<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.94.164.104" dst_port="137" proto="tcp" src_ip="207.209.23.151" src_port="80"/>
      <filter dst_ip="148.94.164.104" dst_port="137" proto="udp" src_ip="207.209.23.151" src_port="80"/>
      <filter dst_ip="148.94.164.104" dst_port="137" proto="tcp" src_ip="207.209.23.151" src_port="1025"/>
      <filter dst_ip="148.94.164.104" dst_port="137" proto="udp" src_ip="207.209.23.151" src_port="1025"/>
      <from sec="1044162934" usec="0"/>
      <to sec="1044162956" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="148.94.164.104" dst_port="137" proto="tcp" src_ip="220.72.147.151" src_port="80"/>
      <filter dst_ip="148.94.164.104" dst_port="137" proto="udp" src_ip="220.72.147.151" src_port="80"/>
      <filter dst_ip="148.94.164.104" dst_port="137" proto="tcp" src_ip="220.72.147.151" src_port="1025"/>
      <filter dst_ip="148.94.164.104" dst_port="137" proto="udp" src_ip="220.72.147.151" src_port="1025"/>
      <from sec="1044162927" usec="0"/>
      <to sec="1044162957" usec="0"/>
    </slice>
    <from sec="1044162927" usec="0"/>
    <to sec="1044162957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.167.240.180" proto="icmp" src_ip="198.69.23.163"/>
      <from sec="1044163443" usec="0"/>
      <to sec="1044163489" usec="0"/>
    </slice>
    <from sec="1044163443" usec="0"/>
    <to sec="1044163489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="130.139.87.200" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="130.139.87.200" src_port="1027"/>
      <filter dst_port="80" proto="tcp" src_ip="130.139.87.200" src_port="1027"/>
      <filter dst_port="80" proto="udp" src_ip="130.139.87.200" src_port="1027"/>
      <filter dst_port="53" proto="tcp" src_ip="130.139.87.200" src_port="1027"/>
      <filter dst_port="53" proto="udp" src_ip="130.139.87.200" src_port="1027"/>
      <from sec="1044162973" usec="0"/>
      <to sec="1044162980" usec="0"/>
    </slice>
    <from sec="1044162965" usec="0"/>
    <to sec="1044162980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,504,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.94.204.41" dst_port="1240" proto="tcp" src_ip="203.161.149.207" src_port="443"/>
      <filter dst_ip="148.94.204.41" dst_port="1239" proto="tcp" src_ip="203.161.149.207" src_port="443"/>
      <from sec="1044163402" usec="0"/>
      <to sec="1044163405" usec="0"/>
    </slice>
    <from sec="1044163402" usec="0"/>
    <to sec="1044163405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="207.35.48.112" dst_port="139" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="207.35.48.112" dst_port="139" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="207.35.48.112" dst_port="139" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="207.35.48.112" dst_port="139" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <from sec="1044162490" usec="0"/>
      <to sec="1044163467" usec="0"/>
    </slice>
    <from sec="1044162490" usec="0"/>
    <to sec="1044163467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="165.155.67.174" dst_port="80" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="80" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="80" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="80" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="139" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="139" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="139" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="139" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="4142" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="4142" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="4142" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="4142" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="80" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="80" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="80" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="80" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="139" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="139" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="139" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="139" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="4142" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="4142" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="4142" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.174" dst_port="4142" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <from sec="1044162202" usec="0"/>
      <to sec="1044162798" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="165.155.67.31" dst_port="80" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="80" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="80" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="80" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="139" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="139" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="139" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="139" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="4142" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="4142" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="4142" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="4142" proto="tcp" src_ip="148.94.16.47" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="80" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="80" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="80" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="80" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="139" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="139" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="139" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="139" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="4142" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="4142" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="4142" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <filter dst_ip="165.155.67.31" dst_port="4142" proto="tcp" src_ip="221.91.149.48" src_port="4662"/>
      <from sec="1044162202" usec="0"/>
      <to sec="1044162798" usec="0"/>
    </slice>
    <from sec="1044162202" usec="0"/>
    <to sec="1044162798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="136.236.149.3" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="136.236.149.3" src_port="1025"/>
      <filter dst_port="6699" proto="tcp" src_ip="136.236.149.3" src_port="1025"/>
      <filter dst_port="6699" proto="udp" src_ip="136.236.149.3" src_port="1025"/>
      <from sec="1044163052" usec="0"/>
      <to sec="1044163084" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="165.155.81.3" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="165.155.81.3" src_port="1025"/>
      <filter dst_port="6699" proto="tcp" src_ip="165.155.81.3" src_port="1025"/>
      <filter dst_port="6699" proto="udp" src_ip="165.155.81.3" src_port="1025"/>
      <from sec="1044163054" usec="0"/>
      <to sec="1044163087" usec="0"/>
    </slice>
    <from sec="1044163052" usec="0"/>
    <to sec="1044163087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="130.138.1.40" dst_port="137" proto="tcp" src_ip="203.229.223.3" src_port="1029"/>
      <filter dst_ip="130.138.1.40" dst_port="137" proto="udp" src_ip="203.229.223.3" src_port="1029"/>
      <filter dst_ip="130.138.1.40" dst_port="137" proto="tcp" src_ip="203.229.223.3" src_port="25"/>
      <filter dst_ip="130.138.1.40" dst_port="137" proto="udp" src_ip="203.229.223.3" src_port="25"/>
      <from sec="1044163393" usec="0"/>
      <to sec="1044163402" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="130.138.1.40" dst_port="137" proto="tcp" src_ip="217.68.83.3" src_port="1029"/>
      <filter dst_ip="130.138.1.40" dst_port="137" proto="udp" src_ip="217.68.83.3" src_port="1029"/>
      <filter dst_ip="130.138.1.40" dst_port="137" proto="tcp" src_ip="217.68.83.3" src_port="25"/>
      <filter dst_ip="130.138.1.40" dst_port="137" proto="udp" src_ip="217.68.83.3" src_port="25"/>
      <from sec="1044163395" usec="0"/>
      <to sec="1044163402" usec="0"/>
    </slice>
    <from sec="1044163393" usec="0"/>
    <to sec="1044163402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="162.0.206.34" dst_port="137" proto="tcp" src_ip="209.153.54.4" src_port="1030"/>
      <filter dst_ip="162.0.206.34" dst_port="137" proto="udp" src_ip="209.153.54.4" src_port="1030"/>
      <filter dst_ip="162.0.206.34" dst_port="25" proto="tcp" src_ip="209.153.54.4" src_port="1030"/>
      <filter dst_ip="162.0.206.34" dst_port="25" proto="udp" src_ip="209.153.54.4" src_port="1030"/>
      <filter dst_ip="162.0.206.34" dst_port="137" proto="tcp" src_ip="209.153.54.4" src_port="38578"/>
      <filter dst_ip="162.0.206.34" dst_port="137" proto="udp" src_ip="209.153.54.4" src_port="38578"/>
      <filter dst_ip="162.0.206.34" dst_port="25" proto="tcp" src_ip="209.153.54.4" src_port="38578"/>
      <filter dst_ip="162.0.206.34" dst_port="25" proto="udp" src_ip="209.153.54.4" src_port="38578"/>
      <from sec="1044162670" usec="0"/>
      <to sec="1044162680" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="162.0.206.34" dst_port="137" proto="tcp" src_ip="192.107.146.4" src_port="1030"/>
      <filter dst_ip="162.0.206.34" dst_port="137" proto="udp" src_ip="192.107.146.4" src_port="1030"/>
      <filter dst_ip="162.0.206.34" dst_port="25" proto="tcp" src_ip="192.107.146.4" src_port="1030"/>
      <filter dst_ip="162.0.206.34" dst_port="25" proto="udp" src_ip="192.107.146.4" src_port="1030"/>
      <filter dst_ip="162.0.206.34" dst_port="137" proto="tcp" src_ip="192.107.146.4" src_port="38578"/>
      <filter dst_ip="162.0.206.34" dst_port="137" proto="udp" src_ip="192.107.146.4" src_port="38578"/>
      <filter dst_ip="162.0.206.34" dst_port="25" proto="tcp" src_ip="192.107.146.4" src_port="38578"/>
      <filter dst_ip="162.0.206.34" dst_port="25" proto="udp" src_ip="192.107.146.4" src_port="38578"/>
      <from sec="1044162670" usec="0"/>
      <to sec="1044162677" usec="0"/>
    </slice>
    <from sec="1044162670" usec="0"/>
    <to sec="1044162680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="tcp" src_ip="188.163.44.9" src_port="1025"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="udp" src_ip="188.163.44.9" src_port="1025"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="tcp" src_ip="188.163.44.9" src_port="80"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="udp" src_ip="188.163.44.9" src_port="80"/>
      <from sec="1044162917" usec="0"/>
      <to sec="1044162945" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="tcp" src_ip="192.22.76.9" src_port="1025"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="udp" src_ip="192.22.76.9" src_port="1025"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="tcp" src_ip="192.22.76.9" src_port="80"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="udp" src_ip="192.22.76.9" src_port="80"/>
      <from sec="1044162918" usec="0"/>
      <to sec="1044162929" usec="0"/>
    </slice>
    <from sec="1044162917" usec="0"/>
    <to sec="1044162946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="tcp" src_ip="188.17.138.12" src_port="1039"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="udp" src_ip="188.17.138.12" src_port="1039"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="tcp" src_ip="188.17.138.12" src_port="80"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="udp" src_ip="188.17.138.12" src_port="80"/>
      <from sec="1044163162" usec="0"/>
      <to sec="1044163184" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="tcp" src_ip="130.139.66.12" src_port="1039"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="udp" src_ip="130.139.66.12" src_port="1039"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="tcp" src_ip="130.139.66.12" src_port="80"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="udp" src_ip="130.139.66.12" src_port="80"/>
      <from sec="1044163170" usec="0"/>
      <to sec="1044163184" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="tcp" src_ip="141.96.2.12" src_port="1039"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="udp" src_ip="141.96.2.12" src_port="1039"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="tcp" src_ip="141.96.2.12" src_port="80"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="udp" src_ip="141.96.2.12" src_port="80"/>
      <from sec="1044163178" usec="0"/>
      <to sec="1044163182" usec="0"/>
    </slice>
    <from sec="1044163162" usec="0"/>
    <to sec="1044163184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="162.0.236.149" dst_port="137" proto="tcp" src_ip="190.60.161.12" src_port="1030"/>
      <filter dst_ip="162.0.236.149" dst_port="137" proto="udp" src_ip="190.60.161.12" src_port="1030"/>
      <from sec="1044162326" usec="0"/>
      <to sec="1044162338" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="162.0.236.149" dst_port="137" proto="tcp" src_ip="188.155.129.12" src_port="1030"/>
      <filter dst_ip="162.0.236.149" dst_port="137" proto="udp" src_ip="188.155.129.12" src_port="1030"/>
      <from sec="1044162333" usec="0"/>
      <to sec="1044162338" usec="0"/>
    </slice>
    <from sec="1044162326" usec="0"/>
    <to sec="1044162338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="208.45.141.13" src_port="1026"/>
      <from sec="1044163053" usec="0"/>
      <to sec="1044163065" usec="0"/>
    </slice>
    <from sec="1044163053" usec="0"/>
    <to sec="1044163065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="189.44.160.14" src_port="1025"/>
      <from sec="1044162802" usec="0"/>
      <to sec="1044162818" usec="0"/>
    </slice>
    <from sec="1044162802" usec="0"/>
    <to sec="1044162818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="219.166.83.28" src_port="1027"/>
      <from sec="1044163353" usec="0"/>
      <to sec="1044163367" usec="0"/>
    </slice>
    <from sec="1044163353" usec="0"/>
    <to sec="1044163367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="219.97.62.32" src_port="1026"/>
      <from sec="1044163032" usec="0"/>
      <to sec="1044163040" usec="0"/>
    </slice>
    <from sec="1044163032" usec="0"/>
    <to sec="1044163040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="217.233.84.36" src_port="1027"/>
      <from sec="1044163064" usec="0"/>
      <to sec="1044163086" usec="0"/>
    </slice>
    <from sec="1044163064" usec="0"/>
    <to sec="1044163086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="190.97.206.45" src_port="1025"/>
      <from sec="1044162287" usec="0"/>
      <to sec="1044162294" usec="0"/>
    </slice>
    <from sec="1044162286" usec="0"/>
    <to sec="1044162294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="130.138.44.66" dst_port="137" proto="tcp" src_ip="219.64.135.46" src_port="1217"/>
      <filter dst_ip="130.138.44.66" dst_port="137" proto="udp" src_ip="219.64.135.46" src_port="1217"/>
      <filter dst_ip="130.138.44.66" dst_port="110" proto="tcp" src_ip="219.64.135.46" src_port="1217"/>
      <filter dst_ip="130.138.44.66" dst_port="110" proto="udp" src_ip="219.64.135.46" src_port="1217"/>
      <filter dst_ip="130.138.44.66" dst_port="137" proto="tcp" src_ip="219.64.135.46" src_port="6455"/>
      <filter dst_ip="130.138.44.66" dst_port="137" proto="udp" src_ip="219.64.135.46" src_port="6455"/>
      <filter dst_ip="130.138.44.66" dst_port="110" proto="tcp" src_ip="219.64.135.46" src_port="6455"/>
      <filter dst_ip="130.138.44.66" dst_port="110" proto="udp" src_ip="219.64.135.46" src_port="6455"/>
      <from sec="1044162188" usec="0"/>
      <to sec="1044162198" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="130.138.44.66" dst_port="137" proto="tcp" src_ip="194.44.23.46" src_port="1217"/>
      <filter dst_ip="130.138.44.66" dst_port="137" proto="udp" src_ip="194.44.23.46" src_port="1217"/>
      <filter dst_ip="130.138.44.66" dst_port="110" proto="tcp" src_ip="194.44.23.46" src_port="1217"/>
      <filter dst_ip="130.138.44.66" dst_port="110" proto="udp" src_ip="194.44.23.46" src_port="1217"/>
      <filter dst_ip="130.138.44.66" dst_port="137" proto="tcp" src_ip="194.44.23.46" src_port="6455"/>
      <filter dst_ip="130.138.44.66" dst_port="137" proto="udp" src_ip="194.44.23.46" src_port="6455"/>
      <filter dst_ip="130.138.44.66" dst_port="110" proto="tcp" src_ip="194.44.23.46" src_port="6455"/>
      <filter dst_ip="130.138.44.66" dst_port="110" proto="udp" src_ip="194.44.23.46" src_port="6455"/>
      <from sec="1044162195" usec="0"/>
      <to sec="1044162198" usec="0"/>
    </slice>
    <from sec="1044162188" usec="0"/>
    <to sec="1044162198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="190.116.133.49" src_port="1025"/>
      <from sec="1044163173" usec="0"/>
      <to sec="1044163188" usec="0"/>
    </slice>
    <from sec="1044163173" usec="0"/>
    <to sec="1044163188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="220.160.155.60" src_port="1025"/>
      <from sec="1044163143" usec="0"/>
      <to sec="1044163152" usec="0"/>
    </slice>
    <from sec="1044163143" usec="0"/>
    <to sec="1044163152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="190.231.184.61" src_port="1025"/>
      <from sec="1044162097" usec="0"/>
      <to sec="1044162106" usec="0"/>
    </slice>
    <from sec="1044162097" usec="0"/>
    <to sec="1044162106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="138.24.0.63" src_port="1028"/>
      <from sec="1044162250" usec="0"/>
      <to sec="1044162259" usec="0"/>
    </slice>
    <from sec="1044162250" usec="0"/>
    <to sec="1044162259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="188.163.168.79" dst_port="137" proto="tcp" src_ip="190.79.101.65" src_port="1027"/>
      <filter dst_ip="188.163.168.79" dst_port="137" proto="udp" src_ip="190.79.101.65" src_port="1027"/>
      <from sec="1044162494" usec="0"/>
      <to sec="1044162517" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="188.163.168.79" dst_port="137" proto="tcp" src_ip="198.232.37.65" src_port="1027"/>
      <filter dst_ip="188.163.168.79" dst_port="137" proto="udp" src_ip="198.232.37.65" src_port="1027"/>
      <from sec="1044162493" usec="0"/>
      <to sec="1044162517" usec="0"/>
    </slice>
    <from sec="1044162493" usec="0"/>
    <to sec="1044162517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="212.193.226.71" src_port="33982"/>
      <from sec="1044163295" usec="0"/>
      <to sec="1044163325" usec="0"/>
    </slice>
    <from sec="1044163295" usec="0"/>
    <to sec="1044163325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="219.66.42.73" src_port="1027"/>
      <from sec="1044162365" usec="0"/>
      <to sec="1044162382" usec="0"/>
    </slice>
    <from sec="1044162365" usec="0"/>
    <to sec="1044162382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="190.229.134.78" src_port="1025"/>
      <from sec="1044162745" usec="0"/>
      <to sec="1044162755" usec="0"/>
    </slice>
    <from sec="1044162745" usec="0"/>
    <to sec="1044162755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.168.0.100" dst_port="137" proto="tcp" src_ip="194.69.68.85" src_port="1027"/>
      <filter dst_ip="192.168.0.100" dst_port="137" proto="udp" src_ip="194.69.68.85" src_port="1027"/>
      <filter dst_ip="192.168.0.100" dst_port="137" proto="tcp" src_ip="194.69.68.85" src_port="53"/>
      <filter dst_ip="192.168.0.100" dst_port="137" proto="udp" src_ip="194.69.68.85" src_port="53"/>
      <filter dst_ip="210.20.11.0" dst_port="137" proto="tcp" src_ip="194.69.68.85" src_port="1027"/>
      <filter dst_ip="210.20.11.0" dst_port="137" proto="udp" src_ip="194.69.68.85" src_port="1027"/>
      <filter dst_ip="210.20.11.0" dst_port="137" proto="tcp" src_ip="194.69.68.85" src_port="53"/>
      <filter dst_ip="210.20.11.0" dst_port="137" proto="udp" src_ip="194.69.68.85" src_port="53"/>
      <from sec="1044162996" usec="0"/>
      <to sec="1044163018" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="192.168.0.100" dst_port="137" proto="tcp" src_ip="198.164.52.85" src_port="1027"/>
      <filter dst_ip="192.168.0.100" dst_port="137" proto="udp" src_ip="198.164.52.85" src_port="1027"/>
      <filter dst_ip="192.168.0.100" dst_port="137" proto="tcp" src_ip="198.164.52.85" src_port="53"/>
      <filter dst_ip="192.168.0.100" dst_port="137" proto="udp" src_ip="198.164.52.85" src_port="53"/>
      <filter dst_ip="210.20.11.0" dst_port="137" proto="tcp" src_ip="198.164.52.85" src_port="1027"/>
      <filter dst_ip="210.20.11.0" dst_port="137" proto="udp" src_ip="198.164.52.85" src_port="1027"/>
      <filter dst_ip="210.20.11.0" dst_port="137" proto="tcp" src_ip="198.164.52.85" src_port="53"/>
      <filter dst_ip="210.20.11.0" dst_port="137" proto="udp" src_ip="198.164.52.85" src_port="53"/>
      <from sec="1044162997" usec="0"/>
      <to sec="1044163019" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="192.168.0.100" dst_port="137" proto="tcp" src_ip="130.139.48.85" src_port="1027"/>
      <filter dst_ip="192.168.0.100" dst_port="137" proto="udp" src_ip="130.139.48.85" src_port="1027"/>
      <filter dst_ip="192.168.0.100" dst_port="137" proto="tcp" src_ip="130.139.48.85" src_port="53"/>
      <filter dst_ip="192.168.0.100" dst_port="137" proto="udp" src_ip="130.139.48.85" src_port="53"/>
      <filter dst_ip="210.20.11.0" dst_port="137" proto="tcp" src_ip="130.139.48.85" src_port="1027"/>
      <filter dst_ip="210.20.11.0" dst_port="137" proto="udp" src_ip="130.139.48.85" src_port="1027"/>
      <filter dst_ip="210.20.11.0" dst_port="137" proto="tcp" src_ip="130.139.48.85" src_port="53"/>
      <filter dst_ip="210.20.11.0" dst_port="137" proto="udp" src_ip="130.139.48.85" src_port="53"/>
      <from sec="1044162997" usec="0"/>
      <to sec="1044163001" usec="0"/>
    </slice>
    <from sec="1044162996" usec="0"/>
    <to sec="1044163019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="207.121.43.87" src_port="33665"/>
      <from sec="1044162782" usec="0"/>
      <to sec="1044162806" usec="0"/>
    </slice>
    <from sec="1044162782" usec="0"/>
    <to sec="1044162808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="190.160.80.88" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="190.160.80.88" src_port="1027"/>
      <filter dst_port="137" proto="icmp" src_ip="190.160.80.88" src_port="1027"/>
      <from sec="1044163029" usec="0"/>
      <to sec="1044163041" usec="0"/>
    </slice>
    <from sec="1044163029" usec="0"/>
    <to sec="1044163041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.94.213.145" dst_port="137" proto="tcp" src_ip="204.237.72.92" src_port="1027"/>
      <filter dst_ip="148.94.213.145" dst_port="137" proto="udp" src_ip="204.237.72.92" src_port="1027"/>
      <filter dst_ip="148.94.213.145" dst_port="137" proto="tcp" src_ip="204.237.72.92" src_port="80"/>
      <filter dst_ip="148.94.213.145" dst_port="137" proto="udp" src_ip="204.237.72.92" src_port="80"/>
      <from sec="1044162475" usec="0"/>
      <to sec="1044162482" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="148.94.213.145" dst_port="137" proto="tcp" src_ip="217.129.72.92" src_port="1027"/>
      <filter dst_ip="148.94.213.145" dst_port="137" proto="udp" src_ip="217.129.72.92" src_port="1027"/>
      <filter dst_ip="148.94.213.145" dst_port="137" proto="tcp" src_ip="217.129.72.92" src_port="80"/>
      <filter dst_ip="148.94.213.145" dst_port="137" proto="udp" src_ip="217.129.72.92" src_port="80"/>
      <from sec="1044162472" usec="0"/>
      <to sec="1044162482" usec="0"/>
    </slice>
    <from sec="1044162472" usec="0"/>
    <to sec="1044162482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="190.94.229.94" src_port="1144"/>
      <from sec="1044163290" usec="0"/>
      <to sec="1044163306" usec="0"/>
    </slice>
    <from sec="1044163290" usec="0"/>
    <to sec="1044163306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="192.132.17.96" src_port="65413"/>
      <from sec="1044162202" usec="0"/>
      <to sec="1044162215" usec="0"/>
    </slice>
    <from sec="1044162202" usec="0"/>
    <to sec="1044162219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="208.221.234.98" src_port="1027"/>
      <from sec="1044162553" usec="0"/>
      <to sec="1044162593" usec="0"/>
    </slice>
    <from sec="1044162553" usec="0"/>
    <to sec="1044162593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="190.109.4.102" src_port="1025"/>
      <from sec="1044162670" usec="0"/>
      <to sec="1044162680" usec="0"/>
    </slice>
    <from sec="1044162670" usec="0"/>
    <to sec="1044162680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="219.58.66.105" src_port="1027"/>
      <from sec="1044163007" usec="0"/>
      <to sec="1044163016" usec="0"/>
    </slice>
    <from sec="1044163007" usec="0"/>
    <to sec="1044163016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.94.204.240" dst_port="137" proto="tcp" src_ip="220.69.165.106" src_port="1037"/>
      <filter dst_ip="148.94.204.240" dst_port="137" proto="udp" src_ip="220.69.165.106" src_port="1037"/>
      <filter dst_ip="148.94.204.240" dst_port="137" proto="tcp" src_ip="220.69.165.106" src_port="3695"/>
      <filter dst_ip="148.94.204.240" dst_port="137" proto="udp" src_ip="220.69.165.106" src_port="3695"/>
      <from sec="1044162084" usec="0"/>
      <to sec="1044162096" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="148.94.204.240" dst_port="137" proto="tcp" src_ip="208.183.65.106" src_port="1037"/>
      <filter dst_ip="148.94.204.240" dst_port="137" proto="udp" src_ip="208.183.65.106" src_port="1037"/>
      <filter dst_ip="148.94.204.240" dst_port="137" proto="tcp" src_ip="208.183.65.106" src_port="3695"/>
      <filter dst_ip="148.94.204.240" dst_port="137" proto="udp" src_ip="208.183.65.106" src_port="3695"/>
      <from sec="1044162085" usec="0"/>
      <to sec="1044162095" usec="0"/>
    </slice>
    <from sec="1044162084" usec="0"/>
    <to sec="1044162096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.1.147.31" dst_port="137" proto="tcp" src_ip="194.206.225.106" src_port="1168"/>
      <filter dst_ip="133.1.147.31" dst_port="137" proto="udp" src_ip="194.206.225.106" src_port="1168"/>
      <filter dst_ip="133.1.147.31" dst_port="137" proto="tcp" src_ip="194.206.225.106" src_port="1214"/>
      <filter dst_ip="133.1.147.31" dst_port="137" proto="udp" src_ip="194.206.225.106" src_port="1214"/>
      <from sec="1044162979" usec="0"/>
      <to sec="1044162994" usec="0"/>
    </slice>
    <from sec="1044162979" usec="0"/>
    <to sec="1044162996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="206.41.169.110" src_port="1046"/>
      <from sec="1044162229" usec="0"/>
      <to sec="1044162237" usec="0"/>
    </slice>
    <from sec="1044162229" usec="0"/>
    <to sec="1044162237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="195.88.86.111" src_port="1025"/>
      <from sec="1044162551" usec="0"/>
      <to sec="1044162563" usec="0"/>
    </slice>
    <from sec="1044162551" usec="0"/>
    <to sec="1044162563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="216.124.128.111" src_port="26296"/>
      <filter dst_port="137" proto="udp" src_ip="216.124.128.111" src_port="26258"/>
      <from sec="1044163166" usec="0"/>
      <to sec="1044163179" usec="0"/>
    </slice>
    <from sec="1044163166" usec="0"/>
    <to sec="1044163179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="219.163.180.113" src_port="1036"/>
      <from sec="1044162052" usec="0"/>
      <to sec="1044162063" usec="0"/>
    </slice>
    <from sec="1044162052" usec="0"/>
    <to sec="1044162063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="190.70.232.114" src_port="28695"/>
      <from sec="1044162560" usec="0"/>
      <to sec="1044162589" usec="0"/>
    </slice>
    <from sec="1044162560" usec="0"/>
    <to sec="1044162589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="171.43.203.77" dst_port="137" proto="tcp" src_ip="190.21.152.127" src_port="1025"/>
      <filter dst_ip="171.43.203.77" dst_port="137" proto="udp" src_ip="190.21.152.127" src_port="1025"/>
      <filter dst_ip="171.43.203.77" dst_port="137" proto="tcp" src_ip="190.21.152.127" src_port="139"/>
      <filter dst_ip="171.43.203.77" dst_port="137" proto="udp" src_ip="190.21.152.127" src_port="139"/>
      <from sec="1044163087" usec="0"/>
      <to sec="1044163112" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="171.43.203.77" dst_port="137" proto="tcp" src_ip="148.94.116.127" src_port="1025"/>
      <filter dst_ip="171.43.203.77" dst_port="137" proto="udp" src_ip="148.94.116.127" src_port="1025"/>
      <filter dst_ip="171.43.203.77" dst_port="137" proto="tcp" src_ip="148.94.116.127" src_port="139"/>
      <filter dst_ip="171.43.203.77" dst_port="137" proto="udp" src_ip="148.94.116.127" src_port="139"/>
      <from sec="1044163089" usec="0"/>
      <to sec="1044163111" usec="0"/>
    </slice>
    <from sec="1044163087" usec="0"/>
    <to sec="1044163112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="189.86.162.96" dst_port="137" proto="udp" src_ip="192.181.76.131" src_port="1025"/>
      <filter dst_ip="189.86.162.96" dst_port="137" proto="icmp" src_ip="192.181.76.131" src_port="1025"/>
      <from sec="1044163464" usec="0"/>
      <to sec="1044163474" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="189.86.162.96" dst_port="137" proto="udp" src_ip="206.6.44.131" src_port="1025"/>
      <filter dst_ip="189.86.162.96" dst_port="137" proto="icmp" src_ip="206.6.44.131" src_port="1025"/>
      <from sec="1044163464" usec="0"/>
      <to sec="1044163466" usec="0"/>
    </slice>
    <from sec="1044163462" usec="0"/>
    <to sec="1044163474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="190.121.147.138" src_port="1028"/>
      <from sec="1044162139" usec="0"/>
      <to sec="1044162148" usec="0"/>
    </slice>
    <from sec="1044162139" usec="0"/>
    <to sec="1044162150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="190.74.212.141" src_port="1228"/>
      <from sec="1044162709" usec="0"/>
      <to sec="1044162741" usec="0"/>
    </slice>
    <from sec="1044162709" usec="0"/>
    <to sec="1044162741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="tcp" src_ip="204.226.87.146" src_port="21"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="udp" src_ip="204.226.87.146" src_port="21"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="tcp" src_ip="204.226.87.146" src_port="21680"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="udp" src_ip="204.226.87.146" src_port="21680"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="tcp" src_ip="204.226.87.146" src_port="21710"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="udp" src_ip="204.226.87.146" src_port="21710"/>
      <from sec="1044162743" usec="0"/>
      <to sec="1044162774" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="tcp" src_ip="130.139.11.146" src_port="21"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="udp" src_ip="130.139.11.146" src_port="21"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="tcp" src_ip="130.139.11.146" src_port="21680"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="udp" src_ip="130.139.11.146" src_port="21680"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="tcp" src_ip="130.139.11.146" src_port="21710"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="udp" src_ip="130.139.11.146" src_port="21710"/>
      <from sec="1044162746" usec="0"/>
      <to sec="1044162776" usec="0"/>
    </slice>
    <from sec="1044162743" usec="0"/>
    <to sec="1044162776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="209.149.103.156" src_port="1027"/>
      <from sec="1044162554" usec="0"/>
      <to sec="1044162561" usec="0"/>
    </slice>
    <from sec="1044162554" usec="0"/>
    <to sec="1044162561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="213.216.23.158" src_port="1028"/>
      <from sec="1044163270" usec="0"/>
      <to sec="1044163276" usec="0"/>
    </slice>
    <from sec="1044163270" usec="0"/>
    <to sec="1044163277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="194.112.104.159" src_port="1028"/>
      <from sec="1044162349" usec="0"/>
      <to sec="1044162362" usec="0"/>
    </slice>
    <from sec="1044162349" usec="0"/>
    <to sec="1044162362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="203.131.170.132" dst_port="137" proto="tcp" src_ip="219.95.70.160" src_port="1026"/>
      <filter dst_ip="203.131.170.132" dst_port="137" proto="udp" src_ip="219.95.70.160" src_port="1026"/>
      <filter dst_ip="203.131.170.132" dst_port="443" proto="tcp" src_ip="219.95.70.160" src_port="1026"/>
      <filter dst_ip="203.131.170.132" dst_port="443" proto="udp" src_ip="219.95.70.160" src_port="1026"/>
      <from sec="1044162562" usec="0"/>
      <to sec="1044162593" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="203.131.170.132" dst_port="137" proto="tcp" src_ip="207.40.14.160" src_port="1026"/>
      <filter dst_ip="203.131.170.132" dst_port="137" proto="udp" src_ip="207.40.14.160" src_port="1026"/>
      <filter dst_ip="203.131.170.132" dst_port="443" proto="tcp" src_ip="207.40.14.160" src_port="1026"/>
      <filter dst_ip="203.131.170.132" dst_port="443" proto="udp" src_ip="207.40.14.160" src_port="1026"/>
      <from sec="1044162563" usec="0"/>
      <to sec="1044162593" usec="0"/>
    </slice>
    <from sec="1044162562" usec="0"/>
    <to sec="1044162593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="193.15.78.162" src_port="1031"/>
      <from sec="1044163099" usec="0"/>
      <to sec="1044163105" usec="0"/>
    </slice>
    <from sec="1044163099" usec="0"/>
    <to sec="1044163105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="190.160.212.163" src_port="1028"/>
      <from sec="1044162887" usec="0"/>
      <to sec="1044162896" usec="0"/>
    </slice>
    <from sec="1044162887" usec="0"/>
    <to sec="1044162896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="209.66.20.166" src_port="1029"/>
      <from sec="1044162996" usec="0"/>
      <to sec="1044163014" usec="0"/>
    </slice>
    <from sec="1044162996" usec="0"/>
    <to sec="1044163014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="194.65.70.169" src_port="1027"/>
      <from sec="1044162766" usec="0"/>
      <to sec="1044162799" usec="0"/>
    </slice>
    <from sec="1044162766" usec="0"/>
    <to sec="1044162799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="tcp" src_ip="190.76.34.170" src_port="1091"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="udp" src_ip="190.76.34.170" src_port="1091"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="tcp" src_ip="190.76.34.170" src_port="1091"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="udp" src_ip="190.76.34.170" src_port="1091"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="tcp" src_ip="190.76.34.170" src_port="80"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="udp" src_ip="190.76.34.170" src_port="80"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="tcp" src_ip="190.76.34.170" src_port="80"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="udp" src_ip="190.76.34.170" src_port="80"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="tcp" src_ip="190.76.34.170" src_port="4351"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="udp" src_ip="190.76.34.170" src_port="4351"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="tcp" src_ip="190.76.34.170" src_port="4351"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="udp" src_ip="190.76.34.170" src_port="4351"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="tcp" src_ip="190.76.34.170" src_port="4349"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="udp" src_ip="190.76.34.170" src_port="4349"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="tcp" src_ip="190.76.34.170" src_port="4349"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="udp" src_ip="190.76.34.170" src_port="4349"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="tcp" src_ip="190.76.34.170" src_port="1091"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="udp" src_ip="190.76.34.170" src_port="1091"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="tcp" src_ip="190.76.34.170" src_port="1091"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="udp" src_ip="190.76.34.170" src_port="1091"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="tcp" src_ip="190.76.34.170" src_port="80"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="udp" src_ip="190.76.34.170" src_port="80"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="tcp" src_ip="190.76.34.170" src_port="80"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="udp" src_ip="190.76.34.170" src_port="80"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="tcp" src_ip="190.76.34.170" src_port="4351"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="udp" src_ip="190.76.34.170" src_port="4351"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="tcp" src_ip="190.76.34.170" src_port="4351"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="udp" src_ip="190.76.34.170" src_port="4351"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="tcp" src_ip="190.76.34.170" src_port="4349"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="udp" src_ip="190.76.34.170" src_port="4349"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="tcp" src_ip="190.76.34.170" src_port="4349"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="udp" src_ip="190.76.34.170" src_port="4349"/>
      <from sec="1044162582" usec="0"/>
      <to sec="1044162593" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="tcp" src_ip="148.94.202.170" src_port="1091"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="udp" src_ip="148.94.202.170" src_port="1091"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="tcp" src_ip="148.94.202.170" src_port="1091"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="udp" src_ip="148.94.202.170" src_port="1091"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="tcp" src_ip="148.94.202.170" src_port="80"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="udp" src_ip="148.94.202.170" src_port="80"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="tcp" src_ip="148.94.202.170" src_port="80"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="udp" src_ip="148.94.202.170" src_port="80"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="tcp" src_ip="148.94.202.170" src_port="4351"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="udp" src_ip="148.94.202.170" src_port="4351"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="tcp" src_ip="148.94.202.170" src_port="4351"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="udp" src_ip="148.94.202.170" src_port="4351"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="tcp" src_ip="148.94.202.170" src_port="4349"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="udp" src_ip="148.94.202.170" src_port="4349"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="tcp" src_ip="148.94.202.170" src_port="4349"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="udp" src_ip="148.94.202.170" src_port="4349"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="tcp" src_ip="148.94.202.170" src_port="1091"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="udp" src_ip="148.94.202.170" src_port="1091"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="tcp" src_ip="148.94.202.170" src_port="1091"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="udp" src_ip="148.94.202.170" src_port="1091"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="tcp" src_ip="148.94.202.170" src_port="80"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="udp" src_ip="148.94.202.170" src_port="80"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="tcp" src_ip="148.94.202.170" src_port="80"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="udp" src_ip="148.94.202.170" src_port="80"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="tcp" src_ip="148.94.202.170" src_port="4351"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="udp" src_ip="148.94.202.170" src_port="4351"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="tcp" src_ip="148.94.202.170" src_port="4351"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="udp" src_ip="148.94.202.170" src_port="4351"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="tcp" src_ip="148.94.202.170" src_port="4349"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="udp" src_ip="148.94.202.170" src_port="4349"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="tcp" src_ip="148.94.202.170" src_port="4349"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="udp" src_ip="148.94.202.170" src_port="4349"/>
      <from sec="1044162590" usec="0"/>
      <to sec="1044162592" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="tcp" src_ip="217.129.82.170" src_port="1091"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="udp" src_ip="217.129.82.170" src_port="1091"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="tcp" src_ip="217.129.82.170" src_port="1091"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="udp" src_ip="217.129.82.170" src_port="1091"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="tcp" src_ip="217.129.82.170" src_port="80"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="udp" src_ip="217.129.82.170" src_port="80"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="tcp" src_ip="217.129.82.170" src_port="80"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="udp" src_ip="217.129.82.170" src_port="80"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="tcp" src_ip="217.129.82.170" src_port="4351"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="udp" src_ip="217.129.82.170" src_port="4351"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="tcp" src_ip="217.129.82.170" src_port="4351"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="udp" src_ip="217.129.82.170" src_port="4351"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="tcp" src_ip="217.129.82.170" src_port="4349"/>
      <filter dst_ip="207.186.80.181" dst_port="137" proto="udp" src_ip="217.129.82.170" src_port="4349"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="tcp" src_ip="217.129.82.170" src_port="4349"/>
      <filter dst_ip="207.186.80.181" dst_port="110" proto="udp" src_ip="217.129.82.170" src_port="4349"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="tcp" src_ip="217.129.82.170" src_port="1091"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="udp" src_ip="217.129.82.170" src_port="1091"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="tcp" src_ip="217.129.82.170" src_port="1091"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="udp" src_ip="217.129.82.170" src_port="1091"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="tcp" src_ip="217.129.82.170" src_port="80"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="udp" src_ip="217.129.82.170" src_port="80"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="tcp" src_ip="217.129.82.170" src_port="80"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="udp" src_ip="217.129.82.170" src_port="80"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="tcp" src_ip="217.129.82.170" src_port="4351"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="udp" src_ip="217.129.82.170" src_port="4351"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="tcp" src_ip="217.129.82.170" src_port="4351"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="udp" src_ip="217.129.82.170" src_port="4351"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="tcp" src_ip="217.129.82.170" src_port="4349"/>
      <filter dst_ip="208.187.46.36" dst_port="137" proto="udp" src_ip="217.129.82.170" src_port="4349"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="tcp" src_ip="217.129.82.170" src_port="4349"/>
      <filter dst_ip="208.187.46.36" dst_port="110" proto="udp" src_ip="217.129.82.170" src_port="4349"/>
      <from sec="1044162585" usec="0"/>
      <to sec="1044162593" usec="0"/>
    </slice>
    <from sec="1044162582" usec="0"/>
    <to sec="1044162593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="194.136.132.170" src_port="1028"/>
      <from sec="1044163217" usec="0"/>
      <to sec="1044163249" usec="0"/>
    </slice>
    <from sec="1044163217" usec="0"/>
    <to sec="1044163249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="194.66.73.171" src_port="65291"/>
      <from sec="1044163303" usec="0"/>
      <to sec="1044163317" usec="0"/>
    </slice>
    <from sec="1044163303" usec="0"/>
    <to sec="1044163317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="193.130.166.171" src_port="1029"/>
      <from sec="1044162875" usec="0"/>
      <to sec="1044162896" usec="0"/>
    </slice>
    <from sec="1044162875" usec="0"/>
    <to sec="1044162896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="203.86.25.172" src_port="1028"/>
      <from sec="1044162097" usec="0"/>
      <to sec="1044162108" usec="0"/>
    </slice>
    <from sec="1044162097" usec="0"/>
    <to sec="1044162108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="188.185.11.173" src_port="1024"/>
      <from sec="1044163029" usec="0"/>
      <to sec="1044163040" usec="0"/>
    </slice>
    <from sec="1044163029" usec="0"/>
    <to sec="1044163040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="136.112.227.175" src_port="1025"/>
      <from sec="1044162691" usec="0"/>
      <to sec="1044162715" usec="0"/>
    </slice>
    <from sec="1044162691" usec="0"/>
    <to sec="1044162715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="204.145.65.177" src_port="1030"/>
      <from sec="1044163162" usec="0"/>
      <to sec="1044163174" usec="0"/>
    </slice>
    <from sec="1044163162" usec="0"/>
    <to sec="1044163174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="190.65.68.180" src_port="1026"/>
      <from sec="1044162373" usec="0"/>
      <to sec="1044162384" usec="0"/>
    </slice>
    <from sec="1044162373" usec="0"/>
    <to sec="1044162384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="207.150.34.190" src_port="1027"/>
      <from sec="1044162405" usec="0"/>
      <to sec="1044162424" usec="0"/>
    </slice>
    <from sec="1044162405" usec="0"/>
    <to sec="1044162424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="192.45.99.193" src_port="1025"/>
      <from sec="1044162314" usec="0"/>
      <to sec="1044162327" usec="0"/>
    </slice>
    <from sec="1044162314" usec="0"/>
    <to sec="1044162327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="218.62.198.195" src_port="1026"/>
      <from sec="1044162551" usec="0"/>
      <to sec="1044162563" usec="0"/>
    </slice>
    <from sec="1044162551" usec="0"/>
    <to sec="1044162563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="194.78.30.199" src_port="1028"/>
      <from sec="1044163516" usec="0"/>
      <to sec="1044163527" usec="0"/>
    </slice>
    <from sec="1044163515" usec="0"/>
    <to sec="1044163527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="219.80.107.199" src_port="64437"/>
      <from sec="1044162102" usec="0"/>
      <to sec="1044162132" usec="0"/>
    </slice>
    <from sec="1044162102" usec="0"/>
    <to sec="1044162132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="212.72.196.201" src_port="1026"/>
      <from sec="1044162562" usec="0"/>
      <to sec="1044162583" usec="0"/>
    </slice>
    <from sec="1044162562" usec="0"/>
    <to sec="1044162583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="219.130.192.204" src_port="65380"/>
      <from sec="1044163231" usec="0"/>
      <to sec="1044163247" usec="0"/>
    </slice>
    <from sec="1044163231" usec="0"/>
    <to sec="1044163247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="208.222.242.206" src_port="1027"/>
      <from sec="1044162691" usec="0"/>
      <to sec="1044162700" usec="0"/>
    </slice>
    <from sec="1044162691" usec="0"/>
    <to sec="1044162700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="190.17.192.207" src_port="1026"/>
      <from sec="1044162646" usec="0"/>
      <to sec="1044162664" usec="0"/>
    </slice>
    <from sec="1044162646" usec="0"/>
    <to sec="1044162664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="209.153.60.211" src_port="1030"/>
      <from sec="1044163151" usec="0"/>
      <to sec="1044163163" usec="0"/>
    </slice>
    <from sec="1044163151" usec="0"/>
    <to sec="1044163163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="220.96.138.215" src_port="14472"/>
      <from sec="1044163007" usec="0"/>
      <to sec="1044163014" usec="0"/>
    </slice>
    <from sec="1044163007" usec="0"/>
    <to sec="1044163014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="138.78.141.221" src_port="1025"/>
      <from sec="1044162798" usec="0"/>
      <to sec="1044162810" usec="0"/>
    </slice>
    <from sec="1044162798" usec="0"/>
    <to sec="1044162810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="195.4.181.235" src_port="1034"/>
      <from sec="1044162240" usec="0"/>
      <to sec="1044162260" usec="0"/>
    </slice>
    <from sec="1044162240" usec="0"/>
    <to sec="1044162260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="197.18.217.239" src_port="10000"/>
      <from sec="1044163283" usec="0"/>
      <to sec="1044163340" usec="0"/>
    </slice>
    <from sec="1044163283" usec="0"/>
    <to sec="1044163340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="206.6.44.82" dst_port="137" proto="udp" src_ip="190.42.107.246" src_port="12750"/>
      <filter dst_ip="206.6.44.82" dst_port="53" proto="udp" src_ip="190.42.107.246" src_port="12750"/>
      <from sec="1044162408" usec="0"/>
      <to sec="1044162425" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="206.6.44.82" dst_port="137" proto="udp" src_ip="208.51.27.246" src_port="12750"/>
      <filter dst_ip="206.6.44.82" dst_port="53" proto="udp" src_ip="208.51.27.246" src_port="12750"/>
      <from sec="1044162422" usec="0"/>
      <to sec="1044162427" usec="0"/>
    </slice>
    <from sec="1044162408" usec="0"/>
    <to sec="1044162427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="190.163.16.28"/>
      <from sec="1044162976" usec="0"/>
      <to sec="1044162994" usec="0"/>
    </slice>
    <from sec="1044162976" usec="0"/>
    <to sec="1044162994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="193.148.37.96"/>
      <from sec="1044162685" usec="0"/>
      <to sec="1044162692" usec="0"/>
    </slice>
    <from sec="1044162685" usec="0"/>
    <to sec="1044162692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="162.0.200.212" dst_port="137" proto="tcp" src_ip="190.101.19.144" src_port="80"/>
      <filter dst_ip="162.0.200.212" dst_port="137" proto="udp" src_ip="190.101.19.144" src_port="80"/>
      <from sec="1044162416" usec="0"/>
      <to sec="1044162427" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="162.0.200.212" dst_port="137" proto="tcp" src_ip="201.227.135.144" src_port="80"/>
      <filter dst_ip="162.0.200.212" dst_port="137" proto="udp" src_ip="201.227.135.144" src_port="80"/>
      <from sec="1044162417" usec="0"/>
      <to sec="1044162425" usec="0"/>
    </slice>
    <from sec="1044162416" usec="0"/>
    <to sec="1044162427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="219.70.88.166"/>
      <from sec="1044162596" usec="0"/>
      <to sec="1044162612" usec="0"/>
    </slice>
    <from sec="1044162596" usec="0"/>
    <to sec="1044162612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="206.6.44.83" dst_port="137" proto="udp" src_ip="204.241.220.204"/>
      <filter dst_ip="206.6.44.83" dst_port="137" proto="icmp" src_ip="204.241.220.204"/>
      <filter dst_ip="130.139.117.250" dst_port="137" proto="udp" src_ip="204.241.220.204"/>
      <filter dst_ip="130.139.117.250" dst_port="137" proto="icmp" src_ip="204.241.220.204"/>
      <from sec="1044163054" usec="0"/>
      <to sec="1044163065" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="206.6.44.83" dst_port="137" proto="udp" src_ip="136.254.88.204"/>
      <filter dst_ip="206.6.44.83" dst_port="137" proto="icmp" src_ip="136.254.88.204"/>
      <filter dst_ip="130.139.117.250" dst_port="137" proto="udp" src_ip="136.254.88.204"/>
      <filter dst_ip="130.139.117.250" dst_port="137" proto="icmp" src_ip="136.254.88.204"/>
      <from sec="1044163053" usec="0"/>
      <to sec="1044163064" usec="0"/>
    </slice>
    <from sec="1044163053" usec="0"/>
    <to sec="1044163065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="208.146.138.230"/>
      <from sec="1044162260" usec="0"/>
      <to sec="1044162271" usec="0"/>
    </slice>
    <from sec="1044162260" usec="0"/>
    <to sec="1044162271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="219.165.18.110" proto="icmp"/>
      <filter dst_ip="219.165.18.110" proto="icmp"/>
      <filter dst_ip="219.165.18.110" proto="icmp"/>
      <filter dst_ip="219.165.18.110" proto="icmp"/>
      <from sec="1044162957" usec="0"/>
      <to sec="1044162967" usec="0"/>
    </slice>
    <from sec="1044162957" usec="0"/>
    <to sec="1044162967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.222.242.206" proto="icmp"/>
      <filter dst_ip="208.222.242.206" proto="icmp"/>
      <filter dst_ip="208.222.242.206" proto="icmp"/>
      <filter dst_ip="208.222.242.206" proto="icmp"/>
      <from sec="1044162691" usec="0"/>
      <to sec="1044162700" usec="0"/>
    </slice>
    <from sec="1044162691" usec="0"/>
    <to sec="1044162700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.25.217.19" proto="udp" src_port="53"/>
      <filter dst_ip="136.25.217.19" proto="icmp" src_port="53"/>
      <filter dst_ip="136.25.217.19" proto="udp" src_port="53"/>
      <filter dst_ip="136.25.217.19" proto="icmp" src_port="53"/>
      <filter dst_ip="136.25.217.19" proto="udp" src_port="53"/>
      <filter dst_ip="136.25.217.19" proto="icmp" src_port="53"/>
      <filter dst_ip="136.25.217.19" proto="udp" src_port="53"/>
      <filter dst_ip="136.25.217.19" proto="icmp" src_port="53"/>
      <from sec="1044163217" usec="0"/>
      <to sec="1044163238" usec="0"/>
    </slice>
    <from sec="1044163217" usec="0"/>
    <to sec="1044163238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="204.76.11.89" proto="icmp"/>
      <filter dst_ip="204.76.11.89" proto="icmp"/>
      <filter dst_ip="204.76.11.89" proto="icmp"/>
      <filter dst_ip="204.76.11.89" proto="icmp"/>
      <from sec="1044162714" usec="0"/>
      <to sec="1044162726" usec="0"/>
    </slice>
    <from sec="1044162714" usec="0"/>
    <to sec="1044162726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="204.251.222.188" proto="icmp"/>
      <filter dst_ip="204.251.222.188" proto="icmp"/>
      <filter dst_ip="204.251.222.188" proto="icmp"/>
      <filter dst_ip="204.251.222.188" proto="icmp"/>
      <from sec="1044162229" usec="0"/>
      <to sec="1044162251" usec="0"/>
    </slice>
    <from sec="1044162229" usec="0"/>
    <to sec="1044162251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="207.152.135.28" proto="icmp"/>
      <filter dst_ip="207.152.135.28" proto="icmp"/>
      <filter dst_ip="207.152.135.28" proto="icmp"/>
      <filter dst_ip="207.152.135.28" proto="icmp"/>
      <from sec="1044162572" usec="0"/>
      <to sec="1044162592" usec="0"/>
    </slice>
    <from sec="1044162572" usec="0"/>
    <to sec="1044162592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.139.108.61" proto="icmp"/>
      <filter dst_ip="216.139.108.61" proto="icmp"/>
      <filter dst_ip="216.139.108.61" proto="icmp"/>
      <filter dst_ip="216.139.108.61" proto="icmp"/>
      <from sec="1044162755" usec="0"/>
      <to sec="1044162766" usec="0"/>
    </slice>
    <from sec="1044162755" usec="0"/>
    <to sec="1044162766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="190.150.79.68" proto="icmp"/>
      <filter dst_ip="190.150.79.68" proto="icmp"/>
      <filter dst_ip="190.150.79.68" proto="icmp"/>
      <filter dst_ip="190.150.79.68" proto="icmp"/>
      <from sec="1044162552" usec="0"/>
      <to sec="1044162563" usec="0"/>
    </slice>
    <from sec="1044162552" usec="0"/>
    <to sec="1044162563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.53.151.76" proto="icmp"/>
      <filter dst_ip="192.53.151.76" proto="icmp"/>
      <filter dst_ip="192.53.151.76" proto="icmp"/>
      <filter dst_ip="192.53.151.76" proto="icmp"/>
      <from sec="1044162906" usec="0"/>
      <to sec="1044162938" usec="0"/>
    </slice>
    <from sec="1044162906" usec="0"/>
    <to sec="1044162938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.140.189.95" proto="icmp"/>
      <filter dst_ip="193.140.189.95" proto="icmp"/>
      <filter dst_ip="193.140.189.95" proto="icmp"/>
      <filter dst_ip="193.140.189.95" proto="icmp"/>
      <from sec="1044162830" usec="0"/>
      <to sec="1044162863" usec="0"/>
    </slice>
    <from sec="1044162830" usec="0"/>
    <to sec="1044162863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="204.33.146.158" proto="icmp"/>
      <filter dst_ip="204.33.146.158" proto="icmp"/>
      <filter dst_ip="204.33.146.158" proto="icmp"/>
      <filter dst_ip="204.33.146.158" proto="icmp"/>
      <from sec="1044163248" usec="0"/>
      <to sec="1044163259" usec="0"/>
    </slice>
    <from sec="1044163248" usec="0"/>
    <to sec="1044163259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.61681,1.97797,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="197.83.197.216" proto="icmp"/>
      <filter dst_ip="197.83.197.216" proto="icmp"/>
      <filter dst_ip="197.83.197.216" proto="icmp"/>
      <filter dst_ip="197.83.197.216" proto="icmp"/>
      <from sec="1044162956" usec="0"/>
      <to sec="1044162992" usec="0"/>
    </slice>
    <from sec="1044162956" usec="0"/>
    <to sec="1044162996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,503,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
27[label="149.74.40.54s;1pkt 1fpkt", shape=rectangle, color=red];
534[label="149.74.40.54s;1pkt 1fpkt", shape=ellipse, color=green];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.74.40.54:80, 130.139.224.156:3983}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3983: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
27--534[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.139.224.156" dst_port="3983" src_ip="149.74.40.54" src_port="80"/>
    </slice>
    <from sec="1044163174" usec="0"/>
    <to sec="1044163184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.789546,1.98787,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="207.161.68.247" dst_port="137" proto="tcp" src_ip="148.94.200.186" src_port="1026"/>
      <filter dst_ip="207.161.68.247" dst_port="137" proto="udp" src_ip="148.94.200.186" src_port="1026"/>
      <filter dst_ip="207.161.68.247" dst_port="80" proto="tcp" src_ip="148.94.200.186" src_port="1026"/>
      <filter dst_ip="207.161.68.247" dst_port="80" proto="udp" src_ip="148.94.200.186" src_port="1026"/>
      <filter dst_ip="207.161.68.247" dst_port="53" proto="tcp" src_ip="148.94.200.186" src_port="1026"/>
      <filter dst_ip="207.161.68.247" dst_port="53" proto="udp" src_ip="148.94.200.186" src_port="1026"/>
      <from sec="1044162146" usec="0"/>
      <to sec="1044162593" usec="0"/>
    </slice>
    <from sec="1044162146" usec="0"/>
    <to sec="1044162593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15632,1.93205,999,1 1 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
73[label="212.174.8.197s;1pkt 1fpkt", shape=rectangle, color=red];
552[label="162.0.200.197s;1pkt 1fpkt", shape=ellipse, color=green];
908[label="162.0.237.151;d;3pkt 3fpkt", shape=diamond, color=yellow];
910[label="212.174.8.197;s;3pkt 3fpkt", shape=diamond, color=yellow];
2456[label="162.0.237.151;d;3pkt 3fpkt", shape=hexagon, color=black];
2672[label="212.174.8.197;s;3pkt 3fpkt", shape=hexagon, color=black];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.174.8.197:3078, 162.0.237.151:21}[33.3333%]&lt;BR/&gt;{212.174.8.197:5025, 162.0.237.151:20}[33.3333%]&lt;BR/&gt;{212.174.8.197:5026, 162.0.237.151:20}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (35.7143%)&lt;BR/&gt; 5025: (21.4286%)&lt;BR/&gt; 5026: (14.2857%)&lt;BR/&gt; 3078: (14.2857%)&lt;BR/&gt; 21: (14.2857%)&gt;];
}
73--552[label="1;1pkt 1fpkt"];
73--908[label="1;1pkt 1fpkt"];
73--910[label="1;1pkt 1fpkt"];
73--2456[label="1;1pkt 1fpkt"];
73--2672[label="1;1pkt 1fpkt"];
552--908[label="1;1pkt 1fpkt"];
552--910[label="1;1pkt 1fpkt"];
552--2456[label="1;1pkt 1fpkt"];
552--2672[label="1;1pkt 1fpkt"];
908--910[label="1;3pkt 3fpkt"];
908--2456[label="1;3pkt 3fpkt"];
908--2672[label="1;3pkt 3fpkt"];
910--2456[label="1;3pkt 3fpkt"];
910--2672[label="1;3pkt 3fpkt"];
2456--2672[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="162.0.237.151" dst_port="20" src_ip="212.174.8.197" src_port="5026"/>
      <filter dst_ip="162.0.237.151" dst_port="20" src_ip="212.174.8.197" src_port="5025"/>
      <filter dst_ip="162.0.237.151" dst_port="21" src_ip="212.174.8.197" src_port="3078"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.789546,1.98787,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="130.139.87.200" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="130.139.87.200" src_port="1027"/>
      <filter dst_port="80" proto="tcp" src_ip="130.139.87.200" src_port="1027"/>
      <filter dst_port="80" proto="udp" src_ip="130.139.87.200" src_port="1027"/>
      <filter dst_port="53" proto="tcp" src_ip="130.139.87.200" src_port="1027"/>
      <filter dst_port="53" proto="udp" src_ip="130.139.87.200" src_port="1027"/>
      <from sec="1044162973" usec="0"/>
      <to sec="1044162980" usec="0"/>
    </slice>
    <from sec="1044162965" usec="0"/>
    <to sec="1044162980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
81[label="219.84.64.228s;160pkt 160fpkt", shape=rectangle, color=red];
558[label="219.84.64.228s;160pkt 160fpkt", shape=ellipse, color=green];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.84.64.228:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
81--558[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.84.64.228" src_port="1026"/>
    </slice>
    <from sec="1044162828" usec="0"/>
    <to sec="1044162852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
82[label="158.184.142.228s;137pkt 137fpkt", shape=rectangle, color=red];
559[label="158.184.142.228s;112pkt 112fpkt", shape=ellipse, color=green];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.184.142.228:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
82--559[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="158.184.142.228" src_port="1026"/>
    </slice>
    <from sec="1044162855" usec="0"/>
    <to sec="1044162876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.92565,1.8799,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
105[label="209.64.110.0s;243pkt 243fpkt", shape=rectangle, color=red];
564[label="209.64.110.0s;80pkt 80fpkt", shape=ellipse, color=green];
3258[label="209.64.110.0;255pkt 255fpkt", shape=pentagon, color=darkviolet];
4654[label="209.64.110.0;255pkt 255fpkt", shape=invtriangle, color=brown];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.64.110.0:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
105--564[label="1;80pkt 80fpkt"];
105--3258[label="0.995885;242pkt 242fpkt"];
105--4654[label="0.995885;242pkt 242fpkt"];
564--3258[label="1;80pkt 80fpkt"];
564--4654[label="1;80pkt 80fpkt"];
3258--4654[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.64.110.0" src_port="1026"/>
    </slice>
    <from sec="1044163293" usec="0"/>
    <to sec="1044163335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
106[label="196.47.85.2s;60pkt 60fpkt", shape=rectangle, color=red];
565[label="196.47.85.2s;60pkt 60fpkt", shape=ellipse, color=green];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.47.85.2:50127, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50127: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
106--565[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.47.85.2" src_port="50127"/>
    </slice>
    <from sec="1044162405" usec="0"/>
    <to sec="1044162415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.92565,1.8799,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
109[label="194.24.20.4s;198pkt 198fpkt", shape=rectangle, color=red];
568[label="194.24.20.4s;149pkt 149fpkt", shape=ellipse, color=green];
3289[label="194.24.20.4;213pkt 213fpkt", shape=pentagon, color=darkviolet];
4668[label="194.24.20.4;213pkt 213fpkt", shape=invtriangle, color=brown];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.24.20.4:62635, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62635: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
109--568[label="1;149pkt 149fpkt"];
109--3289[label="1;198pkt 198fpkt"];
109--4668[label="1;198pkt 198fpkt"];
568--3289[label="1;149pkt 149fpkt"];
568--4668[label="1;149pkt 149fpkt"];
3289--4668[label="1;213pkt 213fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.24.20.4" src_port="62635"/>
    </slice>
    <from sec="1044162872" usec="0"/>
    <to sec="1044162908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.789546,1.98787,503,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="207.142.93.50" dst_port="137" proto="tcp" src_ip="136.166.209.5" src_port="1025"/>
      <filter dst_ip="207.142.93.50" dst_port="137" proto="udp" src_ip="136.166.209.5" src_port="1025"/>
      <filter dst_ip="207.142.93.50" dst_port="44129" proto="tcp" src_ip="136.166.209.5" src_port="1025"/>
      <filter dst_ip="207.142.93.50" dst_port="44129" proto="udp" src_ip="136.166.209.5" src_port="1025"/>
      <filter dst_ip="207.142.93.50" dst_port="137" proto="tcp" src_ip="136.166.209.5" src_port="80"/>
      <filter dst_ip="207.142.93.50" dst_port="137" proto="udp" src_ip="136.166.209.5" src_port="80"/>
      <filter dst_ip="207.142.93.50" dst_port="44129" proto="tcp" src_ip="136.166.209.5" src_port="80"/>
      <filter dst_ip="207.142.93.50" dst_port="44129" proto="udp" src_ip="136.166.209.5" src_port="80"/>
      <from sec="1044162260" usec="0"/>
      <to sec="1044162275" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="207.142.93.50" dst_port="137" proto="tcp" src_ip="212.42.153.5" src_port="1025"/>
      <filter dst_ip="207.142.93.50" dst_port="137" proto="udp" src_ip="212.42.153.5" src_port="1025"/>
      <filter dst_ip="207.142.93.50" dst_port="44129" proto="tcp" src_ip="212.42.153.5" src_port="1025"/>
      <filter dst_ip="207.142.93.50" dst_port="44129" proto="udp" src_ip="212.42.153.5" src_port="1025"/>
      <filter dst_ip="207.142.93.50" dst_port="137" proto="tcp" src_ip="212.42.153.5" src_port="80"/>
      <filter dst_ip="207.142.93.50" dst_port="137" proto="udp" src_ip="212.42.153.5" src_port="80"/>
      <filter dst_ip="207.142.93.50" dst_port="44129" proto="tcp" src_ip="212.42.153.5" src_port="80"/>
      <filter dst_ip="207.142.93.50" dst_port="44129" proto="udp" src_ip="212.42.153.5" src_port="80"/>
      <from sec="1044162262" usec="0"/>
      <to sec="1044162264" usec="0"/>
    </slice>
    <from sec="1044162260" usec="0"/>
    <to sec="1044162275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
119[label="217.233.100.12s;139pkt 139fpkt", shape=rectangle, color=red];
574[label="217.233.100.12s;139pkt 139fpkt", shape=ellipse, color=green];
3355[label="217.233.100.12;202pkt 202fpkt", shape=pentagon, color=darkviolet];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.233.100.12:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
119--574[label="1;139pkt 139fpkt"];
119--3355[label="1;139pkt 139fpkt"];
574--3355[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.233.100.12" src_port="1027"/>
    </slice>
    <from sec="1044163207" usec="0"/>
    <to sec="1044163239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.789546,1.98787,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="tcp" src_ip="188.17.138.12" src_port="1039"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="udp" src_ip="188.17.138.12" src_port="1039"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="tcp" src_ip="188.17.138.12" src_port="80"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="udp" src_ip="188.17.138.12" src_port="80"/>
      <from sec="1044163162" usec="0"/>
      <to sec="1044163184" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="tcp" src_ip="130.139.66.12" src_port="1039"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="udp" src_ip="130.139.66.12" src_port="1039"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="tcp" src_ip="130.139.66.12" src_port="80"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="udp" src_ip="130.139.66.12" src_port="80"/>
      <from sec="1044163170" usec="0"/>
      <to sec="1044163184" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="tcp" src_ip="141.96.2.12" src_port="1039"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="udp" src_ip="141.96.2.12" src_port="1039"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="tcp" src_ip="141.96.2.12" src_port="80"/>
      <filter dst_ip="206.34.74.3" dst_port="137" proto="udp" src_ip="141.96.2.12" src_port="80"/>
      <from sec="1044163178" usec="0"/>
      <to sec="1044163182" usec="0"/>
    </slice>
    <from sec="1044163162" usec="0"/>
    <to sec="1044163184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
130[label="204.148.203.20s;80pkt 80fpkt", shape=rectangle, color=red];
579[label="204.148.203.20s;80pkt 80fpkt", shape=ellipse, color=green];
3424[label="204.148.203.20;109pkt 109fpkt", shape=pentagon, color=darkviolet];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.148.203.20:2666, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2666: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
130--579[label="1;80pkt 80fpkt"];
130--3424[label="0.9875;79pkt 79fpkt"];
579--3424[label="0.9875;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.148.203.20" src_port="2666"/>
    </slice>
    <from sec="1044163255" usec="0"/>
    <to sec="1044163273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
136[label="149.147.47.26s;157pkt 157fpkt", shape=rectangle, color=red];
584[label="149.147.47.26s;157pkt 157fpkt", shape=ellipse, color=green];
3464[label="149.147.47.26;156pkt 156fpkt", shape=pentagon, color=darkviolet];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.147.47.26:50466, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50466: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
136--584[label="1;157pkt 157fpkt"];
136--3464[label="1;156pkt 156fpkt"];
584--3464[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="149.147.47.26" src_port="50466"/>
    </slice>
    <from sec="1044163501" usec="0"/>
    <to sec="1044163525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
143[label="173.138.218.28s;75pkt 75fpkt", shape=rectangle, color=red];
585[label="173.138.218.28s;75pkt 75fpkt", shape=ellipse, color=green];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.138.218.28:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
143--585[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="173.138.218.28" src_port="1025"/>
    </slice>
    <from sec="1044162326" usec="0"/>
    <to sec="1044162338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
144[label="190.62.51.29s;180pkt 180fpkt", shape=rectangle, color=red];
586[label="190.62.51.29s;164pkt 164fpkt", shape=ellipse, color=green];
3483[label="190.62.51.29;180pkt 180fpkt", shape=pentagon, color=darkviolet];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.62.51.29:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
144--586[label="1;164pkt 164fpkt"];
144--3483[label="1;180pkt 180fpkt"];
586--3483[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.62.51.29" src_port="1025"/>
    </slice>
    <from sec="1044162215" usec="0"/>
    <to sec="1044162243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
145[label="190.126.183.30s;58pkt 58fpkt", shape=rectangle, color=red];
587[label="190.126.183.30s;58pkt 58fpkt", shape=ellipse, color=green];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.126.183.30:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
145--587[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.126.183.30" src_port="1030"/>
    </slice>
    <from sec="1044162820" usec="0"/>
    <to sec="1044162829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
151[label="195.17.157.35s;52pkt 52fpkt", shape=rectangle, color=red];
591[label="195.17.157.35s;52pkt 52fpkt", shape=ellipse, color=green];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.17.157.35:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
151--591[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.17.157.35" src_port="1025"/>
    </slice>
    <from sec="1044162294" usec="0"/>
    <to sec="1044162304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
155[label="136.22.64.39s;78pkt 78fpkt", shape=rectangle, color=red];
593[label="136.22.64.39s;78pkt 78fpkt", shape=ellipse, color=green];
3550[label="136.22.64.39;109pkt 109fpkt", shape=pentagon, color=darkviolet];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.22.64.39:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
155--593[label="1;78pkt 78fpkt"];
155--3550[label="1;78pkt 78fpkt"];
593--3550[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="136.22.64.39" src_port="1028"/>
    </slice>
    <from sec="1044162686" usec="0"/>
    <to sec="1044162704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
159[label="195.2.179.43s;88pkt 88fpkt", shape=rectangle, color=red];
594[label="195.2.179.43s;88pkt 88fpkt", shape=ellipse, color=green];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.2.179.43:1036, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1036: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
159--594[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.2.179.43" src_port="1036"/>
    </slice>
    <from sec="1044163514" usec="0"/>
    <to sec="1044163527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
160[label="190.99.93.44s;169pkt 169fpkt", shape=rectangle, color=red];
595[label="190.99.93.44s;169pkt 169fpkt", shape=ellipse, color=green];
3592[label="190.99.93.44;171pkt 171fpkt", shape=pentagon, color=darkviolet];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.99.93.44:1067, *:137}[52.0468%]&lt;BR/&gt;{190.99.93.44:1069, *:137}[47.9532%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1067: (25.835%)&lt;BR/&gt; 1069: (24.165%)&gt;];
}
160--595[label="1;169pkt 169fpkt"];
160--3592[label="1;169pkt 169fpkt"];
595--3592[label="1;169pkt 169fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.99.93.44" src_port="1067"/>
      <filter dst_port="137" src_ip="190.99.93.44" src_port="1069"/>
    </slice>
    <from sec="1044162659" usec="0"/>
    <to sec="1044163021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14953,1.88003,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
161[label="193.129.96.45s;128pkt 128fpkt", shape=rectangle, color=red];
596[label="193.129.96.45s;58pkt 58fpkt", shape=ellipse, color=green];
3599[label="193.129.96.45;149pkt 149fpkt", shape=pentagon, color=darkviolet];
4818[label="193.129.96.45;149pkt 149fpkt", shape=invtriangle, color=brown];
5384[label="193.129.96.45;149pkt 149fpkt", shape=invhouse, color=bisque];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.129.96.45:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
161--596[label="1;58pkt 58fpkt"];
161--3599[label="0.992188;127pkt 127fpkt"];
161--4818[label="0.992188;127pkt 127fpkt"];
161--5384[label="0.992188;127pkt 127fpkt"];
596--3599[label="1;58pkt 58fpkt"];
596--4818[label="1;58pkt 58fpkt"];
596--5384[label="1;58pkt 58fpkt"];
3599--4818[label="1;149pkt 149fpkt"];
3599--5384[label="1;149pkt 149fpkt"];
4818--5384[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.129.96.45" src_port="1027"/>
    </slice>
    <from sec="1044162599" usec="0"/>
    <to sec="1044162625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.789546,1.98787,503,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="203.245.222.84" dst_port="137" proto="tcp" src_ip="212.107.166.59" src_port="1031"/>
      <filter dst_ip="203.245.222.84" dst_port="137" proto="udp" src_ip="212.107.166.59" src_port="1031"/>
      <filter dst_ip="203.245.222.84" dst_port="80" proto="tcp" src_ip="212.107.166.59" src_port="1031"/>
      <filter dst_ip="203.245.222.84" dst_port="80" proto="udp" src_ip="212.107.166.59" src_port="1031"/>
      <filter dst_ip="203.245.222.84" dst_port="137" proto="tcp" src_ip="212.107.166.59" src_port="1036"/>
      <filter dst_ip="203.245.222.84" dst_port="137" proto="udp" src_ip="212.107.166.59" src_port="1036"/>
      <filter dst_ip="203.245.222.84" dst_port="80" proto="tcp" src_ip="212.107.166.59" src_port="1036"/>
      <filter dst_ip="203.245.222.84" dst_port="80" proto="udp" src_ip="212.107.166.59" src_port="1036"/>
      <from sec="1044162551" usec="0"/>
      <to sec="1044162560" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="203.245.222.84" dst_port="137" proto="tcp" src_ip="133.168.118.59" src_port="1031"/>
      <filter dst_ip="203.245.222.84" dst_port="137" proto="udp" src_ip="133.168.118.59" src_port="1031"/>
      <filter dst_ip="203.245.222.84" dst_port="80" proto="tcp" src_ip="133.168.118.59" src_port="1031"/>
      <filter dst_ip="203.245.222.84" dst_port="80" proto="udp" src_ip="133.168.118.59" src_port="1031"/>
      <filter dst_ip="203.245.222.84" dst_port="137" proto="tcp" src_ip="133.168.118.59" src_port="1036"/>
      <filter dst_ip="203.245.222.84" dst_port="137" proto="udp" src_ip="133.168.118.59" src_port="1036"/>
      <filter dst_ip="203.245.222.84" dst_port="80" proto="tcp" src_ip="133.168.118.59" src_port="1036"/>
      <filter dst_ip="203.245.222.84" dst_port="80" proto="udp" src_ip="133.168.118.59" src_port="1036"/>
      <from sec="1044162553" usec="0"/>
      <to sec="1044162559" usec="0"/>
    </slice>
    <from sec="1044162551" usec="0"/>
    <to sec="1044162560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
185[label="194.66.96.63s;130pkt 130fpkt", shape=rectangle, color=red];
606[label="194.66.96.63s;80pkt 80fpkt", shape=ellipse, color=green];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.66.96.63:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
185--606[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.66.96.63" src_port="1025"/>
    </slice>
    <from sec="1044163308" usec="0"/>
    <to sec="1044163327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
188[label="212.175.197.65s;88pkt 88fpkt", shape=rectangle, color=red];
607[label="212.175.197.65s;88pkt 88fpkt", shape=ellipse, color=green];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.175.197.65:21159, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21159: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
188--607[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="212.175.197.65" src_port="21159"/>
    </slice>
    <from sec="1044162740" usec="0"/>
    <to sec="1044162756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.92565,1.8799,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
189[label="219.175.197.65s;202pkt 202fpkt", shape=rectangle, color=red];
608[label="219.175.197.65s;71pkt 71fpkt", shape=ellipse, color=green];
3687[label="219.175.197.65;243pkt 243fpkt", shape=pentagon, color=darkviolet];
4860[label="219.175.197.65;243pkt 243fpkt", shape=invtriangle, color=brown];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.175.197.65:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
189--608[label="1;71pkt 71fpkt"];
189--3687[label="1;202pkt 202fpkt"];
189--4860[label="1;202pkt 202fpkt"];
608--3687[label="1;71pkt 71fpkt"];
608--4860[label="1;71pkt 71fpkt"];
3687--4860[label="1;243pkt 243fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.175.197.65" src_port="1027"/>
    </slice>
    <from sec="1044162844" usec="0"/>
    <to sec="1044162885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
192[label="210.3.80.70s;140pkt 140fpkt", shape=rectangle, color=red];
610[label="210.3.80.70s;69pkt 69fpkt", shape=ellipse, color=green];
3728[label="210.3.80.70;139pkt 139fpkt", shape=pentagon, color=darkviolet];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.3.80.70:1044, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1044: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
192--610[label="1;69pkt 69fpkt"];
192--3728[label="1;139pkt 139fpkt"];
610--3728[label="0.985507;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.3.80.70" src_port="1044"/>
    </slice>
    <from sec="1044162249" usec="0"/>
    <to sec="1044162271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
203[label="136.104.176.74s;82pkt 82fpkt", shape=rectangle, color=red];
614[label="136.104.176.74s;82pkt 82fpkt", shape=ellipse, color=green];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.104.176.74:1024, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
203--614[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="136.104.176.74" src_port="1024"/>
    </slice>
    <from sec="1044162809" usec="0"/>
    <to sec="1044162821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
208[label="190.21.145.79s;133pkt 133fpkt", shape=rectangle, color=red];
616[label="190.21.145.79s;87pkt 87fpkt", shape=ellipse, color=green];
3793[label="190.21.145.79;148pkt 148fpkt", shape=pentagon, color=darkviolet];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.21.145.79:65057, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65057: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
208--616[label="1;87pkt 87fpkt"];
208--3793[label="1;133pkt 133fpkt"];
616--3793[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.21.145.79" src_port="65057"/>
    </slice>
    <from sec="1044162194" usec="0"/>
    <to sec="1044162218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14953,1.88003,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
212[label="207.136.211.82s;223pkt 223fpkt", shape=rectangle, color=red];
617[label="207.136.211.82s;84pkt 84fpkt", shape=ellipse, color=green];
3812[label="207.136.211.82;236pkt 236fpkt", shape=pentagon, color=darkviolet];
4919[label="207.136.211.82;237pkt 237fpkt", shape=invtriangle, color=brown];
5418[label="207.136.211.82;237pkt 237fpkt", shape=invhouse, color=bisque];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.136.211.82:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
212--617[label="1;84pkt 84fpkt"];
212--3812[label="1;223pkt 223fpkt"];
212--4919[label="1;223pkt 223fpkt"];
212--5418[label="1;223pkt 223fpkt"];
617--3812[label="1;84pkt 84fpkt"];
617--4919[label="1;84pkt 84fpkt"];
617--5418[label="1;84pkt 84fpkt"];
3812--4919[label="1;236pkt 236fpkt"];
3812--5418[label="1;236pkt 236fpkt"];
4919--5418[label="1;237pkt 237fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="207.136.211.82" src_port="1026"/>
    </slice>
    <from sec="1044162383" usec="0"/>
    <to sec="1044162420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
213[label="190.79.101.83s;74pkt 74fpkt", shape=rectangle, color=red];
618[label="190.79.101.83s;74pkt 74fpkt", shape=ellipse, color=green];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.79.101.83:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
213--618[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.79.101.83" src_port="1027"/>
    </slice>
    <from sec="1044162427" usec="0"/>
    <to sec="1044162439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
214[label="189.5.103.83s;196pkt 196fpkt", shape=rectangle, color=red];
619[label="189.5.103.83s;83pkt 83fpkt", shape=ellipse, color=green];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{189.5.103.83:10484, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10484: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
214--619[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="189.5.103.83" src_port="10484"/>
    </slice>
    <from sec="1044162218" usec="0"/>
    <to sec="1044162249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
216[label="189.40.129.84s;140pkt 140fpkt", shape=rectangle, color=red];
620[label="189.40.129.84s;72pkt 72fpkt", shape=ellipse, color=green];
3819[label="189.40.129.84;182pkt 182fpkt", shape=pentagon, color=darkviolet];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{189.40.129.84:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
216--620[label="1;72pkt 72fpkt"];
216--3819[label="1;140pkt 140fpkt"];
620--3819[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="189.40.129.84" src_port="1031"/>
    </slice>
    <from sec="1044162969" usec="0"/>
    <to sec="1044162998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.92565,1.8799,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
217[label="190.111.200.84s;85pkt 85fpkt", shape=rectangle, color=red];
621[label="190.111.200.84s;85pkt 85fpkt", shape=ellipse, color=green];
3823[label="190.111.200.84;106pkt 106fpkt", shape=pentagon, color=darkviolet];
4927[label="190.111.200.84;107pkt 107fpkt", shape=invtriangle, color=brown];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.111.200.84:1039, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1039: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
217--621[label="1;85pkt 85fpkt"];
217--3823[label="0.988235;84pkt 84fpkt"];
217--4927[label="1;85pkt 85fpkt"];
621--3823[label="0.988235;84pkt 84fpkt"];
621--4927[label="1;85pkt 85fpkt"];
3823--4927[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.111.200.84" src_port="1039"/>
    </slice>
    <from sec="1044162872" usec="0"/>
    <to sec="1044162889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
219[label="136.119.85.85s;207pkt 207fpkt", shape=rectangle, color=red];
622[label="136.119.85.85s;207pkt 207fpkt", shape=ellipse, color=green];
3827[label="136.119.85.85;253pkt 253fpkt", shape=pentagon, color=darkviolet];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.85.85:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
219--622[label="1;207pkt 207fpkt"];
219--3827[label="0.995169;206pkt 206fpkt"];
622--3827[label="0.995169;206pkt 206fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="136.119.85.85" src_port="1026"/>
    </slice>
    <from sec="1044162394" usec="0"/>
    <to sec="1044162438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
229[label="188.15.187.96s;256pkt 256fpkt", shape=rectangle, color=red];
624[label="188.15.187.96s;256pkt 256fpkt", shape=ellipse, color=green];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.15.187.96:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
229--624[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="188.15.187.96" src_port="1028"/>
    </slice>
    <from sec="1044162062" usec="0"/>
    <to sec="1044162076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14953,1.88003,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
237[label="190.92.37.105s;84pkt 84fpkt", shape=rectangle, color=red];
627[label="190.92.37.105s;84pkt 84fpkt", shape=ellipse, color=green];
3927[label="190.92.37.105;128pkt 128fpkt", shape=pentagon, color=darkviolet];
4973[label="190.92.37.105;129pkt 129fpkt", shape=invtriangle, color=brown];
5436[label="190.92.37.105;128pkt 128fpkt", shape=invhouse, color=bisque];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.92.37.105:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
237--627[label="1;84pkt 84fpkt"];
237--3927[label="1;84pkt 84fpkt"];
237--4973[label="1;84pkt 84fpkt"];
237--5436[label="1;84pkt 84fpkt"];
627--3927[label="1;84pkt 84fpkt"];
627--4973[label="1;84pkt 84fpkt"];
627--5436[label="1;84pkt 84fpkt"];
3927--4973[label="1;128pkt 128fpkt"];
3927--5436[label="1;128pkt 128fpkt"];
4973--5436[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.92.37.105" src_port="1029"/>
    </slice>
    <from sec="1044162338" usec="0"/>
    <to sec="1044162359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.789546,1.98787,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="148.94.204.240" dst_port="137" proto="tcp" src_ip="220.69.165.106" src_port="1037"/>
      <filter dst_ip="148.94.204.240" dst_port="137" proto="udp" src_ip="220.69.165.106" src_port="1037"/>
      <filter dst_ip="148.94.204.240" dst_port="137" proto="tcp" src_ip="220.69.165.106" src_port="3695"/>
      <filter dst_ip="148.94.204.240" dst_port="137" proto="udp" src_ip="220.69.165.106" src_port="3695"/>
      <from sec="1044162084" usec="0"/>
      <to sec="1044162096" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="148.94.204.240" dst_port="137" proto="tcp" src_ip="208.183.65.106" src_port="1037"/>
      <filter dst_ip="148.94.204.240" dst_port="137" proto="udp" src_ip="208.183.65.106" src_port="1037"/>
      <filter dst_ip="148.94.204.240" dst_port="137" proto="tcp" src_ip="208.183.65.106" src_port="3695"/>
      <filter dst_ip="148.94.204.240" dst_port="137" proto="udp" src_ip="208.183.65.106" src_port="3695"/>
      <from sec="1044162085" usec="0"/>
      <to sec="1044162095" usec="0"/>
    </slice>
    <from sec="1044162084" usec="0"/>
    <to sec="1044162096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
250[label="203.84.233.111s;72pkt 72fpkt", shape=rectangle, color=red];
633[label="203.84.233.111s;72pkt 72fpkt", shape=ellipse, color=green];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.84.233.111:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
250--633[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.84.233.111" src_port="1028"/>
    </slice>
    <from sec="1044162551" usec="0"/>
    <to sec="1044162563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
251[label="193.177.130.112s;112pkt 112fpkt", shape=rectangle, color=red];
634[label="193.177.130.112s;79pkt 79fpkt", shape=ellipse, color=green];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.177.130.112:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
251--634[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.177.130.112" src_port="1028"/>
    </slice>
    <from sec="1044163100" usec="0"/>
    <to sec="1044163125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
253[label="193.133.68.114s;72pkt 72fpkt", shape=rectangle, color=red];
635[label="193.133.68.114s;72pkt 72fpkt", shape=ellipse, color=green];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.133.68.114:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
253--635[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.133.68.114" src_port="1028"/>
    </slice>
    <from sec="1044162917" usec="0"/>
    <to sec="1044162928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
264[label="170.64.105.122s;171pkt 171fpkt", shape=rectangle, color=red];
640[label="170.64.105.122s;82pkt 82fpkt", shape=ellipse, color=green];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.64.105.122:62175, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62175: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
264--640[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="170.64.105.122" src_port="62175"/>
    </slice>
    <from sec="1044162600" usec="0"/>
    <to sec="1044162629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
266[label="219.70.144.122s;126pkt 126fpkt", shape=rectangle, color=red];
641[label="219.70.144.122s;253pkt 253fpkt", shape=ellipse, color=green];
3826[label="194.69.68.85;183pkt 183fpkt", shape=pentagon, color=darkviolet];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.69.68.85:1027, *:137}[43.8849%]&lt;BR/&gt;{219.70.144.122:1027, *:137}[30.2158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (49.2883%)&lt;BR/&gt; 53: (0.711744%)&gt;];
}
266--641[label="0.753968;95pkt 95fpkt"];
641--891[label="0.0237154;6pkt 6fpkt"];
641--1187[label="0.00395257;1pkt 1fpkt"];
641--1732[label="0.00395257;1pkt 1fpkt"];
641--2418[label="0.00395257;1pkt 1fpkt"];
641--2766[label="0.00395257;1pkt 1fpkt"];
641--3231[label="0.00790514;2pkt 2fpkt"];
641--3241[label="0.0237154;6pkt 6fpkt"];
641--3242[label="0.0118577;3pkt 3fpkt"];
641--3248[label="0.00790514;2pkt 2fpkt"];
641--3826[label="0.273224;50pkt 50fpkt"];
641--4484[label="0.00395257;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.69.68.85" src_port="1027"/>
      <filter dst_port="137" src_ip="219.70.144.122" src_port="1027"/>
    </slice>
    <from sec="1044162977" usec="0"/>
    <to sec="1044163038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
269[label="190.105.132.125s;133pkt 133fpkt", shape=rectangle, color=red];
644[label="190.105.132.125s;77pkt 77fpkt", shape=ellipse, color=green];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.105.132.125:1045, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1045: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
269--644[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.105.132.125" src_port="1045"/>
    </slice>
    <from sec="1044163173" usec="0"/>
    <to sec="1044163196" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.92565,1.8799,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
271[label="188.48.82.127s;124pkt 124fpkt", shape=rectangle, color=red];
646[label="188.48.82.127s;61pkt 61fpkt", shape=ellipse, color=green];
4023[label="188.48.82.127;123pkt 123fpkt", shape=pentagon, color=darkviolet];
5023[label="188.48.82.127;123pkt 123fpkt", shape=invtriangle, color=brown];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.48.82.127:10002, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10002: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
271--646[label="1;61pkt 61fpkt"];
271--4023[label="1;123pkt 123fpkt"];
271--5023[label="1;123pkt 123fpkt"];
646--4023[label="1;61pkt 61fpkt"];
646--5023[label="1;61pkt 61fpkt"];
4023--5023[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="188.48.82.127" src_port="10002"/>
    </slice>
    <from sec="1044162395" usec="0"/>
    <to sec="1044162415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
274[label="219.48.7.128s;64pkt 64fpkt", shape=rectangle, color=red];
648[label="219.48.7.128s;62pkt 62fpkt", shape=ellipse, color=green];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.48.7.128:28191, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28191: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
274--648[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.48.7.128" src_port="28191"/>
    </slice>
    <from sec="1044162072" usec="0"/>
    <to sec="1044162083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
275[label="210.35.167.129s;116pkt 116fpkt", shape=rectangle, color=red];
649[label="210.35.167.129s;67pkt 67fpkt", shape=ellipse, color=green];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.35.167.129:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
275--649[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.35.167.129" src_port="1025"/>
    </slice>
    <from sec="1044162364" usec="0"/>
    <to sec="1044162384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
280[label="177.225.157.133s;133pkt 133fpkt", shape=rectangle, color=red];
650[label="177.225.157.133s;133pkt 133fpkt", shape=ellipse, color=green];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{177.225.157.133:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
280--650[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="177.225.157.133" src_port="1026"/>
    </slice>
    <from sec="1044162329" usec="0"/>
    <to sec="1044162350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
281[label="144.183.72.136s;139pkt 139fpkt", shape=rectangle, color=red];
651[label="144.183.72.136s;73pkt 73fpkt", shape=ellipse, color=green];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.183.72.136:1034, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
281--651[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="144.183.72.136" src_port="1034"/>
    </slice>
    <from sec="1044163227" usec="0"/>
    <to sec="1044163249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.92565,1.8799,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
285[label="204.222.10.138s;74pkt 74fpkt", shape=rectangle, color=red];
654[label="204.222.10.138s;74pkt 74fpkt", shape=ellipse, color=green];
4097[label="204.222.10.138;148pkt 148fpkt", shape=pentagon, color=darkviolet];
5058[label="204.222.10.138;147pkt 147fpkt", shape=invtriangle, color=brown];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.222.10.138:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
285--654[label="1;74pkt 74fpkt"];
285--4097[label="1;74pkt 74fpkt"];
285--5058[label="1;74pkt 74fpkt"];
654--4097[label="1;74pkt 74fpkt"];
654--5058[label="1;74pkt 74fpkt"];
4097--5058[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.222.10.138" src_port="1028"/>
    </slice>
    <from sec="1044162083" usec="0"/>
    <to sec="1044162111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
288[label="204.145.129.139s;141pkt 141fpkt", shape=rectangle, color=red];
656[label="204.145.129.139s;73pkt 73fpkt", shape=ellipse, color=green];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.145.129.139:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
288--656[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.145.129.139" src_port="1028"/>
    </slice>
    <from sec="1044162895" usec="0"/>
    <to sec="1044162918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.92565,1.8799,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
289[label="194.217.16.140s;233pkt 233fpkt", shape=rectangle, color=red];
657[label="194.217.16.140s;233pkt 233fpkt", shape=ellipse, color=green];
4104[label="194.217.16.140;232pkt 232fpkt", shape=pentagon, color=darkviolet];
5062[label="194.217.16.140;231pkt 231fpkt", shape=invtriangle, color=brown];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.217.16.140:21610, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21610: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
289--657[label="1;233pkt 233fpkt"];
289--4104[label="1;232pkt 232fpkt"];
289--5062[label="1;231pkt 231fpkt"];
657--4104[label="1;232pkt 232fpkt"];
657--5062[label="1;231pkt 231fpkt"];
4104--5062[label="1;231pkt 231fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.217.16.140" src_port="21610"/>
    </slice>
    <from sec="1044162056" usec="0"/>
    <to sec="1044162095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
291[label="190.133.117.140s;180pkt 180fpkt", shape=rectangle, color=red];
658[label="190.133.117.140s;180pkt 180fpkt", shape=ellipse, color=green];
4108[label="190.133.117.140;208pkt 208fpkt", shape=pentagon, color=darkviolet];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.133.117.140:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
291--658[label="1;180pkt 180fpkt"];
291--2273[label="0.00813008;1pkt 1fpkt"];
291--4108[label="0.994444;179pkt 179fpkt"];
658--2273[label="0.00813008;1pkt 1fpkt"];
658--4108[label="0.994444;179pkt 179fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.133.117.140" src_port="1032"/>
    </slice>
    <from sec="1044163447" usec="0"/>
    <to sec="1044163479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
296[label="190.171.4.142s;75pkt 75fpkt", shape=rectangle, color=red];
662[label="190.171.4.142s;75pkt 75fpkt", shape=ellipse, color=green];
4116[label="190.171.4.142;150pkt 150fpkt", shape=pentagon, color=darkviolet];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.171.4.142:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
296--662[label="1;75pkt 75fpkt"];
296--4116[label="1;75pkt 75fpkt"];
662--4116[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.171.4.142" src_port="1026"/>
    </slice>
    <from sec="1044162368" usec="0"/>
    <to sec="1044162394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14953,1.88003,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
300[label="201.216.168.144s;204pkt 204fpkt", shape=rectangle, color=red];
663[label="201.216.168.144s;204pkt 204fpkt", shape=ellipse, color=green];
4128[label="201.216.168.144;216pkt 216fpkt", shape=pentagon, color=darkviolet];
5076[label="201.216.168.144;216pkt 216fpkt", shape=invtriangle, color=brown];
5481[label="201.216.168.144;216pkt 216fpkt", shape=invhouse, color=bisque];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.216.168.144:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
300--663[label="1;204pkt 204fpkt"];
300--4128[label="0.995098;203pkt 203fpkt"];
300--5076[label="0.995098;203pkt 203fpkt"];
300--5481[label="0.995098;203pkt 203fpkt"];
663--4128[label="0.995098;203pkt 203fpkt"];
663--5076[label="0.995098;203pkt 203fpkt"];
663--5481[label="0.995098;203pkt 203fpkt"];
4128--5076[label="1;216pkt 216fpkt"];
4128--5481[label="1;216pkt 216fpkt"];
5076--5481[label="1;216pkt 216fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.216.168.144" src_port="1028"/>
    </slice>
    <from sec="1044162248" usec="0"/>
    <to sec="1044162285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14953,1.88003,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
304[label="190.166.68.146s;211pkt 211fpkt", shape=rectangle, color=red];
665[label="190.166.68.146s;86pkt 86fpkt", shape=ellipse, color=green];
4140[label="190.166.68.146;231pkt 231fpkt", shape=pentagon, color=darkviolet];
5079[label="190.166.68.146;230pkt 230fpkt", shape=invtriangle, color=brown];
5482[label="190.166.68.146;230pkt 230fpkt", shape=invhouse, color=bisque];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.166.68.146:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
304--665[label="1;86pkt 86fpkt"];
304--4140[label="1;211pkt 211fpkt"];
304--5079[label="0.995261;210pkt 210fpkt"];
304--5482[label="0.995261;210pkt 210fpkt"];
665--4140[label="1;86pkt 86fpkt"];
665--5079[label="0.988372;85pkt 85fpkt"];
665--5482[label="0.988372;85pkt 85fpkt"];
4140--5079[label="1;230pkt 230fpkt"];
4140--5482[label="1;230pkt 230fpkt"];
5079--5482[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.166.68.146" src_port="1026"/>
    </slice>
    <from sec="1044162611" usec="0"/>
    <to sec="1044162648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.789546,1.98787,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="tcp" src_ip="204.226.87.146" src_port="21680"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="udp" src_ip="204.226.87.146" src_port="21680"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="tcp" src_ip="204.226.87.146" src_port="21"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="udp" src_ip="204.226.87.146" src_port="21"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="tcp" src_ip="204.226.87.146" src_port="21658"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="udp" src_ip="204.226.87.146" src_port="21658"/>
      <from sec="1044162745" usec="0"/>
      <to sec="1044162756" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="tcp" src_ip="130.139.11.146" src_port="21680"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="udp" src_ip="130.139.11.146" src_port="21680"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="tcp" src_ip="130.139.11.146" src_port="21"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="udp" src_ip="130.139.11.146" src_port="21"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="tcp" src_ip="130.139.11.146" src_port="21658"/>
      <filter dst_ip="213.141.65.40" dst_port="137" proto="udp" src_ip="130.139.11.146" src_port="21658"/>
      <from sec="1044162746" usec="0"/>
      <to sec="1044162756" usec="0"/>
    </slice>
    <from sec="1044162745" usec="0"/>
    <to sec="1044162756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
306[label="204.238.150.146s;151pkt 151fpkt", shape=rectangle, color=red];
667[label="204.238.150.146s;80pkt 80fpkt", shape=ellipse, color=green];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.238.150.146:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
306--667[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.238.150.146" src_port="1025"/>
    </slice>
    <from sec="1044163007" usec="0"/>
    <to sec="1044163030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.996302,1.94049,002,1 1 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
307[label="190.167.19.147s;643pkt 643fpkt", shape=rectangle, color=red];
668[label="190.167.19.147s;71pkt 71fpkt", shape=ellipse, color=green];
1162[label="190.167.19.147;s;651pkt 651fpkt", shape=diamond, color=yellow];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.167.19.147:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
307--668[label="1;71pkt 71fpkt"];
307--1162[label="1;643pkt 643fpkt"];
668--1162[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.167.19.147" src_port="1031"/>
    </slice>
    <from sec="1044162105" usec="0"/>
    <to sec="1044162217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
322[label="203.14.139.158s;130pkt 130fpkt", shape=rectangle, color=red];
674[label="203.14.139.158s;71pkt 71fpkt", shape=ellipse, color=green];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.14.139.158:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
322--674[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.14.139.158" src_port="1029"/>
    </slice>
    <from sec="1044162350" usec="0"/>
    <to sec="1044162374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
326[label="149.148.8.161s;183pkt 183fpkt", shape=rectangle, color=red];
676[label="149.148.8.161s;183pkt 183fpkt", shape=ellipse, color=green];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.148.8.161:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
326--676[label="1;183pkt 183fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="149.148.8.161" src_port="1025"/>
    </slice>
    <from sec="1044163112" usec="0"/>
    <to sec="1044163151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
327[label="184.8.153.161s;245pkt 245fpkt", shape=rectangle, color=red];
677[label="184.8.153.161s;193pkt 193fpkt", shape=ellipse, color=green];
4228[label="184.8.153.161;244pkt 244fpkt", shape=pentagon, color=darkviolet];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{184.8.153.161:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
327--677[label="1;193pkt 193fpkt"];
327--4228[label="1;244pkt 244fpkt"];
677--4228[label="0.994819;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="184.8.153.161" src_port="1026"/>
    </slice>
    <from sec="1044163209" usec="0"/>
    <to sec="1044163248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14953,1.88003,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
330[label="194.66.26.163s;153pkt 153fpkt", shape=rectangle, color=red];
678[label="194.66.26.163s;85pkt 85fpkt", shape=ellipse, color=green];
4234[label="194.66.26.163;152pkt 152fpkt", shape=pentagon, color=darkviolet];
5129[label="194.66.26.163;153pkt 153fpkt", shape=invtriangle, color=brown];
5499[label="194.66.26.163;152pkt 152fpkt", shape=invhouse, color=bisque];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.66.26.163:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
330--678[label="1;85pkt 85fpkt"];
330--4234[label="1;152pkt 152fpkt"];
330--5129[label="1;153pkt 153fpkt"];
330--5499[label="1;152pkt 152fpkt"];
678--4234[label="0.988235;84pkt 84fpkt"];
678--5129[label="1;85pkt 85fpkt"];
678--5499[label="0.988235;84pkt 84fpkt"];
4234--5129[label="1;152pkt 152fpkt"];
4234--5499[label="1;152pkt 152fpkt"];
5129--5499[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.66.26.163" src_port="1027"/>
    </slice>
    <from sec="1044162350" usec="0"/>
    <to sec="1044162374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
332[label="208.216.104.163s;99pkt 99fpkt", shape=rectangle, color=red];
679[label="208.216.104.163s;95pkt 95fpkt", shape=ellipse, color=green];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.216.104.163:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
332--679[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.216.104.163" src_port="1027"/>
    </slice>
    <from sec="1044163513" usec="0"/>
    <to sec="1044163528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.789546,1.98787,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="tcp" src_ip="213.14.90.164" src_port="2787"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="udp" src_ip="213.14.90.164" src_port="2787"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="tcp" src_ip="213.14.90.164" src_port="8080"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="udp" src_ip="213.14.90.164" src_port="8080"/>
      <from sec="1044162659" usec="0"/>
      <to sec="1044162680" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="tcp" src_ip="206.27.178.164" src_port="2787"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="udp" src_ip="206.27.178.164" src_port="2787"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="tcp" src_ip="206.27.178.164" src_port="8080"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="udp" src_ip="206.27.178.164" src_port="8080"/>
      <from sec="1044162660" usec="0"/>
      <to sec="1044162679" usec="0"/>
    </slice>
    <from sec="1044162659" usec="0"/>
    <to sec="1044162680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
337[label="219.209.136.165s;50pkt 50fpkt", shape=rectangle, color=red];
682[label="219.209.136.165s;50pkt 50fpkt", shape=ellipse, color=green];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.209.136.165:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
337--682[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.209.136.165" src_port="1029"/>
    </slice>
    <from sec="1044163075" usec="0"/>
    <to sec="1044163086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14953,1.88003,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
339[label="190.50.47.167s;189pkt 189fpkt", shape=rectangle, color=red];
683[label="190.50.47.167s;61pkt 61fpkt", shape=ellipse, color=green];
4256[label="190.50.47.167;252pkt 252fpkt", shape=pentagon, color=darkviolet];
5137[label="190.50.47.167;252pkt 252fpkt", shape=invtriangle, color=brown];
5502[label="190.50.47.167;252pkt 252fpkt", shape=invhouse, color=bisque];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.50.47.167:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
339--683[label="1;61pkt 61fpkt"];
339--4256[label="1;189pkt 189fpkt"];
339--5137[label="1;189pkt 189fpkt"];
339--5502[label="1;189pkt 189fpkt"];
683--4256[label="1;61pkt 61fpkt"];
683--5137[label="1;61pkt 61fpkt"];
683--5502[label="1;61pkt 61fpkt"];
4256--5137[label="1;252pkt 252fpkt"];
4256--5502[label="1;252pkt 252fpkt"];
5137--5502[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.50.47.167" src_port="1030"/>
    </slice>
    <from sec="1044162270" usec="0"/>
    <to sec="1044162315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
350[label="192.134.249.171s;255pkt 255fpkt", shape=rectangle, color=red];
687[label="192.134.249.171s;255pkt 255fpkt", shape=ellipse, color=green];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.134.249.171:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
350--687[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.134.249.171" src_port="1029"/>
    </slice>
    <from sec="1044162122" usec="0"/>
    <to sec="1044162161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
355[label="150.242.104.175s;53pkt 53fpkt", shape=rectangle, color=red];
689[label="150.242.104.175s;53pkt 53fpkt", shape=ellipse, color=green];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.242.104.175:25806, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25806: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
355--689[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="150.242.104.175" src_port="25806"/>
    </slice>
    <from sec="1044162745" usec="0"/>
    <to sec="1044162755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
365[label="216.125.75.181s;199pkt 199fpkt", shape=rectangle, color=red];
694[label="216.125.75.181s;65pkt 65fpkt", shape=ellipse, color=green];
4334[label="216.125.75.181;197pkt 197fpkt", shape=pentagon, color=darkviolet];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.125.75.181:29277, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29277: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
365--694[label="1;65pkt 65fpkt"];
365--4334[label="1;197pkt 197fpkt"];
694--4334[label="0.984615;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="216.125.75.181" src_port="29277"/>
    </slice>
    <from sec="1044162098" usec="0"/>
    <to sec="1044162131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
366[label="150.238.102.181s;79pkt 79fpkt", shape=rectangle, color=red];
695[label="150.238.102.181s;79pkt 79fpkt", shape=ellipse, color=green];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.238.102.181:1034, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
366--695[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="150.238.102.181" src_port="1034"/>
    </slice>
    <from sec="1044163237" usec="0"/>
    <to sec="1044163249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
367[label="190.17.203.181s;231pkt 231fpkt", shape=rectangle, color=red];
696[label="190.17.203.181s;133pkt 133fpkt", shape=ellipse, color=green];
4336[label="190.17.203.181;230pkt 230fpkt", shape=pentagon, color=darkviolet];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.17.203.181:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
367--696[label="1;133pkt 133fpkt"];
367--4336[label="1;230pkt 230fpkt"];
696--4336[label="0.992481;132pkt 132fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.17.203.181" src_port="1028"/>
    </slice>
    <from sec="1044163297" usec="0"/>
    <to sec="1044163341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.92565,1.8799,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
368[label="138.8.12.182s;70pkt 70fpkt", shape=rectangle, color=red];
697[label="138.8.12.182s;70pkt 70fpkt", shape=ellipse, color=green];
4337[label="138.8.12.182;138pkt 138fpkt", shape=pentagon, color=darkviolet];
5173[label="138.8.12.182;138pkt 138fpkt", shape=invtriangle, color=brown];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.8.12.182:1041, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1041: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
368--697[label="1;70pkt 70fpkt"];
368--4337[label="0.985714;69pkt 69fpkt"];
368--5173[label="0.985714;69pkt 69fpkt"];
697--4337[label="0.985714;69pkt 69fpkt"];
697--5173[label="0.985714;69pkt 69fpkt"];
4337--5173[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="138.8.12.182" src_port="1041"/>
    </slice>
    <from sec="1044162756" usec="0"/>
    <to sec="1044162778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14953,1.88003,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
370[label="209.156.106.184s;120pkt 120fpkt", shape=rectangle, color=red];
698[label="209.156.106.184s;74pkt 74fpkt", shape=ellipse, color=green];
4347[label="209.156.106.184;123pkt 123fpkt", shape=pentagon, color=darkviolet];
5176[label="209.156.106.184;122pkt 122fpkt", shape=invtriangle, color=brown];
5521[label="209.156.106.184;122pkt 122fpkt", shape=invhouse, color=bisque];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.156.106.184:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
370--698[label="1;74pkt 74fpkt"];
370--4347[label="1;120pkt 120fpkt"];
370--5176[label="0.991667;119pkt 119fpkt"];
370--5521[label="0.991667;119pkt 119fpkt"];
698--4347[label="1;74pkt 74fpkt"];
698--5176[label="1;74pkt 74fpkt"];
698--5521[label="1;74pkt 74fpkt"];
4347--5176[label="1;122pkt 122fpkt"];
4347--5521[label="1;122pkt 122fpkt"];
5176--5521[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.156.106.184" src_port="1030"/>
    </slice>
    <from sec="1044162292" usec="0"/>
    <to sec="1044162313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
371[label="210.128.16.185s;76pkt 76fpkt", shape=rectangle, color=red];
699[label="210.128.16.185s;76pkt 76fpkt", shape=ellipse, color=green];
4348[label="210.128.16.185;107pkt 107fpkt", shape=pentagon, color=darkviolet];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.128.16.185:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
371--699[label="1;76pkt 76fpkt"];
371--4348[label="0.986842;75pkt 75fpkt"];
699--4348[label="0.986842;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.128.16.185" src_port="1028"/>
    </slice>
    <from sec="1044163059" usec="0"/>
    <to sec="1044163076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
373[label="193.227.122.186s;86pkt 86fpkt", shape=rectangle, color=red];
700[label="193.227.122.186s;86pkt 86fpkt", shape=ellipse, color=green];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.227.122.186:1045, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1045: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
373--700[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.227.122.186" src_port="1045"/>
    </slice>
    <from sec="1044162096" usec="0"/>
    <to sec="1044162108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14953,1.88003,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
380[label="193.148.236.190s;221pkt 221fpkt", shape=rectangle, color=red];
704[label="193.148.236.190s;82pkt 82fpkt", shape=ellipse, color=green];
4372[label="193.148.236.190;223pkt 223fpkt", shape=pentagon, color=darkviolet];
5189[label="193.148.236.190;224pkt 224fpkt", shape=invtriangle, color=brown];
5528[label="193.148.236.190;224pkt 224fpkt", shape=invhouse, color=bisque];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.148.236.190:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
380--704[label="1;82pkt 82fpkt"];
380--4372[label="0.995475;220pkt 220fpkt"];
380--5189[label="1;221pkt 221fpkt"];
380--5528[label="1;221pkt 221fpkt"];
704--4372[label="1;82pkt 82fpkt"];
704--5189[label="1;82pkt 82fpkt"];
704--5528[label="1;82pkt 82fpkt"];
4372--5189[label="1;223pkt 223fpkt"];
4372--5528[label="1;223pkt 223fpkt"];
5189--5528[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.148.236.190" src_port="1026"/>
    </slice>
    <from sec="1044162985" usec="0"/>
    <to sec="1044163021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
385[label="190.182.18.194s;65pkt 65fpkt", shape=rectangle, color=red];
707[label="190.182.18.194s;65pkt 65fpkt", shape=ellipse, color=green];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.182.18.194:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
385--707[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.182.18.194" src_port="1026"/>
    </slice>
    <from sec="1044163125" usec="0"/>
    <to sec="1044163136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14953,1.88003,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
398[label="213.117.23.204s;135pkt 135fpkt", shape=rectangle, color=red];
713[label="213.117.23.204s;135pkt 135fpkt", shape=ellipse, color=green];
4432[label="213.117.23.204;245pkt 245fpkt", shape=pentagon, color=darkviolet];
5220[label="213.117.23.204;245pkt 245fpkt", shape=invtriangle, color=brown];
5545[label="213.117.23.204;245pkt 245fpkt", shape=invhouse, color=bisque];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.117.23.204:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
398--713[label="1;135pkt 135fpkt"];
398--4432[label="1;135pkt 135fpkt"];
398--5220[label="1;135pkt 135fpkt"];
398--5545[label="1;135pkt 135fpkt"];
713--4432[label="1;135pkt 135fpkt"];
713--5220[label="1;135pkt 135fpkt"];
713--5545[label="1;135pkt 135fpkt"];
4432--5220[label="1;245pkt 245fpkt"];
4432--5545[label="1;245pkt 245fpkt"];
5220--5545[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.117.23.204" src_port="1027"/>
    </slice>
    <from sec="1044163177" usec="0"/>
    <to sec="1044163221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
411[label="190.43.82.208s;256pkt 256fpkt", shape=rectangle, color=red];
719[label="190.43.82.208s;85pkt 85fpkt", shape=ellipse, color=green];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.43.82.208:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
411--719[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.43.82.208" src_port="1025"/>
    </slice>
    <from sec="1044163195" usec="0"/>
    <to sec="1044163234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
413[label="211.14.174.209s;256pkt 256fpkt", shape=rectangle, color=red];
721[label="211.14.174.209s;256pkt 256fpkt", shape=ellipse, color=green];
4464[label="211.14.174.209;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.14.174.209:2201, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2201: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
413--721[label="1;256pkt 256fpkt"];
413--4464[label="1;254pkt 254fpkt"];
721--4464[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.14.174.209" src_port="2201"/>
    </slice>
    <from sec="1044163249" usec="0"/>
    <to sec="1044163269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
414[label="196.213.209.210s;210pkt 210fpkt", shape=rectangle, color=red];
722[label="196.213.209.210s;147pkt 147fpkt", shape=ellipse, color=green];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.213.209.210:1050, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1050: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
414--722[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.213.209.210" src_port="1050"/>
    </slice>
    <from sec="1044162416" usec="0"/>
    <to sec="1044162450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.92565,1.8799,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
416[label="192.250.103.211s;210pkt 210fpkt", shape=rectangle, color=red];
723[label="192.250.103.211s;160pkt 160fpkt", shape=ellipse, color=green];
4470[label="192.250.103.211;209pkt 209fpkt", shape=pentagon, color=darkviolet];
5235[label="192.250.103.211;209pkt 209fpkt", shape=invtriangle, color=brown];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.250.103.211:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
416--723[label="1;160pkt 160fpkt"];
416--4470[label="1;209pkt 209fpkt"];
416--5235[label="1;209pkt 209fpkt"];
723--4470[label="1;160pkt 160fpkt"];
723--5235[label="1;160pkt 160fpkt"];
4470--5235[label="1;209pkt 209fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.250.103.211" src_port="1029"/>
    </slice>
    <from sec="1044162062" usec="0"/>
    <to sec="1044162097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
418[label="203.15.6.215s;65pkt 65fpkt", shape=rectangle, color=red];
724[label="203.15.6.215s;65pkt 65fpkt", shape=ellipse, color=green];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.15.6.215:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
418--724[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.15.6.215" src_port="1027"/>
    </slice>
    <from sec="1044162659" usec="0"/>
    <to sec="1044162669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
422[label="190.127.51.218s;250pkt 250fpkt", shape=rectangle, color=red];
725[label="190.127.51.218s;45pkt 45fpkt", shape=ellipse, color=green];
4503[label="190.127.51.218;351pkt 351fpkt", shape=pentagon, color=darkviolet];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.127.51.218:1125, *:137}[61.3636%]&lt;BR/&gt;{190.127.51.218:1106, *:137}[38.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1125: (27.5542%)&lt;BR/&gt; 1106: (22.4458%)&gt;];
}
422--725[label="1;45pkt 45fpkt"];
422--4503[label="0.996;249pkt 249fpkt"];
725--4503[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.127.51.218" src_port="1125"/>
      <filter dst_port="137" src_ip="190.127.51.218" src_port="1106"/>
    </slice>
    <from sec="1044162146" usec="0"/>
    <to sec="1044163324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
425[label="190.71.11.219s;154pkt 154fpkt", shape=rectangle, color=red];
727[label="190.71.11.219s;82pkt 82fpkt", shape=ellipse, color=green];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.71.11.219:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
425--727[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.71.11.219" src_port="1026"/>
    </slice>
    <from sec="1044162787" usec="0"/>
    <to sec="1044162810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.92565,1.8799,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
435[label="209.198.19.234s;220pkt 220fpkt", shape=rectangle, color=red];
728[label="209.198.19.234s;78pkt 78fpkt", shape=ellipse, color=green];
4580[label="209.198.19.234;223pkt 223fpkt", shape=pentagon, color=darkviolet];
5281[label="209.198.19.234;223pkt 223fpkt", shape=invtriangle, color=brown];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.198.19.234:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
435--728[label="1;78pkt 78fpkt"];
435--4580[label="1;220pkt 220fpkt"];
435--5281[label="1;220pkt 220fpkt"];
728--4580[label="1;78pkt 78fpkt"];
728--5281[label="1;78pkt 78fpkt"];
4580--5281[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.198.19.234" src_port="1027"/>
    </slice>
    <from sec="1044162158" usec="0"/>
    <to sec="1044162197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
445[label="219.24.235.238s;252pkt 252fpkt", shape=rectangle, color=red];
732[label="219.24.235.238s;83pkt 83fpkt", shape=ellipse, color=green];
4594[label="219.24.235.238;251pkt 251fpkt", shape=pentagon, color=darkviolet];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.24.235.238:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
445--732[label="1;83pkt 83fpkt"];
445--4594[label="1;251pkt 251fpkt"];
732--4594[label="0.987952;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.24.235.238" src_port="1027"/>
    </slice>
    <from sec="1044162886" usec="0"/>
    <to sec="1044162926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14953,1.88003,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
448[label="190.70.74.240s;256pkt 256fpkt", shape=rectangle, color=red];
734[label="190.70.74.240s;234pkt 234fpkt", shape=ellipse, color=green];
4600[label="190.70.74.240;255pkt 255fpkt", shape=pentagon, color=darkviolet];
5288[label="190.70.74.240;256pkt 256fpkt", shape=invtriangle, color=brown];
5578[label="190.70.74.240;255pkt 255fpkt", shape=invhouse, color=bisque];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.70.74.240:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
448--734[label="1;234pkt 234fpkt"];
448--4600[label="1;255pkt 255fpkt"];
448--5288[label="1;256pkt 256fpkt"];
448--5578[label="1;255pkt 255fpkt"];
734--4600[label="0.995726;233pkt 233fpkt"];
734--5288[label="1;234pkt 234fpkt"];
734--5578[label="0.995726;233pkt 233fpkt"];
4600--5288[label="1;255pkt 255fpkt"];
4600--5578[label="1;255pkt 255fpkt"];
5288--5578[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.70.74.240" src_port="1025"/>
    </slice>
    <from sec="1044162073" usec="0"/>
    <to sec="1044162118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.789546,1.98787,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="206.6.44.82" dst_port="137" proto="udp" src_ip="190.42.107.246" src_port="12750"/>
      <filter dst_ip="206.6.44.82" dst_port="53" proto="udp" src_ip="190.42.107.246" src_port="12750"/>
      <from sec="1044162416" usec="0"/>
      <to sec="1044162425" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="206.6.44.82" dst_port="137" proto="udp" src_ip="208.51.27.246" src_port="12750"/>
      <filter dst_ip="206.6.44.82" dst_port="53" proto="udp" src_ip="208.51.27.246" src_port="12750"/>
      <from sec="1044162422" usec="0"/>
      <to sec="1044162427" usec="0"/>
    </slice>
    <from sec="1044162416" usec="0"/>
    <to sec="1044162427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
456[label="194.255.1.253s;61pkt 61fpkt", shape=rectangle, color=red];
740[label="194.255.1.253s;61pkt 61fpkt", shape=ellipse, color=green];
4636[label="194.255.1.253;213pkt 213fpkt", shape=pentagon, color=darkviolet];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.255.1.253:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
456--740[label="1;61pkt 61fpkt"];
456--4636[label="1;61pkt 61fpkt"];
740--4636[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.255.1.253" src_port="1028"/>
    </slice>
    <from sec="1044163145" usec="0"/>
    <to sec="1044163193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
466[label="200.79.181.103s;238pkt 238fpkt", shape=rectangle, color=red];
744[label="200.79.181.103s;232pkt 232fpkt", shape=ellipse, color=green];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.79.181.103:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 18083: (2.97872%)&lt;BR/&gt; 18081: (2.55319%)&lt;BR/&gt; 18064: (2.55319%)&lt;BR/&gt; 18065: (2.34043%)&gt;];
}
466--744[label="1;232pkt 232fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.79.181.103"/>
    </slice>
    <from sec="1044163162" usec="0"/>
    <to sec="1044163198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.789546,1.98787,002,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="190.66.127.108"/>
      <from sec="1044162293" usec="0"/>
      <to sec="1044163526" usec="0"/>
    </slice>
    <from sec="1044162293" usec="0"/>
    <to sec="1044163526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,999,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
469[label="209.253.221.114s;1pkt 1fpkt", shape=rectangle, color=red];
747[label="209.253.221.114s;1pkt 1fpkt", shape=ellipse, color=green];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.210.109.114:25, 130.139.227.84:42611}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42611: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
469--747[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.139.227.84" dst_port="42611" src_ip="207.210.109.114" src_port="25"/>
    </slice>
    <from sec="1044162250" usec="0"/>
    <to sec="1044162261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.831756,1.90673,010,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
470[label="213.7.192.129s;97pkt 97fpkt", shape=rectangle, color=red];
748[label="213.7.192.129s;97pkt 97fpkt", shape=ellipse, color=green];
4041[label="213.7.192.129;204pkt 204fpkt", shape=pentagon, color=darkviolet];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.192.129:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 1666: (0.376884%)&lt;BR/&gt; 1664: (0.376884%)&lt;BR/&gt; 1662: (0.376884%)&lt;BR/&gt; 1660: (0.376884%)&gt;];
}
470--748[label="1;97pkt 97fpkt"];
470--4041[label="0.989691;96pkt 96fpkt"];
748--4041[label="0.989691;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="213.7.192.129"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044162047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
473[label="193.130.153.171s;137pkt 137fpkt", shape=rectangle, color=red];
749[label="193.130.153.171s;64pkt 64fpkt", shape=ellipse, color=green];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.130.153.171:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 52685: (0.497512%)&lt;BR/&gt; 52684: (0.497512%)&lt;BR/&gt; 52683: (0.497512%)&lt;BR/&gt; 52682: (0.497512%)&gt;];
}
473--749[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.130.153.171"/>
    </slice>
    <from sec="1044163229" usec="0"/>
    <to sec="1044163249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.789546,1.98787,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="206.6.44.83" dst_port="137" proto="udp" src_ip="204.241.220.204"/>
      <filter dst_ip="206.6.44.83" dst_port="137" proto="icmp" src_ip="204.241.220.204"/>
      <filter dst_ip="130.139.117.250" dst_port="137" proto="udp" src_ip="204.241.220.204"/>
      <filter dst_ip="130.139.117.250" dst_port="137" proto="icmp" src_ip="204.241.220.204"/>
      <from sec="1044163054" usec="0"/>
      <to sec="1044163065" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="206.6.44.83" dst_port="137" proto="udp" src_ip="136.254.88.204"/>
      <filter dst_ip="206.6.44.83" dst_port="137" proto="icmp" src_ip="136.254.88.204"/>
      <filter dst_ip="130.139.117.250" dst_port="137" proto="udp" src_ip="136.254.88.204"/>
      <filter dst_ip="130.139.117.250" dst_port="137" proto="icmp" src_ip="136.254.88.204"/>
      <from sec="1044163053" usec="0"/>
      <to sec="1044163064" usec="0"/>
    </slice>
    <from sec="1044163053" usec="0"/>
    <to sec="1044163065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,020,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
485[label="149.48.230.50d;71pkt 71fpkt", shape=rectangle, color=red];
755[label="149.48.230.50d;71pkt 71fpkt", shape=ellipse, color=green];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 149.48.230.50:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
485--755[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="149.48.230.50"/>
    </slice>
    <from sec="1044162841" usec="0"/>
    <to sec="1044162852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,020,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
487[label="212.77.26.77d;74pkt 74fpkt", shape=rectangle, color=red];
756[label="212.77.26.77d;74pkt 74fpkt", shape=ellipse, color=green];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 212.77.26.77:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
487--756[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_ip="212.77.26.77"/>
    </slice>
    <from sec="1044162492" usec="0"/>
    <to sec="1044162504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15632,1.93205,999,1 1 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
488[label="190.21.145.79d;1pkt 1fpkt", shape=rectangle, color=red];
757[label="190.21.145.79d;1pkt 1fpkt", shape=ellipse, color=green];
1078[label="201.2.17.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
1079[label="133.168.146.13;s;3pkt 3fpkt", shape=diamond, color=yellow];
1632[label="194.142.113.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
2483[label="133.168.146.13;s;3pkt 3fpkt", shape=hexagon, color=black];
2595[label="201.2.17.79;d;1pkt 1fpkt", shape=hexagon, color=black];
2720[label="194.142.113.9;d;1pkt 1fpkt", shape=hexagon, color=black];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.146.13:1059, 194.142.113.9:6699}[33.3333%]&lt;BR/&gt;{133.168.146.13:1286, 203.96.152.51:1863}[33.3333%]&lt;BR/&gt;{133.168.146.13:6699, 201.2.17.79:2305}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (41.6667%)&lt;BR/&gt; 2305: (25%)&lt;BR/&gt; 1059: (16.6667%)&lt;BR/&gt; 1863: (8.33333%)&lt;BR/&gt; 1286: (8.33333%)&gt;];
}
488--757[label="1;1pkt 1fpkt"];
488--1078[label="1;1pkt 1fpkt"];
488--1079[label="1;1pkt 1fpkt"];
488--2483[label="1;1pkt 1fpkt"];
488--2595[label="1;1pkt 1fpkt"];
757--1078[label="1;1pkt 1fpkt"];
757--1079[label="1;1pkt 1fpkt"];
757--2483[label="1;1pkt 1fpkt"];
757--2595[label="1;1pkt 1fpkt"];
1078--1079[label="1;1pkt 1fpkt"];
1078--2483[label="1;1pkt 1fpkt"];
1078--2595[label="1;1pkt 1fpkt"];
1079--1632[label="1;1pkt 1fpkt"];
1079--2483[label="1;3pkt 3fpkt"];
1079--2595[label="1;1pkt 1fpkt"];
1079--2720[label="1;1pkt 1fpkt"];
1632--2483[label="1;1pkt 1fpkt"];
1632--2720[label="1;1pkt 1fpkt"];
2483--2595[label="1;1pkt 1fpkt"];
2483--2720[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.2.17.79" dst_port="2305" src_ip="133.168.146.13" src_port="6699"/>
      <filter dst_ip="203.96.152.51" dst_port="1863" src_ip="133.168.146.13" src_port="1286"/>
      <filter dst_ip="194.142.113.9" dst_port="6699" src_ip="133.168.146.13" src_port="1059"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,020,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
505[label="219.24.235.238d;252pkt 252fpkt", shape=rectangle, color=red];
761[label="219.24.235.238d;83pkt 83fpkt", shape=ellipse, color=green];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 219.24.235.238:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
505--761[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_ip="219.24.235.238"/>
    </slice>
    <from sec="1044162886" usec="0"/>
    <to sec="1044162926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,020,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
499[label="152.238.141.255d;204pkt 204fpkt", shape=rectangle, color=red];
763[label="152.238.141.255d;87pkt 87fpkt", shape=ellipse, color=green];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 152.238.141.255:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
499--763[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_ip="152.238.141.255"/>
    </slice>
    <from sec="1044162714" usec="0"/>
    <to sec="1044162744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,020,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
507[label="218.243.161.59d;128pkt 128fpkt", shape=rectangle, color=red];
764[label="218.243.161.59d;64pkt 64fpkt", shape=ellipse, color=green];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 218.243.161.59:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
507--764[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_ip="218.243.161.59"/>
    </slice>
    <from sec="1044162118" usec="0"/>
    <to sec="1044162138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,020,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
512[label="217.154.144.122d;66pkt 66fpkt", shape=rectangle, color=red];
765[label="217.154.144.122d;66pkt 66fpkt", shape=ellipse, color=green];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 217.154.144.122:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
512--765[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_ip="217.154.144.122"/>
    </slice>
    <from sec="1044163238" usec="0"/>
    <to sec="1044163249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.789546,1.98787,020,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.156.106.184" proto="icmp"/>
      <filter dst_ip="209.156.106.184" proto="icmp"/>
      <filter dst_ip="209.156.106.184" proto="icmp"/>
      <filter dst_ip="209.156.106.184" proto="icmp"/>
      <from sec="1044162293" usec="0"/>
      <to sec="1044162304" usec="0"/>
    </slice>
    <from sec="1044162293" usec="0"/>
    <to sec="1044162304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.867618,1.95754,020,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_240{
style=filled;
color=gray75;
515[label="204.158.128.186d;176pkt 176fpkt", shape=rectangle, color=red];
767[label="204.158.128.186d;69pkt 69fpkt", shape=ellipse, color=green];
stat240[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 204.158.128.186:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
515--767[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_ip="204.158.128.186"/>
    </slice>
    <from sec="1044162572" usec="0"/>
    <to sec="1044162604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23847,2.0967,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="130.139.87.200" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="130.139.87.200" src_port="1027"/>
      <filter dst_port="80" proto="tcp" src_ip="130.139.87.200" src_port="1027"/>
      <filter dst_port="80" proto="udp" src_ip="130.139.87.200" src_port="1027"/>
      <filter dst_port="53" proto="tcp" src_ip="130.139.87.200" src_port="1027"/>
      <filter dst_port="53" proto="udp" src_ip="130.139.87.200" src_port="1027"/>
      <from sec="1044162973" usec="0"/>
      <to sec="1044162980" usec="0"/>
    </slice>
    <from sec="1044162965" usec="0"/>
    <to sec="1044162980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38062,2.07744,002,0 1 1 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
583[label="203.84.168.25s;163pkt 163fpkt", shape=ellipse, color=green];
800[label="203.84.168.25s;163pkt 163fpkt", shape=triangle, color=blue];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.84.168.25:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
583--800[label="1;163pkt 163fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.84.168.25" src_port="1028"/>
    </slice>
    <from sec="1044163514" usec="0"/>
    <to sec="1044163528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23847,2.0967,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="tcp" src_ip="213.14.90.164" src_port="2787"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="udp" src_ip="213.14.90.164" src_port="2787"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="tcp" src_ip="213.14.90.164" src_port="8080"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="udp" src_ip="213.14.90.164" src_port="8080"/>
      <from sec="1044162659" usec="0"/>
      <to sec="1044162670" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="tcp" src_ip="206.27.178.164" src_port="2787"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="udp" src_ip="206.27.178.164" src_port="2787"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="tcp" src_ip="206.27.178.164" src_port="8080"/>
      <filter dst_ip="207.35.51.2" dst_port="137" proto="udp" src_ip="206.27.178.164" src_port="8080"/>
      <from sec="1044162660" usec="0"/>
      <to sec="1044162670" usec="0"/>
    </slice>
    <from sec="1044162659" usec="0"/>
    <to sec="1044162670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
865[label="148.94.200.186;d;4pkt 4fpkt", shape=diamond, color=yellow];
868[label="207.161.68.247;s;2pkt 2fpkt", shape=diamond, color=yellow];
3074[label="207.161.68.247;s;2pkt 2fpkt", shape=hexagon, color=black];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.72.1.102:29338, 148.94.200.186:8080}[25%]&lt;BR/&gt;{213.208.130.186:80, 148.94.200.186:1211}[25%]&lt;BR/&gt;{207.161.68.247:80, 148.94.200.186:1043}[25%]&lt;BR/&gt;{207.161.68.247:80, 148.94.200.186:4589}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.75%)&lt;BR/&gt; 4589: (18.75%)&lt;BR/&gt; 1043: (18.75%)&lt;BR/&gt; 29338: (6.25%)&lt;BR/&gt; 8080: (6.25%)&gt;];
}
865--868[label="1;2pkt 2fpkt"];
865--3074[label="1;2pkt 2fpkt"];
868--3074[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.200.186" dst_port="4589" src_ip="207.161.68.247" src_port="80"/>
      <filter dst_ip="148.94.200.186" dst_port="1043" src_ip="207.161.68.247" src_port="80"/>
      <filter dst_ip="148.94.200.186" dst_port="1211" src_ip="213.208.130.186" src_port="80"/>
      <filter dst_ip="148.94.200.186" dst_port="8080" src_ip="206.72.1.102" src_port="29338"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06291,1.92654,999,1 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
4[label="134.225.76.16s;1pkt 1fpkt", shape=rectangle, color=red];
878[label="130.138.161.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
879[label="134.225.76.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
2366[label="130.138.161.137;d;1pkt 1fpkt", shape=hexagon, color=black];
4718[label="134.225.76.16;1pkt 1fpkt", shape=invtriangle, color=brown];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.225.76.16:1065, 130.138.161.137:20}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1065: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
4--878[label="1;1pkt 1fpkt"];
4--879[label="1;1pkt 1fpkt"];
4--2366[label="1;1pkt 1fpkt"];
4--4718[label="1;1pkt 1fpkt"];
878--879[label="1;1pkt 1fpkt"];
878--2366[label="1;1pkt 1fpkt"];
878--4718[label="1;1pkt 1fpkt"];
879--2366[label="1;1pkt 1fpkt"];
879--4718[label="1;1pkt 1fpkt"];
2366--4718[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.161.137" dst_port="20" src_ip="134.225.76.16" src_port="1065"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
923[label="210.46.110.143;d;1pkt 1fpkt", shape=diamond, color=yellow];
924[label="130.139.171.63;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.171.63:6699, 210.46.110.143:64607}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64607: (50%)&lt;BR/&gt; 6699: (50%)&gt;];
}
923--924[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.46.110.143" dst_port="64607" src_ip="130.139.171.63" src_port="6699"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044162562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
925[label="194.143.220.31;d;4pkt 4fpkt", shape=diamond, color=yellow];
926[label="206.6.41.59;s;18pkt 18fpkt", shape=diamond, color=yellow];
3019[label="206.6.41.59;s;16pkt 16fpkt", shape=hexagon, color=black];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.6.41.59:1035, *:53}[61.1111%]&lt;BR/&gt;{206.6.41.59:*, 194.143.220.31:6688}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1035: (28.9474%)&lt;BR/&gt; 53: (28.9474%)&lt;BR/&gt; 6688: (15.7895%)&lt;BR/&gt; 6314: (3.94737%)&lt;BR/&gt; 6259: (3.94737%)&gt;];
}
925--926[label="1;4pkt 4fpkt"];
925--3019[label="1;4pkt 4fpkt"];
926--3019[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="194.143.220.31" dst_port="6688" src_ip="206.6.41.59"/>
      <filter dst_port="53" src_ip="206.6.41.59" src_port="1035"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
915[label="133.168.148.177;d;1pkt 1fpkt", shape=diamond, color=yellow];
931[label="193.130.9.62;s;1pkt 1fpkt", shape=diamond, color=yellow];
2344[label="193.130.9.62;s;1pkt 1fpkt", shape=hexagon, color=black];
2413[label="133.168.148.177;d;1pkt 1fpkt", shape=hexagon, color=black];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.130.9.62:41965, 133.168.148.177:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41965: (50%)&lt;BR/&gt; 6699: (50%)&gt;];
}
915--931[label="1;1pkt 1fpkt"];
915--2344[label="1;1pkt 1fpkt"];
915--2413[label="1;1pkt 1fpkt"];
931--2344[label="1;1pkt 1fpkt"];
931--2413[label="1;1pkt 1fpkt"];
2344--2413[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.168.148.177" dst_port="6699" src_ip="193.130.9.62" src_port="41965"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_253{
style=filled;
color=gray75;
957[label="130.138.33.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
958[label="208.131.17.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
2349[label="208.131.17.52;s;1pkt 1fpkt", shape=hexagon, color=black];
stat253[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.131.17.52:1755, 130.138.33.130:1953}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1953: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
957--958[label="1;1pkt 1fpkt"];
957--2349[label="1;1pkt 1fpkt"];
958--2349[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.33.130" dst_port="1953" src_ip="208.131.17.52" src_port="1755"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044162127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
961[label="165.155.51.246;s;4pkt 4fpkt", shape=diamond, color=yellow];
962[label="190.118.13.92;d;4pkt 4fpkt", shape=diamond, color=yellow];
2375[label="190.118.13.92;d;3pkt 3fpkt", shape=hexagon, color=black];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.51.246:80, 190.118.13.92:1118}[25%]&lt;BR/&gt;{165.155.51.246:80, 190.118.13.92:1119}[25%]&lt;BR/&gt;{165.155.51.246:80, 190.118.13.92:1120}[25%]&lt;BR/&gt;{165.155.51.246:80, 190.118.13.92:1121}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1120: (13.6364%)&lt;BR/&gt; 1119: (13.6364%)&lt;BR/&gt; 1118: (13.6364%)&lt;BR/&gt; 1121: (9.09091%)&gt;];
}
961--962[label="1;4pkt 4fpkt"];
961--2375[label="1;3pkt 3fpkt"];
962--2375[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="190.118.13.92" dst_port="1121" src_ip="165.155.51.246" src_port="80"/>
      <filter dst_ip="190.118.13.92" dst_port="1120" src_ip="165.155.51.246" src_port="80"/>
      <filter dst_ip="190.118.13.92" dst_port="1119" src_ip="165.155.51.246" src_port="80"/>
      <filter dst_ip="190.118.13.92" dst_port="1118" src_ip="165.155.51.246" src_port="80"/>
    </slice>
    <from sec="1044162625" usec="0"/>
    <to sec="1044163430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="207.142.93.48"/>
      <from sec="1044162373" usec="0"/>
      <to sec="1044163458" usec="0"/>
    </slice>
    <from sec="1044162373" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
1021[label="206.34.106.243;d;10pkt 10fpkt", shape=diamond, color=yellow];
1022[label="217.138.173.63;s;10pkt 10fpkt", shape=diamond, color=yellow];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.138.173.63:20, 206.34.106.243:*}[50%]&lt;BR/&gt;{217.138.173.63:21, 206.34.106.243:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (25%)&lt;BR/&gt; 20: (25%)&lt;BR/&gt; 1445: (5%)&lt;BR/&gt; 1444: (5%)&lt;BR/&gt; 1443: (5%)&gt;];
}
1021--1022[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="206.34.106.243" src_ip="217.138.173.63" src_port="21"/>
      <filter dst_ip="206.34.106.243" src_ip="217.138.173.63" src_port="20"/>
    </slice>
    <from sec="1044162008" usec="0"/>
    <to sec="1044162109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950695,1.9018,502,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
60[label="133.61.249.156s;1pkt 1fpkt", shape=rectangle, color=red];
858[label="193.233.251.32;d;1pkt 1fpkt", shape=diamond, color=yellow];
1042[label="133.61.249.156;s;1pkt 1fpkt", shape=diamond, color=yellow];
2364[label="193.233.251.32;d;1pkt 1fpkt", shape=hexagon, color=black];
2955[label="133.61.249.156;s;2pkt 2fpkt", shape=hexagon, color=black];
4199[label="133.61.249.156;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.61.249.156:14622, 193.233.251.32:22}[50%]&lt;BR/&gt;{133.61.249.156:24347, 193.233.251.32:22}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 24347: (31.25%)&lt;BR/&gt; 14622: (18.75%)&gt;];
}
60--2955[label="1;1pkt 1fpkt"];
60--4199[label="1;1pkt 1fpkt"];
858--1042[label="1;1pkt 1fpkt"];
858--2364[label="1;1pkt 1fpkt"];
858--2955[label="1;1pkt 1fpkt"];
858--4199[label="1;1pkt 1fpkt"];
1042--2364[label="1;1pkt 1fpkt"];
1042--2955[label="1;1pkt 1fpkt"];
1042--4199[label="1;1pkt 1fpkt"];
2364--2955[label="1;1pkt 1fpkt"];
2364--4199[label="1;1pkt 1fpkt"];
2955--4199[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.233.251.32" dst_port="22" src_ip="133.61.249.156" src_port="24347"/>
      <filter dst_ip="193.233.251.32" dst_port="22" src_ip="133.61.249.156" src_port="14622"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
1066[label="207.40.162.191;d;2pkt 2fpkt", shape=diamond, color=yellow];
1067[label="190.25.76.208;s;2pkt 2fpkt", shape=diamond, color=yellow];
2475[label="207.40.162.191;d;2pkt 2fpkt", shape=hexagon, color=black];
2476[label="190.25.76.208;s;2pkt 2fpkt", shape=hexagon, color=black];
4456[label="190.25.76.208;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5230[label="190.25.76.208;1pkt 1fpkt", shape=invtriangle, color=brown];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.25.76.208:5121, 207.40.162.191:55771}[50%]&lt;BR/&gt;{190.25.76.208:5121, 207.40.162.191:55775}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5121: (50%)&lt;BR/&gt; 55771: (27.2727%)&lt;BR/&gt; 55775: (22.7273%)&gt;];
}
1066--1067[label="1;2pkt 2fpkt"];
1066--2475[label="1;2pkt 2fpkt"];
1066--2476[label="1;2pkt 2fpkt"];
1066--4456[label="1;2pkt 2fpkt"];
1066--5230[label="1;1pkt 1fpkt"];
1067--2475[label="1;2pkt 2fpkt"];
1067--2476[label="1;2pkt 2fpkt"];
1067--4456[label="1;2pkt 2fpkt"];
1067--5230[label="1;1pkt 1fpkt"];
2475--2476[label="1;2pkt 2fpkt"];
2475--4456[label="1;2pkt 2fpkt"];
2475--5230[label="1;1pkt 1fpkt"];
2476--4456[label="1;2pkt 2fpkt"];
2476--5230[label="1;1pkt 1fpkt"];
4456--5230[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.40.162.191" dst_port="55775" src_ip="190.25.76.208" src_port="5121"/>
      <filter dst_ip="207.40.162.191" dst_port="55771" src_ip="190.25.76.208" src_port="5121"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
1084[label="165.155.199.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
1085[label="192.98.22.190;d;1pkt 1fpkt", shape=diamond, color=yellow];
2485[label="192.98.22.190;d;1pkt 1fpkt", shape=hexagon, color=black];
2642[label="165.155.199.1;s;1pkt 1fpkt", shape=hexagon, color=black];
3272[label="165.155.199.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.199.1:49153, 192.98.22.190:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49153: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1084--1085[label="1;1pkt 1fpkt"];
1084--2485[label="1;1pkt 1fpkt"];
1084--2642[label="1;1pkt 1fpkt"];
1084--3272[label="1;1pkt 1fpkt"];
1085--2485[label="1;1pkt 1fpkt"];
1085--2642[label="1;1pkt 1fpkt"];
1085--3272[label="1;1pkt 1fpkt"];
2485--2642[label="1;1pkt 1fpkt"];
2485--3272[label="1;1pkt 1fpkt"];
2642--3272[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.98.22.190" dst_port="554" src_ip="165.155.199.1" src_port="49153"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044162543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03384,1.8749,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
18[label="165.155.67.31s;1pkt 1fpkt", shape=rectangle, color=red];
949[label="165.155.67.31;s;2242pkt 2242fpkt", shape=diamond, color=yellow];
979[label="221.88.90.212;d;1pkt 1fpkt", shape=diamond, color=yellow];
1001[label="204.68.12.203;d;1pkt 1fpkt", shape=diamond, color=yellow];
1090[label="220.9.11.215;d;1pkt 1fpkt", shape=diamond, color=yellow];
1370[label="221.181.90.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
1565[label="213.82.70.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
1655[label="221.91.201.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
2387[label="220.9.11.215;d;1pkt 1fpkt", shape=hexagon, color=black];
2420[label="221.88.90.212;d;1pkt 1fpkt", shape=hexagon, color=black];
2600[label="204.68.12.203;d;1pkt 1fpkt", shape=hexagon, color=black];
2776[label="213.82.70.196;d;1pkt 1fpkt", shape=hexagon, color=black];
3496[label="165.155.67.31;2243pkt 2243fpkt", shape=pentagon, color=darkviolet];
4765[label="165.155.67.31;2243pkt 2243fpkt", shape=invtriangle, color=brown];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.67.31:*, *:4662}[84.9755%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (42.484%)&lt;BR/&gt; 4661: (3.09393%)&lt;BR/&gt; 1061: (0.934857%)&lt;BR/&gt; 4665: (0.756789%)&lt;BR/&gt; 80: (0.356136%)&gt;];
}
18--949[label="1;1pkt 1fpkt"];
18--1090[label="1;1pkt 1fpkt"];
18--2387[label="1;1pkt 1fpkt"];
18--3496[label="1;1pkt 1fpkt"];
18--4765[label="1;1pkt 1fpkt"];
949--979[label="1;1pkt 1fpkt"];
949--1001[label="1;1pkt 1fpkt"];
949--1090[label="1;1pkt 1fpkt"];
949--1370[label="1;1pkt 1fpkt"];
949--1565[label="1;1pkt 1fpkt"];
949--1655[label="1;1pkt 1fpkt"];
949--2387[label="1;1pkt 1fpkt"];
949--2420[label="1;1pkt 1fpkt"];
949--2600[label="1;1pkt 1fpkt"];
949--2776[label="1;1pkt 1fpkt"];
949--3232[label="0.00183486;3pkt 3fpkt"];
949--3249[label="0.00183486;3pkt 3fpkt"];
949--3252[label="0.00183374;3pkt 3fpkt"];
949--3496[label="1;2242pkt 2242fpkt"];
949--4765[label="1;2242pkt 2242fpkt"];
979--2420[label="1;1pkt 1fpkt"];
979--3496[label="1;1pkt 1fpkt"];
979--4765[label="1;1pkt 1fpkt"];
1001--2600[label="1;1pkt 1fpkt"];
1001--3496[label="1;1pkt 1fpkt"];
1001--4765[label="1;1pkt 1fpkt"];
1090--2387[label="1;1pkt 1fpkt"];
1090--3496[label="1;1pkt 1fpkt"];
1090--4765[label="1;1pkt 1fpkt"];
1370--3496[label="1;1pkt 1fpkt"];
1370--4765[label="1;1pkt 1fpkt"];
1565--2776[label="1;1pkt 1fpkt"];
1565--3496[label="1;1pkt 1fpkt"];
1565--4765[label="1;1pkt 1fpkt"];
1655--3496[label="1;1pkt 1fpkt"];
1655--4765[label="1;1pkt 1fpkt"];
2387--3496[label="1;1pkt 1fpkt"];
2387--4765[label="1;1pkt 1fpkt"];
2420--3496[label="1;1pkt 1fpkt"];
2420--4765[label="1;1pkt 1fpkt"];
2600--3496[label="1;1pkt 1fpkt"];
2600--4765[label="1;1pkt 1fpkt"];
2776--3496[label="1;1pkt 1fpkt"];
2776--4765[label="1;1pkt 1fpkt"];
3496--4765[label="1;2243pkt 2243fpkt"];
</description>
    <slice>
      <filter dst_port="4662" src_ip="165.155.67.31"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.771364,1.91509,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
1094[label="149.229.90.86;d;1pkt 1fpkt", shape=diamond, color=yellow];
1095[label="133.168.144.170;s;3pkt 3fpkt", shape=diamond, color=yellow];
4278[label="133.168.144.170;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5150[label="133.168.144.170;3pkt 3fpkt", shape=invtriangle, color=brown];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.144.170:1487, 136.250.241.66:6699}[33.3333%]&lt;BR/&gt;{133.168.144.170:6699, 149.229.90.86:1340}[33.3333%]&lt;BR/&gt;{133.168.144.170:1389, 203.96.152.233:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (35%)&lt;BR/&gt; 1340: (20%)&lt;BR/&gt; 1863: (15%)&lt;BR/&gt; 1487: (15%)&lt;BR/&gt; 1389: (15%)&gt;];
}
1094--1095[label="1;1pkt 1fpkt"];
1094--4278[label="1;1pkt 1fpkt"];
1094--5150[label="1;1pkt 1fpkt"];
1095--4278[label="1;3pkt 3fpkt"];
1095--5150[label="1;3pkt 3fpkt"];
4278--5150[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="203.96.152.233" dst_port="1863" src_ip="133.168.144.170" src_port="1389"/>
      <filter dst_ip="149.229.90.86" dst_port="1340" src_ip="133.168.144.170" src_port="6699"/>
      <filter dst_ip="136.250.241.66" dst_port="6699" src_ip="133.168.144.170" src_port="1487"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
1096[label="133.179.178.143;d;1pkt 1fpkt", shape=diamond, color=yellow];
1097[label="138.245.47.201;s;1pkt 1fpkt", shape=diamond, color=yellow];
2389[label="133.179.178.143;d;1pkt 1fpkt", shape=hexagon, color=black];
2876[label="138.245.47.201;s;1pkt 1fpkt", shape=hexagon, color=black];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.245.47.201:6699, 133.179.178.143:1346}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1346: (50%)&gt;];
}
1096--1097[label="1;1pkt 1fpkt"];
1096--2389[label="1;1pkt 1fpkt"];
1096--2876[label="1;1pkt 1fpkt"];
1097--2389[label="1;1pkt 1fpkt"];
1097--2876[label="1;1pkt 1fpkt"];
2389--2876[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.179.178.143" dst_port="1346" src_ip="138.245.47.201" src_port="6699"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
1129[label="148.94.203.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
1131[label="136.164.192.90;s;1pkt 1fpkt", shape=diamond, color=yellow];
2692[label="148.94.203.172;d;1pkt 1fpkt", shape=hexagon, color=black];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.164.192.90:3192, 148.94.203.172:15930}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15930: (50%)&lt;BR/&gt; 3192: (50%)&gt;];
}
1129--1131[label="1;1pkt 1fpkt"];
1129--2692[label="1;1pkt 1fpkt"];
1131--2692[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.203.172" dst_port="15930" src_ip="136.164.192.90" src_port="3192"/>
    </slice>
    <from sec="1044162004" usec="0"/>
    <to sec="1044163202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
1150[label="207.40.179.96;d;28pkt 28fpkt", shape=diamond, color=yellow];
1155[label="159.41.4.49;s;10pkt 10fpkt", shape=diamond, color=yellow];
2441[label="159.41.4.49;s;10pkt 10fpkt", shape=hexagon, color=black];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{159.41.4.49:*, 207.40.179.96:80}[35.7143%]&lt;BR/&gt;{196.194.207.135:*, 207.40.179.96:80}[32.1429%]&lt;BR/&gt;{196.33.148.6:*, 207.40.179.96:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51292: (3.125%)&lt;BR/&gt; 50719: (3.125%)&lt;BR/&gt; 28018: (3.125%)&lt;BR/&gt; 20743: (3.125%)&gt;];
}
1150--1155[label="1;10pkt 10fpkt"];
1150--2441[label="1;10pkt 10fpkt"];
1155--2441[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="207.40.179.96" dst_port="80" src_ip="159.41.4.49"/>
      <filter dst_ip="207.40.179.96" dst_port="80" src_ip="196.194.207.135"/>
      <filter dst_ip="207.40.179.96" dst_port="80" src_ip="196.33.148.6"/>
    </slice>
    <from sec="1044162048" usec="0"/>
    <to sec="1044162326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950695,1.9018,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
57[label="219.72.221.151s;1pkt 1fpkt", shape=rectangle, color=red];
909[label="162.0.237.151;s;13pkt 13fpkt", shape=diamond, color=yellow];
1172[label="212.174.8.197;d;3pkt 3fpkt", shape=diamond, color=yellow];
2637[label="212.174.8.197;d;1pkt 1fpkt", shape=hexagon, color=black];
2713[label="162.0.237.151;s;11pkt 11fpkt", shape=hexagon, color=black];
4173[label="162.0.237.151;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.237.151:80, 207.82.130.89:*}[76.9231%]&lt;BR/&gt;{162.0.237.151:*, 212.174.8.197:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.5854%)&lt;BR/&gt; 20: (9.7561%)&lt;BR/&gt; 5025: (6.09756%)&lt;BR/&gt; 14506: (3.65854%)&lt;BR/&gt; 14372: (3.65854%)&gt;];
}
57--909[label="1;1pkt 1fpkt"];
57--1172[label="1;1pkt 1fpkt"];
57--2637[label="1;1pkt 1fpkt"];
57--2713[label="1;1pkt 1fpkt"];
909--1172[label="1;3pkt 3fpkt"];
909--2637[label="1;1pkt 1fpkt"];
909--2713[label="1;11pkt 11fpkt"];
909--4173[label="1;12pkt 12fpkt"];
1172--2637[label="1;1pkt 1fpkt"];
1172--2713[label="0.333333;1pkt 1fpkt"];
1172--4173[label="0.666667;2pkt 2fpkt"];
2637--2713[label="1;1pkt 1fpkt"];
2713--4173[label="0.909091;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="212.174.8.197" src_ip="162.0.237.151"/>
      <filter dst_ip="207.82.130.89" src_ip="162.0.237.151" src_port="80"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
1207[label="207.164.179.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
1208[label="220.62.193.241;s;1pkt 1fpkt", shape=diamond, color=yellow];
2873[label="207.164.179.217;d;1pkt 1fpkt", shape=hexagon, color=black];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.62.193.241:6699, 207.164.179.217:1728}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1728: (50%)&gt;];
}
1207--1208[label="1;1pkt 1fpkt"];
1207--2873[label="1;1pkt 1fpkt"];
1208--2873[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.164.179.217" dst_port="1728" src_ip="220.62.193.241" src_port="6699"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03384,1.8749,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
421[label="193.24.214.216s;1pkt 1fpkt", shape=rectangle, color=red];
1236[label="206.34.92.167;d;9pkt 9fpkt", shape=diamond, color=yellow];
1237[label="136.184.34.216;s;2pkt 2fpkt", shape=diamond, color=yellow];
2603[label="206.34.92.167;d;8pkt 8fpkt", shape=hexagon, color=black];
4489[label="136.184.34.216;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5244[label="136.184.34.216;1pkt 1fpkt", shape=invtriangle, color=brown];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.201.160.32:*, 206.34.92.167:3647}[33.3333%]&lt;BR/&gt;{136.184.34.216:*, 206.34.92.167:3647}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3647: (40.9091%)&lt;BR/&gt; 1516: (13.6364%)&lt;BR/&gt; 1512: (6.81818%)&lt;BR/&gt; 3788: (4.54545%)&lt;BR/&gt; 3781: (4.54545%)&gt;];
}
421--1236[label="1;1pkt 1fpkt"];
421--1237[label="1;1pkt 1fpkt"];
421--2603[label="1;1pkt 1fpkt"];
421--4489[label="1;1pkt 1fpkt"];
421--5244[label="1;1pkt 1fpkt"];
1236--1237[label="1;2pkt 2fpkt"];
1236--2603[label="1;8pkt 8fpkt"];
1236--4489[label="1;1pkt 1fpkt"];
1236--5244[label="1;1pkt 1fpkt"];
1237--2603[label="1;2pkt 2fpkt"];
1237--4489[label="1;1pkt 1fpkt"];
1237--5244[label="1;1pkt 1fpkt"];
2603--4489[label="1;1pkt 1fpkt"];
2603--5244[label="1;1pkt 1fpkt"];
4489--5244[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.34.92.167" dst_port="3647" src_ip="196.201.160.32"/>
      <filter dst_ip="206.34.92.167" dst_port="3647" src_ip="136.184.34.216"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
1130[label="148.94.203.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
1275[label="136.164.192.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
2510[label="136.164.192.90;d;1pkt 1fpkt", shape=hexagon, color=black];
2653[label="148.94.203.172;s;1pkt 1fpkt", shape=hexagon, color=black];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.94.203.172:15930, 136.164.192.90:3192}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15930: (50%)&lt;BR/&gt; 3192: (50%)&gt;];
}
1130--1275[label="1;1pkt 1fpkt"];
1130--2510[label="1;1pkt 1fpkt"];
1130--2653[label="1;1pkt 1fpkt"];
1275--2510[label="1;1pkt 1fpkt"];
1275--2653[label="1;1pkt 1fpkt"];
2510--2653[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.164.192.90" dst_port="3192" src_ip="148.94.203.172" src_port="15930"/>
    </slice>
    <from sec="1044162004" usec="0"/>
    <to sec="1044163202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
1076[label="133.168.144.15;d;6pkt 6fpkt", shape=diamond, color=yellow];
1292[label="190.25.76.199;s;1pkt 1fpkt", shape=diamond, color=yellow];
2443[label="190.25.76.199;s;1pkt 1fpkt", shape=hexagon, color=black];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.25.76.198:6121, 133.168.144.15:*}[33.3333%]&lt;BR/&gt;{*:5121, 133.168.144.15:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5121: (25%)&lt;BR/&gt; 1132: (18.75%)&lt;BR/&gt; 6121: (12.5%)&lt;BR/&gt; 6900: (6.25%)&lt;BR/&gt; 1863: (6.25%)&gt;];
}
1076--1292[label="1;1pkt 1fpkt"];
1076--2443[label="1;1pkt 1fpkt"];
1292--2443[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.168.144.15" src_port="5121"/>
      <filter dst_ip="133.168.144.15" src_ip="190.25.76.198" src_port="6121"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
1281[label="207.40.14.45;s;208pkt 208fpkt", shape=diamond, color=yellow];
1302[label="192.163.155.7;d;4pkt 4fpkt", shape=diamond, color=yellow];
1949[label="192.222.26.110;d;15pkt 15fpkt", shape=diamond, color=yellow];
2147[label="192.162.57.118;d;41pkt 41fpkt", shape=diamond, color=yellow];
2516[label="207.40.14.45;s;208pkt 208fpkt", shape=hexagon, color=black];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.40.14.45:*, *:80}[97.5962%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9496%)&lt;BR/&gt; 81: (0.840336%)&lt;BR/&gt; 2361: (0.315126%)&lt;BR/&gt; 2356: (0.315126%)&lt;BR/&gt; 2355: (0.315126%)&gt;];
}
1281--1302[label="1;4pkt 4fpkt"];
1281--1949[label="1;15pkt 15fpkt"];
1281--2114[label="0.0425532;2pkt 2fpkt"];
1281--2147[label="1;41pkt 41fpkt"];
1281--2516[label="1;208pkt 208fpkt"];
1281--2942[label="0.0540541;2pkt 2fpkt"];
1281--3232[label="0.00480769;1pkt 1fpkt"];
1281--3235[label="0.0144231;3pkt 3fpkt"];
1281--3238[label="0.0192308;4pkt 4fpkt"];
1281--3243[label="0.00480769;1pkt 1fpkt"];
1281--3249[label="0.00480769;1pkt 1fpkt"];
1281--3252[label="0.00480769;1pkt 1fpkt"];
1302--2516[label="1;4pkt 4fpkt"];
1949--2516[label="1;15pkt 15fpkt"];
2147--2516[label="1;41pkt 41fpkt"];
2516--2942[label="0.0540541;2pkt 2fpkt"];
2516--3232[label="0.00480769;1pkt 1fpkt"];
2516--3235[label="0.0144231;3pkt 3fpkt"];
2516--3238[label="0.0192308;4pkt 4fpkt"];
2516--3243[label="0.00480769;1pkt 1fpkt"];
2516--3249[label="0.00480769;1pkt 1fpkt"];
2516--3252[label="0.00480769;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="207.40.14.45"/>
    </slice>
    <from sec="1044162017" usec="0"/>
    <to sec="1044163435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
1303[label="162.0.202.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
1304[label="198.161.66.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
2525[label="198.161.66.2;s;1pkt 1fpkt", shape=hexagon, color=black];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.161.66.2:42369, 162.0.202.76:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42369: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1303--1304[label="1;1pkt 1fpkt"];
1303--2525[label="1;1pkt 1fpkt"];
1304--2525[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.0.202.76" dst_port="80" src_ip="198.161.66.2" src_port="42369"/>
    </slice>
    <from sec="1044162205" usec="0"/>
    <to sec="1044162399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_273{
style=filled;
color=gray75;
1165[label="209.157.25.121;s;1pkt 1fpkt", shape=diamond, color=yellow];
1314[label="148.94.2.202;d;3pkt 3fpkt", shape=diamond, color=yellow];
2451[label="209.157.25.121;s;1pkt 1fpkt", shape=hexagon, color=black];
2748[label="148.94.2.202;d;3pkt 3fpkt", shape=hexagon, color=black];
4003[label="209.157.25.121;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat273[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.157.25.120:1755, 148.94.2.202:4879}[33.3333%]&lt;BR/&gt;{209.157.25.121:1105, 148.94.2.202:4882}[33.3333%]&lt;BR/&gt;{203.96.152.136:1863, 148.94.2.202:4534}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4882: (27.7778%)&lt;BR/&gt; 1105: (27.7778%)&lt;BR/&gt; 4879: (11.1111%)&lt;BR/&gt; 4534: (11.1111%)&lt;BR/&gt; 1863: (11.1111%)&gt;];
}
1165--1314[label="1;1pkt 1fpkt"];
1165--2451[label="1;1pkt 1fpkt"];
1165--2748[label="1;1pkt 1fpkt"];
1165--4003[label="1;1pkt 1fpkt"];
1314--2451[label="1;1pkt 1fpkt"];
1314--2748[label="1;3pkt 3fpkt"];
1314--4003[label="1;1pkt 1fpkt"];
2451--2748[label="1;1pkt 1fpkt"];
2451--4003[label="1;1pkt 1fpkt"];
2748--4003[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.2.202" dst_port="4534" src_ip="203.96.152.136" src_port="1863"/>
      <filter dst_ip="148.94.2.202" dst_port="4882" src_ip="209.157.25.121" src_port="1105"/>
      <filter dst_ip="148.94.2.202" dst_port="4879" src_ip="209.157.25.120" src_port="1755"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044162793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.1.237.16"/>
      <from sec="1044162000" usec="0"/>
      <to sec="1044163368" usec="0"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
1386[label="216.10.139.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
1387[label="207.40.186.27;s;28pkt 28fpkt", shape=diamond, color=yellow];
2507[label="216.10.139.153;d;1pkt 1fpkt", shape=hexagon, color=black];
2508[label="207.40.186.27;s;28pkt 28fpkt", shape=hexagon, color=black];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.40.186.27:*, *:2234}[96.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2234: (46.5517%)&lt;BR/&gt; 5534: (3.44828%)&lt;BR/&gt; 4058: (3.44828%)&lt;BR/&gt; 4429: (1.72414%)&lt;BR/&gt; 4428: (1.72414%)&gt;];
}
1386--1387[label="1;1pkt 1fpkt"];
1386--2507[label="1;1pkt 1fpkt"];
1386--2508[label="1;1pkt 1fpkt"];
1387--2507[label="1;1pkt 1fpkt"];
1387--2508[label="1;28pkt 28fpkt"];
2507--2508[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="2234" src_ip="207.40.186.27"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
1154[label="159.41.4.49;d;10pkt 10fpkt", shape=diamond, color=yellow];
1407[label="207.40.179.96;s;27pkt 27fpkt", shape=diamond, color=yellow];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.40.179.96:80, 159.41.4.49:*}[37.037%]&lt;BR/&gt;{207.40.179.96:80, 196.194.207.135:*}[33.3333%]&lt;BR/&gt;{207.40.179.96:80, 196.33.148.6:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51292: (2.7027%)&lt;BR/&gt; 50719: (2.7027%)&lt;BR/&gt; 28018: (2.7027%)&lt;BR/&gt; 20743: (2.7027%)&gt;];
}
1154--1407[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="159.41.4.49" src_ip="207.40.179.96" src_port="80"/>
      <filter dst_ip="196.194.207.135" src_ip="207.40.179.96" src_port="80"/>
      <filter dst_ip="196.33.148.6" src_ip="207.40.179.96" src_port="80"/>
    </slice>
    <from sec="1044162048" usec="0"/>
    <to sec="1044162326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
1490[label="148.94.202.65;s;9pkt 9fpkt", shape=diamond, color=yellow];
1511[label="208.104.97.76;d;6pkt 6fpkt", shape=diamond, color=yellow];
2738[label="208.104.97.76;d;6pkt 6fpkt", shape=hexagon, color=black];
2783[label="148.94.202.65;s;9pkt 9fpkt", shape=hexagon, color=black];
3688[label="148.94.202.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.94.202.65:*, 208.104.97.76:20116}[22.2222%]&lt;BR/&gt;{148.94.202.65:*, 208.104.97.76:20242}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20242: (12.9032%)&lt;BR/&gt; 20116: (12.9032%)&lt;BR/&gt; 20100: (8.06452%)&lt;BR/&gt; 2865: (8.06452%)&lt;BR/&gt; 20087: (6.45161%)&gt;];
}
1490--1511[label="1;6pkt 6fpkt"];
1490--2738[label="1;6pkt 6fpkt"];
1490--2783[label="1;9pkt 9fpkt"];
1490--3688[label="1;1pkt 1fpkt"];
1511--2738[label="1;6pkt 6fpkt"];
1511--2783[label="1;6pkt 6fpkt"];
1511--3688[label="1;1pkt 1fpkt"];
2738--2783[label="1;6pkt 6fpkt"];
2738--3688[label="1;1pkt 1fpkt"];
2783--3688[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.104.97.76" dst_port="20242" src_ip="148.94.202.65"/>
      <filter dst_ip="208.104.97.76" dst_port="20116" src_ip="148.94.202.65"/>
    </slice>
    <from sec="1044162020" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
872[label="190.108.183.29;s;15pkt 15fpkt", shape=diamond, color=yellow];
1520[label="165.155.142.162;d;15pkt 15fpkt", shape=diamond, color=yellow];
2808[label="190.108.183.29;s;1pkt 1fpkt", shape=hexagon, color=black];
3487[label="190.108.183.29;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4759[label="190.108.183.29;18pkt 18fpkt", shape=invtriangle, color=brown];
5360[label="190.108.183.29;18pkt 18fpkt", shape=invhouse, color=bisque];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.108.183.29:1755, 165.155.142.162:*}[94.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 1202: (3.57143%)&lt;BR/&gt; 1285: (2.97619%)&lt;BR/&gt; 1281: (2.97619%)&lt;BR/&gt; 1277: (2.97619%)&gt;];
}
872--1520[label="1;15pkt 15fpkt"];
872--2808[label="1;1pkt 1fpkt"];
872--3487[label="1;15pkt 15fpkt"];
872--4759[label="1;15pkt 15fpkt"];
872--5360[label="1;15pkt 15fpkt"];
1520--2808[label="1;1pkt 1fpkt"];
1520--3487[label="1;15pkt 15fpkt"];
1520--4759[label="1;15pkt 15fpkt"];
1520--5360[label="1;15pkt 15fpkt"];
2808--3487[label="1;1pkt 1fpkt"];
2808--4759[label="1;1pkt 1fpkt"];
2808--5360[label="1;1pkt 1fpkt"];
3487--4759[label="1;17pkt 17fpkt"];
3487--5360[label="1;17pkt 17fpkt"];
4759--5360[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="165.155.142.162" src_ip="190.108.183.29" src_port="1755"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
1521[label="148.94.204.215;d;235pkt 235fpkt", shape=diamond, color=yellow];
1522[label="192.215.111.17;s;235pkt 235fpkt", shape=diamond, color=yellow];
2797[label="148.94.204.215;d;235pkt 235fpkt", shape=hexagon, color=black];
3402[label="192.215.111.17;242pkt 242fpkt", shape=pentagon, color=darkviolet];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.215.111.17:80, 148.94.204.215:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2819: (0.211193%)&lt;BR/&gt; 2817: (0.211193%)&lt;BR/&gt; 2815: (0.211193%)&lt;BR/&gt; 2813: (0.211193%)&gt;];
}
1521--1522[label="1;235pkt 235fpkt"];
1521--2797[label="1;235pkt 235fpkt"];
1521--3402[label="0.995745;234pkt 234fpkt"];
1522--2797[label="1;235pkt 235fpkt"];
1522--3402[label="0.995745;234pkt 234fpkt"];
2797--3402[label="0.995745;234pkt 234fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.204.215" src_ip="192.215.111.17" src_port="80"/>
    </slice>
    <from sec="1044162374" usec="0"/>
    <to sec="1044163522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.655737,1.94144,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
1489[label="207.40.9.66;s;9pkt 9fpkt", shape=diamond, color=yellow];
1528[label="136.90.175.58;d;3pkt 3fpkt", shape=diamond, color=yellow];
3690[label="207.40.9.66;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.40.9.66:80, 149.203.247.89:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.875%)&lt;BR/&gt; 1027: (4.6875%)&lt;BR/&gt; 1026: (4.6875%)&lt;BR/&gt; 1025: (4.6875%)&lt;BR/&gt; 59290: (3.125%)&gt;];
}
1489--1528[label="1;3pkt 3fpkt"];
1489--3690[label="0.888889;8pkt 8fpkt"];
1528--3690[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.203.247.89" src_ip="207.40.9.66" src_port="80"/>
    </slice>
    <from sec="1044162012" usec="0"/>
    <to sec="1044163481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
1533[label="193.241.84.199;s;2pkt 2fpkt", shape=diamond, color=yellow];
1534[label="165.155.141.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
2675[label="165.155.141.60;d;1pkt 1fpkt", shape=hexagon, color=black];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.241.84.199:6664, 165.155.141.60:2836}[50%]&lt;BR/&gt;{193.241.84.199:6667, 162.0.206.198:1104}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6664: (37.5%)&lt;BR/&gt; 2836: (37.5%)&lt;BR/&gt; 6667: (12.5%)&lt;BR/&gt; 1104: (12.5%)&gt;];
}
1533--1534[label="1;1pkt 1fpkt"];
1533--2675[label="1;1pkt 1fpkt"];
1534--2675[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.0.206.198" dst_port="1104" src_ip="193.241.84.199" src_port="6667"/>
      <filter dst_ip="165.155.141.60" dst_port="2836" src_ip="193.241.84.199" src_port="6664"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
1537[label="195.19.38.173;s;1pkt 1fpkt", shape=diamond, color=yellow];
1538[label="207.40.162.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
2818[label="195.19.38.173;s;1pkt 1fpkt", shape=hexagon, color=black];
3022[label="207.40.162.9;d;1pkt 1fpkt", shape=hexagon, color=black];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.19.38.173:6699, 207.40.162.9:1511}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1511: (50%)&gt;];
}
1537--1538[label="1;1pkt 1fpkt"];
1537--2818[label="1;1pkt 1fpkt"];
1537--3022[label="1;1pkt 1fpkt"];
1538--2818[label="1;1pkt 1fpkt"];
1538--3022[label="1;1pkt 1fpkt"];
2818--3022[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.40.162.9" dst_port="1511" src_ip="195.19.38.173" src_port="6699"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
1536[label="195.19.38.173;d;1pkt 1fpkt", shape=diamond, color=yellow];
1539[label="207.40.162.9;s;1pkt 1fpkt", shape=diamond, color=yellow];
2590[label="195.19.38.173;d;1pkt 1fpkt", shape=hexagon, color=black];
2641[label="207.40.162.9;s;1pkt 1fpkt", shape=hexagon, color=black];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.40.162.9:1511, 195.19.38.173:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1511: (50%)&gt;];
}
1536--1539[label="1;1pkt 1fpkt"];
1536--2590[label="1;1pkt 1fpkt"];
1536--2641[label="1;1pkt 1fpkt"];
1539--2590[label="1;1pkt 1fpkt"];
1539--2641[label="1;1pkt 1fpkt"];
2590--2641[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.19.38.173" dst_port="6699" src_ip="207.40.162.9" src_port="1511"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,012,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="207.140.33.245"/>
      <from sec="1044162001" usec="0"/>
      <to sec="1044163446" usec="0"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12966,1.88055,020,1 1 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
100[label="206.6.42.137s;1pkt 1fpkt", shape=rectangle, color=red];
562[label="206.6.42.137s;1pkt 1fpkt", shape=ellipse, color=green];
1579[label="206.6.42.137;s;69pkt 69fpkt", shape=diamond, color=yellow];
2898[label="206.6.42.137;s;52pkt 52fpkt", shape=hexagon, color=black];
4088[label="206.6.42.137;70pkt 70fpkt", shape=pentagon, color=darkviolet];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.6.42.137:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
100--562[label="1;1pkt 1fpkt"];
100--1579[label="1;1pkt 1fpkt"];
100--2898[label="1;1pkt 1fpkt"];
100--4088[label="1;1pkt 1fpkt"];
562--1579[label="1;1pkt 1fpkt"];
562--2898[label="1;1pkt 1fpkt"];
562--4088[label="1;1pkt 1fpkt"];
1579--2898[label="1;52pkt 52fpkt"];
1579--4088[label="0.985507;68pkt 68fpkt"];
2898--4088[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter src_ip="206.6.42.137"/>
    </slice>
    <from sec="1044162012" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
1495[label="165.155.203.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
1587[label="145.244.139.107;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.244.139.107:6699, 165.155.203.37:1079}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1079: (50%)&gt;];
}
1495--1587[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.155.203.37" dst_port="1079" src_ip="145.244.139.107" src_port="6699"/>
    </slice>
    <from sec="1044162097" usec="0"/>
    <to sec="1044162720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
1233[label="162.0.193.86;s;169pkt 169fpkt", shape=diamond, color=yellow];
1594[label="190.17.159.51;d;71pkt 71fpkt", shape=diamond, color=yellow];
2494[label="162.0.193.86;s;164pkt 164fpkt", shape=hexagon, color=black];
3838[label="162.0.193.86;169pkt 169fpkt", shape=pentagon, color=darkviolet];
4935[label="162.0.193.86;169pkt 169fpkt", shape=invtriangle, color=brown];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.193.86:80, 190.17.159.51:*}[46.1538%]&lt;BR/&gt;{162.0.193.86:80, 207.82.235.92:*}[20.7101%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1914%)&lt;BR/&gt; 25: (0.539084%)&lt;BR/&gt; 0: (0.539084%)&lt;BR/&gt; 4231: (0.336927%)&lt;BR/&gt; 4097: (0.336927%)&gt;];
}
1233--1594[label="1;71pkt 71fpkt"];
1233--2494[label="1;164pkt 164fpkt"];
1233--3838[label="1;169pkt 169fpkt"];
1233--4935[label="1;169pkt 169fpkt"];
1594--2494[label="1;71pkt 71fpkt"];
1594--3838[label="1;71pkt 71fpkt"];
1594--4935[label="1;71pkt 71fpkt"];
2494--3838[label="1;164pkt 164fpkt"];
2494--4935[label="1;164pkt 164fpkt"];
3838--4935[label="1;169pkt 169fpkt"];
</description>
    <slice>
      <filter dst_ip="190.17.159.51" src_ip="162.0.193.86" src_port="80"/>
      <filter dst_ip="207.82.235.92" src_ip="162.0.193.86" src_port="80"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
1531[label="206.6.44.131;s;62pkt 62fpkt", shape=diamond, color=yellow];
1622[label="189.86.162.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
2869[label="189.86.162.96;d;1pkt 1fpkt", shape=hexagon, color=black];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.6.44.131:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1531--1622[label="1;1pkt 1fpkt"];
1531--2869[label="1;1pkt 1fpkt"];
1622--2869[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="206.6.44.131"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.982224,1.95274,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
482[label="136.118.70.16d;1pkt 1fpkt", shape=rectangle, color=red];
1626[label="221.91.130.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
1627[label="207.40.162.16;d;2pkt 2fpkt", shape=diamond, color=yellow];
2923[label="207.40.162.16;d;2pkt 2fpkt", shape=hexagon, color=black];
2969[label="221.91.130.1;s;1pkt 1fpkt", shape=hexagon, color=black];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.91.130.1:6699, 207.40.162.16:3807}[50%]&lt;BR/&gt;{220.165.165.218:6699, 207.40.162.16:3834}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3807: (35.7143%)&lt;BR/&gt; 3834: (14.2857%)&gt;];
}
482--1626[label="1;1pkt 1fpkt"];
482--1627[label="1;1pkt 1fpkt"];
482--2923[label="1;1pkt 1fpkt"];
482--2969[label="1;1pkt 1fpkt"];
1626--1627[label="1;1pkt 1fpkt"];
1626--2923[label="1;1pkt 1fpkt"];
1626--2969[label="1;1pkt 1fpkt"];
1627--2923[label="1;2pkt 2fpkt"];
1627--2969[label="1;1pkt 1fpkt"];
2923--2969[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.40.162.16" dst_port="3834" src_ip="220.165.165.218" src_port="6699"/>
      <filter dst_ip="207.40.162.16" dst_port="3807" src_ip="221.91.130.1" src_port="6699"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
1652[label="165.155.141.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
1653[label="190.81.47.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
3099[label="165.155.141.3;d;1pkt 1fpkt", shape=hexagon, color=black];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.81.47.27:41820, 165.155.141.3:1062}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41820: (50%)&lt;BR/&gt; 1062: (50%)&gt;];
}
1652--1653[label="1;1pkt 1fpkt"];
1652--3099[label="1;1pkt 1fpkt"];
1653--3099[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.155.141.3" dst_port="1062" src_ip="190.81.47.27" src_port="41820"/>
    </slice>
    <from sec="1044162005" usec="0"/>
    <to sec="1044163456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
1721[label="130.139.36.16;d;4pkt 4fpkt", shape=diamond, color=yellow];
1722[label="196.209.43.107;s;1pkt 1fpkt", shape=diamond, color=yellow];
2819[label="196.209.43.107;s;1pkt 1fpkt", shape=hexagon, color=black];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.22.77.94:53, 130.139.36.16:1024}[25%]&lt;BR/&gt;{196.209.43.107:0, 130.139.36.16:0}[25%]&lt;BR/&gt;{192.44.147.132:53, 130.139.36.16:1024}[25%]&lt;BR/&gt;{199.139.81.236:53, 130.139.36.16:1024}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 1024: (25%)&lt;BR/&gt; 53: (25%)&gt;];
}
1721--1722[label="1;1pkt 1fpkt"];
1721--2819[label="1;1pkt 1fpkt"];
1722--2819[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.139.36.16" dst_port="1024" src_ip="199.139.81.236" src_port="53"/>
      <filter dst_ip="130.139.36.16" dst_port="1024" src_ip="192.44.147.132" src_port="53"/>
      <filter dst_ip="130.139.36.16" src_ip="196.209.43.107"/>
      <filter dst_ip="130.139.36.16" dst_port="1024" src_ip="192.22.77.94" src_port="53"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_296{
style=filled;
color=gray75;
1630[label="148.94.135.96;s;3pkt 3fpkt", shape=diamond, color=yellow];
1726[label="213.178.147.85;d;1pkt 1fpkt", shape=diamond, color=yellow];
2679[label="148.94.135.96;s;3pkt 3fpkt", shape=hexagon, color=black];
stat296[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.94.135.96:4739, 203.96.152.47:1863}[33.3333%]&lt;BR/&gt;{148.94.135.96:3730, 213.178.147.85:6699}[33.3333%]&lt;BR/&gt;{148.94.135.96:0, 193.28.158.198:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (28.5714%)&lt;BR/&gt; 6699: (21.4286%)&lt;BR/&gt; 3730: (21.4286%)&lt;BR/&gt; 4739: (14.2857%)&lt;BR/&gt; 1863: (14.2857%)&gt;];
}
1630--1726[label="1;1pkt 1fpkt"];
1630--2679[label="1;3pkt 3fpkt"];
1726--2679[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.28.158.198" src_ip="148.94.135.96"/>
      <filter dst_ip="213.178.147.85" dst_port="6699" src_ip="148.94.135.96" src_port="3730"/>
      <filter dst_ip="203.96.152.47" dst_port="1863" src_ip="148.94.135.96" src_port="4739"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
1730[label="133.168.97.91;s;713pkt 713fpkt", shape=diamond, color=yellow];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.97.91:53, *:*}[98.1767%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.7504%)&lt;BR/&gt; 1024: (2.24404%)&lt;BR/&gt; 0: (1.54278%)&lt;BR/&gt; 32768: (1.3324%)&lt;BR/&gt; 32769: (0.981767%)&gt;];
}
1730--3231[label="0.00280505;2pkt 2fpkt"];
1730--3242[label="0.00280505;2pkt 2fpkt"];
1730--3248[label="0.00280505;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="133.168.97.91" src_port="53"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09895,1.96277,999,0 1 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
567[label="136.236.149.3s;1pkt 1fpkt", shape=ellipse, color=green];
1352[label="165.155.81.3;s;2pkt 2fpkt", shape=diamond, color=yellow];
1728[label="220.200.202.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
1736[label="152.239.131.125;d;1pkt 1fpkt", shape=diamond, color=yellow];
2769[label="152.239.131.125;d;1pkt 1fpkt", shape=hexagon, color=black];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.81.3:1430, 220.200.202.30:6699}[50%]&lt;BR/&gt;{165.155.81.3:1442, 152.239.131.125:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1442: (33.3333%)&lt;BR/&gt; 1430: (16.6667%)&gt;];
}
567--1352[label="1;1pkt 1fpkt"];
567--1736[label="1;1pkt 1fpkt"];
567--2769[label="1;1pkt 1fpkt"];
1352--1728[label="1;1pkt 1fpkt"];
1352--1736[label="1;1pkt 1fpkt"];
1352--2769[label="1;1pkt 1fpkt"];
1736--2769[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="152.239.131.125" dst_port="6699" src_ip="165.155.81.3" src_port="1442"/>
      <filter dst_ip="220.200.202.30" dst_port="6699" src_ip="165.155.81.3" src_port="1430"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14016,1.98327,999,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
1750[label="130.138.161.14;d;29pkt 29fpkt", shape=diamond, color=yellow];
1751[label="207.215.162.181;s;29pkt 29fpkt", shape=diamond, color=yellow];
2726[label="207.215.162.181;s;29pkt 29fpkt", shape=hexagon, color=black];
5517[label="207.215.162.181;27pkt 27fpkt", shape=invhouse, color=bisque];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.215.162.181:4654, 130.138.161.14:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4654: (50%)&lt;BR/&gt; 55870: (1.75439%)&lt;BR/&gt; 55863: (1.75439%)&lt;BR/&gt; 55858: (1.75439%)&lt;BR/&gt; 55846: (1.75439%)&gt;];
}
1750--1751[label="1;29pkt 29fpkt"];
1750--2726[label="1;29pkt 29fpkt"];
1750--5517[label="1;27pkt 27fpkt"];
1751--2726[label="1;29pkt 29fpkt"];
1751--5517[label="1;27pkt 27fpkt"];
2726--5517[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.161.14" src_ip="207.215.162.181" src_port="4654"/>
    </slice>
    <from sec="1044162002" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_300{
style=filled;
color=gray75;
1761[label="133.168.145.163;d;2pkt 2fpkt", shape=diamond, color=yellow];
1774[label="136.238.12.222;s;1pkt 1fpkt", shape=diamond, color=yellow];
2695[label="133.168.145.163;d;2pkt 2fpkt", shape=hexagon, color=black];
stat300[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.50.111.74:3300, 133.168.145.163:6699}[50%]&lt;BR/&gt;{136.238.12.222:1673, 133.168.145.163:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1673: (30%)&lt;BR/&gt; 3300: (20%)&gt;];
}
1761--1774[label="1;1pkt 1fpkt"];
1761--2695[label="1;2pkt 2fpkt"];
1774--2695[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.168.145.163" dst_port="6699" src_ip="136.238.12.222" src_port="1673"/>
      <filter dst_ip="133.168.145.163" dst_port="6699" src_ip="206.50.111.74" src_port="3300"/>
    </slice>
    <from sec="1044162013" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0002,1.95735,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
1786[label="133.168.108.65;d;3pkt 3fpkt", shape=diamond, color=yellow];
1790[label="208.167.200.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
2743[label="208.167.200.38;s;1pkt 1fpkt", shape=hexagon, color=black];
2806[label="133.168.108.65;d;3pkt 3fpkt", shape=hexagon, color=black];
4790[label="208.167.200.38;1pkt 1fpkt", shape=invtriangle, color=brown];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.167.200.38:554, 133.168.108.65:6970}[33.3333%]&lt;BR/&gt;{208.167.200.60:554, 133.168.108.65:1152}[33.3333%]&lt;BR/&gt;{203.96.152.168:1863, 133.168.108.65:1038}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (38.8889%)&lt;BR/&gt; 6970: (27.7778%)&lt;BR/&gt; 1863: (11.1111%)&lt;BR/&gt; 1152: (11.1111%)&lt;BR/&gt; 1038: (11.1111%)&gt;];
}
1786--1790[label="1;1pkt 1fpkt"];
1786--2743[label="1;1pkt 1fpkt"];
1786--2806[label="1;3pkt 3fpkt"];
1786--4790[label="1;1pkt 1fpkt"];
1790--2743[label="1;1pkt 1fpkt"];
1790--2806[label="1;1pkt 1fpkt"];
1790--4790[label="1;1pkt 1fpkt"];
2743--2806[label="1;1pkt 1fpkt"];
2743--4790[label="1;1pkt 1fpkt"];
2806--4790[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.168.108.65" dst_port="1038" src_ip="203.96.152.168" src_port="1863"/>
      <filter dst_ip="133.168.108.65" dst_port="1152" src_ip="208.167.200.60" src_port="554"/>
      <filter dst_ip="133.168.108.65" dst_port="6970" src_ip="208.167.200.38" src_port="554"/>
    </slice>
    <from sec="1044162567" usec="0"/>
    <to sec="1044163028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02936,1.91522,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
1791[label="165.155.142.193;d;18pkt 18fpkt", shape=diamond, color=yellow];
1792[label="208.41.250.101;s;19pkt 19fpkt", shape=diamond, color=yellow];
3908[label="208.41.250.101;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4965[label="208.41.250.101;29pkt 29fpkt", shape=invtriangle, color=brown];
5431[label="208.41.250.101;29pkt 29fpkt", shape=invhouse, color=bisque];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.41.250.101:80, 165.155.142.193:*}[96.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2%)&lt;BR/&gt; 4647: (2%)&lt;BR/&gt; 4646: (2%)&lt;BR/&gt; 4645: (2%)&lt;BR/&gt; 4644: (2%)&gt;];
}
1791--1792[label="1;18pkt 18fpkt"];
1791--3908[label="1;18pkt 18fpkt"];
1791--4965[label="1;18pkt 18fpkt"];
1791--5431[label="1;18pkt 18fpkt"];
1792--3908[label="1;19pkt 19fpkt"];
1792--4965[label="0.947368;18pkt 18fpkt"];
1792--5431[label="0.947368;18pkt 18fpkt"];
3908--4965[label="1;29pkt 29fpkt"];
3908--5431[label="1;29pkt 29fpkt"];
4965--5431[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="165.155.142.193" src_ip="208.41.250.101" src_port="80"/>
    </slice>
    <from sec="1044162008" usec="0"/>
    <to sec="1044162777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
1392[label="130.139.251.131;s;152pkt 152fpkt", shape=diamond, color=yellow];
1794[label="220.161.104.68;d;126pkt 126fpkt", shape=diamond, color=yellow];
2007[label="192.211.195.153;d;22pkt 22fpkt", shape=diamond, color=yellow];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.251.131:80, 220.161.104.68:*}[82.8947%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35051: (0.333333%)&lt;BR/&gt; 35049: (0.333333%)&lt;BR/&gt; 35047: (0.333333%)&lt;BR/&gt; 35045: (0.333333%)&gt;];
}
1392--1794[label="1;126pkt 126fpkt"];
1392--2007[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="220.161.104.68" src_ip="130.139.251.131" src_port="80"/>
    </slice>
    <from sec="1044162603" usec="0"/>
    <to sec="1044162902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
1734[label="148.94.202.83;d;17pkt 17fpkt", shape=diamond, color=yellow];
1798[label="207.186.85.78;s;3pkt 3fpkt", shape=diamond, color=yellow];
2682[label="148.94.202.83;d;17pkt 17fpkt", shape=hexagon, color=black];
2949[label="207.186.85.78;s;3pkt 3fpkt", shape=hexagon, color=black];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.178.192.207:554, 148.94.202.83:*}[23.5294%]&lt;BR/&gt;{*:27243, 148.94.202.83:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (32.5%)&lt;BR/&gt; 27243: (10%)&lt;BR/&gt; 1717: (7.5%)&lt;BR/&gt; 8590: (5%)&lt;BR/&gt; 6970: (5%)&gt;];
}
1734--1798[label="1;3pkt 3fpkt"];
1734--2682[label="1;17pkt 17fpkt"];
1734--2949[label="1;3pkt 3fpkt"];
1798--2682[label="1;3pkt 3fpkt"];
1798--2949[label="1;3pkt 3fpkt"];
2682--2949[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.202.83" src_port="27243"/>
      <filter dst_ip="148.94.202.83" src_ip="209.178.192.207" src_port="554"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.982224,1.95274,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
126[label="136.118.70.16s;1pkt 1fpkt", shape=rectangle, color=red];
1805[label="207.40.162.16;s;2pkt 2fpkt", shape=diamond, color=yellow];
1969[label="221.91.130.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
2968[label="221.91.130.1;d;1pkt 1fpkt", shape=hexagon, color=black];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.40.162.16:3807, 221.91.130.1:6699}[50%]&lt;BR/&gt;{207.40.162.16:3834, 220.165.165.218:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 3807: (40%)&lt;BR/&gt; 3834: (10%)&gt;];
}
126--1805[label="1;1pkt 1fpkt"];
126--1969[label="1;1pkt 1fpkt"];
126--2968[label="1;1pkt 1fpkt"];
1805--1969[label="1;1pkt 1fpkt"];
1805--2968[label="1;1pkt 1fpkt"];
1969--2968[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.165.165.218" dst_port="6699" src_ip="207.40.162.16" src_port="3834"/>
      <filter dst_ip="221.91.130.1" dst_port="6699" src_ip="207.40.162.16" src_port="3807"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
1727[label="165.155.81.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
1807[label="220.200.202.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
2875[label="220.200.202.30;s;1pkt 1fpkt", shape=hexagon, color=black];
2924[label="165.155.81.3;d;1pkt 1fpkt", shape=hexagon, color=black];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.200.202.30:6699, 165.155.81.3:1430}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1430: (50%)&gt;];
}
1727--1807[label="1;1pkt 1fpkt"];
1727--2875[label="1;1pkt 1fpkt"];
1727--2924[label="1;1pkt 1fpkt"];
1807--2875[label="1;1pkt 1fpkt"];
1807--2924[label="1;1pkt 1fpkt"];
2875--2924[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.155.81.3" dst_port="1430" src_ip="220.200.202.30" src_port="6699"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
1809[label="212.80.47.168;d;2pkt 2fpkt", shape=diamond, color=yellow];
1810[label="206.6.43.75;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.6.43.75:21, 196.45.57.107:64276}[33.3333%]&lt;BR/&gt;{206.6.43.75:17464, 212.80.47.168:2362}[33.3333%]&lt;BR/&gt;{206.6.43.75:21, 212.80.47.168:2357}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (30%)&lt;BR/&gt; 17464: (20%)&lt;BR/&gt; 2362: (20%)&lt;BR/&gt; 2357: (20%)&lt;BR/&gt; 64276: (10%)&gt;];
}
1809--1810[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.80.47.168" dst_port="2357" src_ip="206.6.43.75" src_port="21"/>
      <filter dst_ip="212.80.47.168" dst_port="2362" src_ip="206.6.43.75" src_port="17464"/>
      <filter dst_ip="196.45.57.107" dst_port="64276" src_ip="206.6.43.75" src_port="21"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
1811[label="157.253.17.0;d;1pkt 1fpkt", shape=diamond, color=yellow];
1812[label="133.168.182.90;s;3pkt 3fpkt", shape=diamond, color=yellow];
2884[label="157.253.17.0;d;1pkt 1fpkt", shape=hexagon, color=black];
2885[label="133.168.182.90;s;2pkt 2fpkt", shape=hexagon, color=black];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.182.90:0, 157.253.17.0:0}[33.3333%]&lt;BR/&gt;{133.168.182.90:53, 161.77.34.75:4000}[33.3333%]&lt;BR/&gt;{133.168.182.90:0, 149.231.119.251:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (71.4286%)&lt;BR/&gt; 4000: (14.2857%)&lt;BR/&gt; 53: (14.2857%)&gt;];
}
1811--1812[label="1;1pkt 1fpkt"];
1811--2884[label="1;1pkt 1fpkt"];
1811--2885[label="1;1pkt 1fpkt"];
1812--2884[label="1;1pkt 1fpkt"];
1812--2885[label="1;2pkt 2fpkt"];
2884--2885[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.231.119.251" src_ip="133.168.182.90"/>
      <filter dst_ip="161.77.34.75" dst_port="4000" src_ip="133.168.182.90" src_port="53"/>
      <filter dst_ip="157.253.17.0" src_ip="133.168.182.90"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0002,1.95735,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
1817[label="207.164.191.181;d;1pkt 1fpkt", shape=diamond, color=yellow];
1818[label="188.35.130.117;s;1pkt 1fpkt", shape=diamond, color=yellow];
2727[label="207.164.191.181;d;1pkt 1fpkt", shape=hexagon, color=black];
5003[label="188.35.130.117;1pkt 1fpkt", shape=invtriangle, color=brown];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.35.130.117:6699, 207.164.191.181:1179}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1179: (50%)&gt;];
}
1817--1818[label="1;1pkt 1fpkt"];
1817--2727[label="1;1pkt 1fpkt"];
1817--5003[label="1;1pkt 1fpkt"];
1818--2727[label="1;1pkt 1fpkt"];
1818--5003[label="1;1pkt 1fpkt"];
2727--5003[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.164.191.181" dst_port="1179" src_ip="188.35.130.117" src_port="6699"/>
    </slice>
    <from sec="1044162003" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="198.164.52.102"/>
      <from sec="1044162005" usec="0"/>
      <to sec="1044163454" usec="0"/>
    </slice>
    <from sec="1044162005" usec="0"/>
    <to sec="1044163454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
1873[label="194.96.218.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
1874[label="130.139.14.97;s;7pkt 7fpkt", shape=diamond, color=yellow];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.14.97:80, 213.46.34.232:*}[57.1429%]&lt;BR/&gt;{130.139.14.97:80, 195.21.168.107:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2176: (12.5%)&lt;BR/&gt; 32853: (6.25%)&lt;BR/&gt; 32852: (6.25%)&lt;BR/&gt; 32851: (6.25%)&gt;];
}
1873--1874[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.46.34.232" src_ip="130.139.14.97" src_port="80"/>
      <filter dst_ip="195.21.168.107" src_ip="130.139.14.97" src_port="80"/>
    </slice>
    <from sec="1044162757" usec="0"/>
    <to sec="1044163090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="206.34.101.29"/>
      <from sec="1044162000" usec="0"/>
      <to sec="1044163454" usec="0"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
1912[label="195.117.120.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
1913[label="165.155.81.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
2847[label="165.155.81.10;s;1pkt 1fpkt", shape=hexagon, color=black];
2987[label="195.117.120.33;d;1pkt 1fpkt", shape=hexagon, color=black];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.81.10:2010, 195.117.120.33:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 2010: (50%)&gt;];
}
1912--1913[label="1;1pkt 1fpkt"];
1912--2847[label="1;1pkt 1fpkt"];
1912--2987[label="1;1pkt 1fpkt"];
1913--2847[label="1;1pkt 1fpkt"];
1913--2987[label="1;1pkt 1fpkt"];
2847--2987[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.117.120.33" dst_port="6699" src_ip="165.155.81.10" src_port="2010"/>
    </slice>
    <from sec="1044162006" usec="0"/>
    <to sec="1044163372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="162.0.197.232"/>
      <from sec="1044162009" usec="0"/>
      <to sec="1044163431" usec="0"/>
    </slice>
    <from sec="1044162009" usec="0"/>
    <to sec="1044163431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0002,1.95735,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
1918[label="207.40.188.34;s;1pkt 1fpkt", shape=diamond, color=yellow];
1919[label="194.112.77.143;d;1pkt 1fpkt", shape=diamond, color=yellow];
2990[label="207.40.188.34;s;1pkt 1fpkt", shape=hexagon, color=black];
3043[label="194.112.77.143;d;1pkt 1fpkt", shape=hexagon, color=black];
4775[label="207.40.188.34;1pkt 1fpkt", shape=invtriangle, color=brown];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.40.188.34:1497, 194.112.77.143:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1497: (50%)&gt;];
}
1918--1919[label="1;1pkt 1fpkt"];
1918--2990[label="1;1pkt 1fpkt"];
1918--3043[label="1;1pkt 1fpkt"];
1918--4775[label="1;1pkt 1fpkt"];
1919--2990[label="1;1pkt 1fpkt"];
1919--3043[label="1;1pkt 1fpkt"];
1919--4775[label="1;1pkt 1fpkt"];
2990--3043[label="1;1pkt 1fpkt"];
2990--4775[label="1;1pkt 1fpkt"];
3043--4775[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.112.77.143" dst_port="6699" src_ip="207.40.188.34" src_port="1497"/>
    </slice>
    <from sec="1044162013" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
1917[label="207.40.188.34;d;1pkt 1fpkt", shape=diamond, color=yellow];
1920[label="194.112.77.143;s;1pkt 1fpkt", shape=diamond, color=yellow];
2937[label="207.40.188.34;d;1pkt 1fpkt", shape=hexagon, color=black];
3104[label="194.112.77.143;s;1pkt 1fpkt", shape=hexagon, color=black];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.112.77.143:6699, 207.40.188.34:1497}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1497: (50%)&gt;];
}
1917--1920[label="1;1pkt 1fpkt"];
1917--2937[label="1;1pkt 1fpkt"];
1917--3104[label="1;1pkt 1fpkt"];
1920--2937[label="1;1pkt 1fpkt"];
1920--3104[label="1;1pkt 1fpkt"];
2937--3104[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.40.188.34" dst_port="1497" src_ip="194.112.77.143" src_port="6699"/>
    </slice>
    <from sec="1044162013" usec="0"/>
    <to sec="1044163452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
1939[label="148.94.201.171;d;135pkt 135fpkt", shape=diamond, color=yellow];
1940[label="219.140.59.4;s;134pkt 134fpkt", shape=diamond, color=yellow];
2805[label="219.140.59.4;s;74pkt 74fpkt", shape=hexagon, color=black];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.140.59.4:8080, 148.94.201.171:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 49322: (0.437318%)&lt;BR/&gt; 49321: (0.437318%)&lt;BR/&gt; 49320: (0.437318%)&lt;BR/&gt; 49319: (0.437318%)&gt;];
}
1939--1940[label="1;134pkt 134fpkt"];
1939--2805[label="1;74pkt 74fpkt"];
1940--2805[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.201.171" src_ip="219.140.59.4" src_port="8080"/>
    </slice>
    <from sec="1044162557" usec="0"/>
    <to sec="1044163382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_320{
style=filled;
color=gray75;
873[label="130.138.46.205;d;230pkt 230fpkt", shape=diamond, color=yellow];
874[label="197.187.84.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
1268[label="188.117.149.245;s;182pkt 182fpkt", shape=diamond, color=yellow];
1858[label="207.164.180.207;d;27pkt 27fpkt", shape=diamond, color=yellow];
1941[label="197.193.175.94;s;13pkt 13fpkt", shape=diamond, color=yellow];
2365[label="130.138.46.205;d;86pkt 86fpkt", shape=hexagon, color=black];
2907[label="207.164.180.207;d;27pkt 27fpkt", shape=hexagon, color=black];
3373[label="210.77.84.14;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4709[label="210.77.84.14;9pkt 9fpkt", shape=invtriangle, color=brown];
stat320[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.117.149.245:80, 130.138.46.205:*}[70.8171%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6569%)&lt;BR/&gt; 64206: (0.77187%)&lt;BR/&gt; 64380: (0.600343%)&lt;BR/&gt; 64270: (0.600343%)&lt;BR/&gt; 64249: (0.600343%)&gt;];
}
873--874[label="1;1pkt 1fpkt"];
873--1268[label="1;182pkt 182fpkt"];
873--2365[label="1;86pkt 86fpkt"];
873--3373[label="1;8pkt 8fpkt"];
873--4709[label="0.888889;8pkt 8fpkt"];
874--2365[label="1;1pkt 1fpkt"];
1268--2365[label="0.883721;76pkt 76fpkt"];
1858--1941[label="1;13pkt 13fpkt"];
1858--2907[label="1;27pkt 27fpkt"];
1858--4709[label="0.111111;1pkt 1fpkt"];
1941--2907[label="1;13pkt 13fpkt"];
2365--3373[label="0.25;2pkt 2fpkt"];
2365--4709[label="0.222222;2pkt 2fpkt"];
2907--4709[label="0.111111;1pkt 1fpkt"];
3373--4709[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.46.205" src_ip="188.117.149.245" src_port="80"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
1868[label="136.16.8.231;d;3pkt 3fpkt", shape=diamond, color=yellow];
1953[label="133.1.238.101;s;9pkt 9fpkt", shape=diamond, color=yellow];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.1.238.101:80, 136.16.8.231:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3407: (8.33333%)&lt;BR/&gt; 3015: (8.33333%)&lt;BR/&gt; 2999: (8.33333%)&lt;BR/&gt; 4164: (4.16667%)&gt;];
}
1868--1953[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.16.8.231" src_ip="133.1.238.101" src_port="80"/>
    </slice>
    <from sec="1044162713" usec="0"/>
    <to sec="1044163368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="167.15.32.101"/>
      <from sec="1044162001" usec="0"/>
      <to sec="1044163457" usec="0"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
2021[label="149.219.139.204;d;2pkt 2fpkt", shape=diamond, color=yellow];
2022[label="133.1.238.21;s;4pkt 4fpkt", shape=diamond, color=yellow];
2863[label="149.219.139.204;d;2pkt 2fpkt", shape=hexagon, color=black];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.1.238.21:80, 195.83.48.128:3545}[25%]&lt;BR/&gt;{133.1.238.21:80, 195.83.48.128:3546}[25%]&lt;BR/&gt;{133.1.238.21:80, 149.219.139.204:1104}[25%]&lt;BR/&gt;{133.1.238.21:80, 149.219.139.204:1105}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1105: (18.75%)&lt;BR/&gt; 1104: (18.75%)&lt;BR/&gt; 3546: (6.25%)&lt;BR/&gt; 3545: (6.25%)&gt;];
}
2021--2022[label="1;2pkt 2fpkt"];
2021--2863[label="1;2pkt 2fpkt"];
2022--2863[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.219.139.204" dst_port="1105" src_ip="133.1.238.21" src_port="80"/>
      <filter dst_ip="149.219.139.204" dst_port="1104" src_ip="133.1.238.21" src_port="80"/>
      <filter dst_ip="195.83.48.128" dst_port="3546" src_ip="133.1.238.21" src_port="80"/>
      <filter dst_ip="195.83.48.128" dst_port="3545" src_ip="133.1.238.21" src_port="80"/>
    </slice>
    <from sec="1044162938" usec="0"/>
    <to sec="1044163117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02936,1.91522,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
2000[label="130.139.233.180;s;35pkt 35fpkt", shape=diamond, color=yellow];
2025[label="136.226.132.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
4333[label="130.139.233.180;48pkt 48fpkt", shape=pentagon, color=darkviolet];
5171[label="130.139.233.180;47pkt 47fpkt", shape=invtriangle, color=brown];
5516[label="130.139.233.180;47pkt 47fpkt", shape=invhouse, color=bisque];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.233.180:*, 192.173.89.106:113}[25%]&lt;BR/&gt;{130.139.233.180:25, 192.173.89.106:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (29.2135%)&lt;BR/&gt; 113: (15.4494%)&lt;BR/&gt; 80: (5.33708%)&lt;BR/&gt; 8153: (1.40449%)&lt;BR/&gt; 65523: (1.1236%)&gt;];
}
2000--2025[label="1;1pkt 1fpkt"];
2000--4333[label="1;35pkt 35fpkt"];
2000--5171[label="0.971429;34pkt 34fpkt"];
2000--5516[label="0.971429;34pkt 34fpkt"];
2025--4333[label="1;1pkt 1fpkt"];
2025--5171[label="1;1pkt 1fpkt"];
2025--5516[label="1;1pkt 1fpkt"];
4333--5171[label="1;47pkt 47fpkt"];
4333--5516[label="1;47pkt 47fpkt"];
5171--5516[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="192.173.89.106" src_ip="130.139.233.180" src_port="25"/>
      <filter dst_ip="192.173.89.106" dst_port="113" src_ip="130.139.233.180"/>
    </slice>
    <from sec="1044162031" usec="0"/>
    <to sec="1044163344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="156.235.2.15"/>
      <from sec="1044162292" usec="0"/>
      <to sec="1044163458" usec="0"/>
    </slice>
    <from sec="1044162292" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
2029[label="148.94.202.83;s;14pkt 14fpkt", shape=diamond, color=yellow];
2070[label="207.186.85.78;d;3pkt 3fpkt", shape=diamond, color=yellow];
2908[label="207.186.85.78;d;3pkt 3fpkt", shape=hexagon, color=black];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.94.202.83:*, 209.178.192.207:554}[28.5714%]&lt;BR/&gt;{148.94.202.83:*, 207.213.43.80:554}[21.4286%]&lt;BR/&gt;{148.94.202.83:*, 207.186.85.78:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (37.5%)&lt;BR/&gt; 0: (10%)&lt;BR/&gt; 8590: (7.5%)&lt;BR/&gt; 6970: (7.5%)&lt;BR/&gt; 1574: (7.5%)&gt;];
}
2029--2070[label="1;3pkt 3fpkt"];
2029--2908[label="1;3pkt 3fpkt"];
2070--2908[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="207.186.85.78" src_ip="148.94.202.83"/>
      <filter dst_ip="209.178.192.207" dst_port="554" src_ip="148.94.202.83"/>
      <filter dst_ip="207.213.43.80" dst_port="554" src_ip="148.94.202.83"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.655737,1.94144,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
1000[label="133.168.160.21;s;982pkt 982fpkt", shape=diamond, color=yellow];
2085[label="189.84.208.134;d;2pkt 2fpkt", shape=diamond, color=yellow];
3433[label="133.168.160.21;1045pkt 1045fpkt", shape=pentagon, color=darkviolet];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.160.21:*, *:25}[88.8995%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.31%)&lt;BR/&gt; 0: (0.492854%)&lt;BR/&gt; 113: (0.295712%)&lt;BR/&gt; 44988: (0.0985707%)&lt;BR/&gt; 43849: (0.0985707%)&gt;];
}
1000--2085[label="1;2pkt 2fpkt"];
1000--3433[label="1;982pkt 982fpkt"];
2085--3433[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="133.168.160.21"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14016,1.98327,503,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
1999[label="130.139.233.180;d;11pkt 11fpkt", shape=diamond, color=yellow];
2088[label="136.226.132.146;s;1pkt 1fpkt", shape=diamond, color=yellow];
2906[label="130.139.233.180;d;9pkt 9fpkt", shape=hexagon, color=black];
5483[label="136.226.132.146;1pkt 1fpkt", shape=invhouse, color=bisque];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.209.95.82:*, 130.139.233.180:80}[36.3636%]&lt;BR/&gt;{204.227.194.223:*, 130.139.233.180:25}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.2727%)&lt;BR/&gt; 25: (18.1818%)&lt;BR/&gt; 8153: (9.09091%)&lt;BR/&gt; 43808: (4.54545%)&lt;BR/&gt; 43167: (4.54545%)&gt;];
}
1999--2088[label="1;1pkt 1fpkt"];
1999--2906[label="1;9pkt 9fpkt"];
1999--5483[label="1;1pkt 1fpkt"];
2088--2906[label="1;1pkt 1fpkt"];
2088--5483[label="1;1pkt 1fpkt"];
2906--5483[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.139.233.180" dst_port="80" src_ip="217.209.95.82"/>
      <filter dst_ip="130.139.233.180" dst_port="25" src_ip="204.227.194.223"/>
    </slice>
    <from sec="1044162495" usec="0"/>
    <to sec="1044163344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02936,1.91522,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
1510[label="217.95.115.93;d;18pkt 18fpkt", shape=diamond, color=yellow];
1589[label="130.139.251.136;s;42pkt 42fpkt", shape=diamond, color=yellow];
2089[label="193.199.65.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
4085[label="130.139.251.136;45pkt 45fpkt", shape=pentagon, color=darkviolet];
5051[label="130.139.251.136;45pkt 45fpkt", shape=invtriangle, color=brown];
5472[label="130.139.251.136;46pkt 46fpkt", shape=invhouse, color=bisque];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.251.136:80, 217.95.115.93:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2142: (1.26904%)&lt;BR/&gt; 2141: (1.26904%)&lt;BR/&gt; 2140: (1.26904%)&lt;BR/&gt; 2139: (1.26904%)&gt;];
}
1510--1589[label="0.888889;16pkt 16fpkt"];
1510--4085[label="0.888889;16pkt 16fpkt"];
1510--5051[label="0.888889;16pkt 16fpkt"];
1510--5472[label="0.888889;16pkt 16fpkt"];
1589--2089[label="1;1pkt 1fpkt"];
1589--4085[label="0.97619;41pkt 41fpkt"];
1589--5051[label="0.97619;41pkt 41fpkt"];
1589--5472[label="1;42pkt 42fpkt"];
2089--4085[label="1;1pkt 1fpkt"];
2089--5051[label="1;1pkt 1fpkt"];
2089--5472[label="1;1pkt 1fpkt"];
4085--5051[label="1;45pkt 45fpkt"];
4085--5472[label="1;45pkt 45fpkt"];
5051--5472[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="217.95.115.93" src_ip="130.139.251.136" src_port="80"/>
    </slice>
    <from sec="1044162120" usec="0"/>
    <to sec="1044163528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="207.35.49.85"/>
      <from sec="1044162000" usec="0"/>
      <to sec="1044163458" usec="0"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="130.139.186.102"/>
      <from sec="1044162292" usec="0"/>
      <to sec="1044163364" usec="0"/>
    </slice>
    <from sec="1044162292" usec="0"/>
    <to sec="1044163364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="162.0.214.161"/>
      <from sec="1044162419" usec="0"/>
      <to sec="1044163152" usec="0"/>
    </slice>
    <from sec="1044162419" usec="0"/>
    <to sec="1044163152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="165.155.141.252"/>
      <from sec="1044162000" usec="0"/>
      <to sec="1044163458" usec="0"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950695,1.9018,502,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
21[label="193.233.251.32s;2pkt 2fpkt", shape=rectangle, color=red];
857[label="133.61.249.156;d;1pkt 1fpkt", shape=diamond, color=yellow];
859[label="193.233.251.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
2191[label="133.61.249.144;s;6pkt 6fpkt", shape=diamond, color=yellow];
2202[label="192.142.217.180;d;1pkt 1fpkt", shape=diamond, color=yellow];
2410[label="193.233.251.32;s;1pkt 1fpkt", shape=hexagon, color=black];
3066[label="133.61.249.156;d;2pkt 2fpkt", shape=hexagon, color=black];
4130[label="133.61.249.144;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.61.249.144:53, *:*}[62.5%]&lt;BR/&gt;{193.233.251.32:22, 133.61.249.156:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (33.3333%)&lt;BR/&gt; 53: (20%)&lt;BR/&gt; 24347: (16.6667%)&lt;BR/&gt; 4098: (13.3333%)&lt;BR/&gt; 42711: (3.33333%)&gt;];
}
21--857[label="1;1pkt 1fpkt"];
21--859[label="1;1pkt 1fpkt"];
21--2191[label="0.5;1pkt 1fpkt"];
21--2202[label="1;1pkt 1fpkt"];
21--2410[label="1;1pkt 1fpkt"];
21--3066[label="0.5;1pkt 1fpkt"];
21--4130[label="1;1pkt 1fpkt"];
857--859[label="1;1pkt 1fpkt"];
857--2410[label="1;1pkt 1fpkt"];
857--3066[label="1;1pkt 1fpkt"];
859--2410[label="1;1pkt 1fpkt"];
859--3066[label="1;1pkt 1fpkt"];
2191--2202[label="1;1pkt 1fpkt"];
2191--4130[label="1;1pkt 1fpkt"];
2202--4130[label="1;1pkt 1fpkt"];
2410--3066[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="133.61.249.144" src_port="53"/>
      <filter dst_ip="133.61.249.156" src_ip="193.233.251.32" src_port="22"/>
    </slice>
    <from sec="1044162951" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
2190[label="133.61.249.144;d;4pkt 4fpkt", shape=diamond, color=yellow];
2203[label="192.142.217.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.50.233.46:32777, 133.61.249.144:53}[25%]&lt;BR/&gt;{192.42.146.48:32770, 133.61.249.144:53}[25%]&lt;BR/&gt;{202.8.202.75:24923, 133.61.249.144:53}[25%]&lt;BR/&gt;{192.142.217.180:4098, 133.61.249.144:22}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (30%)&lt;BR/&gt; 4098: (20%)&lt;BR/&gt; 22: (20%)&lt;BR/&gt; 32777: (10%)&lt;BR/&gt; 32770: (10%)&gt;];
}
2190--2203[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.61.249.144" dst_port="22" src_ip="192.142.217.180" src_port="4098"/>
      <filter dst_ip="133.61.249.144" dst_port="53" src_ip="202.8.202.75" src_port="24923"/>
      <filter dst_ip="133.61.249.144" dst_port="53" src_ip="192.42.146.48" src_port="32770"/>
      <filter dst_ip="133.61.249.144" dst_port="53" src_ip="200.50.233.46" src_port="32777"/>
    </slice>
    <from sec="1044162951" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
2186[label="207.164.182.145;d;15pkt 15fpkt", shape=diamond, color=yellow];
2208[label="209.89.234.223;s;5pkt 5fpkt", shape=diamond, color=yellow];
3009[label="207.164.182.145;d;10pkt 10fpkt", shape=hexagon, color=black];
3122[label="209.89.234.223;s;5pkt 5fpkt", shape=hexagon, color=black];
4528[label="209.89.234.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5261[label="209.89.234.223;1pkt 1fpkt", shape=invtriangle, color=brown];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.89.234.223:2462, 207.164.182.145:*}[33.3333%]&lt;BR/&gt;{200.3.167.177:80, 207.164.182.145:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2462: (29.7297%)&lt;BR/&gt; 80: (12.1622%)&lt;BR/&gt; 1685: (8.10811%)&lt;BR/&gt; 3637: (5.40541%)&lt;BR/&gt; 1665: (5.40541%)&gt;];
}
2186--2208[label="1;5pkt 5fpkt"];
2186--3009[label="1;10pkt 10fpkt"];
2186--3122[label="1;5pkt 5fpkt"];
2186--4528[label="1;1pkt 1fpkt"];
2186--5261[label="1;1pkt 1fpkt"];
2208--3009[label="1;5pkt 5fpkt"];
2208--3122[label="1;5pkt 5fpkt"];
2208--4528[label="1;1pkt 1fpkt"];
2208--5261[label="1;1pkt 1fpkt"];
3009--3122[label="1;5pkt 5fpkt"];
3009--4528[label="1;1pkt 1fpkt"];
3009--5261[label="1;1pkt 1fpkt"];
3122--4528[label="1;1pkt 1fpkt"];
3122--5261[label="1;1pkt 1fpkt"];
4528--5261[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.164.182.145" src_ip="209.89.234.223" src_port="2462"/>
      <filter dst_ip="207.164.182.145" src_ip="200.3.167.177" src_port="80"/>
    </slice>
    <from sec="1044162806" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_338{
style=filled;
color=gray75;
2211[label="207.164.191.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
2212[label="194.68.102.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat338[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.68.102.227:6699, 207.164.191.51:4453}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 4453: (50%)&gt;];
}
2211--2212[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.164.191.51" dst_port="4453" src_ip="194.68.102.227" src_port="6699"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.61.249.147"/>
      <from sec="1044162008" usec="0"/>
      <to sec="1044163361" usec="0"/>
    </slice>
    <from sec="1044162008" usec="0"/>
    <to sec="1044163361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="156.235.2.15"/>
      <from sec="1044162292" usec="0"/>
      <to sec="1044163458" usec="0"/>
    </slice>
    <from sec="1044162292" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
2269[label="188.85.57.241;d;1pkt 1fpkt", shape=diamond, color=yellow];
2270[label="162.0.194.60;s;1pkt 1fpkt", shape=diamond, color=yellow];
3079[label="162.0.194.60;s;1pkt 1fpkt", shape=hexagon, color=black];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.194.60:2010, 188.85.57.241:6667}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 2010: (50%)&gt;];
}
2269--2270[label="1;1pkt 1fpkt"];
2269--3079[label="1;1pkt 1fpkt"];
2270--3079[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="188.85.57.241" dst_port="6667" src_ip="162.0.194.60" src_port="2010"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.655737,1.94144,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
2169[label="148.94.201.5;d;6pkt 6fpkt", shape=diamond, color=yellow];
2283[label="209.210.1.205;s;2pkt 2fpkt", shape=diamond, color=yellow];
3346[label="203.15.224.10;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.15.224.10:6667, 148.94.201.5:*}[28.5714%]&lt;BR/&gt;{209.210.1.205:*, 148.94.201.5:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (20%)&lt;BR/&gt; 5000: (20%)&lt;BR/&gt; 5001: (10%)&lt;BR/&gt; 1739: (10%)&lt;BR/&gt; 1611: (10%)&gt;];
}
2169--2283[label="1;2pkt 2fpkt"];
2169--3346[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.201.5" src_ip="209.210.1.205"/>
      <filter dst_ip="148.94.201.5" src_ip="203.15.224.10" src_port="6667"/>
    </slice>
    <from sec="1044162005" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700667,1.99136,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="162.0.206.155"/>
      <from sec="1044162996" usec="0"/>
      <to sec="1044163449" usec="0"/>
    </slice>
    <from sec="1044162996" usec="0"/>
    <to sec="1044163449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.771705,1.99983,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="207.142.93.48"/>
      <from sec="1044162373" usec="0"/>
      <to sec="1044162378" usec="0"/>
    </slice>
    <from sec="1044162373" usec="0"/>
    <to sec="1044162378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_347{
style=filled;
color=gray75;
904[label="196.33.50.134;d;3pkt 3fpkt", shape=diamond, color=yellow];
907[label="133.1.235.245;s;13pkt 13fpkt", shape=diamond, color=yellow];
1515[label="206.41.123.104;d;2pkt 2fpkt", shape=diamond, color=yellow];
2369[label="196.33.50.134;d;3pkt 3fpkt", shape=hexagon, color=black];
3078[label="133.1.235.245;s;13pkt 13fpkt", shape=hexagon, color=black];
stat347[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.1.235.245:21, 144.103.60.128:*}[30.7692%]&lt;BR/&gt;{133.1.235.245:80, 196.33.50.134:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (19.1176%)&lt;BR/&gt; 80: (17.6471%)&lt;BR/&gt; 2431: (5.88235%)&lt;BR/&gt; 2178: (5.88235%)&lt;BR/&gt; 1715: (5.88235%)&gt;];
}
904--907[label="1;3pkt 3fpkt"];
904--2369[label="1;3pkt 3fpkt"];
904--3078[label="1;3pkt 3fpkt"];
907--1515[label="1;2pkt 2fpkt"];
907--2369[label="1;3pkt 3fpkt"];
907--3078[label="1;13pkt 13fpkt"];
1515--3078[label="1;2pkt 2fpkt"];
2369--3078[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="144.103.60.128" src_ip="133.1.235.245" src_port="21"/>
      <filter dst_ip="196.33.50.134" src_ip="133.1.235.245" src_port="80"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,011,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
999[label="207.216.206.121;s;8901pkt 8901fpkt", shape=diamond, color=yellow];
2385[label="207.216.206.121;s;6662pkt 6662fpkt", shape=hexagon, color=black];
4008[label="207.216.206.121;9304pkt 9304fpkt", shape=pentagon, color=darkviolet];
5013[label="207.216.206.121;9305pkt 9305fpkt", shape=invtriangle, color=brown];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.216.206.121:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31729: (0.023411%)&lt;BR/&gt; 23588: (0.023411%)&lt;BR/&gt; 50527: (0.0175582%)&lt;BR/&gt; 41872: (0.0175582%)&gt;];
}
999--1143[label="0.00364964;1pkt 1fpkt"];
999--1288[label="0.00341297;1pkt 1fpkt"];
999--2385[label="1;6662pkt 6662fpkt"];
999--2515[label="0.00769231;1pkt 1fpkt"];
999--2532[label="0.000229779;1pkt 1fpkt"];
999--3106[label="0.00341297;1pkt 1fpkt"];
999--4008[label="0.999888;8900pkt 8900fpkt"];
999--5013[label="1;8901pkt 8901fpkt"];
2385--2515[label="0.00769231;1pkt 1fpkt"];
2385--2532[label="0.000229779;1pkt 1fpkt"];
2385--3106[label="0.00341297;1pkt 1fpkt"];
2385--4008[label="1;6662pkt 6662fpkt"];
2385--5013[label="1;6662pkt 6662fpkt"];
4008--5013[label="1;9304pkt 9304fpkt"];
</description>
    <slice>
      <filter src_ip="207.216.206.121" src_port="80"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
1160[label="131.81.204.119;d;182pkt 182fpkt", shape=diamond, color=yellow];
1161[label="130.139.220.42;s;128pkt 128fpkt", shape=diamond, color=yellow];
2407[label="130.139.220.42;s;128pkt 128fpkt", shape=hexagon, color=black];
3579[label="130.139.220.42;498pkt 498fpkt", shape=pentagon, color=darkviolet];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.220.42:*, 131.81.204.119:80}[41.5663%]&lt;BR/&gt;{130.139.220.42:*, 212.80.144.139:80}[27.9116%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8397%)&lt;BR/&gt; 3814: (0.160256%)&lt;BR/&gt; 3812: (0.160256%)&lt;BR/&gt; 3811: (0.160256%)&lt;BR/&gt; 3810: (0.160256%)&gt;];
}
1160--3579[label="1;182pkt 182fpkt"];
1161--1231[label="0.0078125;1pkt 1fpkt"];
1161--2407[label="1;128pkt 128fpkt"];
1161--3243[label="0.09375;12pkt 12fpkt"];
1161--3579[label="1;128pkt 128fpkt"];
2407--3243[label="0.09375;12pkt 12fpkt"];
2407--3579[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_ip="131.81.204.119" dst_port="80" src_ip="130.139.220.42"/>
      <filter dst_ip="212.80.144.139" dst_port="80" src_ip="130.139.220.42"/>
    </slice>
    <from sec="1044162089" usec="0"/>
    <to sec="1044163520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12966,1.88055,999,1 1 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_350{
style=filled;
color=gray75;
39[label="133.168.6.95s;3pkt 3fpkt", shape=rectangle, color=red];
80[label="148.94.227.227s;1pkt 1fpkt", shape=rectangle, color=red];
557[label="148.94.227.227s;1pkt 1fpkt", shape=ellipse, color=green];
854[label="148.94.70.51;s;611pkt 611fpkt", shape=diamond, color=yellow];
933[label="148.94.227.227;s;85pkt 85fpkt", shape=diamond, color=yellow];
934[label="194.140.84.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
1041[label="220.62.162.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
1052[label="194.198.239.109;d;2pkt 2fpkt", shape=diamond, color=yellow];
1062[label="193.228.245.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
1188[label="192.131.238.143;d;1pkt 1fpkt", shape=diamond, color=yellow];
1267[label="213.141.65.40;d;12pkt 12fpkt", shape=diamond, color=yellow];
1286[label="206.6.41.195;s;11pkt 11fpkt", shape=diamond, color=yellow];
1381[label="165.155.98.76;s;14pkt 14fpkt", shape=diamond, color=yellow];
1674[label="213.144.134.177;d;3pkt 3fpkt", shape=diamond, color=yellow];
1838[label="213.144.149.209;d;2pkt 2fpkt", shape=diamond, color=yellow];
1951[label="213.144.137.48;d;3pkt 3fpkt", shape=diamond, color=yellow];
1970[label="216.139.220.244;d;39pkt 39fpkt", shape=diamond, color=yellow];
1985[label="190.225.85.155;d;1pkt 1fpkt", shape=diamond, color=yellow];
2017[label="128.212.84.6;d;8pkt 8fpkt", shape=diamond, color=yellow];
2235[label="188.128.162.47;d;2pkt 2fpkt", shape=diamond, color=yellow];
2239[label="213.141.69.208;d;2pkt 2fpkt", shape=diamond, color=yellow];
2415[label="194.198.239.109;d;2pkt 2fpkt", shape=hexagon, color=black];
2459[label="148.94.227.227;s;24pkt 24fpkt", shape=hexagon, color=black];
2468[label="193.228.245.217;d;1pkt 1fpkt", shape=hexagon, color=black];
2504[label="213.141.65.40;d;8pkt 8fpkt", shape=hexagon, color=black];
2518[label="206.6.41.195;s;11pkt 11fpkt", shape=hexagon, color=black];
2670[label="220.62.162.13;d;1pkt 1fpkt", shape=hexagon, color=black];
2698[label="213.141.69.218;d;4pkt 4fpkt", shape=hexagon, color=black];
2807[label="213.144.137.48;d;2pkt 2fpkt", shape=hexagon, color=black];
2824[label="216.139.220.244;d;36pkt 36fpkt", shape=hexagon, color=black];
3037[label="190.225.85.155;d;1pkt 1fpkt", shape=hexagon, color=black];
3053[label="188.128.162.47;d;2pkt 2fpkt", shape=hexagon, color=black];
3056[label="213.141.69.208;d;2pkt 2fpkt", shape=hexagon, color=black];
3774[label="165.155.98.76;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4552[label="148.94.227.227;137pkt 137fpkt", shape=pentagon, color=darkviolet];
stat350[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.94.70.51:6257, *:6257}[74.6803%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (56.4286%)&lt;BR/&gt; 21: (14.9048%)&lt;BR/&gt; 80: (2.52381%)&lt;BR/&gt; 0: (2%)&lt;BR/&gt; 6699: (1.28571%)&gt;];
}
39--854[label="0.666667;2pkt 2fpkt"];
39--1062[label="1;1pkt 1fpkt"];
39--1188[label="1;1pkt 1fpkt"];
39--2468[label="1;1pkt 1fpkt"];
80--557[label="1;1pkt 1fpkt"];
80--933[label="1;1pkt 1fpkt"];
80--934[label="1;1pkt 1fpkt"];
80--2459[label="1;1pkt 1fpkt"];
80--4552[label="1;1pkt 1fpkt"];
557--933[label="1;1pkt 1fpkt"];
557--934[label="1;1pkt 1fpkt"];
557--2459[label="1;1pkt 1fpkt"];
557--4552[label="1;1pkt 1fpkt"];
854--1041[label="1;1pkt 1fpkt"];
854--1052[label="1;2pkt 2fpkt"];
854--1062[label="1;1pkt 1fpkt"];
854--1166[label="0.00163666;1pkt 1fpkt"];
854--1188[label="1;1pkt 1fpkt"];
854--1674[label="0.333333;1pkt 1fpkt"];
854--1985[label="1;1pkt 1fpkt"];
854--2415[label="1;2pkt 2fpkt"];
854--2468[label="1;1pkt 1fpkt"];
854--2670[label="1;1pkt 1fpkt"];
854--3037[label="1;1pkt 1fpkt"];
854--3237[label="0.232406;142pkt 142fpkt"];
933--934[label="1;1pkt 1fpkt"];
933--1674[label="0.333333;1pkt 1fpkt"];
933--1838[label="0.5;1pkt 1fpkt"];
933--1951[label="0.333333;1pkt 1fpkt"];
933--1970[label="1;39pkt 39fpkt"];
933--2017[label="1;8pkt 8fpkt"];
933--2235[label="0.5;1pkt 1fpkt"];
933--2459[label="1;24pkt 24fpkt"];
933--2698[label="0.5;2pkt 2fpkt"];
933--2807[label="0.5;1pkt 1fpkt"];
933--2824[label="1;36pkt 36fpkt"];
933--3053[label="0.5;1pkt 1fpkt"];
933--4552[label="1;85pkt 85fpkt"];
934--2459[label="1;1pkt 1fpkt"];
934--4552[label="1;1pkt 1fpkt"];
1041--2670[label="1;1pkt 1fpkt"];
1052--2415[label="1;2pkt 2fpkt"];
1052--3237[label="0.5;1pkt 1fpkt"];
1062--2468[label="1;1pkt 1fpkt"];
1267--1381[label="0.5;6pkt 6fpkt"];
1267--1559[label="0.5;6pkt 6fpkt"];
1267--2504[label="1;8pkt 8fpkt"];
1267--2771[label="0.5;6pkt 6fpkt"];
1267--3774[label="0.5;6pkt 6fpkt"];
1286--1674[label="0.333333;1pkt 1fpkt"];
1286--1838[label="0.5;1pkt 1fpkt"];
1286--1951[label="0.333333;1pkt 1fpkt"];
1286--2235[label="0.5;1pkt 1fpkt"];
1286--2518[label="1;11pkt 11fpkt"];
1286--2698[label="0.5;2pkt 2fpkt"];
1286--2807[label="0.5;1pkt 1fpkt"];
1286--3053[label="0.5;1pkt 1fpkt"];
1381--2239[label="1;2pkt 2fpkt"];
1381--2504[label="0.75;6pkt 6fpkt"];
1381--3056[label="1;2pkt 2fpkt"];
1381--3774[label="0.928571;13pkt 13fpkt"];
1674--2459[label="0.333333;1pkt 1fpkt"];
1674--2518[label="0.333333;1pkt 1fpkt"];
1674--4552[label="0.333333;1pkt 1fpkt"];
1838--2459[label="0.5;1pkt 1fpkt"];
1838--2518[label="0.5;1pkt 1fpkt"];
1838--4552[label="0.5;1pkt 1fpkt"];
1951--2518[label="0.333333;1pkt 1fpkt"];
1951--2807[label="1;2pkt 2fpkt"];
1951--3774[label="0.333333;1pkt 1fpkt"];
1951--4552[label="0.333333;1pkt 1fpkt"];
1970--2459[label="0.583333;14pkt 14fpkt"];
1970--2824[label="1;36pkt 36fpkt"];
1970--4552[label="1;39pkt 39fpkt"];
1985--3037[label="1;1pkt 1fpkt"];
2017--4552[label="1;8pkt 8fpkt"];
2235--2518[label="0.5;1pkt 1fpkt"];
2235--3053[label="1;2pkt 2fpkt"];
2235--4552[label="0.5;1pkt 1fpkt"];
2239--3056[label="1;2pkt 2fpkt"];
2239--3774[label="1;2pkt 2fpkt"];
2415--3237[label="0.5;1pkt 1fpkt"];
2459--2698[label="0.5;2pkt 2fpkt"];
2459--2824[label="0.583333;14pkt 14fpkt"];
2459--4552[label="1;24pkt 24fpkt"];
2504--2771[label="0.25;2pkt 2fpkt"];
2504--3774[label="0.75;6pkt 6fpkt"];
2518--2698[label="0.5;2pkt 2fpkt"];
2518--2807[label="0.5;1pkt 1fpkt"];
2518--3053[label="0.5;1pkt 1fpkt"];
2698--4552[label="0.5;2pkt 2fpkt"];
2807--4552[label="0.5;1pkt 1fpkt"];
2824--4552[label="1;36pkt 36fpkt"];
3053--4552[label="0.5;1pkt 1fpkt"];
3056--3774[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="148.94.70.51" src_port="6257"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_358{
style=filled;
color=gray75;
1390[label="206.6.43.110;s;34pkt 34fpkt", shape=diamond, color=yellow];
2557[label="206.6.43.110;s;34pkt 34fpkt", shape=hexagon, color=black];
stat358[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.6.43.110:*, 202.196.175.181:*}[55.8824%]&lt;BR/&gt;{206.6.43.110:80, *:*}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (14.7059%)&lt;BR/&gt; 0: (8.82353%)&lt;BR/&gt; 21: (4.41176%)&lt;BR/&gt; 64264: (1.47059%)&lt;BR/&gt; 64247: (1.47059%)&gt;];
}
1390--2557[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="202.196.175.181" src_ip="206.6.43.110"/>
      <filter src_ip="206.6.43.110" src_port="80"/>
    </slice>
    <from sec="1044162002" usec="0"/>
    <to sec="1044162344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_359{
style=filled;
color=gray75;
1477[label="194.44.21.148;s;106pkt 106fpkt", shape=diamond, color=yellow];
2560[label="194.44.21.148;s;106pkt 106fpkt", shape=hexagon, color=black];
stat359[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.44.21.148:80, 130.138.60.146:*}[97.1698%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3377: (0.471698%)&lt;BR/&gt; 3115: (0.471698%)&lt;BR/&gt; 2841: (0.471698%)&lt;BR/&gt; 1432: (0.471698%)&gt;];
}
1477--2560[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.60.146" src_ip="194.44.21.148" src_port="80"/>
    </slice>
    <from sec="1044163192" usec="0"/>
    <to sec="1044163450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_360{
style=filled;
color=gray75;
1486[label="148.94.224.28;s;77pkt 77fpkt", shape=diamond, color=yellow];
1610[label="206.45.197.190;d;1pkt 1fpkt", shape=diamond, color=yellow];
2562[label="148.94.224.28;s;70pkt 70fpkt", shape=hexagon, color=black];
2662[label="206.45.197.190;d;1pkt 1fpkt", shape=hexagon, color=black];
3481[label="148.94.224.28;76pkt 76fpkt", shape=pentagon, color=darkviolet];
4758[label="148.94.224.28;77pkt 77fpkt", shape=invtriangle, color=brown];
5359[label="148.94.224.28;77pkt 77fpkt", shape=invhouse, color=bisque];
stat360[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.94.224.28:80, 194.200.22.166:*}[32.0513%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49774: (0.923483%)&lt;BR/&gt; 65011: (0.659631%)&lt;BR/&gt; 64550: (0.659631%)&lt;BR/&gt; 64034: (0.659631%)&gt;];
}
1486--1610[label="1;1pkt 1fpkt"];
1486--2562[label="1;70pkt 70fpkt"];
1486--2662[label="1;1pkt 1fpkt"];
1486--3481[label="0.986842;75pkt 75fpkt"];
1486--4758[label="0.987013;76pkt 76fpkt"];
1486--5359[label="0.987013;76pkt 76fpkt"];
1610--2562[label="1;1pkt 1fpkt"];
1610--2662[label="1;1pkt 1fpkt"];
1610--3481[label="1;1pkt 1fpkt"];
1610--4758[label="1;1pkt 1fpkt"];
1610--5359[label="1;1pkt 1fpkt"];
2562--2662[label="1;1pkt 1fpkt"];
2562--3481[label="0.971429;68pkt 68fpkt"];
2562--4758[label="0.985714;69pkt 69fpkt"];
2562--5359[label="0.985714;69pkt 69fpkt"];
2662--3481[label="1;1pkt 1fpkt"];
2662--4758[label="1;1pkt 1fpkt"];
2662--5359[label="1;1pkt 1fpkt"];
3481--4758[label="1;76pkt 76fpkt"];
3481--5359[label="1;76pkt 76fpkt"];
4758--5359[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="194.200.22.166" src_ip="148.94.224.28" src_port="80"/>
    </slice>
    <from sec="1044162010" usec="0"/>
    <to sec="1044163495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
1487[label="130.139.8.6;s;232pkt 232fpkt", shape=diamond, color=yellow];
2564[label="130.139.8.6;s;89pkt 89fpkt", shape=hexagon, color=black];
3309[label="130.139.8.6;261pkt 261fpkt", shape=pentagon, color=darkviolet];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.8.6:25, *:*}[50.1916%]&lt;BR/&gt;{130.139.8.6:*, *:113}[49.4253%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (25.4296%)&lt;BR/&gt; 113: (24.5704%)&lt;BR/&gt; 61740: (0.257732%)&lt;BR/&gt; 59050: (0.257732%)&lt;BR/&gt; 58673: (0.257732%)&gt;];
}
1487--2564[label="1;89pkt 89fpkt"];
1487--3309[label="1;232pkt 232fpkt"];
2564--3309[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter src_ip="130.139.8.6" src_port="25"/>
      <filter dst_port="113" src_ip="130.139.8.6"/>
    </slice>
    <from sec="1044162011" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20047,1.85333,503,1 1 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
16[label="136.253.37.27s;1pkt 1fpkt", shape=rectangle, color=red];
51[label="208.216.49.137s;1pkt 1fpkt", shape=rectangle, color=red];
528[label="136.253.37.27s;1pkt 1fpkt", shape=ellipse, color=green];
652[label="190.242.5.137s;1pkt 1fpkt", shape=ellipse, color=green];
952[label="130.139.27.242;d;10pkt 10fpkt", shape=diamond, color=yellow];
953[label="208.216.49.137;s;2pkt 2fpkt", shape=diamond, color=yellow];
1113[label="207.35.1.228;d;115pkt 115fpkt", shape=diamond, color=yellow];
1498[label="193.148.51.131;s;2pkt 2fpkt", shape=diamond, color=yellow];
1499[label="136.253.37.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
2132[label="203.84.161.99;s;1pkt 1fpkt", shape=diamond, color=yellow];
2462[label="130.139.27.242;d;10pkt 10fpkt", shape=hexagon, color=black];
2569[label="193.148.51.131;s;2pkt 2fpkt", shape=hexagon, color=black];
2752[label="208.216.49.137;s;2pkt 2fpkt", shape=hexagon, color=black];
2850[label="136.253.37.27;s;1pkt 1fpkt", shape=hexagon, color=black];
3897[label="203.84.161.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4089[label="208.216.49.137;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4183[label="203.15.240.153;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4339[label="189.9.167.182;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5052[label="208.216.49.137;1pkt 1fpkt", shape=invtriangle, color=brown];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 207.35.1.228:*}[35.0365%]&lt;BR/&gt;{*:80, 207.35.1.228:*}[29.927%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.093%)&lt;BR/&gt; 53: (13.9535%)&lt;BR/&gt; 6881: (7.84884%)&lt;BR/&gt; 4814: (1.74419%)&lt;BR/&gt; 4544: (1.74419%)&gt;];
}
16--528[label="1;1pkt 1fpkt"];
16--1113[label="1;1pkt 1fpkt"];
16--1499[label="1;1pkt 1fpkt"];
16--2850[label="1;1pkt 1fpkt"];
51--652[label="1;1pkt 1fpkt"];
51--952[label="1;1pkt 1fpkt"];
51--953[label="1;1pkt 1fpkt"];
51--2462[label="1;1pkt 1fpkt"];
51--2752[label="1;1pkt 1fpkt"];
528--1113[label="1;1pkt 1fpkt"];
528--1499[label="1;1pkt 1fpkt"];
528--2850[label="1;1pkt 1fpkt"];
652--952[label="1;1pkt 1fpkt"];
652--953[label="1;1pkt 1fpkt"];
652--2462[label="1;1pkt 1fpkt"];
652--2752[label="1;1pkt 1fpkt"];
952--953[label="1;2pkt 2fpkt"];
952--2462[label="1;10pkt 10fpkt"];
952--2752[label="1;2pkt 2fpkt"];
952--3267[label="0.2;2pkt 2fpkt"];
952--4089[label="1;1pkt 1fpkt"];
952--4183[label="0.2;2pkt 2fpkt"];
952--4442[label="0.1;1pkt 1fpkt"];
952--5052[label="1;1pkt 1fpkt"];
953--2462[label="1;2pkt 2fpkt"];
953--2752[label="1;2pkt 2fpkt"];
953--4089[label="1;1pkt 1fpkt"];
953--5052[label="1;1pkt 1fpkt"];
1113--1323[label="0.046729;5pkt 5fpkt"];
1113--1498[label="1;2pkt 2fpkt"];
1113--1499[label="1;1pkt 1fpkt"];
1113--1749[label="0.026087;3pkt 3fpkt"];
1113--1895[label="0.0173913;2pkt 2fpkt"];
1113--2132[label="1;1pkt 1fpkt"];
1113--2170[label="0.0273973;2pkt 2fpkt"];
1113--2217[label="0.0263158;2pkt 2fpkt"];
1113--2569[label="1;2pkt 2fpkt"];
1113--2850[label="1;1pkt 1fpkt"];
1113--3236[label="0.00869565;1pkt 1fpkt"];
1113--3239[label="0.00869565;1pkt 1fpkt"];
1113--3354[label="0.0294118;1pkt 1fpkt"];
1113--3432[label="0.0444444;2pkt 2fpkt"];
1113--3465[label="0.026087;3pkt 3fpkt"];
1113--3746[label="0.0116279;1pkt 1fpkt"];
1113--3843[label="0.025641;1pkt 1fpkt"];
1113--3868[label="0.0173913;2pkt 2fpkt"];
1113--3897[label="1;1pkt 1fpkt"];
1113--3955[label="0.0113636;1pkt 1fpkt"];
1113--4183[label="0.2;3pkt 3fpkt"];
1113--4339[label="0.5;2pkt 2fpkt"];
1113--4701[label="0.030303;1pkt 1fpkt"];
1113--4892[label="0.0114943;1pkt 1fpkt"];
1113--4989[label="0.0113636;1pkt 1fpkt"];
1113--5153[label="0.03125;2pkt 2fpkt"];
1113--5330[label="0.0294118;1pkt 1fpkt"];
1113--5408[label="0.0116279;1pkt 1fpkt"];
1113--5508[label="0.0307692;2pkt 2fpkt"];
1498--2569[label="1;2pkt 2fpkt"];
1499--2850[label="1;1pkt 1fpkt"];
2132--3897[label="1;1pkt 1fpkt"];
2462--2752[label="1;2pkt 2fpkt"];
2462--3267[label="0.2;2pkt 2fpkt"];
2462--4089[label="1;1pkt 1fpkt"];
2462--4183[label="0.2;2pkt 2fpkt"];
2462--4442[label="0.1;1pkt 1fpkt"];
2462--5052[label="1;1pkt 1fpkt"];
2752--4089[label="1;1pkt 1fpkt"];
2752--5052[label="1;1pkt 1fpkt"];
4089--5052[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.35.1.228" src_port="80"/>
      <filter dst_ip="207.35.1.228" src_port="53"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19555,1.95287,999,1 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_363{
style=filled;
color=gray75;
455[label="207.88.209.252s;2pkt 2fpkt", shape=rectangle, color=red];
1051[label="165.155.141.252;s;416pkt 416fpkt", shape=diamond, color=yellow];
1175[label="194.178.133.212;d;1pkt 1fpkt", shape=diamond, color=yellow];
2414[label="194.178.133.212;d;1pkt 1fpkt", shape=hexagon, color=black];
5583[label="165.155.141.252;415pkt 415fpkt", shape=invhouse, color=bisque];
stat363[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.141.252:33049, *:28800}[97.1223%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33049: (48.4431%)&lt;BR/&gt; 28800: (48.4431%)&lt;BR/&gt; 2346: (0.538922%)&lt;BR/&gt; 80: (0.419162%)&lt;BR/&gt; 32887: (0.239521%)&gt;];
}
455--897[label="0.5;1pkt 1fpkt"];
455--1051[label="0.5;1pkt 1fpkt"];
455--5583[label="0.5;1pkt 1fpkt"];
1051--1175[label="1;1pkt 1fpkt"];
1051--2414[label="1;1pkt 1fpkt"];
1051--3243[label="0.00240385;1pkt 1fpkt"];
1051--5583[label="1;415pkt 415fpkt"];
1175--2414[label="1;1pkt 1fpkt"];
1175--5583[label="1;1pkt 1fpkt"];
2414--5583[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="28800" src_ip="165.155.141.252" src_port="33049"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_364{
style=filled;
color=gray75;
1325[label="198.232.37.65;s;494pkt 494fpkt", shape=diamond, color=yellow];
2585[label="198.232.37.65;s;494pkt 494fpkt", shape=hexagon, color=black];
3682[label="198.232.37.65;507pkt 507fpkt", shape=pentagon, color=darkviolet];
4858[label="198.232.37.65;507pkt 507fpkt", shape=invtriangle, color=brown];
stat364[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.232.37.65:6667, *:*}[26.7717%]&lt;BR/&gt;{198.232.37.65:*, *:113}[22.8346%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (13.2867%)&lt;BR/&gt; 113: (11.3387%)&lt;BR/&gt; 1080: (7.29271%)&lt;BR/&gt; 8080: (4.2957%)&lt;BR/&gt; 80: (4.2957%)&gt;];
}
1325--2585[label="1;494pkt 494fpkt"];
1325--3232[label="0.00404858;2pkt 2fpkt"];
1325--3235[label="0.00404858;2pkt 2fpkt"];
1325--3238[label="0.00202429;1pkt 1fpkt"];
1325--3249[label="0.00404858;2pkt 2fpkt"];
1325--3252[label="0.00404858;2pkt 2fpkt"];
1325--3682[label="0.997976;493pkt 493fpkt"];
1325--4858[label="0.997976;493pkt 493fpkt"];
2585--3232[label="0.00404858;2pkt 2fpkt"];
2585--3235[label="0.00404858;2pkt 2fpkt"];
2585--3238[label="0.00202429;1pkt 1fpkt"];
2585--3249[label="0.00404858;2pkt 2fpkt"];
2585--3252[label="0.00404858;2pkt 2fpkt"];
2585--3682[label="0.997976;493pkt 493fpkt"];
2585--4858[label="0.997976;493pkt 493fpkt"];
3682--4858[label="1;507pkt 507fpkt"];
</description>
    <slice>
      <filter src_ip="198.232.37.65" src_port="6667"/>
      <filter dst_port="113" src_ip="198.232.37.65"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_366{
style=filled;
color=gray75;
1590[label="130.139.48.38;d;137pkt 137fpkt", shape=diamond, color=yellow];
1713[label="213.42.94.5;s;64pkt 64fpkt", shape=diamond, color=yellow];
2622[label="130.139.48.38;d;68pkt 68fpkt", shape=hexagon, color=black];
3304[label="213.42.94.5;167pkt 167fpkt", shape=pentagon, color=darkviolet];
4678[label="213.42.94.5;168pkt 168fpkt", shape=invtriangle, color=brown];
stat366[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.42.94.5:80, 130.139.48.38:*}[97.6744%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3377%)&lt;BR/&gt; 1863: (0.662252%)&lt;BR/&gt; 33767: (0.413907%)&lt;BR/&gt; 33756: (0.413907%)&lt;BR/&gt; 33754: (0.413907%)&gt;];
}
1590--1713[label="1;64pkt 64fpkt"];
1590--2271[label="0.0147059;1pkt 1fpkt"];
1590--2622[label="1;68pkt 68fpkt"];
1590--3304[label="0.963504;132pkt 132fpkt"];
1590--4678[label="0.970803;133pkt 133fpkt"];
1713--2622[label="1;64pkt 64fpkt"];
1713--3304[label="0.984375;63pkt 63fpkt"];
1713--4678[label="1;64pkt 64fpkt"];
2622--3304[label="0.926471;63pkt 63fpkt"];
2622--4678[label="0.941176;64pkt 64fpkt"];
3304--4678[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter dst_ip="130.139.48.38" src_ip="213.42.94.5" src_port="80"/>
    </slice>
    <from sec="1044162144" usec="0"/>
    <to sec="1044163497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_370{
style=filled;
color=gray75;
1755[label="207.164.180.232;d;30pkt 30fpkt", shape=diamond, color=yellow];
2693[label="207.164.180.232;d;30pkt 30fpkt", shape=hexagon, color=black];
stat370[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:2001, 207.164.180.232:2001}[56.6667%]&lt;BR/&gt;{*:2002, 207.164.180.232:2002}[43.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2001: (56.6667%)&lt;BR/&gt; 2002: (43.3333%)&gt;];
}
1755--2693[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="207.164.180.232" dst_port="2001" src_port="2001"/>
      <filter dst_ip="207.164.180.232" dst_port="2002" src_port="2002"/>
    </slice>
    <from sec="1044162005" usec="0"/>
    <to sec="1044163455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
1664[label="130.139.208.3;s;111pkt 111fpkt", shape=diamond, color=yellow];
2696[label="130.139.208.3;s;111pkt 111fpkt", shape=hexagon, color=black];
3288[label="130.139.208.3;130pkt 130fpkt", shape=pentagon, color=darkviolet];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.208.3:*, *:25}[56.4885%]&lt;BR/&gt;{130.139.208.3:25, *:*}[39.6947%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.4375%)&lt;BR/&gt; 113: (1.13636%)&lt;BR/&gt; 3880: (0.852273%)&lt;BR/&gt; 62858: (0.426136%)&lt;BR/&gt; 61952: (0.426136%)&gt;];
}
1664--2696[label="1;111pkt 111fpkt"];
1664--3288[label="0.990991;110pkt 110fpkt"];
2696--3288[label="0.990991;110pkt 110fpkt"];
</description>
    <slice>
      <filter src_ip="130.139.208.3" src_port="25"/>
      <filter dst_port="25" src_ip="130.139.208.3"/>
    </slice>
    <from sec="1044162020" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
1787[label="130.139.251.131;d;149pkt 149fpkt", shape=diamond, color=yellow];
1946[label="192.211.195.153;s;22pkt 22fpkt", shape=diamond, color=yellow];
2711[label="130.139.251.131;d;129pkt 129fpkt", shape=hexagon, color=black];
4181[label="192.211.195.153;22pkt 22fpkt", shape=pentagon, color=darkviolet];
5096[label="192.211.195.153;21pkt 21fpkt", shape=invtriangle, color=brown];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.161.104.68:*, 130.139.251.131:80}[84.5638%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1073: (0.728863%)&lt;BR/&gt; 1159: (0.58309%)&lt;BR/&gt; 1158: (0.58309%)&lt;BR/&gt; 1157: (0.58309%)&gt;];
}
1787--1946[label="1;22pkt 22fpkt"];
1787--2711[label="1;129pkt 129fpkt"];
1787--4181[label="1;22pkt 22fpkt"];
1787--5096[label="1;21pkt 21fpkt"];
1946--2711[label="0.0909091;2pkt 2fpkt"];
1946--4181[label="1;22pkt 22fpkt"];
1946--5096[label="1;21pkt 21fpkt"];
2711--4181[label="0.0909091;2pkt 2fpkt"];
2711--5096[label="0.047619;1pkt 1fpkt"];
4181--5096[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="130.139.251.131" dst_port="80" src_ip="220.161.104.68"/>
    </slice>
    <from sec="1044162603" usec="0"/>
    <to sec="1044162902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
1551[label="203.96.159.97;s;3pkt 3fpkt", shape=diamond, color=yellow];
1884[label="206.34.101.27;d;2pkt 2fpkt", shape=diamond, color=yellow];
2722[label="203.96.159.97;s;3pkt 3fpkt", shape=hexagon, color=black];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.96.152.187:1863, 206.34.101.27:1160}[25%]&lt;BR/&gt;{203.96.159.97:1863, 206.34.97.36:1151}[25%]&lt;BR/&gt;{203.96.159.97:1863, 133.168.186.49:2124}[25%]&lt;BR/&gt;{203.96.159.97:1863, 206.34.101.27:1172}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1172: (18.75%)&lt;BR/&gt; 2124: (12.5%)&lt;BR/&gt; 1151: (12.5%)&lt;BR/&gt; 1160: (6.25%)&gt;];
}
1551--1884[label="0.5;1pkt 1fpkt"];
1551--2722[label="1;3pkt 3fpkt"];
1884--2722[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.34.101.27" dst_port="1172" src_ip="203.96.159.97" src_port="1863"/>
      <filter dst_ip="133.168.186.49" dst_port="2124" src_ip="203.96.159.97" src_port="1863"/>
      <filter dst_ip="206.34.97.36" dst_port="1151" src_ip="203.96.159.97" src_port="1863"/>
      <filter dst_ip="206.34.101.27" dst_port="1160" src_ip="203.96.152.187" src_port="1863"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_374{
style=filled;
color=gray75;
1756[label="198.164.52.81;s;207pkt 207fpkt", shape=diamond, color=yellow];
2730[label="198.164.52.81;s;144pkt 144fpkt", shape=hexagon, color=black];
3805[label="198.164.52.81;230pkt 230fpkt", shape=pentagon, color=darkviolet];
4913[label="198.164.52.81;231pkt 231fpkt", shape=invtriangle, color=brown];
stat374[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.164.52.81:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1424: (0.738916%)&lt;BR/&gt; 1457: (0.67734%)&lt;BR/&gt; 3528: (0.492611%)&lt;BR/&gt; 1445: (0.492611%)&gt;];
}
1756--2730[label="1;144pkt 144fpkt"];
1756--3805[label="0.995169;206pkt 206fpkt"];
1756--4913[label="1;207pkt 207fpkt"];
2730--3805[label="0.993056;143pkt 143fpkt"];
2730--4913[label="1;144pkt 144fpkt"];
3805--4913[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter src_ip="198.164.52.81" src_port="53"/>
    </slice>
    <from sec="1044162005" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_375{
style=filled;
color=gray75;
1291[label="207.40.172.8;d;11pkt 11fpkt", shape=diamond, color=yellow];
1504[label="192.20.38.119;s;4pkt 4fpkt", shape=diamond, color=yellow];
1957[label="217.135.164.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
2520[label="207.40.172.8;d;10pkt 10fpkt", shape=hexagon, color=black];
2735[label="192.20.38.119;s;4pkt 4fpkt", shape=hexagon, color=black];
2952[label="217.135.164.16;s;1pkt 1fpkt", shape=hexagon, color=black];
3271[label="217.135.164.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3364[label="217.135.164.13;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3996[label="192.20.38.119;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat375[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.20.38.119:*, 207.40.172.8:*}[36.3636%]&lt;BR/&gt;{217.135.165.16:80, 207.40.172.8:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (21.6216%)&lt;BR/&gt; 49274: (6.75676%)&lt;BR/&gt; 49273: (6.75676%)&lt;BR/&gt; 49271: (6.75676%)&lt;BR/&gt; 49270: (6.75676%)&gt;];
}
1291--1504[label="1;4pkt 4fpkt"];
1291--1957[label="1;1pkt 1fpkt"];
1291--2520[label="1;10pkt 10fpkt"];
1291--2735[label="1;4pkt 4fpkt"];
1291--2952[label="1;1pkt 1fpkt"];
1291--3271[label="1;1pkt 1fpkt"];
1291--3364[label="1;1pkt 1fpkt"];
1291--3996[label="1;4pkt 4fpkt"];
1504--2520[label="1;4pkt 4fpkt"];
1504--2735[label="1;4pkt 4fpkt"];
1504--3996[label="1;4pkt 4fpkt"];
1957--2520[label="1;1pkt 1fpkt"];
1957--2952[label="1;1pkt 1fpkt"];
2520--2735[label="1;4pkt 4fpkt"];
2520--2952[label="1;1pkt 1fpkt"];
2520--3271[label="1;1pkt 1fpkt"];
2520--3364[label="1;1pkt 1fpkt"];
2520--3996[label="1;4pkt 4fpkt"];
2735--3996[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="207.40.172.8" src_ip="192.20.38.119"/>
      <filter dst_ip="207.40.172.8" src_ip="217.135.165.16" src_port="80"/>
    </slice>
    <from sec="1044162106" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
1843[label="206.34.79.97;d;46pkt 46fpkt", shape=diamond, color=yellow];
1844[label="146.166.64.164;s;41pkt 41fpkt", shape=diamond, color=yellow];
2737[label="206.34.79.97;d;46pkt 46fpkt", shape=hexagon, color=black];
4242[label="146.166.64.164;48pkt 48fpkt", shape=pentagon, color=darkviolet];
5133[label="146.166.64.164;47pkt 47fpkt", shape=invtriangle, color=brown];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.166.64.164:*, 206.34.79.97:80}[90.566%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2456%)&lt;BR/&gt; 25: (1.75439%)&lt;BR/&gt; 1257: (1.09649%)&lt;BR/&gt; 1255: (1.09649%)&lt;BR/&gt; 1253: (1.09649%)&gt;];
}
1843--1844[label="1;41pkt 41fpkt"];
1843--2737[label="1;46pkt 46fpkt"];
1843--3235[label="0.152174;7pkt 7fpkt"];
1843--3238[label="0.0652174;3pkt 3fpkt"];
1843--4242[label="0.891304;41pkt 41fpkt"];
1843--5133[label="0.869565;40pkt 40fpkt"];
1844--2737[label="1;41pkt 41fpkt"];
1844--3235[label="0.170732;7pkt 7fpkt"];
1844--3238[label="0.0731707;3pkt 3fpkt"];
1844--4242[label="1;41pkt 41fpkt"];
1844--5133[label="0.97561;40pkt 40fpkt"];
2737--3235[label="0.152174;7pkt 7fpkt"];
2737--3238[label="0.0652174;3pkt 3fpkt"];
2737--4242[label="0.891304;41pkt 41fpkt"];
2737--5133[label="0.869565;40pkt 40fpkt"];
4242--5133[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="206.34.79.97" dst_port="80" src_ip="146.166.64.164"/>
    </slice>
    <from sec="1044162288" usec="0"/>
    <to sec="1044163366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23831,1.87503,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_378{
style=filled;
color=gray75;
23[label="148.94.16.47s;2pkt 2fpkt", shape=rectangle, color=red];
888[label="148.94.16.47;s;5619pkt 5619fpkt", shape=diamond, color=yellow];
1014[label="188.246.162.145;d;1pkt 1fpkt", shape=diamond, color=yellow];
1092[label="190.25.76.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
1219[label="207.40.162.208;d;1pkt 1fpkt", shape=diamond, color=yellow];
1453[label="220.4.110.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
1882[label="220.142.69.254;d;1pkt 1fpkt", shape=diamond, color=yellow];
2388[label="190.25.76.47;s;1pkt 1fpkt", shape=hexagon, color=black];
2488[label="207.40.162.208;d;1pkt 1fpkt", shape=hexagon, color=black];
2755[label="220.142.69.254;d;1pkt 1fpkt", shape=hexagon, color=black];
2893[label="188.246.162.145;d;1pkt 1fpkt", shape=hexagon, color=black];
2965[label="220.4.110.96;d;1pkt 1fpkt", shape=hexagon, color=black];
3076[label="148.94.16.47;s;5619pkt 5619fpkt", shape=hexagon, color=black];
3611[label="148.94.16.47;5852pkt 5852fpkt", shape=pentagon, color=darkviolet];
4825[label="148.94.16.47;5852pkt 5852fpkt", shape=invtriangle, color=brown];
5386[label="190.25.76.47;1pkt 1fpkt", shape=invhouse, color=bisque];
stat378[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.94.16.47:11520, *:*}[68.1585%]&lt;BR/&gt;{148.94.16.47:4662, *:*}[27.5196%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11520: (34.1538%)&lt;BR/&gt; 4662: (13.8205%)&lt;BR/&gt; 0: (4.28665%)&lt;BR/&gt; 4665: (0.505337%)&lt;BR/&gt; 1025: (0.222174%)&gt;];
}
23--888[label="0.5;1pkt 1fpkt"];
23--1014[label="1;1pkt 1fpkt"];
23--1092[label="1;1pkt 1fpkt"];
23--1219[label="1;1pkt 1fpkt"];
23--2388[label="1;1pkt 1fpkt"];
23--2488[label="1;1pkt 1fpkt"];
23--2893[label="1;1pkt 1fpkt"];
23--3076[label="0.5;1pkt 1fpkt"];
23--3611[label="0.5;1pkt 1fpkt"];
23--4825[label="0.5;1pkt 1fpkt"];
23--5386[label="1;1pkt 1fpkt"];
888--1014[label="1;1pkt 1fpkt"];
888--1453[label="1;1pkt 1fpkt"];
888--1882[label="1;1pkt 1fpkt"];
888--2755[label="1;1pkt 1fpkt"];
888--2893[label="1;1pkt 1fpkt"];
888--2965[label="1;1pkt 1fpkt"];
888--3076[label="1;5619pkt 5619fpkt"];
888--3232[label="0.00183486;3pkt 3fpkt"];
888--3235[label="0.005386;9pkt 9fpkt"];
888--3238[label="0.00561798;10pkt 10fpkt"];
888--3243[label="0.00130378;2pkt 2fpkt"];
888--3249[label="0.00183486;3pkt 3fpkt"];
888--3252[label="0.00183374;3pkt 3fpkt"];
888--3611[label="0.999822;5618pkt 5618fpkt"];
888--4825[label="0.999822;5618pkt 5618fpkt"];
1014--2893[label="1;1pkt 1fpkt"];
1014--3076[label="1;1pkt 1fpkt"];
1014--3611[label="1;1pkt 1fpkt"];
1014--4825[label="1;1pkt 1fpkt"];
1092--1219[label="1;1pkt 1fpkt"];
1092--2388[label="1;1pkt 1fpkt"];
1092--2488[label="1;1pkt 1fpkt"];
1092--5386[label="1;1pkt 1fpkt"];
1219--2388[label="1;1pkt 1fpkt"];
1219--2488[label="1;1pkt 1fpkt"];
1219--5386[label="1;1pkt 1fpkt"];
1453--2965[label="1;1pkt 1fpkt"];
1453--3076[label="1;1pkt 1fpkt"];
1453--3611[label="1;1pkt 1fpkt"];
1453--4825[label="1;1pkt 1fpkt"];
1882--2755[label="1;1pkt 1fpkt"];
1882--3076[label="1;1pkt 1fpkt"];
1882--3611[label="1;1pkt 1fpkt"];
1882--4825[label="1;1pkt 1fpkt"];
2388--2488[label="1;1pkt 1fpkt"];
2388--5386[label="1;1pkt 1fpkt"];
2488--5386[label="1;1pkt 1fpkt"];
2755--3076[label="1;1pkt 1fpkt"];
2755--3611[label="1;1pkt 1fpkt"];
2755--4825[label="1;1pkt 1fpkt"];
2893--3076[label="1;1pkt 1fpkt"];
2893--3611[label="1;1pkt 1fpkt"];
2893--4825[label="1;1pkt 1fpkt"];
2965--3076[label="1;1pkt 1fpkt"];
2965--3611[label="1;1pkt 1fpkt"];
2965--4825[label="1;1pkt 1fpkt"];
3076--3232[label="0.00183486;3pkt 3fpkt"];
3076--3235[label="0.005386;9pkt 9fpkt"];
3076--3238[label="0.00561798;10pkt 10fpkt"];
3076--3243[label="0.00130378;2pkt 2fpkt"];
3076--3249[label="0.00183486;3pkt 3fpkt"];
3076--3252[label="0.00183374;3pkt 3fpkt"];
3076--3611[label="0.999822;5618pkt 5618fpkt"];
3076--4825[label="0.999822;5618pkt 5618fpkt"];
3611--4825[label="1;5852pkt 5852fpkt"];
</description>
    <slice>
      <filter src_ip="148.94.16.47" src_port="11520"/>
      <filter src_ip="148.94.16.47" src_port="4662"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
1723[label="206.6.42.169;s;82pkt 82fpkt", shape=diamond, color=yellow];
2756[label="206.6.42.169;s;79pkt 79fpkt", shape=hexagon, color=black];
4266[label="206.6.42.169;83pkt 83fpkt", shape=pentagon, color=darkviolet];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.6.42.169:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1723--2756[label="1;79pkt 79fpkt"];
1723--4266[label="1;82pkt 82fpkt"];
2756--4266[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter src_ip="206.6.42.169"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
1137[label="133.168.160.138;s;853pkt 853fpkt", shape=diamond, color=yellow];
1158[label="128.193.14.119;d;128pkt 128fpkt", shape=diamond, color=yellow];
1542[label="217.129.72.93;d;157pkt 157fpkt", shape=diamond, color=yellow];
1614[label="213.34.138.206;d;22pkt 22fpkt", shape=diamond, color=yellow];
2194[label="194.185.170.9;d;69pkt 69fpkt", shape=diamond, color=yellow];
2406[label="128.193.14.119;d;128pkt 128fpkt", shape=hexagon, color=black];
2757[label="217.129.72.93;d;107pkt 107fpkt", shape=hexagon, color=black];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.160.138:*, 217.129.72.93:80}[20.2814%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9754%)&lt;BR/&gt; 443: (0.614754%)&lt;BR/&gt; 8099: (0.409836%)&lt;BR/&gt; 49152: (0.136612%)&lt;BR/&gt; 49157: (0.102459%)&gt;];
}
1137--1158[label="1;128pkt 128fpkt"];
1137--1170[label="0.151515;10pkt 10fpkt"];
1137--1322[label="0.0147059;2pkt 2fpkt"];
1137--1402[label="0.0122324;4pkt 4fpkt"];
1137--1542[label="1;157pkt 157fpkt"];
1137--1548[label="0.0138889;2pkt 2fpkt"];
1137--1614[label="1;22pkt 22fpkt"];
1137--1631[label="0.0130719;2pkt 2fpkt"];
1137--1772[label="0.0645161;2pkt 2fpkt"];
1137--1903[label="0.00787402;1pkt 1fpkt"];
1137--1905[label="0.0325203;4pkt 4fpkt"];
1137--1966[label="0.0288462;3pkt 3fpkt"];
1137--2194[label="1;69pkt 69fpkt"];
1137--2215[label="0.0224719;2pkt 2fpkt"];
1137--2221[label="0.244444;22pkt 22fpkt"];
1137--2406[label="1;128pkt 128fpkt"];
1137--2602[label="0.0144928;2pkt 2fpkt"];
1137--2757[label="1;107pkt 107fpkt"];
1137--2775[label="0.010101;1pkt 1fpkt"];
1137--2785[label="0.0163934;4pkt 4fpkt"];
1137--2845[label="0.0227273;2pkt 2fpkt"];
1137--2973[label="0.0136054;2pkt 2fpkt"];
1137--3087[label="0.0224719;2pkt 2fpkt"];
1137--3098[label="0.244444;22pkt 22fpkt"];
1137--3198[label="0.0163934;4pkt 4fpkt"];
1137--3232[label="0.00937866;8pkt 8fpkt"];
1137--3235[label="0.0269637;23pkt 23fpkt"];
1137--3238[label="0.024619;21pkt 21fpkt"];
1137--3243[label="0.007034;6pkt 6fpkt"];
1137--3249[label="0.00937866;8pkt 8fpkt"];
1137--3252[label="0.00937866;8pkt 8fpkt"];
1158--2406[label="1;128pkt 128fpkt"];
1542--2757[label="1;107pkt 107fpkt"];
1542--3232[label="0.0382166;6pkt 6fpkt"];
1542--3235[label="0.0191083;3pkt 3fpkt"];
1542--3238[label="0.0318471;5pkt 5fpkt"];
1542--3249[label="0.0382166;6pkt 6fpkt"];
1542--3252[label="0.0382166;6pkt 6fpkt"];
1614--3235[label="0.863636;19pkt 19fpkt"];
1614--3238[label="0.181818;4pkt 4fpkt"];
2757--3232[label="0.0560748;6pkt 6fpkt"];
2757--3235[label="0.0280374;3pkt 3fpkt"];
2757--3238[label="0.046729;5pkt 5fpkt"];
2757--3249[label="0.0560748;6pkt 6fpkt"];
2757--3252[label="0.0560748;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="217.129.72.93" dst_port="80" src_ip="133.168.160.138"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
1901[label="171.43.203.77;d;280pkt 280fpkt", shape=diamond, color=yellow];
1902[label="148.94.116.127;s;281pkt 281fpkt", shape=diamond, color=yellow];
2774[label="148.94.116.127;s;229pkt 229fpkt", shape=hexagon, color=black];
3034[label="171.43.203.77;d;262pkt 262fpkt", shape=hexagon, color=black];
4025[label="148.94.116.127;295pkt 295fpkt", shape=pentagon, color=darkviolet];
5024[label="148.94.116.127;294pkt 294fpkt", shape=invtriangle, color=brown];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.94.116.127:139, 171.43.203.77:*}[99.661%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.9086%)&lt;BR/&gt; 3795: (0.182815%)&lt;BR/&gt; 3792: (0.182815%)&lt;BR/&gt; 3788: (0.182815%)&lt;BR/&gt; 3785: (0.182815%)&gt;];
}
1901--1902[label="1;280pkt 280fpkt"];
1901--2774[label="0.995633;228pkt 228fpkt"];
1901--3034[label="1;262pkt 262fpkt"];
1901--4025[label="1;280pkt 280fpkt"];
1901--5024[label="1;280pkt 280fpkt"];
1902--2774[label="1;229pkt 229fpkt"];
1902--3034[label="1;262pkt 262fpkt"];
1902--4025[label="1;281pkt 281fpkt"];
1902--5024[label="0.996441;280pkt 280fpkt"];
2774--3034[label="0.995633;228pkt 228fpkt"];
2774--4025[label="1;229pkt 229fpkt"];
2774--5024[label="0.995633;228pkt 228fpkt"];
3034--4025[label="1;262pkt 262fpkt"];
3034--5024[label="1;262pkt 262fpkt"];
4025--5024[label="1;294pkt 294fpkt"];
</description>
    <slice>
      <filter dst_ip="171.43.203.77" src_ip="148.94.116.127" src_port="139"/>
    </slice>
    <from sec="1044162002" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_382{
style=filled;
color=gray75;
1483[label="206.6.42.136;s;82pkt 82fpkt", shape=diamond, color=yellow];
2780[label="206.6.42.136;s;80pkt 80fpkt", shape=hexagon, color=black];
stat382[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.6.42.136:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1483--2780[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter src_ip="206.6.42.136"/>
    </slice>
    <from sec="1044162008" usec="0"/>
    <to sec="1044163435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_383{
style=filled;
color=gray75;
1665[label="165.155.125.131;s;175pkt 175fpkt", shape=diamond, color=yellow];
2733[label="165.155.125.131;s;127pkt 127fpkt", shape=hexagon, color=black];
4050[label="165.155.125.131;180pkt 180fpkt", shape=pentagon, color=darkviolet];
stat383[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.125.131:*, *:80}[99.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7925%)&lt;BR/&gt; 23926: (0.311203%)&lt;BR/&gt; 23815: (0.311203%)&lt;BR/&gt; 23806: (0.311203%)&lt;BR/&gt; 23744: (0.311203%)&gt;];
}
1665--1819[label="0.0212766;1pkt 1fpkt"];
1665--1967[label="0.0196078;2pkt 2fpkt"];
1665--1990[label="0.0218978;3pkt 3fpkt"];
1665--2602[label="0.0144928;2pkt 2fpkt"];
1665--2728[label="0.0238095;1pkt 1fpkt"];
1665--2733[label="1;127pkt 127fpkt"];
1665--2822[label="0.025;2pkt 2fpkt"];
1665--2848[label="0.0153846;2pkt 2fpkt"];
1665--3197[label="0.0194175;2pkt 2fpkt"];
1665--3232[label="0.0114286;2pkt 2fpkt"];
1665--3235[label="0.0114286;2pkt 2fpkt"];
1665--3238[label="0.0285714;5pkt 5fpkt"];
1665--3243[label="0.0171429;3pkt 3fpkt"];
1665--3249[label="0.0114286;2pkt 2fpkt"];
1665--3252[label="0.0114286;2pkt 2fpkt"];
1665--4050[label="1;175pkt 175fpkt"];
2733--2822[label="0.025;2pkt 2fpkt"];
2733--2848[label="0.015748;2pkt 2fpkt"];
2733--3197[label="0.0194175;2pkt 2fpkt"];
2733--3232[label="0.015748;2pkt 2fpkt"];
2733--3235[label="0.015748;2pkt 2fpkt"];
2733--3238[label="0.0393701;5pkt 5fpkt"];
2733--3249[label="0.015748;2pkt 2fpkt"];
2733--3252[label="0.015748;2pkt 2fpkt"];
2733--4050[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="165.155.125.131"/>
    </slice>
    <from sec="1044162035" usec="0"/>
    <to sec="1044163528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_384{
style=filled;
color=gray75;
1580[label="210.32.177.187;d;214pkt 214fpkt", shape=diamond, color=yellow];
1733[label="165.155.141.57;s;180pkt 180fpkt", shape=diamond, color=yellow];
1955[label="130.139.221.82;s;143pkt 143fpkt", shape=diamond, color=yellow];
2084[label="194.210.130.106;d;4pkt 4fpkt", shape=diamond, color=yellow];
2183[label="148.94.202.170;s;48pkt 48fpkt", shape=diamond, color=yellow];
2616[label="210.32.177.187;d;73pkt 73fpkt", shape=hexagon, color=black];
2828[label="165.155.141.57;s;148pkt 148fpkt", shape=hexagon, color=black];
2912[label="130.139.221.82;s;80pkt 80fpkt", shape=hexagon, color=black];
3013[label="194.210.130.106;d;4pkt 4fpkt", shape=hexagon, color=black];
3647[label="165.155.141.57;186pkt 186fpkt", shape=pentagon, color=darkviolet];
3813[label="130.139.221.82;151pkt 151fpkt", shape=pentagon, color=darkviolet];
4920[label="130.139.221.82;152pkt 152fpkt", shape=invtriangle, color=brown];
5419[label="130.139.221.82;152pkt 152fpkt", shape=invhouse, color=bisque];
stat384[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 210.32.177.187:80}[41.2548%]&lt;BR/&gt;{165.155.141.57:*, *:80}[31.9392%]&lt;BR/&gt;{130.139.221.82:*, *:80}[28.7072%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8827%)&lt;BR/&gt; 7070: (0.684039%)&lt;BR/&gt; 554: (0.488599%)&lt;BR/&gt; 8080: (0.390879%)&lt;BR/&gt; 1755: (0.358306%)&gt;];
}
1580--1733[label="0.294444;53pkt 53fpkt"];
1580--1955[label="0.041958;6pkt 6fpkt"];
1580--2183[label="0.333333;16pkt 16fpkt"];
1580--2371[label="0.0327103;7pkt 7fpkt"];
1580--2616[label="1;73pkt 73fpkt"];
1580--2633[label="0.046729;10pkt 10fpkt"];
1580--2812[label="0.0140187;3pkt 3fpkt"];
1580--2821[label="0.126168;27pkt 27fpkt"];
1580--2828[label="0.331081;49pkt 49fpkt"];
1580--2912[label="0.075;6pkt 6fpkt"];
1580--3232[label="0.0233645;5pkt 5fpkt"];
1580--3235[label="0.0280374;6pkt 6fpkt"];
1580--3238[label="0.046729;10pkt 10fpkt"];
1580--3243[label="0.00934579;2pkt 2fpkt"];
1580--3249[label="0.0233645;5pkt 5fpkt"];
1580--3252[label="0.0233645;5pkt 5fpkt"];
1580--3273[label="0.130841;28pkt 28fpkt"];
1580--3647[label="0.284946;53pkt 53fpkt"];
1580--3813[label="0.0397351;6pkt 6fpkt"];
1580--4193[label="0.0571429;4pkt 4fpkt"];
1580--4920[label="0.0394737;6pkt 6fpkt"];
1580--5102[label="0.0571429;4pkt 4fpkt"];
1580--5419[label="0.0394737;6pkt 6fpkt"];
1733--1990[label="0.00729927;1pkt 1fpkt"];
1733--2084[label="1;4pkt 4fpkt"];
1733--2616[label="0.260274;19pkt 19fpkt"];
1733--2828[label="1;148pkt 148fpkt"];
1733--2848[label="0.00769231;1pkt 1fpkt"];
1733--3013[label="1;4pkt 4fpkt"];
1733--3197[label="0.00970874;1pkt 1fpkt"];
1733--3232[label="0.0333333;6pkt 6fpkt"];
1733--3235[label="0.0277778;5pkt 5fpkt"];
1733--3238[label="0.0277778;5pkt 5fpkt"];
1733--3243[label="0.0277778;5pkt 5fpkt"];
1733--3249[label="0.0333333;6pkt 6fpkt"];
1733--3252[label="0.0333333;6pkt 6fpkt"];
1733--3647[label="0.994444;179pkt 179fpkt"];
1955--2912[label="1;80pkt 80fpkt"];
1955--3232[label="0.00699301;1pkt 1fpkt"];
1955--3235[label="0.00699301;1pkt 1fpkt"];
1955--3238[label="0.00699301;1pkt 1fpkt"];
1955--3249[label="0.00699301;1pkt 1fpkt"];
1955--3252[label="0.00699301;1pkt 1fpkt"];
1955--3813[label="0.993007;142pkt 142fpkt"];
1955--4920[label="1;143pkt 143fpkt"];
1955--5419[label="1;143pkt 143fpkt"];
2084--2828[label="1;4pkt 4fpkt"];
2084--3013[label="1;4pkt 4fpkt"];
2084--3243[label="0.25;1pkt 1fpkt"];
2084--3647[label="1;4pkt 4fpkt"];
2616--2633[label="0.123288;9pkt 9fpkt"];
2616--2821[label="0.150685;11pkt 11fpkt"];
2616--2828[label="0.260274;19pkt 19fpkt"];
2616--3232[label="0.0684932;5pkt 5fpkt"];
2616--3235[label="0.0821918;6pkt 6fpkt"];
2616--3238[label="0.136986;10pkt 10fpkt"];
2616--3249[label="0.0684932;5pkt 5fpkt"];
2616--3252[label="0.0684932;5pkt 5fpkt"];
2616--3273[label="0.123288;9pkt 9fpkt"];
2616--3647[label="0.260274;19pkt 19fpkt"];
2828--2848[label="0.00769231;1pkt 1fpkt"];
2828--3013[label="1;4pkt 4fpkt"];
2828--3197[label="0.00970874;1pkt 1fpkt"];
2828--3232[label="0.0405405;6pkt 6fpkt"];
2828--3235[label="0.0337838;5pkt 5fpkt"];
2828--3238[label="0.0337838;5pkt 5fpkt"];
2828--3243[label="0.00675676;1pkt 1fpkt"];
2828--3249[label="0.0405405;6pkt 6fpkt"];
2828--3252[label="0.0405405;6pkt 6fpkt"];
2828--3647[label="0.993243;147pkt 147fpkt"];
2912--3232[label="0.0125;1pkt 1fpkt"];
2912--3235[label="0.0125;1pkt 1fpkt"];
2912--3238[label="0.0125;1pkt 1fpkt"];
2912--3249[label="0.0125;1pkt 1fpkt"];
2912--3252[label="0.0125;1pkt 1fpkt"];
2912--3813[label="0.9875;79pkt 79fpkt"];
2912--4920[label="1;80pkt 80fpkt"];
2912--5419[label="1;80pkt 80fpkt"];
3013--3243[label="0.25;1pkt 1fpkt"];
3013--3647[label="1;4pkt 4fpkt"];
3813--4920[label="1;151pkt 151fpkt"];
3813--5419[label="1;151pkt 151fpkt"];
4920--5419[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="165.155.141.57"/>
      <filter dst_port="80" src_ip="130.139.221.82"/>
      <filter dst_ip="210.32.177.187" dst_port="80"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_385{
style=filled;
color=gray75;
1735[label="148.94.224.139;s;160pkt 160fpkt", shape=diamond, color=yellow];
2831[label="148.94.224.139;s;115pkt 115fpkt", shape=hexagon, color=black];
4103[label="148.94.224.139;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat385[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.94.224.139:*, *:25}[96.8944%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.3755%)&lt;BR/&gt; 113: (1.62455%)&lt;BR/&gt; 51525: (0.722022%)&lt;BR/&gt; 60991: (0.361011%)&lt;BR/&gt; 58843: (0.361011%)&gt;];
}
1735--2831[label="1;115pkt 115fpkt"];
1735--4103[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="148.94.224.139"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
1642[label="195.3.9.233;d;3pkt 3fpkt", shape=diamond, color=yellow];
1980[label="130.139.211.153;s;4pkt 4fpkt", shape=diamond, color=yellow];
2107[label="130.139.69.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
2687[label="195.3.9.233;d;3pkt 3fpkt", shape=hexagon, color=black];
2838[label="130.139.211.153;s;3pkt 3fpkt", shape=hexagon, color=black];
4182[label="130.139.211.153;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 195.3.9.233:0}[42.8571%]&lt;BR/&gt;{130.139.211.153:0, *:0}[28.5714%]&lt;BR/&gt;{130.139.211.153:*, 200.69.24.51:6667}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (68.4211%)&lt;BR/&gt; 6667: (13.1579%)&lt;BR/&gt; 32837: (7.89474%)&lt;BR/&gt; 32840: (5.26316%)&lt;BR/&gt; 1592: (2.63158%)&gt;];
}
1642--1980[label="0.333333;1pkt 1fpkt"];
1642--2107[label="1;1pkt 1fpkt"];
1642--2687[label="1;3pkt 3fpkt"];
1642--2838[label="0.333333;1pkt 1fpkt"];
1642--4182[label="0.333333;1pkt 1fpkt"];
1980--2687[label="0.333333;1pkt 1fpkt"];
1980--2838[label="1;3pkt 3fpkt"];
1980--4182[label="1;4pkt 4fpkt"];
2107--2687[label="1;1pkt 1fpkt"];
2687--2838[label="0.333333;1pkt 1fpkt"];
2687--4182[label="0.333333;1pkt 1fpkt"];
2838--4182[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.69.24.51" dst_port="6667" src_ip="130.139.211.153"/>
      <filter src_ip="130.139.211.153"/>
      <filter dst_ip="195.3.9.233"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_387{
style=filled;
color=gray75;
1488[label="207.40.162.227;d;33pkt 33fpkt", shape=diamond, color=yellow];
1598[label="190.25.76.160;s;3pkt 3fpkt", shape=diamond, color=yellow];
2009[label="190.25.76.173;s;2pkt 2fpkt", shape=diamond, color=yellow];
2040[label="207.40.162.146;d;27pkt 27fpkt", shape=diamond, color=yellow];
2187[label="207.42.16.55;s;40pkt 40fpkt", shape=diamond, color=yellow];
2793[label="190.25.76.160;s;3pkt 3fpkt", shape=hexagon, color=black];
2860[label="190.25.76.173;s;2pkt 2fpkt", shape=hexagon, color=black];
3871[label="203.96.159.94;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4222[label="190.25.76.160;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4294[label="190.25.76.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4947[label="203.96.159.94;7pkt 7fpkt", shape=invtriangle, color=brown];
stat387[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.42.16.55:80, *:*}[38.4615%]&lt;BR/&gt;{*:*, 207.40.162.227:*}[31.7308%]&lt;BR/&gt;{*:*, 207.40.162.146:*}[25.9615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (21.2598%)&lt;BR/&gt; 1863: (9.05512%)&lt;BR/&gt; 6900: (7.87402%)&lt;BR/&gt; 5121: (7.48031%)&lt;BR/&gt; 6121: (4.33071%)&gt;];
}
1488--1598[label="0.666667;2pkt 2fpkt"];
1488--2009[label="1;2pkt 2fpkt"];
1488--2793[label="0.666667;2pkt 2fpkt"];
1488--2860[label="1;2pkt 2fpkt"];
1488--4222[label="1;2pkt 2fpkt"];
1488--4294[label="1;1pkt 1fpkt"];
1598--2040[label="0.333333;1pkt 1fpkt"];
1598--2793[label="1;3pkt 3fpkt"];
1598--4222[label="1;2pkt 2fpkt"];
2009--2860[label="1;2pkt 2fpkt"];
2009--4294[label="1;1pkt 1fpkt"];
2040--2187[label="0.0740741;2pkt 2fpkt"];
2040--2778[label="0.111111;3pkt 3fpkt"];
2040--2793[label="0.333333;1pkt 1fpkt"];
2040--3711[label="0.111111;3pkt 3fpkt"];
2040--3871[label="0.142857;1pkt 1fpkt"];
2040--4084[label="0.037037;1pkt 1fpkt"];
2040--4947[label="0.142857;1pkt 1fpkt"];
2040--5050[label="0.037037;1pkt 1fpkt"];
2793--4222[label="1;2pkt 2fpkt"];
2860--4294[label="1;1pkt 1fpkt"];
3871--4947[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="207.40.162.227"/>
      <filter dst_ip="207.40.162.146"/>
      <filter src_ip="207.42.16.55" src_port="80"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_388{
style=filled;
color=gray75;
1010[label="165.155.141.12;d;9pkt 9fpkt", shape=diamond, color=yellow];
1039[label="194.115.47.173;s;81pkt 81fpkt", shape=diamond, color=yellow];
1717[label="192.67.215.130;s;6pkt 6fpkt", shape=diamond, color=yellow];
1878[label="217.194.11.132;s;2pkt 2fpkt", shape=diamond, color=yellow];
2363[label="194.115.47.173;s;80pkt 80fpkt", shape=hexagon, color=black];
2664[label="165.155.141.12;d;8pkt 8fpkt", shape=hexagon, color=black];
2667[label="192.67.215.130;s;6pkt 6fpkt", shape=hexagon, color=black];
2861[label="217.194.11.132;s;2pkt 2fpkt", shape=hexagon, color=black];
4048[label="192.67.215.130;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4056[label="217.194.11.132;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4292[label="194.115.47.173;81pkt 81fpkt", shape=pentagon, color=darkviolet];
5035[label="192.67.215.130;5pkt 5fpkt", shape=invtriangle, color=brown];
5039[label="217.194.11.132;1pkt 1fpkt", shape=invtriangle, color=brown];
5464[label="217.194.11.132;2pkt 2fpkt", shape=invhouse, color=bisque];
stat388[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.115.47.173:80, 165.155.141.12:*}[84.5361%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6564%)&lt;BR/&gt; 1608: (1.03093%)&lt;BR/&gt; 1607: (0.859107%)&lt;BR/&gt; 1563: (0.859107%)&lt;BR/&gt; 1562: (0.859107%)&gt;];
}
1010--1878[label="1;2pkt 2fpkt"];
1010--2664[label="0.125;1pkt 1fpkt"];
1010--2861[label="1;2pkt 2fpkt"];
1010--4056[label="1;2pkt 2fpkt"];
1010--4292[label="0.111111;1pkt 1fpkt"];
1010--5039[label="1;1pkt 1fpkt"];
1010--5464[label="1;2pkt 2fpkt"];
1039--2363[label="1;80pkt 80fpkt"];
1039--4292[label="0.987654;80pkt 80fpkt"];
1717--2664[label="1;6pkt 6fpkt"];
1717--2667[label="1;6pkt 6fpkt"];
1717--4048[label="1;6pkt 6fpkt"];
1717--5035[label="1;5pkt 5fpkt"];
1878--2861[label="1;2pkt 2fpkt"];
1878--4056[label="1;2pkt 2fpkt"];
1878--5039[label="1;1pkt 1fpkt"];
1878--5464[label="1;2pkt 2fpkt"];
2363--4292[label="0.9875;79pkt 79fpkt"];
2664--2667[label="1;6pkt 6fpkt"];
2664--4048[label="1;6pkt 6fpkt"];
2664--5035[label="1;5pkt 5fpkt"];
2667--4048[label="1;6pkt 6fpkt"];
2667--5035[label="1;5pkt 5fpkt"];
2861--4056[label="1;2pkt 2fpkt"];
2861--5039[label="1;1pkt 1fpkt"];
2861--5464[label="1;2pkt 2fpkt"];
4048--5035[label="1;5pkt 5fpkt"];
4056--5039[label="1;1pkt 1fpkt"];
4056--5464[label="1;2pkt 2fpkt"];
5039--5464[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.155.141.12" src_ip="194.115.47.173" src_port="80"/>
    </slice>
    <from sec="1044162081" usec="0"/>
    <to sec="1044163053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_390{
style=filled;
color=gray75;
1459[label="211.139.107.222;d;3pkt 3fpkt", shape=diamond, color=yellow];
1460[label="162.0.206.43;s;5pkt 5fpkt", shape=diamond, color=yellow];
2877[label="162.0.206.43;s;4pkt 4fpkt", shape=hexagon, color=black];
3588[label="162.0.206.43;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4812[label="162.0.206.43;4pkt 4fpkt", shape=invtriangle, color=brown];
stat390[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.206.43:1683, 211.139.107.220:6668}[20%]&lt;BR/&gt;{162.0.206.43:1684, 211.139.107.220:6668}[20%]&lt;BR/&gt;{162.0.206.43:1470, 211.139.107.222:6666}[20%]&lt;BR/&gt;{162.0.206.43:1659, 211.139.107.222:6662}[20%]&lt;BR/&gt;{162.0.206.43:1682, 211.139.107.222:6666}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6666: (25%)&lt;BR/&gt; 6668: (17.5%)&lt;BR/&gt; 1682: (12.5%)&lt;BR/&gt; 1470: (12.5%)&lt;BR/&gt; 1683: (10%)&gt;];
}
1459--1460[label="1;3pkt 3fpkt"];
1459--2877[label="1;3pkt 3fpkt"];
1459--3588[label="0.666667;2pkt 2fpkt"];
1459--4812[label="0.666667;2pkt 2fpkt"];
1460--2877[label="1;4pkt 4fpkt"];
1460--3588[label="1;4pkt 4fpkt"];
1460--4812[label="1;4pkt 4fpkt"];
2877--3588[label="0.75;3pkt 3fpkt"];
2877--4812[label="0.75;3pkt 3fpkt"];
3588--4812[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="211.139.107.222" dst_port="6666" src_ip="162.0.206.43" src_port="1682"/>
      <filter dst_ip="211.139.107.222" dst_port="6662" src_ip="162.0.206.43" src_port="1659"/>
      <filter dst_ip="211.139.107.222" dst_port="6666" src_ip="162.0.206.43" src_port="1470"/>
      <filter dst_ip="211.139.107.220" dst_port="6668" src_ip="162.0.206.43" src_port="1684"/>
      <filter dst_ip="211.139.107.220" dst_port="6668" src_ip="162.0.206.43" src_port="1683"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_391{
style=filled;
color=gray75;
1433[label="193.180.11.95;d;1pkt 1fpkt", shape=diamond, color=yellow];
1523[label="196.131.141.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
1562[label="194.126.62.34;d;1pkt 1fpkt", shape=diamond, color=yellow];
1563[label="206.6.40.1;s;19pkt 19fpkt", shape=diamond, color=yellow];
1793[label="196.160.48.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
1962[label="149.202.165.211;d;1pkt 1fpkt", shape=diamond, color=yellow];
2019[label="136.231.248.234;d;2pkt 2fpkt", shape=diamond, color=yellow];
2325[label="196.238.167.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
2773[label="194.126.62.34;d;1pkt 1fpkt", shape=hexagon, color=black];
2894[label="206.6.40.1;s;17pkt 17fpkt", shape=hexagon, color=black];
3062[label="136.231.248.234;d;2pkt 2fpkt", shape=hexagon, color=black];
3265[label="206.6.40.1;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4659[label="206.6.40.1;2pkt 2fpkt", shape=invtriangle, color=brown];
stat391[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.6.40.1:*, *:6699}[63.1579%]&lt;BR/&gt;{206.6.40.1:*, *:80}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (36.2745%)&lt;BR/&gt; 80: (9.80392%)&lt;BR/&gt; 1711: (5.88235%)&lt;BR/&gt; 1863: (3.92157%)&lt;BR/&gt; 1772: (3.92157%)&gt;];
}
1433--1563[label="1;1pkt 1fpkt"];
1433--2894[label="1;1pkt 1fpkt"];
1523--1563[label="1;1pkt 1fpkt"];
1523--2894[label="1;1pkt 1fpkt"];
1562--1563[label="1;1pkt 1fpkt"];
1562--2773[label="1;1pkt 1fpkt"];
1562--2894[label="1;1pkt 1fpkt"];
1562--3265[label="1;1pkt 1fpkt"];
1562--4659[label="1;1pkt 1fpkt"];
1563--1793[label="1;1pkt 1fpkt"];
1563--1906[label="0.105263;2pkt 2fpkt"];
1563--1962[label="1;1pkt 1fpkt"];
1563--1966[label="0.0526316;1pkt 1fpkt"];
1563--2019[label="1;2pkt 2fpkt"];
1563--2325[label="1;1pkt 1fpkt"];
1563--2773[label="1;1pkt 1fpkt"];
1563--2894[label="1;17pkt 17fpkt"];
1563--3062[label="1;2pkt 2fpkt"];
1563--3265[label="1;2pkt 2fpkt"];
1563--4659[label="1;2pkt 2fpkt"];
1793--2894[label="1;1pkt 1fpkt"];
1962--2894[label="1;1pkt 1fpkt"];
2019--2894[label="1;2pkt 2fpkt"];
2019--3062[label="1;2pkt 2fpkt"];
2325--3265[label="1;1pkt 1fpkt"];
2325--4659[label="1;1pkt 1fpkt"];
2773--2894[label="1;1pkt 1fpkt"];
2773--3265[label="1;1pkt 1fpkt"];
2773--4659[label="1;1pkt 1fpkt"];
2894--3062[label="1;2pkt 2fpkt"];
2894--3265[label="0.5;1pkt 1fpkt"];
2894--4659[label="0.5;1pkt 1fpkt"];
3265--4659[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="6699" src_ip="206.6.40.1"/>
      <filter dst_port="80" src_ip="206.6.40.1"/>
    </slice>
    <from sec="1044162002" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_392{
style=filled;
color=gray75;
1827[label="148.94.227.174;s;64pkt 64fpkt", shape=diamond, color=yellow];
2897[label="148.94.227.174;s;54pkt 54fpkt", shape=hexagon, color=black];
stat392[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.94.227.174:25, *:*}[82.8125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (40.678%)&lt;BR/&gt; 0: (18.6441%)&lt;BR/&gt; 63553: (0.847458%)&lt;BR/&gt; 55530: (0.847458%)&lt;BR/&gt; 55524: (0.847458%)&gt;];
}
1827--2897[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter src_ip="148.94.227.174" src_port="25"/>
    </slice>
    <from sec="1044162012" usec="0"/>
    <to sec="1044163411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_393{
style=filled;
color=gray75;
2071[label="165.155.67.4;s;179pkt 179fpkt", shape=diamond, color=yellow];
2249[label="217.44.48.134;d;86pkt 86fpkt", shape=diamond, color=yellow];
2909[label="165.155.67.4;s;87pkt 87fpkt", shape=hexagon, color=black];
3291[label="165.155.67.4;189pkt 189fpkt", shape=pentagon, color=darkviolet];
stat393[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.67.4:*, 217.44.48.134:80}[63.4921%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4455%)&lt;BR/&gt; 4940: (0.369686%)&lt;BR/&gt; 4939: (0.369686%)&lt;BR/&gt; 4937: (0.369686%)&lt;BR/&gt; 4936: (0.369686%)&gt;];
}
2071--2249[label="1;86pkt 86fpkt"];
2071--2909[label="1;87pkt 87fpkt"];
2071--3243[label="0.106145;19pkt 19fpkt"];
2071--3291[label="1;179pkt 179fpkt"];
2249--2909[label="0.406977;35pkt 35fpkt"];
2249--3243[label="0.116279;10pkt 10fpkt"];
2249--3291[label="1;86pkt 86fpkt"];
2909--3291[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_ip="217.44.48.134" dst_port="80" src_ip="165.155.67.4"/>
    </slice>
    <from sec="1044162200" usec="0"/>
    <to sec="1044163528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_395{
style=filled;
color=gray75;
1879[label="206.6.47.68;s;152pkt 152fpkt", shape=diamond, color=yellow];
2918[label="206.6.47.68;s;128pkt 128fpkt", shape=hexagon, color=black];
3707[label="206.6.47.68;153pkt 153fpkt", shape=pentagon, color=darkviolet];
stat395[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.6.47.68:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1879--2918[label="1;128pkt 128fpkt"];
1879--3707[label="0.993421;151pkt 151fpkt"];
2918--3707[label="0.992188;127pkt 127fpkt"];
</description>
    <slice>
      <filter src_ip="206.6.47.68"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03384,1.8749,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_396{
style=filled;
color=gray75;
489[label="206.6.44.82d;1pkt 1fpkt", shape=rectangle, color=red];
884[label="148.94.21.66;s;2312pkt 2312fpkt", shape=diamond, color=yellow];
886[label="206.85.122.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
967[label="149.196.32.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
1044[label="212.175.135.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
1046[label="221.91.35.208;d;1pkt 1fpkt", shape=diamond, color=yellow];
1213[label="189.137.255.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
1235[label="209.161.113.227;d;1pkt 1fpkt", shape=diamond, color=yellow];
1361[label="198.232.37.66;s;250pkt 250fpkt", shape=diamond, color=yellow];
1899[label="196.248.203.112;d;2pkt 2fpkt", shape=diamond, color=yellow];
1900[label="148.94.134.132;s;2pkt 2fpkt", shape=diamond, color=yellow];
1972[label="221.96.47.184;d;1pkt 1fpkt", shape=diamond, color=yellow];
2225[label="206.11.90.29;d;166pkt 166fpkt", shape=diamond, color=yellow];
2275[label="197.71.77.32;d;2pkt 2fpkt", shape=diamond, color=yellow];
2579[label="212.175.135.232;d;1pkt 1fpkt", shape=hexagon, color=black];
2598[label="189.137.255.161;d;1pkt 1fpkt", shape=hexagon, color=black];
2721[label="198.232.37.66;s;177pkt 177fpkt", shape=hexagon, color=black];
2750[label="148.94.21.66;s;2312pkt 2312fpkt", shape=hexagon, color=black];
2753[label="149.196.32.3;d;1pkt 1fpkt", shape=hexagon, color=black];
2765[label="209.161.113.227;d;1pkt 1fpkt", shape=hexagon, color=black];
2891[label="196.248.203.112;d;2pkt 2fpkt", shape=hexagon, color=black];
2929[label="148.94.134.132;s;2pkt 2fpkt", shape=hexagon, color=black];
3075[label="206.85.122.12;d;1pkt 1fpkt", shape=hexagon, color=black];
3077[label="221.91.35.208;d;1pkt 1fpkt", shape=hexagon, color=black];
3692[label="148.94.21.66;2419pkt 2419fpkt", shape=pentagon, color=darkviolet];
4862[label="148.94.21.66;2419pkt 2419fpkt", shape=invtriangle, color=brown];
stat396[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.94.21.66:6257, *:6257}[88.3939%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (92.4893%)&lt;BR/&gt; 6667: (1.4436%)&lt;BR/&gt; 113: (1.23524%)&lt;BR/&gt; 6699: (0.391904%)&lt;BR/&gt; 16257: (0.158746%)&gt;];
}
489--884[label="1;1pkt 1fpkt"];
489--1046[label="1;1pkt 1fpkt"];
489--2750[label="1;1pkt 1fpkt"];
489--3077[label="1;1pkt 1fpkt"];
489--3692[label="1;1pkt 1fpkt"];
489--4862[label="1;1pkt 1fpkt"];
884--886[label="1;1pkt 1fpkt"];
884--967[label="1;1pkt 1fpkt"];
884--1044[label="1;1pkt 1fpkt"];
884--1046[label="1;1pkt 1fpkt"];
884--1213[label="1;1pkt 1fpkt"];
884--1235[label="1;1pkt 1fpkt"];
884--1899[label="0.5;1pkt 1fpkt"];
884--1972[label="1;1pkt 1fpkt"];
884--2275[label="0.5;1pkt 1fpkt"];
884--2579[label="1;1pkt 1fpkt"];
884--2598[label="1;1pkt 1fpkt"];
884--2750[label="1;2312pkt 2312fpkt"];
884--2753[label="1;1pkt 1fpkt"];
884--2765[label="1;1pkt 1fpkt"];
884--2891[label="0.5;1pkt 1fpkt"];
884--3075[label="1;1pkt 1fpkt"];
884--3077[label="1;1pkt 1fpkt"];
884--3237[label="0.385753;861pkt 861fpkt"];
884--3692[label="1;2312pkt 2312fpkt"];
884--4862[label="1;2312pkt 2312fpkt"];
886--2750[label="1;1pkt 1fpkt"];
886--3075[label="1;1pkt 1fpkt"];
886--3692[label="1;1pkt 1fpkt"];
886--4862[label="1;1pkt 1fpkt"];
967--2750[label="1;1pkt 1fpkt"];
967--2753[label="1;1pkt 1fpkt"];
967--3692[label="1;1pkt 1fpkt"];
967--4862[label="1;1pkt 1fpkt"];
1044--2579[label="1;1pkt 1fpkt"];
1044--2750[label="1;1pkt 1fpkt"];
1044--3692[label="1;1pkt 1fpkt"];
1044--4862[label="1;1pkt 1fpkt"];
1046--2750[label="1;1pkt 1fpkt"];
1046--3077[label="1;1pkt 1fpkt"];
1046--3692[label="1;1pkt 1fpkt"];
1046--4862[label="1;1pkt 1fpkt"];
1213--2598[label="1;1pkt 1fpkt"];
1213--2750[label="1;1pkt 1fpkt"];
1213--3692[label="1;1pkt 1fpkt"];
1213--4862[label="1;1pkt 1fpkt"];
1235--2750[label="1;1pkt 1fpkt"];
1235--2765[label="1;1pkt 1fpkt"];
1235--3692[label="1;1pkt 1fpkt"];
1235--4862[label="1;1pkt 1fpkt"];
1361--2225[label="1;166pkt 166fpkt"];
1361--2275[label="0.5;1pkt 1fpkt"];
1361--2721[label="1;177pkt 177fpkt"];
1899--1900[label="0.5;1pkt 1fpkt"];
1899--2750[label="0.5;1pkt 1fpkt"];
1899--2891[label="1;2pkt 2fpkt"];
1899--2929[label="0.5;1pkt 1fpkt"];
1899--3692[label="0.5;1pkt 1fpkt"];
1899--4862[label="0.5;1pkt 1fpkt"];
1900--2891[label="0.5;1pkt 1fpkt"];
1900--2929[label="1;2pkt 2fpkt"];
1972--2750[label="1;1pkt 1fpkt"];
1972--3692[label="1;1pkt 1fpkt"];
1972--4862[label="1;1pkt 1fpkt"];
2225--2721[label="0.638554;106pkt 106fpkt"];
2275--2721[label="0.5;1pkt 1fpkt"];
2275--2750[label="0.5;1pkt 1fpkt"];
2275--3692[label="0.5;1pkt 1fpkt"];
2275--4862[label="0.5;1pkt 1fpkt"];
2579--2750[label="1;1pkt 1fpkt"];
2579--3692[label="1;1pkt 1fpkt"];
2579--4862[label="1;1pkt 1fpkt"];
2598--2750[label="1;1pkt 1fpkt"];
2598--3692[label="1;1pkt 1fpkt"];
2598--4862[label="1;1pkt 1fpkt"];
2750--2753[label="1;1pkt 1fpkt"];
2750--2765[label="1;1pkt 1fpkt"];
2750--2891[label="0.5;1pkt 1fpkt"];
2750--3075[label="1;1pkt 1fpkt"];
2750--3077[label="1;1pkt 1fpkt"];
2750--3237[label="0.385753;861pkt 861fpkt"];
2750--3692[label="1;2312pkt 2312fpkt"];
2750--4862[label="1;2312pkt 2312fpkt"];
2753--3692[label="1;1pkt 1fpkt"];
2753--4862[label="1;1pkt 1fpkt"];
2765--3692[label="1;1pkt 1fpkt"];
2765--4862[label="1;1pkt 1fpkt"];
2891--2929[label="0.5;1pkt 1fpkt"];
2891--3692[label="0.5;1pkt 1fpkt"];
2891--4862[label="0.5;1pkt 1fpkt"];
3075--3692[label="1;1pkt 1fpkt"];
3075--4862[label="1;1pkt 1fpkt"];
3077--3692[label="1;1pkt 1fpkt"];
3077--4862[label="1;1pkt 1fpkt"];
3692--4862[label="1;2419pkt 2419fpkt"];
</description>
    <slice>
      <filter dst_port="6257" src_ip="148.94.21.66" src_port="6257"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,011,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_398{
style=filled;
color=gray75;
2113[label="162.0.237.168;s;62pkt 62fpkt", shape=diamond, color=yellow];
2157[label="192.50.76.198;d;3pkt 3fpkt", shape=diamond, color=yellow];
2941[label="162.0.237.168;s;54pkt 54fpkt", shape=hexagon, color=black];
4042[label="162.0.207.129;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4265[label="162.0.237.168;61pkt 61fpkt", shape=pentagon, color=darkviolet];
5143[label="162.0.237.168;61pkt 61fpkt", shape=invtriangle, color=brown];
stat398[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.237.168:*, 136.53.58.179:*}[41.5584%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (9.375%)&lt;BR/&gt; 113: (6.44531%)&lt;BR/&gt; 1080: (4.49219%)&lt;BR/&gt; 23: (4.49219%)&lt;BR/&gt; 8080: (3.71094%)&gt;];
}
2113--2157[label="0.666667;2pkt 2fpkt"];
2113--2941[label="1;54pkt 54fpkt"];
2113--4265[label="1;61pkt 61fpkt"];
2113--5143[label="1;61pkt 61fpkt"];
2157--2941[label="0.666667;2pkt 2fpkt"];
2157--4042[label="0.333333;1pkt 1fpkt"];
2157--4265[label="0.666667;2pkt 2fpkt"];
2157--5143[label="0.666667;2pkt 2fpkt"];
2941--4265[label="0.981481;53pkt 53fpkt"];
2941--5143[label="0.981481;53pkt 53fpkt"];
4265--5143[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_ip="136.53.58.179" src_ip="162.0.237.168"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_399{
style=filled;
color=gray75;
2008[label="207.35.55.19;s;8pkt 8fpkt", shape=diamond, color=yellow];
2951[label="207.35.55.19;s;8pkt 8fpkt", shape=hexagon, color=black];
3413[label="207.35.55.19;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4728[label="207.35.55.19;10pkt 10fpkt", shape=invtriangle, color=brown];
5345[label="207.35.55.19;10pkt 10fpkt", shape=invhouse, color=bisque];
stat399[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.35.55.19:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2008--2951[label="1;8pkt 8fpkt"];
2008--3413[label="0.875;7pkt 7fpkt"];
2008--4728[label="1;8pkt 8fpkt"];
2008--5345[label="1;8pkt 8fpkt"];
2951--3413[label="0.875;7pkt 7fpkt"];
2951--4728[label="1;8pkt 8fpkt"];
2951--5345[label="1;8pkt 8fpkt"];
3413--4728[label="1;9pkt 9fpkt"];
3413--5345[label="1;9pkt 9fpkt"];
4728--5345[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="207.35.55.19"/>
    </slice>
    <from sec="1044162238" usec="0"/>
    <to sec="1044163438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_401{
style=filled;
color=gray75;
1450[label="207.181.23.160;s;165pkt 165fpkt", shape=diamond, color=yellow];
2026[label="129.106.54.127;d;1pkt 1fpkt", shape=diamond, color=yellow];
2963[label="129.106.54.127;d;1pkt 1fpkt", shape=hexagon, color=black];
4219[label="207.181.23.160;172pkt 172fpkt", shape=pentagon, color=darkviolet];
stat401[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.181.23.160:53, *:53}[25.5814%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (62.9794%)&lt;BR/&gt; 1024: (1.47493%)&lt;BR/&gt; 32776: (0.884956%)&lt;BR/&gt; 32768: (0.737463%)&lt;BR/&gt; 33171: (0.589971%)&gt;];
}
1450--2026[label="1;1pkt 1fpkt"];
1450--2963[label="1;1pkt 1fpkt"];
1450--3231[label="0.0181818;3pkt 3fpkt"];
1450--3242[label="0.0242424;4pkt 4fpkt"];
1450--3248[label="0.0181818;3pkt 3fpkt"];
1450--4219[label="1;165pkt 165fpkt"];
2026--2963[label="1;1pkt 1fpkt"];
2026--4219[label="1;1pkt 1fpkt"];
2963--4219[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="207.181.23.160" src_port="53"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_403{
style=filled;
color=gray75;
1546[label="165.199.36.245;s;172pkt 172fpkt", shape=diamond, color=yellow];
2970[label="165.199.36.245;s;172pkt 172fpkt", shape=hexagon, color=black];
4614[label="165.199.36.245;176pkt 176fpkt", shape=pentagon, color=darkviolet];
stat403[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.199.36.245:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1546--2970[label="1;172pkt 172fpkt"];
1546--4614[label="0.988372;170pkt 170fpkt"];
2970--4614[label="0.988372;170pkt 170fpkt"];
</description>
    <slice>
      <filter src_ip="165.199.36.245"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_404{
style=filled;
color=gray75;
1257[label="162.0.142.93;s;174pkt 174fpkt", shape=diamond, color=yellow];
2980[label="162.0.142.93;s;172pkt 172fpkt", shape=hexagon, color=black];
3864[label="162.0.142.93;175pkt 175fpkt", shape=pentagon, color=darkviolet];
stat404[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.142.93:*, *:25}[93.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.8484%)&lt;BR/&gt; 113: (0.863724%)&lt;BR/&gt; 0: (0.575816%)&lt;BR/&gt; 59967: (0.287908%)&lt;BR/&gt; 54361: (0.287908%)&gt;];
}
1257--2980[label="1;172pkt 172fpkt"];
1257--3864[label="1;174pkt 174fpkt"];
2980--3864[label="1;172pkt 172fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="162.0.142.93"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_407{
style=filled;
color=gray75;
1965[label="130.138.1.187;d;77pkt 77fpkt", shape=diamond, color=yellow];
3017[label="130.138.1.187;d;77pkt 77fpkt", shape=hexagon, color=black];
stat407[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 130.138.1.187:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1965--3017[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.1.187"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_408{
style=filled;
color=gray75;
1057[label="133.168.182.9;d;359pkt 359fpkt", shape=diamond, color=yellow];
1133[label="194.175.212.24;s;136pkt 136fpkt", shape=diamond, color=yellow];
1881[label="194.175.212.245;s;91pkt 91fpkt", shape=diamond, color=yellow];
2374[label="133.168.182.9;d;306pkt 306fpkt", shape=hexagon, color=black];
2399[label="194.175.212.24;s;136pkt 136fpkt", shape=hexagon, color=black];
3020[label="194.175.212.245;s;85pkt 85fpkt", shape=hexagon, color=black];
3475[label="194.175.212.27;73pkt 73fpkt", shape=pentagon, color=darkviolet];
4616[label="194.175.212.245;101pkt 101fpkt", shape=pentagon, color=darkviolet];
stat408[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.175.212.24:80, 133.168.182.9:*}[35.8621%]&lt;BR/&gt;{194.175.212.245:*, *:*}[23.4483%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6876%)&lt;BR/&gt; 53: (4.07925%)&lt;BR/&gt; 8072: (0.19425%)&lt;BR/&gt; 7900: (0.19425%)&lt;BR/&gt; 7454: (0.19425%)&gt;];
}
1057--1133[label="1;136pkt 136fpkt"];
1057--1881[label="0.527473;48pkt 48fpkt"];
1057--2170[label="0.0547945;4pkt 4fpkt"];
1057--2374[label="1;306pkt 306fpkt"];
1057--2399[label="1;136pkt 136fpkt"];
1057--3020[label="0.529412;45pkt 45fpkt"];
1057--3475[label="0.69863;51pkt 51fpkt"];
1057--3894[label="0.0810811;3pkt 3fpkt"];
1057--4210[label="0.0555556;2pkt 2fpkt"];
1057--4616[label="0.475248;48pkt 48fpkt"];
1057--4959[label="0.0857143;3pkt 3fpkt"];
1057--5114[label="0.0540541;2pkt 2fpkt"];
1133--2374[label="1;136pkt 136fpkt"];
1133--2399[label="1;136pkt 136fpkt"];
1881--2030[label="0.010989;1pkt 1fpkt"];
1881--2374[label="0.373626;34pkt 34fpkt"];
1881--2418[label="0.010989;1pkt 1fpkt"];
1881--2553[label="0.021978;2pkt 2fpkt"];
1881--3020[label="1;85pkt 85fpkt"];
1881--3231[label="0.010989;1pkt 1fpkt"];
1881--3241[label="0.021978;2pkt 2fpkt"];
1881--3242[label="0.032967;3pkt 3fpkt"];
1881--3248[label="0.010989;1pkt 1fpkt"];
1881--4616[label="0.989011;90pkt 90fpkt"];
2374--2399[label="1;136pkt 136fpkt"];
2374--3020[label="0.4;34pkt 34fpkt"];
2374--3475[label="0.465753;34pkt 34fpkt"];
2374--3894[label="0.0810811;3pkt 3fpkt"];
2374--4210[label="0.0555556;2pkt 2fpkt"];
2374--4616[label="0.336634;34pkt 34fpkt"];
2374--4959[label="0.0857143;3pkt 3fpkt"];
2374--5114[label="0.0540541;2pkt 2fpkt"];
3020--3231[label="0.0117647;1pkt 1fpkt"];
3020--3241[label="0.0235294;2pkt 2fpkt"];
3020--3242[label="0.0117647;1pkt 1fpkt"];
3020--3248[label="0.0117647;1pkt 1fpkt"];
3020--4616[label="0.988235;84pkt 84fpkt"];
</description>
    <slice>
      <filter src_ip="194.175.212.245"/>
      <filter dst_ip="133.168.182.9" src_ip="194.175.212.24" src_port="80"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_409{
style=filled;
color=gray75;
1105[label="207.35.49.85;s;381pkt 381fpkt", shape=diamond, color=yellow];
1644[label="212.82.148.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
2549[label="207.35.49.85;s;313pkt 313fpkt", shape=hexagon, color=black];
2690[label="212.82.148.221;d;1pkt 1fpkt", shape=hexagon, color=black];
stat409[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.35.49.85:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1105--1209[label="0.00454545;1pkt 1fpkt"];
1105--1221[label="0.0044843;1pkt 1fpkt"];
1105--1231[label="0.0045045;1pkt 1fpkt"];
1105--1238[label="0.00413223;1pkt 1fpkt"];
1105--1249[label="0.00456621;1pkt 1fpkt"];
1105--1250[label="0.00431034;1pkt 1fpkt"];
1105--1252[label="0.00460829;1pkt 1fpkt"];
1105--1256[label="0.0044843;1pkt 1fpkt"];
1105--1274[label="0.00460829;1pkt 1fpkt"];
1105--1644[label="1;1pkt 1fpkt"];
1105--1808[label="0.0588235;1pkt 1fpkt"];
1105--2421[label="0.0149254;1pkt 1fpkt"];
1105--2432[label="0.00471698;1pkt 1fpkt"];
1105--2437[label="0.0142857;1pkt 1fpkt"];
1105--2500[label="0.0044843;1pkt 1fpkt"];
1105--2549[label="1;313pkt 313fpkt"];
1105--2644[label="0.00526316;1pkt 1fpkt"];
1105--2690[label="1;1pkt 1fpkt"];
1105--3027[label="0.0045045;1pkt 1fpkt"];
1105--3028[label="0.0588235;1pkt 1fpkt"];
1105--3169[label="0.00641026;1pkt 1fpkt"];
1644--2549[label="1;1pkt 1fpkt"];
1644--2690[label="1;1pkt 1fpkt"];
2549--2644[label="0.00526316;1pkt 1fpkt"];
2549--2690[label="1;1pkt 1fpkt"];
2549--3027[label="0.0045045;1pkt 1fpkt"];
2549--3028[label="0.0588235;1pkt 1fpkt"];
2549--3169[label="0.00641026;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="207.35.49.85"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_410{
style=filled;
color=gray75;
1645[label="212.82.148.221;s;851pkt 851fpkt", shape=diamond, color=yellow];
3031[label="212.82.148.221;s;759pkt 759fpkt", shape=hexagon, color=black];
4518[label="212.82.148.221;882pkt 882fpkt", shape=pentagon, color=darkviolet];
stat410[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.148.221:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2685: (0.0601926%)&lt;BR/&gt; 2684: (0.0601926%)&lt;BR/&gt; 2681: (0.0601926%)&lt;BR/&gt; 2680: (0.0601926%)&gt;];
}
1645--3031[label="1;759pkt 759fpkt"];
1645--3232[label="0.0411281;35pkt 35fpkt"];
1645--3235[label="0.00470035;4pkt 4fpkt"];
1645--3238[label="0.0141011;12pkt 12fpkt"];
1645--3243[label="0.0622797;53pkt 53fpkt"];
1645--3249[label="0.0411281;35pkt 35fpkt"];
1645--3252[label="0.0411281;35pkt 35fpkt"];
1645--4518[label="0.99765;849pkt 849fpkt"];
3031--3232[label="0.0461133;35pkt 35fpkt"];
3031--3235[label="0.00527009;4pkt 4fpkt"];
3031--3238[label="0.0158103;12pkt 12fpkt"];
3031--3249[label="0.0461133;35pkt 35fpkt"];
3031--3252[label="0.0461133;35pkt 35fpkt"];
3031--4518[label="0.997365;757pkt 757fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="212.82.148.221"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_411{
style=filled;
color=gray75;
2158[label="192.50.76.198;s;3pkt 3fpkt", shape=diamond, color=yellow];
2230[label="162.0.237.168;d;46pkt 46fpkt", shape=diamond, color=yellow];
3046[label="162.0.237.168;d;46pkt 46fpkt", shape=hexagon, color=black];
stat411[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.23.164.41:*, 162.0.237.168:*}[51.0638%]&lt;BR/&gt;{193.232.88.24:*, 162.0.237.168:*}[25.5319%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (10%)&lt;BR/&gt; 113: (7.89474%)&lt;BR/&gt; 1080: (5.26316%)&lt;BR/&gt; 23: (5.26316%)&lt;BR/&gt; 8080: (4.21053%)&gt;];
}
2158--2230[label="0.666667;2pkt 2fpkt"];
2158--3046[label="0.666667;2pkt 2fpkt"];
2230--3046[label="1;46pkt 46fpkt"];
2230--3232[label="0.0217391;1pkt 1fpkt"];
2230--3249[label="0.0217391;1pkt 1fpkt"];
2230--3252[label="0.0217391;1pkt 1fpkt"];
3046--3232[label="0.0217391;1pkt 1fpkt"];
3046--3249[label="0.0217391;1pkt 1fpkt"];
3046--3252[label="0.0217391;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.0.237.168" src_ip="201.23.164.41"/>
      <filter dst_ip="162.0.237.168" src_ip="193.232.88.24"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_413{
style=filled;
color=gray75;
1114[label="207.35.1.228;s;400pkt 400fpkt", shape=diamond, color=yellow];
1605[label="193.16.123.34;d;2pkt 2fpkt", shape=diamond, color=yellow];
1673[label="136.253.37.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
1836[label="193.148.51.131;d;1pkt 1fpkt", shape=diamond, color=yellow];
1975[label="220.1.55.206;d;1pkt 1fpkt", shape=diamond, color=yellow];
2016[label="203.84.161.99;d;1pkt 1fpkt", shape=diamond, color=yellow];
2116[label="207.82.5.66;d;1pkt 1fpkt", shape=diamond, color=yellow];
2551[label="207.35.1.228;s;180pkt 180fpkt", shape=hexagon, color=black];
2790[label="136.253.37.27;d;1pkt 1fpkt", shape=hexagon, color=black];
2976[label="220.1.55.206;d;1pkt 1fpkt", shape=hexagon, color=black];
2997[label="193.148.51.131;d;1pkt 1fpkt", shape=hexagon, color=black];
3057[label="203.84.161.99;d;1pkt 1fpkt", shape=hexagon, color=black];
3108[label="207.82.5.66;d;1pkt 1fpkt", shape=hexagon, color=black];
stat413[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.35.1.228:*, *:53}[32%]&lt;BR/&gt;{207.35.1.228:*, 133.189.253.109:123}[24.5%]&lt;BR/&gt;{207.35.1.228:*, *:80}[22.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (16.4696%)&lt;BR/&gt; 123: (14.7804%)&lt;BR/&gt; 80: (11.7399%)&lt;BR/&gt; 6881: (4.98311%)&lt;BR/&gt; 0: (0.675676%)&gt;];
}
1114--1206[label="0.0047619;1pkt 1fpkt"];
1114--1209[label="0.00454545;1pkt 1fpkt"];
1114--1221[label="0.0044843;1pkt 1fpkt"];
1114--1238[label="0.00413223;1pkt 1fpkt"];
1114--1248[label="0.05;1pkt 1fpkt"];
1114--1249[label="0.00456621;1pkt 1fpkt"];
1114--1250[label="0.00862069;2pkt 2fpkt"];
1114--1252[label="0.00460829;1pkt 1fpkt"];
1114--1256[label="0.00896861;2pkt 2fpkt"];
1114--1265[label="0.047619;1pkt 1fpkt"];
1114--1274[label="0.0184332;4pkt 4fpkt"];
1114--1322[label="0.0367647;5pkt 5fpkt"];
1114--1605[label="1;2pkt 2fpkt"];
1114--1673[label="1;1pkt 1fpkt"];
1114--1836[label="1;1pkt 1fpkt"];
1114--1903[label="0.023622;3pkt 3fpkt"];
1114--1975[label="1;1pkt 1fpkt"];
1114--2016[label="1;1pkt 1fpkt"];
1114--2116[label="1;1pkt 1fpkt"];
1114--2215[label="0.0224719;2pkt 2fpkt"];
1114--2421[label="0.0149254;1pkt 1fpkt"];
1114--2431[label="0.05;1pkt 1fpkt"];
1114--2432[label="0.00943396;2pkt 2fpkt"];
1114--2436[label="0.0833333;1pkt 1fpkt"];
1114--2437[label="0.0142857;1pkt 1fpkt"];
1114--2500[label="0.00896861;2pkt 2fpkt"];
1114--2551[label="1;180pkt 180fpkt"];
1114--2790[label="1;1pkt 1fpkt"];
1114--2976[label="1;1pkt 1fpkt"];
1114--2997[label="1;1pkt 1fpkt"];
1114--3027[label="0.0045045;1pkt 1fpkt"];
1114--3057[label="1;1pkt 1fpkt"];
1114--3087[label="0.0224719;2pkt 2fpkt"];
1114--3108[label="1;1pkt 1fpkt"];
1114--3158[label="0.0625;1pkt 1fpkt"];
1114--3231[label="0.005;2pkt 2fpkt"];
1114--3232[label="0.02;8pkt 8fpkt"];
1114--3235[label="0.0075;3pkt 3fpkt"];
1114--3238[label="0.0025;1pkt 1fpkt"];
1114--3243[label="0.0075;3pkt 3fpkt"];
1114--3248[label="0.005;2pkt 2fpkt"];
1114--3249[label="0.02;8pkt 8fpkt"];
1114--3252[label="0.02;8pkt 8fpkt"];
1605--2551[label="1;2pkt 2fpkt"];
1605--3235[label="1;2pkt 2fpkt"];
1673--2551[label="1;1pkt 1fpkt"];
1673--2790[label="1;1pkt 1fpkt"];
1836--2551[label="1;1pkt 1fpkt"];
1836--2997[label="1;1pkt 1fpkt"];
1975--2551[label="1;1pkt 1fpkt"];
1975--2976[label="1;1pkt 1fpkt"];
2016--3057[label="1;1pkt 1fpkt"];
2116--2551[label="1;1pkt 1fpkt"];
2116--3108[label="1;1pkt 1fpkt"];
2551--2790[label="1;1pkt 1fpkt"];
2551--2976[label="1;1pkt 1fpkt"];
2551--2997[label="1;1pkt 1fpkt"];
2551--3027[label="0.00555556;1pkt 1fpkt"];
2551--3108[label="1;1pkt 1fpkt"];
2551--3158[label="0.0625;1pkt 1fpkt"];
2551--3231[label="0.0111111;2pkt 2fpkt"];
2551--3232[label="0.0444444;8pkt 8fpkt"];
2551--3235[label="0.0166667;3pkt 3fpkt"];
2551--3238[label="0.00555556;1pkt 1fpkt"];
2551--3248[label="0.0111111;2pkt 2fpkt"];
2551--3249[label="0.0444444;8pkt 8fpkt"];
2551--3252[label="0.0444444;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="207.35.1.228"/>
      <filter dst_port="80" src_ip="207.35.1.228"/>
      <filter dst_ip="133.189.253.109" dst_port="123" src_ip="207.35.1.228"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950695,1.9018,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_414{
style=filled;
color=gray75;
62[label="133.168.53.163s;3pkt 3fpkt", shape=rectangle, color=red];
1773[label="136.238.12.222;d;1pkt 1fpkt", shape=diamond, color=yellow];
1831[label="133.168.145.163;s;3pkt 3fpkt", shape=diamond, color=yellow];
2242[label="206.50.111.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
2853[label="136.238.12.222;d;1pkt 1fpkt", shape=hexagon, color=black];
3059[label="206.50.111.74;d;1pkt 1fpkt", shape=hexagon, color=black];
4237[label="133.168.53.163;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4240[label="133.168.145.163;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat414[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.53.163:*, 203.15.225.33:80}[25%]&lt;BR/&gt;{133.168.145.163:6699, *:*}[25%]&lt;BR/&gt;{133.168.53.163:*, *:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (30.5556%)&lt;BR/&gt; 3300: (13.8889%)&lt;BR/&gt; 80: (13.8889%)&lt;BR/&gt; 1673: (11.1111%)&lt;BR/&gt; 2145: (5.55556%)&gt;];
}
62--71[label="0.666667;2pkt 2fpkt"];
62--706[label="0.666667;2pkt 2fpkt"];
62--1831[label="0.333333;1pkt 1fpkt"];
62--2242[label="1;1pkt 1fpkt"];
62--3059[label="1;1pkt 1fpkt"];
62--4237[label="0.666667;2pkt 2fpkt"];
62--4240[label="0.333333;1pkt 1fpkt"];
1773--1831[label="1;1pkt 1fpkt"];
1773--2853[label="1;1pkt 1fpkt"];
1773--4240[label="1;1pkt 1fpkt"];
1831--2242[label="1;1pkt 1fpkt"];
1831--2853[label="1;1pkt 1fpkt"];
1831--3059[label="1;1pkt 1fpkt"];
1831--4240[label="1;3pkt 3fpkt"];
2242--3059[label="1;1pkt 1fpkt"];
2242--4240[label="1;1pkt 1fpkt"];
2853--4240[label="1;1pkt 1fpkt"];
3059--4240[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="133.168.53.163"/>
      <filter src_ip="133.168.145.163" src_port="6699"/>
      <filter dst_ip="203.15.225.33" dst_port="80" src_ip="133.168.53.163"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_415{
style=filled;
color=gray75;
1782[label="207.40.14.160;d;100pkt 100fpkt", shape=diamond, color=yellow];
3061[label="207.40.14.160;d;93pkt 93fpkt", shape=hexagon, color=black];
4012[label="192.223.72.124;47pkt 47fpkt", shape=pentagon, color=darkviolet];
5014[label="192.223.72.124;48pkt 48fpkt", shape=invtriangle, color=brown];
5453[label="192.223.72.124;47pkt 47fpkt", shape=invhouse, color=bisque];
stat415[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.42.25.247:80, 207.40.14.160:*}[43.4783%]&lt;BR/&gt;{192.223.72.124:80, 207.40.14.160:*}[41.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7015%)&lt;BR/&gt; 2714: (0.746269%)&lt;BR/&gt; 2712: (0.746269%)&lt;BR/&gt; 2710: (0.746269%)&lt;BR/&gt; 2708: (0.746269%)&gt;];
}
1782--3061[label="1;93pkt 93fpkt"];
1782--4012[label="0.702128;33pkt 33fpkt"];
1782--5014[label="0.6875;33pkt 33fpkt"];
1782--5453[label="0.702128;33pkt 33fpkt"];
3061--4012[label="0.574468;27pkt 27fpkt"];
3061--5014[label="0.5625;27pkt 27fpkt"];
3061--5453[label="0.574468;27pkt 27fpkt"];
4012--5014[label="1;47pkt 47fpkt"];
4012--5453[label="1;47pkt 47fpkt"];
5014--5453[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="207.40.14.160" src_ip="192.42.25.247" src_port="80"/>
      <filter dst_ip="207.40.14.160" src_ip="192.223.72.124" src_port="80"/>
    </slice>
    <from sec="1044162003" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
1289[label="148.94.164.104;s;233pkt 233fpkt", shape=diamond, color=yellow];
1932[label="207.209.23.151;d;102pkt 102fpkt", shape=diamond, color=yellow];
3047[label="148.94.164.104;s;230pkt 230fpkt", shape=hexagon, color=black];
3048[label="207.209.23.151;d;102pkt 102fpkt", shape=hexagon, color=black];
3925[label="148.94.164.104;233pkt 233fpkt", shape=pentagon, color=darkviolet];
4971[label="148.94.164.104;233pkt 233fpkt", shape=invtriangle, color=brown];
5434[label="148.94.164.104;232pkt 232fpkt", shape=invhouse, color=bisque];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.94.164.104:*, 207.209.23.151:80}[43.7768%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9377%)&lt;BR/&gt; 1863: (0.512821%)&lt;BR/&gt; 443: (0.3663%)&lt;BR/&gt; 0: (0.3663%)&lt;BR/&gt; 3965: (0.25641%)&gt;];
}
1289--1906[label="0.0263158;4pkt 4fpkt"];
1289--1932[label="1;102pkt 102fpkt"];
1289--3047[label="1;230pkt 230fpkt"];
1289--3048[label="1;102pkt 102fpkt"];
1289--3235[label="0.0858369;20pkt 20fpkt"];
1289--3238[label="0.0472103;11pkt 11fpkt"];
1289--3925[label="1;233pkt 233fpkt"];
1289--4971[label="1;233pkt 233fpkt"];
1289--5434[label="1;232pkt 232fpkt"];
1932--3047[label="1;102pkt 102fpkt"];
1932--3048[label="1;102pkt 102fpkt"];
1932--3235[label="0.156863;16pkt 16fpkt"];
1932--3238[label="0.0980392;10pkt 10fpkt"];
1932--3925[label="1;102pkt 102fpkt"];
1932--4971[label="1;102pkt 102fpkt"];
1932--5434[label="1;102pkt 102fpkt"];
3047--3048[label="1;102pkt 102fpkt"];
3047--3235[label="0.0869565;20pkt 20fpkt"];
3047--3238[label="0.0478261;11pkt 11fpkt"];
3047--3925[label="1;230pkt 230fpkt"];
3047--4971[label="1;230pkt 230fpkt"];
3047--5434[label="1;230pkt 230fpkt"];
3048--3235[label="0.156863;16pkt 16fpkt"];
3048--3238[label="0.0980392;10pkt 10fpkt"];
3048--3925[label="1;102pkt 102fpkt"];
3048--4971[label="1;102pkt 102fpkt"];
3048--5434[label="1;102pkt 102fpkt"];
3925--4971[label="1;233pkt 233fpkt"];
3925--5434[label="1;232pkt 232fpkt"];
4971--5434[label="1;232pkt 232fpkt"];
</description>
    <slice>
      <filter dst_ip="207.209.23.151" dst_port="80" src_ip="148.94.164.104"/>
    </slice>
    <from sec="1044162056" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787599,1.96109,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_417{
style=filled;
color=gray75;
102[label="133.1.200.173s;38pkt 38fpkt", shape=rectangle, color=red];
2193[label="133.1.200.173;s;233pkt 233fpkt", shape=diamond, color=yellow];
2307[label="188.157.57.20;d;109pkt 109fpkt", shape=diamond, color=yellow];
stat417[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.1.200.173:*, 188.157.57.20:80}[46.7811%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3847: (0.394737%)&lt;BR/&gt; 3846: (0.394737%)&lt;BR/&gt; 3845: (0.394737%)&lt;BR/&gt; 3844: (0.394737%)&gt;];
}
102--2193[label="1;38pkt 38fpkt"];
102--2307[label="0.710526;27pkt 27fpkt"];
2193--2215[label="0.0449438;4pkt 4fpkt"];
2193--2307[label="1;109pkt 109fpkt"];
2193--3087[label="0.0449438;4pkt 4fpkt"];
2193--3243[label="0.0171674;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="188.157.57.20" dst_port="80" src_ip="133.1.200.173"/>
    </slice>
    <from sec="1044162968" usec="0"/>
    <to sec="1044163455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_418{
style=filled;
color=gray75;
2277[label="190.107.94.33;s;453pkt 453fpkt", shape=diamond, color=yellow];
3091[label="190.107.94.33;s;453pkt 453fpkt", shape=hexagon, color=black];
stat418[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.107.94.33:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36: (1.10375%)&lt;BR/&gt; 120: (0.993377%)&lt;BR/&gt; 108: (0.993377%)&lt;BR/&gt; 96: (0.993377%)&lt;BR/&gt; 33: (0.993377%)&gt;];
}
2277--3091[label="1;453pkt 453fpkt"];
</description>
    <slice>
      <filter src_ip="190.107.94.33"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_419{
style=filled;
color=gray75;
2280[label="206.6.41.209;s;92pkt 92fpkt", shape=diamond, color=yellow];
3096[label="206.6.41.209;s;92pkt 92fpkt", shape=hexagon, color=black];
4461[label="206.6.41.209;95pkt 95fpkt", shape=pentagon, color=darkviolet];
stat419[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.6.41.209:80, 194.200.22.4:*}[78.125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60969: (0.537634%)&lt;BR/&gt; 60889: (0.537634%)&lt;BR/&gt; 59963: (0.537634%)&lt;BR/&gt; 58272: (0.537634%)&gt;];
}
2280--3096[label="1;92pkt 92fpkt"];
2280--4461[label="0.98913;91pkt 91fpkt"];
3096--4461[label="0.98913;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_ip="194.200.22.4" src_ip="206.6.41.209" src_port="80"/>
    </slice>
    <from sec="1044162003" usec="0"/>
    <to sec="1044163513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_421{
style=filled;
color=gray75;
2115[label="206.6.44.239;s;138pkt 138fpkt", shape=diamond, color=yellow];
2994[label="206.6.44.239;s;130pkt 130fpkt", shape=hexagon, color=black];
4596[label="206.6.44.239;138pkt 138fpkt", shape=pentagon, color=darkviolet];
5285[label="206.6.44.239;139pkt 139fpkt", shape=invtriangle, color=brown];
stat421[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.6.44.239:64552, *:53}[78.4173%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.3303%)&lt;BR/&gt; 64552: (39.1743%)&lt;BR/&gt; 0: (7.33945%)&lt;BR/&gt; 55217: (0.366972%)&lt;BR/&gt; 55214: (0.366972%)&gt;];
}
2115--2285[label="0.0263158;1pkt 1fpkt"];
2115--2432[label="0.00724638;1pkt 1fpkt"];
2115--2437[label="0.0142857;1pkt 1fpkt"];
2115--2500[label="0.00724638;1pkt 1fpkt"];
2115--2644[label="0.00724638;1pkt 1fpkt"];
2115--2994[label="1;130pkt 130fpkt"];
2115--3027[label="0.00724638;1pkt 1fpkt"];
2115--3102[label="0.0263158;1pkt 1fpkt"];
2115--3231[label="0.0217391;3pkt 3fpkt"];
2115--3242[label="0.00724638;1pkt 1fpkt"];
2115--3248[label="0.0217391;3pkt 3fpkt"];
2115--4596[label="0.992754;137pkt 137fpkt"];
2115--5285[label="1;138pkt 138fpkt"];
2994--3027[label="0.00769231;1pkt 1fpkt"];
2994--3102[label="0.0263158;1pkt 1fpkt"];
2994--3231[label="0.0230769;3pkt 3fpkt"];
2994--3242[label="0.00769231;1pkt 1fpkt"];
2994--3248[label="0.0230769;3pkt 3fpkt"];
2994--4596[label="0.992308;129pkt 129fpkt"];
2994--5285[label="1;130pkt 130fpkt"];
4596--5285[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="206.6.44.239" src_port="64552"/>
    </slice>
    <from sec="1044162037" usec="0"/>
    <to sec="1044163524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
1930[label="165.155.203.141;s;77pkt 77fpkt", shape=diamond, color=yellow];
3107[label="165.155.203.141;s;77pkt 77fpkt", shape=hexagon, color=black];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.203.141:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65520: (0.649351%)&lt;BR/&gt; 64835: (0.649351%)&lt;BR/&gt; 64600: (0.649351%)&lt;BR/&gt; 64035: (0.649351%)&gt;];
}
1930--3107[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter src_ip="165.155.203.141" src_port="80"/>
    </slice>
    <from sec="1044162060" usec="0"/>
    <to sec="1044163457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.771705,1.99983,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="156.235.2.15"/>
      <from sec="1044162292" usec="0"/>
      <to sec="1044163458" usec="0"/>
    </slice>
    <from sec="1044162292" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_424{
style=filled;
color=gray75;
1549[label="190.81.28.69;s;1375pkt 1375fpkt", shape=diamond, color=yellow];
3116[label="190.81.28.69;s;1375pkt 1375fpkt", shape=hexagon, color=black];
stat424[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.81.28.69:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11: (3.74545%)&lt;BR/&gt; 17: (3.70909%)&lt;BR/&gt; 20: (3.63636%)&lt;BR/&gt; 16: (3.27273%)&lt;BR/&gt; 13: (3.27273%)&gt;];
}
1549--3116[label="1;1375pkt 1375fpkt"];
</description>
    <slice>
      <filter src_ip="190.81.28.69"/>
    </slice>
    <from sec="1044162743" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.33032,2.13216,999,0 0 0 0 0 1 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.163.44.24"/>
      <from sec="1044162832" usec="0"/>
      <to sec="1044162918" usec="0"/>
    </slice>
    <from sec="1044162832" usec="0"/>
    <to sec="1044162918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_430{
style=filled;
color=gray75;
1404[label="207.40.162.155;d;36pkt 36fpkt", shape=diamond, color=yellow];
1472[label="206.6.40.1;d;10pkt 10fpkt", shape=diamond, color=yellow];
1505[label="190.25.76.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
1606[label="196.131.141.176;s;1pkt 1fpkt", shape=diamond, color=yellow];
1697[label="190.25.76.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
1944[label="190.25.76.164;s;2pkt 2fpkt", shape=diamond, color=yellow];
2086[label="136.231.248.234;s;1pkt 1fpkt", shape=diamond, color=yellow];
2251[label="190.25.76.166;s;1pkt 1fpkt", shape=diamond, color=yellow];
2566[label="207.40.162.155;d;36pkt 36fpkt", shape=hexagon, color=black];
2609[label="206.6.40.1;d;10pkt 10fpkt", shape=hexagon, color=black];
3069[label="190.25.76.166;s;1pkt 1fpkt", shape=hexagon, color=black];
4254[label="190.25.76.166;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat430[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 207.40.162.155:*}[39.1304%]&lt;BR/&gt;{*:*, 206.6.40.1:*}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (21.7822%)&lt;BR/&gt; 5121: (8.41584%)&lt;BR/&gt; 6900: (5.94059%)&lt;BR/&gt; 6699: (4.9505%)&lt;BR/&gt; 1863: (3.9604%)&gt;];
}
1404--1505[label="1;1pkt 1fpkt"];
1404--1697[label="1;1pkt 1fpkt"];
1404--1754[label="0.111111;4pkt 4fpkt"];
1404--1886[label="0.0277778;1pkt 1fpkt"];
1404--1944[label="1;2pkt 2fpkt"];
1404--2251[label="1;1pkt 1fpkt"];
1404--2566[label="1;36pkt 36fpkt"];
1404--2778[label="0.111111;4pkt 4fpkt"];
1404--2786[label="0.0833333;3pkt 3fpkt"];
1404--3069[label="1;1pkt 1fpkt"];
1404--3380[label="0.0555556;2pkt 2fpkt"];
1404--3711[label="0.111111;4pkt 4fpkt"];
1404--4254[label="1;1pkt 1fpkt"];
1404--4714[label="0.0555556;2pkt 2fpkt"];
1472--1606[label="1;1pkt 1fpkt"];
1472--1754[label="0.2;2pkt 2fpkt"];
1472--2086[label="1;1pkt 1fpkt"];
1472--2609[label="1;10pkt 10fpkt"];
1472--2778[label="0.2;2pkt 2fpkt"];
1472--3711[label="0.2;2pkt 2fpkt"];
1505--2566[label="1;1pkt 1fpkt"];
1606--2609[label="1;1pkt 1fpkt"];
1697--2566[label="1;1pkt 1fpkt"];
1944--2566[label="1;2pkt 2fpkt"];
2086--2609[label="1;1pkt 1fpkt"];
2251--2566[label="1;1pkt 1fpkt"];
2251--3069[label="1;1pkt 1fpkt"];
2251--4254[label="1;1pkt 1fpkt"];
2566--2778[label="0.111111;4pkt 4fpkt"];
2566--2786[label="0.0833333;3pkt 3fpkt"];
2566--3069[label="1;1pkt 1fpkt"];
2566--3380[label="0.0555556;2pkt 2fpkt"];
2566--3711[label="0.111111;4pkt 4fpkt"];
2566--4254[label="1;1pkt 1fpkt"];
2566--4714[label="0.0555556;2pkt 2fpkt"];
2609--2778[label="0.2;2pkt 2fpkt"];
2609--3711[label="0.2;2pkt 2fpkt"];
3069--4254[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.6.40.1"/>
      <filter dst_ip="207.40.162.155" src_port="80"/>
    </slice>
    <from sec="1044162002" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.139.65.0"/>
    </slice>
    <from sec="1044162042" usec="0"/>
    <to sec="1044163418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.25.74.1"/>
    </slice>
    <from sec="1044162820" usec="0"/>
    <to sec="1044163516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.161.66.2"/>
    </slice>
    <from sec="1044162206" usec="0"/>
    <to sec="1044162399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.16.96.3"/>
    </slice>
    <from sec="1044162527" usec="0"/>
    <to sec="1044162543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.92.119.4"/>
    </slice>
    <from sec="1044163306" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.168.174.4"/>
    </slice>
    <from sec="1044162733" usec="0"/>
    <to sec="1044162746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.254.176.4"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14953,1.88003,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_443{
style=filled;
color=gray75;
111[label="195.55.180.4s;388pkt 388fpkt", shape=rectangle, color=red];
569[label="195.55.180.4s;71pkt 71fpkt", shape=ellipse, color=green];
3299[label="195.55.180.4;435pkt 435fpkt", shape=pentagon, color=darkviolet];
4673[label="195.55.180.4;435pkt 435fpkt", shape=invtriangle, color=brown];
5317[label="195.55.180.4;435pkt 435fpkt", shape=invhouse, color=bisque];
stat443[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.55.180.4:2835, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2835: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
111--569[label="1;71pkt 71fpkt"];
111--3299[label="1;388pkt 388fpkt"];
111--4673[label="1;388pkt 388fpkt"];
111--5317[label="1;388pkt 388fpkt"];
569--3299[label="1;71pkt 71fpkt"];
569--4673[label="1;71pkt 71fpkt"];
569--5317[label="1;71pkt 71fpkt"];
3299--4673[label="1;435pkt 435fpkt"];
3299--5317[label="1;435pkt 435fpkt"];
4673--5317[label="1;435pkt 435fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.55.180.4" src_port="2835"/>
    </slice>
    <from sec="1044162719" usec="0"/>
    <to sec="1044162999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.236.224.4"/>
    </slice>
    <from sec="1044162279" usec="0"/>
    <to sec="1044162300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.54.100.5"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_446{
style=filled;
color=gray75;
112[label="136.166.209.5s;190pkt 190fpkt", shape=rectangle, color=red];
3307[label="136.166.209.5;190pkt 190fpkt", shape=pentagon, color=darkviolet];
stat446[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.166.209.5:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
112--3307[label="1;190pkt 190fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="136.166.209.5" src_port="1025"/>
    </slice>
    <from sec="1044162260" usec="0"/>
    <to sec="1044162294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.128.6.6"/>
    </slice>
    <from sec="1044162920" usec="0"/>
    <to sec="1044163367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.18.241.6"/>
    </slice>
    <from sec="1044162003" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.63.107.7"/>
    </slice>
    <from sec="1044163291" usec="0"/>
    <to sec="1044163324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.156.203.7"/>
    </slice>
    <from sec="1044163474" usec="0"/>
    <to sec="1044163517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.20.39.8"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.54.100.9"/>
    </slice>
    <from sec="1044163464" usec="0"/>
    <to sec="1044163493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.40.162.9"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.141.245.9"/>
    </slice>
    <from sec="1044162590" usec="0"/>
    <to sec="1044162616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.71.190.10"/>
    </slice>
    <from sec="1044162124" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.139.78.13"/>
    </slice>
    <from sec="1044162239" usec="0"/>
    <to sec="1044162588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.154.13"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.203.62.14"/>
    </slice>
    <from sec="1044162892" usec="0"/>
    <to sec="1044163120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.24.74.14"/>
    </slice>
    <from sec="1044162857" usec="0"/>
    <to sec="1044162880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.163.157.15"/>
    </slice>
    <from sec="1044163244" usec="0"/>
    <to sec="1044163265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.225.76.16"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.655737,1.94144,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_462{
style=filled;
color=gray75;
2281[label="133.37.210.94;d;104pkt 104fpkt", shape=diamond, color=yellow];
3396[label="206.90.31.17;91pkt 91fpkt", shape=pentagon, color=darkviolet];
stat462[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.90.31.17:*, 133.37.210.94:53}[42.5926%]&lt;BR/&gt;{206.90.31.17:*, 133.37.210.94:37852}[41.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (27.1795%)&lt;BR/&gt; 37852: (22.3077%)&lt;BR/&gt; 3451: (1.02564%)&lt;BR/&gt; 3430: (1.02564%)&lt;BR/&gt; 3347: (1.02564%)&gt;];
}
2281--3231[label="0.0288462;3pkt 3fpkt"];
2281--3242[label="0.0384615;4pkt 4fpkt"];
2281--3248[label="0.0288462;3pkt 3fpkt"];
2281--3396[label="0.956044;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_ip="133.37.210.94" dst_port="53" src_ip="206.90.31.17"/>
      <filter dst_ip="133.37.210.94" dst_port="37852" src_ip="206.90.31.17"/>
    </slice>
    <from sec="1044162003" usec="0"/>
    <to sec="1044163506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.6.45.17"/>
    </slice>
    <from sec="1044162011" usec="0"/>
    <to sec="1044163521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.0.213.17"/>
    </slice>
    <from sec="1044162961" usec="0"/>
    <to sec="1044163466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.135.164.18"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.234.210.18"/>
    </slice>
    <from sec="1044163162" usec="0"/>
    <to sec="1044163183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.148.48.21"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044162075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.44.20.22"/>
    </slice>
    <from sec="1044162022" usec="0"/>
    <to sec="1044162136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.17.100.22"/>
    </slice>
    <from sec="1044163308" usec="0"/>
    <to sec="1044163330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.89.188.23"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
461[label="219.77.217.23s;172pkt 172fpkt", shape=rectangle, color=red];
3448[label="219.77.217.23;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.77.217.23:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 65523: (0.234742%)&lt;BR/&gt; 65497: (0.234742%)&lt;BR/&gt; 65474: (0.234742%)&lt;BR/&gt; 65473: (0.234742%)&gt;];
}
461--3448[label="0.994186;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.77.217.23"/>
    </slice>
    <from sec="1044162757" usec="0"/>
    <to sec="1044162818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.141.68.25"/>
    </slice>
    <from sec="1044162787" usec="0"/>
    <to sec="1044163139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.129.74.25"/>
    </slice>
    <from sec="1044162157" usec="0"/>
    <to sec="1044163446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.139.108.25"/>
    </slice>
    <from sec="1044162009" usec="0"/>
    <to sec="1044163522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.84.168.25"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.236.176.25"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.21.124.26"/>
    </slice>
    <from sec="1044163475" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_478{
style=filled;
color=gray75;
138[label="150.206.69.27s;125pkt 125fpkt", shape=rectangle, color=red];
3470[label="150.206.69.27;173pkt 173fpkt", shape=pentagon, color=darkviolet];
stat478[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.206.69.27:1087, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1087: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
138--3470[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="150.206.69.27" src_port="1087"/>
    </slice>
    <from sec="1044163209" usec="0"/>
    <to sec="1044163237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.974221,1.90129,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_479{
style=filled;
color=gray75;
141[label="206.9.97.28s;79pkt 79fpkt", shape=rectangle, color=red];
3477[label="206.9.97.28;169pkt 169fpkt", shape=pentagon, color=darkviolet];
4754[label="206.9.97.28;169pkt 169fpkt", shape=invtriangle, color=brown];
5356[label="206.9.97.28;168pkt 168fpkt", shape=invhouse, color=bisque];
stat479[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.9.97.28:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
141--3477[label="1;79pkt 79fpkt"];
141--4754[label="1;79pkt 79fpkt"];
141--5356[label="1;79pkt 79fpkt"];
3477--4754[label="1;169pkt 169fpkt"];
3477--5356[label="1;168pkt 168fpkt"];
4754--5356[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="206.9.97.28" src_port="1031"/>
    </slice>
    <from sec="1044162768" usec="0"/>
    <to sec="1044162796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696077,1.90116,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_480{
style=filled;
color=gray75;
142[label="207.152.135.28s;113pkt 113fpkt", shape=rectangle, color=red];
3478[label="207.152.135.28;165pkt 165fpkt", shape=pentagon, color=darkviolet];
4755[label="207.152.135.28;165pkt 165fpkt", shape=invtriangle, color=brown];
stat480[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.152.135.28:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
142--3478[label="1;113pkt 113fpkt"];
142--4755[label="1;113pkt 113fpkt"];
3478--4755[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="207.152.135.28" src_port="1027"/>
    </slice>
    <from sec="1044162563" usec="0"/>
    <to sec="1044162592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.188.159.28"/>
    </slice>
    <from sec="1044162262" usec="0"/>
    <to sec="1044162400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.185.87.29"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.140.84.30"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.200.202.30"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696077,1.90116,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_485{
style=filled;
color=gray75;
146[label="190.20.58.31s;75pkt 75fpkt", shape=rectangle, color=red];
3495[label="190.20.58.31;182pkt 182fpkt", shape=pentagon, color=darkviolet];
4764[label="190.20.58.31;183pkt 183fpkt", shape=invtriangle, color=brown];
stat485[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.20.58.31:64652, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64652: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
146--3495[label="1;75pkt 75fpkt"];
146--4764[label="1;75pkt 75fpkt"];
3495--4764[label="1;182pkt 182fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.20.58.31" src_port="64652"/>
    </slice>
    <from sec="1044162123" usec="0"/>
    <to sec="1044162223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.71.77.32"/>
    </slice>
    <from sec="1044162002" usec="0"/>
    <to sec="1044163519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.108.172.32"/>
    </slice>
    <from sec="1044163410" usec="0"/>
    <to sec="1044163459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.0.194.32"/>
    </slice>
    <from sec="1044162024" usec="0"/>
    <to sec="1044163408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.25.76.33"/>
    </slice>
    <from sec="1044163403" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.168.160.33"/>
    </slice>
    <from sec="1044163405" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.221.244.33"/>
    </slice>
    <from sec="1044162005" usec="0"/>
    <to sec="1044163525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.107.84.34"/>
    </slice>
    <from sec="1044162280" usec="0"/>
    <to sec="1044162685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.40.188.34"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.194.138.35"/>
    </slice>
    <from sec="1044162619" usec="0"/>
    <to sec="1044162628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.124.10.36"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.139.230.36"/>
    </slice>
    <from sec="1044162420" usec="0"/>
    <to sec="1044163175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.167.200.38"/>
    </slice>
    <from sec="1044162645" usec="0"/>
    <to sec="1044162900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.105.42.39"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044162880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_500{
style=filled;
color=gray75;
156[label="193.148.65.39s;41pkt 41fpkt", shape=rectangle, color=red];
3551[label="193.148.65.39;150pkt 150fpkt", shape=pentagon, color=darkviolet];
stat500[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.148.65.39:1027, *:137}[98.6928%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (49.4764%)&lt;BR/&gt; 137: (49.4764%)&lt;BR/&gt; 1138: (0.52356%)&lt;BR/&gt; 53: (0.52356%)&gt;];
}
156--1379[label="0.0243902;1pkt 1fpkt"];
156--1438[label="0.0243902;1pkt 1fpkt"];
156--2538[label="0.0243902;1pkt 1fpkt"];
156--3206[label="0.0243902;1pkt 1fpkt"];
156--3551[label="0.926829;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.148.65.39" src_port="1027"/>
    </slice>
    <from sec="1044163177" usec="0"/>
    <to sec="1044163204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.152.39"/>
    </slice>
    <from sec="1044162118" usec="0"/>
    <to sec="1044163386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_502{
style=filled;
color=gray75;
1019[label="133.168.144.40;s;148pkt 148fpkt", shape=diamond, color=yellow];
1994[label="197.153.15.203;d;51pkt 51fpkt", shape=diamond, color=yellow];
2511[label="133.168.144.40;s;148pkt 148fpkt", shape=hexagon, color=black];
3559[label="133.168.144.40;152pkt 152fpkt", shape=pentagon, color=darkviolet];
4795[label="133.168.144.40;152pkt 152fpkt", shape=invtriangle, color=brown];
5372[label="133.168.144.40;152pkt 152fpkt", shape=invhouse, color=bisque];
stat502[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.144.40:*, 203.245.222.84:80}[29.0816%]&lt;BR/&gt;{133.168.144.40:*, 192.42.1.234:80}[28.5714%]&lt;BR/&gt;{*:*, 197.153.15.203:80}[26.0204%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6887%)&lt;BR/&gt; 1547: (0.373599%)&lt;BR/&gt; 1546: (0.373599%)&lt;BR/&gt; 1545: (0.373599%)&lt;BR/&gt; 1544: (0.373599%)&gt;];
}
1019--1994[label="0.137255;7pkt 7fpkt"];
1019--2511[label="1;148pkt 148fpkt"];
1019--3232[label="0.0540541;8pkt 8fpkt"];
1019--3249[label="0.0540541;8pkt 8fpkt"];
1019--3252[label="0.0540541;8pkt 8fpkt"];
1019--3559[label="1;148pkt 148fpkt"];
1019--4795[label="1;148pkt 148fpkt"];
1019--5372[label="1;148pkt 148fpkt"];
1994--2511[label="0.137255;7pkt 7fpkt"];
1994--3235[label="0.196078;10pkt 10fpkt"];
1994--3238[label="0.0588235;3pkt 3fpkt"];
1994--3243[label="0.0784314;4pkt 4fpkt"];
1994--3559[label="0.137255;7pkt 7fpkt"];
1994--4795[label="0.137255;7pkt 7fpkt"];
1994--5372[label="0.137255;7pkt 7fpkt"];
2511--3232[label="0.0540541;8pkt 8fpkt"];
2511--3249[label="0.0540541;8pkt 8fpkt"];
2511--3252[label="0.0540541;8pkt 8fpkt"];
2511--3559[label="1;148pkt 148fpkt"];
2511--4795[label="1;148pkt 148fpkt"];
2511--5372[label="1;148pkt 148fpkt"];
3559--4795[label="1;152pkt 152fpkt"];
3559--5372[label="1;152pkt 152fpkt"];
4795--5372[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_ip="197.153.15.203" dst_port="80"/>
      <filter dst_ip="203.245.222.84" dst_port="80" src_ip="133.168.144.40"/>
      <filter dst_ip="192.42.1.234" dst_port="80" src_ip="133.168.144.40"/>
    </slice>
    <from sec="1044162006" usec="0"/>
    <to sec="1044163463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.152.40"/>
    </slice>
    <from sec="1044162180" usec="0"/>
    <to sec="1044163446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.771364,1.91509,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_504{
style=filled;
color=gray75;
1936[label="162.0.218.41;s;24pkt 24fpkt", shape=diamond, color=yellow];
3574[label="162.0.218.41;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4807[label="162.0.218.41;24pkt 24fpkt", shape=invtriangle, color=brown];
stat504[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.218.41:80, 207.93.10.188:*}[62.5%]&lt;BR/&gt;{162.0.218.41:80, 207.93.10.184:*}[29.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59715: (2.08333%)&lt;BR/&gt; 59678: (2.08333%)&lt;BR/&gt; 59519: (2.08333%)&lt;BR/&gt; 59362: (2.08333%)&gt;];
}
1936--3574[label="1;24pkt 24fpkt"];
1936--4807[label="1;24pkt 24fpkt"];
3574--4807[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="207.93.10.188" src_ip="162.0.218.41" src_port="80"/>
      <filter dst_ip="207.93.10.184" src_ip="162.0.218.41" src_port="80"/>
    </slice>
    <from sec="1044162111" usec="0"/>
    <to sec="1044162995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.84.52.42"/>
    </slice>
    <from sec="1044162226" usec="0"/>
    <to sec="1044162238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.140.59.42"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.2.179.43"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.25.72.44"/>
    </slice>
    <from sec="1044162009" usec="0"/>
    <to sec="1044163507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.655737,1.94144,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_509{
style=filled;
color=gray75;
1942[label="133.168.153.44;s;45pkt 45fpkt", shape=diamond, color=yellow];
3593[label="133.168.153.44;49pkt 49fpkt", shape=pentagon, color=darkviolet];
stat509[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.153.44:80, 212.255.9.25:*}[26%]&lt;BR/&gt;{133.168.153.44:80, 212.255.9.26:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63384: (1.06383%)&lt;BR/&gt; 59714: (1.06383%)&lt;BR/&gt; 58601: (1.06383%)&lt;BR/&gt; 57671: (1.06383%)&gt;];
}
1942--3593[label="0.977778;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="212.255.9.25" src_ip="133.168.153.44" src_port="80"/>
      <filter dst_ip="212.255.9.26" src_ip="133.168.153.44" src_port="80"/>
    </slice>
    <from sec="1044162599" usec="0"/>
    <to sec="1044163490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.81.45"/>
    </slice>
    <from sec="1044162361" usec="0"/>
    <to sec="1044163480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.58.196.45"/>
    </slice>
    <from sec="1044162014" usec="0"/>
    <to sec="1044163473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.771364,1.91509,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_512{
style=filled;
color=gray75;
2140[label="165.155.200.45;s;78pkt 78fpkt", shape=diamond, color=yellow];
3601[label="165.155.200.45;77pkt 77fpkt", shape=pentagon, color=darkviolet];
4820[label="165.155.200.45;77pkt 77fpkt", shape=invtriangle, color=brown];
stat512[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.200.45:*, 193.109.38.2:80}[25.641%]&lt;BR/&gt;{165.155.200.45:*, 194.73.117.176:80}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1626: (0.646552%)&lt;BR/&gt; 1625: (0.646552%)&lt;BR/&gt; 1624: (0.646552%)&lt;BR/&gt; 1623: (0.646552%)&gt;];
}
2140--3601[label="1;77pkt 77fpkt"];
2140--4820[label="1;77pkt 77fpkt"];
3601--4820[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="193.109.38.2" dst_port="80" src_ip="165.155.200.45"/>
      <filter dst_ip="194.73.117.176" dst_port="80" src_ip="165.155.200.45"/>
    </slice>
    <from sec="1044162974" usec="0"/>
    <to sec="1044163340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.139.220.45"/>
    </slice>
    <from sec="1044162226" usec="0"/>
    <to sec="1044163104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.25.72.46"/>
    </slice>
    <from sec="1044162029" usec="0"/>
    <to sec="1044162827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.237.0.47"/>
    </slice>
    <from sec="1044163038" usec="0"/>
    <to sec="1044163066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.25.76.47"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.25.76.48"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044162195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.974221,1.90129,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_518{
style=filled;
color=gray75;
165[label="193.114.139.48s;112pkt 112fpkt", shape=rectangle, color=red];
3615[label="193.114.139.48;112pkt 112fpkt", shape=pentagon, color=darkviolet];
4829[label="193.114.139.48;111pkt 111fpkt", shape=invtriangle, color=brown];
5387[label="193.114.139.48;111pkt 111fpkt", shape=invhouse, color=bisque];
stat518[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.114.139.48:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
165--3615[label="1;112pkt 112fpkt"];
165--4829[label="1;111pkt 111fpkt"];
165--5387[label="1;111pkt 111fpkt"];
3615--4829[label="1;111pkt 111fpkt"];
3615--5387[label="1;111pkt 111fpkt"];
4829--5387[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.114.139.48" src_port="1030"/>
    </slice>
    <from sec="1044162841" usec="0"/>
    <to sec="1044162863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.113.66.49"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.168.186.49"/>
    </slice>
    <from sec="1044162234" usec="0"/>
    <to sec="1044163234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.65.0.50"/>
    </slice>
    <from sec="1044163474" usec="0"/>
    <to sec="1044163513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_522{
style=filled;
color=gray75;
1768[label="162.0.194.51;s;66pkt 66fpkt", shape=diamond, color=yellow];
1770[label="202.60.122.69;d;7pkt 7fpkt", shape=diamond, color=yellow];
2219[label="133.179.168.88;s;104pkt 104fpkt", shape=diamond, color=yellow];
3094[label="133.179.168.88;s;104pkt 104fpkt", shape=hexagon, color=black];
3625[label="162.0.194.51;66pkt 66fpkt", shape=pentagon, color=darkviolet];
3844[label="133.179.168.88;105pkt 105fpkt", shape=pentagon, color=darkviolet];
4937[label="133.179.168.88;105pkt 105fpkt", shape=invtriangle, color=brown];
stat522[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.179.168.88:0, *:0}[61.2717%]&lt;BR/&gt;{162.0.194.51:*, *:25}[37.5723%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (75.2244%)&lt;BR/&gt; 25: (12.0287%)&lt;BR/&gt; 2459: (0.2693%)&lt;BR/&gt; 2455: (0.2693%)&lt;BR/&gt; 2445: (0.2693%)&gt;];
}
1768--1770[label="0.857143;6pkt 6fpkt"];
1768--3625[label="0.984848;65pkt 65fpkt"];
1770--2219[label="0.142857;1pkt 1fpkt"];
1770--3094[label="0.142857;1pkt 1fpkt"];
1770--3625[label="0.857143;6pkt 6fpkt"];
1770--3844[label="0.142857;1pkt 1fpkt"];
1770--4937[label="0.142857;1pkt 1fpkt"];
2219--3094[label="1;104pkt 104fpkt"];
2219--3844[label="0.990385;103pkt 103fpkt"];
2219--4937[label="0.990385;103pkt 103fpkt"];
3094--3844[label="0.990385;103pkt 103fpkt"];
3094--4937[label="0.990385;103pkt 103fpkt"];
3844--4937[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="162.0.194.51"/>
      <filter src_ip="133.179.168.88"/>
    </slice>
    <from sec="1044162002" usec="0"/>
    <to sec="1044163524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.131.17.52"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044162127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.201.37.52"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.44.59.52"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.76.134.53"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.50.25.54"/>
    </slice>
    <from sec="1044163353" usec="0"/>
    <to sec="1044163383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.85.145.54"/>
    </slice>
    <from sec="1044163056" usec="0"/>
    <to sec="1044163088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.78.194.55"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.168.174.56"/>
    </slice>
    <from sec="1044162875" usec="0"/>
    <to sec="1044162894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.0.237.57"/>
    </slice>
    <from sec="1044162005" usec="0"/>
    <to sec="1044162375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.225.88.58"/>
    </slice>
    <from sec="1044162723" usec="0"/>
    <to sec="1044162749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="10.10.40.59"/>
    </slice>
    <from sec="1044162002" usec="0"/>
    <to sec="1044163461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.172.221.59"/>
    </slice>
    <from sec="1044162007" usec="0"/>
    <to sec="1044163513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.17.87.60"/>
    </slice>
    <from sec="1044162020" usec="0"/>
    <to sec="1044163476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.0.194.60"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.93.89.61"/>
    </slice>
    <from sec="1044163230" usec="0"/>
    <to sec="1044163250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.94.203.61"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.130.9.62"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.40.27.62"/>
    </slice>
    <from sec="1044162046" usec="0"/>
    <to sec="1044163469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.139.171.63"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044162562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.655737,1.94144,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_542{
style=filled;
color=gray75;
1758[label="162.0.197.232;d;76pkt 76fpkt", shape=diamond, color=yellow];
3676[label="217.204.23.64;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat542[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 162.0.197.232:25}[93.8272%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 33263: (1.1236%)&lt;BR/&gt; 33095: (1.1236%)&lt;BR/&gt; 33033: (1.1236%)&lt;BR/&gt; 32917: (1.1236%)&gt;];
}
1758--3676[label="0.615385;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="162.0.197.232" dst_port="25"/>
    </slice>
    <from sec="1044162009" usec="0"/>
    <to sec="1044163431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.45.68.65"/>
    </slice>
    <from sec="1044163246" usec="0"/>
    <to sec="1044163275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.139.14.66"/>
    </slice>
    <from sec="1044162456" usec="0"/>
    <to sec="1044163054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.140.59.66"/>
    </slice>
    <from sec="1044162245" usec="0"/>
    <to sec="1044163504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.129.173.67"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_547{
style=filled;
color=gray75;
3706[label="133.61.249.67;22pkt 22fpkt", shape=pentagon, color=darkviolet];
stat547[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.61.249.67:80, *:*}[31.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (15.9091%)&lt;BR/&gt; 53: (15.9091%)&lt;BR/&gt; 25: (11.3636%)&lt;BR/&gt; 0: (9.09091%)&lt;BR/&gt; 65534: (4.54545%)&gt;];
}
</description>
    <slice>
      <filter src_ip="133.61.249.67" src_port="80"/>
    </slice>
    <from sec="1044162289" usec="0"/>
    <to sec="1044162970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="152.244.208.69"/>
    </slice>
    <from sec="1044162504" usec="0"/>
    <to sec="1044162514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.94.210.69"/>
    </slice>
    <from sec="1044162077" usec="0"/>
    <to sec="1044163519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.113.58.71"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.156.119.71"/>
    </slice>
    <from sec="1044162064" usec="0"/>
    <to sec="1044163503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.35.34.72"/>
    </slice>
    <from sec="1044162028" usec="0"/>
    <to sec="1044163405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.90.35.72"/>
    </slice>
    <from sec="1044162446" usec="0"/>
    <to sec="1044162680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.17.81.72"/>
    </slice>
    <from sec="1044162022" usec="0"/>
    <to sec="1044163483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.52.98.72"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.135.164.72"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_557{
style=filled;
color=gray75;
195[label="206.154.168.72s;79pkt 79fpkt", shape=rectangle, color=red];
3749[label="206.154.168.72;199pkt 199fpkt", shape=pentagon, color=darkviolet];
stat557[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.154.168.72:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
195--3749[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="206.154.168.72" src_port="1026"/>
    </slice>
    <from sec="1044162374" usec="0"/>
    <to sec="1044162410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.11.207.72"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696077,1.90116,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_559{
style=filled;
color=gray75;
198[label="136.253.57.73s;45pkt 45fpkt", shape=rectangle, color=red];
3754[label="136.253.57.73;155pkt 155fpkt", shape=pentagon, color=darkviolet];
4896[label="136.253.57.73;155pkt 155fpkt", shape=invtriangle, color=brown];
stat559[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.253.57.73:1061, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1061: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
198--3754[label="1;45pkt 45fpkt"];
198--4896[label="1;45pkt 45fpkt"];
3754--4896[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="136.253.57.73" src_port="1061"/>
    </slice>
    <from sec="1044162811" usec="0"/>
    <to sec="1044162839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.167.160.73"/>
    </slice>
    <from sec="1044163345" usec="0"/>
    <to sec="1044163488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.155.67.74"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.50.111.74"/>
    </slice>
    <from sec="1044162904" usec="0"/>
    <to sec="1044163511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.221.131.74"/>
    </slice>
    <from sec="1044162049" usec="0"/>
    <to sec="1044163270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_564{
style=filled;
color=gray75;
202[label="196.154.148.74s;78pkt 78fpkt", shape=rectangle, color=red];
3765[label="196.154.148.74;112pkt 112fpkt", shape=pentagon, color=darkviolet];
stat564[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.154.148.74:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
202--3765[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.154.148.74" src_port="1025"/>
    </slice>
    <from sec="1044162836" usec="0"/>
    <to sec="1044162854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.159.74"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.162.66.76"/>
    </slice>
    <from sec="1044162158" usec="0"/>
    <to sec="1044162994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.165.225.76"/>
    </slice>
    <from sec="1044162693" usec="0"/>
    <to sec="1044162715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.655737,1.94144,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_568{
style=filled;
color=gray75;
2178[label="162.0.237.76;s;14pkt 14fpkt", shape=diamond, color=yellow];
3777[label="162.0.237.76;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat568[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.237.76:25, *:*}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (43.3333%)&lt;BR/&gt; 80: (6.66667%)&lt;BR/&gt; 55995: (3.33333%)&lt;BR/&gt; 55251: (3.33333%)&lt;BR/&gt; 47277: (3.33333%)&gt;];
}
2178--3777[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="162.0.237.76" src_port="25"/>
    </slice>
    <from sec="1044162140" usec="0"/>
    <to sec="1044163268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696077,1.90116,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_569{
style=filled;
color=gray75;
206[label="209.226.135.77s;137pkt 137fpkt", shape=rectangle, color=red];
3783[label="209.226.135.77;136pkt 136fpkt", shape=pentagon, color=darkviolet];
4906[label="209.226.135.77;136pkt 136fpkt", shape=invtriangle, color=brown];
stat569[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.226.135.77:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
206--3783[label="1;136pkt 136fpkt"];
206--4906[label="1;136pkt 136fpkt"];
3783--4906[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.226.135.77" src_port="1026"/>
    </slice>
    <from sec="1044163007" usec="0"/>
    <to sec="1044163040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.210.59.79"/>
    </slice>
    <from sec="1044162003" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696077,1.90116,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_571{
style=filled;
color=gray75;
209[label="208.243.19.80s;249pkt 249fpkt", shape=rectangle, color=red];
3796[label="208.243.19.80;367pkt 367fpkt", shape=pentagon, color=darkviolet];
4910[label="208.243.19.80;367pkt 367fpkt", shape=invtriangle, color=brown];
stat571[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.243.19.80:61369, *:137}[67.8474%]&lt;BR/&gt;{208.243.19.80:63146, *:137}[32.1526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 61369: (37.9959%)&lt;BR/&gt; 63146: (12.0041%)&gt;];
}
209--3796[label="1;249pkt 249fpkt"];
209--4910[label="1;249pkt 249fpkt"];
3796--4910[label="1;367pkt 367fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.243.19.80" src_port="61369"/>
      <filter dst_port="137" src_ip="208.243.19.80" src_port="63146"/>
    </slice>
    <from sec="1044162281" usec="0"/>
    <to sec="1044163331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.137.100.80"/>
    </slice>
    <from sec="1044162012" usec="0"/>
    <to sec="1044163519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.94.15.82"/>
    </slice>
    <from sec="1044162192" usec="0"/>
    <to sec="1044162281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.159.82"/>
    </slice>
    <from sec="1044162033" usec="0"/>
    <to sec="1044163315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.70.156.83"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.172.133.84"/>
    </slice>
    <from sec="1044162004" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.89.90.85"/>
    </slice>
    <from sec="1044162363" usec="0"/>
    <to sec="1044162394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.178.147.85"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.85.5.86"/>
    </slice>
    <from sec="1044162017" usec="0"/>
    <to sec="1044163497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_580{
style=filled;
color=gray75;
3851[label="207.209.39.91;80pkt 80fpkt", shape=pentagon, color=darkviolet];
stat580[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.209.39.91:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3226: (1.25%)&lt;BR/&gt; 4923: (0.625%)&lt;BR/&gt; 4817: (0.625%)&lt;BR/&gt; 4804: (0.625%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="207.209.39.91"/>
    </slice>
    <from sec="1044162032" usec="0"/>
    <to sec="1044163527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.156.92"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.159.92"/>
    </slice>
    <from sec="1044162008" usec="0"/>
    <to sec="1044163222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_583{
style=filled;
color=gray75;
223[label="194.207.192.93s;418pkt 418fpkt", shape=rectangle, color=red];
3866[label="194.207.192.93;417pkt 417fpkt", shape=pentagon, color=darkviolet];
stat583[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.207.192.93:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
223--3866[label="1;417pkt 417fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.207.192.93" src_port="1030"/>
    </slice>
    <from sec="1044162592" usec="0"/>
    <to sec="1044163193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.655737,1.94144,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_584{
style=filled;
color=gray75;
2192[label="133.1.200.173;d;173pkt 173fpkt", shape=diamond, color=yellow];
2253[label="188.157.57.20;s;109pkt 109fpkt", shape=diamond, color=yellow];
3533[label="188.157.57.36;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat584[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.157.57.20:80, 133.1.200.173:*}[62.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3933: (0.344828%)&lt;BR/&gt; 3932: (0.344828%)&lt;BR/&gt; 3931: (0.344828%)&lt;BR/&gt; 3930: (0.344828%)&gt;];
}
2192--2253[label="1;109pkt 109fpkt"];
2192--2846[label="0.0115607;2pkt 2fpkt"];
2192--3465[label="0.00578035;1pkt 1fpkt"];
2192--3533[label="0.75;6pkt 6fpkt"];
2192--3868[label="0.0231214;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="133.1.200.173" src_ip="188.157.57.20" src_port="80"/>
    </slice>
    <from sec="1044162968" usec="0"/>
    <to sec="1044163512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.168.186.95"/>
    </slice>
    <from sec="1044162306" usec="0"/>
    <to sec="1044163212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.35.190.95"/>
    </slice>
    <from sec="1044162002" usec="0"/>
    <to sec="1044163517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.4.110.96"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.159.98"/>
    </slice>
    <from sec="1044162083" usec="0"/>
    <to sec="1044163225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.209.183.98"/>
    </slice>
    <from sec="1044162678" usec="0"/>
    <to sec="1044162801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.82.23.100"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.156.101"/>
    </slice>
    <from sec="1044162009" usec="0"/>
    <to sec="1044163521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.159.101"/>
    </slice>
    <from sec="1044162005" usec="0"/>
    <to sec="1044163493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_593{
style=filled;
color=gray75;
235[label="195.32.104.102s;112pkt 112fpkt", shape=rectangle, color=red];
3911[label="195.32.104.102;111pkt 111fpkt", shape=pentagon, color=darkviolet];
stat593[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.32.104.102:1037, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1037: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
235--3911[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.32.104.102" src_port="1037"/>
    </slice>
    <from sec="1044163316" usec="0"/>
    <to sec="1044163340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.655737,1.94144,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_594{
style=filled;
color=gray75;
1995[label="130.139.186.102;s;1pkt 1fpkt", shape=diamond, color=yellow];
3914[label="130.139.186.102;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat594[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.186.102:1094, 203.96.152.62:1863}[50%]&lt;BR/&gt;{130.139.186.102:1100, 203.96.152.62:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1100: (33.3333%)&lt;BR/&gt; 1094: (16.6667%)&gt;];
}
1995--3914[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.96.152.62" dst_port="1863" src_ip="130.139.186.102" src_port="1100"/>
      <filter dst_ip="203.96.152.62" dst_port="1863" src_ip="130.139.186.102" src_port="1094"/>
    </slice>
    <from sec="1044162064" usec="0"/>
    <to sec="1044163521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.66.80.104"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.0.193.106"/>
    </slice>
    <from sec="1044162051" usec="0"/>
    <to sec="1044162782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.209.43.107"/>
    </slice>
    <from sec="1044162008" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.78.131.107"/>
    </slice>
    <from sec="1044162234" usec="0"/>
    <to sec="1044162579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.131.11.108"/>
    </slice>
    <from sec="1044162129" usec="0"/>
    <to sec="1044163472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.48.236.108"/>
    </slice>
    <from sec="1044162036" usec="0"/>
    <to sec="1044163508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.90.150.109"/>
    </slice>
    <from sec="1044162006" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.974221,1.90129,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_603{
style=filled;
color=gray75;
468[label="219.71.12.110s;174pkt 174fpkt", shape=rectangle, color=red];
3959[label="219.71.12.110;174pkt 174fpkt", shape=pentagon, color=darkviolet];
4990[label="219.71.12.110;173pkt 173fpkt", shape=invtriangle, color=brown];
5443[label="219.71.12.110;174pkt 174fpkt", shape=invhouse, color=bisque];
stat603[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.71.12.110:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 65534: (0.28777%)&lt;BR/&gt; 65529: (0.28777%)&lt;BR/&gt; 65528: (0.28777%)&lt;BR/&gt; 65516: (0.28777%)&gt;];
}
468--3959[label="1;174pkt 174fpkt"];
468--4990[label="1;173pkt 173fpkt"];
468--5443[label="1;174pkt 174fpkt"];
3959--4990[label="1;173pkt 173fpkt"];
3959--5443[label="1;174pkt 174fpkt"];
4990--5443[label="1;173pkt 173fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.71.12.110"/>
    </slice>
    <from sec="1044162054" usec="0"/>
    <to sec="1044162084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_604{
style=filled;
color=gray75;
246[label="209.221.169.110s;88pkt 88fpkt", shape=rectangle, color=red];
3962[label="209.221.169.110;141pkt 141fpkt", shape=pentagon, color=darkviolet];
stat604[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.221.169.110:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
246--3962[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.221.169.110" src_port="1032"/>
    </slice>
    <from sec="1044163257" usec="0"/>
    <to sec="1044163295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.61.250.110"/>
    </slice>
    <from sec="1044162008" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.159.112"/>
    </slice>
    <from sec="1044162122" usec="0"/>
    <to sec="1044162618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.0.236.113"/>
    </slice>
    <from sec="1044162212" usec="0"/>
    <to sec="1044163444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_609{
style=filled;
color=gray75;
254[label="220.111.129.114s;42pkt 42fpkt", shape=rectangle, color=red];
3975[label="220.111.129.114;161pkt 161fpkt", shape=pentagon, color=darkviolet];
stat609[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.111.129.114:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
254--3975[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="220.111.129.114" src_port="1026"/>
    </slice>
    <from sec="1044163172" usec="0"/>
    <to sec="1044163211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.159.114"/>
    </slice>
    <from sec="1044162325" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.226.226.114"/>
    </slice>
    <from sec="1044163202" usec="0"/>
    <to sec="1044163401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
257[label="219.66.53.115s;165pkt 165fpkt", shape=rectangle, color=red];
3979[label="219.66.53.115;197pkt 197fpkt", shape=pentagon, color=darkviolet];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.66.53.115:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
257--3979[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.66.53.115" src_port="1031"/>
    </slice>
    <from sec="1044162367" usec="0"/>
    <to sec="1044162406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.171.213.116"/>
    </slice>
    <from sec="1044162840" usec="0"/>
    <to sec="1044162867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.35.130.117"/>
    </slice>
    <from sec="1044162005" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.232.200.119"/>
    </slice>
    <from sec="1044162057" usec="0"/>
    <to sec="1044163525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.159.120"/>
    </slice>
    <from sec="1044162151" usec="0"/>
    <to sec="1044163171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.40.187.124"/>
    </slice>
    <from sec="1044162016" usec="0"/>
    <to sec="1044163519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.29.33.127"/>
    </slice>
    <from sec="1044163509" usec="0"/>
    <to sec="1044163519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.226.132.128"/>
    </slice>
    <from sec="1044162029" usec="0"/>
    <to sec="1044163492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.90.49.129"/>
    </slice>
    <from sec="1044163223" usec="0"/>
    <to sec="1044163235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.103.71.129"/>
    </slice>
    <from sec="1044162588" usec="0"/>
    <to sec="1044163521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.104.68.130"/>
    </slice>
    <from sec="1044162011" usec="0"/>
    <to sec="1044163512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.0.202.131"/>
    </slice>
    <from sec="1044162054" usec="0"/>
    <to sec="1044163436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.0.206.131"/>
    </slice>
    <from sec="1044162003" usec="0"/>
    <to sec="1044162211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_625{
style=filled;
color=gray75;
1166[label="212.144.96.115;d;875pkt 875fpkt", shape=diamond, color=yellow];
1588[label="209.116.170.136;d;14pkt 14fpkt", shape=diamond, color=yellow];
1686[label="148.94.164.98;s;14pkt 14fpkt", shape=diamond, color=yellow];
1856[label="148.94.122.132;s;36pkt 36fpkt", shape=diamond, color=yellow];
1891[label="148.94.106.95;s;2pkt 2fpkt", shape=diamond, color=yellow];
1892[label="208.108.52.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
2700[label="209.116.170.136;d;14pkt 14fpkt", shape=hexagon, color=black];
2836[label="208.108.52.165;d;1pkt 1fpkt", shape=hexagon, color=black];
3085[label="148.94.106.95;s;2pkt 2fpkt", shape=hexagon, color=black];
3874[label="148.94.106.95;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4058[label="148.94.122.132;35pkt 35fpkt", shape=pentagon, color=darkviolet];
stat625[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 212.144.96.115:0}[92.9806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (87.0352%)&lt;BR/&gt; 80: (3.16583%)&lt;BR/&gt; 37564: (1.50754%)&lt;BR/&gt; 1025: (0.502513%)&lt;BR/&gt; 38293: (0.351759%)&gt;];
}
1166--1289[label="0.00429185;1pkt 1fpkt"];
1166--1573[label="0.111111;1pkt 1fpkt"];
1166--1686[label="0.0714286;1pkt 1fpkt"];
1166--1856[label="0.0277778;1pkt 1fpkt"];
1166--1891[label="0.5;1pkt 1fpkt"];
1166--1902[label="0.00355872;1pkt 1fpkt"];
1166--2774[label="0.00436681;1pkt 1fpkt"];
1166--3047[label="0.00434783;1pkt 1fpkt"];
1166--3085[label="0.5;1pkt 1fpkt"];
1166--3715[label="0.03125;1pkt 1fpkt"];
1166--3925[label="0.00429185;1pkt 1fpkt"];
1166--4025[label="0.00338983;1pkt 1fpkt"];
1166--4058[label="0.0285714;1pkt 1fpkt"];
1166--4527[label="0.0666667;1pkt 1fpkt"];
1166--4971[label="0.00429185;1pkt 1fpkt"];
1166--5434[label="0.00431034;1pkt 1fpkt"];
1588--1686[label="0.857143;12pkt 12fpkt"];
1588--2700[label="1;14pkt 14fpkt"];
1686--2602[label="0.0714286;1pkt 1fpkt"];
1686--2700[label="0.857143;12pkt 12fpkt"];
1856--4058[label="1;35pkt 35fpkt"];
1891--1892[label="1;1pkt 1fpkt"];
1891--2836[label="1;1pkt 1fpkt"];
1891--3085[label="1;2pkt 2fpkt"];
1891--3874[label="1;1pkt 1fpkt"];
1892--2836[label="1;1pkt 1fpkt"];
1892--3085[label="1;1pkt 1fpkt"];
1892--3874[label="1;1pkt 1fpkt"];
2836--3085[label="1;1pkt 1fpkt"];
2836--3874[label="1;1pkt 1fpkt"];
3085--3874[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.144.96.115"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_626{
style=filled;
color=gray75;
278[label="206.54.198.132s;144pkt 144fpkt", shape=rectangle, color=red];
4061[label="206.54.198.132;151pkt 151fpkt", shape=pentagon, color=darkviolet];
stat626[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.54.198.132:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
278--706[label="0.0902778;13pkt 13fpkt"];
278--4061[label="1;144pkt 144fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="206.54.198.132" src_port="1027"/>
    </slice>
    <from sec="1044162917" usec="0"/>
    <to sec="1044162940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_627{
style=filled;
color=gray75;
50[label="217.204.38.136s;2pkt 2fpkt", shape=rectangle, color=red];
4080[label="217.204.38.136;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat627[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.204.38.136:80, 130.138.28.102:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45831: (9.09091%)&lt;BR/&gt; 45820: (9.09091%)&lt;BR/&gt; 45871: (4.54545%)&lt;BR/&gt; 45868: (4.54545%)&gt;];
}
50--4080[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.28.102" src_ip="217.204.38.136" src_port="80"/>
    </slice>
    <from sec="1044162988" usec="0"/>
    <to sec="1044163337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.168.215.136"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044162022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_629{
style=filled;
color=gray75;
283[label="190.242.5.137s;117pkt 117fpkt", shape=rectangle, color=red];
4087[label="190.242.5.137;169pkt 169fpkt", shape=pentagon, color=darkviolet];
stat629[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.242.5.137:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
283--4087[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.242.5.137" src_port="1026"/>
    </slice>
    <from sec="1044162814" usec="0"/>
    <to sec="1044162831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.655737,1.94144,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_630{
style=filled;
color=gray75;
2252[label="130.139.233.137;s;9pkt 9fpkt", shape=diamond, color=yellow];
4094[label="130.139.233.137;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat630[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.233.137:80, 206.83.120.161:*}[55.5556%]&lt;BR/&gt;{130.139.233.137:80, 193.130.178.21:*}[22.2222%]&lt;BR/&gt;{130.139.233.137:80, 188.80.148.51:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64934: (5.88235%)&lt;BR/&gt; 64758: (5.88235%)&lt;BR/&gt; 64645: (5.88235%)&lt;BR/&gt; 64591: (5.88235%)&gt;];
}
2252--4094[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="206.83.120.161" src_ip="130.139.233.137" src_port="80"/>
      <filter dst_ip="188.80.148.51" src_ip="130.139.233.137" src_port="80"/>
      <filter dst_ip="193.130.178.21" src_ip="130.139.233.137" src_port="80"/>
    </slice>
    <from sec="1044163144" usec="0"/>
    <to sec="1044163344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696077,1.90116,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
290[label="219.136.109.140s;44pkt 44fpkt", shape=rectangle, color=red];
4107[label="219.136.109.140;282pkt 282fpkt", shape=pentagon, color=darkviolet];
5064[label="219.136.109.140;281pkt 281fpkt", shape=invtriangle, color=brown];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.136.109.140:65029, *:137}[94.6809%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (49.6705%)&lt;BR/&gt; 65029: (47.5288%)&lt;BR/&gt; 64657: (1.64745%)&lt;BR/&gt; 65028: (0.494234%)&lt;BR/&gt; 139: (0.329489%)&gt;];
}
290--4107[label="1;44pkt 44fpkt"];
290--5064[label="1;44pkt 44fpkt"];
4107--5064[label="1;281pkt 281fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.136.109.140" src_port="65029"/>
    </slice>
    <from sec="1044162249" usec="0"/>
    <to sec="1044162331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_632{
style=filled;
color=gray75;
53[label="190.67.111.141s;214pkt 214fpkt", shape=rectangle, color=red];
4112[label="190.67.111.141;214pkt 214fpkt", shape=pentagon, color=darkviolet];
stat632[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.67.111.141:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
53--4112[label="1;214pkt 214fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.67.111.141" src_port="1027"/>
    </slice>
    <from sec="1044162891" usec="0"/>
    <to sec="1044162928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_633{
style=filled;
color=gray75;
4118[label="207.40.10.142;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat633[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.40.10.142:*, 217.123.95.37:80}[41.1765%]&lt;BR/&gt;{207.40.10.142:*, 189.164.29.148:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0588%)&lt;BR/&gt; 10001: (2.94118%)&lt;BR/&gt; 1713: (2.94118%)&lt;BR/&gt; 1709: (2.94118%)&lt;BR/&gt; 1702: (2.94118%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="217.123.95.37" dst_port="80" src_ip="207.40.10.142"/>
      <filter dst_ip="189.164.29.148" dst_port="80" src_ip="207.40.10.142"/>
    </slice>
    <from sec="1044162225" usec="0"/>
    <to sec="1044163105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.83.66.143"/>
    </slice>
    <from sec="1044163503" usec="0"/>
    <to sec="1044163522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.139.80.145"/>
    </slice>
    <from sec="1044162142" usec="0"/>
    <to sec="1044163443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.246.162.145"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_637{
style=filled;
color=gray75;
302[label="208.1.207.145s;147pkt 147fpkt", shape=rectangle, color=red];
4134[label="208.1.207.145;212pkt 212fpkt", shape=pentagon, color=darkviolet];
stat637[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.1.207.145:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
302--4134[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.1.207.145" src_port="1027"/>
    </slice>
    <from sec="1044162719" usec="0"/>
    <to sec="1044162753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.655737,1.94144,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_638{
style=filled;
color=gray75;
1915[label="148.94.2.146;s;35pkt 35fpkt", shape=diamond, color=yellow];
4136[label="148.94.2.146;34pkt 34fpkt", shape=pentagon, color=darkviolet];
stat638[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.94.2.146:*, 190.114.155.67:80}[77.1429%]&lt;BR/&gt;{148.94.2.146:*, 190.77.87.152:80}[22.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1368: (1.44928%)&lt;BR/&gt; 1364: (1.44928%)&lt;BR/&gt; 1360: (1.44928%)&lt;BR/&gt; 1357: (1.44928%)&gt;];
}
1915--4136[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="190.114.155.67" dst_port="80" src_ip="148.94.2.146"/>
      <filter dst_ip="190.77.87.152" dst_port="80" src_ip="148.94.2.146"/>
    </slice>
    <from sec="1044162012" usec="0"/>
    <to sec="1044162930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
303[label="219.38.5.146s;193pkt 193fpkt", shape=rectangle, color=red];
4137[label="219.38.5.146;193pkt 193fpkt", shape=pentagon, color=darkviolet];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.38.5.146:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
303--4137[label="1;193pkt 193fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.38.5.146" src_port="1026"/>
    </slice>
    <from sec="1044162272" usec="0"/>
    <to sec="1044162313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.226.132.146"/>
    </slice>
    <from sec="1044162979" usec="0"/>
    <to sec="1044163036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.880025,1.93301,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
997[label="189.2.168.148;s;496pkt 496fpkt", shape=diamond, color=yellow];
2047[label="207.35.37.230;d;131pkt 131fpkt", shape=diamond, color=yellow];
2988[label="207.35.37.230;d;116pkt 116fpkt", shape=hexagon, color=black];
4156[label="189.2.168.148;495pkt 495fpkt", shape=pentagon, color=darkviolet];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{189.2.168.148:*, *:27374}[40.0641%]&lt;BR/&gt;{189.2.168.148:*, *:12345}[39.4231%]&lt;BR/&gt;{*:*, 207.35.37.230:*}[20.9936%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27374: (20.3554%)&lt;BR/&gt; 12345: (19.9111%)&lt;BR/&gt; 25: (9.32956%)&lt;BR/&gt; 53: (0.565428%)&lt;BR/&gt; 62787: (0.161551%)&gt;];
}
997--2047[label="0.0229008;3pkt 3fpkt"];
997--2988[label="0.0258621;3pkt 3fpkt"];
997--4156[label="1;495pkt 495fpkt"];
2047--2988[label="1;116pkt 116fpkt"];
2047--4156[label="0.0229008;3pkt 3fpkt"];
2988--4156[label="0.0258621;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="207.35.37.230"/>
      <filter dst_port="27374" src_ip="189.2.168.148"/>
      <filter dst_port="12345" src_ip="189.2.168.148"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.10.212.148"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
312[label="190.96.87.149s;163pkt 163fpkt", shape=rectangle, color=red];
4164[label="190.96.87.149;163pkt 163fpkt", shape=pentagon, color=darkviolet];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.96.87.149:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
312--4164[label="1;163pkt 163fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.96.87.149" src_port="1027"/>
    </slice>
    <from sec="1044162283" usec="0"/>
    <to sec="1044162310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_644{
style=filled;
color=gray75;
313[label="220.13.228.149s;80pkt 80fpkt", shape=rectangle, color=red];
4167[label="220.13.228.149;211pkt 211fpkt", shape=pentagon, color=darkviolet];
stat644[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.13.228.149:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
313--4167[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="220.13.228.149" src_port="1025"/>
    </slice>
    <from sec="1044163201" usec="0"/>
    <to sec="1044163234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
315[label="193.228.3.151s;192pkt 192fpkt", shape=rectangle, color=red];
4171[label="193.228.3.151;253pkt 253fpkt", shape=pentagon, color=darkviolet];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.228.3.151:1032, *:137}[93.2806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1032: (48.0899%)&lt;BR/&gt; 1029: (1.91011%)&gt;];
}
315--4171[label="1;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.228.3.151" src_port="1032"/>
    </slice>
    <from sec="1044162810" usec="0"/>
    <to sec="1044162852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.23.76.151"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.211.6.152"/>
    </slice>
    <from sec="1044163459" usec="0"/>
    <to sec="1044163491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.145.224.154"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.225.85.155"/>
    </slice>
    <from sec="1044162005" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.6.45.156"/>
    </slice>
    <from sec="1044162027" usec="0"/>
    <to sec="1044163379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.152.156"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.134.153.156"/>
    </slice>
    <from sec="1044162981" usec="0"/>
    <to sec="1044163217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.159.245.158"/>
    </slice>
    <from sec="1044162004" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.44.26.159"/>
    </slice>
    <from sec="1044163324" usec="0"/>
    <to sec="1044163340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_655{
style=filled;
color=gray75;
1108[label="130.139.4.160;s;421pkt 421fpkt", shape=diamond, color=yellow];
2768[label="130.139.4.160;s;222pkt 222fpkt", shape=hexagon, color=black];
4218[label="130.139.4.160;421pkt 421fpkt", shape=pentagon, color=darkviolet];
5118[label="130.139.4.160;421pkt 421fpkt", shape=invtriangle, color=brown];
stat655[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.4.160:*, *:80}[99.0499%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4613%)&lt;BR/&gt; 81: (0.40404%)&lt;BR/&gt; 1849: (0.23569%)&lt;BR/&gt; 2205: (0.20202%)&lt;BR/&gt; 1856: (0.13468%)&gt;];
}
1108--2768[label="1;222pkt 222fpkt"];
1108--3232[label="0.0475059;20pkt 20fpkt"];
1108--3235[label="0.0308789;13pkt 13fpkt"];
1108--3238[label="0.0213777;9pkt 9fpkt"];
1108--3243[label="0.00712589;3pkt 3fpkt"];
1108--3249[label="0.0475059;20pkt 20fpkt"];
1108--3252[label="0.0475059;20pkt 20fpkt"];
1108--4218[label="1;421pkt 421fpkt"];
1108--5118[label="1;421pkt 421fpkt"];
2768--3232[label="0.0900901;20pkt 20fpkt"];
2768--3235[label="0.0585586;13pkt 13fpkt"];
2768--3238[label="0.0405405;9pkt 9fpkt"];
2768--3249[label="0.0900901;20pkt 20fpkt"];
2768--3252[label="0.0900901;20pkt 20fpkt"];
2768--4218[label="1;222pkt 222fpkt"];
2768--5118[label="1;222pkt 222fpkt"];
4218--5118[label="1;421pkt 421fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="130.139.4.160"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.81.146.161"/>
    </slice>
    <from sec="1044162209" usec="0"/>
    <to sec="1044162229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.216.104.163"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.217.150.163"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_659{
style=filled;
color=gray75;
336[label="213.14.90.164s;173pkt 173fpkt", shape=rectangle, color=red];
4243[label="213.14.90.164;182pkt 182fpkt", shape=pentagon, color=darkviolet];
stat659[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.14.90.164:2787, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2787: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
336--4243[label="0.99422;172pkt 172fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.14.90.164" src_port="2787"/>
    </slice>
    <from sec="1044162655" usec="0"/>
    <to sec="1044162683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.0.202.164"/>
    </slice>
    <from sec="1044162120" usec="0"/>
    <to sec="1044163200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.192.226.164"/>
    </slice>
    <from sec="1044162049" usec="0"/>
    <to sec="1044163222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_662{
style=filled;
color=gray75;
2010[label="130.138.38.240;d;184pkt 184fpkt", shape=diamond, color=yellow];
2913[label="130.138.38.240;d;159pkt 159fpkt", shape=hexagon, color=black];
3604[label="208.241.4.46;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3621[label="209.198.43.50;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4248[label="207.186.82.165;96pkt 96fpkt", shape=pentagon, color=darkviolet];
5134[label="207.186.82.165;97pkt 97fpkt", shape=invtriangle, color=brown];
5501[label="207.186.82.165;97pkt 97fpkt", shape=invhouse, color=bisque];
stat662[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.186.82.165:80, 130.138.38.240:*}[51.3228%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.367%)&lt;BR/&gt; 0: (1.08865%)&lt;BR/&gt; 32773: (1.01089%)&lt;BR/&gt; 53: (1.01089%)&lt;BR/&gt; 43034: (0.388802%)&gt;];
}
2010--2170[label="0.0136986;1pkt 1fpkt"];
2010--2913[label="1;159pkt 159fpkt"];
2010--3604[label="0.5;4pkt 4fpkt"];
2010--3621[label="0.5;1pkt 1fpkt"];
2010--4248[label="1;96pkt 96fpkt"];
2010--4639[label="0.028169;2pkt 2fpkt"];
2010--5134[label="1;97pkt 97fpkt"];
2010--5501[label="1;97pkt 97fpkt"];
2913--3604[label="0.25;2pkt 2fpkt"];
2913--4248[label="1;96pkt 96fpkt"];
2913--4639[label="0.028169;2pkt 2fpkt"];
2913--5134[label="1;97pkt 97fpkt"];
2913--5501[label="1;97pkt 97fpkt"];
4248--5134[label="1;96pkt 96fpkt"];
4248--5501[label="1;96pkt 96fpkt"];
5134--5501[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.38.240" src_ip="207.186.82.165" src_port="80"/>
    </slice>
    <from sec="1044162803" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.0.33.166"/>
    </slice>
    <from sec="1044162192" usec="0"/>
    <to sec="1044163503" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.22.55.166"/>
    </slice>
    <from sec="1044162006" usec="0"/>
    <to sec="1044163521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="189.5.156.167"/>
    </slice>
    <from sec="1044162806" usec="0"/>
    <to sec="1044162825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.122.2.168"/>
    </slice>
    <from sec="1044162725" usec="0"/>
    <to sec="1044162763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.129.82.169"/>
    </slice>
    <from sec="1044162068" usec="0"/>
    <to sec="1044163226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.76.34.170"/>
    </slice>
    <from sec="1044162579" usec="0"/>
    <to sec="1044162611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_669{
style=filled;
color=gray75;
348[label="190.71.149.171s;149pkt 149fpkt", shape=rectangle, color=red];
4284[label="190.71.149.171;189pkt 189fpkt", shape=pentagon, color=darkviolet];
stat669[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.71.149.171:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
348--4284[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.71.149.171" src_port="1026"/>
    </slice>
    <from sec="1044162846" usec="0"/>
    <to sec="1044162877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.0.206.171"/>
    </slice>
    <from sec="1044162003" usec="0"/>
    <to sec="1044163526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_671{
style=filled;
color=gray75;
474[label="204.233.16.172s;45pkt 45fpkt", shape=rectangle, color=red];
4286[label="204.233.16.172;135pkt 135fpkt", shape=pentagon, color=darkviolet];
stat671[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.233.16.172:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 10012: (0.555556%)&lt;BR/&gt; 9988: (0.555556%)&lt;BR/&gt; 9940: (0.555556%)&lt;BR/&gt; 9886: (0.555556%)&gt;];
}
474--4286[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="204.233.16.172"/>
    </slice>
    <from sec="1044163245" usec="0"/>
    <to sec="1044163266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.171.222.173"/>
    </slice>
    <from sec="1044162801" usec="0"/>
    <to sec="1044163414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696077,1.90116,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_673{
style=filled;
color=gray75;
354[label="190.67.168.174s;120pkt 120fpkt", shape=rectangle, color=red];
4301[label="190.67.168.174;120pkt 120fpkt", shape=pentagon, color=darkviolet];
5161[label="190.67.168.174;120pkt 120fpkt", shape=invtriangle, color=brown];
stat673[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.67.168.174:1152, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1152: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
354--4301[label="1;120pkt 120fpkt"];
354--5161[label="1;120pkt 120fpkt"];
4301--5161[label="1;120pkt 120fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.67.168.174" src_port="1152"/>
    </slice>
    <from sec="1044163195" usec="0"/>
    <to sec="1044163218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.94.227.174"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.212.31.175"/>
    </slice>
    <from sec="1044162885" usec="0"/>
    <to sec="1044162962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.950695,1.9018,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_676{
style=filled;
color=gray75;
282[label="133.168.173.136s;1pkt 1fpkt", shape=rectangle, color=red];
943[label="133.168.173.136;s;253pkt 253fpkt", shape=diamond, color=yellow];
1179[label="204.145.195.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
2031[label="133.168.160.175;s;127pkt 127fpkt", shape=diamond, color=yellow];
2156[label="217.171.4.58;d;4pkt 4fpkt", shape=diamond, color=yellow];
2205[label="164.73.230.35;d;4pkt 4fpkt", shape=diamond, color=yellow];
2347[label="133.168.173.136;s;228pkt 228fpkt", shape=hexagon, color=black];
3071[label="217.171.4.58;d;4pkt 4fpkt", shape=hexagon, color=black];
3072[label="164.73.230.35;d;4pkt 4fpkt", shape=hexagon, color=black];
4305[label="133.168.160.175;134pkt 134fpkt", shape=pentagon, color=darkviolet];
stat676[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.173.136:80, *:*}[65.2062%]&lt;BR/&gt;{133.168.160.175:80, *:*}[34.2784%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8684%)&lt;BR/&gt; 3638: (0.394737%)&lt;BR/&gt; 1277: (0.394737%)&lt;BR/&gt; 10040: (0.263158%)&lt;BR/&gt; 3640: (0.263158%)&gt;];
}
282--943[label="1;1pkt 1fpkt"];
282--1179[label="1;1pkt 1fpkt"];
282--2347[label="1;1pkt 1fpkt"];
943--1179[label="1;1pkt 1fpkt"];
943--2156[label="0.5;2pkt 2fpkt"];
943--2205[label="0.5;2pkt 2fpkt"];
943--2347[label="1;228pkt 228fpkt"];
943--3071[label="0.5;2pkt 2fpkt"];
943--3072[label="0.5;2pkt 2fpkt"];
1179--2347[label="1;1pkt 1fpkt"];
2031--2156[label="0.5;2pkt 2fpkt"];
2031--2205[label="0.25;1pkt 1fpkt"];
2031--3071[label="0.5;2pkt 2fpkt"];
2031--3072[label="0.25;1pkt 1fpkt"];
2031--4305[label="1;127pkt 127fpkt"];
2156--2347[label="0.5;2pkt 2fpkt"];
2156--3071[label="1;4pkt 4fpkt"];
2156--4305[label="0.5;2pkt 2fpkt"];
2205--2347[label="0.5;2pkt 2fpkt"];
2205--3072[label="1;4pkt 4fpkt"];
2205--4305[label="0.25;1pkt 1fpkt"];
2347--3071[label="0.5;2pkt 2fpkt"];
2347--3072[label="0.5;2pkt 2fpkt"];
3071--4305[label="0.5;2pkt 2fpkt"];
3072--4305[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="133.168.173.136" src_port="80"/>
      <filter src_ip="133.168.160.175" src_port="80"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.6.42.176"/>
    </slice>
    <from sec="1044162038" usec="0"/>
    <to sec="1044163524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.131.141.176"/>
    </slice>
    <from sec="1044162383" usec="0"/>
    <to sec="1044162451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_679{
style=filled;
color=gray75;
357[label="190.94.157.176s;234pkt 234fpkt", shape=rectangle, color=red];
4313[label="190.94.157.176;247pkt 247fpkt", shape=pentagon, color=darkviolet];
stat679[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.94.157.176:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
357--4313[label="0.995726;233pkt 233fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.94.157.176" src_port="1027"/>
    </slice>
    <from sec="1044162139" usec="0"/>
    <to sec="1044162184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.138.40.178"/>
    </slice>
    <from sec="1044162728" usec="0"/>
    <to sec="1044162841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_681{
style=filled;
color=gray75;
360[label="190.20.66.178s;83pkt 83fpkt", shape=rectangle, color=red];
4318[label="190.20.66.178;126pkt 126fpkt", shape=pentagon, color=darkviolet];
stat681[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.20.66.178:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
360--4318[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.20.66.178" src_port="1027"/>
    </slice>
    <from sec="1044162781" usec="0"/>
    <to sec="1044162818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_683{
style=filled;
color=gray75;
4331[label="130.139.161.180;60pkt 60fpkt", shape=pentagon, color=darkviolet];
stat683[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.161.180:*, 193.224.173.48:80}[45%]&lt;BR/&gt;{130.139.161.180:*, 193.224.174.114:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49316: (0.833333%)&lt;BR/&gt; 49315: (0.833333%)&lt;BR/&gt; 49314: (0.833333%)&lt;BR/&gt; 49312: (0.833333%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="193.224.173.48" dst_port="80" src_ip="130.139.161.180"/>
      <filter dst_ip="193.224.174.114" dst_port="80" src_ip="130.139.161.180"/>
    </slice>
    <from sec="1044162639" usec="0"/>
    <to sec="1044163456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.96.47.184"/>
    </slice>
    <from sec="1044162002" usec="0"/>
    <to sec="1044163525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.49.76.184"/>
    </slice>
    <from sec="1044163094" usec="0"/>
    <to sec="1044163140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.91.201.185"/>
    </slice>
    <from sec="1044162012" usec="0"/>
    <to sec="1044163528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.94.236.187"/>
    </slice>
    <from sec="1044162076" usec="0"/>
    <to sec="1044163526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.0.202.190"/>
    </slice>
    <from sec="1044162030" usec="0"/>
    <to sec="1044163512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.139.52.192"/>
    </slice>
    <from sec="1044162002" usec="0"/>
    <to sec="1044163515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696077,1.90116,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_690{
style=filled;
color=gray75;
475[label="209.213.80.192s;43pkt 43fpkt", shape=rectangle, color=red];
4379[label="209.213.80.192;218pkt 218fpkt", shape=pentagon, color=darkviolet];
5192[label="209.213.80.192;218pkt 218fpkt", shape=invtriangle, color=brown];
stat690[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.213.80.192:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 53966: (0.313152%)&lt;BR/&gt; 53964: (0.313152%)&lt;BR/&gt; 53962: (0.313152%)&lt;BR/&gt; 53960: (0.313152%)&gt;];
}
475--4379[label="1;43pkt 43fpkt"];
475--5192[label="1;43pkt 43fpkt"];
4379--5192[label="1;218pkt 218fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.213.80.192"/>
    </slice>
    <from sec="1044162233" usec="0"/>
    <to sec="1044162268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.103.194"/>
    </slice>
    <from sec="1044162005" usec="0"/>
    <to sec="1044162368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.655737,1.94144,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
1984[label="148.94.204.195;s;296pkt 296fpkt", shape=diamond, color=yellow];
4393[label="148.94.204.195;328pkt 328fpkt", shape=pentagon, color=darkviolet];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.94.204.195:*, 10.0.1.1:192}[85.061%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 192: (42.1474%)&lt;BR/&gt; 80: (7.85256%)&lt;BR/&gt; 53629: (0.160256%)&lt;BR/&gt; 53628: (0.160256%)&lt;BR/&gt; 53627: (0.160256%)&gt;];
}
1984--3232[label="0.0540541;16pkt 16fpkt"];
1984--3249[label="0.0540541;16pkt 16fpkt"];
1984--3252[label="0.0540541;16pkt 16fpkt"];
1984--4393[label="1;296pkt 296fpkt"];
</description>
    <slice>
      <filter dst_ip="10.0.1.1" dst_port="192" src_ip="148.94.204.195"/>
    </slice>
    <from sec="1044162004" usec="0"/>
    <to sec="1044163526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.25.76.196"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.50.76.198"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.25.76.199"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.217.1.200"/>
    </slice>
    <from sec="1044162858" usec="0"/>
    <to sec="1044162881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.771364,1.91509,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_697{
style=filled;
color=gray75;
1744[label="207.181.20.200;s;370pkt 370fpkt", shape=diamond, color=yellow];
4409[label="207.181.20.200;377pkt 377fpkt", shape=pentagon, color=darkviolet];
5208[label="207.181.20.200;376pkt 376fpkt", shape=invtriangle, color=brown];
stat697[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.181.20.200:53, *:53}[27.5862%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (63.8468%)&lt;BR/&gt; 1024: (2.53785%)&lt;BR/&gt; 32768: (1.02404%)&lt;BR/&gt; 32772: (0.400712%)&lt;BR/&gt; 1025: (0.400712%)&gt;];
}
1744--3231[label="0.0162162;6pkt 6fpkt"];
1744--3242[label="0.0297297;11pkt 11fpkt"];
1744--3248[label="0.0162162;6pkt 6fpkt"];
1744--4409[label="1;370pkt 370fpkt"];
1744--5208[label="0.997297;369pkt 369fpkt"];
4409--5208[label="1;376pkt 376fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="207.181.20.200" src_port="53"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
1996[label="130.139.168.200;s;82pkt 82fpkt", shape=diamond, color=yellow];
2078[label="193.123.75.72;d;20pkt 20fpkt", shape=diamond, color=yellow];
2911[label="193.123.75.72;d;20pkt 20fpkt", shape=hexagon, color=black];
4411[label="130.139.168.200;109pkt 109fpkt", shape=pentagon, color=darkviolet];
5210[label="130.139.168.200;108pkt 108fpkt", shape=invtriangle, color=brown];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.168.200:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40605: (0.737463%)&lt;BR/&gt; 40604: (0.737463%)&lt;BR/&gt; 40602: (0.737463%)&lt;BR/&gt; 40601: (0.737463%)&gt;];
}
1996--2078[label="1;20pkt 20fpkt"];
1996--2845[label="0.0243902;2pkt 2fpkt"];
1996--2911[label="1;20pkt 20fpkt"];
1996--3235[label="0.0487805;4pkt 4fpkt"];
1996--3238[label="0.0243902;2pkt 2fpkt"];
1996--4411[label="1;82pkt 82fpkt"];
1996--5210[label="0.987805;81pkt 81fpkt"];
2078--2911[label="1;20pkt 20fpkt"];
2078--4411[label="1;20pkt 20fpkt"];
2078--5210[label="1;20pkt 20fpkt"];
2911--4411[label="1;20pkt 20fpkt"];
2911--5210[label="1;20pkt 20fpkt"];
4411--5210[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="130.139.168.200"/>
    </slice>
    <from sec="1044162061" usec="0"/>
    <to sec="1044163521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.40.178.200"/>
    </slice>
    <from sec="1044162234" usec="0"/>
    <to sec="1044162364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.11.9.201"/>
    </slice>
    <from sec="1044162109" usec="0"/>
    <to sec="1044162133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.245.47.201"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.238.233.201"/>
    </slice>
    <from sec="1044162282" usec="0"/>
    <to sec="1044162775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.169.218.202"/>
    </slice>
    <from sec="1044162397" usec="0"/>
    <to sec="1044163515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="189.1.25.203"/>
    </slice>
    <from sec="1044163127" usec="0"/>
    <to sec="1044163147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.40.186.203"/>
    </slice>
    <from sec="1044162028" usec="0"/>
    <to sec="1044163523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.94.203.203"/>
    </slice>
    <from sec="1044162179" usec="0"/>
    <to sec="1044163510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.241.220.204"/>
    </slice>
    <from sec="1044163054" usec="0"/>
    <to sec="1044163073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
404[label="195.88.161.205s;86pkt 86fpkt", shape=rectangle, color=red];
4439[label="195.88.161.205;114pkt 114fpkt", shape=pentagon, color=darkviolet];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.88.161.205:12119, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12119: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
404--4439[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.88.161.205" src_port="12119"/>
    </slice>
    <from sec="1044162069" usec="0"/>
    <to sec="1044162087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.168.186.206"/>
    </slice>
    <from sec="1044162016" usec="0"/>
    <to sec="1044163524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.64.95.207"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.200.15.208"/>
    </slice>
    <from sec="1044163437" usec="0"/>
    <to sec="1044163499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.102.166.208"/>
    </slice>
    <from sec="1044162871" usec="0"/>
    <to sec="1044162907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.144.149.209"/>
    </slice>
    <from sec="1044162262" usec="0"/>
    <to sec="1044162619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_715{
style=filled;
color=gray75;
1143[label="207.40.14.45;d;274pkt 274fpkt", shape=diamond, color=yellow];
1434[label="194.236.234.143;s;2pkt 2fpkt", shape=diamond, color=yellow];
1519[label="192.222.29.22;s;6pkt 6fpkt", shape=diamond, color=yellow];
1617[label="217.194.55.210;s;7pkt 7fpkt", shape=diamond, color=yellow];
1796[label="192.222.26.110;s;15pkt 15fpkt", shape=diamond, color=yellow];
1877[label="192.222.26.143;s;2pkt 2fpkt", shape=diamond, color=yellow];
1922[label="194.44.30.198;s;31pkt 31fpkt", shape=diamond, color=yellow];
2515[label="207.40.14.45;d;130pkt 130fpkt", shape=hexagon, color=black];
2528[label="194.236.234.143;s;2pkt 2fpkt", shape=hexagon, color=black];
2782[label="194.44.30.198;s;27pkt 27fpkt", shape=hexagon, color=black];
3300[label="194.5.211.4;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3421[label="194.236.250.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3439[label="192.222.29.22;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3708[label="197.69.49.68;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3753[label="217.194.26.73;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3960[label="192.222.26.110;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4123[label="194.236.234.143;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4467[label="217.194.55.210;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4615[label="197.69.53.245;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4674[label="194.5.211.4;29pkt 29fpkt", shape=invtriangle, color=brown];
4730[label="194.236.250.19;2pkt 2fpkt", shape=invtriangle, color=brown];
4895[label="217.194.26.73;3pkt 3fpkt", shape=invtriangle, color=brown];
5073[label="194.236.234.143;1pkt 1fpkt", shape=invtriangle, color=brown];
5205[label="194.44.30.198;31pkt 31fpkt", shape=invtriangle, color=brown];
5234[label="217.194.55.210;6pkt 6fpkt", shape=invtriangle, color=brown];
5318[label="194.5.211.4;29pkt 29fpkt", shape=invhouse, color=bisque];
5346[label="194.236.250.19;2pkt 2fpkt", shape=invhouse, color=bisque];
stat715[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 207.40.14.45:*}[96.7626%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.435%)&lt;BR/&gt; 2100: (0.423729%)&lt;BR/&gt; 2203: (0.353107%)&lt;BR/&gt; 2178: (0.353107%)&lt;BR/&gt; 2177: (0.353107%)&gt;];
}
1143--1434[label="1;2pkt 2fpkt"];
1143--1519[label="1;6pkt 6fpkt"];
1143--1617[label="1;7pkt 7fpkt"];
1143--1796[label="1;15pkt 15fpkt"];
1143--1877[label="1;2pkt 2fpkt"];
1143--1922[label="0.903226;28pkt 28fpkt"];
1143--2385[label="0.00364964;1pkt 1fpkt"];
1143--2515[label="1;130pkt 130fpkt"];
1143--2528[label="1;2pkt 2fpkt"];
1143--2782[label="0.925926;25pkt 25fpkt"];
1143--3300[label="1;29pkt 29fpkt"];
1143--3421[label="1;1pkt 1fpkt"];
1143--3439[label="1;6pkt 6fpkt"];
1143--3708[label="1;33pkt 33fpkt"];
1143--3753[label="1;4pkt 4fpkt"];
1143--3960[label="1;14pkt 14fpkt"];
1143--4008[label="0.00364964;1pkt 1fpkt"];
1143--4034[label="0.0454545;1pkt 1fpkt"];
1143--4123[label="1;2pkt 2fpkt"];
1143--4467[label="1;6pkt 6fpkt"];
1143--4615[label="1;14pkt 14fpkt"];
1143--4674[label="1;29pkt 29fpkt"];
1143--4730[label="1;2pkt 2fpkt"];
1143--4895[label="1;3pkt 3fpkt"];
1143--5013[label="0.00364964;1pkt 1fpkt"];
1143--5030[label="0.047619;1pkt 1fpkt"];
1143--5073[label="1;1pkt 1fpkt"];
1143--5205[label="0.870968;27pkt 27fpkt"];
1143--5234[label="1;6pkt 6fpkt"];
1143--5318[label="1;29pkt 29fpkt"];
1143--5346[label="1;2pkt 2fpkt"];
1143--5461[label="0.047619;1pkt 1fpkt"];
1434--2515[label="1;2pkt 2fpkt"];
1434--2528[label="1;2pkt 2fpkt"];
1434--4123[label="1;2pkt 2fpkt"];
1434--5073[label="1;1pkt 1fpkt"];
1519--2515[label="1;6pkt 6fpkt"];
1519--3439[label="1;6pkt 6fpkt"];
1617--2515[label="1;7pkt 7fpkt"];
1617--4467[label="1;6pkt 6fpkt"];
1617--5234[label="1;6pkt 6fpkt"];
1796--2515[label="1;15pkt 15fpkt"];
1796--3960[label="1;14pkt 14fpkt"];
1922--2515[label="0.451613;14pkt 14fpkt"];
1922--2517[label="0.0645161;2pkt 2fpkt"];
1922--2782[label="1;27pkt 27fpkt"];
1922--3159[label="0.0645161;2pkt 2fpkt"];
1922--5205[label="0.967742;30pkt 30fpkt"];
2515--2528[label="1;2pkt 2fpkt"];
2515--2782[label="0.518519;14pkt 14fpkt"];
2515--3421[label="1;1pkt 1fpkt"];
2515--3439[label="1;6pkt 6fpkt"];
2515--3708[label="0.69697;23pkt 23fpkt"];
2515--3753[label="1;4pkt 4fpkt"];
2515--3960[label="1;14pkt 14fpkt"];
2515--4008[label="0.00769231;1pkt 1fpkt"];
2515--4123[label="1;2pkt 2fpkt"];
2515--4467[label="1;6pkt 6fpkt"];
2515--4730[label="1;2pkt 2fpkt"];
2515--4895[label="1;3pkt 3fpkt"];
2515--5013[label="0.00769231;1pkt 1fpkt"];
2515--5073[label="1;1pkt 1fpkt"];
2515--5205[label="0.419355;13pkt 13fpkt"];
2515--5234[label="1;6pkt 6fpkt"];
2515--5346[label="1;2pkt 2fpkt"];
2528--4123[label="1;2pkt 2fpkt"];
2528--5073[label="1;1pkt 1fpkt"];
2782--3159[label="0.0740741;2pkt 2fpkt"];
2782--5205[label="0.962963;26pkt 26fpkt"];
3300--4674[label="1;29pkt 29fpkt"];
3300--5318[label="1;29pkt 29fpkt"];
3421--4730[label="1;1pkt 1fpkt"];
3421--5346[label="1;1pkt 1fpkt"];
3753--4895[label="1;3pkt 3fpkt"];
4123--5073[label="1;1pkt 1fpkt"];
4467--5234[label="1;6pkt 6fpkt"];
4674--5318[label="1;29pkt 29fpkt"];
4730--5346[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="207.40.14.45" src_port="80"/>
    </slice>
    <from sec="1044162017" usec="0"/>
    <to sec="1044163487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.14.25.211"/>
    </slice>
    <from sec="1044163302" usec="0"/>
    <to sec="1044163431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.65.47.212"/>
    </slice>
    <from sec="1044162010" usec="0"/>
    <to sec="1044163481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_718{
style=filled;
color=gray75;
936[label="193.9.224.243;d;4298pkt 4298fpkt", shape=diamond, color=yellow];
1156[label="133.229.84.88;d;33pkt 33fpkt", shape=diamond, color=yellow];
1157[label="133.168.238.88;s;36pkt 36fpkt", shape=diamond, color=yellow];
1778[label="133.168.241.212;s;819pkt 819fpkt", shape=diamond, color=yellow];
1799[label="133.168.238.161;s;819pkt 819fpkt", shape=diamond, color=yellow];
1800[label="133.168.238.179;s;819pkt 819fpkt", shape=diamond, color=yellow];
1842[label="133.168.6.92;s;968pkt 968fpkt", shape=diamond, color=yellow];
1954[label="133.168.174.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
2011[label="217.1.122.199;d;59pkt 59fpkt", shape=diamond, color=yellow];
2794[label="133.168.6.92;s;156pkt 156fpkt", shape=hexagon, color=black];
3656[label="133.168.6.59;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3845[label="133.168.238.88;40pkt 40fpkt", shape=pentagon, color=darkviolet];
4328[label="133.168.238.179;819pkt 819fpkt", shape=pentagon, color=darkviolet];
4477[label="133.168.241.212;819pkt 819fpkt", shape=pentagon, color=darkviolet];
4846[label="133.168.6.59;12pkt 12fpkt", shape=invtriangle, color=brown];
5238[label="133.168.241.212;818pkt 818fpkt", shape=invtriangle, color=brown];
5551[label="133.168.241.212;818pkt 818fpkt", shape=invhouse, color=bisque];
stat718[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 193.9.224.243:*}[80.2626%]&lt;BR/&gt;{133.168.6.92:*, *:*}[21.5398%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.8359%)&lt;BR/&gt; 0: (3.24343%)&lt;BR/&gt; 57: (1.51595%)&lt;BR/&gt; 3404: (0.0484752%)&lt;BR/&gt; 3389: (0.0484752%)&gt;];
}
936--1157[label="0.0833333;3pkt 3fpkt"];
936--1778[label="1;819pkt 819fpkt"];
936--1799[label="1;819pkt 819fpkt"];
936--1800[label="1;819pkt 819fpkt"];
936--1842[label="0.846074;819pkt 819fpkt"];
936--1954[label="1;1pkt 1fpkt"];
936--2034[label="0.0344828;3pkt 3fpkt"];
936--2794[label="0.576923;90pkt 90fpkt"];
936--3656[label="0.166667;2pkt 2fpkt"];
936--3672[label="0.0348837;3pkt 3fpkt"];
936--3845[label="0.075;3pkt 3fpkt"];
936--3880[label="0.142857;3pkt 3fpkt"];
936--4328[label="1;819pkt 819fpkt"];
936--4477[label="1;819pkt 819fpkt"];
936--4846[label="0.166667;2pkt 2fpkt"];
936--4949[label="0.142857;3pkt 3fpkt"];
936--5238[label="1;818pkt 818fpkt"];
936--5427[label="0.15;3pkt 3fpkt"];
936--5551[label="1;818pkt 818fpkt"];
1156--1157[label="1;33pkt 33fpkt"];
1156--3845[label="1;33pkt 33fpkt"];
1157--3845[label="1;36pkt 36fpkt"];
1778--4477[label="1;819pkt 819fpkt"];
1778--5238[label="1;818pkt 818fpkt"];
1778--5551[label="1;818pkt 818fpkt"];
1800--4328[label="1;819pkt 819fpkt"];
1842--1903[label="0.0787402;10pkt 10fpkt"];
1842--1905[label="0.0569106;7pkt 7fpkt"];
1842--1966[label="0.0673077;7pkt 7fpkt"];
1842--2011[label="1;59pkt 59fpkt"];
1842--2215[label="0.0786517;7pkt 7fpkt"];
1842--2602[label="0.0289855;4pkt 4fpkt"];
1842--2775[label="0.0505051;5pkt 5fpkt"];
1842--2794[label="1;156pkt 156fpkt"];
1842--2845[label="0.0568182;5pkt 5fpkt"];
1842--2973[label="0.0680272;10pkt 10fpkt"];
1842--3087[label="0.0786517;7pkt 7fpkt"];
1842--3235[label="0.0206612;20pkt 20fpkt"];
1842--3238[label="0.00206612;2pkt 2fpkt"];
1842--3243[label="0.00309917;3pkt 3fpkt"];
2011--2794[label="0.254237;15pkt 15fpkt"];
2794--2845[label="0.0454545;4pkt 4fpkt"];
2794--2973[label="0.0408163;6pkt 6fpkt"];
2794--3087[label="0.011236;1pkt 1fpkt"];
2794--3235[label="0.128205;20pkt 20fpkt"];
2794--3238[label="0.0128205;2pkt 2fpkt"];
3656--4846[label="1;12pkt 12fpkt"];
4477--5238[label="1;818pkt 818fpkt"];
4477--5551[label="1;818pkt 818fpkt"];
5238--5551[label="1;818pkt 818fpkt"];
</description>
    <slice>
      <filter src_ip="133.168.6.92"/>
      <filter dst_ip="193.9.224.243" src_port="80"/>
    </slice>
    <from sec="1044162069" usec="0"/>
    <to sec="1044163449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.655737,1.94144,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_719{
style=filled;
color=gray75;
2098[label="165.155.51.214;s;56pkt 56fpkt", shape=diamond, color=yellow];
4482[label="165.155.51.214;56pkt 56fpkt", shape=pentagon, color=darkviolet];
stat719[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.51.214:25, *:*}[82.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.5357%)&lt;BR/&gt; 0: (7.14286%)&lt;BR/&gt; 57091: (0.892857%)&lt;BR/&gt; 56731: (0.892857%)&lt;BR/&gt; 55695: (0.892857%)&gt;];
}
2098--4482[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter src_ip="165.155.51.214" src_port="25"/>
    </slice>
    <from sec="1044162002" usec="0"/>
    <to sec="1044163445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_720{
style=filled;
color=gray75;
4495[label="193.24.214.216;102pkt 102fpkt", shape=pentagon, color=darkviolet];
stat720[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.24.214.216:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_port="137" src_ip="193.24.214.216" src_port="1026"/>
    </slice>
    <from sec="1044162966" usec="0"/>
    <to sec="1044162983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.116.142.217"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.228.245.217"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02936,1.91522,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_723{
style=filled;
color=gray75;
2216[label="133.1.144.218;s;19pkt 19fpkt", shape=diamond, color=yellow];
4504[label="133.1.144.218;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5249[label="133.1.144.218;18pkt 18fpkt", shape=invtriangle, color=brown];
5556[label="133.1.144.218;18pkt 18fpkt", shape=invhouse, color=bisque];
stat723[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.1.144.218:*, 136.23.10.123:3362}[36.8421%]&lt;BR/&gt;{133.1.144.218:*, 196.197.226.103:3291}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3362: (19.1781%)&lt;BR/&gt; 3291: (13.6986%)&lt;BR/&gt; 3126: (5.47945%)&lt;BR/&gt; 1214: (5.47945%)&lt;BR/&gt; 2666: (2.73973%)&gt;];
}
2216--2942[label="0.0526316;1pkt 1fpkt"];
2216--4504[label="1;18pkt 18fpkt"];
2216--5249[label="1;18pkt 18fpkt"];
2216--5556[label="1;18pkt 18fpkt"];
4504--5249[label="1;18pkt 18fpkt"];
4504--5556[label="1;18pkt 18fpkt"];
5249--5556[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="136.23.10.123" dst_port="3362" src_ip="133.1.144.218"/>
      <filter dst_ip="196.197.226.103" dst_port="3291" src_ip="133.1.144.218"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.238.12.222"/>
    </slice>
    <from sec="1044162360" usec="0"/>
    <to sec="1044162837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.43.48.222"/>
    </slice>
    <from sec="1044163427" usec="0"/>
    <to sec="1044163518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.237.65.222"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_727{
style=filled;
color=gray75;
4523[label="206.108.89.222;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat727[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.108.89.222:*, 207.171.222.173:80}[75%]&lt;BR/&gt;{206.108.89.222:*, 207.171.222.160:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3430: (3.125%)&lt;BR/&gt; 3429: (3.125%)&lt;BR/&gt; 3428: (3.125%)&lt;BR/&gt; 3427: (3.125%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="207.171.222.173" dst_port="80" src_ip="206.108.89.222"/>
      <filter dst_ip="207.171.222.160" dst_port="80" src_ip="206.108.89.222"/>
    </slice>
    <from sec="1044162801" usec="0"/>
    <to sec="1044163414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.974221,1.90129,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_728{
style=filled;
color=gray75;
430[label="208.200.90.222s;215pkt 215fpkt", shape=rectangle, color=red];
4524[label="208.200.90.222;223pkt 223fpkt", shape=pentagon, color=darkviolet];
5259[label="208.200.90.222;223pkt 223fpkt", shape=invtriangle, color=brown];
5559[label="208.200.90.222;222pkt 222fpkt", shape=invhouse, color=bisque];
stat728[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.200.90.222:1059, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1059: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
430--4524[label="1;215pkt 215fpkt"];
430--5259[label="1;215pkt 215fpkt"];
430--5559[label="0.995349;214pkt 214fpkt"];
4524--5259[label="1;223pkt 223fpkt"];
4524--5559[label="1;222pkt 222fpkt"];
5259--5559[label="1;222pkt 222fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.200.90.222" src_port="1059"/>
    </slice>
    <from sec="1044162995" usec="0"/>
    <to sec="1044163032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.136.18.223"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_730{
style=filled;
color=gray75;
431[label="221.81.57.224s;103pkt 103fpkt", shape=rectangle, color=red];
4530[label="221.81.57.224;148pkt 148fpkt", shape=pentagon, color=darkviolet];
stat730[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.81.57.224:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
431--4530[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="221.81.57.224" src_port="1032"/>
    </slice>
    <from sec="1044163319" usec="0"/>
    <to sec="1044163359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.25.76.225"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.0.209.225"/>
    </slice>
    <from sec="1044162423" usec="0"/>
    <to sec="1044163460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23831,1.87503,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_733{
style=filled;
color=gray75;
375[label="219.86.10.188s;1pkt 1fpkt", shape=rectangle, color=red];
987[label="133.1.147.31;d;213pkt 213fpkt", shape=diamond, color=yellow];
1037[label="194.112.168.29;s;3pkt 3fpkt", shape=diamond, color=yellow];
1569[label="196.202.115.142;s;4pkt 4fpkt", shape=diamond, color=yellow];
2064[label="136.21.138.188;s;2pkt 2fpkt", shape=diamond, color=yellow];
2327[label="145.195.5.227;s;1pkt 1fpkt", shape=diamond, color=yellow];
2442[label="194.112.168.29;s;3pkt 3fpkt", shape=hexagon, color=black];
3488[label="136.187.68.30;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4545[label="145.195.5.227;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5268[label="145.195.5.227;2pkt 2fpkt", shape=invtriangle, color=brown];
5527[label="136.21.138.188;2pkt 2fpkt", shape=invhouse, color=bisque];
5564[label="145.195.5.227;1pkt 1fpkt", shape=invhouse, color=bisque];
stat733[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1214, 133.1.147.31:*}[58.4112%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (29.8319%)&lt;BR/&gt; 3027: (3.78151%)&lt;BR/&gt; 1208: (2.52101%)&lt;BR/&gt; 2498: (2.31092%)&lt;BR/&gt; 3952: (2.10084%)&gt;];
}
375--987[label="1;1pkt 1fpkt"];
375--2064[label="1;1pkt 1fpkt"];
375--5527[label="1;1pkt 1fpkt"];
987--1037[label="1;3pkt 3fpkt"];
987--1569[label="1;4pkt 4fpkt"];
987--2064[label="1;2pkt 2fpkt"];
987--2327[label="1;1pkt 1fpkt"];
987--2442[label="1;3pkt 3fpkt"];
987--3488[label="0.8;4pkt 4fpkt"];
987--4545[label="1;1pkt 1fpkt"];
987--5268[label="1;2pkt 2fpkt"];
987--5527[label="1;2pkt 2fpkt"];
987--5564[label="1;1pkt 1fpkt"];
1037--2442[label="1;3pkt 3fpkt"];
2064--5527[label="0.5;1pkt 1fpkt"];
2327--4545[label="1;1pkt 1fpkt"];
2327--5268[label="1;1pkt 1fpkt"];
2327--5564[label="1;1pkt 1fpkt"];
4545--5268[label="1;1pkt 1fpkt"];
4545--5564[label="1;1pkt 1fpkt"];
5268--5564[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.1.147.31" src_port="1214"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.178.18.227"/>
    </slice>
    <from sec="1044162006" usec="0"/>
    <to sec="1044163525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.43.148.229"/>
    </slice>
    <from sec="1044162561" usec="0"/>
    <to sec="1044162614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_736{
style=filled;
color=gray75;
433[label="189.0.50.230s;185pkt 185fpkt", shape=rectangle, color=red];
4562[label="189.0.50.230;155pkt 155fpkt", shape=pentagon, color=darkviolet];
stat736[shape=component, label=&lt;Rules:&lt;BR/&gt;{189.0.50.230:61958, *:137}[64.8536%]&lt;BR/&gt;{208.96.202.46:62006, *:137}[35.1464%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 61958: (37.6471%)&lt;BR/&gt; 62006: (12.3529%)&gt;];
}
433--4562[label="0.651613;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="189.0.50.230" src_port="61958"/>
      <filter dst_port="137" src_ip="208.96.202.46" src_port="62006"/>
    </slice>
    <from sec="1044162397" usec="0"/>
    <to sec="1044162422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.50.104.231"/>
    </slice>
    <from sec="1044162415" usec="0"/>
    <to sec="1044162441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.61.202.231"/>
    </slice>
    <from sec="1044162600" usec="0"/>
    <to sec="1044163337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.82.40.232"/>
    </slice>
    <from sec="1044162014" usec="0"/>
    <to sec="1044163525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.175.135.232"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.5.234"/>
    </slice>
    <from sec="1044163194" usec="0"/>
    <to sec="1044163268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_742{
style=filled;
color=gray75;
439[label="219.48.183.235s;57pkt 57fpkt", shape=rectangle, color=red];
4585[label="219.48.183.235;276pkt 276fpkt", shape=pentagon, color=darkviolet];
stat742[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.48.183.235:1027, *:137}[74.7292%]&lt;BR/&gt;{219.48.183.235:1028, *:137}[25.2708%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1027: (31.0811%)&lt;BR/&gt; 1028: (18.9189%)&gt;];
}
439--4585[label="0.982456;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.48.183.235" src_port="1027"/>
      <filter dst_port="137" src_ip="219.48.183.235" src_port="1028"/>
    </slice>
    <from sec="1044162800" usec="0"/>
    <to sec="1044163164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.15.148.237"/>
    </slice>
    <from sec="1044163501" usec="0"/>
    <to sec="1044163507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_744{
style=filled;
color=gray75;
442[label="192.130.28.238s;66pkt 66fpkt", shape=rectangle, color=red];
4591[label="192.130.28.238;186pkt 186fpkt", shape=pentagon, color=darkviolet];
stat744[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.130.28.238:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
442--4591[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.130.28.238" src_port="1026"/>
    </slice>
    <from sec="1044163175" usec="0"/>
    <to sec="1044163207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.96.152.242"/>
    </slice>
    <from sec="1044162017" usec="0"/>
    <to sec="1044163340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.202.103.243"/>
    </slice>
    <from sec="1044162239" usec="0"/>
    <to sec="1044162280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.139.117.243"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.42.107.246"/>
    </slice>
    <from sec="1044162409" usec="0"/>
    <to sec="1044162425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.913994,1.98314,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_749{
style=filled;
color=gray75;
1639[label="130.139.108.134;d;25pkt 25fpkt", shape=diamond, color=yellow];
1894[label="220.201.37.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
2684[label="130.139.108.134;d;24pkt 24fpkt", shape=hexagon, color=black];
3086[label="220.201.37.52;s;1pkt 1fpkt", shape=hexagon, color=black];
stat749[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 130.139.108.134:*}[28%]&lt;BR/&gt;{207.42.16.144:110, 130.139.108.134:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (13.7255%)&lt;BR/&gt; 6699: (11.7647%)&lt;BR/&gt; 110: (8.82353%)&lt;BR/&gt; 1024: (7.84314%)&lt;BR/&gt; 53: (7.84314%)&gt;];
}
1639--1894[label="1;1pkt 1fpkt"];
1639--2684[label="1;24pkt 24fpkt"];
1639--3086[label="1;1pkt 1fpkt"];
1639--3280[label="0.04;1pkt 1fpkt"];
1639--3916[label="0.04;1pkt 1fpkt"];
1894--2684[label="1;1pkt 1fpkt"];
1894--3086[label="1;1pkt 1fpkt"];
2684--3086[label="1;1pkt 1fpkt"];
2684--3280[label="0.0416667;1pkt 1fpkt"];
2684--3916[label="0.0416667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.139.108.134" src_port="80"/>
      <filter dst_ip="130.139.108.134" src_ip="207.42.16.144" src_port="110"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.83.176.248"/>
    </slice>
    <from sec="1044163177" usec="0"/>
    <to sec="1044163215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.142.69.254"/>
    </slice>
    <from sec="1044162004" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.66.120.254"/>
    </slice>
    <from sec="1044162679" usec="0"/>
    <to sec="1044162717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.90.4.255"/>
    </slice>
    <from sec="1044162008" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.436043,1.95849,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.60.158.255"/>
    </slice>
    <from sec="1044162175" usec="0"/>
    <to sec="1044162200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565254,1.9277,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_756{
style=filled;
color=gray75;
458[label="213.97.183.255s;73pkt 73fpkt", shape=rectangle, color=red];
4648[label="213.97.183.255;158pkt 158fpkt", shape=pentagon, color=darkviolet];
stat756[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.97.183.255:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
458--4648[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.97.183.255" src_port="1026"/>
    </slice>
    <from sec="1044162955" usec="0"/>
    <to sec="1044162993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_757{
style=filled;
color=gray75;
3254[label="133.1.2.0;76pkt 76fpkt", shape=pentagon, color=darkviolet];
4652[label="133.1.2.0;76pkt 76fpkt", shape=invtriangle, color=brown];
5311[label="133.1.2.0;76pkt 76fpkt", shape=invhouse, color=bisque];
stat757[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.1.2.0:53, *:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (100%)&gt;];
}
3254--4652[label="1;76pkt 76fpkt"];
3254--5311[label="0.986842;75pkt 75fpkt"];
4652--5311[label="0.986842;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="133.1.2.0" src_port="53"/>
    </slice>
    <from sec="1044162105" usec="0"/>
    <to sec="1044163506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_758{
style=filled;
color=gray75;
3260[label="162.0.201.0;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4655[label="162.0.201.0;38pkt 38fpkt", shape=invtriangle, color=brown];
stat758[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.201.0:80, *:*}[68.4211%]&lt;BR/&gt;{162.0.201.0:*, *:25}[28.9474%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.2105%)&lt;BR/&gt; 25: (15.7895%)&lt;BR/&gt; 50521: (1.31579%)&lt;BR/&gt; 40853: (1.31579%)&lt;BR/&gt; 37225: (1.31579%)&gt;];
}
3260--4655[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter src_ip="162.0.201.0" src_port="80"/>
      <filter dst_port="25" src_ip="162.0.201.0"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_759{
style=filled;
color=gray75;
3263[label="130.139.214.0;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4658[label="130.139.214.0;7pkt 7fpkt", shape=invtriangle, color=brown];
stat759[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.214.0:80, 162.21.21.171:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1425: (7.14286%)&lt;BR/&gt; 1424: (7.14286%)&lt;BR/&gt; 1423: (7.14286%)&lt;BR/&gt; 1422: (7.14286%)&gt;];
}
3263--4658[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="162.21.21.171" src_ip="130.139.214.0" src_port="80"/>
    </slice>
    <from sec="1044162561" usec="0"/>
    <to sec="1044162758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_760{
style=filled;
color=gray75;
3269[label="165.155.154.1;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4660[label="165.155.154.1;4pkt 4fpkt", shape=invtriangle, color=brown];
stat760[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.154.1:80, 194.53.201.55:48969}[25%]&lt;BR/&gt;{165.155.154.1:80, 216.2.78.133:2215}[25%]&lt;BR/&gt;{165.155.154.1:80, 206.173.87.223:2202}[25%]&lt;BR/&gt;{165.155.154.1:80, 206.173.87.223:2203}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48969: (12.5%)&lt;BR/&gt; 2215: (12.5%)&lt;BR/&gt; 2203: (12.5%)&lt;BR/&gt; 2202: (12.5%)&gt;];
}
3269--4660[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="206.173.87.223" dst_port="2203" src_ip="165.155.154.1" src_port="80"/>
      <filter dst_ip="206.173.87.223" dst_port="2202" src_ip="165.155.154.1" src_port="80"/>
      <filter dst_ip="216.2.78.133" dst_port="2215" src_ip="165.155.154.1" src_port="80"/>
      <filter dst_ip="194.53.201.55" dst_port="48969" src_ip="165.155.154.1" src_port="80"/>
    </slice>
    <from sec="1044162076" usec="0"/>
    <to sec="1044163188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.161.66.2"/>
    </slice>
    <from sec="1044162206" usec="0"/>
    <to sec="1044162399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
3281[label="206.6.47.3;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4664[label="206.6.47.3;2pkt 2fpkt", shape=invtriangle, color=brown];
5315[label="206.6.47.3;2pkt 2fpkt", shape=invhouse, color=bisque];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.6.47.3:500, 168.249.226.6:500}[50%]&lt;BR/&gt;{206.6.47.3:10000, 168.249.226.6:10000}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10000: (50%)&lt;BR/&gt; 500: (50%)&gt;];
}
3281--4664[label="1;2pkt 2fpkt"];
3281--5315[label="1;2pkt 2fpkt"];
4664--5315[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.249.226.6" dst_port="10000" src_ip="206.6.47.3" src_port="10000"/>
      <filter dst_ip="168.249.226.6" dst_port="500" src_ip="206.6.47.3" src_port="500"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.168.174.4"/>
    </slice>
    <from sec="1044162733" usec="0"/>
    <to sec="1044162746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.236.224.4"/>
    </slice>
    <from sec="1044162279" usec="0"/>
    <to sec="1044162300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_765{
style=filled;
color=gray75;
3310[label="217.105.37.6;139pkt 139fpkt", shape=pentagon, color=darkviolet];
4679[label="217.105.37.6;139pkt 139fpkt", shape=invtriangle, color=brown];
stat765[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.105.37.6:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3310--4679[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.105.37.6" src_port="1029"/>
    </slice>
    <from sec="1044162250" usec="0"/>
    <to sec="1044162272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.20.39.8"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.771364,1.91509,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_767{
style=filled;
color=gray75;
1834[label="207.40.172.8;s;22pkt 22fpkt", shape=diamond, color=yellow];
1956[label="217.135.164.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
3324[label="207.40.172.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4685[label="207.40.172.8;1pkt 1fpkt", shape=invtriangle, color=brown];
stat767[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.40.172.8:*, 128.193.8.88:80}[63.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36%)&lt;BR/&gt; 49281: (6%)&lt;BR/&gt; 15004: (6%)&lt;BR/&gt; 49278: (4%)&lt;BR/&gt; 20150: (4%)&gt;];
}
1834--1956[label="1;1pkt 1fpkt"];
1834--3324[label="1;1pkt 1fpkt"];
1834--4685[label="1;1pkt 1fpkt"];
3324--4685[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.193.8.88" dst_port="80" src_ip="207.40.172.8"/>
    </slice>
    <from sec="1044162106" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.54.100.9"/>
    </slice>
    <from sec="1044163464" usec="0"/>
    <to sec="1044163493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_769{
style=filled;
color=gray75;
3339[label="207.35.32.10;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4693[label="207.35.32.10;16pkt 16fpkt", shape=invtriangle, color=brown];
stat769[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.35.32.10:0, *:0}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.75%)&lt;BR/&gt; 53: (6.25%)&gt;];
}
3339--4693[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="207.35.32.10"/>
    </slice>
    <from sec="1044162028" usec="0"/>
    <to sec="1044163404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_770{
style=filled;
color=gray75;
3344[label="162.0.201.10;39pkt 39fpkt", shape=pentagon, color=darkviolet];
4697[label="162.0.201.10;39pkt 39fpkt", shape=invtriangle, color=brown];
5327[label="162.0.201.10;39pkt 39fpkt", shape=invhouse, color=bisque];
stat770[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.201.10:80, *:*}[74.359%]&lt;BR/&gt;{162.0.201.10:1050, *:53}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.1795%)&lt;BR/&gt; 1050: (11.5385%)&lt;BR/&gt; 53: (11.5385%)&lt;BR/&gt; 60359: (1.28205%)&lt;BR/&gt; 60269: (1.28205%)&gt;];
}
3344--4697[label="1;39pkt 39fpkt"];
3344--5327[label="1;39pkt 39fpkt"];
4697--5327[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter src_ip="162.0.201.10" src_port="80"/>
      <filter dst_port="53" src_ip="162.0.201.10" src_port="1050"/>
    </slice>
    <from sec="1044162161" usec="0"/>
    <to sec="1044163521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_771{
style=filled;
color=gray75;
3358[label="190.60.161.12;177pkt 177fpkt", shape=pentagon, color=darkviolet];
4702[label="190.60.161.12;176pkt 176fpkt", shape=invtriangle, color=brown];
5331[label="190.60.161.12;177pkt 177fpkt", shape=invhouse, color=bisque];
stat771[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.60.161.12:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3358--4702[label="1;176pkt 176fpkt"];
3358--5331[label="1;177pkt 177fpkt"];
4702--5331[label="1;176pkt 176fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.60.161.12" src_port="1030"/>
    </slice>
    <from sec="1044162311" usec="0"/>
    <to sec="1044162351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.62.162.13"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_773{
style=filled;
color=gray75;
3365[label="165.155.198.13;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4706[label="165.155.198.13;24pkt 24fpkt", shape=invtriangle, color=brown];
stat773[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.198.13:*, *:443}[25%]&lt;BR/&gt;{165.155.198.13:*, 203.245.221.42:80}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.4167%)&lt;BR/&gt; 443: (12.5%)&lt;BR/&gt; 4044: (2.08333%)&lt;BR/&gt; 4042: (2.08333%)&lt;BR/&gt; 4040: (2.08333%)&gt;];
}
3365--4706[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="165.155.198.13"/>
      <filter dst_ip="203.245.221.42" dst_port="80" src_ip="165.155.198.13"/>
    </slice>
    <from sec="1044162223" usec="0"/>
    <to sec="1044163368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.136.166.14"/>
    </slice>
    <from sec="1044162291" usec="0"/>
    <to sec="1044162324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_775{
style=filled;
color=gray75;
3383[label="206.234.198.15;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4715[label="206.234.198.15;22pkt 22fpkt", shape=invtriangle, color=brown];
5336[label="206.234.198.15;22pkt 22fpkt", shape=invhouse, color=bisque];
stat775[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.234.198.15:80, 148.94.227.149:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37053: (2.27273%)&lt;BR/&gt; 37052: (2.27273%)&lt;BR/&gt; 37051: (2.27273%)&lt;BR/&gt; 37050: (2.27273%)&gt;];
}
3383--4715[label="1;22pkt 22fpkt"];
3383--5336[label="1;22pkt 22fpkt"];
4715--5336[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.227.149" src_ip="206.234.198.15" src_port="80"/>
    </slice>
    <from sec="1044163488" usec="0"/>
    <to sec="1044163494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_776{
style=filled;
color=gray75;
3387[label="196.198.58.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4717[label="196.198.58.16;1pkt 1fpkt", shape=invtriangle, color=brown];
stat776[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.198.58.16:1214, 148.94.204.240:3312}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3312: (50%)&lt;BR/&gt; 1214: (50%)&gt;];
}
3387--4717[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.204.240" dst_port="3312" src_ip="196.198.58.16" src_port="1214"/>
    </slice>
    <from sec="1044163063" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_777{
style=filled;
color=gray75;
3392[label="165.155.140.16;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4720[label="165.155.140.16;6pkt 6fpkt", shape=invtriangle, color=brown];
stat777[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.140.16:*, 203.145.104.38:80}[50%]&lt;BR/&gt;{165.155.140.16:*, 193.122.158.16:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1274: (9.09091%)&lt;BR/&gt; 1273: (9.09091%)&lt;BR/&gt; 1237: (9.09091%)&lt;BR/&gt; 1161: (9.09091%)&gt;];
}
3392--4720[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="203.145.104.38" dst_port="80" src_ip="165.155.140.16"/>
      <filter dst_ip="193.122.158.16" dst_port="80" src_ip="165.155.140.16"/>
    </slice>
    <from sec="1044162591" usec="0"/>
    <to sec="1044163106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02936,1.91522,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_778{
style=filled;
color=gray75;
1828[label="207.167.243.17;s;60pkt 60fpkt", shape=diamond, color=yellow];
3406[label="207.167.243.17;66pkt 66fpkt", shape=pentagon, color=darkviolet];
4725[label="207.167.243.17;66pkt 66fpkt", shape=invtriangle, color=brown];
5342[label="207.167.243.17;66pkt 66fpkt", shape=invhouse, color=bisque];
stat778[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.167.243.17:*, *:25}[55.2239%]&lt;BR/&gt;{207.167.243.17:80, *:*}[29.8507%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (27.5194%)&lt;BR/&gt; 80: (14.9225%)&lt;BR/&gt; 0: (6.20155%)&lt;BR/&gt; 113: (2.90698%)&lt;BR/&gt; 55676: (0.775194%)&gt;];
}
1828--3406[label="0.983333;59pkt 59fpkt"];
1828--4725[label="0.983333;59pkt 59fpkt"];
1828--5342[label="0.983333;59pkt 59fpkt"];
3406--4725[label="1;66pkt 66fpkt"];
3406--5342[label="1;66pkt 66fpkt"];
4725--5342[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter src_ip="207.167.243.17" src_port="80"/>
      <filter dst_port="25" src_ip="207.167.243.17"/>
    </slice>
    <from sec="1044162012" usec="0"/>
    <to sec="1044163520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_779{
style=filled;
color=gray75;
3420[label="162.0.201.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4729[label="162.0.201.19;1pkt 1fpkt", shape=invtriangle, color=brown];
stat779[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.201.19:1069, 206.201.198.135:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1069: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
3420--4729[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.201.198.135" dst_port="53" src_ip="162.0.201.19" src_port="1069"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_780{
style=filled;
color=gray75;
3436[label="193.130.178.21;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4739[label="193.130.178.21;2pkt 2fpkt", shape=invtriangle, color=brown];
5351[label="193.130.178.21;1pkt 1fpkt", shape=invhouse, color=bisque];
stat780[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.130.178.21:3114, 130.139.233.137:80}[50%]&lt;BR/&gt;{193.130.178.21:3116, 130.139.233.137:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3116: (30%)&lt;BR/&gt; 3114: (20%)&gt;];
}
3436--4739[label="1;2pkt 2fpkt"];
3436--5351[label="1;1pkt 1fpkt"];
4739--5351[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.139.233.137" dst_port="80" src_ip="193.130.178.21" src_port="3116"/>
      <filter dst_ip="130.139.233.137" dst_port="80" src_ip="193.130.178.21" src_port="3114"/>
    </slice>
    <from sec="1044163317" usec="0"/>
    <to sec="1044163344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.44.20.22"/>
    </slice>
    <from sec="1044162022" usec="0"/>
    <to sec="1044162136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_782{
style=filled;
color=gray75;
3443[label="162.0.213.22;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4741[label="162.0.213.22;15pkt 15fpkt", shape=invtriangle, color=brown];
stat782[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.213.22:80, 209.176.239.27:*}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6667%)&lt;BR/&gt; 33656: (3.33333%)&lt;BR/&gt; 33617: (3.33333%)&lt;BR/&gt; 33496: (3.33333%)&lt;BR/&gt; 33469: (3.33333%)&gt;];
}
3443--4741[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="209.176.239.27" src_ip="162.0.213.22" src_port="80"/>
    </slice>
    <from sec="1044162160" usec="0"/>
    <to sec="1044163386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="130.139.173.24"/>
    </slice>
    <from sec="1044162204" usec="0"/>
    <to sec="1044163522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.141.68.25"/>
    </slice>
    <from sec="1044162787" usec="0"/>
    <to sec="1044163139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="130.139.108.25"/>
    </slice>
    <from sec="1044162009" usec="0"/>
    <to sec="1044163522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_786{
style=filled;
color=gray75;
3466[label="195.82.89.26;224pkt 224fpkt", shape=pentagon, color=darkviolet];
4749[label="195.82.89.26;224pkt 224fpkt", shape=invtriangle, color=brown];
5353[label="195.82.89.26;225pkt 225fpkt", shape=invhouse, color=bisque];
stat786[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.82.89.26:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3466--4749[label="1;224pkt 224fpkt"];
3466--5353[label="1;224pkt 224fpkt"];
4749--5353[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.82.89.26" src_port="1027"/>
    </slice>
    <from sec="1044163473" usec="0"/>
    <to sec="1044163508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_787{
style=filled;
color=gray75;
3468[label="208.87.141.26;119pkt 119fpkt", shape=pentagon, color=darkviolet];
4750[label="208.87.141.26;120pkt 120fpkt", shape=invtriangle, color=brown];
stat787[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.87.141.26:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3468--4750[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.87.141.26" src_port="1025"/>
    </slice>
    <from sec="1044162248" usec="0"/>
    <to sec="1044162269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="129.188.159.28"/>
    </slice>
    <from sec="1044162262" usec="0"/>
    <to sec="1044162400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
3491[label="162.0.201.30;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4761[label="162.0.201.30;28pkt 28fpkt", shape=invtriangle, color=brown];
5361[label="162.0.201.30;28pkt 28fpkt", shape=invhouse, color=bisque];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.201.30:80, 209.176.239.27:*}[89.6552%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2353%)&lt;BR/&gt; 34387: (1.76471%)&lt;BR/&gt; 34386: (1.76471%)&lt;BR/&gt; 33948: (1.76471%)&lt;BR/&gt; 33579: (1.76471%)&gt;];
}
3491--4761[label="1;28pkt 28fpkt"];
3491--5361[label="1;28pkt 28fpkt"];
4761--5361[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="209.176.239.27" src_ip="162.0.201.30" src_port="80"/>
    </slice>
    <from sec="1044162346" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_791{
style=filled;
color=gray75;
3502[label="165.155.50.32;106pkt 106fpkt", shape=pentagon, color=darkviolet];
4766[label="165.155.50.32;106pkt 106fpkt", shape=invtriangle, color=brown];
stat791[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.50.32:4105, *:53}[89.6226%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (45.283%)&lt;BR/&gt; 4105: (44.8113%)&lt;BR/&gt; 0: (9.43396%)&lt;BR/&gt; 3493: (0.471698%)&gt;];
}
3502--4766[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="165.155.50.32" src_port="4105"/>
    </slice>
    <from sec="1044162041" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.71.77.32"/>
    </slice>
    <from sec="1044162002" usec="0"/>
    <to sec="1044163519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_793{
style=filled;
color=gray75;
3508[label="219.129.206.32;167pkt 167fpkt", shape=pentagon, color=darkviolet];
4769[label="219.129.206.32;168pkt 168fpkt", shape=invtriangle, color=brown];
stat793[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.129.206.32:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3508--4769[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.129.206.32" src_port="1028"/>
    </slice>
    <from sec="1044162125" usec="0"/>
    <to sec="1044162139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="190.25.76.33"/>
    </slice>
    <from sec="1044163403" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
3513[label="130.139.116.33;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4772[label="130.139.116.33;4pkt 4fpkt", shape=invtriangle, color=brown];
5363[label="130.139.116.33;4pkt 4fpkt", shape=invhouse, color=bisque];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.116.33:0, 10.0.10.16:0}[25%]&lt;BR/&gt;{130.139.116.33:0, 10.0.12.17:0}[25%]&lt;BR/&gt;{130.139.116.33:0, 10.0.13.91:0}[25%]&lt;BR/&gt;{130.139.116.33:0, 10.0.14.176:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3513--4772[label="1;4pkt 4fpkt"];
3513--5363[label="1;4pkt 4fpkt"];
4772--5363[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="10.0.14.176" src_ip="130.139.116.33"/>
      <filter dst_ip="10.0.13.91" src_ip="130.139.116.33"/>
      <filter dst_ip="10.0.12.17" src_ip="130.139.116.33"/>
      <filter dst_ip="10.0.10.16" src_ip="130.139.116.33"/>
    </slice>
    <from sec="1044162010" usec="0"/>
    <to sec="1044163528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_796{
style=filled;
color=gray75;
3520[label="219.140.115.34;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4774[label="219.140.115.34;16pkt 16fpkt", shape=invtriangle, color=brown];
stat796[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.140.115.34:80, 130.139.113.4:*}[62.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60533: (3.125%)&lt;BR/&gt; 60532: (3.125%)&lt;BR/&gt; 60530: (3.125%)&lt;BR/&gt; 2424: (3.125%)&gt;];
}
3520--4774[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="130.139.113.4" src_ip="219.140.115.34" src_port="80"/>
    </slice>
    <from sec="1044162625" usec="0"/>
    <to sec="1044163332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_797{
style=filled;
color=gray75;
3523[label="162.0.218.34;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4776[label="162.0.218.34;2pkt 2fpkt", shape=invtriangle, color=brown];
stat797[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.218.34:2208, 192.42.204.40:5190}[50%]&lt;BR/&gt;{162.0.218.34:2211, 194.103.71.129:20}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (25%)&lt;BR/&gt; 2211: (25%)&lt;BR/&gt; 2208: (25%)&lt;BR/&gt; 20: (25%)&gt;];
}
3523--4776[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.103.71.129" dst_port="20" src_ip="162.0.218.34" src_port="2211"/>
      <filter dst_ip="192.42.204.40" dst_port="5190" src_ip="162.0.218.34" src_port="2208"/>
    </slice>
    <from sec="1044162306" usec="0"/>
    <to sec="1044163522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_798{
style=filled;
color=gray75;
3525[label="210.15.113.35;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4778[label="210.15.113.35;1pkt 1fpkt", shape=invtriangle, color=brown];
5366[label="210.15.113.35;1pkt 1fpkt", shape=invhouse, color=bisque];
stat798[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.15.113.35:80, 162.0.200.212:2370}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2370: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3525--4778[label="1;1pkt 1fpkt"];
3525--5366[label="1;1pkt 1fpkt"];
4778--5366[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.0.200.212" dst_port="2370" src_ip="210.15.113.35" src_port="80"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20047,1.85333,503,1 1 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_799{
style=filled;
color=gray75;
5[label="217.135.165.16s;2pkt 2fpkt", shape=rectangle, color=red];
6[label="217.135.164.18s;2pkt 2fpkt", shape=rectangle, color=red];
520[label="217.135.165.16s;2pkt 2fpkt", shape=ellipse, color=green];
869[label="165.155.186.108;d;50pkt 50fpkt", shape=diamond, color=yellow];
870[label="217.135.164.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
1006[label="217.135.164.18;s;1pkt 1fpkt", shape=diamond, color=yellow];
1007[label="206.6.40.91;d;61pkt 61fpkt", shape=diamond, color=yellow];
2332[label="165.155.186.108;d;35pkt 35fpkt", shape=hexagon, color=black];
2645[label="206.6.40.91;d;30pkt 30fpkt", shape=hexagon, color=black];
3538[label="217.135.165.37;49pkt 49fpkt", shape=pentagon, color=darkviolet];
3702[label="203.96.159.67;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4782[label="217.135.165.37;48pkt 48fpkt", shape=invtriangle, color=brown];
stat799[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.135.165.16:80, 206.6.40.91:*}[25.2101%]&lt;BR/&gt;{217.135.165.37:80, 206.6.40.91:*}[21.0084%]&lt;BR/&gt;{217.135.165.16:80, 165.155.186.108:*}[21.0084%]&lt;BR/&gt;{217.135.165.37:80, 165.155.186.108:*}[20.1681%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0175%)&lt;BR/&gt; 1863: (1.75439%)&lt;BR/&gt; 20646: (0.701754%)&lt;BR/&gt; 4463: (0.701754%)&lt;BR/&gt; 4461: (0.701754%)&gt;];
}
5--520[label="1;2pkt 2fpkt"];
5--1007[label="1;2pkt 2fpkt"];
5--2645[label="1;2pkt 2fpkt"];
6--1006[label="1;1pkt 1fpkt"];
6--1007[label="0.5;1pkt 1fpkt"];
6--2645[label="0.5;1pkt 1fpkt"];
520--1007[label="1;2pkt 2fpkt"];
520--2645[label="1;2pkt 2fpkt"];
869--870[label="1;1pkt 1fpkt"];
869--2332[label="1;35pkt 35fpkt"];
869--3538[label="0.44898;22pkt 22fpkt"];
869--4782[label="0.4375;21pkt 21fpkt"];
870--2332[label="1;1pkt 1fpkt"];
1006--1007[label="1;1pkt 1fpkt"];
1006--2645[label="1;1pkt 1fpkt"];
1007--2056[label="0.0163934;1pkt 1fpkt"];
1007--2645[label="1;30pkt 30fpkt"];
1007--3538[label="0.469388;23pkt 23fpkt"];
1007--3702[label="0.25;1pkt 1fpkt"];
1007--3801[label="0.0163934;1pkt 1fpkt"];
1007--4782[label="0.479167;23pkt 23fpkt"];
2332--3538[label="0.457143;16pkt 16fpkt"];
2332--4782[label="0.428571;15pkt 15fpkt"];
2645--3538[label="0.366667;11pkt 11fpkt"];
2645--4782[label="0.366667;11pkt 11fpkt"];
3538--4782[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="206.6.40.91" src_ip="217.135.165.16" src_port="80"/>
      <filter dst_ip="165.155.186.108" src_ip="217.135.165.16" src_port="80"/>
      <filter dst_ip="206.6.40.91" src_ip="217.135.165.37" src_port="80"/>
      <filter dst_ip="165.155.186.108" src_ip="217.135.165.37" src_port="80"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_800{
style=filled;
color=gray75;
3546[label="207.40.162.38;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4788[label="207.40.162.38;16pkt 16fpkt", shape=invtriangle, color=brown];
5371[label="207.40.162.38;17pkt 17fpkt", shape=invhouse, color=bisque];
stat800[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.40.162.38:*, 211.164.72.66:80}[29.4118%]&lt;BR/&gt;{207.40.162.38:*, 194.54.100.128:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 21488: (3.06122%)&lt;BR/&gt; 1123: (3.06122%)&lt;BR/&gt; 1122: (3.06122%)&lt;BR/&gt; 1121: (3.06122%)&gt;];
}
3546--4788[label="1;16pkt 16fpkt"];
3546--5371[label="1;16pkt 16fpkt"];
4788--5371[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="211.164.72.66" dst_port="80" src_ip="207.40.162.38"/>
      <filter dst_ip="194.54.100.128" dst_port="80" src_ip="207.40.162.38"/>
    </slice>
    <from sec="1044163061" usec="0"/>
    <to sec="1044163523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_802{
style=filled;
color=gray75;
3558[label="161.77.69.40;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4794[label="161.77.69.40;20pkt 20fpkt", shape=invtriangle, color=brown];
stat802[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.77.69.40:*, 162.0.245.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49833: (2.5%)&lt;BR/&gt; 49832: (2.5%)&lt;BR/&gt; 49831: (2.5%)&lt;BR/&gt; 49830: (2.5%)&gt;];
}
3558--4794[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="162.0.245.81" dst_port="80" src_ip="161.77.69.40"/>
    </slice>
    <from sec="1044163204" usec="0"/>
    <to sec="1044163318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_803{
style=filled;
color=gray75;
3564[label="162.0.209.40;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4798[label="162.0.209.40;16pkt 16fpkt", shape=invtriangle, color=brown];
5373[label="162.0.209.40;16pkt 16fpkt", shape=invhouse, color=bisque];
stat803[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.209.40:*, *:5190}[43.75%]&lt;BR/&gt;{162.0.209.40:*, *:5050}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (21.875%)&lt;BR/&gt; 5050: (12.5%)&lt;BR/&gt; 20: (9.375%)&lt;BR/&gt; 0: (6.25%)&lt;BR/&gt; 4889: (3.125%)&gt;];
}
3564--4798[label="1;16pkt 16fpkt"];
3564--5373[label="1;16pkt 16fpkt"];
4798--5373[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_port="5190" src_ip="162.0.209.40"/>
      <filter dst_port="5050" src_ip="162.0.209.40"/>
    </slice>
    <from sec="1044162020" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
3565[label="194.44.1.41;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4799[label="194.44.1.41;4pkt 4fpkt", shape=invtriangle, color=brown];
5374[label="194.44.1.41;3pkt 3fpkt", shape=invhouse, color=bisque];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.44.1.41:80, 165.155.27.17:1908}[25%]&lt;BR/&gt;{194.44.1.41:80, 165.155.27.17:1909}[25%]&lt;BR/&gt;{194.44.1.41:80, 165.155.27.17:1912}[25%]&lt;BR/&gt;{194.44.1.41:80, 165.155.27.17:1913}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1913: (13.6364%)&lt;BR/&gt; 1912: (13.6364%)&lt;BR/&gt; 1909: (13.6364%)&lt;BR/&gt; 1908: (9.09091%)&gt;];
}
3565--4799[label="1;4pkt 4fpkt"];
3565--5374[label="1;3pkt 3fpkt"];
4799--5374[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="165.155.27.17" dst_port="1913" src_ip="194.44.1.41" src_port="80"/>
      <filter dst_ip="165.155.27.17" dst_port="1912" src_ip="194.44.1.41" src_port="80"/>
      <filter dst_ip="165.155.27.17" dst_port="1909" src_ip="194.44.1.41" src_port="80"/>
      <filter dst_ip="165.155.27.17" dst_port="1908" src_ip="194.44.1.41" src_port="80"/>
    </slice>
    <from sec="1044163497" usec="0"/>
    <to sec="1044163526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_805{
style=filled;
color=gray75;
3568[label="190.25.76.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4802[label="190.25.76.41;1pkt 1fpkt", shape=invtriangle, color=brown];
stat805[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.25.76.41:5121, 207.40.162.13:3217}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5121: (50%)&lt;BR/&gt; 3217: (50%)&gt;];
}
3568--4802[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.40.162.13" dst_port="3217" src_ip="190.25.76.41" src_port="5121"/>
    </slice>
    <from sec="1044163297" usec="0"/>
    <to sec="1044163374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
3584[label="192.36.150.43;152pkt 152fpkt", shape=pentagon, color=darkviolet];
4810[label="192.36.150.43;153pkt 153fpkt", shape=invtriangle, color=brown];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.36.150.43:1024, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3584--4810[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.36.150.43" src_port="1024"/>
    </slice>
    <from sec="1044162158" usec="0"/>
    <to sec="1044162195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_808{
style=filled;
color=gray75;
3589[label="148.94.209.43;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4813[label="148.94.209.43;11pkt 11fpkt", shape=invtriangle, color=brown];
5381[label="148.94.209.43;11pkt 11fpkt", shape=invhouse, color=bisque];
stat808[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.94.209.43:*, 193.227.12.139:80}[45.4545%]&lt;BR/&gt;{148.94.209.43:*, 192.222.28.35:80}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1130: (4.54545%)&lt;BR/&gt; 1129: (4.54545%)&lt;BR/&gt; 1127: (4.54545%)&lt;BR/&gt; 1125: (4.54545%)&gt;];
}
3589--4813[label="1;11pkt 11fpkt"];
3589--5381[label="1;11pkt 11fpkt"];
4813--5381[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="193.227.12.139" dst_port="80" src_ip="148.94.209.43"/>
      <filter dst_ip="192.222.28.35" dst_port="80" src_ip="148.94.209.43"/>
    </slice>
    <from sec="1044163236" usec="0"/>
    <to sec="1044163391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.58.196.45"/>
    </slice>
    <from sec="1044162014" usec="0"/>
    <to sec="1044163473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_810{
style=filled;
color=gray75;
3605[label="130.139.9.46;91pkt 91fpkt", shape=pentagon, color=darkviolet];
4822[label="130.139.9.46;92pkt 92fpkt", shape=invtriangle, color=brown];
stat810[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.9.46:*, *:113}[45.6522%]&lt;BR/&gt;{130.139.9.46:25, *:*}[45.6522%]&lt;BR/&gt;{130.139.9.46:*, 197.2.110.104:*}[35.8696%]&lt;BR/&gt;{130.139.9.46:*, 192.173.89.106:*}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (22.9508%)&lt;BR/&gt; 25: (22.9508%)&lt;BR/&gt; 53: (6.28415%)&lt;BR/&gt; 3470: (1.0929%)&lt;BR/&gt; 64542: (0.546448%)&gt;];
}
3605--4822[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_ip="197.2.110.104" src_ip="130.139.9.46"/>
      <filter dst_ip="192.173.89.106" src_ip="130.139.9.46"/>
      <filter src_ip="130.139.9.46" src_port="25"/>
      <filter dst_port="113" src_ip="130.139.9.46"/>
    </slice>
    <from sec="1044162034" usec="0"/>
    <to sec="1044163474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="190.25.76.47"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_812{
style=filled;
color=gray75;
3613[label="130.139.165.47;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4827[label="130.139.165.47;25pkt 25fpkt", shape=invtriangle, color=brown];
stat812[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.165.47:*, 192.160.48.72:80}[44%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49436: (2%)&lt;BR/&gt; 49427: (2%)&lt;BR/&gt; 49422: (2%)&lt;BR/&gt; 49396: (2%)&gt;];
}
3613--4827[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="192.160.48.72" dst_port="80" src_ip="130.139.165.47"/>
    </slice>
    <from sec="1044162695" usec="0"/>
    <to sec="1044163006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="190.25.76.48"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044162195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_814{
style=filled;
color=gray75;
3617[label="196.176.228.48;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4830[label="196.176.228.48;5pkt 5fpkt", shape=invtriangle, color=brown];
stat814[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.176.228.48:1025, 133.61.212.129:137}[20%]&lt;BR/&gt;{196.176.228.48:1025, 133.61.212.130:137}[20%]&lt;BR/&gt;{196.176.228.48:1025, 133.61.212.131:137}[20%]&lt;BR/&gt;{196.176.228.48:1025, 133.61.212.134:137}[20%]&lt;BR/&gt;{196.176.228.48:1025, 133.61.212.135:137}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3617--4830[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="133.61.212.135" dst_port="137" src_ip="196.176.228.48" src_port="1025"/>
      <filter dst_ip="133.61.212.134" dst_port="137" src_ip="196.176.228.48" src_port="1025"/>
      <filter dst_ip="133.61.212.131" dst_port="137" src_ip="196.176.228.48" src_port="1025"/>
      <filter dst_ip="133.61.212.130" dst_port="137" src_ip="196.176.228.48" src_port="1025"/>
      <filter dst_ip="133.61.212.129" dst_port="137" src_ip="196.176.228.48" src_port="1025"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.78.194.55"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_816{
style=filled;
color=gray75;
3645[label="165.199.36.57;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4840[label="165.199.36.57;4pkt 4fpkt", shape=invtriangle, color=brown];
stat816[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.199.36.57:35567, 200.69.24.51:6667}[25%]&lt;BR/&gt;{165.199.36.57:113, 200.69.24.51:4872}[25%]&lt;BR/&gt;{165.199.36.57:35566, 199.195.56.164:6667}[25%]&lt;BR/&gt;{165.199.36.57:113, 199.195.56.164:46980}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (25%)&lt;BR/&gt; 113: (25%)&lt;BR/&gt; 46980: (12.5%)&lt;BR/&gt; 35567: (12.5%)&lt;BR/&gt; 35566: (12.5%)&gt;];
}
3645--4840[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="199.195.56.164" dst_port="46980" src_ip="165.199.36.57" src_port="113"/>
      <filter dst_ip="199.195.56.164" dst_port="6667" src_ip="165.199.36.57" src_port="35566"/>
      <filter dst_ip="200.69.24.51" dst_port="4872" src_ip="165.199.36.57" src_port="113"/>
      <filter dst_ip="200.69.24.51" dst_port="6667" src_ip="165.199.36.57" src_port="35567"/>
    </slice>
    <from sec="1044162033" usec="0"/>
    <to sec="1044163520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_817{
style=filled;
color=gray75;
3646[label="209.242.136.57;122pkt 122fpkt", shape=pentagon, color=darkviolet];
4841[label="209.242.136.57;122pkt 122fpkt", shape=invtriangle, color=brown];
stat817[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.242.136.57:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3646--4841[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.242.136.57" src_port="1027"/>
    </slice>
    <from sec="1044163470" usec="0"/>
    <to sec="1044163497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_818{
style=filled;
color=gray75;
3654[label="162.0.237.58;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4845[label="162.0.237.58;25pkt 25fpkt", shape=invtriangle, color=brown];
stat818[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.237.58:24016, 136.209.67.135:*}[96%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24016: (48%)&lt;BR/&gt; 5050: (2%)&lt;BR/&gt; 2729: (2%)&lt;BR/&gt; 2725: (2%)&lt;BR/&gt; 2721: (2%)&gt;];
}
3654--4845[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="136.209.67.135" src_ip="162.0.237.58" src_port="24016"/>
    </slice>
    <from sec="1044162003" usec="0"/>
    <to sec="1044163520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_820{
style=filled;
color=gray75;
2231[label="206.34.104.222;d;3pkt 3fpkt", shape=diamond, color=yellow];
2291[label="203.96.159.86;s;3pkt 3fpkt", shape=diamond, color=yellow];
3109[label="203.96.159.86;s;3pkt 3fpkt", shape=hexagon, color=black];
3666[label="203.96.152.61;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4850[label="203.96.152.61;16pkt 16fpkt", shape=invtriangle, color=brown];
stat820[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.96.152.61:1863, 130.139.108.29:*}[57.8947%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1056: (3.65854%)&lt;BR/&gt; 1040: (3.65854%)&lt;BR/&gt; 1033: (3.65854%)&lt;BR/&gt; 1468: (2.43902%)&gt;];
}
2231--2291[label="0.333333;1pkt 1fpkt"];
2231--3109[label="0.333333;1pkt 1fpkt"];
2231--3666[label="0.666667;2pkt 2fpkt"];
2231--4850[label="0.666667;2pkt 2fpkt"];
2291--3109[label="1;3pkt 3fpkt"];
3666--4850[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="130.139.108.29" src_ip="203.96.152.61" src_port="1863"/>
    </slice>
    <from sec="1044162045" usec="0"/>
    <to sec="1044163525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.130.9.62"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="130.139.171.63"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044162562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_823{
style=filled;
color=gray75;
3681[label="130.139.189.64;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4857[label="130.139.189.64;29pkt 29fpkt", shape=invtriangle, color=brown];
5399[label="130.139.189.64;29pkt 29fpkt", shape=invhouse, color=bisque];
stat823[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.189.64:*, 203.145.101.88:80}[58.6207%]&lt;BR/&gt;{130.139.189.64:*, 203.145.105.155:443}[31.0345%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.3103%)&lt;BR/&gt; 443: (20.6897%)&lt;BR/&gt; 49324: (1.72414%)&lt;BR/&gt; 49323: (1.72414%)&lt;BR/&gt; 49322: (1.72414%)&gt;];
}
3681--4857[label="1;29pkt 29fpkt"];
3681--5399[label="1;29pkt 29fpkt"];
4857--5399[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="203.145.101.88" dst_port="80" src_ip="130.139.189.64"/>
      <filter dst_ip="203.145.105.155" dst_port="443" src_ip="130.139.189.64"/>
    </slice>
    <from sec="1044162162" usec="0"/>
    <to sec="1044162591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_824{
style=filled;
color=gray75;
3683[label="192.160.48.65;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4859[label="192.160.48.65;2pkt 2fpkt", shape=invtriangle, color=brown];
stat824[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.160.48.65:80, 148.94.8.120:2738}[50%]&lt;BR/&gt;{192.160.48.65:80, 148.94.8.120:2739}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2739: (25%)&lt;BR/&gt; 2738: (25%)&gt;];
}
3683--4859[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.8.120" dst_port="2739" src_ip="192.160.48.65" src_port="80"/>
      <filter dst_ip="148.94.8.120" dst_port="2738" src_ip="192.160.48.65" src_port="80"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_825{
style=filled;
color=gray75;
3699[label="193.176.196.66;138pkt 138fpkt", shape=pentagon, color=darkviolet];
4866[label="193.176.196.66;138pkt 138fpkt", shape=invtriangle, color=brown];
stat825[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.176.196.66:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3699--4866[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.176.196.66" src_port="1029"/>
    </slice>
    <from sec="1044162906" usec="0"/>
    <to sec="1044162929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.129.173.67"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_827{
style=filled;
color=gray75;
3713[label="194.200.22.69;48pkt 48fpkt", shape=pentagon, color=darkviolet];
4871[label="194.200.22.69;47pkt 47fpkt", shape=invtriangle, color=brown];
stat827[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.200.22.69:*, 130.138.97.45:80}[85.4167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.6842%)&lt;BR/&gt; 4004: (6.31579%)&lt;BR/&gt; 53: (6.31579%)&lt;BR/&gt; 4950: (1.05263%)&lt;BR/&gt; 4928: (1.05263%)&gt;];
}
3713--4871[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.97.45" dst_port="80" src_ip="194.200.22.69"/>
    </slice>
    <from sec="1044162043" usec="0"/>
    <to sec="1044163383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_828{
style=filled;
color=gray75;
3714[label="190.81.28.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4872[label="190.81.28.69;1pkt 1fpkt", shape=invtriangle, color=brown];
stat828[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.81.28.69:14, 165.155.64.64:35408}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35408: (50%)&lt;BR/&gt; 14: (50%)&gt;];
}
3714--4872[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.155.64.64" dst_port="35408" src_ip="190.81.28.69" src_port="14"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_829{
style=filled;
color=gray75;
3720[label="133.168.180.69;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4875[label="133.168.180.69;6pkt 6fpkt", shape=invtriangle, color=brown];
stat829[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.180.69:*, *:443}[66.6667%]&lt;BR/&gt;{133.168.180.69:*, *:2492}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (31.8182%)&lt;BR/&gt; 2492: (18.1818%)&lt;BR/&gt; 4653: (9.09091%)&lt;BR/&gt; 3441: (9.09091%)&lt;BR/&gt; 3098: (9.09091%)&gt;];
}
3720--4875[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="133.168.180.69"/>
      <filter dst_port="2492" src_ip="133.168.180.69"/>
    </slice>
    <from sec="1044162005" usec="0"/>
    <to sec="1044163527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_830{
style=filled;
color=gray75;
3725[label="210.48.6.70;60pkt 60fpkt", shape=pentagon, color=darkviolet];
4877[label="210.48.6.70;61pkt 61fpkt", shape=invtriangle, color=brown];
stat830[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.48.6.70:80, 130.138.67.45:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5000: (0.826446%)&lt;BR/&gt; 4999: (0.826446%)&lt;BR/&gt; 4998: (0.826446%)&lt;BR/&gt; 4997: (0.826446%)&gt;];
}
3725--4877[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.67.45" src_ip="210.48.6.70" src_port="80"/>
    </slice>
    <from sec="1044162630" usec="0"/>
    <to sec="1044162644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_831{
style=filled;
color=gray75;
3729[label="212.42.153.70;41pkt 41fpkt", shape=pentagon, color=darkviolet];
4880[label="212.42.153.70;41pkt 41fpkt", shape=invtriangle, color=brown];
stat831[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.42.153.70:80, 165.155.91.186:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1258: (1.21951%)&lt;BR/&gt; 1140: (1.21951%)&lt;BR/&gt; 1139: (1.21951%)&lt;BR/&gt; 1138: (1.21951%)&gt;];
}
3729--4880[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="165.155.91.186" src_ip="212.42.153.70" src_port="80"/>
    </slice>
    <from sec="1044162690" usec="0"/>
    <to sec="1044162845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_832{
style=filled;
color=gray75;
3731[label="165.155.218.70;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4881[label="165.155.218.70;28pkt 28fpkt", shape=invtriangle, color=brown];
stat832[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.218.70:*, 131.81.179.134:80}[42.8571%]&lt;BR/&gt;{165.155.218.70:*, 192.217.33.41:80}[39.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2143%)&lt;BR/&gt; 49754: (1.78571%)&lt;BR/&gt; 49753: (1.78571%)&lt;BR/&gt; 49752: (1.78571%)&lt;BR/&gt; 49751: (1.78571%)&gt;];
}
3731--4881[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="131.81.179.134" dst_port="80" src_ip="165.155.218.70"/>
      <filter dst_ip="192.217.33.41" dst_port="80" src_ip="165.155.218.70"/>
    </slice>
    <from sec="1044163202" usec="0"/>
    <to sec="1044163451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_833{
style=filled;
color=gray75;
3737[label="190.73.18.72;101pkt 101fpkt", shape=pentagon, color=darkviolet];
4886[label="190.73.18.72;101pkt 101fpkt", shape=invtriangle, color=brown];
stat833[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.73.18.72:1064, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1064: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3737--4886[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.73.18.72" src_port="1064"/>
    </slice>
    <from sec="1044162964" usec="0"/>
    <to sec="1044162980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.90.35.72"/>
    </slice>
    <from sec="1044162446" usec="0"/>
    <to sec="1044162680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.17.81.72"/>
    </slice>
    <from sec="1044162022" usec="0"/>
    <to sec="1044163483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="190.52.98.72"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_837{
style=filled;
color=gray75;
3751[label="130.139.210.72;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4893[label="130.139.210.72;21pkt 21fpkt", shape=invtriangle, color=brown];
stat837[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.210.72:*, *:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1109: (2.38095%)&lt;BR/&gt; 1108: (2.38095%)&lt;BR/&gt; 1101: (2.38095%)&lt;BR/&gt; 1061: (2.38095%)&gt;];
}
3751--4893[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="130.139.210.72"/>
    </slice>
    <from sec="1044163069" usec="0"/>
    <to sec="1044163482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.50.111.74"/>
    </slice>
    <from sec="1044162904" usec="0"/>
    <to sec="1044163511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.96.159.74"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_840{
style=filled;
color=gray75;
3775[label="206.4.196.76;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4902[label="206.4.196.76;20pkt 20fpkt", shape=invtriangle, color=brown];
5412[label="206.4.196.76;20pkt 20fpkt", shape=invhouse, color=bisque];
stat840[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.4.196.76:*, 207.248.167.32:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36091: (2.54237%)&lt;BR/&gt; 35945: (2.54237%)&lt;BR/&gt; 35944: (2.54237%)&lt;BR/&gt; 35941: (2.54237%)&gt;];
}
3775--4902[label="1;19pkt 19fpkt"];
3775--5412[label="1;19pkt 19fpkt"];
4902--5412[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="207.248.167.32" dst_port="80" src_ip="206.4.196.76"/>
    </slice>
    <from sec="1044162639" usec="0"/>
    <to sec="1044163072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696077,1.90116,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_841{
style=filled;
color=gray75;
204[label="206.188.7.77s;234pkt 234fpkt", shape=rectangle, color=red];
3779[label="206.188.7.77;244pkt 244fpkt", shape=pentagon, color=darkviolet];
4903[label="206.188.7.77;244pkt 244fpkt", shape=invtriangle, color=brown];
stat841[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.188.7.77:1034, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
204--3779[label="0.995726;233pkt 233fpkt"];
204--4903[label="0.995726;233pkt 233fpkt"];
3779--4903[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="206.188.7.77" src_port="1034"/>
    </slice>
    <from sec="1044163235" usec="0"/>
    <to sec="1044163282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_843{
style=filled;
color=gray75;
1859[label="198.105.8.66;s;99pkt 99fpkt", shape=diamond, color=yellow];
1865[label="130.138.67.201;d;18pkt 18fpkt", shape=diamond, color=yellow];
1959[label="148.94.168.156;d;92pkt 92fpkt", shape=diamond, color=yellow];
1964[label="128.212.31.175;s;1pkt 1fpkt", shape=diamond, color=yellow];
2745[label="130.138.67.201;d;18pkt 18fpkt", shape=hexagon, color=black];
2810[label="128.212.31.175;s;1pkt 1fpkt", shape=hexagon, color=black];
2859[label="148.94.168.156;d;92pkt 92fpkt", shape=hexagon, color=black];
3689[label="198.105.8.66;99pkt 99fpkt", shape=pentagon, color=darkviolet];
3762[label="192.121.90.74;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3786[label="217.129.90.78;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4861[label="198.105.8.66;98pkt 98fpkt", shape=invtriangle, color=brown];
4908[label="217.129.90.78;28pkt 28fpkt", shape=invtriangle, color=brown];
5414[label="217.129.90.78;27pkt 27fpkt", shape=invhouse, color=bisque];
stat843[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.105.8.66:80, 148.94.168.156:*}[61.7021%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6689%)&lt;BR/&gt; 62784: (0.413907%)&lt;BR/&gt; 62780: (0.413907%)&lt;BR/&gt; 62778: (0.413907%)&lt;BR/&gt; 62777: (0.413907%)&gt;];
}
1859--1865[label="0.555556;10pkt 10fpkt"];
1859--1959[label="0.945652;87pkt 87fpkt"];
1859--2745[label="0.555556;10pkt 10fpkt"];
1859--2859[label="0.945652;87pkt 87fpkt"];
1859--3689[label="1;99pkt 99fpkt"];
1859--4861[label="1;98pkt 98fpkt"];
1865--2745[label="1;18pkt 18fpkt"];
1865--3689[label="0.555556;10pkt 10fpkt"];
1865--3786[label="0.111111;2pkt 2fpkt"];
1865--4861[label="0.555556;10pkt 10fpkt"];
1865--4908[label="0.111111;2pkt 2fpkt"];
1865--5414[label="0.111111;2pkt 2fpkt"];
1959--1964[label="1;1pkt 1fpkt"];
1959--2810[label="1;1pkt 1fpkt"];
1959--2859[label="1;92pkt 92fpkt"];
1959--3689[label="0.945652;87pkt 87fpkt"];
1959--3762[label="0.25;1pkt 1fpkt"];
1959--4861[label="0.945652;87pkt 87fpkt"];
1964--2810[label="1;1pkt 1fpkt"];
1964--2859[label="1;1pkt 1fpkt"];
2745--3689[label="0.555556;10pkt 10fpkt"];
2745--3786[label="0.111111;2pkt 2fpkt"];
2745--4861[label="0.555556;10pkt 10fpkt"];
2745--4908[label="0.111111;2pkt 2fpkt"];
2745--5414[label="0.111111;2pkt 2fpkt"];
2810--2859[label="1;1pkt 1fpkt"];
2859--3689[label="0.945652;87pkt 87fpkt"];
2859--3762[label="0.25;1pkt 1fpkt"];
2859--4861[label="0.945652;87pkt 87fpkt"];
3689--4861[label="1;98pkt 98fpkt"];
3786--4908[label="1;27pkt 27fpkt"];
3786--5414[label="1;27pkt 27fpkt"];
4908--5414[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.168.156" src_ip="198.105.8.66" src_port="80"/>
    </slice>
    <from sec="1044162090" usec="0"/>
    <to sec="1044163398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.94.15.82"/>
    </slice>
    <from sec="1044162192" usec="0"/>
    <to sec="1044162281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.771364,1.91509,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_845{
style=filled;
color=gray75;
2279[label="206.6.47.84;s;59pkt 59fpkt", shape=diamond, color=yellow];
3818[label="206.6.47.84;60pkt 60fpkt", shape=pentagon, color=darkviolet];
4924[label="206.6.47.84;61pkt 61fpkt", shape=invtriangle, color=brown];
stat845[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.6.47.84:0, *:0}[98.3607%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.3333%)&lt;BR/&gt; 2894: (0.833333%)&lt;BR/&gt; 111: (0.833333%)&gt;];
}
2279--3818[label="0.983051;58pkt 58fpkt"];
2279--4924[label="1;59pkt 59fpkt"];
3818--4924[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter src_ip="206.6.47.84"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_846{
style=filled;
color=gray75;
3822[label="203.96.159.84;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4926[label="203.96.159.84;3pkt 3fpkt", shape=invtriangle, color=brown];
stat846[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.96.159.84:1863, 207.40.162.24:1430}[33.3333%]&lt;BR/&gt;{203.96.159.84:1863, 130.139.7.36:50218}[33.3333%]&lt;BR/&gt;{203.96.159.84:1863, 206.34.91.65:1602}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 50218: (20%)&lt;BR/&gt; 1430: (20%)&lt;BR/&gt; 1602: (10%)&gt;];
}
3822--4926[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="206.34.91.65" dst_port="1602" src_ip="203.96.159.84" src_port="1863"/>
      <filter dst_ip="130.139.7.36" dst_port="50218" src_ip="203.96.159.84" src_port="1863"/>
      <filter dst_ip="207.40.162.24" dst_port="1430" src_ip="203.96.159.84" src_port="1863"/>
    </slice>
    <from sec="1044162013" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_847{
style=filled;
color=gray75;
3852[label="197.240.48.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4941[label="197.240.48.91;2pkt 2fpkt", shape=invtriangle, color=brown];
5424[label="197.240.48.91;2pkt 2fpkt", shape=invhouse, color=bisque];
stat847[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.240.48.91:21, 130.139.60.173:37850}[50%]&lt;BR/&gt;{197.240.48.91:1174, 130.139.60.173:37851}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37851: (30%)&lt;BR/&gt; 1174: (30%)&lt;BR/&gt; 37850: (20%)&lt;BR/&gt; 21: (20%)&gt;];
}
3852--4941[label="1;1pkt 1fpkt"];
3852--5424[label="1;1pkt 1fpkt"];
4941--5424[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="130.139.60.173" dst_port="37851" src_ip="197.240.48.91" src_port="1174"/>
      <filter dst_ip="130.139.60.173" dst_port="37850" src_ip="197.240.48.91" src_port="21"/>
    </slice>
    <from sec="1044162306" usec="0"/>
    <to sec="1044162312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_848{
style=filled;
color=gray75;
3853[label="133.168.97.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4942[label="133.168.97.91;1pkt 1fpkt", shape=invtriangle, color=brown];
stat848[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.97.91:53, 149.53.200.13:1029}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
3853--4942[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.53.200.13" dst_port="1029" src_ip="133.168.97.91" src_port="53"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_849{
style=filled;
color=gray75;
3861[label="165.155.214.92;39pkt 39fpkt", shape=pentagon, color=darkviolet];
4944[label="165.155.214.92;40pkt 40fpkt", shape=invtriangle, color=brown];
stat849[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.214.92:*, 206.186.15.73:80}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1840: (1.26582%)&lt;BR/&gt; 1839: (1.26582%)&lt;BR/&gt; 1838: (1.26582%)&lt;BR/&gt; 1837: (1.26582%)&gt;];
}
3861--4944[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="206.186.15.73" dst_port="80" src_ip="165.155.214.92"/>
    </slice>
    <from sec="1044162326" usec="0"/>
    <to sec="1044163220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.4.110.96"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_851{
style=filled;
color=gray75;
3885[label="219.140.115.96;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4953[label="219.140.115.96;5pkt 5fpkt", shape=invtriangle, color=brown];
stat851[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.140.115.96:80, 165.155.196.222:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60536: (9.09091%)&lt;BR/&gt; 2425: (9.09091%)&lt;BR/&gt; 2090: (9.09091%)&lt;BR/&gt; 2089: (9.09091%)&gt;];
}
3885--4953[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="165.155.196.222" src_ip="219.140.115.96" src_port="80"/>
    </slice>
    <from sec="1044162628" usec="0"/>
    <to sec="1044163458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0904,1.88373,999,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
420[label="197.83.197.216s;1pkt 1fpkt", shape=rectangle, color=red];
1383[label="162.0.237.216;s;17pkt 17fpkt", shape=diamond, color=yellow];
1456[label="213.199.82.192;d;2pkt 2fpkt", shape=diamond, color=yellow];
2165[label="189.167.98.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
2210[label="162.0.195.96;s;2pkt 2fpkt", shape=diamond, color=yellow];
3887[label="162.0.195.96;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4954[label="162.0.195.96;1pkt 1fpkt", shape=invtriangle, color=brown];
5430[label="162.0.195.96;1pkt 1fpkt", shape=invhouse, color=bisque];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.237.216:*, *:25}[47.3684%]&lt;BR/&gt;{162.0.237.216:25, *:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (32.6923%)&lt;BR/&gt; 6667: (11.5385%)&lt;BR/&gt; 21445: (7.69231%)&lt;BR/&gt; 4435: (3.84615%)&lt;BR/&gt; 4423: (3.84615%)&gt;];
}
420--1383[label="1;1pkt 1fpkt"];
1383--1456[label="0.5;1pkt 1fpkt"];
1383--2165[label="1;1pkt 1fpkt"];
1456--2210[label="0.5;1pkt 1fpkt"];
2210--3887[label="1;1pkt 1fpkt"];
2210--4954[label="1;1pkt 1fpkt"];
2210--5430[label="1;1pkt 1fpkt"];
3887--4954[label="1;1pkt 1fpkt"];
3887--5430[label="1;1pkt 1fpkt"];
4954--5430[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="162.0.237.216" src_port="25"/>
      <filter dst_port="25" src_ip="162.0.237.216"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_853{
style=filled;
color=gray75;
3891[label="219.140.115.98;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4957[label="219.140.115.98;2pkt 2fpkt", shape=invtriangle, color=brown];
stat853[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.140.115.98:80, 207.164.182.68:1150}[33.3333%]&lt;BR/&gt;{219.140.115.98:80, 207.164.182.68:1156}[33.3333%]&lt;BR/&gt;{219.140.115.98:80, 207.164.182.68:1198}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1198: (20%)&lt;BR/&gt; 1156: (20%)&lt;BR/&gt; 1150: (10%)&gt;];
}
3891--4957[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="207.164.182.68" dst_port="1198" src_ip="219.140.115.98" src_port="80"/>
      <filter dst_ip="207.164.182.68" dst_port="1156" src_ip="219.140.115.98" src_port="80"/>
      <filter dst_ip="207.164.182.68" dst_port="1150" src_ip="219.140.115.98" src_port="80"/>
    </slice>
    <from sec="1044163242" usec="0"/>
    <to sec="1044163467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.242.78.101"/>
    </slice>
    <from sec="1044162491" usec="0"/>
    <to sec="1044163512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.96.156.101"/>
    </slice>
    <from sec="1044162009" usec="0"/>
    <to sec="1044163521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.96.159.101"/>
    </slice>
    <from sec="1044162005" usec="0"/>
    <to sec="1044163493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_857{
style=filled;
color=gray75;
3909[label="130.139.66.102;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4966[label="130.139.66.102;12pkt 12fpkt", shape=invtriangle, color=brown];
stat857[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.66.102:1032, *:1239}[33.3333%]&lt;BR/&gt;{130.139.66.102:*, *:80}[33.3333%]&lt;BR/&gt;{130.139.66.102:1030, *:1239}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1239: (29.1667%)&lt;BR/&gt; 1032: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 1030: (12.5%)&lt;BR/&gt; 0: (8.33333%)&gt;];
}
3909--4966[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="130.139.66.102"/>
      <filter dst_port="1239" src_ip="130.139.66.102" src_port="1032"/>
      <filter dst_port="1239" src_ip="130.139.66.102" src_port="1030"/>
    </slice>
    <from sec="1044162807" usec="0"/>
    <to sec="1044163009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_858{
style=filled;
color=gray75;
3926[label="207.121.32.105;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4972[label="207.121.32.105;1pkt 1fpkt", shape=invtriangle, color=brown];
5435[label="207.121.32.105;1pkt 1fpkt", shape=invhouse, color=bisque];
stat858[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.121.32.105:1259, 162.0.207.32:80}[50%]&lt;BR/&gt;{207.121.32.105:1260, 162.0.207.32:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1260: (37.5%)&lt;BR/&gt; 1259: (12.5%)&gt;];
}
3926--4972[label="1;1pkt 1fpkt"];
3926--5435[label="1;1pkt 1fpkt"];
4972--5435[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.0.207.32" dst_port="80" src_ip="207.121.32.105" src_port="1260"/>
      <filter dst_ip="162.0.207.32" dst_port="80" src_ip="207.121.32.105" src_port="1259"/>
    </slice>
    <from sec="1044163497" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
3936[label="203.96.159.106;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4980[label="203.96.159.106;3pkt 3fpkt", shape=invtriangle, color=brown];
5440[label="203.96.159.106;4pkt 4fpkt", shape=invhouse, color=bisque];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.96.159.106:1863, 206.34.69.4:1955}[25%]&lt;BR/&gt;{203.96.159.106:1863, 133.168.146.92:1101}[25%]&lt;BR/&gt;{203.96.159.106:1863, 133.168.108.95:2440}[25%]&lt;BR/&gt;{203.96.159.106:1863, 133.168.186.206:2993}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2440: (15%)&lt;BR/&gt; 1955: (15%)&lt;BR/&gt; 1101: (15%)&lt;BR/&gt; 2993: (5%)&gt;];
}
3936--4980[label="1;3pkt 3fpkt"];
3936--5440[label="1;3pkt 3fpkt"];
4980--5440[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="133.168.186.206" dst_port="2993" src_ip="203.96.159.106" src_port="1863"/>
      <filter dst_ip="133.168.108.95" dst_port="2440" src_ip="203.96.159.106" src_port="1863"/>
      <filter dst_ip="133.168.146.92" dst_port="1101" src_ip="203.96.159.106" src_port="1863"/>
      <filter dst_ip="206.34.69.4" dst_port="1955" src_ip="203.96.159.106" src_port="1863"/>
    </slice>
    <from sec="1044162015" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_860{
style=filled;
color=gray75;
3939[label="207.218.7.107;186pkt 186fpkt", shape=pentagon, color=darkviolet];
4981[label="207.218.7.107;185pkt 185fpkt", shape=invtriangle, color=brown];
5441[label="207.218.7.107;186pkt 186fpkt", shape=invhouse, color=bisque];
stat860[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.218.7.107:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3939--4981[label="1;185pkt 185fpkt"];
3939--5441[label="1;186pkt 186fpkt"];
4981--5441[label="1;185pkt 185fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="207.218.7.107" src_port="1026"/>
    </slice>
    <from sec="1044163053" usec="0"/>
    <to sec="1044163091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_861{
style=filled;
color=gray75;
3941[label="133.168.119.107;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4982[label="133.168.119.107;5pkt 5fpkt", shape=invtriangle, color=brown];
stat861[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.119.107:80, 200.36.69.45:*}[33.3333%]&lt;BR/&gt;{133.168.119.107:53, *:*}[33.3333%]&lt;BR/&gt;{133.168.119.107:*, 194.44.26.166:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (18.1818%)&lt;BR/&gt; 53: (13.6364%)&lt;BR/&gt; 36631: (9.09091%)&lt;BR/&gt; 36103: (9.09091%)&lt;BR/&gt; 26004: (9.09091%)&gt;];
}
3941--4982[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="194.44.26.166" src_ip="133.168.119.107"/>
      <filter src_ip="133.168.119.107" src_port="53"/>
      <filter dst_ip="200.36.69.45" src_ip="133.168.119.107" src_port="80"/>
    </slice>
    <from sec="1044162326" usec="0"/>
    <to sec="1044162394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_862{
style=filled;
color=gray75;
3951[label="133.61.250.108;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4987[label="133.61.250.108;14pkt 14fpkt", shape=invtriangle, color=brown];
stat862[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.61.250.108:*, 193.254.174.3:25}[20%]&lt;BR/&gt;{133.61.250.108:*, 128.197.82.16:25}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 54249: (3.44828%)&lt;BR/&gt; 54244: (3.44828%)&lt;BR/&gt; 54243: (3.44828%)&lt;BR/&gt; 54216: (3.44828%)&gt;];
}
3951--4987[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="128.197.82.16" dst_port="25" src_ip="133.61.250.108"/>
      <filter dst_ip="193.254.174.3" dst_port="25" src_ip="133.61.250.108"/>
    </slice>
    <from sec="1044162212" usec="0"/>
    <to sec="1044163471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_863{
style=filled;
color=gray75;
1780[label="130.138.97.219;d;16pkt 16fpkt", shape=diamond, color=yellow];
2706[label="130.138.97.219;d;15pkt 15fpkt", shape=hexagon, color=black];
3961[label="192.67.131.110;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4991[label="192.67.131.110;23pkt 23fpkt", shape=invtriangle, color=brown];
5444[label="192.67.131.110;23pkt 23fpkt", shape=invhouse, color=bisque];
stat863[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.67.131.110:80, 130.138.97.219:*}[65.625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0099%)&lt;BR/&gt; 4663: (2.47525%)&lt;BR/&gt; 4661: (2.47525%)&lt;BR/&gt; 4660: (2.47525%)&lt;BR/&gt; 4659: (2.47525%)&gt;];
}
1780--2706[label="1;15pkt 15fpkt"];
1780--3905[label="0.2;1pkt 1fpkt"];
1780--3961[label="0.5;8pkt 8fpkt"];
1780--4991[label="0.5;8pkt 8fpkt"];
1780--5444[label="0.5;8pkt 8fpkt"];
2706--3905[label="0.2;1pkt 1fpkt"];
2706--3961[label="0.466667;7pkt 7fpkt"];
2706--4991[label="0.466667;7pkt 7fpkt"];
2706--5444[label="0.466667;7pkt 7fpkt"];
3961--4991[label="1;23pkt 23fpkt"];
3961--5444[label="1;23pkt 23fpkt"];
4991--5444[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.97.219" src_ip="192.67.131.110" src_port="80"/>
    </slice>
    <from sec="1044162013" usec="0"/>
    <to sec="1044163167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_864{
style=filled;
color=gray75;
3971[label="210.15.112.113;505pkt 505fpkt", shape=pentagon, color=darkviolet];
4996[label="210.15.112.113;505pkt 505fpkt", shape=invtriangle, color=brown];
stat864[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.15.112.113:*, 162.0.33.4:53}[44.3564%]&lt;BR/&gt;{210.15.112.113:*, 162.0.33.3:53}[41.9802%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.901%)&lt;BR/&gt; 4910: (0.19802%)&lt;BR/&gt; 0: (0.19802%)&lt;BR/&gt; 65487: (0.0990099%)&lt;BR/&gt; 65394: (0.0990099%)&gt;];
}
3971--4996[label="1;505pkt 505fpkt"];
</description>
    <slice>
      <filter dst_ip="162.0.33.4" dst_port="53" src_ip="210.15.112.113"/>
      <filter dst_ip="162.0.33.3" dst_port="53" src_ip="210.15.112.113"/>
    </slice>
    <from sec="1044162590" usec="0"/>
    <to sec="1044163524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_865{
style=filled;
color=gray75;
3993[label="192.223.64.118;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5004[label="192.223.64.118;1pkt 1fpkt", shape=invtriangle, color=brown];
stat865[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.223.64.118:80, 207.40.14.160:2745}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2745: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3993--5004[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.40.14.160" dst_port="2745" src_ip="192.223.64.118" src_port="80"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_866{
style=filled;
color=gray75;
4007[label="130.139.122.121;128pkt 128fpkt", shape=pentagon, color=darkviolet];
5012[label="130.139.122.121;128pkt 128fpkt", shape=invtriangle, color=brown];
stat866[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.122.121:*, *:113}[44.5312%]&lt;BR/&gt;{130.139.122.121:25, *:*}[44.5312%]&lt;BR/&gt;{130.139.122.121:*, 193.154.85.13:*}[39.0625%]&lt;BR/&gt;{130.139.122.121:*, 204.242.197.137:*}[39.0625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (27.3438%)&lt;BR/&gt; 113: (22.6562%)&lt;BR/&gt; 62627: (0.390625%)&lt;BR/&gt; 62567: (0.390625%)&lt;BR/&gt; 62547: (0.390625%)&gt;];
}
4007--5012[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_ip="204.242.197.137" src_ip="130.139.122.121"/>
      <filter dst_ip="193.154.85.13" src_ip="130.139.122.121"/>
      <filter src_ip="130.139.122.121" src_port="25"/>
      <filter dst_port="113" src_ip="130.139.122.121"/>
    </slice>
    <from sec="1044162002" usec="0"/>
    <to sec="1044163494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20047,1.85333,999,1 1 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_867{
style=filled;
color=gray75;
43[label="165.155.186.108s;1pkt 1fpkt", shape=rectangle, color=red];
87[label="148.94.16.47d;2pkt 2fpkt", shape=rectangle, color=red];
389[label="166.221.108.198s;1pkt 1fpkt", shape=rectangle, color=red];
709[label="166.221.108.198s;1pkt 1fpkt", shape=ellipse, color=green];
887[label="148.94.16.47;d;6112pkt 6112fpkt", shape=diamond, color=yellow];
1015[label="188.246.162.145;s;1pkt 1fpkt", shape=diamond, color=yellow];
1043[label="165.155.186.108;s;52pkt 52fpkt", shape=diamond, color=yellow];
1315[label="217.135.164.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
1454[label="220.4.110.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
1540[label="220.142.69.254;s;1pkt 1fpkt", shape=diamond, color=yellow];
2532[label="148.94.16.47;d;4352pkt 4352fpkt", shape=hexagon, color=black];
2919[label="217.135.164.10;d;1pkt 1fpkt", shape=hexagon, color=black];
2959[label="165.155.186.108;s;44pkt 44fpkt", shape=hexagon, color=black];
2966[label="220.4.110.96;s;1pkt 1fpkt", shape=hexagon, color=black];
4014[label="202.112.88.124;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5016[label="202.112.88.124;1pkt 1fpkt", shape=invtriangle, color=brown];
stat867[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 148.94.16.47:11520}[69.8897%]&lt;BR/&gt;{*:*, 148.94.16.47:4662}[28.5853%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11520: (35.3306%)&lt;BR/&gt; 4662: (13.9695%)&lt;BR/&gt; 80: (0.662064%)&lt;BR/&gt; 4665: (0.586399%)&lt;BR/&gt; 0: (0.444529%)&gt;];
}
43--87[label="1;1pkt 1fpkt"];
43--1043[label="1;1pkt 1fpkt"];
43--1315[label="1;1pkt 1fpkt"];
43--2919[label="1;1pkt 1fpkt"];
43--2959[label="1;1pkt 1fpkt"];
87--887[label="0.5;1pkt 1fpkt"];
87--1015[label="1;1pkt 1fpkt"];
87--1043[label="0.5;1pkt 1fpkt"];
87--1315[label="1;1pkt 1fpkt"];
87--2532[label="0.5;1pkt 1fpkt"];
87--2919[label="1;1pkt 1fpkt"];
87--2959[label="0.5;1pkt 1fpkt"];
389--709[label="1;1pkt 1fpkt"];
389--887[label="1;1pkt 1fpkt"];
389--2532[label="1;1pkt 1fpkt"];
709--887[label="1;1pkt 1fpkt"];
709--2532[label="1;1pkt 1fpkt"];
887--999[label="0.000163613;1pkt 1fpkt"];
887--1015[label="1;1pkt 1fpkt"];
887--1454[label="1;1pkt 1fpkt"];
887--1540[label="1;1pkt 1fpkt"];
887--2385[label="0.000163613;1pkt 1fpkt"];
887--2532[label="1;4352pkt 4352fpkt"];
887--2966[label="1;1pkt 1fpkt"];
887--4008[label="0.000163613;1pkt 1fpkt"];
887--4014[label="1;1pkt 1fpkt"];
887--5013[label="0.000163613;1pkt 1fpkt"];
887--5016[label="1;1pkt 1fpkt"];
1015--2532[label="1;1pkt 1fpkt"];
1043--1315[label="1;1pkt 1fpkt"];
1043--2919[label="1;1pkt 1fpkt"];
1043--2959[label="1;44pkt 44fpkt"];
1043--3232[label="0.0769231;4pkt 4fpkt"];
1043--3235[label="0.0384615;2pkt 2fpkt"];
1043--3238[label="0.0384615;2pkt 2fpkt"];
1043--3243[label="0.115385;6pkt 6fpkt"];
1043--3249[label="0.0769231;4pkt 4fpkt"];
1043--3252[label="0.0769231;4pkt 4fpkt"];
1315--2919[label="1;1pkt 1fpkt"];
1315--2959[label="1;1pkt 1fpkt"];
1454--2532[label="1;1pkt 1fpkt"];
1454--2966[label="1;1pkt 1fpkt"];
1540--2532[label="1;1pkt 1fpkt"];
2532--2966[label="1;1pkt 1fpkt"];
2532--4008[label="0.000229779;1pkt 1fpkt"];
2532--5013[label="0.000229779;1pkt 1fpkt"];
2919--2959[label="1;1pkt 1fpkt"];
2959--3232[label="0.0909091;4pkt 4fpkt"];
2959--3235[label="0.0454545;2pkt 2fpkt"];
2959--3238[label="0.0454545;2pkt 2fpkt"];
2959--3249[label="0.0909091;4pkt 4fpkt"];
2959--3252[label="0.0909091;4pkt 4fpkt"];
4014--5016[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.16.47" dst_port="11520"/>
      <filter dst_ip="148.94.16.47" dst_port="4662"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.40.187.124"/>
    </slice>
    <from sec="1044162016" usec="0"/>
    <to sec="1044163519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02936,1.91522,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_869{
style=filled;
color=gray75;
1835[label="162.0.195.124;s;60pkt 60fpkt", shape=diamond, color=yellow];
4016[label="162.0.195.124;62pkt 62fpkt", shape=pentagon, color=darkviolet];
5018[label="162.0.195.124;62pkt 62fpkt", shape=invtriangle, color=brown];
5456[label="162.0.195.124;62pkt 62fpkt", shape=invhouse, color=bisque];
stat869[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.195.124:80, 209.54.96.29:*}[63.4921%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8862%)&lt;BR/&gt; 25: (7.11382%)&lt;BR/&gt; 56003: (0.813008%)&lt;BR/&gt; 55979: (0.813008%)&lt;BR/&gt; 55930: (0.813008%)&gt;];
}
1835--4016[label="0.983333;59pkt 59fpkt"];
1835--5018[label="0.983333;59pkt 59fpkt"];
1835--5456[label="0.983333;59pkt 59fpkt"];
4016--5018[label="1;62pkt 62fpkt"];
4016--5456[label="1;62pkt 62fpkt"];
5018--5456[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="209.54.96.29" src_ip="162.0.195.124" src_port="80"/>
    </slice>
    <from sec="1044162113" usec="0"/>
    <to sec="1044163436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.90.49.129"/>
    </slice>
    <from sec="1044163223" usec="0"/>
    <to sec="1044163235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.103.71.129"/>
    </slice>
    <from sec="1044162588" usec="0"/>
    <to sec="1044163521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_872{
style=filled;
color=gray75;
4036[label="207.145.123.129;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5031[label="207.145.123.129;3pkt 3fpkt", shape=invtriangle, color=brown];
5462[label="207.145.123.129;4pkt 4fpkt", shape=invhouse, color=bisque];
stat872[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.145.123.129:80, 130.139.233.203:1345}[25%]&lt;BR/&gt;{207.145.123.129:80, 130.139.233.203:1378}[25%]&lt;BR/&gt;{207.145.123.129:80, 130.139.233.203:1379}[25%]&lt;BR/&gt;{207.145.123.129:80, 130.139.233.203:1380}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1380: (13.6364%)&lt;BR/&gt; 1379: (13.6364%)&lt;BR/&gt; 1378: (13.6364%)&lt;BR/&gt; 1345: (9.09091%)&gt;];
}
4036--5031[label="1;3pkt 3fpkt"];
4036--5462[label="1;4pkt 4fpkt"];
5031--5462[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="130.139.233.203" dst_port="1380" src_ip="207.145.123.129" src_port="80"/>
      <filter dst_ip="130.139.233.203" dst_port="1379" src_ip="207.145.123.129" src_port="80"/>
      <filter dst_ip="130.139.233.203" dst_port="1378" src_ip="207.145.123.129" src_port="80"/>
      <filter dst_ip="130.139.233.203" dst_port="1345" src_ip="207.145.123.129" src_port="80"/>
    </slice>
    <from sec="1044162082" usec="0"/>
    <to sec="1044163150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_873{
style=filled;
color=gray75;
4045[label="133.168.32.130;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5034[label="133.168.32.130;1pkt 1fpkt", shape=invtriangle, color=brown];
stat873[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.32.130:1029, 130.146.146.103:123}[50%]&lt;BR/&gt;{133.168.32.130:2693, 196.178.18.227:6699}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (33.3333%)&lt;BR/&gt; 123: (33.3333%)&lt;BR/&gt; 6699: (16.6667%)&lt;BR/&gt; 2693: (16.6667%)&gt;];
}
4045--5034[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.178.18.227" dst_port="6699" src_ip="133.168.32.130" src_port="2693"/>
      <filter dst_ip="130.146.146.103" dst_port="123" src_ip="133.168.32.130" src_port="1029"/>
    </slice>
    <from sec="1044162006" usec="0"/>
    <to sec="1044163525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23831,1.87503,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_874{
style=filled;
color=gray75;
33[label="190.113.58.71s;2pkt 2fpkt", shape=rectangle, color=red];
902[label="133.168.145.25;d;154pkt 154fpkt", shape=diamond, color=yellow];
1003[label="148.94.2.157;d;12pkt 12fpkt", shape=diamond, color=yellow];
1004[label="190.113.58.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
1225[label="213.117.223.240;s;1pkt 1fpkt", shape=diamond, color=yellow];
2129[label="207.40.174.192;d;158pkt 158fpkt", shape=diamond, color=yellow];
2199[label="209.208.70.255;s;10pkt 10fpkt", shape=diamond, color=yellow];
2268[label="208.42.168.232;s;2pkt 2fpkt", shape=diamond, color=yellow];
3010[label="207.40.174.192;d;114pkt 114fpkt", shape=hexagon, color=black];
3930[label="193.254.180.105;36pkt 36fpkt", shape=pentagon, color=darkviolet];
4564[label="203.96.37.231;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4603[label="213.117.223.240;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4882[label="190.113.58.71;1pkt 1fpkt", shape=invtriangle, color=brown];
4976[label="193.254.180.105;37pkt 37fpkt", shape=invtriangle, color=brown];
5404[label="190.113.58.71;1pkt 1fpkt", shape=invhouse, color=bisque];
5437[label="193.254.180.105;37pkt 37fpkt", shape=invhouse, color=bisque];
stat874[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 207.40.174.192:*}[35.0923%]&lt;BR/&gt;{*:6257, 133.168.145.25:6257}[34.5646%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.1959%)&lt;BR/&gt; 6257: (22.3818%)&lt;BR/&gt; 443: (6.58784%)&lt;BR/&gt; 8805: (2.36486%)&lt;BR/&gt; 1755: (1.18243%)&gt;];
}
33--1003[label="0.5;1pkt 1fpkt"];
33--1004[label="1;1pkt 1fpkt"];
33--2129[label="0.5;1pkt 1fpkt"];
33--4882[label="1;1pkt 1fpkt"];
33--5404[label="1;1pkt 1fpkt"];
902--1225[label="1;1pkt 1fpkt"];
902--1566[label="0.025974;4pkt 4fpkt"];
902--1754[label="0.025974;4pkt 4fpkt"];
902--2778[label="0.0314961;4pkt 4fpkt"];
902--3237[label="0.0324675;5pkt 5fpkt"];
902--3711[label="0.025974;4pkt 4fpkt"];
902--3930[label="0.0277778;1pkt 1fpkt"];
902--4321[label="0.025974;4pkt 4fpkt"];
902--4603[label="1;1pkt 1fpkt"];
902--4976[label="0.027027;1pkt 1fpkt"];
902--5437[label="0.027027;1pkt 1fpkt"];
1003--1004[label="1;1pkt 1fpkt"];
1003--4882[label="1;1pkt 1fpkt"];
1003--5404[label="1;1pkt 1fpkt"];
1004--4882[label="1;1pkt 1fpkt"];
1004--5404[label="1;1pkt 1fpkt"];
1225--4603[label="1;1pkt 1fpkt"];
2129--2199[label="1;10pkt 10fpkt"];
2129--2268[label="1;2pkt 2fpkt"];
2129--2882[label="0.0806452;5pkt 5fpkt"];
2129--3010[label="1;114pkt 114fpkt"];
2129--3595[label="0.047619;5pkt 5fpkt"];
2129--3794[label="0.1;2pkt 2fpkt"];
2129--3930[label="0.0833333;3pkt 3fpkt"];
2129--3955[label="0.0113636;1pkt 1fpkt"];
2129--4084[label="0.0188679;1pkt 1fpkt"];
2129--4392[label="0.0162602;2pkt 2fpkt"];
2129--4428[label="0.272727;9pkt 9fpkt"];
2129--4564[label="0.12;3pkt 3fpkt"];
2129--4816[label="0.047619;5pkt 5fpkt"];
2129--4976[label="0.0810811;3pkt 3fpkt"];
2129--4989[label="0.0113636;1pkt 1fpkt"];
2129--5050[label="0.0192308;1pkt 1fpkt"];
2129--5153[label="0.03125;2pkt 2fpkt"];
2129--5383[label="0.0471698;5pkt 5fpkt"];
2129--5437[label="0.0810811;3pkt 3fpkt"];
2129--5508[label="0.0307692;2pkt 2fpkt"];
2199--3010[label="0.8;8pkt 8fpkt"];
3010--3595[label="0.047619;5pkt 5fpkt"];
3010--3794[label="0.1;2pkt 2fpkt"];
3010--3930[label="0.0833333;3pkt 3fpkt"];
3010--3955[label="0.0113636;1pkt 1fpkt"];
3010--4084[label="0.0188679;1pkt 1fpkt"];
3010--4392[label="0.0175439;2pkt 2fpkt"];
3010--4428[label="0.151515;5pkt 5fpkt"];
3010--4564[label="0.12;3pkt 3fpkt"];
3010--4816[label="0.047619;5pkt 5fpkt"];
3010--4976[label="0.0810811;3pkt 3fpkt"];
3010--4989[label="0.0113636;1pkt 1fpkt"];
3010--5050[label="0.0192308;1pkt 1fpkt"];
3010--5153[label="0.03125;2pkt 2fpkt"];
3010--5383[label="0.0471698;5pkt 5fpkt"];
3010--5437[label="0.0810811;3pkt 3fpkt"];
3010--5508[label="0.0307692;2pkt 2fpkt"];
3930--4976[label="1;36pkt 36fpkt"];
3930--5437[label="1;36pkt 36fpkt"];
4882--5404[label="1;1pkt 1fpkt"];
4976--5437[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="207.40.174.192" src_port="80"/>
      <filter dst_ip="133.168.145.25" dst_port="6257" src_port="6257"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_875{
style=filled;
color=gray75;
4055[label="130.139.251.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5038[label="130.139.251.131;1pkt 1fpkt", shape=invtriangle, color=brown];
5463[label="130.139.251.131;1pkt 1fpkt", shape=invhouse, color=bisque];
stat875[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.251.131:80, 217.180.91.253:54721}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54721: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4055--5038[label="1;1pkt 1fpkt"];
4055--5463[label="1;1pkt 1fpkt"];
5038--5463[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.180.91.253" dst_port="54721" src_ip="130.139.251.131" src_port="80"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_876{
style=filled;
color=gray75;
1141[label="148.94.2.146;d;199pkt 199fpkt", shape=diamond, color=yellow];
1288[label="148.94.164.104;d;293pkt 293fpkt", shape=diamond, color=yellow];
1326[label="217.129.77.197;s;229pkt 229fpkt", shape=diamond, color=yellow];
1440[label="130.138.11.223;d;384pkt 384fpkt", shape=diamond, color=yellow];
1577[label="219.82.187.122;s;19pkt 19fpkt", shape=diamond, color=yellow];
1658[label="219.82.187.123;s;18pkt 18fpkt", shape=diamond, color=yellow];
1687[label="210.24.71.205;s;50pkt 50fpkt", shape=diamond, color=yellow];
1933[label="207.209.23.151;s;139pkt 139fpkt", shape=diamond, color=yellow];
1934[label="219.65.40.25;s;31pkt 31fpkt", shape=diamond, color=yellow];
2131[label="190.121.68.233;s;61pkt 61fpkt", shape=diamond, color=yellow];
2401[label="148.94.2.146;d;181pkt 181fpkt", shape=hexagon, color=black];
2815[label="130.138.11.223;d;384pkt 384fpkt", shape=hexagon, color=black];
2960[label="217.129.77.197;s;229pkt 229fpkt", shape=hexagon, color=black];
3106[label="148.94.164.104;d;293pkt 293fpkt", shape=hexagon, color=black];
3453[label="219.65.40.25;30pkt 30fpkt", shape=pentagon, color=darkviolet];
3886[label="207.221.136.96;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4010[label="219.82.187.122;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4030[label="207.218.170.128;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4040[label="207.218.170.129;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4052[label="217.41.171.131;93pkt 93fpkt", shape=pentagon, color=darkviolet];
4070[label="211.41.82.134;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4165[label="190.108.168.149;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4170[label="190.108.168.150;44pkt 44fpkt", shape=pentagon, color=darkviolet];
4176[label="190.77.87.152;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4505[label="190.111.170.218;49pkt 49fpkt", shape=pentagon, color=darkviolet];
4575[label="190.121.68.233;60pkt 60fpkt", shape=pentagon, color=darkviolet];
5037[label="217.41.171.131;93pkt 93fpkt", shape=invtriangle, color=brown];
5042[label="211.41.82.134;8pkt 8fpkt", shape=invtriangle, color=brown];
5090[label="190.108.168.149;19pkt 19fpkt", shape=invtriangle, color=brown];
5092[label="190.108.168.150;44pkt 44fpkt", shape=invtriangle, color=brown];
5250[label="190.111.170.218;48pkt 48fpkt", shape=invtriangle, color=brown];
5467[label="211.41.82.134;9pkt 9fpkt", shape=invhouse, color=bisque];
stat876[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 130.138.11.223:*}[35.0046%]&lt;BR/&gt;{*:80, 148.94.164.104:*}[26.1623%]&lt;BR/&gt;{217.129.77.197:80, *:*}[20.784%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7761%)&lt;BR/&gt; 44240: (0.0959386%)&lt;BR/&gt; 3801: (0.0959386%)&lt;BR/&gt; 1863: (0.0959386%)&lt;BR/&gt; 1265: (0.0959386%)&gt;];
}
1141--1577[label="1;19pkt 19fpkt"];
1141--1658[label="1;18pkt 18fpkt"];
1141--2401[label="1;181pkt 181fpkt"];
1141--4010[label="1;18pkt 18fpkt"];
1141--4040[label="0.416667;5pkt 5fpkt"];
1141--4165[label="0.8;16pkt 16fpkt"];
1141--4170[label="1;44pkt 44fpkt"];
1141--4176[label="1;8pkt 8fpkt"];
1141--5090[label="0.842105;16pkt 16fpkt"];
1141--5092[label="1;44pkt 44fpkt"];
1288--1754[label="0.0194175;4pkt 4fpkt"];
1288--1933[label="0.676259;94pkt 94fpkt"];
1288--1934[label="0.967742;30pkt 30fpkt"];
1288--2223[label="0.0701754;4pkt 4fpkt"];
1288--2290[label="0.0727273;8pkt 8fpkt"];
1288--2330[label="0.00341297;1pkt 1fpkt"];
1288--2385[label="0.00341297;1pkt 1fpkt"];
1288--2958[label="0.142857;1pkt 1fpkt"];
1288--3105[label="0.0727273;8pkt 8fpkt"];
1288--3106[label="1;293pkt 293fpkt"];
1288--3131[label="0.00341297;1pkt 1fpkt"];
1288--3453[label="0.966667;29pkt 29fpkt"];
1288--3711[label="0.0188679;4pkt 4fpkt"];
1288--3745[label="0.0677966;4pkt 4fpkt"];
1288--3771[label="0.0707965;8pkt 8fpkt"];
1288--3930[label="0.0555556;2pkt 2fpkt"];
1288--3980[label="0.00341297;1pkt 1fpkt"];
1288--4008[label="0.00341297;1pkt 1fpkt"];
1288--4030[label="0.4;6pkt 6fpkt"];
1288--4040[label="0.583333;7pkt 7fpkt"];
1288--4052[label="0.473118;44pkt 44fpkt"];
1288--4891[label="0.0677966;4pkt 4fpkt"];
1288--4976[label="0.0540541;2pkt 2fpkt"];
1288--4998[label="0.00341297;1pkt 1fpkt"];
1288--5013[label="0.00341297;1pkt 1fpkt"];
1288--5037[label="0.473118;44pkt 44fpkt"];
1288--5437[label="0.0540541;2pkt 2fpkt"];
1288--5447[label="0.00341297;1pkt 1fpkt"];
1326--1389[label="0.00543478;1pkt 1fpkt"];
1326--1440[label="0.336245;77pkt 77fpkt"];
1326--1529[label="0.0208333;1pkt 1fpkt"];
1326--1623[label="0.010929;2pkt 2fpkt"];
1326--1861[label="0.0196078;3pkt 3fpkt"];
1326--2333[label="0.19214;44pkt 44fpkt"];
1326--2438[label="0.0447761;3pkt 3fpkt"];
1326--2440[label="0.0330579;4pkt 4fpkt"];
1326--2509[label="0.00543478;1pkt 1fpkt"];
1326--2678[label="0.0116279;2pkt 2fpkt"];
1326--2814[label="0.0174672;4pkt 4fpkt"];
1326--2815[label="0.336245;77pkt 77fpkt"];
1326--2939[label="0.0393013;9pkt 9fpkt"];
1326--2960[label="1;229pkt 229fpkt"];
1326--3132[label="0.19214;44pkt 44fpkt"];
1326--3186[label="0.00436681;1pkt 1fpkt"];
1326--3190[label="0.0338983;4pkt 4fpkt"];
1326--3201[label="0.0393013;9pkt 9fpkt"];
1440--1687[label="1;50pkt 50fpkt"];
1440--1746[label="0.0505618;9pkt 9fpkt"];
1440--1933[label="0.323741;45pkt 45fpkt"];
1440--2131[label="1;61pkt 61fpkt"];
1440--2815[label="1;384pkt 384fpkt"];
1440--2960[label="0.336245;77pkt 77fpkt"];
1440--3886[label="0.710526;27pkt 27fpkt"];
1440--4030[label="0.466667;7pkt 7fpkt"];
1440--4070[label="1;9pkt 9fpkt"];
1440--4505[label="0.959184;47pkt 47fpkt"];
1440--4575[label="1;60pkt 60fpkt"];
1440--5042[label="1;8pkt 8fpkt"];
1440--5250[label="0.958333;46pkt 46fpkt"];
1440--5467[label="1;9pkt 9fpkt"];
1577--2401[label="1;19pkt 19fpkt"];
1577--4010[label="1;18pkt 18fpkt"];
1658--2401[label="1;18pkt 18fpkt"];
1687--2815[label="1;50pkt 50fpkt"];
1933--2815[label="0.323741;45pkt 45fpkt"];
1933--3106[label="0.676259;94pkt 94fpkt"];
1934--3106[label="0.967742;30pkt 30fpkt"];
1934--3453[label="1;30pkt 30fpkt"];
2131--2815[label="1;61pkt 61fpkt"];
2131--4575[label="1;60pkt 60fpkt"];
2401--4010[label="1;18pkt 18fpkt"];
2401--4040[label="0.416667;5pkt 5fpkt"];
2401--4165[label="0.6;12pkt 12fpkt"];
2401--4170[label="0.954545;42pkt 42fpkt"];
2401--4176[label="0.75;6pkt 6fpkt"];
2401--5090[label="0.631579;12pkt 12fpkt"];
2401--5092[label="0.954545;42pkt 42fpkt"];
2815--2960[label="0.336245;77pkt 77fpkt"];
2815--3886[label="0.710526;27pkt 27fpkt"];
2815--4030[label="0.466667;7pkt 7fpkt"];
2815--4070[label="1;9pkt 9fpkt"];
2815--4505[label="0.959184;47pkt 47fpkt"];
2815--4575[label="1;60pkt 60fpkt"];
2815--5042[label="1;8pkt 8fpkt"];
2815--5250[label="0.958333;46pkt 46fpkt"];
2815--5467[label="1;9pkt 9fpkt"];
2960--3132[label="0.19214;44pkt 44fpkt"];
2960--3186[label="0.00436681;1pkt 1fpkt"];
2960--3190[label="0.0338983;4pkt 4fpkt"];
2960--3201[label="0.0393013;9pkt 9fpkt"];
3106--3131[label="0.00341297;1pkt 1fpkt"];
3106--3453[label="0.966667;29pkt 29fpkt"];
3106--3711[label="0.0188679;4pkt 4fpkt"];
3106--3745[label="0.0677966;4pkt 4fpkt"];
3106--3771[label="0.0707965;8pkt 8fpkt"];
3106--3930[label="0.0555556;2pkt 2fpkt"];
3106--3980[label="0.00341297;1pkt 1fpkt"];
3106--4008[label="0.00341297;1pkt 1fpkt"];
3106--4030[label="0.4;6pkt 6fpkt"];
3106--4040[label="0.583333;7pkt 7fpkt"];
3106--4052[label="0.473118;44pkt 44fpkt"];
3106--4891[label="0.0677966;4pkt 4fpkt"];
3106--4976[label="0.0540541;2pkt 2fpkt"];
3106--4998[label="0.00341297;1pkt 1fpkt"];
3106--5013[label="0.00341297;1pkt 1fpkt"];
3106--5037[label="0.473118;44pkt 44fpkt"];
3106--5437[label="0.0540541;2pkt 2fpkt"];
3106--5447[label="0.00341297;1pkt 1fpkt"];
4052--5037[label="1;93pkt 93fpkt"];
4070--5042[label="1;8pkt 8fpkt"];
4070--5467[label="1;9pkt 9fpkt"];
4165--5090[label="1;19pkt 19fpkt"];
4170--5092[label="1;44pkt 44fpkt"];
4505--5250[label="1;48pkt 48fpkt"];
5042--5467[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="217.129.77.197" src_port="80"/>
      <filter dst_ip="130.138.11.223" src_port="80"/>
      <filter dst_ip="148.94.164.104" src_port="80"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_877{
style=filled;
color=gray75;
4073[label="131.11.80.135;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5043[label="131.11.80.135;19pkt 19fpkt", shape=invtriangle, color=brown];
5468[label="131.11.80.135;19pkt 19fpkt", shape=invhouse, color=bisque];
stat877[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.11.80.135:*, 192.248.175.147:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 24362: (2.58621%)&lt;BR/&gt; 24361: (2.58621%)&lt;BR/&gt; 24360: (2.58621%)&lt;BR/&gt; 24359: (2.58621%)&gt;];
}
4073--5043[label="1;19pkt 19fpkt"];
4073--5468[label="1;19pkt 19fpkt"];
5043--5468[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="192.248.175.147" dst_port="80" src_ip="131.11.80.135"/>
    </slice>
    <from sec="1044163056" usec="0"/>
    <to sec="1044163069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_878{
style=filled;
color=gray75;
4077[label="162.0.212.135;31pkt 31fpkt", shape=pentagon, color=darkviolet];
5046[label="162.0.212.135;31pkt 31fpkt", shape=invtriangle, color=brown];
stat878[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.212.135:*, 200.32.0.49:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1464: (1.6129%)&lt;BR/&gt; 1462: (1.6129%)&lt;BR/&gt; 1458: (1.6129%)&lt;BR/&gt; 1456: (1.6129%)&gt;];
}
4077--5046[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="200.32.0.49" dst_port="25" src_ip="162.0.212.135"/>
    </slice>
    <from sec="1044162022" usec="0"/>
    <to sec="1044163524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20047,1.85333,503,1 1 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_879{
style=filled;
color=gray75;
98[label="165.155.201.85s;12pkt 12fpkt", shape=rectangle, color=red];
493[label="192.37.179.155d;4pkt 4fpkt", shape=rectangle, color=red];
561[label="165.155.201.85s;12pkt 12fpkt", shape=ellipse, color=green];
759[label="192.37.179.155d;4pkt 4fpkt", shape=ellipse, color=green];
1295[label="165.155.201.85;s;199pkt 199fpkt", shape=diamond, color=yellow];
1421[label="192.37.179.155;d;40pkt 40fpkt", shape=diamond, color=yellow];
1703[label="193.254.131.102;d;84pkt 84fpkt", shape=diamond, color=yellow];
2571[label="192.37.179.155;d;38pkt 38fpkt", shape=hexagon, color=black];
2791[label="165.155.201.85;s;199pkt 199fpkt", shape=hexagon, color=black];
2905[label="193.254.131.102;d;84pkt 84fpkt", shape=hexagon, color=black];
3329[label="130.139.238.8;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3831[label="165.155.201.85;198pkt 198fpkt", shape=pentagon, color=darkviolet];
4079[label="207.40.10.136;61pkt 61fpkt", shape=pentagon, color=darkviolet];
4689[label="130.139.238.8;24pkt 24fpkt", shape=invtriangle, color=brown];
4931[label="165.155.201.85;199pkt 199fpkt", shape=invtriangle, color=brown];
5048[label="207.40.10.136;60pkt 60fpkt", shape=invtriangle, color=brown];
stat879[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.201.85:*, 193.254.131.102:80}[26.2799%]&lt;BR/&gt;{207.40.10.136:*, *:80}[20.4778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5977%)&lt;BR/&gt; 2081: (0.321802%)&lt;BR/&gt; 2080: (0.321802%)&lt;BR/&gt; 2079: (0.321802%)&lt;BR/&gt; 2073: (0.321802%)&gt;];
}
98--561[label="1;12pkt 12fpkt"];
98--1295[label="1;12pkt 12fpkt"];
98--1421[label="1;12pkt 12fpkt"];
98--2571[label="1;12pkt 12fpkt"];
98--2791[label="1;12pkt 12fpkt"];
98--3831[label="1;12pkt 12fpkt"];
98--4931[label="1;12pkt 12fpkt"];
493--759[label="1;4pkt 4fpkt"];
493--896[label="0.25;1pkt 1fpkt"];
493--1295[label="0.5;2pkt 2fpkt"];
493--1328[label="1;1pkt 1fpkt"];
493--1421[label="0.75;3pkt 3fpkt"];
493--2338[label="0.25;1pkt 1fpkt"];
493--2571[label="0.75;3pkt 3fpkt"];
493--2791[label="0.5;2pkt 2fpkt"];
493--3155[label="0.25;1pkt 1fpkt"];
493--3649[label="0.25;1pkt 1fpkt"];
493--3831[label="0.5;2pkt 2fpkt"];
493--4079[label="0.25;1pkt 1fpkt"];
493--4843[label="0.25;1pkt 1fpkt"];
493--4931[label="0.5;2pkt 2fpkt"];
493--5048[label="0.25;1pkt 1fpkt"];
493--5392[label="0.25;1pkt 1fpkt"];
561--1295[label="1;12pkt 12fpkt"];
561--1421[label="1;12pkt 12fpkt"];
561--2571[label="1;12pkt 12fpkt"];
561--2791[label="1;12pkt 12fpkt"];
561--3831[label="1;12pkt 12fpkt"];
561--4931[label="1;12pkt 12fpkt"];
759--896[label="0.25;1pkt 1fpkt"];
759--1295[label="0.5;2pkt 2fpkt"];
759--1328[label="1;1pkt 1fpkt"];
759--1421[label="0.75;3pkt 3fpkt"];
759--2338[label="0.25;1pkt 1fpkt"];
759--2571[label="0.75;3pkt 3fpkt"];
759--2791[label="0.5;2pkt 2fpkt"];
759--3155[label="0.25;1pkt 1fpkt"];
759--3649[label="0.25;1pkt 1fpkt"];
759--3831[label="0.5;2pkt 2fpkt"];
759--4079[label="0.25;1pkt 1fpkt"];
759--4843[label="0.25;1pkt 1fpkt"];
759--4931[label="0.5;2pkt 2fpkt"];
759--5048[label="0.25;1pkt 1fpkt"];
759--5392[label="0.25;1pkt 1fpkt"];
1295--1322[label="0.00735294;1pkt 1fpkt"];
1295--1421[label="0.75;30pkt 30fpkt"];
1295--1703[label="0.916667;77pkt 77fpkt"];
1295--2571[label="0.789474;30pkt 30fpkt"];
1295--2791[label="1;199pkt 199fpkt"];
1295--2905[label="0.916667;77pkt 77fpkt"];
1295--3235[label="0.0201005;4pkt 4fpkt"];
1295--3238[label="0.0854271;17pkt 17fpkt"];
1295--3831[label="1;198pkt 198fpkt"];
1295--4931[label="1;199pkt 199fpkt"];
1421--2571[label="1;38pkt 38fpkt"];
1421--2791[label="0.75;30pkt 30fpkt"];
1421--3238[label="0.025;1pkt 1fpkt"];
1421--3329[label="0.04;1pkt 1fpkt"];
1421--3831[label="0.75;30pkt 30fpkt"];
1421--4079[label="0.225;9pkt 9fpkt"];
1421--4689[label="0.0416667;1pkt 1fpkt"];
1421--4931[label="0.75;30pkt 30fpkt"];
1421--5048[label="0.225;9pkt 9fpkt"];
1703--2791[label="0.916667;77pkt 77fpkt"];
1703--2905[label="1;84pkt 84fpkt"];
1703--3235[label="0.0357143;3pkt 3fpkt"];
1703--3238[label="0.130952;11pkt 11fpkt"];
1703--3831[label="0.916667;77pkt 77fpkt"];
1703--4166[label="0.0833333;7pkt 7fpkt"];
1703--4931[label="0.916667;77pkt 77fpkt"];
2571--2791[label="0.789474;30pkt 30fpkt"];
2571--3329[label="0.04;1pkt 1fpkt"];
2571--3831[label="0.789474;30pkt 30fpkt"];
2571--4079[label="0.184211;7pkt 7fpkt"];
2571--4689[label="0.0416667;1pkt 1fpkt"];
2571--4931[label="0.789474;30pkt 30fpkt"];
2571--5048[label="0.184211;7pkt 7fpkt"];
2791--2905[label="0.916667;77pkt 77fpkt"];
2791--3235[label="0.0201005;4pkt 4fpkt"];
2791--3238[label="0.0854271;17pkt 17fpkt"];
2791--3831[label="1;198pkt 198fpkt"];
2791--4931[label="1;199pkt 199fpkt"];
2905--3235[label="0.0357143;3pkt 3fpkt"];
2905--3238[label="0.130952;11pkt 11fpkt"];
2905--3831[label="0.916667;77pkt 77fpkt"];
2905--4166[label="0.0833333;7pkt 7fpkt"];
2905--4931[label="0.916667;77pkt 77fpkt"];
3329--4689[label="1;24pkt 24fpkt"];
3831--4931[label="1;198pkt 198fpkt"];
4079--5048[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="207.40.10.136"/>
      <filter dst_ip="193.254.131.102" dst_port="80" src_ip="165.155.201.85"/>
    </slice>
    <from sec="1044162140" usec="0"/>
    <to sec="1044163212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_880{
style=filled;
color=gray75;
4093[label="167.15.199.137;38pkt 38fpkt", shape=pentagon, color=darkviolet];
5056[label="167.15.199.137;38pkt 38fpkt", shape=invtriangle, color=brown];
5474[label="167.15.199.137;39pkt 39fpkt", shape=invhouse, color=bisque];
stat880[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.15.199.137:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4093--5056[label="1;38pkt 38fpkt"];
4093--5474[label="1;38pkt 38fpkt"];
5056--5474[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter src_ip="167.15.199.137"/>
    </slice>
    <from sec="1044162009" usec="0"/>
    <to sec="1044163521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696077,1.90116,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_881{
style=filled;
color=gray75;
287[label="208.184.6.139s;176pkt 176fpkt", shape=rectangle, color=red];
4098[label="208.184.6.139;203pkt 203fpkt", shape=pentagon, color=darkviolet];
5059[label="208.184.6.139;203pkt 203fpkt", shape=invtriangle, color=brown];
stat881[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.184.6.139:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
287--4098[label="0.994318;175pkt 175fpkt"];
287--5059[label="0.994318;175pkt 175fpkt"];
4098--5059[label="1;203pkt 203fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.184.6.139" src_port="1025"/>
    </slice>
    <from sec="1044163460" usec="0"/>
    <to sec="1044163493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_882{
style=filled;
color=gray75;
4102[label="212.80.144.139;138pkt 138fpkt", shape=pentagon, color=darkviolet];
5061[label="212.80.144.139;138pkt 138fpkt", shape=invtriangle, color=brown];
stat882[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.80.144.139:80, 130.139.220.42:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3967: (0.362319%)&lt;BR/&gt; 3966: (0.362319%)&lt;BR/&gt; 3965: (0.362319%)&lt;BR/&gt; 3964: (0.362319%)&gt;];
}
4102--5061[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter dst_ip="130.139.220.42" src_ip="212.80.144.139" src_port="80"/>
    </slice>
    <from sec="1044163468" usec="0"/>
    <to sec="1044163509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_883{
style=filled;
color=gray75;
4120[label="192.143.104.142;110pkt 110fpkt", shape=pentagon, color=darkviolet];
5071[label="192.143.104.142;110pkt 110fpkt", shape=invtriangle, color=brown];
stat883[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.143.104.142:1049, *:137}[81.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1049: (40.9091%)&lt;BR/&gt; 1033: (9.09091%)&gt;];
}
4120--5071[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.143.104.142" src_port="1049"/>
    </slice>
    <from sec="1044162086" usec="0"/>
    <to sec="1044162595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_884{
style=filled;
color=gray75;
4122[label="133.168.197.143;79pkt 79fpkt", shape=pentagon, color=darkviolet];
5072[label="133.168.197.143;78pkt 78fpkt", shape=invtriangle, color=brown];
5479[label="133.168.197.143;79pkt 79fpkt", shape=invhouse, color=bisque];
stat884[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.197.143:80, 217.246.49.176:*}[96.2025%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9407%)&lt;BR/&gt; 0: (0.847458%)&lt;BR/&gt; 4928: (0.635593%)&lt;BR/&gt; 4927: (0.635593%)&lt;BR/&gt; 4598: (0.635593%)&gt;];
}
4122--5072[label="1;78pkt 78fpkt"];
4122--5479[label="1;79pkt 79fpkt"];
5072--5479[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="217.246.49.176" src_ip="133.168.197.143" src_port="80"/>
    </slice>
    <from sec="1044162091" usec="0"/>
    <to sec="1044162351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_885{
style=filled;
color=gray75;
4127[label="133.168.32.144;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5075[label="133.168.32.144;1pkt 1fpkt", shape=invtriangle, color=brown];
5480[label="133.168.32.144;1pkt 1fpkt", shape=invhouse, color=bisque];
stat885[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.32.144:3041, 203.131.177.7:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3041: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
4127--5075[label="1;1pkt 1fpkt"];
4127--5480[label="1;1pkt 1fpkt"];
5075--5480[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.131.177.7" dst_port="554" src_ip="133.168.32.144" src_port="3041"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.226.132.146"/>
    </slice>
    <from sec="1044162979" usec="0"/>
    <to sec="1044163036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_888{
style=filled;
color=gray75;
4149[label="200.57.145.147;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5083[label="200.57.145.147;15pkt 15fpkt", shape=invtriangle, color=brown];
5485[label="200.57.145.147;15pkt 15fpkt", shape=invhouse, color=bisque];
stat888[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.57.145.147:*, 130.139.14.97:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4184: (3.26087%)&lt;BR/&gt; 4183: (3.26087%)&lt;BR/&gt; 4182: (3.26087%)&lt;BR/&gt; 4181: (3.26087%)&gt;];
}
4149--5083[label="1;15pkt 15fpkt"];
4149--5485[label="1;15pkt 15fpkt"];
5083--5485[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="130.139.14.97" dst_port="80" src_ip="200.57.145.147"/>
    </slice>
    <from sec="1044163374" usec="0"/>
    <to sec="1044163379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_889{
style=filled;
color=gray75;
4150[label="207.40.174.147;48pkt 48fpkt", shape=pentagon, color=darkviolet];
5084[label="207.40.174.147;48pkt 48fpkt", shape=invtriangle, color=brown];
5486[label="207.40.174.147;47pkt 47fpkt", shape=invhouse, color=bisque];
stat889[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.40.174.147:*, 217.42.61.5:80}[54.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1399: (1.04895%)&lt;BR/&gt; 1396: (1.04895%)&lt;BR/&gt; 1392: (1.04895%)&lt;BR/&gt; 1391: (1.04895%)&gt;];
}
4150--5084[label="1;48pkt 48fpkt"];
4150--5486[label="1;47pkt 47fpkt"];
5084--5486[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="217.42.61.5" dst_port="80" src_ip="207.40.174.147"/>
    </slice>
    <from sec="1044162089" usec="0"/>
    <to sec="1044163417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_890{
style=filled;
color=gray75;
4151[label="194.44.21.148;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5085[label="194.44.21.148;4pkt 4fpkt", shape=invtriangle, color=brown];
5487[label="194.44.21.148;4pkt 4fpkt", shape=invhouse, color=bisque];
stat890[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.44.21.148:80, 130.138.60.146:1479}[25%]&lt;BR/&gt;{194.44.21.148:80, 130.138.60.146:1480}[25%]&lt;BR/&gt;{194.44.21.148:80, 130.138.60.146:1481}[25%]&lt;BR/&gt;{194.44.21.148:80, 130.138.60.146:1482}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1482: (12.5%)&lt;BR/&gt; 1481: (12.5%)&lt;BR/&gt; 1480: (12.5%)&lt;BR/&gt; 1479: (12.5%)&gt;];
}
4151--5085[label="1;4pkt 4fpkt"];
4151--5487[label="1;4pkt 4fpkt"];
5085--5487[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.60.146" dst_port="1482" src_ip="194.44.21.148" src_port="80"/>
      <filter dst_ip="130.138.60.146" dst_port="1481" src_ip="194.44.21.148" src_port="80"/>
      <filter dst_ip="130.138.60.146" dst_port="1480" src_ip="194.44.21.148" src_port="80"/>
      <filter dst_ip="130.138.60.146" dst_port="1479" src_ip="194.44.21.148" src_port="80"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.111.212.148"/>
    </slice>
    <from sec="1044162945" usec="0"/>
    <to sec="1044163491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_892{
style=filled;
color=gray75;
4161[label="190.99.6.149;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5088[label="190.99.6.149;3pkt 3fpkt", shape=invtriangle, color=brown];
stat892[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.99.6.149:80, 207.164.182.16:1116}[33.3333%]&lt;BR/&gt;{190.99.6.149:80, 207.164.182.16:1119}[33.3333%]&lt;BR/&gt;{190.99.6.149:80, 207.164.182.16:1120}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1120: (16.6667%)&lt;BR/&gt; 1119: (16.6667%)&lt;BR/&gt; 1116: (16.6667%)&gt;];
}
4161--5088[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="207.164.182.16" dst_port="1120" src_ip="190.99.6.149" src_port="80"/>
      <filter dst_ip="207.164.182.16" dst_port="1119" src_ip="190.99.6.149" src_port="80"/>
      <filter dst_ip="207.164.182.16" dst_port="1116" src_ip="190.99.6.149" src_port="80"/>
    </slice>
    <from sec="1044163008" usec="0"/>
    <to sec="1044163045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_893{
style=filled;
color=gray75;
4179[label="212.5.246.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5095[label="212.5.246.152;1pkt 1fpkt", shape=invtriangle, color=brown];
stat893[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.5.246.152:80, 133.168.7.21:3138}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3138: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4179--5095[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.168.7.21" dst_port="3138" src_ip="212.5.246.152" src_port="80"/>
    </slice>
    <from sec="1044162280" usec="0"/>
    <to sec="1044162798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.145.224.154"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_895{
style=filled;
color=gray75;
4190[label="162.0.206.155;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5100[label="162.0.206.155;5pkt 5fpkt", shape=invtriangle, color=brown];
stat895[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.206.155:25, *:*}[66.6667%]&lt;BR/&gt;{162.0.206.155:*, *:6663}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (31.8182%)&lt;BR/&gt; 6663: (18.1818%)&lt;BR/&gt; 37887: (9.09091%)&lt;BR/&gt; 36252: (9.09091%)&lt;BR/&gt; 36248: (9.09091%)&gt;];
}
4190--5100[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="162.0.206.155" src_port="25"/>
      <filter dst_port="6663" src_ip="162.0.206.155"/>
    </slice>
    <from sec="1044162674" usec="0"/>
    <to sec="1044163268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_897{
style=filled;
color=gray75;
4198[label="190.78.236.156;223pkt 223fpkt", shape=pentagon, color=darkviolet];
5105[label="190.78.236.156;223pkt 223fpkt", shape=invtriangle, color=brown];
stat897[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.78.236.156:1105, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1105: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4198--5105[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.78.236.156" src_port="1105"/>
    </slice>
    <from sec="1044162176" usec="0"/>
    <to sec="1044162214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_898{
style=filled;
color=gray75;
4200[label="192.160.52.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5106[label="192.160.52.157;1pkt 1fpkt", shape=invtriangle, color=brown];
5491[label="192.160.52.157;2pkt 2fpkt", shape=invhouse, color=bisque];
stat898[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.160.52.157:80, 148.94.204.201:1131}[50%]&lt;BR/&gt;{192.160.52.157:80, 148.94.204.201:1132}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1132: (37.5%)&lt;BR/&gt; 1131: (12.5%)&gt;];
}
4200--5106[label="1;1pkt 1fpkt"];
4200--5491[label="1;1pkt 1fpkt"];
5106--5491[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.204.201" dst_port="1132" src_ip="192.160.52.157" src_port="80"/>
      <filter dst_ip="148.94.204.201" dst_port="1131" src_ip="192.160.52.157" src_port="80"/>
    </slice>
    <from sec="1044162712" usec="0"/>
    <to sec="1044162733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696077,1.90116,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_899{
style=filled;
color=gray75;
320[label="184.8.153.157s;186pkt 186fpkt", shape=rectangle, color=red];
4202[label="184.8.153.157;215pkt 215fpkt", shape=pentagon, color=darkviolet];
5108[label="184.8.153.157;215pkt 215fpkt", shape=invtriangle, color=brown];
stat899[shape=component, label=&lt;Rules:&lt;BR/&gt;{184.8.153.157:1028, *:137}[92.1296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1028: (47.2403%)&lt;BR/&gt; 1027: (2.75974%)&gt;];
}
320--4202[label="0.994624;185pkt 185fpkt"];
320--5108[label="0.994624;185pkt 185fpkt"];
4202--5108[label="1;215pkt 215fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="184.8.153.157" src_port="1028"/>
    </slice>
    <from sec="1044162747" usec="0"/>
    <to sec="1044163304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_900{
style=filled;
color=gray75;
4204[label="190.161.13.158;121pkt 121fpkt", shape=pentagon, color=darkviolet];
5109[label="190.161.13.158;121pkt 121fpkt", shape=invtriangle, color=brown];
stat900[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.161.13.158:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4204--5109[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.161.13.158" src_port="1025"/>
    </slice>
    <from sec="1044162312" usec="0"/>
    <to sec="1044162347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_901{
style=filled;
color=gray75;
4206[label="162.0.32.158;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5110[label="162.0.32.158;1pkt 1fpkt", shape=invtriangle, color=brown];
5492[label="162.0.32.158;1pkt 1fpkt", shape=invhouse, color=bisque];
stat901[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.0.32.158:1412, 149.155.180.245:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1412: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
4206--5110[label="1;1pkt 1fpkt"];
4206--5492[label="1;1pkt 1fpkt"];
5110--5492[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.155.180.245" dst_port="25" src_ip="162.0.32.158" src_port="1412"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_902{
style=filled;
color=gray75;
4213[label="203.96.152.159;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5115[label="203.96.152.159;4pkt 4fpkt", shape=invtriangle, color=brown];
5494[label="203.96.152.159;4pkt 4fpkt", shape=invhouse, color=bisque];
stat902[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.96.152.159:1863, 133.168.186.49:2120}[25%]&lt;BR/&gt;{203.96.152.159:1863, 133.168.144.77:1107}[25%]&lt;BR/&gt;{203.96.152.159:1863, 206.34.102.161:3016}[25%]&lt;BR/&gt;{203.96.152.159:1863, 133.168.118.198:1081}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2120: (13.6364%)&lt;BR/&gt; 1107: (13.6364%)&lt;BR/&gt; 1081: (13.6364%)&lt;BR/&gt; 3016: (9.09091%)&gt;];
}
4213--5115[label="1;3pkt 3fpkt"];
4213--5494[label="1;3pkt 3fpkt"];
5115--5494[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="133.168.118.198" dst_port="1081" src_ip="203.96.152.159" src_port="1863"/>
      <filter dst_ip="206.34.102.161" dst_port="3016" src_ip="203.96.152.159" src_port="1863"/>
      <filter dst_ip="133.168.144.77" dst_port="1107" src_ip="203.96.152.159" src_port="1863"/>
      <filter dst_ip="133.168.186.49" dst_port="2120" src_ip="203.96.152.159" src_port="1863"/>
    </slice>
    <from sec="1044162142" usec="0"/>
    <to sec="1044163519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.771364,1.91509,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_903{
style=filled;
color=gray75;
2224[label="198.89.188.23;d;178pkt 178fpkt", shape=diamond, color=yellow];
2318[label="212.42.153.2;s;119pkt 119fpkt", shape=diamond, color=yellow];
4214[label="212.42.153.159;121pkt 121fpkt", shape=pentagon, color=darkviolet];
5116[label="212.42.153.159;122pkt 122fpkt", shape=invtriangle, color=brown];
stat903[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.42.153.159:80, 198.89.188.23:*}[46.2121%]&lt;BR/&gt;{212.42.153.2:80, 198.89.188.23:*}[44.697%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1481%)&lt;BR/&gt; 53: (2.5%)&lt;BR/&gt; 0: (0.37037%)&lt;BR/&gt; 1663: (0.277778%)&lt;BR/&gt; 1642: (0.277778%)&gt;];
}
2224--2318[label="0.991597;118pkt 118fpkt"];
2224--3292[label="0.04;1pkt 1fpkt"];
2224--4214[label="0.297521;36pkt 36fpkt"];
2224--5116[label="0.303279;37pkt 37fpkt"];
4214--5116[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_ip="198.89.188.23" src_ip="212.42.153.159" src_port="80"/>
      <filter dst_ip="198.89.188.23" src_ip="212.42.153.2" src_port="80"/>
    </slice>
    <from sec="1044162006" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_904{
style=filled;
color=gray75;
4215[label="189.101.164.159;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5117[label="189.101.164.159;2pkt 2fpkt", shape=invtriangle, color=brown];
stat904[shape=component, label=&lt;Rules:&lt;BR/&gt;{189.101.164.159:80, 207.164.190.196:1647}[33.3333%]&lt;BR/&gt;{189.101.164.159:80, 207.164.190.196:1648}[33.3333%]&lt;BR/&gt;{189.101.164.159:80, 207.164.190.196:1653}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1653: (20%)&lt;BR/&gt; 1648: (20%)&lt;BR/&gt; 1647: (10%)&gt;];
}
4215--5117[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="207.164.190.196" dst_port="1653" src_ip="189.101.164.159" src_port="80"/>
      <filter dst_ip="207.164.190.196" dst_port="1648" src_ip="189.101.164.159" src_port="80"/>
      <filter dst_ip="207.164.190.196" dst_port="1647" src_ip="189.101.164.159" src_port="80"/>
    </slice>
    <from sec="1044163475" usec="0"/>
    <to sec="1044163502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_905{
style=filled;
color=gray75;
4221[label="219.95.70.160;218pkt 218fpkt", shape=pentagon, color=darkviolet];
5119[label="219.95.70.160;217pkt 217fpkt", shape=invtriangle, color=brown];
stat905[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.95.70.160:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4221--5119[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.95.70.160" src_port="1026"/>
    </slice>
    <from sec="1044162560" usec="0"/>
    <to sec="1044162594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_906{
style=filled;
color=gray75;
4223[label="207.171.222.160;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5121[label="207.171.222.160;2pkt 2fpkt", shape=invtriangle, color=brown];
stat906[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.171.222.160:80, 137.121.207.78:20129}[50%]&lt;BR/&gt;{207.171.222.160:80, 200.32.85.128:41733}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41733: (25%)&lt;BR/&gt; 20129: (25%)&gt;];
}
4223--5121[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.32.85.128" dst_port="41733" src_ip="207.171.222.160" src_port="80"/>
      <filter dst_ip="137.121.207.78" dst_port="20129" src_ip="207.171.222.160" src_port="80"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.81.146.161"/>
    </slice>
    <from sec="1044162209" usec="0"/>
    <to sec="1044162229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.974221,1.90129,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_908{
style=filled;
color=gray75;
329[label="190.22.88.162s;148pkt 148fpkt", shape=rectangle, color=red];
4230[label="190.22.88.162;237pkt 237fpkt", shape=pentagon, color=darkviolet];
5126[label="190.22.88.162;238pkt 238fpkt", shape=invtriangle, color=brown];
5498[label="190.22.88.162;238pkt 238fpkt", shape=invhouse, color=bisque];
stat908[shape=component, label=&lt;Rules:&lt;BR/&gt;{190.22.88.162:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
329--4230[label="0.993243;147pkt 147fpkt"];
329--5126[label="1;148pkt 148fpkt"];
329--5498[label="1;148pkt 148fpkt"];
4230--5126[label="1;237pkt 237fpkt"];
4230--5498[label="1;237pkt 237fpkt"];
5126--5498[label="1;238pkt 238fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="190.22.88.162" src_port="1025"/>
    </slice>
    <from sec="1044162350" usec="0"/>
    <to sec="1044162388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_910{
style=filled;
color=gray75;
4233[label="207.171.222.162;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5128[label="207.171.222.162;15pkt 15fpkt", shape=invtriangle, color=brown];
stat910[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.171.222.162:0, *:0}[60%]&lt;BR/&gt;{207.171.222.162:80, *:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (58.6207%)&lt;BR/&gt; 80: (20.6897%)&lt;BR/&gt; 64027: (3.44828%)&lt;BR/&gt; 50518: (3.44828%)&lt;BR/&gt; 50517: (3.44828%)&gt;];
}
4233--5128[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="207.171.222.162" src_port="80"/>
      <filter src_ip="207.171.222.162"/>
    </slice>
    <from sec="1044162037" usec="0"/>
    <to sec="1044163431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.974221,1.90129,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_911{
style=filled;
color=gray75;
331[label="219.70.48.163s;123pkt 123fpkt", shape=rectangle, color=red];
4236[label="219.70.48.163;228pkt 228fpkt", shape=pentagon, color=darkviolet];
5130[label="219.70.48.163;228pkt 228fpkt", shape=invtriangle, color=brown];
5500[label="219.70.48.163;228pkt 228fpkt", shape=invhouse, color=bisque];
stat911[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.70.48.163:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
331--4236[label="0.99187;122pkt 122fpkt"];
331--5130[label="0.99187;122pkt 122fpkt"];
331--5500[label="0.99187;122pkt 122fpkt"];
4236--5130[label="1;228pkt 228fpkt"];
4236--5500[label="1;228pkt 228fpkt"];
5130--5500[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.70.48.163" src_port="1029"/>
    </slice>
    <from sec="1044163193" usec="0"/>
    <to sec="1044163232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.217.150.163"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.193.161.163"/>
    </slice>
    <from sec="1044162011" usec="0"/>
    <to sec="1044163504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.16.104.165"/>
    </slice>
    <from sec="1044163213" usec="0"/>
    <to sec="1044163360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_915{
style=filled;
color=gray75;
4255[label="208.101.118.166;134pkt 134fpkt", shape=pentagon, color=darkviolet];
5136[label="208.101.118.166;134pkt 134fpkt", shape=invtriangle, color=brown];
stat915[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.101.118.166:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4255--5136[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.101.118.166" src_port="1025"/>
    </slice>
    <from sec="1044162243" usec="0"/>
    <to sec="1044162285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_916{
style=filled;
color=gray75;
4259[label="130.139.218.167;22pkt 22fpkt", shape=pentagon, color=darkviolet];
5139[label="130.139.218.167;23pkt 23fpkt", shape=invtriangle, color=brown];
stat916[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.218.167:*, *:25}[47.8261%]&lt;BR/&gt;{130.139.218.167:25, *:*}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (36.6667%)&lt;BR/&gt; 80: (8.88889%)&lt;BR/&gt; 2352: (4.44444%)&lt;BR/&gt; 113: (4.44444%)&lt;BR/&gt; 2302: (3.33333%)&gt;];
}
4259--5139[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="130.139.218.167" src_port="25"/>
      <filter dst_port="25" src_ip="130.139.218.167"/>
    </slice>
    <from sec="1044162044" usec="0"/>
    <to sec="1044163525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_917{
style=filled;
color=gray75;
4262[label="217.129.82.168;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5140[label="217.129.82.168;5pkt 5fpkt", shape=invtriangle, color=brown];
stat917[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.129.82.168:80, 130.138.11.223:44571}[20%]&lt;BR/&gt;{217.129.82.168:80, 130.138.11.223:44572}[20%]&lt;BR/&gt;{217.129.82.168:80, 130.138.11.223:44573}[20%]&lt;BR/&gt;{217.129.82.168:80, 130.138.11.223:44574}[20%]&lt;BR/&gt;{217.129.82.168:80, 130.138.11.223:44575}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44575: (10%)&lt;BR/&gt; 44574: (10%)&lt;BR/&gt; 44573: (10%)&lt;BR/&gt; 44572: (10%)&gt;];
}
4262--5140[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.11.223" dst_port="44575" src_ip="217.129.82.168" src_port="80"/>
      <filter dst_ip="130.138.11.223" dst_port="44574" src_ip="217.129.82.168" src_port="80"/>
      <filter dst_ip="130.138.11.223" dst_port="44573" src_ip="217.129.82.168" src_port="80"/>
      <filter dst_ip="130.138.11.223" dst_port="44572" src_ip="217.129.82.168" src_port="80"/>
      <filter dst_ip="130.138.11.223" dst_port="44571" src_ip="217.129.82.168" src_port="80"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_919{
style=filled;
color=gray75;
4267[label="209.12.53.169;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5144[label="209.12.53.169;17pkt 17fpkt", shape=invtriangle, color=brown];
stat919[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.12.53.169:0, *:0}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.9394%)&lt;BR/&gt; 11004: (3.0303%)&lt;BR/&gt; 179: (3.0303%)&gt;];
}
4267--5144[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="209.12.53.169"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_920{
style=filled;
color=gray75;
4275[label="206.6.44.170;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5147[label="206.6.44.170;12pkt 12fpkt", shape=invtriangle, color=brown];
stat920[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.6.44.170:0, *:0}[66.6667%]&lt;BR/&gt;{206.6.44.170:*, 166.94.214.93:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (69.5652%)&lt;BR/&gt; 8080: (4.34783%)&lt;BR/&gt; 6588: (4.34783%)&lt;BR/&gt; 2356: (4.34783%)&lt;BR/&gt; 2280: (4.34783%)&gt;];
}
4275--5147[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="166.94.214.93" src_ip="206.6.44.170"/>
      <filter src_ip="206.6.44.170"/>
    </slice>
    <from sec="1044162330" usec="0"/>
    <to sec="1044163379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_921{
style=filled;
color=gray75;
4299[label="207.221.132.174;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5160[label="207.221.132.174;1pkt 1fpkt", shape=invtriangle, color=brown];
stat921[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.221.132.174:80, 207.164.182.16:1180}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1180: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4299--5160[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.164.182.16" dst_port="1180" src_ip="207.221.132.174" src_port="80"/>
    </slice>
    <from sec="1044162400" usec="0"/>
    <to sec="1044163303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.212.31.175"/>
    </slice>
    <from sec="1044162885" usec="0"/>
    <to sec="1044162962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_923{
style=filled;
color=gray75;
4323[label="208.110.100.179;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5166[label="208.110.100.179;8pkt 8fpkt", shape=invtriangle, color=brown];
5512[label="208.110.100.179;8pkt 8fpkt", shape=invhouse, color=bisque];
stat923[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.110.100.179:*, 130.138.25.80:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1741: (6.25%)&lt;BR/&gt; 1740: (6.25%)&lt;BR/&gt; 1737: (6.25%)&lt;BR/&gt; 1736: (6.25%)&gt;];
}
4323--5166[label="1;8pkt 8fpkt"];
4323--5512[label="1;8pkt 8fpkt"];
5166--5512[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.25.80" dst_port="80" src_ip="208.110.100.179"/>
    </slice>
    <from sec="1044163465" usec="0"/>
    <to sec="1044163488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_925{
style=filled;
color=gray75;
4335[label="202.196.175.181;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5172[label="202.196.175.181;18pkt 18fpkt", shape=invtriangle, color=brown];
5518[label="202.196.175.181;19pkt 19fpkt", shape=invhouse, color=bisque];
stat925[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.196.175.181:*, 206.6.43.110:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63666: (2.72727%)&lt;BR/&gt; 63665: (2.72727%)&lt;BR/&gt; 63664: (2.72727%)&lt;BR/&gt; 63663: (2.72727%)&lt;BR/&gt; 63662: (2.72727%)&gt;];
}
4335--5172[label="1;18pkt 18fpkt"];
4335--5518[label="1;18pkt 18fpkt"];
5172--5518[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="206.6.43.110" src_ip="202.196.175.181"/>
    </slice>
    <from sec="1044162005" usec="0"/>
    <to sec="1044162023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.96.47.184"/>
    </slice>
    <from sec="1044162002" usec="0"/>
    <to sec="1044163525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_927{
style=filled;
color=gray75;
4349[label="211.183.49.185;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5177[label="211.183.49.185;8pkt 8fpkt", shape=invtriangle, color=brown];
5522[label="211.183.49.185;9pkt 9fpkt", shape=invhouse, color=bisque];
stat927[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.183.49.185:80, 148.94.134.133:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33356: (5.76923%)&lt;BR/&gt; 33355: (5.76923%)&lt;BR/&gt; 33354: (5.76923%)&lt;BR/&gt; 33350: (5.76923%)&gt;];
}
4349--5177[label="1;8pkt 8fpkt"];
4349--5522[label="1;9pkt 9fpkt"];
5177--5522[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.134.133" src_ip="211.183.49.185" src_port="80"/>
    </slice>
    <from sec="1044162429" usec="0"/>
    <to sec="1044162813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_928{
style=filled;
color=gray75;
4351[label="207.40.185.185;50pkt 50fpkt", shape=pentagon, color=darkviolet];
5179[label="207.40.185.185;49pkt 49fpkt", shape=invtriangle, color=brown];
5523[label="207.40.185.185;49pkt 49fpkt", shape=invhouse, color=bisque];
stat928[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.40.185.185:*, 128.197.82.6:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50025: (1.01351%)&lt;BR/&gt; 50024: (1.01351%)&lt;BR/&gt; 50023: (1.01351%)&lt;BR/&gt; 50022: (1.01351%)&gt;];
}
4351--5179[label="1;49pkt 49fpkt"];
4351--5523[label="1;49pkt 49fpkt"];
5179--5523[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="128.197.82.6" dst_port="80" src_ip="207.40.185.185"/>
    </slice>
    <from sec="1044162251" usec="0"/>
    <to sec="1044162262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.91.201.185"/>
    </slice>
    <from sec="1044162012" usec="0"/>
    <to sec="1044163528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_930{
style=filled;
color=gray75;
4356[label="219.97.94.187;171pkt 171fpkt", shape=pentagon, color=darkviolet];
5182[label="219.97.94.187;170pkt 170fpkt", shape=invtriangle, color=brown];
stat930[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.97.94.187:1232, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1232: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4356--5182[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.97.94.187" src_port="1232"/>
    </slice>
    <from sec="1044162721" usec="0"/>
    <to sec="1044162750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_931{
style=filled;
color=gray75;
1287[label="130.139.48.64;d;189pkt 189fpkt", shape=diamond, color=yellow];
1430[label="208.167.202.118;s;102pkt 102fpkt", shape=diamond, color=yellow];
2310[label="161.121.8.214;s;38pkt 38fpkt", shape=diamond, color=yellow];
2526[label="208.167.202.118;s;102pkt 102fpkt", shape=hexagon, color=black];
4376[label="161.121.8.192;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4480[label="161.121.8.214;46pkt 46fpkt", shape=pentagon, color=darkviolet];
5190[label="161.121.8.192;10pkt 10fpkt", shape=invtriangle, color=brown];
stat931[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.167.202.118:80, 130.139.48.64:*}[46.1538%]&lt;BR/&gt;{161.121.8.214:80, *:*}[20.8145%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6976%)&lt;BR/&gt; 1847: (0.403226%)&lt;BR/&gt; 1845: (0.403226%)&lt;BR/&gt; 1839: (0.403226%)&lt;BR/&gt; 1835: (0.403226%)&gt;];
}
1287--1403[label="0.00529101;1pkt 1fpkt"];
1287--1430[label="1;102pkt 102fpkt"];
1287--2310[label="0.368421;14pkt 14fpkt"];
1287--2491[label="0.0229008;3pkt 3fpkt"];
1287--2526[label="1;102pkt 102fpkt"];
1287--4376[label="1;9pkt 9fpkt"];
1287--4421[label="0.0582011;11pkt 11fpkt"];
1287--4480[label="0.304348;14pkt 14fpkt"];
1287--5190[label="1;10pkt 10fpkt"];
1287--5543[label="0.0582011;11pkt 11fpkt"];
1430--2526[label="1;102pkt 102fpkt"];
2310--4480[label="1;38pkt 38fpkt"];
4376--5190[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="161.121.8.214" src_port="80"/>
      <filter dst_ip="130.139.48.64" src_ip="208.167.202.118" src_port="80"/>
    </slice>
    <from sec="1044162047" usec="0"/>
    <to sec="1044163527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.969254,1.90654,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_933{
style=filled;
color=gray75;
2130[label="207.40.174.192;s;209pkt 209fpkt", shape=diamond, color=yellow];
2198[label="209.208.70.255;d;10pkt 10fpkt", shape=diamond, color=yellow];
2953[label="207.40.174.192;s;159pkt 159fpkt", shape=hexagon, color=black];
4380[label="207.40.174.192;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5193[label="207.40.174.192;4pkt 4fpkt", shape=invtriangle, color=brown];
stat933[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.40.174.192:*, 213.252.48.157:80}[20.1878%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.8553%)&lt;BR/&gt; 1755: (6.71835%)&lt;BR/&gt; 8805: (4.13437%)&lt;BR/&gt; 443: (1.29199%)&lt;BR/&gt; 1178: (0.387597%)&gt;];
}
2130--2198[label="1;10pkt 10fpkt"];
2130--2953[label="1;159pkt 159fpkt"];
2130--3243[label="0.0239234;5pkt 5fpkt"];
2130--4380[label="0.2;1pkt 1fpkt"];
2198--2953[label="0.8;8pkt 8fpkt"];
2953--4380[label="0.2;1pkt 1fpkt"];
4380--5193[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="213.252.48.157" dst_port="80" src_ip="207.40.174.192"/>
    </slice>
    <from sec="1044162843" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_934{
style=filled;
color=gray75;
4391[label="208.51.28.195;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5199[label="208.51.28.195;20pkt 20fpkt", shape=invtriangle, color=brown];
5534[label="208.51.28.195;17pkt 17fpkt", shape=invhouse, color=bisque];
stat934[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.51.28.195:80, 130.139.168.200:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40711: (2.63158%)&lt;BR/&gt; 40710: (2.63158%)&lt;BR/&gt; 40709: (2.63158%)&lt;BR/&gt; 40708: (2.63158%)&gt;];
}
4391--5199[label="1;20pkt 20fpkt"];
4391--5534[label="1;17pkt 17fpkt"];
5199--5534[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="130.139.168.200" src_ip="208.51.28.195" src_port="80"/>
    </slice>
    <from sec="1044163467" usec="0"/>
    <to sec="1044163479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_935{
style=filled;
color=gray75;
4394[label="209.198.19.196;198pkt 198fpkt", shape=pentagon, color=darkviolet];
5200[label="209.198.19.196;198pkt 198fpkt", shape=invtriangle, color=brown];
stat935[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.198.19.196:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4394--5200[label="1;198pkt 198fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.198.19.196" src_port="1025"/>
    </slice>
    <from sec="1044162388" usec="0"/>
    <to sec="1044162420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_936{
style=filled;
color=gray75;
4397[label="193.226.196.196;145pkt 145fpkt", shape=pentagon, color=darkviolet];
5202[label="193.226.196.196;145pkt 145fpkt", shape=invtriangle, color=brown];
5536[label="193.226.196.196;145pkt 145fpkt", shape=invhouse, color=bisque];
stat936[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.226.196.196:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4397--5202[label="1;145pkt 145fpkt"];
4397--5536[label="1;145pkt 145fpkt"];
5202--5536[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.226.196.196" src_port="1025"/>
    </slice>
    <from sec="1044162816" usec="0"/>
    <to sec="1044162839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02936,1.91522,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_937{
style=filled;
color=gray75;
973[label="207.164.191.45;d;2pkt 2fpkt", shape=diamond, color=yellow];
974[label="221.80.4.109;s;1pkt 1fpkt", shape=diamond, color=yellow];
3952[label="221.80.4.109;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4398[label="216.209.14.197;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5203[label="216.209.14.197;1pkt 1fpkt", shape=invtriangle, color=brown];
5537[label="216.209.14.197;1pkt 1fpkt", shape=invhouse, color=bisque];
stat937[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.80.4.109:6699, 207.164.191.45:1126}[50%]&lt;BR/&gt;{216.209.14.197:6699, 207.164.191.45:1132}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (50%)&lt;BR/&gt; 1132: (28.5714%)&lt;BR/&gt; 1126: (21.4286%)&gt;];
}
973--974[label="1;1pkt 1fpkt"];
973--3952[label="1;1pkt 1fpkt"];
973--4398[label="1;1pkt 1fpkt"];
973--5203[label="1;1pkt 1fpkt"];
973--5537[label="1;1pkt 1fpkt"];
974--3952[label="1;1pkt 1fpkt"];
4398--5203[label="1;1pkt 1fpkt"];
4398--5537[label="1;1pkt 1fpkt"];
5203--5537[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.164.191.45" dst_port="1132" src_ip="216.209.14.197" src_port="6699"/>
      <filter dst_ip="207.164.191.45" dst_port="1126" src_ip="221.80.4.109" src_port="6699"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_938{
style=filled;
color=gray75;
981[label="130.139.66.2;d;11pkt 11fpkt", shape=diamond, color=yellow];
1028[label="130.138.44.104;d;104pkt 104fpkt", shape=diamond, color=yellow];
1029[label="194.44.20.22;s;1pkt 1fpkt", shape=diamond, color=yellow];
1073[label="190.25.76.194;s;3pkt 3fpkt", shape=diamond, color=yellow];
1251[label="198.119.39.209;s;53pkt 53fpkt", shape=diamond, color=yellow];
2439[label="194.44.20.22;s;1pkt 1fpkt", shape=hexagon, color=black];
2880[label="198.119.39.209;s;43pkt 43fpkt", shape=hexagon, color=black];
4035[label="201.227.112.129;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4386[label="190.25.76.194;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4399[label="209.242.145.197;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4460[label="198.119.39.209;53pkt 53fpkt", shape=pentagon, color=darkviolet];
4479[label="209.242.145.213;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5197[label="190.25.76.194;1pkt 1fpkt", shape=invtriangle, color=brown];
5204[label="209.242.145.197;27pkt 27fpkt", shape=invtriangle, color=brown];
5231[label="198.119.39.209;52pkt 52fpkt", shape=invtriangle, color=brown];
5532[label="190.25.76.194;2pkt 2fpkt", shape=invhouse, color=bisque];
5538[label="209.242.145.197;27pkt 27fpkt", shape=invhouse, color=bisque];
5549[label="198.119.39.209;53pkt 53fpkt", shape=invhouse, color=bisque];
stat938[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 130.138.44.104:*}[48.7047%]&lt;BR/&gt;{198.119.39.209:53, *:*}[27.4611%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (29.4971%)&lt;BR/&gt; 80: (22.147%)&lt;BR/&gt; 1024: (1.45068%)&lt;BR/&gt; 5121: (1.06383%)&lt;BR/&gt; 4877: (0.967118%)&gt;];
}
981--1073[label="1;3pkt 3fpkt"];
981--1251[label="0.0909091;1pkt 1fpkt"];
981--2880[label="0.0909091;1pkt 1fpkt"];
981--4386[label="1;1pkt 1fpkt"];
981--4460[label="0.0909091;1pkt 1fpkt"];
981--5197[label="1;1pkt 1fpkt"];
981--5231[label="0.0909091;1pkt 1fpkt"];
981--5532[label="1;2pkt 2fpkt"];
981--5549[label="0.0909091;1pkt 1fpkt"];
1028--1029[label="1;1pkt 1fpkt"];
1028--1144[label="0.00961538;1pkt 1fpkt"];
1028--1251[label="0.0188679;1pkt 1fpkt"];
1028--2439[label="1;1pkt 1fpkt"];
1028--2880[label="0.0232558;1pkt 1fpkt"];
1028--3391[label="0.0769231;2pkt 2fpkt"];
1028--3524[label="0.125;1pkt 1fpkt"];
1028--3978[label="0.0714286;1pkt 1fpkt"];
1028--4035[label="0.129032;4pkt 4fpkt"];
1028--4358[label="0.00961538;1pkt 1fpkt"];
1028--4375[label="0.0294118;2pkt 2fpkt"];
1028--4399[label="1;27pkt 27fpkt"];
1028--4460[label="0.0188679;1pkt 1fpkt"];
1028--4479[label="1;27pkt 27fpkt"];
1028--4719[label="0.0769231;2pkt 2fpkt"];
1028--4777[label="0.142857;1pkt 1fpkt"];
1028--5184[label="0.00961538;1pkt 1fpkt"];
1028--5204[label="1;27pkt 27fpkt"];
1028--5231[label="0.0192308;1pkt 1fpkt"];
1028--5338[label="0.04;1pkt 1fpkt"];
1028--5365[label="0.142857;1pkt 1fpkt"];
1028--5538[label="1;27pkt 27fpkt"];
1028--5549[label="0.0188679;1pkt 1fpkt"];
1029--2439[label="1;1pkt 1fpkt"];
1073--4386[label="1;1pkt 1fpkt"];
1073--5197[label="1;1pkt 1fpkt"];
1073--5532[label="1;2pkt 2fpkt"];
1251--1379[label="0.0188679;1pkt 1fpkt"];
1251--1382[label="0.0188679;1pkt 1fpkt"];
1251--1475[label="0.0188679;1pkt 1fpkt"];
1251--1561[label="0.0188679;1pkt 1fpkt"];
1251--1921[label="0.0188679;1pkt 1fpkt"];
1251--1974[label="0.0188679;1pkt 1fpkt"];
1251--1977[label="0.0188679;1pkt 1fpkt"];
1251--2105[label="0.0188679;1pkt 1fpkt"];
1251--2274[label="0.0188679;1pkt 1fpkt"];
1251--2378[label="0.0188679;1pkt 1fpkt"];
1251--2553[label="0.0188679;1pkt 1fpkt"];
1251--2559[label="0.0188679;1pkt 1fpkt"];
1251--2673[label="0.0377358;2pkt 2fpkt"];
1251--2880[label="1;43pkt 43fpkt"];
1251--2887[label="0.0188679;1pkt 1fpkt"];
1251--2892[label="0.0188679;1pkt 1fpkt"];
1251--2927[label="0.0188679;1pkt 1fpkt"];
1251--2935[label="0.0188679;1pkt 1fpkt"];
1251--2938[label="0.0188679;1pkt 1fpkt"];
1251--3187[label="0.0188679;1pkt 1fpkt"];
1251--3199[label="0.0188679;1pkt 1fpkt"];
1251--3216[label="0.0188679;1pkt 1fpkt"];
1251--3231[label="0.0188679;1pkt 1fpkt"];
1251--3248[label="0.0188679;1pkt 1fpkt"];
1251--4460[label="1;53pkt 53fpkt"];
1251--5231[label="1;52pkt 52fpkt"];
1251--5549[label="1;53pkt 53fpkt"];
2880--2887[label="0.0232558;1pkt 1fpkt"];
2880--2892[label="0.0232558;1pkt 1fpkt"];
2880--2927[label="0.0232558;1pkt 1fpkt"];
2880--2935[label="0.0232558;1pkt 1fpkt"];
2880--2938[label="0.0232558;1pkt 1fpkt"];
2880--3187[label="0.0232558;1pkt 1fpkt"];
2880--3199[label="0.0232558;1pkt 1fpkt"];
2880--3216[label="0.0232558;1pkt 1fpkt"];
2880--3231[label="0.0232558;1pkt 1fpkt"];
2880--3248[label="0.0232558;1pkt 1fpkt"];
2880--4460[label="1;43pkt 43fpkt"];
2880--5231[label="0.976744;42pkt 42fpkt"];
2880--5549[label="1;43pkt 43fpkt"];
4386--5197[label="1;1pkt 1fpkt"];
4386--5532[label="1;1pkt 1fpkt"];
4399--5204[label="1;27pkt 27fpkt"];
4399--5538[label="1;27pkt 27fpkt"];
4460--5231[label="1;52pkt 52fpkt"];
4460--5549[label="1;53pkt 53fpkt"];
5197--5532[label="1;1pkt 1fpkt"];
5204--5538[label="1;27pkt 27fpkt"];
5231--5549[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter src_ip="198.119.39.209" src_port="53"/>
      <filter dst_ip="130.138.44.104" src_port="80"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.238.233.201"/>
    </slice>
    <from sec="1044162282" usec="0"/>
    <to sec="1044162775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_943{
style=filled;
color=gray75;
4424[label="204.104.168.202;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5216[label="204.104.168.202;1pkt 1fpkt", shape=invtriangle, color=brown];
5544[label="204.104.168.202;2pkt 2fpkt", shape=invhouse, color=bisque];
stat943[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.104.168.202:80, 148.94.202.78:1892}[50%]&lt;BR/&gt;{204.104.168.202:80, 148.94.202.78:1893}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1893: (30%)&lt;BR/&gt; 1892: (20%)&gt;];
}
4424--5216[label="1;1pkt 1fpkt"];
4424--5544[label="1;2pkt 2fpkt"];
5216--5544[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.202.78" dst_port="1893" src_ip="204.104.168.202" src_port="80"/>
      <filter dst_ip="148.94.202.78" dst_port="1892" src_ip="204.104.168.202" src_port="80"/>
    </slice>
    <from sec="1044162289" usec="0"/>
    <to sec="1044162327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.40.186.203"/>
    </slice>
    <from sec="1044162028" usec="0"/>
    <to sec="1044163523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.696077,1.90116,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_945{
style=filled;
color=gray75;
400[label="203.229.139.204s;125pkt 125fpkt", shape=rectangle, color=red];
4434[label="203.229.139.204;232pkt 232fpkt", shape=pentagon, color=darkviolet];
5221[label="203.229.139.204;232pkt 232fpkt", shape=invtriangle, color=brown];
stat945[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.229.139.204:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
400--4434[label="0.992;124pkt 124fpkt"];
400--5221[label="0.992;124pkt 124fpkt"];
4434--5221[label="1;232pkt 232fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.229.139.204" src_port="1029"/>
    </slice>
    <from sec="1044163057" usec="0"/>
    <to sec="1044163096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_946{
style=filled;
color=gray75;
4436[label="192.198.238.204;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5222[label="192.198.238.204;5pkt 5fpkt", shape=invtriangle, color=brown];
5546[label="192.198.238.204;5pkt 5fpkt", shape=invhouse, color=bisque];
stat946[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.198.238.204:80, 133.168.7.16:1250}[20%]&lt;BR/&gt;{192.198.238.204:80, 133.168.7.16:1251}[20%]&lt;BR/&gt;{192.198.238.204:80, 133.168.7.16:1260}[20%]&lt;BR/&gt;{192.198.238.204:80, 133.168.7.16:1261}[20%]&lt;BR/&gt;{192.198.238.204:80, 133.168.7.16:1316}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1316: (10.7143%)&lt;BR/&gt; 1261: (10.7143%)&lt;BR/&gt; 1260: (10.7143%)&lt;BR/&gt; 1251: (10.7143%)&gt;];
}
4436--5222[label="1;4pkt 4fpkt"];
4436--5546[label="1;4pkt 4fpkt"];
5222--5546[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="133.168.7.16" dst_port="1316" src_ip="192.198.238.204" src_port="80"/>
      <filter dst_ip="133.168.7.16" dst_port="1261" src_ip="192.198.238.204" src_port="80"/>
      <filter dst_ip="133.168.7.16" dst_port="1260" src_ip="192.198.238.204" src_port="80"/>
      <filter dst_ip="133.168.7.16" dst_port="1251" src_ip="192.198.238.204" src_port="80"/>
      <filter dst_ip="133.168.7.16" dst_port="1250" src_ip="192.198.238.204" src_port="80"/>
    </slice>
    <from sec="1044162567" usec="0"/>
    <to sec="1044163307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_947{
style=filled;
color=gray75;
4445[label="206.98.131.206;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5226[label="206.98.131.206;21pkt 21fpkt", shape=invtriangle, color=brown];
stat947[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.98.131.206:80, 130.138.120.239:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4759: (2.38095%)&lt;BR/&gt; 4758: (2.38095%)&lt;BR/&gt; 4727: (2.38095%)&lt;BR/&gt; 4726: (2.38095%)&gt;];
}
4445--5226[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.120.239" src_ip="206.98.131.206" src_port="80"/>
    </slice>
    <from sec="1044162034" usec="0"/>
    <to sec="1044162141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_948{
style=filled;
color=gray75;
1034[label="130.138.45.13;d;171pkt 171fpkt", shape=diamond, color=yellow];
1151[label="219.140.9.212;s;37pkt 37fpkt", shape=diamond, color=yellow];
2361[label="130.138.45.13;d;25pkt 25fpkt", shape=hexagon, color=black];
2404[label="219.140.9.212;s;23pkt 23fpkt", shape=hexagon, color=black];
3815[label="190.244.106.83;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4465[label="208.86.33.210;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4502[label="208.86.33.218;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4540[label="208.86.33.226;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4625[label="204.244.184.248;30pkt 30fpkt", shape=pentagon, color=darkviolet];
5233[label="208.86.33.210;3pkt 3fpkt", shape=invtriangle, color=brown];
5248[label="208.86.33.218;12pkt 12fpkt", shape=invtriangle, color=brown];
5294[label="204.244.184.248;31pkt 31fpkt", shape=invtriangle, color=brown];
5555[label="208.86.33.218;13pkt 13fpkt", shape=invhouse, color=bisque];
stat948[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.140.9.212:80, 130.138.45.13:*}[20.9302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8698%)&lt;BR/&gt; 2132: (0.651042%)&lt;BR/&gt; 2587: (0.520833%)&lt;BR/&gt; 2586: (0.520833%)&lt;BR/&gt; 2585: (0.520833%)&gt;];
}
1034--1151[label="0.972973;36pkt 36fpkt"];
1034--1568[label="0.00641026;1pkt 1fpkt"];
1034--1992[label="0.0206186;2pkt 2fpkt"];
1034--2048[label="0.0261438;4pkt 4fpkt"];
1034--2361[label="1;25pkt 25fpkt"];
1034--2404[label="1;23pkt 23fpkt"];
1034--2899[label="0.0289855;4pkt 4fpkt"];
1034--2901[label="0.0246914;2pkt 2fpkt"];
1034--3451[label="0.0277778;1pkt 1fpkt"];
1034--3641[label="0.0261438;4pkt 4fpkt"];
1034--3786[label="0.037037;1pkt 1fpkt"];
1034--3815[label="1;2pkt 2fpkt"];
1034--4210[label="0.0555556;2pkt 2fpkt"];
1034--4465[label="1;3pkt 3fpkt"];
1034--4502[label="1;12pkt 12fpkt"];
1034--4540[label="1;22pkt 22fpkt"];
1034--4625[label="1;30pkt 30fpkt"];
1034--4908[label="0.0357143;1pkt 1fpkt"];
1034--5114[label="0.0540541;2pkt 2fpkt"];
1034--5233[label="1;3pkt 3fpkt"];
1034--5248[label="1;12pkt 12fpkt"];
1034--5294[label="1;31pkt 31fpkt"];
1034--5414[label="0.037037;1pkt 1fpkt"];
1034--5555[label="1;13pkt 13fpkt"];
1151--2361[label="0.32;8pkt 8fpkt"];
1151--2404[label="1;23pkt 23fpkt"];
2361--2404[label="0.347826;8pkt 8fpkt"];
2361--4502[label="0.0833333;1pkt 1fpkt"];
2361--4540[label="0.318182;7pkt 7fpkt"];
2361--5248[label="0.0833333;1pkt 1fpkt"];
2361--5555[label="0.153846;2pkt 2fpkt"];
4465--5233[label="1;3pkt 3fpkt"];
4502--5248[label="1;12pkt 12fpkt"];
4502--5555[label="1;12pkt 12fpkt"];
4625--5294[label="1;30pkt 30fpkt"];
5248--5555[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="130.138.45.13" src_ip="219.140.9.212" src_port="80"/>
    </slice>
    <from sec="1044162047" usec="0"/>
    <to sec="1044162684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_949{
style=filled;
color=gray75;
4471[label="133.168.205.211;59pkt 59fpkt", shape=pentagon, color=darkviolet];
5236[label="133.168.205.211;60pkt 60fpkt", shape=invtriangle, color=brown];
stat949[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.168.205.211:8000, 136.55.122.234:*}[28.3333%]&lt;BR/&gt;{133.168.205.211:8000, 220.10.113.19:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (46.6387%)&lt;BR/&gt; 80: (1.68067%)&lt;BR/&gt; 0: (1.68067%)&lt;BR/&gt; 63600: (0.840336%)&lt;BR/&gt; 63165: (0.840336%)&gt;];
}
4471--5236[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="136.55.122.234" src_ip="133.168.205.211" src_port="8000"/>
      <filter dst_ip="220.10.113.19" src_ip="133.168.205.211" src_port="8000"/>
    </slice>
    <from sec="1044162042" usec="0"/>
    <to sec="1044163515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_950{
style=filled;
color=gray75;
4478[label="193.202.86.213;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5239[label="193.202.86.213;6pkt 6fpkt", shape=invtriangle, color=brown];
stat950[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.202.86.213:80, 148.94.100.115:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1192: (8.33333%)&lt;BR/&gt; 1191: (8.33333%)&lt;BR/&gt; 1190: (8.33333%)&lt;BR/&gt; 1189: (8.33333%)&gt;];
}
4478--5239[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.100.115" src_ip="193.202.86.213" src_port="80"/>
    </slice>
    <from sec="1044162283" usec="0"/>
    <to sec="1044163045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_951{
style=filled;
color=gray75;
4487[label="196.245.147.215;133pkt 133fpkt", shape=pentagon, color=darkviolet];
5242[label="196.245.147.215;133pkt 133fpkt", shape=invtriangle, color=brown];
stat951[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.245.147.215:*, *:3128}[27.0677%]&lt;BR/&gt;{196.245.147.215:*, *:1080}[25.5639%]&lt;BR/&gt;{196.245.147.215:*, *:80}[24.812%]&lt;BR/&gt;{196.245.147.215:*, *:8080}[22.5564%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (13.5338%)&lt;BR/&gt; 1080: (12.782%)&lt;BR/&gt; 80: (12.406%)&lt;BR/&gt; 8080: (11.2782%)&lt;BR/&gt; 65509: (0.37594%)&gt;];
}
4487--5242[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter dst_port="3128" src_ip="196.245.147.215"/>
      <filter dst_port="1080" src_ip="196.245.147.215"/>
      <filter dst_port="80" src_ip="196.245.147.215"/>
      <filter dst_port="8080" src_ip="196.245.147.215"/>
    </slice>
    <from sec="1044162026" usec="0"/>
    <to sec="1044163526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_952{
style=filled;
color=gray75;
4491[label="194.243.55.216;221pkt 221fpkt", shape=pentagon, color=darkviolet];
5246[label="194.243.55.216;222pkt 222fpkt", shape=invtriangle, color=brown];
stat952[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.243.55.216:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4491--5246[label="1;221pkt 221fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.243.55.216" src_port="1025"/>
    </slice>
    <from sec="1044163280" usec="0"/>
    <to sec="1044163315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_954{
style=filled;
color=gray75;
4512[label="130.139.48.220;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5253[label="130.139.48.220;7pkt 7fpkt", shape=invtriangle, color=brown];
stat954[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.139.48.220:80, 158.121.83.172:*}[28.5714%]&lt;BR/&gt;{130.139.48.220:*, *:113}[28.5714%]&lt;BR/&gt;{130.139.48.220:*, 152.247.168.81:*}[28.5714%]&lt;BR/&gt;{130.139.48.220:*, 217.253.25.149:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (21.4286%)&lt;BR/&gt; 80: (14.2857%)&lt;BR/&gt; 25: (14.2857%)&lt;BR/&gt; 47206: (7.14286%)&lt;BR/&gt; 45502: (7.14286%)&gt;];
}
4512--5253[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="217.253.25.149" src_ip="130.139.48.220"/>
      <filter dst_ip="152.247.168.81" src_ip="130.139.48.220"/>
      <filter dst_port="113" src_ip="130.139.48.220"/>
      <filter dst_ip="158.121.83.172" src_ip="130.139.48.220" src_port="80"/>
    </slice>
    <from sec="1044162335" usec="0"/>
    <to sec="1044163400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_955{
style=filled;
color=gray75;
4538[label="165.155.140.225;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5265[label="165.155.140.225;7pkt 7fpkt", shape=invtriangle, color=brown];
5563[label="165.155.140.225;7pkt 7fpkt", shape=invhouse, color=bisque];
stat955[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.155.140.225:*, 203.96.81.171:80}[42.8571%]&lt;BR/&gt;{165.155.140.225:*, 203.96.37.142:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8571%)&lt;BR/&gt; 1083: (7.14286%)&lt;BR/&gt; 1079: (7.14286%)&lt;BR/&gt; 1075: (7.14286%)&lt;BR/&gt; 1071: (7.14286%)&gt;];
}
4538--5265[label="1;7pkt 7fpkt"];
4538--5563[label="1;7pkt 7fpkt"];
5265--5563[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="203.96.81.171" dst_port="80" src_ip="165.155.140.225"/>
      <filter dst_ip="203.96.37.142" dst_port="80" src_ip="165.155.140.225"/>
    </slice>
    <from sec="1044163386" usec="0"/>
    <to sec="1044163414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18492,1.90667,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_956{
style=filled;
color=gray75;
1366[label="130.139.4.160;d;313pkt 313fpkt", shape=diamond, color=yellow];
1581[label="133.168.7.14;d;87pkt 87fpkt", shape=diamond, color=yellow];
1861[label="130.138.173.203;d;153pkt 153fpkt", shape=diamond, color=yellow];
1864[label="130.138.5.160;d;118pkt 118fpkt", shape=diamond, color=yellow];
1937[label="133.168.168.5;d;81pkt 81fpkt", shape=diamond, color=yellow];
1958[label="192.230.210.71;s;134pkt 134fpkt", shape=diamond, color=yellow];
2151[label="194.5.162.43;s;8pkt 8fpkt", shape=diamond, color=yellow];
2206[label="192.230.210.68;s;10pkt 10fpkt", shape=diamond, color=yellow];
2604[label="130.139.4.160;d;306pkt 306fpkt", shape=hexagon, color=black];
2744[label="130.138.5.160;d;88pkt 88fpkt", shape=hexagon, color=black];
3054[label="192.230.210.71;s;113pkt 113fpkt", shape=hexagon, color=black];
3441[label="203.203.118.22;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3490[label="203.203.113.30;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3560[label="189.53.150.40;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3585[label="194.5.162.43;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3709[label="194.5.162.68;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3724[label="217.40.238.69;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3835[label="203.203.101.86;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4034[label="203.203.101.129;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4143[label="146.187.209.146;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4488[label="192.222.25.216;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4544[label="203.203.106.226;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4547[label="197.69.53.227;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4550[label="203.203.108.227;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4576[label="203.203.106.233;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4582[label="192.158.114.234;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4760[label="203.203.113.30;16pkt 16fpkt", shape=invtriangle, color=brown];
4796[label="189.53.150.40;5pkt 5fpkt", shape=invtriangle, color=brown];
4811[label="194.5.162.43;7pkt 7fpkt", shape=invtriangle, color=brown];
4869[label="192.230.210.68;25pkt 25fpkt", shape=invtriangle, color=brown];
4933[label="203.203.101.86;15pkt 15fpkt", shape=invtriangle, color=brown];
5030[label="203.203.101.129;21pkt 21fpkt", shape=invtriangle, color=brown];
5081[label="146.187.209.146;12pkt 12fpkt", shape=invtriangle, color=brown];
5243[label="192.222.25.216;16pkt 16fpkt", shape=invtriangle, color=brown];
5269[label="197.69.53.227;2pkt 2fpkt", shape=invtriangle, color=brown];
5379[label="194.5.162.43;7pkt 7fpkt", shape=invhouse, color=bisque];
5461[label="203.203.101.129;21pkt 21fpkt", shape=invhouse, color=bisque];
5484[label="146.187.209.146;12pkt 12fpkt", shape=invhouse, color=bisque];
5553[label="192.222.25.216;16pkt 16fpkt", shape=invhouse, color=bisque];
5565[label="197.69.53.227;1pkt 1fpkt", shape=invhouse, color=bisque];
stat956[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 130.139.4.160:*}[40.0778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7485%)&lt;BR/&gt; 1986: (0.19564%)&lt;BR/&gt; 1932: (0.19564%)&lt;BR/&gt; 1926: (0.19564%)&lt;BR/&gt; 81: (0.19564%)&gt;];
}
1366--1958[label="0.0522388;7pkt 7fpkt"];
1366--2206[label="1;10pkt 10fpkt"];
1366--2604[label="1;306pkt 306fpkt"];
1366--3054[label="0.0176991;2pkt 2fpkt"];
1366--3441[label="1;20pkt 20fpkt"];
1366--3490[label="1;15pkt 15fpkt"];
1366--3724[label="0.5;2pkt 2fpkt"];
1366--3835[label="0.533333;8pkt 8fpkt"];
1366--4544[label="1;26pkt 26fpkt"];
1366--4550[label="1;10pkt 10fpkt"];
1366--4576[label="1;7pkt 7fpkt"];
1366--4582[label="1;27pkt 27fpkt"];
1366--4760[label="1;16pkt 16fpkt"];
1366--4869[label="0.36;9pkt 9fpkt"];
1366--4933[label="0.533333;8pkt 8fpkt"];
1581--1753[label="0.149425;13pkt 13fpkt"];
1581--1895[label="0.0114943;1pkt 1fpkt"];
1581--2846[label="0.149425;13pkt 13fpkt"];
1581--3560[label="1;5pkt 5fpkt"];
1581--3724[label="0.5;2pkt 2fpkt"];
1581--3868[label="0.0114943;1pkt 1fpkt"];
1581--4071[label="0.394366;28pkt 28fpkt"];
1581--4282[label="0.031746;2pkt 2fpkt"];
1581--4547[label="1;2pkt 2fpkt"];
1581--4796[label="1;5pkt 5fpkt"];
1581--5154[label="0.031746;2pkt 2fpkt"];
1581--5269[label="1;2pkt 2fpkt"];
1581--5565[label="1;1pkt 1fpkt"];
1861--1958[label="0.567164;76pkt 76fpkt"];
1861--2151[label="1;8pkt 8fpkt"];
1861--2174[label="0.00724638;1pkt 1fpkt"];
1861--2960[label="0.0196078;3pkt 3fpkt"];
1861--2989[label="0.00877193;1pkt 1fpkt"];
1861--3054[label="0.672566;76pkt 76fpkt"];
1861--3585[label="1;7pkt 7fpkt"];
1861--3709[label="1;14pkt 14fpkt"];
1861--4034[label="0.0454545;1pkt 1fpkt"];
1861--4811[label="1;7pkt 7fpkt"];
1861--4869[label="0.64;16pkt 16fpkt"];
1861--5379[label="1;7pkt 7fpkt"];
1864--1958[label="0.364407;43pkt 43fpkt"];
1864--2744[label="1;88pkt 88fpkt"];
1864--3054[label="0.238938;27pkt 27fpkt"];
1864--4034[label="0.0909091;2pkt 2fpkt"];
1864--4488[label="1;16pkt 16fpkt"];
1864--5030[label="0.0952381;2pkt 2fpkt"];
1864--5243[label="1;16pkt 16fpkt"];
1864--5461[label="0.0952381;2pkt 2fpkt"];
1864--5553[label="1;16pkt 16fpkt"];
1937--2701[label="0.0857143;3pkt 3fpkt"];
1937--3270[label="0.0617284;5pkt 5fpkt"];
1937--3835[label="0.266667;4pkt 4fpkt"];
1937--4034[label="0.5;11pkt 11fpkt"];
1937--4143[label="1;12pkt 12fpkt"];
1937--4933[label="0.266667;4pkt 4fpkt"];
1937--5030[label="0.52381;11pkt 11fpkt"];
1937--5081[label="1;12pkt 12fpkt"];
1937--5461[label="0.52381;11pkt 11fpkt"];
1937--5484[label="1;12pkt 12fpkt"];
1958--2604[label="0.0149254;2pkt 2fpkt"];
1958--2744[label="0.306818;27pkt 27fpkt"];
1958--3054[label="1;113pkt 113fpkt"];
2151--3585[label="1;7pkt 7fpkt"];
2151--4811[label="1;7pkt 7fpkt"];
2151--5379[label="1;7pkt 7fpkt"];
2206--2604[label="1;10pkt 10fpkt"];
2206--4869[label="0.9;9pkt 9fpkt"];
2604--3054[label="0.0176991;2pkt 2fpkt"];
2604--3441[label="1;20pkt 20fpkt"];
2604--3490[label="1;15pkt 15fpkt"];
2604--3724[label="0.5;2pkt 2fpkt"];
2604--3835[label="0.533333;8pkt 8fpkt"];
2604--4544[label="1;26pkt 26fpkt"];
2604--4550[label="1;10pkt 10fpkt"];
2604--4576[label="1;7pkt 7fpkt"];
2604--4582[label="1;27pkt 27fpkt"];
2604--4760[label="1;16pkt 16fpkt"];
2604--4869[label="0.36;9pkt 9fpkt"];
2604--4933[label="0.533333;8pkt 8fpkt"];
2744--3054[label="0.306818;27pkt 27fpkt"];
2744--4034[label="0.0909091;2pkt 2fpkt"];
2744--4488[label="1;16pkt 16fpkt"];
2744--5030[label="0.0952381;2pkt 2fpkt"];
2744--5243[label="1;16pkt 16fpkt"];
2744--5461[label="0.0952381;2pkt 2fpkt"];
2744--5553[label="1;16pkt 16fpkt"];
3490--4760[label="1;15pkt 15fpkt"];
3560--4796[label="1;5pkt 5fpkt"];
3585--4811[label="1;7pkt 7fpkt"];
3585--5379[label="1;7pkt 7fpkt"];
3835--4933[label="1;15pkt 15fpkt"];
4034--5030[label="1;21pkt 21fpkt"];
4034--5461[label="1;21pkt 21fpkt"];
4143--5081[label="1;12pkt 12fpkt"];
4143--5484[label="1;12pkt 12fpkt"];
4488--5243[label="1;16pkt 16fpkt"];
4488--5553[label="1;16pkt 16fpkt"];
4547--5269[label="1;2pkt 2fpkt"];
4547--5565[label="1;1pkt 1fpkt"];
4811--5379[label="1;7pkt 7fpkt"];
5030--5461[label="1;21pkt 21fpkt"];
5081--5484[label="1;12pkt 12fpkt"];
5243--5553[label="1;16pkt 16fpkt"];
5269--5565[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="130.139.4.160" src_port="80"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_957{
style=filled;
color=gray75;
4560[label="209.86.204.229;31pkt 31fpkt", shape=pentagon, color=darkviolet];
5274[label="209.86.204.229;31pkt 31fpkt", shape=invtriangle, color=brown];
5570[label="209.86.204.229;31pkt 31fpkt", shape=invhouse, color=bisque];
stat957[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.86.204.229:*, 162.0.202.190:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64634: (1.6129%)&lt;BR/&gt; 64631: (1.6129%)&lt;BR/&gt; 64440: (1.6129%)&lt;BR/&gt; 64223: (1.6129%)&gt;];
}
4560--5274[label="1;31pkt 31fpkt"];
4560--5570[label="1;31pkt 31fpkt"];
5274--5570[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="162.0.202.190" dst_port="80" src_ip="209.86.204.229"/>
    </slice>
    <from sec="1044162055" usec="0"/>
    <to sec="1044163474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.905388,1.9325,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_958{
style=filled;
color=gray75;
4588[label="217.176.17.237;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5284[label="217.176.17.237;10pkt 10fpkt", shape=invtriangle, color=brown];
5576[label="217.176.17.237;9pkt 9fpkt", shape=invhouse, color=bisque];
stat958[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.176.17.237:80, 148.94.203.233:*}[60%]&lt;BR/&gt;{217.176.17.237:80, 148.94.201.218:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2533: (5.17241%)&lt;BR/&gt; 2532: (5.17241%)&lt;BR/&gt; 2531: (5.17241%)&lt;BR/&gt; 1423: (5.17241%)&gt;];
}
4588--5284[label="1;10pkt 10fpkt"];
4588--5576[label="1;9pkt 9fpkt"];
5284--5576[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.203.233" src_ip="217.176.17.237" src_port="80"/>
      <filter dst_ip="148.94.201.218" src_ip="217.176.17.237" src_port="80"/>
    </slice>
    <from sec="1044162078" usec="0"/>
    <to sec="1044163055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_959{
style=filled;
color=gray75;
4605[label="207.35.1.242;63pkt 63fpkt", shape=pentagon, color=darkviolet];
5290[label="207.35.1.242;63pkt 63fpkt", shape=invtriangle, color=brown];
stat959[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.35.1.242:80, 152.246.77.223:*}[60.3175%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61778: (0.793651%)&lt;BR/&gt; 60865: (0.793651%)&lt;BR/&gt; 57893: (0.793651%)&lt;BR/&gt; 56844: (0.793651%)&gt;];
}
4605--5290[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_ip="152.246.77.223" src_ip="207.35.1.242" src_port="80"/>
    </slice>
    <from sec="1044162047" usec="0"/>
    <to sec="1044163501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_960{
style=filled;
color=gray75;
4608[label="207.35.1.243;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5291[label="207.35.1.243;5pkt 5fpkt", shape=invtriangle, color=brown];
stat960[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.35.1.243:80, 194.200.22.3:4162}[20%]&lt;BR/&gt;{207.35.1.243:80, 194.53.201.32:1314}[20%]&lt;BR/&gt;{207.35.1.243:80, 194.53.201.35:47028}[20%]&lt;BR/&gt;{207.35.1.243:80, 194.53.201.66:42912}[20%]&lt;BR/&gt;{207.35.1.243:80, 196.248.9.246:2564}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47028: (10%)&lt;BR/&gt; 42912: (10%)&lt;BR/&gt; 4162: (10%)&lt;BR/&gt; 2564: (10%)&gt;];
}
4608--5291[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="196.248.9.246" dst_port="2564" src_ip="207.35.1.243" src_port="80"/>
      <filter dst_ip="194.53.201.66" dst_port="42912" src_ip="207.35.1.243" src_port="80"/>
      <filter dst_ip="194.53.201.35" dst_port="47028" src_ip="207.35.1.243" src_port="80"/>
      <filter dst_ip="194.53.201.32" dst_port="1314" src_ip="207.35.1.243" src_port="80"/>
      <filter dst_ip="194.200.22.3" dst_port="4162" src_ip="207.35.1.243" src_port="80"/>
    </slice>
    <from sec="1044162120" usec="0"/>
    <to sec="1044163068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.59594,1.93237,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_961{
style=filled;
color=gray75;
4618[label="209.211.81.246;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5293[label="209.211.81.246;10pkt 10fpkt", shape=invtriangle, color=brown];
stat961[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.211.81.246:80, 148.94.209.72:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4405: (5%)&lt;BR/&gt; 4404: (5%)&lt;BR/&gt; 4403: (5%)&lt;BR/&gt; 4402: (5%)&gt;];
}
4618--5293[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="148.94.209.72" src_ip="209.211.81.246" src_port="80"/>
    </slice>
    <from sec="1044162585" usec="0"/>
    <to sec="1044162759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.142.69.254"/>
    </slice>
    <from sec="1044162004" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.90.4.255"/>
    </slice>
    <from sec="1044162008" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.645048,1.98252,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="149.217.233.255"/>
    </slice>
    <from sec="1044162955" usec="0"/>
    <to sec="1044163120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.161.66.2"/>
    </slice>
    <from sec="1044162206" usec="0"/>
    <to sec="1044162399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.236.224.4"/>
    </slice>
    <from sec="1044162279" usec="0"/>
    <to sec="1044162300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.199.65.8"/>
    </slice>
    <from sec="1044163083" usec="0"/>
    <to sec="1044163095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="190.74.78.10"/>
    </slice>
    <from sec="1044162240" usec="0"/>
    <to sec="1044162247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.974221,1.90129,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_969{
style=filled;
color=gray75;
125[label="209.219.6.16s;86pkt 86fpkt", shape=rectangle, color=red];
3384[label="209.219.6.16;167pkt 167fpkt", shape=pentagon, color=darkviolet];
4716[label="209.219.6.16;167pkt 167fpkt", shape=invtriangle, color=brown];
5337[label="209.219.6.16;168pkt 168fpkt", shape=invhouse, color=bisque];
stat969[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.219.6.16:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
125--706[label="0.0348837;3pkt 3fpkt"];
125--3384[label="0.988372;85pkt 85fpkt"];
125--4716[label="0.988372;85pkt 85fpkt"];
125--5337[label="1;86pkt 86fpkt"];
3384--4716[label="1;167pkt 167fpkt"];
3384--5337[label="1;167pkt 167fpkt"];
4716--5337[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.219.6.16" src_port="1027"/>
    </slice>
    <from sec="1044162904" usec="0"/>
    <to sec="1044162946" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.234.210.18"/>
    </slice>
    <from sec="1044163162" usec="0"/>
    <to sec="1044163183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.44.20.22"/>
    </slice>
    <from sec="1044162022" usec="0"/>
    <to sec="1044162136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="129.188.159.28"/>
    </slice>
    <from sec="1044162262" usec="0"/>
    <to sec="1044162400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="207.40.188.34"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.130.9.62"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="130.139.171.63"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044162562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.129.173.67"/>
    </slice>
    <from sec="1044163530" usec="0"/>
    <to sec="1044163531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.96.159.74"/>
    </slice>
    <from sec="1044162001" usec="0"/>
    <to sec="1044163502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.977505,1.99149,999,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_978{
style=filled;
color=gray75;
2032[label="198.164.52.85;s;246pkt 246fpkt", shape=diamond, color=yellow];
5421[label="198.164.52.85;259pkt 259fpkt", shape=invhouse, color=bisque];
stat978[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.164.52.85:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1421: (0.594059%)&lt;BR/&gt; 3228: (0.39604%)&lt;BR/&gt; 1493: (0.39604%)&lt;BR/&gt; 1456: (0.39604%)&gt;];
}
2032--5421[label="1;246pkt 246fpkt"];
</description>
    <slice>
      <filter src_ip="198.164.52.85" src_port="53"/>
    </slice>
    <from sec="1044162000" usec="0"/>
    <to sec="1044163529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="188.35.130.117"/>
    </slice>
    <from sec="1044162005" usec="0"/>
    <to sec="1044163530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="148.94.201.118"/>
    </slice>
    <from sec="1044162357" usec="0"/>
    <to sec="1044163484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="207.40.187.124"/>
    </slice>
    <from sec="1044162016" usec="0"/>
    <to sec="1044163519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.90.49.129"/>
    </slice>
    <from sec="1044163223" usec="0"/>
    <to sec="1044163235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.974221,1.90129,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_983{
style=filled;
color=gray75;
279[label="220.70.250.132s;124pkt 124fpkt", shape=rectangle, color=red];
4063[label="220.70.250.132;135pkt 135fpkt", shape=pentagon, color=darkviolet];
5040[label="220.70.250.132;135pkt 135fpkt", shape=invtriangle, color=brown];
5465[label="220.70.250.132;136pkt 136fpkt", shape=invhouse, color=bisque];
stat983[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.70.250.132:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
279--4063[label="0.991935;123pkt 123fpkt"];
279--5040[label="0.991935;123pkt 123fpkt"];
279--5465[label="1;124pkt 124fpkt"];
4063--5040[label="1;135pkt 135fpkt"];
4063--5465[label="1;135pkt 135fpkt"];
5040--5465[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="220.70.250.132" src_port="1025"/>
    </slice>
    <from sec="1044163172" usec="0"/>
    <to sec="1044163195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.81.146.161"/>
    </slice>
    <from sec="1044162209" usec="0"/>
    <to sec="1044162229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="128.212.31.175"/>
    </slice>
    <from sec="1044162885" usec="0"/>
    <to sec="1044162962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.96.47.184"/>
    </slice>
    <from sec="1044162002" usec="0"/>
    <to sec="1044163525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.91.201.185"/>
    </slice>
    <from sec="1044162012" usec="0"/>
    <to sec="1044163528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="136.238.233.201"/>
    </slice>
    <from sec="1044162282" usec="0"/>
    <to sec="1044162775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845966,2.00811,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.43.48.222"/>
    </slice>
    <from sec="1044163427" usec="0"/>
    <to sec="1044163518" usec="0"/>
  </anomaly>

</admd:annotation>
