27" src_port="80"/>
      <filter dst_ip="208.103.141.169" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
820[label="141.133.192.35;s;73pkt 73fpkt", shape=diamond, color=yellow];
1049[label="74.2.186.65;d;177pkt 177fpkt", shape=diamond, color=yellow];
1195[label="141.133.192.5;s;92pkt 92fpkt", shape=diamond, color=yellow];
1554[label="141.133.232.10;s;91pkt 91fpkt", shape=diamond, color=yellow];
2050[label="213.7.2.17;d;127pkt 127fpkt", shape=hexagon, color=black];
2632[label="209.88.202.137;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3088[label="209.88.202.137;26pkt 26fpkt", shape=invtriangle, color=brown];
3323[label="209.88.202.137;24pkt 24fpkt", shape=invhouse, color=bisque];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.82.251:*, 74.2.186.65:80}[27.1605%]&lt;BR/&gt;{*:*, 213.7.2.17:80}[23.9859%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3491%)&lt;BR/&gt; 443: (1.17925%)&lt;BR/&gt; 1863: (0.393082%)&lt;BR/&gt; 3030: (0.314465%)&lt;BR/&gt; 3029: (0.314465%)&gt;];
}
820--1148[label="0.0684932;5pkt 5fpkt"];
820--1605[label="0.0172414;1pkt 1fpkt"];
820--1681[label="0.109589;8pkt 8fpkt"];
820--1782[label="1;73pkt 73fpkt"];
820--2050[label="0.0684932;5pkt 5fpkt"];
820--2195[label="0.109589;8pkt 8fpkt"];
820--2254[label="0.0821918;6pkt 6fpkt"];
1049--1195[label="0.0217391;2pkt 2fpkt"];
1049--1201[label="0.0142857;2pkt 2fpkt"];
1049--1306[label="0.016;2pkt 2fpkt"];
1049--1554[label="0.032967;3pkt 3fpkt"];
1049--1663[label="0.00564972;1pkt 1fpkt"];
1049--1694[label="0.346154;18pkt 18fpkt"];
1049--1776[label="0.00564972;1pkt 1fpkt"];
1049--1812[label="0.00564972;1pkt 1fpkt"];
1049--1852[label="0.00564972;1pkt 1fpkt"];
1049--2187[label="0.00564972;1pkt 1fpkt"];
1049--2248[label="0.0112994;2pkt 2fpkt"];
1049--2254[label="0.0734463;13pkt 13fpkt"];
1049--2263[label="0.0112994;2pkt 2fpkt"];
1049--2270[label="0.0112994;2pkt 2fpkt"];
1049--2300[label="0.0162602;2pkt 2fpkt"];
1049--2303[label="0.025641;1pkt 1fpkt"];
1049--2463[label="0.00564972;1pkt 1fpkt"];
1049--2517[label="0.00564972;1pkt 1fpkt"];
1049--2632[label="0.115385;3pkt 3fpkt"];
1049--2646[label="0.025;1pkt 1fpkt"];
1049--2652[label="0.0140845;2pkt 2fpkt"];
1049--2919[label="0.025641;1pkt 1fpkt"];
1049--2996[label="0.00564972;1pkt 1fpkt"];
1049--3088[label="0.115385;3pkt 3fpkt"];
1049--3323[label="0.125;3pkt 3fpkt"];
1195--1284[label="0.0108696;1pkt 1fpkt"];
1195--1497[label="0.0108696;1pkt 1fpkt"];
1195--1574[label="0.0188679;1pkt 1fpkt"];
1195--1905[label="0.402174;37pkt 37fpkt"];
1195--2050[label="0.0652174;6pkt 6fpkt"];
1195--2248[label="0.0108696;1pkt 1fpkt"];
1195--2263[label="0.0108696;1pkt 1fpkt"];
1195--2270[label="0.0108696;1pkt 1fpkt"];
1195--2300[label="1;92pkt 92fpkt"];
1554--1787[label="0.131868;12pkt 12fpkt"];
2050--2088[label="0.00787402;1pkt 1fpkt"];
2050--2225[label="0.00787402;1pkt 1fpkt"];
2050--2248[label="0.023622;3pkt 3fpkt"];
2050--2254[label="0.015748;2pkt 2fpkt"];
2050--2258[label="0.0393701;5pkt 5fpkt"];
2050--2263[label="0.023622;3pkt 3fpkt"];
2050--2270[label="0.023622;3pkt 3fpkt"];
2050--2280[label="0.152941;13pkt 13fpkt"];
2050--2300[label="0.0487805;6pkt 6fpkt"];
2050--2309[label="0.00787402;1pkt 1fpkt"];
2050--2457[label="0.0393701;5pkt 5fpkt"];
2050--2467[label="0.0472441;6pkt 6fpkt"];
2050--2512[label="0.0597015;4pkt 4fpkt"];
2050--2788[label="0.015748;2pkt 2fpkt"];
2050--2800[label="0.0862069;5pkt 5fpkt"];
2050--2911[label="0.151163;13pkt 13fpkt"];
2050--2992[label="0.0393701;5pkt 5fpkt"];
2050--2998[label="0.0472441;6pkt 6fpkt"];
2050--3023[label="0.0597015;4pkt 4fpkt"];
2050--3181[label="0.0862069;5pkt 5fpkt"];
2050--3254[label="0.00787402;1pkt 1fpkt"];
2050--3294[label="0.0597015;4pkt 4fpkt"];
2050--3367[label="0.015748;2pkt 2fpkt"];
2050--3369[label="0.0847458;5pkt 5fpkt"];
2632--3088[label="1;26pkt 26fpkt"];
2632--3323[label="1;24pkt 24fpkt"];
3088--3323[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="213.7.2.17" dst_port="80"/>
      <filter dst_ip="74.2.186.65" dst_port="80" src_ip="162.73.82.251"/>
    </slice>
    <from sec="1031547617" usec="0"/>
    <to sec="1031548650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
1295[label="170.27.28.233;s;62pkt 62fpkt", shape=diamond, color=yellow];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.27.28.233:*, 141.133.251.149:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1119: (0.806452%)&lt;BR/&gt; 1118: (0.806452%)&lt;BR/&gt; 1117: (0.806452%)&lt;BR/&gt; 1116: (0.806452%)&gt;];
}
1295--2051[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.251.149" dst_port="443" src_ip="170.27.28.233"/>
    </slice>
    <from sec="1031547758" usec="0"/>
    <to sec="1031548326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16938,2.02742,504,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
947[label="136.170.185.64;s;129pkt 129fpkt", shape=diamond, color=yellow];
1296[label="72.234.76.14;d;118pkt 118fpkt", shape=diamond, color=yellow];
1404[label="136.170.185.66;s;5pkt 5fpkt", shape=diamond, color=yellow];
2054[label="72.234.76.14;d;118pkt 118fpkt", shape=hexagon, color=black];
2232[label="72.234.76.14;d;118pkt 118fpkt", shape=polygon, color=gold];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.170.185.64:443, 72.234.76.14:*}[87.3134%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (47.9508%)&lt;BR/&gt; 80: (1.22951%)&lt;BR/&gt; 53: (0.512295%)&lt;BR/&gt; 3606: (0.409836%)&lt;BR/&gt; 3605: (0.409836%)&gt;];
}
947--1296[label="0.991525;117pkt 117fpkt"];
947--2054[label="0.991525;117pkt 117fpkt"];
947--2232[label="0.991525;117pkt 117fpkt"];
1296--1404[label="0.2;1pkt 1fpkt"];
1296--2054[label="1;118pkt 118fpkt"];
1296--2232[label="1;118pkt 118fpkt"];
1404--2054[label="0.2;1pkt 1fpkt"];
1404--2232[label="0.2;1pkt 1fpkt"];
1404--2266[label="0.2;1pkt 1fpkt"];
1404--2273[label="0.2;1pkt 1fpkt"];
2054--2232[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_ip="72.234.76.14" src_ip="136.170.185.64" src_port="443"/>
    </slice>
    <from sec="1031547699" usec="0"/>
    <to sec="1031548492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
1168[label="208.27.56.60;s;21pkt 21fpkt", shape=diamond, color=yellow];
2055[label="208.27.56.60;s;19pkt 19fpkt", shape=hexagon, color=black];
2442[label="208.27.56.60;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2989[label="208.27.56.60;25pkt 25fpkt", shape=invtriangle, color=brown];
3279[label="208.27.56.60;24pkt 24fpkt", shape=invhouse, color=bisque];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.27.56.60:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4629: (2.19298%)&lt;BR/&gt; 4154: (2.19298%)&lt;BR/&gt; 4099: (2.19298%)&lt;BR/&gt; 4029: (2.19298%)&gt;];
}
1168--2055[label="1;19pkt 19fpkt"];
1168--2258[label="0.0952381;2pkt 2fpkt"];
1168--2442[label="1;21pkt 21fpkt"];
1168--2989[label="1;21pkt 21fpkt"];
1168--3279[label="0.952381;20pkt 20fpkt"];
2055--2258[label="0.105263;2pkt 2fpkt"];
2055--2442[label="1;19pkt 19fpkt"];
2055--2989[label="1;19pkt 19fpkt"];
2055--3279[label="0.947368;18pkt 18fpkt"];
2442--2989[label="1;25pkt 25fpkt"];
2442--3279[label="1;24pkt 24fpkt"];
2989--3279[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="208.27.56.60"/>
    </slice>
    <from sec="1031547603" usec="0"/>
    <to sec="1031548447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826429,1.99503,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
52[label="141.133.63.145s;3pkt 3fpkt", shape=rectangle, color=red];
65[label="216.4.146.185s;1pkt 1fpkt", shape=rectangle, color=red];
869[label="136.65.156.0;s;34pkt 34fpkt", shape=diamond, color=yellow];
960[label="213.188.92.189;d;2pkt 2fpkt", shape=diamond, color=yellow];
961[label="86.57.73.112;d;2pkt 2fpkt", shape=diamond, color=yellow];
1075[label="86.85.106.146;d;2pkt 2fpkt", shape=diamond, color=yellow];
1197[label="2.246.167.29;d;2pkt 2fpkt", shape=diamond, color=yellow];
1414[label="73.93.44.143;d;2pkt 2fpkt", shape=diamond, color=yellow];
1793[label="136.65.156.0;s;13pkt 13fpkt", shape=hexagon, color=black];
1885[label="86.57.73.112;d;2pkt 2fpkt", shape=hexagon, color=black];
2058[label="73.93.44.143;d;2pkt 2fpkt", shape=hexagon, color=black];
2102[label="86.85.106.146;d;2pkt 2fpkt", shape=hexagon, color=black];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.156.0:6257, *:6257}[69.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (63.4328%)&lt;BR/&gt; 6699: (15.6716%)&lt;BR/&gt; 1436: (2.98507%)&lt;BR/&gt; 1376: (2.98507%)&lt;BR/&gt; 1375: (2.98507%)&gt;];
}
52--65[label="1;1pkt 1fpkt"];
52--869[label="0.333333;1pkt 1fpkt"];
52--1197[label="0.5;1pkt 1fpkt"];
52--1306[label="0.333333;1pkt 1fpkt"];
52--1540[label="0.666667;2pkt 2fpkt"];
52--2258[label="0.333333;1pkt 1fpkt"];
65--869[label="1;1pkt 1fpkt"];
65--1197[label="1;1pkt 1fpkt"];
869--960[label="1;2pkt 2fpkt"];
869--961[label="1;2pkt 2fpkt"];
869--1075[label="1;2pkt 2fpkt"];
869--1197[label="1;2pkt 2fpkt"];
869--1414[label="1;2pkt 2fpkt"];
869--1793[label="1;13pkt 13fpkt"];
869--1885[label="1;2pkt 2fpkt"];
869--2058[label="1;2pkt 2fpkt"];
869--2102[label="1;2pkt 2fpkt"];
960--1793[label="1;2pkt 2fpkt"];
961--1793[label="1;2pkt 2fpkt"];
961--1885[label="1;2pkt 2fpkt"];
1075--1793[label="1;2pkt 2fpkt"];
1075--2102[label="1;2pkt 2fpkt"];
1414--1793[label="1;2pkt 2fpkt"];
1414--2058[label="1;2pkt 2fpkt"];
1793--1885[label="1;2pkt 2fpkt"];
1793--2058[label="1;2pkt 2fpkt"];
1793--2102[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="136.65.156.0" src_port="6257"/>
    </slice>
    <from sec="1031547899" usec="0"/>
    <to sec="1031548644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16938,2.02742,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_273{
style=filled;
color=gray75;
1177[label="162.73.67.84;s;16pkt 16fpkt", shape=diamond, color=yellow];
1184[label="219.104.44.57;d;7pkt 7fpkt", shape=diamond, color=yellow];
1999[label="162.73.67.84;s;16pkt 16fpkt", shape=hexagon, color=black];
2060[label="219.104.44.57;d;7pkt 7fpkt", shape=hexagon, color=black];
2233[label="219.104.44.57;d;8pkt 8fpkt", shape=polygon, color=gold];
stat273[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.67.84:*, 219.104.40.112:80}[47.0588%]&lt;BR/&gt;{162.73.67.84:*, 219.104.44.57:80}[41.1765%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2077: (4.62963%)&lt;BR/&gt; 2076: (4.62963%)&lt;BR/&gt; 2075: (4.62963%)&lt;BR/&gt; 2073: (4.62963%)&gt;];
}
1177--1184[label="1;7pkt 7fpkt"];
1177--1999[label="1;16pkt 16fpkt"];
1177--2060[label="1;7pkt 7fpkt"];
1177--2233[label="0.875;7pkt 7fpkt"];
1184--1999[label="1;7pkt 7fpkt"];
1184--2060[label="1;7pkt 7fpkt"];
1184--2233[label="1;7pkt 7fpkt"];
1999--2060[label="1;7pkt 7fpkt"];
1999--2233[label="0.875;7pkt 7fpkt"];
2060--2233[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="219.104.40.112" dst_port="80" src_ip="162.73.67.84"/>
      <filter dst_ip="219.104.44.57" dst_port="80" src_ip="162.73.67.84"/>
    </slice>
    <from sec="1031547951" usec="0"/>
    <to sec="1031548250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
282[label="213.73.93.72;d;25pkt 25fpkt", shape=diamond, color=yellow];
2061[label="136.65.53.14;s;10pkt 10fpkt", shape=hexagon, color=black];
2522[label="141.133.32.86;91pkt 91fpkt", shape=pentagon, color=darkviolet];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.32.86:*, *:80}[71.0744%]&lt;BR/&gt;{*:*, 213.73.93.72:80}[20.6612%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.619%)&lt;BR/&gt; 1040: (1.5873%)&lt;BR/&gt; 443: (1.5873%)&lt;BR/&gt; 1062: (1.19048%)&lt;BR/&gt; 1052: (1.19048%)&gt;];
}
282--304[label="0.16;4pkt 4fpkt"];
282--570[label="0.04;1pkt 1fpkt"];
282--1040[label="0.16;4pkt 4fpkt"];
282--1086[label="0.1;1pkt 1fpkt"];
282--1873[label="0.16;4pkt 4fpkt"];
282--2021[label="1;22pkt 22fpkt"];
282--2061[label="0.1;1pkt 1fpkt"];
282--2248[label="0.16;4pkt 4fpkt"];
282--2254[label="0.28;7pkt 7fpkt"];
282--2258[label="0.04;1pkt 1fpkt"];
282--2263[label="0.16;4pkt 4fpkt"];
282--2270[label="0.16;4pkt 4fpkt"];
282--2522[label="0.16;4pkt 4fpkt"];
282--2616[label="0.04;1pkt 1fpkt"];
282--2788[label="0.04;1pkt 1fpkt"];
282--3028[label="0.16;4pkt 4fpkt"];
282--3367[label="0.04;1pkt 1fpkt"];
2061--2258[label="0.1;1pkt 1fpkt"];
2522--3028[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="141.133.32.86"/>
      <filter dst_ip="213.73.93.72" dst_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749014,1.94966,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
1315[label="142.191.204.131;d;78pkt 78fpkt", shape=diamond, color=yellow];
1316[label="141.133.239.233;s;78pkt 78fpkt", shape=diamond, color=yellow];
2062[label="142.191.204.131;d;78pkt 78fpkt", shape=hexagon, color=black];
2868[label="141.133.239.233;77pkt 77fpkt", shape=pentagon, color=darkviolet];
3214[label="141.133.239.233;77pkt 77fpkt", shape=invtriangle, color=brown];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.239.233:*, 142.191.204.131:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1583: (0.64433%)&lt;BR/&gt; 1582: (0.64433%)&lt;BR/&gt; 1581: (0.64433%)&lt;BR/&gt; 1580: (0.64433%)&gt;];
}
1315--1316[label="1;78pkt 78fpkt"];
1315--2062[label="1;78pkt 78fpkt"];
1315--2868[label="1;77pkt 77fpkt"];
1315--3214[label="1;77pkt 77fpkt"];
1316--2062[label="1;78pkt 78fpkt"];
1316--2868[label="1;77pkt 77fpkt"];
1316--3214[label="1;77pkt 77fpkt"];
2062--2868[label="1;77pkt 77fpkt"];
2062--3214[label="1;77pkt 77fpkt"];
2868--3214[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="142.191.204.131" dst_port="80" src_ip="141.133.239.233"/>
    </slice>
    <from sec="1031548094" usec="0"/>
    <to sec="1031548255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16938,2.02742,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
662[label="141.133.73.34;s;3pkt 3fpkt", shape=diamond, color=yellow];
1207[label="220.18.130.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
2008[label="141.133.73.34;s;2pkt 2fpkt", shape=hexagon, color=black];
2064[label="220.18.130.104;d;1pkt 1fpkt", shape=hexagon, color=black];
2234[label="220.18.130.104;d;1pkt 1fpkt", shape=polygon, color=gold];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.73.34:1026, 75.97.97.37:1863}[33.3333%]&lt;BR/&gt;{141.133.73.34:1247, 220.18.130.104:80}[33.3333%]&lt;BR/&gt;{141.133.73.34:1248, 142.231.97.118:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.75%)&lt;BR/&gt; 1247: (31.25%)&lt;BR/&gt; 1248: (12.5%)&lt;BR/&gt; 1863: (6.25%)&lt;BR/&gt; 1026: (6.25%)&gt;];
}
662--1207[label="1;1pkt 1fpkt"];
662--2008[label="1;2pkt 2fpkt"];
662--2064[label="1;1pkt 1fpkt"];
662--2234[label="1;1pkt 1fpkt"];
662--2258[label="0.333333;1pkt 1fpkt"];
1207--2008[label="1;1pkt 1fpkt"];
1207--2064[label="1;1pkt 1fpkt"];
1207--2234[label="1;1pkt 1fpkt"];
2008--2064[label="1;1pkt 1fpkt"];
2008--2234[label="1;1pkt 1fpkt"];
2008--2258[label="0.5;1pkt 1fpkt"];
2064--2234[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.231.97.118" dst_port="80" src_ip="141.133.73.34" src_port="1248"/>
      <filter dst_ip="220.18.130.104" dst_port="80" src_ip="141.133.73.34" src_port="1247"/>
      <filter dst_ip="75.97.97.37" dst_port="1863" src_ip="141.133.73.34" src_port="1026"/>
    </slice>
    <from sec="1031548180" usec="0"/>
    <to sec="1031548352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749014,1.94966,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
508[label="209.170.122.138;s;420pkt 420fpkt", shape=diamond, color=yellow];
651[label="213.198.226.132;d;98pkt 98fpkt", shape=diamond, color=yellow];
953[label="151.244.85.102;s;30pkt 30fpkt", shape=diamond, color=yellow];
1220[label="215.6.210.184;d;28pkt 28fpkt", shape=diamond, color=yellow];
1327[label="141.133.38.192;s;76pkt 76fpkt", shape=diamond, color=yellow];
1629[label="141.133.201.86;s;45pkt 45fpkt", shape=diamond, color=yellow];
1918[label="213.198.226.132;d;74pkt 74fpkt", shape=hexagon, color=black];
2065[label="141.133.38.192;s;70pkt 70fpkt", shape=hexagon, color=black];
2407[label="136.65.157.42;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2556[label="151.244.85.102;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2975[label="136.65.157.42;24pkt 24fpkt", shape=invtriangle, color=brown];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.170.122.138:*, *:80}[58.4203%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.7301%)&lt;BR/&gt; 443: (7.7802%)&lt;BR/&gt; 1863: (0.326442%)&lt;BR/&gt; 30977: (0.217628%)&lt;BR/&gt; 30968: (0.217628%)&gt;];
}
508--521[label="0.0117647;1pkt 1fpkt"];
508--651[label="0.22449;22pkt 22fpkt"];
508--814[label="0.347107;42pkt 42fpkt"];
508--882[label="0.00746269;1pkt 1fpkt"];
508--936[label="0.0144928;1pkt 1fpkt"];
508--1029[label="0.00862069;1pkt 1fpkt"];
508--1096[label="0.00890208;3pkt 3fpkt"];
508--1443[label="0.204545;45pkt 45fpkt"];
508--1445[label="0.00884956;1pkt 1fpkt"];
508--1493[label="0.016129;1pkt 1fpkt"];
508--1592[label="0.0153846;1pkt 1fpkt"];
508--1617[label="0.285714;12pkt 12fpkt"];
508--1620[label="0.097561;4pkt 4fpkt"];
508--1918[label="0.27027;20pkt 20fpkt"];
508--2018[label="0.00869565;1pkt 1fpkt"];
508--2067[label="0.00884956;1pkt 1fpkt"];
508--2128[label="0.00890208;3pkt 3fpkt"];
508--2149[label="0.00862069;1pkt 1fpkt"];
508--2241[label="0.00890208;3pkt 3fpkt"];
508--2248[label="0.0214286;9pkt 9fpkt"];
508--2254[label="0.0547619;23pkt 23fpkt"];
508--2258[label="0.0309524;13pkt 13fpkt"];
508--2263[label="0.0214286;9pkt 9fpkt"];
508--2270[label="0.0214286;9pkt 9fpkt"];
651--953[label="0.466667;14pkt 14fpkt"];
651--1066[label="0.0612245;6pkt 6fpkt"];
651--1327[label="0.0526316;4pkt 4fpkt"];
651--1629[label="0.155556;7pkt 7fpkt"];
651--1918[label="1;74pkt 74fpkt"];
651--2065[label="0.0571429;4pkt 4fpkt"];
651--2248[label="0.0204082;2pkt 2fpkt"];
651--2254[label="0.0306122;3pkt 3fpkt"];
651--2258[label="0.0612245;6pkt 6fpkt"];
651--2263[label="0.0204082;2pkt 2fpkt"];
651--2270[label="0.0204082;2pkt 2fpkt"];
651--2407[label="0.0833333;2pkt 2fpkt"];
651--2556[label="0.466667;14pkt 14fpkt"];
651--2616[label="0.193878;19pkt 19fpkt"];
651--2975[label="0.0833333;2pkt 2fpkt"];
953--1220[label="0.0357143;1pkt 1fpkt"];
953--1918[label="0.466667;14pkt 14fpkt"];
953--2556[label="1;30pkt 30fpkt"];
1220--1664[label="0.142857;4pkt 4fpkt"];
1220--2248[label="0.0714286;2pkt 2fpkt"];
1220--2254[label="0.107143;3pkt 3fpkt"];
1220--2258[label="0.107143;3pkt 3fpkt"];
1220--2263[label="0.0714286;2pkt 2fpkt"];
1220--2270[label="0.0714286;2pkt 2fpkt"];
1220--2556[label="0.0357143;1pkt 1fpkt"];
1327--1359[label="0.0526316;4pkt 4fpkt"];
1327--1605[label="0.0344828;2pkt 2fpkt"];
1327--1617[label="0.047619;2pkt 2fpkt"];
1327--1918[label="0.0540541;4pkt 4fpkt"];
1327--2065[label="1;70pkt 70fpkt"];
1327--2258[label="0.184211;14pkt 14fpkt"];
1629--1918[label="0.155556;7pkt 7fpkt"];
1629--2258[label="0.288889;13pkt 13fpkt"];
1918--2065[label="0.0571429;4pkt 4fpkt"];
1918--2248[label="0.027027;2pkt 2fpkt"];
1918--2254[label="0.0405405;3pkt 3fpkt"];
1918--2258[label="0.0810811;6pkt 6fpkt"];
1918--2263[label="0.027027;2pkt 2fpkt"];
1918--2270[label="0.027027;2pkt 2fpkt"];
1918--2556[label="0.466667;14pkt 14fpkt"];
1918--2616[label="0.162162;12pkt 12fpkt"];
2065--2258[label="0.2;14pkt 14fpkt"];
2407--2975[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="209.170.122.138"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.826429,1.99503,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
10[label="136.134.95.31s;1pkt 1fpkt", shape=rectangle, color=red];
1444[label="136.134.95.31;s;45pkt 45fpkt", shape=diamond, color=yellow];
1469[label="207.222.83.31;d;4pkt 4fpkt", shape=diamond, color=yellow];
2066[label="136.134.95.31;s;45pkt 45fpkt", shape=hexagon, color=black];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.134.95.31:*, 75.111.218.30:80}[39.1304%]&lt;BR/&gt;{136.134.95.31:*, 75.111.212.37:80}[36.9565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4211%)&lt;BR/&gt; 33813: (2.10526%)&lt;BR/&gt; 33819: (1.57895%)&lt;BR/&gt; 33810: (1.57895%)&lt;BR/&gt; 33804: (1.05263%)&gt;];
}
10--1444[label="1;1pkt 1fpkt"];
10--1469[label="1;1pkt 1fpkt"];
10--2066[label="1;1pkt 1fpkt"];
10--2258[label="1;1pkt 1fpkt"];
1444--1469[label="0.75;3pkt 3fpkt"];
1444--1592[label="0.4;18pkt 18fpkt"];
1444--2066[label="1;45pkt 45fpkt"];
1444--2258[label="0.0888889;4pkt 4fpkt"];
1469--2066[label="0.75;3pkt 3fpkt"];
1469--2258[label="0.75;3pkt 3fpkt"];
2066--2258[label="0.0888889;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="75.111.212.37" dst_port="80" src_ip="136.134.95.31"/>
      <filter dst_ip="75.111.218.30" dst_port="80" src_ip="136.134.95.31"/>
    </slice>
    <from sec="1031548218" usec="0"/>
    <to sec="1031548588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06546,1.97208,999,1 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
62[label="219.3.97.173s;1pkt 1fpkt", shape=rectangle, color=red];
215[label="219.3.97.173;s;37pkt 37fpkt", shape=diamond, color=yellow];
216[label="212.46.146.251;d;1pkt 1fpkt", shape=diamond, color=yellow];
2076[label="219.3.97.173;s;33pkt 33fpkt", shape=hexagon, color=black];
3149[label="219.3.97.173;36pkt 36fpkt", shape=invtriangle, color=brown];
3354[label="219.3.97.173;36pkt 36fpkt", shape=invhouse, color=bisque];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.3.97.173:6667, *:*}[35.1351%]&lt;BR/&gt;{219.3.97.173:*, 209.235.202.126:*}[35.1351%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (16.6667%)&lt;BR/&gt; 113: (7.63889%)&lt;BR/&gt; 10080: (4.16667%)&lt;BR/&gt; 8080: (4.16667%)&lt;BR/&gt; 3128: (4.16667%)&gt;];
}
62--215[label="1;1pkt 1fpkt"];
62--216[label="1;1pkt 1fpkt"];
62--2076[label="1;1pkt 1fpkt"];
62--3149[label="1;1pkt 1fpkt"];
62--3354[label="1;1pkt 1fpkt"];
215--216[label="1;1pkt 1fpkt"];
215--2076[label="1;33pkt 33fpkt"];
215--3149[label="1;36pkt 36fpkt"];
215--3354[label="1;36pkt 36fpkt"];
216--2076[label="1;1pkt 1fpkt"];
216--3149[label="1;1pkt 1fpkt"];
216--3354[label="1;1pkt 1fpkt"];
2076--3149[label="0.969697;32pkt 32fpkt"];
2076--3354[label="0.969697;32pkt 32fpkt"];
3149--3354[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="209.235.202.126" src_ip="219.3.97.173"/>
      <filter src_ip="219.3.97.173" src_port="6667"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2859,1.9997,503,1 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
33[label="221.35.123.98s;2pkt 2fpkt", shape=rectangle, color=red];
107[label="141.133.63.145d;1pkt 1fpkt", shape=rectangle, color=red];
420[label="75.97.103.231;s;42pkt 42fpkt", shape=diamond, color=yellow];
1292[label="75.97.103.8;s;165pkt 165fpkt", shape=diamond, color=yellow];
1305[label="141.133.63.145;d;176pkt 176fpkt", shape=diamond, color=yellow];
1343[label="221.35.123.98;s;9pkt 9fpkt", shape=diamond, color=yellow];
1390[label="193.80.34.24;s;135pkt 135fpkt", shape=diamond, color=yellow];
1535[label="221.35.123.31;s;31pkt 31fpkt", shape=diamond, color=yellow];
2053[label="75.97.103.8;s;153pkt 153fpkt", shape=hexagon, color=black];
2104[label="141.133.63.145;d;176pkt 176fpkt", shape=hexagon, color=black];
2245[label="141.133.63.145;d;176pkt 176fpkt", shape=polygon, color=gold];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.97.103.8:80, *:*}[42.4658%]&lt;BR/&gt;{*:80, 141.133.63.145:*}[39.9543%]&lt;BR/&gt;{193.80.34.24:80, *:*}[30.8219%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4371%)&lt;BR/&gt; 443: (0.422139%)&lt;BR/&gt; 1584: (0.32833%)&lt;BR/&gt; 1555: (0.32833%)&lt;BR/&gt; 1452: (0.32833%)&gt;];
}
33--107[label="1;1pkt 1fpkt"];
33--1305[label="1;2pkt 2fpkt"];
33--1343[label="1;2pkt 2fpkt"];
33--2104[label="1;2pkt 2fpkt"];
33--2245[label="1;2pkt 2fpkt"];
33--2257[label="0.5;1pkt 1fpkt"];
33--2267[label="0.5;1pkt 1fpkt"];
33--2274[label="0.5;1pkt 1fpkt"];
107--1305[label="1;1pkt 1fpkt"];
107--1343[label="1;1pkt 1fpkt"];
107--2104[label="1;1pkt 1fpkt"];
107--2245[label="1;1pkt 1fpkt"];
420--567[label="0.214286;9pkt 9fpkt"];
420--816[label="0.142857;6pkt 6fpkt"];
420--1305[label="0.52381;22pkt 22fpkt"];
420--2104[label="0.52381;22pkt 22fpkt"];
420--2245[label="0.52381;22pkt 22fpkt"];
420--2255[label="0.119048;5pkt 5fpkt"];
420--2257[label="0.0714286;3pkt 3fpkt"];
420--2267[label="0.0714286;3pkt 3fpkt"];
420--2274[label="0.0714286;3pkt 3fpkt"];
1292--1305[label="0.236364;39pkt 39fpkt"];
1292--1471[label="0.0877193;5pkt 5fpkt"];
1292--1553[label="0.1;9pkt 9fpkt"];
1292--2053[label="1;153pkt 153fpkt"];
1292--2104[label="0.236364;39pkt 39fpkt"];
1292--2114[label="0.0877193;5pkt 5fpkt"];
1292--2245[label="0.236364;39pkt 39fpkt"];
1292--2255[label="0.139394;23pkt 23fpkt"];
1292--2257[label="0.0848485;14pkt 14fpkt"];
1292--2267[label="0.0848485;14pkt 14fpkt"];
1292--2274[label="0.0848485;14pkt 14fpkt"];
1305--1343[label="1;9pkt 9fpkt"];
1305--1390[label="0.140741;19pkt 19fpkt"];
1305--1402[label="0.0652174;3pkt 3fpkt"];
1305--1535[label="1;31pkt 31fpkt"];
1305--1748[label="0.0127389;2pkt 2fpkt"];
1305--2047[label="0.118182;13pkt 13fpkt"];
1305--2053[label="0.235294;36pkt 36fpkt"];
1305--2104[label="1;176pkt 176fpkt"];
1305--2245[label="1;176pkt 176fpkt"];
1305--2255[label="0.0113636;2pkt 2fpkt"];
1305--2257[label="0.0568182;10pkt 10fpkt"];
1305--2267[label="0.0568182;10pkt 10fpkt"];
1305--2274[label="0.0568182;10pkt 10fpkt"];
1305--2420[label="0.0555556;2pkt 2fpkt"];
1343--2104[label="1;9pkt 9fpkt"];
1343--2245[label="1;9pkt 9fpkt"];
1343--2257[label="0.222222;2pkt 2fpkt"];
1343--2267[label="0.222222;2pkt 2fpkt"];
1343--2274[label="0.222222;2pkt 2fpkt"];
1390--1479[label="0.0869565;4pkt 4fpkt"];
1390--1597[label="0.0148148;2pkt 2fpkt"];
1390--1662[label="0.0148148;2pkt 2fpkt"];
1390--1692[label="0.017094;2pkt 2fpkt"];
1390--1726[label="0.0296296;4pkt 4fpkt"];
1390--1755[label="0.0148148;2pkt 2fpkt"];
1390--1807[label="0.0222222;3pkt 3fpkt"];
1390--1943[label="0.0444444;6pkt 6fpkt"];
1390--2047[label="1;110pkt 110fpkt"];
1390--2104[label="0.140741;19pkt 19fpkt"];
1390--2156[label="0.0148148;2pkt 2fpkt"];
1390--2199[label="0.0148148;2pkt 2fpkt"];
1390--2211[label="0.0148148;2pkt 2fpkt"];
1390--2224[label="0.0444444;6pkt 6fpkt"];
1390--2245[label="0.140741;19pkt 19fpkt"];
1390--2247[label="0.0296296;4pkt 4fpkt"];
1390--2255[label="0.037037;5pkt 5fpkt"];
1390--2257[label="0.0296296;4pkt 4fpkt"];
1390--2267[label="0.0296296;4pkt 4fpkt"];
1390--2274[label="0.0296296;4pkt 4fpkt"];
1535--2104[label="1;31pkt 31fpkt"];
1535--2245[label="1;31pkt 31fpkt"];
1535--2257[label="0.0967742;3pkt 3fpkt"];
1535--2267[label="0.0967742;3pkt 3fpkt"];
1535--2274[label="0.0967742;3pkt 3fpkt"];
2053--2104[label="0.235294;36pkt 36fpkt"];
2053--2114[label="0.0877193;5pkt 5fpkt"];
2053--2245[label="0.235294;36pkt 36fpkt"];
2053--2255[label="0.150327;23pkt 23fpkt"];
2053--2257[label="0.0915033;14pkt 14fpkt"];
2053--2267[label="0.0915033;14pkt 14fpkt"];
2053--2274[label="0.0915033;14pkt 14fpkt"];
2104--2245[label="1;176pkt 176fpkt"];
2104--2255[label="0.0113636;2pkt 2fpkt"];
2104--2257[label="0.0568182;10pkt 10fpkt"];
2104--2267[label="0.0568182;10pkt 10fpkt"];
2104--2274[label="0.0568182;10pkt 10fpkt"];
2104--2420[label="0.0555556;2pkt 2fpkt"];
2245--2255[label="0.0113636;2pkt 2fpkt"];
2245--2257[label="0.0568182;10pkt 10fpkt"];
2245--2267[label="0.0568182;10pkt 10fpkt"];
2245--2274[label="0.0568182;10pkt 10fpkt"];
2245--2420[label="0.0555556;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="75.97.103.8" src_port="80"/>
      <filter src_ip="193.80.34.24" src_port="80"/>
      <filter dst_ip="141.133.63.145" src_port="80"/>
    </slice>
    <from sec="1031547609" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749014,1.94966,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
494[label="193.180.129.27;d;68pkt 68fpkt", shape=diamond, color=yellow];
542[label="141.133.54.29;s;64pkt 64fpkt", shape=diamond, color=yellow];
627[label="136.134.4.242;s;895pkt 895fpkt", shape=diamond, color=yellow];
1093[label="193.180.158.41;d;26pkt 26fpkt", shape=diamond, color=yellow];
1335[label="47.201.75.209;d;3pkt 3fpkt", shape=diamond, color=yellow];
1337[label="209.88.192.186;s;6pkt 6fpkt", shape=diamond, color=yellow];
1345[label="221.9.250.147;d;4pkt 4fpkt", shape=diamond, color=yellow];
1511[label="213.73.37.76;d;59pkt 59fpkt", shape=diamond, color=yellow];
1812[label="136.134.4.242;s;453pkt 453fpkt", shape=hexagon, color=black];
2010[label="209.88.192.186;s;6pkt 6fpkt", shape=hexagon, color=black];
2107[label="209.85.227.1;s;187pkt 187fpkt", shape=hexagon, color=black];
2801[label="141.133.239.202;59pkt 59fpkt", shape=pentagon, color=darkviolet];
3182[label="141.133.239.202;59pkt 59fpkt", shape=invtriangle, color=brown];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.134.4.242:0, *:0}[65.8464%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (80.5717%)&lt;BR/&gt; 80: (8.65537%)&lt;BR/&gt; 53: (0.688195%)&lt;BR/&gt; 21: (0.238221%)&lt;BR/&gt; 1519: (0.105876%)&gt;];
}
494--523[label="0.176471;12pkt 12fpkt"];
494--542[label="0.140625;9pkt 9fpkt"];
494--627[label="0.0147059;1pkt 1fpkt"];
494--827[label="0.283019;15pkt 15fpkt"];
494--1427[label="0.0147059;1pkt 1fpkt"];
494--1568[label="0.0147059;1pkt 1fpkt"];
494--1812[label="0.0147059;1pkt 1fpkt"];
494--1852[label="0.235294;16pkt 16fpkt"];
494--1973[label="1;53pkt 53fpkt"];
494--2107[label="0.0147059;1pkt 1fpkt"];
494--2248[label="0.0735294;5pkt 5fpkt"];
494--2254[label="0.0441176;3pkt 3fpkt"];
494--2258[label="0.0735294;5pkt 5fpkt"];
494--2263[label="0.0735294;5pkt 5fpkt"];
494--2270[label="0.0735294;5pkt 5fpkt"];
494--2801[label="0.152542;9pkt 9fpkt"];
494--3182[label="0.152542;9pkt 9fpkt"];
542--876[label="0.109375;7pkt 7fpkt"];
542--1716[label="0.0526316;1pkt 1fpkt"];
542--1973[label="0.169811;9pkt 9fpkt"];
542--2254[label="0.5;32pkt 32fpkt"];
627--653[label="0.00699301;1pkt 1fpkt"];
627--730[label="0.0133333;1pkt 1fpkt"];
627--748[label="0.0263158;1pkt 1fpkt"];
627--876[label="0.00465116;1pkt 1fpkt"];
627--943[label="0.0333333;1pkt 1fpkt"];
627--1049[label="0.00564972;1pkt 1fpkt"];
627--1061[label="0.0416667;1pkt 1fpkt"];
627--1093[label="0.0384615;1pkt 1fpkt"];
627--1123[label="0.02;1pkt 1fpkt"];
627--1127[label="0.0227273;1pkt 1fpkt"];
627--1150[label="0.04;1pkt 1fpkt"];
627--1267[label="0.0128205;1pkt 1fpkt"];
627--1301[label="0.00990099;1pkt 1fpkt"];
627--1335[label="0.333333;1pkt 1fpkt"];
627--1359[label="0.00840336;1pkt 1fpkt"];
627--1373[label="0.00680272;1pkt 1fpkt"];
627--1469[label="0.25;1pkt 1fpkt"];
627--1511[label="0.0169492;1pkt 1fpkt"];
627--1605[label="0.0172414;1pkt 1fpkt"];
627--1812[label="1;453pkt 453fpkt"];
627--1891[label="0.0384615;1pkt 1fpkt"];
627--1973[label="0.0188679;1pkt 1fpkt"];
627--1986[label="0.0172414;1pkt 1fpkt"];
627--2097[label="0.04;1pkt 1fpkt"];
627--2135[label="0.0133333;1pkt 1fpkt"];
627--2237[label="0.04;1pkt 1fpkt"];
627--2253[label="0.00111732;1pkt 1fpkt"];
627--2256[label="0.00111732;1pkt 1fpkt"];
627--2266[label="0.00111732;1pkt 1fpkt"];
627--2273[label="0.00111732;1pkt 1fpkt"];
1093--1201[label="0.192308;5pkt 5fpkt"];
1093--1427[label="0.0384615;1pkt 1fpkt"];
1093--1812[label="0.0384615;1pkt 1fpkt"];
1093--1891[label="1;26pkt 26fpkt"];
1093--2107[label="0.0384615;1pkt 1fpkt"];
1093--2248[label="0.269231;7pkt 7fpkt"];
1093--2254[label="0.0769231;2pkt 2fpkt"];
1093--2258[label="0.230769;6pkt 6fpkt"];
1093--2263[label="0.269231;7pkt 7fpkt"];
1093--2270[label="0.269231;7pkt 7fpkt"];
1093--2616[label="0.153846;4pkt 4fpkt"];
1093--2652[label="0.192308;5pkt 5fpkt"];
1335--1337[label="0.666667;2pkt 2fpkt"];
1335--1812[label="0.333333;1pkt 1fpkt"];
1335--2010[label="0.666667;2pkt 2fpkt"];
1337--1345[label="1;4pkt 4fpkt"];
1337--2010[label="1;6pkt 6fpkt"];
1345--2010[label="1;4pkt 4fpkt"];
1511--1588[label="0.118644;7pkt 7fpkt"];
1511--1663[label="0.0508475;3pkt 3fpkt"];
1511--1812[label="0.0169492;1pkt 1fpkt"];
1511--1892[label="0.0169492;1pkt 1fpkt"];
1511--1922[label="0.0545455;3pkt 3fpkt"];
1511--2187[label="0.0508475;3pkt 3fpkt"];
1511--2248[label="0.135593;8pkt 8fpkt"];
1511--2254[label="0.0508475;3pkt 3fpkt"];
1511--2258[label="0.220339;13pkt 13fpkt"];
1511--2263[label="0.135593;8pkt 8fpkt"];
1511--2270[label="0.135593;8pkt 8fpkt"];
1511--2457[label="0.0169492;1pkt 1fpkt"];
1511--2463[label="0.0508475;3pkt 3fpkt"];
1511--2616[label="0.0169492;1pkt 1fpkt"];
1511--2761[label="0.0508475;3pkt 3fpkt"];
1511--2904[label="0.118644;7pkt 7fpkt"];
1511--2992[label="0.0169492;1pkt 1fpkt"];
1511--2996[label="0.0508475;3pkt 3fpkt"];
1511--3166[label="0.0338983;2pkt 2fpkt"];
1511--3235[label="0.118644;7pkt 7fpkt"];
1812--1891[label="0.0384615;1pkt 1fpkt"];
1812--1973[label="0.0188679;1pkt 1fpkt"];
1812--1986[label="0.0172414;1pkt 1fpkt"];
1812--2135[label="0.0133333;1pkt 1fpkt"];
1812--2253[label="0.00220751;1pkt 1fpkt"];
2107--2111[label="0.2;1pkt 1fpkt"];
2107--2128[label="0.00534759;1pkt 1fpkt"];
2107--2135[label="0.0133333;1pkt 1fpkt"];
2107--2157[label="0.0232558;1pkt 1fpkt"];
2107--2173[label="0.2;1pkt 1fpkt"];
2107--2220[label="0.00534759;1pkt 1fpkt"];
2107--2241[label="0.00534759;1pkt 1fpkt"];
2801--3182[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter src_ip="136.134.4.242"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07263,1.92615,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
89[label="209.85.201.64d;33pkt 33fpkt", shape=rectangle, color=red];
93[label="208.78.245.82d;5pkt 5fpkt", shape=rectangle, color=red];
218[label="209.85.201.64;d;1291pkt 1291fpkt", shape=diamond, color=yellow];
484[label="44.88.72.242;s;1pkt 1fpkt", shape=diamond, color=yellow];
491[label="75.97.112.46;s;76pkt 76fpkt", shape=diamond, color=yellow];
536[label="138.28.90.8;s;5pkt 5fpkt", shape=diamond, color=yellow];
552[label="215.6.144.70;s;115pkt 115fpkt", shape=diamond, color=yellow];
559[label="141.133.239.200;d;70pkt 70fpkt", shape=diamond, color=yellow];
819[label="75.97.118.47;s;22pkt 22fpkt", shape=diamond, color=yellow];
847[label="209.90.134.148;s;20pkt 20fpkt", shape=diamond, color=yellow];
969[label="162.73.213.52;d;50pkt 50fpkt", shape=diamond, color=yellow];
1037[label="75.97.112.158;s;218pkt 218fpkt", shape=diamond, color=yellow];
1174[label="141.133.239.203;d;85pkt 85fpkt", shape=diamond, color=yellow];
1266[label="213.73.3.228;s;40pkt 40fpkt", shape=diamond, color=yellow];
1471[label="208.78.245.82;d;57pkt 57fpkt", shape=diamond, color=yellow];
1512[label="213.73.37.76;s;53pkt 53fpkt", shape=diamond, color=yellow];
1583[label="213.73.2.74;s;92pkt 92fpkt", shape=diamond, color=yellow];
1830[label="209.90.134.148;s;20pkt 20fpkt", shape=hexagon, color=black];
1968[label="75.97.112.46;s;76pkt 76fpkt", shape=hexagon, color=black];
2114[label="208.78.245.82;d;57pkt 57fpkt", shape=hexagon, color=black];
2279[label="75.97.115.1;57pkt 57fpkt", shape=pentagon, color=darkviolet];
2414[label="75.97.112.46;78pkt 78fpkt", shape=pentagon, color=darkviolet];
2531[label="75.97.97.91;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2690[label="75.97.112.158;211pkt 211fpkt", shape=pentagon, color=darkviolet];
2910[label="75.97.115.1;57pkt 57fpkt", shape=invtriangle, color=brown];
2999[label="215.6.144.70;125pkt 125fpkt", shape=invtriangle, color=brown];
3348[label="75.97.115.168;185pkt 185fpkt", shape=invhouse, color=bisque];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 209.85.201.64:*}[53.3676%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.3557%)&lt;BR/&gt; 53: (1.38665%)&lt;BR/&gt; 1863: (0.435343%)&lt;BR/&gt; 443: (0.20961%)&lt;BR/&gt; 0: (0.193486%)&gt;];
}
89--218[label="1;33pkt 33fpkt"];
89--552[label="0.848485;28pkt 28fpkt"];
89--2257[label="0.0909091;3pkt 3fpkt"];
89--2267[label="0.0909091;3pkt 3fpkt"];
89--2274[label="0.0909091;3pkt 3fpkt"];
89--2468[label="1;33pkt 33fpkt"];
89--2999[label="1;33pkt 33fpkt"];
93--491[label="1;5pkt 5fpkt"];
93--1471[label="1;5pkt 5fpkt"];
93--1968[label="1;5pkt 5fpkt"];
93--2114[label="1;5pkt 5fpkt"];
93--2414[label="1;5pkt 5fpkt"];
218--315[label="0.0722135;46pkt 46fpkt"];
218--331[label="0.0425532;2pkt 2fpkt"];
218--345[label="0.02;1pkt 1fpkt"];
218--475[label="0.157895;3pkt 3fpkt"];
218--484[label="1;1pkt 1fpkt"];
218--491[label="0.0526316;4pkt 4fpkt"];
218--536[label="0.4;2pkt 2fpkt"];
218--537[label="0.2;5pkt 5fpkt"];
218--552[label="0.634783;73pkt 73fpkt"];
218--589[label="0.00378788;1pkt 1fpkt"];
218--613[label="0.153846;10pkt 10fpkt"];
218--621[label="0.017316;8pkt 8fpkt"];
218--746[label="0.0185185;1pkt 1fpkt"];
218--769[label="0.0196078;1pkt 1fpkt"];
218--819[label="0.363636;8pkt 8fpkt"];
218--847[label="0.45;9pkt 9fpkt"];
218--902[label="0.274336;31pkt 31fpkt"];
218--924[label="0.0131579;1pkt 1fpkt"];
218--1037[label="0.197248;43pkt 43fpkt"];
218--1043[label="0.0253165;2pkt 2fpkt"];
218--1126[label="0.119048;10pkt 10fpkt"];
218--1137[label="0.0238095;1pkt 1fpkt"];
218--1218[label="0.0240964;2pkt 2fpkt"];
218--1263[label="0.0188679;2pkt 2fpkt"];
218--1360[label="0.0128205;1pkt 1fpkt"];
218--1382[label="0.00877193;1pkt 1fpkt"];
218--1390[label="0.00740741;1pkt 1fpkt"];
218--1402[label="0.0434783;2pkt 2fpkt"];
218--1488[label="0.0125;2pkt 2fpkt"];
218--1512[label="0.0188679;1pkt 1fpkt"];
218--1583[label="0.0217391;2pkt 2fpkt"];
218--1593[label="0.441296;109pkt 109fpkt"];
218--1693[label="0.0333333;1pkt 1fpkt"];
218--1710[label="0.2;3pkt 3fpkt"];
218--1734[label="0.027027;1pkt 1fpkt"];
218--1767[label="0.0058651;2pkt 2fpkt"];
218--1810[label="0.0566038;3pkt 3fpkt"];
218--1813[label="0.0232558;1pkt 1fpkt"];
218--1830[label="0.45;9pkt 9fpkt"];
218--1878[label="0.686275;35pkt 35fpkt"];
218--1968[label="0.0526316;4pkt 4fpkt"];
218--1984[label="0.0238095;1pkt 1fpkt"];
218--2047[label="0.00909091;1pkt 1fpkt"];
218--2091[label="0.00877193;1pkt 1fpkt"];
218--2247[label="0.0487994;63pkt 63fpkt"];
218--2255[label="0.0402789;52pkt 52fpkt"];
218--2257[label="0.0302091;39pkt 39fpkt"];
218--2266[label="0.00309837;4pkt 4fpkt"];
218--2267[label="0.0302091;39pkt 39fpkt"];
218--2273[label="0.00309837;4pkt 4fpkt"];
218--2274[label="0.0302091;39pkt 39fpkt"];
218--2279[label="0.0526316;3pkt 3fpkt"];
218--2299[label="0.0666667;4pkt 4fpkt"];
218--2302[label="0.134328;9pkt 9fpkt"];
218--2315[label="0.025641;1pkt 1fpkt"];
218--2353[label="0.0769231;1pkt 1fpkt"];
218--2370[label="1;1pkt 1fpkt"];
218--2414[label="0.0384615;3pkt 3fpkt"];
218--2438[label="0.0714286;1pkt 1fpkt"];
218--2440[label="0.235294;4pkt 4fpkt"];
218--2468[label="0.620968;77pkt 77fpkt"];
218--2492[label="0.418605;108pkt 108fpkt"];
218--2497[label="0.0789474;3pkt 3fpkt"];
218--2531[label="0.5;1pkt 1fpkt"];
218--2541[label="0.0131579;1pkt 1fpkt"];
218--2605[label="0.0666667;2pkt 2fpkt"];
218--2610[label="0.0625;2pkt 2fpkt"];
218--2637[label="0.117647;10pkt 10fpkt"];
218--2656[label="0.125;2pkt 2fpkt"];
218--2690[label="0.203791;43pkt 43fpkt"];
218--2714[label="0.194737;37pkt 37fpkt"];
218--2726[label="0.0377358;2pkt 2fpkt"];
218--2746[label="0.0222222;1pkt 1fpkt"];
218--2910[label="0.0526316;3pkt 3fpkt"];
218--2917[label="0.0677966;4pkt 4fpkt"];
218--2918[label="0.136364;9pkt 9fpkt"];
218--2988[label="0.25;4pkt 4fpkt"];
218--2999[label="0.624;78pkt 78fpkt"];
218--3039[label="0.012987;1pkt 1fpkt"];
218--3076[label="0.0625;2pkt 2fpkt"];
218--3102[label="0.125;2pkt 2fpkt"];
218--3144[label="0.0377358;2pkt 2fpkt"];
218--3241[label="0.0677966;4pkt 4fpkt"];
218--3348[label="0.167568;31pkt 31fpkt"];
218--3350[label="0.037037;2pkt 2fpkt"];
491--559[label="0.171429;12pkt 12fpkt"];
491--1174[label="0.118421;9pkt 9fpkt"];
491--1471[label="0.105263;6pkt 6fpkt"];
491--1943[label="0.157895;12pkt 12fpkt"];
491--1968[label="1;76pkt 76fpkt"];
491--2114[label="0.105263;6pkt 6fpkt"];
491--2224[label="0.157895;12pkt 12fpkt"];
491--2247[label="0.0526316;4pkt 4fpkt"];
491--2414[label="0.986842;75pkt 75fpkt"];
552--1687[label="0.00869565;1pkt 1fpkt"];
552--1878[label="1;51pkt 51fpkt"];
552--2255[label="0.0347826;4pkt 4fpkt"];
552--2257[label="0.0608696;7pkt 7fpkt"];
552--2267[label="0.0608696;7pkt 7fpkt"];
552--2274[label="0.0608696;7pkt 7fpkt"];
552--2468[label="0.991304;114pkt 114fpkt"];
552--2999[label="1;115pkt 115fpkt"];
559--1037[label="0.442857;31pkt 31fpkt"];
559--1292[label="0.0714286;5pkt 5fpkt"];
559--1352[label="0.128571;9pkt 9fpkt"];
559--1402[label="0.0217391;1pkt 1fpkt"];
559--1968[label="0.171429;12pkt 12fpkt"];
559--2013[label="0.128571;9pkt 9fpkt"];
559--2053[label="0.0714286;5pkt 5fpkt"];
559--2315[label="0.0769231;3pkt 3fpkt"];
559--2414[label="0.171429;12pkt 12fpkt"];
559--2690[label="0.314286;22pkt 22fpkt"];
559--2829[label="0.04;1pkt 1fpkt"];
819--969[label="0.5;11pkt 11fpkt"];
819--1977[label="0.0909091;2pkt 2fpkt"];
819--2255[label="0.0454545;1pkt 1fpkt"];
847--1830[label="1;20pkt 20fpkt"];
969--1402[label="0.0434783;2pkt 2fpkt"];
969--2315[label="0.025641;1pkt 1fpkt"];
1037--1174[label="0.411765;35pkt 35fpkt"];
1037--1200[label="0.0714286;10pkt 10fpkt"];
1037--1317[label="0.0537634;5pkt 5fpkt"];
1037--1471[label="0.508772;29pkt 29fpkt"];
1037--1655[label="0.0735294;5pkt 5fpkt"];
1037--1794[label="0.0909091;5pkt 5fpkt"];
1037--1943[label="0.00458716;1pkt 1fpkt"];
1037--2114[label="0.508772;29pkt 29fpkt"];
1037--2168[label="0.0537634;5pkt 5fpkt"];
1037--2224[label="0.00458716;1pkt 1fpkt"];
1037--2247[label="0.00458716;1pkt 1fpkt"];
1037--2255[label="0.0229358;5pkt 5fpkt"];
1037--2257[label="0.00458716;1pkt 1fpkt"];
1037--2267[label="0.00458716;1pkt 1fpkt"];
1037--2274[label="0.00458716;1pkt 1fpkt"];
1037--2690[label="0.976303;206pkt 206fpkt"];
1174--1968[label="0.118421;9pkt 9fpkt"];
1174--2414[label="0.115385;9pkt 9fpkt"];
1174--2440[label="0.117647;2pkt 2fpkt"];
1174--2690[label="0.411765;35pkt 35fpkt"];
1174--2988[label="0.125;2pkt 2fpkt"];
1266--1441[label="0.714286;5pkt 5fpkt"];
1266--1471[label="0.075;3pkt 3fpkt"];
1266--1492[label="0.025;1pkt 1fpkt"];
1266--1714[label="0.025;1pkt 1fpkt"];
1266--2100[label="0.25;10pkt 10fpkt"];
1266--2114[label="0.075;3pkt 3fpkt"];
1266--2247[label="0.075;3pkt 3fpkt"];
1266--2255[label="0.025;1pkt 1fpkt"];
1266--2257[label="0.225;9pkt 9fpkt"];
1266--2267[label="0.225;9pkt 9fpkt"];
1266--2274[label="0.225;9pkt 9fpkt"];
1471--1488[label="0.0526316;3pkt 3fpkt"];
1471--1968[label="0.105263;6pkt 6fpkt"];
1471--2053[label="0.0877193;5pkt 5fpkt"];
1471--2114[label="1;57pkt 57fpkt"];
1471--2257[label="0.22807;13pkt 13fpkt"];
1471--2267[label="0.22807;13pkt 13fpkt"];
1471--2274[label="0.22807;13pkt 13fpkt"];
1471--2315[label="0.0769231;3pkt 3fpkt"];
1471--2414[label="0.105263;6pkt 6fpkt"];
1471--2690[label="0.508772;29pkt 29fpkt"];
1512--1587[label="0.132075;7pkt 7fpkt"];
1512--1662[label="0.0566038;3pkt 3fpkt"];
1512--1943[label="0.0188679;1pkt 1fpkt"];
1512--2199[label="0.0566038;3pkt 3fpkt"];
1512--2224[label="0.0188679;1pkt 1fpkt"];
1512--2247[label="0.0754717;4pkt 4fpkt"];
1512--2257[label="0.207547;11pkt 11fpkt"];
1512--2267[label="0.207547;11pkt 11fpkt"];
1512--2274[label="0.207547;11pkt 11fpkt"];
1583--1587[label="0.0898876;8pkt 8fpkt"];
1583--1662[label="0.0434783;4pkt 4fpkt"];
1583--1778[label="0.181818;6pkt 6fpkt"];
1583--2199[label="0.0434783;4pkt 4fpkt"];
1583--2207[label="0.181818;6pkt 6fpkt"];
1583--2247[label="0.0652174;6pkt 6fpkt"];
1583--2255[label="0.0108696;1pkt 1fpkt"];
1583--2257[label="0.119565;11pkt 11fpkt"];
1583--2267[label="0.119565;11pkt 11fpkt"];
1583--2274[label="0.119565;11pkt 11fpkt"];
1968--2114[label="0.105263;6pkt 6fpkt"];
1968--2224[label="0.157895;12pkt 12fpkt"];
1968--2247[label="0.0526316;4pkt 4fpkt"];
1968--2414[label="0.986842;75pkt 75fpkt"];
2114--2257[label="0.22807;13pkt 13fpkt"];
2114--2267[label="0.22807;13pkt 13fpkt"];
2114--2274[label="0.22807;13pkt 13fpkt"];
2114--2315[label="0.0769231;3pkt 3fpkt"];
2114--2414[label="0.105263;6pkt 6fpkt"];
2114--2690[label="0.508772;29pkt 29fpkt"];
2279--2910[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="209.85.201.64" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73871,1.99506,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
184[label="162.73.0.234;d;19pkt 19fpkt", shape=diamond, color=yellow];
293[label="18.197.52.212;s;1pkt 1fpkt", shape=diamond, color=yellow];
372[label="18.206.14.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
456[label="18.37.244.205;s;1pkt 1fpkt", shape=diamond, color=yellow];
1073[label="212.89.175.14;s;1pkt 1fpkt", shape=diamond, color=yellow];
1074[label="170.108.171.61;s;1pkt 1fpkt", shape=diamond, color=yellow];
1796[label="18.206.14.226;s;1pkt 1fpkt", shape=hexagon, color=black];
1933[label="170.108.171.61;s;1pkt 1fpkt", shape=hexagon, color=black];
2121[label="162.73.0.234;d;19pkt 19fpkt", shape=hexagon, color=black];
2991[label="170.108.171.61;1pkt 1fpkt", shape=invtriangle, color=brown];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 162.73.0.234:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (9.78261%)&lt;BR/&gt; 2343: (5.43478%)&lt;BR/&gt; 8624: (4.34783%)&lt;BR/&gt; 8273: (4.34783%)&lt;BR/&gt; 5166: (4.34783%)&gt;];
}
184--293[label="1;1pkt 1fpkt"];
184--372[label="1;1pkt 1fpkt"];
184--456[label="1;1pkt 1fpkt"];
184--1073[label="1;1pkt 1fpkt"];
184--1074[label="1;1pkt 1fpkt"];
184--1796[label="1;1pkt 1fpkt"];
184--1933[label="1;1pkt 1fpkt"];
184--2121[label="1;19pkt 19fpkt"];
184--2991[label="1;1pkt 1fpkt"];
293--2121[label="1;1pkt 1fpkt"];
372--1796[label="1;1pkt 1fpkt"];
372--2121[label="1;1pkt 1fpkt"];
456--2121[label="1;1pkt 1fpkt"];
1073--2121[label="1;1pkt 1fpkt"];
1074--1933[label="1;1pkt 1fpkt"];
1074--2121[label="1;1pkt 1fpkt"];
1074--2991[label="1;1pkt 1fpkt"];
1796--2121[label="1;1pkt 1fpkt"];
1933--2121[label="1;1pkt 1fpkt"];
1933--2991[label="1;1pkt 1fpkt"];
2121--2991[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.0.234"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
208[label="150.120.20.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
874[label="151.244.82.174;s;1pkt 1fpkt", shape=diamond, color=yellow];
2122[label="151.244.82.174;s;1pkt 1fpkt", shape=hexagon, color=black];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.82.174:6699, 150.120.20.3:4347}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 4347: (50%)&gt;];
}
208--874[label="1;1pkt 1fpkt"];
208--2122[label="1;1pkt 1fpkt"];
874--2122[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.120.20.3" dst_port="4347" src_ip="151.244.82.174" src_port="6699"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.92039,1.92082,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
24[label="209.88.192.82s;5pkt 5fpkt", shape=rectangle, color=red];
99[label="209.85.224.105d;2pkt 2fpkt", shape=rectangle, color=red];
242[label="165.44.71.174;d;4203pkt 4203fpkt", shape=diamond, color=yellow];
399[label="209.88.192.82;s;4203pkt 4203fpkt", shape=diamond, color=yellow];
2125[label="165.44.71.174;d;4203pkt 4203fpkt", shape=hexagon, color=black];
2510[label="209.88.192.82;4453pkt 4453fpkt", shape=pentagon, color=darkviolet];
3021[label="209.88.192.82;4453pkt 4453fpkt", shape=invtriangle, color=brown];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.88.192.82:*, 165.44.71.174:*}[99.9776%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (0.0557569%)&lt;BR/&gt; 2667: (0.023232%)&lt;BR/&gt; 2666: (0.023232%)&lt;BR/&gt; 2665: (0.023232%)&lt;BR/&gt; 2664: (0.023232%)&gt;];
}
24--99[label="0.5;1pkt 1fpkt"];
24--242[label="1;5pkt 5fpkt"];
24--399[label="1;5pkt 5fpkt"];
24--2125[label="1;5pkt 5fpkt"];
24--2252[label="0.8;4pkt 4fpkt"];
24--2510[label="1;5pkt 5fpkt"];
24--3021[label="1;5pkt 5fpkt"];
99--164[label="0.5;1pkt 1fpkt"];
99--242[label="0.5;1pkt 1fpkt"];
99--399[label="0.5;1pkt 1fpkt"];
99--1333[label="0.5;1pkt 1fpkt"];
99--2125[label="0.5;1pkt 1fpkt"];
99--2257[label="0.5;1pkt 1fpkt"];
99--2267[label="0.5;1pkt 1fpkt"];
99--2274[label="0.5;1pkt 1fpkt"];
99--2510[label="0.5;1pkt 1fpkt"];
99--3021[label="0.5;1pkt 1fpkt"];
242--399[label="1;4203pkt 4203fpkt"];
242--2125[label="1;4203pkt 4203fpkt"];
242--2252[label="0.0045045;4pkt 4fpkt"];
242--2510[label="0.999762;4202pkt 4202fpkt"];
242--3021[label="0.999762;4202pkt 4202fpkt"];
399--2125[label="1;4203pkt 4203fpkt"];
399--2252[label="0.0045045;4pkt 4fpkt"];
399--2510[label="0.999762;4202pkt 4202fpkt"];
399--3021[label="0.999762;4202pkt 4202fpkt"];
2125--2252[label="0.0045045;4pkt 4fpkt"];
2125--2510[label="0.999762;4202pkt 4202fpkt"];
2125--3021[label="0.999762;4202pkt 4202fpkt"];
2510--3021[label="1;4453pkt 4453fpkt"];
</description>
    <slice>
      <filter dst_ip="165.44.71.174" src_ip="209.88.192.82"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.73871,1.99506,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
719[label="209.85.226.41;d;1pkt 1fpkt", shape=diamond, color=yellow];
720[label="209.8.202.207;s;1pkt 1fpkt", shape=diamond, color=yellow];
2130[label="209.85.226.41;d;1pkt 1fpkt", shape=hexagon, color=black];
3186[label="209.8.202.207;1pkt 1fpkt", shape=invtriangle, color=brown];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.8.202.207:0, 209.85.226.41:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
719--720[label="1;1pkt 1fpkt"];
719--2130[label="1;1pkt 1fpkt"];
719--3186[label="1;1pkt 1fpkt"];
720--2130[label="1;1pkt 1fpkt"];
720--3186[label="1;1pkt 1fpkt"];
2130--3186[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.85.226.41" src_ip="209.8.202.207"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
375[label="136.65.113.96;s;98pkt 98fpkt", shape=diamond, color=yellow];
600[label="192.107.38.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
2132[label="192.107.38.51;d;1pkt 1fpkt", shape=hexagon, color=black];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.113.96:6257, *:6257}[86.7347%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (87%)&lt;BR/&gt; 6970: (4%)&lt;BR/&gt; 16257: (1.5%)&lt;BR/&gt; 1325: (1.5%)&lt;BR/&gt; 6699: (1%)&gt;];
}
375--435[label="1;1pkt 1fpkt"];
375--600[label="1;1pkt 1fpkt"];
375--2023[label="1;1pkt 1fpkt"];
375--2132[label="1;1pkt 1fpkt"];
600--2132[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="136.65.113.96" src_port="6257"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
239[label="44.88.72.250;s;3pkt 3fpkt", shape=diamond, color=yellow];
396[label="209.88.219.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
452[label="209.88.219.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
745[label="209.88.210.53;d;1pkt 1fpkt", shape=diamond, color=yellow];
1895[label="44.88.72.250;s;3pkt 3fpkt", shape=hexagon, color=black];
2137[label="209.88.219.45;d;1pkt 1fpkt", shape=hexagon, color=black];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.88.72.250:5001, 209.88.219.45:3657}[33.3333%]&lt;BR/&gt;{44.88.72.250:5001, 209.88.210.53:1100}[33.3333%]&lt;BR/&gt;{44.88.72.250:5001, 209.88.219.136:1909}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 3657: (20%)&lt;BR/&gt; 1909: (15%)&lt;BR/&gt; 1100: (15%)&gt;];
}
239--396[label="1;1pkt 1fpkt"];
239--452[label="1;1pkt 1fpkt"];
239--745[label="1;1pkt 1fpkt"];
239--1895[label="1;3pkt 3fpkt"];
239--2137[label="1;1pkt 1fpkt"];
396--1895[label="1;1pkt 1fpkt"];
452--1895[label="1;1pkt 1fpkt"];
452--2137[label="1;1pkt 1fpkt"];
745--1895[label="1;1pkt 1fpkt"];
1895--2137[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.88.219.136" dst_port="1909" src_ip="44.88.72.250" src_port="5001"/>
      <filter dst_ip="209.88.210.53" dst_port="1100" src_ip="44.88.72.250" src_port="5001"/>
      <filter dst_ip="209.88.219.45" dst_port="3657" src_ip="44.88.72.250" src_port="5001"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
1015[label="208.78.226.67;s;75pkt 75fpkt", shape=diamond, color=yellow];
2147[label="208.78.226.67;s;75pkt 75fpkt", shape=hexagon, color=black];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.78.226.67:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1015--2147[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter src_ip="208.78.226.67"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
1233[label="141.133.232.36;s;71pkt 71fpkt", shape=diamond, color=yellow];
1577[label="215.113.66.174;d;41pkt 41fpkt", shape=diamond, color=yellow];
2148[label="215.113.66.174;d;41pkt 41fpkt", shape=hexagon, color=black];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.232.36:*, 215.113.66.174:80}[57.7465%]&lt;BR/&gt;{141.133.232.36:*, 75.152.22.79:80}[38.0282%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2582: (0.980392%)&lt;BR/&gt; 2581: (0.980392%)&lt;BR/&gt; 2579: (0.980392%)&lt;BR/&gt; 2578: (0.980392%)&gt;];
}
1233--1577[label="1;41pkt 41fpkt"];
1233--2148[label="1;41pkt 41fpkt"];
1233--2248[label="0.112676;8pkt 8fpkt"];
1233--2254[label="0.0140845;1pkt 1fpkt"];
1233--2258[label="0.084507;6pkt 6fpkt"];
1233--2263[label="0.112676;8pkt 8fpkt"];
1233--2270[label="0.112676;8pkt 8fpkt"];
1577--2148[label="1;41pkt 41fpkt"];
1577--2248[label="0.121951;5pkt 5fpkt"];
1577--2258[label="0.097561;4pkt 4fpkt"];
1577--2263[label="0.121951;5pkt 5fpkt"];
1577--2270[label="0.121951;5pkt 5fpkt"];
2148--2248[label="0.121951;5pkt 5fpkt"];
2148--2258[label="0.097561;4pkt 4fpkt"];
2148--2263[label="0.121951;5pkt 5fpkt"];
2148--2270[label="0.121951;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="215.113.66.174" dst_port="80" src_ip="141.133.232.36"/>
      <filter dst_ip="75.152.22.79" dst_port="80" src_ip="141.133.232.36"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
916[label="209.140.173.238;s;187pkt 187fpkt", shape=diamond, color=yellow];
1387[label="18.96.26.100;d;134pkt 134fpkt", shape=diamond, color=yellow];
2151[label="18.96.26.100;d;134pkt 134fpkt", shape=hexagon, color=black];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.140.173.238:3128, 18.96.26.100:*}[62.6168%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (48.1319%)&lt;BR/&gt; 53: (3.73626%)&lt;BR/&gt; 1498: (0.43956%)&lt;BR/&gt; 5000: (0.32967%)&lt;BR/&gt; 4920: (0.32967%)&gt;];
}
916--1387[label="0.798507;107pkt 107fpkt"];
916--2151[label="0.798507;107pkt 107fpkt"];
916--2251[label="0.0106952;2pkt 2fpkt"];
916--2253[label="0.0160428;3pkt 3fpkt"];
916--2256[label="0.0160428;3pkt 3fpkt"];
916--2260[label="0.0213904;4pkt 4fpkt"];
916--2266[label="0.0213904;4pkt 4fpkt"];
916--2273[label="0.0213904;4pkt 4fpkt"];
1387--2151[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_ip="18.96.26.100" src_ip="209.140.173.238" src_port="3128"/>
    </slice>
    <from sec="1031547605" usec="0"/>
    <to sec="1031548606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_293{
style=filled;
color=gray75;
1500[label="208.69.178.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
1590[label="164.15.193.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
2153[label="208.69.178.10;d;1pkt 1fpkt", shape=hexagon, color=black];
stat293[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.15.193.17:20, 208.69.178.10:42918}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42918: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
1500--1590[label="1;1pkt 1fpkt"];
1500--2153[label="1;1pkt 1fpkt"];
1590--2153[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.69.178.10" dst_port="42918" src_ip="164.15.193.17" src_port="20"/>
    </slice>
    <from sec="1031547606" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
531[label="141.133.89.193;d;57pkt 57fpkt", shape=diamond, color=yellow];
680[label="141.133.201.11;d;16pkt 16fpkt", shape=diamond, color=yellow];
794[label="136.65.1.134;d;26pkt 26fpkt", shape=diamond, color=yellow];
829[label="208.78.234.8;d;58pkt 58fpkt", shape=diamond, color=yellow];
1710[label="74.2.164.143;s;15pkt 15fpkt", shape=hexagon, color=black];
1767[label="74.2.164.3;s;341pkt 341fpkt", shape=hexagon, color=black];
2007[label="136.65.1.134;d;26pkt 26fpkt", shape=hexagon, color=black];
2155[label="213.73.3.242;s;82pkt 82fpkt", shape=hexagon, color=black];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.2.164.3:80, 209.129.201.135:*}[48.996%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4364%)&lt;BR/&gt; 1048: (0.724638%)&lt;BR/&gt; 1046: (0.563607%)&lt;BR/&gt; 1049: (0.483092%)&lt;BR/&gt; 1060: (0.402576%)&gt;];
}
531--621[label="0.964912;55pkt 55fpkt"];
531--1767[label="0.964912;55pkt 55fpkt"];
531--2247[label="0.368421;21pkt 21fpkt"];
680--695[label="0.0769231;1pkt 1fpkt"];
680--1349[label="0.0625;1pkt 1fpkt"];
680--1879[label="1;16pkt 16fpkt"];
680--2155[label="0.4375;7pkt 7fpkt"];
680--2255[label="0.0625;1pkt 1fpkt"];
680--3133[label="0.0625;1pkt 1fpkt"];
680--3345[label="0.0625;1pkt 1fpkt"];
794--2007[label="1;26pkt 26fpkt"];
794--2155[label="0.923077;24pkt 24fpkt"];
794--2255[label="0.692308;18pkt 18fpkt"];
794--2257[label="0.192308;5pkt 5fpkt"];
794--2267[label="0.192308;5pkt 5fpkt"];
794--2274[label="0.192308;5pkt 5fpkt"];
829--1022[label="0.12766;6pkt 6fpkt"];
829--1030[label="0.0344828;2pkt 2fpkt"];
829--1043[label="0.0172414;1pkt 1fpkt"];
829--1266[label="0.25;10pkt 10fpkt"];
829--1710[label="0.133333;2pkt 2fpkt"];
829--1723[label="0.0344828;2pkt 2fpkt"];
829--1767[label="0.0344828;2pkt 2fpkt"];
829--1954[label="0.06;3pkt 3fpkt"];
829--2100[label="1;58pkt 58fpkt"];
829--2155[label="0.12069;7pkt 7fpkt"];
829--2255[label="0.0689655;4pkt 4fpkt"];
829--2323[label="0.0645161;2pkt 2fpkt"];
829--2358[label="0.0344828;2pkt 2fpkt"];
829--2855[label="0.0517241;3pkt 3fpkt"];
829--3210[label="0.0517241;3pkt 3fpkt"];
1710--2100[label="0.133333;2pkt 2fpkt"];
1710--2247[label="0.4;6pkt 6fpkt"];
1710--2257[label="0.0666667;1pkt 1fpkt"];
1710--2267[label="0.0666667;1pkt 1fpkt"];
1710--2274[label="0.0666667;1pkt 1fpkt"];
1767--2100[label="0.0344828;2pkt 2fpkt"];
1767--2199[label="0.00293255;1pkt 1fpkt"];
1767--2247[label="0.0674487;23pkt 23fpkt"];
2007--2155[label="0.923077;24pkt 24fpkt"];
2007--2255[label="0.692308;18pkt 18fpkt"];
2007--2257[label="0.192308;5pkt 5fpkt"];
2007--2267[label="0.192308;5pkt 5fpkt"];
2007--2274[label="0.192308;5pkt 5fpkt"];
2155--2199[label="0.0121951;1pkt 1fpkt"];
2155--2207[label="0.272727;9pkt 9fpkt"];
2155--2224[label="0.0121951;1pkt 1fpkt"];
2155--2247[label="0.0365854;3pkt 3fpkt"];
2155--2255[label="0.317073;26pkt 26fpkt"];
2155--2257[label="0.097561;8pkt 8fpkt"];
2155--2267[label="0.097561;8pkt 8fpkt"];
2155--2274[label="0.097561;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="209.129.201.135" src_ip="74.2.164.3" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
793[label="209.85.224.16;s;748pkt 748fpkt", shape=diamond, color=yellow];
1111[label="150.136.166.37;d;25pkt 25fpkt", shape=diamond, color=yellow];
1112[label="164.15.214.59;s;1pkt 1fpkt", shape=diamond, color=yellow];
1118[label="150.136.166.38;d;69pkt 69fpkt", shape=diamond, color=yellow];
1169[label="72.105.62.17;d;15pkt 15fpkt", shape=diamond, color=yellow];
1323[label="72.105.62.20;d;160pkt 160fpkt", shape=diamond, color=yellow];
2088[label="209.85.224.16;s;748pkt 748fpkt", shape=hexagon, color=black];
2170[label="72.105.62.20;d;160pkt 160fpkt", shape=hexagon, color=black];
2329[label="209.85.224.16;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2935[label="209.85.224.16;2pkt 2fpkt", shape=invtriangle, color=brown];
3254[label="209.85.224.16;778pkt 778fpkt", shape=invhouse, color=bisque];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.85.224.16:*, *:80}[59.9034%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.2718%)&lt;BR/&gt; 113: (5.64993%)&lt;BR/&gt; 53: (2.8065%)&lt;BR/&gt; 6666: (1.7356%)&lt;BR/&gt; 6662: (1.69867%)&gt;];
}
793--876[label="0.00465116;1pkt 1fpkt"];
793--900[label="0.00584795;1pkt 1fpkt"];
793--912[label="0.533333;8pkt 8fpkt"];
793--934[label="0.0833333;2pkt 2fpkt"];
793--1025[label="0.611765;52pkt 52fpkt"];
793--1069[label="0.00664452;2pkt 2fpkt"];
793--1111[label="0.8;20pkt 20fpkt"];
793--1118[label="0.318841;22pkt 22fpkt"];
793--1148[label="0.00657895;1pkt 1fpkt"];
793--1169[label="1;15pkt 15fpkt"];
793--1202[label="0.0042735;1pkt 1fpkt"];
793--1250[label="0.658537;27pkt 27fpkt"];
793--1323[label="0.9875;158pkt 158fpkt"];
793--1373[label="0.00680272;1pkt 1fpkt"];
793--1600[label="0.0983607;6pkt 6fpkt"];
793--1605[label="0.0344828;2pkt 2fpkt"];
793--1936[label="0.0042735;1pkt 1fpkt"];
793--2050[label="0.00787402;1pkt 1fpkt"];
793--2088[label="1;748pkt 748fpkt"];
793--2158[label="0.0983607;6pkt 6fpkt"];
793--2170[label="0.9875;158pkt 158fpkt"];
793--2220[label="0.0042735;1pkt 1fpkt"];
793--2248[label="0.0026738;2pkt 2fpkt"];
793--2254[label="0.00534759;4pkt 4fpkt"];
793--2256[label="0.0120321;9pkt 9fpkt"];
793--2258[label="0.0374332;28pkt 28fpkt"];
793--2263[label="0.0026738;2pkt 2fpkt"];
793--2270[label="0.0026738;2pkt 2fpkt"];
793--2329[label="1;2pkt 2fpkt"];
793--2935[label="1;2pkt 2fpkt"];
793--3254[label="1;748pkt 748fpkt"];
1111--1112[label="1;1pkt 1fpkt"];
1111--2088[label="0.8;20pkt 20fpkt"];
1111--3254[label="0.8;20pkt 20fpkt"];
1118--1861[label="0.0714286;1pkt 1fpkt"];
1118--2088[label="0.318841;22pkt 22fpkt"];
1118--3153[label="0.637681;44pkt 44fpkt"];
1118--3254[label="0.347826;24pkt 24fpkt"];
1118--3356[label="0.637681;44pkt 44fpkt"];
1169--2088[label="1;15pkt 15fpkt"];
1169--2329[label="0.5;1pkt 1fpkt"];
1169--2935[label="0.5;1pkt 1fpkt"];
1169--3254[label="1;15pkt 15fpkt"];
1323--2088[label="0.9875;158pkt 158fpkt"];
1323--2170[label="1;160pkt 160fpkt"];
1323--2258[label="0.13125;21pkt 21fpkt"];
1323--2329[label="0.5;1pkt 1fpkt"];
1323--2935[label="0.5;1pkt 1fpkt"];
1323--3254[label="1;160pkt 160fpkt"];
2088--2158[label="0.0983607;6pkt 6fpkt"];
2088--2170[label="0.9875;158pkt 158fpkt"];
2088--2220[label="0.0042735;1pkt 1fpkt"];
2088--2248[label="0.0026738;2pkt 2fpkt"];
2088--2254[label="0.00534759;4pkt 4fpkt"];
2088--2256[label="0.0120321;9pkt 9fpkt"];
2088--2258[label="0.0374332;28pkt 28fpkt"];
2088--2263[label="0.0026738;2pkt 2fpkt"];
2088--2270[label="0.0026738;2pkt 2fpkt"];
2088--2329[label="1;2pkt 2fpkt"];
2088--2935[label="1;2pkt 2fpkt"];
2088--3254[label="1;748pkt 748fpkt"];
2170--2258[label="0.13125;21pkt 21fpkt"];
2170--2329[label="0.5;1pkt 1fpkt"];
2170--2935[label="0.5;1pkt 1fpkt"];
2170--3254[label="1;160pkt 160fpkt"];
2329--2935[label="1;2pkt 2fpkt"];
2329--3254[label="1;2pkt 2fpkt"];
2935--3254[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="209.85.224.16"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.92039,1.92082,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_296{
style=filled;
color=gray75;
30[label="208.78.224.92s;1pkt 1fpkt", shape=rectangle, color=red];
96[label="136.65.113.96d;1pkt 1fpkt", shape=rectangle, color=red];
791[label="208.78.224.92;s;89pkt 89fpkt", shape=diamond, color=yellow];
1270[label="209.88.8.40;s;41pkt 41fpkt", shape=diamond, color=yellow];
1339[label="46.248.19.74;d;16pkt 16fpkt", shape=diamond, color=yellow];
1638[label="72.114.1.7;d;4pkt 4fpkt", shape=diamond, color=yellow];
1987[label="209.88.8.40;s;41pkt 41fpkt", shape=hexagon, color=black];
2042[label="208.78.224.92;s;67pkt 67fpkt", shape=hexagon, color=black];
2181[label="72.114.1.7;d;4pkt 4fpkt", shape=hexagon, color=black];
2536[label="208.78.224.92;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3037[label="208.78.224.92;1pkt 1fpkt", shape=invtriangle, color=brown];
stat296[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.88.8.40:80, *:*}[28.0303%]&lt;BR/&gt;{208.78.224.92:80, 75.155.47.84:*}[20.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6165%)&lt;BR/&gt; 8080: (1.50376%)&lt;BR/&gt; 6131: (0.75188%)&lt;BR/&gt; 5186: (0.75188%)&lt;BR/&gt; 1079: (0.75188%)&gt;];
}
30--791[label="1;1pkt 1fpkt"];
30--1638[label="1;1pkt 1fpkt"];
30--2181[label="1;1pkt 1fpkt"];
96--791[label="1;1pkt 1fpkt"];
791--1638[label="0.25;1pkt 1fpkt"];
791--2042[label="1;67pkt 67fpkt"];
791--2181[label="0.25;1pkt 1fpkt"];
791--2247[label="0.0449438;4pkt 4fpkt"];
791--2255[label="0.0449438;4pkt 4fpkt"];
791--2257[label="0.0337079;3pkt 3fpkt"];
791--2267[label="0.0337079;3pkt 3fpkt"];
791--2274[label="0.0337079;3pkt 3fpkt"];
791--2536[label="1;1pkt 1fpkt"];
791--3037[label="1;1pkt 1fpkt"];
1270--1339[label="1;16pkt 16fpkt"];
1270--1638[label="0.25;1pkt 1fpkt"];
1270--1987[label="1;41pkt 41fpkt"];
1270--2181[label="0.25;1pkt 1fpkt"];
1270--2247[label="0.0243902;1pkt 1fpkt"];
1270--2255[label="0.0487805;2pkt 2fpkt"];
1270--2257[label="0.243902;10pkt 10fpkt"];
1270--2267[label="0.243902;10pkt 10fpkt"];
1270--2274[label="0.243902;10pkt 10fpkt"];
1339--1987[label="1;16pkt 16fpkt"];
1339--2257[label="0.625;10pkt 10fpkt"];
1339--2267[label="0.625;10pkt 10fpkt"];
1339--2274[label="0.625;10pkt 10fpkt"];
1638--1987[label="0.25;1pkt 1fpkt"];
1638--2181[label="1;4pkt 4fpkt"];
1987--2181[label="0.25;1pkt 1fpkt"];
1987--2247[label="0.0243902;1pkt 1fpkt"];
1987--2255[label="0.0487805;2pkt 2fpkt"];
1987--2257[label="0.243902;10pkt 10fpkt"];
1987--2267[label="0.243902;10pkt 10fpkt"];
1987--2274[label="0.243902;10pkt 10fpkt"];
2042--2247[label="0.0597015;4pkt 4fpkt"];
2042--2255[label="0.0597015;4pkt 4fpkt"];
2042--2257[label="0.0447761;3pkt 3fpkt"];
2042--2267[label="0.0447761;3pkt 3fpkt"];
2042--2274[label="0.0447761;3pkt 3fpkt"];
2042--2536[label="1;1pkt 1fpkt"];
2042--3037[label="1;1pkt 1fpkt"];
2536--3037[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="209.88.8.40" src_port="80"/>
      <filter dst_ip="75.155.47.84" src_ip="208.78.224.92" src_port="80"/>
    </slice>
    <from sec="1031547602" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
277[label="141.133.232.38;s;41pkt 41fpkt", shape=diamond, color=yellow];
1438[label="44.31.20.89;d;61pkt 61fpkt", shape=diamond, color=yellow];
2184[label="44.31.20.89;d;61pkt 61fpkt", shape=hexagon, color=black];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.232.38:*, 44.31.20.89:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4985: (0.920245%)&lt;BR/&gt; 4984: (0.920245%)&lt;BR/&gt; 4983: (0.920245%)&lt;BR/&gt; 4982: (0.920245%)&gt;];
}
277--1438[label="1;41pkt 41fpkt"];
277--2184[label="1;41pkt 41fpkt"];
1438--2184[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_ip="44.31.20.89" dst_port="80" src_ip="141.133.232.38"/>
    </slice>
    <from sec="1031548478" usec="0"/>
    <to sec="1031548585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
1658[label="193.225.150.46;d;273pkt 273fpkt", shape=diamond, color=yellow];
2186[label="193.225.150.46;d;273pkt 273fpkt", shape=hexagon, color=black];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.78.229.48:*, 193.225.150.46:80}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.5128%)&lt;BR/&gt; 21: (5.86081%)&lt;BR/&gt; 8000: (4.0293%)&lt;BR/&gt; 53: (2.9304%)&lt;BR/&gt; 6699: (2.5641%)&gt;];
}
1658--2186[label="1;273pkt 273fpkt"];
</description>
    <slice>
      <filter dst_ip="193.225.150.46" dst_port="80" src_ip="208.78.229.48"/>
    </slice>
    <from sec="1031548564" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
2645[label="141.133.63.145;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.63.145:1669, 75.97.103.8:80}[20%]&lt;BR/&gt;{141.133.63.145:1664, 221.35.123.31:80}[20%]&lt;BR/&gt;{141.133.63.145:1657, 221.35.123.96:80}[20%]&lt;BR/&gt;{141.133.63.145:1666, 75.97.103.231:80}[20%]&lt;BR/&gt;{141.133.63.145:1667, 75.97.103.231:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1669: (10%)&lt;BR/&gt; 1667: (10%)&lt;BR/&gt; 1666: (10%)&lt;BR/&gt; 1664: (10%)&gt;];
}
2645--3097[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="75.97.103.231" dst_port="80" src_ip="141.133.63.145" src_port="1667"/>
      <filter dst_ip="75.97.103.231" dst_port="80" src_ip="141.133.63.145" src_port="1666"/>
      <filter dst_ip="221.35.123.96" dst_port="80" src_ip="141.133.63.145" src_port="1657"/>
      <filter dst_ip="221.35.123.31" dst_port="80" src_ip="141.133.63.145" src_port="1664"/>
      <filter dst_ip="75.97.103.8" dst_port="80" src_ip="141.133.63.145" src_port="1669"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.2859,1.9997,503,1 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
36[label="44.41.56.101s;5pkt 5fpkt", shape=rectangle, color=red];
231[label="44.41.56.101;s;32pkt 32fpkt", shape=diamond, color=yellow];
1677[label="44.41.56.101;s;15pkt 15fpkt", shape=hexagon, color=black];
2193[label="44.41.56.101;s;10pkt 10fpkt", shape=polygon, color=gold];
2194[label="209.88.15.136;d;11pkt 11fpkt", shape=polygon, color=gold];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.41.56.101:80, 209.88.15.136:*}[96.9697%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3151%)&lt;BR/&gt; 1657: (3.42466%)&lt;BR/&gt; 1656: (3.42466%)&lt;BR/&gt; 1655: (3.42466%)&lt;BR/&gt; 1654: (3.42466%)&gt;];
}
36--231[label="1;5pkt 5fpkt"];
36--232[label="1;5pkt 5fpkt"];
36--1677[label="1;5pkt 5fpkt"];
36--1678[label="1;5pkt 5fpkt"];
36--2193[label="1;5pkt 5fpkt"];
36--2194[label="1;5pkt 5fpkt"];
36--2247[label="1;5pkt 5fpkt"];
36--2255[label="1;5pkt 5fpkt"];
36--2257[label="0.4;2pkt 2fpkt"];
36--2267[label="0.4;2pkt 2fpkt"];
36--2274[label="0.4;2pkt 2fpkt"];
231--232[label="1;32pkt 32fpkt"];
231--1677[label="1;15pkt 15fpkt"];
231--1678[label="1;32pkt 32fpkt"];
231--2193[label="1;10pkt 10fpkt"];
231--2194[label="0.909091;10pkt 10fpkt"];
231--2247[label="0.3125;10pkt 10fpkt"];
231--2255[label="0.15625;5pkt 5fpkt"];
231--2257[label="0.40625;13pkt 13fpkt"];
231--2267[label="0.40625;13pkt 13fpkt"];
231--2274[label="0.40625;13pkt 13fpkt"];
1677--1678[label="1;15pkt 15fpkt"];
1677--2193[label="1;10pkt 10fpkt"];
1677--2194[label="0.909091;10pkt 10fpkt"];
1677--2247[label="0.666667;10pkt 10fpkt"];
1677--2255[label="0.333333;5pkt 5fpkt"];
1677--2257[label="0.133333;2pkt 2fpkt"];
1677--2267[label="0.133333;2pkt 2fpkt"];
1677--2274[label="0.133333;2pkt 2fpkt"];
2193--2194[label="1;10pkt 10fpkt"];
2193--2247[label="1;10pkt 10fpkt"];
2193--2255[label="0.5;5pkt 5fpkt"];
2193--2257[label="0.2;2pkt 2fpkt"];
2193--2267[label="0.2;2pkt 2fpkt"];
2193--2274[label="0.2;2pkt 2fpkt"];
2194--2247[label="0.909091;10pkt 10fpkt"];
2194--2255[label="0.454545;5pkt 5fpkt"];
2194--2257[label="0.181818;2pkt 2fpkt"];
2194--2267[label="0.181818;2pkt 2fpkt"];
2194--2274[label="0.181818;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.88.15.136" src_ip="44.41.56.101" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16938,2.02742,501,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
329[label="213.36.205.173;s;199pkt 199fpkt", shape=diamond, color=yellow];
1690[label="213.36.205.173;s;199pkt 199fpkt", shape=hexagon, color=black];
2196[label="213.36.205.173;s;65pkt 65fpkt", shape=polygon, color=gold];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.36.205.173:21, 209.85.226.195:*}[49.2462%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (22.3542%)&lt;BR/&gt; 3206: (0.539957%)&lt;BR/&gt; 2036: (0.539957%)&lt;BR/&gt; 3502: (0.431965%)&lt;BR/&gt; 62899: (0.323974%)&gt;];
}
329--698[label="1;199pkt 199fpkt"];
329--1690[label="1;199pkt 199fpkt"];
329--2196[label="1;65pkt 65fpkt"];
329--2272[label="0.0703518;14pkt 14fpkt"];
1690--2196[label="1;65pkt 65fpkt"];
1690--2272[label="0.0703518;14pkt 14fpkt"];
2196--2272[label="0.0769231;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="209.85.226.195" src_ip="213.36.205.173" src_port="21"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
339[label="209.85.242.10;d;125pkt 125fpkt", shape=diamond, color=yellow];
1692[label="209.85.242.10;d;117pkt 117fpkt", shape=hexagon, color=black];
2840[label="142.73.239.219;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3203[label="142.73.239.219;21pkt 21fpkt", shape=invtriangle, color=brown];
3380[label="142.73.239.219;20pkt 20fpkt", shape=invhouse, color=bisque];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 209.85.242.10:*}[88.8%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3795%)&lt;BR/&gt; 0: (5.94059%)&lt;BR/&gt; 22: (0.990099%)&lt;BR/&gt; 54596: (0.825083%)&lt;BR/&gt; 54595: (0.825083%)&gt;];
}
339--345[label="0.16;8pkt 8fpkt"];
339--779[label="0.008;1pkt 1fpkt"];
339--830[label="0.170455;15pkt 15fpkt"];
339--1030[label="0.016;2pkt 2fpkt"];
339--1043[label="0.0126582;1pkt 1fpkt"];
339--1137[label="0.190476;8pkt 8fpkt"];
339--1382[label="0.00877193;1pkt 1fpkt"];
339--1390[label="0.016;2pkt 2fpkt"];
339--1692[label="1;117pkt 117fpkt"];
339--1693[label="0.233333;7pkt 7fpkt"];
339--1984[label="0.190476;8pkt 8fpkt"];
339--1994[label="0.220588;15pkt 15fpkt"];
339--2047[label="0.0181818;2pkt 2fpkt"];
339--2091[label="0.00877193;1pkt 1fpkt"];
339--2197[label="1;54pkt 54fpkt"];
339--2198[label="0.2;2pkt 2fpkt"];
339--2247[label="0.152;19pkt 19fpkt"];
339--2255[label="0.056;7pkt 7fpkt"];
339--2257[label="0.048;6pkt 6fpkt"];
339--2267[label="0.048;6pkt 6fpkt"];
339--2274[label="0.048;6pkt 6fpkt"];
339--2358[label="0.016;2pkt 2fpkt"];
339--2519[label="0.222222;2pkt 2fpkt"];
339--2746[label="0.177778;8pkt 8fpkt"];
339--2840[label="1;20pkt 20fpkt"];
339--3203[label="1;21pkt 21fpkt"];
339--3380[label="1;20pkt 20fpkt"];
1692--1693[label="0.233333;7pkt 7fpkt"];
1692--1984[label="0.190476;8pkt 8fpkt"];
1692--1994[label="0.220588;15pkt 15fpkt"];
1692--2047[label="0.0181818;2pkt 2fpkt"];
1692--2091[label="0.00877193;1pkt 1fpkt"];
1692--2197[label="1;54pkt 54fpkt"];
1692--2198[label="0.2;2pkt 2fpkt"];
1692--2247[label="0.162393;19pkt 19fpkt"];
1692--2255[label="0.0598291;7pkt 7fpkt"];
1692--2257[label="0.0512821;6pkt 6fpkt"];
1692--2267[label="0.0512821;6pkt 6fpkt"];
1692--2274[label="0.0512821;6pkt 6fpkt"];
1692--2358[label="0.017094;2pkt 2fpkt"];
1692--2519[label="0.222222;2pkt 2fpkt"];
1692--2746[label="0.177778;8pkt 8fpkt"];
1692--2840[label="1;20pkt 20fpkt"];
1692--3203[label="1;21pkt 21fpkt"];
1692--3380[label="1;20pkt 20fpkt"];
2840--3203[label="1;20pkt 20fpkt"];
2840--3380[label="1;20pkt 20fpkt"];
3203--3380[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="209.85.242.10" src_port="80"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
454[label="46.168.117.98;d;5pkt 5fpkt", shape=diamond, color=yellow];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.150.17:2462, 46.168.117.98:80}[20%]&lt;BR/&gt;{141.133.150.17:2469, 46.168.117.98:80}[20%]&lt;BR/&gt;{141.133.150.17:2472, 46.168.117.98:80}[20%]&lt;BR/&gt;{141.133.150.17:2473, 46.168.117.98:80}[20%]&lt;BR/&gt;{141.133.150.17:2482, 46.168.117.98:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2482: (10%)&lt;BR/&gt; 2473: (10%)&lt;BR/&gt; 2472: (10%)&lt;BR/&gt; 2469: (10%)&gt;];
}
454--1735[label="1;5pkt 5fpkt"];
454--2214[label="0.8;4pkt 4fpkt"];
454--2248[label="0.2;1pkt 1fpkt"];
454--2254[label="0.4;2pkt 2fpkt"];
454--2263[label="0.2;1pkt 1fpkt"];
454--2270[label="0.2;1pkt 1fpkt"];
454--3255[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="46.168.117.98" dst_port="80" src_ip="141.133.150.17" src_port="2482"/>
      <filter dst_ip="46.168.117.98" dst_port="80" src_ip="141.133.150.17" src_port="2473"/>
      <filter dst_ip="46.168.117.98" dst_port="80" src_ip="141.133.150.17" src_port="2472"/>
      <filter dst_ip="46.168.117.98" dst_port="80" src_ip="141.133.150.17" src_port="2469"/>
      <filter dst_ip="46.168.117.98" dst_port="80" src_ip="141.133.150.17" src_port="2462"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16938,2.02742,504,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
942[label="72.234.76.14;s;118pkt 118fpkt", shape=diamond, color=yellow];
946[label="136.170.185.64;d;118pkt 118fpkt", shape=diamond, color=yellow];
1403[label="136.170.185.66;d;4pkt 4fpkt", shape=diamond, color=yellow];
1831[label="72.234.76.14;s;118pkt 118fpkt", shape=hexagon, color=black];
2217[label="72.234.76.14;s;85pkt 85fpkt", shape=polygon, color=gold];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.234.76.14:*, 136.170.185.64:443}[95.9016%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.0971%)&lt;BR/&gt; 53: (0.564334%)&lt;BR/&gt; 3573: (0.451467%)&lt;BR/&gt; 3572: (0.451467%)&lt;BR/&gt; 3571: (0.451467%)&gt;];
}
942--946[label="0.991525;117pkt 117fpkt"];
942--1403[label="0.25;1pkt 1fpkt"];
942--1831[label="1;118pkt 118fpkt"];
942--2217[label="1;85pkt 85fpkt"];
946--1831[label="0.991525;117pkt 117fpkt"];
946--2217[label="0.988235;84pkt 84fpkt"];
1403--1831[label="0.25;1pkt 1fpkt"];
1403--2217[label="0.25;1pkt 1fpkt"];
1403--2253[label="0.25;1pkt 1fpkt"];
1831--2217[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="136.170.185.64" dst_port="443" src_ip="72.234.76.14"/>
    </slice>
    <from sec="1031547699" usec="0"/>
    <to sec="1031548492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
1556[label="136.65.44.172;d;10pkt 10fpkt", shape=diamond, color=yellow];
1565[label="204.195.91.216;s;2pkt 2fpkt", shape=diamond, color=yellow];
2118[label="204.195.91.216;s;2pkt 2fpkt", shape=hexagon, color=black];
2833[label="204.195.91.216;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3197[label="204.195.91.216;2pkt 2fpkt", shape=invtriangle, color=brown];
3378[label="204.195.91.216;2pkt 2fpkt", shape=invhouse, color=bisque];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.90.183.10:80, 136.65.44.172:*}[40%]&lt;BR/&gt;{193.80.51.55:80, 136.65.44.172:*}[40%]&lt;BR/&gt;{204.195.91.216:*, 136.65.44.172:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 46658: (15%)&lt;BR/&gt; 1087: (15%)&lt;BR/&gt; 1086: (15%)&lt;BR/&gt; 21: (15%)&gt;];
}
1556--1565[label="1;2pkt 2fpkt"];
1556--2118[label="1;2pkt 2fpkt"];
1556--2833[label="1;2pkt 2fpkt"];
1556--3197[label="1;2pkt 2fpkt"];
1556--3277[label="0.4;4pkt 4fpkt"];
1556--3378[label="1;2pkt 2fpkt"];
1565--2118[label="1;2pkt 2fpkt"];
1565--2833[label="1;2pkt 2fpkt"];
1565--3197[label="1;2pkt 2fpkt"];
1565--3378[label="1;2pkt 2fpkt"];
2118--2833[label="1;2pkt 2fpkt"];
2118--3197[label="1;2pkt 2fpkt"];
2118--3378[label="1;2pkt 2fpkt"];
2833--3197[label="1;2pkt 2fpkt"];
2833--3378[label="1;2pkt 2fpkt"];
3197--3378[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.44.172" src_ip="204.195.91.216"/>
      <filter dst_ip="136.65.44.172" src_ip="193.80.51.55" src_port="80"/>
      <filter dst_ip="136.65.44.172" src_ip="209.90.183.10" src_port="80"/>
    </slice>
    <from sec="1031548434" usec="0"/>
    <to sec="1031548556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16938,2.02742,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
418[label="136.65.112.11;s;130pkt 130fpkt", shape=diamond, color=yellow];
1704[label="136.65.112.11;s;63pkt 63fpkt", shape=hexagon, color=black];
2228[label="136.65.112.11;s;63pkt 63fpkt", shape=polygon, color=gold];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.112.11:*, 193.183.82.82:80}[20.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50874: (0.585938%)&lt;BR/&gt; 50873: (0.585938%)&lt;BR/&gt; 50872: (0.585938%)&lt;BR/&gt; 50871: (0.585938%)&gt;];
}
418--1704[label="1;63pkt 63fpkt"];
418--2228[label="1;63pkt 63fpkt"];
418--2258[label="0.0230769;3pkt 3fpkt"];
1704--2228[label="1;63pkt 63fpkt"];
1704--2258[label="0.047619;3pkt 3fpkt"];
2228--2258[label="0.047619;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.183.82.82" dst_port="80" src_ip="136.65.112.11"/>
    </slice>
    <from sec="1031547990" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.29185,1.95441,999,1 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
7[label="141.133.16.24s;326pkt 326fpkt", shape=rectangle, color=red];
1128[label="141.133.16.24;s;396pkt 396fpkt", shape=diamond, color=yellow];
1513[label="75.102.158.218;d;277pkt 277fpkt", shape=diamond, color=yellow];
2098[label="75.102.158.218;d;277pkt 277fpkt", shape=hexagon, color=black];
2236[label="141.133.16.24;s;396pkt 396fpkt", shape=polygon, color=gold];
2238[label="75.102.158.218;d;277pkt 277fpkt", shape=polygon, color=gold];
2348[label="141.133.16.24;635pkt 635fpkt", shape=pentagon, color=darkviolet];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.16.24:*, 75.102.158.218:8000}[58.4356%]&lt;BR/&gt;{141.133.16.24:*, *:80}[31.9018%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (39.822%)&lt;BR/&gt; 80: (7.85604%)&lt;BR/&gt; 53: (1.27709%)&lt;BR/&gt; 1024: (1.19969%)&lt;BR/&gt; 0: (1.16099%)&gt;];
}
7--1128[label="0.797546;260pkt 260fpkt"];
7--1513[label="0.938628;260pkt 260fpkt"];
7--2090[label="0.797546;260pkt 260fpkt"];
7--2098[label="0.938628;260pkt 260fpkt"];
7--2236[label="0.797546;260pkt 260fpkt"];
7--2238[label="0.938628;260pkt 260fpkt"];
7--2348[label="1;326pkt 326fpkt"];
1128--1267[label="0.025641;2pkt 2fpkt"];
1128--1375[label="0.0147059;1pkt 1fpkt"];
1128--1506[label="0.166667;1pkt 1fpkt"];
1128--1513[label="0.938628;260pkt 260fpkt"];
1128--1570[label="0.0133333;1pkt 1fpkt"];
1128--1575[label="0.0377358;2pkt 2fpkt"];
1128--1585[label="0.0625;4pkt 4fpkt"];
1128--1659[label="0.125;1pkt 1fpkt"];
1128--2041[label="0.0169492;1pkt 1fpkt"];
1128--2090[label="1;396pkt 396fpkt"];
1128--2098[label="0.938628;260pkt 260fpkt"];
1128--2145[label="0.0377358;2pkt 2fpkt"];
1128--2236[label="1;396pkt 396fpkt"];
1128--2238[label="0.938628;260pkt 260fpkt"];
1128--2248[label="0.00252525;1pkt 1fpkt"];
1128--2253[label="0.00505051;2pkt 2fpkt"];
1128--2254[label="0.020202;8pkt 8fpkt"];
1128--2256[label="0.0126263;5pkt 5fpkt"];
1128--2258[label="0.00505051;2pkt 2fpkt"];
1128--2263[label="0.00252525;1pkt 1fpkt"];
1128--2270[label="0.00252525;1pkt 1fpkt"];
1128--2348[label="1;396pkt 396fpkt"];
1513--2090[label="0.938628;260pkt 260fpkt"];
1513--2098[label="1;277pkt 277fpkt"];
1513--2236[label="0.938628;260pkt 260fpkt"];
1513--2238[label="1;277pkt 277fpkt"];
1513--2348[label="0.938628;260pkt 260fpkt"];
1513--2415[label="0.0613718;17pkt 17fpkt"];
2098--2236[label="0.938628;260pkt 260fpkt"];
2098--2238[label="1;277pkt 277fpkt"];
2098--2348[label="0.938628;260pkt 260fpkt"];
2098--2415[label="0.0613718;17pkt 17fpkt"];
2236--2238[label="0.938628;260pkt 260fpkt"];
2236--2248[label="0.00252525;1pkt 1fpkt"];
2236--2253[label="0.00505051;2pkt 2fpkt"];
2236--2254[label="0.020202;8pkt 8fpkt"];
2236--2256[label="0.0126263;5pkt 5fpkt"];
2236--2258[label="0.00505051;2pkt 2fpkt"];
2236--2263[label="0.00252525;1pkt 1fpkt"];
2236--2270[label="0.00252525;1pkt 1fpkt"];
2236--2348[label="1;396pkt 396fpkt"];
2238--2348[label="0.938628;260pkt 260fpkt"];
2238--2415[label="0.0613718;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="141.133.16.24"/>
      <filter dst_ip="75.102.158.218" dst_port="8000" src_ip="141.133.16.24"/>
    </slice>
    <from sec="1031547603" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
194[label="162.73.36.47;d;1155pkt 1155fpkt", shape=diamond, color=yellow];
530[label="205.213.129.36;s;26pkt 26fpkt", shape=diamond, color=yellow];
982[label="209.140.25.181;s;74pkt 74fpkt", shape=diamond, color=yellow];
1241[label="162.73.13.238;d;26pkt 26fpkt", shape=diamond, color=yellow];
1412[label="208.34.136.212;d;8pkt 8fpkt", shape=diamond, color=yellow];
2119[label="209.140.25.181;s;74pkt 74fpkt", shape=hexagon, color=black];
2448[label="213.145.129.61;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2721[label="201.85.0.171;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2886[label="201.38.101.239;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2990[label="213.145.129.61;18pkt 18fpkt", shape=invtriangle, color=brown];
3140[label="201.85.0.171;8pkt 8fpkt", shape=invtriangle, color=brown];
3157[label="209.140.25.181;76pkt 76fpkt", shape=invtriangle, color=brown];
3280[label="213.145.129.61;19pkt 19fpkt", shape=invhouse, color=bisque];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 162.73.36.47:*}[38.6698%]&lt;BR/&gt;{*:8080, 162.73.36.47:*}[26.4501%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.1842%)&lt;BR/&gt; 8080: (11.1692%)&lt;BR/&gt; 3128: (6.27041%)&lt;BR/&gt; 113: (2.64533%)&lt;BR/&gt; 8000: (1.43697%)&gt;];
}
194--2247[label="0.0311688;36pkt 36fpkt"];
194--2255[label="0.021645;25pkt 25fpkt"];
194--2257[label="0.0164502;19pkt 19fpkt"];
194--2267[label="0.0164502;19pkt 19fpkt"];
194--2274[label="0.0164502;19pkt 19fpkt"];
194--2448[label="0.894737;17pkt 17fpkt"];
194--2721[label="0.625;5pkt 5fpkt"];
194--2886[label="0.85;17pkt 17fpkt"];
194--2990[label="0.888889;16pkt 16fpkt"];
194--3140[label="0.625;5pkt 5fpkt"];
194--3280[label="0.894737;17pkt 17fpkt"];
530--635[label="0.923077;24pkt 24fpkt"];
530--1781[label="1;26pkt 26fpkt"];
530--2247[label="0.0769231;2pkt 2fpkt"];
982--1412[label="1;8pkt 8fpkt"];
982--1514[label="0.540541;20pkt 20fpkt"];
982--2119[label="1;74pkt 74fpkt"];
982--2247[label="0.0540541;4pkt 4fpkt"];
982--2255[label="0.135135;10pkt 10fpkt"];
982--2257[label="0.0945946;7pkt 7fpkt"];
982--2267[label="0.0945946;7pkt 7fpkt"];
982--2274[label="0.0945946;7pkt 7fpkt"];
982--3157[label="0.972973;72pkt 72fpkt"];
1241--1243[label="1;21pkt 21fpkt"];
1241--2247[label="0.0769231;2pkt 2fpkt"];
1241--2255[label="0.0769231;2pkt 2fpkt"];
1241--2257[label="0.0769231;2pkt 2fpkt"];
1241--2267[label="0.0769231;2pkt 2fpkt"];
1241--2274[label="0.0769231;2pkt 2fpkt"];
1412--2119[label="1;8pkt 8fpkt"];
1412--2255[label="0.25;2pkt 2fpkt"];
1412--2257[label="0.25;2pkt 2fpkt"];
1412--2267[label="0.25;2pkt 2fpkt"];
1412--2274[label="0.25;2pkt 2fpkt"];
1412--3157[label="0.875;7pkt 7fpkt"];
2119--2247[label="0.0540541;4pkt 4fpkt"];
2119--2255[label="0.135135;10pkt 10fpkt"];
2119--2257[label="0.0945946;7pkt 7fpkt"];
2119--2267[label="0.0945946;7pkt 7fpkt"];
2119--2274[label="0.0945946;7pkt 7fpkt"];
2119--3157[label="0.972973;72pkt 72fpkt"];
2448--2990[label="1;18pkt 18fpkt"];
2448--3280[label="1;19pkt 19fpkt"];
2721--3140[label="1;8pkt 8fpkt"];
2990--3280[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.36.47" src_port="80"/>
      <filter dst_ip="162.73.36.47" src_port="8080"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629991,2.02282,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
312[label="164.15.201.236;s;172pkt 172fpkt", shape=diamond, color=yellow];
461[label="200.222.176.196;d;2pkt 2fpkt", shape=diamond, color=yellow];
1004[label="200.88.226.103;d;211pkt 211fpkt", shape=diamond, color=yellow];
1856[label="200.88.226.103;d;140pkt 140fpkt", shape=hexagon, color=black];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.15.201.236:*, 200.88.226.103:21}[46.4912%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (24.5714%)&lt;BR/&gt; 80: (0.952381%)&lt;BR/&gt; 5190: (0.380952%)&lt;BR/&gt; 0: (0.380952%)&lt;BR/&gt; 38536: (0.285714%)&gt;];
}
312--461[label="1;2pkt 2fpkt"];
312--1003[label="0.2;1pkt 1fpkt"];
312--1004[label="0.901163;155pkt 155fpkt"];
312--1856[label="0.964286;135pkt 135fpkt"];
312--2252[label="0.0872093;15pkt 15fpkt"];
1004--1856[label="1;140pkt 140fpkt"];
1004--2252[label="0.07109;15pkt 15fpkt"];
1856--2252[label="0.107143;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="200.88.226.103" dst_port="21" src_ip="164.15.201.236"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
1064[label="141.133.253.212;d;16pkt 16fpkt", shape=diamond, color=yellow];
1072[label="205.213.136.156;s;16pkt 16fpkt", shape=diamond, color=yellow];
1360[label="206.154.59.72;s;78pkt 78fpkt", shape=diamond, color=yellow];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.154.59.72:80, 208.103.141.169:*}[71.2766%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0909%)&lt;BR/&gt; 1235: (0.909091%)&lt;BR/&gt; 1233: (0.909091%)&lt;BR/&gt; 1232: (0.909091%)&lt;BR/&gt; 1231: (0.909091%)&gt;];
}
1064--1072[label="1;16pkt 16fpkt"];
1064--2255[label="0.125;2pkt 2fpkt"];
1072--2255[label="0.125;2pkt 2fpkt"];
1360--1755[label="0.0128205;1pkt 1fpkt"];
1360--1807[label="0.423077;33pkt 33fpkt"];
1360--2247[label="0.128205;10pkt 10fpkt"];
1360--2255[label="0.102564;8pkt 8fpkt"];
1360--2257[label="0.0897436;7pkt 7fpkt"];
1360--2267[label="0.0897436;7pkt 7fpkt"];
1360--2274[label="0.0897436;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="208.103.141.169" src_ip="206.154.59.72" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
952[label="141.133.192.37;d;133pkt 133fpkt", shape=diamond, color=yellow];
1648[label="141.133.192.40;d;72pkt 72fpkt", shape=diamond, color=yellow];
2163[label="141.133.192.37;d;133pkt 133fpkt", shape=hexagon, color=black];
2871[label="208.23.72.234;29pkt 29fpkt", shape=pentagon, color=darkviolet];
2877[label="208.23.72.235;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3216[label="208.23.72.234;28pkt 28fpkt", shape=invtriangle, color=brown];
3386[label="208.23.72.234;29pkt 29fpkt", shape=invhouse, color=bisque];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 141.133.192.37:*}[62.9268%]&lt;BR/&gt;{208.28.67.74:80, *:*}[35.6098%]&lt;BR/&gt;{*:80, 141.133.192.40:*}[33.6585%]&lt;BR/&gt;{208.28.67.74:*, 141.133.192.37:*}[21.4634%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7472%)&lt;BR/&gt; 8080: (1.25285%)&lt;BR/&gt; 3076: (0.569476%)&lt;BR/&gt; 3065: (0.569476%)&lt;BR/&gt; 3053: (0.569476%)&gt;];
}
952--2163[label="1;133pkt 133fpkt"];
952--2255[label="0.0075188;1pkt 1fpkt"];
952--2257[label="0.037594;5pkt 5fpkt"];
952--2267[label="0.037594;5pkt 5fpkt"];
952--2274[label="0.037594;5pkt 5fpkt"];
952--2541[label="0.0131579;1pkt 1fpkt"];
952--2871[label="0.655172;19pkt 19fpkt"];
952--2877[label="0.733333;11pkt 11fpkt"];
952--3039[label="0.012987;1pkt 1fpkt"];
952--3216[label="0.678571;19pkt 19fpkt"];
952--3386[label="0.655172;19pkt 19fpkt"];
1648--2871[label="0.344828;10pkt 10fpkt"];
1648--2877[label="0.266667;4pkt 4fpkt"];
1648--3216[label="0.321429;9pkt 9fpkt"];
1648--3386[label="0.344828;10pkt 10fpkt"];
2163--2255[label="0.0075188;1pkt 1fpkt"];
2163--2257[label="0.037594;5pkt 5fpkt"];
2163--2267[label="0.037594;5pkt 5fpkt"];
2163--2274[label="0.037594;5pkt 5fpkt"];
2163--2541[label="0.0131579;1pkt 1fpkt"];
2163--2871[label="0.655172;19pkt 19fpkt"];
2163--2877[label="0.733333;11pkt 11fpkt"];
2163--3039[label="0.012987;1pkt 1fpkt"];
2163--3216[label="0.678571;19pkt 19fpkt"];
2163--3386[label="0.655172;19pkt 19fpkt"];
2871--3216[label="1;28pkt 28fpkt"];
2871--3386[label="1;29pkt 29fpkt"];
3216--3386[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.192.37" src_ip="208.28.67.74"/>
      <filter src_ip="208.28.67.74" src_port="80"/>
      <filter dst_ip="141.133.192.37" src_port="80"/>
      <filter dst_ip="141.133.192.40" src_port="80"/>
    </slice>
    <from sec="1031547841" usec="0"/>
    <to sec="1031548634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.836843,2.02787,503,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
503[label="136.65.1.134;s;26pkt 26fpkt", shape=diamond, color=yellow];
596[label="141.133.202.40;s;18pkt 18fpkt", shape=diamond, color=yellow];
1949[label="141.133.202.40;s;15pkt 15fpkt", shape=hexagon, color=black];
2063[label="136.65.1.134;s;26pkt 26fpkt", shape=hexagon, color=black];
3272[label="141.133.202.40;21pkt 21fpkt", shape=invhouse, color=bisque];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.1.134:*, 213.73.3.242:80}[51.0638%]&lt;BR/&gt;{141.133.202.40:*, 153.9.48.211:80}[21.2766%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.1698%)&lt;BR/&gt; 61206: (2.83019%)&lt;BR/&gt; 61202: (2.83019%)&lt;BR/&gt; 61200: (2.83019%)&lt;BR/&gt; 61199: (2.83019%)&gt;];
}
503--521[label="0.923077;24pkt 24fpkt"];
503--2063[label="1;26pkt 26fpkt"];
503--2258[label="0.192308;5pkt 5fpkt"];
596--714[label="1;1pkt 1fpkt"];
596--1494[label="0.555556;10pkt 10fpkt"];
596--1949[label="1;15pkt 15fpkt"];
596--2248[label="0.0555556;1pkt 1fpkt"];
596--2254[label="0.0555556;1pkt 1fpkt"];
596--2258[label="0.0555556;1pkt 1fpkt"];
596--2263[label="0.0555556;1pkt 1fpkt"];
596--2270[label="0.0555556;1pkt 1fpkt"];
596--2970[label="1;18pkt 18fpkt"];
596--3272[label="1;18pkt 18fpkt"];
1949--2248[label="0.0666667;1pkt 1fpkt"];
1949--2254[label="0.0666667;1pkt 1fpkt"];
1949--2258[label="0.0666667;1pkt 1fpkt"];
1949--2263[label="0.0666667;1pkt 1fpkt"];
1949--2270[label="0.0666667;1pkt 1fpkt"];
1949--2970[label="1;15pkt 15fpkt"];
1949--3272[label="1;15pkt 15fpkt"];
2063--2258[label="0.192308;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="213.73.3.242" dst_port="80" src_ip="136.65.1.134"/>
      <filter dst_ip="153.9.48.211" dst_port="80" src_ip="141.133.202.40"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
235[label="151.244.38.2;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.38.2:0, 44.8.62.240:0}[33.3333%]&lt;BR/&gt;{151.244.38.2:1480, 44.8.62.240:554}[33.3333%]&lt;BR/&gt;{151.244.38.2:6970, 44.8.62.240:9008}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (33.3333%)&lt;BR/&gt; 9008: (16.6667%)&lt;BR/&gt; 6970: (16.6667%)&lt;BR/&gt; 1480: (16.6667%)&lt;BR/&gt; 554: (16.6667%)&gt;];
}
235--2281[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="44.8.62.240" dst_port="9008" src_ip="151.244.38.2" src_port="6970"/>
      <filter dst_ip="44.8.62.240" dst_port="554" src_ip="151.244.38.2" src_port="1480"/>
      <filter dst_ip="44.8.62.240" src_ip="151.244.38.2"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.133.42.2"/>
    </slice>
    <from sec="1031547834" usec="0"/>
    <to sec="1031548542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.15.197.2"/>
    </slice>
    <from sec="1031547614" usec="0"/>
    <to sec="1031548658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.15.215.2"/>
    </slice>
    <from sec="1031547658" usec="0"/>
    <to sec="1031548528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.97.97.5"/>
    </slice>
    <from sec="1031547845" usec="0"/>
    <to sec="1031548659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.168.2.8"/>
    </slice>
    <from sec="1031547642" usec="0"/>
    <to sec="1031548507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.168.105.11"/>
    </slice>
    <from sec="1031547606" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649378,1.99623,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
785[label="142.191.64.12;s;4pkt 4fpkt", shape=diamond, color=yellow];
837[label="219.253.59.60;d;2pkt 2fpkt", shape=diamond, color=yellow];
2321[label="142.191.64.12;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2929[label="142.191.64.12;3pkt 3fpkt", shape=invtriangle, color=brown];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.191.64.12:3306, 219.253.59.2:1318}[25%]&lt;BR/&gt;{142.191.64.12:22, 219.253.59.57:36453}[25%]&lt;BR/&gt;{142.191.64.12:20, 219.253.59.60:36766}[25%]&lt;BR/&gt;{142.191.64.12:21, 219.253.59.60:36764}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36766: (16.6667%)&lt;BR/&gt; 36764: (16.6667%)&lt;BR/&gt; 21: (16.6667%)&lt;BR/&gt; 20: (16.6667%)&lt;BR/&gt; 3306: (12.5%)&gt;];
}
785--837[label="1;2pkt 2fpkt"];
785--2321[label="1;3pkt 3fpkt"];
785--2929[label="1;3pkt 3fpkt"];
837--2321[label="1;2pkt 2fpkt"];
837--2929[label="1;2pkt 2fpkt"];
2321--2929[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="219.253.59.60" dst_port="36764" src_ip="142.191.64.12" src_port="21"/>
      <filter dst_ip="219.253.59.60" dst_port="36766" src_ip="142.191.64.12" src_port="20"/>
      <filter dst_ip="219.253.59.57" dst_port="36453" src_ip="142.191.64.12" src_port="22"/>
      <filter dst_ip="219.253.59.2" dst_port="1318" src_ip="142.191.64.12" src_port="3306"/>
    </slice>
    <from sec="1031547602" usec="0"/>
    <to sec="1031548627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.223.206.13"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.43.191.22"/>
    </slice>
    <from sec="1031547639" usec="0"/>
    <to sec="1031547961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.93.4.23"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031547723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.201.85.30"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.10.198.30"/>
    </slice>
    <from sec="1031547875" usec="0"/>
    <to sec="1031547915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.244.20.33"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.522387,2.02397,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
650[label="136.75.78.34;s;21pkt 21fpkt", shape=diamond, color=yellow];
2379[label="136.75.78.34;28pkt 28fpkt", shape=pentagon, color=darkviolet];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.75.78.34:80, 134.89.211.104:*}[46.4286%]&lt;BR/&gt;{136.75.78.34:80, 134.89.211.64:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3426: (2.04082%)&lt;BR/&gt; 3389: (2.04082%)&lt;BR/&gt; 1594: (2.04082%)&lt;BR/&gt; 1593: (2.04082%)&gt;];
}
650--2247[label="0.380952;8pkt 8fpkt"];
650--2379[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="134.89.211.104" src_ip="136.75.78.34" src_port="80"/>
      <filter dst_ip="134.89.211.64" src_ip="136.75.78.34" src_port="80"/>
    </slice>
    <from sec="1031547608" usec="0"/>
    <to sec="1031548643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.522387,2.02397,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
279[label="44.32.49.35;s;127pkt 127fpkt", shape=diamond, color=yellow];
2381[label="44.32.49.35;123pkt 123fpkt", shape=pentagon, color=darkviolet];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.32.49.35:80, 141.133.232.38:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4899: (0.4%)&lt;BR/&gt; 4898: (0.4%)&lt;BR/&gt; 4897: (0.4%)&lt;BR/&gt; 4896: (0.4%)&gt;];
}
279--2247[label="0.15748;20pkt 20fpkt"];
279--2381[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.232.38" src_ip="44.32.49.35" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031547956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.133.8.37"/>
    </slice>
    <from sec="1031548627" usec="0"/>
    <to sec="1031548652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.217.109.37"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851534,2.00135,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_339{
style=filled;
color=gray75;
479[label="141.133.76.185;d;325pkt 325fpkt", shape=diamond, color=yellow];
2400[label="200.248.195.41;53pkt 53fpkt", shape=pentagon, color=darkviolet];
2704[label="47.196.243.164;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3129[label="47.196.243.164;10pkt 10fpkt", shape=invtriangle, color=brown];
3344[label="47.196.243.164;9pkt 9fpkt", shape=invhouse, color=bisque];
stat339[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 141.133.76.185:25}[64.2202%]&lt;BR/&gt;{*:113, 141.133.76.185:*}[31.4985%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (32.3892%)&lt;BR/&gt; 113: (15.8867%)&lt;BR/&gt; 53: (1.23153%)&lt;BR/&gt; 0: (1.23153%)&lt;BR/&gt; 4550: (0.492611%)&gt;];
}
479--2253[label="0.00307692;1pkt 1fpkt"];
479--2256[label="0.00923077;3pkt 3fpkt"];
479--2400[label="0.962264;51pkt 51fpkt"];
479--2704[label="1;9pkt 9fpkt"];
479--3129[label="1;10pkt 10fpkt"];
479--3344[label="1;9pkt 9fpkt"];
2704--3129[label="1;9pkt 9fpkt"];
2704--3344[label="1;9pkt 9fpkt"];
3129--3344[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.76.185" src_port="113"/>
      <filter dst_ip="141.133.76.185" dst_port="25"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.133.203.41"/>
    </slice>
    <from sec="1031548446" usec="0"/>
    <to sec="1031548449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
876[label="213.7.2.21;d;215pkt 215fpkt", shape=diamond, color=yellow];
1029[label="213.7.3.27;d;116pkt 116fpkt", shape=diamond, color=yellow];
1081[label="141.133.232.43;s;41pkt 41fpkt", shape=diamond, color=yellow];
1087[label="141.133.8.8;s;59pkt 59fpkt", shape=diamond, color=yellow];
1161[label="74.2.164.72;d;86pkt 86fpkt", shape=diamond, color=yellow];
1179[label="193.24.34.57;d;4pkt 4fpkt", shape=diamond, color=yellow];
1531[label="136.65.152.153;s;53pkt 53fpkt", shape=diamond, color=yellow];
1626[label="209.88.197.121;s;54pkt 54fpkt", shape=diamond, color=yellow];
1868[label="141.133.110.165;s;93pkt 93fpkt", shape=hexagon, color=black];
2180[label="141.133.232.43;s;41pkt 41fpkt", shape=hexagon, color=black];
2292[label="209.85.232.3;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2411[label="141.133.232.43;97pkt 97fpkt", shape=pentagon, color=darkviolet];
2480[label="141.133.32.74;60pkt 60fpkt", shape=pentagon, color=darkviolet];
2593[label="209.88.197.121;53pkt 53fpkt", shape=pentagon, color=darkviolet];
2679[label="136.65.152.153;53pkt 53fpkt", shape=pentagon, color=darkviolet];
2782[label="141.133.151.193;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2835[label="141.133.239.216;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3005[label="141.133.32.74;60pkt 60fpkt", shape=invtriangle, color=brown];
3174[label="141.133.151.193;16pkt 16fpkt", shape=invtriangle, color=brown];
3199[label="141.133.239.216;19pkt 19fpkt", shape=invtriangle, color=brown];
3257[label="141.133.192.20;20pkt 20fpkt", shape=invhouse, color=bisque];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 213.7.2.21:80}[25.844%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8849%)&lt;BR/&gt; 0: (1.01523%)&lt;BR/&gt; 53: (0.634518%)&lt;BR/&gt; 1863: (0.592217%)&lt;BR/&gt; 443: (0.338409%)&gt;];
}
876--1081[label="0.121951;5pkt 5fpkt"];
876--1102[label="0.0606061;10pkt 10fpkt"];
876--1145[label="0.0253165;2pkt 2fpkt"];
876--1201[label="0.0714286;10pkt 10fpkt"];
876--1568[label="0.012987;1pkt 1fpkt"];
876--1626[label="0.0185185;1pkt 1fpkt"];
876--1779[label="0.028169;4pkt 4fpkt"];
876--1812[label="0.00465116;1pkt 1fpkt"];
876--1823[label="0.027907;6pkt 6fpkt"];
876--1852[label="0.027907;6pkt 6fpkt"];
876--1892[label="0.0139535;3pkt 3fpkt"];
876--2072[label="0.0903226;14pkt 14fpkt"];
876--2088[label="0.00465116;1pkt 1fpkt"];
876--2180[label="0.121951;5pkt 5fpkt"];
876--2248[label="0.0697674;15pkt 15fpkt"];
876--2254[label="0.111628;24pkt 24fpkt"];
876--2258[label="0.0604651;13pkt 13fpkt"];
876--2263[label="0.0697674;15pkt 15fpkt"];
876--2270[label="0.0697674;15pkt 15fpkt"];
876--2292[label="0.333333;2pkt 2fpkt"];
876--2411[label="0.0927835;9pkt 9fpkt"];
876--2593[label="0.0188679;1pkt 1fpkt"];
876--2616[label="0.00465116;1pkt 1fpkt"];
876--2652[label="0.0704225;10pkt 10fpkt"];
876--2753[label="0.00930233;2pkt 2fpkt"];
876--2761[label="0.025;2pkt 2fpkt"];
876--2774[label="0.134884;29pkt 29fpkt"];
876--2782[label="0.0588235;1pkt 1fpkt"];
876--2788[label="0.00930233;2pkt 2fpkt"];
876--2839[label="0.0651163;14pkt 14fpkt"];
876--3166[label="0.0253165;2pkt 2fpkt"];
876--3174[label="0.0625;1pkt 1fpkt"];
876--3202[label="0.0651163;14pkt 14fpkt"];
876--3254[label="0.00465116;1pkt 1fpkt"];
876--3257[label="0.05;1pkt 1fpkt"];
876--3358[label="0.00930233;2pkt 2fpkt"];
876--3367[label="0.00930233;2pkt 2fpkt"];
876--3379[label="0.0651163;14pkt 14fpkt"];
1029--1066[label="0.0172414;2pkt 2fpkt"];
1029--1081[label="0.097561;4pkt 4fpkt"];
1029--1134[label="0.00934579;1pkt 1fpkt"];
1029--1791[label="0.0172414;2pkt 2fpkt"];
1029--1868[label="0.0537634;5pkt 5fpkt"];
1029--1883[label="0.0172414;2pkt 2fpkt"];
1029--1892[label="0.0344828;4pkt 4fpkt"];
1029--2149[label="1;116pkt 116fpkt"];
1029--2180[label="0.097561;4pkt 4fpkt"];
1029--2248[label="0.0431034;5pkt 5fpkt"];
1029--2254[label="0.0517241;6pkt 6fpkt"];
1029--2258[label="0.0862069;10pkt 10fpkt"];
1029--2263[label="0.0431034;5pkt 5fpkt"];
1029--2270[label="0.0431034;5pkt 5fpkt"];
1029--2309[label="0.0258621;3pkt 3fpkt"];
1029--2411[label="0.0412371;4pkt 4fpkt"];
1029--2450[label="0.272727;6pkt 6fpkt"];
1029--2480[label="0.0666667;4pkt 4fpkt"];
1029--2709[label="0.0775862;9pkt 9fpkt"];
1029--2835[label="0.473684;9pkt 9fpkt"];
1029--3005[label="0.0666667;4pkt 4fpkt"];
1029--3199[label="0.473684;9pkt 9fpkt"];
1081--1179[label="0.25;1pkt 1fpkt"];
1081--1497[label="0.0487805;2pkt 2fpkt"];
1081--2149[label="0.097561;4pkt 4fpkt"];
1081--2180[label="1;41pkt 41fpkt"];
1081--2411[label="0.97561;40pkt 40fpkt"];
1087--1179[label="0.25;1pkt 1fpkt"];
1087--1359[label="0.0508475;3pkt 3fpkt"];
1087--1787[label="0.0847458;5pkt 5fpkt"];
1161--1320[label="0.111111;1pkt 1fpkt"];
1161--1531[label="0.0566038;3pkt 3fpkt"];
1161--1626[label="0.0185185;1pkt 1fpkt"];
1161--1791[label="0.0581395;5pkt 5fpkt"];
1161--1815[label="0.137931;8pkt 8fpkt"];
1161--1823[label="0.0348837;3pkt 3fpkt"];
1161--1892[label="0.0232558;2pkt 2fpkt"];
1161--2215[label="0.0888889;4pkt 4fpkt"];
1161--2254[label="0.0697674;6pkt 6fpkt"];
1161--2258[label="0.0116279;1pkt 1fpkt"];
1161--2407[label="0.166667;4pkt 4fpkt"];
1161--2593[label="0.0188679;1pkt 1fpkt"];
1161--2679[label="0.0566038;3pkt 3fpkt"];
1161--2793[label="0.0348837;3pkt 3fpkt"];
1161--2975[label="0.166667;4pkt 4fpkt"];
1179--1302[label="0.5;2pkt 2fpkt"];
1179--2180[label="0.25;1pkt 1fpkt"];
1179--2805[label="0.5;2pkt 2fpkt"];
1531--2679[label="0.981132;52pkt 52fpkt"];
1626--2258[label="0.166667;9pkt 9fpkt"];
1626--2593[label="1;53pkt 53fpkt"];
1868--2149[label="0.0537634;5pkt 5fpkt"];
1868--2248[label="0.172043;16pkt 16fpkt"];
1868--2253[label="0.0537634;5pkt 5fpkt"];
1868--2254[label="0.215054;20pkt 20fpkt"];
1868--2263[label="0.172043;16pkt 16fpkt"];
1868--2270[label="0.172043;16pkt 16fpkt"];
1868--2709[label="0.989247;92pkt 92fpkt"];
2180--2411[label="0.97561;40pkt 40fpkt"];
2480--3005[label="1;60pkt 60fpkt"];
2782--3174[label="1;16pkt 16fpkt"];
2835--3199[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="213.7.2.21" dst_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.117.246.51"/>
    </slice>
    <from sec="1031548434" usec="0"/>
    <to sec="1031548468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649378,1.99623,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
1287[label="75.158.55.89;d;40pkt 40fpkt", shape=diamond, color=yellow];
1289[label="74.2.161.33;d;50pkt 50fpkt", shape=diamond, color=yellow];
2377[label="209.88.8.34;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2548[label="136.65.49.99;26pkt 26fpkt", shape=pentagon, color=darkviolet];
2960[label="209.88.8.34;19pkt 19fpkt", shape=invtriangle, color=brown];
3042[label="136.65.49.99;26pkt 26fpkt", shape=invtriangle, color=brown];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 74.2.161.33:25}[37.8788%]&lt;BR/&gt;{*:*, 75.158.55.89:25}[30.303%]&lt;BR/&gt;{164.15.206.101:*, *:25}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (31.8436%)&lt;BR/&gt; 53: (13.4078%)&lt;BR/&gt; 36392: (10.0559%)&lt;BR/&gt; 113: (3.91061%)&lt;BR/&gt; 0: (1.11732%)&gt;];
}
1287--1685[label="0.025;1pkt 1fpkt"];
1287--1749[label="0.25;10pkt 10fpkt"];
1287--1980[label="0.075;3pkt 3fpkt"];
1287--2099[label="1;40pkt 40fpkt"];
1287--2213[label="0.025;1pkt 1fpkt"];
1287--2365[label="0.25;10pkt 10fpkt"];
1287--2683[label="0.025;1pkt 1fpkt"];
1287--3242[label="0.0689655;2pkt 2fpkt"];
1289--1510[label="0.28;14pkt 14fpkt"];
1289--1685[label="0.02;1pkt 1fpkt"];
1289--1749[label="0.02;1pkt 1fpkt"];
1289--1913[label="0.02;1pkt 1fpkt"];
1289--2160[label="1;50pkt 50fpkt"];
1289--2213[label="0.02;1pkt 1fpkt"];
1289--2365[label="0.02;1pkt 1fpkt"];
1289--2377[label="0.111111;2pkt 2fpkt"];
1289--2548[label="0.0384615;1pkt 1fpkt"];
1289--2683[label="0.02;1pkt 1fpkt"];
1289--2960[label="0.105263;2pkt 2fpkt"];
1289--3042[label="0.0384615;1pkt 1fpkt"];
2377--2960[label="1;18pkt 18fpkt"];
2548--3042[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="164.15.206.101"/>
      <filter dst_ip="74.2.161.33" dst_port="25"/>
      <filter dst_ip="75.158.55.89" dst_port="25"/>
    </slice>
    <from sec="1031547604" usec="0"/>
    <to sec="1031548668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.33.82.53"/>
    </slice>
    <from sec="1031548071" usec="0"/>
    <to sec="1031548080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.254.6.54"/>
    </slice>
    <from sec="1031547837" usec="0"/>
    <to sec="1031548663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.108.171.61"/>
    </slice>
    <from sec="1031547875" usec="0"/>
    <to sec="1031548350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.2.103.67"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.97.102.71"/>
    </slice>
    <from sec="1031547662" usec="0"/>
    <to sec="1031547665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.133.130.71"/>
    </slice>
    <from sec="1031547872" usec="0"/>
    <to sec="1031548007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.52.72"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.252.134.72"/>
    </slice>
    <from sec="1031548672" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.47.69.74"/>
    </slice>
    <from sec="1031547694" usec="0"/>
    <to sec="1031547703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.195.93.74"/>
    </slice>
    <from sec="1031547607" usec="0"/>
    <to sec="1031548657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.84.162.75"/>
    </slice>
    <from sec="1031547604" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.133.137.76"/>
    </slice>
    <from sec="1031547834" usec="0"/>
    <to sec="1031548646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649378,1.99623,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_357{
style=filled;
color=gray75;
265[label="136.65.198.9;d;2pkt 2fpkt", shape=diamond, color=yellow];
266[label="201.20.34.78;s;2pkt 2fpkt", shape=diamond, color=yellow];
2495[label="201.20.34.78;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3012[label="201.20.34.78;1pkt 1fpkt", shape=invtriangle, color=brown];
stat357[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.20.34.78:7070, 136.65.198.9:1059}[50%]&lt;BR/&gt;{201.20.34.78:46053, 136.65.198.9:6970}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7070: (28.5714%)&lt;BR/&gt; 1059: (28.5714%)&lt;BR/&gt; 46053: (21.4286%)&lt;BR/&gt; 6970: (21.4286%)&gt;];
}
265--266[label="1;2pkt 2fpkt"];
265--2495[label="1;2pkt 2fpkt"];
265--3012[label="1;1pkt 1fpkt"];
266--2495[label="1;2pkt 2fpkt"];
266--3012[label="1;1pkt 1fpkt"];
2495--3012[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.198.9" dst_port="6970" src_ip="201.20.34.78" src_port="46053"/>
      <filter dst_ip="136.65.198.9" dst_port="1059" src_ip="201.20.34.78" src_port="7070"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.115.178.81"/>
    </slice>
    <from sec="1031547751" usec="0"/>
    <to sec="1031548504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23757,1.95444,011,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_359{
style=filled;
color=gray75;
346[label="209.85.229.203;s;25pkt 25fpkt", shape=diamond, color=yellow];
1202[label="204.101.72.37;d;234pkt 234fpkt", shape=diamond, color=yellow];
1226[label="209.85.227.0;s;51pkt 51fpkt", shape=diamond, color=yellow];
1916[label="209.85.229.203;s;18pkt 18fpkt", shape=hexagon, color=black];
1936[label="204.101.72.37;d;234pkt 234fpkt", shape=hexagon, color=black];
2220[label="204.101.72.37;d;234pkt 234fpkt", shape=polygon, color=gold];
2804[label="209.85.229.203;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2826[label="209.85.253.211;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3193[label="209.85.253.211;18pkt 18fpkt", shape=invtriangle, color=brown];
stat359[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:111, 204.101.72.37:*}[63.354%]&lt;BR/&gt;{*:0, *:0}[35.4037%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 111: (36.1727%)&lt;BR/&gt; 0: (26.2544%)&lt;BR/&gt; 4904: (0.350058%)&lt;BR/&gt; 1558: (0.350058%)&lt;BR/&gt; 968: (0.350058%)&gt;];
}
346--748[label="0.04;1pkt 1fpkt"];
346--1202[label="0.08;2pkt 2fpkt"];
346--1916[label="1;18pkt 18fpkt"];
346--1936[label="0.08;2pkt 2fpkt"];
346--2220[label="0.08;2pkt 2fpkt"];
346--2804[label="1;24pkt 24fpkt"];
1202--1226[label="0.0588235;3pkt 3fpkt"];
1202--1252[label="0.00854701;2pkt 2fpkt"];
1202--1427[label="0.00534759;1pkt 1fpkt"];
1202--1663[label="0.0042735;1pkt 1fpkt"];
1202--1871[label="0.0103093;1pkt 1fpkt"];
1202--1916[label="0.111111;2pkt 2fpkt"];
1202--1936[label="1;234pkt 234fpkt"];
1202--1955[label="0.0042735;1pkt 1fpkt"];
1202--1974[label="0.0042735;1pkt 1fpkt"];
1202--1976[label="0.00854701;2pkt 2fpkt"];
1202--2074[label="0.0042735;1pkt 1fpkt"];
1202--2088[label="0.0042735;1pkt 1fpkt"];
1202--2107[label="0.00534759;1pkt 1fpkt"];
1202--2187[label="0.0042735;1pkt 1fpkt"];
1202--2220[label="1;234pkt 234fpkt"];
1202--2463[label="0.0042735;1pkt 1fpkt"];
1202--2486[label="0.00854701;2pkt 2fpkt"];
1202--2511[label="0.0833333;1pkt 1fpkt"];
1202--2540[label="0.0106383;1pkt 1fpkt"];
1202--2654[label="0.0042735;1pkt 1fpkt"];
1202--2788[label="0.0042735;1pkt 1fpkt"];
1202--2804[label="0.0833333;2pkt 2fpkt"];
1202--2826[label="0.105263;2pkt 2fpkt"];
1202--2846[label="0.0588235;2pkt 2fpkt"];
1202--2996[label="0.0042735;1pkt 1fpkt"];
1202--3009[label="0.00854701;2pkt 2fpkt"];
1202--3100[label="0.0042735;1pkt 1fpkt"];
1202--3193[label="0.111111;2pkt 2fpkt"];
1202--3254[label="0.0042735;1pkt 1fpkt"];
1202--3367[label="0.0042735;1pkt 1fpkt"];
1226--1936[label="0.0588235;3pkt 3fpkt"];
1226--2220[label="0.0588235;3pkt 3fpkt"];
1916--1936[label="0.111111;2pkt 2fpkt"];
1916--2220[label="0.111111;2pkt 2fpkt"];
1916--2804[label="1;18pkt 18fpkt"];
1936--1955[label="0.0042735;1pkt 1fpkt"];
1936--1974[label="0.0042735;1pkt 1fpkt"];
1936--1976[label="0.00854701;2pkt 2fpkt"];
1936--2074[label="0.0042735;1pkt 1fpkt"];
1936--2088[label="0.0042735;1pkt 1fpkt"];
1936--2107[label="0.00534759;1pkt 1fpkt"];
1936--2187[label="0.0042735;1pkt 1fpkt"];
1936--2220[label="1;234pkt 234fpkt"];
1936--2463[label="0.0042735;1pkt 1fpkt"];
1936--2486[label="0.00854701;2pkt 2fpkt"];
1936--2511[label="0.0833333;1pkt 1fpkt"];
1936--2540[label="0.0106383;1pkt 1fpkt"];
1936--2654[label="0.0042735;1pkt 1fpkt"];
1936--2788[label="0.0042735;1pkt 1fpkt"];
1936--2804[label="0.0833333;2pkt 2fpkt"];
1936--2826[label="0.105263;2pkt 2fpkt"];
1936--2846[label="0.0588235;2pkt 2fpkt"];
1936--2996[label="0.0042735;1pkt 1fpkt"];
1936--3009[label="0.00854701;2pkt 2fpkt"];
1936--3100[label="0.0042735;1pkt 1fpkt"];
1936--3193[label="0.111111;2pkt 2fpkt"];
1936--3254[label="0.0042735;1pkt 1fpkt"];
1936--3367[label="0.0042735;1pkt 1fpkt"];
2220--2463[label="0.0042735;1pkt 1fpkt"];
2220--2486[label="0.00854701;2pkt 2fpkt"];
2220--2511[label="0.0833333;1pkt 1fpkt"];
2220--2540[label="0.0106383;1pkt 1fpkt"];
2220--2654[label="0.0042735;1pkt 1fpkt"];
2220--2788[label="0.0042735;1pkt 1fpkt"];
2220--2804[label="0.0833333;2pkt 2fpkt"];
2220--2826[label="0.105263;2pkt 2fpkt"];
2220--2846[label="0.0588235;2pkt 2fpkt"];
2220--2996[label="0.0042735;1pkt 1fpkt"];
2220--3009[label="0.00854701;2pkt 2fpkt"];
2220--3100[label="0.0042735;1pkt 1fpkt"];
2220--3193[label="0.111111;2pkt 2fpkt"];
2220--3254[label="0.0042735;1pkt 1fpkt"];
2220--3367[label="0.0042735;1pkt 1fpkt"];
2826--3193[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="204.101.72.37" src_port="111"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851534,2.00135,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_360{
style=filled;
color=gray75;
630[label="136.181.241.83;s;677pkt 677fpkt", shape=diamond, color=yellow];
2514[label="136.181.241.83;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3024[label="136.181.241.83;4pkt 4fpkt", shape=invtriangle, color=brown];
3295[label="136.181.241.83;4pkt 4fpkt", shape=invhouse, color=bisque];
stat360[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.181.241.83:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
630--748[label="0.0263158;1pkt 1fpkt"];
630--1773[label="1;461pkt 461fpkt"];
630--2514[label="0.25;1pkt 1fpkt"];
630--3024[label="0.25;1pkt 1fpkt"];
630--3295[label="0.25;1pkt 1fpkt"];
2514--3024[label="1;4pkt 4fpkt"];
2514--3295[label="1;4pkt 4fpkt"];
3024--3295[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="136.181.241.83"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07263,1.92615,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
26[label="209.85.201.85s;1pkt 1fpkt", shape=rectangle, color=red];
1383[label="75.155.47.66;d;89pkt 89fpkt", shape=diamond, color=yellow];
1391[label="209.85.201.85;s;76pkt 76fpkt", shape=diamond, color=yellow];
1819[label="151.244.6.61;s;77pkt 77fpkt", shape=hexagon, color=black];
2518[label="209.85.201.85;85pkt 85fpkt", shape=pentagon, color=darkviolet];
3026[label="209.85.201.85;86pkt 86fpkt", shape=invtriangle, color=brown];
3296[label="209.85.201.85;86pkt 86fpkt", shape=invhouse, color=bisque];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.6.61:80, *:*}[44.1964%]&lt;BR/&gt;{209.85.201.85:80, *:*}[38.3929%]&lt;BR/&gt;{*:80, 75.155.47.66:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3%)&lt;BR/&gt; 1159: (0.8%)&lt;BR/&gt; 1158: (0.8%)&lt;BR/&gt; 1157: (0.7%)&lt;BR/&gt; 50352: (0.5%)&gt;];
}
26--2518[label="1;1pkt 1fpkt"];
26--3026[label="1;1pkt 1fpkt"];
26--3296[label="1;1pkt 1fpkt"];
1383--1391[label="0.105263;8pkt 8fpkt"];
1383--1819[label="0.25974;20pkt 20fpkt"];
1383--2247[label="0.0674157;6pkt 6fpkt"];
1383--2255[label="0.0449438;4pkt 4fpkt"];
1383--2257[label="0.0561798;5pkt 5fpkt"];
1383--2267[label="0.0561798;5pkt 5fpkt"];
1383--2274[label="0.0561798;5pkt 5fpkt"];
1383--2518[label="0.0941176;8pkt 8fpkt"];
1383--3026[label="0.0930233;8pkt 8fpkt"];
1383--3296[label="0.0930233;8pkt 8fpkt"];
1391--2247[label="0.0263158;2pkt 2fpkt"];
1391--2255[label="0.144737;11pkt 11fpkt"];
1391--2257[label="0.171053;13pkt 13fpkt"];
1391--2267[label="0.171053;13pkt 13fpkt"];
1391--2274[label="0.171053;13pkt 13fpkt"];
1391--2518[label="0.986842;75pkt 75fpkt"];
1391--3026[label="1;76pkt 76fpkt"];
1391--3296[label="1;76pkt 76fpkt"];
1819--2247[label="0.0779221;6pkt 6fpkt"];
2518--3026[label="1;85pkt 85fpkt"];
2518--3296[label="1;85pkt 85fpkt"];
3026--3296[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter src_ip="151.244.6.61" src_port="80"/>
      <filter src_ip="209.85.201.85" src_port="80"/>
      <filter dst_ip="75.155.47.66" src_port="80"/>
    </slice>
    <from sec="1031547603" usec="0"/>
    <to sec="1031548591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.15.207.88"/>
    </slice>
    <from sec="1031547611" usec="0"/>
    <to sec="1031548670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.179.97.92"/>
    </slice>
    <from sec="1031547648" usec="0"/>
    <to sec="1031548662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.8.69.95"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759148,2.02903,020,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_365{
style=filled;
color=gray75;
402[label="209.140.167.95;s;29pkt 29fpkt", shape=diamond, color=yellow];
2543[label="209.140.167.95;38pkt 38fpkt", shape=pentagon, color=darkviolet];
3303[label="209.140.167.95;38pkt 38fpkt", shape=invhouse, color=bisque];
stat365[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.140.167.95:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
402--2543[label="1;29pkt 29fpkt"];
402--3303[label="1;29pkt 29fpkt"];
2543--3303[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter src_ip="209.140.167.95"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.522387,2.02397,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_366{
style=filled;
color=gray75;
1248[label="151.244.64.99;s;54pkt 54fpkt", shape=diamond, color=yellow];
1525[label="75.246.36.149;d;2pkt 2fpkt", shape=diamond, color=yellow];
2549[label="151.244.64.99;64pkt 64fpkt", shape=pentagon, color=darkviolet];
stat366[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.64.99:7390, *:*}[40.625%]&lt;BR/&gt;{151.244.64.99:1214, *:*}[34.375%]&lt;BR/&gt;{151.244.64.99:*, *:1214}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (27.9167%)&lt;BR/&gt; 7390: (20.4167%)&lt;BR/&gt; 0: (1.66667%)&lt;BR/&gt; 2492: (1.25%)&lt;BR/&gt; 2479: (1.25%)&gt;];
}
1248--1525[label="1;2pkt 2fpkt"];
1248--2549[label="1;54pkt 54fpkt"];
1525--2549[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="151.244.64.99" src_port="7390"/>
      <filter src_ip="151.244.64.99" src_port="1214"/>
      <filter dst_port="1214" src_ip="151.244.64.99"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.929753,1.95491,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
789[label="208.78.234.39;d;110pkt 110fpkt", shape=diamond, color=yellow];
1461[label="204.43.84.100;s;12pkt 12fpkt", shape=diamond, color=yellow];
1813[label="219.161.212.153;s;43pkt 43fpkt", shape=hexagon, color=black];
2046[label="141.133.199.18;d;178pkt 178fpkt", shape=hexagon, color=black];
2369[label="75.131.241.30;16pkt 16fpkt", shape=pentagon, color=darkviolet];
2505[label="54.94.63.81;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2552[label="204.43.84.100;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2957[label="75.131.241.30;17pkt 17fpkt", shape=invtriangle, color=brown];
3017[label="54.94.63.81;11pkt 11fpkt", shape=invtriangle, color=brown];
3293[label="54.94.63.81;10pkt 10fpkt", shape=invhouse, color=bisque];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 141.133.199.18:54039}[40.8284%]&lt;BR/&gt;{*:*, 208.78.234.39:80}[20.4142%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (31.2649%)&lt;BR/&gt; 80: (18.1384%)&lt;BR/&gt; 54039: (17.0644%)&lt;BR/&gt; 32778: (5.01193%)&lt;BR/&gt; 0: (1.90931%)&gt;];
}
789--1001[label="0.0588235;1pkt 1fpkt"];
789--1247[label="0.0322581;1pkt 1fpkt"];
789--1461[label="0.666667;8pkt 8fpkt"];
789--1813[label="0.0232558;1pkt 1fpkt"];
789--2248[label="0.0727273;8pkt 8fpkt"];
789--2254[label="0.0363636;4pkt 4fpkt"];
789--2258[label="0.0454545;5pkt 5fpkt"];
789--2263[label="0.0727273;8pkt 8fpkt"];
789--2266[label="0.0909091;10pkt 10fpkt"];
789--2270[label="0.0727273;8pkt 8fpkt"];
789--2273[label="0.0909091;10pkt 10fpkt"];
789--2299[label="0.0166667;1pkt 1fpkt"];
789--2369[label="0.75;12pkt 12fpkt"];
789--2505[label="1;10pkt 10fpkt"];
789--2552[label="0.583333;7pkt 7fpkt"];
789--2587[label="0.777778;14pkt 14fpkt"];
789--2917[label="0.0169492;1pkt 1fpkt"];
789--2957[label="0.764706;13pkt 13fpkt"];
789--3017[label="1;11pkt 11fpkt"];
789--3065[label="0.764706;13pkt 13fpkt"];
789--3241[label="0.0169492;1pkt 1fpkt"];
789--3293[label="1;10pkt 10fpkt"];
1461--2258[label="0.333333;4pkt 4fpkt"];
1461--2552[label="0.916667;11pkt 11fpkt"];
1813--1943[label="0.0465116;2pkt 2fpkt"];
1813--1959[label="0.5;1pkt 1fpkt"];
1813--2046[label="0.0232558;1pkt 1fpkt"];
1813--2199[label="0.0232558;1pkt 1fpkt"];
1813--2224[label="0.0465116;2pkt 2fpkt"];
1813--2251[label="0.0232558;1pkt 1fpkt"];
1813--2253[label="0.0232558;1pkt 1fpkt"];
1813--2256[label="0.0232558;1pkt 1fpkt"];
1813--2260[label="0.0232558;1pkt 1fpkt"];
1813--2266[label="0.116279;5pkt 5fpkt"];
1813--2273[label="0.116279;5pkt 5fpkt"];
2046--2253[label="0.0337079;6pkt 6fpkt"];
2046--2256[label="0.0505618;9pkt 9fpkt"];
2046--2266[label="0.129213;23pkt 23fpkt"];
2046--2273[label="0.129213;23pkt 23fpkt"];
2046--2299[label="0.0166667;1pkt 1fpkt"];
2046--2364[label="0.0555556;1pkt 1fpkt"];
2046--2497[label="0.0263158;1pkt 1fpkt"];
2046--2726[label="0.0188679;1pkt 1fpkt"];
2046--2917[label="0.0169492;1pkt 1fpkt"];
2046--2955[label="0.0555556;1pkt 1fpkt"];
2046--3144[label="0.0188679;1pkt 1fpkt"];
2046--3241[label="0.0169492;1pkt 1fpkt"];
2046--3350[label="0.0185185;1pkt 1fpkt"];
2369--2957[label="1;16pkt 16fpkt"];
2505--3017[label="1;10pkt 10fpkt"];
2505--3293[label="1;10pkt 10fpkt"];
3017--3293[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="208.78.234.39" dst_port="80"/>
      <filter dst_ip="141.133.199.18" dst_port="54039" src_port="53"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.26.163.105"/>
    </slice>
    <from sec="1031547668" usec="0"/>
    <to sec="1031548116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.89.197.105"/>
    </slice>
    <from sec="1031547712" usec="0"/>
    <to sec="1031548671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.108.29.110"/>
    </slice>
    <from sec="1031547761" usec="0"/>
    <to sec="1031548124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.522387,2.02397,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
443[label="215.6.200.117;s;6pkt 6fpkt", shape=diamond, color=yellow];
895[label="141.133.20.186;d;24pkt 24fpkt", shape=diamond, color=yellow];
1550[label="215.6.200.100;s;2pkt 2fpkt", shape=diamond, color=yellow];
2588[label="215.6.200.117;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 141.133.20.186:*}[54.1667%]&lt;BR/&gt;{215.6.200.117:*, 141.133.20.186:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (17.5676%)&lt;BR/&gt; 554: (14.8649%)&lt;BR/&gt; 6970: (13.5135%)&lt;BR/&gt; 15654: (4.05405%)&lt;BR/&gt; 11200: (4.05405%)&gt;];
}
443--895[label="1;6pkt 6fpkt"];
443--2588[label="1;5pkt 5fpkt"];
895--1550[label="1;2pkt 2fpkt"];
895--2588[label="1;5pkt 5fpkt"];
895--2642[label="0.166667;4pkt 4fpkt"];
895--3094[label="0.166667;4pkt 4fpkt"];
895--3327[label="0.166667;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.20.186" src_ip="215.6.200.117"/>
      <filter dst_ip="141.133.20.186" src_port="80"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.39.192.132"/>
    </slice>
    <from sec="1031548410" usec="0"/>
    <to sec="1031548600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,053,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.97.118.133"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07263,1.92615,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_374{
style=filled;
color=gray75;
45[label="205.46.204.130s;1pkt 1fpkt", shape=rectangle, color=red];
51[label="205.46.204.141s;3pkt 3fpkt", shape=rectangle, color=red];
534[label="44.197.5.242;s;399pkt 399fpkt", shape=diamond, color=yellow];
539[label="209.88.196.132;d;217pkt 217fpkt", shape=diamond, color=yellow];
688[label="205.46.204.130;s;42pkt 42fpkt", shape=diamond, color=yellow];
696[label="205.46.204.134;s;38pkt 38fpkt", shape=diamond, color=yellow];
845[label="162.73.118.85;d;107pkt 107fpkt", shape=diamond, color=yellow];
846[label="205.46.204.128;s;40pkt 40fpkt", shape=diamond, color=yellow];
849[label="205.46.204.138;s;49pkt 49fpkt", shape=diamond, color=yellow];
939[label="205.46.204.132;s;23pkt 23fpkt", shape=diamond, color=yellow];
1057[label="205.46.204.137;s;35pkt 35fpkt", shape=diamond, color=yellow];
1058[label="205.46.204.141;s;30pkt 30fpkt", shape=diamond, color=yellow];
1059[label="205.46.204.129;s;11pkt 11fpkt", shape=diamond, color=yellow];
1090[label="208.78.229.161;d;172pkt 172fpkt", shape=diamond, color=yellow];
1290[label="141.133.205.30;d;16pkt 16fpkt", shape=diamond, color=yellow];
1430[label="141.133.219.79;d;9pkt 9fpkt", shape=diamond, color=yellow];
1538[label="136.87.155.180;d;38pkt 38fpkt", shape=diamond, color=yellow];
1789[label="205.46.204.130;s;23pkt 23fpkt", shape=hexagon, color=black];
1877[label="209.140.164.80;d;25pkt 25fpkt", shape=hexagon, color=black];
1881[label="205.46.204.132;s;18pkt 18fpkt", shape=hexagon, color=black];
1914[label="136.65.53.57;d;16pkt 16fpkt", shape=hexagon, color=black];
1924[label="209.88.196.132;d;217pkt 217fpkt", shape=hexagon, color=black];
2167[label="208.78.229.161;d;173pkt 173fpkt", shape=hexagon, color=black];
2172[label="136.87.155.180;d;38pkt 38fpkt", shape=hexagon, color=black];
2352[label="207.101.203.25;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2625[label="205.46.204.134;39pkt 39fpkt", shape=pentagon, color=darkviolet];
2633[label="205.46.204.137;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2858[label="146.34.100.230;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2949[label="207.101.203.25;3pkt 3fpkt", shape=invtriangle, color=brown];
3084[label="205.46.204.134;40pkt 40fpkt", shape=invtriangle, color=brown];
3259[label="207.101.203.25;3pkt 3fpkt", shape=invhouse, color=bisque];
3317[label="205.46.204.129;20pkt 20fpkt", shape=invhouse, color=bisque];
stat374[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.197.5.242:*, 136.65.168.162:80}[23.6246%]&lt;BR/&gt;{*:*, 209.88.196.132:80}[23.4088%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4485%)&lt;BR/&gt; 53: (0.49895%)&lt;BR/&gt; 32871: (0.262605%)&lt;BR/&gt; 60191: (0.131303%)&lt;BR/&gt; 58477: (0.131303%)&gt;];
}
45--688[label="1;1pkt 1fpkt"];
45--1430[label="1;1pkt 1fpkt"];
51--1058[label="1;3pkt 3fpkt"];
51--1430[label="1;3pkt 3fpkt"];
51--2258[label="0.333333;1pkt 1fpkt"];
534--831[label="0.037037;1pkt 1fpkt"];
534--1090[label="0.784884;135pkt 135fpkt"];
534--1538[label="0.657895;25pkt 25fpkt"];
534--1877[label="0.04;1pkt 1fpkt"];
534--2167[label="0.780347;135pkt 135fpkt"];
534--2172[label="0.657895;25pkt 25fpkt"];
534--2248[label="0.0250627;10pkt 10fpkt"];
534--2258[label="0.0701754;28pkt 28fpkt"];
534--2263[label="0.0250627;10pkt 10fpkt"];
534--2270[label="0.0250627;10pkt 10fpkt"];
539--688[label="0.357143;15pkt 15fpkt"];
539--696[label="0.684211;26pkt 26fpkt"];
539--846[label="0.325;13pkt 13fpkt"];
539--849[label="0.102041;5pkt 5fpkt"];
539--939[label="0.478261;11pkt 11fpkt"];
539--1057[label="0.142857;5pkt 5fpkt"];
539--1058[label="0.166667;5pkt 5fpkt"];
539--1059[label="0.0909091;1pkt 1fpkt"];
539--1789[label="0.565217;13pkt 13fpkt"];
539--1881[label="0.611111;11pkt 11fpkt"];
539--1924[label="1;217pkt 217fpkt"];
539--2254[label="0.00460829;1pkt 1fpkt"];
539--2625[label="0.666667;26pkt 26fpkt"];
539--2633[label="0.147059;5pkt 5fpkt"];
539--2890[label="0.617512;134pkt 134fpkt"];
539--3084[label="0.65;26pkt 26fpkt"];
539--3226[label="0.617512;134pkt 134fpkt"];
539--3317[label="0.05;1pkt 1fpkt"];
539--3319[label="0.037037;1pkt 1fpkt"];
688--831[label="0.148148;4pkt 4fpkt"];
688--845[label="0.190476;8pkt 8fpkt"];
688--1090[label="0.047619;2pkt 2fpkt"];
688--1290[label="0.0625;1pkt 1fpkt"];
688--1430[label="0.111111;1pkt 1fpkt"];
688--1538[label="0.0263158;1pkt 1fpkt"];
688--1789[label="1;23pkt 23fpkt"];
688--1877[label="0.16;4pkt 4fpkt"];
688--1924[label="0.357143;15pkt 15fpkt"];
688--2167[label="0.047619;2pkt 2fpkt"];
688--2172[label="0.0263158;1pkt 1fpkt"];
688--2254[label="0.0238095;1pkt 1fpkt"];
688--2258[label="0.047619;2pkt 2fpkt"];
696--1090[label="0.0263158;1pkt 1fpkt"];
696--1290[label="0.1875;3pkt 3fpkt"];
696--1924[label="0.684211;26pkt 26fpkt"];
696--2167[label="0.0263158;1pkt 1fpkt"];
696--2258[label="0.105263;4pkt 4fpkt"];
696--2625[label="0.973684;37pkt 37fpkt"];
696--3084[label="1;38pkt 38fpkt"];
845--846[label="0.3;12pkt 12fpkt"];
845--849[label="0.22449;11pkt 11fpkt"];
845--904[label="0.308411;33pkt 33fpkt"];
845--939[label="0.0869565;2pkt 2fpkt"];
845--1057[label="0.342857;12pkt 12fpkt"];
845--1058[label="0.366667;11pkt 11fpkt"];
845--1059[label="0.636364;7pkt 7fpkt"];
845--1789[label="0.26087;6pkt 6fpkt"];
845--1881[label="0.111111;2pkt 2fpkt"];
845--2254[label="0.046729;5pkt 5fpkt"];
845--2258[label="0.0934579;10pkt 10fpkt"];
845--2633[label="0.352941;12pkt 12fpkt"];
845--2893[label="0.308411;33pkt 33fpkt"];
845--3228[label="0.308411;33pkt 33fpkt"];
845--3317[label="0.45;9pkt 9fpkt"];
845--3319[label="0.333333;9pkt 9fpkt"];
846--1090[label="0.025;1pkt 1fpkt"];
846--1538[label="0.0263158;1pkt 1fpkt"];
846--1738[label="0.025;1pkt 1fpkt"];
846--1877[label="0.04;1pkt 1fpkt"];
846--1924[label="0.325;13pkt 13fpkt"];
846--2167[label="0.025;1pkt 1fpkt"];
846--2172[label="0.0263158;1pkt 1fpkt"];
846--2254[label="0.025;1pkt 1fpkt"];
846--2258[label="0.05;2pkt 2fpkt"];
849--1090[label="0.102041;5pkt 5fpkt"];
849--1290[label="0.125;2pkt 2fpkt"];
849--1538[label="0.0789474;3pkt 3fpkt"];
849--1914[label="0.625;10pkt 10fpkt"];
849--1924[label="0.102041;5pkt 5fpkt"];
849--2167[label="0.102041;5pkt 5fpkt"];
849--2172[label="0.0789474;3pkt 3fpkt"];
849--2258[label="0.102041;5pkt 5fpkt"];
939--1090[label="0.130435;3pkt 3fpkt"];
939--1290[label="0.0625;1pkt 1fpkt"];
939--1538[label="0.0434783;1pkt 1fpkt"];
939--1881[label="1;18pkt 18fpkt"];
939--1924[label="0.478261;11pkt 11fpkt"];
939--2167[label="0.130435;3pkt 3fpkt"];
939--2172[label="0.0434783;1pkt 1fpkt"];
939--2258[label="0.0869565;2pkt 2fpkt"];
1057--1090[label="0.114286;4pkt 4fpkt"];
1057--1738[label="0.0285714;1pkt 1fpkt"];
1057--1877[label="0.08;2pkt 2fpkt"];
1057--1924[label="0.142857;5pkt 5fpkt"];
1057--2167[label="0.114286;4pkt 4fpkt"];
1057--2254[label="0.0285714;1pkt 1fpkt"];
1057--2258[label="0.0571429;2pkt 2fpkt"];
1057--2633[label="1;34pkt 34fpkt"];
1058--1090[label="0.0333333;1pkt 1fpkt"];
1058--1430[label="0.444444;4pkt 4fpkt"];
1058--1538[label="0.0666667;2pkt 2fpkt"];
1058--1877[label="0.12;3pkt 3fpkt"];
1058--1924[label="0.166667;5pkt 5fpkt"];
1058--2167[label="0.0333333;1pkt 1fpkt"];
1058--2172[label="0.0666667;2pkt 2fpkt"];
1058--2254[label="0.0333333;1pkt 1fpkt"];
1058--2258[label="0.1;3pkt 3fpkt"];
1059--1090[label="0.181818;2pkt 2fpkt"];
1059--1924[label="0.0909091;1pkt 1fpkt"];
1059--2167[label="0.181818;2pkt 2fpkt"];
1059--3317[label="1;11pkt 11fpkt"];
1090--1881[label="0.111111;2pkt 2fpkt"];
1090--2167[label="1;172pkt 172fpkt"];
1090--2258[label="0.0174419;3pkt 3fpkt"];
1090--2352[label="0.666667;2pkt 2fpkt"];
1090--2625[label="0.025641;1pkt 1fpkt"];
1090--2633[label="0.117647;4pkt 4fpkt"];
1090--2858[label="0.318182;7pkt 7fpkt"];
1090--2949[label="0.666667;2pkt 2fpkt"];
1090--3084[label="0.025;1pkt 1fpkt"];
1090--3259[label="0.666667;2pkt 2fpkt"];
1090--3317[label="0.1;2pkt 2fpkt"];
1090--3319[label="0.222222;6pkt 6fpkt"];
1290--2258[label="0.625;10pkt 10fpkt"];
1290--2625[label="0.125;2pkt 2fpkt"];
1290--2890[label="0.125;2pkt 2fpkt"];
1290--3080[label="0.5;1pkt 1fpkt"];
1290--3084[label="0.1875;3pkt 3fpkt"];
1290--3226[label="0.0625;1pkt 1fpkt"];
1290--3317[label="0.0625;1pkt 1fpkt"];
1290--3319[label="0.0625;1pkt 1fpkt"];
1430--2253[label="0.111111;1pkt 1fpkt"];
1430--2256[label="0.111111;1pkt 1fpkt"];
1430--2258[label="0.111111;1pkt 1fpkt"];
1430--2890[label="0.111111;1pkt 1fpkt"];
1430--3226[label="0.111111;1pkt 1fpkt"];
1538--2172[label="1;38pkt 38fpkt"];
1538--2258[label="0.368421;14pkt 14fpkt"];
1538--3317[label="0.05;1pkt 1fpkt"];
1789--1877[label="0.173913;4pkt 4fpkt"];
1789--1924[label="0.565217;13pkt 13fpkt"];
1789--2254[label="0.0434783;1pkt 1fpkt"];
1877--2266[label="0.12;3pkt 3fpkt"];
1877--2273[label="0.12;3pkt 3fpkt"];
1877--2299[label="0.04;1pkt 1fpkt"];
1877--2497[label="0.04;1pkt 1fpkt"];
1877--2633[label="0.08;2pkt 2fpkt"];
1877--2917[label="0.04;1pkt 1fpkt"];
1877--3241[label="0.04;1pkt 1fpkt"];
1881--1924[label="0.611111;11pkt 11fpkt"];
1881--2167[label="0.111111;2pkt 2fpkt"];
1924--2254[label="0.00460829;1pkt 1fpkt"];
1924--2625[label="0.666667;26pkt 26fpkt"];
1924--2633[label="0.147059;5pkt 5fpkt"];
1924--2890[label="0.617512;134pkt 134fpkt"];
1924--3084[label="0.65;26pkt 26fpkt"];
1924--3226[label="0.617512;134pkt 134fpkt"];
1924--3317[label="0.05;1pkt 1fpkt"];
1924--3319[label="0.037037;1pkt 1fpkt"];
2167--2248[label="0.00578035;1pkt 1fpkt"];
2167--2258[label="0.017341;3pkt 3fpkt"];
2167--2263[label="0.00578035;1pkt 1fpkt"];
2167--2270[label="0.00578035;1pkt 1fpkt"];
2167--2352[label="0.666667;2pkt 2fpkt"];
2167--2625[label="0.025641;1pkt 1fpkt"];
2167--2633[label="0.117647;4pkt 4fpkt"];
2167--2858[label="0.318182;7pkt 7fpkt"];
2167--2949[label="0.666667;2pkt 2fpkt"];
2167--3084[label="0.025;1pkt 1fpkt"];
2167--3259[label="0.666667;2pkt 2fpkt"];
2167--3317[label="0.1;2pkt 2fpkt"];
2167--3319[label="0.222222;6pkt 6fpkt"];
2172--2258[label="0.368421;14pkt 14fpkt"];
2172--3317[label="0.05;1pkt 1fpkt"];
2352--2949[label="1;3pkt 3fpkt"];
2352--3259[label="1;3pkt 3fpkt"];
2625--3084[label="1;39pkt 39fpkt"];
2949--3259[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.88.196.132" dst_port="80"/>
      <filter dst_ip="136.65.168.162" dst_port="80" src_ip="44.197.5.242"/>
    </slice>
    <from sec="1031547602" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.224.50.136"/>
    </slice>
    <from sec="1031548377" usec="0"/>
    <to sec="1031548670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.133.133.138"/>
    </slice>
    <from sec="1031547782" usec="0"/>
    <to sec="1031548384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.24.31.150"/>
    </slice>
    <from sec="1031547612" usec="0"/>
    <to sec="1031548671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.73.164.150"/>
    </slice>
    <from sec="1031547605" usec="0"/>
    <to sec="1031548669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.133.74.151"/>
    </slice>
    <from sec="1031548138" usec="0"/>
    <to sec="1031548347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649378,1.99623,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
1652[label="162.73.89.152;s;90pkt 90fpkt", shape=diamond, color=yellow];
2675[label="162.73.89.152;90pkt 90fpkt", shape=pentagon, color=darkviolet];
3114[label="162.73.89.152;89pkt 89fpkt", shape=invtriangle, color=brown];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.89.152:*, 193.182.179.142:80}[84.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49339: (0.557621%)&lt;BR/&gt; 49338: (0.557621%)&lt;BR/&gt; 49337: (0.557621%)&lt;BR/&gt; 49336: (0.557621%)&gt;];
}
1652--2675[label="1;90pkt 90fpkt"];
1652--3114[label="1;89pkt 89fpkt"];
2675--3114[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_ip="193.182.179.142" dst_port="80" src_ip="162.73.89.152"/>
    </slice>
    <from sec="1031548513" usec="0"/>
    <to sec="1031548601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.92.230.159"/>
    </slice>
    <from sec="1031547904" usec="0"/>
    <to sec="1031547923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.220.0.161"/>
    </slice>
    <from sec="1031548565" usec="0"/>
    <to sec="1031548573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.43.69.163"/>
    </slice>
    <from sec="1031548550" usec="0"/>
    <to sec="1031548559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.66.169"/>
    </slice>
    <from sec="1031548575" usec="0"/>
    <to sec="1031548641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_385{
style=filled;
color=gray75;
351[label="141.133.133.169;s;8pkt 8fpkt", shape=diamond, color=yellow];
1888[label="141.133.133.169;s;8pkt 8fpkt", shape=hexagon, color=black];
2719[label="141.133.133.169;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat385[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.133.169:*, 206.193.11.119:80}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49194: (5.55556%)&lt;BR/&gt; 49193: (5.55556%)&lt;BR/&gt; 49191: (5.55556%)&lt;BR/&gt; 49190: (5.55556%)&gt;];
}
351--520[label="0.875;7pkt 7fpkt"];
351--1888[label="1;8pkt 8fpkt"];
351--2719[label="0.875;7pkt 7fpkt"];
1888--2719[label="0.875;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="206.193.11.119" dst_port="80" src_ip="141.133.133.169"/>
    </slice>
    <from sec="1031547608" usec="0"/>
    <to sec="1031548136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.244.82.174"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.222.141.177"/>
    </slice>
    <from sec="1031547870" usec="0"/>
    <to sec="1031547891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.66.245.178"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851534,2.00135,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
812[label="141.133.148.242;d;361pkt 361fpkt", shape=diamond, color=yellow];
1650[label="213.129.233.120;s;10pkt 10fpkt", shape=diamond, color=yellow];
2395[label="213.129.237.38;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2441[label="72.172.49.60;23pkt 23fpkt", shape=pentagon, color=darkviolet];
2742[label="213.129.232.177;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2747[label="74.118.76.180;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2902[label="213.129.250.251;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3154[label="213.129.232.177;11pkt 11fpkt", shape=invtriangle, color=brown];
3274[label="72.172.49.48;2pkt 2fpkt", shape=invhouse, color=bisque];
3357[label="213.129.232.177;11pkt 11fpkt", shape=invhouse, color=bisque];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 141.133.148.242:*}[90.4145%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7103%)&lt;BR/&gt; 81: (1.28968%)&lt;BR/&gt; 2754: (0.396825%)&lt;BR/&gt; 2729: (0.396825%)&lt;BR/&gt; 2726: (0.396825%)&gt;];
}
812--1650[label="1;10pkt 10fpkt"];
812--2247[label="0.0387812;14pkt 14fpkt"];
812--2255[label="0.0609418;22pkt 22fpkt"];
812--2257[label="0.0221607;8pkt 8fpkt"];
812--2267[label="0.0221607;8pkt 8fpkt"];
812--2274[label="0.0221607;8pkt 8fpkt"];
812--2395[label="0.441176;15pkt 15fpkt"];
812--2441[label="1;23pkt 23fpkt"];
812--2742[label="1;11pkt 11fpkt"];
812--2747[label="1;20pkt 20fpkt"];
812--2767[label="0.125;7pkt 7fpkt"];
812--2902[label="0.714286;15pkt 15fpkt"];
812--3154[label="1;11pkt 11fpkt"];
812--3274[label="1;2pkt 2fpkt"];
812--3357[label="1;11pkt 11fpkt"];
2742--3154[label="1;11pkt 11fpkt"];
2742--3357[label="1;11pkt 11fpkt"];
3154--3357[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.148.242" src_port="80"/>
    </slice>
    <from sec="1031547608" usec="0"/>
    <to sec="1031548646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.88.77.183"/>
    </slice>
    <from sec="1031548227" usec="0"/>
    <to sec="1031548242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.850001,2.02701,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_391{
style=filled;
color=gray75;
135[label="141.133.74.184s;9pkt 9fpkt", shape=rectangle, color=red];
2755[label="141.133.74.184;57pkt 57fpkt", shape=pentagon, color=darkviolet];
3161[label="141.133.74.184;56pkt 56fpkt", shape=invtriangle, color=brown];
stat391[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.74.184:*, 75.97.116.247:80}[49.1228%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1803%)&lt;BR/&gt; 1234: (1.22951%)&lt;BR/&gt; 1233: (1.22951%)&lt;BR/&gt; 1230: (1.22951%)&lt;BR/&gt; 1218: (1.22951%)&gt;];
}
135--2755[label="1;9pkt 9fpkt"];
135--3161[label="1;9pkt 9fpkt"];
2755--3161[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="75.97.116.247" dst_port="80" src_ip="141.133.74.184"/>
    </slice>
    <from sec="1031548624" usec="0"/>
    <to sec="1031548655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="10.0.13.187"/>
    </slice>
    <from sec="1031547612" usec="0"/>
    <to sec="1031548671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.115.39.189"/>
    </slice>
    <from sec="1031547848" usec="0"/>
    <to sec="1031548527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.78.234.190"/>
    </slice>
    <from sec="1031548478" usec="0"/>
    <to sec="1031548662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.74724,2.09747,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_395{
style=filled;
color=gray75;
102[label="206.193.11.119d;1pkt 1fpkt", shape=rectangle, color=red];
stat395[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.133.169:49227, 206.193.11.119:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49227: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
102--520[label="1;1pkt 1fpkt"];
102--2254[label="1;1pkt 1fpkt"];
102--2719[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.193.11.119" dst_port="80" src_ip="141.133.133.169" src_port="49227"/>
    </slice>
    <from sec="1031547734" usec="0"/>
    <to sec="1031547761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.208.138.192"/>
    </slice>
    <from sec="1031548550" usec="0"/>
    <to sec="1031548587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.210.238.192"/>
    </slice>
    <from sec="1031548533" usec="0"/>
    <to sec="1031548566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.757428,2.05434,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_398{
style=filled;
color=gray75;
68[label="72.172.10.193s;2pkt 2fpkt", shape=rectangle, color=red];
2779[label="72.172.10.193;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat398[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.172.10.193:80, 162.73.36.165:3079}[50%]&lt;BR/&gt;{72.172.10.193:80, 162.73.36.165:3080}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3080: (33.3333%)&lt;BR/&gt; 3079: (16.6667%)&gt;];
}
68--2779[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.36.165" dst_port="3080" src_ip="72.172.10.193" src_port="80"/>
      <filter dst_ip="162.73.36.165" dst_port="3079" src_ip="72.172.10.193" src_port="80"/>
    </slice>
    <from sec="1031548560" usec="0"/>
    <to sec="1031548612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.88.12.194"/>
    </slice>
    <from sec="1031547606" usec="0"/>
    <to sec="1031548665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_400{
style=filled;
color=gray75;
381[label="136.87.57.245;d;214pkt 214fpkt", shape=diamond, color=yellow];
1944[label="136.87.57.245;d;189pkt 189fpkt", shape=hexagon, color=black];
2787[label="205.49.131.195;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat400[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1214, 136.87.57.245:*}[84.1121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (48.6386%)&lt;BR/&gt; 0: (2.47525%)&lt;BR/&gt; 2298: (0.371287%)&lt;BR/&gt; 14398: (0.247525%)&lt;BR/&gt; 13869: (0.247525%)&gt;];
}
381--1944[label="1;189pkt 189fpkt"];
381--2787[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.87.57.245" src_port="1214"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.65.182.198"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.248.3.199"/>
    </slice>
    <from sec="1031548518" usec="0"/>
    <to sec="1031548641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.88.12.203"/>
    </slice>
    <from sec="1031547924" usec="0"/>
    <to sec="1031548670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.125.211.204"/>
    </slice>
    <from sec="1031547998" usec="0"/>
    <to sec="1031548454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.133.239.204"/>
    </slice>
    <from sec="1031548166" usec="0"/>
    <to sec="1031548390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_406{
style=filled;
color=gray75;
992[label="193.180.25.25;d;2pkt 2fpkt", shape=diamond, color=yellow];
993[label="162.73.80.205;s;37pkt 37fpkt", shape=diamond, color=yellow];
1899[label="193.180.25.25;d;2pkt 2fpkt", shape=hexagon, color=black];
2812[label="162.73.80.205;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat406[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.80.205:*, 213.7.31.31:80}[42.1053%]&lt;BR/&gt;{162.73.80.205:*, 74.2.135.135:80}[39.4737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 2562: (7.95455%)&lt;BR/&gt; 3937: (4.54545%)&lt;BR/&gt; 6667: (3.40909%)&lt;BR/&gt; 3790: (3.40909%)&gt;];
}
992--993[label="1;2pkt 2fpkt"];
992--1899[label="1;2pkt 2fpkt"];
992--2812[label="0.5;1pkt 1fpkt"];
993--1899[label="1;2pkt 2fpkt"];
993--2248[label="0.027027;1pkt 1fpkt"];
993--2258[label="0.162162;6pkt 6fpkt"];
993--2263[label="0.027027;1pkt 1fpkt"];
993--2270[label="0.027027;1pkt 1fpkt"];
993--2812[label="0.666667;2pkt 2fpkt"];
1899--2812[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.7.31.31" dst_port="80" src_ip="162.73.80.205"/>
      <filter dst_ip="74.2.135.135" dst_port="80" src_ip="162.73.80.205"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.89.205"/>
    </slice>
    <from sec="1031547606" usec="0"/>
    <to sec="1031548673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.8.202.207"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851534,2.00135,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_409{
style=filled;
color=gray75;
1336[label="47.201.75.209;s;2pkt 2fpkt", shape=diamond, color=yellow];
1447[label="209.88.192.186;d;6pkt 6fpkt", shape=diamond, color=yellow];
2657[label="221.9.250.147;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2818[label="47.201.75.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3103[label="221.9.250.147;4pkt 4fpkt", shape=invtriangle, color=brown];
3188[label="47.201.75.209;1pkt 1fpkt", shape=invtriangle, color=brown];
3375[label="47.201.75.209;1pkt 1fpkt", shape=invhouse, color=bisque];
stat409[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.9.250.147:21, 209.88.192.186:*}[33.3333%]&lt;BR/&gt;{47.201.75.209:*, 209.88.192.186:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (21.0526%)&lt;BR/&gt; 63709: (13.1579%)&lt;BR/&gt; 1218: (13.1579%)&lt;BR/&gt; 15085: (7.89474%)&lt;BR/&gt; 5333: (7.89474%)&gt;];
}
1336--1447[label="1;2pkt 2fpkt"];
1336--2818[label="1;1pkt 1fpkt"];
1336--3188[label="1;1pkt 1fpkt"];
1336--3375[label="1;1pkt 1fpkt"];
1447--2272[label="0.166667;1pkt 1fpkt"];
1447--2657[label="1;4pkt 4fpkt"];
1447--2818[label="1;1pkt 1fpkt"];
1447--3103[label="1;4pkt 4fpkt"];
1447--3188[label="1;1pkt 1fpkt"];
1447--3375[label="1;1pkt 1fpkt"];
2657--3103[label="1;4pkt 4fpkt"];
2818--3188[label="1;1pkt 1fpkt"];
2818--3375[label="1;1pkt 1fpkt"];
3188--3375[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.88.192.186" src_ip="47.201.75.209"/>
      <filter dst_ip="209.88.192.186" src_ip="221.9.250.147" src_port="21"/>
    </slice>
    <from sec="1031548226" usec="0"/>
    <to sec="1031548338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.15.222.210"/>
    </slice>
    <from sec="1031547708" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.213.129.212"/>
    </slice>
    <from sec="1031547603" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.191.64.215"/>
    </slice>
    <from sec="1031548169" usec="0"/>
    <to sec="1031548194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.191.64.218"/>
    </slice>
    <from sec="1031548547" usec="0"/>
    <to sec="1031548555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.127.32.222"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.244.38.224"/>
    </slice>
    <from sec="1031547617" usec="0"/>
    <to sec="1031548629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.2.60.224"/>
    </slice>
    <from sec="1031547713" usec="0"/>
    <to sec="1031548670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.244.215.235"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.133.74.237"/>
    </slice>
    <from sec="1031548000" usec="0"/>
    <to sec="1031548036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.133.138.237"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.133.73.238"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536286,2.08133,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.83.201.242"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851534,2.00135,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
212[label="2.53.147.210;d;1pkt 1fpkt", shape=diamond, color=yellow];
383[label="151.244.38.243;s;2pkt 2fpkt", shape=diamond, color=yellow];
2891[label="151.244.38.243;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3227[label="151.244.38.243;2pkt 2fpkt", shape=invtriangle, color=brown];
3393[label="151.244.38.243;2pkt 2fpkt", shape=invhouse, color=bisque];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.38.243:1053, 75.111.20.159:5190}[50%]&lt;BR/&gt;{151.244.38.243:27960, 2.53.147.210:27961}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27961: (31.25%)&lt;BR/&gt; 27960: (31.25%)&lt;BR/&gt; 5190: (18.75%)&lt;BR/&gt; 1053: (18.75%)&gt;];
}
212--383[label="1;1pkt 1fpkt"];
212--2891[label="1;1pkt 1fpkt"];
212--3227[label="1;1pkt 1fpkt"];
212--3393[label="1;1pkt 1fpkt"];
383--2891[label="1;1pkt 1fpkt"];
383--3227[label="1;2pkt 2fpkt"];
383--3393[label="1;2pkt 2fpkt"];
2891--3227[label="1;1pkt 1fpkt"];
2891--3393[label="1;1pkt 1fpkt"];
3227--3393[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="2.53.147.210" dst_port="27961" src_ip="151.244.38.243" src_port="27960"/>
      <filter dst_ip="75.111.20.159" dst_port="5190" src_ip="151.244.38.243" src_port="1053"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.642043,1.97806,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
236[label="151.244.233.245;s;1585pkt 1585fpkt", shape=diamond, color=yellow];
400[label="86.149.253.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
404[label="76.90.34.44;d;1pkt 1fpkt", shape=diamond, color=yellow];
437[label="205.22.188.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
440[label="86.220.42.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
583[label="44.221.219.181;d;2pkt 2fpkt", shape=diamond, color=yellow];
588[label="214.217.165.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
609[label="76.94.185.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
632[label="47.228.107.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
1185[label="74.78.193.177;d;2pkt 2fpkt", shape=diamond, color=yellow];
1377[label="150.112.37.113;d;1pkt 1fpkt", shape=diamond, color=yellow];
1521[label="131.213.30.56;d;2pkt 2fpkt", shape=diamond, color=yellow];
1850[label="76.94.185.51;d;1pkt 1fpkt", shape=hexagon, color=black];
1896[label="214.217.165.247;d;1pkt 1fpkt", shape=hexagon, color=black];
2896[label="151.244.233.245;1625pkt 1625fpkt", shape=pentagon, color=darkviolet];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.233.245:6257, *:6257}[94.7757%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (95.3038%)&lt;BR/&gt; 8888: (0.852449%)&lt;BR/&gt; 6699: (0.790453%)&lt;BR/&gt; 6565: (0.185989%)&lt;BR/&gt; 16257: (0.123993%)&gt;];
}
236--400[label="1;1pkt 1fpkt"];
236--404[label="1;1pkt 1fpkt"];
236--437[label="1;1pkt 1fpkt"];
236--440[label="1;1pkt 1fpkt"];
236--583[label="1;2pkt 2fpkt"];
236--588[label="1;1pkt 1fpkt"];
236--609[label="1;1pkt 1fpkt"];
236--632[label="1;1pkt 1fpkt"];
236--1185[label="1;2pkt 2fpkt"];
236--1377[label="1;1pkt 1fpkt"];
236--1482[label="0.5;1pkt 1fpkt"];
236--1521[label="0.5;1pkt 1fpkt"];
236--1850[label="1;1pkt 1fpkt"];
236--1896[label="1;1pkt 1fpkt"];
236--2254[label="0.000630915;1pkt 1fpkt"];
236--2896[label="0.999369;1584pkt 1584fpkt"];
400--2896[label="1;1pkt 1fpkt"];
404--2896[label="1;1pkt 1fpkt"];
437--2896[label="1;1pkt 1fpkt"];
440--2896[label="1;1pkt 1fpkt"];
583--2896[label="1;2pkt 2fpkt"];
588--1896[label="1;1pkt 1fpkt"];
588--2896[label="1;1pkt 1fpkt"];
609--1850[label="1;1pkt 1fpkt"];
609--2896[label="1;1pkt 1fpkt"];
632--2896[label="1;1pkt 1fpkt"];
1185--2896[label="1;2pkt 2fpkt"];
1377--2896[label="1;1pkt 1fpkt"];
1521--2011[label="0.5;1pkt 1fpkt"];
1521--2896[label="0.5;1pkt 1fpkt"];
1850--2896[label="1;1pkt 1fpkt"];
1896--2896[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="151.244.233.245" src_port="6257"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_424{
style=filled;
color=gray75;
2277[label="10.16.0.1;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2909[label="10.16.0.1;5pkt 5fpkt", shape=invtriangle, color=brown];
stat424[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.16.0.1:0, 173.44.232.2:0}[20%]&lt;BR/&gt;{10.16.0.1:0, 192.168.0.3:0}[20%]&lt;BR/&gt;{10.16.0.1:0, 173.44.162.155:0}[20%]&lt;BR/&gt;{10.16.0.1:0, 173.44.38.183:0}[20%]&lt;BR/&gt;{10.16.0.1:0, 173.44.80.249:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2277--2909[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="173.44.80.249" src_ip="10.16.0.1"/>
      <filter dst_ip="173.44.38.183" src_ip="10.16.0.1"/>
      <filter dst_ip="173.44.162.155" src_ip="10.16.0.1"/>
      <filter dst_ip="192.168.0.3" src_ip="10.16.0.1"/>
      <filter dst_ip="173.44.232.2" src_ip="10.16.0.1"/>
    </slice>
    <from sec="1031547602" usec="0"/>
    <to sec="1031548673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_425{
style=filled;
color=gray75;
2294[label="151.244.169.4;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2913[label="151.244.169.4;3pkt 3fpkt", shape=invtriangle, color=brown];
stat425[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.169.4:1038, 75.97.96.203:1863}[33.3333%]&lt;BR/&gt;{151.244.169.4:1095, 75.97.96.82:1863}[33.3333%]&lt;BR/&gt;{151.244.169.4:1096, 75.97.96.82:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1096: (16.6667%)&lt;BR/&gt; 1095: (16.6667%)&lt;BR/&gt; 1038: (16.6667%)&gt;];
}
2294--2913[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="75.97.96.82" dst_port="1863" src_ip="151.244.169.4" src_port="1096"/>
      <filter dst_ip="75.97.96.82" dst_port="1863" src_ip="151.244.169.4" src_port="1095"/>
      <filter dst_ip="75.97.96.203" dst_port="1863" src_ip="151.244.169.4" src_port="1038"/>
    </slice>
    <from sec="1031547760" usec="0"/>
    <to sec="1031548631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_426{
style=filled;
color=gray75;
2307[label="141.133.193.8;29pkt 29fpkt", shape=pentagon, color=darkviolet];
2922[label="141.133.193.8;29pkt 29fpkt", shape=invtriangle, color=brown];
3245[label="141.133.193.8;29pkt 29fpkt", shape=invhouse, color=bisque];
stat426[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.193.8:*, 193.187.17.202:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1715: (1.72414%)&lt;BR/&gt; 1714: (1.72414%)&lt;BR/&gt; 1713: (1.72414%)&lt;BR/&gt; 1704: (1.72414%)&gt;];
}
2307--2922[label="1;29pkt 29fpkt"];
2307--3245[label="1;29pkt 29fpkt"];
2922--3245[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="193.187.17.202" dst_port="80" src_ip="141.133.193.8"/>
    </slice>
    <from sec="1031547992" usec="0"/>
    <to sec="1031548043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_427{
style=filled;
color=gray75;
2313[label="164.15.205.10;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2924[label="164.15.205.10;4pkt 4fpkt", shape=invtriangle, color=brown];
stat427[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.15.205.10:1315, 72.31.2.112:443}[25%]&lt;BR/&gt;{164.15.205.10:1347, 72.31.2.112:443}[25%]&lt;BR/&gt;{164.15.205.10:1314, 193.47.51.171:443}[25%]&lt;BR/&gt;{164.15.205.10:1345, 193.47.51.171:443}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1347: (14.2857%)&lt;BR/&gt; 1345: (14.2857%)&lt;BR/&gt; 1315: (14.2857%)&lt;BR/&gt; 1314: (7.14286%)&gt;];
}
2313--2924[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.47.51.171" dst_port="443" src_ip="164.15.205.10" src_port="1345"/>
      <filter dst_ip="193.47.51.171" dst_port="443" src_ip="164.15.205.10" src_port="1314"/>
      <filter dst_ip="72.31.2.112" dst_port="443" src_ip="164.15.205.10" src_port="1347"/>
      <filter dst_ip="72.31.2.112" dst_port="443" src_ip="164.15.205.10" src_port="1315"/>
    </slice>
    <from sec="1031548553" usec="0"/>
    <to sec="1031548636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851534,2.00135,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_428{
style=filled;
color=gray75;
1153[label="136.134.92.11;s;40pkt 40fpkt", shape=diamond, color=yellow];
2316[label="136.134.92.11;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2925[label="136.134.92.11;41pkt 41fpkt", shape=invtriangle, color=brown];
3247[label="136.134.92.11;42pkt 42fpkt", shape=invhouse, color=bisque];
stat428[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.134.92.11:*, 207.104.150.154:80}[23.8095%]&lt;BR/&gt;{136.134.92.11:*, 207.104.150.149:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7879%)&lt;BR/&gt; 4338: (1.21212%)&lt;BR/&gt; 1863: (1.21212%)&lt;BR/&gt; 1509: (1.21212%)&lt;BR/&gt; 1504: (1.21212%)&gt;];
}
1153--2248[label="0.05;2pkt 2fpkt"];
1153--2254[label="0.075;3pkt 3fpkt"];
1153--2263[label="0.05;2pkt 2fpkt"];
1153--2270[label="0.05;2pkt 2fpkt"];
1153--2316[label="1;40pkt 40fpkt"];
1153--2925[label="0.975;39pkt 39fpkt"];
1153--3247[label="1;40pkt 40fpkt"];
2316--2925[label="1;41pkt 41fpkt"];
2316--3247[label="1;42pkt 42fpkt"];
2925--3247[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="207.104.150.154" dst_port="80" src_ip="136.134.92.11"/>
      <filter dst_ip="207.104.150.149" dst_port="80" src_ip="136.134.92.11"/>
    </slice>
    <from sec="1031547632" usec="0"/>
    <to sec="1031548577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
2320[label="54.67.40.12;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2928[label="54.67.40.12;21pkt 21fpkt", shape=invtriangle, color=brown];
3249[label="54.67.40.12;21pkt 21fpkt", shape=invhouse, color=bisque];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.67.40.12:110, 141.133.242.238:*}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (35.7143%)&lt;BR/&gt; 22: (7.14286%)&lt;BR/&gt; 80: (4.7619%)&lt;BR/&gt; 0: (4.7619%)&lt;BR/&gt; 14939: (2.38095%)&gt;];
}
2320--2928[label="1;21pkt 21fpkt"];
2320--3249[label="1;21pkt 21fpkt"];
2928--3249[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.242.238" src_ip="54.67.40.12" src_port="110"/>
    </slice>
    <from sec="1031547637" usec="0"/>
    <to sec="1031548577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_430{
style=filled;
color=gray75;
2322[label="141.133.129.12;23pkt 23fpkt", shape=pentagon, color=darkviolet];
2930[label="141.133.129.12;24pkt 24fpkt", shape=invtriangle, color=brown];
3250[label="141.133.129.12;23pkt 23fpkt", shape=invhouse, color=bisque];
stat430[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.129.12:*, 221.242.134.200:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1219: (2.14286%)&lt;BR/&gt; 1218: (2.14286%)&lt;BR/&gt; 1217: (2.14286%)&lt;BR/&gt; 1216: (2.14286%)&gt;];
}
2322--2930[label="1;23pkt 23fpkt"];
2322--3250[label="1;23pkt 23fpkt"];
2930--3250[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="221.242.134.200" dst_port="80" src_ip="141.133.129.12"/>
    </slice>
    <from sec="1031548161" usec="0"/>
    <to sec="1031548236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.223.206.13"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_432{
style=filled;
color=gray75;
2330[label="213.7.2.17;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2936[label="213.7.2.17;2pkt 2fpkt", shape=invtriangle, color=brown];
stat432[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.2.17:80, 141.133.232.10:1666}[50%]&lt;BR/&gt;{213.7.2.17:80, 208.78.245.82:1358}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1666: (25%)&lt;BR/&gt; 1358: (25%)&gt;];
}
2330--2936[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.78.245.82" dst_port="1358" src_ip="213.7.2.17" src_port="80"/>
      <filter dst_ip="141.133.232.10" dst_port="1666" src_ip="213.7.2.17" src_port="80"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_433{
style=filled;
color=gray75;
2338[label="205.213.145.20;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2941[label="205.213.145.20;4pkt 4fpkt", shape=invtriangle, color=brown];
3256[label="205.213.145.20;4pkt 4fpkt", shape=invhouse, color=bisque];
stat433[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.213.145.20:80, 141.133.197.76:2002}[25%]&lt;BR/&gt;{205.213.145.20:80, 141.133.197.76:2003}[25%]&lt;BR/&gt;{205.213.145.20:80, 141.133.197.76:2004}[25%]&lt;BR/&gt;{205.213.145.20:80, 141.133.197.76:2005}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2005: (13.6364%)&lt;BR/&gt; 2004: (13.6364%)&lt;BR/&gt; 2003: (13.6364%)&lt;BR/&gt; 2002: (9.09091%)&gt;];
}
2338--2941[label="1;3pkt 3fpkt"];
2338--3256[label="1;3pkt 3fpkt"];
2941--3256[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.197.76" dst_port="2005" src_ip="205.213.145.20" src_port="80"/>
      <filter dst_ip="141.133.197.76" dst_port="2004" src_ip="205.213.145.20" src_port="80"/>
      <filter dst_ip="141.133.197.76" dst_port="2003" src_ip="205.213.145.20" src_port="80"/>
      <filter dst_ip="141.133.197.76" dst_port="2002" src_ip="205.213.145.20" src_port="80"/>
    </slice>
    <from sec="1031547849" usec="0"/>
    <to sec="1031547994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_434{
style=filled;
color=gray75;
2341[label="201.184.227.21;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2943[label="201.184.227.21;4pkt 4fpkt", shape=invtriangle, color=brown];
stat434[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.184.227.21:80, 162.73.86.1:1492}[20%]&lt;BR/&gt;{201.184.227.21:80, 162.73.86.1:1495}[20%]&lt;BR/&gt;{201.184.227.21:80, 162.73.86.1:1497}[20%]&lt;BR/&gt;{201.184.227.21:80, 162.73.86.1:1499}[20%]&lt;BR/&gt;{201.184.227.21:80, 162.73.86.1:1501}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1501: (11.1111%)&lt;BR/&gt; 1499: (11.1111%)&lt;BR/&gt; 1497: (11.1111%)&lt;BR/&gt; 1495: (11.1111%)&gt;];
}
2341--2943[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.86.1" dst_port="1501" src_ip="201.184.227.21" src_port="80"/>
      <filter dst_ip="162.73.86.1" dst_port="1499" src_ip="201.184.227.21" src_port="80"/>
      <filter dst_ip="162.73.86.1" dst_port="1497" src_ip="201.184.227.21" src_port="80"/>
      <filter dst_ip="162.73.86.1" dst_port="1495" src_ip="201.184.227.21" src_port="80"/>
      <filter dst_ip="162.73.86.1" dst_port="1492" src_ip="201.184.227.21" src_port="80"/>
    </slice>
    <from sec="1031548382" usec="0"/>
    <to sec="1031548405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649378,1.99623,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_435{
style=filled;
color=gray75;
1571[label="136.65.7.25;d;23pkt 23fpkt", shape=diamond, color=yellow];
2346[label="195.149.82.23;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2945[label="195.149.82.23;5pkt 5fpkt", shape=invtriangle, color=brown];
stat435[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.65.7.25:7743}[56.5217%]&lt;BR/&gt;{*:7743, 136.65.7.25:*}[30.4348%]&lt;BR/&gt;{195.149.82.23:*, 136.65.7.25:*}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (45.5882%)&lt;BR/&gt; 3054: (4.41176%)&lt;BR/&gt; 3044: (4.41176%)&lt;BR/&gt; 2039: (4.41176%)&lt;BR/&gt; 2005: (4.41176%)&gt;];
}
1571--2346[label="1;6pkt 6fpkt"];
1571--2945[label="1;5pkt 5fpkt"];
2346--2945[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.7.25" src_ip="195.149.82.23"/>
      <filter dst_ip="136.65.7.25" src_port="7743"/>
      <filter dst_ip="136.65.7.25" dst_port="7743"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851534,2.00135,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_436{
style=filled;
color=gray75;
338[label="193.180.129.27;s;42pkt 42fpkt", shape=diamond, color=yellow];
813[label="141.133.232.157;d;226pkt 226fpkt", shape=diamond, color=yellow];
937[label="136.65.198.188;d;53pkt 53fpkt", shape=diamond, color=yellow];
2360[label="193.180.129.27;54pkt 54fpkt", shape=pentagon, color=darkviolet];
2483[label="213.129.237.74;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2724[label="193.180.129.171;96pkt 96fpkt", shape=pentagon, color=darkviolet];
2953[label="193.180.129.27;54pkt 54fpkt", shape=invtriangle, color=brown];
3006[label="213.129.237.74;18pkt 18fpkt", shape=invtriangle, color=brown];
3263[label="193.180.129.27;54pkt 54fpkt", shape=invhouse, color=bisque];
3288[label="213.129.237.74;18pkt 18fpkt", shape=invhouse, color=bisque];
stat436[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 141.133.232.157:*}[65.4354%]&lt;BR/&gt;{193.180.129.171:80, *:*}[26.6491%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6044%)&lt;BR/&gt; 1474: (0.632911%)&lt;BR/&gt; 1496: (0.474684%)&lt;BR/&gt; 1493: (0.474684%)&lt;BR/&gt; 1490: (0.474684%)&gt;];
}
338--813[label="0.142857;6pkt 6fpkt"];
338--937[label="0.357143;15pkt 15fpkt"];
338--1480[label="0.0238095;1pkt 1fpkt"];
338--2247[label="0.0952381;4pkt 4fpkt"];
338--2257[label="0.119048;5pkt 5fpkt"];
338--2267[label="0.119048;5pkt 5fpkt"];
338--2274[label="0.119048;5pkt 5fpkt"];
338--2360[label="1;42pkt 42fpkt"];
338--2953[label="1;42pkt 42fpkt"];
338--3263[label="1;42pkt 42fpkt"];
813--1266[label="0.025;1pkt 1fpkt"];
813--1352[label="0.00574713;1pkt 1fpkt"];
813--1488[label="0.0125;2pkt 2fpkt"];
813--2013[label="0.00574713;1pkt 1fpkt"];
813--2155[label="0.0121951;1pkt 1fpkt"];
813--2247[label="0.0265487;6pkt 6fpkt"];
813--2255[label="0.00442478;1pkt 1fpkt"];
813--2257[label="0.132743;30pkt 30fpkt"];
813--2267[label="0.132743;30pkt 30fpkt"];
813--2274[label="0.132743;30pkt 30fpkt"];
813--2323[label="0.0322581;1pkt 1fpkt"];
813--2360[label="0.111111;6pkt 6fpkt"];
813--2395[label="0.558824;19pkt 19fpkt"];
813--2483[label="1;17pkt 17fpkt"];
813--2724[label="0.239583;23pkt 23fpkt"];
813--2767[label="0.125;7pkt 7fpkt"];
813--2855[label="0.0135135;1pkt 1fpkt"];
813--2953[label="0.111111;6pkt 6fpkt"];
813--3006[label="1;18pkt 18fpkt"];
813--3210[label="0.0133333;1pkt 1fpkt"];
813--3263[label="0.111111;6pkt 6fpkt"];
813--3288[label="1;18pkt 18fpkt"];
937--2247[label="0.169811;9pkt 9fpkt"];
937--2360[label="0.283019;15pkt 15fpkt"];
937--2724[label="0.113208;6pkt 6fpkt"];
937--2953[label="0.283019;15pkt 15fpkt"];
937--3263[label="0.283019;15pkt 15fpkt"];
2360--2953[label="1;54pkt 54fpkt"];
2360--3263[label="1;54pkt 54fpkt"];
2483--3006[label="1;17pkt 17fpkt"];
2483--3288[label="1;17pkt 17fpkt"];
2953--3263[label="1;54pkt 54fpkt"];
3006--3288[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="193.180.129.171" src_port="80"/>
      <filter dst_ip="141.133.232.157" src_port="80"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
2362[label="141.133.4.28;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2954[label="141.133.4.28;4pkt 4fpkt", shape=invtriangle, color=brown];
3264[label="141.133.4.28;5pkt 5fpkt", shape=invhouse, color=bisque];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.4.28:0, 10.0.10.16:0}[20%]&lt;BR/&gt;{141.133.4.28:0, 10.0.12.17:0}[20%]&lt;BR/&gt;{141.133.4.28:0, 10.0.13.80:0}[20%]&lt;BR/&gt;{141.133.4.28:0, 10.0.12.227:0}[20%]&lt;BR/&gt;{141.133.4.28:0, 10.0.15.236:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2362--2954[label="1;4pkt 4fpkt"];
2362--3264[label="1;5pkt 5fpkt"];
2954--3264[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="10.0.15.236" src_ip="141.133.4.28"/>
      <filter dst_ip="10.0.12.227" src_ip="141.133.4.28"/>
      <filter dst_ip="10.0.13.80" src_ip="141.133.4.28"/>
      <filter dst_ip="10.0.12.17" src_ip="141.133.4.28"/>
      <filter dst_ip="10.0.10.16" src_ip="141.133.4.28"/>
    </slice>
    <from sec="1031547628" usec="0"/>
    <to sec="1031548653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="144.162.42.31"/>
    </slice>
    <from sec="1031548327" usec="0"/>
    <to sec="1031548350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649378,1.99623,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_439{
style=filled;
color=gray75;
1275[label="209.88.200.185;d;101pkt 101fpkt", shape=diamond, color=yellow];
2393[label="205.198.12.38;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2967[label="205.198.12.38;34pkt 34fpkt", shape=invtriangle, color=brown];
stat439[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.198.12.38:80, 209.88.200.185:*}[33.6538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1723: (0.887574%)&lt;BR/&gt; 1722: (0.887574%)&lt;BR/&gt; 1720: (0.887574%)&lt;BR/&gt; 1718: (0.887574%)&gt;];
}
1275--2255[label="0.188119;19pkt 19fpkt"];
1275--2257[label="0.019802;2pkt 2fpkt"];
1275--2267[label="0.019802;2pkt 2fpkt"];
1275--2274[label="0.019802;2pkt 2fpkt"];
1275--2393[label="0.911765;31pkt 31fpkt"];
1275--2967[label="0.911765;31pkt 31fpkt"];
2393--2967[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="209.88.200.185" src_ip="205.198.12.38" src_port="80"/>
    </slice>
    <from sec="1031547614" usec="0"/>
    <to sec="1031548637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_440{
style=filled;
color=gray75;
2398[label="208.42.166.40;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2969[label="208.42.166.40;2pkt 2fpkt", shape=invtriangle, color=brown];
3271[label="208.42.166.40;2pkt 2fpkt", shape=invhouse, color=bisque];
stat440[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.42.166.40:137, 208.103.204.101:137}[50%]&lt;BR/&gt;{208.42.166.40:137, 208.103.107.161:137}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (100%)&gt;];
}
2398--2969[label="1;1pkt 1fpkt"];
2398--3271[label="1;1pkt 1fpkt"];
2969--3271[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.103.107.161" dst_port="137" src_ip="208.42.166.40" src_port="137"/>
      <filter dst_ip="208.103.204.101" dst_port="137" src_ip="208.42.166.40" src_port="137"/>
    </slice>
    <from sec="1031547678" usec="0"/>
    <to sec="1031548222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
2413[label="205.98.10.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2978[label="205.98.10.46;1pkt 1fpkt", shape=invtriangle, color=brown];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.98.10.46:80, 209.88.217.36:1945}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1945: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2413--2978[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.88.217.36" dst_port="1945" src_ip="205.98.10.46" src_port="80"/>
    </slice>
    <from sec="1031548270" usec="0"/>
    <to sec="1031548292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_442{
style=filled;
color=gray75;
2428[label="213.7.0.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2982[label="213.7.0.52;1pkt 1fpkt", shape=invtriangle, color=brown];
stat442[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.0.52:80, 141.133.201.99:1429}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1429: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2428--2982[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.201.99" dst_port="1429" src_ip="213.7.0.52" src_port="80"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_443{
style=filled;
color=gray75;
2431[label="136.65.7.53;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2983[label="136.65.7.53;6pkt 6fpkt", shape=invtriangle, color=brown];
3275[label="136.65.7.53;7pkt 7fpkt", shape=invhouse, color=bisque];
stat443[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.7.53:*, 213.7.4.56:80}[28.5714%]&lt;BR/&gt;{136.65.7.53:*, *:5190}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.3158%)&lt;BR/&gt; 5190: (15.7895%)&lt;BR/&gt; 60744: (7.89474%)&lt;BR/&gt; 60740: (7.89474%)&lt;BR/&gt; 60739: (7.89474%)&gt;];
}
2431--2983[label="1;6pkt 6fpkt"];
2431--3275[label="1;6pkt 6fpkt"];
2983--3275[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="5190" src_ip="136.65.7.53"/>
      <filter dst_ip="213.7.4.56" dst_port="80" src_ip="136.65.7.53"/>
    </slice>
    <from sec="1031547867" usec="0"/>
    <to sec="1031547954" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,002,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.33.82.53"/>
    </slice>
    <from sec="1031548071" usec="0"/>
    <to sec="1031548080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851534,2.00135,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_445{
style=filled;
color=gray75;
1253[label="208.85.216.53;s;18pkt 18fpkt", shape=diamond, color=yellow];
2435[label="208.85.216.53;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2986[label="208.85.216.53;25pkt 25fpkt", shape=invtriangle, color=brown];
3276[label="208.85.216.53;25pkt 25fpkt", shape=invhouse, color=bisque];
stat445[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.85.216.53:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4993: (2.15054%)&lt;BR/&gt; 4982: (2.15054%)&lt;BR/&gt; 4814: (2.15054%)&lt;BR/&gt; 4716: (2.15054%)&gt;];
}
1253--2248[label="0.0555556;1pkt 1fpkt"];
1253--2263[label="0.0555556;1pkt 1fpkt"];
1253--2270[label="0.0555556;1pkt 1fpkt"];
1253--2435[label="1;18pkt 18fpkt"];
1253--2986[label="1;18pkt 18fpkt"];
1253--3276[label="1;18pkt 18fpkt"];
2435--2986[label="1;25pkt 25fpkt"];
2435--3276[label="1;25pkt 25fpkt"];
2986--3276[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="208.85.216.53"/>
    </slice>
    <from sec="1031547602" usec="0"/>
    <to sec="1031548614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_446{
style=filled;
color=gray75;
2437[label="215.6.172.55;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2987[label="215.6.172.55;1pkt 1fpkt", shape=invtriangle, color=brown];
stat446[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.6.172.55:80, 208.78.234.60:59254}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59254: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2437--2987[label="1;1pkt 1fpkt"];
2437--3278[label="1;1pkt 1fpkt"];
2987--3278[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.78.234.60" dst_port="59254" src_ip="215.6.172.55" src_port="80"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.92039,1.92082,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
22[label="209.85.201.64s;555pkt 555fpkt", shape=rectangle, color=red];
488[label="215.6.144.120;d;43pkt 43fpkt", shape=diamond, color=yellow];
535[label="138.28.90.8;d;5pkt 5fpkt", shape=diamond, color=yellow];
653[label="140.33.81.126;d;143pkt 143fpkt", shape=diamond, color=yellow];
660[label="140.33.81.127;d;152pkt 152fpkt", shape=diamond, color=yellow];
700[label="209.85.201.64;s;1126pkt 1126fpkt", shape=diamond, color=yellow];
825[label="209.82.96.16;s;113pkt 113fpkt", shape=diamond, color=yellow];
834[label="208.114.116.203;d;115pkt 115fpkt", shape=diamond, color=yellow];
838[label="215.6.144.70;d;124pkt 124fpkt", shape=diamond, color=yellow];
932[label="209.82.96.8;s;39pkt 39fpkt", shape=diamond, color=yellow];
938[label="209.143.17.159;s;64pkt 64fpkt", shape=diamond, color=yellow];
1010[label="162.73.179.2;s;263pkt 263fpkt", shape=diamond, color=yellow];
1312[label="209.13.69.101;d;30pkt 30fpkt", shape=diamond, color=yellow];
1341[label="207.92.50.241;d;429pkt 429fpkt", shape=diamond, color=yellow];
1355[label="213.73.42.18;d;83pkt 83fpkt", shape=diamond, color=yellow];
1381[label="212.18.21.183;d;8pkt 8fpkt", shape=diamond, color=yellow];
1552[label="47.167.11.143;d;28pkt 28fpkt", shape=diamond, color=yellow];
1747[label="140.33.81.126;d;91pkt 91fpkt", shape=hexagon, color=black];
1872[label="138.28.90.8;d;5pkt 5fpkt", shape=hexagon, color=black];
2457[label="209.85.201.64;2139pkt 2139fpkt", shape=pentagon, color=darkviolet];
2992[label="209.85.201.64;2139pkt 2139fpkt", shape=invtriangle, color=brown];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.85.201.64:*, *:80}[57.6427%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.1497%)&lt;BR/&gt; 53: (3.39875%)&lt;BR/&gt; 123: (2.10554%)&lt;BR/&gt; 0: (0.844814%)&lt;BR/&gt; 1863: (0.487393%)&gt;];
}
22--700[label="0.232432;129pkt 129fpkt"];
22--838[label="0.629032;78pkt 78fpkt"];
22--1341[label="1;429pkt 429fpkt"];
22--2254[label="0.0018018;1pkt 1fpkt"];
22--2258[label="0.113514;63pkt 63fpkt"];
22--2457[label="1;555pkt 555fpkt"];
22--2992[label="1;555pkt 555fpkt"];
488--575[label="0.860465;37pkt 37fpkt"];
488--700[label="0.0465116;2pkt 2fpkt"];
488--1010[label="0.0232558;1pkt 1fpkt"];
488--1815[label="0.0232558;1pkt 1fpkt"];
488--2215[label="0.0232558;1pkt 1fpkt"];
488--2248[label="0.0465116;2pkt 2fpkt"];
488--2254[label="0.0232558;1pkt 1fpkt"];
488--2258[label="0.0697674;3pkt 3fpkt"];
488--2263[label="0.0465116;2pkt 2fpkt"];
488--2270[label="0.0465116;2pkt 2fpkt"];
488--2457[label="0.0465116;2pkt 2fpkt"];
488--2992[label="0.0465116;2pkt 2fpkt"];
535--700[label="0.4;2pkt 2fpkt"];
535--1872[label="1;5pkt 5fpkt"];
535--2457[label="0.2;1pkt 1fpkt"];
535--2992[label="0.2;1pkt 1fpkt"];
653--700[label="0.216783;31pkt 31fpkt"];
653--825[label="0.0619469;7pkt 7fpkt"];
653--932[label="0.282051;11pkt 11fpkt"];
653--938[label="0.0625;4pkt 4fpkt"];
653--1042[label="0.00699301;1pkt 1fpkt"];
653--1747[label="1;91pkt 91fpkt"];
653--2248[label="0.0559441;8pkt 8fpkt"];
653--2254[label="0.111888;16pkt 16fpkt"];
653--2258[label="0.0839161;12pkt 12fpkt"];
653--2263[label="0.0559441;8pkt 8fpkt"];
653--2270[label="0.0559441;8pkt 8fpkt"];
653--2457[label="0.27972;40pkt 40fpkt"];
653--2992[label="0.27972;40pkt 40fpkt"];
660--700[label="0.335526;51pkt 51fpkt"];
660--825[label="0.0353982;4pkt 4fpkt"];
660--932[label="0.25641;10pkt 10fpkt"];
660--938[label="0.09375;6pkt 6fpkt"];
660--1399[label="1;54pkt 54fpkt"];
660--2248[label="0.0592105;9pkt 9fpkt"];
660--2254[label="0.0328947;5pkt 5fpkt"];
660--2258[label="0.0592105;9pkt 9fpkt"];
660--2263[label="0.0592105;9pkt 9fpkt"];
660--2270[label="0.0592105;9pkt 9fpkt"];
660--2457[label="0.414474;63pkt 63fpkt"];
660--2731[label="1;47pkt 47fpkt"];
660--2992[label="0.414474;63pkt 63fpkt"];
700--730[label="0.0133333;1pkt 1fpkt"];
700--751[label="0.00763359;1pkt 1fpkt"];
700--757[label="0.168033;41pkt 41fpkt"];
700--834[label="1;115pkt 115fpkt"];
700--838[label="0.370968;46pkt 46fpkt"];
700--899[label="0.117647;2pkt 2fpkt"];
700--934[label="0.333333;8pkt 8fpkt"];
700--936[label="0.0289855;2pkt 2fpkt"];
700--1008[label="0.166667;3pkt 3fpkt"];
700--1012[label="0.0172414;1pkt 1fpkt"];
700--1024[label="0.0909091;10pkt 10fpkt"];
700--1096[label="0.00296736;1pkt 1fpkt"];
700--1138[label="0.191964;43pkt 43fpkt"];
700--1147[label="0.0789474;12pkt 12fpkt"];
700--1148[label="0.0328947;5pkt 5fpkt"];
700--1165[label="0.015625;1pkt 1fpkt"];
700--1312[label="1;30pkt 30fpkt"];
700--1341[label="0.193473;83pkt 83fpkt"];
700--1355[label="0.0240964;2pkt 2fpkt"];
700--1359[label="0.0252101;3pkt 3fpkt"];
700--1373[label="0.0136054;2pkt 2fpkt"];
700--1375[label="0.0294118;2pkt 2fpkt"];
700--1381[label="0.125;1pkt 1fpkt"];
700--1497[label="0.00892857;1pkt 1fpkt"];
700--1570[label="0.0266667;2pkt 2fpkt"];
700--1575[label="0.0754717;4pkt 4fpkt"];
700--1592[label="0.184615;12pkt 12fpkt"];
700--1605[label="0.0344828;2pkt 2fpkt"];
700--1611[label="0.08;6pkt 6fpkt"];
700--1620[label="0.0243902;1pkt 1fpkt"];
700--1747[label="0.307692;28pkt 28fpkt"];
700--1808[label="0.00537634;2pkt 2fpkt"];
700--1872[label="0.4;2pkt 2fpkt"];
700--1997[label="0.015625;1pkt 1fpkt"];
700--2030[label="0.20297;41pkt 41fpkt"];
700--2039[label="0.0571429;4pkt 4fpkt"];
700--2041[label="0.0338983;2pkt 2fpkt"];
700--2045[label="0.125;1pkt 1fpkt"];
700--2050[label="0.0393701;5pkt 5fpkt"];
700--2128[label="0.00296736;1pkt 1fpkt"];
700--2135[label="0.0133333;1pkt 1fpkt"];
700--2145[label="0.0754717;4pkt 4fpkt"];
700--2154[label="0.191964;43pkt 43fpkt"];
700--2241[label="0.00296736;1pkt 1fpkt"];
700--2248[label="0.0284192;32pkt 32fpkt"];
700--2253[label="0.0053286;6pkt 6fpkt"];
700--2254[label="0.0470693;53pkt 53fpkt"];
700--2256[label="0.0062167;7pkt 7fpkt"];
700--2258[label="0.0559503;63pkt 63fpkt"];
700--2263[label="0.0284192;32pkt 32fpkt"];
700--2270[label="0.0284192;32pkt 32fpkt"];
700--2457[label="0.999112;1125pkt 1125fpkt"];
700--2992[label="0.999112;1125pkt 1125fpkt"];
825--1747[label="0.021978;2pkt 2fpkt"];
825--2248[label="0.0707965;8pkt 8fpkt"];
825--2254[label="0.0176991;2pkt 2fpkt"];
825--2258[label="0.079646;9pkt 9fpkt"];
825--2263[label="0.0707965;8pkt 8fpkt"];
825--2270[label="0.0707965;8pkt 8fpkt"];
834--2254[label="0.252174;29pkt 29fpkt"];
834--2457[label="1;115pkt 115fpkt"];
834--2992[label="1;115pkt 115fpkt"];
838--1010[label="0.016129;2pkt 2fpkt"];
838--2254[label="0.00806452;1pkt 1fpkt"];
838--2258[label="0.0564516;7pkt 7fpkt"];
838--2457[label="0.629032;78pkt 78fpkt"];
838--2992[label="0.629032;78pkt 78fpkt"];
932--1747[label="0.282051;11pkt 11fpkt"];
932--2248[label="0.102564;4pkt 4fpkt"];
932--2254[label="0.179487;7pkt 7fpkt"];
932--2263[label="0.102564;4pkt 4fpkt"];
932--2270[label="0.102564;4pkt 4fpkt"];
938--1747[label="0.0625;4pkt 4fpkt"];
938--2254[label="0.015625;1pkt 1fpkt"];
1010--1298[label="0.5;1pkt 1fpkt"];
1010--1380[label="0.403509;23pkt 23fpkt"];
1010--2044[label="0.410714;23pkt 23fpkt"];
1010--2248[label="0.0912548;24pkt 24fpkt"];
1010--2254[label="0.0304183;8pkt 8fpkt"];
1010--2258[label="0.0190114;5pkt 5fpkt"];
1010--2263[label="0.0912548;24pkt 24fpkt"];
1010--2270[label="0.0912548;24pkt 24fpkt"];
1312--2457[label="1;30pkt 30fpkt"];
1312--2992[label="1;30pkt 30fpkt"];
1341--2258[label="0.137529;59pkt 59fpkt"];
1341--2457[label="1;429pkt 429fpkt"];
1341--2992[label="1;429pkt 429fpkt"];
1355--1588[label="0.0963855;8pkt 8fpkt"];
1355--1663[label="0.0361446;3pkt 3fpkt"];
1355--1815[label="0.0344828;2pkt 2fpkt"];
1355--1868[label="0.0240964;2pkt 2fpkt"];
1355--2187[label="0.0361446;3pkt 3fpkt"];
1355--2248[label="0.0722892;6pkt 6fpkt"];
1355--2254[label="0.0361446;3pkt 3fpkt"];
1355--2258[label="0.144578;12pkt 12fpkt"];
1355--2263[label="0.0722892;6pkt 6fpkt"];
1355--2270[label="0.0722892;6pkt 6fpkt"];
1355--2457[label="0.0240964;2pkt 2fpkt"];
1355--2463[label="0.0361446;3pkt 3fpkt"];
1355--2709[label="0.0240964;2pkt 2fpkt"];
1355--2753[label="0.060241;5pkt 5fpkt"];
1355--2824[label="0.0722892;6pkt 6fpkt"];
1355--2904[label="0.0963855;8pkt 8fpkt"];
1355--2992[label="0.0240964;2pkt 2fpkt"];
1355--2996[label="0.0361446;3pkt 3fpkt"];
1355--3191[label="0.0722892;6pkt 6fpkt"];
1355--3235[label="0.0963855;8pkt 8fpkt"];
1355--3358[label="0.060241;5pkt 5fpkt"];
1381--1844[label="0.125;1pkt 1fpkt"];
1381--1956[label="0.125;1pkt 1fpkt"];
1381--2011[label="0.125;1pkt 1fpkt"];
1381--2045[label="1;8pkt 8fpkt"];
1381--2457[label="0.125;1pkt 1fpkt"];
1381--2992[label="0.125;1pkt 1fpkt"];
1552--2457[label="1;28pkt 28fpkt"];
1552--2992[label="1;28pkt 28fpkt"];
1747--2248[label="0.0879121;8pkt 8fpkt"];
1747--2254[label="0.175824;16pkt 16fpkt"];
1747--2263[label="0.0879121;8pkt 8fpkt"];
1747--2270[label="0.0879121;8pkt 8fpkt"];
1747--2457[label="0.307692;28pkt 28fpkt"];
1747--2992[label="0.307692;28pkt 28fpkt"];
1872--2457[label="0.2;1pkt 1fpkt"];
1872--2992[label="0.2;1pkt 1fpkt"];
2457--2992[label="1;2139pkt 2139fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="209.85.201.64"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_448{
style=filled;
color=gray75;
2470[label="164.15.234.70;81pkt 81fpkt", shape=pentagon, color=darkviolet];
3001[label="164.15.234.70;82pkt 82fpkt", shape=invtriangle, color=brown];
3285[label="164.15.234.70;82pkt 82fpkt", shape=invhouse, color=bisque];
stat448[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.15.234.70:113, *:*}[39.0244%]&lt;BR/&gt;{164.15.234.70:*, 210.229.216.79:*}[39.0244%]&lt;BR/&gt;{164.15.234.70:*, 210.229.216.97:25}[20.7317%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (30.4082%)&lt;BR/&gt; 113: (19.5918%)&lt;BR/&gt; 34889: (0.612245%)&lt;BR/&gt; 4919: (0.612245%)&lt;BR/&gt; 4918: (0.612245%)&gt;];
}
2470--3001[label="1;81pkt 81fpkt"];
2470--3285[label="1;81pkt 81fpkt"];
3001--3285[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_ip="210.229.216.79" src_ip="164.15.234.70"/>
      <filter src_ip="164.15.234.70" src_port="113"/>
      <filter dst_ip="210.229.216.97" dst_port="25" src_ip="164.15.234.70"/>
    </slice>
    <from sec="1031547604" usec="0"/>
    <to sec="1031548645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.97.102.71"/>
    </slice>
    <from sec="1031547662" usec="0"/>
    <to sec="1031547665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.252.134.72"/>
    </slice>
    <from sec="1031548672" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="156.84.162.75"/>
    </slice>
    <from sec="1031547604" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
2503[label="141.133.197.80;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3016[label="141.133.197.80;19pkt 19fpkt", shape=invtriangle, color=brown];
3292[label="141.133.197.80;18pkt 18fpkt", shape=invhouse, color=bisque];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.197.80:*, 215.50.237.69:80}[36.8421%]&lt;BR/&gt;{141.133.197.80:*, 207.20.208.63:80}[31.5789%]&lt;BR/&gt;{141.133.197.80:*, 207.20.202.0:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3509: (2.72727%)&lt;BR/&gt; 3507: (2.72727%)&lt;BR/&gt; 3505: (2.72727%)&lt;BR/&gt; 3504: (2.72727%)&gt;];
}
2503--3016[label="1;18pkt 18fpkt"];
2503--3292[label="1;18pkt 18fpkt"];
3016--3292[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="215.50.237.69" dst_port="80" src_ip="141.133.197.80"/>
      <filter dst_ip="207.20.208.63" dst_port="80" src_ip="141.133.197.80"/>
      <filter dst_ip="207.20.202.0" dst_port="80" src_ip="141.133.197.80"/>
    </slice>
    <from sec="1031548647" usec="0"/>
    <to sec="1031548651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851534,2.00135,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_453{
style=filled;
color=gray75;
1433[label="209.88.9.86;s;87pkt 87fpkt", shape=diamond, color=yellow];
1452[label="210.30.154.116;d;80pkt 80fpkt", shape=diamond, color=yellow];
2520[label="209.88.9.86;87pkt 87fpkt", shape=pentagon, color=darkviolet];
3027[label="209.88.9.86;87pkt 87fpkt", shape=invtriangle, color=brown];
3297[label="209.88.9.86;87pkt 87fpkt", shape=invhouse, color=bisque];
stat453[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.88.9.86:*, 210.30.154.116:80}[91.954%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0654%)&lt;BR/&gt; 443: (0.934579%)&lt;BR/&gt; 2906: (0.584112%)&lt;BR/&gt; 2902: (0.584112%)&lt;BR/&gt; 2899: (0.584112%)&gt;];
}
1433--1452[label="1;80pkt 80fpkt"];
1433--2258[label="0.252874;22pkt 22fpkt"];
1433--2520[label="1;87pkt 87fpkt"];
1433--3027[label="1;87pkt 87fpkt"];
1433--3297[label="1;87pkt 87fpkt"];
1452--2258[label="0.275;22pkt 22fpkt"];
1452--2520[label="1;80pkt 80fpkt"];
1452--3027[label="1;80pkt 80fpkt"];
1452--3297[label="1;80pkt 80fpkt"];
2520--3027[label="1;87pkt 87fpkt"];
2520--3297[label="1;87pkt 87fpkt"];
3027--3297[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_ip="210.30.154.116" dst_port="80" src_ip="209.88.9.86"/>
    </slice>
    <from sec="1031548115" usec="0"/>
    <to sec="1031548464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,053,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_455{
style=filled;
color=gray75;
2532[label="204.171.139.91;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3034[label="204.171.139.91;18pkt 18fpkt", shape=invtriangle, color=brown];
3301[label="204.171.139.91;17pkt 17fpkt", shape=invhouse, color=bisque];
stat455[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.171.139.91:80, 195.7.100.25:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4881: (2.83019%)&lt;BR/&gt; 4834: (2.83019%)&lt;BR/&gt; 4789: (2.83019%)&lt;BR/&gt; 4733: (2.83019%)&gt;];
}
2532--3034[label="1;18pkt 18fpkt"];
2532--3301[label="1;17pkt 17fpkt"];
3034--3301[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="195.7.100.25" src_ip="204.171.139.91" src_port="80"/>
    </slice>
    <from sec="1031547989" usec="0"/>
    <to sec="1031548071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.8.69.95"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_457{
style=filled;
color=gray75;
2553[label="141.133.197.101;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3045[label="141.133.197.101;18pkt 18fpkt", shape=invtriangle, color=brown];
stat457[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.197.101:*, 143.117.178.34:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3290: (2.77778%)&lt;BR/&gt; 3289: (2.77778%)&lt;BR/&gt; 3287: (2.77778%)&lt;BR/&gt; 3194: (2.77778%)&gt;];
}
2553--3045[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="143.117.178.34" dst_port="80" src_ip="141.133.197.101"/>
    </slice>
    <from sec="1031547920" usec="0"/>
    <to sec="1031548631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="170.108.29.110"/>
    </slice>
    <from sec="1031547761" usec="0"/>
    <to sec="1031548124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
2574[label="136.134.56.110;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3057[label="136.134.56.110;4pkt 4fpkt", shape=invtriangle, color=brown];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.134.56.110:3749, 216.164.186.104:80}[25%]&lt;BR/&gt;{136.134.56.110:3740, 217.20.196.112:80}[25%]&lt;BR/&gt;{136.134.56.110:3678, 218.30.166.225:80}[25%]&lt;BR/&gt;{136.134.56.110:3679, 218.30.166.225:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3749: (12.5%)&lt;BR/&gt; 3740: (12.5%)&lt;BR/&gt; 3679: (12.5%)&lt;BR/&gt; 3678: (12.5%)&gt;];
}
2574--3057[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="218.30.166.225" dst_port="80" src_ip="136.134.56.110" src_port="3679"/>
      <filter dst_ip="218.30.166.225" dst_port="80" src_ip="136.134.56.110" src_port="3678"/>
      <filter dst_ip="217.20.196.112" dst_port="80" src_ip="136.134.56.110" src_port="3740"/>
      <filter dst_ip="216.164.186.104" dst_port="80" src_ip="136.134.56.110" src_port="3749"/>
    </slice>
    <from sec="1031547745" usec="0"/>
    <to sec="1031548603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_460{
style=filled;
color=gray75;
2576[label="141.133.30.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3058[label="141.133.30.111;1pkt 1fpkt", shape=invtriangle, color=brown];
stat460[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.30.111:22, 160.106.66.157:26312}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26312: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
2576--3058[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.106.66.157" dst_port="26312" src_ip="141.133.30.111" src_port="22"/>
    </slice>
    <from sec="1031548297" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_461{
style=filled;
color=gray75;
2577[label="193.53.97.111;73pkt 73fpkt", shape=pentagon, color=darkviolet];
3059[label="193.53.97.111;74pkt 74fpkt", shape=invtriangle, color=brown];
stat461[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.53.97.111:80, 136.65.182.234:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50674: (0.680272%)&lt;BR/&gt; 50673: (0.680272%)&lt;BR/&gt; 50672: (0.680272%)&lt;BR/&gt; 50671: (0.680272%)&gt;];
}
2577--3059[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.182.234" src_ip="193.53.97.111" src_port="80"/>
    </slice>
    <from sec="1031548522" usec="0"/>
    <to sec="1031548669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649378,1.99623,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_462{
style=filled;
color=gray75;
1356[label="219.253.59.43;d;94pkt 94fpkt", shape=diamond, color=yellow];
2585[label="200.135.172.115;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3063[label="200.135.172.115;14pkt 14fpkt", shape=invtriangle, color=brown];
stat462[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 219.253.59.43:25}[45.2632%]&lt;BR/&gt;{*:113, 219.253.59.43:*}[25.2632%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (17.623%)&lt;BR/&gt; 80: (17.2131%)&lt;BR/&gt; 113: (9.83607%)&lt;BR/&gt; 2702: (4.91803%)&lt;BR/&gt; 2068: (1.22951%)&gt;];
}
1356--2247[label="0.0106383;1pkt 1fpkt"];
1356--2255[label="0.0106383;1pkt 1fpkt"];
1356--2257[label="0.0212766;2pkt 2fpkt"];
1356--2267[label="0.0212766;2pkt 2fpkt"];
1356--2274[label="0.0212766;2pkt 2fpkt"];
1356--2585[label="0.928571;13pkt 13fpkt"];
1356--3063[label="0.928571;13pkt 13fpkt"];
2585--3063[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="219.253.59.43" src_port="113"/>
      <filter dst_ip="219.253.59.43" dst_port="25"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
2590[label="204.205.208.117;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3067[label="204.205.208.117;7pkt 7fpkt", shape=invtriangle, color=brown];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.205.208.117:80, 143.16.154.118:*}[75%]&lt;BR/&gt;{204.205.208.117:80, 145.15.95.160:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1196: (6.66667%)&lt;BR/&gt; 1101: (6.66667%)&lt;BR/&gt; 1100: (6.66667%)&lt;BR/&gt; 1099: (6.66667%)&gt;];
}
2590--3067[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="143.16.154.118" src_ip="204.205.208.117" src_port="80"/>
      <filter dst_ip="145.15.95.160" src_ip="204.205.208.117" src_port="80"/>
    </slice>
    <from sec="1031548237" usec="0"/>
    <to sec="1031548664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749014,1.94966,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
1158[label="208.85.189.118;s;25pkt 25fpkt", shape=diamond, color=yellow];
1996[label="208.85.189.118;s;20pkt 20fpkt", shape=hexagon, color=black];
2591[label="208.85.189.118;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3068[label="208.85.189.118;25pkt 25fpkt", shape=invtriangle, color=brown];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.85.189.118:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4978: (2.08333%)&lt;BR/&gt; 4895: (2.08333%)&lt;BR/&gt; 4772: (2.08333%)&lt;BR/&gt; 4601: (2.08333%)&gt;];
}
1158--1996[label="1;20pkt 20fpkt"];
1158--2254[label="0.08;2pkt 2fpkt"];
1158--2258[label="0.04;1pkt 1fpkt"];
1158--2591[label="1;25pkt 25fpkt"];
1158--3068[label="0.96;24pkt 24fpkt"];
1996--2254[label="0.1;2pkt 2fpkt"];
1996--2258[label="0.05;1pkt 1fpkt"];
1996--2591[label="1;20pkt 20fpkt"];
1996--3068[label="0.95;19pkt 19fpkt"];
2591--3068[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="208.85.189.118"/>
    </slice>
    <from sec="1031547673" usec="0"/>
    <to sec="1031548665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749014,1.94966,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_465{
style=filled;
color=gray75;
349[label="205.173.69.122;s;6pkt 6fpkt", shape=diamond, color=yellow];
350[label="141.133.201.66;d;7pkt 7fpkt", shape=diamond, color=yellow];
584[label="141.133.5.124;d;442pkt 442fpkt", shape=diamond, color=yellow];
1744[label="141.133.201.66;d;7pkt 7fpkt", shape=hexagon, color=black];
2451[label="172.202.107.62;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2594[label="205.173.69.122;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3072[label="205.173.69.122;7pkt 7fpkt", shape=invtriangle, color=brown];
stat465[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 141.133.5.124:53}[46.2555%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (66.3561%)&lt;BR/&gt; 80: (3.41615%)&lt;BR/&gt; 0: (1.86335%)&lt;BR/&gt; 32769: (1.5528%)&lt;BR/&gt; 1053: (1.13872%)&gt;];
}
349--350[label="0.833333;5pkt 5fpkt"];
349--584[label="0.166667;1pkt 1fpkt"];
349--1744[label="0.833333;5pkt 5fpkt"];
349--2247[label="0.5;3pkt 3fpkt"];
349--2251[label="0.166667;1pkt 1fpkt"];
349--2594[label="1;6pkt 6fpkt"];
349--3072[label="0.833333;5pkt 5fpkt"];
350--1744[label="1;7pkt 7fpkt"];
350--2247[label="0.428571;3pkt 3fpkt"];
350--2594[label="1;7pkt 7fpkt"];
350--3072[label="1;7pkt 7fpkt"];
584--746[label="0.0185185;1pkt 1fpkt"];
584--769[label="0.0196078;1pkt 1fpkt"];
584--906[label="0.0625;1pkt 1fpkt"];
584--1001[label="0.0588235;1pkt 1fpkt"];
584--1247[label="0.0645161;2pkt 2fpkt"];
584--1813[label="0.0232558;1pkt 1fpkt"];
584--2251[label="0.0339367;15pkt 15fpkt"];
584--2253[label="0.108597;48pkt 48fpkt"];
584--2256[label="0.183258;81pkt 81fpkt"];
584--2260[label="0.0950226;42pkt 42fpkt"];
584--2266[label="0.0950226;42pkt 42fpkt"];
584--2273[label="0.0950226;42pkt 42fpkt"];
584--2298[label="0.0714286;1pkt 1fpkt"];
584--2299[label="0.0166667;1pkt 1fpkt"];
584--2364[label="0.0555556;1pkt 1fpkt"];
584--2451[label="0.166667;1pkt 1fpkt"];
584--2497[label="0.0263158;1pkt 1fpkt"];
584--2594[label="0.125;1pkt 1fpkt"];
584--2608[label="0.0625;1pkt 1fpkt"];
584--2689[label="0.0666667;1pkt 1fpkt"];
584--2726[label="0.0188679;1pkt 1fpkt"];
584--2916[label="0.0714286;1pkt 1fpkt"];
584--2917[label="0.0169492;1pkt 1fpkt"];
584--2955[label="0.0555556;1pkt 1fpkt"];
584--3122[label="0.0666667;1pkt 1fpkt"];
584--3144[label="0.0188679;1pkt 1fpkt"];
584--3240[label="0.0769231;1pkt 1fpkt"];
584--3241[label="0.0169492;1pkt 1fpkt"];
584--3336[label="0.0666667;1pkt 1fpkt"];
584--3350[label="0.0185185;1pkt 1fpkt"];
1744--2247[label="0.428571;3pkt 3fpkt"];
1744--2594[label="1;7pkt 7fpkt"];
1744--3072[label="1;7pkt 7fpkt"];
2594--3072[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.5.124" dst_port="53" src_port="53"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_466{
style=filled;
color=gray75;
2603[label="143.120.18.128;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3075[label="143.120.18.128;7pkt 7fpkt", shape=invtriangle, color=brown];
3315[label="143.120.18.128;8pkt 8fpkt", shape=invhouse, color=bisque];
stat466[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.120.18.128:80, 141.133.202.225:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33146: (6.52174%)&lt;BR/&gt; 33145: (6.52174%)&lt;BR/&gt; 33144: (6.52174%)&lt;BR/&gt; 33143: (6.52174%)&gt;];
}
2603--3075[label="1;7pkt 7fpkt"];
2603--3315[label="1;8pkt 8fpkt"];
3075--3315[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.202.225" src_ip="143.120.18.128" src_port="80"/>
    </slice>
    <from sec="1031547834" usec="0"/>
    <to sec="1031547907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_467{
style=filled;
color=gray75;
2612[label="205.46.204.129;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3078[label="205.46.204.129;1pkt 1fpkt", shape=invtriangle, color=brown];
stat467[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.46.204.129:11384, 136.87.155.180:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11384: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2612--3078[label="1;1pkt 1fpkt"];
2612--3317[label="1;1pkt 1fpkt"];
3078--3317[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.87.155.180" dst_port="80" src_ip="205.46.204.129" src_port="11384"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
2614[label="214.101.68.130;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3079[label="214.101.68.130;12pkt 12fpkt", shape=invtriangle, color=brown];
3318[label="214.101.68.130;12pkt 12fpkt", shape=invhouse, color=bisque];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.101.68.130:2064, 161.115.224.48:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2064: (50%)&lt;BR/&gt; 1179: (8.10811%)&lt;BR/&gt; 57832: (4.05405%)&lt;BR/&gt; 41050: (4.05405%)&lt;BR/&gt; 4584: (4.05405%)&gt;];
}
2614--3079[label="1;12pkt 12fpkt"];
2614--3318[label="1;12pkt 12fpkt"];
3079--3318[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="161.115.224.48" src_ip="214.101.68.130" src_port="2064"/>
    </slice>
    <from sec="1031547658" usec="0"/>
    <to sec="1031548591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07263,1.92615,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_469{
style=filled;
color=gray75;
47[label="205.46.204.131s;4pkt 4fpkt", shape=rectangle, color=red];
92[label="141.133.219.79d;1pkt 1fpkt", shape=rectangle, color=red];
658[label="205.46.204.131;s;5pkt 5fpkt", shape=diamond, color=yellow];
2048[label="205.46.204.131;s;4pkt 4fpkt", shape=hexagon, color=black];
2617[label="205.46.204.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3080[label="205.46.204.131;2pkt 2fpkt", shape=invtriangle, color=brown];
3319[label="205.46.204.131;27pkt 27fpkt", shape=invhouse, color=bisque];
stat469[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.46.204.131:*, 162.73.118.85:80}[33.3333%]&lt;BR/&gt;{205.46.204.131:*, 208.78.229.161:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45402: (4.54545%)&lt;BR/&gt; 44498: (4.54545%)&lt;BR/&gt; 43737: (4.54545%)&lt;BR/&gt; 43299: (3.40909%)&gt;];
}
47--658[label="0.25;1pkt 1fpkt"];
47--845[label="0.5;2pkt 2fpkt"];
47--2048[label="0.25;1pkt 1fpkt"];
47--2254[label="0.25;1pkt 1fpkt"];
47--2617[label="1;1pkt 1fpkt"];
47--3080[label="0.5;1pkt 1fpkt"];
47--3319[label="1;4pkt 4fpkt"];
92--658[label="1;1pkt 1fpkt"];
92--2048[label="1;1pkt 1fpkt"];
92--3319[label="1;1pkt 1fpkt"];
658--1290[label="0.2;1pkt 1fpkt"];
658--2048[label="1;4pkt 4fpkt"];
658--2258[label="0.2;1pkt 1fpkt"];
658--3080[label="0.5;1pkt 1fpkt"];
658--3319[label="1;5pkt 5fpkt"];
2048--3319[label="1;4pkt 4fpkt"];
2617--3080[label="1;1pkt 1fpkt"];
2617--3319[label="1;1pkt 1fpkt"];
3080--3319[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.118.85" dst_port="80" src_ip="205.46.204.131"/>
      <filter dst_ip="208.78.229.161" dst_port="80" src_ip="205.46.204.131"/>
    </slice>
    <from sec="1031547614" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
2623[label="141.133.53.134;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3082[label="141.133.53.134;3pkt 3fpkt", shape=invtriangle, color=brown];
3320[label="141.133.53.134;2pkt 2fpkt", shape=invhouse, color=bisque];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.53.134:0, 47.145.209.16:0}[33.3333%]&lt;BR/&gt;{141.133.53.134:0, 193.221.64.129:0}[33.3333%]&lt;BR/&gt;{141.133.53.134:0, 200.27.167.214:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2623--3082[label="1;3pkt 3fpkt"];
2623--3320[label="1;2pkt 2fpkt"];
3082--3320[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.27.167.214" src_ip="141.133.53.134"/>
      <filter dst_ip="193.221.64.129" src_ip="141.133.53.134"/>
      <filter dst_ip="47.145.209.16" src_ip="141.133.53.134"/>
    </slice>
    <from sec="1031548349" usec="0"/>
    <to sec="1031548510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.144.56.134"/>
    </slice>
    <from sec="1031548157" usec="0"/>
    <to sec="1031548177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_472{
style=filled;
color=gray75;
2636[label="209.88.197.138;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3090[label="209.88.197.138;13pkt 13fpkt", shape=invtriangle, color=brown];
stat472[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.88.197.138:*, 75.111.202.32:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1186: (4%)&lt;BR/&gt; 1185: (4%)&lt;BR/&gt; 1184: (4%)&lt;BR/&gt; 1182: (4%)&gt;];
}
2636--3090[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="75.111.202.32" dst_port="80" src_ip="209.88.197.138"/>
    </slice>
    <from sec="1031548489" usec="0"/>
    <to sec="1031548510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749014,1.94966,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_473{
style=filled;
color=gray75;
221[label="213.9.83.102;d;181pkt 181fpkt", shape=diamond, color=yellow];
222[label="204.24.31.145;s;53pkt 53fpkt", shape=diamond, color=yellow];
643[label="204.24.31.152;s;70pkt 70fpkt", shape=diamond, color=yellow];
1180[label="204.24.31.161;s;26pkt 26fpkt", shape=diamond, color=yellow];
1676[label="213.9.83.102;d;159pkt 159fpkt", shape=hexagon, color=black];
2644[label="204.24.31.145;52pkt 52fpkt", shape=pentagon, color=darkviolet];
2706[label="204.24.31.165;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3096[label="204.24.31.145;52pkt 52fpkt", shape=invtriangle, color=brown];
3131[label="204.24.31.165;2pkt 2fpkt", shape=invtriangle, color=brown];
stat473[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.24.31.152:*, 213.9.83.102:3128}[38.674%]&lt;BR/&gt;{204.24.31.145:*, 213.9.83.102:3128}[29.2818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (50%)&lt;BR/&gt; 65062: (0.419463%)&lt;BR/&gt; 63794: (0.419463%)&lt;BR/&gt; 62311: (0.419463%)&lt;BR/&gt; 62310: (0.419463%)&gt;];
}
221--222[label="1;53pkt 53fpkt"];
221--643[label="1;70pkt 70fpkt"];
221--1180[label="1;26pkt 26fpkt"];
221--1676[label="1;159pkt 159fpkt"];
221--2644[label="1;52pkt 52fpkt"];
221--2706[label="1;1pkt 1fpkt"];
221--3096[label="1;52pkt 52fpkt"];
221--3131[label="1;2pkt 2fpkt"];
222--1676[label="0.811321;43pkt 43fpkt"];
222--2644[label="1;52pkt 52fpkt"];
222--3096[label="1;52pkt 52fpkt"];
643--1676[label="1;70pkt 70fpkt"];
1180--1676[label="1;26pkt 26fpkt"];
1676--2644[label="0.807692;42pkt 42fpkt"];
1676--2706[label="1;1pkt 1fpkt"];
1676--3096[label="0.807692;42pkt 42fpkt"];
1676--3131[label="1;2pkt 2fpkt"];
2644--3096[label="1;52pkt 52fpkt"];
2706--3131[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.9.83.102" dst_port="3128" src_ip="204.24.31.152"/>
      <filter dst_ip="213.9.83.102" dst_port="3128" src_ip="204.24.31.145"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649378,1.99623,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_474{
style=filled;
color=gray75;
502[label="46.200.203.233;d;532pkt 532fpkt", shape=diamond, color=yellow];
741[label="164.15.207.20;s;1054pkt 1054fpkt", shape=diamond, color=yellow];
2335[label="161.115.38.19;102pkt 102fpkt", shape=pentagon, color=darkviolet];
2371[label="136.65.162.31;171pkt 171fpkt", shape=pentagon, color=darkviolet];
2654[label="209.85.227.146;245pkt 245fpkt", shape=pentagon, color=darkviolet];
2846[label="209.85.226.222;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2939[label="161.115.38.19;101pkt 101fpkt", shape=invtriangle, color=brown];
3100[label="209.85.227.146;246pkt 246fpkt", shape=invtriangle, color=brown];
stat474[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.15.207.20:1365, *:53}[41.1734%]&lt;BR/&gt;{*:53, 46.200.203.233:*}[27.907%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.3219%)&lt;BR/&gt; 1365: (15.674%)&lt;BR/&gt; 0: (2.69618%)&lt;BR/&gt; 36029: (1.12676%)&lt;BR/&gt; 32768: (0.503018%)&gt;];
}
502--741[label="0.159774;85pkt 85fpkt"];
502--759[label="0.0018797;1pkt 1fpkt"];
502--1427[label="0.00534759;1pkt 1fpkt"];
502--1487[label="0.00277008;1pkt 1fpkt"];
502--1686[label="0.0413534;22pkt 22fpkt"];
502--1698[label="0.0977444;52pkt 52fpkt"];
502--1955[label="0.0018797;1pkt 1fpkt"];
502--1964[label="0.00220751;1pkt 1fpkt"];
502--2107[label="0.00534759;1pkt 1fpkt"];
502--2206[label="0.0413534;22pkt 22fpkt"];
502--2266[label="0.0075188;4pkt 4fpkt"];
502--2273[label="0.0075188;4pkt 4fpkt"];
502--2335[label="0.882353;90pkt 90fpkt"];
502--2371[label="0.187135;32pkt 32fpkt"];
502--2383[label="0.00261097;1pkt 1fpkt"];
502--2402[label="0.0035461;1pkt 1fpkt"];
502--2654[label="0.159184;39pkt 39fpkt"];
502--2846[label="0.0294118;1pkt 1fpkt"];
502--2939[label="0.891089;90pkt 90fpkt"];
502--2965[label="0.00261097;1pkt 1fpkt"];
502--3100[label="0.158537;39pkt 39fpkt"];
741--742[label="0.0196078;1pkt 1fpkt"];
741--751[label="0.00763359;1pkt 1fpkt"];
741--765[label="0.0222222;1pkt 1fpkt"];
741--778[label="0.0149254;1pkt 1fpkt"];
741--1012[label="0.0172414;1pkt 1fpkt"];
741--1229[label="0.2;1pkt 1fpkt"];
741--1262[label="0.2;1pkt 1fpkt"];
741--1365[label="0.2;1pkt 1fpkt"];
741--1375[label="0.0147059;1pkt 1fpkt"];
741--1570[label="0.0133333;1pkt 1fpkt"];
741--1575[label="0.0188679;1pkt 1fpkt"];
741--1860[label="0.0149254;1pkt 1fpkt"];
741--1906[label="0.0208333;1pkt 1fpkt"];
741--2041[label="0.0169492;1pkt 1fpkt"];
741--2085[label="0.2;1pkt 1fpkt"];
741--2144[label="0.0222222;1pkt 1fpkt"];
741--2145[label="0.0188679;1pkt 1fpkt"];
741--2253[label="0.14611;154pkt 154fpkt"];
741--2256[label="0.241935;255pkt 255fpkt"];
741--2260[label="0.00189753;2pkt 2fpkt"];
741--2266[label="0.0246679;26pkt 26fpkt"];
741--2273[label="0.0246679;26pkt 26fpkt"];
741--2339[label="1;4pkt 4fpkt"];
2335--2939[label="1;101pkt 101fpkt"];
2654--3100[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter dst_ip="46.200.203.233" src_port="53"/>
      <filter dst_port="53" src_ip="164.15.207.20" src_port="1365"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_475{
style=filled;
color=gray75;
2658[label="141.133.32.148;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3104[label="141.133.32.148;28pkt 28fpkt", shape=invtriangle, color=brown];
3329[label="141.133.32.148;28pkt 28fpkt", shape=invhouse, color=bisque];
stat475[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.32.148:*, 207.66.0.208:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65188: (1.78571%)&lt;BR/&gt; 65187: (1.78571%)&lt;BR/&gt; 65186: (1.78571%)&lt;BR/&gt; 65185: (1.78571%)&gt;];
}
2658--3104[label="1;28pkt 28fpkt"];
2658--3329[label="1;28pkt 28fpkt"];
3104--3329[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="207.66.0.208" dst_port="80" src_ip="141.133.32.148"/>
    </slice>
    <from sec="1031548020" usec="0"/>
    <to sec="1031548520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_476{
style=filled;
color=gray75;
2664[label="216.251.64.149;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3107[label="216.251.64.149;19pkt 19fpkt", shape=invtriangle, color=brown];
3330[label="216.251.64.149;19pkt 19fpkt", shape=invhouse, color=bisque];
stat476[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.251.64.149:*, 141.133.239.176:113}[50%]&lt;BR/&gt;{216.251.64.149:21, 141.133.239.176:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (25.8621%)&lt;BR/&gt; 21: (24.1379%)&lt;BR/&gt; 4444: (2.58621%)&lt;BR/&gt; 4440: (2.58621%)&lt;BR/&gt; 4435: (2.58621%)&gt;];
}
2664--3107[label="1;19pkt 19fpkt"];
2664--3330[label="1;19pkt 19fpkt"];
3107--3330[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.239.176" src_ip="216.251.64.149" src_port="21"/>
      <filter dst_ip="141.133.239.176" dst_port="113" src_ip="216.251.64.149"/>
    </slice>
    <from sec="1031548528" usec="0"/>
    <to sec="1031548607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.24.31.150"/>
    </slice>
    <from sec="1031547612" usec="0"/>
    <to sec="1031548671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.73.164.150"/>
    </slice>
    <from sec="1031547605" usec="0"/>
    <to sec="1031548669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749014,1.94966,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_479{
style=filled;
color=gray75;
1162[label="208.188.45.153;s;22pkt 22fpkt", shape=diamond, color=yellow];
1926[label="208.188.45.153;s;16pkt 16fpkt", shape=hexagon, color=black];
2678[label="208.188.45.153;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3117[label="208.188.45.153;23pkt 23fpkt", shape=invtriangle, color=brown];
stat479[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.188.45.153:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4328: (2.38095%)&lt;BR/&gt; 4271: (2.38095%)&lt;BR/&gt; 4036: (2.38095%)&lt;BR/&gt; 4035: (2.38095%)&gt;];
}
1162--1926[label="1;16pkt 16fpkt"];
1162--2258[label="0.0909091;2pkt 2fpkt"];
1162--2678[label="1;22pkt 22fpkt"];
1162--3117[label="1;22pkt 22fpkt"];
1926--2258[label="0.0625;1pkt 1fpkt"];
1926--2678[label="1;16pkt 16fpkt"];
1926--3117[label="1;16pkt 16fpkt"];
2678--3117[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="208.188.45.153"/>
    </slice>
    <from sec="1031547737" usec="0"/>
    <to sec="1031548618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_480{
style=filled;
color=gray75;
2684[label="219.229.26.156;102pkt 102fpkt", shape=pentagon, color=darkviolet];
3119[label="219.229.26.156;101pkt 101fpkt", shape=invtriangle, color=brown];
stat480[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.229.26.156:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2684--3119[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter src_ip="219.229.26.156"/>
    </slice>
    <from sec="1031547605" usec="0"/>
    <to sec="1031548673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,002,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.220.0.161"/>
    </slice>
    <from sec="1031548565" usec="0"/>
    <to sec="1031548573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.226.36.162"/>
    </slice>
    <from sec="1031547603" usec="0"/>
    <to sec="1031548202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
2702[label="136.65.184.164;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3128[label="136.65.184.164;16pkt 16fpkt", shape=invtriangle, color=brown];
3342[label="136.65.184.164;16pkt 16fpkt", shape=invhouse, color=bisque];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.184.164:*, 209.196.100.169:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1144: (3.125%)&lt;BR/&gt; 1123: (3.125%)&lt;BR/&gt; 1120: (3.125%)&lt;BR/&gt; 1119: (3.125%)&gt;];
}
2702--3128[label="1;16pkt 16fpkt"];
2702--3342[label="1;16pkt 16fpkt"];
3128--3342[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="209.196.100.169" dst_port="80" src_ip="136.65.184.164"/>
    </slice>
    <from sec="1031548010" usec="0"/>
    <to sec="1031548652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
2705[label="151.244.27.165;54pkt 54fpkt", shape=pentagon, color=darkviolet];
3130[label="151.244.27.165;54pkt 54fpkt", shape=invtriangle, color=brown];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.27.165:*, 216.196.83.6:80}[57.4074%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3311: (0.925926%)&lt;BR/&gt; 3310: (0.925926%)&lt;BR/&gt; 3309: (0.925926%)&lt;BR/&gt; 3308: (0.925926%)&gt;];
}
2705--3130[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="216.196.83.6" dst_port="80" src_ip="151.244.27.165"/>
    </slice>
    <from sec="1031547674" usec="0"/>
    <to sec="1031548133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_485{
style=filled;
color=gray75;
2713[label="219.89.163.167;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3136[label="219.89.163.167;2pkt 2fpkt", shape=invtriangle, color=brown];
3347[label="219.89.163.167;2pkt 2fpkt", shape=invhouse, color=bisque];
stat485[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.89.163.167:53, 192.168.3.54:1433}[50%]&lt;BR/&gt;{219.89.163.167:53, 192.168.3.65:1352}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1433: (25%)&lt;BR/&gt; 1352: (25%)&gt;];
}
2713--3136[label="1;2pkt 2fpkt"];
2713--3347[label="1;2pkt 2fpkt"];
3136--3347[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.3.65" dst_port="1352" src_ip="219.89.163.167" src_port="53"/>
      <filter dst_ip="192.168.3.54" dst_port="1433" src_ip="219.89.163.167" src_port="53"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.15.246.168"/>
    </slice>
    <from sec="1031547608" usec="0"/>
    <to sec="1031548671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_487{
style=filled;
color=gray75;
2718[label="141.133.74.169;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3139[label="141.133.74.169;1pkt 1fpkt", shape=invtriangle, color=brown];
stat487[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.74.169:4375, 75.97.96.142:1863}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4375: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
2718--3139[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="75.97.96.142" dst_port="1863" src_ip="141.133.74.169" src_port="4375"/>
    </slice>
    <from sec="1031547656" usec="0"/>
    <to sec="1031548663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_488{
style=filled;
color=gray75;
2723[label="44.88.77.171;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3142[label="44.88.77.171;3pkt 3fpkt", shape=invtriangle, color=brown];
stat488[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.88.77.171:80, 209.85.242.10:53599}[33.3333%]&lt;BR/&gt;{44.88.77.171:80, 209.129.201.112:64883}[33.3333%]&lt;BR/&gt;{44.88.77.171:80, 209.129.201.112:64902}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64902: (16.6667%)&lt;BR/&gt; 64883: (16.6667%)&lt;BR/&gt; 53599: (16.6667%)&gt;];
}
2723--3142[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.129.201.112" dst_port="64902" src_ip="44.88.77.171" src_port="80"/>
      <filter dst_ip="209.129.201.112" dst_port="64883" src_ip="44.88.77.171" src_port="80"/>
      <filter dst_ip="209.85.242.10" dst_port="53599" src_ip="44.88.77.171" src_port="80"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
2730[label="136.65.159.172;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3147[label="136.65.159.172;13pkt 13fpkt", shape=invtriangle, color=brown];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.159.172:*, 75.97.115.1:80}[46.1538%]&lt;BR/&gt;{136.65.159.172:*, 74.2.188.142:80}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.3077%)&lt;BR/&gt; 1863: (7.69231%)&lt;BR/&gt; 3021: (3.84615%)&lt;BR/&gt; 3020: (3.84615%)&lt;BR/&gt; 3019: (3.84615%)&gt;];
}
2730--3147[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="75.97.115.1" dst_port="80" src_ip="136.65.159.172"/>
      <filter dst_ip="74.2.188.142" dst_port="80" src_ip="136.65.159.172"/>
    </slice>
    <from sec="1031548600" usec="0"/>
    <to sec="1031548665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="151.244.82.174"/>
    </slice>
    <from sec="1031547600" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
2734[label="219.3.97.175;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3151[label="219.3.97.175;25pkt 25fpkt", shape=invtriangle, color=brown];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.3.97.175:*, 209.235.202.126:*}[52%]&lt;BR/&gt;{219.3.97.175:6667, *:*}[24%]&lt;BR/&gt;{219.3.97.175:6668, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (12%)&lt;BR/&gt; 6668: (10%)&lt;BR/&gt; 113: (8%)&lt;BR/&gt; 6669: (4%)&lt;BR/&gt; 61185: (2%)&gt;];
}
2734--3151[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="209.235.202.126" src_ip="219.3.97.175"/>
      <filter src_ip="219.3.97.175" src_port="6667"/>
      <filter src_ip="219.3.97.175" src_port="6668"/>
    </slice>
    <from sec="1031547606" usec="0"/>
    <to sec="1031548672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_492{
style=filled;
color=gray75;
2736[label="208.29.101.176;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3152[label="208.29.101.176;7pkt 7fpkt", shape=invtriangle, color=brown];
3355[label="208.29.101.176;7pkt 7fpkt", shape=invhouse, color=bisque];
stat492[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.29.101.176:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4579: (7.14286%)&lt;BR/&gt; 4317: (7.14286%)&lt;BR/&gt; 3717: (7.14286%)&lt;BR/&gt; 3174: (7.14286%)&gt;];
}
2736--3152[label="1;7pkt 7fpkt"];
2736--3355[label="1;7pkt 7fpkt"];
3152--3355[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="208.29.101.176"/>
    </slice>
    <from sec="1031547996" usec="0"/>
    <to sec="1031548657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.66.245.178"/>
    </slice>
    <from sec="1031547601" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_494{
style=filled;
color=gray75;
2748[label="44.131.30.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3158[label="44.131.30.181;1pkt 1fpkt", shape=invtriangle, color=brown];
stat494[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.131.30.181:50208, 208.103.214.233:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50208: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2748--3158[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.103.214.233" dst_port="137" src_ip="44.131.30.181" src_port="50208"/>
    </slice>
    <from sec="1031547704" usec="0"/>
    <to sec="1031547865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="10.0.13.187"/>
    </slice>
    <from sec="1031547612" usec="0"/>
    <to sec="1031548671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.32.22.196"/>
    </slice>
    <from sec="1031547604" usec="0"/>
    <to sec="1031548672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.65.182.198"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_498{
style=filled;
color=gray75;
2806[label="141.133.240.203;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3183[label="141.133.240.203;1pkt 1fpkt", shape=invtriangle, color=brown];
stat498[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.240.203:0, 150.75.39.136:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2806--3183[label="1;1pkt 1fpkt"];
2806--3370[label="1;1pkt 1fpkt"];
3183--3370[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.75.39.136" src_ip="141.133.240.203"/>
    </slice>
    <from sec="1031547604" usec="0"/>
    <to sec="1031548663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_499{
style=filled;
color=gray75;
2807[label="195.136.192.204;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3184[label="195.136.192.204;3pkt 3fpkt", shape=invtriangle, color=brown];
stat499[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.136.192.204:80, 141.133.205.74:1359}[33.3333%]&lt;BR/&gt;{195.136.192.204:80, 141.133.205.74:1360}[33.3333%]&lt;BR/&gt;{195.136.192.204:80, 141.133.205.74:1365}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1365: (16.6667%)&lt;BR/&gt; 1360: (16.6667%)&lt;BR/&gt; 1359: (16.6667%)&gt;];
}
2807--3184[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.205.74" dst_port="1365" src_ip="195.136.192.204" src_port="80"/>
      <filter dst_ip="141.133.205.74" dst_port="1360" src_ip="195.136.192.204" src_port="80"/>
      <filter dst_ip="141.133.205.74" dst_port="1359" src_ip="195.136.192.204" src_port="80"/>
    </slice>
    <from sec="1031548611" usec="0"/>
    <to sec="1031548650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,002,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.191.64.215"/>
    </slice>
    <from sec="1031548169" usec="0"/>
    <to sec="1031548194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.648903,2.09749,002,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.191.64.218"/>
    </slice>
    <from sec="1031548547" usec="0"/>
    <to sec="1031548555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_502{
style=filled;
color=gray75;
2838[label="54.80.165.218;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3201[label="54.80.165.218;2pkt 2fpkt", shape=invtriangle, color=brown];
stat502[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.80.165.218:2483, 136.65.168.162:80}[50%]&lt;BR/&gt;{54.80.165.218:2484, 136.65.168.162:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2484: (25%)&lt;BR/&gt; 2483: (25%)&gt;];
}
2838--3201[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.65.168.162" dst_port="80" src_ip="54.80.165.218" src_port="2484"/>
      <filter dst_ip="136.65.168.162" dst_port="80" src_ip="54.80.165.218" src_port="2483"/>
    </slice>
    <from sec="1031548611" usec="0"/>
    <to sec="1031548633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_503{
style=filled;
color=gray75;
2853[label="201.65.165.226;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3208[label="201.65.165.226;36pkt 36fpkt", shape=invtriangle, color=brown];
stat503[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.65.165.226:80, 141.133.209.179:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4169: (1.40845%)&lt;BR/&gt; 4168: (1.40845%)&lt;BR/&gt; 4167: (1.40845%)&lt;BR/&gt; 4166: (1.40845%)&gt;];
}
2853--3208[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.209.179" src_ip="201.65.165.226" src_port="80"/>
    </slice>
    <from sec="1031547680" usec="0"/>
    <to sec="1031547695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_504{
style=filled;
color=gray75;
2854[label="141.133.65.228;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3209[label="141.133.65.228;8pkt 8fpkt", shape=invtriangle, color=brown];
stat504[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.65.228:*, 46.200.179.136:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1203: (6.66667%)&lt;BR/&gt; 1202: (6.66667%)&lt;BR/&gt; 1199: (6.66667%)&lt;BR/&gt; 1198: (6.66667%)&gt;];
}
2854--3209[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="46.200.179.136" dst_port="80" src_ip="141.133.65.228"/>
    </slice>
    <from sec="1031548147" usec="0"/>
    <to sec="1031548562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851534,2.00135,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_505{
style=filled;
color=gray75;
1401[label="208.18.23.230;s;25pkt 25fpkt", shape=diamond, color=yellow];
2856[label="208.18.23.230;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3211[label="208.18.23.230;25pkt 25fpkt", shape=invtriangle, color=brown];
3383[label="208.18.23.230;26pkt 26fpkt", shape=invhouse, color=bisque];
stat505[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.18.23.230:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4891: (1.96078%)&lt;BR/&gt; 4535: (1.96078%)&lt;BR/&gt; 4325: (1.96078%)&lt;BR/&gt; 4311: (1.96078%)&gt;];
}
1401--2258[label="0.08;2pkt 2fpkt"];
1401--2856[label="1;25pkt 25fpkt"];
1401--3211[label="0.96;24pkt 24fpkt"];
1401--3383[label="1;25pkt 25fpkt"];
2856--3211[label="1;25pkt 25fpkt"];
2856--3383[label="1;26pkt 26fpkt"];
3211--3383[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="208.18.23.230"/>
    </slice>
    <from sec="1031547675" usec="0"/>
    <to sec="1031548614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_506{
style=filled;
color=gray75;
2860[label="136.65.133.231;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3212[label="136.65.133.231;21pkt 21fpkt", shape=invtriangle, color=brown];
stat506[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.133.231:80, 75.155.47.84:*}[59.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60733: (2.32558%)&lt;BR/&gt; 58084: (2.32558%)&lt;BR/&gt; 53516: (2.32558%)&lt;BR/&gt; 53201: (2.32558%)&gt;];
}
2860--3212[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="75.155.47.84" src_ip="136.65.133.231" src_port="80"/>
    </slice>
    <from sec="1031547700" usec="0"/>
    <to sec="1031548578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.850001,2.02701,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_507{
style=filled;
color=gray75;
75[label="208.124.119.234s;2pkt 2fpkt", shape=rectangle, color=red];
2872[label="208.124.119.234;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3217[label="208.124.119.234;1pkt 1fpkt", shape=invtriangle, color=brown];
stat507[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.110.34:80, 208.173.87.172:1835}[50%]&lt;BR/&gt;{208.124.119.234:137, 208.103.7.134:137}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (75%)&lt;BR/&gt; 1835: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
75--163[label="0.5;1pkt 1fpkt"];
75--2872[label="1;1pkt 1fpkt"];
75--3217[label="1;1pkt 1fpkt"];
2872--3217[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.103.7.134" dst_port="137" src_ip="208.124.119.234" src_port="137"/>
      <filter dst_ip="208.173.87.172" dst_port="1835" src_ip="136.65.110.34" src_port="80"/>
    </slice>
    <from sec="1031548483" usec="0"/>
    <to sec="1031548500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_508{
style=filled;
color=gray75;
2874[label="136.65.182.234;76pkt 76fpkt", shape=pentagon, color=darkviolet];
3219[label="136.65.182.234;76pkt 76fpkt", shape=invtriangle, color=brown];
3389[label="136.65.182.234;75pkt 75fpkt", shape=invhouse, color=bisque];
stat508[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.182.234:*, 193.53.97.111:80}[97.3684%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50674: (0.660793%)&lt;BR/&gt; 50673: (0.660793%)&lt;BR/&gt; 50672: (0.660793%)&lt;BR/&gt; 50671: (0.660793%)&gt;];
}
2874--3219[label="1;76pkt 76fpkt"];
2874--3389[label="1;75pkt 75fpkt"];
3219--3389[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_ip="193.53.97.111" dst_port="80" src_ip="136.65.182.234"/>
    </slice>
    <from sec="1031548522" usec="0"/>
    <to sec="1031548669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_509{
style=filled;
color=gray75;
2878[label="75.97.120.235;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3221[label="75.97.120.235;2pkt 2fpkt", shape=invtriangle, color=brown];
stat509[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.97.120.235:80, 141.133.232.10:1663}[50%]&lt;BR/&gt;{75.97.120.235:80, 141.133.232.10:1664}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1664: (25%)&lt;BR/&gt; 1663: (25%)&gt;];
}
2878--3221[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.232.10" dst_port="1664" src_ip="75.97.120.235" src_port="80"/>
      <filter dst_ip="141.133.232.10" dst_port="1663" src_ip="75.97.120.235" src_port="80"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
2887[label="208.9.100.240;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3224[label="208.9.100.240;10pkt 10fpkt", shape=invtriangle, color=brown];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.9.100.240:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4897: (5%)&lt;BR/&gt; 4891: (5%)&lt;BR/&gt; 4435: (5%)&lt;BR/&gt; 4192: (5%)&gt;];
}
2887--3224[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="208.9.100.240"/>
    </slice>
    <from sec="1031547677" usec="0"/>
    <to sec="1031548663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_511{
style=filled;
color=gray75;
2888[label="209.225.173.242;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3225[label="209.225.173.242;24pkt 24fpkt", shape=invtriangle, color=brown];
stat511[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.225.173.242:443, 208.103.187.4:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1548: (2.08333%)&lt;BR/&gt; 1545: (2.08333%)&lt;BR/&gt; 1544: (2.08333%)&lt;BR/&gt; 1543: (2.08333%)&gt;];
}
2888--3225[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="208.103.187.4" src_ip="209.225.173.242" src_port="443"/>
    </slice>
    <from sec="1031548552" usec="0"/>
    <to sec="1031548616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_512{
style=filled;
color=gray75;
2894[label="18.70.13.244;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3229[label="18.70.13.244;1pkt 1fpkt", shape=invtriangle, color=brown];
stat512[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.70.13.244:6349, 136.87.133.40:4616}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6349: (50%)&lt;BR/&gt; 4616: (50%)&gt;];
}
2894--3229[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.87.133.40" dst_port="4616" src_ip="18.70.13.244" src_port="6349"/>
    </slice>
    <from sec="1031547658" usec="0"/>
    <to sec="1031548595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.66061,2.05436,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
2903[label="195.144.197.254;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3234[label="195.144.197.254;1pkt 1fpkt", shape=invtriangle, color=brown];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.144.197.254:1024, 208.78.228.24:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
2903--3234[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.78.228.24" dst_port="53" src_ip="195.144.197.254" src_port="1024"/>
    </slice>
    <from sec="1031547604" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86013,2.05934,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_514{
style=filled;
color=gray75;
2905[label="54.80.27.255;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3236[label="54.80.27.255;16pkt 16fpkt", shape=invtriangle, color=brown];
3395[label="54.80.27.255;17pkt 17fpkt", shape=invhouse, color=bisque];
stat514[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.80.27.255:*, 141.133.157.24:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54206: (3.06122%)&lt;BR/&gt; 54205: (3.06122%)&lt;BR/&gt; 54203: (3.06122%)&lt;BR/&gt; 54201: (3.06122%)&gt;];
}
2905--3236[label="1;16pkt 16fpkt"];
2905--3395[label="1;16pkt 16fpkt"];
3236--3395[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="141.133.157.24" dst_port="80" src_ip="54.80.27.255"/>
    </slice>
    <from sec="1031548025" usec="0"/>
    <to sec="1031548108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758742,2.12873,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.223.206.13"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758742,2.12873,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="170.108.171.61"/>
    </slice>
    <from sec="1031547875" usec="0"/>
    <to sec="1031548350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768778,2.08624,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
2469[label="141.133.201.70;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3284[label="141.133.201.70;22pkt 22fpkt", shape=invhouse, color=bisque];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.201.70:*, 193.86.138.73:80}[95.6522%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1828: (2.22222%)&lt;BR/&gt; 1827: (2.22222%)&lt;BR/&gt; 1826: (2.22222%)&lt;BR/&gt; 1825: (2.22222%)&gt;];
}
2469--3000[label="1;23pkt 23fpkt"];
2469--3284[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="193.86.138.73" dst_port="80" src_ip="141.133.201.70"/>
    </slice>
    <from sec="1031548212" usec="0"/>
    <to sec="1031548660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758742,2.12873,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="75.97.102.71"/>
    </slice>
    <from sec="1031547662" usec="0"/>
    <to sec="1031547665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.507502,2.06774,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_519{
style=filled;
color=gray75;
800[label="151.244.6.61;s;173pkt 173fpkt", shape=diamond, color=yellow];
stat519[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.244.6.61:80, 72.206.49.37:*}[30.0578%]&lt;BR/&gt;{151.244.6.61:80, 75.155.47.66:*}[28.3237%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3015: (0.578035%)&lt;BR/&gt; 1487: (0.578035%)&lt;BR/&gt; 65324: (0.289017%)&lt;BR/&gt; 64773: (0.289017%)&gt;];
}
800--1383[label="0.47191;42pkt 42fpkt"];
800--1819[label="1;77pkt 77fpkt"];
800--2247[label="0.0346821;6pkt 6fpkt"];
800--2255[label="0.0346821;6pkt 6fpkt"];
800--2257[label="0.0751445;13pkt 13fpkt"];
800--2267[label="0.0751445;13pkt 13fpkt"];
800--2274[label="0.0751445;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="72.206.49.37" src_ip="151.244.6.61" src_port="80"/>
      <filter dst_ip="75.155.47.66" src_ip="151.244.6.61" src_port="80"/>
    </slice>
    <from sec="1031547603" usec="0"/>
    <to sec="1031548608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758742,2.12873,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.8.69.95"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758742,2.12873,502,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="170.108.29.110"/>
    </slice>
    <from sec="1031547761" usec="0"/>
    <to sec="1031548124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758742,2.12873,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.24.31.150"/>
    </slice>
    <from sec="1031547612" usec="0"/>
    <to sec="1031548671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758742,2.12873,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="47.73.164.150"/>
    </slice>
    <from sec="1031547605" usec="0"/>
    <to sec="1031548669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.851171,2.10237,002,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
3124[label="219.92.230.159;1pkt 1fpkt", shape=invtriangle, color=brown];
3337[label="219.92.230.159;1pkt 1fpkt", shape=invhouse, color=bisque];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.92.230.159:137, 208.103.197.205:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (100%)&gt;];
}
3124--3337[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.103.197.205" dst_port="137" src_ip="219.92.230.159" src_port="137"/>
    </slice>
    <from sec="1031547904" usec="0"/>
    <to sec="1031547923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758742,2.12873,002,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.220.0.161"/>
    </slice>
    <from sec="1031548565" usec="0"/>
    <to sec="1031548573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758742,2.12873,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.226.36.162"/>
    </slice>
    <from sec="1031547603" usec="0"/>
    <to sec="1031548202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936544,2.05932,503,1 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_527{
style=filled;
color=gray75;
59[label="136.65.183.163s;2pkt 2fpkt", shape=rectangle, color=red];
2699[label="136.65.183.163;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3341[label="136.65.183.163;34pkt 34fpkt", shape=invhouse, color=bisque];
stat527[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.65.183.163:*, 213.73.2.74:80}[26.4706%]&lt;BR/&gt;{136.65.183.163:*, 47.229.104.20:80}[20.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1969: (2.7027%)&lt;BR/&gt; 1955: (2.7027%)&lt;BR/&gt; 1947: (2.7027%)&lt;BR/&gt; 1972: (1.35135%)&gt;];
}
59--3341[label="1;2pkt 2fpkt"];
2699--3341[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.73.2.74" dst_port="80" src_ip="136.65.183.163"/>
      <filter dst_ip="47.229.104.20" dst_port="80" src_ip="136.65.183.163"/>
    </slice>
    <from sec="1031548239" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758742,2.12873,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="10.0.13.187"/>
    </slice>
    <from sec="1031547612" usec="0"/>
    <to sec="1031548671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758742,2.12873,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="136.65.182.198"/>
    </slice>
    <from sec="1031548673" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.836843,2.02787,020,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_530{
style=filled;
color=gray75;
1255[label="223.88.183.238;d;3pkt 3fpkt", shape=diamond, color=yellow];
2043[label="223.88.183.238;d;3pkt 3fpkt", shape=hexagon, color=black];
3370[label="141.133.240.203;2pkt 2fpkt", shape=invhouse, color=bisque];
stat530[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.133.36.38:0, 223.88.183.238:0}[25%]&lt;BR/&gt;{141.133.106.103:0, 223.88.183.238:0}[25%]&lt;BR/&gt;{141.133.240.203:0, 150.75.39.136:0}[25%]&lt;BR/&gt;{141.133.240.203:0, 223.88.183.238:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1255--2043[label="1;3pkt 3fpkt"];
1255--3370[label="0.5;1pkt 1fpkt"];
2043--3370[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="223.88.183.238" src_ip="141.133.240.203"/>
      <filter dst_ip="150.75.39.136" src_ip="141.133.240.203"/>
      <filter dst_ip="223.88.183.238" src_ip="141.133.106.103"/>
      <filter dst_ip="223.88.183.238" src_ip="141.133.36.38"/>
    </slice>
    <from sec="1031547602" usec="0"/>
    <to sec="1031548663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758742,2.12873,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.37.244.205"/>
    </slice>
    <from sec="1031547606" usec="0"/>
    <to sec="1031547838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758742,2.12873,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.206.229.214"/>
    </slice>
    <from sec="1031547603" usec="0"/>
    <to sec="1031548562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758742,2.12873,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="170.127.32.222"/>
    </slice>
    <from sec="1031547603" usec="0"/>
    <to sec="1031548674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.758742,2.12873,002,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.124.119.234"/>
    </slice>
    <from sec="1031548487" usec="0"/>
    <to sec="1031548496" usec="0"/>
  </anomaly>

</admd:annotation>
