<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="85.5.91.44" src_port="1025"/>
      <filter dst_port="80" proto="udp" src_ip="85.5.91.44" src_port="1025"/>
      <filter dst_port="137" proto="tcp" src_ip="85.5.91.44" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="85.5.91.44" src_port="1025"/>
      <from sec="1057554258" usec="0"/>
      <to sec="1057554285" usec="0"/>
    </slice>
    <from sec="1057554258" usec="0"/>
    <to sec="1057554285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="35.139.60.129" dst_port="80" proto="tcp" src_ip="144.3.117.65" src_port="1026"/>
      <filter dst_ip="35.139.60.129" dst_port="80" proto="udp" src_ip="144.3.117.65" src_port="1026"/>
      <filter dst_ip="35.139.60.129" dst_port="137" proto="tcp" src_ip="144.3.117.65" src_port="1026"/>
      <filter dst_ip="35.139.60.129" dst_port="137" proto="udp" src_ip="144.3.117.65" src_port="1026"/>
      <from sec="1057554410" usec="0"/>
      <to sec="1057554422" usec="0"/>
    </slice>
    <from sec="1057554406" usec="0"/>
    <to sec="1057554422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="150.8.149.5" dst_port="3356" proto="tcp" src_ip="34.87.249.104" src_port="80"/>
      <filter dst_ip="150.8.149.5" dst_port="3356" proto="udp" src_ip="34.87.249.104" src_port="80"/>
      <filter dst_ip="150.8.149.5" dst_port="137" proto="tcp" src_ip="34.87.249.104" src_port="80"/>
      <filter dst_ip="150.8.149.5" dst_port="137" proto="udp" src_ip="34.87.249.104" src_port="80"/>
      <filter dst_ip="150.8.149.5" dst_port="3356" proto="tcp" src_ip="34.87.249.104" src_port="1025"/>
      <filter dst_ip="150.8.149.5" dst_port="3356" proto="udp" src_ip="34.87.249.104" src_port="1025"/>
      <filter dst_ip="150.8.149.5" dst_port="137" proto="tcp" src_ip="34.87.249.104" src_port="1025"/>
      <filter dst_ip="150.8.149.5" dst_port="137" proto="udp" src_ip="34.87.249.104" src_port="1025"/>
      <from sec="1057554836" usec="0"/>
      <to sec="1057554845" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="150.8.149.5" dst_port="3356" proto="tcp" src_ip="134.104.49.112" src_port="80"/>
      <filter dst_ip="150.8.149.5" dst_port="3356" proto="udp" src_ip="134.104.49.112" src_port="80"/>
      <filter dst_ip="150.8.149.5" dst_port="137" proto="tcp" src_ip="134.104.49.112" src_port="80"/>
      <filter dst_ip="150.8.149.5" dst_port="137" proto="udp" src_ip="134.104.49.112" src_port="80"/>
      <filter dst_ip="150.8.149.5" dst_port="3356" proto="tcp" src_ip="134.104.49.112" src_port="1025"/>
      <filter dst_ip="150.8.149.5" dst_port="3356" proto="udp" src_ip="134.104.49.112" src_port="1025"/>
      <filter dst_ip="150.8.149.5" dst_port="137" proto="tcp" src_ip="134.104.49.112" src_port="1025"/>
      <filter dst_ip="150.8.149.5" dst_port="137" proto="udp" src_ip="134.104.49.112" src_port="1025"/>
      <from sec="1057554838" usec="0"/>
      <to sec="1057554844" usec="0"/>
    </slice>
    <from sec="1057554836" usec="0"/>
    <to sec="1057554845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="150.8.45.195" dst_port="2605" proto="tcp" src_ip="202.117.61.112" src_port="80"/>
      <filter dst_ip="150.8.45.195" dst_port="2608" proto="tcp" src_ip="202.117.61.112" src_port="80"/>
      <from sec="1057554835" usec="0"/>
      <to sec="1057554844" usec="0"/>
    </slice>
    <from sec="1057554835" usec="0"/>
    <to sec="1057554844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="210.114.5.186" src_port="1027"/>
      <filter dst_port="80" proto="udp" src_ip="210.114.5.186" src_port="1027"/>
      <filter dst_port="137" proto="tcp" src_ip="210.114.5.186" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="210.114.5.186" src_port="1027"/>
      <from sec="1057554851" usec="0"/>
      <to sec="1057554865" usec="0"/>
    </slice>
    <from sec="1057554851" usec="0"/>
    <to sec="1057554865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="tcp" src_ip="208.73.93.229" src_port="1027"/>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="udp" src_ip="208.73.93.229" src_port="1027"/>
      <filter dst_ip="210.89.19.37" dst_port="1434" proto="tcp" src_ip="208.73.93.229" src_port="1027"/>
      <filter dst_ip="210.89.19.37" dst_port="1434" proto="udp" src_ip="208.73.93.229" src_port="1027"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="tcp" src_ip="208.73.93.229" src_port="1027"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="udp" src_ip="208.73.93.229" src_port="1027"/>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="tcp" src_ip="208.73.93.229" src_port="1033"/>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="udp" src_ip="208.73.93.229" src_port="1033"/>
      <filter dst_ip="210.89.19.37" dst_port="1434" proto="tcp" src_ip="208.73.93.229" src_port="1033"/>
      <filter dst_ip="210.89.19.37" dst_port="1434" proto="udp" src_ip="208.73.93.229" src_port="1033"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="tcp" src_ip="208.73.93.229" src_port="1033"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="udp" src_ip="208.73.93.229" src_port="1033"/>
      <from sec="1057554841" usec="0"/>
      <to sec="1057554859" usec="0"/>
    </slice>
    <from sec="1057554841" usec="0"/>
    <to sec="1057554859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="150.8.1.113" dst_port="1242" proto="tcp" src_ip="193.178.75.102" src_port="80"/>
      <from sec="1057554095" usec="0"/>
      <to sec="1057554105" usec="0"/>
    </slice>
    <from sec="1057554091" usec="0"/>
    <to sec="1057554105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.80.103.240" dst_port="137" proto="tcp" src_ip="201.159.190.191" src_port="80"/>
      <filter dst_ip="211.80.103.240" dst_port="137" proto="udp" src_ip="201.159.190.191" src_port="80"/>
      <from sec="1057554439" usec="0"/>
      <to sec="1057554444" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="211.80.103.240" dst_port="137" proto="tcp" src_ip="201.221.162.191" src_port="80"/>
      <filter dst_ip="211.80.103.240" dst_port="137" proto="udp" src_ip="201.221.162.191" src_port="80"/>
      <from sec="1057554436" usec="0"/>
      <to sec="1057554444" usec="0"/>
    </slice>
    <from sec="1057554436" usec="0"/>
    <to sec="1057554444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="201.180.13.1" src_port="1025"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="201.180.13.1" src_port="1025"/>
      <filter dst_ip="211.90.46.4" dst_port="2310" proto="tcp" src_ip="201.180.13.1" src_port="1025"/>
      <filter dst_ip="211.90.46.4" dst_port="2310" proto="udp" src_ip="201.180.13.1" src_port="1025"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="201.180.13.1" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="201.180.13.1" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="2310" proto="tcp" src_ip="201.180.13.1" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="2310" proto="udp" src_ip="201.180.13.1" src_port="80"/>
      <from sec="1057554885" usec="0"/>
      <to sec="1057554893" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="202.205.137.1" src_port="1025"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="202.205.137.1" src_port="1025"/>
      <filter dst_ip="211.90.46.4" dst_port="2310" proto="tcp" src_ip="202.205.137.1" src_port="1025"/>
      <filter dst_ip="211.90.46.4" dst_port="2310" proto="udp" src_ip="202.205.137.1" src_port="1025"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="202.205.137.1" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="202.205.137.1" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="2310" proto="tcp" src_ip="202.205.137.1" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="2310" proto="udp" src_ip="202.205.137.1" src_port="80"/>
      <from sec="1057554887" usec="0"/>
      <to sec="1057554892" usec="0"/>
    </slice>
    <from sec="1057554885" usec="0"/>
    <to sec="1057554893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="173.17.19.5" src_port="1028"/>
      <from sec="1057554248" usec="0"/>
      <to sec="1057554280" usec="0"/>
    </slice>
    <from sec="1057554248" usec="0"/>
    <to sec="1057554280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="208.102.86.6" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="208.102.86.6" src_port="1025"/>
      <from sec="1057554097" usec="0"/>
      <to sec="1057554106" usec="0"/>
    </slice>
    <from sec="1057554097" usec="0"/>
    <to sec="1057554106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.183.52.9" src_port="1026"/>
      <from sec="1057554636" usec="0"/>
      <to sec="1057554644" usec="0"/>
    </slice>
    <from sec="1057554636" usec="0"/>
    <to sec="1057554644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="54.218.136.9" src_port="1049"/>
      <from sec="1057554731" usec="0"/>
      <to sec="1057554738" usec="0"/>
    </slice>
    <from sec="1057554731" usec="0"/>
    <to sec="1057554738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="196.220.43.14" src_port="35258"/>
      <from sec="1057554279" usec="0"/>
      <to sec="1057554297" usec="0"/>
    </slice>
    <from sec="1057554279" usec="0"/>
    <to sec="1057554297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="201.40.94.15" src_port="65015"/>
      <filter dst_port="137" proto="udp" src_ip="201.40.94.15" src_port="65015"/>
      <from sec="1057554097" usec="0"/>
      <to sec="1057554130" usec="0"/>
    </slice>
    <from sec="1057554097" usec="0"/>
    <to sec="1057554131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="85.99.168.16" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="85.99.168.16" src_port="1028"/>
      <from sec="1057554314" usec="0"/>
      <to sec="1057554337" usec="0"/>
    </slice>
    <from sec="1057554314" usec="0"/>
    <to sec="1057554339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="203.200.226.17" src_port="18526"/>
      <from sec="1057554614" usec="0"/>
      <to sec="1057554629" usec="0"/>
    </slice>
    <from sec="1057554614" usec="0"/>
    <to sec="1057554629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="196.213.248.17" src_port="1029"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="196.213.248.17" src_port="1029"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="196.213.248.17" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="196.213.248.17" src_port="80"/>
      <from sec="1057554665" usec="0"/>
      <to sec="1057554672" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="202.119.228.17" src_port="1029"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="202.119.228.17" src_port="1029"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="202.119.228.17" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="202.119.228.17" src_port="80"/>
      <from sec="1057554664" usec="0"/>
      <to sec="1057554672" usec="0"/>
    </slice>
    <from sec="1057554664" usec="0"/>
    <to sec="1057554672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.147.200.17" dst_port="137" proto="tcp" src_ip="211.200.59.24" src_port="1028"/>
      <filter dst_ip="144.147.200.17" dst_port="137" proto="udp" src_ip="211.200.59.24" src_port="1028"/>
      <filter dst_ip="144.147.200.17" dst_port="1517" proto="tcp" src_ip="211.200.59.24" src_port="1028"/>
      <filter dst_ip="144.147.200.17" dst_port="1517" proto="udp" src_ip="211.200.59.24" src_port="1028"/>
      <filter dst_ip="144.147.200.17" dst_port="137" proto="tcp" src_ip="211.200.59.24" src_port="1863"/>
      <filter dst_ip="144.147.200.17" dst_port="137" proto="udp" src_ip="211.200.59.24" src_port="1863"/>
      <filter dst_ip="144.147.200.17" dst_port="1517" proto="tcp" src_ip="211.200.59.24" src_port="1863"/>
      <filter dst_ip="144.147.200.17" dst_port="1517" proto="udp" src_ip="211.200.59.24" src_port="1863"/>
      <from sec="1057554230" usec="0"/>
      <to sec="1057554264" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="144.147.200.17" dst_port="137" proto="tcp" src_ip="213.7.195.24" src_port="1028"/>
      <filter dst_ip="144.147.200.17" dst_port="137" proto="udp" src_ip="213.7.195.24" src_port="1028"/>
      <filter dst_ip="144.147.200.17" dst_port="1517" proto="tcp" src_ip="213.7.195.24" src_port="1028"/>
      <filter dst_ip="144.147.200.17" dst_port="1517" proto="udp" src_ip="213.7.195.24" src_port="1028"/>
      <filter dst_ip="144.147.200.17" dst_port="137" proto="tcp" src_ip="213.7.195.24" src_port="1863"/>
      <filter dst_ip="144.147.200.17" dst_port="137" proto="udp" src_ip="213.7.195.24" src_port="1863"/>
      <filter dst_ip="144.147.200.17" dst_port="1517" proto="tcp" src_ip="213.7.195.24" src_port="1863"/>
      <filter dst_ip="144.147.200.17" dst_port="1517" proto="udp" src_ip="213.7.195.24" src_port="1863"/>
      <from sec="1057554235" usec="0"/>
      <to sec="1057554262" usec="0"/>
    </slice>
    <from sec="1057554230" usec="0"/>
    <to sec="1057554264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="150.8.86.93" dst_port="137" proto="tcp" src_ip="32.7.192.24" src_port="1028"/>
      <filter dst_ip="150.8.86.93" dst_port="137" proto="udp" src_ip="32.7.192.24" src_port="1028"/>
      <filter dst_ip="150.8.86.93" dst_port="137" proto="tcp" src_ip="32.7.192.24" src_port="80"/>
      <filter dst_ip="150.8.86.93" dst_port="137" proto="udp" src_ip="32.7.192.24" src_port="80"/>
      <from sec="1057554197" usec="0"/>
      <to sec="1057554222" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="150.8.86.93" dst_port="137" proto="tcp" src_ip="34.7.92.24" src_port="1028"/>
      <filter dst_ip="150.8.86.93" dst_port="137" proto="udp" src_ip="34.7.92.24" src_port="1028"/>
      <filter dst_ip="150.8.86.93" dst_port="137" proto="tcp" src_ip="34.7.92.24" src_port="80"/>
      <filter dst_ip="150.8.86.93" dst_port="137" proto="udp" src_ip="34.7.92.24" src_port="80"/>
      <from sec="1057554197" usec="0"/>
      <to sec="1057554219" usec="0"/>
    </slice>
    <from sec="1057554197" usec="0"/>
    <to sec="1057554222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.34.90.85" dst_port="137" proto="tcp" src_ip="201.41.110.30" src_port="1029"/>
      <filter dst_ip="144.34.90.85" dst_port="137" proto="udp" src_ip="201.41.110.30" src_port="1029"/>
      <filter dst_ip="144.34.90.85" dst_port="137" proto="tcp" src_ip="201.41.110.30" src_port="80"/>
      <filter dst_ip="144.34.90.85" dst_port="137" proto="udp" src_ip="201.41.110.30" src_port="80"/>
      <from sec="1057554248" usec="0"/>
      <to sec="1057554297" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="144.34.90.85" dst_port="137" proto="tcp" src_ip="197.178.102.30" src_port="1029"/>
      <filter dst_ip="144.34.90.85" dst_port="137" proto="udp" src_ip="197.178.102.30" src_port="1029"/>
      <filter dst_ip="144.34.90.85" dst_port="137" proto="tcp" src_ip="197.178.102.30" src_port="80"/>
      <filter dst_ip="144.34.90.85" dst_port="137" proto="udp" src_ip="197.178.102.30" src_port="80"/>
      <from sec="1057554249" usec="0"/>
      <to sec="1057554256" usec="0"/>
    </slice>
    <from sec="1057554248" usec="0"/>
    <to sec="1057554297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.90.18.104" dst_port="137" proto="tcp" src_ip="192.209.166.32" src_port="1074"/>
      <filter dst_ip="211.90.18.104" dst_port="137" proto="udp" src_ip="192.209.166.32" src_port="1074"/>
      <filter dst_ip="211.90.18.104" dst_port="137" proto="tcp" src_ip="192.209.166.32" src_port="80"/>
      <filter dst_ip="211.90.18.104" dst_port="137" proto="udp" src_ip="192.209.166.32" src_port="80"/>
      <from sec="1057554403" usec="0"/>
      <to sec="1057554421" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="211.90.18.104" dst_port="137" proto="tcp" src_ip="197.178.102.30" src_port="1074"/>
      <filter dst_ip="211.90.18.104" dst_port="137" proto="udp" src_ip="197.178.102.30" src_port="1074"/>
      <filter dst_ip="211.90.18.104" dst_port="137" proto="tcp" src_ip="197.178.102.30" src_port="80"/>
      <filter dst_ip="211.90.18.104" dst_port="137" proto="udp" src_ip="197.178.102.30" src_port="80"/>
      <from sec="1057554413" usec="0"/>
      <to sec="1057554421" usec="0"/>
    </slice>
    <from sec="1057554403" usec="0"/>
    <to sec="1057554421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="85.99.168.32" src_port="1030"/>
      <filter dst_port="137" proto="udp" src_ip="85.99.168.32" src_port="1030"/>
      <filter dst_port="137" proto="tcp" src_ip="85.99.168.32" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="85.99.168.32" src_port="80"/>
      <from sec="1057554315" usec="0"/>
      <to sec="1057554337" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="202.135.188.32" src_port="1030"/>
      <filter dst_port="137" proto="udp" src_ip="202.135.188.32" src_port="1030"/>
      <filter dst_port="137" proto="tcp" src_ip="202.135.188.32" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="202.135.188.32" src_port="80"/>
      <from sec="1057554314" usec="0"/>
      <to sec="1057554336" usec="0"/>
    </slice>
    <from sec="1057554314" usec="0"/>
    <to sec="1057554338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.34.67.14" dst_port="137" proto="tcp" src_ip="215.120.16.35" src_port="1030"/>
      <filter dst_ip="144.34.67.14" dst_port="137" proto="udp" src_ip="215.120.16.35" src_port="1030"/>
      <filter dst_ip="144.34.67.14" dst_port="137" proto="tcp" src_ip="215.120.16.35" src_port="80"/>
      <filter dst_ip="144.34.67.14" dst_port="137" proto="udp" src_ip="215.120.16.35" src_port="80"/>
      <from sec="1057554880" usec="0"/>
      <to sec="1057554897" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="144.34.67.14" dst_port="137" proto="tcp" src_ip="32.93.52.35" src_port="1030"/>
      <filter dst_ip="144.34.67.14" dst_port="137" proto="udp" src_ip="32.93.52.35" src_port="1030"/>
      <filter dst_ip="144.34.67.14" dst_port="137" proto="tcp" src_ip="32.93.52.35" src_port="80"/>
      <filter dst_ip="144.34.67.14" dst_port="137" proto="udp" src_ip="32.93.52.35" src_port="80"/>
      <from sec="1057554897" usec="0"/>
      <to sec="1057554900" usec="0"/>
    </slice>
    <from sec="1057554880" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="211.54.142.39" src_port="1030"/>
      <from sec="1057554065" usec="0"/>
      <to sec="1057554072" usec="0"/>
    </slice>
    <from sec="1057554065" usec="0"/>
    <to sec="1057554072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="201.195.63.42" src_port="1029"/>
      <from sec="1057554162" usec="0"/>
      <to sec="1057554178" usec="0"/>
    </slice>
    <from sec="1057554162" usec="0"/>
    <to sec="1057554179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.90.45.161" dst_port="137" proto="tcp" src_ip="85.99.168.43" src_port="1029"/>
      <filter dst_ip="211.90.45.161" dst_port="137" proto="udp" src_ip="85.99.168.43" src_port="1029"/>
      <filter dst_ip="211.90.45.161" dst_port="137" proto="tcp" src_ip="85.99.168.43" src_port="80"/>
      <filter dst_ip="211.90.45.161" dst_port="137" proto="udp" src_ip="85.99.168.43" src_port="80"/>
      <from sec="1057554364" usec="0"/>
      <to sec="1057554396" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="211.90.45.161" dst_port="137" proto="tcp" src_ip="202.101.144.43" src_port="1029"/>
      <filter dst_ip="211.90.45.161" dst_port="137" proto="udp" src_ip="202.101.144.43" src_port="1029"/>
      <filter dst_ip="211.90.45.161" dst_port="137" proto="tcp" src_ip="202.101.144.43" src_port="80"/>
      <filter dst_ip="211.90.45.161" dst_port="137" proto="udp" src_ip="202.101.144.43" src_port="80"/>
      <from sec="1057554370" usec="0"/>
      <to sec="1057554391" usec="0"/>
    </slice>
    <from sec="1057554364" usec="0"/>
    <to sec="1057554396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="150.9.172.118" dst_port="137" proto="tcp" src_ip="208.70.145.46" src_port="1025"/>
      <filter dst_ip="150.9.172.118" dst_port="137" proto="udp" src_ip="208.70.145.46" src_port="1025"/>
      <filter dst_ip="150.9.172.118" dst_port="137" proto="tcp" src_ip="208.70.145.46" src_port="2064"/>
      <filter dst_ip="150.9.172.118" dst_port="137" proto="udp" src_ip="208.70.145.46" src_port="2064"/>
      <from sec="1057554179" usec="0"/>
      <to sec="1057554197" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="150.9.172.118" dst_port="137" proto="tcp" src_ip="35.90.193.46" src_port="1025"/>
      <filter dst_ip="150.9.172.118" dst_port="137" proto="udp" src_ip="35.90.193.46" src_port="1025"/>
      <filter dst_ip="150.9.172.118" dst_port="137" proto="tcp" src_ip="35.90.193.46" src_port="2064"/>
      <filter dst_ip="150.9.172.118" dst_port="137" proto="udp" src_ip="35.90.193.46" src_port="2064"/>
      <from sec="1057554179" usec="0"/>
      <to sec="1057554197" usec="0"/>
    </slice>
    <from sec="1057554179" usec="0"/>
    <to sec="1057554197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="197.47.232.51" src_port="1026"/>
      <from sec="1057554271" usec="0"/>
      <to sec="1057554279" usec="0"/>
    </slice>
    <from sec="1057554271" usec="0"/>
    <to sec="1057554279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="85.99.168.59" src_port="1026"/>
      <from sec="1057554629" usec="0"/>
      <to sec="1057554651" usec="0"/>
    </slice>
    <from sec="1057554629" usec="0"/>
    <to sec="1057554651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="85.41.178.62" src_port="1027"/>
      <from sec="1057554339" usec="0"/>
      <to sec="1057554348" usec="0"/>
    </slice>
    <from sec="1057554339" usec="0"/>
    <to sec="1057554348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="tcp" src_ip="200.182.240.65" src_port="14042"/>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="udp" src_ip="200.182.240.65" src_port="14042"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="tcp" src_ip="200.182.240.65" src_port="14042"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="udp" src_ip="200.182.240.65" src_port="14042"/>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="tcp" src_ip="200.182.240.65" src_port="80"/>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="udp" src_ip="200.182.240.65" src_port="80"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="tcp" src_ip="200.182.240.65" src_port="80"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="udp" src_ip="200.182.240.65" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="200.182.240.65" src_port="14042"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="200.182.240.65" src_port="14042"/>
      <filter dst_ip="211.90.46.4" dst_port="53" proto="tcp" src_ip="200.182.240.65" src_port="14042"/>
      <filter dst_ip="211.90.46.4" dst_port="53" proto="udp" src_ip="200.182.240.65" src_port="14042"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="200.182.240.65" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="200.182.240.65" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="53" proto="tcp" src_ip="200.182.240.65" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="53" proto="udp" src_ip="200.182.240.65" src_port="80"/>
      <from sec="1057554187" usec="0"/>
      <to sec="1057554197" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="tcp" src_ip="32.32.252.65" src_port="14042"/>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="udp" src_ip="32.32.252.65" src_port="14042"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="tcp" src_ip="32.32.252.65" src_port="14042"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="udp" src_ip="32.32.252.65" src_port="14042"/>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="tcp" src_ip="32.32.252.65" src_port="80"/>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="udp" src_ip="32.32.252.65" src_port="80"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="tcp" src_ip="32.32.252.65" src_port="80"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="udp" src_ip="32.32.252.65" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="32.32.252.65" src_port="14042"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="32.32.252.65" src_port="14042"/>
      <filter dst_ip="211.90.46.4" dst_port="53" proto="tcp" src_ip="32.32.252.65" src_port="14042"/>
      <filter dst_ip="211.90.46.4" dst_port="53" proto="udp" src_ip="32.32.252.65" src_port="14042"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="32.32.252.65" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="32.32.252.65" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="53" proto="tcp" src_ip="32.32.252.65" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="53" proto="udp" src_ip="32.32.252.65" src_port="80"/>
      <from sec="1057554187" usec="0"/>
      <to sec="1057554196" usec="0"/>
    </slice>
    <from sec="1057554187" usec="0"/>
    <to sec="1057554197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="196.219.134.68" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="196.219.134.68" src_port="1026"/>
      <filter dst_port="137" proto="tcp" src_ip="196.219.134.68" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="196.219.134.68" src_port="80"/>
      <from sec="1057554155" usec="0"/>
      <to sec="1057554177" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="32.214.90.68" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="32.214.90.68" src_port="1026"/>
      <filter dst_port="137" proto="tcp" src_ip="32.214.90.68" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="32.214.90.68" src_port="80"/>
      <from sec="1057554155" usec="0"/>
      <to sec="1057554179" usec="0"/>
    </slice>
    <from sec="1057554155" usec="0"/>
    <to sec="1057554179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="200.182.129.73" src_port="1029"/>
      <from sec="1057554305" usec="0"/>
      <to sec="1057554331" usec="0"/>
    </slice>
    <from sec="1057554305" usec="0"/>
    <to sec="1057554331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="35.103.64.76" src_port="1025"/>
      <from sec="1057554322" usec="0"/>
      <to sec="1057554348" usec="0"/>
    </slice>
    <from sec="1057554322" usec="0"/>
    <to sec="1057554348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="201.146.80.77" src_port="64439"/>
      <from sec="1057554753" usec="0"/>
      <to sec="1057554774" usec="0"/>
    </slice>
    <from sec="1057554753" usec="0"/>
    <to sec="1057554774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="138.104.244.78" src_port="1025"/>
      <from sec="1057554629" usec="0"/>
      <to sec="1057554657" usec="0"/>
    </slice>
    <from sec="1057554629" usec="0"/>
    <to sec="1057554657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="208.69.238.81" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="208.69.238.81" src_port="1027"/>
      <from sec="1057554443" usec="0"/>
      <to sec="1057554451" usec="0"/>
    </slice>
    <from sec="1057554443" usec="0"/>
    <to sec="1057554451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="192.208.213.82" src_port="1033"/>
      <from sec="1057554858" usec="0"/>
      <to sec="1057554867" usec="0"/>
    </slice>
    <from sec="1057554858" usec="0"/>
    <to sec="1057554867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="200.170.40.87" src_port="1029"/>
      <from sec="1057554113" usec="0"/>
      <to sec="1057554123" usec="0"/>
    </slice>
    <from sec="1057554113" usec="0"/>
    <to sec="1057554123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.34.89.35" dst_port="137" proto="tcp" src_ip="85.158.42.89" src_port="1030"/>
      <filter dst_ip="144.34.89.35" dst_port="137" proto="udp" src_ip="85.158.42.89" src_port="1030"/>
      <filter dst_ip="144.34.89.35" dst_port="137" proto="tcp" src_ip="85.158.42.89" src_port="80"/>
      <filter dst_ip="144.34.89.35" dst_port="137" proto="udp" src_ip="85.158.42.89" src_port="80"/>
      <from sec="1057554296" usec="0"/>
      <to sec="1057554305" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="144.34.89.35" dst_port="137" proto="tcp" src_ip="197.178.102.89" src_port="1030"/>
      <filter dst_ip="144.34.89.35" dst_port="137" proto="udp" src_ip="197.178.102.89" src_port="1030"/>
      <filter dst_ip="144.34.89.35" dst_port="137" proto="tcp" src_ip="197.178.102.89" src_port="80"/>
      <filter dst_ip="144.34.89.35" dst_port="137" proto="udp" src_ip="197.178.102.89" src_port="80"/>
      <from sec="1057554296" usec="0"/>
      <to sec="1057554305" usec="0"/>
    </slice>
    <from sec="1057554296" usec="0"/>
    <to sec="1057554305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="85.96.160.89" src_port="61872"/>
      <filter dst_port="137" proto="udp" src_ip="85.96.160.89" src_port="61872"/>
      <filter dst_port="139" proto="tcp" src_ip="85.96.160.89" src_port="61872"/>
      <filter dst_port="139" proto="udp" src_ip="85.96.160.89" src_port="61872"/>
      <filter dst_port="137" proto="tcp" src_ip="85.96.160.89" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="85.96.160.89" src_port="80"/>
      <filter dst_port="139" proto="tcp" src_ip="85.96.160.89" src_port="80"/>
      <filter dst_port="139" proto="udp" src_ip="85.96.160.89" src_port="80"/>
      <from sec="1057554460" usec="0"/>
      <to sec="1057554467" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="85.46.152.89" src_port="61872"/>
      <filter dst_port="137" proto="udp" src_ip="85.46.152.89" src_port="61872"/>
      <filter dst_port="139" proto="tcp" src_ip="85.46.152.89" src_port="61872"/>
      <filter dst_port="139" proto="udp" src_ip="85.46.152.89" src_port="61872"/>
      <filter dst_port="137" proto="tcp" src_ip="85.46.152.89" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="85.46.152.89" src_port="80"/>
      <filter dst_port="139" proto="tcp" src_ip="85.46.152.89" src_port="80"/>
      <filter dst_port="139" proto="udp" src_ip="85.46.152.89" src_port="80"/>
      <from sec="1057554459" usec="0"/>
      <to sec="1057554467" usec="0"/>
    </slice>
    <from sec="1057554459" usec="0"/>
    <to sec="1057554467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="150.9.96.97" dst_port="137" proto="tcp" src_ip="208.67.22.90" src_port="1026"/>
      <filter dst_ip="150.9.96.97" dst_port="137" proto="udp" src_ip="208.67.22.90" src_port="1026"/>
      <filter dst_ip="150.9.96.97" dst_port="137" proto="tcp" src_ip="208.67.22.90" src_port="80"/>
      <filter dst_ip="150.9.96.97" dst_port="137" proto="udp" src_ip="208.67.22.90" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="208.67.22.90" src_port="1026"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="208.67.22.90" src_port="1026"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="208.67.22.90" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="208.67.22.90" src_port="80"/>
      <from sec="1057554001" usec="0"/>
      <to sec="1057554017" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="150.9.96.97" dst_port="137" proto="tcp" src_ip="32.238.222.90" src_port="1026"/>
      <filter dst_ip="150.9.96.97" dst_port="137" proto="udp" src_ip="32.238.222.90" src_port="1026"/>
      <filter dst_ip="150.9.96.97" dst_port="137" proto="tcp" src_ip="32.238.222.90" src_port="80"/>
      <filter dst_ip="150.9.96.97" dst_port="137" proto="udp" src_ip="32.238.222.90" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="32.238.222.90" src_port="1026"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="32.238.222.90" src_port="1026"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="32.238.222.90" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="32.238.222.90" src_port="80"/>
      <from sec="1057554001" usec="0"/>
      <to sec="1057554007" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="150.9.96.97" dst_port="137" proto="tcp" src_ip="32.93.18.90" src_port="1026"/>
      <filter dst_ip="150.9.96.97" dst_port="137" proto="udp" src_ip="32.93.18.90" src_port="1026"/>
      <filter dst_ip="150.9.96.97" dst_port="137" proto="tcp" src_ip="32.93.18.90" src_port="80"/>
      <filter dst_ip="150.9.96.97" dst_port="137" proto="udp" src_ip="32.93.18.90" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="32.93.18.90" src_port="1026"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="32.93.18.90" src_port="1026"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="32.93.18.90" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="32.93.18.90" src_port="80"/>
      <from sec="1057554003" usec="0"/>
      <to sec="1057554009" usec="0"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="85.80.129.92" src_port="1028"/>
      <from sec="1057554332" usec="0"/>
      <to sec="1057554357" usec="0"/>
    </slice>
    <from sec="1057554332" usec="0"/>
    <to sec="1057554357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="201.36.153.92" src_port="61751"/>
      <from sec="1057554138" usec="0"/>
      <to sec="1057554162" usec="0"/>
    </slice>
    <from sec="1057554138" usec="0"/>
    <to sec="1057554162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.147.132.130" dst_port="137" proto="tcp" src_ip="208.73.17.95" src_port="1028"/>
      <filter dst_ip="144.147.132.130" dst_port="137" proto="udp" src_ip="208.73.17.95" src_port="1028"/>
      <filter dst_ip="144.147.132.130" dst_port="80" proto="tcp" src_ip="208.73.17.95" src_port="1028"/>
      <filter dst_ip="144.147.132.130" dst_port="80" proto="udp" src_ip="208.73.17.95" src_port="1028"/>
      <filter dst_ip="144.147.132.130" dst_port="137" proto="tcp" src_ip="208.73.17.95" src_port="46908"/>
      <filter dst_ip="144.147.132.130" dst_port="137" proto="udp" src_ip="208.73.17.95" src_port="46908"/>
      <filter dst_ip="144.147.132.130" dst_port="80" proto="tcp" src_ip="208.73.17.95" src_port="46908"/>
      <filter dst_ip="144.147.132.130" dst_port="80" proto="udp" src_ip="208.73.17.95" src_port="46908"/>
      <from sec="1057554162" usec="0"/>
      <to sec="1057554169" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="144.147.132.130" dst_port="137" proto="tcp" src_ip="32.151.181.95" src_port="1028"/>
      <filter dst_ip="144.147.132.130" dst_port="137" proto="udp" src_ip="32.151.181.95" src_port="1028"/>
      <filter dst_ip="144.147.132.130" dst_port="80" proto="tcp" src_ip="32.151.181.95" src_port="1028"/>
      <filter dst_ip="144.147.132.130" dst_port="80" proto="udp" src_ip="32.151.181.95" src_port="1028"/>
      <filter dst_ip="144.147.132.130" dst_port="137" proto="tcp" src_ip="32.151.181.95" src_port="46908"/>
      <filter dst_ip="144.147.132.130" dst_port="137" proto="udp" src_ip="32.151.181.95" src_port="46908"/>
      <filter dst_ip="144.147.132.130" dst_port="80" proto="tcp" src_ip="32.151.181.95" src_port="46908"/>
      <filter dst_ip="144.147.132.130" dst_port="80" proto="udp" src_ip="32.151.181.95" src_port="46908"/>
      <from sec="1057554163" usec="0"/>
      <to sec="1057554165" usec="0"/>
    </slice>
    <from sec="1057554162" usec="0"/>
    <to sec="1057554170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.73.175.136" dst_port="137" proto="tcp" src_ip="153.85.128.97" src_port="64435"/>
      <filter dst_ip="172.73.175.136" dst_port="137" proto="udp" src_ip="153.85.128.97" src_port="64435"/>
      <filter dst_ip="172.73.175.136" dst_port="2070" proto="tcp" src_ip="153.85.128.97" src_port="64435"/>
      <filter dst_ip="172.73.175.136" dst_port="2070" proto="udp" src_ip="153.85.128.97" src_port="64435"/>
      <filter dst_ip="172.73.175.136" dst_port="137" proto="tcp" src_ip="153.85.128.97" src_port="6699"/>
      <filter dst_ip="172.73.175.136" dst_port="137" proto="udp" src_ip="153.85.128.97" src_port="6699"/>
      <filter dst_ip="172.73.175.136" dst_port="2070" proto="tcp" src_ip="153.85.128.97" src_port="6699"/>
      <filter dst_ip="172.73.175.136" dst_port="2070" proto="udp" src_ip="153.85.128.97" src_port="6699"/>
      <from sec="1057554892" usec="0"/>
      <to sec="1057554901" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="172.73.175.136" dst_port="137" proto="tcp" src_ip="104.0.144.97" src_port="64435"/>
      <filter dst_ip="172.73.175.136" dst_port="137" proto="udp" src_ip="104.0.144.97" src_port="64435"/>
      <filter dst_ip="172.73.175.136" dst_port="2070" proto="tcp" src_ip="104.0.144.97" src_port="64435"/>
      <filter dst_ip="172.73.175.136" dst_port="2070" proto="udp" src_ip="104.0.144.97" src_port="64435"/>
      <filter dst_ip="172.73.175.136" dst_port="137" proto="tcp" src_ip="104.0.144.97" src_port="6699"/>
      <filter dst_ip="172.73.175.136" dst_port="137" proto="udp" src_ip="104.0.144.97" src_port="6699"/>
      <filter dst_ip="172.73.175.136" dst_port="2070" proto="tcp" src_ip="104.0.144.97" src_port="6699"/>
      <filter dst_ip="172.73.175.136" dst_port="2070" proto="udp" src_ip="104.0.144.97" src_port="6699"/>
      <from sec="1057554892" usec="0"/>
      <to sec="1057554899" usec="0"/>
    </slice>
    <from sec="1057554892" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="201.212.35.103" src_port="64814"/>
      <from sec="1057554463" usec="0"/>
      <to sec="1057554474" usec="0"/>
    </slice>
    <from sec="1057554463" usec="0"/>
    <to sec="1057554474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.147.106.65" dst_port="137" proto="tcp" src_ip="134.97.42.105" src_port="1032"/>
      <filter dst_ip="211.147.106.65" dst_port="137" proto="udp" src_ip="134.97.42.105" src_port="1032"/>
      <filter dst_ip="211.147.106.65" dst_port="137" proto="tcp" src_ip="134.97.42.105" src_port="80"/>
      <filter dst_ip="211.147.106.65" dst_port="137" proto="udp" src_ip="134.97.42.105" src_port="80"/>
      <from sec="1057554473" usec="0"/>
      <to sec="1057554482" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="211.147.106.65" dst_port="137" proto="tcp" src_ip="197.209.22.105" src_port="1032"/>
      <filter dst_ip="211.147.106.65" dst_port="137" proto="udp" src_ip="197.209.22.105" src_port="1032"/>
      <filter dst_ip="211.147.106.65" dst_port="137" proto="tcp" src_ip="197.209.22.105" src_port="80"/>
      <filter dst_ip="211.147.106.65" dst_port="137" proto="udp" src_ip="197.209.22.105" src_port="80"/>
      <from sec="1057554475" usec="0"/>
      <to sec="1057554478" usec="0"/>
    </slice>
    <from sec="1057554473" usec="0"/>
    <to sec="1057554482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="tcp" src_ip="211.4.174.107" src_port="1027"/>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="udp" src_ip="211.4.174.107" src_port="1027"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="tcp" src_ip="211.4.174.107" src_port="1027"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="udp" src_ip="211.4.174.107" src_port="1027"/>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="tcp" src_ip="211.4.174.107" src_port="1072"/>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="udp" src_ip="211.4.174.107" src_port="1072"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="tcp" src_ip="211.4.174.107" src_port="1072"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="udp" src_ip="211.4.174.107" src_port="1072"/>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="tcp" src_ip="211.4.174.107" src_port="80"/>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="udp" src_ip="211.4.174.107" src_port="80"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="tcp" src_ip="211.4.174.107" src_port="80"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="udp" src_ip="211.4.174.107" src_port="80"/>
      <from sec="1057554215" usec="0"/>
      <to sec="1057554223" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="tcp" src_ip="85.30.222.107" src_port="1027"/>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="udp" src_ip="85.30.222.107" src_port="1027"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="tcp" src_ip="85.30.222.107" src_port="1027"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="udp" src_ip="85.30.222.107" src_port="1027"/>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="tcp" src_ip="85.30.222.107" src_port="1072"/>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="udp" src_ip="85.30.222.107" src_port="1072"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="tcp" src_ip="85.30.222.107" src_port="1072"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="udp" src_ip="85.30.222.107" src_port="1072"/>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="tcp" src_ip="85.30.222.107" src_port="80"/>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="udp" src_ip="85.30.222.107" src_port="80"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="tcp" src_ip="85.30.222.107" src_port="80"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="udp" src_ip="85.30.222.107" src_port="80"/>
      <from sec="1057554215" usec="0"/>
      <to sec="1057554223" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="tcp" src_ip="192.203.74.107" src_port="1027"/>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="udp" src_ip="192.203.74.107" src_port="1027"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="tcp" src_ip="192.203.74.107" src_port="1027"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="udp" src_ip="192.203.74.107" src_port="1027"/>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="tcp" src_ip="192.203.74.107" src_port="1072"/>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="udp" src_ip="192.203.74.107" src_port="1072"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="tcp" src_ip="192.203.74.107" src_port="1072"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="udp" src_ip="192.203.74.107" src_port="1072"/>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="tcp" src_ip="192.203.74.107" src_port="80"/>
      <filter dst_ip="150.9.31.61" dst_port="137" proto="udp" src_ip="192.203.74.107" src_port="80"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="tcp" src_ip="192.203.74.107" src_port="80"/>
      <filter dst_ip="150.9.31.61" dst_port="1434" proto="udp" src_ip="192.203.74.107" src_port="80"/>
      <from sec="1057554215" usec="0"/>
      <to sec="1057554216" usec="0"/>
    </slice>
    <from sec="1057554215" usec="0"/>
    <to sec="1057554223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="udp" src_ip="85.61.200.110" src_port="1025"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="udp" src_ip="85.61.200.110" src_port="1025"/>
      <from sec="1057554406" usec="0"/>
      <to sec="1057554441" usec="0"/>
    </slice>
    <from sec="1057554405" usec="0"/>
    <to sec="1057554441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="150.9.130.164" dst_port="137" proto="tcp" src_ip="32.95.191.112" src_port="1027"/>
      <filter dst_ip="150.9.130.164" dst_port="137" proto="udp" src_ip="32.95.191.112" src_port="1027"/>
      <filter dst_ip="150.9.130.164" dst_port="137" proto="tcp" src_ip="32.95.191.112" src_port="80"/>
      <filter dst_ip="150.9.130.164" dst_port="137" proto="udp" src_ip="32.95.191.112" src_port="80"/>
      <from sec="1057554844" usec="0"/>
      <to sec="1057554865" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="150.9.130.164" dst_port="137" proto="tcp" src_ip="193.45.187.112" src_port="1027"/>
      <filter dst_ip="150.9.130.164" dst_port="137" proto="udp" src_ip="193.45.187.112" src_port="1027"/>
      <filter dst_ip="150.9.130.164" dst_port="137" proto="tcp" src_ip="193.45.187.112" src_port="80"/>
      <filter dst_ip="150.9.130.164" dst_port="137" proto="udp" src_ip="193.45.187.112" src_port="80"/>
      <from sec="1057554861" usec="0"/>
      <to sec="1057554867" usec="0"/>
    </slice>
    <from sec="1057554844" usec="0"/>
    <to sec="1057554867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="215.104.83.115" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="215.104.83.115" src_port="1026"/>
      <from sec="1057554752" usec="0"/>
      <to sec="1057554773" usec="0"/>
    </slice>
    <from sec="1057554752" usec="0"/>
    <to sec="1057554773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="52.182.178.117" src_port="60884"/>
      <from sec="1057554458" usec="0"/>
      <to sec="1057554485" usec="0"/>
    </slice>
    <from sec="1057554458" usec="0"/>
    <to sec="1057554485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="150.8.185.223" dst_port="137" proto="tcp" src_ip="193.246.181.118" src_port="1027"/>
      <filter dst_ip="150.8.185.223" dst_port="137" proto="udp" src_ip="193.246.181.118" src_port="1027"/>
      <filter dst_ip="150.8.185.223" dst_port="137" proto="tcp" src_ip="193.246.181.118" src_port="80"/>
      <filter dst_ip="150.8.185.223" dst_port="137" proto="udp" src_ip="193.246.181.118" src_port="80"/>
      <from sec="1057554105" usec="0"/>
      <to sec="1057554139" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="150.8.185.223" dst_port="137" proto="tcp" src_ip="34.172.17.118" src_port="1027"/>
      <filter dst_ip="150.8.185.223" dst_port="137" proto="udp" src_ip="34.172.17.118" src_port="1027"/>
      <filter dst_ip="150.8.185.223" dst_port="137" proto="tcp" src_ip="34.172.17.118" src_port="80"/>
      <filter dst_ip="150.8.185.223" dst_port="137" proto="udp" src_ip="34.172.17.118" src_port="80"/>
      <from sec="1057554124" usec="0"/>
      <to sec="1057554128" usec="0"/>
    </slice>
    <from sec="1057554105" usec="0"/>
    <to sec="1057554139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="85.41.135.120" src_port="1026"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="85.41.135.120" src_port="1026"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="85.41.135.120" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="85.41.135.120" src_port="80"/>
      <from sec="1057554057" usec="0"/>
      <to sec="1057554087" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="192.132.131.120" src_port="1026"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="192.132.131.120" src_port="1026"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="192.132.131.120" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="192.132.131.120" src_port="80"/>
      <from sec="1057554057" usec="0"/>
      <to sec="1057554081" usec="0"/>
    </slice>
    <from sec="1057554057" usec="0"/>
    <to sec="1057554089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="53.197.20.126" src_port="1030"/>
      <from sec="1057554458" usec="0"/>
      <to sec="1057554481" usec="0"/>
    </slice>
    <from sec="1057554458" usec="0"/>
    <to sec="1057554481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="32.46.224.128" src_port="1028"/>
      <from sec="1057554339" usec="0"/>
      <to sec="1057554348" usec="0"/>
    </slice>
    <from sec="1057554339" usec="0"/>
    <to sec="1057554348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="201.150.0.134" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="201.150.0.134" src_port="1025"/>
      <from sec="1057554790" usec="0"/>
      <to sec="1057554799" usec="0"/>
    </slice>
    <from sec="1057554790" usec="0"/>
    <to sec="1057554799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="210.128.203.134" src_port="1025"/>
      <from sec="1057554230" usec="0"/>
      <to sec="1057554239" usec="0"/>
    </slice>
    <from sec="1057554230" usec="0"/>
    <to sec="1057554239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="162.234.67.140" src_port="1040"/>
      <from sec="1057554686" usec="0"/>
      <to sec="1057554694" usec="0"/>
    </slice>
    <from sec="1057554686" usec="0"/>
    <to sec="1057554694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="212.144.177.149" src_port="1045"/>
      <filter dst_port="137" proto="udp" src_ip="212.144.177.149" src_port="1045"/>
      <from sec="1057554256" usec="0"/>
      <to sec="1057554262" usec="0"/>
    </slice>
    <from sec="1057554256" usec="0"/>
    <to sec="1057554263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="52.0.26.154" src_port="10098"/>
      <from sec="1057554460" usec="0"/>
      <to sec="1057554467" usec="0"/>
    </slice>
    <from sec="1057554460" usec="0"/>
    <to sec="1057554467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="210.46.166.154" src_port="1028"/>
      <from sec="1057554868" usec="0"/>
      <to sec="1057554877" usec="0"/>
    </slice>
    <from sec="1057554867" usec="0"/>
    <to sec="1057554877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="35.248.204.155" src_port="1029"/>
      <from sec="1057554451" usec="0"/>
      <to sec="1057554473" usec="0"/>
    </slice>
    <from sec="1057554451" usec="0"/>
    <to sec="1057554473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="197.94.6.156" src_port="10114"/>
      <from sec="1057554641" usec="0"/>
      <to sec="1057554651" usec="0"/>
    </slice>
    <from sec="1057554641" usec="0"/>
    <to sec="1057554651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.89.23.98" dst_port="137" proto="tcp" src_ip="85.176.11.156" src_port="63634"/>
      <filter dst_ip="210.89.23.98" dst_port="137" proto="udp" src_ip="85.176.11.156" src_port="63634"/>
      <filter dst_ip="210.89.23.98" dst_port="4716" proto="tcp" src_ip="85.176.11.156" src_port="63634"/>
      <filter dst_ip="210.89.23.98" dst_port="4716" proto="udp" src_ip="85.176.11.156" src_port="63634"/>
      <filter dst_ip="210.89.23.98" dst_port="137" proto="tcp" src_ip="85.176.11.156" src_port="63633"/>
      <filter dst_ip="210.89.23.98" dst_port="137" proto="udp" src_ip="85.176.11.156" src_port="63633"/>
      <filter dst_ip="210.89.23.98" dst_port="4716" proto="tcp" src_ip="85.176.11.156" src_port="63633"/>
      <filter dst_ip="210.89.23.98" dst_port="4716" proto="udp" src_ip="85.176.11.156" src_port="63633"/>
      <filter dst_ip="210.89.23.98" dst_port="137" proto="tcp" src_ip="85.176.11.156" src_port="25"/>
      <filter dst_ip="210.89.23.98" dst_port="137" proto="udp" src_ip="85.176.11.156" src_port="25"/>
      <filter dst_ip="210.89.23.98" dst_port="4716" proto="tcp" src_ip="85.176.11.156" src_port="25"/>
      <filter dst_ip="210.89.23.98" dst_port="4716" proto="udp" src_ip="85.176.11.156" src_port="25"/>
      <from sec="1057554798" usec="0"/>
      <to sec="1057554806" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="210.89.23.98" dst_port="137" proto="tcp" src_ip="193.40.179.156" src_port="63634"/>
      <filter dst_ip="210.89.23.98" dst_port="137" proto="udp" src_ip="193.40.179.156" src_port="63634"/>
      <filter dst_ip="210.89.23.98" dst_port="4716" proto="tcp" src_ip="193.40.179.156" src_port="63634"/>
      <filter dst_ip="210.89.23.98" dst_port="4716" proto="udp" src_ip="193.40.179.156" src_port="63634"/>
      <filter dst_ip="210.89.23.98" dst_port="137" proto="tcp" src_ip="193.40.179.156" src_port="63633"/>
      <filter dst_ip="210.89.23.98" dst_port="137" proto="udp" src_ip="193.40.179.156" src_port="63633"/>
      <filter dst_ip="210.89.23.98" dst_port="4716" proto="tcp" src_ip="193.40.179.156" src_port="63633"/>
      <filter dst_ip="210.89.23.98" dst_port="4716" proto="udp" src_ip="193.40.179.156" src_port="63633"/>
      <filter dst_ip="210.89.23.98" dst_port="137" proto="tcp" src_ip="193.40.179.156" src_port="25"/>
      <filter dst_ip="210.89.23.98" dst_port="137" proto="udp" src_ip="193.40.179.156" src_port="25"/>
      <filter dst_ip="210.89.23.98" dst_port="4716" proto="tcp" src_ip="193.40.179.156" src_port="25"/>
      <filter dst_ip="210.89.23.98" dst_port="4716" proto="udp" src_ip="193.40.179.156" src_port="25"/>
      <from sec="1057554798" usec="0"/>
      <to sec="1057554801" usec="0"/>
    </slice>
    <from sec="1057554798" usec="0"/>
    <to sec="1057554806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="52.145.0.161" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="52.145.0.161" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="52.145.0.161" src_port="25159"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="52.145.0.161" src_port="25159"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="52.145.0.161" src_port="25155"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="52.145.0.161" src_port="25155"/>
      <from sec="1057554790" usec="0"/>
      <to sec="1057554799" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="202.39.248.161" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="202.39.248.161" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="202.39.248.161" src_port="25159"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="202.39.248.161" src_port="25159"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="tcp" src_ip="202.39.248.161" src_port="25155"/>
      <filter dst_ip="211.90.46.4" dst_port="137" proto="udp" src_ip="202.39.248.161" src_port="25155"/>
      <from sec="1057554790" usec="0"/>
      <to sec="1057554798" usec="0"/>
    </slice>
    <from sec="1057554790" usec="0"/>
    <to sec="1057554799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="85.150.131.166" src_port="1026"/>
      <from sec="1057554146" usec="0"/>
      <to sec="1057554155" usec="0"/>
    </slice>
    <from sec="1057554146" usec="0"/>
    <to sec="1057554155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="201.144.196.175" src_port="1028"/>
      <from sec="1057554287" usec="0"/>
      <to sec="1057554306" usec="0"/>
    </slice>
    <from sec="1057554287" usec="0"/>
    <to sec="1057554306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="104.216.8.180" src_port="1045"/>
      <from sec="1057554347" usec="0"/>
      <to sec="1057554357" usec="0"/>
    </slice>
    <from sec="1057554347" usec="0"/>
    <to sec="1057554357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.89.7.75" dst_port="137" proto="tcp" src_ip="208.213.119.181" src_port="1027"/>
      <filter dst_ip="210.89.7.75" dst_port="137" proto="udp" src_ip="208.213.119.181" src_port="1027"/>
      <filter dst_ip="210.89.7.75" dst_port="1043" proto="tcp" src_ip="208.213.119.181" src_port="1027"/>
      <filter dst_ip="210.89.7.75" dst_port="1043" proto="udp" src_ip="208.213.119.181" src_port="1027"/>
      <filter dst_ip="210.89.7.75" dst_port="137" proto="tcp" src_ip="208.213.119.181" src_port="1863"/>
      <filter dst_ip="210.89.7.75" dst_port="137" proto="udp" src_ip="208.213.119.181" src_port="1863"/>
      <filter dst_ip="210.89.7.75" dst_port="1043" proto="tcp" src_ip="208.213.119.181" src_port="1863"/>
      <filter dst_ip="210.89.7.75" dst_port="1043" proto="udp" src_ip="208.213.119.181" src_port="1863"/>
      <from sec="1057554531" usec="0"/>
      <to sec="1057554546" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="210.89.7.75" dst_port="137" proto="tcp" src_ip="213.7.195.181" src_port="1027"/>
      <filter dst_ip="210.89.7.75" dst_port="137" proto="udp" src_ip="213.7.195.181" src_port="1027"/>
      <filter dst_ip="210.89.7.75" dst_port="1043" proto="tcp" src_ip="213.7.195.181" src_port="1027"/>
      <filter dst_ip="210.89.7.75" dst_port="1043" proto="udp" src_ip="213.7.195.181" src_port="1027"/>
      <filter dst_ip="210.89.7.75" dst_port="137" proto="tcp" src_ip="213.7.195.181" src_port="1863"/>
      <filter dst_ip="210.89.7.75" dst_port="137" proto="udp" src_ip="213.7.195.181" src_port="1863"/>
      <filter dst_ip="210.89.7.75" dst_port="1043" proto="tcp" src_ip="213.7.195.181" src_port="1863"/>
      <filter dst_ip="210.89.7.75" dst_port="1043" proto="udp" src_ip="213.7.195.181" src_port="1863"/>
      <from sec="1057554532" usec="0"/>
      <to sec="1057554535" usec="0"/>
    </slice>
    <from sec="1057554531" usec="0"/>
    <to sec="1057554546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="211.153.0.182" src_port="21025"/>
      <from sec="1057554629" usec="0"/>
      <to sec="1057554637" usec="0"/>
    </slice>
    <from sec="1057554629" usec="0"/>
    <to sec="1057554637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.34.35.42" dst_port="137" proto="tcp" src_ip="133.50.66.189" src_port="1026"/>
      <filter dst_ip="144.34.35.42" dst_port="137" proto="udp" src_ip="133.50.66.189" src_port="1026"/>
      <filter dst_ip="144.34.35.42" dst_port="137" proto="tcp" src_ip="133.50.66.189" src_port="1214"/>
      <filter dst_ip="144.34.35.42" dst_port="137" proto="udp" src_ip="133.50.66.189" src_port="1214"/>
      <from sec="1057554304" usec="0"/>
      <to sec="1057554323" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="144.34.35.42" dst_port="137" proto="tcp" src_ip="197.170.138.189" src_port="1026"/>
      <filter dst_ip="144.34.35.42" dst_port="137" proto="udp" src_ip="197.170.138.189" src_port="1026"/>
      <filter dst_ip="144.34.35.42" dst_port="137" proto="tcp" src_ip="197.170.138.189" src_port="1214"/>
      <filter dst_ip="144.34.35.42" dst_port="137" proto="udp" src_ip="197.170.138.189" src_port="1214"/>
      <from sec="1057554314" usec="0"/>
      <to sec="1057554322" usec="0"/>
    </slice>
    <from sec="1057554304" usec="0"/>
    <to sec="1057554323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="200.170.238.193" src_port="65421"/>
      <from sec="1057554187" usec="0"/>
      <to sec="1057554207" usec="0"/>
    </slice>
    <from sec="1057554187" usec="0"/>
    <to sec="1057554207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="197.118.11.195" src_port="1028"/>
      <from sec="1057554057" usec="0"/>
      <to sec="1057554082" usec="0"/>
    </slice>
    <from sec="1057554057" usec="0"/>
    <to sec="1057554082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="211.53.186.195" src_port="63032"/>
      <from sec="1057554598" usec="0"/>
      <to sec="1057554607" usec="0"/>
    </slice>
    <from sec="1057554598" usec="0"/>
    <to sec="1057554607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="tcp" src_ip="85.176.57.196" src_port="1027"/>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="udp" src_ip="85.176.57.196" src_port="1027"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="tcp" src_ip="85.176.57.196" src_port="1027"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="udp" src_ip="85.176.57.196" src_port="1027"/>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="tcp" src_ip="85.176.57.196" src_port="5190"/>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="udp" src_ip="85.176.57.196" src_port="5190"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="tcp" src_ip="85.176.57.196" src_port="5190"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="udp" src_ip="85.176.57.196" src_port="5190"/>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="tcp" src_ip="85.176.57.196" src_port="1863"/>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="udp" src_ip="85.176.57.196" src_port="1863"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="tcp" src_ip="85.176.57.196" src_port="1863"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="udp" src_ip="85.176.57.196" src_port="1863"/>
      <from sec="1057554230" usec="0"/>
      <to sec="1057554237" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="tcp" src_ip="215.126.169.196" src_port="1027"/>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="udp" src_ip="215.126.169.196" src_port="1027"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="tcp" src_ip="215.126.169.196" src_port="1027"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="udp" src_ip="215.126.169.196" src_port="1027"/>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="tcp" src_ip="215.126.169.196" src_port="5190"/>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="udp" src_ip="215.126.169.196" src_port="5190"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="tcp" src_ip="215.126.169.196" src_port="5190"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="udp" src_ip="215.126.169.196" src_port="5190"/>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="tcp" src_ip="215.126.169.196" src_port="1863"/>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="udp" src_ip="215.126.169.196" src_port="1863"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="tcp" src_ip="215.126.169.196" src_port="1863"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="udp" src_ip="215.126.169.196" src_port="1863"/>
      <from sec="1057554230" usec="0"/>
      <to sec="1057554234" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="tcp" src_ip="213.7.197.196" src_port="1027"/>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="udp" src_ip="213.7.197.196" src_port="1027"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="tcp" src_ip="213.7.197.196" src_port="1027"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="udp" src_ip="213.7.197.196" src_port="1027"/>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="tcp" src_ip="213.7.197.196" src_port="5190"/>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="udp" src_ip="213.7.197.196" src_port="5190"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="tcp" src_ip="213.7.197.196" src_port="5190"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="udp" src_ip="213.7.197.196" src_port="5190"/>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="tcp" src_ip="213.7.197.196" src_port="1863"/>
      <filter dst_ip="144.147.204.96" dst_port="137" proto="udp" src_ip="213.7.197.196" src_port="1863"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="tcp" src_ip="213.7.197.196" src_port="1863"/>
      <filter dst_ip="144.147.204.96" dst_port="1029" proto="udp" src_ip="213.7.197.196" src_port="1863"/>
      <from sec="1057554231" usec="0"/>
      <to sec="1057554239" usec="0"/>
    </slice>
    <from sec="1057554230" usec="0"/>
    <to sec="1057554239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="193.32.141.225" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="193.32.141.225" src_port="1026"/>
      <filter dst_port="80" proto="tcp" src_ip="193.32.141.225" src_port="1026"/>
      <filter dst_port="80" proto="udp" src_ip="193.32.141.225" src_port="1026"/>
      <from sec="1057554724" usec="0"/>
      <to sec="1057554731" usec="0"/>
    </slice>
    <from sec="1057554724" usec="0"/>
    <to sec="1057554731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="150.9.68.234" dst_port="137" proto="tcp" src_ip="32.209.187.230" src_port="1029"/>
      <filter dst_ip="150.9.68.234" dst_port="137" proto="udp" src_ip="32.209.187.230" src_port="1029"/>
      <filter dst_ip="150.9.68.234" dst_port="137" proto="tcp" src_ip="32.209.187.230" src_port="443"/>
      <filter dst_ip="150.9.68.234" dst_port="137" proto="udp" src_ip="32.209.187.230" src_port="443"/>
      <from sec="1057554024" usec="0"/>
      <to sec="1057554049" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="150.9.68.234" dst_port="137" proto="tcp" src_ip="203.210.79.230" src_port="1029"/>
      <filter dst_ip="150.9.68.234" dst_port="137" proto="udp" src_ip="203.210.79.230" src_port="1029"/>
      <filter dst_ip="150.9.68.234" dst_port="137" proto="tcp" src_ip="203.210.79.230" src_port="443"/>
      <filter dst_ip="150.9.68.234" dst_port="137" proto="udp" src_ip="203.210.79.230" src_port="443"/>
      <from sec="1057554024" usec="0"/>
      <to sec="1057554027" usec="0"/>
    </slice>
    <from sec="1057554024" usec="0"/>
    <to sec="1057554049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="208.70.22.232" src_port="1026"/>
      <filter dst_port="137" proto="udp" src_ip="208.70.22.232" src_port="1026"/>
      <filter dst_port="137" proto="tcp" src_ip="208.70.22.232" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="208.70.22.232" src_port="80"/>
      <from sec="1057554256" usec="0"/>
      <to sec="1057554278" usec="0"/>
    </slice>
    <from sec="1057554256" usec="0"/>
    <to sec="1057554278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="217.116.115.237" src_port="61000"/>
      <from sec="1057554239" usec="0"/>
      <to sec="1057554247" usec="0"/>
    </slice>
    <from sec="1057554239" usec="0"/>
    <to sec="1057554247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="201.212.41.242" src_port="1064"/>
      <from sec="1057554207" usec="0"/>
      <to sec="1057554228" usec="0"/>
    </slice>
    <from sec="1057554207" usec="0"/>
    <to sec="1057554229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="211.200.108.243" src_port="1027"/>
      <from sec="1057554443" usec="0"/>
      <to sec="1057554467" usec="0"/>
    </slice>
    <from sec="1057554443" usec="0"/>
    <to sec="1057554467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="192.170.152.249" src_port="1030"/>
      <from sec="1057554223" usec="0"/>
      <to sec="1057554229" usec="0"/>
    </slice>
    <from sec="1057554223" usec="0"/>
    <to sec="1057554229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.90.46.59" dst_port="137" proto="tcp" src_ip="196.192.48.250" src_port="1031"/>
      <filter dst_ip="211.90.46.59" dst_port="137" proto="udp" src_ip="196.192.48.250" src_port="1031"/>
      <filter dst_ip="211.90.46.59" dst_port="137" proto="tcp" src_ip="196.192.48.250" src_port="80"/>
      <filter dst_ip="211.90.46.59" dst_port="137" proto="udp" src_ip="196.192.48.250" src_port="80"/>
      <from sec="1057554025" usec="0"/>
      <to sec="1057554041" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="211.90.46.59" dst_port="137" proto="tcp" src_ip="193.178.85.13" src_port="1031"/>
      <filter dst_ip="211.90.46.59" dst_port="137" proto="udp" src_ip="193.178.85.13" src_port="1031"/>
      <filter dst_ip="211.90.46.59" dst_port="137" proto="tcp" src_ip="193.178.85.13" src_port="80"/>
      <filter dst_ip="211.90.46.59" dst_port="137" proto="udp" src_ip="193.178.85.13" src_port="80"/>
      <from sec="1057554025" usec="0"/>
      <to sec="1057554027" usec="0"/>
    </slice>
    <from sec="1057554025" usec="0"/>
    <to sec="1057554041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="32.152.119.254" src_port="1029"/>
      <from sec="1057554298" usec="0"/>
      <to sec="1057554322" usec="0"/>
    </slice>
    <from sec="1057554298" usec="0"/>
    <to sec="1057554322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="52.138.114.15"/>
      <filter dst_port="137" proto="udp" src_ip="52.138.114.15"/>
      <from sec="1057554473" usec="0"/>
      <to sec="1057554482" usec="0"/>
    </slice>
    <from sec="1057554473" usec="0"/>
    <to sec="1057554482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="201.212.29.22" src_port="80"/>
      <filter dst_port="137" proto="udp" src_ip="201.212.29.22" src_port="80"/>
      <from sec="1057554752" usec="0"/>
      <to sec="1057554767" usec="0"/>
    </slice>
    <from sec="1057554752" usec="0"/>
    <to sec="1057554767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="85.100.123.39" src_port="1863"/>
      <filter dst_port="137" proto="udp" src_ip="85.100.123.39" src_port="1863"/>
      <from sec="1057554724" usec="0"/>
      <to sec="1057554745" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="213.7.195.39" src_port="1863"/>
      <filter dst_port="137" proto="udp" src_ip="213.7.195.39" src_port="1863"/>
      <from sec="1057554724" usec="0"/>
      <to sec="1057554745" usec="0"/>
    </slice>
    <from sec="1057554724" usec="0"/>
    <to sec="1057554745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.147.203.2" dst_port="137" proto="tcp" src_ip="201.145.177.109" src_port="80"/>
      <filter dst_ip="144.147.203.2" dst_port="137" proto="udp" src_ip="201.145.177.109" src_port="80"/>
      <from sec="1057554599" usec="0"/>
      <to sec="1057554608" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="144.147.203.2" dst_port="137" proto="tcp" src_ip="34.87.249.109" src_port="80"/>
      <filter dst_ip="144.147.203.2" dst_port="137" proto="udp" src_ip="34.87.249.109" src_port="80"/>
      <from sec="1057554605" usec="0"/>
      <to sec="1057554607" usec="0"/>
    </slice>
    <from sec="1057554598" usec="0"/>
    <to sec="1057554608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.73.123.56" dst_port="137" proto="tcp" src_ip="201.209.176.110" src_port="80"/>
      <filter dst_ip="172.73.123.56" dst_port="137" proto="udp" src_ip="201.209.176.110" src_port="80"/>
      <filter dst_ip="172.73.123.56" dst_port="1174" proto="tcp" src_ip="201.209.176.110" src_port="80"/>
      <filter dst_ip="172.73.123.56" dst_port="1174" proto="udp" src_ip="201.209.176.110" src_port="80"/>
      <from sec="1057554048" usec="0"/>
      <to sec="1057554072" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="172.73.123.56" dst_port="137" proto="tcp" src_ip="217.97.248.110" src_port="80"/>
      <filter dst_ip="172.73.123.56" dst_port="137" proto="udp" src_ip="217.97.248.110" src_port="80"/>
      <filter dst_ip="172.73.123.56" dst_port="1174" proto="tcp" src_ip="217.97.248.110" src_port="80"/>
      <filter dst_ip="172.73.123.56" dst_port="1174" proto="udp" src_ip="217.97.248.110" src_port="80"/>
      <from sec="1057554054" usec="0"/>
      <to sec="1057554070" usec="0"/>
    </slice>
    <from sec="1057554048" usec="0"/>
    <to sec="1057554073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="35.213.86.111"/>
      <from sec="1057554672" usec="0"/>
      <to sec="1057554678" usec="0"/>
    </slice>
    <from sec="1057554672" usec="0"/>
    <to sec="1057554679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="150.8.36.117" dst_port="137" proto="tcp" src_ip="201.129.192.164" src_port="80"/>
      <filter dst_ip="150.8.36.117" dst_port="137" proto="udp" src_ip="201.129.192.164" src_port="80"/>
      <filter dst_ip="150.8.36.117" dst_port="1046" proto="tcp" src_ip="201.129.192.164" src_port="80"/>
      <filter dst_ip="150.8.36.117" dst_port="1046" proto="udp" src_ip="201.129.192.164" src_port="80"/>
      <from sec="1057554827" usec="0"/>
      <to sec="1057554836" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="150.8.36.117" dst_port="137" proto="tcp" src_ip="212.34.128.164" src_port="80"/>
      <filter dst_ip="150.8.36.117" dst_port="137" proto="udp" src_ip="212.34.128.164" src_port="80"/>
      <filter dst_ip="150.8.36.117" dst_port="1046" proto="tcp" src_ip="212.34.128.164" src_port="80"/>
      <filter dst_ip="150.8.36.117" dst_port="1046" proto="udp" src_ip="212.34.128.164" src_port="80"/>
      <from sec="1057554827" usec="0"/>
      <to sec="1057554833" usec="0"/>
    </slice>
    <from sec="1057554827" usec="0"/>
    <to sec="1057554836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="201.216.169.170"/>
      <from sec="1057554614" usec="0"/>
      <to sec="1057554622" usec="0"/>
    </slice>
    <from sec="1057554614" usec="0"/>
    <to sec="1057554622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="197.45.151.176"/>
      <from sec="1057554837" usec="0"/>
      <to sec="1057554858" usec="0"/>
    </slice>
    <from sec="1057554837" usec="0"/>
    <to sec="1057554858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="208.74.26.180"/>
      <from sec="1057554216" usec="0"/>
      <to sec="1057554222" usec="0"/>
    </slice>
    <from sec="1057554216" usec="0"/>
    <to sec="1057554223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.627173,2.05552,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.89.23.114" dst_port="137" proto="udp" src_ip="211.229.114.192"/>
      <filter dst_ip="210.89.23.114" dst_port="137" proto="icmp" src_ip="211.229.114.192"/>
      <from sec="1057554008" usec="0"/>
      <to sec="1057554017" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="210.89.23.114" dst_port="137" proto="udp" src_ip="193.40.186.192"/>
      <filter dst_ip="210.89.23.114" dst_port="137" proto="icmp" src_ip="193.40.186.192"/>
      <from sec="1057554008" usec="0"/>
      <to sec="1057554016" usec="0"/>
    </slice>
    <from sec="1057554008" usec="0"/>
    <to sec="1057554017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.952707,2.07627,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="35.139.60.129" dst_port="80" proto="tcp" src_ip="144.3.117.65" src_port="1026"/>
      <filter dst_ip="35.139.60.129" dst_port="80" proto="udp" src_ip="144.3.117.65" src_port="1026"/>
      <filter dst_ip="35.139.60.129" dst_port="137" proto="tcp" src_ip="144.3.117.65" src_port="1026"/>
      <filter dst_ip="35.139.60.129" dst_port="137" proto="udp" src_ip="144.3.117.65" src_port="1026"/>
      <from sec="1057554410" usec="0"/>
      <to sec="1057554422" usec="0"/>
    </slice>
    <from sec="1057554406" usec="0"/>
    <to sec="1057554422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.952707,2.07627,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="210.114.5.186" src_port="1027"/>
      <filter dst_port="80" proto="udp" src_ip="210.114.5.186" src_port="1027"/>
      <filter dst_port="137" proto="tcp" src_ip="210.114.5.186" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="210.114.5.186" src_port="1027"/>
      <from sec="1057554851" usec="0"/>
      <to sec="1057554865" usec="0"/>
    </slice>
    <from sec="1057554851" usec="0"/>
    <to sec="1057554865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.952707,2.07627,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.147.232.135" dst_port="139" proto="tcp" src_ip="85.4.12.39"/>
      <filter dst_ip="144.147.232.135" dst_port="139" proto="udp" src_ip="85.4.12.39"/>
      <filter dst_ip="144.147.232.135" dst_port="80" proto="tcp" src_ip="85.4.12.39"/>
      <filter dst_ip="144.147.232.135" dst_port="80" proto="udp" src_ip="85.4.12.39"/>
      <filter dst_ip="144.147.232.135" dst_port="137" proto="tcp" src_ip="85.4.12.39"/>
      <filter dst_ip="144.147.232.135" dst_port="137" proto="udp" src_ip="85.4.12.39"/>
      <from sec="1057554752" usec="0"/>
      <to sec="1057554766" usec="0"/>
    </slice>
    <from sec="1057554749" usec="0"/>
    <to sec="1057554767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02753,2.04129,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
134[label="201.215.213.10s;106pkt 106fpkt", shape=rectangle, color=red];
503[label="201.215.213.10s;53pkt 53fpkt", shape=ellipse, color=green];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.215.213.10:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
134--503[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.215.213.10" src_port="1025"/>
    </slice>
    <from sec="1057554774" usec="0"/>
    <to sec="1057554790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.991083,1.9953,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
142[label="131.4.158.17s;130pkt 130fpkt", shape=rectangle, color=red];
506[label="131.4.158.17s;60pkt 60fpkt", shape=ellipse, color=green];
2470[label="131.4.158.17;129pkt 129fpkt", shape=pentagon, color=darkviolet];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.4.158.17:13250, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13250: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
142--506[label="1;60pkt 60fpkt"];
142--2470[label="1;129pkt 129fpkt"];
506--2470[label="0.983333;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="131.4.158.17" src_port="13250"/>
    </slice>
    <from sec="1057554607" usec="0"/>
    <to sec="1057554627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02753,2.04129,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
148[label="36.56.240.19s;213pkt 213fpkt", shape=rectangle, color=red];
508[label="36.56.240.19s;98pkt 98fpkt", shape=ellipse, color=green];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.56.240.19:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
148--508[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.56.240.19" src_port="1027"/>
    </slice>
    <from sec="1057554596" usec="0"/>
    <to sec="1057554629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06455,1.96782,002,1 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
169[label="86.165.192.35s;166pkt 166fpkt", shape=rectangle, color=red];
513[label="86.165.192.35s;118pkt 118fpkt", shape=ellipse, color=green];
2583[label="86.165.192.35;189pkt 189fpkt", shape=pentagon, color=darkviolet];
3779[label="86.165.192.35;188pkt 188fpkt", shape=invtriangle, color=brown];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.165.192.35:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
169--513[label="1;118pkt 118fpkt"];
169--2583[label="1;166pkt 166fpkt"];
169--3779[label="0.993976;165pkt 165fpkt"];
513--2583[label="1;118pkt 118fpkt"];
513--3779[label="0.991525;117pkt 117fpkt"];
2583--3779[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="86.165.192.35" src_port="1028"/>
    </slice>
    <from sec="1057554101" usec="0"/>
    <to sec="1057554133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24161,1.96666,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
171[label="201.222.219.36s;171pkt 171fpkt", shape=rectangle, color=red];
515[label="201.222.219.36s;64pkt 64fpkt", shape=ellipse, color=green];
2594[label="201.222.219.36;206pkt 206fpkt", shape=pentagon, color=darkviolet];
3785[label="201.222.219.36;206pkt 206fpkt", shape=invtriangle, color=brown];
4320[label="201.222.219.36;206pkt 206fpkt", shape=invhouse, color=bisque];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.222.219.36:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
171--515[label="1;64pkt 64fpkt"];
171--2594[label="1;171pkt 171fpkt"];
171--3785[label="1;171pkt 171fpkt"];
171--4320[label="1;171pkt 171fpkt"];
515--2594[label="1;64pkt 64fpkt"];
515--3785[label="1;64pkt 64fpkt"];
515--4320[label="1;64pkt 64fpkt"];
2594--3785[label="1;206pkt 206fpkt"];
2594--4320[label="1;206pkt 206fpkt"];
3785--4320[label="1;206pkt 206fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.222.219.36" src_port="1030"/>
    </slice>
    <from sec="1057554150" usec="0"/>
    <to sec="1057554183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24161,1.96666,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
179[label="192.35.110.41s;173pkt 173fpkt", shape=rectangle, color=red];
517[label="192.35.110.41s;65pkt 65fpkt", shape=ellipse, color=green];
2632[label="192.35.110.41;217pkt 217fpkt", shape=pentagon, color=darkviolet];
3807[label="192.35.110.41;217pkt 217fpkt", shape=invtriangle, color=brown];
4331[label="192.35.110.41;216pkt 216fpkt", shape=invhouse, color=bisque];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.35.110.41:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
179--517[label="1;65pkt 65fpkt"];
179--2632[label="1;173pkt 173fpkt"];
179--3807[label="1;173pkt 173fpkt"];
179--4331[label="0.99422;172pkt 172fpkt"];
517--2632[label="1;65pkt 65fpkt"];
517--3807[label="1;65pkt 65fpkt"];
517--4331[label="0.984615;64pkt 64fpkt"];
2632--3807[label="1;217pkt 217fpkt"];
2632--4331[label="1;216pkt 216fpkt"];
3807--4331[label="1;216pkt 216fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.35.110.41" src_port="1028"/>
    </slice>
    <from sec="1057554075" usec="0"/>
    <to sec="1057554108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.952707,2.07627,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="150.9.172.118" dst_port="137" proto="tcp" src_ip="208.70.145.46" src_port="1025"/>
      <filter dst_ip="150.9.172.118" dst_port="137" proto="udp" src_ip="208.70.145.46" src_port="1025"/>
      <filter dst_ip="150.9.172.118" dst_port="137" proto="tcp" src_ip="208.70.145.46" src_port="2064"/>
      <filter dst_ip="150.9.172.118" dst_port="137" proto="udp" src_ip="208.70.145.46" src_port="2064"/>
      <from sec="1057554187" usec="0"/>
      <to sec="1057554197" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="150.9.172.118" dst_port="137" proto="tcp" src_ip="35.90.193.46" src_port="1025"/>
      <filter dst_ip="150.9.172.118" dst_port="137" proto="udp" src_ip="35.90.193.46" src_port="1025"/>
      <filter dst_ip="150.9.172.118" dst_port="137" proto="tcp" src_ip="35.90.193.46" src_port="2064"/>
      <filter dst_ip="150.9.172.118" dst_port="137" proto="udp" src_ip="35.90.193.46" src_port="2064"/>
      <from sec="1057554189" usec="0"/>
      <to sec="1057554197" usec="0"/>
    </slice>
    <from sec="1057554187" usec="0"/>
    <to sec="1057554197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.952707,2.07627,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="udp" src_ip="85.61.17.50" src_port="1026"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="udp" src_ip="85.61.17.50" src_port="1026"/>
      <from sec="1057554798" usec="0"/>
      <to sec="1057554803" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="udp" src_ip="201.136.5.50" src_port="1026"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="udp" src_ip="201.136.5.50" src_port="1026"/>
      <from sec="1057554799" usec="0"/>
      <to sec="1057554804" usec="0"/>
    </slice>
    <from sec="1057554798" usec="0"/>
    <to sec="1057554804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02753,2.04129,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
202[label="208.102.93.63s;125pkt 125fpkt", shape=rectangle, color=red];
523[label="208.102.93.63s;60pkt 60fpkt", shape=ellipse, color=green];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.102.93.63:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
202--523[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.102.93.63" src_port="1025"/>
    </slice>
    <from sec="1057554246" usec="0"/>
    <to sec="1057554264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02753,2.04129,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
229[label="200.170.46.92s;66pkt 66fpkt", shape=rectangle, color=red];
529[label="200.170.46.92s;66pkt 66fpkt", shape=ellipse, color=green];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.170.46.92:64055, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64055: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
229--529[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.170.46.92" src_port="64055"/>
    </slice>
    <from sec="1057554752" usec="0"/>
    <to sec="1057554761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02753,2.04129,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
239[label="53.82.10.102s;156pkt 156fpkt", shape=rectangle, color=red];
532[label="53.82.10.102s;156pkt 156fpkt", shape=ellipse, color=green];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.82.10.102:10004, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10004: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
239--532[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="53.82.10.102" src_port="10004"/>
    </slice>
    <from sec="1057554072" usec="0"/>
    <to sec="1057554098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.952707,2.07627,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="150.9.130.164" dst_port="137" proto="tcp" src_ip="32.95.191.112" src_port="1027"/>
      <filter dst_ip="150.9.130.164" dst_port="137" proto="udp" src_ip="32.95.191.112" src_port="1027"/>
      <filter dst_ip="150.9.130.164" dst_port="137" proto="tcp" src_ip="32.95.191.112" src_port="80"/>
      <filter dst_ip="150.9.130.164" dst_port="137" proto="udp" src_ip="32.95.191.112" src_port="80"/>
      <from sec="1057554844" usec="0"/>
      <to sec="1057554865" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="150.9.130.164" dst_port="137" proto="tcp" src_ip="193.45.187.112" src_port="1027"/>
      <filter dst_ip="150.9.130.164" dst_port="137" proto="udp" src_ip="193.45.187.112" src_port="1027"/>
      <filter dst_ip="150.9.130.164" dst_port="137" proto="tcp" src_ip="193.45.187.112" src_port="80"/>
      <filter dst_ip="150.9.130.164" dst_port="137" proto="udp" src_ip="193.45.187.112" src_port="80"/>
      <from sec="1057554861" usec="0"/>
      <to sec="1057554867" usec="0"/>
    </slice>
    <from sec="1057554844" usec="0"/>
    <to sec="1057554867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02753,2.04129,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
289[label="201.147.116.143s;65pkt 65fpkt", shape=rectangle, color=red];
542[label="201.147.116.143s;65pkt 65fpkt", shape=ellipse, color=green];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.147.116.143:1112, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1112: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
289--542[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.147.116.143" src_port="1112"/>
    </slice>
    <from sec="1057554263" usec="0"/>
    <to sec="1057554272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.991083,1.9953,002,1 1 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
295[label="201.40.180.146s;67pkt 67fpkt", shape=rectangle, color=red];
543[label="201.40.180.146s;67pkt 67fpkt", shape=ellipse, color=green];
3198[label="201.40.180.146;143pkt 143fpkt", shape=pentagon, color=darkviolet];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.40.180.146:33203, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33203: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
295--543[label="1;67pkt 67fpkt"];
295--3198[label="1;67pkt 67fpkt"];
543--3198[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.40.180.146" src_port="33203"/>
    </slice>
    <from sec="1057554078" usec="0"/>
    <to sec="1057554100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02753,2.04129,503,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
296[label="197.230.38.147s;1pkt 1fpkt", shape=rectangle, color=red];
544[label="197.230.38.147s;1pkt 1fpkt", shape=ellipse, color=green];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.80.134.147:80, 85.53.139.87:50156}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50156: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
296--544[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="85.53.139.87" dst_port="50156" src_ip="211.80.134.147" src_port="80"/>
    </slice>
    <from sec="1057554081" usec="0"/>
    <to sec="1057554114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.952707,2.07627,503,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="85.197.153.252" dst_port="137" proto="tcp" src_ip="205.77.58.147" src_port="1026"/>
      <filter dst_ip="85.197.153.252" dst_port="137" proto="udp" src_ip="205.77.58.147" src_port="1026"/>
      <filter dst_ip="85.197.153.252" dst_port="1274" proto="tcp" src_ip="205.77.58.147" src_port="1026"/>
      <filter dst_ip="85.197.153.252" dst_port="1274" proto="udp" src_ip="205.77.58.147" src_port="1026"/>
      <filter dst_ip="85.197.153.252" dst_port="137" proto="tcp" src_ip="205.77.58.147" src_port="80"/>
      <filter dst_ip="85.197.153.252" dst_port="137" proto="udp" src_ip="205.77.58.147" src_port="80"/>
      <filter dst_ip="85.197.153.252" dst_port="1274" proto="tcp" src_ip="205.77.58.147" src_port="80"/>
      <filter dst_ip="85.197.153.252" dst_port="1274" proto="udp" src_ip="205.77.58.147" src_port="80"/>
      <from sec="1057554197" usec="0"/>
      <to sec="1057554207" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="85.197.153.252" dst_port="137" proto="tcp" src_ip="211.80.134.147" src_port="1026"/>
      <filter dst_ip="85.197.153.252" dst_port="137" proto="udp" src_ip="211.80.134.147" src_port="1026"/>
      <filter dst_ip="85.197.153.252" dst_port="1274" proto="tcp" src_ip="211.80.134.147" src_port="1026"/>
      <filter dst_ip="85.197.153.252" dst_port="1274" proto="udp" src_ip="211.80.134.147" src_port="1026"/>
      <filter dst_ip="85.197.153.252" dst_port="137" proto="tcp" src_ip="211.80.134.147" src_port="80"/>
      <filter dst_ip="85.197.153.252" dst_port="137" proto="udp" src_ip="211.80.134.147" src_port="80"/>
      <filter dst_ip="85.197.153.252" dst_port="1274" proto="tcp" src_ip="211.80.134.147" src_port="80"/>
      <filter dst_ip="85.197.153.252" dst_port="1274" proto="udp" src_ip="211.80.134.147" src_port="80"/>
      <from sec="1057554197" usec="0"/>
      <to sec="1057554202" usec="0"/>
    </slice>
    <from sec="1057554197" usec="0"/>
    <to sec="1057554207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02753,2.04129,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
308[label="36.2.112.154s;118pkt 118fpkt", shape=rectangle, color=red];
547[label="36.2.112.154s;58pkt 58fpkt", shape=ellipse, color=green];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.2.112.154:43461, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43461: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
308--547[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.2.112.154" src_port="43461"/>
    </slice>
    <from sec="1057554287" usec="0"/>
    <to sec="1057554305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24161,1.96666,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
341[label="198.112.115.183s;87pkt 87fpkt", shape=rectangle, color=red];
550[label="198.112.115.183s;54pkt 54fpkt", shape=ellipse, color=green];
3356[label="198.112.115.183;195pkt 195fpkt", shape=pentagon, color=darkviolet];
4130[label="198.112.115.183;194pkt 194fpkt", shape=invtriangle, color=brown];
4474[label="198.112.115.183;194pkt 194fpkt", shape=invhouse, color=bisque];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.112.115.183:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
341--550[label="1;54pkt 54fpkt"];
341--3356[label="1;87pkt 87fpkt"];
341--4130[label="1;87pkt 87fpkt"];
341--4474[label="1;87pkt 87fpkt"];
550--3356[label="1;54pkt 54fpkt"];
550--4130[label="1;54pkt 54fpkt"];
550--4474[label="1;54pkt 54fpkt"];
3356--4130[label="1;194pkt 194fpkt"];
3356--4474[label="1;194pkt 194fpkt"];
4130--4474[label="1;194pkt 194fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.112.115.183" src_port="1028"/>
    </slice>
    <from sec="1057554210" usec="0"/>
    <to sec="1057554242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02753,2.04129,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
342[label="85.42.151.183s;111pkt 111fpkt", shape=rectangle, color=red];
551[label="85.42.151.183s;111pkt 111fpkt", shape=ellipse, color=green];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.42.151.183:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
342--551[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.42.151.183" src_port="1028"/>
    </slice>
    <from sec="1057554162" usec="0"/>
    <to sec="1057554179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02753,2.04129,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
344[label="200.84.86.184s;96pkt 96fpkt", shape=rectangle, color=red];
552[label="200.84.86.184s;54pkt 54fpkt", shape=ellipse, color=green];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.84.86.184:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
344--552[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.84.86.184" src_port="1027"/>
    </slice>
    <from sec="1057554074" usec="0"/>
    <to sec="1057554090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02753,2.04129,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
363[label="197.132.104.200s;237pkt 237fpkt", shape=rectangle, color=red];
558[label="197.132.104.200s;52pkt 52fpkt", shape=ellipse, color=green];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.132.104.200:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
363--558[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.132.104.200" src_port="1031"/>
    </slice>
    <from sec="1057554445" usec="0"/>
    <to sec="1057554482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.952707,2.07627,002,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="201.193.0.201" src_port="10000"/>
      <filter dst_port="137" proto="udp" src_ip="201.193.0.201" src_port="10000"/>
      <from sec="1057554070" usec="0"/>
      <to sec="1057554081" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="32.177.172.166" src_port="10000"/>
      <filter dst_port="137" proto="udp" src_ip="32.177.172.166" src_port="10000"/>
      <from sec="1057554074" usec="0"/>
      <to sec="1057554078" usec="0"/>
    </slice>
    <from sec="1057554070" usec="0"/>
    <to sec="1057554082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02753,2.04129,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
388[label="217.234.6.233s;120pkt 120fpkt", shape=rectangle, color=red];
565[label="217.234.6.233s;60pkt 60fpkt", shape=ellipse, color=green];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.234.6.233:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
388--565[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.234.6.233" src_port="1025"/>
    </slice>
    <from sec="1057554223" usec="0"/>
    <to sec="1057554240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.952707,2.07627,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.73.178.84" dst_port="137" proto="tcp" src_ip="159.21.147.234" src_port="41914"/>
      <filter dst_ip="172.73.178.84" dst_port="137" proto="udp" src_ip="159.21.147.234" src_port="41914"/>
      <filter dst_ip="172.73.178.84" dst_port="137" proto="tcp" src_ip="159.21.147.234" src_port="80"/>
      <filter dst_ip="172.73.178.84" dst_port="137" proto="udp" src_ip="159.21.147.234" src_port="80"/>
      <from sec="1057554287" usec="0"/>
      <to sec="1057554306" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="172.73.178.84" dst_port="137" proto="tcp" src_ip="34.7.71.234" src_port="41914"/>
      <filter dst_ip="172.73.178.84" dst_port="137" proto="udp" src_ip="34.7.71.234" src_port="41914"/>
      <filter dst_ip="172.73.178.84" dst_port="137" proto="tcp" src_ip="34.7.71.234" src_port="80"/>
      <filter dst_ip="172.73.178.84" dst_port="137" proto="udp" src_ip="34.7.71.234" src_port="80"/>
      <from sec="1057554293" usec="0"/>
      <to sec="1057554294" usec="0"/>
    </slice>
    <from sec="1057554287" usec="0"/>
    <to sec="1057554306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02753,2.04129,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
408[label="35.118.131.251s;71pkt 71fpkt", shape=rectangle, color=red];
574[label="35.118.131.251s;71pkt 71fpkt", shape=ellipse, color=green];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.118.131.251:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
408--574[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="35.118.131.251" src_port="1028"/>
    </slice>
    <from sec="1057554867" usec="0"/>
    <to sec="1057554877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02753,2.04129,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
439[label="205.177.196.133s;119pkt 119fpkt", shape=rectangle, color=red];
585[label="205.177.196.133s;69pkt 69fpkt", shape=ellipse, color=green];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.177.196.133:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 17971: (3.19149%)&lt;BR/&gt; 18015: (2.12766%)&lt;BR/&gt; 18011: (2.12766%)&lt;BR/&gt; 18006: (2.12766%)&gt;];
}
439--585[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.177.196.133"/>
    </slice>
    <from sec="1057554239" usec="0"/>
    <to sec="1057554257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02753,2.04129,002,1 1 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
449[label="85.73.225.195s;158pkt 158fpkt", shape=rectangle, color=red];
589[label="85.73.225.195s;61pkt 61fpkt", shape=ellipse, color=green];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.73.225.195:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 4093: (0.456621%)&lt;BR/&gt; 4088: (0.456621%)&lt;BR/&gt; 4083: (0.456621%)&lt;BR/&gt; 4078: (0.456621%)&gt;];
}
449--589[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.73.225.195"/>
    </slice>
    <from sec="1057554686" usec="0"/>
    <to sec="1057554710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25997,2.14065,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="35.139.60.129" dst_port="80" proto="tcp" src_ip="144.3.117.65" src_port="1026"/>
      <filter dst_ip="35.139.60.129" dst_port="80" proto="udp" src_ip="144.3.117.65" src_port="1026"/>
      <filter dst_ip="35.139.60.129" dst_port="137" proto="tcp" src_ip="144.3.117.65" src_port="1026"/>
      <filter dst_ip="35.139.60.129" dst_port="137" proto="udp" src_ip="144.3.117.65" src_port="1026"/>
      <from sec="1057554410" usec="0"/>
      <to sec="1057554422" usec="0"/>
    </slice>
    <from sec="1057554406" usec="0"/>
    <to sec="1057554422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25997,2.14065,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="210.114.5.186" src_port="1027"/>
      <filter dst_port="80" proto="udp" src_ip="210.114.5.186" src_port="1027"/>
      <filter dst_port="137" proto="tcp" src_ip="210.114.5.186" src_port="1027"/>
      <filter dst_port="137" proto="udp" src_ip="210.114.5.186" src_port="1027"/>
      <from sec="1057554851" usec="0"/>
      <to sec="1057554865" usec="0"/>
    </slice>
    <from sec="1057554851" usec="0"/>
    <to sec="1057554865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25997,2.14065,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.147.232.135" dst_port="139" proto="tcp" src_ip="85.4.12.39"/>
      <filter dst_ip="144.147.232.135" dst_port="139" proto="udp" src_ip="85.4.12.39"/>
      <filter dst_ip="144.147.232.135" dst_port="80" proto="tcp" src_ip="85.4.12.39"/>
      <filter dst_ip="144.147.232.135" dst_port="80" proto="udp" src_ip="85.4.12.39"/>
      <filter dst_ip="144.147.232.135" dst_port="137" proto="tcp" src_ip="85.4.12.39"/>
      <filter dst_ip="144.147.232.135" dst_port="137" proto="udp" src_ip="85.4.12.39"/>
      <from sec="1057554752" usec="0"/>
      <to sec="1057554766" usec="0"/>
    </slice>
    <from sec="1057554749" usec="0"/>
    <to sec="1057554767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25997,2.14065,901,0 0 1 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="udp" src_ip="85.61.17.50" src_port="1026"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="udp" src_ip="85.61.17.50" src_port="1026"/>
      <from sec="1057554798" usec="0"/>
      <to sec="1057554803" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="210.89.19.37" dst_port="137" proto="udp" src_ip="201.136.5.50" src_port="1026"/>
      <filter dst_ip="210.89.19.37" dst_port="53" proto="udp" src_ip="201.136.5.50" src_port="1026"/>
      <from sec="1057554799" usec="0"/>
      <to sec="1057554804" usec="0"/>
    </slice>
    <from sec="1057554798" usec="0"/>
    <to sec="1057554804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
661[label="135.232.85.51;d;207pkt 207fpkt", shape=diamond, color=yellow];
664[label="34.70.149.228;s;2pkt 2fpkt", shape=diamond, color=yellow];
1860[label="34.70.149.228;s;1pkt 1fpkt", shape=hexagon, color=black];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:23000, 135.232.85.51:*}[80.1932%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23000: (39.7619%)&lt;BR/&gt; 0: (12.381%)&lt;BR/&gt; 1100: (4.52381%)&lt;BR/&gt; 1080: (4.52381%)&lt;BR/&gt; 1087: (3.80952%)&gt;];
}
661--664[label="1;2pkt 2fpkt"];
661--1860[label="1;1pkt 1fpkt"];
664--1860[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.85.51" src_port="23000"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01793,1.95255,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
66[label="211.203.10.144s;1pkt 1fpkt", shape=rectangle, color=red];
113[label="52.71.11.2s;1pkt 1fpkt", shape=rectangle, color=red];
190[label="85.35.4.49s;1pkt 1fpkt", shape=rectangle, color=red];
191[label="201.136.192.49s;1pkt 1fpkt", shape=rectangle, color=red];
211[label="53.181.45.72s;1pkt 1fpkt", shape=rectangle, color=red];
384[label="208.102.90.230s;1pkt 1fpkt", shape=rectangle, color=red];
385[label="85.11.146.230s;2pkt 2fpkt", shape=rectangle, color=red];
402[label="201.144.65.247s;1pkt 1fpkt", shape=rectangle, color=red];
418[label="85.53.99.24s;1pkt 1fpkt", shape=rectangle, color=red];
665[label="144.34.34.193;d;1149pkt 1149fpkt", shape=diamond, color=yellow];
785[label="211.203.10.144;s;1pkt 1fpkt", shape=diamond, color=yellow];
865[label="53.132.69.244;s;1pkt 1fpkt", shape=diamond, color=yellow];
932[label="36.44.169.246;s;2pkt 2fpkt", shape=diamond, color=yellow];
948[label="192.179.32.109;s;1pkt 1fpkt", shape=diamond, color=yellow];
1078[label="192.179.203.159;s;1pkt 1fpkt", shape=diamond, color=yellow];
1188[label="52.180.142.230;s;2pkt 2fpkt", shape=diamond, color=yellow];
1201[label="203.76.125.55;s;1pkt 1fpkt", shape=diamond, color=yellow];
1210[label="52.178.13.94;s;1pkt 1fpkt", shape=diamond, color=yellow];
1257[label="52.180.100.49;s;1pkt 1fpkt", shape=diamond, color=yellow];
1320[label="52.180.19.147;s;1pkt 1fpkt", shape=diamond, color=yellow];
1428[label="192.165.171.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
1964[label="192.179.203.159;s;1pkt 1fpkt", shape=hexagon, color=black];
2009[label="192.179.32.109;s;1pkt 1fpkt", shape=hexagon, color=black];
2108[label="203.76.125.55;s;1pkt 1fpkt", shape=hexagon, color=black];
2156[label="211.203.10.144;s;1pkt 1fpkt", shape=hexagon, color=black];
2267[label="52.180.100.49;s;1pkt 1fpkt", shape=hexagon, color=black];
3176[label="211.203.10.144;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3569[label="52.177.138.224;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 144.34.34.193:*}[92.9565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (46.5254%)&lt;BR/&gt; 4661: (0.847458%)&lt;BR/&gt; 4666: (0.211864%)&lt;BR/&gt; 2614: (0.211864%)&lt;BR/&gt; 1233: (0.211864%)&gt;];
}
66--665[label="1;1pkt 1fpkt"];
66--785[label="1;1pkt 1fpkt"];
66--2156[label="1;1pkt 1fpkt"];
66--3176[label="1;1pkt 1fpkt"];
113--665[label="1;1pkt 1fpkt"];
113--1428[label="1;1pkt 1fpkt"];
190--191[label="1;1pkt 1fpkt"];
190--665[label="1;1pkt 1fpkt"];
190--1257[label="1;1pkt 1fpkt"];
190--2267[label="1;1pkt 1fpkt"];
191--665[label="1;1pkt 1fpkt"];
191--1257[label="1;1pkt 1fpkt"];
191--2267[label="1;1pkt 1fpkt"];
211--665[label="1;1pkt 1fpkt"];
384--385[label="1;1pkt 1fpkt"];
384--665[label="1;1pkt 1fpkt"];
384--1188[label="1;1pkt 1fpkt"];
385--665[label="1;2pkt 2fpkt"];
385--1188[label="0.5;1pkt 1fpkt"];
402--665[label="1;1pkt 1fpkt"];
402--865[label="1;1pkt 1fpkt"];
418--665[label="1;1pkt 1fpkt"];
665--759[label="0.000870322;1pkt 1fpkt"];
665--785[label="1;1pkt 1fpkt"];
665--865[label="1;1pkt 1fpkt"];
665--910[label="0.000870322;1pkt 1fpkt"];
665--932[label="0.5;1pkt 1fpkt"];
665--948[label="1;1pkt 1fpkt"];
665--1078[label="1;1pkt 1fpkt"];
665--1188[label="1;2pkt 2fpkt"];
665--1201[label="1;1pkt 1fpkt"];
665--1210[label="1;1pkt 1fpkt"];
665--1257[label="1;1pkt 1fpkt"];
665--1320[label="1;1pkt 1fpkt"];
665--1428[label="1;1pkt 1fpkt"];
665--1552[label="0.00787402;1pkt 1fpkt"];
665--1964[label="1;1pkt 1fpkt"];
665--2009[label="1;1pkt 1fpkt"];
665--2099[label="0.000870322;1pkt 1fpkt"];
665--2108[label="1;1pkt 1fpkt"];
665--2156[label="1;1pkt 1fpkt"];
665--2221[label="0.00819672;1pkt 1fpkt"];
665--2267[label="1;1pkt 1fpkt"];
665--3176[label="1;1pkt 1fpkt"];
665--3189[label="0.0769231;1pkt 1fpkt"];
665--3557[label="0.0078125;1pkt 1fpkt"];
665--3569[label="1;2pkt 2fpkt"];
785--2156[label="1;1pkt 1fpkt"];
785--3176[label="1;1pkt 1fpkt"];
948--2009[label="1;1pkt 1fpkt"];
1078--1964[label="1;1pkt 1fpkt"];
1201--2108[label="1;1pkt 1fpkt"];
1257--2267[label="1;1pkt 1fpkt"];
2156--3176[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.34.34.193" src_port="4662"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
701[label="210.89.21.39;d;4pkt 4fpkt", shape=diamond, color=yellow];
702[label="36.32.164.192;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.32.164.192:1309, 210.89.21.39:11234}[25%]&lt;BR/&gt;{85.104.187.235:7743, 210.89.21.39:1750}[25%]&lt;BR/&gt;{205.68.4.137:1025, 210.89.21.39:11234}[25%]&lt;BR/&gt;{205.68.4.137:8658, 210.89.21.39:1763}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11234: (30%)&lt;BR/&gt; 1309: (20%)&lt;BR/&gt; 8658: (10%)&lt;BR/&gt; 7743: (10%)&lt;BR/&gt; 1763: (10%)&gt;];
}
701--702[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.89.21.39" dst_port="1763" src_ip="205.68.4.137" src_port="8658"/>
      <filter dst_ip="210.89.21.39" dst_port="11234" src_ip="205.68.4.137" src_port="1025"/>
      <filter dst_ip="210.89.21.39" dst_port="1750" src_ip="85.104.187.235" src_port="7743"/>
      <filter dst_ip="210.89.21.39" dst_port="11234" src_ip="36.32.164.192" src_port="1309"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.94234,1.9891,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
705[label="135.232.81.215;d;4pkt 4fpkt", shape=diamond, color=yellow];
706[label="197.168.168.8;s;2pkt 2fpkt", shape=diamond, color=yellow];
2086[label="197.168.168.8;s;2pkt 2fpkt", shape=hexagon, color=black];
2408[label="197.168.168.8;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.10.10.120:10015, 135.232.81.215:1029}[25%]&lt;BR/&gt;{197.141.22.174:2918, 135.232.81.215:7481}[25%]&lt;BR/&gt;{197.168.168.8:1755, 135.232.81.215:2098}[25%]&lt;BR/&gt;{197.168.168.8:2893, 135.232.81.215:2101}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2893: (20%)&lt;BR/&gt; 2101: (20%)&lt;BR/&gt; 2098: (20%)&lt;BR/&gt; 1755: (20%)&lt;BR/&gt; 10015: (5%)&gt;];
}
705--706[label="1;2pkt 2fpkt"];
705--2086[label="1;2pkt 2fpkt"];
705--2408[label="1;2pkt 2fpkt"];
706--2086[label="1;2pkt 2fpkt"];
706--2408[label="1;2pkt 2fpkt"];
2086--2408[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.81.215" dst_port="2101" src_ip="197.168.168.8" src_port="2893"/>
      <filter dst_ip="135.232.81.215" dst_port="2098" src_ip="197.168.168.8" src_port="1755"/>
      <filter dst_ip="135.232.81.215" dst_port="7481" src_ip="197.141.22.174" src_port="2918"/>
      <filter dst_ip="135.232.81.215" dst_port="1029" src_ip="201.10.10.120" src_port="10015"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
743[label="135.232.228.171;d;2pkt 2fpkt", shape=diamond, color=yellow];
744[label="216.78.77.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
1874[label="216.78.77.37;s;1pkt 1fpkt", shape=hexagon, color=black];
1906[label="135.232.228.171;d;1pkt 1fpkt", shape=hexagon, color=black];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.78.77.37:80, 135.232.228.171:57645}[50%]&lt;BR/&gt;{220.113.232.139:80, 135.232.228.171:57970}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57645: (40%)&lt;BR/&gt; 57970: (10%)&gt;];
}
743--744[label="1;1pkt 1fpkt"];
743--1874[label="1;1pkt 1fpkt"];
743--1906[label="1;1pkt 1fpkt"];
744--1874[label="1;1pkt 1fpkt"];
744--1906[label="1;1pkt 1fpkt"];
1874--1906[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.228.171" dst_port="57970" src_ip="220.113.232.139" src_port="80"/>
      <filter dst_ip="135.232.228.171" dst_port="57645" src_ip="216.78.77.37" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64484,2.00171,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
753[label="135.232.10.174;d;104pkt 104fpkt", shape=diamond, color=yellow];
754[label="32.36.13.45;s;7pkt 7fpkt", shape=diamond, color=yellow];
1283[label="202.197.188.122;s;18pkt 18fpkt", shape=diamond, color=yellow];
2648[label="32.36.13.45;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 135.232.10.174:*}[99.0385%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6503%)&lt;BR/&gt; 51235: (1.04895%)&lt;BR/&gt; 51234: (1.04895%)&lt;BR/&gt; 51233: (1.04895%)&lt;BR/&gt; 51232: (1.04895%)&gt;];
}
753--754[label="1;7pkt 7fpkt"];
753--1283[label="1;18pkt 18fpkt"];
753--2648[label="1;14pkt 14fpkt"];
754--2648[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.10.174" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
755[label="150.9.139.55;d;140pkt 140fpkt", shape=diamond, color=yellow];
756[label="211.203.50.160;s;140pkt 140fpkt", shape=diamond, color=yellow];
1875[label="150.9.139.55;d;83pkt 83fpkt", shape=hexagon, color=black];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.203.50.160:21, 150.9.139.55:*}[97.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (48.8981%)&lt;BR/&gt; 48834: (0.413223%)&lt;BR/&gt; 33767: (0.413223%)&lt;BR/&gt; 33760: (0.413223%)&lt;BR/&gt; 33759: (0.413223%)&gt;];
}
755--756[label="1;140pkt 140fpkt"];
755--1875[label="1;83pkt 83fpkt"];
756--1875[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.139.55" src_ip="211.203.50.160" src_port="21"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.888022,1.98481,999,1 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
89[label="215.126.82.234s;1pkt 1fpkt", shape=rectangle, color=red];
788[label="135.232.145.194;d;2pkt 2fpkt", shape=diamond, color=yellow];
791[label="215.126.82.234;s;1pkt 1fpkt", shape=diamond, color=yellow];
4247[label="215.126.82.234;1pkt 1fpkt", shape=invtriangle, color=brown];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.209.19.33:80, 135.232.145.194:65064}[50%]&lt;BR/&gt;{215.126.82.234:8012, 135.232.145.194:49403}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49403: (40%)&lt;BR/&gt; 8012: (40%)&lt;BR/&gt; 65064: (10%)&lt;BR/&gt; 80: (10%)&gt;];
}
89--788[label="1;1pkt 1fpkt"];
89--791[label="1;1pkt 1fpkt"];
89--4247[label="1;1pkt 1fpkt"];
788--791[label="1;1pkt 1fpkt"];
788--4247[label="1;1pkt 1fpkt"];
791--4247[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.145.194" dst_port="49403" src_ip="215.126.82.234" src_port="8012"/>
      <filter dst_ip="135.232.145.194" dst_port="65064" src_ip="197.209.19.33" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
789[label="135.232.145.194;s;2pkt 2fpkt", shape=diamond, color=yellow];
790[label="215.126.82.234;d;1pkt 1fpkt", shape=diamond, color=yellow];
1967[label="215.126.82.234;d;1pkt 1fpkt", shape=hexagon, color=black];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.232.145.194:65065, 213.201.120.7:443}[50%]&lt;BR/&gt;{135.232.145.194:49403, 215.126.82.234:8012}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49403: (37.5%)&lt;BR/&gt; 8012: (37.5%)&lt;BR/&gt; 65065: (12.5%)&lt;BR/&gt; 443: (12.5%)&gt;];
}
789--790[label="1;1pkt 1fpkt"];
789--1967[label="1;1pkt 1fpkt"];
790--1967[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.126.82.234" dst_port="8012" src_ip="135.232.145.194" src_port="49403"/>
      <filter dst_ip="213.201.120.7" dst_port="443" src_ip="135.232.145.194" src_port="65065"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
808[label="135.232.30.149;d;1pkt 1fpkt", shape=diamond, color=yellow];
809[label="213.161.255.235;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.161.255.235:80, 135.232.30.149:2187}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2187: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
808--809[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.30.149" dst_port="2187" src_ip="213.161.255.235" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798472,2.01206,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
46[label="85.115.13.97s;1pkt 1fpkt", shape=rectangle, color=red];
825[label="85.115.13.97;s;1pkt 1fpkt", shape=diamond, color=yellow];
985[label="211.80.100.179;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.115.13.97:22563, 211.80.100.179:2267}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22563: (50%)&lt;BR/&gt; 2267: (50%)&gt;];
}
46--825[label="1;1pkt 1fpkt"];
46--985[label="1;1pkt 1fpkt"];
825--985[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.100.179" dst_port="2267" src_ip="85.115.13.97" src_port="22563"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64484,2.00171,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
819[label="135.232.252.205;d;15pkt 15fpkt", shape=diamond, color=yellow];
829[label="201.196.124.138;s;1pkt 1fpkt", shape=diamond, color=yellow];
2707[label="85.31.138.57;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.66.27.182:80, 135.232.252.205:*}[33.3333%]&lt;BR/&gt;{85.31.138.57:80, 135.232.252.205:*}[26.6667%]&lt;BR/&gt;{201.159.190.66:80, 135.232.252.205:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.7368%)&lt;BR/&gt; 8080: (5.26316%)&lt;BR/&gt; 2031: (5.26316%)&lt;BR/&gt; 2025: (5.26316%)&lt;BR/&gt; 2013: (5.26316%)&gt;];
}
819--829[label="1;1pkt 1fpkt"];
819--2707[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.252.205" src_ip="196.66.27.182" src_port="80"/>
      <filter dst_ip="135.232.252.205" src_ip="85.31.138.57" src_port="80"/>
      <filter dst_ip="135.232.252.205" src_ip="201.159.190.66" src_port="80"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
678[label="135.232.145.176;s;16pkt 16fpkt", shape=diamond, color=yellow];
868[label="32.197.101.158;d;19pkt 19fpkt", shape=diamond, color=yellow];
2199[label="135.232.145.176;s;16pkt 16fpkt", shape=hexagon, color=black];
2200[label="32.197.101.158;d;19pkt 19fpkt", shape=hexagon, color=black];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.232.145.176:*, 32.197.101.158:443}[84.2105%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 32918: (2.85714%)&lt;BR/&gt; 32917: (2.85714%)&lt;BR/&gt; 32916: (2.85714%)&lt;BR/&gt; 32915: (2.85714%)&gt;];
}
678--868[label="1;16pkt 16fpkt"];
678--2199[label="1;16pkt 16fpkt"];
678--2200[label="1;16pkt 16fpkt"];
868--2199[label="1;16pkt 16fpkt"];
868--2200[label="1;19pkt 19fpkt"];
2199--2200[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="32.197.101.158" dst_port="443" src_ip="135.232.145.176"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01793,1.95255,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
73[label="36.2.115.169s;1pkt 1fpkt", shape=rectangle, color=red];
870[label="211.80.100.165;d;7pkt 7fpkt", shape=diamond, color=yellow];
871[label="36.2.115.169;s;1pkt 1fpkt", shape=diamond, color=yellow];
2080[label="36.2.115.169;s;1pkt 1fpkt", shape=hexagon, color=black];
3300[label="36.2.115.169;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.104.187.235:7743, 211.80.100.165:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (22.7273%)&lt;BR/&gt; 3326: (22.7273%)&lt;BR/&gt; 7743: (13.6364%)&lt;BR/&gt; 30227: (4.54545%)&lt;BR/&gt; 4622: (4.54545%)&gt;];
}
73--870[label="1;1pkt 1fpkt"];
73--871[label="1;1pkt 1fpkt"];
73--2080[label="1;1pkt 1fpkt"];
73--3300[label="1;1pkt 1fpkt"];
870--871[label="1;1pkt 1fpkt"];
870--2080[label="1;1pkt 1fpkt"];
870--3300[label="1;1pkt 1fpkt"];
871--2080[label="1;1pkt 1fpkt"];
871--3300[label="1;1pkt 1fpkt"];
2080--3300[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.100.165" src_ip="85.104.187.235" src_port="7743"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01793,1.95255,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
32[label="52.66.81.68s;1pkt 1fpkt", shape=rectangle, color=red];
300[label="211.176.14.150s;1pkt 1fpkt", shape=rectangle, color=red];
364[label="201.193.0.201s;1pkt 1fpkt", shape=rectangle, color=red];
757[label="172.73.200.167;d;233pkt 233fpkt", shape=diamond, color=yellow];
795[label="214.140.29.7;s;1pkt 1fpkt", shape=diamond, color=yellow];
816[label="52.66.81.68;s;1pkt 1fpkt", shape=diamond, color=yellow];
894[label="104.189.152.186;s;1pkt 1fpkt", shape=diamond, color=yellow];
951[label="53.129.112.119;s;2pkt 2fpkt", shape=diamond, color=yellow];
956[label="54.170.62.150;s;1pkt 1fpkt", shape=diamond, color=yellow];
959[label="34.162.136.239;s;1pkt 1fpkt", shape=diamond, color=yellow];
999[label="205.102.206.238;s;1pkt 1fpkt", shape=diamond, color=yellow];
1096[label="53.135.17.51;s;1pkt 1fpkt", shape=diamond, color=yellow];
1097[label="192.170.130.103;s;1pkt 1fpkt", shape=diamond, color=yellow];
1598[label="205.126.200.23;s;1pkt 1fpkt", shape=diamond, color=yellow];
1834[label="205.66.104.167;s;1pkt 1fpkt", shape=diamond, color=yellow];
1907[label="104.189.152.186;s;1pkt 1fpkt", shape=hexagon, color=black];
1925[label="34.162.136.239;s;1pkt 1fpkt", shape=hexagon, color=black];
1935[label="205.102.206.238;s;1pkt 1fpkt", shape=hexagon, color=black];
1972[label="53.129.112.119;s;2pkt 2fpkt", shape=hexagon, color=black];
1974[label="53.135.17.51;s;1pkt 1fpkt", shape=hexagon, color=black];
2008[label="214.140.29.7;s;1pkt 1fpkt", shape=hexagon, color=black];
2053[label="192.170.130.103;s;1pkt 1fpkt", shape=hexagon, color=black];
2116[label="52.66.81.68;s;1pkt 1fpkt", shape=hexagon, color=black];
3293[label="205.66.104.167;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 172.73.200.167:*}[61.8026%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (30.814%)&lt;BR/&gt; 1214: (3.87597%)&lt;BR/&gt; 2747: (1.55039%)&lt;BR/&gt; 20118: (1.16279%)&lt;BR/&gt; 3298: (1.16279%)&gt;];
}
32--757[label="1;1pkt 1fpkt"];
32--816[label="1;1pkt 1fpkt"];
32--2116[label="1;1pkt 1fpkt"];
300--757[label="1;1pkt 1fpkt"];
300--956[label="1;1pkt 1fpkt"];
364--757[label="1;1pkt 1fpkt"];
364--894[label="1;1pkt 1fpkt"];
364--1907[label="1;1pkt 1fpkt"];
757--795[label="1;1pkt 1fpkt"];
757--816[label="1;1pkt 1fpkt"];
757--894[label="1;1pkt 1fpkt"];
757--951[label="1;2pkt 2fpkt"];
757--956[label="1;1pkt 1fpkt"];
757--959[label="1;1pkt 1fpkt"];
757--999[label="1;1pkt 1fpkt"];
757--1096[label="1;1pkt 1fpkt"];
757--1097[label="1;1pkt 1fpkt"];
757--1598[label="1;1pkt 1fpkt"];
757--1834[label="1;1pkt 1fpkt"];
757--1907[label="1;1pkt 1fpkt"];
757--1925[label="1;1pkt 1fpkt"];
757--1935[label="1;1pkt 1fpkt"];
757--1972[label="1;2pkt 2fpkt"];
757--1974[label="1;1pkt 1fpkt"];
757--2008[label="1;1pkt 1fpkt"];
757--2053[label="1;1pkt 1fpkt"];
757--2116[label="1;1pkt 1fpkt"];
757--3293[label="1;1pkt 1fpkt"];
795--2008[label="1;1pkt 1fpkt"];
816--2116[label="1;1pkt 1fpkt"];
894--1907[label="1;1pkt 1fpkt"];
951--1972[label="1;2pkt 2fpkt"];
959--1925[label="1;1pkt 1fpkt"];
999--1935[label="1;1pkt 1fpkt"];
1096--1974[label="1;1pkt 1fpkt"];
1097--2053[label="1;1pkt 1fpkt"];
1834--3293[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.73.200.167" src_port="4662"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
912[label="150.9.35.162;d;4pkt 4fpkt", shape=diamond, color=yellow];
913[label="199.79.171.180;s;4pkt 4fpkt", shape=diamond, color=yellow];
2003[label="150.9.35.162;d;4pkt 4fpkt", shape=hexagon, color=black];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.79.171.180:80, 150.9.35.162:1449}[25%]&lt;BR/&gt;{199.79.171.180:80, 150.9.35.162:1450}[25%]&lt;BR/&gt;{199.79.171.180:80, 150.9.35.162:1452}[25%]&lt;BR/&gt;{199.79.171.180:80, 150.9.35.162:1453}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1453: (12.5%)&lt;BR/&gt; 1452: (12.5%)&lt;BR/&gt; 1450: (12.5%)&lt;BR/&gt; 1449: (12.5%)&gt;];
}
912--913[label="1;4pkt 4fpkt"];
912--2003[label="1;4pkt 4fpkt"];
913--2003[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.35.162" dst_port="1453" src_ip="199.79.171.180" src_port="80"/>
      <filter dst_ip="150.9.35.162" dst_port="1452" src_ip="199.79.171.180" src_port="80"/>
      <filter dst_ip="150.9.35.162" dst_port="1450" src_ip="199.79.171.180" src_port="80"/>
      <filter dst_ip="150.9.35.162" dst_port="1449" src_ip="199.79.171.180" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05344,1.99952,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
259[label="208.28.62.116s;1pkt 1fpkt", shape=rectangle, color=red];
917[label="211.80.128.85;d;1pkt 1fpkt", shape=diamond, color=yellow];
918[label="32.114.242.116;s;1pkt 1fpkt", shape=diamond, color=yellow];
1912[label="211.80.128.85;d;1pkt 1fpkt", shape=hexagon, color=black];
1913[label="32.114.242.116;s;1pkt 1fpkt", shape=hexagon, color=black];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.114.242.116:1755, 211.80.128.85:1079}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 1079: (50%)&gt;];
}
259--917[label="1;1pkt 1fpkt"];
259--918[label="1;1pkt 1fpkt"];
259--1912[label="1;1pkt 1fpkt"];
259--1913[label="1;1pkt 1fpkt"];
917--918[label="1;1pkt 1fpkt"];
917--1912[label="1;1pkt 1fpkt"];
917--1913[label="1;1pkt 1fpkt"];
918--1912[label="1;1pkt 1fpkt"];
918--1913[label="1;1pkt 1fpkt"];
1912--1913[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.128.85" dst_port="1079" src_ip="32.114.242.116" src_port="1755"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
975[label="150.8.72.87;d;1pkt 1fpkt", shape=diamond, color=yellow];
976[label="215.126.66.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
2112[label="215.126.66.46;s;1pkt 1fpkt", shape=hexagon, color=black];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.126.66.46:8054, 150.8.72.87:49215}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49215: (50%)&lt;BR/&gt; 8054: (50%)&gt;];
}
975--976[label="1;1pkt 1fpkt"];
975--2112[label="1;1pkt 1fpkt"];
976--2112[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.72.87" dst_port="49215" src_ip="215.126.66.46" src_port="8054"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
1034[label="150.9.162.226;d;436pkt 436fpkt", shape=diamond, color=yellow];
1035[label="200.66.117.250;s;434pkt 434fpkt", shape=diamond, color=yellow];
1949[label="150.9.162.226;d;332pkt 332fpkt", shape=hexagon, color=black];
2175[label="200.66.117.250;s;368pkt 368fpkt", shape=hexagon, color=black];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.66.117.250:80, 150.9.162.226:*}[99.5413%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2186: (0.127389%)&lt;BR/&gt; 2185: (0.127389%)&lt;BR/&gt; 2184: (0.127389%)&lt;BR/&gt; 2183: (0.127389%)&gt;];
}
1034--1035[label="1;434pkt 434fpkt"];
1034--1949[label="1;332pkt 332fpkt"];
1034--2175[label="1;368pkt 368fpkt"];
1035--1949[label="0.996988;331pkt 331fpkt"];
1035--2175[label="1;368pkt 368fpkt"];
1949--2175[label="0.996988;331pkt 331fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.162.226" src_ip="200.66.117.250" src_port="80"/>
    </slice>
    <from sec="1057554058" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
995[label="135.232.17.64;d;5pkt 5fpkt", shape=diamond, color=yellow];
1055[label="86.193.130.177;s;1pkt 1fpkt", shape=diamond, color=yellow];
1933[label="135.232.17.64;d;5pkt 5fpkt", shape=hexagon, color=black];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.193.130.177:80, 135.232.17.64:1934}[20%]&lt;BR/&gt;{34.41.35.37:80, 135.232.17.64:1926}[20%]&lt;BR/&gt;{34.41.35.37:80, 135.232.17.64:1927}[20%]&lt;BR/&gt;{34.41.35.37:80, 135.232.17.64:1928}[20%]&lt;BR/&gt;{34.41.35.37:80, 135.232.17.64:1929}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1934: (13.6364%)&lt;BR/&gt; 1929: (9.09091%)&lt;BR/&gt; 1928: (9.09091%)&lt;BR/&gt; 1927: (9.09091%)&gt;];
}
995--1055[label="1;1pkt 1fpkt"];
995--1933[label="1;5pkt 5fpkt"];
1055--1933[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.17.64" dst_port="1929" src_ip="34.41.35.37" src_port="80"/>
      <filter dst_ip="135.232.17.64" dst_port="1928" src_ip="34.41.35.37" src_port="80"/>
      <filter dst_ip="135.232.17.64" dst_port="1927" src_ip="34.41.35.37" src_port="80"/>
      <filter dst_ip="135.232.17.64" dst_port="1926" src_ip="34.41.35.37" src_port="80"/>
      <filter dst_ip="135.232.17.64" dst_port="1934" src_ip="86.193.130.177" src_port="80"/>
    </slice>
    <from sec="1057554007" usec="0"/>
    <to sec="1057554189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987512,1.97316,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
1072[label="210.101.207.144;d;2pkt 2fpkt", shape=diamond, color=yellow];
1073[label="53.194.234.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
2439[label="53.194.234.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3718[label="53.194.234.12;1pkt 1fpkt", shape=invtriangle, color=brown];
4291[label="53.194.234.12;1pkt 1fpkt", shape=invhouse, color=bisque];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.194.234.12:3063, 210.101.207.144:7883}[50%]&lt;BR/&gt;{54.182.161.140:4087, 210.101.207.144:7883}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7883: (50%)&lt;BR/&gt; 3063: (41.6667%)&lt;BR/&gt; 4087: (8.33333%)&gt;];
}
1072--1073[label="1;1pkt 1fpkt"];
1072--2439[label="1;1pkt 1fpkt"];
1072--3718[label="1;1pkt 1fpkt"];
1072--4291[label="1;1pkt 1fpkt"];
1073--2439[label="1;1pkt 1fpkt"];
1073--3718[label="1;1pkt 1fpkt"];
1073--4291[label="1;1pkt 1fpkt"];
2439--3718[label="1;1pkt 1fpkt"];
2439--4291[label="1;1pkt 1fpkt"];
3718--4291[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.101.207.144" dst_port="7883" src_ip="54.182.161.140" src_port="4087"/>
      <filter dst_ip="210.101.207.144" dst_port="7883" src_ip="53.194.234.12" src_port="3063"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26314,1.92327,010,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
452[label="36.21.98.213s;548pkt 548fpkt", shape=rectangle, color=red];
1111[label="36.21.98.213;s;602pkt 602fpkt", shape=diamond, color=yellow];
2058[label="36.21.98.213;s;538pkt 538fpkt", shape=hexagon, color=black];
3520[label="36.21.98.213;637pkt 637fpkt", shape=pentagon, color=darkviolet];
4209[label="36.21.98.213;636pkt 636fpkt", shape=invtriangle, color=brown];
4504[label="36.21.98.213;636pkt 636fpkt", shape=invhouse, color=bisque];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.21.98.213:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 4812: (0.0834028%)&lt;BR/&gt; 4811: (0.0834028%)&lt;BR/&gt; 4810: (0.0834028%)&lt;BR/&gt; 4809: (0.0834028%)&gt;];
}
452--1111[label="1;548pkt 548fpkt"];
452--2058[label="0.944238;508pkt 508fpkt"];
452--3520[label="1;548pkt 548fpkt"];
452--4209[label="0.998175;547pkt 547fpkt"];
452--4504[label="0.998175;547pkt 547fpkt"];
1111--2058[label="1;538pkt 538fpkt"];
1111--3520[label="1;602pkt 602fpkt"];
1111--4209[label="0.998339;601pkt 601fpkt"];
1111--4504[label="0.998339;601pkt 601fpkt"];
2058--3520[label="1;538pkt 538fpkt"];
2058--4209[label="0.998141;537pkt 537fpkt"];
2058--4504[label="0.998141;537pkt 537fpkt"];
3520--4209[label="1;636pkt 636fpkt"];
3520--4504[label="1;636pkt 636fpkt"];
4209--4504[label="1;636pkt 636fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="36.21.98.213"/>
    </slice>
    <from sec="1057554004" usec="0"/>
    <to sec="1057554885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.94234,1.9891,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
919[label="199.189.235.74;s;2pkt 2fpkt", shape=diamond, color=yellow];
1176[label="150.8.53.81;d;1pkt 1fpkt", shape=diamond, color=yellow];
1644[label="150.8.53.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
2149[label="199.189.235.74;s;2pkt 2fpkt", shape=hexagon, color=black];
2814[label="199.189.235.74;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.189.235.74:8292, 150.8.53.74:8277}[50%]&lt;BR/&gt;{199.189.235.74:8292, 150.8.53.81:8277}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (50%)&lt;BR/&gt; 8277: (50%)&gt;];
}
919--1176[label="1;1pkt 1fpkt"];
919--1644[label="1;1pkt 1fpkt"];
919--2149[label="1;2pkt 2fpkt"];
919--2814[label="1;2pkt 2fpkt"];
1176--2149[label="1;1pkt 1fpkt"];
1176--2814[label="1;1pkt 1fpkt"];
1644--2149[label="1;1pkt 1fpkt"];
1644--2814[label="1;1pkt 1fpkt"];
2149--2814[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.53.81" dst_port="8277" src_ip="199.189.235.74" src_port="8292"/>
      <filter dst_ip="150.8.53.74" dst_port="8277" src_ip="199.189.235.74" src_port="8292"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
1195[label="172.73.200.43;d;1pkt 1fpkt", shape=diamond, color=yellow];
1196[label="52.178.161.204;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.178.161.204:58627, 172.73.200.43:33454}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58627: (50%)&lt;BR/&gt; 33454: (50%)&gt;];
}
1195--1196[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.73.200.43" dst_port="33454" src_ip="52.178.161.204" src_port="58627"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
1209[label="135.232.230.14;d;363pkt 363fpkt", shape=diamond, color=yellow];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:445, 135.232.230.14:*}[83.1956%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (41.5978%)&lt;BR/&gt; 139: (6.61157%)&lt;BR/&gt; 0: (2.75482%)&lt;BR/&gt; 1897: (0.275482%)&lt;BR/&gt; 137: (0.275482%)&gt;];
}
1209--2329[label="0.00275482;1pkt 1fpkt"];
1209--2333[label="0.00275482;1pkt 1fpkt"];
1209--2339[label="0.00275482;1pkt 1fpkt"];
1209--2342[label="0.00275482;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.230.14" src_port="445"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752891,1.97431,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
1304[label="168.253.117.74;d;155pkt 155fpkt", shape=diamond, color=yellow];
1305[label="36.111.124.39;s;154pkt 154fpkt", shape=diamond, color=yellow];
2620[label="36.111.124.39;166pkt 166fpkt", shape=pentagon, color=darkviolet];
3801[label="36.111.124.39;167pkt 167fpkt", shape=invtriangle, color=brown];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.111.124.39:*, 168.253.117.74:25}[99.4048%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4994: (0.311526%)&lt;BR/&gt; 4962: (0.311526%)&lt;BR/&gt; 4942: (0.311526%)&lt;BR/&gt; 4927: (0.311526%)&gt;];
}
1304--1305[label="1;154pkt 154fpkt"];
1304--1766[label="0.0070922;1pkt 1fpkt"];
1304--2620[label="0.987097;153pkt 153fpkt"];
1304--3801[label="0.993548;154pkt 154fpkt"];
1305--2620[label="0.993506;153pkt 153fpkt"];
1305--3801[label="1;154pkt 154fpkt"];
2620--3801[label="1;166pkt 166fpkt"];
</description>
    <slice>
      <filter dst_ip="168.253.117.74" dst_port="25" src_ip="36.111.124.39"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.89.16.67"/>
      <from sec="1057554001" usec="0"/>
      <to sec="1057554827" usec="0"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="213.7.197.206"/>
      <from sec="1057554003" usec="0"/>
      <to sec="1057554827" usec="0"/>
    </slice>
    <from sec="1057554003" usec="0"/>
    <to sec="1057554827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05344,1.99952,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
290[label="53.176.116.144s;1pkt 1fpkt", shape=rectangle, color=red];
1342[label="150.9.13.145;d;6pkt 6fpkt", shape=diamond, color=yellow];
1343[label="53.176.116.144;s;6pkt 6fpkt", shape=diamond, color=yellow];
2062[label="150.9.13.145;d;5pkt 5fpkt", shape=hexagon, color=black];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.176.116.144:80, 150.9.13.145:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1297: (11.1111%)&lt;BR/&gt; 1303: (8.33333%)&lt;BR/&gt; 1300: (8.33333%)&lt;BR/&gt; 1296: (8.33333%)&gt;];
}
290--1342[label="1;1pkt 1fpkt"];
290--1343[label="1;1pkt 1fpkt"];
290--2062[label="1;1pkt 1fpkt"];
1342--1343[label="1;6pkt 6fpkt"];
1342--2062[label="1;5pkt 5fpkt"];
1343--2062[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.13.145" src_ip="53.176.116.144" src_port="80"/>
    </slice>
    <from sec="1057554008" usec="0"/>
    <to sec="1057554663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
1374[label="211.168.247.246;s;13pkt 13fpkt", shape=diamond, color=yellow];
1375[label="210.8.103.121;d;6pkt 6fpkt", shape=diamond, color=yellow];
2137[label="210.8.103.121;d;6pkt 6fpkt", shape=hexagon, color=black];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.168.247.246:80, 210.8.103.121:*}[69.2308%]&lt;BR/&gt;{211.168.247.246:80, 135.110.131.214:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49073: (6%)&lt;BR/&gt; 48827: (6%)&lt;BR/&gt; 48706: (6%)&lt;BR/&gt; 48497: (6%)&gt;];
}
1374--1375[label="1;6pkt 6fpkt"];
1374--2137[label="1;6pkt 6fpkt"];
1375--2137[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="210.8.103.121" src_ip="211.168.247.246" src_port="80"/>
      <filter dst_ip="135.110.131.214" src_ip="211.168.247.246" src_port="80"/>
    </slice>
    <from sec="1057554226" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
1385[label="135.232.232.74;d;7pkt 7fpkt", shape=diamond, color=yellow];
1398[label="85.5.237.95;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.5.237.95:*, 135.232.232.74:6970}[42.8571%]&lt;BR/&gt;{85.5.237.95:554, 135.232.232.74:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6970: (23.0769%)&lt;BR/&gt; 554: (23.0769%)&lt;BR/&gt; 30556: (7.69231%)&lt;BR/&gt; 25382: (7.69231%)&lt;BR/&gt; 11818: (7.69231%)&gt;];
}
1385--1398[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.232.74" src_ip="85.5.237.95" src_port="554"/>
      <filter dst_ip="135.232.232.74" dst_port="6970" src_ip="85.5.237.95"/>
    </slice>
    <from sec="1057554322" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01793,1.95255,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
7[label="135.232.96.15s;1pkt 1fpkt", shape=rectangle, color=red];
1337[label="135.232.96.15;s;68pkt 68fpkt", shape=diamond, color=yellow];
1403[label="119.106.128.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
1817[label="210.185.162.143;d;5pkt 5fpkt", shape=diamond, color=yellow];
2189[label="119.106.128.146;d;1pkt 1fpkt", shape=hexagon, color=black];
2455[label="135.232.96.15;74pkt 74fpkt", shape=pentagon, color=darkviolet];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.232.96.15:80, 196.88.216.89:*}[32%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1176: (1.66667%)&lt;BR/&gt; 7071: (1%)&lt;BR/&gt; 6995: (1%)&lt;BR/&gt; 6681: (1%)&gt;];
}
7--1337[label="1;1pkt 1fpkt"];
7--1403[label="1;1pkt 1fpkt"];
7--2189[label="1;1pkt 1fpkt"];
7--2455[label="1;1pkt 1fpkt"];
1337--1403[label="1;1pkt 1fpkt"];
1337--1817[label="1;5pkt 5fpkt"];
1337--2189[label="1;1pkt 1fpkt"];
1337--2455[label="0.985294;67pkt 67fpkt"];
1403--2189[label="1;1pkt 1fpkt"];
1403--2455[label="1;1pkt 1fpkt"];
1817--2455[label="1;5pkt 5fpkt"];
2189--2455[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.88.216.89" src_ip="135.232.96.15" src_port="80"/>
    </slice>
    <from sec="1057554004" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
1340[label="211.8.112.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
1448[label="211.90.45.85;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.8.112.181:0, 211.90.45.85:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1340--1448[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.90.45.85" src_ip="211.8.112.181"/>
    </slice>
    <from sec="1057554006" usec="0"/>
    <to sec="1057554827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
1485[label="135.232.12.24;d;2pkt 2fpkt", shape=diamond, color=yellow];
1491[label="193.129.99.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.129.99.11:8762, 135.232.12.24:49157}[50%]&lt;BR/&gt;{174.160.30.195:80, 135.232.12.24:49156}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49157: (33.3333%)&lt;BR/&gt; 8762: (33.3333%)&lt;BR/&gt; 49156: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
1485--1491[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.12.24" dst_port="49156" src_ip="174.160.30.195" src_port="80"/>
      <filter dst_ip="135.232.12.24" dst_port="49157" src_ip="193.129.99.11" src_port="8762"/>
    </slice>
    <from sec="1057554397" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
1494[label="211.80.122.200;d;2pkt 2fpkt", shape=diamond, color=yellow];
1495[label="200.137.177.172;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.137.177.172:3338, 211.80.122.200:10648}[50%]&lt;BR/&gt;{200.137.177.172:20037, 211.80.122.200:3333}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20037: (25%)&lt;BR/&gt; 10648: (25%)&lt;BR/&gt; 3338: (25%)&lt;BR/&gt; 3333: (25%)&gt;];
}
1494--1495[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.122.200" dst_port="3333" src_ip="200.137.177.172" src_port="20037"/>
      <filter dst_ip="211.80.122.200" dst_port="10648" src_ip="200.137.177.172" src_port="3338"/>
    </slice>
    <from sec="1057554433" usec="0"/>
    <to sec="1057554767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
1503[label="218.67.104.39;d;1pkt 1fpkt", shape=diamond, color=yellow];
1505[label="35.55.110.73;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.55.110.73:80, 218.67.104.39:2930}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2930: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1503--1505[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.67.104.39" dst_port="2930" src_ip="35.55.110.73" src_port="80"/>
    </slice>
    <from sec="1057554466" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
1528[label="85.48.150.10;d;6pkt 6fpkt", shape=diamond, color=yellow];
1530[label="135.232.233.74;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.232.233.74:*, 85.48.150.10:2002}[50%]&lt;BR/&gt;{135.232.233.74:*, 85.48.150.10:3400}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3400: (25%)&lt;BR/&gt; 2002: (25%)&lt;BR/&gt; 1677: (8.33333%)&lt;BR/&gt; 1676: (8.33333%)&lt;BR/&gt; 1675: (8.33333%)&gt;];
}
1528--1530[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="85.48.150.10" dst_port="3400" src_ip="135.232.233.74"/>
      <filter dst_ip="85.48.150.10" dst_port="2002" src_ip="135.232.233.74"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
1538[label="210.101.240.7;d;5pkt 5fpkt", shape=diamond, color=yellow];
1539[label="150.154.136.212;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.28.208.106:4527, 210.101.240.7:80}[20%]&lt;BR/&gt;{150.154.136.212:3840, 210.101.240.7:2026}[20%]&lt;BR/&gt;{36.68.7.185:79, 210.101.240.7:2284}[20%]&lt;BR/&gt;{36.68.7.185:79, 210.101.240.7:2299}[20%]&lt;BR/&gt;{36.68.7.185:79, 210.101.240.7:2390}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 79: (25%)&lt;BR/&gt; 3840: (16.6667%)&lt;BR/&gt; 2026: (16.6667%)&lt;BR/&gt; 4527: (8.33333%)&lt;BR/&gt; 2390: (8.33333%)&gt;];
}
1538--1539[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.101.240.7" dst_port="2390" src_ip="36.68.7.185" src_port="79"/>
      <filter dst_ip="210.101.240.7" dst_port="2299" src_ip="36.68.7.185" src_port="79"/>
      <filter dst_ip="210.101.240.7" dst_port="2284" src_ip="36.68.7.185" src_port="79"/>
      <filter dst_ip="210.101.240.7" dst_port="2026" src_ip="150.154.136.212" src_port="3840"/>
      <filter dst_ip="210.101.240.7" dst_port="80" src_ip="210.28.208.106" src_port="4527"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
1425[label="203.219.14.88;s;2pkt 2fpkt", shape=diamond, color=yellow];
1540[label="172.35.162.246;d;2pkt 2fpkt", shape=diamond, color=yellow];
2158[label="203.219.14.88;s;2pkt 2fpkt", shape=hexagon, color=black];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.219.14.88:0, 172.35.162.246:0}[50%]&lt;BR/&gt;{203.219.14.88:49649, 172.35.162.246:1615}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 49649: (25%)&lt;BR/&gt; 1615: (25%)&gt;];
}
1425--1540[label="1;2pkt 2fpkt"];
1425--2158[label="1;2pkt 2fpkt"];
1540--2158[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.35.162.246" dst_port="1615" src_ip="203.219.14.88" src_port="49649"/>
      <filter dst_ip="172.35.162.246" src_ip="203.219.14.88"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05344,1.99952,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
186[label="85.81.96.45s;1pkt 1fpkt", shape=rectangle, color=red];
1557[label="216.138.104.45;s;5pkt 5fpkt", shape=diamond, color=yellow];
2167[label="216.138.104.45;s;5pkt 5fpkt", shape=hexagon, color=black];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.138.104.45:6661, 168.253.84.4:1795}[20%]&lt;BR/&gt;{216.138.104.45:6662, 168.253.98.24:1909}[20%]&lt;BR/&gt;{216.138.104.45:6661, 168.253.136.25:1103}[20%]&lt;BR/&gt;{216.138.104.45:3043, 168.253.122.86:113}[20%]&lt;BR/&gt;{216.138.104.45:6662, 168.253.122.86:1402}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6662: (22.7273%)&lt;BR/&gt; 6661: (18.1818%)&lt;BR/&gt; 1402: (13.6364%)&lt;BR/&gt; 3043: (9.09091%)&lt;BR/&gt; 1909: (9.09091%)&gt;];
}
186--1557[label="1;1pkt 1fpkt"];
186--2167[label="1;1pkt 1fpkt"];
1557--2167[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="168.253.122.86" dst_port="1402" src_ip="216.138.104.45" src_port="6662"/>
      <filter dst_ip="168.253.122.86" dst_port="113" src_ip="216.138.104.45" src_port="3043"/>
      <filter dst_ip="168.253.136.25" dst_port="1103" src_ip="216.138.104.45" src_port="6661"/>
      <filter dst_ip="168.253.98.24" dst_port="1909" src_ip="216.138.104.45" src_port="6662"/>
      <filter dst_ip="168.253.84.4" dst_port="1795" src_ip="216.138.104.45" src_port="6661"/>
    </slice>
    <from sec="1057554005" usec="0"/>
    <to sec="1057554784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="211.35.70.136"/>
      <from sec="1057554546" usec="0"/>
      <to sec="1057554576" usec="0"/>
    </slice>
    <from sec="1057554546" usec="0"/>
    <to sec="1057554576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
1556[label="211.168.247.245;s;76pkt 76fpkt", shape=diamond, color=yellow];
1628[label="210.204.164.36;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.168.247.245:51474, *:53}[56.5789%]&lt;BR/&gt;{211.168.247.245:80, 35.130.216.12:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (30.625%)&lt;BR/&gt; 51474: (26.875%)&lt;BR/&gt; 80: (16.875%)&lt;BR/&gt; 25: (3.125%)&lt;BR/&gt; 3653: (1.25%)&gt;];
}
1556--1628[label="1;4pkt 4fpkt"];
1556--2327[label="0.0526316;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="35.130.216.12" src_ip="211.168.247.245" src_port="80"/>
      <filter dst_port="53" src_ip="211.168.247.245" src_port="51474"/>
    </slice>
    <from sec="1057554005" usec="0"/>
    <to sec="1057554827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752891,1.97431,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
1608[label="150.9.75.118;d;16pkt 16fpkt", shape=diamond, color=yellow];
1631[label="34.7.176.106;s;5pkt 5fpkt", shape=diamond, color=yellow];
2685[label="202.102.174.52;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2965[label="34.7.176.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3949[label="34.7.176.106;13pkt 13fpkt", shape=invtriangle, color=brown];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 150.9.75.118:*}[33.3333%]&lt;BR/&gt;{*:53, 150.9.75.118:*}[25.9259%]&lt;BR/&gt;{34.7.176.106:80, 150.9.14.178:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.0256%)&lt;BR/&gt; 53: (8.97436%)&lt;BR/&gt; 64095: (3.84615%)&lt;BR/&gt; 64085: (3.84615%)&lt;BR/&gt; 64050: (3.84615%)&gt;];
}
1608--1631[label="1;5pkt 5fpkt"];
1608--2685[label="0.25;1pkt 1fpkt"];
1608--3949[label="0.384615;5pkt 5fpkt"];
1631--3949[label="1;5pkt 5fpkt"];
2965--3949[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.75.118" src_port="80"/>
      <filter dst_ip="150.9.75.118" src_port="53"/>
      <filter dst_ip="150.9.14.178" src_ip="34.7.176.106" src_port="80"/>
    </slice>
    <from sec="1057554035" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752891,1.97431,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
1529[label="85.48.150.10;s;6pkt 6fpkt", shape=diamond, color=yellow];
1643[label="135.232.233.74;d;6pkt 6fpkt", shape=diamond, color=yellow];
2427[label="85.48.150.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3712[label="85.48.150.10;1pkt 1fpkt", shape=invtriangle, color=brown];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.48.150.10:2002, 135.232.233.74:*}[50%]&lt;BR/&gt;{85.48.150.10:3400, 135.232.233.74:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3400: (28.5714%)&lt;BR/&gt; 2002: (21.4286%)&lt;BR/&gt; 1665: (14.2857%)&lt;BR/&gt; 1677: (7.14286%)&lt;BR/&gt; 1676: (7.14286%)&gt;];
}
1529--1643[label="1;6pkt 6fpkt"];
1529--2427[label="1;1pkt 1fpkt"];
1529--3712[label="1;1pkt 1fpkt"];
1643--2427[label="1;1pkt 1fpkt"];
1643--3712[label="1;1pkt 1fpkt"];
2427--3712[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.233.74" src_ip="85.48.150.10" src_port="3400"/>
      <filter dst_ip="135.232.233.74" src_ip="85.48.150.10" src_port="2002"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="135.232.96.156"/>
      <from sec="1057554000" usec="0"/>
      <to sec="1057554828" usec="0"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.34.68.163"/>
      <from sec="1057554001" usec="0"/>
      <to sec="1057554738" usec="0"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02269,2.01094,999,1 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
427[label="135.232.31.73s;2pkt 2fpkt", shape=rectangle, color=red];
1095[label="135.232.31.73;s;104pkt 104fpkt", shape=diamond, color=yellow];
1659[label="203.11.180.72;d;1pkt 1fpkt", shape=diamond, color=yellow];
4374[label="135.232.31.73;106pkt 106fpkt", shape=invhouse, color=bisque];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.232.31.73:*, *:2234}[72.6415%]&lt;BR/&gt;{135.232.31.73:2234, *:*}[22.6415%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2234: (47.6526%)&lt;BR/&gt; 80: (1.40845%)&lt;BR/&gt; 3778: (0.938967%)&lt;BR/&gt; 3710: (0.704225%)&lt;BR/&gt; 64361: (0.469484%)&gt;];
}
427--1095[label="1;2pkt 2fpkt"];
427--1659[label="1;1pkt 1fpkt"];
427--4374[label="1;2pkt 2fpkt"];
1095--1659[label="1;1pkt 1fpkt"];
1095--2328[label="0.0192308;2pkt 2fpkt"];
1095--4374[label="1;104pkt 104fpkt"];
1659--4374[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="135.232.31.73" src_port="2234"/>
      <filter dst_port="2234" src_ip="135.232.31.73"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.73.26.48"/>
      <from sec="1057554591" usec="0"/>
      <to sec="1057554738" usec="0"/>
    </slice>
    <from sec="1057554591" usec="0"/>
    <to sec="1057554738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="86.231.173.59"/>
      <from sec="1057554692" usec="0"/>
      <to sec="1057554800" usec="0"/>
    </slice>
    <from sec="1057554692" usec="0"/>
    <to sec="1057554800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987512,1.97316,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
1746[label="150.8.149.205;d;2pkt 2fpkt", shape=diamond, color=yellow];
1747[label="34.41.28.82;s;3pkt 3fpkt", shape=diamond, color=yellow];
2840[label="34.41.28.82;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3903[label="34.41.28.82;2pkt 2fpkt", shape=invtriangle, color=brown];
4384[label="34.41.28.82;2pkt 2fpkt", shape=invhouse, color=bisque];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.41.28.82:80, 150.8.149.205:2403}[33.3333%]&lt;BR/&gt;{34.41.28.82:80, 150.8.149.205:2404}[33.3333%]&lt;BR/&gt;{34.41.28.82:80, 150.8.149.205:2408}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2404: (22.7273%)&lt;BR/&gt; 2408: (18.1818%)&lt;BR/&gt; 2403: (9.09091%)&gt;];
}
1746--1747[label="1;2pkt 2fpkt"];
1746--2840[label="0.5;1pkt 1fpkt"];
1746--3903[label="0.5;1pkt 1fpkt"];
1746--4384[label="0.5;1pkt 1fpkt"];
1747--2840[label="1;2pkt 2fpkt"];
1747--3903[label="1;2pkt 2fpkt"];
1747--4384[label="1;2pkt 2fpkt"];
2840--3903[label="1;2pkt 2fpkt"];
2840--4384[label="1;2pkt 2fpkt"];
3903--4384[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.149.205" dst_port="2408" src_ip="34.41.28.82" src_port="80"/>
      <filter dst_ip="150.8.149.205" dst_port="2404" src_ip="34.41.28.82" src_port="80"/>
      <filter dst_ip="150.8.149.205" dst_port="2403" src_ip="34.41.28.82" src_port="80"/>
    </slice>
    <from sec="1057554716" usec="0"/>
    <to sec="1057554766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
1433[label="35.90.193.46;s;225pkt 225fpkt", shape=diamond, color=yellow];
1759[label="150.9.172.118;d;235pkt 235fpkt", shape=diamond, color=yellow];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.90.193.46:2064, 150.9.172.118:*}[95.7447%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2064: (49.0217%)&lt;BR/&gt; 80: (0.869565%)&lt;BR/&gt; 4768: (0.326087%)&lt;BR/&gt; 1086: (0.326087%)&lt;BR/&gt; 4999: (0.217391%)&gt;];
}
1433--1759[label="1;225pkt 225fpkt"];
1759--2014[label="0.0060241;1pkt 1fpkt"];
1759--2227[label="0.0107527;1pkt 1fpkt"];
1759--2305[label="0.00598802;1pkt 1fpkt"];
1759--3516[label="0.010101;1pkt 1fpkt"];
1759--4207[label="0.0102041;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.172.118" src_ip="35.90.193.46" src_port="2064"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.89.16.18"/>
      <from sec="1057554002" usec="0"/>
      <to sec="1057554828" usec="0"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="213.7.197.171"/>
      <from sec="1057554052" usec="0"/>
      <to sec="1057554827" usec="0"/>
    </slice>
    <from sec="1057554052" usec="0"/>
    <to sec="1057554827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
1726[label="144.147.200.156;d;2pkt 2fpkt", shape=diamond, color=yellow];
1830[label="32.95.191.117;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.95.191.117:57348, 144.147.200.156:1248}[50%]&lt;BR/&gt;{196.184.40.176:14907, 144.147.200.156:1248}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1248: (50%)&lt;BR/&gt; 57348: (33.3333%)&lt;BR/&gt; 14907: (16.6667%)&gt;];
}
1726--1830[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.200.156" dst_port="1248" src_ip="196.184.40.176" src_port="14907"/>
      <filter dst_ip="144.147.200.156" dst_port="1248" src_ip="32.95.191.117" src_port="57348"/>
    </slice>
    <from sec="1057554563" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="198.210.101.62"/>
      <from sec="1057554686" usec="0"/>
      <to sec="1057554827" usec="0"/>
    </slice>
    <from sec="1057554686" usec="0"/>
    <to sec="1057554827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
1824[label="172.73.85.28;d;74pkt 74fpkt", shape=diamond, color=yellow];
1840[label="198.194.14.155;s;72pkt 72fpkt", shape=diamond, color=yellow];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.194.14.155:80, 172.73.85.28:*}[94.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6301%)&lt;BR/&gt; 1863: (1.0274%)&lt;BR/&gt; 3435: (0.684932%)&lt;BR/&gt; 3434: (0.684932%)&lt;BR/&gt; 3433: (0.684932%)&gt;];
}
1824--1840[label="0.986111;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="172.73.85.28" src_ip="198.194.14.155" src_port="80"/>
    </slice>
    <from sec="1057554572" usec="0"/>
    <to sec="1057554799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845583,1.93748,010,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
24[label="85.4.12.39s;254pkt 254fpkt", shape=rectangle, color=red];
1846[label="85.4.12.39;s;256pkt 256fpkt", shape=diamond, color=yellow];
2616[label="85.4.12.39;255pkt 255fpkt", shape=pentagon, color=darkviolet];
3799[label="85.4.12.39;255pkt 255fpkt", shape=invtriangle, color=brown];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.4.12.39:*, *:139}[99.2188%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.7059%)&lt;BR/&gt; 0: (0.588235%)&lt;BR/&gt; 3310: (0.196078%)&lt;BR/&gt; 3309: (0.196078%)&lt;BR/&gt; 3308: (0.196078%)&gt;];
}
24--1846[label="1;254pkt 254fpkt"];
24--2616[label="0.996063;253pkt 253fpkt"];
24--3799[label="0.996063;253pkt 253fpkt"];
1846--2616[label="1;255pkt 255fpkt"];
1846--3799[label="1;255pkt 255fpkt"];
2616--3799[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="85.4.12.39"/>
    </slice>
    <from sec="1057554743" usec="0"/>
    <to sec="1057554777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.699565,2.04755,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="104.13.69.109"/>
      <from sec="1057554782" usec="0"/>
      <to sec="1057554828" usec="0"/>
    </slice>
    <from sec="1057554782" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26314,1.92327,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
16[label="154.60.129.21s;3pkt 3fpkt", shape=rectangle, color=red];
681[label="144.34.51.16;d;21pkt 21fpkt", shape=diamond, color=yellow];
682[label="32.59.16.2;s;6pkt 6fpkt", shape=diamond, color=yellow];
741[label="154.60.129.21;s;4pkt 4fpkt", shape=diamond, color=yellow];
1328[label="53.196.49.214;s;1pkt 1fpkt", shape=diamond, color=yellow];
1692[label="154.137.71.24;s;10pkt 10fpkt", shape=diamond, color=yellow];
1866[label="32.59.16.2;s;6pkt 6fpkt", shape=hexagon, color=black];
2055[label="53.196.49.214;s;1pkt 1fpkt", shape=hexagon, color=black];
2093[label="154.60.129.21;s;4pkt 4fpkt", shape=hexagon, color=black];
2260[label="154.137.71.24;s;10pkt 10fpkt", shape=hexagon, color=black];
2370[label="32.59.16.2;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2501[label="154.60.129.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2520[label="154.137.71.24;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3524[label="53.196.49.214;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3691[label="32.59.16.2;5pkt 5fpkt", shape=invtriangle, color=brown];
3746[label="154.60.129.21;4pkt 4fpkt", shape=invtriangle, color=brown];
3756[label="154.137.71.24;11pkt 11fpkt", shape=invtriangle, color=brown];
4301[label="154.60.129.21;3pkt 3fpkt", shape=invhouse, color=bisque];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.137.71.24:*, 144.34.51.16:*}[50%]&lt;BR/&gt;{32.59.16.2:*, 144.34.51.16:*}[27.2727%]&lt;BR/&gt;{*:6882, 144.34.51.16:*}[22.7273%]&lt;BR/&gt;{*:6883, 144.34.51.16:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6883: (12.1495%)&lt;BR/&gt; 6882: (12.1495%)&lt;BR/&gt; 6886: (6.54206%)&lt;BR/&gt; 6887: (5.60748%)&lt;BR/&gt; 6890: (4.6729%)&gt;];
}
16--681[label="1;3pkt 3fpkt"];
16--741[label="1;3pkt 3fpkt"];
16--2093[label="1;3pkt 3fpkt"];
16--3746[label="1;3pkt 3fpkt"];
16--4301[label="0.666667;2pkt 2fpkt"];
681--682[label="1;6pkt 6fpkt"];
681--741[label="1;4pkt 4fpkt"];
681--1328[label="1;1pkt 1fpkt"];
681--1692[label="1;10pkt 10fpkt"];
681--1866[label="1;6pkt 6fpkt"];
681--2055[label="1;1pkt 1fpkt"];
681--2093[label="1;4pkt 4fpkt"];
681--2260[label="1;10pkt 10fpkt"];
681--2370[label="1;6pkt 6fpkt"];
681--2501[label="1;1pkt 1fpkt"];
681--2520[label="0.9;9pkt 9fpkt"];
681--3524[label="1;1pkt 1fpkt"];
681--3691[label="1;5pkt 5fpkt"];
681--3746[label="1;4pkt 4fpkt"];
681--3756[label="0.909091;10pkt 10fpkt"];
681--4301[label="1;3pkt 3fpkt"];
682--1866[label="1;6pkt 6fpkt"];
682--2370[label="1;6pkt 6fpkt"];
682--3691[label="1;5pkt 5fpkt"];
741--2093[label="1;4pkt 4fpkt"];
741--2501[label="1;1pkt 1fpkt"];
741--3746[label="1;4pkt 4fpkt"];
741--4301[label="1;3pkt 3fpkt"];
1328--2055[label="1;1pkt 1fpkt"];
1328--3524[label="1;1pkt 1fpkt"];
1692--2260[label="1;10pkt 10fpkt"];
1692--2520[label="0.9;9pkt 9fpkt"];
1692--3756[label="1;10pkt 10fpkt"];
1866--2370[label="1;6pkt 6fpkt"];
1866--3691[label="1;5pkt 5fpkt"];
2055--3524[label="1;1pkt 1fpkt"];
2093--2501[label="1;1pkt 1fpkt"];
2093--3746[label="1;4pkt 4fpkt"];
2093--4301[label="1;3pkt 3fpkt"];
2260--2520[label="0.9;9pkt 9fpkt"];
2260--3756[label="1;10pkt 10fpkt"];
2370--3691[label="1;5pkt 5fpkt"];
2501--3746[label="1;1pkt 1fpkt"];
2501--4301[label="1;1pkt 1fpkt"];
2520--3756[label="1;10pkt 10fpkt"];
3746--4301[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="144.34.51.16" src_ip="154.137.71.24"/>
      <filter dst_ip="144.34.51.16" src_ip="32.59.16.2"/>
      <filter dst_ip="144.34.51.16" src_port="6883"/>
      <filter dst_ip="144.34.51.16" src_port="6882"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.94234,1.9891,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
810[label="135.232.30.164;d;46pkt 46fpkt", shape=diamond, color=yellow];
1884[label="135.232.30.164;d;46pkt 46fpkt", shape=hexagon, color=black];
2968[label="198.194.12.107;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.194.12.109:*, 135.232.30.164:9701}[30.1887%]&lt;BR/&gt;{35.36.73.30:*, 135.232.30.164:9701}[24.5283%]&lt;BR/&gt;{198.194.12.107:*, *:*}[24.5283%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9701: (47.619%)&lt;BR/&gt; 9700: (2.38095%)&lt;BR/&gt; 47405: (1.42857%)&lt;BR/&gt; 47404: (1.42857%)&lt;BR/&gt; 47403: (1.42857%)&gt;];
}
810--1884[label="1;46pkt 46fpkt"];
810--2968[label="0.461538;6pkt 6fpkt"];
1884--2968[label="0.461538;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="198.194.12.107"/>
      <filter dst_ip="135.232.30.164" dst_port="9701" src_ip="198.194.12.109"/>
      <filter dst_ip="135.232.30.164" dst_port="9701" src_ip="35.36.73.30"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.94234,1.9891,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
718[label="172.73.1.214;d;316pkt 316fpkt", shape=diamond, color=yellow];
775[label="104.27.35.141;s;1pkt 1fpkt", shape=diamond, color=yellow];
854[label="52.86.58.240;s;1pkt 1fpkt", shape=diamond, color=yellow];
1212[label="52.177.44.116;s;1pkt 1fpkt", shape=diamond, color=yellow];
1524[label="53.18.122.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
1822[label="52.145.2.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
1895[label="52.86.58.240;s;1pkt 1fpkt", shape=hexagon, color=black];
2043[label="104.27.35.141;s;1pkt 1fpkt", shape=hexagon, color=black];
2646[label="192.1.221.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 172.73.1.214:*}[74.0506%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (41.5123%)&lt;BR/&gt; 4661: (1.85185%)&lt;BR/&gt; 3638: (1.23457%)&lt;BR/&gt; 80: (1.08025%)&lt;BR/&gt; 4665: (0.771605%)&gt;];
}
718--775[label="1;1pkt 1fpkt"];
718--854[label="1;1pkt 1fpkt"];
718--1212[label="1;1pkt 1fpkt"];
718--1524[label="1;1pkt 1fpkt"];
718--1822[label="1;1pkt 1fpkt"];
718--1895[label="1;1pkt 1fpkt"];
718--2043[label="1;1pkt 1fpkt"];
718--2646[label="1;1pkt 1fpkt"];
775--2043[label="1;1pkt 1fpkt"];
854--1895[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.73.1.214" src_port="4662"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.94234,1.9891,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
707[label="144.3.116.2;s;1116pkt 1116fpkt", shape=diamond, color=yellow];
1900[label="144.3.116.2;s;830pkt 830fpkt", shape=hexagon, color=black];
2374[label="144.3.116.2;1204pkt 1204fpkt", shape=pentagon, color=darkviolet];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.3.116.2:0, *:0}[99.8339%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8095%)&lt;BR/&gt; 65534: (0.0952381%)&lt;BR/&gt; 53: (0.0952381%)&gt;];
}
707--1900[label="1;830pkt 830fpkt"];
707--2374[label="1;1116pkt 1116fpkt"];
1900--2374[label="1;830pkt 830fpkt"];
</description>
    <slice>
      <filter src_ip="144.3.116.2"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.94234,1.9891,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
735[label="144.34.35.42;d;23pkt 23fpkt", shape=diamond, color=yellow];
884[label="36.76.85.54;s;2pkt 2fpkt", shape=diamond, color=yellow];
941[label="197.170.138.189;s;3pkt 3fpkt", shape=diamond, color=yellow];
1197[label="197.141.68.166;s;1pkt 1fpkt", shape=diamond, color=yellow];
1921[label="197.170.138.189;s;3pkt 3fpkt", shape=hexagon, color=black];
1960[label="36.76.85.54;s;2pkt 2fpkt", shape=hexagon, color=black];
2690[label="36.76.85.54;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1214, 144.34.35.42:*}[43.4783%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (30%)&lt;BR/&gt; 3373: (5.71429%)&lt;BR/&gt; 2298: (5.71429%)&lt;BR/&gt; 3386: (4.28571%)&lt;BR/&gt; 3364: (4.28571%)&gt;];
}
735--884[label="1;2pkt 2fpkt"];
735--941[label="1;3pkt 3fpkt"];
735--1197[label="1;1pkt 1fpkt"];
735--1921[label="1;3pkt 3fpkt"];
735--1960[label="1;2pkt 2fpkt"];
735--2690[label="1;1pkt 1fpkt"];
735--3324[label="0.130435;3pkt 3fpkt"];
735--4120[label="0.130435;3pkt 3fpkt"];
735--4468[label="0.130435;3pkt 3fpkt"];
884--1960[label="1;2pkt 2fpkt"];
884--2690[label="1;1pkt 1fpkt"];
941--1921[label="1;3pkt 3fpkt"];
1960--2690[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.34.35.42" src_port="1214"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
872[label="210.89.19.38;s;497pkt 497fpkt", shape=diamond, color=yellow];
1991[label="210.89.19.38;s;497pkt 497fpkt", shape=hexagon, color=black];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.89.19.38:53, *:*}[99.3964%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (58.4507%)&lt;BR/&gt; 32768: (1.81087%)&lt;BR/&gt; 1024: (1.71026%)&lt;BR/&gt; 32769: (1.00604%)&lt;BR/&gt; 4096: (0.603622%)&gt;];
}
872--1991[label="1;497pkt 497fpkt"];
872--2327[label="0.0160966;8pkt 8fpkt"];
1991--2327[label="0.0160966;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="210.89.19.38" src_port="53"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.94234,1.9891,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
1233[label="213.7.197.142;s;7pkt 7fpkt", shape=diamond, color=yellow];
2023[label="213.7.197.142;s;6pkt 6fpkt", shape=hexagon, color=black];
3170[label="213.7.197.142;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.197.142:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3529: (7.89474%)&lt;BR/&gt; 1804: (7.89474%)&lt;BR/&gt; 1080: (7.89474%)&lt;BR/&gt; 1075: (7.89474%)&gt;];
}
1233--2023[label="1;6pkt 6fpkt"];
1233--3170[label="1;6pkt 6fpkt"];
2023--3170[label="0.833333;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="213.7.197.142" src_port="1863"/>
    </slice>
    <from sec="1057554008" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.94234,1.9891,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
1293[label="218.136.8.254;s;215pkt 215fpkt", shape=diamond, color=yellow];
2037[label="218.136.8.254;s;193pkt 193fpkt", shape=hexagon, color=black];
3674[label="218.136.8.254;239pkt 239fpkt", shape=pentagon, color=darkviolet];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.136.8.254:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.6955%)&lt;BR/&gt; 1756: (0.463679%)&lt;BR/&gt; 1690: (0.463679%)&lt;BR/&gt; 1448: (0.463679%)&lt;BR/&gt; 1078: (0.463679%)&gt;];
}
1293--1412[label="0.00465116;1pkt 1fpkt"];
1293--1767[label="0.00465116;1pkt 1fpkt"];
1293--2037[label="1;193pkt 193fpkt"];
1293--2327[label="0.00465116;1pkt 1fpkt"];
1293--3674[label="1;215pkt 215fpkt"];
2037--2327[label="0.00518135;1pkt 1fpkt"];
2037--3674[label="1;193pkt 193fpkt"];
</description>
    <slice>
      <filter src_ip="218.136.8.254" src_port="53"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
953[label="135.232.98.72;s;14pkt 14fpkt", shape=diamond, color=yellow];
2047[label="135.232.98.72;s;11pkt 11fpkt", shape=hexagon, color=black];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.232.98.72:21, 192.124.243.192:*}[21.4286%]&lt;BR/&gt;{135.232.98.72:*, 196.124.1.154:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (42%)&lt;BR/&gt; 48241: (4%)&lt;BR/&gt; 48240: (4%)&lt;BR/&gt; 4974: (4%)&lt;BR/&gt; 3544: (4%)&gt;];
}
953--2047[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="196.124.1.154" src_ip="135.232.98.72"/>
      <filter dst_ip="192.124.243.192" src_ip="135.232.98.72" src_port="21"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
1311[label="32.131.254.31;s;1pkt 1fpkt", shape=diamond, color=yellow];
2049[label="32.131.254.31;s;1pkt 1fpkt", shape=hexagon, color=black];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.131.254.31:11999, 150.8.22.116:1114}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11999: (50%)&lt;BR/&gt; 1114: (50%)&gt;];
}
1311--2049[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.22.116" dst_port="1114" src_ip="32.131.254.31" src_port="11999"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01933,1.96153,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
1135[label="218.124.8.37;s;133pkt 133fpkt", shape=diamond, color=yellow];
1221[label="193.120.2.203;s;73pkt 73fpkt", shape=diamond, color=yellow];
1252[label="150.9.104.94;d;87pkt 87fpkt", shape=diamond, color=yellow];
1586[label="150.9.102.135;d;75pkt 75fpkt", shape=diamond, color=yellow];
1816[label="150.9.72.133;d;12pkt 12fpkt", shape=diamond, color=yellow];
2123[label="193.120.2.203;s;73pkt 73fpkt", shape=hexagon, color=black];
2135[label="218.124.8.37;s;77pkt 77fpkt", shape=hexagon, color=black];
3470[label="193.120.2.203;72pkt 72fpkt", shape=pentagon, color=darkviolet];
4183[label="193.120.2.203;71pkt 71fpkt", shape=invtriangle, color=brown];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 150.9.104.94:*}[37.9167%]&lt;BR/&gt;{218.124.8.37:80, 150.9.102.135:*}[30.8333%]&lt;BR/&gt;{193.120.2.203:80, *:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6285%)&lt;BR/&gt; 0: (0.594354%)&lt;BR/&gt; 62417: (0.371471%)&lt;BR/&gt; 62416: (0.371471%)&lt;BR/&gt; 62415: (0.371471%)&gt;];
}
1135--1252[label="0.218391;19pkt 19fpkt"];
1135--1586[label="0.933333;70pkt 70fpkt"];
1135--2135[label="1;77pkt 77fpkt"];
1221--1252[label="0.561644;41pkt 41fpkt"];
1221--1798[label="0.0273973;2pkt 2fpkt"];
1221--1816[label="0.833333;10pkt 10fpkt"];
1221--1877[label="0.0136986;1pkt 1fpkt"];
1221--2123[label="1;73pkt 73fpkt"];
1221--2290[label="0.0136986;1pkt 1fpkt"];
1221--3470[label="1;72pkt 72fpkt"];
1221--4183[label="1;71pkt 71fpkt"];
1252--2123[label="0.561644;41pkt 41fpkt"];
1252--2135[label="0.194805;15pkt 15fpkt"];
1252--3470[label="0.569444;41pkt 41fpkt"];
1252--4183[label="0.577465;41pkt 41fpkt"];
1586--2135[label="0.52;39pkt 39fpkt"];
1816--2123[label="0.833333;10pkt 10fpkt"];
1816--3470[label="0.833333;10pkt 10fpkt"];
1816--4183[label="0.833333;10pkt 10fpkt"];
2123--2290[label="0.0136986;1pkt 1fpkt"];
2123--3470[label="1;72pkt 72fpkt"];
2123--4183[label="1;71pkt 71fpkt"];
3470--4183[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter src_ip="193.120.2.203" src_port="80"/>
      <filter dst_ip="150.9.104.94" src_port="80"/>
      <filter dst_ip="150.9.102.135" src_ip="218.124.8.37" src_port="80"/>
    </slice>
    <from sec="1057554004" usec="0"/>
    <to sec="1057554831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01933,1.96153,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
1513[label="150.8.19.169;d;7pkt 7fpkt", shape=diamond, color=yellow];
1515[label="34.88.61.135;s;4pkt 4fpkt", shape=diamond, color=yellow];
1839[label="215.126.92.62;s;2pkt 2fpkt", shape=diamond, color=yellow];
2144[label="150.8.19.169;d;3pkt 3fpkt", shape=hexagon, color=black];
3114[label="34.88.61.135;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4020[label="34.88.61.135;4pkt 4fpkt", shape=invtriangle, color=brown];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.88.61.135:80, 150.8.19.169:*}[57.1429%]&lt;BR/&gt;{215.126.92.62:80, 150.8.19.169:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1199: (10.4167%)&lt;BR/&gt; 1198: (10.4167%)&lt;BR/&gt; 1201: (8.33333%)&lt;BR/&gt; 1200: (8.33333%)&gt;];
}
1513--1515[label="1;4pkt 4fpkt"];
1513--1839[label="1;2pkt 2fpkt"];
1513--2144[label="1;3pkt 3fpkt"];
1513--3114[label="1;4pkt 4fpkt"];
1513--4020[label="1;4pkt 4fpkt"];
1515--2144[label="0.666667;2pkt 2fpkt"];
1515--3114[label="1;4pkt 4fpkt"];
1515--4020[label="1;4pkt 4fpkt"];
2144--3114[label="0.666667;2pkt 2fpkt"];
2144--4020[label="0.666667;2pkt 2fpkt"];
3114--4020[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.19.169" src_ip="34.88.61.135" src_port="80"/>
      <filter dst_ip="150.8.19.169" src_ip="215.126.92.62" src_port="80"/>
    </slice>
    <from sec="1057554505" usec="0"/>
    <to sec="1057554825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
1419[label="213.7.197.161;s;7pkt 7fpkt", shape=diamond, color=yellow];
2152[label="213.7.197.161;s;7pkt 7fpkt", shape=hexagon, color=black];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.197.161:1863, 210.101.253.3:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3088: (7.14286%)&lt;BR/&gt; 3074: (7.14286%)&lt;BR/&gt; 2772: (7.14286%)&lt;BR/&gt; 1436: (7.14286%)&gt;];
}
1419--2152[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="210.101.253.3" src_ip="213.7.197.161" src_port="1863"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
1314[label="211.203.39.211;s;2pkt 2fpkt", shape=diamond, color=yellow];
1542[label="211.80.112.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
1559[label="211.80.112.236;d;1pkt 1fpkt", shape=diamond, color=yellow];
2159[label="211.80.112.27;d;1pkt 1fpkt", shape=hexagon, color=black];
2215[label="211.203.39.211;s;2pkt 2fpkt", shape=hexagon, color=black];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.203.39.211:9013, 211.80.112.27:1047}[50%]&lt;BR/&gt;{211.203.39.211:9013, 211.80.112.236:1032}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9013: (50%)&lt;BR/&gt; 1047: (28.5714%)&lt;BR/&gt; 1032: (21.4286%)&gt;];
}
1314--1542[label="1;1pkt 1fpkt"];
1314--1559[label="1;1pkt 1fpkt"];
1314--2159[label="1;1pkt 1fpkt"];
1314--2215[label="1;2pkt 2fpkt"];
1542--2159[label="1;1pkt 1fpkt"];
1542--2215[label="1;1pkt 1fpkt"];
1559--2215[label="1;1pkt 1fpkt"];
2159--2215[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.112.236" dst_port="1032" src_ip="211.203.39.211" src_port="9013"/>
      <filter dst_ip="211.80.112.27" dst_port="1047" src_ip="211.203.39.211" src_port="9013"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
904[label="85.30.193.12;s;578pkt 578fpkt", shape=diamond, color=yellow];
1531[label="172.35.141.254;d;144pkt 144fpkt", shape=diamond, color=yellow];
1544[label="144.74.208.151;d;127pkt 127fpkt", shape=diamond, color=yellow];
1548[label="144.74.181.225;d;116pkt 116fpkt", shape=diamond, color=yellow];
1646[label="144.3.211.153;d;117pkt 117fpkt", shape=diamond, color=yellow];
1662[label="144.222.132.187;d;124pkt 124fpkt", shape=diamond, color=yellow];
2161[label="144.74.208.151;d;95pkt 95fpkt", shape=hexagon, color=black];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.30.193.12:80, *:*}[90.5956%]&lt;BR/&gt;{*:80, 172.35.141.254:*}[21.7868%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1161%)&lt;BR/&gt; 83: (0.76864%)&lt;BR/&gt; 27873: (0.19216%)&lt;BR/&gt; 2351: (0.19216%)&lt;BR/&gt; 58948: (0.153728%)&gt;];
}
904--1531[label="0.881944;127pkt 127fpkt"];
904--1544[label="0.92126;117pkt 117fpkt"];
904--1548[label="0.931034;108pkt 108fpkt"];
904--1646[label="0.905983;106pkt 106fpkt"];
904--1662[label="0.887097;110pkt 110fpkt"];
904--2161[label="0.936842;89pkt 89fpkt"];
1544--2161[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter src_ip="85.30.193.12" src_port="80"/>
      <filter dst_ip="172.35.141.254" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
1326[label="213.7.197.182;s;14pkt 14fpkt", shape=diamond, color=yellow];
2164[label="213.7.197.182;s;14pkt 14fpkt", shape=hexagon, color=black];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.197.182:1863, 144.147.205.145:*}[21.4286%]&lt;BR/&gt;{213.7.197.182:1863, 144.147.207.177:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3679: (3.57143%)&lt;BR/&gt; 1455: (3.57143%)&lt;BR/&gt; 1454: (3.57143%)&lt;BR/&gt; 1451: (3.57143%)&gt;];
}
1326--2164[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.207.177" src_ip="213.7.197.182" src_port="1863"/>
      <filter dst_ip="144.147.205.145" src_ip="213.7.197.182" src_port="1863"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20307,1.96037,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
712[label="211.90.5.49;d;117pkt 117fpkt", shape=diamond, color=yellow];
875[label="104.189.82.49;s;3pkt 3fpkt", shape=diamond, color=yellow];
1116[label="210.177.143.123;s;4pkt 4fpkt", shape=diamond, color=yellow];
2088[label="104.189.82.49;s;3pkt 3fpkt", shape=hexagon, color=black];
2169[label="210.177.143.123;s;4pkt 4fpkt", shape=hexagon, color=black];
2398[label="193.10.120.6;86pkt 86fpkt", shape=pentagon, color=darkviolet];
2667[label="104.189.82.49;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3053[label="210.177.143.123;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3823[label="104.189.82.49;2pkt 2fpkt", shape=invtriangle, color=brown];
4345[label="104.189.82.49;2pkt 2fpkt", shape=invhouse, color=bisque];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.10.120.6:80, 211.90.5.49:*}[51.7007%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.1579%)&lt;BR/&gt; 3444: (3.28947%)&lt;BR/&gt; 1808: (3.28947%)&lt;BR/&gt; 53: (3.07018%)&lt;BR/&gt; 2285: (1.53509%)&gt;];
}
712--875[label="1;3pkt 3fpkt"];
712--978[label="0.00854701;1pkt 1fpkt"];
712--1116[label="0.5;2pkt 2fpkt"];
712--1338[label="0.00854701;1pkt 1fpkt"];
712--1443[label="0.00854701;1pkt 1fpkt"];
712--1986[label="0.0384615;1pkt 1fpkt"];
712--2088[label="1;3pkt 3fpkt"];
712--2114[label="0.00854701;1pkt 1fpkt"];
712--2122[label="0.00917431;1pkt 1fpkt"];
712--2124[label="0.00854701;1pkt 1fpkt"];
712--2169[label="0.5;2pkt 2fpkt"];
712--2398[label="0.686047;59pkt 59fpkt"];
712--2503[label="0.00854701;1pkt 1fpkt"];
712--2667[label="1;2pkt 2fpkt"];
712--2809[label="0.137931;4pkt 4fpkt"];
712--3053[label="0.4;2pkt 2fpkt"];
712--3379[label="0.00917431;1pkt 1fpkt"];
712--3598[label="0.00854701;1pkt 1fpkt"];
712--3748[label="0.00854701;1pkt 1fpkt"];
712--3823[label="1;2pkt 2fpkt"];
712--3889[label="0.142857;4pkt 4fpkt"];
712--4302[label="0.00854701;1pkt 1fpkt"];
712--4345[label="1;2pkt 2fpkt"];
712--4375[label="0.137931;4pkt 4fpkt"];
875--2088[label="1;3pkt 3fpkt"];
875--2667[label="1;2pkt 2fpkt"];
875--3823[label="1;2pkt 2fpkt"];
875--4345[label="1;2pkt 2fpkt"];
1116--2169[label="1;4pkt 4fpkt"];
1116--3053[label="1;4pkt 4fpkt"];
2088--2667[label="1;2pkt 2fpkt"];
2088--3823[label="1;2pkt 2fpkt"];
2088--4345[label="1;2pkt 2fpkt"];
2169--3053[label="1;4pkt 4fpkt"];
2667--3823[label="1;2pkt 2fpkt"];
2667--4345[label="1;2pkt 2fpkt"];
3823--4345[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.90.5.49" src_ip="193.10.120.6" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13857,1.98796,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
727[label="150.8.177.7;d;33pkt 33fpkt", shape=diamond, color=yellow];
728[label="202.128.75.221;s;1pkt 1fpkt", shape=diamond, color=yellow];
1238[label="202.128.74.88;s;35pkt 35fpkt", shape=diamond, color=yellow];
1873[label="202.128.75.221;s;1pkt 1fpkt", shape=hexagon, color=black];
2173[label="202.128.74.88;s;32pkt 32fpkt", shape=hexagon, color=black];
2713[label="213.7.195.58;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2981[label="202.128.74.110;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4355[label="213.7.195.58;8pkt 8fpkt", shape=invhouse, color=bisque];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.128.74.88:80, 150.8.177.7:*}[35.0877%]&lt;BR/&gt;{202.128.74.88:80, 150.9.89.247:*}[26.3158%]&lt;BR/&gt;{202.128.74.110:80, 150.8.177.7:*}[22.807%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.6357%)&lt;BR/&gt; 1863: (6.20155%)&lt;BR/&gt; 20798: (1.16279%)&lt;BR/&gt; 4255: (1.16279%)&lt;BR/&gt; 4254: (1.16279%)&gt;];
}
727--728[label="1;1pkt 1fpkt"];
727--1238[label="0.606061;20pkt 20fpkt"];
727--1873[label="1;1pkt 1fpkt"];
727--2173[label="0.5625;18pkt 18fpkt"];
727--2713[label="0.142857;1pkt 1fpkt"];
727--2981[label="0.833333;10pkt 10fpkt"];
727--4355[label="0.125;1pkt 1fpkt"];
728--1873[label="1;1pkt 1fpkt"];
1238--1307[label="0.428571;15pkt 15fpkt"];
1238--2173[label="1;32pkt 32fpkt"];
2713--4355[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.177.7" src_ip="202.128.74.88" src_port="80"/>
      <filter dst_ip="150.9.89.247" src_ip="202.128.74.88" src_port="80"/>
      <filter dst_ip="150.8.177.7" src_ip="202.128.74.110" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
1617[label="32.114.193.141;s;11pkt 11fpkt", shape=diamond, color=yellow];
2195[label="32.114.193.141;s;7pkt 7fpkt", shape=hexagon, color=black];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.114.193.141:80, 135.232.101.196:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35040: (5.55556%)&lt;BR/&gt; 35039: (5.55556%)&lt;BR/&gt; 1479: (5.55556%)&lt;BR/&gt; 1478: (5.55556%)&gt;];
}
1617--2195[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.101.196" src_ip="32.114.193.141" src_port="80"/>
    </slice>
    <from sec="1057554532" usec="0"/>
    <to sec="1057554801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01933,1.96153,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
1622[label="32.114.20.215;s;4pkt 4fpkt", shape=diamond, color=yellow];
2196[label="32.114.20.215;s;2pkt 2fpkt", shape=hexagon, color=black];
3528[label="32.114.20.215;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4214[label="32.114.20.215;4pkt 4fpkt", shape=invtriangle, color=brown];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.114.20.215:80, 211.90.5.57:1605}[20%]&lt;BR/&gt;{32.114.20.215:80, 150.8.22.181:1267}[20%]&lt;BR/&gt;{32.114.20.215:80, 144.147.186.107:2491}[20%]&lt;BR/&gt;{32.114.20.215:80, 144.147.186.107:2642}[20%]&lt;BR/&gt;{32.114.20.215:80, 144.147.186.107:2839}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2491: (13.3333%)&lt;BR/&gt; 2839: (10%)&lt;BR/&gt; 2642: (10%)&lt;BR/&gt; 1267: (10%)&gt;];
}
1622--2196[label="1;2pkt 2fpkt"];
1622--3528[label="1;4pkt 4fpkt"];
1622--4214[label="0.75;3pkt 3fpkt"];
2196--3528[label="1;2pkt 2fpkt"];
2196--4214[label="0.5;1pkt 1fpkt"];
3528--4214[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.186.107" dst_port="2839" src_ip="32.114.20.215" src_port="80"/>
      <filter dst_ip="144.147.186.107" dst_port="2642" src_ip="32.114.20.215" src_port="80"/>
      <filter dst_ip="144.147.186.107" dst_port="2491" src_ip="32.114.20.215" src_port="80"/>
      <filter dst_ip="150.8.22.181" dst_port="1267" src_ip="32.114.20.215" src_port="80"/>
      <filter dst_ip="211.90.5.57" dst_port="1605" src_ip="32.114.20.215" src_port="80"/>
    </slice>
    <from sec="1057554057" usec="0"/>
    <to sec="1057554818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
898[label="193.82.97.209;s;2819pkt 2819fpkt", shape=diamond, color=yellow];
2205[label="193.82.97.209;s;2534pkt 2534fpkt", shape=hexagon, color=black];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.82.97.209:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 20893: (0.0467028%)&lt;BR/&gt; 61831: (0.0373622%)&lt;BR/&gt; 61002: (0.0373622%)&lt;BR/&gt; 60856: (0.0373622%)&gt;];
}
898--2205[label="1;2534pkt 2534fpkt"];
</description>
    <slice>
      <filter src_ip="193.82.97.209" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01933,1.96153,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
700[label="36.5.218.97;s;1pkt 1fpkt", shape=diamond, color=yellow];
1060[label="144.147.24.194;d;4pkt 4fpkt", shape=diamond, color=yellow];
1647[label="34.162.26.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
1899[label="36.5.218.97;s;1pkt 1fpkt", shape=hexagon, color=black];
2207[label="34.162.26.171;s;1pkt 1fpkt", shape=hexagon, color=black];
2921[label="36.5.218.97;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3931[label="36.5.218.97;1pkt 1fpkt", shape=invtriangle, color=brown];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.194.21:1863, 144.147.24.194:3529}[25%]&lt;BR/&gt;{33.75.112.79:6699, 144.147.24.194:3341}[25%]&lt;BR/&gt;{36.5.218.97:6699, 144.147.24.194:3374}[25%]&lt;BR/&gt;{34.162.26.171:6699, 144.147.24.194:3359}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6699: (45%)&lt;BR/&gt; 3374: (25%)&lt;BR/&gt; 3359: (15%)&lt;BR/&gt; 3529: (5%)&lt;BR/&gt; 3341: (5%)&gt;];
}
700--1060[label="1;1pkt 1fpkt"];
700--1899[label="1;1pkt 1fpkt"];
700--2921[label="1;1pkt 1fpkt"];
700--3931[label="1;1pkt 1fpkt"];
1060--1647[label="1;1pkt 1fpkt"];
1060--1899[label="1;1pkt 1fpkt"];
1060--2207[label="1;1pkt 1fpkt"];
1060--2921[label="1;1pkt 1fpkt"];
1060--3931[label="1;1pkt 1fpkt"];
1647--2207[label="1;1pkt 1fpkt"];
1899--2921[label="1;1pkt 1fpkt"];
1899--3931[label="1;1pkt 1fpkt"];
2921--3931[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.24.194" dst_port="3359" src_ip="34.162.26.171" src_port="6699"/>
      <filter dst_ip="144.147.24.194" dst_port="3374" src_ip="36.5.218.97" src_port="6699"/>
      <filter dst_ip="144.147.24.194" dst_port="3341" src_ip="33.75.112.79" src_port="6699"/>
      <filter dst_ip="144.147.24.194" dst_port="3529" src_ip="213.7.194.21" src_port="1863"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_253{
style=filled;
color=gray75;
779[label="218.217.95.136;s;1326pkt 1326fpkt", shape=diamond, color=yellow];
2209[label="218.217.95.136;s;1224pkt 1224fpkt", shape=hexagon, color=black];
stat253[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.217.95.136:6666, *:*}[25.9427%]&lt;BR/&gt;{218.217.95.136:6669, *:*}[25.264%]&lt;BR/&gt;{218.217.95.136:6668, *:*}[24.8115%]&lt;BR/&gt;{218.217.95.136:6667, *:*}[23.9819%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6666: (12.9216%)&lt;BR/&gt; 6669: (12.7059%)&lt;BR/&gt; 6668: (12.2941%)&lt;BR/&gt; 6667: (12.0784%)&lt;BR/&gt; 2291: (0.176471%)&gt;];
}
779--2209[label="1;1224pkt 1224fpkt"];
</description>
    <slice>
      <filter src_ip="218.217.95.136" src_port="6666"/>
      <filter src_ip="218.217.95.136" src_port="6669"/>
      <filter src_ip="218.217.95.136" src_port="6668"/>
      <filter src_ip="218.217.95.136" src_port="6667"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26314,1.92327,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
102[label="202.118.74.17s;10pkt 10fpkt", shape=rectangle, color=red];
851[label="217.98.222.40;s;7pkt 7fpkt", shape=diamond, color=yellow];
992[label="150.9.62.194;d;72pkt 72fpkt", shape=diamond, color=yellow];
1020[label="144.147.204.133;d;10pkt 10fpkt", shape=diamond, color=yellow];
1171[label="213.110.201.32;s;119pkt 119fpkt", shape=diamond, color=yellow];
1459[label="202.118.74.17;s;140pkt 140fpkt", shape=diamond, color=yellow];
1681[label="150.8.37.135;d;89pkt 89fpkt", shape=diamond, color=yellow];
1682[label="202.118.74.9;s;126pkt 126fpkt", shape=diamond, color=yellow];
2021[label="150.9.62.194;d;52pkt 52fpkt", shape=hexagon, color=black];
2066[label="217.98.222.40;s;7pkt 7fpkt", shape=hexagon, color=black];
2225[label="202.118.74.9;s;126pkt 126fpkt", shape=hexagon, color=black];
2566[label="213.110.201.32;128pkt 128fpkt", shape=pentagon, color=darkviolet];
3653[label="203.176.82.246;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4263[label="203.176.82.246;7pkt 7fpkt", shape=invtriangle, color=brown];
4530[label="203.176.82.246;7pkt 7fpkt", shape=invhouse, color=bisque];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.118.74.17:80, *:*}[26.1194%]&lt;BR/&gt;{213.110.201.32:80, *:*}[24.0672%]&lt;BR/&gt;{202.118.74.9:80, *:*}[23.1343%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.968%)&lt;BR/&gt; 53: (1.81918%)&lt;BR/&gt; 32775: (1.6538%)&lt;BR/&gt; 0: (1.32304%)&lt;BR/&gt; 50401: (0.275634%)&gt;];
}
102--1459[label="1;10pkt 10fpkt"];
102--1681[label="1;10pkt 10fpkt"];
851--1020[label="0.857143;6pkt 6fpkt"];
851--1074[label="0.142857;1pkt 1fpkt"];
851--2066[label="1;7pkt 7fpkt"];
851--2206[label="0.142857;1pkt 1fpkt"];
992--1103[label="0.0138889;1pkt 1fpkt"];
992--1230[label="0.0277778;2pkt 2fpkt"];
992--1237[label="0.0138889;1pkt 1fpkt"];
992--1447[label="0.0138889;1pkt 1fpkt"];
992--1459[label="0.0416667;3pkt 3fpkt"];
992--1671[label="0.0149254;1pkt 1fpkt"];
992--1682[label="0.0277778;2pkt 2fpkt"];
992--2021[label="1;52pkt 52fpkt"];
992--2225[label="0.0277778;2pkt 2fpkt"];
992--2253[label="0.0277778;2pkt 2fpkt"];
992--2257[label="0.0138889;1pkt 1fpkt"];
992--2351[label="0.0277778;1pkt 1fpkt"];
992--2783[label="0.0138889;1pkt 1fpkt"];
992--3438[label="0.0909091;1pkt 1fpkt"];
992--3653[label="1;7pkt 7fpkt"];
992--4263[label="1;7pkt 7fpkt"];
992--4530[label="1;7pkt 7fpkt"];
1020--1098[label="0.1;1pkt 1fpkt"];
1020--1171[label="0.2;2pkt 2fpkt"];
1020--2066[label="0.857143;6pkt 6fpkt"];
1020--2566[label="0.2;2pkt 2fpkt"];
1171--1190[label="0.0252101;3pkt 3fpkt"];
1171--1243[label="0.0337079;3pkt 3fpkt"];
1171--1244[label="0.00840336;1pkt 1fpkt"];
1171--1605[label="0.0428571;3pkt 3fpkt"];
1171--1677[label="0.0238095;1pkt 1fpkt"];
1171--1681[label="0.0449438;4pkt 4fpkt"];
1171--1877[label="0.00840336;1pkt 1fpkt"];
1171--2082[label="0.00840336;1pkt 1fpkt"];
1171--2085[label="0.0252101;3pkt 3fpkt"];
1171--2147[label="0.00840336;1pkt 1fpkt"];
1171--2157[label="0.0288462;3pkt 3fpkt"];
1171--2203[label="0.0588235;7pkt 7fpkt"];
1171--2290[label="0.00840336;1pkt 1fpkt"];
1171--2566[label="0.991597;118pkt 118fpkt"];
1459--1681[label="0.11236;10pkt 10fpkt"];
1459--1800[label="0.0416667;2pkt 2fpkt"];
1459--1929[label="0.0238095;2pkt 2fpkt"];
1459--1966[label="0.0285714;4pkt 4fpkt"];
1459--1970[label="0.0285714;4pkt 4fpkt"];
1459--2021[label="0.0576923;3pkt 3fpkt"];
1459--2082[label="0.0142857;2pkt 2fpkt"];
1459--2091[label="0.00714286;1pkt 1fpkt"];
1459--2203[label="0.00714286;1pkt 1fpkt"];
1459--2299[label="0.0285714;4pkt 4fpkt"];
1681--1682[label="0.11236;10pkt 10fpkt"];
1681--1897[label="0.0224719;2pkt 2fpkt"];
1681--2040[label="0.0224719;2pkt 2fpkt"];
1681--2225[label="0.11236;10pkt 10fpkt"];
1681--2393[label="0.0357143;1pkt 1fpkt"];
1681--2566[label="0.0449438;4pkt 4fpkt"];
1681--2729[label="0.0384615;2pkt 2fpkt"];
1681--3226[label="0.0188679;1pkt 1fpkt"];
1681--3288[label="0.011236;1pkt 1fpkt"];
1681--3335[label="0.0192308;1pkt 1fpkt"];
1681--3408[label="0.0144928;1pkt 1fpkt"];
1681--3414[label="0.0135135;1pkt 1fpkt"];
1681--3427[label="0.0135135;1pkt 1fpkt"];
1681--3543[label="0.0125;1pkt 1fpkt"];
1681--3598[label="0.011236;1pkt 1fpkt"];
1681--3630[label="0.0185185;1pkt 1fpkt"];
1681--3853[label="0.0384615;2pkt 2fpkt"];
1681--4104[label="0.011236;1pkt 1fpkt"];
1681--4152[label="0.0144928;1pkt 1fpkt"];
1681--4253[label="0.0188679;1pkt 1fpkt"];
1681--4461[label="0.011236;1pkt 1fpkt"];
1682--1877[label="0.00793651;1pkt 1fpkt"];
1682--1966[label="0.0396825;5pkt 5fpkt"];
1682--2021[label="0.0384615;2pkt 2fpkt"];
1682--2091[label="0.00793651;1pkt 1fpkt"];
1682--2203[label="0.015873;2pkt 2fpkt"];
1682--2225[label="1;126pkt 126fpkt"];
1682--2290[label="0.00793651;1pkt 1fpkt"];
1682--2299[label="0.0396825;5pkt 5fpkt"];
2021--2225[label="0.0384615;2pkt 2fpkt"];
2021--2253[label="0.0192308;1pkt 1fpkt"];
2021--2257[label="0.0192308;1pkt 1fpkt"];
2021--2351[label="0.0277778;1pkt 1fpkt"];
2021--2783[label="0.0192308;1pkt 1fpkt"];
2021--3653[label="1;7pkt 7fpkt"];
2021--4263[label="1;7pkt 7fpkt"];
2021--4530[label="1;7pkt 7fpkt"];
2066--2206[label="0.142857;1pkt 1fpkt"];
2225--2290[label="0.00793651;1pkt 1fpkt"];
2225--2299[label="0.0396825;5pkt 5fpkt"];
3653--4263[label="1;7pkt 7fpkt"];
3653--4530[label="1;7pkt 7fpkt"];
4263--4530[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="202.118.74.17" src_port="80"/>
      <filter src_ip="213.110.201.32" src_port="80"/>
      <filter src_ip="202.118.74.9" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.94234,1.9891,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
1753[label="213.7.197.146;s;9pkt 9fpkt", shape=diamond, color=yellow];
2244[label="213.7.197.146;s;9pkt 9fpkt", shape=hexagon, color=black];
3200[label="213.7.197.146;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.197.146:1863, 144.147.206.99:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3117: (5.76923%)&lt;BR/&gt; 3079: (5.76923%)&lt;BR/&gt; 1687: (5.76923%)&lt;BR/&gt; 1526: (5.76923%)&gt;];
}
1753--2244[label="1;9pkt 9fpkt"];
1753--3200[label="1;8pkt 8fpkt"];
2244--3200[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.206.99" src_ip="213.7.197.146" src_port="1863"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.94234,1.9891,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
1765[label="174.20.107.26;s;157pkt 157fpkt", shape=diamond, color=yellow];
2249[label="174.20.107.26;s;157pkt 157fpkt", shape=hexagon, color=black];
2535[label="174.20.107.26;167pkt 167fpkt", shape=pentagon, color=darkviolet];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.20.107.26:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1765--2249[label="1;157pkt 157fpkt"];
1765--2535[label="0.993631;156pkt 156fpkt"];
2249--2535[label="0.993631;156pkt 156fpkt"];
</description>
    <slice>
      <filter src_ip="174.20.107.26"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26314,1.92327,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
76[label="104.0.128.182s;1pkt 1fpkt", shape=rectangle, color=red];
425[label="216.125.128.67s;2pkt 2fpkt", shape=rectangle, color=red];
1087[label="144.147.204.200;d;195pkt 195fpkt", shape=diamond, color=yellow];
1088[label="104.0.128.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
1744[label="32.131.235.235;s;173pkt 173fpkt", shape=diamond, color=yellow];
2107[label="144.147.204.200;d;15pkt 15fpkt", shape=hexagon, color=black];
2277[label="32.131.235.235;s;173pkt 173fpkt", shape=hexagon, color=black];
2759[label="104.128.72.67;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2959[label="32.131.245.105;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3623[label="32.131.235.235;189pkt 189fpkt", shape=pentagon, color=darkviolet];
3867[label="104.128.72.67;3pkt 3fpkt", shape=invtriangle, color=brown];
3945[label="32.131.245.105;5pkt 5fpkt", shape=invtriangle, color=brown];
4363[label="104.128.72.67;3pkt 3fpkt", shape=invhouse, color=bisque];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.131.235.235:80, 144.147.204.200:*}[79.5349%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9765%)&lt;BR/&gt; 1173: (1.17493%)&lt;BR/&gt; 1863: (0.456919%)&lt;BR/&gt; 5190: (0.391645%)&lt;BR/&gt; 4612: (0.326371%)&gt;];
}
76--1087[label="1;1pkt 1fpkt"];
76--1088[label="1;1pkt 1fpkt"];
76--2107[label="1;1pkt 1fpkt"];
425--1087[label="0.5;1pkt 1fpkt"];
425--2107[label="0.5;1pkt 1fpkt"];
425--3867[label="1;2pkt 2fpkt"];
425--4363[label="1;2pkt 2fpkt"];
1087--1088[label="1;1pkt 1fpkt"];
1087--1744[label="0.988439;171pkt 171fpkt"];
1087--2040[label="0.0307692;6pkt 6fpkt"];
1087--2107[label="1;15pkt 15fpkt"];
1087--2277[label="0.988439;171pkt 171fpkt"];
1087--2959[label="1;5pkt 5fpkt"];
1087--3623[label="0.904762;171pkt 171fpkt"];
1087--3867[label="0.333333;1pkt 1fpkt"];
1087--3945[label="1;5pkt 5fpkt"];
1087--4363[label="0.333333;1pkt 1fpkt"];
1088--2107[label="1;1pkt 1fpkt"];
1744--2277[label="1;173pkt 173fpkt"];
1744--3623[label="1;173pkt 173fpkt"];
2107--3867[label="0.333333;1pkt 1fpkt"];
2107--4363[label="0.333333;1pkt 1fpkt"];
2277--3623[label="1;173pkt 173fpkt"];
2759--3867[label="1;1pkt 1fpkt"];
2759--4363[label="1;1pkt 1fpkt"];
2959--3945[label="1;5pkt 5fpkt"];
3867--4363[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.204.200" src_ip="32.131.235.235" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
1289[label="202.117.61.112;s;12pkt 12fpkt", shape=diamond, color=yellow];
2278[label="202.117.61.112;s;12pkt 12fpkt", shape=hexagon, color=black];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.117.61.112:80, 150.8.45.195:*}[58.3333%]&lt;BR/&gt;{202.117.61.112:80, 144.147.200.154:*}[41.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2604: (4.16667%)&lt;BR/&gt; 2602: (4.16667%)&lt;BR/&gt; 2598: (4.16667%)&lt;BR/&gt; 2594: (4.16667%)&gt;];
}
1289--2278[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.45.195" src_ip="202.117.61.112" src_port="80"/>
      <filter dst_ip="144.147.200.154" src_ip="202.117.61.112" src_port="80"/>
    </slice>
    <from sec="1057554705" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
1850[label="196.160.236.115;s;2pkt 2fpkt", shape=diamond, color=yellow];
2280[label="196.160.236.115;s;2pkt 2fpkt", shape=hexagon, color=black];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.160.236.115:21, 150.8.156.57:3574}[50%]&lt;BR/&gt;{196.160.236.115:54982, 150.8.156.57:3575}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54982: (25%)&lt;BR/&gt; 3575: (25%)&lt;BR/&gt; 3574: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
1850--2280[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.156.57" dst_port="3575" src_ip="196.160.236.115" src_port="54982"/>
      <filter dst_ip="150.8.156.57" dst_port="3574" src_ip="196.160.236.115" src_port="21"/>
    </slice>
    <from sec="1057554772" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.136.163.0"/>
    </slice>
    <from sec="1057554644" usec="0"/>
    <to sec="1057554896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.180.13.1"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.44.100.1"/>
    </slice>
    <from sec="1057554284" usec="0"/>
    <to sec="1057554296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.82.114.1"/>
    </slice>
    <from sec="1057554007" usec="0"/>
    <to sec="1057554889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.122.234.1"/>
    </slice>
    <from sec="1057554772" usec="0"/>
    <to sec="1057554862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
115[label="200.182.69.2s;140pkt 140fpkt", shape=rectangle, color=red];
2372[label="200.182.69.2;142pkt 142fpkt", shape=pentagon, color=darkviolet];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.182.69.2:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
115--2372[label="1;140pkt 140fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.182.69.2" src_port="1027"/>
    </slice>
    <from sec="1057554439" usec="0"/>
    <to sec="1057554464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752891,1.97431,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
1769[label="174.20.166.2;s;71pkt 71fpkt", shape=diamond, color=yellow];
2376[label="174.20.166.2;85pkt 85fpkt", shape=pentagon, color=darkviolet];
3693[label="174.20.166.2;85pkt 85fpkt", shape=invtriangle, color=brown];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.20.166.2:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1769--2376[label="1;71pkt 71fpkt"];
1769--3693[label="1;71pkt 71fpkt"];
2376--3693[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter src_ip="174.20.166.2"/>
    </slice>
    <from sec="1057554003" usec="0"/>
    <to sec="1057554891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.192.9.3"/>
    </slice>
    <from sec="1057554243" usec="0"/>
    <to sec="1057554485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,053,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.121.17.3"/>
    </slice>
    <from sec="1057554005" usec="0"/>
    <to sec="1057554885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
117[label="201.138.185.4s;59pkt 59fpkt", shape=rectangle, color=red];
2386[label="201.138.185.4;191pkt 191fpkt", shape=pentagon, color=darkviolet];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.138.185.4:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
117--2386[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.138.185.4" src_port="1028"/>
    </slice>
    <from sec="1057554638" usec="0"/>
    <to sec="1057554668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.212.188.4"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.195.4"/>
    </slice>
    <from sec="1057554148" usec="0"/>
    <to sec="1057554891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.179.247.5"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.140.29.7"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.30.223.7"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.94234,1.9891,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
1407[label="168.253.112.65;d;2pkt 2fpkt", shape=diamond, color=yellow];
1408[label="32.131.252.7;s;37pkt 37fpkt", shape=diamond, color=yellow];
1435[label="211.224.34.150;s;5pkt 5fpkt", shape=diamond, color=yellow];
2115[label="211.224.34.150;s;5pkt 5fpkt", shape=hexagon, color=black];
2404[label="32.131.252.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.131.252.7:80, 211.90.46.4:*}[28.5714%]&lt;BR/&gt;{32.131.252.7:80, 211.90.46.59:*}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36%)&lt;BR/&gt; 0: (6%)&lt;BR/&gt; 6667: (3%)&lt;BR/&gt; 2912: (3%)&lt;BR/&gt; 7852: (2%)&gt;];
}
1407--1408[label="0.5;1pkt 1fpkt"];
1407--1435[label="0.5;1pkt 1fpkt"];
1407--2115[label="0.5;1pkt 1fpkt"];
1407--2404[label="1;1pkt 1fpkt"];
1408--2085[label="0.243243;9pkt 9fpkt"];
1408--2404[label="1;1pkt 1fpkt"];
1435--2115[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="211.90.46.4" src_ip="32.131.252.7" src_port="80"/>
      <filter dst_ip="211.90.46.59" src_ip="32.131.252.7" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.101.105.9"/>
    </slice>
    <from sec="1057554667" usec="0"/>
    <to sec="1057554686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.136.213.9"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.66.230.9"/>
    </slice>
    <from sec="1057554761" usec="0"/>
    <to sec="1057554769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.240.86.10"/>
    </slice>
    <from sec="1057554101" usec="0"/>
    <to sec="1057554148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
132[label="149.87.175.10s;1pkt 1fpkt", shape=rectangle, color=red];
2426[label="86.213.127.10;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.213.127.10:80, 150.9.152.168:1204}[50%]&lt;BR/&gt;{86.213.127.10:80, 150.9.152.168:4087}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4087: (33.3333%)&lt;BR/&gt; 1204: (16.6667%)&gt;];
}
132--2426[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.152.168" dst_port="4087" src_ip="86.213.127.10" src_port="80"/>
      <filter dst_ip="150.9.152.168" dst_port="1204" src_ip="86.213.127.10" src_port="80"/>
    </slice>
    <from sec="1057554005" usec="0"/>
    <to sec="1057554895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.227.40.11"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.129.99.11"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.30.193.12"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.41.68.13"/>
    </slice>
    <from sec="1057554018" usec="0"/>
    <to sec="1057554898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.181.220.13"/>
    </slice>
    <from sec="1057554784" usec="0"/>
    <to sec="1057554898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.195.14"/>
    </slice>
    <from sec="1057554004" usec="0"/>
    <to sec="1057554891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.248.148.16"/>
    </slice>
    <from sec="1057554245" usec="0"/>
    <to sec="1057554285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.204.44.18"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.110.193.18"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.115.201.18"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.195.181.20"/>
    </slice>
    <from sec="1057554649" usec="0"/>
    <to sec="1057554686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
149[label="32.200.182.20s;53pkt 53fpkt", shape=rectangle, color=red];
2497[label="32.200.182.20;101pkt 101fpkt", shape=pentagon, color=darkviolet];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.200.182.20:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
149--2497[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="32.200.182.20" src_port="1028"/>
    </slice>
    <from sec="1057554629" usec="0"/>
    <to sec="1057554649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
152[label="35.102.168.22s;107pkt 107fpkt", shape=rectangle, color=red];
2509[label="35.102.168.22;144pkt 144fpkt", shape=pentagon, color=darkviolet];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.102.168.22:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
152--2509[label="0.990654;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="35.102.168.22" src_port="1027"/>
    </slice>
    <from sec="1057554091" usec="0"/>
    <to sec="1057554114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.126.200.23"/>
    </slice>
    <from sec="1057554357" usec="0"/>
    <to sec="1057554898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.21.82.25"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.194.25"/>
    </slice>
    <from sec="1057554009" usec="0"/>
    <to sec="1057554896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.18.30.26"/>
    </slice>
    <from sec="1057554003" usec="0"/>
    <to sec="1057554895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.173.58.26"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.194.26"/>
    </slice>
    <from sec="1057554018" usec="0"/>
    <to sec="1057554875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.686148,1.98258,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
161[label="211.195.29.30s;59pkt 59fpkt", shape=rectangle, color=red];
2551[label="211.195.29.30;109pkt 109fpkt", shape=pentagon, color=darkviolet];
3768[label="211.195.29.30;109pkt 109fpkt", shape=invtriangle, color=brown];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.195.29.30:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
161--2551[label="1;59pkt 59fpkt"];
161--3768[label="1;59pkt 59fpkt"];
2551--3768[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.195.29.30" src_port="1028"/>
    </slice>
    <from sec="1057554674" usec="0"/>
    <to sec="1057554691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.74.43.30"/>
    </slice>
    <from sec="1057554043" usec="0"/>
    <to sec="1057554771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.41.110.30"/>
    </slice>
    <from sec="1057554241" usec="0"/>
    <to sec="1057554297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.194.30"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.189.18.32"/>
    </slice>
    <from sec="1057554101" usec="0"/>
    <to sec="1057554874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.89.23.35"/>
    </slice>
    <from sec="1057554126" usec="0"/>
    <to sec="1057554858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.195.35"/>
    </slice>
    <from sec="1057554006" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.195.36"/>
    </slice>
    <from sec="1057554067" usec="0"/>
    <to sec="1057554879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752891,1.97431,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
1520[label="210.89.19.37;s;130pkt 130fpkt", shape=diamond, color=yellow];
2596[label="210.89.19.37;143pkt 143fpkt", shape=pentagon, color=darkviolet];
3787[label="210.89.19.37;143pkt 143fpkt", shape=invtriangle, color=brown];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.89.19.37:53, 192.168.1.3:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.1635%)&lt;BR/&gt; 1583: (0.721154%)&lt;BR/&gt; 1581: (0.721154%)&lt;BR/&gt; 1556: (0.721154%)&lt;BR/&gt; 1515: (0.721154%)&gt;];
}
1520--2596[label="1;130pkt 130fpkt"];
1520--3787[label="1;130pkt 130fpkt"];
2596--3787[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.1.3" src_ip="210.89.19.37" src_port="53"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.18.122.37"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.192.9.38"/>
    </slice>
    <from sec="1057554052" usec="0"/>
    <to sec="1057554247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.67.104.39"/>
    </slice>
    <from sec="1057554480" usec="0"/>
    <to sec="1057554888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.100.123.39"/>
    </slice>
    <from sec="1057554723" usec="0"/>
    <to sec="1057554745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.168.169.39"/>
    </slice>
    <from sec="1057554589" usec="0"/>
    <to sec="1057554606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.209.27.41"/>
    </slice>
    <from sec="1057554231" usec="0"/>
    <to sec="1057554726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.80.94.43"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64484,2.00171,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
1639[label="135.232.98.43;s;34pkt 34fpkt", shape=diamond, color=yellow];
2640[label="135.232.98.43;34pkt 34fpkt", shape=pentagon, color=darkviolet];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.232.98.43:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64449: (1.47059%)&lt;BR/&gt; 57488: (1.47059%)&lt;BR/&gt; 56495: (1.47059%)&lt;BR/&gt; 55345: (1.47059%)&gt;];
}
1639--2640[label="0.970588;33pkt 33fpkt"];
</description>
    <slice>
      <filter src_ip="135.232.98.43" src_port="25"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.169.150.43"/>
    </slice>
    <from sec="1057554607" usec="0"/>
    <to sec="1057554651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01933,1.96153,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
822[label="211.80.103.167;d;283pkt 283fpkt", shape=diamond, color=yellow];
1010[label="197.108.51.45;s;25pkt 25fpkt", shape=diamond, color=yellow];
1273[label="85.31.128.178;s;203pkt 203fpkt", shape=diamond, color=yellow];
1888[label="211.80.103.167;d;48pkt 48fpkt", shape=hexagon, color=black];
2070[label="85.31.128.178;s;202pkt 202fpkt", shape=hexagon, color=black];
2615[label="211.203.10.39;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2649[label="197.108.51.45;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3798[label="211.203.10.39;11pkt 11fpkt", shape=invtriangle, color=brown];
3813[label="197.108.51.45;25pkt 25fpkt", shape=invtriangle, color=brown];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.31.128.178:80, 211.80.103.167:*}[73.8516%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2398: (0.300481%)&lt;BR/&gt; 2397: (0.300481%)&lt;BR/&gt; 2396: (0.300481%)&lt;BR/&gt; 2395: (0.300481%)&gt;];
}
822--1010[label="1;25pkt 25fpkt"];
822--1273[label="1;203pkt 203fpkt"];
822--1888[label="1;48pkt 48fpkt"];
822--2070[label="1;202pkt 202fpkt"];
822--2615[label="1;11pkt 11fpkt"];
822--2649[label="1;24pkt 24fpkt"];
822--3798[label="1;11pkt 11fpkt"];
822--3813[label="1;25pkt 25fpkt"];
1010--1888[label="0.92;23pkt 23fpkt"];
1010--2649[label="1;24pkt 24fpkt"];
1010--3813[label="1;25pkt 25fpkt"];
1273--1888[label="0.0208333;1pkt 1fpkt"];
1273--2070[label="1;202pkt 202fpkt"];
1888--2615[label="0.454545;5pkt 5fpkt"];
1888--2649[label="0.916667;22pkt 22fpkt"];
1888--3798[label="0.454545;5pkt 5fpkt"];
1888--3813[label="0.92;23pkt 23fpkt"];
2615--3798[label="1;11pkt 11fpkt"];
2649--3813[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.103.167" src_ip="85.31.128.178" src_port="80"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.72.186.45"/>
    </slice>
    <from sec="1057554522" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.37.149.47"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.195.47"/>
    </slice>
    <from sec="1057554043" usec="0"/>
    <to sec="1057554875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
192[label="85.99.225.49s;184pkt 184fpkt", shape=rectangle, color=red];
2670[label="85.99.225.49;222pkt 222fpkt", shape=pentagon, color=darkviolet];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.99.225.49:64688, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64688: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
192--2670[label="1;184pkt 184fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.99.225.49" src_port="64688"/>
    </slice>
    <from sec="1057554655" usec="0"/>
    <to sec="1057554689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
193[label="85.61.17.50s;250pkt 250fpkt", shape=rectangle, color=red];
2671[label="85.61.17.50;249pkt 249fpkt", shape=pentagon, color=darkviolet];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.61.17.50:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
193--2671[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.61.17.50" src_port="1026"/>
    </slice>
    <from sec="1057554785" usec="0"/>
    <to sec="1057554804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64484,2.00171,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
1611[label="197.209.18.51;s;11pkt 11fpkt", shape=diamond, color=yellow];
2676[label="197.209.18.51;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.209.18.51:80, 150.8.19.48:*}[72.7273%]&lt;BR/&gt;{197.209.18.51:80, 150.8.32.153:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1437: (4.54545%)&lt;BR/&gt; 1433: (4.54545%)&lt;BR/&gt; 1432: (4.54545%)&lt;BR/&gt; 1330: (4.54545%)&gt;];
}
1611--2676[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.19.48" src_ip="197.209.18.51" src_port="80"/>
      <filter dst_ip="150.8.32.153" src_ip="197.209.18.51" src_port="80"/>
    </slice>
    <from sec="1057554494" usec="0"/>
    <to sec="1057554666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.107.41.52"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.142.221.52"/>
    </slice>
    <from sec="1057554509" usec="0"/>
    <to sec="1057554745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.66.248.54"/>
    </slice>
    <from sec="1057554831" usec="0"/>
    <to sec="1057554881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.76.125.55"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.6.76.56"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
198[label="201.210.12.58s;54pkt 54fpkt", shape=rectangle, color=red];
2709[label="201.210.12.58;191pkt 191fpkt", shape=pentagon, color=darkviolet];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.210.12.58:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
198--2709[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.210.12.58" src_port="1025"/>
    </slice>
    <from sec="1057554633" usec="0"/>
    <to sec="1057554668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.12.39.58"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.87.179.58"/>
    </slice>
    <from sec="1057554150" usec="0"/>
    <to sec="1057554181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.205.213.59"/>
    </slice>
    <from sec="1057554013" usec="0"/>
    <to sec="1057554875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.195.60"/>
    </slice>
    <from sec="1057554006" usec="0"/>
    <to sec="1057554899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.110.213.60"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.89.98.61"/>
    </slice>
    <from sec="1057554880" usec="0"/>
    <to sec="1057554899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.122.93.62"/>
    </slice>
    <from sec="1057554014" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.32.228.62"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.205.244.64"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.88.25.65"/>
    </slice>
    <from sec="1057554545" usec="0"/>
    <to sec="1057554709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.164.234.65"/>
    </slice>
    <from sec="1057554175" usec="0"/>
    <to sec="1057554183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.7.251.65"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.198.66"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_350{
style=filled;
color=gray75;
2762[label="203.137.1.68;344pkt 344fpkt", shape=pentagon, color=darkviolet];
stat350[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.137.1.68:0, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 8080: (5.52326%)&lt;BR/&gt; 22788: (5.23256%)&lt;BR/&gt; 4480: (5.08721%)&lt;BR/&gt; 14026: (4.94186%)&gt;];
}
</description>
    <slice>
      <filter src_ip="203.137.1.68"/>
    </slice>
    <from sec="1057554004" usec="0"/>
    <to sec="1057554895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_351{
style=filled;
color=gray75;
2766[label="144.3.117.68;95pkt 95fpkt", shape=pentagon, color=darkviolet];
stat351[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.3.117.68:2087, *:53}[48.4211%]&lt;BR/&gt;{144.3.117.68:53, *:*}[35.7895%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (44.2105%)&lt;BR/&gt; 2087: (24.2105%)&lt;BR/&gt; 25: (7.89474%)&lt;BR/&gt; 9253: (5.78947%)&lt;BR/&gt; 61861: (0.526316%)&gt;];
}
</description>
    <slice>
      <filter src_ip="144.3.117.68" src_port="53"/>
      <filter dst_port="53" src_ip="144.3.117.68" src_port="2087"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.229.98.69"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.58.216.69"/>
    </slice>
    <from sec="1057554281" usec="0"/>
    <to sec="1057554691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.131.241.69"/>
    </slice>
    <from sec="1057554024" usec="0"/>
    <to sec="1057554692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752891,1.97431,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_356{
style=filled;
color=gray75;
839[label="37.73.112.70;s;17pkt 17fpkt", shape=diamond, color=yellow];
1001[label="150.9.214.34;d;47pkt 47fpkt", shape=diamond, color=yellow];
2785[label="37.73.112.70;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3880[label="37.73.112.70;16pkt 16fpkt", shape=invtriangle, color=brown];
stat356[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.0.174.248:80, 150.9.214.34:*}[59.5745%]&lt;BR/&gt;{37.73.112.70:80, 150.9.214.34:*}[36.1702%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3409: (2.06186%)&lt;BR/&gt; 3408: (2.06186%)&lt;BR/&gt; 3407: (2.06186%)&lt;BR/&gt; 3402: (2.06186%)&gt;];
}
839--1001[label="1;17pkt 17fpkt"];
839--2785[label="1;17pkt 17fpkt"];
839--3880[label="1;16pkt 16fpkt"];
1001--1928[label="0.0212766;1pkt 1fpkt"];
1001--2785[label="1;17pkt 17fpkt"];
1001--3880[label="1;16pkt 16fpkt"];
2785--3880[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.214.34" src_ip="197.0.174.248" src_port="80"/>
      <filter dst_ip="150.9.214.34" src_ip="37.73.112.70" src_port="80"/>
    </slice>
    <from sec="1057554010" usec="0"/>
    <to sec="1057554228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.48.181.70"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_358{
style=filled;
color=gray75;
210[label="201.132.102.71s;57pkt 57fpkt", shape=rectangle, color=red];
2794[label="201.132.102.71;139pkt 139fpkt", shape=pentagon, color=darkviolet];
stat358[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.132.102.71:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
210--2794[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.132.102.71" src_port="1031"/>
    </slice>
    <from sec="1057554778" usec="0"/>
    <to sec="1057554803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.154.5.72"/>
    </slice>
    <from sec="1057554404" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.123.158.72"/>
    </slice>
    <from sec="1057554003" usec="0"/>
    <to sec="1057554849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.114.10.73"/>
    </slice>
    <from sec="1057554874" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.161.105.73"/>
    </slice>
    <from sec="1057554600" usec="0"/>
    <to sec="1057554622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20307,1.96037,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_363{
style=filled;
color=gray75;
815[label="150.8.185.223;d;268pkt 268fpkt", shape=diamond, color=yellow];
1029[label="128.195.202.50;s;2pkt 2fpkt", shape=diamond, color=yellow];
1263[label="37.89.98.55;s;26pkt 26fpkt", shape=diamond, color=yellow];
1853[label="34.172.24.24;s;2pkt 2fpkt", shape=diamond, color=yellow];
1855[label="37.89.80.81;s;2pkt 2fpkt", shape=diamond, color=yellow];
2030[label="37.89.98.55;s;26pkt 26fpkt", shape=hexagon, color=black];
2281[label="34.172.24.24;s;3pkt 3fpkt", shape=hexagon, color=black];
2605[label="128.195.202.37;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2833[label="37.89.80.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3160[label="32.81.46.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3409[label="128.195.192.193;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3677[label="32.177.102.255;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3791[label="128.195.202.37;4pkt 4fpkt", shape=invtriangle, color=brown];
3901[label="37.89.80.81;1pkt 1fpkt", shape=invtriangle, color=brown];
4042[label="32.81.46.141;1pkt 1fpkt", shape=invtriangle, color=brown];
4274[label="32.177.102.255;1pkt 1fpkt", shape=invtriangle, color=brown];
4324[label="128.195.202.37;4pkt 4fpkt", shape=invhouse, color=bisque];
4439[label="32.81.46.141;1pkt 1fpkt", shape=invhouse, color=bisque];
4537[label="32.177.102.255;1pkt 1fpkt", shape=invhouse, color=bisque];
stat363[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 150.8.185.223:*}[93.2836%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4504%)&lt;BR/&gt; 81: (1.27479%)&lt;BR/&gt; 32377: (0.566572%)&lt;BR/&gt; 32004: (0.566572%)&lt;BR/&gt; 31713: (0.566572%)&gt;];
}
815--978[label="0.011194;3pkt 3fpkt"];
815--1015[label="0.028169;4pkt 4fpkt"];
815--1029[label="1;2pkt 2fpkt"];
815--1081[label="0.00507614;1pkt 1fpkt"];
815--1263[label="1;26pkt 26fpkt"];
815--1445[label="0.0175439;1pkt 1fpkt"];
815--1458[label="0.00925926;1pkt 1fpkt"];
815--1460[label="0.0118343;2pkt 2fpkt"];
815--1572[label="0.012987;2pkt 2fpkt"];
815--1576[label="0.0530973;6pkt 6fpkt"];
815--1580[label="0.0344828;3pkt 3fpkt"];
815--1582[label="0.391304;9pkt 9fpkt"];
815--1755[label="0.0298507;4pkt 4fpkt"];
815--1853[label="1;2pkt 2fpkt"];
815--1855[label="1;2pkt 2fpkt"];
815--1942[label="0.028169;4pkt 4fpkt"];
815--2030[label="1;26pkt 26fpkt"];
815--2114[label="0.00787402;2pkt 2fpkt"];
815--2281[label="1;3pkt 3fpkt"];
815--2377[label="0.375;9pkt 9fpkt"];
815--2605[label="1;5pkt 5fpkt"];
815--2833[label="1;1pkt 1fpkt"];
815--3022[label="0.0142857;1pkt 1fpkt"];
815--3160[label="1;1pkt 1fpkt"];
815--3223[label="0.0666667;1pkt 1fpkt"];
815--3288[label="0.032967;3pkt 3fpkt"];
815--3372[label="0.00869565;1pkt 1fpkt"];
815--3409[label="1;3pkt 3fpkt"];
815--3598[label="0.011194;3pkt 3fpkt"];
815--3677[label="1;1pkt 1fpkt"];
815--3791[label="1;4pkt 4fpkt"];
815--3832[label="0.00480769;1pkt 1fpkt"];
815--3901[label="1;1pkt 1fpkt"];
815--3984[label="0.0142857;1pkt 1fpkt"];
815--4042[label="1;1pkt 1fpkt"];
815--4104[label="0.032967;3pkt 3fpkt"];
815--4139[label="0.00877193;1pkt 1fpkt"];
815--4274[label="1;1pkt 1fpkt"];
815--4324[label="1;4pkt 4fpkt"];
815--4350[label="0.00485437;1pkt 1fpkt"];
815--4414[label="0.0142857;1pkt 1fpkt"];
815--4439[label="1;1pkt 1fpkt"];
815--4461[label="0.032967;3pkt 3fpkt"];
815--4478[label="0.00877193;1pkt 1fpkt"];
815--4537[label="1;1pkt 1fpkt"];
1263--2030[label="1;26pkt 26fpkt"];
1853--2281[label="1;2pkt 2fpkt"];
1855--2833[label="1;1pkt 1fpkt"];
1855--3901[label="1;1pkt 1fpkt"];
2605--3791[label="1;4pkt 4fpkt"];
2605--4324[label="1;4pkt 4fpkt"];
2833--3901[label="1;1pkt 1fpkt"];
3160--4042[label="1;1pkt 1fpkt"];
3160--4439[label="1;1pkt 1fpkt"];
3677--4274[label="1;1pkt 1fpkt"];
3677--4537[label="1;1pkt 1fpkt"];
3791--4324[label="1;4pkt 4fpkt"];
4042--4439[label="1;1pkt 1fpkt"];
4274--4537[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.185.223" src_port="80"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.238.101.81"/>
    </slice>
    <from sec="1057554186" usec="0"/>
    <to sec="1057554210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.686148,1.98258,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_365{
style=filled;
color=gray75;
219[label="85.12.57.82s;66pkt 66fpkt", shape=rectangle, color=red];
2841[label="85.12.57.82;159pkt 159fpkt", shape=pentagon, color=darkviolet];
3904[label="85.12.57.82;159pkt 159fpkt", shape=invtriangle, color=brown];
stat365[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.12.57.82:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
219--2841[label="1;66pkt 66fpkt"];
219--3904[label="1;66pkt 66fpkt"];
2841--3904[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.12.57.82" src_port="1025"/>
    </slice>
    <from sec="1057554700" usec="0"/>
    <to sec="1057554725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.42.112.82"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.198.33.83"/>
    </slice>
    <from sec="1057554769" usec="0"/>
    <to sec="1057554837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.29.70.84"/>
    </slice>
    <from sec="1057554702" usec="0"/>
    <to sec="1057554810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.253.122.86"/>
    </slice>
    <from sec="1057554320" usec="0"/>
    <to sec="1057554650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20307,1.96037,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_370{
style=filled;
color=gray75;
1064[label="144.34.92.117;d;283pkt 283fpkt", shape=diamond, color=yellow];
1959[label="144.34.92.117;d;106pkt 106fpkt", shape=hexagon, color=black];
2878[label="36.117.252.87;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3334[label="32.114.48.179;58pkt 58fpkt", shape=pentagon, color=darkviolet];
3473[label="35.36.98.203;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4125[label="32.114.48.179;56pkt 56fpkt", shape=invtriangle, color=brown];
4392[label="36.117.252.87;4pkt 4fpkt", shape=invhouse, color=bisque];
4471[label="32.114.48.179;56pkt 56fpkt", shape=invhouse, color=bisque];
stat370[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 144.34.92.117:*}[99.6587%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7435: (20.5128%)&lt;BR/&gt; 23862: (5.38462%)&lt;BR/&gt; 9728: (3.67521%)&lt;BR/&gt; 25671: (3.16239%)&lt;BR/&gt; 37214: (2.90598%)&gt;];
}
1064--1959[label="1;106pkt 106fpkt"];
1064--2878[label="1;4pkt 4fpkt"];
1064--3334[label="0.87931;51pkt 51fpkt"];
1064--3473[label="0.833333;15pkt 15fpkt"];
1064--4125[label="0.875;49pkt 49fpkt"];
1064--4392[label="1;4pkt 4fpkt"];
1064--4471[label="0.875;49pkt 49fpkt"];
1959--2878[label="0.25;1pkt 1fpkt"];
1959--3334[label="0.327586;19pkt 19fpkt"];
1959--3473[label="0.166667;3pkt 3fpkt"];
1959--4125[label="0.303571;17pkt 17fpkt"];
1959--4392[label="0.25;1pkt 1fpkt"];
1959--4471[label="0.303571;17pkt 17fpkt"];
2878--4392[label="1;4pkt 4fpkt"];
3334--4125[label="1;56pkt 56fpkt"];
3334--4471[label="1;56pkt 56fpkt"];
4125--4471[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="144.34.92.117"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64484,2.00171,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
1101[label="210.89.16.151;d;12pkt 12fpkt", shape=diamond, color=yellow];
2879[label="202.118.201.88;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.118.201.90:80, 210.89.16.151:*}[41.6667%]&lt;BR/&gt;{202.118.201.82:80, 210.89.16.151:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.5714%)&lt;BR/&gt; 14989: (7.14286%)&lt;BR/&gt; 6970: (7.14286%)&lt;BR/&gt; 1752: (7.14286%)&lt;BR/&gt; 554: (7.14286%)&gt;];
}
1101--2879[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.89.16.151" src_ip="202.118.201.90" src_port="80"/>
      <filter dst_ip="210.89.16.151" src_ip="202.118.201.82" src_port="80"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.241.172.89"/>
    </slice>
    <from sec="1057554017" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26314,1.92327,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
44[label="32.160.242.90s;1pkt 1fpkt", shape=rectangle, color=red];
713[label="211.90.18.104;d;1208pkt 1208fpkt", shape=diamond, color=yellow];
736[label="211.80.128.74;d;92pkt 92fpkt", shape=diamond, color=yellow];
738[label="198.32.245.175;s;13pkt 13fpkt", shape=diamond, color=yellow];
796[label="86.192.9.42;s;1pkt 1fpkt", shape=diamond, color=yellow];
873[label="172.73.40.150;d;59pkt 59fpkt", shape=diamond, color=yellow];
1062[label="154.60.251.43;s;1pkt 1fpkt", shape=diamond, color=yellow];
1141[label="211.80.129.92;d;8pkt 8fpkt", shape=diamond, color=yellow];
1149[label="217.60.67.62;s;2pkt 2fpkt", shape=diamond, color=yellow];
1169[label="52.7.251.65;s;1pkt 1fpkt", shape=diamond, color=yellow];
1277[label="86.192.9.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
1310[label="217.97.248.8;s;62pkt 62fpkt", shape=diamond, color=yellow];
1441[label="197.178.102.81;s;52pkt 52fpkt", shape=diamond, color=yellow];
1462[label="213.7.110.222;s;72pkt 72fpkt", shape=diamond, color=yellow];
1466[label="197.178.102.92;s;47pkt 47fpkt", shape=diamond, color=yellow];
1482[label="150.8.36.16;d;32pkt 32fpkt", shape=diamond, color=yellow];
1502[label="144.34.82.72;d;79pkt 79fpkt", shape=diamond, color=yellow];
1521[label="213.7.197.197;s;8pkt 8fpkt", shape=diamond, color=yellow];
1574[label="197.178.102.26;s;50pkt 50fpkt", shape=diamond, color=yellow];
1615[label="34.172.19.103;s;3pkt 3fpkt", shape=diamond, color=yellow];
1619[label="218.67.104.33;d;13pkt 13fpkt", shape=diamond, color=yellow];
1663[label="197.178.102.68;s;42pkt 42fpkt", shape=diamond, color=yellow];
1672[label="197.178.102.84;s;36pkt 36fpkt", shape=diamond, color=yellow];
1673[label="213.142.85.22;s;64pkt 64fpkt", shape=diamond, color=yellow];
1680[label="217.97.248.26;s;55pkt 55fpkt", shape=diamond, color=yellow];
1722[label="150.8.46.100;d;12pkt 12fpkt", shape=diamond, color=yellow];
1723[label="196.152.37.67;s;17pkt 17fpkt", shape=diamond, color=yellow];
1735[label="202.192.251.116;s;3pkt 3fpkt", shape=diamond, color=yellow];
2048[label="217.97.248.8;s;62pkt 62fpkt", shape=hexagon, color=black];
2071[label="86.192.9.3;s;1pkt 1fpkt", shape=hexagon, color=black];
2233[label="34.172.19.103;s;3pkt 3fpkt", shape=hexagon, color=black];
2234[label="150.8.46.100;d;8pkt 8fpkt", shape=hexagon, color=black];
2261[label="213.7.110.222;s;72pkt 72fpkt", shape=hexagon, color=black];
2273[label="196.152.37.67;s;17pkt 17fpkt", shape=hexagon, color=black];
2396[label="32.81.8.6;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2405[label="32.81.8.8;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2410[label="217.97.248.8;67pkt 67fpkt", shape=pentagon, color=darkviolet];
2454[label="37.89.80.15;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2495[label="87.43.173.20;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2523[label="35.215.112.24;54pkt 54fpkt", shape=pentagon, color=darkviolet];
2534[label="197.178.102.26;49pkt 49fpkt", shape=pentagon, color=darkviolet];
2559[label="197.178.102.31;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2607[label="198.32.228.37;52pkt 52fpkt", shape=pentagon, color=darkviolet];
2708[label="213.7.195.57;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2765[label="197.178.102.68;41pkt 41fpkt", shape=pentagon, color=darkviolet];
2835[label="197.178.102.81;51pkt 51fpkt", shape=pentagon, color=darkviolet];
2857[label="197.178.102.84;40pkt 40fpkt", shape=pentagon, color=darkviolet];
2891[label="32.160.242.90;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2947[label="34.172.19.103;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3017[label="202.192.251.116;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3112[label="218.108.206.134;59pkt 59fpkt", shape=pentagon, color=darkviolet];
3135[label="213.7.197.137;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3297[label="32.32.194.168;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3345[label="32.177.172.181;38pkt 38fpkt", shape=pentagon, color=darkviolet];
3347[label="202.192.213.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3384[label="32.114.252.188;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3439[label="213.7.197.197;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3482[label="202.36.11.205;41pkt 41fpkt", shape=pentagon, color=darkviolet];
3564[label="213.7.110.222;74pkt 74fpkt", shape=pentagon, color=darkviolet];
3649[label="199.79.99.244;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3724[label="37.89.80.15;12pkt 12fpkt", shape=invtriangle, color=brown];
3743[label="87.43.173.20;8pkt 8fpkt", shape=invtriangle, color=brown];
3757[label="35.215.112.24;55pkt 55fpkt", shape=invtriangle, color=brown];
3793[label="198.32.228.37;52pkt 52fpkt", shape=invtriangle, color=brown];
3845[label="213.7.195.57;10pkt 10fpkt", shape=invtriangle, color=brown];
3870[label="197.178.102.68;42pkt 42fpkt", shape=invtriangle, color=brown];
3911[label="197.178.102.84;39pkt 39fpkt", shape=invtriangle, color=brown];
3938[label="34.172.19.103;2pkt 2fpkt", shape=invtriangle, color=brown];
3980[label="202.192.251.116;3pkt 3fpkt", shape=invtriangle, color=brown];
4143[label="32.114.252.188;11pkt 11fpkt", shape=invtriangle, color=brown];
4306[label="35.215.112.24;55pkt 55fpkt", shape=invhouse, color=bisque];
4310[label="217.97.248.26;59pkt 59fpkt", shape=invhouse, color=bisque];
4326[label="198.32.228.37;53pkt 53fpkt", shape=invhouse, color=bisque];
4364[label="197.178.102.68;41pkt 41fpkt", shape=invhouse, color=bisque];
4413[label="202.192.251.116;3pkt 3fpkt", shape=invhouse, color=bisque];
4480[label="32.114.252.188;11pkt 11fpkt", shape=invhouse, color=bisque];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 211.90.18.104:*}[44.868%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.3403%)&lt;BR/&gt; 53: (4.36532%)&lt;BR/&gt; 1863: (1.25149%)&lt;BR/&gt; 0: (0.68534%)&lt;BR/&gt; 6699: (0.22348%)&gt;];
}
44--713[label="1;1pkt 1fpkt"];
44--2891[label="1;1pkt 1fpkt"];
713--769[label="0.0131579;5pkt 5fpkt"];
713--780[label="0.00624025;4pkt 4fpkt"];
713--787[label="0.155172;9pkt 9fpkt"];
713--796[label="1;1pkt 1fpkt"];
713--821[label="0.00714286;3pkt 3fpkt"];
713--823[label="0.0413793;6pkt 6fpkt"];
713--847[label="0.115385;9pkt 9fpkt"];
713--864[label="0.00952381;2pkt 2fpkt"];
713--878[label="0.00943396;4pkt 4fpkt"];
713--895[label="0.00430108;2pkt 2fpkt"];
713--949[label="0.00956938;4pkt 4fpkt"];
713--966[label="0.00243309;1pkt 1fpkt"];
713--969[label="0.00475059;2pkt 2fpkt"];
713--972[label="0.015544;3pkt 3fpkt"];
713--978[label="0.013587;5pkt 5fpkt"];
713--981[label="0.0136986;1pkt 1fpkt"];
713--986[label="0.125;3pkt 3fpkt"];
713--1016[label="0.0786517;7pkt 7fpkt"];
713--1027[label="0.204724;26pkt 26fpkt"];
713--1062[label="1;1pkt 1fpkt"];
713--1065[label="0.015873;1pkt 1fpkt"];
713--1082[label="0.00833333;4pkt 4fpkt"];
713--1091[label="0.110638;26pkt 26fpkt"];
713--1099[label="0.00606061;2pkt 2fpkt"];
713--1166[label="0.0206186;6pkt 6fpkt"];
713--1169[label="1;1pkt 1fpkt"];
713--1170[label="0.0163934;1pkt 1fpkt"];
713--1184[label="0.670455;59pkt 59fpkt"];
713--1222[label="0.0210526;2pkt 2fpkt"];
713--1224[label="0.0258303;7pkt 7fpkt"];
713--1239[label="0.0348432;10pkt 10fpkt"];
713--1277[label="1;1pkt 1fpkt"];
713--1310[label="0.177419;11pkt 11fpkt"];
713--1316[label="0.00900901;1pkt 1fpkt"];
713--1317[label="0.0103806;3pkt 3fpkt"];
713--1318[label="0.0153061;3pkt 3fpkt"];
713--1322[label="0.0234742;5pkt 5fpkt"];
713--1330[label="0.0410959;3pkt 3fpkt"];
713--1353[label="0.0869565;4pkt 4fpkt"];
713--1356[label="0.0645161;4pkt 4fpkt"];
713--1364[label="0.0708661;9pkt 9fpkt"];
713--1372[label="0.0333333;1pkt 1fpkt"];
713--1380[label="0.25;1pkt 1fpkt"];
713--1441[label="0.461538;24pkt 24fpkt"];
713--1443[label="0.00617284;1pkt 1fpkt"];
713--1460[label="0.00591716;1pkt 1fpkt"];
713--1462[label="0.166667;12pkt 12fpkt"];
713--1466[label="0.255319;12pkt 12fpkt"];
713--1521[label="0.125;1pkt 1fpkt"];
713--1533[label="0.0410959;3pkt 3fpkt"];
713--1547[label="0.0649351;5pkt 5fpkt"];
713--1569[label="0.0631579;6pkt 6fpkt"];
713--1572[label="0.00649351;1pkt 1fpkt"];
713--1574[label="0.26;13pkt 13fpkt"];
713--1576[label="0.00884956;1pkt 1fpkt"];
713--1577[label="0.0275862;4pkt 4fpkt"];
713--1579[label="0.0921053;7pkt 7fpkt"];
713--1615[label="1;3pkt 3fpkt"];
713--1657[label="0.0215054;2pkt 2fpkt"];
713--1663[label="0.309524;13pkt 13fpkt"];
713--1669[label="0.0985915;7pkt 7fpkt"];
713--1671[label="0.0298507;2pkt 2fpkt"];
713--1672[label="0.0277778;1pkt 1fpkt"];
713--1673[label="0.15625;10pkt 10fpkt"];
713--1674[label="0.0434783;7pkt 7fpkt"];
713--1676[label="0.0133333;1pkt 1fpkt"];
713--1680[label="0.327273;18pkt 18fpkt"];
713--1686[label="0.084507;6pkt 6fpkt"];
713--1688[label="0.0769231;3pkt 3fpkt"];
713--1698[label="0.0166667;1pkt 1fpkt"];
713--1723[label="0.294118;5pkt 5fpkt"];
713--1735[label="1;3pkt 3fpkt"];
713--1757[label="0.0526316;4pkt 4fpkt"];
713--1770[label="0.0333333;2pkt 2fpkt"];
713--1771[label="0.0526316;1pkt 1fpkt"];
713--1778[label="0.0327869;2pkt 2fpkt"];
713--1779[label="0.0078125;1pkt 1fpkt"];
713--1781[label="0.0784314;4pkt 4fpkt"];
713--1880[label="0.155172;9pkt 9fpkt"];
713--1897[label="0.00952381;2pkt 2fpkt"];
713--1928[label="0.0102041;1pkt 1fpkt"];
713--1943[label="0.0985915;7pkt 7fpkt"];
713--1973[label="0.144737;22pkt 22fpkt"];
713--2014[label="0.0180723;3pkt 3fpkt"];
713--2026[label="0.0348432;10pkt 10fpkt"];
713--2040[label="0.0131579;5pkt 5fpkt"];
713--2048[label="0.177419;11pkt 11fpkt"];
713--2052[label="0.0234742;5pkt 5fpkt"];
713--2071[label="1;1pkt 1fpkt"];
713--2072[label="0.25;1pkt 1fpkt"];
713--2114[label="0.015748;4pkt 4fpkt"];
713--2122[label="0.00917431;1pkt 1fpkt"];
713--2126[label="0.0378378;7pkt 7fpkt"];
713--2155[label="0.0103359;4pkt 4fpkt"];
713--2163[label="0.0188679;1pkt 1fpkt"];
713--2218[label="0.0120968;3pkt 3fpkt"];
713--2233[label="1;3pkt 3fpkt"];
713--2245[label="0.00475059;2pkt 2fpkt"];
713--2261[label="0.166667;12pkt 12fpkt"];
713--2263[label="0.0645161;4pkt 4fpkt"];
713--2265[label="0.0275862;4pkt 4fpkt"];
713--2273[label="0.294118;5pkt 5fpkt"];
713--2305[label="0.0179641;3pkt 3fpkt"];
713--2321[label="0.00475059;2pkt 2fpkt"];
713--2396[label="1;13pkt 13fpkt"];
713--2401[label="0.0147059;1pkt 1fpkt"];
713--2405[label="1;11pkt 11fpkt"];
713--2409[label="0.0909091;1pkt 1fpkt"];
713--2410[label="0.164179;11pkt 11fpkt"];
713--2420[label="0.363636;8pkt 8fpkt"];
713--2429[label="0.0909091;2pkt 2fpkt"];
713--2430[label="0.027027;1pkt 1fpkt"];
713--2435[label="0.0833333;1pkt 1fpkt"];
713--2454[label="1;12pkt 12fpkt"];
713--2467[label="0.0233333;7pkt 7fpkt"];
713--2471[label="0.00952381;3pkt 3fpkt"];
713--2491[label="0.0125;1pkt 1fpkt"];
713--2495[label="0.375;3pkt 3fpkt"];
713--2500[label="0.0754717;4pkt 4fpkt"];
713--2534[label="0.265306;13pkt 13fpkt"];
713--2553[label="0.0326087;3pkt 3fpkt"];
713--2554[label="0.0192308;1pkt 1fpkt"];
713--2559[label="0.208333;5pkt 5fpkt"];
713--2568[label="0.104418;26pkt 26fpkt"];
713--2578[label="0.0718232;26pkt 26fpkt"];
713--2592[label="0.0833333;1pkt 1fpkt"];
713--2664[label="0.016129;1pkt 1fpkt"];
713--2672[label="0.0454545;1pkt 1fpkt"];
713--2708[label="0.111111;1pkt 1fpkt"];
713--2750[label="0.0172414;1pkt 1fpkt"];
713--2765[label="0.317073;13pkt 13fpkt"];
713--2778[label="0.0833333;2pkt 2fpkt"];
713--2787[label="0.0666667;1pkt 1fpkt"];
713--2815[label="0.0384615;2pkt 2fpkt"];
713--2826[label="0.0588235;1pkt 1fpkt"];
713--2835[label="0.470588;24pkt 24fpkt"];
713--2857[label="0.025;1pkt 1fpkt"];
713--2861[label="0.0588235;4pkt 4fpkt"];
713--2891[label="1;3pkt 3fpkt"];
713--2899[label="0.0275862;4pkt 4fpkt"];
713--2914[label="0.0833333;6pkt 6fpkt"];
713--2933[label="0.179487;7pkt 7fpkt"];
713--2947[label="1;2pkt 2fpkt"];
713--2955[label="0.00961538;1pkt 1fpkt"];
713--2986[label="0.193548;6pkt 6fpkt"];
713--3002[label="0.0612245;3pkt 3fpkt"];
713--3017[label="1;3pkt 3fpkt"];
713--3045[label="0.0752688;7pkt 7fpkt"];
713--3083[label="0.0294118;1pkt 1fpkt"];
713--3112[label="0.0847458;5pkt 5fpkt"];
713--3135[label="0.0833333;1pkt 1fpkt"];
713--3166[label="0.0714286;5pkt 5fpkt"];
713--3168[label="0.0204082;1pkt 1fpkt"];
713--3171[label="0.0641026;5pkt 5fpkt"];
713--3297[label="1;24pkt 24fpkt"];
713--3332[label="0.1;1pkt 1fpkt"];
713--3345[label="0.342105;13pkt 13fpkt"];
713--3347[label="1;1pkt 1fpkt"];
713--3376[label="0.0689655;4pkt 4fpkt"];
713--3384[label="1;11pkt 11fpkt"];
713--3398[label="0.25;2pkt 2fpkt"];
713--3410[label="0.0580645;9pkt 9fpkt"];
713--3439[label="1;1pkt 1fpkt"];
713--3444[label="0.015;3pkt 3fpkt"];
713--3453[label="0.0384615;1pkt 1fpkt"];
713--3482[label="0.0487805;2pkt 2fpkt"];
713--3540[label="0.00819672;1pkt 1fpkt"];
713--3554[label="0.0243902;1pkt 1fpkt"];
713--3564[label="0.162162;12pkt 12fpkt"];
713--3588[label="0.0666667;2pkt 2fpkt"];
713--3598[label="0.0124688;5pkt 5fpkt"];
713--3615[label="0.0142857;1pkt 1fpkt"];
713--3616[label="0.0384615;1pkt 1fpkt"];
713--3649[label="0.333333;1pkt 1fpkt"];
713--3709[label="0.333333;7pkt 7fpkt"];
713--3724[label="1;12pkt 12fpkt"];
713--3731[label="0.00952381;3pkt 3fpkt"];
713--3740[label="0.0125;1pkt 1fpkt"];
713--3743[label="0.375;3pkt 3fpkt"];
713--3769[label="0.032967;3pkt 3fpkt"];
713--3772[label="0.00431034;2pkt 2fpkt"];
713--3774[label="0.105263;26pkt 26fpkt"];
713--3784[label="0.0909091;1pkt 1fpkt"];
713--3822[label="0.016129;1pkt 1fpkt"];
713--3845[label="0.1;1pkt 1fpkt"];
713--3862[label="0.0172414;1pkt 1fpkt"];
713--3870[label="0.309524;13pkt 13fpkt"];
713--3877[label="0.0909091;2pkt 2fpkt"];
713--3892[label="0.0377358;2pkt 2fpkt"];
713--3897[label="0.0588235;1pkt 1fpkt"];
713--3911[label="0.025641;1pkt 1fpkt"];
713--3914[label="0.0597015;4pkt 4fpkt"];
713--3930[label="0.0833333;6pkt 6fpkt"];
713--3934[label="0.175;7pkt 7fpkt"];
713--3938[label="1;2pkt 2fpkt"];
713--3972[label="0.0625;3pkt 3fpkt"];
713--3980[label="1;3pkt 3fpkt"];
713--4046[label="0.0724638;5pkt 5fpkt"];
713--4141[label="0.0689655;4pkt 4fpkt"];
713--4143[label="1;11pkt 11fpkt"];
713--4172[label="0.04;1pkt 1fpkt"];
713--4288[label="0.363636;8pkt 8fpkt"];
713--4310[label="0.305085;18pkt 18fpkt"];
713--4315[label="0.00430108;2pkt 2fpkt"];
713--4319[label="0.0833333;1pkt 1fpkt"];
713--4340[label="0.0211864;5pkt 5fpkt"];
713--4344[label="0.016129;1pkt 1fpkt"];
713--4364[label="0.317073;13pkt 13fpkt"];
713--4366[label="0.0952381;2pkt 2fpkt"];
713--4377[label="0.0377358;2pkt 2fpkt"];
713--4382[label="0.0625;1pkt 1fpkt"];
713--4388[label="0.0588235;4pkt 4fpkt"];
713--4398[label="0.175;7pkt 7fpkt"];
713--4409[label="0.0625;3pkt 3fpkt"];
713--4413[label="1;3pkt 3fpkt"];
713--4441[label="0.0714286;5pkt 5fpkt"];
713--4479[label="0.0677966;4pkt 4fpkt"];
713--4480[label="1;11pkt 11fpkt"];
713--4492[label="0.0384615;1pkt 1fpkt"];
736--738[label="0.692308;9pkt 9fpkt"];
736--895[label="0.0108696;1pkt 1fpkt"];
736--978[label="0.0108696;1pkt 1fpkt"];
736--1219[label="0.0652174;6pkt 6fpkt"];
736--1356[label="0.016129;1pkt 1fpkt"];
736--1440[label="0.0108696;1pkt 1fpkt"];
736--1441[label="0.0192308;1pkt 1fpkt"];
736--1672[label="0.0833333;3pkt 3fpkt"];
736--1771[label="0.0526316;1pkt 1fpkt"];
736--2114[label="0.0108696;1pkt 1fpkt"];
736--2121[label="0.0652174;6pkt 6fpkt"];
736--2263[label="0.016129;1pkt 1fpkt"];
736--2607[label="0.288462;15pkt 15fpkt"];
736--2835[label="0.0196078;1pkt 1fpkt"];
736--2857[label="0.075;3pkt 3fpkt"];
736--2861[label="0.0147059;1pkt 1fpkt"];
736--3598[label="0.0108696;1pkt 1fpkt"];
736--3793[label="0.288462;15pkt 15fpkt"];
736--3857[label="0.0652174;6pkt 6fpkt"];
736--3911[label="0.0769231;3pkt 3fpkt"];
736--3914[label="0.0149254;1pkt 1fpkt"];
736--4326[label="0.283019;15pkt 15fpkt"];
736--4388[label="0.0147059;1pkt 1fpkt"];
738--2147[label="0.0769231;1pkt 1fpkt"];
873--878[label="0.101695;6pkt 6fpkt"];
873--895[label="0.0169492;1pkt 1fpkt"];
873--949[label="0.0847458;5pkt 5fpkt"];
873--966[label="0.0338983;2pkt 2fpkt"];
873--969[label="0.0677966;4pkt 4fpkt"];
873--1099[label="0.0508475;3pkt 3fpkt"];
873--1310[label="0.0847458;5pkt 5fpkt"];
873--1672[label="0.166667;6pkt 6fpkt"];
873--1928[label="0.0338983;2pkt 2fpkt"];
873--2014[label="0.135593;8pkt 8fpkt"];
873--2048[label="0.0847458;5pkt 5fpkt"];
873--2245[label="0.0677966;4pkt 4fpkt"];
873--2305[label="0.135593;8pkt 8fpkt"];
873--2321[label="0.0677966;4pkt 4fpkt"];
873--2410[label="0.0847458;5pkt 5fpkt"];
873--2857[label="0.15;6pkt 6fpkt"];
873--3772[label="0.0677966;4pkt 4fpkt"];
873--3911[label="0.153846;6pkt 6fpkt"];
873--4315[label="0.0677966;4pkt 4fpkt"];
1141--1149[label="1;2pkt 2fpkt"];
1141--1663[label="0.125;1pkt 1fpkt"];
1141--2523[label="0.375;3pkt 3fpkt"];
1141--2765[label="0.125;1pkt 1fpkt"];
1141--3459[label="0.25;2pkt 2fpkt"];
1141--3757[label="0.375;3pkt 3fpkt"];
1141--3870[label="0.125;1pkt 1fpkt"];
1141--4306[label="0.375;3pkt 3fpkt"];
1141--4364[label="0.125;1pkt 1fpkt"];
1277--2071[label="1;1pkt 1fpkt"];
1310--2048[label="1;62pkt 62fpkt"];
1310--2410[label="0.983871;61pkt 61fpkt"];
1441--1502[label="0.0384615;2pkt 2fpkt"];
1441--2835[label="1;51pkt 51fpkt"];
1462--1473[label="0.0138889;1pkt 1fpkt"];
1462--2076[label="0.0188679;1pkt 1fpkt"];
1462--2082[label="0.0138889;1pkt 1fpkt"];
1462--2178[label="0.0138889;1pkt 1fpkt"];
1462--2203[label="0.0138889;1pkt 1fpkt"];
1462--2261[label="1;72pkt 72fpkt"];
1462--3564[label="1;72pkt 72fpkt"];
1466--1502[label="0.638298;30pkt 30fpkt"];
1482--2523[label="0.25;8pkt 8fpkt"];
1482--2872[label="0.15625;5pkt 5fpkt"];
1482--3757[label="0.25;8pkt 8fpkt"];
1482--4306[label="0.25;8pkt 8fpkt"];
1502--1574[label="0.56;28pkt 28fpkt"];
1502--1577[label="0.0126582;1pkt 1fpkt"];
1502--1579[label="0.0131579;1pkt 1fpkt"];
1502--1663[label="0.0714286;3pkt 3fpkt"];
1502--1672[label="0.166667;6pkt 6fpkt"];
1502--1771[label="0.0526316;1pkt 1fpkt"];
1502--2263[label="0.016129;1pkt 1fpkt"];
1502--2265[label="0.0126582;1pkt 1fpkt"];
1502--2534[label="0.571429;28pkt 28fpkt"];
1502--2559[label="0.0833333;2pkt 2fpkt"];
1502--2765[label="0.0731707;3pkt 3fpkt"];
1502--2778[label="0.0416667;1pkt 1fpkt"];
1502--2835[label="0.0392157;2pkt 2fpkt"];
1502--2857[label="0.15;6pkt 6fpkt"];
1502--2861[label="0.0147059;1pkt 1fpkt"];
1502--2899[label="0.0126582;1pkt 1fpkt"];
1502--3870[label="0.0714286;3pkt 3fpkt"];
1502--3877[label="0.0454545;1pkt 1fpkt"];
1502--3911[label="0.153846;6pkt 6fpkt"];
1502--3914[label="0.0149254;1pkt 1fpkt"];
1502--4364[label="0.0731707;3pkt 3fpkt"];
1502--4366[label="0.047619;1pkt 1fpkt"];
1502--4388[label="0.0147059;1pkt 1fpkt"];
1521--3439[label="1;1pkt 1fpkt"];
1574--2041[label="0.02;1pkt 1fpkt"];
1574--2534[label="1;49pkt 49fpkt"];
1615--2233[label="1;3pkt 3fpkt"];
1615--2947[label="1;2pkt 2fpkt"];
1615--3938[label="1;2pkt 2fpkt"];
1619--1663[label="0.769231;10pkt 10fpkt"];
1619--2765[label="0.769231;10pkt 10fpkt"];
1619--3870[label="0.769231;10pkt 10fpkt"];
1619--4364[label="0.769231;10pkt 10fpkt"];
1663--2041[label="0.0238095;1pkt 1fpkt"];
1663--2765[label="1;41pkt 41fpkt"];
1663--3870[label="1;42pkt 42fpkt"];
1663--4364[label="1;41pkt 41fpkt"];
1672--2857[label="1;36pkt 36fpkt"];
1672--3911[label="0.972222;35pkt 35fpkt"];
1680--4310[label="0.981818;54pkt 54fpkt"];
1722--1723[label="1;12pkt 12fpkt"];
1722--2234[label="1;8pkt 8fpkt"];
1722--2273[label="1;12pkt 12fpkt"];
1723--2234[label="1;8pkt 8fpkt"];
1723--2273[label="1;17pkt 17fpkt"];
1735--3017[label="1;3pkt 3fpkt"];
1735--3980[label="1;3pkt 3fpkt"];
1735--4413[label="1;3pkt 3fpkt"];
2048--2410[label="0.983871;61pkt 61fpkt"];
2233--2947[label="1;2pkt 2fpkt"];
2233--3938[label="1;2pkt 2fpkt"];
2234--2273[label="1;8pkt 8fpkt"];
2261--3564[label="1;72pkt 72fpkt"];
2454--3724[label="1;12pkt 12fpkt"];
2495--3743[label="1;8pkt 8fpkt"];
2523--3757[label="1;54pkt 54fpkt"];
2523--4306[label="1;54pkt 54fpkt"];
2607--3793[label="1;52pkt 52fpkt"];
2607--4326[label="1;52pkt 52fpkt"];
2708--3845[label="1;9pkt 9fpkt"];
2765--3870[label="1;41pkt 41fpkt"];
2765--4364[label="1;41pkt 41fpkt"];
2857--3911[label="1;39pkt 39fpkt"];
2947--3938[label="1;2pkt 2fpkt"];
3017--3980[label="1;3pkt 3fpkt"];
3017--4413[label="1;3pkt 3fpkt"];
3384--4143[label="1;11pkt 11fpkt"];
3384--4480[label="1;11pkt 11fpkt"];
3757--4306[label="1;55pkt 55fpkt"];
3793--4326[label="1;52pkt 52fpkt"];
3870--4364[label="1;41pkt 41fpkt"];
3980--4413[label="1;3pkt 3fpkt"];
4143--4480[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="211.90.18.104" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.131.252.93"/>
    </slice>
    <from sec="1057554007" usec="0"/>
    <to sec="1057554276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.10.9.94"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.178.13.94"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.137.167.94"/>
    </slice>
    <from sec="1057554003" usec="0"/>
    <to sec="1057554137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.219.205.94"/>
    </slice>
    <from sec="1057554003" usec="0"/>
    <to sec="1057554076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.73.17.95"/>
    </slice>
    <from sec="1057554138" usec="0"/>
    <to sec="1057554169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64484,2.00171,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
1842[label="198.181.216.96;s;19pkt 19fpkt", shape=diamond, color=yellow];
2916[label="198.181.216.96;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.181.216.96:80, 135.232.130.12:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49255: (2.63158%)&lt;BR/&gt; 49254: (2.63158%)&lt;BR/&gt; 49252: (2.63158%)&lt;BR/&gt; 49249: (2.63158%)&gt;];
}
1842--2916[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.130.12" src_ip="198.181.216.96" src_port="80"/>
    </slice>
    <from sec="1057554727" usec="0"/>
    <to sec="1057554764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.81.153.97"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.195.98"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.164.167.99"/>
    </slice>
    <from sec="1057554066" usec="0"/>
    <to sec="1057554249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.202.177.99"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.90.203.100"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,053,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.169.190.101"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.232.164.102"/>
    </slice>
    <from sec="1057554004" usec="0"/>
    <to sec="1057554892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.170.130.103"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.114.196.104"/>
    </slice>
    <from sec="1057554849" usec="0"/>
    <to sec="1057554895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.198.105"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.131.252.107"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.80.130.108"/>
    </slice>
    <from sec="1057554212" usec="0"/>
    <to sec="1057554888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.31.146.108"/>
    </slice>
    <from sec="1057554084" usec="0"/>
    <to sec="1057554100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.198.108"/>
    </slice>
    <from sec="1057554763" usec="0"/>
    <to sec="1057554821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.179.32.109"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.13.69.109"/>
    </slice>
    <from sec="1057554783" usec="0"/>
    <to sec="1057554886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.87.239.109"/>
    </slice>
    <from sec="1057554045" usec="0"/>
    <to sec="1057554066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.83.172.110"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.110.219.110"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.195.114"/>
    </slice>
    <from sec="1057554018" usec="0"/>
    <to sec="1057554883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.192.1.115"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.44.221.115"/>
    </slice>
    <from sec="1057554269" usec="0"/>
    <to sec="1057554309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.205.37.116"/>
    </slice>
    <from sec="1057554235" usec="0"/>
    <to sec="1057554247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.114.242.116"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.4.64.117"/>
    </slice>
    <from sec="1057554009" usec="0"/>
    <to sec="1057554896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.213.181.117"/>
    </slice>
    <from sec="1057554015" usec="0"/>
    <to sec="1057554890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.195.118"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987512,1.97316,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_410{
style=filled;
color=gray75;
1743[label="85.5.225.118;s;4pkt 4fpkt", shape=diamond, color=yellow];
3028[label="85.5.225.118;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3985[label="85.5.225.118;5pkt 5fpkt", shape=invtriangle, color=brown];
4416[label="85.5.225.118;4pkt 4fpkt", shape=invhouse, color=bisque];
stat410[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.5.225.118:80, 144.147.186.107:2713}[20%]&lt;BR/&gt;{85.5.225.118:80, 144.147.186.107:2721}[20%]&lt;BR/&gt;{85.5.225.118:80, 144.147.186.107:2784}[20%]&lt;BR/&gt;{85.5.225.118:80, 144.147.186.107:2788}[20%]&lt;BR/&gt;{85.5.225.118:80, 144.147.186.107:3015}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2788: (11.1111%)&lt;BR/&gt; 2784: (11.1111%)&lt;BR/&gt; 2721: (11.1111%)&lt;BR/&gt; 3015: (8.33333%)&gt;];
}
1743--3028[label="1;4pkt 4fpkt"];
1743--3985[label="1;4pkt 4fpkt"];
1743--4416[label="0.75;3pkt 3fpkt"];
3028--3985[label="1;5pkt 5fpkt"];
3028--4416[label="1;4pkt 4fpkt"];
3985--4416[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.186.107" dst_port="3015" src_ip="85.5.225.118" src_port="80"/>
      <filter dst_ip="144.147.186.107" dst_port="2788" src_ip="85.5.225.118" src_port="80"/>
      <filter dst_ip="144.147.186.107" dst_port="2784" src_ip="85.5.225.118" src_port="80"/>
      <filter dst_ip="144.147.186.107" dst_port="2721" src_ip="85.5.225.118" src_port="80"/>
      <filter dst_ip="144.147.186.107" dst_port="2713" src_ip="85.5.225.118" src_port="80"/>
    </slice>
    <from sec="1057554703" usec="0"/>
    <to sec="1057554869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937622,1.98143,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_411{
style=filled;
color=gray75;
266[label="196.64.157.120s;34pkt 34fpkt", shape=rectangle, color=red];
3041[label="196.64.157.120;170pkt 170fpkt", shape=pentagon, color=darkviolet];
3995[label="196.64.157.120;169pkt 169fpkt", shape=invtriangle, color=brown];
4420[label="196.64.157.120;169pkt 169fpkt", shape=invhouse, color=bisque];
stat411[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.64.157.120:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
266--3041[label="1;34pkt 34fpkt"];
266--3995[label="0.970588;33pkt 33fpkt"];
266--4420[label="0.970588;33pkt 33fpkt"];
3041--3995[label="1;169pkt 169fpkt"];
3041--4420[label="1;169pkt 169fpkt"];
3995--4420[label="1;169pkt 169fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.64.157.120" src_port="1025"/>
    </slice>
    <from sec="1057554330" usec="0"/>
    <to sec="1057554374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.110.219.120"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_413{
style=filled;
color=gray75;
267[label="133.18.242.120s;219pkt 219fpkt", shape=rectangle, color=red];
3047[label="133.18.242.120;240pkt 240fpkt", shape=pentagon, color=darkviolet];
stat413[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.18.242.120:1035, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1035: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
267--3047[label="1;219pkt 219fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="133.18.242.120" src_port="1035"/>
    </slice>
    <from sec="1057554144" usec="0"/>
    <to sec="1057554182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,004,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.89.1.121"/>
    </slice>
    <from sec="1057554345" usec="0"/>
    <to sec="1057554878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_415{
style=filled;
color=gray75;
272[label="34.253.85.126s;54pkt 54fpkt", shape=rectangle, color=red];
3063[label="34.253.85.126;106pkt 106fpkt", shape=pentagon, color=darkviolet];
stat415[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.253.85.126:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
272--3063[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="34.253.85.126" src_port="1033"/>
    </slice>
    <from sec="1057554298" usec="0"/>
    <to sec="1057554318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.72.148.126"/>
    </slice>
    <from sec="1057554284" usec="0"/>
    <to sec="1057554289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.179.134.127"/>
    </slice>
    <from sec="1057554065" usec="0"/>
    <to sec="1057554215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.148.81.129"/>
    </slice>
    <from sec="1057554816" usec="0"/>
    <to sec="1057554870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.145.53.130"/>
    </slice>
    <from sec="1057554172" usec="0"/>
    <to sec="1057554186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.167.95.131"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.116.137.131"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.55.36.132"/>
    </slice>
    <from sec="1057554017" usec="0"/>
    <to sec="1057554873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.89.22.133"/>
    </slice>
    <from sec="1057554018" usec="0"/>
    <to sec="1057554888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.117.88.133"/>
    </slice>
    <from sec="1057554835" usec="0"/>
    <to sec="1057554847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.99.3.135"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_426{
style=filled;
color=gray75;
281[label="217.199.33.136s;203pkt 203fpkt", shape=rectangle, color=red];
3122[label="217.199.33.136;202pkt 202fpkt", shape=pentagon, color=darkviolet];
stat426[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.199.33.136:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
281--3122[label="1;202pkt 202fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="217.199.33.136" src_port="1029"/>
    </slice>
    <from sec="1057554231" usec="0"/>
    <to sec="1057554264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.72.145.136"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.111.137"/>
    </slice>
    <from sec="1057554299" usec="0"/>
    <to sec="1057554869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.35.58.138"/>
    </slice>
    <from sec="1057554422" usec="0"/>
    <to sec="1057554604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.196.124.138"/>
    </slice>
    <from sec="1057554006" usec="0"/>
    <to sec="1057554168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.89.17.140"/>
    </slice>
    <from sec="1057554006" usec="0"/>
    <to sec="1057554888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.169.50.140"/>
    </slice>
    <from sec="1057554841" usec="0"/>
    <to sec="1057554861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.205.69.141"/>
    </slice>
    <from sec="1057554272" usec="0"/>
    <to sec="1057554667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64484,2.00171,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_435{
style=filled;
color=gray75;
1810[label="135.232.101.55;d;33pkt 33fpkt", shape=diamond, color=yellow];
3101[label="34.213.183.133;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3172[label="218.124.1.143;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat435[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.124.1.143:80, 135.232.101.55:*}[52.5%]&lt;BR/&gt;{34.213.183.133:80, 135.232.101.55:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2857%)&lt;BR/&gt; 1589: (1.42857%)&lt;BR/&gt; 1588: (1.42857%)&lt;BR/&gt; 1587: (1.42857%)&lt;BR/&gt; 1586: (1.42857%)&gt;];
}
1810--3101[label="0.705882;12pkt 12fpkt"];
1810--3172[label="0.9;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.101.55" src_ip="218.124.1.143" src_port="80"/>
      <filter dst_ip="135.232.101.55" src_ip="34.213.183.133" src_port="80"/>
    </slice>
    <from sec="1057554102" usec="0"/>
    <to sec="1057554889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.26.76.144"/>
    </slice>
    <from sec="1057554110" usec="0"/>
    <to sec="1057554609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.142.93.144"/>
    </slice>
    <from sec="1057554174" usec="0"/>
    <to sec="1057554251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.176.44.145"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.143.183.145"/>
    </slice>
    <from sec="1057554113" usec="0"/>
    <to sec="1057554199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20307,1.96037,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
923[label="150.8.72.16;d;6pkt 6fpkt", shape=diamond, color=yellow];
929[label="32.114.242.118;s;1pkt 1fpkt", shape=diamond, color=yellow];
1105[label="144.147.207.73;d;22pkt 22fpkt", shape=diamond, color=yellow];
1113[label="213.7.198.145;s;170pkt 170fpkt", shape=diamond, color=yellow];
1207[label="144.147.204.47;d;22pkt 22fpkt", shape=diamond, color=yellow];
1421[label="213.7.197.136;s;12pkt 12fpkt", shape=diamond, color=yellow];
1429[label="213.7.197.129;s;11pkt 11fpkt", shape=diamond, color=yellow];
1430[label="144.147.206.193;d;65pkt 65fpkt", shape=diamond, color=yellow];
1438[label="213.7.197.190;s;7pkt 7fpkt", shape=diamond, color=yellow];
1536[label="213.7.197.133;s;11pkt 11fpkt", shape=diamond, color=yellow];
1545[label="35.55.70.230;s;166pkt 166fpkt", shape=diamond, color=yellow];
1667[label="144.147.205.199;d;3pkt 3fpkt", shape=diamond, color=yellow];
1802[label="213.7.197.167;s;9pkt 9fpkt", shape=diamond, color=yellow];
2110[label="213.7.197.129;s;10pkt 10fpkt", shape=hexagon, color=black];
2119[label="213.7.197.190;s;7pkt 7fpkt", shape=hexagon, color=black];
2208[label="213.7.197.133;s;11pkt 11fpkt", shape=hexagon, color=black];
2498[label="213.7.194.20;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3029[label="32.114.242.118;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3102[label="213.7.197.133;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3126[label="213.7.197.136;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3169[label="213.7.195.142;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3190[label="213.7.198.145;181pkt 181fpkt", shape=pentagon, color=darkviolet];
3392[label="213.7.197.190;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4146[label="213.7.197.190;7pkt 7fpkt", shape=invtriangle, color=brown];
4481[label="213.7.197.190;7pkt 7fpkt", shape=invhouse, color=bisque];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.198.145:80, *:*}[40.625%]&lt;BR/&gt;{35.55.70.230:80, *:*}[37.0536%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.0323%)&lt;BR/&gt; 1863: (10.4516%)&lt;BR/&gt; 3165: (0.451613%)&lt;BR/&gt; 3061: (0.387097%)&lt;BR/&gt; 49877: (0.322581%)&gt;];
}
923--929[label="1;1pkt 1fpkt"];
923--1536[label="0.333333;2pkt 2fpkt"];
923--2208[label="0.333333;2pkt 2fpkt"];
923--3029[label="1;1pkt 1fpkt"];
923--3102[label="0.333333;2pkt 2fpkt"];
923--3169[label="0.166667;1pkt 1fpkt"];
929--3029[label="1;1pkt 1fpkt"];
1105--1113[label="0.227273;5pkt 5fpkt"];
1105--1443[label="0.0454545;1pkt 1fpkt"];
1105--1536[label="0.0909091;1pkt 1fpkt"];
1105--1545[label="0.136364;3pkt 3fpkt"];
1105--1553[label="0.0909091;2pkt 2fpkt"];
1105--2040[label="0.0454545;1pkt 1fpkt"];
1105--2122[label="0.0454545;1pkt 1fpkt"];
1105--2208[label="0.0909091;1pkt 1fpkt"];
1105--2219[label="0.166667;1pkt 1fpkt"];
1105--2485[label="0.0454545;1pkt 1fpkt"];
1105--3102[label="0.1;1pkt 1fpkt"];
1105--3190[label="0.227273;5pkt 5fpkt"];
1105--3738[label="0.0454545;1pkt 1fpkt"];
1105--4297[label="0.0454545;1pkt 1fpkt"];
1113--1207[label="0.454545;10pkt 10fpkt"];
1113--1309[label="0.008;1pkt 1fpkt"];
1113--1430[label="0.830769;54pkt 54fpkt"];
1113--1712[label="0.0307692;2pkt 2fpkt"];
1113--1827[label="0.139535;6pkt 6fpkt"];
1113--1929[label="0.0119048;1pkt 1fpkt"];
1113--1994[label="0.0176471;3pkt 3fpkt"];
1113--2082[label="0.0117647;2pkt 2fpkt"];
1113--2085[label="0.0176471;3pkt 3fpkt"];
1113--2203[label="0.00588235;1pkt 1fpkt"];
1113--3190[label="0.994118;169pkt 169fpkt"];
1207--1421[label="0.166667;2pkt 2fpkt"];
1207--1545[label="0.0454545;1pkt 1fpkt"];
1207--1779[label="0.0454545;1pkt 1fpkt"];
1207--1802[label="0.111111;1pkt 1fpkt"];
1207--3126[label="0.181818;2pkt 2fpkt"];
1207--3190[label="0.454545;10pkt 10fpkt"];
1421--3126[label="1;11pkt 11fpkt"];
1429--1430[label="0.0909091;1pkt 1fpkt"];
1429--2110[label="1;10pkt 10fpkt"];
1430--1545[label="0.0307692;2pkt 2fpkt"];
1430--2110[label="0.1;1pkt 1fpkt"];
1430--2498[label="0.111111;1pkt 1fpkt"];
1430--3190[label="0.830769;54pkt 54fpkt"];
1430--3417[label="0.0153846;1pkt 1fpkt"];
1438--1667[label="0.333333;1pkt 1fpkt"];
1438--2119[label="1;7pkt 7fpkt"];
1438--3392[label="1;7pkt 7fpkt"];
1438--4146[label="1;7pkt 7fpkt"];
1438--4481[label="1;7pkt 7fpkt"];
1536--2208[label="1;11pkt 11fpkt"];
1536--3102[label="1;10pkt 10fpkt"];
1545--1591[label="0.025641;3pkt 3fpkt"];
1545--1604[label="0.029703;3pkt 3fpkt"];
1545--1613[label="0.00943396;1pkt 1fpkt"];
1545--1712[label="0.0153846;1pkt 1fpkt"];
1545--1804[label="0.025641;1pkt 1fpkt"];
1545--1827[label="0.0930233;4pkt 4fpkt"];
1545--1893[label="0.025;2pkt 2fpkt"];
1545--1938[label="0.0138889;1pkt 1fpkt"];
1545--1994[label="0.0361446;6pkt 6fpkt"];
1545--2034[label="0.0196078;1pkt 1fpkt"];
1545--2082[label="0.0301205;5pkt 5fpkt"];
1545--2085[label="0.0301205;5pkt 5fpkt"];
1545--2096[label="0.0148148;2pkt 2fpkt"];
1545--2143[label="0.0138889;1pkt 1fpkt"];
1545--2147[label="0.060241;10pkt 10fpkt"];
1545--2187[label="0.0208333;2pkt 2fpkt"];
1545--2203[label="0.0301205;5pkt 5fpkt"];
1667--1802[label="0.333333;1pkt 1fpkt"];
1667--2119[label="0.333333;1pkt 1fpkt"];
1667--3392[label="0.333333;1pkt 1fpkt"];
1667--4146[label="0.333333;1pkt 1fpkt"];
1667--4481[label="0.333333;1pkt 1fpkt"];
2119--3392[label="1;7pkt 7fpkt"];
2119--4146[label="1;7pkt 7fpkt"];
2119--4481[label="1;7pkt 7fpkt"];
2208--3102[label="1;10pkt 10fpkt"];
3392--4146[label="1;7pkt 7fpkt"];
3392--4481[label="1;7pkt 7fpkt"];
4146--4481[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="213.7.198.145" src_port="80"/>
      <filter src_ip="35.55.70.230" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.37.12.146"/>
    </slice>
    <from sec="1057554669" usec="0"/>
    <to sec="1057554678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.230.38.147"/>
    </slice>
    <from sec="1057554083" usec="0"/>
    <to sec="1057554114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.686148,1.98258,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_445{
style=filled;
color=gray75;
297[label="205.77.58.147s;202pkt 202fpkt", shape=rectangle, color=red];
3203[label="205.77.58.147;250pkt 250fpkt", shape=pentagon, color=darkviolet];
4061[label="205.77.58.147;249pkt 249fpkt", shape=invtriangle, color=brown];
stat445[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.77.58.147:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
297--3203[label="1;202pkt 202fpkt"];
297--4061[label="0.99505;201pkt 201fpkt"];
3203--4061[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.77.58.147" src_port="1026"/>
    </slice>
    <from sec="1057554185" usec="0"/>
    <to sec="1057554229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,053,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.87.249.147"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.9.69.149"/>
    </slice>
    <from sec="1057554604" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.110.192.150"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.42.112.151"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.104.214.152"/>
    </slice>
    <from sec="1057554029" usec="0"/>
    <to sec="1057554540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937622,1.98143,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
307[label="211.227.94.154s;133pkt 133fpkt", shape=rectangle, color=red];
3242[label="211.227.94.154;169pkt 169fpkt", shape=pentagon, color=darkviolet];
4081[label="211.227.94.154;168pkt 168fpkt", shape=invtriangle, color=brown];
4455[label="211.227.94.154;159pkt 159fpkt", shape=invhouse, color=bisque];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.227.94.154:1153, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1153: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
307--3242[label="1;133pkt 133fpkt"];
307--4081[label="0.992481;132pkt 132fpkt"];
307--4455[label="0.992481;132pkt 132fpkt"];
3242--4081[label="1;168pkt 168fpkt"];
3242--4455[label="1;159pkt 159fpkt"];
4081--4455[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.227.94.154" src_port="1153"/>
    </slice>
    <from sec="1057554606" usec="0"/>
    <to sec="1057554636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.195.154"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.195.157"/>
    </slice>
    <from sec="1057554008" usec="0"/>
    <to sec="1057554894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.195.158"/>
    </slice>
    <from sec="1057554006" usec="0"/>
    <to sec="1057554898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_457{
style=filled;
color=gray75;
3266[label="34.38.6.162;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat457[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.38.6.162:80, 144.147.204.180:*}[94.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 31763: (2.77778%)&lt;BR/&gt; 1090: (2.77778%)&lt;BR/&gt; 1089: (2.77778%)&lt;BR/&gt; 1088: (2.77778%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="144.147.204.180" src_ip="34.38.6.162" src_port="80"/>
    </slice>
    <from sec="1057554625" usec="0"/>
    <to sec="1057554654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.232.28.163"/>
    </slice>
    <from sec="1057554138" usec="0"/>
    <to sec="1057554746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.126.89.163"/>
    </slice>
    <from sec="1057554378" usec="0"/>
    <to sec="1057554417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.177.161.164"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.189.100.165"/>
    </slice>
    <from sec="1057554782" usec="0"/>
    <to sec="1057554886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.37.26.166"/>
    </slice>
    <from sec="1057554018" usec="0"/>
    <to sec="1057554894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.66.88.166"/>
    </slice>
    <from sec="1057554690" usec="0"/>
    <to sec="1057554802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.0.202.167"/>
    </slice>
    <from sec="1057554010" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.90.193.170"/>
    </slice>
    <from sec="1057554663" usec="0"/>
    <to sec="1057554808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.32.229.170"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.162.26.171"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.165.109.171"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.176.44.175"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.686148,1.98258,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
334[label="201.209.4.177s;56pkt 56fpkt", shape=rectangle, color=red];
3325[label="201.209.4.177;145pkt 145fpkt", shape=pentagon, color=darkviolet];
4121[label="201.209.4.177;145pkt 145fpkt", shape=invtriangle, color=brown];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.209.4.177:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
334--3325[label="1;56pkt 56fpkt"];
334--4121[label="1;56pkt 56fpkt"];
3325--4121[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.209.4.177" src_port="1028"/>
    </slice>
    <from sec="1057554740" usec="0"/>
    <to sec="1057554765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.160.27.177"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.193.130.177"/>
    </slice>
    <from sec="1057554171" usec="0"/>
    <to sec="1057554189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.102.191.177"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.197.177"/>
    </slice>
    <from sec="1057554080" usec="0"/>
    <to sec="1057554799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.8.0.181"/>
    </slice>
    <from sec="1057554249" usec="0"/>
    <to sec="1057554268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.0.30.181"/>
    </slice>
    <from sec="1057554029" usec="0"/>
    <to sec="1057554821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.197.181"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_480{
style=filled;
color=gray75;
339[label="201.200.87.182s;148pkt 148fpkt", shape=rectangle, color=red];
3348[label="201.200.87.182;215pkt 215fpkt", shape=pentagon, color=darkviolet];
stat480[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.200.87.182:1184, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1184: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
339--3348[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.200.87.182" src_port="1184"/>
    </slice>
    <from sec="1057554696" usec="0"/>
    <to sec="1057554735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.0.128.182"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_482{
style=filled;
color=gray75;
340[label="201.128.168.182s;225pkt 225fpkt", shape=rectangle, color=red];
3352[label="201.128.168.182;224pkt 224fpkt", shape=pentagon, color=darkviolet];
stat482[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.128.168.182:13020, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13020: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
340--3352[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.128.168.182" src_port="13020"/>
    </slice>
    <from sec="1057554188" usec="0"/>
    <to sec="1057554239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.84.232.182"/>
    </slice>
    <from sec="1057554311" usec="0"/>
    <to sec="1057554355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.686148,1.98258,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
343[label="201.134.208.183s;60pkt 60fpkt", shape=rectangle, color=red];
3357[label="201.134.208.183;201pkt 201fpkt", shape=pentagon, color=darkviolet];
4131[label="201.134.208.183;201pkt 201fpkt", shape=invtriangle, color=brown];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.134.208.183:63419, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63419: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
343--3357[label="1;60pkt 60fpkt"];
343--4131[label="1;60pkt 60fpkt"];
3357--4131[label="1;201pkt 201fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.134.208.183" src_port="63419"/>
    </slice>
    <from sec="1057554621" usec="0"/>
    <to sec="1057554654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.94234,1.9891,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_485{
style=filled;
color=gray75;
1271[label="144.147.205.165;d;24pkt 24fpkt", shape=diamond, color=yellow];
1272[label="212.216.2.184;s;16pkt 16fpkt", shape=diamond, color=yellow];
1400[label="33.75.20.247;s;6pkt 6fpkt", shape=diamond, color=yellow];
2077[label="33.75.20.247;s;5pkt 5fpkt", shape=hexagon, color=black];
3359[label="212.216.2.184;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat485[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.216.2.184:80, 144.147.205.165:*}[60%]&lt;BR/&gt;{33.75.20.247:80, 144.147.205.165:*}[24%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4848%)&lt;BR/&gt; 3056: (2.27273%)&lt;BR/&gt; 3055: (2.27273%)&lt;BR/&gt; 3054: (2.27273%)&lt;BR/&gt; 3053: (2.27273%)&gt;];
}
1271--1272[label="0.9375;15pkt 15fpkt"];
1271--1400[label="1;6pkt 6fpkt"];
1271--2077[label="1;5pkt 5fpkt"];
1271--3359[label="0.933333;14pkt 14fpkt"];
1271--3594[label="0.0588235;1pkt 1fpkt"];
1272--3359[label="1;15pkt 15fpkt"];
1400--2077[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.205.165" src_ip="212.216.2.184" src_port="80"/>
      <filter dst_ip="144.147.205.165" src_ip="33.75.20.247" src_port="80"/>
    </slice>
    <from sec="1057554212" usec="0"/>
    <to sec="1057554540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987512,1.97316,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_486{
style=filled;
color=gray75;
1467[label="150.9.3.142;d;94pkt 94fpkt", shape=diamond, color=yellow];
1478[label="32.214.90.118;s;19pkt 19fpkt", shape=diamond, color=yellow];
2385[label="202.205.128.4;49pkt 49fpkt", shape=pentagon, color=darkviolet];
3695[label="202.205.128.4;49pkt 49fpkt", shape=invtriangle, color=brown];
4279[label="202.205.128.4;48pkt 48fpkt", shape=invhouse, color=bisque];
stat486[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.214.90.104:80, 150.9.3.142:*}[27.5%]&lt;BR/&gt;{202.205.128.4:80, 150.9.3.142:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1298: (0.772201%)&lt;BR/&gt; 1297: (0.772201%)&lt;BR/&gt; 1293: (0.772201%)&lt;BR/&gt; 1289: (0.772201%)&gt;];
}
1467--1478[label="0.947368;18pkt 18fpkt"];
1467--2385[label="0.489796;24pkt 24fpkt"];
1467--3307[label="0.0138889;1pkt 1fpkt"];
1467--3695[label="0.489796;24pkt 24fpkt"];
1467--4113[label="0.0136986;1pkt 1fpkt"];
1467--4279[label="0.5;24pkt 24fpkt"];
1467--4464[label="0.0136986;1pkt 1fpkt"];
1478--1699[label="0.0526316;1pkt 1fpkt"];
2385--3695[label="1;49pkt 49fpkt"];
2385--4279[label="1;48pkt 48fpkt"];
3695--4279[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.3.142" src_ip="202.205.128.4" src_port="80"/>
      <filter dst_ip="150.9.3.142" src_ip="32.214.90.104" src_port="80"/>
    </slice>
    <from sec="1057554067" usec="0"/>
    <to sec="1057554893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.197.184"/>
    </slice>
    <from sec="1057554003" usec="0"/>
    <to sec="1057554877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.189.152.186"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.29.64.187"/>
    </slice>
    <from sec="1057554076" usec="0"/>
    <to sec="1057554344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.98.88.188"/>
    </slice>
    <from sec="1057554051" usec="0"/>
    <to sec="1057554100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.188.29.192"/>
    </slice>
    <from sec="1057554800" usec="0"/>
    <to sec="1057554863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.234.44.195"/>
    </slice>
    <from sec="1057554134" usec="0"/>
    <to sec="1057554180" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.170.65.195"/>
    </slice>
    <from sec="1057554262" usec="0"/>
    <to sec="1057554298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.128.75.195"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.145.2.198"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26314,1.92327,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_496{
style=filled;
color=gray75;
15[label="213.7.50.21s;1pkt 1fpkt", shape=rectangle, color=red];
75[label="192.64.119.179s;1pkt 1fpkt", shape=rectangle, color=red];
777[label="144.34.68.33;d;6pkt 6fpkt", shape=diamond, color=yellow];
783[label="192.64.119.179;s;5pkt 5fpkt", shape=diamond, color=yellow];
906[label="150.8.128.178;d;39pkt 39fpkt", shape=diamond, color=yellow];
907[label="193.45.37.44;s;1pkt 1fpkt", shape=diamond, color=yellow];
937[label="144.147.200.209;d;11pkt 11fpkt", shape=diamond, color=yellow];
946[label="144.147.242.35;d;207pkt 207fpkt", shape=diamond, color=yellow];
1019[label="213.7.50.21;s;8pkt 8fpkt", shape=diamond, color=yellow];
1211[label="172.73.162.27;d;27pkt 27fpkt", shape=diamond, color=yellow];
1313[label="213.7.197.134;s;9pkt 9fpkt", shape=diamond, color=yellow];
1564[label="34.87.230.201;s;46pkt 46fpkt", shape=diamond, color=yellow];
1686[label="213.7.36.96;s;71pkt 71fpkt", shape=diamond, color=yellow];
1696[label="134.0.30.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
1705[label="202.164.11.66;s;1pkt 1fpkt", shape=diamond, color=yellow];
1944[label="213.7.50.21;s;6pkt 6fpkt", shape=hexagon, color=black];
2154[label="192.64.119.179;s;4pkt 4fpkt", shape=hexagon, color=black];
2213[label="213.7.197.134;s;9pkt 9fpkt", shape=hexagon, color=black];
2747[label="213.7.195.65;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2914[label="213.7.36.96;72pkt 72fpkt", shape=pentagon, color=darkviolet];
2953[label="213.7.195.104;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3004[label="213.7.198.114;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3110[label="213.7.197.134;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3189[label="213.7.195.145;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3223[label="213.7.195.151;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3256[label="213.7.197.158;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3336[label="192.64.119.179;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3462[label="34.87.230.201;55pkt 55fpkt", shape=pentagon, color=darkviolet];
3930[label="213.7.36.96;72pkt 72fpkt", shape=invtriangle, color=brown];
3942[label="213.7.195.104;11pkt 11fpkt", shape=invtriangle, color=brown];
4177[label="34.87.230.201;54pkt 54fpkt", shape=invtriangle, color=brown];
4400[label="213.7.195.104;10pkt 10fpkt", shape=invhouse, color=bisque];
4494[label="34.87.230.201;54pkt 54fpkt", shape=invhouse, color=bisque];
stat496[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[42.3326%]&lt;BR/&gt;{*:53, 144.147.242.35:32783}[29.1577%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.5095%)&lt;BR/&gt; 53: (8.59005%)&lt;BR/&gt; 32783: (7.99763%)&lt;BR/&gt; 1863: (7.70142%)&lt;BR/&gt; 445: (1.18483%)&gt;];
}
15--937[label="1;1pkt 1fpkt"];
15--1019[label="1;1pkt 1fpkt"];
15--1944[label="1;1pkt 1fpkt"];
75--777[label="1;1pkt 1fpkt"];
75--783[label="1;1pkt 1fpkt"];
75--2154[label="1;1pkt 1fpkt"];
777--783[label="1;5pkt 5fpkt"];
777--2154[label="1;4pkt 4fpkt"];
777--2747[label="0.166667;1pkt 1fpkt"];
777--3336[label="1;1pkt 1fpkt"];
783--2154[label="1;4pkt 4fpkt"];
783--3336[label="1;1pkt 1fpkt"];
906--907[label="1;1pkt 1fpkt"];
906--949[label="0.025641;1pkt 1fpkt"];
906--969[label="0.025641;1pkt 1fpkt"];
906--1082[label="0.102564;4pkt 4fpkt"];
906--1099[label="0.025641;1pkt 1fpkt"];
906--1533[label="0.025641;1pkt 1fpkt"];
906--1564[label="0.0769231;3pkt 3fpkt"];
906--1669[label="0.025641;1pkt 1fpkt"];
906--1686[label="0.0512821;2pkt 2fpkt"];
906--2040[label="0.025641;1pkt 1fpkt"];
906--2155[label="0.102564;4pkt 4fpkt"];
906--2245[label="0.025641;1pkt 1fpkt"];
906--2321[label="0.025641;1pkt 1fpkt"];
906--2914[label="0.0512821;2pkt 2fpkt"];
906--2953[label="0.0909091;1pkt 1fpkt"];
906--3417[label="0.025641;1pkt 1fpkt"];
906--3462[label="0.0769231;3pkt 3fpkt"];
906--3772[label="0.025641;1pkt 1fpkt"];
906--3930[label="0.0512821;2pkt 2fpkt"];
906--3942[label="0.0909091;1pkt 1fpkt"];
906--4177[label="0.0769231;3pkt 3fpkt"];
906--4315[label="0.025641;1pkt 1fpkt"];
906--4400[label="0.1;1pkt 1fpkt"];
906--4494[label="0.0769231;3pkt 3fpkt"];
937--1019[label="1;8pkt 8fpkt"];
937--1313[label="0.111111;1pkt 1fpkt"];
937--1944[label="1;6pkt 6fpkt"];
937--2213[label="0.111111;1pkt 1fpkt"];
937--3110[label="0.125;1pkt 1fpkt"];
937--3256[label="0.142857;1pkt 1fpkt"];
946--949[label="0.00483092;1pkt 1fpkt"];
946--969[label="0.00483092;1pkt 1fpkt"];
946--978[label="0.00483092;1pkt 1fpkt"];
946--1081[label="0.00507614;1pkt 1fpkt"];
946--1313[label="0.222222;2pkt 2fpkt"];
946--1443[label="0.00617284;1pkt 1fpkt"];
946--1459[label="0.05;7pkt 7fpkt"];
946--1545[label="0.0120482;2pkt 2fpkt"];
946--1575[label="0.162791;14pkt 14fpkt"];
946--1633[label="0.00483092;1pkt 1fpkt"];
946--1903[label="0.00909091;1pkt 1fpkt"];
946--2040[label="0.00966184;2pkt 2fpkt"];
946--2114[label="0.00483092;1pkt 1fpkt"];
946--2198[label="0.00483092;1pkt 1fpkt"];
946--2213[label="0.222222;2pkt 2fpkt"];
946--2245[label="0.00483092;1pkt 1fpkt"];
946--2264[label="0.162791;14pkt 14fpkt"];
946--2321[label="0.00483092;1pkt 1fpkt"];
946--2747[label="0.142857;1pkt 1fpkt"];
946--2792[label="0.0238095;1pkt 1fpkt"];
946--2953[label="0.0909091;1pkt 1fpkt"];
946--3004[label="1;1pkt 1fpkt"];
946--3110[label="0.25;2pkt 2fpkt"];
946--3125[label="0.00483092;1pkt 1fpkt"];
946--3141[label="0.0333333;1pkt 1fpkt"];
946--3168[label="0.0408163;2pkt 2fpkt"];
946--3169[label="0.111111;1pkt 1fpkt"];
946--3189[label="0.0769231;1pkt 1fpkt"];
946--3223[label="0.0666667;1pkt 1fpkt"];
946--3598[label="0.00483092;1pkt 1fpkt"];
946--3772[label="0.00483092;1pkt 1fpkt"];
946--3832[label="0.00483092;1pkt 1fpkt"];
946--3942[label="0.0909091;1pkt 1fpkt"];
946--4025[label="0.00483092;1pkt 1fpkt"];
946--4315[label="0.00483092;1pkt 1fpkt"];
946--4350[label="0.00485437;1pkt 1fpkt"];
946--4400[label="0.1;1pkt 1fpkt"];
1019--1944[label="1;6pkt 6fpkt"];
1211--1432[label="0.037037;1pkt 1fpkt"];
1211--1696[label="1;1pkt 1fpkt"];
1211--1705[label="1;1pkt 1fpkt"];
1211--2720[label="0.037037;1pkt 1fpkt"];
1211--3256[label="0.142857;1pkt 1fpkt"];
1313--2213[label="1;9pkt 9fpkt"];
1313--3110[label="1;8pkt 8fpkt"];
1564--1677[label="0.0238095;1pkt 1fpkt"];
1564--3462[label="1;46pkt 46fpkt"];
1564--4177[label="0.978261;45pkt 45fpkt"];
1564--4494[label="0.978261;45pkt 45fpkt"];
1686--1994[label="0.0140845;1pkt 1fpkt"];
1686--2096[label="0.0140845;1pkt 1fpkt"];
1686--2147[label="0.0140845;1pkt 1fpkt"];
1686--2914[label="1;71pkt 71fpkt"];
1686--3930[label="1;71pkt 71fpkt"];
2213--3110[label="1;8pkt 8fpkt"];
2914--3930[label="1;72pkt 72fpkt"];
2953--3942[label="1;11pkt 11fpkt"];
2953--4400[label="1;10pkt 10fpkt"];
3462--4177[label="1;54pkt 54fpkt"];
3462--4494[label="1;54pkt 54fpkt"];
3942--4400[label="1;10pkt 10fpkt"];
4177--4494[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="144.147.242.35" dst_port="32783" src_port="53"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.45.26.202"/>
    </slice>
    <from sec="1057554823" usec="0"/>
    <to sec="1057554861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.35.114.205"/>
    </slice>
    <from sec="1057554227" usec="0"/>
    <to sec="1057554248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.686148,1.98258,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_499{
style=filled;
color=gray75;
368[label="201.138.190.205s;94pkt 94fpkt", shape=rectangle, color=red];
3485[label="201.138.190.205;161pkt 161fpkt", shape=pentagon, color=darkviolet];
4189[label="201.138.190.205;160pkt 160fpkt", shape=invtriangle, color=brown];
stat499[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.138.190.205:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
368--3485[label="1;94pkt 94fpkt"];
368--4189[label="0.989362;93pkt 93fpkt"];
3485--4189[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.138.190.205" src_port="1025"/>
    </slice>
    <from sec="1057554665" usec="0"/>
    <to sec="1057554696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.7.197.205"/>
    </slice>
    <from sec="1057554013" usec="0"/>
    <to sec="1057554898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.686148,1.98258,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_501{
style=filled;
color=gray75;
413[label="219.142.153.209s;45pkt 45fpkt", shape=rectangle, color=red];
3502[label="219.142.153.209;224pkt 224fpkt", shape=pentagon, color=darkviolet];
4199[label="219.142.153.209;223pkt 223fpkt", shape=invtriangle, color=brown];
stat501[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.142.153.209:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
413--3502[label="1;45pkt 45fpkt"];
413--4199[label="1;45pkt 45fpkt"];
3502--4199[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.142.153.209" src_port="1030"/>
    </slice>
    <from sec="1057554738" usec="0"/>
    <to sec="1057554775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752891,1.97431,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_502{
style=filled;
color=gray75;
1820[label="150.8.36.90;d;80pkt 80fpkt", shape=diamond, color=yellow];
3503[label="52.213.169.209;70pkt 70fpkt", shape=pentagon, color=darkviolet];
4200[label="52.213.169.209;69pkt 69fpkt", shape=invtriangle, color=brown];
stat502[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.213.169.209:443, 150.8.36.90:*}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (47.7169%)&lt;BR/&gt; 80: (2.28311%)&lt;BR/&gt; 2422: (0.684932%)&lt;BR/&gt; 2421: (0.684932%)&lt;BR/&gt; 2420: (0.684932%)&gt;];
}
1820--3503[label="1;70pkt 70fpkt"];
1820--4200[label="1;69pkt 69fpkt"];
3503--4200[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.36.90" src_ip="52.213.169.209" src_port="443"/>
    </slice>
    <from sec="1057554545" usec="0"/>
    <to sec="1057554764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.232.252.210"/>
    </slice>
    <from sec="1057554136" usec="0"/>
    <to sec="1057554852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.154.136.212"/>
    </slice>
    <from sec="1057554004" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.13.29.214"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.88.20.215"/>
    </slice>
    <from sec="1057554131" usec="0"/>
    <to sec="1057554874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.136.22.215"/>
    </slice>
    <from sec="1057554008" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.235.62.215"/>
    </slice>
    <from sec="1057554118" usec="0"/>
    <to sec="1057554526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.172.25.216"/>
    </slice>
    <from sec="1057554106" usec="0"/>
    <to sec="1057554145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_511{
style=filled;
color=gray75;
372[label="85.152.142.217s;142pkt 142fpkt", shape=rectangle, color=red];
3541[label="85.152.142.217;142pkt 142fpkt", shape=pentagon, color=darkviolet];
stat511[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.152.142.217:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
372--3541[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.152.142.217" src_port="1030"/>
    </slice>
    <from sec="1057554097" usec="0"/>
    <to sec="1057554120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.686148,1.98258,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_512{
style=filled;
color=gray75;
375[label="85.53.141.218s;140pkt 140fpkt", shape=rectangle, color=red];
3544[label="85.53.141.218;149pkt 149fpkt", shape=pentagon, color=darkviolet];
4221[label="85.53.141.218;148pkt 148fpkt", shape=invtriangle, color=brown];
stat512[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.53.141.218:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
375--3544[label="1;140pkt 140fpkt"];
375--4221[label="0.992857;139pkt 139fpkt"];
3544--4221[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.53.141.218" src_port="1028"/>
    </slice>
    <from sec="1057554303" usec="0"/>
    <to sec="1057554330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.992524,2.00409,002,0 1 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
562[label="153.84.201.218s;62pkt 62fpkt", shape=ellipse, color=green];
3546[label="153.84.201.218;177pkt 177fpkt", shape=pentagon, color=darkviolet];
4222[label="153.84.201.218;176pkt 176fpkt", shape=invtriangle, color=brown];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.84.201.218:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
562--3546[label="1;62pkt 62fpkt"];
562--4222[label="1;62pkt 62fpkt"];
3546--4222[label="1;176pkt 176fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="153.84.201.218" src_port="1028"/>
    </slice>
    <from sec="1057554105" usec="0"/>
    <to sec="1057554137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.148.99.220"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.218.187.220"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="152.199.171.221"/>
    </slice>
    <from sec="1057554195" usec="0"/>
    <to sec="1057554201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.142.41.225"/>
    </slice>
    <from sec="1057554016" usec="0"/>
    <to sec="1057554181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752891,1.97431,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_518{
style=filled;
color=gray75;
1527[label="135.232.102.225;s;362pkt 362fpkt", shape=diamond, color=yellow];
3578[label="135.232.102.225;380pkt 380fpkt", shape=pentagon, color=darkviolet];
4232[label="135.232.102.225;375pkt 375fpkt", shape=invtriangle, color=brown];
stat518[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.232.102.225:32807, *:53}[79.2651%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.5971%)&lt;BR/&gt; 32807: (39.5703%)&lt;BR/&gt; 0: (2.86482%)&lt;BR/&gt; 32773: (0.268577%)&lt;BR/&gt; 32768: (0.268577%)&gt;];
}
1527--2327[label="0.0801105;29pkt 29fpkt"];
1527--3578[label="0.997238;361pkt 361fpkt"];
1527--4232[label="0.983425;356pkt 356fpkt"];
3578--4232[label="1;375pkt 375fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="135.232.102.225" src_port="32807"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.178.217.225"/>
    </slice>
    <from sec="1057554156" usec="0"/>
    <to sec="1057554197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.686148,1.98258,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_520{
style=filled;
color=gray75;
380[label="85.24.80.226s;134pkt 134fpkt", shape=rectangle, color=red];
3582[label="85.24.80.226;144pkt 144fpkt", shape=pentagon, color=darkviolet];
4234[label="85.24.80.226;144pkt 144fpkt", shape=invtriangle, color=brown];
stat520[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.24.80.226:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
380--3582[label="1;134pkt 134fpkt"];
380--4234[label="1;134pkt 134fpkt"];
3582--4234[label="1;144pkt 144fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.24.80.226" src_port="1025"/>
    </slice>
    <from sec="1057554246" usec="0"/>
    <to sec="1057554272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.161.135.229"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01933,1.96153,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_522{
style=filled;
color=gray75;
830[label="150.9.187.190;d;516pkt 516fpkt", shape=diamond, color=yellow];
838[label="196.198.37.233;s;65pkt 65fpkt", shape=diamond, color=yellow];
1228[label="196.198.37.232;s;180pkt 180fpkt", shape=diamond, color=yellow];
1345[label="149.35.114.122;s;184pkt 184fpkt", shape=diamond, color=yellow];
1889[label="150.9.187.190;d;413pkt 413fpkt", shape=hexagon, color=black];
1934[label="196.198.37.233;s;9pkt 9fpkt", shape=hexagon, color=black];
3051[label="149.35.114.122;195pkt 195fpkt", shape=pentagon, color=darkviolet];
3600[label="196.198.37.232;192pkt 192fpkt", shape=pentagon, color=darkviolet];
4243[label="196.198.37.232;191pkt 191fpkt", shape=invtriangle, color=brown];
stat522[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.198.37.232:80, 150.9.187.190:*}[35.2941%]&lt;BR/&gt;{149.35.114.122:80, 150.9.187.190:*}[35.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33750: (0.128535%)&lt;BR/&gt; 33749: (0.128535%)&lt;BR/&gt; 33746: (0.128535%)&lt;BR/&gt; 33737: (0.128535%)&gt;];
}
830--838[label="1;65pkt 65fpkt"];
830--1228[label="1;180pkt 180fpkt"];
830--1345[label="0.978261;180pkt 180fpkt"];
830--1889[label="1;413pkt 413fpkt"];
830--1934[label="1;9pkt 9fpkt"];
830--3051[label="0.917949;179pkt 179fpkt"];
830--3600[label="0.9375;180pkt 180fpkt"];
830--4243[label="0.937173;179pkt 179fpkt"];
838--1889[label="0.815385;53pkt 53fpkt"];
838--1934[label="1;9pkt 9fpkt"];
1228--1889[label="0.8;144pkt 144fpkt"];
1228--3600[label="1;180pkt 180fpkt"];
1228--4243[label="0.994444;179pkt 179fpkt"];
1345--1889[label="0.782609;144pkt 144fpkt"];
1345--3051[label="0.994565;183pkt 183fpkt"];
1889--1934[label="1;9pkt 9fpkt"];
1889--3051[label="0.733333;143pkt 143fpkt"];
1889--3600[label="0.75;144pkt 144fpkt"];
1889--4243[label="0.748691;143pkt 143fpkt"];
3600--4243[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.187.190" src_ip="149.35.114.122" src_port="80"/>
      <filter dst_ip="150.9.187.190" src_ip="196.198.37.232" src_port="80"/>
    </slice>
    <from sec="1057554006" usec="0"/>
    <to sec="1057554895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.80.91.233"/>
    </slice>
    <from sec="1057554003" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937622,1.98143,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
389[label="210.128.243.233s;168pkt 168fpkt", shape=rectangle, color=red];
3609[label="210.128.243.233;225pkt 225fpkt", shape=pentagon, color=darkviolet];
4246[label="210.128.243.233;225pkt 225fpkt", shape=invtriangle, color=brown];
4523[label="210.128.243.233;225pkt 225fpkt", shape=invhouse, color=bisque];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.128.243.233:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
389--3609[label="1;168pkt 168fpkt"];
389--4246[label="1;168pkt 168fpkt"];
389--4523[label="1;168pkt 168fpkt"];
3609--4246[label="1;225pkt 225fpkt"];
3609--4523[label="1;225pkt 225fpkt"];
4246--4523[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.128.243.233" src_port="1027"/>
    </slice>
    <from sec="1057554620" usec="0"/>
    <to sec="1057554655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.141.5.234"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.126.82.234"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.686148,1.98258,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_527{
style=filled;
color=gray75;
390[label="159.21.147.234s;197pkt 197fpkt", shape=rectangle, color=red];
3612[label="159.21.147.234;214pkt 214fpkt", shape=pentagon, color=darkviolet];
4248[label="159.21.147.234;214pkt 214fpkt", shape=invtriangle, color=brown];
stat527[shape=component, label=&lt;Rules:&lt;BR/&gt;{159.21.147.234:41914, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41914: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
390--3612[label="1;197pkt 197fpkt"];
390--4248[label="1;197pkt 197fpkt"];
3612--4248[label="1;214pkt 214fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="159.21.147.234" src_port="41914"/>
    </slice>
    <from sec="1057554284" usec="0"/>
    <to sec="1057554317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_528{
style=filled;
color=gray75;
392[label="208.213.82.235s;161pkt 161fpkt", shape=rectangle, color=red];
3617[label="208.213.82.235;161pkt 161fpkt", shape=pentagon, color=darkviolet];
stat528[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.213.82.235:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
392--3617[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.213.82.235" src_port="1026"/>
    </slice>
    <from sec="1057554272" usec="0"/>
    <to sec="1057554298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.54.166.235"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.24.107.236"/>
    </slice>
    <from sec="1057554799" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.46.228.237"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05988,1.93631,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_533{
style=filled;
color=gray75;
36[label="200.170.192.73s;1pkt 1fpkt", shape=rectangle, color=red];
65[label="216.41.230.140s;1pkt 1fpkt", shape=rectangle, color=red];
675[label="211.80.102.222;d;4pkt 4fpkt", shape=diamond, color=yellow];
676[label="193.10.120.73;s;2pkt 2fpkt", shape=diamond, color=yellow];
983[label="210.101.194.55;d;478pkt 478fpkt", shape=diamond, color=yellow];
1621[label="53.162.86.79;s;131pkt 131fpkt", shape=diamond, color=yellow];
1755[label="214.78.107.199;s;134pkt 134fpkt", shape=diamond, color=yellow];
1828[label="210.32.26.152;s;7pkt 7fpkt", shape=diamond, color=yellow];
2397[label="198.117.12.6;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2821[label="203.236.208.78;100pkt 100fpkt", shape=pentagon, color=darkviolet];
3127[label="216.41.230.136;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3158[label="216.41.230.140;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3225[label="210.32.26.152;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3458[label="32.93.52.201;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3699[label="198.117.12.6;11pkt 11fpkt", shape=invtriangle, color=brown];
4040[label="216.41.230.140;4pkt 4fpkt", shape=invtriangle, color=brown];
4073[label="210.32.26.152;9pkt 9fpkt", shape=invtriangle, color=brown];
4282[label="198.117.12.6;10pkt 10fpkt", shape=invhouse, color=bisque];
4437[label="216.41.230.140;4pkt 4fpkt", shape=invhouse, color=bisque];
4452[label="210.32.26.152;10pkt 10fpkt", shape=invhouse, color=bisque];
stat533[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.78.107.199:80, *:*}[21.1024%]&lt;BR/&gt;{53.162.86.79:80, 210.101.194.55:*}[20.6299%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8901%)&lt;BR/&gt; 41170: (0.634249%)&lt;BR/&gt; 60083: (0.264271%)&lt;BR/&gt; 59435: (0.264271%)&lt;BR/&gt; 60884: (0.211416%)&gt;];
}
36--675[label="1;1pkt 1fpkt"];
36--676[label="1;1pkt 1fpkt"];
65--983[label="1;1pkt 1fpkt"];
65--3158[label="1;1pkt 1fpkt"];
65--4040[label="1;1pkt 1fpkt"];
65--4437[label="1;1pkt 1fpkt"];
675--676[label="1;2pkt 2fpkt"];
675--1755[label="0.5;2pkt 2fpkt"];
983--1219[label="0.0343643;10pkt 10fpkt"];
983--1221[label="0.0136986;1pkt 1fpkt"];
983--1621[label="1;131pkt 131fpkt"];
983--1755[label="0.0671642;9pkt 9fpkt"];
983--1797[label="0.0222222;1pkt 1fpkt"];
983--1828[label="0.285714;2pkt 2fpkt"];
983--2014[label="0.0060241;1pkt 1fpkt"];
983--2121[label="0.0546448;10pkt 10fpkt"];
983--2123[label="0.0136986;1pkt 1fpkt"];
983--2245[label="0.0356295;15pkt 15fpkt"];
983--2305[label="0.00598802;1pkt 1fpkt"];
983--2321[label="0.0356295;15pkt 15fpkt"];
983--2397[label="0.9;9pkt 9fpkt"];
983--2821[label="0.92;92pkt 92fpkt"];
983--2872[label="0.010989;1pkt 1fpkt"];
983--3127[label="0.6;3pkt 3fpkt"];
983--3158[label="0.75;3pkt 3fpkt"];
983--3173[label="0.0368098;6pkt 6fpkt"];
983--3225[label="0.2;2pkt 2fpkt"];
983--3360[label="0.0222222;1pkt 1fpkt"];
983--3363[label="0.047619;1pkt 1fpkt"];
983--3458[label="0.181818;2pkt 2fpkt"];
983--3470[label="0.0138889;1pkt 1fpkt"];
983--3472[label="0.151515;5pkt 5fpkt"];
983--3522[label="0.020202;2pkt 2fpkt"];
983--3699[label="0.818182;9pkt 9fpkt"];
983--3772[label="0.0323276;15pkt 15fpkt"];
983--3857[label="0.0306748;10pkt 10fpkt"];
983--4040[label="0.75;3pkt 3fpkt"];
983--4048[label="0.037037;6pkt 6fpkt"];
983--4073[label="0.111111;1pkt 1fpkt"];
983--4133[label="0.0227273;1pkt 1fpkt"];
983--4183[label="0.0140845;1pkt 1fpkt"];
983--4211[label="0.020202;2pkt 2fpkt"];
983--4282[label="0.9;9pkt 9fpkt"];
983--4315[label="0.0322581;15pkt 15fpkt"];
983--4437[label="0.75;3pkt 3fpkt"];
983--4452[label="0.2;2pkt 2fpkt"];
1755--1798[label="0.025641;2pkt 2fpkt"];
1755--1966[label="0.0223881;3pkt 3fpkt"];
1755--1994[label="0.0746269;10pkt 10fpkt"];
1755--2147[label="0.0298507;4pkt 4fpkt"];
1755--2203[label="0.0746269;10pkt 10fpkt"];
1755--2299[label="0.0223881;3pkt 3fpkt"];
1828--3225[label="1;7pkt 7fpkt"];
1828--4073[label="0.857143;6pkt 6fpkt"];
1828--4452[label="1;7pkt 7fpkt"];
2397--3699[label="1;10pkt 10fpkt"];
2397--4282[label="1;10pkt 10fpkt"];
3158--4040[label="1;4pkt 4fpkt"];
3158--4437[label="1;4pkt 4fpkt"];
3225--4073[label="1;9pkt 9fpkt"];
3225--4452[label="1;10pkt 10fpkt"];
3699--4282[label="1;10pkt 10fpkt"];
4040--4437[label="1;4pkt 4fpkt"];
4073--4452[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="214.78.107.199" src_port="80"/>
      <filter dst_ip="210.101.194.55" src_ip="53.162.86.79" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.214.94.240"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.97.2.241"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.245.103.242"/>
    </slice>
    <from sec="1057554099" usec="0"/>
    <to sec="1057554123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565485,2.00986,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_537{
style=filled;
color=gray75;
401[label="210.52.123.245s;50pkt 50fpkt", shape=rectangle, color=red];
3651[label="210.52.123.245;192pkt 192fpkt", shape=pentagon, color=darkviolet];
stat537[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.52.123.245:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
401--3651[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.52.123.245" src_port="1028"/>
    </slice>
    <from sec="1057554640" usec="0"/>
    <to sec="1057554673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.197.157.247"/>
    </slice>
    <from sec="1057554003" usec="0"/>
    <to sec="1057554029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.94234,1.9891,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_539{
style=filled;
color=gray75;
666[label="135.232.149.137;d;21pkt 21fpkt", shape=diamond, color=yellow];
667[label="86.202.177.99;s;2pkt 2fpkt", shape=diamond, color=yellow];
1007[label="150.9.138.24;d;9pkt 9fpkt", shape=diamond, color=yellow];
1008[label="201.0.48.83;s;4pkt 4fpkt", shape=diamond, color=yellow];
1666[label="155.68.68.249;s;64pkt 64fpkt", shape=diamond, color=yellow];
1808[label="150.9.200.19;d;57pkt 57fpkt", shape=diamond, color=yellow];
2171[label="150.9.138.24;d;9pkt 9fpkt", shape=hexagon, color=black];
2848[label="201.0.48.83;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3658[label="155.68.68.249;64pkt 64fpkt", shape=pentagon, color=darkviolet];
stat539[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.68.68.249:80, 150.9.200.19:*}[38.3178%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1453%)&lt;BR/&gt; 60125: (0.854701%)&lt;BR/&gt; 59855: (0.854701%)&lt;BR/&gt; 59402: (0.854701%)&lt;BR/&gt; 59397: (0.854701%)&gt;];
}
666--667[label="1;2pkt 2fpkt"];
666--1666[label="0.0952381;2pkt 2fpkt"];
666--3658[label="0.0952381;2pkt 2fpkt"];
1007--1008[label="1;4pkt 4fpkt"];
1007--1666[label="0.222222;2pkt 2fpkt"];
1007--2171[label="1;9pkt 9fpkt"];
1007--2848[label="1;4pkt 4fpkt"];
1007--3658[label="0.222222;2pkt 2fpkt"];
1008--2171[label="1;4pkt 4fpkt"];
1008--2848[label="1;4pkt 4fpkt"];
1666--1808[label="0.719298;41pkt 41fpkt"];
1666--2171[label="0.222222;2pkt 2fpkt"];
1666--3658[label="0.984375;63pkt 63fpkt"];
1808--2830[label="0.0178571;1pkt 1fpkt"];
1808--3658[label="0.719298;41pkt 41fpkt"];
1808--3900[label="0.0178571;1pkt 1fpkt"];
2171--2848[label="1;4pkt 4fpkt"];
2171--3658[label="0.222222;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.200.19" src_ip="155.68.68.249" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.414254,2.04538,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.36.11.253"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.64484,2.00171,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_543{
style=filled;
color=gray75;
1451[label="211.80.116.140;d;36pkt 36fpkt", shape=diamond, color=yellow];
1763[label="213.7.197.192;s;5pkt 5fpkt", shape=diamond, color=yellow];
3678[label="210.29.104.255;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat543[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:3531, 211.80.116.140:*}[82.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3531: (42.8571%)&lt;BR/&gt; 1863: (9.52381%)&lt;BR/&gt; 3770: (2.38095%)&lt;BR/&gt; 3559: (2.38095%)&lt;BR/&gt; 3778: (1.19048%)&gt;];
}
1451--1763[label="0.2;1pkt 1fpkt"];
1451--3678[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.116.140" src_port="3531"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_544{
style=filled;
color=gray75;
2346[label="220.72.36.0;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3680[label="220.72.36.0;20pkt 20fpkt", shape=invtriangle, color=brown];
stat544[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.72.36.0:80, 135.232.8.211:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62077: (2.5641%)&lt;BR/&gt; 62076: (2.5641%)&lt;BR/&gt; 62075: (2.5641%)&lt;BR/&gt; 62074: (2.5641%)&gt;];
}
2346--3680[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.8.211" src_ip="220.72.36.0" src_port="80"/>
    </slice>
    <from sec="1057554768" usec="0"/>
    <to sec="1057554780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_545{
style=filled;
color=gray75;
2352[label="32.114.198.0;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3683[label="32.114.198.0;2pkt 2fpkt", shape=invtriangle, color=brown];
stat545[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.114.198.0:80, 150.8.86.12:1092}[50%]&lt;BR/&gt;{32.114.198.0:80, 211.80.112.171:4259}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4259: (25%)&lt;BR/&gt; 1092: (25%)&gt;];
}
2352--3683[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.112.171" dst_port="4259" src_ip="32.114.198.0" src_port="80"/>
      <filter dst_ip="150.8.86.12" dst_port="1092" src_ip="32.114.198.0" src_port="80"/>
    </slice>
    <from sec="1057554046" usec="0"/>
    <to sec="1057554751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.44.100.1"/>
    </slice>
    <from sec="1057554284" usec="0"/>
    <to sec="1057554296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.23.197.1"/>
    </slice>
    <from sec="1057554005" usec="0"/>
    <to sec="1057554899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
2369[label="52.71.11.2;159pkt 159fpkt", shape=pentagon, color=darkviolet];
3690[label="52.71.11.2;159pkt 159fpkt", shape=invtriangle, color=brown];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.71.11.2:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2369--3690[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="52.71.11.2" src_port="1025"/>
    </slice>
    <from sec="1057554772" usec="0"/>
    <to sec="1057554797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752891,1.97431,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_550{
style=filled;
color=gray75;
1173[label="150.9.130.155;d;158pkt 158fpkt", shape=diamond, color=yellow];
1479[label="211.80.103.240;d;147pkt 147fpkt", shape=diamond, color=yellow];
2392[label="32.0.87.5;45pkt 45fpkt", shape=pentagon, color=darkviolet];
2807[label="32.0.87.73;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2887[label="201.144.232.89;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3089[label="201.159.190.131;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3340[label="201.159.190.180;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3382[label="201.159.190.188;135pkt 135fpkt", shape=pentagon, color=darkviolet];
3698[label="32.0.87.5;44pkt 44fpkt", shape=invtriangle, color=brown];
stat550[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 211.80.103.240:*}[45.6825%]&lt;BR/&gt;{201.159.190.188:80, 150.9.130.155:*}[27.2981%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9186%)&lt;BR/&gt; 4268: (0.2443%)&lt;BR/&gt; 4265: (0.2443%)&lt;BR/&gt; 4264: (0.2443%)&lt;BR/&gt; 4263: (0.2443%)&gt;];
}
1173--2887[label="0.391304;9pkt 9fpkt"];
1173--3080[label="0.0625;2pkt 2fpkt"];
1173--3382[label="0.725926;98pkt 98fpkt"];
1173--4008[label="0.0625;2pkt 2fpkt"];
1479--2392[label="0.666667;30pkt 30fpkt"];
1479--2807[label="0.571429;4pkt 4fpkt"];
1479--3089[label="0.75;21pkt 21fpkt"];
1479--3340[label="0.814815;22pkt 22fpkt"];
1479--3382[label="0.2;27pkt 27fpkt"];
1479--3698[label="0.659091;29pkt 29fpkt"];
2392--3698[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.103.240" src_port="80"/>
      <filter dst_ip="150.9.130.155" src_ip="201.159.190.188" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_551{
style=filled;
color=gray75;
2399[label="213.7.194.6;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3700[label="213.7.194.6;1pkt 1fpkt", shape=invtriangle, color=brown];
stat551[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.194.6:1863, 210.101.229.142:1037}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1037: (50%)&gt;];
}
2399--3700[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.101.229.142" dst_port="1037" src_ip="213.7.194.6" src_port="1863"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26314,1.92327,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_552{
style=filled;
color=gray75;
29[label="86.192.9.48s;1pkt 1fpkt", shape=rectangle, color=red];
864[label="213.110.192.196;s;210pkt 210fpkt", shape=diamond, color=yellow];
972[label="213.110.192.198;s;193pkt 193fpkt", shape=diamond, color=yellow];
1026[label="144.147.202.222;d;2180pkt 2180fpkt", shape=diamond, color=yellow];
1054[label="86.192.16.83;s;264pkt 264fpkt", shape=diamond, color=yellow];
1124[label="213.7.111.11;s;75pkt 75fpkt", shape=diamond, color=yellow];
1278[label="86.192.9.48;s;1892pkt 1892fpkt", shape=diamond, color=yellow];
1346[label="213.7.111.10;s;78pkt 78fpkt", shape=diamond, color=yellow];
1416[label="144.147.200.111;d;47pkt 47fpkt", shape=diamond, color=yellow];
1463[label="144.147.204.41;d;32pkt 32fpkt", shape=diamond, color=yellow];
1594[label="150.8.19.33;d;20pkt 20fpkt", shape=diamond, color=yellow];
1897[label="213.110.192.196;s;210pkt 210fpkt", shape=hexagon, color=black];
1930[label="213.110.192.198;s;41pkt 41fpkt", shape=hexagon, color=black];
1956[label="86.192.16.83;s;186pkt 186fpkt", shape=hexagon, color=black];
1980[label="213.7.111.11;s;38pkt 38fpkt", shape=hexagon, color=black];
1983[label="144.147.202.222;d;434pkt 434fpkt", shape=hexagon, color=black];
2231[label="86.192.9.48;s;1870pkt 1870fpkt", shape=hexagon, color=black];
2425[label="213.7.111.10;82pkt 82fpkt", shape=pentagon, color=darkviolet];
2434[label="213.7.111.11;81pkt 81fpkt", shape=pentagon, color=darkviolet];
2661[label="86.192.9.48;1892pkt 1892fpkt", shape=pentagon, color=darkviolet];
2852[label="213.7.32.84;108pkt 108fpkt", shape=pentagon, color=darkviolet];
3422[label="213.7.108.195;47pkt 47fpkt", shape=pentagon, color=darkviolet];
3444[label="213.110.192.198;200pkt 200fpkt", shape=pentagon, color=darkviolet];
3711[label="213.7.111.10;82pkt 82fpkt", shape=invtriangle, color=brown];
3715[label="213.7.111.11;81pkt 81fpkt", shape=invtriangle, color=brown];
3819[label="86.192.9.48;1892pkt 1892fpkt", shape=invtriangle, color=brown];
4159[label="213.7.108.195;46pkt 46fpkt", shape=invtriangle, color=brown];
4289[label="213.7.111.11;81pkt 81fpkt", shape=invhouse, color=bisque];
4341[label="86.192.9.48;1892pkt 1892fpkt", shape=invhouse, color=bisque];
stat552[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.192.9.48:80, 144.147.202.222:*}[29.1723%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.9193%)&lt;BR/&gt; 53: (2.77797%)&lt;BR/&gt; 1863: (1.56436%)&lt;BR/&gt; 1434: (1.41354%)&lt;BR/&gt; 25: (1.39951%)&gt;];
}
29--1026[label="1;1pkt 1fpkt"];
29--1278[label="1;1pkt 1fpkt"];
29--1983[label="1;1pkt 1fpkt"];
29--2231[label="1;1pkt 1fpkt"];
29--2661[label="1;1pkt 1fpkt"];
29--3819[label="1;1pkt 1fpkt"];
29--4341[label="1;1pkt 1fpkt"];
864--889[label="0.047619;10pkt 10fpkt"];
864--955[label="0.00952381;2pkt 2fpkt"];
864--977[label="0.0047619;1pkt 1fpkt"];
864--1243[label="0.0224719;2pkt 2fpkt"];
864--1244[label="0.0136054;2pkt 2fpkt"];
864--1473[label="0.0496454;7pkt 7fpkt"];
864--1594[label="0.25;5pkt 5fpkt"];
864--1681[label="0.0224719;2pkt 2fpkt"];
864--1897[label="1;210pkt 210fpkt"];
864--2082[label="0.00952381;2pkt 2fpkt"];
864--2096[label="0.0148148;2pkt 2fpkt"];
864--2147[label="0.00952381;2pkt 2fpkt"];
864--2178[label="0.0496454;7pkt 7fpkt"];
864--2203[label="0.0238095;5pkt 5fpkt"];
972--1165[label="0.0310881;6pkt 6fpkt"];
972--1243[label="0.0224719;2pkt 2fpkt"];
972--1244[label="0.00680272;1pkt 1fpkt"];
972--1594[label="0.2;4pkt 4fpkt"];
972--1800[label="0.166667;8pkt 8fpkt"];
972--1930[label="1;41pkt 41fpkt"];
972--2082[label="0.0103627;2pkt 2fpkt"];
972--2085[label="0.0103627;2pkt 2fpkt"];
972--2203[label="0.0362694;7pkt 7fpkt"];
972--3444[label="1;193pkt 193fpkt"];
1026--1054[label="1;264pkt 264fpkt"];
1026--1278[label="1;1892pkt 1892fpkt"];
1026--1344[label="0.12381;13pkt 13fpkt"];
1026--1346[label="0.025641;2pkt 2fpkt"];
1026--1956[label="1;186pkt 186fpkt"];
1026--1983[label="1;434pkt 434fpkt"];
1026--2063[label="0.0909091;6pkt 6fpkt"];
1026--2231[label="1;1870pkt 1870fpkt"];
1026--2333[label="0.00366972;8pkt 8fpkt"];
1026--2334[label="0.0040282;4pkt 4fpkt"];
1026--2335[label="0.00499376;4pkt 4fpkt"];
1026--2336[label="0.00366972;8pkt 8fpkt"];
1026--2337[label="0.00442087;5pkt 5fpkt"];
1026--2340[label="0.00366972;8pkt 8fpkt"];
1026--2344[label="0.00366972;8pkt 8fpkt"];
1026--2425[label="0.0243902;2pkt 2fpkt"];
1026--2661[label="1;1892pkt 1892fpkt"];
1026--2852[label="0.00925926;1pkt 1fpkt"];
1026--3711[label="0.0243902;2pkt 2fpkt"];
1026--3819[label="1;1892pkt 1892fpkt"];
1026--4341[label="1;1892pkt 1892fpkt"];
1054--1956[label="1;186pkt 186fpkt"];
1054--1983[label="1;264pkt 264fpkt"];
1124--1165[label="0.0133333;1pkt 1fpkt"];
1124--1250[label="0.0441176;3pkt 3fpkt"];
1124--1594[label="0.2;4pkt 4fpkt"];
1124--1980[label="1;38pkt 38fpkt"];
1124--1994[label="0.0666667;5pkt 5fpkt"];
1124--2082[label="0.0133333;1pkt 1fpkt"];
1124--2085[label="0.08;6pkt 6fpkt"];
1124--2147[label="0.0533333;4pkt 4fpkt"];
1124--2434[label="1;75pkt 75fpkt"];
1124--3715[label="1;75pkt 75fpkt"];
1124--4289[label="1;75pkt 75fpkt"];
1278--1983[label="0.357143;155pkt 155fpkt"];
1278--2231[label="1;1870pkt 1870fpkt"];
1278--2333[label="0.00422833;8pkt 8fpkt"];
1278--2334[label="0.0040282;4pkt 4fpkt"];
1278--2335[label="0.00499376;4pkt 4fpkt"];
1278--2336[label="0.00422833;8pkt 8fpkt"];
1278--2337[label="0.00442087;5pkt 5fpkt"];
1278--2340[label="0.00422833;8pkt 8fpkt"];
1278--2344[label="0.00422833;8pkt 8fpkt"];
1278--2661[label="1;1892pkt 1892fpkt"];
1278--3819[label="1;1892pkt 1892fpkt"];
1278--4341[label="1;1892pkt 1892fpkt"];
1346--1357[label="0.0487805;2pkt 2fpkt"];
1346--1416[label="0.319149;15pkt 15fpkt"];
1346--1463[label="0.25;8pkt 8fpkt"];
1346--1983[label="0.025641;2pkt 2fpkt"];
1346--1994[label="0.0512821;4pkt 4fpkt"];
1346--2082[label="0.0384615;3pkt 3fpkt"];
1346--2085[label="0.0769231;6pkt 6fpkt"];
1346--2147[label="0.0641026;5pkt 5fpkt"];
1346--2425[label="1;78pkt 78fpkt"];
1346--3711[label="1;78pkt 78fpkt"];
1416--1460[label="0.0425532;2pkt 2fpkt"];
1416--2402[label="0.166667;1pkt 1fpkt"];
1416--2425[label="0.319149;15pkt 15fpkt"];
1416--2852[label="0.106383;5pkt 5fpkt"];
1416--3701[label="0.2;1pkt 1fpkt"];
1416--3711[label="0.319149;15pkt 15fpkt"];
1463--2005[label="0.03125;1pkt 1fpkt"];
1463--2114[label="0.03125;1pkt 1fpkt"];
1463--2425[label="0.25;8pkt 8fpkt"];
1463--2498[label="0.111111;1pkt 1fpkt"];
1463--2852[label="0.15625;5pkt 5fpkt"];
1463--2960[label="0.09375;3pkt 3fpkt"];
1463--3372[label="0.03125;1pkt 1fpkt"];
1463--3422[label="0.125;4pkt 4fpkt"];
1463--3598[label="0.03125;1pkt 1fpkt"];
1463--3711[label="0.25;8pkt 8fpkt"];
1463--3832[label="0.03125;1pkt 1fpkt"];
1463--4139[label="0.03125;1pkt 1fpkt"];
1463--4159[label="0.125;4pkt 4fpkt"];
1463--4350[label="0.03125;1pkt 1fpkt"];
1463--4478[label="0.03125;1pkt 1fpkt"];
1594--1897[label="0.25;5pkt 5fpkt"];
1594--1980[label="0.15;3pkt 3fpkt"];
1594--2434[label="0.2;4pkt 4fpkt"];
1594--2852[label="0.3;6pkt 6fpkt"];
1594--3444[label="0.2;4pkt 4fpkt"];
1594--3715[label="0.2;4pkt 4fpkt"];
1594--4064[label="0.05;1pkt 1fpkt"];
1594--4289[label="0.2;4pkt 4fpkt"];
1897--2082[label="0.00952381;2pkt 2fpkt"];
1897--2096[label="0.0148148;2pkt 2fpkt"];
1897--2147[label="0.00952381;2pkt 2fpkt"];
1897--2178[label="0.0496454;7pkt 7fpkt"];
1897--2203[label="0.0238095;5pkt 5fpkt"];
1930--2082[label="0.0243902;1pkt 1fpkt"];
1930--2085[label="0.0487805;2pkt 2fpkt"];
1930--2203[label="0.0243902;1pkt 1fpkt"];
1930--3444[label="1;41pkt 41fpkt"];
1956--1983[label="1;186pkt 186fpkt"];
1980--1994[label="0.0789474;3pkt 3fpkt"];
1980--2085[label="0.0526316;2pkt 2fpkt"];
1980--2147[label="0.0526316;2pkt 2fpkt"];
1980--2434[label="1;38pkt 38fpkt"];
1980--3715[label="1;38pkt 38fpkt"];
1980--4289[label="1;38pkt 38fpkt"];
1983--2063[label="0.0606061;4pkt 4fpkt"];
1983--2231[label="0.357143;155pkt 155fpkt"];
1983--2333[label="0.00460829;2pkt 2fpkt"];
1983--2336[label="0.00460829;2pkt 2fpkt"];
1983--2340[label="0.00460829;2pkt 2fpkt"];
1983--2344[label="0.00460829;2pkt 2fpkt"];
1983--2425[label="0.0243902;2pkt 2fpkt"];
1983--2661[label="0.357143;155pkt 155fpkt"];
1983--2852[label="0.00925926;1pkt 1fpkt"];
1983--3711[label="0.0243902;2pkt 2fpkt"];
1983--3819[label="0.357143;155pkt 155fpkt"];
1983--4341[label="0.357143;155pkt 155fpkt"];
2231--2333[label="0.00427807;8pkt 8fpkt"];
2231--2334[label="0.0040282;4pkt 4fpkt"];
2231--2335[label="0.00499376;4pkt 4fpkt"];
2231--2336[label="0.00427807;8pkt 8fpkt"];
2231--2337[label="0.00442087;5pkt 5fpkt"];
2231--2340[label="0.00427807;8pkt 8fpkt"];
2231--2344[label="0.00427807;8pkt 8fpkt"];
2231--2661[label="1;1870pkt 1870fpkt"];
2231--3819[label="1;1870pkt 1870fpkt"];
2231--4341[label="1;1870pkt 1870fpkt"];
2425--3711[label="1;82pkt 82fpkt"];
2434--3715[label="1;81pkt 81fpkt"];
2434--4289[label="1;81pkt 81fpkt"];
2661--3819[label="1;1892pkt 1892fpkt"];
2661--4341[label="1;1892pkt 1892fpkt"];
3422--4159[label="1;46pkt 46fpkt"];
3715--4289[label="1;81pkt 81fpkt"];
3819--4341[label="1;1892pkt 1892fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.202.222" src_ip="86.192.9.48" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_553{
style=filled;
color=gray75;
2407[label="202.116.137.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3703[label="202.116.137.8;1pkt 1fpkt", shape=invtriangle, color=brown];
4285[label="202.116.137.8;1pkt 1fpkt", shape=invhouse, color=bisque];
stat553[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.116.137.8:80, 210.101.232.45:38641}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38641: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2407--3703[label="1;1pkt 1fpkt"];
2407--4285[label="1;1pkt 1fpkt"];
3703--4285[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.101.232.45" dst_port="38641" src_ip="202.116.137.8" src_port="80"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_554{
style=filled;
color=gray75;
2412[label="200.81.45.9;130pkt 130fpkt", shape=pentagon, color=darkviolet];
3704[label="200.81.45.9;129pkt 129fpkt", shape=invtriangle, color=brown];
4286[label="200.81.45.9;130pkt 130fpkt", shape=invhouse, color=bisque];
stat554[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.81.45.9:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2412--3704[label="1;129pkt 129fpkt"];
2412--4286[label="1;130pkt 130fpkt"];
3704--4286[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.81.45.9" src_port="1027"/>
    </slice>
    <from sec="1057554722" usec="0"/>
    <to sec="1057554756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.136.213.9"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_556{
style=filled;
color=gray75;
2428[label="149.87.175.10;179pkt 179fpkt", shape=pentagon, color=darkviolet];
3713[label="149.87.175.10;178pkt 178fpkt", shape=invtriangle, color=brown];
stat556[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.87.175.10:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2428--3713[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="149.87.175.10" src_port="1026"/>
    </slice>
    <from sec="1057554249" usec="0"/>
    <to sec="1057554688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.126.97.11"/>
    </slice>
    <from sec="1057554252" usec="0"/>
    <to sec="1057554362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_558{
style=filled;
color=gray75;
2437[label="219.141.128.12;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3717[label="219.141.128.12;1pkt 1fpkt", shape=invtriangle, color=brown];
4290[label="219.141.128.12;2pkt 2fpkt", shape=invhouse, color=bisque];
stat558[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.141.128.12:80, 211.80.116.100:1097}[50%]&lt;BR/&gt;{219.141.128.12:80, 211.80.116.100:1099}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1099: (30%)&lt;BR/&gt; 1097: (20%)&gt;];
}
2437--3717[label="1;1pkt 1fpkt"];
2437--4290[label="1;2pkt 2fpkt"];
3717--4290[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.116.100" dst_port="1099" src_ip="219.141.128.12" src_port="80"/>
      <filter dst_ip="211.80.116.100" dst_port="1097" src_ip="219.141.128.12" src_port="80"/>
    </slice>
    <from sec="1057554695" usec="0"/>
    <to sec="1057554726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.41.68.13"/>
    </slice>
    <from sec="1057554018" usec="0"/>
    <to sec="1057554898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="104.4.93.14"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
2461[label="192.92.46.16;52pkt 52fpkt", shape=pentagon, color=darkviolet];
3727[label="192.92.46.16;52pkt 52fpkt", shape=invtriangle, color=brown];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.92.46.16:80, 150.8.32.140:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3027: (0.961538%)&lt;BR/&gt; 3016: (0.961538%)&lt;BR/&gt; 3015: (0.961538%)&lt;BR/&gt; 3014: (0.961538%)&gt;];
}
2461--3727[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.32.140" src_ip="192.92.46.16" src_port="80"/>
    </slice>
    <from sec="1057554551" usec="0"/>
    <to sec="1057554775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_562{
style=filled;
color=gray75;
2472[label="196.213.248.17;109pkt 109fpkt", shape=pentagon, color=darkviolet];
3732[label="196.213.248.17;109pkt 109fpkt", shape=invtriangle, color=brown];
stat562[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.213.248.17:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2472--3732[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.213.248.17" src_port="1029"/>
    </slice>
    <from sec="1057554665" usec="0"/>
    <to sec="1057554685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08959,1.92446,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_563{
style=filled;
color=gray75;
329[label="201.212.3.170s;1pkt 1fpkt", shape=rectangle, color=red];
895[label="202.135.165.18;s;465pkt 465fpkt", shape=diamond, color=yellow];
993[label="150.8.65.52;d;15pkt 15fpkt", shape=diamond, color=yellow];
1083[label="150.8.169.76;d;3pkt 3fpkt", shape=diamond, color=yellow];
1084[label="198.145.39.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
1167[label="150.9.4.81;d;103pkt 103fpkt", shape=diamond, color=yellow];
1303[label="144.147.235.129;d;39pkt 39fpkt", shape=diamond, color=yellow];
1382[label="150.8.75.49;d;47pkt 47fpkt", shape=diamond, color=yellow];
1384[label="148.232.34.102;s;37pkt 37fpkt", shape=diamond, color=yellow];
2210[label="198.145.39.170;s;1pkt 1fpkt", shape=hexagon, color=black];
2474[label="148.232.35.18;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2478[label="202.135.165.18;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2943[label="148.232.34.102;60pkt 60fpkt", shape=pentagon, color=darkviolet];
3274[label="201.159.190.163;49pkt 49fpkt", shape=pentagon, color=darkviolet];
3501[label="85.24.107.209;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3568[label="202.80.91.224;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3734[label="148.232.35.18;16pkt 16fpkt", shape=invtriangle, color=brown];
4097[label="201.159.190.163;50pkt 50fpkt", shape=invtriangle, color=brown];
stat563[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.135.165.18:80, *:*}[67.3882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1361%)&lt;BR/&gt; 443: (0.37797%)&lt;BR/&gt; 49165: (0.215983%)&lt;BR/&gt; 7426: (0.215983%)&lt;BR/&gt; 49495: (0.161987%)&gt;];
}
329--1083[label="1;1pkt 1fpkt"];
329--1084[label="1;1pkt 1fpkt"];
329--2210[label="1;1pkt 1fpkt"];
895--901[label="0.00225225;1pkt 1fpkt"];
895--945[label="0.0666667;2pkt 2fpkt"];
895--977[label="0.0193548;9pkt 9fpkt"];
895--980[label="0.00543478;1pkt 1fpkt"];
895--1083[label="0.333333;1pkt 1fpkt"];
895--1102[label="0.0390625;5pkt 5fpkt"];
895--1109[label="0.0943396;10pkt 10fpkt"];
895--1129[label="0.0196078;1pkt 1fpkt"];
895--1167[label="0.165049;17pkt 17fpkt"];
895--1244[label="0.00680272;1pkt 1fpkt"];
895--1249[label="0.0263158;2pkt 2fpkt"];
895--1252[label="0.0689655;6pkt 6fpkt"];
895--1303[label="0.0769231;3pkt 3fpkt"];
895--1307[label="0.0175439;1pkt 1fpkt"];
895--1363[label="0.0344828;1pkt 1fpkt"];
895--1426[label="0.0512821;6pkt 6fpkt"];
895--1476[label="0.230769;9pkt 9fpkt"];
895--1677[label="0.0238095;1pkt 1fpkt"];
895--1798[label="0.0128205;1pkt 1fpkt"];
895--1808[label="0.0350877;2pkt 2fpkt"];
895--1966[label="0.0537634;25pkt 25fpkt"];
895--2147[label="0.00215054;1pkt 1fpkt"];
895--2203[label="0.00215054;1pkt 1fpkt"];
895--2299[label="0.0537634;25pkt 25fpkt"];
895--2478[label="0.333333;1pkt 1fpkt"];
993--1384[label="0.333333;5pkt 5fpkt"];
993--1580[label="0.0666667;1pkt 1fpkt"];
993--2040[label="0.0666667;1pkt 1fpkt"];
993--2114[label="0.0666667;1pkt 1fpkt"];
993--2474[label="0.4;6pkt 6fpkt"];
993--2943[label="0.333333;5pkt 5fpkt"];
993--3288[label="0.0666667;1pkt 1fpkt"];
993--3598[label="0.0666667;1pkt 1fpkt"];
993--3734[label="0.4;6pkt 6fpkt"];
993--4104[label="0.0666667;1pkt 1fpkt"];
993--4461[label="0.0666667;1pkt 1fpkt"];
1083--1084[label="1;1pkt 1fpkt"];
1083--2210[label="1;1pkt 1fpkt"];
1084--2210[label="1;1pkt 1fpkt"];
1167--2474[label="0.0588235;1pkt 1fpkt"];
1167--3274[label="0.959184;47pkt 47fpkt"];
1167--3501[label="0.555556;5pkt 5fpkt"];
1167--3734[label="0.0625;1pkt 1fpkt"];
1167--4097[label="0.94;47pkt 47fpkt"];
1303--1932[label="0.025641;1pkt 1fpkt"];
1303--2040[label="0.025641;1pkt 1fpkt"];
1303--2114[label="0.025641;1pkt 1fpkt"];
1303--2323[label="0.025641;1pkt 1fpkt"];
1303--2540[label="0.025641;1pkt 1fpkt"];
1303--3037[label="0.0512821;2pkt 2fpkt"];
1303--3568[label="0.9;9pkt 9fpkt"];
1303--3598[label="0.025641;1pkt 1fpkt"];
1303--3763[label="0.025641;1pkt 1fpkt"];
1303--3992[label="0.0512821;2pkt 2fpkt"];
1382--1384[label="0.810811;30pkt 30fpkt"];
1382--2474[label="0.176471;3pkt 3fpkt"];
1382--2943[label="0.638298;30pkt 30fpkt"];
1382--2989[label="0.37037;10pkt 10fpkt"];
1382--3734[label="0.1875;3pkt 3fpkt"];
1382--3962[label="0.37037;10pkt 10fpkt"];
1384--2943[label="1;37pkt 37fpkt"];
2474--3734[label="1;16pkt 16fpkt"];
3274--4097[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter src_ip="202.135.165.18" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.195.181.20"/>
    </slice>
    <from sec="1057554649" usec="0"/>
    <to sec="1057554686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_565{
style=filled;
color=gray75;
2506[label="201.212.29.22;248pkt 248fpkt", shape=pentagon, color=darkviolet];
3749[label="201.212.29.22;249pkt 249fpkt", shape=invtriangle, color=brown];
stat565[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.212.29.22:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 37757: (0.201207%)&lt;BR/&gt; 37753: (0.201207%)&lt;BR/&gt; 37714: (0.201207%)&lt;BR/&gt; 37701: (0.201207%)&gt;];
}
2506--3749[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.212.29.22"/>
    </slice>
    <from sec="1057554728" usec="0"/>
    <to sec="1057554767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937622,1.98143,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_566{
style=filled;
color=gray75;
153[label="144.175.33.23s;217pkt 217fpkt", shape=rectangle, color=red];
2511[label="144.175.33.23;227pkt 227fpkt", shape=pentagon, color=darkviolet];
3750[label="144.175.33.23;228pkt 228fpkt", shape=invtriangle, color=brown];
4303[label="144.175.33.23;228pkt 228fpkt", shape=invhouse, color=bisque];
stat566[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.175.33.23:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
153--2511[label="0.995392;216pkt 216fpkt"];
153--3750[label="1;217pkt 217fpkt"];
153--4303[label="1;217pkt 217fpkt"];
2511--3750[label="1;227pkt 227fpkt"];
2511--4303[label="1;227pkt 227fpkt"];
3750--4303[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="144.175.33.23" src_port="1025"/>
    </slice>
    <from sec="1057554324" usec="0"/>
    <to sec="1057554360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
2519[label="211.200.59.24;246pkt 246fpkt", shape=pentagon, color=darkviolet];
3755[label="211.200.59.24;247pkt 247fpkt", shape=invtriangle, color=brown];
4305[label="211.200.59.24;247pkt 247fpkt", shape=invhouse, color=bisque];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.200.59.24:1028, *:137}[99.5951%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (49.7973%)&lt;BR/&gt; 137: (49.7973%)&lt;BR/&gt; 0: (0.405405%)&gt;];
}
2519--3755[label="1;246pkt 246fpkt"];
2519--4305[label="1;246pkt 246fpkt"];
3755--4305[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.200.59.24" src_port="1028"/>
    </slice>
    <from sec="1057554226" usec="0"/>
    <to sec="1057554264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_570{
style=filled;
color=gray75;
2538[label="213.110.194.26;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3762[label="213.110.194.26;2pkt 2fpkt", shape=invtriangle, color=brown];
4309[label="213.110.194.26;2pkt 2fpkt", shape=invhouse, color=bisque];
stat570[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.110.194.26:80, 210.101.232.43:55112}[50%]&lt;BR/&gt;{213.110.194.26:80, 210.101.232.43:55123}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55123: (25%)&lt;BR/&gt; 55112: (25%)&gt;];
}
2538--3762[label="1;2pkt 2fpkt"];
2538--4309[label="1;2pkt 2fpkt"];
3762--4309[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.101.232.43" dst_port="55123" src_ip="213.110.194.26" src_port="80"/>
      <filter dst_ip="210.101.232.43" dst_port="55112" src_ip="213.110.194.26" src_port="80"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.114.198.27"/>
    </slice>
    <from sec="1057554011" usec="0"/>
    <to sec="1057554895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01933,1.96153,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_572{
style=filled;
color=gray75;
837[label="150.8.236.107;d;4pkt 4fpkt", shape=diamond, color=yellow];
842[label="212.20.213.186;s;2pkt 2fpkt", shape=diamond, color=yellow];
957[label="212.20.213.184;s;3pkt 3fpkt", shape=diamond, color=yellow];
1601[label="150.8.166.17;d;10pkt 10fpkt", shape=diamond, color=yellow];
1708[label="213.7.36.69;s;21pkt 21fpkt", shape=diamond, color=yellow];
1768[label="213.7.110.33;s;85pkt 85fpkt", shape=diamond, color=yellow];
1923[label="212.20.213.184;s;3pkt 3fpkt", shape=hexagon, color=black];
2553[label="213.7.72.30;92pkt 92fpkt", shape=pentagon, color=darkviolet];
2771[label="213.7.36.69;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3769[label="213.7.72.30;91pkt 91fpkt", shape=invtriangle, color=brown];
stat572[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.72.30:80, *:*}[42.5926%]&lt;BR/&gt;{213.7.110.33:80, *:*}[39.3519%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0845%)&lt;BR/&gt; 443: (2.76968%)&lt;BR/&gt; 1034: (0.874636%)&lt;BR/&gt; 1056: (0.728863%)&lt;BR/&gt; 1033: (0.728863%)&gt;];
}
837--842[label="1;2pkt 2fpkt"];
837--2553[label="0.25;1pkt 1fpkt"];
837--3769[label="0.25;1pkt 1fpkt"];
957--1601[label="0.666667;2pkt 2fpkt"];
957--1923[label="1;3pkt 3fpkt"];
1601--1708[label="0.3;3pkt 3fpkt"];
1601--1768[label="0.2;2pkt 2fpkt"];
1601--1923[label="0.666667;2pkt 2fpkt"];
1601--2484[label="0.1;1pkt 1fpkt"];
1601--2553[label="0.2;2pkt 2fpkt"];
1601--2771[label="0.3;3pkt 3fpkt"];
1601--3737[label="0.1;1pkt 1fpkt"];
1601--3769[label="0.2;2pkt 2fpkt"];
1708--2771[label="1;21pkt 21fpkt"];
1768--2085[label="0.0352941;3pkt 3fpkt"];
2553--3769[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter src_ip="213.7.72.30" src_port="80"/>
      <filter src_ip="213.7.110.33" src_port="80"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20307,1.96037,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_573{
style=filled;
color=gray75;
758[label="150.8.168.131;d;42pkt 42fpkt", shape=diamond, color=yellow];
920[label="34.7.92.105;s;53pkt 53fpkt", shape=diamond, color=yellow];
1131[label="150.8.86.93;d;72pkt 72fpkt", shape=diamond, color=yellow];
1134[label="150.8.83.198;d;26pkt 26fpkt", shape=diamond, color=yellow];
1151[label="199.84.81.0;s;15pkt 15fpkt", shape=diamond, color=yellow];
1179[label="34.7.92.16;s;23pkt 23fpkt", shape=diamond, color=yellow];
1186[label="144.147.200.98;d;69pkt 69fpkt", shape=diamond, color=yellow];
1358[label="211.80.110.74;d;38pkt 38fpkt", shape=diamond, color=yellow];
1415[label="34.7.92.19;s;32pkt 32fpkt", shape=diamond, color=yellow];
1794[label="34.7.92.24;s;27pkt 27fpkt", shape=diamond, color=yellow];
2132[label="211.80.110.74;d;32pkt 32fpkt", shape=hexagon, color=black];
2145[label="199.84.81.0;s;13pkt 13fpkt", shape=hexagon, color=black];
2240[label="34.7.92.105;s;53pkt 53fpkt", shape=hexagon, color=black];
2347[label="199.84.81.0;29pkt 29fpkt", shape=pentagon, color=darkviolet];
2462[label="34.7.92.16;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2469[label="34.7.92.17;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2521[label="34.7.92.24;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2557[label="198.5.203.30;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2923[label="34.7.92.98;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3681[label="199.84.81.0;29pkt 29fpkt", shape=invtriangle, color=brown];
3770[label="198.5.203.30;3pkt 3fpkt", shape=invtriangle, color=brown];
4313[label="198.5.203.30;3pkt 3fpkt", shape=invhouse, color=bisque];
stat573[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 144.147.200.98:*}[28.3088%]&lt;BR/&gt;{*:80, 150.8.86.93:*}[26.4706%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1421: (0.544323%)&lt;BR/&gt; 1394: (0.544323%)&lt;BR/&gt; 1420: (0.466563%)&lt;BR/&gt; 1408: (0.466563%)&gt;];
}
758--920[label="0.142857;6pkt 6fpkt"];
758--1179[label="0.26087;6pkt 6fpkt"];
758--1415[label="0.125;4pkt 4fpkt"];
758--2240[label="0.142857;6pkt 6fpkt"];
758--2462[label="0.2;6pkt 6fpkt"];
758--2469[label="0.4;4pkt 4fpkt"];
758--2923[label="0.6;6pkt 6fpkt"];
920--1131[label="0.358491;19pkt 19fpkt"];
920--1186[label="0.320755;17pkt 17fpkt"];
920--1358[label="0.210526;8pkt 8fpkt"];
920--2132[label="0.1875;6pkt 6fpkt"];
920--2240[label="1;53pkt 53fpkt"];
1131--1415[label="0.28125;9pkt 9fpkt"];
1131--1794[label="0.37037;10pkt 10fpkt"];
1131--2240[label="0.358491;19pkt 19fpkt"];
1131--2521[label="0.3;9pkt 9fpkt"];
1134--1151[label="1;15pkt 15fpkt"];
1134--2145[label="0.923077;12pkt 12fpkt"];
1134--2347[label="0.576923;15pkt 15fpkt"];
1134--2557[label="1;4pkt 4fpkt"];
1134--3681[label="0.576923;15pkt 15fpkt"];
1134--3770[label="1;3pkt 3fpkt"];
1134--4313[label="1;3pkt 3fpkt"];
1151--2145[label="0.923077;12pkt 12fpkt"];
1151--2347[label="1;15pkt 15fpkt"];
1151--3681[label="1;15pkt 15fpkt"];
1179--1186[label="0.608696;14pkt 14fpkt"];
1179--2096[label="0.130435;3pkt 3fpkt"];
1179--2462[label="0.956522;22pkt 22fpkt"];
1186--1415[label="0.53125;17pkt 17fpkt"];
1186--1794[label="0.62963;17pkt 17fpkt"];
1186--2240[label="0.320755;17pkt 17fpkt"];
1186--2462[label="0.566667;17pkt 17fpkt"];
1186--2521[label="0.566667;17pkt 17fpkt"];
1358--2132[label="1;32pkt 32fpkt"];
1358--2145[label="0.0769231;1pkt 1fpkt"];
1358--2240[label="0.210526;8pkt 8fpkt"];
1358--2347[label="0.206897;6pkt 6fpkt"];
1358--2469[label="0.5;5pkt 5fpkt"];
1358--2923[label="0.4;4pkt 4fpkt"];
1358--3681[label="0.206897;6pkt 6fpkt"];
1794--2521[label="0.962963;26pkt 26fpkt"];
2132--2145[label="0.0769231;1pkt 1fpkt"];
2132--2240[label="0.1875;6pkt 6fpkt"];
2132--2347[label="0.206897;6pkt 6fpkt"];
2132--2469[label="0.4;4pkt 4fpkt"];
2132--2923[label="0.3;3pkt 3fpkt"];
2132--3681[label="0.206897;6pkt 6fpkt"];
2145--2347[label="0.923077;12pkt 12fpkt"];
2145--3681[label="0.923077;12pkt 12fpkt"];
2347--3681[label="1;29pkt 29fpkt"];
2557--3770[label="1;3pkt 3fpkt"];
2557--4313[label="1;3pkt 3fpkt"];
3770--4313[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.200.98" src_port="80"/>
      <filter dst_ip="150.8.86.93" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_574{
style=filled;
color=gray75;
2558[label="85.96.29.31;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3771[label="85.96.29.31;1pkt 1fpkt", shape=invtriangle, color=brown];
stat574[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.96.29.31:20235, 210.101.237.41:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20235: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2558--3771[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.101.237.41" dst_port="80" src_ip="85.96.29.31" src_port="20235"/>
    </slice>
    <from sec="1057554356" usec="0"/>
    <to sec="1057554604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_576{
style=filled;
color=gray75;
2595[label="85.41.253.36;172pkt 172fpkt", shape=pentagon, color=darkviolet];
3786[label="85.41.253.36;172pkt 172fpkt", shape=invtriangle, color=brown];
4321[label="85.41.253.36;172pkt 172fpkt", shape=invhouse, color=bisque];
stat576[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.41.253.36:65139, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65139: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2595--3786[label="1;172pkt 172fpkt"];
2595--4321[label="1;172pkt 172fpkt"];
3786--4321[label="1;172pkt 172fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.41.253.36" src_port="65139"/>
    </slice>
    <from sec="1057554112" usec="0"/>
    <to sec="1057554229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_577{
style=filled;
color=gray75;
2600[label="202.205.137.37;30pkt 30fpkt", shape=pentagon, color=darkviolet];
3789[label="202.205.137.37;29pkt 29fpkt", shape=invtriangle, color=brown];
4322[label="202.205.137.37;30pkt 30fpkt", shape=invhouse, color=bisque];
stat577[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.205.137.37:80, 144.147.227.209:*}[96.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49877: (1.68539%)&lt;BR/&gt; 49876: (1.68539%)&lt;BR/&gt; 49875: (1.68539%)&lt;BR/&gt; 49874: (1.68539%)&gt;];
}
2600--3789[label="1;29pkt 29fpkt"];
2600--4322[label="1;30pkt 30fpkt"];
3789--4322[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.227.209" src_ip="202.205.137.37" src_port="80"/>
    </slice>
    <from sec="1057554868" usec="0"/>
    <to sec="1057554887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_578{
style=filled;
color=gray75;
2606[label="128.182.224.37;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3792[label="128.182.224.37;12pkt 12fpkt", shape=invtriangle, color=brown];
4325[label="128.182.224.37;13pkt 13fpkt", shape=invhouse, color=bisque];
stat578[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.182.224.37:80, 210.89.17.169:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50083: (4.05405%)&lt;BR/&gt; 50082: (4.05405%)&lt;BR/&gt; 50081: (4.05405%)&lt;BR/&gt; 50080: (4.05405%)&gt;];
}
2606--3792[label="1;12pkt 12fpkt"];
2606--4325[label="1;12pkt 12fpkt"];
3792--4325[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="210.89.17.169" src_ip="128.182.224.37" src_port="80"/>
    </slice>
    <from sec="1057554118" usec="0"/>
    <to sec="1057554125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.67.104.39"/>
    </slice>
    <from sec="1057554480" usec="0"/>
    <to sec="1057554888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.80.94.43"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_581{
style=filled;
color=gray75;
2641[label="198.142.142.43;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3810[label="198.142.142.43;2pkt 2fpkt", shape=invtriangle, color=brown];
4333[label="198.142.142.43;2pkt 2fpkt", shape=invhouse, color=bisque];
stat581[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.142.142.43:80, 144.147.205.133:1117}[50%]&lt;BR/&gt;{198.142.142.43:80, 144.147.203.154:1235}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1235: (25%)&lt;BR/&gt; 1117: (25%)&gt;];
}
2641--3810[label="1;2pkt 2fpkt"];
2641--4333[label="1;2pkt 2fpkt"];
3810--4333[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.203.154" dst_port="1235" src_ip="198.142.142.43" src_port="80"/>
      <filter dst_ip="144.147.205.133" dst_port="1117" src_ip="198.142.142.43" src_port="80"/>
    </slice>
    <from sec="1057554752" usec="0"/>
    <to sec="1057554894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_582{
style=filled;
color=gray75;
2650[label="34.107.78.45;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3814[label="34.107.78.45;7pkt 7fpkt", shape=invtriangle, color=brown];
4335[label="34.107.78.45;7pkt 7fpkt", shape=invhouse, color=bisque];
stat582[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.107.78.45:80, 150.8.128.26:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4209: (7.14286%)&lt;BR/&gt; 4208: (7.14286%)&lt;BR/&gt; 4207: (7.14286%)&lt;BR/&gt; 4206: (7.14286%)&gt;];
}
2650--3814[label="1;7pkt 7fpkt"];
2650--4335[label="1;7pkt 7fpkt"];
3814--4335[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.128.26" src_ip="34.107.78.45" src_port="80"/>
    </slice>
    <from sec="1057554738" usec="0"/>
    <to sec="1057554887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20307,1.96037,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_583{
style=filled;
color=gray75;
987[label="150.9.10.60;d;42pkt 42fpkt", shape=diamond, color=yellow];
1050[label="86.143.183.145;s;1pkt 1fpkt", shape=diamond, color=yellow];
1067[label="168.253.137.76;d;343pkt 343fpkt", shape=diamond, color=yellow];
1115[label="32.131.249.54;s;30pkt 30fpkt", shape=diamond, color=yellow];
1133[label="32.131.249.48;s;24pkt 24fpkt", shape=diamond, color=yellow];
1295[label="34.181.237.99;s;105pkt 105fpkt", shape=diamond, color=yellow];
1546[label="150.9.10.57;d;56pkt 56fpkt", shape=diamond, color=yellow];
1954[label="86.143.183.145;s;1pkt 1fpkt", shape=hexagon, color=black];
1978[label="32.131.249.54;s;24pkt 24fpkt", shape=hexagon, color=black];
2098[label="34.181.237.99;s;77pkt 77fpkt", shape=hexagon, color=black];
2355[label="32.131.249.0;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2567[label="32.131.249.32;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2614[label="32.131.249.38;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2652[label="32.131.249.45;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2692[label="32.131.249.54;32pkt 32fpkt", shape=pentagon, color=darkviolet];
2717[label="211.11.81.59;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3685[label="32.131.249.0;9pkt 9fpkt", shape=invtriangle, color=brown];
3815[label="32.131.249.45;23pkt 23fpkt", shape=invtriangle, color=brown];
3835[label="32.131.249.54;32pkt 32fpkt", shape=invtriangle, color=brown];
3848[label="211.11.81.59;3pkt 3fpkt", shape=invtriangle, color=brown];
4336[label="32.131.249.45;23pkt 23fpkt", shape=invhouse, color=bisque];
4352[label="32.131.249.54;33pkt 33fpkt", shape=invhouse, color=bisque];
stat583[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 168.253.137.76:25}[57.9606%]&lt;BR/&gt;{34.181.237.99:*, *:*}[20.5725%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.0285%)&lt;BR/&gt; 53: (1.75246%)&lt;BR/&gt; 31698: (0.328587%)&lt;BR/&gt; 44326: (0.273823%)&lt;BR/&gt; 38614: (0.273823%)&gt;];
}
987--1050[label="1;1pkt 1fpkt"];
987--1053[label="0.0238095;1pkt 1fpkt"];
987--1115[label="0.0333333;1pkt 1fpkt"];
987--1133[label="0.0416667;1pkt 1fpkt"];
987--1954[label="1;1pkt 1fpkt"];
987--2652[label="0.0909091;2pkt 2fpkt"];
987--2692[label="0.03125;1pkt 1fpkt"];
987--3292[label="0.0526316;2pkt 2fpkt"];
987--3815[label="0.0869565;2pkt 2fpkt"];
987--3835[label="0.03125;1pkt 1fpkt"];
987--4105[label="0.0540541;2pkt 2fpkt"];
987--4336[label="0.0869565;2pkt 2fpkt"];
987--4352[label="0.030303;1pkt 1fpkt"];
1050--1954[label="1;1pkt 1fpkt"];
1067--1115[label="0.1;3pkt 3fpkt"];
1067--1133[label="0.0416667;1pkt 1fpkt"];
1067--1295[label="0.8;84pkt 84fpkt"];
1067--1766[label="0.035461;5pkt 5fpkt"];
1067--1978[label="0.0416667;1pkt 1fpkt"];
1067--2098[label="0.805195;62pkt 62fpkt"];
1067--2327[label="0.00291545;1pkt 1fpkt"];
1067--2355[label="0.222222;2pkt 2fpkt"];
1067--2567[label="0.25;2pkt 2fpkt"];
1067--2586[label="0.0833333;1pkt 1fpkt"];
1067--2614[label="0.0714286;1pkt 1fpkt"];
1067--2652[label="0.0909091;2pkt 2fpkt"];
1067--2692[label="0.09375;3pkt 3fpkt"];
1067--3685[label="0.222222;2pkt 2fpkt"];
1067--3815[label="0.0869565;2pkt 2fpkt"];
1067--3835[label="0.09375;3pkt 3fpkt"];
1067--4336[label="0.0869565;2pkt 2fpkt"];
1067--4352[label="0.0909091;3pkt 3fpkt"];
1115--1793[label="0.0333333;1pkt 1fpkt"];
1115--1978[label="1;24pkt 24fpkt"];
1115--2692[label="0.966667;29pkt 29fpkt"];
1115--3835[label="0.966667;29pkt 29fpkt"];
1115--4352[label="1;30pkt 30fpkt"];
1133--1793[label="0.0416667;1pkt 1fpkt"];
1295--1751[label="0.00952381;1pkt 1fpkt"];
1295--1858[label="0.00952381;1pkt 1fpkt"];
1295--2098[label="1;77pkt 77fpkt"];
1295--2284[label="0.00952381;1pkt 1fpkt"];
1295--2327[label="0.0380952;4pkt 4fpkt"];
1546--1563[label="0.0714286;4pkt 4fpkt"];
1546--1702[label="0.0322581;1pkt 1fpkt"];
1546--2229[label="0.0357143;1pkt 1fpkt"];
1546--2355[label="0.111111;1pkt 1fpkt"];
1546--2717[label="0.5;1pkt 1fpkt"];
1546--3647[label="0.0714286;4pkt 4fpkt"];
1546--3685[label="0.111111;1pkt 1fpkt"];
1546--3848[label="0.333333;1pkt 1fpkt"];
1546--4260[label="0.0714286;4pkt 4fpkt"];
1978--2692[label="0.958333;23pkt 23fpkt"];
1978--3835[label="0.958333;23pkt 23fpkt"];
1978--4352[label="1;24pkt 24fpkt"];
2098--2284[label="0.012987;1pkt 1fpkt"];
2098--2327[label="0.0519481;4pkt 4fpkt"];
2355--3685[label="1;9pkt 9fpkt"];
2652--3815[label="1;22pkt 22fpkt"];
2652--4336[label="1;22pkt 22fpkt"];
2692--3835[label="1;32pkt 32fpkt"];
2692--4352[label="1;32pkt 32fpkt"];
2717--3848[label="1;2pkt 2fpkt"];
3815--4336[label="1;23pkt 23fpkt"];
3835--4352[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="34.181.237.99"/>
      <filter dst_ip="168.253.137.76" dst_port="25"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_584{
style=filled;
color=gray75;
2653[label="32.72.17.46;181pkt 181fpkt", shape=pentagon, color=darkviolet];
3816[label="32.72.17.46;181pkt 181fpkt", shape=invtriangle, color=brown];
4338[label="32.72.17.46;181pkt 181fpkt", shape=invhouse, color=bisque];
stat584[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.72.17.46:1047, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1047: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2653--3816[label="1;181pkt 181fpkt"];
2653--4338[label="1;181pkt 181fpkt"];
3816--4338[label="1;181pkt 181fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="32.72.17.46" src_port="1047"/>
    </slice>
    <from sec="1057554620" usec="0"/>
    <to sec="1057554665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937622,1.98143,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_585{
style=filled;
color=gray75;
422[label="85.100.103.46s;140pkt 140fpkt", shape=rectangle, color=red];
2654[label="85.100.103.46;142pkt 142fpkt", shape=pentagon, color=darkviolet];
3817[label="85.100.103.46;143pkt 143fpkt", shape=invtriangle, color=brown];
4339[label="85.100.103.46;143pkt 143fpkt", shape=invhouse, color=bisque];
stat585[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.100.103.46:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 2044: (0.352113%)&lt;BR/&gt; 2031: (0.352113%)&lt;BR/&gt; 2030: (0.352113%)&lt;BR/&gt; 2025: (0.352113%)&gt;];
}
422--2654[label="0.992857;139pkt 139fpkt"];
422--3817[label="1;140pkt 140fpkt"];
422--4339[label="1;140pkt 140fpkt"];
2654--3817[label="1;142pkt 142fpkt"];
2654--4339[label="1;142pkt 142fpkt"];
3817--4339[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.100.103.46"/>
    </slice>
    <from sec="1057554247" usec="0"/>
    <to sec="1057554270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_586{
style=filled;
color=gray75;
2675[label="213.7.195.50;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3825[label="213.7.195.50;5pkt 5fpkt", shape=invtriangle, color=brown];
stat586[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.195.50:1863, 144.147.200.93:1070}[20%]&lt;BR/&gt;{213.7.195.50:1863, 144.147.202.102:1032}[20%]&lt;BR/&gt;{213.7.195.50:1863, 150.8.166.132:1031}[20%]&lt;BR/&gt;{213.7.195.50:1863, 150.8.250.135:1620}[20%]&lt;BR/&gt;{213.7.195.50:1863, 144.147.207.162:1046}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1070: (11.1111%)&lt;BR/&gt; 1046: (11.1111%)&lt;BR/&gt; 1032: (11.1111%)&lt;BR/&gt; 1031: (11.1111%)&gt;];
}
2675--3825[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.207.162" dst_port="1046" src_ip="213.7.195.50" src_port="1863"/>
      <filter dst_ip="150.8.250.135" dst_port="1620" src_ip="213.7.195.50" src_port="1863"/>
      <filter dst_ip="150.8.166.132" dst_port="1031" src_ip="213.7.195.50" src_port="1863"/>
      <filter dst_ip="144.147.202.102" dst_port="1032" src_ip="213.7.195.50" src_port="1863"/>
      <filter dst_ip="144.147.200.93" dst_port="1070" src_ip="213.7.195.50" src_port="1863"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_587{
style=filled;
color=gray75;
2688[label="32.32.210.53;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3834[label="32.32.210.53;4pkt 4fpkt", shape=invtriangle, color=brown];
stat587[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.32.210.53:80, 172.73.234.105:3488}[25%]&lt;BR/&gt;{32.32.210.53:80, 172.73.234.105:3489}[25%]&lt;BR/&gt;{32.32.210.53:80, 172.73.234.105:3491}[25%]&lt;BR/&gt;{32.32.210.53:80, 172.73.234.105:3492}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3492: (12.5%)&lt;BR/&gt; 3491: (12.5%)&lt;BR/&gt; 3489: (12.5%)&lt;BR/&gt; 3488: (12.5%)&gt;];
}
2688--3834[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="172.73.234.105" dst_port="3492" src_ip="32.32.210.53" src_port="80"/>
      <filter dst_ip="172.73.234.105" dst_port="3491" src_ip="32.32.210.53" src_port="80"/>
      <filter dst_ip="172.73.234.105" dst_port="3489" src_ip="32.32.210.53" src_port="80"/>
      <filter dst_ip="172.73.234.105" dst_port="3488" src_ip="32.32.210.53" src_port="80"/>
    </slice>
    <from sec="1057554048" usec="0"/>
    <to sec="1057554130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_588{
style=filled;
color=gray75;
2696[label="32.114.71.55;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3838[label="32.114.71.55;11pkt 11fpkt", shape=invtriangle, color=brown];
stat588[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.114.71.55:80, 211.80.122.89:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1211: (4.54545%)&lt;BR/&gt; 1210: (4.54545%)&lt;BR/&gt; 1209: (4.54545%)&lt;BR/&gt; 1208: (4.54545%)&gt;];
}
2696--3838[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.122.89" src_ip="32.114.71.55" src_port="80"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.76.125.55"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987512,1.97316,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
806[label="150.8.208.164;d;665pkt 665fpkt", shape=diamond, color=yellow];
1596[label="152.234.115.182;s;70pkt 70fpkt", shape=diamond, color=yellow];
1709[label="53.148.238.94;s;3pkt 3fpkt", shape=diamond, color=yellow];
2564[label="213.7.194.32;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2703[label="213.7.195.56;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3349[label="152.234.115.182;80pkt 80fpkt", shape=pentagon, color=darkviolet];
3773[label="213.7.194.32;10pkt 10fpkt", shape=invtriangle, color=brown];
3842[label="213.7.195.56;5pkt 5fpkt", shape=invtriangle, color=brown];
4127[label="152.234.115.182;79pkt 79fpkt", shape=invtriangle, color=brown];
4316[label="213.7.194.32;10pkt 10fpkt", shape=invhouse, color=bisque];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 150.8.208.164:*}[56.9209%]&lt;BR/&gt;{*:80, 150.8.208.164:*}[26.5537%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.2281%)&lt;BR/&gt; 4662: (21.7484%)&lt;BR/&gt; 1863: (2.55864%)&lt;BR/&gt; 4661: (0.959488%)&lt;BR/&gt; 4665: (0.746269%)&gt;];
}
806--821[label="0.00952381;4pkt 4fpkt"];
806--878[label="0.00471698;2pkt 2fpkt"];
806--908[label="0.0653409;23pkt 23fpkt"];
806--949[label="0.00239234;1pkt 1fpkt"];
806--966[label="0.00243309;1pkt 1fpkt"];
806--969[label="0.0023753;1pkt 1fpkt"];
806--978[label="0.00815217;3pkt 3fpkt"];
806--1081[label="0.00507614;1pkt 1fpkt"];
806--1099[label="0.00606061;2pkt 2fpkt"];
806--1124[label="0.0266667;2pkt 2fpkt"];
806--1237[label="0.00869565;1pkt 1fpkt"];
806--1333[label="0.0140845;2pkt 2fpkt"];
806--1338[label="0.03125;7pkt 7fpkt"];
806--1353[label="0.0434783;2pkt 2fpkt"];
806--1404[label="0.0375;3pkt 3fpkt"];
806--1460[label="0.0118343;2pkt 2fpkt"];
806--1464[label="0.09375;3pkt 3fpkt"];
806--1569[label="0.0105263;1pkt 1fpkt"];
806--1575[label="0.0581395;5pkt 5fpkt"];
806--1596[label="0.728571;51pkt 51fpkt"];
806--1674[label="0.00621118;1pkt 1fpkt"];
806--1686[label="0.0140845;1pkt 1fpkt"];
806--1688[label="0.0512821;2pkt 2fpkt"];
806--1709[label="1;3pkt 3fpkt"];
806--1770[label="0.0166667;1pkt 1fpkt"];
806--1779[label="0.0078125;1pkt 1fpkt"];
806--1902[label="0.0705882;12pkt 12fpkt"];
806--1910[label="0.0686567;23pkt 23fpkt"];
806--2005[label="0.00729927;1pkt 1fpkt"];
806--2014[label="0.0060241;1pkt 1fpkt"];
806--2040[label="0.0131579;5pkt 5fpkt"];
806--2087[label="0.05;3pkt 3fpkt"];
806--2114[label="0.011811;3pkt 3fpkt"];
806--2124[label="0.048951;7pkt 7fpkt"];
806--2245[label="0.0023753;1pkt 1fpkt"];
806--2257[label="0.00869565;1pkt 1fpkt"];
806--2264[label="0.0581395;5pkt 5fpkt"];
806--2305[label="0.00598802;1pkt 1fpkt"];
806--2312[label="0.0774411;23pkt 23fpkt"];
806--2321[label="0.0023753;1pkt 1fpkt"];
806--2368[label="0.0674157;12pkt 12fpkt"];
806--2434[label="0.0246914;2pkt 2fpkt"];
806--2485[label="0.0263158;1pkt 1fpkt"];
806--2503[label="0.0277778;7pkt 7fpkt"];
806--2553[label="0.0108696;1pkt 1fpkt"];
806--2564[label="0.0909091;1pkt 1fpkt"];
806--2627[label="0.031746;2pkt 2fpkt"];
806--2695[label="0.5;1pkt 1fpkt"];
806--2703[label="0.2;1pkt 1fpkt"];
806--2783[label="0.00793651;1pkt 1fpkt"];
806--2852[label="0.00925926;1pkt 1fpkt"];
806--2914[label="0.0138889;1pkt 1fpkt"];
806--3002[label="0.0408163;2pkt 2fpkt"];
806--3168[label="0.0408163;2pkt 2fpkt"];
806--3183[label="0.0127389;2pkt 2fpkt"];
806--3307[label="0.0416667;3pkt 3fpkt"];
806--3349[label="0.6375;51pkt 51fpkt"];
806--3533[label="0.0337079;3pkt 3fpkt"];
806--3598[label="0.0074813;3pkt 3fpkt"];
806--3715[label="0.0246914;2pkt 2fpkt"];
806--3738[label="0.025641;1pkt 1fpkt"];
806--3748[label="0.0277778;7pkt 7fpkt"];
806--3769[label="0.010989;1pkt 1fpkt"];
806--3772[label="0.00215517;1pkt 1fpkt"];
806--3773[label="0.1;1pkt 1fpkt"];
806--3832[label="0.00480769;1pkt 1fpkt"];
806--3837[label="0.5;1pkt 1fpkt"];
806--3842[label="0.2;1pkt 1fpkt"];
806--3930[label="0.0138889;1pkt 1fpkt"];
806--3972[label="0.0416667;2pkt 2fpkt"];
806--4053[label="0.0127389;2pkt 2fpkt"];
806--4113[label="0.0410959;3pkt 3fpkt"];
806--4127[label="0.64557;51pkt 51fpkt"];
806--4289[label="0.0246914;2pkt 2fpkt"];
806--4297[label="0.025641;1pkt 1fpkt"];
806--4302[label="0.0277778;7pkt 7fpkt"];
806--4315[label="0.00215054;1pkt 1fpkt"];
806--4316[label="0.1;1pkt 1fpkt"];
806--4350[label="0.00485437;1pkt 1fpkt"];
806--4409[label="0.0416667;2pkt 2fpkt"];
806--4444[label="0.0127389;2pkt 2fpkt"];
806--4464[label="0.0410959;3pkt 3fpkt"];
1596--2082[label="0.0142857;1pkt 1fpkt"];
1596--3349[label="1;70pkt 70fpkt"];
1596--4127[label="1;70pkt 70fpkt"];
2564--3773[label="1;10pkt 10fpkt"];
2564--4316[label="1;10pkt 10fpkt"];
2703--3842[label="1;5pkt 5fpkt"];
3349--4127[label="1;79pkt 79fpkt"];
3773--4316[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.208.164" src_port="4662"/>
      <filter dst_ip="150.8.208.164" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987512,1.97316,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_591{
style=filled;
color=gray75;
1585[label="150.9.1.1;d;96pkt 96fpkt", shape=diamond, color=yellow];
1593[label="85.50.129.18;s;89pkt 89fpkt", shape=diamond, color=yellow];
2477[label="85.50.129.18;88pkt 88fpkt", shape=pentagon, color=darkviolet];
2705[label="211.148.79.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3735[label="85.50.129.18;89pkt 89fpkt", shape=invtriangle, color=brown];
3844[label="211.148.79.57;1pkt 1fpkt", shape=invtriangle, color=brown];
4296[label="85.50.129.18;89pkt 89fpkt", shape=invhouse, color=bisque];
4354[label="211.148.79.57;2pkt 2fpkt", shape=invhouse, color=bisque];
stat591[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.50.129.18:8080, 150.9.1.1:*}[91.7526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (48.7912%)&lt;BR/&gt; 80: (1.20879%)&lt;BR/&gt; 12610: (0.549451%)&lt;BR/&gt; 12609: (0.549451%)&lt;BR/&gt; 12605: (0.549451%)&gt;];
}
1585--1593[label="1;89pkt 89fpkt"];
1585--2477[label="1;88pkt 88fpkt"];
1585--3735[label="1;89pkt 89fpkt"];
1585--4296[label="1;89pkt 89fpkt"];
1585--4354[label="0.5;1pkt 1fpkt"];
1593--2477[label="1;88pkt 88fpkt"];
1593--3735[label="1;89pkt 89fpkt"];
1593--4296[label="1;89pkt 89fpkt"];
2477--3735[label="1;88pkt 88fpkt"];
2477--4296[label="1;88pkt 88fpkt"];
2705--3844[label="1;1pkt 1fpkt"];
2705--4354[label="1;1pkt 1fpkt"];
3735--4296[label="1;89pkt 89fpkt"];
3844--4354[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.1.1" src_ip="85.50.129.18" src_port="8080"/>
    </slice>
    <from sec="1057554153" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_592{
style=filled;
color=gray75;
2722[label="196.185.129.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3851[label="196.185.129.60;2pkt 2fpkt", shape=invtriangle, color=brown];
stat592[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.185.129.60:2801, 150.8.16.108:6346}[50%]&lt;BR/&gt;{196.185.129.60:6346, 150.8.16.108:3624}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 2801: (33.3333%)&lt;BR/&gt; 3624: (16.6667%)&gt;];
}
2722--3851[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.16.108" dst_port="3624" src_ip="196.185.129.60" src_port="6346"/>
      <filter dst_ip="150.8.16.108" dst_port="6346" src_ip="196.185.129.60" src_port="2801"/>
    </slice>
    <from sec="1057554617" usec="0"/>
    <to sec="1057554894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.7.251.65"/>
    </slice>
    <from sec="1057554003" usec="0"/>
    <to sec="1057554895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_594{
style=filled;
color=gray75;
2754[label="35.222.159.66;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3864[label="35.222.159.66;7pkt 7fpkt", shape=invtriangle, color=brown];
stat594[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.222.159.66:80, 150.8.149.210:*}[57.1429%]&lt;BR/&gt;{35.222.159.66:80, 144.147.202.160:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2066: (7.14286%)&lt;BR/&gt; 2065: (7.14286%)&lt;BR/&gt; 2064: (7.14286%)&lt;BR/&gt; 2063: (7.14286%)&gt;];
}
2754--3864[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.149.210" src_ip="35.222.159.66" src_port="80"/>
      <filter dst_ip="144.147.202.160" src_ip="35.222.159.66" src_port="80"/>
    </slice>
    <from sec="1057554100" usec="0"/>
    <to sec="1057554887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_595{
style=filled;
color=gray75;
2770[label="219.151.23.69;30pkt 30fpkt", shape=pentagon, color=darkviolet];
3873[label="219.151.23.69;30pkt 30fpkt", shape=invtriangle, color=brown];
stat595[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.151.23.69:80, 150.9.128.128:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1844: (1.66667%)&lt;BR/&gt; 1843: (1.66667%)&lt;BR/&gt; 1842: (1.66667%)&lt;BR/&gt; 1841: (1.66667%)&gt;];
}
2770--3873[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.128.128" src_ip="219.151.23.69" src_port="80"/>
    </slice>
    <from sec="1057554768" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_596{
style=filled;
color=gray75;
2773[label="135.232.84.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3875[label="135.232.84.69;1pkt 1fpkt", shape=invtriangle, color=brown];
stat596[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.232.84.69:1397, 210.73.75.52:1755}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 1397: (50%)&gt;];
}
2773--3875[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.73.75.52" dst_port="1755" src_ip="135.232.84.69" src_port="1397"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.154.5.72"/>
    </slice>
    <from sec="1057554404" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987512,1.97316,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_598{
style=filled;
color=gray75;
1777[label="150.8.163.202;d;12pkt 12fpkt", shape=diamond, color=yellow];
2800[label="196.152.37.72;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3887[label="196.152.37.72;5pkt 5fpkt", shape=invtriangle, color=brown];
4371[label="196.152.37.72;6pkt 6fpkt", shape=invhouse, color=bisque];
stat598[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.152.37.72:80, 150.8.163.202:*}[50%]&lt;BR/&gt;{*:53, 150.8.163.202:1026}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.3793%)&lt;BR/&gt; 63588: (6.89655%)&lt;BR/&gt; 63587: (6.89655%)&lt;BR/&gt; 63586: (6.89655%)&lt;BR/&gt; 63585: (6.89655%)&gt;];
}
1777--2800[label="1;6pkt 6fpkt"];
1777--3887[label="1;5pkt 5fpkt"];
1777--4371[label="1;6pkt 6fpkt"];
2800--3887[label="1;5pkt 5fpkt"];
2800--4371[label="1;6pkt 6fpkt"];
3887--4371[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.163.202" src_ip="196.152.37.72" src_port="80"/>
      <filter dst_ip="150.8.163.202" dst_port="1026" src_port="53"/>
    </slice>
    <from sec="1057554009" usec="0"/>
    <to sec="1057554823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_599{
style=filled;
color=gray75;
2802[label="37.89.98.72;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3888[label="37.89.98.72;20pkt 20fpkt", shape=invtriangle, color=brown];
4372[label="37.89.98.72;20pkt 20fpkt", shape=invhouse, color=bisque];
stat599[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.89.98.72:80, 211.90.18.104:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46260: (3.65854%)&lt;BR/&gt; 46255: (2.43902%)&lt;BR/&gt; 46213: (2.43902%)&lt;BR/&gt; 46203: (2.43902%)&gt;];
}
2802--3888[label="1;1pkt 1fpkt"];
2802--4372[label="1;1pkt 1fpkt"];
3888--4372[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="211.90.18.104" src_ip="37.89.98.72" src_port="80"/>
    </slice>
    <from sec="1057554841" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_600{
style=filled;
color=gray75;
2810[label="200.170.192.73;120pkt 120fpkt", shape=pentagon, color=darkviolet];
3890[label="200.170.192.73;119pkt 119fpkt", shape=invtriangle, color=brown];
4376[label="200.170.192.73;120pkt 120fpkt", shape=invhouse, color=bisque];
stat600[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.170.192.73:1067, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1067: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2810--3890[label="1;119pkt 119fpkt"];
2810--4376[label="1;120pkt 120fpkt"];
3890--4376[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.170.192.73" src_port="1067"/>
    </slice>
    <from sec="1057554250" usec="0"/>
    <to sec="1057554270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752891,1.97431,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_601{
style=filled;
color=gray75;
1525[label="144.147.204.204;d;116pkt 116fpkt", shape=diamond, color=yellow];
1843[label="215.66.248.55;s;66pkt 66fpkt", shape=diamond, color=yellow];
2699[label="215.66.248.55;65pkt 65fpkt", shape=pentagon, color=darkviolet];
3061[label="67.175.138.125;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3626[label="32.166.128.236;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3840[label="215.66.248.55;65pkt 65fpkt", shape=invtriangle, color=brown];
stat601[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.66.248.55:80, 144.147.204.204:*}[56.8966%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8428%)&lt;BR/&gt; 1738: (0.628931%)&lt;BR/&gt; 1737: (0.628931%)&lt;BR/&gt; 1736: (0.628931%)&lt;BR/&gt; 1735: (0.628931%)&gt;];
}
1525--1843[label="1;66pkt 66fpkt"];
1525--2699[label="1;65pkt 65fpkt"];
1525--2815[label="0.0384615;2pkt 2fpkt"];
1525--2964[label="0.025641;1pkt 1fpkt"];
1525--3061[label="1;4pkt 4fpkt"];
1525--3372[label="0.00869565;1pkt 1fpkt"];
1525--3626[label="1;2pkt 2fpkt"];
1525--3840[label="1;65pkt 65fpkt"];
1525--3892[label="0.0377358;2pkt 2fpkt"];
1525--4139[label="0.00877193;1pkt 1fpkt"];
1525--4377[label="0.0377358;2pkt 2fpkt"];
1525--4478[label="0.00877193;1pkt 1fpkt"];
1843--2699[label="1;65pkt 65fpkt"];
1843--3840[label="1;65pkt 65fpkt"];
2699--3840[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.204.204" src_ip="215.66.248.55" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_603{
style=filled;
color=gray75;
2822[label="211.195.181.79;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3895[label="211.195.181.79;16pkt 16fpkt", shape=invtriangle, color=brown];
4380[label="211.195.181.79;15pkt 15fpkt", shape=invhouse, color=bisque];
stat603[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.195.181.79:4118, 144.147.202.140:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4118: (50%)&lt;BR/&gt; 1573: (3.26087%)&lt;BR/&gt; 1548: (3.26087%)&lt;BR/&gt; 1536: (3.26087%)&lt;BR/&gt; 1499: (3.26087%)&gt;];
}
2822--3895[label="1;15pkt 15fpkt"];
2822--4380[label="1;15pkt 15fpkt"];
3895--4380[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.202.140" src_ip="211.195.181.79" src_port="4118"/>
    </slice>
    <from sec="1057554014" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26314,1.92327,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_604{
style=filled;
color=gray75;
22[label="201.10.109.37s;2pkt 2fpkt", shape=rectangle, color=red];
103[label="201.10.8.22s;1pkt 1fpkt", shape=rectangle, color=red];
279[label="154.141.195.134s;1pkt 1fpkt", shape=rectangle, color=red];
802[label="150.9.187.95;d;387pkt 387fpkt", shape=diamond, color=yellow];
805[label="202.128.75.210;s;1pkt 1fpkt", shape=diamond, color=yellow];
844[label="150.9.82.220;d;417pkt 417fpkt", shape=diamond, color=yellow];
846[label="201.10.8.22;s;89pkt 89fpkt", shape=diamond, color=yellow];
901[label="150.9.2.106;d;444pkt 444fpkt", shape=diamond, color=yellow];
909[label="210.43.153.135;s;45pkt 45fpkt", shape=diamond, color=yellow];
950[label="201.10.8.118;s;57pkt 57fpkt", shape=diamond, color=yellow];
1130[label="210.49.212.103;s;163pkt 163fpkt", shape=diamond, color=yellow];
1155[label="196.58.81.144;s;54pkt 54fpkt", shape=diamond, color=yellow];
1189[label="210.49.212.102;s;184pkt 184fpkt", shape=diamond, color=yellow];
1254[label="150.9.81.41;d;91pkt 91fpkt", shape=diamond, color=yellow];
1255[label="201.10.8.206;s;83pkt 83fpkt", shape=diamond, color=yellow];
1264[label="150.9.0.32;d;110pkt 110fpkt", shape=diamond, color=yellow];
1821[label="201.10.8.179;s;26pkt 26fpkt", shape=diamond, color=yellow];
1924[label="202.128.75.210;s;1pkt 1fpkt", shape=hexagon, color=black];
1970[label="150.9.187.95;d;359pkt 359fpkt", shape=hexagon, color=black];
1971[label="201.10.8.118;s;57pkt 57fpkt", shape=hexagon, color=black];
2007[label="210.49.212.102;s;141pkt 141fpkt", shape=hexagon, color=black];
2174[label="210.49.212.103;s;162pkt 162fpkt", shape=hexagon, color=black];
2274[label="201.10.8.179;s;26pkt 26fpkt", shape=hexagon, color=black];
2505[label="201.10.8.22;88pkt 88fpkt", shape=pentagon, color=darkviolet];
2597[label="201.10.109.37;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2679[label="203.112.111.51;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2752[label="201.10.109.66;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2825[label="197.64.93.80;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3005[label="210.49.212.114;82pkt 82fpkt", shape=pentagon, color=darkviolet];
3026[label="201.10.8.118;79pkt 79fpkt", shape=pentagon, color=darkviolet];
3117[label="210.43.153.135;45pkt 45fpkt", shape=pentagon, color=darkviolet];
3137[label="201.10.8.138;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3217[label="196.58.81.150;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3472[label="32.93.52.203;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3489[label="201.10.8.206;86pkt 86fpkt", shape=pentagon, color=darkviolet];
3495[label="202.192.233.207;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3519[label="201.10.8.213;38pkt 38fpkt", shape=pentagon, color=darkviolet];
3634[label="201.10.8.238;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3665[label="197.0.174.250;136pkt 136fpkt", shape=pentagon, color=darkviolet];
3788[label="201.10.109.37;2pkt 2fpkt", shape=invtriangle, color=brown];
3827[label="203.112.111.51;8pkt 8fpkt", shape=invtriangle, color=brown];
3896[label="197.64.93.80;15pkt 15fpkt", shape=invtriangle, color=brown];
4208[label="201.10.8.213;38pkt 38fpkt", shape=invtriangle, color=brown];
4347[label="203.112.111.51;8pkt 8fpkt", shape=invhouse, color=bisque];
4381[label="197.64.93.80;15pkt 15fpkt", shape=invhouse, color=bisque];
stat604[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 150.9.2.106:*}[25.0989%]&lt;BR/&gt;{*:*, 150.9.82.220:*}[23.7422%]&lt;BR/&gt;{*:80, 150.9.187.95:*}[21.5941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.2297%)&lt;BR/&gt; 81: (4.77681%)&lt;BR/&gt; 82: (0.598802%)&lt;BR/&gt; 33436: (0.108873%)&lt;BR/&gt; 20002: (0.108873%)&gt;];
}
22--844[label="1;2pkt 2fpkt"];
22--2597[label="1;2pkt 2fpkt"];
22--3788[label="1;2pkt 2fpkt"];
103--802[label="1;1pkt 1fpkt"];
103--846[label="1;1pkt 1fpkt"];
103--1970[label="1;1pkt 1fpkt"];
103--2505[label="1;1pkt 1fpkt"];
279--901[label="1;1pkt 1fpkt"];
802--846[label="1;89pkt 89fpkt"];
802--950[label="0.333333;19pkt 19fpkt"];
802--1009[label="0.0194175;2pkt 2fpkt"];
802--1099[label="0.0030303;1pkt 1fpkt"];
802--1189[label="0.190217;35pkt 35fpkt"];
802--1230[label="0.0580645;9pkt 9fpkt"];
802--1459[label="0.0285714;4pkt 4fpkt"];
802--1878[label="0.00719424;2pkt 2fpkt"];
802--1970[label="1;359pkt 359fpkt"];
802--1971[label="0.333333;19pkt 19fpkt"];
802--1995[label="0.021875;7pkt 7fpkt"];
802--2007[label="0.234043;33pkt 33fpkt"];
802--2253[label="0.0580645;9pkt 9fpkt"];
802--2256[label="0.0194175;2pkt 2fpkt"];
802--2319[label="0.021875;7pkt 7fpkt"];
802--2505[label="1;88pkt 88fpkt"];
802--3005[label="0.219512;18pkt 18fpkt"];
802--3026[label="0.240506;19pkt 19fpkt"];
802--3137[label="0.72;18pkt 18fpkt"];
802--3363[label="0.047619;1pkt 1fpkt"];
802--3510[label="0.193548;6pkt 6fpkt"];
802--3519[label="0.0263158;1pkt 1fpkt"];
802--3660[label="0.00719424;2pkt 2fpkt"];
802--4208[label="0.0263158;1pkt 1fpkt"];
805--901[label="1;1pkt 1fpkt"];
805--1924[label="1;1pkt 1fpkt"];
844--1130[label="0.840491;137pkt 137fpkt"];
844--1189[label="0.657609;121pkt 121fpkt"];
844--2007[label="0.574468;81pkt 81fpkt"];
844--2174[label="0.845679;137pkt 137fpkt"];
844--2597[label="1;2pkt 2fpkt"];
844--2752[label="0.785714;11pkt 11fpkt"];
844--2825[label="1;15pkt 15fpkt"];
844--3005[label="0.695122;57pkt 57fpkt"];
844--3788[label="1;2pkt 2fpkt"];
844--3896[label="1;15pkt 15fpkt"];
844--4381[label="1;15pkt 15fpkt"];
846--1970[label="1;89pkt 89fpkt"];
846--2505[label="1;88pkt 88fpkt"];
901--909[label="0.733333;33pkt 33fpkt"];
901--949[label="0.00239234;1pkt 1fpkt"];
901--969[label="0.0023753;1pkt 1fpkt"];
901--984[label="0.00840336;2pkt 2fpkt"];
901--1039[label="0.414634;17pkt 17fpkt"];
901--1099[label="0.0030303;1pkt 1fpkt"];
901--1103[label="0.010989;2pkt 2fpkt"];
901--1155[label="1;54pkt 54fpkt"];
901--1189[label="0.00543478;1pkt 1fpkt"];
901--1230[label="0.0193548;3pkt 3fpkt"];
901--1255[label="0.0843373;7pkt 7fpkt"];
901--1453[label="0.0106952;2pkt 2fpkt"];
901--1685[label="0.0322581;3pkt 3fpkt"];
901--1755[label="0.0149254;2pkt 2fpkt"];
901--1821[label="0.0384615;1pkt 1fpkt"];
901--1878[label="0.00719424;2pkt 2fpkt"];
901--1924[label="1;1pkt 1fpkt"];
901--1987[label="0.414634;17pkt 17fpkt"];
901--2129[label="0.00877193;1pkt 1fpkt"];
901--2227[label="0.0322581;3pkt 3fpkt"];
901--2245[label="0.0023753;1pkt 1fpkt"];
901--2253[label="0.0193548;3pkt 3fpkt"];
901--2274[label="0.0384615;1pkt 1fpkt"];
901--2321[label="0.0023753;1pkt 1fpkt"];
901--2561[label="0.0232558;1pkt 1fpkt"];
901--2581[label="0.097561;4pkt 4fpkt"];
901--2679[label="0.375;3pkt 3fpkt"];
901--2784[label="0.4;16pkt 16fpkt"];
901--2789[label="0.15;6pkt 6fpkt"];
901--3005[label="0.0243902;2pkt 2fpkt"];
901--3026[label="0.0759494;6pkt 6fpkt"];
901--3117[label="0.733333;33pkt 33fpkt"];
901--3137[label="0.28;7pkt 7fpkt"];
901--3195[label="0.166667;4pkt 4fpkt"];
901--3217[label="1;7pkt 7fpkt"];
901--3323[label="0.015625;1pkt 1fpkt"];
901--3335[label="0.0192308;1pkt 1fpkt"];
901--3458[label="0.0909091;1pkt 1fpkt"];
901--3472[label="0.454545;15pkt 15fpkt"];
901--3489[label="0.0813953;7pkt 7fpkt"];
901--3495[label="0.75;3pkt 3fpkt"];
901--3516[label="0.030303;3pkt 3fpkt"];
901--3519[label="0.0263158;1pkt 1fpkt"];
901--3577[label="0.0681818;3pkt 3fpkt"];
901--3606[label="0.037037;2pkt 2fpkt"];
901--3630[label="0.037037;2pkt 2fpkt"];
901--3660[label="0.00719424;2pkt 2fpkt"];
901--3661[label="0.015873;1pkt 1fpkt"];
901--3665[label="0.0367647;5pkt 5fpkt"];
901--3772[label="0.00225225;1pkt 1fpkt"];
901--3827[label="0.375;3pkt 3fpkt"];
901--4119[label="0.0153846;1pkt 1fpkt"];
901--4207[label="0.0306122;3pkt 3fpkt"];
901--4208[label="0.0263158;1pkt 1fpkt"];
901--4231[label="0.0465116;2pkt 2fpkt"];
901--4245[label="0.0188679;1pkt 1fpkt"];
901--4253[label="0.0377358;2pkt 2fpkt"];
901--4267[label="0.015873;1pkt 1fpkt"];
901--4315[label="0.00225225;1pkt 1fpkt"];
901--4347[label="0.375;3pkt 3fpkt"];
901--4517[label="0.0681818;3pkt 3fpkt"];
901--4533[label="0.015873;1pkt 1fpkt"];
909--3117[label="1;45pkt 45fpkt"];
950--1254[label="0.526316;30pkt 30fpkt"];
950--1264[label="0.0701754;4pkt 4fpkt"];
950--1970[label="0.333333;19pkt 19fpkt"];
950--1971[label="1;57pkt 57fpkt"];
950--3026[label="1;57pkt 57fpkt"];
1130--2174[label="1;162pkt 162fpkt"];
1189--1307[label="0.280702;16pkt 16fpkt"];
1189--1970[label="0.190217;35pkt 35fpkt"];
1189--2007[label="1;141pkt 141fpkt"];
1254--1255[label="0.180723;15pkt 15fpkt"];
1254--1971[label="0.526316;30pkt 30fpkt"];
1254--3026[label="0.379747;30pkt 30fpkt"];
1254--3489[label="0.174419;15pkt 15fpkt"];
1254--3519[label="0.210526;8pkt 8fpkt"];
1254--4208[label="0.210526;8pkt 8fpkt"];
1255--1264[label="0.39759;33pkt 33fpkt"];
1255--3489[label="0.987952;82pkt 82fpkt"];
1264--1821[label="0.115385;3pkt 3fpkt"];
1264--1971[label="0.0701754;4pkt 4fpkt"];
1264--2274[label="0.115385;3pkt 3fpkt"];
1264--3026[label="0.0506329;4pkt 4fpkt"];
1264--3489[label="0.383721;33pkt 33fpkt"];
1264--3519[label="0.263158;10pkt 10fpkt"];
1264--3634[label="1;25pkt 25fpkt"];
1264--4208[label="0.263158;10pkt 10fpkt"];
1821--2274[label="1;26pkt 26fpkt"];
1970--1971[label="0.333333;19pkt 19fpkt"];
1970--1995[label="0.015625;5pkt 5fpkt"];
1970--2007[label="0.234043;33pkt 33fpkt"];
1970--2253[label="0.0322581;5pkt 5fpkt"];
1970--2256[label="0.0194175;2pkt 2fpkt"];
1970--2319[label="0.015625;5pkt 5fpkt"];
1970--2505[label="1;88pkt 88fpkt"];
1970--3005[label="0.219512;18pkt 18fpkt"];
1970--3026[label="0.240506;19pkt 19fpkt"];
1970--3137[label="0.72;18pkt 18fpkt"];
1970--3363[label="0.047619;1pkt 1fpkt"];
1970--3510[label="0.193548;6pkt 6fpkt"];
1970--3519[label="0.0263158;1pkt 1fpkt"];
1970--3660[label="0.00719424;2pkt 2fpkt"];
1970--4208[label="0.0263158;1pkt 1fpkt"];
1971--3026[label="1;57pkt 57fpkt"];
2597--3788[label="1;2pkt 2fpkt"];
2679--3827[label="1;8pkt 8fpkt"];
2679--4347[label="1;8pkt 8fpkt"];
2825--3896[label="1;15pkt 15fpkt"];
2825--4381[label="1;15pkt 15fpkt"];
3519--4208[label="1;38pkt 38fpkt"];
3827--4347[label="1;8pkt 8fpkt"];
3896--4381[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.82.220"/>
      <filter dst_ip="150.9.2.106" src_port="80"/>
      <filter dst_ip="150.9.187.95" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987512,1.97316,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_605{
style=filled;
color=gray75;
1024[label="172.73.1.215;d;83pkt 83fpkt", shape=diamond, color=yellow];
1247[label="219.195.81.182;s;25pkt 25fpkt", shape=diamond, color=yellow];
2842[label="219.195.80.82;47pkt 47fpkt", shape=pentagon, color=darkviolet];
3466[label="219.18.36.202;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3905[label="219.195.80.82;47pkt 47fpkt", shape=invtriangle, color=brown];
4385[label="219.195.80.82;48pkt 48fpkt", shape=invhouse, color=bisque];
stat605[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.195.80.82:80, 172.73.1.215:*}[48.9796%]&lt;BR/&gt;{219.195.81.182:80, 172.73.1.215:*}[25.5102%]&lt;BR/&gt;{219.18.36.202:80, 172.73.1.215:*}[24.4898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8168%)&lt;BR/&gt; 34246: (0.732601%)&lt;BR/&gt; 34244: (0.732601%)&lt;BR/&gt; 34243: (0.732601%)&lt;BR/&gt; 34242: (0.732601%)&gt;];
}
1024--1247[label="0.72;18pkt 18fpkt"];
1024--2842[label="1;47pkt 47fpkt"];
1024--3466[label="0.652174;15pkt 15fpkt"];
1024--3905[label="1;47pkt 47fpkt"];
1024--4385[label="1;48pkt 48fpkt"];
2842--3905[label="1;47pkt 47fpkt"];
2842--4385[label="1;47pkt 47fpkt"];
3905--4385[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="172.73.1.215" src_ip="219.195.80.82" src_port="80"/>
      <filter dst_ip="172.73.1.215" src_ip="219.195.81.182" src_port="80"/>
      <filter dst_ip="172.73.1.215" src_ip="219.18.36.202" src_port="80"/>
    </slice>
    <from sec="1057554042" usec="0"/>
    <to sec="1057554742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_606{
style=filled;
color=gray75;
2849[label="129.65.59.83;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3907[label="129.65.59.83;2pkt 2fpkt", shape=invtriangle, color=brown];
stat606[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.65.59.83:80, 150.8.18.64:3717}[50%]&lt;BR/&gt;{129.65.59.83:80, 150.8.18.64:3718}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3718: (25%)&lt;BR/&gt; 3717: (25%)&gt;];
}
2849--3907[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.18.64" dst_port="3718" src_ip="129.65.59.83" src_port="80"/>
      <filter dst_ip="150.8.18.64" dst_port="3717" src_ip="129.65.59.83" src_port="80"/>
    </slice>
    <from sec="1057554204" usec="0"/>
    <to sec="1057554289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="104.29.70.84"/>
    </slice>
    <from sec="1057554702" usec="0"/>
    <to sec="1057554810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987512,1.97316,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_608{
style=filled;
color=gray75;
1261[label="144.34.35.216;d;38pkt 38fpkt", shape=diamond, color=yellow];
2859[label="37.73.112.84;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3912[label="37.73.112.84;14pkt 14fpkt", shape=invtriangle, color=brown];
4387[label="37.73.112.84;14pkt 14fpkt", shape=invhouse, color=bisque];
stat608[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 144.34.35.216:*}[84.4444%]&lt;BR/&gt;{37.73.112.84:80, *:*}[28.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.125%)&lt;BR/&gt; 0: (3.75%)&lt;BR/&gt; 50025: (2.5%)&lt;BR/&gt; 50024: (2.5%)&lt;BR/&gt; 50023: (2.5%)&gt;];
}
1261--1440[label="0.105263;4pkt 4fpkt"];
1261--2859[label="0.5;7pkt 7fpkt"];
1261--3912[label="0.5;7pkt 7fpkt"];
1261--4387[label="0.5;7pkt 7fpkt"];
2859--3912[label="1;14pkt 14fpkt"];
2859--4387[label="1;14pkt 14fpkt"];
3912--4387[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="37.73.112.84" src_port="80"/>
      <filter dst_ip="144.34.35.216" src_port="80"/>
    </slice>
    <from sec="1057554108" usec="0"/>
    <to sec="1057554783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.980601,2.03523,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_609{
style=filled;
color=gray75;
677[label="135.232.145.176;d;16pkt 16fpkt", shape=diamond, color=yellow];
869[label="32.197.101.158;s;65pkt 65fpkt", shape=diamond, color=yellow];
1492[label="150.9.107.32;d;10pkt 10fpkt", shape=diamond, color=yellow];
1864[label="135.232.145.176;d;6pkt 6fpkt", shape=hexagon, color=black];
2201[label="32.197.101.158;s;60pkt 60fpkt", shape=hexagon, color=black];
stat609[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.197.101.158:443, 135.232.145.176:*}[24.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 32908: (1.27389%)&lt;BR/&gt; 32907: (1.27389%)&lt;BR/&gt; 32906: (1.27389%)&lt;BR/&gt; 32905: (1.27389%)&gt;];
}
677--869[label="1;16pkt 16fpkt"];
677--1864[label="1;6pkt 6fpkt"];
677--2201[label="1;16pkt 16fpkt"];
869--1492[label="1;10pkt 10fpkt"];
869--1864[label="1;6pkt 6fpkt"];
869--2201[label="1;60pkt 60fpkt"];
1492--2201[label="1;10pkt 10fpkt"];
1864--2201[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.145.176" src_ip="32.197.101.158" src_port="443"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_610{
style=filled;
color=gray75;
2869[label="171.77.150.86;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3916[label="171.77.150.86;15pkt 15fpkt", shape=invtriangle, color=brown];
stat610[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.77.150.86:80, 211.80.112.232:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2169: (3.33333%)&lt;BR/&gt; 2167: (3.33333%)&lt;BR/&gt; 2161: (3.33333%)&lt;BR/&gt; 2153: (3.33333%)&gt;];
}
2869--3916[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.112.232" src_ip="171.77.150.86" src_port="80"/>
    </slice>
    <from sec="1057554158" usec="0"/>
    <to sec="1057554645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
2870[label="211.148.58.87;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3917[label="211.148.58.87;4pkt 4fpkt", shape=invtriangle, color=brown];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.148.58.87:3549, 150.9.16.50:80}[25%]&lt;BR/&gt;{211.148.58.87:3551, 150.9.16.50:80}[25%]&lt;BR/&gt;{211.148.58.87:3552, 150.9.16.50:80}[25%]&lt;BR/&gt;{211.148.58.87:3553, 150.9.16.50:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3553: (14.2857%)&lt;BR/&gt; 3552: (14.2857%)&lt;BR/&gt; 3551: (14.2857%)&lt;BR/&gt; 3549: (7.14286%)&gt;];
}
2870--3917[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.16.50" dst_port="80" src_ip="211.148.58.87" src_port="3553"/>
      <filter dst_ip="150.9.16.50" dst_port="80" src_ip="211.148.58.87" src_port="3552"/>
      <filter dst_ip="150.9.16.50" dst_port="80" src_ip="211.148.58.87" src_port="3551"/>
      <filter dst_ip="150.9.16.50" dst_port="80" src_ip="211.148.58.87" src_port="3549"/>
    </slice>
    <from sec="1057554241" usec="0"/>
    <to sec="1057554267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
2875[label="32.186.228.87;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3918[label="32.186.228.87;29pkt 29fpkt", shape=invtriangle, color=brown];
4391[label="32.186.228.87;29pkt 29fpkt", shape=invhouse, color=bisque];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.186.228.87:80, 150.8.18.160:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1239: (1.72414%)&lt;BR/&gt; 1238: (1.72414%)&lt;BR/&gt; 1237: (1.72414%)&lt;BR/&gt; 1236: (1.72414%)&gt;];
}
2875--3918[label="1;29pkt 29fpkt"];
2875--4391[label="1;29pkt 29fpkt"];
3918--4391[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.18.160" src_ip="32.186.228.87" src_port="80"/>
    </slice>
    <from sec="1057554134" usec="0"/>
    <to sec="1057554143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.192.9.88"/>
    </slice>
    <from sec="1057554761" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_614{
style=filled;
color=gray75;
2882[label="85.158.42.89;124pkt 124fpkt", shape=pentagon, color=darkviolet];
3920[label="85.158.42.89;124pkt 124fpkt", shape=invtriangle, color=brown];
stat614[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.158.42.89:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2882--3920[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.158.42.89" src_port="1030"/>
    </slice>
    <from sec="1057554285" usec="0"/>
    <to sec="1057554306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26314,1.92327,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_616{
style=filled;
color=gray75;
122[label="85.103.23.7s;1pkt 1fpkt", shape=rectangle, color=red];
123[label="35.72.58.7s;2pkt 2fpkt", shape=rectangle, color=red];
883[label="150.9.112.143;d;220pkt 220fpkt", shape=diamond, color=yellow];
1065[label="202.118.67.7;s;63pkt 63fpkt", shape=diamond, color=yellow];
1153[label="172.73.93.234;d;18pkt 18fpkt", shape=diamond, color=yellow];
1351[label="210.89.18.4;d;20pkt 20fpkt", shape=diamond, color=yellow];
1362[label="218.80.94.43;s;1pkt 1fpkt", shape=diamond, color=yellow];
1549[label="150.9.102.24;d;45pkt 45fpkt", shape=diamond, color=yellow];
1579[label="197.178.102.30;s;76pkt 76fpkt", shape=diamond, color=yellow];
1675[label="215.45.126.52;s;79pkt 79fpkt", shape=diamond, color=yellow];
2036[label="202.118.67.7;s;54pkt 54fpkt", shape=hexagon, color=black];
2165[label="150.9.102.24;d;45pkt 45fpkt", shape=hexagon, color=black];
2176[label="218.80.94.43;s;1pkt 1fpkt", shape=hexagon, color=black];
2401[label="202.118.67.7;68pkt 68fpkt", shape=pentagon, color=darkviolet];
2445[label="34.70.235.13;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2687[label="202.5.4.53;37pkt 37fpkt", shape=pentagon, color=darkviolet];
2892[label="192.197.148.91;54pkt 54fpkt", shape=pentagon, color=darkviolet];
3721[label="34.70.235.13;30pkt 30fpkt", shape=invtriangle, color=brown];
3833[label="202.5.4.53;38pkt 38fpkt", shape=invtriangle, color=brown];
3924[label="192.197.148.91;54pkt 54fpkt", shape=invtriangle, color=brown];
4292[label="34.70.235.13;30pkt 30fpkt", shape=invhouse, color=bisque];
4351[label="202.5.4.53;38pkt 38fpkt", shape=invhouse, color=bisque];
stat616[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 150.9.112.143:*}[39.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.3307%)&lt;BR/&gt; 53: (5.87649%)&lt;BR/&gt; 443: (1.29482%)&lt;BR/&gt; 51644: (0.448207%)&lt;BR/&gt; 2689: (0.348606%)&gt;];
}
122--883[label="1;1pkt 1fpkt"];
122--1065[label="1;1pkt 1fpkt"];
122--2036[label="1;1pkt 1fpkt"];
122--2401[label="1;1pkt 1fpkt"];
123--1549[label="1;2pkt 2fpkt"];
123--2165[label="1;2pkt 2fpkt"];
883--895[label="0.00909091;2pkt 2fpkt"];
883--969[label="0.00454545;1pkt 1fpkt"];
883--1065[label="0.253968;16pkt 16fpkt"];
883--1099[label="0.00454545;1pkt 1fpkt"];
883--1103[label="0.0274725;5pkt 5fpkt"];
883--1163[label="0.0181818;4pkt 4fpkt"];
883--1166[label="0.00454545;1pkt 1fpkt"];
883--1215[label="0.0465116;2pkt 2fpkt"];
883--1230[label="0.0451613;7pkt 7fpkt"];
883--1447[label="0.04;3pkt 3fpkt"];
883--1450[label="0.0412371;4pkt 4fpkt"];
883--1459[label="0.0142857;2pkt 2fpkt"];
883--1464[label="0.03125;1pkt 1fpkt"];
883--1666[label="0.03125;2pkt 2fpkt"];
883--1675[label="0.202532;16pkt 16fpkt"];
883--1682[label="0.00793651;1pkt 1fpkt"];
883--1691[label="0.0754717;4pkt 4fpkt"];
883--2036[label="0.259259;14pkt 14fpkt"];
883--2127[label="0.0412371;4pkt 4fpkt"];
883--2225[label="0.00793651;1pkt 1fpkt"];
883--2237[label="0.0181818;4pkt 4fpkt"];
883--2245[label="0.00454545;1pkt 1fpkt"];
883--2253[label="0.0451613;7pkt 7fpkt"];
883--2321[label="0.00454545;1pkt 1fpkt"];
883--2358[label="0.0714286;1pkt 1fpkt"];
883--2401[label="0.235294;16pkt 16fpkt"];
883--2465[label="0.108108;4pkt 4fpkt"];
883--2830[label="0.0714286;4pkt 4fpkt"];
883--2892[label="0.0740741;4pkt 4fpkt"];
883--2900[label="0.0769231;2pkt 2fpkt"];
883--3307[label="0.0416667;3pkt 3fpkt"];
883--3591[label="0.0181818;4pkt 4fpkt"];
883--3658[label="0.03125;2pkt 2fpkt"];
883--3772[label="0.00454545;1pkt 1fpkt"];
883--3900[label="0.0714286;4pkt 4fpkt"];
883--3924[label="0.0740741;4pkt 4fpkt"];
883--4113[label="0.0410959;3pkt 3fpkt"];
883--4315[label="0.00454545;1pkt 1fpkt"];
883--4464[label="0.0410959;3pkt 3fpkt"];
1065--1153[label="0.888889;16pkt 16fpkt"];
1065--1351[label="0.35;7pkt 7fpkt"];
1065--1363[label="0.0689655;2pkt 2fpkt"];
1065--2036[label="0.981481;53pkt 53fpkt"];
1065--2401[label="1;63pkt 63fpkt"];
1153--2036[label="0.888889;16pkt 16fpkt"];
1153--2401[label="0.888889;16pkt 16fpkt"];
1351--1362[label="1;1pkt 1fpkt"];
1351--1526[label="0.05;1pkt 1fpkt"];
1351--1579[label="0.15;3pkt 3fpkt"];
1351--2036[label="0.35;7pkt 7fpkt"];
1351--2163[label="0.05;1pkt 1fpkt"];
1351--2176[label="1;1pkt 1fpkt"];
1351--2401[label="0.35;7pkt 7fpkt"];
1351--2491[label="0.05;1pkt 1fpkt"];
1351--2687[label="0.05;1pkt 1fpkt"];
1351--3226[label="0.05;1pkt 1fpkt"];
1351--3427[label="0.05;1pkt 1fpkt"];
1351--3615[label="0.05;1pkt 1fpkt"];
1351--3740[label="0.05;1pkt 1fpkt"];
1351--3833[label="0.05;1pkt 1fpkt"];
1351--4351[label="0.05;1pkt 1fpkt"];
1362--2176[label="1;1pkt 1fpkt"];
1549--2165[label="1;45pkt 45fpkt"];
1549--2445[label="1;30pkt 30fpkt"];
1549--2892[label="0.111111;5pkt 5fpkt"];
1549--3721[label="1;30pkt 30fpkt"];
1549--3924[label="0.111111;5pkt 5fpkt"];
1549--4292[label="1;30pkt 30fpkt"];
1579--2041[label="0.0131579;1pkt 1fpkt"];
2036--2401[label="1;54pkt 54fpkt"];
2165--2445[label="1;30pkt 30fpkt"];
2165--2892[label="0.111111;5pkt 5fpkt"];
2165--3721[label="1;30pkt 30fpkt"];
2165--3924[label="0.111111;5pkt 5fpkt"];
2165--4292[label="1;30pkt 30fpkt"];
2445--3721[label="1;30pkt 30fpkt"];
2445--4292[label="1;30pkt 30fpkt"];
2687--3833[label="1;37pkt 37fpkt"];
2687--4351[label="1;37pkt 37fpkt"];
2892--3924[label="1;54pkt 54fpkt"];
3721--4292[label="1;30pkt 30fpkt"];
3833--4351[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.112.143" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.202.177.99"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_618{
style=filled;
color=gray75;
2934[label="201.150.8.100;124pkt 124fpkt", shape=pentagon, color=darkviolet];
3935[label="201.150.8.100;124pkt 124fpkt", shape=invtriangle, color=brown];
stat618[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.150.8.100:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 51008: (0.403226%)&lt;BR/&gt; 50971: (0.403226%)&lt;BR/&gt; 50968: (0.403226%)&lt;BR/&gt; 50964: (0.403226%)&gt;];
}
2934--3935[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.150.8.100"/>
    </slice>
    <from sec="1057554749" usec="0"/>
    <to sec="1057554776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
2949[label="34.91.122.103;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3939[label="34.91.122.103;30pkt 30fpkt", shape=invtriangle, color=brown];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.91.122.103:80, 150.9.128.128:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1729: (1.69492%)&lt;BR/&gt; 1728: (1.69492%)&lt;BR/&gt; 1727: (1.69492%)&lt;BR/&gt; 1726: (1.69492%)&gt;];
}
2949--3939[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.128.128" src_ip="34.91.122.103" src_port="80"/>
    </slice>
    <from sec="1057554129" usec="0"/>
    <to sec="1057554397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.7.198.105"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_621{
style=filled;
color=gray75;
2962[label="32.214.90.106;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3947[label="32.214.90.106;2pkt 2fpkt", shape=invtriangle, color=brown];
stat621[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.214.90.106:80, 168.253.117.80:2903}[50%]&lt;BR/&gt;{32.214.90.106:80, 168.253.117.80:2910}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2910: (25%)&lt;BR/&gt; 2903: (25%)&gt;];
}
2962--3947[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.253.117.80" dst_port="2910" src_ip="32.214.90.106" src_port="80"/>
      <filter dst_ip="168.253.117.80" dst_port="2903" src_ip="32.214.90.106" src_port="80"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_622{
style=filled;
color=gray75;
2971[label="33.100.137.108;110pkt 110fpkt", shape=pentagon, color=darkviolet];
3952[label="33.100.137.108;111pkt 111fpkt", shape=invtriangle, color=brown];
stat622[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.100.137.108:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2971--3952[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="33.100.137.108" src_port="1025"/>
    </slice>
    <from sec="1057554326" usec="0"/>
    <to sec="1057554343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.752891,1.97431,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_623{
style=filled;
color=gray75;
1716[label="150.9.106.13;d;74pkt 74fpkt", shape=diamond, color=yellow];
2657[label="203.112.46.47;26pkt 26fpkt", shape=pentagon, color=darkviolet];
2674[label="192.0.189.50;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3818[label="203.112.46.47;25pkt 25fpkt", shape=invtriangle, color=brown];
stat623[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.112.46.47:80, 150.9.106.13:*}[34.2105%]&lt;BR/&gt;{193.178.85.36:80, 150.9.106.13:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1433: (1.16279%)&lt;BR/&gt; 1431: (1.16279%)&lt;BR/&gt; 1429: (1.16279%)&lt;BR/&gt; 1427: (1.16279%)&gt;];
}
1716--2657[label="1;26pkt 26fpkt"];
1716--2674[label="0.5;2pkt 2fpkt"];
1716--3818[label="1;25pkt 25fpkt"];
1716--4278[label="0.0135135;1pkt 1fpkt"];
2657--3818[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.106.13" src_ip="203.112.46.47" src_port="80"/>
      <filter dst_ip="150.9.106.13" src_ip="193.178.85.36" src_port="80"/>
    </slice>
    <from sec="1057554317" usec="0"/>
    <to sec="1057554823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_624{
style=filled;
color=gray75;
2978[label="219.74.56.109;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3957[label="219.74.56.109;4pkt 4fpkt", shape=invtriangle, color=brown];
stat624[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.74.56.109:80, 150.8.56.113:1343}[25%]&lt;BR/&gt;{219.74.56.109:80, 150.8.56.113:1344}[25%]&lt;BR/&gt;{219.74.56.109:80, 150.8.56.113:1345}[25%]&lt;BR/&gt;{219.74.56.109:80, 150.8.56.113:1346}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1346: (14.2857%)&lt;BR/&gt; 1345: (14.2857%)&lt;BR/&gt; 1344: (14.2857%)&lt;BR/&gt; 1343: (7.14286%)&gt;];
}
2978--3957[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.56.113" dst_port="1346" src_ip="219.74.56.109" src_port="80"/>
      <filter dst_ip="150.8.56.113" dst_port="1345" src_ip="219.74.56.109" src_port="80"/>
      <filter dst_ip="150.8.56.113" dst_port="1344" src_ip="219.74.56.109" src_port="80"/>
      <filter dst_ip="150.8.56.113" dst_port="1343" src_ip="219.74.56.109" src_port="80"/>
    </slice>
    <from sec="1057554774" usec="0"/>
    <to sec="1057554811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="104.13.69.109"/>
    </slice>
    <from sec="1057554783" usec="0"/>
    <to sec="1057554886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_626{
style=filled;
color=gray75;
2990[label="36.51.172.111;121pkt 121fpkt", shape=pentagon, color=darkviolet];
3963[label="36.51.172.111;121pkt 121fpkt", shape=invtriangle, color=brown];
stat626[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.51.172.111:1034, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2990--3963[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.51.172.111" src_port="1034"/>
    </slice>
    <from sec="1057554136" usec="0"/>
    <to sec="1057554159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_627{
style=filled;
color=gray75;
2997[label="135.232.37.113;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3969[label="135.232.37.113;24pkt 24fpkt", shape=invtriangle, color=brown];
stat627[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.232.37.113:*, 201.159.190.129:80}[84%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2404: (2.04082%)&lt;BR/&gt; 2399: (2.04082%)&lt;BR/&gt; 2398: (2.04082%)&lt;BR/&gt; 2397: (2.04082%)&gt;];
}
2997--3969[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="201.159.190.129" dst_port="80" src_ip="135.232.37.113"/>
    </slice>
    <from sec="1057554546" usec="0"/>
    <to sec="1057554672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.192.1.115"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.205.37.116"/>
    </slice>
    <from sec="1057554235" usec="0"/>
    <to sec="1057554247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_630{
style=filled;
color=gray75;
3012[label="213.7.73.116;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3978[label="213.7.73.116;1pkt 1fpkt", shape=invtriangle, color=brown];
stat630[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.73.116:80, 211.80.129.113:1260}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1260: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3012--3978[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.129.113" dst_port="1260" src_ip="213.7.73.116" src_port="80"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
3013[label="134.30.73.116;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3979[label="134.30.73.116;1pkt 1fpkt", shape=invtriangle, color=brown];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.30.73.116:80, 150.9.69.128:49986}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49986: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3013--3979[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.69.128" dst_port="49986" src_ip="134.30.73.116" src_port="80"/>
    </slice>
    <from sec="1057554060" usec="0"/>
    <to sec="1057554141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_632{
style=filled;
color=gray75;
3034[label="210.250.74.119;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3990[label="210.250.74.119;3pkt 3fpkt", shape=invtriangle, color=brown];
stat632[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.250.74.119:80, 172.73.235.9:1054}[33.3333%]&lt;BR/&gt;{210.250.74.119:80, 172.73.235.9:1055}[33.3333%]&lt;BR/&gt;{210.250.74.119:80, 172.73.235.9:1056}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1056: (20%)&lt;BR/&gt; 1055: (20%)&lt;BR/&gt; 1054: (10%)&gt;];
}
3034--3990[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.73.235.9" dst_port="1056" src_ip="210.250.74.119" src_port="80"/>
      <filter dst_ip="172.73.235.9" dst_port="1055" src_ip="210.250.74.119" src_port="80"/>
      <filter dst_ip="172.73.235.9" dst_port="1054" src_ip="210.250.74.119" src_port="80"/>
    </slice>
    <from sec="1057554069" usec="0"/>
    <to sec="1057554106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_633{
style=filled;
color=gray75;
3038[label="205.177.229.119;222pkt 222fpkt", shape=pentagon, color=darkviolet];
3993[label="205.177.229.119;222pkt 222fpkt", shape=invtriangle, color=brown];
4419[label="205.177.229.119;222pkt 222fpkt", shape=invhouse, color=bisque];
stat633[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.177.229.119:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 50964: (0.225225%)&lt;BR/&gt; 50961: (0.225225%)&lt;BR/&gt; 50958: (0.225225%)&lt;BR/&gt; 50954: (0.225225%)&gt;];
}
3038--3993[label="1;222pkt 222fpkt"];
3038--4419[label="1;222pkt 222fpkt"];
3993--4419[label="1;222pkt 222fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.177.229.119"/>
    </slice>
    <from sec="1057554758" usec="0"/>
    <to sec="1057554795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_634{
style=filled;
color=gray75;
3043[label="213.7.195.120;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3997[label="213.7.195.120;7pkt 7fpkt", shape=invtriangle, color=brown];
4422[label="213.7.195.120;7pkt 7fpkt", shape=invhouse, color=bisque];
stat634[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.195.120:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3126: (7.14286%)&lt;BR/&gt; 3044: (7.14286%)&lt;BR/&gt; 3014: (7.14286%)&lt;BR/&gt; 1130: (7.14286%)&gt;];
}
3043--3997[label="1;7pkt 7fpkt"];
3043--4422[label="1;7pkt 7fpkt"];
3997--4422[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="213.7.195.120" src_port="1863"/>
    </slice>
    <from sec="1057554008" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.05988,1.93631,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_635{
style=filled;
color=gray75;
93[label="197.44.109.242s;2pkt 2fpkt", shape=rectangle, color=red];
1117[label="150.8.32.138;d;173pkt 173fpkt", shape=diamond, color=yellow];
1583[label="196.242.172.159;s;34pkt 34fpkt", shape=diamond, color=yellow];
1693[label="135.232.228.196;d;56pkt 56fpkt", shape=diamond, color=yellow];
2569[label="211.188.46.33;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2576[label="197.44.100.34;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2673[label="196.21.112.50;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3049[label="211.188.47.121;59pkt 59fpkt", shape=pentagon, color=darkviolet];
3775[label="211.188.46.33;10pkt 10fpkt", shape=invtriangle, color=brown];
3998[label="211.188.47.121;59pkt 59fpkt", shape=invtriangle, color=brown];
4423[label="211.188.47.121;59pkt 59fpkt", shape=invhouse, color=bisque];
stat635[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 150.8.32.138:*}[70.3557%]&lt;BR/&gt;{211.188.47.121:80, *:*}[22.9249%]&lt;BR/&gt;{*:80, 135.232.228.196:*}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9381%)&lt;BR/&gt; 8080: (1.4433%)&lt;BR/&gt; 0: (0.618557%)&lt;BR/&gt; 4423: (0.412371%)&lt;BR/&gt; 4401: (0.412371%)&gt;];
}
93--1117[label="1;2pkt 2fpkt"];
1117--1372[label="0.0333333;1pkt 1fpkt"];
1117--1408[label="0.027027;1pkt 1fpkt"];
1117--1583[label="1;34pkt 34fpkt"];
1117--2430[label="0.027027;1pkt 1fpkt"];
1117--2576[label="1;19pkt 19fpkt"];
1117--2673[label="1;4pkt 4fpkt"];
1117--3049[label="0.40678;24pkt 24fpkt"];
1117--3598[label="0.0115607;2pkt 2fpkt"];
1117--3998[label="0.40678;24pkt 24fpkt"];
1117--4423[label="0.40678;24pkt 24fpkt"];
1693--2052[label="0.0178571;1pkt 1fpkt"];
1693--2114[label="0.0357143;2pkt 2fpkt"];
1693--2569[label="1;10pkt 10fpkt"];
1693--3049[label="0.196429;11pkt 11fpkt"];
1693--3598[label="0.0535714;3pkt 3fpkt"];
1693--3775[label="1;10pkt 10fpkt"];
1693--3998[label="0.196429;11pkt 11fpkt"];
1693--4340[label="0.0178571;1pkt 1fpkt"];
1693--4423[label="0.196429;11pkt 11fpkt"];
2569--3775[label="1;10pkt 10fpkt"];
3049--3998[label="1;59pkt 59fpkt"];
3049--4423[label="1;59pkt 59fpkt"];
3998--4423[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter src_ip="211.188.47.121" src_port="80"/>
      <filter dst_ip="150.8.32.138" src_port="80"/>
      <filter dst_ip="135.232.228.196" src_port="80"/>
    </slice>
    <from sec="1057554009" usec="0"/>
    <to sec="1057554889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.59.142.124"/>
    </slice>
    <from sec="1057554004" usec="0"/>
    <to sec="1057554899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_637{
style=filled;
color=gray75;
3076[label="85.31.132.129;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4006[label="85.31.132.129;7pkt 7fpkt", shape=invtriangle, color=brown];
stat637[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.31.132.129:80, 172.73.174.69:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1514: (7.14286%)&lt;BR/&gt; 1510: (7.14286%)&lt;BR/&gt; 1509: (7.14286%)&lt;BR/&gt; 1498: (7.14286%)&gt;];
}
3076--4006[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="172.73.174.69" src_ip="85.31.132.129" src_port="80"/>
    </slice>
    <from sec="1057554857" usec="0"/>
    <to sec="1057554877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.14.112.130"/>
    </slice>
    <from sec="1057554003" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
3084[label="201.145.153.130;154pkt 154fpkt", shape=pentagon, color=darkviolet];
4010[label="201.145.153.130;154pkt 154fpkt", shape=invtriangle, color=brown];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.145.153.130:1042, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1042: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3084--4010[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.145.153.130" src_port="1042"/>
    </slice>
    <from sec="1057554609" usec="0"/>
    <to sec="1057554634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987512,1.97316,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_640{
style=filled;
color=gray75;
1439[label="144.129.45.132;s;218pkt 218fpkt", shape=diamond, color=yellow];
3092[label="144.129.45.132;231pkt 231fpkt", shape=pentagon, color=darkviolet];
4013[label="144.129.45.132;231pkt 231fpkt", shape=invtriangle, color=brown];
4428[label="144.129.45.132;230pkt 230fpkt", shape=invhouse, color=bisque];
stat640[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.129.45.132:3380, *:53}[81.8966%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.5385%)&lt;BR/&gt; 3380: (41.044%)&lt;BR/&gt; 32769: (0.43956%)&lt;BR/&gt; 9253: (0.43956%)&lt;BR/&gt; 5353: (0.43956%)&gt;];
}
1439--2327[label="0.0366972;8pkt 8fpkt"];
1439--3092[label="0.995413;217pkt 217fpkt"];
1439--4013[label="0.995413;217pkt 217fpkt"];
1439--4428[label="0.990826;216pkt 216fpkt"];
3092--4013[label="1;231pkt 231fpkt"];
3092--4428[label="1;230pkt 230fpkt"];
4013--4428[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="144.129.45.132" src_port="3380"/>
    </slice>
    <from sec="1057554002" usec="0"/>
    <to sec="1057554898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
3106[label="221.19.47.134;62pkt 62fpkt", shape=pentagon, color=darkviolet];
4017[label="221.19.47.134;62pkt 62fpkt", shape=invtriangle, color=brown];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.19.47.134:80, 172.73.234.197:*}[93.5484%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49682: (0.806452%)&lt;BR/&gt; 49681: (0.806452%)&lt;BR/&gt; 49680: (0.806452%)&lt;BR/&gt; 49671: (0.806452%)&gt;];
}
3106--4017[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="172.73.234.197" src_ip="221.19.47.134" src_port="80"/>
    </slice>
    <from sec="1057554025" usec="0"/>
    <to sec="1057554859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_642{
style=filled;
color=gray75;
3109[label="213.7.195.134;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4019[label="213.7.195.134;9pkt 9fpkt", shape=invtriangle, color=brown];
stat642[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.195.134:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 43103: (5.55556%)&lt;BR/&gt; 3022: (5.55556%)&lt;BR/&gt; 3010: (5.55556%)&lt;BR/&gt; 2946: (5.55556%)&gt;];
}
3109--4019[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="213.7.195.134" src_port="1863"/>
    </slice>
    <from sec="1057554007" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_644{
style=filled;
color=gray75;
3120[label="213.7.195.135;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4023[label="213.7.195.135;8pkt 8fpkt", shape=invtriangle, color=brown];
stat644[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.195.135:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 10154: (6.25%)&lt;BR/&gt; 3883: (6.25%)&lt;BR/&gt; 3009: (6.25%)&lt;BR/&gt; 1147: (6.25%)&gt;];
}
3120--4023[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="213.7.195.135" src_port="1863"/>
    </slice>
    <from sec="1057554005" usec="0"/>
    <to sec="1057554898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
3123[label="218.217.95.136;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4024[label="218.217.95.136;7pkt 7fpkt", shape=invtriangle, color=brown];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.217.95.136:6666, *:*}[42.8571%]&lt;BR/&gt;{218.217.95.136:6667, *:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6666: (21.4286%)&lt;BR/&gt; 6667: (14.2857%)&lt;BR/&gt; 6669: (7.14286%)&lt;BR/&gt; 6668: (7.14286%)&lt;BR/&gt; 2012: (7.14286%)&gt;];
}
3123--4024[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="218.217.95.136" src_port="6666"/>
      <filter src_ip="218.217.95.136" src_port="6667"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
3133[label="135.232.161.137;45pkt 45fpkt", shape=pentagon, color=darkviolet];
4028[label="135.232.161.137;44pkt 44fpkt", shape=invtriangle, color=brown];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.232.161.137:*, 212.24.236.193:80}[57.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4976: (1.1236%)&lt;BR/&gt; 4974: (1.1236%)&lt;BR/&gt; 4973: (1.1236%)&lt;BR/&gt; 4971: (1.1236%)&gt;];
}
3133--4028[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.236.193" dst_port="80" src_ip="135.232.161.137"/>
    </slice>
    <from sec="1057554106" usec="0"/>
    <to sec="1057554260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_648{
style=filled;
color=gray75;
3139[label="35.55.39.138;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4031[label="35.55.39.138;34pkt 34fpkt", shape=invtriangle, color=brown];
stat648[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.55.39.138:80, 144.147.204.175:*}[55.8824%]&lt;BR/&gt;{35.55.39.138:80, 150.8.19.18:*}[44.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2015: (1.49254%)&lt;BR/&gt; 2014: (1.49254%)&lt;BR/&gt; 2013: (1.49254%)&lt;BR/&gt; 2012: (1.49254%)&gt;];
}
3139--4031[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.204.175" src_ip="35.55.39.138" src_port="80"/>
      <filter dst_ip="150.8.19.18" src_ip="35.55.39.138" src_port="80"/>
    </slice>
    <from sec="1057554004" usec="0"/>
    <to sec="1057554714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.35.58.138"/>
    </slice>
    <from sec="1057554422" usec="0"/>
    <to sec="1057554604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.196.124.138"/>
    </slice>
    <from sec="1057554006" usec="0"/>
    <to sec="1057554168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_651{
style=filled;
color=gray75;
3147[label="201.198.22.139;217pkt 217fpkt", shape=pentagon, color=darkviolet];
4035[label="201.198.22.139;217pkt 217fpkt", shape=invtriangle, color=brown];
stat651[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.198.22.139:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3147--4035[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.198.22.139" src_port="1027"/>
    </slice>
    <from sec="1057554673" usec="0"/>
    <to sec="1057554709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
3156[label="193.23.98.140;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4039[label="193.23.98.140;1pkt 1fpkt", shape=invtriangle, color=brown];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.23.98.140:80, 150.8.149.230:1183}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1183: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3156--4039[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.149.230" dst_port="1183" src_ip="193.23.98.140" src_port="80"/>
    </slice>
    <from sec="1057554594" usec="0"/>
    <to sec="1057554602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937622,1.98143,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_653{
style=filled;
color=gray75;
288[label="36.82.4.141s;169pkt 169fpkt", shape=rectangle, color=red];
3159[label="36.82.4.141;171pkt 171fpkt", shape=pentagon, color=darkviolet];
4041[label="36.82.4.141;171pkt 171fpkt", shape=invtriangle, color=brown];
4438[label="36.82.4.141;171pkt 171fpkt", shape=invhouse, color=bisque];
stat653[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.82.4.141:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
288--3159[label="0.994083;168pkt 168fpkt"];
288--4041[label="0.994083;168pkt 168fpkt"];
288--4438[label="0.994083;168pkt 168fpkt"];
3159--4041[label="1;171pkt 171fpkt"];
3159--4438[label="1;171pkt 171fpkt"];
4041--4438[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.82.4.141" src_port="1028"/>
    </slice>
    <from sec="1057554214" usec="0"/>
    <to sec="1057554241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_654{
style=filled;
color=gray75;
3165[label="197.200.87.141;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4045[label="197.200.87.141;4pkt 4fpkt", shape=invtriangle, color=brown];
4440[label="197.200.87.141;4pkt 4fpkt", shape=invhouse, color=bisque];
stat654[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.200.87.141:80, 150.9.102.169:1887}[20%]&lt;BR/&gt;{197.200.87.141:80, 150.9.102.169:1888}[20%]&lt;BR/&gt;{197.200.87.141:80, 150.9.102.169:1889}[20%]&lt;BR/&gt;{197.200.87.141:80, 150.9.102.169:1890}[20%]&lt;BR/&gt;{197.200.87.141:80, 150.9.102.169:1892}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1892: (11.5385%)&lt;BR/&gt; 1890: (11.5385%)&lt;BR/&gt; 1889: (11.5385%)&lt;BR/&gt; 1888: (11.5385%)&gt;];
}
3165--4045[label="1;4pkt 4fpkt"];
3165--4440[label="1;4pkt 4fpkt"];
4045--4440[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.102.169" dst_port="1892" src_ip="197.200.87.141" src_port="80"/>
      <filter dst_ip="150.9.102.169" dst_port="1890" src_ip="197.200.87.141" src_port="80"/>
      <filter dst_ip="150.9.102.169" dst_port="1889" src_ip="197.200.87.141" src_port="80"/>
      <filter dst_ip="150.9.102.169" dst_port="1888" src_ip="197.200.87.141" src_port="80"/>
      <filter dst_ip="150.9.102.169" dst_port="1887" src_ip="197.200.87.141" src_port="80"/>
    </slice>
    <from sec="1057554307" usec="0"/>
    <to sec="1057554333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,011,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_655{
style=filled;
color=gray75;
3177[label="135.232.27.144;94pkt 94fpkt", shape=pentagon, color=darkviolet];
4050[label="135.232.27.144;94pkt 94fpkt", shape=invtriangle, color=brown];
4442[label="135.232.27.144;94pkt 94fpkt", shape=invhouse, color=bisque];
stat655[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.232.27.144:2615, *:*}[57.4468%]&lt;BR/&gt;{135.232.27.144:*, 10.0.1.128:6667}[42.5532%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2615: (28.7234%)&lt;BR/&gt; 6667: (21.2766%)&lt;BR/&gt; 60583: (0.531915%)&lt;BR/&gt; 60582: (0.531915%)&lt;BR/&gt; 60581: (0.531915%)&gt;];
}
3177--4050[label="1;94pkt 94fpkt"];
3177--4442[label="1;94pkt 94fpkt"];
4050--4442[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter src_ip="135.232.27.144" src_port="2615"/>
      <filter dst_ip="10.0.1.128" dst_port="6667" src_ip="135.232.27.144"/>
    </slice>
    <from sec="1057554007" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.26.76.144"/>
    </slice>
    <from sec="1057554110" usec="0"/>
    <to sec="1057554609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.142.93.144"/>
    </slice>
    <from sec="1057554174" usec="0"/>
    <to sec="1057554251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_658{
style=filled;
color=gray75;
3184[label="199.85.44.145;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4054[label="199.85.44.145;1pkt 1fpkt", shape=invtriangle, color=brown];
stat658[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.85.44.145:80, 150.9.58.65:33548}[50%]&lt;BR/&gt;{199.85.44.145:80, 150.9.93.156:60577}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60577: (33.3333%)&lt;BR/&gt; 33548: (16.6667%)&gt;];
}
3184--4054[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.93.156" dst_port="60577" src_ip="199.85.44.145" src_port="80"/>
      <filter dst_ip="150.9.58.65" dst_port="33548" src_ip="199.85.44.145" src_port="80"/>
    </slice>
    <from sec="1057554372" usec="0"/>
    <to sec="1057554844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_659{
style=filled;
color=gray75;
3187[label="208.67.169.145;145pkt 145fpkt", shape=pentagon, color=darkviolet];
4056[label="208.67.169.145;145pkt 145fpkt", shape=invtriangle, color=brown];
4445[label="208.67.169.145;145pkt 145fpkt", shape=invhouse, color=bisque];
stat659[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.67.169.145:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3187--4056[label="1;145pkt 145fpkt"];
3187--4445[label="1;145pkt 145fpkt"];
4056--4445[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.67.169.145" src_port="1027"/>
    </slice>
    <from sec="1057554701" usec="0"/>
    <to sec="1057554725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.192.10.146"/>
    </slice>
    <from sec="1057554229" usec="0"/>
    <to sec="1057554421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
3197[label="218.238.131.146;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4060[label="218.238.131.146;26pkt 26fpkt", shape=invtriangle, color=brown];
4448[label="218.238.131.146;27pkt 27fpkt", shape=invhouse, color=bisque];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.238.131.146:80, 150.9.144.77:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62517: (1.89873%)&lt;BR/&gt; 62516: (1.89873%)&lt;BR/&gt; 62515: (1.89873%)&lt;BR/&gt; 62514: (1.89873%)&gt;];
}
3197--4060[label="1;26pkt 26fpkt"];
3197--4448[label="1;26pkt 26fpkt"];
4060--4448[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.144.77" src_ip="218.238.131.146" src_port="80"/>
    </slice>
    <from sec="1057554005" usec="0"/>
    <to sec="1057554041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.9.69.149"/>
    </slice>
    <from sec="1057554604" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_663{
style=filled;
color=gray75;
3214[label="35.100.216.149;155pkt 155fpkt", shape=pentagon, color=darkviolet];
4068[label="35.100.216.149;155pkt 155fpkt", shape=invtriangle, color=brown];
stat663[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.100.216.149:1037, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1037: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3214--4068[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="35.100.216.149" src_port="1037"/>
    </slice>
    <from sec="1057554760" usec="0"/>
    <to sec="1057554784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_664{
style=filled;
color=gray75;
3219[label="213.7.197.150;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4070[label="213.7.197.150;7pkt 7fpkt", shape=invtriangle, color=brown];
stat664[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.197.150:1863, 210.101.224.30:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3012: (11.1111%)&lt;BR/&gt; 1162: (11.1111%)&lt;BR/&gt; 4407: (5.55556%)&lt;BR/&gt; 1529: (5.55556%)&gt;];
}
3219--4070[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.101.224.30" src_ip="213.7.197.150" src_port="1863"/>
    </slice>
    <from sec="1057554007" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_665{
style=filled;
color=gray75;
3224[label="213.7.197.151;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4072[label="213.7.197.151;10pkt 10fpkt", shape=invtriangle, color=brown];
4451[label="213.7.197.151;10pkt 10fpkt", shape=invhouse, color=bisque];
stat665[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.197.151:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 49219: (5%)&lt;BR/&gt; 3698: (5%)&lt;BR/&gt; 3362: (5%)&lt;BR/&gt; 2495: (5%)&gt;];
}
3224--4072[label="1;10pkt 10fpkt"];
3224--4451[label="1;10pkt 10fpkt"];
4072--4451[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="213.7.197.151" src_port="1863"/>
    </slice>
    <from sec="1057554057" usec="0"/>
    <to sec="1057554899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_666{
style=filled;
color=gray75;
3229[label="86.218.206.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4074[label="86.218.206.152;1pkt 1fpkt", shape=invtriangle, color=brown];
stat666[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.218.206.152:80, 150.8.133.66:2072}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2072: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3229--4074[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.133.66" dst_port="2072" src_ip="86.218.206.152" src_port="80"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.686148,1.98258,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
304[label="33.9.8.153s;54pkt 54fpkt", shape=rectangle, color=red];
3232[label="33.9.8.153;115pkt 115fpkt", shape=pentagon, color=darkviolet];
4075[label="33.9.8.153;115pkt 115fpkt", shape=invtriangle, color=brown];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.9.8.153:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
304--3232[label="0.981481;53pkt 53fpkt"];
304--4075[label="0.981481;53pkt 53fpkt"];
3232--4075[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="33.9.8.153" src_port="1025"/>
    </slice>
    <from sec="1057554703" usec="0"/>
    <to sec="1057554722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_668{
style=filled;
color=gray75;
3236[label="36.36.151.153;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4076[label="36.36.151.153;1pkt 1fpkt", shape=invtriangle, color=brown];
4453[label="36.36.151.153;2pkt 2fpkt", shape=invhouse, color=bisque];
stat668[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.36.151.153:3426, 150.9.48.104:2319}[50%]&lt;BR/&gt;{36.36.151.153:3426, 150.9.48.104:18161}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3426: (50%)&lt;BR/&gt; 18161: (37.5%)&lt;BR/&gt; 2319: (12.5%)&gt;];
}
3236--4076[label="1;1pkt 1fpkt"];
3236--4453[label="1;1pkt 1fpkt"];
4076--4453[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.48.104" dst_port="18161" src_ip="36.36.151.153" src_port="3426"/>
      <filter dst_ip="150.9.48.104" dst_port="2319" src_ip="36.36.151.153" src_port="3426"/>
    </slice>
    <from sec="1057554274" usec="0"/>
    <to sec="1057554875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_669{
style=filled;
color=gray75;
3240[label="199.85.44.154;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4079[label="199.85.44.154;11pkt 11fpkt", shape=invtriangle, color=brown];
stat669[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.85.44.154:21, 150.9.134.229:*}[63.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (31.8182%)&lt;BR/&gt; 58416: (4.54545%)&lt;BR/&gt; 53892: (4.54545%)&lt;BR/&gt; 51681: (4.54545%)&lt;BR/&gt; 50253: (4.54545%)&gt;];
}
3240--4079[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.134.229" src_ip="199.85.44.154" src_port="21"/>
    </slice>
    <from sec="1057554658" usec="0"/>
    <to sec="1057554666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_670{
style=filled;
color=gray75;
3262[label="52.145.0.161;147pkt 147fpkt", shape=pentagon, color=darkviolet];
4091[label="52.145.0.161;148pkt 148fpkt", shape=invtriangle, color=brown];
stat670[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.145.0.161:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 25152: (5.08475%)&lt;BR/&gt; 25159: (4.74576%)&lt;BR/&gt; 25155: (3.72881%)&lt;BR/&gt; 25144: (3.72881%)&gt;];
}
3262--4091[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="52.145.0.161"/>
    </slice>
    <from sec="1057554779" usec="0"/>
    <to sec="1057554803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_673{
style=filled;
color=gray75;
3270[label="213.164.251.162;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4096[label="213.164.251.162;26pkt 26fpkt", shape=invtriangle, color=brown];
stat673[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.164.251.162:80, 211.80.103.209:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1149: (1.92308%)&lt;BR/&gt; 1148: (1.92308%)&lt;BR/&gt; 1147: (1.92308%)&lt;BR/&gt; 1146: (1.92308%)&gt;];
}
3270--4096[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.103.209" src_ip="213.164.251.162" src_port="80"/>
    </slice>
    <from sec="1057554194" usec="0"/>
    <to sec="1057554222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="104.189.100.165"/>
    </slice>
    <from sec="1057554782" usec="0"/>
    <to sec="1057554886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.37.26.166"/>
    </slice>
    <from sec="1057554018" usec="0"/>
    <to sec="1057554894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.66.88.166"/>
    </slice>
    <from sec="1057554690" usec="0"/>
    <to sec="1057554802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_677{
style=filled;
color=gray75;
3298[label="213.7.197.168;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4108[label="213.7.197.168;11pkt 11fpkt", shape=invtriangle, color=brown];
stat677[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.197.168:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3503: (4.7619%)&lt;BR/&gt; 3359: (4.7619%)&lt;BR/&gt; 2781: (4.7619%)&lt;BR/&gt; 1991: (4.7619%)&gt;];
}
3298--4108[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="213.7.197.168" src_port="1863"/>
    </slice>
    <from sec="1057554004" usec="0"/>
    <to sec="1057554890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.2.115.169"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_679{
style=filled;
color=gray75;
3301[label="211.80.129.169;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4110[label="211.80.129.169;47pkt 47fpkt", shape=invtriangle, color=brown];
4463[label="211.80.129.169;47pkt 47fpkt", shape=invhouse, color=bisque];
stat679[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.80.129.169:*, 202.36.11.253:80}[21.2766%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4823: (1.06383%)&lt;BR/&gt; 4822: (1.06383%)&lt;BR/&gt; 4803: (1.06383%)&lt;BR/&gt; 3501: (1.06383%)&gt;];
}
3301--4110[label="1;47pkt 47fpkt"];
3301--4463[label="1;47pkt 47fpkt"];
4110--4463[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="202.36.11.253" dst_port="80" src_ip="211.80.129.169"/>
    </slice>
    <from sec="1057554036" usec="0"/>
    <to sec="1057554868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.32.229.170"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.162.26.171"/>
    </slice>
    <from sec="1057554007" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_682{
style=filled;
color=gray75;
3310[label="213.7.195.172;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4114[label="213.7.195.172;5pkt 5fpkt", shape=invtriangle, color=brown];
stat682[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.195.172:1863, 144.147.242.58:2718}[20%]&lt;BR/&gt;{213.7.195.172:1863, 144.147.250.64:3678}[20%]&lt;BR/&gt;{213.7.195.172:1863, 144.129.115.98:2807}[20%]&lt;BR/&gt;{213.7.195.172:1863, 144.147.218.98:1060}[20%]&lt;BR/&gt;{213.7.195.172:1863, 210.89.17.178:1130}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3678: (10%)&lt;BR/&gt; 2807: (10%)&lt;BR/&gt; 2718: (10%)&lt;BR/&gt; 1130: (10%)&gt;];
}
3310--4114[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="210.89.17.178" dst_port="1130" src_ip="213.7.195.172" src_port="1863"/>
      <filter dst_ip="144.147.218.98" dst_port="1060" src_ip="213.7.195.172" src_port="1863"/>
      <filter dst_ip="144.129.115.98" dst_port="2807" src_ip="213.7.195.172" src_port="1863"/>
      <filter dst_ip="144.147.250.64" dst_port="3678" src_ip="213.7.195.172" src_port="1863"/>
      <filter dst_ip="144.147.242.58" dst_port="2718" src_ip="213.7.195.172" src_port="1863"/>
    </slice>
    <from sec="1057554045" usec="0"/>
    <to sec="1057554898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_683{
style=filled;
color=gray75;
3337[label="213.7.195.179;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4126[label="213.7.195.179;14pkt 14fpkt", shape=invtriangle, color=brown];
stat683[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.195.179:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 63741: (3.57143%)&lt;BR/&gt; 27437: (3.57143%)&lt;BR/&gt; 4975: (3.57143%)&lt;BR/&gt; 4704: (3.57143%)&gt;];
}
3337--4126[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="213.7.195.179" src_port="1863"/>
    </slice>
    <from sec="1057554020" usec="0"/>
    <to sec="1057554899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="104.0.128.182"/>
    </slice>
    <from sec="1057554006" usec="0"/>
    <to sec="1057554507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987512,1.97316,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_686{
style=filled;
color=gray75;
1119[label="150.8.169.165;d;20pkt 20fpkt", shape=diamond, color=yellow];
1414[label="172.73.141.232;d;67pkt 67fpkt", shape=diamond, color=yellow];
1811[label="32.93.10.71;s;17pkt 17fpkt", shape=diamond, color=yellow];
2457[label="213.7.195.15;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2791[label="32.93.10.71;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2845[label="34.88.184.82;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2918[label="215.126.19.97;74pkt 74fpkt", shape=pentagon, color=darkviolet];
3331[label="202.105.83.178;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3366[label="215.126.50.185;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3725[label="213.7.195.15;5pkt 5fpkt", shape=invtriangle, color=brown];
3882[label="32.93.10.71;20pkt 20fpkt", shape=invtriangle, color=brown];
4123[label="202.105.83.178;3pkt 3fpkt", shape=invtriangle, color=brown];
4134[label="215.126.50.185;10pkt 10fpkt", shape=invtriangle, color=brown];
4368[label="32.93.10.71;20pkt 20fpkt", shape=invhouse, color=bisque];
4470[label="202.105.83.178;4pkt 4fpkt", shape=invhouse, color=bisque];
stat686[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.126.19.97:80, 172.73.141.232:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.0845%)&lt;BR/&gt; 443: (8.62676%)&lt;BR/&gt; 1863: (1.93662%)&lt;BR/&gt; 3695: (0.880282%)&lt;BR/&gt; 3694: (0.880282%)&gt;];
}
1119--2457[label="0.2;1pkt 1fpkt"];
1119--2845[label="0.6;3pkt 3fpkt"];
1119--2918[label="0.1;2pkt 2fpkt"];
1119--3366[label="1;11pkt 11fpkt"];
1119--3725[label="0.2;1pkt 1fpkt"];
1119--4134[label="1;10pkt 10fpkt"];
1414--1811[label="1;17pkt 17fpkt"];
1414--2791[label="0.85;17pkt 17fpkt"];
1414--2918[label="0.41791;28pkt 28fpkt"];
1414--2964[label="0.128205;5pkt 5fpkt"];
1414--3331[label="1;3pkt 3fpkt"];
1414--3882[label="0.85;17pkt 17fpkt"];
1414--4123[label="1;3pkt 3fpkt"];
1414--4368[label="0.85;17pkt 17fpkt"];
1414--4470[label="1;4pkt 4fpkt"];
1811--2791[label="1;17pkt 17fpkt"];
1811--3882[label="1;17pkt 17fpkt"];
1811--4368[label="1;17pkt 17fpkt"];
2457--3725[label="1;5pkt 5fpkt"];
2791--3882[label="1;20pkt 20fpkt"];
2791--4368[label="1;20pkt 20fpkt"];
3331--4123[label="1;3pkt 3fpkt"];
3331--4470[label="1;3pkt 3fpkt"];
3366--4134[label="1;10pkt 10fpkt"];
3882--4368[label="1;20pkt 20fpkt"];
4123--4470[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.73.141.232" src_ip="215.126.19.97" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
3368[label="201.159.190.185;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4135[label="201.159.190.185;2pkt 2fpkt", shape=invtriangle, color=brown];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.159.190.185:80, 172.73.26.48:2703}[50%]&lt;BR/&gt;{201.159.190.185:80, 150.9.10.112:4122}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4122: (25%)&lt;BR/&gt; 2703: (25%)&gt;];
}
3368--4135[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.10.112" dst_port="4122" src_ip="201.159.190.185" src_port="80"/>
      <filter dst_ip="172.73.26.48" dst_port="2703" src_ip="201.159.190.185" src_port="80"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20307,1.96037,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_688{
style=filled;
color=gray75;
1223[label="211.80.103.203;d;64pkt 64fpkt", shape=diamond, color=yellow];
1287[label="85.5.236.241;s;27pkt 27fpkt", shape=diamond, color=yellow];
1357[label="144.147.88.57;d;41pkt 41fpkt", shape=diamond, color=yellow];
1360[label="159.89.173.250;s;28pkt 28fpkt", shape=diamond, color=yellow];
1445[label="213.7.73.117;s;57pkt 57fpkt", shape=diamond, color=yellow];
1468[label="144.34.168.80;d;32pkt 32fpkt", shape=diamond, color=yellow];
1592[label="217.140.15.43;s;26pkt 26fpkt", shape=diamond, color=yellow];
1595[label="211.80.103.165;d;10pkt 10fpkt", shape=diamond, color=yellow];
1609[label="211.196.44.204;s;8pkt 8fpkt", shape=diamond, color=yellow];
2074[label="85.5.236.241;s;18pkt 18fpkt", shape=hexagon, color=black];
2179[label="217.140.15.43;s;22pkt 22fpkt", shape=hexagon, color=black];
2180[label="211.80.103.165;d;10pkt 10fpkt", shape=hexagon, color=black];
2502[label="211.195.181.21;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2909[label="193.64.86.95;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3022[label="213.7.73.117;70pkt 70fpkt", shape=pentagon, color=darkviolet];
3370[label="198.216.48.186;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3664[label="159.89.173.250;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3747[label="211.195.181.21;6pkt 6fpkt", shape=invtriangle, color=brown];
3928[label="193.64.86.95;1pkt 1fpkt", shape=invtriangle, color=brown];
3984[label="213.7.73.117;70pkt 70fpkt", shape=invtriangle, color=brown];
4137[label="198.216.48.186;9pkt 9fpkt", shape=invtriangle, color=brown];
4414[label="213.7.73.117;70pkt 70fpkt", shape=invhouse, color=bisque];
stat688[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.73.117:80, *:*}[29.4118%]&lt;BR/&gt;{*:80, 211.80.103.203:*}[27.7311%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5955%)&lt;BR/&gt; 1896: (0.485437%)&lt;BR/&gt; 1888: (0.485437%)&lt;BR/&gt; 1886: (0.485437%)&lt;BR/&gt; 41522: (0.404531%)&gt;];
}
1223--1287[label="0.481481;13pkt 13fpkt"];
1223--1445[label="0.0350877;2pkt 2fpkt"];
1223--1462[label="0.09375;6pkt 6fpkt"];
1223--1609[label="0.875;7pkt 7fpkt"];
1223--2074[label="0.722222;13pkt 13fpkt"];
1223--2261[label="0.09375;6pkt 6fpkt"];
1223--2502[label="0.6;3pkt 3fpkt"];
1223--2852[label="0.015625;1pkt 1fpkt"];
1223--3022[label="0.03125;2pkt 2fpkt"];
1223--3564[label="0.09375;6pkt 6fpkt"];
1223--3747[label="0.666667;4pkt 4fpkt"];
1223--3984[label="0.03125;2pkt 2fpkt"];
1223--4414[label="0.03125;2pkt 2fpkt"];
1287--1595[label="0.7;7pkt 7fpkt"];
1287--2074[label="1;18pkt 18fpkt"];
1287--2180[label="0.7;7pkt 7fpkt"];
1357--1445[label="0.170732;7pkt 7fpkt"];
1357--1592[label="1;26pkt 26fpkt"];
1357--2179[label="1;22pkt 22fpkt"];
1357--2425[label="0.0487805;2pkt 2fpkt"];
1357--2909[label="1;1pkt 1fpkt"];
1357--3022[label="0.170732;7pkt 7fpkt"];
1357--3711[label="0.0487805;2pkt 2fpkt"];
1357--3928[label="1;1pkt 1fpkt"];
1357--3984[label="0.170732;7pkt 7fpkt"];
1357--4414[label="0.170732;7pkt 7fpkt"];
1360--1468[label="0.5;14pkt 14fpkt"];
1360--3664[label="1;28pkt 28fpkt"];
1445--1468[label="0.15625;5pkt 5fpkt"];
1445--1966[label="0.0175439;1pkt 1fpkt"];
1445--1994[label="0.0877193;5pkt 5fpkt"];
1445--2085[label="0.0877193;5pkt 5fpkt"];
1445--2147[label="0.0701754;4pkt 4fpkt"];
1445--2299[label="0.0175439;1pkt 1fpkt"];
1445--3022[label="1;57pkt 57fpkt"];
1445--3984[label="1;57pkt 57fpkt"];
1445--4414[label="1;57pkt 57fpkt"];
1468--3022[label="0.15625;5pkt 5fpkt"];
1468--3370[label="0.4;4pkt 4fpkt"];
1468--3664[label="0.4375;14pkt 14fpkt"];
1468--3984[label="0.15625;5pkt 5fpkt"];
1468--4137[label="0.444444;4pkt 4fpkt"];
1468--4414[label="0.15625;5pkt 5fpkt"];
1592--2179[label="1;22pkt 22fpkt"];
1595--2074[label="0.5;5pkt 5fpkt"];
1595--2180[label="1;10pkt 10fpkt"];
2074--2180[label="0.5;5pkt 5fpkt"];
2502--3747[label="1;5pkt 5fpkt"];
2909--3928[label="1;1pkt 1fpkt"];
3022--3984[label="1;70pkt 70fpkt"];
3022--4414[label="1;70pkt 70fpkt"];
3370--4137[label="1;9pkt 9fpkt"];
3984--4414[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter src_ip="213.7.73.117" src_port="80"/>
      <filter dst_ip="211.80.103.203" src_port="80"/>
    </slice>
    <from sec="1057554004" usec="0"/>
    <to sec="1057554895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987512,1.97316,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_689{
style=filled;
color=gray75;
1262[label="211.80.103.164;d;35pkt 35fpkt", shape=diamond, color=yellow];
2684[label="85.48.155.52;38pkt 38fpkt", shape=pentagon, color=darkviolet];
3371[label="85.9.108.186;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3831[label="85.48.155.52;38pkt 38fpkt", shape=invtriangle, color=brown];
4138[label="85.9.108.186;8pkt 8fpkt", shape=invtriangle, color=brown];
4415[label="201.145.118.118;2pkt 2fpkt", shape=invhouse, color=bisque];
4477[label="85.9.108.186;8pkt 8fpkt", shape=invhouse, color=bisque];
stat689[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.48.155.52:80, 211.80.103.164:*}[57.5758%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4186: (1.45985%)&lt;BR/&gt; 4185: (1.45985%)&lt;BR/&gt; 4182: (1.45985%)&lt;BR/&gt; 4181: (1.45985%)&gt;];
}
1262--2684[label="0.314286;11pkt 11fpkt"];
1262--3371[label="0.5;4pkt 4fpkt"];
1262--3831[label="0.314286;11pkt 11fpkt"];
1262--4138[label="0.5;4pkt 4fpkt"];
1262--4415[label="1;2pkt 2fpkt"];
1262--4477[label="0.5;4pkt 4fpkt"];
2684--3831[label="1;38pkt 38fpkt"];
3371--4138[label="1;8pkt 8fpkt"];
3371--4477[label="1;8pkt 8fpkt"];
4138--4477[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.103.164" src_ip="85.48.155.52" src_port="80"/>
    </slice>
    <from sec="1057554140" usec="0"/>
    <to sec="1057554883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="104.189.152.186"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987512,1.97316,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_691{
style=filled;
color=gray75;
1137[label="135.232.161.137;d;63pkt 63fpkt", shape=diamond, color=yellow];
3138[label="32.135.25.138;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3412[label="212.24.236.193;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4154[label="212.24.236.193;26pkt 26fpkt", shape=invtriangle, color=brown];
4485[label="212.24.236.193;25pkt 25fpkt", shape=invhouse, color=bisque];
stat691[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.24.236.193:80, 135.232.161.137:*}[41.2698%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4968: (1.36986%)&lt;BR/&gt; 4964: (1.36986%)&lt;BR/&gt; 4963: (1.36986%)&lt;BR/&gt; 4942: (1.36986%)&gt;];
}
1137--3138[label="1;6pkt 6fpkt"];
1137--3412[label="1;26pkt 26fpkt"];
1137--4154[label="1;26pkt 26fpkt"];
1137--4485[label="1;25pkt 25fpkt"];
3412--4154[label="1;26pkt 26fpkt"];
3412--4485[label="1;25pkt 25fpkt"];
4154--4485[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="135.232.161.137" src_ip="212.24.236.193" src_port="80"/>
    </slice>
    <from sec="1057554105" usec="0"/>
    <to sec="1057554288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
3416[label="146.109.118.194;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4157[label="146.109.118.194;12pkt 12fpkt", shape=invtriangle, color=brown];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.109.118.194:443, 210.101.226.30:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1050: (4%)&lt;BR/&gt; 1049: (4%)&lt;BR/&gt; 1048: (4%)&lt;BR/&gt; 1047: (4%)&gt;];
}
3416--4157[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="210.101.226.30" src_ip="146.109.118.194" src_port="443"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.128.75.195"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_694{
style=filled;
color=gray75;
3424[label="201.138.203.195;118pkt 118fpkt", shape=pentagon, color=darkviolet];
4160[label="201.138.203.195;117pkt 117fpkt", shape=invtriangle, color=brown];
4487[label="201.138.203.195;117pkt 117fpkt", shape=invhouse, color=bisque];
stat694[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.138.203.195:12155, *:137}[27.1186%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 12155: (13.6364%)&lt;BR/&gt; 12162: (7.24432%)&lt;BR/&gt; 12158: (6.96023%)&lt;BR/&gt; 12179: (3.40909%)&gt;];
}
3424--4160[label="1;117pkt 117fpkt"];
3424--4487[label="1;117pkt 117fpkt"];
4160--4487[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.138.203.195" src_port="12155"/>
    </slice>
    <from sec="1057554085" usec="0"/>
    <to sec="1057554129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26314,1.92327,999,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
47[label="32.7.74.99s;1pkt 1fpkt", shape=rectangle, color=red];
124[label="85.176.54.8s;1pkt 1fpkt", shape=rectangle, color=red];
270[label="219.30.94.124s;2pkt 2fpkt", shape=rectangle, color=red];
320[label="85.41.145.164s;1pkt 1fpkt", shape=rectangle, color=red];
674[label="144.129.6.215;d;531pkt 531fpkt", shape=diamond, color=yellow];
762[label="32.7.74.99;s;6pkt 6fpkt", shape=diamond, color=yellow];
928[label="53.133.173.158;s;3pkt 3fpkt", shape=diamond, color=yellow];
944[label="104.188.7.232;s;5pkt 5fpkt", shape=diamond, color=yellow];
1058[label="144.34.68.32;d;90pkt 90fpkt", shape=diamond, color=yellow];
1094[label="135.232.31.73;d;129pkt 129fpkt", shape=diamond, color=yellow];
1160[label="52.177.161.164;s;1pkt 1fpkt", shape=diamond, color=yellow];
1194[label="53.132.187.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
1472[label="53.135.174.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
1660[label="203.11.180.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
1760[label="67.171.90.175;s;2pkt 2fpkt", shape=diamond, color=yellow];
1876[label="32.7.74.99;s;6pkt 6fpkt", shape=hexagon, color=black];
1990[label="144.129.6.215;d;478pkt 478fpkt", shape=hexagon, color=black];
2100[label="53.133.173.158;s;1pkt 1fpkt", shape=hexagon, color=black];
2106[label="53.132.187.148;s;1pkt 1fpkt", shape=hexagon, color=black];
2111[label="135.232.31.73;d;57pkt 57fpkt", shape=hexagon, color=black];
2202[label="52.177.161.164;s;1pkt 1fpkt", shape=hexagon, color=black];
2270[label="53.135.174.8;s;1pkt 1fpkt", shape=hexagon, color=black];
2928[label="32.7.74.99;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3055[label="216.18.14.124;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3252[label="104.188.10.158;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3254[label="53.133.173.158;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3397[label="210.177.173.191;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3430[label="193.13.178.196;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3599[label="104.188.7.232;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4000[label="216.18.14.124;1pkt 1fpkt", shape=invtriangle, color=brown];
4148[label="210.177.173.191;14pkt 14fpkt", shape=invtriangle, color=brown];
4163[label="193.13.178.196;3pkt 3fpkt", shape=invtriangle, color=brown];
4467[label="67.171.90.175;1pkt 1fpkt", shape=invhouse, color=bisque];
4489[label="193.13.178.196;3pkt 3fpkt", shape=invhouse, color=bisque];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1214, 144.129.6.215:*}[26.2812%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (14.5493%)&lt;BR/&gt; 2234: (7.23918%)&lt;BR/&gt; 4662: (3.19375%)&lt;BR/&gt; 2938: (1.91625%)&lt;BR/&gt; 3249: (1.45493%)&gt;];
}
47--762[label="1;1pkt 1fpkt"];
47--1058[label="1;1pkt 1fpkt"];
47--1876[label="1;1pkt 1fpkt"];
124--1058[label="1;1pkt 1fpkt"];
124--1472[label="1;1pkt 1fpkt"];
124--2270[label="1;1pkt 1fpkt"];
270--674[label="0.5;1pkt 1fpkt"];
270--1094[label="0.5;1pkt 1fpkt"];
270--1990[label="0.5;1pkt 1fpkt"];
270--3055[label="1;1pkt 1fpkt"];
270--4000[label="1;1pkt 1fpkt"];
320--1058[label="1;1pkt 1fpkt"];
320--1160[label="1;1pkt 1fpkt"];
320--2202[label="1;1pkt 1fpkt"];
674--944[label="1;5pkt 5fpkt"];
674--1990[label="1;478pkt 478fpkt"];
674--3252[label="0.916667;33pkt 33fpkt"];
674--3397[label="0.857143;12pkt 12fpkt"];
674--3599[label="1;5pkt 5fpkt"];
674--4148[label="0.857143;12pkt 12fpkt"];
762--1058[label="0.666667;4pkt 4fpkt"];
762--1876[label="1;6pkt 6fpkt"];
762--2928[label="1;5pkt 5fpkt"];
928--1058[label="0.333333;1pkt 1fpkt"];
928--2100[label="1;1pkt 1fpkt"];
928--3254[label="1;2pkt 2fpkt"];
944--1990[label="1;5pkt 5fpkt"];
944--3599[label="1;5pkt 5fpkt"];
1058--1160[label="1;1pkt 1fpkt"];
1058--1194[label="1;1pkt 1fpkt"];
1058--1472[label="1;1pkt 1fpkt"];
1058--1760[label="0.5;1pkt 1fpkt"];
1058--1876[label="0.666667;4pkt 4fpkt"];
1058--2100[label="1;1pkt 1fpkt"];
1058--2106[label="1;1pkt 1fpkt"];
1058--2202[label="1;1pkt 1fpkt"];
1058--2270[label="1;1pkt 1fpkt"];
1058--2928[label="0.6;3pkt 3fpkt"];
1058--4467[label="1;1pkt 1fpkt"];
1094--1660[label="1;1pkt 1fpkt"];
1094--1760[label="0.5;1pkt 1fpkt"];
1094--2111[label="1;57pkt 57fpkt"];
1094--2114[label="0.00775194;1pkt 1fpkt"];
1094--3055[label="1;1pkt 1fpkt"];
1094--3430[label="0.5;2pkt 2fpkt"];
1094--3598[label="0.00775194;1pkt 1fpkt"];
1094--4000[label="1;1pkt 1fpkt"];
1094--4163[label="0.333333;1pkt 1fpkt"];
1094--4489[label="0.333333;1pkt 1fpkt"];
1160--2202[label="1;1pkt 1fpkt"];
1194--2106[label="1;1pkt 1fpkt"];
1472--2270[label="1;1pkt 1fpkt"];
1660--2111[label="1;1pkt 1fpkt"];
1760--2111[label="0.5;1pkt 1fpkt"];
1760--4467[label="1;1pkt 1fpkt"];
1876--2928[label="1;5pkt 5fpkt"];
1990--3252[label="0.777778;28pkt 28fpkt"];
1990--3397[label="0.714286;10pkt 10fpkt"];
1990--3599[label="1;5pkt 5fpkt"];
1990--4148[label="0.714286;10pkt 10fpkt"];
2111--2114[label="0.0175439;1pkt 1fpkt"];
2111--3430[label="0.5;2pkt 2fpkt"];
2111--3598[label="0.0175439;1pkt 1fpkt"];
2111--4163[label="0.333333;1pkt 1fpkt"];
2111--4489[label="0.333333;1pkt 1fpkt"];
3055--4000[label="1;1pkt 1fpkt"];
3397--4148[label="1;14pkt 14fpkt"];
3430--4163[label="1;3pkt 3fpkt"];
3430--4489[label="1;3pkt 3fpkt"];
4163--4489[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="144.129.6.215" src_port="1214"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_696{
style=filled;
color=gray75;
3431[label="213.7.197.196;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4164[label="213.7.197.196;12pkt 12fpkt", shape=invtriangle, color=brown];
stat696[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.197.196:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3553: (4.16667%)&lt;BR/&gt; 3087: (4.16667%)&lt;BR/&gt; 3050: (4.16667%)&lt;BR/&gt; 1220: (4.16667%)&gt;];
}
3431--4164[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="213.7.197.196" src_port="1863"/>
    </slice>
    <from sec="1057554018" usec="0"/>
    <to sec="1057554798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.145.2.198"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26314,1.92327,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
21[label="197.41.48.33s;4pkt 4fpkt", shape=rectangle, color=red];
45[label="87.76.235.91s;2pkt 2fpkt", shape=rectangle, color=red];
352[label="85.8.91.192s;2pkt 2fpkt", shape=rectangle, color=red];
943[label="144.147.227.228;d;216pkt 216fpkt", shape=diamond, color=yellow];
952[label="135.232.98.72;d;22pkt 22fpkt", shape=diamond, color=yellow];
988[label="144.147.232.135;d;213pkt 213fpkt", shape=diamond, color=yellow];
1000[label="142.109.194.233;s;47pkt 47fpkt", shape=diamond, color=yellow];
1487[label="197.41.48.33;s;13pkt 13fpkt", shape=diamond, color=yellow];
1664[label="144.147.40.70;d;37pkt 37fpkt", shape=diamond, color=yellow];
1936[label="142.109.194.233;s;62pkt 62fpkt", shape=hexagon, color=black];
2006[label="144.147.227.228;d;135pkt 135fpkt", shape=hexagon, color=black];
2570[label="197.41.48.33;42pkt 42fpkt", shape=pentagon, color=darkviolet];
2893[label="87.76.235.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3276[label="210.28.228.163;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3403[label="32.151.175.192;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3413[label="201.10.14.194;40pkt 40fpkt", shape=pentagon, color=darkviolet];
3441[label="192.97.11.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3607[label="142.109.194.233;117pkt 117fpkt", shape=pentagon, color=darkviolet];
3925[label="87.76.235.91;1pkt 1fpkt", shape=invtriangle, color=brown];
4155[label="201.10.14.194;39pkt 39fpkt", shape=invtriangle, color=brown];
4168[label="192.97.11.198;1pkt 1fpkt", shape=invtriangle, color=brown];
4396[label="87.76.235.91;2pkt 2fpkt", shape=invhouse, color=bisque];
4486[label="201.10.14.194;40pkt 40fpkt", shape=invhouse, color=bisque];
4490[label="192.97.11.198;1pkt 1fpkt", shape=invhouse, color=bisque];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 144.147.227.228:80}[41.6058%]&lt;BR/&gt;{*:*, 144.147.232.135:80}[39.4161%]&lt;BR/&gt;{142.109.194.233:*, *:80}[21.3504%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.1591%)&lt;BR/&gt; 0: (1.60985%)&lt;BR/&gt; 21: (1.08902%)&lt;BR/&gt; 53: (0.804924%)&lt;BR/&gt; 32795: (0.378788%)&gt;];
}
21--1487[label="1;4pkt 4fpkt"];
21--1664[label="1;4pkt 4fpkt"];
21--2570[label="1;4pkt 4fpkt"];
45--952[label="1;2pkt 2fpkt"];
45--2893[label="1;1pkt 1fpkt"];
45--3925[label="1;1pkt 1fpkt"];
45--4396[label="1;2pkt 2fpkt"];
352--952[label="0.5;1pkt 1fpkt"];
352--1664[label="0.5;1pkt 1fpkt"];
352--3403[label="0.5;1pkt 1fpkt"];
943--1000[label="0.489362;23pkt 23fpkt"];
943--1787[label="0.0588235;1pkt 1fpkt"];
943--1936[label="0.903226;56pkt 56fpkt"];
943--2006[label="1;135pkt 135fpkt"];
943--2328[label="0.0972222;21pkt 21fpkt"];
943--2570[label="0.52381;22pkt 22fpkt"];
943--3276[label="0.375;3pkt 3fpkt"];
943--3571[label="0.0625;4pkt 4fpkt"];
943--3607[label="0.675214;79pkt 79fpkt"];
952--2893[label="1;1pkt 1fpkt"];
952--3441[label="1;1pkt 1fpkt"];
952--3925[label="1;1pkt 1fpkt"];
952--4168[label="1;1pkt 1fpkt"];
952--4396[label="1;2pkt 2fpkt"];
952--4490[label="1;1pkt 1fpkt"];
988--1431[label="0.0740741;2pkt 2fpkt"];
988--1487[label="0.307692;4pkt 4fpkt"];
988--1633[label="0.00469484;1pkt 1fpkt"];
988--1847[label="0.2;1pkt 1fpkt"];
988--2198[label="0.00469484;1pkt 1fpkt"];
988--2318[label="0.00469484;1pkt 1fpkt"];
988--2328[label="0.0422535;9pkt 9fpkt"];
988--2570[label="0.214286;9pkt 9fpkt"];
988--3175[label="0.00469484;1pkt 1fpkt"];
988--3413[label="0.9;36pkt 36fpkt"];
988--4049[label="0.00469484;1pkt 1fpkt"];
988--4155[label="0.897436;35pkt 35fpkt"];
988--4486[label="0.9;36pkt 36fpkt"];
1000--3607[label="1;47pkt 47fpkt"];
1487--1664[label="0.307692;4pkt 4fpkt"];
1487--2206[label="0.0769231;1pkt 1fpkt"];
1487--2570[label="1;13pkt 13fpkt"];
1664--1781[label="0.027027;1pkt 1fpkt"];
1664--2242[label="0.027027;1pkt 1fpkt"];
1664--2327[label="0.027027;1pkt 1fpkt"];
1664--2328[label="0.0540541;2pkt 2fpkt"];
1664--2570[label="0.108108;4pkt 4fpkt"];
1664--3125[label="0.0540541;2pkt 2fpkt"];
1664--3403[label="0.4;4pkt 4fpkt"];
1664--4025[label="0.027027;1pkt 1fpkt"];
1936--2006[label="0.903226;56pkt 56fpkt"];
1936--2328[label="0.129032;8pkt 8fpkt"];
1936--3607[label="1;62pkt 62fpkt"];
2006--2328[label="0.155556;21pkt 21fpkt"];
2006--3571[label="0.0625;4pkt 4fpkt"];
2006--3607[label="0.478632;56pkt 56fpkt"];
2893--3925[label="1;1pkt 1fpkt"];
2893--4396[label="1;1pkt 1fpkt"];
3413--4155[label="1;39pkt 39fpkt"];
3413--4486[label="1;40pkt 40fpkt"];
3441--4168[label="1;1pkt 1fpkt"];
3441--4490[label="1;1pkt 1fpkt"];
3925--4396[label="1;1pkt 1fpkt"];
4155--4486[label="1;39pkt 39fpkt"];
4168--4490[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="142.109.194.233"/>
      <filter dst_ip="144.147.227.228" dst_port="80"/>
      <filter dst_ip="144.147.232.135" dst_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24161,1.96666,002,1 1 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_699{
style=filled;
color=gray75;
362[label="196.184.3.200s;217pkt 217fpkt", shape=rectangle, color=red];
557[label="196.184.3.200s;65pkt 65fpkt", shape=ellipse, color=green];
3452[label="196.184.3.200;217pkt 217fpkt", shape=pentagon, color=darkviolet];
4171[label="196.184.3.200;216pkt 216fpkt", shape=invtriangle, color=brown];
4491[label="196.184.3.200;217pkt 217fpkt", shape=invhouse, color=bisque];
stat699[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.184.3.200:1024, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
362--557[label="1;65pkt 65fpkt"];
362--947[label="0.0114943;1pkt 1fpkt"];
362--3452[label="1;217pkt 217fpkt"];
362--4171[label="1;216pkt 216fpkt"];
362--4491[label="1;217pkt 217fpkt"];
557--947[label="0.0153846;1pkt 1fpkt"];
557--3452[label="1;65pkt 65fpkt"];
557--4171[label="0.984615;64pkt 64fpkt"];
557--4491[label="1;65pkt 65fpkt"];
3452--4171[label="1;216pkt 216fpkt"];
3452--4491[label="1;217pkt 217fpkt"];
4171--4491[label="1;216pkt 216fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.184.3.200" src_port="1024"/>
    </slice>
    <from sec="1057554170" usec="0"/>
    <to sec="1057554205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
3455[label="34.7.71.200;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4173[label="34.7.71.200;1pkt 1fpkt", shape=invtriangle, color=brown];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.7.71.200:80, 210.101.194.55:33389}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33389: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3455--4173[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.101.194.55" dst_port="33389" src_ip="34.7.71.200" src_port="80"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_701{
style=filled;
color=gray75;
3457[label="213.110.4.201;123pkt 123fpkt", shape=pentagon, color=darkviolet];
4175[label="213.110.4.201;122pkt 122fpkt", shape=invtriangle, color=brown];
4493[label="213.110.4.201;123pkt 123fpkt", shape=invhouse, color=bisque];
stat701[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.110.4.201:22589, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22589: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3457--4175[label="1;122pkt 122fpkt"];
3457--4493[label="1;123pkt 123fpkt"];
4175--4493[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.110.4.201" src_port="22589"/>
    </slice>
    <from sec="1057554699" usec="0"/>
    <to sec="1057554719" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_703{
style=filled;
color=gray75;
3468[label="213.7.197.202;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4181[label="213.7.197.202;1pkt 1fpkt", shape=invtriangle, color=brown];
stat703[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.197.202:1863, 172.73.64.15:3715}[50%]&lt;BR/&gt;{213.7.197.202:1863, 144.147.204.142:3744}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3715: (33.3333%)&lt;BR/&gt; 3744: (16.6667%)&gt;];
}
3468--4181[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.204.142" dst_port="3744" src_ip="213.7.197.202" src_port="1863"/>
      <filter dst_ip="172.73.64.15" dst_port="3715" src_ip="213.7.197.202" src_port="1863"/>
    </slice>
    <from sec="1057554005" usec="0"/>
    <to sec="1057554879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26314,1.92327,503,1 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_704{
style=filled;
color=gray75;
430[label="33.74.38.83s;1pkt 1fpkt", shape=rectangle, color=red];
748[label="135.232.81.225;d;57pkt 57fpkt", shape=diamond, color=yellow];
749[label="202.2.166.65;s;48pkt 48fpkt", shape=diamond, color=yellow];
1389[label="172.73.232.88;d;129pkt 129fpkt", shape=diamond, color=yellow];
1565[label="135.232.86.132;d;206pkt 206fpkt", shape=diamond, color=yellow];
1597[label="202.2.166.68;s;42pkt 42fpkt", shape=diamond, color=yellow];
1740[label="34.209.98.235;s;55pkt 55fpkt", shape=diamond, color=yellow];
2094[label="202.2.166.65;s;48pkt 48fpkt", shape=hexagon, color=black];
2181[label="202.2.166.68;s;31pkt 31fpkt", shape=hexagon, color=black];
2276[label="34.209.98.235;s;55pkt 55fpkt", shape=hexagon, color=black];
2351[label="34.169.190.0;36pkt 36fpkt", shape=pentagon, color=darkviolet];
2421[label="216.110.8.10;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2767[label="202.2.166.68;41pkt 41fpkt", shape=pentagon, color=darkviolet];
2828[label="202.2.166.80;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2837[label="202.2.166.81;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3474[label="198.128.99.203;129pkt 129fpkt", shape=pentagon, color=darkviolet];
3618[label="34.209.98.235;78pkt 78fpkt", shape=pentagon, color=darkviolet];
3659[label="32.124.147.249;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3898[label="202.2.166.80;13pkt 13fpkt", shape=invtriangle, color=brown];
4185[label="198.128.99.203;128pkt 128fpkt", shape=invtriangle, color=brown];
4266[label="32.124.147.249;2pkt 2fpkt", shape=invtriangle, color=brown];
4383[label="202.2.166.80;13pkt 13fpkt", shape=invhouse, color=bisque];
4497[label="198.128.99.203;128pkt 128fpkt", shape=invhouse, color=bisque];
4532[label="32.124.147.249;2pkt 2fpkt", shape=invhouse, color=bisque];
stat704[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 172.73.232.88:*}[26.0956%]&lt;BR/&gt;{198.128.99.203:80, 135.232.86.132:*}[24.1036%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6911%)&lt;BR/&gt; 1986: (0.19305%)&lt;BR/&gt; 1917: (0.19305%)&lt;BR/&gt; 2127: (0.15444%)&lt;BR/&gt; 2126: (0.15444%)&gt;];
}
430--748[label="1;1pkt 1fpkt"];
430--2837[label="1;1pkt 1fpkt"];
748--749[label="0.291667;14pkt 14fpkt"];
748--2094[label="0.291667;14pkt 14fpkt"];
748--2837[label="0.771429;27pkt 27fpkt"];
749--1389[label="0.708333;34pkt 34fpkt"];
749--2094[label="1;48pkt 48fpkt"];
1389--1440[label="0.0542636;7pkt 7fpkt"];
1389--1597[label="0.857143;36pkt 36fpkt"];
1389--1711[label="0.272727;3pkt 3fpkt"];
1389--2094[label="0.708333;34pkt 34fpkt"];
1389--2181[label="0.870968;27pkt 27fpkt"];
1389--2767[label="0.878049;36pkt 36fpkt"];
1389--2828[label="0.428571;6pkt 6fpkt"];
1389--2837[label="0.0857143;3pkt 3fpkt"];
1389--3898[label="0.461538;6pkt 6fpkt"];
1389--4383[label="0.461538;6pkt 6fpkt"];
1565--1580[label="0.0114943;1pkt 1fpkt"];
1565--1597[label="0.142857;6pkt 6fpkt"];
1565--1740[label="1;55pkt 55fpkt"];
1565--2181[label="0.129032;4pkt 4fpkt"];
1565--2276[label="1;55pkt 55fpkt"];
1565--2351[label="0.0833333;3pkt 3fpkt"];
1565--2421[label="1;2pkt 2fpkt"];
1565--2767[label="0.121951;5pkt 5fpkt"];
1565--2828[label="0.142857;2pkt 2fpkt"];
1565--2837[label="0.0857143;3pkt 3fpkt"];
1565--3288[label="0.010989;1pkt 1fpkt"];
1565--3474[label="0.651163;84pkt 84fpkt"];
1565--3618[label="0.705128;55pkt 55fpkt"];
1565--3659[label="0.5;1pkt 1fpkt"];
1565--3898[label="0.153846;2pkt 2fpkt"];
1565--4104[label="0.010989;1pkt 1fpkt"];
1565--4185[label="0.65625;84pkt 84fpkt"];
1565--4266[label="0.5;1pkt 1fpkt"];
1565--4383[label="0.153846;2pkt 2fpkt"];
1565--4461[label="0.010989;1pkt 1fpkt"];
1565--4497[label="0.65625;84pkt 84fpkt"];
1565--4532[label="0.5;1pkt 1fpkt"];
1597--2181[label="1;31pkt 31fpkt"];
1597--2767[label="1;41pkt 41fpkt"];
1740--2276[label="1;55pkt 55fpkt"];
1740--3618[label="1;55pkt 55fpkt"];
2181--2767[label="0.967742;30pkt 30fpkt"];
2276--3618[label="1;55pkt 55fpkt"];
2828--3898[label="1;13pkt 13fpkt"];
2828--4383[label="1;13pkt 13fpkt"];
3474--4185[label="1;128pkt 128fpkt"];
3474--4497[label="1;128pkt 128fpkt"];
3659--4266[label="1;2pkt 2fpkt"];
3659--4532[label="1;2pkt 2fpkt"];
3898--4383[label="1;13pkt 13fpkt"];
4185--4497[label="1;128pkt 128fpkt"];
4266--4532[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.73.232.88" src_port="80"/>
      <filter dst_ip="135.232.86.132" src_ip="198.128.99.203" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_705{
style=filled;
color=gray75;
3478[label="192.107.22.204;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4187[label="192.107.22.204;11pkt 11fpkt", shape=invtriangle, color=brown];
stat705[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.107.22.204:80, 150.9.102.20:*}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6522%)&lt;BR/&gt; 0: (8.69565%)&lt;BR/&gt; 4934: (4.34783%)&lt;BR/&gt; 4933: (4.34783%)&lt;BR/&gt; 4932: (4.34783%)&gt;];
}
3478--4187[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.102.20" src_ip="192.107.22.204" src_port="80"/>
    </slice>
    <from sec="1057554710" usec="0"/>
    <to sec="1057554758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_706{
style=filled;
color=gray75;
3481[label="218.136.8.205;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4188[label="218.136.8.205;3pkt 3fpkt", shape=invtriangle, color=brown];
4498[label="218.136.8.205;3pkt 3fpkt", shape=invhouse, color=bisque];
stat706[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.136.8.205:53, 172.16.1.5:1031}[33.3333%]&lt;BR/&gt;{218.136.8.205:53, 10.2.24.21:2837}[33.3333%]&lt;BR/&gt;{218.136.8.205:53, 192.168.11.203:1429}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 2837: (16.6667%)&lt;BR/&gt; 1429: (16.6667%)&lt;BR/&gt; 1031: (16.6667%)&gt;];
}
3481--4188[label="1;3pkt 3fpkt"];
3481--4498[label="1;3pkt 3fpkt"];
4188--4498[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.11.203" dst_port="1429" src_ip="218.136.8.205" src_port="53"/>
      <filter dst_ip="10.2.24.21" dst_port="2837" src_ip="218.136.8.205" src_port="53"/>
      <filter dst_ip="172.16.1.5" dst_port="1031" src_ip="218.136.8.205" src_port="53"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_707{
style=filled;
color=gray75;
3494[label="197.117.214.207;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4194[label="197.117.214.207;1pkt 1fpkt", shape=invtriangle, color=brown];
stat707[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.117.214.207:2697, 144.147.212.35:8000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 2697: (50%)&gt;];
}
3494--4194[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.212.35" dst_port="8000" src_ip="197.117.214.207" src_port="2697"/>
    </slice>
    <from sec="1057554106" usec="0"/>
    <to sec="1057554159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20307,1.96037,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_708{
style=filled;
color=gray75;
719[label="211.90.45.161;d;469pkt 469fpkt", shape=diamond, color=yellow];
750[label="205.102.191.177;s;1pkt 1fpkt", shape=diamond, color=yellow];
893[label="150.9.86.20;d;42pkt 42fpkt", shape=diamond, color=yellow];
1056[label="213.142.93.144;s;1pkt 1fpkt", shape=diamond, color=yellow];
1158[label="215.126.97.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
1387[label="216.53.18.96;s;17pkt 17fpkt", shape=diamond, color=yellow];
2001[label="205.102.191.177;s;1pkt 1fpkt", shape=hexagon, color=black];
2432[label="215.126.97.11;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2693[label="211.10.10.55;23pkt 23fpkt", shape=pentagon, color=darkviolet];
2873[label="217.0.118.87;56pkt 56fpkt", shape=pentagon, color=darkviolet];
2911[label="216.53.18.96;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2996[label="202.39.236.112;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3155[label="34.48.84.140;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3162[label="202.129.64.141;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3354[label="192.113.34.183;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3461[label="34.36.160.201;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3496[label="211.8.104.208;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3836[label="211.10.10.55;23pkt 23fpkt", shape=invtriangle, color=brown];
3968[label="202.39.236.112;36pkt 36fpkt", shape=invtriangle, color=brown];
4122[label="205.102.191.177;1pkt 1fpkt", shape=invtriangle, color=brown];
4176[label="34.36.160.201;1pkt 1fpkt", shape=invtriangle, color=brown];
4195[label="211.8.104.208;5pkt 5fpkt", shape=invtriangle, color=brown];
4469[label="205.102.191.177;1pkt 1fpkt", shape=invhouse, color=bisque];
stat708[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 211.90.45.161:*}[85.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4845%)&lt;BR/&gt; 28290: (0.386598%)&lt;BR/&gt; 1200: (0.322165%)&lt;BR/&gt; 1657: (0.257732%)&lt;BR/&gt; 4841: (0.193299%)&gt;];
}
719--724[label="0.00749064;2pkt 2fpkt"];
719--780[label="0.00426439;2pkt 2fpkt"];
719--786[label="0.1;1pkt 1fpkt"];
719--794[label="0.060241;5pkt 5fpkt"];
719--817[label="0.125;1pkt 1fpkt"];
719--879[label="0.0327869;2pkt 2fpkt"];
719--895[label="0.00215054;1pkt 1fpkt"];
719--981[label="0.0273973;2pkt 2fpkt"];
719--998[label="0.00921659;2pkt 2fpkt"];
719--1056[label="1;1pkt 1fpkt"];
719--1158[label="1;1pkt 1fpkt"];
719--1166[label="0.0137457;4pkt 4fpkt"];
719--1319[label="0.00259067;1pkt 1fpkt"];
719--1355[label="0.057377;7pkt 7fpkt"];
719--1387[label="0.941176;16pkt 16fpkt"];
719--1408[label="0.027027;1pkt 1fpkt"];
719--1434[label="0.0060241;1pkt 1fpkt"];
719--1462[label="0.0138889;1pkt 1fpkt"];
719--1526[label="0.0377358;2pkt 2fpkt"];
719--1561[label="0.00689655;1pkt 1fpkt"];
719--1665[label="0.0266667;2pkt 2fpkt"];
719--1670[label="0.0263158;1pkt 1fpkt"];
719--1691[label="0.0188679;1pkt 1fpkt"];
719--1775[label="0.0142857;1pkt 1fpkt"];
719--1791[label="0.0344828;1pkt 1fpkt"];
719--1797[label="0.0666667;3pkt 3fpkt"];
719--1903[label="0.0181818;2pkt 2fpkt"];
719--2045[label="0.060241;5pkt 5fpkt"];
719--2050[label="0.00413223;1pkt 1fpkt"];
719--2163[label="0.0377358;2pkt 2fpkt"];
719--2168[label="0.00689655;1pkt 1fpkt"];
719--2219[label="0.166667;1pkt 1fpkt"];
719--2248[label="0.0060241;1pkt 1fpkt"];
719--2261[label="0.0138889;1pkt 1fpkt"];
719--2262[label="0.057377;7pkt 7fpkt"];
719--2272[label="0.1;1pkt 1fpkt"];
719--2382[label="0.0212766;1pkt 1fpkt"];
719--2384[label="0.0416667;1pkt 1fpkt"];
719--2432[label="1;1pkt 1fpkt"];
719--2440[label="0.0168539;3pkt 3fpkt"];
719--2491[label="0.025;2pkt 2fpkt"];
719--2493[label="0.0434783;1pkt 1fpkt"];
719--2500[label="0.0188679;1pkt 1fpkt"];
719--2550[label="0.0555556;1pkt 1fpkt"];
719--2628[label="0.0909091;1pkt 1fpkt"];
719--2693[label="0.826087;19pkt 19fpkt"];
719--2732[label="0.025974;2pkt 2fpkt"];
719--2736[label="0.00564972;1pkt 1fpkt"];
719--2769[label="0.0833333;1pkt 1fpkt"];
719--2781[label="0.0666667;1pkt 1fpkt"];
719--2819[label="0.0175439;1pkt 1fpkt"];
719--2830[label="0.0178571;1pkt 1fpkt"];
719--2860[label="0.0263158;1pkt 1fpkt"];
719--2873[label="0.660714;37pkt 37fpkt"];
719--2911[label="0.941176;16pkt 16fpkt"];
719--2918[label="0.0135135;1pkt 1fpkt"];
719--2940[label="0.0609756;5pkt 5fpkt"];
719--3079[label="0.142857;5pkt 5fpkt"];
719--3083[label="0.0294118;1pkt 1fpkt"];
719--3155[label="0.571429;4pkt 4fpkt"];
719--3162[label="0.896552;26pkt 26fpkt"];
719--3204[label="0.166667;1pkt 1fpkt"];
719--3226[label="0.0377358;2pkt 2fpkt"];
719--3354[label="1;2pkt 2fpkt"];
719--3360[label="0.0666667;3pkt 3fpkt"];
719--3381[label="0.111111;1pkt 1fpkt"];
719--3427[label="0.027027;2pkt 2fpkt"];
719--3434[label="0.0526316;3pkt 3fpkt"];
719--3435[label="0.0526316;1pkt 1fpkt"];
719--3459[label="0.011236;1pkt 1fpkt"];
719--3461[label="1;1pkt 1fpkt"];
719--3496[label="0.2;1pkt 1fpkt"];
719--3499[label="0.0277778;1pkt 1fpkt"];
719--3511[label="0.0392157;2pkt 2fpkt"];
719--3522[label="0.010101;1pkt 1fpkt"];
719--3563[label="0.333333;4pkt 4fpkt"];
719--3564[label="0.0135135;1pkt 1fpkt"];
719--3572[label="0.0434783;1pkt 1fpkt"];
719--3587[label="0.1;1pkt 1fpkt"];
719--3594[label="0.0588235;1pkt 1fpkt"];
719--3608[label="0.125;1pkt 1fpkt"];
719--3740[label="0.025;2pkt 2fpkt"];
719--3767[label="0.0555556;1pkt 1fpkt"];
719--3805[label="0.0909091;1pkt 1fpkt"];
719--3836[label="0.826087;19pkt 19fpkt"];
719--3855[label="0.025974;2pkt 2fpkt"];
719--3858[label="0.00568182;1pkt 1fpkt"];
719--3872[label="0.0833333;1pkt 1fpkt"];
719--3879[label="0.0666667;1pkt 1fpkt"];
719--3894[label="0.0175439;1pkt 1fpkt"];
719--3900[label="0.0178571;1pkt 1fpkt"];
719--3913[label="0.027027;1pkt 1fpkt"];
719--4133[label="0.0681818;3pkt 3fpkt"];
719--4166[label="0.0555556;1pkt 1fpkt"];
719--4176[label="1;1pkt 1fpkt"];
719--4195[label="0.2;1pkt 1fpkt"];
719--4204[label="0.04;2pkt 2fpkt"];
719--4211[label="0.010101;1pkt 1fpkt"];
719--4238[label="0.1;1pkt 1fpkt"];
719--4308[label="0.142857;1pkt 1fpkt"];
719--4379[label="0.0175439;1pkt 1fpkt"];
719--4399[label="0.0609756;5pkt 5fpkt"];
750--893[label="1;1pkt 1fpkt"];
750--2001[label="1;1pkt 1fpkt"];
750--4122[label="1;1pkt 1fpkt"];
750--4469[label="1;1pkt 1fpkt"];
893--895[label="0.0238095;1pkt 1fpkt"];
893--1229[label="0.166667;7pkt 7fpkt"];
893--1322[label="0.0714286;3pkt 3fpkt"];
893--1682[label="0.047619;2pkt 2fpkt"];
893--1701[label="0.242424;8pkt 8fpkt"];
893--2001[label="1;1pkt 1fpkt"];
893--2052[label="0.0714286;3pkt 3fpkt"];
893--2225[label="0.047619;2pkt 2fpkt"];
893--2763[label="0.166667;7pkt 7fpkt"];
893--2996[label="0.111111;4pkt 4fpkt"];
893--3496[label="0.4;2pkt 2fpkt"];
893--3968[label="0.111111;4pkt 4fpkt"];
893--4122[label="1;1pkt 1fpkt"];
893--4195[label="0.4;2pkt 2fpkt"];
893--4340[label="0.0714286;3pkt 3fpkt"];
893--4469[label="1;1pkt 1fpkt"];
1158--2432[label="1;1pkt 1fpkt"];
1387--2911[label="1;17pkt 17fpkt"];
2001--4122[label="1;1pkt 1fpkt"];
2001--4469[label="1;1pkt 1fpkt"];
2693--3836[label="1;23pkt 23fpkt"];
2996--3968[label="1;36pkt 36fpkt"];
3461--4176[label="1;1pkt 1fpkt"];
3496--4195[label="1;5pkt 5fpkt"];
4122--4469[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.90.45.161" src_port="80"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
3507[label="213.7.197.210;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4203[label="213.7.197.210;12pkt 12fpkt", shape=invtriangle, color=brown];
4502[label="213.7.197.210;12pkt 12fpkt", shape=invhouse, color=bisque];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.7.197.210:1863, 144.147.202.164:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4777: (4.16667%)&lt;BR/&gt; 4631: (4.16667%)&lt;BR/&gt; 4612: (4.16667%)&lt;BR/&gt; 2678: (4.16667%)&gt;];
}
3507--4203[label="1;12pkt 12fpkt"];
3507--4502[label="1;12pkt 12fpkt"];
4203--4502[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="144.147.202.164" src_ip="213.7.197.210" src_port="1863"/>
    </slice>
    <from sec="1057554028" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.196.49.214"/>
    </slice>
    <from sec="1057554003" usec="0"/>
    <to sec="1057554898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987512,1.97316,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
997[label="150.8.23.85;d;97pkt 97fpkt", shape=diamond, color=yellow];
2636[label="202.48.206.42;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3526[label="140.181.211.214;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4213[label="140.181.211.214;24pkt 24fpkt", shape=invtriangle, color=brown];
4507[label="140.181.211.214;23pkt 23fpkt", shape=invhouse, color=bisque];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.181.211.214:80, 150.8.23.85:*}[23.301%]&lt;BR/&gt;{202.48.206.42:80, 150.8.23.85:*}[22.3301%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6842%)&lt;BR/&gt; 443: (1.31579%)&lt;BR/&gt; 1256: (1.05263%)&lt;BR/&gt; 1237: (1.05263%)&lt;BR/&gt; 1236: (1.05263%)&gt;];
}
997--1316[label="0.0206186;2pkt 2fpkt"];
997--1462[label="0.0138889;1pkt 1fpkt"];
997--1779[label="0.0927835;9pkt 9fpkt"];
997--2261[label="0.0138889;1pkt 1fpkt"];
997--2636[label="0.727273;16pkt 16fpkt"];
997--3277[label="0.0412371;4pkt 4fpkt"];
997--3526[label="1;24pkt 24fpkt"];
997--3540[label="0.0206186;2pkt 2fpkt"];
997--3564[label="0.0135135;1pkt 1fpkt"];
997--4213[label="1;24pkt 24fpkt"];
997--4507[label="1;23pkt 23fpkt"];
3526--4213[label="1;24pkt 24fpkt"];
3526--4507[label="1;23pkt 23fpkt"];
4213--4507[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.23.85" src_ip="140.181.211.214" src_port="80"/>
      <filter dst_ip="150.8.23.85" src_ip="202.48.206.42" src_port="80"/>
    </slice>
    <from sec="1057554008" usec="0"/>
    <to sec="1057554896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_712{
style=filled;
color=gray75;
3532[label="201.146.66.215;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4215[label="201.146.66.215;2pkt 2fpkt", shape=invtriangle, color=brown];
stat712[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.146.66.215:3064, 144.34.175.110:1434}[50%]&lt;BR/&gt;{201.146.66.215:3064, 144.129.0.128:1434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3064: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
3532--4215[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.129.0.128" dst_port="1434" src_ip="201.146.66.215" src_port="3064"/>
      <filter dst_ip="144.34.175.110" dst_port="1434" src_ip="201.146.66.215" src_port="3064"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987512,1.97316,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_713{
style=filled;
color=gray75;
1068[label="211.198.172.124;s;1390pkt 1390fpkt", shape=diamond, color=yellow];
1145[label="211.80.103.209;d;15pkt 15fpkt", shape=diamond, color=yellow];
1731[label="211.195.181.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
3561[label="32.81.11.222;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4226[label="32.81.11.222;18pkt 18fpkt", shape=invtriangle, color=brown];
4513[label="32.81.11.222;18pkt 18fpkt", shape=invhouse, color=bisque];
stat713[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.198.172.124:1032, *:1434}[97.9563%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (47.637%)&lt;BR/&gt; 1032: (47.637%)&lt;BR/&gt; 80: (2.32877%)&lt;BR/&gt; 1173: (0.136986%)&lt;BR/&gt; 1172: (0.136986%)&gt;];
}
1068--1145[label="0.0666667;1pkt 1fpkt"];
1068--1541[label="0.011236;1pkt 1fpkt"];
1068--2331[label="0.0618705;86pkt 86fpkt"];
1145--1731[label="1;1pkt 1fpkt"];
1145--3561[label="0.2;3pkt 3fpkt"];
1145--3598[label="0.0666667;1pkt 1fpkt"];
1145--4226[label="0.2;3pkt 3fpkt"];
1145--4513[label="0.2;3pkt 3fpkt"];
3561--4226[label="1;18pkt 18fpkt"];
3561--4513[label="1;18pkt 18fpkt"];
4226--4513[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="211.198.172.124" src_port="1032"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
3565[label="202.205.236.222;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4228[label="202.205.236.222;2pkt 2fpkt", shape=invtriangle, color=brown];
4514[label="202.205.236.222;2pkt 2fpkt", shape=invhouse, color=bisque];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.205.236.222:80, 211.90.46.4:2262}[50%]&lt;BR/&gt;{202.205.236.222:80, 168.253.117.80:2901}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2901: (25%)&lt;BR/&gt; 2262: (25%)&gt;];
}
3565--4228[label="1;2pkt 2fpkt"];
3565--4514[label="1;2pkt 2fpkt"];
4228--4514[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.253.117.80" dst_port="2901" src_ip="202.205.236.222" src_port="80"/>
      <filter dst_ip="211.90.46.4" dst_port="2262" src_ip="202.205.236.222" src_port="80"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_715{
style=filled;
color=gray75;
3590[label="208.73.93.229;253pkt 253fpkt", shape=pentagon, color=darkviolet];
4239[label="208.73.93.229;253pkt 253fpkt", shape=invtriangle, color=brown];
stat715[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.73.93.229:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3590--4239[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.73.93.229" src_port="1027"/>
    </slice>
    <from sec="1057554841" usec="0"/>
    <to sec="1057554860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_716{
style=filled;
color=gray75;
3636[label="216.164.226.238;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4256[label="216.164.226.238;13pkt 13fpkt", shape=invtriangle, color=brown];
stat716[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.164.226.238:80, 144.34.62.248:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.2963%)&lt;BR/&gt; 0: (7.40741%)&lt;BR/&gt; 4934: (3.7037%)&lt;BR/&gt; 4302: (3.7037%)&lt;BR/&gt; 4301: (3.7037%)&gt;];
}
3636--4256[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="144.34.62.248" src_ip="216.164.226.238" src_port="80"/>
    </slice>
    <from sec="1057554578" usec="0"/>
    <to sec="1057554786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854967,2.01746,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_717{
style=filled;
color=gray75;
3646[label="211.124.13.244;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4259[label="211.124.13.244;4pkt 4fpkt", shape=invtriangle, color=brown];
4529[label="211.124.13.244;5pkt 5fpkt", shape=invhouse, color=bisque];
stat717[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.124.13.244:80, 150.8.44.27:4173}[20%]&lt;BR/&gt;{211.124.13.244:80, 150.8.44.27:4174}[20%]&lt;BR/&gt;{211.124.13.244:80, 150.8.44.27:4175}[20%]&lt;BR/&gt;{211.124.13.244:80, 150.8.44.27:4176}[20%]&lt;BR/&gt;{211.124.13.244:80, 150.8.44.27:4185}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4185: (10.7143%)&lt;BR/&gt; 4176: (10.7143%)&lt;BR/&gt; 4175: (10.7143%)&lt;BR/&gt; 4174: (10.7143%)&gt;];
}
3646--4259[label="1;4pkt 4fpkt"];
3646--4529[label="1;5pkt 5fpkt"];
4259--4529[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.44.27" dst_port="4185" src_ip="211.124.13.244" src_port="80"/>
      <filter dst_ip="150.8.44.27" dst_port="4176" src_ip="211.124.13.244" src_port="80"/>
      <filter dst_ip="150.8.44.27" dst_port="4175" src_ip="211.124.13.244" src_port="80"/>
      <filter dst_ip="150.8.44.27" dst_port="4174" src_ip="211.124.13.244" src_port="80"/>
      <filter dst_ip="150.8.44.27" dst_port="4173" src_ip="211.124.13.244" src_port="80"/>
    </slice>
    <from sec="1057554478" usec="0"/>
    <to sec="1057554530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_718{
style=filled;
color=gray75;
3650[label="192.38.144.244;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4262[label="192.38.144.244;2pkt 2fpkt", shape=invtriangle, color=brown];
stat718[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.38.144.244:80, 211.80.112.132:3363}[50%]&lt;BR/&gt;{192.38.144.244:80, 211.80.112.132:3364}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3364: (25%)&lt;BR/&gt; 3363: (25%)&gt;];
}
3650--4262[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.80.112.132" dst_port="3364" src_ip="192.38.144.244" src_port="80"/>
      <filter dst_ip="211.80.112.132" dst_port="3363" src_ip="192.38.144.244" src_port="80"/>
    </slice>
    <from sec="1057554001" usec="0"/>
    <to sec="1057554813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_720{
style=filled;
color=gray75;
3671[label="211.198.24.253;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4270[label="211.198.24.253;8pkt 8fpkt", shape=invtriangle, color=brown];
stat720[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.198.24.253:80, 150.8.36.20:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3291: (6.25%)&lt;BR/&gt; 3290: (6.25%)&lt;BR/&gt; 3289: (6.25%)&lt;BR/&gt; 3288: (6.25%)&gt;];
}
3671--4270[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.36.20" src_ip="211.198.24.253" src_port="80"/>
    </slice>
    <from sec="1057554024" usec="0"/>
    <to sec="1057554366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568008,2.01858,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_721{
style=filled;
color=gray75;
3672[label="202.76.143.253;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4271[label="202.76.143.253;34pkt 34fpkt", shape=invtriangle, color=brown];
stat721[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.76.143.253:80, 150.9.102.84:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3899: (1.47059%)&lt;BR/&gt; 3898: (1.47059%)&lt;BR/&gt; 3897: (1.47059%)&lt;BR/&gt; 3896: (1.47059%)&gt;];
}
3672--4271[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="150.9.102.84" src_ip="202.76.143.253" src_port="80"/>
    </slice>
    <from sec="1057554047" usec="0"/>
    <to sec="1057554127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.629448,2.06405,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.196.203.253"/>
    </slice>
    <from sec="1057554007" usec="0"/>
    <to sec="1057554898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808403,2.08918,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.44.100.1"/>
    </slice>
    <from sec="1057554284" usec="0"/>
    <to sec="1057554296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808403,2.08918,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.195.181.20"/>
    </slice>
    <from sec="1057554649" usec="0"/>
    <to sec="1057554686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808403,2.08918,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.7.2.46"/>
    </slice>
    <from sec="1057554671" usec="0"/>
    <to sec="1057554899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808403,2.08918,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="104.232.63.63"/>
    </slice>
    <from sec="1057554798" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808403,2.08918,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.11.21.73"/>
    </slice>
    <from sec="1057554600" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808403,2.08918,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="86.192.9.88"/>
    </slice>
    <from sec="1057554761" usec="0"/>
    <to sec="1057554900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808403,2.08918,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.7.198.105"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808403,2.08918,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.80.130.108"/>
    </slice>
    <from sec="1057554212" usec="0"/>
    <to sec="1057554888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808403,2.08918,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="86.192.1.115"/>
    </slice>
    <from sec="1057554900" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808403,2.08918,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="134.30.73.116"/>
    </slice>
    <from sec="1057554060" usec="0"/>
    <to sec="1057554141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808403,2.08918,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.14.112.130"/>
    </slice>
    <from sec="1057554003" usec="0"/>
    <to sec="1057554885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808403,2.08918,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.196.124.138"/>
    </slice>
    <from sec="1057554006" usec="0"/>
    <to sec="1057554168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808403,2.08918,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="104.189.100.165"/>
    </slice>
    <from sec="1057554782" usec="0"/>
    <to sec="1057554886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808403,2.08918,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="104.0.128.182"/>
    </slice>
    <from sec="1057554006" usec="0"/>
    <to sec="1057554507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20307,1.96037,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_737{
style=filled;
color=gray75;
914[label="172.73.235.138;d;1pkt 1fpkt", shape=diamond, color=yellow];
915[label="201.208.152.210;s;1pkt 1fpkt", shape=diamond, color=yellow];
2148[label="172.73.235.138;d;1pkt 1fpkt", shape=hexagon, color=black];
3505[label="201.208.152.210;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4201[label="201.208.152.210;2pkt 2fpkt", shape=invtriangle, color=brown];
4500[label="201.208.152.210;1pkt 1fpkt", shape=invhouse, color=bisque];
stat737[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.208.152.210:6100, 172.73.232.12:1156}[50%]&lt;BR/&gt;{201.208.152.210:6100, 172.73.235.138:1461}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6100: (50%)&lt;BR/&gt; 1461: (28.5714%)&lt;BR/&gt; 1156: (21.4286%)&gt;];
}
914--915[label="1;1pkt 1fpkt"];
914--2148[label="1;1pkt 1fpkt"];
914--4201[label="1;1pkt 1fpkt"];
915--2148[label="1;1pkt 1fpkt"];
915--4201[label="1;1pkt 1fpkt"];
2148--4201[label="1;1pkt 1fpkt"];
3505--4201[label="1;1pkt 1fpkt"];
3505--4500[label="1;1pkt 1fpkt"];
4201--4500[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.73.235.138" dst_port="1461" src_ip="201.208.152.210" src_port="6100"/>
      <filter dst_ip="172.73.232.12" dst_port="1156" src_ip="201.208.152.210" src_port="6100"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.808403,2.08918,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.196.49.214"/>
    </slice>
    <from sec="1057554003" usec="0"/>
    <to sec="1057554898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987512,1.97316,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_739{
style=filled;
color=gray75;
931[label="211.90.11.30;d;17pkt 17fpkt", shape=diamond, color=yellow];
2554[label="218.93.107.30;52pkt 52fpkt", shape=pentagon, color=darkviolet];
2637[label="32.131.253.42;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3087[label="218.88.120.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4012[label="218.88.120.131;1pkt 1fpkt", shape=invtriangle, color=brown];
4427[label="218.88.120.131;1pkt 1fpkt", shape=invhouse, color=bisque];
stat739[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.93.107.30:53, 150.8.133.0:*}[27.9412%]&lt;BR/&gt;{*:0, 211.90.11.30:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (37.6712%)&lt;BR/&gt; 0: (30.137%)&lt;BR/&gt; 1024: (2.73973%)&lt;BR/&gt; 62932: (0.684932%)&lt;BR/&gt; 54623: (0.684932%)&gt;];
}
931--2554[label="0.0588235;1pkt 1fpkt"];
931--2628[label="0.0909091;1pkt 1fpkt"];
931--2634[label="0.0833333;1pkt 1fpkt"];
931--2637[label="1;1pkt 1fpkt"];
931--3087[label="1;1pkt 1fpkt"];
931--3574[label="0.1;1pkt 1fpkt"];
931--3587[label="0.1;1pkt 1fpkt"];
931--3594[label="0.0588235;1pkt 1fpkt"];
931--3614[label="0.0625;1pkt 1fpkt"];
931--3805[label="0.0909091;1pkt 1fpkt"];
931--4012[label="1;1pkt 1fpkt"];
931--4238[label="0.1;1pkt 1fpkt"];
931--4427[label="1;1pkt 1fpkt"];
931--4516[label="0.111111;1pkt 1fpkt"];
3087--4012[label="1;1pkt 1fpkt"];
3087--4427[label="1;1pkt 1fpkt"];
4012--4427[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.8.133.0" src_ip="218.93.107.30" src_port="53"/>
      <filter dst_ip="211.90.11.30"/>
    </slice>
    <from sec="1057554000" usec="0"/>
    <to sec="1057554901" usec="0"/>
  </anomaly>

</admd:annotation>
