<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="2.242.47.240" dst_port="80" proto="tcp" src_ip="161.238.11.62" src_port="80"/>
      <filter dst_ip="2.242.47.225" dst_port="80" proto="tcp" src_ip="161.238.11.62" src_port="80"/>
      <from sec="1034226180" usec="0"/>
      <to sec="1034226563" usec="0"/>
    </slice>
    <from sec="1034226180" usec="0"/>
    <to sec="1034226563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,901,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1{
style=filled;
color=gray75;
9[label="212.24.4.14s;297pkt 297fpkt", shape=rectangle, color=red];
292[label="195.74.111.141s;143pkt 143fpkt", shape=rectangle, color=red];
310[label="1.80.194.163s;185pkt 185fpkt", shape=rectangle, color=red];
376[label="197.206.152.240s;185pkt 185fpkt", shape=rectangle, color=red];
5143[label="195.74.111.141;254pkt 254fpkt", shape=pentagon, color=darkviolet];
5858[label="197.206.152.240;253pkt 253fpkt", shape=pentagon, color=darkviolet];
6735[label="195.74.111.141;253pkt 253fpkt", shape=invtriangle, color=brown];
7755[label="195.74.111.141;253pkt 253fpkt", shape=invhouse, color=bisque];
stat1[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.74.111.141:1025, *:137}[31.4746%]&lt;BR/&gt;{197.206.152.240:1025, *:137}[31.3507%]&lt;BR/&gt;{1.80.194.163:1025, *:137}[22.9244%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (49.9726%)&lt;BR/&gt; 80: (0.0274273%)&gt;];
}
9--22[label="0.003367;1pkt 1fpkt"];
9--53[label="0.003367;1pkt 1fpkt"];
9--109[label="0.5;1pkt 1fpkt"];
9--310[label="0.383784;71pkt 71fpkt"];
9--376[label="0.248649;46pkt 46fpkt"];
9--430[label="0.003367;1pkt 1fpkt"];
9--435[label="0.003367;1pkt 1fpkt"];
9--442[label="0.00673401;2pkt 2fpkt"];
9--535[label="0.003367;1pkt 1fpkt"];
9--539[label="0.003367;1pkt 1fpkt"];
9--544[label="0.00673401;2pkt 2fpkt"];
9--889[label="0.003367;1pkt 1fpkt"];
9--902[label="0.003367;1pkt 1fpkt"];
9--903[label="0.003367;1pkt 1fpkt"];
9--1197[label="0.003367;1pkt 1fpkt"];
9--1884[label="0.003367;1pkt 1fpkt"];
9--2735[label="0.003367;1pkt 1fpkt"];
9--3095[label="0.003367;1pkt 1fpkt"];
9--3245[label="0.003367;1pkt 1fpkt"];
9--3346[label="0.003367;1pkt 1fpkt"];
9--3874[label="0.003367;1pkt 1fpkt"];
9--3947[label="0.00673401;2pkt 2fpkt"];
9--3951[label="0.00673401;2pkt 2fpkt"];
9--3953[label="0.00673401;2pkt 2fpkt"];
9--3960[label="0.00673401;2pkt 2fpkt"];
9--3962[label="0.00673401;2pkt 2fpkt"];
9--3970[label="0.00673401;2pkt 2fpkt"];
9--3972[label="0.00673401;2pkt 2fpkt"];
9--5143[label="0.149606;38pkt 38fpkt"];
9--5340[label="0.003367;1pkt 1fpkt"];
9--5462[label="0.003367;1pkt 1fpkt"];
9--5858[label="0.288538;73pkt 73fpkt"];
9--6735[label="0.150198;38pkt 38fpkt"];
9--6871[label="0.003367;1pkt 1fpkt"];
9--7755[label="0.150198;38pkt 38fpkt"];
292--5143[label="1;143pkt 143fpkt"];
292--6735[label="0.993007;142pkt 142fpkt"];
292--7755[label="0.993007;142pkt 142fpkt"];
376--5858[label="1;185pkt 185fpkt"];
5143--6735[label="1;253pkt 253fpkt"];
5143--7755[label="1;253pkt 253fpkt"];
6735--7755[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.74.111.141" src_port="1025"/>
      <filter dst_port="137" src_ip="197.206.152.240" src_port="1025"/>
      <filter dst_port="137" src_ip="1.80.194.163" src_port="1025"/>
    </slice>
    <from sec="1034226592" usec="0"/>
    <to sec="1034226660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.827709,2.11876,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_2{
style=filled;
color=gray75;
108[label="2.180.202.180s;1pkt 1fpkt", shape=rectangle, color=red];
148[label="161.238.139.57d;1pkt 1fpkt", shape=rectangle, color=red];
921[label="2.180.202.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
5456[label="2.180.202.180;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat2[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.180.202.180:4183, 161.238.139.57:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 4183: (50%)&gt;];
}
108--148[label="1;1pkt 1fpkt"];
108--442[label="1;1pkt 1fpkt"];
108--544[label="1;1pkt 1fpkt"];
108--585[label="1;1pkt 1fpkt"];
108--921[label="1;1pkt 1fpkt"];
108--5456[label="1;1pkt 1fpkt"];
148--442[label="1;1pkt 1fpkt"];
148--544[label="1;1pkt 1fpkt"];
148--585[label="1;1pkt 1fpkt"];
148--921[label="1;1pkt 1fpkt"];
148--5456[label="1;1pkt 1fpkt"];
921--5456[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.139.57" dst_port="6699" src_ip="2.180.202.180" src_port="4183"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="85.34.112.117" dst_port="80" proto="tcp" src_ip="85.34.112.117" src_port="80"/>
      <filter dst_ip="85.34.112.117" dst_port="80" proto="udp" src_ip="85.34.112.117" src_port="80"/>
      <filter dst_ip="85.34.112.117" dst_port="80" proto="tcp" src_ip="85.34.112.117" src_port="80"/>
      <filter dst_ip="85.34.112.117" dst_port="80" proto="udp" src_ip="85.34.112.117" src_port="80"/>
      <filter dst_ip="85.34.112.117" dst_port="80" proto="tcp" src_ip="85.34.112.117" src_port="80"/>
      <filter dst_ip="85.34.112.117" dst_port="80" proto="udp" src_ip="85.34.112.117" src_port="80"/>
      <filter dst_ip="85.34.112.117" dst_port="80" proto="tcp" src_ip="85.34.112.117" src_port="80"/>
      <filter dst_ip="85.34.112.117" dst_port="80" proto="udp" src_ip="85.34.112.117" src_port="80"/>
      <from sec="1034226523" usec="0"/>
      <to sec="1034226591" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="161.238.11.62" dst_port="80" proto="tcp" src_ip="85.34.112.117" src_port="80"/>
      <filter dst_ip="161.238.11.62" dst_port="80" proto="udp" src_ip="85.34.112.117" src_port="80"/>
      <filter dst_ip="161.238.11.62" dst_port="80" proto="tcp" src_ip="85.34.112.117" src_port="80"/>
      <filter dst_ip="161.238.11.62" dst_port="80" proto="udp" src_ip="85.34.112.117" src_port="80"/>
      <filter dst_ip="161.238.11.62" dst_port="80" proto="tcp" src_ip="85.34.112.117" src_port="80"/>
      <filter dst_ip="161.238.11.62" dst_port="80" proto="udp" src_ip="85.34.112.117" src_port="80"/>
      <filter dst_ip="161.238.11.62" dst_port="80" proto="tcp" src_ip="85.34.112.117" src_port="80"/>
      <filter dst_ip="161.238.11.62" dst_port="80" proto="udp" src_ip="85.34.112.117" src_port="80"/>
      <from sec="1034226523" usec="0"/>
      <to sec="1034226536" usec="0"/>
    </slice>
    <from sec="1034226522" usec="0"/>
    <to sec="1034226591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="161.238.11.130" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="161.238.11.130" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="161.238.11.130" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="161.238.11.130" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="161.238.11.130" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="161.238.11.130" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="161.238.11.130" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="161.238.11.130" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="161.238.11.130" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="161.238.11.130" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="161.238.11.130" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="161.238.11.130" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="161.238.11.130" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="161.238.11.130" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="161.238.11.130" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="161.238.11.130" dst_port="80" proto="udp" src_port="80"/>
      <from sec="1034226727" usec="0"/>
      <to sec="1034226741" usec="0"/>
    </slice>
    <from sec="1034226726" usec="0"/>
    <to sec="1034226741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.98.93.221" dst_port="80" proto="tcp" src_ip="197.195.86.82" src_port="4662"/>
      <filter dst_ip="141.98.93.221" dst_port="80" proto="tcp" src_ip="197.195.86.82" src_port="4662"/>
      <filter dst_ip="141.98.93.221" dst_port="80" proto="tcp" src_ip="197.195.86.82" src_port="4662"/>
      <filter dst_ip="141.98.93.221" dst_port="80" proto="tcp" src_ip="197.195.86.82" src_port="4662"/>
      <filter dst_ip="141.98.93.221" dst_port="80" proto="tcp" src_ip="185.191.192.192" src_port="4662"/>
      <filter dst_ip="141.98.93.221" dst_port="80" proto="tcp" src_ip="185.191.192.192" src_port="4662"/>
      <filter dst_ip="141.98.93.221" dst_port="80" proto="tcp" src_ip="185.191.192.192" src_port="4662"/>
      <filter dst_ip="141.98.93.221" dst_port="80" proto="tcp" src_ip="185.191.192.192" src_port="4662"/>
      <from sec="1034226615" usec="0"/>
      <to sec="1034226738" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="185.191.187.231" dst_port="80" proto="tcp" src_ip="197.195.86.82" src_port="4662"/>
      <filter dst_ip="185.191.187.231" dst_port="80" proto="tcp" src_ip="197.195.86.82" src_port="4662"/>
      <filter dst_ip="185.191.187.231" dst_port="80" proto="tcp" src_ip="197.195.86.82" src_port="4662"/>
      <filter dst_ip="185.191.187.231" dst_port="80" proto="tcp" src_ip="197.195.86.82" src_port="4662"/>
      <filter dst_ip="185.191.187.231" dst_port="80" proto="tcp" src_ip="185.191.192.192" src_port="4662"/>
      <filter dst_ip="185.191.187.231" dst_port="80" proto="tcp" src_ip="185.191.192.192" src_port="4662"/>
      <filter dst_ip="185.191.187.231" dst_port="80" proto="tcp" src_ip="185.191.192.192" src_port="4662"/>
      <filter dst_ip="185.191.187.231" dst_port="80" proto="tcp" src_ip="185.191.192.192" src_port="4662"/>
      <from sec="1034226615" usec="0"/>
      <to sec="1034226738" usec="0"/>
    </slice>
    <from sec="1034226615" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.128.26.220" dst_port="80" proto="tcp" src_ip="161.238.52.214" src_port="3612"/>
      <from sec="1034226000" usec="0"/>
      <to sec="1034226004" usec="0"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="195.42.96.6" src_port="1025"/>
      <from sec="1034226463" usec="0"/>
      <to sec="1034226471" usec="0"/>
    </slice>
    <from sec="1034226463" usec="0"/>
    <to sec="1034226471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.8.136.57" dst_port="137" proto="tcp" src_ip="203.204.52.9" src_port="80"/>
      <filter dst_ip="167.8.136.57" dst_port="137" proto="udp" src_ip="203.204.52.9" src_port="80"/>
      <filter dst_ip="167.8.136.57" dst_port="137" proto="tcp" src_ip="203.204.52.9" src_port="1025"/>
      <filter dst_ip="167.8.136.57" dst_port="137" proto="udp" src_ip="203.204.52.9" src_port="1025"/>
      <filter dst_ip="161.238.32.215" dst_port="137" proto="tcp" src_ip="203.204.52.9" src_port="80"/>
      <filter dst_ip="161.238.32.215" dst_port="137" proto="udp" src_ip="203.204.52.9" src_port="80"/>
      <filter dst_ip="161.238.32.215" dst_port="137" proto="tcp" src_ip="203.204.52.9" src_port="1025"/>
      <filter dst_ip="161.238.32.215" dst_port="137" proto="udp" src_ip="203.204.52.9" src_port="1025"/>
      <from sec="1034226583" usec="0"/>
      <to sec="1034226597" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="167.8.136.57" dst_port="137" proto="tcp" src_ip="43.178.236.9" src_port="80"/>
      <filter dst_ip="167.8.136.57" dst_port="137" proto="udp" src_ip="43.178.236.9" src_port="80"/>
      <filter dst_ip="167.8.136.57" dst_port="137" proto="tcp" src_ip="43.178.236.9" src_port="1025"/>
      <filter dst_ip="167.8.136.57" dst_port="137" proto="udp" src_ip="43.178.236.9" src_port="1025"/>
      <filter dst_ip="161.238.32.215" dst_port="137" proto="tcp" src_ip="43.178.236.9" src_port="80"/>
      <filter dst_ip="161.238.32.215" dst_port="137" proto="udp" src_ip="43.178.236.9" src_port="80"/>
      <filter dst_ip="161.238.32.215" dst_port="137" proto="tcp" src_ip="43.178.236.9" src_port="1025"/>
      <filter dst_ip="161.238.32.215" dst_port="137" proto="udp" src_ip="43.178.236.9" src_port="1025"/>
      <from sec="1034226582" usec="0"/>
      <to sec="1034226597" usec="0"/>
    </slice>
    <from sec="1034226582" usec="0"/>
    <to sec="1034226597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="213.119.118.9" src_port="1027"/>
      <from sec="1034226596" usec="0"/>
      <to sec="1034226602" usec="0"/>
    </slice>
    <from sec="1034226596" usec="0"/>
    <to sec="1034226602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="84.131.187.30" dst_port="137" proto="tcp" src_ip="1.96.66.21" src_port="1167"/>
      <filter dst_ip="84.131.187.30" dst_port="137" proto="udp" src_ip="1.96.66.21" src_port="1167"/>
      <filter dst_ip="84.131.187.30" dst_port="80" proto="tcp" src_ip="1.96.66.21" src_port="1167"/>
      <filter dst_ip="84.131.187.30" dst_port="80" proto="udp" src_ip="1.96.66.21" src_port="1167"/>
      <filter dst_ip="84.131.187.30" dst_port="137" proto="tcp" src_ip="1.96.66.21" src_port="2121"/>
      <filter dst_ip="84.131.187.30" dst_port="137" proto="udp" src_ip="1.96.66.21" src_port="2121"/>
      <filter dst_ip="84.131.187.30" dst_port="80" proto="tcp" src_ip="1.96.66.21" src_port="2121"/>
      <filter dst_ip="84.131.187.30" dst_port="80" proto="udp" src_ip="1.96.66.21" src_port="2121"/>
      <from sec="1034226649" usec="0"/>
      <to sec="1034226656" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="84.131.187.30" dst_port="137" proto="tcp" src_ip="161.238.10.21" src_port="1167"/>
      <filter dst_ip="84.131.187.30" dst_port="137" proto="udp" src_ip="161.238.10.21" src_port="1167"/>
      <filter dst_ip="84.131.187.30" dst_port="80" proto="tcp" src_ip="161.238.10.21" src_port="1167"/>
      <filter dst_ip="84.131.187.30" dst_port="80" proto="udp" src_ip="161.238.10.21" src_port="1167"/>
      <filter dst_ip="84.131.187.30" dst_port="137" proto="tcp" src_ip="161.238.10.21" src_port="2121"/>
      <filter dst_ip="84.131.187.30" dst_port="137" proto="udp" src_ip="161.238.10.21" src_port="2121"/>
      <filter dst_ip="84.131.187.30" dst_port="80" proto="tcp" src_ip="161.238.10.21" src_port="2121"/>
      <filter dst_ip="84.131.187.30" dst_port="80" proto="udp" src_ip="161.238.10.21" src_port="2121"/>
      <from sec="1034226650" usec="0"/>
      <to sec="1034226651" usec="0"/>
    </slice>
    <from sec="1034226649" usec="0"/>
    <to sec="1034226656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="203.212.169.21" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="203.212.169.21" src_port="1025"/>
      <filter dst_port="80" proto="tcp" src_ip="203.212.169.21" src_port="1025"/>
      <filter dst_port="80" proto="udp" src_ip="203.212.169.21" src_port="1025"/>
      <from sec="1034226424" usec="0"/>
      <to sec="1034226427" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="161.238.21.21" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="161.238.21.21" src_port="1025"/>
      <filter dst_port="80" proto="tcp" src_ip="161.238.21.21" src_port="1025"/>
      <filter dst_port="80" proto="udp" src_ip="161.238.21.21" src_port="1025"/>
      <from sec="1034226421" usec="0"/>
      <to sec="1034226427" usec="0"/>
    </slice>
    <from sec="1034226421" usec="0"/>
    <to sec="1034226427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="194.207.79.23" src_port="1025"/>
      <from sec="1034226314" usec="0"/>
      <to sec="1034226340" usec="0"/>
    </slice>
    <from sec="1034226314" usec="0"/>
    <to sec="1034226340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="202.148.2.27" src_port="1067"/>
      <filter dst_port="137" proto="udp" src_ip="202.148.2.27" src_port="1067"/>
      <filter dst_port="80" proto="tcp" src_ip="202.148.2.27" src_port="1067"/>
      <filter dst_port="80" proto="udp" src_ip="202.148.2.27" src_port="1067"/>
      <from sec="1034226113" usec="0"/>
      <to sec="1034226120" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="161.238.34.27" src_port="1067"/>
      <filter dst_port="137" proto="udp" src_ip="161.238.34.27" src_port="1067"/>
      <filter dst_port="80" proto="tcp" src_ip="161.238.34.27" src_port="1067"/>
      <filter dst_port="80" proto="udp" src_ip="161.238.34.27" src_port="1067"/>
      <from sec="1034226113" usec="0"/>
      <to sec="1034226116" usec="0"/>
    </slice>
    <from sec="1034226113" usec="0"/>
    <to sec="1034226120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="212.217.67.36" src_port="1026"/>
      <from sec="1034226098" usec="0"/>
      <to sec="1034226104" usec="0"/>
    </slice>
    <from sec="1034226098" usec="0"/>
    <to sec="1034226104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.230.111.35" dst_port="137" proto="tcp" src_ip="1.137.28.40" src_port="1026"/>
      <filter dst_ip="136.230.111.35" dst_port="137" proto="udp" src_ip="1.137.28.40" src_port="1026"/>
      <filter dst_ip="136.230.111.35" dst_port="137" proto="tcp" src_ip="1.137.28.40" src_port="80"/>
      <filter dst_ip="136.230.111.35" dst_port="137" proto="udp" src_ip="1.137.28.40" src_port="80"/>
      <from sec="1034226225" usec="0"/>
      <to sec="1034226232" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="136.230.111.35" dst_port="137" proto="tcp" src_ip="86.135.44.40" src_port="1026"/>
      <filter dst_ip="136.230.111.35" dst_port="137" proto="udp" src_ip="86.135.44.40" src_port="1026"/>
      <filter dst_ip="136.230.111.35" dst_port="137" proto="tcp" src_ip="86.135.44.40" src_port="80"/>
      <filter dst_ip="136.230.111.35" dst_port="137" proto="udp" src_ip="86.135.44.40" src_port="80"/>
      <from sec="1034226225" usec="0"/>
      <to sec="1034226233" usec="0"/>
    </slice>
    <from sec="1034226225" usec="0"/>
    <to sec="1034226233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="1.40.207.42" src_port="1026"/>
      <from sec="1034226077" usec="0"/>
      <to sec="1034226085" usec="0"/>
    </slice>
    <from sec="1034226077" usec="0"/>
    <to sec="1034226085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="2.181.6.44" src_port="1025"/>
      <from sec="1034226596" usec="0"/>
      <to sec="1034226604" usec="0"/>
    </slice>
    <from sec="1034226596" usec="0"/>
    <to sec="1034226604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="85.7.106.61" src_port="1026"/>
      <from sec="1034226765" usec="0"/>
      <to sec="1034226786" usec="0"/>
    </slice>
    <from sec="1034226765" usec="0"/>
    <to sec="1034226786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="212.210.27.62" src_port="32869"/>
      <from sec="1034226436" usec="0"/>
      <to sec="1034226453" usec="0"/>
    </slice>
    <from sec="1034226436" usec="0"/>
    <to sec="1034226454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="161.238.213.201" dst_port="137" proto="tcp" src_ip="197.139.138.62" src_port="1025"/>
      <filter dst_ip="161.238.213.201" dst_port="137" proto="udp" src_ip="197.139.138.62" src_port="1025"/>
      <filter dst_ip="161.238.213.201" dst_port="137" proto="tcp" src_ip="197.139.138.62" src_port="80"/>
      <filter dst_ip="161.238.213.201" dst_port="137" proto="udp" src_ip="197.139.138.62" src_port="80"/>
      <from sec="1034226356" usec="0"/>
      <to sec="1034226363" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="161.238.213.201" dst_port="137" proto="tcp" src_ip="193.101.14.48" src_port="1025"/>
      <filter dst_ip="161.238.213.201" dst_port="137" proto="udp" src_ip="193.101.14.48" src_port="1025"/>
      <filter dst_ip="161.238.213.201" dst_port="137" proto="tcp" src_ip="193.101.14.48" src_port="80"/>
      <filter dst_ip="161.238.213.201" dst_port="137" proto="udp" src_ip="193.101.14.48" src_port="80"/>
      <from sec="1034226357" usec="0"/>
      <to sec="1034226360" usec="0"/>
    </slice>
    <from sec="1034226356" usec="0"/>
    <to sec="1034226363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.40.69.172" dst_port="137" proto="tcp" src_ip="166.28.25.64" src_port="1025"/>
      <filter dst_ip="209.40.69.172" dst_port="137" proto="udp" src_ip="166.28.25.64" src_port="1025"/>
      <filter dst_ip="209.40.69.172" dst_port="443" proto="tcp" src_ip="166.28.25.64" src_port="1025"/>
      <filter dst_ip="209.40.69.172" dst_port="443" proto="udp" src_ip="166.28.25.64" src_port="1025"/>
      <from sec="1034226770" usec="0"/>
      <to sec="1034226793" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="209.40.69.172" dst_port="137" proto="tcp" src_ip="161.238.33.52" src_port="1025"/>
      <filter dst_ip="209.40.69.172" dst_port="137" proto="udp" src_ip="161.238.33.52" src_port="1025"/>
      <filter dst_ip="209.40.69.172" dst_port="443" proto="tcp" src_ip="161.238.33.52" src_port="1025"/>
      <filter dst_ip="209.40.69.172" dst_port="443" proto="udp" src_ip="161.238.33.52" src_port="1025"/>
      <from sec="1034226777" usec="0"/>
      <to sec="1034226779" usec="0"/>
    </slice>
    <from sec="1034226770" usec="0"/>
    <to sec="1034226793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="194.217.221.77" src_port="1028"/>
      <from sec="1034226596" usec="0"/>
      <to sec="1034226604" usec="0"/>
    </slice>
    <from sec="1034226596" usec="0"/>
    <to sec="1034226604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="195.91.192.79" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="195.91.192.79" src_port="1026"/>
      <from sec="1034226556" usec="0"/>
      <to sec="1034226563" usec="0"/>
    </slice>
    <from sec="1034226556" usec="0"/>
    <to sec="1034226563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="201.2.4.81" src_port="1025"/>
      <from sec="1034226568" usec="0"/>
      <to sec="1034226603" usec="0"/>
    </slice>
    <from sec="1034226568" usec="0"/>
    <to sec="1034226603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="1.41.210.101" src_port="1025"/>
      <from sec="1034226371" usec="0"/>
      <to sec="1034226379" usec="0"/>
    </slice>
    <from sec="1034226371" usec="0"/>
    <to sec="1034226379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="1.124.152.102" src_port="1025"/>
      <from sec="1034226127" usec="0"/>
      <to sec="1034226135" usec="0"/>
    </slice>
    <from sec="1034226127" usec="0"/>
    <to sec="1034226135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="75.238.38.114" src_port="1036"/>
      <from sec="1034226529" usec="0"/>
      <to sec="1034226536" usec="0"/>
    </slice>
    <from sec="1034226529" usec="0"/>
    <to sec="1034226536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="194.12.254.141" src_port="1026"/>
      <from sec="1034226710" usec="0"/>
      <to sec="1034226717" usec="0"/>
    </slice>
    <from sec="1034226710" usec="0"/>
    <to sec="1034226717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.18.104.84" dst_port="137" proto="tcp" src_ip="212.66.6.147" src_port="1044"/>
      <filter dst_ip="212.18.104.84" dst_port="137" proto="udp" src_ip="212.66.6.147" src_port="1044"/>
      <filter dst_ip="212.18.104.84" dst_port="137" proto="tcp" src_ip="212.66.6.147" src_port="80"/>
      <filter dst_ip="212.18.104.84" dst_port="137" proto="udp" src_ip="212.66.6.147" src_port="80"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="tcp" src_ip="212.66.6.147" src_port="1044"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="udp" src_ip="212.66.6.147" src_port="1044"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="tcp" src_ip="212.66.6.147" src_port="80"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="udp" src_ip="212.66.6.147" src_port="80"/>
      <from sec="1034226348" usec="0"/>
      <to sec="1034226371" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="212.18.104.84" dst_port="137" proto="tcp" src_ip="196.213.118.147" src_port="1044"/>
      <filter dst_ip="212.18.104.84" dst_port="137" proto="udp" src_ip="196.213.118.147" src_port="1044"/>
      <filter dst_ip="212.18.104.84" dst_port="137" proto="tcp" src_ip="196.213.118.147" src_port="80"/>
      <filter dst_ip="212.18.104.84" dst_port="137" proto="udp" src_ip="196.213.118.147" src_port="80"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="tcp" src_ip="196.213.118.147" src_port="1044"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="udp" src_ip="196.213.118.147" src_port="1044"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="tcp" src_ip="196.213.118.147" src_port="80"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="udp" src_ip="196.213.118.147" src_port="80"/>
      <from sec="1034226352" usec="0"/>
      <to sec="1034226362" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="212.18.104.84" dst_port="137" proto="tcp" src_ip="86.148.230.147" src_port="1044"/>
      <filter dst_ip="212.18.104.84" dst_port="137" proto="udp" src_ip="86.148.230.147" src_port="1044"/>
      <filter dst_ip="212.18.104.84" dst_port="137" proto="tcp" src_ip="86.148.230.147" src_port="80"/>
      <filter dst_ip="212.18.104.84" dst_port="137" proto="udp" src_ip="86.148.230.147" src_port="80"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="tcp" src_ip="86.148.230.147" src_port="1044"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="udp" src_ip="86.148.230.147" src_port="1044"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="tcp" src_ip="86.148.230.147" src_port="80"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="udp" src_ip="86.148.230.147" src_port="80"/>
      <from sec="1034226369" usec="0"/>
      <to sec="1034226371" usec="0"/>
    </slice>
    <from sec="1034226348" usec="0"/>
    <to sec="1034226371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.230.110.192" dst_port="137" proto="tcp" src_ip="74.6.192.152" src_port="62647"/>
      <filter dst_ip="136.230.110.192" dst_port="137" proto="udp" src_ip="74.6.192.152" src_port="62647"/>
      <filter dst_ip="136.230.110.192" dst_port="1224" proto="tcp" src_ip="74.6.192.152" src_port="62647"/>
      <filter dst_ip="136.230.110.192" dst_port="1224" proto="udp" src_ip="74.6.192.152" src_port="62647"/>
      <filter dst_ip="136.230.110.192" dst_port="137" proto="tcp" src_ip="74.6.192.152" src_port="25"/>
      <filter dst_ip="136.230.110.192" dst_port="137" proto="udp" src_ip="74.6.192.152" src_port="25"/>
      <filter dst_ip="136.230.110.192" dst_port="1224" proto="tcp" src_ip="74.6.192.152" src_port="25"/>
      <filter dst_ip="136.230.110.192" dst_port="1224" proto="udp" src_ip="74.6.192.152" src_port="25"/>
      <from sec="1034226193" usec="0"/>
      <to sec="1034226208" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="136.230.110.192" dst_port="137" proto="tcp" src_ip="202.181.176.152" src_port="62647"/>
      <filter dst_ip="136.230.110.192" dst_port="137" proto="udp" src_ip="202.181.176.152" src_port="62647"/>
      <filter dst_ip="136.230.110.192" dst_port="1224" proto="tcp" src_ip="202.181.176.152" src_port="62647"/>
      <filter dst_ip="136.230.110.192" dst_port="1224" proto="udp" src_ip="202.181.176.152" src_port="62647"/>
      <filter dst_ip="136.230.110.192" dst_port="137" proto="tcp" src_ip="202.181.176.152" src_port="25"/>
      <filter dst_ip="136.230.110.192" dst_port="137" proto="udp" src_ip="202.181.176.152" src_port="25"/>
      <filter dst_ip="136.230.110.192" dst_port="1224" proto="tcp" src_ip="202.181.176.152" src_port="25"/>
      <filter dst_ip="136.230.110.192" dst_port="1224" proto="udp" src_ip="202.181.176.152" src_port="25"/>
      <from sec="1034226194" usec="0"/>
      <to sec="1034226207" usec="0"/>
    </slice>
    <from sec="1034226193" usec="0"/>
    <to sec="1034226208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="200.149.170.164" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="200.149.170.164" src_port="1025"/>
      <from sec="1034226077" usec="0"/>
      <to sec="1034226099" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="136.230.78.164" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="136.230.78.164" src_port="1025"/>
      <from sec="1034226077" usec="0"/>
      <to sec="1034226099" usec="0"/>
    </slice>
    <from sec="1034226077" usec="0"/>
    <to sec="1034226099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="1.132.147.167" src_port="1026"/>
      <from sec="1034226575" usec="0"/>
      <to sec="1034226608" usec="0"/>
    </slice>
    <from sec="1034226575" usec="0"/>
    <to sec="1034226608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="1.147.131.183" src_port="1025"/>
      <from sec="1034226757" usec="0"/>
      <to sec="1034226764" usec="0"/>
    </slice>
    <from sec="1034226757" usec="0"/>
    <to sec="1034226764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="180.19.117.190" dst_port="137" proto="tcp" src_ip="1.127.19.193" src_port="1025"/>
      <filter dst_ip="180.19.117.190" dst_port="137" proto="udp" src_ip="1.127.19.193" src_port="1025"/>
      <filter dst_ip="180.19.117.190" dst_port="80" proto="tcp" src_ip="1.127.19.193" src_port="1025"/>
      <filter dst_ip="180.19.117.190" dst_port="80" proto="udp" src_ip="1.127.19.193" src_port="1025"/>
      <from sec="1034226078" usec="0"/>
      <to sec="1034226092" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="180.19.117.190" dst_port="137" proto="tcp" src_ip="167.119.203.193" src_port="1025"/>
      <filter dst_ip="180.19.117.190" dst_port="137" proto="udp" src_ip="167.119.203.193" src_port="1025"/>
      <filter dst_ip="180.19.117.190" dst_port="80" proto="tcp" src_ip="167.119.203.193" src_port="1025"/>
      <filter dst_ip="180.19.117.190" dst_port="80" proto="udp" src_ip="167.119.203.193" src_port="1025"/>
      <from sec="1034226081" usec="0"/>
      <to sec="1034226090" usec="0"/>
    </slice>
    <from sec="1034226078" usec="0"/>
    <to sec="1034226092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="194.122.212.195" src_port="1028"/>
      <from sec="1034226398" usec="0"/>
      <to sec="1034226406" usec="0"/>
    </slice>
    <from sec="1034226398" usec="0"/>
    <to sec="1034226406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.108.154.202" src_port="1025"/>
      <from sec="1034226319" usec="0"/>
      <to sec="1034226347" usec="0"/>
    </slice>
    <from sec="1034226319" usec="0"/>
    <to sec="1034226347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="85.116.174.53" dst_port="137" proto="tcp" src_ip="139.152.174.226" src_port="1027"/>
      <filter dst_ip="85.116.174.53" dst_port="137" proto="udp" src_ip="139.152.174.226" src_port="1027"/>
      <filter dst_ip="85.116.174.53" dst_port="137" proto="icmp" src_ip="139.152.174.226" src_port="1027"/>
      <filter dst_ip="85.116.174.53" dst_port="137" proto="tcp" src_ip="139.152.174.226" src_port="80"/>
      <filter dst_ip="85.116.174.53" dst_port="137" proto="udp" src_ip="139.152.174.226" src_port="80"/>
      <filter dst_ip="85.116.174.53" dst_port="137" proto="icmp" src_ip="139.152.174.226" src_port="80"/>
      <from sec="1034226106" usec="0"/>
      <to sec="1034226120" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="85.116.174.53" dst_port="137" proto="tcp" src_ip="167.164.146.226" src_port="1027"/>
      <filter dst_ip="85.116.174.53" dst_port="137" proto="udp" src_ip="167.164.146.226" src_port="1027"/>
      <filter dst_ip="85.116.174.53" dst_port="137" proto="icmp" src_ip="167.164.146.226" src_port="1027"/>
      <filter dst_ip="85.116.174.53" dst_port="137" proto="tcp" src_ip="167.164.146.226" src_port="80"/>
      <filter dst_ip="85.116.174.53" dst_port="137" proto="udp" src_ip="167.164.146.226" src_port="80"/>
      <filter dst_ip="85.116.174.53" dst_port="137" proto="icmp" src_ip="167.164.146.226" src_port="80"/>
      <from sec="1034226106" usec="0"/>
      <to sec="1034226120" usec="0"/>
    </slice>
    <from sec="1034226106" usec="0"/>
    <to sec="1034226120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="tcp" src_ip="1.88.72.230" src_port="1025"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="udp" src_ip="1.88.72.230" src_port="1025"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="tcp" src_ip="1.88.72.230" src_port="80"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="udp" src_ip="1.88.72.230" src_port="80"/>
      <from sec="1034226682" usec="0"/>
      <to sec="1034226704" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="tcp" src_ip="203.204.36.230" src_port="1025"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="udp" src_ip="203.204.36.230" src_port="1025"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="tcp" src_ip="203.204.36.230" src_port="80"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="udp" src_ip="203.204.36.230" src_port="80"/>
      <from sec="1034226683" usec="0"/>
      <to sec="1034226702" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="tcp" src_ip="209.83.196.230" src_port="1025"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="udp" src_ip="209.83.196.230" src_port="1025"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="tcp" src_ip="209.83.196.230" src_port="80"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="udp" src_ip="209.83.196.230" src_port="80"/>
      <from sec="1034226684" usec="0"/>
      <to sec="1034226695" usec="0"/>
    </slice>
    <from sec="1034226682" usec="0"/>
    <to sec="1034226704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="1.41.82.248" src_port="1025"/>
      <from sec="1034226406" usec="0"/>
      <to sec="1034226421" usec="0"/>
    </slice>
    <from sec="1034226406" usec="0"/>
    <to sec="1034226421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_40{
style=filled;
color=gray75;
198[label="194.205.57.4s;1pkt 1fpkt", shape=rectangle, color=red];
384[label="162.77.104.249s;1pkt 1fpkt", shape=rectangle, color=red];
574[label="141.98.93.221;d;360pkt 360fpkt", shape=diamond, color=yellow];
771[label="75.195.60.231;s;1pkt 1fpkt", shape=diamond, color=yellow];
1019[label="210.218.134.10;s;2pkt 2fpkt", shape=diamond, color=yellow];
1325[label="196.233.84.173;s;1pkt 1fpkt", shape=diamond, color=yellow];
1333[label="196.233.106.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
1555[label="196.232.105.118;s;1pkt 1fpkt", shape=diamond, color=yellow];
1776[label="218.232.24.175;s;1pkt 1fpkt", shape=diamond, color=yellow];
1894[label="43.188.112.249;s;1pkt 1fpkt", shape=diamond, color=yellow];
1919[label="75.192.102.51;s;1pkt 1fpkt", shape=diamond, color=yellow];
2385[label="213.216.222.240;s;4pkt 4fpkt", shape=diamond, color=yellow];
2392[label="211.26.26.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
2405[label="74.6.26.215;s;1pkt 1fpkt", shape=diamond, color=yellow];
3535[label="213.216.222.240;s;4pkt 4fpkt", shape=hexagon, color=black];
4083[label="210.218.134.10;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4686[label="75.192.138.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4791[label="196.232.111.93;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5742[label="75.194.132.224;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5761[label="135.218.23.226;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5803[label="75.195.60.231;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5860[label="213.216.222.240;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5921[label="43.188.112.249;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6020[label="210.218.134.10;3pkt 3fpkt", shape=invtriangle, color=brown];
6489[label="196.232.111.93;1pkt 1fpkt", shape=invtriangle, color=brown];
7219[label="213.216.222.240;5pkt 5fpkt", shape=invtriangle, color=brown];
7318[label="210.218.134.10;3pkt 3fpkt", shape=invhouse, color=bisque];
8032[label="75.195.60.231;1pkt 1fpkt", shape=invhouse, color=bisque];
stat40[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 141.98.93.221:*}[56.7493%]&lt;BR/&gt;{218.236.52.94:80, 141.98.93.221:*}[22.0386%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (26.8949%)&lt;BR/&gt; 80: (15.8924%)&lt;BR/&gt; 2848: (2.56724%)&lt;BR/&gt; 3399: (1.71149%)&lt;BR/&gt; 1214: (0.855746%)&gt;];
}
198--384[label="1;1pkt 1fpkt"];
198--574[label="1;1pkt 1fpkt"];
198--1894[label="1;1pkt 1fpkt"];
198--5921[label="1;1pkt 1fpkt"];
384--574[label="1;1pkt 1fpkt"];
384--1894[label="1;1pkt 1fpkt"];
384--5921[label="1;1pkt 1fpkt"];
574--724[label="1;80pkt 80fpkt"];
574--771[label="1;1pkt 1fpkt"];
574--845[label="1;1pkt 1fpkt"];
574--1013[label="1;1pkt 1fpkt"];
574--1019[label="1;2pkt 2fpkt"];
574--1203[label="1;1pkt 1fpkt"];
574--1295[label="1;1pkt 1fpkt"];
574--1325[label="1;1pkt 1fpkt"];
574--1333[label="1;1pkt 1fpkt"];
574--1555[label="1;1pkt 1fpkt"];
574--1763[label="1;1pkt 1fpkt"];
574--1776[label="1;1pkt 1fpkt"];
574--1863[label="1;1pkt 1fpkt"];
574--1894[label="1;1pkt 1fpkt"];
574--1919[label="1;1pkt 1fpkt"];
574--1956[label="1;1pkt 1fpkt"];
574--2385[label="1;4pkt 4fpkt"];
574--2392[label="1;1pkt 1fpkt"];
574--2405[label="1;1pkt 1fpkt"];
574--2702[label="1;71pkt 71fpkt"];
574--2723[label="1;1pkt 1fpkt"];
574--2829[label="1;1pkt 1fpkt"];
574--2852[label="1;1pkt 1fpkt"];
574--3486[label="1;1pkt 1fpkt"];
574--3535[label="1;4pkt 4fpkt"];
574--3814[label="1;1pkt 1fpkt"];
574--3946[label="0.0222222;8pkt 8fpkt"];
574--3947[label="0.00277778;1pkt 1fpkt"];
574--3950[label="0.0194444;7pkt 7fpkt"];
574--3959[label="0.0222222;8pkt 8fpkt"];
574--3960[label="0.00277778;1pkt 1fpkt"];
574--3969[label="0.0222222;8pkt 8fpkt"];
574--3970[label="0.00277778;1pkt 1fpkt"];
574--4083[label="0.666667;2pkt 2fpkt"];
574--4104[label="1;1pkt 1fpkt"];
574--4253[label="1;1pkt 1fpkt"];
574--4686[label="1;1pkt 1fpkt"];
574--4732[label="1;1pkt 1fpkt"];
574--4791[label="1;1pkt 1fpkt"];
574--5742[label="1;1pkt 1fpkt"];
574--5761[label="0.666667;2pkt 2fpkt"];
574--5803[label="1;1pkt 1fpkt"];
574--5860[label="0.75;3pkt 3fpkt"];
574--5921[label="1;1pkt 1fpkt"];
574--6020[label="0.666667;2pkt 2fpkt"];
574--6489[label="1;1pkt 1fpkt"];
574--7219[label="0.8;4pkt 4fpkt"];
574--7318[label="0.666667;2pkt 2fpkt"];
574--8032[label="1;1pkt 1fpkt"];
771--5803[label="1;1pkt 1fpkt"];
771--8032[label="1;1pkt 1fpkt"];
1019--4083[label="1;2pkt 2fpkt"];
1019--6020[label="1;2pkt 2fpkt"];
1019--7318[label="1;2pkt 2fpkt"];
1894--5921[label="1;1pkt 1fpkt"];
2385--3535[label="1;4pkt 4fpkt"];
2385--5860[label="0.75;3pkt 3fpkt"];
2385--7219[label="1;4pkt 4fpkt"];
3535--5860[label="0.75;3pkt 3fpkt"];
3535--7219[label="1;4pkt 4fpkt"];
4083--6020[label="1;3pkt 3fpkt"];
4083--7318[label="1;3pkt 3fpkt"];
4791--6489[label="1;1pkt 1fpkt"];
5803--8032[label="1;1pkt 1fpkt"];
5860--7219[label="1;4pkt 4fpkt"];
6020--7318[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.93.221" src_port="4662"/>
      <filter dst_ip="141.98.93.221" src_ip="218.236.52.94" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="86.8.177.254" src_port="1231"/>
      <from sec="1034226787" usec="0"/>
      <to sec="1034226793" usec="0"/>
    </slice>
    <from sec="1034226787" usec="0"/>
    <to sec="1034226793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="86.53.48.79"/>
      <filter dst_port="137" proto="udp" src_ip="86.53.48.79"/>
      <from sec="1034226649" usec="0"/>
      <to sec="1034226675" usec="0"/>
    </slice>
    <from sec="1034226649" usec="0"/>
    <to sec="1034226676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="194.144.92.247"/>
      <from sec="1034226603" usec="0"/>
      <to sec="1034226610" usec="0"/>
    </slice>
    <from sec="1034226603" usec="0"/>
    <to sec="1034226610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.8.138.81" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="53" proto="tcp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="53" proto="udp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="53" proto="tcp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="53" proto="udp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="53" proto="tcp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="53" proto="udp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="53" proto="tcp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="53" proto="udp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="1135" proto="tcp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="1135" proto="udp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="1135" proto="tcp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="1135" proto="udp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="1135" proto="tcp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="1135" proto="udp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="1135" proto="tcp" src_port="6699"/>
      <filter dst_ip="167.8.138.81" dst_port="1135" proto="udp" src_port="6699"/>
      <from sec="1034226484" usec="0"/>
      <to sec="1034226498" usec="0"/>
    </slice>
    <from sec="1034226484" usec="0"/>
    <to sec="1034226498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.43.88.86" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="160.43.88.86" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="160.43.88.86" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="160.43.88.86" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="160.43.88.86" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="160.43.88.86" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="160.43.88.86" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="160.43.88.86" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="160.43.88.86" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="160.43.88.86" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="160.43.88.86" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="160.43.88.86" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="160.43.88.86" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="160.43.88.86" dst_port="80" proto="udp" src_port="6699"/>
      <filter dst_ip="160.43.88.86" dst_port="80" proto="tcp" src_port="6699"/>
      <filter dst_ip="160.43.88.86" dst_port="80" proto="udp" src_port="6699"/>
      <from sec="1034226523" usec="0"/>
      <to sec="1034226536" usec="0"/>
    </slice>
    <from sec="1034226522" usec="0"/>
    <to sec="1034226536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="75.2.249.138" proto="icmp"/>
      <filter dst_ip="75.2.249.138" proto="icmp"/>
      <filter dst_ip="75.2.249.138" proto="icmp"/>
      <filter dst_ip="75.2.249.138" proto="icmp"/>
      <from sec="1034226270" usec="0"/>
      <to sec="1034226278" usec="0"/>
    </slice>
    <from sec="1034226270" usec="0"/>
    <to sec="1034226278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="1.64.208.171" proto="udp" src_port="53"/>
      <filter dst_ip="1.64.208.171" proto="icmp" src_port="53"/>
      <filter dst_ip="1.64.208.171" proto="udp" src_port="53"/>
      <filter dst_ip="1.64.208.171" proto="icmp" src_port="53"/>
      <filter dst_ip="1.64.208.171" proto="udp" src_port="53"/>
      <filter dst_ip="1.64.208.171" proto="icmp" src_port="53"/>
      <filter dst_ip="1.64.208.171" proto="udp" src_port="53"/>
      <filter dst_ip="1.64.208.171" proto="icmp" src_port="53"/>
      <from sec="1034226356" usec="0"/>
      <to sec="1034226364" usec="0"/>
    </slice>
    <from sec="1034226356" usec="0"/>
    <to sec="1034226364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.190.195.251" proto="icmp"/>
      <filter dst_ip="194.190.195.251" proto="icmp"/>
      <filter dst_ip="194.190.195.251" proto="icmp"/>
      <filter dst_ip="194.190.195.251" proto="icmp"/>
      <from sec="1034226187" usec="0"/>
      <to sec="1034226194" usec="0"/>
    </slice>
    <from sec="1034226187" usec="0"/>
    <to sec="1034226194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.236.158.55" proto="icmp"/>
      <filter dst_ip="195.236.158.55" proto="icmp"/>
      <filter dst_ip="195.236.158.55" proto="icmp"/>
      <filter dst_ip="195.236.158.55" proto="icmp"/>
      <from sec="1034226106" usec="0"/>
      <to sec="1034226120" usec="0"/>
    </slice>
    <from sec="1034226106" usec="0"/>
    <to sec="1034226120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.18.73.60" proto="icmp"/>
      <filter dst_ip="213.18.73.60" proto="icmp"/>
      <filter dst_ip="213.18.73.60" proto="icmp"/>
      <filter dst_ip="213.18.73.60" proto="icmp"/>
      <from sec="1034226120" usec="0"/>
      <to sec="1034226126" usec="0"/>
    </slice>
    <from sec="1034226120" usec="0"/>
    <to sec="1034226126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="203.212.169.21" proto="icmp"/>
      <filter dst_ip="203.212.169.21" proto="icmp"/>
      <filter dst_ip="203.212.169.21" proto="icmp"/>
      <filter dst_ip="203.212.169.21" proto="icmp"/>
      <from sec="1034226424" usec="0"/>
      <to sec="1034226427" usec="0"/>
    </slice>
    <from sec="1034226421" usec="0"/>
    <to sec="1034226427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="196.249.105.41" dst_port="80" proto="tcp"/>
      <filter dst_ip="196.249.105.41" dst_port="80" proto="udp"/>
      <filter dst_ip="196.249.105.41" dst_port="80" proto="icmp"/>
      <filter dst_ip="196.249.105.41" dst_port="80" proto="tcp"/>
      <filter dst_ip="196.249.105.41" dst_port="80" proto="udp"/>
      <filter dst_ip="196.249.105.41" dst_port="80" proto="icmp"/>
      <filter dst_ip="196.249.105.41" dst_port="80" proto="tcp"/>
      <filter dst_ip="196.249.105.41" dst_port="80" proto="udp"/>
      <filter dst_ip="196.249.105.41" dst_port="80" proto="icmp"/>
      <filter dst_ip="196.249.105.41" dst_port="80" proto="tcp"/>
      <filter dst_ip="196.249.105.41" dst_port="80" proto="udp"/>
      <filter dst_ip="196.249.105.41" dst_port="80" proto="icmp"/>
      <from sec="1034226682" usec="0"/>
      <to sec="1034226689" usec="0"/>
    </slice>
    <from sec="1034226682" usec="0"/>
    <to sec="1034226689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.770373,2.18486,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="161.238.228.114" dst_port="80" proto="tcp" src_ip="212.26.48.132" src_port="80"/>
      <filter dst_ip="161.238.228.114" dst_port="80" proto="udp" src_ip="212.26.48.132" src_port="80"/>
      <filter dst_ip="161.238.228.114" dst_port="80" proto="tcp" src_ip="212.26.48.132" src_port="6699"/>
      <filter dst_ip="161.238.228.114" dst_port="80" proto="udp" src_ip="212.26.48.132" src_port="6699"/>
      <from sec="1034226762" usec="0"/>
      <to sec="1034226764" usec="0"/>
    </slice>
    <from sec="1034226752" usec="0"/>
    <to sec="1034226766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
2648[label="161.238.151.93;s;328pkt 328fpkt", shape=diamond, color=yellow];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.151.93:*, 135.174.75.128:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2368: (0.152439%)&lt;BR/&gt; 2367: (0.152439%)&lt;BR/&gt; 2366: (0.152439%)&lt;BR/&gt; 2365: (0.152439%)&gt;];
}
2648--4794[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.174.75.128" dst_port="80" src_ip="161.238.151.93"/>
    </slice>
    <from sec="1034226645" usec="0"/>
    <to sec="1034226732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25458,2.27478,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="2.242.47.225" dst_port="80" proto="tcp" src_ip="161.238.11.62" src_port="1026"/>
      <filter dst_ip="2.242.47.225" dst_port="80" proto="udp" src_ip="161.238.11.62" src_port="1026"/>
      <filter dst_ip="2.242.47.225" dst_port="137" proto="tcp" src_ip="161.238.11.62" src_port="1026"/>
      <filter dst_ip="2.242.47.225" dst_port="137" proto="udp" src_ip="161.238.11.62" src_port="1026"/>
      <filter dst_ip="2.242.47.240" dst_port="80" proto="tcp" src_ip="161.238.11.62" src_port="1026"/>
      <filter dst_ip="2.242.47.240" dst_port="80" proto="udp" src_ip="161.238.11.62" src_port="1026"/>
      <filter dst_ip="2.242.47.240" dst_port="137" proto="tcp" src_ip="161.238.11.62" src_port="1026"/>
      <filter dst_ip="2.242.47.240" dst_port="137" proto="udp" src_ip="161.238.11.62" src_port="1026"/>
      <from sec="1034226180" usec="0"/>
      <to sec="1034226188" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="2.242.47.225" dst_port="80" proto="tcp" src_ip="186.4.127.62" src_port="1026"/>
      <filter dst_ip="2.242.47.225" dst_port="80" proto="udp" src_ip="186.4.127.62" src_port="1026"/>
      <filter dst_ip="2.242.47.225" dst_port="137" proto="tcp" src_ip="186.4.127.62" src_port="1026"/>
      <filter dst_ip="2.242.47.225" dst_port="137" proto="udp" src_ip="186.4.127.62" src_port="1026"/>
      <filter dst_ip="2.242.47.240" dst_port="80" proto="tcp" src_ip="186.4.127.62" src_port="1026"/>
      <filter dst_ip="2.242.47.240" dst_port="80" proto="udp" src_ip="186.4.127.62" src_port="1026"/>
      <filter dst_ip="2.242.47.240" dst_port="137" proto="tcp" src_ip="186.4.127.62" src_port="1026"/>
      <filter dst_ip="2.242.47.240" dst_port="137" proto="udp" src_ip="186.4.127.62" src_port="1026"/>
      <from sec="1034226180" usec="0"/>
      <to sec="1034226188" usec="0"/>
    </slice>
    <from sec="1034226180" usec="0"/>
    <to sec="1034226188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37299,2.25445,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
201[label="1.137.51.5s;49pkt 49fpkt", shape=rectangle, color=red];
459[label="1.137.51.5s;49pkt 49fpkt", shape=ellipse, color=green];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.137.51.5:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
201--459[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.137.51.5" src_port="1026"/>
    </slice>
    <from sec="1034226543" usec="0"/>
    <to sec="1034226550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37299,2.25445,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
220[label="43.70.246.31s;99pkt 99fpkt", shape=rectangle, color=red];
462[label="43.70.246.31s;55pkt 55fpkt", shape=ellipse, color=green];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.70.246.31:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
220--462[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="43.70.246.31" src_port="1026"/>
    </slice>
    <from sec="1034226398" usec="0"/>
    <to sec="1034226413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44859,2.21173,999,1 1 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
226[label="1.94.212.36s;1pkt 1fpkt", shape=rectangle, color=red];
464[label="1.94.212.36s;1pkt 1fpkt", shape=ellipse, color=green];
1126[label="202.227.12.36;s;1pkt 1fpkt", shape=diamond, color=yellow];
6166[label="202.227.12.36;1pkt 1fpkt", shape=invtriangle, color=brown];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.227.12.36:6699, 167.8.141.111:1091}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1091: (50%)&gt;];
}
226--464[label="1;1pkt 1fpkt"];
226--664[label="1;1pkt 1fpkt"];
226--1126[label="1;1pkt 1fpkt"];
226--6166[label="1;1pkt 1fpkt"];
464--664[label="1;1pkt 1fpkt"];
464--1126[label="1;1pkt 1fpkt"];
464--6166[label="1;1pkt 1fpkt"];
1126--6166[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.141.111" dst_port="1091" src_ip="202.227.12.36" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37299,2.25445,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
237[label="200.174.98.50s;50pkt 50fpkt", shape=rectangle, color=red];
468[label="200.174.98.50s;50pkt 50fpkt", shape=ellipse, color=green];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.174.98.50:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
237--468[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.174.98.50" src_port="1027"/>
    </slice>
    <from sec="1034226084" usec="0"/>
    <to sec="1034226092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25458,2.27478,002,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="197.139.138.62" src_port="1025"/>
      <from sec="1034226356" usec="0"/>
      <to sec="1034226363" usec="0"/>
    </slice>
    <from sec="1034226356" usec="0"/>
    <to sec="1034226363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37299,2.25445,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
251[label="216.106.175.69s;167pkt 167fpkt", shape=rectangle, color=red];
471[label="216.106.175.69s;120pkt 120fpkt", shape=ellipse, color=green];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.106.175.69:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
251--471[label="1;120pkt 120fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.106.175.69" src_port="1029"/>
    </slice>
    <from sec="1034226127" usec="0"/>
    <to sec="1034226151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43733,2.16033,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
252[label="194.159.27.70s;177pkt 177fpkt", shape=rectangle, color=red];
472[label="194.159.27.70s;64pkt 64fpkt", shape=ellipse, color=green];
4580[label="194.159.27.70;176pkt 176fpkt", shape=pentagon, color=darkviolet];
6354[label="194.159.27.70;177pkt 177fpkt", shape=invtriangle, color=brown];
7523[label="194.159.27.70;176pkt 176fpkt", shape=invhouse, color=bisque];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.159.27.70:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
252--472[label="1;64pkt 64fpkt"];
252--4580[label="1;176pkt 176fpkt"];
252--6354[label="1;177pkt 177fpkt"];
252--7523[label="1;176pkt 176fpkt"];
472--4580[label="1;64pkt 64fpkt"];
472--6354[label="1;64pkt 64fpkt"];
472--7523[label="1;64pkt 64fpkt"];
4580--6354[label="1;176pkt 176fpkt"];
4580--7523[label="1;176pkt 176fpkt"];
6354--7523[label="1;176pkt 176fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.159.27.70" src_port="1028"/>
    </slice>
    <from sec="1034226370" usec="0"/>
    <to sec="1034226398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25458,2.27478,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="tcp" src_ip="212.66.6.147" src_port="1044"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="udp" src_ip="212.66.6.147" src_port="1044"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="tcp" src_ip="212.66.6.147" src_port="80"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="udp" src_ip="212.66.6.147" src_port="80"/>
      <from sec="1034226348" usec="0"/>
      <to sec="1034226371" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="tcp" src_ip="86.148.230.147" src_port="1044"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="udp" src_ip="86.148.230.147" src_port="1044"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="tcp" src_ip="86.148.230.147" src_port="80"/>
      <filter dst_ip="212.24.170.48" dst_port="137" proto="udp" src_ip="86.148.230.147" src_port="80"/>
      <from sec="1034226369" usec="0"/>
      <to sec="1034226371" usec="0"/>
    </slice>
    <from sec="1034226348" usec="0"/>
    <to sec="1034226371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43733,2.16033,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
316[label="85.144.162.166s;170pkt 170fpkt", shape=rectangle, color=red];
494[label="85.144.162.166s;52pkt 52fpkt", shape=ellipse, color=green];
5346[label="85.144.162.166;186pkt 186fpkt", shape=pentagon, color=darkviolet];
6876[label="85.144.162.166;186pkt 186fpkt", shape=invtriangle, color=brown];
7849[label="85.144.162.166;185pkt 185fpkt", shape=invhouse, color=bisque];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.144.162.166:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
316--494[label="1;52pkt 52fpkt"];
316--5346[label="1;170pkt 170fpkt"];
316--6876[label="1;170pkt 170fpkt"];
316--7849[label="0.994118;169pkt 169fpkt"];
494--5346[label="1;52pkt 52fpkt"];
494--6876[label="1;52pkt 52fpkt"];
494--7849[label="1;52pkt 52fpkt"];
5346--6876[label="1;186pkt 186fpkt"];
5346--7849[label="1;185pkt 185fpkt"];
6876--7849[label="1;185pkt 185fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.144.162.166" src_port="1025"/>
    </slice>
    <from sec="1034226463" usec="0"/>
    <to sec="1034226495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37299,2.25445,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
327[label="200.116.22.181s;146pkt 146fpkt", shape=rectangle, color=red];
501[label="200.116.22.181s;58pkt 58fpkt", shape=ellipse, color=green];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.116.22.181:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
327--501[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.116.22.181" src_port="1028"/>
    </slice>
    <from sec="1034226142" usec="0"/>
    <to sec="1034226166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43733,2.16033,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
337[label="1.2.197.190s;160pkt 160fpkt", shape=rectangle, color=red];
504[label="1.2.197.190s;107pkt 107fpkt", shape=ellipse, color=green];
5528[label="1.2.197.190;158pkt 158fpkt", shape=pentagon, color=darkviolet];
6990[label="1.2.197.190;158pkt 158fpkt", shape=invtriangle, color=brown];
7915[label="1.2.197.190;159pkt 159fpkt", shape=invhouse, color=bisque];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.2.197.190:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
337--504[label="1;107pkt 107fpkt"];
337--3942[label="1;160pkt 160fpkt"];
337--3955[label="1;160pkt 160fpkt"];
337--3965[label="1;160pkt 160fpkt"];
337--5528[label="1;158pkt 158fpkt"];
337--6990[label="1;158pkt 158fpkt"];
337--7915[label="1;159pkt 159fpkt"];
504--3942[label="1;107pkt 107fpkt"];
504--3955[label="1;107pkt 107fpkt"];
504--3965[label="1;107pkt 107fpkt"];
504--5528[label="0.990654;106pkt 106fpkt"];
504--6990[label="0.990654;106pkt 106fpkt"];
504--7915[label="1;107pkt 107fpkt"];
5528--6990[label="1;158pkt 158fpkt"];
5528--7915[label="1;158pkt 158fpkt"];
6990--7915[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.2.197.190" src_port="1025"/>
    </slice>
    <from sec="1034226022" usec="0"/>
    <to sec="1034226047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25458,2.27478,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="180.19.117.190" dst_port="137" proto="tcp" src_ip="1.127.19.193" src_port="1025"/>
      <filter dst_ip="180.19.117.190" dst_port="137" proto="udp" src_ip="1.127.19.193" src_port="1025"/>
      <filter dst_ip="180.19.117.190" dst_port="80" proto="tcp" src_ip="1.127.19.193" src_port="1025"/>
      <filter dst_ip="180.19.117.190" dst_port="80" proto="udp" src_ip="1.127.19.193" src_port="1025"/>
      <from sec="1034226078" usec="0"/>
      <to sec="1034226092" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="180.19.117.190" dst_port="137" proto="tcp" src_ip="167.119.203.193" src_port="1025"/>
      <filter dst_ip="180.19.117.190" dst_port="137" proto="udp" src_ip="167.119.203.193" src_port="1025"/>
      <filter dst_ip="180.19.117.190" dst_port="80" proto="tcp" src_ip="167.119.203.193" src_port="1025"/>
      <filter dst_ip="180.19.117.190" dst_port="80" proto="udp" src_ip="167.119.203.193" src_port="1025"/>
      <from sec="1034226081" usec="0"/>
      <to sec="1034226090" usec="0"/>
    </slice>
    <from sec="1034226078" usec="0"/>
    <to sec="1034226092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34999,2.20377,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
346[label="1.3.114.199s;135pkt 135fpkt", shape=rectangle, color=red];
507[label="1.3.114.199s;51pkt 51fpkt", shape=ellipse, color=green];
5593[label="1.3.114.199;177pkt 177fpkt", shape=pentagon, color=darkviolet];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.3.114.199:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
346--507[label="1;51pkt 51fpkt"];
346--5593[label="1;135pkt 135fpkt"];
507--5593[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.3.114.199" src_port="1025"/>
    </slice>
    <from sec="1034226280" usec="0"/>
    <to sec="1034226310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25458,2.27478,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="tcp" src_ip="1.88.72.230" src_port="1025"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="udp" src_ip="1.88.72.230" src_port="1025"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="tcp" src_ip="1.88.72.230" src_port="80"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="udp" src_ip="1.88.72.230" src_port="80"/>
      <from sec="1034226688" usec="0"/>
      <to sec="1034226704" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="tcp" src_ip="209.83.196.230" src_port="1025"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="udp" src_ip="209.83.196.230" src_port="1025"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="tcp" src_ip="209.83.196.230" src_port="80"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="udp" src_ip="209.83.196.230" src_port="80"/>
      <from sec="1034226692" usec="0"/>
      <to sec="1034226695" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="tcp" src_ip="203.204.36.230" src_port="1025"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="udp" src_ip="203.204.36.230" src_port="1025"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="tcp" src_ip="203.204.36.230" src_port="80"/>
      <filter dst_ip="167.8.1.115" dst_port="137" proto="udp" src_ip="203.204.36.230" src_port="80"/>
      <from sec="1034226691" usec="0"/>
      <to sec="1034226702" usec="0"/>
    </slice>
    <from sec="1034226688" usec="0"/>
    <to sec="1034226704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37299,2.25445,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
372[label="143.200.153.231s;215pkt 215fpkt", shape=rectangle, color=red];
519[label="143.200.153.231s;59pkt 59fpkt", shape=ellipse, color=green];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.200.153.231:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
372--519[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="143.200.153.231" src_port="1026"/>
    </slice>
    <from sec="1034226312" usec="0"/>
    <to sec="1034226346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25458,2.27478,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="161.238.156.248" dst_port="137" proto="tcp" src_ip="1.41.82.248" src_port="1025"/>
      <filter dst_ip="161.238.156.248" dst_port="137" proto="udp" src_ip="1.41.82.248" src_port="1025"/>
      <filter dst_ip="161.238.156.248" dst_port="137" proto="tcp" src_ip="1.41.82.248" src_port="80"/>
      <filter dst_ip="161.238.156.248" dst_port="137" proto="udp" src_ip="1.41.82.248" src_port="80"/>
      <from sec="1034226406" usec="0"/>
      <to sec="1034226421" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="161.238.156.248" dst_port="137" proto="tcp" src_ip="85.113.14.248" src_port="1025"/>
      <filter dst_ip="161.238.156.248" dst_port="137" proto="udp" src_ip="85.113.14.248" src_port="1025"/>
      <filter dst_ip="161.238.156.248" dst_port="137" proto="tcp" src_ip="85.113.14.248" src_port="80"/>
      <filter dst_ip="161.238.156.248" dst_port="137" proto="udp" src_ip="85.113.14.248" src_port="80"/>
      <from sec="1034226407" usec="0"/>
      <to sec="1034226419" usec="0"/>
    </slice>
    <from sec="1034226406" usec="0"/>
    <to sec="1034226421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42806,2.24143,002,1 1 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
386[label="1.108.4.254s;829pkt 829fpkt", shape=rectangle, color=red];
524[label="1.108.4.254s;59pkt 59fpkt", shape=ellipse, color=green];
2641[label="1.108.4.254;s;846pkt 846fpkt", shape=diamond, color=yellow];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.108.4.254:1027, *:137}[98.9362%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (49.7405%)&lt;BR/&gt; 137: (49.7405%)&lt;BR/&gt; 139: (0.259516%)&lt;BR/&gt; 1997: (0.0288351%)&lt;BR/&gt; 1986: (0.0288351%)&gt;];
}
386--442[label="0.00844391;7pkt 7fpkt"];
386--524[label="1;59pkt 59fpkt"];
386--544[label="0.00844391;7pkt 7fpkt"];
386--628[label="0.00120627;1pkt 1fpkt"];
386--864[label="0.00136054;1pkt 1fpkt"];
386--1208[label="0.5;1pkt 1fpkt"];
386--2641[label="1;829pkt 829fpkt"];
524--2641[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.108.4.254" src_port="1027"/>
    </slice>
    <from sec="1034226602" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37299,2.25445,020,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
402[label="197.106.233.13d;52pkt 52fpkt", shape=rectangle, color=red];
527[label="197.106.233.13d;52pkt 52fpkt", shape=ellipse, color=green];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 197.106.233.13:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
402--527[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="197.106.233.13"/>
    </slice>
    <from sec="1034226662" usec="0"/>
    <to sec="1034226669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37299,2.25445,020,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
404[label="212.85.191.141d;56pkt 56fpkt", shape=rectangle, color=red];
528[label="212.85.191.141d;56pkt 56fpkt", shape=ellipse, color=green];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 212.85.191.141:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
404--528[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="212.85.191.141"/>
    </slice>
    <from sec="1034226027" usec="0"/>
    <to sec="1034226035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37299,2.25445,020,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
416[label="1.182.149.236d;56pkt 56fpkt", shape=rectangle, color=red];
531[label="1.182.149.236d;56pkt 56fpkt", shape=ellipse, color=green];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 1.182.149.236:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
416--531[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="1.182.149.236"/>
    </slice>
    <from sec="1034226142" usec="0"/>
    <to sec="1034226150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,503,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
69[label="85.41.141.97s;2pkt 2fpkt", shape=rectangle, color=red];
610[label="85.41.141.97;s;4pkt 4fpkt", shape=diamond, color=yellow];
823[label="212.18.97.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
826[label="209.83.194.131;s;8pkt 8fpkt", shape=diamond, color=yellow];
869[label="212.24.169.121;d;91pkt 91fpkt", shape=diamond, color=yellow];
871[label="210.150.106.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
3090[label="212.24.169.121;d;91pkt 91fpkt", shape=hexagon, color=black];
3481[label="85.41.141.97;s;1pkt 1fpkt", shape=hexagon, color=black];
3830[label="212.24.169.121;d;91pkt 91fpkt", shape=polygon, color=gold];
4313[label="85.41.6.40;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4326[label="210.150.106.40;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4824[label="85.41.141.97;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5067[label="209.83.194.131;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6185[label="210.150.106.40;3pkt 3fpkt", shape=invtriangle, color=brown];
6676[label="209.83.194.131;8pkt 8fpkt", shape=invtriangle, color=brown];
7418[label="210.150.106.40;3pkt 3fpkt", shape=invhouse, color=bisque];
7720[label="209.83.194.131;7pkt 7fpkt", shape=invhouse, color=bisque];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.150.104.145:80, 212.24.169.121:*}[27.5229%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.5909%)&lt;BR/&gt; 21: (1.27841%)&lt;BR/&gt; 1580: (0.994318%)&lt;BR/&gt; 1578: (0.994318%)&lt;BR/&gt; 1576: (0.994318%)&gt;];
}
69--610[label="1;2pkt 2fpkt"];
69--869[label="0.5;1pkt 1fpkt"];
69--3090[label="0.5;1pkt 1fpkt"];
69--3481[label="1;1pkt 1fpkt"];
69--3830[label="0.5;1pkt 1fpkt"];
69--4824[label="1;2pkt 2fpkt"];
610--869[label="0.5;2pkt 2fpkt"];
610--3090[label="0.5;2pkt 2fpkt"];
610--3481[label="1;1pkt 1fpkt"];
610--3830[label="0.5;2pkt 2fpkt"];
610--4824[label="1;4pkt 4fpkt"];
823--826[label="1;1pkt 1fpkt"];
823--5067[label="1;1pkt 1fpkt"];
823--6676[label="1;1pkt 1fpkt"];
823--7720[label="1;1pkt 1fpkt"];
826--869[label="0.375;3pkt 3fpkt"];
826--2910[label="0.5;4pkt 4fpkt"];
826--3090[label="0.375;3pkt 3fpkt"];
826--3807[label="0.5;4pkt 4fpkt"];
826--3830[label="0.375;3pkt 3fpkt"];
826--3950[label="0.125;1pkt 1fpkt"];
826--5067[label="1;7pkt 7fpkt"];
826--6676[label="1;8pkt 8fpkt"];
826--7720[label="1;7pkt 7fpkt"];
869--871[label="1;1pkt 1fpkt"];
869--1332[label="0.0549451;5pkt 5fpkt"];
869--1398[label="0.666667;4pkt 4fpkt"];
869--2185[label="0.021978;2pkt 2fpkt"];
869--2870[label="0.0549451;5pkt 5fpkt"];
869--2944[label="0.021978;2pkt 2fpkt"];
869--3090[label="1;91pkt 91fpkt"];
869--3481[label="1;1pkt 1fpkt"];
869--3830[label="1;91pkt 91fpkt"];
869--3869[label="0.0561798;5pkt 5fpkt"];
869--3950[label="0.043956;4pkt 4fpkt"];
869--4313[label="0.666667;10pkt 10fpkt"];
869--4326[label="1;3pkt 3fpkt"];
869--4333[label="0.0549451;5pkt 5fpkt"];
869--4391[label="0.0769231;3pkt 3fpkt"];
869--4597[label="0.021978;2pkt 2fpkt"];
869--4729[label="0.0454545;1pkt 1fpkt"];
869--4784[label="0.021978;2pkt 2fpkt"];
869--4824[label="0.5;8pkt 8fpkt"];
869--5067[label="0.428571;3pkt 3fpkt"];
869--5178[label="0.731707;30pkt 30fpkt"];
869--5469[label="0.190476;8pkt 8fpkt"];
869--6185[label="1;3pkt 3fpkt"];
869--6192[label="0.0549451;5pkt 5fpkt"];
869--6232[label="0.0769231;3pkt 3fpkt"];
869--6365[label="0.021978;2pkt 2fpkt"];
869--6449[label="0.0454545;1pkt 1fpkt"];
869--6483[label="0.021978;2pkt 2fpkt"];
869--6676[label="0.375;3pkt 3fpkt"];
869--7418[label="1;3pkt 3fpkt"];
869--7424[label="0.0549451;5pkt 5fpkt"];
869--7448[label="0.0789474;3pkt 3fpkt"];
869--7595[label="0.021978;2pkt 2fpkt"];
869--7720[label="0.428571;3pkt 3fpkt"];
871--3090[label="1;1pkt 1fpkt"];
871--3830[label="1;1pkt 1fpkt"];
871--4326[label="1;1pkt 1fpkt"];
871--6185[label="1;1pkt 1fpkt"];
871--7418[label="1;1pkt 1fpkt"];
3090--3481[label="1;1pkt 1fpkt"];
3090--3830[label="1;91pkt 91fpkt"];
3090--3869[label="0.0561798;5pkt 5fpkt"];
3090--3950[label="0.043956;4pkt 4fpkt"];
3090--4313[label="0.666667;10pkt 10fpkt"];
3090--4326[label="1;3pkt 3fpkt"];
3090--4333[label="0.0549451;5pkt 5fpkt"];
3090--4391[label="0.0769231;3pkt 3fpkt"];
3090--4597[label="0.021978;2pkt 2fpkt"];
3090--4729[label="0.0454545;1pkt 1fpkt"];
3090--4784[label="0.021978;2pkt 2fpkt"];
3090--4824[label="0.5;8pkt 8fpkt"];
3090--5067[label="0.428571;3pkt 3fpkt"];
3090--5178[label="0.731707;30pkt 30fpkt"];
3090--5469[label="0.190476;8pkt 8fpkt"];
3090--6185[label="1;3pkt 3fpkt"];
3090--6192[label="0.0549451;5pkt 5fpkt"];
3090--6232[label="0.0769231;3pkt 3fpkt"];
3090--6365[label="0.021978;2pkt 2fpkt"];
3090--6449[label="0.0454545;1pkt 1fpkt"];
3090--6483[label="0.021978;2pkt 2fpkt"];
3090--6676[label="0.375;3pkt 3fpkt"];
3090--7418[label="1;3pkt 3fpkt"];
3090--7424[label="0.0549451;5pkt 5fpkt"];
3090--7448[label="0.0789474;3pkt 3fpkt"];
3090--7595[label="0.021978;2pkt 2fpkt"];
3090--7720[label="0.428571;3pkt 3fpkt"];
3481--3830[label="1;1pkt 1fpkt"];
3481--4824[label="1;1pkt 1fpkt"];
3830--3869[label="0.0561798;5pkt 5fpkt"];
3830--3950[label="0.043956;4pkt 4fpkt"];
3830--4313[label="0.666667;10pkt 10fpkt"];
3830--4326[label="1;3pkt 3fpkt"];
3830--4333[label="0.0549451;5pkt 5fpkt"];
3830--4391[label="0.0769231;3pkt 3fpkt"];
3830--4597[label="0.021978;2pkt 2fpkt"];
3830--4729[label="0.0454545;1pkt 1fpkt"];
3830--4784[label="0.021978;2pkt 2fpkt"];
3830--4824[label="0.5;8pkt 8fpkt"];
3830--5067[label="0.428571;3pkt 3fpkt"];
3830--5178[label="0.731707;30pkt 30fpkt"];
3830--5469[label="0.190476;8pkt 8fpkt"];
3830--6185[label="1;3pkt 3fpkt"];
3830--6192[label="0.0549451;5pkt 5fpkt"];
3830--6232[label="0.0769231;3pkt 3fpkt"];
3830--6365[label="0.021978;2pkt 2fpkt"];
3830--6449[label="0.0454545;1pkt 1fpkt"];
3830--6483[label="0.021978;2pkt 2fpkt"];
3830--6676[label="0.375;3pkt 3fpkt"];
3830--7418[label="1;3pkt 3fpkt"];
3830--7424[label="0.0549451;5pkt 5fpkt"];
3830--7448[label="0.0789474;3pkt 3fpkt"];
3830--7595[label="0.021978;2pkt 2fpkt"];
3830--7720[label="0.428571;3pkt 3fpkt"];
4326--6185[label="1;3pkt 3fpkt"];
4326--7418[label="1;3pkt 3fpkt"];
5067--6676[label="1;7pkt 7fpkt"];
5067--7720[label="1;7pkt 7fpkt"];
6185--7418[label="1;3pkt 3fpkt"];
6676--7720[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.169.121" src_ip="210.150.104.145" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.864713,2.17143,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
297[label="202.94.33.143s;1pkt 1fpkt", shape=rectangle, color=red];
797[label="202.94.33.143;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.94.33.143:10231, 167.8.140.103:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10231: (50%)&lt;BR/&gt; 6699: (50%)&gt;];
}
297--442[label="1;1pkt 1fpkt"];
297--544[label="1;1pkt 1fpkt"];
297--623[label="1;1pkt 1fpkt"];
297--797[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.140.103" dst_port="6699" src_ip="202.94.33.143" src_port="10231"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658063,2.10925,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
626[label="167.8.130.6;d;2pkt 2fpkt", shape=diamond, color=yellow];
627[label="201.85.105.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
5291[label="201.85.105.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6840[label="201.85.105.160;1pkt 1fpkt", shape=invtriangle, color=brown];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.34.108.55:1863, 167.8.130.6:1033}[50%]&lt;BR/&gt;{201.85.105.160:8864, 167.8.130.6:8864}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8864: (80%)&lt;BR/&gt; 1863: (10%)&lt;BR/&gt; 1033: (10%)&gt;];
}
626--627[label="1;1pkt 1fpkt"];
626--5291[label="1;1pkt 1fpkt"];
626--6840[label="1;1pkt 1fpkt"];
627--5291[label="1;1pkt 1fpkt"];
627--6840[label="1;1pkt 1fpkt"];
5291--6840[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.130.6" dst_port="8864" src_ip="201.85.105.160" src_port="8864"/>
      <filter dst_ip="167.8.130.6" dst_port="1033" src_ip="85.34.108.55" src_port="1863"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956891,2.11535,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
21[label="201.88.198.32s;1pkt 1fpkt", shape=rectangle, color=red];
640[label="201.88.198.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
3040[label="201.88.198.32;s;1pkt 1fpkt", shape=hexagon, color=black];
4246[label="201.88.198.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.88.198.32:7743, 161.238.227.185:1505}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (50%)&lt;BR/&gt; 1505: (50%)&gt;];
}
21--639[label="1;1pkt 1fpkt"];
21--640[label="1;1pkt 1fpkt"];
21--3040[label="1;1pkt 1fpkt"];
21--4246[label="1;1pkt 1fpkt"];
640--3040[label="1;1pkt 1fpkt"];
640--4246[label="1;1pkt 1fpkt"];
3040--4246[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.227.185" dst_port="1505" src_ip="201.88.198.32" src_port="7743"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
144[label="200.90.55.252s;1pkt 1fpkt", shape=rectangle, color=red];
641[label="167.8.140.25;d;106pkt 106fpkt", shape=diamond, color=yellow];
643[label="200.90.55.252;s;1pkt 1fpkt", shape=diamond, color=yellow];
728[label="200.94.0.64;s;1pkt 1fpkt", shape=diamond, color=yellow];
1030[label="201.92.150.253;s;1pkt 1fpkt", shape=diamond, color=yellow];
1084[label="87.7.22.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
1191[label="75.192.17.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
2908[label="167.8.140.25;d;57pkt 57fpkt", shape=hexagon, color=black];
3657[label="75.192.17.16;s;1pkt 1fpkt", shape=hexagon, color=black];
5273[label="43.22.3.158;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5932[label="200.90.55.252;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5937[label="201.92.150.253;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7260[label="200.90.55.252;1pkt 1fpkt", shape=invtriangle, color=brown];
8093[label="201.92.150.253;1pkt 1fpkt", shape=invhouse, color=bisque];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 167.8.140.25:6257}[84.9057%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (78%)&lt;BR/&gt; 6699: (9.71429%)&lt;BR/&gt; 1315: (1.71429%)&lt;BR/&gt; 3311: (1.42857%)&lt;BR/&gt; 3342: (1.14286%)&gt;];
}
144--442[label="1;1pkt 1fpkt"];
144--544[label="1;1pkt 1fpkt"];
144--641[label="1;1pkt 1fpkt"];
144--643[label="1;1pkt 1fpkt"];
144--2908[label="1;1pkt 1fpkt"];
144--5932[label="1;1pkt 1fpkt"];
144--7260[label="1;1pkt 1fpkt"];
641--643[label="1;1pkt 1fpkt"];
641--728[label="1;1pkt 1fpkt"];
641--822[label="1;1pkt 1fpkt"];
641--1030[label="1;1pkt 1fpkt"];
641--1066[label="1;1pkt 1fpkt"];
641--1084[label="1;1pkt 1fpkt"];
641--1191[label="1;1pkt 1fpkt"];
641--2782[label="1;1pkt 1fpkt"];
641--2908[label="1;57pkt 57fpkt"];
641--3227[label="1;1pkt 1fpkt"];
641--3657[label="1;1pkt 1fpkt"];
641--3877[label="1;1pkt 1fpkt"];
641--3948[label="0.358491;38pkt 38fpkt"];
641--3952[label="0.386792;41pkt 41fpkt"];
641--3961[label="0.358491;38pkt 38fpkt"];
641--3963[label="0.386792;41pkt 41fpkt"];
641--3971[label="0.358491;38pkt 38fpkt"];
641--3973[label="0.386792;41pkt 41fpkt"];
641--4031[label="1;1pkt 1fpkt"];
641--5273[label="1;1pkt 1fpkt"];
641--5333[label="1;1pkt 1fpkt"];
641--5932[label="1;1pkt 1fpkt"];
641--5937[label="1;1pkt 1fpkt"];
641--7260[label="1;1pkt 1fpkt"];
641--7291[label="1;1pkt 1fpkt"];
641--8093[label="1;1pkt 1fpkt"];
643--2908[label="1;1pkt 1fpkt"];
643--5932[label="1;1pkt 1fpkt"];
643--7260[label="1;1pkt 1fpkt"];
728--2908[label="1;1pkt 1fpkt"];
1030--2908[label="1;1pkt 1fpkt"];
1030--5937[label="1;1pkt 1fpkt"];
1030--8093[label="1;1pkt 1fpkt"];
1084--2908[label="1;1pkt 1fpkt"];
1191--2908[label="1;1pkt 1fpkt"];
1191--3657[label="1;1pkt 1fpkt"];
2908--3227[label="1;1pkt 1fpkt"];
2908--3657[label="1;1pkt 1fpkt"];
2908--3877[label="1;1pkt 1fpkt"];
2908--3948[label="0.666667;38pkt 38fpkt"];
2908--3952[label="0.719298;41pkt 41fpkt"];
2908--3961[label="0.666667;38pkt 38fpkt"];
2908--3963[label="0.719298;41pkt 41fpkt"];
2908--3971[label="0.666667;38pkt 38fpkt"];
2908--3973[label="0.719298;41pkt 41fpkt"];
2908--4031[label="1;1pkt 1fpkt"];
2908--5273[label="1;1pkt 1fpkt"];
2908--5333[label="1;1pkt 1fpkt"];
2908--5932[label="1;1pkt 1fpkt"];
2908--5937[label="1;1pkt 1fpkt"];
2908--7260[label="1;1pkt 1fpkt"];
2908--7291[label="1;1pkt 1fpkt"];
2908--8093[label="1;1pkt 1fpkt"];
5932--7260[label="1;1pkt 1fpkt"];
5937--8093[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.140.25" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
118[label="200.100.176.191s;2pkt 2fpkt", shape=rectangle, color=red];
655[label="212.24.19.67;d;6pkt 6fpkt", shape=diamond, color=yellow];
656[label="200.100.176.191;s;2pkt 2fpkt", shape=diamond, color=yellow];
1852[label="200.233.135.141;s;1pkt 1fpkt", shape=diamond, color=yellow];
2911[label="212.24.19.67;d;6pkt 6fpkt", shape=hexagon, color=black];
3594[label="200.233.135.141;s;1pkt 1fpkt", shape=hexagon, color=black];
5539[label="200.100.176.191;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7000[label="200.100.176.191;1pkt 1fpkt", shape=invtriangle, color=brown];
7756[label="200.233.135.141;1pkt 1fpkt", shape=invhouse, color=bisque];
7924[label="200.100.176.191;1pkt 1fpkt", shape=invhouse, color=bisque];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.224.192.32:6699, 212.24.19.67:*}[33.3333%]&lt;BR/&gt;{200.100.176.191:6699, 212.24.19.67:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3146: (15.9091%)&lt;BR/&gt; 3156: (11.3636%)&lt;BR/&gt; 3140: (9.09091%)&lt;BR/&gt; 3149: (4.54545%)&gt;];
}
118--655[label="1;2pkt 2fpkt"];
118--656[label="1;2pkt 2fpkt"];
118--2911[label="1;2pkt 2fpkt"];
118--5539[label="1;1pkt 1fpkt"];
118--7000[label="1;1pkt 1fpkt"];
118--7924[label="1;1pkt 1fpkt"];
655--656[label="1;2pkt 2fpkt"];
655--1852[label="1;1pkt 1fpkt"];
655--2911[label="1;6pkt 6fpkt"];
655--3594[label="1;1pkt 1fpkt"];
655--5539[label="1;1pkt 1fpkt"];
655--7000[label="1;1pkt 1fpkt"];
655--7756[label="1;1pkt 1fpkt"];
655--7924[label="1;1pkt 1fpkt"];
656--2911[label="1;2pkt 2fpkt"];
656--5539[label="1;1pkt 1fpkt"];
656--7000[label="1;1pkt 1fpkt"];
656--7924[label="1;1pkt 1fpkt"];
1852--2911[label="1;1pkt 1fpkt"];
1852--3594[label="1;1pkt 1fpkt"];
1852--7756[label="1;1pkt 1fpkt"];
2911--3594[label="1;1pkt 1fpkt"];
2911--5539[label="1;1pkt 1fpkt"];
2911--7000[label="1;1pkt 1fpkt"];
2911--7756[label="1;1pkt 1fpkt"];
2911--7924[label="1;1pkt 1fpkt"];
3594--7756[label="1;1pkt 1fpkt"];
5539--7000[label="1;1pkt 1fpkt"];
5539--7924[label="1;1pkt 1fpkt"];
7000--7924[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.19.67" src_ip="200.100.176.191" src_port="6699"/>
      <filter dst_ip="212.24.19.67" src_ip="200.224.192.32" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.898214,2.14075,999,1 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
79[label="210.150.67.119s;1pkt 1fpkt", shape=rectangle, color=red];
673[label="141.0.236.83;d;4pkt 4fpkt", shape=diamond, color=yellow];
676[label="210.150.67.119;s;1pkt 1fpkt", shape=diamond, color=yellow];
6615[label="210.150.67.119;1pkt 1fpkt", shape=invtriangle, color=brown];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.34.108.12:1863, 141.0.236.83:2007}[25%]&lt;BR/&gt;{210.150.67.119:8042, 141.0.236.83:2151}[25%]&lt;BR/&gt;{203.204.54.92:80, 141.0.236.83:1353}[25%]&lt;BR/&gt;{203.204.54.92:80, 141.0.236.83:1361}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8042: (28.5714%)&lt;BR/&gt; 2151: (28.5714%)&lt;BR/&gt; 80: (14.2857%)&lt;BR/&gt; 2007: (7.14286%)&lt;BR/&gt; 1863: (7.14286%)&gt;];
}
79--673[label="1;1pkt 1fpkt"];
79--676[label="1;1pkt 1fpkt"];
79--6615[label="1;1pkt 1fpkt"];
673--676[label="1;1pkt 1fpkt"];
673--808[label="0.5;2pkt 2fpkt"];
673--4784[label="0.5;2pkt 2fpkt"];
673--6483[label="0.5;2pkt 2fpkt"];
673--6615[label="1;1pkt 1fpkt"];
673--7595[label="0.5;2pkt 2fpkt"];
676--6615[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.0.236.83" dst_port="1361" src_ip="203.204.54.92" src_port="80"/>
      <filter dst_ip="141.0.236.83" dst_port="1353" src_ip="203.204.54.92" src_port="80"/>
      <filter dst_ip="141.0.236.83" dst_port="2151" src_ip="210.150.67.119" src_port="8042"/>
      <filter dst_ip="141.0.236.83" dst_port="2007" src_ip="85.34.108.12" src_port="1863"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
27[label="130.48.197.47s;2pkt 2fpkt", shape=rectangle, color=red];
632[label="185.191.166.225;d;138pkt 138fpkt", shape=diamond, color=yellow];
685[label="130.48.197.47;s;2pkt 2fpkt", shape=diamond, color=yellow];
1356[label="81.122.213.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
1533[label="214.195.80.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
2139[label="1.68.209.29;s;1pkt 1fpkt", shape=diamond, color=yellow];
2545[label="130.5.126.201;s;1pkt 1fpkt", shape=diamond, color=yellow];
2612[label="203.202.7.163;s;1pkt 1fpkt", shape=diamond, color=yellow];
2674[label="185.191.166.225;d;138pkt 138fpkt", shape=hexagon, color=black];
3155[label="81.122.213.8;s;1pkt 1fpkt", shape=hexagon, color=black];
3729[label="203.202.7.163;s;1pkt 1fpkt", shape=hexagon, color=black];
4204[label="86.218.72.26;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4399[label="130.48.197.47;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6106[label="86.218.72.26;2pkt 2fpkt", shape=invtriangle, color=brown];
7636[label="1.102.150.107;1pkt 1fpkt", shape=invhouse, color=bisque];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 185.191.166.225:1214}[61.5942%]&lt;BR/&gt;{*:1214, 185.191.166.225:*}[30.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (45.2381%)&lt;BR/&gt; 3383: (1.70068%)&lt;BR/&gt; 3441: (1.36054%)&lt;BR/&gt; 4937: (1.02041%)&lt;BR/&gt; 4893: (0.85034%)&gt;];
}
27--632[label="1;2pkt 2fpkt"];
27--685[label="1;2pkt 2fpkt"];
27--2674[label="1;2pkt 2fpkt"];
27--4399[label="1;2pkt 2fpkt"];
632--634[label="1;3pkt 3fpkt"];
632--685[label="1;2pkt 2fpkt"];
632--1356[label="1;1pkt 1fpkt"];
632--1533[label="1;1pkt 1fpkt"];
632--2139[label="1;1pkt 1fpkt"];
632--2545[label="1;1pkt 1fpkt"];
632--2612[label="1;1pkt 1fpkt"];
632--2674[label="1;138pkt 138fpkt"];
632--2675[label="1;3pkt 3fpkt"];
632--3155[label="1;1pkt 1fpkt"];
632--3729[label="1;1pkt 1fpkt"];
632--3806[label="1;2pkt 2fpkt"];
632--4204[label="1;2pkt 2fpkt"];
632--4399[label="1;2pkt 2fpkt"];
632--5409[label="1;2pkt 2fpkt"];
632--6106[label="1;2pkt 2fpkt"];
632--6917[label="1;2pkt 2fpkt"];
632--7636[label="1;1pkt 1fpkt"];
632--7873[label="1;2pkt 2fpkt"];
685--2674[label="1;2pkt 2fpkt"];
685--4399[label="1;2pkt 2fpkt"];
1356--2674[label="1;1pkt 1fpkt"];
1356--3155[label="1;1pkt 1fpkt"];
1533--2674[label="1;1pkt 1fpkt"];
2139--2674[label="1;1pkt 1fpkt"];
2545--2674[label="1;1pkt 1fpkt"];
2612--2674[label="1;1pkt 1fpkt"];
2612--3729[label="1;1pkt 1fpkt"];
2674--2675[label="1;3pkt 3fpkt"];
2674--3155[label="1;1pkt 1fpkt"];
2674--3729[label="1;1pkt 1fpkt"];
2674--3806[label="1;2pkt 2fpkt"];
2674--4204[label="1;2pkt 2fpkt"];
2674--4399[label="1;2pkt 2fpkt"];
2674--5409[label="1;2pkt 2fpkt"];
2674--6106[label="1;2pkt 2fpkt"];
2674--6917[label="1;2pkt 2fpkt"];
2674--7636[label="1;1pkt 1fpkt"];
2674--7873[label="1;2pkt 2fpkt"];
4204--6106[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.166.225" src_port="1214"/>
      <filter dst_ip="185.191.166.225" dst_port="1214"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956891,2.11535,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
85[label="202.234.21.132s;1pkt 1fpkt", shape=rectangle, color=red];
687[label="185.191.188.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
837[label="202.234.21.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
2775[label="185.191.188.172;d;1pkt 1fpkt", shape=hexagon, color=black];
3080[label="202.234.21.132;s;1pkt 1fpkt", shape=hexagon, color=black];
5070[label="202.234.21.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.234.21.132:2127, 185.191.188.172:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2127: (50%)&gt;];
}
85--442[label="1;1pkt 1fpkt"];
85--544[label="1;1pkt 1fpkt"];
85--687[label="1;1pkt 1fpkt"];
85--837[label="1;1pkt 1fpkt"];
85--2775[label="1;1pkt 1fpkt"];
85--3080[label="1;1pkt 1fpkt"];
85--5070[label="1;1pkt 1fpkt"];
687--837[label="1;1pkt 1fpkt"];
687--2775[label="1;1pkt 1fpkt"];
687--3080[label="1;1pkt 1fpkt"];
687--5070[label="1;1pkt 1fpkt"];
837--2775[label="1;1pkt 1fpkt"];
837--3080[label="1;1pkt 1fpkt"];
837--5070[label="1;1pkt 1fpkt"];
2775--3080[label="1;1pkt 1fpkt"];
2775--5070[label="1;1pkt 1fpkt"];
3080--5070[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.188.172" dst_port="6699" src_ip="202.234.21.132" src_port="2127"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
701[label="85.205.55.54;s;1pkt 1fpkt", shape=diamond, color=yellow];
702[label="213.91.100.95;d;4pkt 4fpkt", shape=diamond, color=yellow];
5935[label="85.34.108.253;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7263[label="85.34.108.253;2pkt 2fpkt", shape=invtriangle, color=brown];
8091[label="85.34.108.253;2pkt 2fpkt", shape=invhouse, color=bisque];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1863, 213.91.100.95:*}[50%]&lt;BR/&gt;{85.34.108.253:1863, *:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (41.6667%)&lt;BR/&gt; 8864: (16.6667%)&lt;BR/&gt; 1330: (12.5%)&lt;BR/&gt; 1057: (12.5%)&lt;BR/&gt; 4447: (8.33333%)&gt;];
}
701--702[label="1;1pkt 1fpkt"];
702--5935[label="0.333333;1pkt 1fpkt"];
5935--7263[label="1;2pkt 2fpkt"];
5935--8091[label="1;2pkt 2fpkt"];
7263--8091[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="85.34.108.253" src_port="1863"/>
      <filter dst_ip="213.91.100.95" src_port="1863"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04882,2.10176,999,1 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
91[label="17.235.13.139s;1pkt 1fpkt", shape=rectangle, color=red];
576[label="167.8.42.241;d;26pkt 26fpkt", shape=diamond, color=yellow];
720[label="17.235.13.139;s;1pkt 1fpkt", shape=diamond, color=yellow];
1388[label="201.71.83.17;s;2pkt 2fpkt", shape=diamond, color=yellow];
2660[label="167.8.42.241;d;9pkt 9fpkt", shape=hexagon, color=black];
2700[label="17.235.13.139;s;1pkt 1fpkt", shape=hexagon, color=black];
3169[label="201.71.83.17;s;2pkt 2fpkt", shape=hexagon, color=black];
5125[label="17.235.13.139;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7747[label="17.235.13.139;1pkt 1fpkt", shape=invhouse, color=bisque];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.8.42.241:7743}[61.5385%]&lt;BR/&gt;{*:7743, 167.8.42.241:*}[34.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (48.8636%)&lt;BR/&gt; 3716: (7.95455%)&lt;BR/&gt; 4578: (4.54545%)&lt;BR/&gt; 3234: (4.54545%)&lt;BR/&gt; 33092: (2.27273%)&gt;];
}
91--576[label="1;1pkt 1fpkt"];
91--720[label="1;1pkt 1fpkt"];
91--2660[label="1;1pkt 1fpkt"];
91--2700[label="1;1pkt 1fpkt"];
91--5125[label="1;1pkt 1fpkt"];
91--7747[label="1;1pkt 1fpkt"];
576--720[label="1;1pkt 1fpkt"];
576--1388[label="1;2pkt 2fpkt"];
576--2660[label="1;9pkt 9fpkt"];
576--2700[label="1;1pkt 1fpkt"];
576--3169[label="1;2pkt 2fpkt"];
576--5125[label="1;1pkt 1fpkt"];
576--7747[label="1;1pkt 1fpkt"];
720--2660[label="1;1pkt 1fpkt"];
720--2700[label="1;1pkt 1fpkt"];
720--5125[label="1;1pkt 1fpkt"];
720--7747[label="1;1pkt 1fpkt"];
1388--2660[label="1;2pkt 2fpkt"];
1388--3169[label="1;2pkt 2fpkt"];
2660--2700[label="1;1pkt 1fpkt"];
2660--3169[label="1;2pkt 2fpkt"];
2660--5125[label="1;1pkt 1fpkt"];
2660--7747[label="1;1pkt 1fpkt"];
2700--5125[label="1;1pkt 1fpkt"];
2700--7747[label="1;1pkt 1fpkt"];
5125--7747[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.42.241" src_port="7743"/>
      <filter dst_ip="167.8.42.241" dst_port="7743"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,999,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
134[label="141.98.93.221s;56pkt 56fpkt", shape=rectangle, color=red];
575[label="141.98.93.221;s;415pkt 415fpkt", shape=diamond, color=yellow];
723[label="218.236.52.94;d;80pkt 80fpkt", shape=diamond, color=yellow];
751[label="81.80.189.78;d;2pkt 2fpkt", shape=diamond, color=yellow];
862[label="75.67.6.226;d;1pkt 1fpkt", shape=diamond, color=yellow];
872[label="85.139.176.121;d;1pkt 1fpkt", shape=diamond, color=yellow];
925[label="212.245.232.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
1018[label="210.218.134.10;d;2pkt 2fpkt", shape=diamond, color=yellow];
1036[label="75.2.252.71;d;1pkt 1fpkt", shape=diamond, color=yellow];
1094[label="75.195.60.231;d;1pkt 1fpkt", shape=diamond, color=yellow];
1155[label="3.49.233.84;d;1pkt 1fpkt", shape=diamond, color=yellow];
1186[label="75.6.114.68;d;1pkt 1fpkt", shape=diamond, color=yellow];
1239[label="202.195.105.32;d;1pkt 1fpkt", shape=diamond, color=yellow];
1294[label="74.6.132.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
1400[label="43.188.112.249;d;1pkt 1fpkt", shape=diamond, color=yellow];
1404[label="218.237.141.144;d;1pkt 1fpkt", shape=diamond, color=yellow];
1483[label="213.216.133.177;d;1pkt 1fpkt", shape=diamond, color=yellow];
1540[label="84.41.99.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
1557[label="196.233.84.173;d;1pkt 1fpkt", shape=diamond, color=yellow];
1565[label="196.233.106.180;d;1pkt 1fpkt", shape=diamond, color=yellow];
1709[label="75.8.210.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
1746[label="213.216.222.240;d;4pkt 4fpkt", shape=diamond, color=yellow];
1777[label="196.232.105.118;d;1pkt 1fpkt", shape=diamond, color=yellow];
1862[label="202.108.173.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
1918[label="75.192.102.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
1989[label="218.232.24.175;d;1pkt 1fpkt", shape=diamond, color=yellow];
2003[label="192.196.98.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
2164[label="196.232.69.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
2391[label="211.26.26.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
2633[label="75.7.57.58;d;1pkt 1fpkt", shape=diamond, color=yellow];
2659[label="141.98.93.221;s;415pkt 415fpkt", shape=hexagon, color=black];
2791[label="81.80.189.78;d;2pkt 2fpkt", shape=hexagon, color=black];
2843[label="212.245.232.165;d;1pkt 1fpkt", shape=hexagon, color=black];
2896[label="43.188.112.249;d;1pkt 1fpkt", shape=hexagon, color=black];
2951[label="3.49.233.84;d;1pkt 1fpkt", shape=hexagon, color=black];
2955[label="75.67.6.226;d;1pkt 1fpkt", shape=hexagon, color=black];
2958[label="85.139.176.121;d;1pkt 1fpkt", shape=hexagon, color=black];
2991[label="196.233.84.173;d;1pkt 1fpkt", shape=hexagon, color=black];
3042[label="75.2.252.71;d;1pkt 1fpkt", shape=hexagon, color=black];
3193[label="218.237.141.144;d;1pkt 1fpkt", shape=hexagon, color=black];
3222[label="75.192.102.51;d;1pkt 1fpkt", shape=hexagon, color=black];
3257[label="202.195.105.32;d;1pkt 1fpkt", shape=hexagon, color=black];
3288[label="192.196.98.136;d;1pkt 1fpkt", shape=hexagon, color=black];
3361[label="210.218.134.10;d;2pkt 2fpkt", shape=hexagon, color=black];
3411[label="84.41.99.60;d;1pkt 1fpkt", shape=hexagon, color=black];
3500[label="75.195.60.231;d;1pkt 1fpkt", shape=hexagon, color=black];
3518[label="75.8.210.244;d;1pkt 1fpkt", shape=hexagon, color=black];
3656[label="75.6.114.68;d;1pkt 1fpkt", shape=hexagon, color=black];
3684[label="211.26.26.148;d;1pkt 1fpkt", shape=hexagon, color=black];
3694[label="218.232.24.175;d;1pkt 1fpkt", shape=hexagon, color=black];
3897[label="141.98.93.221;s;369pkt 369fpkt", shape=polygon, color=gold];
3915[label="75.2.252.71;d;1pkt 1fpkt", shape=polygon, color=gold];
3916[label="75.195.60.231;d;1pkt 1fpkt", shape=polygon, color=gold];
3927[label="218.232.24.175;d;1pkt 1fpkt", shape=polygon, color=gold];
5733[label="141.98.93.221;440pkt 440fpkt", shape=pentagon, color=darkviolet];
7131[label="141.98.93.221;441pkt 441fpkt", shape=invtriangle, color=brown];
8002[label="141.98.93.221;440pkt 440fpkt", shape=invhouse, color=bisque];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.93.221:*, *:4662}[64.3991%]&lt;BR/&gt;{141.98.93.221:*, *:80}[21.0884%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (30.6969%)&lt;BR/&gt; 80: (12.2419%)&lt;BR/&gt; 3308: (1.43805%)&lt;BR/&gt; 1214: (1.43805%)&lt;BR/&gt; 4665: (0.884956%)&gt;];
}
134--420[label="0.0357143;2pkt 2fpkt"];
134--430[label="0.0357143;2pkt 2fpkt"];
134--442[label="0.0178571;1pkt 1fpkt"];
134--448[label="0.0357143;2pkt 2fpkt"];
134--450[label="0.0357143;2pkt 2fpkt"];
134--535[label="0.0357143;2pkt 2fpkt"];
134--544[label="0.0178571;1pkt 1fpkt"];
134--545[label="0.0357143;2pkt 2fpkt"];
134--546[label="0.0357143;2pkt 2fpkt"];
134--575[label="1;56pkt 56fpkt"];
134--723[label="1;56pkt 56fpkt"];
134--2659[label="1;56pkt 56fpkt"];
134--3897[label="0.839286;47pkt 47fpkt"];
134--3946[label="0.0357143;2pkt 2fpkt"];
134--3959[label="0.0357143;2pkt 2fpkt"];
134--3969[label="0.0357143;2pkt 2fpkt"];
134--5733[label="1;56pkt 56fpkt"];
134--7131[label="1;56pkt 56fpkt"];
134--8002[label="1;56pkt 56fpkt"];
575--723[label="1;80pkt 80fpkt"];
575--751[label="1;2pkt 2fpkt"];
575--862[label="1;1pkt 1fpkt"];
575--872[label="1;1pkt 1fpkt"];
575--925[label="1;1pkt 1fpkt"];
575--1018[label="1;2pkt 2fpkt"];
575--1036[label="1;1pkt 1fpkt"];
575--1094[label="1;1pkt 1fpkt"];
575--1155[label="1;1pkt 1fpkt"];
575--1186[label="1;1pkt 1fpkt"];
575--1239[label="1;1pkt 1fpkt"];
575--1294[label="1;1pkt 1fpkt"];
575--1400[label="1;1pkt 1fpkt"];
575--1404[label="1;1pkt 1fpkt"];
575--1483[label="1;1pkt 1fpkt"];
575--1540[label="1;1pkt 1fpkt"];
575--1557[label="1;1pkt 1fpkt"];
575--1565[label="1;1pkt 1fpkt"];
575--1709[label="1;1pkt 1fpkt"];
575--1746[label="1;4pkt 4fpkt"];
575--1777[label="1;1pkt 1fpkt"];
575--1862[label="1;1pkt 1fpkt"];
575--1918[label="1;1pkt 1fpkt"];
575--1989[label="1;1pkt 1fpkt"];
575--2003[label="1;1pkt 1fpkt"];
575--2164[label="1;1pkt 1fpkt"];
575--2391[label="1;1pkt 1fpkt"];
575--2590[label="0.0126582;1pkt 1fpkt"];
575--2633[label="1;1pkt 1fpkt"];
575--2659[label="1;415pkt 415fpkt"];
575--2791[label="1;2pkt 2fpkt"];
575--2843[label="1;1pkt 1fpkt"];
575--2896[label="1;1pkt 1fpkt"];
575--2951[label="1;1pkt 1fpkt"];
575--2955[label="1;1pkt 1fpkt"];
575--2958[label="1;1pkt 1fpkt"];
575--2991[label="1;1pkt 1fpkt"];
575--3042[label="1;1pkt 1fpkt"];
575--3193[label="1;1pkt 1fpkt"];
575--3222[label="1;1pkt 1fpkt"];
575--3257[label="1;1pkt 1fpkt"];
575--3288[label="1;1pkt 1fpkt"];
575--3361[label="1;2pkt 2fpkt"];
575--3411[label="1;1pkt 1fpkt"];
575--3500[label="1;1pkt 1fpkt"];
575--3518[label="1;1pkt 1fpkt"];
575--3656[label="1;1pkt 1fpkt"];
575--3684[label="1;1pkt 1fpkt"];
575--3694[label="1;1pkt 1fpkt"];
575--3897[label="1;369pkt 369fpkt"];
575--3915[label="1;1pkt 1fpkt"];
575--3916[label="1;1pkt 1fpkt"];
575--3927[label="1;1pkt 1fpkt"];
575--3946[label="0.0144578;6pkt 6fpkt"];
575--3959[label="0.0144578;6pkt 6fpkt"];
575--3969[label="0.0144578;6pkt 6fpkt"];
575--5733[label="0.99759;414pkt 414fpkt"];
575--7131[label="1;415pkt 415fpkt"];
575--8002[label="0.99759;414pkt 414fpkt"];
723--2659[label="1;80pkt 80fpkt"];
723--3897[label="0.8875;71pkt 71fpkt"];
723--3946[label="0.0625;5pkt 5fpkt"];
723--3959[label="0.0625;5pkt 5fpkt"];
723--3969[label="0.0625;5pkt 5fpkt"];
723--5733[label="1;80pkt 80fpkt"];
723--7131[label="1;80pkt 80fpkt"];
723--8002[label="1;80pkt 80fpkt"];
751--2659[label="1;2pkt 2fpkt"];
751--2791[label="1;2pkt 2fpkt"];
751--3897[label="1;2pkt 2fpkt"];
751--5733[label="1;2pkt 2fpkt"];
751--7131[label="1;2pkt 2fpkt"];
751--8002[label="1;2pkt 2fpkt"];
862--2659[label="1;1pkt 1fpkt"];
862--2955[label="1;1pkt 1fpkt"];
862--3897[label="1;1pkt 1fpkt"];
862--5733[label="1;1pkt 1fpkt"];
862--7131[label="1;1pkt 1fpkt"];
862--8002[label="1;1pkt 1fpkt"];
872--2659[label="1;1pkt 1fpkt"];
872--2958[label="1;1pkt 1fpkt"];
872--3897[label="1;1pkt 1fpkt"];
872--7131[label="1;1pkt 1fpkt"];
925--2659[label="1;1pkt 1fpkt"];
925--2843[label="1;1pkt 1fpkt"];
925--3897[label="1;1pkt 1fpkt"];
925--5733[label="1;1pkt 1fpkt"];
925--7131[label="1;1pkt 1fpkt"];
925--8002[label="1;1pkt 1fpkt"];
1018--2659[label="1;2pkt 2fpkt"];
1018--3361[label="1;2pkt 2fpkt"];
1018--3897[label="1;2pkt 2fpkt"];
1018--5733[label="1;2pkt 2fpkt"];
1018--7131[label="1;2pkt 2fpkt"];
1018--8002[label="1;2pkt 2fpkt"];
1036--2659[label="1;1pkt 1fpkt"];
1036--3042[label="1;1pkt 1fpkt"];
1036--3897[label="1;1pkt 1fpkt"];
1036--3915[label="1;1pkt 1fpkt"];
1036--5733[label="1;1pkt 1fpkt"];
1036--7131[label="1;1pkt 1fpkt"];
1036--8002[label="1;1pkt 1fpkt"];
1094--2659[label="1;1pkt 1fpkt"];
1094--3500[label="1;1pkt 1fpkt"];
1094--3897[label="1;1pkt 1fpkt"];
1094--3916[label="1;1pkt 1fpkt"];
1094--5733[label="1;1pkt 1fpkt"];
1094--7131[label="1;1pkt 1fpkt"];
1094--8002[label="1;1pkt 1fpkt"];
1155--2659[label="1;1pkt 1fpkt"];
1155--2951[label="1;1pkt 1fpkt"];
1155--3897[label="1;1pkt 1fpkt"];
1155--5733[label="1;1pkt 1fpkt"];
1155--7131[label="1;1pkt 1fpkt"];
1155--8002[label="1;1pkt 1fpkt"];
1186--2659[label="1;1pkt 1fpkt"];
1186--3656[label="1;1pkt 1fpkt"];
1186--3897[label="1;1pkt 1fpkt"];
1186--5733[label="1;1pkt 1fpkt"];
1186--7131[label="1;1pkt 1fpkt"];
1186--8002[label="1;1pkt 1fpkt"];
1239--2659[label="1;1pkt 1fpkt"];
1239--3257[label="1;1pkt 1fpkt"];
1239--3897[label="1;1pkt 1fpkt"];
1239--5733[label="1;1pkt 1fpkt"];
1239--7131[label="1;1pkt 1fpkt"];
1239--8002[label="1;1pkt 1fpkt"];
1294--2659[label="1;1pkt 1fpkt"];
1294--3897[label="1;1pkt 1fpkt"];
1294--5733[label="1;1pkt 1fpkt"];
1294--7131[label="1;1pkt 1fpkt"];
1294--8002[label="1;1pkt 1fpkt"];
1400--2659[label="1;1pkt 1fpkt"];
1400--2896[label="1;1pkt 1fpkt"];
1400--3897[label="1;1pkt 1fpkt"];
1400--5733[label="1;1pkt 1fpkt"];
1400--7131[label="1;1pkt 1fpkt"];
1400--8002[label="1;1pkt 1fpkt"];
1404--2659[label="1;1pkt 1fpkt"];
1404--3193[label="1;1pkt 1fpkt"];
1404--3897[label="1;1pkt 1fpkt"];
1404--5733[label="1;1pkt 1fpkt"];
1404--7131[label="1;1pkt 1fpkt"];
1404--8002[label="1;1pkt 1fpkt"];
1483--2659[label="1;1pkt 1fpkt"];
1483--3897[label="1;1pkt 1fpkt"];
1483--5733[label="1;1pkt 1fpkt"];
1483--7131[label="1;1pkt 1fpkt"];
1483--8002[label="1;1pkt 1fpkt"];
1540--2659[label="1;1pkt 1fpkt"];
1540--3411[label="1;1pkt 1fpkt"];
1540--3897[label="1;1pkt 1fpkt"];
1540--5733[label="1;1pkt 1fpkt"];
1540--7131[label="1;1pkt 1fpkt"];
1540--8002[label="1;1pkt 1fpkt"];
1557--2659[label="1;1pkt 1fpkt"];
1557--2991[label="1;1pkt 1fpkt"];
1557--3897[label="1;1pkt 1fpkt"];
1557--5733[label="1;1pkt 1fpkt"];
1557--7131[label="1;1pkt 1fpkt"];
1557--8002[label="1;1pkt 1fpkt"];
1565--2659[label="1;1pkt 1fpkt"];
1565--3897[label="1;1pkt 1fpkt"];
1565--5733[label="1;1pkt 1fpkt"];
1565--7131[label="1;1pkt 1fpkt"];
1565--8002[label="1;1pkt 1fpkt"];
1709--2659[label="1;1pkt 1fpkt"];
1709--3518[label="1;1pkt 1fpkt"];
1709--3897[label="1;1pkt 1fpkt"];
1709--5733[label="1;1pkt 1fpkt"];
1709--7131[label="1;1pkt 1fpkt"];
1709--8002[label="1;1pkt 1fpkt"];
1746--2659[label="1;4pkt 4fpkt"];
1746--3897[label="1;4pkt 4fpkt"];
1746--5733[label="1;4pkt 4fpkt"];
1746--7131[label="1;4pkt 4fpkt"];
1746--8002[label="1;4pkt 4fpkt"];
1777--2659[label="1;1pkt 1fpkt"];
1777--3897[label="1;1pkt 1fpkt"];
1777--5733[label="1;1pkt 1fpkt"];
1777--7131[label="1;1pkt 1fpkt"];
1777--8002[label="1;1pkt 1fpkt"];
1862--2659[label="1;1pkt 1fpkt"];
1862--3897[label="1;1pkt 1fpkt"];
1862--5733[label="1;1pkt 1fpkt"];
1862--7131[label="1;1pkt 1fpkt"];
1862--8002[label="1;1pkt 1fpkt"];
1918--2659[label="1;1pkt 1fpkt"];
1918--3222[label="1;1pkt 1fpkt"];
1918--3897[label="1;1pkt 1fpkt"];
1918--5733[label="1;1pkt 1fpkt"];
1918--7131[label="1;1pkt 1fpkt"];
1918--8002[label="1;1pkt 1fpkt"];
1989--2659[label="1;1pkt 1fpkt"];
1989--3694[label="1;1pkt 1fpkt"];
1989--3897[label="1;1pkt 1fpkt"];
1989--3927[label="1;1pkt 1fpkt"];
1989--5733[label="1;1pkt 1fpkt"];
1989--7131[label="1;1pkt 1fpkt"];
1989--8002[label="1;1pkt 1fpkt"];
2003--2659[label="1;1pkt 1fpkt"];
2003--3288[label="1;1pkt 1fpkt"];
2003--3897[label="1;1pkt 1fpkt"];
2003--5733[label="1;1pkt 1fpkt"];
2003--7131[label="1;1pkt 1fpkt"];
2003--8002[label="1;1pkt 1fpkt"];
2164--2659[label="1;1pkt 1fpkt"];
2164--3897[label="1;1pkt 1fpkt"];
2164--5733[label="1;1pkt 1fpkt"];
2164--7131[label="1;1pkt 1fpkt"];
2164--8002[label="1;1pkt 1fpkt"];
2391--2659[label="1;1pkt 1fpkt"];
2391--3684[label="1;1pkt 1fpkt"];
2391--3897[label="1;1pkt 1fpkt"];
2391--5733[label="1;1pkt 1fpkt"];
2391--7131[label="1;1pkt 1fpkt"];
2391--8002[label="1;1pkt 1fpkt"];
2633--2659[label="1;1pkt 1fpkt"];
2633--3897[label="1;1pkt 1fpkt"];
2633--5733[label="1;1pkt 1fpkt"];
2633--7131[label="1;1pkt 1fpkt"];
2633--8002[label="1;1pkt 1fpkt"];
2659--2791[label="1;2pkt 2fpkt"];
2659--2843[label="1;1pkt 1fpkt"];
2659--2896[label="1;1pkt 1fpkt"];
2659--2951[label="1;1pkt 1fpkt"];
2659--2955[label="1;1pkt 1fpkt"];
2659--2958[label="1;1pkt 1fpkt"];
2659--2991[label="1;1pkt 1fpkt"];
2659--3042[label="1;1pkt 1fpkt"];
2659--3193[label="1;1pkt 1fpkt"];
2659--3222[label="1;1pkt 1fpkt"];
2659--3257[label="1;1pkt 1fpkt"];
2659--3288[label="1;1pkt 1fpkt"];
2659--3361[label="1;2pkt 2fpkt"];
2659--3411[label="1;1pkt 1fpkt"];
2659--3500[label="1;1pkt 1fpkt"];
2659--3518[label="1;1pkt 1fpkt"];
2659--3656[label="1;1pkt 1fpkt"];
2659--3684[label="1;1pkt 1fpkt"];
2659--3694[label="1;1pkt 1fpkt"];
2659--3897[label="1;369pkt 369fpkt"];
2659--3915[label="1;1pkt 1fpkt"];
2659--3916[label="1;1pkt 1fpkt"];
2659--3927[label="1;1pkt 1fpkt"];
2659--3946[label="0.0144578;6pkt 6fpkt"];
2659--3959[label="0.0144578;6pkt 6fpkt"];
2659--3969[label="0.0144578;6pkt 6fpkt"];
2659--5733[label="0.99759;414pkt 414fpkt"];
2659--7131[label="1;415pkt 415fpkt"];
2659--8002[label="0.99759;414pkt 414fpkt"];
2791--3897[label="1;2pkt 2fpkt"];
2791--5733[label="1;2pkt 2fpkt"];
2791--7131[label="1;2pkt 2fpkt"];
2791--8002[label="1;2pkt 2fpkt"];
2843--3897[label="1;1pkt 1fpkt"];
2843--5733[label="1;1pkt 1fpkt"];
2843--7131[label="1;1pkt 1fpkt"];
2843--8002[label="1;1pkt 1fpkt"];
2896--3897[label="1;1pkt 1fpkt"];
2896--5733[label="1;1pkt 1fpkt"];
2896--7131[label="1;1pkt 1fpkt"];
2896--8002[label="1;1pkt 1fpkt"];
2951--3897[label="1;1pkt 1fpkt"];
2951--5733[label="1;1pkt 1fpkt"];
2951--7131[label="1;1pkt 1fpkt"];
2951--8002[label="1;1pkt 1fpkt"];
2955--3897[label="1;1pkt 1fpkt"];
2955--5733[label="1;1pkt 1fpkt"];
2955--7131[label="1;1pkt 1fpkt"];
2955--8002[label="1;1pkt 1fpkt"];
2958--3897[label="1;1pkt 1fpkt"];
2958--7131[label="1;1pkt 1fpkt"];
2991--3897[label="1;1pkt 1fpkt"];
2991--5733[label="1;1pkt 1fpkt"];
2991--7131[label="1;1pkt 1fpkt"];
2991--8002[label="1;1pkt 1fpkt"];
3042--3897[label="1;1pkt 1fpkt"];
3042--3915[label="1;1pkt 1fpkt"];
3042--5733[label="1;1pkt 1fpkt"];
3042--7131[label="1;1pkt 1fpkt"];
3042--8002[label="1;1pkt 1fpkt"];
3193--3897[label="1;1pkt 1fpkt"];
3193--5733[label="1;1pkt 1fpkt"];
3193--7131[label="1;1pkt 1fpkt"];
3193--8002[label="1;1pkt 1fpkt"];
3222--3897[label="1;1pkt 1fpkt"];
3222--5733[label="1;1pkt 1fpkt"];
3222--7131[label="1;1pkt 1fpkt"];
3222--8002[label="1;1pkt 1fpkt"];
3257--3897[label="1;1pkt 1fpkt"];
3257--5733[label="1;1pkt 1fpkt"];
3257--7131[label="1;1pkt 1fpkt"];
3257--8002[label="1;1pkt 1fpkt"];
3288--3897[label="1;1pkt 1fpkt"];
3288--5733[label="1;1pkt 1fpkt"];
3288--7131[label="1;1pkt 1fpkt"];
3288--8002[label="1;1pkt 1fpkt"];
3361--3897[label="1;2pkt 2fpkt"];
3361--5733[label="1;2pkt 2fpkt"];
3361--7131[label="1;2pkt 2fpkt"];
3361--8002[label="1;2pkt 2fpkt"];
3411--3897[label="1;1pkt 1fpkt"];
3411--5733[label="1;1pkt 1fpkt"];
3411--7131[label="1;1pkt 1fpkt"];
3411--8002[label="1;1pkt 1fpkt"];
3500--3897[label="1;1pkt 1fpkt"];
3500--3916[label="1;1pkt 1fpkt"];
3500--5733[label="1;1pkt 1fpkt"];
3500--7131[label="1;1pkt 1fpkt"];
3500--8002[label="1;1pkt 1fpkt"];
3518--3897[label="1;1pkt 1fpkt"];
3518--5733[label="1;1pkt 1fpkt"];
3518--7131[label="1;1pkt 1fpkt"];
3518--8002[label="1;1pkt 1fpkt"];
3656--3897[label="1;1pkt 1fpkt"];
3656--5733[label="1;1pkt 1fpkt"];
3656--7131[label="1;1pkt 1fpkt"];
3656--8002[label="1;1pkt 1fpkt"];
3684--3897[label="1;1pkt 1fpkt"];
3684--5733[label="1;1pkt 1fpkt"];
3684--7131[label="1;1pkt 1fpkt"];
3684--8002[label="1;1pkt 1fpkt"];
3694--3897[label="1;1pkt 1fpkt"];
3694--3927[label="1;1pkt 1fpkt"];
3694--5733[label="1;1pkt 1fpkt"];
3694--7131[label="1;1pkt 1fpkt"];
3694--8002[label="1;1pkt 1fpkt"];
3897--3915[label="1;1pkt 1fpkt"];
3897--3916[label="1;1pkt 1fpkt"];
3897--3927[label="1;1pkt 1fpkt"];
3897--3946[label="0.0162602;6pkt 6fpkt"];
3897--3959[label="0.0162602;6pkt 6fpkt"];
3897--3969[label="0.0162602;6pkt 6fpkt"];
3897--5733[label="0.99729;368pkt 368fpkt"];
3897--7131[label="1;369pkt 369fpkt"];
3897--8002[label="0.99729;368pkt 368fpkt"];
3915--5733[label="1;1pkt 1fpkt"];
3915--7131[label="1;1pkt 1fpkt"];
3915--8002[label="1;1pkt 1fpkt"];
3916--5733[label="1;1pkt 1fpkt"];
3916--7131[label="1;1pkt 1fpkt"];
3916--8002[label="1;1pkt 1fpkt"];
3927--5733[label="1;1pkt 1fpkt"];
3927--7131[label="1;1pkt 1fpkt"];
3927--8002[label="1;1pkt 1fpkt"];
5733--7131[label="1;440pkt 440fpkt"];
5733--8002[label="1;440pkt 440fpkt"];
7131--8002[label="1;440pkt 440fpkt"];
</description>
    <slice>
      <filter dst_port="4662" src_ip="141.98.93.221"/>
      <filter dst_port="80" src_ip="141.98.93.221"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25702,2.20707,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
726[label="195.233.198.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
727[label="161.238.12.14;s;5pkt 5fpkt", shape=diamond, color=yellow];
3210[label="161.238.12.14;s;5pkt 5fpkt", shape=hexagon, color=black];
3851[label="161.238.12.14;s;5pkt 5fpkt", shape=polygon, color=gold];
4106[label="161.238.12.14;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6040[label="161.238.12.14;5pkt 5fpkt", shape=invtriangle, color=brown];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.12.14:1312, 209.199.207.82:80}[20%]&lt;BR/&gt;{161.238.12.14:1220, 195.233.198.129:1755}[20%]&lt;BR/&gt;{161.238.12.14:1308, 209.199.195.193:80}[20%]&lt;BR/&gt;{161.238.12.14:1309, 209.199.195.193:80}[20%]&lt;BR/&gt;{161.238.12.14:1310, 209.199.195.193:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.4615%)&lt;BR/&gt; 1755: (11.5385%)&lt;BR/&gt; 1220: (11.5385%)&lt;BR/&gt; 1312: (9.61538%)&lt;BR/&gt; 1310: (9.61538%)&gt;];
}
726--727[label="1;1pkt 1fpkt"];
726--3210[label="1;1pkt 1fpkt"];
726--3851[label="1;1pkt 1fpkt"];
726--4106[label="1;1pkt 1fpkt"];
726--6040[label="1;1pkt 1fpkt"];
727--1737[label="0.6;3pkt 3fpkt"];
727--3210[label="1;5pkt 5fpkt"];
727--3851[label="1;5pkt 5fpkt"];
727--4106[label="1;5pkt 5fpkt"];
727--6040[label="1;5pkt 5fpkt"];
3210--3851[label="1;5pkt 5fpkt"];
3210--4106[label="1;5pkt 5fpkt"];
3210--6040[label="1;5pkt 5fpkt"];
3851--4106[label="1;5pkt 5fpkt"];
3851--6040[label="1;5pkt 5fpkt"];
4106--6040[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="209.199.195.193" dst_port="80" src_ip="161.238.12.14" src_port="1310"/>
      <filter dst_ip="209.199.195.193" dst_port="80" src_ip="161.238.12.14" src_port="1309"/>
      <filter dst_ip="209.199.195.193" dst_port="80" src_ip="161.238.12.14" src_port="1308"/>
      <filter dst_ip="195.233.198.129" dst_port="1755" src_ip="161.238.12.14" src_port="1220"/>
      <filter dst_ip="209.199.207.82" dst_port="80" src_ip="161.238.12.14" src_port="1312"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989075,2.1681,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
77[label="212.210.51.112s;2pkt 2fpkt", shape=rectangle, color=red];
741[label="161.238.33.168;d;3pkt 3fpkt", shape=diamond, color=yellow];
744[label="212.210.51.112;s;2pkt 2fpkt", shape=diamond, color=yellow];
2789[label="161.238.33.168;d;3pkt 3fpkt", shape=hexagon, color=black];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.209.112.47:80, 161.238.33.168:1180}[33.3333%]&lt;BR/&gt;{212.210.51.112:80, 161.238.33.168:1188}[33.3333%]&lt;BR/&gt;{212.210.51.112:80, 161.238.33.168:1197}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1197: (20%)&lt;BR/&gt; 1188: (20%)&lt;BR/&gt; 1180: (10%)&gt;];
}
77--741[label="1;2pkt 2fpkt"];
77--744[label="1;2pkt 2fpkt"];
77--2789[label="1;2pkt 2fpkt"];
741--744[label="1;2pkt 2fpkt"];
741--2789[label="1;3pkt 3fpkt"];
744--2789[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.33.168" dst_port="1197" src_ip="212.210.51.112" src_port="80"/>
      <filter dst_ip="161.238.33.168" dst_port="1188" src_ip="212.210.51.112" src_port="80"/>
      <filter dst_ip="161.238.33.168" dst_port="1180" src_ip="212.209.112.47" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
2134[label="203.49.84.166;s;37pkt 37fpkt", shape=diamond, color=yellow];
3360[label="203.49.84.166;s;37pkt 37fpkt", shape=hexagon, color=black];
5341[label="203.49.84.166;36pkt 36fpkt", shape=pentagon, color=darkviolet];
6872[label="203.49.84.166;37pkt 37fpkt", shape=invtriangle, color=brown];
7846[label="203.49.84.166;36pkt 36fpkt", shape=invhouse, color=bisque];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.49.84.166:80, 167.8.180.44:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61047: (1.36612%)&lt;BR/&gt; 61044: (1.36612%)&lt;BR/&gt; 61042: (1.36612%)&lt;BR/&gt; 61041: (1.36612%)&gt;];
}
2134--3360[label="1;37pkt 37fpkt"];
2134--3634[label="1;37pkt 37fpkt"];
2134--5341[label="1;36pkt 36fpkt"];
2134--6872[label="1;37pkt 37fpkt"];
2134--7846[label="1;36pkt 36fpkt"];
3360--3634[label="1;37pkt 37fpkt"];
3360--5341[label="1;36pkt 36fpkt"];
3360--6872[label="1;37pkt 37fpkt"];
3360--7846[label="1;36pkt 36fpkt"];
5341--6872[label="1;36pkt 36fpkt"];
5341--7846[label="1;36pkt 36fpkt"];
6872--7846[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.180.44" src_ip="203.49.84.166" src_port="80"/>
    </slice>
    <from sec="1034226418" usec="0"/>
    <to sec="1034226473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
776[label="208.159.87.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
777[label="219.43.21.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
2926[label="208.159.87.12;s;1pkt 1fpkt", shape=hexagon, color=black];
2927[label="219.43.21.15;d;1pkt 1fpkt", shape=hexagon, color=black];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.159.87.12:194, 219.43.21.15:59428}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59428: (50%)&lt;BR/&gt; 194: (50%)&gt;];
}
776--777[label="1;1pkt 1fpkt"];
776--2926[label="1;1pkt 1fpkt"];
776--2927[label="1;1pkt 1fpkt"];
777--2926[label="1;1pkt 1fpkt"];
777--2927[label="1;1pkt 1fpkt"];
2926--2927[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.43.21.15" dst_port="59428" src_ip="208.159.87.12" src_port="194"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
142[label="209.45.141.244s;1pkt 1fpkt", shape=rectangle, color=red];
778[label="167.8.140.141;d;27pkt 27fpkt", shape=diamond, color=yellow];
780[label="209.45.141.244;s;4pkt 4fpkt", shape=diamond, color=yellow];
2709[label="167.8.140.141;d;6pkt 6fpkt", shape=hexagon, color=black];
3218[label="209.45.141.244;s;3pkt 3fpkt", shape=hexagon, color=black];
5187[label="85.41.43.147;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5881[label="209.45.141.244;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5930[label="85.34.108.251;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7232[label="209.45.141.244;22pkt 22fpkt", shape=invtriangle, color=brown];
8074[label="209.45.141.244;22pkt 22fpkt", shape=invhouse, color=bisque];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.45.141.244:*, 167.8.140.141:*}[70.9677%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42622: (3.63636%)&lt;BR/&gt; 1441: (3.63636%)&lt;BR/&gt; 1863: (3.18182%)&lt;BR/&gt; 1189: (3.18182%)&lt;BR/&gt; 21: (3.18182%)&gt;];
}
142--778[label="1;1pkt 1fpkt"];
142--780[label="1;1pkt 1fpkt"];
142--2709[label="1;1pkt 1fpkt"];
142--3218[label="1;1pkt 1fpkt"];
142--5881[label="1;1pkt 1fpkt"];
142--7232[label="1;1pkt 1fpkt"];
142--8074[label="1;1pkt 1fpkt"];
778--780[label="1;4pkt 4fpkt"];
778--808[label="0.148148;4pkt 4fpkt"];
778--2709[label="1;6pkt 6fpkt"];
778--3218[label="1;3pkt 3fpkt"];
778--4784[label="0.148148;4pkt 4fpkt"];
778--5187[label="1;1pkt 1fpkt"];
778--5881[label="0.904762;19pkt 19fpkt"];
778--5930[label="0.333333;1pkt 1fpkt"];
778--6483[label="0.148148;4pkt 4fpkt"];
778--7232[label="0.909091;20pkt 20fpkt"];
778--7595[label="0.148148;4pkt 4fpkt"];
778--8074[label="0.909091;20pkt 20fpkt"];
780--2709[label="0.75;3pkt 3fpkt"];
780--3218[label="1;3pkt 3fpkt"];
780--5881[label="0.75;3pkt 3fpkt"];
780--7232[label="1;4pkt 4fpkt"];
780--8074[label="1;4pkt 4fpkt"];
2709--3218[label="1;3pkt 3fpkt"];
2709--5187[label="1;1pkt 1fpkt"];
2709--5881[label="0.333333;2pkt 2fpkt"];
2709--5930[label="0.333333;1pkt 1fpkt"];
2709--7232[label="0.5;3pkt 3fpkt"];
2709--8074[label="0.5;3pkt 3fpkt"];
3218--5881[label="0.666667;2pkt 2fpkt"];
3218--7232[label="1;3pkt 3fpkt"];
3218--8074[label="1;3pkt 3fpkt"];
5881--7232[label="1;21pkt 21fpkt"];
5881--8074[label="1;21pkt 21fpkt"];
7232--8074[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.140.141" src_ip="209.45.141.244"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,999,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
8[label="212.24.20.11s;1pkt 1fpkt", shape=rectangle, color=red];
55[label="167.8.143.82s;2pkt 2fpkt", shape=rectangle, color=red];
766[label="212.24.20.11;s;813pkt 813fpkt", shape=diamond, color=yellow];
802[label="75.5.142.204;d;1pkt 1fpkt", shape=diamond, color=yellow];
807[label="43.212.207.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
1089[label="218.226.251.220;d;1pkt 1fpkt", shape=diamond, color=yellow];
1122[label="43.19.8.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
1127[label="208.17.35.218;d;1pkt 1fpkt", shape=diamond, color=yellow];
1139[label="86.64.164.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
1747[label="81.21.87.95;d;2pkt 2fpkt", shape=diamond, color=yellow];
2278[label="2.186.12.82;d;2pkt 2fpkt", shape=diamond, color=yellow];
2361[label="202.8.4.116;d;1pkt 1fpkt", shape=diamond, color=yellow];
2371[label="43.36.180.144;d;2pkt 2fpkt", shape=diamond, color=yellow];
2372[label="141.98.101.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
2548[label="220.226.191.200;d;1pkt 1fpkt", shape=diamond, color=yellow];
2792[label="218.226.251.220;d;1pkt 1fpkt", shape=hexagon, color=black];
2940[label="43.19.8.119;d;1pkt 1fpkt", shape=hexagon, color=black];
2943[label="43.212.207.196;d;1pkt 1fpkt", shape=hexagon, color=black];
3374[label="212.24.20.11;s;813pkt 813fpkt", shape=hexagon, color=black];
3644[label="220.226.191.200;d;1pkt 1fpkt", shape=hexagon, color=black];
3646[label="86.64.164.2;d;1pkt 1fpkt", shape=hexagon, color=black];
3827[label="43.19.8.119;d;1pkt 1fpkt", shape=polygon, color=gold];
4085[label="212.24.20.11;855pkt 855fpkt", shape=pentagon, color=darkviolet];
6022[label="212.24.20.11;854pkt 854fpkt", shape=invtriangle, color=brown];
7319[label="212.24.20.11;855pkt 855fpkt", shape=invhouse, color=bisque];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.20.11:6257, *:6257}[95.8042%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (96.6065%)&lt;BR/&gt; 6699: (1.18652%)&lt;BR/&gt; 16257: (0.154248%)&lt;BR/&gt; 1285: (0.0949217%)&lt;BR/&gt; 1086: (0.0949217%)&gt;];
}
8--55[label="1;1pkt 1fpkt"];
8--766[label="1;1pkt 1fpkt"];
8--802[label="1;1pkt 1fpkt"];
8--3374[label="1;1pkt 1fpkt"];
8--4085[label="1;1pkt 1fpkt"];
8--6022[label="1;1pkt 1fpkt"];
8--7319[label="1;1pkt 1fpkt"];
55--420[label="0.5;1pkt 1fpkt"];
55--431[label="0.5;1pkt 1fpkt"];
55--442[label="0.5;1pkt 1fpkt"];
55--536[label="0.5;1pkt 1fpkt"];
55--544[label="0.5;1pkt 1fpkt"];
55--766[label="0.5;1pkt 1fpkt"];
55--802[label="1;1pkt 1fpkt"];
55--3374[label="0.5;1pkt 1fpkt"];
55--4085[label="0.5;1pkt 1fpkt"];
55--4705[label="0.5;1pkt 1fpkt"];
55--6022[label="0.5;1pkt 1fpkt"];
55--6436[label="0.5;1pkt 1fpkt"];
55--7319[label="0.5;1pkt 1fpkt"];
55--7572[label="0.5;1pkt 1fpkt"];
766--802[label="1;1pkt 1fpkt"];
766--807[label="1;1pkt 1fpkt"];
766--1089[label="1;1pkt 1fpkt"];
766--1122[label="1;1pkt 1fpkt"];
766--1127[label="1;1pkt 1fpkt"];
766--1139[label="1;1pkt 1fpkt"];
766--1228[label="0.5;1pkt 1fpkt"];
766--1747[label="0.5;1pkt 1fpkt"];
766--2278[label="1;2pkt 2fpkt"];
766--2361[label="1;1pkt 1fpkt"];
766--2371[label="0.5;1pkt 1fpkt"];
766--2548[label="1;1pkt 1fpkt"];
766--2792[label="1;1pkt 1fpkt"];
766--2940[label="1;1pkt 1fpkt"];
766--2943[label="1;1pkt 1fpkt"];
766--3374[label="1;813pkt 813fpkt"];
766--3644[label="1;1pkt 1fpkt"];
766--3646[label="1;1pkt 1fpkt"];
766--3669[label="0.5;1pkt 1fpkt"];
766--3827[label="1;1pkt 1fpkt"];
766--3948[label="0.225092;183pkt 183fpkt"];
766--3952[label="0.252153;205pkt 205fpkt"];
766--3961[label="0.225092;183pkt 183fpkt"];
766--3963[label="0.252153;205pkt 205fpkt"];
766--3971[label="0.225092;183pkt 183fpkt"];
766--3973[label="0.252153;205pkt 205fpkt"];
766--4085[label="1;813pkt 813fpkt"];
766--6022[label="0.99877;812pkt 812fpkt"];
766--7319[label="1;813pkt 813fpkt"];
802--3374[label="1;1pkt 1fpkt"];
802--4085[label="1;1pkt 1fpkt"];
802--6022[label="1;1pkt 1fpkt"];
802--7319[label="1;1pkt 1fpkt"];
807--2943[label="1;1pkt 1fpkt"];
807--3374[label="1;1pkt 1fpkt"];
807--4085[label="1;1pkt 1fpkt"];
807--6022[label="1;1pkt 1fpkt"];
807--7319[label="1;1pkt 1fpkt"];
1089--2792[label="1;1pkt 1fpkt"];
1089--3374[label="1;1pkt 1fpkt"];
1089--4085[label="1;1pkt 1fpkt"];
1089--6022[label="1;1pkt 1fpkt"];
1089--7319[label="1;1pkt 1fpkt"];
1122--2940[label="1;1pkt 1fpkt"];
1122--3374[label="1;1pkt 1fpkt"];
1122--3827[label="1;1pkt 1fpkt"];
1122--4085[label="1;1pkt 1fpkt"];
1122--6022[label="1;1pkt 1fpkt"];
1122--7319[label="1;1pkt 1fpkt"];
1127--3374[label="1;1pkt 1fpkt"];
1127--4085[label="1;1pkt 1fpkt"];
1127--6022[label="1;1pkt 1fpkt"];
1127--7319[label="1;1pkt 1fpkt"];
1139--3374[label="1;1pkt 1fpkt"];
1139--3646[label="1;1pkt 1fpkt"];
1139--4085[label="1;1pkt 1fpkt"];
1139--6022[label="1;1pkt 1fpkt"];
1139--7319[label="1;1pkt 1fpkt"];
1747--2962[label="0.5;1pkt 1fpkt"];
1747--3374[label="0.5;1pkt 1fpkt"];
1747--4085[label="0.5;1pkt 1fpkt"];
1747--4193[label="1;1pkt 1fpkt"];
1747--6022[label="0.5;1pkt 1fpkt"];
1747--6098[label="1;1pkt 1fpkt"];
1747--7319[label="0.5;1pkt 1fpkt"];
1747--7364[label="1;1pkt 1fpkt"];
2278--3374[label="1;2pkt 2fpkt"];
2278--3952[label="0.5;1pkt 1fpkt"];
2278--3963[label="0.5;1pkt 1fpkt"];
2278--3973[label="0.5;1pkt 1fpkt"];
2278--4085[label="1;2pkt 2fpkt"];
2278--6022[label="1;2pkt 2fpkt"];
2278--7319[label="1;2pkt 2fpkt"];
2361--3374[label="1;1pkt 1fpkt"];
2361--4085[label="1;1pkt 1fpkt"];
2361--6022[label="1;1pkt 1fpkt"];
2361--7319[label="1;1pkt 1fpkt"];
2371--2372[label="1;1pkt 1fpkt"];
2371--3374[label="0.5;1pkt 1fpkt"];
2371--4085[label="0.5;1pkt 1fpkt"];
2371--6022[label="0.5;1pkt 1fpkt"];
2371--7319[label="0.5;1pkt 1fpkt"];
2548--3374[label="1;1pkt 1fpkt"];
2548--3644[label="1;1pkt 1fpkt"];
2548--4085[label="1;1pkt 1fpkt"];
2548--6022[label="1;1pkt 1fpkt"];
2548--7319[label="1;1pkt 1fpkt"];
2792--3374[label="1;1pkt 1fpkt"];
2792--4085[label="1;1pkt 1fpkt"];
2792--6022[label="1;1pkt 1fpkt"];
2792--7319[label="1;1pkt 1fpkt"];
2940--3374[label="1;1pkt 1fpkt"];
2940--3827[label="1;1pkt 1fpkt"];
2940--4085[label="1;1pkt 1fpkt"];
2940--6022[label="1;1pkt 1fpkt"];
2940--7319[label="1;1pkt 1fpkt"];
2943--3374[label="1;1pkt 1fpkt"];
2943--4085[label="1;1pkt 1fpkt"];
2943--6022[label="1;1pkt 1fpkt"];
2943--7319[label="1;1pkt 1fpkt"];
3374--3644[label="1;1pkt 1fpkt"];
3374--3646[label="1;1pkt 1fpkt"];
3374--3669[label="0.5;1pkt 1fpkt"];
3374--3827[label="1;1pkt 1fpkt"];
3374--3948[label="0.225092;183pkt 183fpkt"];
3374--3952[label="0.252153;205pkt 205fpkt"];
3374--3961[label="0.225092;183pkt 183fpkt"];
3374--3963[label="0.252153;205pkt 205fpkt"];
3374--3971[label="0.225092;183pkt 183fpkt"];
3374--3973[label="0.252153;205pkt 205fpkt"];
3374--4085[label="1;813pkt 813fpkt"];
3374--6022[label="0.99877;812pkt 812fpkt"];
3374--7319[label="1;813pkt 813fpkt"];
3644--4085[label="1;1pkt 1fpkt"];
3644--6022[label="1;1pkt 1fpkt"];
3644--7319[label="1;1pkt 1fpkt"];
3646--4085[label="1;1pkt 1fpkt"];
3646--6022[label="1;1pkt 1fpkt"];
3646--7319[label="1;1pkt 1fpkt"];
3827--4085[label="1;1pkt 1fpkt"];
3827--6022[label="1;1pkt 1fpkt"];
3827--7319[label="1;1pkt 1fpkt"];
4085--6022[label="1;854pkt 854fpkt"];
4085--7319[label="1;855pkt 855fpkt"];
6022--7319[label="1;854pkt 854fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="212.24.20.11" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
106[label="141.98.102.175s;1pkt 1fpkt", shape=rectangle, color=red];
803[label="84.216.72.95;d;1pkt 1fpkt", shape=diamond, color=yellow];
804[label="141.98.102.175;s;12pkt 12fpkt", shape=diamond, color=yellow];
1223[label="86.182.30.66;d;2pkt 2fpkt", shape=diamond, color=yellow];
3072[label="141.98.102.175;s;8pkt 8fpkt", shape=hexagon, color=black];
5408[label="141.98.102.175;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6916[label="141.98.102.175;13pkt 13fpkt", shape=invtriangle, color=brown];
7872[label="141.98.102.175;13pkt 13fpkt", shape=invhouse, color=bisque];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.102.175:*, 132.135.28.203:7226}[61.5385%]&lt;BR/&gt;{141.98.102.175:18501, *:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7226: (28.2258%)&lt;BR/&gt; 18501: (13.7097%)&lt;BR/&gt; 24439: (5.64516%)&lt;BR/&gt; 33706: (4.83871%)&lt;BR/&gt; 16022: (4.03226%)&gt;];
}
106--803[label="1;1pkt 1fpkt"];
106--804[label="1;1pkt 1fpkt"];
106--3072[label="1;1pkt 1fpkt"];
106--5408[label="1;1pkt 1fpkt"];
106--6916[label="1;1pkt 1fpkt"];
106--7872[label="1;1pkt 1fpkt"];
803--804[label="1;1pkt 1fpkt"];
803--3072[label="1;1pkt 1fpkt"];
803--5408[label="1;1pkt 1fpkt"];
803--6916[label="1;1pkt 1fpkt"];
803--7872[label="1;1pkt 1fpkt"];
804--1223[label="1;2pkt 2fpkt"];
804--3072[label="1;8pkt 8fpkt"];
804--5408[label="0.916667;11pkt 11fpkt"];
804--6916[label="1;12pkt 12fpkt"];
804--7872[label="1;12pkt 12fpkt"];
1223--3072[label="1;2pkt 2fpkt"];
1223--5408[label="0.5;1pkt 1fpkt"];
1223--6916[label="1;2pkt 2fpkt"];
1223--7872[label="1;2pkt 2fpkt"];
3072--5408[label="0.875;7pkt 7fpkt"];
3072--6916[label="1;8pkt 8fpkt"];
3072--7872[label="1;8pkt 8fpkt"];
5408--6916[label="1;12pkt 12fpkt"];
5408--7872[label="1;12pkt 12fpkt"];
6916--7872[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="141.98.102.175" src_port="18501"/>
      <filter dst_ip="132.135.28.203" dst_port="7226" src_ip="141.98.102.175"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
577[label="141.98.94.180;d;26pkt 26fpkt", shape=diamond, color=yellow];
815[label="210.150.73.74;s;10pkt 10fpkt", shape=diamond, color=yellow];
2136[label="179.68.79.131;s;126pkt 126fpkt", shape=diamond, color=yellow];
2897[label="141.98.94.180;d;18pkt 18fpkt", shape=hexagon, color=black];
3505[label="210.150.73.74;s;10pkt 10fpkt", shape=hexagon, color=black];
5064[label="179.68.79.131;137pkt 137fpkt", shape=pentagon, color=darkviolet];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.68.79.131:80, 141.98.182.4:*}[24.3902%]&lt;BR/&gt;{179.68.79.131:80, 185.191.108.62:*}[20.7317%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.6483%)&lt;BR/&gt; 554: (2.9052%)&lt;BR/&gt; 6970: (2.29358%)&lt;BR/&gt; 28422: (0.611621%)&lt;BR/&gt; 18596: (0.611621%)&gt;];
}
577--815[label="0.8;8pkt 8fpkt"];
577--2136[label="0.0769231;2pkt 2fpkt"];
577--2185[label="0.307692;8pkt 8fpkt"];
577--2897[label="1;18pkt 18fpkt"];
577--3505[label="0.8;8pkt 8fpkt"];
577--3950[label="0.192308;5pkt 5fpkt"];
577--4724[label="0.0384615;1pkt 1fpkt"];
577--5064[label="0.0769231;2pkt 2fpkt"];
815--1451[label="0.333333;2pkt 2fpkt"];
815--2897[label="0.6;6pkt 6fpkt"];
815--3505[label="1;10pkt 10fpkt"];
2136--2214[label="0.103448;6pkt 6fpkt"];
2136--2256[label="0.021978;2pkt 2fpkt"];
2136--2798[label="0.00793651;1pkt 1fpkt"];
2136--2887[label="0.205128;8pkt 8fpkt"];
2136--2897[label="0.111111;2pkt 2fpkt"];
2136--2910[label="0.00793651;1pkt 1fpkt"];
2136--3035[label="0.0396825;5pkt 5fpkt"];
2136--3490[label="0.015873;2pkt 2fpkt"];
2136--3582[label="0.021978;2pkt 2fpkt"];
2136--3807[label="0.00793651;1pkt 1fpkt"];
2136--3950[label="0.0714286;9pkt 9fpkt"];
2136--5064[label="0.992063;125pkt 125fpkt"];
2897--3505[label="0.6;6pkt 6fpkt"];
2897--3950[label="0.277778;5pkt 5fpkt"];
2897--5064[label="0.111111;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.182.4" src_ip="179.68.79.131" src_port="80"/>
      <filter dst_ip="185.191.108.62" src_ip="179.68.79.131" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07826,2.15484,999,1 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
0[label="17.238.83.0s;1pkt 1fpkt", shape=rectangle, color=red];
817[label="167.8.43.96;d;2pkt 2fpkt", shape=diamond, color=yellow];
818[label="17.238.83.0;s;1pkt 1fpkt", shape=diamond, color=yellow];
3074[label="167.8.43.96;d;2pkt 2fpkt", shape=hexagon, color=black];
7269[label="17.238.83.0;1pkt 1fpkt", shape=invhouse, color=bisque];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.238.83.0:6699, 167.8.43.96:1245}[50%]&lt;BR/&gt;{161.241.234.252:123, 167.8.43.96:1029}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (35.7143%)&lt;BR/&gt; 1245: (35.7143%)&lt;BR/&gt; 1029: (14.2857%)&lt;BR/&gt; 123: (14.2857%)&gt;];
}
0--817[label="1;1pkt 1fpkt"];
0--818[label="1;1pkt 1fpkt"];
0--3074[label="1;1pkt 1fpkt"];
0--7269[label="1;1pkt 1fpkt"];
817--818[label="1;1pkt 1fpkt"];
817--3074[label="1;2pkt 2fpkt"];
817--5933[label="0.5;1pkt 1fpkt"];
817--7261[label="0.5;1pkt 1fpkt"];
817--7269[label="1;1pkt 1fpkt"];
817--8090[label="0.5;1pkt 1fpkt"];
818--3074[label="1;1pkt 1fpkt"];
818--7269[label="1;1pkt 1fpkt"];
3074--5933[label="0.5;1pkt 1fpkt"];
3074--7261[label="0.5;1pkt 1fpkt"];
3074--7269[label="1;1pkt 1fpkt"];
3074--8090[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.43.96" dst_port="1029" src_ip="161.241.234.252" src_port="123"/>
      <filter dst_ip="167.8.43.96" dst_port="1245" src_ip="17.238.83.0" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,999,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
115[label="179.17.27.191s;1pkt 1fpkt", shape=rectangle, color=red];
683[label="179.17.27.191;s;19pkt 19fpkt", shape=diamond, color=yellow];
819[label="213.216.171.242;d;2pkt 2fpkt", shape=diamond, color=yellow];
995[label="213.216.142.26;d;5pkt 5fpkt", shape=diamond, color=yellow];
1047[label="1.218.250.1;d;2pkt 2fpkt", shape=diamond, color=yellow];
2690[label="179.17.27.191;s;19pkt 19fpkt", shape=hexagon, color=black];
3585[label="213.216.142.26;d;3pkt 3fpkt", shape=hexagon, color=black];
3809[label="179.17.27.191;s;11pkt 11fpkt", shape=polygon, color=gold];
5530[label="179.17.27.191;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6992[label="179.17.27.191;20pkt 20fpkt", shape=invtriangle, color=brown];
7917[label="179.17.27.191;19pkt 19fpkt", shape=invhouse, color=bisque];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.17.27.191:*, 213.216.136.54:2178}[30%]&lt;BR/&gt;{179.17.27.191:2251, 213.216.142.26:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2251: (31.6667%)&lt;BR/&gt; 2178: (12.5%)&lt;BR/&gt; 1214: (5.83333%)&lt;BR/&gt; 1998: (3.33333%)&lt;BR/&gt; 1384: (3.33333%)&gt;];
}
115--683[label="1;1pkt 1fpkt"];
115--819[label="1;1pkt 1fpkt"];
115--2690[label="1;1pkt 1fpkt"];
115--3809[label="1;1pkt 1fpkt"];
115--5530[label="1;1pkt 1fpkt"];
115--6992[label="1;1pkt 1fpkt"];
115--7917[label="1;1pkt 1fpkt"];
683--819[label="1;2pkt 2fpkt"];
683--995[label="1;5pkt 5fpkt"];
683--1047[label="1;2pkt 2fpkt"];
683--2690[label="1;19pkt 19fpkt"];
683--3585[label="1;3pkt 3fpkt"];
683--3809[label="1;11pkt 11fpkt"];
683--5530[label="0.947368;18pkt 18fpkt"];
683--6992[label="1;19pkt 19fpkt"];
683--7917[label="0.947368;18pkt 18fpkt"];
819--2690[label="1;2pkt 2fpkt"];
819--3809[label="1;2pkt 2fpkt"];
819--5530[label="0.5;1pkt 1fpkt"];
819--6992[label="1;2pkt 2fpkt"];
819--7917[label="0.5;1pkt 1fpkt"];
995--2690[label="1;5pkt 5fpkt"];
995--3585[label="1;3pkt 3fpkt"];
995--3809[label="0.4;2pkt 2fpkt"];
995--5530[label="1;5pkt 5fpkt"];
995--6992[label="1;5pkt 5fpkt"];
995--7917[label="1;5pkt 5fpkt"];
1047--2690[label="1;2pkt 2fpkt"];
1047--3809[label="1;2pkt 2fpkt"];
1047--5530[label="1;2pkt 2fpkt"];
1047--6992[label="1;2pkt 2fpkt"];
1047--7917[label="1;2pkt 2fpkt"];
2690--3585[label="1;3pkt 3fpkt"];
2690--3809[label="1;11pkt 11fpkt"];
2690--5530[label="0.947368;18pkt 18fpkt"];
2690--6992[label="1;19pkt 19fpkt"];
2690--7917[label="0.947368;18pkt 18fpkt"];
3585--3809[label="0.666667;2pkt 2fpkt"];
3585--5530[label="1;3pkt 3fpkt"];
3585--6992[label="1;3pkt 3fpkt"];
3585--7917[label="1;3pkt 3fpkt"];
3809--5530[label="0.909091;10pkt 10fpkt"];
3809--6992[label="1;11pkt 11fpkt"];
3809--7917[label="0.909091;10pkt 10fpkt"];
5530--6992[label="1;19pkt 19fpkt"];
5530--7917[label="1;19pkt 19fpkt"];
6992--7917[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="213.216.136.54" dst_port="2178" src_ip="179.17.27.191"/>
      <filter dst_ip="213.216.142.26" src_ip="179.17.27.191" src_port="2251"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
750[label="161.238.59.61;s;18pkt 18fpkt", shape=diamond, color=yellow];
767[label="202.8.194.29;d;8pkt 8fpkt", shape=diamond, color=yellow];
820[label="86.147.54.77;d;3pkt 3fpkt", shape=diamond, color=yellow];
885[label="202.10.94.62;d;3pkt 3fpkt", shape=diamond, color=yellow];
1081[label="218.42.141.101;d;2pkt 2fpkt", shape=diamond, color=yellow];
2716[label="86.147.54.77;d;2pkt 2fpkt", shape=hexagon, color=black];
2790[label="218.42.141.101;d;1pkt 1fpkt", shape=hexagon, color=black];
3061[label="202.8.194.29;d;8pkt 8fpkt", shape=hexagon, color=black];
3372[label="161.238.59.61;s;13pkt 13fpkt", shape=hexagon, color=black];
3519[label="202.10.94.62;d;3pkt 3fpkt", shape=hexagon, color=black];
4502[label="161.238.59.61;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6305[label="161.238.59.61;17pkt 17fpkt", shape=invtriangle, color=brown];
7496[label="161.238.59.61;18pkt 18fpkt", shape=invhouse, color=bisque];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.59.61:*, 202.8.194.29:*}[44.4444%]&lt;BR/&gt;{161.238.59.61:6542, *:*}[27.7778%]&lt;BR/&gt;{161.238.59.61:6543, *:*}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6542: (14.1593%)&lt;BR/&gt; 6543: (12.3894%)&lt;BR/&gt; 16964: (3.09735%)&lt;BR/&gt; 4813: (3.09735%)&lt;BR/&gt; 4438: (3.09735%)&gt;];
}
750--767[label="1;8pkt 8fpkt"];
750--820[label="1;3pkt 3fpkt"];
750--885[label="1;3pkt 3fpkt"];
750--1081[label="1;2pkt 2fpkt"];
750--2716[label="1;2pkt 2fpkt"];
750--2790[label="1;1pkt 1fpkt"];
750--3061[label="1;8pkt 8fpkt"];
750--3372[label="1;13pkt 13fpkt"];
750--3519[label="1;3pkt 3fpkt"];
750--4502[label="1;17pkt 17fpkt"];
750--6305[label="1;17pkt 17fpkt"];
750--7496[label="1;18pkt 18fpkt"];
767--3061[label="1;8pkt 8fpkt"];
767--3372[label="0.75;6pkt 6fpkt"];
767--4502[label="1;8pkt 8fpkt"];
767--6305[label="1;8pkt 8fpkt"];
767--7496[label="1;8pkt 8fpkt"];
820--2716[label="1;2pkt 2fpkt"];
820--3372[label="0.666667;2pkt 2fpkt"];
820--4502[label="1;3pkt 3fpkt"];
820--6305[label="1;3pkt 3fpkt"];
820--7496[label="1;3pkt 3fpkt"];
885--3372[label="0.333333;1pkt 1fpkt"];
885--3519[label="1;3pkt 3fpkt"];
885--4502[label="1;3pkt 3fpkt"];
885--6305[label="1;3pkt 3fpkt"];
885--7496[label="1;3pkt 3fpkt"];
1081--2790[label="1;1pkt 1fpkt"];
1081--3372[label="1;2pkt 2fpkt"];
1081--4502[label="1;2pkt 2fpkt"];
1081--6305[label="1;2pkt 2fpkt"];
1081--7496[label="1;2pkt 2fpkt"];
2716--3372[label="1;2pkt 2fpkt"];
2716--4502[label="1;2pkt 2fpkt"];
2716--6305[label="1;2pkt 2fpkt"];
2716--7496[label="1;2pkt 2fpkt"];
2790--3372[label="1;1pkt 1fpkt"];
2790--4502[label="1;1pkt 1fpkt"];
2790--6305[label="1;1pkt 1fpkt"];
2790--7496[label="1;1pkt 1fpkt"];
3061--3372[label="0.75;6pkt 6fpkt"];
3061--4502[label="1;8pkt 8fpkt"];
3061--6305[label="1;8pkt 8fpkt"];
3061--7496[label="1;8pkt 8fpkt"];
3372--3519[label="0.333333;1pkt 1fpkt"];
3372--4502[label="0.923077;12pkt 12fpkt"];
3372--6305[label="0.923077;12pkt 12fpkt"];
3372--7496[label="1;13pkt 13fpkt"];
3519--4502[label="1;3pkt 3fpkt"];
3519--6305[label="1;3pkt 3fpkt"];
3519--7496[label="1;3pkt 3fpkt"];
4502--6305[label="1;17pkt 17fpkt"];
4502--7496[label="1;17pkt 17fpkt"];
6305--7496[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="202.8.194.29" src_ip="161.238.59.61"/>
      <filter src_ip="161.238.59.61" src_port="6543"/>
      <filter src_ip="161.238.59.61" src_port="6542"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
586[label="161.238.139.57;s;598pkt 598fpkt", shape=diamond, color=yellow];
832[label="86.28.3.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
920[label="2.180.202.180;d;1pkt 1fpkt", shape=diamond, color=yellow];
1150[label="213.8.121.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
1456[label="81.89.10.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
1524[label="75.194.186.81;d;2pkt 2fpkt", shape=diamond, color=yellow];
2209[label="196.224.97.159;d;1pkt 1fpkt", shape=diamond, color=yellow];
2663[label="161.238.139.57;s;454pkt 454fpkt", shape=hexagon, color=black];
2980[label="75.194.186.81;d;1pkt 1fpkt", shape=hexagon, color=black];
3229[label="81.89.10.214;d;1pkt 1fpkt", shape=hexagon, color=black];
3531[label="2.180.202.180;d;1pkt 1fpkt", shape=hexagon, color=black];
3554[label="196.224.97.159;d;1pkt 1fpkt", shape=hexagon, color=black];
4482[label="161.238.139.57;619pkt 619fpkt", shape=pentagon, color=darkviolet];
6292[label="161.238.139.57;619pkt 619fpkt", shape=invtriangle, color=brown];
7486[label="161.238.139.57;619pkt 619fpkt", shape=invhouse, color=bisque];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.139.57:6257, *:6257}[96.7742%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (96.8322%)&lt;BR/&gt; 6699: (1.33562%)&lt;BR/&gt; 16257: (0.171233%)&lt;BR/&gt; 64891: (0.119863%)&lt;BR/&gt; 4183: (0.119863%)&gt;];
}
586--832[label="1;1pkt 1fpkt"];
586--920[label="1;1pkt 1fpkt"];
586--1150[label="1;1pkt 1fpkt"];
586--1179[label="0.333333;1pkt 1fpkt"];
586--1456[label="1;1pkt 1fpkt"];
586--1469[label="0.5;1pkt 1fpkt"];
586--1524[label="1;2pkt 2fpkt"];
586--2209[label="1;1pkt 1fpkt"];
586--2663[label="1;454pkt 454fpkt"];
586--2980[label="1;1pkt 1fpkt"];
586--3229[label="1;1pkt 1fpkt"];
586--3531[label="1;1pkt 1fpkt"];
586--3554[label="1;1pkt 1fpkt"];
586--3948[label="0.409699;245pkt 245fpkt"];
586--3952[label="0.453177;271pkt 271fpkt"];
586--3961[label="0.409699;245pkt 245fpkt"];
586--3963[label="0.453177;271pkt 271fpkt"];
586--3971[label="0.409699;245pkt 245fpkt"];
586--3973[label="0.453177;271pkt 271fpkt"];
586--4482[label="0.998328;597pkt 597fpkt"];
586--6292[label="0.998328;597pkt 597fpkt"];
586--7486[label="0.998328;597pkt 597fpkt"];
832--2663[label="1;1pkt 1fpkt"];
832--4482[label="1;1pkt 1fpkt"];
832--6292[label="1;1pkt 1fpkt"];
832--7486[label="1;1pkt 1fpkt"];
920--2663[label="1;1pkt 1fpkt"];
920--3531[label="1;1pkt 1fpkt"];
920--4482[label="1;1pkt 1fpkt"];
920--6292[label="1;1pkt 1fpkt"];
920--7486[label="1;1pkt 1fpkt"];
1150--2663[label="1;1pkt 1fpkt"];
1150--4482[label="1;1pkt 1fpkt"];
1150--6292[label="1;1pkt 1fpkt"];
1150--7486[label="1;1pkt 1fpkt"];
1456--2663[label="1;1pkt 1fpkt"];
1456--3229[label="1;1pkt 1fpkt"];
1456--4482[label="1;1pkt 1fpkt"];
1456--6292[label="1;1pkt 1fpkt"];
1456--7486[label="1;1pkt 1fpkt"];
1524--2663[label="0.5;1pkt 1fpkt"];
1524--2980[label="1;1pkt 1fpkt"];
1524--4482[label="1;2pkt 2fpkt"];
1524--6292[label="1;2pkt 2fpkt"];
1524--7486[label="1;2pkt 2fpkt"];
2209--2663[label="1;1pkt 1fpkt"];
2209--3554[label="1;1pkt 1fpkt"];
2209--4482[label="1;1pkt 1fpkt"];
2209--6292[label="1;1pkt 1fpkt"];
2209--7486[label="1;1pkt 1fpkt"];
2663--2980[label="1;1pkt 1fpkt"];
2663--3229[label="1;1pkt 1fpkt"];
2663--3531[label="1;1pkt 1fpkt"];
2663--3554[label="1;1pkt 1fpkt"];
2663--3948[label="0.539648;245pkt 245fpkt"];
2663--3952[label="0.596916;271pkt 271fpkt"];
2663--3961[label="0.539648;245pkt 245fpkt"];
2663--3963[label="0.596916;271pkt 271fpkt"];
2663--3971[label="0.539648;245pkt 245fpkt"];
2663--3973[label="0.596916;271pkt 271fpkt"];
2663--4482[label="0.997797;453pkt 453fpkt"];
2663--6292[label="0.997797;453pkt 453fpkt"];
2663--7486[label="0.997797;453pkt 453fpkt"];
2980--4482[label="1;1pkt 1fpkt"];
2980--6292[label="1;1pkt 1fpkt"];
2980--7486[label="1;1pkt 1fpkt"];
3229--4482[label="1;1pkt 1fpkt"];
3229--6292[label="1;1pkt 1fpkt"];
3229--7486[label="1;1pkt 1fpkt"];
3531--4482[label="1;1pkt 1fpkt"];
3531--6292[label="1;1pkt 1fpkt"];
3531--7486[label="1;1pkt 1fpkt"];
3554--4482[label="1;1pkt 1fpkt"];
3554--6292[label="1;1pkt 1fpkt"];
3554--7486[label="1;1pkt 1fpkt"];
4482--6292[label="1;619pkt 619fpkt"];
4482--7486[label="1;619pkt 619fpkt"];
6292--7486[label="1;619pkt 619fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="161.238.139.57" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987269,2.08385,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
126[label="167.8.90.211s;1pkt 1fpkt", shape=rectangle, color=red];
721[label="202.8.169.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
838[label="86.89.163.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
893[label="197.193.163.67;d;1pkt 1fpkt", shape=diamond, color=yellow];
923[label="75.210.95.145;d;1pkt 1fpkt", shape=diamond, color=yellow];
1072[label="167.8.90.211;s;12pkt 12fpkt", shape=diamond, color=yellow];
1966[label="43.60.101.201;d;1pkt 1fpkt", shape=diamond, color=yellow];
2006[label="43.180.236.106;d;1pkt 1fpkt", shape=diamond, color=yellow];
3271[label="43.60.101.201;d;1pkt 1fpkt", shape=hexagon, color=black];
3370[label="202.8.169.146;d;1pkt 1fpkt", shape=hexagon, color=black];
3383[label="86.89.163.12;d;1pkt 1fpkt", shape=hexagon, color=black];
5674[label="167.8.90.211;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7092[label="167.8.90.211;11pkt 11fpkt", shape=invtriangle, color=brown];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.90.211:*, *:6699}[58.3333%]&lt;BR/&gt;{167.8.90.211:6699, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (46.6667%)&lt;BR/&gt; 1927: (6.66667%)&lt;BR/&gt; 3026: (5.55556%)&lt;BR/&gt; 1962: (5.55556%)&lt;BR/&gt; 15471: (4.44444%)&gt;];
}
126--442[label="1;1pkt 1fpkt"];
126--544[label="1;1pkt 1fpkt"];
126--838[label="1;1pkt 1fpkt"];
126--1072[label="1;1pkt 1fpkt"];
126--3383[label="1;1pkt 1fpkt"];
126--5674[label="1;1pkt 1fpkt"];
126--7092[label="1;1pkt 1fpkt"];
721--1072[label="1;1pkt 1fpkt"];
721--3370[label="1;1pkt 1fpkt"];
721--5674[label="1;1pkt 1fpkt"];
721--7092[label="1;1pkt 1fpkt"];
838--1072[label="1;1pkt 1fpkt"];
838--3383[label="1;1pkt 1fpkt"];
838--5674[label="1;1pkt 1fpkt"];
838--7092[label="1;1pkt 1fpkt"];
893--1072[label="1;1pkt 1fpkt"];
893--5674[label="1;1pkt 1fpkt"];
893--7092[label="1;1pkt 1fpkt"];
923--1072[label="1;1pkt 1fpkt"];
923--5674[label="1;1pkt 1fpkt"];
1072--1966[label="1;1pkt 1fpkt"];
1072--2006[label="1;1pkt 1fpkt"];
1072--2465[label="0.5;1pkt 1fpkt"];
1072--3271[label="1;1pkt 1fpkt"];
1072--3370[label="1;1pkt 1fpkt"];
1072--3383[label="1;1pkt 1fpkt"];
1072--5674[label="1;12pkt 12fpkt"];
1072--7092[label="1;11pkt 11fpkt"];
1966--3271[label="1;1pkt 1fpkt"];
1966--5674[label="1;1pkt 1fpkt"];
1966--7092[label="1;1pkt 1fpkt"];
2006--5674[label="1;1pkt 1fpkt"];
2006--7092[label="1;1pkt 1fpkt"];
3271--5674[label="1;1pkt 1fpkt"];
3271--7092[label="1;1pkt 1fpkt"];
3370--5674[label="1;1pkt 1fpkt"];
3370--7092[label="1;1pkt 1fpkt"];
3383--5674[label="1;1pkt 1fpkt"];
3383--7092[label="1;1pkt 1fpkt"];
5674--7092[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="167.8.90.211" src_port="6699"/>
      <filter dst_port="6699" src_ip="167.8.90.211"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
840[label="141.98.45.139;d;2pkt 2fpkt", shape=diamond, color=yellow];
841[label="196.70.121.152;s;2pkt 2fpkt", shape=diamond, color=yellow];
3081[label="141.98.45.139;d;2pkt 2fpkt", shape=hexagon, color=black];
3919[label="141.98.45.139;d;2pkt 2fpkt", shape=polygon, color=gold];
5236[label="196.70.121.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6799[label="196.70.121.152;2pkt 2fpkt", shape=invtriangle, color=brown];
7796[label="196.70.121.152;2pkt 2fpkt", shape=invhouse, color=bisque];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.70.121.152:7070, 141.98.45.139:54171}[50%]&lt;BR/&gt;{196.70.121.152:57671, 141.98.45.139:6970}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54171: (26.9231%)&lt;BR/&gt; 7070: (26.9231%)&lt;BR/&gt; 57671: (23.0769%)&lt;BR/&gt; 6970: (23.0769%)&gt;];
}
840--841[label="1;2pkt 2fpkt"];
840--3081[label="1;2pkt 2fpkt"];
840--3919[label="1;2pkt 2fpkt"];
840--5236[label="1;1pkt 1fpkt"];
840--6799[label="1;2pkt 2fpkt"];
840--7796[label="1;2pkt 2fpkt"];
841--3081[label="1;2pkt 2fpkt"];
841--3919[label="1;2pkt 2fpkt"];
841--5236[label="1;1pkt 1fpkt"];
841--6799[label="1;2pkt 2fpkt"];
841--7796[label="1;2pkt 2fpkt"];
3081--3919[label="1;2pkt 2fpkt"];
3081--5236[label="1;1pkt 1fpkt"];
3081--6799[label="1;2pkt 2fpkt"];
3081--7796[label="1;2pkt 2fpkt"];
3919--5236[label="1;1pkt 1fpkt"];
3919--6799[label="1;2pkt 2fpkt"];
3919--7796[label="1;2pkt 2fpkt"];
5236--6799[label="1;1pkt 1fpkt"];
5236--7796[label="1;1pkt 1fpkt"];
6799--7796[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.45.139" dst_port="6970" src_ip="196.70.121.152" src_port="57671"/>
      <filter dst_ip="141.98.45.139" dst_port="54171" src_ip="196.70.121.152" src_port="7070"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852182,2.15881,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
853[label="167.8.164.251;d;1pkt 1fpkt", shape=diamond, color=yellow];
856[label="203.200.92.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
2818[label="203.200.92.72;s;1pkt 1fpkt", shape=hexagon, color=black];
6367[label="203.200.92.72;1pkt 1fpkt", shape=invtriangle, color=brown];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.200.92.72:20422, 167.8.164.251:49167}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49167: (50%)&lt;BR/&gt; 20422: (50%)&gt;];
}
853--856[label="1;1pkt 1fpkt"];
853--2818[label="1;1pkt 1fpkt"];
853--6367[label="1;1pkt 1fpkt"];
856--2818[label="1;1pkt 1fpkt"];
856--6367[label="1;1pkt 1fpkt"];
2818--6367[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.164.251" dst_port="49167" src_ip="203.200.92.72" src_port="20422"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989075,2.1681,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
127[label="200.95.127.214s;1pkt 1fpkt", shape=rectangle, color=red];
867[label="200.95.127.214;s;1pkt 1fpkt", shape=diamond, color=yellow];
2822[label="200.95.127.214;s;1pkt 1fpkt", shape=hexagon, color=black];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.95.127.214:2047, 161.238.139.57:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2047: (50%)&gt;];
}
127--442[label="1;1pkt 1fpkt"];
127--544[label="1;1pkt 1fpkt"];
127--585[label="1;1pkt 1fpkt"];
127--867[label="1;1pkt 1fpkt"];
127--2822[label="1;1pkt 1fpkt"];
867--2822[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.139.57" dst_port="6699" src_ip="200.95.127.214" src_port="2047"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
880[label="212.85.73.149;d;16pkt 16fpkt", shape=diamond, color=yellow];
1793[label="136.230.111.45;s;253pkt 253fpkt", shape=diamond, color=yellow];
3241[label="212.85.73.149;d;16pkt 16fpkt", shape=hexagon, color=black];
3294[label="136.230.111.45;s;193pkt 193fpkt", shape=hexagon, color=black];
4380[label="136.230.111.45;253pkt 253fpkt", shape=pentagon, color=darkviolet];
6224[label="136.230.111.45;252pkt 252fpkt", shape=invtriangle, color=brown];
7442[label="136.230.111.45;253pkt 253fpkt", shape=invhouse, color=bisque];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.111.45:*, *:25}[84.1509%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.4579%)&lt;BR/&gt; 113: (5.54207%)&lt;BR/&gt; 3646: (0.404531%)&lt;BR/&gt; 4126: (0.283172%)&lt;BR/&gt; 4015: (0.283172%)&gt;];
}
880--881[label="0.75;12pkt 12fpkt"];
880--1793[label="0.25;4pkt 4fpkt"];
880--3241[label="1;16pkt 16fpkt"];
880--3294[label="0.25;4pkt 4fpkt"];
880--4380[label="0.25;4pkt 4fpkt"];
880--5673[label="0.75;12pkt 12fpkt"];
880--6224[label="0.25;4pkt 4fpkt"];
880--7442[label="0.25;4pkt 4fpkt"];
1793--3241[label="0.25;4pkt 4fpkt"];
1793--3294[label="1;193pkt 193fpkt"];
1793--4380[label="1;253pkt 253fpkt"];
1793--6224[label="1;252pkt 252fpkt"];
1793--7442[label="1;253pkt 253fpkt"];
3241--3294[label="0.25;4pkt 4fpkt"];
3241--4380[label="0.25;4pkt 4fpkt"];
3241--5673[label="0.75;12pkt 12fpkt"];
3241--6224[label="0.25;4pkt 4fpkt"];
3241--7442[label="0.25;4pkt 4fpkt"];
3294--4380[label="1;193pkt 193fpkt"];
3294--6224[label="0.994819;192pkt 192fpkt"];
3294--7442[label="1;193pkt 193fpkt"];
4380--6224[label="1;252pkt 252fpkt"];
4380--7442[label="1;253pkt 253fpkt"];
6224--7442[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="136.230.111.45"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956891,2.11535,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
111[label="212.24.19.184s;1pkt 1fpkt", shape=rectangle, color=red];
884[label="212.24.19.184;s;361pkt 361fpkt", shape=diamond, color=yellow];
1188[label="213.9.49.250;d;1pkt 1fpkt", shape=diamond, color=yellow];
1630[label="214.67.126.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
2732[label="212.24.19.184;s;119pkt 119fpkt", shape=hexagon, color=black];
3455[label="214.67.126.104;d;1pkt 1fpkt", shape=hexagon, color=black];
5482[label="212.24.19.184;385pkt 385fpkt", shape=pentagon, color=darkviolet];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.19.184:*, *:8888}[41.4508%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (21.1162%)&lt;BR/&gt; 7777: (4.54545%)&lt;BR/&gt; 6677: (3.62486%)&lt;BR/&gt; 8875: (3.33717%)&lt;BR/&gt; 8899: (2.99194%)&gt;];
}
111--442[label="1;1pkt 1fpkt"];
111--544[label="1;1pkt 1fpkt"];
111--884[label="1;1pkt 1fpkt"];
111--1188[label="1;1pkt 1fpkt"];
111--2732[label="1;1pkt 1fpkt"];
111--5482[label="1;1pkt 1fpkt"];
884--1188[label="1;1pkt 1fpkt"];
884--1630[label="1;1pkt 1fpkt"];
884--2732[label="1;119pkt 119fpkt"];
884--3455[label="1;1pkt 1fpkt"];
884--5482[label="0.99723;360pkt 360fpkt"];
1188--2732[label="1;1pkt 1fpkt"];
1188--5482[label="1;1pkt 1fpkt"];
1630--2732[label="1;1pkt 1fpkt"];
1630--3455[label="1;1pkt 1fpkt"];
1630--5482[label="1;1pkt 1fpkt"];
2732--3455[label="1;1pkt 1fpkt"];
2732--5482[label="0.991597;118pkt 118fpkt"];
3455--5482[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="212.24.19.184"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956891,2.11535,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
72[label="201.96.174.102s;1pkt 1fpkt", shape=rectangle, color=red];
900[label="201.96.174.102;s;2pkt 2fpkt", shape=diamond, color=yellow];
2734[label="201.96.174.102;s;2pkt 2fpkt", shape=hexagon, color=black];
4858[label="201.96.174.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.96.174.102:4564, 161.238.39.74:3157}[50%]&lt;BR/&gt;{201.96.174.102:4564, 212.24.6.216:1740}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4564: (50%)&lt;BR/&gt; 3157: (25%)&lt;BR/&gt; 1740: (25%)&gt;];
}
72--599[label="1;1pkt 1fpkt"];
72--900[label="1;1pkt 1fpkt"];
72--2734[label="1;1pkt 1fpkt"];
900--2211[label="0.5;1pkt 1fpkt"];
900--2734[label="1;2pkt 2fpkt"];
900--3423[label="0.5;1pkt 1fpkt"];
900--4858[label="1;1pkt 1fpkt"];
2734--3423[label="0.5;1pkt 1fpkt"];
2734--4858[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.6.216" dst_port="1740" src_ip="201.96.174.102" src_port="4564"/>
      <filter dst_ip="161.238.39.74" dst_port="3157" src_ip="201.96.174.102" src_port="4564"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.96361,2.07354,999,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
139[label="161.238.1.229s;4pkt 4fpkt", shape=rectangle, color=red];
752[label="84.102.234.190;d;44pkt 44fpkt", shape=diamond, color=yellow];
910[label="161.238.1.229;s;45pkt 45fpkt", shape=diamond, color=yellow];
4100[label="212.18.73.13;50pkt 50fpkt", shape=pentagon, color=darkviolet];
5322[label="161.238.40.164;26pkt 26fpkt", shape=pentagon, color=darkviolet];
5786[label="161.238.1.229;53pkt 53fpkt", shape=pentagon, color=darkviolet];
6034[label="212.18.73.13;50pkt 50fpkt", shape=invtriangle, color=brown];
6860[label="161.238.40.164;26pkt 26fpkt", shape=invtriangle, color=brown];
7165[label="161.238.1.229;53pkt 53fpkt", shape=invtriangle, color=brown];
7840[label="161.238.40.164;26pkt 26fpkt", shape=invhouse, color=bisque];
8025[label="161.238.1.229;53pkt 53fpkt", shape=invhouse, color=bisque];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.18.73.13:*, *:*}[30.6748%]&lt;BR/&gt;{*:*, 84.102.234.190:25}[26.9939%]&lt;BR/&gt;{161.238.1.229:*, *:25}[23.9264%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.1628%)&lt;BR/&gt; 80: (4.65116%)&lt;BR/&gt; 113: (3.72093%)&lt;BR/&gt; 58428: (0.697674%)&lt;BR/&gt; 58103: (0.697674%)&gt;];
}
139--752[label="1;4pkt 4fpkt"];
139--910[label="1;4pkt 4fpkt"];
139--5786[label="1;4pkt 4fpkt"];
139--7165[label="1;4pkt 4fpkt"];
139--8025[label="1;4pkt 4fpkt"];
752--910[label="0.181818;8pkt 8fpkt"];
752--971[label="0.0952381;2pkt 2fpkt"];
752--1302[label="0.0909091;4pkt 4fpkt"];
752--1448[label="0.0227273;1pkt 1fpkt"];
752--1475[label="0.113636;5pkt 5fpkt"];
752--1755[label="0.0909091;4pkt 4fpkt"];
752--1827[label="0.0681818;3pkt 3fpkt"];
752--1915[label="0.0227273;1pkt 1fpkt"];
752--2350[label="0.0714286;2pkt 2fpkt"];
752--2941[label="0.0227273;1pkt 1fpkt"];
752--3141[label="0.111111;2pkt 2fpkt"];
752--3158[label="0.0681818;3pkt 3fpkt"];
752--3239[label="0.113636;5pkt 5fpkt"];
752--3408[label="0.0909091;4pkt 4fpkt"];
752--3488[label="0.0714286;2pkt 2fpkt"];
752--3842[label="0.111111;2pkt 2fpkt"];
752--3858[label="0.0681818;3pkt 3fpkt"];
752--3880[label="0.0909091;4pkt 4fpkt"];
752--3898[label="0.117647;2pkt 2fpkt"];
752--4100[label="0.0454545;2pkt 2fpkt"];
752--4411[label="0.113636;5pkt 5fpkt"];
752--4476[label="0.0681818;3pkt 3fpkt"];
752--5153[label="0.0227273;1pkt 1fpkt"];
752--5314[label="0.1;2pkt 2fpkt"];
752--5322[label="0.0384615;1pkt 1fpkt"];
752--5510[label="0.0666667;2pkt 2fpkt"];
752--5786[label="0.181818;8pkt 8fpkt"];
752--6034[label="0.0454545;2pkt 2fpkt"];
752--6287[label="0.0681818;3pkt 3fpkt"];
752--6742[label="0.0227273;1pkt 1fpkt"];
752--6854[label="0.1;2pkt 2fpkt"];
752--6860[label="0.0384615;1pkt 1fpkt"];
752--6977[label="0.0645161;2pkt 2fpkt"];
752--7165[label="0.181818;8pkt 8fpkt"];
752--7759[label="0.0227273;1pkt 1fpkt"];
752--7834[label="0.1;2pkt 2fpkt"];
752--7840[label="0.0384615;1pkt 1fpkt"];
752--7905[label="0.0645161;2pkt 2fpkt"];
752--8025[label="0.181818;8pkt 8fpkt"];
910--1976[label="0.0222222;1pkt 1fpkt"];
910--5786[label="0.977778;44pkt 44fpkt"];
910--7165[label="0.977778;44pkt 44fpkt"];
910--8025[label="0.977778;44pkt 44fpkt"];
4100--6034[label="1;50pkt 50fpkt"];
5322--6860[label="1;26pkt 26fpkt"];
5322--7840[label="1;26pkt 26fpkt"];
5786--7165[label="1;53pkt 53fpkt"];
5786--8025[label="1;53pkt 53fpkt"];
6860--7840[label="1;26pkt 26fpkt"];
7165--8025[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter src_ip="212.18.73.13"/>
      <filter dst_port="25" src_ip="161.238.1.229"/>
      <filter dst_ip="84.102.234.190" dst_port="25"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
941[label="211.168.181.48;s;1pkt 1fpkt", shape=diamond, color=yellow];
942[label="167.8.90.147;d;4pkt 4fpkt", shape=diamond, color=yellow];
2853[label="211.168.181.48;s;1pkt 1fpkt", shape=hexagon, color=black];
2854[label="167.8.90.147;d;2pkt 2fpkt", shape=hexagon, color=black];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.118.232.16:7950, 167.8.90.147:1047}[25%]&lt;BR/&gt;{211.168.181.48:6699, 167.8.90.147:1046}[25%]&lt;BR/&gt;{75.133.156.139:6699, 167.8.90.147:1048}[25%]&lt;BR/&gt;{43.160.8.160:6699, 167.8.90.147:1036}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (43.75%)&lt;BR/&gt; 1046: (25%)&lt;BR/&gt; 1036: (12.5%)&lt;BR/&gt; 7950: (6.25%)&lt;BR/&gt; 1048: (6.25%)&gt;];
}
941--942[label="1;1pkt 1fpkt"];
941--2853[label="1;1pkt 1fpkt"];
941--2854[label="1;1pkt 1fpkt"];
942--2853[label="1;1pkt 1fpkt"];
942--2854[label="1;2pkt 2fpkt"];
2853--2854[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.90.147" dst_port="1036" src_ip="43.160.8.160" src_port="6699"/>
      <filter dst_ip="167.8.90.147" dst_port="1048" src_ip="75.133.156.139" src_port="6699"/>
      <filter dst_ip="167.8.90.147" dst_port="1046" src_ip="211.168.181.48" src_port="6699"/>
      <filter dst_ip="167.8.90.147" dst_port="1047" src_ip="86.118.232.16" src_port="7950"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
10[label="185.191.228.17s;1pkt 1fpkt", shape=rectangle, color=red];
764[label="185.191.228.17;s;326pkt 326fpkt", shape=diamond, color=yellow];
997[label="195.193.8.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
1121[label="87.100.18.112;d;2pkt 2fpkt", shape=diamond, color=yellow];
1129[label="58.148.54.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
1430[label="81.89.76.250;d;1pkt 1fpkt", shape=diamond, color=yellow];
1443[label="43.128.126.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
1490[label="43.146.116.100;d;1pkt 1fpkt", shape=diamond, color=yellow];
2253[label="214.73.13.68;d;1pkt 1fpkt", shape=diamond, color=yellow];
3215[label="185.191.228.17;s;262pkt 262fpkt", shape=hexagon, color=black];
3223[label="58.148.54.15;d;1pkt 1fpkt", shape=hexagon, color=black];
3524[label="43.146.116.100;d;1pkt 1fpkt", shape=hexagon, color=black];
3579[label="214.73.13.68;d;1pkt 1fpkt", shape=hexagon, color=black];
4130[label="185.191.228.17;342pkt 342fpkt", shape=pentagon, color=darkviolet];
6055[label="185.191.228.17;342pkt 342fpkt", shape=invtriangle, color=brown];
7337[label="185.191.228.17;343pkt 343fpkt", shape=invhouse, color=bisque];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.228.17:6257, *:6257}[95.6395%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (95.5132%)&lt;BR/&gt; 6699: (1.93608%)&lt;BR/&gt; 4978: (0.21512%)&lt;BR/&gt; 2759: (0.21512%)&lt;BR/&gt; 1688: (0.21512%)&gt;];
}
10--764[label="1;1pkt 1fpkt"];
10--997[label="1;1pkt 1fpkt"];
10--3215[label="1;1pkt 1fpkt"];
10--4130[label="1;1pkt 1fpkt"];
10--6055[label="1;1pkt 1fpkt"];
10--7337[label="1;1pkt 1fpkt"];
764--997[label="1;1pkt 1fpkt"];
764--1121[label="0.5;1pkt 1fpkt"];
764--1129[label="1;1pkt 1fpkt"];
764--1195[label="0.5;1pkt 1fpkt"];
764--1430[label="1;1pkt 1fpkt"];
764--1443[label="1;1pkt 1fpkt"];
764--1490[label="1;1pkt 1fpkt"];
764--2253[label="1;1pkt 1fpkt"];
764--3215[label="1;262pkt 262fpkt"];
764--3223[label="1;1pkt 1fpkt"];
764--3524[label="1;1pkt 1fpkt"];
764--3579[label="1;1pkt 1fpkt"];
764--3948[label="0.325153;106pkt 106fpkt"];
764--3952[label="0.423313;138pkt 138fpkt"];
764--3961[label="0.325153;106pkt 106fpkt"];
764--3963[label="0.423313;138pkt 138fpkt"];
764--3971[label="0.325153;106pkt 106fpkt"];
764--3973[label="0.423313;138pkt 138fpkt"];
764--4130[label="0.996933;325pkt 325fpkt"];
764--6055[label="0.996933;325pkt 325fpkt"];
764--7337[label="1;326pkt 326fpkt"];
997--3215[label="1;1pkt 1fpkt"];
997--4130[label="1;1pkt 1fpkt"];
997--6055[label="1;1pkt 1fpkt"];
997--7337[label="1;1pkt 1fpkt"];
1121--3044[label="0.5;1pkt 1fpkt"];
1121--3215[label="0.5;1pkt 1fpkt"];
1121--3952[label="0.5;1pkt 1fpkt"];
1121--3963[label="0.5;1pkt 1fpkt"];
1121--3973[label="0.5;1pkt 1fpkt"];
1121--4130[label="0.5;1pkt 1fpkt"];
1121--4938[label="0.5;1pkt 1fpkt"];
1121--6055[label="0.5;1pkt 1fpkt"];
1121--6584[label="0.5;1pkt 1fpkt"];
1121--7337[label="0.5;1pkt 1fpkt"];
1121--7653[label="0.5;1pkt 1fpkt"];
1129--3215[label="1;1pkt 1fpkt"];
1129--3223[label="1;1pkt 1fpkt"];
1129--4130[label="1;1pkt 1fpkt"];
1129--6055[label="1;1pkt 1fpkt"];
1129--7337[label="1;1pkt 1fpkt"];
1430--3215[label="1;1pkt 1fpkt"];
1430--4130[label="1;1pkt 1fpkt"];
1430--6055[label="1;1pkt 1fpkt"];
1430--7337[label="1;1pkt 1fpkt"];
1443--3215[label="1;1pkt 1fpkt"];
1443--4130[label="1;1pkt 1fpkt"];
1443--6055[label="1;1pkt 1fpkt"];
1443--7337[label="1;1pkt 1fpkt"];
1490--3215[label="1;1pkt 1fpkt"];
1490--3524[label="1;1pkt 1fpkt"];
1490--4130[label="1;1pkt 1fpkt"];
1490--6055[label="1;1pkt 1fpkt"];
1490--7337[label="1;1pkt 1fpkt"];
2253--3215[label="1;1pkt 1fpkt"];
2253--3579[label="1;1pkt 1fpkt"];
2253--4130[label="1;1pkt 1fpkt"];
2253--6055[label="1;1pkt 1fpkt"];
2253--7337[label="1;1pkt 1fpkt"];
3215--3223[label="1;1pkt 1fpkt"];
3215--3524[label="1;1pkt 1fpkt"];
3215--3579[label="1;1pkt 1fpkt"];
3215--3948[label="0.40458;106pkt 106fpkt"];
3215--3952[label="0.526718;138pkt 138fpkt"];
3215--3961[label="0.40458;106pkt 106fpkt"];
3215--3963[label="0.526718;138pkt 138fpkt"];
3215--3971[label="0.40458;106pkt 106fpkt"];
3215--3973[label="0.526718;138pkt 138fpkt"];
3215--4130[label="1;262pkt 262fpkt"];
3215--6055[label="1;262pkt 262fpkt"];
3215--7337[label="1;262pkt 262fpkt"];
3223--4130[label="1;1pkt 1fpkt"];
3223--6055[label="1;1pkt 1fpkt"];
3223--7337[label="1;1pkt 1fpkt"];
3524--4130[label="1;1pkt 1fpkt"];
3524--6055[label="1;1pkt 1fpkt"];
3524--7337[label="1;1pkt 1fpkt"];
3579--4130[label="1;1pkt 1fpkt"];
3579--6055[label="1;1pkt 1fpkt"];
3579--7337[label="1;1pkt 1fpkt"];
4130--6055[label="1;342pkt 342fpkt"];
4130--7337[label="1;342pkt 342fpkt"];
6055--7337[label="1;342pkt 342fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="185.191.228.17" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23331,2.23684,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
831[label="167.8.142.137;d;12pkt 12fpkt", shape=diamond, color=yellow];
1867[label="202.238.228.126;s;1pkt 1fpkt", shape=diamond, color=yellow];
2124[label="204.196.168.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
3352[label="204.196.168.4;s;1pkt 1fpkt", shape=hexagon, color=black];
3875[label="204.196.168.4;s;1pkt 1fpkt", shape=polygon, color=gold];
4021[label="204.196.168.4;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.8.142.137:6699}[41.6667%]&lt;BR/&gt;{*:80, 167.8.142.137:*}[41.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (29.4118%)&lt;BR/&gt; 4134: (14.7059%)&lt;BR/&gt; 80: (14.7059%)&lt;BR/&gt; 54383: (5.88235%)&lt;BR/&gt; 1863: (5.88235%)&gt;];
}
831--1000[label="1;1pkt 1fpkt"];
831--1689[label="0.166667;2pkt 2fpkt"];
831--1782[label="0.166667;2pkt 2fpkt"];
831--1867[label="1;1pkt 1fpkt"];
831--2124[label="1;1pkt 1fpkt"];
831--2719[label="1;2pkt 2fpkt"];
831--3352[label="1;1pkt 1fpkt"];
831--3378[label="0.166667;2pkt 2fpkt"];
831--3875[label="1;1pkt 1fpkt"];
831--4021[label="1;1pkt 1fpkt"];
831--4079[label="0.166667;2pkt 2fpkt"];
831--4804[label="0.166667;2pkt 2fpkt"];
831--6498[label="0.166667;2pkt 2fpkt"];
831--7604[label="0.166667;2pkt 2fpkt"];
2124--3352[label="1;1pkt 1fpkt"];
2124--3875[label="1;1pkt 1fpkt"];
2124--4021[label="1;1pkt 1fpkt"];
3352--3875[label="1;1pkt 1fpkt"];
3352--4021[label="1;1pkt 1fpkt"];
3875--4021[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.142.137" src_port="80"/>
      <filter dst_ip="167.8.142.137" dst_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,504,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
1005[label="141.98.4.22;s;2pkt 2fpkt", shape=diamond, color=yellow];
1006[label="84.29.71.122;d;1pkt 1fpkt", shape=diamond, color=yellow];
3016[label="141.98.4.22;s;2pkt 2fpkt", shape=hexagon, color=black];
4169[label="141.98.4.22;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6086[label="141.98.4.22;2pkt 2fpkt", shape=invtriangle, color=brown];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.4.22:3863, 84.29.71.121:80}[50%]&lt;BR/&gt;{141.98.4.22:3865, 84.29.71.122:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3865: (27.7778%)&lt;BR/&gt; 443: (27.7778%)&lt;BR/&gt; 3863: (22.2222%)&lt;BR/&gt; 80: (22.2222%)&gt;];
}
1005--1006[label="1;1pkt 1fpkt"];
1005--3016[label="1;2pkt 2fpkt"];
1005--4169[label="1;2pkt 2fpkt"];
1005--6086[label="1;2pkt 2fpkt"];
1006--3016[label="1;1pkt 1fpkt"];
1006--4169[label="1;1pkt 1fpkt"];
1006--6086[label="1;1pkt 1fpkt"];
3016--4169[label="1;2pkt 2fpkt"];
3016--6086[label="1;2pkt 2fpkt"];
4169--6086[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="84.29.71.122" dst_port="443" src_ip="141.98.4.22" src_port="3865"/>
      <filter dst_ip="84.29.71.121" dst_port="80" src_ip="141.98.4.22" src_port="3863"/>
    </slice>
    <from sec="1034226070" usec="0"/>
    <to sec="1034226124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35357,2.21616,999,1 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
128[label="185.191.210.214s;2pkt 2fpkt", shape=rectangle, color=red];
638[label="185.191.210.214;s;403pkt 403fpkt", shape=diamond, color=yellow];
1024[label="75.1.24.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
1048[label="86.128.38.214;d;2pkt 2fpkt", shape=diamond, color=yellow];
1132[label="202.227.43.227;d;1pkt 1fpkt", shape=diamond, color=yellow];
1508[label="58.129.38.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
2767[label="185.191.210.214;s;371pkt 371fpkt", shape=hexagon, color=black];
2809[label="202.227.43.227;d;1pkt 1fpkt", shape=hexagon, color=black];
3822[label="185.191.210.214;s;371pkt 371fpkt", shape=polygon, color=gold];
5695[label="185.191.210.214;419pkt 419fpkt", shape=pentagon, color=darkviolet];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.210.214:6257, *:6257}[92.1615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (92.7799%)&lt;BR/&gt; 6699: (1.36768%)&lt;BR/&gt; 7000: (1.08142%)&lt;BR/&gt; 8888: (0.572519%)&lt;BR/&gt; 4448: (0.19084%)&gt;];
}
128--638[label="1;2pkt 2fpkt"];
128--1024[label="1;1pkt 1fpkt"];
128--1048[label="0.5;1pkt 1fpkt"];
128--2767[label="1;2pkt 2fpkt"];
128--3822[label="1;2pkt 2fpkt"];
128--5695[label="1;2pkt 2fpkt"];
638--1024[label="1;1pkt 1fpkt"];
638--1048[label="0.5;1pkt 1fpkt"];
638--1132[label="1;1pkt 1fpkt"];
638--1292[label="0.5;1pkt 1fpkt"];
638--1508[label="1;1pkt 1fpkt"];
638--2767[label="1;371pkt 371fpkt"];
638--2809[label="1;1pkt 1fpkt"];
638--3822[label="1;371pkt 371fpkt"];
638--3948[label="0.28536;115pkt 115fpkt"];
638--3952[label="0.327543;132pkt 132fpkt"];
638--3961[label="0.28536;115pkt 115fpkt"];
638--3963[label="0.327543;132pkt 132fpkt"];
638--3971[label="0.28536;115pkt 115fpkt"];
638--3973[label="0.327543;132pkt 132fpkt"];
638--5695[label="0.997519;402pkt 402fpkt"];
1024--2767[label="1;1pkt 1fpkt"];
1024--3822[label="1;1pkt 1fpkt"];
1024--5695[label="1;1pkt 1fpkt"];
1048--2767[label="0.5;1pkt 1fpkt"];
1048--2901[label="0.5;1pkt 1fpkt"];
1048--3822[label="0.5;1pkt 1fpkt"];
1048--4154[label="0.5;1pkt 1fpkt"];
1048--5695[label="0.5;1pkt 1fpkt"];
1048--6072[label="0.5;1pkt 1fpkt"];
1048--7346[label="0.5;1pkt 1fpkt"];
1132--2767[label="1;1pkt 1fpkt"];
1132--2809[label="1;1pkt 1fpkt"];
1132--3822[label="1;1pkt 1fpkt"];
1132--5695[label="1;1pkt 1fpkt"];
1508--2767[label="1;1pkt 1fpkt"];
1508--3822[label="1;1pkt 1fpkt"];
1508--5695[label="1;1pkt 1fpkt"];
2767--2809[label="1;1pkt 1fpkt"];
2767--3822[label="1;371pkt 371fpkt"];
2767--3948[label="0.309973;115pkt 115fpkt"];
2767--3952[label="0.355795;132pkt 132fpkt"];
2767--3961[label="0.309973;115pkt 115fpkt"];
2767--3963[label="0.355795;132pkt 132fpkt"];
2767--3971[label="0.309973;115pkt 115fpkt"];
2767--3973[label="0.355795;132pkt 132fpkt"];
2767--5695[label="0.997305;370pkt 370fpkt"];
2809--3822[label="1;1pkt 1fpkt"];
2809--5695[label="1;1pkt 1fpkt"];
3822--3948[label="0.309973;115pkt 115fpkt"];
3822--3952[label="0.355795;132pkt 132fpkt"];
3822--3961[label="0.309973;115pkt 115fpkt"];
3822--3963[label="0.355795;132pkt 132fpkt"];
3822--3971[label="0.309973;115pkt 115fpkt"];
3822--3973[label="0.355795;132pkt 132fpkt"];
3822--5695[label="0.997305;370pkt 370fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="185.191.210.214" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
48[label="87.77.130.75s;2pkt 2fpkt", shape=rectangle, color=red];
49[label="43.65.83.77s;2pkt 2fpkt", shape=rectangle, color=red];
597[label="167.8.130.20;d;176pkt 176fpkt", shape=diamond, color=yellow];
609[label="43.9.200.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
1043[label="130.33.94.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
1645[label="75.132.82.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
2329[label="43.65.83.77;s;1pkt 1fpkt", shape=diamond, color=yellow];
2759[label="167.8.130.20;d;176pkt 176fpkt", shape=hexagon, color=black];
2761[label="43.9.200.30;s;1pkt 1fpkt", shape=hexagon, color=black];
4002[label="75.132.82.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4232[label="43.9.200.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4702[label="130.33.94.82;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5391[label="43.167.41.172;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5677[label="43.8.126.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6125[label="43.9.200.30;1pkt 1fpkt", shape=invtriangle, color=brown];
6405[label="43.65.83.77;1pkt 1fpkt", shape=invtriangle, color=brown];
7983[label="43.8.126.211;1pkt 1fpkt", shape=invhouse, color=bisque];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 167.8.130.20:6257}[88.764%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (87.027%)&lt;BR/&gt; 6699: (5.67568%)&lt;BR/&gt; 16257: (0.810811%)&lt;BR/&gt; 1255: (0.810811%)&lt;BR/&gt; 3519: (0.675676%)&gt;];
}
48--597[label="0.5;1pkt 1fpkt"];
48--672[label="1;1pkt 1fpkt"];
48--1043[label="1;1pkt 1fpkt"];
48--1414[label="0.5;1pkt 1fpkt"];
48--2685[label="1;1pkt 1fpkt"];
48--2759[label="0.5;1pkt 1fpkt"];
48--3774[label="1;1pkt 1fpkt"];
48--4637[label="1;1pkt 1fpkt"];
48--4702[label="1;1pkt 1fpkt"];
49--597[label="0.5;1pkt 1fpkt"];
49--842[label="0.5;1pkt 1fpkt"];
49--844[label="1;1pkt 1fpkt"];
49--2329[label="1;1pkt 1fpkt"];
49--2721[label="0.5;1pkt 1fpkt"];
49--2759[label="0.5;1pkt 1fpkt"];
49--2815[label="1;1pkt 1fpkt"];
49--6405[label="1;1pkt 1fpkt"];
597--609[label="1;1pkt 1fpkt"];
597--848[label="1;1pkt 1fpkt"];
597--1043[label="1;1pkt 1fpkt"];
597--1049[label="0.5;1pkt 1fpkt"];
597--1255[label="1;1pkt 1fpkt"];
597--1645[label="1;1pkt 1fpkt"];
597--2329[label="1;1pkt 1fpkt"];
597--2725[label="1;1pkt 1fpkt"];
597--2759[label="1;176pkt 176fpkt"];
597--2761[label="1;1pkt 1fpkt"];
597--2841[label="1;1pkt 1fpkt"];
597--3045[label="0.5;1pkt 1fpkt"];
597--3948[label="0.176136;31pkt 31fpkt"];
597--3952[label="0.176136;31pkt 31fpkt"];
597--3961[label="0.176136;31pkt 31fpkt"];
597--3963[label="0.176136;31pkt 31fpkt"];
597--3971[label="0.176136;31pkt 31fpkt"];
597--3973[label="0.176136;31pkt 31fpkt"];
597--3989[label="1;1pkt 1fpkt"];
597--4002[label="1;1pkt 1fpkt"];
597--4232[label="1;1pkt 1fpkt"];
597--4397[label="1;1pkt 1fpkt"];
597--4702[label="1;1pkt 1fpkt"];
597--5391[label="1;2pkt 2fpkt"];
597--5677[label="1;1pkt 1fpkt"];
597--5687[label="0.5;1pkt 1fpkt"];
597--5951[label="1;1pkt 1fpkt"];
597--6125[label="1;1pkt 1fpkt"];
597--6405[label="1;1pkt 1fpkt"];
597--7101[label="0.5;1pkt 1fpkt"];
597--7272[label="1;1pkt 1fpkt"];
597--7983[label="1;1pkt 1fpkt"];
597--7988[label="0.5;1pkt 1fpkt"];
609--2759[label="1;1pkt 1fpkt"];
609--2761[label="1;1pkt 1fpkt"];
609--4232[label="1;1pkt 1fpkt"];
609--6125[label="1;1pkt 1fpkt"];
1043--2759[label="1;1pkt 1fpkt"];
1043--4702[label="1;1pkt 1fpkt"];
1645--2759[label="1;1pkt 1fpkt"];
1645--4002[label="1;1pkt 1fpkt"];
2329--2759[label="1;1pkt 1fpkt"];
2329--6405[label="1;1pkt 1fpkt"];
2759--2761[label="1;1pkt 1fpkt"];
2759--2841[label="1;1pkt 1fpkt"];
2759--3045[label="0.5;1pkt 1fpkt"];
2759--3948[label="0.176136;31pkt 31fpkt"];
2759--3952[label="0.176136;31pkt 31fpkt"];
2759--3961[label="0.176136;31pkt 31fpkt"];
2759--3963[label="0.176136;31pkt 31fpkt"];
2759--3971[label="0.176136;31pkt 31fpkt"];
2759--3973[label="0.176136;31pkt 31fpkt"];
2759--3989[label="1;1pkt 1fpkt"];
2759--4002[label="1;1pkt 1fpkt"];
2759--4232[label="1;1pkt 1fpkt"];
2759--4397[label="1;1pkt 1fpkt"];
2759--4702[label="1;1pkt 1fpkt"];
2759--5391[label="1;2pkt 2fpkt"];
2759--5677[label="1;1pkt 1fpkt"];
2759--5687[label="0.5;1pkt 1fpkt"];
2759--5951[label="1;1pkt 1fpkt"];
2759--6125[label="1;1pkt 1fpkt"];
2759--6405[label="1;1pkt 1fpkt"];
2759--7101[label="0.5;1pkt 1fpkt"];
2759--7272[label="1;1pkt 1fpkt"];
2759--7983[label="1;1pkt 1fpkt"];
2759--7988[label="0.5;1pkt 1fpkt"];
2761--4232[label="1;1pkt 1fpkt"];
2761--6125[label="1;1pkt 1fpkt"];
4232--6125[label="1;1pkt 1fpkt"];
5677--7983[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.130.20" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35357,2.21616,503,1 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
385[label="196.200.201.249s;1pkt 1fpkt", shape=rectangle, color=red];
1080[label="136.230.121.249;s;70pkt 70fpkt", shape=diamond, color=yellow];
1296[label="173.77.152.214;d;2pkt 2fpkt", shape=diamond, color=yellow];
2855[label="173.77.152.214;d;2pkt 2fpkt", shape=hexagon, color=black];
3797[label="173.77.152.214;d;2pkt 2fpkt", shape=polygon, color=gold];
5922[label="136.230.121.249;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.121.249:80, 212.85.97.89:*}[62.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.2405%)&lt;BR/&gt; 0: (5.06329%)&lt;BR/&gt; 25: (4.43038%)&lt;BR/&gt; 51413: (3.79747%)&lt;BR/&gt; 20: (3.79747%)&gt;];
}
385--1080[label="1;1pkt 1fpkt"];
385--1296[label="1;1pkt 1fpkt"];
385--2855[label="1;1pkt 1fpkt"];
385--3797[label="1;1pkt 1fpkt"];
385--5922[label="1;1pkt 1fpkt"];
1080--1296[label="0.5;1pkt 1fpkt"];
1080--2855[label="0.5;1pkt 1fpkt"];
1080--3797[label="0.5;1pkt 1fpkt"];
1080--3950[label="0.0714286;5pkt 5fpkt"];
1080--5922[label="0.5;1pkt 1fpkt"];
1296--2855[label="1;2pkt 2fpkt"];
1296--3631[label="0.5;1pkt 1fpkt"];
1296--3797[label="1;2pkt 2fpkt"];
1296--3914[label="0.5;1pkt 1fpkt"];
1296--4134[label="0.5;1pkt 1fpkt"];
1296--5922[label="0.5;1pkt 1fpkt"];
1296--6058[label="0.5;1pkt 1fpkt"];
2855--3631[label="0.5;1pkt 1fpkt"];
2855--3797[label="1;2pkt 2fpkt"];
2855--3914[label="0.5;1pkt 1fpkt"];
2855--4134[label="0.5;1pkt 1fpkt"];
2855--5922[label="0.5;1pkt 1fpkt"];
2855--6058[label="0.5;1pkt 1fpkt"];
3797--3914[label="0.5;1pkt 1fpkt"];
3797--4134[label="0.5;1pkt 1fpkt"];
3797--5922[label="0.5;1pkt 1fpkt"];
3797--6058[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.85.97.89" src_ip="136.230.121.249" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
642[label="167.8.140.25;s;380pkt 380fpkt", shape=diamond, color=yellow];
821[label="43.164.153.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
1029[label="197.248.249.231;d;2pkt 2fpkt", shape=diamond, color=yellow];
1065[label="75.194.83.165;d;2pkt 2fpkt", shape=diamond, color=yellow];
1083[label="87.7.22.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
1477[label="75.192.17.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
2465[label="81.176.136.27;d;2pkt 2fpkt", shape=diamond, color=yellow];
2947[label="43.164.153.5;d;1pkt 1fpkt", shape=hexagon, color=black];
3052[label="75.194.83.165;d;1pkt 1fpkt", shape=hexagon, color=black];
3199[label="197.248.249.231;d;2pkt 2fpkt", shape=hexagon, color=black];
4198[label="167.8.140.25;401pkt 401fpkt", shape=pentagon, color=darkviolet];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.140.25:6257, *:6257}[95.5335%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (95.529%)&lt;BR/&gt; 6699: (1.70025%)&lt;BR/&gt; 16257: (0.251889%)&lt;BR/&gt; 3419: (0.251889%)&lt;BR/&gt; 3337: (0.251889%)&gt;];
}
642--821[label="1;1pkt 1fpkt"];
642--1029[label="1;2pkt 2fpkt"];
642--1065[label="1;2pkt 2fpkt"];
642--1083[label="1;1pkt 1fpkt"];
642--1205[label="0.5;1pkt 1fpkt"];
642--1477[label="1;1pkt 1fpkt"];
642--2465[label="0.5;1pkt 1fpkt"];
642--2947[label="1;1pkt 1fpkt"];
642--3052[label="1;1pkt 1fpkt"];
642--3199[label="1;2pkt 2fpkt"];
642--3948[label="0.257895;98pkt 98fpkt"];
642--3952[label="0.271053;103pkt 103fpkt"];
642--3961[label="0.257895;98pkt 98fpkt"];
642--3963[label="0.271053;103pkt 103fpkt"];
642--3971[label="0.257895;98pkt 98fpkt"];
642--3973[label="0.271053;103pkt 103fpkt"];
642--4198[label="0.997368;379pkt 379fpkt"];
821--2947[label="1;1pkt 1fpkt"];
821--4198[label="1;1pkt 1fpkt"];
1029--3199[label="1;2pkt 2fpkt"];
1029--4198[label="1;2pkt 2fpkt"];
1065--3052[label="1;1pkt 1fpkt"];
1065--4198[label="1;2pkt 2fpkt"];
1083--4198[label="1;1pkt 1fpkt"];
1477--4198[label="1;1pkt 1fpkt"];
2465--3952[label="0.5;1pkt 1fpkt"];
2465--3963[label="0.5;1pkt 1fpkt"];
2465--3973[label="0.5;1pkt 1fpkt"];
2465--4198[label="0.5;1pkt 1fpkt"];
2465--5674[label="0.5;1pkt 1fpkt"];
2465--7092[label="0.5;1pkt 1fpkt"];
2947--4198[label="1;1pkt 1fpkt"];
3052--4198[label="1;1pkt 1fpkt"];
3199--4198[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="167.8.140.25" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23331,2.23684,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
781[label="167.164.148.108;s;10pkt 10fpkt", shape=diamond, color=yellow];
1102[label="3.10.156.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
2930[label="167.164.148.108;s;10pkt 10fpkt", shape=hexagon, color=black];
2931[label="3.10.156.167;d;1pkt 1fpkt", shape=hexagon, color=black];
3854[label="3.10.156.167;d;1pkt 1fpkt", shape=polygon, color=gold];
4905[label="167.164.148.108;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.164.148.108:80, 195.104.102.109:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32958: (9.09091%)&lt;BR/&gt; 44750: (4.54545%)&lt;BR/&gt; 44036: (4.54545%)&lt;BR/&gt; 44034: (4.54545%)&gt;];
}
781--1102[label="1;1pkt 1fpkt"];
781--2930[label="1;10pkt 10fpkt"];
781--2931[label="1;1pkt 1fpkt"];
781--3854[label="1;1pkt 1fpkt"];
781--3950[label="0.1;1pkt 1fpkt"];
781--4905[label="1;10pkt 10fpkt"];
1102--2930[label="1;1pkt 1fpkt"];
1102--2931[label="1;1pkt 1fpkt"];
1102--3854[label="1;1pkt 1fpkt"];
1102--3950[label="1;1pkt 1fpkt"];
1102--4905[label="1;1pkt 1fpkt"];
2930--2931[label="1;1pkt 1fpkt"];
2930--3854[label="1;1pkt 1fpkt"];
2930--3950[label="0.1;1pkt 1fpkt"];
2930--4905[label="1;10pkt 10fpkt"];
2931--3854[label="1;1pkt 1fpkt"];
2931--3950[label="1;1pkt 1fpkt"];
2931--4905[label="1;1pkt 1fpkt"];
3854--3950[label="1;1pkt 1fpkt"];
3854--4905[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.104.102.109" src_ip="167.164.148.108" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37522,2.18612,501,1 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
123[label="185.191.229.202s;2pkt 2fpkt", shape=rectangle, color=red];
719[label="209.146.6.220;d;111pkt 111fpkt", shape=diamond, color=yellow];
725[label="185.191.229.202;s;4pkt 4fpkt", shape=diamond, color=yellow];
1104[label="209.146.6.216;d;2pkt 2fpkt", shape=diamond, color=yellow];
2784[label="185.191.229.202;s;4pkt 4fpkt", shape=hexagon, color=black];
3787[label="185.191.229.202;s;4pkt 4fpkt", shape=polygon, color=gold];
5625[label="185.191.229.202;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7054[label="185.191.229.202;4pkt 4fpkt", shape=invtriangle, color=brown];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.18.106.107:*, 209.146.6.220:21}[44.2478%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (23.3333%)&lt;BR/&gt; 20: (5.18519%)&lt;BR/&gt; 26201: (2.59259%)&lt;BR/&gt; 25135: (2.59259%)&lt;BR/&gt; 1110: (2.22222%)&gt;];
}
123--719[label="0.5;1pkt 1fpkt"];
123--725[label="1;2pkt 2fpkt"];
123--1104[label="0.5;1pkt 1fpkt"];
123--2784[label="1;2pkt 2fpkt"];
123--3787[label="1;2pkt 2fpkt"];
123--5625[label="1;2pkt 2fpkt"];
123--7054[label="1;2pkt 2fpkt"];
719--725[label="0.5;2pkt 2fpkt"];
719--786[label="0.00900901;1pkt 1fpkt"];
719--2682[label="0.963964;107pkt 107fpkt"];
719--2710[label="0.00900901;1pkt 1fpkt"];
719--2784[label="0.5;2pkt 2fpkt"];
719--3631[label="0.00900901;1pkt 1fpkt"];
719--3787[label="0.5;2pkt 2fpkt"];
719--3849[label="0.594595;66pkt 66fpkt"];
719--3914[label="0.00900901;1pkt 1fpkt"];
719--3944[label="0.00900901;1pkt 1fpkt"];
719--3957[label="0.00900901;1pkt 1fpkt"];
719--3967[label="0.00900901;1pkt 1fpkt"];
719--4134[label="0.00900901;1pkt 1fpkt"];
719--4280[label="0.00900901;1pkt 1fpkt"];
719--4895[label="0.963964;107pkt 107fpkt"];
719--5625[label="0.5;2pkt 2fpkt"];
719--6058[label="0.00900901;1pkt 1fpkt"];
719--6161[label="0.00900901;1pkt 1fpkt"];
719--7054[label="0.5;2pkt 2fpkt"];
719--7400[label="0.00900901;1pkt 1fpkt"];
725--1104[label="1;2pkt 2fpkt"];
725--2784[label="1;4pkt 4fpkt"];
725--3787[label="1;4pkt 4fpkt"];
725--5625[label="1;4pkt 4fpkt"];
725--7054[label="1;4pkt 4fpkt"];
1104--2784[label="1;2pkt 2fpkt"];
1104--3787[label="1;2pkt 2fpkt"];
1104--5625[label="1;2pkt 2fpkt"];
1104--7054[label="1;2pkt 2fpkt"];
2784--3787[label="1;4pkt 4fpkt"];
2784--5625[label="1;4pkt 4fpkt"];
2784--7054[label="1;4pkt 4fpkt"];
3787--5625[label="1;4pkt 4fpkt"];
3787--7054[label="1;4pkt 4fpkt"];
5625--7054[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.146.6.220" dst_port="21" src_ip="212.18.106.107"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
1141[label="141.98.201.224;d;1pkt 1fpkt", shape=diamond, color=yellow];
1144[label="85.129.155.133;s;1pkt 1fpkt", shape=diamond, color=yellow];
2813[label="141.98.201.224;d;1pkt 1fpkt", shape=hexagon, color=black];
5086[label="85.129.155.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6693[label="85.129.155.133;1pkt 1fpkt", shape=invtriangle, color=brown];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.129.155.133:6080, 141.98.201.224:4861}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6080: (50%)&lt;BR/&gt; 4861: (50%)&gt;];
}
1141--1144[label="1;1pkt 1fpkt"];
1141--2813[label="1;1pkt 1fpkt"];
1141--5086[label="1;1pkt 1fpkt"];
1141--6693[label="1;1pkt 1fpkt"];
1144--2813[label="1;1pkt 1fpkt"];
1144--5086[label="1;1pkt 1fpkt"];
1144--6693[label="1;1pkt 1fpkt"];
2813--5086[label="1;1pkt 1fpkt"];
2813--6693[label="1;1pkt 1fpkt"];
5086--6693[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.201.224" dst_port="4861" src_ip="85.129.155.133" src_port="6080"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
858[label="1.35.33.86;s;3pkt 3fpkt", shape=diamond, color=yellow];
1165[label="212.24.24.192;d;2pkt 2fpkt", shape=diamond, color=yellow];
1166[label="167.8.136.25;d;2pkt 2fpkt", shape=diamond, color=yellow];
2819[label="212.24.24.192;d;1pkt 1fpkt", shape=hexagon, color=black];
2820[label="1.35.33.86;s;3pkt 3fpkt", shape=hexagon, color=black];
4741[label="1.35.33.86;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6457[label="1.35.33.86;2pkt 2fpkt", shape=invtriangle, color=brown];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.34.108.31:1863, 167.8.136.25:1030}[20%]&lt;BR/&gt;{1.35.33.85:5001, 212.24.24.192:1203}[20%]&lt;BR/&gt;{1.35.33.86:5001, 212.24.19.217:1068}[20%]&lt;BR/&gt;{1.35.33.86:5001, 167.8.136.25:1236}[20%]&lt;BR/&gt;{1.35.33.86:5001, 212.24.24.192:1200}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (46.6667%)&lt;BR/&gt; 1200: (20%)&lt;BR/&gt; 1068: (13.3333%)&lt;BR/&gt; 1236: (10%)&lt;BR/&gt; 1863: (3.33333%)&gt;];
}
858--1165[label="0.5;1pkt 1fpkt"];
858--1166[label="0.5;1pkt 1fpkt"];
858--1510[label="0.333333;1pkt 1fpkt"];
858--2819[label="1;1pkt 1fpkt"];
858--2820[label="1;3pkt 3fpkt"];
858--4741[label="1;2pkt 2fpkt"];
858--6457[label="1;2pkt 2fpkt"];
1165--2819[label="1;1pkt 1fpkt"];
1165--2820[label="0.5;1pkt 1fpkt"];
1165--4741[label="0.5;1pkt 1fpkt"];
1165--6457[label="0.5;1pkt 1fpkt"];
1166--2820[label="0.5;1pkt 1fpkt"];
2819--2820[label="1;1pkt 1fpkt"];
2819--4741[label="1;1pkt 1fpkt"];
2819--6457[label="1;1pkt 1fpkt"];
2820--4741[label="1;2pkt 2fpkt"];
2820--6457[label="1;2pkt 2fpkt"];
4741--6457[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.24.192" dst_port="1200" src_ip="1.35.33.86" src_port="5001"/>
      <filter dst_ip="167.8.136.25" dst_port="1236" src_ip="1.35.33.86" src_port="5001"/>
      <filter dst_ip="212.24.19.217" dst_port="1068" src_ip="1.35.33.86" src_port="5001"/>
      <filter dst_ip="212.24.24.192" dst_port="1203" src_ip="1.35.33.85" src_port="5001"/>
      <filter dst_ip="167.8.136.25" dst_port="1030" src_ip="85.34.108.31" src_port="1863"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,999,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
117[label="167.8.144.191s;4pkt 4fpkt", shape=rectangle, color=red];
681[label="167.8.144.191;s;9pkt 9fpkt", shape=diamond, color=yellow];
1046[label="86.89.159.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
1179[label="53.49.112.50;d;3pkt 3fpkt", shape=diamond, color=yellow];
1215[label="84.37.187.122;d;1pkt 1fpkt", shape=diamond, color=yellow];
1259[label="75.4.161.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
1271[label="58.150.79.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
1859[label="202.174.213.191;d;2pkt 2fpkt", shape=diamond, color=yellow];
2689[label="167.8.144.191;s;5pkt 5fpkt", shape=hexagon, color=black];
2842[label="75.4.161.214;d;1pkt 1fpkt", shape=hexagon, color=black];
2975[label="58.150.79.165;d;1pkt 1fpkt", shape=hexagon, color=black];
3393[label="84.37.187.122;d;1pkt 1fpkt", shape=hexagon, color=black];
3496[label="86.89.159.196;d;1pkt 1fpkt", shape=hexagon, color=black];
3862[label="58.150.79.165;d;1pkt 1fpkt", shape=polygon, color=gold];
5536[label="167.8.144.191;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6997[label="167.8.144.191;8pkt 8fpkt", shape=invtriangle, color=brown];
7922[label="167.8.144.191;8pkt 8fpkt", shape=invhouse, color=bisque];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.144.191:*, *:6699}[45.4545%]&lt;BR/&gt;{*:6257, *:6257}[36.3636%]&lt;BR/&gt;{*:*, 53.49.112.50:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (42.8571%)&lt;BR/&gt; 6257: (14.2857%)&lt;BR/&gt; 1049: (10.7143%)&lt;BR/&gt; 1451: (7.14286%)&lt;BR/&gt; 1446: (7.14286%)&gt;];
}
117--442[label="1;4pkt 4fpkt"];
117--544[label="1;4pkt 4fpkt"];
117--681[label="1;4pkt 4fpkt"];
117--1046[label="1;1pkt 1fpkt"];
117--1179[label="0.333333;1pkt 1fpkt"];
117--1215[label="1;1pkt 1fpkt"];
117--1259[label="1;1pkt 1fpkt"];
117--2689[label="1;4pkt 4fpkt"];
117--2842[label="1;1pkt 1fpkt"];
117--3393[label="1;1pkt 1fpkt"];
117--3496[label="1;1pkt 1fpkt"];
117--5536[label="1;4pkt 4fpkt"];
117--6997[label="1;4pkt 4fpkt"];
117--7922[label="1;4pkt 4fpkt"];
681--1046[label="1;1pkt 1fpkt"];
681--1179[label="0.333333;1pkt 1fpkt"];
681--1215[label="1;1pkt 1fpkt"];
681--1259[label="1;1pkt 1fpkt"];
681--1271[label="1;1pkt 1fpkt"];
681--1859[label="1;2pkt 2fpkt"];
681--2689[label="1;5pkt 5fpkt"];
681--2842[label="1;1pkt 1fpkt"];
681--2975[label="1;1pkt 1fpkt"];
681--3393[label="1;1pkt 1fpkt"];
681--3496[label="1;1pkt 1fpkt"];
681--3862[label="1;1pkt 1fpkt"];
681--3952[label="0.111111;1pkt 1fpkt"];
681--3963[label="0.111111;1pkt 1fpkt"];
681--3973[label="0.111111;1pkt 1fpkt"];
681--5536[label="1;8pkt 8fpkt"];
681--6997[label="1;8pkt 8fpkt"];
681--7922[label="1;8pkt 8fpkt"];
1046--2689[label="1;1pkt 1fpkt"];
1046--3496[label="1;1pkt 1fpkt"];
1046--5536[label="1;1pkt 1fpkt"];
1046--6997[label="1;1pkt 1fpkt"];
1046--7922[label="1;1pkt 1fpkt"];
1179--2663[label="0.333333;1pkt 1fpkt"];
1179--2689[label="0.333333;1pkt 1fpkt"];
1179--2695[label="0.333333;1pkt 1fpkt"];
1179--4482[label="0.333333;1pkt 1fpkt"];
1179--5536[label="0.333333;1pkt 1fpkt"];
1179--5612[label="0.333333;1pkt 1fpkt"];
1179--6292[label="0.333333;1pkt 1fpkt"];
1179--6997[label="0.333333;1pkt 1fpkt"];
1179--7044[label="0.333333;1pkt 1fpkt"];
1179--7486[label="0.333333;1pkt 1fpkt"];
1179--7922[label="0.333333;1pkt 1fpkt"];
1179--7954[label="0.333333;1pkt 1fpkt"];
1215--2689[label="1;1pkt 1fpkt"];
1215--3393[label="1;1pkt 1fpkt"];
1215--5536[label="1;1pkt 1fpkt"];
1215--6997[label="1;1pkt 1fpkt"];
1215--7922[label="1;1pkt 1fpkt"];
1259--2689[label="1;1pkt 1fpkt"];
1259--2842[label="1;1pkt 1fpkt"];
1259--5536[label="1;1pkt 1fpkt"];
1259--6997[label="1;1pkt 1fpkt"];
1259--7922[label="1;1pkt 1fpkt"];
1271--2689[label="1;1pkt 1fpkt"];
1271--2975[label="1;1pkt 1fpkt"];
1271--3862[label="1;1pkt 1fpkt"];
1271--5536[label="1;1pkt 1fpkt"];
1271--6997[label="1;1pkt 1fpkt"];
1271--7922[label="1;1pkt 1fpkt"];
1859--3952[label="0.5;1pkt 1fpkt"];
1859--3963[label="0.5;1pkt 1fpkt"];
1859--3973[label="0.5;1pkt 1fpkt"];
1859--5536[label="1;2pkt 2fpkt"];
1859--6997[label="1;2pkt 2fpkt"];
1859--7922[label="1;2pkt 2fpkt"];
2689--2842[label="1;1pkt 1fpkt"];
2689--2975[label="1;1pkt 1fpkt"];
2689--3393[label="1;1pkt 1fpkt"];
2689--3496[label="1;1pkt 1fpkt"];
2689--3862[label="1;1pkt 1fpkt"];
2689--5536[label="1;5pkt 5fpkt"];
2689--6997[label="1;5pkt 5fpkt"];
2689--7922[label="1;5pkt 5fpkt"];
2842--5536[label="1;1pkt 1fpkt"];
2842--6997[label="1;1pkt 1fpkt"];
2842--7922[label="1;1pkt 1fpkt"];
2975--3862[label="1;1pkt 1fpkt"];
2975--5536[label="1;1pkt 1fpkt"];
2975--6997[label="1;1pkt 1fpkt"];
2975--7922[label="1;1pkt 1fpkt"];
3393--5536[label="1;1pkt 1fpkt"];
3393--6997[label="1;1pkt 1fpkt"];
3393--7922[label="1;1pkt 1fpkt"];
3496--5536[label="1;1pkt 1fpkt"];
3496--6997[label="1;1pkt 1fpkt"];
3496--7922[label="1;1pkt 1fpkt"];
3862--5536[label="1;1pkt 1fpkt"];
3862--6997[label="1;1pkt 1fpkt"];
3862--7922[label="1;1pkt 1fpkt"];
5536--6997[label="1;8pkt 8fpkt"];
5536--7922[label="1;8pkt 8fpkt"];
6997--7922[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="53.49.112.50"/>
      <filter dst_port="6699" src_ip="167.8.144.191"/>
      <filter dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
583[label="185.191.187.231;d;140pkt 140fpkt", shape=diamond, color=yellow];
1035[label="3.166.191.239;s;1pkt 1fpkt", shape=diamond, color=yellow];
1085[label="3.167.123.152;s;1pkt 1fpkt", shape=diamond, color=yellow];
1185[label="197.200.45.24;s;1pkt 1fpkt", shape=diamond, color=yellow];
1241[label="202.33.154.165;s;1pkt 1fpkt", shape=diamond, color=yellow];
1681[label="197.200.74.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
2037[label="202.33.199.241;s;2pkt 2fpkt", shape=diamond, color=yellow];
2105[label="197.73.159.229;s;1pkt 1fpkt", shape=diamond, color=yellow];
2317[label="1.21.37.94;s;1pkt 1fpkt", shape=diamond, color=yellow];
2899[label="185.191.187.231;d;102pkt 102fpkt", shape=hexagon, color=black];
2923[label="3.167.123.152;s;1pkt 1fpkt", shape=hexagon, color=black];
3053[label="197.200.74.135;s;1pkt 1fpkt", shape=hexagon, color=black];
3309[label="202.33.199.241;s;2pkt 2fpkt", shape=hexagon, color=black];
3347[label="197.73.159.229;s;1pkt 1fpkt", shape=hexagon, color=black];
3478[label="1.21.37.94;s;1pkt 1fpkt", shape=hexagon, color=black];
4864[label="3.166.192.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5521[label="3.167.23.190;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5852[label="3.166.191.239;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5866[label="202.33.199.241;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5875[label="1.194.153.243;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6537[label="3.166.192.103;1pkt 1fpkt", shape=invtriangle, color=brown];
6985[label="3.167.23.190;1pkt 1fpkt", shape=invtriangle, color=brown];
7214[label="3.166.191.239;2pkt 2fpkt", shape=invtriangle, color=brown];
7228[label="1.194.153.243;1pkt 1fpkt", shape=invtriangle, color=brown];
7911[label="3.167.23.190;1pkt 1fpkt", shape=invhouse, color=bisque];
8063[label="3.166.191.239;2pkt 2fpkt", shape=invhouse, color=bisque];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 185.191.187.231:*}[58.8652%]&lt;BR/&gt;{*:*, 185.191.187.231:4662}[26.9504%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (43.2234%)&lt;BR/&gt; 0: (4.7619%)&lt;BR/&gt; 4927: (3.2967%)&lt;BR/&gt; 4665: (2.9304%)&lt;BR/&gt; 2238: (1.0989%)&gt;];
}
583--1035[label="1;1pkt 1fpkt"];
583--1085[label="1;1pkt 1fpkt"];
583--1185[label="1;1pkt 1fpkt"];
583--1241[label="1;1pkt 1fpkt"];
583--1681[label="1;1pkt 1fpkt"];
583--2037[label="1;2pkt 2fpkt"];
583--2105[label="1;1pkt 1fpkt"];
583--2252[label="1;3pkt 3fpkt"];
583--2317[label="1;1pkt 1fpkt"];
583--2899[label="1;102pkt 102fpkt"];
583--2923[label="1;1pkt 1fpkt"];
583--3053[label="1;1pkt 1fpkt"];
583--3309[label="1;2pkt 2fpkt"];
583--3347[label="1;1pkt 1fpkt"];
583--3478[label="1;1pkt 1fpkt"];
583--3578[label="1;3pkt 3fpkt"];
583--4864[label="1;1pkt 1fpkt"];
583--5229[label="1;2pkt 2fpkt"];
583--5521[label="1;1pkt 1fpkt"];
583--5852[label="1;2pkt 2fpkt"];
583--5866[label="0.666667;2pkt 2fpkt"];
583--5875[label="1;1pkt 1fpkt"];
583--6537[label="1;1pkt 1fpkt"];
583--6793[label="1;3pkt 3fpkt"];
583--6985[label="1;1pkt 1fpkt"];
583--7214[label="1;2pkt 2fpkt"];
583--7228[label="1;1pkt 1fpkt"];
583--7791[label="1;2pkt 2fpkt"];
583--7911[label="1;1pkt 1fpkt"];
583--8063[label="1;2pkt 2fpkt"];
1035--2899[label="1;1pkt 1fpkt"];
1035--5852[label="1;1pkt 1fpkt"];
1035--7214[label="1;1pkt 1fpkt"];
1035--8063[label="1;1pkt 1fpkt"];
1085--2899[label="1;1pkt 1fpkt"];
1085--2923[label="1;1pkt 1fpkt"];
1185--2899[label="1;1pkt 1fpkt"];
1241--2899[label="1;1pkt 1fpkt"];
1681--2899[label="1;1pkt 1fpkt"];
1681--3053[label="1;1pkt 1fpkt"];
2037--2899[label="1;2pkt 2fpkt"];
2037--3309[label="1;2pkt 2fpkt"];
2037--5866[label="1;2pkt 2fpkt"];
2105--2899[label="1;1pkt 1fpkt"];
2105--3347[label="1;1pkt 1fpkt"];
2317--2899[label="1;1pkt 1fpkt"];
2317--3478[label="1;1pkt 1fpkt"];
2899--2923[label="1;1pkt 1fpkt"];
2899--3053[label="1;1pkt 1fpkt"];
2899--3309[label="1;2pkt 2fpkt"];
2899--3347[label="1;1pkt 1fpkt"];
2899--3478[label="1;1pkt 1fpkt"];
2899--3578[label="1;3pkt 3fpkt"];
2899--4864[label="1;1pkt 1fpkt"];
2899--5229[label="1;2pkt 2fpkt"];
2899--5852[label="0.5;1pkt 1fpkt"];
2899--5866[label="0.666667;2pkt 2fpkt"];
2899--6537[label="1;1pkt 1fpkt"];
2899--6793[label="1;3pkt 3fpkt"];
2899--7214[label="0.5;1pkt 1fpkt"];
2899--7791[label="1;2pkt 2fpkt"];
2899--8063[label="0.5;1pkt 1fpkt"];
3309--5866[label="1;2pkt 2fpkt"];
4864--6537[label="1;1pkt 1fpkt"];
5521--6985[label="1;1pkt 1fpkt"];
5521--7911[label="1;1pkt 1fpkt"];
5852--7214[label="1;2pkt 2fpkt"];
5852--8063[label="1;2pkt 2fpkt"];
5875--7228[label="1;1pkt 1fpkt"];
6985--7911[label="1;1pkt 1fpkt"];
7214--8063[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.187.231" src_port="4662"/>
      <filter dst_ip="185.191.187.231" dst_port="4662"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
1187[label="212.24.19.184;d;76pkt 76fpkt", shape=diamond, color=yellow];
1189[label="213.9.49.250;s;1pkt 1fpkt", shape=diamond, color=yellow];
3389[label="212.24.19.184;d;69pkt 69fpkt", shape=hexagon, color=black];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8888, 212.24.19.184:*}[55.2632%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (26.7123%)&lt;BR/&gt; 7777: (6.16438%)&lt;BR/&gt; 1111: (2.39726%)&lt;BR/&gt; 9999: (2.05479%)&lt;BR/&gt; 7000: (2.05479%)&gt;];
}
1187--1189[label="1;1pkt 1fpkt"];
1187--3389[label="1;69pkt 69fpkt"];
1189--3389[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.19.184" src_port="8888"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
1200[label="212.24.4.2;d;5pkt 5fpkt", shape=diamond, color=yellow];
1201[label="181.23.232.253;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{181.23.137.116:7776, 212.24.4.2:1038}[20%]&lt;BR/&gt;{181.23.137.118:7775, 212.24.4.2:1036}[20%]&lt;BR/&gt;{181.23.232.250:5002, 212.24.4.2:1039}[20%]&lt;BR/&gt;{181.23.232.253:5001, 212.24.4.2:1037}[20%]&lt;BR/&gt;{181.23.232.253:5002, 212.24.4.2:1034}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5002: (21.4286%)&lt;BR/&gt; 5001: (14.2857%)&lt;BR/&gt; 1037: (14.2857%)&lt;BR/&gt; 1034: (14.2857%)&lt;BR/&gt; 7776: (7.14286%)&gt;];
}
1200--1201[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.4.2" dst_port="1034" src_ip="181.23.232.253" src_port="5002"/>
      <filter dst_ip="212.24.4.2" dst_port="1037" src_ip="181.23.232.253" src_port="5001"/>
      <filter dst_ip="212.24.4.2" dst_port="1039" src_ip="181.23.232.250" src_port="5002"/>
      <filter dst_ip="212.24.4.2" dst_port="1036" src_ip="181.23.137.118" src_port="7775"/>
      <filter dst_ip="212.24.4.2" dst_port="1038" src_ip="181.23.137.116" src_port="7776"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="213.91.102.137"/>
      <from sec="1034226000" usec="0"/>
      <to sec="1034226738" usec="0"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989075,2.1681,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
290[label="200.214.20.135s;1pkt 1fpkt", shape=rectangle, color=red];
1216[label="185.191.224.133;d;1pkt 1fpkt", shape=diamond, color=yellow];
1217[label="212.112.116.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
3525[label="185.191.224.133;d;1pkt 1fpkt", shape=hexagon, color=black];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.112.116.135:993, 185.191.224.133:1694}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1694: (50%)&lt;BR/&gt; 993: (50%)&gt;];
}
290--1216[label="1;1pkt 1fpkt"];
290--1217[label="1;1pkt 1fpkt"];
290--3525[label="1;1pkt 1fpkt"];
1216--1217[label="1;1pkt 1fpkt"];
1216--3525[label="1;1pkt 1fpkt"];
1217--3525[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.224.133" dst_port="1694" src_ip="212.112.116.135" src_port="993"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989075,2.1681,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
124[label="213.151.161.205s;2pkt 2fpkt", shape=rectangle, color=red];
1248[label="213.151.161.205;s;3pkt 3fpkt", shape=diamond, color=yellow];
1249[label="136.230.111.59;d;3pkt 3fpkt", shape=diamond, color=yellow];
2839[label="136.230.111.59;d;3pkt 3fpkt", shape=hexagon, color=black];
3399[label="213.151.161.205;s;3pkt 3fpkt", shape=hexagon, color=black];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.151.161.205:873, 136.230.111.59:1212}[33.3333%]&lt;BR/&gt;{213.151.161.205:873, 136.230.111.59:1213}[33.3333%]&lt;BR/&gt;{213.151.161.205:873, 136.230.111.59:1257}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 873: (50%)&lt;BR/&gt; 1257: (17.8571%)&lt;BR/&gt; 1212: (17.8571%)&lt;BR/&gt; 1213: (14.2857%)&gt;];
}
124--1248[label="1;2pkt 2fpkt"];
124--1249[label="1;2pkt 2fpkt"];
124--2839[label="1;2pkt 2fpkt"];
124--3399[label="1;2pkt 2fpkt"];
1248--1249[label="1;3pkt 3fpkt"];
1248--2839[label="1;3pkt 3fpkt"];
1248--3399[label="1;3pkt 3fpkt"];
1249--2839[label="1;3pkt 3fpkt"];
1249--3399[label="1;3pkt 3fpkt"];
2839--3399[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.230.111.59" dst_port="1257" src_ip="213.151.161.205" src_port="873"/>
      <filter dst_ip="136.230.111.59" dst_port="1213" src_ip="213.151.161.205" src_port="873"/>
      <filter dst_ip="136.230.111.59" dst_port="1212" src_ip="213.151.161.205" src_port="873"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="184.3.87.166"/>
      <from sec="1034226000" usec="0"/>
      <to sec="1034226738" usec="0"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.728592,2.13253,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
163[label="195.116.243.33s;17pkt 17fpkt", shape=rectangle, color=red];
4261[label="195.116.243.33;248pkt 248fpkt", shape=pentagon, color=darkviolet];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.116.243.33:80, 212.137.144.168:*}[32.6613%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2642: (0.566038%)&lt;BR/&gt; 2674: (0.377358%)&lt;BR/&gt; 2672: (0.377358%)&lt;BR/&gt; 2670: (0.377358%)&gt;];
}
163--1268[label="1;17pkt 17fpkt"];
163--4261[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="212.137.144.168" src_ip="195.116.243.33" src_port="80"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
1269[label="2.226.110.103;d;493pkt 493fpkt", shape=diamond, color=yellow];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:139, 2.226.110.103:*}[99.5943%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.7972%)&lt;BR/&gt; 0: (0.40568%)&lt;BR/&gt; 2759: (0.10142%)&lt;BR/&gt; 2758: (0.10142%)&lt;BR/&gt; 2756: (0.10142%)&gt;];
}
1269--3050[label="0.0020284;1pkt 1fpkt"];
1269--3631[label="0.0020284;1pkt 1fpkt"];
1269--3914[label="0.0020284;1pkt 1fpkt"];
1269--4134[label="0.0020284;1pkt 1fpkt"];
1269--6058[label="0.0020284;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="2.226.110.103" src_port="139"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
881[label="136.230.78.211;s;17pkt 17fpkt", shape=diamond, color=yellow];
950[label="84.102.234.171;d;19pkt 19fpkt", shape=diamond, color=yellow];
953[label="161.238.208.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
1302[label="167.8.180.170;s;276pkt 276fpkt", shape=diamond, color=yellow];
1755[label="161.238.14.85;s;58pkt 58fpkt", shape=diamond, color=yellow];
1958[label="136.230.38.64;s;111pkt 111fpkt", shape=diamond, color=yellow];
2744[label="84.102.234.171;d;17pkt 17fpkt", shape=hexagon, color=black];
3408[label="161.238.14.85;s;58pkt 58fpkt", shape=hexagon, color=black];
3880[label="161.238.14.85;s;54pkt 54fpkt", shape=polygon, color=gold];
4525[label="136.230.38.64;123pkt 123fpkt", shape=pentagon, color=darkviolet];
5673[label="136.230.78.211;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6318[label="136.230.38.64;123pkt 123fpkt", shape=invtriangle, color=brown];
7504[label="136.230.38.64;124pkt 124fpkt", shape=invhouse, color=bisque];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.180.170:*, *:25}[47.4438%]&lt;BR/&gt;{136.230.38.64:*, *:25}[22.6994%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.6034%)&lt;BR/&gt; 443: (1.7982%)&lt;BR/&gt; 0: (0.999001%)&lt;BR/&gt; 113: (0.549451%)&lt;BR/&gt; 110: (0.34965%)&gt;];
}
881--950[label="0.0588235;1pkt 1fpkt"];
881--2744[label="0.0588235;1pkt 1fpkt"];
881--3241[label="0.75;12pkt 12fpkt"];
881--3945[label="0.0588235;1pkt 1fpkt"];
881--3958[label="0.0588235;1pkt 1fpkt"];
881--3968[label="0.0588235;1pkt 1fpkt"];
881--5673[label="1;17pkt 17fpkt"];
950--953[label="1;1pkt 1fpkt"];
950--1302[label="0.157895;3pkt 3fpkt"];
950--1475[label="0.105263;2pkt 2fpkt"];
950--1755[label="0.157895;3pkt 3fpkt"];
950--1827[label="0.210526;4pkt 4fpkt"];
950--1958[label="0.0526316;1pkt 1fpkt"];
950--2744[label="1;17pkt 17fpkt"];
950--3158[label="0.210526;4pkt 4fpkt"];
950--3239[label="0.105263;2pkt 2fpkt"];
950--3408[label="0.157895;3pkt 3fpkt"];
950--3858[label="0.105263;2pkt 2fpkt"];
950--3880[label="0.157895;3pkt 3fpkt"];
950--4411[label="0.105263;2pkt 2fpkt"];
950--4476[label="0.210526;4pkt 4fpkt"];
950--4525[label="0.0526316;1pkt 1fpkt"];
950--5673[label="0.0526316;1pkt 1fpkt"];
950--6287[label="0.210526;4pkt 4fpkt"];
950--6318[label="0.0526316;1pkt 1fpkt"];
950--7504[label="0.0526316;1pkt 1fpkt"];
953--2744[label="1;1pkt 1fpkt"];
1302--1998[label="0.0588235;1pkt 1fpkt"];
1302--2744[label="0.176471;3pkt 3fpkt"];
1302--3558[label="0.0588235;1pkt 1fpkt"];
1755--2744[label="0.176471;3pkt 3fpkt"];
1755--3408[label="1;58pkt 58fpkt"];
1755--3880[label="1;54pkt 54fpkt"];
1958--1998[label="0.0588235;1pkt 1fpkt"];
1958--2380[label="0.0869565;2pkt 2fpkt"];
1958--2744[label="0.0588235;1pkt 1fpkt"];
1958--3558[label="0.0588235;1pkt 1fpkt"];
1958--4525[label="0.990991;110pkt 110fpkt"];
1958--6318[label="0.990991;110pkt 110fpkt"];
1958--7504[label="1;111pkt 111fpkt"];
2744--3158[label="0.176471;3pkt 3fpkt"];
2744--3239[label="0.117647;2pkt 2fpkt"];
2744--3408[label="0.176471;3pkt 3fpkt"];
2744--3858[label="0.117647;2pkt 2fpkt"];
2744--3880[label="0.176471;3pkt 3fpkt"];
2744--4411[label="0.117647;2pkt 2fpkt"];
2744--4476[label="0.176471;3pkt 3fpkt"];
2744--4525[label="0.0588235;1pkt 1fpkt"];
2744--5673[label="0.0588235;1pkt 1fpkt"];
2744--6287[label="0.176471;3pkt 3fpkt"];
2744--6318[label="0.0588235;1pkt 1fpkt"];
2744--7504[label="0.0588235;1pkt 1fpkt"];
3408--3880[label="1;54pkt 54fpkt"];
4525--6318[label="1;123pkt 123fpkt"];
4525--7504[label="1;123pkt 123fpkt"];
6318--7504[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="167.8.180.170"/>
      <filter dst_port="25" src_ip="136.230.38.64"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
1326[label="167.8.185.245;s;304pkt 304fpkt", shape=diamond, color=yellow];
1338[label="86.169.5.13;d;89pkt 89fpkt", shape=diamond, color=yellow];
1778[label="86.169.5.98;d;118pkt 118fpkt", shape=diamond, color=yellow];
1803[label="185.191.2.170;s;71pkt 71fpkt", shape=diamond, color=yellow];
2176[label="84.24.32.37;d;57pkt 57fpkt", shape=diamond, color=yellow];
2558[label="213.91.97.163;s;59pkt 59fpkt", shape=diamond, color=yellow];
2996[label="86.169.5.13;d;89pkt 89fpkt", shape=hexagon, color=black];
3283[label="86.169.5.98;d;81pkt 81fpkt", shape=hexagon, color=black];
3406[label="84.24.32.37;d;48pkt 48fpkt", shape=hexagon, color=black];
3556[label="167.8.185.245;s;304pkt 304fpkt", shape=hexagon, color=black];
3670[label="213.91.97.163;s;59pkt 59fpkt", shape=hexagon, color=black];
3716[label="185.191.2.170;s;71pkt 71fpkt", shape=hexagon, color=black];
4056[label="213.91.101.8;48pkt 48fpkt", shape=pentagon, color=darkviolet];
4471[label="141.98.197.55;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4982[label="161.238.136.119;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5368[label="185.191.2.170;80pkt 80fpkt", shape=pentagon, color=darkviolet];
5502[label="141.98.49.187;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5888[label="167.8.185.245;317pkt 317fpkt", shape=pentagon, color=darkviolet];
6001[label="213.91.101.8;48pkt 48fpkt", shape=invtriangle, color=brown];
6616[label="161.238.136.119;20pkt 20fpkt", shape=invtriangle, color=brown];
6888[label="185.191.2.170;79pkt 79fpkt", shape=invtriangle, color=brown];
6973[label="141.98.49.187;4pkt 4fpkt", shape=invtriangle, color=brown];
7234[label="167.8.185.245;318pkt 318fpkt", shape=invtriangle, color=brown];
7304[label="213.91.101.8;49pkt 49fpkt", shape=invhouse, color=bisque];
7675[label="161.238.136.119;19pkt 19fpkt", shape=invhouse, color=bisque];
7856[label="185.191.2.170;79pkt 79fpkt", shape=invhouse, color=bisque];
8075[label="167.8.185.245;318pkt 318fpkt", shape=invhouse, color=bisque];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.185.245:80, *:*}[50.7177%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9099%)&lt;BR/&gt; 3515: (0.216216%)&lt;BR/&gt; 2506: (0.216216%)&lt;BR/&gt; 2193: (0.216216%)&lt;BR/&gt; 3644: (0.198198%)&gt;];
}
1326--1338[label="0.123596;11pkt 11fpkt"];
1326--1778[label="0.838983;99pkt 99fpkt"];
1326--2996[label="0.123596;11pkt 11fpkt"];
1326--3283[label="0.765432;62pkt 62fpkt"];
1326--3556[label="1;304pkt 304fpkt"];
1326--3950[label="0.0855263;26pkt 26fpkt"];
1326--5888[label="0.996711;303pkt 303fpkt"];
1326--7234[label="1;304pkt 304fpkt"];
1326--8075[label="1;304pkt 304fpkt"];
1338--1586[label="0.514286;18pkt 18fpkt"];
1338--1803[label="0.28169;20pkt 20fpkt"];
1338--2558[label="0.0677966;4pkt 4fpkt"];
1338--2996[label="1;89pkt 89fpkt"];
1338--3556[label="0.123596;11pkt 11fpkt"];
1338--3670[label="0.0677966;4pkt 4fpkt"];
1338--3716[label="0.28169;20pkt 20fpkt"];
1338--3950[label="0.0674157;6pkt 6fpkt"];
1338--4056[label="0.354167;17pkt 17fpkt"];
1338--4573[label="0.244444;11pkt 11fpkt"];
1338--5368[label="0.25;20pkt 20fpkt"];
1338--5386[label="0.5;18pkt 18fpkt"];
1338--5888[label="0.123596;11pkt 11fpkt"];
1338--6001[label="0.354167;17pkt 17fpkt"];
1338--6888[label="0.253165;20pkt 20fpkt"];
1338--7234[label="0.123596;11pkt 11fpkt"];
1338--7304[label="0.346939;17pkt 17fpkt"];
1338--7856[label="0.253165;20pkt 20fpkt"];
1338--8075[label="0.123596;11pkt 11fpkt"];
1778--3283[label="1;81pkt 81fpkt"];
1778--3556[label="0.838983;99pkt 99fpkt"];
1778--3950[label="0.0423729;5pkt 5fpkt"];
1778--4982[label="0.95;19pkt 19fpkt"];
1778--5888[label="0.838983;99pkt 99fpkt"];
1778--6616[label="0.95;19pkt 19fpkt"];
1778--7234[label="0.838983;99pkt 99fpkt"];
1778--7675[label="0.947368;18pkt 18fpkt"];
1778--8075[label="0.838983;99pkt 99fpkt"];
1803--1976[label="0.0140845;1pkt 1fpkt"];
1803--2996[label="0.28169;20pkt 20fpkt"];
1803--3716[label="1;71pkt 71fpkt"];
1803--3950[label="0.211268;15pkt 15fpkt"];
1803--5368[label="1;71pkt 71fpkt"];
1803--6888[label="0.985915;70pkt 70fpkt"];
1803--7856[label="0.985915;70pkt 70fpkt"];
2176--2558[label="0.0175439;1pkt 1fpkt"];
2176--3406[label="1;48pkt 48fpkt"];
2176--3670[label="0.0175439;1pkt 1fpkt"];
2176--3950[label="0.0701754;4pkt 4fpkt"];
2176--4056[label="0.125;6pkt 6fpkt"];
2176--4471[label="0.47619;10pkt 10fpkt"];
2176--5502[label="0.4;2pkt 2fpkt"];
2176--6001[label="0.125;6pkt 6fpkt"];
2176--6973[label="0.5;2pkt 2fpkt"];
2176--7304[label="0.122449;6pkt 6fpkt"];
2558--2996[label="0.0677966;4pkt 4fpkt"];
2558--3670[label="1;59pkt 59fpkt"];
2558--3950[label="0.0677966;4pkt 4fpkt"];
2996--3556[label="0.123596;11pkt 11fpkt"];
2996--3670[label="0.0677966;4pkt 4fpkt"];
2996--3716[label="0.28169;20pkt 20fpkt"];
2996--3950[label="0.0674157;6pkt 6fpkt"];
2996--4056[label="0.354167;17pkt 17fpkt"];
2996--4573[label="0.244444;11pkt 11fpkt"];
2996--5368[label="0.25;20pkt 20fpkt"];
2996--5386[label="0.5;18pkt 18fpkt"];
2996--5888[label="0.123596;11pkt 11fpkt"];
2996--6001[label="0.354167;17pkt 17fpkt"];
2996--6888[label="0.253165;20pkt 20fpkt"];
2996--7234[label="0.123596;11pkt 11fpkt"];
2996--7304[label="0.346939;17pkt 17fpkt"];
2996--7856[label="0.253165;20pkt 20fpkt"];
2996--8075[label="0.123596;11pkt 11fpkt"];
3283--3556[label="0.765432;62pkt 62fpkt"];
3283--3950[label="0.0617284;5pkt 5fpkt"];
3283--4982[label="0.95;19pkt 19fpkt"];
3283--5888[label="0.765432;62pkt 62fpkt"];
3283--6616[label="0.95;19pkt 19fpkt"];
3283--7234[label="0.765432;62pkt 62fpkt"];
3283--7675[label="0.947368;18pkt 18fpkt"];
3283--8075[label="0.765432;62pkt 62fpkt"];
3406--3950[label="0.0833333;4pkt 4fpkt"];
3406--4056[label="0.0833333;4pkt 4fpkt"];
3406--4471[label="0.333333;7pkt 7fpkt"];
3406--5502[label="0.4;2pkt 2fpkt"];
3406--6001[label="0.0833333;4pkt 4fpkt"];
3406--6973[label="0.5;2pkt 2fpkt"];
3406--7304[label="0.0833333;4pkt 4fpkt"];
3556--3950[label="0.0855263;26pkt 26fpkt"];
3556--5888[label="0.996711;303pkt 303fpkt"];
3556--7234[label="1;304pkt 304fpkt"];
3556--8075[label="1;304pkt 304fpkt"];
3670--3950[label="0.0677966;4pkt 4fpkt"];
3716--3950[label="0.211268;15pkt 15fpkt"];
3716--5368[label="1;71pkt 71fpkt"];
3716--6888[label="0.985915;70pkt 70fpkt"];
3716--7856[label="0.985915;70pkt 70fpkt"];
4056--6001[label="1;48pkt 48fpkt"];
4056--7304[label="1;48pkt 48fpkt"];
4982--6616[label="1;20pkt 20fpkt"];
4982--7675[label="1;19pkt 19fpkt"];
5368--6888[label="1;79pkt 79fpkt"];
5368--7856[label="1;79pkt 79fpkt"];
5502--6973[label="1;4pkt 4fpkt"];
5888--7234[label="1;317pkt 317fpkt"];
5888--8075[label="1;317pkt 317fpkt"];
6001--7304[label="1;48pkt 48fpkt"];
6616--7675[label="1;19pkt 19fpkt"];
6888--7856[label="1;79pkt 79fpkt"];
7234--8075[label="1;318pkt 318fpkt"];
</description>
    <slice>
      <filter src_ip="167.8.185.245" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
677[label="212.130.23.132;s;86pkt 86fpkt", shape=diamond, color=yellow];
932[label="85.72.153.157;d;2pkt 2fpkt", shape=diamond, color=yellow];
1363[label="164.59.113.39;d;6pkt 6fpkt", shape=diamond, color=yellow];
1607[label="160.114.239.231;d;2pkt 2fpkt", shape=diamond, color=yellow];
2043[label="213.16.23.26;d;7pkt 7fpkt", shape=diamond, color=yellow];
2123[label="170.244.199.95;d;3pkt 3fpkt", shape=diamond, color=yellow];
2687[label="212.130.23.132;s;69pkt 69fpkt", shape=hexagon, color=black];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.130.23.132:80, 195.42.200.187:*}[24.4186%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4286%)&lt;BR/&gt; 1789: (1.42857%)&lt;BR/&gt; 0: (1.14286%)&lt;BR/&gt; 46238: (0.857143%)&lt;BR/&gt; 45749: (0.857143%)&gt;];
}
677--932[label="1;2pkt 2fpkt"];
677--1363[label="1;6pkt 6fpkt"];
677--1607[label="1;2pkt 2fpkt"];
677--2043[label="1;7pkt 7fpkt"];
677--2123[label="1;3pkt 3fpkt"];
677--2687[label="1;69pkt 69fpkt"];
677--3950[label="0.209302;18pkt 18fpkt"];
932--2687[label="1;2pkt 2fpkt"];
932--3950[label="0.5;1pkt 1fpkt"];
1363--2687[label="1;6pkt 6fpkt"];
1607--2687[label="1;2pkt 2fpkt"];
1607--3950[label="0.5;1pkt 1fpkt"];
2043--2687[label="1;7pkt 7fpkt"];
2043--3950[label="0.142857;1pkt 1fpkt"];
2687--3950[label="0.26087;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="195.42.200.187" src_ip="212.130.23.132" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.827709,2.11876,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
15[label="221.98.27.26s;1pkt 1fpkt", shape=rectangle, color=red];
1378[label="221.98.27.26;s;7pkt 7fpkt", shape=diamond, color=yellow];
4202[label="221.98.27.26;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.98.27.26:*, 185.191.0.65:*}[57.1429%]&lt;BR/&gt;{221.98.27.26:20, 185.191.38.72:*}[28.5714%]&lt;BR/&gt;{221.98.27.26:21, *:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (14.2857%)&lt;BR/&gt; 50730: (10.7143%)&lt;BR/&gt; 3054: (10.7143%)&lt;BR/&gt; 21: (10.7143%)&lt;BR/&gt; 51028: (7.14286%)&gt;];
}
15--890[label="1;1pkt 1fpkt"];
15--1378[label="1;1pkt 1fpkt"];
15--4202[label="1;1pkt 1fpkt"];
1378--4202[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.0.65" src_ip="221.98.27.26"/>
      <filter src_ip="221.98.27.26" src_port="21"/>
      <filter dst_ip="185.191.38.72" src_ip="221.98.27.26" src_port="20"/>
    </slice>
    <from sec="1034226082" usec="0"/>
    <to sec="1034226657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.96361,2.07354,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
97[label="85.41.141.154s;1pkt 1fpkt", shape=rectangle, color=red];
611[label="141.98.31.128;d;8pkt 8fpkt", shape=diamond, color=yellow];
985[label="209.83.194.54;s;2pkt 2fpkt", shape=diamond, color=yellow];
1398[label="85.41.141.154;s;6pkt 6fpkt", shape=diamond, color=yellow];
4466[label="209.83.194.54;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6280[label="209.83.194.54;1pkt 1fpkt", shape=invtriangle, color=brown];
7478[label="209.83.194.54;1pkt 1fpkt", shape=invhouse, color=bisque];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.41.141.154:80, 212.24.169.121:*}[33.3333%]&lt;BR/&gt;{*:21, 141.98.31.128:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (15%)&lt;BR/&gt; 61233: (12.5%)&lt;BR/&gt; 16093: (12.5%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 61230: (7.5%)&gt;];
}
97--611[label="1;1pkt 1fpkt"];
97--1398[label="1;1pkt 1fpkt"];
611--985[label="1;2pkt 2fpkt"];
611--1398[label="0.333333;2pkt 2fpkt"];
611--4466[label="1;1pkt 1fpkt"];
611--4824[label="0.25;2pkt 2fpkt"];
611--6280[label="1;1pkt 1fpkt"];
611--7478[label="1;1pkt 1fpkt"];
985--4466[label="1;1pkt 1fpkt"];
985--6280[label="1;1pkt 1fpkt"];
985--7478[label="1;1pkt 1fpkt"];
1398--3090[label="0.666667;4pkt 4fpkt"];
1398--3830[label="0.666667;4pkt 4fpkt"];
4466--6280[label="1;1pkt 1fpkt"];
4466--7478[label="1;1pkt 1fpkt"];
6280--7478[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.31.128" src_port="21"/>
      <filter dst_ip="212.24.169.121" src_ip="85.41.141.154" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
1435[label="167.8.168.76;d;22pkt 22fpkt", shape=diamond, color=yellow];
1436[label="130.37.119.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
2928[label="167.8.168.76;d;14pkt 14fpkt", shape=hexagon, color=black];
3064[label="130.37.119.181;s;1pkt 1fpkt", shape=hexagon, color=black];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.8.168.76:2234}[63.6364%]&lt;BR/&gt;{*:2234, 167.8.168.76:*}[31.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2234: (44.7368%)&lt;BR/&gt; 5534: (5.26316%)&lt;BR/&gt; 4485: (5.26316%)&lt;BR/&gt; 4968: (2.63158%)&lt;BR/&gt; 4558: (2.63158%)&gt;];
}
1435--1436[label="1;1pkt 1fpkt"];
1435--2928[label="1;14pkt 14fpkt"];
1435--3064[label="1;1pkt 1fpkt"];
1436--2928[label="1;1pkt 1fpkt"];
1436--3064[label="1;1pkt 1fpkt"];
2928--3064[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.168.76" src_port="2234"/>
      <filter dst_ip="167.8.168.76" dst_port="2234"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
857[label="213.91.97.55;s;511pkt 511fpkt", shape=diamond, color=yellow];
1461[label="189.32.121.243;d;1pkt 1fpkt", shape=diamond, color=yellow];
1637[label="214.4.214.206;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.97.55:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
857--1461[label="1;1pkt 1fpkt"];
857--1637[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="213.91.97.55"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
1128[label="167.8.140.114;d;20pkt 20fpkt", shape=diamond, color=yellow];
4358[label="171.83.226.42;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4400[label="3.49.202.47;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4991[label="43.23.147.120;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6208[label="171.83.226.42;1pkt 1fpkt", shape=invtriangle, color=brown];
6235[label="3.49.202.47;2pkt 2fpkt", shape=invtriangle, color=brown];
7433[label="171.83.226.42;1pkt 1fpkt", shape=invhouse, color=bisque];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 167.8.140.114:6257}[60%]&lt;BR/&gt;{*:6699, 167.8.140.114:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (50%)&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 1172: (7.14286%)&lt;BR/&gt; 1170: (5.35714%)&lt;BR/&gt; 1161: (3.57143%)&gt;];
}
1128--1481[label="1;1pkt 1fpkt"];
1128--1728[label="1;1pkt 1fpkt"];
1128--2807[label="1;14pkt 14fpkt"];
1128--3792[label="1;9pkt 9fpkt"];
1128--3948[label="0.15;3pkt 3fpkt"];
1128--3952[label="0.05;1pkt 1fpkt"];
1128--3961[label="0.15;3pkt 3fpkt"];
1128--3963[label="0.05;1pkt 1fpkt"];
1128--3971[label="0.15;3pkt 3fpkt"];
1128--3973[label="0.05;1pkt 1fpkt"];
1128--4358[label="1;1pkt 1fpkt"];
1128--4400[label="1;2pkt 2fpkt"];
1128--4991[label="1;1pkt 1fpkt"];
1128--6208[label="1;1pkt 1fpkt"];
1128--6235[label="1;2pkt 2fpkt"];
1128--7433[label="1;1pkt 1fpkt"];
4358--6208[label="1;1pkt 1fpkt"];
4358--7433[label="1;1pkt 1fpkt"];
4400--6235[label="1;2pkt 2fpkt"];
6208--7433[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.140.114" src_port="6699"/>
      <filter dst_ip="167.8.140.114" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,001,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
1172[label="141.98.148.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
1487[label="84.194.112.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
3386[label="141.98.148.196;d;1pkt 1fpkt", shape=hexagon, color=black];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.194.112.171:1023, 141.98.148.196:2951}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2951: (50%)&lt;BR/&gt; 1023: (50%)&gt;];
}
1172--1487[label="1;1pkt 1fpkt"];
1172--3386[label="1;1pkt 1fpkt"];
1487--3386[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.148.196" dst_port="2951" src_ip="84.194.112.171" src_port="1023"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
904[label="200.224.254.28;s;3pkt 3fpkt", shape=diamond, color=yellow];
1488[label="141.98.55.253;d;3pkt 3fpkt", shape=diamond, color=yellow];
2736[label="200.224.254.28;s;3pkt 3fpkt", shape=hexagon, color=black];
3859[label="200.224.254.28;s;3pkt 3fpkt", shape=polygon, color=gold];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.224.254.28:21, 141.98.55.253:33239}[33.3333%]&lt;BR/&gt;{200.224.254.28:33159, 141.98.55.253:33271}[33.3333%]&lt;BR/&gt;{200.224.254.28:33160, 141.98.55.253:33272}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33272: (16.6667%)&lt;BR/&gt; 33271: (16.6667%)&lt;BR/&gt; 33239: (16.6667%)&lt;BR/&gt; 33160: (16.6667%)&lt;BR/&gt; 33159: (16.6667%)&gt;];
}
904--1488[label="1;3pkt 3fpkt"];
904--2736[label="1;3pkt 3fpkt"];
904--3859[label="1;3pkt 3fpkt"];
1488--2736[label="1;3pkt 3fpkt"];
1488--3859[label="1;3pkt 3fpkt"];
2736--3859[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.55.253" dst_port="33272" src_ip="200.224.254.28" src_port="33160"/>
      <filter dst_ip="141.98.55.253" dst_port="33271" src_ip="200.224.254.28" src_port="33159"/>
      <filter dst_ip="141.98.55.253" dst_port="33239" src_ip="200.224.254.28" src_port="21"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611545,2.14038,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
1250[label="136.230.111.59;s;3pkt 3fpkt", shape=diamond, color=yellow];
1503[label="213.151.161.205;d;3pkt 3fpkt", shape=diamond, color=yellow];
4496[label="136.230.111.59;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.111.59:1212, 213.151.161.205:873}[33.3333%]&lt;BR/&gt;{136.230.111.59:1213, 213.151.161.205:873}[33.3333%]&lt;BR/&gt;{136.230.111.59:1257, 213.151.161.205:873}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 873: (50%)&lt;BR/&gt; 1257: (16.6667%)&lt;BR/&gt; 1213: (16.6667%)&lt;BR/&gt; 1212: (16.6667%)&gt;];
}
1250--1503[label="1;3pkt 3fpkt"];
1250--4496[label="1;3pkt 3fpkt"];
1503--4496[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="213.151.161.205" dst_port="873" src_ip="136.230.111.59" src_port="1257"/>
      <filter dst_ip="213.151.161.205" dst_port="873" src_ip="136.230.111.59" src_port="1213"/>
      <filter dst_ip="213.151.161.205" dst_port="873" src_ip="136.230.111.59" src_port="1212"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
135[label="1.96.53.225s;1pkt 1fpkt", shape=rectangle, color=red];
1509[label="1.96.53.225;s;32pkt 32fpkt", shape=diamond, color=yellow];
2115[label="203.186.82.235;s;78pkt 78fpkt", shape=diamond, color=yellow];
3108[label="1.96.53.225;s;32pkt 32fpkt", shape=hexagon, color=black];
3348[label="203.186.82.235;s;78pkt 78fpkt", shape=hexagon, color=black];
5752[label="1.96.53.225;31pkt 31fpkt", shape=pentagon, color=darkviolet];
5833[label="203.186.82.235;78pkt 78fpkt", shape=pentagon, color=darkviolet];
7199[label="203.186.82.235;77pkt 77fpkt", shape=invtriangle, color=brown];
8053[label="203.186.82.235;78pkt 78fpkt", shape=invhouse, color=bisque];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.186.82.235:80, 185.191.55.150:*}[35.4545%]&lt;BR/&gt;{203.186.82.235:80, 185.191.0.65:*}[35.4545%]&lt;BR/&gt;{1.96.53.225:*, 185.191.0.65:*}[29.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3608%)&lt;BR/&gt; 1755: (4.63918%)&lt;BR/&gt; 51374: (0.515464%)&lt;BR/&gt; 51373: (0.515464%)&lt;BR/&gt; 51372: (0.515464%)&gt;];
}
135--890[label="1;1pkt 1fpkt"];
135--1509[label="1;1pkt 1fpkt"];
135--3108[label="1;1pkt 1fpkt"];
135--3950[label="1;1pkt 1fpkt"];
135--5752[label="1;1pkt 1fpkt"];
1509--3108[label="1;32pkt 32fpkt"];
1509--3950[label="0.03125;1pkt 1fpkt"];
1509--5752[label="1;31pkt 31fpkt"];
2115--2874[label="0.5;39pkt 39fpkt"];
2115--3348[label="1;78pkt 78fpkt"];
2115--5833[label="1;78pkt 78fpkt"];
2115--7199[label="1;77pkt 77fpkt"];
2115--8053[label="1;78pkt 78fpkt"];
3108--3950[label="0.03125;1pkt 1fpkt"];
3108--5752[label="1;31pkt 31fpkt"];
3348--5833[label="1;78pkt 78fpkt"];
3348--7199[label="1;77pkt 77fpkt"];
3348--8053[label="1;78pkt 78fpkt"];
5833--7199[label="1;77pkt 77fpkt"];
5833--8053[label="1;78pkt 78fpkt"];
7199--8053[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.0.65" src_ip="1.96.53.225"/>
      <filter dst_ip="185.191.0.65" src_ip="203.186.82.235" src_port="80"/>
      <filter dst_ip="185.191.55.150" src_ip="203.186.82.235" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658063,2.10925,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
762[label="213.91.102.180;s;506pkt 506fpkt", shape=diamond, color=yellow];
1511[label="184.3.87.166;d;1pkt 1fpkt", shape=diamond, color=yellow];
5452[label="213.91.102.180;581pkt 581fpkt", shape=pentagon, color=darkviolet];
6941[label="213.91.102.180;581pkt 581fpkt", shape=invtriangle, color=brown];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.102.180:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
762--1511[label="1;1pkt 1fpkt"];
762--5452[label="0.998024;505pkt 505fpkt"];
762--6941[label="0.998024;505pkt 505fpkt"];
1511--5452[label="1;1pkt 1fpkt"];
1511--6941[label="1;1pkt 1fpkt"];
5452--6941[label="1;581pkt 581fpkt"];
</description>
    <slice>
      <filter src_ip="213.91.102.180"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
1131[label="210.150.73.74;d;11pkt 11fpkt", shape=diamond, color=yellow];
1694[label="167.164.224.139;s;6pkt 6fpkt", shape=diamond, color=yellow];
1896[label="141.98.94.180;s;25pkt 25fpkt", shape=diamond, color=yellow];
3224[label="167.164.224.139;s;6pkt 6fpkt", shape=hexagon, color=black];
3225[label="210.150.73.74;d;9pkt 9fpkt", shape=hexagon, color=black];
5450[label="141.98.94.180;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6940[label="141.98.94.180;25pkt 25fpkt", shape=invtriangle, color=brown];
7886[label="141.98.94.180;24pkt 24fpkt", shape=invhouse, color=bisque];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.94.180:*, 210.150.15.24:80}[37.5%]&lt;BR/&gt;{141.98.94.180:*, 210.150.73.74:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.626%)&lt;BR/&gt; 554: (11.8321%)&lt;BR/&gt; 6970: (8.77863%)&lt;BR/&gt; 28422: (2.29008%)&lt;BR/&gt; 18596: (2.29008%)&gt;];
}
1131--1516[label="0.0909091;1pkt 1fpkt"];
1131--1694[label="0.333333;2pkt 2fpkt"];
1131--1896[label="0.727273;8pkt 8fpkt"];
1131--3224[label="0.333333;2pkt 2fpkt"];
1131--3225[label="1;9pkt 9fpkt"];
1131--5450[label="0.727273;8pkt 8fpkt"];
1131--6940[label="0.727273;8pkt 8fpkt"];
1131--7886[label="0.727273;8pkt 8fpkt"];
1694--3224[label="1;6pkt 6fpkt"];
1694--3225[label="0.333333;2pkt 2fpkt"];
1896--2184[label="0.48;12pkt 12fpkt"];
1896--3190[label="0.08;2pkt 2fpkt"];
1896--3225[label="0.666667;6pkt 6fpkt"];
1896--3548[label="0.48;12pkt 12fpkt"];
1896--3847[label="0.08;2pkt 2fpkt"];
1896--5450[label="1;25pkt 25fpkt"];
1896--6940[label="1;25pkt 25fpkt"];
1896--7886[label="1;24pkt 24fpkt"];
3224--3225[label="0.333333;2pkt 2fpkt"];
3225--5450[label="0.666667;6pkt 6fpkt"];
3225--6940[label="0.666667;6pkt 6fpkt"];
3225--7886[label="0.666667;6pkt 6fpkt"];
5450--6940[label="1;25pkt 25fpkt"];
5450--7886[label="1;24pkt 24fpkt"];
6940--7886[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="210.150.73.74" src_ip="141.98.94.180"/>
      <filter dst_ip="210.150.15.24" dst_port="80" src_ip="141.98.94.180"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="167.164.147.74"/>
      <from sec="1034226000" usec="0"/>
      <to sec="1034226738" usec="0"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="212.20.60.138"/>
      <from sec="1034226000" usec="0"/>
      <to sec="1034226738" usec="0"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
1535[label="212.18.107.37;s;250pkt 250fpkt", shape=diamond, color=yellow];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.18.107.37:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1535--2061[label="0.004;1pkt 1fpkt"];
1535--3320[label="0.004;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="212.18.107.37"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.96361,2.07354,999,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
196[label="194.235.7.1s;1pkt 1fpkt", shape=rectangle, color=red];
659[label="212.24.9.10;d;73pkt 73fpkt", shape=diamond, color=yellow];
1564[label="200.88.47.1;s;3pkt 3fpkt", shape=diamond, color=yellow];
3986[label="200.88.47.1;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4593[label="201.93.96.71;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4651[label="200.94.172.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5219[label="200.230.47.150;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5354[label="17.239.193.167;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5948[label="200.88.47.1;2pkt 2fpkt", shape=invtriangle, color=brown];
6879[label="17.239.193.167;4pkt 4fpkt", shape=invtriangle, color=brown];
7851[label="17.239.193.167;4pkt 4fpkt", shape=invhouse, color=bisque];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 212.24.9.10:53}[50.6667%]&lt;BR/&gt;{*:7743, 212.24.9.10:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (24.3697%)&lt;BR/&gt; 53: (23.5294%)&lt;BR/&gt; 3984: (2.10084%)&lt;BR/&gt; 3975: (1.68067%)&lt;BR/&gt; 3721: (1.68067%)&gt;];
}
196--659[label="1;1pkt 1fpkt"];
196--1564[label="1;1pkt 1fpkt"];
196--3986[label="1;1pkt 1fpkt"];
196--5948[label="1;1pkt 1fpkt"];
659--660[label="1;1pkt 1fpkt"];
659--1564[label="1;3pkt 3fpkt"];
659--1581[label="1;9pkt 9fpkt"];
659--2496[label="1;6pkt 6fpkt"];
659--3493[label="1;1pkt 1fpkt"];
659--3572[label="1;9pkt 9fpkt"];
659--3749[label="1;6pkt 6fpkt"];
659--3941[label="0.0136986;1pkt 1fpkt"];
659--3945[label="0.0410959;3pkt 3fpkt"];
659--3954[label="0.0136986;1pkt 1fpkt"];
659--3958[label="0.0410959;3pkt 3fpkt"];
659--3964[label="0.0136986;1pkt 1fpkt"];
659--3968[label="0.0410959;3pkt 3fpkt"];
659--3986[label="1;3pkt 3fpkt"];
659--4593[label="1;12pkt 12fpkt"];
659--4651[label="1;1pkt 1fpkt"];
659--5219[label="1;12pkt 12fpkt"];
659--5354[label="0.5;2pkt 2fpkt"];
659--5948[label="1;2pkt 2fpkt"];
659--6789[label="1;12pkt 12fpkt"];
659--6879[label="0.5;2pkt 2fpkt"];
659--7851[label="0.5;2pkt 2fpkt"];
1564--3986[label="1;3pkt 3fpkt"];
1564--5948[label="1;2pkt 2fpkt"];
3986--5948[label="1;2pkt 2fpkt"];
5219--6789[label="1;12pkt 12fpkt"];
5354--6879[label="1;4pkt 4fpkt"];
5354--7851[label="1;4pkt 4fpkt"];
6879--7851[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.9.10" src_port="7743"/>
      <filter dst_ip="212.24.9.10" dst_port="53"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
103[label="203.18.4.170s;3pkt 3fpkt", shape=rectangle, color=red];
698[label="185.191.208.201;s;862pkt 862fpkt", shape=diamond, color=yellow];
1070[label="43.184.19.28;d;2pkt 2fpkt", shape=diamond, color=yellow];
1211[label="195.107.103.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
1244[label="203.104.188.120;d;1pkt 1fpkt", shape=diamond, color=yellow];
1458[label="202.8.65.131;d;1pkt 1fpkt", shape=diamond, color=yellow];
1687[label="202.9.122.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
1988[label="173.32.94.191;d;1pkt 1fpkt", shape=diamond, color=yellow];
2288[label="43.15.98.13;d;2pkt 2fpkt", shape=diamond, color=yellow];
2518[label="81.115.23.168;d;2pkt 2fpkt", shape=diamond, color=yellow];
2695[label="185.191.208.201;s;862pkt 862fpkt", shape=hexagon, color=black];
2783[label="43.184.19.28;d;2pkt 2fpkt", shape=hexagon, color=black];
2837[label="203.104.188.120;d;1pkt 1fpkt", shape=hexagon, color=black];
3281[label="173.32.94.191;d;1pkt 1fpkt", shape=hexagon, color=black];
3511[label="202.8.65.131;d;1pkt 1fpkt", shape=hexagon, color=black];
5369[label="203.18.4.170;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5612[label="185.191.208.201;906pkt 906fpkt", shape=pentagon, color=darkviolet];
6889[label="203.18.4.170;2pkt 2fpkt", shape=invtriangle, color=brown];
7044[label="185.191.208.201;905pkt 905fpkt", shape=invtriangle, color=brown];
7857[label="203.18.4.170;1pkt 1fpkt", shape=invhouse, color=bisque];
7954[label="185.191.208.201;905pkt 905fpkt", shape=invhouse, color=bisque];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.208.201:6257, *:6257}[94.163%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (94.8141%)&lt;BR/&gt; 6699: (0.985663%)&lt;BR/&gt; 8888: (0.369624%)&lt;BR/&gt; 7000: (0.31362%)&lt;BR/&gt; 16257: (0.280018%)&gt;];
}
103--698[label="0.333333;1pkt 1fpkt"];
103--1211[label="1;1pkt 1fpkt"];
103--1596[label="0.666667;2pkt 2fpkt"];
103--2695[label="0.333333;1pkt 1fpkt"];
103--3950[label="0.666667;2pkt 2fpkt"];
103--5369[label="1;2pkt 2fpkt"];
103--5612[label="0.333333;1pkt 1fpkt"];
103--6889[label="1;2pkt 2fpkt"];
103--7044[label="0.333333;1pkt 1fpkt"];
103--7857[label="1;1pkt 1fpkt"];
103--7954[label="0.333333;1pkt 1fpkt"];
698--1070[label="1;2pkt 2fpkt"];
698--1179[label="0.333333;1pkt 1fpkt"];
698--1211[label="1;1pkt 1fpkt"];
698--1244[label="1;1pkt 1fpkt"];
698--1458[label="1;1pkt 1fpkt"];
698--1687[label="1;1pkt 1fpkt"];
698--1773[label="0.5;1pkt 1fpkt"];
698--1988[label="1;1pkt 1fpkt"];
698--2288[label="1;2pkt 2fpkt"];
698--2518[label="1;2pkt 2fpkt"];
698--2695[label="1;862pkt 862fpkt"];
698--2783[label="1;2pkt 2fpkt"];
698--2837[label="1;1pkt 1fpkt"];
698--3281[label="1;1pkt 1fpkt"];
698--3511[label="1;1pkt 1fpkt"];
698--3948[label="0.336427;290pkt 290fpkt"];
698--3952[label="0.393271;339pkt 339fpkt"];
698--3961[label="0.336427;290pkt 290fpkt"];
698--3963[label="0.393271;339pkt 339fpkt"];
698--3971[label="0.336427;290pkt 290fpkt"];
698--3973[label="0.393271;339pkt 339fpkt"];
698--5612[label="1;862pkt 862fpkt"];
698--7044[label="0.99884;861pkt 861fpkt"];
698--7954[label="0.99884;861pkt 861fpkt"];
1070--2695[label="1;2pkt 2fpkt"];
1070--2783[label="1;2pkt 2fpkt"];
1070--3948[label="0.5;1pkt 1fpkt"];
1070--3952[label="0.5;1pkt 1fpkt"];
1070--3961[label="0.5;1pkt 1fpkt"];
1070--3963[label="0.5;1pkt 1fpkt"];
1070--3971[label="0.5;1pkt 1fpkt"];
1070--3973[label="0.5;1pkt 1fpkt"];
1070--5612[label="1;2pkt 2fpkt"];
1070--7044[label="1;2pkt 2fpkt"];
1070--7954[label="1;2pkt 2fpkt"];
1211--2695[label="1;1pkt 1fpkt"];
1211--5612[label="1;1pkt 1fpkt"];
1211--7044[label="1;1pkt 1fpkt"];
1211--7954[label="1;1pkt 1fpkt"];
1244--2695[label="1;1pkt 1fpkt"];
1244--2837[label="1;1pkt 1fpkt"];
1244--5612[label="1;1pkt 1fpkt"];
1244--7044[label="1;1pkt 1fpkt"];
1244--7954[label="1;1pkt 1fpkt"];
1458--2695[label="1;1pkt 1fpkt"];
1458--3511[label="1;1pkt 1fpkt"];
1458--5612[label="1;1pkt 1fpkt"];
1458--7044[label="1;1pkt 1fpkt"];
1458--7954[label="1;1pkt 1fpkt"];
1687--2695[label="1;1pkt 1fpkt"];
1687--5612[label="1;1pkt 1fpkt"];
1687--7044[label="1;1pkt 1fpkt"];
1687--7954[label="1;1pkt 1fpkt"];
1988--2695[label="1;1pkt 1fpkt"];
1988--3281[label="1;1pkt 1fpkt"];
1988--5612[label="1;1pkt 1fpkt"];
1988--7044[label="1;1pkt 1fpkt"];
1988--7954[label="1;1pkt 1fpkt"];
2288--2695[label="1;2pkt 2fpkt"];
2288--5612[label="1;2pkt 2fpkt"];
2288--7044[label="1;2pkt 2fpkt"];
2288--7954[label="1;2pkt 2fpkt"];
2518--2695[label="1;2pkt 2fpkt"];
2518--5612[label="1;2pkt 2fpkt"];
2518--7044[label="1;2pkt 2fpkt"];
2518--7954[label="1;2pkt 2fpkt"];
2695--2783[label="1;2pkt 2fpkt"];
2695--2837[label="1;1pkt 1fpkt"];
2695--3281[label="1;1pkt 1fpkt"];
2695--3511[label="1;1pkt 1fpkt"];
2695--3948[label="0.336427;290pkt 290fpkt"];
2695--3952[label="0.393271;339pkt 339fpkt"];
2695--3961[label="0.336427;290pkt 290fpkt"];
2695--3963[label="0.393271;339pkt 339fpkt"];
2695--3971[label="0.336427;290pkt 290fpkt"];
2695--3973[label="0.393271;339pkt 339fpkt"];
2695--5612[label="1;862pkt 862fpkt"];
2695--7044[label="0.99884;861pkt 861fpkt"];
2695--7954[label="0.99884;861pkt 861fpkt"];
2783--3948[label="0.5;1pkt 1fpkt"];
2783--3952[label="0.5;1pkt 1fpkt"];
2783--3961[label="0.5;1pkt 1fpkt"];
2783--3963[label="0.5;1pkt 1fpkt"];
2783--3971[label="0.5;1pkt 1fpkt"];
2783--3973[label="0.5;1pkt 1fpkt"];
2783--5612[label="1;2pkt 2fpkt"];
2783--7044[label="1;2pkt 2fpkt"];
2783--7954[label="1;2pkt 2fpkt"];
2837--5612[label="1;1pkt 1fpkt"];
2837--7044[label="1;1pkt 1fpkt"];
2837--7954[label="1;1pkt 1fpkt"];
3281--5612[label="1;1pkt 1fpkt"];
3281--7044[label="1;1pkt 1fpkt"];
3281--7954[label="1;1pkt 1fpkt"];
3511--5612[label="1;1pkt 1fpkt"];
3511--7044[label="1;1pkt 1fpkt"];
3511--7954[label="1;1pkt 1fpkt"];
5369--6889[label="1;2pkt 2fpkt"];
5369--7857[label="1;1pkt 1fpkt"];
5612--7044[label="1;905pkt 905fpkt"];
5612--7954[label="1;905pkt 905fpkt"];
6889--7857[label="1;1pkt 1fpkt"];
7044--7954[label="1;905pkt 905fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="185.191.208.201" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,503,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
412[label="211.104.210.242d;1pkt 1fpkt", shape=rectangle, color=red];
956[label="167.8.143.212;d;99pkt 99fpkt", shape=diamond, color=yellow];
990[label="161.238.33.73;d;33pkt 33fpkt", shape=diamond, color=yellow];
1040[label="203.204.52.9;s;652pkt 652fpkt", shape=diamond, color=yellow];
1587[label="161.238.248.75;d;13pkt 13fpkt", shape=diamond, color=yellow];
1602[label="161.238.38.242;d;28pkt 28fpkt", shape=diamond, color=yellow];
2097[label="161.238.38.21;d;52pkt 52fpkt", shape=diamond, color=yellow];
2128[label="161.238.77.163;d;39pkt 39fpkt", shape=diamond, color=yellow];
2275[label="185.191.88.102;d;23pkt 23fpkt", shape=diamond, color=yellow];
2430[label="141.98.102.130;d;3pkt 3fpkt", shape=diamond, color=yellow];
2492[label="141.98.173.232;d;19pkt 19fpkt", shape=diamond, color=yellow];
2528[label="2.149.199.224;s;1pkt 1fpkt", shape=diamond, color=yellow];
2541[label="85.41.20.154;s;11pkt 11fpkt", shape=diamond, color=yellow];
2752[label="161.238.33.73;d;33pkt 33fpkt", shape=hexagon, color=black];
3005[label="161.238.38.242;d;27pkt 27fpkt", shape=hexagon, color=black];
3365[label="203.204.52.9;s;489pkt 489fpkt", shape=hexagon, color=black];
3746[label="141.98.173.232;d;19pkt 19fpkt", shape=hexagon, color=black];
3844[label="161.238.33.73;d;11pkt 11fpkt", shape=polygon, color=gold];
3871[label="161.238.38.242;d;25pkt 25fpkt", shape=polygon, color=gold];
4036[label="195.9.56.6;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4062[label="203.204.52.9;710pkt 710fpkt", shape=pentagon, color=darkviolet];
4869[label="86.210.226.104;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5745[label="2.149.199.224;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5983[label="195.9.56.6;13pkt 13fpkt", shape=invtriangle, color=brown];
6006[label="203.204.52.9;710pkt 710fpkt", shape=invtriangle, color=brown];
7294[label="195.9.56.6;14pkt 14fpkt", shape=invhouse, color=bisque];
7309[label="203.204.52.9;710pkt 710fpkt", shape=invhouse, color=bisque];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.204.52.9:80, *:*}[71.2991%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7738%)&lt;BR/&gt; 0: (0.239489%)&lt;BR/&gt; 1304: (0.212879%)&lt;BR/&gt; 3523: (0.172964%)&lt;BR/&gt; 1050: (0.172964%)&gt;];
}
412--1040[label="1;1pkt 1fpkt"];
412--1602[label="1;1pkt 1fpkt"];
412--4062[label="1;1pkt 1fpkt"];
412--6006[label="1;1pkt 1fpkt"];
412--7309[label="1;1pkt 1fpkt"];
956--999[label="1;40pkt 40fpkt"];
956--1040[label="0.030303;3pkt 3fpkt"];
956--2555[label="0.111111;1pkt 1fpkt"];
956--2591[label="0.242424;24pkt 24fpkt"];
956--2885[label="1;39pkt 39fpkt"];
956--3365[label="0.030303;3pkt 3fpkt"];
956--3707[label="0.242424;24pkt 24fpkt"];
956--4062[label="0.030303;3pkt 3fpkt"];
956--4869[label="0.111111;1pkt 1fpkt"];
956--5434[label="0.321429;18pkt 18fpkt"];
956--5873[label="0.242424;24pkt 24fpkt"];
956--6006[label="0.030303;3pkt 3fpkt"];
956--6933[label="0.321429;18pkt 18fpkt"];
956--7227[label="0.242424;24pkt 24fpkt"];
956--7309[label="0.030303;3pkt 3fpkt"];
956--8071[label="0.242424;24pkt 24fpkt"];
990--1040[label="0.0606061;2pkt 2fpkt"];
990--2541[label="1;11pkt 11fpkt"];
990--2752[label="1;33pkt 33fpkt"];
990--3844[label="1;11pkt 11fpkt"];
990--4062[label="0.0606061;2pkt 2fpkt"];
990--4487[label="0.454545;10pkt 10fpkt"];
990--6006[label="0.0606061;2pkt 2fpkt"];
990--7309[label="0.0606061;2pkt 2fpkt"];
1040--1317[label="0.00480769;1pkt 1fpkt"];
1040--1531[label="0.133803;19pkt 19fpkt"];
1040--1587[label="0.461538;6pkt 6fpkt"];
1040--1590[label="0.108911;22pkt 22fpkt"];
1040--1592[label="0.0434783;1pkt 1fpkt"];
1040--1602[label="0.392857;11pkt 11fpkt"];
1040--1840[label="0.0122699;2pkt 2fpkt"];
1040--2097[label="0.0769231;4pkt 4fpkt"];
1040--2128[label="0.0512821;2pkt 2fpkt"];
1040--2211[label="0.134328;9pkt 9fpkt"];
1040--2275[label="0.217391;5pkt 5fpkt"];
1040--2416[label="0.121951;5pkt 5fpkt"];
1040--2430[label="0.666667;2pkt 2fpkt"];
1040--2492[label="0.0526316;1pkt 1fpkt"];
1040--2752[label="0.0606061;2pkt 2fpkt"];
1040--3005[label="0.37037;10pkt 10fpkt"];
1040--3117[label="0.191781;14pkt 14fpkt"];
1040--3365[label="1;489pkt 489fpkt"];
1040--3371[label="0.0843558;55pkt 55fpkt"];
1040--3423[label="0.15;9pkt 9fpkt"];
1040--3607[label="0.0512821;2pkt 2fpkt"];
1040--3695[label="0.00480769;1pkt 1fpkt"];
1040--3746[label="0.0526316;1pkt 1fpkt"];
1040--3844[label="0.181818;2pkt 2fpkt"];
1040--3871[label="0.32;8pkt 8fpkt"];
1040--3950[label="0.108896;71pkt 71fpkt"];
1040--4062[label="1;652pkt 652fpkt"];
1040--6006[label="1;652pkt 652fpkt"];
1040--7309[label="1;652pkt 652fpkt"];
1587--1611[label="0.5;1pkt 1fpkt"];
1587--2246[label="0.230769;3pkt 3fpkt"];
1587--3147[label="1;7pkt 7fpkt"];
1587--3365[label="0.461538;6pkt 6fpkt"];
1587--3950[label="0.0769231;1pkt 1fpkt"];
1587--4062[label="0.461538;6pkt 6fpkt"];
1587--4949[label="0.230769;3pkt 3fpkt"];
1587--6006[label="0.461538;6pkt 6fpkt"];
1587--6592[label="0.230769;3pkt 3fpkt"];
1587--7309[label="0.461538;6pkt 6fpkt"];
1602--1830[label="0.107143;3pkt 3fpkt"];
1602--3005[label="1;27pkt 27fpkt"];
1602--3160[label="0.107143;3pkt 3fpkt"];
1602--3365[label="0.321429;9pkt 9fpkt"];
1602--3845[label="0.107143;3pkt 3fpkt"];
1602--3871[label="1;25pkt 25fpkt"];
1602--3950[label="0.0714286;2pkt 2fpkt"];
1602--4036[label="0.923077;12pkt 12fpkt"];
1602--4062[label="0.392857;11pkt 11fpkt"];
1602--5983[label="0.923077;12pkt 12fpkt"];
1602--6006[label="0.392857;11pkt 11fpkt"];
1602--7294[label="0.857143;12pkt 12fpkt"];
1602--7309[label="0.392857;11pkt 11fpkt"];
2097--2166[label="0.0576923;3pkt 3fpkt"];
2097--2422[label="0.0196078;1pkt 1fpkt"];
2097--3365[label="0.0769231;4pkt 4fpkt"];
2097--4062[label="0.0769231;4pkt 4fpkt"];
2097--5268[label="0.0192308;1pkt 1fpkt"];
2097--5434[label="0.0384615;2pkt 2fpkt"];
2097--5727[label="0.576923;30pkt 30fpkt"];
2097--6006[label="0.0769231;4pkt 4fpkt"];
2097--6933[label="0.0384615;2pkt 2fpkt"];
2097--7126[label="0.576923;30pkt 30fpkt"];
2097--7309[label="0.0769231;4pkt 4fpkt"];
2128--2166[label="0.0512821;2pkt 2fpkt"];
2128--2201[label="0.025641;1pkt 1fpkt"];
2128--2219[label="0.025641;1pkt 1fpkt"];
2128--2257[label="0.025641;1pkt 1fpkt"];
2128--2457[label="0.025641;1pkt 1fpkt"];
2128--3297[label="0.0512821;2pkt 2fpkt"];
2128--3365[label="0.0512821;2pkt 2fpkt"];
2128--3420[label="0.025641;1pkt 1fpkt"];
2128--3450[label="0.025641;1pkt 1fpkt"];
2128--3607[label="1;39pkt 39fpkt"];
2128--4062[label="0.0512821;2pkt 2fpkt"];
2128--4096[label="0.025641;1pkt 1fpkt"];
2128--4179[label="0.0333333;1pkt 1fpkt"];
2128--4530[label="0.025641;1pkt 1fpkt"];
2128--4716[label="0.0434783;1pkt 1fpkt"];
2128--5268[label="0.025641;1pkt 1fpkt"];
2128--5420[label="0.04;1pkt 1fpkt"];
2128--5594[label="0.025641;1pkt 1fpkt"];
2128--5699[label="0.025641;1pkt 1fpkt"];
2128--5743[label="0.025641;1pkt 1fpkt"];
2128--6006[label="0.0512821;2pkt 2fpkt"];
2128--6089[label="0.0333333;1pkt 1fpkt"];
2128--6322[label="0.025641;1pkt 1fpkt"];
2128--6440[label="0.0434783;1pkt 1fpkt"];
2128--6924[label="0.0416667;1pkt 1fpkt"];
2128--7032[label="0.025641;1pkt 1fpkt"];
2128--7108[label="0.025641;1pkt 1fpkt"];
2128--7137[label="0.025641;1pkt 1fpkt"];
2128--7309[label="0.0512821;2pkt 2fpkt"];
2128--7356[label="0.0344828;1pkt 1fpkt"];
2128--7879[label="0.04;1pkt 1fpkt"];
2128--7946[label="0.025641;1pkt 1fpkt"];
2128--7993[label="0.025641;1pkt 1fpkt"];
2275--2326[label="1;6pkt 6fpkt"];
2275--3365[label="0.217391;5pkt 5fpkt"];
2275--3950[label="0.0869565;2pkt 2fpkt"];
2275--4062[label="0.217391;5pkt 5fpkt"];
2275--4074[label="1;1pkt 1fpkt"];
2275--6006[label="0.217391;5pkt 5fpkt"];
2275--6013[label="1;2pkt 2fpkt"];
2275--7309[label="0.217391;5pkt 5fpkt"];
2275--7314[label="1;1pkt 1fpkt"];
2430--2520[label="1;1pkt 1fpkt"];
2430--3365[label="0.666667;2pkt 2fpkt"];
2430--3627[label="1;1pkt 1fpkt"];
2430--4062[label="0.666667;2pkt 2fpkt"];
2430--6006[label="0.666667;2pkt 2fpkt"];
2430--7309[label="0.666667;2pkt 2fpkt"];
2492--2528[label="1;1pkt 1fpkt"];
2492--3365[label="0.0526316;1pkt 1fpkt"];
2492--3378[label="0.105263;2pkt 2fpkt"];
2492--3746[label="1;19pkt 19fpkt"];
2492--4062[label="0.0526316;1pkt 1fpkt"];
2492--4079[label="0.210526;4pkt 4fpkt"];
2492--4729[label="0.157895;3pkt 3fpkt"];
2492--4804[label="0.263158;5pkt 5fpkt"];
2492--5178[label="0.105263;2pkt 2fpkt"];
2492--5745[label="1;1pkt 1fpkt"];
2492--5792[label="0.105263;2pkt 2fpkt"];
2492--6006[label="0.0526316;1pkt 1fpkt"];
2492--6449[label="0.157895;3pkt 3fpkt"];
2492--6498[label="0.263158;5pkt 5fpkt"];
2492--7168[label="0.105263;2pkt 2fpkt"];
2492--7309[label="0.0526316;1pkt 1fpkt"];
2492--7604[label="0.263158;5pkt 5fpkt"];
2492--8027[label="0.105263;2pkt 2fpkt"];
2528--3746[label="1;1pkt 1fpkt"];
2528--5745[label="1;1pkt 1fpkt"];
2541--2752[label="1;11pkt 11fpkt"];
2541--3844[label="0.636364;7pkt 7fpkt"];
2752--3844[label="1;11pkt 11fpkt"];
2752--4062[label="0.0606061;2pkt 2fpkt"];
2752--4487[label="0.454545;10pkt 10fpkt"];
2752--6006[label="0.0606061;2pkt 2fpkt"];
2752--7309[label="0.0606061;2pkt 2fpkt"];
3005--3160[label="0.111111;3pkt 3fpkt"];
3005--3365[label="0.333333;9pkt 9fpkt"];
3005--3845[label="0.111111;3pkt 3fpkt"];
3005--3871[label="1;25pkt 25fpkt"];
3005--3950[label="0.0740741;2pkt 2fpkt"];
3005--4036[label="0.923077;12pkt 12fpkt"];
3005--4062[label="0.37037;10pkt 10fpkt"];
3005--5983[label="0.923077;12pkt 12fpkt"];
3005--6006[label="0.37037;10pkt 10fpkt"];
3005--7294[label="0.857143;12pkt 12fpkt"];
3005--7309[label="0.37037;10pkt 10fpkt"];
3365--3371[label="0.112474;55pkt 55fpkt"];
3365--3423[label="0.15;9pkt 9fpkt"];
3365--3607[label="0.0512821;2pkt 2fpkt"];
3365--3695[label="0.00480769;1pkt 1fpkt"];
3365--3746[label="0.0526316;1pkt 1fpkt"];
3365--3871[label="0.32;8pkt 8fpkt"];
3365--3950[label="0.145194;71pkt 71fpkt"];
3365--4062[label="1;489pkt 489fpkt"];
3365--6006[label="1;489pkt 489fpkt"];
3365--7309[label="1;489pkt 489fpkt"];
3746--4062[label="0.0526316;1pkt 1fpkt"];
3746--4079[label="0.210526;4pkt 4fpkt"];
3746--4729[label="0.157895;3pkt 3fpkt"];
3746--4804[label="0.263158;5pkt 5fpkt"];
3746--5178[label="0.105263;2pkt 2fpkt"];
3746--5745[label="1;1pkt 1fpkt"];
3746--5792[label="0.105263;2pkt 2fpkt"];
3746--6006[label="0.0526316;1pkt 1fpkt"];
3746--6449[label="0.157895;3pkt 3fpkt"];
3746--6498[label="0.263158;5pkt 5fpkt"];
3746--7168[label="0.105263;2pkt 2fpkt"];
3746--7309[label="0.0526316;1pkt 1fpkt"];
3746--7604[label="0.263158;5pkt 5fpkt"];
3746--8027[label="0.105263;2pkt 2fpkt"];
3844--4062[label="0.181818;2pkt 2fpkt"];
3844--6006[label="0.181818;2pkt 2fpkt"];
3844--7309[label="0.181818;2pkt 2fpkt"];
3871--3950[label="0.08;2pkt 2fpkt"];
3871--4036[label="0.923077;12pkt 12fpkt"];
3871--4062[label="0.32;8pkt 8fpkt"];
3871--5983[label="0.923077;12pkt 12fpkt"];
3871--6006[label="0.32;8pkt 8fpkt"];
3871--7294[label="0.857143;12pkt 12fpkt"];
3871--7309[label="0.32;8pkt 8fpkt"];
4036--5983[label="1;13pkt 13fpkt"];
4036--7294[label="1;13pkt 13fpkt"];
4062--6006[label="1;710pkt 710fpkt"];
4062--7309[label="1;710pkt 710fpkt"];
4869--6540[label="1;8pkt 8fpkt"];
5983--7294[label="1;13pkt 13fpkt"];
6006--7309[label="1;710pkt 710fpkt"];
</description>
    <slice>
      <filter src_ip="203.204.52.9" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
922[label="213.91.100.173;d;41pkt 41fpkt", shape=diamond, color=yellow];
928[label="1.54.35.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
1507[label="200.101.131.186;s;1pkt 1fpkt", shape=diamond, color=yellow];
1632[label="201.71.140.44;s;2pkt 2fpkt", shape=diamond, color=yellow];
1638[label="201.120.42.63;s;2pkt 2fpkt", shape=diamond, color=yellow];
1843[label="200.83.119.93;s;6pkt 6fpkt", shape=diamond, color=yellow];
2738[label="213.91.100.173;d;34pkt 34fpkt", shape=hexagon, color=black];
2844[label="1.54.35.40;s;1pkt 1fpkt", shape=hexagon, color=black];
3024[label="201.71.140.44;s;2pkt 2fpkt", shape=hexagon, color=black];
3107[label="200.101.131.186;s;1pkt 1fpkt", shape=hexagon, color=black];
3832[label="200.101.131.186;s;1pkt 1fpkt", shape=polygon, color=gold];
4514[label="201.120.42.63;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4792[label="200.83.119.93;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6311[label="201.120.42.63;3pkt 3fpkt", shape=invtriangle, color=brown];
7414[label="1.54.35.40;1pkt 1fpkt", shape=invhouse, color=bisque];
7500[label="201.120.42.63;4pkt 4fpkt", shape=invhouse, color=bisque];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 213.91.100.173:7743}[48.7805%]&lt;BR/&gt;{*:7743, 213.91.100.173:*}[46.3415%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (48.6111%)&lt;BR/&gt; 3520: (2.77778%)&lt;BR/&gt; 14058: (2.31481%)&lt;BR/&gt; 3560: (2.31481%)&lt;BR/&gt; 2792: (2.31481%)&gt;];
}
922--928[label="1;1pkt 1fpkt"];
922--1507[label="1;1pkt 1fpkt"];
922--1632[label="1;2pkt 2fpkt"];
922--1638[label="1;2pkt 2fpkt"];
922--1843[label="1;6pkt 6fpkt"];
922--2738[label="1;34pkt 34fpkt"];
922--2844[label="1;1pkt 1fpkt"];
922--3024[label="1;2pkt 2fpkt"];
922--3107[label="1;1pkt 1fpkt"];
922--3832[label="1;1pkt 1fpkt"];
922--4142[label="0.8;4pkt 4fpkt"];
922--4514[label="1;3pkt 3fpkt"];
922--4792[label="1;5pkt 5fpkt"];
922--5480[label="0.8;4pkt 4fpkt"];
922--6066[label="0.8;4pkt 4fpkt"];
922--6311[label="1;3pkt 3fpkt"];
922--6956[label="0.8;4pkt 4fpkt"];
922--7414[label="1;1pkt 1fpkt"];
922--7500[label="1;4pkt 4fpkt"];
928--2738[label="1;1pkt 1fpkt"];
928--2844[label="1;1pkt 1fpkt"];
928--7414[label="1;1pkt 1fpkt"];
1507--2738[label="1;1pkt 1fpkt"];
1507--3107[label="1;1pkt 1fpkt"];
1507--3832[label="1;1pkt 1fpkt"];
1632--2738[label="1;2pkt 2fpkt"];
1632--3024[label="1;2pkt 2fpkt"];
1638--2738[label="1;2pkt 2fpkt"];
1638--4514[label="0.5;1pkt 1fpkt"];
1638--6311[label="0.5;1pkt 1fpkt"];
1638--7500[label="1;2pkt 2fpkt"];
1843--2738[label="1;6pkt 6fpkt"];
1843--4792[label="1;5pkt 5fpkt"];
2738--2844[label="1;1pkt 1fpkt"];
2738--3024[label="1;2pkt 2fpkt"];
2738--3107[label="1;1pkt 1fpkt"];
2738--3832[label="1;1pkt 1fpkt"];
2738--4142[label="0.8;4pkt 4fpkt"];
2738--4514[label="1;3pkt 3fpkt"];
2738--4792[label="1;5pkt 5fpkt"];
2738--6066[label="0.8;4pkt 4fpkt"];
2738--6311[label="1;3pkt 3fpkt"];
2738--7414[label="1;1pkt 1fpkt"];
2738--7500[label="1;4pkt 4fpkt"];
2844--7414[label="1;1pkt 1fpkt"];
3107--3832[label="1;1pkt 1fpkt"];
4514--6311[label="1;3pkt 3fpkt"];
4514--7500[label="1;3pkt 3fpkt"];
6311--7500[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="213.91.100.173" src_port="7743"/>
      <filter dst_ip="213.91.100.173" dst_port="7743"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
984[label="209.83.194.54;d;2pkt 2fpkt", shape=diamond, color=yellow];
1017[label="141.98.31.128;s;7pkt 7fpkt", shape=diamond, color=yellow];
1639[label="85.41.141.154;d;6pkt 6fpkt", shape=diamond, color=yellow];
2751[label="209.83.194.54;d;2pkt 2fpkt", shape=hexagon, color=black];
3037[label="141.98.31.128;s;7pkt 7fpkt", shape=hexagon, color=black];
5025[label="141.98.31.128;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6648[label="141.98.31.128;7pkt 7fpkt", shape=invtriangle, color=brown];
7701[label="141.98.31.128;6pkt 6fpkt", shape=invhouse, color=bisque];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.169.121:*, 85.41.141.154:80}[36.3636%]&lt;BR/&gt;{141.98.31.128:*, *:21}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (24.4186%)&lt;BR/&gt; 61234: (8.13953%)&lt;BR/&gt; 61233: (8.13953%)&lt;BR/&gt; 16093: (8.13953%)&lt;BR/&gt; 61230: (6.97674%)&gt;];
}
984--1017[label="1;2pkt 2fpkt"];
984--2751[label="1;2pkt 2fpkt"];
984--3037[label="1;2pkt 2fpkt"];
984--5025[label="1;2pkt 2fpkt"];
984--6648[label="1;2pkt 2fpkt"];
984--7701[label="1;2pkt 2fpkt"];
1017--1639[label="0.333333;2pkt 2fpkt"];
1017--2751[label="1;2pkt 2fpkt"];
1017--3037[label="1;7pkt 7fpkt"];
1017--3944[label="0.142857;1pkt 1fpkt"];
1017--3957[label="0.142857;1pkt 1fpkt"];
1017--3967[label="0.142857;1pkt 1fpkt"];
1017--5025[label="1;6pkt 6fpkt"];
1017--6648[label="1;7pkt 7fpkt"];
1017--7701[label="1;6pkt 6fpkt"];
1639--3037[label="0.333333;2pkt 2fpkt"];
1639--3944[label="0.166667;1pkt 1fpkt"];
1639--3957[label="0.166667;1pkt 1fpkt"];
1639--3967[label="0.166667;1pkt 1fpkt"];
1639--4997[label="0.666667;4pkt 4fpkt"];
1639--5025[label="0.166667;1pkt 1fpkt"];
1639--6625[label="0.666667;4pkt 4fpkt"];
1639--6648[label="0.333333;2pkt 2fpkt"];
1639--7684[label="0.666667;4pkt 4fpkt"];
1639--7701[label="0.166667;1pkt 1fpkt"];
2751--3037[label="1;2pkt 2fpkt"];
2751--5025[label="1;2pkt 2fpkt"];
2751--6648[label="1;2pkt 2fpkt"];
2751--7701[label="1;2pkt 2fpkt"];
3037--3944[label="0.142857;1pkt 1fpkt"];
3037--3957[label="0.142857;1pkt 1fpkt"];
3037--3967[label="0.142857;1pkt 1fpkt"];
3037--5025[label="1;6pkt 6fpkt"];
3037--6648[label="1;7pkt 7fpkt"];
3037--7701[label="1;6pkt 6fpkt"];
5025--6648[label="1;6pkt 6fpkt"];
5025--7701[label="1;6pkt 6fpkt"];
6648--7701[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="21" src_ip="141.98.31.128"/>
      <filter dst_ip="85.41.141.154" dst_port="80" src_ip="212.24.169.121"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989075,2.1681,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
12[label="167.8.143.23s;1pkt 1fpkt", shape=rectangle, color=red];
1405[label="167.8.143.23;s;9pkt 9fpkt", shape=diamond, color=yellow];
1640[label="43.12.217.159;d;1pkt 1fpkt", shape=diamond, color=yellow];
3173[label="43.12.217.159;d;1pkt 1fpkt", shape=hexagon, color=black];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.143.23:0, *:0}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (58.3333%)&lt;BR/&gt; 8864: (16.6667%)&lt;BR/&gt; 1046: (16.6667%)&lt;BR/&gt; 1863: (4.16667%)&lt;BR/&gt; 1029: (4.16667%)&gt;];
}
12--1405[label="1;1pkt 1fpkt"];
12--1640[label="1;1pkt 1fpkt"];
12--3173[label="1;1pkt 1fpkt"];
1405--1640[label="1;1pkt 1fpkt"];
1405--3173[label="1;1pkt 1fpkt"];
1640--3173[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="167.8.143.23"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989075,2.1681,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
98[label="43.12.217.159s;1pkt 1fpkt", shape=rectangle, color=red];
396[label="194.207.79.23d;1pkt 1fpkt", shape=rectangle, color=red];
591[label="167.8.143.23;d;9pkt 9fpkt", shape=diamond, color=yellow];
1641[label="43.12.217.159;s;1pkt 1fpkt", shape=diamond, color=yellow];
3334[label="43.12.217.159;s;1pkt 1fpkt", shape=hexagon, color=black];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 167.8.143.23:6257}[66.6667%]&lt;BR/&gt;{*:*, 167.8.143.23:8864}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (46.1538%)&lt;BR/&gt; 8864: (26.9231%)&lt;BR/&gt; 1046: (19.2308%)&lt;BR/&gt; 1863: (3.84615%)&lt;BR/&gt; 1029: (3.84615%)&gt;];
}
98--396[label="1;1pkt 1fpkt"];
98--591[label="1;1pkt 1fpkt"];
98--1641[label="1;1pkt 1fpkt"];
98--3334[label="1;1pkt 1fpkt"];
396--591[label="1;1pkt 1fpkt"];
396--1641[label="1;1pkt 1fpkt"];
396--3334[label="1;1pkt 1fpkt"];
591--592[label="1;1pkt 1fpkt"];
591--1641[label="1;1pkt 1fpkt"];
591--2666[label="1;1pkt 1fpkt"];
591--3334[label="1;1pkt 1fpkt"];
591--3769[label="1;1pkt 1fpkt"];
591--3948[label="0.555556;5pkt 5fpkt"];
591--3961[label="0.555556;5pkt 5fpkt"];
591--3971[label="0.555556;5pkt 5fpkt"];
1641--3334[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.143.23" dst_port="8864"/>
      <filter dst_ip="167.8.143.23" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35357,2.21616,503,1 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
191[label="220.24.165.169d;1pkt 1fpkt", shape=rectangle, color=red];
1007[label="220.24.165.169;d;9pkt 9fpkt", shape=diamond, color=yellow];
1595[label="85.34.117.167;d;185pkt 185fpkt", shape=diamond, color=yellow];
1657[label="161.238.19.89;s;67pkt 67fpkt", shape=diamond, color=yellow];
2889[label="220.24.165.169;d;9pkt 9fpkt", shape=hexagon, color=black];
3028[label="161.238.19.89;s;67pkt 67fpkt", shape=hexagon, color=black];
3722[label="85.34.117.167;d;185pkt 185fpkt", shape=hexagon, color=black];
3819[label="161.238.19.89;s;66pkt 66fpkt", shape=polygon, color=gold];
4761[label="161.238.19.89;66pkt 66fpkt", shape=pentagon, color=darkviolet];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.19.89:*, *:80}[28.0851%]&lt;BR/&gt;{161.238.42.4:*, 85.34.117.167:80}[21.2766%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6947%)&lt;BR/&gt; 1170: (0.763359%)&lt;BR/&gt; 1169: (0.763359%)&lt;BR/&gt; 1167: (0.763359%)&lt;BR/&gt; 1142: (0.763359%)&gt;];
}
191--1007[label="1;1pkt 1fpkt"];
191--1657[label="1;1pkt 1fpkt"];
191--2889[label="1;1pkt 1fpkt"];
191--3028[label="1;1pkt 1fpkt"];
191--3819[label="1;1pkt 1fpkt"];
191--3946[label="1;1pkt 1fpkt"];
191--3959[label="1;1pkt 1fpkt"];
191--3969[label="1;1pkt 1fpkt"];
191--4761[label="1;1pkt 1fpkt"];
1007--1563[label="0.222222;2pkt 2fpkt"];
1007--1654[label="1;2pkt 2fpkt"];
1007--1657[label="0.111111;1pkt 1fpkt"];
1007--1671[label="0.222222;2pkt 2fpkt"];
1007--1877[label="0.111111;1pkt 1fpkt"];
1007--2682[label="0.111111;1pkt 1fpkt"];
1007--2889[label="1;9pkt 9fpkt"];
1007--3027[label="1;2pkt 2fpkt"];
1007--3028[label="0.111111;1pkt 1fpkt"];
1007--3344[label="0.111111;1pkt 1fpkt"];
1007--3597[label="0.222222;2pkt 2fpkt"];
1007--3819[label="0.111111;1pkt 1fpkt"];
1007--3849[label="0.111111;1pkt 1fpkt"];
1007--3946[label="0.444444;4pkt 4fpkt"];
1007--3959[label="0.444444;4pkt 4fpkt"];
1007--3969[label="0.444444;4pkt 4fpkt"];
1007--4720[label="1;1pkt 1fpkt"];
1007--4761[label="0.111111;1pkt 1fpkt"];
1007--4895[label="0.111111;1pkt 1fpkt"];
1007--4977[label="0.222222;2pkt 2fpkt"];
1007--5088[label="0.222222;2pkt 2fpkt"];
1007--6442[label="1;2pkt 2fpkt"];
1007--6695[label="0.222222;2pkt 2fpkt"];
1007--6846[label="0.111111;1pkt 1fpkt"];
1007--7731[label="0.222222;2pkt 2fpkt"];
1007--7830[label="0.111111;1pkt 1fpkt"];
1595--1657[label="0.373134;25pkt 25fpkt"];
1595--1662[label="0.242188;31pkt 31fpkt"];
1595--1815[label="0.588235;50pkt 50fpkt"];
1595--2626[label="0.393443;24pkt 24fpkt"];
1595--2682[label="0.0648649;12pkt 12fpkt"];
1595--2800[label="0.00540541;1pkt 1fpkt"];
1595--3028[label="0.373134;25pkt 25fpkt"];
1595--3156[label="0.430233;37pkt 37fpkt"];
1595--3305[label="0.588235;50pkt 50fpkt"];
1595--3722[label="1;185pkt 185fpkt"];
1595--3819[label="0.378788;25pkt 25fpkt"];
1595--3849[label="0.0648649;12pkt 12fpkt"];
1595--3946[label="0.0108108;2pkt 2fpkt"];
1595--3959[label="0.0108108;2pkt 2fpkt"];
1595--3969[label="0.0108108;2pkt 2fpkt"];
1595--4016[label="0.588235;50pkt 50fpkt"];
1595--4761[label="0.378788;25pkt 25fpkt"];
1595--4895[label="0.0648649;12pkt 12fpkt"];
1595--5246[label="0.244094;31pkt 31fpkt"];
1595--5724[label="0.238095;5pkt 5fpkt"];
1595--5824[label="0.342857;24pkt 24fpkt"];
1595--5967[label="0.595238;50pkt 50fpkt"];
1595--7124[label="0.238095;5pkt 5fpkt"];
1595--7191[label="0.342857;24pkt 24fpkt"];
1595--8046[label="0.342857;24pkt 24fpkt"];
1657--1797[label="0.0298507;2pkt 2fpkt"];
1657--2032[label="0.0149254;1pkt 1fpkt"];
1657--2048[label="0.0149254;1pkt 1fpkt"];
1657--2456[label="0.0746269;5pkt 5fpkt"];
1657--2889[label="0.111111;1pkt 1fpkt"];
1657--3028[label="1;67pkt 67fpkt"];
1657--3145[label="0.0298507;2pkt 2fpkt"];
1657--3301[label="0.0166667;1pkt 1fpkt"];
1657--3396[label="0.133333;8pkt 8fpkt"];
1657--3722[label="0.373134;25pkt 25fpkt"];
1657--3819[label="1;66pkt 66fpkt"];
1657--3888[label="0.0166667;1pkt 1fpkt"];
1657--3946[label="0.19403;13pkt 13fpkt"];
1657--3959[label="0.19403;13pkt 13fpkt"];
1657--3969[label="0.19403;13pkt 13fpkt"];
1657--4761[label="1;66pkt 66fpkt"];
2889--3027[label="1;2pkt 2fpkt"];
2889--3028[label="0.111111;1pkt 1fpkt"];
2889--3344[label="0.111111;1pkt 1fpkt"];
2889--3597[label="0.222222;2pkt 2fpkt"];
2889--3819[label="0.111111;1pkt 1fpkt"];
2889--3849[label="0.111111;1pkt 1fpkt"];
2889--3946[label="0.444444;4pkt 4fpkt"];
2889--3959[label="0.444444;4pkt 4fpkt"];
2889--3969[label="0.444444;4pkt 4fpkt"];
2889--4720[label="1;1pkt 1fpkt"];
2889--4761[label="0.111111;1pkt 1fpkt"];
2889--4895[label="0.111111;1pkt 1fpkt"];
2889--4977[label="0.222222;2pkt 2fpkt"];
2889--5088[label="0.222222;2pkt 2fpkt"];
2889--6442[label="1;2pkt 2fpkt"];
2889--6695[label="0.222222;2pkt 2fpkt"];
2889--6846[label="0.111111;1pkt 1fpkt"];
2889--7731[label="0.222222;2pkt 2fpkt"];
2889--7830[label="0.111111;1pkt 1fpkt"];
3028--3145[label="0.0298507;2pkt 2fpkt"];
3028--3301[label="0.0166667;1pkt 1fpkt"];
3028--3396[label="0.133333;8pkt 8fpkt"];
3028--3722[label="0.373134;25pkt 25fpkt"];
3028--3819[label="1;66pkt 66fpkt"];
3028--3888[label="0.0166667;1pkt 1fpkt"];
3028--3946[label="0.19403;13pkt 13fpkt"];
3028--3959[label="0.19403;13pkt 13fpkt"];
3028--3969[label="0.19403;13pkt 13fpkt"];
3028--4761[label="1;66pkt 66fpkt"];
3722--3819[label="0.378788;25pkt 25fpkt"];
3722--3849[label="0.0648649;12pkt 12fpkt"];
3722--3946[label="0.0108108;2pkt 2fpkt"];
3722--3959[label="0.0108108;2pkt 2fpkt"];
3722--3969[label="0.0108108;2pkt 2fpkt"];
3722--4016[label="0.588235;50pkt 50fpkt"];
3722--4761[label="0.378788;25pkt 25fpkt"];
3722--4895[label="0.0648649;12pkt 12fpkt"];
3722--5246[label="0.244094;31pkt 31fpkt"];
3722--5724[label="0.238095;5pkt 5fpkt"];
3722--5824[label="0.342857;24pkt 24fpkt"];
3722--5967[label="0.595238;50pkt 50fpkt"];
3722--7124[label="0.238095;5pkt 5fpkt"];
3722--7191[label="0.342857;24pkt 24fpkt"];
3722--8046[label="0.342857;24pkt 24fpkt"];
3819--3888[label="0.0166667;1pkt 1fpkt"];
3819--3946[label="0.19697;13pkt 13fpkt"];
3819--3959[label="0.19697;13pkt 13fpkt"];
3819--3969[label="0.19697;13pkt 13fpkt"];
3819--4761[label="0.984848;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="161.238.19.89"/>
      <filter dst_ip="85.34.117.167" dst_port="80" src_ip="161.238.42.4"/>
    </slice>
    <from sec="1034226029" usec="0"/>
    <to sec="1034226608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989075,2.1681,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
19[label="167.8.142.28s;1pkt 1fpkt", shape=rectangle, color=red];
734[label="167.8.142.28;s;7pkt 7fpkt", shape=diamond, color=yellow];
917[label="86.208.210.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
1133[label="85.72.25.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
1669[label="81.72.110.222;d;1pkt 1fpkt", shape=diamond, color=yellow];
3462[label="81.72.110.222;d;1pkt 1fpkt", shape=hexagon, color=black];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.142.28:6699, *:*}[71.4286%]&lt;BR/&gt;{167.8.142.28:*, *:1863}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (41.6667%)&lt;BR/&gt; 1025: (16.6667%)&lt;BR/&gt; 1863: (8.33333%)&lt;BR/&gt; 1754: (8.33333%)&lt;BR/&gt; 1114: (8.33333%)&gt;];
}
19--734[label="1;1pkt 1fpkt"];
19--1669[label="1;1pkt 1fpkt"];
19--3462[label="1;1pkt 1fpkt"];
734--827[label="1;1pkt 1fpkt"];
734--917[label="1;1pkt 1fpkt"];
734--938[label="1;1pkt 1fpkt"];
734--1133[label="1;1pkt 1fpkt"];
734--1669[label="1;1pkt 1fpkt"];
734--2811[label="1;1pkt 1fpkt"];
734--2848[label="1;1pkt 1fpkt"];
734--3462[label="1;1pkt 1fpkt"];
1669--3462[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="167.8.142.28" src_port="6699"/>
      <filter dst_port="1863" src_ip="167.8.142.28"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
1617[label="212.24.172.93;d;7pkt 7fpkt", shape=diamond, color=yellow];
1670[label="1.54.40.86;s;6pkt 6fpkt", shape=diamond, color=yellow];
3013[label="212.24.172.93;d;7pkt 7fpkt", shape=hexagon, color=black];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.54.40.86:*, 212.24.172.93:80}[44.4444%]&lt;BR/&gt;{17.245.194.173:*, 212.24.172.93:80}[22.2222%]&lt;BR/&gt;{1.54.40.86:53, *:53}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45%)&lt;BR/&gt; 53: (10%)&lt;BR/&gt; 4544: (7.5%)&lt;BR/&gt; 4498: (7.5%)&lt;BR/&gt; 4488: (7.5%)&gt;];
}
1617--1670[label="0.666667;4pkt 4fpkt"];
1617--3013[label="1;7pkt 7fpkt"];
1670--2398[label="0.166667;1pkt 1fpkt"];
1670--3013[label="0.666667;4pkt 4fpkt"];
1670--3686[label="0.166667;1pkt 1fpkt"];
1670--3949[label="0.333333;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.172.93" dst_port="80" src_ip="1.54.40.86"/>
      <filter dst_port="53" src_ip="1.54.40.86" src_port="53"/>
      <filter dst_ip="212.24.172.93" dst_port="80" src_ip="17.245.194.173"/>
    </slice>
    <from sec="1034226065" usec="0"/>
    <to sec="1034226708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
1699[label="185.191.54.144;d;3pkt 3fpkt", shape=diamond, color=yellow];
1700[label="1.118.215.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
3230[label="185.191.54.144;d;2pkt 2fpkt", shape=hexagon, color=black];
3649[label="1.118.215.216;s;1pkt 1fpkt", shape=hexagon, color=black];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.118.215.216:8016, 185.191.54.144:1255}[33.3333%]&lt;BR/&gt;{203.177.147.165:0, 185.191.54.144:0}[33.3333%]&lt;BR/&gt;{203.177.147.165:5050, 185.191.54.144:1046}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8016: (28.5714%)&lt;BR/&gt; 1255: (28.5714%)&lt;BR/&gt; 5050: (14.2857%)&lt;BR/&gt; 1046: (14.2857%)&lt;BR/&gt; 0: (14.2857%)&gt;];
}
1699--1700[label="1;1pkt 1fpkt"];
1699--3230[label="1;2pkt 2fpkt"];
1699--3649[label="1;1pkt 1fpkt"];
1700--3230[label="1;1pkt 1fpkt"];
1700--3649[label="1;1pkt 1fpkt"];
3230--3649[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.54.144" dst_port="1046" src_ip="203.177.147.165" src_port="5050"/>
      <filter dst_ip="185.191.54.144" src_ip="203.177.147.165"/>
      <filter dst_ip="185.191.54.144" dst_port="1255" src_ip="1.118.215.216" src_port="8016"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
1214[label="161.238.151.116;d;2pkt 2fpkt", shape=diamond, color=yellow];
1716[label="86.194.164.22;s;1pkt 1fpkt", shape=diamond, color=yellow];
3666[label="86.194.164.22;s;1pkt 1fpkt", shape=hexagon, color=black];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.194.164.22:20, 161.238.151.116:3319}[50%]&lt;BR/&gt;{84.102.239.75:3352, 161.238.151.116:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3319: (37.5%)&lt;BR/&gt; 20: (37.5%)&lt;BR/&gt; 3352: (12.5%)&lt;BR/&gt; 25: (12.5%)&gt;];
}
1214--1716[label="1;1pkt 1fpkt"];
1214--3666[label="1;1pkt 1fpkt"];
1716--3666[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.151.116" dst_port="25" src_ip="84.102.239.75" src_port="3352"/>
      <filter dst_ip="161.238.151.116" dst_port="3319" src_ip="86.194.164.22" src_port="20"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23331,2.23684,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
1001[label="161.238.40.212;d;2pkt 2fpkt", shape=diamond, color=yellow];
1002[label="194.67.136.197;s;3pkt 3fpkt", shape=diamond, color=yellow];
2886[label="194.67.136.197;s;3pkt 3fpkt", shape=hexagon, color=black];
3801[label="194.67.136.197;s;3pkt 3fpkt", shape=polygon, color=gold];
5579[label="194.67.136.197;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.67.136.197:1024, 213.91.98.217:53}[33.3333%]&lt;BR/&gt;{194.67.136.197:80, 161.238.40.212:1486}[33.3333%]&lt;BR/&gt;{194.67.136.197:80, 161.238.40.212:1502}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.6154%)&lt;BR/&gt; 1502: (19.2308%)&lt;BR/&gt; 1486: (15.3846%)&lt;BR/&gt; 1024: (15.3846%)&lt;BR/&gt; 53: (15.3846%)&gt;];
}
1001--1002[label="1;2pkt 2fpkt"];
1001--2886[label="1;2pkt 2fpkt"];
1001--3801[label="1;2pkt 2fpkt"];
1001--5579[label="0.5;1pkt 1fpkt"];
1002--2886[label="1;3pkt 3fpkt"];
1002--3801[label="1;3pkt 3fpkt"];
1002--5579[label="1;2pkt 2fpkt"];
2886--3801[label="1;3pkt 3fpkt"];
2886--5579[label="1;2pkt 2fpkt"];
3801--5579[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.40.212" dst_port="1502" src_ip="194.67.136.197" src_port="80"/>
      <filter dst_ip="161.238.40.212" dst_port="1486" src_ip="194.67.136.197" src_port="80"/>
      <filter dst_ip="213.91.98.217" dst_port="53" src_ip="194.67.136.197" src_port="1024"/>
    </slice>
    <from sec="1034226055" usec="0"/>
    <to sec="1034226313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658063,2.10925,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
1539[label="84.151.58.72;d;144pkt 144fpkt", shape=diamond, color=yellow];
1760[label="213.91.101.72;s;176pkt 176fpkt", shape=diamond, color=yellow];
4600[label="213.91.101.72;188pkt 188fpkt", shape=pentagon, color=darkviolet];
6368[label="213.91.101.72;188pkt 188fpkt", shape=invtriangle, color=brown];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.101.72:80, 84.151.58.72:*}[82.9787%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.5517%)&lt;BR/&gt; 53: (3.44828%)&lt;BR/&gt; 1025: (3.01724%)&lt;BR/&gt; 60706: (0.287356%)&lt;BR/&gt; 60658: (0.287356%)&gt;];
}
1539--1760[label="1;144pkt 144fpkt"];
1539--3950[label="0.0555556;8pkt 8fpkt"];
1539--4600[label="1;144pkt 144fpkt"];
1539--6368[label="1;144pkt 144fpkt"];
1760--2411[label="0.0166667;1pkt 1fpkt"];
1760--3691[label="0.0166667;1pkt 1fpkt"];
1760--3950[label="0.0568182;10pkt 10fpkt"];
1760--4600[label="1;176pkt 176fpkt"];
1760--6368[label="1;176pkt 176fpkt"];
4600--6368[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_ip="84.151.58.72" src_ip="213.91.101.72" src_port="80"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.864713,2.17143,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
245[label="1.84.115.60s;1pkt 1fpkt", shape=rectangle, color=red];
1763[label="84.41.99.60;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.41.99.60:4662, 141.98.93.221:4936}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4936: (50%)&lt;BR/&gt; 4662: (50%)&gt;];
}
245--574[label="1;1pkt 1fpkt"];
245--1763[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.93.221" dst_port="4936" src_ip="84.41.99.60" src_port="4662"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
122[label="85.34.110.200s;1pkt 1fpkt", shape=rectangle, color=red];
1829[label="85.34.110.200;s;56pkt 56fpkt", shape=diamond, color=yellow];
3317[label="85.34.110.200;s;32pkt 32fpkt", shape=hexagon, color=black];
5605[label="85.34.110.200;64pkt 64fpkt", shape=pentagon, color=darkviolet];
7038[label="85.34.110.200;64pkt 64fpkt", shape=invtriangle, color=brown];
7950[label="85.34.110.200;64pkt 64fpkt", shape=invhouse, color=bisque];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.34.110.200:80, 161.238.34.27:*}[35.3846%]&lt;BR/&gt;{85.34.110.200:80, 185.191.0.65:*}[35.3846%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51227: (0.88968%)&lt;BR/&gt; 50027: (0.88968%)&lt;BR/&gt; 50010: (0.88968%)&lt;BR/&gt; 50005: (0.88968%)&gt;];
}
122--1531[label="1;1pkt 1fpkt"];
122--1829[label="1;1pkt 1fpkt"];
122--5605[label="1;1pkt 1fpkt"];
122--7038[label="1;1pkt 1fpkt"];
122--7950[label="1;1pkt 1fpkt"];
1829--3117[label="0.142857;8pkt 8fpkt"];
1829--3317[label="1;32pkt 32fpkt"];
1829--5605[label="0.982143;55pkt 55fpkt"];
1829--7038[label="0.982143;55pkt 55fpkt"];
1829--7950[label="0.982143;55pkt 55fpkt"];
3317--5605[label="0.96875;31pkt 31fpkt"];
3317--7038[label="0.96875;31pkt 31fpkt"];
3317--7950[label="0.96875;31pkt 31fpkt"];
5605--7038[label="1;64pkt 64fpkt"];
5605--7950[label="1;64pkt 64fpkt"];
7038--7950[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.0.65" src_ip="85.34.110.200" src_port="80"/>
      <filter dst_ip="161.238.34.27" src_ip="85.34.110.200" src_port="80"/>
    </slice>
    <from sec="1034226039" usec="0"/>
    <to sec="1034226781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
1445[label="203.195.61.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
1447[label="167.8.138.205;s;7pkt 7fpkt", shape=diamond, color=yellow];
1846[label="86.94.172.191;d;1pkt 1fpkt", shape=diamond, color=yellow];
2938[label="203.195.61.30;d;1pkt 1fpkt", shape=hexagon, color=black];
3070[label="167.8.138.205;s;5pkt 5fpkt", shape=hexagon, color=black];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.138.205:*, *:6699}[57.1429%]&lt;BR/&gt;{167.8.138.205:6699, *:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1548: (13.3333%)&lt;BR/&gt; 1554: (10%)&lt;BR/&gt; 65303: (6.66667%)&lt;BR/&gt; 5000: (6.66667%)&gt;];
}
1445--1447[label="1;1pkt 1fpkt"];
1445--2938[label="1;1pkt 1fpkt"];
1445--3070[label="1;1pkt 1fpkt"];
1447--1846[label="1;1pkt 1fpkt"];
1447--2938[label="1;1pkt 1fpkt"];
1447--3070[label="1;5pkt 5fpkt"];
1846--3070[label="1;1pkt 1fpkt"];
2938--3070[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="167.8.138.205" src_port="6699"/>
      <filter dst_port="6699" src_ip="167.8.138.205"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
851[label="1.35.33.34;s;7pkt 7fpkt", shape=diamond, color=yellow];
1174[label="161.238.213.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
1182[label="212.24.10.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
1460[label="212.24.168.224;d;1pkt 1fpkt", shape=diamond, color=yellow];
1848[label="167.8.0.103;d;5pkt 5fpkt", shape=diamond, color=yellow];
2952[label="1.35.33.34;s;7pkt 7fpkt", shape=hexagon, color=black];
4266[label="1.35.33.34;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6149[label="1.35.33.34;7pkt 7fpkt", shape=invtriangle, color=brown];
7393[label="1.35.33.34;6pkt 6fpkt", shape=invhouse, color=bisque];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.8.0.103:*}[45.4545%]&lt;BR/&gt;{1.35.33.34:5001, 212.24.168.5:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (46.4286%)&lt;BR/&gt; 1798: (7.14286%)&lt;BR/&gt; 1140: (7.14286%)&lt;BR/&gt; 1074: (7.14286%)&lt;BR/&gt; 1312: (5.95238%)&gt;];
}
851--1164[label="0.428571;3pkt 3fpkt"];
851--1174[label="1;1pkt 1fpkt"];
851--1182[label="1;1pkt 1fpkt"];
851--1460[label="1;1pkt 1fpkt"];
851--1848[label="0.2;1pkt 1fpkt"];
851--2952[label="1;7pkt 7fpkt"];
851--4266[label="1;7pkt 7fpkt"];
851--6149[label="1;7pkt 7fpkt"];
851--7393[label="1;6pkt 6fpkt"];
1174--2952[label="1;1pkt 1fpkt"];
1174--4266[label="1;1pkt 1fpkt"];
1174--6149[label="1;1pkt 1fpkt"];
1182--2952[label="1;1pkt 1fpkt"];
1182--4266[label="1;1pkt 1fpkt"];
1182--6149[label="1;1pkt 1fpkt"];
1182--7393[label="1;1pkt 1fpkt"];
1460--2952[label="1;1pkt 1fpkt"];
1460--4266[label="1;1pkt 1fpkt"];
1460--6149[label="1;1pkt 1fpkt"];
1460--7393[label="1;1pkt 1fpkt"];
1848--2509[label="0.5;1pkt 1fpkt"];
1848--2952[label="0.2;1pkt 1fpkt"];
1848--3996[label="0.2;1pkt 1fpkt"];
1848--4266[label="0.2;1pkt 1fpkt"];
1848--5953[label="0.2;1pkt 1fpkt"];
1848--6149[label="0.2;1pkt 1fpkt"];
1848--7274[label="0.2;1pkt 1fpkt"];
1848--7393[label="0.2;1pkt 1fpkt"];
2952--4266[label="1;7pkt 7fpkt"];
2952--6149[label="1;7pkt 7fpkt"];
2952--7393[label="1;6pkt 6fpkt"];
4266--6149[label="1;7pkt 7fpkt"];
4266--7393[label="1;6pkt 6fpkt"];
6149--7393[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.0.103"/>
      <filter dst_ip="212.24.168.5" src_ip="1.35.33.34" src_port="5001"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.96361,2.07354,002,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
236[label="134.220.68.45s;192pkt 192fpkt", shape=rectangle, color=red];
1868[label="185.191.183.81;d;75pkt 75fpkt", shape=diamond, color=yellow];
4378[label="134.220.68.45;251pkt 251fpkt", shape=pentagon, color=darkviolet];
6222[label="134.220.68.45;250pkt 250fpkt", shape=invtriangle, color=brown];
7441[label="134.220.68.45;250pkt 250fpkt", shape=invhouse, color=bisque];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.220.68.45:1035, *:137}[77.2308%]&lt;BR/&gt;{*:80, 185.191.183.81:*}[22.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1035: (46.3654%)&lt;BR/&gt; 137: (46.3654%)&lt;BR/&gt; 80: (3.53635%)&lt;BR/&gt; 1863: (0.0491159%)&lt;BR/&gt; 1719: (0.0491159%)&gt;];
}
236--1868[label="0.0133333;1pkt 1fpkt"];
236--3951[label="0.276042;53pkt 53fpkt"];
236--3962[label="0.276042;53pkt 53fpkt"];
236--3972[label="0.276042;53pkt 53fpkt"];
236--4378[label="1;192pkt 192fpkt"];
236--6222[label="1;192pkt 192fpkt"];
236--7441[label="1;192pkt 192fpkt"];
1868--2018[label="0.04;3pkt 3fpkt"];
1868--3297[label="0.04;3pkt 3fpkt"];
1868--3950[label="0.0133333;1pkt 1fpkt"];
1868--3951[label="0.0133333;1pkt 1fpkt"];
1868--3962[label="0.0133333;1pkt 1fpkt"];
1868--3972[label="0.0133333;1pkt 1fpkt"];
1868--4281[label="0.773333;58pkt 58fpkt"];
1868--4378[label="0.0133333;1pkt 1fpkt"];
1868--5434[label="0.0178571;1pkt 1fpkt"];
1868--6162[label="0.773333;58pkt 58fpkt"];
1868--6222[label="0.0133333;1pkt 1fpkt"];
1868--6933[label="0.0178571;1pkt 1fpkt"];
1868--7401[label="0.773333;58pkt 58fpkt"];
1868--7441[label="0.0133333;1pkt 1fpkt"];
4378--6222[label="1;250pkt 250fpkt"];
4378--7441[label="1;250pkt 250fpkt"];
6222--7441[label="1;250pkt 250fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.183.81" src_port="80"/>
      <filter dst_port="137" src_ip="134.220.68.45" src_port="1035"/>
    </slice>
    <from sec="1034226255" usec="0"/>
    <to sec="1034226464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
1674[label="212.24.29.97;s;2pkt 2fpkt", shape=diamond, color=yellow];
1878[label="214.6.203.252;d;1pkt 1fpkt", shape=diamond, color=yellow];
3464[label="214.6.203.252;d;1pkt 1fpkt", shape=hexagon, color=black];
3485[label="212.24.29.97;s;2pkt 2fpkt", shape=hexagon, color=black];
4822[label="212.24.29.97;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.29.97:1042, 85.34.108.54:1863}[50%]&lt;BR/&gt;{212.24.29.97:8864, 214.6.203.252:8864}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8864: (62.5%)&lt;BR/&gt; 1863: (18.75%)&lt;BR/&gt; 1042: (18.75%)&gt;];
}
1674--1878[label="1;1pkt 1fpkt"];
1674--3464[label="1;1pkt 1fpkt"];
1674--3485[label="1;2pkt 2fpkt"];
1674--4822[label="1;2pkt 2fpkt"];
1878--3464[label="1;1pkt 1fpkt"];
1878--3485[label="1;1pkt 1fpkt"];
1878--4822[label="1;1pkt 1fpkt"];
3464--3485[label="1;1pkt 1fpkt"];
3464--4822[label="1;1pkt 1fpkt"];
3485--4822[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.6.203.252" dst_port="8864" src_ip="212.24.29.97" src_port="8864"/>
      <filter dst_ip="85.34.108.54" dst_port="1863" src_ip="212.24.29.97" src_port="1042"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
678[label="213.91.101.243;s;2pkt 2fpkt", shape=diamond, color=yellow];
829[label="209.200.47.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
1885[label="1.7.37.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
2717[label="209.200.47.129;d;1pkt 1fpkt", shape=hexagon, color=black];
3856[label="209.200.47.129;d;1pkt 1fpkt", shape=polygon, color=gold];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.101.243:80, 209.200.47.129:18550}[50%]&lt;BR/&gt;{213.91.101.243:1755, 1.7.37.221:3248}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18550: (33.3333%)&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 3248: (16.6667%)&lt;BR/&gt; 1755: (16.6667%)&gt;];
}
678--829[label="1;1pkt 1fpkt"];
678--1885[label="1;1pkt 1fpkt"];
678--2717[label="1;1pkt 1fpkt"];
678--3856[label="1;1pkt 1fpkt"];
678--3950[label="0.5;1pkt 1fpkt"];
829--2717[label="1;1pkt 1fpkt"];
829--3856[label="1;1pkt 1fpkt"];
829--3950[label="1;1pkt 1fpkt"];
2717--3856[label="1;1pkt 1fpkt"];
2717--3950[label="1;1pkt 1fpkt"];
3856--3950[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="1.7.37.221" dst_port="3248" src_ip="213.91.101.243" src_port="1755"/>
      <filter dst_ip="209.200.47.129" dst_port="18550" src_ip="213.91.101.243" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35357,2.21616,999,1 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
107[label="141.98.101.179s;1pkt 1fpkt", shape=rectangle, color=red];
617[label="140.127.174.125;d;2pkt 2fpkt", shape=diamond, color=yellow];
619[label="141.98.101.179;s;18pkt 18fpkt", shape=diamond, color=yellow];
637[label="186.247.21.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
768[label="197.8.41.128;d;1pkt 1fpkt", shape=diamond, color=yellow];
887[label="202.105.172.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
1286[label="43.212.169.82;d;1pkt 1fpkt", shape=diamond, color=yellow];
1437[label="213.216.152.155;d;6pkt 6fpkt", shape=diamond, color=yellow];
1883[label="58.157.159.252;d;1pkt 1fpkt", shape=diamond, color=yellow];
1890[label="58.135.104.53;d;1pkt 1fpkt", shape=diamond, color=yellow];
2766[label="186.247.21.221;d;1pkt 1fpkt", shape=hexagon, color=black];
2827[label="202.105.172.60;d;1pkt 1fpkt", shape=hexagon, color=black];
2847[label="43.212.169.82;d;1pkt 1fpkt", shape=hexagon, color=black];
2924[label="197.8.41.128;d;1pkt 1fpkt", shape=hexagon, color=black];
2933[label="213.216.152.155;d;3pkt 3fpkt", shape=hexagon, color=black];
3470[label="58.135.104.53;d;1pkt 1fpkt", shape=hexagon, color=black];
3937[label="58.135.104.53;d;1pkt 1fpkt", shape=polygon, color=gold];
5441[label="141.98.101.179;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.101.179:*, *:6699}[38.0952%]&lt;BR/&gt;{141.98.101.179:*, 213.216.152.155:1214}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (28.5714%)&lt;BR/&gt; 6699: (16.6667%)&lt;BR/&gt; 2006: (4.7619%)&lt;BR/&gt; 1597: (4.7619%)&lt;BR/&gt; 1593: (3.1746%)&gt;];
}
107--619[label="1;1pkt 1fpkt"];
107--1890[label="1;1pkt 1fpkt"];
107--3470[label="1;1pkt 1fpkt"];
107--3937[label="1;1pkt 1fpkt"];
107--5441[label="1;1pkt 1fpkt"];
617--619[label="1;2pkt 2fpkt"];
617--5441[label="1;2pkt 2fpkt"];
619--637[label="1;1pkt 1fpkt"];
619--768[label="1;1pkt 1fpkt"];
619--887[label="1;1pkt 1fpkt"];
619--1205[label="0.5;1pkt 1fpkt"];
619--1286[label="1;1pkt 1fpkt"];
619--1437[label="0.833333;5pkt 5fpkt"];
619--1773[label="0.5;1pkt 1fpkt"];
619--1883[label="1;1pkt 1fpkt"];
619--1890[label="1;1pkt 1fpkt"];
619--2766[label="1;1pkt 1fpkt"];
619--2827[label="1;1pkt 1fpkt"];
619--2847[label="1;1pkt 1fpkt"];
619--2924[label="1;1pkt 1fpkt"];
619--2933[label="1;3pkt 3fpkt"];
619--3470[label="1;1pkt 1fpkt"];
619--3937[label="1;1pkt 1fpkt"];
619--5441[label="1;18pkt 18fpkt"];
637--2766[label="1;1pkt 1fpkt"];
637--5441[label="1;1pkt 1fpkt"];
768--2924[label="1;1pkt 1fpkt"];
768--5441[label="1;1pkt 1fpkt"];
887--2827[label="1;1pkt 1fpkt"];
887--5441[label="1;1pkt 1fpkt"];
1286--2847[label="1;1pkt 1fpkt"];
1286--5441[label="1;1pkt 1fpkt"];
1437--2933[label="1;3pkt 3fpkt"];
1437--5441[label="1;6pkt 6fpkt"];
1883--5441[label="1;1pkt 1fpkt"];
1890--3470[label="1;1pkt 1fpkt"];
1890--3937[label="1;1pkt 1fpkt"];
1890--5441[label="1;1pkt 1fpkt"];
2766--5441[label="1;1pkt 1fpkt"];
2827--5441[label="1;1pkt 1fpkt"];
2847--5441[label="1;1pkt 1fpkt"];
2924--5441[label="1;1pkt 1fpkt"];
2933--5441[label="1;3pkt 3fpkt"];
3470--3937[label="1;1pkt 1fpkt"];
3470--5441[label="1;1pkt 1fpkt"];
3937--5441[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="141.98.101.179"/>
      <filter dst_ip="213.216.152.155" dst_port="1214" src_ip="141.98.101.179"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
875[label="86.135.44.128;s;3pkt 3fpkt", shape=diamond, color=yellow];
935[label="136.230.119.85;d;27pkt 27fpkt", shape=diamond, color=yellow];
1679[label="136.230.97.47;d;37pkt 37fpkt", shape=diamond, color=yellow];
1930[label="136.230.79.13;d;31pkt 31fpkt", shape=diamond, color=yellow];
2069[label="86.135.44.129;s;31pkt 31fpkt", shape=diamond, color=yellow];
2266[label="86.135.44.179;s;23pkt 23fpkt", shape=diamond, color=yellow];
2578[label="136.230.132.143;d;21pkt 21fpkt", shape=diamond, color=yellow];
3157[label="86.135.44.185;s;13pkt 13fpkt", shape=hexagon, color=black];
3326[label="86.135.44.129;s;31pkt 31fpkt", shape=hexagon, color=black];
3454[label="86.135.44.179;s;23pkt 23fpkt", shape=hexagon, color=black];
4192[label="85.65.133.24;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5041[label="86.135.44.129;31pkt 31fpkt", shape=pentagon, color=darkviolet];
5060[label="86.135.44.131;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5315[label="86.135.44.163;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5329[label="86.135.44.165;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5360[label="86.135.44.168;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5492[label="86.135.44.186;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5501[label="86.135.44.187;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6659[label="86.135.44.129;32pkt 32fpkt", shape=invtriangle, color=brown];
6672[label="86.135.44.131;12pkt 12fpkt", shape=invtriangle, color=brown];
6855[label="86.135.44.163;5pkt 5fpkt", shape=invtriangle, color=brown];
6864[label="86.135.44.165;21pkt 21fpkt", shape=invtriangle, color=brown];
6883[label="86.135.44.168;9pkt 9fpkt", shape=invtriangle, color=brown];
6936[label="86.135.44.179;27pkt 27fpkt", shape=invtriangle, color=brown];
6964[label="86.135.44.186;18pkt 18fpkt", shape=invtriangle, color=brown];
6972[label="86.135.44.187;15pkt 15fpkt", shape=invtriangle, color=brown];
7710[label="86.135.44.129;31pkt 31fpkt", shape=invhouse, color=bisque];
7835[label="86.135.44.163;5pkt 5fpkt", shape=invhouse, color=bisque];
7841[label="86.135.44.165;21pkt 21fpkt", shape=invhouse, color=bisque];
7900[label="86.135.44.186;17pkt 17fpkt", shape=invhouse, color=bisque];
7903[label="86.135.44.187;16pkt 16fpkt", shape=invhouse, color=bisque];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:25}[89.4531%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.8224%)&lt;BR/&gt; 80: (0.753769%)&lt;BR/&gt; 53: (0.586265%)&lt;BR/&gt; 44638: (0.502513%)&lt;BR/&gt; 44247: (0.502513%)&gt;];
}
875--935[label="0.333333;1pkt 1fpkt"];
875--1930[label="0.333333;1pkt 1fpkt"];
935--2069[label="0.0740741;2pkt 2fpkt"];
935--2266[label="0.0869565;2pkt 2fpkt"];
935--2381[label="0.0869565;2pkt 2fpkt"];
935--3326[label="0.0740741;2pkt 2fpkt"];
935--3454[label="0.0869565;2pkt 2fpkt"];
935--4192[label="0.315789;6pkt 6fpkt"];
935--5041[label="0.0740741;2pkt 2fpkt"];
935--5060[label="0.0833333;1pkt 1fpkt"];
935--5329[label="0.05;1pkt 1fpkt"];
935--5440[label="0.0740741;2pkt 2fpkt"];
935--5484[label="0.0434783;1pkt 1fpkt"];
935--5492[label="0.0555556;1pkt 1fpkt"];
935--5501[label="0.0666667;1pkt 1fpkt"];
935--6659[label="0.0740741;2pkt 2fpkt"];
935--6672[label="0.0833333;1pkt 1fpkt"];
935--6864[label="0.047619;1pkt 1fpkt"];
935--6936[label="0.0740741;2pkt 2fpkt"];
935--6959[label="0.0454545;1pkt 1fpkt"];
935--6964[label="0.0555556;1pkt 1fpkt"];
935--6972[label="0.0666667;1pkt 1fpkt"];
935--7710[label="0.0740741;2pkt 2fpkt"];
935--7841[label="0.047619;1pkt 1fpkt"];
935--7895[label="0.0454545;1pkt 1fpkt"];
935--7900[label="0.0588235;1pkt 1fpkt"];
935--7903[label="0.0625;1pkt 1fpkt"];
1679--1791[label="0.027027;1pkt 1fpkt"];
1679--2069[label="0.0645161;2pkt 2fpkt"];
1679--2193[label="0.0625;1pkt 1fpkt"];
1679--2266[label="0.0434783;1pkt 1fpkt"];
1679--2594[label="0.8;4pkt 4fpkt"];
1679--2867[label="0.027027;1pkt 1fpkt"];
1679--2945[label="0.0666667;1pkt 1fpkt"];
1679--3157[label="0.0769231;1pkt 1fpkt"];
1679--3163[label="0.105263;2pkt 2fpkt"];
1679--3326[label="0.0645161;2pkt 2fpkt"];
1679--3454[label="0.0434783;1pkt 1fpkt"];
1679--3800[label="0.027027;1pkt 1fpkt"];
1679--3946[label="0.0810811;3pkt 3fpkt"];
1679--3959[label="0.0810811;3pkt 3fpkt"];
1679--3969[label="0.0810811;3pkt 3fpkt"];
1679--5041[label="0.0645161;2pkt 2fpkt"];
1679--5106[label="0.111111;1pkt 1fpkt"];
1679--5136[label="0.0909091;2pkt 2fpkt"];
1679--5149[label="0.0952381;2pkt 2fpkt"];
1679--5301[label="0.047619;1pkt 1fpkt"];
1679--5315[label="0.2;1pkt 1fpkt"];
1679--5329[label="0.05;1pkt 1fpkt"];
1679--5440[label="0.037037;1pkt 1fpkt"];
1679--5459[label="0.0833333;1pkt 1fpkt"];
1679--5488[label="0.105263;2pkt 2fpkt"];
1679--5492[label="0.0555556;1pkt 1fpkt"];
1679--5501[label="0.0666667;1pkt 1fpkt"];
1679--5506[label="0.0625;1pkt 1fpkt"];
1679--5710[label="0.027027;1pkt 1fpkt"];
1679--5823[label="0.027027;1pkt 1fpkt"];
1679--5847[label="0.0714286;1pkt 1fpkt"];
1679--6659[label="0.0625;2pkt 2fpkt"];
1679--6707[label="0.111111;1pkt 1fpkt"];
1679--6730[label="0.0909091;2pkt 2fpkt"];
1679--6740[label="0.0952381;2pkt 2fpkt"];
1679--6848[label="0.0454545;1pkt 1fpkt"];
1679--6855[label="0.2;1pkt 1fpkt"];
1679--6864[label="0.047619;1pkt 1fpkt"];
1679--6936[label="0.037037;1pkt 1fpkt"];
1679--6945[label="0.0769231;1pkt 1fpkt"];
1679--6964[label="0.0555556;1pkt 1fpkt"];
1679--6972[label="0.0666667;1pkt 1fpkt"];
1679--6974[label="0.0666667;1pkt 1fpkt"];
1679--7114[label="0.027027;1pkt 1fpkt"];
1679--7190[label="0.027027;1pkt 1fpkt"];
1679--7210[label="0.0666667;1pkt 1fpkt"];
1679--7710[label="0.0645161;2pkt 2fpkt"];
1679--7835[label="0.2;1pkt 1fpkt"];
1679--7841[label="0.047619;1pkt 1fpkt"];
1679--7888[label="0.0833333;1pkt 1fpkt"];
1679--7900[label="0.0588235;1pkt 1fpkt"];
1679--7903[label="0.0625;1pkt 1fpkt"];
1679--7996[label="0.027027;1pkt 1fpkt"];
1679--8045[label="0.027027;1pkt 1fpkt"];
1679--8060[label="0.0666667;1pkt 1fpkt"];
1930--1961[label="0.0322581;1pkt 1fpkt"];
1930--1999[label="0.111111;2pkt 2fpkt"];
1930--2002[label="0.0322581;1pkt 1fpkt"];
1930--2266[label="0.130435;3pkt 3fpkt"];
1930--2381[label="0.0434783;1pkt 1fpkt"];
1930--3163[label="0.0526316;1pkt 1fpkt"];
1930--3287[label="0.181818;2pkt 2fpkt"];
1930--3454[label="0.130435;3pkt 3fpkt"];
1930--3560[label="0.0322581;1pkt 1fpkt"];
1930--5136[label="0.0454545;1pkt 1fpkt"];
1930--5360[label="0.25;2pkt 2fpkt"];
1930--5440[label="0.111111;3pkt 3fpkt"];
1930--5484[label="0.0869565;2pkt 2fpkt"];
1930--5492[label="0.111111;2pkt 2fpkt"];
1930--5501[label="0.0666667;1pkt 1fpkt"];
1930--5531[label="0.125;1pkt 1fpkt"];
1930--5853[label="0.0322581;1pkt 1fpkt"];
1930--6730[label="0.0454545;1pkt 1fpkt"];
1930--6883[label="0.222222;2pkt 2fpkt"];
1930--6936[label="0.111111;3pkt 3fpkt"];
1930--6959[label="0.0909091;2pkt 2fpkt"];
1930--6964[label="0.111111;2pkt 2fpkt"];
1930--6972[label="0.0666667;1pkt 1fpkt"];
1930--6993[label="0.125;1pkt 1fpkt"];
1930--7215[label="0.0322581;1pkt 1fpkt"];
1930--7895[label="0.0909091;2pkt 2fpkt"];
1930--7900[label="0.117647;2pkt 2fpkt"];
1930--7903[label="0.0625;1pkt 1fpkt"];
1930--7918[label="0.111111;1pkt 1fpkt"];
1930--8064[label="0.0322581;1pkt 1fpkt"];
2069--2578[label="0.047619;1pkt 1fpkt"];
2069--3002[label="0.0322581;1pkt 1fpkt"];
2069--3326[label="1;31pkt 31fpkt"];
2069--5041[label="0.967742;30pkt 30fpkt"];
2069--6659[label="1;31pkt 31fpkt"];
2069--7710[label="0.967742;30pkt 30fpkt"];
2266--2364[label="0.0434783;1pkt 1fpkt"];
2266--3002[label="0.0869565;2pkt 2fpkt"];
2266--3454[label="1;23pkt 23fpkt"];
2266--3517[label="0.0434783;1pkt 1fpkt"];
2266--3651[label="0.130435;3pkt 3fpkt"];
2266--5440[label="1;23pkt 23fpkt"];
2266--6936[label="1;23pkt 23fpkt"];
2578--3157[label="0.0769231;1pkt 1fpkt"];
2578--3326[label="0.047619;1pkt 1fpkt"];
2578--5106[label="0.111111;1pkt 1fpkt"];
2578--6659[label="0.047619;1pkt 1fpkt"];
2578--6707[label="0.111111;1pkt 1fpkt"];
2578--6848[label="0.047619;1pkt 1fpkt"];
2578--6864[label="0.047619;1pkt 1fpkt"];
2578--7841[label="0.047619;1pkt 1fpkt"];
3157--3517[label="0.0769231;1pkt 1fpkt"];
3157--5488[label="0.923077;12pkt 12fpkt"];
3326--5041[label="0.967742;30pkt 30fpkt"];
3326--6659[label="1;31pkt 31fpkt"];
3326--7710[label="0.967742;30pkt 30fpkt"];
3454--3517[label="0.0434783;1pkt 1fpkt"];
3454--3651[label="0.130435;3pkt 3fpkt"];
3454--5440[label="1;23pkt 23fpkt"];
3454--6936[label="1;23pkt 23fpkt"];
5041--6659[label="1;31pkt 31fpkt"];
5041--7710[label="1;31pkt 31fpkt"];
5060--6672[label="1;12pkt 12fpkt"];
5315--6855[label="1;5pkt 5fpkt"];
5315--7835[label="1;5pkt 5fpkt"];
5329--6864[label="1;20pkt 20fpkt"];
5329--7841[label="1;20pkt 20fpkt"];
5360--6883[label="1;8pkt 8fpkt"];
5492--6964[label="1;18pkt 18fpkt"];
5492--7900[label="1;17pkt 17fpkt"];
5501--6972[label="1;15pkt 15fpkt"];
5501--7903[label="1;15pkt 15fpkt"];
6659--7710[label="1;31pkt 31fpkt"];
6855--7835[label="1;5pkt 5fpkt"];
6864--7841[label="1;21pkt 21fpkt"];
6964--7900[label="1;17pkt 17fpkt"];
6972--7903[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_port="25"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
1942[label="167.8.55.93;s;409pkt 409fpkt", shape=diamond, color=yellow];
1943[label="218.236.151.114;d;409pkt 409fpkt", shape=diamond, color=yellow];
3394[label="167.8.55.93;s;409pkt 409fpkt", shape=hexagon, color=black];
3395[label="218.236.151.114;d;358pkt 358fpkt", shape=hexagon, color=black];
3879[label="218.236.151.114;d;358pkt 358fpkt", shape=polygon, color=gold];
3903[label="167.8.55.93;s;358pkt 358fpkt", shape=polygon, color=gold];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.55.93:33610, 218.236.151.114:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33610: (50%)&lt;BR/&gt; 2506: (0.130378%)&lt;BR/&gt; 2505: (0.130378%)&lt;BR/&gt; 2504: (0.130378%)&lt;BR/&gt; 2503: (0.130378%)&gt;];
}
1942--1943[label="1;409pkt 409fpkt"];
1942--3394[label="1;409pkt 409fpkt"];
1942--3395[label="1;358pkt 358fpkt"];
1942--3879[label="1;358pkt 358fpkt"];
1942--3903[label="1;358pkt 358fpkt"];
1943--3394[label="1;409pkt 409fpkt"];
1943--3395[label="1;358pkt 358fpkt"];
1943--3879[label="1;358pkt 358fpkt"];
1943--3903[label="1;358pkt 358fpkt"];
3394--3395[label="1;358pkt 358fpkt"];
3394--3879[label="1;358pkt 358fpkt"];
3394--3903[label="1;358pkt 358fpkt"];
3395--3879[label="1;358pkt 358fpkt"];
3395--3903[label="1;358pkt 358fpkt"];
3879--3903[label="1;358pkt 358fpkt"];
</description>
    <slice>
      <filter dst_ip="218.236.151.114" src_ip="167.8.55.93" src_port="33610"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="167.164.146.226"/>
      <from sec="1034226000" usec="0"/>
      <to sec="1034226738" usec="0"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
1948[label="167.8.144.188;d;225pkt 225fpkt", shape=diamond, color=yellow];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1812, 167.8.144.188:1812}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1812: (100%)&gt;];
}
1948--3346[label="0.00444444;1pkt 1fpkt"];
1948--3874[label="0.00444444;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.144.188" dst_port="1812" src_port="1812"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
1968[label="194.93.3.13;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.93.3.13:57224, 167.8.180.82:6080}[33.3333%]&lt;BR/&gt;{194.93.3.13:57522, 167.8.180.170:110}[33.3333%]&lt;BR/&gt;{194.93.3.13:57604, 167.8.180.170:110}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (33.3333%)&lt;BR/&gt; 57604: (16.6667%)&lt;BR/&gt; 57522: (16.6667%)&lt;BR/&gt; 57224: (16.6667%)&lt;BR/&gt; 6080: (16.6667%)&gt;];
}
1968--3409[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.180.170" dst_port="110" src_ip="194.93.3.13" src_port="57604"/>
      <filter dst_ip="167.8.180.170" dst_port="110" src_ip="194.93.3.13" src_port="57522"/>
      <filter dst_ip="167.8.180.82" dst_port="6080" src_ip="194.93.3.13" src_port="57224"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
1980[label="161.238.161.154;d;233pkt 233fpkt", shape=diamond, color=yellow];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1812, 161.238.161.154:1812}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1812: (100%)&gt;];
}
1980--3346[label="0.00429185;1pkt 1fpkt"];
1980--3874[label="0.00429185;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.161.154" dst_port="1812" src_port="1812"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="142.173.93.55"/>
      <from sec="1034226003" usec="0"/>
      <to sec="1034226738" usec="0"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23331,2.23684,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
1790[label="167.8.141.181;s;2pkt 2fpkt", shape=diamond, color=yellow];
2010[label="43.8.160.191;d;1pkt 1fpkt", shape=diamond, color=yellow];
3138[label="167.8.141.181;s;2pkt 2fpkt", shape=hexagon, color=black];
3430[label="43.8.160.191;d;1pkt 1fpkt", shape=hexagon, color=black];
3841[label="167.8.141.181;s;2pkt 2fpkt", shape=polygon, color=gold];
5466[label="167.8.141.181;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.141.181:1045, 85.34.108.63:1863}[50%]&lt;BR/&gt;{167.8.141.181:1047, 43.8.160.191:7743}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (30%)&lt;BR/&gt; 1047: (30%)&lt;BR/&gt; 1863: (20%)&lt;BR/&gt; 1045: (20%)&gt;];
}
1790--2010[label="1;1pkt 1fpkt"];
1790--3138[label="1;2pkt 2fpkt"];
1790--3430[label="1;1pkt 1fpkt"];
1790--3841[label="1;2pkt 2fpkt"];
1790--5466[label="1;2pkt 2fpkt"];
2010--3138[label="1;1pkt 1fpkt"];
2010--3430[label="1;1pkt 1fpkt"];
2010--3841[label="1;1pkt 1fpkt"];
2010--5466[label="1;1pkt 1fpkt"];
3138--3430[label="1;1pkt 1fpkt"];
3138--3841[label="1;2pkt 2fpkt"];
3138--5466[label="1;2pkt 2fpkt"];
3430--3841[label="1;1pkt 1fpkt"];
3430--5466[label="1;1pkt 1fpkt"];
3841--5466[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="43.8.160.191" dst_port="7743" src_ip="167.8.141.181" src_port="1047"/>
      <filter dst_ip="85.34.108.63" dst_port="1863" src_ip="167.8.141.181" src_port="1045"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
665[label="167.8.141.111;s;187pkt 187fpkt", shape=diamond, color=yellow];
1037[label="194.159.27.49;d;1pkt 1fpkt", shape=diamond, color=yellow];
1204[label="43.240.30.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
1256[label="75.9.102.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
2078[label="210.240.181.248;d;2pkt 2fpkt", shape=diamond, color=yellow];
2125[label="203.155.230.2;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.141.111:6257, *:6257}[89.8396%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (87.6289%)&lt;BR/&gt; 6699: (5.41237%)&lt;BR/&gt; 1863: (0.773196%)&lt;BR/&gt; 64884: (0.515464%)&lt;BR/&gt; 1388: (0.515464%)&gt;];
}
665--868[label="1;1pkt 1fpkt"];
665--1037[label="1;1pkt 1fpkt"];
665--1119[label="1;1pkt 1fpkt"];
665--1125[label="1;1pkt 1fpkt"];
665--1136[label="1;1pkt 1fpkt"];
665--1204[label="1;1pkt 1fpkt"];
665--1256[label="1;1pkt 1fpkt"];
665--2078[label="1;2pkt 2fpkt"];
665--2125[label="1;2pkt 2fpkt"];
665--2801[label="1;1pkt 1fpkt"];
665--2804[label="1;1pkt 1fpkt"];
665--2946[label="1;1pkt 1fpkt"];
665--3089[label="1;1pkt 1fpkt"];
665--3918[label="1;1pkt 1fpkt"];
665--3948[label="0.117647;22pkt 22fpkt"];
665--3952[label="0.13369;25pkt 25fpkt"];
665--3961[label="0.117647;22pkt 22fpkt"];
665--3963[label="0.13369;25pkt 25fpkt"];
665--3971[label="0.117647;22pkt 22fpkt"];
665--3973[label="0.13369;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="167.8.141.111" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.96361,2.07354,999,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
229[label="212.208.4.39s;1pkt 1fpkt", shape=rectangle, color=red];
1601[label="185.191.16.131;d;9pkt 9fpkt", shape=diamond, color=yellow];
2086[label="85.8.72.39;s;2pkt 2fpkt", shape=diamond, color=yellow];
4310[label="85.8.72.39;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6257[label="85.8.72.50;1pkt 1fpkt", shape=invtriangle, color=brown];
7463[label="85.8.72.50;1pkt 1fpkt", shape=invhouse, color=bisque];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.8.72.59:9000, 185.191.16.131:*}[33.3333%]&lt;BR/&gt;{85.8.72.39:3301, 185.191.16.131:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3301: (20%)&lt;BR/&gt; 1868: (13.3333%)&lt;BR/&gt; 9000: (10%)&lt;BR/&gt; 3159: (10%)&lt;BR/&gt; 1864: (10%)&gt;];
}
229--1601[label="1;1pkt 1fpkt"];
229--2086[label="1;1pkt 1fpkt"];
229--4310[label="1;1pkt 1fpkt"];
1601--2086[label="1;2pkt 2fpkt"];
1601--4310[label="1;1pkt 1fpkt"];
1601--4494[label="1;2pkt 2fpkt"];
1601--6257[label="1;1pkt 1fpkt"];
1601--6300[label="1;2pkt 2fpkt"];
1601--7463[label="1;1pkt 1fpkt"];
2086--4310[label="1;1pkt 1fpkt"];
6257--7463[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.16.131" src_ip="85.8.72.59" src_port="9000"/>
      <filter dst_ip="185.191.16.131" src_ip="85.8.72.39" src_port="3301"/>
    </slice>
    <from sec="1034226035" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.864713,2.17143,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
47[label="202.138.232.74s;1pkt 1fpkt", shape=rectangle, color=red];
2120[label="141.98.27.146;d;2pkt 2fpkt", shape=diamond, color=yellow];
2121[label="203.200.92.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.200.92.74:20332, 141.98.27.146:50095}[50%]&lt;BR/&gt;{203.200.93.152:80, 141.98.27.146:50094}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50095: (37.5%)&lt;BR/&gt; 20332: (37.5%)&lt;BR/&gt; 50094: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
47--2120[label="1;1pkt 1fpkt"];
47--2121[label="1;1pkt 1fpkt"];
2120--2121[label="1;1pkt 1fpkt"];
2120--5231[label="0.5;1pkt 1fpkt"];
2120--6795[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.27.146" dst_port="50094" src_ip="203.200.93.152" src_port="80"/>
      <filter dst_ip="141.98.27.146" dst_port="50095" src_ip="203.200.92.74" src_port="20332"/>
    </slice>
    <from sec="1034226370" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="161.238.244.237"/>
      <from sec="1034226000" usec="0"/>
      <to sec="1034226737" usec="0"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
2160[label="10.0.0.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
2161[label="185.191.54.164;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.54.164:0, 10.0.0.11:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2160--2161[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="10.0.0.11" src_ip="185.191.54.164"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
1513[label="185.191.0.24;s;34pkt 34fpkt", shape=diamond, color=yellow];
2167[label="85.18.146.116;d;3pkt 3fpkt", shape=diamond, color=yellow];
2306[label="197.40.33.15;d;2pkt 2fpkt", shape=diamond, color=yellow];
3534[label="85.18.146.116;d;3pkt 3fpkt", shape=hexagon, color=black];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.0.24:21, 192.203.69.120:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (25%)&lt;BR/&gt; 0: (11.9048%)&lt;BR/&gt; 51485: (3.57143%)&lt;BR/&gt; 49937: (3.57143%)&lt;BR/&gt; 21080: (3.57143%)&gt;];
}
1513--2167[label="0.666667;2pkt 2fpkt"];
1513--2306[label="0.5;1pkt 1fpkt"];
1513--3534[label="0.666667;2pkt 2fpkt"];
2167--3534[label="1;3pkt 3fpkt"];
2306--6093[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.203.69.120" src_ip="185.191.0.24" src_port="21"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.20.130.240"/>
      <from sec="1034226001" usec="0"/>
      <to sec="1034226738" usec="0"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
1261[label="167.20.101.176;d;314pkt 314fpkt", shape=diamond, color=yellow];
2193[label="86.135.44.188;s;16pkt 16fpkt", shape=diamond, color=yellow];
2614[label="195.179.25.67;s;144pkt 144fpkt", shape=diamond, color=yellow];
4617[label="194.67.150.73;41pkt 41fpkt", shape=pentagon, color=darkviolet];
5106[label="86.135.44.137;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5459[label="86.135.44.181;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5464[label="212.1.95.181;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5506[label="86.135.44.188;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5531[label="86.135.44.191;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6381[label="194.67.150.73;41pkt 41fpkt", shape=invtriangle, color=brown];
6707[label="86.135.44.137;9pkt 9fpkt", shape=invtriangle, color=brown];
6945[label="86.135.44.181;13pkt 13fpkt", shape=invtriangle, color=brown];
6974[label="86.135.44.188;15pkt 15fpkt", shape=invtriangle, color=brown];
6993[label="86.135.44.191;8pkt 8fpkt", shape=invtriangle, color=brown];
7538[label="194.67.150.73;41pkt 41fpkt", shape=invhouse, color=bisque];
7888[label="86.135.44.181;12pkt 12fpkt", shape=invhouse, color=bisque];
7918[label="86.135.44.191;9pkt 9fpkt", shape=invhouse, color=bisque];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.20.101.176:25}[51.9231%]&lt;BR/&gt;{195.179.25.67:*, 213.91.98.217:53}[23.6538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (35.6844%)&lt;BR/&gt; 53: (8.79888%)&lt;BR/&gt; 113: (5.30726%)&lt;BR/&gt; 0: (0.418994%)&lt;BR/&gt; 48803: (0.27933%)&gt;];
}
1261--2193[label="0.25;4pkt 4fpkt"];
1261--2402[label="0.606557;37pkt 37fpkt"];
1261--2614[label="0.111111;16pkt 16fpkt"];
1261--3544[label="0.606557;37pkt 37fpkt"];
1261--3906[label="0.616667;37pkt 37fpkt"];
1261--4377[label="0.111111;2pkt 2fpkt"];
1261--4555[label="0.112676;16pkt 16fpkt"];
1261--4617[label="0.0487805;2pkt 2fpkt"];
1261--4632[label="0.131579;5pkt 5fpkt"];
1261--5106[label="0.111111;1pkt 1fpkt"];
1261--5163[label="0.596774;37pkt 37fpkt"];
1261--5459[label="0.583333;7pkt 7fpkt"];
1261--5464[label="0.125;1pkt 1fpkt"];
1261--5484[label="0.0869565;2pkt 2fpkt"];
1261--5506[label="0.25;4pkt 4fpkt"];
1261--5531[label="0.375;3pkt 3fpkt"];
1261--5708[label="0.25;1pkt 1fpkt"];
1261--6381[label="0.0487805;2pkt 2fpkt"];
1261--6392[label="0.131579;5pkt 5fpkt"];
1261--6707[label="0.111111;1pkt 1fpkt"];
1261--6750[label="0.606557;37pkt 37fpkt"];
1261--6945[label="0.538462;7pkt 7fpkt"];
1261--6959[label="0.0909091;2pkt 2fpkt"];
1261--6974[label="0.266667;4pkt 4fpkt"];
1261--6993[label="0.375;3pkt 3fpkt"];
1261--7538[label="0.0487805;2pkt 2fpkt"];
1261--7546[label="0.131579;5pkt 5fpkt"];
1261--7888[label="0.583333;7pkt 7fpkt"];
1261--7895[label="0.0909091;2pkt 2fpkt"];
1261--7918[label="0.333333;3pkt 3fpkt"];
2193--2364[label="0.125;2pkt 2fpkt"];
2193--3517[label="0.125;2pkt 2fpkt"];
2193--5506[label="1;16pkt 16fpkt"];
2193--6974[label="1;15pkt 15fpkt"];
2614--3362[label="0.0208333;3pkt 3fpkt"];
2614--3945[label="0.0208333;3pkt 3fpkt"];
2614--3958[label="0.0208333;3pkt 3fpkt"];
2614--3968[label="0.0208333;3pkt 3fpkt"];
2614--4555[label="1;142pkt 142fpkt"];
4617--6381[label="1;41pkt 41fpkt"];
4617--7538[label="1;41pkt 41fpkt"];
5106--6707[label="1;9pkt 9fpkt"];
5459--6945[label="1;12pkt 12fpkt"];
5459--7888[label="1;12pkt 12fpkt"];
5506--6974[label="1;15pkt 15fpkt"];
5531--6993[label="1;8pkt 8fpkt"];
5531--7918[label="1;8pkt 8fpkt"];
6381--7538[label="1;41pkt 41fpkt"];
6945--7888[label="1;12pkt 12fpkt"];
6993--7918[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="167.20.101.176" dst_port="25"/>
      <filter dst_ip="213.91.98.217" dst_port="53" src_ip="195.179.25.67"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
791[label="179.17.27.140;s;42pkt 42fpkt", shape=diamond, color=yellow];
1113[label="81.116.97.187;d;2pkt 2fpkt", shape=diamond, color=yellow];
1496[label="81.122.180.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
1949[label="81.73.49.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
2196[label="214.118.54.198;d;2pkt 2fpkt", shape=diamond, color=yellow];
2271[label="43.145.91.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
2439[label="214.137.53.105;d;2pkt 2fpkt", shape=diamond, color=yellow];
2467[label="221.161.228.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
2560[label="203.116.172.58;d;3pkt 3fpkt", shape=diamond, color=yellow];
2969[label="81.122.180.132;d;1pkt 1fpkt", shape=hexagon, color=black];
3260[label="81.73.49.202;d;1pkt 1fpkt", shape=hexagon, color=black];
3642[label="179.17.27.140;s;42pkt 42fpkt", shape=hexagon, color=black];
5135[label="179.17.27.140;46pkt 46fpkt", shape=pentagon, color=darkviolet];
6729[label="179.17.27.140;46pkt 46fpkt", shape=invtriangle, color=brown];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.17.27.140:*, *:1214}[42.5532%]&lt;BR/&gt;{179.17.27.140:1214, *:*}[34.0426%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (39.0052%)&lt;BR/&gt; 2014: (3.66492%)&lt;BR/&gt; 1864: (2.09424%)&lt;BR/&gt; 16684: (1.57068%)&lt;BR/&gt; 2120: (1.57068%)&gt;];
}
791--1113[label="1;2pkt 2fpkt"];
791--1496[label="1;1pkt 1fpkt"];
791--1949[label="1;1pkt 1fpkt"];
791--2196[label="1;2pkt 2fpkt"];
791--2271[label="1;1pkt 1fpkt"];
791--2439[label="1;2pkt 2fpkt"];
791--2467[label="1;1pkt 1fpkt"];
791--2560[label="1;3pkt 3fpkt"];
791--2969[label="1;1pkt 1fpkt"];
791--3260[label="1;1pkt 1fpkt"];
791--3642[label="1;42pkt 42fpkt"];
791--5135[label="0.97619;41pkt 41fpkt"];
791--6729[label="0.97619;41pkt 41fpkt"];
1113--3642[label="1;2pkt 2fpkt"];
1113--5135[label="1;2pkt 2fpkt"];
1113--6729[label="1;2pkt 2fpkt"];
1496--2969[label="1;1pkt 1fpkt"];
1496--3642[label="1;1pkt 1fpkt"];
1496--5135[label="1;1pkt 1fpkt"];
1496--6729[label="1;1pkt 1fpkt"];
1949--3260[label="1;1pkt 1fpkt"];
1949--3642[label="1;1pkt 1fpkt"];
1949--5135[label="1;1pkt 1fpkt"];
1949--6729[label="1;1pkt 1fpkt"];
2196--3642[label="1;2pkt 2fpkt"];
2196--5135[label="1;2pkt 2fpkt"];
2196--6729[label="1;2pkt 2fpkt"];
2271--3642[label="1;1pkt 1fpkt"];
2271--5135[label="1;1pkt 1fpkt"];
2271--6729[label="1;1pkt 1fpkt"];
2439--3642[label="1;2pkt 2fpkt"];
2439--5135[label="1;2pkt 2fpkt"];
2439--6729[label="1;2pkt 2fpkt"];
2467--3642[label="1;1pkt 1fpkt"];
2467--5135[label="1;1pkt 1fpkt"];
2467--6729[label="1;1pkt 1fpkt"];
2560--3642[label="1;3pkt 3fpkt"];
2560--5135[label="1;3pkt 3fpkt"];
2560--6729[label="1;3pkt 3fpkt"];
2969--3642[label="1;1pkt 1fpkt"];
2969--5135[label="1;1pkt 1fpkt"];
2969--6729[label="1;1pkt 1fpkt"];
3260--3642[label="1;1pkt 1fpkt"];
3260--5135[label="1;1pkt 1fpkt"];
3260--6729[label="1;1pkt 1fpkt"];
3642--5135[label="0.97619;41pkt 41fpkt"];
3642--6729[label="0.97619;41pkt 41fpkt"];
5135--6729[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter src_ip="179.17.27.140" src_port="1214"/>
      <filter dst_port="1214" src_ip="179.17.27.140"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.827709,2.11876,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
4[label="85.34.110.3s;3pkt 3fpkt", shape=rectangle, color=red];
2258[label="85.34.110.3;s;214pkt 214fpkt", shape=diamond, color=yellow];
2290[label="161.238.12.160;d;115pkt 115fpkt", shape=diamond, color=yellow];
4011[label="85.34.110.3;242pkt 242fpkt", shape=pentagon, color=darkviolet];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.34.110.3:80, *:*}[70.5539%]&lt;BR/&gt;{*:80, 161.238.12.160:*}[32.9446%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8258%)&lt;BR/&gt; 1493: (0.348432%)&lt;BR/&gt; 1492: (0.348432%)&lt;BR/&gt; 1491: (0.348432%)&lt;BR/&gt; 1490: (0.348432%)&gt;];
}
4--2258[label="0.333333;1pkt 1fpkt"];
4--2290[label="0.333333;1pkt 1fpkt"];
4--3741[label="0.333333;1pkt 1fpkt"];
4--3974[label="0.666667;2pkt 2fpkt"];
4--4011[label="0.333333;1pkt 1fpkt"];
2258--2290[label="0.13913;16pkt 16fpkt"];
2258--2484[label="0.121951;5pkt 5fpkt"];
2258--2746[label="0.041958;6pkt 6fpkt"];
2258--2910[label="0.0934579;20pkt 20fpkt"];
2258--3007[label="0.0847458;5pkt 5fpkt"];
2258--3031[label="0.0390625;5pkt 5fpkt"];
2258--3582[label="0.230769;21pkt 21fpkt"];
2258--3741[label="0.13913;16pkt 16fpkt"];
2258--3807[label="0.0934579;20pkt 20fpkt"];
2258--3950[label="0.00934579;2pkt 2fpkt"];
2258--4011[label="1;214pkt 214fpkt"];
2290--3450[label="0.225;9pkt 9fpkt"];
2290--3741[label="1;115pkt 115fpkt"];
2290--4011[label="0.13913;16pkt 16fpkt"];
2290--4179[label="0.133333;4pkt 4fpkt"];
2290--4530[label="0.18;9pkt 9fpkt"];
2290--5084[label="0.305556;22pkt 22fpkt"];
2290--5743[label="0.0410959;3pkt 3fpkt"];
2290--6089[label="0.133333;4pkt 4fpkt"];
2290--6322[label="0.183673;9pkt 9fpkt"];
2290--6692[label="0.309859;22pkt 22fpkt"];
2290--7137[label="0.0416667;3pkt 3fpkt"];
2290--7356[label="0.137931;4pkt 4fpkt"];
2290--7729[label="0.309859;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="85.34.110.3" src_port="80"/>
      <filter dst_ip="161.238.12.160" src_port="80"/>
    </slice>
    <from sec="1034226046" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
2292[label="136.230.80.150;d;2pkt 2fpkt", shape=diamond, color=yellow];
2294[label="74.6.197.238;s;2pkt 2fpkt", shape=diamond, color=yellow];
3601[label="74.6.197.238;s;2pkt 2fpkt", shape=hexagon, color=black];
5849[label="74.6.197.238;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7211[label="74.6.197.238;2pkt 2fpkt", shape=invtriangle, color=brown];
8061[label="74.6.197.238;1pkt 1fpkt", shape=invhouse, color=bisque];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.6.197.238:1047, 136.230.80.150:21}[50%]&lt;BR/&gt;{74.6.197.238:1060, 136.230.80.150:20}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1060: (30%)&lt;BR/&gt; 20: (30%)&lt;BR/&gt; 1047: (20%)&lt;BR/&gt; 21: (20%)&gt;];
}
2292--2294[label="1;2pkt 2fpkt"];
2292--3601[label="1;2pkt 2fpkt"];
2292--5849[label="1;1pkt 1fpkt"];
2292--7211[label="1;2pkt 2fpkt"];
2292--8061[label="1;1pkt 1fpkt"];
2294--3601[label="1;2pkt 2fpkt"];
2294--5849[label="1;1pkt 1fpkt"];
2294--7211[label="1;2pkt 2fpkt"];
2294--8061[label="1;1pkt 1fpkt"];
3601--5849[label="1;1pkt 1fpkt"];
3601--7211[label="1;2pkt 2fpkt"];
3601--8061[label="1;1pkt 1fpkt"];
5849--7211[label="1;1pkt 1fpkt"];
5849--8061[label="1;1pkt 1fpkt"];
7211--8061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.230.80.150" dst_port="20" src_ip="74.6.197.238" src_port="1060"/>
      <filter dst_ip="136.230.80.150" dst_port="21" src_ip="74.6.197.238" src_port="1047"/>
    </slice>
    <from sec="1034226315" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,501,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
2042[label="213.91.101.23;s;5pkt 5fpkt", shape=diamond, color=yellow];
4183[label="213.91.101.23;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6093[label="213.91.101.23;2pkt 2fpkt", shape=invtriangle, color=brown];
7360[label="213.91.101.23;1pkt 1fpkt", shape=invhouse, color=bisque];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.101.23:21, 197.40.33.15:3182}[20%]&lt;BR/&gt;{213.91.101.23:21, 197.51.30.16:1936}[20%]&lt;BR/&gt;{213.91.101.23:21, 197.40.51.80:1431}[20%]&lt;BR/&gt;{213.91.101.23:21, 197.40.44.102:1875}[20%]&lt;BR/&gt;{213.91.101.23:21, 197.40.32.220:2614}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 1936: (22.2222%)&lt;BR/&gt; 3182: (11.1111%)&lt;BR/&gt; 2614: (5.55556%)&lt;BR/&gt; 1875: (5.55556%)&gt;];
}
2042--2306[label="0.5;1pkt 1fpkt"];
2042--4183[label="1;1pkt 1fpkt"];
2042--6093[label="1;2pkt 2fpkt"];
2042--7360[label="1;1pkt 1fpkt"];
4183--6093[label="1;1pkt 1fpkt"];
4183--7360[label="1;1pkt 1fpkt"];
6093--7360[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.40.32.220" dst_port="2614" src_ip="213.91.101.23" src_port="21"/>
      <filter dst_ip="197.40.44.102" dst_port="1875" src_ip="213.91.101.23" src_port="21"/>
      <filter dst_ip="197.40.51.80" dst_port="1431" src_ip="213.91.101.23" src_port="21"/>
      <filter dst_ip="197.51.30.16" dst_port="1936" src_ip="213.91.101.23" src_port="21"/>
      <filter dst_ip="197.40.33.15" dst_port="3182" src_ip="213.91.101.23" src_port="21"/>
    </slice>
    <from sec="1034226030" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
2302[label="161.238.19.80;d;31pkt 31fpkt", shape=diamond, color=yellow];
2309[label="212.177.138.44;s;29pkt 29fpkt", shape=diamond, color=yellow];
3476[label="212.177.138.44;s;29pkt 29fpkt", shape=hexagon, color=black];
3604[label="161.238.19.80;d;31pkt 31fpkt", shape=hexagon, color=black];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.177.138.44:80, 161.238.19.80:*}[93.5484%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2106: (1.66667%)&lt;BR/&gt; 2105: (1.66667%)&lt;BR/&gt; 2104: (1.66667%)&lt;BR/&gt; 2103: (1.66667%)&gt;];
}
2302--2309[label="1;29pkt 29fpkt"];
2302--3476[label="1;29pkt 29fpkt"];
2302--3604[label="1;31pkt 31fpkt"];
2309--3476[label="1;29pkt 29fpkt"];
2309--3604[label="1;29pkt 29fpkt"];
3476--3604[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.19.80" src_ip="212.177.138.44" src_port="80"/>
    </slice>
    <from sec="1034226385" usec="0"/>
    <to sec="1034226648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.864713,2.17143,501,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
179[label="185.206.202.140s;48pkt 48fpkt", shape=rectangle, color=red];
2348[label="143.118.175.238;d;80pkt 80fpkt", shape=diamond, color=yellow];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.206.202.140:*, 143.118.175.238:21}[54.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (34.375%)&lt;BR/&gt; 1282: (1.17188%)&lt;BR/&gt; 3285: (0.78125%)&lt;BR/&gt; 2345: (0.78125%)&lt;BR/&gt; 2335: (0.78125%)&gt;];
}
179--738[label="0.833333;40pkt 40fpkt"];
179--2348[label="0.833333;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="143.118.175.238" dst_port="21" src_ip="185.206.202.140"/>
    </slice>
    <from sec="1034226540" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989075,2.1681,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
5[label="161.238.21.4s;2pkt 2fpkt", shape=rectangle, color=red];
2324[label="84.209.28.154;d;11pkt 11fpkt", shape=diamond, color=yellow];
2325[label="161.238.21.4;s;15pkt 15fpkt", shape=diamond, color=yellow];
3612[label="84.209.28.154;d;11pkt 11fpkt", shape=hexagon, color=black];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.21.4:*, 84.209.28.154:80}[73.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1957: (5.12821%)&lt;BR/&gt; 1956: (5.12821%)&lt;BR/&gt; 1959: (3.84615%)&lt;BR/&gt; 1958: (3.84615%)&gt;];
}
5--2324[label="1;2pkt 2fpkt"];
5--2325[label="1;2pkt 2fpkt"];
5--3612[label="1;2pkt 2fpkt"];
2324--2325[label="1;11pkt 11fpkt"];
2324--3612[label="1;11pkt 11fpkt"];
2325--3612[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="84.209.28.154" dst_port="80" src_ip="161.238.21.4"/>
    </slice>
    <from sec="1034226436" usec="0"/>
    <to sec="1034226730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.864713,2.17143,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
105[label="201.103.104.173s;1pkt 1fpkt", shape=rectangle, color=red];
2344[label="201.103.104.173;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.103.104.173:7743, 161.238.227.185:1797}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (50%)&lt;BR/&gt; 1797: (50%)&gt;];
}
105--639[label="1;1pkt 1fpkt"];
105--2344[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.227.185" dst_port="1797" src_ip="201.103.104.173" src_port="7743"/>
    </slice>
    <from sec="1034226517" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
1386[label="167.8.138.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
2347[label="1.45.71.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
3484[label="1.45.71.10;d;1pkt 1fpkt", shape=hexagon, color=black];
4814[label="167.8.138.96;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.138.96:6699, 1.45.71.10:63638}[20%]&lt;BR/&gt;{167.8.138.96:1146, 86.118.232.23:7951}[20%]&lt;BR/&gt;{167.8.138.96:6699, 74.116.52.149:62738}[20%]&lt;BR/&gt;{167.8.138.96:6699, 212.76.160.181:1525}[20%]&lt;BR/&gt;{167.8.138.96:1043, 3.138.228.197:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (43.75%)&lt;BR/&gt; 63638: (25%)&lt;BR/&gt; 62738: (6.25%)&lt;BR/&gt; 7951: (6.25%)&lt;BR/&gt; 1525: (6.25%)&gt;];
}
1386--2347[label="1;1pkt 1fpkt"];
1386--3484[label="1;1pkt 1fpkt"];
1386--4814[label="1;1pkt 1fpkt"];
2347--3484[label="1;1pkt 1fpkt"];
2347--4814[label="1;1pkt 1fpkt"];
3484--4814[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="3.138.228.197" dst_port="6699" src_ip="167.8.138.96" src_port="1043"/>
      <filter dst_ip="212.76.160.181" dst_port="1525" src_ip="167.8.138.96" src_port="6699"/>
      <filter dst_ip="74.116.52.149" dst_port="62738" src_ip="167.8.138.96" src_port="6699"/>
      <filter dst_ip="86.118.232.23" dst_port="7951" src_ip="167.8.138.96" src_port="1146"/>
      <filter dst_ip="1.45.71.10" dst_port="63638" src_ip="167.8.138.96" src_port="6699"/>
    </slice>
    <from sec="1034226098" usec="0"/>
    <to sec="1034226722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.862647,2.08731,999,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
378[label="1.120.24.247s;2pkt 2fpkt", shape=rectangle, color=red];
2375[label="136.230.119.72;d;13pkt 13fpkt", shape=diamond, color=yellow];
5473[label="203.177.145.182;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6952[label="203.177.145.182;4pkt 4fpkt", shape=invtriangle, color=brown];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.135.42.64:5001, 136.230.119.72:*}[23.5294%]&lt;BR/&gt;{*:5100, *:*}[23.5294%]&lt;BR/&gt;{203.177.145.182:*, *:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (19.5652%)&lt;BR/&gt; 23: (15.2174%)&lt;BR/&gt; 5100: (10.8696%)&lt;BR/&gt; 1109: (6.52174%)&lt;BR/&gt; 52160: (4.34783%)&gt;];
}
378--2375[label="0.5;1pkt 1fpkt"];
2375--5473[label="0.25;1pkt 1fpkt"];
2375--6952[label="0.25;1pkt 1fpkt"];
5473--6952[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="203.177.145.182"/>
      <filter src_port="5100"/>
      <filter dst_ip="136.230.119.72" src_ip="86.135.42.64" src_port="5001"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
810[label="210.150.32.238;s;15pkt 15fpkt", shape=diamond, color=yellow];
1472[label="136.230.98.2;d;28pkt 28fpkt", shape=diamond, color=yellow];
1692[label="136.230.78.34;d;2pkt 2fpkt", shape=diamond, color=yellow];
1712[label="85.178.53.242;s;8pkt 8fpkt", shape=diamond, color=yellow];
2362[label="136.230.78.144;d;1pkt 1fpkt", shape=diamond, color=yellow];
2387[label="136.230.125.84;d;21pkt 21fpkt", shape=diamond, color=yellow];
2945[label="210.150.32.238;s;15pkt 15fpkt", shape=hexagon, color=black];
2959[label="136.230.98.2;d;28pkt 28fpkt", shape=hexagon, color=black];
3264[label="196.34.143.18;s;12pkt 12fpkt", shape=hexagon, color=black];
3650[label="136.230.78.144;d;1pkt 1fpkt", shape=hexagon, color=black];
3813[label="136.230.98.2;d;26pkt 26fpkt", shape=polygon, color=gold];
5847[label="210.150.32.238;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5867[label="85.178.53.242;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7210[label="210.150.32.238;15pkt 15fpkt", shape=invtriangle, color=brown];
8060[label="210.150.32.238;15pkt 15fpkt", shape=invhouse, color=bisque];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.230.98.2:*}[35.443%]&lt;BR/&gt;{*:*, 136.230.125.84:*}[26.5823%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6666: (15.7143%)&lt;BR/&gt; 25: (4.28571%)&lt;BR/&gt; 113: (3.80952%)&lt;BR/&gt; 5190: (3.57143%)&lt;BR/&gt; 32769: (2.61905%)&gt;];
}
810--864[label="0.2;3pkt 3fpkt"];
810--1472[label="0.133333;2pkt 2fpkt"];
810--1679[label="0.0666667;1pkt 1fpkt"];
810--1692[label="0.5;1pkt 1fpkt"];
810--2362[label="1;1pkt 1fpkt"];
810--2387[label="0.0666667;1pkt 1fpkt"];
810--2945[label="1;15pkt 15fpkt"];
810--2959[label="0.133333;2pkt 2fpkt"];
810--3650[label="1;1pkt 1fpkt"];
810--3813[label="0.133333;2pkt 2fpkt"];
810--5847[label="1;14pkt 14fpkt"];
810--7210[label="1;15pkt 15fpkt"];
810--8060[label="1;15pkt 15fpkt"];
1472--1712[label="0.25;2pkt 2fpkt"];
1472--2945[label="0.133333;2pkt 2fpkt"];
1472--2959[label="1;28pkt 28fpkt"];
1472--3264[label="0.166667;2pkt 2fpkt"];
1472--3813[label="1;26pkt 26fpkt"];
1472--5847[label="0.142857;2pkt 2fpkt"];
1472--5867[label="0.222222;2pkt 2fpkt"];
1472--7210[label="0.133333;2pkt 2fpkt"];
1472--8060[label="0.133333;2pkt 2fpkt"];
1692--2360[label="1;1pkt 1fpkt"];
1692--2945[label="0.5;1pkt 1fpkt"];
1692--3507[label="1;1pkt 1fpkt"];
1692--5847[label="0.5;1pkt 1fpkt"];
1692--7210[label="0.5;1pkt 1fpkt"];
1692--8060[label="0.5;1pkt 1fpkt"];
1712--2959[label="0.25;2pkt 2fpkt"];
1712--3813[label="0.25;2pkt 2fpkt"];
1712--5867[label="1;8pkt 8fpkt"];
2362--2945[label="1;1pkt 1fpkt"];
2362--3650[label="1;1pkt 1fpkt"];
2362--5847[label="1;1pkt 1fpkt"];
2362--7210[label="1;1pkt 1fpkt"];
2362--8060[label="1;1pkt 1fpkt"];
2387--2945[label="0.0666667;1pkt 1fpkt"];
2387--3087[label="0.111111;1pkt 1fpkt"];
2387--5301[label="0.047619;1pkt 1fpkt"];
2387--5387[label="0.238095;5pkt 5fpkt"];
2387--5847[label="0.0714286;1pkt 1fpkt"];
2387--6848[label="0.047619;1pkt 1fpkt"];
2387--6900[label="0.238095;5pkt 5fpkt"];
2387--7210[label="0.0666667;1pkt 1fpkt"];
2387--8060[label="0.0666667;1pkt 1fpkt"];
2945--2959[label="0.133333;2pkt 2fpkt"];
2945--3650[label="1;1pkt 1fpkt"];
2945--3813[label="0.133333;2pkt 2fpkt"];
2945--5847[label="1;14pkt 14fpkt"];
2945--7210[label="1;15pkt 15fpkt"];
2945--8060[label="1;15pkt 15fpkt"];
2959--3264[label="0.166667;2pkt 2fpkt"];
2959--3813[label="1;26pkt 26fpkt"];
2959--5847[label="0.142857;2pkt 2fpkt"];
2959--5867[label="0.222222;2pkt 2fpkt"];
2959--7210[label="0.133333;2pkt 2fpkt"];
2959--8060[label="0.133333;2pkt 2fpkt"];
3264--3265[label="0.166667;1pkt 1fpkt"];
3264--3813[label="0.166667;2pkt 2fpkt"];
3264--4136[label="1;1pkt 1fpkt"];
3264--6060[label="1;1pkt 1fpkt"];
3650--5847[label="1;1pkt 1fpkt"];
3650--7210[label="1;1pkt 1fpkt"];
3650--8060[label="1;1pkt 1fpkt"];
3813--5847[label="0.142857;2pkt 2fpkt"];
3813--5867[label="0.222222;2pkt 2fpkt"];
3813--7210[label="0.133333;2pkt 2fpkt"];
3813--8060[label="0.133333;2pkt 2fpkt"];
5847--7210[label="1;14pkt 14fpkt"];
5847--8060[label="1;14pkt 14fpkt"];
7210--8060[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="136.230.98.2"/>
      <filter dst_ip="136.230.125.84"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
1703[label="219.64.96.249;s;194pkt 194fpkt", shape=diamond, color=yellow];
3088[label="219.64.96.249;s;117pkt 117fpkt", shape=hexagon, color=black];
5843[label="85.34.108.237;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5920[label="219.64.96.249;219pkt 219fpkt", shape=pentagon, color=darkviolet];
7207[label="85.34.108.237;6pkt 6fpkt", shape=invtriangle, color=brown];
7254[label="219.64.96.249;218pkt 218fpkt", shape=invtriangle, color=brown];
8058[label="85.34.108.237;5pkt 5fpkt", shape=invhouse, color=bisque];
8085[label="219.64.96.249;218pkt 218fpkt", shape=invhouse, color=bisque];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.64.96.249:53, *:*}[97.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.0692%)&lt;BR/&gt; 1863: (0.814664%)&lt;BR/&gt; 1073: (0.661914%)&lt;BR/&gt; 1739: (0.509165%)&lt;BR/&gt; 1310: (0.509165%)&gt;];
}
1703--3088[label="1;117pkt 117fpkt"];
1703--3941[label="0.0103093;2pkt 2fpkt"];
1703--3945[label="0.0103093;2pkt 2fpkt"];
1703--3949[label="0.103093;20pkt 20fpkt"];
1703--3954[label="0.0103093;2pkt 2fpkt"];
1703--3958[label="0.0103093;2pkt 2fpkt"];
1703--3964[label="0.0103093;2pkt 2fpkt"];
1703--3968[label="0.0103093;2pkt 2fpkt"];
1703--5920[label="1;194pkt 194fpkt"];
1703--7254[label="0.994845;193pkt 193fpkt"];
1703--8085[label="0.994845;193pkt 193fpkt"];
3088--3941[label="0.017094;2pkt 2fpkt"];
3088--3945[label="0.017094;2pkt 2fpkt"];
3088--3949[label="0.17094;20pkt 20fpkt"];
3088--3954[label="0.017094;2pkt 2fpkt"];
3088--3958[label="0.017094;2pkt 2fpkt"];
3088--3964[label="0.017094;2pkt 2fpkt"];
3088--3968[label="0.017094;2pkt 2fpkt"];
3088--5920[label="1;117pkt 117fpkt"];
3088--7254[label="1;117pkt 117fpkt"];
3088--8085[label="1;117pkt 117fpkt"];
5843--7207[label="1;5pkt 5fpkt"];
5843--8058[label="1;5pkt 5fpkt"];
5920--7254[label="1;218pkt 218fpkt"];
5920--8085[label="1;218pkt 218fpkt"];
7207--8058[label="1;5pkt 5fpkt"];
7254--8085[label="1;218pkt 218fpkt"];
</description>
    <slice>
      <filter src_ip="219.64.96.249" src_port="53"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
2399[label="192.168.128.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.105.79.83:4445, 192.168.128.255:4445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4445: (100%)&gt;];
}
2399--6439[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.128.255" dst_port="4445" src_ip="141.105.79.83" src_port="4445"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987269,2.08385,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
99[label="17.227.142.160s;2pkt 2fpkt", shape=rectangle, color=red];
2267[label="17.227.142.160;s;15pkt 15fpkt", shape=diamond, color=yellow];
2438[label="167.8.204.38;d;16pkt 16fpkt", shape=diamond, color=yellow];
3712[label="167.8.204.38;d;16pkt 16fpkt", shape=hexagon, color=black];
5293[label="17.227.142.160;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6841[label="17.227.142.160;15pkt 15fpkt", shape=invtriangle, color=brown];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.227.142.160:3128, 167.8.204.38:*}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (48.7342%)&lt;BR/&gt; 1142: (3.79747%)&lt;BR/&gt; 1141: (3.79747%)&lt;BR/&gt; 1162: (3.16456%)&lt;BR/&gt; 1151: (3.16456%)&gt;];
}
99--2267[label="1;2pkt 2fpkt"];
99--2438[label="1;2pkt 2fpkt"];
99--3712[label="1;2pkt 2fpkt"];
99--5293[label="1;2pkt 2fpkt"];
99--6841[label="1;2pkt 2fpkt"];
2267--2438[label="1;15pkt 15fpkt"];
2267--3712[label="1;15pkt 15fpkt"];
2267--5293[label="1;15pkt 15fpkt"];
2267--6841[label="1;15pkt 15fpkt"];
2438--3712[label="1;16pkt 16fpkt"];
2438--5293[label="1;15pkt 15fpkt"];
2438--6841[label="1;15pkt 15fpkt"];
3712--5293[label="1;15pkt 15fpkt"];
3712--6841[label="1;15pkt 15fpkt"];
5293--6841[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.204.38" src_ip="17.227.142.160" src_port="3128"/>
    </slice>
    <from sec="1034226008" usec="0"/>
    <to sec="1034226701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
4962[label="161.238.11.117;38pkt 38fpkt", shape=pentagon, color=darkviolet];
6603[label="161.238.11.117;38pkt 38fpkt", shape=invtriangle, color=brown];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.11.117:*, 192.243.152.95:80}[94.7368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2254: (1.31579%)&lt;BR/&gt; 2253: (1.31579%)&lt;BR/&gt; 2252: (1.31579%)&lt;BR/&gt; 2251: (1.31579%)&gt;];
}
4962--6603[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="192.243.152.95" dst_port="80" src_ip="161.238.11.117"/>
    </slice>
    <from sec="1034226305" usec="0"/>
    <to sec="1034226324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
2210[label="185.206.200.44;s;144pkt 144fpkt", shape=diamond, color=yellow];
2455[label="86.169.5.117;d;158pkt 158fpkt", shape=diamond, color=yellow];
3720[label="86.169.5.117;d;158pkt 158fpkt", shape=hexagon, color=black];
4374[label="185.206.200.44;163pkt 163fpkt", shape=pentagon, color=darkviolet];
6219[label="185.206.200.44;162pkt 162fpkt", shape=invtriangle, color=brown];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.206.200.44:80, 86.169.5.117:*}[89.9441%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9618%)&lt;BR/&gt; 8080: (2.03822%)&lt;BR/&gt; 4985: (0.318471%)&lt;BR/&gt; 4978: (0.318471%)&lt;BR/&gt; 4977: (0.318471%)&gt;];
}
2210--2455[label="0.986111;142pkt 142fpkt"];
2210--3720[label="0.986111;142pkt 142fpkt"];
2210--3950[label="0.0625;9pkt 9fpkt"];
2210--4374[label="1;144pkt 144fpkt"];
2210--6219[label="0.993056;143pkt 143fpkt"];
2455--3720[label="1;158pkt 158fpkt"];
2455--3950[label="0.056962;9pkt 9fpkt"];
2455--4374[label="0.898734;142pkt 142fpkt"];
2455--6219[label="0.892405;141pkt 141fpkt"];
3720--3950[label="0.056962;9pkt 9fpkt"];
3720--4374[label="0.898734;142pkt 142fpkt"];
3720--6219[label="0.892405;141pkt 141fpkt"];
4374--6219[label="1;162pkt 162fpkt"];
</description>
    <slice>
      <filter dst_ip="86.169.5.117" src_ip="185.206.200.44" src_port="80"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.827709,2.11876,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
312[label="3.120.149.164s;1pkt 1fpkt", shape=rectangle, color=red];
2282[label="213.91.97.164;s;20pkt 20fpkt", shape=diamond, color=yellow];
2487[label="212.86.27.85;d;2pkt 2fpkt", shape=diamond, color=yellow];
5324[label="213.91.97.164;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.97.164:53, *:*}[38.0952%]&lt;BR/&gt;{213.91.97.164:4791, *:53}[28.5714%]&lt;BR/&gt;{213.91.97.164:*, 203.166.11.199:25}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (35.7143%)&lt;BR/&gt; 25: (16.6667%)&lt;BR/&gt; 4791: (14.2857%)&lt;BR/&gt; 1119: (4.7619%)&lt;BR/&gt; 58364: (2.38095%)&gt;];
}
312--2282[label="1;1pkt 1fpkt"];
312--2487[label="1;1pkt 1fpkt"];
312--5324[label="1;1pkt 1fpkt"];
2282--2487[label="1;2pkt 2fpkt"];
2282--3253[label="0.05;1pkt 1fpkt"];
2282--3417[label="0.05;1pkt 1fpkt"];
2282--5324[label="0.947368;18pkt 18fpkt"];
2487--5324[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="213.91.97.164" src_port="53"/>
      <filter dst_ip="203.166.11.199" dst_port="25" src_ip="213.91.97.164"/>
      <filter dst_port="53" src_ip="213.91.97.164" src_port="4791"/>
    </slice>
    <from sec="1034226292" usec="0"/>
    <to sec="1034226779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
2474[label="213.91.97.164;d;12pkt 12fpkt", shape=diamond, color=yellow];
2488[label="212.86.27.85;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 213.91.97.164:4791}[50%]&lt;BR/&gt;{*:*, 213.91.97.164:53}[41.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.4286%)&lt;BR/&gt; 4791: (25%)&lt;BR/&gt; 1119: (7.14286%)&lt;BR/&gt; 25: (7.14286%)&lt;BR/&gt; 58364: (3.57143%)&gt;];
}
2474--2488[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.91.97.164" dst_port="53"/>
      <filter dst_ip="213.91.97.164" dst_port="4791" src_port="53"/>
    </slice>
    <from sec="1034226292" usec="0"/>
    <to sec="1034226615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="3.217.192.3"/>
      <from sec="1034226389" usec="0"/>
      <to sec="1034226737" usec="0"/>
    </slice>
    <from sec="1034226389" usec="0"/>
    <to sec="1034226737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
2500[label="212.24.4.0;d;3pkt 3fpkt", shape=diamond, color=yellow];
2502[label="181.23.232.249;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{181.23.137.116:7776, 212.24.4.0:3510}[33.3333%]&lt;BR/&gt;{181.23.232.134:8888, 212.24.4.0:3509}[33.3333%]&lt;BR/&gt;{181.23.232.249:5001, 212.24.4.0:3511}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (25%)&lt;BR/&gt; 3511: (25%)&lt;BR/&gt; 8888: (12.5%)&lt;BR/&gt; 7776: (12.5%)&lt;BR/&gt; 3510: (12.5%)&gt;];
}
2500--2502[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.4.0" dst_port="3511" src_ip="181.23.232.249" src_port="5001"/>
      <filter dst_ip="212.24.4.0" dst_port="3509" src_ip="181.23.232.134" src_port="8888"/>
      <filter dst_ip="212.24.4.0" dst_port="3510" src_ip="181.23.137.116" src_port="7776"/>
    </slice>
    <from sec="1034226450" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989075,2.1681,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
170[label="161.238.136.71s;2pkt 2fpkt", shape=rectangle, color=red];
1079[label="203.181.66.233;d;112pkt 112fpkt", shape=diamond, color=yellow];
2505[label="161.238.136.71;s;101pkt 101fpkt", shape=diamond, color=yellow];
3618[label="161.238.136.71;s;101pkt 101fpkt", shape=hexagon, color=black];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.136.71:*, 203.181.66.233:80}[90.1786%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52593: (0.632911%)&lt;BR/&gt; 52591: (0.632911%)&lt;BR/&gt; 52592: (0.474684%)&lt;BR/&gt; 52590: (0.474684%)&gt;];
}
170--448[label="0.5;1pkt 1fpkt"];
170--545[label="0.5;1pkt 1fpkt"];
170--1079[label="1;2pkt 2fpkt"];
170--2505[label="1;2pkt 2fpkt"];
170--3618[label="1;2pkt 2fpkt"];
1079--2505[label="1;101pkt 101fpkt"];
1079--3618[label="1;101pkt 101fpkt"];
2505--3618[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_ip="203.181.66.233" dst_port="80" src_ip="161.238.136.71"/>
    </slice>
    <from sec="1034226471" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956891,2.11535,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
182[label="212.24.11.166s;35pkt 35fpkt", shape=rectangle, color=red];
2088[label="212.24.11.166;s;265pkt 265fpkt", shape=diamond, color=yellow];
3336[label="212.24.11.166;s;231pkt 231fpkt", shape=hexagon, color=black];
5335[label="212.24.11.166;265pkt 265fpkt", shape=pentagon, color=darkviolet];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.11.166:*, 85.229.191.221:80}[33.9623%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37428: (0.251256%)&lt;BR/&gt; 37422: (0.251256%)&lt;BR/&gt; 37421: (0.251256%)&lt;BR/&gt; 37419: (0.251256%)&gt;];
}
182--2088[label="1;35pkt 35fpkt"];
182--2508[label="0.6;21pkt 21fpkt"];
182--3336[label="1;35pkt 35fpkt"];
182--5335[label="1;35pkt 35fpkt"];
2088--2109[label="0.481283;90pkt 90fpkt"];
2088--2221[label="0.0517241;6pkt 6fpkt"];
2088--2508[label="0.328947;25pkt 25fpkt"];
2088--3336[label="1;231pkt 231fpkt"];
2088--3471[label="0.529412;90pkt 90fpkt"];
2088--5335[label="1;265pkt 265fpkt"];
3336--3471[label="0.529412;90pkt 90fpkt"];
3336--5335[label="1;231pkt 231fpkt"];
</description>
    <slice>
      <filter dst_ip="85.229.191.221" dst_port="80" src_ip="212.24.11.166"/>
    </slice>
    <from sec="1034226251" usec="0"/>
    <to sec="1034226756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
2298[label="212.24.4.14;s;11pkt 11fpkt", shape=diamond, color=yellow];
2512[label="84.146.17.141;d;2pkt 2fpkt", shape=diamond, color=yellow];
3622[label="84.146.17.141;d;2pkt 2fpkt", shape=hexagon, color=black];
4105[label="212.24.4.14;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6039[label="212.24.4.14;10pkt 10fpkt", shape=invtriangle, color=brown];
7327[label="212.24.4.14;10pkt 10fpkt", shape=invhouse, color=bisque];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.4.14:*, *:21}[45.4545%]&lt;BR/&gt;{212.24.4.14:*, 3.4.39.102:*}[36.3636%]&lt;BR/&gt;{212.24.4.14:*, 84.146.17.141:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (21.1111%)&lt;BR/&gt; 3941: (6.66667%)&lt;BR/&gt; 1039: (6.66667%)&lt;BR/&gt; 1038: (6.66667%)&lt;BR/&gt; 63143: (4.44444%)&gt;];
}
2298--2512[label="1;2pkt 2fpkt"];
2298--3622[label="1;2pkt 2fpkt"];
2298--4105[label="1;10pkt 10fpkt"];
2298--6039[label="1;10pkt 10fpkt"];
2298--7327[label="1;10pkt 10fpkt"];
2512--3622[label="1;2pkt 2fpkt"];
2512--4105[label="1;2pkt 2fpkt"];
2512--6039[label="1;2pkt 2fpkt"];
2512--7327[label="1;2pkt 2fpkt"];
3622--4105[label="1;2pkt 2fpkt"];
3622--6039[label="1;2pkt 2fpkt"];
3622--7327[label="1;2pkt 2fpkt"];
4105--6039[label="1;10pkt 10fpkt"];
4105--7327[label="1;10pkt 10fpkt"];
6039--7327[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="84.146.17.141" src_ip="212.24.4.14"/>
      <filter dst_ip="3.4.39.102" src_ip="212.24.4.14"/>
      <filter dst_port="21" src_ip="212.24.4.14"/>
    </slice>
    <from sec="1034226368" usec="0"/>
    <to sec="1034226730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
1385[label="167.8.138.96;d;2pkt 2fpkt", shape=diamond, color=yellow];
2530[label="213.48.117.163;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.45.71.10:63638, 167.8.138.96:6699}[50%]&lt;BR/&gt;{213.48.117.163:3282, 167.8.138.96:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3282: (33.3333%)&lt;BR/&gt; 63638: (16.6667%)&gt;];
}
1385--2530[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.138.96" dst_port="6699" src_ip="213.48.117.163" src_port="3282"/>
      <filter dst_ip="167.8.138.96" dst_port="6699" src_ip="1.45.71.10" src_port="63638"/>
    </slice>
    <from sec="1034226524" usec="0"/>
    <to sec="1034226722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
2649[label="193.148.85.92;s;2pkt 2fpkt", shape=diamond, color=yellow];
2650[label="161.238.13.37;d;2pkt 2fpkt", shape=diamond, color=yellow];
4785[label="193.148.85.92;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6484[label="193.148.85.92;2pkt 2fpkt", shape=invtriangle, color=brown];
7596[label="193.148.85.92;2pkt 2fpkt", shape=invhouse, color=bisque];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.148.85.92:80, 161.238.13.37:1655}[50%]&lt;BR/&gt;{193.148.85.92:80, 161.238.13.37:1656}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1656: (25%)&lt;BR/&gt; 1655: (25%)&gt;];
}
2649--2650[label="1;2pkt 2fpkt"];
2649--4785[label="1;2pkt 2fpkt"];
2649--6484[label="1;2pkt 2fpkt"];
2649--7596[label="1;2pkt 2fpkt"];
2650--4785[label="1;2pkt 2fpkt"];
2650--6484[label="1;2pkt 2fpkt"];
2650--7596[label="1;2pkt 2fpkt"];
4785--6484[label="1;2pkt 2fpkt"];
4785--7596[label="1;2pkt 2fpkt"];
6484--7596[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.13.37" dst_port="1656" src_ip="193.148.85.92" src_port="80"/>
      <filter dst_ip="161.238.13.37" dst_port="1655" src_ip="193.148.85.92" src_port="80"/>
    </slice>
    <from sec="1034226650" usec="0"/>
    <to sec="1034226728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
580[label="210.150.50.208;s;4pkt 4fpkt", shape=diamond, color=yellow];
581[label="161.238.196.27;d;5pkt 5fpkt", shape=diamond, color=yellow];
2652[label="185.191.54.37;d;3pkt 3fpkt", shape=diamond, color=yellow];
2662[label="161.238.196.27;d;5pkt 5fpkt", shape=hexagon, color=black];
3034[label="210.150.50.208;s;31pkt 31fpkt", shape=hexagon, color=black];
3763[label="185.191.54.37;d;3pkt 3fpkt", shape=hexagon, color=black];
3767[label="161.238.196.27;d;5pkt 5fpkt", shape=polygon, color=gold];
5654[label="210.150.50.208;36pkt 36fpkt", shape=pentagon, color=darkviolet];
7075[label="210.150.50.208;37pkt 37fpkt", shape=invtriangle, color=brown];
7972[label="210.150.50.208;36pkt 36fpkt", shape=invhouse, color=bisque];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.150.50.208:80, 167.8.180.44:*}[57.8947%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1258: (2.12121%)&lt;BR/&gt; 1257: (2.12121%)&lt;BR/&gt; 1255: (2.12121%)&lt;BR/&gt; 1254: (2.12121%)&gt;];
}
580--2652[label="1;3pkt 3fpkt"];
580--3763[label="1;3pkt 3fpkt"];
580--5654[label="1;4pkt 4fpkt"];
580--7075[label="1;4pkt 4fpkt"];
580--7972[label="1;4pkt 4fpkt"];
581--2662[label="1;5pkt 5fpkt"];
581--3034[label="0.8;4pkt 4fpkt"];
581--3767[label="1;5pkt 5fpkt"];
581--5654[label="0.8;4pkt 4fpkt"];
581--7075[label="0.8;4pkt 4fpkt"];
581--7972[label="0.8;4pkt 4fpkt"];
2652--3763[label="1;3pkt 3fpkt"];
2652--5654[label="1;3pkt 3fpkt"];
2652--7075[label="1;3pkt 3fpkt"];
2652--7972[label="1;3pkt 3fpkt"];
2662--3034[label="0.8;4pkt 4fpkt"];
2662--3767[label="1;5pkt 5fpkt"];
2662--5654[label="0.8;4pkt 4fpkt"];
2662--7075[label="0.8;4pkt 4fpkt"];
2662--7972[label="0.8;4pkt 4fpkt"];
3034--3143[label="0.0645161;2pkt 2fpkt"];
3034--3634[label="0.709677;22pkt 22fpkt"];
3034--3767[label="0.8;4pkt 4fpkt"];
3034--3807[label="0.0322581;1pkt 1fpkt"];
3034--3950[label="0.0322581;1pkt 1fpkt"];
3034--5654[label="0.967742;30pkt 30fpkt"];
3034--7075[label="1;31pkt 31fpkt"];
3034--7972[label="0.967742;30pkt 30fpkt"];
3763--5654[label="1;3pkt 3fpkt"];
3763--7075[label="1;3pkt 3fpkt"];
3763--7972[label="1;3pkt 3fpkt"];
3767--5654[label="0.8;4pkt 4fpkt"];
3767--7075[label="0.8;4pkt 4fpkt"];
3767--7972[label="0.8;4pkt 4fpkt"];
5654--7075[label="1;36pkt 36fpkt"];
5654--7972[label="1;36pkt 36fpkt"];
7075--7972[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.180.44" src_ip="210.150.50.208" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
2536[label="161.238.11.49;d;18pkt 18fpkt", shape=diamond, color=yellow];
2540[label="2.148.84.80;s;2pkt 2fpkt", shape=diamond, color=yellow];
2658[label="2.148.85.185;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.148.93.54:80, 161.238.11.49:*}[66.6667%]&lt;BR/&gt;{*:554, 161.238.11.49:*}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.087%)&lt;BR/&gt; 554: (21.7391%)&lt;BR/&gt; 6970: (8.69565%)&lt;BR/&gt; 1106: (4.34783%)&lt;BR/&gt; 1103: (4.34783%)&gt;];
}
2536--2540[label="1;2pkt 2fpkt"];
2536--2658[label="1;3pkt 3fpkt"];
2536--3953[label="0.0555556;1pkt 1fpkt"];
2536--5151[label="0.0555556;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.11.49" src_port="554"/>
      <filter dst_ip="161.238.11.49" src_ip="2.148.93.54" src_port="80"/>
    </slice>
    <from sec="1034226587" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
592[label="200.91.113.76;s;1pkt 1fpkt", shape=diamond, color=yellow];
2666[label="200.91.113.76;s;1pkt 1fpkt", shape=hexagon, color=black];
3769[label="200.91.113.76;s;1pkt 1fpkt", shape=polygon, color=gold];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.91.113.76:8864, 167.8.143.23:8864}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8864: (100%)&gt;];
}
592--2666[label="1;1pkt 1fpkt"];
592--3769[label="1;1pkt 1fpkt"];
2666--3769[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.143.23" dst_port="8864" src_ip="200.91.113.76" src_port="8864"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
604[label="161.238.41.95;d;1pkt 1fpkt", shape=diamond, color=yellow];
607[label="86.207.64.98;s;13pkt 13fpkt", shape=diamond, color=yellow];
2668[label="86.207.64.98;s;1pkt 1fpkt", shape=hexagon, color=black];
2760[label="161.238.41.95;d;1pkt 1fpkt", shape=hexagon, color=black];
4829[label="86.207.64.98;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6512[label="86.207.64.98;12pkt 12fpkt", shape=invtriangle, color=brown];
7614[label="86.207.64.98;13pkt 13fpkt", shape=invhouse, color=bisque];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.207.64.98:80, 136.230.111.35:*}[46.1538%]&lt;BR/&gt;{86.207.64.98:80, 212.18.106.107:*}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1214: (5.55556%)&lt;BR/&gt; 4026: (3.7037%)&lt;BR/&gt; 3848: (3.7037%)&lt;BR/&gt; 3829: (3.7037%)&gt;];
}
604--607[label="1;1pkt 1fpkt"];
604--2668[label="1;1pkt 1fpkt"];
604--2760[label="1;1pkt 1fpkt"];
604--4829[label="1;1pkt 1fpkt"];
604--7614[label="1;1pkt 1fpkt"];
607--653[label="0.461538;6pkt 6fpkt"];
607--785[label="0.461538;6pkt 6fpkt"];
607--2668[label="1;1pkt 1fpkt"];
607--2760[label="1;1pkt 1fpkt"];
607--2798[label="0.461538;6pkt 6fpkt"];
607--2910[label="0.230769;3pkt 3fpkt"];
607--3807[label="0.230769;3pkt 3fpkt"];
607--3950[label="0.307692;4pkt 4fpkt"];
607--4829[label="1;13pkt 13fpkt"];
607--6512[label="1;12pkt 12fpkt"];
607--7614[label="1;13pkt 13fpkt"];
2668--2760[label="1;1pkt 1fpkt"];
2668--4829[label="1;1pkt 1fpkt"];
2668--7614[label="1;1pkt 1fpkt"];
2760--4829[label="1;1pkt 1fpkt"];
2760--7614[label="1;1pkt 1fpkt"];
4829--6512[label="1;12pkt 12fpkt"];
4829--7614[label="1;13pkt 13fpkt"];
6512--7614[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.106.107" src_ip="86.207.64.98" src_port="80"/>
      <filter dst_ip="136.230.111.35" src_ip="86.207.64.98" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,999,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
104[label="74.89.251.171s;2pkt 2fpkt", shape=rectangle, color=red];
651[label="185.191.52.15;d;51pkt 51fpkt", shape=diamond, color=yellow];
1057[label="81.41.5.150;s;1pkt 1fpkt", shape=diamond, color=yellow];
1159[label="43.13.78.83;s;1pkt 1fpkt", shape=diamond, color=yellow];
1489[label="74.89.251.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
2305[label="75.200.240.253;s;2pkt 2fpkt", shape=diamond, color=yellow];
2680[label="185.191.52.15;d;51pkt 51fpkt", shape=hexagon, color=black];
2777[label="81.41.5.150;s;1pkt 1fpkt", shape=hexagon, color=black];
3475[label="75.200.240.253;s;2pkt 2fpkt", shape=hexagon, color=black];
3896[label="75.200.240.253;s;2pkt 2fpkt", shape=polygon, color=gold];
5139[label="43.12.199.140;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5216[label="81.41.5.150;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6732[label="43.12.199.140;2pkt 2fpkt", shape=invtriangle, color=brown];
7753[label="43.12.199.140;3pkt 3fpkt", shape=invhouse, color=bisque];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 185.191.52.15:6257}[79.2453%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (76.2295%)&lt;BR/&gt; 6699: (9.42623%)&lt;BR/&gt; 0: (4.09836%)&lt;BR/&gt; 4364: (2.04918%)&lt;BR/&gt; 2873: (2.04918%)&gt;];
}
104--651[label="0.5;1pkt 1fpkt"];
104--653[label="0.5;1pkt 1fpkt"];
104--1489[label="1;1pkt 1fpkt"];
104--2680[label="0.5;1pkt 1fpkt"];
104--2910[label="0.5;1pkt 1fpkt"];
104--3807[label="0.5;1pkt 1fpkt"];
104--3950[label="0.5;1pkt 1fpkt"];
651--1057[label="1;1pkt 1fpkt"];
651--1159[label="1;1pkt 1fpkt"];
651--1489[label="1;1pkt 1fpkt"];
651--2305[label="1;2pkt 2fpkt"];
651--2680[label="1;51pkt 51fpkt"];
651--2777[label="1;1pkt 1fpkt"];
651--3475[label="1;2pkt 2fpkt"];
651--3896[label="1;2pkt 2fpkt"];
651--3948[label="0.431373;22pkt 22fpkt"];
651--3952[label="0.431373;22pkt 22fpkt"];
651--3961[label="0.431373;22pkt 22fpkt"];
651--3963[label="0.431373;22pkt 22fpkt"];
651--3971[label="0.431373;22pkt 22fpkt"];
651--3973[label="0.431373;22pkt 22fpkt"];
651--5139[label="1;2pkt 2fpkt"];
651--5216[label="1;1pkt 1fpkt"];
651--6732[label="1;2pkt 2fpkt"];
651--7753[label="0.666667;2pkt 2fpkt"];
1057--2680[label="1;1pkt 1fpkt"];
1057--2777[label="1;1pkt 1fpkt"];
1057--5216[label="1;1pkt 1fpkt"];
1159--2680[label="1;1pkt 1fpkt"];
1489--2680[label="1;1pkt 1fpkt"];
2305--2680[label="1;2pkt 2fpkt"];
2305--3475[label="1;2pkt 2fpkt"];
2305--3896[label="1;2pkt 2fpkt"];
2680--2777[label="1;1pkt 1fpkt"];
2680--3475[label="1;2pkt 2fpkt"];
2680--3896[label="1;2pkt 2fpkt"];
2680--3948[label="0.431373;22pkt 22fpkt"];
2680--3952[label="0.431373;22pkt 22fpkt"];
2680--3961[label="0.431373;22pkt 22fpkt"];
2680--3963[label="0.431373;22pkt 22fpkt"];
2680--3971[label="0.431373;22pkt 22fpkt"];
2680--3973[label="0.431373;22pkt 22fpkt"];
2680--5139[label="1;2pkt 2fpkt"];
2680--5216[label="1;1pkt 1fpkt"];
2680--6732[label="1;2pkt 2fpkt"];
2680--7753[label="0.666667;2pkt 2fpkt"];
2777--5216[label="1;1pkt 1fpkt"];
3475--3896[label="1;2pkt 2fpkt"];
5139--6732[label="1;2pkt 2fpkt"];
5139--7753[label="1;2pkt 2fpkt"];
6732--7753[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.52.15" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23331,2.23684,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
672[label="87.77.130.75;s;1pkt 1fpkt", shape=diamond, color=yellow];
2685[label="87.77.130.75;s;1pkt 1fpkt", shape=hexagon, color=black];
3774[label="87.77.130.75;s;1pkt 1fpkt", shape=polygon, color=gold];
4637[label="87.77.130.75;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.77.130.75:6699, 167.8.141.82:1119}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1119: (50%)&gt;];
}
672--1414[label="1;1pkt 1fpkt"];
672--2685[label="1;1pkt 1fpkt"];
672--3774[label="1;1pkt 1fpkt"];
672--4637[label="1;1pkt 1fpkt"];
2685--3774[label="1;1pkt 1fpkt"];
2685--4637[label="1;1pkt 1fpkt"];
3774--4637[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.141.82" dst_port="1119" src_ip="87.77.130.75" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
674[label="141.0.236.83;s;2pkt 2fpkt", shape=diamond, color=yellow];
675[label="210.150.67.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
2686[label="141.0.236.83;s;2pkt 2fpkt", shape=hexagon, color=black];
4715[label="141.0.236.83;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.0.236.83:2007, 85.34.108.12:1863}[50%]&lt;BR/&gt;{141.0.236.83:2151, 210.150.67.119:8042}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8042: (28.5714%)&lt;BR/&gt; 2151: (28.5714%)&lt;BR/&gt; 2007: (21.4286%)&lt;BR/&gt; 1863: (21.4286%)&gt;];
}
674--675[label="1;1pkt 1fpkt"];
674--2686[label="1;2pkt 2fpkt"];
674--4715[label="1;2pkt 2fpkt"];
675--2686[label="1;1pkt 1fpkt"];
675--4715[label="1;1pkt 1fpkt"];
2686--4715[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.150.67.119" dst_port="8042" src_ip="141.0.236.83" src_port="2151"/>
      <filter dst_ip="85.34.108.12" dst_port="1863" src_ip="141.0.236.83" src_port="2007"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
686[label="58.129.12.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
688[label="185.191.188.172;s;3pkt 3fpkt", shape=diamond, color=yellow];
1149[label="202.234.21.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
2691[label="58.129.12.132;d;1pkt 1fpkt", shape=hexagon, color=black];
2692[label="185.191.188.172;s;3pkt 3fpkt", shape=hexagon, color=black];
3648[label="202.234.21.132;d;1pkt 1fpkt", shape=hexagon, color=black];
5395[label="185.191.188.172;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6906[label="185.191.188.172;3pkt 3fpkt", shape=invtriangle, color=brown];
7866[label="185.191.188.172;3pkt 3fpkt", shape=invhouse, color=bisque];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.188.172:1893, 86.208.133.59:6699}[33.3333%]&lt;BR/&gt;{185.191.188.172:6699, 58.129.12.132:2051}[33.3333%]&lt;BR/&gt;{185.191.188.172:6699, 202.234.21.132:2127}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2051: (19.4444%)&lt;BR/&gt; 2127: (16.6667%)&lt;BR/&gt; 1893: (13.8889%)&gt;];
}
686--688[label="1;1pkt 1fpkt"];
686--2691[label="1;1pkt 1fpkt"];
686--2692[label="1;1pkt 1fpkt"];
686--5395[label="1;1pkt 1fpkt"];
686--6906[label="1;1pkt 1fpkt"];
686--7866[label="1;1pkt 1fpkt"];
688--1149[label="1;1pkt 1fpkt"];
688--2691[label="1;1pkt 1fpkt"];
688--2692[label="1;3pkt 3fpkt"];
688--3648[label="1;1pkt 1fpkt"];
688--5395[label="1;2pkt 2fpkt"];
688--6906[label="1;3pkt 3fpkt"];
688--7866[label="1;3pkt 3fpkt"];
1149--2692[label="1;1pkt 1fpkt"];
1149--3648[label="1;1pkt 1fpkt"];
1149--6906[label="1;1pkt 1fpkt"];
1149--7866[label="1;1pkt 1fpkt"];
2691--2692[label="1;1pkt 1fpkt"];
2691--5395[label="1;1pkt 1fpkt"];
2691--6906[label="1;1pkt 1fpkt"];
2691--7866[label="1;1pkt 1fpkt"];
2692--3648[label="1;1pkt 1fpkt"];
2692--5395[label="1;2pkt 2fpkt"];
2692--6906[label="1;3pkt 3fpkt"];
2692--7866[label="1;3pkt 3fpkt"];
3648--6906[label="1;1pkt 1fpkt"];
3648--7866[label="1;1pkt 1fpkt"];
5395--6906[label="1;2pkt 2fpkt"];
5395--7866[label="1;2pkt 2fpkt"];
6906--7866[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="202.234.21.132" dst_port="2127" src_ip="185.191.188.172" src_port="6699"/>
      <filter dst_ip="58.129.12.132" dst_port="2051" src_ip="185.191.188.172" src_port="6699"/>
      <filter dst_ip="86.208.133.59" dst_port="6699" src_ip="185.191.188.172" src_port="1893"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
707[label="161.238.69.27;s;3pkt 3fpkt", shape=diamond, color=yellow];
708[label="2.148.78.201;d;2pkt 2fpkt", shape=diamond, color=yellow];
2314[label="2.148.78.205;d;1pkt 1fpkt", shape=diamond, color=yellow];
2697[label="2.148.78.201;d;2pkt 2fpkt", shape=hexagon, color=black];
3051[label="161.238.69.27;s;3pkt 3fpkt", shape=hexagon, color=black];
3610[label="2.148.78.205;d;1pkt 1fpkt", shape=hexagon, color=black];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.69.27:1149, 2.148.78.205:1755}[33.3333%]&lt;BR/&gt;{161.238.69.27:1146, 2.148.78.201:1755}[33.3333%]&lt;BR/&gt;{161.238.69.27:1148, 2.148.78.201:1755}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 1149: (16.6667%)&lt;BR/&gt; 1148: (16.6667%)&lt;BR/&gt; 1146: (16.6667%)&gt;];
}
707--708[label="1;2pkt 2fpkt"];
707--2314[label="1;1pkt 1fpkt"];
707--2697[label="1;2pkt 2fpkt"];
707--3051[label="1;3pkt 3fpkt"];
707--3610[label="1;1pkt 1fpkt"];
708--2697[label="1;2pkt 2fpkt"];
708--3051[label="1;2pkt 2fpkt"];
2314--3051[label="1;1pkt 1fpkt"];
2314--3610[label="1;1pkt 1fpkt"];
2697--3051[label="1;2pkt 2fpkt"];
3051--3610[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="2.148.78.201" dst_port="1755" src_ip="161.238.69.27" src_port="1148"/>
      <filter dst_ip="2.148.78.201" dst_port="1755" src_ip="161.238.69.27" src_port="1146"/>
      <filter dst_ip="2.148.78.205" dst_port="1755" src_ip="161.238.69.27" src_port="1149"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
724[label="218.236.52.94;s;80pkt 80fpkt", shape=diamond, color=yellow];
2702[label="218.236.52.94;s;71pkt 71fpkt", shape=hexagon, color=black];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.236.52.94:80, 141.98.93.221:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3632: (0.662252%)&lt;BR/&gt; 3627: (0.662252%)&lt;BR/&gt; 3622: (0.662252%)&lt;BR/&gt; 3610: (0.662252%)&gt;];
}
724--2702[label="1;71pkt 71fpkt"];
724--3950[label="0.075;6pkt 6fpkt"];
2702--3950[label="0.084507;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.93.221" src_ip="218.236.52.94" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987269,2.08385,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
166[label="203.181.66.233s;1pkt 1fpkt", shape=rectangle, color=red];
746[label="203.181.66.233;s;111pkt 111fpkt", shape=diamond, color=yellow];
2334[label="161.238.136.71;d;101pkt 101fpkt", shape=diamond, color=yellow];
2706[label="203.181.66.233;s;106pkt 106fpkt", shape=hexagon, color=black];
5818[label="203.181.66.233;198pkt 198fpkt", shape=pentagon, color=darkviolet];
7188[label="203.181.66.233;199pkt 199fpkt", shape=invtriangle, color=brown];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.181.66.233:80, 161.238.136.71:*}[53.2663%]&lt;BR/&gt;{203.181.66.233:80, 212.18.73.85:*}[27.1357%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52593: (0.349162%)&lt;BR/&gt; 52592: (0.349162%)&lt;BR/&gt; 52591: (0.349162%)&lt;BR/&gt; 52590: (0.349162%)&gt;];
}
166--5818[label="1;1pkt 1fpkt"];
166--7188[label="1;1pkt 1fpkt"];
746--2334[label="1;101pkt 101fpkt"];
746--2706[label="1;106pkt 106fpkt"];
746--5818[label="1;111pkt 111fpkt"];
746--7188[label="1;111pkt 111fpkt"];
2334--2706[label="1;101pkt 101fpkt"];
2334--5818[label="1;101pkt 101fpkt"];
2334--7188[label="1;101pkt 101fpkt"];
2706--5818[label="1;106pkt 106fpkt"];
2706--7188[label="1;106pkt 106fpkt"];
5818--7188[label="1;198pkt 198fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.136.71" src_ip="203.181.66.233" src_port="80"/>
      <filter dst_ip="212.18.73.85" src_ip="203.181.66.233" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
758[label="203.200.92.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
2708[label="161.238.228.114;d;6pkt 6fpkt", shape=hexagon, color=black];
4701[label="203.200.92.82;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1863, 161.238.228.114:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (25%)&lt;BR/&gt; 49195: (18.75%)&lt;BR/&gt; 20472: (18.75%)&lt;BR/&gt; 1036: (6.25%)&lt;BR/&gt; 1033: (6.25%)&gt;];
}
758--2708[label="1;1pkt 1fpkt"];
758--4701[label="1;1pkt 1fpkt"];
2708--3949[label="0.166667;1pkt 1fpkt"];
2708--4701[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.228.114" src_port="1863"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852182,2.15881,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
798[label="161.238.12.182;d;1pkt 1fpkt", shape=diamond, color=yellow];
801[label="179.68.17.25;s;1pkt 1fpkt", shape=diamond, color=yellow];
2712[label="161.238.12.182;d;1pkt 1fpkt", shape=hexagon, color=black];
6101[label="179.68.17.25;1pkt 1fpkt", shape=invtriangle, color=brown];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.68.17.25:80, 161.238.12.182:1547}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1547: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
798--801[label="1;1pkt 1fpkt"];
798--2712[label="1;1pkt 1fpkt"];
798--3950[label="1;1pkt 1fpkt"];
798--6101[label="1;1pkt 1fpkt"];
801--2712[label="1;1pkt 1fpkt"];
801--3950[label="1;1pkt 1fpkt"];
801--6101[label="1;1pkt 1fpkt"];
2712--3950[label="1;1pkt 1fpkt"];
2712--6101[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.12.182" dst_port="1547" src_ip="179.68.17.25" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
816[label="202.227.43.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
2715[label="202.227.43.227;s;1pkt 1fpkt", shape=hexagon, color=black];
3776[label="202.227.43.227;s;1pkt 1fpkt", shape=polygon, color=gold];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.227.43.227:3089, 185.191.210.214:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3089: (50%)&gt;];
}
816--1411[label="1;1pkt 1fpkt"];
816--2715[label="1;1pkt 1fpkt"];
816--3776[label="1;1pkt 1fpkt"];
2715--3776[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.210.214" dst_port="6699" src_ip="202.227.43.227" src_port="3089"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
1000[label="200.233.19.95;s;1pkt 1fpkt", shape=diamond, color=yellow];
2719[label="167.8.142.137;d;2pkt 2fpkt", shape=hexagon, color=black];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.233.19.95:1584, 167.8.142.137:6699}[50%]&lt;BR/&gt;{75.151.223.187:4718, 167.8.142.137:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1584: (33.3333%)&lt;BR/&gt; 4718: (16.6667%)&gt;];
}
1000--2719[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.142.137" dst_port="6699" src_ip="75.151.223.187" src_port="4718"/>
      <filter dst_ip="167.8.142.137" dst_port="6699" src_ip="200.233.19.95" src_port="1584"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
845[label="3.49.233.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
2723[label="3.49.233.84;s;1pkt 1fpkt", shape=hexagon, color=black];
4732[label="3.49.233.84;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.49.233.84:4662, 141.98.93.221:4409}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 4409: (50%)&gt;];
}
845--2723[label="1;1pkt 1fpkt"];
845--4732[label="1;1pkt 1fpkt"];
2723--4732[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.93.221" dst_port="4409" src_ip="3.49.233.84" src_port="4662"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
121[label="200.94.35.199s;3pkt 3fpkt", shape=rectangle, color=red];
188[label="86.234.128.65d;41pkt 41fpkt", shape=rectangle, color=red];
846[label="202.138.232.74;d;1182pkt 1182fpkt", shape=diamond, color=yellow];
847[label="161.238.213.201;s;1232pkt 1232fpkt", shape=diamond, color=yellow];
2118[label="203.237.28.26;d;45pkt 45fpkt", shape=diamond, color=yellow];
2724[label="202.138.232.74;d;685pkt 685fpkt", shape=hexagon, color=black];
3231[label="161.238.213.201;s;1232pkt 1232fpkt", shape=hexagon, color=black];
3350[label="203.237.28.26;d;27pkt 27fpkt", shape=hexagon, color=black];
5613[label="161.238.213.201;1347pkt 1347fpkt", shape=pentagon, color=darkviolet];
7045[label="161.238.213.201;1347pkt 1347fpkt", shape=invtriangle, color=brown];
7955[label="161.238.213.201;1348pkt 1348fpkt", shape=invhouse, color=bisque];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.213.201:*, 202.138.232.74:80}[95.5114%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9588%)&lt;BR/&gt; 3792: (0.0412298%)&lt;BR/&gt; 3303: (0.0412298%)&lt;BR/&gt; 3297: (0.0412298%)&lt;BR/&gt; 3296: (0.0412298%)&gt;];
}
121--420[label="0.333333;1pkt 1fpkt"];
121--430[label="0.333333;1pkt 1fpkt"];
121--431[label="0.333333;1pkt 1fpkt"];
121--439[label="0.333333;1pkt 1fpkt"];
121--442[label="0.333333;1pkt 1fpkt"];
121--448[label="0.333333;1pkt 1fpkt"];
121--535[label="0.333333;1pkt 1fpkt"];
121--536[label="0.333333;1pkt 1fpkt"];
121--542[label="0.333333;1pkt 1fpkt"];
121--544[label="0.333333;1pkt 1fpkt"];
121--545[label="0.333333;1pkt 1fpkt"];
121--597[label="0.333333;1pkt 1fpkt"];
121--847[label="0.333333;1pkt 1fpkt"];
121--848[label="1;1pkt 1fpkt"];
121--2118[label="0.333333;1pkt 1fpkt"];
121--2430[label="0.333333;1pkt 1fpkt"];
121--2520[label="1;1pkt 1fpkt"];
121--2725[label="1;1pkt 1fpkt"];
121--2759[label="0.333333;1pkt 1fpkt"];
121--3231[label="0.333333;1pkt 1fpkt"];
121--3627[label="1;1pkt 1fpkt"];
121--4397[label="1;1pkt 1fpkt"];
121--5613[label="0.333333;1pkt 1fpkt"];
121--7045[label="0.333333;1pkt 1fpkt"];
121--7955[label="0.333333;1pkt 1fpkt"];
188--420[label="0.292683;12pkt 12fpkt"];
188--431[label="1;41pkt 41fpkt"];
188--442[label="0.609756;25pkt 25fpkt"];
188--536[label="1;41pkt 41fpkt"];
188--544[label="0.609756;25pkt 25fpkt"];
188--846[label="0.097561;4pkt 4fpkt"];
188--847[label="0.097561;4pkt 4fpkt"];
188--3231[label="0.097561;4pkt 4fpkt"];
188--5613[label="0.780488;32pkt 32fpkt"];
188--7045[label="0.780488;32pkt 32fpkt"];
188--7955[label="0.780488;32pkt 32fpkt"];
846--847[label="1;1182pkt 1182fpkt"];
846--2724[label="1;685pkt 685fpkt"];
846--3231[label="1;1182pkt 1182fpkt"];
846--3946[label="0.0736041;87pkt 87fpkt"];
846--3959[label="0.0736041;87pkt 87fpkt"];
846--3969[label="0.0736041;87pkt 87fpkt"];
846--5613[label="1;1182pkt 1182fpkt"];
846--7045[label="1;1182pkt 1182fpkt"];
846--7955[label="1;1182pkt 1182fpkt"];
847--2118[label="1;45pkt 45fpkt"];
847--2724[label="1;685pkt 685fpkt"];
847--3231[label="1;1232pkt 1232fpkt"];
847--3350[label="1;27pkt 27fpkt"];
847--3946[label="0.0714286;88pkt 88fpkt"];
847--3959[label="0.0714286;88pkt 88fpkt"];
847--3969[label="0.0714286;88pkt 88fpkt"];
847--5613[label="0.999188;1231pkt 1231fpkt"];
847--7045[label="0.999188;1231pkt 1231fpkt"];
847--7955[label="1;1232pkt 1232fpkt"];
2118--3231[label="1;45pkt 45fpkt"];
2118--3350[label="1;27pkt 27fpkt"];
2118--5613[label="1;45pkt 45fpkt"];
2118--7045[label="1;45pkt 45fpkt"];
2118--7955[label="1;45pkt 45fpkt"];
2724--3231[label="1;685pkt 685fpkt"];
2724--3946[label="0.127007;87pkt 87fpkt"];
2724--3959[label="0.127007;87pkt 87fpkt"];
2724--3969[label="0.127007;87pkt 87fpkt"];
2724--5613[label="1;685pkt 685fpkt"];
2724--7045[label="1;685pkt 685fpkt"];
2724--7955[label="1;685pkt 685fpkt"];
3231--3350[label="1;27pkt 27fpkt"];
3231--3946[label="0.0714286;88pkt 88fpkt"];
3231--3959[label="0.0714286;88pkt 88fpkt"];
3231--3969[label="0.0714286;88pkt 88fpkt"];
3231--5613[label="0.999188;1231pkt 1231fpkt"];
3231--7045[label="0.999188;1231pkt 1231fpkt"];
3231--7955[label="1;1232pkt 1232fpkt"];
3350--5613[label="1;27pkt 27fpkt"];
3350--7045[label="1;27pkt 27fpkt"];
3350--7955[label="1;27pkt 27fpkt"];
5613--7045[label="1;1347pkt 1347fpkt"];
5613--7955[label="1;1347pkt 1347fpkt"];
7045--7955[label="1;1347pkt 1347fpkt"];
</description>
    <slice>
      <filter dst_ip="202.138.232.74" dst_port="80" src_ip="161.238.213.201"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
848[label="81.10.104.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
2725[label="81.10.104.47;s;1pkt 1fpkt", shape=hexagon, color=black];
4397[label="81.10.104.47;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.10.104.47:6699, 167.8.130.20:1197}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1197: (50%)&gt;];
}
848--2725[label="1;1pkt 1fpkt"];
848--2759[label="1;1pkt 1fpkt"];
848--4397[label="1;1pkt 1fpkt"];
2725--2759[label="1;1pkt 1fpkt"];
2725--4397[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.130.20" dst_port="1197" src_ip="81.10.104.47" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_273{
style=filled;
color=gray75;
866[label="167.8.143.115;d;4pkt 4fpkt", shape=diamond, color=yellow];
1362[label="203.200.92.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
2729[label="167.8.143.115;d;4pkt 4fpkt", shape=hexagon, color=black];
2882[label="203.200.92.69;s;1pkt 1fpkt", shape=hexagon, color=black];
3777[label="167.8.143.115;d;4pkt 4fpkt", shape=polygon, color=gold];
4682[label="203.200.92.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5231[label="203.200.93.152;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6795[label="203.200.93.152;25pkt 25fpkt", shape=invtriangle, color=brown];
7793[label="203.200.93.152;24pkt 24fpkt", shape=invhouse, color=bisque];
stat273[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.200.93.152:80, 141.98.11.132:*}[81.4815%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.9438%)&lt;BR/&gt; 49172: (3.37079%)&lt;BR/&gt; 49166: (3.37079%)&lt;BR/&gt; 49173: (2.80899%)&lt;BR/&gt; 20274: (2.80899%)&gt;];
}
866--1362[label="1;1pkt 1fpkt"];
866--2729[label="1;4pkt 4fpkt"];
866--2882[label="1;1pkt 1fpkt"];
866--3777[label="1;4pkt 4fpkt"];
866--4682[label="1;1pkt 1fpkt"];
866--5231[label="0.5;2pkt 2fpkt"];
866--6795[label="0.5;2pkt 2fpkt"];
866--7793[label="0.5;2pkt 2fpkt"];
1362--2729[label="1;1pkt 1fpkt"];
1362--2882[label="1;1pkt 1fpkt"];
1362--3777[label="1;1pkt 1fpkt"];
2729--2882[label="1;1pkt 1fpkt"];
2729--3777[label="1;4pkt 4fpkt"];
2729--4682[label="1;1pkt 1fpkt"];
2729--5231[label="0.5;2pkt 2fpkt"];
2729--6795[label="0.5;2pkt 2fpkt"];
2729--7793[label="0.5;2pkt 2fpkt"];
2882--3777[label="1;1pkt 1fpkt"];
3777--4682[label="1;1pkt 1fpkt"];
3777--5231[label="0.5;2pkt 2fpkt"];
3777--6795[label="0.5;2pkt 2fpkt"];
3777--7793[label="0.5;2pkt 2fpkt"];
5231--6795[label="1;25pkt 25fpkt"];
5231--7793[label="1;24pkt 24fpkt"];
6795--7793[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.11.132" src_ip="203.200.93.152" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
940[label="211.168.181.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
943[label="167.8.90.147;s;4pkt 4fpkt", shape=diamond, color=yellow];
2741[label="167.8.90.147;s;4pkt 4fpkt", shape=hexagon, color=black];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.90.147:1047, 86.118.232.16:7950}[25%]&lt;BR/&gt;{167.8.90.147:1046, 211.168.181.48:6699}[25%]&lt;BR/&gt;{167.8.90.147:1048, 75.133.156.139:6699}[25%]&lt;BR/&gt;{167.8.90.147:1036, 43.160.8.160:6699}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (38.8889%)&lt;BR/&gt; 1046: (16.6667%)&lt;BR/&gt; 7950: (11.1111%)&lt;BR/&gt; 1048: (11.1111%)&lt;BR/&gt; 1047: (11.1111%)&gt;];
}
940--943[label="1;1pkt 1fpkt"];
940--2741[label="1;1pkt 1fpkt"];
943--2741[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="43.160.8.160" dst_port="6699" src_ip="167.8.90.147" src_port="1036"/>
      <filter dst_ip="75.133.156.139" dst_port="6699" src_ip="167.8.90.147" src_port="1048"/>
      <filter dst_ip="211.168.181.48" dst_port="6699" src_ip="167.8.90.147" src_port="1046"/>
      <filter dst_ip="86.118.232.16" dst_port="7950" src_ip="167.8.90.147" src_port="1047"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,504,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
906[label="86.194.164.122;s;18pkt 18fpkt", shape=diamond, color=yellow];
966[label="167.8.91.33;d;12pkt 12fpkt", shape=diamond, color=yellow];
2748[label="167.8.91.33;d;12pkt 12fpkt", shape=hexagon, color=black];
2830[label="86.194.164.122;s;18pkt 18fpkt", shape=hexagon, color=black];
3794[label="86.194.164.122;s;13pkt 13fpkt", shape=polygon, color=gold];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.194.164.122:443, 167.8.91.33:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 33640: (3.42466%)&lt;BR/&gt; 33639: (3.42466%)&lt;BR/&gt; 33638: (3.42466%)&lt;BR/&gt; 33637: (3.42466%)&gt;];
}
906--966[label="1;12pkt 12fpkt"];
906--2748[label="1;12pkt 12fpkt"];
906--2830[label="1;18pkt 18fpkt"];
906--3794[label="1;13pkt 13fpkt"];
966--2748[label="1;12pkt 12fpkt"];
966--2830[label="1;12pkt 12fpkt"];
966--3794[label="1;12pkt 12fpkt"];
2748--2830[label="1;12pkt 12fpkt"];
2748--3794[label="1;12pkt 12fpkt"];
2830--3794[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.91.33" src_ip="86.194.164.122" src_port="443"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32969,2.27422,504,0 0 0 1 1 1 0 0 0 0 0 1 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
1004[label="141.98.4.22;d;2pkt 2fpkt", shape=diamond, color=yellow];
1376[label="84.29.71.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
2753[label="141.98.4.22;d;2pkt 2fpkt", shape=hexagon, color=black];
3802[label="141.98.4.22;d;2pkt 2fpkt", shape=polygon, color=gold];
7685[label="84.29.71.122;1pkt 1fpkt", shape=invhouse, color=bisque];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.29.71.121:80, 141.98.4.22:3863}[50%]&lt;BR/&gt;{84.29.71.122:443, 141.98.4.22:3865}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3865: (31.25%)&lt;BR/&gt; 443: (31.25%)&lt;BR/&gt; 3863: (18.75%)&lt;BR/&gt; 80: (18.75%)&gt;];
}
1004--1376[label="1;1pkt 1fpkt"];
1004--2753[label="1;2pkt 2fpkt"];
1004--3802[label="1;2pkt 2fpkt"];
1004--7685[label="1;1pkt 1fpkt"];
1376--2753[label="1;1pkt 1fpkt"];
1376--3802[label="1;1pkt 1fpkt"];
1376--7685[label="1;1pkt 1fpkt"];
2753--3802[label="1;2pkt 2fpkt"];
2753--7685[label="1;1pkt 1fpkt"];
3802--7685[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.4.22" dst_port="3865" src_ip="84.29.71.122" src_port="443"/>
      <filter dst_ip="141.98.4.22" dst_port="3863" src_ip="84.29.71.121" src_port="80"/>
    </slice>
    <from sec="1034226070" usec="0"/>
    <to sec="1034226124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23331,2.23684,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
1008[label="212.24.29.97;d;2pkt 2fpkt", shape=diamond, color=yellow];
1009[label="201.140.205.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
2754[label="212.24.29.97;d;2pkt 2fpkt", shape=hexagon, color=black];
3803[label="212.24.29.97;d;2pkt 2fpkt", shape=polygon, color=gold];
5540[label="201.140.205.191;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.34.108.54:1863, 212.24.29.97:1042}[50%]&lt;BR/&gt;{201.140.205.191:8864, 212.24.29.97:8864}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8864: (62.5%)&lt;BR/&gt; 1863: (18.75%)&lt;BR/&gt; 1042: (18.75%)&gt;];
}
1008--1009[label="1;1pkt 1fpkt"];
1008--2754[label="1;2pkt 2fpkt"];
1008--3803[label="1;2pkt 2fpkt"];
1008--5540[label="1;1pkt 1fpkt"];
1009--2754[label="1;1pkt 1fpkt"];
1009--3803[label="1;1pkt 1fpkt"];
1009--5540[label="1;1pkt 1fpkt"];
2754--3803[label="1;2pkt 2fpkt"];
2754--5540[label="1;1pkt 1fpkt"];
3803--5540[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.29.97" dst_port="8864" src_ip="201.140.205.191" src_port="8864"/>
      <filter dst_ip="212.24.29.97" dst_port="1042" src_ip="85.34.108.54" src_port="1863"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
590[label="1.35.33.70;s;3pkt 3fpkt", shape=diamond, color=yellow];
1014[label="167.8.143.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
2756[label="167.8.143.193;d;1pkt 1fpkt", shape=hexagon, color=black];
3783[label="167.8.143.193;d;1pkt 1fpkt", shape=polygon, color=gold];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.35.33.70:5001, 212.24.168.191:1150}[33.3333%]&lt;BR/&gt;{1.35.33.70:5001, 167.8.143.193:3546}[33.3333%]&lt;BR/&gt;{1.35.33.70:5001, 212.24.19.217:1080}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 3546: (33.3333%)&lt;BR/&gt; 1150: (8.33333%)&lt;BR/&gt; 1080: (8.33333%)&gt;];
}
590--1014[label="1;1pkt 1fpkt"];
590--1087[label="1;1pkt 1fpkt"];
590--1510[label="0.333333;1pkt 1fpkt"];
590--2756[label="1;1pkt 1fpkt"];
590--3499[label="1;1pkt 1fpkt"];
590--3783[label="1;1pkt 1fpkt"];
1014--2756[label="1;1pkt 1fpkt"];
1014--3783[label="1;1pkt 1fpkt"];
2756--3783[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.19.217" dst_port="1080" src_ip="1.35.33.70" src_port="5001"/>
      <filter dst_ip="167.8.143.193" dst_port="3546" src_ip="1.35.33.70" src_port="5001"/>
      <filter dst_ip="212.24.168.191" dst_port="1150" src_ip="1.35.33.70" src_port="5001"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
595[label="167.135.190.188;s;629pkt 629fpkt", shape=diamond, color=yellow];
2757[label="167.135.190.188;s;421pkt 421fpkt", shape=hexagon, color=black];
5512[label="167.135.190.188;681pkt 681fpkt", shape=pentagon, color=darkviolet];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.135.190.188:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
595--2757[label="1;421pkt 421fpkt"];
595--5512[label="1;629pkt 629fpkt"];
2757--5512[label="1;421pkt 421fpkt"];
</description>
    <slice>
      <filter src_ip="167.135.190.188"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
596[label="168.169.28.203;d;1pkt 1fpkt", shape=diamond, color=yellow];
598[label="167.8.130.20;s;250pkt 250fpkt", shape=diamond, color=yellow];
608[label="43.9.200.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
740[label="43.8.126.211;d;1pkt 1fpkt", shape=diamond, color=yellow];
1228[label="81.121.29.142;d;2pkt 2fpkt", shape=diamond, color=yellow];
1254[label="3.49.142.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
1644[label="75.132.82.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
2328[label="43.65.83.77;d;1pkt 1fpkt", shape=diamond, color=yellow];
2758[label="168.169.28.203;d;1pkt 1fpkt", shape=hexagon, color=black];
2840[label="3.49.142.1;d;1pkt 1fpkt", shape=hexagon, color=black];
2901[label="167.8.130.20;s;193pkt 193fpkt", shape=hexagon, color=black];
3335[label="75.132.82.2;d;1pkt 1fpkt", shape=hexagon, color=black];
3669[label="81.121.29.142;d;2pkt 2fpkt", shape=hexagon, color=black];
4154[label="167.8.130.20;256pkt 256fpkt", shape=pentagon, color=darkviolet];
6072[label="167.8.130.20;256pkt 256fpkt", shape=invtriangle, color=brown];
7346[label="167.8.130.20;257pkt 257fpkt", shape=invhouse, color=bisque];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.130.20:6257, *:6257}[88.7597%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (89.3878%)&lt;BR/&gt; 6699: (4.89796%)&lt;BR/&gt; 16257: (0.408163%)&lt;BR/&gt; 3322: (0.285714%)&lt;BR/&gt; 1217: (0.285714%)&gt;];
}
596--598[label="1;1pkt 1fpkt"];
596--2758[label="1;1pkt 1fpkt"];
596--2901[label="1;1pkt 1fpkt"];
596--4154[label="1;1pkt 1fpkt"];
596--6072[label="1;1pkt 1fpkt"];
596--7346[label="1;1pkt 1fpkt"];
598--608[label="1;1pkt 1fpkt"];
598--740[label="1;1pkt 1fpkt"];
598--1048[label="0.5;1pkt 1fpkt"];
598--1228[label="0.5;1pkt 1fpkt"];
598--1254[label="1;1pkt 1fpkt"];
598--1644[label="1;1pkt 1fpkt"];
598--2328[label="1;1pkt 1fpkt"];
598--2758[label="1;1pkt 1fpkt"];
598--2840[label="1;1pkt 1fpkt"];
598--2901[label="1;193pkt 193fpkt"];
598--3335[label="1;1pkt 1fpkt"];
598--3669[label="0.5;1pkt 1fpkt"];
598--3948[label="0.088;22pkt 22fpkt"];
598--3952[label="0.076;19pkt 19fpkt"];
598--3961[label="0.088;22pkt 22fpkt"];
598--3963[label="0.076;19pkt 19fpkt"];
598--3971[label="0.088;22pkt 22fpkt"];
598--3973[label="0.076;19pkt 19fpkt"];
598--4154[label="0.996;249pkt 249fpkt"];
598--6072[label="0.996;249pkt 249fpkt"];
598--7346[label="1;250pkt 250fpkt"];
608--2901[label="1;1pkt 1fpkt"];
608--4154[label="1;1pkt 1fpkt"];
608--6072[label="1;1pkt 1fpkt"];
608--7346[label="1;1pkt 1fpkt"];
740--2901[label="1;1pkt 1fpkt"];
740--4154[label="1;1pkt 1fpkt"];
740--6072[label="1;1pkt 1fpkt"];
740--7346[label="1;1pkt 1fpkt"];
1228--2901[label="0.5;1pkt 1fpkt"];
1228--3374[label="0.5;1pkt 1fpkt"];
1228--3669[label="1;2pkt 2fpkt"];
1228--4085[label="0.5;1pkt 1fpkt"];
1228--4154[label="0.5;1pkt 1fpkt"];
1228--6022[label="0.5;1pkt 1fpkt"];
1228--6072[label="0.5;1pkt 1fpkt"];
1228--7319[label="0.5;1pkt 1fpkt"];
1228--7346[label="0.5;1pkt 1fpkt"];
1254--2840[label="1;1pkt 1fpkt"];
1254--2901[label="1;1pkt 1fpkt"];
1254--4154[label="1;1pkt 1fpkt"];
1254--6072[label="1;1pkt 1fpkt"];
1254--7346[label="1;1pkt 1fpkt"];
1644--2901[label="1;1pkt 1fpkt"];
1644--3335[label="1;1pkt 1fpkt"];
1644--4154[label="1;1pkt 1fpkt"];
1644--6072[label="1;1pkt 1fpkt"];
1644--7346[label="1;1pkt 1fpkt"];
2328--4154[label="1;1pkt 1fpkt"];
2328--6072[label="1;1pkt 1fpkt"];
2328--7346[label="1;1pkt 1fpkt"];
2758--2901[label="1;1pkt 1fpkt"];
2758--4154[label="1;1pkt 1fpkt"];
2758--6072[label="1;1pkt 1fpkt"];
2758--7346[label="1;1pkt 1fpkt"];
2840--2901[label="1;1pkt 1fpkt"];
2840--4154[label="1;1pkt 1fpkt"];
2840--6072[label="1;1pkt 1fpkt"];
2840--7346[label="1;1pkt 1fpkt"];
2901--3335[label="1;1pkt 1fpkt"];
2901--3669[label="0.5;1pkt 1fpkt"];
2901--3948[label="0.11399;22pkt 22fpkt"];
2901--3952[label="0.0984456;19pkt 19fpkt"];
2901--3961[label="0.11399;22pkt 22fpkt"];
2901--3963[label="0.0984456;19pkt 19fpkt"];
2901--3971[label="0.11399;22pkt 22fpkt"];
2901--3973[label="0.0984456;19pkt 19fpkt"];
2901--4154[label="1;193pkt 193fpkt"];
2901--6072[label="1;193pkt 193fpkt"];
2901--7346[label="1;193pkt 193fpkt"];
3335--4154[label="1;1pkt 1fpkt"];
3335--6072[label="1;1pkt 1fpkt"];
3335--7346[label="1;1pkt 1fpkt"];
3669--4085[label="0.5;1pkt 1fpkt"];
3669--4154[label="0.5;1pkt 1fpkt"];
3669--6022[label="0.5;1pkt 1fpkt"];
3669--6072[label="0.5;1pkt 1fpkt"];
3669--7319[label="0.5;1pkt 1fpkt"];
3669--7346[label="0.5;1pkt 1fpkt"];
4154--6072[label="1;256pkt 256fpkt"];
4154--7346[label="1;256pkt 256fpkt"];
6072--7346[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="167.8.130.20" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25702,2.20707,501,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
629[label="1.92.43.149;s;69pkt 69fpkt", shape=diamond, color=yellow];
2765[label="1.92.43.149;s;32pkt 32fpkt", shape=hexagon, color=black];
3784[label="1.92.43.149;s;1pkt 1fpkt", shape=polygon, color=gold];
5208[label="1.92.43.149;69pkt 69fpkt", shape=pentagon, color=darkviolet];
6780[label="1.92.43.149;69pkt 69fpkt", shape=invtriangle, color=brown];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.92.43.149:21, 212.18.104.84:*}[95.6522%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (47.5%)&lt;BR/&gt; 1840: (1.04167%)&lt;BR/&gt; 1145: (1.04167%)&lt;BR/&gt; 38754: (0.833333%)&lt;BR/&gt; 38685: (0.833333%)&gt;];
}
629--2765[label="1;32pkt 32fpkt"];
629--3784[label="1;1pkt 1fpkt"];
629--5208[label="1;69pkt 69fpkt"];
629--6780[label="1;69pkt 69fpkt"];
2765--3784[label="1;1pkt 1fpkt"];
2765--5208[label="1;32pkt 32fpkt"];
2765--6780[label="1;32pkt 32fpkt"];
3784--5208[label="1;1pkt 1fpkt"];
3784--6780[label="1;1pkt 1fpkt"];
5208--6780[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.104.84" src_ip="1.92.43.149" src_port="21"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37522,2.18612,999,1 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
67[label="167.8.43.92s;1pkt 1fpkt", shape=rectangle, color=red];
588[label="167.8.43.92;s;5pkt 5fpkt", shape=diamond, color=yellow];
668[label="86.18.72.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
2769[label="86.18.72.90;d;1pkt 1fpkt", shape=hexagon, color=black];
3785[label="86.18.72.90;d;1pkt 1fpkt", shape=polygon, color=gold];
4782[label="167.8.43.92;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6481[label="167.8.43.92;5pkt 5fpkt", shape=invtriangle, color=brown];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.43.92:7743, 86.18.72.90:1101}[20%]&lt;BR/&gt;{167.8.43.92:2962, 43.9.0.177:7743}[20%]&lt;BR/&gt;{167.8.43.92:2968, 43.9.0.177:7743}[20%]&lt;BR/&gt;{167.8.43.92:7743, 43.9.0.177:3906}[20%]&lt;BR/&gt;{167.8.43.92:7743, 43.9.0.177:3908}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (50%)&lt;BR/&gt; 1101: (19.4444%)&lt;BR/&gt; 3908: (8.33333%)&lt;BR/&gt; 3906: (8.33333%)&lt;BR/&gt; 2968: (8.33333%)&gt;];
}
67--588[label="1;1pkt 1fpkt"];
67--668[label="1;1pkt 1fpkt"];
67--2769[label="1;1pkt 1fpkt"];
67--3785[label="1;1pkt 1fpkt"];
67--4782[label="1;1pkt 1fpkt"];
67--6481[label="1;1pkt 1fpkt"];
588--668[label="1;1pkt 1fpkt"];
588--2769[label="1;1pkt 1fpkt"];
588--3785[label="1;1pkt 1fpkt"];
588--4782[label="1;4pkt 4fpkt"];
588--6481[label="1;5pkt 5fpkt"];
668--2769[label="1;1pkt 1fpkt"];
668--3785[label="1;1pkt 1fpkt"];
668--4782[label="1;1pkt 1fpkt"];
668--6481[label="1;1pkt 1fpkt"];
2769--3785[label="1;1pkt 1fpkt"];
2769--4782[label="1;1pkt 1fpkt"];
2769--6481[label="1;1pkt 1fpkt"];
3785--4782[label="1;1pkt 1fpkt"];
3785--6481[label="1;1pkt 1fpkt"];
4782--6481[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="43.9.0.177" dst_port="3908" src_ip="167.8.43.92" src_port="7743"/>
      <filter dst_ip="43.9.0.177" dst_port="3906" src_ip="167.8.43.92" src_port="7743"/>
      <filter dst_ip="43.9.0.177" dst_port="7743" src_ip="167.8.43.92" src_port="2968"/>
      <filter dst_ip="43.9.0.177" dst_port="7743" src_ip="167.8.43.92" src_port="2962"/>
      <filter dst_ip="86.18.72.90" dst_port="1101" src_ip="167.8.43.92" src_port="7743"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
1052[label="185.191.65.139;d;15pkt 15fpkt", shape=diamond, color=yellow];
1053[label="196.70.121.194;s;2pkt 2fpkt", shape=diamond, color=yellow];
2776[label="196.70.121.194;s;2pkt 2fpkt", shape=hexagon, color=black];
5562[label="196.70.121.194;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.204.36.228:80, 185.191.65.139:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.8095%)&lt;BR/&gt; 12382: (9.52381%)&lt;BR/&gt; 6972: (9.52381%)&lt;BR/&gt; 1704: (9.52381%)&lt;BR/&gt; 554: (9.52381%)&gt;];
}
1052--1053[label="1;2pkt 2fpkt"];
1052--1963[label="0.666667;10pkt 10fpkt"];
1052--2776[label="1;2pkt 2fpkt"];
1052--3403[label="0.333333;5pkt 5fpkt"];
1052--5562[label="1;2pkt 2fpkt"];
1052--5582[label="0.0666667;1pkt 1fpkt"];
1052--7027[label="0.0666667;1pkt 1fpkt"];
1053--2776[label="1;2pkt 2fpkt"];
1053--5562[label="1;2pkt 2fpkt"];
2776--5562[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.65.139" src_ip="203.204.36.228" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
694[label="195.75.29.67;d;2pkt 2fpkt", shape=diamond, color=yellow];
1060[label="212.24.29.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
1169[label="212.24.29.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
2778[label="212.24.29.1;s;1pkt 1fpkt", shape=hexagon, color=black];
3368[label="195.75.29.67;d;2pkt 2fpkt", shape=hexagon, color=black];
3985[label="212.24.29.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.29.1:1105, 195.75.29.67:3000}[50%]&lt;BR/&gt;{212.24.29.72:1164, 195.75.29.67:3000}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3000: (50%)&lt;BR/&gt; 1105: (31.25%)&lt;BR/&gt; 1164: (18.75%)&gt;];
}
694--1060[label="1;1pkt 1fpkt"];
694--1169[label="1;1pkt 1fpkt"];
694--2778[label="1;1pkt 1fpkt"];
694--3368[label="1;2pkt 2fpkt"];
694--3985[label="1;1pkt 1fpkt"];
1060--2778[label="1;1pkt 1fpkt"];
1060--3368[label="1;1pkt 1fpkt"];
1060--3985[label="1;1pkt 1fpkt"];
1169--3368[label="1;1pkt 1fpkt"];
2778--3368[label="1;1pkt 1fpkt"];
2778--3985[label="1;1pkt 1fpkt"];
3368--3985[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.75.29.67" dst_port="3000" src_ip="212.24.29.72" src_port="1164"/>
      <filter dst_ip="195.75.29.67" dst_port="3000" src_ip="212.24.29.1" src_port="1105"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
714[label="141.98.148.242;s;2pkt 2fpkt", shape=diamond, color=yellow];
715[label="197.35.235.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
2781[label="141.98.148.242;s;2pkt 2fpkt", shape=hexagon, color=black];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.148.242:3166, 197.35.235.8:1030}[50%]&lt;BR/&gt;{141.98.148.242:2058, 196.34.143.18:6664}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3166: (30%)&lt;BR/&gt; 1030: (30%)&lt;BR/&gt; 6664: (20%)&lt;BR/&gt; 2058: (20%)&gt;];
}
714--715[label="1;1pkt 1fpkt"];
714--918[label="0.5;1pkt 1fpkt"];
714--2781[label="1;2pkt 2fpkt"];
714--3263[label="0.5;1pkt 1fpkt"];
715--2781[label="1;1pkt 1fpkt"];
2781--3263[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.34.143.18" dst_port="6664" src_ip="141.98.148.242" src_port="2058"/>
      <filter dst_ip="197.35.235.8" dst_port="1030" src_ip="141.98.148.242" src_port="3166"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23331,2.23684,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
1066[label="75.194.83.165;s;1pkt 1fpkt", shape=diamond, color=yellow];
2782[label="75.194.83.165;s;1pkt 1fpkt", shape=hexagon, color=black];
3877[label="75.194.83.165;s;1pkt 1fpkt", shape=polygon, color=gold];
5333[label="75.194.83.165;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.194.83.165:6699, 167.8.140.25:3419}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3419: (50%)&gt;];
}
1066--2782[label="1;1pkt 1fpkt"];
1066--2908[label="1;1pkt 1fpkt"];
1066--3877[label="1;1pkt 1fpkt"];
1066--5333[label="1;1pkt 1fpkt"];
2782--2908[label="1;1pkt 1fpkt"];
2782--3877[label="1;1pkt 1fpkt"];
2782--5333[label="1;1pkt 1fpkt"];
3877--5333[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.140.25" dst_port="3419" src_ip="75.194.83.165" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37522,2.18612,020,1 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
194[label="212.18.111.22s;2pkt 2fpkt", shape=rectangle, color=red];
600[label="167.151.151.11;s;1119pkt 1119fpkt", shape=diamond, color=yellow];
1073[label="214.98.117.156;d;1pkt 1fpkt", shape=diamond, color=yellow];
1606[label="212.18.111.22;s;16pkt 16fpkt", shape=diamond, color=yellow];
2785[label="214.98.117.156;d;1pkt 1fpkt", shape=hexagon, color=black];
3009[label="212.18.111.22;s;13pkt 13fpkt", shape=hexagon, color=black];
3788[label="214.98.117.156;d;1pkt 1fpkt", shape=polygon, color=gold];
3846[label="212.18.111.22;s;9pkt 9fpkt", shape=polygon, color=gold];
4089[label="167.151.151.11;1187pkt 1187fpkt", shape=pentagon, color=darkviolet];
4177[label="212.18.111.22;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6025[label="167.151.151.11;1187pkt 1187fpkt", shape=invtriangle, color=brown];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.151.151.11:0, *:0}[98.01%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.4934%)&lt;BR/&gt; 65534: (0.253307%)&lt;BR/&gt; 53: (0.253307%)&gt;];
}
194--600[label="0.5;1pkt 1fpkt"];
194--1606[label="0.5;1pkt 1fpkt"];
194--3009[label="0.5;1pkt 1fpkt"];
194--3846[label="0.5;1pkt 1fpkt"];
194--4089[label="0.5;1pkt 1fpkt"];
194--4177[label="0.5;1pkt 1fpkt"];
194--6025[label="0.5;1pkt 1fpkt"];
600--1073[label="1;1pkt 1fpkt"];
600--2785[label="1;1pkt 1fpkt"];
600--3788[label="1;1pkt 1fpkt"];
600--3941[label="0.00536193;6pkt 6fpkt"];
600--3945[label="0.00178731;2pkt 2fpkt"];
600--3954[label="0.00536193;6pkt 6fpkt"];
600--3958[label="0.00178731;2pkt 2fpkt"];
600--3964[label="0.00536193;6pkt 6fpkt"];
600--3968[label="0.00178731;2pkt 2fpkt"];
600--4089[label="0.999106;1118pkt 1118fpkt"];
600--6025[label="0.999106;1118pkt 1118fpkt"];
1073--2785[label="1;1pkt 1fpkt"];
1073--3788[label="1;1pkt 1fpkt"];
1073--4089[label="1;1pkt 1fpkt"];
1073--6025[label="1;1pkt 1fpkt"];
1606--3009[label="1;13pkt 13fpkt"];
1606--3846[label="1;9pkt 9fpkt"];
1606--4177[label="0.9375;15pkt 15fpkt"];
2785--3788[label="1;1pkt 1fpkt"];
2785--4089[label="1;1pkt 1fpkt"];
2785--6025[label="1;1pkt 1fpkt"];
3009--3846[label="1;9pkt 9fpkt"];
3009--4177[label="1;13pkt 13fpkt"];
3788--4089[label="1;1pkt 1fpkt"];
3788--6025[label="1;1pkt 1fpkt"];
3846--4177[label="1;9pkt 9fpkt"];
4089--6025[label="1;1187pkt 1187fpkt"];
</description>
    <slice>
      <filter src_ip="167.151.151.11"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3978,2.2372,999,1 0 0 1 1 1 0 0 0 0 1 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
116[label="17.227.142.191s;1pkt 1fpkt", shape=rectangle, color=red];
733[label="167.8.142.28;d;6pkt 6fpkt", shape=diamond, color=yellow];
735[label="17.227.142.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
828[label="75.132.68.108;s;1pkt 1fpkt", shape=diamond, color=yellow];
1134[label="85.72.25.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
2704[label="167.8.142.28;d;6pkt 6fpkt", shape=hexagon, color=black];
2787[label="17.227.142.191;s;1pkt 1fpkt", shape=hexagon, color=black];
2812[label="75.132.68.108;s;1pkt 1fpkt", shape=hexagon, color=black];
3075[label="85.72.25.202;s;1pkt 1fpkt", shape=hexagon, color=black];
3775[label="167.8.142.28;d;6pkt 6fpkt", shape=polygon, color=gold];
3789[label="17.227.142.191;s;1pkt 1fpkt", shape=polygon, color=gold];
6996[label="17.227.142.191;1pkt 1fpkt", shape=invtriangle, color=brown];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.8.142.28:6699}[50%]&lt;BR/&gt;{*:1863, 167.8.142.28:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (38.8889%)&lt;BR/&gt; 1200: (14.8148%)&lt;BR/&gt; 1863: (11.1111%)&lt;BR/&gt; 14153: (9.25926%)&lt;BR/&gt; 1754: (9.25926%)&gt;];
}
116--442[label="1;1pkt 1fpkt"];
116--544[label="1;1pkt 1fpkt"];
116--733[label="1;1pkt 1fpkt"];
116--735[label="1;1pkt 1fpkt"];
116--2704[label="1;1pkt 1fpkt"];
116--2787[label="1;1pkt 1fpkt"];
116--3775[label="1;1pkt 1fpkt"];
116--3789[label="1;1pkt 1fpkt"];
116--6996[label="1;1pkt 1fpkt"];
733--735[label="1;1pkt 1fpkt"];
733--828[label="1;1pkt 1fpkt"];
733--1134[label="1;1pkt 1fpkt"];
733--2704[label="1;6pkt 6fpkt"];
733--2787[label="1;1pkt 1fpkt"];
733--2812[label="1;1pkt 1fpkt"];
733--3075[label="1;1pkt 1fpkt"];
733--3775[label="1;6pkt 6fpkt"];
733--3789[label="1;1pkt 1fpkt"];
733--6996[label="1;1pkt 1fpkt"];
735--2704[label="1;1pkt 1fpkt"];
735--2787[label="1;1pkt 1fpkt"];
735--3775[label="1;1pkt 1fpkt"];
735--3789[label="1;1pkt 1fpkt"];
735--6996[label="1;1pkt 1fpkt"];
828--2704[label="1;1pkt 1fpkt"];
828--2812[label="1;1pkt 1fpkt"];
828--3775[label="1;1pkt 1fpkt"];
1134--2704[label="1;1pkt 1fpkt"];
1134--3075[label="1;1pkt 1fpkt"];
1134--3775[label="1;1pkt 1fpkt"];
2704--2787[label="1;1pkt 1fpkt"];
2704--2812[label="1;1pkt 1fpkt"];
2704--3075[label="1;1pkt 1fpkt"];
2704--3775[label="1;6pkt 6fpkt"];
2704--3789[label="1;1pkt 1fpkt"];
2704--6996[label="1;1pkt 1fpkt"];
2787--3775[label="1;1pkt 1fpkt"];
2787--3789[label="1;1pkt 1fpkt"];
2787--6996[label="1;1pkt 1fpkt"];
2812--3775[label="1;1pkt 1fpkt"];
3075--3775[label="1;1pkt 1fpkt"];
3775--3789[label="1;1pkt 1fpkt"];
3775--6996[label="1;1pkt 1fpkt"];
3789--6996[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.142.28" src_port="1863"/>
      <filter dst_ip="167.8.142.28" dst_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
773[label="185.191.98.225;d;10pkt 10fpkt", shape=diamond, color=yellow];
1095[label="81.41.46.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
2794[label="185.191.98.225;d;6pkt 6fpkt", shape=hexagon, color=black];
5587[label="81.41.46.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 185.191.98.225:1214}[40%]&lt;BR/&gt;{*:*, 185.191.98.225:3973}[20%]&lt;BR/&gt;{*:*, 185.191.98.225:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (16.6667%)&lt;BR/&gt; 6699: (13.8889%)&lt;BR/&gt; 1744: (11.1111%)&lt;BR/&gt; 3973: (8.33333%)&lt;BR/&gt; 5050: (5.55556%)&gt;];
}
773--1095[label="1;1pkt 1fpkt"];
773--2794[label="1;6pkt 6fpkt"];
773--5587[label="1;1pkt 1fpkt"];
1095--2794[label="1;1pkt 1fpkt"];
1095--5587[label="1;1pkt 1fpkt"];
2794--5587[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.98.225" dst_port="1214"/>
      <filter dst_ip="185.191.98.225" dst_port="6699"/>
      <filter dst_ip="185.191.98.225" dst_port="3973"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
1119[label="197.193.134.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
2801[label="197.193.134.189;d;1pkt 1fpkt", shape=hexagon, color=black];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.141.111:1063, 197.193.134.189:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1063: (50%)&gt;];
}
1119--2801[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.193.134.189" dst_port="6699" src_ip="167.8.141.111" src_port="1063"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_293{
style=filled;
color=gray75;
1125[label="202.227.12.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
2804[label="202.227.12.36;d;1pkt 1fpkt", shape=hexagon, color=black];
3918[label="202.227.12.36;d;1pkt 1fpkt", shape=polygon, color=gold];
stat293[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.141.111:1091, 202.227.12.36:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1091: (50%)&gt;];
}
1125--2804[label="1;1pkt 1fpkt"];
1125--3918[label="1;1pkt 1fpkt"];
2804--3918[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.227.12.36" dst_port="6699" src_ip="167.8.141.111" src_port="1091"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
827[label="75.132.68.108;d;1pkt 1fpkt", shape=diamond, color=yellow];
2811[label="75.132.68.108;d;1pkt 1fpkt", shape=hexagon, color=black];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.142.28:6699, 75.132.68.108:14153}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14153: (50%)&lt;BR/&gt; 6699: (50%)&gt;];
}
827--2811[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="75.132.68.108" dst_port="14153" src_ip="167.8.142.28" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
690[label="167.8.138.7;s;3pkt 3fpkt", shape=diamond, color=yellow];
852[label="81.20.142.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
1419[label="43.163.178.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
2817[label="81.20.142.98;d;1pkt 1fpkt", shape=hexagon, color=black];
3046[label="167.8.138.7;s;3pkt 3fpkt", shape=hexagon, color=black];
4048[label="167.8.138.7;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5993[label="167.8.138.7;3pkt 3fpkt", shape=invtriangle, color=brown];
7300[label="167.8.138.7;4pkt 4fpkt", shape=invhouse, color=bisque];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.138.7:6699, 81.20.142.98:4630}[25%]&lt;BR/&gt;{167.8.138.7:1158, 43.163.178.164:6699}[25%]&lt;BR/&gt;{167.8.138.7:1027, 85.34.108.216:1863}[25%]&lt;BR/&gt;{167.8.138.7:0, 43.208.101.221:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (34.2105%)&lt;BR/&gt; 4630: (18.4211%)&lt;BR/&gt; 1158: (15.7895%)&lt;BR/&gt; 0: (15.7895%)&lt;BR/&gt; 1863: (7.89474%)&gt;];
}
690--852[label="1;1pkt 1fpkt"];
690--1419[label="1;1pkt 1fpkt"];
690--2817[label="1;1pkt 1fpkt"];
690--3046[label="1;3pkt 3fpkt"];
690--4048[label="0.666667;2pkt 2fpkt"];
690--5993[label="0.666667;2pkt 2fpkt"];
690--7300[label="1;3pkt 3fpkt"];
852--2817[label="1;1pkt 1fpkt"];
852--3046[label="1;1pkt 1fpkt"];
852--4048[label="1;1pkt 1fpkt"];
852--5993[label="1;1pkt 1fpkt"];
852--7300[label="1;1pkt 1fpkt"];
1419--3046[label="1;1pkt 1fpkt"];
1419--4048[label="1;1pkt 1fpkt"];
1419--5993[label="1;1pkt 1fpkt"];
1419--7300[label="1;1pkt 1fpkt"];
2817--3046[label="1;1pkt 1fpkt"];
2817--4048[label="1;1pkt 1fpkt"];
2817--5993[label="1;1pkt 1fpkt"];
2817--7300[label="1;1pkt 1fpkt"];
3046--4048[label="0.666667;2pkt 2fpkt"];
3046--5993[label="0.666667;2pkt 2fpkt"];
3046--7300[label="1;3pkt 3fpkt"];
4048--5993[label="1;3pkt 3fpkt"];
4048--7300[label="1;3pkt 3fpkt"];
5993--7300[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="43.208.101.221" src_ip="167.8.138.7"/>
      <filter dst_ip="85.34.108.216" dst_port="1863" src_ip="167.8.138.7" src_port="1027"/>
      <filter dst_ip="43.163.178.164" dst_port="6699" src_ip="167.8.138.7" src_port="1158"/>
      <filter dst_ip="81.20.142.98" dst_port="4630" src_ip="167.8.138.7" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_296{
style=filled;
color=gray75;
1203[label="213.216.133.177;s;1pkt 1fpkt", shape=diamond, color=yellow];
2829[label="213.216.133.177;s;1pkt 1fpkt", shape=hexagon, color=black];
3814[label="213.216.133.177;s;1pkt 1fpkt", shape=polygon, color=gold];
stat296[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.216.133.177:3678, 141.98.93.221:3219}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3678: (50%)&lt;BR/&gt; 3219: (50%)&gt;];
}
1203--2829[label="1;1pkt 1fpkt"];
1203--3814[label="1;1pkt 1fpkt"];
2829--3814[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.93.221" dst_port="3219" src_ip="213.216.133.177" src_port="3678"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
1219[label="212.24.25.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
1220[label="212.24.25.99;d;1pkt 1fpkt", shape=diamond, color=yellow];
1492[label="1.35.33.75;s;2pkt 2fpkt", shape=diamond, color=yellow];
2831[label="212.24.25.9;d;1pkt 1fpkt", shape=hexagon, color=black];
3101[label="1.35.33.75;s;2pkt 2fpkt", shape=hexagon, color=black];
4633[label="1.35.33.75;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6393[label="1.35.33.75;1pkt 1fpkt", shape=invtriangle, color=brown];
7547[label="1.35.33.75;2pkt 2fpkt", shape=invhouse, color=bisque];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.35.33.75:5001, 212.24.25.9:1064}[50%]&lt;BR/&gt;{1.35.33.75:5001, 212.24.25.99:1111}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 1111: (27.2727%)&lt;BR/&gt; 1064: (22.7273%)&gt;];
}
1219--1492[label="1;1pkt 1fpkt"];
1219--2831[label="1;1pkt 1fpkt"];
1219--3101[label="1;1pkt 1fpkt"];
1219--7547[label="1;1pkt 1fpkt"];
1220--1492[label="1;1pkt 1fpkt"];
1220--3101[label="1;1pkt 1fpkt"];
1220--4633[label="1;1pkt 1fpkt"];
1220--6393[label="1;1pkt 1fpkt"];
1220--7547[label="1;1pkt 1fpkt"];
1492--2831[label="1;1pkt 1fpkt"];
1492--3101[label="1;2pkt 2fpkt"];
1492--4633[label="1;1pkt 1fpkt"];
1492--6393[label="1;1pkt 1fpkt"];
1492--7547[label="1;2pkt 2fpkt"];
2831--3101[label="1;1pkt 1fpkt"];
2831--7547[label="1;1pkt 1fpkt"];
3101--4633[label="1;1pkt 1fpkt"];
3101--6393[label="1;1pkt 1fpkt"];
3101--7547[label="1;2pkt 2fpkt"];
4633--6393[label="1;1pkt 1fpkt"];
4633--7547[label="1;1pkt 1fpkt"];
6393--7547[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.25.99" dst_port="1111" src_ip="1.35.33.75" src_port="5001"/>
      <filter dst_ip="212.24.25.9" dst_port="1064" src_ip="1.35.33.75" src_port="5001"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
1246[label="81.55.172.178;d;1pkt 1fpkt", shape=diamond, color=yellow];
1247[label="141.98.6.32;s;5pkt 5fpkt", shape=diamond, color=yellow];
2838[label="141.98.6.32;s;5pkt 5fpkt", shape=hexagon, color=black];
3530[label="81.55.172.178;d;1pkt 1fpkt", shape=hexagon, color=black];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.6.32:3709, 85.34.108.34:1863}[20%]&lt;BR/&gt;{141.98.6.32:1301, 43.186.102.36:6699}[20%]&lt;BR/&gt;{141.98.6.32:1296, 194.234.21.65:6699}[20%]&lt;BR/&gt;{141.98.6.32:4332, 81.55.172.178:6699}[20%]&lt;BR/&gt;{141.98.6.32:4275, 202.15.110.234:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (41.6667%)&lt;BR/&gt; 4332: (16.6667%)&lt;BR/&gt; 4275: (8.33333%)&lt;BR/&gt; 3709: (8.33333%)&lt;BR/&gt; 1863: (8.33333%)&gt;];
}
1246--1247[label="1;1pkt 1fpkt"];
1246--2838[label="1;1pkt 1fpkt"];
1246--3530[label="1;1pkt 1fpkt"];
1247--2838[label="1;5pkt 5fpkt"];
1247--3530[label="1;1pkt 1fpkt"];
2838--3530[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.15.110.234" dst_port="6699" src_ip="141.98.6.32" src_port="4275"/>
      <filter dst_ip="81.55.172.178" dst_port="6699" src_ip="141.98.6.32" src_port="4332"/>
      <filter dst_ip="194.234.21.65" dst_port="6699" src_ip="141.98.6.32" src_port="1296"/>
      <filter dst_ip="43.186.102.36" dst_port="6699" src_ip="141.98.6.32" src_port="1301"/>
      <filter dst_ip="85.34.108.34" dst_port="1863" src_ip="141.98.6.32" src_port="3709"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
1255[label="3.49.142.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
2841[label="3.49.142.1;s;1pkt 1fpkt", shape=hexagon, color=black];
3989[label="3.49.142.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5951[label="3.49.142.1;1pkt 1fpkt", shape=invtriangle, color=brown];
7272[label="3.49.142.1;1pkt 1fpkt", shape=invhouse, color=bisque];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.49.142.1:6699, 167.8.130.20:1048}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1048: (50%)&gt;];
}
1255--2759[label="1;1pkt 1fpkt"];
1255--2841[label="1;1pkt 1fpkt"];
1255--3989[label="1;1pkt 1fpkt"];
1255--5951[label="1;1pkt 1fpkt"];
1255--7272[label="1;1pkt 1fpkt"];
2841--3989[label="1;1pkt 1fpkt"];
2841--5951[label="1;1pkt 1fpkt"];
2841--7272[label="1;1pkt 1fpkt"];
3989--5951[label="1;1pkt 1fpkt"];
3989--7272[label="1;1pkt 1fpkt"];
5951--7272[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.130.20" dst_port="1048" src_ip="3.49.142.1" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_300{
style=filled;
color=gray75;
1270[label="2.226.110.103;s;494pkt 494fpkt", shape=diamond, color=yellow];
2845[label="2.226.110.103;s;254pkt 254fpkt", shape=hexagon, color=black];
stat300[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.226.110.103:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 2282: (0.13369%)&lt;BR/&gt; 2279: (0.13369%)&lt;BR/&gt; 2277: (0.13369%)&lt;BR/&gt; 2276: (0.13369%)&gt;];
}
1270--2845[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="2.226.110.103"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
938[label="58.141.11.41;d;1pkt 1fpkt", shape=diamond, color=yellow];
2848[label="58.141.11.41;d;1pkt 1fpkt", shape=hexagon, color=black];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.142.28:6699, 58.141.11.41:3787}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3787: (50%)&gt;];
}
938--2848[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="58.141.11.41" dst_port="3787" src_ip="167.8.142.28" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
1295[label="74.6.132.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
2852[label="74.6.132.98;s;1pkt 1fpkt", shape=hexagon, color=black];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.6.132.98:4662, 141.98.93.221:3559}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 3559: (50%)&gt;];
}
1295--2852[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.93.221" dst_port="3559" src_ip="74.6.132.98" src_port="4662"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
1312[label="185.191.189.12;d;2pkt 2fpkt", shape=diamond, color=yellow];
1315[label="86.250.181.57;s;2pkt 2fpkt", shape=diamond, color=yellow];
2863[label="185.191.189.12;d;2pkt 2fpkt", shape=hexagon, color=black];
3127[label="86.250.181.57;s;2pkt 2fpkt", shape=hexagon, color=black];
3838[label="185.191.189.12;d;2pkt 2fpkt", shape=polygon, color=gold];
4483[label="86.250.181.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6293[label="86.250.181.57;1pkt 1fpkt", shape=invtriangle, color=brown];
7487[label="86.250.181.57;1pkt 1fpkt", shape=invhouse, color=bisque];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.250.181.57:1302, 185.191.189.12:7743}[50%]&lt;BR/&gt;{86.250.181.57:1335, 185.191.189.12:7743}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (50%)&lt;BR/&gt; 1302: (30.7692%)&lt;BR/&gt; 1335: (19.2308%)&gt;];
}
1312--1315[label="1;2pkt 2fpkt"];
1312--2863[label="1;2pkt 2fpkt"];
1312--3127[label="1;2pkt 2fpkt"];
1312--3838[label="1;2pkt 2fpkt"];
1312--4483[label="1;1pkt 1fpkt"];
1312--6293[label="1;1pkt 1fpkt"];
1312--7487[label="1;1pkt 1fpkt"];
1315--2863[label="1;2pkt 2fpkt"];
1315--3127[label="1;2pkt 2fpkt"];
1315--3838[label="1;2pkt 2fpkt"];
1315--4483[label="1;1pkt 1fpkt"];
1315--6293[label="1;1pkt 1fpkt"];
1315--7487[label="1;1pkt 1fpkt"];
2863--3127[label="1;2pkt 2fpkt"];
2863--3838[label="1;2pkt 2fpkt"];
2863--4483[label="1;1pkt 1fpkt"];
2863--6293[label="1;1pkt 1fpkt"];
2863--7487[label="1;1pkt 1fpkt"];
3127--3838[label="1;2pkt 2fpkt"];
3127--4483[label="1;1pkt 1fpkt"];
3127--6293[label="1;1pkt 1fpkt"];
3127--7487[label="1;1pkt 1fpkt"];
3838--4483[label="1;1pkt 1fpkt"];
3838--6293[label="1;1pkt 1fpkt"];
3838--7487[label="1;1pkt 1fpkt"];
4483--6293[label="1;1pkt 1fpkt"];
4483--7487[label="1;1pkt 1fpkt"];
6293--7487[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.189.12" dst_port="7743" src_ip="86.250.181.57" src_port="1335"/>
      <filter dst_ip="185.191.189.12" dst_port="7743" src_ip="86.250.181.57" src_port="1302"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
1335[label="167.164.130.151;d;7pkt 7fpkt", shape=diamond, color=yellow];
1337[label="213.216.141.177;s;5pkt 5fpkt", shape=diamond, color=yellow];
2871[label="167.164.130.151;d;7pkt 7fpkt", shape=hexagon, color=black];
5424[label="213.216.141.177;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6925[label="213.216.141.177;5pkt 5fpkt", shape=invtriangle, color=brown];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.216.141.177:1214, 167.164.130.151:*}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 1786: (8.92857%)&lt;BR/&gt; 1783: (8.92857%)&lt;BR/&gt; 1779: (8.92857%)&lt;BR/&gt; 1767: (8.92857%)&gt;];
}
1335--1337[label="1;5pkt 5fpkt"];
1335--2871[label="1;7pkt 7fpkt"];
1335--5424[label="1;4pkt 4fpkt"];
1335--6925[label="1;5pkt 5fpkt"];
1337--2871[label="1;5pkt 5fpkt"];
1337--5424[label="1;4pkt 4fpkt"];
1337--6925[label="1;5pkt 5fpkt"];
2871--5424[label="1;4pkt 4fpkt"];
2871--6925[label="1;5pkt 5fpkt"];
5424--6925[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="167.164.130.151" src_ip="213.216.141.177" src_port="1214"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
999[label="192.178.212.191;s;40pkt 40fpkt", shape=diamond, color=yellow];
2885[label="192.178.212.191;s;39pkt 39fpkt", shape=hexagon, color=black];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.178.212.191:80, 167.8.143.212:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3888: (1.26582%)&lt;BR/&gt; 3884: (1.26582%)&lt;BR/&gt; 3883: (1.26582%)&lt;BR/&gt; 3882: (1.26582%)&gt;];
}
999--2885[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.143.212" src_ip="192.178.212.191" src_port="80"/>
    </slice>
    <from sec="1034226043" usec="0"/>
    <to sec="1034226205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
1395[label="161.238.81.168;d;53pkt 53fpkt", shape=diamond, color=yellow];
1633[label="192.113.141.156;s;51pkt 51fpkt", shape=diamond, color=yellow];
2895[label="161.238.81.168;d;20pkt 20fpkt", shape=hexagon, color=black];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.113.141.156:80, 161.238.81.168:*}[96.2264%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4973: (1.20968%)&lt;BR/&gt; 4972: (1.20968%)&lt;BR/&gt; 4971: (1.20968%)&lt;BR/&gt; 4970: (1.20968%)&gt;];
}
1395--1633[label="1;51pkt 51fpkt"];
1395--2895[label="1;20pkt 20fpkt"];
1395--3950[label="0.0188679;1pkt 1fpkt"];
1633--2895[label="0.95;19pkt 19fpkt"];
1633--3950[label="0.0196078;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.81.168" src_ip="192.113.141.156" src_port="80"/>
    </slice>
    <from sec="1034226147" usec="0"/>
    <to sec="1034226372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
706[label="161.238.69.27;d;3pkt 3fpkt", shape=diamond, color=yellow];
709[label="2.148.78.201;s;2pkt 2fpkt", shape=diamond, color=yellow];
2315[label="2.148.78.205;s;1pkt 1fpkt", shape=diamond, color=yellow];
2916[label="2.148.78.201;s;2pkt 2fpkt", shape=hexagon, color=black];
3876[label="2.148.78.201;s;2pkt 2fpkt", shape=polygon, color=gold];
5609[label="2.148.78.201;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7041[label="2.148.78.201;1pkt 1fpkt", shape=invtriangle, color=brown];
7951[label="2.148.78.201;2pkt 2fpkt", shape=invhouse, color=bisque];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.148.78.205:1755, 161.238.69.27:1149}[33.3333%]&lt;BR/&gt;{2.148.78.201:1755, 161.238.69.27:1146}[33.3333%]&lt;BR/&gt;{2.148.78.201:1755, 161.238.69.27:1148}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 1148: (25%)&lt;BR/&gt; 1146: (17.8571%)&lt;BR/&gt; 1149: (7.14286%)&gt;];
}
706--709[label="1;2pkt 2fpkt"];
706--2315[label="1;1pkt 1fpkt"];
706--2916[label="1;2pkt 2fpkt"];
706--3876[label="1;2pkt 2fpkt"];
706--5609[label="1;1pkt 1fpkt"];
706--7041[label="1;1pkt 1fpkt"];
706--7951[label="1;2pkt 2fpkt"];
709--2916[label="1;2pkt 2fpkt"];
709--3876[label="1;2pkt 2fpkt"];
709--5609[label="1;1pkt 1fpkt"];
709--7041[label="1;1pkt 1fpkt"];
709--7951[label="1;2pkt 2fpkt"];
2916--3876[label="1;2pkt 2fpkt"];
2916--5609[label="1;1pkt 1fpkt"];
2916--7041[label="1;1pkt 1fpkt"];
2916--7951[label="1;2pkt 2fpkt"];
3876--5609[label="1;1pkt 1fpkt"];
3876--7041[label="1;1pkt 1fpkt"];
3876--7951[label="1;2pkt 2fpkt"];
5609--7041[label="1;1pkt 1fpkt"];
5609--7951[label="1;1pkt 1fpkt"];
7041--7951[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.69.27" dst_port="1148" src_ip="2.148.78.201" src_port="1755"/>
      <filter dst_ip="161.238.69.27" dst_port="1146" src_ip="2.148.78.201" src_port="1755"/>
      <filter dst_ip="161.238.69.27" dst_port="1149" src_ip="2.148.78.205" src_port="1755"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
749[label="1.35.33.41;s;4pkt 4fpkt", shape=diamond, color=yellow];
1426[label="212.24.29.46;d;2pkt 2fpkt", shape=diamond, color=yellow];
1444[label="212.24.8.25;d;1pkt 1fpkt", shape=diamond, color=yellow];
1522[label="1.35.33.38;s;2pkt 2fpkt", shape=diamond, color=yellow];
2401[label="212.24.8.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
2566[label="142.173.241.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
2921[label="212.24.29.46;d;2pkt 2fpkt", shape=hexagon, color=black];
3059[label="1.35.33.41;s;4pkt 4fpkt", shape=hexagon, color=black];
3112[label="1.35.33.38;s;2pkt 2fpkt", shape=hexagon, color=black];
3683[label="142.173.241.80;d;1pkt 1fpkt", shape=hexagon, color=black];
4338[label="1.35.33.41;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6196[label="1.35.33.41;4pkt 4fpkt", shape=invtriangle, color=brown];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.35.33.41:5001, *:*}[66.6667%]&lt;BR/&gt;{*:5001, 212.24.29.46:*}[33.3333%]&lt;BR/&gt;{1.35.33.38:5001, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 1158: (10.7143%)&lt;BR/&gt; 1147: (8.92857%)&lt;BR/&gt; 1036: (8.92857%)&lt;BR/&gt; 1313: (7.14286%)&gt;];
}
749--1164[label="0.25;1pkt 1fpkt"];
749--1426[label="0.5;1pkt 1fpkt"];
749--1444[label="1;1pkt 1fpkt"];
749--2401[label="1;1pkt 1fpkt"];
749--2921[label="0.5;1pkt 1fpkt"];
749--3059[label="1;4pkt 4fpkt"];
749--4338[label="1;4pkt 4fpkt"];
749--6196[label="1;4pkt 4fpkt"];
1426--1522[label="0.5;1pkt 1fpkt"];
1426--2921[label="1;2pkt 2fpkt"];
1426--3059[label="0.5;1pkt 1fpkt"];
1426--3112[label="0.5;1pkt 1fpkt"];
1426--4338[label="0.5;1pkt 1fpkt"];
1426--6196[label="0.5;1pkt 1fpkt"];
1444--3059[label="1;1pkt 1fpkt"];
1444--4338[label="1;1pkt 1fpkt"];
1444--6196[label="1;1pkt 1fpkt"];
1522--2566[label="1;1pkt 1fpkt"];
1522--2921[label="0.5;1pkt 1fpkt"];
1522--3112[label="1;2pkt 2fpkt"];
1522--3683[label="1;1pkt 1fpkt"];
2401--3059[label="1;1pkt 1fpkt"];
2401--4338[label="1;1pkt 1fpkt"];
2401--6196[label="1;1pkt 1fpkt"];
2566--3112[label="1;1pkt 1fpkt"];
2566--3683[label="1;1pkt 1fpkt"];
2921--3059[label="0.5;1pkt 1fpkt"];
2921--3112[label="0.5;1pkt 1fpkt"];
2921--4338[label="0.5;1pkt 1fpkt"];
2921--6196[label="0.5;1pkt 1fpkt"];
3059--4338[label="1;4pkt 4fpkt"];
3059--6196[label="1;4pkt 4fpkt"];
3112--3683[label="1;1pkt 1fpkt"];
4338--6196[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="1.35.33.41" src_port="5001"/>
      <filter src_ip="1.35.33.38" src_port="5001"/>
      <filter dst_ip="212.24.29.46" src_port="5001"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
775[label="208.159.87.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
1096[label="219.43.21.15;s;21pkt 21fpkt", shape=diamond, color=yellow];
2925[label="208.159.87.12;d;1pkt 1fpkt", shape=hexagon, color=black];
3501[label="219.43.21.15;s;21pkt 21fpkt", shape=hexagon, color=black];
4111[label="219.43.21.15;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6042[label="219.43.21.15;21pkt 21fpkt", shape=invtriangle, color=brown];
7329[label="219.43.21.15;20pkt 20fpkt", shape=invhouse, color=bisque];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.43.21.15:*, 194.40.167.147:*}[38.0952%]&lt;BR/&gt;{219.43.21.15:*, 1.52.11.10:*}[33.3333%]&lt;BR/&gt;{219.43.21.15:6667, *:*}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (11.9048%)&lt;BR/&gt; 10080: (4.7619%)&lt;BR/&gt; 8080: (4.7619%)&lt;BR/&gt; 3128: (4.7619%)&lt;BR/&gt; 1080: (4.7619%)&gt;];
}
775--1096[label="1;1pkt 1fpkt"];
775--2925[label="1;1pkt 1fpkt"];
775--3501[label="1;1pkt 1fpkt"];
775--4111[label="1;1pkt 1fpkt"];
775--6042[label="1;1pkt 1fpkt"];
775--7329[label="1;1pkt 1fpkt"];
1096--2925[label="1;1pkt 1fpkt"];
1096--3501[label="1;21pkt 21fpkt"];
1096--4111[label="1;20pkt 20fpkt"];
1096--6042[label="1;21pkt 21fpkt"];
1096--7329[label="1;20pkt 20fpkt"];
2925--3501[label="1;1pkt 1fpkt"];
2925--4111[label="1;1pkt 1fpkt"];
2925--6042[label="1;1pkt 1fpkt"];
2925--7329[label="1;1pkt 1fpkt"];
3501--4111[label="1;20pkt 20fpkt"];
3501--6042[label="1;21pkt 21fpkt"];
3501--7329[label="1;20pkt 20fpkt"];
4111--6042[label="1;20pkt 20fpkt"];
4111--7329[label="1;20pkt 20fpkt"];
6042--7329[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="194.40.167.147" src_ip="219.43.21.15"/>
      <filter dst_ip="1.52.11.10" src_ip="219.43.21.15"/>
      <filter src_ip="219.43.21.15" src_port="6667"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
1099[label="203.200.92.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
2929[label="141.98.11.132;s;9pkt 9fpkt", shape=hexagon, color=black];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.11.132:*, 203.200.93.175:80}[44.4444%]&lt;BR/&gt;{141.98.11.132:*, 203.200.93.152:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 20104: (10%)&lt;BR/&gt; 2314: (10%)&lt;BR/&gt; 2394: (5%)&lt;BR/&gt; 2393: (5%)&gt;];
}
1099--2929[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.200.93.175" dst_port="80" src_ip="141.98.11.132"/>
      <filter dst_ip="203.200.93.152" dst_port="80" src_ip="141.98.11.132"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,999,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
419[label="167.8.68.160s;2pkt 2fpkt", shape=rectangle, color=red];
1441[label="212.24.29.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
1442[label="1.35.33.33;s;3pkt 3fpkt", shape=diamond, color=yellow];
2935[label="212.24.29.142;d;1pkt 1fpkt", shape=hexagon, color=black];
2936[label="1.35.33.33;s;1pkt 1fpkt", shape=hexagon, color=black];
3460[label="167.8.143.242;d;9pkt 9fpkt", shape=hexagon, color=black];
3917[label="212.24.29.142;d;1pkt 1fpkt", shape=polygon, color=gold];
4249[label="1.35.33.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6136[label="1.35.33.33;2pkt 2fpkt", shape=invtriangle, color=brown];
7387[label="1.35.33.33;2pkt 2fpkt", shape=invhouse, color=bisque];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.199.146.2:80, 167.8.143.242:*}[33.3333%]&lt;BR/&gt;{1.35.33.33:5001, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (31.25%)&lt;BR/&gt; 1100: (16.6667%)&lt;BR/&gt; 1038: (12.5%)&lt;BR/&gt; 80: (10.4167%)&lt;BR/&gt; 1863: (4.16667%)&gt;];
}
419--420[label="0.5;1pkt 1fpkt"];
419--1442[label="0.5;1pkt 1fpkt"];
419--2274[label="0.5;1pkt 1fpkt"];
419--3460[label="0.5;1pkt 1fpkt"];
419--4249[label="0.5;1pkt 1fpkt"];
419--5286[label="0.5;1pkt 1fpkt"];
419--6136[label="0.5;1pkt 1fpkt"];
419--6835[label="0.5;1pkt 1fpkt"];
419--7387[label="0.5;1pkt 1fpkt"];
419--7823[label="0.5;1pkt 1fpkt"];
1441--1442[label="1;1pkt 1fpkt"];
1441--2935[label="1;1pkt 1fpkt"];
1441--2936[label="1;1pkt 1fpkt"];
1441--3917[label="1;1pkt 1fpkt"];
1441--4249[label="1;1pkt 1fpkt"];
1441--6136[label="1;1pkt 1fpkt"];
1441--7387[label="1;1pkt 1fpkt"];
1442--2274[label="0.333333;1pkt 1fpkt"];
1442--2935[label="1;1pkt 1fpkt"];
1442--2936[label="1;1pkt 1fpkt"];
1442--3460[label="0.333333;1pkt 1fpkt"];
1442--3917[label="1;1pkt 1fpkt"];
1442--4249[label="1;2pkt 2fpkt"];
1442--6136[label="1;2pkt 2fpkt"];
1442--7387[label="1;2pkt 2fpkt"];
2935--2936[label="1;1pkt 1fpkt"];
2935--3917[label="1;1pkt 1fpkt"];
2935--4249[label="1;1pkt 1fpkt"];
2935--6136[label="1;1pkt 1fpkt"];
2935--7387[label="1;1pkt 1fpkt"];
2936--3917[label="1;1pkt 1fpkt"];
2936--4249[label="1;1pkt 1fpkt"];
2936--6136[label="1;1pkt 1fpkt"];
2936--7387[label="1;1pkt 1fpkt"];
3460--3996[label="0.111111;1pkt 1fpkt"];
3460--4249[label="0.5;1pkt 1fpkt"];
3460--5953[label="0.111111;1pkt 1fpkt"];
3460--6136[label="0.5;1pkt 1fpkt"];
3460--7274[label="0.111111;1pkt 1fpkt"];
3460--7387[label="0.5;1pkt 1fpkt"];
3917--4249[label="1;1pkt 1fpkt"];
3917--6136[label="1;1pkt 1fpkt"];
3917--7387[label="1;1pkt 1fpkt"];
4249--6136[label="1;2pkt 2fpkt"];
4249--7387[label="1;2pkt 2fpkt"];
6136--7387[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="1.35.33.33" src_port="5001"/>
      <filter dst_ip="167.8.143.242" src_ip="209.199.146.2" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
624[label="167.8.140.103;s;4pkt 4fpkt", shape=diamond, color=yellow];
796[label="202.94.33.143;d;1pkt 1fpkt", shape=diamond, color=yellow];
1020[label="86.216.81.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
2763[label="167.8.140.103;s;4pkt 4fpkt", shape=hexagon, color=black];
2937[label="202.94.33.143;d;1pkt 1fpkt", shape=hexagon, color=black];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.140.103:1121, 209.178.120.74:6699}[25%]&lt;BR/&gt;{167.8.140.103:1122, 86.216.81.80:6699}[25%]&lt;BR/&gt;{167.8.140.103:6699, 202.94.33.143:10231}[25%]&lt;BR/&gt;{167.8.140.103:1118, 86.229.31.217:6699}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 10231: (18.1818%)&lt;BR/&gt; 1122: (13.6364%)&lt;BR/&gt; 1121: (9.09091%)&lt;BR/&gt; 1118: (9.09091%)&gt;];
}
624--796[label="1;1pkt 1fpkt"];
624--1020[label="1;1pkt 1fpkt"];
624--2763[label="1;4pkt 4fpkt"];
624--2937[label="1;1pkt 1fpkt"];
796--2763[label="1;1pkt 1fpkt"];
796--2937[label="1;1pkt 1fpkt"];
1020--2763[label="1;1pkt 1fpkt"];
2763--2937[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="86.229.31.217" dst_port="6699" src_ip="167.8.140.103" src_port="1118"/>
      <filter dst_ip="202.94.33.143" dst_port="10231" src_ip="167.8.140.103" src_port="6699"/>
      <filter dst_ip="86.216.81.80" dst_port="6699" src_ip="167.8.140.103" src_port="1122"/>
      <filter dst_ip="209.178.120.74" dst_port="6699" src_ip="167.8.140.103" src_port="1121"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
1136[label="43.3.168.147;d;1pkt 1fpkt", shape=diamond, color=yellow];
2946[label="43.3.168.147;d;1pkt 1fpkt", shape=hexagon, color=black];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.141.111:6699, 43.3.168.147:1085}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1085: (50%)&gt;];
}
1136--2946[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="43.3.168.147" dst_port="1085" src_ip="167.8.141.111" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
854[label="167.8.164.251;s;1pkt 1fpkt", shape=diamond, color=yellow];
855[label="203.200.92.72;d;2pkt 2fpkt", shape=diamond, color=yellow];
1733[label="185.191.212.7;s;1pkt 1fpkt", shape=diamond, color=yellow];
2953[label="167.8.164.251;s;1pkt 1fpkt", shape=hexagon, color=black];
3083[label="203.200.92.72;d;2pkt 2fpkt", shape=hexagon, color=black];
3812[label="167.8.164.251;s;1pkt 1fpkt", shape=polygon, color=gold];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.212.7:50127, 203.200.92.72:20422}[50%]&lt;BR/&gt;{167.8.164.251:49167, 203.200.92.72:20422}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20422: (50%)&lt;BR/&gt; 49167: (31.25%)&lt;BR/&gt; 50127: (18.75%)&gt;];
}
854--855[label="1;1pkt 1fpkt"];
854--2953[label="1;1pkt 1fpkt"];
854--3083[label="1;1pkt 1fpkt"];
854--3812[label="1;1pkt 1fpkt"];
855--1733[label="1;1pkt 1fpkt"];
855--2953[label="1;1pkt 1fpkt"];
855--3083[label="1;2pkt 2fpkt"];
855--3812[label="1;1pkt 1fpkt"];
1733--3083[label="1;1pkt 1fpkt"];
2953--3083[label="1;1pkt 1fpkt"];
2953--3812[label="1;1pkt 1fpkt"];
3083--3812[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.200.92.72" dst_port="20422" src_ip="167.8.164.251" src_port="49167"/>
      <filter dst_ip="203.200.92.72" dst_port="20422" src_ip="185.191.212.7" src_port="50127"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
1190[label="161.238.161.107;d;148pkt 148fpkt", shape=diamond, color=yellow];
2961[label="161.238.161.107;d;141pkt 141fpkt", shape=hexagon, color=black];
5708[label="85.41.178.217;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1978, 161.238.161.107:1978}[96.0265%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1978: (96.587%)&lt;BR/&gt; 25: (1.70648%)&lt;BR/&gt; 33474: (0.511945%)&lt;BR/&gt; 33473: (0.341297%)&lt;BR/&gt; 33472: (0.341297%)&gt;];
}
1190--2740[label="0.00675676;1pkt 1fpkt"];
1190--2961[label="1;141pkt 141fpkt"];
1190--3778[label="0.00675676;1pkt 1fpkt"];
1190--5708[label="0.25;1pkt 1fpkt"];
1190--5722[label="0.00675676;1pkt 1fpkt"];
1190--7123[label="0.00675676;1pkt 1fpkt"];
1190--7999[label="0.00675676;1pkt 1fpkt"];
2961--3778[label="0.0070922;1pkt 1fpkt"];
2961--5708[label="0.25;1pkt 1fpkt"];
2961--5722[label="0.0070922;1pkt 1fpkt"];
2961--7123[label="0.0070922;1pkt 1fpkt"];
2961--7999[label="0.0070922;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.161.107" dst_port="1978" src_port="1978"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,001,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
863[label="141.98.148.196;s;4pkt 4fpkt", shape=diamond, color=yellow];
901[label="84.194.112.171;d;1pkt 1fpkt", shape=diamond, color=yellow];
1171[label="81.22.128.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
1240[label="168.220.4.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
2432[label="43.196.27.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
2727[label="141.98.148.196;s;4pkt 4fpkt", shape=hexagon, color=black];
2956[label="81.22.128.4;d;1pkt 1fpkt", shape=hexagon, color=black];
2965[label="84.194.112.171;d;1pkt 1fpkt", shape=hexagon, color=black];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.148.196:2944, 81.22.128.4:6699}[25%]&lt;BR/&gt;{141.98.148.196:2755, 43.196.27.19:6699}[25%]&lt;BR/&gt;{141.98.148.196:2953, 168.220.4.132:6699}[25%]&lt;BR/&gt;{141.98.148.196:2951, 84.194.112.171:1023}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (35.7143%)&lt;BR/&gt; 2951: (14.2857%)&lt;BR/&gt; 2944: (14.2857%)&lt;BR/&gt; 1023: (14.2857%)&lt;BR/&gt; 2953: (10.7143%)&gt;];
}
863--901[label="1;1pkt 1fpkt"];
863--1171[label="1;1pkt 1fpkt"];
863--1240[label="1;1pkt 1fpkt"];
863--2432[label="1;1pkt 1fpkt"];
863--2727[label="1;4pkt 4fpkt"];
863--2956[label="1;1pkt 1fpkt"];
863--2965[label="1;1pkt 1fpkt"];
901--2727[label="1;1pkt 1fpkt"];
901--2965[label="1;1pkt 1fpkt"];
1171--2727[label="1;1pkt 1fpkt"];
1171--2956[label="1;1pkt 1fpkt"];
1240--2727[label="1;1pkt 1fpkt"];
2432--2727[label="1;1pkt 1fpkt"];
2727--2956[label="1;1pkt 1fpkt"];
2727--2965[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="84.194.112.171" dst_port="1023" src_ip="141.98.148.196" src_port="2951"/>
      <filter dst_ip="168.220.4.132" dst_port="6699" src_ip="141.98.148.196" src_port="2953"/>
      <filter dst_ip="43.196.27.19" dst_port="6699" src_ip="141.98.148.196" src_port="2755"/>
      <filter dst_ip="81.22.128.4" dst_port="6699" src_ip="141.98.148.196" src_port="2944"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23331,2.23684,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
981[label="1.35.33.71;s;3pkt 3fpkt", shape=diamond, color=yellow];
1170[label="212.24.29.4;d;2pkt 2fpkt", shape=diamond, color=yellow];
1207[label="212.24.29.23;d;3pkt 3fpkt", shape=diamond, color=yellow];
1221[label="212.24.18.11;d;3pkt 3fpkt", shape=diamond, color=yellow];
2750[label="1.35.33.71;s;3pkt 3fpkt", shape=hexagon, color=black];
2967[label="212.24.18.11;d;3pkt 3fpkt", shape=hexagon, color=black];
3385[label="212.24.29.4;d;2pkt 2fpkt", shape=hexagon, color=black];
3817[label="1.35.33.71;s;3pkt 3fpkt", shape=polygon, color=gold];
4588[label="1.35.33.71;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.35.33.71:5001, *:*}[37.5%]&lt;BR/&gt;{1.35.33.80:5001, *:*}[37.5%]&lt;BR/&gt;{*:5001, 212.24.29.4:*}[25%]&lt;BR/&gt;{*:5001, 212.24.18.11:*}[25%]&lt;BR/&gt;{*:5001, 212.24.29.23:*}[25%]&lt;BR/&gt;{*:1863, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (44%)&lt;BR/&gt; 3037: (12%)&lt;BR/&gt; 3029: (12%)&lt;BR/&gt; 3048: (10%)&lt;BR/&gt; 1863: (6%)&gt;];
}
981--1170[label="0.5;1pkt 1fpkt"];
981--1207[label="0.333333;1pkt 1fpkt"];
981--1221[label="0.333333;1pkt 1fpkt"];
981--2750[label="1;3pkt 3fpkt"];
981--2967[label="0.333333;1pkt 1fpkt"];
981--3385[label="0.5;1pkt 1fpkt"];
981--3817[label="1;3pkt 3fpkt"];
981--4588[label="1;3pkt 3fpkt"];
1170--2750[label="0.5;1pkt 1fpkt"];
1170--3385[label="1;2pkt 2fpkt"];
1170--3817[label="0.5;1pkt 1fpkt"];
1170--4588[label="0.5;1pkt 1fpkt"];
1207--2750[label="0.333333;1pkt 1fpkt"];
1207--3817[label="0.333333;1pkt 1fpkt"];
1207--4588[label="0.333333;1pkt 1fpkt"];
1221--2750[label="0.333333;1pkt 1fpkt"];
1221--2967[label="1;3pkt 3fpkt"];
1221--3817[label="0.333333;1pkt 1fpkt"];
1221--4588[label="0.333333;1pkt 1fpkt"];
2750--2967[label="0.333333;1pkt 1fpkt"];
2750--3385[label="0.5;1pkt 1fpkt"];
2750--3817[label="1;3pkt 3fpkt"];
2750--4588[label="1;3pkt 3fpkt"];
2967--3817[label="0.333333;1pkt 1fpkt"];
2967--4588[label="0.333333;1pkt 1fpkt"];
3385--3817[label="0.5;1pkt 1fpkt"];
3385--4588[label="0.5;1pkt 1fpkt"];
3817--4588[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_port="1863"/>
      <filter src_ip="1.35.33.80" src_port="5001"/>
      <filter src_ip="1.35.33.71" src_port="5001"/>
      <filter dst_ip="212.24.29.23" src_port="5001"/>
      <filter dst_ip="212.24.18.11" src_port="5001"/>
      <filter dst_ip="212.24.29.4" src_port="5001"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
1499[label="167.8.144.188;s;394pkt 394fpkt", shape=diamond, color=yellow];
2971[label="167.8.144.188;s;378pkt 378fpkt", shape=hexagon, color=black];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.144.188:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1499--2971[label="1;378pkt 378fpkt"];
</description>
    <slice>
      <filter src_ip="167.8.144.188"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
1313[label="185.191.189.12;s;2pkt 2fpkt", shape=diamond, color=yellow];
1314[label="86.250.181.57;d;2pkt 2fpkt", shape=diamond, color=yellow];
2864[label="86.250.181.57;d;2pkt 2fpkt", shape=hexagon, color=black];
2988[label="185.191.189.12;s;2pkt 2fpkt", shape=hexagon, color=black];
3926[label="86.250.181.57;d;2pkt 2fpkt", shape=polygon, color=gold];
4098[label="185.191.189.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6032[label="185.191.189.12;1pkt 1fpkt", shape=invtriangle, color=brown];
7324[label="185.191.189.12;1pkt 1fpkt", shape=invhouse, color=bisque];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.189.12:7743, 86.250.181.57:1302}[50%]&lt;BR/&gt;{185.191.189.12:7743, 86.250.181.57:1335}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (50%)&lt;BR/&gt; 1302: (30.7692%)&lt;BR/&gt; 1335: (19.2308%)&gt;];
}
1313--1314[label="1;2pkt 2fpkt"];
1313--2864[label="1;2pkt 2fpkt"];
1313--2988[label="1;2pkt 2fpkt"];
1313--3926[label="1;2pkt 2fpkt"];
1313--4098[label="1;1pkt 1fpkt"];
1313--6032[label="1;1pkt 1fpkt"];
1313--7324[label="1;1pkt 1fpkt"];
1314--2864[label="1;2pkt 2fpkt"];
1314--2988[label="1;2pkt 2fpkt"];
1314--3926[label="1;2pkt 2fpkt"];
1314--4098[label="1;1pkt 1fpkt"];
1314--6032[label="1;1pkt 1fpkt"];
1314--7324[label="1;1pkt 1fpkt"];
2864--2988[label="1;2pkt 2fpkt"];
2864--3926[label="1;2pkt 2fpkt"];
2864--4098[label="1;1pkt 1fpkt"];
2864--6032[label="1;1pkt 1fpkt"];
2864--7324[label="1;1pkt 1fpkt"];
2988--3926[label="1;2pkt 2fpkt"];
2988--4098[label="1;1pkt 1fpkt"];
2988--6032[label="1;1pkt 1fpkt"];
2988--7324[label="1;1pkt 1fpkt"];
3926--4098[label="1;1pkt 1fpkt"];
3926--6032[label="1;1pkt 1fpkt"];
3926--7324[label="1;1pkt 1fpkt"];
4098--6032[label="1;1pkt 1fpkt"];
4098--7324[label="1;1pkt 1fpkt"];
6032--7324[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="86.250.181.57" dst_port="1335" src_ip="185.191.189.12" src_port="7743"/>
      <filter dst_ip="86.250.181.57" dst_port="1302" src_ip="185.191.189.12" src_port="7743"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_320{
style=filled;
color=gray75;
1328[label="87.78.226.157;s;3pkt 3fpkt", shape=diamond, color=yellow];
2992[label="87.78.226.157;s;3pkt 3fpkt", shape=hexagon, color=black];
5272[label="87.78.226.157;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6823[label="87.78.226.157;3pkt 3fpkt", shape=invtriangle, color=brown];
7816[label="87.78.226.157;2pkt 2fpkt", shape=invhouse, color=bisque];
stat320[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.78.226.157:2842, 167.8.168.20:6699}[33.3333%]&lt;BR/&gt;{87.78.226.157:2845, 167.8.168.20:6699}[33.3333%]&lt;BR/&gt;{87.78.226.157:2855, 167.8.168.20:6699}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2855: (19.2308%)&lt;BR/&gt; 2842: (19.2308%)&lt;BR/&gt; 2845: (11.5385%)&gt;];
}
1328--2992[label="1;3pkt 3fpkt"];
1328--5272[label="1;2pkt 2fpkt"];
1328--6823[label="1;3pkt 3fpkt"];
1328--7816[label="1;2pkt 2fpkt"];
2992--5272[label="1;2pkt 2fpkt"];
2992--6823[label="1;3pkt 3fpkt"];
2992--7816[label="1;2pkt 2fpkt"];
5272--6823[label="1;2pkt 2fpkt"];
5272--7816[label="1;2pkt 2fpkt"];
6823--7816[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.168.20" dst_port="6699" src_ip="87.78.226.157" src_port="2855"/>
      <filter dst_ip="167.8.168.20" dst_port="6699" src_ip="87.78.226.157" src_port="2845"/>
      <filter dst_ip="167.8.168.20" dst_port="6699" src_ip="87.78.226.157" src_port="2842"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716171,2.20256,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
3567[label="167.8.140.52;s;10pkt 10fpkt", shape=hexagon, color=black];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.140.52:*, *:1863}[40%]&lt;BR/&gt;{167.8.140.52:*, 196.32.79.221:80}[20%]&lt;BR/&gt;{167.8.140.52:*, *:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (20%)&lt;BR/&gt; 80: (15%)&lt;BR/&gt; 6699: (10%)&lt;BR/&gt; 7952: (5%)&lt;BR/&gt; 1104: (5%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1863" src_ip="167.8.140.52"/>
      <filter dst_port="6699" src_ip="167.8.140.52"/>
      <filter dst_ip="196.32.79.221" dst_port="80" src_ip="167.8.140.52"/>
    </slice>
    <from sec="1034226006" usec="0"/>
    <to sec="1034226648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
1383[label="192.48.135.45;s;2pkt 2fpkt", shape=diamond, color=yellow];
3018[label="192.48.135.45;s;2pkt 2fpkt", shape=hexagon, color=black];
4381[label="192.48.135.45;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6225[label="192.48.135.45;3pkt 3fpkt", shape=invtriangle, color=brown];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.48.135.45:80, 161.238.8.27:1112}[33.3333%]&lt;BR/&gt;{192.48.135.45:80, 161.238.8.27:1113}[33.3333%]&lt;BR/&gt;{192.48.135.45:80, 161.238.8.27:1114}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1114: (20%)&lt;BR/&gt; 1113: (20%)&lt;BR/&gt; 1112: (10%)&gt;];
}
1383--3018[label="1;2pkt 2fpkt"];
1383--3692[label="1;2pkt 2fpkt"];
1383--4381[label="1;2pkt 2fpkt"];
1383--6225[label="1;2pkt 2fpkt"];
3018--3692[label="1;2pkt 2fpkt"];
3018--4381[label="1;2pkt 2fpkt"];
3018--6225[label="1;2pkt 2fpkt"];
4381--6225[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.8.27" dst_port="1114" src_ip="192.48.135.45" src_port="80"/>
      <filter dst_ip="161.238.8.27" dst_port="1113" src_ip="192.48.135.45" src_port="80"/>
      <filter dst_ip="161.238.8.27" dst_port="1112" src_ip="192.48.135.45" src_port="80"/>
    </slice>
    <from sec="1034226095" usec="0"/>
    <to sec="1034226559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
1626[label="84.8.96.216;d;256pkt 256fpkt", shape=diamond, color=yellow];
3019[label="84.8.96.216;d;129pkt 129fpkt", shape=hexagon, color=black];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:139, 84.8.96.216:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4188: (0.25974%)&lt;BR/&gt; 4187: (0.25974%)&lt;BR/&gt; 4185: (0.25974%)&lt;BR/&gt; 4183: (0.25974%)&gt;];
}
1626--3019[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_ip="84.8.96.216" src_port="139"/>
    </slice>
    <from sec="1034226095" usec="0"/>
    <to sec="1034226482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
1627[label="212.76.160.181;d;1pkt 1fpkt", shape=diamond, color=yellow];
3021[label="212.76.160.181;d;1pkt 1fpkt", shape=hexagon, color=black];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.138.96:6699, 212.76.160.181:1525}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1525: (50%)&gt;];
}
1627--3021[label="1;1pkt 1fpkt"];
1627--3168[label="1;1pkt 1fpkt"];
1627--4814[label="1;1pkt 1fpkt"];
3021--3168[label="1;1pkt 1fpkt"];
3021--4814[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.76.160.181" dst_port="1525" src_ip="167.8.138.96" src_port="6699"/>
    </slice>
    <from sec="1034226097" usec="0"/>
    <to sec="1034226374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987269,2.08385,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_325{
style=filled;
color=gray75;
58[label="161.238.10.84s;2pkt 2fpkt", shape=rectangle, color=red];
1654[label="161.238.10.84;s;2pkt 2fpkt", shape=diamond, color=yellow];
3027[label="161.238.10.84;s;2pkt 2fpkt", shape=hexagon, color=black];
4720[label="161.238.10.84;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6442[label="161.238.10.84;2pkt 2fpkt", shape=invtriangle, color=brown];
stat325[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.10.84:1167, 220.24.165.169:80}[50%]&lt;BR/&gt;{161.238.10.84:1169, 220.24.165.169:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1169: (27.7778%)&lt;BR/&gt; 1167: (22.2222%)&gt;];
}
58--1007[label="1;2pkt 2fpkt"];
58--1654[label="1;2pkt 2fpkt"];
58--2889[label="1;2pkt 2fpkt"];
58--3027[label="1;2pkt 2fpkt"];
58--3946[label="1;2pkt 2fpkt"];
58--3959[label="1;2pkt 2fpkt"];
58--3969[label="1;2pkt 2fpkt"];
58--4720[label="1;1pkt 1fpkt"];
58--6442[label="1;2pkt 2fpkt"];
1654--2889[label="1;2pkt 2fpkt"];
1654--3027[label="1;2pkt 2fpkt"];
1654--3946[label="1;2pkt 2fpkt"];
1654--3959[label="1;2pkt 2fpkt"];
1654--3969[label="1;2pkt 2fpkt"];
1654--4720[label="1;1pkt 1fpkt"];
1654--6442[label="1;2pkt 2fpkt"];
3027--3946[label="1;2pkt 2fpkt"];
3027--3959[label="1;2pkt 2fpkt"];
3027--3969[label="1;2pkt 2fpkt"];
3027--4720[label="1;1pkt 1fpkt"];
3027--6442[label="1;2pkt 2fpkt"];
4720--6442[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.24.165.169" dst_port="80" src_ip="161.238.10.84" src_port="1169"/>
      <filter dst_ip="220.24.165.169" dst_port="80" src_ip="161.238.10.84" src_port="1167"/>
    </slice>
    <from sec="1034226197" usec="0"/>
    <to sec="1034226276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989075,2.1681,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
88[label="85.34.73.136s;2pkt 2fpkt", shape=rectangle, color=red];
1340[label="85.34.118.171;s;101pkt 101fpkt", shape=diamond, color=yellow];
1659[label="161.238.38.158;d;267pkt 267fpkt", shape=diamond, color=yellow];
3030[label="161.238.38.158;d;63pkt 63fpkt", shape=hexagon, color=black];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.168.150.153:80, 161.238.38.158:*}[25.5102%]&lt;BR/&gt;{85.34.118.171:80, 161.238.38.158:*}[25.1701%]&lt;BR/&gt;{84.102.204.228:80, 161.238.38.158:*}[22.1088%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7691%)&lt;BR/&gt; 1763: (0.34642%)&lt;BR/&gt; 1716: (0.34642%)&lt;BR/&gt; 1713: (0.34642%)&lt;BR/&gt; 1708: (0.34642%)&gt;];
}
88--1591[label="1;2pkt 2fpkt"];
88--1659[label="1;2pkt 2fpkt"];
88--3030[label="1;2pkt 2fpkt"];
1340--1583[label="0.06;3pkt 3fpkt"];
1340--1659[label="0.732673;74pkt 74fpkt"];
1340--2997[label="1;101pkt 101fpkt"];
1340--3030[label="0.126984;8pkt 8fpkt"];
1340--3634[label="0.019802;2pkt 2fpkt"];
1340--3950[label="0.0693069;7pkt 7fpkt"];
1659--1833[label="0.0136986;1pkt 1fpkt"];
1659--2018[label="0.296443;75pkt 75fpkt"];
1659--2067[label="0.0217391;2pkt 2fpkt"];
1659--2219[label="0.357143;65pkt 65fpkt"];
1659--2461[label="0.046729;5pkt 5fpkt"];
1659--2997[label="0.732673;74pkt 74fpkt"];
1659--3030[label="1;63pkt 63fpkt"];
1659--3165[label="0.025;1pkt 1fpkt"];
1659--3297[label="0.23494;39pkt 39fpkt"];
1659--3324[label="0.0217391;2pkt 2fpkt"];
1659--3950[label="0.116105;31pkt 31fpkt"];
1659--4861[label="0.251534;41pkt 41fpkt"];
1659--6535[label="0.251534;41pkt 41fpkt"];
1659--7626[label="0.253086;41pkt 41fpkt"];
3030--3165[label="0.025;1pkt 1fpkt"];
3030--3297[label="0.142857;9pkt 9fpkt"];
3030--3950[label="0.492063;31pkt 31fpkt"];
3030--4861[label="0.460317;29pkt 29fpkt"];
3030--6535[label="0.460317;29pkt 29fpkt"];
3030--7626[label="0.460317;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.38.158" src_ip="85.34.118.171" src_port="80"/>
      <filter dst_ip="161.238.38.158" src_ip="209.168.150.153" src_port="80"/>
      <filter dst_ip="161.238.38.158" src_ip="84.102.204.228" src_port="80"/>
    </slice>
    <from sec="1034226005" usec="0"/>
    <to sec="1034226734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
1665[label="195.239.57.44;d;1pkt 1fpkt", shape=diamond, color=yellow];
3032[label="195.239.57.44;d;1pkt 1fpkt", shape=hexagon, color=black];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.19.67:3155, 195.239.57.44:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3155: (50%)&gt;];
}
1665--3032[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.239.57.44" dst_port="6699" src_ip="212.24.19.67" src_port="3155"/>
    </slice>
    <from sec="1034226210" usec="0"/>
    <to sec="1034226389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956891,2.11535,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
87[label="201.104.239.134s;1pkt 1fpkt", shape=rectangle, color=red];
601[label="201.104.239.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
1016[label="141.98.96.150;d;2pkt 2fpkt", shape=diamond, color=yellow];
3036[label="201.104.239.134;s;1pkt 1fpkt", shape=hexagon, color=black];
3487[label="141.98.96.150;d;2pkt 2fpkt", shape=hexagon, color=black];
5092[label="201.104.239.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.113.23.101:7743, 141.98.96.150:1480}[50%]&lt;BR/&gt;{201.104.239.134:7743, 141.98.96.150:1076}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (50%)&lt;BR/&gt; 1076: (37.5%)&lt;BR/&gt; 1480: (12.5%)&gt;];
}
87--601[label="1;1pkt 1fpkt"];
87--1016[label="1;1pkt 1fpkt"];
87--3036[label="1;1pkt 1fpkt"];
87--3487[label="1;1pkt 1fpkt"];
87--5092[label="1;1pkt 1fpkt"];
601--1016[label="1;1pkt 1fpkt"];
601--3036[label="1;1pkt 1fpkt"];
601--3487[label="1;1pkt 1fpkt"];
601--5092[label="1;1pkt 1fpkt"];
1016--2954[label="0.5;1pkt 1fpkt"];
1016--3036[label="1;1pkt 1fpkt"];
1016--3487[label="1;2pkt 2fpkt"];
1016--4846[label="0.5;1pkt 1fpkt"];
1016--5092[label="1;1pkt 1fpkt"];
1016--6524[label="0.5;1pkt 1fpkt"];
3036--3487[label="1;1pkt 1fpkt"];
3036--5092[label="1;1pkt 1fpkt"];
3487--4846[label="0.5;1pkt 1fpkt"];
3487--5092[label="1;1pkt 1fpkt"];
3487--6524[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.96.150" dst_port="1076" src_ip="201.104.239.134" src_port="7743"/>
      <filter dst_ip="141.98.96.150" dst_port="1480" src_ip="201.113.23.101" src_port="7743"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
663[label="194.159.27.49;s;1pkt 1fpkt", shape=diamond, color=yellow];
3043[label="194.159.27.49;s;1pkt 1fpkt", shape=hexagon, color=black];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.159.27.49:64884, 167.8.141.111:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64884: (50%)&lt;BR/&gt; 6699: (50%)&gt;];
}
663--664[label="1;1pkt 1fpkt"];
663--3043[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.141.111" dst_port="6699" src_ip="194.159.27.49" src_port="64884"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
1041[label="167.8.143.92;d;2pkt 2fpkt", shape=diamond, color=yellow];
1420[label="201.131.226.249;s;1pkt 1fpkt", shape=diamond, color=yellow];
3047[label="201.131.226.249;s;1pkt 1fpkt", shape=hexagon, color=black];
4164[label="85.34.109.21;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5926[label="201.131.226.249;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6082[label="85.34.109.21;12pkt 12fpkt", shape=invtriangle, color=brown];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.34.109.21:1863, 167.8.136.37:*}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (43.1034%)&lt;BR/&gt; 6699: (6.89655%)&lt;BR/&gt; 1198: (6.89655%)&lt;BR/&gt; 1122: (5.17241%)&lt;BR/&gt; 35498: (3.44828%)&gt;];
}
1041--1420[label="1;1pkt 1fpkt"];
1041--3047[label="1;1pkt 1fpkt"];
1041--4164[label="0.5;1pkt 1fpkt"];
1041--5926[label="1;1pkt 1fpkt"];
1041--6082[label="0.5;1pkt 1fpkt"];
1420--3047[label="1;1pkt 1fpkt"];
1420--5926[label="1;1pkt 1fpkt"];
3047--5926[label="1;1pkt 1fpkt"];
4164--6082[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.136.37" src_ip="85.34.109.21" src_port="1863"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
695[label="185.191.75.200;d;391pkt 391fpkt", shape=diamond, color=yellow];
1062[label="210.218.26.51;s;2pkt 2fpkt", shape=diamond, color=yellow];
3048[label="210.218.26.51;s;2pkt 2fpkt", shape=hexagon, color=black];
4437[label="210.218.26.51;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6263[label="210.218.26.51;1pkt 1fpkt", shape=invtriangle, color=brown];
7468[label="210.218.26.51;2pkt 2fpkt", shape=invhouse, color=bisque];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 185.191.75.200:6257}[96.6752%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (96.9925%)&lt;BR/&gt; 6699: (0.877193%)&lt;BR/&gt; 2109: (0.501253%)&lt;BR/&gt; 64859: (0.125313%)&lt;BR/&gt; 33568: (0.125313%)&gt;];
}
695--1062[label="1;2pkt 2fpkt"];
695--1210[label="1;1pkt 1fpkt"];
695--3048[label="1;2pkt 2fpkt"];
695--3662[label="1;1pkt 1fpkt"];
695--3948[label="0.0971867;38pkt 38fpkt"];
695--3952[label="0.13555;53pkt 53fpkt"];
695--3961[label="0.0971867;38pkt 38fpkt"];
695--3963[label="0.13555;53pkt 53fpkt"];
695--3971[label="0.0971867;38pkt 38fpkt"];
695--3973[label="0.13555;53pkt 53fpkt"];
695--4437[label="1;1pkt 1fpkt"];
695--6263[label="1;1pkt 1fpkt"];
695--7468[label="1;2pkt 2fpkt"];
1062--3048[label="1;2pkt 2fpkt"];
1062--4437[label="1;1pkt 1fpkt"];
1062--6263[label="1;1pkt 1fpkt"];
1062--7468[label="1;2pkt 2fpkt"];
3048--4437[label="1;1pkt 1fpkt"];
3048--6263[label="1;1pkt 1fpkt"];
3048--7468[label="1;2pkt 2fpkt"];
4437--6263[label="1;1pkt 1fpkt"];
4437--7468[label="1;1pkt 1fpkt"];
6263--7468[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.75.200" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,501,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
1685[label="197.51.1.63;d;1pkt 1fpkt", shape=diamond, color=yellow];
1686[label="141.98.167.90;s;2pkt 2fpkt", shape=diamond, color=yellow];
3060[label="141.98.167.90;s;1pkt 1fpkt", shape=hexagon, color=black];
4772[label="141.98.167.90;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6474[label="141.98.167.90;1pkt 1fpkt", shape=invtriangle, color=brown];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.167.90:21, 197.51.1.63:1622}[50%]&lt;BR/&gt;{141.98.167.90:21, 197.51.1.63:1798}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 1622: (28.5714%)&lt;BR/&gt; 1798: (21.4286%)&gt;];
}
1685--1686[label="1;1pkt 1fpkt"];
1685--3060[label="1;1pkt 1fpkt"];
1685--4772[label="1;1pkt 1fpkt"];
1686--3060[label="1;1pkt 1fpkt"];
1686--4772[label="1;2pkt 2fpkt"];
1686--6474[label="1;1pkt 1fpkt"];
3060--4772[label="1;1pkt 1fpkt"];
4772--6474[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.51.1.63" dst_port="1798" src_ip="141.98.167.90" src_port="21"/>
      <filter dst_ip="197.51.1.63" dst_port="1622" src_ip="141.98.167.90" src_port="21"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
74[label="212.20.62.105s;5pkt 5fpkt", shape=rectangle, color=red];
189[label="220.84.165.128d;19pkt 19fpkt", shape=rectangle, color=red];
792[label="179.144.141.155;d;132pkt 132fpkt", shape=diamond, color=yellow];
1115[label="212.20.62.105;s;130pkt 130fpkt", shape=diamond, color=yellow];
3067[label="212.20.62.105;s;114pkt 114fpkt", shape=hexagon, color=black];
4873[label="212.20.62.105;130pkt 130fpkt", shape=pentagon, color=darkviolet];
5050[label="161.238.11.130;56pkt 56fpkt", shape=pentagon, color=darkviolet];
6543[label="212.20.62.105;129pkt 129fpkt", shape=invtriangle, color=brown];
6667[label="161.238.11.130;56pkt 56fpkt", shape=invtriangle, color=brown];
7630[label="212.20.62.105;129pkt 129fpkt", shape=invhouse, color=bisque];
7715[label="161.238.11.130;56pkt 56fpkt", shape=invhouse, color=bisque];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.20.62.105:*, 179.144.141.155:21}[61.6162%]&lt;BR/&gt;{161.238.11.130:*, *:80}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (37.5523%)&lt;BR/&gt; 80: (9.46653%)&lt;BR/&gt; 20: (2.82427%)&lt;BR/&gt; 62086: (0.41841%)&lt;BR/&gt; 61839: (0.41841%)&gt;];
}
74--189[label="1;5pkt 5fpkt"];
74--792[label="1;5pkt 5fpkt"];
74--1115[label="1;5pkt 5fpkt"];
74--3067[label="0.8;4pkt 4fpkt"];
74--4873[label="1;5pkt 5fpkt"];
74--6543[label="0.8;4pkt 4fpkt"];
74--7630[label="0.8;4pkt 4fpkt"];
189--420[label="0.0526316;1pkt 1fpkt"];
189--431[label="0.578947;11pkt 11fpkt"];
189--439[label="0.263158;5pkt 5fpkt"];
189--442[label="0.210526;4pkt 4fpkt"];
189--536[label="0.578947;11pkt 11fpkt"];
189--542[label="0.263158;5pkt 5fpkt"];
189--544[label="0.210526;4pkt 4fpkt"];
189--792[label="0.263158;5pkt 5fpkt"];
189--936[label="0.0526316;1pkt 1fpkt"];
189--1022[label="0.0526316;1pkt 1fpkt"];
189--1115[label="0.263158;5pkt 5fpkt"];
189--3067[label="0.210526;4pkt 4fpkt"];
189--4726[label="0.526316;10pkt 10fpkt"];
189--4873[label="0.263158;5pkt 5fpkt"];
189--5050[label="0.210526;4pkt 4fpkt"];
189--6447[label="0.526316;10pkt 10fpkt"];
189--6543[label="0.210526;4pkt 4fpkt"];
189--6667[label="0.210526;4pkt 4fpkt"];
189--7577[label="0.526316;10pkt 10fpkt"];
189--7630[label="0.210526;4pkt 4fpkt"];
189--7715[label="0.210526;4pkt 4fpkt"];
792--1115[label="1;130pkt 130fpkt"];
792--3067[label="1;114pkt 114fpkt"];
792--3944[label="0.106061;14pkt 14fpkt"];
792--3957[label="0.106061;14pkt 14fpkt"];
792--3967[label="0.106061;14pkt 14fpkt"];
792--4873[label="1;130pkt 130fpkt"];
792--6543[label="1;129pkt 129fpkt"];
792--7630[label="1;129pkt 129fpkt"];
1115--3067[label="1;114pkt 114fpkt"];
1115--3944[label="0.107692;14pkt 14fpkt"];
1115--3957[label="0.107692;14pkt 14fpkt"];
1115--3967[label="0.107692;14pkt 14fpkt"];
1115--4873[label="1;130pkt 130fpkt"];
1115--6543[label="1;129pkt 129fpkt"];
1115--7630[label="1;129pkt 129fpkt"];
3067--3944[label="0.122807;14pkt 14fpkt"];
3067--3957[label="0.122807;14pkt 14fpkt"];
3067--3967[label="0.122807;14pkt 14fpkt"];
3067--4873[label="1;114pkt 114fpkt"];
3067--6543[label="0.991228;113pkt 113fpkt"];
3067--7630[label="0.991228;113pkt 113fpkt"];
4873--6543[label="1;129pkt 129fpkt"];
4873--7630[label="1;129pkt 129fpkt"];
5050--6667[label="1;56pkt 56fpkt"];
5050--7715[label="1;56pkt 56fpkt"];
6543--7630[label="1;129pkt 129fpkt"];
6667--7715[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="161.238.11.130"/>
      <filter dst_ip="179.144.141.155" dst_port="21" src_ip="212.20.62.105"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
219[label="1.113.109.30s;1pkt 1fpkt", shape=rectangle, color=red];
1446[label="167.8.138.205;d;5pkt 5fpkt", shape=diamond, color=yellow];
1691[label="203.195.61.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
1847[label="86.94.172.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
3069[label="203.195.61.30;s;1pkt 1fpkt", shape=hexagon, color=black];
3459[label="86.94.172.191;s;1pkt 1fpkt", shape=hexagon, color=black];
3643[label="167.8.138.205;d;5pkt 5fpkt", shape=hexagon, color=black];
4226[label="203.195.61.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6999[label="86.94.172.191;1pkt 1fpkt", shape=invtriangle, color=brown];
7923[label="86.94.172.191;1pkt 1fpkt", shape=invhouse, color=bisque];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.195.61.30:6699, 167.8.138.205:1548}[20%]&lt;BR/&gt;{81.13.154.45:6699, 167.8.138.205:1559}[20%]&lt;BR/&gt;{84.40.177.142:65303, 167.8.138.205:6699}[20%]&lt;BR/&gt;{202.231.70.146:6699, 167.8.138.205:1557}[20%]&lt;BR/&gt;{86.94.172.191:6699, 167.8.138.205:1554}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1554: (16.6667%)&lt;BR/&gt; 1548: (16.6667%)&lt;BR/&gt; 65303: (5.55556%)&lt;BR/&gt; 1559: (5.55556%)&gt;];
}
219--1446[label="1;1pkt 1fpkt"];
219--1691[label="1;1pkt 1fpkt"];
219--3069[label="1;1pkt 1fpkt"];
219--3643[label="1;1pkt 1fpkt"];
219--4226[label="1;1pkt 1fpkt"];
1446--1691[label="1;1pkt 1fpkt"];
1446--1847[label="1;1pkt 1fpkt"];
1446--3069[label="1;1pkt 1fpkt"];
1446--3459[label="1;1pkt 1fpkt"];
1446--3643[label="1;5pkt 5fpkt"];
1446--4226[label="1;1pkt 1fpkt"];
1446--6999[label="1;1pkt 1fpkt"];
1446--7923[label="1;1pkt 1fpkt"];
1691--3069[label="1;1pkt 1fpkt"];
1691--3643[label="1;1pkt 1fpkt"];
1691--4226[label="1;1pkt 1fpkt"];
1847--3459[label="1;1pkt 1fpkt"];
1847--3643[label="1;1pkt 1fpkt"];
1847--6999[label="1;1pkt 1fpkt"];
1847--7923[label="1;1pkt 1fpkt"];
3069--3643[label="1;1pkt 1fpkt"];
3069--4226[label="1;1pkt 1fpkt"];
3459--3643[label="1;1pkt 1fpkt"];
3459--6999[label="1;1pkt 1fpkt"];
3459--7923[label="1;1pkt 1fpkt"];
3643--4226[label="1;1pkt 1fpkt"];
3643--6999[label="1;1pkt 1fpkt"];
3643--7923[label="1;1pkt 1fpkt"];
6999--7923[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.138.205" dst_port="1554" src_ip="86.94.172.191" src_port="6699"/>
      <filter dst_ip="167.8.138.205" dst_port="1557" src_ip="202.231.70.146" src_port="6699"/>
      <filter dst_ip="167.8.138.205" dst_port="6699" src_ip="84.40.177.142" src_port="65303"/>
      <filter dst_ip="167.8.138.205" dst_port="1559" src_ip="81.13.154.45" src_port="6699"/>
      <filter dst_ip="167.8.138.205" dst_port="1548" src_ip="203.195.61.30" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
805[label="58.218.193.46;d;1pkt 1fpkt", shape=diamond, color=yellow];
806[label="161.238.72.178;s;2pkt 2fpkt", shape=diamond, color=yellow];
2714[label="161.238.72.178;s;2pkt 2fpkt", shape=hexagon, color=black];
3073[label="58.218.193.46;d;1pkt 1fpkt", shape=hexagon, color=black];
5428[label="161.238.72.178;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6929[label="161.238.72.178;1pkt 1fpkt", shape=invtriangle, color=brown];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.72.178:49159, 58.218.193.46:8082}[50%]&lt;BR/&gt;{161.238.72.178:49162, 34.47.252.197:123}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49159: (27.7778%)&lt;BR/&gt; 8082: (27.7778%)&lt;BR/&gt; 49162: (22.2222%)&lt;BR/&gt; 123: (22.2222%)&gt;];
}
805--806[label="1;1pkt 1fpkt"];
805--2714[label="1;1pkt 1fpkt"];
805--3073[label="1;1pkt 1fpkt"];
805--5428[label="1;1pkt 1fpkt"];
806--2714[label="1;2pkt 2fpkt"];
806--3073[label="1;1pkt 1fpkt"];
806--5428[label="1;2pkt 2fpkt"];
806--6929[label="1;1pkt 1fpkt"];
2714--3073[label="1;1pkt 1fpkt"];
2714--5428[label="1;2pkt 2fpkt"];
2714--6929[label="1;1pkt 1fpkt"];
3073--5428[label="1;1pkt 1fpkt"];
5428--6929[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.47.252.197" dst_port="123" src_ip="161.238.72.178" src_port="49162"/>
      <filter dst_ip="58.218.193.46" dst_port="8082" src_ip="161.238.72.178" src_port="49159"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
1453[label="130.10.9.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
3077[label="130.10.9.16;s;1pkt 1fpkt", shape=hexagon, color=black];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.10.9.16:6699, 167.8.138.81:1036}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1036: (50%)&gt;];
}
1453--3077[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.138.81" dst_port="1036" src_ip="130.10.9.16" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
1701[label="212.24.7.16;d;27pkt 27fpkt", shape=diamond, color=yellow];
1702[label="200.177.185.239;s;23pkt 23fpkt", shape=diamond, color=yellow];
3084[label="212.24.7.16;d;27pkt 27fpkt", shape=hexagon, color=black];
3920[label="212.24.7.16;d;27pkt 27fpkt", shape=polygon, color=gold];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.177.185.239:80, 212.24.7.16:*}[85.1852%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1584: (1.92308%)&lt;BR/&gt; 1583: (1.92308%)&lt;BR/&gt; 1582: (1.92308%)&lt;BR/&gt; 1581: (1.92308%)&gt;];
}
1701--1702[label="1;23pkt 23fpkt"];
1701--3084[label="1;27pkt 27fpkt"];
1701--3920[label="1;27pkt 27fpkt"];
1701--3950[label="0.0740741;2pkt 2fpkt"];
1702--3084[label="1;23pkt 23fpkt"];
1702--3920[label="1;23pkt 23fpkt"];
1702--3950[label="0.0869565;2pkt 2fpkt"];
3084--3920[label="1;27pkt 27fpkt"];
3084--3950[label="0.0740741;2pkt 2fpkt"];
3920--3950[label="0.0740741;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.7.16" src_ip="200.177.185.239" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_338{
style=filled;
color=gray75;
868[label="202.12.78.128;d;1pkt 1fpkt", shape=diamond, color=yellow];
3089[label="202.12.78.128;d;1pkt 1fpkt", shape=hexagon, color=black];
stat338[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.141.111:6699, 202.12.78.128:1135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1135: (50%)&gt;];
}
868--3089[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.12.78.128" dst_port="1135" src_ip="167.8.141.111" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_339{
style=filled;
color=gray75;
1486[label="203.19.144.115;s;1pkt 1fpkt", shape=diamond, color=yellow];
3094[label="203.19.144.115;s;1pkt 1fpkt", shape=hexagon, color=black];
3831[label="203.19.144.115;s;1pkt 1fpkt", shape=polygon, color=gold];
stat339[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.19.144.115:1033, 167.8.91.53:6970}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6970: (50%)&lt;BR/&gt; 1033: (50%)&gt;];
}
1486--3094[label="1;1pkt 1fpkt"];
1486--3831[label="1;1pkt 1fpkt"];
3094--3831[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.91.53" dst_port="6970" src_ip="203.19.144.115" src_port="1033"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
1717[label="130.49.0.24;s;1pkt 1fpkt", shape=diamond, color=yellow];
3097[label="130.49.0.24;s;1pkt 1fpkt", shape=hexagon, color=black];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.49.0.24:6699, 167.8.168.20:3874}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3874: (50%)&gt;];
}
1717--3097[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.168.20" dst_port="3874" src_ip="130.49.0.24" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
874[label="86.135.44.128;d;3pkt 3fpkt", shape=diamond, color=yellow];
913[label="81.114.187.101;d;730pkt 730fpkt", shape=diamond, color=yellow];
1218[label="136.230.99.30;s;758pkt 758fpkt", shape=diamond, color=yellow];
1283[label="136.230.119.85;s;64pkt 64fpkt", shape=diamond, color=yellow];
1706[label="136.230.79.13;s;44pkt 44fpkt", shape=diamond, color=yellow];
2182[label="192.137.137.117;d;4pkt 4fpkt", shape=diamond, color=yellow];
2730[label="86.135.44.128;d;3pkt 3fpkt", shape=hexagon, color=black];
3098[label="136.230.99.30;s;750pkt 750fpkt", shape=hexagon, color=black];
3545[label="192.137.137.117;d;4pkt 4fpkt", shape=hexagon, color=black];
4101[label="136.230.79.13;46pkt 46fpkt", shape=pentagon, color=darkviolet];
4228[label="136.230.99.30;759pkt 759fpkt", shape=pentagon, color=darkviolet];
4736[label="136.230.119.85;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6035[label="136.230.79.13;46pkt 46fpkt", shape=invtriangle, color=brown];
6122[label="136.230.99.30;760pkt 760fpkt", shape=invtriangle, color=brown];
6453[label="136.230.119.85;3pkt 3fpkt", shape=invtriangle, color=brown];
7581[label="136.230.119.85;3pkt 3fpkt", shape=invhouse, color=bisque];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.99.30:80, 81.114.187.101:*}[83.524%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.1859%)&lt;BR/&gt; 25: (2.36181%)&lt;BR/&gt; 23: (0.150754%)&lt;BR/&gt; 22: (0.138191%)&lt;BR/&gt; 3219: (0.113065%)&gt;];
}
874--1218[label="0.333333;1pkt 1fpkt"];
874--1283[label="0.333333;1pkt 1fpkt"];
874--1706[label="0.333333;1pkt 1fpkt"];
874--2730[label="1;3pkt 3fpkt"];
874--3098[label="0.333333;1pkt 1fpkt"];
874--4101[label="0.333333;1pkt 1fpkt"];
874--4228[label="0.333333;1pkt 1fpkt"];
874--6035[label="0.333333;1pkt 1fpkt"];
874--6122[label="0.333333;1pkt 1fpkt"];
913--1218[label="1;730pkt 730fpkt"];
913--3098[label="1;730pkt 730fpkt"];
913--3950[label="0.123288;90pkt 90fpkt"];
913--4228[label="0.99863;729pkt 729fpkt"];
913--6122[label="1;730pkt 730fpkt"];
1218--2730[label="0.333333;1pkt 1fpkt"];
1218--3098[label="1;750pkt 750fpkt"];
1218--3950[label="0.120053;91pkt 91fpkt"];
1218--4228[label="0.998681;757pkt 757fpkt"];
1218--6122[label="1;758pkt 758fpkt"];
1283--2068[label="0.0666667;2pkt 2fpkt"];
1283--2070[label="0.0869565;2pkt 2fpkt"];
1283--2182[label="0.75;3pkt 3fpkt"];
1283--2380[label="0.0869565;2pkt 2fpkt"];
1283--2730[label="0.333333;1pkt 1fpkt"];
1283--3327[label="0.0869565;2pkt 2fpkt"];
1283--3545[label="0.75;3pkt 3fpkt"];
1283--4736[label="0.333333;1pkt 1fpkt"];
1283--6453[label="0.333333;1pkt 1fpkt"];
1283--7581[label="0.333333;1pkt 1fpkt"];
1706--1998[label="0.117647;2pkt 2fpkt"];
1706--2070[label="0.130435;3pkt 3fpkt"];
1706--2380[label="0.0434783;1pkt 1fpkt"];
1706--2730[label="0.333333;1pkt 1fpkt"];
1706--3327[label="0.130435;3pkt 3fpkt"];
1706--3558[label="0.117647;2pkt 2fpkt"];
1706--4101[label="0.977273;43pkt 43fpkt"];
1706--6035[label="0.977273;43pkt 43fpkt"];
2182--3545[label="1;4pkt 4fpkt"];
2182--4005[label="0.25;1pkt 1fpkt"];
2182--4736[label="0.333333;1pkt 1fpkt"];
2182--5960[label="0.25;1pkt 1fpkt"];
2182--6453[label="0.333333;1pkt 1fpkt"];
2182--7277[label="0.25;1pkt 1fpkt"];
2182--7581[label="0.333333;1pkt 1fpkt"];
2730--3098[label="0.333333;1pkt 1fpkt"];
2730--4101[label="0.333333;1pkt 1fpkt"];
2730--4228[label="0.333333;1pkt 1fpkt"];
2730--6035[label="0.333333;1pkt 1fpkt"];
2730--6122[label="0.333333;1pkt 1fpkt"];
3098--3950[label="0.121333;91pkt 91fpkt"];
3098--4228[label="0.998667;749pkt 749fpkt"];
3098--6122[label="1;750pkt 750fpkt"];
3545--4005[label="0.25;1pkt 1fpkt"];
3545--4736[label="0.333333;1pkt 1fpkt"];
3545--5960[label="0.25;1pkt 1fpkt"];
3545--6453[label="0.333333;1pkt 1fpkt"];
3545--7277[label="0.25;1pkt 1fpkt"];
3545--7581[label="0.333333;1pkt 1fpkt"];
4101--6035[label="1;46pkt 46fpkt"];
4228--6122[label="1;759pkt 759fpkt"];
4736--6453[label="1;3pkt 3fpkt"];
4736--7581[label="1;3pkt 3fpkt"];
6453--7581[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="81.114.187.101" src_ip="136.230.99.30" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
1719[label="167.8.55.93;d;410pkt 410fpkt", shape=diamond, color=yellow];
1720[label="218.236.151.114;s;410pkt 410fpkt", shape=diamond, color=yellow];
3099[label="218.236.151.114;s;410pkt 410fpkt", shape=hexagon, color=black];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.236.151.114:*, 167.8.55.93:33610}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33610: (50%)&lt;BR/&gt; 2558: (0.121951%)&lt;BR/&gt; 2557: (0.121951%)&lt;BR/&gt; 2556: (0.121951%)&lt;BR/&gt; 2555: (0.121951%)&gt;];
}
1719--1720[label="1;410pkt 410fpkt"];
1719--3099[label="1;410pkt 410fpkt"];
1720--3099[label="1;410pkt 410fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.55.93" dst_port="33610" src_ip="218.236.151.114"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
1227[label="141.0.236.179;s;455pkt 455fpkt", shape=diamond, color=yellow];
1494[label="203.194.112.220;d;1pkt 1fpkt", shape=diamond, color=yellow];
3103[label="141.0.236.179;s;266pkt 266fpkt", shape=hexagon, color=black];
5444[label="141.0.236.179;565pkt 565fpkt", shape=pentagon, color=darkviolet];
6937[label="141.0.236.179;564pkt 564fpkt", shape=invtriangle, color=brown];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.0.236.179:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1227--1494[label="1;1pkt 1fpkt"];
1227--3103[label="1;266pkt 266fpkt"];
1227--5444[label="1;455pkt 455fpkt"];
1227--6937[label="0.997802;454pkt 454fpkt"];
1494--3103[label="1;1pkt 1fpkt"];
1494--5444[label="1;1pkt 1fpkt"];
1494--6937[label="1;1pkt 1fpkt"];
3103--5444[label="1;266pkt 266fpkt"];
3103--6937[label="1;266pkt 266fpkt"];
5444--6937[label="1;564pkt 564fpkt"];
</description>
    <slice>
      <filter src_ip="141.0.236.179"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23331,2.23684,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
731[label="167.8.168.20;d;8pkt 8fpkt", shape=diamond, color=yellow];
1752[label="130.58.91.196;s;1pkt 1fpkt", shape=diamond, color=yellow];
2345[label="86.177.171.197;s;1pkt 1fpkt", shape=diamond, color=yellow];
3110[label="130.58.91.196;s;1pkt 1fpkt", shape=hexagon, color=black];
3625[label="86.177.171.197;s;1pkt 1fpkt", shape=hexagon, color=black];
3861[label="130.58.91.196;s;1pkt 1fpkt", shape=polygon, color=gold];
5573[label="130.58.91.196;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.78.226.157:*, 167.8.168.20:6699}[37.5%]&lt;BR/&gt;{*:6699, 167.8.168.20:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (32.1429%)&lt;BR/&gt; 65535: (17.8571%)&lt;BR/&gt; 3892: (17.8571%)&lt;BR/&gt; 3901: (10.7143%)&lt;BR/&gt; 33901: (3.57143%)&gt;];
}
731--1328[label="1;3pkt 3fpkt"];
731--1717[label="1;1pkt 1fpkt"];
731--1752[label="1;1pkt 1fpkt"];
731--2310[label="1;1pkt 1fpkt"];
731--2345[label="1;1pkt 1fpkt"];
731--2992[label="1;3pkt 3fpkt"];
731--3097[label="1;1pkt 1fpkt"];
731--3110[label="1;1pkt 1fpkt"];
731--3609[label="1;1pkt 1fpkt"];
731--3625[label="1;1pkt 1fpkt"];
731--3861[label="1;1pkt 1fpkt"];
731--5272[label="1;2pkt 2fpkt"];
731--5573[label="1;1pkt 1fpkt"];
731--6823[label="1;3pkt 3fpkt"];
731--7333[label="1;1pkt 1fpkt"];
731--7816[label="1;2pkt 2fpkt"];
1752--3110[label="1;1pkt 1fpkt"];
1752--3861[label="1;1pkt 1fpkt"];
1752--5573[label="1;1pkt 1fpkt"];
2345--3625[label="1;1pkt 1fpkt"];
3110--3861[label="1;1pkt 1fpkt"];
3110--5573[label="1;1pkt 1fpkt"];
3861--5573[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.168.20" src_port="6699"/>
      <filter dst_ip="167.8.168.20" dst_port="6699" src_ip="87.78.226.157"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_345{
style=filled;
color=gray75;
1526[label="86.128.189.209;s;1pkt 1fpkt", shape=diamond, color=yellow];
3114[label="86.128.189.209;s;1pkt 1fpkt", shape=hexagon, color=black];
stat345[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.128.189.209:6699, 212.18.73.85:53706}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53706: (50%)&lt;BR/&gt; 6699: (50%)&gt;];
}
1526--3114[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.73.85" dst_port="53706" src_ip="86.128.189.209" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23331,2.23684,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_346{
style=filled;
color=gray75;
722[label="167.8.90.211;d;9pkt 9fpkt", shape=diamond, color=yellow];
839[label="86.89.163.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
894[label="197.193.163.67;s;1pkt 1fpkt", shape=diamond, color=yellow];
924[label="75.210.95.145;s;1pkt 1fpkt", shape=diamond, color=yellow];
931[label="201.120.223.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
1786[label="43.180.236.106;s;1pkt 1fpkt", shape=diamond, color=yellow];
2527[label="201.74.38.240;s;1pkt 1fpkt", shape=diamond, color=yellow];
2701[label="167.8.90.211;d;9pkt 9fpkt", shape=hexagon, color=black];
2739[label="201.120.223.32;s;1pkt 1fpkt", shape=hexagon, color=black];
2828[label="197.193.163.67;s;1pkt 1fpkt", shape=hexagon, color=black];
3134[label="43.180.236.106;s;1pkt 1fpkt", shape=hexagon, color=black];
3759[label="201.74.38.240;s;1pkt 1fpkt", shape=hexagon, color=black];
3786[label="167.8.90.211;d;9pkt 9fpkt", shape=polygon, color=gold];
3795[label="201.120.223.32;s;1pkt 1fpkt", shape=polygon, color=gold];
5176[label="75.210.95.145;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5854[label="201.74.38.240;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat346[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6699, 167.8.90.211:*}[44.4444%]&lt;BR/&gt;{*:*, 167.8.90.211:6699}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (42.5%)&lt;BR/&gt; 65294: (7.5%)&lt;BR/&gt; 1964: (7.5%)&lt;BR/&gt; 0: (7.5%)&lt;BR/&gt; 60351: (6.25%)&gt;];
}
722--839[label="1;1pkt 1fpkt"];
722--894[label="1;1pkt 1fpkt"];
722--924[label="1;1pkt 1fpkt"];
722--931[label="1;1pkt 1fpkt"];
722--1786[label="1;1pkt 1fpkt"];
722--2527[label="1;1pkt 1fpkt"];
722--2701[label="1;9pkt 9fpkt"];
722--2739[label="1;1pkt 1fpkt"];
722--2828[label="1;1pkt 1fpkt"];
722--3134[label="1;1pkt 1fpkt"];
722--3759[label="1;1pkt 1fpkt"];
722--3786[label="1;9pkt 9fpkt"];
722--3795[label="1;1pkt 1fpkt"];
722--5176[label="1;1pkt 1fpkt"];
722--5854[label="1;1pkt 1fpkt"];
839--2701[label="1;1pkt 1fpkt"];
839--3786[label="1;1pkt 1fpkt"];
894--2701[label="1;1pkt 1fpkt"];
894--2828[label="1;1pkt 1fpkt"];
894--3786[label="1;1pkt 1fpkt"];
924--2701[label="1;1pkt 1fpkt"];
924--3786[label="1;1pkt 1fpkt"];
924--5176[label="1;1pkt 1fpkt"];
931--2701[label="1;1pkt 1fpkt"];
931--2739[label="1;1pkt 1fpkt"];
931--3786[label="1;1pkt 1fpkt"];
931--3795[label="1;1pkt 1fpkt"];
1786--2701[label="1;1pkt 1fpkt"];
1786--3134[label="1;1pkt 1fpkt"];
1786--3786[label="1;1pkt 1fpkt"];
2527--2701[label="1;1pkt 1fpkt"];
2527--3759[label="1;1pkt 1fpkt"];
2527--3786[label="1;1pkt 1fpkt"];
2527--5854[label="1;1pkt 1fpkt"];
2701--2739[label="1;1pkt 1fpkt"];
2701--2828[label="1;1pkt 1fpkt"];
2701--3134[label="1;1pkt 1fpkt"];
2701--3759[label="1;1pkt 1fpkt"];
2701--3786[label="1;9pkt 9fpkt"];
2701--3795[label="1;1pkt 1fpkt"];
2701--5176[label="1;1pkt 1fpkt"];
2701--5854[label="1;1pkt 1fpkt"];
2739--3786[label="1;1pkt 1fpkt"];
2739--3795[label="1;1pkt 1fpkt"];
2828--3786[label="1;1pkt 1fpkt"];
3134--3786[label="1;1pkt 1fpkt"];
3759--3786[label="1;1pkt 1fpkt"];
3759--5854[label="1;1pkt 1fpkt"];
3786--3795[label="1;1pkt 1fpkt"];
3786--5176[label="1;1pkt 1fpkt"];
3786--5854[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.90.211" src_port="6699"/>
      <filter dst_ip="167.8.90.211" dst_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_347{
style=filled;
color=gray75;
1788[label="43.8.160.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
1789[label="167.8.141.181;d;2pkt 2fpkt", shape=diamond, color=yellow];
3137[label="167.8.141.181;d;2pkt 2fpkt", shape=hexagon, color=black];
stat347[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.34.108.63:1863, 167.8.141.181:1045}[50%]&lt;BR/&gt;{43.8.160.191:7743, 167.8.141.181:1047}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (30%)&lt;BR/&gt; 1047: (30%)&lt;BR/&gt; 1863: (20%)&lt;BR/&gt; 1045: (20%)&gt;];
}
1788--1789[label="1;1pkt 1fpkt"];
1788--3137[label="1;1pkt 1fpkt"];
1789--3137[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.141.181" dst_port="1047" src_ip="43.8.160.191" src_port="7743"/>
      <filter dst_ip="167.8.141.181" dst_port="1045" src_ip="85.34.108.63" src_port="1863"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
1406[label="167.8.131.116;d;195pkt 195fpkt", shape=diamond, color=yellow];
1611[label="84.102.238.144;s;2pkt 2fpkt", shape=diamond, color=yellow];
2246[label="197.245.85.115;s;19pkt 19fpkt", shape=diamond, color=yellow];
3147[label="161.238.248.75;d;7pkt 7fpkt", shape=hexagon, color=black];
4707[label="202.138.225.82;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4949[label="197.245.85.115;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5927[label="216.238.170.250;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6592[label="197.245.85.115;19pkt 19fpkt", shape=invtriangle, color=brown];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.222.202.87:80, 167.8.131.116:*}[21.2963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6552%)&lt;BR/&gt; 2524: (0.689655%)&lt;BR/&gt; 2523: (0.689655%)&lt;BR/&gt; 2522: (0.689655%)&lt;BR/&gt; 1965: (0.689655%)&gt;];
}
1406--1909[label="0.047619;3pkt 3fpkt"];
1406--2246[label="0.157895;3pkt 3fpkt"];
1406--3950[label="0.189744;37pkt 37fpkt"];
1406--4707[label="1;24pkt 24fpkt"];
1406--4949[label="0.166667;3pkt 3fpkt"];
1406--5927[label="1;6pkt 6fpkt"];
1406--6592[label="0.157895;3pkt 3fpkt"];
1611--3147[label="0.5;1pkt 1fpkt"];
1611--3950[label="0.5;1pkt 1fpkt"];
2246--3147[label="0.428571;3pkt 3fpkt"];
2246--3950[label="0.105263;2pkt 2fpkt"];
2246--4949[label="1;18pkt 18fpkt"];
2246--6592[label="1;19pkt 19fpkt"];
3147--3950[label="0.142857;1pkt 1fpkt"];
3147--4949[label="0.428571;3pkt 3fpkt"];
3147--6592[label="0.428571;3pkt 3fpkt"];
4949--6592[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.131.116" src_ip="197.222.202.87" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
1819[label="210.150.80.18;d;125pkt 125fpkt", shape=diamond, color=yellow];
1934[label="167.8.139.17;s;42pkt 42fpkt", shape=diamond, color=yellow];
2122[label="58.156.197.26;d;4pkt 4fpkt", shape=diamond, color=yellow];
3151[label="210.150.80.18;d;98pkt 98fpkt", shape=hexagon, color=black];
3586[label="185.191.108.62;s;147pkt 147fpkt", shape=hexagon, color=black];
4128[label="167.8.139.17;50pkt 50fpkt", shape=pentagon, color=darkviolet];
6053[label="167.8.139.17;50pkt 50fpkt", shape=invtriangle, color=brown];
7336[label="167.8.139.17;51pkt 51fpkt", shape=invhouse, color=bisque];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.108.62:*, 210.150.80.18:80}[32.2449%]&lt;BR/&gt;{167.8.139.17:*, *:*}[20.8163%]&lt;BR/&gt;{*:*, 210.150.15.156:80}[20.4082%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.0035%)&lt;BR/&gt; 443: (2.29277%)&lt;BR/&gt; 19464: (1.32275%)&lt;BR/&gt; 5190: (1.0582%)&lt;BR/&gt; 4423: (0.529101%)&gt;];
}
1819--1934[label="0.238095;10pkt 10fpkt"];
1819--2682[label="0.008;1pkt 1fpkt"];
1819--3151[label="1;98pkt 98fpkt"];
1819--3586[label="0.528;66pkt 66fpkt"];
1819--3631[label="0.008;1pkt 1fpkt"];
1819--3914[label="0.008;1pkt 1fpkt"];
1819--3946[label="0.088;11pkt 11fpkt"];
1819--3959[label="0.088;11pkt 11fpkt"];
1819--3969[label="0.088;11pkt 11fpkt"];
1819--4023[label="0.170732;14pkt 14fpkt"];
1819--4128[label="0.24;12pkt 12fpkt"];
1819--4134[label="0.008;1pkt 1fpkt"];
1819--4614[label="0.136;17pkt 17fpkt"];
1819--4726[label="0.008;1pkt 1fpkt"];
1819--4895[label="0.008;1pkt 1fpkt"];
1819--5973[label="0.17284;14pkt 14fpkt"];
1819--6053[label="0.24;12pkt 12fpkt"];
1819--6058[label="0.008;1pkt 1fpkt"];
1819--6379[label="0.136;17pkt 17fpkt"];
1819--6447[label="0.008;1pkt 1fpkt"];
1819--7287[label="0.170732;14pkt 14fpkt"];
1819--7336[label="0.235294;12pkt 12fpkt"];
1819--7577[label="0.008;1pkt 1fpkt"];
1934--2122[label="1;4pkt 4fpkt"];
1934--3151[label="0.214286;9pkt 9fpkt"];
1934--3190[label="0.285714;12pkt 12fpkt"];
1934--3847[label="0.285714;12pkt 12fpkt"];
1934--3946[label="0.0714286;3pkt 3fpkt"];
1934--3959[label="0.0714286;3pkt 3fpkt"];
1934--3969[label="0.0714286;3pkt 3fpkt"];
1934--4128[label="0.97619;41pkt 41fpkt"];
1934--6053[label="0.97619;41pkt 41fpkt"];
1934--7336[label="1;42pkt 42fpkt"];
2122--4128[label="1;4pkt 4fpkt"];
2122--6053[label="1;4pkt 4fpkt"];
2122--7336[label="1;4pkt 4fpkt"];
3151--3586[label="0.653061;64pkt 64fpkt"];
3151--3631[label="0.0102041;1pkt 1fpkt"];
3151--3914[label="0.0102041;1pkt 1fpkt"];
3151--3946[label="0.112245;11pkt 11fpkt"];
3151--3959[label="0.112245;11pkt 11fpkt"];
3151--3969[label="0.112245;11pkt 11fpkt"];
3151--4023[label="0.097561;8pkt 8fpkt"];
3151--4128[label="0.18;9pkt 9fpkt"];
3151--4134[label="0.0102041;1pkt 1fpkt"];
3151--4614[label="0.153061;15pkt 15fpkt"];
3151--4726[label="0.0102041;1pkt 1fpkt"];
3151--5973[label="0.0987654;8pkt 8fpkt"];
3151--6053[label="0.18;9pkt 9fpkt"];
3151--6058[label="0.0102041;1pkt 1fpkt"];
3151--6379[label="0.153061;15pkt 15fpkt"];
3151--6447[label="0.0102041;1pkt 1fpkt"];
3151--7287[label="0.097561;8pkt 8fpkt"];
3151--7336[label="0.176471;9pkt 9fpkt"];
3151--7577[label="0.0102041;1pkt 1fpkt"];
3586--3847[label="0.206186;20pkt 20fpkt"];
3586--3946[label="0.14966;22pkt 22fpkt"];
3586--3959[label="0.14966;22pkt 22fpkt"];
3586--3969[label="0.14966;22pkt 22fpkt"];
4128--6053[label="1;50pkt 50fpkt"];
4128--7336[label="1;50pkt 50fpkt"];
6053--7336[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter src_ip="167.8.139.17"/>
      <filter dst_ip="210.150.15.156" dst_port="80"/>
      <filter dst_ip="210.150.80.18" dst_port="80" src_ip="185.191.108.62"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_351{
style=filled;
color=gray75;
993[label="34.129.199.101;d;97pkt 97fpkt", shape=diamond, color=yellow];
994[label="185.191.4.10;s;110pkt 110fpkt", shape=diamond, color=yellow];
1872[label="210.150.108.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
3159[label="185.191.4.10;s;110pkt 110fpkt", shape=hexagon, color=black];
3343[label="210.150.108.130;d;1pkt 1fpkt", shape=hexagon, color=black];
4073[label="185.191.4.10;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6012[label="185.191.4.10;116pkt 116fpkt", shape=invtriangle, color=brown];
7313[label="185.191.4.10;116pkt 116fpkt", shape=invhouse, color=bisque];
stat351[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.4.10:*, 34.129.199.101:80}[83.6207%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49161: (0.974513%)&lt;BR/&gt; 49160: (0.824588%)&lt;BR/&gt; 49159: (0.824588%)&lt;BR/&gt; 49158: (0.824588%)&gt;];
}
993--994[label="1;97pkt 97fpkt"];
993--3159[label="1;97pkt 97fpkt"];
993--3946[label="0.103093;10pkt 10fpkt"];
993--3959[label="0.103093;10pkt 10fpkt"];
993--3969[label="0.103093;10pkt 10fpkt"];
993--4073[label="1;97pkt 97fpkt"];
993--6012[label="1;97pkt 97fpkt"];
993--7313[label="1;97pkt 97fpkt"];
994--1872[label="1;1pkt 1fpkt"];
994--3159[label="1;110pkt 110fpkt"];
994--3343[label="1;1pkt 1fpkt"];
994--3946[label="0.118182;13pkt 13fpkt"];
994--3959[label="0.118182;13pkt 13fpkt"];
994--3969[label="0.118182;13pkt 13fpkt"];
994--4073[label="1;110pkt 110fpkt"];
994--6012[label="1;110pkt 110fpkt"];
994--7313[label="1;110pkt 110fpkt"];
1872--3159[label="1;1pkt 1fpkt"];
1872--3343[label="1;1pkt 1fpkt"];
1872--4073[label="1;1pkt 1fpkt"];
1872--6012[label="1;1pkt 1fpkt"];
1872--7313[label="1;1pkt 1fpkt"];
3159--3343[label="1;1pkt 1fpkt"];
3159--3946[label="0.118182;13pkt 13fpkt"];
3159--3959[label="0.118182;13pkt 13fpkt"];
3159--3969[label="0.118182;13pkt 13fpkt"];
3159--4073[label="1;110pkt 110fpkt"];
3159--6012[label="1;110pkt 110fpkt"];
3159--7313[label="1;110pkt 110fpkt"];
3343--4073[label="1;1pkt 1fpkt"];
3343--6012[label="1;1pkt 1fpkt"];
3343--7313[label="1;1pkt 1fpkt"];
4073--6012[label="1;116pkt 116fpkt"];
4073--7313[label="1;116pkt 116fpkt"];
6012--7313[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_ip="34.129.199.101" dst_port="80" src_ip="185.191.4.10"/>
    </slice>
    <from sec="1034226036" usec="0"/>
    <to sec="1034226646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
1375[label="161.238.71.165;d;64pkt 64fpkt", shape=diamond, color=yellow];
3166[label="161.238.71.165;d;64pkt 64fpkt", shape=hexagon, color=black];
4323[label="1.121.93.40;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4807[label="212.220.18.96;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6500[label="212.220.18.96;6pkt 6fpkt", shape=invtriangle, color=brown];
7606[label="212.220.18.96;7pkt 7fpkt", shape=invhouse, color=bisque];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.121.93.40:80, 161.238.71.165:*}[46.2687%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.895%)&lt;BR/&gt; 38249: (1.38122%)&lt;BR/&gt; 38245: (1.38122%)&lt;BR/&gt; 38241: (1.38122%)&lt;BR/&gt; 38234: (1.38122%)&gt;];
}
1375--3166[label="1;64pkt 64fpkt"];
1375--3950[label="0.140625;9pkt 9fpkt"];
1375--4323[label="0.911765;31pkt 31fpkt"];
1375--4807[label="1;6pkt 6fpkt"];
1375--6500[label="1;6pkt 6fpkt"];
1375--7606[label="1;7pkt 7fpkt"];
3166--3950[label="0.140625;9pkt 9fpkt"];
3166--4323[label="0.911765;31pkt 31fpkt"];
3166--4807[label="1;6pkt 6fpkt"];
3166--6500[label="1;6pkt 6fpkt"];
3166--7606[label="1;7pkt 7fpkt"];
4807--6500[label="1;6pkt 6fpkt"];
4807--7606[label="1;6pkt 6fpkt"];
6500--7606[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.71.165" src_ip="1.121.93.40" src_port="80"/>
    </slice>
    <from sec="1034226074" usec="0"/>
    <to sec="1034226508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25702,2.20707,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_353{
style=filled;
color=gray75;
1297[label="141.98.102.162;d;86pkt 86fpkt", shape=diamond, color=yellow];
1397[label="86.206.105.98;s;51pkt 51fpkt", shape=diamond, color=yellow];
3171[label="86.206.105.98;s;51pkt 51fpkt", shape=hexagon, color=black];
3890[label="86.206.105.98;s;51pkt 51fpkt", shape=polygon, color=gold];
4831[label="86.206.105.98;50pkt 50fpkt", shape=pentagon, color=darkviolet];
5442[label="86.150.137.179;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6514[label="86.206.105.98;50pkt 50fpkt", shape=invtriangle, color=brown];
stat353[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.206.105.98:80, 141.98.102.162:*}[48.1132%]&lt;BR/&gt;{86.150.137.179:80, *:*}[21.6981%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1739: (0.828729%)&lt;BR/&gt; 1728: (0.828729%)&lt;BR/&gt; 1727: (0.828729%)&lt;BR/&gt; 1726: (0.828729%)&gt;];
}
1297--1397[label="1;51pkt 51fpkt"];
1297--3171[label="1;51pkt 51fpkt"];
1297--3890[label="1;51pkt 51fpkt"];
1297--3950[label="0.0232558;2pkt 2fpkt"];
1297--4341[label="0.294118;10pkt 10fpkt"];
1297--4808[label="0.333333;1pkt 1fpkt"];
1297--4831[label="1;50pkt 50fpkt"];
1297--5342[label="0.159091;7pkt 7fpkt"];
1297--5442[label="0.130435;3pkt 3fpkt"];
1297--6501[label="0.333333;1pkt 1fpkt"];
1297--6514[label="1;50pkt 50fpkt"];
1297--6873[label="0.159091;7pkt 7fpkt"];
1397--3171[label="1;51pkt 51fpkt"];
1397--3890[label="1;51pkt 51fpkt"];
1397--4831[label="1;50pkt 50fpkt"];
1397--6514[label="1;50pkt 50fpkt"];
3171--3890[label="1;51pkt 51fpkt"];
3171--4831[label="1;50pkt 50fpkt"];
3171--6514[label="1;50pkt 50fpkt"];
3890--4831[label="1;50pkt 50fpkt"];
3890--6514[label="1;50pkt 50fpkt"];
4831--6514[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter src_ip="86.150.137.179" src_port="80"/>
      <filter dst_ip="141.98.102.162" src_ip="86.206.105.98" src_port="80"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_354{
style=filled;
color=gray75;
1634[label="3.138.228.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
3168[label="167.8.138.96;s;4pkt 4fpkt", shape=hexagon, color=black];
3172[label="3.138.228.197;d;1pkt 1fpkt", shape=hexagon, color=black];
stat354[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.138.96:1146, 86.118.232.23:7951}[25%]&lt;BR/&gt;{167.8.138.96:6699, 74.116.52.149:62738}[25%]&lt;BR/&gt;{167.8.138.96:6699, 212.76.160.181:1525}[25%]&lt;BR/&gt;{167.8.138.96:1043, 3.138.228.197:6699}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (41.6667%)&lt;BR/&gt; 1043: (25%)&lt;BR/&gt; 62738: (8.33333%)&lt;BR/&gt; 7951: (8.33333%)&lt;BR/&gt; 1525: (8.33333%)&gt;];
}
1634--3168[label="1;1pkt 1fpkt"];
1634--3172[label="1;1pkt 1fpkt"];
1634--4814[label="1;1pkt 1fpkt"];
3168--3172[label="1;1pkt 1fpkt"];
3168--4814[label="1;4pkt 4fpkt"];
3172--4814[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="3.138.228.197" dst_port="6699" src_ip="167.8.138.96" src_port="1043"/>
      <filter dst_ip="212.76.160.181" dst_port="1525" src_ip="167.8.138.96" src_port="6699"/>
      <filter dst_ip="74.116.52.149" dst_port="62738" src_ip="167.8.138.96" src_port="6699"/>
      <filter dst_ip="86.118.232.23" dst_port="7951" src_ip="167.8.138.96" src_port="1146"/>
    </slice>
    <from sec="1034226097" usec="0"/>
    <to sec="1034226374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37651,2.26657,999,1 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_355{
style=filled;
color=gray75;
140[label="185.191.187.231s;1pkt 1fpkt", shape=rectangle, color=red];
584[label="185.191.187.231;s;299pkt 299fpkt", shape=diamond, color=yellow];
1063[label="196.128.191.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
1074[label="197.200.74.135;d;1pkt 1fpkt", shape=diamond, color=yellow];
1184[label="197.200.45.24;d;1pkt 1fpkt", shape=diamond, color=yellow];
1324[label="197.137.74.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
1468[label="75.103.0.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
1500[label="202.33.154.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
1502[label="3.177.13.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
1817[label="202.33.199.241;d;2pkt 2fpkt", shape=diamond, color=yellow];
2031[label="202.33.209.151;d;3pkt 3fpkt", shape=diamond, color=yellow];
2104[label="197.73.159.229;d;1pkt 1fpkt", shape=diamond, color=yellow];
2414[label="214.210.175.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
2476[label="217.219.168.188;d;1pkt 1fpkt", shape=diamond, color=yellow];
2485[label="196.180.82.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
2824[label="197.200.45.24;d;1pkt 1fpkt", shape=hexagon, color=black];
2919[label="197.200.74.135;d;1pkt 1fpkt", shape=hexagon, color=black];
2957[label="75.103.0.27;d;1pkt 1fpkt", shape=hexagon, color=black];
3191[label="185.191.187.231;s;299pkt 299fpkt", shape=hexagon, color=black];
3300[label="202.33.209.151;d;3pkt 3fpkt", shape=hexagon, color=black];
3308[label="202.33.199.241;d;2pkt 2fpkt", shape=hexagon, color=black];
3469[label="197.73.159.229;d;1pkt 1fpkt", shape=hexagon, color=black];
3598[label="217.219.168.188;d;1pkt 1fpkt", shape=hexagon, color=black];
3895[label="197.73.159.229;d;1pkt 1fpkt", shape=polygon, color=gold];
stat355[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.187.231:*, *:4662}[56.5217%]&lt;BR/&gt;{185.191.187.231:4662, *:*}[20.7358%]&lt;BR/&gt;{185.191.187.231:4927, *:*}[20.7358%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (39.1374%)&lt;BR/&gt; 4927: (9.90415%)&lt;BR/&gt; 4665: (7.82748%)&lt;BR/&gt; 4: (0.798722%)&lt;BR/&gt; 6665: (0.479233%)&gt;];
}
140--584[label="1;1pkt 1fpkt"];
140--1324[label="1;1pkt 1fpkt"];
140--3191[label="1;1pkt 1fpkt"];
584--1063[label="1;1pkt 1fpkt"];
584--1074[label="1;1pkt 1fpkt"];
584--1184[label="1;1pkt 1fpkt"];
584--1324[label="1;1pkt 1fpkt"];
584--1468[label="1;1pkt 1fpkt"];
584--1500[label="1;1pkt 1fpkt"];
584--1502[label="1;1pkt 1fpkt"];
584--1817[label="1;2pkt 2fpkt"];
584--2031[label="1;3pkt 3fpkt"];
584--2104[label="1;1pkt 1fpkt"];
584--2414[label="1;1pkt 1fpkt"];
584--2476[label="1;1pkt 1fpkt"];
584--2485[label="1;1pkt 1fpkt"];
584--2824[label="1;1pkt 1fpkt"];
584--2919[label="1;1pkt 1fpkt"];
584--2957[label="1;1pkt 1fpkt"];
584--3191[label="1;299pkt 299fpkt"];
584--3300[label="1;3pkt 3fpkt"];
584--3308[label="1;2pkt 2fpkt"];
584--3469[label="1;1pkt 1fpkt"];
584--3598[label="1;1pkt 1fpkt"];
584--3895[label="1;1pkt 1fpkt"];
1063--3191[label="1;1pkt 1fpkt"];
1074--2919[label="1;1pkt 1fpkt"];
1074--3191[label="1;1pkt 1fpkt"];
1184--2824[label="1;1pkt 1fpkt"];
1184--3191[label="1;1pkt 1fpkt"];
1324--3191[label="1;1pkt 1fpkt"];
1468--2957[label="1;1pkt 1fpkt"];
1468--3191[label="1;1pkt 1fpkt"];
1500--3191[label="1;1pkt 1fpkt"];
1502--3191[label="1;1pkt 1fpkt"];
1817--3191[label="1;2pkt 2fpkt"];
1817--3308[label="1;2pkt 2fpkt"];
2031--3191[label="1;3pkt 3fpkt"];
2031--3300[label="1;3pkt 3fpkt"];
2104--3191[label="1;1pkt 1fpkt"];
2104--3469[label="1;1pkt 1fpkt"];
2104--3895[label="1;1pkt 1fpkt"];
2414--3191[label="1;1pkt 1fpkt"];
2476--3191[label="1;1pkt 1fpkt"];
2476--3598[label="1;1pkt 1fpkt"];
2485--3191[label="1;1pkt 1fpkt"];
2824--3191[label="1;1pkt 1fpkt"];
2919--3191[label="1;1pkt 1fpkt"];
2957--3191[label="1;1pkt 1fpkt"];
3191--3300[label="1;3pkt 3fpkt"];
3191--3308[label="1;2pkt 2fpkt"];
3191--3469[label="1;1pkt 1fpkt"];
3191--3598[label="1;1pkt 1fpkt"];
3191--3895[label="1;1pkt 1fpkt"];
3469--3895[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="185.191.187.231" src_port="4927"/>
      <filter src_ip="185.191.187.231" src_port="4662"/>
      <filter dst_port="4662" src_ip="185.191.187.231"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25702,2.20707,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_356{
style=filled;
color=gray75;
1026[label="136.230.110.186;s;13pkt 13fpkt", shape=diamond, color=yellow];
1902[label="213.2.255.81;d;5pkt 5fpkt", shape=diamond, color=yellow];
1954[label="136.230.78.164;s;6pkt 6fpkt", shape=diamond, color=yellow];
3194[label="213.2.255.81;d;5pkt 5fpkt", shape=hexagon, color=black];
3197[label="136.230.110.186;s;12pkt 12fpkt", shape=hexagon, color=black];
3674[label="136.230.78.164;s;6pkt 6fpkt", shape=hexagon, color=black];
3848[label="213.2.255.81;d;3pkt 3fpkt", shape=polygon, color=gold];
5323[label="136.230.78.164;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5493[label="136.230.110.186;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6965[label="136.230.110.186;13pkt 13fpkt", shape=invtriangle, color=brown];
stat356[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.78.164:*, *:*}[28.5714%]&lt;BR/&gt;{136.230.110.186:*, *:5190}[23.8095%]&lt;BR/&gt;{*:*, *:6667}[23.8095%]&lt;BR/&gt;{*:*, 213.2.255.81:*}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (16.8831%)&lt;BR/&gt; 5190: (13.6364%)&lt;BR/&gt; 25: (7.79221%)&lt;BR/&gt; 1042: (5.19481%)&lt;BR/&gt; 27018: (4.54545%)&gt;];
}
1026--1902[label="0.4;2pkt 2fpkt"];
1026--3194[label="0.4;2pkt 2fpkt"];
1026--3197[label="1;12pkt 12fpkt"];
1026--3848[label="0.666667;2pkt 2fpkt"];
1026--5493[label="1;12pkt 12fpkt"];
1026--6965[label="1;13pkt 13fpkt"];
1902--1954[label="0.2;1pkt 1fpkt"];
1902--3194[label="1;5pkt 5fpkt"];
1902--3197[label="0.4;2pkt 2fpkt"];
1902--3674[label="0.2;1pkt 1fpkt"];
1902--3848[label="1;3pkt 3fpkt"];
1902--5323[label="0.5;1pkt 1fpkt"];
1902--5493[label="0.4;2pkt 2fpkt"];
1902--6965[label="0.4;2pkt 2fpkt"];
1954--3194[label="0.2;1pkt 1fpkt"];
1954--3263[label="0.166667;1pkt 1fpkt"];
1954--3674[label="1;6pkt 6fpkt"];
1954--3848[label="0.333333;1pkt 1fpkt"];
1954--5323[label="1;2pkt 2fpkt"];
3194--3197[label="0.4;2pkt 2fpkt"];
3194--3674[label="0.2;1pkt 1fpkt"];
3194--3848[label="1;3pkt 3fpkt"];
3194--5323[label="0.5;1pkt 1fpkt"];
3194--5493[label="0.4;2pkt 2fpkt"];
3194--6965[label="0.4;2pkt 2fpkt"];
3197--3848[label="0.666667;2pkt 2fpkt"];
3197--5493[label="0.916667;11pkt 11fpkt"];
3197--6965[label="1;12pkt 12fpkt"];
3674--3848[label="0.333333;1pkt 1fpkt"];
3674--5323[label="1;2pkt 2fpkt"];
3848--5323[label="0.5;1pkt 1fpkt"];
3848--5493[label="0.666667;2pkt 2fpkt"];
3848--6965[label="0.666667;2pkt 2fpkt"];
5493--6965[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="136.230.78.164"/>
      <filter dst_ip="213.2.255.81"/>
      <filter dst_port="6667"/>
      <filter dst_port="5190" src_ip="136.230.110.186"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_358{
style=filled;
color=gray75;
1678[label="136.230.96.54;s;37pkt 37fpkt", shape=diamond, color=yellow];
3202[label="136.230.96.54;s;37pkt 37fpkt", shape=hexagon, color=black];
stat358[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.96.54:80, 81.66.228.127:*}[40.5405%]&lt;BR/&gt;{136.230.96.54:80, 212.85.122.193:*}[27.027%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49306: (1.35135%)&lt;BR/&gt; 40382: (1.35135%)&lt;BR/&gt; 40363: (1.35135%)&lt;BR/&gt; 40362: (1.35135%)&gt;];
}
1678--3202[label="1;37pkt 37fpkt"];
1678--3950[label="0.108108;4pkt 4fpkt"];
3202--3950[label="0.108108;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="81.66.228.127" src_ip="136.230.96.54" src_port="80"/>
      <filter dst_ip="212.85.122.193" src_ip="136.230.96.54" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_359{
style=filled;
color=gray75;
700[label="85.205.55.54;d;1pkt 1fpkt", shape=diamond, color=yellow];
703[label="213.91.100.95;s;4pkt 4fpkt", shape=diamond, color=yellow];
2696[label="213.91.100.95;s;3pkt 3fpkt", shape=hexagon, color=black];
3209[label="85.205.55.54;d;1pkt 1fpkt", shape=hexagon, color=black];
4805[label="213.91.100.95;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat359[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.100.95:4386, 85.34.108.39:1863}[25%]&lt;BR/&gt;{213.91.100.95:8864, 85.205.55.54:8864}[25%]&lt;BR/&gt;{213.91.100.95:4444, 85.34.108.229:1863}[25%]&lt;BR/&gt;{213.91.100.95:4447, 85.34.108.253:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8864: (38.4615%)&lt;BR/&gt; 1863: (30.7692%)&lt;BR/&gt; 4444: (11.5385%)&lt;BR/&gt; 4386: (11.5385%)&lt;BR/&gt; 4447: (7.69231%)&gt;];
}
700--703[label="1;1pkt 1fpkt"];
700--2696[label="1;1pkt 1fpkt"];
700--3209[label="1;1pkt 1fpkt"];
700--4805[label="1;1pkt 1fpkt"];
703--2696[label="1;3pkt 3fpkt"];
703--3209[label="1;1pkt 1fpkt"];
703--4805[label="1;4pkt 4fpkt"];
2696--3209[label="1;1pkt 1fpkt"];
2696--4805[label="1;3pkt 3fpkt"];
3209--4805[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="85.34.108.253" dst_port="1863" src_ip="213.91.100.95" src_port="4447"/>
      <filter dst_ip="85.34.108.229" dst_port="1863" src_ip="213.91.100.95" src_port="4444"/>
      <filter dst_ip="85.205.55.54" dst_port="8864" src_ip="213.91.100.95" src_port="8864"/>
      <filter dst_ip="85.34.108.39" dst_port="1863" src_ip="213.91.100.95" src_port="4386"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_360{
style=filled;
color=gray75;
782[label="43.195.173.188;d;1pkt 1fpkt", shape=diamond, color=yellow];
783[label="161.238.59.77;s;9pkt 9fpkt", shape=diamond, color=yellow];
3219[label="161.238.59.77;s;3pkt 3fpkt", shape=hexagon, color=black];
3502[label="43.195.173.188;d;1pkt 1fpkt", shape=hexagon, color=black];
4654[label="161.238.59.77;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6404[label="161.238.59.77;9pkt 9fpkt", shape=invtriangle, color=brown];
7552[label="161.238.59.77;9pkt 9fpkt", shape=invhouse, color=bisque];
stat360[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.59.77:*, 86.210.226.106:80}[50%]&lt;BR/&gt;{161.238.59.77:*, *:5100}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.7619%)&lt;BR/&gt; 5100: (13.0952%)&lt;BR/&gt; 49181: (8.33333%)&lt;BR/&gt; 49509: (5.95238%)&lt;BR/&gt; 49153: (5.95238%)&gt;];
}
782--783[label="1;1pkt 1fpkt"];
782--3219[label="1;1pkt 1fpkt"];
782--3502[label="1;1pkt 1fpkt"];
782--4654[label="1;1pkt 1fpkt"];
782--6404[label="1;1pkt 1fpkt"];
782--7552[label="1;1pkt 1fpkt"];
783--3219[label="1;3pkt 3fpkt"];
783--3502[label="1;1pkt 1fpkt"];
783--4654[label="1;9pkt 9fpkt"];
783--6404[label="1;9pkt 9fpkt"];
783--7552[label="1;9pkt 9fpkt"];
3219--3502[label="1;1pkt 1fpkt"];
3219--4654[label="1;3pkt 3fpkt"];
3219--6404[label="1;3pkt 3fpkt"];
3219--7552[label="1;3pkt 3fpkt"];
3502--4654[label="1;1pkt 1fpkt"];
3502--6404[label="1;1pkt 1fpkt"];
3502--7552[label="1;1pkt 1fpkt"];
4654--6404[label="1;9pkt 9fpkt"];
4654--7552[label="1;9pkt 9fpkt"];
6404--7552[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="5100" src_ip="161.238.59.77"/>
      <filter dst_ip="86.210.226.106" dst_port="80" src_ip="161.238.59.77"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.888207,2.12355,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
822[label="43.164.153.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
3227[label="43.164.153.5;s;1pkt 1fpkt", shape=hexagon, color=black];
4031[label="43.164.153.5;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7291[label="43.164.153.5;1pkt 1fpkt", shape=invhouse, color=bisque];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.164.153.5:3337, 167.8.140.25:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3337: (50%)&gt;];
}
822--2908[label="1;1pkt 1fpkt"];
822--3227[label="1;1pkt 1fpkt"];
822--4031[label="1;1pkt 1fpkt"];
822--7291[label="1;1pkt 1fpkt"];
3227--4031[label="1;1pkt 1fpkt"];
3227--7291[label="1;1pkt 1fpkt"];
4031--7291[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.140.25" dst_port="6699" src_ip="43.164.153.5" src_port="3337"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
1357[label="1.71.118.46;d;5pkt 5fpkt", shape=diamond, color=yellow];
1941[label="167.8.68.130;s;507pkt 507fpkt", shape=diamond, color=yellow];
2878[label="1.71.118.46;d;5pkt 5fpkt", shape=hexagon, color=black];
3860[label="167.8.68.130;s;409pkt 409fpkt", shape=polygon, color=gold];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.68.130:53, *:*}[98.4344%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (58.0454%)&lt;BR/&gt; 1024: (1.34989%)&lt;BR/&gt; 1028: (1.13391%)&lt;BR/&gt; 32768: (0.917927%)&lt;BR/&gt; 1025: (0.809935%)&gt;];
}
1357--1941[label="0.2;1pkt 1fpkt"];
1357--2878[label="1;5pkt 5fpkt"];
1357--3250[label="0.2;1pkt 1fpkt"];
1357--3860[label="0.2;1pkt 1fpkt"];
1357--3950[label="0.2;1pkt 1fpkt"];
1357--5053[label="0.2;1pkt 1fpkt"];
1357--5063[label="0.8;4pkt 4fpkt"];
1941--2017[label="0.0169492;1pkt 1fpkt"];
1941--2878[label="0.2;1pkt 1fpkt"];
1941--3250[label="1;507pkt 507fpkt"];
1941--3437[label="0.0169492;1pkt 1fpkt"];
1941--3860[label="1;409pkt 409fpkt"];
1941--3931[label="0.0169492;1pkt 1fpkt"];
1941--3941[label="0.00394477;2pkt 2fpkt"];
1941--3945[label="0.0295858;15pkt 15fpkt"];
1941--3949[label="0.108481;55pkt 55fpkt"];
1941--3954[label="0.00394477;2pkt 2fpkt"];
1941--3958[label="0.0295858;15pkt 15fpkt"];
1941--3964[label="0.00394477;2pkt 2fpkt"];
1941--3968[label="0.0295858;15pkt 15fpkt"];
1941--5053[label="0.998028;506pkt 506fpkt"];
2878--3250[label="0.2;1pkt 1fpkt"];
2878--3860[label="0.2;1pkt 1fpkt"];
2878--3950[label="0.2;1pkt 1fpkt"];
2878--5053[label="0.2;1pkt 1fpkt"];
2878--5063[label="0.8;4pkt 4fpkt"];
3860--3941[label="0.00488998;2pkt 2fpkt"];
3860--3945[label="0.0366748;15pkt 15fpkt"];
3860--3949[label="0.134474;55pkt 55fpkt"];
3860--3954[label="0.00488998;2pkt 2fpkt"];
3860--3958[label="0.0366748;15pkt 15fpkt"];
3860--3964[label="0.00488998;2pkt 2fpkt"];
3860--3968[label="0.0366748;15pkt 15fpkt"];
3860--5053[label="0.997555;408pkt 408fpkt"];
</description>
    <slice>
      <filter src_ip="167.8.68.130" src_port="53"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_363{
style=filled;
color=gray75;
1714[label="161.238.151.116;s;1pkt 1fpkt", shape=diamond, color=yellow];
1715[label="86.194.164.22;d;1pkt 1fpkt", shape=diamond, color=yellow];
3251[label="161.238.151.116;s;1pkt 1fpkt", shape=hexagon, color=black];
stat363[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.151.116:3319, 86.194.164.22:20}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3319: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
1714--1715[label="1;1pkt 1fpkt"];
1714--3251[label="1;1pkt 1fpkt"];
1715--3251[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="86.194.164.22" dst_port="20" src_ip="161.238.151.116" src_port="3319"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_364{
style=filled;
color=gray75;
1950[label="161.238.161.70;d;218pkt 218fpkt", shape=diamond, color=yellow];
3261[label="161.238.161.70;d;210pkt 210fpkt", shape=hexagon, color=black];
stat364[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1812, 161.238.161.70:1812}[97.7064%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1812: (97.8972%)&lt;BR/&gt; 2002: (2.1028%)&gt;];
}
1950--3261[label="1;210pkt 210fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.161.70" dst_port="1812" src_port="1812"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658063,2.10925,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_365{
style=filled;
color=gray75;
919[label="196.34.143.18;s;12pkt 12fpkt", shape=diamond, color=yellow];
4136[label="196.34.143.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6060[label="196.34.143.18;1pkt 1fpkt", shape=invtriangle, color=brown];
stat365[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.34.143.18:6663, *:*}[41.6667%]&lt;BR/&gt;{196.34.143.18:6664, *:*}[33.3333%]&lt;BR/&gt;{196.34.143.18:6661, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6664: (21.4286%)&lt;BR/&gt; 6663: (17.8571%)&lt;BR/&gt; 6661: (10.7143%)&lt;BR/&gt; 1635: (10.7143%)&lt;BR/&gt; 63618: (3.57143%)&gt;];
}
919--1472[label="0.166667;2pkt 2fpkt"];
919--1953[label="0.166667;1pkt 1fpkt"];
919--2177[label="0.4;2pkt 2fpkt"];
919--2698[label="0.5;1pkt 1fpkt"];
919--2959[label="0.166667;2pkt 2fpkt"];
919--3264[label="1;12pkt 12fpkt"];
919--3265[label="0.166667;1pkt 1fpkt"];
919--3813[label="0.166667;2pkt 2fpkt"];
919--4136[label="1;1pkt 1fpkt"];
919--6060[label="1;1pkt 1fpkt"];
4136--6060[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="196.34.143.18" src_port="6663"/>
      <filter src_ip="196.34.143.18" src_port="6664"/>
      <filter src_ip="196.34.143.18" src_port="6661"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_366{
style=filled;
color=gray75;
1512[label="213.91.102.136;s;247pkt 247fpkt", shape=diamond, color=yellow];
3267[label="213.91.102.136;s;161pkt 161fpkt", shape=hexagon, color=black];
stat366[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.102.136:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1512--3267[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter src_ip="213.91.102.136"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
1277[label="141.98.17.234;d;7pkt 7fpkt", shape=diamond, color=yellow];
1279[label="194.135.5.221;s;7pkt 7fpkt", shape=diamond, color=yellow];
3269[label="194.135.5.221;s;7pkt 7fpkt", shape=hexagon, color=black];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.135.5.221:80, 141.98.17.234:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1900: (7.14286%)&lt;BR/&gt; 1898: (7.14286%)&lt;BR/&gt; 1895: (7.14286%)&lt;BR/&gt; 1876: (7.14286%)&gt;];
}
1277--1279[label="1;7pkt 7fpkt"];
1277--3269[label="1;7pkt 7fpkt"];
1277--3950[label="0.428571;3pkt 3fpkt"];
1279--3269[label="1;7pkt 7fpkt"];
1279--3950[label="0.428571;3pkt 3fpkt"];
3269--3950[label="0.428571;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.17.234" src_ip="194.135.5.221" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_368{
style=filled;
color=gray75;
28[label="1.35.33.48s;3pkt 3fpkt", shape=rectangle, color=red];
754[label="1.35.33.48;s;12pkt 12fpkt", shape=diamond, color=yellow];
1082[label="212.24.25.82;d;2pkt 2fpkt", shape=diamond, color=yellow];
1238[label="212.24.25.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
1251[label="212.24.25.101;d;1pkt 1fpkt", shape=diamond, color=yellow];
1281[label="212.24.168.166;d;15pkt 15fpkt", shape=diamond, color=yellow];
1290[label="212.24.168.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
1291[label="212.24.25.117;d;2pkt 2fpkt", shape=diamond, color=yellow];
1306[label="212.24.25.91;d;1pkt 1fpkt", shape=diamond, color=yellow];
1544[label="212.24.4.33;d;3pkt 3fpkt", shape=diamond, color=yellow];
1546[label="212.24.29.151;d;22pkt 22fpkt", shape=diamond, color=yellow];
1621[label="1.35.33.81;s;3pkt 3fpkt", shape=diamond, color=yellow];
2630[label="212.24.4.57;d;4pkt 4fpkt", shape=diamond, color=yellow];
2707[label="1.35.33.48;s;12pkt 12fpkt", shape=hexagon, color=black];
2836[label="212.24.25.65;d;1pkt 1fpkt", shape=hexagon, color=black];
2850[label="212.24.25.117;d;2pkt 2fpkt", shape=hexagon, color=black];
2972[label="212.24.25.101;d;1pkt 1fpkt", shape=hexagon, color=black];
2985[label="212.24.29.151;d;16pkt 16fpkt", shape=hexagon, color=black];
3123[label="212.24.25.91;d;1pkt 1fpkt", shape=hexagon, color=black];
3279[label="212.24.4.33;d;2pkt 2fpkt", shape=hexagon, color=black];
3587[label="1.35.33.81;s;3pkt 3fpkt", shape=hexagon, color=black];
4405[label="1.35.33.48;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6240[label="1.35.33.48;13pkt 13fpkt", shape=invtriangle, color=brown];
7451[label="1.35.33.48;12pkt 12fpkt", shape=invhouse, color=bisque];
stat368[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 212.24.29.151:*}[41.0714%]&lt;BR/&gt;{*:*, 212.24.168.166:*}[26.7857%]&lt;BR/&gt;{1.35.33.48:5001, *:*}[23.2143%]&lt;BR/&gt;{*:6001, *:*}[23.2143%]&lt;BR/&gt;{1.35.33.2:6900, *:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (34.4828%)&lt;BR/&gt; 6001: (6.89655%)&lt;BR/&gt; 6900: (5.51724%)&lt;BR/&gt; 1863: (2.75862%)&lt;BR/&gt; 3299: (2.41379%)&gt;];
}
28--754[label="0.666667;2pkt 2fpkt"];
28--1281[label="0.333333;1pkt 1fpkt"];
28--1290[label="1;1pkt 1fpkt"];
28--2076[label="0.333333;1pkt 1fpkt"];
28--2077[label="0.333333;1pkt 1fpkt"];
28--2707[label="0.666667;2pkt 2fpkt"];
28--3331[label="0.333333;1pkt 1fpkt"];
28--3591[label="0.333333;1pkt 1fpkt"];
28--3910[label="0.333333;1pkt 1fpkt"];
28--3935[label="0.333333;1pkt 1fpkt"];
28--4405[label="0.666667;2pkt 2fpkt"];
28--6240[label="0.666667;2pkt 2fpkt"];
28--7451[label="0.666667;2pkt 2fpkt"];
754--1082[label="0.5;1pkt 1fpkt"];
754--1238[label="1;1pkt 1fpkt"];
754--1251[label="1;1pkt 1fpkt"];
754--1281[label="0.166667;2pkt 2fpkt"];
754--1290[label="1;1pkt 1fpkt"];
754--1291[label="0.5;1pkt 1fpkt"];
754--1306[label="1;1pkt 1fpkt"];
754--1544[label="0.333333;1pkt 1fpkt"];
754--1546[label="0.166667;2pkt 2fpkt"];
754--2630[label="0.25;1pkt 1fpkt"];
754--2707[label="1;12pkt 12fpkt"];
754--2836[label="1;1pkt 1fpkt"];
754--2850[label="0.5;1pkt 1fpkt"];
754--2972[label="1;1pkt 1fpkt"];
754--2985[label="0.166667;2pkt 2fpkt"];
754--3123[label="1;1pkt 1fpkt"];
754--3279[label="0.5;1pkt 1fpkt"];
754--4405[label="0.916667;11pkt 11fpkt"];
754--6240[label="1;12pkt 12fpkt"];
754--7451[label="0.916667;11pkt 11fpkt"];
1082--2707[label="0.5;1pkt 1fpkt"];
1082--6240[label="0.5;1pkt 1fpkt"];
1238--2707[label="1;1pkt 1fpkt"];
1238--2836[label="1;1pkt 1fpkt"];
1238--4405[label="1;1pkt 1fpkt"];
1238--6240[label="1;1pkt 1fpkt"];
1238--7451[label="1;1pkt 1fpkt"];
1251--2707[label="1;1pkt 1fpkt"];
1251--2972[label="1;1pkt 1fpkt"];
1251--4405[label="1;1pkt 1fpkt"];
1251--6240[label="1;1pkt 1fpkt"];
1251--7451[label="1;1pkt 1fpkt"];
1281--1552[label="0.222222;2pkt 2fpkt"];
1281--1757[label="0.333333;1pkt 1fpkt"];
1281--2707[label="0.166667;2pkt 2fpkt"];
1281--3082[label="0.333333;2pkt 2fpkt"];
1281--3126[label="0.222222;2pkt 2fpkt"];
1281--3865[label="0.333333;1pkt 1fpkt"];
1281--3996[label="0.266667;4pkt 4fpkt"];
1281--4405[label="0.166667;2pkt 2fpkt"];
1281--4447[label="0.333333;2pkt 2fpkt"];
1281--4455[label="0.333333;1pkt 1fpkt"];
1281--4460[label="0.333333;1pkt 1fpkt"];
1281--5953[label="0.266667;4pkt 4fpkt"];
1281--6240[label="0.153846;2pkt 2fpkt"];
1281--6270[label="0.4;2pkt 2fpkt"];
1281--6274[label="0.5;1pkt 1fpkt"];
1281--7274[label="0.266667;4pkt 4fpkt"];
1281--7451[label="0.166667;2pkt 2fpkt"];
1281--7473[label="0.333333;2pkt 2fpkt"];
1290--2707[label="1;1pkt 1fpkt"];
1290--4405[label="1;1pkt 1fpkt"];
1290--6240[label="1;1pkt 1fpkt"];
1290--7451[label="1;1pkt 1fpkt"];
1291--2707[label="0.5;1pkt 1fpkt"];
1291--2850[label="1;2pkt 2fpkt"];
1291--4405[label="0.5;1pkt 1fpkt"];
1291--6240[label="0.5;1pkt 1fpkt"];
1291--7451[label="0.5;1pkt 1fpkt"];
1306--2707[label="1;1pkt 1fpkt"];
1306--3123[label="1;1pkt 1fpkt"];
1306--4405[label="1;1pkt 1fpkt"];
1306--6240[label="1;1pkt 1fpkt"];
1306--7451[label="1;1pkt 1fpkt"];
1544--1552[label="0.333333;1pkt 1fpkt"];
1544--2707[label="0.333333;1pkt 1fpkt"];
1544--3126[label="0.333333;1pkt 1fpkt"];
1544--3279[label="1;2pkt 2fpkt"];
1544--4405[label="0.333333;1pkt 1fpkt"];
1544--6240[label="0.333333;1pkt 1fpkt"];
1544--7451[label="0.333333;1pkt 1fpkt"];
1546--1552[label="0.222222;2pkt 2fpkt"];
1546--1621[label="0.333333;1pkt 1fpkt"];
1546--1757[label="0.333333;1pkt 1fpkt"];
1546--2707[label="0.166667;2pkt 2fpkt"];
1546--2985[label="1;16pkt 16fpkt"];
1546--3126[label="0.222222;2pkt 2fpkt"];
1546--3587[label="0.333333;1pkt 1fpkt"];
1546--3996[label="0.318182;7pkt 7fpkt"];
1546--4405[label="0.166667;2pkt 2fpkt"];
1546--4455[label="0.333333;1pkt 1fpkt"];
1546--5953[label="0.318182;7pkt 7fpkt"];
1546--6240[label="0.153846;2pkt 2fpkt"];
1546--7274[label="0.318182;7pkt 7fpkt"];
1546--7451[label="0.166667;2pkt 2fpkt"];
1621--2985[label="0.333333;1pkt 1fpkt"];
1621--3587[label="1;3pkt 3fpkt"];
2630--2707[label="0.25;1pkt 1fpkt"];
2630--3996[label="0.25;1pkt 1fpkt"];
2630--4405[label="0.25;1pkt 1fpkt"];
2630--5953[label="0.25;1pkt 1fpkt"];
2630--6240[label="0.25;1pkt 1fpkt"];
2630--7274[label="0.25;1pkt 1fpkt"];
2630--7451[label="0.25;1pkt 1fpkt"];
2707--2836[label="1;1pkt 1fpkt"];
2707--2850[label="0.5;1pkt 1fpkt"];
2707--2972[label="1;1pkt 1fpkt"];
2707--2985[label="0.166667;2pkt 2fpkt"];
2707--3123[label="1;1pkt 1fpkt"];
2707--3279[label="0.5;1pkt 1fpkt"];
2707--4405[label="0.916667;11pkt 11fpkt"];
2707--6240[label="1;12pkt 12fpkt"];
2707--7451[label="0.916667;11pkt 11fpkt"];
2836--4405[label="1;1pkt 1fpkt"];
2836--6240[label="1;1pkt 1fpkt"];
2836--7451[label="1;1pkt 1fpkt"];
2850--4405[label="0.5;1pkt 1fpkt"];
2850--6240[label="0.5;1pkt 1fpkt"];
2850--7451[label="0.5;1pkt 1fpkt"];
2972--4405[label="1;1pkt 1fpkt"];
2972--6240[label="1;1pkt 1fpkt"];
2972--7451[label="1;1pkt 1fpkt"];
2985--3587[label="0.333333;1pkt 1fpkt"];
2985--3996[label="0.25;4pkt 4fpkt"];
2985--4405[label="0.166667;2pkt 2fpkt"];
2985--5953[label="0.25;4pkt 4fpkt"];
2985--6240[label="0.153846;2pkt 2fpkt"];
2985--7274[label="0.25;4pkt 4fpkt"];
2985--7451[label="0.166667;2pkt 2fpkt"];
3123--4405[label="1;1pkt 1fpkt"];
3123--6240[label="1;1pkt 1fpkt"];
3123--7451[label="1;1pkt 1fpkt"];
3279--4405[label="0.5;1pkt 1fpkt"];
3279--6240[label="0.5;1pkt 1fpkt"];
3279--7451[label="0.5;1pkt 1fpkt"];
4405--6240[label="1;12pkt 12fpkt"];
4405--7451[label="1;12pkt 12fpkt"];
6240--7451[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.29.151"/>
      <filter dst_ip="212.24.168.166"/>
      <filter src_port="6001"/>
      <filter src_ip="1.35.33.48" src_port="5001"/>
      <filter src_ip="1.35.33.2" src_port="6900"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_369{
style=filled;
color=gray75;
1336[label="167.164.130.151;s;15pkt 15fpkt", shape=diamond, color=yellow];
1567[label="213.216.141.177;d;5pkt 5fpkt", shape=diamond, color=yellow];
3289[label="167.164.130.151;s;11pkt 11fpkt", shape=hexagon, color=black];
3290[label="213.216.141.177;d;3pkt 3fpkt", shape=hexagon, color=black];
stat369[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.164.130.151:*, 43.49.57.72:2349}[53.3333%]&lt;BR/&gt;{167.164.130.151:*, 213.216.141.177:1214}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (27.9412%)&lt;BR/&gt; 2349: (22.0588%)&lt;BR/&gt; 1779: (5.88235%)&lt;BR/&gt; 1767: (5.88235%)&lt;BR/&gt; 1742: (5.88235%)&gt;];
}
1336--1567[label="1;5pkt 5fpkt"];
1336--3289[label="1;11pkt 11fpkt"];
1336--3290[label="1;3pkt 3fpkt"];
1567--3289[label="0.6;3pkt 3fpkt"];
1567--3290[label="1;3pkt 3fpkt"];
3289--3290[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="43.49.57.72" dst_port="2349" src_ip="167.164.130.151"/>
      <filter dst_ip="213.216.141.177" dst_port="1214" src_ip="167.164.130.151"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_370{
style=filled;
color=gray75;
25[label="141.98.141.41s;1pkt 1fpkt", shape=rectangle, color=red];
2035[label="141.98.141.41;s;124pkt 124fpkt", shape=diamond, color=yellow];
2099[label="162.144.66.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
2327[label="75.3.205.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
3307[label="141.98.141.41;s;124pkt 124fpkt", shape=hexagon, color=black];
3614[label="75.3.205.76;d;1pkt 1fpkt", shape=hexagon, color=black];
4343[label="141.98.141.41;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6198[label="141.98.141.41;2pkt 2fpkt", shape=invtriangle, color=brown];
7427[label="141.98.141.41;2pkt 2fpkt", shape=invhouse, color=bisque];
stat370[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.141.41:1039, *:4665}[87.0968%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1039: (44.2085%)&lt;BR/&gt; 4665: (41.8919%)&lt;BR/&gt; 80: (2.3166%)&lt;BR/&gt; 4662: (1.35135%)&lt;BR/&gt; 1171: (1.35135%)&gt;];
}
25--2035[label="1;1pkt 1fpkt"];
25--2099[label="1;1pkt 1fpkt"];
25--3307[label="1;1pkt 1fpkt"];
25--4343[label="1;1pkt 1fpkt"];
25--6198[label="1;1pkt 1fpkt"];
25--7427[label="1;1pkt 1fpkt"];
2035--2099[label="1;1pkt 1fpkt"];
2035--2327[label="1;1pkt 1fpkt"];
2035--2445[label="0.0306122;3pkt 3fpkt"];
2035--3307[label="1;124pkt 124fpkt"];
2035--3573[label="0.0306122;3pkt 3fpkt"];
2035--3614[label="1;1pkt 1fpkt"];
2035--3946[label="0.00806452;1pkt 1fpkt"];
2035--3959[label="0.00806452;1pkt 1fpkt"];
2035--3969[label="0.00806452;1pkt 1fpkt"];
2035--4343[label="1;3pkt 3fpkt"];
2035--6198[label="1;2pkt 2fpkt"];
2035--7427[label="1;2pkt 2fpkt"];
2099--3307[label="1;1pkt 1fpkt"];
2099--4343[label="1;1pkt 1fpkt"];
2099--6198[label="1;1pkt 1fpkt"];
2099--7427[label="1;1pkt 1fpkt"];
2327--3307[label="1;1pkt 1fpkt"];
2327--3614[label="1;1pkt 1fpkt"];
2327--4343[label="1;1pkt 1fpkt"];
2327--6198[label="1;1pkt 1fpkt"];
2327--7427[label="1;1pkt 1fpkt"];
3307--3573[label="0.0306122;3pkt 3fpkt"];
3307--3614[label="1;1pkt 1fpkt"];
3307--3946[label="0.00806452;1pkt 1fpkt"];
3307--3959[label="0.00806452;1pkt 1fpkt"];
3307--3969[label="0.00806452;1pkt 1fpkt"];
3307--4343[label="1;3pkt 3fpkt"];
3307--6198[label="1;2pkt 2fpkt"];
3307--7427[label="1;2pkt 2fpkt"];
3614--4343[label="1;1pkt 1fpkt"];
3614--6198[label="1;1pkt 1fpkt"];
3614--7427[label="1;1pkt 1fpkt"];
4343--6198[label="1;2pkt 2fpkt"];
4343--7427[label="1;2pkt 2fpkt"];
6198--7427[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="4665" src_ip="141.98.141.41" src_port="1039"/>
    </slice>
    <from sec="1034226018" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
1873[label="210.150.108.130;s;1pkt 1fpkt", shape=diamond, color=yellow];
2044[label="185.191.4.10;d;4pkt 4fpkt", shape=diamond, color=yellow];
3315[label="185.191.4.10;d;4pkt 4fpkt", shape=hexagon, color=black];
5054[label="210.150.108.130;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.150.108.130:80, 185.191.4.10:49161}[25%]&lt;BR/&gt;{210.150.67.202:80, 185.191.4.10:49160}[25%]&lt;BR/&gt;{217.182.66.196:80, 185.191.4.10:49242}[25%]&lt;BR/&gt;{217.182.66.196:80, 185.191.4.10:49243}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49161: (20%)&lt;BR/&gt; 49243: (10%)&lt;BR/&gt; 49242: (10%)&lt;BR/&gt; 49160: (10%)&gt;];
}
1873--2044[label="1;1pkt 1fpkt"];
1873--3315[label="1;1pkt 1fpkt"];
1873--5054[label="1;1pkt 1fpkt"];
2044--3315[label="1;4pkt 4fpkt"];
2044--5054[label="1;1pkt 1fpkt"];
3315--5054[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.4.10" dst_port="49243" src_ip="217.182.66.196" src_port="80"/>
      <filter dst_ip="185.191.4.10" dst_port="49242" src_ip="217.182.66.196" src_port="80"/>
      <filter dst_ip="185.191.4.10" dst_port="49160" src_ip="210.150.67.202" src_port="80"/>
      <filter dst_ip="185.191.4.10" dst_port="49161" src_ip="210.150.108.130" src_port="80"/>
    </slice>
    <from sec="1034226036" usec="0"/>
    <to sec="1034226368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
1374[label="167.1.16.22;s;17pkt 17fpkt", shape=diamond, color=yellow];
1381[label="166.53.180.202;d;7pkt 7fpkt", shape=diamond, color=yellow];
3318[label="167.1.16.22;s;17pkt 17fpkt", shape=hexagon, color=black];
4171[label="167.1.16.22;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6087[label="167.1.16.22;21pkt 21fpkt", shape=invtriangle, color=brown];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.1.16.22:80, 26.23.21.183:*}[33.3333%]&lt;BR/&gt;{167.1.16.22:80, 166.53.180.202:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47111: (3.04878%)&lt;BR/&gt; 47110: (3.04878%)&lt;BR/&gt; 47018: (3.04878%)&lt;BR/&gt; 46058: (3.04878%)&gt;];
}
1374--1381[label="1;7pkt 7fpkt"];
1374--3318[label="1;17pkt 17fpkt"];
1374--3950[label="0.411765;7pkt 7fpkt"];
1374--4171[label="1;17pkt 17fpkt"];
1374--6087[label="1;17pkt 17fpkt"];
1381--3318[label="1;7pkt 7fpkt"];
1381--4171[label="1;7pkt 7fpkt"];
1381--6087[label="1;7pkt 7fpkt"];
3318--3950[label="0.411765;7pkt 7fpkt"];
3318--4171[label="1;17pkt 17fpkt"];
3318--6087[label="1;17pkt 17fpkt"];
4171--6087[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="166.53.180.202" src_ip="167.1.16.22" src_port="80"/>
      <filter dst_ip="26.23.21.183" src_ip="167.1.16.22" src_port="80"/>
    </slice>
    <from sec="1034226073" usec="0"/>
    <to sec="1034226701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
2063[label="195.202.19.21;d;18pkt 18fpkt", shape=diamond, color=yellow];
2064[label="161.238.33.182;s;18pkt 18fpkt", shape=diamond, color=yellow];
3321[label="195.202.19.21;d;18pkt 18fpkt", shape=hexagon, color=black];
3322[label="161.238.33.182;s;18pkt 18fpkt", shape=hexagon, color=black];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.33.182:*, 195.202.19.21:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1631: (2.77778%)&lt;BR/&gt; 1630: (2.77778%)&lt;BR/&gt; 1629: (2.77778%)&lt;BR/&gt; 1628: (2.77778%)&gt;];
}
2063--2064[label="1;18pkt 18fpkt"];
2063--3321[label="1;18pkt 18fpkt"];
2063--3322[label="1;18pkt 18fpkt"];
2063--3946[label="0.111111;2pkt 2fpkt"];
2063--3959[label="0.111111;2pkt 2fpkt"];
2063--3969[label="0.111111;2pkt 2fpkt"];
2064--3321[label="1;18pkt 18fpkt"];
2064--3322[label="1;18pkt 18fpkt"];
2064--3946[label="0.111111;2pkt 2fpkt"];
2064--3959[label="0.111111;2pkt 2fpkt"];
2064--3969[label="0.111111;2pkt 2fpkt"];
3321--3322[label="1;18pkt 18fpkt"];
3321--3946[label="0.111111;2pkt 2fpkt"];
3321--3959[label="0.111111;2pkt 2fpkt"];
3321--3969[label="0.111111;2pkt 2fpkt"];
3322--3946[label="0.111111;2pkt 2fpkt"];
3322--3959[label="0.111111;2pkt 2fpkt"];
3322--3969[label="0.111111;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.202.19.21" dst_port="80" src_ip="161.238.33.182"/>
    </slice>
    <from sec="1034226086" usec="0"/>
    <to sec="1034226393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.716171,2.20256,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_374{
style=filled;
color=gray75;
3323[label="212.76.160.181;s;2pkt 2fpkt", shape=hexagon, color=black];
stat374[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.76.160.181:137, 167.8.138.96:137}[50%]&lt;BR/&gt;{212.76.160.181:1525, 167.8.138.96:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 1525: (25%)&gt;];
}
3323--5468[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.138.96" dst_port="6699" src_ip="212.76.160.181" src_port="1525"/>
      <filter dst_ip="167.8.138.96" dst_port="137" src_ip="212.76.160.181" src_port="137"/>
    </slice>
    <from sec="1034226097" usec="0"/>
    <to sec="1034226374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_375{
style=filled;
color=gray75;
1635[label="3.138.228.197;s;1pkt 1fpkt", shape=diamond, color=yellow];
3020[label="167.8.138.96;d;5pkt 5fpkt", shape=hexagon, color=black];
3332[label="3.138.228.197;s;1pkt 1fpkt", shape=hexagon, color=black];
stat375[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.118.232.23:7951, 167.8.138.96:1146}[20%]&lt;BR/&gt;{74.116.52.149:62738, 167.8.138.96:6699}[20%]&lt;BR/&gt;{3.138.228.197:6699, 167.8.138.96:1043}[20%]&lt;BR/&gt;{212.76.160.181:137, 167.8.138.96:137}[20%]&lt;BR/&gt;{212.76.160.181:1525, 167.8.138.96:6699}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (35.7143%)&lt;BR/&gt; 1043: (21.4286%)&lt;BR/&gt; 137: (14.2857%)&lt;BR/&gt; 62738: (7.14286%)&lt;BR/&gt; 7951: (7.14286%)&gt;];
}
1635--3020[label="1;1pkt 1fpkt"];
1635--3332[label="1;1pkt 1fpkt"];
3020--3323[label="1;2pkt 2fpkt"];
3020--3332[label="1;1pkt 1fpkt"];
3020--5468[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.138.96" dst_port="6699" src_ip="212.76.160.181" src_port="1525"/>
      <filter dst_ip="167.8.138.96" dst_port="137" src_ip="212.76.160.181" src_port="137"/>
      <filter dst_ip="167.8.138.96" dst_port="1043" src_ip="3.138.228.197" src_port="6699"/>
      <filter dst_ip="167.8.138.96" dst_port="6699" src_ip="74.116.52.149" src_port="62738"/>
      <filter dst_ip="167.8.138.96" dst_port="1146" src_ip="86.118.232.23" src_port="7951"/>
    </slice>
    <from sec="1034226097" usec="0"/>
    <to sec="1034226374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25702,2.20707,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
1864[label="1.54.180.171;s;10pkt 10fpkt", shape=diamond, color=yellow];
1865[label="161.238.19.37;d;9pkt 9fpkt", shape=diamond, color=yellow];
3337[label="1.54.180.171;s;10pkt 10fpkt", shape=hexagon, color=black];
3338[label="161.238.19.37;d;9pkt 9fpkt", shape=hexagon, color=black];
3891[label="1.54.180.171;s;10pkt 10fpkt", shape=polygon, color=gold];
3892[label="161.238.19.37;d;9pkt 9fpkt", shape=polygon, color=gold];
5385[label="1.54.180.171;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6899[label="1.54.180.171;9pkt 9fpkt", shape=invtriangle, color=brown];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.54.180.171:80, 161.238.19.37:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48%)&lt;BR/&gt; 2155: (5.33333%)&lt;BR/&gt; 2154: (5.33333%)&lt;BR/&gt; 2153: (5.33333%)&lt;BR/&gt; 2152: (5.33333%)&gt;];
}
1864--1865[label="1;9pkt 9fpkt"];
1864--3337[label="1;10pkt 10fpkt"];
1864--3338[label="1;9pkt 9fpkt"];
1864--3891[label="1;10pkt 10fpkt"];
1864--3892[label="1;9pkt 9fpkt"];
1864--3949[label="0.1;1pkt 1fpkt"];
1864--3950[label="0.2;2pkt 2fpkt"];
1864--5385[label="1;9pkt 9fpkt"];
1864--6899[label="1;9pkt 9fpkt"];
1865--3337[label="1;9pkt 9fpkt"];
1865--3338[label="1;9pkt 9fpkt"];
1865--3891[label="1;9pkt 9fpkt"];
1865--3892[label="1;9pkt 9fpkt"];
1865--3950[label="0.222222;2pkt 2fpkt"];
1865--5385[label="1;9pkt 9fpkt"];
1865--6899[label="1;9pkt 9fpkt"];
3337--3338[label="1;9pkt 9fpkt"];
3337--3891[label="1;10pkt 10fpkt"];
3337--3892[label="1;9pkt 9fpkt"];
3337--3949[label="0.1;1pkt 1fpkt"];
3337--3950[label="0.2;2pkt 2fpkt"];
3337--5385[label="1;9pkt 9fpkt"];
3337--6899[label="1;9pkt 9fpkt"];
3338--3891[label="1;9pkt 9fpkt"];
3338--3892[label="1;9pkt 9fpkt"];
3338--3950[label="0.222222;2pkt 2fpkt"];
3338--5385[label="1;9pkt 9fpkt"];
3338--6899[label="1;9pkt 9fpkt"];
3891--3892[label="1;9pkt 9fpkt"];
3891--3949[label="0.1;1pkt 1fpkt"];
3891--3950[label="0.2;2pkt 2fpkt"];
3891--5385[label="1;9pkt 9fpkt"];
3891--6899[label="1;9pkt 9fpkt"];
3892--3950[label="0.222222;2pkt 2fpkt"];
3892--5385[label="1;9pkt 9fpkt"];
3892--6899[label="1;9pkt 9fpkt"];
5385--6899[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.19.37" src_ip="1.54.180.171" src_port="80"/>
    </slice>
    <from sec="1034226254" usec="0"/>
    <to sec="1034226491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,503,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_377{
style=filled;
color=gray75;
96[label="185.191.55.150s;4pkt 4fpkt", shape=rectangle, color=red];
978[label="202.169.204.219;d;281pkt 281fpkt", shape=diamond, color=yellow];
1582[label="212.24.9.52;d;8pkt 8fpkt", shape=diamond, color=yellow];
1589[label="161.238.136.109;s;98pkt 98fpkt", shape=diamond, color=yellow];
1855[label="193.21.40.148;d;7pkt 7fpkt", shape=diamond, color=yellow];
1891[label="167.164.226.244;s;2pkt 2fpkt", shape=diamond, color=yellow];
1965[label="223.98.198.5;d;4pkt 4fpkt", shape=diamond, color=yellow];
2025[label="17.224.172.69;s;4pkt 4fpkt", shape=diamond, color=yellow];
2107[label="211.69.0.135;d;35pkt 35fpkt", shape=diamond, color=yellow];
2245[label="185.191.55.150;s;132pkt 132fpkt", shape=diamond, color=yellow];
2283[label="161.238.164.41;s;49pkt 49fpkt", shape=diamond, color=yellow];
2307[label="220.50.84.214;d;46pkt 46fpkt", shape=diamond, color=yellow];
2875[label="202.169.204.219;d;281pkt 281fpkt", shape=hexagon, color=black];
3001[label="212.24.9.52;d;6pkt 6fpkt", shape=hexagon, color=black];
3188[label="167.164.226.244;s;2pkt 2fpkt", shape=hexagon, color=black];
3270[label="223.98.198.5;d;4pkt 4fpkt", shape=hexagon, color=black];
3446[label="161.238.136.109;s;83pkt 83fpkt", shape=hexagon, color=black];
3463[label="193.21.40.148;d;7pkt 7fpkt", shape=hexagon, color=black];
3742[label="211.69.0.135;d;35pkt 35fpkt", shape=hexagon, color=black];
3904[label="223.98.198.5;d;4pkt 4fpkt", shape=polygon, color=gold];
3912[label="193.21.40.148;d;7pkt 7fpkt", shape=polygon, color=gold];
4039[label="161.238.164.6;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4217[label="17.236.168.28;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4344[label="161.238.164.41;50pkt 50fpkt", shape=pentagon, color=darkviolet];
4578[label="17.224.172.69;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4910[label="161.238.136.109;97pkt 97fpkt", shape=pentagon, color=darkviolet];
5460[label="194.93.57.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5882[label="167.164.226.244;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5985[label="161.238.164.6;3pkt 3fpkt", shape=invtriangle, color=brown];
6199[label="161.238.164.41;50pkt 50fpkt", shape=invtriangle, color=brown];
6353[label="17.224.172.69;3pkt 3fpkt", shape=invtriangle, color=brown];
6563[label="161.238.136.109;98pkt 98fpkt", shape=invtriangle, color=brown];
6946[label="194.93.57.181;2pkt 2fpkt", shape=invtriangle, color=brown];
6950[label="161.238.208.181;1pkt 1fpkt", shape=invtriangle, color=brown];
7295[label="161.238.164.6;3pkt 3fpkt", shape=invhouse, color=bisque];
7428[label="161.238.164.41;50pkt 50fpkt", shape=invhouse, color=bisque];
7490[label="161.238.178.58;1pkt 1fpkt", shape=invhouse, color=bisque];
stat377[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 202.169.204.219:*}[45.3355%]&lt;BR/&gt;{185.191.55.150:*, *:80}[20.9493%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2033%)&lt;BR/&gt; 0: (1.70532%)&lt;BR/&gt; 1863: (0.886767%)&lt;BR/&gt; 53: (0.47749%)&lt;BR/&gt; 7743: (0.375171%)&gt;];
}
96--2245[label="1;4pkt 4fpkt"];
978--2875[label="1;281pkt 281fpkt"];
978--4039[label="0.666667;2pkt 2fpkt"];
978--4344[label="0.04;2pkt 2fpkt"];
978--4413[label="0.1;1pkt 1fpkt"];
978--4795[label="0.125;2pkt 2fpkt"];
978--5985[label="0.666667;2pkt 2fpkt"];
978--6199[label="0.04;2pkt 2fpkt"];
978--6245[label="0.181818;2pkt 2fpkt"];
978--7295[label="0.666667;2pkt 2fpkt"];
978--7428[label="0.04;2pkt 2fpkt"];
978--7455[label="0.181818;2pkt 2fpkt"];
978--7490[label="1;1pkt 1fpkt"];
1582--2025[label="1;4pkt 4fpkt"];
1582--3001[label="1;6pkt 6fpkt"];
1582--3941[label="0.125;1pkt 1fpkt"];
1582--3950[label="0.125;1pkt 1fpkt"];
1582--3954[label="0.125;1pkt 1fpkt"];
1582--3964[label="0.125;1pkt 1fpkt"];
1582--4217[label="1;1pkt 1fpkt"];
1582--4578[label="1;3pkt 3fpkt"];
1582--6353[label="1;3pkt 3fpkt"];
1589--1855[label="1;7pkt 7fpkt"];
1589--1990[label="0.0102041;1pkt 1fpkt"];
1589--2444[label="0.0277778;2pkt 2fpkt"];
1589--3446[label="1;83pkt 83fpkt"];
1589--3463[label="1;7pkt 7fpkt"];
1589--3912[label="1;7pkt 7fpkt"];
1589--3946[label="0.0510204;5pkt 5fpkt"];
1589--3959[label="0.0510204;5pkt 5fpkt"];
1589--3969[label="0.0510204;5pkt 5fpkt"];
1589--4910[label="1;97pkt 97fpkt"];
1589--6563[label="1;98pkt 98fpkt"];
1855--3446[label="1;7pkt 7fpkt"];
1855--3463[label="1;7pkt 7fpkt"];
1855--3912[label="1;7pkt 7fpkt"];
1855--4910[label="1;7pkt 7fpkt"];
1855--6563[label="1;7pkt 7fpkt"];
1891--3188[label="1;2pkt 2fpkt"];
1891--5882[label="1;1pkt 1fpkt"];
1965--3270[label="1;4pkt 4fpkt"];
1965--3904[label="1;4pkt 4fpkt"];
1965--4039[label="0.333333;1pkt 1fpkt"];
1965--5985[label="0.333333;1pkt 1fpkt"];
1965--6950[label="1;1pkt 1fpkt"];
1965--7295[label="0.333333;1pkt 1fpkt"];
2025--3001[label="1;4pkt 4fpkt"];
2025--3941[label="0.25;1pkt 1fpkt"];
2025--3954[label="0.25;1pkt 1fpkt"];
2025--3964[label="0.25;1pkt 1fpkt"];
2025--4578[label="1;3pkt 3fpkt"];
2025--6353[label="1;3pkt 3fpkt"];
2107--3742[label="1;35pkt 35fpkt"];
2245--2554[label="0.111111;1pkt 1fpkt"];
2245--3473[label="0.5;39pkt 39fpkt"];
2283--2307[label="1;46pkt 46fpkt"];
2283--4344[label="0.979592;48pkt 48fpkt"];
2283--6199[label="0.979592;48pkt 48fpkt"];
2283--7428[label="0.979592;48pkt 48fpkt"];
2307--4344[label="1;46pkt 46fpkt"];
2307--6199[label="1;46pkt 46fpkt"];
2307--7428[label="1;46pkt 46fpkt"];
2875--4039[label="0.666667;2pkt 2fpkt"];
2875--4344[label="0.04;2pkt 2fpkt"];
2875--4413[label="0.1;1pkt 1fpkt"];
2875--4795[label="0.125;2pkt 2fpkt"];
2875--5985[label="0.666667;2pkt 2fpkt"];
2875--6199[label="0.04;2pkt 2fpkt"];
2875--6245[label="0.181818;2pkt 2fpkt"];
2875--7295[label="0.666667;2pkt 2fpkt"];
2875--7428[label="0.04;2pkt 2fpkt"];
2875--7455[label="0.181818;2pkt 2fpkt"];
2875--7490[label="1;1pkt 1fpkt"];
3001--3941[label="0.166667;1pkt 1fpkt"];
3001--3950[label="0.166667;1pkt 1fpkt"];
3001--3954[label="0.166667;1pkt 1fpkt"];
3001--3964[label="0.166667;1pkt 1fpkt"];
3001--4217[label="1;1pkt 1fpkt"];
3001--4578[label="1;3pkt 3fpkt"];
3001--6353[label="1;3pkt 3fpkt"];
3188--5882[label="1;1pkt 1fpkt"];
3270--3904[label="1;4pkt 4fpkt"];
3270--4039[label="0.333333;1pkt 1fpkt"];
3270--5985[label="0.333333;1pkt 1fpkt"];
3270--6950[label="1;1pkt 1fpkt"];
3270--7295[label="0.333333;1pkt 1fpkt"];
3446--3463[label="1;7pkt 7fpkt"];
3446--3912[label="1;7pkt 7fpkt"];
3446--3946[label="0.060241;5pkt 5fpkt"];
3446--3959[label="0.060241;5pkt 5fpkt"];
3446--3969[label="0.060241;5pkt 5fpkt"];
3446--4910[label="0.987952;82pkt 82fpkt"];
3446--6563[label="1;83pkt 83fpkt"];
3463--3912[label="1;7pkt 7fpkt"];
3463--4910[label="1;7pkt 7fpkt"];
3463--6563[label="1;7pkt 7fpkt"];
3904--4039[label="0.333333;1pkt 1fpkt"];
3904--5985[label="0.333333;1pkt 1fpkt"];
3904--6950[label="1;1pkt 1fpkt"];
3904--7295[label="0.333333;1pkt 1fpkt"];
3912--4910[label="1;7pkt 7fpkt"];
3912--6563[label="1;7pkt 7fpkt"];
4039--5985[label="1;3pkt 3fpkt"];
4039--7295[label="1;3pkt 3fpkt"];
4344--6199[label="1;50pkt 50fpkt"];
4344--7428[label="1;50pkt 50fpkt"];
4578--6353[label="1;3pkt 3fpkt"];
4910--6563[label="1;97pkt 97fpkt"];
5460--6946[label="1;1pkt 1fpkt"];
5985--7295[label="1;3pkt 3fpkt"];
6199--7428[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="185.191.55.150"/>
      <filter dst_ip="202.169.204.219" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,503,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_378{
style=filled;
color=gray75;
50[label="142.57.234.79s;2pkt 2fpkt", shape=rectangle, color=red];
56[label="200.80.18.83s;1pkt 1fpkt", shape=rectangle, color=red];
164[label="209.83.204.40s;1pkt 1fpkt", shape=rectangle, color=red];
602[label="212.18.73.85;d;773pkt 773fpkt", shape=diamond, color=yellow];
836[label="1.35.33.58;s;5pkt 5fpkt", shape=diamond, color=yellow];
1164[label="212.24.168.5;d;15pkt 15fpkt", shape=diamond, color=yellow];
1332[label="209.83.204.40;s;148pkt 148fpkt", shape=diamond, color=yellow];
1510[label="212.24.19.217;d;13pkt 13fpkt", shape=diamond, color=yellow];
1566[label="209.199.208.21;s;115pkt 115fpkt", shape=diamond, color=yellow];
1578[label="167.8.54.47;d;43pkt 43fpkt", shape=diamond, color=yellow];
1619[label="86.65.161.66;s;141pkt 141fpkt", shape=diamond, color=yellow];
1631[label="133.4.157.107;s;2pkt 2fpkt", shape=diamond, color=yellow];
1940[label="1.35.33.68;s;2pkt 2fpkt", shape=diamond, color=yellow];
2127[label="142.57.234.79;s;5pkt 5fpkt", shape=diamond, color=yellow];
2215[label="84.1.134.119;s;1pkt 1fpkt", shape=diamond, color=yellow];
2274[label="167.8.143.242;d;9pkt 9fpkt", shape=diamond, color=yellow];
2591[label="85.34.87.243;s;112pkt 112fpkt", shape=diamond, color=yellow];
2655[label="141.98.194.53;d;47pkt 47fpkt", shape=diamond, color=yellow];
2720[label="1.35.33.58;s;5pkt 5fpkt", shape=hexagon, color=black];
2870[label="209.83.204.40;s;144pkt 144fpkt", shape=hexagon, color=black];
2994[label="209.199.208.21;s;115pkt 115fpkt", shape=hexagon, color=black];
3015[label="86.65.161.66;s;141pkt 141fpkt", shape=hexagon, color=black];
3354[label="142.57.234.79;s;3pkt 3fpkt", shape=hexagon, color=black];
3707[label="85.34.87.243;s;112pkt 112fpkt", shape=hexagon, color=black];
3816[label="209.199.208.21;s;102pkt 102fpkt", shape=polygon, color=gold];
3869[label="209.83.204.40;s;89pkt 89fpkt", shape=polygon, color=gold];
3901[label="1.35.33.58;s;5pkt 5fpkt", shape=polygon, color=gold];
3996[label="1.35.33.2;53pkt 53fpkt", shape=pentagon, color=darkviolet];
4167[label="209.199.208.21;123pkt 123fpkt", shape=pentagon, color=darkviolet];
4330[label="209.168.141.40;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4333[label="209.83.204.40;151pkt 151fpkt", shape=pentagon, color=darkviolet];
4341[label="203.110.86.41;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4443[label="85.41.137.51;55pkt 55fpkt", shape=pentagon, color=darkviolet];
4489[label="1.35.33.58;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4541[label="133.4.157.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4542[label="86.65.161.65;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4550[label="86.65.161.66;142pkt 142fpkt", shape=pentagon, color=darkviolet];
4636[label="85.34.109.75;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4672[label="142.57.234.79;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4708[label="84.102.236.82;71pkt 71fpkt", shape=pentagon, color=darkviolet];
4851[label="201.137.235.101;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4898[label="133.4.157.107;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5035[label="209.168.137.128;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5096[label="196.18.212.135;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5342[label="203.110.86.166;44pkt 44fpkt", shape=pentagon, color=darkviolet];
5873[label="85.34.87.243;114pkt 114fpkt", shape=pentagon, color=darkviolet];
5933[label="161.241.234.252;101pkt 101fpkt", shape=pentagon, color=darkviolet];
5953[label="1.35.33.2;53pkt 53fpkt", shape=invtriangle, color=brown];
6085[label="209.199.208.21;123pkt 123fpkt", shape=invtriangle, color=brown];
6189[label="209.168.141.40;26pkt 26fpkt", shape=invtriangle, color=brown];
6192[label="209.83.204.40;150pkt 150fpkt", shape=invtriangle, color=brown];
6267[label="85.41.137.51;55pkt 55fpkt", shape=invtriangle, color=brown];
6295[label="1.35.33.58;4pkt 4fpkt", shape=invtriangle, color=brown];
6328[label="133.4.157.65;1pkt 1fpkt", shape=invtriangle, color=brown];
6329[label="86.65.161.65;13pkt 13fpkt", shape=invtriangle, color=brown];
6336[label="86.65.161.66;142pkt 142fpkt", shape=invtriangle, color=brown];
6415[label="142.57.234.79;4pkt 4fpkt", shape=invtriangle, color=brown];
6556[label="133.4.157.107;4pkt 4fpkt", shape=invtriangle, color=brown];
6873[label="203.110.86.166;44pkt 44fpkt", shape=invtriangle, color=brown];
7227[label="85.34.87.243;115pkt 115fpkt", shape=invtriangle, color=brown];
7261[label="161.241.234.252;101pkt 101fpkt", shape=invtriangle, color=brown];
7274[label="1.35.33.2;53pkt 53fpkt", shape=invhouse, color=bisque];
7354[label="209.199.208.21;123pkt 123fpkt", shape=invhouse, color=bisque];
7422[label="209.168.141.40;26pkt 26fpkt", shape=invhouse, color=bisque];
7424[label="209.83.204.40;150pkt 150fpkt", shape=invhouse, color=bisque];
7471[label="85.41.137.51;56pkt 56fpkt", shape=invhouse, color=bisque];
7509[label="133.4.157.65;2pkt 2fpkt", shape=invhouse, color=bisque];
7510[label="86.65.161.65;12pkt 12fpkt", shape=invhouse, color=bisque];
7512[label="86.65.161.66;142pkt 142fpkt", shape=invhouse, color=bisque];
7637[label="133.4.157.107;4pkt 4fpkt", shape=invhouse, color=bisque];
8071[label="85.34.87.243;114pkt 114fpkt", shape=invhouse, color=bisque];
8090[label="161.241.234.252;100pkt 100fpkt", shape=invhouse, color=bisque];
stat378[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 212.18.73.85:*}[41.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.7658%)&lt;BR/&gt; 123: (3.32355%)&lt;BR/&gt; 6900: (1.8138%)&lt;BR/&gt; 53: (0.534703%)&lt;BR/&gt; 5001: (0.461313%)&gt;];
}
50--602[label="1;2pkt 2fpkt"];
50--2127[label="1;2pkt 2fpkt"];
50--3354[label="0.5;1pkt 1fpkt"];
50--4672[label="1;2pkt 2fpkt"];
50--6415[label="1;2pkt 2fpkt"];
56--602[label="1;1pkt 1fpkt"];
164--1332[label="1;1pkt 1fpkt"];
164--2870[label="1;1pkt 1fpkt"];
164--3869[label="1;1pkt 1fpkt"];
164--4333[label="1;1pkt 1fpkt"];
164--6192[label="1;1pkt 1fpkt"];
164--7424[label="1;1pkt 1fpkt"];
602--808[label="0.0349288;27pkt 27fpkt"];
602--836[label="1;5pkt 5fpkt"];
602--974[label="0.0113636;2pkt 2fpkt"];
602--1266[label="0.0113636;1pkt 1fpkt"];
602--1321[label="0.0967742;6pkt 6fpkt"];
602--1332[label="0.027027;4pkt 4fpkt"];
602--1380[label="1;98pkt 98fpkt"];
602--1399[label="1;45pkt 45fpkt"];
602--1526[label="1;1pkt 1fpkt"];
602--1566[label="0.0173913;2pkt 2fpkt"];
602--1619[label="1;141pkt 141fpkt"];
602--1631[label="1;2pkt 2fpkt"];
602--1769[label="0.0185185;1pkt 1fpkt"];
602--1807[label="0.0217391;1pkt 1fpkt"];
602--1897[label="0.0138889;1pkt 1fpkt"];
602--1909[label="0.031746;2pkt 2fpkt"];
602--1972[label="0.0714286;5pkt 5fpkt"];
602--2127[label="1;5pkt 5fpkt"];
602--2136[label="0.0793651;10pkt 10fpkt"];
602--2185[label="0.163043;15pkt 15fpkt"];
602--2201[label="0.00588235;1pkt 1fpkt"];
602--2215[label="1;1pkt 1fpkt"];
602--2219[label="0.0164835;3pkt 3fpkt"];
602--2296[label="1;6pkt 6fpkt"];
602--2349[label="0.048;6pkt 6fpkt"];
602--2591[label="0.0178571;2pkt 2fpkt"];
602--2720[label="1;5pkt 5fpkt"];
602--2870[label="0.0277778;4pkt 4fpkt"];
602--2944[label="0.0344288;22pkt 22fpkt"];
602--2994[label="0.0173913;2pkt 2fpkt"];
602--3015[label="1;141pkt 141fpkt"];
602--3114[label="1;1pkt 1fpkt"];
602--3354[label="1;3pkt 3fpkt"];
602--3420[label="0.00729927;1pkt 1fpkt"];
602--3541[label="0.0588235;4pkt 4fpkt"];
602--3707[label="0.0178571;2pkt 2fpkt"];
602--3816[label="0.0196078;2pkt 2fpkt"];
602--3869[label="0.0449438;4pkt 4fpkt"];
602--3901[label="1;5pkt 5fpkt"];
602--3949[label="0.00129366;1pkt 1fpkt"];
602--3950[label="0.0659767;51pkt 51fpkt"];
602--3996[label="0.0943396;5pkt 5fpkt"];
602--4064[label="0.00423729;1pkt 1fpkt"];
602--4081[label="0.288889;13pkt 13fpkt"];
602--4167[label="0.0162602;2pkt 2fpkt"];
602--4330[label="0.269231;7pkt 7fpkt"];
602--4333[label="0.0264901;4pkt 4fpkt"];
602--4341[label="0.147059;5pkt 5fpkt"];
602--4443[label="0.854545;47pkt 47fpkt"];
602--4489[label="1;5pkt 5fpkt"];
602--4536[label="0.25;1pkt 1fpkt"];
602--4541[label="1;1pkt 1fpkt"];
602--4542[label="0.916667;11pkt 11fpkt"];
602--4548[label="0.230769;15pkt 15fpkt"];
602--4550[label="0.992958;141pkt 141fpkt"];
602--4557[label="0.989899;98pkt 98fpkt"];
602--4597[label="0.128713;13pkt 13fpkt"];
602--4636[label="0.142857;1pkt 1fpkt"];
602--4672[label="1;4pkt 4fpkt"];
602--4708[label="0.0140845;1pkt 1fpkt"];
602--4784[label="0.0349288;27pkt 27fpkt"];
602--4789[label="0.011236;1pkt 1fpkt"];
602--4826[label="0.03125;1pkt 1fpkt"];
602--4851[label="1;1pkt 1fpkt"];
602--4870[label="0.0454545;1pkt 1fpkt"];
602--4896[label="0.0649351;5pkt 5fpkt"];
602--4898[label="1;3pkt 3fpkt"];
602--5035[label="0.0952381;2pkt 2fpkt"];
602--5064[label="0.0729927;10pkt 10fpkt"];
602--5069[label="0.0181818;1pkt 1fpkt"];
602--5096[label="1;33pkt 33fpkt"];
602--5166[label="0.0793651;5pkt 5fpkt"];
602--5170[label="0.0232558;1pkt 1fpkt"];
602--5213[label="0.0181818;1pkt 1fpkt"];
602--5268[label="0.0186335;3pkt 3fpkt"];
602--5309[label="0.0384615;1pkt 1fpkt"];
602--5342[label="0.272727;12pkt 12fpkt"];
602--5544[label="0.0517241;3pkt 3fpkt"];
602--5575[label="0.0277778;1pkt 1fpkt"];
602--5594[label="0.00555556;1pkt 1fpkt"];
602--5734[label="1;5pkt 5fpkt"];
602--5818[label="0.272727;54pkt 54fpkt"];
602--5873[label="0.0175439;2pkt 2fpkt"];
602--5933[label="0.039604;4pkt 4fpkt"];
602--5953[label="0.0943396;5pkt 5fpkt"];
602--6007[label="0.00425532;1pkt 1fpkt"];
602--6018[label="0.288889;13pkt 13fpkt"];
602--6085[label="0.0162602;2pkt 2fpkt"];
602--6189[label="0.269231;7pkt 7fpkt"];
602--6192[label="0.0266667;4pkt 4fpkt"];
602--6267[label="0.854545;47pkt 47fpkt"];
602--6295[label="1;4pkt 4fpkt"];
602--6328[label="1;1pkt 1fpkt"];
602--6329[label="0.846154;11pkt 11fpkt"];
602--6334[label="0.230769;15pkt 15fpkt"];
602--6336[label="0.992958;141pkt 141fpkt"];
602--6341[label="0.989899;98pkt 98fpkt"];
602--6365[label="0.127451;13pkt 13fpkt"];
602--6415[label="1;4pkt 4fpkt"];
602--6438[label="0.0140845;1pkt 1fpkt"];
602--6483[label="0.0349288;27pkt 27fpkt"];
602--6488[label="0.0111111;1pkt 1fpkt"];
602--6509[label="0.03125;1pkt 1fpkt"];
602--6556[label="1;4pkt 4fpkt"];
602--6678[label="0.0181818;1pkt 1fpkt"];
602--6752[label="0.0806452;5pkt 5fpkt"];
602--6785[label="0.0185185;1pkt 1fpkt"];
602--6873[label="0.272727;12pkt 12fpkt"];
602--7005[label="0.0517241;3pkt 3fpkt"];
602--7032[label="0.00558659;1pkt 1fpkt"];
602--7132[label="1;5pkt 5fpkt"];
602--7188[label="0.271357;54pkt 54fpkt"];
602--7227[label="0.0173913;2pkt 2fpkt"];
602--7261[label="0.039604;4pkt 4fpkt"];
602--7274[label="0.0943396;5pkt 5fpkt"];
602--7310[label="0.00423729;1pkt 1fpkt"];
602--7316[label="0.288889;13pkt 13fpkt"];
602--7354[label="0.0162602;2pkt 2fpkt"];
602--7422[label="0.269231;7pkt 7fpkt"];
602--7424[label="0.0266667;4pkt 4fpkt"];
602--7471[label="0.857143;48pkt 48fpkt"];
602--7509[label="1;2pkt 2fpkt"];
602--7510[label="0.916667;11pkt 11fpkt"];
602--7511[label="0.234375;15pkt 15fpkt"];
602--7512[label="0.992958;141pkt 141fpkt"];
602--7595[label="0.0349288;27pkt 27fpkt"];
602--7611[label="0.030303;1pkt 1fpkt"];
602--7637[label="1;4pkt 4fpkt"];
602--7785[label="0.0181818;1pkt 1fpkt"];
602--7927[label="0.0526316;3pkt 3fpkt"];
602--7946[label="0.00558659;1pkt 1fpkt"];
602--8003[label="1;6pkt 6fpkt"];
602--8071[label="0.0175439;2pkt 2fpkt"];
602--8090[label="0.04;4pkt 4fpkt"];
836--2720[label="1;5pkt 5fpkt"];
836--3901[label="1;5pkt 5fpkt"];
836--4489[label="1;5pkt 5fpkt"];
836--6295[label="1;4pkt 4fpkt"];
1164--1442[label="0.333333;1pkt 1fpkt"];
1164--2092[label="0.5;1pkt 1fpkt"];
1164--2509[label="0.5;1pkt 1fpkt"];
1164--2952[label="0.428571;3pkt 3fpkt"];
1164--3059[label="0.25;1pkt 1fpkt"];
1164--3341[label="0.5;1pkt 1fpkt"];
1164--3996[label="0.266667;4pkt 4fpkt"];
1164--4266[label="0.428571;3pkt 3fpkt"];
1164--4338[label="0.25;1pkt 1fpkt"];
1164--4362[label="1;1pkt 1fpkt"];
1164--5953[label="0.266667;4pkt 4fpkt"];
1164--6149[label="0.428571;3pkt 3fpkt"];
1164--6196[label="0.25;1pkt 1fpkt"];
1164--6210[label="1;1pkt 1fpkt"];
1164--7274[label="0.266667;4pkt 4fpkt"];
1164--7393[label="0.5;3pkt 3fpkt"];
1164--7434[label="1;1pkt 1fpkt"];
1332--1578[label="0.0232558;1pkt 1fpkt"];
1332--2332[label="0.021978;2pkt 2fpkt"];
1332--2798[label="0.00675676;1pkt 1fpkt"];
1332--2870[label="1;144pkt 144fpkt"];
1332--2910[label="0.0135135;2pkt 2fpkt"];
1332--2983[label="0.00675676;1pkt 1fpkt"];
1332--3090[label="0.0549451;5pkt 5fpkt"];
1332--3198[label="0.027027;4pkt 4fpkt"];
1332--3634[label="0.00675676;1pkt 1fpkt"];
1332--3807[label="0.0135135;2pkt 2fpkt"];
1332--3830[label="0.0549451;5pkt 5fpkt"];
1332--3869[label="1;89pkt 89fpkt"];
1332--3950[label="0.027027;4pkt 4fpkt"];
1332--4333[label="1;148pkt 148fpkt"];
1332--6192[label="0.993243;147pkt 147fpkt"];
1332--7424[label="0.993243;147pkt 147fpkt"];
1510--1621[label="0.666667;2pkt 2fpkt"];
1510--1940[label="0.5;1pkt 1fpkt"];
1510--2820[label="0.333333;1pkt 1fpkt"];
1510--3587[label="0.666667;2pkt 2fpkt"];
1510--3996[label="0.307692;4pkt 4fpkt"];
1510--4741[label="0.5;1pkt 1fpkt"];
1510--5953[label="0.307692;4pkt 4fpkt"];
1510--6457[label="0.5;1pkt 1fpkt"];
1510--7274[label="0.307692;4pkt 4fpkt"];
1566--1592[label="0.0869565;2pkt 2fpkt"];
1566--2547[label="0.12;3pkt 3fpkt"];
1566--2599[label="0.0136986;1pkt 1fpkt"];
1566--2910[label="0.00869565;1pkt 1fpkt"];
1566--2994[label="1;115pkt 115fpkt"];
1566--3150[label="0.0952381;2pkt 2fpkt"];
1566--3371[label="0.00869565;1pkt 1fpkt"];
1566--3634[label="0.686957;79pkt 79fpkt"];
1566--3807[label="0.00869565;1pkt 1fpkt"];
1566--3816[label="1;102pkt 102fpkt"];
1566--3950[label="0.0695652;8pkt 8fpkt"];
1566--4167[label="1;115pkt 115fpkt"];
1566--6085[label="1;115pkt 115fpkt"];
1566--7354[label="1;115pkt 115fpkt"];
1578--1839[label="0.709677;22pkt 22fpkt"];
1578--2591[label="0.0930233;4pkt 4fpkt"];
1578--2870[label="0.0232558;1pkt 1fpkt"];
1578--2944[label="0.0465116;2pkt 2fpkt"];
1578--3329[label="0.709677;22pkt 22fpkt"];
1578--3707[label="0.0930233;4pkt 4fpkt"];
1578--3869[label="0.0232558;1pkt 1fpkt"];
1578--3950[label="0.581395;25pkt 25fpkt"];
1578--4221[label="0.0465116;2pkt 2fpkt"];
1578--4313[label="0.0666667;1pkt 1fpkt"];
1578--4333[label="0.0232558;1pkt 1fpkt"];
1578--4594[label="0.166667;1pkt 1fpkt"];
1578--4784[label="0.0465116;2pkt 2fpkt"];
1578--5266[label="0.709677;22pkt 22fpkt"];
1578--5469[label="0.0238095;1pkt 1fpkt"];
1578--5873[label="0.0930233;4pkt 4fpkt"];
1578--6118[label="0.0465116;2pkt 2fpkt"];
1578--6192[label="0.0232558;1pkt 1fpkt"];
1578--6362[label="0.2;1pkt 1fpkt"];
1578--6483[label="0.0465116;2pkt 2fpkt"];
1578--6820[label="0.6875;22pkt 22fpkt"];
1578--7227[label="0.0930233;4pkt 4fpkt"];
1578--7424[label="0.0232558;1pkt 1fpkt"];
1578--7527[label="0.2;1pkt 1fpkt"];
1578--7595[label="0.0465116;2pkt 2fpkt"];
1578--7813[label="0.709677;22pkt 22fpkt"];
1578--8071[label="0.0930233;4pkt 4fpkt"];
1619--3015[label="1;141pkt 141fpkt"];
1619--3950[label="0.141844;20pkt 20fpkt"];
1619--4550[label="1;141pkt 141fpkt"];
1619--6336[label="1;141pkt 141fpkt"];
1619--7512[label="1;141pkt 141fpkt"];
1631--4898[label="0.5;1pkt 1fpkt"];
1631--6556[label="1;2pkt 2fpkt"];
1631--7637[label="1;2pkt 2fpkt"];
2127--3354[label="1;3pkt 3fpkt"];
2127--4672[label="1;4pkt 4fpkt"];
2127--6415[label="1;4pkt 4fpkt"];
2274--2555[label="0.111111;1pkt 1fpkt"];
2274--3460[label="1;9pkt 9fpkt"];
2274--3996[label="0.111111;1pkt 1fpkt"];
2274--4249[label="0.5;1pkt 1fpkt"];
2274--5953[label="0.111111;1pkt 1fpkt"];
2274--6136[label="0.5;1pkt 1fpkt"];
2274--7274[label="0.111111;1pkt 1fpkt"];
2274--7387[label="0.5;1pkt 1fpkt"];
2591--2655[label="0.0851064;4pkt 4fpkt"];
2591--3143[label="0.116071;13pkt 13fpkt"];
2591--3707[label="1;112pkt 112fpkt"];
2591--3950[label="0.0357143;4pkt 4fpkt"];
2591--5873[label="0.991071;111pkt 111fpkt"];
2591--7227[label="1;112pkt 112fpkt"];
2591--8071[label="0.991071;111pkt 111fpkt"];
2655--3707[label="0.0851064;4pkt 4fpkt"];
2655--3762[label="0.478261;11pkt 11fpkt"];
2655--4221[label="0.0425532;2pkt 2fpkt"];
2655--5564[label="0.117647;4pkt 4fpkt"];
2655--5739[label="0.0222222;1pkt 1fpkt"];
2655--5748[label="0.097561;4pkt 4fpkt"];
2655--5774[label="0.108108;4pkt 4fpkt"];
2655--5873[label="0.0851064;4pkt 4fpkt"];
2655--5878[label="0.0344828;1pkt 1fpkt"];
2655--5891[label="0.0851064;4pkt 4fpkt"];
2655--5919[label="0.148936;7pkt 7fpkt"];
2655--6118[label="0.0212766;1pkt 1fpkt"];
2655--7135[label="0.0222222;1pkt 1fpkt"];
2655--7139[label="0.097561;4pkt 4fpkt"];
2655--7156[label="0.108108;4pkt 4fpkt"];
2655--7227[label="0.0851064;4pkt 4fpkt"];
2655--7230[label="0.0344828;1pkt 1fpkt"];
2655--7253[label="0.148936;7pkt 7fpkt"];
2655--8007[label="0.0952381;4pkt 4fpkt"];
2655--8071[label="0.0851064;4pkt 4fpkt"];
2655--8073[label="0.0666667;2pkt 2fpkt"];
2720--3901[label="1;5pkt 5fpkt"];
2720--4489[label="1;5pkt 5fpkt"];
2720--6295[label="1;4pkt 4fpkt"];
2870--2910[label="0.0138889;2pkt 2fpkt"];
2870--2983[label="0.00694444;1pkt 1fpkt"];
2870--3090[label="0.0549451;5pkt 5fpkt"];
2870--3198[label="0.0277778;4pkt 4fpkt"];
2870--3807[label="0.0138889;2pkt 2fpkt"];
2870--3830[label="0.0549451;5pkt 5fpkt"];
2870--3869[label="1;89pkt 89fpkt"];
2870--3950[label="0.0277778;4pkt 4fpkt"];
2870--4333[label="1;144pkt 144fpkt"];
2870--6192[label="0.993056;143pkt 143fpkt"];
2870--7424[label="0.993056;143pkt 143fpkt"];
2994--3150[label="0.0952381;2pkt 2fpkt"];
2994--3371[label="0.00869565;1pkt 1fpkt"];
2994--3634[label="0.686957;79pkt 79fpkt"];
2994--3807[label="0.00869565;1pkt 1fpkt"];
2994--3816[label="1;102pkt 102fpkt"];
2994--3950[label="0.0695652;8pkt 8fpkt"];
2994--4167[label="1;115pkt 115fpkt"];
2994--6085[label="1;115pkt 115fpkt"];
2994--7354[label="1;115pkt 115fpkt"];
3015--3950[label="0.141844;20pkt 20fpkt"];
3015--4550[label="1;141pkt 141fpkt"];
3015--6336[label="1;141pkt 141fpkt"];
3015--7512[label="1;141pkt 141fpkt"];
3354--4672[label="0.666667;2pkt 2fpkt"];
3354--6415[label="0.666667;2pkt 2fpkt"];
3707--3950[label="0.0357143;4pkt 4fpkt"];
3707--5873[label="0.991071;111pkt 111fpkt"];
3707--7227[label="1;112pkt 112fpkt"];
3707--8071[label="0.991071;111pkt 111fpkt"];
3816--3950[label="0.0784314;8pkt 8fpkt"];
3816--4167[label="1;102pkt 102fpkt"];
3816--6085[label="1;102pkt 102fpkt"];
3816--7354[label="1;102pkt 102fpkt"];
3869--3950[label="0.0449438;4pkt 4fpkt"];
3869--4333[label="1;89pkt 89fpkt"];
3869--6192[label="0.988764;88pkt 88fpkt"];
3869--7424[label="0.988764;88pkt 88fpkt"];
3901--4489[label="1;5pkt 5fpkt"];
3901--6295[label="1;4pkt 4fpkt"];
3996--5953[label="1;53pkt 53fpkt"];
3996--7274[label="1;53pkt 53fpkt"];
4167--6085[label="1;123pkt 123fpkt"];
4167--7354[label="1;123pkt 123fpkt"];
4330--6189[label="1;26pkt 26fpkt"];
4330--7422[label="1;26pkt 26fpkt"];
4333--6192[label="1;150pkt 150fpkt"];
4333--7424[label="1;150pkt 150fpkt"];
4443--6267[label="1;55pkt 55fpkt"];
4443--7471[label="1;55pkt 55fpkt"];
4489--6295[label="1;4pkt 4fpkt"];
4541--6328[label="1;1pkt 1fpkt"];
4541--7509[label="1;1pkt 1fpkt"];
4542--6329[label="1;12pkt 12fpkt"];
4542--7510[label="1;12pkt 12fpkt"];
4550--6336[label="1;142pkt 142fpkt"];
4550--7512[label="1;142pkt 142fpkt"];
4672--6415[label="1;4pkt 4fpkt"];
4708--6438[label="1;71pkt 71fpkt"];
4898--6556[label="1;3pkt 3fpkt"];
4898--7637[label="1;3pkt 3fpkt"];
5342--6873[label="1;44pkt 44fpkt"];
5873--7227[label="1;114pkt 114fpkt"];
5873--8071[label="1;114pkt 114fpkt"];
5933--7261[label="1;101pkt 101fpkt"];
5933--8090[label="1;100pkt 100fpkt"];
5953--7274[label="1;53pkt 53fpkt"];
6085--7354[label="1;123pkt 123fpkt"];
6189--7422[label="1;26pkt 26fpkt"];
6192--7424[label="1;150pkt 150fpkt"];
6267--7471[label="1;55pkt 55fpkt"];
6328--7509[label="1;1pkt 1fpkt"];
6329--7510[label="1;12pkt 12fpkt"];
6336--7512[label="1;142pkt 142fpkt"];
6556--7637[label="1;4pkt 4fpkt"];
7227--8071[label="1;114pkt 114fpkt"];
7261--8090[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.73.85" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
1910[label="167.8.143.92;s;3pkt 3fpkt", shape=diamond, color=yellow];
1982[label="214.11.1.93;d;1pkt 1fpkt", shape=diamond, color=yellow];
3366[label="167.8.143.92;s;3pkt 3fpkt", shape=hexagon, color=black];
3416[label="214.11.1.93;d;1pkt 1fpkt", shape=hexagon, color=black];
3882[label="214.11.1.93;d;1pkt 1fpkt", shape=polygon, color=gold];
4786[label="167.8.143.92;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6485[label="167.8.143.92;3pkt 3fpkt", shape=invtriangle, color=brown];
7597[label="167.8.143.92;3pkt 3fpkt", shape=invhouse, color=bisque];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.143.92:1122, 85.34.109.21:1863}[33.3333%]&lt;BR/&gt;{167.8.143.92:1211, 214.11.1.93:6699}[33.3333%]&lt;BR/&gt;{167.8.143.92:1050, 81.71.158.236:6699}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (36.1111%)&lt;BR/&gt; 1211: (22.2222%)&lt;BR/&gt; 1863: (13.8889%)&lt;BR/&gt; 1122: (13.8889%)&lt;BR/&gt; 1050: (13.8889%)&gt;];
}
1910--1982[label="1;1pkt 1fpkt"];
1910--3366[label="1;3pkt 3fpkt"];
1910--3416[label="1;1pkt 1fpkt"];
1910--3882[label="1;1pkt 1fpkt"];
1910--4786[label="1;3pkt 3fpkt"];
1910--6485[label="1;3pkt 3fpkt"];
1910--7597[label="1;3pkt 3fpkt"];
1982--3366[label="1;1pkt 1fpkt"];
1982--3416[label="1;1pkt 1fpkt"];
1982--3882[label="1;1pkt 1fpkt"];
1982--4786[label="1;1pkt 1fpkt"];
1982--6485[label="1;1pkt 1fpkt"];
1982--7597[label="1;1pkt 1fpkt"];
3366--3416[label="1;1pkt 1fpkt"];
3366--3882[label="1;1pkt 1fpkt"];
3366--4786[label="1;3pkt 3fpkt"];
3366--6485[label="1;3pkt 3fpkt"];
3366--7597[label="1;3pkt 3fpkt"];
3416--3882[label="1;1pkt 1fpkt"];
3416--4786[label="1;1pkt 1fpkt"];
3416--6485[label="1;1pkt 1fpkt"];
3416--7597[label="1;1pkt 1fpkt"];
3882--4786[label="1;1pkt 1fpkt"];
3882--6485[label="1;1pkt 1fpkt"];
3882--7597[label="1;1pkt 1fpkt"];
4786--6485[label="1;3pkt 3fpkt"];
4786--7597[label="1;3pkt 3fpkt"];
6485--7597[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="81.71.158.236" dst_port="6699" src_ip="167.8.143.92" src_port="1050"/>
      <filter dst_ip="214.11.1.93" dst_port="6699" src_ip="167.8.143.92" src_port="1211"/>
      <filter dst_ip="85.34.109.21" dst_port="1863" src_ip="167.8.143.92" src_port="1122"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,999,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
83[label="141.98.31.128s;2pkt 2fpkt", shape=rectangle, color=red];
652[label="185.191.52.15;s;189pkt 189fpkt", shape=diamond, color=yellow];
927[label="81.125.127.225;d;2pkt 2fpkt", shape=diamond, color=yellow];
1034[label="189.46.213.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
1056[label="81.41.5.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
1158[label="43.13.78.83;d;1pkt 1fpkt", shape=diamond, color=yellow];
1536[label="202.151.148.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
1861[label="43.12.199.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
2681[label="185.191.52.15;s;177pkt 177fpkt", shape=hexagon, color=black];
2981[label="202.151.148.33;d;1pkt 1fpkt", shape=hexagon, color=black];
3367[label="81.41.5.150;d;1pkt 1fpkt", shape=hexagon, color=black];
3773[label="185.191.52.15;s;136pkt 136fpkt", shape=polygon, color=gold];
4113[label="185.191.52.15;199pkt 199fpkt", shape=pentagon, color=darkviolet];
6044[label="185.191.52.15;200pkt 200fpkt", shape=invtriangle, color=brown];
7330[label="185.191.52.15;199pkt 199fpkt", shape=invhouse, color=bisque];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.52.15:6257, *:6257}[94.5545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (95.5446%)&lt;BR/&gt; 6699: (2.16022%)&lt;BR/&gt; 2873: (0.360036%)&lt;BR/&gt; 1343: (0.360036%)&lt;BR/&gt; 1072: (0.360036%)&gt;];
}
83--652[label="0.5;1pkt 1fpkt"];
83--1017[label="0.5;1pkt 1fpkt"];
83--1034[label="1;1pkt 1fpkt"];
83--1639[label="0.5;1pkt 1fpkt"];
83--2681[label="0.5;1pkt 1fpkt"];
83--3037[label="0.5;1pkt 1fpkt"];
83--3773[label="0.5;1pkt 1fpkt"];
83--4113[label="0.5;1pkt 1fpkt"];
83--5025[label="0.5;1pkt 1fpkt"];
83--6044[label="0.5;1pkt 1fpkt"];
83--6648[label="0.5;1pkt 1fpkt"];
83--7330[label="0.5;1pkt 1fpkt"];
83--7701[label="0.5;1pkt 1fpkt"];
652--927[label="0.5;1pkt 1fpkt"];
652--1034[label="1;1pkt 1fpkt"];
652--1056[label="1;1pkt 1fpkt"];
652--1158[label="1;1pkt 1fpkt"];
652--1536[label="1;1pkt 1fpkt"];
652--1861[label="1;1pkt 1fpkt"];
652--2681[label="1;177pkt 177fpkt"];
652--2981[label="1;1pkt 1fpkt"];
652--3367[label="1;1pkt 1fpkt"];
652--3773[label="1;136pkt 136fpkt"];
652--3948[label="0.238095;45pkt 45fpkt"];
652--3952[label="0.259259;49pkt 49fpkt"];
652--3961[label="0.238095;45pkt 45fpkt"];
652--3963[label="0.259259;49pkt 49fpkt"];
652--3971[label="0.238095;45pkt 45fpkt"];
652--3973[label="0.259259;49pkt 49fpkt"];
652--4113[label="0.994709;188pkt 188fpkt"];
652--6044[label="1;189pkt 189fpkt"];
652--7330[label="0.994709;188pkt 188fpkt"];
927--1265[label="0.5;1pkt 1fpkt"];
927--2681[label="0.5;1pkt 1fpkt"];
927--3773[label="0.5;1pkt 1fpkt"];
927--4113[label="0.5;1pkt 1fpkt"];
927--6044[label="0.5;1pkt 1fpkt"];
927--7330[label="0.5;1pkt 1fpkt"];
1034--2681[label="1;1pkt 1fpkt"];
1034--3773[label="1;1pkt 1fpkt"];
1034--4113[label="1;1pkt 1fpkt"];
1034--6044[label="1;1pkt 1fpkt"];
1034--7330[label="1;1pkt 1fpkt"];
1056--2681[label="1;1pkt 1fpkt"];
1056--3367[label="1;1pkt 1fpkt"];
1056--3773[label="1;1pkt 1fpkt"];
1056--4113[label="1;1pkt 1fpkt"];
1056--6044[label="1;1pkt 1fpkt"];
1056--7330[label="1;1pkt 1fpkt"];
1158--2681[label="1;1pkt 1fpkt"];
1158--3773[label="1;1pkt 1fpkt"];
1158--4113[label="1;1pkt 1fpkt"];
1158--6044[label="1;1pkt 1fpkt"];
1158--7330[label="1;1pkt 1fpkt"];
1536--2681[label="1;1pkt 1fpkt"];
1536--2981[label="1;1pkt 1fpkt"];
1536--3773[label="1;1pkt 1fpkt"];
1536--4113[label="1;1pkt 1fpkt"];
1536--6044[label="1;1pkt 1fpkt"];
1536--7330[label="1;1pkt 1fpkt"];
1861--2681[label="1;1pkt 1fpkt"];
1861--3773[label="1;1pkt 1fpkt"];
1861--3952[label="1;1pkt 1fpkt"];
1861--3963[label="1;1pkt 1fpkt"];
1861--3973[label="1;1pkt 1fpkt"];
1861--4113[label="1;1pkt 1fpkt"];
1861--6044[label="1;1pkt 1fpkt"];
1861--7330[label="1;1pkt 1fpkt"];
2681--2981[label="1;1pkt 1fpkt"];
2681--3367[label="1;1pkt 1fpkt"];
2681--3773[label="1;136pkt 136fpkt"];
2681--3948[label="0.254237;45pkt 45fpkt"];
2681--3952[label="0.276836;49pkt 49fpkt"];
2681--3961[label="0.254237;45pkt 45fpkt"];
2681--3963[label="0.276836;49pkt 49fpkt"];
2681--3971[label="0.254237;45pkt 45fpkt"];
2681--3973[label="0.276836;49pkt 49fpkt"];
2681--4113[label="0.99435;176pkt 176fpkt"];
2681--6044[label="1;177pkt 177fpkt"];
2681--7330[label="0.99435;176pkt 176fpkt"];
2981--3773[label="1;1pkt 1fpkt"];
2981--4113[label="1;1pkt 1fpkt"];
2981--6044[label="1;1pkt 1fpkt"];
2981--7330[label="1;1pkt 1fpkt"];
3367--3773[label="1;1pkt 1fpkt"];
3367--4113[label="1;1pkt 1fpkt"];
3367--6044[label="1;1pkt 1fpkt"];
3367--7330[label="1;1pkt 1fpkt"];
3773--3948[label="0.330882;45pkt 45fpkt"];
3773--3952[label="0.360294;49pkt 49fpkt"];
3773--3961[label="0.330882;45pkt 45fpkt"];
3773--3963[label="0.360294;49pkt 49fpkt"];
3773--3971[label="0.330882;45pkt 45fpkt"];
3773--3973[label="0.360294;49pkt 49fpkt"];
3773--4113[label="1;136pkt 136fpkt"];
3773--6044[label="1;136pkt 136fpkt"];
3773--7330[label="1;136pkt 136fpkt"];
4113--6044[label="1;199pkt 199fpkt"];
4113--7330[label="1;199pkt 199fpkt"];
6044--7330[label="1;199pkt 199fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="185.191.52.15" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
1695[label="136.230.133.113;s;2pkt 2fpkt", shape=diamond, color=yellow];
2154[label="85.27.206.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
3391[label="85.27.206.194;d;1pkt 1fpkt", shape=hexagon, color=black];
4932[label="136.230.133.113;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6578[label="136.230.133.113;1pkt 1fpkt", shape=invtriangle, color=brown];
7649[label="136.230.133.113;2pkt 2fpkt", shape=invhouse, color=bisque];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.133.113:0, 85.27.206.194:0}[50%]&lt;BR/&gt;{136.230.133.113:0, 86.135.43.228:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1695--1696[label="0.5;1pkt 1fpkt"];
1695--2154[label="1;1pkt 1fpkt"];
1695--3391[label="1;1pkt 1fpkt"];
1695--3508[label="0.5;1pkt 1fpkt"];
1695--4932[label="1;1pkt 1fpkt"];
1695--6578[label="1;1pkt 1fpkt"];
1695--7649[label="1;2pkt 2fpkt"];
2154--3391[label="1;1pkt 1fpkt"];
2154--7649[label="1;1pkt 1fpkt"];
3391--7649[label="1;1pkt 1fpkt"];
4932--6578[label="1;1pkt 1fpkt"];
4932--7649[label="1;1pkt 1fpkt"];
6578--7649[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="86.135.43.228" src_ip="136.230.133.113"/>
      <filter dst_ip="85.27.206.194" src_ip="136.230.133.113"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_382{
style=filled;
color=gray75;
1742[label="185.191.218.29;d;318pkt 318fpkt", shape=diamond, color=yellow];
1743[label="211.205.129.24;s;318pkt 318fpkt", shape=diamond, color=yellow];
3401[label="211.205.129.24;s;241pkt 241fpkt", shape=hexagon, color=black];
stat382[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.205.129.24:2064, 185.191.218.29:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2064: (50%)&lt;BR/&gt; 64002: (0.171038%)&lt;BR/&gt; 64001: (0.171038%)&lt;BR/&gt; 64000: (0.171038%)&lt;BR/&gt; 63999: (0.171038%)&gt;];
}
1742--1743[label="1;318pkt 318fpkt"];
1742--3401[label="1;241pkt 241fpkt"];
1743--3401[label="1;241pkt 241fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.218.29" src_ip="211.205.129.24" src_port="2064"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_383{
style=filled;
color=gray75;
1964[label="160.162.4.226;d;148pkt 148fpkt", shape=diamond, color=yellow];
2173[label="160.1.165.207;s;148pkt 148fpkt", shape=diamond, color=yellow];
3404[label="160.162.4.226;d;148pkt 148fpkt", shape=hexagon, color=black];
3405[label="160.1.165.207;s;112pkt 112fpkt", shape=hexagon, color=black];
3923[label="160.162.4.226;d;148pkt 148fpkt", shape=polygon, color=gold];
5651[label="160.1.165.207;159pkt 159fpkt", shape=pentagon, color=darkviolet];
7073[label="160.1.165.207;159pkt 159fpkt", shape=invtriangle, color=brown];
7971[label="160.1.165.207;159pkt 159fpkt", shape=invhouse, color=bisque];
stat383[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.1.165.207:80, 160.162.4.226:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1171: (0.338696%)&lt;BR/&gt; 1170: (0.338696%)&lt;BR/&gt; 1168: (0.338696%)&lt;BR/&gt; 1167: (0.338696%)&gt;];
}
1964--2173[label="1;148pkt 148fpkt"];
1964--3404[label="1;148pkt 148fpkt"];
1964--3405[label="1;112pkt 112fpkt"];
1964--3923[label="1;148pkt 148fpkt"];
1964--3950[label="0.0945946;14pkt 14fpkt"];
1964--5651[label="0.993243;147pkt 147fpkt"];
1964--7073[label="0.993243;147pkt 147fpkt"];
1964--7971[label="0.993243;147pkt 147fpkt"];
2173--3404[label="1;148pkt 148fpkt"];
2173--3405[label="1;112pkt 112fpkt"];
2173--3923[label="1;148pkt 148fpkt"];
2173--3950[label="0.0945946;14pkt 14fpkt"];
2173--5651[label="0.993243;147pkt 147fpkt"];
2173--7073[label="0.993243;147pkt 147fpkt"];
2173--7971[label="0.993243;147pkt 147fpkt"];
3404--3405[label="1;112pkt 112fpkt"];
3404--3923[label="1;148pkt 148fpkt"];
3404--3950[label="0.0945946;14pkt 14fpkt"];
3404--5651[label="0.993243;147pkt 147fpkt"];
3404--7073[label="0.993243;147pkt 147fpkt"];
3404--7971[label="0.993243;147pkt 147fpkt"];
3405--3923[label="1;112pkt 112fpkt"];
3405--3950[label="0.125;14pkt 14fpkt"];
3405--5651[label="0.991071;111pkt 111fpkt"];
3405--7073[label="0.991071;111pkt 111fpkt"];
3405--7971[label="0.991071;111pkt 111fpkt"];
3923--3950[label="0.0945946;14pkt 14fpkt"];
3923--5651[label="0.993243;147pkt 147fpkt"];
3923--7073[label="0.993243;147pkt 147fpkt"];
3923--7971[label="0.993243;147pkt 147fpkt"];
5651--7073[label="1;159pkt 159fpkt"];
5651--7971[label="1;159pkt 159fpkt"];
7073--7971[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter dst_ip="160.162.4.226" src_ip="160.1.165.207" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_384{
style=filled;
color=gray75;
1967[label="167.8.180.82;d;1pkt 1fpkt", shape=diamond, color=yellow];
3409[label="167.8.180.82;d;1pkt 1fpkt", shape=hexagon, color=black];
stat384[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.93.3.13:57224, 167.8.180.82:6080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57224: (50%)&lt;BR/&gt; 6080: (50%)&gt;];
}
1967--1968[label="1;1pkt 1fpkt"];
1967--3409[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.180.82" dst_port="6080" src_ip="194.93.3.13" src_port="57224"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956891,2.11535,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_385{
style=filled;
color=gray75;
406[label="1.35.33.87s;1pkt 1fpkt", shape=rectangle, color=red];
1781[label="212.24.168.4;d;3pkt 3fpkt", shape=diamond, color=yellow];
1997[label="1.35.33.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
3425[label="1.35.33.82;s;1pkt 1fpkt", shape=hexagon, color=black];
3557[label="212.24.168.4;d;3pkt 3fpkt", shape=hexagon, color=black];
4750[label="1.35.33.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat385[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.21.177.66:1145, 212.24.168.4:80}[33.3333%]&lt;BR/&gt;{1.35.33.82:5001, 212.24.168.4:1064}[33.3333%]&lt;BR/&gt;{1.35.33.87:5001, 212.24.168.4:1065}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (40%)&lt;BR/&gt; 1065: (20%)&lt;BR/&gt; 1064: (20%)&lt;BR/&gt; 1145: (10%)&lt;BR/&gt; 80: (10%)&gt;];
}
406--1781[label="1;1pkt 1fpkt"];
406--3557[label="1;1pkt 1fpkt"];
406--4750[label="1;1pkt 1fpkt"];
1781--1997[label="1;1pkt 1fpkt"];
1781--3425[label="1;1pkt 1fpkt"];
1781--3557[label="1;3pkt 3fpkt"];
1781--4750[label="1;1pkt 1fpkt"];
1997--3425[label="1;1pkt 1fpkt"];
1997--3557[label="1;1pkt 1fpkt"];
3425--3557[label="1;1pkt 1fpkt"];
3557--4750[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.168.4" dst_port="1065" src_ip="1.35.33.87" src_port="5001"/>
      <filter dst_ip="212.24.168.4" dst_port="1064" src_ip="1.35.33.82" src_port="5001"/>
      <filter dst_ip="212.24.168.4" dst_port="80" src_ip="195.21.177.66" src_port="1145"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
963[label="210.150.67.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
964[label="167.8.167.180;d;1pkt 1fpkt", shape=diamond, color=yellow];
2995[label="167.8.167.180;d;1pkt 1fpkt", shape=hexagon, color=black];
3429[label="210.150.67.191;s;1pkt 1fpkt", shape=hexagon, color=black];
5532[label="210.150.67.191;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.150.67.191:8002, 167.8.167.180:49188}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49188: (50%)&lt;BR/&gt; 8002: (50%)&gt;];
}
963--964[label="1;1pkt 1fpkt"];
963--2995[label="1;1pkt 1fpkt"];
963--3429[label="1;1pkt 1fpkt"];
963--5532[label="1;1pkt 1fpkt"];
964--2995[label="1;1pkt 1fpkt"];
964--3429[label="1;1pkt 1fpkt"];
964--5532[label="1;1pkt 1fpkt"];
2995--3429[label="1;1pkt 1fpkt"];
2995--5532[label="1;1pkt 1fpkt"];
3429--5532[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.167.180" dst_port="49188" src_ip="210.150.67.191" src_port="8002"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_387{
style=filled;
color=gray75;
2022[label="213.91.100.228;s;63pkt 63fpkt", shape=diamond, color=yellow];
2024[label="200.25.193.240;d;57pkt 57fpkt", shape=diamond, color=yellow];
3442[label="213.91.100.228;s;54pkt 54fpkt", shape=hexagon, color=black];
5782[label="213.91.100.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat387[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.100.228:80, 200.25.193.240:*}[90.4762%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2122: (0.857143%)&lt;BR/&gt; 2113: (0.857143%)&lt;BR/&gt; 2112: (0.857143%)&lt;BR/&gt; 2111: (0.857143%)&gt;];
}
2022--2024[label="1;57pkt 57fpkt"];
2022--3442[label="1;54pkt 54fpkt"];
2022--3950[label="0.206349;13pkt 13fpkt"];
2022--5782[label="1;1pkt 1fpkt"];
2024--3442[label="0.888889;48pkt 48fpkt"];
2024--3950[label="0.192982;11pkt 11fpkt"];
2024--5782[label="1;1pkt 1fpkt"];
3442--3950[label="0.240741;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="200.25.193.240" src_ip="213.91.100.228" src_port="80"/>
    </slice>
    <from sec="1034226009" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_388{
style=filled;
color=gray75;
2243[label="84.28.7.41;s;57pkt 57fpkt", shape=diamond, color=yellow];
3444[label="84.28.7.41;s;57pkt 57fpkt", shape=hexagon, color=black];
4335[label="84.28.7.41;62pkt 62fpkt", shape=pentagon, color=darkviolet];
6194[label="84.28.7.41;62pkt 62fpkt", shape=invtriangle, color=brown];
stat388[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.28.7.41:80, 212.18.104.28:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2463: (0.840336%)&lt;BR/&gt; 2427: (0.840336%)&lt;BR/&gt; 2386: (0.840336%)&lt;BR/&gt; 2359: (0.840336%)&gt;];
}
2243--3444[label="1;57pkt 57fpkt"];
2243--3950[label="0.0175439;1pkt 1fpkt"];
2243--4335[label="0.982456;56pkt 56fpkt"];
2243--6194[label="0.982456;56pkt 56fpkt"];
3444--3950[label="0.0175439;1pkt 1fpkt"];
3444--4335[label="0.982456;56pkt 56fpkt"];
3444--6194[label="0.982456;56pkt 56fpkt"];
4335--6194[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.104.28" src_ip="84.28.7.41" src_port="80"/>
    </slice>
    <from sec="1034226011" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
1612[label="218.2.44.21;d;24pkt 24fpkt", shape=diamond, color=yellow];
1613[label="212.28.98.2;s;24pkt 24fpkt", shape=diamond, color=yellow];
3451[label="212.28.98.2;s;24pkt 24fpkt", shape=hexagon, color=black];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.28.98.2:*, 218.2.44.21:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1144: (2.08333%)&lt;BR/&gt; 1143: (2.08333%)&lt;BR/&gt; 1142: (2.08333%)&lt;BR/&gt; 1141: (2.08333%)&gt;];
}
1612--1613[label="1;24pkt 24fpkt"];
1612--3451[label="1;24pkt 24fpkt"];
1612--3946[label="0.166667;4pkt 4fpkt"];
1612--3959[label="0.166667;4pkt 4fpkt"];
1612--3969[label="0.166667;4pkt 4fpkt"];
1613--3451[label="1;24pkt 24fpkt"];
1613--3946[label="0.166667;4pkt 4fpkt"];
1613--3959[label="0.166667;4pkt 4fpkt"];
1613--3969[label="0.166667;4pkt 4fpkt"];
3451--3946[label="0.166667;4pkt 4fpkt"];
3451--3959[label="0.166667;4pkt 4fpkt"];
3451--3969[label="0.166667;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="218.2.44.21" dst_port="80" src_ip="212.28.98.2"/>
    </slice>
    <from sec="1034226056" usec="0"/>
    <to sec="1034226714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_390{
style=filled;
color=gray75;
1677[label="181.177.72.183;s;32pkt 32fpkt", shape=diamond, color=yellow];
2268[label="212.24.8.28;d;17pkt 17fpkt", shape=diamond, color=yellow];
2353[label="141.98.82.48;d;17pkt 17fpkt", shape=diamond, color=yellow];
3456[label="212.24.8.28;d;13pkt 13fpkt", shape=hexagon, color=black];
4176[label="85.34.108.22;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5479[label="181.177.72.183;34pkt 34fpkt", shape=pentagon, color=darkviolet];
stat390[shape=component, label=&lt;Rules:&lt;BR/&gt;{181.177.72.183:80, 141.98.82.48:*}[35.2941%]&lt;BR/&gt;{181.177.72.183:80, 212.24.8.28:*}[31.3725%]&lt;BR/&gt;{85.34.108.22:1863, *:*}[31.3725%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.2481%)&lt;BR/&gt; 1863: (6.97674%)&lt;BR/&gt; 4735: (1.55039%)&lt;BR/&gt; 4729: (1.55039%)&lt;BR/&gt; 4723: (1.55039%)&gt;];
}
1677--2268[label="0.882353;15pkt 15fpkt"];
1677--2353[label="1;17pkt 17fpkt"];
1677--3456[label="0.846154;11pkt 11fpkt"];
1677--3950[label="0.125;4pkt 4fpkt"];
1677--5479[label="1;32pkt 32fpkt"];
2268--3456[label="1;13pkt 13fpkt"];
2268--3950[label="0.117647;2pkt 2fpkt"];
2268--4176[label="0.0625;1pkt 1fpkt"];
2268--5479[label="0.882353;15pkt 15fpkt"];
2353--3950[label="0.117647;2pkt 2fpkt"];
2353--5479[label="1;17pkt 17fpkt"];
3456--3950[label="0.153846;2pkt 2fpkt"];
3456--4176[label="0.0769231;1pkt 1fpkt"];
3456--5479[label="0.846154;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="85.34.108.22" src_port="1863"/>
      <filter dst_ip="141.98.82.48" src_ip="181.177.72.183" src_port="80"/>
      <filter dst_ip="212.24.8.28" src_ip="181.177.72.183" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_391{
style=filled;
color=gray75;
383[label="1.102.213.248s;1pkt 1fpkt", shape=rectangle, color=red];
667[label="212.24.29.114;s;86pkt 86fpkt", shape=diamond, color=yellow];
1108[label="43.201.54.208;d;1pkt 1fpkt", shape=diamond, color=yellow];
1193[label="43.176.136.105;d;1pkt 1fpkt", shape=diamond, color=yellow];
1845[label="210.240.181.248;s;2pkt 2fpkt", shape=diamond, color=yellow];
1928[label="167.8.128.77;s;7pkt 7fpkt", shape=diamond, color=yellow];
2159[label="58.161.92.123;d;2pkt 2fpkt", shape=diamond, color=yellow];
2351[label="212.24.4.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
2369[label="43.57.115.97;d;1pkt 1fpkt", shape=diamond, color=yellow];
2519[label="81.115.23.168;s;2pkt 2fpkt", shape=diamond, color=yellow];
2564[label="212.24.25.114;s;3pkt 3fpkt", shape=diamond, color=yellow];
3044[label="212.24.29.114;s;53pkt 53fpkt", shape=hexagon, color=black];
3387[label="167.8.128.77;s;3pkt 3fpkt", shape=hexagon, color=black];
3397[label="58.161.92.123;d;2pkt 2fpkt", shape=hexagon, color=black];
3458[label="210.240.181.248;s;2pkt 2fpkt", shape=hexagon, color=black];
3503[label="43.201.54.208;d;1pkt 1fpkt", shape=hexagon, color=black];
3626[label="81.115.23.168;s;2pkt 2fpkt", shape=hexagon, color=black];
3664[label="43.57.115.97;d;1pkt 1fpkt", shape=hexagon, color=black];
4269[label="43.163.136.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4659[label="167.8.128.77;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4937[label="212.24.25.114;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4938[label="212.24.29.114;106pkt 106fpkt", shape=pentagon, color=darkviolet];
5356[label="81.115.23.168;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5917[label="210.240.181.248;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6152[label="43.163.136.34;1pkt 1fpkt", shape=invtriangle, color=brown];
6408[label="167.8.128.77;6pkt 6fpkt", shape=invtriangle, color=brown];
6583[label="212.24.25.114;2pkt 2fpkt", shape=invtriangle, color=brown];
6584[label="212.24.29.114;105pkt 105fpkt", shape=invtriangle, color=brown];
7395[label="43.163.136.34;1pkt 1fpkt", shape=invhouse, color=bisque];
7553[label="167.8.128.77;7pkt 7fpkt", shape=invhouse, color=bisque];
7652[label="212.24.25.114;3pkt 3fpkt", shape=invhouse, color=bisque];
7653[label="212.24.29.114;106pkt 106fpkt", shape=invhouse, color=bisque];
stat391[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.29.114:6257, *:6257}[82.1138%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (84.0996%)&lt;BR/&gt; 6699: (6.41762%)&lt;BR/&gt; 80: (1.53257%)&lt;BR/&gt; 1103: (0.670498%)&lt;BR/&gt; 1101: (0.574713%)&gt;];
}
383--442[label="1;1pkt 1fpkt"];
383--544[label="1;1pkt 1fpkt"];
383--664[label="1;1pkt 1fpkt"];
383--1845[label="1;1pkt 1fpkt"];
383--3458[label="1;1pkt 1fpkt"];
383--5917[label="1;1pkt 1fpkt"];
667--1038[label="0.5;1pkt 1fpkt"];
667--1108[label="1;1pkt 1fpkt"];
667--1121[label="0.5;1pkt 1fpkt"];
667--1193[label="1;1pkt 1fpkt"];
667--2159[label="0.5;1pkt 1fpkt"];
667--3044[label="1;53pkt 53fpkt"];
667--3397[label="0.5;1pkt 1fpkt"];
667--3503[label="1;1pkt 1fpkt"];
667--3948[label="0.197674;17pkt 17fpkt"];
667--3952[label="0.209302;18pkt 18fpkt"];
667--3961[label="0.197674;17pkt 17fpkt"];
667--3963[label="0.209302;18pkt 18fpkt"];
667--3971[label="0.197674;17pkt 17fpkt"];
667--3973[label="0.209302;18pkt 18fpkt"];
667--4938[label="1;86pkt 86fpkt"];
667--6584[label="1;86pkt 86fpkt"];
667--7653[label="1;86pkt 86fpkt"];
1108--3044[label="1;1pkt 1fpkt"];
1108--3503[label="1;1pkt 1fpkt"];
1108--4938[label="1;1pkt 1fpkt"];
1108--6584[label="1;1pkt 1fpkt"];
1108--7653[label="1;1pkt 1fpkt"];
1193--3044[label="1;1pkt 1fpkt"];
1193--4938[label="1;1pkt 1fpkt"];
1193--6584[label="1;1pkt 1fpkt"];
1193--7653[label="1;1pkt 1fpkt"];
1845--3458[label="1;2pkt 2fpkt"];
1845--5917[label="1;1pkt 1fpkt"];
1928--3387[label="1;3pkt 3fpkt"];
1928--4659[label="1;7pkt 7fpkt"];
1928--6408[label="1;6pkt 6fpkt"];
1928--7553[label="1;7pkt 7fpkt"];
2159--3044[label="0.5;1pkt 1fpkt"];
2159--3397[label="1;2pkt 2fpkt"];
2159--4535[label="1;1pkt 1fpkt"];
2159--4938[label="0.5;1pkt 1fpkt"];
2159--6584[label="0.5;1pkt 1fpkt"];
2159--7653[label="0.5;1pkt 1fpkt"];
2351--2369[label="1;1pkt 1fpkt"];
2351--3664[label="1;1pkt 1fpkt"];
2369--3664[label="1;1pkt 1fpkt"];
2519--3369[label="1;2pkt 2fpkt"];
2519--3626[label="1;2pkt 2fpkt"];
2519--5356[label="1;2pkt 2fpkt"];
2564--4937[label="1;3pkt 3fpkt"];
2564--6583[label="1;2pkt 2fpkt"];
2564--7652[label="1;3pkt 3fpkt"];
3044--3397[label="0.5;1pkt 1fpkt"];
3044--3503[label="1;1pkt 1fpkt"];
3044--3948[label="0.320755;17pkt 17fpkt"];
3044--3952[label="0.339623;18pkt 18fpkt"];
3044--3961[label="0.320755;17pkt 17fpkt"];
3044--3963[label="0.339623;18pkt 18fpkt"];
3044--3971[label="0.320755;17pkt 17fpkt"];
3044--3973[label="0.339623;18pkt 18fpkt"];
3044--4938[label="1;53pkt 53fpkt"];
3044--6584[label="1;53pkt 53fpkt"];
3044--7653[label="1;53pkt 53fpkt"];
3387--4659[label="1;3pkt 3fpkt"];
3387--6408[label="0.666667;2pkt 2fpkt"];
3387--7553[label="1;3pkt 3fpkt"];
3397--4535[label="1;1pkt 1fpkt"];
3397--4938[label="0.5;1pkt 1fpkt"];
3397--6584[label="0.5;1pkt 1fpkt"];
3397--7653[label="0.5;1pkt 1fpkt"];
3458--5917[label="1;1pkt 1fpkt"];
3503--4938[label="1;1pkt 1fpkt"];
3503--6584[label="1;1pkt 1fpkt"];
3503--7653[label="1;1pkt 1fpkt"];
3626--5356[label="1;2pkt 2fpkt"];
4269--6152[label="1;1pkt 1fpkt"];
4269--7395[label="1;1pkt 1fpkt"];
4659--6408[label="1;6pkt 6fpkt"];
4659--7553[label="1;7pkt 7fpkt"];
4937--6583[label="1;2pkt 2fpkt"];
4937--7652[label="1;3pkt 3fpkt"];
4938--6584[label="1;105pkt 105fpkt"];
4938--7653[label="1;106pkt 106fpkt"];
6152--7395[label="1;1pkt 1fpkt"];
6408--7553[label="1;6pkt 6fpkt"];
6583--7652[label="1;2pkt 2fpkt"];
6584--7653[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="212.24.29.114" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_392{
style=filled;
color=gray75;
2101[label="74.6.197.238;d;2pkt 2fpkt", shape=diamond, color=yellow];
2293[label="136.230.80.150;s;2pkt 2fpkt", shape=diamond, color=yellow];
3467[label="136.230.80.150;s;2pkt 2fpkt", shape=hexagon, color=black];
5220[label="136.230.80.150;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat392[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.80.150:20, 74.6.197.238:1060}[50%]&lt;BR/&gt;{136.230.80.150:21, 74.6.197.238:1047}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1060: (28.5714%)&lt;BR/&gt; 20: (28.5714%)&lt;BR/&gt; 1047: (21.4286%)&lt;BR/&gt; 21: (21.4286%)&gt;];
}
2101--2293[label="1;2pkt 2fpkt"];
2101--3467[label="1;2pkt 2fpkt"];
2101--5220[label="1;1pkt 1fpkt"];
2293--3467[label="1;2pkt 2fpkt"];
2293--5220[label="1;1pkt 1fpkt"];
3467--5220[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="74.6.197.238" dst_port="1047" src_ip="136.230.80.150" src_port="21"/>
      <filter dst_ip="74.6.197.238" dst_port="1060" src_ip="136.230.80.150" src_port="20"/>
    </slice>
    <from sec="1034226315" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_393{
style=filled;
color=gray75;
2269[label="161.238.129.175;s;49pkt 49fpkt", shape=diamond, color=yellow];
2295[label="58.106.20.9;d;47pkt 47fpkt", shape=diamond, color=yellow];
3468[label="58.106.20.9;d;42pkt 42fpkt", shape=hexagon, color=black];
3589[label="161.238.129.175;s;49pkt 49fpkt", shape=hexagon, color=black];
3894[label="58.106.20.9;d;42pkt 42fpkt", shape=polygon, color=gold];
stat393[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.129.175:*, 58.106.20.9:80}[95.9184%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1266%)&lt;BR/&gt; 63902: (1.0917%)&lt;BR/&gt; 63901: (1.0917%)&lt;BR/&gt; 63900: (1.0917%)&lt;BR/&gt; 63899: (1.0917%)&gt;];
}
2269--2295[label="1;47pkt 47fpkt"];
2269--3468[label="1;42pkt 42fpkt"];
2269--3589[label="1;49pkt 49fpkt"];
2269--3894[label="1;42pkt 42fpkt"];
2295--3468[label="1;42pkt 42fpkt"];
2295--3589[label="1;47pkt 47fpkt"];
2295--3894[label="1;42pkt 42fpkt"];
3468--3589[label="1;42pkt 42fpkt"];
3468--3894[label="1;42pkt 42fpkt"];
3589--3894[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="58.106.20.9" dst_port="80" src_ip="161.238.129.175"/>
    </slice>
    <from sec="1034226127" usec="0"/>
    <to sec="1034226668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_394{
style=filled;
color=gray75;
2300[label="141.98.27.146;s;4pkt 4fpkt", shape=diamond, color=yellow];
2301[label="203.200.92.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
3474[label="203.200.92.74;d;1pkt 1fpkt", shape=hexagon, color=black];
5182[label="141.98.27.146;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6763[label="141.98.27.146;1pkt 1fpkt", shape=invtriangle, color=brown];
7773[label="141.98.27.146;1pkt 1fpkt", shape=invhouse, color=bisque];
stat394[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.27.146:50095, 203.200.92.74:20332}[25%]&lt;BR/&gt;{141.98.27.146:50094, 203.200.93.152:80}[25%]&lt;BR/&gt;{141.98.27.146:50092, 34.47.250.52:80}[25%]&lt;BR/&gt;{141.98.27.146:50093, 34.47.250.52:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50095: (30%)&lt;BR/&gt; 20332: (30%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 50092: (10%)&lt;BR/&gt; 50094: (5%)&gt;];
}
2300--2301[label="1;1pkt 1fpkt"];
2300--3474[label="1;1pkt 1fpkt"];
2300--5182[label="1;2pkt 2fpkt"];
2300--6763[label="1;1pkt 1fpkt"];
2300--7773[label="1;1pkt 1fpkt"];
2301--3474[label="1;1pkt 1fpkt"];
2301--5182[label="1;1pkt 1fpkt"];
2301--6763[label="1;1pkt 1fpkt"];
2301--7773[label="1;1pkt 1fpkt"];
3474--5182[label="1;1pkt 1fpkt"];
3474--6763[label="1;1pkt 1fpkt"];
3474--7773[label="1;1pkt 1fpkt"];
5182--6763[label="1;1pkt 1fpkt"];
5182--7773[label="1;1pkt 1fpkt"];
6763--7773[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.47.250.52" dst_port="80" src_ip="141.98.27.146" src_port="50093"/>
      <filter dst_ip="34.47.250.52" dst_port="80" src_ip="141.98.27.146" src_port="50092"/>
      <filter dst_ip="203.200.93.152" dst_port="80" src_ip="141.98.27.146" src_port="50094"/>
      <filter dst_ip="203.200.92.74" dst_port="20332" src_ip="141.98.27.146" src_port="50095"/>
    </slice>
    <from sec="1034226370" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_395{
style=filled;
color=gray75;
2331[label="43.16.166.131;s;1pkt 1fpkt", shape=diamond, color=yellow];
3482[label="43.16.166.131;s;1pkt 1fpkt", shape=hexagon, color=black];
stat395[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.16.166.131:6699, 167.8.141.82:1160}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1160: (50%)&gt;];
}
2331--3482[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.141.82" dst_port="1160" src_ip="43.16.166.131" src_port="6699"/>
    </slice>
    <from sec="1034226459" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_396{
style=filled;
color=gray75;
660[label="201.85.5.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
3493[label="201.85.5.111;s;1pkt 1fpkt", shape=hexagon, color=black];
stat396[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.85.5.111:7744, 212.24.9.10:1922}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7744: (50%)&lt;BR/&gt; 1922: (50%)&gt;];
}
660--3493[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.9.10" dst_port="1922" src_ip="201.85.5.111" src_port="7744"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_397{
style=filled;
color=gray75;
1585[label="136.230.79.220;s;76pkt 76fpkt", shape=diamond, color=yellow];
2462[label="86.135.44.8;d;14pkt 14fpkt", shape=diamond, color=yellow];
3003[label="136.230.79.220;s;71pkt 71fpkt", shape=hexagon, color=black];
3325[label="86.135.44.129;d;19pkt 19fpkt", shape=hexagon, color=black];
3327[label="86.135.44.179;d;23pkt 23fpkt", shape=hexagon, color=black];
5726[label="136.230.79.220;76pkt 76fpkt", shape=pentagon, color=darkviolet];
stat397[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, *:*}[50.4274%]&lt;BR/&gt;{136.230.79.220:*, *:25}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.9247%)&lt;BR/&gt; 0: (1.07527%)&lt;BR/&gt; 36415: (0.716846%)&lt;BR/&gt; 14520: (0.716846%)&lt;BR/&gt; 13211: (0.716846%)&gt;];
}
1585--2068[label="0.0333333;1pkt 1fpkt"];
1585--2070[label="0.0869565;2pkt 2fpkt"];
1585--2462[label="1;14pkt 14fpkt"];
1585--3003[label="1;71pkt 71fpkt"];
1585--3325[label="0.0526316;1pkt 1fpkt"];
1585--3327[label="0.0869565;2pkt 2fpkt"];
1585--5726[label="0.973684;74pkt 74fpkt"];
2462--3003[label="1;14pkt 14fpkt"];
2462--5726[label="1;14pkt 14fpkt"];
3003--3325[label="0.0526316;1pkt 1fpkt"];
3003--3327[label="0.0869565;2pkt 2fpkt"];
3003--5726[label="0.971831;69pkt 69fpkt"];
3325--3494[label="0.0526316;1pkt 1fpkt"];
3325--3631[label="0.0526316;1pkt 1fpkt"];
3325--3914[label="0.0526316;1pkt 1fpkt"];
3325--4134[label="0.0526316;1pkt 1fpkt"];
3325--4277[label="0.25;1pkt 1fpkt"];
3325--4324[label="0.166667;1pkt 1fpkt"];
3325--4396[label="0.0526316;1pkt 1fpkt"];
3325--4450[label="0.0588235;1pkt 1fpkt"];
3325--4950[label="0.0588235;1pkt 1fpkt"];
3325--5083[label="0.1;1pkt 1fpkt"];
3325--5516[label="0.105263;2pkt 2fpkt"];
3325--5656[label="0.0588235;1pkt 1fpkt"];
3325--5726[label="0.0526316;1pkt 1fpkt"];
3325--6058[label="0.0526316;1pkt 1fpkt"];
3325--6159[label="0.2;1pkt 1fpkt"];
3325--6233[label="0.0526316;1pkt 1fpkt"];
3325--6272[label="0.0625;1pkt 1fpkt"];
3325--6593[label="0.0625;1pkt 1fpkt"];
3325--6691[label="0.1;1pkt 1fpkt"];
3325--6981[label="0.105263;2pkt 2fpkt"];
3325--7077[label="0.0588235;1pkt 1fpkt"];
3325--7398[label="0.2;1pkt 1fpkt"];
3325--7449[label="0.0526316;1pkt 1fpkt"];
3325--7474[label="0.0588235;1pkt 1fpkt"];
3325--7974[label="0.0625;1pkt 1fpkt"];
3327--3494[label="0.0434783;1pkt 1fpkt"];
3327--3631[label="0.0434783;1pkt 1fpkt"];
3327--3653[label="0.0434783;1pkt 1fpkt"];
3327--3914[label="0.0434783;1pkt 1fpkt"];
3327--4101[label="0.130435;3pkt 3fpkt"];
3327--4134[label="0.0434783;1pkt 1fpkt"];
3327--4370[label="0.1;2pkt 2fpkt"];
3327--4396[label="0.0434783;1pkt 1fpkt"];
3327--4744[label="0.130435;3pkt 3fpkt"];
3327--4812[label="0.1;1pkt 1fpkt"];
3327--5726[label="0.0869565;2pkt 2fpkt"];
3327--6035[label="0.130435;3pkt 3fpkt"];
3327--6058[label="0.0434783;1pkt 1fpkt"];
3327--6233[label="0.0434783;1pkt 1fpkt"];
3327--6458[label="0.130435;3pkt 3fpkt"];
3327--7449[label="0.0434783;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_port="25"/>
      <filter dst_port="25" src_ip="136.230.79.220"/>
    </slice>
    <from sec="1034226011" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987269,2.08385,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_398{
style=filled;
color=gray75;
120[label="86.89.159.196s;1pkt 1fpkt", shape=rectangle, color=red];
680[label="167.8.144.191;d;2pkt 2fpkt", shape=diamond, color=yellow];
682[label="86.89.159.196;s;2pkt 2fpkt", shape=diamond, color=yellow];
3205[label="86.89.159.196;s;1pkt 1fpkt", shape=hexagon, color=black];
3495[label="167.8.144.191;d;2pkt 2fpkt", shape=hexagon, color=black];
5574[label="86.89.159.196;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7022[label="86.89.159.196;2pkt 2fpkt", shape=invtriangle, color=brown];
stat398[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.49.131.124:6257, 167.8.144.191:6257}[33.3333%]&lt;BR/&gt;{86.89.159.196:6698, 212.24.20.11:6257}[33.3333%]&lt;BR/&gt;{86.89.159.196:6699, 167.8.144.191:1039}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (29.1667%)&lt;BR/&gt; 6257: (29.1667%)&lt;BR/&gt; 1039: (29.1667%)&lt;BR/&gt; 6698: (12.5%)&gt;];
}
120--680[label="1;1pkt 1fpkt"];
120--682[label="1;1pkt 1fpkt"];
120--3205[label="1;1pkt 1fpkt"];
120--3495[label="1;1pkt 1fpkt"];
120--5574[label="1;1pkt 1fpkt"];
120--7022[label="1;1pkt 1fpkt"];
680--682[label="0.5;1pkt 1fpkt"];
680--3205[label="1;1pkt 1fpkt"];
680--3495[label="1;2pkt 2fpkt"];
680--5574[label="0.5;1pkt 1fpkt"];
680--7022[label="0.5;1pkt 1fpkt"];
682--765[label="0.5;1pkt 1fpkt"];
682--3205[label="1;1pkt 1fpkt"];
682--3495[label="0.5;1pkt 1fpkt"];
682--5574[label="1;2pkt 2fpkt"];
682--7022[label="1;2pkt 2fpkt"];
3205--3495[label="1;1pkt 1fpkt"];
3205--5574[label="1;1pkt 1fpkt"];
3205--7022[label="1;1pkt 1fpkt"];
3495--5574[label="0.5;1pkt 1fpkt"];
3495--7022[label="0.5;1pkt 1fpkt"];
5574--7022[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.144.191" dst_port="1039" src_ip="86.89.159.196" src_port="6699"/>
      <filter dst_ip="212.24.20.11" dst_port="6257" src_ip="86.89.159.196" src_port="6698"/>
      <filter dst_ip="167.8.144.191" dst_port="6257" src_ip="3.49.131.124" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_399{
style=filled;
color=gray75;
1087[label="212.24.168.191;d;1pkt 1fpkt", shape=diamond, color=yellow];
3499[label="212.24.168.191;d;1pkt 1fpkt", shape=hexagon, color=black];
stat399[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.35.33.70:5001, 212.24.168.191:1150}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 1150: (50%)&gt;];
}
1087--3499[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.168.191" dst_port="1150" src_ip="1.35.33.70" src_port="5001"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_400{
style=filled;
color=gray75;
2360[label="211.17.215.61;s;1pkt 1fpkt", shape=diamond, color=yellow];
3507[label="211.17.215.61;s;1pkt 1fpkt", shape=hexagon, color=black];
stat400[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.17.215.61:6668, 136.230.78.34:1581}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6668: (50%)&lt;BR/&gt; 1581: (50%)&gt;];
}
2360--3507[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.230.78.34" dst_port="1581" src_ip="211.17.215.61" src_port="6668"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_401{
style=filled;
color=gray75;
1142[label="141.98.201.224;s;1pkt 1fpkt", shape=diamond, color=yellow];
1143[label="85.129.155.133;d;1pkt 1fpkt", shape=diamond, color=yellow];
2814[label="141.98.201.224;s;1pkt 1fpkt", shape=hexagon, color=black];
3509[label="85.129.155.133;d;1pkt 1fpkt", shape=hexagon, color=black];
3793[label="141.98.201.224;s;1pkt 1fpkt", shape=polygon, color=gold];
stat401[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.201.224:4861, 85.129.155.133:6080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6080: (50%)&lt;BR/&gt; 4861: (50%)&gt;];
}
1142--1143[label="1;1pkt 1fpkt"];
1142--2814[label="1;1pkt 1fpkt"];
1142--3509[label="1;1pkt 1fpkt"];
1142--3793[label="1;1pkt 1fpkt"];
1143--2814[label="1;1pkt 1fpkt"];
1143--3509[label="1;1pkt 1fpkt"];
1143--3793[label="1;1pkt 1fpkt"];
2814--3509[label="1;1pkt 1fpkt"];
2814--3793[label="1;1pkt 1fpkt"];
3509--3793[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="85.129.155.133" dst_port="6080" src_ip="141.98.201.224" src_port="4861"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_402{
style=filled;
color=gray75;
1359[label="86.135.44.185;s;13pkt 13fpkt", shape=diamond, color=yellow];
1999[label="86.135.44.176;s;18pkt 18fpkt", shape=diamond, color=yellow];
2364[label="136.230.121.253;d;34pkt 34fpkt", shape=diamond, color=yellow];
2381[label="86.135.44.130;s;23pkt 23fpkt", shape=diamond, color=yellow];
3287[label="86.135.44.176;s;11pkt 11fpkt", shape=hexagon, color=black];
3517[label="136.230.121.253;d;31pkt 31fpkt", shape=hexagon, color=black];
3651[label="136.230.112.86;d;34pkt 34fpkt", shape=hexagon, color=black];
5440[label="86.135.44.179;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5488[label="86.135.44.185;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat402[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:25}[80.8219%]&lt;BR/&gt;{*:*, 136.230.112.86:*}[23.2877%]&lt;BR/&gt;{*:*, 136.230.121.253:*}[23.2877%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.7143%)&lt;BR/&gt; 21: (2.14286%)&lt;BR/&gt; 5190: (1.42857%)&lt;BR/&gt; 38751: (0.952381%)&lt;BR/&gt; 5704: (0.952381%)&gt;];
}
1359--1679[label="0.0769231;1pkt 1fpkt"];
1359--2364[label="0.0769231;1pkt 1fpkt"];
1359--2578[label="0.0769231;1pkt 1fpkt"];
1359--3157[label="1;13pkt 13fpkt"];
1359--3517[label="0.0769231;1pkt 1fpkt"];
1359--5488[label="0.923077;12pkt 12fpkt"];
1999--2364[label="0.0555556;1pkt 1fpkt"];
1999--3287[label="1;11pkt 11fpkt"];
1999--3517[label="0.0555556;1pkt 1fpkt"];
1999--3651[label="0.0555556;1pkt 1fpkt"];
2364--2381[label="0.0869565;2pkt 2fpkt"];
2364--3157[label="0.0769231;1pkt 1fpkt"];
2364--3287[label="0.0909091;1pkt 1fpkt"];
2364--3454[label="0.0434783;1pkt 1fpkt"];
2364--3517[label="1;31pkt 31fpkt"];
2364--4809[label="0.0769231;1pkt 1fpkt"];
2364--5060[label="0.0833333;1pkt 1fpkt"];
2364--5106[label="0.111111;1pkt 1fpkt"];
2364--5329[label="0.05;1pkt 1fpkt"];
2364--5379[label="0.142857;1pkt 1fpkt"];
2364--5440[label="0.037037;1pkt 1fpkt"];
2364--5484[label="0.0434783;1pkt 1fpkt"];
2364--5488[label="0.105263;2pkt 2fpkt"];
2364--5492[label="0.111111;2pkt 2fpkt"];
2364--5506[label="0.125;2pkt 2fpkt"];
2364--6672[label="0.0833333;1pkt 1fpkt"];
2364--6707[label="0.111111;1pkt 1fpkt"];
2364--6864[label="0.047619;1pkt 1fpkt"];
2364--6895[label="0.166667;1pkt 1fpkt"];
2364--6936[label="0.037037;1pkt 1fpkt"];
2364--6959[label="0.0454545;1pkt 1fpkt"];
2364--6964[label="0.111111;2pkt 2fpkt"];
2364--6974[label="0.133333;2pkt 2fpkt"];
2364--7841[label="0.047619;1pkt 1fpkt"];
2364--7861[label="0.142857;1pkt 1fpkt"];
2364--7895[label="0.0454545;1pkt 1fpkt"];
2364--7900[label="0.117647;2pkt 2fpkt"];
2381--3517[label="0.0869565;2pkt 2fpkt"];
3287--3517[label="0.0909091;1pkt 1fpkt"];
3287--3651[label="0.0909091;1pkt 1fpkt"];
3517--4809[label="0.0769231;1pkt 1fpkt"];
3517--5060[label="0.0833333;1pkt 1fpkt"];
3517--5106[label="0.111111;1pkt 1fpkt"];
3517--5379[label="0.142857;1pkt 1fpkt"];
3517--5440[label="0.037037;1pkt 1fpkt"];
3517--5484[label="0.0434783;1pkt 1fpkt"];
3517--5488[label="0.0526316;1pkt 1fpkt"];
3517--5492[label="0.111111;2pkt 2fpkt"];
3517--5506[label="0.125;2pkt 2fpkt"];
3517--6672[label="0.0833333;1pkt 1fpkt"];
3517--6707[label="0.111111;1pkt 1fpkt"];
3517--6895[label="0.166667;1pkt 1fpkt"];
3517--6936[label="0.037037;1pkt 1fpkt"];
3517--6959[label="0.0454545;1pkt 1fpkt"];
3517--6964[label="0.111111;2pkt 2fpkt"];
3517--6974[label="0.133333;2pkt 2fpkt"];
3517--7861[label="0.142857;1pkt 1fpkt"];
3517--7895[label="0.0454545;1pkt 1fpkt"];
3517--7900[label="0.117647;2pkt 2fpkt"];
3651--3829[label="0.142857;1pkt 1fpkt"];
3651--5060[label="0.0833333;1pkt 1fpkt"];
3651--5387[label="0.185185;5pkt 5fpkt"];
3651--5440[label="0.111111;3pkt 3fpkt"];
3651--5492[label="0.0555556;1pkt 1fpkt"];
3651--6672[label="0.0833333;1pkt 1fpkt"];
3651--6900[label="0.185185;5pkt 5fpkt"];
3651--6936[label="0.111111;3pkt 3fpkt"];
3651--6964[label="0.0555556;1pkt 1fpkt"];
5440--6936[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="136.230.121.253"/>
      <filter dst_ip="136.230.112.86"/>
      <filter dst_port="25"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_403{
style=filled;
color=gray75;
897[label="141.98.120.64;s;31pkt 31fpkt", shape=diamond, color=yellow];
898[label="197.77.95.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
3248[label="197.77.95.38;d;1pkt 1fpkt", shape=hexagon, color=black];
3521[label="141.98.120.64;s;30pkt 30fpkt", shape=hexagon, color=black];
stat403[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.120.64:*, 197.58.48.178:80}[38.7097%]&lt;BR/&gt;{141.98.120.64:*, 209.199.148.149:80}[25.8065%]&lt;BR/&gt;{141.98.120.64:*, 209.199.236.162:80}[25.8065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.8254%)&lt;BR/&gt; 3630: (3.1746%)&lt;BR/&gt; 1755: (3.1746%)&lt;BR/&gt; 3748: (1.5873%)&lt;BR/&gt; 3729: (1.5873%)&gt;];
}
897--898[label="1;1pkt 1fpkt"];
897--1806[label="0.258065;8pkt 8fpkt"];
897--3248[label="1;1pkt 1fpkt"];
897--3521[label="1;30pkt 30fpkt"];
897--3574[label="0.258065;8pkt 8fpkt"];
897--4533[label="1;31pkt 31fpkt"];
898--3248[label="1;1pkt 1fpkt"];
898--3521[label="1;1pkt 1fpkt"];
898--4533[label="1;1pkt 1fpkt"];
3248--3521[label="1;1pkt 1fpkt"];
3248--4533[label="1;1pkt 1fpkt"];
3521--3574[label="0.266667;8pkt 8fpkt"];
3521--4533[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="197.58.48.178" dst_port="80" src_ip="141.98.120.64"/>
      <filter dst_ip="209.199.236.162" dst_port="80" src_ip="141.98.120.64"/>
      <filter dst_ip="209.199.148.149" dst_port="80" src_ip="141.98.120.64"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_404{
style=filled;
color=gray75;
1946[label="167.8.140.204;d;1pkt 1fpkt", shape=diamond, color=yellow];
2050[label="130.16.145.128;s;1pkt 1fpkt", shape=diamond, color=yellow];
3526[label="167.8.140.204;d;1pkt 1fpkt", shape=hexagon, color=black];
stat404[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.16.145.128:3344, 167.8.140.204:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3344: (50%)&gt;];
}
1946--2050[label="1;1pkt 1fpkt"];
1946--3526[label="1;1pkt 1fpkt"];
2050--3526[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.140.204" dst_port="6699" src_ip="130.16.145.128" src_port="3344"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_405{
style=filled;
color=gray75;
1977[label="213.91.97.82;d;2pkt 2fpkt", shape=diamond, color=yellow];
2598[label="213.134.97.118;s;1pkt 1fpkt", shape=diamond, color=yellow];
3546[label="213.91.97.82;d;2pkt 2fpkt", shape=hexagon, color=black];
3924[label="213.91.97.82;d;2pkt 2fpkt", shape=polygon, color=gold];
stat405[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.134.97.118:0, 213.91.97.82:0}[50%]&lt;BR/&gt;{208.159.71.144:0, 213.91.97.82:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1977--2598[label="1;1pkt 1fpkt"];
1977--3546[label="1;2pkt 2fpkt"];
1977--3924[label="1;2pkt 2fpkt"];
2598--3546[label="1;1pkt 1fpkt"];
2598--3924[label="1;1pkt 1fpkt"];
3546--3924[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.91.97.82" src_ip="208.159.71.144"/>
      <filter dst_ip="213.91.97.82" src_ip="213.134.97.118"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_406{
style=filled;
color=gray75;
2403[label="43.202.240.205;d;200pkt 200fpkt", shape=diamond, color=yellow];
2404[label="161.238.208.135;s;210pkt 210fpkt", shape=diamond, color=yellow];
3547[label="43.202.240.205;d;175pkt 175fpkt", shape=hexagon, color=black];
stat406[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.208.135:8080, 43.202.240.205:*}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 4674: (0.34188%)&lt;BR/&gt; 4994: (0.25641%)&lt;BR/&gt; 4984: (0.25641%)&lt;BR/&gt; 4959: (0.25641%)&gt;];
}
2403--2404[label="1;200pkt 200fpkt"];
2403--3547[label="1;175pkt 175fpkt"];
2404--3547[label="1;175pkt 175fpkt"];
</description>
    <slice>
      <filter dst_ip="43.202.240.205" src_ip="161.238.208.135" src_port="8080"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_407{
style=filled;
color=gray75;
970[label="161.238.42.163;d;41pkt 41fpkt", shape=diamond, color=yellow];
1791[label="85.69.32.218;s;127pkt 127fpkt", shape=diamond, color=yellow];
2002[label="85.69.32.240;s;137pkt 137fpkt", shape=diamond, color=yellow];
2015[label="212.130.23.134;d;133pkt 133fpkt", shape=diamond, color=yellow];
2027[label="85.69.32.155;s;124pkt 124fpkt", shape=diamond, color=yellow];
2264[label="161.238.46.36;d;15pkt 15fpkt", shape=diamond, color=yellow];
2582[label="167.20.102.229;d;51pkt 51fpkt", shape=diamond, color=yellow];
3140[label="161.238.42.163;d;41pkt 41fpkt", shape=hexagon, color=black];
3560[label="85.69.32.240;s;119pkt 119fpkt", shape=hexagon, color=black];
3703[label="167.20.102.229;d;51pkt 51fpkt", shape=hexagon, color=black];
3886[label="212.130.23.134;d;133pkt 133fpkt", shape=polygon, color=gold];
4579[label="84.102.232.69;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4817[label="3.12.185.96;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5226[label="85.69.32.151;145pkt 145fpkt", shape=pentagon, color=darkviolet];
5401[label="85.146.160.173;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5710[label="85.69.32.218;150pkt 150fpkt", shape=pentagon, color=darkviolet];
5853[label="85.69.32.240;157pkt 157fpkt", shape=pentagon, color=darkviolet];
6505[label="3.12.185.96;3pkt 3fpkt", shape=invtriangle, color=brown];
6910[label="85.146.160.173;3pkt 3fpkt", shape=invtriangle, color=brown];
7114[label="85.69.32.218;151pkt 151fpkt", shape=invtriangle, color=brown];
7215[label="85.69.32.240;157pkt 157fpkt", shape=invtriangle, color=brown];
7608[label="3.12.185.96;3pkt 3fpkt", shape=invhouse, color=bisque];
7868[label="85.146.160.173;3pkt 3fpkt", shape=invhouse, color=bisque];
7996[label="85.69.32.218;150pkt 150fpkt", shape=invhouse, color=bisque];
8064[label="85.69.32.240;156pkt 156fpkt", shape=invhouse, color=bisque];
stat407[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[75.062%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.001%)&lt;BR/&gt; 53: (9.92274%)&lt;BR/&gt; 25: (1.71415%)&lt;BR/&gt; 32769: (0.386287%)&lt;BR/&gt; 13323: (0.217286%)&gt;];
}
970--1791[label="0.0243902;1pkt 1fpkt"];
970--2711[label="0.125;1pkt 1fpkt"];
970--3140[label="1;41pkt 41fpkt"];
970--3946[label="0.170732;7pkt 7fpkt"];
970--3959[label="0.170732;7pkt 7fpkt"];
970--3969[label="0.170732;7pkt 7fpkt"];
970--4579[label="0.133333;2pkt 2fpkt"];
970--5297[label="0.153846;4pkt 4fpkt"];
970--5455[label="0.025;1pkt 1fpkt"];
970--5529[label="0.0487805;2pkt 2fpkt"];
970--5603[label="0.365854;15pkt 15fpkt"];
970--5710[label="0.0243902;1pkt 1fpkt"];
970--6845[label="0.153846;4pkt 4fpkt"];
970--6991[label="0.0487805;2pkt 2fpkt"];
970--7037[label="0.365854;15pkt 15fpkt"];
970--7114[label="0.0243902;1pkt 1fpkt"];
970--7829[label="0.16;4pkt 4fpkt"];
970--7916[label="0.0487805;2pkt 2fpkt"];
970--7949[label="0.365854;15pkt 15fpkt"];
970--7996[label="0.0243902;1pkt 1fpkt"];
1791--2015[label="0.0708661;9pkt 9fpkt"];
1791--2437[label="0.0555556;2pkt 2fpkt"];
1791--2976[label="0.0540541;6pkt 6fpkt"];
1791--3140[label="0.0243902;1pkt 1fpkt"];
1791--3236[label="0.025974;2pkt 2fpkt"];
1791--3421[label="0.0314961;4pkt 4fpkt"];
1791--3435[label="0.0708661;9pkt 9fpkt"];
1791--3886[label="0.0708661;9pkt 9fpkt"];
1791--3907[label="0.0314961;4pkt 4fpkt"];
1791--3945[label="0.015748;2pkt 2fpkt"];
1791--3946[label="0.0551181;7pkt 7fpkt"];
1791--3958[label="0.015748;2pkt 2fpkt"];
1791--3959[label="0.0551181;7pkt 7fpkt"];
1791--3968[label="0.015748;2pkt 2fpkt"];
1791--3969[label="0.0551181;7pkt 7fpkt"];
1791--5710[label="1;127pkt 127fpkt"];
1791--7114[label="1;127pkt 127fpkt"];
1791--7996[label="1;127pkt 127fpkt"];
2002--2015[label="0.0300752;4pkt 4fpkt"];
2002--2264[label="0.0666667;1pkt 1fpkt"];
2002--2410[label="0.00729927;1pkt 1fpkt"];
2002--2437[label="0.0833333;3pkt 3fpkt"];
2002--2544[label="0.016129;1pkt 1fpkt"];
2002--2551[label="0.0192308;1pkt 1fpkt"];
2002--2569[label="0.0121951;1pkt 1fpkt"];
2002--2582[label="0.0196078;1pkt 1fpkt"];
2002--2976[label="0.018018;2pkt 2fpkt"];
2002--3236[label="0.012987;1pkt 1fpkt"];
2002--3421[label="0.0145985;2pkt 2fpkt"];
2002--3435[label="0.0300752;4pkt 4fpkt"];
2002--3560[label="1;119pkt 119fpkt"];
2002--3654[label="0.0192308;1pkt 1fpkt"];
2002--3687[label="0.0121951;1pkt 1fpkt"];
2002--3703[label="0.0196078;1pkt 1fpkt"];
2002--3886[label="0.0300752;4pkt 4fpkt"];
2002--3907[label="0.0145985;2pkt 2fpkt"];
2002--3941[label="0.00729927;1pkt 1fpkt"];
2002--3945[label="0.0656934;9pkt 9fpkt"];
2002--3946[label="0.0510949;7pkt 7fpkt"];
2002--3954[label="0.00729927;1pkt 1fpkt"];
2002--3958[label="0.0656934;9pkt 9fpkt"];
2002--3959[label="0.0510949;7pkt 7fpkt"];
2002--3964[label="0.00729927;1pkt 1fpkt"];
2002--3968[label="0.0656934;9pkt 9fpkt"];
2002--3969[label="0.0510949;7pkt 7fpkt"];
2002--5853[label="1;137pkt 137fpkt"];
2002--7215[label="1;137pkt 137fpkt"];
2002--8064[label="0.992701;136pkt 136fpkt"];
2015--2023[label="0.0526316;7pkt 7fpkt"];
2015--2027[label="0.0241935;3pkt 3fpkt"];
2015--2203[label="0.0173913;2pkt 2fpkt"];
2015--2216[label="0.00892857;1pkt 1fpkt"];
2015--2224[label="0.0075188;1pkt 1fpkt"];
2015--2230[label="0.036036;4pkt 4fpkt"];
2015--2234[label="0.0508475;6pkt 6fpkt"];
2015--2236[label="0.0373832;4pkt 4fpkt"];
2015--2440[label="0.027027;3pkt 3fpkt"];
2015--2867[label="0.0714286;7pkt 7fpkt"];
2015--3431[label="0.00925926;1pkt 1fpkt"];
2015--3433[label="0.036036;4pkt 4fpkt"];
2015--3435[label="1;133pkt 133fpkt"];
2015--3560[label="0.0252101;3pkt 3fpkt"];
2015--3718[label="0.0241935;3pkt 3fpkt"];
2015--3800[label="0.0821918;6pkt 6fpkt"];
2015--3886[label="1;133pkt 133fpkt"];
2015--3941[label="0.0075188;1pkt 1fpkt"];
2015--3946[label="0.075188;10pkt 10fpkt"];
2015--3949[label="0.0150376;2pkt 2fpkt"];
2015--3954[label="0.0075188;1pkt 1fpkt"];
2015--3959[label="0.075188;10pkt 10fpkt"];
2015--3964[label="0.0075188;1pkt 1fpkt"];
2015--3969[label="0.075188;10pkt 10fpkt"];
2015--4288[label="0.0625;2pkt 2fpkt"];
2015--4289[label="0.0285714;1pkt 1fpkt"];
2015--4395[label="0.4;2pkt 2fpkt"];
2015--5174[label="0.0472441;6pkt 6fpkt"];
2015--5207[label="0.0263158;3pkt 3fpkt"];
2015--5226[label="0.0225564;3pkt 3fpkt"];
2015--5250[label="0.0234375;3pkt 3fpkt"];
2015--5503[label="0.202128;19pkt 19fpkt"];
2015--5616[label="0.034188;4pkt 4fpkt"];
2015--5652[label="0.0325203;4pkt 4fpkt"];
2015--5665[label="0.0225564;3pkt 3fpkt"];
2015--5672[label="0.0150376;2pkt 2fpkt"];
2015--5710[label="0.0676692;9pkt 9fpkt"];
2015--5740[label="0.0526316;7pkt 7fpkt"];
2015--5823[label="0.0526316;7pkt 7fpkt"];
2015--5853[label="0.0300752;4pkt 4fpkt"];
2015--6167[label="0.0285714;1pkt 1fpkt"];
2015--6757[label="0.0472441;6pkt 6fpkt"];
2015--6779[label="0.0263158;3pkt 3fpkt"];
2015--7047[label="0.034188;4pkt 4fpkt"];
2015--7074[label="0.0325203;4pkt 4fpkt"];
2015--7085[label="0.0225564;3pkt 3fpkt"];
2015--7091[label="0.0150376;2pkt 2fpkt"];
2015--7114[label="0.0676692;9pkt 9fpkt"];
2015--7190[label="0.0526316;7pkt 7fpkt"];
2015--7215[label="0.0300752;4pkt 4fpkt"];
2015--7768[label="0.0472441;6pkt 6fpkt"];
2015--7781[label="0.026087;3pkt 3fpkt"];
2015--7957[label="0.0338983;4pkt 4fpkt"];
2015--7979[label="0.0225564;3pkt 3fpkt"];
2015--7996[label="0.0676692;9pkt 9fpkt"];
2015--8045[label="0.0526316;7pkt 7fpkt"];
2015--8064[label="0.0300752;4pkt 4fpkt"];
2027--2544[label="0.0322581;2pkt 2fpkt"];
2027--2582[label="0.0392157;2pkt 2fpkt"];
2027--2976[label="0.027027;3pkt 3fpkt"];
2027--3421[label="0.016129;2pkt 2fpkt"];
2027--3435[label="0.0241935;3pkt 3fpkt"];
2027--3703[label="0.0392157;2pkt 2fpkt"];
2027--3718[label="1;124pkt 124fpkt"];
2027--3886[label="0.0241935;3pkt 3fpkt"];
2027--3907[label="0.016129;2pkt 2fpkt"];
2027--3945[label="0.0241935;3pkt 3fpkt"];
2027--3946[label="0.0967742;12pkt 12fpkt"];
2027--3958[label="0.0241935;3pkt 3fpkt"];
2027--3959[label="0.0967742;12pkt 12fpkt"];
2027--3968[label="0.0241935;3pkt 3fpkt"];
2027--3969[label="0.0967742;12pkt 12fpkt"];
2027--5250[label="1;124pkt 124fpkt"];
2264--3560[label="0.0666667;1pkt 1fpkt"];
2264--3946[label="0.0666667;1pkt 1fpkt"];
2264--3959[label="0.0666667;1pkt 1fpkt"];
2264--3969[label="0.0666667;1pkt 1fpkt"];
2264--4817[label="1;3pkt 3fpkt"];
2264--5401[label="1;3pkt 3fpkt"];
2264--5455[label="0.0666667;1pkt 1fpkt"];
2264--5853[label="0.0666667;1pkt 1fpkt"];
2264--6505[label="1;3pkt 3fpkt"];
2264--6910[label="1;3pkt 3fpkt"];
2264--7215[label="0.0666667;1pkt 1fpkt"];
2264--7608[label="1;3pkt 3fpkt"];
2264--7868[label="1;3pkt 3fpkt"];
2264--8064[label="0.0666667;1pkt 1fpkt"];
2582--3130[label="0.0833333;1pkt 1fpkt"];
2582--3431[label="0.0196078;1pkt 1fpkt"];
2582--3433[label="0.0196078;1pkt 1fpkt"];
2582--3560[label="0.0196078;1pkt 1fpkt"];
2582--3703[label="1;51pkt 51fpkt"];
2582--3718[label="0.0392157;2pkt 2fpkt"];
2582--3946[label="0.27451;14pkt 14fpkt"];
2582--3959[label="0.27451;14pkt 14fpkt"];
2582--3969[label="0.27451;14pkt 14fpkt"];
2582--4265[label="0.0454545;1pkt 1fpkt"];
2582--4884[label="0.0909091;1pkt 1fpkt"];
2582--5174[label="0.0588235;3pkt 3fpkt"];
2582--5207[label="0.0196078;1pkt 1fpkt"];
2582--5217[label="0.0196078;1pkt 1fpkt"];
2582--5250[label="0.0392157;2pkt 2fpkt"];
2582--5616[label="0.0196078;1pkt 1fpkt"];
2582--5641[label="1;8pkt 8fpkt"];
2582--5853[label="0.0196078;1pkt 1fpkt"];
2582--6148[label="0.0454545;1pkt 1fpkt"];
2582--6757[label="0.0588235;3pkt 3fpkt"];
2582--6779[label="0.0196078;1pkt 1fpkt"];
2582--6788[label="0.0196078;1pkt 1fpkt"];
2582--7047[label="0.0196078;1pkt 1fpkt"];
2582--7064[label="1;7pkt 7fpkt"];
2582--7215[label="0.0196078;1pkt 1fpkt"];
2582--7392[label="0.0454545;1pkt 1fpkt"];
2582--7768[label="0.0588235;3pkt 3fpkt"];
2582--7781[label="0.0196078;1pkt 1fpkt"];
2582--7788[label="0.0196078;1pkt 1fpkt"];
2582--7957[label="0.0196078;1pkt 1fpkt"];
2582--7967[label="1;7pkt 7fpkt"];
2582--8064[label="0.0196078;1pkt 1fpkt"];
3140--3946[label="0.170732;7pkt 7fpkt"];
3140--3959[label="0.170732;7pkt 7fpkt"];
3140--3969[label="0.170732;7pkt 7fpkt"];
3140--4579[label="0.133333;2pkt 2fpkt"];
3140--5297[label="0.153846;4pkt 4fpkt"];
3140--5455[label="0.025;1pkt 1fpkt"];
3140--5529[label="0.0487805;2pkt 2fpkt"];
3140--5603[label="0.365854;15pkt 15fpkt"];
3140--5710[label="0.0243902;1pkt 1fpkt"];
3140--6845[label="0.153846;4pkt 4fpkt"];
3140--6991[label="0.0487805;2pkt 2fpkt"];
3140--7037[label="0.365854;15pkt 15fpkt"];
3140--7114[label="0.0243902;1pkt 1fpkt"];
3140--7829[label="0.16;4pkt 4fpkt"];
3140--7916[label="0.0487805;2pkt 2fpkt"];
3140--7949[label="0.365854;15pkt 15fpkt"];
3140--7996[label="0.0243902;1pkt 1fpkt"];
3560--3654[label="0.0192308;1pkt 1fpkt"];
3560--3703[label="0.0196078;1pkt 1fpkt"];
3560--3886[label="0.0252101;3pkt 3fpkt"];
3560--3907[label="0.0168067;2pkt 2fpkt"];
3560--3941[label="0.00840336;1pkt 1fpkt"];
3560--3945[label="0.0756303;9pkt 9fpkt"];
3560--3946[label="0.0588235;7pkt 7fpkt"];
3560--3954[label="0.00840336;1pkt 1fpkt"];
3560--3958[label="0.0756303;9pkt 9fpkt"];
3560--3959[label="0.0588235;7pkt 7fpkt"];
3560--3964[label="0.00840336;1pkt 1fpkt"];
3560--3968[label="0.0756303;9pkt 9fpkt"];
3560--3969[label="0.0588235;7pkt 7fpkt"];
3560--5853[label="1;119pkt 119fpkt"];
3560--7215[label="1;119pkt 119fpkt"];
3560--8064[label="0.991597;118pkt 118fpkt"];
3703--3718[label="0.0392157;2pkt 2fpkt"];
3703--3946[label="0.27451;14pkt 14fpkt"];
3703--3959[label="0.27451;14pkt 14fpkt"];
3703--3969[label="0.27451;14pkt 14fpkt"];
3703--4265[label="0.0454545;1pkt 1fpkt"];
3703--4884[label="0.0909091;1pkt 1fpkt"];
3703--5174[label="0.0588235;3pkt 3fpkt"];
3703--5207[label="0.0196078;1pkt 1fpkt"];
3703--5217[label="0.0196078;1pkt 1fpkt"];
3703--5250[label="0.0392157;2pkt 2fpkt"];
3703--5616[label="0.0196078;1pkt 1fpkt"];
3703--5641[label="1;8pkt 8fpkt"];
3703--5853[label="0.0196078;1pkt 1fpkt"];
3703--6148[label="0.0454545;1pkt 1fpkt"];
3703--6757[label="0.0588235;3pkt 3fpkt"];
3703--6779[label="0.0196078;1pkt 1fpkt"];
3703--6788[label="0.0196078;1pkt 1fpkt"];
3703--7047[label="0.0196078;1pkt 1fpkt"];
3703--7064[label="1;7pkt 7fpkt"];
3703--7215[label="0.0196078;1pkt 1fpkt"];
3703--7392[label="0.0454545;1pkt 1fpkt"];
3703--7768[label="0.0588235;3pkt 3fpkt"];
3703--7781[label="0.0196078;1pkt 1fpkt"];
3703--7788[label="0.0196078;1pkt 1fpkt"];
3703--7957[label="0.0196078;1pkt 1fpkt"];
3703--7967[label="1;7pkt 7fpkt"];
3703--8064[label="0.0196078;1pkt 1fpkt"];
3886--3941[label="0.0075188;1pkt 1fpkt"];
3886--3946[label="0.075188;10pkt 10fpkt"];
3886--3949[label="0.0150376;2pkt 2fpkt"];
3886--3954[label="0.0075188;1pkt 1fpkt"];
3886--3959[label="0.075188;10pkt 10fpkt"];
3886--3964[label="0.0075188;1pkt 1fpkt"];
3886--3969[label="0.075188;10pkt 10fpkt"];
3886--4288[label="0.0625;2pkt 2fpkt"];
3886--4289[label="0.0285714;1pkt 1fpkt"];
3886--4395[label="0.4;2pkt 2fpkt"];
3886--5174[label="0.0472441;6pkt 6fpkt"];
3886--5207[label="0.0263158;3pkt 3fpkt"];
3886--5226[label="0.0225564;3pkt 3fpkt"];
3886--5250[label="0.0234375;3pkt 3fpkt"];
3886--5503[label="0.202128;19pkt 19fpkt"];
3886--5616[label="0.034188;4pkt 4fpkt"];
3886--5652[label="0.0325203;4pkt 4fpkt"];
3886--5665[label="0.0225564;3pkt 3fpkt"];
3886--5672[label="0.0150376;2pkt 2fpkt"];
3886--5710[label="0.0676692;9pkt 9fpkt"];
3886--5740[label="0.0526316;7pkt 7fpkt"];
3886--5823[label="0.0526316;7pkt 7fpkt"];
3886--5853[label="0.0300752;4pkt 4fpkt"];
3886--6167[label="0.0285714;1pkt 1fpkt"];
3886--6757[label="0.0472441;6pkt 6fpkt"];
3886--6779[label="0.0263158;3pkt 3fpkt"];
3886--7047[label="0.034188;4pkt 4fpkt"];
3886--7074[label="0.0325203;4pkt 4fpkt"];
3886--7085[label="0.0225564;3pkt 3fpkt"];
3886--7091[label="0.0150376;2pkt 2fpkt"];
3886--7114[label="0.0676692;9pkt 9fpkt"];
3886--7190[label="0.0526316;7pkt 7fpkt"];
3886--7215[label="0.0300752;4pkt 4fpkt"];
3886--7768[label="0.0472441;6pkt 6fpkt"];
3886--7781[label="0.026087;3pkt 3fpkt"];
3886--7957[label="0.0338983;4pkt 4fpkt"];
3886--7979[label="0.0225564;3pkt 3fpkt"];
3886--7996[label="0.0676692;9pkt 9fpkt"];
3886--8045[label="0.0526316;7pkt 7fpkt"];
3886--8064[label="0.0300752;4pkt 4fpkt"];
4817--6505[label="1;3pkt 3fpkt"];
4817--7608[label="1;3pkt 3fpkt"];
5401--6910[label="1;3pkt 3fpkt"];
5401--7868[label="1;3pkt 3fpkt"];
5710--7114[label="1;150pkt 150fpkt"];
5710--7996[label="1;150pkt 150fpkt"];
5853--7215[label="1;157pkt 157fpkt"];
5853--8064[label="1;156pkt 156fpkt"];
6505--7608[label="1;3pkt 3fpkt"];
6910--7868[label="1;3pkt 3fpkt"];
7114--7996[label="1;150pkt 150fpkt"];
7215--8064[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_408{
style=filled;
color=gray75;
962[label="210.150.67.191;d;1pkt 1fpkt", shape=diamond, color=yellow];
965[label="167.8.167.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
3291[label="167.8.167.180;s;1pkt 1fpkt", shape=hexagon, color=black];
3562[label="210.150.67.191;d;1pkt 1fpkt", shape=hexagon, color=black];
3908[label="167.8.167.180;s;1pkt 1fpkt", shape=polygon, color=gold];
stat408[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.167.180:49188, 210.150.67.191:8002}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49188: (50%)&lt;BR/&gt; 8002: (50%)&gt;];
}
962--965[label="1;1pkt 1fpkt"];
962--3291[label="1;1pkt 1fpkt"];
962--3562[label="1;1pkt 1fpkt"];
962--3908[label="1;1pkt 1fpkt"];
965--3291[label="1;1pkt 1fpkt"];
965--3562[label="1;1pkt 1fpkt"];
965--3908[label="1;1pkt 1fpkt"];
3291--3562[label="1;1pkt 1fpkt"];
3291--3908[label="1;1pkt 1fpkt"];
3562--3908[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.150.67.191" dst_port="8002" src_ip="167.8.167.180" src_port="49188"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_409{
style=filled;
color=gray75;
1581[label="201.147.77.160;s;9pkt 9fpkt", shape=diamond, color=yellow];
3572[label="201.147.77.160;s;9pkt 9fpkt", shape=hexagon, color=black];
stat409[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.147.77.160:7743, 212.24.9.10:*}[55.5556%]&lt;BR/&gt;{201.147.77.160:*, 212.24.9.10:53}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (27.7778%)&lt;BR/&gt; 53: (22.2222%)&lt;BR/&gt; 12196: (5.55556%)&lt;BR/&gt; 12191: (5.55556%)&lt;BR/&gt; 12186: (5.55556%)&gt;];
}
1581--3572[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.9.10" src_ip="201.147.77.160" src_port="7743"/>
      <filter dst_ip="212.24.9.10" dst_port="53" src_ip="201.147.77.160"/>
    </slice>
    <from sec="1034226010" usec="0"/>
    <to sec="1034226737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_410{
style=filled;
color=gray75;
2235[label="167.8.136.128;s;40pkt 40fpkt", shape=diamond, color=yellow];
2249[label="197.121.164.52;d;39pkt 39fpkt", shape=diamond, color=yellow];
3439[label="167.8.136.128;s;40pkt 40fpkt", shape=hexagon, color=black];
3577[label="197.121.164.52;d;36pkt 36fpkt", shape=hexagon, color=black];
5034[label="167.8.136.128;39pkt 39fpkt", shape=pentagon, color=darkviolet];
6654[label="167.8.136.128;40pkt 40fpkt", shape=invtriangle, color=brown];
7706[label="167.8.136.128;39pkt 39fpkt", shape=invhouse, color=bisque];
stat410[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.136.128:*, 197.121.164.52:80}[97.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0842%)&lt;BR/&gt; 2043: (1.28205%)&lt;BR/&gt; 2041: (1.28205%)&lt;BR/&gt; 2039: (1.28205%)&lt;BR/&gt; 2037: (1.28205%)&gt;];
}
2235--2249[label="1;39pkt 39fpkt"];
2235--3439[label="1;40pkt 40fpkt"];
2235--3577[label="1;36pkt 36fpkt"];
2235--3946[label="0.1;4pkt 4fpkt"];
2235--3959[label="0.1;4pkt 4fpkt"];
2235--3969[label="0.1;4pkt 4fpkt"];
2235--5034[label="1;39pkt 39fpkt"];
2235--6654[label="1;40pkt 40fpkt"];
2235--7706[label="1;39pkt 39fpkt"];
2249--3439[label="1;39pkt 39fpkt"];
2249--3577[label="1;36pkt 36fpkt"];
2249--3946[label="0.102564;4pkt 4fpkt"];
2249--3959[label="0.102564;4pkt 4fpkt"];
2249--3969[label="0.102564;4pkt 4fpkt"];
2249--5034[label="0.974359;38pkt 38fpkt"];
2249--6654[label="1;39pkt 39fpkt"];
2249--7706[label="0.974359;38pkt 38fpkt"];
3439--3577[label="1;36pkt 36fpkt"];
3439--3946[label="0.1;4pkt 4fpkt"];
3439--3959[label="0.1;4pkt 4fpkt"];
3439--3969[label="0.1;4pkt 4fpkt"];
3439--5034[label="1;39pkt 39fpkt"];
3439--6654[label="1;40pkt 40fpkt"];
3439--7706[label="1;39pkt 39fpkt"];
3577--3946[label="0.111111;4pkt 4fpkt"];
3577--3959[label="0.111111;4pkt 4fpkt"];
3577--3969[label="0.111111;4pkt 4fpkt"];
3577--5034[label="0.972222;35pkt 35fpkt"];
3577--6654[label="1;36pkt 36fpkt"];
3577--7706[label="0.972222;35pkt 35fpkt"];
5034--6654[label="1;39pkt 39fpkt"];
5034--7706[label="1;39pkt 39fpkt"];
6654--7706[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="197.121.164.52" dst_port="80" src_ip="167.8.136.128"/>
    </slice>
    <from sec="1034226008" usec="0"/>
    <to sec="1034226730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_411{
style=filled;
color=gray75;
2252[label="202.33.209.151;s;3pkt 3fpkt", shape=diamond, color=yellow];
3578[label="202.33.209.151;s;3pkt 3fpkt", shape=hexagon, color=black];
5229[label="202.33.209.151;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6793[label="202.33.209.151;3pkt 3fpkt", shape=invtriangle, color=brown];
7791[label="202.33.209.151;2pkt 2fpkt", shape=invhouse, color=bisque];
stat411[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.33.209.151:1928, 185.191.187.231:4662}[33.3333%]&lt;BR/&gt;{202.33.209.151:4662, 185.191.187.231:1617}[33.3333%]&lt;BR/&gt;{202.33.209.151:4662, 185.191.187.231:1638}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 1638: (19.2308%)&lt;BR/&gt; 1617: (19.2308%)&lt;BR/&gt; 1928: (11.5385%)&gt;];
}
2252--2899[label="1;3pkt 3fpkt"];
2252--3578[label="1;3pkt 3fpkt"];
2252--5229[label="1;2pkt 2fpkt"];
2252--6793[label="1;3pkt 3fpkt"];
2252--7791[label="1;2pkt 2fpkt"];
3578--5229[label="1;2pkt 2fpkt"];
3578--6793[label="1;3pkt 3fpkt"];
3578--7791[label="1;2pkt 2fpkt"];
5229--6793[label="1;2pkt 2fpkt"];
5229--7791[label="1;2pkt 2fpkt"];
6793--7791[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.187.231" dst_port="1638" src_ip="202.33.209.151" src_port="4662"/>
      <filter dst_ip="185.191.187.231" dst_port="1617" src_ip="202.33.209.151" src_port="4662"/>
      <filter dst_ip="185.191.187.231" dst_port="4662" src_ip="202.33.209.151" src_port="1928"/>
    </slice>
    <from sec="1034226015" usec="0"/>
    <to sec="1034226746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_412{
style=filled;
color=gray75;
1825[label="185.191.16.131;s;9pkt 9fpkt", shape=diamond, color=yellow];
2085[label="85.8.72.39;d;2pkt 2fpkt", shape=diamond, color=yellow];
3461[label="85.8.72.39;d;2pkt 2fpkt", shape=hexagon, color=black];
3583[label="185.191.16.131;s;9pkt 9fpkt", shape=hexagon, color=black];
5058[label="185.191.16.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6671[label="185.191.16.131;1pkt 1fpkt", shape=invtriangle, color=brown];
stat412[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.16.131:*, 85.8.72.59:9000}[33.3333%]&lt;BR/&gt;{185.191.16.131:*, 85.8.72.39:3301}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3301: (20.8333%)&lt;BR/&gt; 9000: (12.5%)&lt;BR/&gt; 1868: (12.5%)&lt;BR/&gt; 1860: (8.33333%)&lt;BR/&gt; 15903: (4.16667%)&gt;];
}
1825--2085[label="1;2pkt 2fpkt"];
1825--3461[label="1;2pkt 2fpkt"];
1825--3583[label="1;9pkt 9fpkt"];
1825--5058[label="1;1pkt 1fpkt"];
1825--6671[label="1;1pkt 1fpkt"];
2085--3461[label="1;2pkt 2fpkt"];
2085--3583[label="1;2pkt 2fpkt"];
2085--5058[label="1;1pkt 1fpkt"];
2085--6671[label="1;1pkt 1fpkt"];
3461--3583[label="1;2pkt 2fpkt"];
3461--5058[label="1;1pkt 1fpkt"];
3461--6671[label="1;1pkt 1fpkt"];
3583--5058[label="1;1pkt 1fpkt"];
3583--6671[label="1;1pkt 1fpkt"];
5058--6671[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="85.8.72.59" dst_port="9000" src_ip="185.191.16.131"/>
      <filter dst_ip="85.8.72.39" dst_port="3301" src_ip="185.191.16.131"/>
    </slice>
    <from sec="1034226035" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_413{
style=filled;
color=gray75;
75[label="85.41.28.106s;1pkt 1fpkt", shape=rectangle, color=red];
748[label="85.41.28.106;s;4pkt 4fpkt", shape=diamond, color=yellow];
2273[label="161.238.66.57;d;9pkt 9fpkt", shape=diamond, color=yellow];
3592[label="161.238.66.57;d;9pkt 9fpkt", shape=hexagon, color=black];
4408[label="208.212.85.48;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4882[label="85.41.28.106;133pkt 133fpkt", shape=pentagon, color=darkviolet];
6242[label="208.212.85.48;3pkt 3fpkt", shape=invtriangle, color=brown];
6547[label="85.41.28.106;133pkt 133fpkt", shape=invtriangle, color=brown];
7452[label="208.212.85.48;3pkt 3fpkt", shape=invhouse, color=bisque];
stat413[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.41.28.106:*, 161.238.10.88:*}[93.4783%]&lt;BR/&gt;{*:80, *:*}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.1477%)&lt;BR/&gt; 6699: (4.69799%)&lt;BR/&gt; 53: (4.69799%)&lt;BR/&gt; 4662: (2.34899%)&lt;BR/&gt; 7743: (1.67785%)&gt;];
}
75--748[label="1;1pkt 1fpkt"];
75--2273[label="1;1pkt 1fpkt"];
75--3592[label="1;1pkt 1fpkt"];
75--4882[label="1;1pkt 1fpkt"];
75--6547[label="1;1pkt 1fpkt"];
748--2273[label="1;4pkt 4fpkt"];
748--3592[label="1;4pkt 4fpkt"];
748--4882[label="0.75;3pkt 3fpkt"];
748--6547[label="0.75;3pkt 3fpkt"];
2273--3592[label="1;9pkt 9fpkt"];
2273--4408[label="1;3pkt 3fpkt"];
2273--4882[label="0.444444;4pkt 4fpkt"];
2273--6242[label="1;3pkt 3fpkt"];
2273--6547[label="0.444444;4pkt 4fpkt"];
2273--7452[label="1;3pkt 3fpkt"];
3592--4408[label="1;3pkt 3fpkt"];
3592--4882[label="0.444444;4pkt 4fpkt"];
3592--6242[label="1;3pkt 3fpkt"];
3592--6547[label="0.444444;4pkt 4fpkt"];
3592--7452[label="1;3pkt 3fpkt"];
4408--6242[label="1;3pkt 3fpkt"];
4408--7452[label="1;3pkt 3fpkt"];
4882--6547[label="1;133pkt 133fpkt"];
6242--7452[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="161.238.10.88" src_ip="85.41.28.106"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.956891,2.11535,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_414{
style=filled;
color=gray75;
173[label="161.238.19.80s;3pkt 3fpkt", shape=rectangle, color=red];
2303[label="161.238.19.80;s;35pkt 35fpkt", shape=diamond, color=yellow];
2308[label="212.177.138.44;d;29pkt 29fpkt", shape=diamond, color=yellow];
3606[label="212.177.138.44;d;29pkt 29fpkt", shape=hexagon, color=black];
4677[label="161.238.19.80;48pkt 48fpkt", shape=pentagon, color=darkviolet];
stat414[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.19.80:*, 212.177.138.44:80}[59.1837%]&lt;BR/&gt;{161.238.19.80:*, *:443}[22.449%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4861%)&lt;BR/&gt; 443: (4.16667%)&lt;BR/&gt; 2082: (1.73611%)&lt;BR/&gt; 2106: (1.38889%)&lt;BR/&gt; 2105: (1.38889%)&gt;];
}
173--442[label="0.333333;1pkt 1fpkt"];
173--450[label="0.333333;1pkt 1fpkt"];
173--544[label="0.333333;1pkt 1fpkt"];
173--546[label="0.333333;1pkt 1fpkt"];
173--696[label="0.333333;1pkt 1fpkt"];
173--1061[label="1;1pkt 1fpkt"];
173--2303[label="0.333333;1pkt 1fpkt"];
173--2308[label="0.333333;1pkt 1fpkt"];
173--2915[label="0.333333;1pkt 1fpkt"];
173--3207[label="1;1pkt 1fpkt"];
173--3606[label="0.333333;1pkt 1fpkt"];
173--4677[label="0.666667;2pkt 2fpkt"];
173--5599[label="0.333333;1pkt 1fpkt"];
173--7034[label="0.333333;1pkt 1fpkt"];
173--7947[label="0.333333;1pkt 1fpkt"];
2303--2308[label="1;29pkt 29fpkt"];
2303--3606[label="1;29pkt 29fpkt"];
2303--4677[label="1;35pkt 35fpkt"];
2308--3606[label="1;29pkt 29fpkt"];
2308--4677[label="1;29pkt 29fpkt"];
3606--4677[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="161.238.19.80"/>
      <filter dst_ip="212.177.138.44" dst_port="80" src_ip="161.238.19.80"/>
    </slice>
    <from sec="1034226385" usec="0"/>
    <to sec="1034226777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_415{
style=filled;
color=gray75;
2310[label="87.97.36.112;s;1pkt 1fpkt", shape=diamond, color=yellow];
3609[label="87.97.36.112;s;1pkt 1fpkt", shape=hexagon, color=black];
stat415[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.97.36.112:33901, 167.8.168.20:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33901: (50%)&lt;BR/&gt; 6699: (50%)&gt;];
}
2310--3609[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.168.20" dst_port="6699" src_ip="87.97.36.112" src_port="33901"/>
    </slice>
    <from sec="1034226400" usec="0"/>
    <to sec="1034226737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25702,2.20707,503,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
718[label="212.24.24.210;s;119pkt 119fpkt", shape=diamond, color=yellow];
878[label="194.135.3.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
2072[label="195.144.231.27;d;2pkt 2fpkt", shape=diamond, color=yellow];
2507[label="195.144.231.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
2825[label="194.135.3.2;d;1pkt 1fpkt", shape=hexagon, color=black];
3588[label="195.144.231.27;d;2pkt 2fpkt", shape=hexagon, color=black];
3620[label="195.144.231.17;d;1pkt 1fpkt", shape=hexagon, color=black];
3938[label="195.144.231.17;d;1pkt 1fpkt", shape=polygon, color=gold];
5664[label="212.24.24.210;123pkt 123fpkt", shape=pentagon, color=darkviolet];
7084[label="212.24.24.210;122pkt 122fpkt", shape=invtriangle, color=brown];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.24.210:*, 195.202.5.138:80}[54.4715%]&lt;BR/&gt;{212.24.24.210:*, 195.202.5.161:80}[20.3252%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.9062%)&lt;BR/&gt; 10001: (1.60858%)&lt;BR/&gt; 8008: (1.60858%)&lt;BR/&gt; 1693: (0.80429%)&lt;BR/&gt; 1388: (0.670241%)&gt;];
}
718--878[label="1;1pkt 1fpkt"];
718--2072[label="1;2pkt 2fpkt"];
718--2507[label="1;1pkt 1fpkt"];
718--2825[label="1;1pkt 1fpkt"];
718--3588[label="1;2pkt 2fpkt"];
718--3620[label="1;1pkt 1fpkt"];
718--3938[label="1;1pkt 1fpkt"];
718--3946[label="0.0168067;2pkt 2fpkt"];
718--3959[label="0.0168067;2pkt 2fpkt"];
718--3969[label="0.0168067;2pkt 2fpkt"];
718--5664[label="1;119pkt 119fpkt"];
718--7084[label="0.991597;118pkt 118fpkt"];
878--2825[label="1;1pkt 1fpkt"];
878--5664[label="1;1pkt 1fpkt"];
878--7084[label="1;1pkt 1fpkt"];
2072--3588[label="1;2pkt 2fpkt"];
2072--5664[label="1;2pkt 2fpkt"];
2072--7084[label="1;2pkt 2fpkt"];
2507--3620[label="1;1pkt 1fpkt"];
2507--3938[label="1;1pkt 1fpkt"];
2507--5664[label="1;1pkt 1fpkt"];
2507--7084[label="1;1pkt 1fpkt"];
2825--5664[label="1;1pkt 1fpkt"];
2825--7084[label="1;1pkt 1fpkt"];
3588--5664[label="1;2pkt 2fpkt"];
3588--7084[label="1;2pkt 2fpkt"];
3620--3938[label="1;1pkt 1fpkt"];
3620--5664[label="1;1pkt 1fpkt"];
3620--7084[label="1;1pkt 1fpkt"];
3938--5664[label="1;1pkt 1fpkt"];
3938--7084[label="1;1pkt 1fpkt"];
5664--7084[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_ip="195.202.5.138" dst_port="80" src_ip="212.24.24.210"/>
      <filter dst_ip="195.202.5.161" dst_port="80" src_ip="212.24.24.210"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_417{
style=filled;
color=gray75;
2520[label="200.94.35.199;s;1pkt 1fpkt", shape=diamond, color=yellow];
3627[label="200.94.35.199;s;1pkt 1fpkt", shape=hexagon, color=black];
stat417[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.94.35.199:6699, 141.98.102.130:1463}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1463: (50%)&gt;];
}
2520--3627[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.102.130" dst_port="1463" src_ip="200.94.35.199" src_port="6699"/>
    </slice>
    <from sec="1034226523" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_418{
style=filled;
color=gray75;
705[label="212.18.107.131;s;1267pkt 1267fpkt", shape=diamond, color=yellow];
2601[label="136.230.77.172;s;27pkt 27fpkt", shape=diamond, color=yellow];
3050[label="212.18.107.131;s;1267pkt 1267fpkt", shape=hexagon, color=black];
3558[label="86.135.44.176;d;17pkt 17fpkt", shape=hexagon, color=black];
5287[label="136.230.78.160;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5392[label="136.230.77.172;31pkt 31fpkt", shape=pentagon, color=darkviolet];
6836[label="136.230.78.160;19pkt 19fpkt", shape=invtriangle, color=brown];
6903[label="136.230.77.172;30pkt 30fpkt", shape=invtriangle, color=brown];
7824[label="136.230.78.160;19pkt 19fpkt", shape=invhouse, color=bisque];
7863[label="136.230.77.172;31pkt 31fpkt", shape=invhouse, color=bisque];
stat418[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.18.107.131:0, *:0}[95.1916%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.546%)&lt;BR/&gt; 25: (1.70517%)&lt;BR/&gt; 80: (1.39347%)&lt;BR/&gt; 40823: (0.0916758%)&lt;BR/&gt; 58341: (0.0733407%)&gt;];
}
705--1269[label="0.0020284;1pkt 1fpkt"];
705--1771[label="0.0243902;1pkt 1fpkt"];
705--1998[label="0.0588235;1pkt 1fpkt"];
705--2068[label="0.0333333;1pkt 1fpkt"];
705--2380[label="0.0434783;1pkt 1fpkt"];
705--2616[label="0.1;1pkt 1fpkt"];
705--3050[label="1;1267pkt 1267fpkt"];
705--3558[label="0.0588235;1pkt 1fpkt"];
2601--3558[label="0.0588235;1pkt 1fpkt"];
2601--3950[label="0.037037;1pkt 1fpkt"];
2601--5392[label="1;27pkt 27fpkt"];
2601--6903[label="0.962963;26pkt 26fpkt"];
2601--7863[label="1;27pkt 27fpkt"];
3050--3558[label="0.0588235;1pkt 1fpkt"];
3558--3631[label="0.0588235;1pkt 1fpkt"];
3558--3653[label="0.0588235;1pkt 1fpkt"];
3558--3914[label="0.0588235;1pkt 1fpkt"];
3558--4101[label="0.117647;2pkt 2fpkt"];
3558--4134[label="0.0588235;1pkt 1fpkt"];
3558--4525[label="0.0588235;1pkt 1fpkt"];
3558--4744[label="0.0588235;1pkt 1fpkt"];
3558--5264[label="0.111111;1pkt 1fpkt"];
3558--5287[label="0.0588235;1pkt 1fpkt"];
3558--5392[label="0.0588235;1pkt 1fpkt"];
3558--5516[label="0.0588235;1pkt 1fpkt"];
3558--6035[label="0.117647;2pkt 2fpkt"];
3558--6058[label="0.0588235;1pkt 1fpkt"];
3558--6318[label="0.0588235;1pkt 1fpkt"];
3558--6458[label="0.0588235;1pkt 1fpkt"];
3558--6819[label="0.111111;1pkt 1fpkt"];
3558--6836[label="0.0588235;1pkt 1fpkt"];
3558--6903[label="0.0588235;1pkt 1fpkt"];
3558--6981[label="0.0588235;1pkt 1fpkt"];
3558--7504[label="0.0588235;1pkt 1fpkt"];
3558--7812[label="0.111111;1pkt 1fpkt"];
3558--7824[label="0.0588235;1pkt 1fpkt"];
3558--7863[label="0.0588235;1pkt 1fpkt"];
5287--6836[label="1;19pkt 19fpkt"];
5287--7824[label="1;19pkt 19fpkt"];
5392--6903[label="1;30pkt 30fpkt"];
5392--7863[label="1;31pkt 31fpkt"];
6836--7824[label="1;19pkt 19fpkt"];
6903--7863[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="212.18.107.131"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_419{
style=filled;
color=gray75;
2137[label="1.169.198.172;s;4pkt 4fpkt", shape=diamond, color=yellow];
2352[label="136.230.104.81;d;1pkt 1fpkt", shape=diamond, color=yellow];
3632[label="136.230.104.81;d;1pkt 1fpkt", shape=hexagon, color=black];
stat419[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.169.198.172:6666, 136.230.104.81:1091}[25%]&lt;BR/&gt;{1.169.198.172:6665, 212.18.104.28:65037}[25%]&lt;BR/&gt;{1.169.198.172:36091, 212.18.104.28:113}[25%]&lt;BR/&gt;{1.169.198.172:6666, 212.18.104.28:63906}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6666: (33.3333%)&lt;BR/&gt; 1091: (25%)&lt;BR/&gt; 65037: (8.33333%)&lt;BR/&gt; 63906: (8.33333%)&lt;BR/&gt; 36091: (8.33333%)&gt;];
}
2137--2352[label="1;1pkt 1fpkt"];
2137--3632[label="1;1pkt 1fpkt"];
2352--3632[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.104.28" dst_port="63906" src_ip="1.169.198.172" src_port="6666"/>
      <filter dst_ip="212.18.104.28" dst_port="113" src_ip="1.169.198.172" src_port="36091"/>
      <filter dst_ip="212.18.104.28" dst_port="65037" src_ip="1.169.198.172" src_port="6665"/>
      <filter dst_ip="136.230.104.81" dst_port="1091" src_ip="1.169.198.172" src_port="6666"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,999,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_420{
style=filled;
color=gray75;
11[label="167.8.168.20s;4pkt 4fpkt", shape=rectangle, color=red];
730[label="81.113.141.220;d;6pkt 6fpkt", shape=diamond, color=yellow];
732[label="167.8.168.20;s;14pkt 14fpkt", shape=diamond, color=yellow];
1055[label="43.160.227.80;s;1pkt 1fpkt", shape=diamond, color=yellow];
1105[label="1.49.247.29;s;1pkt 1fpkt", shape=diamond, color=yellow];
1327[label="87.78.226.157;d;3pkt 3fpkt", shape=diamond, color=yellow];
1421[label="167.8.138.144;d;13pkt 13fpkt", shape=diamond, color=yellow];
2493[label="87.97.36.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
2517[label="86.177.171.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
2703[label="167.8.168.20;s;13pkt 13fpkt", shape=hexagon, color=black];
2913[label="167.8.138.144;d;7pkt 7fpkt", shape=hexagon, color=black];
3065[label="1.49.247.29;s;1pkt 1fpkt", shape=hexagon, color=black];
3422[label="87.78.226.157;d;3pkt 3fpkt", shape=hexagon, color=black];
3608[label="87.97.36.112;d;1pkt 1fpkt", shape=hexagon, color=black];
3635[label="81.113.141.220;d;6pkt 6fpkt", shape=hexagon, color=black];
3826[label="1.49.247.29;s;1pkt 1fpkt", shape=polygon, color=gold];
4156[label="167.8.168.20;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6074[label="167.8.168.20;14pkt 14fpkt", shape=invtriangle, color=brown];
7233[label="1.2.155.245;1pkt 1fpkt", shape=invtriangle, color=brown];
7348[label="167.8.168.20;15pkt 15fpkt", shape=invhouse, color=bisque];
7564[label="43.160.227.80;1pkt 1fpkt", shape=invhouse, color=bisque];
stat420[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.168.20:*, 81.113.141.220:6699}[25%]&lt;BR/&gt;{*:80, 167.8.138.144:*}[25%]&lt;BR/&gt;{167.8.168.20:6699, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (45.0413%)&lt;BR/&gt; 3902: (3.30579%)&lt;BR/&gt; 3899: (3.30579%)&lt;BR/&gt; 80: (3.30579%)&lt;BR/&gt; 33901: (2.89256%)&gt;];
}
11--442[label="0.25;1pkt 1fpkt"];
11--544[label="0.25;1pkt 1fpkt"];
11--730[label="0.5;2pkt 2fpkt"];
11--732[label="0.75;3pkt 3fpkt"];
11--1105[label="1;1pkt 1fpkt"];
11--1421[label="0.25;1pkt 1fpkt"];
11--2517[label="1;1pkt 1fpkt"];
11--2703[label="0.75;3pkt 3fpkt"];
11--2913[label="0.25;1pkt 1fpkt"];
11--3065[label="1;1pkt 1fpkt"];
11--3635[label="0.5;2pkt 2fpkt"];
11--3826[label="1;1pkt 1fpkt"];
11--4156[label="0.75;3pkt 3fpkt"];
11--6074[label="0.75;3pkt 3fpkt"];
11--7348[label="0.75;3pkt 3fpkt"];
730--732[label="1;6pkt 6fpkt"];
730--2703[label="0.833333;5pkt 5fpkt"];
730--3635[label="1;6pkt 6fpkt"];
730--4156[label="1;6pkt 6fpkt"];
730--6074[label="1;6pkt 6fpkt"];
730--7348[label="1;6pkt 6fpkt"];
732--1327[label="1;3pkt 3fpkt"];
732--2493[label="1;1pkt 1fpkt"];
732--2517[label="1;1pkt 1fpkt"];
732--2703[label="1;13pkt 13fpkt"];
732--3422[label="1;3pkt 3fpkt"];
732--3608[label="1;1pkt 1fpkt"];
732--3635[label="1;6pkt 6fpkt"];
732--4156[label="0.928571;13pkt 13fpkt"];
732--6074[label="0.928571;13pkt 13fpkt"];
732--7348[label="1;14pkt 14fpkt"];
1055--1421[label="1;1pkt 1fpkt"];
1055--2913[label="1;1pkt 1fpkt"];
1055--7564[label="1;1pkt 1fpkt"];
1105--1421[label="1;1pkt 1fpkt"];
1105--2913[label="1;1pkt 1fpkt"];
1105--3065[label="1;1pkt 1fpkt"];
1105--3826[label="1;1pkt 1fpkt"];
1327--2703[label="1;3pkt 3fpkt"];
1327--3422[label="1;3pkt 3fpkt"];
1327--4156[label="1;3pkt 3fpkt"];
1327--6074[label="1;3pkt 3fpkt"];
1327--7348[label="1;3pkt 3fpkt"];
1421--1529[label="0.230769;3pkt 3fpkt"];
1421--1689[label="0.153846;2pkt 2fpkt"];
1421--1782[label="0.153846;2pkt 2fpkt"];
1421--2913[label="1;7pkt 7fpkt"];
1421--3065[label="1;1pkt 1fpkt"];
1421--3378[label="0.153846;2pkt 2fpkt"];
1421--3826[label="1;1pkt 1fpkt"];
1421--4079[label="0.153846;2pkt 2fpkt"];
1421--4804[label="0.153846;2pkt 2fpkt"];
1421--5792[label="0.230769;3pkt 3fpkt"];
1421--6498[label="0.153846;2pkt 2fpkt"];
1421--7168[label="0.230769;3pkt 3fpkt"];
1421--7233[label="1;1pkt 1fpkt"];
1421--7564[label="1;1pkt 1fpkt"];
1421--7604[label="0.153846;2pkt 2fpkt"];
1421--8027[label="0.230769;3pkt 3fpkt"];
2493--2703[label="1;1pkt 1fpkt"];
2493--3608[label="1;1pkt 1fpkt"];
2493--4156[label="1;1pkt 1fpkt"];
2493--6074[label="1;1pkt 1fpkt"];
2493--7348[label="1;1pkt 1fpkt"];
2517--2703[label="1;1pkt 1fpkt"];
2517--4156[label="1;1pkt 1fpkt"];
2517--6074[label="1;1pkt 1fpkt"];
2517--7348[label="1;1pkt 1fpkt"];
2703--3422[label="1;3pkt 3fpkt"];
2703--3608[label="1;1pkt 1fpkt"];
2703--3635[label="0.833333;5pkt 5fpkt"];
2703--4156[label="0.923077;12pkt 12fpkt"];
2703--6074[label="0.923077;12pkt 12fpkt"];
2703--7348[label="1;13pkt 13fpkt"];
2913--3065[label="1;1pkt 1fpkt"];
2913--3378[label="0.142857;1pkt 1fpkt"];
2913--3826[label="1;1pkt 1fpkt"];
2913--4804[label="0.142857;1pkt 1fpkt"];
2913--6498[label="0.142857;1pkt 1fpkt"];
2913--7233[label="1;1pkt 1fpkt"];
2913--7564[label="1;1pkt 1fpkt"];
2913--7604[label="0.142857;1pkt 1fpkt"];
3065--3826[label="1;1pkt 1fpkt"];
3422--4156[label="1;3pkt 3fpkt"];
3422--6074[label="1;3pkt 3fpkt"];
3422--7348[label="1;3pkt 3fpkt"];
3608--4156[label="1;1pkt 1fpkt"];
3608--6074[label="1;1pkt 1fpkt"];
3608--7348[label="1;1pkt 1fpkt"];
3635--4156[label="1;6pkt 6fpkt"];
3635--6074[label="1;6pkt 6fpkt"];
3635--7348[label="1;6pkt 6fpkt"];
4156--6074[label="1;14pkt 14fpkt"];
4156--7348[label="1;14pkt 14fpkt"];
6074--7348[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="167.8.168.20" src_port="6699"/>
      <filter dst_ip="167.8.138.144" src_port="80"/>
      <filter dst_ip="81.113.141.220" dst_port="6699" src_ip="167.8.168.20"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_421{
style=filled;
color=gray75;
779[label="167.8.140.141;s;23pkt 23fpkt", shape=diamond, color=yellow];
1434[label="209.45.141.244;d;20pkt 20fpkt", shape=diamond, color=yellow];
3638[label="167.8.140.141;s;23pkt 23fpkt", shape=hexagon, color=black];
5145[label="167.8.140.141;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6737[label="167.8.140.141;25pkt 25fpkt", shape=invtriangle, color=brown];
stat421[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.140.141:*, 209.45.141.244:*}[88%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (3.44828%)&lt;BR/&gt; 43714: (2.15517%)&lt;BR/&gt; 43700: (2.15517%)&lt;BR/&gt; 43677: (2.15517%)&lt;BR/&gt; 43668: (2.15517%)&gt;];
}
779--1434[label="1;20pkt 20fpkt"];
779--3638[label="1;23pkt 23fpkt"];
779--5145[label="1;23pkt 23fpkt"];
779--6737[label="1;23pkt 23fpkt"];
1434--3638[label="1;20pkt 20fpkt"];
1434--5145[label="1;20pkt 20fpkt"];
1434--6737[label="1;20pkt 20fpkt"];
3638--5145[label="1;23pkt 23fpkt"];
3638--6737[label="1;23pkt 23fpkt"];
5145--6737[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="209.45.141.244" src_ip="167.8.140.141"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,999,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
34[label="202.105.172.60s;1pkt 1fpkt", shape=rectangle, color=red];
306[label="200.174.152.155s;1pkt 1fpkt", shape=rectangle, color=red];
618[label="141.98.101.179;d;14pkt 14fpkt", shape=diamond, color=yellow];
888[label="202.105.172.60;s;1pkt 1fpkt", shape=diamond, color=yellow];
899[label="202.235.237.145;s;1pkt 1fpkt", shape=diamond, color=yellow];
2144[label="213.216.152.155;s;6pkt 6fpkt", shape=diamond, color=yellow];
2200[label="75.132.204.49;s;1pkt 1fpkt", shape=diamond, color=yellow];
2644[label="192.213.73.23;s;1pkt 1fpkt", shape=diamond, color=yellow];
2671[label="141.98.101.179;d;11pkt 11fpkt", shape=hexagon, color=black];
2733[label="202.235.237.145;s;1pkt 1fpkt", shape=hexagon, color=black];
3376[label="213.216.152.155;s;6pkt 6fpkt", shape=hexagon, color=black];
3419[label="75.132.204.49;s;1pkt 1fpkt", shape=hexagon, color=black];
3659[label="202.105.172.60;s;1pkt 1fpkt", shape=hexagon, color=black];
3805[label="141.98.101.179;d;10pkt 10fpkt", shape=polygon, color=gold];
4153[label="86.253.121.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5253[label="213.216.152.155;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6810[label="213.216.152.155;7pkt 7fpkt", shape=invtriangle, color=brown];
7805[label="213.216.152.155;6pkt 6fpkt", shape=invhouse, color=bisque];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.216.152.155:1214, 141.98.101.179:*}[46.6667%]&lt;BR/&gt;{*:6699, 141.98.101.179:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (34.8684%)&lt;BR/&gt; 6699: (15.1316%)&lt;BR/&gt; 1599: (5.26316%)&lt;BR/&gt; 1598: (5.26316%)&lt;BR/&gt; 1593: (5.26316%)&gt;];
}
34--618[label="1;1pkt 1fpkt"];
34--888[label="1;1pkt 1fpkt"];
34--2671[label="1;1pkt 1fpkt"];
34--3659[label="1;1pkt 1fpkt"];
34--3805[label="1;1pkt 1fpkt"];
306--618[label="1;1pkt 1fpkt"];
306--2144[label="1;1pkt 1fpkt"];
306--2671[label="1;1pkt 1fpkt"];
306--3376[label="1;1pkt 1fpkt"];
306--3805[label="1;1pkt 1fpkt"];
306--6810[label="1;1pkt 1fpkt"];
618--888[label="1;1pkt 1fpkt"];
618--899[label="1;1pkt 1fpkt"];
618--2144[label="1;6pkt 6fpkt"];
618--2200[label="1;1pkt 1fpkt"];
618--2644[label="1;1pkt 1fpkt"];
618--2671[label="1;11pkt 11fpkt"];
618--2733[label="1;1pkt 1fpkt"];
618--3376[label="1;6pkt 6fpkt"];
618--3419[label="1;1pkt 1fpkt"];
618--3659[label="1;1pkt 1fpkt"];
618--3805[label="1;10pkt 10fpkt"];
618--4153[label="1;1pkt 1fpkt"];
618--5253[label="0.833333;5pkt 5fpkt"];
618--6810[label="0.857143;6pkt 6fpkt"];
618--7805[label="0.833333;5pkt 5fpkt"];
888--2671[label="1;1pkt 1fpkt"];
888--3659[label="1;1pkt 1fpkt"];
888--3805[label="1;1pkt 1fpkt"];
899--2671[label="1;1pkt 1fpkt"];
899--2733[label="1;1pkt 1fpkt"];
899--3805[label="1;1pkt 1fpkt"];
2144--2671[label="0.833333;5pkt 5fpkt"];
2144--3376[label="1;6pkt 6fpkt"];
2144--3805[label="0.833333;5pkt 5fpkt"];
2144--5253[label="0.833333;5pkt 5fpkt"];
2144--6810[label="1;6pkt 6fpkt"];
2144--7805[label="0.833333;5pkt 5fpkt"];
2200--2671[label="1;1pkt 1fpkt"];
2200--3419[label="1;1pkt 1fpkt"];
2200--3805[label="1;1pkt 1fpkt"];
2671--2733[label="1;1pkt 1fpkt"];
2671--3376[label="0.833333;5pkt 5fpkt"];
2671--3419[label="1;1pkt 1fpkt"];
2671--3659[label="1;1pkt 1fpkt"];
2671--3805[label="1;10pkt 10fpkt"];
2671--5253[label="0.666667;4pkt 4fpkt"];
2671--6810[label="0.714286;5pkt 5fpkt"];
2671--7805[label="0.666667;4pkt 4fpkt"];
2733--3805[label="1;1pkt 1fpkt"];
3376--3805[label="0.833333;5pkt 5fpkt"];
3376--5253[label="0.833333;5pkt 5fpkt"];
3376--6810[label="1;6pkt 6fpkt"];
3376--7805[label="0.833333;5pkt 5fpkt"];
3419--3805[label="1;1pkt 1fpkt"];
3659--3805[label="1;1pkt 1fpkt"];
3805--5253[label="0.666667;4pkt 4fpkt"];
3805--6810[label="0.714286;5pkt 5fpkt"];
3805--7805[label="0.666667;4pkt 4fpkt"];
5253--6810[label="1;6pkt 6fpkt"];
5253--7805[label="1;6pkt 6fpkt"];
6810--7805[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.101.179" src_port="6699"/>
      <filter dst_ip="141.98.101.179" src_ip="213.216.152.155" src_port="1214"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
790[label="167.8.91.53;s;498pkt 498fpkt", shape=diamond, color=yellow];
850[label="58.7.187.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
1111[label="2.204.204.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
1116[label="58.56.249.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
1180[label="2.52.85.105;d;1pkt 1fpkt", shape=diamond, color=yellow];
1711[label="203.19.144.115;d;1pkt 1fpkt", shape=diamond, color=yellow];
1917[label="212.24.29.74;s;2pkt 2fpkt", shape=diamond, color=yellow];
1935[label="202.169.176.215;d;2pkt 2fpkt", shape=diamond, color=yellow];
2799[label="2.204.204.235;d;1pkt 1fpkt", shape=hexagon, color=black];
3373[label="212.24.29.74;s;2pkt 2fpkt", shape=hexagon, color=black];
3390[label="202.169.176.215;d;2pkt 2fpkt", shape=hexagon, color=black];
3513[label="58.7.187.87;d;1pkt 1fpkt", shape=hexagon, color=black];
3641[label="167.8.91.53;s;498pkt 498fpkt", shape=hexagon, color=black];
3661[label="203.19.144.115;d;1pkt 1fpkt", shape=hexagon, color=black];
3790[label="2.204.204.235;d;1pkt 1fpkt", shape=polygon, color=gold];
4457[label="167.8.91.53;525pkt 525fpkt", shape=pentagon, color=darkviolet];
6275[label="167.8.91.53;525pkt 525fpkt", shape=invtriangle, color=brown];
7475[label="167.8.91.53;525pkt 525fpkt", shape=invhouse, color=bisque];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.91.53:6257, *:6257}[92.803%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (95.0155%)&lt;BR/&gt; 6970: (1.04328%)&lt;BR/&gt; 16257: (0.772798%)&lt;BR/&gt; 6258: (0.193199%)&lt;BR/&gt; 3966: (0.15456%)&gt;];
}
790--850[label="1;1pkt 1fpkt"];
790--1038[label="0.5;1pkt 1fpkt"];
790--1111[label="1;1pkt 1fpkt"];
790--1116[label="1;1pkt 1fpkt"];
790--1180[label="1;1pkt 1fpkt"];
790--1711[label="1;1pkt 1fpkt"];
790--1935[label="0.5;1pkt 1fpkt"];
790--2799[label="1;1pkt 1fpkt"];
790--3390[label="0.5;1pkt 1fpkt"];
790--3513[label="1;1pkt 1fpkt"];
790--3641[label="1;498pkt 498fpkt"];
790--3661[label="1;1pkt 1fpkt"];
790--3790[label="1;1pkt 1fpkt"];
790--3948[label="0.375502;187pkt 187fpkt"];
790--3952[label="0.393574;196pkt 196fpkt"];
790--3961[label="0.37751;188pkt 188fpkt"];
790--3963[label="0.393574;196pkt 196fpkt"];
790--3971[label="0.375502;187pkt 187fpkt"];
790--3973[label="0.393574;196pkt 196fpkt"];
790--4457[label="0.997992;497pkt 497fpkt"];
790--6275[label="0.997992;497pkt 497fpkt"];
790--7475[label="0.997992;497pkt 497fpkt"];
850--3513[label="1;1pkt 1fpkt"];
850--3641[label="1;1pkt 1fpkt"];
850--4457[label="1;1pkt 1fpkt"];
850--6275[label="1;1pkt 1fpkt"];
850--7475[label="1;1pkt 1fpkt"];
1111--2799[label="1;1pkt 1fpkt"];
1111--3641[label="1;1pkt 1fpkt"];
1111--3790[label="1;1pkt 1fpkt"];
1111--4457[label="1;1pkt 1fpkt"];
1111--6275[label="1;1pkt 1fpkt"];
1111--7475[label="1;1pkt 1fpkt"];
1116--3641[label="1;1pkt 1fpkt"];
1116--4457[label="1;1pkt 1fpkt"];
1116--6275[label="1;1pkt 1fpkt"];
1116--7475[label="1;1pkt 1fpkt"];
1180--3641[label="1;1pkt 1fpkt"];
1180--4457[label="1;1pkt 1fpkt"];
1180--6275[label="1;1pkt 1fpkt"];
1180--7475[label="1;1pkt 1fpkt"];
1711--3641[label="1;1pkt 1fpkt"];
1711--3661[label="1;1pkt 1fpkt"];
1711--4457[label="1;1pkt 1fpkt"];
1711--6275[label="1;1pkt 1fpkt"];
1711--7475[label="1;1pkt 1fpkt"];
1917--1935[label="0.5;1pkt 1fpkt"];
1917--3373[label="1;2pkt 2fpkt"];
1917--3390[label="0.5;1pkt 1fpkt"];
1935--3373[label="0.5;1pkt 1fpkt"];
1935--3390[label="1;2pkt 2fpkt"];
1935--3641[label="0.5;1pkt 1fpkt"];
1935--4457[label="0.5;1pkt 1fpkt"];
1935--6275[label="0.5;1pkt 1fpkt"];
1935--7475[label="0.5;1pkt 1fpkt"];
2799--3641[label="1;1pkt 1fpkt"];
2799--3790[label="1;1pkt 1fpkt"];
2799--4457[label="1;1pkt 1fpkt"];
2799--6275[label="1;1pkt 1fpkt"];
2799--7475[label="1;1pkt 1fpkt"];
3373--3390[label="0.5;1pkt 1fpkt"];
3390--3641[label="0.5;1pkt 1fpkt"];
3390--4457[label="0.5;1pkt 1fpkt"];
3390--6275[label="0.5;1pkt 1fpkt"];
3390--7475[label="0.5;1pkt 1fpkt"];
3513--3641[label="1;1pkt 1fpkt"];
3513--4457[label="1;1pkt 1fpkt"];
3513--6275[label="1;1pkt 1fpkt"];
3513--7475[label="1;1pkt 1fpkt"];
3641--3661[label="1;1pkt 1fpkt"];
3641--3790[label="1;1pkt 1fpkt"];
3641--3948[label="0.375502;187pkt 187fpkt"];
3641--3952[label="0.393574;196pkt 196fpkt"];
3641--3961[label="0.37751;188pkt 188fpkt"];
3641--3963[label="0.393574;196pkt 196fpkt"];
3641--3971[label="0.375502;187pkt 187fpkt"];
3641--3973[label="0.393574;196pkt 196fpkt"];
3641--4457[label="0.997992;497pkt 497fpkt"];
3641--6275[label="0.997992;497pkt 497fpkt"];
3641--7475[label="0.997992;497pkt 497fpkt"];
3661--4457[label="1;1pkt 1fpkt"];
3661--6275[label="1;1pkt 1fpkt"];
3661--7475[label="1;1pkt 1fpkt"];
3790--4457[label="1;1pkt 1fpkt"];
3790--6275[label="1;1pkt 1fpkt"];
3790--7475[label="1;1pkt 1fpkt"];
4457--6275[label="1;525pkt 525fpkt"];
4457--7475[label="1;525pkt 525fpkt"];
6275--7475[label="1;525pkt 525fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="167.8.91.53" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_424{
style=filled;
color=gray75;
1210[label="81.8.222.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
3662[label="81.8.222.148;s;1pkt 1fpkt", shape=hexagon, color=black];
stat424[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.8.222.148:1530, 185.191.75.200:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1530: (50%)&gt;];
}
1210--3662[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.75.200" dst_port="6699" src_ip="81.8.222.148" src_port="1530"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_425{
style=filled;
color=gray75;
2561[label="141.98.6.32;d;4pkt 4fpkt", shape=diamond, color=yellow];
2619[label="194.234.21.65;s;1pkt 1fpkt", shape=diamond, color=yellow];
3675[label="141.98.6.32;d;4pkt 4fpkt", shape=hexagon, color=black];
stat425[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.34.108.34:1863, 141.98.6.32:3709}[25%]&lt;BR/&gt;{43.186.102.36:6699, 141.98.6.32:1301}[25%]&lt;BR/&gt;{194.234.21.65:6699, 141.98.6.32:1296}[25%]&lt;BR/&gt;{200.236.23.85:6699, 141.98.6.32:1299}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (38.8889%)&lt;BR/&gt; 1296: (16.6667%)&lt;BR/&gt; 3709: (11.1111%)&lt;BR/&gt; 1863: (11.1111%)&lt;BR/&gt; 1301: (11.1111%)&gt;];
}
2561--2619[label="1;1pkt 1fpkt"];
2561--3675[label="1;4pkt 4fpkt"];
2619--3675[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.6.32" dst_port="1299" src_ip="200.236.23.85" src_port="6699"/>
      <filter dst_ip="141.98.6.32" dst_port="1296" src_ip="194.234.21.65" src_port="6699"/>
      <filter dst_ip="141.98.6.32" dst_port="1301" src_ip="43.186.102.36" src_port="6699"/>
      <filter dst_ip="141.98.6.32" dst_port="3709" src_ip="85.34.108.34" src_port="1863"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_426{
style=filled;
color=gray75;
2562[label="213.70.180.107;s;39pkt 39fpkt", shape=diamond, color=yellow];
3680[label="213.70.180.107;s;39pkt 39fpkt", shape=hexagon, color=black];
4899[label="213.70.180.107;39pkt 39fpkt", shape=pentagon, color=darkviolet];
6557[label="213.70.180.107;38pkt 38fpkt", shape=invtriangle, color=brown];
stat426[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.70.180.107:80, 212.18.104.84:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61879: (1.29032%)&lt;BR/&gt; 57384: (1.29032%)&lt;BR/&gt; 53913: (1.29032%)&lt;BR/&gt; 51326: (1.29032%)&gt;];
}
2562--3680[label="1;39pkt 39fpkt"];
2562--4899[label="1;39pkt 39fpkt"];
2562--6557[label="1;38pkt 38fpkt"];
3680--4899[label="1;39pkt 39fpkt"];
3680--6557[label="1;38pkt 38fpkt"];
4899--6557[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.104.84" src_ip="213.70.180.107" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_427{
style=filled;
color=gray75;
691[label="167.8.138.144;s;20pkt 20fpkt", shape=diamond, color=yellow];
1054[label="43.160.227.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
1987[label="214.204.156.243;d;1pkt 1fpkt", shape=diamond, color=yellow];
2565[label="1.2.155.245;d;1pkt 1fpkt", shape=diamond, color=yellow];
2694[label="167.8.138.144;s;20pkt 20fpkt", shape=hexagon, color=black];
3418[label="214.204.156.243;d;1pkt 1fpkt", shape=hexagon, color=black];
3681[label="1.2.155.245;d;1pkt 1fpkt", shape=hexagon, color=black];
3824[label="167.8.138.144;s;13pkt 13fpkt", shape=polygon, color=gold];
3921[label="1.2.155.245;d;1pkt 1fpkt", shape=polygon, color=gold];
stat427[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.138.144:*, *:80}[40%]&lt;BR/&gt;{167.8.138.144:*, 197.40.50.118:8888}[20%]&lt;BR/&gt;{167.8.138.144:6699, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (17.7966%)&lt;BR/&gt; 80: (16.1017%)&lt;BR/&gt; 8888: (13.5593%)&lt;BR/&gt; 1743: (5.08475%)&lt;BR/&gt; 10015: (4.23729%)&gt;];
}
691--1054[label="1;1pkt 1fpkt"];
691--1449[label="0.1;2pkt 2fpkt"];
691--1528[label="0.15;3pkt 3fpkt"];
691--1713[label="0.15;3pkt 3fpkt"];
691--1987[label="1;1pkt 1fpkt"];
691--2565[label="1;1pkt 1fpkt"];
691--2694[label="1;20pkt 20fpkt"];
691--3392[label="0.15;3pkt 3fpkt"];
691--3418[label="1;1pkt 1fpkt"];
691--3681[label="1;1pkt 1fpkt"];
691--3824[label="1;13pkt 13fpkt"];
691--3921[label="1;1pkt 1fpkt"];
1054--2694[label="1;1pkt 1fpkt"];
1054--3824[label="1;1pkt 1fpkt"];
1987--2694[label="1;1pkt 1fpkt"];
1987--3418[label="1;1pkt 1fpkt"];
1987--3824[label="1;1pkt 1fpkt"];
2565--2694[label="1;1pkt 1fpkt"];
2565--3681[label="1;1pkt 1fpkt"];
2565--3824[label="1;1pkt 1fpkt"];
2565--3921[label="1;1pkt 1fpkt"];
2694--3392[label="0.15;3pkt 3fpkt"];
2694--3418[label="1;1pkt 1fpkt"];
2694--3681[label="1;1pkt 1fpkt"];
2694--3824[label="1;13pkt 13fpkt"];
2694--3921[label="1;1pkt 1fpkt"];
3418--3824[label="1;1pkt 1fpkt"];
3681--3824[label="1;1pkt 1fpkt"];
3681--3921[label="1;1pkt 1fpkt"];
3824--3921[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="167.8.138.144" src_port="6699"/>
      <filter dst_port="80" src_ip="167.8.138.144"/>
      <filter dst_ip="197.40.50.118" dst_port="8888" src_ip="167.8.138.144"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_428{
style=filled;
color=gray75;
911[label="212.24.29.106;d;4pkt 4fpkt", shape=diamond, color=yellow];
912[label="194.93.31.43;s;1pkt 1fpkt", shape=diamond, color=yellow];
2576[label="196.180.95.164;s;1pkt 1fpkt", shape=diamond, color=yellow];
2737[label="212.24.29.106;d;4pkt 4fpkt", shape=hexagon, color=black];
3696[label="196.180.95.164;s;1pkt 1fpkt", shape=hexagon, color=black];
stat428[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.93.31.43:6699, 212.24.29.106:3025}[25%]&lt;BR/&gt;{130.43.43.48:6699, 212.24.29.106:3034}[25%]&lt;BR/&gt;{130.66.67.115:6699, 212.24.29.106:3045}[25%]&lt;BR/&gt;{196.180.95.164:6699, 212.24.29.106:3052}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3052: (18.1818%)&lt;BR/&gt; 3025: (13.6364%)&lt;BR/&gt; 3045: (9.09091%)&lt;BR/&gt; 3034: (9.09091%)&gt;];
}
911--912[label="1;1pkt 1fpkt"];
911--2576[label="1;1pkt 1fpkt"];
911--2737[label="1;4pkt 4fpkt"];
911--3696[label="1;1pkt 1fpkt"];
912--2737[label="1;1pkt 1fpkt"];
2576--2737[label="1;1pkt 1fpkt"];
2576--3696[label="1;1pkt 1fpkt"];
2737--3696[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.29.106" dst_port="3052" src_ip="196.180.95.164" src_port="6699"/>
      <filter dst_ip="212.24.29.106" dst_port="3045" src_ip="130.66.67.115" src_port="6699"/>
      <filter dst_ip="212.24.29.106" dst_port="3034" src_ip="130.43.43.48" src_port="6699"/>
      <filter dst_ip="212.24.29.106" dst_port="3025" src_ip="194.93.31.43" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
2204[label="212.24.7.18;d;34pkt 34fpkt", shape=diamond, color=yellow];
2207[label="200.177.185.132;s;34pkt 34fpkt", shape=diamond, color=yellow];
3699[label="200.177.185.132;s;34pkt 34fpkt", shape=hexagon, color=black];
3928[label="200.177.185.132;s;34pkt 34fpkt", shape=polygon, color=gold];
5080[label="200.177.185.132;34pkt 34fpkt", shape=pentagon, color=darkviolet];
6689[label="200.177.185.132;34pkt 34fpkt", shape=invtriangle, color=brown];
7727[label="200.177.185.132;34pkt 34fpkt", shape=invhouse, color=bisque];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.177.185.132:80, 212.24.7.18:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1426: (1.47059%)&lt;BR/&gt; 1425: (1.47059%)&lt;BR/&gt; 1424: (1.47059%)&lt;BR/&gt; 1423: (1.47059%)&gt;];
}
2204--2207[label="1;34pkt 34fpkt"];
2204--3699[label="1;34pkt 34fpkt"];
2204--3928[label="1;34pkt 34fpkt"];
2204--3950[label="0.0882353;3pkt 3fpkt"];
2204--5080[label="0.970588;33pkt 33fpkt"];
2204--6689[label="0.970588;33pkt 33fpkt"];
2204--7727[label="0.970588;33pkt 33fpkt"];
2207--3699[label="1;34pkt 34fpkt"];
2207--3928[label="1;34pkt 34fpkt"];
2207--3950[label="0.0882353;3pkt 3fpkt"];
2207--5080[label="0.970588;33pkt 33fpkt"];
2207--6689[label="0.970588;33pkt 33fpkt"];
2207--7727[label="0.970588;33pkt 33fpkt"];
3699--3928[label="1;34pkt 34fpkt"];
3699--3950[label="0.0882353;3pkt 3fpkt"];
3699--5080[label="0.970588;33pkt 33fpkt"];
3699--6689[label="0.970588;33pkt 33fpkt"];
3699--7727[label="0.970588;33pkt 33fpkt"];
3928--3950[label="0.0882353;3pkt 3fpkt"];
3928--5080[label="0.970588;33pkt 33fpkt"];
3928--6689[label="0.970588;33pkt 33fpkt"];
3928--7727[label="0.970588;33pkt 33fpkt"];
5080--6689[label="1;34pkt 34fpkt"];
5080--7727[label="1;34pkt 34fpkt"];
6689--7727[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.7.18" src_ip="200.177.185.132" src_port="80"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_430{
style=filled;
color=gray75;
1343[label="161.238.139.14;d;198pkt 198fpkt", shape=diamond, color=yellow];
1577[label="85.112.16.116;s;198pkt 198fpkt", shape=diamond, color=yellow];
3711[label="161.238.139.14;d;198pkt 198fpkt", shape=hexagon, color=black];
4955[label="85.112.16.116;197pkt 197fpkt", shape=pentagon, color=darkviolet];
6598[label="85.112.16.116;198pkt 198fpkt", shape=invtriangle, color=brown];
7661[label="85.112.16.116;198pkt 198fpkt", shape=invhouse, color=bisque];
stat430[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.112.16.116:80, 161.238.139.14:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1424: (0.252738%)&lt;BR/&gt; 1423: (0.252738%)&lt;BR/&gt; 1422: (0.252738%)&lt;BR/&gt; 1421: (0.252738%)&gt;];
}
1343--1577[label="1;198pkt 198fpkt"];
1343--3711[label="1;198pkt 198fpkt"];
1343--3950[label="0.0606061;12pkt 12fpkt"];
1343--4955[label="1;197pkt 197fpkt"];
1343--6598[label="1;198pkt 198fpkt"];
1343--7661[label="1;198pkt 198fpkt"];
1577--3711[label="1;198pkt 198fpkt"];
1577--3950[label="0.0606061;12pkt 12fpkt"];
1577--4955[label="1;197pkt 197fpkt"];
1577--6598[label="1;198pkt 198fpkt"];
1577--7661[label="1;198pkt 198fpkt"];
3711--3950[label="0.0606061;12pkt 12fpkt"];
3711--4955[label="1;197pkt 197fpkt"];
3711--6598[label="1;198pkt 198fpkt"];
3711--7661[label="1;198pkt 198fpkt"];
4955--6598[label="1;197pkt 197fpkt"];
4955--7661[label="1;197pkt 197fpkt"];
6598--7661[label="1;198pkt 198fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.139.14" src_ip="85.112.16.116" src_port="80"/>
    </slice>
    <from sec="1034226008" usec="0"/>
    <to sec="1034226789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,503,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_431{
style=filled;
color=gray75;
7[label="85.34.123.9s;2pkt 2fpkt", shape=rectangle, color=red];
63[label="209.168.154.87s;4pkt 4fpkt", shape=rectangle, color=red];
295[label="200.189.122.142s;197pkt 197fpkt", shape=rectangle, color=red];
612[label="161.238.11.62;d;63pkt 63fpkt", shape=diamond, color=yellow];
615[label="2.242.47.240;s;111pkt 111fpkt", shape=diamond, color=yellow];
737[label="185.206.202.140;d;1410pkt 1410fpkt", shape=diamond, color=yellow];
739[label="209.168.161.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
755[label="161.238.228.114;d;13pkt 13fpkt", shape=diamond, color=yellow];
760[label="2.242.47.225;s;88pkt 88fpkt", shape=diamond, color=yellow];
974[label="209.168.154.87;s;176pkt 176fpkt", shape=diamond, color=yellow];
1077[label="2.242.47.229;s;79pkt 79fpkt", shape=diamond, color=yellow];
1226[label="2.242.47.244;s;53pkt 53fpkt", shape=diamond, color=yellow];
1392[label="209.199.135.124;s;3pkt 3fpkt", shape=diamond, color=yellow];
1450[label="161.238.11.36;d;85pkt 85fpkt", shape=diamond, color=yellow];
1454[label="161.238.248.56;d;29pkt 29fpkt", shape=diamond, color=yellow];
1570[label="17.246.225.155;s;248pkt 248fpkt", shape=diamond, color=yellow];
1643[label="193.101.66.37;s;16pkt 16fpkt", shape=diamond, color=yellow];
1841[label="161.238.10.82;d;92pkt 92fpkt", shape=diamond, color=yellow];
2016[label="209.168.151.17;s;125pkt 125fpkt", shape=diamond, color=yellow];
2038[label="161.238.11.149;d;124pkt 124fpkt", shape=diamond, color=yellow];
2046[label="209.168.139.23;s;55pkt 55fpkt", shape=diamond, color=yellow];
2051[label="212.24.24.233;d;26pkt 26fpkt", shape=diamond, color=yellow];
2270[label="161.238.11.40;d;104pkt 104fpkt", shape=diamond, color=yellow];
2374[label="2.242.47.228;s;36pkt 36fpkt", shape=diamond, color=yellow];
2486[label="161.238.33.69;d;6pkt 6fpkt", shape=diamond, color=yellow];
2669[label="161.238.11.62;d;62pkt 62fpkt", shape=hexagon, color=black];
2922[label="2.242.47.225;s;69pkt 69fpkt", shape=hexagon, color=black];
2942[label="161.238.11.36;d;85pkt 85fpkt", shape=hexagon, color=black];
3055[label="2.242.47.229;s;56pkt 56fpkt", shape=hexagon, color=black];
3056[label="209.168.161.180;s;1pkt 1fpkt", shape=hexagon, color=black];
3296[label="209.168.151.17;s;104pkt 104fpkt", shape=hexagon, color=black];
3371[label="185.206.202.140;d;977pkt 977fpkt", shape=hexagon, color=black];
3457[label="161.238.10.82;d;40pkt 40fpkt", shape=hexagon, color=black];
3581[label="161.238.11.149;d;118pkt 118fpkt", shape=hexagon, color=black];
3725[label="209.168.139.23;s;55pkt 55fpkt", shape=hexagon, color=black];
3770[label="161.238.11.62;d;32pkt 32fpkt", shape=polygon, color=gold];
4129[label="209.168.151.17;135pkt 135fpkt", shape=pentagon, color=darkviolet];
4252[label="193.101.66.33;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4302[label="193.101.66.37;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4363[label="85.34.109.43;42pkt 42fpkt", shape=pentagon, color=darkviolet];
4462[label="85.34.109.54;39pkt 39fpkt", shape=pentagon, color=darkviolet];
4505[label="85.34.109.61;88pkt 88fpkt", shape=pentagon, color=darkviolet];
4591[label="195.9.48.71;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4836[label="212.220.19.99;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4996[label="1.109.142.121;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5011[label="209.199.135.124;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5019[label="1.109.142.127;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5151[label="200.189.122.142;196pkt 196fpkt", shape=pentagon, color=darkviolet];
5254[label="17.246.225.155;247pkt 247fpkt", shape=pentagon, color=darkviolet];
5271[label="194.111.186.157;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5420[label="84.102.240.176;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5780[label="2.242.47.228;36pkt 36fpkt", shape=pentagon, color=darkviolet];
5829[label="194.67.150.234;44pkt 44fpkt", shape=pentagon, color=darkviolet];
5879[label="2.242.47.244;58pkt 58fpkt", shape=pentagon, color=darkviolet];
6054[label="209.168.151.17;135pkt 135fpkt", shape=invtriangle, color=brown];
6139[label="193.101.66.33;15pkt 15fpkt", shape=invtriangle, color=brown];
6172[label="193.101.66.37;15pkt 15fpkt", shape=invtriangle, color=brown];
6211[label="85.34.109.43;41pkt 41fpkt", shape=invtriangle, color=brown];
6277[label="85.34.109.54;39pkt 39fpkt", shape=invtriangle, color=brown];
6360[label="195.9.48.71;26pkt 26fpkt", shape=invtriangle, color=brown];
6624[label="1.109.142.121;25pkt 25fpkt", shape=invtriangle, color=brown];
6642[label="1.109.142.127;13pkt 13fpkt", shape=invtriangle, color=brown];
6811[label="17.246.225.155;247pkt 247fpkt", shape=invtriangle, color=brown];
6924[label="84.102.240.176;24pkt 24fpkt", shape=invtriangle, color=brown];
7161[label="2.242.47.228;37pkt 37fpkt", shape=invtriangle, color=brown];
7195[label="194.67.150.234;43pkt 43fpkt", shape=invtriangle, color=brown];
7231[label="2.242.47.244;58pkt 58fpkt", shape=invtriangle, color=brown];
7683[label="1.109.142.121;25pkt 25fpkt", shape=invhouse, color=bisque];
7806[label="17.246.225.155;248pkt 248fpkt", shape=invhouse, color=bisque];
7879[label="84.102.240.176;25pkt 25fpkt", shape=invhouse, color=bisque];
8049[label="194.67.150.234;43pkt 43fpkt", shape=invhouse, color=bisque];
stat431[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 185.206.202.140:*}[53.5409%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4565%)&lt;BR/&gt; 137: (2.92393%)&lt;BR/&gt; 1025: (2.89462%)&lt;BR/&gt; 21: (0.586252%)&lt;BR/&gt; 8003: (0.212516%)&gt;];
}
7--2016[label="0.5;1pkt 1fpkt"];
7--2255[label="0.5;1pkt 1fpkt"];
7--3296[label="0.5;1pkt 1fpkt"];
7--4129[label="0.5;1pkt 1fpkt"];
7--6054[label="0.5;1pkt 1fpkt"];
63--974[label="0.75;3pkt 3fpkt"];
295--612[label="0.015873;1pkt 1fpkt"];
295--1858[label="0.00588235;1pkt 1fpkt"];
295--1893[label="0.2;1pkt 1fpkt"];
295--2270[label="0.00961538;1pkt 1fpkt"];
295--2536[label="0.0555556;1pkt 1fpkt"];
295--3472[label="0.2;1pkt 1fpkt"];
295--3953[label="0.969543;191pkt 191fpkt"];
295--5151[label="1;196pkt 196fpkt"];
612--615[label="0.380952;24pkt 24fpkt"];
612--760[label="0.365079;23pkt 23fpkt"];
612--1077[label="0.111111;7pkt 7fpkt"];
612--1226[label="0.150943;8pkt 8fpkt"];
612--2669[label="1;62pkt 62fpkt"];
612--2922[label="0.365079;23pkt 23fpkt"];
612--3055[label="0.125;7pkt 7fpkt"];
612--3770[label="1;32pkt 32fpkt"];
612--3950[label="0.428571;27pkt 27fpkt"];
612--3953[label="0.015873;1pkt 1fpkt"];
612--5151[label="0.015873;1pkt 1fpkt"];
612--5879[label="0.12069;7pkt 7fpkt"];
612--7231[label="0.12069;7pkt 7fpkt"];
615--737[label="0.135135;15pkt 15fpkt"];
615--1450[label="0.505882;43pkt 43fpkt"];
615--1454[label="0.0689655;2pkt 2fpkt"];
615--1841[label="0.25;23pkt 23fpkt"];
615--2669[label="0.387097;24pkt 24fpkt"];
615--2942[label="0.505882;43pkt 43fpkt"];
615--3371[label="0.135135;15pkt 15fpkt"];
615--3457[label="0.4;16pkt 16fpkt"];
615--3770[label="0.375;12pkt 12fpkt"];
615--3950[label="0.252252;28pkt 28fpkt"];
737--739[label="1;1pkt 1fpkt"];
737--760[label="0.306818;27pkt 27fpkt"];
737--929[label="0.13245;40pkt 40fpkt"];
737--974[label="0.488636;86pkt 86fpkt"];
737--1040[label="0.0889571;58pkt 58fpkt"];
737--1077[label="0.278481;22pkt 22fpkt"];
737--1226[label="0.377358;20pkt 20fpkt"];
737--1268[label="0.173729;41pkt 41fpkt"];
737--1349[label="0.5;85pkt 85fpkt"];
737--1392[label="0.666667;2pkt 2fpkt"];
737--1566[label="0.00869565;1pkt 1fpkt"];
737--1576[label="0.333333;8pkt 8fpkt"];
737--1591[label="0.0285714;2pkt 2fpkt"];
737--1643[label="1;16pkt 16fpkt"];
737--1697[label="0.0294118;1pkt 1fpkt"];
737--1705[label="0.130952;11pkt 11fpkt"];
737--1801[label="0.2;10pkt 10fpkt"];
737--1833[label="0.0136986;1pkt 1fpkt"];
737--1909[label="0.174603;11pkt 11fpkt"];
737--1955[label="0.14;7pkt 7fpkt"];
737--2016[label="0.16;20pkt 20fpkt"];
737--2018[label="0.0118577;3pkt 3fpkt"];
737--2046[label="0.763636;42pkt 42fpkt"];
737--2053[label="0.00877193;2pkt 2fpkt"];
737--2166[label="0.0113636;3pkt 3fpkt"];
737--2201[label="0.0176471;3pkt 3fpkt"];
737--2219[label="0.010989;2pkt 2fpkt"];
737--2255[label="0.346154;9pkt 9fpkt"];
737--2258[label="0.0654206;14pkt 14fpkt"];
737--2263[label="0.732143;82pkt 82fpkt"];
737--2374[label="0.166667;6pkt 6fpkt"];
737--2422[label="0.176471;9pkt 9fpkt"];
737--2457[label="0.0141844;2pkt 2fpkt"];
737--2595[label="0.236842;9pkt 9fpkt"];
737--2922[label="0.246377;17pkt 17fpkt"];
737--2994[label="0.00869565;1pkt 1fpkt"];
737--3055[label="0.303571;17pkt 17fpkt"];
737--3056[label="1;1pkt 1fpkt"];
737--3092[label="0.12766;6pkt 6fpkt"];
737--3228[label="0.030303;1pkt 1fpkt"];
737--3296[label="0.192308;20pkt 20fpkt"];
737--3365[label="0.112474;55pkt 55fpkt"];
737--3371[label="1;977pkt 977fpkt"];
737--3713[label="0.236842;9pkt 9fpkt"];
737--3725[label="0.763636;42pkt 42fpkt"];
737--3816[label="0.00980392;1pkt 1fpkt"];
737--3950[label="0.0666667;94pkt 94fpkt"];
737--3951[label="0.00070922;1pkt 1fpkt"];
737--3962[label="0.00070922;1pkt 1fpkt"];
737--3972[label="0.00070922;1pkt 1fpkt"];
737--3990[label="0.133333;6pkt 6fpkt"];
737--4011[label="0.0578512;14pkt 14fpkt"];
737--4057[label="0.0333333;2pkt 2fpkt"];
737--4062[label="0.0816901;58pkt 58fpkt"];
737--4096[label="0.0322581;2pkt 2fpkt"];
737--4129[label="0.148148;20pkt 20fpkt"];
737--4137[label="0.129032;4pkt 4fpkt"];
737--4167[label="0.00813008;1pkt 1fpkt"];
737--4179[label="0.0333333;1pkt 1fpkt"];
737--4182[label="0.0444444;2pkt 2fpkt"];
737--4187[label="0.253012;21pkt 21fpkt"];
737--4221[label="0.0204082;1pkt 1fpkt"];
737--4252[label="1;15pkt 15fpkt"];
737--4261[label="0.165323;41pkt 41fpkt"];
737--4302[label="1;15pkt 15fpkt"];
737--4332[label="0.710526;81pkt 81fpkt"];
737--4363[label="0.857143;36pkt 36fpkt"];
737--4462[label="0.897436;35pkt 35fpkt"];
737--4505[label="0.840909;74pkt 74fpkt"];
737--4519[label="0.0212766;1pkt 1fpkt"];
737--4530[label="0.02;1pkt 1fpkt"];
737--4576[label="0.243243;9pkt 9fpkt"];
737--4591[label="0.52;13pkt 13fpkt"];
737--4618[label="0.111111;11pkt 11fpkt"];
737--4716[label="0.0434783;1pkt 1fpkt"];
737--4725[label="0.0638298;3pkt 3fpkt"];
737--4730[label="0.1;3pkt 3fpkt"];
737--4778[label="0.08;2pkt 2fpkt"];
737--4793[label="0.16;4pkt 4fpkt"];
737--4836[label="1;9pkt 9fpkt"];
737--4996[label="0.75;18pkt 18fpkt"];
737--5011[label="0.75;3pkt 3fpkt"];
737--5019[label="0.461538;6pkt 6fpkt"];
737--5085[label="0.0487805;2pkt 2fpkt"];
737--5122[label="0.0163934;1pkt 1fpkt"];
737--5268[label="0.0186335;3pkt 3fpkt"];
737--5271[label="0.25;1pkt 1fpkt"];
737--5277[label="0.203704;11pkt 11fpkt"];
737--5396[label="0.192308;10pkt 10fpkt"];
737--5420[label="0.04;1pkt 1fpkt"];
737--5434[label="0.0178571;1pkt 1fpkt"];
737--5549[label="0.296296;8pkt 8fpkt"];
737--5558[label="0.135593;8pkt 8fpkt"];
737--5575[label="0.277778;10pkt 10fpkt"];
737--5594[label="0.0166667;3pkt 3fpkt"];
737--5614[label="0.0208333;1pkt 1fpkt"];
737--5619[label="0.0151515;1pkt 1fpkt"];
737--5693[label="0.109091;6pkt 6fpkt"];
737--5699[label="0.0138889;2pkt 2fpkt"];
737--5743[label="0.0273973;2pkt 2fpkt"];
737--5780[label="0.166667;6pkt 6fpkt"];
737--5829[label="1;44pkt 44fpkt"];
737--5879[label="0.344828;20pkt 20fpkt"];
737--6002[label="0.0333333;2pkt 2fpkt"];
737--6006[label="0.0816901;58pkt 58fpkt"];
737--6054[label="0.148148;20pkt 20fpkt"];
737--6061[label="0.129032;4pkt 4fpkt"];
737--6085[label="0.00813008;1pkt 1fpkt"];
737--6089[label="0.0333333;1pkt 1fpkt"];
737--6092[label="0.0454545;2pkt 2fpkt"];
737--6095[label="0.256098;21pkt 21fpkt"];
737--6118[label="0.0208333;1pkt 1fpkt"];
737--6139[label="1;15pkt 15fpkt"];
737--6172[label="1;15pkt 15fpkt"];
737--6191[label="0.710526;81pkt 81fpkt"];
737--6211[label="0.878049;36pkt 36fpkt"];
737--6277[label="0.897436;35pkt 35fpkt"];
737--6314[label="0.0212766;1pkt 1fpkt"];
737--6322[label="0.0204082;1pkt 1fpkt"];
737--6360[label="0.5;13pkt 13fpkt"];
737--6382[label="0.11;11pkt 11fpkt"];
737--6440[label="0.0434783;1pkt 1fpkt"];
737--6446[label="0.0638298;3pkt 3fpkt"];
737--6450[label="0.1;3pkt 3fpkt"];
737--6477[label="0.0769231;2pkt 2fpkt"];
737--6624[label="0.72;18pkt 18fpkt"];
737--6642[label="0.461538;6pkt 6fpkt"];
737--6720[label="0.0163934;1pkt 1fpkt"];
737--6907[label="0.192308;10pkt 10fpkt"];
737--6924[label="0.0416667;1pkt 1fpkt"];
737--6933[label="0.0178571;1pkt 1fpkt"];
737--7009[label="0.285714;8pkt 8fpkt"];
737--7014[label="0.133333;8pkt 8fpkt"];
737--7032[label="0.0167598;3pkt 3fpkt"];
737--7046[label="0.0204082;1pkt 1fpkt"];
737--7050[label="0.0153846;1pkt 1fpkt"];
737--7104[label="0.107143;6pkt 6fpkt"];
737--7108[label="0.0137931;2pkt 2fpkt"];
737--7137[label="0.0277778;2pkt 2fpkt"];
737--7161[label="0.162162;6pkt 6fpkt"];
737--7195[label="1;43pkt 43fpkt"];
737--7231[label="0.344828;20pkt 20fpkt"];
737--7309[label="0.0816901;58pkt 58fpkt"];
737--7354[label="0.00813008;1pkt 1fpkt"];
737--7356[label="0.0344828;1pkt 1fpkt"];
737--7359[label="0.0444444;2pkt 2fpkt"];
737--7423[label="0.710526;81pkt 81fpkt"];
737--7539[label="0.11;11pkt 11fpkt"];
737--7576[label="0.0638298;3pkt 3fpkt"];
737--7578[label="0.1;3pkt 3fpkt"];
737--7593[label="0.0769231;2pkt 2fpkt"];
737--7683[label="0.72;18pkt 18fpkt"];
737--7745[label="0.0163934;1pkt 1fpkt"];
737--7879[label="0.04;1pkt 1fpkt"];
737--7930[label="0.285714;8pkt 8fpkt"];
737--7946[label="0.0167598;3pkt 3fpkt"];
737--7956[label="0.0204082;1pkt 1fpkt"];
737--7990[label="0.109091;6pkt 6fpkt"];
737--7993[label="0.0138889;2pkt 2fpkt"];
737--8049[label="1;43pkt 43fpkt"];
739--3056[label="1;1pkt 1fpkt"];
739--3371[label="1;1pkt 1fpkt"];
739--3950[label="1;1pkt 1fpkt"];
755--758[label="1;1pkt 1fpkt"];
755--1349[label="0.153846;2pkt 2fpkt"];
755--2016[label="0.0769231;1pkt 1fpkt"];
755--2395[label="0.0769231;1pkt 1fpkt"];
755--2708[label="1;6pkt 6fpkt"];
755--3296[label="0.0769231;1pkt 1fpkt"];
755--3949[label="0.0769231;1pkt 1fpkt"];
755--4129[label="0.0769231;1pkt 1fpkt"];
755--4576[label="0.0769231;1pkt 1fpkt"];
755--4701[label="1;1pkt 1fpkt"];
755--6054[label="0.0769231;1pkt 1fpkt"];
760--1450[label="0.105882;9pkt 9fpkt"];
760--1454[label="0.103448;3pkt 3fpkt"];
760--1841[label="0.125;11pkt 11fpkt"];
760--2669[label="0.370968;23pkt 23fpkt"];
760--2922[label="1;69pkt 69fpkt"];
760--2942[label="0.105882;9pkt 9fpkt"];
760--3371[label="0.204545;18pkt 18fpkt"];
760--3457[label="0.1;4pkt 4fpkt"];
760--3770[label="0.375;12pkt 12fpkt"];
760--3950[label="0.227273;20pkt 20fpkt"];
974--1308[label="0.00568182;1pkt 1fpkt"];
974--1317[label="0.0113636;2pkt 2fpkt"];
974--1531[label="0.00704225;1pkt 1fpkt"];
974--1590[label="0.00568182;1pkt 1fpkt"];
974--2038[label="0.120968;15pkt 15fpkt"];
974--2051[label="0.384615;10pkt 10fpkt"];
974--2211[label="0.0149254;1pkt 1fpkt"];
974--3117[label="0.0136986;1pkt 1fpkt"];
974--3143[label="0.00568182;1pkt 1fpkt"];
974--3371[label="0.380682;67pkt 67fpkt"];
974--3423[label="0.0166667;1pkt 1fpkt"];
974--3581[label="0.110169;13pkt 13fpkt"];
974--3695[label="0.0113636;2pkt 2fpkt"];
974--3950[label="0.0568182;10pkt 10fpkt"];
1077--1450[label="0.113924;9pkt 9fpkt"];
1077--1454[label="0.172414;5pkt 5fpkt"];
1077--1841[label="0.265823;21pkt 21fpkt"];
1077--2669[label="0.112903;7pkt 7fpkt"];
1077--2942[label="0.113924;9pkt 9fpkt"];
1077--3055[label="1;56pkt 56fpkt"];
1077--3371[label="0.21519;17pkt 17fpkt"];
1077--3457[label="0.2;8pkt 8fpkt"];
1077--3770[label="0.125;4pkt 4fpkt"];
1077--3950[label="0.0886076;7pkt 7fpkt"];
1226--1454[label="0.0689655;2pkt 2fpkt"];
1226--1841[label="0.226415;12pkt 12fpkt"];
1226--2669[label="0.150943;8pkt 8fpkt"];
1226--3371[label="0.283019;15pkt 15fpkt"];
1226--3457[label="0.125;5pkt 5fpkt"];
1226--3770[label="0.125;4pkt 4fpkt"];
1226--3950[label="0.0943396;5pkt 5fpkt"];
1226--5879[label="0.981132;52pkt 52fpkt"];
1226--7231[label="0.981132;52pkt 52fpkt"];
1392--1431[label="0.333333;1pkt 1fpkt"];
1392--3371[label="0.666667;2pkt 2fpkt"];
1392--3636[label="0.333333;1pkt 1fpkt"];
1392--5011[label="1;3pkt 3fpkt"];
1450--2374[label="0.277778;10pkt 10fpkt"];
1450--2922[label="0.130435;9pkt 9fpkt"];
1450--2942[label="1;85pkt 85fpkt"];
1450--3055[label="0.160714;9pkt 9fpkt"];
1450--3950[label="0.376471;32pkt 32fpkt"];
1450--5780[label="0.277778;10pkt 10fpkt"];
1450--7161[label="0.27027;10pkt 10fpkt"];
1454--2374[label="0.0689655;2pkt 2fpkt"];
1454--2922[label="0.103448;3pkt 3fpkt"];
1454--2944[label="0.310345;9pkt 9fpkt"];
1454--3055[label="0.172414;5pkt 5fpkt"];
1454--3950[label="0.103448;3pkt 3fpkt"];
1454--4784[label="0.310345;9pkt 9fpkt"];
1454--5780[label="0.0689655;2pkt 2fpkt"];
1454--5879[label="0.0689655;2pkt 2fpkt"];
1454--6483[label="0.310345;9pkt 9fpkt"];
1454--7161[label="0.0689655;2pkt 2fpkt"];
1454--7231[label="0.0689655;2pkt 2fpkt"];
1454--7595[label="0.310345;9pkt 9fpkt"];
1570--2038[label="0.354839;44pkt 44fpkt"];
1570--2270[label="0.932692;97pkt 97fpkt"];
1570--3581[label="0.372881;44pkt 44fpkt"];
1570--3667[label="0.0526316;3pkt 3fpkt"];
1570--3950[label="0.145161;36pkt 36fpkt"];
1570--5254[label="1;247pkt 247fpkt"];
1570--6811[label="1;247pkt 247fpkt"];
1570--7806[label="1;248pkt 248fpkt"];
1643--3371[label="1;16pkt 16fpkt"];
1643--4302[label="1;15pkt 15fpkt"];
1643--6172[label="1;15pkt 15fpkt"];
1841--2016[label="0.0217391;2pkt 2fpkt"];
1841--2374[label="0.277778;10pkt 10fpkt"];
1841--2922[label="0.057971;4pkt 4fpkt"];
1841--3055[label="0.142857;8pkt 8fpkt"];
1841--3296[label="0.0217391;2pkt 2fpkt"];
1841--3457[label="1;40pkt 40fpkt"];
1841--3950[label="0.0108696;1pkt 1fpkt"];
1841--4129[label="0.0217391;2pkt 2fpkt"];
1841--5780[label="0.277778;10pkt 10fpkt"];
1841--5879[label="0.206897;12pkt 12fpkt"];
1841--6054[label="0.0217391;2pkt 2fpkt"];
1841--7161[label="0.27027;10pkt 10fpkt"];
1841--7231[label="0.206897;12pkt 12fpkt"];
2016--2038[label="0.0806452;10pkt 10fpkt"];
2016--2798[label="0.008;1pkt 1fpkt"];
2016--3012[label="0.0133333;1pkt 1fpkt"];
2016--3198[label="0.016;2pkt 2fpkt"];
2016--3296[label="1;104pkt 104fpkt"];
2016--3371[label="0.128;16pkt 16fpkt"];
2016--3457[label="0.05;2pkt 2fpkt"];
2016--3490[label="0.008;1pkt 1fpkt"];
2016--3581[label="0.0677966;8pkt 8fpkt"];
2016--3950[label="0.08;10pkt 10fpkt"];
2016--4129[label="0.992;124pkt 124fpkt"];
2016--6054[label="0.992;124pkt 124fpkt"];
2038--3296[label="0.0769231;8pkt 8fpkt"];
2038--3314[label="0.0123457;1pkt 1fpkt"];
2038--3581[label="1;118pkt 118fpkt"];
2038--3950[label="0.306452;38pkt 38fpkt"];
2038--4129[label="0.0806452;10pkt 10fpkt"];
2038--4275[label="0.163265;8pkt 8fpkt"];
2038--4316[label="0.129032;16pkt 16fpkt"];
2038--4730[label="0.133333;4pkt 4fpkt"];
2038--5254[label="0.354839;44pkt 44fpkt"];
2038--6054[label="0.0806452;10pkt 10fpkt"];
2038--6157[label="0.16;8pkt 8fpkt"];
2038--6450[label="0.133333;4pkt 4fpkt"];
2038--6811[label="0.354839;44pkt 44fpkt"];
2038--7396[label="0.16;8pkt 8fpkt"];
2038--7578[label="0.133333;4pkt 4fpkt"];
2038--7806[label="0.354839;44pkt 44fpkt"];
2046--2486[label="1;6pkt 6fpkt"];
2046--3371[label="0.690909;38pkt 38fpkt"];
2046--3725[label="1;55pkt 55fpkt"];
2046--3950[label="0.0909091;5pkt 5fpkt"];
2051--3950[label="0.0769231;2pkt 2fpkt"];
2051--3990[label="0.384615;10pkt 10fpkt"];
2051--5693[label="0.115385;3pkt 3fpkt"];
2051--7104[label="0.153846;4pkt 4fpkt"];
2051--7990[label="0.115385;3pkt 3fpkt"];
2270--3953[label="0.00961538;1pkt 1fpkt"];
2270--5151[label="0.00961538;1pkt 1fpkt"];
2270--5254[label="0.923077;96pkt 96fpkt"];
2270--5928[label="0.0322581;1pkt 1fpkt"];
2270--6811[label="0.923077;96pkt 96fpkt"];
2270--7258[label="0.0322581;1pkt 1fpkt"];
2270--7806[label="0.932692;97pkt 97fpkt"];
2374--2942[label="0.277778;10pkt 10fpkt"];
2374--3371[label="0.111111;4pkt 4fpkt"];
2374--3457[label="0.138889;5pkt 5fpkt"];
2374--3950[label="0.138889;5pkt 5fpkt"];
2374--5780[label="0.972222;35pkt 35fpkt"];
2374--7161[label="1;36pkt 36fpkt"];
2486--3725[label="1;6pkt 6fpkt"];
2669--2922[label="0.370968;23pkt 23fpkt"];
2669--3055[label="0.125;7pkt 7fpkt"];
2669--3770[label="1;32pkt 32fpkt"];
2669--3950[label="0.435484;27pkt 27fpkt"];
2669--5879[label="0.12069;7pkt 7fpkt"];
2669--7231[label="0.12069;7pkt 7fpkt"];
2922--2942[label="0.130435;9pkt 9fpkt"];
2922--3371[label="0.246377;17pkt 17fpkt"];
2922--3457[label="0.1;4pkt 4fpkt"];
2922--3770[label="0.375;12pkt 12fpkt"];
2922--3950[label="0.289855;20pkt 20fpkt"];
2942--3055[label="0.160714;9pkt 9fpkt"];
2942--3950[label="0.376471;32pkt 32fpkt"];
2942--5780[label="0.277778;10pkt 10fpkt"];
2942--7161[label="0.27027;10pkt 10fpkt"];
3055--3371[label="0.303571;17pkt 17fpkt"];
3055--3457[label="0.2;8pkt 8fpkt"];
3055--3770[label="0.125;4pkt 4fpkt"];
3055--3950[label="0.125;7pkt 7fpkt"];
3056--3371[label="1;1pkt 1fpkt"];
3056--3950[label="1;1pkt 1fpkt"];
3296--3371[label="0.153846;16pkt 16fpkt"];
3296--3457[label="0.05;2pkt 2fpkt"];
3296--3490[label="0.00961538;1pkt 1fpkt"];
3296--3581[label="0.0769231;8pkt 8fpkt"];
3296--3950[label="0.0961538;10pkt 10fpkt"];
3296--4129[label="0.990385;103pkt 103fpkt"];
3296--6054[label="0.990385;103pkt 103fpkt"];
3371--3713[label="0.236842;9pkt 9fpkt"];
3371--3725[label="0.690909;38pkt 38fpkt"];
3371--3816[label="0.00980392;1pkt 1fpkt"];
3371--3950[label="0.0962129;94pkt 94fpkt"];
3371--3951[label="0.00102354;1pkt 1fpkt"];
3371--3962[label="0.00102354;1pkt 1fpkt"];
3371--3972[label="0.00102354;1pkt 1fpkt"];
3371--3990[label="0.0888889;4pkt 4fpkt"];
3371--4062[label="0.0774648;55pkt 55fpkt"];
3371--4096[label="0.016129;1pkt 1fpkt"];
3371--4129[label="0.118519;16pkt 16fpkt"];
3371--4137[label="0.0967742;3pkt 3fpkt"];
3371--4167[label="0.00813008;1pkt 1fpkt"];
3371--4252[label="1;15pkt 15fpkt"];
3371--4261[label="0.16129;40pkt 40fpkt"];
3371--4302[label="1;15pkt 15fpkt"];
3371--4332[label="0.675439;77pkt 77fpkt"];
3371--4363[label="0.642857;27pkt 27fpkt"];
3371--4462[label="0.692308;27pkt 27fpkt"];
3371--4505[label="0.602273;53pkt 53fpkt"];
3371--4519[label="0.0212766;1pkt 1fpkt"];
3371--4576[label="0.216216;8pkt 8fpkt"];
3371--4591[label="0.52;13pkt 13fpkt"];
3371--4618[label="0.111111;11pkt 11fpkt"];
3371--4730[label="0.0666667;2pkt 2fpkt"];
3371--4793[label="0.08;2pkt 2fpkt"];
3371--4836[label="1;9pkt 9fpkt"];
3371--4996[label="0.75;18pkt 18fpkt"];
3371--5011[label="0.5;2pkt 2fpkt"];
3371--5019[label="0.461538;6pkt 6fpkt"];
3371--5085[label="0.0487805;2pkt 2fpkt"];
3371--5277[label="0.203704;11pkt 11fpkt"];
3371--5396[label="0.192308;10pkt 10fpkt"];
3371--5549[label="0.296296;8pkt 8fpkt"];
3371--5558[label="0.118644;7pkt 7fpkt"];
3371--5575[label="0.25;9pkt 9fpkt"];
3371--5619[label="0.0151515;1pkt 1fpkt"];
3371--5693[label="0.0727273;4pkt 4fpkt"];
3371--5780[label="0.111111;4pkt 4fpkt"];
3371--5879[label="0.258621;15pkt 15fpkt"];
3371--6006[label="0.0774648;55pkt 55fpkt"];
3371--6054[label="0.118519;16pkt 16fpkt"];
3371--6061[label="0.0967742;3pkt 3fpkt"];
3371--6085[label="0.00813008;1pkt 1fpkt"];
3371--6139[label="1;15pkt 15fpkt"];
3371--6172[label="1;15pkt 15fpkt"];
3371--6191[label="0.675439;77pkt 77fpkt"];
3371--6211[label="0.658537;27pkt 27fpkt"];
3371--6277[label="0.692308;27pkt 27fpkt"];
3371--6314[label="0.0212766;1pkt 1fpkt"];
3371--6360[label="0.5;13pkt 13fpkt"];
3371--6382[label="0.11;11pkt 11fpkt"];
3371--6450[label="0.0666667;2pkt 2fpkt"];
3371--6624[label="0.72;18pkt 18fpkt"];
3371--6642[label="0.461538;6pkt 6fpkt"];
3371--6907[label="0.192308;10pkt 10fpkt"];
3371--7009[label="0.285714;8pkt 8fpkt"];
3371--7014[label="0.116667;7pkt 7fpkt"];
3371--7050[label="0.0153846;1pkt 1fpkt"];
3371--7104[label="0.0714286;4pkt 4fpkt"];
3371--7161[label="0.108108;4pkt 4fpkt"];
3371--7231[label="0.258621;15pkt 15fpkt"];
3371--7309[label="0.0774648;55pkt 55fpkt"];
3371--7354[label="0.00813008;1pkt 1fpkt"];
3371--7423[label="0.675439;77pkt 77fpkt"];
3371--7539[label="0.11;11pkt 11fpkt"];
3371--7578[label="0.0666667;2pkt 2fpkt"];
3371--7683[label="0.72;18pkt 18fpkt"];
3371--7930[label="0.285714;8pkt 8fpkt"];
3371--7990[label="0.0727273;4pkt 4fpkt"];
3457--3950[label="0.025;1pkt 1fpkt"];
3457--4129[label="0.05;2pkt 2fpkt"];
3457--5780[label="0.138889;5pkt 5fpkt"];
3457--5879[label="0.125;5pkt 5fpkt"];
3457--6054[label="0.05;2pkt 2fpkt"];
3457--7161[label="0.135135;5pkt 5fpkt"];
3457--7231[label="0.125;5pkt 5fpkt"];
3581--3950[label="0.322034;38pkt 38fpkt"];
3581--4129[label="0.0677966;8pkt 8fpkt"];
3581--4275[label="0.163265;8pkt 8fpkt"];
3581--4316[label="0.135593;16pkt 16fpkt"];
3581--4730[label="0.1;3pkt 3fpkt"];
3581--5254[label="0.372881;44pkt 44fpkt"];
3581--6054[label="0.0677966;8pkt 8fpkt"];
3581--6157[label="0.16;8pkt 8fpkt"];
3581--6450[label="0.1;3pkt 3fpkt"];
3581--6811[label="0.372881;44pkt 44fpkt"];
3581--7396[label="0.16;8pkt 8fpkt"];
3581--7578[label="0.1;3pkt 3fpkt"];
3581--7806[label="0.372881;44pkt 44fpkt"];
3725--3950[label="0.0909091;5pkt 5fpkt"];
3770--3950[label="0.84375;27pkt 27fpkt"];
3770--5879[label="0.09375;3pkt 3fpkt"];
3770--7231[label="0.09375;3pkt 3fpkt"];
4129--6054[label="1;135pkt 135fpkt"];
4252--6139[label="1;15pkt 15fpkt"];
4302--6172[label="1;15pkt 15fpkt"];
4363--6211[label="1;41pkt 41fpkt"];
4462--6277[label="1;39pkt 39fpkt"];
4591--6360[label="1;25pkt 25fpkt"];
4996--6624[label="1;24pkt 24fpkt"];
4996--7683[label="1;24pkt 24fpkt"];
5019--6642[label="1;13pkt 13fpkt"];
5254--6811[label="1;247pkt 247fpkt"];
5254--7806[label="1;247pkt 247fpkt"];
5420--6924[label="1;24pkt 24fpkt"];
5420--7879[label="1;25pkt 25fpkt"];
5780--7161[label="1;36pkt 36fpkt"];
5829--7195[label="1;43pkt 43fpkt"];
5829--8049[label="1;43pkt 43fpkt"];
5879--7231[label="1;58pkt 58fpkt"];
6624--7683[label="1;25pkt 25fpkt"];
6811--7806[label="1;247pkt 247fpkt"];
6924--7879[label="1;24pkt 24fpkt"];
7195--8049[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="185.206.202.140" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_432{
style=filled;
color=gray75;
1369[label="86.135.44.140;d;21pkt 21fpkt", shape=diamond, color=yellow];
4277[label="136.230.77.35;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4324[label="136.230.101.40;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4450[label="136.230.99.52;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5234[label="136.230.111.152;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5656[label="136.230.78.208;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6159[label="136.230.77.35;5pkt 5fpkt", shape=invtriangle, color=brown];
6272[label="136.230.99.52;16pkt 16fpkt", shape=invtriangle, color=brown];
7077[label="136.230.78.208;17pkt 17fpkt", shape=invtriangle, color=brown];
7398[label="136.230.77.35;5pkt 5fpkt", shape=invhouse, color=bisque];
7474[label="136.230.99.52;17pkt 17fpkt", shape=invhouse, color=bisque];
7974[label="136.230.78.208;16pkt 16fpkt", shape=invhouse, color=bisque];
stat432[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 86.135.44.140:*}[27.5362%]&lt;BR/&gt;{136.230.99.52:25, *:*}[24.6377%]&lt;BR/&gt;{136.230.78.208:25, *:*}[24.6377%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.3289%)&lt;BR/&gt; 37538: (1.34228%)&lt;BR/&gt; 37526: (1.34228%)&lt;BR/&gt; 37280: (1.34228%)&lt;BR/&gt; 61570: (1.00671%)&gt;];
}
1369--1585[label="0.0952381;2pkt 2fpkt"];
1369--1706[label="0.047619;1pkt 1fpkt"];
1369--3003[label="0.0952381;2pkt 2fpkt"];
1369--3494[label="0.0952381;2pkt 2fpkt"];
1369--3631[label="0.047619;1pkt 1fpkt"];
1369--3914[label="0.047619;1pkt 1fpkt"];
1369--4101[label="0.047619;1pkt 1fpkt"];
1369--4134[label="0.047619;1pkt 1fpkt"];
1369--4277[label="0.25;1pkt 1fpkt"];
1369--4324[label="0.166667;1pkt 1fpkt"];
1369--4396[label="0.0952381;2pkt 2fpkt"];
1369--4450[label="0.0588235;1pkt 1fpkt"];
1369--4463[label="0.0952381;2pkt 2fpkt"];
1369--5234[label="0.125;1pkt 1fpkt"];
1369--5656[label="0.0588235;1pkt 1fpkt"];
1369--5726[label="0.0952381;2pkt 2fpkt"];
1369--6035[label="0.047619;1pkt 1fpkt"];
1369--6058[label="0.047619;1pkt 1fpkt"];
1369--6159[label="0.2;1pkt 1fpkt"];
1369--6233[label="0.0952381;2pkt 2fpkt"];
1369--6272[label="0.0625;1pkt 1fpkt"];
1369--7077[label="0.0588235;1pkt 1fpkt"];
1369--7398[label="0.2;1pkt 1fpkt"];
1369--7449[label="0.0952381;2pkt 2fpkt"];
1369--7474[label="0.0588235;1pkt 1fpkt"];
1369--7974[label="0.0625;1pkt 1fpkt"];
4277--6159[label="1;4pkt 4fpkt"];
4277--7398[label="1;4pkt 4fpkt"];
4450--6272[label="1;16pkt 16fpkt"];
4450--7474[label="1;17pkt 17fpkt"];
5656--7077[label="1;17pkt 17fpkt"];
5656--7974[label="1;16pkt 16fpkt"];
6159--7398[label="1;5pkt 5fpkt"];
6272--7474[label="1;16pkt 16fpkt"];
7077--7974[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="136.230.78.208" src_port="25"/>
      <filter src_ip="136.230.99.52" src_port="25"/>
      <filter dst_ip="86.135.44.140" src_port="25"/>
    </slice>
    <from sec="1034226021" usec="0"/>
    <to sec="1034226767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_433{
style=filled;
color=gray75;
169[label="161.238.38.58s;2pkt 2fpkt", shape=rectangle, color=red];
2279[label="161.238.38.58;s;142pkt 142fpkt", shape=diamond, color=yellow];
3738[label="161.238.38.58;s;142pkt 142fpkt", shape=hexagon, color=black];
4490[label="161.238.38.58;142pkt 142fpkt", shape=pentagon, color=darkviolet];
6296[label="161.238.38.58;141pkt 141fpkt", shape=invtriangle, color=brown];
7489[label="161.238.38.58;141pkt 141fpkt", shape=invhouse, color=bisque];
stat433[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.38.58:*, 85.34.104.145:80}[20.4225%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.4789%)&lt;BR/&gt; 4280: (1.76056%)&lt;BR/&gt; 443: (1.76056%)&lt;BR/&gt; 3810: (0.422535%)&lt;BR/&gt; 3795: (0.422535%)&gt;];
}
169--1114[label="1;2pkt 2fpkt"];
169--2279[label="1;2pkt 2fpkt"];
169--3377[label="1;2pkt 2fpkt"];
169--3738[label="1;2pkt 2fpkt"];
169--4490[label="1;2pkt 2fpkt"];
169--6296[label="1;2pkt 2fpkt"];
169--7489[label="1;2pkt 2fpkt"];
2279--2456[label="0.126761;18pkt 18fpkt"];
2279--2543[label="0.0555556;2pkt 2fpkt"];
2279--2600[label="0.0104167;1pkt 1fpkt"];
2279--3377[label="0.11828;11pkt 11fpkt"];
2279--3678[label="0.126761;18pkt 18fpkt"];
2279--3738[label="1;142pkt 142fpkt"];
2279--4490[label="1;142pkt 142fpkt"];
2279--6296[label="1;141pkt 141fpkt"];
2279--7489[label="1;141pkt 141fpkt"];
3738--4490[label="1;142pkt 142fpkt"];
3738--6296[label="1;141pkt 141fpkt"];
3738--7489[label="1;141pkt 141fpkt"];
4490--6296[label="1;141pkt 141fpkt"];
4490--7489[label="1;141pkt 141fpkt"];
6296--7489[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter dst_ip="85.34.104.145" dst_port="80" src_ip="161.238.38.58"/>
    </slice>
    <from sec="1034226273" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,501,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_434{
style=filled;
color=gray75;
2168[label="185.191.0.24;d;40pkt 40fpkt", shape=diamond, color=yellow];
2491[label="197.40.33.15;s;1pkt 1fpkt", shape=diamond, color=yellow];
3745[label="197.40.33.15;s;1pkt 1fpkt", shape=hexagon, color=black];
4987[label="192.203.69.120;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6043[label="197.40.33.15;1pkt 1fpkt", shape=invtriangle, color=brown];
6618[label="192.203.69.120;15pkt 15fpkt", shape=invtriangle, color=brown];
7677[label="192.203.69.120;15pkt 15fpkt", shape=invhouse, color=bisque];
stat434[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.203.69.120:*, 185.191.0.24:21}[22.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (28.9773%)&lt;BR/&gt; 0: (3.40909%)&lt;BR/&gt; 34841: (2.27273%)&lt;BR/&gt; 34793: (2.27273%)&lt;BR/&gt; 34694: (2.27273%)&gt;];
}
2168--2491[label="1;1pkt 1fpkt"];
2168--3745[label="1;1pkt 1fpkt"];
2168--3944[label="0.05;2pkt 2fpkt"];
2168--3957[label="0.05;2pkt 2fpkt"];
2168--3967[label="0.05;2pkt 2fpkt"];
2168--4987[label="1;15pkt 15fpkt"];
2168--6043[label="1;1pkt 1fpkt"];
2168--6618[label="1;15pkt 15fpkt"];
2168--7677[label="1;15pkt 15fpkt"];
2491--3745[label="1;1pkt 1fpkt"];
2491--6043[label="1;1pkt 1fpkt"];
3745--6043[label="1;1pkt 1fpkt"];
4987--6618[label="1;15pkt 15fpkt"];
4987--7677[label="1;15pkt 15fpkt"];
6618--7677[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.0.24" dst_port="21" src_ip="192.203.69.120"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.816796,2.18923,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_435{
style=filled;
color=gray75;
2321[label="86.21.208.113;s;9pkt 9fpkt", shape=diamond, color=yellow];
3748[label="86.21.208.113;s;9pkt 9fpkt", shape=hexagon, color=black];
stat435[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.21.208.113:80, 161.238.10.88:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1795: (5.55556%)&lt;BR/&gt; 1793: (5.55556%)&lt;BR/&gt; 1792: (5.55556%)&lt;BR/&gt; 1784: (5.55556%)&gt;];
}
2321--3748[label="1;9pkt 9fpkt"];
2321--6579[label="0.5;1pkt 1fpkt"];
3748--6579[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.10.88" src_ip="86.21.208.113" src_port="80"/>
    </slice>
    <from sec="1034226429" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852182,2.15881,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_436{
style=filled;
color=gray75;
2496[label="200.230.47.150;s;6pkt 6fpkt", shape=diamond, color=yellow];
3749[label="200.230.47.150;s;6pkt 6fpkt", shape=hexagon, color=black];
6789[label="200.230.47.150;12pkt 12fpkt", shape=invtriangle, color=brown];
stat436[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.230.47.150:*, 212.24.9.10:53}[50%]&lt;BR/&gt;{200.230.47.150:7743, 212.24.9.10:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (25%)&lt;BR/&gt; 53: (25%)&lt;BR/&gt; 33661: (6.25%)&lt;BR/&gt; 33465: (6.25%)&lt;BR/&gt; 33414: (6.25%)&gt;];
}
2496--3749[label="1;6pkt 6fpkt"];
2496--5219[label="1;6pkt 6fpkt"];
2496--6789[label="1;6pkt 6fpkt"];
3749--5219[label="1;6pkt 6fpkt"];
3749--6789[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.9.10" src_ip="200.230.47.150" src_port="7743"/>
      <filter dst_ip="212.24.9.10" dst_port="53" src_ip="200.230.47.150"/>
    </slice>
    <from sec="1034226198" usec="0"/>
    <to sec="1034226575" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
2524[label="213.91.101.157;d;103pkt 103fpkt", shape=diamond, color=yellow];
2525[label="85.113.233.56;s;103pkt 103fpkt", shape=diamond, color=yellow];
3757[label="213.91.101.157;d;103pkt 103fpkt", shape=hexagon, color=black];
3758[label="85.113.233.56;s;103pkt 103fpkt", shape=hexagon, color=black];
4477[label="85.113.233.56;103pkt 103fpkt", shape=pentagon, color=darkviolet];
6288[label="85.113.233.56;102pkt 102fpkt", shape=invtriangle, color=brown];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.113.233.56:80, 213.91.101.157:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1491: (0.486224%)&lt;BR/&gt; 1490: (0.486224%)&lt;BR/&gt; 1489: (0.486224%)&lt;BR/&gt; 1488: (0.486224%)&gt;];
}
2524--2525[label="1;103pkt 103fpkt"];
2524--3757[label="1;103pkt 103fpkt"];
2524--3758[label="1;103pkt 103fpkt"];
2524--4477[label="1;103pkt 103fpkt"];
2524--6288[label="1;102pkt 102fpkt"];
2525--3757[label="1;103pkt 103fpkt"];
2525--3758[label="1;103pkt 103fpkt"];
2525--4477[label="1;103pkt 103fpkt"];
2525--6288[label="1;102pkt 102fpkt"];
3757--3758[label="1;103pkt 103fpkt"];
3757--4477[label="1;103pkt 103fpkt"];
3757--6288[label="1;102pkt 102fpkt"];
3758--4477[label="1;103pkt 103fpkt"];
3758--6288[label="1;102pkt 102fpkt"];
4477--6288[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_ip="213.91.101.157" src_ip="85.113.233.56" src_port="80"/>
    </slice>
    <from sec="1034226553" usec="0"/>
    <to sec="1034226616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
2656[label="219.57.138.230;d;3pkt 3fpkt", shape=diamond, color=yellow];
2657[label="161.238.48.89;s;3pkt 3fpkt", shape=diamond, color=yellow];
3764[label="219.57.138.230;d;3pkt 3fpkt", shape=hexagon, color=black];
3765[label="161.238.48.89;s;3pkt 3fpkt", shape=hexagon, color=black];
4762[label="161.238.48.89;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6470[label="161.238.48.89;3pkt 3fpkt", shape=invtriangle, color=brown];
7589[label="161.238.48.89;3pkt 3fpkt", shape=invhouse, color=bisque];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.48.89:1382, 219.57.138.230:80}[33.3333%]&lt;BR/&gt;{161.238.48.89:1383, 219.57.138.230:80}[33.3333%]&lt;BR/&gt;{161.238.48.89:1384, 219.57.138.230:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1384: (16.6667%)&lt;BR/&gt; 1383: (16.6667%)&lt;BR/&gt; 1382: (16.6667%)&gt;];
}
2656--2657[label="1;3pkt 3fpkt"];
2656--3764[label="1;3pkt 3fpkt"];
2656--3765[label="1;3pkt 3fpkt"];
2656--4762[label="1;3pkt 3fpkt"];
2656--6470[label="1;3pkt 3fpkt"];
2656--7589[label="1;3pkt 3fpkt"];
2657--3764[label="1;3pkt 3fpkt"];
2657--3765[label="1;3pkt 3fpkt"];
2657--4762[label="1;3pkt 3fpkt"];
2657--6470[label="1;3pkt 3fpkt"];
2657--7589[label="1;3pkt 3fpkt"];
3764--3765[label="1;3pkt 3fpkt"];
3764--4762[label="1;3pkt 3fpkt"];
3764--6470[label="1;3pkt 3fpkt"];
3764--7589[label="1;3pkt 3fpkt"];
3765--4762[label="1;3pkt 3fpkt"];
3765--6470[label="1;3pkt 3fpkt"];
3765--7589[label="1;3pkt 3fpkt"];
4762--6470[label="1;3pkt 3fpkt"];
4762--7589[label="1;3pkt 3fpkt"];
6470--7589[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="219.57.138.230" dst_port="80" src_ip="161.238.48.89" src_port="1384"/>
      <filter dst_ip="219.57.138.230" dst_port="80" src_ip="161.238.48.89" src_port="1383"/>
      <filter dst_ip="219.57.138.230" dst_port="80" src_ip="161.238.48.89" src_port="1382"/>
    </slice>
    <from sec="1034226692" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,999,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_439{
style=filled;
color=gray75;
138[label="201.147.52.226s;2pkt 2fpkt", shape=rectangle, color=red];
635[label="212.24.4.52;d;7pkt 7fpkt", shape=diamond, color=yellow];
636[label="201.147.52.226;s;2pkt 2fpkt", shape=diamond, color=yellow];
2676[label="212.24.4.52;d;7pkt 7fpkt", shape=hexagon, color=black];
2677[label="201.147.52.226;s;2pkt 2fpkt", shape=hexagon, color=black];
3771[label="212.24.4.52;d;2pkt 2fpkt", shape=polygon, color=gold];
3772[label="201.147.52.226;s;2pkt 2fpkt", shape=polygon, color=gold];
5764[label="201.147.52.226;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7149[label="201.147.52.226;2pkt 2fpkt", shape=invtriangle, color=brown];
8015[label="201.147.52.226;2pkt 2fpkt", shape=invhouse, color=bisque];
stat439[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:7743, 212.24.4.52:*}[57.1429%]&lt;BR/&gt;{201.147.52.226:6699, 212.24.4.52:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (33.3333%)&lt;BR/&gt; 2116: (16.6667%)&lt;BR/&gt; 2115: (16.6667%)&lt;BR/&gt; 7743: (13.3333%)&lt;BR/&gt; 10020: (3.33333%)&gt;];
}
138--635[label="1;2pkt 2fpkt"];
138--636[label="1;2pkt 2fpkt"];
138--2676[label="1;2pkt 2fpkt"];
138--2677[label="1;2pkt 2fpkt"];
138--3771[label="1;2pkt 2fpkt"];
138--3772[label="1;2pkt 2fpkt"];
138--5764[label="1;2pkt 2fpkt"];
138--7149[label="1;2pkt 2fpkt"];
138--8015[label="1;2pkt 2fpkt"];
635--636[label="1;2pkt 2fpkt"];
635--2676[label="1;7pkt 7fpkt"];
635--2677[label="1;2pkt 2fpkt"];
635--3771[label="1;2pkt 2fpkt"];
635--3772[label="1;2pkt 2fpkt"];
635--5764[label="1;2pkt 2fpkt"];
635--7149[label="1;2pkt 2fpkt"];
635--8015[label="1;2pkt 2fpkt"];
636--2676[label="1;2pkt 2fpkt"];
636--2677[label="1;2pkt 2fpkt"];
636--3771[label="1;2pkt 2fpkt"];
636--3772[label="1;2pkt 2fpkt"];
636--5764[label="1;2pkt 2fpkt"];
636--7149[label="1;2pkt 2fpkt"];
636--8015[label="1;2pkt 2fpkt"];
2676--2677[label="1;2pkt 2fpkt"];
2676--3771[label="1;2pkt 2fpkt"];
2676--3772[label="1;2pkt 2fpkt"];
2676--5764[label="1;2pkt 2fpkt"];
2676--7149[label="1;2pkt 2fpkt"];
2676--8015[label="1;2pkt 2fpkt"];
2677--3771[label="1;2pkt 2fpkt"];
2677--3772[label="1;2pkt 2fpkt"];
2677--5764[label="1;2pkt 2fpkt"];
2677--7149[label="1;2pkt 2fpkt"];
2677--8015[label="1;2pkt 2fpkt"];
3771--3772[label="1;2pkt 2fpkt"];
3771--5764[label="1;2pkt 2fpkt"];
3771--7149[label="1;2pkt 2fpkt"];
3771--8015[label="1;2pkt 2fpkt"];
3772--5764[label="1;2pkt 2fpkt"];
3772--7149[label="1;2pkt 2fpkt"];
3772--8015[label="1;2pkt 2fpkt"];
5764--7149[label="1;2pkt 2fpkt"];
5764--8015[label="1;2pkt 2fpkt"];
7149--8015[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.4.52" src_port="7743"/>
      <filter dst_ip="212.24.4.52" src_ip="201.147.52.226" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_440{
style=filled;
color=gray75;
1481[label="202.241.156.24;s;1pkt 1fpkt", shape=diamond, color=yellow];
1728[label="43.70.117.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
2807[label="167.8.140.114;d;14pkt 14fpkt", shape=hexagon, color=black];
3792[label="167.8.140.114;d;9pkt 9fpkt", shape=polygon, color=gold];
stat440[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 167.8.140.114:6257}[64.2857%]&lt;BR/&gt;{*:6699, 167.8.140.114:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (56%)&lt;BR/&gt; 6699: (22%)&lt;BR/&gt; 1094: (6%)&lt;BR/&gt; 1092: (6%)&lt;BR/&gt; 2164: (4%)&gt;];
}
1481--2807[label="1;1pkt 1fpkt"];
1481--3792[label="1;1pkt 1fpkt"];
1728--2807[label="1;1pkt 1fpkt"];
1728--3792[label="1;1pkt 1fpkt"];
2807--3792[label="1;9pkt 9fpkt"];
2807--3948[label="0.214286;3pkt 3fpkt"];
2807--3952[label="0.0714286;1pkt 1fpkt"];
2807--3961[label="0.214286;3pkt 3fpkt"];
2807--3963[label="0.0714286;1pkt 1fpkt"];
2807--3971[label="0.214286;3pkt 3fpkt"];
2807--3973[label="0.0714286;1pkt 1fpkt"];
2807--4400[label="1;2pkt 2fpkt"];
2807--4991[label="1;1pkt 1fpkt"];
2807--6235[label="1;2pkt 2fpkt"];
3792--3948[label="0.333333;3pkt 3fpkt"];
3792--3952[label="0.111111;1pkt 1fpkt"];
3792--3961[label="0.333333;3pkt 3fpkt"];
3792--3963[label="0.111111;1pkt 1fpkt"];
3792--3971[label="0.333333;3pkt 3fpkt"];
3792--3973[label="0.111111;1pkt 1fpkt"];
3792--4991[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.140.114" src_port="6699"/>
      <filter dst_ip="167.8.140.114" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
1292[label="81.114.188.156;d;2pkt 2fpkt", shape=diamond, color=yellow];
1293[label="212.24.29.0;s;5pkt 5fpkt", shape=diamond, color=yellow];
2851[label="212.24.29.0;s;5pkt 5fpkt", shape=hexagon, color=black];
3276[label="81.114.188.156;d;1pkt 1fpkt", shape=hexagon, color=black];
3796[label="212.24.29.0;s;5pkt 5fpkt", shape=polygon, color=gold];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.29.0:*, 203.77.235.125:6699}[33.3333%]&lt;BR/&gt;{*:*, 81.114.188.156:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (38.8889%)&lt;BR/&gt; 3044: (13.8889%)&lt;BR/&gt; 3049: (8.33333%)&lt;BR/&gt; 3048: (8.33333%)&lt;BR/&gt; 3047: (8.33333%)&gt;];
}
1292--1293[label="0.5;1pkt 1fpkt"];
1292--2767[label="0.5;1pkt 1fpkt"];
1292--2851[label="0.5;1pkt 1fpkt"];
1292--3276[label="1;1pkt 1fpkt"];
1292--3796[label="0.5;1pkt 1fpkt"];
1292--3822[label="0.5;1pkt 1fpkt"];
1292--5695[label="0.5;1pkt 1fpkt"];
1293--2851[label="1;5pkt 5fpkt"];
1293--3276[label="1;1pkt 1fpkt"];
1293--3796[label="1;5pkt 5fpkt"];
2851--3276[label="1;1pkt 1fpkt"];
2851--3796[label="1;5pkt 5fpkt"];
3276--3796[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="81.114.188.156"/>
      <filter dst_ip="203.77.235.125" dst_port="6699" src_ip="212.24.29.0"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_442{
style=filled;
color=gray75;
634[label="202.169.123.175;s;3pkt 3fpkt", shape=diamond, color=yellow];
2675[label="202.169.123.175;s;3pkt 3fpkt", shape=hexagon, color=black];
3806[label="202.169.123.175;s;2pkt 2fpkt", shape=polygon, color=gold];
5409[label="202.169.123.175;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6917[label="202.169.123.175;2pkt 2fpkt", shape=invtriangle, color=brown];
7873[label="202.169.123.175;2pkt 2fpkt", shape=invhouse, color=bisque];
stat442[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.169.123.175:1214, 185.191.166.225:3045}[33.3333%]&lt;BR/&gt;{202.169.123.175:1214, 185.191.166.225:4672}[33.3333%]&lt;BR/&gt;{202.169.123.175:1214, 185.191.166.225:4974}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 4974: (21.4286%)&lt;BR/&gt; 3045: (17.8571%)&lt;BR/&gt; 4672: (10.7143%)&gt;];
}
634--2674[label="1;3pkt 3fpkt"];
634--2675[label="1;3pkt 3fpkt"];
634--3806[label="1;2pkt 2fpkt"];
634--5409[label="1;2pkt 2fpkt"];
634--6917[label="1;2pkt 2fpkt"];
634--7873[label="1;2pkt 2fpkt"];
2675--3806[label="1;2pkt 2fpkt"];
2675--5409[label="1;2pkt 2fpkt"];
2675--6917[label="1;2pkt 2fpkt"];
2675--7873[label="1;2pkt 2fpkt"];
3806--5409[label="0.5;1pkt 1fpkt"];
3806--6917[label="0.5;1pkt 1fpkt"];
3806--7873[label="0.5;1pkt 1fpkt"];
5409--6917[label="1;2pkt 2fpkt"];
5409--7873[label="1;2pkt 2fpkt"];
6917--7873[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.166.225" dst_port="4974" src_ip="202.169.123.175" src_port="1214"/>
      <filter dst_ip="185.191.166.225" dst_port="4672" src_ip="202.169.123.175" src_port="1214"/>
      <filter dst_ip="185.191.166.225" dst_port="3045" src_ip="202.169.123.175" src_port="1214"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25702,2.20707,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_443{
style=filled;
color=gray75;
1466[label="136.230.112.86;d;34pkt 34fpkt", shape=diamond, color=yellow];
3087[label="86.135.44.141;s;9pkt 9fpkt", shape=hexagon, color=black];
3829[label="86.135.44.141;s;7pkt 7fpkt", shape=polygon, color=gold];
5387[label="212.218.223.171;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6900[label="212.218.223.171;27pkt 27fpkt", shape=invtriangle, color=brown];
stat443[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.230.112.86:*}[53.125%]&lt;BR/&gt;{212.218.223.171:25, *:*}[42.1875%]&lt;BR/&gt;{*:*, *:25}[29.6875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.3462%)&lt;BR/&gt; 21: (4.32692%)&lt;BR/&gt; 5190: (2.88462%)&lt;BR/&gt; 43198: (1.44231%)&lt;BR/&gt; 43099: (1.44231%)&gt;];
}
1466--1999[label="0.0555556;1pkt 1fpkt"];
1466--2266[label="0.130435;3pkt 3fpkt"];
1466--2570[label="0.310345;9pkt 9fpkt"];
1466--3087[label="0.111111;1pkt 1fpkt"];
1466--3287[label="0.0909091;1pkt 1fpkt"];
1466--3454[label="0.130435;3pkt 3fpkt"];
1466--3651[label="1;34pkt 34fpkt"];
1466--3829[label="0.142857;1pkt 1fpkt"];
1466--5060[label="0.0833333;1pkt 1fpkt"];
1466--5387[label="0.185185;5pkt 5fpkt"];
1466--5440[label="0.111111;3pkt 3fpkt"];
1466--5492[label="0.0555556;1pkt 1fpkt"];
1466--6672[label="0.0833333;1pkt 1fpkt"];
1466--6900[label="0.185185;5pkt 5fpkt"];
1466--6936[label="0.111111;3pkt 3fpkt"];
1466--6964[label="0.0555556;1pkt 1fpkt"];
3087--3113[label="0.111111;1pkt 1fpkt"];
3087--3651[label="0.111111;1pkt 1fpkt"];
3087--3829[label="1;7pkt 7fpkt"];
5387--6900[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="136.230.112.86"/>
      <filter dst_port="25"/>
      <filter src_ip="212.218.223.171" src_port="25"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23331,2.23684,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
1307[label="3.178.27.180;s;173pkt 173fpkt", shape=diamond, color=yellow];
1308[label="161.238.73.89;d;215pkt 215fpkt", shape=diamond, color=yellow];
2861[label="3.178.27.180;s;173pkt 173fpkt", shape=hexagon, color=black];
2983[label="161.238.73.89;d;187pkt 187fpkt", shape=hexagon, color=black];
3837[label="3.178.27.180;s;173pkt 173fpkt", shape=polygon, color=gold];
5445[label="3.178.27.180;174pkt 174fpkt", shape=pentagon, color=darkviolet];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.178.27.180:80, 161.238.73.89:*}[80.9302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51412: (0.273973%)&lt;BR/&gt; 51410: (0.273973%)&lt;BR/&gt; 51409: (0.273973%)&lt;BR/&gt; 51408: (0.273973%)&gt;];
}
1307--1308[label="1;173pkt 173fpkt"];
1307--2861[label="1;173pkt 173fpkt"];
1307--2983[label="1;173pkt 173fpkt"];
1307--3837[label="1;173pkt 173fpkt"];
1307--3950[label="0.0289017;5pkt 5fpkt"];
1307--5445[label="1;173pkt 173fpkt"];
1308--1332[label="0.00675676;1pkt 1fpkt"];
1308--1349[label="0.0117647;2pkt 2fpkt"];
1308--1576[label="0.0416667;1pkt 1fpkt"];
1308--1955[label="0.02;1pkt 1fpkt"];
1308--2149[label="0.00775194;1pkt 1fpkt"];
1308--2861[label="1;173pkt 173fpkt"];
1308--2870[label="0.00694444;1pkt 1fpkt"];
1308--2983[label="1;187pkt 187fpkt"];
1308--3837[label="1;173pkt 173fpkt"];
1308--3869[label="0.011236;1pkt 1fpkt"];
1308--3950[label="0.0465116;10pkt 10fpkt"];
1308--3990[label="0.0222222;1pkt 1fpkt"];
1308--4146[label="0.0416667;1pkt 1fpkt"];
1308--4221[label="0.0204082;1pkt 1fpkt"];
1308--4261[label="0.00930233;2pkt 2fpkt"];
1308--4333[label="0.00662252;1pkt 1fpkt"];
1308--4629[label="0.0181818;1pkt 1fpkt"];
1308--4642[label="0.0217391;1pkt 1fpkt"];
1308--4825[label="0.181818;2pkt 2fpkt"];
1308--4976[label="0.0204082;1pkt 1fpkt"];
1308--5445[label="1;174pkt 174fpkt"];
1308--5469[label="0.0238095;1pkt 1fpkt"];
1308--5549[label="0.037037;1pkt 1fpkt"];
1308--5558[label="0.0169492;1pkt 1fpkt"];
1308--5743[label="0.0136986;1pkt 1fpkt"];
1308--5801[label="0.0227273;1pkt 1fpkt"];
1308--5890[label="0.0277778;1pkt 1fpkt"];
1308--6068[label="0.04;1pkt 1fpkt"];
1308--6118[label="0.0208333;1pkt 1fpkt"];
1308--6192[label="0.00666667;1pkt 1fpkt"];
1308--6390[label="0.0181818;1pkt 1fpkt"];
1308--6614[label="0.0204082;1pkt 1fpkt"];
1308--7009[label="0.0357143;1pkt 1fpkt"];
1308--7014[label="0.0166667;1pkt 1fpkt"];
1308--7137[label="0.0138889;1pkt 1fpkt"];
1308--7173[label="0.0227273;1pkt 1fpkt"];
1308--7236[label="0.027027;1pkt 1fpkt"];
1308--7343[label="0.04;1pkt 1fpkt"];
1308--7424[label="0.00666667;1pkt 1fpkt"];
1308--7544[label="0.0178571;1pkt 1fpkt"];
1308--7674[label="0.02;1pkt 1fpkt"];
1308--7930[label="0.0357143;1pkt 1fpkt"];
1308--8031[label="0.0232558;1pkt 1fpkt"];
1308--8077[label="0.027027;1pkt 1fpkt"];
2861--2983[label="1;173pkt 173fpkt"];
2861--3837[label="1;173pkt 173fpkt"];
2861--3950[label="0.0289017;5pkt 5fpkt"];
2861--5445[label="1;173pkt 173fpkt"];
2983--3837[label="1;173pkt 173fpkt"];
2983--3869[label="0.011236;1pkt 1fpkt"];
2983--3950[label="0.0534759;10pkt 10fpkt"];
2983--4333[label="0.00662252;1pkt 1fpkt"];
2983--4825[label="0.181818;2pkt 2fpkt"];
2983--4976[label="0.0204082;1pkt 1fpkt"];
2983--5445[label="0.994253;173pkt 173fpkt"];
2983--5469[label="0.0238095;1pkt 1fpkt"];
2983--6192[label="0.00666667;1pkt 1fpkt"];
2983--6614[label="0.0204082;1pkt 1fpkt"];
2983--7424[label="0.00666667;1pkt 1fpkt"];
2983--7674[label="0.02;1pkt 1fpkt"];
3837--3950[label="0.0289017;5pkt 5fpkt"];
3837--5445[label="1;173pkt 173fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.73.89" src_ip="3.178.27.180" src_port="80"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_445{
style=filled;
color=gray75;
1812[label="213.70.180.122;s;79pkt 79fpkt", shape=diamond, color=yellow];
3149[label="213.70.180.122;s;69pkt 69fpkt", shape=hexagon, color=black];
3843[label="213.70.180.122;s;37pkt 37fpkt", shape=polygon, color=gold];
stat445[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.70.180.122:80, 212.18.104.84:*}[91.1392%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3312: (0.810811%)&lt;BR/&gt; 3310: (0.810811%)&lt;BR/&gt; 3308: (0.810811%)&lt;BR/&gt; 3261: (0.810811%)&gt;];
}
1812--2060[label="0.233333;7pkt 7fpkt"];
1812--3149[label="1;69pkt 69fpkt"];
1812--3843[label="1;37pkt 37fpkt"];
1812--3950[label="0.101266;8pkt 8fpkt"];
3149--3843[label="1;37pkt 37fpkt"];
3149--3950[label="0.115942;8pkt 8fpkt"];
3843--3950[label="0.216216;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.104.84" src_ip="213.70.180.122" src_port="80"/>
    </slice>
    <from sec="1034226014" usec="0"/>
    <to sec="1034226735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_446{
style=filled;
color=gray75;
1893[label="161.238.11.114;d;5pkt 5fpkt", shape=diamond, color=yellow];
3472[label="161.238.11.114;d;5pkt 5fpkt", shape=hexagon, color=black];
3845[label="194.111.185.237;s;33pkt 33fpkt", shape=polygon, color=gold];
5671[label="195.179.30.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7090[label="195.179.30.211;2pkt 2fpkt", shape=invtriangle, color=brown];
7982[label="195.179.30.211;2pkt 2fpkt", shape=invhouse, color=bisque];
stat446[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.111.185.237:80, 167.8.138.41:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9167%)&lt;BR/&gt; 1289: (5.20833%)&lt;BR/&gt; 1288: (4.16667%)&lt;BR/&gt; 1254: (3.125%)&lt;BR/&gt; 1253: (3.125%)&gt;];
}
1893--3160[label="0.4;2pkt 2fpkt"];
1893--3472[label="1;5pkt 5fpkt"];
1893--3845[label="0.4;2pkt 2fpkt"];
1893--3953[label="0.2;1pkt 1fpkt"];
1893--5151[label="0.2;1pkt 1fpkt"];
1893--5671[label="1;1pkt 1fpkt"];
1893--7090[label="1;2pkt 2fpkt"];
1893--7982[label="1;2pkt 2fpkt"];
3472--3845[label="0.4;2pkt 2fpkt"];
3472--3953[label="0.2;1pkt 1fpkt"];
3472--5151[label="0.2;1pkt 1fpkt"];
3472--5671[label="1;1pkt 1fpkt"];
3472--7090[label="1;2pkt 2fpkt"];
3472--7982[label="1;2pkt 2fpkt"];
3845--3871[label="0.12;3pkt 3fpkt"];
3845--3950[label="0.181818;6pkt 6fpkt"];
5671--7090[label="1;1pkt 1fpkt"];
5671--7982[label="1;1pkt 1fpkt"];
7090--7982[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.138.41" src_ip="194.111.185.237" src_port="80"/>
    </slice>
    <from sec="1034226039" usec="0"/>
    <to sec="1034226711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35357,2.21616,999,1 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
136[label="185.191.98.225s;5pkt 5fpkt", shape=rectangle, color=red];
772[label="81.41.46.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
774[label="185.191.98.225;s;33pkt 33fpkt", shape=diamond, color=yellow];
835[label="184.15.131.63;d;1pkt 1fpkt", shape=diamond, color=yellow];
859[label="43.138.13.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
977[label="58.128.19.93;d;1pkt 1fpkt", shape=diamond, color=yellow];
1199[label="3.10.170.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
2795[label="185.191.98.225;s;31pkt 31fpkt", shape=hexagon, color=black];
3510[label="184.15.131.63;d;1pkt 1fpkt", shape=hexagon, color=black];
3715[label="58.128.19.93;d;1pkt 1fpkt", shape=hexagon, color=black];
3853[label="185.191.98.225;s;24pkt 24fpkt", shape=polygon, color=gold];
5753[label="185.191.98.225;35pkt 35fpkt", shape=pentagon, color=darkviolet];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.98.225:0, *:0}[60%]&lt;BR/&gt;{185.191.98.225:6699, *:*}[25.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50.3704%)&lt;BR/&gt; 6699: (21.8519%)&lt;BR/&gt; 3366: (2.59259%)&lt;BR/&gt; 2835: (2.59259%)&lt;BR/&gt; 22119: (2.22222%)&gt;];
}
136--772[label="1;1pkt 1fpkt"];
136--774[label="1;5pkt 5fpkt"];
136--835[label="1;1pkt 1fpkt"];
136--859[label="1;1pkt 1fpkt"];
136--977[label="1;1pkt 1fpkt"];
136--1199[label="1;1pkt 1fpkt"];
136--2795[label="1;5pkt 5fpkt"];
136--3510[label="1;1pkt 1fpkt"];
136--3715[label="1;1pkt 1fpkt"];
136--3853[label="1;5pkt 5fpkt"];
136--5753[label="1;5pkt 5fpkt"];
772--774[label="1;1pkt 1fpkt"];
772--2795[label="1;1pkt 1fpkt"];
772--3853[label="1;1pkt 1fpkt"];
772--5753[label="1;1pkt 1fpkt"];
774--835[label="1;1pkt 1fpkt"];
774--859[label="1;1pkt 1fpkt"];
774--977[label="1;1pkt 1fpkt"];
774--1199[label="1;1pkt 1fpkt"];
774--2795[label="1;31pkt 31fpkt"];
774--3510[label="1;1pkt 1fpkt"];
774--3715[label="1;1pkt 1fpkt"];
774--3853[label="1;24pkt 24fpkt"];
774--5753[label="1;33pkt 33fpkt"];
835--2795[label="1;1pkt 1fpkt"];
835--3510[label="1;1pkt 1fpkt"];
835--3853[label="1;1pkt 1fpkt"];
835--5753[label="1;1pkt 1fpkt"];
859--2795[label="1;1pkt 1fpkt"];
859--3853[label="1;1pkt 1fpkt"];
859--5753[label="1;1pkt 1fpkt"];
977--2795[label="1;1pkt 1fpkt"];
977--3715[label="1;1pkt 1fpkt"];
977--3853[label="1;1pkt 1fpkt"];
977--5753[label="1;1pkt 1fpkt"];
1199--2795[label="1;1pkt 1fpkt"];
1199--3853[label="1;1pkt 1fpkt"];
1199--5753[label="1;1pkt 1fpkt"];
2795--3510[label="1;1pkt 1fpkt"];
2795--3715[label="1;1pkt 1fpkt"];
2795--3853[label="1;24pkt 24fpkt"];
2795--5753[label="1;31pkt 31fpkt"];
3510--3853[label="1;1pkt 1fpkt"];
3510--5753[label="1;1pkt 1fpkt"];
3715--3853[label="1;1pkt 1fpkt"];
3715--5753[label="1;1pkt 1fpkt"];
3853--5753[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="185.191.98.225" src_port="6699"/>
      <filter src_ip="185.191.98.225"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_449{
style=filled;
color=gray75;
1926[label="212.24.7.16;s;23pkt 23fpkt", shape=diamond, color=yellow];
1927[label="200.177.185.239;d;23pkt 23fpkt", shape=diamond, color=yellow];
3234[label="212.24.7.16;s;23pkt 23fpkt", shape=hexagon, color=black];
3857[label="212.24.7.16;s;20pkt 20fpkt", shape=polygon, color=gold];
stat449[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.7.16:*, 200.177.185.239:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1581: (2.24719%)&lt;BR/&gt; 1580: (2.24719%)&lt;BR/&gt; 1579: (2.24719%)&lt;BR/&gt; 1578: (2.24719%)&gt;];
}
1926--1927[label="1;23pkt 23fpkt"];
1926--3234[label="1;23pkt 23fpkt"];
1926--3857[label="1;20pkt 20fpkt"];
1926--3946[label="0.130435;3pkt 3fpkt"];
1926--3959[label="0.130435;3pkt 3fpkt"];
1926--3969[label="0.130435;3pkt 3fpkt"];
1927--3234[label="1;23pkt 23fpkt"];
1927--3857[label="1;20pkt 20fpkt"];
1927--3946[label="0.130435;3pkt 3fpkt"];
1927--3959[label="0.130435;3pkt 3fpkt"];
1927--3969[label="0.130435;3pkt 3fpkt"];
3234--3857[label="1;20pkt 20fpkt"];
3234--3946[label="0.130435;3pkt 3fpkt"];
3234--3959[label="0.130435;3pkt 3fpkt"];
3234--3969[label="0.130435;3pkt 3fpkt"];
3857--3946[label="0.15;3pkt 3fpkt"];
3857--3959[label="0.15;3pkt 3fpkt"];
3857--3969[label="0.15;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.177.185.239" dst_port="80" src_ip="212.24.7.16"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23331,2.23684,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_450{
style=filled;
color=gray75;
1475[label="136.230.111.48;s;73pkt 73fpkt", shape=diamond, color=yellow];
1491[label="212.85.4.243;d;7pkt 7fpkt", shape=diamond, color=yellow];
3100[label="212.85.4.243;d;7pkt 7fpkt", shape=hexagon, color=black];
3239[label="136.230.111.48;s;68pkt 68fpkt", shape=hexagon, color=black];
3858[label="136.230.111.48;s;52pkt 52fpkt", shape=polygon, color=gold];
4411[label="136.230.111.48;72pkt 72fpkt", shape=pentagon, color=darkviolet];
stat450[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.111.48:*, *:25}[67.1233%]&lt;BR/&gt;{136.230.111.48:80, *:*}[27.3973%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (33.6918%)&lt;BR/&gt; 80: (16.3082%)&lt;BR/&gt; 1776: (1.43369%)&lt;BR/&gt; 38742: (1.07527%)&lt;BR/&gt; 36366: (1.07527%)&gt;];
}
1475--1491[label="1;7pkt 7fpkt"];
1475--2744[label="0.117647;2pkt 2fpkt"];
1475--3100[label="1;7pkt 7fpkt"];
1475--3239[label="1;68pkt 68fpkt"];
1475--3858[label="1;52pkt 52fpkt"];
1475--3950[label="0.0684932;5pkt 5fpkt"];
1475--4411[label="1;72pkt 72fpkt"];
1491--3100[label="1;7pkt 7fpkt"];
1491--3239[label="1;7pkt 7fpkt"];
1491--3858[label="1;7pkt 7fpkt"];
1491--3950[label="0.285714;2pkt 2fpkt"];
1491--4411[label="1;7pkt 7fpkt"];
3100--3239[label="1;7pkt 7fpkt"];
3100--3858[label="1;7pkt 7fpkt"];
3100--3950[label="0.285714;2pkt 2fpkt"];
3100--4411[label="1;7pkt 7fpkt"];
3239--3858[label="1;52pkt 52fpkt"];
3239--3950[label="0.0735294;5pkt 5fpkt"];
3239--4411[label="1;68pkt 68fpkt"];
3858--3950[label="0.0961538;5pkt 5fpkt"];
3858--4411[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter src_ip="136.230.111.48" src_port="80"/>
      <filter dst_port="25" src_ip="136.230.111.48"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_451{
style=filled;
color=gray75;
625[label="167.8.161.242;d;47pkt 47fpkt", shape=diamond, color=yellow];
1021[label="200.93.23.114;s;1pkt 1fpkt", shape=diamond, color=yellow];
2764[label="167.8.161.242;d;14pkt 14fpkt", shape=hexagon, color=black];
3489[label="200.93.23.114;s;1pkt 1fpkt", shape=hexagon, color=black];
4936[label="200.93.23.114;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6582[label="200.93.23.114;1pkt 1fpkt", shape=invtriangle, color=brown];
stat451[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.135.44.42:80, 167.8.161.242:*}[97.8723%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3846%)&lt;BR/&gt; 49455: (4.61538%)&lt;BR/&gt; 5900: (4.61538%)&lt;BR/&gt; 49550: (1.53846%)&lt;BR/&gt; 49548: (1.53846%)&gt;];
}
625--1021[label="1;1pkt 1fpkt"];
625--2067[label="0.978723;46pkt 46fpkt"];
625--2764[label="1;14pkt 14fpkt"];
625--3324[label="0.978723;46pkt 46fpkt"];
625--3489[label="1;1pkt 1fpkt"];
625--3872[label="0.393939;13pkt 13fpkt"];
625--3950[label="0.0851064;4pkt 4fpkt"];
625--4936[label="1;1pkt 1fpkt"];
625--6582[label="1;1pkt 1fpkt"];
1021--2764[label="1;1pkt 1fpkt"];
1021--3489[label="1;1pkt 1fpkt"];
1021--4936[label="1;1pkt 1fpkt"];
1021--6582[label="1;1pkt 1fpkt"];
2764--3324[label="0.928571;13pkt 13fpkt"];
2764--3489[label="1;1pkt 1fpkt"];
2764--3872[label="0.928571;13pkt 13fpkt"];
2764--3950[label="0.285714;4pkt 4fpkt"];
2764--4936[label="1;1pkt 1fpkt"];
2764--6582[label="1;1pkt 1fpkt"];
3489--4936[label="1;1pkt 1fpkt"];
3489--6582[label="1;1pkt 1fpkt"];
4936--6582[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.161.242" src_ip="86.135.44.42" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25702,2.20707,999,0 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
1672[label="161.238.213.109;s;1pkt 1fpkt", shape=diamond, color=yellow];
1673[label="209.45.229.93;d;1pkt 1fpkt", shape=diamond, color=yellow];
3033[label="161.238.213.109;s;1pkt 1fpkt", shape=hexagon, color=black];
3873[label="161.238.213.109;s;1pkt 1fpkt", shape=polygon, color=gold];
4911[label="161.238.213.109;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6564[label="161.238.213.109;1pkt 1fpkt", shape=invtriangle, color=brown];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.213.109:8864, 209.45.229.93:8864}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8864: (100%)&gt;];
}
1672--1673[label="1;1pkt 1fpkt"];
1672--3033[label="1;1pkt 1fpkt"];
1672--3873[label="1;1pkt 1fpkt"];
1672--4911[label="1;1pkt 1fpkt"];
1672--6564[label="1;1pkt 1fpkt"];
1673--3033[label="1;1pkt 1fpkt"];
1673--3873[label="1;1pkt 1fpkt"];
1673--4911[label="1;1pkt 1fpkt"];
1673--6564[label="1;1pkt 1fpkt"];
3033--3873[label="1;1pkt 1fpkt"];
3033--4911[label="1;1pkt 1fpkt"];
3033--6564[label="1;1pkt 1fpkt"];
3873--4911[label="1;1pkt 1fpkt"];
3873--6564[label="1;1pkt 1fpkt"];
4911--6564[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.45.229.93" dst_port="8864" src_ip="161.238.213.109" src_port="8864"/>
    </slice>
    <from sec="1034226253" usec="0"/>
    <to sec="1034226296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_453{
style=filled;
color=gray75;
1787[label="212.24.24.128;s;181pkt 181fpkt", shape=diamond, color=yellow];
3136[label="212.24.24.128;s;181pkt 181fpkt", shape=hexagon, color=black];
3885[label="212.24.24.128;s;137pkt 137fpkt", shape=polygon, color=gold];
5024[label="212.24.24.128;191pkt 191fpkt", shape=pentagon, color=darkviolet];
6647[label="212.24.24.128;191pkt 191fpkt", shape=invtriangle, color=brown];
7700[label="212.24.24.128;191pkt 191fpkt", shape=invhouse, color=bisque];
stat453[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.24.128:*, 195.202.73.12:80}[22.9167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.9216%)&lt;BR/&gt; 6006: (1.1194%)&lt;BR/&gt; 137: (1.1194%)&lt;BR/&gt; 2121: (0.559701%)&lt;BR/&gt; 2285: (0.279851%)&gt;];
}
1787--3136[label="1;181pkt 181fpkt"];
1787--3885[label="1;137pkt 137fpkt"];
1787--5024[label="0.994475;180pkt 180fpkt"];
1787--6647[label="0.994475;180pkt 180fpkt"];
1787--7700[label="0.994475;180pkt 180fpkt"];
3136--3885[label="1;137pkt 137fpkt"];
3136--5024[label="0.994475;180pkt 180fpkt"];
3136--6647[label="0.994475;180pkt 180fpkt"];
3136--7700[label="0.994475;180pkt 180fpkt"];
3885--5024[label="0.992701;136pkt 136fpkt"];
3885--6647[label="0.992701;136pkt 136fpkt"];
3885--7700[label="0.992701;136pkt 136fpkt"];
5024--6647[label="1;191pkt 191fpkt"];
5024--7700[label="1;191pkt 191fpkt"];
6647--7700[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter dst_ip="195.202.73.12" dst_port="80" src_ip="212.24.24.128"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_454{
style=filled;
color=gray75;
2140[label="219.64.96.252;s;240pkt 240fpkt", shape=diamond, color=yellow];
3498[label="219.64.96.252;s;240pkt 240fpkt", shape=hexagon, color=black];
3900[label="219.64.96.252;s;225pkt 225fpkt", shape=polygon, color=gold];
stat454[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.64.96.252:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1071: (0.638298%)&lt;BR/&gt; 2849: (0.425532%)&lt;BR/&gt; 1715: (0.425532%)&lt;BR/&gt; 1421: (0.425532%)&gt;];
}
2140--3498[label="1;240pkt 240fpkt"];
2140--3900[label="1;225pkt 225fpkt"];
2140--3949[label="0.0708333;17pkt 17fpkt"];
3498--3900[label="1;225pkt 225fpkt"];
3498--3949[label="0.0708333;17pkt 17fpkt"];
3900--3949[label="0.0755556;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="219.64.96.252" src_port="53"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,999,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_455{
style=filled;
color=gray75;
909[label="161.238.1.229;d;57pkt 57fpkt", shape=diamond, color=yellow];
1412[label="136.230.132.189;d;38pkt 38fpkt", shape=diamond, color=yellow];
2402[label="195.9.48.144;s;61pkt 61fpkt", shape=diamond, color=yellow];
3544[label="195.9.48.144;s;61pkt 61fpkt", shape=hexagon, color=black];
3906[label="195.9.48.144;s;60pkt 60fpkt", shape=polygon, color=gold];
5163[label="195.9.48.144;62pkt 62fpkt", shape=pentagon, color=darkviolet];
5279[label="161.241.232.158;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5379[label="86.135.44.171;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5484[label="86.135.44.184;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6750[label="195.9.48.144;61pkt 61fpkt", shape=invtriangle, color=brown];
6895[label="86.135.44.171;6pkt 6fpkt", shape=invtriangle, color=brown];
6959[label="86.135.44.184;22pkt 22fpkt", shape=invtriangle, color=brown];
7861[label="86.135.44.171;7pkt 7fpkt", shape=invhouse, color=bisque];
7895[label="86.135.44.184;22pkt 22fpkt", shape=invhouse, color=bisque];
stat455[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 161.238.1.229:*}[31.3187%]&lt;BR/&gt;{195.9.48.144:*, *:25}[23.6264%]&lt;BR/&gt;{*:*, 136.230.132.189:*}[20.8791%]&lt;BR/&gt;{195.9.48.144:*, 167.20.101.176:*}[20.3297%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (36.2705%)&lt;BR/&gt; 113: (9.73361%)&lt;BR/&gt; 53: (2.04918%)&lt;BR/&gt; 110: (1.53689%)&lt;BR/&gt; 1025: (1.43443%)&gt;];
}
909--1570[label="0.0526316;3pkt 3fpkt"];
909--2402[label="0.0350877;2pkt 2fpkt"];
909--3544[label="0.0350877;2pkt 2fpkt"];
909--3667[label="1;57pkt 57fpkt"];
909--3906[label="0.0175439;1pkt 1fpkt"];
909--4377[label="0.0555556;1pkt 1fpkt"];
909--5163[label="0.0350877;2pkt 2fpkt"];
909--5254[label="0.0526316;3pkt 3fpkt"];
909--5379[label="0.142857;1pkt 1fpkt"];
909--5484[label="0.0434783;1pkt 1fpkt"];
909--5529[label="0.140351;8pkt 8fpkt"];
909--6750[label="0.0350877;2pkt 2fpkt"];
909--6811[label="0.0526316;3pkt 3fpkt"];
909--6895[label="0.166667;1pkt 1fpkt"];
909--6959[label="0.0454545;1pkt 1fpkt"];
909--6991[label="0.140351;8pkt 8fpkt"];
909--7806[label="0.0526316;3pkt 3fpkt"];
909--7861[label="0.142857;1pkt 1fpkt"];
909--7895[label="0.0454545;1pkt 1fpkt"];
909--7916[label="0.140351;8pkt 8fpkt"];
1412--1465[label="0.111111;1pkt 1fpkt"];
1412--1769[label="0.0263158;1pkt 1fpkt"];
1412--1972[label="0.0263158;1pkt 1fpkt"];
1412--1999[label="0.0555556;1pkt 1fpkt"];
1412--2069[label="0.0645161;2pkt 2fpkt"];
1412--2381[label="0.0434783;1pkt 1fpkt"];
1412--3087[label="0.111111;1pkt 1fpkt"];
1412--3125[label="0.0263158;1pkt 1fpkt"];
1412--3287[label="0.0909091;1pkt 1fpkt"];
1412--3326[label="0.0645161;2pkt 2fpkt"];
1412--3541[label="0.0263158;1pkt 1fpkt"];
1412--3829[label="0.142857;1pkt 1fpkt"];
1412--3941[label="0.0789474;3pkt 3fpkt"];
1412--3949[label="0.105263;4pkt 4fpkt"];
1412--3954[label="0.0789474;3pkt 3fpkt"];
1412--3964[label="0.0789474;3pkt 3fpkt"];
1412--4896[label="0.0263158;1pkt 1fpkt"];
1412--5041[label="0.0645161;2pkt 2fpkt"];
1412--5060[label="0.0833333;1pkt 1fpkt"];
1412--5069[label="0.0263158;1pkt 1fpkt"];
1412--5279[label="1;1pkt 1fpkt"];
1412--5379[label="0.142857;1pkt 1fpkt"];
1412--5463[label="0.0263158;1pkt 1fpkt"];
1412--5492[label="0.0555556;1pkt 1fpkt"];
1412--6659[label="0.0625;2pkt 2fpkt"];
1412--6672[label="0.0833333;1pkt 1fpkt"];
1412--6678[label="0.0263158;1pkt 1fpkt"];
1412--6895[label="0.166667;1pkt 1fpkt"];
1412--6948[label="0.0263158;1pkt 1fpkt"];
1412--6964[label="0.0555556;1pkt 1fpkt"];
1412--7710[label="0.0645161;2pkt 2fpkt"];
1412--7861[label="0.142857;1pkt 1fpkt"];
1412--7890[label="0.0263158;1pkt 1fpkt"];
1412--7900[label="0.0588235;1pkt 1fpkt"];
2402--3544[label="1;61pkt 61fpkt"];
2402--3667[label="0.0350877;2pkt 2fpkt"];
2402--3906[label="1;60pkt 60fpkt"];
2402--5163[label="1;61pkt 61fpkt"];
2402--6750[label="0.983607;60pkt 60fpkt"];
3544--3667[label="0.0350877;2pkt 2fpkt"];
3544--3906[label="1;60pkt 60fpkt"];
3544--5163[label="1;61pkt 61fpkt"];
3544--6750[label="0.983607;60pkt 60fpkt"];
3906--5163[label="1;60pkt 60fpkt"];
3906--6750[label="0.983333;59pkt 59fpkt"];
5163--6750[label="1;61pkt 61fpkt"];
5379--6895[label="1;6pkt 6fpkt"];
5379--7861[label="1;7pkt 7fpkt"];
5484--6959[label="1;22pkt 22fpkt"];
5484--7895[label="1;22pkt 22fpkt"];
6895--7861[label="1;6pkt 6fpkt"];
6959--7895[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.1.229"/>
      <filter dst_ip="136.230.132.189"/>
      <filter dst_ip="167.20.101.176" src_ip="195.9.48.144"/>
      <filter dst_port="25" src_ip="195.9.48.144"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
1853[label="216.4.49.217;d;38pkt 38fpkt", shape=diamond, color=yellow];
1854[label="141.98.30.74;s;19pkt 19fpkt", shape=diamond, color=yellow];
2277[label="141.98.17.46;s;21pkt 21fpkt", shape=diamond, color=yellow];
3181[label="216.4.49.217;d;38pkt 38fpkt", shape=hexagon, color=black];
3593[label="141.98.17.46;s;21pkt 21fpkt", shape=hexagon, color=black];
3911[label="141.98.17.46;s;21pkt 21fpkt", shape=polygon, color=gold];
4387[label="141.98.17.46;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4620[label="141.98.30.74;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6229[label="141.98.17.46;28pkt 28fpkt", shape=invtriangle, color=brown];
6384[label="141.98.30.74;18pkt 18fpkt", shape=invtriangle, color=brown];
7445[label="141.98.17.46;28pkt 28fpkt", shape=invhouse, color=bisque];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.30.74:*, 216.4.49.217:80}[32.1429%]&lt;BR/&gt;{141.98.17.46:*, 216.4.49.217:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1614: (1.42857%)&lt;BR/&gt; 1610: (1.42857%)&lt;BR/&gt; 1609: (1.42857%)&lt;BR/&gt; 1608: (1.42857%)&gt;];
}
1853--1854[label="0.947368;18pkt 18fpkt"];
1853--2277[label="0.571429;12pkt 12fpkt"];
1853--3181[label="1;38pkt 38fpkt"];
1853--3593[label="0.571429;12pkt 12fpkt"];
1853--3911[label="0.571429;12pkt 12fpkt"];
1853--3946[label="0.184211;7pkt 7fpkt"];
1853--3959[label="0.184211;7pkt 7fpkt"];
1853--3969[label="0.184211;7pkt 7fpkt"];
1853--4387[label="0.413793;12pkt 12fpkt"];
1853--4620[label="0.947368;18pkt 18fpkt"];
1853--6229[label="0.428571;12pkt 12fpkt"];
1853--6384[label="1;18pkt 18fpkt"];
1853--7445[label="0.428571;12pkt 12fpkt"];
1854--3181[label="0.947368;18pkt 18fpkt"];
1854--3946[label="0.0526316;1pkt 1fpkt"];
1854--3959[label="0.0526316;1pkt 1fpkt"];
1854--3969[label="0.0526316;1pkt 1fpkt"];
1854--4620[label="1;19pkt 19fpkt"];
1854--6384[label="1;18pkt 18fpkt"];
2277--3181[label="0.571429;12pkt 12fpkt"];
2277--3593[label="1;21pkt 21fpkt"];
2277--3911[label="1;21pkt 21fpkt"];
2277--3946[label="0.380952;8pkt 8fpkt"];
2277--3959[label="0.380952;8pkt 8fpkt"];
2277--3969[label="0.380952;8pkt 8fpkt"];
2277--4387[label="1;21pkt 21fpkt"];
2277--6229[label="1;21pkt 21fpkt"];
2277--7445[label="1;21pkt 21fpkt"];
3181--3593[label="0.571429;12pkt 12fpkt"];
3181--3911[label="0.571429;12pkt 12fpkt"];
3181--3946[label="0.184211;7pkt 7fpkt"];
3181--3959[label="0.184211;7pkt 7fpkt"];
3181--3969[label="0.184211;7pkt 7fpkt"];
3181--4387[label="0.413793;12pkt 12fpkt"];
3181--4620[label="0.947368;18pkt 18fpkt"];
3181--6229[label="0.428571;12pkt 12fpkt"];
3181--6384[label="1;18pkt 18fpkt"];
3181--7445[label="0.428571;12pkt 12fpkt"];
3593--3911[label="1;21pkt 21fpkt"];
3593--3946[label="0.380952;8pkt 8fpkt"];
3593--3959[label="0.380952;8pkt 8fpkt"];
3593--3969[label="0.380952;8pkt 8fpkt"];
3593--4387[label="1;21pkt 21fpkt"];
3593--6229[label="1;21pkt 21fpkt"];
3593--7445[label="1;21pkt 21fpkt"];
3911--3946[label="0.380952;8pkt 8fpkt"];
3911--3959[label="0.380952;8pkt 8fpkt"];
3911--3969[label="0.380952;8pkt 8fpkt"];
3911--4387[label="1;21pkt 21fpkt"];
3911--6229[label="1;21pkt 21fpkt"];
3911--7445[label="1;21pkt 21fpkt"];
4387--6229[label="1;28pkt 28fpkt"];
4387--7445[label="1;28pkt 28fpkt"];
4620--6384[label="1;18pkt 18fpkt"];
6229--7445[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="216.4.49.217" dst_port="80" src_ip="141.98.17.46"/>
      <filter dst_ip="216.4.49.217" dst_port="80" src_ip="141.98.30.74"/>
    </slice>
    <from sec="1034226045" usec="0"/>
    <to sec="1034226554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25844,2.28678,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_457{
style=filled;
color=gray75;
2076[label="161.238.64.9;d;50pkt 50fpkt", shape=diamond, color=yellow];
2077[label="203.132.34.193;s;50pkt 50fpkt", shape=diamond, color=yellow];
3331[label="203.132.34.193;s;43pkt 43fpkt", shape=hexagon, color=black];
3591[label="161.238.64.9;d;50pkt 50fpkt", shape=hexagon, color=black];
3910[label="203.132.34.193;s;43pkt 43fpkt", shape=polygon, color=gold];
3935[label="161.238.64.9;d;50pkt 50fpkt", shape=polygon, color=gold];
stat457[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.132.34.193:80, 161.238.64.9:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1433: (1.04895%)&lt;BR/&gt; 1432: (1.04895%)&lt;BR/&gt; 1431: (1.04895%)&lt;BR/&gt; 1430: (1.04895%)&gt;];
}
2076--2077[label="1;50pkt 50fpkt"];
2076--3331[label="1;43pkt 43fpkt"];
2076--3591[label="1;50pkt 50fpkt"];
2076--3910[label="1;43pkt 43fpkt"];
2076--3935[label="1;50pkt 50fpkt"];
2076--3950[label="0.14;7pkt 7fpkt"];
2077--3331[label="1;43pkt 43fpkt"];
2077--3591[label="1;50pkt 50fpkt"];
2077--3910[label="1;43pkt 43fpkt"];
2077--3935[label="1;50pkt 50fpkt"];
2077--3950[label="0.14;7pkt 7fpkt"];
3331--3591[label="1;43pkt 43fpkt"];
3331--3910[label="1;43pkt 43fpkt"];
3331--3935[label="1;43pkt 43fpkt"];
3331--3950[label="0.162791;7pkt 7fpkt"];
3591--3910[label="1;43pkt 43fpkt"];
3591--3935[label="1;50pkt 50fpkt"];
3591--3950[label="0.14;7pkt 7fpkt"];
3910--3935[label="1;43pkt 43fpkt"];
3910--3950[label="0.162791;7pkt 7fpkt"];
3935--3950[label="0.14;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.64.9" src_ip="203.132.34.193" src_port="80"/>
    </slice>
    <from sec="1034226152" usec="0"/>
    <to sec="1034226724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
4886[label="167.8.143.106;44pkt 44fpkt", shape=pentagon, color=darkviolet];
6550[label="167.8.143.106;43pkt 43fpkt", shape=invtriangle, color=brown];
7632[label="167.8.143.106;43pkt 43fpkt", shape=invhouse, color=bisque];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.143.106:*, 85.34.66.9:80}[56.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.3077%)&lt;BR/&gt; 1863: (1.53846%)&lt;BR/&gt; 1084: (1.15385%)&lt;BR/&gt; 1080: (1.15385%)&lt;BR/&gt; 1079: (1.15385%)&gt;];
}
4886--6550[label="1;43pkt 43fpkt"];
4886--7632[label="1;43pkt 43fpkt"];
6550--7632[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="85.34.66.9" dst_port="80" src_ip="167.8.143.106"/>
    </slice>
    <from sec="1034226059" usec="0"/>
    <to sec="1034226705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,504,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_460{
style=filled;
color=gray75;
13[label="84.102.236.23s;2pkt 2fpkt", shape=rectangle, color=red];
860[label="84.102.236.23;s;53pkt 53fpkt", shape=diamond, color=yellow];
1646[label="141.98.11.215;d;7pkt 7fpkt", shape=diamond, color=yellow];
3086[label="84.102.236.23;s;52pkt 52fpkt", shape=hexagon, color=black];
4187[label="84.102.236.23;83pkt 83fpkt", shape=pentagon, color=darkviolet];
5810[label="203.181.66.232;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6095[label="84.102.236.23;82pkt 82fpkt", shape=invtriangle, color=brown];
7182[label="203.181.66.232;3pkt 3fpkt", shape=invtriangle, color=brown];
8038[label="203.181.66.232;3pkt 3fpkt", shape=invhouse, color=bisque];
stat460[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.102.236.23:443, *:*}[30.7692%]&lt;BR/&gt;{84.102.236.23:80, 185.206.202.140:*}[27.4725%]&lt;BR/&gt;{84.102.236.23:*, 161.238.77.146:*}[21.978%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.0764%)&lt;BR/&gt; 443: (18.9236%)&lt;BR/&gt; 4690: (0.868056%)&lt;BR/&gt; 1665: (0.868056%)&lt;BR/&gt; 4687: (0.694444%)&gt;];
}
13--860[label="1;2pkt 2fpkt"];
13--3086[label="1;2pkt 2fpkt"];
13--4187[label="1;2pkt 2fpkt"];
13--6095[label="1;2pkt 2fpkt"];
860--1168[label="0.377358;20pkt 20fpkt"];
860--3086[label="1;52pkt 52fpkt"];
860--3235[label="0.377358;20pkt 20fpkt"];
860--3950[label="0.0188679;1pkt 1fpkt"];
860--4187[label="1;53pkt 53fpkt"];
860--6095[label="0.981132;52pkt 52fpkt"];
1646--3950[label="0.285714;2pkt 2fpkt"];
1646--5810[label="0.666667;2pkt 2fpkt"];
1646--5818[label="0.714286;5pkt 5fpkt"];
1646--7182[label="0.666667;2pkt 2fpkt"];
1646--7188[label="0.714286;5pkt 5fpkt"];
1646--8038[label="0.666667;2pkt 2fpkt"];
3086--3235[label="0.384615;20pkt 20fpkt"];
3086--3950[label="0.0192308;1pkt 1fpkt"];
3086--4187[label="1;52pkt 52fpkt"];
3086--6095[label="0.980769;51pkt 51fpkt"];
4187--6095[label="1;82pkt 82fpkt"];
5810--7182[label="1;3pkt 3fpkt"];
5810--8038[label="1;3pkt 3fpkt"];
7182--8038[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.77.146" src_ip="84.102.236.23"/>
      <filter src_ip="84.102.236.23" src_port="443"/>
      <filter dst_ip="185.206.202.140" src_ip="84.102.236.23" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_461{
style=filled;
color=gray75;
284[label="186.18.21.116s;78pkt 78fpkt", shape=rectangle, color=red];
4957[label="186.18.21.116;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6600[label="186.18.21.116;116pkt 116fpkt", shape=invtriangle, color=brown];
7663[label="186.18.21.116;117pkt 117fpkt", shape=invhouse, color=bisque];
stat461[shape=component, label=&lt;Rules:&lt;BR/&gt;{186.18.21.116:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
284--3953[label="0.5;39pkt 39fpkt"];
284--4957[label="0.987179;77pkt 77fpkt"];
284--6600[label="0.987179;77pkt 77fpkt"];
284--7663[label="1;78pkt 78fpkt"];
4957--6600[label="1;116pkt 116fpkt"];
4957--7663[label="1;116pkt 116fpkt"];
6600--7663[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="186.18.21.116" src_port="1025"/>
    </slice>
    <from sec="1034226709" usec="0"/>
    <to sec="1034226729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.238.83.0"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.37.143.0"/>
    </slice>
    <from sec="1034226349" usec="0"/>
    <to sec="1034226366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.24.6.2"/>
    </slice>
    <from sec="1034226433" usec="0"/>
    <to sec="1034226705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.186.7.2"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.166.70.3"/>
    </slice>
    <from sec="1034226007" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.132.101.4"/>
    </slice>
    <from sec="1034226103" usec="0"/>
    <to sec="1034226143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
199[label="213.111.108.4s;91pkt 91fpkt", shape=rectangle, color=red];
4020[label="213.111.108.4;248pkt 248fpkt", shape=pentagon, color=darkviolet];
5971[label="213.111.108.4;248pkt 248fpkt", shape=invtriangle, color=brown];
7285[label="213.111.108.4;247pkt 247fpkt", shape=invhouse, color=bisque];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.111.108.4:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
199--4020[label="1;91pkt 91fpkt"];
199--5971[label="1;91pkt 91fpkt"];
199--7285[label="0.989011;90pkt 90fpkt"];
4020--5971[label="1;248pkt 248fpkt"];
4020--7285[label="1;247pkt 247fpkt"];
5971--7285[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.111.108.4" src_port="1027"/>
    </slice>
    <from sec="1034226505" usec="0"/>
    <to sec="1034226547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.728592,2.13253,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_469{
style=filled;
color=gray75;
200[label="195.81.178.4s;101pkt 101fpkt", shape=rectangle, color=red];
4022[label="195.81.178.4;100pkt 100fpkt", shape=pentagon, color=darkviolet];
stat469[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.81.178.4:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
200--4022[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.81.178.4" src_port="1025"/>
    </slice>
    <from sec="1034226049" usec="0"/>
    <to sec="1034226065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.118.242.4"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.78.5"/>
    </slice>
    <from sec="1034226064" usec="0"/>
    <to sec="1034226762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_472{
style=filled;
color=gray75;
203[label="203.237.198.6s;240pkt 240fpkt", shape=rectangle, color=red];
4041[label="203.237.198.6;256pkt 256fpkt", shape=pentagon, color=darkviolet];
5987[label="203.237.198.6;255pkt 255fpkt", shape=invtriangle, color=brown];
7297[label="203.237.198.6;256pkt 256fpkt", shape=invhouse, color=bisque];
stat472[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.237.198.6:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
203--4041[label="1;240pkt 240fpkt"];
203--5987[label="0.995833;239pkt 239fpkt"];
203--7297[label="1;240pkt 240fpkt"];
4041--5987[label="1;255pkt 255fpkt"];
4041--7297[label="1;256pkt 256fpkt"];
5987--7297[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.237.198.6" src_port="1027"/>
    </slice>
    <from sec="1034226322" usec="0"/>
    <to sec="1034226361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_473{
style=filled;
color=gray75;
204[label="194.122.214.6s;170pkt 170fpkt", shape=rectangle, color=red];
4042[label="194.122.214.6;240pkt 240fpkt", shape=pentagon, color=darkviolet];
5988[label="194.122.214.6;240pkt 240fpkt", shape=invtriangle, color=brown];
stat473[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.122.214.6:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
204--4042[label="0.994118;169pkt 169fpkt"];
204--5988[label="0.994118;169pkt 169fpkt"];
4042--5988[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.122.214.6" src_port="1026"/>
    </slice>
    <from sec="1034226445" usec="0"/>
    <to sec="1034226483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_474{
style=filled;
color=gray75;
205[label="201.2.75.7s;233pkt 233fpkt", shape=rectangle, color=red];
4047[label="201.2.75.7;209pkt 209fpkt", shape=pentagon, color=darkviolet];
5992[label="201.2.75.7;209pkt 209fpkt", shape=invtriangle, color=brown];
stat474[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.2.75.7:1027, *:137}[88.1857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1027: (47.8495%)&lt;BR/&gt; 1025: (2.15054%)&gt;];
}
205--4047[label="0.980861;205pkt 205fpkt"];
205--5992[label="0.980861;205pkt 205fpkt"];
4047--5992[label="1;209pkt 209fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.2.75.7" src_port="1027"/>
    </slice>
    <from sec="1034226097" usec="0"/>
    <to sec="1034226130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.191.212.7"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.122.213.8"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.35.235.8"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_478{
style=filled;
color=gray75;
1735[label="136.230.98.9;s;53pkt 53fpkt", shape=diamond, color=yellow];
3673[label="136.230.98.9;s;53pkt 53fpkt", shape=hexagon, color=black];
4065[label="136.230.98.9;55pkt 55fpkt", shape=pentagon, color=darkviolet];
stat478[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.98.9:*, 42.81.237.159:25}[27.2727%]&lt;BR/&gt;{136.230.98.9:*, 208.42.5.8:25}[25.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.4099%)&lt;BR/&gt; 113: (5.59006%)&lt;BR/&gt; 57010: (0.931677%)&lt;BR/&gt; 54389: (0.931677%)&lt;BR/&gt; 4008: (0.931677%)&gt;];
}
1735--2163[label="0.30303;10pkt 10fpkt"];
1735--3673[label="1;53pkt 53fpkt"];
1735--4065[label="1;53pkt 53fpkt"];
3673--4065[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="42.81.237.159" dst_port="25" src_ip="136.230.98.9"/>
      <filter dst_ip="208.42.5.8" dst_port="25" src_ip="136.230.98.9"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.59.103.9"/>
    </slice>
    <from sec="1034226248" usec="0"/>
    <to sec="1034226252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.173.226.9"/>
    </slice>
    <from sec="1034226603" usec="0"/>
    <to sec="1034226613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.178.236.9"/>
    </slice>
    <from sec="1034226574" usec="0"/>
    <to sec="1034226599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.199.237.9"/>
    </slice>
    <from sec="1034226053" usec="0"/>
    <to sec="1034226762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
2326[label="203.137.8.10;s;6pkt 6fpkt", shape=diamond, color=yellow];
4074[label="203.137.8.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6013[label="203.137.8.10;2pkt 2fpkt", shape=invtriangle, color=brown];
7314[label="203.137.8.10;1pkt 1fpkt", shape=invhouse, color=bisque];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.137.8.10:80, 185.191.88.102:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2939: (20%)&lt;BR/&gt; 2931: (10%)&lt;BR/&gt; 2937: (5%)&lt;BR/&gt; 2936: (5%)&gt;];
}
2326--4074[label="1;1pkt 1fpkt"];
2326--6013[label="1;2pkt 2fpkt"];
2326--7314[label="1;1pkt 1fpkt"];
4074--6013[label="1;1pkt 1fpkt"];
4074--7314[label="1;1pkt 1fpkt"];
6013--7314[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.88.102" src_ip="203.137.8.10" src_port="80"/>
    </slice>
    <from sec="1034226441" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
1584[label="136.230.79.220;d;66pkt 66fpkt", shape=diamond, color=yellow];
2463[label="86.135.44.8;s;14pkt 14fpkt", shape=diamond, color=yellow];
3002[label="136.230.79.220;d;41pkt 41fpkt", shape=hexagon, color=black];
4054[label="86.135.44.8;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4061[label="86.135.44.9;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4076[label="86.135.44.10;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4086[label="86.135.44.11;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5149[label="86.135.44.142;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5522[label="86.135.44.190;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5999[label="86.135.44.8;15pkt 15fpkt", shape=invtriangle, color=brown];
6005[label="86.135.44.9;16pkt 16fpkt", shape=invtriangle, color=brown];
6015[label="86.135.44.10;12pkt 12fpkt", shape=invtriangle, color=brown];
6740[label="86.135.44.142;21pkt 21fpkt", shape=invtriangle, color=brown];
6986[label="86.135.44.190;2pkt 2fpkt", shape=invtriangle, color=brown];
7303[label="86.135.44.8;15pkt 15fpkt", shape=invhouse, color=bisque];
7308[label="86.135.44.9;16pkt 16fpkt", shape=invhouse, color=bisque];
7912[label="86.135.44.190;2pkt 2fpkt", shape=invhouse, color=bisque];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 136.230.79.220:*}[52.1739%]&lt;BR/&gt;{86.135.44.142:*, *:25}[22.8261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2394: (1.02041%)&lt;BR/&gt; 2388: (1.02041%)&lt;BR/&gt; 2378: (1.02041%)&lt;BR/&gt; 2376: (1.02041%)&gt;];
}
1584--2069[label="0.0322581;1pkt 1fpkt"];
1584--2266[label="0.0869565;2pkt 2fpkt"];
1584--2463[label="1;14pkt 14fpkt"];
1584--3002[label="1;41pkt 41fpkt"];
1584--3163[label="0.105263;2pkt 2fpkt"];
1584--3326[label="0.0322581;1pkt 1fpkt"];
1584--3454[label="0.0869565;2pkt 2fpkt"];
1584--4054[label="0.933333;14pkt 14fpkt"];
1584--4061[label="0.8125;13pkt 13fpkt"];
1584--4076[label="1;12pkt 12fpkt"];
1584--4086[label="0.875;7pkt 7fpkt"];
1584--5041[label="0.0322581;1pkt 1fpkt"];
1584--5060[label="0.0833333;1pkt 1fpkt"];
1584--5136[label="0.0909091;2pkt 2fpkt"];
1584--5149[label="0.047619;1pkt 1fpkt"];
1584--5301[label="0.047619;1pkt 1fpkt"];
1584--5329[label="0.05;1pkt 1fpkt"];
1584--5440[label="0.0740741;2pkt 2fpkt"];
1584--5484[label="0.0434783;1pkt 1fpkt"];
1584--5492[label="0.0555556;1pkt 1fpkt"];
1584--5522[label="0.5;1pkt 1fpkt"];
1584--5999[label="0.933333;14pkt 14fpkt"];
1584--6005[label="0.8125;13pkt 13fpkt"];
1584--6015[label="1;12pkt 12fpkt"];
1584--6659[label="0.03125;1pkt 1fpkt"];
1584--6672[label="0.0833333;1pkt 1fpkt"];
1584--6730[label="0.0909091;2pkt 2fpkt"];
1584--6740[label="0.047619;1pkt 1fpkt"];
1584--6848[label="0.0454545;1pkt 1fpkt"];
1584--6864[label="0.047619;1pkt 1fpkt"];
1584--6936[label="0.0740741;2pkt 2fpkt"];
1584--6959[label="0.0454545;1pkt 1fpkt"];
1584--6964[label="0.0555556;1pkt 1fpkt"];
1584--6986[label="0.5;1pkt 1fpkt"];
1584--7303[label="0.933333;14pkt 14fpkt"];
1584--7308[label="0.8125;13pkt 13fpkt"];
1584--7710[label="0.0322581;1pkt 1fpkt"];
1584--7841[label="0.047619;1pkt 1fpkt"];
1584--7895[label="0.0454545;1pkt 1fpkt"];
1584--7900[label="0.0588235;1pkt 1fpkt"];
1584--7912[label="0.5;1pkt 1fpkt"];
2463--3002[label="0.571429;8pkt 8fpkt"];
2463--4054[label="1;14pkt 14fpkt"];
2463--5999[label="1;14pkt 14fpkt"];
2463--7303[label="1;14pkt 14fpkt"];
3002--3163[label="0.105263;2pkt 2fpkt"];
3002--3326[label="0.0322581;1pkt 1fpkt"];
3002--3454[label="0.0869565;2pkt 2fpkt"];
3002--4054[label="0.533333;8pkt 8fpkt"];
3002--4061[label="0.5625;9pkt 9fpkt"];
3002--4076[label="0.5;6pkt 6fpkt"];
3002--4086[label="0.625;5pkt 5fpkt"];
3002--5041[label="0.0322581;1pkt 1fpkt"];
3002--5136[label="0.0909091;2pkt 2fpkt"];
3002--5149[label="0.047619;1pkt 1fpkt"];
3002--5301[label="0.047619;1pkt 1fpkt"];
3002--5329[label="0.05;1pkt 1fpkt"];
3002--5440[label="0.0740741;2pkt 2fpkt"];
3002--5999[label="0.533333;8pkt 8fpkt"];
3002--6005[label="0.5625;9pkt 9fpkt"];
3002--6015[label="0.5;6pkt 6fpkt"];
3002--6659[label="0.03125;1pkt 1fpkt"];
3002--6730[label="0.0909091;2pkt 2fpkt"];
3002--6740[label="0.047619;1pkt 1fpkt"];
3002--6848[label="0.0454545;1pkt 1fpkt"];
3002--6864[label="0.047619;1pkt 1fpkt"];
3002--6936[label="0.0740741;2pkt 2fpkt"];
3002--7303[label="0.533333;8pkt 8fpkt"];
3002--7308[label="0.5625;9pkt 9fpkt"];
3002--7710[label="0.0322581;1pkt 1fpkt"];
3002--7841[label="0.047619;1pkt 1fpkt"];
4054--5999[label="1;15pkt 15fpkt"];
4054--7303[label="1;15pkt 15fpkt"];
4061--6005[label="1;16pkt 16fpkt"];
4061--7308[label="1;16pkt 16fpkt"];
4076--6015[label="1;12pkt 12fpkt"];
5149--6740[label="1;21pkt 21fpkt"];
5522--6986[label="1;2pkt 2fpkt"];
5522--7912[label="1;2pkt 2fpkt"];
5999--7303[label="1;15pkt 15fpkt"];
6005--7308[label="1;16pkt 16fpkt"];
6986--7912[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="86.135.44.142"/>
      <filter dst_ip="136.230.79.220" src_port="25"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.24.9.12"/>
    </slice>
    <from sec="1034226013" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611545,2.14038,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_486{
style=filled;
color=gray75;
1863[label="202.108.173.13;s;1pkt 1fpkt", shape=diamond, color=yellow];
4104[label="202.108.173.13;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat486[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.108.173.13:4662, 141.98.93.221:3441}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 3441: (50%)&gt;];
}
1863--4104[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.93.221" dst_port="3441" src_ip="202.108.173.13" src_port="4662"/>
    </slice>
    <from sec="1034226254" usec="0"/>
    <to sec="1034226522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_487{
style=filled;
color=gray75;
210[label="1.40.131.14s;246pkt 246fpkt", shape=rectangle, color=red];
4107[label="1.40.131.14;254pkt 254fpkt", shape=pentagon, color=darkviolet];
6041[label="1.40.131.14;255pkt 255fpkt", shape=invtriangle, color=brown];
7328[label="1.40.131.14;254pkt 254fpkt", shape=invhouse, color=bisque];
stat487[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.40.131.14:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
210--4107[label="0.995935;245pkt 245fpkt"];
210--6041[label="1;246pkt 246fpkt"];
210--7328[label="0.995935;245pkt 245fpkt"];
4107--6041[label="1;254pkt 254fpkt"];
4107--7328[label="1;254pkt 254fpkt"];
6041--7328[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.40.131.14" src_port="1026"/>
    </slice>
    <from sec="1034226137" usec="0"/>
    <to sec="1034226177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.24.4.15"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.40.33.15"/>
    </slice>
    <from sec="1034226465" usec="0"/>
    <to sec="1034226660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.91.103.15"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.192.17.16"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.217.31.16"/>
    </slice>
    <from sec="1034226005" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.177.200.16"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611545,2.14038,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_494{
style=filled;
color=gray75;
761[label="212.24.29.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
1086[label="200.93.64.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
4124[label="200.93.64.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat494[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.93.64.17:6699, 212.24.29.74:3077}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3077: (50%)&gt;];
}
761--1086[label="1;1pkt 1fpkt"];
761--4124[label="1;1pkt 1fpkt"];
1086--4124[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.29.74" dst_port="3077" src_ip="200.93.64.17" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_495{
style=filled;
color=gray75;
212[label="81.8.148.19s;199pkt 199fpkt", shape=rectangle, color=red];
4143[label="81.8.148.19;214pkt 214fpkt", shape=pentagon, color=darkviolet];
6067[label="81.8.148.19;213pkt 213fpkt", shape=invtriangle, color=brown];
stat495[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.8.148.19:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
212--4143[label="1;199pkt 199fpkt"];
212--6067[label="0.994975;198pkt 198fpkt"];
4143--6067[label="1;213pkt 213fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="81.8.148.19" src_port="1026"/>
    </slice>
    <from sec="1034226446" usec="0"/>
    <to sec="1034226484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_496{
style=filled;
color=gray75;
1265[label="167.8.143.20;s;4pkt 4fpkt", shape=diamond, color=yellow];
1625[label="43.224.134.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
4155[label="167.8.143.20;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6073[label="167.8.143.20;3pkt 3fpkt", shape=invtriangle, color=brown];
7347[label="167.8.143.20;3pkt 3fpkt", shape=invhouse, color=bisque];
stat496[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.143.20:6699, 194.235.169.32:3273}[25%]&lt;BR/&gt;{167.8.143.20:6699, 43.224.134.65:52574}[25%]&lt;BR/&gt;{167.8.143.20:1034, 194.217.41.107:6699}[25%]&lt;BR/&gt;{167.8.143.20:6699, 81.125.127.225:2397}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 52574: (17.8571%)&lt;BR/&gt; 3273: (14.2857%)&lt;BR/&gt; 1034: (14.2857%)&lt;BR/&gt; 2397: (3.57143%)&gt;];
}
1265--1625[label="1;1pkt 1fpkt"];
1265--4155[label="1;3pkt 3fpkt"];
1265--6073[label="1;3pkt 3fpkt"];
1265--7347[label="1;3pkt 3fpkt"];
1625--4155[label="1;1pkt 1fpkt"];
1625--6073[label="1;1pkt 1fpkt"];
1625--7347[label="1;1pkt 1fpkt"];
4155--6073[label="1;3pkt 3fpkt"];
4155--7347[label="1;3pkt 3fpkt"];
6073--7347[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="81.125.127.225" dst_port="2397" src_ip="167.8.143.20" src_port="6699"/>
      <filter dst_ip="194.217.41.107" dst_port="6699" src_ip="167.8.143.20" src_port="1034"/>
      <filter dst_ip="43.224.134.65" dst_port="52574" src_ip="167.8.143.20" src_port="6699"/>
      <filter dst_ip="194.235.169.32" dst_port="3273" src_ip="167.8.143.20" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.149.13.22"/>
    </slice>
    <from sec="1034226011" usec="0"/>
    <to sec="1034226790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.91.101.22"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.215.22"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.168.139.23"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.67.151.23"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.49.0.24"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.200.45.24"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.205.129.24"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="179.68.17.25"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658063,2.10925,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_506{
style=filled;
color=gray75;
623[label="167.8.140.103;d;3pkt 3fpkt", shape=diamond, color=yellow];
4197[label="203.204.52.25;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6102[label="203.204.52.25;21pkt 21fpkt", shape=invtriangle, color=brown];
stat506[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.204.52.25:80, *:*}[91.3043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7273%)&lt;BR/&gt; 1127: (3.40909%)&lt;BR/&gt; 60477: (2.27273%)&lt;BR/&gt; 60003: (2.27273%)&lt;BR/&gt; 57073: (2.27273%)&gt;];
}
623--797[label="1;1pkt 1fpkt"];
623--4197[label="0.333333;1pkt 1fpkt"];
623--6102[label="0.333333;1pkt 1fpkt"];
4197--6102[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="203.204.52.25" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_507{
style=filled;
color=gray75;
14[label="161.238.12.26s;2pkt 2fpkt", shape=rectangle, color=red];
4201[label="161.238.12.26;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6105[label="161.238.12.26;3pkt 3fpkt", shape=invtriangle, color=brown];
7368[label="161.238.12.26;4pkt 4fpkt", shape=invhouse, color=bisque];
stat507[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.12.26:1077, 203.88.168.169:80}[25%]&lt;BR/&gt;{161.238.12.26:1079, 203.88.168.169:80}[25%]&lt;BR/&gt;{161.238.12.26:1080, 203.88.168.169:80}[25%]&lt;BR/&gt;{161.238.12.26:1081, 203.88.168.169:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1080: (15.3846%)&lt;BR/&gt; 1079: (15.3846%)&lt;BR/&gt; 1081: (11.5385%)&lt;BR/&gt; 1077: (7.69231%)&gt;];
}
14--420[label="1;2pkt 2fpkt"];
14--442[label="1;2pkt 2fpkt"];
14--544[label="1;2pkt 2fpkt"];
14--2645[label="1;2pkt 2fpkt"];
14--4201[label="1;2pkt 2fpkt"];
14--6105[label="1;2pkt 2fpkt"];
14--7368[label="1;2pkt 2fpkt"];
4201--6105[label="1;3pkt 3fpkt"];
4201--7368[label="1;4pkt 4fpkt"];
6105--7368[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="203.88.168.169" dst_port="80" src_ip="161.238.12.26" src_port="1081"/>
      <filter dst_ip="203.88.168.169" dst_port="80" src_ip="161.238.12.26" src_port="1080"/>
      <filter dst_ip="203.88.168.169" dst_port="80" src_ip="161.238.12.26" src_port="1079"/>
      <filter dst_ip="203.88.168.169" dst_port="80" src_ip="161.238.12.26" src_port="1077"/>
    </slice>
    <from sec="1034226697" usec="0"/>
    <to sec="1034226740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.52.1.28"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,999,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
18[label="212.28.99.28s;3pkt 3fpkt", shape=rectangle, color=red];
218[label="202.86.171.28s;1pkt 1fpkt", shape=rectangle, color=red];
340[label="3.210.102.194s;1pkt 1fpkt", shape=rectangle, color=red];
697[label="185.191.208.201;d;320pkt 320fpkt", shape=diamond, color=yellow];
1071[label="43.184.19.28;s;2pkt 2fpkt", shape=diamond, color=yellow];
1212[label="195.107.103.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
1459[label="202.8.65.131;s;1pkt 1fpkt", shape=diamond, color=yellow];
1688[label="202.9.122.194;s;1pkt 1fpkt", shape=diamond, color=yellow];
2289[label="43.15.98.13;s;2pkt 2fpkt", shape=diamond, color=yellow];
2918[label="43.184.19.28;s;2pkt 2fpkt", shape=hexagon, color=black];
3216[label="202.9.122.194;s;1pkt 1fpkt", shape=hexagon, color=black];
3369[label="185.191.208.201;d;320pkt 320fpkt", shape=hexagon, color=black];
3512[label="202.8.65.131;s;1pkt 1fpkt", shape=hexagon, color=black];
3665[label="195.107.103.148;s;1pkt 1fpkt", shape=hexagon, color=black];
3902[label="202.8.65.131;s;1pkt 1fpkt", shape=polygon, color=gold];
4102[label="43.15.98.13;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4213[label="43.184.19.28;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4214[label="212.28.99.28;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5061[label="202.8.65.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5099[label="203.139.71.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6036[label="43.15.98.13;1pkt 1fpkt", shape=invtriangle, color=brown];
6114[label="43.184.19.28;2pkt 2fpkt", shape=invtriangle, color=brown];
7325[label="43.15.98.13;1pkt 1fpkt", shape=invhouse, color=bisque];
7373[label="43.184.19.28;1pkt 1fpkt", shape=invhouse, color=bisque];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 185.191.208.201:6257}[92.9448%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (91.5052%)&lt;BR/&gt; 6699: (3.3532%)&lt;BR/&gt; 1114: (0.670641%)&lt;BR/&gt; 2264: (0.447094%)&lt;BR/&gt; 1210: (0.447094%)&gt;];
}
18--218[label="1;1pkt 1fpkt"];
18--442[label="0.333333;1pkt 1fpkt"];
18--544[label="0.333333;1pkt 1fpkt"];
18--697[label="0.333333;1pkt 1fpkt"];
18--1071[label="0.5;1pkt 1fpkt"];
18--2918[label="0.5;1pkt 1fpkt"];
18--3369[label="0.333333;1pkt 1fpkt"];
18--4213[label="1;1pkt 1fpkt"];
18--4214[label="0.333333;1pkt 1fpkt"];
18--6114[label="0.5;1pkt 1fpkt"];
18--7373[label="1;1pkt 1fpkt"];
218--442[label="1;1pkt 1fpkt"];
218--544[label="1;1pkt 1fpkt"];
218--697[label="1;1pkt 1fpkt"];
218--1071[label="1;1pkt 1fpkt"];
218--2918[label="1;1pkt 1fpkt"];
218--3369[label="1;1pkt 1fpkt"];
218--4213[label="1;1pkt 1fpkt"];
218--6114[label="1;1pkt 1fpkt"];
218--7373[label="1;1pkt 1fpkt"];
340--442[label="1;1pkt 1fpkt"];
340--544[label="1;1pkt 1fpkt"];
340--697[label="1;1pkt 1fpkt"];
340--1688[label="1;1pkt 1fpkt"];
340--3216[label="1;1pkt 1fpkt"];
340--3369[label="1;1pkt 1fpkt"];
697--1071[label="0.5;1pkt 1fpkt"];
697--1212[label="1;1pkt 1fpkt"];
697--1459[label="1;1pkt 1fpkt"];
697--1688[label="1;1pkt 1fpkt"];
697--2289[label="1;2pkt 2fpkt"];
697--2519[label="1;2pkt 2fpkt"];
697--2918[label="0.5;1pkt 1fpkt"];
697--3216[label="1;1pkt 1fpkt"];
697--3369[label="1;320pkt 320fpkt"];
697--3512[label="1;1pkt 1fpkt"];
697--3626[label="1;2pkt 2fpkt"];
697--3665[label="1;1pkt 1fpkt"];
697--3902[label="1;1pkt 1fpkt"];
697--3948[label="0.446875;143pkt 143fpkt"];
697--3952[label="0.590625;189pkt 189fpkt"];
697--3961[label="0.446875;143pkt 143fpkt"];
697--3963[label="0.590625;189pkt 189fpkt"];
697--3971[label="0.446875;143pkt 143fpkt"];
697--3973[label="0.590625;189pkt 189fpkt"];
697--4102[label="1;1pkt 1fpkt"];
697--4213[label="1;1pkt 1fpkt"];
697--5061[label="1;1pkt 1fpkt"];
697--5099[label="1;1pkt 1fpkt"];
697--5356[label="1;2pkt 2fpkt"];
697--6036[label="1;1pkt 1fpkt"];
697--6114[label="0.5;1pkt 1fpkt"];
697--7325[label="1;1pkt 1fpkt"];
697--7373[label="1;1pkt 1fpkt"];
1071--1112[label="0.5;1pkt 1fpkt"];
1071--2918[label="1;2pkt 2fpkt"];
1071--3369[label="0.5;1pkt 1fpkt"];
1071--4213[label="1;1pkt 1fpkt"];
1071--6114[label="1;2pkt 2fpkt"];
1071--7373[label="1;1pkt 1fpkt"];
1212--3369[label="1;1pkt 1fpkt"];
1212--3665[label="1;1pkt 1fpkt"];
1459--3369[label="1;1pkt 1fpkt"];
1459--3512[label="1;1pkt 1fpkt"];
1459--3902[label="1;1pkt 1fpkt"];
1459--5061[label="1;1pkt 1fpkt"];
1688--3216[label="1;1pkt 1fpkt"];
1688--3369[label="1;1pkt 1fpkt"];
2289--3369[label="1;2pkt 2fpkt"];
2289--4102[label="1;1pkt 1fpkt"];
2289--6036[label="1;1pkt 1fpkt"];
2289--7325[label="1;1pkt 1fpkt"];
2918--3369[label="0.5;1pkt 1fpkt"];
2918--4213[label="1;1pkt 1fpkt"];
2918--6114[label="1;2pkt 2fpkt"];
2918--7373[label="1;1pkt 1fpkt"];
3216--3369[label="1;1pkt 1fpkt"];
3369--3512[label="1;1pkt 1fpkt"];
3369--3626[label="1;2pkt 2fpkt"];
3369--3665[label="1;1pkt 1fpkt"];
3369--3902[label="1;1pkt 1fpkt"];
3369--3948[label="0.446875;143pkt 143fpkt"];
3369--3952[label="0.590625;189pkt 189fpkt"];
3369--3961[label="0.446875;143pkt 143fpkt"];
3369--3963[label="0.590625;189pkt 189fpkt"];
3369--3971[label="0.446875;143pkt 143fpkt"];
3369--3973[label="0.590625;189pkt 189fpkt"];
3369--4102[label="1;1pkt 1fpkt"];
3369--4213[label="1;1pkt 1fpkt"];
3369--5061[label="1;1pkt 1fpkt"];
3369--5099[label="1;1pkt 1fpkt"];
3369--5356[label="1;2pkt 2fpkt"];
3369--6036[label="1;1pkt 1fpkt"];
3369--6114[label="0.5;1pkt 1fpkt"];
3369--7325[label="1;1pkt 1fpkt"];
3369--7373[label="1;1pkt 1fpkt"];
3512--3902[label="1;1pkt 1fpkt"];
3512--5061[label="1;1pkt 1fpkt"];
3902--5061[label="1;1pkt 1fpkt"];
4102--6036[label="1;1pkt 1fpkt"];
4102--7325[label="1;1pkt 1fpkt"];
4213--6114[label="1;1pkt 1fpkt"];
4213--7373[label="1;1pkt 1fpkt"];
6036--7325[label="1;1pkt 1fpkt"];
6114--7373[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.208.201" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.233.238.28"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.68.209.29"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.81.54.30"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.230.167.30"/>
    </slice>
    <from sec="1034226024" usec="0"/>
    <to sec="1034226790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.148.177.30"/>
    </slice>
    <from sec="1034226006" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.177.17.31"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.4.221.31"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.34.109.32"/>
    </slice>
    <from sec="1034226018" usec="0"/>
    <to sec="1034226715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.235.169.32"/>
    </slice>
    <from sec="1034226610" usec="0"/>
    <to sec="1034226788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.120.223.32"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611545,2.14038,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_521{
style=filled;
color=gray75;
1956[label="196.232.69.33;s;1pkt 1fpkt", shape=diamond, color=yellow];
4253[label="196.232.69.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat521[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.232.69.33:4662, 141.98.93.221:3039}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 3039: (50%)&gt;];
}
1956--4253[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.93.221" dst_port="3039" src_ip="196.232.69.33" src_port="4662"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,504,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_522{
style=filled;
color=gray75;
905[label="86.194.164.122;d;171pkt 171fpkt", shape=diamond, color=yellow];
907[label="185.191.212.119;s;149pkt 149fpkt", shape=diamond, color=yellow];
967[label="167.8.91.33;s;12pkt 12fpkt", shape=diamond, color=yellow];
2749[label="167.8.91.33;s;13pkt 13fpkt", shape=hexagon, color=black];
2966[label="185.191.212.119;s;74pkt 74fpkt", shape=hexagon, color=black];
3096[label="86.194.164.122;d;68pkt 68fpkt", shape=hexagon, color=black];
3782[label="167.8.91.33;s;12pkt 12fpkt", shape=polygon, color=gold];
4255[label="167.8.91.33;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6142[label="167.8.91.33;27pkt 27fpkt", shape=invtriangle, color=brown];
7389[label="167.8.91.33;26pkt 26fpkt", shape=invhouse, color=bisque];
stat522[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.212.119:*, 86.194.164.122:443}[80.1075%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (46.0276%)&lt;BR/&gt; 32780: (1.81347%)&lt;BR/&gt; 53: (1.81347%)&lt;BR/&gt; 80: (0.777202%)&lt;BR/&gt; 25: (0.777202%)&gt;];
}
905--907[label="1;149pkt 149fpkt"];
905--967[label="1;12pkt 12fpkt"];
905--1516[label="0.00584795;1pkt 1fpkt"];
905--2058[label="0.015873;1pkt 1fpkt"];
905--2749[label="0.923077;12pkt 12fpkt"];
905--2966[label="1;74pkt 74fpkt"];
905--3096[label="1;68pkt 68fpkt"];
905--3452[label="0.015873;1pkt 1fpkt"];
905--3782[label="1;12pkt 12fpkt"];
905--4255[label="0.444444;12pkt 12fpkt"];
905--5371[label="0.0151515;1pkt 1fpkt"];
905--6142[label="0.444444;12pkt 12fpkt"];
905--6891[label="0.0151515;1pkt 1fpkt"];
905--7389[label="0.461538;12pkt 12fpkt"];
905--7859[label="0.0149254;1pkt 1fpkt"];
907--2966[label="1;74pkt 74fpkt"];
907--3096[label="0.779412;53pkt 53fpkt"];
967--2749[label="1;12pkt 12fpkt"];
967--3096[label="1;12pkt 12fpkt"];
967--3782[label="1;12pkt 12fpkt"];
967--4255[label="1;12pkt 12fpkt"];
967--6142[label="1;12pkt 12fpkt"];
967--7389[label="1;12pkt 12fpkt"];
2749--3096[label="0.923077;12pkt 12fpkt"];
2749--3782[label="1;12pkt 12fpkt"];
2749--4255[label="1;13pkt 13fpkt"];
2749--6142[label="1;13pkt 13fpkt"];
2749--7389[label="0.923077;12pkt 12fpkt"];
2966--3096[label="0.779412;53pkt 53fpkt"];
3096--3782[label="1;12pkt 12fpkt"];
3096--4255[label="0.444444;12pkt 12fpkt"];
3096--6142[label="0.444444;12pkt 12fpkt"];
3096--7389[label="0.461538;12pkt 12fpkt"];
3782--4255[label="1;12pkt 12fpkt"];
3782--6142[label="1;12pkt 12fpkt"];
3782--7389[label="1;12pkt 12fpkt"];
4255--6142[label="1;27pkt 27fpkt"];
4255--7389[label="1;26pkt 26fpkt"];
6142--7389[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="86.194.164.122" dst_port="443" src_ip="185.191.212.119"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.91.97.33"/>
    </slice>
    <from sec="1034226015" usec="0"/>
    <to sec="1034226790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.173.241.33"/>
    </slice>
    <from sec="1034226451" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.78.34"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_526{
style=filled;
color=gray75;
1723[label="136.230.111.34;s;10pkt 10fpkt", shape=diamond, color=yellow];
1945[label="25.170.114.165;d;2pkt 2fpkt", shape=diamond, color=yellow];
3102[label="136.230.111.34;s;7pkt 7fpkt", shape=hexagon, color=black];
4268[label="136.230.111.34;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6151[label="136.230.111.34;10pkt 10fpkt", shape=invtriangle, color=brown];
stat526[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.111.34:25, *:*}[45.4545%]&lt;BR/&gt;{136.230.111.34:80, *:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (30.2632%)&lt;BR/&gt; 80: (18.4211%)&lt;BR/&gt; 62355: (6.57895%)&lt;BR/&gt; 60093: (5.26316%)&lt;BR/&gt; 53138: (5.26316%)&gt;];
}
1723--1945[label="0.5;1pkt 1fpkt"];
1723--3102[label="1;7pkt 7fpkt"];
1723--4268[label="1;9pkt 9fpkt"];
1723--6151[label="1;10pkt 10fpkt"];
1945--3102[label="0.5;1pkt 1fpkt"];
1945--3631[label="0.5;1pkt 1fpkt"];
1945--3914[label="0.5;1pkt 1fpkt"];
1945--4134[label="0.5;1pkt 1fpkt"];
1945--4268[label="0.5;1pkt 1fpkt"];
1945--6058[label="0.5;1pkt 1fpkt"];
1945--6151[label="0.5;1pkt 1fpkt"];
3102--4268[label="0.857143;6pkt 6fpkt"];
3102--6151[label="1;7pkt 7fpkt"];
4268--6151[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="136.230.111.34" src_port="25"/>
      <filter src_ip="136.230.111.34" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.8.71.35"/>
    </slice>
    <from sec="1034226036" usec="0"/>
    <to sec="1034226107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_528{
style=filled;
color=gray75;
2606[label="141.98.141.35;s;150pkt 150fpkt", shape=diamond, color=yellow];
3723[label="141.98.141.35;s;150pkt 150fpkt", shape=hexagon, color=black];
4282[label="141.98.141.35;150pkt 150fpkt", shape=pentagon, color=darkviolet];
6163[label="141.98.141.35;151pkt 151fpkt", shape=invtriangle, color=brown];
7402[label="141.98.141.35;150pkt 150fpkt", shape=invhouse, color=bisque];
stat528[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.141.35:1070, *:4665}[78.1457%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1070: (44.1411%)&lt;BR/&gt; 4665: (39.1478%)&lt;BR/&gt; 4662: (4.86019%)&lt;BR/&gt; 4661: (0.998668%)&lt;BR/&gt; 3943: (0.998668%)&gt;];
}
2606--3723[label="1;150pkt 150fpkt"];
2606--4282[label="0.993333;149pkt 149fpkt"];
2606--6163[label="1;150pkt 150fpkt"];
2606--7402[label="0.993333;149pkt 149fpkt"];
3723--4282[label="0.993333;149pkt 149fpkt"];
3723--6163[label="1;150pkt 150fpkt"];
3723--7402[label="0.993333;149pkt 149fpkt"];
4282--6163[label="1;150pkt 150fpkt"];
4282--7402[label="1;150pkt 150fpkt"];
6163--7402[label="1;150pkt 150fpkt"];
</description>
    <slice>
      <filter dst_port="4665" src_ip="141.98.141.35" src_port="1070"/>
    </slice>
    <from sec="1034226029" usec="0"/>
    <to sec="1034226774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.227.12.36"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713674,2.11968,503,0 0 0 0 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_530{
style=filled;
color=gray75;
3687[label="212.24.173.35;d;82pkt 82fpkt", shape=hexagon, color=black];
5776[label="203.204.58.227;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7158[label="203.204.58.227;3pkt 3fpkt", shape=invtriangle, color=brown];
stat530[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.70.103.20:*, 212.24.173.35:80}[61.9048%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2759%)&lt;BR/&gt; 38262: (1.72414%)&lt;BR/&gt; 8080: (1.72414%)&lt;BR/&gt; 41352: (1.14943%)&lt;BR/&gt; 64998: (0.574713%)&gt;];
}
3687--3946[label="0.0853659;7pkt 7fpkt"];
3687--3959[label="0.0853659;7pkt 7fpkt"];
3687--3969[label="0.0853659;7pkt 7fpkt"];
3687--4152[label="1;51pkt 51fpkt"];
3687--4288[label="0.03125;1pkt 1fpkt"];
3687--5776[label="0.5;1pkt 1fpkt"];
3687--5853[label="0.0121951;1pkt 1fpkt"];
3687--6071[label="1;51pkt 51fpkt"];
3687--7158[label="0.333333;1pkt 1fpkt"];
3687--7215[label="0.0121951;1pkt 1fpkt"];
3687--7345[label="1;51pkt 51fpkt"];
3687--8064[label="0.0121951;1pkt 1fpkt"];
5776--7158[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.173.35" dst_port="80" src_ip="201.70.103.20"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_531{
style=filled;
color=gray75;
4207[label="203.204.55.27;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6108[label="203.204.55.27;1pkt 1fpkt", shape=invtriangle, color=brown];
7369[label="203.204.55.27;1pkt 1fpkt", shape=invhouse, color=bisque];
stat531[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.204.55.27:53, 185.191.6.190:33500}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33500: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
4207--6108[label="1;1pkt 1fpkt"];
4207--7369[label="1;1pkt 1fpkt"];
6108--7369[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.6.190" dst_port="33500" src_ip="203.204.55.27" src_port="53"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.85.38.36"/>
    </slice>
    <from sec="1034226027" usec="0"/>
    <to sec="1034226759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.728592,2.13253,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_533{
style=filled;
color=gray75;
225[label="195.54.197.36s;55pkt 55fpkt", shape=rectangle, color=red];
4293[label="195.54.197.36;110pkt 110fpkt", shape=pentagon, color=darkviolet];
stat533[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.54.197.36:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
225--4293[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.54.197.36" src_port="1025"/>
    </slice>
    <from sec="1034226548" usec="0"/>
    <to sec="1034226567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_534{
style=filled;
color=gray75;
228[label="200.161.203.38s;223pkt 223fpkt", shape=rectangle, color=red];
4308[label="200.161.203.38;223pkt 223fpkt", shape=pentagon, color=darkviolet];
6176[label="200.161.203.38;223pkt 223fpkt", shape=invtriangle, color=brown];
7411[label="200.161.203.38;223pkt 223fpkt", shape=invhouse, color=bisque];
stat534[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.161.203.38:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
228--4308[label="1;223pkt 223fpkt"];
228--6176[label="1;223pkt 223fpkt"];
228--7411[label="1;223pkt 223fpkt"];
4308--6176[label="1;223pkt 223fpkt"];
4308--7411[label="1;223pkt 223fpkt"];
6176--7411[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.161.203.38" src_port="1025"/>
    </slice>
    <from sec="1034226357" usec="0"/>
    <to sec="1034226392" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.208.4.39"/>
    </slice>
    <from sec="1034226499" usec="0"/>
    <to sec="1034226524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.177.200.39"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.54.35.40"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37169,2.17355,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_538{
style=filled;
color=gray75;
231[label="1.7.84.40s;140pkt 140fpkt", shape=rectangle, color=red];
466[label="1.7.84.40s;51pkt 51fpkt", shape=ellipse, color=green];
4320[label="1.7.84.40;139pkt 139fpkt", shape=pentagon, color=darkviolet];
6182[label="1.7.84.40;140pkt 140fpkt", shape=invtriangle, color=brown];
stat538[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.7.84.40:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
231--466[label="1;51pkt 51fpkt"];
231--4320[label="1;139pkt 139fpkt"];
231--6182[label="1;140pkt 140fpkt"];
466--4320[label="1;51pkt 51fpkt"];
466--6182[label="1;51pkt 51fpkt"];
4320--6182[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.7.84.40" src_port="1025"/>
    </slice>
    <from sec="1034226127" usec="0"/>
    <to sec="1034226151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.89.40"/>
    </slice>
    <from sec="1034226032" usec="0"/>
    <to sec="1034226680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.133.116.40"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_541{
style=filled;
color=gray75;
1882[label="85.222.240.40;s;38pkt 38fpkt", shape=diamond, color=yellow];
3740[label="85.222.240.40;s;38pkt 38fpkt", shape=hexagon, color=black];
4334[label="85.222.240.40;38pkt 38fpkt", shape=pentagon, color=darkviolet];
6193[label="85.222.240.40;37pkt 37fpkt", shape=invtriangle, color=brown];
7425[label="85.222.240.40;38pkt 38fpkt", shape=invhouse, color=bisque];
stat541[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.222.240.40:80, 212.18.106.107:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4786: (1.32275%)&lt;BR/&gt; 4714: (1.32275%)&lt;BR/&gt; 4377: (1.32275%)&lt;BR/&gt; 4000: (1.32275%)&gt;];
}
1882--3740[label="1;38pkt 38fpkt"];
1882--4334[label="1;38pkt 38fpkt"];
1882--6193[label="1;37pkt 37fpkt"];
1882--7425[label="1;38pkt 38fpkt"];
3740--4334[label="1;38pkt 38fpkt"];
3740--6193[label="1;37pkt 37fpkt"];
3740--7425[label="1;38pkt 38fpkt"];
4334--6193[label="1;37pkt 37fpkt"];
4334--7425[label="1;38pkt 38fpkt"];
6193--7425[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.106.107" src_ip="85.222.240.40" src_port="80"/>
    </slice>
    <from sec="1034226313" usec="0"/>
    <to sec="1034226664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611545,2.14038,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_542{
style=filled;
color=gray75;
2382[label="167.8.247.72;d;175pkt 175fpkt", shape=diamond, color=yellow];
4337[label="218.236.12.41;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat542[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.232.155.106:*, 167.8.247.72:33610}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33610: (50%)&lt;BR/&gt; 4563: (0.518135%)&lt;BR/&gt; 4559: (0.518135%)&lt;BR/&gt; 4556: (0.518135%)&lt;BR/&gt; 4552: (0.518135%)&gt;];
}
2382--4337[label="0.944444;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.247.72" dst_port="33610" src_ip="196.232.155.106"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.105.42"/>
    </slice>
    <from sec="1034226203" usec="0"/>
    <to sec="1034226226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.128.42"/>
    </slice>
    <from sec="1034226084" usec="0"/>
    <to sec="1034226166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.728592,2.13253,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_545{
style=filled;
color=gray75;
233[label="214.131.163.42s;92pkt 92fpkt", shape=rectangle, color=red];
4357[label="214.131.163.42;167pkt 167fpkt", shape=pentagon, color=darkviolet];
stat545[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.131.163.42:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
233--4357[label="0.98913;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.131.163.42" src_port="1025"/>
    </slice>
    <from sec="1034226499" usec="0"/>
    <to sec="1034226525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.93.31.43"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.1.66.44"/>
    </slice>
    <from sec="1034226008" usec="0"/>
    <to sec="1034226789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.71.140.44"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.34.109.46"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.168.181.48"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.888207,2.12355,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_551{
style=filled;
color=gray75;
883[label="86.16.101.49;s;1pkt 1fpkt", shape=diamond, color=yellow];
2731[label="86.16.101.49;s;1pkt 1fpkt", shape=hexagon, color=black];
4420[label="86.16.101.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7459[label="86.16.101.49;1pkt 1fpkt", shape=invhouse, color=bisque];
stat551[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.16.101.49:6699, 167.8.141.82:1120}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1120: (50%)&gt;];
}
883--1414[label="1;1pkt 1fpkt"];
883--2731[label="1;1pkt 1fpkt"];
883--4420[label="1;1pkt 1fpkt"];
883--7459[label="1;1pkt 1fpkt"];
2731--4420[label="1;1pkt 1fpkt"];
2731--7459[label="1;1pkt 1fpkt"];
4420--7459[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.141.82" dst_port="1120" src_ip="86.16.101.49" src_port="6699"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.191.189.49"/>
    </slice>
    <from sec="1034226160" usec="0"/>
    <to sec="1034226648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.132.204.49"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.8.72.50"/>
    </slice>
    <from sec="1034226467" usec="0"/>
    <to sec="1034226524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_555{
style=filled;
color=gray75;
238[label="195.84.145.50s;204pkt 204fpkt", shape=rectangle, color=red];
4432[label="195.84.145.50;238pkt 238fpkt", shape=pentagon, color=darkviolet];
6258[label="195.84.145.50;238pkt 238fpkt", shape=invtriangle, color=brown];
7464[label="195.84.145.50;238pkt 238fpkt", shape=invhouse, color=bisque];
stat555[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.84.145.50:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
238--1411[label="0.00943396;1pkt 1fpkt"];
238--4432[label="0.995098;203pkt 203fpkt"];
238--6258[label="0.995098;203pkt 203fpkt"];
238--7464[label="0.995098;203pkt 203fpkt"];
4432--6258[label="1;238pkt 238fpkt"];
4432--7464[label="1;238pkt 238fpkt"];
6258--7464[label="1;238pkt 238fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.84.145.50" src_port="1030"/>
    </slice>
    <from sec="1034226408" usec="0"/>
    <to sec="1034226445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.6.224.50"/>
    </slice>
    <from sec="1034226490" usec="0"/>
    <to sec="1034226700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.66.92.51"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.24.4.52"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.33.52"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.191.121.52"/>
    </slice>
    <from sec="1034226094" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.96361,2.07354,999,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
242[label="202.227.49.54s;1pkt 1fpkt", shape=rectangle, color=red];
1242[label="212.24.29.116;d;15pkt 15fpkt", shape=diamond, color=yellow];
1757[label="1.35.33.54;s;3pkt 3fpkt", shape=diamond, color=yellow];
4460[label="1.35.33.54;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4493[label="1.35.33.59;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6299[label="1.35.33.59;1pkt 1fpkt", shape=invtriangle, color=brown];
7491[label="1.35.33.59;2pkt 2fpkt", shape=invhouse, color=bisque];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.35.33.2:6900, 212.24.29.116:*}[23.5294%]&lt;BR/&gt;{1.35.33.55:6001, 212.24.29.116:*}[23.5294%]&lt;BR/&gt;{*:5001, 212.24.29.116:*}[23.5294%]&lt;BR/&gt;{1.35.33.54:5001, *:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (28.8462%)&lt;BR/&gt; 6900: (7.69231%)&lt;BR/&gt; 6001: (7.69231%)&lt;BR/&gt; 1084: (7.69231%)&lt;BR/&gt; 1083: (5.76923%)&gt;];
}
242--1242[label="1;1pkt 1fpkt"];
242--4460[label="1;1pkt 1fpkt"];
1242--1757[label="0.333333;1pkt 1fpkt"];
1242--3996[label="0.266667;4pkt 4fpkt"];
1242--4460[label="0.666667;2pkt 2fpkt"];
1242--4493[label="1;1pkt 1fpkt"];
1242--5953[label="0.266667;4pkt 4fpkt"];
1242--6299[label="1;1pkt 1fpkt"];
1242--7274[label="0.266667;4pkt 4fpkt"];
1242--7491[label="1;2pkt 2fpkt"];
1757--2985[label="0.333333;1pkt 1fpkt"];
1757--4460[label="0.666667;2pkt 2fpkt"];
4493--6299[label="1;1pkt 1fpkt"];
4493--7491[label="1;1pkt 1fpkt"];
6299--7491[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="1.35.33.54" src_port="5001"/>
      <filter dst_ip="212.24.29.116" src_port="5001"/>
      <filter dst_ip="212.24.29.116" src_ip="1.35.33.55" src_port="6001"/>
      <filter dst_ip="212.24.29.116" src_ip="1.35.33.2" src_port="6900"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.173.93.55"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987269,2.08385,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_563{
style=filled;
color=gray75;
244[label="216.64.89.56s;1pkt 1fpkt", shape=rectangle, color=red];
1827[label="141.98.197.56;s;73pkt 73fpkt", shape=diamond, color=yellow];
1850[label="86.135.44.183;d;3pkt 3fpkt", shape=diamond, color=yellow];
3158[label="141.98.197.56;s;73pkt 73fpkt", shape=hexagon, color=black];
4476[label="141.98.197.56;80pkt 80fpkt", shape=pentagon, color=darkviolet];
6287[label="141.98.197.56;79pkt 79fpkt", shape=invtriangle, color=brown];
stat563[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.197.56:*, *:25}[61.7284%]&lt;BR/&gt;{141.98.197.56:25, *:*}[37.037%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 6453: (0.809061%)&lt;BR/&gt; 6446: (0.809061%)&lt;BR/&gt; 60800: (0.647249%)&lt;BR/&gt; 60044: (0.647249%)&gt;];
}
244--4476[label="1;1pkt 1fpkt"];
244--6287[label="1;1pkt 1fpkt"];
1827--1850[label="0.666667;2pkt 2fpkt"];
1827--2744[label="0.176471;3pkt 3fpkt"];
1827--3158[label="1;73pkt 73fpkt"];
1827--4476[label="1;73pkt 73fpkt"];
1827--6287[label="0.986301;72pkt 72fpkt"];
1850--3158[label="0.666667;2pkt 2fpkt"];
1850--4476[label="0.666667;2pkt 2fpkt"];
1850--6287[label="0.666667;2pkt 2fpkt"];
3158--4476[label="1;73pkt 73fpkt"];
3158--6287[label="0.986301;72pkt 72fpkt"];
4476--6287[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter src_ip="141.98.197.56" src_port="25"/>
      <filter dst_port="25" src_ip="141.98.197.56"/>
    </slice>
    <from sec="1034226035" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.66.57"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611545,2.14038,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_565{
style=filled;
color=gray75;
2406[label="213.91.97.57;s;98pkt 98fpkt", shape=diamond, color=yellow];
4481[label="213.91.97.57;97pkt 97fpkt", shape=pentagon, color=darkviolet];
stat565[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.97.57:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2406--4481[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter src_ip="213.91.97.57"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.113.229.57"/>
    </slice>
    <from sec="1034226061" usec="0"/>
    <to sec="1034226083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.24.6.58"/>
    </slice>
    <from sec="1034226065" usec="0"/>
    <to sec="1034226089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.53.19.58"/>
    </slice>
    <from sec="1034226413" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.178.58"/>
    </slice>
    <from sec="1034226016" usec="0"/>
    <to sec="1034226051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.129.59"/>
    </slice>
    <from sec="1034226013" usec="0"/>
    <to sec="1034226716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.105.172.60"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_572{
style=filled;
color=gray75;
2189[label="213.91.97.61;s;214pkt 214fpkt", shape=diamond, color=yellow];
3551[label="213.91.97.61;s;213pkt 213fpkt", shape=hexagon, color=black];
4503[label="213.91.97.61;213pkt 213fpkt", shape=pentagon, color=darkviolet];
stat572[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.97.61:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2189--3551[label="1;213pkt 213fpkt"];
2189--4503[label="1;213pkt 213fpkt"];
3551--4503[label="0.995305;212pkt 212fpkt"];
</description>
    <slice>
      <filter src_ip="213.91.97.61"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.7.106.61"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.17.215.61"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.94.0.64"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.28.25.64"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.8.54.64"/>
    </slice>
    <from sec="1034226642" usec="0"/>
    <to sec="1034226684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.91.101.64"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.96361,2.07354,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_579{
style=filled;
color=gray75;
36[label="85.10.197.64s;1pkt 1fpkt", shape=rectangle, color=red];
2504[label="85.10.197.64;s;7pkt 7fpkt", shape=diamond, color=yellow];
4538[label="85.10.197.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6325[label="85.10.197.64;1pkt 1fpkt", shape=invtriangle, color=brown];
7508[label="85.10.197.64;1pkt 1fpkt", shape=invhouse, color=bisque];
stat579[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.10.197.64:80, 185.191.0.65:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51849: (22.7273%)&lt;BR/&gt; 52145: (4.54545%)&lt;BR/&gt; 52125: (4.54545%)&lt;BR/&gt; 51847: (4.54545%)&gt;];
}
36--890[label="1;1pkt 1fpkt"];
36--2504[label="1;1pkt 1fpkt"];
36--4538[label="1;1pkt 1fpkt"];
36--6325[label="1;1pkt 1fpkt"];
36--7508[label="1;1pkt 1fpkt"];
2504--4538[label="1;1pkt 1fpkt"];
2504--6325[label="1;1pkt 1fpkt"];
2504--7508[label="1;1pkt 1fpkt"];
4538--6325[label="1;1pkt 1fpkt"];
4538--7508[label="1;1pkt 1fpkt"];
6325--7508[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.0.65" src_ip="85.10.197.64" src_port="80"/>
    </slice>
    <from sec="1034226468" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.234.21.65"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.193.163.67"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.97.144.68"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_584{
style=filled;
color=gray75;
1738[label="136.230.38.69;s;119pkt 119fpkt", shape=diamond, color=yellow];
3105[label="136.230.38.69;s;75pkt 75fpkt", shape=hexagon, color=black];
4568[label="136.230.38.69;125pkt 125fpkt", shape=pentagon, color=darkviolet];
6348[label="136.230.38.69;125pkt 125fpkt", shape=invtriangle, color=brown];
stat584[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.38.69:*, *:25}[98.4127%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 60498: (0.45045%)&lt;BR/&gt; 40793: (0.45045%)&lt;BR/&gt; 2903: (0.45045%)&lt;BR/&gt; 2902: (0.45045%)&gt;];
}
1738--3105[label="1;75pkt 75fpkt"];
1738--4568[label="0.991597;118pkt 118fpkt"];
1738--6348[label="0.991597;118pkt 118fpkt"];
3105--4568[label="0.986667;74pkt 74fpkt"];
3105--6348[label="0.986667;74pkt 74fpkt"];
4568--6348[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="136.230.38.69"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.97.69"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.187.120.69"/>
    </slice>
    <from sec="1034226403" usec="0"/>
    <to sec="1034226432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.1.93.71"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.200.92.72"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.177.152.72"/>
    </slice>
    <from sec="1034226009" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
934[label="185.191.170.210;d;144pkt 144fpkt", shape=diamond, color=yellow];
1282[label="200.165.27.78;s;27pkt 27fpkt", shape=diamond, color=yellow];
4560[label="200.165.27.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4606[label="1.124.237.72;53pkt 53fpkt", shape=pentagon, color=darkviolet];
4664[label="200.165.27.78;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6343[label="200.165.27.68;1pkt 1fpkt", shape=invtriangle, color=brown];
6372[label="1.124.237.72;53pkt 53fpkt", shape=invtriangle, color=brown];
6410[label="200.165.27.78;26pkt 26fpkt", shape=invtriangle, color=brown];
7518[label="200.165.27.68;1pkt 1fpkt", shape=invhouse, color=bisque];
7555[label="200.165.27.78;26pkt 26fpkt", shape=invhouse, color=bisque];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.124.237.72:80, 185.191.170.210:*}[37.2414%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1646: (0.696379%)&lt;BR/&gt; 1640: (0.696379%)&lt;BR/&gt; 1639: (0.696379%)&lt;BR/&gt; 1635: (0.696379%)&gt;];
}
934--980[label="0.0416667;6pkt 6fpkt"];
934--983[label="0.0416667;6pkt 6fpkt"];
934--1282[label="1;27pkt 27fpkt"];
934--2018[label="0.0138889;2pkt 2fpkt"];
934--3950[label="0.0416667;6pkt 6fpkt"];
934--4560[label="1;1pkt 1fpkt"];
934--4606[label="0.981132;52pkt 52fpkt"];
934--4664[label="1;27pkt 27fpkt"];
934--5727[label="0.0416667;6pkt 6fpkt"];
934--6343[label="1;1pkt 1fpkt"];
934--6372[label="0.981132;52pkt 52fpkt"];
934--6410[label="1;26pkt 26fpkt"];
934--7126[label="0.0416667;6pkt 6fpkt"];
934--7518[label="1;1pkt 1fpkt"];
934--7555[label="1;26pkt 26fpkt"];
1282--4664[label="1;27pkt 27fpkt"];
1282--6410[label="1;26pkt 26fpkt"];
1282--7555[label="1;26pkt 26fpkt"];
4560--6343[label="1;1pkt 1fpkt"];
4560--7518[label="1;1pkt 1fpkt"];
4606--6372[label="1;53pkt 53fpkt"];
4664--6410[label="1;26pkt 26fpkt"];
4664--7555[label="1;26pkt 26fpkt"];
6343--7518[label="1;1pkt 1fpkt"];
6410--7555[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.170.210" src_ip="1.124.237.72" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.200.92.74"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.98.74"/>
    </slice>
    <from sec="1034226022" usec="0"/>
    <to sec="1034226787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.32.113.74"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.178.120.74"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.164.147.74"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.660769,2.19252,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_596{
style=filled;
color=gray75;
2475[label="185.191.249.40;d;11pkt 11fpkt", shape=diamond, color=yellow];
2478[label="195.68.117.169;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat596[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.144.224.145:80, 185.191.249.40:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 7002: (12.5%)&lt;BR/&gt; 7447: (8.33333%)&lt;BR/&gt; 1434: (8.33333%)&lt;BR/&gt; 1863: (4.16667%)&gt;];
}
2475--2478[label="1;1pkt 1fpkt"];
2475--4636[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.249.40" src_ip="195.144.224.145" src_port="80"/>
    </slice>
    <from sec="1034226293" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.11.76"/>
    </slice>
    <from sec="1034226324" usec="0"/>
    <to sec="1034226480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_598{
style=filled;
color=gray75;
255[label="138.40.33.76s;133pkt 133fpkt", shape=rectangle, color=red];
4645[label="138.40.33.76;167pkt 167fpkt", shape=pentagon, color=darkviolet];
6398[label="138.40.33.76;168pkt 168fpkt", shape=invtriangle, color=brown];
7550[label="138.40.33.76;167pkt 167fpkt", shape=invhouse, color=bisque];
stat598[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.40.33.76:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
255--3953[label="1;133pkt 133fpkt"];
255--4645[label="0.992481;132pkt 132fpkt"];
255--6398[label="1;133pkt 133fpkt"];
255--7550[label="0.992481;132pkt 132fpkt"];
4645--6398[label="1;167pkt 167fpkt"];
4645--7550[label="1;167pkt 167fpkt"];
6398--7550[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="138.40.33.76" src_port="1025"/>
    </slice>
    <from sec="1034226682" usec="0"/>
    <to sec="1034226711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.1.83.76"/>
    </slice>
    <from sec="1034226054" usec="0"/>
    <to sec="1034226157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.91.113.76"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.65.83.77"/>
    </slice>
    <from sec="1034226455" usec="0"/>
    <to sec="1034226708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37169,2.17355,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_602{
style=filled;
color=gray75;
256[label="1.46.88.77s;138pkt 138fpkt", shape=rectangle, color=red];
473[label="1.46.88.77s;58pkt 58fpkt", shape=ellipse, color=green];
4656[label="1.46.88.77;137pkt 137fpkt", shape=pentagon, color=darkviolet];
6406[label="1.46.88.77;138pkt 138fpkt", shape=invtriangle, color=brown];
stat602[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.46.88.77:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
256--473[label="1;58pkt 58fpkt"];
256--4656[label="1;137pkt 137fpkt"];
256--6406[label="1;138pkt 138fpkt"];
473--4656[label="0.982759;57pkt 57fpkt"];
473--6406[label="1;58pkt 58fpkt"];
4656--6406[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.46.88.77" src_port="1025"/>
    </slice>
    <from sec="1034226398" usec="0"/>
    <to sec="1034226420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_603{
style=filled;
color=gray75;
257[label="1.3.96.77s;41pkt 41fpkt", shape=rectangle, color=red];
4658[label="1.3.96.77;125pkt 125fpkt", shape=pentagon, color=darkviolet];
6407[label="1.3.96.77;126pkt 126fpkt", shape=invtriangle, color=brown];
stat603[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.3.96.77:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
257--4658[label="1;41pkt 41fpkt"];
257--6407[label="1;41pkt 41fpkt"];
4658--6407[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.3.96.77" src_port="1025"/>
    </slice>
    <from sec="1034226508" usec="0"/>
    <to sec="1034226530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.128.126.80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.160.227.80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.104.81"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_607{
style=filled;
color=gray75;
585[label="161.238.139.57;d;202pkt 202fpkt", shape=diamond, color=yellow];
1151[label="213.8.121.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
1525[label="75.194.186.81;s;2pkt 2fpkt", shape=diamond, color=yellow];
3407[label="75.194.186.81;s;2pkt 2fpkt", shape=hexagon, color=black];
4695[label="75.194.186.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5100[label="213.8.121.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6428[label="75.194.186.81;1pkt 1fpkt", shape=invtriangle, color=brown];
7568[label="75.194.186.81;1pkt 1fpkt", shape=invhouse, color=bisque];
stat607[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 161.238.139.57:6257}[90.1478%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (89.3365%)&lt;BR/&gt; 6699: (4.2654%)&lt;BR/&gt; 1754: (1.4218%)&lt;BR/&gt; 0: (0.947867%)&lt;BR/&gt; 1037: (0.7109%)&gt;];
}
585--833[label="1;1pkt 1fpkt"];
585--867[label="1;1pkt 1fpkt"];
585--921[label="1;1pkt 1fpkt"];
585--1151[label="1;1pkt 1fpkt"];
585--1525[label="0.5;1pkt 1fpkt"];
585--2822[label="1;1pkt 1fpkt"];
585--3407[label="0.5;1pkt 1fpkt"];
585--3948[label="0.480198;97pkt 97fpkt"];
585--3952[label="0.559406;113pkt 113fpkt"];
585--3961[label="0.480198;97pkt 97fpkt"];
585--3963[label="0.559406;113pkt 113fpkt"];
585--3971[label="0.480198;97pkt 97fpkt"];
585--3973[label="0.559406;113pkt 113fpkt"];
585--4695[label="1;1pkt 1fpkt"];
585--5100[label="1;1pkt 1fpkt"];
585--5456[label="1;1pkt 1fpkt"];
585--5876[label="1;1pkt 1fpkt"];
585--6428[label="1;1pkt 1fpkt"];
585--7568[label="1;1pkt 1fpkt"];
1151--5100[label="1;1pkt 1fpkt"];
1525--3407[label="1;2pkt 2fpkt"];
1525--4695[label="1;1pkt 1fpkt"];
1525--6428[label="1;1pkt 1fpkt"];
1525--7568[label="1;1pkt 1fpkt"];
3407--4695[label="1;1pkt 1fpkt"];
3407--6428[label="1;1pkt 1fpkt"];
3407--7568[label="1;1pkt 1fpkt"];
4695--6428[label="1;1pkt 1fpkt"];
4695--7568[label="1;1pkt 1fpkt"];
6428--7568[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.139.57" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.70.117.82"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.80.18.83"/>
    </slice>
    <from sec="1034226464" usec="0"/>
    <to sec="1034226502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.105.79.83"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,053,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.24.144.83"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.728592,2.13253,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
264[label="1.116.221.83s;226pkt 226fpkt", shape=rectangle, color=red];
4714[label="1.116.221.83;226pkt 226fpkt", shape=pentagon, color=darkviolet];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.116.221.83:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
264--4714[label="1;226pkt 226fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.116.221.83" src_port="1025"/>
    </slice>
    <from sec="1034226091" usec="0"/>
    <to sec="1034226127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_613{
style=filled;
color=gray75;
1979[label="212.24.7.84;s;131pkt 131fpkt", shape=diamond, color=yellow];
2089[label="195.144.224.160;d;118pkt 118fpkt", shape=diamond, color=yellow];
3280[label="212.24.7.84;s;131pkt 131fpkt", shape=hexagon, color=black];
4719[label="212.24.7.84;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat613[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.7.84:*, 195.144.224.160:80}[92.4242%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7382%)&lt;BR/&gt; 1493: (0.52356%)&lt;BR/&gt; 1646: (0.39267%)&lt;BR/&gt; 1645: (0.39267%)&lt;BR/&gt; 1644: (0.39267%)&gt;];
}
1979--2089[label="1;118pkt 118fpkt"];
1979--2494[label="1;2pkt 2fpkt"];
1979--3280[label="1;131pkt 131fpkt"];
1979--4719[label="0.5;1pkt 1fpkt"];
2089--3280[label="1;118pkt 118fpkt"];
2089--4719[label="0.5;1pkt 1fpkt"];
3280--4719[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.144.224.160" dst_port="80" src_ip="212.24.7.84"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.728592,2.13253,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_614{
style=filled;
color=gray75;
265[label="2.183.66.84s;52pkt 52fpkt", shape=rectangle, color=red];
4724[label="2.183.66.84;145pkt 145fpkt", shape=pentagon, color=darkviolet];
stat614[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.183.66.84:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
265--4724[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="2.183.66.84" src_port="1027"/>
    </slice>
    <from sec="1034226712" usec="0"/>
    <to sec="1034226735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.21.85"/>
    </slice>
    <from sec="1034226444" usec="0"/>
    <to sec="1034226490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.8.58.86"/>
    </slice>
    <from sec="1034226110" usec="0"/>
    <to sec="1034226149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.163.75.86"/>
    </slice>
    <from sec="1034226279" usec="0"/>
    <to sec="1034226700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.118.86"/>
    </slice>
    <from sec="1034226012" usec="0"/>
    <to sec="1034226784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.197.146.86"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.12.88"/>
    </slice>
    <from sec="1034226072" usec="0"/>
    <to sec="1034226075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.227.51.88"/>
    </slice>
    <from sec="1034226010" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.191.213.88"/>
    </slice>
    <from sec="1034226007" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_623{
style=filled;
color=gray75;
1875[label="202.91.63.90;s;77pkt 77fpkt", shape=diamond, color=yellow];
3184[label="202.91.63.90;s;77pkt 77fpkt", shape=hexagon, color=black];
4769[label="202.91.63.90;78pkt 78fpkt", shape=pentagon, color=darkviolet];
stat623[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.91.63.90:80, 212.24.170.48:*}[94.8718%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4638: (0.646552%)&lt;BR/&gt; 4637: (0.646552%)&lt;BR/&gt; 4633: (0.646552%)&lt;BR/&gt; 4631: (0.646552%)&gt;];
}
1875--3143[label="0.961039;74pkt 74fpkt"];
1875--3184[label="1;77pkt 77fpkt"];
1875--4769[label="1;77pkt 77fpkt"];
3184--4769[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.170.48" src_ip="202.91.63.90" src_port="80"/>
    </slice>
    <from sec="1034226284" usec="0"/>
    <to sec="1034226759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.168.151.90"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.728592,2.13253,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_625{
style=filled;
color=gray75;
267[label="195.43.58.91s;242pkt 242fpkt", shape=rectangle, color=red];
4776[label="195.43.58.91;255pkt 255fpkt", shape=pentagon, color=darkviolet];
stat625[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.43.58.91:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
267--4776[label="0.995868;241pkt 241fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.43.58.91" src_port="1025"/>
    </slice>
    <from sec="1034226367" usec="0"/>
    <to sec="1034226412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.728592,2.13253,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_626{
style=filled;
color=gray75;
269[label="1.7.85.93s;74pkt 74fpkt", shape=rectangle, color=red];
4790[label="1.7.85.93;143pkt 143fpkt", shape=pentagon, color=darkviolet];
stat626[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.7.85.93:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
269--4790[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.7.85.93" src_port="1025"/>
    </slice>
    <from sec="1034226745" usec="0"/>
    <to sec="1034226770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.827709,2.11876,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_627{
style=filled;
color=gray75;
177[label="161.238.151.93s;380pkt 380fpkt", shape=rectangle, color=red];
2647[label="135.174.75.128;d;328pkt 328fpkt", shape=diamond, color=yellow];
4794[label="161.238.151.93;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat627[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.151.93:*, 135.174.75.128:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2368: (0.140056%)&lt;BR/&gt; 2367: (0.140056%)&lt;BR/&gt; 2366: (0.140056%)&lt;BR/&gt; 2365: (0.140056%)&gt;];
}
177--420[label="0.107895;41pkt 41fpkt"];
177--431[label="0.105263;40pkt 40fpkt"];
177--439[label="0.0315789;12pkt 12fpkt"];
177--442[label="0.105263;40pkt 40fpkt"];
177--536[label="0.105263;40pkt 40fpkt"];
177--542[label="0.0315789;12pkt 12fpkt"];
177--544[label="0.105263;40pkt 40fpkt"];
177--2647[label="0.777439;255pkt 255fpkt"];
177--2648[label="0.777439;255pkt 255fpkt"];
2647--2648[label="1;328pkt 328fpkt"];
2647--4794[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.174.75.128" dst_port="80" src_ip="161.238.151.93"/>
    </slice>
    <from sec="1034226645" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.233.19.95"/>
    </slice>
    <from sec="1034226054" usec="0"/>
    <to sec="1034226299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_629{
style=filled;
color=gray75;
41[label="195.9.48.69s;3pkt 3fpkt", shape=rectangle, color=red];
644[label="212.137.144.168;d;582pkt 582fpkt", shape=diamond, color=yellow];
646[label="195.9.48.69;s;7pkt 7fpkt", shape=diamond, color=yellow];
1304[label="161.238.51.45;d;181pkt 181fpkt", shape=diamond, color=yellow];
1705[label="209.199.207.73;s;84pkt 84fpkt", shape=diamond, color=yellow];
2111[label="86.65.180.176;s;76pkt 76fpkt", shape=diamond, color=yellow];
2263[label="209.199.146.40;s;112pkt 112fpkt", shape=diamond, color=yellow];
3092[label="209.199.207.73;s;47pkt 47fpkt", shape=hexagon, color=black];
3198[label="212.137.144.168;d;468pkt 468fpkt", shape=hexagon, color=black];
4332[label="209.199.146.40;114pkt 114fpkt", shape=pentagon, color=darkviolet];
4569[label="195.9.48.69;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4618[label="209.199.207.73;99pkt 99fpkt", shape=pentagon, color=darkviolet];
4635[label="86.162.80.75;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4808[label="191.204.20.96;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5399[label="209.199.148.173;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6191[label="209.199.146.40;114pkt 114fpkt", shape=invtriangle, color=brown];
6382[label="209.199.207.73;100pkt 100fpkt", shape=invtriangle, color=brown];
6395[label="86.162.80.75;19pkt 19fpkt", shape=invtriangle, color=brown];
6501[label="191.204.20.96;3pkt 3fpkt", shape=invtriangle, color=brown];
7423[label="209.199.146.40;114pkt 114fpkt", shape=invhouse, color=bisque];
7539[label="209.199.207.73;100pkt 100fpkt", shape=invhouse, color=bisque];
7548[label="86.162.80.75;19pkt 19fpkt", shape=invhouse, color=bisque];
stat629[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 212.137.144.168:*}[58.9322%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8686%)&lt;BR/&gt; 443: (0.630983%)&lt;BR/&gt; 53: (0.239339%)&lt;BR/&gt; 21: (0.239339%)&lt;BR/&gt; 32786: (0.195822%)&gt;];
}
41--644[label="0.666667;2pkt 2fpkt"];
41--646[label="0.666667;2pkt 2fpkt"];
41--866[label="0.333333;1pkt 1fpkt"];
41--1362[label="1;1pkt 1fpkt"];
41--2729[label="0.333333;1pkt 1fpkt"];
41--2882[label="1;1pkt 1fpkt"];
41--3198[label="0.666667;2pkt 2fpkt"];
41--3777[label="0.333333;1pkt 1fpkt"];
41--3950[label="0.666667;2pkt 2fpkt"];
41--4569[label="0.666667;2pkt 2fpkt"];
644--646[label="0.285714;2pkt 2fpkt"];
644--808[label="0.00687285;4pkt 4fpkt"];
644--929[label="0.218543;66pkt 66fpkt"];
644--1078[label="0.00343643;2pkt 2fpkt"];
644--1234[label="0.564516;140pkt 140fpkt"];
644--1268[label="0.317797;75pkt 75fpkt"];
644--1332[label="0.027027;4pkt 4fpkt"];
644--1433[label="0.148387;23pkt 23fpkt"];
644--1705[label="0.107143;9pkt 9fpkt"];
644--1769[label="0.0185185;1pkt 1fpkt"];
644--1801[label="0.24;12pkt 12fpkt"];
644--1807[label="0.130435;6pkt 6fpkt"];
644--1909[label="0.047619;3pkt 3fpkt"];
644--1985[label="0.04;1pkt 1fpkt"];
644--1994[label="0.0277778;1pkt 1fpkt"];
644--2005[label="0.328571;23pkt 23fpkt"];
644--2016[label="0.016;2pkt 2fpkt"];
644--2111[label="1;76pkt 76fpkt"];
644--2263[label="0.1875;21pkt 21fpkt"];
644--2570[label="0.172414;5pkt 5fpkt"];
644--2595[label="0.0263158;1pkt 1fpkt"];
644--2788[label="0.00343643;2pkt 2fpkt"];
644--2870[label="0.0277778;4pkt 4fpkt"];
644--2944[label="0.00687285;4pkt 4fpkt"];
644--3092[label="0.148936;7pkt 7fpkt"];
644--3125[label="0.0238095;1pkt 1fpkt"];
644--3198[label="1;468pkt 468fpkt"];
644--3296[label="0.0192308;2pkt 2fpkt"];
644--3375[label="0.148387;23pkt 23fpkt"];
644--3713[label="0.0263158;1pkt 1fpkt"];
644--3825[label="0.00240385;1pkt 1fpkt"];
644--3869[label="0.0449438;4pkt 4fpkt"];
644--3950[label="0.127148;74pkt 74fpkt"];
644--4126[label="0.04;1pkt 1fpkt"];
644--4129[label="0.0148148;2pkt 2fpkt"];
644--4261[label="0.302419;75pkt 75fpkt"];
644--4300[label="0.00343643;2pkt 2fpkt"];
644--4332[label="0.184211;21pkt 21fpkt"];
644--4333[label="0.0264901;4pkt 4fpkt"];
644--4569[label="0.285714;2pkt 2fpkt"];
644--4618[label="0.0909091;9pkt 9fpkt"];
644--4635[label="1;19pkt 19fpkt"];
644--4784[label="0.00687285;4pkt 4fpkt"];
644--4808[label="0.666667;2pkt 2fpkt"];
644--5069[label="0.0181818;1pkt 1fpkt"];
644--5213[label="0.109091;6pkt 6fpkt"];
644--5277[label="0.185185;10pkt 10fpkt"];
644--5342[label="0.0227273;1pkt 1fpkt"];
644--5396[label="0.230769;12pkt 12fpkt"];
644--5399[label="0.222222;6pkt 6fpkt"];
644--5403[label="0.150327;23pkt 23fpkt"];
644--5575[label="0.0277778;1pkt 1fpkt"];
644--5777[label="0.181818;2pkt 2fpkt"];
644--6051[label="0.04;1pkt 1fpkt"];
644--6054[label="0.0148148;2pkt 2fpkt"];
644--6191[label="0.184211;21pkt 21fpkt"];
644--6192[label="0.0266667;4pkt 4fpkt"];
644--6382[label="0.09;9pkt 9fpkt"];
644--6395[label="1;19pkt 19fpkt"];
644--6483[label="0.00687285;4pkt 4fpkt"];
644--6501[label="0.666667;2pkt 2fpkt"];
644--6678[label="0.0181818;1pkt 1fpkt"];
644--6785[label="0.111111;6pkt 6fpkt"];
644--6873[label="0.0227273;1pkt 1fpkt"];
644--6907[label="0.230769;12pkt 12fpkt"];
644--6911[label="0.150327;23pkt 23fpkt"];
644--7335[label="0.0384615;1pkt 1fpkt"];
644--7423[label="0.184211;21pkt 21fpkt"];
644--7424[label="0.0266667;4pkt 4fpkt"];
644--7539[label="0.09;9pkt 9fpkt"];
644--7548[label="1;19pkt 19fpkt"];
644--7595[label="0.00687285;4pkt 4fpkt"];
644--7785[label="0.109091;6pkt 6fpkt"];
644--7869[label="0.150327;23pkt 23fpkt"];
646--3198[label="0.285714;2pkt 2fpkt"];
646--3950[label="0.285714;2pkt 2fpkt"];
646--4569[label="1;7pkt 7fpkt"];
1304--1330[label="0.00729927;1pkt 1fpkt"];
1304--1349[label="0.00588235;1pkt 1fpkt"];
1304--1591[label="0.0142857;1pkt 1fpkt"];
1304--1697[label="0.0294118;1pkt 1fpkt"];
1304--1705[label="0.0238095;2pkt 2fpkt"];
1304--1801[label="0.04;2pkt 2fpkt"];
1304--1909[label="0.031746;2pkt 2fpkt"];
1304--1955[label="0.02;1pkt 1fpkt"];
1304--2018[label="0.038674;7pkt 7fpkt"];
1304--2055[label="0.0110497;2pkt 2fpkt"];
1304--2166[label="0.0441989;8pkt 8fpkt"];
1304--2201[label="0.0294118;5pkt 5fpkt"];
1304--2219[label="0.0220994;4pkt 4fpkt"];
1304--2395[label="0.0166667;1pkt 1fpkt"];
1304--2457[label="0.0283688;4pkt 4fpkt"];
1304--2597[label="0.0294118;1pkt 1fpkt"];
1304--2859[label="1;181pkt 181fpkt"];
1304--3092[label="0.0425532;2pkt 2fpkt"];
1304--3228[label="0.030303;1pkt 1fpkt"];
1304--3297[label="0.0240964;4pkt 4fpkt"];
1304--3420[label="0.0291971;4pkt 4fpkt"];
1304--3836[label="1;181pkt 181fpkt"];
1304--3949[label="0.0276243;5pkt 5fpkt"];
1304--3950[label="0.0828729;15pkt 15fpkt"];
1304--4123[label="0.0277778;1pkt 1fpkt"];
1304--4179[label="0.0333333;1pkt 1fpkt"];
1304--4182[label="0.0888889;4pkt 4fpkt"];
1304--4261[label="0.0276243;5pkt 5fpkt"];
1304--4618[label="0.020202;2pkt 2fpkt"];
1304--4716[label="0.0434783;1pkt 1fpkt"];
1304--5085[label="0.0243902;1pkt 1fpkt"];
1304--5268[label="0.0434783;7pkt 7fpkt"];
1304--5277[label="0.037037;2pkt 2fpkt"];
1304--5396[label="0.0384615;2pkt 2fpkt"];
1304--5463[label="0.0243902;1pkt 1fpkt"];
1304--5558[label="0.0169492;1pkt 1fpkt"];
1304--5594[label="0.0277778;5pkt 5fpkt"];
1304--5619[label="0.0151515;1pkt 1fpkt"];
1304--5628[label="0.0119048;1pkt 1fpkt"];
1304--5699[label="0.0277778;4pkt 4fpkt"];
1304--5727[label="0.248619;45pkt 45fpkt"];
1304--5788[label="0.0277778;1pkt 1fpkt"];
1304--6089[label="0.0333333;1pkt 1fpkt"];
1304--6092[label="0.0909091;4pkt 4fpkt"];
1304--6382[label="0.02;2pkt 2fpkt"];
1304--6440[label="0.0434783;1pkt 1fpkt"];
1304--6907[label="0.0384615;2pkt 2fpkt"];
1304--6948[label="0.025;1pkt 1fpkt"];
1304--7014[label="0.0166667;1pkt 1fpkt"];
1304--7032[label="0.027933;5pkt 5fpkt"];
1304--7050[label="0.0153846;1pkt 1fpkt"];
1304--7056[label="0.0119048;1pkt 1fpkt"];
1304--7108[label="0.0275862;4pkt 4fpkt"];
1304--7126[label="0.248619;45pkt 45fpkt"];
1304--7356[label="0.0344828;1pkt 1fpkt"];
1304--7359[label="0.0888889;4pkt 4fpkt"];
1304--7539[label="0.02;2pkt 2fpkt"];
1304--7890[label="0.0243902;1pkt 1fpkt"];
1304--7946[label="0.027933;5pkt 5fpkt"];
1304--7993[label="0.0277778;4pkt 4fpkt"];
1705--2859[label="0.0238095;2pkt 2fpkt"];
1705--3092[label="1;47pkt 47fpkt"];
1705--3143[label="0.0119048;1pkt 1fpkt"];
1705--3198[label="0.0833333;7pkt 7fpkt"];
1705--3371[label="0.130952;11pkt 11fpkt"];
1705--3634[label="0.535714;45pkt 45fpkt"];
1705--3836[label="0.0238095;2pkt 2fpkt"];
1705--3950[label="0.0357143;3pkt 3fpkt"];
1705--4618[label="0.988095;83pkt 83fpkt"];
1705--6382[label="1;84pkt 84fpkt"];
1705--7539[label="1;84pkt 84fpkt"];
2111--3198[label="0.5;38pkt 38fpkt"];
2263--3198[label="0.1875;21pkt 21fpkt"];
2263--3371[label="0.696429;78pkt 78fpkt"];
2263--3950[label="0.125;14pkt 14fpkt"];
2263--4332[label="0.991071;111pkt 111fpkt"];
2263--6191[label="0.991071;111pkt 111fpkt"];
2263--7423[label="0.991071;111pkt 111fpkt"];
3092--3143[label="0.0212766;1pkt 1fpkt"];
3092--3198[label="0.148936;7pkt 7fpkt"];
3092--3371[label="0.12766;6pkt 6fpkt"];
3092--3634[label="0.340426;16pkt 16fpkt"];
3092--3836[label="0.0425532;2pkt 2fpkt"];
3092--3950[label="0.0638298;3pkt 3fpkt"];
3092--4618[label="0.978723;46pkt 46fpkt"];
3092--6382[label="1;47pkt 47fpkt"];
3092--7539[label="1;47pkt 47fpkt"];
3198--3296[label="0.0192308;2pkt 2fpkt"];
3198--3375[label="0.141935;22pkt 22fpkt"];
3198--3713[label="0.0263158;1pkt 1fpkt"];
3198--3825[label="0.00240385;1pkt 1fpkt"];
3198--3869[label="0.0449438;4pkt 4fpkt"];
3198--3950[label="0.15812;74pkt 74fpkt"];
3198--4129[label="0.0148148;2pkt 2fpkt"];
3198--4261[label="0.209677;52pkt 52fpkt"];
3198--4300[label="0.00213675;1pkt 1fpkt"];
3198--4332[label="0.184211;21pkt 21fpkt"];
3198--4333[label="0.0264901;4pkt 4fpkt"];
3198--4569[label="0.285714;2pkt 2fpkt"];
3198--4618[label="0.0707071;7pkt 7fpkt"];
3198--4635[label="1;19pkt 19fpkt"];
3198--4784[label="0.00854701;4pkt 4fpkt"];
3198--5069[label="0.0181818;1pkt 1fpkt"];
3198--5213[label="0.109091;6pkt 6fpkt"];
3198--5277[label="0.166667;9pkt 9fpkt"];
3198--5342[label="0.0227273;1pkt 1fpkt"];
3198--5396[label="0.192308;10pkt 10fpkt"];
3198--5403[label="0.143791;22pkt 22fpkt"];
3198--5575[label="0.0277778;1pkt 1fpkt"];
3198--5777[label="0.0909091;1pkt 1fpkt"];
3198--6054[label="0.0148148;2pkt 2fpkt"];
3198--6191[label="0.184211;21pkt 21fpkt"];
3198--6192[label="0.0266667;4pkt 4fpkt"];
3198--6382[label="0.07;7pkt 7fpkt"];
3198--6395[label="1;19pkt 19fpkt"];
3198--6483[label="0.00854701;4pkt 4fpkt"];
3198--6678[label="0.0181818;1pkt 1fpkt"];
3198--6785[label="0.111111;6pkt 6fpkt"];
3198--6873[label="0.0227273;1pkt 1fpkt"];
3198--6907[label="0.192308;10pkt 10fpkt"];
3198--6911[label="0.143791;22pkt 22fpkt"];
3198--7423[label="0.184211;21pkt 21fpkt"];
3198--7424[label="0.0266667;4pkt 4fpkt"];
3198--7539[label="0.07;7pkt 7fpkt"];
3198--7548[label="1;19pkt 19fpkt"];
3198--7595[label="0.00854701;4pkt 4fpkt"];
3198--7785[label="0.109091;6pkt 6fpkt"];
3198--7869[label="0.143791;22pkt 22fpkt"];
4332--6191[label="1;114pkt 114fpkt"];
4332--7423[label="1;114pkt 114fpkt"];
4618--6382[label="1;99pkt 99fpkt"];
4618--7539[label="1;99pkt 99fpkt"];
4635--6395[label="1;19pkt 19fpkt"];
4635--7548[label="1;19pkt 19fpkt"];
4808--6501[label="1;3pkt 3fpkt"];
6191--7423[label="1;114pkt 114fpkt"];
6382--7539[label="1;100pkt 100fpkt"];
6395--7548[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="212.137.144.168" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.8.143.96"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.35.53.97"/>
    </slice>
    <from sec="1034226467" usec="0"/>
    <to sec="1034226485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.106.25.98"/>
    </slice>
    <from sec="1034226627" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_633{
style=filled;
color=gray75;
1730[label="161.238.46.99;s;37pkt 37fpkt", shape=diamond, color=yellow];
2158[label="186.6.199.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
3258[label="161.238.46.99;s;37pkt 37fpkt", shape=hexagon, color=black];
4838[label="161.238.46.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6519[label="161.238.46.99;1pkt 1fpkt", shape=invtriangle, color=brown];
7617[label="161.238.46.99;1pkt 1fpkt", shape=invhouse, color=bisque];
stat633[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.46.99:*, 209.40.69.168:80}[27.027%]&lt;BR/&gt;{161.238.46.99:*, 209.52.76.234:80}[27.027%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.5897%)&lt;BR/&gt; 63104: (3.84615%)&lt;BR/&gt; 62732: (3.84615%)&lt;BR/&gt; 1755: (3.84615%)&lt;BR/&gt; 63125: (2.5641%)&gt;];
}
1730--2158[label="1;1pkt 1fpkt"];
1730--3258[label="1;37pkt 37fpkt"];
1730--3946[label="0.297297;11pkt 11fpkt"];
1730--3959[label="0.297297;11pkt 11fpkt"];
1730--3969[label="0.297297;11pkt 11fpkt"];
1730--4838[label="1;1pkt 1fpkt"];
1730--6519[label="1;1pkt 1fpkt"];
1730--7617[label="1;1pkt 1fpkt"];
2158--3258[label="1;1pkt 1fpkt"];
2158--4838[label="1;1pkt 1fpkt"];
2158--6519[label="1;1pkt 1fpkt"];
2158--7617[label="1;1pkt 1fpkt"];
3258--3946[label="0.297297;11pkt 11fpkt"];
3258--3959[label="0.297297;11pkt 11fpkt"];
3258--3969[label="0.297297;11pkt 11fpkt"];
3258--4838[label="1;1pkt 1fpkt"];
3258--6519[label="1;1pkt 1fpkt"];
3258--7617[label="1;1pkt 1fpkt"];
4838--6519[label="1;1pkt 1fpkt"];
4838--7617[label="1;1pkt 1fpkt"];
6519--7617[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.52.76.234" dst_port="80" src_ip="161.238.46.99"/>
      <filter dst_ip="209.40.69.168" dst_port="80" src_ip="161.238.46.99"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.9.57.99"/>
    </slice>
    <from sec="1034226161" usec="0"/>
    <to sec="1034226165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.19.102"/>
    </slice>
    <from sec="1034226430" usec="0"/>
    <to sec="1034226444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611545,2.14038,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_636{
style=filled;
color=gray75;
2567[label="161.238.34.102;s;98pkt 98fpkt", shape=diamond, color=yellow];
4855[label="161.238.34.102;97pkt 97fpkt", shape=pentagon, color=darkviolet];
stat636[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.34.102:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2567--4855[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter src_ip="161.238.34.102"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.4.39.102"/>
    </slice>
    <from sec="1034226488" usec="0"/>
    <to sec="1034226591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_638{
style=filled;
color=gray75;
273[label="214.131.117.102s;162pkt 162fpkt", shape=rectangle, color=red];
4857[label="214.131.117.102;196pkt 196fpkt", shape=pentagon, color=darkviolet];
6532[label="214.131.117.102;195pkt 195fpkt", shape=invtriangle, color=brown];
stat638[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.131.117.102:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
273--4857[label="1;162pkt 162fpkt"];
273--6532[label="0.993827;161pkt 161fpkt"];
4857--6532[label="1;195pkt 195fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.131.117.102" src_port="1025"/>
    </slice>
    <from sec="1034226511" usec="0"/>
    <to sec="1034226544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.108.105"/>
    </slice>
    <from sec="1034226007" usec="0"/>
    <to sec="1034226782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="174.53.134.105"/>
    </slice>
    <from sec="1034226275" usec="0"/>
    <to sec="1034226296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.176.136.105"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658063,2.10925,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_642{
style=filled;
color=gray75;
1718[label="212.24.29.106;s;3pkt 3fpkt", shape=diamond, color=yellow];
2202[label="196.180.95.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
4883[label="212.24.29.106;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6548[label="212.24.29.106;3pkt 3fpkt", shape=invtriangle, color=brown];
stat642[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.29.106:3014, 81.123.54.33:6699}[25%]&lt;BR/&gt;{212.24.29.106:3056, 43.48.171.79:6699}[25%]&lt;BR/&gt;{212.24.29.106:3045, 130.66.67.115:6699}[25%]&lt;BR/&gt;{212.24.29.106:3052, 196.180.95.164:6699}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3052: (20%)&lt;BR/&gt; 3045: (15%)&lt;BR/&gt; 3056: (10%)&lt;BR/&gt; 3014: (5%)&gt;];
}
1718--2202[label="1;1pkt 1fpkt"];
1718--4883[label="0.666667;2pkt 2fpkt"];
1718--6548[label="0.666667;2pkt 2fpkt"];
2202--4883[label="1;1pkt 1fpkt"];
2202--6548[label="1;1pkt 1fpkt"];
4883--6548[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="196.180.95.164" dst_port="6699" src_ip="212.24.29.106" src_port="3052"/>
      <filter dst_ip="130.66.67.115" dst_port="6699" src_ip="212.24.29.106" src_port="3045"/>
      <filter dst_ip="43.48.171.79" dst_port="6699" src_ip="212.24.29.106" src_port="3056"/>
      <filter dst_ip="81.123.54.33" dst_port="6699" src_ip="212.24.29.106" src_port="3014"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.217.41.107"/>
    </slice>
    <from sec="1034226016" usec="0"/>
    <to sec="1034226791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.102.150.107"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.8.13.108"/>
    </slice>
    <from sec="1034226233" usec="0"/>
    <to sec="1034226466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.174.41.108"/>
    </slice>
    <from sec="1034226005" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.130.187.110"/>
    </slice>
    <from sec="1034226048" usec="0"/>
    <to sec="1034226777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.85.5.111"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.97.36.112"/>
    </slice>
    <from sec="1034226400" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.93.141.112"/>
    </slice>
    <from sec="1034226757" usec="0"/>
    <to sec="1034226784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.132.64.113"/>
    </slice>
    <from sec="1034226070" usec="0"/>
    <to sec="1034226086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.79.114"/>
    </slice>
    <from sec="1034226521" usec="0"/>
    <to sec="1034226776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.236.151.114"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.151.116"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.134.97.118"/>
    </slice>
    <from sec="1034226012" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.150.67.119"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.18.106.119"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.1.134.119"/>
    </slice>
    <from sec="1034226005" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.81.180.119"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.113.238.119"/>
    </slice>
    <from sec="1034226527" usec="0"/>
    <to sec="1034226537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.123.56.120"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_662{
style=filled;
color=gray75;
1427[label="213.35.21.122;s;1416pkt 1416fpkt", shape=diamond, color=yellow];
3213[label="213.35.21.122;s;895pkt 895fpkt", shape=hexagon, color=black];
4999[label="213.35.21.122;1526pkt 1526fpkt", shape=pentagon, color=darkviolet];
stat662[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.35.21.122:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1427--3213[label="1;895pkt 895fpkt"];
1427--4999[label="1;1416pkt 1416fpkt"];
3213--4999[label="1;895pkt 895fpkt"];
</description>
    <slice>
      <filter src_ip="213.35.21.122"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.29.71.122"/>
    </slice>
    <from sec="1034226076" usec="0"/>
    <to sec="1034226124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.79.126"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_665{
style=filled;
color=gray75;
288[label="3.65.152.127s;166pkt 166fpkt", shape=rectangle, color=red];
5020[label="3.65.152.127;188pkt 188fpkt", shape=pentagon, color=darkviolet];
6643[label="3.65.152.127;189pkt 189fpkt", shape=invtriangle, color=brown];
7697[label="3.65.152.127;188pkt 188fpkt", shape=invhouse, color=bisque];
stat665[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.65.152.127:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
288--5020[label="0.993976;165pkt 165fpkt"];
288--6643[label="1;166pkt 166fpkt"];
288--7697[label="0.993976;165pkt 165fpkt"];
5020--6643[label="1;188pkt 188fpkt"];
5020--7697[label="1;188pkt 188fpkt"];
6643--7697[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="3.65.152.127" src_port="1025"/>
    </slice>
    <from sec="1034226506" usec="0"/>
    <to sec="1034226536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658063,2.10925,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_666{
style=filled;
color=gray75;
2060[label="161.238.10.2;d;30pkt 30fpkt", shape=diamond, color=yellow];
5023[label="212.26.4.128;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6646[label="212.26.4.128;5pkt 5fpkt", shape=invtriangle, color=brown];
stat666[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.84.171.208:80, 161.238.10.2:*}[46.875%]&lt;BR/&gt;{213.70.180.122:80, 161.238.10.2:*}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1447: (3.75%)&lt;BR/&gt; 1443: (3.75%)&lt;BR/&gt; 1430: (3.75%)&lt;BR/&gt; 2062: (2.5%)&gt;];
}
2060--3149[label="0.233333;7pkt 7fpkt"];
2060--4063[label="0.8;4pkt 4fpkt"];
2060--5023[label="0.6;3pkt 3fpkt"];
2060--6646[label="0.6;3pkt 3fpkt"];
5023--6646[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.10.2" src_ip="200.84.171.208" src_port="80"/>
      <filter dst_ip="161.238.10.2" src_ip="213.70.180.122" src_port="80"/>
    </slice>
    <from sec="1034226073" usec="0"/>
    <to sec="1034226690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.8.42.128"/>
    </slice>
    <from sec="1034226314" usec="0"/>
    <to sec="1034226334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.168.138.128"/>
    </slice>
    <from sec="1034226108" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.191.54.129"/>
    </slice>
    <from sec="1034226044" usec="0"/>
    <to sec="1034226790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.59.129"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611545,2.14038,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_671{
style=filled;
color=gray75;
2629[label="213.30.18.130;s;39pkt 39fpkt", shape=diamond, color=yellow];
5051[label="213.30.18.130;39pkt 39fpkt", shape=pentagon, color=darkviolet];
stat671[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.30.18.130:80, 167.8.204.185:*}[58.9744%]&lt;BR/&gt;{213.30.18.130:443, 167.8.204.185:*}[41.0256%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.4872%)&lt;BR/&gt; 443: (20.5128%)&lt;BR/&gt; 1110: (1.28205%)&lt;BR/&gt; 1109: (1.28205%)&lt;BR/&gt; 1108: (1.28205%)&gt;];
}
2629--5051[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.204.185" src_ip="213.30.18.130" src_port="80"/>
      <filter dst_ip="167.8.204.185" src_ip="213.30.18.130" src_port="443"/>
    </slice>
    <from sec="1034226491" usec="0"/>
    <to sec="1034226685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.191.162.130"/>
    </slice>
    <from sec="1034226206" usec="0"/>
    <to sec="1034226373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_673{
style=filled;
color=gray75;
788[label="167.8.68.131;s;753pkt 753fpkt", shape=diamond, color=yellow];
1148[label="213.23.150.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
1224[label="194.19.137.241;d;2pkt 2fpkt", shape=diamond, color=yellow];
1569[label="2.87.45.9;d;29pkt 29fpkt", shape=diamond, color=yellow];
2346[label="213.180.90.74;d;12pkt 12fpkt", shape=diamond, color=yellow];
2538[label="213.202.60.68;d;7pkt 7fpkt", shape=diamond, color=yellow];
2832[label="194.19.137.241;d;2pkt 2fpkt", shape=hexagon, color=black];
3139[label="2.87.45.9;d;10pkt 10fpkt", shape=hexagon, color=black];
3382[label="213.23.150.136;d;1pkt 1fpkt", shape=hexagon, color=black];
5063[label="167.8.68.131;790pkt 790fpkt", shape=pentagon, color=darkviolet];
stat673[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.68.131:80, *:*}[99.7472%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8755%)&lt;BR/&gt; 1119: (0.311139%)&lt;BR/&gt; 1115: (0.248911%)&lt;BR/&gt; 0: (0.248911%)&lt;BR/&gt; 1116: (0.186683%)&gt;];
}
788--1148[label="1;1pkt 1fpkt"];
788--1224[label="1;2pkt 2fpkt"];
788--1357[label="0.8;4pkt 4fpkt"];
788--1569[label="1;29pkt 29fpkt"];
788--1623[label="1;15pkt 15fpkt"];
788--2346[label="1;12pkt 12fpkt"];
788--2538[label="1;7pkt 7fpkt"];
788--2832[label="1;2pkt 2fpkt"];
788--2878[label="0.8;4pkt 4fpkt"];
788--3139[label="1;10pkt 10fpkt"];
788--3382[label="1;1pkt 1fpkt"];
788--3950[label="0.116866;88pkt 88fpkt"];
788--5063[label="0.998672;752pkt 752fpkt"];
1148--3382[label="1;1pkt 1fpkt"];
1148--3950[label="1;1pkt 1fpkt"];
1148--5063[label="1;1pkt 1fpkt"];
1224--2832[label="1;2pkt 2fpkt"];
1224--5063[label="1;2pkt 2fpkt"];
1569--3139[label="1;10pkt 10fpkt"];
1569--3950[label="0.103448;3pkt 3fpkt"];
1569--5063[label="1;29pkt 29fpkt"];
2346--5063[label="1;12pkt 12fpkt"];
2538--5063[label="1;7pkt 7fpkt"];
2832--5063[label="1;2pkt 2fpkt"];
3139--3950[label="0.3;3pkt 3fpkt"];
3139--5063[label="1;10pkt 10fpkt"];
3382--3950[label="1;1pkt 1fpkt"];
3382--5063[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="167.8.68.131" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.16.166.131"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_675{
style=filled;
color=gray75;
4939[label="195.9.56.114;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6585[label="195.9.56.114;5pkt 5fpkt", shape=invtriangle, color=brown];
7654[label="195.9.56.114;4pkt 4fpkt", shape=invhouse, color=bisque];
stat675[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.9.56.114:53, 161.238.14.20:43258}[20%]&lt;BR/&gt;{195.9.56.114:80, 161.238.248.128:3255}[20%]&lt;BR/&gt;{195.9.56.114:80, 161.238.248.128:3256}[20%]&lt;BR/&gt;{195.9.56.114:80, 161.238.248.128:3257}[20%]&lt;BR/&gt;{195.9.56.114:80, 161.238.248.128:3258}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.2857%)&lt;BR/&gt; 43258: (10.7143%)&lt;BR/&gt; 3258: (10.7143%)&lt;BR/&gt; 3257: (10.7143%)&lt;BR/&gt; 3256: (10.7143%)&gt;];
}
4939--6585[label="1;5pkt 5fpkt"];
4939--7654[label="1;4pkt 4fpkt"];
6585--7654[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.248.128" dst_port="3258" src_ip="195.9.56.114" src_port="80"/>
      <filter dst_ip="161.238.248.128" dst_port="3257" src_ip="195.9.56.114" src_port="80"/>
      <filter dst_ip="161.238.248.128" dst_port="3256" src_ip="195.9.56.114" src_port="80"/>
      <filter dst_ip="161.238.248.128" dst_port="3255" src_ip="195.9.56.114" src_port="80"/>
      <filter dst_ip="161.238.14.20" dst_port="43258" src_ip="195.9.56.114" src_port="53"/>
    </slice>
    <from sec="1034226024" usec="0"/>
    <to sec="1034226108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.60.83.132"/>
    </slice>
    <from sec="1034226306" usec="0"/>
    <to sec="1034226391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.70.142.132"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.83.86.133"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.91.99.133"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.728592,2.13253,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_680{
style=filled;
color=gray75;
289[label="208.217.172.134s;81pkt 81fpkt", shape=rectangle, color=red];
5090[label="208.217.172.134;153pkt 153fpkt", shape=pentagon, color=darkviolet];
stat680[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.217.172.134:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
289--5090[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.217.172.134" src_port="1027"/>
    </slice>
    <from sec="1034226293" usec="0"/>
    <to sec="1034226319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.112.116.135"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.97.51.136"/>
    </slice>
    <from sec="1034226571" usec="0"/>
    <to sec="1034226648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.91.98.137"/>
    </slice>
    <from sec="1034226015" usec="0"/>
    <to sec="1034226790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_684{
style=filled;
color=gray75;
1140[label="167.8.142.137;s;14pkt 14fpkt", shape=diamond, color=yellow];
1396[label="219.67.79.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
1866[label="202.238.228.126;d;1pkt 1fpkt", shape=diamond, color=yellow];
2083[label="197.182.229.178;d;1pkt 1fpkt", shape=diamond, color=yellow];
2948[label="167.8.142.137;s;9pkt 9fpkt", shape=hexagon, color=black];
3595[label="197.182.229.178;d;1pkt 1fpkt", shape=hexagon, color=black];
5112[label="167.8.142.137;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6712[label="167.8.142.137;14pkt 14fpkt", shape=invtriangle, color=brown];
7739[label="167.8.142.137;13pkt 13fpkt", shape=invhouse, color=bisque];
stat684[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.142.137:*, *:80}[35.7143%]&lt;BR/&gt;{167.8.142.137:6699, *:*}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (27.6119%)&lt;BR/&gt; 80: (14.9254%)&lt;BR/&gt; 1863: (7.46269%)&lt;BR/&gt; 2269: (5.22388%)&lt;BR/&gt; 1913: (4.47761%)&gt;];
}
1140--1396[label="1;1pkt 1fpkt"];
1140--1784[label="0.0714286;1pkt 1fpkt"];
1140--1866[label="1;1pkt 1fpkt"];
1140--2029[label="0.0714286;1pkt 1fpkt"];
1140--2083[label="1;1pkt 1fpkt"];
1140--2948[label="1;9pkt 9fpkt"];
1140--3595[label="1;1pkt 1fpkt"];
1140--5112[label="1;13pkt 13fpkt"];
1140--6712[label="1;14pkt 14fpkt"];
1140--7739[label="1;13pkt 13fpkt"];
1396--2948[label="1;1pkt 1fpkt"];
1396--5112[label="1;1pkt 1fpkt"];
1396--6712[label="1;1pkt 1fpkt"];
1396--7739[label="1;1pkt 1fpkt"];
1866--2948[label="1;1pkt 1fpkt"];
1866--6712[label="1;1pkt 1fpkt"];
2083--2948[label="1;1pkt 1fpkt"];
2083--3595[label="1;1pkt 1fpkt"];
2083--5112[label="1;1pkt 1fpkt"];
2083--6712[label="1;1pkt 1fpkt"];
2083--7739[label="1;1pkt 1fpkt"];
2948--3595[label="1;1pkt 1fpkt"];
2948--5112[label="0.888889;8pkt 8fpkt"];
2948--6712[label="1;9pkt 9fpkt"];
2948--7739[label="0.888889;8pkt 8fpkt"];
3595--5112[label="1;1pkt 1fpkt"];
3595--6712[label="1;1pkt 1fpkt"];
3595--7739[label="1;1pkt 1fpkt"];
5112--6712[label="1;13pkt 13fpkt"];
5112--7739[label="1;13pkt 13fpkt"];
6712--7739[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="167.8.142.137" src_port="6699"/>
      <filter dst_port="80" src_ip="167.8.142.137"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.14.86.139"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.164.224.139"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
1370[label="86.135.44.140;s;19pkt 19fpkt", shape=diamond, color=yellow];
3163[label="86.135.44.140;s;19pkt 19fpkt", shape=hexagon, color=black];
5136[label="86.135.44.140;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6730[label="86.135.44.140;22pkt 22fpkt", shape=invtriangle, color=brown];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.135.44.140:*, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 39500: (2.43902%)&lt;BR/&gt; 39482: (2.43902%)&lt;BR/&gt; 37825: (2.43902%)&lt;BR/&gt; 37823: (2.43902%)&gt;];
}
1370--1584[label="0.105263;2pkt 2fpkt"];
1370--1679[label="0.105263;2pkt 2fpkt"];
1370--1930[label="0.0526316;1pkt 1fpkt"];
1370--3002[label="0.105263;2pkt 2fpkt"];
1370--3163[label="1;19pkt 19fpkt"];
1370--5136[label="1;19pkt 19fpkt"];
1370--6730[label="1;19pkt 19fpkt"];
3163--5136[label="1;19pkt 19fpkt"];
3163--6730[label="1;19pkt 19fpkt"];
5136--6730[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="86.135.44.140"/>
    </slice>
    <from sec="1034226059" usec="0"/>
    <to sec="1034226641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.7.93.140"/>
    </slice>
    <from sec="1034226471" usec="0"/>
    <to sec="1034226786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_689{
style=filled;
color=gray75;
1347[label="185.191.55.150;d;364pkt 364fpkt", shape=diamond, color=yellow];
2090[label="86.110.99.189;s;5pkt 5fpkt", shape=diamond, color=yellow];
2555[label="85.34.108.199;s;9pkt 9fpkt", shape=diamond, color=yellow];
2874[label="185.191.55.150;d;364pkt 364fpkt", shape=hexagon, color=black];
3339[label="86.110.99.189;s;5pkt 5fpkt", shape=hexagon, color=black];
4352[label="86.110.73.42;55pkt 55fpkt", shape=pentagon, color=darkviolet];
4585[label="203.187.183.70;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5030[label="86.162.83.128;22pkt 22fpkt", shape=pentagon, color=darkviolet];
5142[label="86.162.91.141;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5586[label="85.222.252.197;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5647[label="85.229.191.206;63pkt 63fpkt", shape=pentagon, color=darkviolet];
6205[label="86.110.73.42;56pkt 56fpkt", shape=invtriangle, color=brown];
6357[label="203.187.183.70;8pkt 8fpkt", shape=invtriangle, color=brown];
6650[label="86.162.83.128;22pkt 22fpkt", shape=invtriangle, color=brown];
7029[label="85.222.252.197;4pkt 4fpkt", shape=invtriangle, color=brown];
7431[label="86.110.73.42;55pkt 55fpkt", shape=invhouse, color=bisque];
7703[label="86.162.83.128;22pkt 22fpkt", shape=invhouse, color=bisque];
7943[label="85.222.252.197;3pkt 3fpkt", shape=invhouse, color=bisque];
stat689[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.110.99.185:80, 185.191.55.150:*}[21.6418%]&lt;BR/&gt;{86.110.99.188:80, 185.191.55.150:*}[20.6468%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2071%)&lt;BR/&gt; 1863: (0.606343%)&lt;BR/&gt; 2895: (0.233209%)&lt;BR/&gt; 2891: (0.233209%)&lt;BR/&gt; 2890: (0.233209%)&gt;];
}
1347--1382[label="0.838384;83pkt 83fpkt"];
1347--1624[label="0.977528;87pkt 87fpkt"];
1347--2090[label="0.6;3pkt 3fpkt"];
1347--2115[label="0.5;39pkt 39fpkt"];
1347--2555[label="0.111111;1pkt 1fpkt"];
1347--2874[label="1;364pkt 364fpkt"];
1347--3017[label="0.977528;87pkt 87fpkt"];
1347--3339[label="0.6;3pkt 3fpkt"];
1347--3348[label="0.5;39pkt 39fpkt"];
1347--3950[label="0.0384615;14pkt 14fpkt"];
1347--4352[label="0.490909;27pkt 27fpkt"];
1347--4585[label="1;8pkt 8fpkt"];
1347--5030[label="1;22pkt 22fpkt"];
1347--5142[label="1;3pkt 3fpkt"];
1347--5489[label="0.977273;86pkt 86fpkt"];
1347--5586[label="1;4pkt 4fpkt"];
1347--5647[label="1;63pkt 63fpkt"];
1347--5833[label="0.5;39pkt 39fpkt"];
1347--6205[label="0.5;28pkt 28fpkt"];
1347--6357[label="1;8pkt 8fpkt"];
1347--6650[label="1;22pkt 22fpkt"];
1347--6961[label="0.977273;86pkt 86fpkt"];
1347--7029[label="1;4pkt 4fpkt"];
1347--7199[label="0.493506;38pkt 38fpkt"];
1347--7431[label="0.490909;27pkt 27fpkt"];
1347--7703[label="1;22pkt 22fpkt"];
1347--7897[label="0.977273;86pkt 86fpkt"];
1347--7943[label="1;3pkt 3fpkt"];
1347--8053[label="0.5;39pkt 39fpkt"];
2090--2874[label="0.6;3pkt 3fpkt"];
2090--3339[label="1;5pkt 5fpkt"];
2090--3950[label="0.6;3pkt 3fpkt"];
2555--2874[label="0.111111;1pkt 1fpkt"];
2555--3460[label="0.111111;1pkt 1fpkt"];
2555--3490[label="0.111111;1pkt 1fpkt"];
2874--3017[label="0.977528;87pkt 87fpkt"];
2874--3339[label="0.6;3pkt 3fpkt"];
2874--3348[label="0.5;39pkt 39fpkt"];
2874--3950[label="0.0384615;14pkt 14fpkt"];
2874--4352[label="0.490909;27pkt 27fpkt"];
2874--4585[label="1;8pkt 8fpkt"];
2874--5030[label="1;22pkt 22fpkt"];
2874--5142[label="1;3pkt 3fpkt"];
2874--5489[label="0.977273;86pkt 86fpkt"];
2874--5586[label="1;4pkt 4fpkt"];
2874--5647[label="1;63pkt 63fpkt"];
2874--5833[label="0.5;39pkt 39fpkt"];
2874--6205[label="0.5;28pkt 28fpkt"];
2874--6357[label="1;8pkt 8fpkt"];
2874--6650[label="1;22pkt 22fpkt"];
2874--6961[label="0.977273;86pkt 86fpkt"];
2874--7029[label="1;4pkt 4fpkt"];
2874--7199[label="0.493506;38pkt 38fpkt"];
2874--7431[label="0.490909;27pkt 27fpkt"];
2874--7703[label="1;22pkt 22fpkt"];
2874--7897[label="0.977273;86pkt 86fpkt"];
2874--7943[label="1;3pkt 3fpkt"];
2874--8053[label="0.5;39pkt 39fpkt"];
3339--3950[label="0.6;3pkt 3fpkt"];
4352--6205[label="1;55pkt 55fpkt"];
4352--7431[label="1;55pkt 55fpkt"];
4585--6357[label="1;8pkt 8fpkt"];
5030--6650[label="1;22pkt 22fpkt"];
5030--7703[label="1;22pkt 22fpkt"];
5586--7029[label="1;4pkt 4fpkt"];
5586--7943[label="1;3pkt 3fpkt"];
6205--7431[label="1;55pkt 55fpkt"];
6650--7703[label="1;22pkt 22fpkt"];
7029--7943[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.55.150" src_ip="86.110.99.185" src_port="80"/>
      <filter dst_ip="185.191.55.150" src_ip="86.110.99.188" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.233.135.141"/>
    </slice>
    <from sec="1034226212" usec="0"/>
    <to sec="1034226519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.41.53.142"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
296[label="218.234.128.142s;232pkt 232fpkt", shape=rectangle, color=red];
5152[label="218.234.128.142;232pkt 232fpkt", shape=pentagon, color=darkviolet];
6741[label="218.234.128.142;231pkt 231fpkt", shape=invtriangle, color=brown];
7758[label="218.234.128.142;231pkt 231fpkt", shape=invhouse, color=bisque];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.234.128.142:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
296--5152[label="1;232pkt 232fpkt"];
296--6741[label="1;231pkt 231fpkt"];
296--7758[label="1;231pkt 231fpkt"];
5152--6741[label="1;231pkt 231fpkt"];
5152--7758[label="1;231pkt 231fpkt"];
6741--7758[label="1;231pkt 231fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.234.128.142" src_port="1025"/>
    </slice>
    <from sec="1034226398" usec="0"/>
    <to sec="1034226435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_693{
style=filled;
color=gray75;
94[label="161.238.11.144s;1pkt 1fpkt", shape=rectangle, color=red];
5161[label="161.238.11.144;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6748[label="161.238.11.144;19pkt 19fpkt", shape=invtriangle, color=brown];
stat693[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.11.144:*, 84.102.245.138:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1375: (3.84615%)&lt;BR/&gt; 1303: (2.5641%)&lt;BR/&gt; 1302: (2.5641%)&lt;BR/&gt; 1301: (2.5641%)&gt;];
}
94--5161[label="1;1pkt 1fpkt"];
94--6748[label="1;1pkt 1fpkt"];
5161--6748[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="84.102.245.138" dst_port="80" src_ip="161.238.11.144"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_694{
style=filled;
color=gray75;
1075[label="210.232.142.158;d;3pkt 3fpkt", shape=diamond, color=yellow];
1518[label="161.238.59.144;s;2pkt 2fpkt", shape=diamond, color=yellow];
3536[label="161.238.59.144;s;2pkt 2fpkt", shape=hexagon, color=black];
5164[label="161.238.59.144;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6751[label="161.238.59.144;1pkt 1fpkt", shape=invtriangle, color=brown];
7764[label="161.238.59.144;1pkt 1fpkt", shape=invhouse, color=bisque];
stat694[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.59.129:8277, 210.232.142.158:8292}[25%]&lt;BR/&gt;{161.238.59.146:4508, 210.232.142.158:8292}[25%]&lt;BR/&gt;{161.238.59.144:8197, 193.128.143.76:8194}[25%]&lt;BR/&gt;{161.238.59.144:8277, 210.232.142.158:8292}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (27.2727%)&lt;BR/&gt; 8277: (22.7273%)&lt;BR/&gt; 8197: (22.7273%)&lt;BR/&gt; 8194: (22.7273%)&lt;BR/&gt; 4508: (4.54545%)&gt;];
}
1075--1518[label="0.5;1pkt 1fpkt"];
1075--3536[label="0.5;1pkt 1fpkt"];
1075--5164[label="0.5;1pkt 1fpkt"];
1518--3536[label="1;2pkt 2fpkt"];
1518--5164[label="1;2pkt 2fpkt"];
1518--6751[label="1;1pkt 1fpkt"];
1518--7764[label="1;1pkt 1fpkt"];
3536--5164[label="1;2pkt 2fpkt"];
3536--6751[label="1;1pkt 1fpkt"];
3536--7764[label="1;1pkt 1fpkt"];
5164--6751[label="1;1pkt 1fpkt"];
5164--7764[label="1;1pkt 1fpkt"];
6751--7764[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.232.142.158" dst_port="8292" src_ip="161.238.59.144" src_port="8277"/>
      <filter dst_ip="193.128.143.76" dst_port="8194" src_ip="161.238.59.144" src_port="8197"/>
      <filter dst_ip="210.232.142.158" dst_port="8292" src_ip="161.238.59.146" src_port="4508"/>
      <filter dst_ip="210.232.142.158" dst_port="8292" src_ip="161.238.59.129" src_port="8277"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.160.61.144"/>
    </slice>
    <from sec="1034226054" usec="0"/>
    <to sec="1034226077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.159.71.144"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.24.5.145"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.235.237.145"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.59.146"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,053,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.18.44.147"/>
    </slice>
    <from sec="1034226490" usec="0"/>
    <to sec="1034226793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.71.136.147"/>
    </slice>
    <from sec="1034226625" usec="0"/>
    <to sec="1034226680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.26.26.148"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.107.103.148"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.58.170.148"/>
    </slice>
    <from sec="1034226691" usec="0"/>
    <to sec="1034226787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.8.222.148"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.41.18.149"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.8.136.150"/>
    </slice>
    <from sec="1034226030" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_708{
style=filled;
color=gray75;
1401[label="43.39.90.121;d;2pkt 2fpkt", shape=diamond, color=yellow];
1402[label="212.24.5.151;s;35pkt 35fpkt", shape=diamond, color=yellow];
2384[label="189.44.113.205;d;1pkt 1fpkt", shape=diamond, color=yellow];
2900[label="43.39.90.121;d;2pkt 2fpkt", shape=hexagon, color=black];
3192[label="212.24.5.151;s;27pkt 27fpkt", shape=hexagon, color=black];
3532[label="189.44.113.205;d;1pkt 1fpkt", shape=hexagon, color=black];
5225[label="212.24.5.151;38pkt 38fpkt", shape=pentagon, color=darkviolet];
6791[label="212.24.5.151;38pkt 38fpkt", shape=invtriangle, color=brown];
7789[label="212.24.5.151;38pkt 38fpkt", shape=invhouse, color=bisque];
stat708[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.5.151:*, *:8888}[62.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (31.5934%)&lt;BR/&gt; 5555: (5.21978%)&lt;BR/&gt; 5678: (4.94505%)&lt;BR/&gt; 6699: (4.12088%)&lt;BR/&gt; 4059: (1.92308%)&gt;];
}
1401--1402[label="0.5;1pkt 1fpkt"];
1401--2900[label="1;2pkt 2fpkt"];
1401--3192[label="0.5;1pkt 1fpkt"];
1401--5225[label="0.5;1pkt 1fpkt"];
1401--6791[label="0.5;1pkt 1fpkt"];
1401--7789[label="0.5;1pkt 1fpkt"];
1402--2384[label="1;1pkt 1fpkt"];
1402--2900[label="0.5;1pkt 1fpkt"];
1402--3192[label="1;27pkt 27fpkt"];
1402--3532[label="1;1pkt 1fpkt"];
1402--5225[label="0.971429;34pkt 34fpkt"];
1402--6791[label="0.971429;34pkt 34fpkt"];
1402--7789[label="0.971429;34pkt 34fpkt"];
2384--3192[label="1;1pkt 1fpkt"];
2384--3532[label="1;1pkt 1fpkt"];
2384--5225[label="1;1pkt 1fpkt"];
2384--6791[label="1;1pkt 1fpkt"];
2384--7789[label="1;1pkt 1fpkt"];
2900--3192[label="0.5;1pkt 1fpkt"];
2900--5225[label="0.5;1pkt 1fpkt"];
2900--6791[label="0.5;1pkt 1fpkt"];
2900--7789[label="0.5;1pkt 1fpkt"];
3192--3532[label="1;1pkt 1fpkt"];
3192--5225[label="0.962963;26pkt 26fpkt"];
3192--6791[label="0.962963;26pkt 26fpkt"];
3192--7789[label="0.962963;26pkt 26fpkt"];
3532--5225[label="1;1pkt 1fpkt"];
3532--6791[label="1;1pkt 1fpkt"];
3532--7789[label="1;1pkt 1fpkt"];
5225--6791[label="1;38pkt 38fpkt"];
5225--7789[label="1;38pkt 38fpkt"];
6791--7789[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="212.24.5.151"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.728592,2.13253,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
302[label="75.241.108.151s;59pkt 59fpkt", shape=rectangle, color=red];
5227[label="75.241.108.151;154pkt 154fpkt", shape=pentagon, color=darkviolet];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.241.108.151:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
302--5227[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="75.241.108.151" src_port="1027"/>
    </slice>
    <from sec="1034226662" usec="0"/>
    <to sec="1034226687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.167.123.152"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.168.150.153"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43733,2.16033,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_712{
style=filled;
color=gray75;
304[label="195.30.230.153s;153pkt 153fpkt", shape=rectangle, color=red];
489[label="195.30.230.153s;60pkt 60fpkt", shape=ellipse, color=green];
5245[label="195.30.230.153;256pkt 256fpkt", shape=pentagon, color=darkviolet];
6804[label="195.30.230.153;256pkt 256fpkt", shape=invtriangle, color=brown];
7800[label="195.30.230.153;255pkt 255fpkt", shape=invhouse, color=bisque];
stat712[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.30.230.153:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
304--489[label="1;60pkt 60fpkt"];
304--5245[label="1;153pkt 153fpkt"];
304--6804[label="1;153pkt 153fpkt"];
304--7800[label="1;153pkt 153fpkt"];
489--5245[label="1;60pkt 60fpkt"];
489--6804[label="1;60pkt 60fpkt"];
489--7800[label="1;60pkt 60fpkt"];
5245--6804[label="1;256pkt 256fpkt"];
5245--7800[label="1;255pkt 255fpkt"];
6804--7800[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.30.230.153" src_port="1027"/>
    </slice>
    <from sec="1034226291" usec="0"/>
    <to sec="1034226330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_713{
style=filled;
color=gray75;
305[label="214.202.233.154s;169pkt 169fpkt", shape=rectangle, color=red];
5249[label="214.202.233.154;217pkt 217fpkt", shape=pentagon, color=darkviolet];
6807[label="214.202.233.154;217pkt 217fpkt", shape=invtriangle, color=brown];
7803[label="214.202.233.154;216pkt 216fpkt", shape=invhouse, color=bisque];
stat713[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.202.233.154:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
305--5249[label="1;169pkt 169fpkt"];
305--6807[label="1;169pkt 169fpkt"];
305--7803[label="0.994083;168pkt 168fpkt"];
5249--6807[label="1;217pkt 217fpkt"];
5249--7803[label="1;216pkt 216fpkt"];
6807--7803[label="1;216pkt 216fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.202.233.154" src_port="1028"/>
    </slice>
    <from sec="1034226370" usec="0"/>
    <to sec="1034226406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.98.141.156"/>
    </slice>
    <from sec="1034226006" usec="0"/>
    <to sec="1034226790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.34.64.157"/>
    </slice>
    <from sec="1034226290" usec="0"/>
    <to sec="1034226333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="186.18.109.157"/>
    </slice>
    <from sec="1034226006" usec="0"/>
    <to sec="1034226790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43733,2.16033,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_717{
style=filled;
color=gray75;
308[label="209.64.140.157s;196pkt 196fpkt", shape=rectangle, color=red];
491[label="209.64.140.157s;58pkt 58fpkt", shape=ellipse, color=green];
5267[label="209.64.140.157;223pkt 223fpkt", shape=pentagon, color=darkviolet];
6821[label="209.64.140.157;224pkt 224fpkt", shape=invtriangle, color=brown];
7814[label="209.64.140.157;223pkt 223fpkt", shape=invhouse, color=bisque];
stat717[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.64.140.157:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
308--491[label="1;58pkt 58fpkt"];
308--5267[label="0.994898;195pkt 195fpkt"];
308--6821[label="1;196pkt 196fpkt"];
308--7814[label="0.994898;195pkt 195fpkt"];
491--5267[label="0.982759;57pkt 57fpkt"];
491--6821[label="1;58pkt 58fpkt"];
491--7814[label="0.982759;57pkt 57fpkt"];
5267--6821[label="1;223pkt 223fpkt"];
5267--7814[label="1;223pkt 223fpkt"];
6821--7814[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.64.140.157" src_port="1026"/>
    </slice>
    <from sec="1034226367" usec="0"/>
    <to sec="1034226402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.136.74.159"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.117.130.160"/>
    </slice>
    <from sec="1034226148" usec="0"/>
    <to sec="1034226691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.78.162"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.202.7.163"/>
    </slice>
    <from sec="1034226090" usec="0"/>
    <to sec="1034226793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.8.14.163"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_723{
style=filled;
color=gray75;
793[label="84.102.234.161;d;6pkt 6fpkt", shape=diamond, color=yellow];
873[label="161.238.61.239;s;72pkt 72fpkt", shape=diamond, color=yellow];
971[label="161.238.42.163;s;21pkt 21fpkt", shape=diamond, color=yellow];
996[label="86.139.111.108;d;49pkt 49fpkt", shape=diamond, color=yellow];
1753[label="167.8.180.5;s;142pkt 142fpkt", shape=diamond, color=yellow];
3141[label="161.238.42.163;s;18pkt 18fpkt", shape=hexagon, color=black];
3842[label="161.238.42.163;s;18pkt 18fpkt", shape=polygon, color=gold];
4032[label="167.8.180.5;149pkt 149fpkt", shape=pentagon, color=darkviolet];
4080[label="161.238.78.10;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4735[label="161.238.82.85;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5314[label="161.238.42.163;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5571[label="161.238.244.195;39pkt 39fpkt", shape=pentagon, color=darkviolet];
5626[label="161.238.1.203;30pkt 30fpkt", shape=pentagon, color=darkviolet];
5980[label="167.8.180.5;149pkt 149fpkt", shape=invtriangle, color=brown];
6854[label="161.238.42.163;20pkt 20fpkt", shape=invtriangle, color=brown];
7020[label="161.238.244.195;39pkt 39fpkt", shape=invtriangle, color=brown];
7055[label="161.238.1.203;29pkt 29fpkt", shape=invtriangle, color=brown];
7834[label="161.238.42.163;20pkt 20fpkt", shape=invhouse, color=bisque];
7938[label="161.238.244.195;39pkt 39fpkt", shape=invhouse, color=bisque];
7961[label="161.238.1.203;29pkt 29fpkt", shape=invhouse, color=bisque];
stat723[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.180.5:80, *:*}[40.6593%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.0273%)&lt;BR/&gt; 25: (4.59016%)&lt;BR/&gt; 59722: (0.382514%)&lt;BR/&gt; 59955: (0.327869%)&lt;BR/&gt; 59954: (0.327869%)&gt;];
}
793--971[label="0.166667;1pkt 1fpkt"];
793--1302[label="0.333333;2pkt 2fpkt"];
793--1755[label="0.166667;1pkt 1fpkt"];
793--3141[label="0.166667;1pkt 1fpkt"];
793--3408[label="0.166667;1pkt 1fpkt"];
793--3842[label="0.166667;1pkt 1fpkt"];
793--3880[label="0.166667;1pkt 1fpkt"];
793--5314[label="0.166667;1pkt 1fpkt"];
793--6854[label="0.166667;1pkt 1fpkt"];
793--7834[label="0.166667;1pkt 1fpkt"];
873--996[label="0.367347;18pkt 18fpkt"];
873--2879[label="0.367347;18pkt 18fpkt"];
873--3950[label="0.0138889;1pkt 1fpkt"];
971--996[label="0.047619;1pkt 1fpkt"];
971--2879[label="0.047619;1pkt 1fpkt"];
971--3141[label="1;18pkt 18fpkt"];
971--3842[label="1;18pkt 18fpkt"];
971--5314[label="1;20pkt 20fpkt"];
971--6854[label="1;20pkt 20fpkt"];
971--7834[label="1;20pkt 20fpkt"];
996--1493[label="0.0204082;1pkt 1fpkt"];
996--1734[label="0.0204082;1pkt 1fpkt"];
996--1753[label="0.0408163;2pkt 2fpkt"];
996--2879[label="1;49pkt 49fpkt"];
996--3141[label="0.0555556;1pkt 1fpkt"];
996--3208[label="0.0204082;1pkt 1fpkt"];
996--3672[label="0.0204082;1pkt 1fpkt"];
996--3842[label="0.0555556;1pkt 1fpkt"];
996--4032[label="0.0408163;2pkt 2fpkt"];
996--4080[label="0.1;2pkt 2fpkt"];
996--4735[label="0.166667;1pkt 1fpkt"];
996--5384[label="0.0204082;1pkt 1fpkt"];
996--5571[label="0.025641;1pkt 1fpkt"];
996--5626[label="0.0666667;2pkt 2fpkt"];
996--5980[label="0.0408163;2pkt 2fpkt"];
996--6898[label="0.0204082;1pkt 1fpkt"];
996--7020[label="0.025641;1pkt 1fpkt"];
996--7055[label="0.0344828;1pkt 1fpkt"];
996--7605[label="0.0204082;1pkt 1fpkt"];
996--7938[label="0.025641;1pkt 1fpkt"];
996--7961[label="0.0344828;1pkt 1fpkt"];
1753--2879[label="0.0408163;2pkt 2fpkt"];
1753--3950[label="0.0633803;9pkt 9fpkt"];
1753--4032[label="1;142pkt 142fpkt"];
1753--5980[label="1;142pkt 142fpkt"];
3141--3842[label="1;18pkt 18fpkt"];
3141--5314[label="0.944444;17pkt 17fpkt"];
3141--6854[label="0.944444;17pkt 17fpkt"];
3141--7834[label="0.944444;17pkt 17fpkt"];
3842--5314[label="0.944444;17pkt 17fpkt"];
3842--6854[label="0.944444;17pkt 17fpkt"];
3842--7834[label="0.944444;17pkt 17fpkt"];
4032--5980[label="1;149pkt 149fpkt"];
5314--6854[label="1;20pkt 20fpkt"];
5314--7834[label="1;20pkt 20fpkt"];
5571--7020[label="1;39pkt 39fpkt"];
5571--7938[label="1;39pkt 39fpkt"];
5626--7055[label="1;29pkt 29fpkt"];
5626--7961[label="1;29pkt 29fpkt"];
6854--7834[label="1;20pkt 20fpkt"];
7020--7938[label="1;39pkt 39fpkt"];
7055--7961[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter src_ip="167.8.180.5" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.48.117.163"/>
    </slice>
    <from sec="1034226566" usec="0"/>
    <to sec="1034226722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.90.136.167"/>
    </slice>
    <from sec="1034226009" usec="0"/>
    <to sec="1034226776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.208.170"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.34.118.171"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.89.251.171"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.233.84.173"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.150.161.173"/>
    </slice>
    <from sec="1034226516" usec="0"/>
    <to sec="1034226760" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.232.24.175"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.135.44.176"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_733{
style=filled;
color=gray75;
1262[label="167.20.101.176;s;405pkt 405fpkt", shape=diamond, color=yellow];
3679[label="167.20.101.176;s;405pkt 405fpkt", shape=hexagon, color=black];
5415[label="167.20.101.176;421pkt 421fpkt", shape=pentagon, color=darkviolet];
6921[label="167.20.101.176;420pkt 420fpkt", shape=invtriangle, color=brown];
7876[label="167.20.101.176;421pkt 421fpkt", shape=invhouse, color=bisque];
stat733[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.20.101.176:25, *:*}[63.658%]&lt;BR/&gt;{167.20.101.176:*, *:113}[25.1781%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.3311%)&lt;BR/&gt; 113: (12.5483%)&lt;BR/&gt; 3960: (0.241313%)&lt;BR/&gt; 2071: (0.241313%)&lt;BR/&gt; 2058: (0.241313%)&gt;];
}
1262--3679[label="1;405pkt 405fpkt"];
1262--5415[label="1;405pkt 405fpkt"];
1262--6921[label="0.997531;404pkt 404fpkt"];
1262--7876[label="1;405pkt 405fpkt"];
3679--5415[label="1;405pkt 405fpkt"];
3679--6921[label="0.997531;404pkt 404fpkt"];
3679--7876[label="1;405pkt 405fpkt"];
5415--6921[label="1;420pkt 420fpkt"];
5415--7876[label="1;421pkt 421fpkt"];
6921--7876[label="1;420pkt 420fpkt"];
</description>
    <slice>
      <filter src_ip="167.20.101.176" src_port="25"/>
      <filter dst_port="113" src_ip="167.20.101.176"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658063,2.10925,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_734{
style=filled;
color=gray75;
1107[label="179.17.27.178;s;436pkt 436fpkt", shape=diamond, color=yellow];
1514[label="196.224.102.252;d;1pkt 1fpkt", shape=diamond, color=yellow];
5427[label="179.17.27.178;460pkt 460fpkt", shape=pentagon, color=darkviolet];
6928[label="179.17.27.178;460pkt 460fpkt", shape=invtriangle, color=brown];
stat734[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.17.27.178:2599, *:*}[98.4816%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2599: (49.2262%)&lt;BR/&gt; 1214: (5.9322%)&lt;BR/&gt; 3656: (0.55269%)&lt;BR/&gt; 80: (0.331614%)&lt;BR/&gt; 4425: (0.221076%)&gt;];
}
1107--1514[label="1;1pkt 1fpkt"];
1107--3950[label="0.00229358;1pkt 1fpkt"];
1107--5427[label="0.997706;435pkt 435fpkt"];
1107--6928[label="0.997706;435pkt 435fpkt"];
1514--5427[label="1;1pkt 1fpkt"];
1514--6928[label="1;1pkt 1fpkt"];
5427--6928[label="1;460pkt 460fpkt"];
</description>
    <slice>
      <filter src_ip="179.17.27.178" src_port="2599"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.200.228.178"/>
    </slice>
    <from sec="1034226779" usec="0"/>
    <to sec="1034226789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.182.229.178"/>
    </slice>
    <from sec="1034226222" usec="0"/>
    <to sec="1034226479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.191.16.179"/>
    </slice>
    <from sec="1034226023" usec="0"/>
    <to sec="1034226787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.93.32.179"/>
    </slice>
    <from sec="1034226019" usec="0"/>
    <to sec="1034226791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.26.37.180"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.18.68.180"/>
    </slice>
    <from sec="1034226063" usec="0"/>
    <to sec="1034226789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.80.180"/>
    </slice>
    <from sec="1034226005" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_742{
style=filled;
color=gray75;
1739[label="213.91.99.180;s;235pkt 235fpkt", shape=diamond, color=yellow];
3106[label="213.91.99.180;s;160pkt 160fpkt", shape=hexagon, color=black];
5451[label="213.91.99.180;235pkt 235fpkt", shape=pentagon, color=darkviolet];
stat742[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.99.180:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1739--3106[label="1;160pkt 160fpkt"];
1739--5451[label="1;235pkt 235fpkt"];
3106--5451[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter src_ip="213.91.99.180"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.233.106.180"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.168.161.180"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.173.18.181"/>
    </slice>
    <from sec="1034226023" usec="0"/>
    <to sec="1034226771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.136.59.181"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.104.181"/>
    </slice>
    <from sec="1034226008" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.728592,2.13253,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_748{
style=filled;
color=gray75;
328[label="214.177.154.181s;195pkt 195fpkt", shape=rectangle, color=red];
5467[label="214.177.154.181;205pkt 205fpkt", shape=pentagon, color=darkviolet];
stat748[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.177.154.181:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
328--5467[label="1;195pkt 195fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.177.154.181" src_port="1028"/>
    </slice>
    <from sec="1034226608" usec="0"/>
    <to sec="1034226642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611545,2.14038,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_749{
style=filled;
color=gray75;
1835[label="212.76.160.181;s;2pkt 2fpkt", shape=diamond, color=yellow];
5468[label="212.76.160.181;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat749[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.76.160.181:137, 167.8.138.96:137}[50%]&lt;BR/&gt;{212.76.160.181:1525, 167.8.138.96:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 6699: (25%)&lt;BR/&gt; 1525: (25%)&gt;];
}
1835--3020[label="1;2pkt 2fpkt"];
1835--3323[label="1;2pkt 2fpkt"];
1835--5468[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.138.96" dst_port="6699" src_ip="212.76.160.181" src_port="1525"/>
      <filter dst_ip="167.8.138.96" dst_port="137" src_ip="212.76.160.181" src_port="137"/>
    </slice>
    <from sec="1034226097" usec="0"/>
    <to sec="1034226375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.208.181"/>
    </slice>
    <from sec="1034226011" usec="0"/>
    <to sec="1034226781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.18.68.183"/>
    </slice>
    <from sec="1034226022" usec="0"/>
    <to sec="1034226755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.101.131.186"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_753{
style=filled;
color=gray75;
332[label="200.210.209.186s;60pkt 60fpkt", shape=rectangle, color=red];
5497[label="200.210.209.186;148pkt 148fpkt", shape=pentagon, color=darkviolet];
6968[label="200.210.209.186;148pkt 148fpkt", shape=invtriangle, color=brown];
stat753[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.210.209.186:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
332--5497[label="1;60pkt 60fpkt"];
332--6968[label="1;60pkt 60fpkt"];
5497--6968[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.210.209.186" src_port="1025"/>
    </slice>
    <from sec="1034226547" usec="0"/>
    <to sec="1034226570" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="10.0.13.187"/>
    </slice>
    <from sec="1034226011" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.133.44.188"/>
    </slice>
    <from sec="1034226063" usec="0"/>
    <to sec="1034226460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.148.85.188"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,999,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_757{
style=filled;
color=gray75;
405[label="212.24.24.200d;1pkt 1fpkt", shape=rectangle, color=red];
2350[label="136.230.118.188;s;28pkt 28fpkt", shape=diamond, color=yellow];
3488[label="136.230.118.188;s;28pkt 28fpkt", shape=hexagon, color=black];
3898[label="136.230.118.188;s;17pkt 17fpkt", shape=polygon, color=gold];
5510[label="136.230.118.188;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6977[label="136.230.118.188;31pkt 31fpkt", shape=invtriangle, color=brown];
7905[label="136.230.118.188;31pkt 31fpkt", shape=invhouse, color=bisque];
stat757[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.118.188:*, *:25}[45.1613%]&lt;BR/&gt;{136.230.118.188:80, *:*}[38.7097%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25.3012%)&lt;BR/&gt; 80: (17.4699%)&lt;BR/&gt; 5190: (3.61446%)&lt;BR/&gt; 1138: (2.10843%)&lt;BR/&gt; 37017: (1.80723%)&gt;];
}
405--2350[label="1;1pkt 1fpkt"];
405--3488[label="1;1pkt 1fpkt"];
405--3898[label="1;1pkt 1fpkt"];
405--5510[label="1;1pkt 1fpkt"];
405--6977[label="1;1pkt 1fpkt"];
405--7905[label="1;1pkt 1fpkt"];
2350--3488[label="1;28pkt 28fpkt"];
2350--3898[label="1;17pkt 17fpkt"];
2350--5510[label="0.964286;27pkt 27fpkt"];
2350--6977[label="1;28pkt 28fpkt"];
2350--7905[label="1;28pkt 28fpkt"];
3488--3898[label="1;17pkt 17fpkt"];
3488--5510[label="0.964286;27pkt 27fpkt"];
3488--6977[label="1;28pkt 28fpkt"];
3488--7905[label="1;28pkt 28fpkt"];
3898--5510[label="0.941176;16pkt 16fpkt"];
3898--6977[label="1;17pkt 17fpkt"];
3898--7905[label="1;17pkt 17fpkt"];
5510--6977[label="1;30pkt 30fpkt"];
5510--7905[label="1;30pkt 30fpkt"];
6977--7905[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter src_ip="136.230.118.188" src_port="80"/>
      <filter dst_port="25" src_ip="136.230.118.188"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.79.189"/>
    </slice>
    <from sec="1034226045" usec="0"/>
    <to sec="1034226782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_759{
style=filled;
color=gray75;
334[label="1.147.85.190s;43pkt 43fpkt", shape=rectangle, color=red];
5523[label="1.147.85.190;131pkt 131fpkt", shape=pentagon, color=darkviolet];
6987[label="1.147.85.190;131pkt 131fpkt", shape=invtriangle, color=brown];
stat759[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.147.85.190:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
334--5523[label="1;43pkt 43fpkt"];
334--6987[label="1;43pkt 43fpkt"];
5523--6987[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.147.85.190" src_port="1026"/>
    </slice>
    <from sec="1034226654" usec="0"/>
    <to sec="1034226675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_760{
style=filled;
color=gray75;
335[label="213.250.110.190s;96pkt 96fpkt", shape=rectangle, color=red];
5524[label="213.250.110.190;186pkt 186fpkt", shape=pentagon, color=darkviolet];
6988[label="213.250.110.190;187pkt 187fpkt", shape=invtriangle, color=brown];
7913[label="213.250.110.190;186pkt 186fpkt", shape=invhouse, color=bisque];
stat760[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.250.110.190:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
335--5524[label="1;96pkt 96fpkt"];
335--6988[label="1;96pkt 96fpkt"];
335--7913[label="1;96pkt 96fpkt"];
5524--6988[label="1;186pkt 186fpkt"];
5524--7913[label="1;186pkt 186fpkt"];
6988--7913[label="1;186pkt 186fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.250.110.190" src_port="1025"/>
    </slice>
    <from sec="1034226286" usec="0"/>
    <to sec="1034226318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.65.167.190"/>
    </slice>
    <from sec="1034226764" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="184.1.120.191"/>
    </slice>
    <from sec="1034226055" usec="0"/>
    <to sec="1034226091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.227.142.191"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.8.160.191"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.94.172.191"/>
    </slice>
    <from sec="1034226177" usec="0"/>
    <to sec="1034226789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.27.206.194"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.93.165.195"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.177.171.197"/>
    </slice>
    <from sec="1034226523" usec="0"/>
    <to sec="1034226730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.138.228.197"/>
    </slice>
    <from sec="1034226156" usec="0"/>
    <to sec="1034226323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="191.204.105.198"/>
    </slice>
    <from sec="1034226047" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.98.168.198"/>
    </slice>
    <from sec="1034226587" usec="0"/>
    <to sec="1034226621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.94.35.199"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.19.180.199"/>
    </slice>
    <from sec="1034226013" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_774{
style=filled;
color=gray75;
347[label="43.249.82.200s;132pkt 132fpkt", shape=rectangle, color=red];
5600[label="43.249.82.200;230pkt 230fpkt", shape=pentagon, color=darkviolet];
7035[label="43.249.82.200;231pkt 231fpkt", shape=invtriangle, color=brown];
stat774[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.249.82.200:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
347--5600[label="1;132pkt 132fpkt"];
347--7035[label="1;132pkt 132fpkt"];
5600--7035[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="43.249.82.200" src_port="1030"/>
    </slice>
    <from sec="1034226560" usec="0"/>
    <to sec="1034226595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.104.200"/>
    </slice>
    <from sec="1034226319" usec="0"/>
    <to sec="1034226779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.5.126.201"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.72.25.202"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43733,2.16033,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_778{
style=filled;
color=gray75;
349[label="1.118.42.202s;101pkt 101fpkt", shape=rectangle, color=red];
508[label="1.118.42.202s;60pkt 60fpkt", shape=ellipse, color=green];
5618[label="1.118.42.202;108pkt 108fpkt", shape=pentagon, color=darkviolet];
7049[label="1.118.42.202;109pkt 109fpkt", shape=invtriangle, color=brown];
7958[label="1.118.42.202;108pkt 108fpkt", shape=invhouse, color=bisque];
stat778[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.118.42.202:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
349--508[label="1;60pkt 60fpkt"];
349--5618[label="0.990099;100pkt 100fpkt"];
349--7049[label="1;101pkt 101fpkt"];
349--7958[label="0.990099;100pkt 100fpkt"];
508--5618[label="0.983333;59pkt 59fpkt"];
508--7049[label="1;60pkt 60fpkt"];
508--7958[label="0.983333;59pkt 59fpkt"];
5618--7049[label="1;108pkt 108fpkt"];
5618--7958[label="1;108pkt 108fpkt"];
7049--7958[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.118.42.202" src_port="1026"/>
    </slice>
    <from sec="1034226542" usec="0"/>
    <to sec="1034226560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.148.78.205"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_781{
style=filled;
color=gray75;
354[label="85.145.50.206s;51pkt 51fpkt", shape=rectangle, color=red];
5643[label="85.145.50.206;217pkt 217fpkt", shape=pentagon, color=darkviolet];
7066[label="85.145.50.206;216pkt 216fpkt", shape=invtriangle, color=brown];
stat781[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.145.50.206:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
354--5643[label="1;51pkt 51fpkt"];
354--7066[label="1;51pkt 51fpkt"];
5643--7066[label="1;216pkt 216fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.145.50.206" src_port="1025"/>
    </slice>
    <from sec="1034226544" usec="0"/>
    <to sec="1034226578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.17.142.207"/>
    </slice>
    <from sec="1034226084" usec="0"/>
    <to sec="1034226163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.93.54.208"/>
    </slice>
    <from sec="1034226573" usec="0"/>
    <to sec="1034226648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.206.152.208"/>
    </slice>
    <from sec="1034226769" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.92.220.208"/>
    </slice>
    <from sec="1034226006" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.128.189.209"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.73.17.210"/>
    </slice>
    <from sec="1034226010" usec="0"/>
    <to sec="1034226789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.21.162.210"/>
    </slice>
    <from sec="1034226007" usec="0"/>
    <to sec="1034226781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.214.210"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.91.102.211"/>
    </slice>
    <from sec="1034226346" usec="0"/>
    <to sec="1034226686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.199.165.213"/>
    </slice>
    <from sec="1034226310" usec="0"/>
    <to sec="1034226766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_792{
style=filled;
color=gray75;
5689[label="212.18.107.214;85pkt 85fpkt", shape=pentagon, color=darkviolet];
stat792[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.18.107.214:0, *:0}[98.8235%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.8235%)&lt;BR/&gt; 4417: (0.588235%)&lt;BR/&gt; 80: (0.588235%)&gt;];
}
</description>
    <slice>
      <filter src_ip="212.18.107.214"/>
    </slice>
    <from sec="1034226013" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.164.145.214"/>
    </slice>
    <from sec="1034226551" usec="0"/>
    <to sec="1034226776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.18.97.217"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.13.62.218"/>
    </slice>
    <from sec="1034226007" usec="0"/>
    <to sec="1034226778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.728592,2.13253,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_796{
style=filled;
color=gray75;
360[label="203.133.68.218s;184pkt 184fpkt", shape=rectangle, color=red];
5713[label="203.133.68.218;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat796[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.133.68.218:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
360--5713[label="1;184pkt 184fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.133.68.218" src_port="1025"/>
    </slice>
    <from sec="1034226493" usec="0"/>
    <to sec="1034226532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_797{
style=filled;
color=gray75;
362[label="195.148.168.219s;256pkt 256fpkt", shape=rectangle, color=red];
5721[label="195.148.168.219;255pkt 255fpkt", shape=pentagon, color=darkviolet];
7122[label="195.148.168.219;256pkt 256fpkt", shape=invtriangle, color=brown];
stat797[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.148.168.219:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
362--5721[label="1;255pkt 255fpkt"];
362--7122[label="1;256pkt 256fpkt"];
5721--7122[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.148.168.219" src_port="1026"/>
    </slice>
    <from sec="1034226599" usec="0"/>
    <to sec="1034226613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.8.141.220"/>
    </slice>
    <from sec="1034226516" usec="0"/>
    <to sec="1034226703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.7.37.221"/>
    </slice>
    <from sec="1034226325" usec="0"/>
    <to sec="1034226495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.245.70.221"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_801{
style=filled;
color=gray75;
2296[label="133.4.157.222;s;6pkt 6fpkt", shape=diamond, color=yellow];
5734[label="133.4.157.222;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7132[label="133.4.157.222;5pkt 5fpkt", shape=invtriangle, color=brown];
8003[label="133.4.157.222;6pkt 6fpkt", shape=invhouse, color=bisque];
stat801[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.4.157.222:80, 212.18.73.85:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 13734: (9.09091%)&lt;BR/&gt; 13700: (9.09091%)&lt;BR/&gt; 13475: (9.09091%)&lt;BR/&gt; 13416: (9.09091%)&gt;];
}
2296--5734[label="1;5pkt 5fpkt"];
2296--7132[label="1;5pkt 5fpkt"];
2296--8003[label="1;6pkt 6fpkt"];
5734--7132[label="1;5pkt 5fpkt"];
5734--8003[label="1;5pkt 5fpkt"];
7132--8003[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.73.85" src_ip="133.4.157.222" src_port="80"/>
    </slice>
    <from sec="1034226324" usec="0"/>
    <to sec="1034226492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.728592,2.13253,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_802{
style=filled;
color=gray75;
363[label="202.37.210.222s;53pkt 53fpkt", shape=rectangle, color=red];
5735[label="202.37.210.222;116pkt 116fpkt", shape=pentagon, color=darkviolet];
stat802[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.37.210.222:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
363--5735[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.37.210.222" src_port="1027"/>
    </slice>
    <from sec="1034226743" usec="0"/>
    <to sec="1034226761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.238.110.223"/>
    </slice>
    <from sec="1034226011" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.98.201.224"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43733,2.16033,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_805{
style=filled;
color=gray75;
366[label="1.163.23.225s;175pkt 175fpkt", shape=rectangle, color=red];
515[label="1.163.23.225s;59pkt 59fpkt", shape=ellipse, color=green];
5749[label="1.163.23.225;224pkt 224fpkt", shape=pentagon, color=darkviolet];
7140[label="1.163.23.225;224pkt 224fpkt", shape=invtriangle, color=brown];
8008[label="1.163.23.225;224pkt 224fpkt", shape=invhouse, color=bisque];
stat805[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.163.23.225:10233, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10233: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
366--515[label="1;59pkt 59fpkt"];
366--5749[label="1;175pkt 175fpkt"];
366--7140[label="1;175pkt 175fpkt"];
366--8008[label="1;175pkt 175fpkt"];
515--5749[label="1;59pkt 59fpkt"];
515--7140[label="1;59pkt 59fpkt"];
515--8008[label="1;59pkt 59fpkt"];
5749--7140[label="1;224pkt 224fpkt"];
5749--8008[label="1;224pkt 224fpkt"];
7140--8008[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.163.23.225" src_port="10233"/>
    </slice>
    <from sec="1034226297" usec="0"/>
    <to sec="1034226333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.203.33.225"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.117.130.226"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.164.146.226"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.16.151.228"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.204.36.229"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.13.77.230"/>
    </slice>
    <from sec="1034226006" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.62.97.230"/>
    </slice>
    <from sec="1034226012" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.208.230"/>
    </slice>
    <from sec="1034226012" usec="0"/>
    <to sec="1034226782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.195.80.232"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.44.187.232"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.104.233"/>
    </slice>
    <from sec="1034226039" usec="0"/>
    <to sec="1034226591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.175.203.233"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.134.216.235"/>
    </slice>
    <from sec="1034226564" usec="0"/>
    <to sec="1034226567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.76.236"/>
    </slice>
    <from sec="1034226139" usec="0"/>
    <to sec="1034226793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.37.148.237"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.18.120.238"/>
    </slice>
    <from sec="1034226479" usec="0"/>
    <to sec="1034226561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.191.39.240"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.238.24.241"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.8.42.241"/>
    </slice>
    <from sec="1034226168" usec="0"/>
    <to sec="1034226720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.34.108.241"/>
    </slice>
    <from sec="1034226046" usec="0"/>
    <to sec="1034226713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.236.170.242"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.18.97.243"/>
    </slice>
    <from sec="1034226526" usec="0"/>
    <to sec="1034226544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.611545,2.14038,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_828{
style=filled;
color=gray75;
833[label="86.28.3.244;s;1pkt 1fpkt", shape=diamond, color=yellow];
5876[label="86.28.3.244;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat828[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.28.3.244:1770, 161.238.139.57:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1770: (50%)&gt;];
}
833--5876[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.139.57" dst_port="6699" src_ip="86.28.3.244" src_port="1770"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.96.53.245"/>
    </slice>
    <from sec="1034226627" usec="0"/>
    <to sec="1034226727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.230.76.245"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.2.155.245"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.145.202.246"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.210.224.247"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.96361,2.07354,999,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_834{
style=filled;
color=gray75;
379[label="218.181.2.248s;1pkt 1fpkt", shape=rectangle, color=red];
2012[label="136.230.111.45;d;77pkt 77fpkt", shape=diamond, color=yellow];
5404[label="86.135.44.174;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5588[label="212.85.74.198;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5909[label="212.86.10.248;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6912[label="86.135.44.174;14pkt 14fpkt", shape=invtriangle, color=brown];
7249[label="212.86.10.248;11pkt 11fpkt", shape=invtriangle, color=brown];
8082[label="212.86.10.248;11pkt 11fpkt", shape=invhouse, color=bisque];
stat834[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 136.230.111.45:*}[69.1489%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.6216%)&lt;BR/&gt; 113: (3.37838%)&lt;BR/&gt; 4064: (1.68919%)&lt;BR/&gt; 4413: (1.35135%)&lt;BR/&gt; 4328: (1.35135%)&gt;];
}
379--2012[label="1;1pkt 1fpkt"];
379--5909[label="1;1pkt 1fpkt"];
379--7249[label="1;1pkt 1fpkt"];
379--8082[label="1;1pkt 1fpkt"];
2012--4860[label="0.3;3pkt 3fpkt"];
2012--5360[label="0.125;1pkt 1fpkt"];
2012--5404[label="0.0714286;1pkt 1fpkt"];
2012--5588[label="1;9pkt 9fpkt"];
2012--5909[label="0.636364;7pkt 7fpkt"];
2012--6534[label="0.222222;2pkt 2fpkt"];
2012--6883[label="0.111111;1pkt 1fpkt"];
2012--6912[label="0.0714286;1pkt 1fpkt"];
2012--7249[label="0.636364;7pkt 7fpkt"];
2012--8082[label="0.636364;7pkt 7fpkt"];
5404--6912[label="1;14pkt 14fpkt"];
5909--7249[label="1;11pkt 11fpkt"];
5909--8082[label="1;11pkt 11fpkt"];
7249--8082[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="136.230.111.45" src_port="25"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.728592,2.13253,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_835{
style=filled;
color=gray75;
380[label="195.174.40.248s;152pkt 152fpkt", shape=rectangle, color=red];
5911[label="195.174.40.248;221pkt 221fpkt", shape=pentagon, color=darkviolet];
stat835[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.174.40.248:1044, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1044: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
380--5911[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.174.40.248" src_port="1044"/>
    </slice>
    <from sec="1034226679" usec="0"/>
    <to sec="1034226713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.728592,2.13253,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_836{
style=filled;
color=gray75;
382[label="85.190.98.248s;445pkt 445fpkt", shape=rectangle, color=red];
5912[label="85.190.98.248;488pkt 488fpkt", shape=pentagon, color=darkviolet];
stat836[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.190.98.248:1646, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1646: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
382--5912[label="1;445pkt 445fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.190.98.248" src_port="1646"/>
    </slice>
    <from sec="1034226570" usec="0"/>
    <to sec="1034226654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.468757,2.15401,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.238.156.248"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.238.83.0"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_839{
style=filled;
color=gray75;
3983[label="194.235.7.1;172pkt 172fpkt", shape=pentagon, color=darkviolet];
5946[label="194.235.7.1;173pkt 173fpkt", shape=invtriangle, color=brown];
stat839[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.235.7.1:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3983--5946[label="1;172pkt 172fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.235.7.1" src_port="1026"/>
    </slice>
    <from sec="1034226606" usec="0"/>
    <to sec="1034226635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.24.29.1"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.135.3.2"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_842{
style=filled;
color=gray75;
2509[label="1.35.33.43;s;2pkt 2fpkt", shape=diamond, color=yellow];
4362[label="1.35.33.43;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6210[label="1.35.33.43;1pkt 1fpkt", shape=invtriangle, color=brown];
7434[label="1.35.33.43;1pkt 1fpkt", shape=invhouse, color=bisque];
stat842[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.35.33.43:5001, 212.24.168.5:1315}[50%]&lt;BR/&gt;{1.35.33.43:5001, 167.8.0.103:1141}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 1315: (40%)&lt;BR/&gt; 1141: (10%)&gt;];
}
2509--4362[label="1;1pkt 1fpkt"];
2509--6210[label="1;1pkt 1fpkt"];
2509--7434[label="1;1pkt 1fpkt"];
4362--6210[label="1;1pkt 1fpkt"];
4362--7434[label="1;1pkt 1fpkt"];
6210--7434[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.0.103" dst_port="1141" src_ip="1.35.33.43" src_port="5001"/>
      <filter dst_ip="212.24.168.5" dst_port="1315" src_ip="1.35.33.43" src_port="5001"/>
    </slice>
    <from sec="1034226483" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_843{
style=filled;
color=gray75;
3997[label="1.35.38.2;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5954[label="1.35.38.2;12pkt 12fpkt", shape=invtriangle, color=brown];
7275[label="1.35.38.2;13pkt 13fpkt", shape=invhouse, color=bisque];
stat843[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.35.38.2:80, 161.238.92.31:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49203: (3.94737%)&lt;BR/&gt; 49202: (3.94737%)&lt;BR/&gt; 49201: (3.94737%)&lt;BR/&gt; 49200: (3.94737%)&gt;];
}
3997--5954[label="1;12pkt 12fpkt"];
3997--7275[label="1;13pkt 13fpkt"];
5954--7275[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.92.31" src_ip="1.35.38.2" src_port="80"/>
    </slice>
    <from sec="1034226126" usec="0"/>
    <to sec="1034226129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_844{
style=filled;
color=gray75;
1931[label="136.230.119.97;s;2pkt 2fpkt", shape=diamond, color=yellow];
3516[label="136.230.119.97;s;2pkt 2fpkt", shape=hexagon, color=black];
5362[label="136.230.105.168;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6884[label="136.230.105.168;7pkt 7fpkt", shape=invtriangle, color=brown];
7853[label="136.230.105.168;6pkt 6fpkt", shape=invhouse, color=bisque];
stat844[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.105.168:*, 203.66.71.121:23}[33.3333%]&lt;BR/&gt;{136.230.105.168:113, 203.66.71.121:*}[33.3333%]&lt;BR/&gt;{136.230.119.97:*, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (19.5652%)&lt;BR/&gt; 23: (19.5652%)&lt;BR/&gt; 2691: (6.52174%)&lt;BR/&gt; 2640: (6.52174%)&lt;BR/&gt; 2637: (6.52174%)&gt;];
}
1931--3263[label="0.5;1pkt 1fpkt"];
1931--3516[label="1;2pkt 2fpkt"];
5362--6884[label="1;6pkt 6fpkt"];
5362--7853[label="1;6pkt 6fpkt"];
6884--7853[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="136.230.119.97"/>
      <filter dst_ip="203.66.71.121" src_ip="136.230.105.168" src_port="113"/>
      <filter dst_ip="203.66.71.121" dst_port="23" src_ip="136.230.105.168"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.166.70.3"/>
    </slice>
    <from sec="1034226007" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_847{
style=filled;
color=gray75;
4015[label="167.1.16.4;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5966[label="167.1.16.4;1pkt 1fpkt", shape=invtriangle, color=brown];
7282[label="167.1.16.4;1pkt 1fpkt", shape=invhouse, color=bisque];
stat847[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.1.16.4:50352, 133.6.246.102:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50352: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4015--5966[label="1;1pkt 1fpkt"];
4015--7282[label="1;1pkt 1fpkt"];
5966--7282[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.6.246.102" dst_port="80" src_ip="167.1.16.4" src_port="50352"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658063,2.10925,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_848{
style=filled;
color=gray75;
2552[label="84.16.86.4;s;27pkt 27fpkt", shape=diamond, color=yellow];
4017[label="84.16.86.4;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5968[label="84.16.86.4;28pkt 28fpkt", shape=invtriangle, color=brown];
stat848[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.16.86.4:6667, 136.230.97.6:*}[48.2759%]&lt;BR/&gt;{84.16.86.4:*, 136.230.97.6:113}[44.8276%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (26.506%)&lt;BR/&gt; 113: (22.8916%)&lt;BR/&gt; 49453: (1.80723%)&lt;BR/&gt; 49057: (1.80723%)&lt;BR/&gt; 48943: (1.80723%)&gt;];
}
2552--4017[label="0.962963;26pkt 26fpkt"];
2552--5968[label="0.962963;26pkt 26fpkt"];
4017--5968[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="136.230.97.6" src_ip="84.16.86.4" src_port="6667"/>
      <filter dst_ip="136.230.97.6" dst_port="113" src_ip="84.16.86.4"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.132.101.4"/>
    </slice>
    <from sec="1034226103" usec="0"/>
    <to sec="1034226143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.196.168.4"/>
    </slice>
    <from sec="1034226389" usec="0"/>
    <to sec="1034226469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.118.242.4"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.164.153.5"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_853{
style=filled;
color=gray75;
4034[label="84.41.16.6;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5981[label="84.41.16.6;2pkt 2fpkt", shape=invtriangle, color=brown];
7292[label="84.41.16.6;2pkt 2fpkt", shape=invhouse, color=bisque];
stat853[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.41.16.6:65375, 142.173.93.4:80}[50%]&lt;BR/&gt;{84.41.16.6:65376, 142.173.93.4:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65376: (25%)&lt;BR/&gt; 65375: (25%)&gt;];
}
4034--5981[label="1;2pkt 2fpkt"];
4034--7292[label="1;2pkt 2fpkt"];
5981--7292[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="142.173.93.4" dst_port="80" src_ip="84.41.16.6" src_port="65376"/>
      <filter dst_ip="142.173.93.4" dst_port="80" src_ip="84.41.16.6" src_port="65375"/>
    </slice>
    <from sec="1034226102" usec="0"/>
    <to sec="1034226133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_854{
style=filled;
color=gray75;
4038[label="167.8.130.6;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5984[label="167.8.130.6;1pkt 1fpkt", shape=invtriangle, color=brown];
stat854[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.130.6:8864, 213.118.242.4:8864}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8864: (100%)&gt;];
}
4038--5984[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.118.242.4" dst_port="8864" src_ip="167.8.130.6" src_port="8864"/>
    </slice>
    <from sec="1034226307" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_855{
style=filled;
color=gray75;
4046[label="194.81.54.7;39pkt 39fpkt", shape=pentagon, color=darkviolet];
5991[label="194.81.54.7;40pkt 40fpkt", shape=invtriangle, color=brown];
stat855[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.81.54.7:*, 162.214.1.204:443}[50%]&lt;BR/&gt;{194.81.54.7:*, 162.214.1.204:4430}[47.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (25.3165%)&lt;BR/&gt; 4430: (24.0506%)&lt;BR/&gt; 2089: (1.26582%)&lt;BR/&gt; 2088: (1.26582%)&lt;BR/&gt; 2087: (1.26582%)&gt;];
}
4046--5991[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="162.214.1.204" dst_port="443" src_ip="194.81.54.7"/>
      <filter dst_ip="162.214.1.204" dst_port="4430" src_ip="194.81.54.7"/>
    </slice>
    <from sec="1034226520" usec="0"/>
    <to sec="1034226627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="185.191.212.7"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_857{
style=filled;
color=gray75;
4052[label="201.75.37.8;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5997[label="201.75.37.8;1pkt 1fpkt", shape=invtriangle, color=brown];
stat857[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.75.37.8:3992, 213.91.100.173:7743}[50%]&lt;BR/&gt;{201.75.37.8:7743, 213.91.100.173:2823}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (50%)&lt;BR/&gt; 3992: (33.3333%)&lt;BR/&gt; 2823: (16.6667%)&gt;];
}
4052--5997[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.91.100.173" dst_port="2823" src_ip="201.75.37.8" src_port="7743"/>
      <filter dst_ip="213.91.100.173" dst_port="7743" src_ip="201.75.37.8" src_port="3992"/>
    </slice>
    <from sec="1034226756" usec="0"/>
    <to sec="1034226791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_858{
style=filled;
color=gray75;
4058[label="213.70.166.8;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6003[label="213.70.166.8;6pkt 6fpkt", shape=invtriangle, color=brown];
7306[label="213.70.166.8;6pkt 6fpkt", shape=invhouse, color=bisque];
stat858[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.70.166.8:80, 212.18.104.84:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37021: (8.33333%)&lt;BR/&gt; 36370: (8.33333%)&lt;BR/&gt; 36369: (8.33333%)&lt;BR/&gt; 36368: (8.33333%)&gt;];
}
4058--6003[label="1;6pkt 6fpkt"];
4058--7306[label="1;6pkt 6fpkt"];
6003--7306[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.104.84" src_ip="213.70.166.8" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
1871[label="141.98.96.10;s;14pkt 14fpkt", shape=diamond, color=yellow];
3342[label="141.98.96.10;s;14pkt 14fpkt", shape=hexagon, color=black];
4082[label="141.98.96.10;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6019[label="141.98.96.10;14pkt 14fpkt", shape=invtriangle, color=brown];
7317[label="141.98.96.10;14pkt 14fpkt", shape=invhouse, color=bisque];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.96.10:*, 84.107.248.84:80}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4538: (3.57143%)&lt;BR/&gt; 4537: (3.57143%)&lt;BR/&gt; 4536: (3.57143%)&lt;BR/&gt; 4535: (3.57143%)&gt;];
}
1871--3342[label="1;14pkt 14fpkt"];
1871--3682[label="0.857143;12pkt 12fpkt"];
1871--4082[label="1;14pkt 14fpkt"];
1871--6019[label="1;14pkt 14fpkt"];
1871--7317[label="1;14pkt 14fpkt"];
3342--3682[label="0.857143;12pkt 12fpkt"];
3342--4082[label="1;14pkt 14fpkt"];
3342--6019[label="1;14pkt 14fpkt"];
3342--7317[label="1;14pkt 14fpkt"];
4082--6019[label="1;14pkt 14fpkt"];
4082--7317[label="1;14pkt 14fpkt"];
6019--7317[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="84.107.248.84" dst_port="80" src_ip="141.98.96.10"/>
    </slice>
    <from sec="1034226278" usec="0"/>
    <to sec="1034226319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_860{
style=filled;
color=gray75;
1933[label="141.98.154.31;d;55pkt 55fpkt", shape=diamond, color=yellow];
3240[label="141.98.154.31;d;55pkt 55fpkt", shape=hexagon, color=black];
4087[label="212.216.75.11;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6023[label="212.216.75.11;14pkt 14fpkt", shape=invtriangle, color=brown];
stat860[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.120.69.110:80, 141.98.154.31:*}[43.6364%]&lt;BR/&gt;{212.216.75.11:80, 141.98.154.31:*}[25.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.7536%)&lt;BR/&gt; 110: (2.89855%)&lt;BR/&gt; 25: (2.89855%)&lt;BR/&gt; 2655: (1.44928%)&lt;BR/&gt; 2652: (1.44928%)&gt;];
}
1933--3240[label="1;55pkt 55fpkt"];
1933--3950[label="0.163636;9pkt 9fpkt"];
1933--4087[label="1;14pkt 14fpkt"];
1933--6023[label="1;14pkt 14fpkt"];
3240--3950[label="0.163636;9pkt 9fpkt"];
3240--4087[label="1;14pkt 14fpkt"];
3240--6023[label="1;14pkt 14fpkt"];
4087--6023[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.154.31" src_ip="1.120.69.110" src_port="80"/>
      <filter dst_ip="141.98.154.31" src_ip="212.216.75.11" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_861{
style=filled;
color=gray75;
4088[label="1.77.96.11;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6024[label="1.77.96.11;2pkt 2fpkt", shape=invtriangle, color=brown];
7320[label="1.77.96.11;2pkt 2fpkt", shape=invhouse, color=bisque];
stat861[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.77.96.11:80, 212.24.7.86:1068}[50%]&lt;BR/&gt;{1.77.96.11:80, 212.24.7.86:1070}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1070: (25%)&lt;BR/&gt; 1068: (25%)&gt;];
}
4088--6024[label="1;2pkt 2fpkt"];
4088--7320[label="1;2pkt 2fpkt"];
6024--7320[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.7.86" dst_port="1070" src_ip="1.77.96.11" src_port="80"/>
      <filter dst_ip="212.24.7.86" dst_port="1068" src_ip="1.77.96.11" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_862{
style=filled;
color=gray75;
4094[label="85.34.123.12;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6029[label="85.34.123.12;17pkt 17fpkt", shape=invtriangle, color=brown];
7322[label="85.34.123.12;18pkt 18fpkt", shape=invhouse, color=bisque];
stat862[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.34.123.12:80, 141.98.77.12:*}[33.3333%]&lt;BR/&gt;{85.34.123.12:80, 167.8.90.88:*}[27.7778%]&lt;BR/&gt;{85.34.123.12:80, 167.8.140.237:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50450: (2.88462%)&lt;BR/&gt; 50446: (2.88462%)&lt;BR/&gt; 50442: (2.88462%)&lt;BR/&gt; 50433: (2.88462%)&gt;];
}
4094--6029[label="1;17pkt 17fpkt"];
4094--7322[label="1;17pkt 17fpkt"];
6029--7322[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.77.12" src_ip="85.34.123.12" src_port="80"/>
      <filter dst_ip="167.8.90.88" src_ip="85.34.123.12" src_port="80"/>
      <filter dst_ip="167.8.140.237" src_ip="85.34.123.12" src_port="80"/>
    </slice>
    <from sec="1034226087" usec="0"/>
    <to sec="1034226768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_863{
style=filled;
color=gray75;
4097[label="209.168.148.12;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6031[label="209.168.148.12;1pkt 1fpkt", shape=invtriangle, color=brown];
stat863[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.168.148.12:80, 167.164.158.80:1072}[50%]&lt;BR/&gt;{209.168.148.12:80, 185.206.202.140:5609}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5609: (33.3333%)&lt;BR/&gt; 1072: (16.6667%)&gt;];
}
4097--6031[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.206.202.140" dst_port="5609" src_ip="209.168.148.12" src_port="80"/>
      <filter dst_ip="167.164.158.80" dst_port="1072" src_ip="209.168.148.12" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_864{
style=filled;
color=gray75;
4099[label="219.43.21.13;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6033[label="219.43.21.13;3pkt 3fpkt", shape=invtriangle, color=brown];
stat864[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.43.21.13:6667, 194.40.164.28:2300}[33.3333%]&lt;BR/&gt;{219.43.21.13:6667, 1.52.8.156:1028}[33.3333%]&lt;BR/&gt;{219.43.21.13:6665, 194.40.164.184:1951}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (33.3333%)&lt;BR/&gt; 6665: (16.6667%)&lt;BR/&gt; 2300: (16.6667%)&lt;BR/&gt; 1951: (16.6667%)&lt;BR/&gt; 1028: (16.6667%)&gt;];
}
4099--6033[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="194.40.164.184" dst_port="1951" src_ip="219.43.21.13" src_port="6665"/>
      <filter dst_ip="1.52.8.156" dst_port="1028" src_ip="219.43.21.13" src_port="6667"/>
      <filter dst_ip="194.40.164.28" dst_port="2300" src_ip="219.43.21.13" src_port="6667"/>
    </slice>
    <from sec="1034226005" usec="0"/>
    <to sec="1034226790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.108.173.13"/>
    </slice>
    <from sec="1034226255" usec="0"/>
    <to sec="1034226522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_866{
style=filled;
color=gray75;
4115[label="212.24.7.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6045[label="212.24.7.16;1pkt 1fpkt", shape=invtriangle, color=brown];
7331[label="212.24.7.16;1pkt 1fpkt", shape=invhouse, color=bisque];
stat866[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.7.16:1589, 200.177.185.239:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1589: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4115--6045[label="1;1pkt 1fpkt"];
4115--7331[label="1;1pkt 1fpkt"];
6045--7331[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.177.185.239" dst_port="80" src_ip="212.24.7.16" src_port="1589"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_867{
style=filled;
color=gray75;
4116[label="185.191.8.16;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6046[label="185.191.8.16;4pkt 4fpkt", shape=invtriangle, color=brown];
stat867[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.8.16:0, 134.170.244.71:0}[25%]&lt;BR/&gt;{185.191.8.16:0, 134.170.80.91:0}[25%]&lt;BR/&gt;{185.191.8.16:0, 134.170.9.131:0}[25%]&lt;BR/&gt;{185.191.8.16:0, 134.170.207.202:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4116--6046[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="134.170.207.202" src_ip="185.191.8.16"/>
      <filter dst_ip="134.170.9.131" src_ip="185.191.8.16"/>
      <filter dst_ip="134.170.80.91" src_ip="185.191.8.16"/>
      <filter dst_ip="134.170.244.71" src_ip="185.191.8.16"/>
    </slice>
    <from sec="1034226012" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.192.17.16"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_869{
style=filled;
color=gray75;
4120[label="161.238.196.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6049[label="161.238.196.16;2pkt 2fpkt", shape=invtriangle, color=brown];
stat869[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.196.16:1364, 209.110.11.112:80}[50%]&lt;BR/&gt;{161.238.196.16:1535, 203.113.170.118:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1535: (33.3333%)&lt;BR/&gt; 1364: (16.6667%)&gt;];
}
4120--6049[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.113.170.118" dst_port="80" src_ip="161.238.196.16" src_port="1535"/>
      <filter dst_ip="209.110.11.112" dst_port="80" src_ip="161.238.196.16" src_port="1364"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_870{
style=filled;
color=gray75;
4122[label="84.102.242.16;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6050[label="84.102.242.16;3pkt 3fpkt", shape=invtriangle, color=brown];
7334[label="84.102.242.16;3pkt 3fpkt", shape=invhouse, color=bisque];
stat870[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.102.242.16:443, 212.24.172.62:1325}[33.3333%]&lt;BR/&gt;{84.102.242.16:443, 212.24.172.62:1327}[33.3333%]&lt;BR/&gt;{84.102.242.16:443, 212.24.172.62:1329}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1329: (16.6667%)&lt;BR/&gt; 1327: (16.6667%)&lt;BR/&gt; 1325: (16.6667%)&gt;];
}
4122--6050[label="1;3pkt 3fpkt"];
4122--7334[label="1;3pkt 3fpkt"];
6050--7334[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.172.62" dst_port="1329" src_ip="84.102.242.16" src_port="443"/>
      <filter dst_ip="212.24.172.62" dst_port="1327" src_ip="84.102.242.16" src_port="443"/>
      <filter dst_ip="212.24.172.62" dst_port="1325" src_ip="84.102.242.16" src_port="443"/>
    </slice>
    <from sec="1034226046" usec="0"/>
    <to sec="1034226122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_871{
style=filled;
color=gray75;
2477[label="167.8.90.53;d;26pkt 26fpkt", shape=diamond, color=yellow];
4132[label="201.142.48.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6056[label="201.142.48.18;2pkt 2fpkt", shape=invtriangle, color=brown];
7338[label="201.142.48.18;1pkt 1fpkt", shape=invhouse, color=bisque];
stat871[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:7743, 167.8.90.53:*}[53.8462%]&lt;BR/&gt;{*:*, 167.8.90.53:7743}[38.4615%]&lt;BR/&gt;{17.238.160.166:*, 167.8.90.53:*}[26.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (46.6667%)&lt;BR/&gt; 33248: (6.66667%)&lt;BR/&gt; 1065: (3.33333%)&lt;BR/&gt; 0: (3.33333%)&lt;BR/&gt; 60717: (1.66667%)&gt;];
}
2477--4132[label="1;1pkt 1fpkt"];
2477--6056[label="1;2pkt 2fpkt"];
2477--7338[label="1;1pkt 1fpkt"];
4132--6056[label="1;1pkt 1fpkt"];
4132--7338[label="1;1pkt 1fpkt"];
6056--7338[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.90.53" src_ip="17.238.160.166"/>
      <filter dst_ip="167.8.90.53" src_port="7743"/>
      <filter dst_ip="167.8.90.53" dst_port="7743"/>
    </slice>
    <from sec="1034226300" usec="0"/>
    <to sec="1034226723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_872{
style=filled;
color=gray75;
4157[label="84.102.242.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6075[label="84.102.242.20;1pkt 1fpkt", shape=invtriangle, color=brown];
7349[label="84.102.242.20;1pkt 1fpkt", shape=invhouse, color=bisque];
stat872[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.102.242.20:443, 167.20.178.235:1054}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1054: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
4157--6075[label="1;1pkt 1fpkt"];
4157--7349[label="1;1pkt 1fpkt"];
6075--7349[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.20.178.235" dst_port="1054" src_ip="84.102.242.20" src_port="443"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.704041,2.16215,503,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_873{
style=filled;
color=gray75;
756[label="161.238.228.114;s;15pkt 15fpkt", shape=diamond, color=yellow];
757[label="203.200.92.82;d;1pkt 1fpkt", shape=diamond, color=yellow];
6590[label="161.238.228.114;15pkt 15fpkt", shape=invtriangle, color=brown];
stat873[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.228.114:1024, *:53}[37.5%]&lt;BR/&gt;{161.238.228.114:*, *:80}[31.25%]&lt;BR/&gt;{161.238.228.114:*, *:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (16.129%)&lt;BR/&gt; 80: (16.129%)&lt;BR/&gt; 53: (16.129%)&lt;BR/&gt; 1863: (12.9032%)&lt;BR/&gt; 49195: (4.83871%)&gt;];
}
756--757[label="1;1pkt 1fpkt"];
756--1348[label="0.133333;2pkt 2fpkt"];
756--1959[label="0.0666667;1pkt 1fpkt"];
756--2231[label="0.0666667;1pkt 1fpkt"];
756--2394[label="0.0666667;1pkt 1fpkt"];
756--2413[label="0.0666667;1pkt 1fpkt"];
756--3004[label="0.133333;2pkt 2fpkt"];
756--3555[label="0.0666667;1pkt 1fpkt"];
756--3706[label="0.0666667;1pkt 1fpkt"];
756--4946[label="0.933333;14pkt 14fpkt"];
756--6590[label="0.933333;14pkt 14fpkt"];
757--4946[label="1;1pkt 1fpkt"];
757--6590[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="161.238.228.114"/>
      <filter dst_port="1863" src_ip="161.238.228.114"/>
      <filter dst_port="53" src_ip="161.238.228.114" src_port="1024"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_874{
style=filled;
color=gray75;
4163[label="213.91.100.21;54pkt 54fpkt", shape=pentagon, color=darkviolet];
6081[label="213.91.100.21;54pkt 54fpkt", shape=invtriangle, color=brown];
7353[label="213.91.100.21;55pkt 55fpkt", shape=invhouse, color=bisque];
stat874[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.100.21:*, 192.168.0.1:75}[94.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 75: (47.8528%)&lt;BR/&gt; 3789: (0.920245%)&lt;BR/&gt; 3788: (0.920245%)&lt;BR/&gt; 3787: (0.920245%)&lt;BR/&gt; 3786: (0.920245%)&gt;];
}
4163--6081[label="1;54pkt 54fpkt"];
4163--7353[label="1;54pkt 54fpkt"];
6081--7353[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.0.1" dst_port="75" src_ip="213.91.100.21"/>
    </slice>
    <from sec="1034226005" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.238.215.22"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.200.45.24"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_877{
style=filled;
color=gray75;
4190[label="213.91.98.24;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6097[label="213.91.98.24;4pkt 4fpkt", shape=invtriangle, color=brown];
7363[label="213.91.98.24;4pkt 4fpkt", shape=invhouse, color=bisque];
stat877[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.98.24:60432, 193.168.31.91:80}[25%]&lt;BR/&gt;{213.91.98.24:60433, 193.168.31.91:80}[25%]&lt;BR/&gt;{213.91.98.24:60434, 193.168.31.91:80}[25%]&lt;BR/&gt;{213.91.98.24:60435, 193.168.31.91:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60435: (12.5%)&lt;BR/&gt; 60434: (12.5%)&lt;BR/&gt; 60433: (12.5%)&lt;BR/&gt; 60432: (12.5%)&gt;];
}
4190--6097[label="1;4pkt 4fpkt"];
4190--7363[label="1;4pkt 4fpkt"];
6097--7363[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="193.168.31.91" dst_port="80" src_ip="213.91.98.24" src_port="60435"/>
      <filter dst_ip="193.168.31.91" dst_port="80" src_ip="213.91.98.24" src_port="60434"/>
      <filter dst_ip="193.168.31.91" dst_port="80" src_ip="213.91.98.24" src_port="60433"/>
      <filter dst_ip="193.168.31.91" dst_port="80" src_ip="213.91.98.24" src_port="60432"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_878{
style=filled;
color=gray75;
892[label="167.8.142.24;s;2pkt 2fpkt", shape=diamond, color=yellow];
1198[label="209.193.117.229;d;1pkt 1fpkt", shape=diamond, color=yellow];
2962[label="167.8.142.24;s;2pkt 2fpkt", shape=hexagon, color=black];
4193[label="167.8.142.24;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6098[label="167.8.142.24;1pkt 1fpkt", shape=invtriangle, color=brown];
7364[label="167.8.142.24;1pkt 1fpkt", shape=invhouse, color=bisque];
stat878[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.142.24:3300, 81.21.87.95:6699}[50%]&lt;BR/&gt;{167.8.142.24:6699, 209.193.117.229:1406}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3300: (31.25%)&lt;BR/&gt; 1406: (18.75%)&gt;];
}
892--1198[label="1;1pkt 1fpkt"];
892--1747[label="0.5;1pkt 1fpkt"];
892--2962[label="1;2pkt 2fpkt"];
892--4193[label="1;1pkt 1fpkt"];
892--6098[label="1;1pkt 1fpkt"];
892--7364[label="1;1pkt 1fpkt"];
1198--2962[label="1;1pkt 1fpkt"];
2962--4193[label="1;1pkt 1fpkt"];
2962--6098[label="1;1pkt 1fpkt"];
2962--7364[label="1;1pkt 1fpkt"];
4193--6098[label="1;1pkt 1fpkt"];
4193--7364[label="1;1pkt 1fpkt"];
6098--7364[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.193.117.229" dst_port="1406" src_ip="167.8.142.24" src_port="6699"/>
      <filter dst_ip="81.21.87.95" dst_port="6699" src_ip="167.8.142.24" src_port="3300"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_879{
style=filled;
color=gray75;
4194[label="85.222.248.24;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6099[label="85.222.248.24;2pkt 2fpkt", shape=invtriangle, color=brown];
7365[label="85.222.248.24;2pkt 2fpkt", shape=invhouse, color=bisque];
stat879[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.222.248.24:80, 167.8.68.160:3117}[50%]&lt;BR/&gt;{85.222.248.24:80, 167.8.68.160:3118}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3118: (25%)&lt;BR/&gt; 3117: (25%)&gt;];
}
4194--6099[label="1;2pkt 2fpkt"];
4194--7365[label="1;2pkt 2fpkt"];
6099--7365[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.68.160" dst_port="3118" src_ip="85.222.248.24" src_port="80"/>
      <filter dst_ip="167.8.68.160" dst_port="3117" src_ip="85.222.248.24" src_port="80"/>
    </slice>
    <from sec="1034226690" usec="0"/>
    <to sec="1034226720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_880{
style=filled;
color=gray75;
4199[label="3.129.141.25;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6103[label="3.129.141.25;1pkt 1fpkt", shape=invtriangle, color=brown];
stat880[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.129.141.25:80, 161.238.38.228:2759}[50%]&lt;BR/&gt;{3.129.141.25:80, 161.238.38.228:2760}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2760: (33.3333%)&lt;BR/&gt; 2759: (16.6667%)&gt;];
}
4199--6103[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.38.228" dst_port="2760" src_ip="3.129.141.25" src_port="80"/>
      <filter dst_ip="161.238.38.228" dst_port="2759" src_ip="3.129.141.25" src_port="80"/>
    </slice>
    <from sec="1034226608" usec="0"/>
    <to sec="1034226645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_881{
style=filled;
color=gray75;
4208[label="136.230.104.27;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6109[label="136.230.104.27;19pkt 19fpkt", shape=invtriangle, color=brown];
stat881[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.104.27:*, *:25}[52.6316%]&lt;BR/&gt;{136.230.104.27:*, *:5190}[21.0526%]&lt;BR/&gt;{136.230.104.27:113, *:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (26.3158%)&lt;BR/&gt; 5190: (10.5263%)&lt;BR/&gt; 113: (10.5263%)&lt;BR/&gt; 62947: (5.26316%)&lt;BR/&gt; 64338: (2.63158%)&gt;];
}
4208--6109[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter src_ip="136.230.104.27" src_port="113"/>
      <filter dst_port="25" src_ip="136.230.104.27"/>
      <filter dst_port="5190" src_ip="136.230.104.27"/>
    </slice>
    <from sec="1034226008" usec="0"/>
    <to sec="1034226789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_882{
style=filled;
color=gray75;
4209[label="209.199.166.27;37pkt 37fpkt", shape=pentagon, color=darkviolet];
6110[label="209.199.166.27;37pkt 37fpkt", shape=invtriangle, color=brown];
7370[label="209.199.166.27;36pkt 36fpkt", shape=invhouse, color=bisque];
stat882[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.199.166.27:80, 167.8.68.160:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3178: (1.36364%)&lt;BR/&gt; 3177: (1.36364%)&lt;BR/&gt; 3176: (1.36364%)&lt;BR/&gt; 3175: (1.36364%)&gt;];
}
4209--6110[label="1;37pkt 37fpkt"];
4209--7370[label="1;36pkt 36fpkt"];
6110--7370[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.68.160" src_ip="209.199.166.27" src_port="80"/>
    </slice>
    <from sec="1034226724" usec="0"/>
    <to sec="1034226791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.52.1.28"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.233.238.28"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_885{
style=filled;
color=gray75;
4227[label="43.16.65.30;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6121[label="43.16.65.30;3pkt 3fpkt", shape=invtriangle, color=brown];
7377[label="43.16.65.30;3pkt 3fpkt", shape=invhouse, color=bisque];
stat885[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.16.65.30:2914, 136.230.110.56:80}[33.3333%]&lt;BR/&gt;{43.16.65.30:2915, 136.230.110.56:80}[33.3333%]&lt;BR/&gt;{43.16.65.30:2916, 136.230.110.56:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2916: (16.6667%)&lt;BR/&gt; 2915: (16.6667%)&lt;BR/&gt; 2914: (16.6667%)&gt;];
}
4227--6121[label="1;3pkt 3fpkt"];
4227--7377[label="1;3pkt 3fpkt"];
6121--7377[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.230.110.56" dst_port="80" src_ip="43.16.65.30" src_port="2916"/>
      <filter dst_ip="136.230.110.56" dst_port="80" src_ip="43.16.65.30" src_port="2915"/>
      <filter dst_ip="136.230.110.56" dst_port="80" src_ip="43.16.65.30" src_port="2914"/>
    </slice>
    <from sec="1034226351" usec="0"/>
    <to sec="1034226388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.148.177.30"/>
    </slice>
    <from sec="1034226006" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.177.17.31"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_888{
style=filled;
color=gray75;
4234[label="136.230.113.31;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6127[label="136.230.113.31;1pkt 1fpkt", shape=invtriangle, color=brown];
7381[label="136.230.113.31;1pkt 1fpkt", shape=invhouse, color=bisque];
stat888[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.113.31:80, 143.130.166.173:44329}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44329: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4234--6127[label="1;1pkt 1fpkt"];
4234--7381[label="1;1pkt 1fpkt"];
6127--7381[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.130.166.173" dst_port="44329" src_ip="136.230.113.31" src_port="80"/>
    </slice>
    <from sec="1034226448" usec="0"/>
    <to sec="1034226493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.228.225.31"/>
    </slice>
    <from sec="1034226468" usec="0"/>
    <to sec="1034226576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.34.109.32"/>
    </slice>
    <from sec="1034226018" usec="0"/>
    <to sec="1034226715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,501,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_891{
style=filled;
color=gray75;
2570[label="208.166.163.32;s;29pkt 29fpkt", shape=diamond, color=yellow];
4244[label="208.166.163.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6132[label="208.166.163.32;1pkt 1fpkt", shape=invtriangle, color=brown];
7385[label="208.166.163.32;1pkt 1fpkt", shape=invhouse, color=bisque];
stat891[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.166.163.32:21, 136.230.112.86:*}[31.0345%]&lt;BR/&gt;{208.166.163.32:21, 212.137.144.75:*}[27.5862%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (39.0625%)&lt;BR/&gt; 20: (9.375%)&lt;BR/&gt; 1051: (6.25%)&lt;BR/&gt; 42720: (1.5625%)&lt;BR/&gt; 41851: (1.5625%)&gt;];
}
2570--2798[label="0.0689655;2pkt 2fpkt"];
2570--3198[label="0.103448;3pkt 3fpkt"];
2570--3490[label="0.241379;7pkt 7fpkt"];
2570--3651[label="0.310345;9pkt 9fpkt"];
2570--4244[label="1;1pkt 1fpkt"];
2570--6132[label="1;1pkt 1fpkt"];
2570--7385[label="1;1pkt 1fpkt"];
4244--6132[label="1;1pkt 1fpkt"];
4244--7385[label="1;1pkt 1fpkt"];
6132--7385[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.230.112.86" src_ip="208.166.163.32" src_port="21"/>
      <filter dst_ip="212.137.144.75" src_ip="208.166.163.32" src_port="21"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.235.169.32"/>
    </slice>
    <from sec="1034226610" usec="0"/>
    <to sec="1034226788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.120.223.32"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_894{
style=filled;
color=gray75;
4250[label="161.238.46.33;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6137[label="161.238.46.33;8pkt 8fpkt", shape=invtriangle, color=brown];
7388[label="161.238.46.33;7pkt 7fpkt", shape=invhouse, color=bisque];
stat894[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.46.33:25, 216.4.83.36:*}[25%]&lt;BR/&gt;{161.238.46.33:25, 86.135.44.179:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 47605: (6.81818%)&lt;BR/&gt; 47500: (6.81818%)&lt;BR/&gt; 44292: (6.81818%)&lt;BR/&gt; 18862: (6.81818%)&gt;];
}
4250--6137[label="1;7pkt 7fpkt"];
4250--7388[label="1;7pkt 7fpkt"];
6137--7388[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="86.135.44.179" src_ip="161.238.46.33" src_port="25"/>
      <filter dst_ip="216.4.83.36" src_ip="161.238.46.33" src_port="25"/>
    </slice>
    <from sec="1034226021" usec="0"/>
    <to sec="1034226590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.232.69.33"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_896{
style=filled;
color=gray75;
4259[label="86.72.148.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6144[label="86.72.148.33;1pkt 1fpkt", shape=invtriangle, color=brown];
stat896[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.72.148.33:6699, 185.191.183.81:1756}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1756: (50%)&gt;];
}
4259--6144[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.183.81" dst_port="1756" src_ip="86.72.148.33" src_port="6699"/>
    </slice>
    <from sec="1034226740" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.230.78.34"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_898{
style=filled;
color=gray75;
4271[label="85.41.168.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6153[label="85.41.168.34;1pkt 1fpkt", shape=invtriangle, color=brown];
stat898[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.41.168.34:80, 161.238.45.129:2110}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2110: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4271--6153[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.45.129" dst_port="2110" src_ip="85.41.168.34" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.8.71.35"/>
    </slice>
    <from sec="1034226036" usec="0"/>
    <to sec="1034226107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_900{
style=filled;
color=gray75;
4284[label="167.164.187.35;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6164[label="167.164.187.35;2pkt 2fpkt", shape=invtriangle, color=brown];
7403[label="167.164.187.35;2pkt 2fpkt", shape=invhouse, color=bisque];
stat900[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.164.187.35:33273, 32.103.1.205:21}[50%]&lt;BR/&gt;{167.164.187.35:33274, 32.103.1.205:36938}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36938: (25%)&lt;BR/&gt; 33274: (25%)&lt;BR/&gt; 33273: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
4284--6164[label="1;2pkt 2fpkt"];
4284--7403[label="1;2pkt 2fpkt"];
6164--7403[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="32.103.1.205" dst_port="36938" src_ip="167.164.187.35" src_port="33274"/>
      <filter dst_ip="32.103.1.205" dst_port="21" src_ip="167.164.187.35" src_port="33273"/>
    </slice>
    <from sec="1034226222" usec="0"/>
    <to sec="1034226659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_901{
style=filled;
color=gray75;
4286[label="213.38.216.35;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6165[label="213.38.216.35;3pkt 3fpkt", shape=invtriangle, color=brown];
7404[label="213.38.216.35;2pkt 2fpkt", shape=invhouse, color=bisque];
stat901[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.38.216.35:80, 167.8.136.83:3865}[33.3333%]&lt;BR/&gt;{213.38.216.35:80, 167.8.136.83:3890}[33.3333%]&lt;BR/&gt;{213.38.216.35:80, 167.8.136.83:3968}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3968: (18.75%)&lt;BR/&gt; 3890: (18.75%)&lt;BR/&gt; 3865: (12.5%)&gt;];
}
4286--6165[label="1;3pkt 3fpkt"];
4286--7404[label="1;2pkt 2fpkt"];
6165--7404[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.136.83" dst_port="3968" src_ip="213.38.216.35" src_port="80"/>
      <filter dst_ip="167.8.136.83" dst_port="3890" src_ip="213.38.216.35" src_port="80"/>
      <filter dst_ip="167.8.136.83" dst_port="3865" src_ip="213.38.216.35" src_port="80"/>
    </slice>
    <from sec="1034226029" usec="0"/>
    <to sec="1034226313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.54.35.40"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_903{
style=filled;
color=gray75;
4318[label="161.238.42.40;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6180[label="161.238.42.40;7pkt 7fpkt", shape=invtriangle, color=brown];
7415[label="161.238.42.40;6pkt 6fpkt", shape=invhouse, color=bisque];
stat903[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.42.40:*, 25.170.114.213:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2069: (7.5%)&lt;BR/&gt; 2067: (7.5%)&lt;BR/&gt; 2065: (7.5%)&lt;BR/&gt; 2063: (7.5%)&gt;];
}
4318--6180[label="1;7pkt 7fpkt"];
4318--7415[label="1;6pkt 6fpkt"];
6180--7415[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="25.170.114.213" dst_port="80" src_ip="161.238.42.40"/>
    </slice>
    <from sec="1034226089" usec="0"/>
    <to sec="1034226295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.133.116.40"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_905{
style=filled;
color=gray75;
4348[label="161.238.19.42;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6202[label="161.238.19.42;19pkt 19fpkt", shape=invtriangle, color=brown];
7429[label="161.238.19.42;20pkt 20fpkt", shape=invhouse, color=bisque];
stat905[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.19.42:*, 203.129.210.84:80}[50%]&lt;BR/&gt;{161.238.19.42:*, 85.81.89.92:80}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1637: (2.54237%)&lt;BR/&gt; 1636: (2.54237%)&lt;BR/&gt; 1635: (2.54237%)&lt;BR/&gt; 1634: (2.54237%)&gt;];
}
4348--6202[label="1;19pkt 19fpkt"];
4348--7429[label="1;20pkt 20fpkt"];
6202--7429[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="203.129.210.84" dst_port="80" src_ip="161.238.19.42"/>
      <filter dst_ip="85.81.89.92" dst_port="80" src_ip="161.238.19.42"/>
    </slice>
    <from sec="1034226045" usec="0"/>
    <to sec="1034226076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_906{
style=filled;
color=gray75;
2092[label="1.35.33.42;s;2pkt 2fpkt", shape=diamond, color=yellow];
3341[label="1.35.33.42;s;2pkt 2fpkt", shape=hexagon, color=black];
4349[label="1.35.33.42;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6203[label="1.35.33.42;1pkt 1fpkt", shape=invtriangle, color=brown];
stat906[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.35.33.42:5001, 212.24.168.5:1305}[50%]&lt;BR/&gt;{1.35.33.42:5001, 141.98.105.111:3279}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 3279: (33.3333%)&lt;BR/&gt; 1305: (16.6667%)&gt;];
}
2092--3341[label="1;2pkt 2fpkt"];
2092--3647[label="0.5;1pkt 1fpkt"];
2092--4349[label="1;1pkt 1fpkt"];
2092--6203[label="1;1pkt 1fpkt"];
3341--3647[label="0.5;1pkt 1fpkt"];
3341--4349[label="1;1pkt 1fpkt"];
3341--6203[label="1;1pkt 1fpkt"];
4349--6203[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.105.111" dst_port="3279" src_ip="1.35.33.42" src_port="5001"/>
      <filter dst_ip="212.24.168.5" dst_port="1305" src_ip="1.35.33.42" src_port="5001"/>
    </slice>
    <from sec="1034226269" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_907{
style=filled;
color=gray75;
4350[label="86.135.34.42;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6204[label="86.135.34.42;1pkt 1fpkt", shape=invtriangle, color=brown];
7430[label="86.135.34.42;1pkt 1fpkt", shape=invhouse, color=bisque];
stat907[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.135.34.42:80, 212.18.106.107:4145}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4145: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4350--6204[label="1;1pkt 1fpkt"];
4350--7430[label="1;1pkt 1fpkt"];
6204--7430[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.106.107" dst_port="4145" src_ip="86.135.34.42" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.238.128.42"/>
    </slice>
    <from sec="1034226084" usec="0"/>
    <to sec="1034226166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_909{
style=filled;
color=gray75;
1471[label="136.230.121.49;d;45pkt 45fpkt", shape=diamond, color=yellow];
4364[label="203.177.147.43;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4564[label="203.177.152.68;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4640[label="203.177.152.75;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6212[label="203.177.147.43;4pkt 4fpkt", shape=invtriangle, color=brown];
6345[label="203.177.152.68;6pkt 6fpkt", shape=invtriangle, color=brown];
7435[label="203.177.147.43;3pkt 3fpkt", shape=invhouse, color=bisque];
stat909[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:23, 136.230.121.49:*}[30.7692%]&lt;BR/&gt;{*:20, *:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (23.8806%)&lt;BR/&gt; 20: (10.4478%)&lt;BR/&gt; 5190: (7.46269%)&lt;BR/&gt; 1863: (5.22388%)&lt;BR/&gt; 1058: (2.98507%)&gt;];
}
1471--4364[label="0.333333;1pkt 1fpkt"];
1471--4564[label="0.4;2pkt 2fpkt"];
1471--4640[label="1;1pkt 1fpkt"];
1471--6212[label="0.25;1pkt 1fpkt"];
1471--6345[label="0.333333;2pkt 2fpkt"];
1471--7435[label="0.333333;1pkt 1fpkt"];
4364--6212[label="1;3pkt 3fpkt"];
4364--7435[label="1;3pkt 3fpkt"];
4564--6345[label="1;5pkt 5fpkt"];
6212--7435[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_port="20"/>
      <filter dst_ip="136.230.121.49" src_port="23"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_910{
style=filled;
color=gray75;
4365[label="84.102.207.43;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6213[label="84.102.207.43;4pkt 4fpkt", shape=invtriangle, color=brown];
stat910[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.102.207.43:80, 212.18.106.80:1656}[25%]&lt;BR/&gt;{84.102.207.43:80, 212.18.106.80:4682}[25%]&lt;BR/&gt;{84.102.207.43:80, 212.18.106.80:7832}[25%]&lt;BR/&gt;{84.102.207.43:80, 212.18.106.80:49042}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49042: (12.5%)&lt;BR/&gt; 7832: (12.5%)&lt;BR/&gt; 4682: (12.5%)&lt;BR/&gt; 1656: (12.5%)&gt;];
}
4365--6213[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.106.80" dst_port="49042" src_ip="84.102.207.43" src_port="80"/>
      <filter dst_ip="212.18.106.80" dst_port="7832" src_ip="84.102.207.43" src_port="80"/>
      <filter dst_ip="212.18.106.80" dst_port="4682" src_ip="84.102.207.43" src_port="80"/>
      <filter dst_ip="212.18.106.80" dst_port="1656" src_ip="84.102.207.43" src_port="80"/>
    </slice>
    <from sec="1034226053" usec="0"/>
    <to sec="1034226767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.71.140.44"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_912{
style=filled;
color=gray75;
4379[label="85.34.109.45;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6223[label="85.34.109.45;1pkt 1fpkt", shape=invtriangle, color=brown];
stat912[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.34.109.45:80, 167.8.136.16:3243}[50%]&lt;BR/&gt;{85.34.109.45:80, 185.191.25.84:1052}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1052: (33.3333%)&lt;BR/&gt; 3243: (16.6667%)&gt;];
}
4379--6223[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.25.84" dst_port="1052" src_ip="85.34.109.45" src_port="80"/>
      <filter dst_ip="167.8.136.16" dst_port="3243" src_ip="85.34.109.45" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_913{
style=filled;
color=gray75;
4383[label="84.29.146.45;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6226[label="84.29.146.45;4pkt 4fpkt", shape=invtriangle, color=brown];
7443[label="84.29.146.45;4pkt 4fpkt", shape=invhouse, color=bisque];
stat913[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.29.146.45:80, 212.18.106.82:1119}[25%]&lt;BR/&gt;{84.29.146.45:80, 212.18.106.82:1120}[25%]&lt;BR/&gt;{84.29.146.45:80, 212.18.106.82:1122}[25%]&lt;BR/&gt;{84.29.146.45:80, 212.18.106.82:1123}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1123: (12.5%)&lt;BR/&gt; 1122: (12.5%)&lt;BR/&gt; 1120: (12.5%)&lt;BR/&gt; 1119: (12.5%)&gt;];
}
4383--6226[label="1;4pkt 4fpkt"];
4383--7443[label="1;4pkt 4fpkt"];
6226--7443[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.106.82" dst_port="1123" src_ip="84.29.146.45" src_port="80"/>
      <filter dst_ip="212.18.106.82" dst_port="1122" src_ip="84.29.146.45" src_port="80"/>
      <filter dst_ip="212.18.106.82" dst_port="1120" src_ip="84.29.146.45" src_port="80"/>
      <filter dst_ip="212.18.106.82" dst_port="1119" src_ip="84.29.146.45" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658063,2.10925,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_914{
style=filled;
color=gray75;
2472[label="212.24.11.166;d;71pkt 71fpkt", shape=diamond, color=yellow];
4386[label="85.222.240.45;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6228[label="85.222.240.45;33pkt 33fpkt", shape=invtriangle, color=brown];
stat914[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.222.240.45:80, 212.24.11.166:*}[46.4789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37453: (1.09489%)&lt;BR/&gt; 37452: (1.09489%)&lt;BR/&gt; 37451: (1.09489%)&lt;BR/&gt; 37450: (1.09489%)&gt;];
}
2472--3950[label="0.0422535;3pkt 3fpkt"];
2472--4341[label="0.235294;8pkt 8fpkt"];
2472--4386[label="1;33pkt 33fpkt"];
2472--6228[label="1;33pkt 33fpkt"];
4386--6228[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.11.166" src_ip="85.222.240.45" src_port="80"/>
    </slice>
    <from sec="1034226251" usec="0"/>
    <to sec="1034226711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.10.104.47"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_916{
style=filled;
color=gray75;
4403[label="161.238.13.48;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6238[label="161.238.13.48;27pkt 27fpkt", shape=invtriangle, color=brown];
stat916[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.13.48:*, 164.60.19.53:80}[96.2963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1481%)&lt;BR/&gt; 0: (3.7037%)&lt;BR/&gt; 1581: (1.85185%)&lt;BR/&gt; 1580: (1.85185%)&lt;BR/&gt; 1579: (1.85185%)&gt;];
}
4403--6238[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="164.60.19.53" dst_port="80" src_ip="161.238.13.48"/>
    </slice>
    <from sec="1034226234" usec="0"/>
    <to sec="1034226277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.168.181.48"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.16.101.49"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_919{
style=filled;
color=gray75;
4422[label="161.238.128.49;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6252[label="161.238.128.49;14pkt 14fpkt", shape=invtriangle, color=brown];
7460[label="161.238.128.49;14pkt 14fpkt", shape=invhouse, color=bisque];
stat919[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.128.49:*, 195.202.107.46:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1058: (3.57143%)&lt;BR/&gt; 1057: (3.57143%)&lt;BR/&gt; 1056: (3.57143%)&lt;BR/&gt; 1055: (3.57143%)&gt;];
}
4422--6252[label="1;14pkt 14fpkt"];
4422--7460[label="1;14pkt 14fpkt"];
6252--7460[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="195.202.107.46" dst_port="80" src_ip="161.238.128.49"/>
    </slice>
    <from sec="1034226760" usec="0"/>
    <to sec="1034226765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.132.204.49"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_921{
style=filled;
color=gray75;
4426[label="212.24.2.50;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6254[label="212.24.2.50;13pkt 13fpkt", shape=invtriangle, color=brown];
7461[label="212.24.2.50;13pkt 13fpkt", shape=invhouse, color=bisque];
stat921[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.2.50:*, 192.215.33.120:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4293: (3.84615%)&lt;BR/&gt; 4292: (3.84615%)&lt;BR/&gt; 4291: (3.84615%)&lt;BR/&gt; 4290: (3.84615%)&gt;];
}
4426--6254[label="1;13pkt 13fpkt"];
4426--7461[label="1;13pkt 13fpkt"];
6254--7461[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="192.215.33.120" dst_port="80" src_ip="212.24.2.50"/>
    </slice>
    <from sec="1034226459" usec="0"/>
    <to sec="1034226467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.6.224.50"/>
    </slice>
    <from sec="1034226490" usec="0"/>
    <to sec="1034226700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_923{
style=filled;
color=gray75;
4436[label="85.71.22.51;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6262[label="85.71.22.51;14pkt 14fpkt", shape=invtriangle, color=brown];
7467[label="85.71.22.51;15pkt 15fpkt", shape=invhouse, color=bisque];
stat923[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.71.22.51:80, 185.191.16.84:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3129: (3.40909%)&lt;BR/&gt; 3127: (3.40909%)&lt;BR/&gt; 3125: (3.40909%)&lt;BR/&gt; 3124: (3.40909%)&gt;];
}
4436--6262[label="1;14pkt 14fpkt"];
4436--7467[label="1;15pkt 15fpkt"];
6262--7467[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.16.84" src_ip="85.71.22.51" src_port="80"/>
    </slice>
    <from sec="1034226501" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.66.92.51"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.72.0.52"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.24.4.52"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_927{
style=filled;
color=gray75;
1152[label="212.24.10.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
1153[label="1.35.33.52;s;6pkt 6fpkt", shape=diamond, color=yellow];
1154[label="167.8.200.143;d;1pkt 1fpkt", shape=diamond, color=yellow];
1260[label="212.24.10.61;d;1pkt 1fpkt", shape=diamond, color=yellow];
1504[label="161.238.151.186;d;1pkt 1fpkt", shape=diamond, color=yellow];
2973[label="161.238.151.186;d;1pkt 1fpkt", shape=hexagon, color=black];
3082[label="1.35.33.52;s;6pkt 6fpkt", shape=hexagon, color=black];
3266[label="212.24.10.61;d;1pkt 1fpkt", shape=hexagon, color=black];
4447[label="1.35.33.52;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6270[label="1.35.33.52;5pkt 5fpkt", shape=invtriangle, color=brown];
7473[label="1.35.33.52;6pkt 6fpkt", shape=invhouse, color=bisque];
stat927[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.35.33.52:5001, 212.24.168.166:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 1373: (10%)&lt;BR/&gt; 3896: (8.57143%)&lt;BR/&gt; 3444: (8.57143%)&lt;BR/&gt; 1124: (8.57143%)&gt;];
}
1152--1153[label="1;1pkt 1fpkt"];
1152--3082[label="1;1pkt 1fpkt"];
1152--4447[label="1;1pkt 1fpkt"];
1152--6270[label="1;1pkt 1fpkt"];
1152--7473[label="1;1pkt 1fpkt"];
1153--1154[label="1;1pkt 1fpkt"];
1153--1260[label="1;1pkt 1fpkt"];
1153--1281[label="0.333333;2pkt 2fpkt"];
1153--1504[label="1;1pkt 1fpkt"];
1153--2973[label="1;1pkt 1fpkt"];
1153--3082[label="1;6pkt 6fpkt"];
1153--3266[label="1;1pkt 1fpkt"];
1153--4447[label="1;6pkt 6fpkt"];
1153--6270[label="1;5pkt 5fpkt"];
1153--7473[label="1;6pkt 6fpkt"];
1154--3082[label="1;1pkt 1fpkt"];
1154--4447[label="1;1pkt 1fpkt"];
1154--6270[label="1;1pkt 1fpkt"];
1154--7473[label="1;1pkt 1fpkt"];
1260--3082[label="1;1pkt 1fpkt"];
1260--3266[label="1;1pkt 1fpkt"];
1260--4447[label="1;1pkt 1fpkt"];
1260--7473[label="1;1pkt 1fpkt"];
1504--2973[label="1;1pkt 1fpkt"];
1504--3082[label="1;1pkt 1fpkt"];
1504--4447[label="1;1pkt 1fpkt"];
1504--6270[label="1;1pkt 1fpkt"];
1504--7473[label="1;1pkt 1fpkt"];
2973--3082[label="1;1pkt 1fpkt"];
2973--4447[label="1;1pkt 1fpkt"];
2973--6270[label="1;1pkt 1fpkt"];
2973--7473[label="1;1pkt 1fpkt"];
3082--3266[label="1;1pkt 1fpkt"];
3082--4447[label="1;6pkt 6fpkt"];
3082--6270[label="1;5pkt 5fpkt"];
3082--7473[label="1;6pkt 6fpkt"];
3266--4447[label="1;1pkt 1fpkt"];
3266--7473[label="1;1pkt 1fpkt"];
4447--6270[label="1;5pkt 5fpkt"];
4447--7473[label="1;6pkt 6fpkt"];
6270--7473[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.168.166" src_ip="1.35.33.52" src_port="5001"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_928{
style=filled;
color=gray75;
240[label="1.83.171.52s;53pkt 53fpkt", shape=rectangle, color=red];
4453[label="1.83.171.52;104pkt 104fpkt", shape=pentagon, color=darkviolet];
6273[label="1.83.171.52;103pkt 103fpkt", shape=invtriangle, color=brown];
stat928[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.83.171.52:1065, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1065: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
240--4453[label="1;53pkt 53fpkt"];
240--6273[label="0.981132;52pkt 52fpkt"];
4453--6273[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.83.171.52" src_port="1065"/>
    </slice>
    <from sec="1034226657" usec="0"/>
    <to sec="1034226673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.37522,2.18612,999,1 0 0 1 1 1 0 0 0 1 1 0 ">
    <description>subgraph cluster_929{
style=filled;
color=gray75;
31[label="1.35.33.53s;2pkt 2fpkt", shape=rectangle, color=red];
1275[label="212.24.173.157;d;2pkt 2fpkt", shape=diamond, color=yellow];
1551[label="212.24.25.121;d;2pkt 2fpkt", shape=diamond, color=yellow];
1552[label="1.35.33.53;s;9pkt 9fpkt", shape=diamond, color=yellow];
2987[label="212.24.25.121;d;2pkt 2fpkt", shape=hexagon, color=black];
3126[label="1.35.33.53;s;9pkt 9fpkt", shape=hexagon, color=black];
3539[label="212.24.173.157;d;2pkt 2fpkt", shape=hexagon, color=black];
3865[label="1.35.33.53;s;3pkt 3fpkt", shape=polygon, color=gold];
4455[label="1.35.33.53;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6274[label="1.35.33.53;2pkt 2fpkt", shape=invtriangle, color=brown];
stat929[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.35.33.53:5001, *:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (45.8333%)&lt;BR/&gt; 1270: (9.72222%)&lt;BR/&gt; 3048: (6.94444%)&lt;BR/&gt; 1151: (5.55556%)&lt;BR/&gt; 40395: (4.16667%)&gt;];
}
31--1275[label="0.5;1pkt 1fpkt"];
31--1552[label="0.5;1pkt 1fpkt"];
31--2101[label="0.5;1pkt 1fpkt"];
31--2293[label="0.5;1pkt 1fpkt"];
31--3126[label="0.5;1pkt 1fpkt"];
31--3467[label="0.5;1pkt 1fpkt"];
31--3539[label="0.5;1pkt 1fpkt"];
31--4455[label="0.5;1pkt 1fpkt"];
31--5220[label="1;1pkt 1fpkt"];
31--6274[label="0.5;1pkt 1fpkt"];
1275--1276[label="0.5;1pkt 1fpkt"];
1275--1552[label="0.5;1pkt 1fpkt"];
1275--3111[label="1;1pkt 1fpkt"];
1275--3126[label="0.5;1pkt 1fpkt"];
1275--3539[label="1;2pkt 2fpkt"];
1275--4455[label="0.5;1pkt 1fpkt"];
1275--6256[label="0.5;1pkt 1fpkt"];
1275--6274[label="0.5;1pkt 1fpkt"];
1275--7462[label="0.5;1pkt 1fpkt"];
1551--1552[label="0.5;1pkt 1fpkt"];
1551--2987[label="1;2pkt 2fpkt"];
1551--3126[label="0.5;1pkt 1fpkt"];
1551--3865[label="0.5;1pkt 1fpkt"];
1552--2816[label="0.111111;1pkt 1fpkt"];
1552--2987[label="0.5;1pkt 1fpkt"];
1552--3126[label="1;9pkt 9fpkt"];
1552--3490[label="0.111111;1pkt 1fpkt"];
1552--3539[label="0.5;1pkt 1fpkt"];
1552--3865[label="1;3pkt 3fpkt"];
1552--4455[label="1;3pkt 3fpkt"];
1552--6274[label="1;2pkt 2fpkt"];
2987--3126[label="0.5;1pkt 1fpkt"];
2987--3865[label="0.5;1pkt 1fpkt"];
3126--3490[label="0.111111;1pkt 1fpkt"];
3126--3539[label="0.5;1pkt 1fpkt"];
3126--3865[label="1;3pkt 3fpkt"];
3126--4455[label="1;3pkt 3fpkt"];
3126--6274[label="1;2pkt 2fpkt"];
3539--4455[label="0.5;1pkt 1fpkt"];
3539--6256[label="0.5;1pkt 1fpkt"];
3539--6274[label="0.5;1pkt 1fpkt"];
3539--7462[label="0.5;1pkt 1fpkt"];
4455--6274[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="1.35.33.53" src_port="5001"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_930{
style=filled;
color=gray75;
4461[label="202.227.49.54;167pkt 167fpkt", shape=pentagon, color=darkviolet];
6276[label="202.227.49.54;166pkt 166fpkt", shape=invtriangle, color=brown];
7476[label="202.227.49.54;167pkt 167fpkt", shape=invhouse, color=bisque];
stat930[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.227.49.54:1044, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1044: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4461--6276[label="1;166pkt 166fpkt"];
4461--7476[label="1;167pkt 167fpkt"];
6276--7476[label="1;166pkt 166fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.227.49.54" src_port="1044"/>
    </slice>
    <from sec="1034226651" usec="0"/>
    <to sec="1034226677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_931{
style=filled;
color=gray75;
4467[label="86.135.43.55;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6281[label="86.135.43.55;8pkt 8fpkt", shape=invtriangle, color=brown];
7479[label="86.135.43.55;9pkt 9fpkt", shape=invhouse, color=bisque];
stat931[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.135.43.55:80, 141.98.11.4:*}[66.6667%]&lt;BR/&gt;{86.135.43.55:80, 212.18.106.107:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49219: (6%)&lt;BR/&gt; 49192: (6%)&lt;BR/&gt; 49188: (6%)&lt;BR/&gt; 49187: (6%)&gt;];
}
4467--6281[label="1;8pkt 8fpkt"];
4467--7479[label="1;8pkt 8fpkt"];
6281--7479[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.11.4" src_ip="86.135.43.55" src_port="80"/>
      <filter dst_ip="212.18.106.107" src_ip="86.135.43.55" src_port="80"/>
    </slice>
    <from sec="1034226141" usec="0"/>
    <to sec="1034226705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_932{
style=filled;
color=gray75;
4472[label="216.64.89.56;135pkt 135fpkt", shape=pentagon, color=darkviolet];
6284[label="216.64.89.56;134pkt 134fpkt", shape=invtriangle, color=brown];
7481[label="216.64.89.56;134pkt 134fpkt", shape=invhouse, color=bisque];
stat932[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.64.89.56:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4472--6284[label="1;134pkt 134fpkt"];
4472--7481[label="1;134pkt 134fpkt"];
6284--7481[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.64.89.56" src_port="1025"/>
    </slice>
    <from sec="1034226776" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_933{
style=filled;
color=gray75;
4473[label="136.230.110.56;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6285[label="136.230.110.56;4pkt 4fpkt", shape=invtriangle, color=brown];
7482[label="136.230.110.56;5pkt 5fpkt", shape=invhouse, color=bisque];
stat933[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.110.56:25, 86.135.44.191:28660}[20%]&lt;BR/&gt;{136.230.110.56:80, 43.16.65.30:2913}[20%]&lt;BR/&gt;{136.230.110.56:80, 43.16.65.30:2914}[20%]&lt;BR/&gt;{136.230.110.56:80, 43.16.65.30:2915}[20%]&lt;BR/&gt;{136.230.110.56:80, 43.16.65.30:2916}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.1538%)&lt;BR/&gt; 2916: (11.5385%)&lt;BR/&gt; 2915: (11.5385%)&lt;BR/&gt; 2914: (11.5385%)&lt;BR/&gt; 2913: (11.5385%)&gt;];
}
4473--6285[label="1;4pkt 4fpkt"];
4473--7482[label="1;4pkt 4fpkt"];
6285--7482[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="43.16.65.30" dst_port="2916" src_ip="136.230.110.56" src_port="80"/>
      <filter dst_ip="43.16.65.30" dst_port="2915" src_ip="136.230.110.56" src_port="80"/>
      <filter dst_ip="43.16.65.30" dst_port="2914" src_ip="136.230.110.56" src_port="80"/>
      <filter dst_ip="43.16.65.30" dst_port="2913" src_ip="136.230.110.56" src_port="80"/>
      <filter dst_ip="86.135.44.191" dst_port="28660" src_ip="136.230.110.56" src_port="25"/>
    </slice>
    <from sec="1034226347" usec="0"/>
    <to sec="1034226388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.238.66.57"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.238.178.58"/>
    </slice>
    <from sec="1034226016" usec="0"/>
    <to sec="1034226051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_936{
style=filled;
color=gray75;
4494[label="85.8.72.59;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6300[label="85.8.72.59;2pkt 2fpkt", shape=invtriangle, color=brown];
stat936[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.8.72.59:9000, 185.191.16.131:1862}[50%]&lt;BR/&gt;{85.8.72.59:9000, 185.191.16.131:1866}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9000: (50%)&lt;BR/&gt; 1866: (25%)&lt;BR/&gt; 1862: (25%)&gt;];
}
4494--6300[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.16.131" dst_port="1866" src_ip="85.8.72.59" src_port="9000"/>
      <filter dst_ip="185.191.16.131" dst_port="1862" src_ip="85.8.72.59" src_port="9000"/>
    </slice>
    <from sec="1034226192" usec="0"/>
    <to sec="1034226549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.105.172.60"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.17.215.61"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_939{
style=filled;
color=gray75;
4509[label="212.210.27.62;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6308[label="212.210.27.62;4pkt 4fpkt", shape=invtriangle, color=brown];
7499[label="212.210.27.62;4pkt 4fpkt", shape=invhouse, color=bisque];
stat939[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.210.27.62:32768, 167.164.21.232:137}[25%]&lt;BR/&gt;{212.210.27.62:32768, 167.164.21.252:137}[25%]&lt;BR/&gt;{212.210.27.62:32768, 167.164.21.254:137}[25%]&lt;BR/&gt;{212.210.27.62:32768, 167.164.21.255:137}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32768: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4509--6308[label="1;4pkt 4fpkt"];
4509--7499[label="1;4pkt 4fpkt"];
6308--7499[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="167.164.21.255" dst_port="137" src_ip="212.210.27.62" src_port="32768"/>
      <filter dst_ip="167.164.21.254" dst_port="137" src_ip="212.210.27.62" src_port="32768"/>
      <filter dst_ip="167.164.21.252" dst_port="137" src_ip="212.210.27.62" src_port="32768"/>
      <filter dst_ip="167.164.21.232" dst_port="137" src_ip="212.210.27.62" src_port="32768"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_940{
style=filled;
color=gray75;
388[label="1.26.147.63s;50pkt 50fpkt", shape=rectangle, color=red];
4521[label="1.26.147.63;115pkt 115fpkt", shape=pentagon, color=darkviolet];
6316[label="1.26.147.63;115pkt 115fpkt", shape=invtriangle, color=brown];
7502[label="1.26.147.63;116pkt 116fpkt", shape=invhouse, color=bisque];
stat940[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.26.147.63:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 6475: (0.505051%)&lt;BR/&gt; 6471: (0.505051%)&lt;BR/&gt; 6468: (0.505051%)&lt;BR/&gt; 6465: (0.505051%)&gt;];
}
388--4521[label="1;50pkt 50fpkt"];
388--6316[label="1;50pkt 50fpkt"];
388--7502[label="1;50pkt 50fpkt"];
4521--6316[label="1;115pkt 115fpkt"];
4521--7502[label="1;115pkt 115fpkt"];
6316--7502[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.26.147.63"/>
    </slice>
    <from sec="1034226088" usec="0"/>
    <to sec="1034226110" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_941{
style=filled;
color=gray75;
1346[label="212.24.7.90;d;160pkt 160fpkt", shape=diamond, color=yellow];
1818[label="1.123.53.64;s;346pkt 346fpkt", shape=diamond, color=yellow];
1858[label="161.238.11.119;d;170pkt 170fpkt", shape=diamond, color=yellow];
2094[label="85.34.69.62;s;14pkt 14fpkt", shape=diamond, color=yellow];
2340[label="1.121.92.35;s;6pkt 6fpkt", shape=diamond, color=yellow];
2483[label="167.164.226.230;d;65pkt 65fpkt", shape=diamond, color=yellow];
3310[label="1.123.53.64;s;346pkt 346fpkt", shape=hexagon, color=black];
3596[label="161.238.11.119;d;166pkt 166fpkt", shape=hexagon, color=black];
3889[label="1.123.53.64;s;271pkt 271fpkt", shape=polygon, color=gold];
4278[label="1.121.92.35;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4511[label="85.34.69.62;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4526[label="1.123.53.64;346pkt 346fpkt", shape=pentagon, color=darkviolet];
4783[label="1.123.53.92;68pkt 68fpkt", shape=pentagon, color=darkviolet];
5348[label="1.123.53.167;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6319[label="1.123.53.64;345pkt 345fpkt", shape=invtriangle, color=brown];
6482[label="1.123.53.92;68pkt 68fpkt", shape=invtriangle, color=brown];
7505[label="1.123.53.64;346pkt 346fpkt", shape=invhouse, color=bisque];
stat941[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 212.24.7.90:*}[28.5714%]&lt;BR/&gt;{*:80, 161.238.11.119:*}[28.223%]&lt;BR/&gt;{1.123.53.64:80, 161.238.19.89:*}[20.5575%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7264%)&lt;BR/&gt; 443: (0.255381%)&lt;BR/&gt; 3452: (0.145932%)&lt;BR/&gt; 3450: (0.145932%)&lt;BR/&gt; 3449: (0.145932%)&gt;];
}
1346--1818[label="0.59375;95pkt 95fpkt"];
1346--3310[label="0.59375;95pkt 95fpkt"];
1346--3889[label="0.44375;71pkt 71fpkt"];
1346--3950[label="0.01875;3pkt 3fpkt"];
1346--4526[label="0.59375;95pkt 95fpkt"];
1346--4783[label="0.882353;60pkt 60fpkt"];
1346--6319[label="0.5875;94pkt 94fpkt"];
1346--6482[label="0.882353;60pkt 60fpkt"];
1346--7505[label="0.59375;95pkt 95fpkt"];
1818--1858[label="0.258824;44pkt 44fpkt"];
1818--1899[label="0.0365854;3pkt 3fpkt"];
1818--2483[label="0.538462;35pkt 35fpkt"];
1818--3310[label="1;346pkt 346fpkt"];
1818--3596[label="0.26506;44pkt 44fpkt"];
1818--3889[label="1;271pkt 271fpkt"];
1818--4526[label="1;346pkt 346fpkt"];
1818--6319[label="1;345pkt 345fpkt"];
1818--7505[label="1;346pkt 346fpkt"];
1858--2094[label="0.928571;13pkt 13fpkt"];
1858--2166[label="0.0823529;14pkt 14fpkt"];
1858--2257[label="0.025;1pkt 1fpkt"];
1858--2340[label="1;6pkt 6fpkt"];
1858--2457[label="0.0992908;14pkt 14fpkt"];
1858--3310[label="0.258824;44pkt 44fpkt"];
1858--3450[label="0.025;1pkt 1fpkt"];
1858--3596[label="1;166pkt 166fpkt"];
1858--3889[label="0.258824;44pkt 44fpkt"];
1858--3950[label="0.0823529;14pkt 14fpkt"];
1858--3953[label="0.00588235;1pkt 1fpkt"];
1858--4179[label="0.166667;5pkt 5fpkt"];
1858--4221[label="0.0408163;2pkt 2fpkt"];
1858--4278[label="1;5pkt 5fpkt"];
1858--4511[label="0.923077;12pkt 12fpkt"];
1858--4526[label="0.258824;44pkt 44fpkt"];
1858--4530[label="0.02;1pkt 1fpkt"];
1858--5151[label="0.00588235;1pkt 1fpkt"];
1858--5275[label="0.025641;1pkt 1fpkt"];
1858--5367[label="0.2;2pkt 2fpkt"];
1858--5699[label="0.0972222;14pkt 14fpkt"];
1858--5743[label="0.0410959;3pkt 3fpkt"];
1858--6089[label="0.166667;5pkt 5fpkt"];
1858--6118[label="0.0416667;2pkt 2fpkt"];
1858--6319[label="0.258824;44pkt 44fpkt"];
1858--6322[label="0.0204082;1pkt 1fpkt"];
1858--6826[label="0.025;1pkt 1fpkt"];
1858--7108[label="0.0965517;14pkt 14fpkt"];
1858--7137[label="0.0416667;3pkt 3fpkt"];
1858--7356[label="0.172414;5pkt 5fpkt"];
1858--7505[label="0.258824;44pkt 44fpkt"];
1858--7993[label="0.0972222;14pkt 14fpkt"];
2094--3596[label="0.928571;13pkt 13fpkt"];
2094--4511[label="1;13pkt 13fpkt"];
2340--3596[label="0.666667;4pkt 4fpkt"];
2340--4278[label="1;5pkt 5fpkt"];
2483--3310[label="0.538462;35pkt 35fpkt"];
2483--3889[label="0.538462;35pkt 35fpkt"];
2483--4526[label="0.538462;35pkt 35fpkt"];
2483--4783[label="0.0307692;2pkt 2fpkt"];
2483--5348[label="1;6pkt 6fpkt"];
2483--6319[label="0.538462;35pkt 35fpkt"];
2483--6482[label="0.0307692;2pkt 2fpkt"];
2483--7505[label="0.538462;35pkt 35fpkt"];
3310--3596[label="0.26506;44pkt 44fpkt"];
3310--3889[label="1;271pkt 271fpkt"];
3310--4526[label="1;346pkt 346fpkt"];
3310--6319[label="1;345pkt 345fpkt"];
3310--7505[label="1;346pkt 346fpkt"];
3596--3889[label="0.26506;44pkt 44fpkt"];
3596--3950[label="0.0843373;14pkt 14fpkt"];
3596--4179[label="0.166667;5pkt 5fpkt"];
3596--4221[label="0.0408163;2pkt 2fpkt"];
3596--4278[label="0.6;3pkt 3fpkt"];
3596--4511[label="0.923077;12pkt 12fpkt"];
3596--4526[label="0.26506;44pkt 44fpkt"];
3596--4530[label="0.02;1pkt 1fpkt"];
3596--5275[label="0.025641;1pkt 1fpkt"];
3596--5367[label="0.2;2pkt 2fpkt"];
3596--5699[label="0.0972222;14pkt 14fpkt"];
3596--5743[label="0.0410959;3pkt 3fpkt"];
3596--6089[label="0.166667;5pkt 5fpkt"];
3596--6118[label="0.0416667;2pkt 2fpkt"];
3596--6319[label="0.26506;44pkt 44fpkt"];
3596--6322[label="0.0204082;1pkt 1fpkt"];
3596--6826[label="0.025;1pkt 1fpkt"];
3596--7108[label="0.0965517;14pkt 14fpkt"];
3596--7137[label="0.0416667;3pkt 3fpkt"];
3596--7356[label="0.172414;5pkt 5fpkt"];
3596--7505[label="0.26506;44pkt 44fpkt"];
3596--7993[label="0.0972222;14pkt 14fpkt"];
3889--4526[label="1;271pkt 271fpkt"];
3889--6319[label="0.99631;270pkt 270fpkt"];
3889--7505[label="1;271pkt 271fpkt"];
4526--6319[label="1;345pkt 345fpkt"];
4526--7505[label="1;346pkt 346fpkt"];
4783--6482[label="1;68pkt 68fpkt"];
6319--7505[label="1;345pkt 345fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.11.119" src_port="80"/>
      <filter dst_ip="212.24.7.90" src_port="80"/>
      <filter dst_ip="161.238.19.89" src_ip="1.123.53.64" src_port="80"/>
    </slice>
    <from sec="1034226010" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_942{
style=filled;
color=gray75;
4528[label="192.87.66.64;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6320[label="192.87.66.64;1pkt 1fpkt", shape=invtriangle, color=brown];
stat942[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.87.66.64:80, 185.191.166.240:1554}[50%]&lt;BR/&gt;{192.87.66.64:80, 185.191.166.240:1555}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1555: (33.3333%)&lt;BR/&gt; 1554: (16.6667%)&gt;];
}
4528--6320[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.166.240" dst_port="1555" src_ip="192.87.66.64" src_port="80"/>
      <filter dst_ip="185.191.166.240" dst_port="1554" src_ip="192.87.66.64" src_port="80"/>
    </slice>
    <from sec="1034226504" usec="0"/>
    <to sec="1034226527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_943{
style=filled;
color=gray75;
4531[label="213.91.97.64;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6323[label="213.91.97.64;15pkt 15fpkt", shape=invtriangle, color=brown];
7506[label="213.91.97.64;16pkt 16fpkt", shape=invhouse, color=bisque];
stat943[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.97.64:80, 213.189.157.111:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2321: (3.26087%)&lt;BR/&gt; 2301: (3.26087%)&lt;BR/&gt; 2277: (3.26087%)&lt;BR/&gt; 2249: (3.26087%)&gt;];
}
4531--6323[label="1;15pkt 15fpkt"];
4531--7506[label="1;15pkt 15fpkt"];
6323--7506[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="213.189.157.111" src_ip="213.91.97.64" src_port="80"/>
    </slice>
    <from sec="1034226384" usec="0"/>
    <to sec="1034226405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.234.21.65"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.200.92.65"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_946{
style=filled;
color=gray75;
4543[label="161.238.180.65;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6330[label="161.238.180.65;2pkt 2fpkt", shape=invtriangle, color=brown];
stat946[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.180.65:0, 87.12.95.117:0}[50%]&lt;BR/&gt;{161.238.180.65:0, 81.83.181.242:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4543--6330[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="81.83.181.242" src_ip="161.238.180.65"/>
      <filter dst_ip="87.12.95.117" src_ip="161.238.180.65"/>
    </slice>
    <from sec="1034226152" usec="0"/>
    <to sec="1034226536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_947{
style=filled;
color=gray75;
4545[label="195.116.242.65;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6332[label="195.116.242.65;2pkt 2fpkt", shape=invtriangle, color=brown];
stat947[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.116.242.65:80, 161.238.19.125:1534}[50%]&lt;BR/&gt;{195.116.242.65:80, 161.238.19.125:1535}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1535: (25%)&lt;BR/&gt; 1534: (25%)&gt;];
}
4545--6332[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.19.125" dst_port="1535" src_ip="195.116.242.65" src_port="80"/>
      <filter dst_ip="161.238.19.125" dst_port="1534" src_ip="195.116.242.65" src_port="80"/>
    </slice>
    <from sec="1034226655" usec="0"/>
    <to sec="1034226697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_948{
style=filled;
color=gray75;
4553[label="195.116.244.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6338[label="195.116.244.66;1pkt 1fpkt", shape=invtriangle, color=brown];
7514[label="195.116.244.66;1pkt 1fpkt", shape=invhouse, color=bisque];
stat948[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.116.244.66:554, 161.238.38.205:6970}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6970: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
4553--6338[label="1;1pkt 1fpkt"];
4553--7514[label="1;1pkt 1fpkt"];
6338--7514[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.38.205" dst_port="6970" src_ip="195.116.244.66" src_port="554"/>
    </slice>
    <from sec="1034226235" usec="0"/>
    <to sec="1034226242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_949{
style=filled;
color=gray75;
1415[label="212.24.19.67;s;3pkt 3fpkt", shape=diamond, color=yellow];
4554[label="212.24.19.67;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6339[label="212.24.19.67;2pkt 2fpkt", shape=invtriangle, color=brown];
7515[label="212.24.19.67;2pkt 2fpkt", shape=invhouse, color=bisque];
stat949[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.19.67:3155, 195.239.57.44:6699}[33.3333%]&lt;BR/&gt;{212.24.19.67:3160, 43.216.52.73:6699}[33.3333%]&lt;BR/&gt;{212.24.19.67:3159, 193.78.199.178:6699}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3160: (22.2222%)&lt;BR/&gt; 3159: (22.2222%)&lt;BR/&gt; 3155: (5.55556%)&gt;];
}
1415--1665[label="1;1pkt 1fpkt"];
1415--3032[label="1;1pkt 1fpkt"];
1415--4554[label="1;2pkt 2fpkt"];
1415--6339[label="1;2pkt 2fpkt"];
1415--7515[label="1;2pkt 2fpkt"];
4554--6339[label="1;2pkt 2fpkt"];
4554--7515[label="1;2pkt 2fpkt"];
6339--7515[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.78.199.178" dst_port="6699" src_ip="212.24.19.67" src_port="3159"/>
      <filter dst_ip="43.216.52.73" dst_port="6699" src_ip="212.24.19.67" src_port="3160"/>
      <filter dst_ip="195.239.57.44" dst_port="6699" src_ip="212.24.19.67" src_port="3155"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658063,2.10925,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_950{
style=filled;
color=gray75;
1380[label="86.65.161.67;s;98pkt 98fpkt", shape=diamond, color=yellow];
4557[label="86.65.161.67;99pkt 99fpkt", shape=pentagon, color=darkviolet];
6341[label="86.65.161.67;99pkt 99fpkt", shape=invtriangle, color=brown];
stat950[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.65.161.67:80, 212.18.73.85:*}[98.9899%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 12423: (0.506757%)&lt;BR/&gt; 12422: (0.506757%)&lt;BR/&gt; 12139: (0.506757%)&lt;BR/&gt; 11975: (0.506757%)&gt;];
}
1380--3950[label="0.0102041;1pkt 1fpkt"];
1380--4557[label="1;98pkt 98fpkt"];
1380--6341[label="1;98pkt 98fpkt"];
4557--6341[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.73.85" src_ip="86.65.161.67" src_port="80"/>
    </slice>
    <from sec="1034226084" usec="0"/>
    <to sec="1034226585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.193.163.67"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.97.144.68"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_953{
style=filled;
color=gray75;
4577[label="209.199.166.69;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6352[label="209.199.166.69;13pkt 13fpkt", shape=invtriangle, color=brown];
7522[label="209.199.166.69;13pkt 13fpkt", shape=invhouse, color=bisque];
stat953[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.199.166.69:80, 167.8.68.160:*}[92.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 14435: (3.84615%)&lt;BR/&gt; 3150: (3.84615%)&lt;BR/&gt; 3148: (3.84615%)&lt;BR/&gt; 3145: (3.84615%)&gt;];
}
4577--6352[label="1;13pkt 13fpkt"];
4577--7522[label="1;13pkt 13fpkt"];
6352--7522[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.68.160" src_ip="209.199.166.69" src_port="80"/>
    </slice>
    <from sec="1034226609" usec="0"/>
    <to sec="1034226786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="167.1.93.71"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_955{
style=filled;
color=gray75;
4596[label="195.116.245.71;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6364[label="195.116.245.71;2pkt 2fpkt", shape=invtriangle, color=brown];
7529[label="195.116.245.71;2pkt 2fpkt", shape=invhouse, color=bisque];
stat955[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.116.245.71:45091, 161.238.61.232:80}[50%]&lt;BR/&gt;{195.116.245.71:45093, 161.238.61.232:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45093: (30%)&lt;BR/&gt; 45091: (20%)&gt;];
}
4596--6364[label="1;1pkt 1fpkt"];
4596--7529[label="1;1pkt 1fpkt"];
6364--7529[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.61.232" dst_port="80" src_ip="195.116.245.71" src_port="45093"/>
      <filter dst_ip="161.238.61.232" dst_port="80" src_ip="195.116.245.71" src_port="45091"/>
    </slice>
    <from sec="1034226047" usec="0"/>
    <to sec="1034226076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_956{
style=filled;
color=gray75;
4598[label="212.18.92.72;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6366[label="212.18.92.72;6pkt 6fpkt", shape=invtriangle, color=brown];
stat956[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.18.92.72:53, *:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (40.9091%)&lt;BR/&gt; 54330: (9.09091%)&lt;BR/&gt; 49152: (9.09091%)&lt;BR/&gt; 37050: (9.09091%)&lt;BR/&gt; 1741: (9.09091%)&gt;];
}
4598--6366[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="212.18.92.72" src_port="53"/>
    </slice>
    <from sec="1034226071" usec="0"/>
    <to sec="1034226648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658063,2.10925,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_957{
style=filled;
color=gray75;
2376[label="136.230.119.72;s;13pkt 13fpkt", shape=diamond, color=yellow];
4602[label="136.230.119.72;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6369[label="136.230.119.72;2pkt 2fpkt", shape=invtriangle, color=brown];
stat957[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.119.72:*, 86.135.42.64:5001}[30.7692%]&lt;BR/&gt;{136.230.119.72:*, *:5100}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (28.125%)&lt;BR/&gt; 5100: (18.75%)&lt;BR/&gt; 1176: (9.375%)&lt;BR/&gt; 1208: (6.25%)&lt;BR/&gt; 1206: (3.125%)&gt;];
}
2376--4602[label="1;1pkt 1fpkt"];
2376--6369[label="1;2pkt 2fpkt"];
4602--6369[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="5100" src_ip="136.230.119.72"/>
      <filter dst_ip="86.135.42.64" dst_port="5001" src_ip="136.230.119.72"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.177.152.72"/>
    </slice>
    <from sec="1034226009" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_959{
style=filled;
color=gray75;
4607[label="161.238.248.72;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6373[label="161.238.248.72;6pkt 6fpkt", shape=invtriangle, color=brown];
7533[label="161.238.248.72;6pkt 6fpkt", shape=invhouse, color=bisque];
stat959[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.248.72:*, 85.34.123.162:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1115: (8.33333%)&lt;BR/&gt; 1114: (8.33333%)&lt;BR/&gt; 1113: (8.33333%)&lt;BR/&gt; 1112: (8.33333%)&gt;];
}
4607--6373[label="1;6pkt 6fpkt"];
4607--7533[label="1;6pkt 6fpkt"];
6373--7533[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="85.34.123.162" dst_port="80" src_ip="161.238.248.72"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_960{
style=filled;
color=gray75;
4610[label="161.238.13.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6375[label="161.238.13.73;2pkt 2fpkt", shape=invtriangle, color=brown];
7535[label="161.238.13.73;2pkt 2fpkt", shape=invhouse, color=bisque];
stat960[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.13.73:1367, 85.34.109.6:1863}[50%]&lt;BR/&gt;{161.238.13.73:1629, 85.34.108.251:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1629: (30%)&lt;BR/&gt; 1367: (20%)&gt;];
}
4610--6375[label="1;1pkt 1fpkt"];
4610--7535[label="1;1pkt 1fpkt"];
6375--7535[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="85.34.108.251" dst_port="1863" src_ip="161.238.13.73" src_port="1629"/>
      <filter dst_ip="85.34.109.6" dst_port="1863" src_ip="161.238.13.73" src_port="1367"/>
    </slice>
    <from sec="1034226009" usec="0"/>
    <to sec="1034226654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_961{
style=filled;
color=gray75;
4612[label="136.230.78.73;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6377[label="136.230.78.73;7pkt 7fpkt", shape=invtriangle, color=brown];
stat961[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.78.73:*, 85.94.235.144:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1649: (7.14286%)&lt;BR/&gt; 1645: (7.14286%)&lt;BR/&gt; 1644: (7.14286%)&lt;BR/&gt; 1643: (7.14286%)&gt;];
}
4612--6377[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="85.94.235.144" dst_port="443" src_ip="136.230.78.73"/>
    </slice>
    <from sec="1034226417" usec="0"/>
    <to sec="1034226664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_962{
style=filled;
color=gray75;
254[label="1.137.88.73s;187pkt 187fpkt", shape=rectangle, color=red];
4613[label="1.137.88.73;242pkt 242fpkt", shape=pentagon, color=darkviolet];
6378[label="1.137.88.73;242pkt 242fpkt", shape=invtriangle, color=brown];
7537[label="1.137.88.73;242pkt 242fpkt", shape=invhouse, color=bisque];
stat962[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.137.88.73:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
254--442[label="0.208556;39pkt 39fpkt"];
254--544[label="0.208556;39pkt 39fpkt"];
254--4613[label="1;187pkt 187fpkt"];
254--6378[label="1;187pkt 187fpkt"];
254--7537[label="1;187pkt 187fpkt"];
4613--6378[label="1;242pkt 242fpkt"];
4613--7537[label="1;242pkt 242fpkt"];
6378--7537[label="1;242pkt 242fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.137.88.73" src_port="1025"/>
    </slice>
    <from sec="1034226741" usec="0"/>
    <to sec="1034226780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.200.92.74"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.32.113.74"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_965{
style=filled;
color=gray75;
4627[label="167.8.132.74;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6389[label="167.8.132.74;17pkt 17fpkt", shape=invtriangle, color=brown];
7543[label="167.8.132.74;16pkt 16fpkt", shape=invhouse, color=bisque];
stat965[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.132.74:80, 81.115.100.59:*}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57053: (3.06122%)&lt;BR/&gt; 55652: (3.06122%)&lt;BR/&gt; 43795: (3.06122%)&lt;BR/&gt; 43493: (3.06122%)&gt;];
}
4627--6389[label="1;16pkt 16fpkt"];
4627--7543[label="1;16pkt 16fpkt"];
6389--7543[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="81.115.100.59" src_ip="167.8.132.74" src_port="80"/>
    </slice>
    <from sec="1034226317" usec="0"/>
    <to sec="1034226762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_966{
style=filled;
color=gray75;
1156[label="202.138.232.74;s;1181pkt 1181fpkt", shape=diamond, color=yellow];
1157[label="161.238.213.201;d;1244pkt 1244fpkt", shape=diamond, color=yellow];
1892[label="1.35.33.5;s;4pkt 4fpkt", shape=diamond, color=yellow];
2119[label="203.237.28.26;s;45pkt 45fpkt", shape=diamond, color=yellow];
2816[label="161.238.213.201;d;1244pkt 1244fpkt", shape=hexagon, color=black];
3189[label="1.35.33.5;s;4pkt 4fpkt", shape=hexagon, color=black];
3351[label="203.237.28.26;s;27pkt 27fpkt", shape=hexagon, color=black];
3384[label="202.138.232.74;s;837pkt 837fpkt", shape=hexagon, color=black];
3828[label="161.238.213.201;d;583pkt 583fpkt", shape=polygon, color=gold];
4027[label="1.35.33.5;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4203[label="203.237.28.26;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4630[label="202.138.232.74;1294pkt 1294fpkt", shape=pentagon, color=darkviolet];
5976[label="1.35.33.5;4pkt 4fpkt", shape=invtriangle, color=brown];
6391[label="202.138.232.74;1294pkt 1294fpkt", shape=invtriangle, color=brown];
7289[label="1.35.33.5;4pkt 4fpkt", shape=invhouse, color=bisque];
7545[label="202.138.232.74;1294pkt 1294fpkt", shape=invhouse, color=bisque];
stat966[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.138.232.74:80, 161.238.213.201:*}[95.3608%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7352%)&lt;BR/&gt; 4917: (0.0441355%)&lt;BR/&gt; 4916: (0.0441355%)&lt;BR/&gt; 4915: (0.0441355%)&lt;BR/&gt; 2643: (0.0441355%)&gt;];
}
1156--1157[label="1;1181pkt 1181fpkt"];
1156--2816[label="1;1181pkt 1181fpkt"];
1156--3384[label="1;837pkt 837fpkt"];
1156--3828[label="0.950257;554pkt 554fpkt"];
1156--3950[label="0.0702794;83pkt 83fpkt"];
1156--4630[label="0.999153;1180pkt 1180fpkt"];
1156--6391[label="0.999153;1180pkt 1180fpkt"];
1156--7545[label="0.999153;1180pkt 1180fpkt"];
1157--1552[label="0.111111;1pkt 1fpkt"];
1157--1892[label="1;4pkt 4fpkt"];
1157--2119[label="1;45pkt 45fpkt"];
1157--2816[label="1;1244pkt 1244fpkt"];
1157--3126[label="0.111111;1pkt 1fpkt"];
1157--3189[label="1;4pkt 4fpkt"];
1157--3351[label="1;27pkt 27fpkt"];
1157--3384[label="1;837pkt 837fpkt"];
1157--3828[label="1;583pkt 583fpkt"];
1157--3950[label="0.0675241;84pkt 84fpkt"];
1157--3996[label="0.0566038;3pkt 3fpkt"];
1157--4027[label="1;3pkt 3fpkt"];
1157--4203[label="1;1pkt 1fpkt"];
1157--4630[label="0.948553;1180pkt 1180fpkt"];
1157--5953[label="0.0566038;3pkt 3fpkt"];
1157--5976[label="1;4pkt 4fpkt"];
1157--6391[label="0.948553;1180pkt 1180fpkt"];
1157--7274[label="0.0566038;3pkt 3fpkt"];
1157--7289[label="1;4pkt 4fpkt"];
1157--7545[label="0.948553;1180pkt 1180fpkt"];
1892--2816[label="1;4pkt 4fpkt"];
1892--3189[label="1;4pkt 4fpkt"];
1892--3828[label="1;4pkt 4fpkt"];
1892--4027[label="1;3pkt 3fpkt"];
1892--5976[label="1;4pkt 4fpkt"];
1892--7289[label="1;4pkt 4fpkt"];
2119--2816[label="1;45pkt 45fpkt"];
2119--3351[label="1;27pkt 27fpkt"];
2119--3828[label="0.4;18pkt 18fpkt"];
2119--4203[label="1;1pkt 1fpkt"];
2816--3126[label="0.111111;1pkt 1fpkt"];
2816--3189[label="1;4pkt 4fpkt"];
2816--3351[label="1;27pkt 27fpkt"];
2816--3384[label="1;837pkt 837fpkt"];
2816--3828[label="1;583pkt 583fpkt"];
2816--3950[label="0.0675241;84pkt 84fpkt"];
2816--3996[label="0.0566038;3pkt 3fpkt"];
2816--4027[label="1;3pkt 3fpkt"];
2816--4203[label="1;1pkt 1fpkt"];
2816--4630[label="0.948553;1180pkt 1180fpkt"];
2816--5953[label="0.0566038;3pkt 3fpkt"];
2816--5976[label="1;4pkt 4fpkt"];
2816--6391[label="0.948553;1180pkt 1180fpkt"];
2816--7274[label="0.0566038;3pkt 3fpkt"];
2816--7289[label="1;4pkt 4fpkt"];
2816--7545[label="0.948553;1180pkt 1180fpkt"];
3189--3828[label="1;4pkt 4fpkt"];
3189--4027[label="1;3pkt 3fpkt"];
3189--5976[label="1;4pkt 4fpkt"];
3189--7289[label="1;4pkt 4fpkt"];
3351--3828[label="0.666667;18pkt 18fpkt"];
3384--3828[label="0.950257;554pkt 554fpkt"];
3384--3950[label="0.0991637;83pkt 83fpkt"];
3384--4630[label="0.998805;836pkt 836fpkt"];
3384--6391[label="0.998805;836pkt 836fpkt"];
3384--7545[label="0.998805;836pkt 836fpkt"];
3828--3950[label="0.144082;84pkt 84fpkt"];
3828--4027[label="1;3pkt 3fpkt"];
3828--4630[label="0.948542;553pkt 553fpkt"];
3828--5976[label="1;4pkt 4fpkt"];
3828--6391[label="0.948542;553pkt 553fpkt"];
3828--7289[label="1;4pkt 4fpkt"];
3828--7545[label="0.948542;553pkt 553fpkt"];
4027--5976[label="1;3pkt 3fpkt"];
4027--7289[label="1;3pkt 3fpkt"];
4630--6391[label="1;1294pkt 1294fpkt"];
4630--7545[label="1;1294pkt 1294fpkt"];
5976--7289[label="1;4pkt 4fpkt"];
6391--7545[label="1;1294pkt 1294fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.213.201" src_ip="202.138.232.74" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_967{
style=filled;
color=gray75;
4649[label="193.180.161.76;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6400[label="193.180.161.76;22pkt 22fpkt", shape=invtriangle, color=brown];
7551[label="193.180.161.76;22pkt 22fpkt", shape=invhouse, color=bisque];
stat967[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.180.161.76:80, 161.238.136.109:*}[72.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61177: (2.27273%)&lt;BR/&gt; 61168: (2.27273%)&lt;BR/&gt; 61163: (2.27273%)&lt;BR/&gt; 61141: (2.27273%)&gt;];
}
4649--6400[label="1;22pkt 22fpkt"];
4649--7551[label="1;22pkt 22fpkt"];
6400--7551[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.136.109" src_ip="193.180.161.76" src_port="80"/>
    </slice>
    <from sec="1034226111" usec="0"/>
    <to sec="1034226728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_968{
style=filled;
color=gray75;
4650[label="167.8.168.76;59pkt 59fpkt", shape=pentagon, color=darkviolet];
6401[label="167.8.168.76;59pkt 59fpkt", shape=invtriangle, color=brown];
stat968[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.168.76:2234, *:*}[54.2373%]&lt;BR/&gt;{167.8.168.76:*, *:2234}[44.0678%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2234: (49.1525%)&lt;BR/&gt; 50866: (0.847458%)&lt;BR/&gt; 50061: (0.847458%)&lt;BR/&gt; 47058: (0.847458%)&lt;BR/&gt; 26932: (0.847458%)&gt;];
}
4650--6401[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter src_ip="167.8.168.76" src_port="2234"/>
      <filter dst_port="2234" src_ip="167.8.168.76"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_969{
style=filled;
color=gray75;
4665[label="136.230.119.78;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6411[label="136.230.119.78;2pkt 2fpkt", shape=invtriangle, color=brown];
stat969[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.119.78:1311, 203.177.145.182:25}[50%]&lt;BR/&gt;{136.230.119.78:1335, 203.177.243.201:5100}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5100: (25%)&lt;BR/&gt; 1335: (25%)&lt;BR/&gt; 1311: (25%)&lt;BR/&gt; 25: (25%)&gt;];
}
4665--6411[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="203.177.243.201" dst_port="5100" src_ip="136.230.119.78" src_port="1335"/>
      <filter dst_ip="203.177.145.182" dst_port="25" src_ip="136.230.119.78" src_port="1311"/>
    </slice>
    <from sec="1034226450" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_970{
style=filled;
color=gray75;
4668[label="212.18.73.79;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6412[label="212.18.73.79;1pkt 1fpkt", shape=invtriangle, color=brown];
7556[label="212.18.73.79;1pkt 1fpkt", shape=invhouse, color=bisque];
stat970[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.18.73.79:80, 84.151.58.75:60897}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60897: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4668--6412[label="1;1pkt 1fpkt"];
4668--7556[label="1;1pkt 1fpkt"];
6412--7556[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="84.151.58.75" dst_port="60897" src_ip="212.18.73.79" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_971{
style=filled;
color=gray75;
4673[label="185.191.253.79;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6416[label="185.191.253.79;1pkt 1fpkt", shape=invtriangle, color=brown];
7559[label="185.191.253.79;2pkt 2fpkt", shape=invhouse, color=bisque];
stat971[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.253.79:1032, 85.34.109.125:1863}[50%]&lt;BR/&gt;{185.191.253.79:1047, 85.34.108.231:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1047: (37.5%)&lt;BR/&gt; 1032: (12.5%)&gt;];
}
4673--6416[label="1;1pkt 1fpkt"];
4673--7559[label="1;1pkt 1fpkt"];
6416--7559[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="85.34.108.231" dst_port="1863" src_ip="185.191.253.79" src_port="1047"/>
      <filter dst_ip="85.34.109.125" dst_port="1863" src_ip="185.191.253.79" src_port="1032"/>
    </slice>
    <from sec="1034226016" usec="0"/>
    <to sec="1034226786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.200.92.80"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_973{
style=filled;
color=gray75;
2628[label="167.8.138.80;s;4pkt 4fpkt", shape=diamond, color=yellow];
4685[label="167.8.138.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6422[label="167.8.138.80;1pkt 1fpkt", shape=invtriangle, color=brown];
7563[label="167.8.138.80;1pkt 1fpkt", shape=invhouse, color=bisque];
stat973[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.138.80:1292, 86.118.232.23:7950}[25%]&lt;BR/&gt;{167.8.138.80:1029, 85.34.108.66:1863}[25%]&lt;BR/&gt;{167.8.138.80:6699, 192.158.168.125:4780}[25%]&lt;BR/&gt;{167.8.138.80:1293, 85.118.189.158:6699}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (35.7143%)&lt;BR/&gt; 4780: (28.5714%)&lt;BR/&gt; 7950: (7.14286%)&lt;BR/&gt; 1863: (7.14286%)&lt;BR/&gt; 1293: (7.14286%)&gt;];
}
2628--4685[label="1;1pkt 1fpkt"];
2628--6422[label="1;1pkt 1fpkt"];
2628--7563[label="1;1pkt 1fpkt"];
4685--6422[label="1;1pkt 1fpkt"];
4685--7563[label="1;1pkt 1fpkt"];
6422--7563[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="85.118.189.158" dst_port="6699" src_ip="167.8.138.80" src_port="1293"/>
      <filter dst_ip="192.158.168.125" dst_port="4780" src_ip="167.8.138.80" src_port="6699"/>
      <filter dst_ip="85.34.108.66" dst_port="1863" src_ip="167.8.138.80" src_port="1029"/>
      <filter dst_ip="86.118.232.23" dst_port="7950" src_ip="167.8.138.80" src_port="1292"/>
    </slice>
    <from sec="1034226488" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.160.227.80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_975{
style=filled;
color=gray75;
4691[label="161.238.94.81;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6425[label="161.238.94.81;16pkt 16fpkt", shape=invtriangle, color=brown];
7566[label="161.238.94.81;16pkt 16fpkt", shape=invhouse, color=bisque];
stat975[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.94.81:*, 34.47.252.135:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49297: (3.125%)&lt;BR/&gt; 49295: (3.125%)&lt;BR/&gt; 49293: (3.125%)&lt;BR/&gt; 49292: (3.125%)&gt;];
}
4691--6425[label="1;16pkt 16fpkt"];
4691--7566[label="1;16pkt 16fpkt"];
6425--7566[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="34.47.252.135" dst_port="80" src_ip="161.238.94.81"/>
    </slice>
    <from sec="1034226050" usec="0"/>
    <to sec="1034226079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_976{
style=filled;
color=gray75;
73[label="174.210.177.102s;1pkt 1fpkt", shape=rectangle, color=red];
1903[label="213.2.255.81;s;5pkt 5fpkt", shape=diamond, color=yellow];
1904[label="136.230.110.186;d;10pkt 10fpkt", shape=diamond, color=yellow];
1953[label="136.230.78.164;d;6pkt 6fpkt", shape=diamond, color=yellow];
3195[label="213.2.255.81;s;5pkt 5fpkt", shape=hexagon, color=black];
3196[label="136.230.110.186;d;10pkt 10fpkt", shape=hexagon, color=black];
3265[label="136.230.78.164;d;6pkt 6fpkt", shape=hexagon, color=black];
4696[label="213.2.255.81;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6429[label="213.2.255.81;1pkt 1fpkt", shape=invtriangle, color=brown];
7569[label="213.2.255.81;1pkt 1fpkt", shape=invhouse, color=bisque];
stat976[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.230.78.164:*}[33.3333%]&lt;BR/&gt;{*:5190, 136.230.110.186:*}[27.7778%]&lt;BR/&gt;{213.2.255.81:6667, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (19.1489%)&lt;BR/&gt; 5190: (12.766%)&lt;BR/&gt; 61262: (7.44681%)&lt;BR/&gt; 1322: (5.31915%)&lt;BR/&gt; 25: (5.31915%)&gt;];
}
73--479[label="1;1pkt 1fpkt"];
73--1904[label="1;1pkt 1fpkt"];
73--3196[label="1;1pkt 1fpkt"];
1903--1904[label="0.4;2pkt 2fpkt"];
1903--1953[label="0.2;1pkt 1fpkt"];
1903--3195[label="1;5pkt 5fpkt"];
1903--3196[label="0.4;2pkt 2fpkt"];
1903--3265[label="0.2;1pkt 1fpkt"];
1903--4696[label="1;2pkt 2fpkt"];
1903--6429[label="1;1pkt 1fpkt"];
1903--7569[label="1;1pkt 1fpkt"];
1904--3195[label="0.4;2pkt 2fpkt"];
1904--3196[label="1;10pkt 10fpkt"];
1904--4696[label="0.5;1pkt 1fpkt"];
1953--3195[label="0.2;1pkt 1fpkt"];
1953--3264[label="0.166667;1pkt 1fpkt"];
1953--3265[label="1;6pkt 6fpkt"];
1953--4696[label="0.5;1pkt 1fpkt"];
1953--5040[label="0.166667;1pkt 1fpkt"];
1953--6429[label="1;1pkt 1fpkt"];
1953--7569[label="1;1pkt 1fpkt"];
3195--3196[label="0.4;2pkt 2fpkt"];
3195--3265[label="0.2;1pkt 1fpkt"];
3195--4696[label="1;2pkt 2fpkt"];
3195--6429[label="1;1pkt 1fpkt"];
3195--7569[label="1;1pkt 1fpkt"];
3196--4696[label="0.5;1pkt 1fpkt"];
3265--4696[label="0.5;1pkt 1fpkt"];
3265--5040[label="0.166667;1pkt 1fpkt"];
3265--6429[label="1;1pkt 1fpkt"];
3265--7569[label="1;1pkt 1fpkt"];
4696--6429[label="1;1pkt 1fpkt"];
4696--7569[label="1;1pkt 1fpkt"];
6429--7569[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.230.78.164"/>
      <filter src_ip="213.2.255.81" src_port="6667"/>
      <filter dst_ip="136.230.110.186" src_port="5190"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_977{
style=filled;
color=gray75;
4698[label="1.35.33.82;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6430[label="1.35.33.82;1pkt 1fpkt", shape=invtriangle, color=brown];
7570[label="1.35.33.82;1pkt 1fpkt", shape=invhouse, color=bisque];
stat977[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.35.33.82:5001, 212.24.168.191:1163}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5001: (50%)&lt;BR/&gt; 1163: (50%)&gt;];
}
4698--6430[label="1;1pkt 1fpkt"];
4698--7570[label="1;1pkt 1fpkt"];
6430--7570[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.168.191" dst_port="1163" src_ip="1.35.33.82" src_port="5001"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.200.92.82"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_979{
style=filled;
color=gray75;
4703[label="161.238.94.82;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6434[label="161.238.94.82;18pkt 18fpkt", shape=invtriangle, color=brown];
stat979[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.94.82:*, 193.21.40.177:80}[44.4444%]&lt;BR/&gt;{161.238.94.82:*, 193.21.40.173:80}[38.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49276: (2.77778%)&lt;BR/&gt; 49275: (2.77778%)&lt;BR/&gt; 49273: (2.77778%)&lt;BR/&gt; 49272: (2.77778%)&gt;];
}
4703--6434[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="193.21.40.177" dst_port="80" src_ip="161.238.94.82"/>
      <filter dst_ip="193.21.40.173" dst_port="80" src_ip="161.238.94.82"/>
    </slice>
    <from sec="1034226685" usec="0"/>
    <to sec="1034226701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.70.117.82"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.704041,2.16215,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_981{
style=filled;
color=gray75;
2180[label="141.105.79.83;s;1pkt 1fpkt", shape=diamond, color=yellow];
6439[label="141.105.79.83;1pkt 1fpkt", shape=invtriangle, color=brown];
stat981[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.105.79.83:4445, 192.168.128.255:4445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4445: (100%)&gt;];
}
2180--2399[label="1;1pkt 1fpkt"];
2180--6439[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.128.255" dst_port="4445" src_ip="141.105.79.83" src_port="4445"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.116.245.83"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_983{
style=filled;
color=gray75;
4733[label="161.238.14.85;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6452[label="161.238.14.85;1pkt 1fpkt", shape=invtriangle, color=brown];
7580[label="161.238.14.85;1pkt 1fpkt", shape=invhouse, color=bisque];
stat983[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.14.85:443, 213.117.132.115:1639}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1639: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
4733--6452[label="1;1pkt 1fpkt"];
4733--7580[label="1;1pkt 1fpkt"];
6452--7580[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.117.132.115" dst_port="1639" src_ip="161.238.14.85" src_port="443"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_984{
style=filled;
color=gray75;
4739[label="195.164.24.86;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6455[label="195.164.24.86;24pkt 24fpkt", shape=invtriangle, color=brown];
7583[label="195.164.24.86;23pkt 23fpkt", shape=invhouse, color=bisque];
stat984[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.164.24.86:80, 185.191.170.234:*}[95.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8571%)&lt;BR/&gt; 0: (4.28571%)&lt;BR/&gt; 49207: (2.14286%)&lt;BR/&gt; 49206: (2.14286%)&lt;BR/&gt; 49205: (2.14286%)&gt;];
}
4739--6455[label="1;23pkt 23fpkt"];
4739--7583[label="1;23pkt 23fpkt"];
6455--7583[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.170.234" src_ip="195.164.24.86" src_port="80"/>
    </slice>
    <from sec="1034226502" usec="0"/>
    <to sec="1034226628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.814608,2.10583,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_985{
style=filled;
color=gray75;
1594[label="141.98.29.86;s;107pkt 107fpkt", shape=diamond, color=yellow];
1629[label="2.14.57.64;d;5pkt 5fpkt", shape=diamond, color=yellow];
3311[label="141.98.29.86;s;85pkt 85fpkt", shape=hexagon, color=black];
4740[label="141.98.29.86;107pkt 107fpkt", shape=pentagon, color=darkviolet];
6456[label="141.98.29.86;106pkt 106fpkt", shape=invtriangle, color=brown];
stat985[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.29.86:*, 208.22.35.196:80}[34.5794%]&lt;BR/&gt;{141.98.29.86:*, 193.189.37.96:80}[28.972%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1445: (0.609756%)&lt;BR/&gt; 1420: (0.609756%)&lt;BR/&gt; 1388: (0.609756%)&lt;BR/&gt; 1380: (0.609756%)&gt;];
}
1594--1629[label="1;5pkt 5fpkt"];
1594--2221[label="0.233645;25pkt 25fpkt"];
1594--3167[label="0.666667;4pkt 4fpkt"];
1594--3311[label="1;85pkt 85fpkt"];
1594--3946[label="0.140187;15pkt 15fpkt"];
1594--3959[label="0.140187;15pkt 15fpkt"];
1594--3969[label="0.140187;15pkt 15fpkt"];
1594--4740[label="1;107pkt 107fpkt"];
1594--6456[label="1;106pkt 106fpkt"];
1629--3311[label="1;5pkt 5fpkt"];
1629--3946[label="0.6;3pkt 3fpkt"];
1629--3959[label="0.6;3pkt 3fpkt"];
1629--3969[label="0.6;3pkt 3fpkt"];
1629--4740[label="1;5pkt 5fpkt"];
1629--6456[label="1;5pkt 5fpkt"];
3311--3946[label="0.176471;15pkt 15fpkt"];
3311--3959[label="0.176471;15pkt 15fpkt"];
3311--3969[label="0.176471;15pkt 15fpkt"];
3311--4740[label="1;85pkt 85fpkt"];
3311--6456[label="0.988235;84pkt 84fpkt"];
4740--6456[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_ip="208.22.35.196" dst_port="80" src_ip="141.98.29.86"/>
      <filter dst_ip="193.189.37.96" dst_port="80" src_ip="141.98.29.86"/>
    </slice>
    <from sec="1034226027" usec="0"/>
    <to sec="1034226733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07661,2.07006,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_986{
style=filled;
color=gray75;
59[label="136.230.125.84s;1pkt 1fpkt", shape=rectangle, color=red];
1467[label="136.230.112.86;s;46pkt 46fpkt", shape=diamond, color=yellow];
2163[label="208.42.5.8;d;33pkt 33fpkt", shape=diamond, color=yellow];
2227[label="136.230.118.54;s;29pkt 29fpkt", shape=diamond, color=yellow];
2248[label="208.42.5.0;d;44pkt 44fpkt", shape=diamond, color=yellow];
3432[label="136.230.118.54;s;29pkt 29fpkt", shape=hexagon, color=black];
3445[label="208.42.5.0;d;29pkt 29fpkt", shape=hexagon, color=black];
4257[label="136.230.99.33;42pkt 42fpkt", shape=pentagon, color=darkviolet];
4464[label="136.230.118.54;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4495[label="136.230.97.59;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4727[label="136.230.125.84;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4744[label="136.230.112.86;54pkt 54fpkt", shape=pentagon, color=darkviolet];
5006[label="136.230.119.123;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6143[label="136.230.99.33;43pkt 43fpkt", shape=invtriangle, color=brown];
6278[label="136.230.118.54;30pkt 30fpkt", shape=invtriangle, color=brown];
6301[label="136.230.97.59;15pkt 15fpkt", shape=invtriangle, color=brown];
6458[label="136.230.112.86;54pkt 54fpkt", shape=invtriangle, color=brown];
6633[label="136.230.119.123;17pkt 17fpkt", shape=invtriangle, color=brown];
7390[label="136.230.99.33;42pkt 42fpkt", shape=invhouse, color=bisque];
7477[label="136.230.118.54;30pkt 30fpkt", shape=invhouse, color=bisque];
7492[label="136.230.97.59;16pkt 16fpkt", shape=invhouse, color=bisque];
stat986[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.112.86:*, *:*}[25.3456%]&lt;BR/&gt;{*:*, 208.42.5.0:25}[22.1198%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.4087%)&lt;BR/&gt; 5190: (4.79876%)&lt;BR/&gt; 21: (1.85759%)&lt;BR/&gt; 23: (0.696594%)&lt;BR/&gt; 64287: (0.464396%)&gt;];
}
59--2169[label="1;1pkt 1fpkt"];
59--2248[label="1;1pkt 1fpkt"];
59--3445[label="1;1pkt 1fpkt"];
59--4727[label="1;1pkt 1fpkt"];
1467--1998[label="0.0588235;1pkt 1fpkt"];
1467--2070[label="0.130435;3pkt 3fpkt"];
1467--2163[label="0.151515;5pkt 5fpkt"];
1467--2248[label="0.0909091;4pkt 4fpkt"];
1467--3327[label="0.130435;3pkt 3fpkt"];
1467--3445[label="0.103448;3pkt 3fpkt"];
1467--3558[label="0.0588235;1pkt 1fpkt"];
1467--4744[label="0.978261;45pkt 45fpkt"];
1467--6458[label="0.978261;45pkt 45fpkt"];
2163--2227[label="0.275862;8pkt 8fpkt"];
2163--3432[label="0.275862;8pkt 8fpkt"];
2163--3673[label="0.30303;10pkt 10fpkt"];
2163--4065[label="0.30303;10pkt 10fpkt"];
2163--4235[label="0.0769231;2pkt 2fpkt"];
2163--4464[label="0.266667;8pkt 8fpkt"];
2163--4744[label="0.151515;5pkt 5fpkt"];
2163--6128[label="0.08;2pkt 2fpkt"];
2163--6278[label="0.266667;8pkt 8fpkt"];
2163--6458[label="0.151515;5pkt 5fpkt"];
2163--7477[label="0.266667;8pkt 8fpkt"];
2227--2248[label="0.103448;3pkt 3fpkt"];
2227--3432[label="1;29pkt 29fpkt"];
2227--4464[label="0.965517;28pkt 28fpkt"];
2227--6278[label="0.965517;28pkt 28fpkt"];
2227--7477[label="0.965517;28pkt 28fpkt"];
2248--3432[label="0.103448;3pkt 3fpkt"];
2248--3445[label="1;29pkt 29fpkt"];
2248--4257[label="0.333333;14pkt 14fpkt"];
2248--4464[label="0.1;3pkt 3fpkt"];
2248--4495[label="0.266667;4pkt 4fpkt"];
2248--4727[label="0.3;9pkt 9fpkt"];
2248--4744[label="0.136364;6pkt 6fpkt"];
2248--5006[label="0.176471;3pkt 3fpkt"];
2248--6143[label="0.325581;14pkt 14fpkt"];
2248--6278[label="0.1;3pkt 3fpkt"];
2248--6301[label="0.266667;4pkt 4fpkt"];
2248--6458[label="0.136364;6pkt 6fpkt"];
2248--6633[label="0.176471;3pkt 3fpkt"];
2248--7390[label="0.333333;14pkt 14fpkt"];
2248--7477[label="0.1;3pkt 3fpkt"];
2248--7492[label="0.25;4pkt 4fpkt"];
3432--4464[label="0.965517;28pkt 28fpkt"];
3432--6278[label="0.965517;28pkt 28fpkt"];
3432--7477[label="0.965517;28pkt 28fpkt"];
3445--4257[label="0.275862;8pkt 8fpkt"];
3445--4495[label="0.266667;4pkt 4fpkt"];
3445--4727[label="0.310345;9pkt 9fpkt"];
3445--4744[label="0.103448;3pkt 3fpkt"];
3445--5006[label="0.176471;3pkt 3fpkt"];
3445--6143[label="0.275862;8pkt 8fpkt"];
3445--6301[label="0.266667;4pkt 4fpkt"];
3445--6458[label="0.103448;3pkt 3fpkt"];
3445--6633[label="0.176471;3pkt 3fpkt"];
3445--7390[label="0.275862;8pkt 8fpkt"];
3445--7492[label="0.25;4pkt 4fpkt"];
4257--6143[label="1;42pkt 42fpkt"];
4257--7390[label="1;42pkt 42fpkt"];
4464--6278[label="1;30pkt 30fpkt"];
4464--7477[label="1;30pkt 30fpkt"];
4495--6301[label="1;15pkt 15fpkt"];
4495--7492[label="1;15pkt 15fpkt"];
4744--6458[label="1;54pkt 54fpkt"];
5006--6633[label="1;17pkt 17fpkt"];
6143--7390[label="1;42pkt 42fpkt"];
6278--7477[label="1;30pkt 30fpkt"];
6301--7492[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="136.230.112.86"/>
      <filter dst_ip="208.42.5.0" dst_port="25"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.230.118.86"/>
    </slice>
    <from sec="1034226012" usec="0"/>
    <to sec="1034226784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_988{
style=filled;
color=gray75;
4749[label="141.98.230.86;36pkt 36fpkt", shape=pentagon, color=darkviolet];
6462[label="141.98.230.86;37pkt 37fpkt", shape=invtriangle, color=brown];
7586[label="141.98.230.86;37pkt 37fpkt", shape=invhouse, color=bisque];
stat988[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.98.230.86:*, 2.154.78.182:80}[56.7568%]&lt;BR/&gt;{141.98.230.86:*, 2.154.78.248:80}[21.6216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1746: (1.36364%)&lt;BR/&gt; 1745: (1.36364%)&lt;BR/&gt; 1744: (1.36364%)&lt;BR/&gt; 1743: (1.36364%)&gt;];
}
4749--6462[label="1;36pkt 36fpkt"];
4749--7586[label="1;36pkt 36fpkt"];
6462--7586[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="2.154.78.182" dst_port="80" src_ip="141.98.230.86"/>
      <filter dst_ip="2.154.78.248" dst_port="80" src_ip="141.98.230.86"/>
    </slice>
    <from sec="1034226510" usec="0"/>
    <to sec="1034226516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,053,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_989{
style=filled;
color=gray75;
4752[label="209.168.154.87;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6463[label="209.168.154.87;4pkt 4fpkt", shape=invtriangle, color=brown];
stat989[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.168.154.87:80, 185.206.202.140:5599}[25%]&lt;BR/&gt;{209.168.154.87:80, 185.206.202.140:5607}[25%]&lt;BR/&gt;{209.168.154.87:80, 185.206.202.140:5618}[25%]&lt;BR/&gt;{209.168.154.87:80, 185.206.202.140:5622}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5622: (12.5%)&lt;BR/&gt; 5618: (12.5%)&lt;BR/&gt; 5607: (12.5%)&lt;BR/&gt; 5599: (12.5%)&gt;];
}
4752--6463[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="185.206.202.140" dst_port="5622" src_ip="209.168.154.87" src_port="80"/>
      <filter dst_ip="185.206.202.140" dst_port="5618" src_ip="209.168.154.87" src_port="80"/>
      <filter dst_ip="185.206.202.140" dst_port="5607" src_ip="209.168.154.87" src_port="80"/>
      <filter dst_ip="185.206.202.140" dst_port="5599" src_ip="209.168.154.87" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="130.18.175.90"/>
    </slice>
    <from sec="1034226134" usec="0"/>
    <to sec="1034226206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_991{
style=filled;
color=gray75;
390[label="197.138.225.91s;375pkt 375fpkt", shape=rectangle, color=red];
4779[label="197.138.225.91;431pkt 431fpkt", shape=pentagon, color=darkviolet];
6478[label="197.138.225.91;431pkt 431fpkt", shape=invtriangle, color=brown];
stat991[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.138.225.91:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 12972: (0.121261%)&lt;BR/&gt; 12970: (0.121261%)&lt;BR/&gt; 12968: (0.121261%)&lt;BR/&gt; 12966: (0.121261%)&gt;];
}
390--4779[label="0.997333;374pkt 374fpkt"];
390--6478[label="0.997333;374pkt 374fpkt"];
4779--6478[label="1;431pkt 431fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.138.225.91"/>
    </slice>
    <from sec="1034226124" usec="0"/>
    <to sec="1034226648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_992{
style=filled;
color=gray75;
268[label="200.214.20.92s;174pkt 174fpkt", shape=rectangle, color=red];
4781[label="200.214.20.92;237pkt 237fpkt", shape=pentagon, color=darkviolet];
6480[label="200.214.20.92;237pkt 237fpkt", shape=invtriangle, color=brown];
stat992[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.214.20.92:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
268--4781[label="1;174pkt 174fpkt"];
268--6480[label="1;174pkt 174fpkt"];
4781--6480[label="1;237pkt 237fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.214.20.92" src_port="1026"/>
    </slice>
    <from sec="1034226067" usec="0"/>
    <to sec="1034226104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_993{
style=filled;
color=gray75;
1287[label="212.172.216.140;d;176pkt 176fpkt", shape=diamond, color=yellow];
1342[label="192.193.163.106;s;14pkt 14fpkt", shape=diamond, color=yellow];
1897[label="84.102.236.82;s;72pkt 72fpkt", shape=diamond, color=yellow];
1974[label="85.113.14.247;s;33pkt 33fpkt", shape=diamond, color=yellow];
2129[label="161.238.38.236;d;13pkt 13fpkt", shape=diamond, color=yellow];
2563[label="212.24.25.114;d;20pkt 20fpkt", shape=diamond, color=yellow];
2613[label="85.113.14.227;s;36pkt 36fpkt", shape=diamond, color=yellow];
3274[label="212.172.216.140;d;176pkt 176fpkt", shape=hexagon, color=black];
3275[label="85.113.14.247;s;33pkt 33fpkt", shape=hexagon, color=black];
3355[label="161.238.38.236;d;2pkt 2fpkt", shape=hexagon, color=black];
3438[label="85.113.14.246;s;29pkt 29fpkt", shape=hexagon, color=black];
3863[label="85.113.14.247;s;17pkt 17fpkt", shape=polygon, color=gold];
4327[label="85.34.109.40;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4887[label="192.193.163.106;73pkt 73fpkt", shape=pentagon, color=darkviolet];
5748[label="85.113.14.225;41pkt 41fpkt", shape=pentagon, color=darkviolet];
5760[label="85.113.14.226;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5774[label="85.113.14.227;37pkt 37fpkt", shape=pentagon, color=darkviolet];
5878[label="85.113.14.244;29pkt 29fpkt", shape=pentagon, color=darkviolet];
5891[label="85.113.14.246;60pkt 60fpkt", shape=pentagon, color=darkviolet];
5898[label="85.113.14.247;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6186[label="85.34.109.40;4pkt 4fpkt", shape=invtriangle, color=brown];
6438[label="84.102.236.82;71pkt 71fpkt", shape=invtriangle, color=brown];
7139[label="85.113.14.225;41pkt 41fpkt", shape=invtriangle, color=brown];
7147[label="85.113.14.226;25pkt 25fpkt", shape=invtriangle, color=brown];
7156[label="85.113.14.227;37pkt 37fpkt", shape=invtriangle, color=brown];
7230[label="85.113.14.244;29pkt 29fpkt", shape=invtriangle, color=brown];
7242[label="85.113.14.247;32pkt 32fpkt", shape=invtriangle, color=brown];
7419[label="85.34.109.40;4pkt 4fpkt", shape=invhouse, color=bisque];
8007[label="85.113.14.225;42pkt 42fpkt", shape=invhouse, color=bisque];
8073[label="85.113.14.244;30pkt 30fpkt", shape=invhouse, color=bisque];
8079[label="85.113.14.247;32pkt 32fpkt", shape=invhouse, color=bisque];
stat993[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 212.172.216.140:*}[32.7519%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.6753%)&lt;BR/&gt; 443: (2.12766%)&lt;BR/&gt; 1939: (0.472813%)&lt;BR/&gt; 45685: (0.315209%)&lt;BR/&gt; 45667: (0.315209%)&gt;];
}
1287--1658[label="0.00568182;1pkt 1fpkt"];
1287--1897[label="0.125;9pkt 9fpkt"];
1287--1974[label="0.181818;6pkt 6fpkt"];
1287--2014[label="0.23913;11pkt 11fpkt"];
1287--2019[label="0.170732;7pkt 7fpkt"];
1287--2201[label="0.00588235;1pkt 1fpkt"];
1287--2427[label="0.264706;9pkt 9fpkt"];
1287--2435[label="0.142857;4pkt 4fpkt"];
1287--2613[label="0.111111;4pkt 4fpkt"];
1287--2944[label="0.0284091;5pkt 5fpkt"];
1287--3029[label="0.00568182;1pkt 1fpkt"];
1287--3274[label="1;176pkt 176fpkt"];
1287--3275[label="0.181818;6pkt 6fpkt"];
1287--3420[label="0.00729927;1pkt 1fpkt"];
1287--3438[label="0.241379;7pkt 7fpkt"];
1287--3708[label="0.142857;4pkt 4fpkt"];
1287--3820[label="0.00568182;1pkt 1fpkt"];
1287--3863[label="0.352941;6pkt 6fpkt"];
1287--3944[label="0.00568182;1pkt 1fpkt"];
1287--3950[label="0.107955;19pkt 19fpkt"];
1287--3957[label="0.00568182;1pkt 1fpkt"];
1287--3967[label="0.00568182;1pkt 1fpkt"];
1287--4057[label="0.0166667;1pkt 1fpkt"];
1287--4096[label="0.016129;1pkt 1fpkt"];
1287--4197[label="0.05;1pkt 1fpkt"];
1287--4221[label="0.0204082;1pkt 1fpkt"];
1287--4261[label="0.130682;23pkt 23fpkt"];
1287--4327[label="0.25;1pkt 1fpkt"];
1287--4363[label="0.0238095;1pkt 1fpkt"];
1287--4576[label="0.027027;1pkt 1fpkt"];
1287--4708[label="0.126761;9pkt 9fpkt"];
1287--4784[label="0.113636;20pkt 20fpkt"];
1287--4887[label="0.0821918;6pkt 6fpkt"];
1287--5009[label="0.00568182;1pkt 1fpkt"];
1287--5541[label="0.5;6pkt 6fpkt"];
1287--5558[label="0.0169492;1pkt 1fpkt"];
1287--5564[label="0.0882353;3pkt 3fpkt"];
1287--5575[label="0.0277778;1pkt 1fpkt"];
1287--5594[label="0.00568182;1pkt 1fpkt"];
1287--5739[label="0.2;9pkt 9fpkt"];
1287--5748[label="0.243902;10pkt 10fpkt"];
1287--5760[label="0.208333;5pkt 5fpkt"];
1287--5774[label="0.108108;4pkt 4fpkt"];
1287--5878[label="0.275862;8pkt 8fpkt"];
1287--5891[label="0.116667;7pkt 7fpkt"];
1287--5898[label="0.181818;6pkt 6fpkt"];
1287--5910[label="0.111111;3pkt 3fpkt"];
1287--5919[label="0.166667;11pkt 11fpkt"];
1287--6002[label="0.0166667;1pkt 1fpkt"];
1287--6102[label="0.047619;1pkt 1fpkt"];
1287--6118[label="0.0208333;1pkt 1fpkt"];
1287--6186[label="0.25;1pkt 1fpkt"];
1287--6211[label="0.0243902;1pkt 1fpkt"];
1287--6438[label="0.126761;9pkt 9fpkt"];
1287--6483[label="0.113636;20pkt 20fpkt"];
1287--7002[label="0.5;6pkt 6fpkt"];
1287--7014[label="0.0166667;1pkt 1fpkt"];
1287--7032[label="0.00568182;1pkt 1fpkt"];
1287--7135[label="0.2;9pkt 9fpkt"];
1287--7139[label="0.243902;10pkt 10fpkt"];
1287--7147[label="0.2;5pkt 5fpkt"];
1287--7156[label="0.108108;4pkt 4fpkt"];
1287--7230[label="0.275862;8pkt 8fpkt"];
1287--7242[label="0.1875;6pkt 6fpkt"];
1287--7250[label="0.142857;4pkt 4fpkt"];
1287--7253[label="0.169231;11pkt 11fpkt"];
1287--7419[label="0.25;1pkt 1fpkt"];
1287--7595[label="0.113636;20pkt 20fpkt"];
1287--7946[label="0.00568182;1pkt 1fpkt"];
1287--8007[label="0.238095;10pkt 10fpkt"];
1287--8073[label="0.266667;8pkt 8fpkt"];
1287--8079[label="0.1875;6pkt 6fpkt"];
1287--8083[label="0.111111;3pkt 3fpkt"];
1342--4887[label="1;14pkt 14fpkt"];
1897--3274[label="0.125;9pkt 9fpkt"];
1897--3634[label="0.5;36pkt 36fpkt"];
1897--3692[label="0.0416667;3pkt 3fpkt"];
1897--3950[label="0.0694444;5pkt 5fpkt"];
1897--4708[label="1;71pkt 71fpkt"];
1897--6438[label="1;71pkt 71fpkt"];
1974--2129[label="0.153846;2pkt 2fpkt"];
1974--2563[label="0.15;3pkt 3fpkt"];
1974--2599[label="0.030303;1pkt 1fpkt"];
1974--2625[label="0.0606061;2pkt 2fpkt"];
1974--3274[label="0.181818;6pkt 6fpkt"];
1974--3275[label="1;33pkt 33fpkt"];
1974--3440[label="0.151515;5pkt 5fpkt"];
1974--3863[label="1;17pkt 17fpkt"];
1974--3950[label="0.0909091;3pkt 3fpkt"];
1974--5898[label="1;33pkt 33fpkt"];
1974--7242[label="1;32pkt 32fpkt"];
1974--8079[label="1;32pkt 32fpkt"];
2129--2435[label="0.153846;2pkt 2fpkt"];
2129--2613[label="0.0769231;1pkt 1fpkt"];
2129--3275[label="0.153846;2pkt 2fpkt"];
2129--3355[label="1;2pkt 2fpkt"];
2129--3438[label="0.0769231;1pkt 1fpkt"];
2129--3708[label="0.153846;2pkt 2fpkt"];
2129--5760[label="0.153846;2pkt 2fpkt"];
2129--5774[label="0.0769231;1pkt 1fpkt"];
2129--5878[label="0.0769231;1pkt 1fpkt"];
2129--5891[label="0.0769231;1pkt 1fpkt"];
2129--5898[label="0.153846;2pkt 2fpkt"];
2129--5910[label="0.153846;2pkt 2fpkt"];
2129--5919[label="0.153846;2pkt 2fpkt"];
2129--7147[label="0.153846;2pkt 2fpkt"];
2129--7156[label="0.0769231;1pkt 1fpkt"];
2129--7230[label="0.0769231;1pkt 1fpkt"];
2129--7242[label="0.153846;2pkt 2fpkt"];
2129--7250[label="0.153846;2pkt 2fpkt"];
2129--7253[label="0.153846;2pkt 2fpkt"];
2129--8073[label="0.0769231;1pkt 1fpkt"];
2129--8079[label="0.153846;2pkt 2fpkt"];
2129--8083[label="0.153846;2pkt 2fpkt"];
2563--3275[label="0.15;3pkt 3fpkt"];
2563--3708[label="0.05;1pkt 1fpkt"];
2563--5564[label="0.15;3pkt 3fpkt"];
2563--5739[label="0.2;4pkt 4fpkt"];
2563--5891[label="0.2;4pkt 4fpkt"];
2563--5898[label="0.15;3pkt 3fpkt"];
2563--5910[label="0.05;1pkt 1fpkt"];
2563--5919[label="0.1;2pkt 2fpkt"];
2563--7135[label="0.2;4pkt 4fpkt"];
2563--7242[label="0.15;3pkt 3fpkt"];
2563--7250[label="0.05;1pkt 1fpkt"];
2563--7253[label="0.1;2pkt 2fpkt"];
2563--8079[label="0.15;3pkt 3fpkt"];
2563--8083[label="0.05;1pkt 1fpkt"];
2613--2655[label="0.111111;4pkt 4fpkt"];
2613--3274[label="0.111111;4pkt 4fpkt"];
2613--3440[label="0.25;9pkt 9fpkt"];
2613--3950[label="0.0833333;3pkt 3fpkt"];
2613--5774[label="1;36pkt 36fpkt"];
2613--7156[label="1;36pkt 36fpkt"];
3274--3275[label="0.181818;6pkt 6fpkt"];
3274--3420[label="0.00729927;1pkt 1fpkt"];
3274--3438[label="0.241379;7pkt 7fpkt"];
3274--3708[label="0.142857;4pkt 4fpkt"];
3274--3820[label="0.00568182;1pkt 1fpkt"];
3274--3863[label="0.352941;6pkt 6fpkt"];
3274--3944[label="0.00568182;1pkt 1fpkt"];
3274--3950[label="0.107955;19pkt 19fpkt"];
3274--3957[label="0.00568182;1pkt 1fpkt"];
3274--3967[label="0.00568182;1pkt 1fpkt"];
3274--4057[label="0.0166667;1pkt 1fpkt"];
3274--4096[label="0.016129;1pkt 1fpkt"];
3274--4197[label="0.05;1pkt 1fpkt"];
3274--4221[label="0.0204082;1pkt 1fpkt"];
3274--4261[label="0.130682;23pkt 23fpkt"];
3274--4327[label="0.25;1pkt 1fpkt"];
3274--4363[label="0.0238095;1pkt 1fpkt"];
3274--4576[label="0.027027;1pkt 1fpkt"];
3274--4708[label="0.126761;9pkt 9fpkt"];
3274--4784[label="0.113636;20pkt 20fpkt"];
3274--4887[label="0.0821918;6pkt 6fpkt"];
3274--5009[label="0.00568182;1pkt 1fpkt"];
3274--5541[label="0.5;6pkt 6fpkt"];
3274--5558[label="0.0169492;1pkt 1fpkt"];
3274--5564[label="0.0882353;3pkt 3fpkt"];
3274--5575[label="0.0277778;1pkt 1fpkt"];
3274--5594[label="0.00568182;1pkt 1fpkt"];
3274--5739[label="0.2;9pkt 9fpkt"];
3274--5748[label="0.243902;10pkt 10fpkt"];
3274--5760[label="0.208333;5pkt 5fpkt"];
3274--5774[label="0.108108;4pkt 4fpkt"];
3274--5878[label="0.275862;8pkt 8fpkt"];
3274--5891[label="0.116667;7pkt 7fpkt"];
3274--5898[label="0.181818;6pkt 6fpkt"];
3274--5910[label="0.111111;3pkt 3fpkt"];
3274--5919[label="0.166667;11pkt 11fpkt"];
3274--6002[label="0.0166667;1pkt 1fpkt"];
3274--6102[label="0.047619;1pkt 1fpkt"];
3274--6118[label="0.0208333;1pkt 1fpkt"];
3274--6186[label="0.25;1pkt 1fpkt"];
3274--6211[label="0.0243902;1pkt 1fpkt"];
3274--6438[label="0.126761;9pkt 9fpkt"];
3274--6483[label="0.113636;20pkt 20fpkt"];
3274--7002[label="0.5;6pkt 6fpkt"];
3274--7014[label="0.0166667;1pkt 1fpkt"];
3274--7032[label="0.00568182;1pkt 1fpkt"];
3274--7135[label="0.2;9pkt 9fpkt"];
3274--7139[label="0.243902;10pkt 10fpkt"];
3274--7147[label="0.2;5pkt 5fpkt"];
3274--7156[label="0.108108;4pkt 4fpkt"];
3274--7230[label="0.275862;8pkt 8fpkt"];
3274--7242[label="0.1875;6pkt 6fpkt"];
3274--7250[label="0.142857;4pkt 4fpkt"];
3274--7253[label="0.169231;11pkt 11fpkt"];
3274--7419[label="0.25;1pkt 1fpkt"];
3274--7595[label="0.113636;20pkt 20fpkt"];
3274--7946[label="0.00568182;1pkt 1fpkt"];
3274--8007[label="0.238095;10pkt 10fpkt"];
3274--8073[label="0.266667;8pkt 8fpkt"];
3274--8079[label="0.1875;6pkt 6fpkt"];
3274--8083[label="0.111111;3pkt 3fpkt"];
3275--3440[label="0.151515;5pkt 5fpkt"];
3275--3863[label="1;17pkt 17fpkt"];
3275--3950[label="0.0909091;3pkt 3fpkt"];
3275--5898[label="1;33pkt 33fpkt"];
3275--7242[label="1;32pkt 32fpkt"];
3275--8079[label="1;32pkt 32fpkt"];
3438--3440[label="0.448276;13pkt 13fpkt"];
3438--3950[label="0.241379;7pkt 7fpkt"];
3438--5891[label="0.965517;28pkt 28fpkt"];
3863--3950[label="0.176471;3pkt 3fpkt"];
3863--5898[label="1;17pkt 17fpkt"];
3863--7242[label="0.941176;16pkt 16fpkt"];
3863--8079[label="0.941176;16pkt 16fpkt"];
4327--6186[label="1;4pkt 4fpkt"];
4327--7419[label="1;4pkt 4fpkt"];
5748--7139[label="1;41pkt 41fpkt"];
5748--8007[label="1;41pkt 41fpkt"];
5760--7147[label="1;24pkt 24fpkt"];
5774--7156[label="1;37pkt 37fpkt"];
5878--7230[label="1;29pkt 29fpkt"];
5878--8073[label="1;29pkt 29fpkt"];
5898--7242[label="1;32pkt 32fpkt"];
5898--8079[label="1;32pkt 32fpkt"];
6186--7419[label="1;4pkt 4fpkt"];
7139--8007[label="1;41pkt 41fpkt"];
7230--8073[label="1;29pkt 29fpkt"];
7242--8079[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="212.172.216.140" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_994{
style=filled;
color=gray75;
4788[label="219.160.30.93;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6487[label="219.160.30.93;20pkt 20fpkt", shape=invtriangle, color=brown];
7599[label="219.160.30.93;20pkt 20fpkt", shape=invhouse, color=bisque];
stat994[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.160.30.93:80, 161.238.213.138:*}[60%]&lt;BR/&gt;{219.160.30.93:80, 141.98.25.145:*}[35%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3655: (2.5%)&lt;BR/&gt; 2159: (2.5%)&lt;BR/&gt; 2158: (2.5%)&lt;BR/&gt; 2154: (2.5%)&gt;];
}
4788--6487[label="1;20pkt 20fpkt"];
4788--7599[label="1;20pkt 20fpkt"];
6487--7599[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.213.138" src_ip="219.160.30.93" src_port="80"/>
      <filter dst_ip="141.98.25.145" src_ip="219.160.30.93" src_port="80"/>
    </slice>
    <from sec="1034226342" usec="0"/>
    <to sec="1034226733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_995{
style=filled;
color=gray75;
4798[label="161.238.25.94;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6492[label="161.238.25.94;7pkt 7fpkt", shape=invtriangle, color=brown];
7600[label="161.238.25.94;8pkt 8fpkt", shape=invhouse, color=bisque];
stat995[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.25.94:80, 81.112.214.35:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33309: (6.52174%)&lt;BR/&gt; 33308: (6.52174%)&lt;BR/&gt; 33307: (6.52174%)&lt;BR/&gt; 33306: (6.52174%)&gt;];
}
4798--6492[label="1;7pkt 7fpkt"];
4798--7600[label="1;8pkt 8fpkt"];
6492--7600[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="81.112.214.35" src_ip="161.238.25.94" src_port="80"/>
    </slice>
    <from sec="1034226051" usec="0"/>
    <to sec="1034226111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.233.19.95"/>
    </slice>
    <from sec="1034226054" usec="0"/>
    <to sec="1034226299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.238.41.95"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_998{
style=filled;
color=gray75;
270[label="1.72.73.96s;186pkt 186fpkt", shape=rectangle, color=red];
4810[label="1.72.73.96;240pkt 240fpkt", shape=pentagon, color=darkviolet];
6502[label="1.72.73.96;240pkt 240fpkt", shape=invtriangle, color=brown];
7607[label="1.72.73.96;240pkt 240fpkt", shape=invhouse, color=bisque];
stat998[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.72.73.96:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
270--442[label="0.274194;51pkt 51fpkt"];
270--544[label="0.274194;51pkt 51fpkt"];
270--4810[label="1;186pkt 186fpkt"];
270--6502[label="1;186pkt 186fpkt"];
270--7607[label="1;186pkt 186fpkt"];
4810--6502[label="1;240pkt 240fpkt"];
4810--7607[label="1;240pkt 240fpkt"];
6502--7607[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.72.73.96" src_port="1033"/>
    </slice>
    <from sec="1034226715" usec="0"/>
    <to sec="1034226754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_999{
style=filled;
color=gray75;
4818[label="203.177.200.96;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6506[label="203.177.200.96;1pkt 1fpkt", shape=invtriangle, color=brown];
7609[label="203.177.200.96;1pkt 1fpkt", shape=invhouse, color=bisque];
stat999[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.177.200.96:80, 136.230.110.73:4065}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4065: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4818--6506[label="1;1pkt 1fpkt"];
4818--7609[label="1;1pkt 1fpkt"];
6506--7609[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.230.110.73" dst_port="4065" src_ip="203.177.200.96" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.106.25.98"/>
    </slice>
    <from sec="1034226627" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1001{
style=filled;
color=gray75;
2450[label="212.24.7.130;d;108pkt 108fpkt", shape=diamond, color=yellow];
4423[label="1.109.143.49;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4706[label="200.172.210.82;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4840[label="195.16.4.100;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5079[label="212.209.165.132;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6437[label="200.172.210.82;27pkt 27fpkt", shape=invtriangle, color=brown];
6520[label="195.16.4.100;2pkt 2fpkt", shape=invtriangle, color=brown];
6688[label="212.209.165.132;5pkt 5fpkt", shape=invtriangle, color=brown];
7573[label="200.172.210.82;27pkt 27fpkt", shape=invhouse, color=bisque];
7726[label="212.209.165.132;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1001[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.172.210.82:80, 212.24.7.130:*}[24.7706%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4091%)&lt;BR/&gt; 1729: (0.909091%)&lt;BR/&gt; 1722: (0.909091%)&lt;BR/&gt; 1720: (0.909091%)&lt;BR/&gt; 1717: (0.909091%)&gt;];
}
2450--3950[label="0.00925926;1pkt 1fpkt"];
2450--4423[label="1;14pkt 14fpkt"];
2450--4706[label="1;26pkt 26fpkt"];
2450--4840[label="0.5;1pkt 1fpkt"];
2450--4935[label="1;5pkt 5fpkt"];
2450--5079[label="1;5pkt 5fpkt"];
2450--6437[label="1;27pkt 27fpkt"];
2450--6520[label="0.5;1pkt 1fpkt"];
2450--6581[label="1;6pkt 6fpkt"];
2450--6688[label="1;5pkt 5fpkt"];
2450--7573[label="1;27pkt 27fpkt"];
2450--7726[label="1;4pkt 4fpkt"];
4706--6437[label="1;26pkt 26fpkt"];
4706--7573[label="1;26pkt 26fpkt"];
4840--6520[label="1;2pkt 2fpkt"];
5079--6688[label="1;5pkt 5fpkt"];
5079--7726[label="1;4pkt 4fpkt"];
6437--7573[label="1;27pkt 27fpkt"];
6688--7726[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.7.130" src_ip="200.172.210.82" src_port="80"/>
    </slice>
    <from sec="1034226013" usec="0"/>
    <to sec="1034226789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.785768,2.09562,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1002{
style=filled;
color=gray75;
2052[label="212.24.7.39;d;62pkt 62fpkt", shape=diamond, color=yellow];
4844[label="212.220.19.101;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5363[label="1.109.139.168;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6522[label="212.220.19.101;2pkt 2fpkt", shape=invtriangle, color=brown];
6885[label="1.109.139.168;2pkt 2fpkt", shape=invtriangle, color=brown];
7618[label="212.220.19.101;2pkt 2fpkt", shape=invhouse, color=bisque];
7854[label="1.109.139.168;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1002[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 212.24.7.39:*}[69.8413%]&lt;BR/&gt;{212.220.19.101:8034, 212.24.7.39:*}[26.9841%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34%)&lt;BR/&gt; 8034: (14.6667%)&lt;BR/&gt; 1263: (2.66667%)&lt;BR/&gt; 1261: (2.66667%)&lt;BR/&gt; 1254: (2.66667%)&gt;];
}
2052--3950[label="0.0806452;5pkt 5fpkt"];
2052--4844[label="0.5;1pkt 1fpkt"];
2052--4996[label="0.25;6pkt 6fpkt"];
2052--5019[label="0.538462;7pkt 7fpkt"];
2052--5363[label="1;3pkt 3fpkt"];
2052--6522[label="0.5;1pkt 1fpkt"];
2052--6624[label="0.28;7pkt 7fpkt"];
2052--6642[label="0.538462;7pkt 7fpkt"];
2052--6885[label="1;2pkt 2fpkt"];
2052--7618[label="0.5;1pkt 1fpkt"];
2052--7683[label="0.28;7pkt 7fpkt"];
2052--7854[label="1;2pkt 2fpkt"];
4844--6522[label="1;2pkt 2fpkt"];
4844--7618[label="1;2pkt 2fpkt"];
5363--6885[label="1;2pkt 2fpkt"];
5363--7854[label="1;2pkt 2fpkt"];
6522--7618[label="1;2pkt 2fpkt"];
6885--7854[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.7.39" src_port="80"/>
      <filter dst_ip="212.24.7.39" src_ip="212.220.19.101" src_port="8034"/>
    </slice>
    <from sec="1034226050" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1003{
style=filled;
color=gray75;
4847[label="219.136.45.101;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6525[label="219.136.45.101;3pkt 3fpkt", shape=invtriangle, color=brown];
7621[label="219.136.45.101;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1003[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.136.45.101:53, 161.238.212.20:1203}[33.3333%]&lt;BR/&gt;{219.136.45.101:1033, 167.8.68.130:53}[33.3333%]&lt;BR/&gt;{219.136.45.101:53, 161.238.244.217:1254}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1254: (18.75%)&lt;BR/&gt; 1203: (18.75%)&lt;BR/&gt; 1033: (12.5%)&gt;];
}
4847--6525[label="1;3pkt 3fpkt"];
4847--7621[label="1;2pkt 2fpkt"];
6525--7621[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.244.217" dst_port="1254" src_ip="219.136.45.101" src_port="53"/>
      <filter dst_ip="167.8.68.130" dst_port="53" src_ip="219.136.45.101" src_port="1033"/>
      <filter dst_ip="161.238.212.20" dst_port="1203" src_ip="219.136.45.101" src_port="53"/>
    </slice>
    <from sec="1034226408" usec="0"/>
    <to sec="1034226514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1004{
style=filled;
color=gray75;
4850[label="194.67.134.101;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6528[label="194.67.134.101;1pkt 1fpkt", shape=invtriangle, color=brown];
7624[label="194.67.134.101;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1004[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.67.134.101:25, 161.238.161.13:1372}[50%]&lt;BR/&gt;{194.67.134.101:25, 161.238.161.13:1373}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1373: (37.5%)&lt;BR/&gt; 1372: (12.5%)&gt;];
}
4850--6528[label="1;1pkt 1fpkt"];
4850--7624[label="1;1pkt 1fpkt"];
6528--7624[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.161.13" dst_port="1373" src_ip="194.67.134.101" src_port="25"/>
      <filter dst_ip="161.238.161.13" dst_port="1372" src_ip="194.67.134.101" src_port="25"/>
    </slice>
    <from sec="1034226412" usec="0"/>
    <to sec="1034226701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.137.235.101"/>
    </slice>
    <from sec="1034226006" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1006{
style=filled;
color=gray75;
4859[label="174.210.177.102;173pkt 173fpkt", shape=pentagon, color=darkviolet];
6533[label="174.210.177.102;174pkt 174fpkt", shape=invtriangle, color=brown];
stat1006[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.210.177.102:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4859--6533[label="1;173pkt 173fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="174.210.177.102" src_port="1027"/>
    </slice>
    <from sec="1034226048" usec="0"/>
    <to sec="1034226075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1008{
style=filled;
color=gray75;
277[label="213.40.43.104s;201pkt 201fpkt", shape=rectangle, color=red];
4866[label="213.40.43.104;216pkt 216fpkt", shape=pentagon, color=darkviolet];
6538[label="213.40.43.104;216pkt 216fpkt", shape=invtriangle, color=brown];
7628[label="213.40.43.104;216pkt 216fpkt", shape=invhouse, color=bisque];
stat1008[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.40.43.104:1035, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1035: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
277--3951[label="0.0646766;13pkt 13fpkt"];
277--3962[label="0.0646766;13pkt 13fpkt"];
277--3972[label="0.0646766;13pkt 13fpkt"];
277--4866[label="1;201pkt 201fpkt"];
277--6538[label="1;201pkt 201fpkt"];
277--7628[label="1;201pkt 201fpkt"];
4866--6538[label="1;216pkt 216fpkt"];
4866--7628[label="1;216pkt 216fpkt"];
6538--7628[label="1;216pkt 216fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.40.43.104" src_port="1035"/>
    </slice>
    <from sec="1034226267" usec="0"/>
    <to sec="1034226304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.102.150.107"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1010{
style=filled;
color=gray75;
4904[label="194.67.148.108;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6560[label="194.67.148.108;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1010[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.67.148.108:80, 167.8.140.2:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1509: (6.25%)&lt;BR/&gt; 1508: (6.25%)&lt;BR/&gt; 1507: (6.25%)&lt;BR/&gt; 1506: (6.25%)&gt;];
}
4904--6560[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.140.2" src_ip="194.67.148.108" src_port="80"/>
    </slice>
    <from sec="1034226204" usec="0"/>
    <to sec="1034226211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1011{
style=filled;
color=gray75;
4907[label="169.113.183.108;28pkt 28fpkt", shape=pentagon, color=darkviolet];
6561[label="169.113.183.108;27pkt 27fpkt", shape=invtriangle, color=brown];
7639[label="169.113.183.108;27pkt 27fpkt", shape=invhouse, color=bisque];
stat1011[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.113.183.108:80, 161.238.19.101:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1828: (1.82927%)&lt;BR/&gt; 1827: (1.82927%)&lt;BR/&gt; 1826: (1.82927%)&lt;BR/&gt; 1825: (1.82927%)&gt;];
}
4907--6561[label="1;27pkt 27fpkt"];
4907--7639[label="1;27pkt 27fpkt"];
6561--7639[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.19.101" src_ip="169.113.183.108" src_port="80"/>
    </slice>
    <from sec="1034226673" usec="0"/>
    <to sec="1034226678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,053,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1012{
style=filled;
color=gray75;
4909[label="213.91.96.109;47pkt 47fpkt", shape=pentagon, color=darkviolet];
6562[label="213.91.96.109;47pkt 47fpkt", shape=invtriangle, color=brown];
7640[label="213.91.96.109;48pkt 48fpkt", shape=invhouse, color=bisque];
stat1012[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.96.109:80, 213.212.87.2:*}[33.3333%]&lt;BR/&gt;{213.91.96.109:80, 212.223.18.34:*}[33.3333%]&lt;BR/&gt;{213.91.96.109:80, 197.163.171.217:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 15574: (1.05634%)&lt;BR/&gt; 15182: (1.05634%)&lt;BR/&gt; 14874: (1.05634%)&lt;BR/&gt; 14592: (1.05634%)&gt;];
}
4909--6562[label="1;47pkt 47fpkt"];
4909--7640[label="1;47pkt 47fpkt"];
6562--7640[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="197.163.171.217" src_ip="213.91.96.109" src_port="80"/>
      <filter dst_ip="212.223.18.34" src_ip="213.91.96.109" src_port="80"/>
      <filter dst_ip="213.212.87.2" src_ip="213.91.96.109" src_port="80"/>
    </slice>
    <from sec="1034226372" usec="0"/>
    <to sec="1034226628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1013{
style=filled;
color=gray75;
4913[label="201.126.0.110;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6566[label="201.126.0.110;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1013[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.126.0.110:*, 161.238.210.24:110}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 1907: (4.16667%)&lt;BR/&gt; 1903: (4.16667%)&lt;BR/&gt; 1900: (4.16667%)&lt;BR/&gt; 1897: (4.16667%)&gt;];
}
4913--6566[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.210.24" dst_port="110" src_ip="201.126.0.110"/>
    </slice>
    <from sec="1034226049" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.85.5.111"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.238.74.111"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1016{
style=filled;
color=gray75;
4920[label="192.113.212.111;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6571[label="192.113.212.111;19pkt 19fpkt", shape=invtriangle, color=brown];
7645[label="192.113.212.111;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1016[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.113.212.111:80, 161.238.34.205:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1365: (2.67857%)&lt;BR/&gt; 1364: (2.67857%)&lt;BR/&gt; 1363: (2.67857%)&lt;BR/&gt; 1362: (2.67857%)&gt;];
}
4920--6571[label="1;19pkt 19fpkt"];
4920--7645[label="1;18pkt 18fpkt"];
6571--7645[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.34.205" src_ip="192.113.212.111" src_port="80"/>
    </slice>
    <from sec="1034226605" usec="0"/>
    <to sec="1034226622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1017{
style=filled;
color=gray75;
4922[label="195.170.24.112;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6573[label="195.170.24.112;22pkt 22fpkt", shape=invtriangle, color=brown];
7646[label="195.170.24.112;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1017[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.170.24.112:80, 185.191.170.234:*}[95.6522%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5294%)&lt;BR/&gt; 0: (2.94118%)&lt;BR/&gt; 49212: (2.20588%)&lt;BR/&gt; 49211: (2.20588%)&lt;BR/&gt; 49210: (2.20588%)&gt;];
}
4922--6573[label="1;22pkt 22fpkt"];
4922--7646[label="1;23pkt 23fpkt"];
6573--7646[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.170.234" src_ip="195.170.24.112" src_port="80"/>
    </slice>
    <from sec="1034226469" usec="0"/>
    <to sec="1034226754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.97.36.112"/>
    </slice>
    <from sec="1034226400" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1019{
style=filled;
color=gray75;
4927[label="169.113.183.112;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6575[label="169.113.183.112;22pkt 22fpkt", shape=invtriangle, color=brown];
7647[label="169.113.183.112;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1019[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.113.183.112:80, 161.238.19.101:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1851: (2.27273%)&lt;BR/&gt; 1850: (2.27273%)&lt;BR/&gt; 1849: (2.27273%)&lt;BR/&gt; 1848: (2.27273%)&gt;];
}
4927--6575[label="1;22pkt 22fpkt"];
4927--7647[label="1;22pkt 22fpkt"];
6575--7647[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.19.101" src_ip="169.113.183.112" src_port="80"/>
    </slice>
    <from sec="1034226681" usec="0"/>
    <to sec="1034226686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1020{
style=filled;
color=gray75;
6579[label="86.21.208.113;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1020[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.21.208.113:80, 161.238.10.88:1685}[50%]&lt;BR/&gt;{86.21.208.113:80, 161.238.10.88:1805}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1805: (25%)&lt;BR/&gt; 1685: (25%)&gt;];
}
6579--7650[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.10.88" dst_port="1805" src_ip="86.21.208.113" src_port="80"/>
      <filter dst_ip="161.238.10.88" dst_port="1685" src_ip="86.21.208.113" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1021{
style=filled;
color=gray75;
4935[label="212.217.18.114;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6581[label="212.217.18.114;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1021[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.217.18.114:80, 212.24.7.130:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1797: (9.09091%)&lt;BR/&gt; 1796: (9.09091%)&lt;BR/&gt; 1743: (9.09091%)&lt;BR/&gt; 1742: (9.09091%)&gt;];
}
4935--6581[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.7.130" src_ip="212.217.18.114" src_port="80"/>
    </slice>
    <from sec="1034226556" usec="0"/>
    <to sec="1034226703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1022{
style=filled;
color=gray75;
4940[label="195.9.57.114;36pkt 36fpkt", shape=pentagon, color=darkviolet];
6586[label="195.9.57.114;37pkt 37fpkt", shape=invtriangle, color=brown];
7655[label="195.9.57.114;37pkt 37fpkt", shape=invhouse, color=bisque];
stat1022[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.9.57.114:80, 161.238.38.11:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3076: (1.36364%)&lt;BR/&gt; 3074: (1.36364%)&lt;BR/&gt; 3073: (1.36364%)&lt;BR/&gt; 3072: (1.36364%)&gt;];
}
4940--6586[label="1;36pkt 36fpkt"];
4940--7655[label="1;36pkt 36fpkt"];
6586--7655[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.38.11" src_ip="195.9.57.114" src_port="80"/>
    </slice>
    <from sec="1034226350" usec="0"/>
    <to sec="1034226684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.230.79.114"/>
    </slice>
    <from sec="1034226521" usec="0"/>
    <to sec="1034226776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1024{
style=filled;
color=gray75;
4944[label="167.8.190.114;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6588[label="167.8.190.114;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1024[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.190.114:3101, 85.34.109.2:1863}[50%]&lt;BR/&gt;{167.8.190.114:3099, 85.34.64.157:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3101: (33.3333%)&lt;BR/&gt; 1863: (33.3333%)&lt;BR/&gt; 3099: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
4944--6588[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="85.34.64.157" dst_port="80" src_ip="167.8.190.114" src_port="3099"/>
      <filter dst_ip="85.34.109.2" dst_port="1863" src_ip="167.8.190.114" src_port="3101"/>
    </slice>
    <from sec="1034226289" usec="0"/>
    <to sec="1034226333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1025{
style=filled;
color=gray75;
4951[label="167.8.136.115;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6594[label="167.8.136.115;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1025[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.136.115:1295, 85.34.109.86:1863}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1295: (50%)&gt;];
}
4951--6594[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="85.34.109.86" dst_port="1863" src_ip="167.8.136.115" src_port="1295"/>
    </slice>
    <from sec="1034226025" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1026{
style=filled;
color=gray75;
4959[label="160.1.149.116;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6601[label="160.1.149.116;7pkt 7fpkt", shape=invtriangle, color=brown];
7664[label="160.1.149.116;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1026[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.1.149.116:80, 190.13.98.232:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4026: (7.5%)&lt;BR/&gt; 4025: (7.5%)&lt;BR/&gt; 4024: (7.5%)&lt;BR/&gt; 4005: (7.5%)&gt;];
}
4959--6601[label="1;6pkt 6fpkt"];
4959--7664[label="1;6pkt 6fpkt"];
6601--7664[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="190.13.98.232" src_ip="160.1.149.116" src_port="80"/>
    </slice>
    <from sec="1034226544" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1027{
style=filled;
color=gray75;
286[label="185.212.24.118s;42pkt 42fpkt", shape=rectangle, color=red];
4967[label="185.212.24.118;112pkt 112fpkt", shape=pentagon, color=darkviolet];
6607[label="185.212.24.118;111pkt 111fpkt", shape=invtriangle, color=brown];
7669[label="185.212.24.118;111pkt 111fpkt", shape=invhouse, color=bisque];
stat1027[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.212.24.118:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
286--4967[label="1;42pkt 42fpkt"];
286--6607[label="1;42pkt 42fpkt"];
286--7669[label="1;42pkt 42fpkt"];
4967--6607[label="1;111pkt 111fpkt"];
4967--7669[label="1;111pkt 111fpkt"];
6607--7669[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="185.212.24.118" src_port="1025"/>
    </slice>
    <from sec="1034226551" usec="0"/>
    <to sec="1034226569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.134.97.118"/>
    </slice>
    <from sec="1034226012" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1029{
style=filled;
color=gray75;
4972[label="164.81.103.118;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6610[label="164.81.103.118;2pkt 2fpkt", shape=invtriangle, color=brown];
7672[label="164.81.103.118;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1029[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.81.103.118:80, 141.98.9.211:2427}[50%]&lt;BR/&gt;{164.81.103.118:80, 141.98.9.211:2428}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2428: (37.5%)&lt;BR/&gt; 2427: (12.5%)&gt;];
}
4972--6610[label="1;1pkt 1fpkt"];
4972--7672[label="1;1pkt 1fpkt"];
6610--7672[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.9.211" dst_port="2428" src_ip="164.81.103.118" src_port="80"/>
      <filter dst_ip="141.98.9.211" dst_port="2427" src_ip="164.81.103.118" src_port="80"/>
    </slice>
    <from sec="1034226499" usec="0"/>
    <to sec="1034226560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1030{
style=filled;
color=gray75;
4975[label="161.238.195.118;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6613[label="161.238.195.118;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1030[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.195.118:0, 81.21.32.5:0}[33.3333%]&lt;BR/&gt;{161.238.195.118:0, 208.253.9.103:0}[33.3333%]&lt;BR/&gt;{161.238.195.118:0, 195.104.10.116:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4975--6613[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.104.10.116" src_ip="161.238.195.118"/>
      <filter dst_ip="208.253.9.103" src_ip="161.238.195.118"/>
      <filter dst_ip="81.21.32.5" src_ip="161.238.195.118"/>
    </slice>
    <from sec="1034226247" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.113.238.119"/>
    </slice>
    <from sec="1034226527" usec="0"/>
    <to sec="1034226537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.29.71.122"/>
    </slice>
    <from sec="1034226076" usec="0"/>
    <to sec="1034226124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1033{
style=filled;
color=gray75;
5005[label="167.1.88.123;40pkt 40fpkt", shape=pentagon, color=darkviolet];
6632[label="167.1.88.123;39pkt 39fpkt", shape=invtriangle, color=brown];
stat1033[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.1.88.123:*, 218.9.159.144:6668}[32.5%]&lt;BR/&gt;{167.1.88.123:*, 163.34.4.95:6661}[27.5%]&lt;BR/&gt;{167.1.88.123:113, 218.9.159.144:*}[27.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6668: (16.4557%)&lt;BR/&gt; 6661: (13.9241%)&lt;BR/&gt; 113: (13.9241%)&lt;BR/&gt; 6667: (3.16456%)&lt;BR/&gt; 1430: (2.53165%)&gt;];
}
5005--6632[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="218.9.159.144" src_ip="167.1.88.123" src_port="113"/>
      <filter dst_ip="218.9.159.144" dst_port="6668" src_ip="167.1.88.123"/>
      <filter dst_ip="163.34.4.95" dst_port="6661" src_ip="167.1.88.123"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1034{
style=filled;
color=gray75;
5010[label="136.230.133.124;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6635[label="136.230.133.124;23pkt 23fpkt", shape=invtriangle, color=brown];
7690[label="136.230.133.124;24pkt 24fpkt", shape=invhouse, color=bisque];
stat1034[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.133.124:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5010--6635[label="1;23pkt 23fpkt"];
5010--7690[label="1;23pkt 23fpkt"];
6635--7690[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter src_ip="136.230.133.124"/>
    </slice>
    <from sec="1034226008" usec="0"/>
    <to sec="1034226788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1035{
style=filled;
color=gray75;
5012[label="195.18.188.124;256pkt 256fpkt", shape=pentagon, color=darkviolet];
6636[label="195.18.188.124;256pkt 256fpkt", shape=invtriangle, color=brown];
7691[label="195.18.188.124;256pkt 256fpkt", shape=invhouse, color=bisque];
stat1035[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.18.188.124:63849, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63849: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5012--6636[label="1;256pkt 256fpkt"];
5012--7691[label="1;256pkt 256fpkt"];
6636--7691[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.18.188.124" src_port="63849"/>
    </slice>
    <from sec="1034226469" usec="0"/>
    <to sec="1034226521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.235.233.126"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1037{
style=filled;
color=gray75;
5031[label="84.75.84.128;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6651[label="84.75.84.128;15pkt 15fpkt", shape=invtriangle, color=brown];
7704[label="84.75.84.128;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1037[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.75.84.128:80, 185.191.242.111:*}[86.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1145: (3.33333%)&lt;BR/&gt; 1144: (3.33333%)&lt;BR/&gt; 1143: (3.33333%)&lt;BR/&gt; 1142: (3.33333%)&gt;];
}
5031--6651[label="1;15pkt 15fpkt"];
5031--7704[label="1;15pkt 15fpkt"];
6651--7704[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.242.111" src_ip="84.75.84.128" src_port="80"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1038{
style=filled;
color=gray75;
5033[label="213.91.103.128;31pkt 31fpkt", shape=pentagon, color=darkviolet];
6653[label="213.91.103.128;32pkt 32fpkt", shape=invtriangle, color=brown];
stat1038[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.103.128:80, 1.151.7.52:*}[50%]&lt;BR/&gt;{213.91.103.128:80, 75.132.64.113:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3578: (1.5873%)&lt;BR/&gt; 3495: (1.5873%)&lt;BR/&gt; 3485: (1.5873%)&lt;BR/&gt; 3465: (1.5873%)&gt;];
}
5033--6653[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="75.132.64.113" src_ip="213.91.103.128" src_port="80"/>
      <filter dst_ip="1.151.7.52" src_ip="213.91.103.128" src_port="80"/>
    </slice>
    <from sec="1034226070" usec="0"/>
    <to sec="1034226133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.168.138.128"/>
    </slice>
    <from sec="1034226108" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1040{
style=filled;
color=gray75;
5038[label="212.172.216.128;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6657[label="212.172.216.128;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1040[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.172.216.128:80, 84.24.32.36:*}[26.3158%]&lt;BR/&gt;{212.172.216.128:80, 86.37.192.176:*}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55320: (2.7027%)&lt;BR/&gt; 35986: (2.7027%)&lt;BR/&gt; 35564: (2.7027%)&lt;BR/&gt; 30064: (2.7027%)&gt;];
}
5038--6657[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="86.37.192.176" src_ip="212.172.216.128" src_port="80"/>
      <filter dst_ip="84.24.32.36" src_ip="212.172.216.128" src_port="80"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1041{
style=filled;
color=gray75;
5042[label="161.238.45.129;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6660[label="161.238.45.129;1pkt 1fpkt", shape=invtriangle, color=brown];
7711[label="161.238.45.129;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1041[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.45.129:2110, 85.41.168.34:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2110: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5042--6660[label="1;1pkt 1fpkt"];
5042--7711[label="1;1pkt 1fpkt"];
6660--7711[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="85.41.168.34" dst_port="80" src_ip="161.238.45.129" src_port="2110"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.238.59.129"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1043{
style=filled;
color=gray75;
5046[label="2.180.231.129;255pkt 255fpkt", shape=pentagon, color=darkviolet];
6663[label="2.180.231.129;256pkt 256fpkt", shape=invtriangle, color=brown];
stat1043[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.180.231.129:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5046--6663[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="2.180.231.129" src_port="1025"/>
    </slice>
    <from sec="1034226447" usec="0"/>
    <to sec="1034226494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.8.65.131"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1045{
style=filled;
color=gray75;
5062[label="219.177.65.131;87pkt 87fpkt", shape=pentagon, color=darkviolet];
6674[label="219.177.65.131;86pkt 86fpkt", shape=invtriangle, color=brown];
7718[label="219.177.65.131;86pkt 86fpkt", shape=invhouse, color=bisque];
stat1045[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.177.65.131:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5062--6674[label="1;86pkt 86fpkt"];
5062--7718[label="1;86pkt 86fpkt"];
6674--7718[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter src_ip="219.177.65.131"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.234.21.132"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1047{
style=filled;
color=gray75;
5071[label="212.26.48.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6680[label="212.26.48.132;1pkt 1fpkt", shape=invtriangle, color=brown];
7722[label="212.26.48.132;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1047[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.26.48.132:80, 212.137.144.168:43742}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43742: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5071--6680[label="1;1pkt 1fpkt"];
5071--7722[label="1;1pkt 1fpkt"];
6680--7722[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.137.144.168" dst_port="43742" src_ip="212.26.48.132" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="130.60.83.132"/>
    </slice>
    <from sec="1034226306" usec="0"/>
    <to sec="1034226391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.70.142.132"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.83.86.133"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.104.239.134"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.112.116.135"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.23.150.136"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.26.110.137"/>
    </slice>
    <from sec="1034226210" usec="0"/>
    <to sec="1034226270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1055{
style=filled;
color=gray75;
5114[label="212.147.28.138;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6714[label="212.147.28.138;34pkt 34fpkt", shape=invtriangle, color=brown];
7741[label="212.147.28.138;33pkt 33fpkt", shape=invhouse, color=bisque];
stat1055[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.147.28.138:*, 218.144.90.23:113}[50%]&lt;BR/&gt;{212.147.28.138:25, 218.144.90.23:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (25.5%)&lt;BR/&gt; 25: (24.5%)&lt;BR/&gt; 44858: (1.5%)&lt;BR/&gt; 44853: (1.5%)&lt;BR/&gt; 44848: (1.5%)&gt;];
}
5114--6714[label="1;33pkt 33fpkt"];
5114--7741[label="1;33pkt 33fpkt"];
6714--7741[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="218.144.90.23" src_ip="212.147.28.138" src_port="25"/>
      <filter dst_ip="218.144.90.23" dst_port="113" src_ip="212.147.28.138"/>
    </slice>
    <from sec="1034226172" usec="0"/>
    <to sec="1034226783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.238.51.138"/>
    </slice>
    <from sec="1034226019" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1057{
style=filled;
color=gray75;
5117[label="142.173.131.138;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6716[label="142.173.131.138;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1057[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.173.131.138:0, 214.213.180.202:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5117--6716[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.213.180.202" src_ip="142.173.131.138"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1058{
style=filled;
color=gray75;
5121[label="161.238.233.138;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6719[label="161.238.233.138;30pkt 30fpkt", shape=invtriangle, color=brown];
7744[label="161.238.233.138;30pkt 30fpkt", shape=invhouse, color=bisque];
stat1058[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.233.138:*, 192.169.17.176:5555}[46.6667%]&lt;BR/&gt;{161.238.233.138:*, 86.188.174.148:5555}[36.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5555: (46.6667%)&lt;BR/&gt; 113: (3.33333%)&lt;BR/&gt; 56829: (1.66667%)&lt;BR/&gt; 56692: (1.66667%)&lt;BR/&gt; 2412: (1.66667%)&gt;];
}
5121--6719[label="1;30pkt 30fpkt"];
5121--7744[label="1;30pkt 30fpkt"];
6719--7744[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="192.169.17.176" dst_port="5555" src_ip="161.238.233.138"/>
      <filter dst_ip="86.188.174.148" dst_port="5555" src_ip="161.238.233.138"/>
    </slice>
    <from sec="1034226006" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.235.13.139"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.96361,2.07354,504,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1060{
style=filled;
color=gray75;
92[label="194.81.54.139s;58pkt 58fpkt", shape=rectangle, color=red];
2337[label="194.81.54.139;s;99pkt 99fpkt", shape=diamond, color=yellow];
2339[label="133.6.230.37;d;119pkt 119fpkt", shape=diamond, color=yellow];
5126[label="194.81.54.139;145pkt 145fpkt", shape=pentagon, color=darkviolet];
6723[label="194.81.54.139;145pkt 145fpkt", shape=invtriangle, color=brown];
7748[label="194.81.54.139;145pkt 145fpkt", shape=invhouse, color=bisque];
stat1060[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.81.54.139:*, 133.6.230.37:443}[81.3793%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (44.5148%)&lt;BR/&gt; 53: (4.14909%)&lt;BR/&gt; 80: (1.05485%)&lt;BR/&gt; 0: (0.562588%)&lt;BR/&gt; 1193: (0.421941%)&gt;];
}
92--2337[label="0.689655;40pkt 40fpkt"];
92--2339[label="1;58pkt 58fpkt"];
92--5126[label="1;58pkt 58fpkt"];
92--6723[label="1;58pkt 58fpkt"];
92--7748[label="1;58pkt 58fpkt"];
2337--2339[label="0.848485;84pkt 84fpkt"];
2337--5126[label="1;99pkt 99fpkt"];
2337--6723[label="1;99pkt 99fpkt"];
2337--7748[label="1;99pkt 99fpkt"];
2339--5126[label="1;119pkt 119fpkt"];
2339--6723[label="1;119pkt 119fpkt"];
2339--7748[label="1;119pkt 119fpkt"];
5126--6723[label="1;145pkt 145fpkt"];
5126--7748[label="1;145pkt 145fpkt"];
6723--7748[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter dst_ip="133.6.230.37" dst_port="443" src_ip="194.81.54.139"/>
    </slice>
    <from sec="1034226308" usec="0"/>
    <to sec="1034226726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1061{
style=filled;
color=gray75;
5130[label="164.12.224.139;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6725[label="164.12.224.139;3pkt 3fpkt", shape=invtriangle, color=brown];
7750[label="164.12.224.139;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1061[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.12.224.139:0, 167.164.145.128:0}[33.3333%]&lt;BR/&gt;{164.12.224.139:80, 167.164.249.175:33097}[33.3333%]&lt;BR/&gt;{164.12.224.139:80, 167.164.249.175:33098}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 0: (25%)&lt;BR/&gt; 33098: (18.75%)&lt;BR/&gt; 33097: (18.75%)&gt;];
}
5130--6725[label="1;2pkt 2fpkt"];
5130--7750[label="1;2pkt 2fpkt"];
6725--7750[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="167.164.249.175" dst_port="33098" src_ip="164.12.224.139" src_port="80"/>
      <filter dst_ip="167.164.249.175" dst_port="33097" src_ip="164.12.224.139" src_port="80"/>
      <filter dst_ip="167.164.145.128" src_ip="164.12.224.139"/>
    </slice>
    <from sec="1034226309" usec="0"/>
    <to sec="1034226358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="167.164.224.139"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.7.93.140"/>
    </slice>
    <from sec="1034226471" usec="0"/>
    <to sec="1034226786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1064{
style=filled;
color=gray75;
5141[label="212.130.23.141;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6734[label="212.130.23.141;33pkt 33fpkt", shape=invtriangle, color=brown];
7754[label="212.130.23.141;33pkt 33fpkt", shape=invhouse, color=bisque];
stat1064[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.130.23.141:80, 195.42.200.187:*}[57.5758%]&lt;BR/&gt;{212.130.23.141:80, 213.53.52.87:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63176: (1.51515%)&lt;BR/&gt; 63174: (1.51515%)&lt;BR/&gt; 63172: (1.51515%)&lt;BR/&gt; 63014: (1.51515%)&gt;];
}
5141--6734[label="1;33pkt 33fpkt"];
5141--7754[label="1;33pkt 33fpkt"];
6734--7754[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="195.42.200.187" src_ip="212.130.23.141" src_port="80"/>
      <filter dst_ip="213.53.52.87" src_ip="212.130.23.141" src_port="80"/>
    </slice>
    <from sec="1034226039" usec="0"/>
    <to sec="1034226311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.233.135.141"/>
    </slice>
    <from sec="1034226212" usec="0"/>
    <to sec="1034226519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1066{
style=filled;
color=gray75;
293[label="85.147.213.141s;59pkt 59fpkt", shape=rectangle, color=red];
5146[label="85.147.213.141;183pkt 183fpkt", shape=pentagon, color=darkviolet];
6738[label="85.147.213.141;183pkt 183fpkt", shape=invtriangle, color=brown];
stat1066[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.147.213.141:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
293--5146[label="1;59pkt 59fpkt"];
293--6738[label="1;59pkt 59fpkt"];
5146--6738[label="1;183pkt 183fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.147.213.141" src_port="1029"/>
    </slice>
    <from sec="1034226354" usec="0"/>
    <to sec="1034226383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1067{
style=filled;
color=gray75;
5154[label="86.161.158.142;228pkt 228fpkt", shape=pentagon, color=darkviolet];
6743[label="86.161.158.142;228pkt 228fpkt", shape=invtriangle, color=brown];
stat1067[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.161.158.142:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5154--6743[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter src_ip="86.161.158.142"/>
    </slice>
    <from sec="1034226345" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1068{
style=filled;
color=gray75;
298[label="216.248.118.143s;166pkt 166fpkt", shape=rectangle, color=red];
5160[label="216.248.118.143;202pkt 202fpkt", shape=pentagon, color=darkviolet];
6747[label="216.248.118.143;202pkt 202fpkt", shape=invtriangle, color=brown];
stat1068[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.248.118.143:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
298--5160[label="1;166pkt 166fpkt"];
298--6747[label="1;166pkt 166fpkt"];
5160--6747[label="1;202pkt 202fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.248.118.143" src_port="1025"/>
    </slice>
    <from sec="1034226515" usec="0"/>
    <to sec="1034226548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1069{
style=filled;
color=gray75;
5162[label="161.238.45.144;60pkt 60fpkt", shape=pentagon, color=darkviolet];
6749[label="161.238.45.144;60pkt 60fpkt", shape=invtriangle, color=brown];
7763[label="161.238.45.144;59pkt 59fpkt", shape=invhouse, color=bisque];
stat1069[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.45.144:*, 209.106.198.97:80}[96.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1556: (0.837989%)&lt;BR/&gt; 1546: (0.837989%)&lt;BR/&gt; 1533: (0.837989%)&lt;BR/&gt; 1532: (0.837989%)&gt;];
}
5162--6749[label="1;60pkt 60fpkt"];
5162--7763[label="1;59pkt 59fpkt"];
6749--7763[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="209.106.198.97" dst_port="80" src_ip="161.238.45.144"/>
    </slice>
    <from sec="1034226242" usec="0"/>
    <to sec="1034226454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.24.5.145"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32834,2.19405,503,0 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_1071{
style=filled;
color=gray75;
1177[label="161.238.61.239;d;100pkt 100fpkt", shape=diamond, color=yellow];
1515[label="167.20.213.118;d;100pkt 100fpkt", shape=diamond, color=yellow];
1521[label="167.8.180.5;d;165pkt 165fpkt", shape=diamond, color=yellow];
1558[label="167.8.185.245;d;233pkt 233fpkt", shape=diamond, color=yellow];
2203[label="85.69.32.211;s;115pkt 115fpkt", shape=diamond, color=yellow];
2230[label="85.69.32.202;s;111pkt 111fpkt", shape=diamond, color=yellow];
2234[label="85.69.32.145;s;118pkt 118fpkt", shape=diamond, color=yellow];
2236[label="85.69.32.208;s;107pkt 107fpkt", shape=diamond, color=yellow];
2388[label="161.238.40.164;d;65pkt 65fpkt", shape=diamond, color=yellow];
3285[label="167.8.44.150;d;12pkt 12fpkt", shape=hexagon, color=black];
3433[label="85.69.32.202;s;111pkt 111fpkt", shape=hexagon, color=black];
3907[label="167.8.185.245;d;219pkt 219fpkt", shape=polygon, color=gold];
5174[label="85.69.32.145;127pkt 127fpkt", shape=pentagon, color=darkviolet];
5616[label="85.69.32.202;117pkt 117fpkt", shape=pentagon, color=darkviolet];
5652[label="85.69.32.208;123pkt 123fpkt", shape=pentagon, color=darkviolet];
5672[label="85.69.32.211;134pkt 134fpkt", shape=pentagon, color=darkviolet];
5740[label="85.69.32.224;151pkt 151fpkt", shape=pentagon, color=darkviolet];
6757[label="85.69.32.145;127pkt 127fpkt", shape=invtriangle, color=brown];
7047[label="85.69.32.202;117pkt 117fpkt", shape=invtriangle, color=brown];
7074[label="85.69.32.208;123pkt 123fpkt", shape=invtriangle, color=brown];
7091[label="85.69.32.211;135pkt 135fpkt", shape=invtriangle, color=brown];
7768[label="85.69.32.145;127pkt 127fpkt", shape=invhouse, color=bisque];
7957[label="85.69.32.202;118pkt 118fpkt", shape=invhouse, color=bisque];
stat1071[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[87.0662%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.9072%)&lt;BR/&gt; 53: (6.19965%)&lt;BR/&gt; 25: (0.245184%)&lt;BR/&gt; 8080: (0.210158%)&lt;BR/&gt; 8000: (0.210158%)&gt;];
}
1177--1323[label="0.01;1pkt 1fpkt"];
1177--1751[label="0.04;4pkt 4fpkt"];
1177--1791[label="0.02;2pkt 2fpkt"];
1177--1907[label="0.03;3pkt 3fpkt"];
1177--1991[label="0.02;2pkt 2fpkt"];
1177--2002[label="0.01;1pkt 1fpkt"];
1177--2004[label="0.01;1pkt 1fpkt"];
1177--2023[label="0.01;1pkt 1fpkt"];
1177--2203[label="0.01;1pkt 1fpkt"];
1177--2216[label="0.03;3pkt 3fpkt"];
1177--2230[label="0.01;1pkt 1fpkt"];
1177--2234[label="0.02;2pkt 2fpkt"];
1177--2236[label="0.04;4pkt 4fpkt"];
1177--2356[label="0.01;1pkt 1fpkt"];
1177--2440[label="0.01;1pkt 1fpkt"];
1177--2867[label="0.0102041;1pkt 1fpkt"];
1177--3236[label="1;77pkt 77fpkt"];
1177--3433[label="0.01;1pkt 1fpkt"];
1177--3560[label="0.01;1pkt 1fpkt"];
1177--3946[label="0.15;15pkt 15fpkt"];
1177--3959[label="0.15;15pkt 15fpkt"];
1177--3969[label="0.15;15pkt 15fpkt"];
1177--5174[label="0.02;2pkt 2fpkt"];
1177--5207[label="0.01;1pkt 1fpkt"];
1177--5217[label="0.01;1pkt 1fpkt"];
1177--5226[label="0.04;4pkt 4fpkt"];
1177--5455[label="0.4;16pkt 16fpkt"];
1177--5566[label="0.01;1pkt 1fpkt"];
1177--5603[label="0.125;7pkt 7fpkt"];
1177--5616[label="0.01;1pkt 1fpkt"];
1177--5652[label="0.04;4pkt 4fpkt"];
1177--5665[label="0.02;2pkt 2fpkt"];
1177--5672[label="0.01;1pkt 1fpkt"];
1177--5710[label="0.02;2pkt 2fpkt"];
1177--5740[label="0.01;1pkt 1fpkt"];
1177--5823[label="0.01;1pkt 1fpkt"];
1177--5853[label="0.01;1pkt 1fpkt"];
1177--5914[label="1;3pkt 3fpkt"];
1177--6757[label="0.02;2pkt 2fpkt"];
1177--6779[label="0.01;1pkt 1fpkt"];
1177--6788[label="0.01;1pkt 1fpkt"];
1177--7037[label="0.127273;7pkt 7fpkt"];
1177--7047[label="0.01;1pkt 1fpkt"];
1177--7074[label="0.04;4pkt 4fpkt"];
1177--7085[label="0.02;2pkt 2fpkt"];
1177--7091[label="0.01;1pkt 1fpkt"];
1177--7114[label="0.02;2pkt 2fpkt"];
1177--7190[label="0.01;1pkt 1fpkt"];
1177--7215[label="0.01;1pkt 1fpkt"];
1177--7252[label="1;4pkt 4fpkt"];
1177--7768[label="0.02;2pkt 2fpkt"];
1177--7781[label="0.01;1pkt 1fpkt"];
1177--7788[label="0.01;1pkt 1fpkt"];
1177--7949[label="0.127273;7pkt 7fpkt"];
1177--7957[label="0.01;1pkt 1fpkt"];
1177--7979[label="0.02;2pkt 2fpkt"];
1177--7996[label="0.02;2pkt 2fpkt"];
1177--8045[label="0.01;1pkt 1fpkt"];
1177--8064[label="0.01;1pkt 1fpkt"];
1515--1744[label="1;83pkt 83fpkt"];
1515--1751[label="0.01;1pkt 1fpkt"];
1515--1791[label="0.03;3pkt 3fpkt"];
1515--1961[label="0.0206186;2pkt 2fpkt"];
1515--1991[label="0.01;1pkt 1fpkt"];
1515--2002[label="0.01;1pkt 1fpkt"];
1515--2004[label="0.01;1pkt 1fpkt"];
1515--2027[label="0.01;1pkt 1fpkt"];
1515--2230[label="0.03;3pkt 3fpkt"];
1515--2236[label="0.02;2pkt 2fpkt"];
1515--2356[label="0.01;1pkt 1fpkt"];
1515--3433[label="0.03;3pkt 3fpkt"];
1515--3560[label="0.01;1pkt 1fpkt"];
1515--3718[label="0.01;1pkt 1fpkt"];
1515--3946[label="0.14;14pkt 14fpkt"];
1515--3959[label="0.14;14pkt 14fpkt"];
1515--3969[label="0.14;14pkt 14fpkt"];
1515--5217[label="0.01;1pkt 1fpkt"];
1515--5226[label="0.01;1pkt 1fpkt"];
1515--5250[label="0.01;1pkt 1fpkt"];
1515--5251[label="0.953488;82pkt 82fpkt"];
1515--5566[label="0.01;1pkt 1fpkt"];
1515--5616[label="0.03;3pkt 3fpkt"];
1515--5652[label="0.02;2pkt 2fpkt"];
1515--5665[label="0.01;1pkt 1fpkt"];
1515--5710[label="0.03;3pkt 3fpkt"];
1515--5853[label="0.01;1pkt 1fpkt"];
1515--6788[label="0.01;1pkt 1fpkt"];
1515--6808[label="0.953488;82pkt 82fpkt"];
1515--7047[label="0.03;3pkt 3fpkt"];
1515--7074[label="0.02;2pkt 2fpkt"];
1515--7085[label="0.01;1pkt 1fpkt"];
1515--7114[label="0.03;3pkt 3fpkt"];
1515--7215[label="0.01;1pkt 1fpkt"];
1515--7788[label="0.01;1pkt 1fpkt"];
1515--7804[label="0.953488;82pkt 82fpkt"];
1515--7957[label="0.03;3pkt 3fpkt"];
1515--7979[label="0.01;1pkt 1fpkt"];
1515--7996[label="0.03;3pkt 3fpkt"];
1515--8064[label="0.01;1pkt 1fpkt"];
1521--1751[label="0.0294118;4pkt 4fpkt"];
1521--1791[label="0.0708661;9pkt 9fpkt"];
1521--1907[label="0.032;4pkt 4fpkt"];
1521--1961[label="0.0515464;5pkt 5fpkt"];
1521--1991[label="0.0305344;4pkt 4fpkt"];
1521--2002[label="0.0218978;3pkt 3fpkt"];
1521--2004[label="0.048;6pkt 6fpkt"];
1521--2023[label="0.00699301;1pkt 1fpkt"];
1521--2027[label="0.0322581;4pkt 4fpkt"];
1521--2203[label="0.0434783;5pkt 5fpkt"];
1521--2216[label="0.0446429;5pkt 5fpkt"];
1521--2224[label="0.0223881;3pkt 3fpkt"];
1521--2230[label="0.0720721;8pkt 8fpkt"];
1521--2234[label="0.0338983;4pkt 4fpkt"];
1521--2236[label="0.046729;5pkt 5fpkt"];
1521--2356[label="0.0192308;2pkt 2fpkt"];
1521--2440[label="0.036036;4pkt 4fpkt"];
1521--2867[label="0.0510204;5pkt 5fpkt"];
1521--2976[label="1;111pkt 111fpkt"];
1521--3431[label="0.0185185;2pkt 2fpkt"];
1521--3433[label="0.0720721;8pkt 8fpkt"];
1521--3560[label="0.0252101;3pkt 3fpkt"];
1521--3718[label="0.0322581;4pkt 4fpkt"];
1521--3800[label="0.0547945;4pkt 4fpkt"];
1521--3946[label="0.254545;42pkt 42fpkt"];
1521--3959[label="0.254545;42pkt 42fpkt"];
1521--3969[label="0.254545;42pkt 42fpkt"];
1521--4288[label="0.0625;2pkt 2fpkt"];
1521--4679[label="0.375;3pkt 3fpkt"];
1521--4877[label="0.428571;6pkt 6fpkt"];
1521--5174[label="0.0314961;4pkt 4fpkt"];
1521--5207[label="0.0350877;4pkt 4fpkt"];
1521--5217[label="0.0447761;6pkt 6fpkt"];
1521--5226[label="0.0275862;4pkt 4fpkt"];
1521--5250[label="0.03125;4pkt 4fpkt"];
1521--5330[label="0.25;7pkt 7fpkt"];
1521--5455[label="0.05;2pkt 2fpkt"];
1521--5566[label="0.0166667;2pkt 2fpkt"];
1521--5616[label="0.0683761;8pkt 8fpkt"];
1521--5652[label="0.0406504;5pkt 5fpkt"];
1521--5665[label="0.027027;4pkt 4fpkt"];
1521--5672[label="0.0373134;5pkt 5fpkt"];
1521--5710[label="0.06;9pkt 9fpkt"];
1521--5740[label="0.00662252;1pkt 1fpkt"];
1521--5781[label="0.607143;17pkt 17fpkt"];
1521--5823[label="0.0373134;5pkt 5fpkt"];
1521--5853[label="0.0191083;3pkt 3fpkt"];
1521--6418[label="0.428571;3pkt 3fpkt"];
1521--6757[label="0.0314961;4pkt 4fpkt"];
1521--6779[label="0.0350877;4pkt 4fpkt"];
1521--6788[label="0.0447761;6pkt 6fpkt"];
1521--6865[label="0.25;7pkt 7fpkt"];
1521--7047[label="0.0683761;8pkt 8fpkt"];
1521--7074[label="0.0406504;5pkt 5fpkt"];
1521--7085[label="0.0272109;4pkt 4fpkt"];
1521--7091[label="0.037037;5pkt 5fpkt"];
1521--7114[label="0.0596026;9pkt 9fpkt"];
1521--7190[label="0.0373134;5pkt 5fpkt"];
1521--7215[label="0.0191083;3pkt 3fpkt"];
1521--7560[label="0.428571;3pkt 3fpkt"];
1521--7768[label="0.0314961;4pkt 4fpkt"];
1521--7781[label="0.0347826;4pkt 4fpkt"];
1521--7788[label="0.0451128;6pkt 6fpkt"];
1521--7842[label="0.25;7pkt 7fpkt"];
1521--7957[label="0.0677966;8pkt 8fpkt"];
1521--7979[label="0.027027;4pkt 4fpkt"];
1521--7996[label="0.06;9pkt 9fpkt"];
1521--8045[label="0.0373134;5pkt 5fpkt"];
1521--8064[label="0.0192308;3pkt 3fpkt"];
1558--1751[label="0.00735294;1pkt 1fpkt"];
1558--1791[label="0.0314961;4pkt 4fpkt"];
1558--1907[label="0.024;3pkt 3fpkt"];
1558--1961[label="0.0206186;2pkt 2fpkt"];
1558--1991[label="0.0229008;3pkt 3fpkt"];
1558--2002[label="0.0145985;2pkt 2fpkt"];
1558--2004[label="0.024;3pkt 3fpkt"];
1558--2027[label="0.016129;2pkt 2fpkt"];
1558--2145[label="0.141176;12pkt 12fpkt"];
1558--2203[label="0.0173913;2pkt 2fpkt"];
1558--2216[label="0.0178571;2pkt 2fpkt"];
1558--2224[label="0.0149254;2pkt 2fpkt"];
1558--2230[label="0.045045;5pkt 5fpkt"];
1558--2234[label="0.0169492;2pkt 2fpkt"];
1558--2236[label="0.00934579;1pkt 1fpkt"];
1558--2356[label="0.0192308;2pkt 2fpkt"];
1558--2440[label="0.018018;2pkt 2fpkt"];
1558--2535[label="1;1pkt 1fpkt"];
1558--2867[label="0.0408163;4pkt 4fpkt"];
1558--3421[label="1;219pkt 219fpkt"];
1558--3431[label="0.00925926;1pkt 1fpkt"];
1558--3433[label="0.045045;5pkt 5fpkt"];
1558--3560[label="0.0168067;2pkt 2fpkt"];
1558--3630[label="1;1pkt 1fpkt"];
1558--3718[label="0.016129;2pkt 2fpkt"];
1558--3800[label="0.0547945;4pkt 4fpkt"];
1558--3907[label="1;219pkt 219fpkt"];
1558--3913[label="1;1pkt 1fpkt"];
1558--3946[label="0.154506;36pkt 36fpkt"];
1558--3959[label="0.154506;36pkt 36fpkt"];
1558--3969[label="0.154506;36pkt 36fpkt"];
1558--4288[label="0.0625;2pkt 2fpkt"];
1558--4773[label="1;1pkt 1fpkt"];
1558--4877[label="0.571429;8pkt 8fpkt"];
1558--5174[label="0.015748;2pkt 2fpkt"];
1558--5207[label="0.0175439;2pkt 2fpkt"];
1558--5217[label="0.0223881;3pkt 3fpkt"];
1558--5226[label="0.00689655;1pkt 1fpkt"];
1558--5250[label="0.015625;2pkt 2fpkt"];
1558--5330[label="0.75;21pkt 21fpkt"];
1558--5566[label="0.0166667;2pkt 2fpkt"];
1558--5616[label="0.042735;5pkt 5fpkt"];
1558--5652[label="0.00813008;1pkt 1fpkt"];
1558--5665[label="0.0202703;3pkt 3fpkt"];
1558--5672[label="0.0149254;2pkt 2fpkt"];
1558--5710[label="0.0266667;4pkt 4fpkt"];
1558--5781[label="0.392857;11pkt 11fpkt"];
1558--5823[label="0.0298507;4pkt 4fpkt"];
1558--5853[label="0.0127389;2pkt 2fpkt"];
1558--5938[label="0.925;37pkt 37fpkt"];
1558--6757[label="0.015748;2pkt 2fpkt"];
1558--6779[label="0.0175439;2pkt 2fpkt"];
1558--6788[label="0.0223881;3pkt 3fpkt"];
1558--6865[label="0.75;21pkt 21fpkt"];
1558--7031[label="1;1pkt 1fpkt"];
1558--7047[label="0.042735;5pkt 5fpkt"];
1558--7074[label="0.00813008;1pkt 1fpkt"];
1558--7085[label="0.0204082;3pkt 3fpkt"];
1558--7091[label="0.0148148;2pkt 2fpkt"];
1558--7114[label="0.0264901;4pkt 4fpkt"];
1558--7190[label="0.0298507;4pkt 4fpkt"];
1558--7215[label="0.0127389;2pkt 2fpkt"];
1558--7266[label="0.923077;36pkt 36fpkt"];
1558--7768[label="0.015748;2pkt 2fpkt"];
1558--7781[label="0.0173913;2pkt 2fpkt"];
1558--7788[label="0.0225564;3pkt 3fpkt"];
1558--7842[label="0.75;21pkt 21fpkt"];
1558--7957[label="0.0423729;5pkt 5fpkt"];
1558--7979[label="0.0202703;3pkt 3fpkt"];
1558--7996[label="0.0266667;4pkt 4fpkt"];
1558--8045[label="0.0298507;4pkt 4fpkt"];
1558--8064[label="0.0128205;2pkt 2fpkt"];
1558--8094[label="0.923077;36pkt 36fpkt"];
2203--2388[label="0.0923077;6pkt 6fpkt"];
2203--2398[label="0.00869565;1pkt 1fpkt"];
2203--2544[label="0.016129;1pkt 1fpkt"];
2203--2976[label="0.036036;4pkt 4fpkt"];
2203--3236[label="0.012987;1pkt 1fpkt"];
2203--3421[label="0.0173913;2pkt 2fpkt"];
2203--3435[label="0.0173913;2pkt 2fpkt"];
2203--3686[label="0.00869565;1pkt 1fpkt"];
2203--3886[label="0.0173913;2pkt 2fpkt"];
2203--3907[label="0.0173913;2pkt 2fpkt"];
2203--3945[label="0.0173913;2pkt 2fpkt"];
2203--3946[label="0.130435;15pkt 15fpkt"];
2203--3958[label="0.0173913;2pkt 2fpkt"];
2203--3959[label="0.130435;15pkt 15fpkt"];
2203--3968[label="0.0173913;2pkt 2fpkt"];
2203--3969[label="0.130435;15pkt 15fpkt"];
2203--5672[label="0.991304;114pkt 114fpkt"];
2203--7091[label="1;115pkt 115fpkt"];
2230--2388[label="0.0153846;1pkt 1fpkt"];
2230--2437[label="0.0833333;3pkt 3fpkt"];
2230--2544[label="0.0322581;2pkt 2fpkt"];
2230--2582[label="0.0196078;1pkt 1fpkt"];
2230--2976[label="0.045045;5pkt 5fpkt"];
2230--3236[label="0.012987;1pkt 1fpkt"];
2230--3421[label="0.045045;5pkt 5fpkt"];
2230--3433[label="1;111pkt 111fpkt"];
2230--3435[label="0.036036;4pkt 4fpkt"];
2230--3703[label="0.0196078;1pkt 1fpkt"];
2230--3886[label="0.036036;4pkt 4fpkt"];
2230--3907[label="0.045045;5pkt 5fpkt"];
2230--3946[label="0.027027;3pkt 3fpkt"];
2230--3959[label="0.027027;3pkt 3fpkt"];
2230--3969[label="0.027027;3pkt 3fpkt"];
2230--5616[label="0.990991;110pkt 110fpkt"];
2230--7047[label="0.990991;110pkt 110fpkt"];
2230--7957[label="1;111pkt 111fpkt"];
2234--2388[label="0.0615385;4pkt 4fpkt"];
2234--2544[label="0.0483871;3pkt 3fpkt"];
2234--2551[label="0.0192308;1pkt 1fpkt"];
2234--2582[label="0.0588235;3pkt 3fpkt"];
2234--2976[label="0.036036;4pkt 4fpkt"];
2234--3236[label="0.012987;1pkt 1fpkt"];
2234--3285[label="0.0833333;1pkt 1fpkt"];
2234--3421[label="0.0169492;2pkt 2fpkt"];
2234--3435[label="0.0508475;6pkt 6fpkt"];
2234--3654[label="0.0192308;1pkt 1fpkt"];
2234--3703[label="0.0588235;3pkt 3fpkt"];
2234--3886[label="0.0508475;6pkt 6fpkt"];
2234--3907[label="0.0169492;2pkt 2fpkt"];
2234--3941[label="0.00847458;1pkt 1fpkt"];
2234--3945[label="0.0423729;5pkt 5fpkt"];
2234--3946[label="0.0932203;11pkt 11fpkt"];
2234--3954[label="0.00847458;1pkt 1fpkt"];
2234--3958[label="0.0423729;5pkt 5fpkt"];
2234--3959[label="0.0932203;11pkt 11fpkt"];
2234--3964[label="0.00847458;1pkt 1fpkt"];
2234--3968[label="0.0423729;5pkt 5fpkt"];
2234--3969[label="0.0932203;11pkt 11fpkt"];
2234--5174[label="0.991525;117pkt 117fpkt"];
2234--6757[label="0.991525;117pkt 117fpkt"];
2234--7768[label="0.991525;117pkt 117fpkt"];
2236--2388[label="0.0307692;2pkt 2fpkt"];
2236--2398[label="0.00934579;1pkt 1fpkt"];
2236--2437[label="0.0555556;2pkt 2fpkt"];
2236--2976[label="0.0373832;4pkt 4fpkt"];
2236--3236[label="0.038961;3pkt 3fpkt"];
2236--3421[label="0.00934579;1pkt 1fpkt"];
2236--3435[label="0.0373832;4pkt 4fpkt"];
2236--3686[label="0.00934579;1pkt 1fpkt"];
2236--3886[label="0.0373832;4pkt 4fpkt"];
2236--3907[label="0.00934579;1pkt 1fpkt"];
2236--3941[label="0.00934579;1pkt 1fpkt"];
2236--3945[label="0.00934579;1pkt 1fpkt"];
2236--3946[label="0.0280374;3pkt 3fpkt"];
2236--3954[label="0.00934579;1pkt 1fpkt"];
2236--3958[label="0.00934579;1pkt 1fpkt"];
2236--3959[label="0.0280374;3pkt 3fpkt"];
2236--3964[label="0.00934579;1pkt 1fpkt"];
2236--3968[label="0.00934579;1pkt 1fpkt"];
2236--3969[label="0.0280374;3pkt 3fpkt"];
2236--5652[label="1;107pkt 107fpkt"];
2236--7074[label="1;107pkt 107fpkt"];
2388--2440[label="0.0461538;3pkt 3fpkt"];
2388--2867[label="0.0153846;1pkt 1fpkt"];
2388--3431[label="0.0307692;2pkt 2fpkt"];
2388--3433[label="0.0153846;1pkt 1fpkt"];
2388--3946[label="0.0615385;4pkt 4fpkt"];
2388--3959[label="0.0615385;4pkt 4fpkt"];
2388--3969[label="0.0615385;4pkt 4fpkt"];
2388--4579[label="0.133333;2pkt 2fpkt"];
2388--4816[label="0.714286;10pkt 10fpkt"];
2388--5174[label="0.0615385;4pkt 4fpkt"];
2388--5207[label="0.0461538;3pkt 3fpkt"];
2388--5217[label="0.0153846;1pkt 1fpkt"];
2388--5226[label="0.0307692;2pkt 2fpkt"];
2388--5297[label="0.0769231;2pkt 2fpkt"];
2388--5379[label="0.142857;1pkt 1fpkt"];
2388--5455[label="0.025;1pkt 1fpkt"];
2388--5464[label="0.125;1pkt 1fpkt"];
2388--5529[label="0.0172414;1pkt 1fpkt"];
2388--5566[label="0.0307692;2pkt 2fpkt"];
2388--5603[label="0.0357143;2pkt 2fpkt"];
2388--5616[label="0.0153846;1pkt 1fpkt"];
2388--5652[label="0.0307692;2pkt 2fpkt"];
2388--5665[label="0.0615385;4pkt 4fpkt"];
2388--5672[label="0.0923077;6pkt 6fpkt"];
2388--5740[label="0.0153846;1pkt 1fpkt"];
2388--5823[label="0.0153846;1pkt 1fpkt"];
2388--6504[label="0.714286;10pkt 10fpkt"];
2388--6757[label="0.0615385;4pkt 4fpkt"];
2388--6779[label="0.0461538;3pkt 3fpkt"];
2388--6788[label="0.0153846;1pkt 1fpkt"];
2388--6845[label="0.0769231;2pkt 2fpkt"];
2388--6895[label="0.166667;1pkt 1fpkt"];
2388--6991[label="0.0172414;1pkt 1fpkt"];
2388--7037[label="0.0363636;2pkt 2fpkt"];
2388--7047[label="0.0153846;1pkt 1fpkt"];
2388--7074[label="0.0307692;2pkt 2fpkt"];
2388--7085[label="0.0615385;4pkt 4fpkt"];
2388--7091[label="0.0923077;6pkt 6fpkt"];
2388--7190[label="0.0153846;1pkt 1fpkt"];
2388--7768[label="0.0615385;4pkt 4fpkt"];
2388--7781[label="0.0461538;3pkt 3fpkt"];
2388--7788[label="0.0153846;1pkt 1fpkt"];
2388--7829[label="0.08;2pkt 2fpkt"];
2388--7861[label="0.142857;1pkt 1fpkt"];
2388--7916[label="0.0172414;1pkt 1fpkt"];
2388--7949[label="0.0363636;2pkt 2fpkt"];
2388--7957[label="0.0153846;1pkt 1fpkt"];
2388--7979[label="0.0615385;4pkt 4fpkt"];
2388--8045[label="0.0153846;1pkt 1fpkt"];
3285--3541[label="0.0833333;1pkt 1fpkt"];
3285--3946[label="0.0833333;1pkt 1fpkt"];
3285--3959[label="0.0833333;1pkt 1fpkt"];
3285--3969[label="0.0833333;1pkt 1fpkt"];
3285--3976[label="0.0833333;1pkt 1fpkt"];
3285--4265[label="0.166667;2pkt 2fpkt"];
3285--4896[label="0.0833333;1pkt 1fpkt"];
3285--5069[label="0.0833333;1pkt 1fpkt"];
3285--5174[label="0.0833333;1pkt 1fpkt"];
3285--5940[label="0.0833333;1pkt 1fpkt"];
3285--6148[label="0.166667;2pkt 2fpkt"];
3285--6678[label="0.0833333;1pkt 1fpkt"];
3285--6757[label="0.0833333;1pkt 1fpkt"];
3285--7268[label="0.0833333;1pkt 1fpkt"];
3285--7392[label="0.166667;2pkt 2fpkt"];
3285--7768[label="0.0833333;1pkt 1fpkt"];
3433--3435[label="0.036036;4pkt 4fpkt"];
3433--3703[label="0.0196078;1pkt 1fpkt"];
3433--3886[label="0.036036;4pkt 4fpkt"];
3433--3907[label="0.045045;5pkt 5fpkt"];
3433--3946[label="0.027027;3pkt 3fpkt"];
3433--3959[label="0.027027;3pkt 3fpkt"];
3433--3969[label="0.027027;3pkt 3fpkt"];
3433--5616[label="0.990991;110pkt 110fpkt"];
3433--7047[label="0.990991;110pkt 110fpkt"];
3433--7957[label="1;111pkt 111fpkt"];
3907--3913[label="1;1pkt 1fpkt"];
3907--3946[label="0.164384;36pkt 36fpkt"];
3907--3959[label="0.164384;36pkt 36fpkt"];
3907--3969[label="0.164384;36pkt 36fpkt"];
3907--4288[label="0.03125;1pkt 1fpkt"];
3907--4773[label="1;1pkt 1fpkt"];
3907--4877[label="0.571429;8pkt 8fpkt"];
3907--5174[label="0.015748;2pkt 2fpkt"];
3907--5207[label="0.0175439;2pkt 2fpkt"];
3907--5217[label="0.0223881;3pkt 3fpkt"];
3907--5226[label="0.00689655;1pkt 1fpkt"];
3907--5250[label="0.015625;2pkt 2fpkt"];
3907--5330[label="0.75;21pkt 21fpkt"];
3907--5566[label="0.0166667;2pkt 2fpkt"];
3907--5616[label="0.042735;5pkt 5fpkt"];
3907--5652[label="0.00813008;1pkt 1fpkt"];
3907--5665[label="0.0135135;2pkt 2fpkt"];
3907--5672[label="0.0149254;2pkt 2fpkt"];
3907--5710[label="0.0266667;4pkt 4fpkt"];
3907--5781[label="0.392857;11pkt 11fpkt"];
3907--5823[label="0.0298507;4pkt 4fpkt"];
3907--5853[label="0.0127389;2pkt 2fpkt"];
3907--5938[label="0.825;33pkt 33fpkt"];
3907--6757[label="0.015748;2pkt 2fpkt"];
3907--6779[label="0.0175439;2pkt 2fpkt"];
3907--6788[label="0.0223881;3pkt 3fpkt"];
3907--6865[label="0.75;21pkt 21fpkt"];
3907--7031[label="1;1pkt 1fpkt"];
3907--7047[label="0.042735;5pkt 5fpkt"];
3907--7074[label="0.00813008;1pkt 1fpkt"];
3907--7085[label="0.0136054;2pkt 2fpkt"];
3907--7091[label="0.0148148;2pkt 2fpkt"];
3907--7114[label="0.0264901;4pkt 4fpkt"];
3907--7190[label="0.0298507;4pkt 4fpkt"];
3907--7215[label="0.0127389;2pkt 2fpkt"];
3907--7266[label="0.820513;32pkt 32fpkt"];
3907--7768[label="0.015748;2pkt 2fpkt"];
3907--7781[label="0.0173913;2pkt 2fpkt"];
3907--7788[label="0.0225564;3pkt 3fpkt"];
3907--7842[label="0.75;21pkt 21fpkt"];
3907--7957[label="0.0423729;5pkt 5fpkt"];
3907--7979[label="0.0135135;2pkt 2fpkt"];
3907--7996[label="0.0266667;4pkt 4fpkt"];
3907--8045[label="0.0298507;4pkt 4fpkt"];
3907--8064[label="0.0128205;2pkt 2fpkt"];
3907--8094[label="0.820513;32pkt 32fpkt"];
5174--6757[label="1;127pkt 127fpkt"];
5174--7768[label="1;127pkt 127fpkt"];
5616--7047[label="1;117pkt 117fpkt"];
5616--7957[label="1;117pkt 117fpkt"];
5652--7074[label="1;123pkt 123fpkt"];
5672--7091[label="1;134pkt 134fpkt"];
6757--7768[label="1;127pkt 127fpkt"];
7047--7957[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.210.95.145"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.235.237.145"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.71.136.147"/>
    </slice>
    <from sec="1034226625" usec="0"/>
    <to sec="1034226680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1075{
style=filled;
color=gray75;
5192[label="171.70.164.147;200pkt 200fpkt", shape=pentagon, color=darkviolet];
6769[label="171.70.164.147;200pkt 200fpkt", shape=invtriangle, color=brown];
7776[label="171.70.164.147;200pkt 200fpkt", shape=invhouse, color=bisque];
stat1075[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.70.164.147:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5192--6769[label="1;200pkt 200fpkt"];
5192--7776[label="1;200pkt 200fpkt"];
6769--7776[label="1;200pkt 200fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="171.70.164.147" src_port="1025"/>
    </slice>
    <from sec="1034226277" usec="0"/>
    <to sec="1034226309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1076{
style=filled;
color=gray75;
4641[label="167.164.180.75;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6397[label="167.164.180.75;5pkt 5fpkt", shape=invtriangle, color=brown];
7549[label="167.164.180.75;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1076[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.164.180.75:1703, 209.168.137.133:80}[20%]&lt;BR/&gt;{167.164.180.75:1710, 209.168.137.133:80}[20%]&lt;BR/&gt;{167.164.180.75:1700, 192.89.38.138:80}[20%]&lt;BR/&gt;{167.164.180.75:1701, 192.89.38.138:80}[20%]&lt;BR/&gt;{167.164.180.75:1702, 192.89.38.138:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1710: (10%)&lt;BR/&gt; 1703: (10%)&lt;BR/&gt; 1702: (10%)&lt;BR/&gt; 1701: (10%)&gt;];
}
4641--6397[label="1;5pkt 5fpkt"];
4641--7549[label="1;5pkt 5fpkt"];
6397--7549[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="192.89.38.138" dst_port="80" src_ip="167.164.180.75" src_port="1702"/>
      <filter dst_ip="192.89.38.138" dst_port="80" src_ip="167.164.180.75" src_port="1701"/>
      <filter dst_ip="192.89.38.138" dst_port="80" src_ip="167.164.180.75" src_port="1700"/>
      <filter dst_ip="209.168.137.133" dst_port="80" src_ip="167.164.180.75" src_port="1710"/>
      <filter dst_ip="209.168.137.133" dst_port="80" src_ip="167.164.180.75" src_port="1703"/>
    </slice>
    <from sec="1034226048" usec="0"/>
    <to sec="1034226271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.107.103.148"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.41.18.149"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1079{
style=filled;
color=gray75;
5210[label="194.81.54.149;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6782[label="194.81.54.149;8pkt 8fpkt", shape=invtriangle, color=brown];
7783[label="194.81.54.149;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1079[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.81.54.149:*, 162.198.52.49:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1681: (6.25%)&lt;BR/&gt; 1680: (6.25%)&lt;BR/&gt; 1679: (6.25%)&lt;BR/&gt; 1678: (6.25%)&gt;];
}
5210--6782[label="1;8pkt 8fpkt"];
5210--7783[label="1;8pkt 8fpkt"];
6782--7783[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="162.198.52.49" dst_port="443" src_ip="194.81.54.149"/>
    </slice>
    <from sec="1034226630" usec="0"/>
    <to sec="1034226787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1080{
style=filled;
color=gray75;
5214[label="213.16.200.149;106pkt 106fpkt", shape=pentagon, color=darkviolet];
6786[label="213.16.200.149;106pkt 106fpkt", shape=invtriangle, color=brown];
7786[label="213.16.200.149;106pkt 106fpkt", shape=invhouse, color=bisque];
stat1080[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.16.200.149:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5214--6786[label="1;106pkt 106fpkt"];
5214--7786[label="1;106pkt 106fpkt"];
6786--7786[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.16.200.149" src_port="1026"/>
    </slice>
    <from sec="1034226502" usec="0"/>
    <to sec="1034226542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1081{
style=filled;
color=gray75;
5230[label="161.238.45.152;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6794[label="161.238.45.152;8pkt 8fpkt", shape=invtriangle, color=brown];
7792[label="161.238.45.152;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1081[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.45.152:*, 221.136.68.180:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2049: (6.52174%)&lt;BR/&gt; 2048: (6.52174%)&lt;BR/&gt; 2047: (6.52174%)&lt;BR/&gt; 2046: (6.52174%)&gt;];
}
5230--6794[label="1;8pkt 8fpkt"];
5230--7792[label="1;7pkt 7fpkt"];
6794--7792[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="221.136.68.180" dst_port="80" src_ip="161.238.45.152"/>
    </slice>
    <from sec="1034226473" usec="0"/>
    <to sec="1034226704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1082{
style=filled;
color=gray75;
5248[label="136.230.98.154;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6806[label="136.230.98.154;10pkt 10fpkt", shape=invtriangle, color=brown];
7802[label="136.230.98.154;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1082[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.98.154:80, 85.103.231.79:*}[70%]&lt;BR/&gt;{136.230.98.154:25, *:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35%)&lt;BR/&gt; 25: (15%)&lt;BR/&gt; 35485: (5%)&lt;BR/&gt; 35476: (5%)&lt;BR/&gt; 35475: (5%)&gt;];
}
5248--6806[label="1;10pkt 10fpkt"];
5248--7802[label="1;10pkt 10fpkt"];
6806--7802[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="136.230.98.154" src_port="25"/>
      <filter dst_ip="85.103.231.79" src_ip="136.230.98.154" src_port="80"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1083{
style=filled;
color=gray75;
5255[label="136.230.105.156;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6812[label="136.230.105.156;1pkt 1fpkt", shape=invtriangle, color=brown];
7807[label="136.230.105.156;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1083[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.105.156:1051, 208.166.163.32:20}[50%]&lt;BR/&gt;{136.230.105.156:44885, 85.34.108.70:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1051: (37.5%)&lt;BR/&gt; 20: (37.5%)&lt;BR/&gt; 44885: (12.5%)&lt;BR/&gt; 1863: (12.5%)&gt;];
}
5255--6812[label="1;1pkt 1fpkt"];
5255--7807[label="1;1pkt 1fpkt"];
6812--7807[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="85.34.108.70" dst_port="1863" src_ip="136.230.105.156" src_port="44885"/>
      <filter dst_ip="208.166.163.32" dst_port="20" src_ip="136.230.105.156" src_port="1051"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.34.64.157"/>
    </slice>
    <from sec="1034226290" usec="0"/>
    <to sec="1034226333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1085{
style=filled;
color=gray75;
5270[label="86.17.169.157;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6822[label="86.17.169.157;12pkt 12fpkt", shape=invtriangle, color=brown];
7815[label="86.17.169.157;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1085[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.17.169.157:*, 161.238.78.10:80}[66.6667%]&lt;BR/&gt;{86.17.169.157:*, 161.238.78.3:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 20444: (4.28571%)&lt;BR/&gt; 20438: (4.28571%)&lt;BR/&gt; 20437: (4.28571%)&lt;BR/&gt; 20436: (4.28571%)&gt;];
}
5270--6822[label="1;12pkt 12fpkt"];
5270--7815[label="1;11pkt 11fpkt"];
6822--7815[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.78.10" dst_port="80" src_ip="86.17.169.157"/>
      <filter dst_ip="161.238.78.3" dst_port="80" src_ip="86.17.169.157"/>
    </slice>
    <from sec="1034226080" usec="0"/>
    <to sec="1034226092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.22.3.158"/>
    </slice>
    <from sec="1034226009" usec="0"/>
    <to sec="1034226783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.118.189.158"/>
    </slice>
    <from sec="1034226489" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1088{
style=filled;
color=gray75;
5278[label="185.191.229.158;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6828[label="185.191.229.158;12pkt 12fpkt", shape=invtriangle, color=brown];
7819[label="185.191.229.158;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1088[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.229.158:*, 214.44.138.45:443}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (41.6667%)&lt;BR/&gt; 5190: (4.16667%)&lt;BR/&gt; 1863: (4.16667%)&lt;BR/&gt; 1578: (4.16667%)&lt;BR/&gt; 1577: (4.16667%)&gt;];
}
5278--6828[label="1;12pkt 12fpkt"];
5278--7819[label="1;12pkt 12fpkt"];
6828--7819[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="214.44.138.45" dst_port="443" src_ip="185.191.229.158"/>
    </slice>
    <from sec="1034226057" usec="0"/>
    <to sec="1034226725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.241.232.158"/>
    </slice>
    <from sec="1034226300" usec="0"/>
    <to sec="1034226371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1090{
style=filled;
color=gray75;
5285[label="167.8.42.160;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6834[label="167.8.42.160;22pkt 22fpkt", shape=invtriangle, color=brown];
stat1090[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.42.160:80, *:*}[60.8696%]&lt;BR/&gt;{167.8.42.160:38482, *:53}[39.1304%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 38482: (20%)&lt;BR/&gt; 53: (20%)&lt;BR/&gt; 61953: (2.22222%)&lt;BR/&gt; 46175: (2.22222%)&gt;];
}
5285--6834[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="167.8.42.160" src_port="80"/>
      <filter dst_port="53" src_ip="167.8.42.160" src_port="38482"/>
    </slice>
    <from sec="1034226083" usec="0"/>
    <to sec="1034226768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1091{
style=filled;
color=gray75;
309[label="75.54.104.160s;138pkt 138fpkt", shape=rectangle, color=red];
5289[label="75.54.104.160;209pkt 209fpkt", shape=pentagon, color=darkviolet];
6838[label="75.54.104.160;208pkt 208fpkt", shape=invtriangle, color=brown];
stat1091[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.54.104.160:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
309--5289[label="1;138pkt 138fpkt"];
309--6838[label="0.992754;137pkt 137fpkt"];
5289--6838[label="1;208pkt 208fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="75.54.104.160" src_port="1026"/>
    </slice>
    <from sec="1034226619" usec="0"/>
    <to sec="1034226652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1092{
style=filled;
color=gray75;
5304[label="85.34.123.162;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6849[label="85.34.123.162;6pkt 6fpkt", shape=invtriangle, color=brown];
7831[label="85.34.123.162;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1092[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.34.123.162:80, 161.238.248.72:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1115: (8.33333%)&lt;BR/&gt; 1114: (8.33333%)&lt;BR/&gt; 1113: (8.33333%)&lt;BR/&gt; 1112: (8.33333%)&gt;];
}
5304--6849[label="1;6pkt 6fpkt"];
5304--7831[label="1;6pkt 6fpkt"];
6849--7831[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.248.72" src_ip="85.34.123.162" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.202.7.163"/>
    </slice>
    <from sec="1034226090" usec="0"/>
    <to sec="1034226793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1094{
style=filled;
color=gray75;
5319[label="1.173.130.163;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6857[label="1.173.130.163;116pkt 116fpkt", shape=invtriangle, color=brown];
7837[label="1.173.130.163;117pkt 117fpkt", shape=invhouse, color=bisque];
stat1094[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.173.130.163:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5319--6857[label="1;116pkt 116fpkt"];
5319--7837[label="1;116pkt 116fpkt"];
6857--7837[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.173.130.163" src_port="1027"/>
    </slice>
    <from sec="1034226782" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.658063,2.10925,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1095{
style=filled;
color=gray75;
2583[label="167.20.84.186;d;61pkt 61fpkt", shape=diamond, color=yellow];
5325[label="43.249.162.164;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6861[label="43.249.162.164;15pkt 15fpkt", shape=invtriangle, color=brown];
stat1095[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.249.162.164:1214, 167.20.84.186:*}[20.3125%]&lt;BR/&gt;{*:6346, 167.20.84.186:*}[20.3125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (32.4176%)&lt;BR/&gt; 6346: (7.14286%)&lt;BR/&gt; 3388: (1.64835%)&lt;BR/&gt; 3364: (1.64835%)&lt;BR/&gt; 3355: (1.64835%)&gt;];
}
2583--5325[label="0.8;12pkt 12fpkt"];
2583--6861[label="0.8;12pkt 12fpkt"];
5325--6861[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="167.20.84.186" src_port="6346"/>
      <filter dst_ip="167.20.84.186" src_ip="43.249.162.164" src_port="1214"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.194.83.165"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1097{
style=filled;
color=gray75;
5336[label="161.238.16.166;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6869[label="161.238.16.166;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1097[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.16.166:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5336--6869[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="161.238.16.166"/>
    </slice>
    <from sec="1034226070" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1098{
style=filled;
color=gray75;
5343[label="184.3.87.166;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6874[label="184.3.87.166;4pkt 4fpkt", shape=invtriangle, color=brown];
7847[label="184.3.87.166;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1098[shape=component, label=&lt;Rules:&lt;BR/&gt;{184.3.87.166:4752, 141.0.8.2:139}[25%]&lt;BR/&gt;{184.3.87.166:4760, 141.0.8.8:139}[25%]&lt;BR/&gt;{184.3.87.166:4764, 141.0.8.14:139}[25%]&lt;BR/&gt;{184.3.87.166:4766, 141.0.8.82:139}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4766: (12.5%)&lt;BR/&gt; 4764: (12.5%)&lt;BR/&gt; 4760: (12.5%)&lt;BR/&gt; 4752: (12.5%)&gt;];
}
5343--6874[label="1;4pkt 4fpkt"];
5343--7847[label="1;4pkt 4fpkt"];
6874--7847[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="141.0.8.82" dst_port="139" src_ip="184.3.87.166" src_port="4766"/>
      <filter dst_ip="141.0.8.14" dst_port="139" src_ip="184.3.87.166" src_port="4764"/>
      <filter dst_ip="141.0.8.8" dst_port="139" src_ip="184.3.87.166" src_port="4760"/>
      <filter dst_ip="141.0.8.2" dst_port="139" src_ip="184.3.87.166" src_port="4752"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1099{
style=filled;
color=gray75;
5344[label="213.82.100.166;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6875[label="213.82.100.166;1pkt 1fpkt", shape=invtriangle, color=brown];
7848[label="213.82.100.166;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1099[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.82.100.166:80, 213.91.100.228:2504}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2504: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5344--6875[label="1;1pkt 1fpkt"];
5344--7848[label="1;1pkt 1fpkt"];
6875--7848[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.91.100.228" dst_port="2504" src_ip="213.82.100.166" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1100{
style=filled;
color=gray75;
5373[label="167.8.180.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6892[label="167.8.180.170;1pkt 1fpkt", shape=invtriangle, color=brown];
7860[label="167.8.180.170;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1100[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.180.170:110, 43.57.17.143:1462}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1462: (50%)&lt;BR/&gt; 110: (50%)&gt;];
}
5373--6892[label="1;1pkt 1fpkt"];
5373--7860[label="1;1pkt 1fpkt"];
6892--7860[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="43.57.17.143" dst_port="1462" src_ip="167.8.180.170" src_port="110"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.89.251.171"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.233.84.173"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1104{
style=filled;
color=gray75;
5405[label="84.29.71.174;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6913[label="84.29.71.174;16pkt 16fpkt", shape=invtriangle, color=brown];
7870[label="84.29.71.174;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1104[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.29.71.174:80, 212.18.91.159:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50790: (3.26087%)&lt;BR/&gt; 50788: (3.26087%)&lt;BR/&gt; 50787: (3.26087%)&lt;BR/&gt; 50786: (3.26087%)&gt;];
}
5405--6913[label="1;15pkt 15fpkt"];
5405--7870[label="1;15pkt 15fpkt"];
6913--7870[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.91.159" src_ip="84.29.71.174" src_port="80"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.232.24.175"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43733,2.16033,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1106{
style=filled;
color=gray75;
324[label="1.26.63.176s;204pkt 204fpkt", shape=rectangle, color=red];
499[label="1.26.63.176s;51pkt 51fpkt", shape=ellipse, color=green];
5414[label="1.26.63.176;249pkt 249fpkt", shape=pentagon, color=darkviolet];
6920[label="1.26.63.176;248pkt 248fpkt", shape=invtriangle, color=brown];
7875[label="1.26.63.176;248pkt 248fpkt", shape=invhouse, color=bisque];
stat1106[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.26.63.176:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
324--499[label="1;51pkt 51fpkt"];
324--5414[label="1;204pkt 204fpkt"];
324--6920[label="0.995098;203pkt 203fpkt"];
324--7875[label="0.995098;203pkt 203fpkt"];
499--5414[label="1;51pkt 51fpkt"];
499--6920[label="1;51pkt 51fpkt"];
499--7875[label="1;51pkt 51fpkt"];
5414--6920[label="1;248pkt 248fpkt"];
5414--7875[label="1;248pkt 248fpkt"];
6920--7875[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.26.63.176" src_port="1027"/>
    </slice>
    <from sec="1034226056" usec="0"/>
    <to sec="1034226096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1107{
style=filled;
color=gray75;
5417[label="167.24.144.176;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6922[label="167.24.144.176;10pkt 10fpkt", shape=invtriangle, color=brown];
7877[label="167.24.144.176;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1107[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.24.144.176:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5417--6922[label="1;9pkt 9fpkt"];
5417--7877[label="1;9pkt 9fpkt"];
6922--7877[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="167.24.144.176"/>
    </slice>
    <from sec="1034226138" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1108{
style=filled;
color=gray75;
5429[label="1.150.88.178;106pkt 106fpkt", shape=pentagon, color=darkviolet];
6930[label="1.150.88.178;105pkt 105fpkt", shape=invtriangle, color=brown];
7882[label="1.150.88.178;106pkt 106fpkt", shape=invhouse, color=bisque];
stat1108[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.150.88.178:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5429--6930[label="1;105pkt 105fpkt"];
5429--7882[label="1;106pkt 106fpkt"];
6930--7882[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.150.88.178" src_port="1025"/>
    </slice>
    <from sec="1034226507" usec="0"/>
    <to sec="1034226524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.182.229.178"/>
    </slice>
    <from sec="1034226222" usec="0"/>
    <to sec="1034226479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1110{
style=filled;
color=gray75;
5439[label="1.109.33.179;217pkt 217fpkt", shape=pentagon, color=darkviolet];
6935[label="1.109.33.179;217pkt 217fpkt", shape=invtriangle, color=brown];
stat1110[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.109.33.179:1104, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1104: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5439--6935[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.109.33.179" src_port="1104"/>
    </slice>
    <from sec="1034226478" usec="0"/>
    <to sec="1034226513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.180.202.180"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1112{
style=filled;
color=gray75;
5457[label="200.119.4.181;132pkt 132fpkt", shape=pentagon, color=darkviolet];
6943[label="200.119.4.181;133pkt 133fpkt", shape=invtriangle, color=brown];
7887[label="200.119.4.181;132pkt 132fpkt", shape=invhouse, color=bisque];
stat1112[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.119.4.181:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5457--6943[label="1;132pkt 132fpkt"];
5457--7887[label="1;132pkt 132fpkt"];
6943--7887[label="1;132pkt 132fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.119.4.181" src_port="1025"/>
    </slice>
    <from sec="1034226755" usec="0"/>
    <to sec="1034226776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.173.18.181"/>
    </slice>
    <from sec="1034226023" usec="0"/>
    <to sec="1034226771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.136.59.181"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.230.104.181"/>
    </slice>
    <from sec="1034226008" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1116{
style=filled;
color=gray75;
5474[label="203.177.203.182;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6953[label="203.177.203.182;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1116[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.177.203.182:80, 136.230.110.73:3999}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3999: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5474--6953[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.230.110.73" dst_port="3999" src_ip="203.177.203.182" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1117{
style=filled;
color=gray75;
329[label="1.6.241.182s;163pkt 163fpkt", shape=rectangle, color=red];
5475[label="1.6.241.182;178pkt 178fpkt", shape=pentagon, color=darkviolet];
6954[label="1.6.241.182;179pkt 179fpkt", shape=invtriangle, color=brown];
stat1117[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.6.241.182:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
329--3953[label="0.754601;123pkt 123fpkt"];
329--5475[label="1;163pkt 163fpkt"];
329--6954[label="1;163pkt 163fpkt"];
5475--6954[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.6.241.182" src_port="1025"/>
    </slice>
    <from sec="1034226700" usec="0"/>
    <to sec="1034226730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.101.131.186"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1119{
style=filled;
color=gray75;
5496[label="167.151.150.186;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6967[label="167.151.150.186;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1119[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.151.150.186:80, 86.18.143.173:*}[40%]&lt;BR/&gt;{167.151.150.186:80, 81.64.163.32:*}[20%]&lt;BR/&gt;{167.151.150.186:80, 86.149.96.36:*}[20%]&lt;BR/&gt;{167.151.150.186:80, 86.149.66.140:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50747: (5%)&lt;BR/&gt; 50746: (5%)&lt;BR/&gt; 50745: (5%)&lt;BR/&gt; 50744: (5%)&gt;];
}
5496--6967[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="86.18.143.173" src_ip="167.151.150.186" src_port="80"/>
      <filter dst_ip="86.149.66.140" src_ip="167.151.150.186" src_port="80"/>
      <filter dst_ip="86.149.96.36" src_ip="167.151.150.186" src_port="80"/>
      <filter dst_ip="81.64.163.32" src_ip="167.151.150.186" src_port="80"/>
    </slice>
    <from sec="1034226034" usec="0"/>
    <to sec="1034226650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1120{
style=filled;
color=gray75;
5499[label="202.163.242.186;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6970[label="202.163.242.186;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1120[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.163.242.186:6699, 185.191.183.81:1757}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1757: (50%)&gt;];
}
5499--6970[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.183.81" dst_port="1757" src_ip="202.163.242.186" src_port="6699"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="10.0.13.187"/>
    </slice>
    <from sec="1034226011" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1122{
style=filled;
color=gray75;
5507[label="200.214.84.188;105pkt 105fpkt", shape=pentagon, color=darkviolet];
6975[label="200.214.84.188;106pkt 106fpkt", shape=invtriangle, color=brown];
7904[label="200.214.84.188;106pkt 106fpkt", shape=invhouse, color=bisque];
stat1122[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.214.84.188:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5507--6975[label="1;105pkt 105fpkt"];
5507--7904[label="1;105pkt 105fpkt"];
6975--7904[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.214.84.188" src_port="1027"/>
    </slice>
    <from sec="1034226586" usec="0"/>
    <to sec="1034226603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1123{
style=filled;
color=gray75;
5509[label="86.110.99.188;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6976[label="86.110.99.188;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1123[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.110.99.188:80, 185.191.55.150:2970}[50%]&lt;BR/&gt;{86.110.99.188:80, 185.191.55.150:2971}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2971: (25%)&lt;BR/&gt; 2970: (25%)&gt;];
}
5509--6976[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.55.150" dst_port="2971" src_ip="86.110.99.188" src_port="80"/>
      <filter dst_ip="185.191.55.150" dst_port="2970" src_ip="86.110.99.188" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1124{
style=filled;
color=gray75;
5513[label="195.9.32.189;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6979[label="195.9.32.189;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1124[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.9.32.189:80, 161.238.248.132:1787}[50%]&lt;BR/&gt;{195.9.32.189:80, 161.238.248.132:1788}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1788: (33.3333%)&lt;BR/&gt; 1787: (16.6667%)&gt;];
}
5513--6979[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.248.132" dst_port="1788" src_ip="195.9.32.189" src_port="80"/>
      <filter dst_ip="161.238.248.132" dst_port="1787" src_ip="195.9.32.189" src_port="80"/>
    </slice>
    <from sec="1034226343" usec="0"/>
    <to sec="1034226381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1125{
style=filled;
color=gray75;
5515[label="136.230.118.189;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6980[label="136.230.118.189;6pkt 6fpkt", shape=invtriangle, color=brown];
7907[label="136.230.118.189;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1125[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.118.189:25, *:*}[66.6667%]&lt;BR/&gt;{136.230.118.189:*, 212.83.69.223:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.6667%)&lt;BR/&gt; 38062: (8.33333%)&lt;BR/&gt; 35740: (8.33333%)&lt;BR/&gt; 13340: (8.33333%)&lt;BR/&gt; 4836: (8.33333%)&gt;];
}
5515--6980[label="1;6pkt 6fpkt"];
5515--7907[label="1;6pkt 6fpkt"];
6980--7907[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="212.83.69.223" src_ip="136.230.118.189"/>
      <filter src_ip="136.230.118.189" src_port="25"/>
    </slice>
    <from sec="1034226222" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.777514,2.137,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1126{
style=filled;
color=gray75;
1464[label="86.135.44.141;d;10pkt 10fpkt", shape=diamond, color=yellow];
2454[label="185.191.0.96;s;49pkt 49fpkt", shape=diamond, color=yellow];
3580[label="185.191.0.96;s;49pkt 49fpkt", shape=hexagon, color=black];
4451[label="136.230.111.52;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat1126[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.0.96:25, *:*}[50%]&lt;BR/&gt;{185.191.0.96:0, *:0}[24.2424%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (35.0427%)&lt;BR/&gt; 0: (28.2051%)&lt;BR/&gt; 10658: (1.28205%)&lt;BR/&gt; 61418: (0.854701%)&lt;BR/&gt; 60488: (0.854701%)&gt;];
}
1464--1467[label="0.1;1pkt 1fpkt"];
1464--1755[label="0.1;1pkt 1fpkt"];
1464--2169[label="0.1;1pkt 1fpkt"];
1464--2454[label="0.1;1pkt 1fpkt"];
1464--3041[label="0.1;1pkt 1fpkt"];
1464--3408[label="0.1;1pkt 1fpkt"];
1464--3580[label="0.1;1pkt 1fpkt"];
1464--3631[label="0.1;1pkt 1fpkt"];
1464--3880[label="0.1;1pkt 1fpkt"];
1464--3914[label="0.1;1pkt 1fpkt"];
1464--4134[label="0.1;1pkt 1fpkt"];
1464--4451[label="0.111111;1pkt 1fpkt"];
1464--4727[label="0.1;1pkt 1fpkt"];
1464--5516[label="0.1;1pkt 1fpkt"];
1464--6058[label="0.1;1pkt 1fpkt"];
1464--6981[label="0.1;1pkt 1fpkt"];
2454--3580[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter src_ip="185.191.0.96" src_port="25"/>
      <filter src_ip="185.191.0.96"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1127{
style=filled;
color=gray75;
5520[label="86.73.20.190;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6984[label="86.73.20.190;9pkt 9fpkt", shape=invtriangle, color=brown];
7910[label="86.73.20.190;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1127[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.73.20.190:80, 161.238.19.48:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1164: (5.55556%)&lt;BR/&gt; 1162: (5.55556%)&lt;BR/&gt; 1160: (5.55556%)&lt;BR/&gt; 1158: (5.55556%)&gt;];
}
5520--6984[label="1;9pkt 9fpkt"];
5520--7910[label="1;9pkt 9fpkt"];
6984--7910[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.19.48" src_ip="86.73.20.190" src_port="80"/>
    </slice>
    <from sec="1034226740" usec="0"/>
    <to sec="1034226770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4407,2.17297,999,1 0 0 1 1 1 0 0 0 1 1 1 ">
    <description>subgraph cluster_1128{
style=filled;
color=gray75;
114[label="84.102.234.190s;2pkt 2fpkt", shape=rectangle, color=red];
753[label="84.102.234.190;s;52pkt 52fpkt", shape=diamond, color=yellow];
794[label="84.102.234.161;s;8pkt 8fpkt", shape=diamond, color=yellow];
951[label="84.102.234.171;s;26pkt 26fpkt", shape=diamond, color=yellow];
952[label="161.238.208.170;d;1pkt 1fpkt", shape=diamond, color=yellow];
1301[label="167.8.180.170;d;239pkt 239fpkt", shape=diamond, color=yellow];
1465[label="86.135.44.141;s;9pkt 9fpkt", shape=diamond, color=yellow];
1675[label="167.20.191.141;d;53pkt 53fpkt", shape=diamond, color=yellow];
1754[label="161.238.14.85;d;76pkt 76fpkt", shape=diamond, color=yellow];
1826[label="141.98.197.56;d;62pkt 62fpkt", shape=diamond, color=yellow];
2081[label="86.135.44.183;s;3pkt 3fpkt", shape=diamond, color=yellow];
2357[label="167.164.145.142;d;97pkt 97fpkt", shape=diamond, color=yellow];
2711[label="84.102.234.161;s;8pkt 8fpkt", shape=hexagon, color=black];
2745[label="161.238.208.170;d;1pkt 1fpkt", shape=hexagon, color=black];
2984[label="84.102.234.171;s;23pkt 23fpkt", shape=hexagon, color=black];
3113[label="161.238.14.85;d;76pkt 76fpkt", shape=hexagon, color=black];
3200[label="167.20.191.141;d;40pkt 40fpkt", shape=hexagon, color=black];
3504[label="167.164.145.142;d;97pkt 97fpkt", shape=hexagon, color=black];
3584[label="141.98.197.56;d;62pkt 62fpkt", shape=hexagon, color=black];
3654[label="136.230.111.48;d;52pkt 52fpkt", shape=hexagon, color=black];
3667[label="161.238.1.229;d;57pkt 57fpkt", shape=hexagon, color=black];
3833[label="161.238.14.85;d;37pkt 37fpkt", shape=polygon, color=gold];
3934[label="141.98.197.56;d;62pkt 62fpkt", shape=polygon, color=gold];
4609[label="194.93.9.73;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4860[label="85.228.69.103;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5039[label="1.108.230.128;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5297[label="84.102.234.161;26pkt 26fpkt", shape=pentagon, color=darkviolet];
5301[label="86.135.44.162;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5388[label="84.102.234.171;29pkt 29fpkt", shape=pentagon, color=darkviolet];
5476[label="86.135.44.183;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5529[label="84.102.234.190;58pkt 58fpkt", shape=pentagon, color=darkviolet];
6534[label="85.228.69.103;9pkt 9fpkt", shape=invtriangle, color=brown];
6658[label="1.108.230.128;3pkt 3fpkt", shape=invtriangle, color=brown];
6845[label="84.102.234.161;26pkt 26fpkt", shape=invtriangle, color=brown];
6848[label="86.135.44.162;22pkt 22fpkt", shape=invtriangle, color=brown];
6991[label="84.102.234.190;58pkt 58fpkt", shape=invtriangle, color=brown];
7709[label="1.108.230.128;3pkt 3fpkt", shape=invhouse, color=bisque];
7829[label="84.102.234.161;25pkt 25fpkt", shape=invhouse, color=bisque];
7916[label="84.102.234.190;58pkt 58fpkt", shape=invhouse, color=bisque];
stat1128[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 167.8.180.170:*}[20.0831%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (38.7742%)&lt;BR/&gt; 53: (6.12925%)&lt;BR/&gt; 46595: (5.32978%)&lt;BR/&gt; 443: (1.99867%)&lt;BR/&gt; 995: (1.29913%)&gt;];
}
114--444[label="0.5;1pkt 1fpkt"];
114--753[label="1;2pkt 2fpkt"];
114--909[label="1;2pkt 2fpkt"];
114--3667[label="1;2pkt 2fpkt"];
114--5529[label="1;2pkt 2fpkt"];
114--6991[label="1;2pkt 2fpkt"];
114--7916[label="1;2pkt 2fpkt"];
753--909[label="0.153846;8pkt 8fpkt"];
753--970[label="0.0487805;2pkt 2fpkt"];
753--1301[label="0.115385;6pkt 6fpkt"];
753--1675[label="0.173077;9pkt 9fpkt"];
753--1754[label="0.0769231;4pkt 4fpkt"];
753--1826[label="0.0576923;3pkt 3fpkt"];
753--2357[label="0.0192308;1pkt 1fpkt"];
753--2388[label="0.0192308;1pkt 1fpkt"];
753--2551[label="0.0961538;5pkt 5fpkt"];
753--3113[label="0.0769231;4pkt 4fpkt"];
753--3140[label="0.0487805;2pkt 2fpkt"];
753--3200[label="0.15;6pkt 6fpkt"];
753--3504[label="0.0192308;1pkt 1fpkt"];
753--3584[label="0.0576923;3pkt 3fpkt"];
753--3654[label="0.0961538;5pkt 5fpkt"];
753--3667[label="0.153846;8pkt 8fpkt"];
753--3833[label="0.0810811;3pkt 3fpkt"];
753--3934[label="0.0576923;3pkt 3fpkt"];
753--5529[label="0.980769;51pkt 51fpkt"];
753--6991[label="0.980769;51pkt 51fpkt"];
753--7916[label="0.980769;51pkt 51fpkt"];
794--970[label="0.125;1pkt 1fpkt"];
794--1301[label="0.25;2pkt 2fpkt"];
794--1675[label="0.25;2pkt 2fpkt"];
794--1754[label="0.125;1pkt 1fpkt"];
794--2711[label="1;8pkt 8fpkt"];
794--3113[label="0.125;1pkt 1fpkt"];
794--3140[label="0.125;1pkt 1fpkt"];
794--3200[label="0.25;2pkt 2fpkt"];
794--3833[label="0.125;1pkt 1fpkt"];
794--5297[label="1;8pkt 8fpkt"];
794--6845[label="1;8pkt 8fpkt"];
794--7829[label="0.875;7pkt 7fpkt"];
951--952[label="1;1pkt 1fpkt"];
951--1301[label="0.153846;4pkt 4fpkt"];
951--1675[label="0.269231;7pkt 7fpkt"];
951--1754[label="0.115385;3pkt 3fpkt"];
951--1826[label="0.153846;4pkt 4fpkt"];
951--2551[label="0.0769231;2pkt 2fpkt"];
951--2745[label="1;1pkt 1fpkt"];
951--2984[label="1;23pkt 23fpkt"];
951--3113[label="0.115385;3pkt 3fpkt"];
951--3200[label="0.192308;5pkt 5fpkt"];
951--3584[label="0.153846;4pkt 4fpkt"];
951--3654[label="0.0769231;2pkt 2fpkt"];
951--3833[label="0.0769231;2pkt 2fpkt"];
951--3934[label="0.153846;4pkt 4fpkt"];
951--5388[label="0.961538;25pkt 25fpkt"];
952--2745[label="1;1pkt 1fpkt"];
952--2984[label="1;1pkt 1fpkt"];
952--5388[label="1;1pkt 1fpkt"];
1301--1359[label="0.153846;2pkt 2fpkt"];
1301--1860[label="0.00952381;1pkt 1fpkt"];
1301--1968[label="0.666667;2pkt 2fpkt"];
1301--1999[label="0.0555556;1pkt 1fpkt"];
1301--2193[label="0.0625;1pkt 1fpkt"];
1301--2402[label="0.0327869;2pkt 2fpkt"];
1301--2711[label="0.25;2pkt 2fpkt"];
1301--2984[label="0.0869565;2pkt 2fpkt"];
1301--3157[label="0.153846;2pkt 2fpkt"];
1301--3182[label="0.0133333;1pkt 1fpkt"];
1301--3287[label="0.0909091;1pkt 1fpkt"];
1301--3544[label="0.0327869;2pkt 2fpkt"];
1301--3906[label="0.0333333;2pkt 2fpkt"];
1301--4008[label="0.00806452;1pkt 1fpkt"];
1301--4419[label="0.75;6pkt 6fpkt"];
1301--4609[label="0.5;1pkt 1fpkt"];
1301--4617[label="0.0243902;1pkt 1fpkt"];
1301--5039[label="0.5;2pkt 2fpkt"];
1301--5163[label="0.0322581;2pkt 2fpkt"];
1301--5297[label="0.230769;6pkt 6fpkt"];
1301--5301[label="0.047619;1pkt 1fpkt"];
1301--5329[label="0.05;1pkt 1fpkt"];
1301--5379[label="0.142857;1pkt 1fpkt"];
1301--5388[label="0.103448;3pkt 3fpkt"];
1301--5488[label="0.105263;2pkt 2fpkt"];
1301--5506[label="0.0625;1pkt 1fpkt"];
1301--5529[label="0.103448;6pkt 6fpkt"];
1301--6249[label="0.75;6pkt 6fpkt"];
1301--6381[label="0.0243902;1pkt 1fpkt"];
1301--6658[label="0.333333;1pkt 1fpkt"];
1301--6750[label="0.0327869;2pkt 2fpkt"];
1301--6845[label="0.230769;6pkt 6fpkt"];
1301--6848[label="0.0454545;1pkt 1fpkt"];
1301--6864[label="0.047619;1pkt 1fpkt"];
1301--6945[label="0.0769231;1pkt 1fpkt"];
1301--6991[label="0.103448;6pkt 6fpkt"];
1301--7458[label="0.714286;5pkt 5fpkt"];
1301--7538[label="0.0243902;1pkt 1fpkt"];
1301--7709[label="0.333333;1pkt 1fpkt"];
1301--7829[label="0.2;5pkt 5fpkt"];
1301--7841[label="0.047619;1pkt 1fpkt"];
1301--7861[label="0.142857;1pkt 1fpkt"];
1301--7903[label="0.0625;1pkt 1fpkt"];
1301--7916[label="0.103448;6pkt 6fpkt"];
1465--1466[label="0.111111;1pkt 1fpkt"];
1465--1754[label="0.111111;1pkt 1fpkt"];
1465--2387[label="0.111111;1pkt 1fpkt"];
1465--3087[label="1;9pkt 9fpkt"];
1465--3113[label="0.111111;1pkt 1fpkt"];
1465--3651[label="0.111111;1pkt 1fpkt"];
1465--3829[label="1;7pkt 7fpkt"];
1675--2711[label="0.25;2pkt 2fpkt"];
1675--2984[label="0.304348;7pkt 7fpkt"];
1675--3200[label="1;40pkt 40fpkt"];
1675--4579[label="0.133333;2pkt 2fpkt"];
1675--5297[label="0.115385;3pkt 3fpkt"];
1675--5388[label="0.241379;7pkt 7fpkt"];
1675--5529[label="0.169811;9pkt 9fpkt"];
1675--5708[label="0.25;1pkt 1fpkt"];
1675--6845[label="0.115385;3pkt 3fpkt"];
1675--6991[label="0.169811;9pkt 9fpkt"];
1675--7829[label="0.12;3pkt 3fpkt"];
1675--7916[label="0.169811;9pkt 9fpkt"];
1754--2711[label="0.125;1pkt 1fpkt"];
1754--2984[label="0.130435;3pkt 3fpkt"];
1754--3087[label="0.111111;1pkt 1fpkt"];
1754--3113[label="1;76pkt 76fpkt"];
1754--3833[label="1;37pkt 37fpkt"];
1754--4377[label="0.0555556;1pkt 1fpkt"];
1754--4617[label="0.0487805;2pkt 2fpkt"];
1754--5297[label="0.0384615;1pkt 1fpkt"];
1754--5388[label="0.103448;3pkt 3fpkt"];
1754--5464[label="0.125;1pkt 1fpkt"];
1754--5529[label="0.0689655;4pkt 4fpkt"];
1754--5603[label="0.535714;30pkt 30fpkt"];
1754--6381[label="0.0487805;2pkt 2fpkt"];
1754--6845[label="0.0384615;1pkt 1fpkt"];
1754--6991[label="0.0689655;4pkt 4fpkt"];
1754--7037[label="0.545455;30pkt 30fpkt"];
1754--7538[label="0.0487805;2pkt 2fpkt"];
1754--7829[label="0.04;1pkt 1fpkt"];
1754--7916[label="0.0689655;4pkt 4fpkt"];
1754--7949[label="0.545455;30pkt 30fpkt"];
1826--2081[label="0.666667;2pkt 2fpkt"];
1826--2984[label="0.130435;3pkt 3fpkt"];
1826--3584[label="1;62pkt 62fpkt"];
1826--3934[label="1;62pkt 62fpkt"];
1826--4377[label="0.0555556;1pkt 1fpkt"];
1826--4579[label="0.2;3pkt 3fpkt"];
1826--4860[label="0.1;1pkt 1fpkt"];
1826--5149[label="0.047619;1pkt 1fpkt"];
1826--5297[label="0.192308;5pkt 5fpkt"];
1826--5388[label="0.137931;4pkt 4fpkt"];
1826--5459[label="0.0833333;1pkt 1fpkt"];
1826--5476[label="0.25;1pkt 1fpkt"];
1826--5529[label="0.0517241;3pkt 3fpkt"];
1826--6534[label="0.111111;1pkt 1fpkt"];
1826--6740[label="0.047619;1pkt 1fpkt"];
1826--6845[label="0.192308;5pkt 5fpkt"];
1826--6945[label="0.0769231;1pkt 1fpkt"];
1826--6991[label="0.0517241;3pkt 3fpkt"];
1826--7829[label="0.2;5pkt 5fpkt"];
1826--7888[label="0.0833333;1pkt 1fpkt"];
1826--7916[label="0.0517241;3pkt 3fpkt"];
2081--3584[label="0.666667;2pkt 2fpkt"];
2081--3934[label="0.666667;2pkt 2fpkt"];
2081--5476[label="0.666667;2pkt 2fpkt"];
2357--2395[label="0.0166667;1pkt 1fpkt"];
2357--2586[label="0.0625;1pkt 1fpkt"];
2357--3125[label="0.0238095;1pkt 1fpkt"];
2357--3504[label="1;97pkt 97fpkt"];
2357--3541[label="0.0147059;1pkt 1fpkt"];
2357--3941[label="0.0103093;1pkt 1fpkt"];
2357--3949[label="0.103093;10pkt 10fpkt"];
2357--3954[label="0.0103093;1pkt 1fpkt"];
2357--3964[label="0.0103093;1pkt 1fpkt"];
2357--3976[label="0.0227273;1pkt 1fpkt"];
2357--4254[label="0.111111;1pkt 1fpkt"];
2357--4289[label="0.0285714;1pkt 1fpkt"];
2357--4303[label="0.0588235;1pkt 1fpkt"];
2357--4376[label="0.0526316;1pkt 1fpkt"];
2357--4680[label="0.0588235;1pkt 1fpkt"];
2357--4896[label="0.012987;1pkt 1fpkt"];
2357--5069[label="0.0181818;1pkt 1fpkt"];
2357--5170[label="0.0232558;1pkt 1fpkt"];
2357--5238[label="0.0277778;1pkt 1fpkt"];
2357--5529[label="0.0172414;1pkt 1fpkt"];
2357--5642[label="0.0344828;1pkt 1fpkt"];
2357--5832[label="0.0126582;1pkt 1fpkt"];
2357--5940[label="0.0222222;1pkt 1fpkt"];
2357--6141[label="0.111111;1pkt 1fpkt"];
2357--6167[label="0.0285714;1pkt 1fpkt"];
2357--6221[label="0.0526316;1pkt 1fpkt"];
2357--6419[label="0.0588235;1pkt 1fpkt"];
2357--6678[label="0.0181818;1pkt 1fpkt"];
2357--6800[label="0.0285714;1pkt 1fpkt"];
2357--6991[label="0.0172414;1pkt 1fpkt"];
2357--7065[label="0.0344828;1pkt 1fpkt"];
2357--7198[label="0.0125;1pkt 1fpkt"];
2357--7268[label="0.0227273;1pkt 1fpkt"];
2357--7440[label="0.0555556;1pkt 1fpkt"];
2357--7797[label="0.0277778;1pkt 1fpkt"];
2357--7916[label="0.0172414;1pkt 1fpkt"];
2357--8052[label="0.0126582;1pkt 1fpkt"];
2711--3113[label="0.125;1pkt 1fpkt"];
2711--3140[label="0.125;1pkt 1fpkt"];
2711--3200[label="0.25;2pkt 2fpkt"];
2711--3833[label="0.125;1pkt 1fpkt"];
2711--5297[label="1;8pkt 8fpkt"];
2711--6845[label="1;8pkt 8fpkt"];
2711--7829[label="0.875;7pkt 7fpkt"];
2745--2984[label="1;1pkt 1fpkt"];
2745--5388[label="1;1pkt 1fpkt"];
2984--3113[label="0.130435;3pkt 3fpkt"];
2984--3200[label="0.217391;5pkt 5fpkt"];
2984--3584[label="0.130435;3pkt 3fpkt"];
2984--3654[label="0.0869565;2pkt 2fpkt"];
2984--3833[label="0.0869565;2pkt 2fpkt"];
2984--3934[label="0.130435;3pkt 3fpkt"];
2984--5388[label="0.956522;22pkt 22fpkt"];
3113--3833[label="1;37pkt 37fpkt"];
3113--4377[label="0.0555556;1pkt 1fpkt"];
3113--4617[label="0.0487805;2pkt 2fpkt"];
3113--5297[label="0.0384615;1pkt 1fpkt"];
3113--5388[label="0.103448;3pkt 3fpkt"];
3113--5464[label="0.125;1pkt 1fpkt"];
3113--5529[label="0.0689655;4pkt 4fpkt"];
3113--5603[label="0.535714;30pkt 30fpkt"];
3113--6381[label="0.0487805;2pkt 2fpkt"];
3113--6845[label="0.0384615;1pkt 1fpkt"];
3113--6991[label="0.0689655;4pkt 4fpkt"];
3113--7037[label="0.545455;30pkt 30fpkt"];
3113--7538[label="0.0487805;2pkt 2fpkt"];
3113--7829[label="0.04;1pkt 1fpkt"];
3113--7916[label="0.0689655;4pkt 4fpkt"];
3113--7949[label="0.545455;30pkt 30fpkt"];
3200--4579[label="0.0666667;1pkt 1fpkt"];
3200--5297[label="0.0769231;2pkt 2fpkt"];
3200--5388[label="0.172414;5pkt 5fpkt"];
3200--5529[label="0.15;6pkt 6fpkt"];
3200--5708[label="0.25;1pkt 1fpkt"];
3200--6845[label="0.0769231;2pkt 2fpkt"];
3200--6991[label="0.15;6pkt 6fpkt"];
3200--7829[label="0.08;2pkt 2fpkt"];
3200--7916[label="0.15;6pkt 6fpkt"];
3504--3541[label="0.0147059;1pkt 1fpkt"];
3504--3941[label="0.0103093;1pkt 1fpkt"];
3504--3949[label="0.103093;10pkt 10fpkt"];
3504--3954[label="0.0103093;1pkt 1fpkt"];
3504--3964[label="0.0103093;1pkt 1fpkt"];
3504--3976[label="0.0227273;1pkt 1fpkt"];
3504--4254[label="0.111111;1pkt 1fpkt"];
3504--4289[label="0.0285714;1pkt 1fpkt"];
3504--4303[label="0.0588235;1pkt 1fpkt"];
3504--4376[label="0.0526316;1pkt 1fpkt"];
3504--4680[label="0.0588235;1pkt 1fpkt"];
3504--4896[label="0.012987;1pkt 1fpkt"];
3504--5069[label="0.0181818;1pkt 1fpkt"];
3504--5170[label="0.0232558;1pkt 1fpkt"];
3504--5238[label="0.0277778;1pkt 1fpkt"];
3504--5529[label="0.0172414;1pkt 1fpkt"];
3504--5642[label="0.0344828;1pkt 1fpkt"];
3504--5832[label="0.0126582;1pkt 1fpkt"];
3504--5940[label="0.0222222;1pkt 1fpkt"];
3504--6141[label="0.111111;1pkt 1fpkt"];
3504--6167[label="0.0285714;1pkt 1fpkt"];
3504--6221[label="0.0526316;1pkt 1fpkt"];
3504--6419[label="0.0588235;1pkt 1fpkt"];
3504--6678[label="0.0181818;1pkt 1fpkt"];
3504--6800[label="0.0285714;1pkt 1fpkt"];
3504--6991[label="0.0172414;1pkt 1fpkt"];
3504--7065[label="0.0344828;1pkt 1fpkt"];
3504--7198[label="0.0125;1pkt 1fpkt"];
3504--7268[label="0.0227273;1pkt 1fpkt"];
3504--7440[label="0.0555556;1pkt 1fpkt"];
3504--7797[label="0.0277778;1pkt 1fpkt"];
3504--7916[label="0.0172414;1pkt 1fpkt"];
3504--8052[label="0.0126582;1pkt 1fpkt"];
3584--3934[label="1;62pkt 62fpkt"];
3584--4377[label="0.0555556;1pkt 1fpkt"];
3584--4579[label="0.2;3pkt 3fpkt"];
3584--4860[label="0.1;1pkt 1fpkt"];
3584--5149[label="0.047619;1pkt 1fpkt"];
3584--5297[label="0.192308;5pkt 5fpkt"];
3584--5388[label="0.137931;4pkt 4fpkt"];
3584--5459[label="0.0833333;1pkt 1fpkt"];
3584--5476[label="0.25;1pkt 1fpkt"];
3584--5529[label="0.0517241;3pkt 3fpkt"];
3584--6534[label="0.111111;1pkt 1fpkt"];
3584--6740[label="0.047619;1pkt 1fpkt"];
3584--6845[label="0.192308;5pkt 5fpkt"];
3584--6945[label="0.0769231;1pkt 1fpkt"];
3584--6991[label="0.0517241;3pkt 3fpkt"];
3584--7829[label="0.2;5pkt 5fpkt"];
3584--7888[label="0.0833333;1pkt 1fpkt"];
3584--7916[label="0.0517241;3pkt 3fpkt"];
3654--4147[label="0.1;1pkt 1fpkt"];
3654--4579[label="0.0666667;1pkt 1fpkt"];
3654--4860[label="0.1;1pkt 1fpkt"];
3654--5174[label="0.0192308;1pkt 1fpkt"];
3654--5297[label="0.0384615;1pkt 1fpkt"];
3654--5388[label="0.0689655;2pkt 2fpkt"];
3654--5529[label="0.0961538;5pkt 5fpkt"];
3654--5665[label="0.0192308;1pkt 1fpkt"];
3654--5853[label="0.0192308;1pkt 1fpkt"];
3654--5909[label="0.363636;4pkt 4fpkt"];
3654--6534[label="0.111111;1pkt 1fpkt"];
3654--6757[label="0.0192308;1pkt 1fpkt"];
3654--6845[label="0.0384615;1pkt 1fpkt"];
3654--6991[label="0.0961538;5pkt 5fpkt"];
3654--7085[label="0.0192308;1pkt 1fpkt"];
3654--7215[label="0.0192308;1pkt 1fpkt"];
3654--7249[label="0.363636;4pkt 4fpkt"];
3654--7768[label="0.0192308;1pkt 1fpkt"];
3654--7829[label="0.04;1pkt 1fpkt"];
3654--7916[label="0.0961538;5pkt 5fpkt"];
3654--7979[label="0.0192308;1pkt 1fpkt"];
3654--8064[label="0.0192308;1pkt 1fpkt"];
3654--8082[label="0.363636;4pkt 4fpkt"];
3667--3906[label="0.0175439;1pkt 1fpkt"];
3667--4377[label="0.0555556;1pkt 1fpkt"];
3667--5163[label="0.0350877;2pkt 2fpkt"];
3667--5254[label="0.0526316;3pkt 3fpkt"];
3667--5379[label="0.142857;1pkt 1fpkt"];
3667--5484[label="0.0434783;1pkt 1fpkt"];
3667--5529[label="0.140351;8pkt 8fpkt"];
3667--6750[label="0.0350877;2pkt 2fpkt"];
3667--6811[label="0.0526316;3pkt 3fpkt"];
3667--6895[label="0.166667;1pkt 1fpkt"];
3667--6959[label="0.0454545;1pkt 1fpkt"];
3667--6991[label="0.140351;8pkt 8fpkt"];
3667--7806[label="0.0526316;3pkt 3fpkt"];
3667--7861[label="0.142857;1pkt 1fpkt"];
3667--7895[label="0.0454545;1pkt 1fpkt"];
3667--7916[label="0.140351;8pkt 8fpkt"];
3833--4377[label="0.0555556;1pkt 1fpkt"];
3833--5297[label="0.0384615;1pkt 1fpkt"];
3833--5388[label="0.0689655;2pkt 2fpkt"];
3833--5464[label="0.125;1pkt 1fpkt"];
3833--5529[label="0.0810811;3pkt 3fpkt"];
3833--6845[label="0.0384615;1pkt 1fpkt"];
3833--6991[label="0.0810811;3pkt 3fpkt"];
3833--7829[label="0.04;1pkt 1fpkt"];
3833--7916[label="0.0810811;3pkt 3fpkt"];
3934--4377[label="0.0555556;1pkt 1fpkt"];
3934--4579[label="0.2;3pkt 3fpkt"];
3934--4860[label="0.1;1pkt 1fpkt"];
3934--5149[label="0.047619;1pkt 1fpkt"];
3934--5297[label="0.192308;5pkt 5fpkt"];
3934--5388[label="0.137931;4pkt 4fpkt"];
3934--5459[label="0.0833333;1pkt 1fpkt"];
3934--5476[label="0.25;1pkt 1fpkt"];
3934--5529[label="0.0517241;3pkt 3fpkt"];
3934--6534[label="0.111111;1pkt 1fpkt"];
3934--6740[label="0.047619;1pkt 1fpkt"];
3934--6845[label="0.192308;5pkt 5fpkt"];
3934--6945[label="0.0769231;1pkt 1fpkt"];
3934--6991[label="0.0517241;3pkt 3fpkt"];
3934--7829[label="0.2;5pkt 5fpkt"];
3934--7888[label="0.0833333;1pkt 1fpkt"];
3934--7916[label="0.0517241;3pkt 3fpkt"];
4860--6534[label="1;9pkt 9fpkt"];
5039--6658[label="1;3pkt 3fpkt"];
5039--7709[label="1;3pkt 3fpkt"];
5297--6845[label="1;26pkt 26fpkt"];
5297--7829[label="1;25pkt 25fpkt"];
5301--6848[label="1;21pkt 21fpkt"];
5529--6991[label="1;58pkt 58fpkt"];
5529--7916[label="1;58pkt 58fpkt"];
6658--7709[label="1;3pkt 3fpkt"];
6845--7829[label="1;25pkt 25fpkt"];
6991--7916[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.180.170" src_port="25"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.150.67.191"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1130{
style=filled;
color=gray75;
5533[label="213.250.110.191;246pkt 246fpkt", shape=pentagon, color=darkviolet];
6995[label="213.250.110.191;247pkt 247fpkt", shape=invtriangle, color=brown];
7920[label="213.250.110.191;247pkt 247fpkt", shape=invhouse, color=bisque];
stat1130[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.250.110.191:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5533--6995[label="1;246pkt 246fpkt"];
5533--7920[label="1;246pkt 246fpkt"];
6995--7920[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.250.110.191" src_port="1025"/>
    </slice>
    <from sec="1034226091" usec="0"/>
    <to sec="1034226133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.8.160.191"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.140.205.191"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1133{
style=filled;
color=gray75;
5550[label="1.127.19.193;253pkt 253fpkt", shape=pentagon, color=darkviolet];
7010[label="1.127.19.193;252pkt 252fpkt", shape=invtriangle, color=brown];
stat1133[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.127.19.193:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5550--7010[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.127.19.193" src_port="1025"/>
    </slice>
    <from sec="1034226079" usec="0"/>
    <to sec="1034226093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1134{
style=filled;
color=gray75;
5553[label="167.8.138.193;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7012[label="167.8.138.193;1pkt 1fpkt", shape=invtriangle, color=brown];
7932[label="167.8.138.193;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1134[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.8.138.193:1440, 203.204.33.67:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1440: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5553--7012[label="1;1pkt 1fpkt"];
5553--7932[label="1;1pkt 1fpkt"];
7012--7932[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.204.33.67" dst_port="80" src_ip="167.8.138.193" src_port="1440"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.27.206.194"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.93.165.195"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768053,2.10129,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1137{
style=filled;
color=gray75;
344[label="195.84.151.197s;100pkt 100fpkt", shape=rectangle, color=red];
5582[label="195.84.151.197;211pkt 211fpkt", shape=pentagon, color=darkviolet];
7027[label="195.84.151.197;212pkt 212fpkt", shape=invtriangle, color=brown];
stat1137[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.84.151.197:1064, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1064: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
344--5582[label="0.99;99pkt 99fpkt"];
344--7027[label="1;100pkt 100fpkt"];
5582--7027[label="1;211pkt 211fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.84.151.197" src_port="1064"/>
    </slice>
    <from sec="1034226109" usec="0"/>
    <to sec="1034226142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.177.171.197"/>
    </slice>
    <from sec="1034226523" usec="0"/>
    <to sec="1034226730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1139{
style=filled;
color=gray75;
5590[label="197.162.129.198;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7030[label="197.162.129.198;14pkt 14fpkt", shape=invtriangle, color=brown];
7944[label="197.162.129.198;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1139[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.162.129.198:110, 161.238.59.2:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 51561: (3.75%)&lt;BR/&gt; 51558: (3.75%)&lt;BR/&gt; 51553: (3.75%)&lt;BR/&gt; 51544: (3.75%)&gt;];
}
5590--7030[label="1;13pkt 13fpkt"];
5590--7944[label="1;13pkt 13fpkt"];
7030--7944[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.59.2" src_ip="197.162.129.198" src_port="110"/>
    </slice>
    <from sec="1034226048" usec="0"/>
    <to sec="1034226776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1140{
style=filled;
color=gray75;
5598[label="86.207.66.200;22pkt 22fpkt", shape=pentagon, color=darkviolet];
7033[label="86.207.66.200;22pkt 22fpkt", shape=invtriangle, color=brown];
stat1140[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.207.66.200:80, 161.238.42.180:*}[95.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7273%)&lt;BR/&gt; 4339: (2.27273%)&lt;BR/&gt; 3369: (2.27273%)&lt;BR/&gt; 3368: (2.27273%)&lt;BR/&gt; 3367: (2.27273%)&gt;];
}
5598--7033[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.42.180" src_ip="86.207.66.200" src_port="80"/>
    </slice>
    <from sec="1034226421" usec="0"/>
    <to sec="1034226451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1141{
style=filled;
color=gray75;
348[label="1.43.86.200s;186pkt 186fpkt", shape=rectangle, color=red];
5601[label="1.43.86.200;256pkt 256fpkt", shape=pentagon, color=darkviolet];
7036[label="1.43.86.200;255pkt 255fpkt", shape=invtriangle, color=brown];
7948[label="1.43.86.200;256pkt 256fpkt", shape=invhouse, color=bisque];
stat1141[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.43.86.200:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
348--3953[label="0.677419;126pkt 126fpkt"];
348--5601[label="1;186pkt 186fpkt"];
348--7036[label="1;186pkt 186fpkt"];
348--7948[label="1;186pkt 186fpkt"];
5601--7036[label="1;255pkt 255fpkt"];
5601--7948[label="1;256pkt 256fpkt"];
7036--7948[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.43.86.200" src_port="1025"/>
    </slice>
    <from sec="1034226699" usec="0"/>
    <to sec="1034226739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1142{
style=filled;
color=gray75;
5607[label="194.111.202.200;141pkt 141fpkt", shape=pentagon, color=darkviolet];
7040[label="194.111.202.200;141pkt 141fpkt", shape=invtriangle, color=brown];
stat1142[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.111.202.200:0, *:0}[99.2908%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.2908%)&lt;BR/&gt; 3258: (0.35461%)&lt;BR/&gt; 21: (0.35461%)&gt;];
}
5607--7040[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter src_ip="194.111.202.200"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="130.5.126.201"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1144{
style=filled;
color=gray75;
5623[label="219.175.203.202;15pkt 15fpkt", shape=pentagon, color=darkviolet];
7052[label="219.175.203.202;15pkt 15fpkt", shape=invtriangle, color=brown];
7959[label="219.175.203.202;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1144[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.175.203.202:80, 214.8.13.108:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2201: (3.33333%)&lt;BR/&gt; 2183: (3.33333%)&lt;BR/&gt; 2163: (3.33333%)&lt;BR/&gt; 2104: (3.33333%)&gt;];
}
5623--7052[label="1;15pkt 15fpkt"];
5623--7959[label="1;15pkt 15fpkt"];
7052--7959[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="214.8.13.108" src_ip="219.175.203.202" src_port="80"/>
    </slice>
    <from sec="1034226448" usec="0"/>
    <to sec="1034226466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1145{
style=filled;
color=gray75;
5630[label="219.64.96.203;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7057[label="219.64.96.203;1pkt 1fpkt", shape=invtriangle, color=brown];
7962[label="219.64.96.203;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1145[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.64.96.203:53, 10.13.255.16:1752}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1752: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
5630--7057[label="1;1pkt 1fpkt"];
5630--7962[label="1;1pkt 1fpkt"];
7057--7962[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="10.13.255.16" dst_port="1752" src_ip="219.64.96.203" src_port="53"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1146{
style=filled;
color=gray75;
1497[label="43.101.51.132;d;3pkt 3fpkt", shape=diamond, color=yellow];
1498[label="185.191.161.203;s;1pkt 1fpkt", shape=diamond, color=yellow];
3671[label="43.101.51.132;d;3pkt 3fpkt", shape=hexagon, color=black];
4416[label="212.24.9.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5632[label="185.191.161.203;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6247[label="212.24.9.49;1pkt 1fpkt", shape=invtriangle, color=brown];
7058[label="185.191.161.203;1pkt 1fpkt", shape=invtriangle, color=brown];
7456[label="212.24.9.49;1pkt 1fpkt", shape=invhouse, color=bisque];
7963[label="185.191.161.203;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1146[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.161.203:7743, 43.101.51.132:4207}[33.3333%]&lt;BR/&gt;{212.24.9.49:53, 43.101.51.132:3455}[33.3333%]&lt;BR/&gt;{212.24.9.49:1417, 43.101.51.132:7743}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7743: (30.7692%)&lt;BR/&gt; 4207: (23.0769%)&lt;BR/&gt; 3455: (19.2308%)&lt;BR/&gt; 53: (19.2308%)&lt;BR/&gt; 1417: (7.69231%)&gt;];
}
1497--1498[label="1;1pkt 1fpkt"];
1497--3671[label="1;3pkt 3fpkt"];
1497--4416[label="1;1pkt 1fpkt"];
1497--5632[label="1;1pkt 1fpkt"];
1497--6247[label="1;1pkt 1fpkt"];
1497--7058[label="1;1pkt 1fpkt"];
1497--7456[label="1;1pkt 1fpkt"];
1497--7963[label="1;1pkt 1fpkt"];
1498--3671[label="1;1pkt 1fpkt"];
1498--5632[label="1;1pkt 1fpkt"];
1498--7058[label="1;1pkt 1fpkt"];
1498--7963[label="1;1pkt 1fpkt"];
3671--4416[label="1;1pkt 1fpkt"];
3671--5632[label="1;1pkt 1fpkt"];
3671--6247[label="1;1pkt 1fpkt"];
3671--7058[label="1;1pkt 1fpkt"];
3671--7456[label="1;1pkt 1fpkt"];
3671--7963[label="1;1pkt 1fpkt"];
4416--6247[label="1;1pkt 1fpkt"];
4416--7456[label="1;1pkt 1fpkt"];
5632--7058[label="1;1pkt 1fpkt"];
5632--7963[label="1;1pkt 1fpkt"];
6247--7456[label="1;1pkt 1fpkt"];
7058--7963[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="43.101.51.132" dst_port="7743" src_ip="212.24.9.49" src_port="1417"/>
      <filter dst_ip="43.101.51.132" dst_port="3455" src_ip="212.24.9.49" src_port="53"/>
      <filter dst_ip="43.101.51.132" dst_port="4207" src_ip="185.191.161.203" src_port="7743"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1147{
style=filled;
color=gray75;
5637[label="162.41.146.204;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7062[label="162.41.146.204;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1147[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.41.146.204:389, 167.164.130.216:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 389: (50%)&lt;BR/&gt; 49458: (9.09091%)&lt;BR/&gt; 49456: (9.09091%)&lt;BR/&gt; 49451: (9.09091%)&lt;BR/&gt; 49450: (9.09091%)&gt;];
}
5637--7062[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="167.164.130.216" src_ip="162.41.146.204" src_port="389"/>
    </slice>
    <from sec="1034226049" usec="0"/>
    <to sec="1034226194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1148{
style=filled;
color=gray75;
5640[label="85.34.110.205;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7063[label="85.34.110.205;1pkt 1fpkt", shape=invtriangle, color=brown];
7966[label="85.34.110.205;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1148[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.34.110.205:80, 161.238.129.39:2801}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2801: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5640--7063[label="1;1pkt 1fpkt"];
5640--7966[label="1;1pkt 1fpkt"];
7063--7966[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.129.39" dst_port="2801" src_ip="85.34.110.205" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1149{
style=filled;
color=gray75;
5644[label="136.230.110.206;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7067[label="136.230.110.206;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1149[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.110.206:25, 143.130.88.18:4406}[25%]&lt;BR/&gt;{136.230.110.206:25, 86.135.44.162:10124}[25%]&lt;BR/&gt;{136.230.110.206:25, 86.135.44.174:37683}[25%]&lt;BR/&gt;{136.230.110.206:25, 86.135.44.187:41556}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 41556: (14.2857%)&lt;BR/&gt; 37683: (14.2857%)&lt;BR/&gt; 4406: (14.2857%)&lt;BR/&gt; 10124: (7.14286%)&gt;];
}
5644--7067[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="86.135.44.187" dst_port="41556" src_ip="136.230.110.206" src_port="25"/>
      <filter dst_ip="86.135.44.174" dst_port="37683" src_ip="136.230.110.206" src_port="25"/>
      <filter dst_ip="86.135.44.162" dst_port="10124" src_ip="136.230.110.206" src_port="25"/>
      <filter dst_ip="143.130.88.18" dst_port="4406" src_ip="136.230.110.206" src_port="25"/>
    </slice>
    <from sec="1034226010" usec="0"/>
    <to sec="1034226518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1150{
style=filled;
color=gray75;
5648[label="185.191.217.206;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7070[label="185.191.217.206;23pkt 23fpkt", shape=invtriangle, color=brown];
stat1150[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.217.206:*, *:8888}[65.2174%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (32.6087%)&lt;BR/&gt; 7777: (4.34783%)&lt;BR/&gt; 5555: (4.34783%)&lt;BR/&gt; 3456: (4.34783%)&lt;BR/&gt; 44444: (2.17391%)&gt;];
}
5648--7070[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_port="8888" src_ip="185.191.217.206"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.17.142.207"/>
    </slice>
    <from sec="1034226084" usec="0"/>
    <to sec="1034226163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.93.54.208"/>
    </slice>
    <from sec="1034226573" usec="0"/>
    <to sec="1034226648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.206.152.208"/>
    </slice>
    <from sec="1034226769" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,053,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1154{
style=filled;
color=gray75;
5658[label="161.238.161.208;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7079[label="161.238.161.208;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1154[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.161.208:4037, 86.148.166.241:80}[33.3333%]&lt;BR/&gt;{161.238.161.208:4038, 86.148.166.241:80}[33.3333%]&lt;BR/&gt;{161.238.161.208:4039, 86.148.166.241:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4039: (16.6667%)&lt;BR/&gt; 4038: (16.6667%)&lt;BR/&gt; 4037: (16.6667%)&gt;];
}
5658--7079[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="86.148.166.241" dst_port="80" src_ip="161.238.161.208" src_port="4039"/>
      <filter dst_ip="86.148.166.241" dst_port="80" src_ip="161.238.161.208" src_port="4038"/>
      <filter dst_ip="86.148.166.241" dst_port="80" src_ip="161.238.161.208" src_port="4037"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.92.220.208"/>
    </slice>
    <from sec="1034226006" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.128.189.209"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.73.17.210"/>
    </slice>
    <from sec="1034226010" usec="0"/>
    <to sec="1034226789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.21.162.210"/>
    </slice>
    <from sec="1034226007" usec="0"/>
    <to sec="1034226781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.8.126.211"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1160{
style=filled;
color=gray75;
195[label="84.114.5.214s;1pkt 1fpkt", shape=rectangle, color=red];
5686[label="84.114.5.214;118pkt 118fpkt", shape=pentagon, color=darkviolet];
7100[label="84.114.5.214;118pkt 118fpkt", shape=invtriangle, color=brown];
7987[label="84.114.5.214;118pkt 118fpkt", shape=invhouse, color=bisque];
stat1160[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.114.5.214:80, 161.238.10.21:*}[22.0339%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (19.8592%)&lt;BR/&gt; 6699: (11.4085%)&lt;BR/&gt; 53: (2.53521%)&lt;BR/&gt; 8864: (1.69014%)&lt;BR/&gt; 7743: (1.69014%)&gt;];
}
195--5686[label="1;1pkt 1fpkt"];
195--7100[label="1;1pkt 1fpkt"];
195--7987[label="1;1pkt 1fpkt"];
5686--7100[label="1;118pkt 118fpkt"];
5686--7987[label="1;118pkt 118fpkt"];
7100--7987[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.10.21" src_ip="84.114.5.214" src_port="80"/>
    </slice>
    <from sec="1034226061" usec="0"/>
    <to sec="1034226612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1161{
style=filled;
color=gray75;
5696[label="1.163.1.215;147pkt 147fpkt", shape=pentagon, color=darkviolet];
7105[label="1.163.1.215;146pkt 146fpkt", shape=invtriangle, color=brown];
7991[label="1.163.1.215;147pkt 147fpkt", shape=invhouse, color=bisque];
stat1161[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.163.1.215:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5696--7105[label="1;146pkt 146fpkt"];
5696--7991[label="1;147pkt 147fpkt"];
7105--7991[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.163.1.215" src_port="1028"/>
    </slice>
    <from sec="1034226624" usec="0"/>
    <to sec="1034226650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.18.97.217"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.13.62.218"/>
    </slice>
    <from sec="1034226007" usec="0"/>
    <to sec="1034226778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.879937,2.08761,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1164{
style=filled;
color=gray75;
361[label="1.7.111.218s;52pkt 52fpkt", shape=rectangle, color=red];
5715[label="1.7.111.218;106pkt 106fpkt", shape=pentagon, color=darkviolet];
7117[label="1.7.111.218;105pkt 105fpkt", shape=invtriangle, color=brown];
7998[label="1.7.111.218;106pkt 106fpkt", shape=invhouse, color=bisque];
stat1164[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.7.111.218:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
361--5715[label="1;52pkt 52fpkt"];
361--7117[label="0.980769;51pkt 51fpkt"];
361--7998[label="1;52pkt 52fpkt"];
5715--7117[label="1;105pkt 105fpkt"];
5715--7998[label="1;106pkt 106fpkt"];
7117--7998[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.7.111.218" src_port="1025"/>
    </slice>
    <from sec="1034226502" usec="0"/>
    <to sec="1034226519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987269,2.08385,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1165{
style=filled;
color=gray75;
131[label="85.34.112.220s;5pkt 5fpkt", shape=rectangle, color=red];
960[label="161.238.12.134;d;67pkt 67fpkt", shape=diamond, color=yellow];
980[label="85.34.112.220;s;588pkt 588fpkt", shape=diamond, color=yellow];
1377[label="220.24.165.169;s;2pkt 2fpkt", shape=diamond, color=yellow];
1653[label="161.238.10.84;d;2pkt 2fpkt", shape=diamond, color=yellow];
1833[label="85.34.90.56;s;73pkt 73fpkt", shape=diamond, color=yellow];
2514[label="161.238.12.28;d;56pkt 56fpkt", shape=diamond, color=yellow];
2537[label="161.238.19.125;d;12pkt 12fpkt", shape=diamond, color=yellow];
2746[label="161.238.10.75;d;143pkt 143fpkt", shape=hexagon, color=black];
2890[label="220.24.165.169;s;1pkt 1fpkt", shape=hexagon, color=black];
3011[label="161.238.38.0;d;96pkt 96fpkt", shape=hexagon, color=black];
3185[label="161.238.248.161;d;49pkt 49fpkt", shape=hexagon, color=black];
3623[label="161.238.12.28;d;56pkt 56fpkt", shape=hexagon, color=black];
5367[label="220.24.165.169;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5608[label="195.9.48.201;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5727[label="85.34.112.220;660pkt 660fpkt", shape=pentagon, color=darkviolet];
7126[label="85.34.112.220;660pkt 660fpkt", shape=invtriangle, color=brown];
stat1165[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.34.112.220:80, *:*}[64.7117%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8019%)&lt;BR/&gt; 443: (1.17812%)&lt;BR/&gt; 2045: (0.179712%)&lt;BR/&gt; 2044: (0.179712%)&lt;BR/&gt; 2043: (0.179712%)&gt;];
}
131--954[label="0.8;4pkt 4fpkt"];
131--980[label="0.8;4pkt 4fpkt"];
131--1583[label="0.2;1pkt 1fpkt"];
131--2746[label="0.8;4pkt 4fpkt"];
131--5608[label="0.2;1pkt 1fpkt"];
131--5727[label="0.8;4pkt 4fpkt"];
131--7126[label="0.8;4pkt 4fpkt"];
960--980[label="0.0746269;5pkt 5fpkt"];
960--1440[label="0.119403;8pkt 8fpkt"];
960--1591[label="0.0149254;1pkt 1fpkt"];
960--2055[label="0.492537;33pkt 33fpkt"];
960--2166[label="0.0895522;6pkt 6fpkt"];
960--3066[label="0.195122;8pkt 8fpkt"];
960--4716[label="0.130435;3pkt 3fpkt"];
960--4725[label="0.0638298;3pkt 3fpkt"];
960--5367[label="0.2;2pkt 2fpkt"];
960--5727[label="0.0746269;5pkt 5fpkt"];
960--6440[label="0.130435;3pkt 3fpkt"];
960--6446[label="0.0638298;3pkt 3fpkt"];
960--7126[label="0.0746269;5pkt 5fpkt"];
960--7576[label="0.0638298;3pkt 3fpkt"];
980--1003[label="0.416667;40pkt 40fpkt"];
980--1118[label="0.0590278;17pkt 17fpkt"];
980--1304[label="0.248619;45pkt 45fpkt"];
980--1650[label="0.291667;21pkt 21fpkt"];
980--1661[label="0.21875;28pkt 28fpkt"];
980--1840[label="0.539877;88pkt 88fpkt"];
980--1876[label="0.461538;30pkt 30fpkt"];
980--2097[label="0.576923;30pkt 30fpkt"];
980--2514[label="0.482143;27pkt 27fpkt"];
980--2746[label="0.531469;76pkt 76fpkt"];
980--2859[label="0.248619;45pkt 45fpkt"];
980--3011[label="0.416667;40pkt 40fpkt"];
980--3031[label="0.21875;28pkt 28fpkt"];
980--3143[label="0.0522244;27pkt 27fpkt"];
980--3175[label="0.311475;19pkt 19fpkt"];
980--3185[label="0.612245;30pkt 30fpkt"];
980--3623[label="0.482143;27pkt 27fpkt"];
980--3634[label="0.12415;73pkt 73fpkt"];
980--3836[label="0.248619;45pkt 45fpkt"];
980--3950[label="0.0697279;41pkt 41fpkt"];
980--5727[label="1;588pkt 588fpkt"];
980--7126[label="1;588pkt 588fpkt"];
1377--2537[label="0.5;1pkt 1fpkt"];
1377--2890[label="1;1pkt 1fpkt"];
1377--5367[label="1;2pkt 2fpkt"];
1653--5367[label="1;2pkt 2fpkt"];
1833--1876[label="0.0307692;2pkt 2fpkt"];
1833--1880[label="0.02;1pkt 1fpkt"];
1833--1970[label="0.0666667;4pkt 4fpkt"];
1833--2095[label="0.0136986;1pkt 1fpkt"];
1833--2332[label="0.0273973;2pkt 2fpkt"];
1833--2515[label="0.0175439;1pkt 1fpkt"];
1833--2617[label="0.0149254;1pkt 1fpkt"];
1833--2625[label="0.0142857;1pkt 1fpkt"];
1833--2910[label="0.0136986;1pkt 1fpkt"];
1833--3011[label="0.0136986;1pkt 1fpkt"];
1833--3026[label="0.0555556;3pkt 3fpkt"];
1833--3030[label="0.015873;1pkt 1fpkt"];
1833--3031[label="0.0547945;4pkt 4fpkt"];
1833--3035[label="0.0273973;2pkt 2fpkt"];
1833--3143[label="0.0136986;1pkt 1fpkt"];
1833--3165[label="1;40pkt 40fpkt"];
1833--3185[label="0.0204082;1pkt 1fpkt"];
1833--3273[label="0.0810811;3pkt 3fpkt"];
1833--3634[label="0.191781;14pkt 14fpkt"];
1833--3695[label="0.0273973;2pkt 2fpkt"];
1833--3807[label="0.0136986;1pkt 1fpkt"];
1833--3950[label="0.0821918;6pkt 6fpkt"];
2514--3623[label="1;56pkt 56fpkt"];
2514--5727[label="0.482143;27pkt 27fpkt"];
2514--7126[label="0.482143;27pkt 27fpkt"];
2537--2890[label="1;1pkt 1fpkt"];
2537--5367[label="0.1;1pkt 1fpkt"];
2746--3297[label="0.041958;6pkt 6fpkt"];
2746--3450[label="0.125;5pkt 5fpkt"];
2746--3990[label="0.0222222;1pkt 1fpkt"];
2746--4011[label="0.041958;6pkt 6fpkt"];
2746--4221[label="0.0408163;2pkt 2fpkt"];
2746--4530[label="0.1;5pkt 5fpkt"];
2746--5420[label="0.2;5pkt 5fpkt"];
2746--5699[label="0.027972;4pkt 4fpkt"];
2746--5727[label="0.531469;76pkt 76fpkt"];
2746--5743[label="0.0547945;4pkt 4fpkt"];
2746--6118[label="0.0416667;2pkt 2fpkt"];
2746--6322[label="0.102041;5pkt 5fpkt"];
2746--6924[label="0.208333;5pkt 5fpkt"];
2746--7108[label="0.027972;4pkt 4fpkt"];
2746--7126[label="0.531469;76pkt 76fpkt"];
2746--7137[label="0.0555556;4pkt 4fpkt"];
2746--7879[label="0.2;5pkt 5fpkt"];
2746--7993[label="0.027972;4pkt 4fpkt"];
2890--5367[label="1;1pkt 1fpkt"];
3011--3165[label="0.025;1pkt 1fpkt"];
3011--4221[label="0.0408163;2pkt 2fpkt"];
3011--5122[label="0.0327869;2pkt 2fpkt"];
3011--5575[label="0.0277778;1pkt 1fpkt"];
3011--5693[label="0.0181818;1pkt 1fpkt"];
3011--5727[label="0.416667;40pkt 40fpkt"];
3011--5743[label="0.0136986;1pkt 1fpkt"];
3011--6118[label="0.0416667;2pkt 2fpkt"];
3011--6720[label="0.0327869;2pkt 2fpkt"];
3011--7104[label="0.0178571;1pkt 1fpkt"];
3011--7126[label="0.416667;40pkt 40fpkt"];
3011--7137[label="0.0138889;1pkt 1fpkt"];
3011--7745[label="0.0327869;2pkt 2fpkt"];
3011--7990[label="0.0181818;1pkt 1fpkt"];
3185--3297[label="0.0612245;3pkt 3fpkt"];
3185--5367[label="0.1;1pkt 1fpkt"];
3185--5727[label="0.612245;30pkt 30fpkt"];
3185--7126[label="0.612245;30pkt 30fpkt"];
3623--5727[label="0.482143;27pkt 27fpkt"];
3623--7126[label="0.482143;27pkt 27fpkt"];
5727--7126[label="1;660pkt 660fpkt"];
</description>
    <slice>
      <filter src_ip="85.34.112.220" src_port="80"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.245.70.221"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.238.110.223"/>
    </slice>
    <from sec="1034226011" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.203.33.225"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1169{
style=filled;
color=gray75;
5755[label="214.114.154.225;216pkt 216fpkt", shape=pentagon, color=darkviolet];
7142[label="214.114.154.225;216pkt 216fpkt", shape=invtriangle, color=brown];
8009[label="214.114.154.225;216pkt 216fpkt", shape=invhouse, color=bisque];
stat1169[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.114.154.225:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5755--7142[label="1;216pkt 216fpkt"];
5755--8009[label="1;216pkt 216fpkt"];
7142--8009[label="1;216pkt 216fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.114.154.225" src_port="1027"/>
    </slice>
    <from sec="1034226105" usec="0"/>
    <to sec="1034226138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.117.130.226"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1171{
style=filled;
color=gray75;
5769[label="139.152.174.226;114pkt 114fpkt", shape=pentagon, color=darkviolet];
7153[label="139.152.174.226;114pkt 114fpkt", shape=invtriangle, color=brown];
stat1171[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.152.174.226:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5769--7153[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="139.152.174.226" src_port="1027"/>
    </slice>
    <from sec="1034226105" usec="0"/>
    <to sec="1034226123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1172{
style=filled;
color=gray75;
1418[label="212.130.23.132;d;77pkt 77fpkt", shape=diamond, color=yellow];
3204[label="212.130.23.132;d;77pkt 77fpkt", shape=hexagon, color=black];
5503[label="195.42.200.187;94pkt 94fpkt", shape=pentagon, color=darkviolet];
5551[label="203.204.58.193;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5807[label="160.114.239.231;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7179[label="160.114.239.231;1pkt 1fpkt", shape=invtriangle, color=brown];
8036[label="160.114.239.231;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1172[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.42.200.187:*, 212.130.23.132:80}[48.6957%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46238: (0.988142%)&lt;BR/&gt; 63286: (0.592885%)&lt;BR/&gt; 63285: (0.592885%)&lt;BR/&gt; 63284: (0.592885%)&gt;];
}
1418--2867[label="0.012987;1pkt 1fpkt"];
1418--3204[label="1;77pkt 77fpkt"];
1418--3800[label="0.0136986;1pkt 1fpkt"];
1418--3946[label="0.0519481;4pkt 4fpkt"];
1418--3959[label="0.0519481;4pkt 4fpkt"];
1418--3969[label="0.0519481;4pkt 4fpkt"];
1418--5503[label="0.727273;56pkt 56fpkt"];
1418--5551[label="1;1pkt 1fpkt"];
1418--5802[label="1;1pkt 1fpkt"];
1418--5807[label="1;2pkt 2fpkt"];
1418--7158[label="0.333333;1pkt 1fpkt"];
1418--7174[label="1;1pkt 1fpkt"];
1418--7179[label="1;1pkt 1fpkt"];
1418--8036[label="1;1pkt 1fpkt"];
3204--3800[label="0.0136986;1pkt 1fpkt"];
3204--3946[label="0.0519481;4pkt 4fpkt"];
3204--3959[label="0.0519481;4pkt 4fpkt"];
3204--3969[label="0.0519481;4pkt 4fpkt"];
3204--5503[label="0.727273;56pkt 56fpkt"];
3204--5551[label="1;1pkt 1fpkt"];
3204--5802[label="1;1pkt 1fpkt"];
3204--5807[label="1;2pkt 2fpkt"];
3204--7158[label="0.333333;1pkt 1fpkt"];
3204--7174[label="1;1pkt 1fpkt"];
3204--7179[label="1;1pkt 1fpkt"];
3204--8036[label="1;1pkt 1fpkt"];
5807--7179[label="1;1pkt 1fpkt"];
5807--8036[label="1;1pkt 1fpkt"];
7179--8036[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.130.23.132" dst_port="80" src_ip="195.42.200.187"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1173{
style=filled;
color=gray75;
5778[label="161.238.38.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7159[label="161.238.38.228;1pkt 1fpkt", shape=invtriangle, color=brown];
8021[label="161.238.38.228;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1173[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.38.228:2778, 86.135.43.200:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2778: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5778--7159[label="1;1pkt 1fpkt"];
5778--8021[label="1;1pkt 1fpkt"];
7159--8021[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="86.135.43.200" dst_port="80" src_ip="161.238.38.228" src_port="2778"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1174{
style=filled;
color=gray75;
1097[label="141.98.11.132;d;30pkt 30fpkt", shape=diamond, color=yellow];
1100[label="203.200.92.65;s;1pkt 1fpkt", shape=diamond, color=yellow];
1455[label="136.230.133.113;d;2pkt 2fpkt", shape=diamond, color=yellow];
1697[label="86.135.43.228;s;34pkt 34fpkt", shape=diamond, color=yellow];
2155[label="85.27.206.194;s;1pkt 1fpkt", shape=diamond, color=yellow];
2796[label="141.98.11.132;d;15pkt 15fpkt", shape=hexagon, color=black];
3078[label="136.230.133.113;d;2pkt 2fpkt", shape=hexagon, color=black];
3228[label="86.135.43.228;s;33pkt 33fpkt", shape=hexagon, color=black];
4540[label="203.200.92.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5779[label="86.135.43.228;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7160[label="86.135.43.228;1pkt 1fpkt", shape=invtriangle, color=brown];
7935[label="85.27.206.194;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1174[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.135.43.228:80, *:*}[51.5625%]&lt;BR/&gt;{203.200.93.152:80, 141.98.11.132:*}[26.5625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.3089%)&lt;BR/&gt; 0: (8.13008%)&lt;BR/&gt; 20104: (1.62602%)&lt;BR/&gt; 2403: (1.62602%)&lt;BR/&gt; 2314: (1.62602%)&gt;];
}
1097--1100[label="1;1pkt 1fpkt"];
1097--1697[label="0.0333333;1pkt 1fpkt"];
1097--2796[label="1;15pkt 15fpkt"];
1097--3228[label="0.0333333;1pkt 1fpkt"];
1097--4540[label="1;1pkt 1fpkt"];
1097--5231[label="0.68;17pkt 17fpkt"];
1097--5628[label="0.0333333;1pkt 1fpkt"];
1097--6795[label="0.68;17pkt 17fpkt"];
1097--7056[label="0.0333333;1pkt 1fpkt"];
1097--7793[label="0.708333;17pkt 17fpkt"];
1100--2796[label="1;1pkt 1fpkt"];
1100--4540[label="1;1pkt 1fpkt"];
1455--1697[label="0.5;1pkt 1fpkt"];
1455--2155[label="1;1pkt 1fpkt"];
1455--3078[label="1;2pkt 2fpkt"];
1455--3228[label="0.5;1pkt 1fpkt"];
1455--5779[label="0.5;1pkt 1fpkt"];
1455--7160[label="1;1pkt 1fpkt"];
1455--7935[label="1;1pkt 1fpkt"];
1697--2796[label="0.0666667;1pkt 1fpkt"];
1697--2798[label="0.0294118;1pkt 1fpkt"];
1697--2859[label="0.0294118;1pkt 1fpkt"];
1697--2910[label="0.0882353;3pkt 3fpkt"];
1697--3035[label="0.0588235;2pkt 2fpkt"];
1697--3078[label="0.5;1pkt 1fpkt"];
1697--3228[label="1;33pkt 33fpkt"];
1697--3371[label="0.0294118;1pkt 1fpkt"];
1697--3634[label="0.117647;4pkt 4fpkt"];
1697--3636[label="0.0294118;1pkt 1fpkt"];
1697--3807[label="0.0882353;3pkt 3fpkt"];
1697--3836[label="0.0294118;1pkt 1fpkt"];
1697--3950[label="0.0294118;1pkt 1fpkt"];
1697--5779[label="1;2pkt 2fpkt"];
1697--7160[label="1;1pkt 1fpkt"];
2155--3078[label="1;1pkt 1fpkt"];
2155--7935[label="1;1pkt 1fpkt"];
2796--3228[label="0.0666667;1pkt 1fpkt"];
2796--4540[label="1;1pkt 1fpkt"];
2796--5231[label="0.266667;4pkt 4fpkt"];
2796--5628[label="0.0666667;1pkt 1fpkt"];
2796--6795[label="0.266667;4pkt 4fpkt"];
2796--7056[label="0.0666667;1pkt 1fpkt"];
2796--7793[label="0.266667;4pkt 4fpkt"];
3078--3228[label="0.5;1pkt 1fpkt"];
3078--5779[label="0.5;1pkt 1fpkt"];
3078--7160[label="1;1pkt 1fpkt"];
3078--7935[label="1;1pkt 1fpkt"];
3228--3371[label="0.030303;1pkt 1fpkt"];
3228--3634[label="0.121212;4pkt 4fpkt"];
3228--3636[label="0.030303;1pkt 1fpkt"];
3228--3807[label="0.0909091;3pkt 3fpkt"];
3228--3836[label="0.030303;1pkt 1fpkt"];
3228--3950[label="0.030303;1pkt 1fpkt"];
3228--5779[label="1;2pkt 2fpkt"];
3228--7160[label="1;1pkt 1fpkt"];
5779--7160[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="86.135.43.228" src_port="80"/>
      <filter dst_ip="141.98.11.132" src_ip="203.200.93.152" src_port="80"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.131.140.228"/>
    </slice>
    <from sec="1034226019" usec="0"/>
    <to sec="1034226785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.16.151.228"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1177{
style=filled;
color=gray75;
5790[label="196.20.9.230;137pkt 137fpkt", shape=pentagon, color=darkviolet];
7166[label="196.20.9.230;138pkt 138fpkt", shape=invtriangle, color=brown];
8026[label="196.20.9.230;137pkt 137fpkt", shape=invhouse, color=bisque];
stat1177[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.20.9.230:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5790--7166[label="1;137pkt 137fpkt"];
5790--8026[label="1;137pkt 137fpkt"];
7166--8026[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.20.9.230" src_port="1029"/>
    </slice>
    <from sec="1034226613" usec="0"/>
    <to sec="1034226637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.175.65.230"/>
    </slice>
    <from sec="1034226106" usec="0"/>
    <to sec="1034226690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="130.13.77.230"/>
    </slice>
    <from sec="1034226006" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.195.60.231"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1181{
style=filled;
color=gray75;
5804[label="3.59.67.231;136pkt 136fpkt", shape=pentagon, color=darkviolet];
7176[label="3.59.67.231;136pkt 136fpkt", shape=invtriangle, color=brown];
8033[label="3.59.67.231;137pkt 137fpkt", shape=invhouse, color=bisque];
stat1181[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.59.67.231:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5804--7176[label="1;136pkt 136fpkt"];
5804--8033[label="1;136pkt 136fpkt"];
7176--8033[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="3.59.67.231" src_port="1030"/>
    </slice>
    <from sec="1034226679" usec="0"/>
    <to sec="1034226701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1182{
style=filled;
color=gray75;
5805[label="85.34.108.231;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7177[label="85.34.108.231;13pkt 13fpkt", shape=invtriangle, color=brown];
8034[label="85.34.108.231;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1182[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.34.108.231:1863, 167.8.139.234:*}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3150: (3.94737%)&lt;BR/&gt; 3149: (3.94737%)&lt;BR/&gt; 3144: (3.94737%)&lt;BR/&gt; 3141: (3.94737%)&gt;];
}
5805--7177[label="1;12pkt 12fpkt"];
5805--8034[label="1;12pkt 12fpkt"];
7177--8034[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.139.234" src_ip="85.34.108.231" src_port="1863"/>
    </slice>
    <from sec="1034226016" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1183{
style=filled;
color=gray75;
5808[label="161.238.38.232;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7180[label="161.238.38.232;7pkt 7fpkt", shape=invtriangle, color=brown];
8037[label="161.238.38.232;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1183[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.38.232:*, 196.213.97.234:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2045: (7.14286%)&lt;BR/&gt; 2044: (7.14286%)&lt;BR/&gt; 2043: (7.14286%)&lt;BR/&gt; 2042: (7.14286%)&gt;];
}
5808--7180[label="1;7pkt 7fpkt"];
5808--8037[label="1;7pkt 7fpkt"];
7180--8037[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="196.213.97.234" dst_port="80" src_ip="161.238.38.232"/>
    </slice>
    <from sec="1034226483" usec="0"/>
    <to sec="1034226555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.195.80.232"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1185{
style=filled;
color=gray75;
2079[label="185.191.69.155;d;4pkt 4fpkt", shape=diamond, color=yellow];
2117[label="218.110.226.232;s;4pkt 4fpkt", shape=diamond, color=yellow];
3349[label="218.110.226.232;s;3pkt 3fpkt", shape=hexagon, color=black];
5817[label="218.110.226.232;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7187[label="218.110.226.232;7pkt 7fpkt", shape=invtriangle, color=brown];
8043[label="218.110.226.232;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1185[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.110.226.232:80, 161.238.21.106:*}[37.5%]&lt;BR/&gt;{218.110.226.232:80, 185.191.69.155:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4375%)&lt;BR/&gt; 2145: (9.375%)&lt;BR/&gt; 2144: (9.375%)&lt;BR/&gt; 2141: (9.375%)&lt;BR/&gt; 2351: (6.25%)&gt;];
}
2079--2117[label="0.75;3pkt 3fpkt"];
2079--3349[label="1;3pkt 3fpkt"];
2079--5817[label="0.75;3pkt 3fpkt"];
2079--7187[label="0.75;3pkt 3fpkt"];
2079--8043[label="0.75;3pkt 3fpkt"];
2117--3349[label="1;3pkt 3fpkt"];
2117--5817[label="1;4pkt 4fpkt"];
2117--7187[label="1;4pkt 4fpkt"];
2117--8043[label="1;4pkt 4fpkt"];
3349--5817[label="1;3pkt 3fpkt"];
3349--7187[label="1;3pkt 3fpkt"];
3349--8043[label="1;3pkt 3fpkt"];
5817--7187[label="1;7pkt 7fpkt"];
5817--8043[label="1;7pkt 7fpkt"];
7187--8043[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.69.155" src_ip="218.110.226.232" src_port="80"/>
      <filter dst_ip="161.238.21.106" src_ip="218.110.226.232" src_port="80"/>
    </slice>
    <from sec="1034226153" usec="0"/>
    <to sec="1034226673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1186{
style=filled;
color=gray75;
5796[label="86.2.83.230;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7171[label="86.2.83.230;8pkt 8fpkt", shape=invtriangle, color=brown];
8029[label="86.2.83.230;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1186[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.2.83.230:*, 185.191.2.170:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4550: (6.25%)&lt;BR/&gt; 4549: (6.25%)&lt;BR/&gt; 4548: (6.25%)&lt;BR/&gt; 4547: (6.25%)&gt;];
}
5796--7171[label="1;8pkt 8fpkt"];
5796--8029[label="1;8pkt 8fpkt"];
7171--8029[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.2.170" dst_port="80" src_ip="86.2.83.230"/>
    </slice>
    <from sec="1034226243" usec="0"/>
    <to sec="1034226293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1187{
style=filled;
color=gray75;
5834[label="217.121.211.235;196pkt 196fpkt", shape=pentagon, color=darkviolet];
7200[label="217.121.211.235;196pkt 196fpkt", shape=invtriangle, color=brown];
stat1187[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.121.211.235:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5834--7200[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.121.211.235" src_port="1025"/>
    </slice>
    <from sec="1034226536" usec="0"/>
    <to sec="1034226570" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1188{
style=filled;
color=gray75;
5836[label="194.75.0.236;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7201[label="194.75.0.236;4pkt 4fpkt", shape=invtriangle, color=brown];
8054[label="194.75.0.236;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1188[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.75.0.236:80, 161.238.12.212:1139}[25%]&lt;BR/&gt;{194.75.0.236:80, 161.238.12.212:1140}[25%]&lt;BR/&gt;{194.75.0.236:80, 161.238.12.212:1161}[25%]&lt;BR/&gt;{194.75.0.236:80, 161.238.12.212:1162}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1162: (12.5%)&lt;BR/&gt; 1161: (12.5%)&lt;BR/&gt; 1140: (12.5%)&lt;BR/&gt; 1139: (12.5%)&gt;];
}
5836--7201[label="1;4pkt 4fpkt"];
5836--8054[label="1;4pkt 4fpkt"];
7201--8054[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.12.212" dst_port="1162" src_ip="194.75.0.236" src_port="80"/>
      <filter dst_ip="161.238.12.212" dst_port="1161" src_ip="194.75.0.236" src_port="80"/>
      <filter dst_ip="161.238.12.212" dst_port="1140" src_ip="194.75.0.236" src_port="80"/>
      <filter dst_ip="161.238.12.212" dst_port="1139" src_ip="194.75.0.236" src_port="80"/>
    </slice>
    <from sec="1034226019" usec="0"/>
    <to sec="1034226154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1189{
style=filled;
color=gray75;
5846[label="161.238.244.237;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7209[label="161.238.244.237;1pkt 1fpkt", shape=invtriangle, color=brown];
8059[label="161.238.244.237;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1189[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.244.237:0, 140.16.87.40:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5846--7209[label="1;1pkt 1fpkt"];
5846--8059[label="1;1pkt 1fpkt"];
7209--8059[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.16.87.40" src_ip="161.238.244.237"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1190{
style=filled;
color=gray75;
5851[label="200.177.185.239;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7213[label="200.177.185.239;1pkt 1fpkt", shape=invtriangle, color=brown];
8062[label="200.177.185.239;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1190[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.177.185.239:80, 212.24.7.16:1589}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1589: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5851--7213[label="1;1pkt 1fpkt"];
5851--8062[label="1;1pkt 1fpkt"];
7213--8062[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.7.16" dst_port="1589" src_ip="200.177.185.239" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1191{
style=filled;
color=gray75;
5859[label="185.191.166.240;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7218[label="185.191.166.240;17pkt 17fpkt", shape=invtriangle, color=brown];
8066[label="185.191.166.240;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1191[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.191.166.240:*, 86.207.75.13:80}[41.1765%]&lt;BR/&gt;{185.191.166.240:*, 86.162.55.92:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1552: (2.94118%)&lt;BR/&gt; 1550: (2.94118%)&lt;BR/&gt; 1548: (2.94118%)&lt;BR/&gt; 1547: (2.94118%)&gt;];
}
5859--7218[label="1;17pkt 17fpkt"];
5859--8066[label="1;17pkt 17fpkt"];
7218--8066[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="86.207.75.13" dst_port="80" src_ip="185.191.166.240"/>
      <filter dst_ip="86.162.55.92" dst_port="80" src_ip="185.191.166.240"/>
    </slice>
    <from sec="1034226342" usec="0"/>
    <to sec="1034226498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.238.24.241"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.236.170.242"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1194{
style=filled;
color=gray75;
666[label="212.24.29.114;d;93pkt 93fpkt", shape=diamond, color=yellow];
886[label="43.176.136.105;s;1pkt 1fpkt", shape=diamond, color=yellow];
1039[label="75.77.240.242;s;2pkt 2fpkt", shape=diamond, color=yellow];
1058[label="200.189.42.188;s;1pkt 1fpkt", shape=diamond, color=yellow];
1109[label="43.201.54.208;s;1pkt 1fpkt", shape=diamond, color=yellow];
2826[label="43.176.136.105;s;1pkt 1fpkt", shape=hexagon, color=black];
3633[label="212.24.29.114;d;93pkt 93fpkt", shape=hexagon, color=black];
3639[label="43.201.54.208;s;1pkt 1fpkt", shape=hexagon, color=black];
5871[label="75.77.240.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7225[label="75.77.240.242;1pkt 1fpkt", shape=invtriangle, color=brown];
8069[label="75.77.240.242;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1194[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6257, 212.24.29.114:6257}[92.5532%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (89.7959%)&lt;BR/&gt; 6699: (4.84694%)&lt;BR/&gt; 1088: (1.53061%)&lt;BR/&gt; 1103: (1.02041%)&lt;BR/&gt; 1101: (1.02041%)&gt;];
}
666--886[label="1;1pkt 1fpkt"];
666--1039[label="0.5;1pkt 1fpkt"];
666--1058[label="1;1pkt 1fpkt"];
666--1109[label="1;1pkt 1fpkt"];
666--2826[label="1;1pkt 1fpkt"];
666--3203[label="0.5;1pkt 1fpkt"];
666--3633[label="1;93pkt 93fpkt"];
666--3639[label="1;1pkt 1fpkt"];
666--3948[label="0.107527;10pkt 10fpkt"];
666--3952[label="0.129032;12pkt 12fpkt"];
666--3961[label="0.107527;10pkt 10fpkt"];
666--3963[label="0.129032;12pkt 12fpkt"];
666--3971[label="0.107527;10pkt 10fpkt"];
666--3973[label="0.129032;12pkt 12fpkt"];
666--5871[label="1;1pkt 1fpkt"];
666--7225[label="1;1pkt 1fpkt"];
666--8069[label="1;1pkt 1fpkt"];
886--2826[label="1;1pkt 1fpkt"];
886--3633[label="1;1pkt 1fpkt"];
1039--1112[label="0.5;1pkt 1fpkt"];
1039--3203[label="1;2pkt 2fpkt"];
1039--3633[label="0.5;1pkt 1fpkt"];
1039--3948[label="0.5;1pkt 1fpkt"];
1039--3952[label="0.5;1pkt 1fpkt"];
1039--3961[label="0.5;1pkt 1fpkt"];
1039--3963[label="0.5;1pkt 1fpkt"];
1039--3971[label="0.5;1pkt 1fpkt"];
1039--3973[label="0.5;1pkt 1fpkt"];
1039--5871[label="1;1pkt 1fpkt"];
1039--7225[label="1;1pkt 1fpkt"];
1039--8069[label="1;1pkt 1fpkt"];
1058--3633[label="1;1pkt 1fpkt"];
1109--3633[label="1;1pkt 1fpkt"];
1109--3639[label="1;1pkt 1fpkt"];
2826--3633[label="1;1pkt 1fpkt"];
3633--3639[label="1;1pkt 1fpkt"];
3633--3948[label="0.107527;10pkt 10fpkt"];
3633--3952[label="0.129032;12pkt 12fpkt"];
3633--3961[label="0.107527;10pkt 10fpkt"];
3633--3963[label="0.129032;12pkt 12fpkt"];
3633--3971[label="0.107527;10pkt 10fpkt"];
3633--3973[label="0.129032;12pkt 12fpkt"];
3633--5871[label="1;1pkt 1fpkt"];
3633--7225[label="1;1pkt 1fpkt"];
3633--8069[label="1;1pkt 1fpkt"];
5871--7225[label="1;1pkt 1fpkt"];
5871--8069[label="1;1pkt 1fpkt"];
7225--8069[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.29.114" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1195{
style=filled;
color=gray75;
5872[label="85.71.26.243;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7226[label="85.71.26.243;14pkt 14fpkt", shape=invtriangle, color=brown];
8070[label="85.71.26.243;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1195[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.71.26.243:80, 185.191.254.198:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32905: (3.57143%)&lt;BR/&gt; 32904: (3.57143%)&lt;BR/&gt; 32902: (3.57143%)&lt;BR/&gt; 32900: (3.57143%)&gt;];
}
5872--7226[label="1;14pkt 14fpkt"];
5872--8070[label="1;14pkt 14fpkt"];
7226--8070[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="185.191.254.198" src_ip="85.71.26.243" src_port="80"/>
    </slice>
    <from sec="1034226458" usec="0"/>
    <to sec="1034226642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1196{
style=filled;
color=gray75;
5892[label="192.102.36.246;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7237[label="192.102.36.246;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1196[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.102.36.246:80, 161.238.11.37:*}[60%]&lt;BR/&gt;{192.102.36.246:80, 161.238.13.24:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1677: (5.26316%)&lt;BR/&gt; 1673: (5.26316%)&lt;BR/&gt; 1581: (5.26316%)&lt;BR/&gt; 1578: (5.26316%)&gt;];
}
5892--7237[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.11.37" src_ip="192.102.36.246" src_port="80"/>
      <filter dst_ip="161.238.13.24" src_ip="192.102.36.246" src_port="80"/>
    </slice>
    <from sec="1034226191" usec="0"/>
    <to sec="1034226764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1197{
style=filled;
color=gray75;
5893[label="197.98.83.246;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7238[label="197.98.83.246;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1197[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.98.83.246:80, 212.18.106.80:5113}[33.3333%]&lt;BR/&gt;{197.98.83.246:80, 212.18.106.80:32364}[33.3333%]&lt;BR/&gt;{197.98.83.246:80, 212.18.106.80:45291}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45291: (16.6667%)&lt;BR/&gt; 32364: (16.6667%)&lt;BR/&gt; 5113: (16.6667%)&gt;];
}
5893--7238[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.106.80" dst_port="45291" src_ip="197.98.83.246" src_port="80"/>
      <filter dst_ip="212.18.106.80" dst_port="32364" src_ip="197.98.83.246" src_port="80"/>
      <filter dst_ip="212.18.106.80" dst_port="5113" src_ip="197.98.83.246" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.145.202.246"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1199{
style=filled;
color=gray75;
5908[label="218.181.2.248;126pkt 126fpkt", shape=pentagon, color=darkviolet];
7248[label="218.181.2.248;125pkt 125fpkt", shape=invtriangle, color=brown];
stat1199[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.181.2.248:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5908--7248[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.181.2.248" src_port="1026"/>
    </slice>
    <from sec="1034226437" usec="0"/>
    <to sec="1034226460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1200{
style=filled;
color=gray75;
5924[label="43.180.132.249;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7256[label="43.180.132.249;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1200[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.180.132.249:7777, 212.24.1.135:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7777: (50%)&lt;BR/&gt; 4996: (6.25%)&lt;BR/&gt; 4994: (6.25%)&lt;BR/&gt; 1110: (6.25%)&lt;BR/&gt; 1090: (6.25%)&gt;];
}
5924--7256[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.1.135" src_ip="43.180.132.249" src_port="7777"/>
    </slice>
    <from sec="1034226009" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1201{
style=filled;
color=gray75;
5929[label="192.93.36.251;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7259[label="192.93.36.251;4pkt 4fpkt", shape=invtriangle, color=brown];
8088[label="192.93.36.251;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1201[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.93.36.251:80, 141.98.230.29:55501}[20%]&lt;BR/&gt;{192.93.36.251:80, 141.98.230.29:55502}[20%]&lt;BR/&gt;{192.93.36.251:80, 141.98.230.29:55503}[20%]&lt;BR/&gt;{192.93.36.251:80, 141.98.230.29:55504}[20%]&lt;BR/&gt;{192.93.36.251:80, 141.98.230.29:55505}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55505: (11.5385%)&lt;BR/&gt; 55504: (11.5385%)&lt;BR/&gt; 55503: (11.5385%)&lt;BR/&gt; 55502: (11.5385%)&gt;];
}
5929--7259[label="1;4pkt 4fpkt"];
5929--8088[label="1;4pkt 4fpkt"];
7259--8088[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="141.98.230.29" dst_port="55505" src_ip="192.93.36.251" src_port="80"/>
      <filter dst_ip="141.98.230.29" dst_port="55504" src_ip="192.93.36.251" src_port="80"/>
      <filter dst_ip="141.98.230.29" dst_port="55503" src_ip="192.93.36.251" src_port="80"/>
      <filter dst_ip="141.98.230.29" dst_port="55502" src_ip="192.93.36.251" src_port="80"/>
      <filter dst_ip="141.98.230.29" dst_port="55501" src_ip="192.93.36.251" src_port="80"/>
    </slice>
    <from sec="1034226006" usec="0"/>
    <to sec="1034226177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.528007,2.12308,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1202{
style=filled;
color=gray75;
5934[label="196.83.32.253;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7262[label="196.83.32.253;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1202[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.83.32.253:80, 212.18.106.107:1227}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1227: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5934--7262[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.18.106.107" dst_port="1227" src_ip="196.83.32.253" src_port="80"/>
    </slice>
    <from sec="1034226471" usec="0"/>
    <to sec="1034226579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.852182,2.15881,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1203{
style=filled;
color=gray75;
1932[label="136.230.121.253;s;53pkt 53fpkt", shape=diamond, color=yellow];
3653[label="136.230.121.253;s;53pkt 53fpkt", shape=hexagon, color=black];
7264[label="136.230.121.253;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1203[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.230.121.253:25, *:*}[68.5185%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (43.5185%)&lt;BR/&gt; 80: (6.48148%)&lt;BR/&gt; 25633: (1.38889%)&lt;BR/&gt; 64501: (0.925926%)&lt;BR/&gt; 64459: (0.925926%)&gt;];
}
1932--1998[label="0.0588235;1pkt 1fpkt"];
1932--2070[label="0.0434783;1pkt 1fpkt"];
1932--2380[label="0.0869565;2pkt 2fpkt"];
1932--3327[label="0.0434783;1pkt 1fpkt"];
1932--3558[label="0.0588235;1pkt 1fpkt"];
1932--3653[label="1;53pkt 53fpkt"];
1932--7264[label="0.5;1pkt 1fpkt"];
3653--7264[label="0.5;1pkt 1fpkt"];
7264--8092[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="136.230.121.253" src_port="25"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.584311,2.17564,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.92.150.253"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.24.29.1"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.166.70.3"/>
    </slice>
    <from sec="1034226007" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="75.132.101.4"/>
    </slice>
    <from sec="1034226103" usec="0"/>
    <to sec="1034226143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.196.168.4"/>
    </slice>
    <from sec="1034226389" usec="0"/>
    <to sec="1034226469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="185.191.212.7"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.60.147.8"/>
    </slice>
    <from sec="1034226642" usec="0"/>
    <to sec="1034226674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.108.173.13"/>
    </slice>
    <from sec="1034226255" usec="0"/>
    <to sec="1034226522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="75.192.17.16"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="161.238.215.22"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.200.45.24"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.233.238.28"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.148.177.30"/>
    </slice>
    <from sec="1034226006" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,502,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.177.17.31"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.34.109.32"/>
    </slice>
    <from sec="1034226018" usec="0"/>
    <to sec="1034226715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.8.71.35"/>
    </slice>
    <from sec="1034226036" usec="0"/>
    <to sec="1034226107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.227.12.36"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="75.133.116.40"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="161.238.128.42"/>
    </slice>
    <from sec="1034226084" usec="0"/>
    <to sec="1034226166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.10.104.47"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1224{
style=filled;
color=gray75;
4419[label="17.227.83.49;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6249[label="17.227.83.49;8pkt 8fpkt", shape=invtriangle, color=brown];
7458[label="17.227.83.49;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1224[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.227.83.49:*, 167.8.180.170:995}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (43.4783%)&lt;BR/&gt; 57155: (6.52174%)&lt;BR/&gt; 57154: (6.52174%)&lt;BR/&gt; 57151: (6.52174%)&lt;BR/&gt; 57085: (6.52174%)&gt;];
}
4419--6249[label="1;8pkt 8fpkt"];
4419--7458[label="1;7pkt 7fpkt"];
6249--7458[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.180.170" dst_port="995" src_ip="17.227.83.49"/>
    </slice>
    <from sec="1034226330" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="75.6.224.50"/>
    </slice>
    <from sec="1034226490" usec="0"/>
    <to sec="1034226700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.72.0.52"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="161.238.66.57"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.105.172.60"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.17.215.61"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.193.163.67"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="167.1.93.71"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.200.92.72"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.177.152.72"/>
    </slice>
    <from sec="1034226009" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.200.92.74"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.32.113.74"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.55.125.79"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.200.92.80"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.914832,2.14104,503,1 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1238{
style=filled;
color=gray75;
64[label="161.238.12.88s;1pkt 1fpkt", shape=rectangle, color=red];
6467[label="161.238.12.88;1pkt 1fpkt", shape=invtriangle, color=brown];
7588[label="161.238.12.88;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1238[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.12.88:1129, 203.129.39.111:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1129: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
64--6467[label="1;1pkt 1fpkt"];
64--7588[label="1;1pkt 1fpkt"];
6467--7588[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.129.39.111" dst_port="80" src_ip="161.238.12.88" src_port="1129"/>
    </slice>
    <from sec="1034226071" usec="0"/>
    <to sec="1034226082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.106.25.98"/>
    </slice>
    <from sec="1034226627" usec="0"/>
    <to sec="1034226795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.137.235.101"/>
    </slice>
    <from sec="1034226006" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.85.5.111"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="161.238.74.111"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.635702,2.14066,901,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1243{
style=filled;
color=gray75;
4933[label="86.21.208.113;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7650[label="86.21.208.113;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1243[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.21.208.113:80, 161.238.10.88:1805}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1805: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4933--6579[label="1;1pkt 1fpkt"];
4933--7650[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.238.10.88" dst_port="1805" src_ip="86.21.208.113" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,502,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="136.230.79.114"/>
    </slice>
    <from sec="1034226521" usec="0"/>
    <to sec="1034226776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.134.97.118"/>
    </slice>
    <from sec="1034226012" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.113.238.119"/>
    </slice>
    <from sec="1034226527" usec="0"/>
    <to sec="1034226537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.235.233.126"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.168.138.128"/>
    </slice>
    <from sec="1034226108" usec="0"/>
    <to sec="1034226794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.8.65.131"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="130.60.83.132"/>
    </slice>
    <from sec="1034226306" usec="0"/>
    <to sec="1034226391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.83.86.133"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.112.116.135"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.97.51.136"/>
    </slice>
    <from sec="1034226571" usec="0"/>
    <to sec="1034226648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="161.238.51.138"/>
    </slice>
    <from sec="1034226019" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="75.210.95.145"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.235.237.145"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.71.136.147"/>
    </slice>
    <from sec="1034226625" usec="0"/>
    <to sec="1034226680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.107.103.148"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.34.64.157"/>
    </slice>
    <from sec="1034226290" usec="0"/>
    <to sec="1034226333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920853,2.09218,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1260{
style=filled;
color=gray75;
1839[label="85.34.115.157;s;31pkt 31fpkt", shape=diamond, color=yellow];
3329[label="85.34.115.157;s;31pkt 31fpkt", shape=hexagon, color=black];
5266[label="85.34.115.157;31pkt 31fpkt", shape=pentagon, color=darkviolet];
6820[label="85.34.115.157;32pkt 32fpkt", shape=invtriangle, color=brown];
7813[label="85.34.115.157;31pkt 31fpkt", shape=invhouse, color=bisque];
stat1260[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.34.115.157:80, 167.8.54.47:*}[68.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33734: (1.60256%)&lt;BR/&gt; 33725: (1.60256%)&lt;BR/&gt; 33705: (1.60256%)&lt;BR/&gt; 33695: (1.60256%)&gt;];
}
1839--3329[label="1;31pkt 31fpkt"];
1839--3950[label="0.548387;17pkt 17fpkt"];
1839--5266[label="0.967742;30pkt 30fpkt"];
1839--6820[label="1;31pkt 31fpkt"];
1839--7813[label="0.967742;30pkt 30fpkt"];
3329--3950[label="0.548387;17pkt 17fpkt"];
3329--5266[label="0.967742;30pkt 30fpkt"];
3329--6820[label="1;31pkt 31fpkt"];
3329--7813[label="0.967742;30pkt 30fpkt"];
5266--6820[label="1;31pkt 31fpkt"];
5266--7813[label="1;31pkt 31fpkt"];
6820--7813[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="167.8.54.47" src_ip="85.34.115.157" src_port="80"/>
    </slice>
    <from sec="1034226117" usec="0"/>
    <to sec="1034226731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.22.3.158"/>
    </slice>
    <from sec="1034226009" usec="0"/>
    <to sec="1034226783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="161.241.232.158"/>
    </slice>
    <from sec="1034226300" usec="0"/>
    <to sec="1034226371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.233.84.173"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.232.24.175"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.182.229.178"/>
    </slice>
    <from sec="1034226222" usec="0"/>
    <to sec="1034226479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="136.230.80.180"/>
    </slice>
    <from sec="1034226005" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.136.59.181"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="136.230.104.181"/>
    </slice>
    <from sec="1034226008" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="161.238.208.181"/>
    </slice>
    <from sec="1034226011" usec="0"/>
    <to sec="1034226781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1270{
style=filled;
color=gray75;
5491[label="161.238.227.185;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6963[label="161.238.227.185;2pkt 2fpkt", shape=invtriangle, color=brown];
7899[label="161.238.227.185;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1270[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.238.227.185:1055, 203.2.66.16:80}[33.3333%]&lt;BR/&gt;{161.238.227.185:1080, 203.177.200.39:80}[33.3333%]&lt;BR/&gt;{161.238.227.185:1089, 203.204.36.229:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1089: (21.4286%)&lt;BR/&gt; 1080: (21.4286%)&lt;BR/&gt; 1055: (7.14286%)&gt;];
}
5491--6963[label="1;2pkt 2fpkt"];
5491--7899[label="1;2pkt 2fpkt"];
6963--7899[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="203.204.36.229" dst_port="80" src_ip="161.238.227.185" src_port="1089"/>
      <filter dst_ip="203.177.200.39" dst_port="80" src_ip="161.238.227.185" src_port="1080"/>
      <filter dst_ip="203.2.66.16" dst_port="80" src_ip="161.238.227.185" src_port="1055"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.101.131.186"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="10.0.13.187"/>
    </slice>
    <from sec="1034226011" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.150.67.191"/>
    </slice>
    <from sec="1034226004" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.227.142.191"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.93.165.195"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="86.177.171.197"/>
    </slice>
    <from sec="1034226523" usec="0"/>
    <to sec="1034226730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.98.168.198"/>
    </slice>
    <from sec="1034226587" usec="0"/>
    <to sec="1034226621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="130.5.126.201"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.17.142.207"/>
    </slice>
    <from sec="1034226084" usec="0"/>
    <to sec="1034226163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.93.54.208"/>
    </slice>
    <from sec="1034226573" usec="0"/>
    <to sec="1034226648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="75.206.152.208"/>
    </slice>
    <from sec="1034226769" usec="0"/>
    <to sec="1034226792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.92.220.208"/>
    </slice>
    <from sec="1034226006" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="86.128.189.209"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="172.73.17.210"/>
    </slice>
    <from sec="1034226010" usec="0"/>
    <to sec="1034226789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.13.62.218"/>
    </slice>
    <from sec="1034226007" usec="0"/>
    <to sec="1034226778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1286{
style=filled;
color=gray75;
5757[label="194.111.185.225;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7144[label="194.111.185.225;1pkt 1fpkt", shape=invtriangle, color=brown];
8012[label="194.111.185.225;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1286[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.111.185.225:80, 161.238.19.0:1950}[50%]&lt;BR/&gt;{194.111.185.225:80, 212.24.27.92:2451}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2451: (37.5%)&lt;BR/&gt; 1950: (12.5%)&gt;];
}
5757--7144[label="1;1pkt 1fpkt"];
5757--8012[label="1;1pkt 1fpkt"];
7144--8012[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.27.92" dst_port="2451" src_ip="194.111.185.225" src_port="80"/>
      <filter dst_ip="161.238.19.0" dst_port="1950" src_ip="194.111.185.225" src_port="80"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.117.130.226"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.154.241.226"/>
    </slice>
    <from sec="1034226002" usec="0"/>
    <to sec="1034226606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.16.151.228"/>
    </slice>
    <from sec="1034226003" usec="0"/>
    <to sec="1034226796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.175.65.230"/>
    </slice>
    <from sec="1034226106" usec="0"/>
    <to sec="1034226690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.195.80.232"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68057,2.10954,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1292{
style=filled;
color=gray75;
5831[label="85.69.32.235;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7197[label="85.69.32.235;2pkt 2fpkt", shape=invtriangle, color=brown];
8051[label="85.69.32.235;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1292[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.69.32.235:34000, 161.238.15.98:80}[50%]&lt;BR/&gt;{85.69.32.235:13874, 212.130.23.134:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 13874: (30%)&lt;BR/&gt; 34000: (20%)&gt;];
}
5831--7197[label="1;2pkt 2fpkt"];
5831--8051[label="1;1pkt 1fpkt"];
7197--8051[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.130.23.134" dst_port="80" src_ip="85.69.32.235" src_port="13874"/>
      <filter dst_ip="161.238.15.98" dst_port="80" src_ip="85.69.32.235" src_port="34000"/>
    </slice>
    <from sec="1034226797" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.236.170.242"/>
    </slice>
    <from sec="1034226001" usec="0"/>
    <to sec="1034226088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683187,2.1928,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.90.55.252"/>
    </slice>
    <from sec="1034226000" usec="0"/>
    <to sec="1034226798" usec="0"/>
  </anomaly>

</admd:annotation>
