<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.16806,1.94877,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1433" proto="tcp" src_ip="6.8.220.230" src_port="80"/>
      <filter dst_port="1433" proto="udp" src_ip="6.8.220.230" src_port="80"/>
      <filter dst_port="1434" proto="tcp" src_ip="6.8.220.230" src_port="80"/>
      <filter dst_port="1434" proto="udp" src_ip="6.8.220.230" src_port="80"/>
      <from sec="1068526800" usec="0"/>
      <to sec="1068527701" usec="0"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.133.7.51" src_port="1029"/>
      <from sec="1068527321" usec="0"/>
      <to sec="1068527323" usec="0"/>
    </slice>
    <from sec="1068527321" usec="0"/>
    <to sec="1068527323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.30.113.56" dst_port="137" proto="tcp" src_ip="198.12.115.82" src_port="63851"/>
      <filter dst_ip="212.30.113.56" dst_port="137" proto="udp" src_ip="198.12.115.82" src_port="63851"/>
      <filter dst_ip="212.30.113.56" dst_port="1863" proto="tcp" src_ip="198.12.115.82" src_port="63851"/>
      <filter dst_ip="212.30.113.56" dst_port="1863" proto="udp" src_ip="198.12.115.82" src_port="63851"/>
      <filter dst_ip="212.30.113.56" dst_port="137" proto="tcp" src_ip="198.12.115.82" src_port="3792"/>
      <filter dst_ip="212.30.113.56" dst_port="137" proto="udp" src_ip="198.12.115.82" src_port="3792"/>
      <filter dst_ip="212.30.113.56" dst_port="1863" proto="tcp" src_ip="198.12.115.82" src_port="3792"/>
      <filter dst_ip="212.30.113.56" dst_port="1863" proto="udp" src_ip="198.12.115.82" src_port="3792"/>
      <from sec="1068527698" usec="0"/>
      <to sec="1068527701" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="212.30.113.56" dst_port="137" proto="tcp" src_ip="146.153.7.82" src_port="63851"/>
      <filter dst_ip="212.30.113.56" dst_port="137" proto="udp" src_ip="146.153.7.82" src_port="63851"/>
      <filter dst_ip="212.30.113.56" dst_port="1863" proto="tcp" src_ip="146.153.7.82" src_port="63851"/>
      <filter dst_ip="212.30.113.56" dst_port="1863" proto="udp" src_ip="146.153.7.82" src_port="63851"/>
      <filter dst_ip="212.30.113.56" dst_port="137" proto="tcp" src_ip="146.153.7.82" src_port="3792"/>
      <filter dst_ip="212.30.113.56" dst_port="137" proto="udp" src_ip="146.153.7.82" src_port="3792"/>
      <filter dst_ip="212.30.113.56" dst_port="1863" proto="tcp" src_ip="146.153.7.82" src_port="3792"/>
      <filter dst_ip="212.30.113.56" dst_port="1863" proto="udp" src_ip="146.153.7.82" src_port="3792"/>
      <from sec="1068527699" usec="0"/>
      <to sec="1068527701" usec="0"/>
    </slice>
    <from sec="1068527698" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="202.133.81.139" src_port="1030"/>
      <filter dst_port="137" proto="udp" src_ip="202.133.81.139" src_port="1030"/>
      <from sec="1068527154" usec="0"/>
      <to sec="1068527162" usec="0"/>
    </slice>
    <from sec="1068527154" usec="0"/>
    <to sec="1068527162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="196.100.156.151" src_port="1028"/>
      <from sec="1068527523" usec="0"/>
      <to sec="1068527530" usec="0"/>
    </slice>
    <from sec="1068527523" usec="0"/>
    <to sec="1068527530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp" src_ip="208.130.13.158"/>
      <from sec="1068526863" usec="0"/>
      <to sec="1068526867" usec="0"/>
    </slice>
    <from sec="1068526863" usec="0"/>
    <to sec="1068526867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.212.195.161" src_port="64051"/>
      <from sec="1068527667" usec="0"/>
      <to sec="1068527674" usec="0"/>
    </slice>
    <from sec="1068527667" usec="0"/>
    <to sec="1068527674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="202.137.224.185" src_port="1028"/>
      <from sec="1068526920" usec="0"/>
      <to sec="1068526923" usec="0"/>
    </slice>
    <from sec="1068526920" usec="0"/>
    <to sec="1068526923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="202.211.215.192" src_port="1029"/>
      <filter dst_port="137" proto="udp" src_ip="202.211.215.192" src_port="1029"/>
      <filter dst_port="80" proto="tcp" src_ip="202.211.215.192" src_port="1029"/>
      <filter dst_port="80" proto="udp" src_ip="202.211.215.192" src_port="1029"/>
      <filter dst_port="137" proto="tcp" src_ip="202.211.215.192" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="202.211.215.192" src_port="1025"/>
      <filter dst_port="80" proto="tcp" src_ip="202.211.215.192" src_port="1025"/>
      <filter dst_port="80" proto="udp" src_ip="202.211.215.192" src_port="1025"/>
      <from sec="1068527587" usec="0"/>
      <to sec="1068527599" usec="0"/>
    </slice>
    <from sec="1068527587" usec="0"/>
    <to sec="1068527599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_14{
style=filled;
color=gray75;
90[label="202.208.36.210s;254pkt 254fpkt", shape=rectangle, color=red];
stat14[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.208.36.210:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
90--1135[label="0.00487805;1pkt 1fpkt"];
90--2105[label="0.00574713;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="202.208.36.210"/>
    </slice>
    <from sec="1068527214" usec="0"/>
    <to sec="1068527218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp" src_ip="208.130.25.182"/>
      <from sec="1068527544" usec="0"/>
      <to sec="1068527549" usec="0"/>
    </slice>
    <from sec="1068527544" usec="0"/>
    <to sec="1068527549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="143.38.237.230" dst_port="135" proto="tcp" src_ip="212.30.113.105" src_port="1863"/>
      <from sec="1068526870" usec="0"/>
      <to sec="1068526874" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="143.38.237.230" dst_port="135" proto="tcp" src_ip="212.30.119.155" src_port="1863"/>
      <from sec="1068526868" usec="0"/>
      <to sec="1068526870" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="143.38.237.230" dst_port="135" proto="tcp" src_ip="213.54.210.92" src_port="1863"/>
      <from sec="1068526871" usec="0"/>
      <to sec="1068526874" usec="0"/>
    </slice>
    <from sec="1068526868" usec="0"/>
    <to sec="1068526874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="1.196.205.12" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="1.196.205.12" src_port="1025"/>
      <filter dst_port="135" proto="tcp" src_ip="1.196.205.12" src_port="1025"/>
      <filter dst_port="135" proto="udp" src_ip="1.196.205.12" src_port="1025"/>
      <filter dst_port="1434" proto="tcp" src_ip="1.196.205.12" src_port="1025"/>
      <filter dst_port="1434" proto="udp" src_ip="1.196.205.12" src_port="1025"/>
      <from sec="1068527664" usec="0"/>
      <to sec="1068527669" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="192.25.179.113" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="192.25.179.113" src_port="1025"/>
      <filter dst_port="135" proto="tcp" src_ip="192.25.179.113" src_port="1025"/>
      <filter dst_port="135" proto="udp" src_ip="192.25.179.113" src_port="1025"/>
      <filter dst_port="1434" proto="tcp" src_ip="192.25.179.113" src_port="1025"/>
      <filter dst_port="1434" proto="udp" src_ip="192.25.179.113" src_port="1025"/>
      <from sec="1068527665" usec="0"/>
      <to sec="1068527667" usec="0"/>
    </slice>
    <from sec="1068527664" usec="0"/>
    <to sec="1068527669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
2907[label="165.36.231.50;216pkt 216fpkt", shape=pentagon, color=darkviolet];
3054[label="210.75.164.65;223pkt 223fpkt", shape=pentagon, color=darkviolet];
3725[label="17.168.97.138;143pkt 143fpkt", shape=pentagon, color=darkviolet];
4517[label="202.199.144.239;253pkt 253fpkt", shape=pentagon, color=darkviolet];
5789[label="202.199.144.239;253pkt 253fpkt", shape=invtriangle, color=brown];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.199.144.239:1033, *:137}[30.2994%]&lt;BR/&gt;{210.75.164.65:1048, *:137}[26.7066%]&lt;BR/&gt;{165.36.231.50:3807, *:137}[23.2335%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1033: (23.2537%)&lt;BR/&gt; 1048: (10.2482%)&lt;BR/&gt; 3807: (8.91544%)&lt;BR/&gt; 1041: (6.57169%)&gt;];
}
2907--4938[label="1;215pkt 215fpkt"];
2907--5994[label="1;216pkt 216fpkt"];
3054--5024[label="1;223pkt 223fpkt"];
3054--6029[label="1;222pkt 222fpkt"];
3725--5387[label="1;142pkt 142fpkt"];
3725--6187[label="1;142pkt 142fpkt"];
4517--5789[label="1;253pkt 253fpkt"];
4517--6360[label="1;252pkt 252fpkt"];
5789--6360[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.199.144.239" src_port="1033"/>
      <filter dst_port="137" src_ip="210.75.164.65" src_port="1048"/>
      <filter dst_port="137" src_ip="165.36.231.50" src_port="3807"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068526867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
278[label="164.228.25.239;d;8pkt 8fpkt", shape=diamond, color=yellow];
279[label="7.110.98.55;s;1pkt 1fpkt", shape=diamond, color=yellow];
1436[label="164.228.25.239;d;8pkt 8fpkt", shape=hexagon, color=black];
2951[label="7.110.98.55;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.210.184.0:80, 164.228.25.239:*}[62.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 49157: (11.1111%)&lt;BR/&gt; 7250: (11.1111%)&lt;BR/&gt; 49200: (5.55556%)&lt;BR/&gt; 49199: (5.55556%)&gt;];
}
278--279[label="1;1pkt 1fpkt"];
278--1375[label="0.625;5pkt 5fpkt"];
278--1436[label="1;8pkt 8fpkt"];
278--2361[label="0.625;5pkt 5fpkt"];
278--2951[label="1;1pkt 1fpkt"];
279--1436[label="1;1pkt 1fpkt"];
279--2951[label="1;1pkt 1fpkt"];
1436--2361[label="0.625;5pkt 5fpkt"];
1436--2951[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.228.25.239" src_ip="4.210.184.0" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
298[label="136.93.193.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
299[label="200.49.194.44;s;1pkt 1fpkt", shape=diamond, color=yellow];
1443[label="200.49.194.44;s;1pkt 1fpkt", shape=hexagon, color=black];
1728[label="136.93.193.45;d;1pkt 1fpkt", shape=hexagon, color=black];
2855[label="200.49.194.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.49.194.44:8000, 136.93.193.45:33093}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33093: (50%)&lt;BR/&gt; 8000: (50%)&gt;];
}
298--299[label="1;1pkt 1fpkt"];
298--1443[label="1;1pkt 1fpkt"];
298--1728[label="1;1pkt 1fpkt"];
298--2855[label="1;1pkt 1fpkt"];
299--1443[label="1;1pkt 1fpkt"];
299--1728[label="1;1pkt 1fpkt"];
299--2855[label="1;1pkt 1fpkt"];
1443--1728[label="1;1pkt 1fpkt"];
1443--2855[label="1;1pkt 1fpkt"];
1728--2855[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.193.45" dst_port="33093" src_ip="200.49.194.44" src_port="8000"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
282[label="136.93.199.189;d;214pkt 214fpkt", shape=diamond, color=yellow];
577[label="0.39.56.16;s;128pkt 128fpkt", shape=diamond, color=yellow];
1045[label="4.88.74.217;s;78pkt 78fpkt", shape=diamond, color=yellow];
1054[label="6.10.123.35;s;15pkt 15fpkt", shape=diamond, color=yellow];
1594[label="208.18.25.107;d;102pkt 102fpkt", shape=hexagon, color=black];
1641[label="136.93.199.189;d;214pkt 214fpkt", shape=hexagon, color=black];
1729[label="0.39.56.5;s;1pkt 1fpkt", shape=hexagon, color=black];
1906[label="4.88.74.217;s;78pkt 78fpkt", shape=hexagon, color=black];
2540[label="0.39.56.16;128pkt 128fpkt", shape=pentagon, color=darkviolet];
2759[label="6.10.123.35;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2826[label="4.155.72.41;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3385[label="4.124.10.99;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4376[label="4.88.74.217;96pkt 96fpkt", shape=pentagon, color=darkviolet];
4724[label="0.39.56.16;128pkt 128fpkt", shape=invtriangle, color=brown];
4852[label="6.10.123.35;18pkt 18fpkt", shape=invtriangle, color=brown];
4888[label="4.155.72.41;10pkt 10fpkt", shape=invtriangle, color=brown];
5723[label="4.88.74.217;95pkt 95fpkt", shape=invtriangle, color=brown];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.39.56.16:80, 136.93.199.189:*}[33.5079%]&lt;BR/&gt;{*:80, 208.18.25.107:*}[27.2251%]&lt;BR/&gt;{4.88.74.217:80, *:*}[25.1309%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7392%)&lt;BR/&gt; 0: (0.372578%)&lt;BR/&gt; 2399: (0.223547%)&lt;BR/&gt; 2398: (0.223547%)&lt;BR/&gt; 4302: (0.186289%)&gt;];
}
282--302[label="1;1pkt 1fpkt"];
282--346[label="0.0046729;1pkt 1fpkt"];
282--577[label="1;128pkt 128fpkt"];
282--1045[label="0.025641;2pkt 2fpkt"];
282--1641[label="1;214pkt 214fpkt"];
282--1729[label="1;1pkt 1fpkt"];
282--1853[label="0.0046729;1pkt 1fpkt"];
282--1906[label="0.025641;2pkt 2fpkt"];
282--2540[label="1;128pkt 128fpkt"];
282--2759[label="0.105263;2pkt 2fpkt"];
282--2826[label="1;11pkt 11fpkt"];
282--3385[label="0.428571;3pkt 3fpkt"];
282--4376[label="0.0208333;2pkt 2fpkt"];
282--4619[label="0.0046729;1pkt 1fpkt"];
282--4724[label="1;128pkt 128fpkt"];
282--4852[label="0.0555556;1pkt 1fpkt"];
282--4888[label="1;10pkt 10fpkt"];
282--5723[label="0.0210526;2pkt 2fpkt"];
282--5840[label="0.0046729;1pkt 1fpkt"];
577--1641[label="1;128pkt 128fpkt"];
577--2540[label="1;128pkt 128fpkt"];
577--4724[label="1;128pkt 128fpkt"];
1045--1433[label="0.0128205;1pkt 1fpkt"];
1045--1594[label="0.576923;45pkt 45fpkt"];
1045--1641[label="0.025641;2pkt 2fpkt"];
1045--1839[label="0.0128205;1pkt 1fpkt"];
1045--1906[label="1;78pkt 78fpkt"];
1045--1939[label="0.0128205;1pkt 1fpkt"];
1045--2225[label="0.0128205;1pkt 1fpkt"];
1045--4376[label="1;78pkt 78fpkt"];
1045--5723[label="0.987179;77pkt 77fpkt"];
1054--2120[label="0.933333;14pkt 14fpkt"];
1054--2759[label="1;15pkt 15fpkt"];
1054--4852[label="1;15pkt 15fpkt"];
1594--1781[label="0.015873;1pkt 1fpkt"];
1594--1906[label="0.576923;45pkt 45fpkt"];
1594--3385[label="0.571429;4pkt 4fpkt"];
1594--3975[label="0.0769231;1pkt 1fpkt"];
1594--4256[label="0.01;1pkt 1fpkt"];
1594--4376[label="0.46875;45pkt 45fpkt"];
1594--5507[label="0.0833333;1pkt 1fpkt"];
1594--5723[label="0.473684;45pkt 45fpkt"];
1641--1729[label="1;1pkt 1fpkt"];
1641--1853[label="0.0046729;1pkt 1fpkt"];
1641--1906[label="0.025641;2pkt 2fpkt"];
1641--2540[label="1;128pkt 128fpkt"];
1641--2759[label="0.105263;2pkt 2fpkt"];
1641--2826[label="1;11pkt 11fpkt"];
1641--3385[label="0.428571;3pkt 3fpkt"];
1641--4376[label="0.0208333;2pkt 2fpkt"];
1641--4619[label="0.0046729;1pkt 1fpkt"];
1641--4724[label="1;128pkt 128fpkt"];
1641--4852[label="0.0555556;1pkt 1fpkt"];
1641--4888[label="1;10pkt 10fpkt"];
1641--5723[label="0.0210526;2pkt 2fpkt"];
1641--5840[label="0.0046729;1pkt 1fpkt"];
1906--1939[label="0.0128205;1pkt 1fpkt"];
1906--2225[label="0.0128205;1pkt 1fpkt"];
1906--4376[label="1;78pkt 78fpkt"];
1906--5723[label="0.987179;77pkt 77fpkt"];
2540--4724[label="1;128pkt 128fpkt"];
2759--4852[label="1;18pkt 18fpkt"];
2826--4888[label="1;10pkt 10fpkt"];
4376--5723[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter src_ip="4.88.74.217" src_port="80"/>
      <filter dst_ip="208.18.25.107" src_port="80"/>
      <filter dst_ip="136.93.199.189" src_ip="0.39.56.16" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
310[label="164.228.175.70;d;2pkt 2fpkt", shape=diamond, color=yellow];
311[label="192.200.216.194;s;2pkt 2fpkt", shape=diamond, color=yellow];
1492[label="164.228.175.70;d;2pkt 2fpkt", shape=hexagon, color=black];
1582[label="192.200.216.194;s;2pkt 2fpkt", shape=hexagon, color=black];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.200.216.194:80, 164.228.175.70:1234}[50%]&lt;BR/&gt;{192.200.216.194:80, 164.228.175.70:1760}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1760: (25%)&lt;BR/&gt; 1234: (25%)&gt;];
}
310--311[label="1;2pkt 2fpkt"];
310--1492[label="1;2pkt 2fpkt"];
310--1582[label="1;2pkt 2fpkt"];
311--1492[label="1;2pkt 2fpkt"];
311--1582[label="1;2pkt 2fpkt"];
1492--1582[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="164.228.175.70" dst_port="1760" src_ip="192.200.216.194" src_port="80"/>
      <filter dst_ip="164.228.175.70" dst_port="1234" src_ip="192.200.216.194" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,901,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
276[label="143.38.237.230;d;92pkt 92fpkt", shape=diamond, color=yellow];
408[label="212.30.113.105;s;7pkt 7fpkt", shape=diamond, color=yellow];
1163[label="143.38.12.252;d;7pkt 7fpkt", shape=diamond, color=yellow];
1392[label="212.30.113.94;s;5pkt 5fpkt", shape=diamond, color=yellow];
1469[label="212.30.113.105;s;7pkt 7fpkt", shape=hexagon, color=black];
2199[label="143.38.12.252;d;7pkt 7fpkt", shape=hexagon, color=black];
2382[label="212.30.119.2;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2781[label="7.219.209.37;109pkt 109fpkt", shape=pentagon, color=darkviolet];
2936[label="212.30.119.53;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3338[label="212.30.113.94;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4957[label="212.30.119.53;4pkt 4fpkt", shape=invtriangle, color=brown];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.219.209.37:80, 143.38.237.230:*}[42.7673%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.6%)&lt;BR/&gt; 1863: (11%)&lt;BR/&gt; 1363: (0.8%)&lt;BR/&gt; 1362: (0.8%)&lt;BR/&gt; 1361: (0.8%)&gt;];
}
276--328[label="0.0326087;3pkt 3fpkt"];
276--408[label="0.142857;1pkt 1fpkt"];
276--444[label="0.0108696;1pkt 1fpkt"];
276--453[label="0.0108696;1pkt 1fpkt"];
276--485[label="0.0108696;1pkt 1fpkt"];
276--848[label="0.688889;62pkt 62fpkt"];
276--1211[label="0.0108696;1pkt 1fpkt"];
276--1469[label="0.142857;1pkt 1fpkt"];
276--1498[label="0.0326087;3pkt 3fpkt"];
276--1586[label="0.0108696;1pkt 1fpkt"];
276--1762[label="0.691358;56pkt 56fpkt"];
276--2382[label="0.333333;1pkt 1fpkt"];
276--2781[label="0.673913;62pkt 62fpkt"];
276--2788[label="0.0217391;2pkt 2fpkt"];
276--2936[label="0.25;1pkt 1fpkt"];
276--2966[label="0.0108696;1pkt 1fpkt"];
276--3795[label="0.0217391;2pkt 2fpkt"];
276--4229[label="0.0326087;3pkt 3fpkt"];
276--4862[label="0.673913;62pkt 62fpkt"];
276--4957[label="0.25;1pkt 1fpkt"];
276--4977[label="0.0108696;1pkt 1fpkt"];
276--5423[label="0.0217391;2pkt 2fpkt"];
276--6012[label="0.0108696;1pkt 1fpkt"];
276--6203[label="0.0217391;2pkt 2fpkt"];
408--409[label="0.142857;1pkt 1fpkt"];
408--1163[label="0.142857;1pkt 1fpkt"];
408--1469[label="1;7pkt 7fpkt"];
408--1703[label="0.142857;1pkt 1fpkt"];
408--2044[label="0.142857;1pkt 1fpkt"];
408--2199[label="0.142857;1pkt 1fpkt"];
1163--1392[label="0.4;2pkt 2fpkt"];
1163--1469[label="0.142857;1pkt 1fpkt"];
1163--1658[label="0.142857;1pkt 1fpkt"];
1163--1771[label="0.142857;1pkt 1fpkt"];
1163--2199[label="1;7pkt 7fpkt"];
1163--3112[label="0.142857;1pkt 1fpkt"];
1163--3338[label="0.4;2pkt 2fpkt"];
1163--3963[label="0.142857;1pkt 1fpkt"];
1392--2199[label="0.4;2pkt 2fpkt"];
1392--3338[label="1;5pkt 5fpkt"];
1469--1703[label="0.142857;1pkt 1fpkt"];
1469--2044[label="0.142857;1pkt 1fpkt"];
1469--2199[label="0.142857;1pkt 1fpkt"];
2199--3112[label="0.142857;1pkt 1fpkt"];
2199--3338[label="0.4;2pkt 2fpkt"];
2199--3963[label="0.142857;1pkt 1fpkt"];
2781--4862[label="1;108pkt 108fpkt"];
2936--4957[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.237.230" src_ip="7.219.209.37" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="1.133.49.240"/>
      <from sec="1068527135" usec="0"/>
      <to sec="1068527233" usec="0"/>
    </slice>
    <from sec="1068527135" usec="0"/>
    <to sec="1068527233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
665[label="136.93.9.64;d;63pkt 63fpkt", shape=diamond, color=yellow];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.219.223.53:80, 136.93.9.64:*}[36.5079%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.8254%)&lt;BR/&gt; 1863: (2.38095%)&lt;BR/&gt; 3379: (0.793651%)&lt;BR/&gt; 3378: (0.793651%)&lt;BR/&gt; 3377: (0.793651%)&gt;];
}
665--836[label="0.031746;2pkt 2fpkt"];
665--1243[label="0.031746;2pkt 2fpkt"];
665--1253[label="0.015873;1pkt 1fpkt"];
665--1571[label="0.142857;9pkt 9fpkt"];
665--1610[label="1;62pkt 62fpkt"];
665--1750[label="0.365079;23pkt 23fpkt"];
665--1847[label="0.15873;10pkt 10fpkt"];
665--1957[label="0.111111;7pkt 7fpkt"];
665--2100[label="0.015873;1pkt 1fpkt"];
665--2246[label="0.142857;9pkt 9fpkt"];
665--2278[label="0.15873;10pkt 10fpkt"];
665--2577[label="0.031746;2pkt 2fpkt"];
665--2599[label="0.0666667;2pkt 2fpkt"];
665--2839[label="0.015873;1pkt 1fpkt"];
665--2979[label="0.031746;2pkt 2fpkt"];
665--3713[label="0.142857;9pkt 9fpkt"];
665--4272[label="0.015873;1pkt 1fpkt"];
665--4762[label="0.0666667;2pkt 2fpkt"];
665--4896[label="0.015873;1pkt 1fpkt"];
665--5671[label="0.015873;1pkt 1fpkt"];
665--6312[label="0.015873;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.9.64" src_ip="7.219.223.53" src_port="80"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
243[label="136.93.69.116;d;74pkt 74fpkt", shape=diamond, color=yellow];
3995[label="137.80.219.169;36pkt 36fpkt", shape=pentagon, color=darkviolet];
4373[label="137.80.219.216;22pkt 22fpkt", shape=pentagon, color=darkviolet];
5722[label="137.80.219.216;22pkt 22fpkt", shape=invtriangle, color=brown];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.80.219.169:80, 136.93.69.116:*}[48.6486%]&lt;BR/&gt;{137.80.219.216:80, 136.93.69.116:*}[31.0811%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61363: (0.974026%)&lt;BR/&gt; 61362: (0.974026%)&lt;BR/&gt; 61361: (0.974026%)&lt;BR/&gt; 61360: (0.974026%)&gt;];
}
243--541[label="1;4pkt 4fpkt"];
243--1615[label="1;4pkt 4fpkt"];
243--3995[label="1;36pkt 36fpkt"];
243--4373[label="1;22pkt 22fpkt"];
243--5722[label="1;22pkt 22fpkt"];
4373--5722[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.69.116" src_ip="137.80.219.169" src_port="80"/>
      <filter dst_ip="136.93.69.116" src_ip="137.80.219.216" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068526934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
1090[label="212.118.48.156;s;142pkt 142fpkt", shape=diamond, color=yellow];
1765[label="143.38.12.85;d;60pkt 60fpkt", shape=hexagon, color=black];
1924[label="136.93.203.110;d;60pkt 60fpkt", shape=hexagon, color=black];
1959[label="143.38.15.140;d;23pkt 23fpkt", shape=hexagon, color=black];
2018[label="143.38.61.0;d;102pkt 102fpkt", shape=hexagon, color=black];
2027[label="136.93.117.87;d;78pkt 78fpkt", shape=hexagon, color=black];
2060[label="212.118.48.156;s;134pkt 134fpkt", shape=hexagon, color=black];
2143[label="143.38.237.161;d;74pkt 74fpkt", shape=hexagon, color=black];
2150[label="136.93.244.146;d;115pkt 115fpkt", shape=hexagon, color=black];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.118.48.156:80, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4619%)&lt;BR/&gt; 443: (1.77665%)&lt;BR/&gt; 1863: (0.571066%)&lt;BR/&gt; 1241: (0.253807%)&lt;BR/&gt; 1238: (0.253807%)&gt;];
}
1090--1157[label="0.1;2pkt 2fpkt"];
1090--1174[label="0.046875;3pkt 3fpkt"];
1090--1186[label="0.030303;2pkt 2fpkt"];
1090--1188[label="0.0350877;2pkt 2fpkt"];
1090--1267[label="0.0140845;2pkt 2fpkt"];
1090--1291[label="0.0224719;2pkt 2fpkt"];
1090--1295[label="0.0338983;2pkt 2fpkt"];
1090--1303[label="0.0185185;2pkt 2fpkt"];
1090--1411[label="0.0714286;4pkt 4fpkt"];
1090--1438[label="0.0492958;7pkt 7fpkt"];
1090--1463[label="0.00704225;1pkt 1fpkt"];
1090--1522[label="0.00704225;1pkt 1fpkt"];
1090--1530[label="0.0114943;1pkt 1fpkt"];
1090--1548[label="0.0163934;2pkt 2fpkt"];
1090--1570[label="0.0140845;2pkt 2fpkt"];
1090--1580[label="0.00704225;1pkt 1fpkt"];
1090--1585[label="0.00704225;1pkt 1fpkt"];
1090--1596[label="0.0273973;2pkt 2fpkt"];
1090--1629[label="0.0229885;2pkt 2fpkt"];
1090--1692[label="0.163934;10pkt 10fpkt"];
1090--1715[label="0.0211268;3pkt 3fpkt"];
1090--1721[label="0.025974;2pkt 2fpkt"];
1090--1765[label="0.0166667;1pkt 1fpkt"];
1090--1810[label="0.0289855;2pkt 2fpkt"];
1090--1821[label="0.0307692;2pkt 2fpkt"];
1090--1856[label="0.0535714;3pkt 3fpkt"];
1090--1924[label="0.0333333;2pkt 2fpkt"];
1090--1930[label="0.00704225;1pkt 1fpkt"];
1090--1939[label="0.0140845;2pkt 2fpkt"];
1090--1959[label="0.0869565;2pkt 2fpkt"];
1090--1979[label="0.0140845;2pkt 2fpkt"];
1090--2018[label="0.0392157;4pkt 4fpkt"];
1090--2025[label="0.047619;3pkt 3fpkt"];
1090--2027[label="0.025641;2pkt 2fpkt"];
1090--2033[label="0.030303;2pkt 2fpkt"];
1090--2034[label="0.0350877;2pkt 2fpkt"];
1090--2044[label="0.0352113;5pkt 5fpkt"];
1090--2060[label="1;134pkt 134fpkt"];
1090--2109[label="0.016129;2pkt 2fpkt"];
1090--2143[label="0.027027;2pkt 2fpkt"];
1090--2149[label="0.027027;2pkt 2fpkt"];
1090--2150[label="0.0173913;2pkt 2fpkt"];
1090--2154[label="0.0224719;2pkt 2fpkt"];
1090--2163[label="0.0140845;2pkt 2fpkt"];
1090--2194[label="0.0140845;2pkt 2fpkt"];
1090--2212[label="0.0185185;2pkt 2fpkt"];
1090--2226[label="0.0492958;7pkt 7fpkt"];
1090--2262[label="0.025974;2pkt 2fpkt"];
1090--2304[label="0.00704225;1pkt 1fpkt"];
1090--3890[label="1;142pkt 142fpkt"];
1090--5469[label="0.992958;141pkt 141fpkt"];
1765--2008[label="0.956522;44pkt 44fpkt"];
1765--2060[label="0.0166667;1pkt 1fpkt"];
1765--2802[label="0.0333333;2pkt 2fpkt"];
1765--3514[label="0.86;43pkt 43fpkt"];
1765--3645[label="0.09375;3pkt 3fpkt"];
1765--3890[label="0.0166667;1pkt 1fpkt"];
1765--3992[label="0.05;3pkt 3fpkt"];
1765--4323[label="0.05;1pkt 1fpkt"];
1765--4577[label="0.037037;1pkt 1fpkt"];
1765--5275[label="0.86;43pkt 43fpkt"];
1765--5469[label="0.0166667;1pkt 1fpkt"];
1765--5517[label="0.0333333;2pkt 2fpkt"];
1765--6135[label="0.86;43pkt 43fpkt"];
1924--2060[label="0.0333333;2pkt 2fpkt"];
1924--2100[label="0.0166667;1pkt 1fpkt"];
1924--2114[label="0.0333333;2pkt 2fpkt"];
1924--2115[label="0.0333333;2pkt 2fpkt"];
1924--2623[label="0.0166667;1pkt 1fpkt"];
1924--2946[label="0.433333;26pkt 26fpkt"];
1924--2979[label="0.0166667;1pkt 1fpkt"];
1924--3642[label="0.0666667;4pkt 4fpkt"];
1924--3783[label="0.0384615;2pkt 2fpkt"];
1924--3890[label="0.0333333;2pkt 2fpkt"];
1924--4158[label="0.0333333;2pkt 2fpkt"];
1924--4272[label="0.0166667;1pkt 1fpkt"];
1924--4584[label="0.15;9pkt 9fpkt"];
1924--5344[label="0.0666667;4pkt 4fpkt"];
1924--5417[label="0.0392157;2pkt 2fpkt"];
1924--5469[label="0.0333333;2pkt 2fpkt"];
1924--5671[label="0.0166667;1pkt 1fpkt"];
1924--5825[label="0.15;9pkt 9fpkt"];
1924--6162[label="0.0666667;4pkt 4fpkt"];
1924--6312[label="0.0166667;1pkt 1fpkt"];
1924--6377[label="0.15;9pkt 9fpkt"];
1959--2060[label="0.0869565;2pkt 2fpkt"];
1959--2179[label="0.0434783;1pkt 1fpkt"];
1959--2586[label="0.0434783;1pkt 1fpkt"];
1959--2623[label="0.0434783;1pkt 1fpkt"];
1959--2646[label="0.0869565;2pkt 2fpkt"];
1959--2966[label="0.0434783;1pkt 1fpkt"];
1959--2988[label="0.166667;1pkt 1fpkt"];
1959--3020[label="0.0434783;1pkt 1fpkt"];
1959--3303[label="0.1;1pkt 1fpkt"];
1959--3391[label="0.111111;1pkt 1fpkt"];
1959--3783[label="0.0869565;2pkt 2fpkt"];
1959--3890[label="0.0869565;2pkt 2fpkt"];
1959--4788[label="0.0869565;2pkt 2fpkt"];
1959--4977[label="0.0434783;1pkt 1fpkt"];
1959--5007[label="0.0434783;1pkt 1fpkt"];
1959--5162[label="0.111111;1pkt 1fpkt"];
1959--5212[label="0.111111;1pkt 1fpkt"];
1959--5417[label="0.0869565;2pkt 2fpkt"];
1959--5469[label="0.0869565;2pkt 2fpkt"];
1959--5914[label="0.0869565;2pkt 2fpkt"];
1959--6012[label="0.0434783;1pkt 1fpkt"];
1959--6018[label="0.166667;1pkt 1fpkt"];
1959--6024[label="0.0434783;1pkt 1fpkt"];
2018--2060[label="0.0392157;4pkt 4fpkt"];
2018--2100[label="0.0561798;5pkt 5fpkt"];
2018--2278[label="0.0686275;7pkt 7fpkt"];
2018--2568[label="0.0392157;4pkt 4fpkt"];
2018--2577[label="0.0307692;2pkt 2fpkt"];
2018--2671[label="0.0294118;3pkt 3fpkt"];
2018--2839[label="0.028169;2pkt 2fpkt"];
2018--2979[label="0.0294118;3pkt 3fpkt"];
2018--3642[label="0.0294118;3pkt 3fpkt"];
2018--3650[label="0.0196078;2pkt 2fpkt"];
2018--3783[label="0.0769231;4pkt 4fpkt"];
2018--3816[label="0.0625;2pkt 2fpkt"];
2018--3890[label="0.0392157;4pkt 4fpkt"];
2018--4041[label="0.205882;21pkt 21fpkt"];
2018--4272[label="0.0505051;5pkt 5fpkt"];
2018--4312[label="0.030303;1pkt 1fpkt"];
2018--4744[label="0.0392157;4pkt 4fpkt"];
2018--4804[label="0.0294118;3pkt 3fpkt"];
2018--4896[label="0.0285714;2pkt 2fpkt"];
2018--5344[label="0.0294118;3pkt 3fpkt"];
2018--5347[label="0.0196078;2pkt 2fpkt"];
2018--5417[label="0.0784314;4pkt 4fpkt"];
2018--5431[label="0.0625;2pkt 2fpkt"];
2018--5469[label="0.0392157;4pkt 4fpkt"];
2018--5541[label="0.205882;21pkt 21fpkt"];
2018--5671[label="0.0505051;5pkt 5fpkt"];
2018--5920[label="0.0294118;3pkt 3fpkt"];
2018--6162[label="0.0294118;3pkt 3fpkt"];
2018--6165[label="0.0196078;2pkt 2fpkt"];
2018--6206[label="0.0625;2pkt 2fpkt"];
2018--6312[label="0.0505051;5pkt 5fpkt"];
2027--2060[label="0.025641;2pkt 2fpkt"];
2027--2278[label="0.115385;9pkt 9fpkt"];
2027--2623[label="0.025641;2pkt 2fpkt"];
2027--2646[label="0.107143;3pkt 3fpkt"];
2027--2979[label="0.025641;2pkt 2fpkt"];
2027--3668[label="0.115385;9pkt 9fpkt"];
2027--3713[label="0.128205;10pkt 10fpkt"];
2027--3718[label="0.0128205;1pkt 1fpkt"];
2027--3783[label="0.0384615;2pkt 2fpkt"];
2027--3816[label="0.03125;1pkt 1fpkt"];
2027--3890[label="0.025641;2pkt 2fpkt"];
2027--4788[label="0.107143;3pkt 3fpkt"];
2027--5383[label="0.0128205;1pkt 1fpkt"];
2027--5417[label="0.0392157;2pkt 2fpkt"];
2027--5431[label="0.03125;1pkt 1fpkt"];
2027--5469[label="0.025641;2pkt 2fpkt"];
2027--5914[label="0.107143;3pkt 3fpkt"];
2027--6206[label="0.03125;1pkt 1fpkt"];
2060--2109[label="0.016129;2pkt 2fpkt"];
2060--2143[label="0.027027;2pkt 2fpkt"];
2060--2149[label="0.027027;2pkt 2fpkt"];
2060--2150[label="0.0173913;2pkt 2fpkt"];
2060--2154[label="0.0224719;2pkt 2fpkt"];
2060--2163[label="0.0149254;2pkt 2fpkt"];
2060--2194[label="0.0149254;2pkt 2fpkt"];
2060--2212[label="0.0185185;2pkt 2fpkt"];
2060--2226[label="0.0373134;5pkt 5fpkt"];
2060--2262[label="0.025974;2pkt 2fpkt"];
2060--2304[label="0.00746269;1pkt 1fpkt"];
2060--3890[label="1;134pkt 134fpkt"];
2060--5469[label="0.992537;133pkt 133fpkt"];
2143--2288[label="0.0135135;1pkt 1fpkt"];
2143--2645[label="0.0675676;5pkt 5fpkt"];
2143--2788[label="0.0135135;1pkt 1fpkt"];
2143--2976[label="0.4;2pkt 2fpkt"];
2143--2990[label="0.166667;1pkt 1fpkt"];
2143--3028[label="0.027027;2pkt 2fpkt"];
2143--3381[label="0.0135135;1pkt 1fpkt"];
2143--3550[label="0.142857;1pkt 1fpkt"];
2143--3635[label="0.0135135;1pkt 1fpkt"];
2143--3795[label="0.027027;2pkt 2fpkt"];
2143--3890[label="0.027027;2pkt 2fpkt"];
2143--4007[label="0.0222222;1pkt 1fpkt"];
2143--4171[label="0.125;1pkt 1fpkt"];
2143--4430[label="0.0434783;1pkt 1fpkt"];
2143--4613[label="0.405405;30pkt 30fpkt"];
2143--4984[label="0.4;2pkt 2fpkt"];
2143--4992[label="0.166667;1pkt 1fpkt"];
2143--5011[label="0.027027;2pkt 2fpkt"];
2143--5206[label="0.0135135;1pkt 1fpkt"];
2143--5297[label="0.166667;1pkt 1fpkt"];
2143--5423[label="0.027027;2pkt 2fpkt"];
2143--5469[label="0.027027;2pkt 2fpkt"];
2143--5522[label="0.0222222;1pkt 1fpkt"];
2143--5742[label="0.0454545;1pkt 1fpkt"];
2143--6111[label="0.0135135;1pkt 1fpkt"];
2143--6203[label="0.027027;2pkt 2fpkt"];
2150--2278[label="0.226087;26pkt 26fpkt"];
2150--2553[label="0.330435;38pkt 38fpkt"];
2150--2979[label="0.0173913;2pkt 2fpkt"];
2150--3654[label="0.0116279;1pkt 1fpkt"];
2150--3668[label="0.0521739;6pkt 6fpkt"];
2150--3827[label="0.0333333;2pkt 2fpkt"];
2150--3890[label="0.0173913;2pkt 2fpkt"];
2150--3961[label="0.0625;2pkt 2fpkt"];
2150--4288[label="0.0114943;1pkt 1fpkt"];
2150--4732[label="0.330435;38pkt 38fpkt"];
2150--5469[label="0.0173913;2pkt 2fpkt"];
2150--5682[label="0.0114943;1pkt 1fpkt"];
2150--5898[label="0.330435;38pkt 38fpkt"];
</description>
    <slice>
      <filter src_ip="212.118.48.156" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
595[label="208.31.218.155;s;166pkt 166fpkt", shape=diamond, color=yellow];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.31.218.155:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (15.0602%)&lt;BR/&gt; 4121: (10.241%)&lt;BR/&gt; 4000: (8.13253%)&lt;BR/&gt; 36070: (7.22892%)&lt;BR/&gt; 35786: (6.92771%)&gt;];
}
595--2327[label="0.0120482;2pkt 2fpkt"];
595--2342[label="0.0120482;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="208.31.218.155"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
1119[label="208.31.229.196;d;128pkt 128fpkt", shape=diamond, color=yellow];
2087[label="208.31.229.196;d;127pkt 127fpkt", shape=hexagon, color=black];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 208.31.229.196:0}[96.0938%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.0784%)&lt;BR/&gt; 135: (1.17647%)&lt;BR/&gt; 80: (0.784314%)&lt;BR/&gt; 3726: (0.392157%)&lt;BR/&gt; 3006: (0.392157%)&gt;];
}
1119--2087[label="1;127pkt 127fpkt"];
1119--3810[label="0.0454545;1pkt 1fpkt"];
2087--3810[label="0.0454545;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.229.196"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
588[label="164.228.74.188;d;89pkt 89fpkt", shape=diamond, color=yellow];
2166[label="164.228.74.188;d;89pkt 89fpkt", shape=hexagon, color=black];
3618[label="212.30.118.126;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4276[label="208.131.129.202;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5674[label="208.131.129.202;17pkt 17fpkt", shape=invtriangle, color=brown];
6314[label="208.131.129.202;17pkt 17fpkt", shape=invhouse, color=bisque];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.131.129.118:80, 164.228.74.188:*}[40.4494%]&lt;BR/&gt;{208.131.129.202:80, 164.228.74.188:*}[23.5955%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.927%)&lt;BR/&gt; 3187: (1.07296%)&lt;BR/&gt; 3184: (1.07296%)&lt;BR/&gt; 3181: (1.07296%)&lt;BR/&gt; 3178: (1.07296%)&gt;];
}
588--649[label="0.404494;36pkt 36fpkt"];
588--1875[label="0.404494;36pkt 36fpkt"];
588--2166[label="1;89pkt 89fpkt"];
588--3557[label="0.404494;36pkt 36fpkt"];
588--3618[label="1;1pkt 1fpkt"];
588--4276[label="1;20pkt 20fpkt"];
588--5674[label="1;17pkt 17fpkt"];
588--6314[label="1;17pkt 17fpkt"];
2166--3557[label="0.404494;36pkt 36fpkt"];
2166--3618[label="1;1pkt 1fpkt"];
2166--4276[label="1;20pkt 20fpkt"];
2166--5674[label="1;17pkt 17fpkt"];
2166--6314[label="1;17pkt 17fpkt"];
4276--5674[label="1;17pkt 17fpkt"];
4276--6314[label="1;17pkt 17fpkt"];
5674--6314[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="164.228.74.188" src_ip="208.131.129.118" src_port="80"/>
      <filter dst_ip="164.228.74.188" src_ip="208.131.129.202" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
513[label="200.145.34.177;d;14pkt 14fpkt", shape=diamond, color=yellow];
533[label="143.49.139.77;s;1pkt 1fpkt", shape=diamond, color=yellow];
735[label="146.153.29.237;s;513pkt 513fpkt", shape=diamond, color=yellow];
1531[label="200.145.34.177;d;14pkt 14fpkt", shape=hexagon, color=black];
1941[label="146.153.29.237;s;409pkt 409fpkt", shape=hexagon, color=black];
2092[label="209.176.134.149;s;145pkt 145fpkt", shape=hexagon, color=black];
2155[label="143.49.139.77;s;1pkt 1fpkt", shape=hexagon, color=black];
3189[label="143.49.139.77;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.29.237:53695, *:53}[60.5067%]&lt;BR/&gt;{209.176.134.149:51349, *:53}[20.1192%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.7716%)&lt;BR/&gt; 53695: (33.7125%)&lt;BR/&gt; 51349: (6.23294%)&lt;BR/&gt; 0: (3.73066%)&lt;BR/&gt; 47362: (0.272975%)&gt;];
}
513--533[label="1;1pkt 1fpkt"];
513--735[label="0.0714286;1pkt 1fpkt"];
513--1124[label="0.0714286;1pkt 1fpkt"];
513--1426[label="0.5;7pkt 7fpkt"];
513--1531[label="1;14pkt 14fpkt"];
513--1941[label="0.0714286;1pkt 1fpkt"];
513--2092[label="0.0714286;1pkt 1fpkt"];
513--2155[label="1;1pkt 1fpkt"];
513--2244[label="0.5;7pkt 7fpkt"];
513--2326[label="0.428571;6pkt 6fpkt"];
513--2336[label="0.214286;3pkt 3fpkt"];
513--2341[label="0.428571;6pkt 6fpkt"];
513--3189[label="0.5;1pkt 1fpkt"];
513--3843[label="0.5;7pkt 7fpkt"];
513--5446[label="0.5;7pkt 7fpkt"];
533--1531[label="1;1pkt 1fpkt"];
533--2155[label="1;1pkt 1fpkt"];
533--2326[label="1;1pkt 1fpkt"];
533--2336[label="1;1pkt 1fpkt"];
533--2341[label="1;1pkt 1fpkt"];
533--3189[label="1;1pkt 1fpkt"];
735--1531[label="0.0714286;1pkt 1fpkt"];
735--1941[label="1;409pkt 409fpkt"];
735--2326[label="0.0935673;48pkt 48fpkt"];
735--2334[label="0.00194932;1pkt 1fpkt"];
735--2336[label="0.155945;80pkt 80fpkt"];
735--2341[label="0.0935673;48pkt 48fpkt"];
1531--1941[label="0.0714286;1pkt 1fpkt"];
1531--2092[label="0.0714286;1pkt 1fpkt"];
1531--2155[label="1;1pkt 1fpkt"];
1531--2244[label="0.5;7pkt 7fpkt"];
1531--2326[label="0.428571;6pkt 6fpkt"];
1531--2336[label="0.214286;3pkt 3fpkt"];
1531--2341[label="0.428571;6pkt 6fpkt"];
1531--3189[label="0.5;1pkt 1fpkt"];
1531--3843[label="0.5;7pkt 7fpkt"];
1531--5446[label="0.5;7pkt 7fpkt"];
1941--2326[label="0.117359;48pkt 48fpkt"];
1941--2334[label="0.00244499;1pkt 1fpkt"];
1941--2336[label="0.136919;56pkt 56fpkt"];
1941--2341[label="0.117359;48pkt 48fpkt"];
2092--2326[label="0.0413793;6pkt 6fpkt"];
2092--2336[label="0.0758621;11pkt 11fpkt"];
2092--2341[label="0.0413793;6pkt 6fpkt"];
2155--2326[label="1;1pkt 1fpkt"];
2155--2336[label="1;1pkt 1fpkt"];
2155--2341[label="1;1pkt 1fpkt"];
2155--3189[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="146.153.29.237" src_port="53695"/>
      <filter dst_port="53" src_ip="209.176.134.149" src_port="51349"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
738[label="96.169.104.196;s;1160pkt 1160fpkt", shape=diamond, color=yellow];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.169.104.196:0, *:0}[96.8966%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.8966%)&lt;BR/&gt; 80: (1.55172%)&lt;BR/&gt; 64887: (0.0431034%)&lt;BR/&gt; 61503: (0.0431034%)&lt;BR/&gt; 58503: (0.0431034%)&gt;];
}
738--2075[label="0.0060241;1pkt 1fpkt"];
738--2327[label="0.000862069;1pkt 1fpkt"];
738--2342[label="0.000862069;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="96.169.104.196"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
591[label="212.30.113.58;s;6pkt 6fpkt", shape=diamond, color=yellow];
1727[label="212.30.113.58;s;6pkt 6fpkt", shape=hexagon, color=black];
2988[label="212.30.113.58;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4991[label="212.30.113.58;5pkt 5fpkt", shape=invtriangle, color=brown];
6018[label="212.30.113.58;6pkt 6fpkt", shape=invhouse, color=bisque];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.58:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3130: (8.62069%)&lt;BR/&gt; 1183: (8.62069%)&lt;BR/&gt; 1144: (8.62069%)&lt;BR/&gt; 1080: (8.62069%)&gt;];
}
591--750[label="0.166667;1pkt 1fpkt"];
591--979[label="0.166667;1pkt 1fpkt"];
591--1234[label="0.2;1pkt 1fpkt"];
591--1727[label="1;6pkt 6fpkt"];
591--1959[label="0.166667;1pkt 1fpkt"];
591--1967[label="0.166667;1pkt 1fpkt"];
591--2988[label="1;6pkt 6fpkt"];
591--4991[label="1;5pkt 5fpkt"];
591--6018[label="1;6pkt 6fpkt"];
1727--1959[label="0.166667;1pkt 1fpkt"];
1727--1967[label="0.166667;1pkt 1fpkt"];
1727--2988[label="1;6pkt 6fpkt"];
1727--4991[label="1;5pkt 5fpkt"];
1727--6018[label="1;6pkt 6fpkt"];
2988--4991[label="1;5pkt 5fpkt"];
2988--6018[label="1;6pkt 6fpkt"];
4991--6018[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="212.30.113.58" src_port="1863"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
806[label="208.18.15.94;d;18pkt 18fpkt", shape=diamond, color=yellow];
810[label="200.193.179.241;s;12pkt 12fpkt", shape=diamond, color=yellow];
1817[label="208.18.15.94;d;18pkt 18fpkt", shape=hexagon, color=black];
4536[label="200.193.179.241;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5799[label="200.193.179.241;11pkt 11fpkt", shape=invtriangle, color=brown];
6366[label="200.193.179.241;11pkt 11fpkt", shape=invhouse, color=bisque];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.193.179.241:80, 208.18.15.94:*}[66.6667%]&lt;BR/&gt;{4.8.160.75:80, 208.18.15.94:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49425: (3.65854%)&lt;BR/&gt; 49424: (3.65854%)&lt;BR/&gt; 49419: (3.65854%)&lt;BR/&gt; 49418: (3.65854%)&gt;];
}
806--810[label="1;12pkt 12fpkt"];
806--1817[label="1;18pkt 18fpkt"];
806--4536[label="1;12pkt 12fpkt"];
806--5799[label="1;11pkt 11fpkt"];
806--6366[label="1;11pkt 11fpkt"];
810--1817[label="1;12pkt 12fpkt"];
810--4536[label="1;12pkt 12fpkt"];
810--5799[label="1;11pkt 11fpkt"];
810--6366[label="1;11pkt 11fpkt"];
1817--4536[label="1;12pkt 12fpkt"];
1817--5799[label="1;11pkt 11fpkt"];
1817--6366[label="1;11pkt 11fpkt"];
4536--5799[label="1;11pkt 11fpkt"];
4536--6366[label="1;11pkt 11fpkt"];
5799--6366[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.15.94" src_ip="200.193.179.241" src_port="80"/>
      <filter dst_ip="208.18.15.94" src_ip="4.8.160.75" src_port="80"/>
    </slice>
    <from sec="1068527080" usec="0"/>
    <to sec="1068527244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="202.214.100.123"/>
      <from sec="1068526800" usec="0"/>
      <to sec="1068527537" usec="0"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
438[label="136.93.96.175;d;774pkt 774fpkt", shape=diamond, color=yellow];
981[label="212.30.113.65;s;10pkt 10fpkt", shape=diamond, color=yellow];
1168[label="4.41.209.10;s;78pkt 78fpkt", shape=diamond, color=yellow];
1838[label="136.93.96.175;d;774pkt 774fpkt", shape=hexagon, color=black];
1869[label="7.219.197.241;s;96pkt 96fpkt", shape=hexagon, color=black];
1961[label="212.30.113.65;s;10pkt 10fpkt", shape=hexagon, color=black];
2430[label="212.30.119.6;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2464[label="4.41.209.10;127pkt 127fpkt", shape=pentagon, color=darkviolet];
3050[label="212.30.113.65;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3051[label="212.30.118.65;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3065[label="204.39.235.66;15pkt 15fpkt", shape=pentagon, color=darkviolet];
3237[label="196.107.21.83;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3402[label="212.30.118.100;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3463[label="212.30.118.106;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3631[label="96.84.233.127;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4124[label="209.8.108.184;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4227[label="4.41.209.196;54pkt 54fpkt", shape=pentagon, color=darkviolet];
4481[label="212.30.119.234;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4677[label="4.41.209.10;127pkt 127fpkt", shape=invtriangle, color=brown];
5022[label="212.30.113.65;10pkt 10fpkt", shape=invtriangle, color=brown];
5031[label="204.39.235.66;15pkt 15fpkt", shape=invtriangle, color=brown];
5218[label="212.30.118.100;6pkt 6fpkt", shape=invtriangle, color=brown];
5249[label="212.30.118.106;5pkt 5fpkt", shape=invtriangle, color=brown];
5340[label="96.84.233.127;5pkt 5fpkt", shape=invtriangle, color=brown];
5868[label="4.41.209.10;127pkt 127fpkt", shape=invhouse, color=bisque];
6032[label="204.39.235.66;16pkt 16fpkt", shape=invhouse, color=bisque];
6117[label="212.30.118.100;7pkt 7fpkt", shape=invhouse, color=bisque];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.93.96.175:*}[82.1076%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.1222%)&lt;BR/&gt; 1863: (3.14125%)&lt;BR/&gt; 1127: (0.411612%)&lt;BR/&gt; 3344: (0.303293%)&lt;BR/&gt; 1178: (0.303293%)&gt;];
}
438--444[label="0.00921659;2pkt 2fpkt"];
438--453[label="0.0132743;3pkt 3fpkt"];
438--457[label="0.00645995;5pkt 5fpkt"];
438--492[label="0.0155211;7pkt 7fpkt"];
438--528[label="0.0175439;2pkt 2fpkt"];
438--543[label="0.056926;30pkt 30fpkt"];
438--598[label="0.00510204;1pkt 1fpkt"];
438--617[label="0.00534759;1pkt 1fpkt"];
438--633[label="0.015873;4pkt 4fpkt"];
438--645[label="0.00308642;1pkt 1fpkt"];
438--718[label="0.00647249;2pkt 2fpkt"];
438--725[label="0.141304;13pkt 13fpkt"];
438--729[label="0.00334448;1pkt 1fpkt"];
438--769[label="0.00684932;1pkt 1fpkt"];
438--809[label="0.00129199;1pkt 1fpkt"];
438--813[label="1;9pkt 9fpkt"];
438--836[label="0.0060241;1pkt 1fpkt"];
438--845[label="0.0326087;3pkt 3fpkt"];
438--850[label="0.126214;13pkt 13fpkt"];
438--877[label="0.0222222;5pkt 5fpkt"];
438--879[label="0.0701754;4pkt 4fpkt"];
438--889[label="0.0162602;2pkt 2fpkt"];
438--920[label="0.314286;22pkt 22fpkt"];
438--981[label="0.1;1pkt 1fpkt"];
438--1097[label="0.0390625;5pkt 5fpkt"];
438--1107[label="0.0413223;5pkt 5fpkt"];
438--1145[label="0.0142857;1pkt 1fpkt"];
438--1153[label="0.0559006;9pkt 9fpkt"];
438--1168[label="1;78pkt 78fpkt"];
438--1228[label="0.03125;2pkt 2fpkt"];
438--1243[label="0.0153846;1pkt 1fpkt"];
438--1366[label="0.0714286;1pkt 1fpkt"];
438--1375[label="0.00909091;1pkt 1fpkt"];
438--1498[label="0.0056338;2pkt 2fpkt"];
438--1523[label="0.0170015;11pkt 11fpkt"];
438--1538[label="0.0263158;2pkt 2fpkt"];
438--1583[label="0.00704225;1pkt 1fpkt"];
438--1586[label="0.015;3pkt 3fpkt"];
438--1608[label="0.0864198;14pkt 14fpkt"];
438--1632[label="0.0070922;2pkt 2fpkt"];
438--1645[label="0.142857;6pkt 6fpkt"];
438--1658[label="0.00510204;1pkt 1fpkt"];
438--1758[label="0.0208333;3pkt 3fpkt"];
438--1783[label="0.0275229;3pkt 3fpkt"];
438--1794[label="0.0238095;2pkt 2fpkt"];
438--1823[label="1;9pkt 9fpkt"];
438--1838[label="1;774pkt 774fpkt"];
438--1847[label="0.00660066;4pkt 4fpkt"];
438--1869[label="0.125;12pkt 12fpkt"];
438--1907[label="0.33871;21pkt 21fpkt"];
438--1926[label="0.00980392;2pkt 2fpkt"];
438--1957[label="0.0179487;7pkt 7fpkt"];
438--1958[label="0.043956;4pkt 4fpkt"];
438--1961[label="0.1;1pkt 1fpkt"];
438--2114[label="0.0142857;1pkt 1fpkt"];
438--2126[label="0.0616438;9pkt 9fpkt"];
438--2179[label="0.03125;2pkt 2fpkt"];
438--2278[label="0.00660066;4pkt 4fpkt"];
438--2288[label="0.00564972;1pkt 1fpkt"];
438--2361[label="0.00884956;1pkt 1fpkt"];
438--2430[label="0.166667;1pkt 1fpkt"];
438--2464[label="0.866142;110pkt 110fpkt"];
438--2577[label="0.0153846;1pkt 1fpkt"];
438--2586[label="0.0273973;2pkt 2fpkt"];
438--2623[label="0.030303;3pkt 3fpkt"];
438--2687[label="0.125;1pkt 1fpkt"];
438--2770[label="0.111111;1pkt 1fpkt"];
438--2788[label="0.00769231;2pkt 2fpkt"];
438--2839[label="0.0140845;1pkt 1fpkt"];
438--2946[label="0.0536673;30pkt 30fpkt"];
438--2979[label="0.00552486;1pkt 1fpkt"];
438--3028[label="0.0083682;2pkt 2fpkt"];
438--3050[label="0.1;1pkt 1fpkt"];
438--3051[label="0.25;1pkt 1fpkt"];
438--3065[label="1;15pkt 15fpkt"];
438--3081[label="1;9pkt 9fpkt"];
438--3141[label="0.166667;2pkt 2fpkt"];
438--3208[label="0.75;6pkt 6fpkt"];
438--3237[label="0.8;4pkt 4fpkt"];
438--3252[label="0.142857;3pkt 3fpkt"];
438--3346[label="0.0714286;1pkt 1fpkt"];
438--3381[label="0.0555556;9pkt 9fpkt"];
438--3402[label="0.142857;1pkt 1fpkt"];
438--3435[label="0.0373134;5pkt 5fpkt"];
438--3463[label="0.166667;1pkt 1fpkt"];
438--3482[label="0.142857;1pkt 1fpkt"];
438--3501[label="0.0714286;1pkt 1fpkt"];
438--3544[label="0.0126582;1pkt 1fpkt"];
438--3605[label="0.612903;38pkt 38fpkt"];
438--3631[label="1;6pkt 6fpkt"];
438--3635[label="0.0201613;5pkt 5fpkt"];
438--3650[label="0.00775194;6pkt 6fpkt"];
438--3668[label="0.00306748;1pkt 1fpkt"];
438--3718[label="0.00129199;1pkt 1fpkt"];
438--3795[label="0.011194;3pkt 3fpkt"];
438--3936[label="0.1;1pkt 1fpkt"];
438--3956[label="0.0192308;1pkt 1fpkt"];
438--3963[label="0.0165289;2pkt 2fpkt"];
438--4007[label="0.0222222;1pkt 1fpkt"];
438--4124[label="1;4pkt 4fpkt"];
438--4158[label="0.0128205;1pkt 1fpkt"];
438--4194[label="0.0145985;2pkt 2fpkt"];
438--4227[label="0.925926;50pkt 50fpkt"];
438--4229[label="0.00498753;2pkt 2fpkt"];
438--4348[label="0.2;1pkt 1fpkt"];
438--4481[label="0.25;1pkt 1fpkt"];
438--4494[label="0.166667;6pkt 6fpkt"];
438--4564[label="0.00645161;1pkt 1fpkt"];
438--4573[label="0.0178571;1pkt 1fpkt"];
438--4575[label="0.0196078;2pkt 2fpkt"];
438--4584[label="0.056;14pkt 14fpkt"];
438--4602[label="0.0833333;1pkt 1fpkt"];
438--4613[label="0.126214;13pkt 13fpkt"];
438--4677[label="0.866142;110pkt 110fpkt"];
438--4857[label="0.125;1pkt 1fpkt"];
438--4896[label="0.0142857;1pkt 1fpkt"];
438--5011[label="0.00840336;2pkt 2fpkt"];
438--5022[label="0.1;1pkt 1fpkt"];
438--5031[label="1;15pkt 15fpkt"];
438--5037[label="1;8pkt 8fpkt"];
438--5136[label="0.15;3pkt 3fpkt"];
438--5184[label="0.0714286;1pkt 1fpkt"];
438--5206[label="0.0559006;9pkt 9fpkt"];
438--5218[label="0.166667;1pkt 1fpkt"];
438--5238[label="0.0373134;5pkt 5fpkt"];
438--5249[label="0.2;1pkt 1fpkt"];
438--5268[label="0.0714286;1pkt 1fpkt"];
438--5327[label="0.612903;38pkt 38fpkt"];
438--5340[label="1;5pkt 5fpkt"];
438--5347[label="0.00775194;6pkt 6fpkt"];
438--5383[label="0.00129199;1pkt 1fpkt"];
438--5423[label="0.011194;3pkt 3fpkt"];
438--5491[label="0.1;1pkt 1fpkt"];
438--5500[label="0.0192308;1pkt 1fpkt"];
438--5522[label="0.0222222;1pkt 1fpkt"];
438--5775[label="0.166667;6pkt 6fpkt"];
438--5820[label="0.0181818;1pkt 1fpkt"];
438--5825[label="0.0562249;14pkt 14fpkt"];
438--5868[label="0.866142;110pkt 110fpkt"];
438--6032[label="1;16pkt 16fpkt"];
438--6034[label="1;8pkt 8fpkt"];
438--6111[label="0.0555556;9pkt 9fpkt"];
438--6117[label="0.142857;1pkt 1fpkt"];
438--6132[label="0.0769231;1pkt 1fpkt"];
438--6156[label="0.612903;38pkt 38fpkt"];
438--6165[label="0.00775194;6pkt 6fpkt"];
438--6203[label="0.011236;3pkt 3fpkt"];
438--6237[label="0.0192308;1pkt 1fpkt"];
438--6373[label="0.0181818;1pkt 1fpkt"];
438--6377[label="0.0562249;14pkt 14fpkt"];
981--1623[label="0.1;1pkt 1fpkt"];
981--1838[label="0.1;1pkt 1fpkt"];
981--1961[label="1;10pkt 10fpkt"];
981--3050[label="1;10pkt 10fpkt"];
981--5022[label="1;10pkt 10fpkt"];
1168--1838[label="1;78pkt 78fpkt"];
1168--2464[label="1;78pkt 78fpkt"];
1168--4677[label="1;78pkt 78fpkt"];
1168--5868[label="1;78pkt 78fpkt"];
1838--1847[label="0.00660066;4pkt 4fpkt"];
1838--1869[label="0.125;12pkt 12fpkt"];
1838--1907[label="0.33871;21pkt 21fpkt"];
1838--1926[label="0.00980392;2pkt 2fpkt"];
1838--1957[label="0.0179487;7pkt 7fpkt"];
1838--1958[label="0.043956;4pkt 4fpkt"];
1838--1961[label="0.1;1pkt 1fpkt"];
1838--2114[label="0.0142857;1pkt 1fpkt"];
1838--2126[label="0.0616438;9pkt 9fpkt"];
1838--2179[label="0.03125;2pkt 2fpkt"];
1838--2278[label="0.00660066;4pkt 4fpkt"];
1838--2288[label="0.00564972;1pkt 1fpkt"];
1838--2361[label="0.00884956;1pkt 1fpkt"];
1838--2430[label="0.166667;1pkt 1fpkt"];
1838--2464[label="0.866142;110pkt 110fpkt"];
1838--2577[label="0.0153846;1pkt 1fpkt"];
1838--2586[label="0.0273973;2pkt 2fpkt"];
1838--2623[label="0.030303;3pkt 3fpkt"];
1838--2687[label="0.125;1pkt 1fpkt"];
1838--2770[label="0.111111;1pkt 1fpkt"];
1838--2788[label="0.00769231;2pkt 2fpkt"];
1838--2839[label="0.0140845;1pkt 1fpkt"];
1838--2946[label="0.0536673;30pkt 30fpkt"];
1838--2979[label="0.00552486;1pkt 1fpkt"];
1838--3028[label="0.0083682;2pkt 2fpkt"];
1838--3050[label="0.1;1pkt 1fpkt"];
1838--3051[label="0.25;1pkt 1fpkt"];
1838--3065[label="1;15pkt 15fpkt"];
1838--3081[label="1;9pkt 9fpkt"];
1838--3141[label="0.166667;2pkt 2fpkt"];
1838--3208[label="0.75;6pkt 6fpkt"];
1838--3237[label="0.8;4pkt 4fpkt"];
1838--3252[label="0.142857;3pkt 3fpkt"];
1838--3346[label="0.0714286;1pkt 1fpkt"];
1838--3381[label="0.0555556;9pkt 9fpkt"];
1838--3402[label="0.142857;1pkt 1fpkt"];
1838--3435[label="0.0373134;5pkt 5fpkt"];
1838--3463[label="0.166667;1pkt 1fpkt"];
1838--3482[label="0.142857;1pkt 1fpkt"];
1838--3501[label="0.0714286;1pkt 1fpkt"];
1838--3544[label="0.0126582;1pkt 1fpkt"];
1838--3605[label="0.612903;38pkt 38fpkt"];
1838--3631[label="1;6pkt 6fpkt"];
1838--3635[label="0.0201613;5pkt 5fpkt"];
1838--3650[label="0.00775194;6pkt 6fpkt"];
1838--3668[label="0.00306748;1pkt 1fpkt"];
1838--3718[label="0.00129199;1pkt 1fpkt"];
1838--3795[label="0.011194;3pkt 3fpkt"];
1838--3936[label="0.1;1pkt 1fpkt"];
1838--3956[label="0.0192308;1pkt 1fpkt"];
1838--3963[label="0.0165289;2pkt 2fpkt"];
1838--4007[label="0.0222222;1pkt 1fpkt"];
1838--4124[label="1;4pkt 4fpkt"];
1838--4158[label="0.0128205;1pkt 1fpkt"];
1838--4194[label="0.0145985;2pkt 2fpkt"];
1838--4227[label="0.925926;50pkt 50fpkt"];
1838--4229[label="0.00498753;2pkt 2fpkt"];
1838--4348[label="0.2;1pkt 1fpkt"];
1838--4481[label="0.25;1pkt 1fpkt"];
1838--4494[label="0.166667;6pkt 6fpkt"];
1838--4564[label="0.00645161;1pkt 1fpkt"];
1838--4573[label="0.0178571;1pkt 1fpkt"];
1838--4575[label="0.0196078;2pkt 2fpkt"];
1838--4584[label="0.056;14pkt 14fpkt"];
1838--4602[label="0.0833333;1pkt 1fpkt"];
1838--4613[label="0.126214;13pkt 13fpkt"];
1838--4677[label="0.866142;110pkt 110fpkt"];
1838--4857[label="0.125;1pkt 1fpkt"];
1838--4896[label="0.0142857;1pkt 1fpkt"];
1838--5011[label="0.00840336;2pkt 2fpkt"];
1838--5022[label="0.1;1pkt 1fpkt"];
1838--5031[label="1;15pkt 15fpkt"];
1838--5037[label="1;8pkt 8fpkt"];
1838--5136[label="0.15;3pkt 3fpkt"];
1838--5184[label="0.0714286;1pkt 1fpkt"];
1838--5206[label="0.0559006;9pkt 9fpkt"];
1838--5218[label="0.166667;1pkt 1fpkt"];
1838--5238[label="0.0373134;5pkt 5fpkt"];
1838--5249[label="0.2;1pkt 1fpkt"];
1838--5268[label="0.0714286;1pkt 1fpkt"];
1838--5327[label="0.612903;38pkt 38fpkt"];
1838--5340[label="1;5pkt 5fpkt"];
1838--5347[label="0.00775194;6pkt 6fpkt"];
1838--5383[label="0.00129199;1pkt 1fpkt"];
1838--5423[label="0.011194;3pkt 3fpkt"];
1838--5491[label="0.1;1pkt 1fpkt"];
1838--5500[label="0.0192308;1pkt 1fpkt"];
1838--5522[label="0.0222222;1pkt 1fpkt"];
1838--5775[label="0.166667;6pkt 6fpkt"];
1838--5820[label="0.0181818;1pkt 1fpkt"];
1838--5825[label="0.0562249;14pkt 14fpkt"];
1838--5868[label="0.866142;110pkt 110fpkt"];
1838--6032[label="1;16pkt 16fpkt"];
1838--6034[label="1;8pkt 8fpkt"];
1838--6111[label="0.0555556;9pkt 9fpkt"];
1838--6117[label="0.142857;1pkt 1fpkt"];
1838--6132[label="0.0769231;1pkt 1fpkt"];
1838--6156[label="0.612903;38pkt 38fpkt"];
1838--6165[label="0.00775194;6pkt 6fpkt"];
1838--6203[label="0.011236;3pkt 3fpkt"];
1838--6237[label="0.0192308;1pkt 1fpkt"];
1838--6373[label="0.0181818;1pkt 1fpkt"];
1838--6377[label="0.0562249;14pkt 14fpkt"];
1869--1939[label="0.0104167;1pkt 1fpkt"];
1869--2095[label="0.107143;3pkt 3fpkt"];
1869--2303[label="0.037037;2pkt 2fpkt"];
1961--3050[label="1;10pkt 10fpkt"];
1961--5022[label="1;10pkt 10fpkt"];
2464--4677[label="1;127pkt 127fpkt"];
2464--5868[label="1;127pkt 127fpkt"];
3050--5022[label="1;10pkt 10fpkt"];
3065--5031[label="1;15pkt 15fpkt"];
3065--6032[label="1;15pkt 15fpkt"];
3402--5218[label="1;6pkt 6fpkt"];
3402--6117[label="1;7pkt 7fpkt"];
3463--5249[label="1;5pkt 5fpkt"];
3631--5340[label="1;5pkt 5fpkt"];
4677--5868[label="1;127pkt 127fpkt"];
5031--6032[label="1;15pkt 15fpkt"];
5218--6117[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.96.175" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
868[label="197.97.18.209;s;867pkt 867fpkt", shape=diamond, color=yellow];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.97.18.209:0, *:0}[97.2318%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.2318%)&lt;BR/&gt; 80: (1.38408%)&lt;BR/&gt; 64939: (0.0576701%)&lt;BR/&gt; 62600: (0.0576701%)&lt;BR/&gt; 61376: (0.0576701%)&gt;];
}
</description>
    <slice>
      <filter src_ip="197.97.18.209"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
301[label="143.134.213.136;d;22pkt 22fpkt", shape=diamond, color=yellow];
592[label="17.115.35.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
1444[label="143.134.213.136;d;11pkt 11fpkt", shape=hexagon, color=black];
1643[label="17.115.35.216;s;1pkt 1fpkt", shape=hexagon, color=black];
3677[label="210.64.61.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3987[label="17.170.4.169;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4294[label="99.57.204.204;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4558[label="201.46.226.244;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5812[label="201.46.226.244;1pkt 1fpkt", shape=invtriangle, color=brown];
6173[label="210.64.61.134;1pkt 1fpkt", shape=invhouse, color=bisque];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 143.134.213.136:50500}[54.5455%]&lt;BR/&gt;{*:6881, 143.134.213.136:*}[40.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (30.4878%)&lt;BR/&gt; 50500: (17.0732%)&lt;BR/&gt; 49418: (4.87805%)&lt;BR/&gt; 49385: (4.87805%)&lt;BR/&gt; 49377: (4.87805%)&gt;];
}
301--592[label="1;1pkt 1fpkt"];
301--887[label="1;1pkt 1fpkt"];
301--1444[label="1;11pkt 11fpkt"];
301--1643[label="1;1pkt 1fpkt"];
301--3677[label="1;1pkt 1fpkt"];
301--3987[label="1;1pkt 1fpkt"];
301--4294[label="1;1pkt 1fpkt"];
301--4558[label="1;1pkt 1fpkt"];
301--5812[label="1;1pkt 1fpkt"];
301--6173[label="1;1pkt 1fpkt"];
592--1444[label="1;1pkt 1fpkt"];
592--1643[label="1;1pkt 1fpkt"];
1444--1643[label="1;1pkt 1fpkt"];
1444--3677[label="1;1pkt 1fpkt"];
1444--3987[label="1;1pkt 1fpkt"];
1444--4294[label="1;1pkt 1fpkt"];
1444--4558[label="1;1pkt 1fpkt"];
1444--5812[label="1;1pkt 1fpkt"];
1444--6173[label="1;1pkt 1fpkt"];
3677--6173[label="1;1pkt 1fpkt"];
4558--5812[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.213.136" src_port="6881"/>
      <filter dst_ip="143.134.213.136" dst_port="50500"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
429[label="209.176.134.101;d;1054pkt 1054fpkt", shape=diamond, color=yellow];
916[label="144.86.172.201;s;3pkt 3fpkt", shape=diamond, color=yellow];
1322[label="208.31.229.25;d;168pkt 168fpkt", shape=diamond, color=yellow];
1399[label="197.250.192.41;s;274pkt 274fpkt", shape=diamond, color=yellow];
1567[label="209.176.134.101;d;1054pkt 1054fpkt", shape=hexagon, color=black];
2070[label="208.31.229.26;d;493pkt 493fpkt", shape=hexagon, color=black];
2097[label="218.184.49.92;d;272pkt 272fpkt", shape=hexagon, color=black];
2834[label="197.250.192.41;275pkt 275fpkt", shape=pentagon, color=darkviolet];
3389[label="6.45.112.99;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4269[label="144.86.172.201;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5211[label="6.45.112.99;17pkt 17fpkt", shape=invtriangle, color=brown];
6114[label="6.45.112.99;18pkt 18fpkt", shape=invhouse, color=bisque];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 209.176.134.101:53}[47.4064%]&lt;BR/&gt;{*:*, 208.31.229.26:53}[21.6058%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.6321%)&lt;BR/&gt; 1024: (1.31579%)&lt;BR/&gt; 0: (1.28838%)&lt;BR/&gt; 32768: (1.20614%)&lt;BR/&gt; 80: (0.863487%)&gt;];
}
429--481[label="0.00819672;1pkt 1fpkt"];
429--642[label="0.0123457;1pkt 1fpkt"];
429--916[label="0.333333;1pkt 1fpkt"];
429--919[label="0.117647;2pkt 2fpkt"];
429--1040[label="0.0384615;1pkt 1fpkt"];
429--1150[label="0.0333333;1pkt 1fpkt"];
429--1164[label="0.020202;2pkt 2fpkt"];
429--1212[label="0.04;1pkt 1fpkt"];
429--1250[label="0.0117647;1pkt 1fpkt"];
429--1279[label="0.0119048;1pkt 1fpkt"];
429--1329[label="0.0126582;1pkt 1fpkt"];
429--1399[label="0.116788;32pkt 32fpkt"];
429--1567[label="1;1054pkt 1054fpkt"];
429--1592[label="0.0123457;1pkt 1fpkt"];
429--1808[label="0.117647;2pkt 2fpkt"];
429--2198[label="0.0119048;1pkt 1fpkt"];
429--2326[label="0.073055;77pkt 77fpkt"];
429--2336[label="0.113852;120pkt 120fpkt"];
429--2341[label="0.073055;77pkt 77fpkt"];
429--2478[label="0.0175439;1pkt 1fpkt"];
429--2509[label="0.2;1pkt 1fpkt"];
429--2536[label="0.0277778;2pkt 2fpkt"];
429--2669[label="0.0909091;1pkt 1fpkt"];
429--2726[label="0.0188679;2pkt 2fpkt"];
429--2764[label="0.0666667;1pkt 1fpkt"];
429--2785[label="0.0212766;1pkt 1fpkt"];
429--2834[label="0.116364;32pkt 32fpkt"];
429--2889[label="0.0114943;1pkt 1fpkt"];
429--2908[label="0.0327869;2pkt 2fpkt"];
429--3200[label="0.166667;1pkt 1fpkt"];
429--3389[label="0.0555556;1pkt 1fpkt"];
429--3459[label="0.0294118;1pkt 1fpkt"];
429--3689[label="0.0111111;1pkt 1fpkt"];
429--3714[label="0.04;2pkt 2fpkt"];
429--3734[label="0.0416667;1pkt 1fpkt"];
429--3874[label="0.0344828;1pkt 1fpkt"];
429--3985[label="0.0117647;1pkt 1fpkt"];
429--4064[label="0.03125;1pkt 1fpkt"];
429--4070[label="0.0384615;1pkt 1fpkt"];
429--4103[label="0.0322581;1pkt 1fpkt"];
429--4188[label="0.0357143;1pkt 1fpkt"];
429--4206[label="0.111111;2pkt 2fpkt"];
429--4248[label="0.0833333;2pkt 2fpkt"];
429--4264[label="0.08;2pkt 2fpkt"];
429--4269[label="0.5;1pkt 1fpkt"];
429--4281[label="0.05;1pkt 1fpkt"];
429--4401[label="0.05;1pkt 1fpkt"];
429--4687[label="0.0175439;1pkt 1fpkt"];
429--4707[label="0.2;1pkt 1fpkt"];
429--4722[label="0.0277778;2pkt 2fpkt"];
429--4803[label="0.1;1pkt 1fpkt"];
429--4865[label="0.0217391;1pkt 1fpkt"];
429--4939[label="0.0333333;2pkt 2fpkt"];
429--5211[label="0.0588235;1pkt 1fpkt"];
429--5247[label="0.030303;1pkt 1fpkt"];
429--5514[label="0.0119048;1pkt 1fpkt"];
429--5635[label="0.117647;2pkt 2fpkt"];
429--5666[label="0.08;2pkt 2fpkt"];
429--5873[label="0.0175439;1pkt 1fpkt"];
429--5885[label="0.2;1pkt 1fpkt"];
429--5893[label="0.0277778;2pkt 2fpkt"];
429--5995[label="0.0327869;2pkt 2fpkt"];
429--6114[label="0.0555556;1pkt 1fpkt"];
429--6244[label="0.0117647;1pkt 1fpkt"];
429--6295[label="0.117647;2pkt 2fpkt"];
429--6308[label="0.08;2pkt 2fpkt"];
916--1322[label="0.333333;1pkt 1fpkt"];
916--1567[label="0.333333;1pkt 1fpkt"];
916--2070[label="0.333333;1pkt 1fpkt"];
916--2170[label="0.333333;1pkt 1fpkt"];
916--4269[label="1;2pkt 2fpkt"];
1322--1647[label="0.00595238;1pkt 1fpkt"];
1322--2170[label="1;168pkt 168fpkt"];
1322--2326[label="0.077381;13pkt 13fpkt"];
1322--2336[label="0.14881;25pkt 25fpkt"];
1322--2341[label="0.077381;13pkt 13fpkt"];
1322--3370[label="0.0555556;1pkt 1fpkt"];
1322--3590[label="0.0434783;1pkt 1fpkt"];
1322--4064[label="0.03125;1pkt 1fpkt"];
1322--4070[label="0.0384615;1pkt 1fpkt"];
1322--4088[label="0.00595238;1pkt 1fpkt"];
1399--1528[label="0.00364964;1pkt 1fpkt"];
1399--1567[label="0.116788;32pkt 32fpkt"];
1399--1681[label="0.0364964;10pkt 10fpkt"];
1399--1687[label="0.0114504;3pkt 3fpkt"];
1399--1737[label="0.00364964;1pkt 1fpkt"];
1399--1748[label="0.0182482;5pkt 5fpkt"];
1399--1873[label="0.0510949;14pkt 14fpkt"];
1399--1945[label="0.0364964;10pkt 10fpkt"];
1399--2069[label="0.0182482;5pkt 5fpkt"];
1399--2070[label="0.0656934;18pkt 18fpkt"];
1399--2083[label="0.0218978;6pkt 6fpkt"];
1399--2097[label="0.0441176;12pkt 12fpkt"];
1399--2177[label="0.00552486;1pkt 1fpkt"];
1399--2182[label="0.0120482;3pkt 3fpkt"];
1399--2336[label="0.368613;101pkt 101fpkt"];
1399--2834[label="1;274pkt 274fpkt"];
1567--1592[label="0.0123457;1pkt 1fpkt"];
1567--1808[label="0.117647;2pkt 2fpkt"];
1567--2198[label="0.0119048;1pkt 1fpkt"];
1567--2326[label="0.073055;77pkt 77fpkt"];
1567--2336[label="0.113852;120pkt 120fpkt"];
1567--2341[label="0.073055;77pkt 77fpkt"];
1567--2478[label="0.0175439;1pkt 1fpkt"];
1567--2509[label="0.2;1pkt 1fpkt"];
1567--2536[label="0.0277778;2pkt 2fpkt"];
1567--2669[label="0.0909091;1pkt 1fpkt"];
1567--2726[label="0.0188679;2pkt 2fpkt"];
1567--2764[label="0.0666667;1pkt 1fpkt"];
1567--2785[label="0.0212766;1pkt 1fpkt"];
1567--2834[label="0.116364;32pkt 32fpkt"];
1567--2889[label="0.0114943;1pkt 1fpkt"];
1567--2908[label="0.0327869;2pkt 2fpkt"];
1567--3200[label="0.166667;1pkt 1fpkt"];
1567--3389[label="0.0555556;1pkt 1fpkt"];
1567--3459[label="0.0294118;1pkt 1fpkt"];
1567--3689[label="0.0111111;1pkt 1fpkt"];
1567--3714[label="0.04;2pkt 2fpkt"];
1567--3734[label="0.0416667;1pkt 1fpkt"];
1567--3874[label="0.0344828;1pkt 1fpkt"];
1567--3985[label="0.0117647;1pkt 1fpkt"];
1567--4064[label="0.03125;1pkt 1fpkt"];
1567--4070[label="0.0384615;1pkt 1fpkt"];
1567--4103[label="0.0322581;1pkt 1fpkt"];
1567--4188[label="0.0357143;1pkt 1fpkt"];
1567--4206[label="0.111111;2pkt 2fpkt"];
1567--4248[label="0.0833333;2pkt 2fpkt"];
1567--4264[label="0.08;2pkt 2fpkt"];
1567--4269[label="0.5;1pkt 1fpkt"];
1567--4281[label="0.05;1pkt 1fpkt"];
1567--4401[label="0.05;1pkt 1fpkt"];
1567--4687[label="0.0175439;1pkt 1fpkt"];
1567--4707[label="0.2;1pkt 1fpkt"];
1567--4722[label="0.0277778;2pkt 2fpkt"];
1567--4803[label="0.1;1pkt 1fpkt"];
1567--4865[label="0.0217391;1pkt 1fpkt"];
1567--4939[label="0.0333333;2pkt 2fpkt"];
1567--5211[label="0.0588235;1pkt 1fpkt"];
1567--5247[label="0.030303;1pkt 1fpkt"];
1567--5514[label="0.0119048;1pkt 1fpkt"];
1567--5635[label="0.117647;2pkt 2fpkt"];
1567--5666[label="0.08;2pkt 2fpkt"];
1567--5873[label="0.0175439;1pkt 1fpkt"];
1567--5885[label="0.2;1pkt 1fpkt"];
1567--5893[label="0.0277778;2pkt 2fpkt"];
1567--5995[label="0.0327869;2pkt 2fpkt"];
1567--6114[label="0.0555556;1pkt 1fpkt"];
1567--6244[label="0.0117647;1pkt 1fpkt"];
1567--6295[label="0.117647;2pkt 2fpkt"];
1567--6308[label="0.08;2pkt 2fpkt"];
2070--2326[label="0.10142;50pkt 50fpkt"];
2070--2336[label="0.0973631;48pkt 48fpkt"];
2070--2341[label="0.10142;50pkt 50fpkt"];
2070--2478[label="0.0526316;3pkt 3fpkt"];
2070--2494[label="0.0149254;1pkt 1fpkt"];
2070--2693[label="0.00325733;1pkt 1fpkt"];
2070--2723[label="0.00471698;1pkt 1fpkt"];
2070--2726[label="0.0188679;2pkt 2fpkt"];
2070--2785[label="0.0212766;1pkt 1fpkt"];
2070--2834[label="0.0654545;18pkt 18fpkt"];
2070--2929[label="0.00917431;1pkt 1fpkt"];
2070--2952[label="0.00398406;1pkt 1fpkt"];
2070--3057[label="0.0206186;2pkt 2fpkt"];
2070--3370[label="0.0555556;1pkt 1fpkt"];
2070--3383[label="0.021978;2pkt 2fpkt"];
2070--3703[label="0.0333333;3pkt 3fpkt"];
2070--3734[label="0.0416667;1pkt 1fpkt"];
2070--3802[label="0.0163934;1pkt 1fpkt"];
2070--3874[label="0.0344828;1pkt 1fpkt"];
2070--3985[label="0.0470588;4pkt 4fpkt"];
2070--4064[label="0.03125;1pkt 1fpkt"];
2070--4089[label="0.030303;1pkt 1fpkt"];
2070--4269[label="0.5;1pkt 1fpkt"];
2070--4281[label="0.05;1pkt 1fpkt"];
2070--4285[label="0.020284;10pkt 10fpkt"];
2070--4309[label="0.0740741;2pkt 2fpkt"];
2070--4469[label="0.047619;1pkt 1fpkt"];
2070--4574[label="0.25;2pkt 2fpkt"];
2070--4687[label="0.0526316;3pkt 3fpkt"];
2070--4698[label="0.0147059;1pkt 1fpkt"];
2070--4815[label="0.00324675;1pkt 1fpkt"];
2070--4865[label="0.0217391;1pkt 1fpkt"];
2070--4965[label="0.004;1pkt 1fpkt"];
2070--5198[label="0.0588235;1pkt 1fpkt"];
2070--5374[label="0.0333333;3pkt 3fpkt"];
2070--5426[label="0.0163934;1pkt 1fpkt"];
2070--5514[label="0.047619;4pkt 4fpkt"];
2070--5680[label="0.020284;10pkt 10fpkt"];
2070--5691[label="0.0740741;2pkt 2fpkt"];
2070--5821[label="0.25;2pkt 2fpkt"];
2070--5873[label="0.0526316;3pkt 3fpkt"];
2070--6244[label="0.0470588;4pkt 4fpkt"];
2070--6324[label="0.0769231;2pkt 2fpkt"];
2097--2326[label="0.0404412;11pkt 11fpkt"];
2097--2336[label="0.0477941;13pkt 13fpkt"];
2097--2341[label="0.0404412;11pkt 11fpkt"];
2097--2343[label="0.00367647;1pkt 1fpkt"];
2097--2349[label="0.00367647;1pkt 1fpkt"];
2097--2494[label="0.0149254;1pkt 1fpkt"];
2097--2756[label="0.0235294;2pkt 2fpkt"];
2097--2764[label="0.0666667;1pkt 1fpkt"];
2097--2785[label="0.0212766;1pkt 1fpkt"];
2097--2834[label="0.0441176;12pkt 12fpkt"];
2097--2837[label="0.0144928;1pkt 1fpkt"];
2097--3459[label="0.0294118;1pkt 1fpkt"];
2097--3802[label="0.0163934;1pkt 1fpkt"];
2097--3985[label="0.0117647;1pkt 1fpkt"];
2097--4028[label="0.0714286;1pkt 1fpkt"];
2097--4206[label="0.166667;3pkt 3fpkt"];
2097--4349[label="0.0833333;1pkt 1fpkt"];
2097--4435[label="0.047619;1pkt 1fpkt"];
2097--4546[label="0.0588235;1pkt 1fpkt"];
2097--4698[label="0.0147059;1pkt 1fpkt"];
2097--4865[label="0.0217391;1pkt 1fpkt"];
2097--4895[label="0.0147059;1pkt 1fpkt"];
2097--5247[label="0.030303;1pkt 1fpkt"];
2097--5426[label="0.0163934;1pkt 1fpkt"];
2097--5514[label="0.0119048;1pkt 1fpkt"];
2097--5533[label="0.0714286;1pkt 1fpkt"];
2097--5635[label="0.176471;3pkt 3fpkt"];
2097--5971[label="0.0144928;1pkt 1fpkt"];
2097--6244[label="0.0117647;1pkt 1fpkt"];
2097--6295[label="0.176471;3pkt 3fpkt"];
3389--5211[label="1;17pkt 17fpkt"];
3389--6114[label="1;18pkt 18fpkt"];
5211--6114[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="209.176.134.101" dst_port="53"/>
      <filter dst_ip="208.31.229.26" dst_port="53"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
953[label="146.153.6.36;s;82pkt 82fpkt", shape=diamond, color=yellow];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.6.36:*, 202.53.27.244:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 1563: (0.609756%)&lt;BR/&gt; 1562: (0.609756%)&lt;BR/&gt; 1560: (0.609756%)&lt;BR/&gt; 1557: (0.609756%)&gt;];
}
953--2768[label="1;82pkt 82fpkt"];
953--4855[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_ip="202.53.27.244" dst_port="8080" src_ip="146.153.6.36"/>
    </slice>
    <from sec="1068527214" usec="0"/>
    <to sec="1068527601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="146.153.154.18"/>
      <from sec="1068526800" usec="0"/>
      <to sec="1068527628" usec="0"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.176.144.0"/>
      <from sec="1068526800" usec="0"/>
      <to sec="1068527623" usec="0"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790933,1.81327,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
1853[label="197.101.124.254;s;3076pkt 3076fpkt", shape=hexagon, color=black];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.101.124.254:2242, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2242: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1853--1904[label="0.0555556;1pkt 1fpkt"];
1853--2330[label="0.172483;257pkt 257fpkt"];
1853--2346[label="0.172483;257pkt 257fpkt"];
1853--2351[label="0.172483;257pkt 257fpkt"];
1853--4619[label="1;3076pkt 3076fpkt"];
1853--5840[label="1;3076pkt 3076fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="197.101.124.254" src_port="2242"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
484[label="202.132.201.25;s;1pkt 1fpkt", shape=diamond, color=yellow];
919[label="7.136.250.194;s;17pkt 17fpkt", shape=diamond, color=yellow];
988[label="209.176.134.120;d;456pkt 456fpkt", shape=diamond, color=yellow];
1338[label="209.176.135.172;d;273pkt 273fpkt", shape=diamond, color=yellow];
1808[label="7.136.250.194;s;17pkt 17fpkt", shape=hexagon, color=black];
1873[label="209.176.134.120;d;456pkt 456fpkt", shape=hexagon, color=black];
4206[label="7.136.250.194;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5635[label="7.136.250.194;17pkt 17fpkt", shape=invtriangle, color=brown];
6295[label="7.136.250.194;17pkt 17fpkt", shape=invhouse, color=bisque];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 209.176.134.120:53}[47.9195%]&lt;BR/&gt;{*:*, 209.176.135.172:53}[32.2148%]&lt;BR/&gt;{*:53, *:*}[21.0738%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.7862%)&lt;BR/&gt; 65534: (5.73899%)&lt;BR/&gt; 0: (4.16667%)&lt;BR/&gt; 80: (1.69025%)&lt;BR/&gt; 32768: (1.37579%)&gt;];
}
484--2175[label="1;1pkt 1fpkt"];
919--988[label="0.0588235;1pkt 1fpkt"];
919--1126[label="0.176471;3pkt 3fpkt"];
919--1338[label="0.117647;2pkt 2fpkt"];
919--1466[label="0.0588235;1pkt 1fpkt"];
919--1567[label="0.117647;2pkt 2fpkt"];
919--1808[label="1;17pkt 17fpkt"];
919--1873[label="0.0588235;1pkt 1fpkt"];
919--1997[label="0.117647;2pkt 2fpkt"];
919--2097[label="0.176471;3pkt 3fpkt"];
919--4206[label="1;17pkt 17fpkt"];
919--5635[label="0.941176;16pkt 16fpkt"];
919--6295[label="0.941176;16pkt 16fpkt"];
988--1002[label="0.0133333;1pkt 1fpkt"];
988--1137[label="0.016129;1pkt 1fpkt"];
988--1164[label="0.010101;1pkt 1fpkt"];
988--1212[label="0.04;1pkt 1fpkt"];
988--1229[label="0.0103093;1pkt 1fpkt"];
988--1238[label="0.0178571;1pkt 1fpkt"];
988--1399[label="0.0510949;14pkt 14fpkt"];
988--1698[label="0.00917431;1pkt 1fpkt"];
988--1808[label="0.0588235;1pkt 1fpkt"];
988--1873[label="1;456pkt 456fpkt"];
988--1988[label="0.016129;1pkt 1fpkt"];
988--2144[label="0.03125;1pkt 1fpkt"];
988--2326[label="0.0438596;20pkt 20fpkt"];
988--2336[label="0.0767544;35pkt 35fpkt"];
988--2341[label="0.0438596;20pkt 20fpkt"];
988--2536[label="0.0138889;1pkt 1fpkt"];
988--2702[label="0.0416667;1pkt 1fpkt"];
988--2726[label="0.00943396;1pkt 1fpkt"];
988--2728[label="0.0869565;2pkt 2fpkt"];
988--2767[label="0.00840336;1pkt 1fpkt"];
988--2834[label="0.0509091;14pkt 14fpkt"];
988--2908[label="0.0163934;1pkt 1fpkt"];
988--3057[label="0.0103093;1pkt 1fpkt"];
988--3551[label="0.0285714;1pkt 1fpkt"];
988--4070[label="0.0384615;1pkt 1fpkt"];
988--4089[label="0.030303;1pkt 1fpkt"];
988--4206[label="0.0555556;1pkt 1fpkt"];
988--4248[label="0.0833333;2pkt 2fpkt"];
988--4281[label="0.05;1pkt 1fpkt"];
988--4295[label="0.0140845;1pkt 1fpkt"];
988--4343[label="0.0125;1pkt 1fpkt"];
988--4401[label="0.05;1pkt 1fpkt"];
988--4469[label="0.047619;1pkt 1fpkt"];
988--4539[label="0.0151515;1pkt 1fpkt"];
988--4722[label="0.0138889;1pkt 1fpkt"];
988--4818[label="0.04;1pkt 1fpkt"];
988--4939[label="0.0166667;1pkt 1fpkt"];
988--5298[label="0.0294118;1pkt 1fpkt"];
988--5635[label="0.0588235;1pkt 1fpkt"];
988--5685[label="0.0142857;1pkt 1fpkt"];
988--5802[label="0.0151515;1pkt 1fpkt"];
988--5893[label="0.0138889;1pkt 1fpkt"];
988--5995[label="0.0163934;1pkt 1fpkt"];
988--6295[label="0.0588235;1pkt 1fpkt"];
1338--1399[label="0.029304;8pkt 8fpkt"];
1338--1808[label="0.117647;2pkt 2fpkt"];
1338--2029[label="0.003663;1pkt 1fpkt"];
1338--2144[label="0.0625;2pkt 2fpkt"];
1338--2326[label="0.0586081;16pkt 16fpkt"];
1338--2336[label="0.0989011;27pkt 27fpkt"];
1338--2341[label="0.0586081;16pkt 16fpkt"];
1338--2566[label="0.0263158;1pkt 1fpkt"];
1338--2834[label="0.029304;8pkt 8fpkt"];
1338--2859[label="0.003663;1pkt 1fpkt"];
1338--3147[label="0.00803213;2pkt 2fpkt"];
1338--3481[label="0.0175439;1pkt 1fpkt"];
1338--3784[label="0.02;1pkt 1fpkt"];
1338--4206[label="0.111111;2pkt 2fpkt"];
1338--4742[label="0.0263158;1pkt 1fpkt"];
1338--4913[label="0.003663;1pkt 1fpkt"];
1338--5259[label="0.0178571;1pkt 1fpkt"];
1338--5635[label="0.0588235;1pkt 1fpkt"];
1338--5902[label="0.0263158;1pkt 1fpkt"];
1338--6295[label="0.0588235;1pkt 1fpkt"];
1808--1873[label="0.0588235;1pkt 1fpkt"];
1808--1997[label="0.117647;2pkt 2fpkt"];
1808--2097[label="0.176471;3pkt 3fpkt"];
1808--4206[label="1;17pkt 17fpkt"];
1808--5635[label="0.941176;16pkt 16fpkt"];
1808--6295[label="0.941176;16pkt 16fpkt"];
1873--1988[label="0.016129;1pkt 1fpkt"];
1873--2144[label="0.03125;1pkt 1fpkt"];
1873--2326[label="0.0438596;20pkt 20fpkt"];
1873--2336[label="0.0767544;35pkt 35fpkt"];
1873--2341[label="0.0438596;20pkt 20fpkt"];
1873--2536[label="0.0138889;1pkt 1fpkt"];
1873--2702[label="0.0416667;1pkt 1fpkt"];
1873--2726[label="0.00943396;1pkt 1fpkt"];
1873--2728[label="0.0869565;2pkt 2fpkt"];
1873--2767[label="0.00840336;1pkt 1fpkt"];
1873--2834[label="0.0509091;14pkt 14fpkt"];
1873--2908[label="0.0163934;1pkt 1fpkt"];
1873--3057[label="0.0103093;1pkt 1fpkt"];
1873--3551[label="0.0285714;1pkt 1fpkt"];
1873--4070[label="0.0384615;1pkt 1fpkt"];
1873--4089[label="0.030303;1pkt 1fpkt"];
1873--4206[label="0.0555556;1pkt 1fpkt"];
1873--4248[label="0.0833333;2pkt 2fpkt"];
1873--4281[label="0.05;1pkt 1fpkt"];
1873--4295[label="0.0140845;1pkt 1fpkt"];
1873--4343[label="0.0125;1pkt 1fpkt"];
1873--4401[label="0.05;1pkt 1fpkt"];
1873--4469[label="0.047619;1pkt 1fpkt"];
1873--4539[label="0.0151515;1pkt 1fpkt"];
1873--4722[label="0.0138889;1pkt 1fpkt"];
1873--4818[label="0.04;1pkt 1fpkt"];
1873--4939[label="0.0166667;1pkt 1fpkt"];
1873--5298[label="0.0294118;1pkt 1fpkt"];
1873--5635[label="0.0588235;1pkt 1fpkt"];
1873--5685[label="0.0142857;1pkt 1fpkt"];
1873--5802[label="0.0151515;1pkt 1fpkt"];
1873--5893[label="0.0138889;1pkt 1fpkt"];
1873--5995[label="0.0163934;1pkt 1fpkt"];
1873--6295[label="0.0588235;1pkt 1fpkt"];
4206--5635[label="1;17pkt 17fpkt"];
4206--6295[label="1;17pkt 17fpkt"];
5635--6295[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_port="53"/>
      <filter dst_ip="209.176.134.120" dst_port="53"/>
      <filter dst_ip="209.176.135.172" dst_port="53"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
1100[label="209.176.133.39;d;139pkt 139fpkt", shape=diamond, color=yellow];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 209.176.133.39:0}[90.6475%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (90.6475%)&lt;BR/&gt; 80: (2.51799%)&lt;BR/&gt; 135: (1.79856%)&lt;BR/&gt; 64643: (0.359712%)&lt;BR/&gt; 63861: (0.359712%)&gt;];
}
1100--2029[label="0.00719424;1pkt 1fpkt"];
1100--2337[label="0.00719424;1pkt 1fpkt"];
1100--2434[label="0.00909091;1pkt 1fpkt"];
1100--2859[label="0.00719424;1pkt 1fpkt"];
1100--4659[label="0.00909091;1pkt 1fpkt"];
1100--4913[label="0.00719424;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.176.133.39"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,501,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
322[label="161.29.74.24;d;338pkt 338fpkt", shape=diamond, color=yellow];
596[label="18.20.175.57;s;2pkt 2fpkt", shape=diamond, color=yellow];
634[label="210.224.17.245;s;1pkt 1fpkt", shape=diamond, color=yellow];
914[label="192.3.196.228;s;1pkt 1fpkt", shape=diamond, color=yellow];
1108[label="16.64.25.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
1113[label="201.201.250.158;s;1pkt 1fpkt", shape=diamond, color=yellow];
1446[label="161.29.74.24;d;224pkt 224fpkt", shape=hexagon, color=black];
1656[label="18.20.175.57;s;2pkt 2fpkt", shape=hexagon, color=black];
1759[label="210.224.17.245;s;1pkt 1fpkt", shape=hexagon, color=black];
2010[label="192.3.196.228;s;1pkt 1fpkt", shape=hexagon, color=black];
2981[label="18.20.175.57;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3914[label="201.201.250.158;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4986[label="18.20.175.57;1pkt 1fpkt", shape=invtriangle, color=brown];
5483[label="201.201.250.158;1pkt 1fpkt", shape=invtriangle, color=brown];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 161.29.74.24:21}[73.3728%]&lt;BR/&gt;{*:4672, 161.29.74.24:31}[20.4142%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (37.5217%)&lt;BR/&gt; 31: (11.0919%)&lt;BR/&gt; 4672: (9.61872%)&lt;BR/&gt; 6662: (0.519931%)&lt;BR/&gt; 4603: (0.433276%)&gt;];
}
322--596[label="1;2pkt 2fpkt"];
322--634[label="1;1pkt 1fpkt"];
322--914[label="1;1pkt 1fpkt"];
322--1108[label="1;1pkt 1fpkt"];
322--1113[label="1;1pkt 1fpkt"];
322--1428[label="0.00295858;1pkt 1fpkt"];
322--1446[label="1;224pkt 224fpkt"];
322--1656[label="1;2pkt 2fpkt"];
322--1759[label="1;1pkt 1fpkt"];
322--2010[label="1;1pkt 1fpkt"];
322--2223[label="0.00295858;1pkt 1fpkt"];
322--2530[label="0.00295858;1pkt 1fpkt"];
322--2981[label="1;2pkt 2fpkt"];
322--3914[label="1;1pkt 1fpkt"];
322--4717[label="0.00295858;1pkt 1fpkt"];
322--4986[label="1;1pkt 1fpkt"];
322--5483[label="1;1pkt 1fpkt"];
322--5892[label="0.00295858;1pkt 1fpkt"];
596--1446[label="0.5;1pkt 1fpkt"];
596--1656[label="1;2pkt 2fpkt"];
596--2981[label="1;2pkt 2fpkt"];
596--4986[label="1;1pkt 1fpkt"];
634--1446[label="1;1pkt 1fpkt"];
634--1759[label="1;1pkt 1fpkt"];
914--1446[label="1;1pkt 1fpkt"];
914--2010[label="1;1pkt 1fpkt"];
1108--1446[label="1;1pkt 1fpkt"];
1113--1446[label="1;1pkt 1fpkt"];
1113--3914[label="1;1pkt 1fpkt"];
1113--5483[label="1;1pkt 1fpkt"];
1446--1656[label="0.5;1pkt 1fpkt"];
1446--1759[label="1;1pkt 1fpkt"];
1446--2010[label="1;1pkt 1fpkt"];
1446--2223[label="0.00446429;1pkt 1fpkt"];
1446--2530[label="0.00446429;1pkt 1fpkt"];
1446--2981[label="0.5;1pkt 1fpkt"];
1446--3914[label="1;1pkt 1fpkt"];
1446--4717[label="0.00446429;1pkt 1fpkt"];
1446--5483[label="1;1pkt 1fpkt"];
1446--5892[label="0.00446429;1pkt 1fpkt"];
1656--2981[label="1;2pkt 2fpkt"];
1656--4986[label="1;1pkt 1fpkt"];
2981--4986[label="1;1pkt 1fpkt"];
3914--5483[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.74.24" dst_port="21"/>
      <filter dst_ip="161.29.74.24" dst_port="31" src_port="4672"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="143.93.196.23"/>
      <from sec="1068526801" usec="0"/>
      <to sec="1068527627" usec="0"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15358,1.84872,002,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
53[label="202.3.20.61s;199pkt 199fpkt", shape=rectangle, color=red];
1216[label="143.134.196.18;d;7pkt 7fpkt", shape=diamond, color=yellow];
1327[label="200.184.186.247;s;1pkt 1fpkt", shape=diamond, color=yellow];
3009[label="202.3.20.61;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.3.20.61:1029, *:137}[97.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (49.2408%)&lt;BR/&gt; 137: (49.2408%)&lt;BR/&gt; 6667: (0.32538%)&lt;BR/&gt; 80: (0.32538%)&lt;BR/&gt; 35192: (0.21692%)&gt;];
}
53--1216[label="0.142857;1pkt 1fpkt"];
53--3009[label="1;199pkt 199fpkt"];
1216--1327[label="1;1pkt 1fpkt"];
1216--3009[label="0.142857;1pkt 1fpkt"];
1216--3650[label="0.142857;1pkt 1fpkt"];
1216--5347[label="0.142857;1pkt 1fpkt"];
1216--6165[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.3.20.61" src_port="1029"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
1245[label="212.30.113.114;s;6pkt 6fpkt", shape=diamond, color=yellow];
1871[label="136.93.146.122;d;117pkt 117fpkt", shape=hexagon, color=black];
3526[label="212.30.113.114;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.93.146.122:3606}[77.8689%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3606: (37.2093%)&lt;BR/&gt; 1863: (5.42636%)&lt;BR/&gt; 80: (5.42636%)&lt;BR/&gt; 3531: (3.10078%)&lt;BR/&gt; 1214: (2.32558%)&gt;];
}
1245--1871[label="0.166667;1pkt 1fpkt"];
1245--3526[label="1;6pkt 6fpkt"];
1245--5282[label="1;6pkt 6fpkt"];
1871--2327[label="0.017094;2pkt 2fpkt"];
1871--2342[label="0.017094;2pkt 2fpkt"];
1871--3526[label="0.166667;1pkt 1fpkt"];
1871--3936[label="0.1;1pkt 1fpkt"];
1871--5282[label="0.166667;1pkt 1fpkt"];
1871--5491[label="0.1;1pkt 1fpkt"];
3526--5282[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.146.122" dst_port="3606"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="10.141.19.143"/>
      <from sec="1068527480" usec="0"/>
      <to sec="1068527527" usec="0"/>
    </slice>
    <from sec="1068527480" usec="0"/>
    <to sec="1068527527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
287[label="208.31.228.18;d;311pkt 311fpkt", shape=diamond, color=yellow];
618[label="193.39.23.209;s;4pkt 4fpkt", shape=diamond, color=yellow];
724[label="17.172.48.56;s;1pkt 1fpkt", shape=diamond, color=yellow];
776[label="192.41.209.188;s;20pkt 20fpkt", shape=diamond, color=yellow];
867[label="1.182.186.62;s;3pkt 3fpkt", shape=diamond, color=yellow];
1156[label="17.125.32.69;s;9pkt 9fpkt", shape=diamond, color=yellow];
1159[label="201.147.187.18;s;8pkt 8fpkt", shape=diamond, color=yellow];
1486[label="208.31.228.18;d;311pkt 311fpkt", shape=hexagon, color=black];
1780[label="1.182.186.62;s;3pkt 3fpkt", shape=hexagon, color=black];
1859[label="193.39.23.209;s;4pkt 4fpkt", shape=hexagon, color=black];
2134[label="201.147.187.18;s;8pkt 8fpkt", shape=hexagon, color=black];
2578[label="201.147.187.18;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2962[label="17.172.48.56;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3097[label="17.125.32.69;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3476[label="1.108.130.107;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3715[label="132.66.11.137;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4159[label="192.41.209.188;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4310[label="18.8.105.208;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4315[label="193.39.23.209;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4748[label="201.147.187.18;7pkt 7fpkt", shape=invtriangle, color=brown];
5180[label="1.180.177.93;5pkt 5fpkt", shape=invtriangle, color=brown];
5381[label="132.66.11.137;1pkt 1fpkt", shape=invtriangle, color=brown];
5607[label="192.41.209.188;21pkt 21fpkt", shape=invtriangle, color=brown];
6310[label="98.46.87.201;1pkt 1fpkt", shape=invhouse, color=bisque];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 208.31.228.18:1214}[79.6178%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (41.6991%)&lt;BR/&gt; 0: (11.6732%)&lt;BR/&gt; 80: (1.16732%)&lt;BR/&gt; 135: (1.03761%)&lt;BR/&gt; 4114: (0.389105%)&gt;];
}
287--618[label="1;4pkt 4fpkt"];
287--724[label="1;1pkt 1fpkt"];
287--776[label="1;20pkt 20fpkt"];
287--833[label="1;1pkt 1fpkt"];
287--867[label="1;3pkt 3fpkt"];
287--1044[label="1;6pkt 6fpkt"];
287--1156[label="1;9pkt 9fpkt"];
287--1159[label="1;8pkt 8fpkt"];
287--1222[label="1;8pkt 8fpkt"];
287--1336[label="1;6pkt 6fpkt"];
287--1486[label="1;311pkt 311fpkt"];
287--1780[label="1;3pkt 3fpkt"];
287--1859[label="1;4pkt 4fpkt"];
287--2134[label="1;8pkt 8fpkt"];
287--2200[label="1;6pkt 6fpkt"];
287--2343[label="0.00321543;1pkt 1fpkt"];
287--2349[label="0.00321543;1pkt 1fpkt"];
287--2578[label="1;8pkt 8fpkt"];
287--2962[label="1;1pkt 1fpkt"];
287--3097[label="1;8pkt 8fpkt"];
287--3336[label="1;6pkt 6fpkt"];
287--3476[label="0.888889;8pkt 8fpkt"];
287--3715[label="1;1pkt 1fpkt"];
287--4159[label="0.904762;19pkt 19fpkt"];
287--4266[label="1;1pkt 1fpkt"];
287--4310[label="1;1pkt 1fpkt"];
287--4315[label="1;5pkt 5fpkt"];
287--4748[label="1;7pkt 7fpkt"];
287--5180[label="1;5pkt 5fpkt"];
287--5381[label="1;1pkt 1fpkt"];
287--5607[label="0.904762;19pkt 19fpkt"];
287--5668[label="1;1pkt 1fpkt"];
287--6310[label="1;1pkt 1fpkt"];
618--1486[label="1;4pkt 4fpkt"];
618--1859[label="1;4pkt 4fpkt"];
618--4315[label="0.75;3pkt 3fpkt"];
724--1486[label="1;1pkt 1fpkt"];
724--2962[label="1;1pkt 1fpkt"];
776--1486[label="1;20pkt 20fpkt"];
776--4159[label="0.95;19pkt 19fpkt"];
776--5607[label="0.95;19pkt 19fpkt"];
867--1486[label="1;3pkt 3fpkt"];
867--1780[label="1;3pkt 3fpkt"];
1156--1486[label="1;9pkt 9fpkt"];
1156--3097[label="1;8pkt 8fpkt"];
1159--1486[label="1;8pkt 8fpkt"];
1159--2134[label="1;8pkt 8fpkt"];
1159--2578[label="1;8pkt 8fpkt"];
1159--4748[label="1;7pkt 7fpkt"];
1486--1780[label="1;3pkt 3fpkt"];
1486--1859[label="1;4pkt 4fpkt"];
1486--2134[label="1;8pkt 8fpkt"];
1486--2200[label="1;6pkt 6fpkt"];
1486--2343[label="0.00321543;1pkt 1fpkt"];
1486--2349[label="0.00321543;1pkt 1fpkt"];
1486--2578[label="1;8pkt 8fpkt"];
1486--2962[label="1;1pkt 1fpkt"];
1486--3097[label="1;8pkt 8fpkt"];
1486--3336[label="1;6pkt 6fpkt"];
1486--3476[label="0.888889;8pkt 8fpkt"];
1486--3715[label="1;1pkt 1fpkt"];
1486--4159[label="0.904762;19pkt 19fpkt"];
1486--4266[label="1;1pkt 1fpkt"];
1486--4310[label="1;1pkt 1fpkt"];
1486--4315[label="1;5pkt 5fpkt"];
1486--4748[label="1;7pkt 7fpkt"];
1486--5180[label="1;5pkt 5fpkt"];
1486--5381[label="1;1pkt 1fpkt"];
1486--5607[label="0.904762;19pkt 19fpkt"];
1486--5668[label="1;1pkt 1fpkt"];
1486--6310[label="1;1pkt 1fpkt"];
1859--4315[label="0.75;3pkt 3fpkt"];
2134--2578[label="1;8pkt 8fpkt"];
2134--4748[label="1;7pkt 7fpkt"];
2578--4748[label="1;7pkt 7fpkt"];
3715--5381[label="1;1pkt 1fpkt"];
4159--5607[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.18" dst_port="1214"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="212.30.113.110"/>
      <from sec="1068526808" usec="0"/>
      <to sec="1068527625" usec="0"/>
    </slice>
    <from sec="1068526808" usec="0"/>
    <to sec="1068527625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
244[label="99.205.91.190;s;1pkt 1fpkt", shape=diamond, color=yellow];
1425[label="99.205.91.190;s;1pkt 1fpkt", shape=hexagon, color=black];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.205.91.190:55795, 136.93.199.81:3167}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55795: (50%)&lt;BR/&gt; 3167: (50%)&gt;];
}
244--1425[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.199.81" dst_port="3167" src_ip="99.205.91.190" src_port="55795"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
694[label="136.93.134.182;d;9pkt 9fpkt", shape=diamond, color=yellow];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.147.137.117:80, 136.93.134.182:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2069: (5.55556%)&lt;BR/&gt; 2067: (5.55556%)&lt;BR/&gt; 2066: (5.55556%)&lt;BR/&gt; 2064: (5.55556%)&gt;];
}
694--695[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.134.182" src_ip="197.147.137.117" src_port="80"/>
    </slice>
    <from sec="1068526899" usec="0"/>
    <to sec="1068527105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
265[label="98.6.97.139;s;2pkt 2fpkt", shape=diamond, color=yellow];
1432[label="98.6.97.139;s;2pkt 2fpkt", shape=hexagon, color=black];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.6.97.139:1755, 164.228.153.159:1916}[50%]&lt;BR/&gt;{98.6.97.139:2968, 164.228.153.159:1918}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2968: (25%)&lt;BR/&gt; 1918: (25%)&lt;BR/&gt; 1916: (25%)&lt;BR/&gt; 1755: (25%)&gt;];
}
265--1432[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="164.228.153.159" dst_port="1918" src_ip="98.6.97.139" src_port="2968"/>
      <filter dst_ip="164.228.153.159" dst_port="1916" src_ip="98.6.97.139" src_port="1755"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
274[label="164.228.175.135;d;1pkt 1fpkt", shape=diamond, color=yellow];
275[label="208.180.0.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
1434[label="208.180.0.236;s;1pkt 1fpkt", shape=hexagon, color=black];
1836[label="164.228.175.135;d;1pkt 1fpkt", shape=hexagon, color=black];
4487[label="208.180.0.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5771[label="208.180.0.236;1pkt 1fpkt", shape=invtriangle, color=brown];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.180.0.236:1755, 164.228.175.135:3479}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3479: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
274--275[label="1;1pkt 1fpkt"];
274--1434[label="1;1pkt 1fpkt"];
274--1836[label="1;1pkt 1fpkt"];
274--4487[label="1;1pkt 1fpkt"];
274--5771[label="1;1pkt 1fpkt"];
275--1434[label="1;1pkt 1fpkt"];
275--1836[label="1;1pkt 1fpkt"];
275--4487[label="1;1pkt 1fpkt"];
275--5771[label="1;1pkt 1fpkt"];
1434--1836[label="1;1pkt 1fpkt"];
1434--4487[label="1;1pkt 1fpkt"];
1434--5771[label="1;1pkt 1fpkt"];
1836--4487[label="1;1pkt 1fpkt"];
1836--5771[label="1;1pkt 1fpkt"];
4487--5771[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.228.175.135" dst_port="3479" src_ip="208.180.0.236" src_port="1755"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
284[label="208.18.146.24;s;9510pkt 9510fpkt", shape=diamond, color=yellow];
1437[label="208.18.146.24;s;8280pkt 8280fpkt", shape=hexagon, color=black];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.18.146.24:0, *:0}[99.8843%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8763%)&lt;BR/&gt; 80: (0.0618325%)&lt;BR/&gt; 57711: (0.00562114%)&lt;BR/&gt; 4523: (0.00562114%)&lt;BR/&gt; 4198: (0.00562114%)&gt;];
}
284--1437[label="1;8280pkt 8280fpkt"];
</description>
    <slice>
      <filter src_ip="208.18.146.24"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
289[label="164.228.107.219;d;5pkt 5fpkt", shape=diamond, color=yellow];
290[label="98.6.97.138;s;1pkt 1fpkt", shape=diamond, color=yellow];
1439[label="164.228.107.219;d;5pkt 5fpkt", shape=hexagon, color=black];
1440[label="98.6.97.138;s;1pkt 1fpkt", shape=hexagon, color=black];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.119.5:1863, 164.228.107.219:3808}[20%]&lt;BR/&gt;{200.145.58.136:80, 164.228.107.219:4633}[20%]&lt;BR/&gt;{98.6.97.138:1755, 164.228.107.219:3146}[20%]&lt;BR/&gt;{200.145.58.130:80, 164.228.107.219:4631}[20%]&lt;BR/&gt;{200.145.58.130:80, 164.228.107.219:4632}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 3146: (16.6667%)&lt;BR/&gt; 1755: (16.6667%)&lt;BR/&gt; 4633: (8.33333%)&lt;BR/&gt; 4632: (8.33333%)&gt;];
}
289--290[label="1;1pkt 1fpkt"];
289--633[label="0.2;1pkt 1fpkt"];
289--1439[label="1;5pkt 5fpkt"];
289--1440[label="1;1pkt 1fpkt"];
289--3650[label="0.4;2pkt 2fpkt"];
289--5347[label="0.4;2pkt 2fpkt"];
289--6165[label="0.4;2pkt 2fpkt"];
290--1439[label="1;1pkt 1fpkt"];
290--1440[label="1;1pkt 1fpkt"];
1439--1440[label="1;1pkt 1fpkt"];
1439--3650[label="0.4;2pkt 2fpkt"];
1439--5347[label="0.4;2pkt 2fpkt"];
1439--6165[label="0.4;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="164.228.107.219" dst_port="4632" src_ip="200.145.58.130" src_port="80"/>
      <filter dst_ip="164.228.107.219" dst_port="4631" src_ip="200.145.58.130" src_port="80"/>
      <filter dst_ip="164.228.107.219" dst_port="3146" src_ip="98.6.97.138" src_port="1755"/>
      <filter dst_ip="164.228.107.219" dst_port="4633" src_ip="200.145.58.136" src_port="80"/>
      <filter dst_ip="164.228.107.219" dst_port="3808" src_ip="212.30.119.5" src_port="1863"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
323[label="98.6.97.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
1447[label="98.6.97.136;s;1pkt 1fpkt", shape=hexagon, color=black];
3711[label="98.6.97.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.6.97.136:1755, 208.159.185.117:60638}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60638: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
323--1447[label="1;1pkt 1fpkt"];
323--1839[label="1;1pkt 1fpkt"];
323--3711[label="1;1pkt 1fpkt"];
1447--1839[label="1;1pkt 1fpkt"];
1447--3711[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.159.185.117" dst_port="60638" src_ip="98.6.97.136" src_port="1755"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
334[label="10.131.13.198;s;19709pkt 19709fpkt", shape=diamond, color=yellow];
1450[label="10.131.13.198;s;17327pkt 17327fpkt", shape=hexagon, color=black];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.131.13.198:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
334--1450[label="1;17327pkt 17327fpkt"];
</description>
    <slice>
      <filter src_ip="10.131.13.198"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
339[label="10.151.81.68;s;22131pkt 22131fpkt", shape=diamond, color=yellow];
1452[label="10.151.81.68;s;19827pkt 19827fpkt", shape=hexagon, color=black];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.151.81.68:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
339--1452[label="1;19827pkt 19827fpkt"];
</description>
    <slice>
      <filter src_ip="10.151.81.68"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
352[label="208.31.243.109;s;3304pkt 3304fpkt", shape=diamond, color=yellow];
1454[label="208.31.243.109;s;2626pkt 2626fpkt", shape=hexagon, color=black];
3494[label="208.31.243.109;3558pkt 3558fpkt", shape=pentagon, color=darkviolet];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.31.243.109:0, *:0}[99.6627%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.6522%)&lt;BR/&gt; 80: (0.163364%)&lt;BR/&gt; 4667: (0.0158094%)&lt;BR/&gt; 4480: (0.0158094%)&lt;BR/&gt; 3833: (0.0158094%)&gt;];
}
352--1454[label="1;2626pkt 2626fpkt"];
352--3494[label="1;3304pkt 3304fpkt"];
1454--3494[label="1;2626pkt 2626fpkt"];
</description>
    <slice>
      <filter src_ip="208.31.243.109"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
375[label="5.22.89.193;s;5006pkt 5006fpkt", shape=diamond, color=yellow];
1460[label="5.22.89.193;s;3706pkt 3706fpkt", shape=hexagon, color=black];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.22.89.193:*, *:17300}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17300: (50%)&lt;BR/&gt; 4528: (0.0573921%)&lt;BR/&gt; 2980: (0.0573921%)&lt;BR/&gt; 4514: (0.0516529%)&lt;BR/&gt; 3864: (0.0516529%)&gt;];
}
375--1012[label="0.012987;1pkt 1fpkt"];
375--1460[label="1;3706pkt 3706fpkt"];
</description>
    <slice>
      <filter dst_port="17300" src_ip="5.22.89.193"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
386[label="143.38.52.8;d;326pkt 326fpkt", shape=diamond, color=yellow];
425[label="197.45.50.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
1002[label="200.193.224.212;s;75pkt 75fpkt", shape=diamond, color=yellow];
1413[label="6.24.238.13;s;1pkt 1fpkt", shape=diamond, color=yellow];
1465[label="143.38.52.8;d;326pkt 326fpkt", shape=hexagon, color=black];
1473[label="197.45.50.71;s;1pkt 1fpkt", shape=hexagon, color=black];
3124[label="197.45.50.71;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3322[label="198.26.152.91;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3363[label="204.203.173.96;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4343[label="200.193.224.212;80pkt 80fpkt", shape=pentagon, color=darkviolet];
5172[label="198.26.152.91;6pkt 6fpkt", shape=invtriangle, color=brown];
6095[label="198.26.152.91;6pkt 6fpkt", shape=invhouse, color=bisque];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 143.38.52.8:*}[41.2195%]&lt;BR/&gt;{*:*, 143.38.52.8:25}[28.7805%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.3587%)&lt;BR/&gt; 995: (2.3753%)&lt;BR/&gt; 113: (2.019%)&lt;BR/&gt; 53: (1.72209%)&lt;BR/&gt; 59709: (0.296912%)&gt;];
}
386--425[label="1;1pkt 1fpkt"];
386--777[label="0.258065;16pkt 16fpkt"];
386--786[label="0.396226;21pkt 21fpkt"];
386--860[label="0.107527;10pkt 10fpkt"];
386--961[label="0.0277778;2pkt 2fpkt"];
386--1002[label="0.173333;13pkt 13fpkt"];
386--1017[label="0.3125;10pkt 10fpkt"];
386--1021[label="0.025641;1pkt 1fpkt"];
386--1026[label="0.394737;15pkt 15fpkt"];
386--1413[label="1;1pkt 1fpkt"];
386--1465[label="1;326pkt 326fpkt"];
386--1473[label="1;1pkt 1fpkt"];
386--1702[label="0.451613;14pkt 14fpkt"];
386--1774[label="0.105882;9pkt 9fpkt"];
386--1849[label="0.0277778;2pkt 2fpkt"];
386--1895[label="0.394737;15pkt 15fpkt"];
386--2233[label="1;42pkt 42fpkt"];
386--2918[label="0.282051;11pkt 11fpkt"];
386--2928[label="0.394737;15pkt 15fpkt"];
386--3124[label="0.5;1pkt 1fpkt"];
386--3322[label="0.142857;1pkt 1fpkt"];
386--3363[label="0.0909091;1pkt 1fpkt"];
386--3567[label="0.4;22pkt 22fpkt"];
386--3639[label="0.258065;16pkt 16fpkt"];
386--4150[label="0.103093;10pkt 10fpkt"];
386--4343[label="0.1625;13pkt 13fpkt"];
386--4952[label="0.405405;15pkt 15fpkt"];
386--5172[label="0.166667;1pkt 1fpkt"];
386--5305[label="0.4;22pkt 22fpkt"];
386--5343[label="0.258065;16pkt 16fpkt"];
386--5602[label="0.103093;10pkt 10fpkt"];
386--6095[label="0.166667;1pkt 1fpkt"];
386--6144[label="0.407407;22pkt 22fpkt"];
386--6161[label="0.262295;16pkt 16fpkt"];
425--1465[label="1;1pkt 1fpkt"];
425--1473[label="1;1pkt 1fpkt"];
425--2233[label="1;1pkt 1fpkt"];
425--3124[label="1;1pkt 1fpkt"];
1002--1082[label="0.0666667;5pkt 5fpkt"];
1002--1328[label="0.04;3pkt 3fpkt"];
1002--1465[label="0.173333;13pkt 13fpkt"];
1002--1466[label="0.106667;8pkt 8fpkt"];
1002--1751[label="0.106667;8pkt 8fpkt"];
1002--1873[label="0.0133333;1pkt 1fpkt"];
1002--1884[label="0.255814;11pkt 11fpkt"];
1002--1929[label="0.04;3pkt 3fpkt"];
1002--2233[label="0.047619;2pkt 2fpkt"];
1002--2234[label="0.0277778;2pkt 2fpkt"];
1002--2336[label="0.04;3pkt 3fpkt"];
1002--4343[label="1;75pkt 75fpkt"];
1413--1465[label="1;1pkt 1fpkt"];
1465--1473[label="1;1pkt 1fpkt"];
1465--1702[label="0.451613;14pkt 14fpkt"];
1465--1774[label="0.105882;9pkt 9fpkt"];
1465--1849[label="0.0277778;2pkt 2fpkt"];
1465--1895[label="0.394737;15pkt 15fpkt"];
1465--2233[label="1;42pkt 42fpkt"];
1465--2918[label="0.282051;11pkt 11fpkt"];
1465--2928[label="0.394737;15pkt 15fpkt"];
1465--3124[label="0.5;1pkt 1fpkt"];
1465--3322[label="0.142857;1pkt 1fpkt"];
1465--3363[label="0.0909091;1pkt 1fpkt"];
1465--3567[label="0.4;22pkt 22fpkt"];
1465--3639[label="0.258065;16pkt 16fpkt"];
1465--4150[label="0.103093;10pkt 10fpkt"];
1465--4343[label="0.1625;13pkt 13fpkt"];
1465--4952[label="0.405405;15pkt 15fpkt"];
1465--5172[label="0.166667;1pkt 1fpkt"];
1465--5305[label="0.4;22pkt 22fpkt"];
1465--5343[label="0.258065;16pkt 16fpkt"];
1465--5602[label="0.103093;10pkt 10fpkt"];
1465--6095[label="0.166667;1pkt 1fpkt"];
1465--6144[label="0.407407;22pkt 22fpkt"];
1465--6161[label="0.262295;16pkt 16fpkt"];
1473--2233[label="1;1pkt 1fpkt"];
1473--3124[label="1;1pkt 1fpkt"];
3322--5172[label="1;6pkt 6fpkt"];
3322--6095[label="1;6pkt 6fpkt"];
5172--6095[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.52.8" src_port="25"/>
      <filter dst_ip="143.38.52.8" dst_port="25"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
463[label="202.153.69.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
1503[label="202.153.69.37;s;1pkt 1fpkt", shape=hexagon, color=black];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.153.69.37:6881, 143.134.168.140:2730}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 2730: (50%)&gt;];
}
463--1503[label="1;1pkt 1fpkt"];
463--1634[label="1;1pkt 1fpkt"];
1503--1634[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.168.140" dst_port="2730" src_ip="202.153.69.37" src_port="6881"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
464[label="136.93.75.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
603[label="200.148.94.163;s;2pkt 2fpkt", shape=diamond, color=yellow];
1504[label="136.93.75.96;d;1pkt 1fpkt", shape=hexagon, color=black];
1735[label="200.148.94.163;s;2pkt 2fpkt", shape=hexagon, color=black];
3946[label="200.148.94.163;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.148.94.163:15004, 136.93.75.96:50032}[50%]&lt;BR/&gt;{200.148.94.163:15004, 164.228.107.232:3728}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15004: (50%)&lt;BR/&gt; 50032: (31.25%)&lt;BR/&gt; 3728: (18.75%)&gt;];
}
464--603[label="1;1pkt 1fpkt"];
464--1504[label="1;1pkt 1fpkt"];
464--1735[label="1;1pkt 1fpkt"];
464--3946[label="1;1pkt 1fpkt"];
603--693[label="0.5;1pkt 1fpkt"];
603--1504[label="1;1pkt 1fpkt"];
603--1714[label="0.5;1pkt 1fpkt"];
603--1735[label="1;2pkt 2fpkt"];
603--2310[label="0.5;1pkt 1fpkt"];
603--3946[label="1;2pkt 2fpkt"];
1504--1735[label="1;1pkt 1fpkt"];
1504--3946[label="1;1pkt 1fpkt"];
1735--2310[label="0.5;1pkt 1fpkt"];
1735--3946[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="164.228.107.232" dst_port="3728" src_ip="200.148.94.163" src_port="15004"/>
      <filter dst_ip="136.93.75.96" dst_port="50032" src_ip="200.148.94.163" src_port="15004"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
488[label="146.174.167.18;s;1pkt 1fpkt", shape=diamond, color=yellow];
1514[label="146.174.167.18;s;1pkt 1fpkt", shape=hexagon, color=black];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.174.167.18:6881, 143.134.168.140:4730}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 4730: (50%)&gt;];
}
488--1514[label="1;1pkt 1fpkt"];
488--1634[label="1;1pkt 1fpkt"];
1514--1634[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.168.140" dst_port="4730" src_ip="146.174.167.18" src_port="6881"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
497[label="17.173.64.104;s;1pkt 1fpkt", shape=diamond, color=yellow];
1518[label="17.173.64.104;s;1pkt 1fpkt", shape=hexagon, color=black];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.173.64.104:6881, 143.134.168.140:1135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 1135: (50%)&gt;];
}
497--1518[label="1;1pkt 1fpkt"];
497--1634[label="1;1pkt 1fpkt"];
1518--1634[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.168.140" dst_port="1135" src_ip="17.173.64.104" src_port="6881"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
500[label="17.176.22.45;s;1pkt 1fpkt", shape=diamond, color=yellow];
1524[label="17.176.22.45;s;1pkt 1fpkt", shape=hexagon, color=black];
2860[label="17.176.22.45;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.176.22.45:6882, 143.134.168.140:3234}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6882: (50%)&lt;BR/&gt; 3234: (50%)&gt;];
}
500--1524[label="1;1pkt 1fpkt"];
500--1634[label="1;1pkt 1fpkt"];
500--2860[label="1;1pkt 1fpkt"];
500--4914[label="1;1pkt 1fpkt"];
1524--1634[label="1;1pkt 1fpkt"];
1524--2860[label="1;1pkt 1fpkt"];
1524--4914[label="1;1pkt 1fpkt"];
2860--4914[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.168.140" dst_port="3234" src_ip="17.176.22.45" src_port="6882"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
395[label="7.219.212.150;s;206pkt 206fpkt", shape=diamond, color=yellow];
787[label="143.38.154.237;d;123pkt 123fpkt", shape=diamond, color=yellow];
1179[label="164.228.194.84;d;25pkt 25fpkt", shape=diamond, color=yellow];
3629[label="212.30.118.127;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5339[label="212.30.118.127;8pkt 8fpkt", shape=invtriangle, color=brown];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.219.212.150:80, *:*}[58.1921%]&lt;BR/&gt;{*:80, 143.38.154.237:*}[32.2034%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.496%)&lt;BR/&gt; 1863: (2.83019%)&lt;BR/&gt; 443: (0.539084%)&lt;BR/&gt; 1169: (0.404313%)&lt;BR/&gt; 33124: (0.269542%)&gt;];
}
395--569[label="0.304348;21pkt 21fpkt"];
395--659[label="0.0291262;6pkt 6fpkt"];
395--1179[label="0.32;8pkt 8fpkt"];
395--1427[label="0.174757;36pkt 36fpkt"];
395--1463[label="0.092233;19pkt 19fpkt"];
395--1522[label="0.126214;26pkt 26fpkt"];
395--1541[label="1;127pkt 127fpkt"];
395--1626[label="0.454545;15pkt 15fpkt"];
395--1979[label="0.0291262;6pkt 6fpkt"];
395--2044[label="0.0728155;15pkt 15fpkt"];
395--2245[label="0.135922;28pkt 28fpkt"];
395--2304[label="0.116505;24pkt 24fpkt"];
787--836[label="0.0325203;4pkt 4fpkt"];
787--845[label="0.0652174;6pkt 6fpkt"];
787--894[label="0.203252;25pkt 25fpkt"];
787--895[label="0.203252;25pkt 25fpkt"];
787--1104[label="0.181818;8pkt 8fpkt"];
787--1145[label="0.114286;8pkt 8fpkt"];
787--1506[label="0.00813008;1pkt 1fpkt"];
787--1523[label="0.0569106;7pkt 7fpkt"];
787--1550[label="0.0569106;7pkt 7fpkt"];
787--1655[label="0.0243902;3pkt 3fpkt"];
787--1678[label="0.00813008;1pkt 1fpkt"];
787--1709[label="1;123pkt 123fpkt"];
787--1998[label="0.203252;25pkt 25fpkt"];
787--2108[label="0.0650407;8pkt 8fpkt"];
787--2114[label="0.114286;8pkt 8fpkt"];
787--2127[label="0.203252;25pkt 25fpkt"];
787--2255[label="0.00813008;1pkt 1fpkt"];
787--2553[label="0.195122;24pkt 24fpkt"];
787--2564[label="0.0181818;1pkt 1fpkt"];
787--2568[label="0.0487805;6pkt 6fpkt"];
787--2589[label="0.0650407;8pkt 8fpkt"];
787--2623[label="0.0505051;5pkt 5fpkt"];
787--2839[label="0.0140845;1pkt 1fpkt"];
787--2912[label="0.00813008;1pkt 1fpkt"];
787--2979[label="0.0325203;4pkt 4fpkt"];
787--3629[label="0.111111;1pkt 1fpkt"];
787--3668[label="0.0487805;6pkt 6fpkt"];
787--4158[label="0.102564;8pkt 8fpkt"];
787--4360[label="0.00813008;1pkt 1fpkt"];
787--4732[label="0.203252;25pkt 25fpkt"];
787--4740[label="0.0181818;1pkt 1fpkt"];
787--4744[label="0.0487805;6pkt 6fpkt"];
787--4755[label="0.0650407;8pkt 8fpkt"];
787--4896[label="0.0142857;1pkt 1fpkt"];
787--4942[label="0.00813008;1pkt 1fpkt"];
787--5715[label="0.00813008;1pkt 1fpkt"];
787--5898[label="0.203252;25pkt 25fpkt"];
787--5905[label="0.0569106;7pkt 7fpkt"];
787--5998[label="0.00813008;1pkt 1fpkt"];
1179--1541[label="0.28;7pkt 7fpkt"];
1179--1577[label="0.24;6pkt 6fpkt"];
1179--1847[label="0.12;3pkt 3fpkt"];
1179--2278[label="0.12;3pkt 3fpkt"];
1179--2601[label="0.28;7pkt 7fpkt"];
1179--3642[label="0.24;6pkt 6fpkt"];
1179--4764[label="0.28;7pkt 7fpkt"];
1179--5344[label="0.24;6pkt 6fpkt"];
1179--6162[label="0.24;6pkt 6fpkt"];
3629--5339[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="7.219.212.150" src_port="80"/>
      <filter dst_ip="143.38.154.237" src_port="80"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
520[label="208.18.150.29;s;9952pkt 9952fpkt", shape=diamond, color=yellow];
1535[label="208.18.150.29;s;1191pkt 1191fpkt", shape=hexagon, color=black];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.18.150.29:0, *:0}[99.9598%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.9551%)&lt;BR/&gt; 80: (0.0224356%)&lt;BR/&gt; 2810: (0.00897424%)&lt;BR/&gt; 42055: (0.00448712%)&lt;BR/&gt; 4250: (0.00448712%)&gt;];
}
520--1535[label="1;1191pkt 1191fpkt"];
</description>
    <slice>
      <filter src_ip="208.18.150.29"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
761[label="164.228.136.44;d;4pkt 4fpkt", shape=diamond, color=yellow];
1538[label="212.30.162.244;s;76pkt 76fpkt", shape=hexagon, color=black];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.162.244:80, 208.159.185.117:*}[24.359%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3835: (1.25%)&lt;BR/&gt; 3832: (1.25%)&lt;BR/&gt; 62614: (0.625%)&lt;BR/&gt; 62574: (0.625%)&gt;];
}
761--1028[label="0.5;2pkt 2fpkt"];
761--1538[label="0.5;2pkt 2fpkt"];
761--1896[label="0.5;2pkt 2fpkt"];
1538--1838[label="0.0263158;2pkt 2fpkt"];
1538--1839[label="0.25;19pkt 19fpkt"];
1538--1893[label="0.0263158;2pkt 2fpkt"];
1538--2225[label="0.0131579;1pkt 1fpkt"];
1538--2245[label="0.157895;12pkt 12fpkt"];
1538--2265[label="0.0131579;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.159.185.117" src_ip="212.30.162.244" src_port="80"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790933,1.81327,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="1.133.49.240"/>
      <from sec="1068527135" usec="0"/>
      <to sec="1068527178" usec="0"/>
    </slice>
    <from sec="1068527135" usec="0"/>
    <to sec="1068527178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
522[label="212.118.37.22;s;210pkt 210fpkt", shape=diamond, color=yellow];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.118.37.22:80, 136.93.251.138:*}[20.9524%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1558: (0.47619%)&lt;BR/&gt; 1505: (0.47619%)&lt;BR/&gt; 1454: (0.47619%)&lt;BR/&gt; 1337: (0.47619%)&gt;];
}
522--540[label="0.0285714;2pkt 2fpkt"];
522--659[label="0.0047619;1pkt 1fpkt"];
522--764[label="0.0652174;6pkt 6fpkt"];
522--1037[label="0.0294118;3pkt 3fpkt"];
522--1071[label="0.0235294;2pkt 2fpkt"];
522--1166[label="0.0238095;1pkt 1fpkt"];
522--1266[label="0.0465116;2pkt 2fpkt"];
522--1295[label="0.0169492;1pkt 1fpkt"];
522--1400[label="0.209524;44pkt 44fpkt"];
522--1427[label="0.0619048;13pkt 13fpkt"];
522--1430[label="0.0142857;3pkt 3fpkt"];
522--1433[label="0.0238095;5pkt 5fpkt"];
522--1438[label="0.0047619;1pkt 1fpkt"];
522--1463[label="0.0047619;1pkt 1fpkt"];
522--1493[label="0.0115607;2pkt 2fpkt"];
522--1522[label="0.0047619;1pkt 1fpkt"];
522--1536[label="1;123pkt 123fpkt"];
522--1546[label="0.0285714;2pkt 2fpkt"];
522--1839[label="0.0142857;3pkt 3fpkt"];
522--1856[label="0.0357143;2pkt 2fpkt"];
522--1879[label="0.0740741;6pkt 6fpkt"];
522--1922[label="0.0235294;2pkt 2fpkt"];
522--1930[label="0.0047619;1pkt 1fpkt"];
522--1939[label="0.00952381;2pkt 2fpkt"];
522--1979[label="0.0047619;1pkt 1fpkt"];
522--2005[label="0.0365854;3pkt 3fpkt"];
522--2163[label="0.00952381;2pkt 2fpkt"];
522--2164[label="0.0047619;1pkt 1fpkt"];
522--2193[label="0.0465116;2pkt 2fpkt"];
522--2214[label="0.209524;44pkt 44fpkt"];
522--2225[label="0.0238095;5pkt 5fpkt"];
522--2226[label="0.0047619;1pkt 1fpkt"];
522--2245[label="0.0571429;12pkt 12fpkt"];
522--2265[label="0.0142857;3pkt 3fpkt"];
522--2272[label="1;96pkt 96fpkt"];
522--2322[label="0.209524;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.251.138" src_ip="212.118.37.22" src_port="80"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.27992,1.92606,503,1 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
22[label="212.118.62.144s;4pkt 4fpkt", shape=rectangle, color=red];
2011[label="136.93.242.232;d;244pkt 244fpkt", shape=hexagon, color=black];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.118.62.144:80, 136.93.242.232:*}[67.7551%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1699: (0.403226%)&lt;BR/&gt; 1456: (0.403226%)&lt;BR/&gt; 1453: (0.403226%)&lt;BR/&gt; 1786: (0.201613%)&gt;];
}
22--407[label="0.75;3pkt 3fpkt"];
22--793[label="0.75;3pkt 3fpkt"];
22--1468[label="0.5;2pkt 2fpkt"];
22--2011[label="0.75;3pkt 3fpkt"];
2011--2127[label="0.0111111;2pkt 2fpkt"];
2011--2553[label="0.00819672;2pkt 2fpkt"];
2011--3642[label="0.159836;39pkt 39fpkt"];
2011--4732[label="0.00819672;2pkt 2fpkt"];
2011--5344[label="0.159836;39pkt 39fpkt"];
2011--5898[label="0.00819672;2pkt 2fpkt"];
2011--6162[label="0.159836;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.242.232" src_ip="212.118.62.144" src_port="80"/>
    </slice>
    <from sec="1068526961" usec="0"/>
    <to sec="1068527665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
561[label="136.93.203.178;d;19pkt 19fpkt", shape=diamond, color=yellow];
562[label="213.5.6.174;s;14pkt 14fpkt", shape=diamond, color=yellow];
1557[label="136.93.203.178;d;16pkt 16fpkt", shape=hexagon, color=black];
1558[label="213.5.6.174;s;14pkt 14fpkt", shape=hexagon, color=black];
4034[label="213.5.6.174;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5537[label="213.5.6.174;14pkt 14fpkt", shape=invtriangle, color=brown];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.5.6.174:80, 136.93.203.178:*}[73.6842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1745: (3.2967%)&lt;BR/&gt; 1743: (3.2967%)&lt;BR/&gt; 1742: (3.2967%)&lt;BR/&gt; 1741: (3.2967%)&gt;];
}
561--562[label="1;14pkt 14fpkt"];
561--1557[label="1;16pkt 16fpkt"];
561--1558[label="1;14pkt 14fpkt"];
561--4034[label="1;14pkt 14fpkt"];
561--5537[label="1;14pkt 14fpkt"];
562--1557[label="0.928571;13pkt 13fpkt"];
562--1558[label="1;14pkt 14fpkt"];
562--4034[label="1;14pkt 14fpkt"];
562--5537[label="1;14pkt 14fpkt"];
1557--1558[label="0.928571;13pkt 13fpkt"];
1557--4034[label="0.928571;13pkt 13fpkt"];
1557--5537[label="0.928571;13pkt 13fpkt"];
1558--4034[label="1;14pkt 14fpkt"];
1558--5537[label="1;14pkt 14fpkt"];
4034--5537[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.203.178" src_ip="213.5.6.174" src_port="80"/>
    </slice>
    <from sec="1068526861" usec="0"/>
    <to sec="1068527132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
230[label="146.153.26.218;s;54pkt 54fpkt", shape=diamond, color=yellow];
248[label="4.219.102.154;d;49pkt 49fpkt", shape=diamond, color=yellow];
1479[label="146.153.26.218;s;46pkt 46fpkt", shape=hexagon, color=black];
1569[label="4.219.102.154;d;41pkt 41fpkt", shape=hexagon, color=black];
4382[label="146.153.26.218;66pkt 66fpkt", shape=pentagon, color=darkviolet];
5726[label="146.153.26.218;65pkt 65fpkt", shape=invtriangle, color=brown];
6335[label="146.153.26.218;65pkt 65fpkt", shape=invhouse, color=bisque];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.26.218:*, 4.219.102.154:*}[92.4242%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (1.94301%)&lt;BR/&gt; 48371: (0.906736%)&lt;BR/&gt; 48305: (0.906736%)&lt;BR/&gt; 48149: (0.906736%)&lt;BR/&gt; 48012: (0.906736%)&gt;];
}
230--248[label="1;49pkt 49fpkt"];
230--1479[label="1;46pkt 46fpkt"];
230--1569[label="1;41pkt 41fpkt"];
230--4382[label="1;54pkt 54fpkt"];
230--5726[label="0.981481;53pkt 53fpkt"];
230--6335[label="0.981481;53pkt 53fpkt"];
248--1479[label="0.891304;41pkt 41fpkt"];
248--1569[label="1;41pkt 41fpkt"];
248--4382[label="1;49pkt 49fpkt"];
248--5726[label="1;49pkt 49fpkt"];
248--6335[label="1;49pkt 49fpkt"];
1479--1569[label="1;41pkt 41fpkt"];
1479--4382[label="1;46pkt 46fpkt"];
1479--5726[label="0.978261;45pkt 45fpkt"];
1479--6335[label="0.978261;45pkt 45fpkt"];
1569--4382[label="1;41pkt 41fpkt"];
1569--5726[label="1;41pkt 41fpkt"];
1569--6335[label="1;41pkt 41fpkt"];
4382--5726[label="1;65pkt 65fpkt"];
4382--6335[label="1;65pkt 65fpkt"];
5726--6335[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_ip="4.219.102.154" src_ip="146.153.26.218"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.837732,1.70559,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
435[label="161.29.0.77;d;202pkt 202fpkt", shape=diamond, color=yellow];
1254[label="192.170.10.213;s;40pkt 40fpkt", shape=diamond, color=yellow];
3393[label="208.244.130.99;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5213[label="208.244.130.99;19pkt 19fpkt", shape=invtriangle, color=brown];
6303[label="217.158.203.197;3pkt 3fpkt", shape=invhouse, color=bisque];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.113.74.122:*, 161.29.0.77:80}[20.7373%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.106%)&lt;BR/&gt; 6667: (4.0636%)&lt;BR/&gt; 113: (3.18021%)&lt;BR/&gt; 25: (1.06007%)&lt;BR/&gt; 6663: (0.706714%)&gt;];
}
435--1088[label="0.2;4pkt 4fpkt"];
435--1199[label="1;42pkt 42fpkt"];
435--1254[label="1;40pkt 40fpkt"];
435--1428[label="0.0049505;1pkt 1fpkt"];
435--1574[label="1;95pkt 95fpkt"];
435--1942[label="0.210526;4pkt 4fpkt"];
435--2101[label="1;34pkt 34fpkt"];
435--2223[label="0.0049505;1pkt 1fpkt"];
435--2327[label="0.0891089;18pkt 18fpkt"];
435--2342[label="0.0891089;18pkt 18fpkt"];
435--2343[label="0.0049505;1pkt 1fpkt"];
435--2349[label="0.0049505;1pkt 1fpkt"];
435--2530[label="0.0049505;1pkt 1fpkt"];
435--3393[label="0.210526;4pkt 4fpkt"];
435--4192[label="0.931034;27pkt 27fpkt"];
435--4238[label="1;3pkt 3fpkt"];
435--4337[label="1;4pkt 4fpkt"];
435--4345[label="0.928571;39pkt 39fpkt"];
435--4717[label="0.0049505;1pkt 1fpkt"];
435--5213[label="0.210526;4pkt 4fpkt"];
435--5627[label="0.928571;26pkt 26fpkt"];
435--5652[label="1;3pkt 3fpkt"];
435--5892[label="0.0049505;1pkt 1fpkt"];
435--6303[label="1;3pkt 3fpkt"];
1254--1574[label="0.425;17pkt 17fpkt"];
1254--2101[label="1;34pkt 34fpkt"];
1254--2327[label="0.075;3pkt 3fpkt"];
1254--2342[label="0.075;3pkt 3fpkt"];
1254--4345[label="0.975;39pkt 39fpkt"];
3393--5213[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.0.77" dst_port="80" src_ip="208.113.74.122"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
587[label="208.18.150.138;s;7134pkt 7134fpkt", shape=diamond, color=yellow];
1575[label="208.18.150.138;s;4064pkt 4064fpkt", shape=hexagon, color=black];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.18.150.138:0, *:0}[99.9159%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.9286%)&lt;BR/&gt; 80: (0.0357207%)&lt;BR/&gt; 3359: (0.00893017%)&lt;BR/&gt; 1365: (0.00893017%)&lt;BR/&gt; 62082: (0.00446508%)&gt;];
}
587--1575[label="1;4064pkt 4064fpkt"];
</description>
    <slice>
      <filter src_ip="208.18.150.138"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
442[label="217.65.202.218;s;2pkt 2fpkt", shape=diamond, color=yellow];
1489[label="217.65.202.218;s;2pkt 2fpkt", shape=hexagon, color=black];
1581[label="209.139.217.86;d;6pkt 6fpkt", shape=hexagon, color=black];
4385[label="217.65.202.218;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5728[label="217.65.202.218;1pkt 1fpkt", shape=invtriangle, color=brown];
6336[label="217.65.202.218;2pkt 2fpkt", shape=invhouse, color=bisque];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 209.139.217.86:0}[66.6667%]&lt;BR/&gt;{217.65.202.218:*, 209.139.217.86:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (26.6667%)&lt;BR/&gt; 7573: (20%)&lt;BR/&gt; 2890: (20%)&lt;BR/&gt; 2888: (16.6667%)&lt;BR/&gt; 1755: (16.6667%)&gt;];
}
442--1489[label="1;2pkt 2fpkt"];
442--1581[label="1;2pkt 2fpkt"];
442--4385[label="1;2pkt 2fpkt"];
442--5728[label="1;1pkt 1fpkt"];
442--6336[label="1;2pkt 2fpkt"];
1489--1581[label="1;2pkt 2fpkt"];
1489--4385[label="1;2pkt 2fpkt"];
1489--5728[label="1;1pkt 1fpkt"];
1489--6336[label="1;2pkt 2fpkt"];
1581--4385[label="1;2pkt 2fpkt"];
1581--5728[label="1;1pkt 1fpkt"];
1581--6336[label="1;2pkt 2fpkt"];
4385--5728[label="1;1pkt 1fpkt"];
4385--6336[label="1;2pkt 2fpkt"];
5728--6336[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.139.217.86" src_ip="217.65.202.218"/>
      <filter dst_ip="209.139.217.86"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
605[label="105.97.160.142;d;64pkt 64fpkt", shape=diamond, color=yellow];
606[label="105.97.160.142;s;64pkt 64fpkt", shape=diamond, color=yellow];
1589[label="105.97.160.142;d;36pkt 36fpkt", shape=hexagon, color=black];
1851[label="105.97.160.142;s;60pkt 60fpkt", shape=hexagon, color=black];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{105.97.160.142:13364, 105.97.160.142:*}[89.0625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13364: (44.1964%)&lt;BR/&gt; 0: (7.14286%)&lt;BR/&gt; 62743: (0.892857%)&lt;BR/&gt; 61632: (0.892857%)&lt;BR/&gt; 59819: (0.892857%)&gt;];
}
605--606[label="1;64pkt 64fpkt"];
605--1589[label="1;36pkt 36fpkt"];
605--1851[label="1;60pkt 60fpkt"];
606--1589[label="1;36pkt 36fpkt"];
606--1851[label="1;60pkt 60fpkt"];
1589--1851[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="105.97.160.142" src_ip="105.97.160.142" src_port="13364"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
518[label="136.93.253.197;d;196pkt 196fpkt", shape=diamond, color=yellow];
537[label="136.93.226.193;d;28pkt 28fpkt", shape=diamond, color=yellow];
538[label="7.84.1.150;s;85pkt 85fpkt", shape=diamond, color=yellow];
1542[label="136.93.226.193;d;21pkt 21fpkt", shape=hexagon, color=black];
1543[label="7.84.1.150;s;56pkt 56fpkt", shape=hexagon, color=black];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.93.253.197:*}[65.6463%]&lt;BR/&gt;{7.84.1.150:80, *:*}[28.9116%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7617%)&lt;BR/&gt; 10001: (2.84974%)&lt;BR/&gt; 2948: (0.518135%)&lt;BR/&gt; 2947: (0.518135%)&lt;BR/&gt; 2945: (0.518135%)&gt;];
}
518--519[label="0.00510204;1pkt 1fpkt"];
518--538[label="0.0235294;2pkt 2fpkt"];
518--590[label="0.0357143;7pkt 7fpkt"];
518--614[label="0.0663265;13pkt 13fpkt"];
518--729[label="0.0357143;7pkt 7fpkt"];
518--836[label="0.0120482;2pkt 2fpkt"];
518--845[label="0.0108696;1pkt 1fpkt"];
518--964[label="0.0123457;1pkt 1fpkt"];
518--1104[label="0.0227273;1pkt 1fpkt"];
518--1145[label="0.0142857;1pkt 1fpkt"];
518--1153[label="0.00621118;1pkt 1fpkt"];
518--1202[label="0.0120482;1pkt 1fpkt"];
518--1223[label="0.0555556;1pkt 1fpkt"];
518--1226[label="0.0555556;1pkt 1fpkt"];
518--1470[label="0.297619;25pkt 25fpkt"];
518--1523[label="0.107143;21pkt 21fpkt"];
518--1534[label="1;190pkt 190fpkt"];
518--1543[label="0.0357143;2pkt 2fpkt"];
518--1577[label="0.0357143;7pkt 7fpkt"];
518--1593[label="0.0663265;13pkt 13fpkt"];
518--1655[label="0.0340136;5pkt 5fpkt"];
518--1847[label="0.102041;20pkt 20fpkt"];
518--1855[label="0.0123457;1pkt 1fpkt"];
518--1957[label="0.0357143;7pkt 7fpkt"];
518--2055[label="0.0967742;9pkt 9fpkt"];
518--2114[label="0.0142857;1pkt 1fpkt"];
518--2126[label="0.00684932;1pkt 1fpkt"];
518--2267[label="0.0561224;11pkt 11fpkt"];
518--2278[label="0.102041;20pkt 20fpkt"];
518--2294[label="0.320513;25pkt 25fpkt"];
518--2560[label="0.125;1pkt 1fpkt"];
518--2564[label="0.0181818;1pkt 1fpkt"];
518--2572[label="0.0666667;1pkt 1fpkt"];
518--2599[label="0.0333333;1pkt 1fpkt"];
518--2623[label="0.010101;1pkt 1fpkt"];
518--2645[label="0.0117647;1pkt 1fpkt"];
518--2839[label="0.0140845;1pkt 1fpkt"];
518--2979[label="0.0110497;2pkt 2fpkt"];
518--3381[label="0.00617284;1pkt 1fpkt"];
518--3464[label="0.689655;20pkt 20fpkt"];
518--3642[label="0.0357143;7pkt 7fpkt"];
518--3650[label="0.0153061;3pkt 3fpkt"];
518--3659[label="0.05;1pkt 1fpkt"];
518--3668[label="0.0357143;7pkt 7fpkt"];
518--3814[label="0.0666667;1pkt 1fpkt"];
518--3816[label="0.03125;1pkt 1fpkt"];
518--3895[label="0.0952381;2pkt 2fpkt"];
518--3902[label="0.0810811;9pkt 9fpkt"];
518--4158[label="0.0128205;1pkt 1fpkt"];
518--4288[label="0.0114943;1pkt 1fpkt"];
518--4411[label="0.0555556;5pkt 5fpkt"];
518--4491[label="0.0229885;2pkt 2fpkt"];
518--4499[label="0.0208333;2pkt 2fpkt"];
518--4607[label="0.297619;25pkt 25fpkt"];
518--4737[label="0.111111;1pkt 1fpkt"];
518--4740[label="0.0181818;1pkt 1fpkt"];
518--4762[label="0.0333333;1pkt 1fpkt"];
518--4896[label="0.0142857;1pkt 1fpkt"];
518--5206[label="0.00621118;1pkt 1fpkt"];
518--5250[label="0.678571;19pkt 19fpkt"];
518--5344[label="0.0357143;7pkt 7fpkt"];
518--5347[label="0.0153061;3pkt 3fpkt"];
518--5351[label="0.0526316;1pkt 1fpkt"];
518--5431[label="0.03125;1pkt 1fpkt"];
518--5473[label="0.0952381;2pkt 2fpkt"];
518--5477[label="0.0818182;9pkt 9fpkt"];
518--5682[label="0.0114943;1pkt 1fpkt"];
518--5773[label="0.0232558;2pkt 2fpkt"];
518--5778[label="0.0210526;2pkt 2fpkt"];
518--5835[label="0.301205;25pkt 25fpkt"];
518--6111[label="0.00617284;1pkt 1fpkt"];
518--6162[label="0.0357143;7pkt 7fpkt"];
518--6165[label="0.0153061;3pkt 3fpkt"];
518--6206[label="0.03125;1pkt 1fpkt"];
518--6351[label="0.0229885;2pkt 2fpkt"];
537--538[label="0.464286;13pkt 13fpkt"];
537--661[label="0.0714286;2pkt 2fpkt"];
537--1134[label="0.428571;12pkt 12fpkt"];
537--1542[label="1;21pkt 21fpkt"];
537--1543[label="0.464286;13pkt 13fpkt"];
537--1781[label="0.0714286;2pkt 2fpkt"];
537--4256[label="0.0714286;2pkt 2fpkt"];
538--621[label="0.0235294;2pkt 2fpkt"];
538--756[label="0.0117647;1pkt 1fpkt"];
538--893[label="0.0273973;2pkt 2fpkt"];
538--1534[label="0.0235294;2pkt 2fpkt"];
538--1542[label="0.52381;11pkt 11fpkt"];
538--1543[label="1;56pkt 56fpkt"];
538--1594[label="0.0235294;2pkt 2fpkt"];
1542--1543[label="0.52381;11pkt 11fpkt"];
1543--1594[label="0.0357143;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="7.84.1.150" src_port="80"/>
      <filter dst_ip="136.93.253.197" src_port="80"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
504[label="17.176.36.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
1598[label="17.176.36.69;s;1pkt 1fpkt", shape=hexagon, color=black];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.176.36.69:6881, 143.134.168.140:4944}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 4944: (50%)&gt;];
}
504--1598[label="1;1pkt 1fpkt"];
504--1634[label="1;1pkt 1fpkt"];
1598--1634[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.168.140" dst_port="4944" src_ip="17.176.36.69" src_port="6881"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
433[label="209.139.200.183;d;558pkt 558fpkt", shape=diamond, color=yellow];
669[label="202.53.85.206;s;86pkt 86fpkt", shape=diamond, color=yellow];
775[label="98.18.218.187;s;60pkt 60fpkt", shape=diamond, color=yellow];
908[label="200.90.211.125;s;52pkt 52fpkt", shape=diamond, color=yellow];
911[label="198.251.26.0;s;45pkt 45fpkt", shape=diamond, color=yellow];
1573[label="209.139.200.183;d;239pkt 239fpkt", shape=hexagon, color=black];
1803[label="200.90.211.125;s;52pkt 52fpkt", shape=hexagon, color=black];
1905[label="198.251.26.0;s;45pkt 45fpkt", shape=hexagon, color=black];
1992[label="98.18.218.187;s;60pkt 60fpkt", shape=hexagon, color=black];
2355[label="198.251.26.0;44pkt 44fpkt", shape=pentagon, color=darkviolet];
2480[label="198.245.17.12;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3612[label="200.90.211.125;52pkt 52fpkt", shape=pentagon, color=darkviolet];
3757[label="130.194.71.142;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3895[label="99.22.210.156;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5329[label="200.90.211.125;52pkt 52fpkt", shape=invtriangle, color=brown];
5403[label="130.194.71.142;34pkt 34fpkt", shape=invtriangle, color=brown];
5473[label="99.22.210.156;21pkt 21fpkt", shape=invtriangle, color=brown];
6193[label="130.194.71.142;35pkt 35fpkt", shape=invhouse, color=bisque];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 209.139.200.183:*}[85.1682%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8%)&lt;BR/&gt; 0: (0.4%)&lt;BR/&gt; 35127: (0.2%)&lt;BR/&gt; 35125: (0.2%)&lt;BR/&gt; 35118: (0.2%)&gt;];
}
433--453[label="0.00442478;1pkt 1fpkt"];
433--645[label="0.0123457;4pkt 4fpkt"];
433--669[label="0.232558;20pkt 20fpkt"];
433--676[label="0.128713;13pkt 13fpkt"];
433--698[label="0.025;1pkt 1fpkt"];
433--728[label="0.0726257;13pkt 13fpkt"];
433--775[label="0.583333;35pkt 35fpkt"];
433--862[label="0.0472973;7pkt 7fpkt"];
433--877[label="0.0311111;7pkt 7fpkt"];
433--908[label="1;52pkt 52fpkt"];
433--911[label="1;45pkt 45fpkt"];
433--993[label="0.0384615;1pkt 1fpkt"];
433--1573[label="1;239pkt 239fpkt"];
433--1586[label="0.005;1pkt 1fpkt"];
433--1614[label="0.189655;11pkt 11fpkt"];
433--1775[label="0.0714286;7pkt 7fpkt"];
433--1783[label="0.0458716;5pkt 5fpkt"];
433--1785[label="0.232558;20pkt 20fpkt"];
433--1803[label="1;52pkt 52fpkt"];
433--1844[label="0.0726257;13pkt 13fpkt"];
433--1905[label="1;45pkt 45fpkt"];
433--1974[label="0.05;1pkt 1fpkt"];
433--1992[label="0.583333;35pkt 35fpkt"];
433--2355[label="1;44pkt 44fpkt"];
433--2480[label="1;10pkt 10fpkt"];
433--2593[label="0.8;12pkt 12fpkt"];
433--2769[label="0.166667;1pkt 1fpkt"];
433--2911[label="0.0967742;3pkt 3fpkt"];
433--2940[label="0.027027;1pkt 1fpkt"];
433--2949[label="0.266667;4pkt 4fpkt"];
433--3612[label="1;52pkt 52fpkt"];
433--3632[label="0.0277778;1pkt 1fpkt"];
433--3635[label="0.0282258;7pkt 7fpkt"];
433--3641[label="0.0694444;5pkt 5fpkt"];
433--3681[label="0.104167;5pkt 5fpkt"];
433--3757[label="0.970588;33pkt 33fpkt"];
433--3795[label="0.00373134;1pkt 1fpkt"];
433--3895[label="0.809524;17pkt 17fpkt"];
433--4003[label="0.2;8pkt 8fpkt"];
433--4017[label="0.142857;2pkt 2fpkt"];
433--4300[label="0.222222;20pkt 20fpkt"];
433--4341[label="0.0392157;2pkt 2fpkt"];
433--4569[label="0.21875;7pkt 7fpkt"];
433--4588[label="0.0397727;7pkt 7fpkt"];
433--4758[label="0.785714;11pkt 11fpkt"];
433--4941[label="0.0666667;2pkt 2fpkt"];
433--4963[label="0.214286;3pkt 3fpkt"];
433--5329[label="1;52pkt 52fpkt"];
433--5365[label="0.106383;5pkt 5fpkt"];
433--5403[label="0.970588;33pkt 33fpkt"];
433--5423[label="0.00373134;1pkt 1fpkt"];
433--5473[label="0.809524;17pkt 17fpkt"];
433--5519[label="0.2;8pkt 8fpkt"];
433--5526[label="0.153846;2pkt 2fpkt"];
433--5700[label="0.0392157;2pkt 2fpkt"];
433--5827[label="0.0342857;6pkt 6fpkt"];
433--5997[label="0.0967742;3pkt 3fpkt"];
433--6175[label="0.106383;5pkt 5fpkt"];
433--6193[label="0.971429;34pkt 34fpkt"];
433--6203[label="0.00374532;1pkt 1fpkt"];
433--6247[label="0.142857;2pkt 2fpkt"];
433--6328[label="0.04;2pkt 2fpkt"];
433--6379[label="0.0342857;6pkt 6fpkt"];
669--1433[label="0.209302;18pkt 18fpkt"];
669--1464[label="0.55814;48pkt 48fpkt"];
669--1573[label="0.174419;15pkt 15fpkt"];
669--1785[label="1;86pkt 86fpkt"];
669--2225[label="0.209302;18pkt 18fpkt"];
669--2293[label="0.5;43pkt 43fpkt"];
669--4300[label="1;86pkt 86fpkt"];
775--1573[label="0.25;15pkt 15fpkt"];
775--1992[label="1;60pkt 60fpkt"];
775--2164[label="0.416667;25pkt 25fpkt"];
908--1573[label="0.615385;32pkt 32fpkt"];
908--1803[label="1;52pkt 52fpkt"];
908--3612[label="1;52pkt 52fpkt"];
908--5329[label="1;52pkt 52fpkt"];
911--1573[label="0.466667;21pkt 21fpkt"];
911--1905[label="1;45pkt 45fpkt"];
911--2355[label="1;44pkt 44fpkt"];
1573--1614[label="0.0689655;4pkt 4fpkt"];
1573--1775[label="0.0408163;4pkt 4fpkt"];
1573--1783[label="0.00917431;1pkt 1fpkt"];
1573--1785[label="0.174419;15pkt 15fpkt"];
1573--1803[label="0.615385;32pkt 32fpkt"];
1573--1844[label="0.00558659;1pkt 1fpkt"];
1573--1905[label="0.466667;21pkt 21fpkt"];
1573--1992[label="0.25;15pkt 15fpkt"];
1573--2355[label="0.454545;20pkt 20fpkt"];
1573--3612[label="0.615385;32pkt 32fpkt"];
1573--3632[label="0.0277778;1pkt 1fpkt"];
1573--3635[label="0.0041841;1pkt 1fpkt"];
1573--3681[label="0.0416667;2pkt 2fpkt"];
1573--3757[label="0.676471;23pkt 23fpkt"];
1573--4003[label="0.1;4pkt 4fpkt"];
1573--4017[label="0.142857;2pkt 2fpkt"];
1573--4300[label="0.166667;15pkt 15fpkt"];
1573--4569[label="0.09375;3pkt 3fpkt"];
1573--4588[label="0.0227273;4pkt 4fpkt"];
1573--5329[label="0.615385;32pkt 32fpkt"];
1573--5365[label="0.0425532;2pkt 2fpkt"];
1573--5403[label="0.676471;23pkt 23fpkt"];
1573--5519[label="0.1;4pkt 4fpkt"];
1573--5526[label="0.153846;2pkt 2fpkt"];
1573--5827[label="0.0171429;3pkt 3fpkt"];
1573--6175[label="0.0425532;2pkt 2fpkt"];
1573--6193[label="0.685714;24pkt 24fpkt"];
1573--6247[label="0.142857;2pkt 2fpkt"];
1573--6379[label="0.0171429;3pkt 3fpkt"];
1803--3612[label="1;52pkt 52fpkt"];
1803--5329[label="1;52pkt 52fpkt"];
1905--2355[label="1;44pkt 44fpkt"];
1992--2164[label="0.416667;25pkt 25fpkt"];
3612--5329[label="1;52pkt 52fpkt"];
3757--5403[label="1;34pkt 34fpkt"];
3757--6193[label="1;34pkt 34fpkt"];
3895--5473[label="1;21pkt 21fpkt"];
5403--6193[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="209.139.200.183" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
541[label="137.80.219.162;s;4pkt 4fpkt", shape=diamond, color=yellow];
1615[label="137.80.219.162;s;4pkt 4fpkt", shape=hexagon, color=black];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.80.219.162:80, 136.93.69.116:61301}[25%]&lt;BR/&gt;{137.80.219.162:80, 136.93.69.116:61329}[25%]&lt;BR/&gt;{137.80.219.162:80, 136.93.69.116:61346}[25%]&lt;BR/&gt;{137.80.219.162:80, 136.93.69.116:61364}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61364: (12.5%)&lt;BR/&gt; 61346: (12.5%)&lt;BR/&gt; 61329: (12.5%)&lt;BR/&gt; 61301: (12.5%)&gt;];
}
541--1615[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.69.116" dst_port="61364" src_ip="137.80.219.162" src_port="80"/>
      <filter dst_ip="136.93.69.116" dst_port="61346" src_ip="137.80.219.162" src_port="80"/>
      <filter dst_ip="136.93.69.116" dst_port="61329" src_ip="137.80.219.162" src_port="80"/>
      <filter dst_ip="136.93.69.116" dst_port="61301" src_ip="137.80.219.162" src_port="80"/>
    </slice>
    <from sec="1068526813" usec="0"/>
    <to sec="1068526934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
678[label="209.117.153.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
1617[label="209.117.153.172;s;1pkt 1fpkt", shape=hexagon, color=black];
4018[label="209.117.153.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5527[label="209.117.153.172;1pkt 1fpkt", shape=invtriangle, color=brown];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.117.153.172:80, 208.31.228.10:35631}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35631: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
678--1617[label="1;1pkt 1fpkt"];
678--4018[label="1;1pkt 1fpkt"];
678--5527[label="1;1pkt 1fpkt"];
1617--4018[label="1;1pkt 1fpkt"];
1617--5527[label="1;1pkt 1fpkt"];
4018--5527[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.10" dst_port="35631" src_ip="209.117.153.172" src_port="80"/>
    </slice>
    <from sec="1068526815" usec="0"/>
    <to sec="1068527482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
1253[label="7.219.250.201;s;96pkt 96fpkt", shape=diamond, color=yellow];
1258[label="96.130.130.105;s;11pkt 11fpkt", shape=diamond, color=yellow];
1295[label="143.38.216.112;d;59pkt 59fpkt", shape=diamond, color=yellow];
1975[label="143.38.12.193;d;34pkt 34fpkt", shape=hexagon, color=black];
1991[label="136.93.151.178;d;153pkt 153fpkt", shape=hexagon, color=black];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.219.250.201:80, *:*}[27.8261%]&lt;BR/&gt;{202.218.102.120:80, 136.93.151.178:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.017%)&lt;BR/&gt; 443: (0.849858%)&lt;BR/&gt; 1863: (0.424929%)&lt;BR/&gt; 110: (0.424929%)&lt;BR/&gt; 54281: (0.283286%)&gt;];
}
1253--1266[label="0.0232558;1pkt 1fpkt"];
1253--1267[label="0.0104167;1pkt 1fpkt"];
1253--1295[label="0.0169492;1pkt 1fpkt"];
1253--1303[label="0.0416667;4pkt 4fpkt"];
1253--1381[label="0.0212766;1pkt 1fpkt"];
1253--1427[label="0.03125;3pkt 3fpkt"];
1253--1433[label="0.0208333;2pkt 2fpkt"];
1253--1493[label="0.0208333;2pkt 2fpkt"];
1253--1522[label="0.0104167;1pkt 1fpkt"];
1253--1548[label="0.0208333;2pkt 2fpkt"];
1253--1562[label="0.0350877;2pkt 2fpkt"];
1253--1610[label="0.016129;1pkt 1fpkt"];
1253--1650[label="0.037037;2pkt 2fpkt"];
1253--1721[label="0.025974;2pkt 2fpkt"];
1253--1810[label="0.0144928;1pkt 1fpkt"];
1253--1821[label="0.0307692;2pkt 2fpkt"];
1253--1841[label="0.0185185;1pkt 1fpkt"];
1253--1893[label="0.0119048;1pkt 1fpkt"];
1253--1894[label="0.0549451;5pkt 5fpkt"];
1253--1924[label="0.0166667;1pkt 1fpkt"];
1253--1930[label="0.0104167;1pkt 1fpkt"];
1253--1960[label="0.0104167;1pkt 1fpkt"];
1253--1975[label="0.0294118;1pkt 1fpkt"];
1253--1979[label="0.0208333;2pkt 2fpkt"];
1253--1991[label="0.0625;6pkt 6fpkt"];
1253--2018[label="0.0520833;5pkt 5fpkt"];
1253--2044[label="0.0208333;2pkt 2fpkt"];
1253--2100[label="1;89pkt 89fpkt"];
1253--2152[label="0.0178571;1pkt 1fpkt"];
1253--2163[label="0.0208333;2pkt 2fpkt"];
1253--2193[label="0.0232558;1pkt 1fpkt"];
1253--2194[label="0.0104167;1pkt 1fpkt"];
1253--2212[label="0.0416667;4pkt 4fpkt"];
1253--2225[label="0.0208333;2pkt 2fpkt"];
1253--2245[label="0.0208333;2pkt 2fpkt"];
1253--2262[label="0.025974;2pkt 2fpkt"];
1253--2284[label="0.0549451;5pkt 5fpkt"];
1253--2303[label="0.0185185;1pkt 1fpkt"];
1253--2304[label="0.0104167;1pkt 1fpkt"];
1253--4272[label="1;96pkt 96fpkt"];
1253--5671[label="1;96pkt 96fpkt"];
1253--6312[label="1;96pkt 96fpkt"];
1258--1433[label="1;11pkt 11fpkt"];
1258--2225[label="1;11pkt 11fpkt"];
1295--1462[label="0.0169492;1pkt 1fpkt"];
1295--1536[label="0.0169492;1pkt 1fpkt"];
1295--2060[label="0.0338983;2pkt 2fpkt"];
1295--2100[label="0.0169492;1pkt 1fpkt"];
1295--2115[label="0.0338983;2pkt 2fpkt"];
1295--2487[label="0.118644;7pkt 7fpkt"];
1295--2966[label="0.0169492;1pkt 1fpkt"];
1295--2979[label="0.0338983;2pkt 2fpkt"];
1295--3654[label="0.0338983;2pkt 2fpkt"];
1295--3783[label="0.0384615;2pkt 2fpkt"];
1295--3890[label="0.0338983;2pkt 2fpkt"];
1295--4116[label="0.0338983;2pkt 2fpkt"];
1295--4135[label="0.40678;24pkt 24fpkt"];
1295--4272[label="0.0169492;1pkt 1fpkt"];
1295--4693[label="0.118644;7pkt 7fpkt"];
1295--4977[label="0.0169492;1pkt 1fpkt"];
1295--5417[label="0.0392157;2pkt 2fpkt"];
1295--5469[label="0.0338983;2pkt 2fpkt"];
1295--5584[label="0.0338983;2pkt 2fpkt"];
1295--5671[label="0.0169492;1pkt 1fpkt"];
1295--5879[label="0.118644;7pkt 7fpkt"];
1295--6012[label="0.0169492;1pkt 1fpkt"];
1295--6276[label="0.40678;24pkt 24fpkt"];
1295--6312[label="0.0169492;1pkt 1fpkt"];
1975--2100[label="0.0294118;1pkt 1fpkt"];
1975--2294[label="0.205882;7pkt 7fpkt"];
1975--2671[label="0.0294118;1pkt 1fpkt"];
1975--3668[label="0.117647;4pkt 4fpkt"];
1975--4210[label="0.1;1pkt 1fpkt"];
1975--4272[label="0.0294118;1pkt 1fpkt"];
1975--4607[label="0.205882;7pkt 7fpkt"];
1975--4804[label="0.0294118;1pkt 1fpkt"];
1975--5637[label="0.1;1pkt 1fpkt"];
1975--5671[label="0.0294118;1pkt 1fpkt"];
1975--5835[label="0.205882;7pkt 7fpkt"];
1975--5920[label="0.0294118;1pkt 1fpkt"];
1975--6312[label="0.0294118;1pkt 1fpkt"];
1991--2073[label="0.0149254;1pkt 1fpkt"];
1991--2100[label="0.0674157;6pkt 6fpkt"];
1991--2114[label="0.0428571;3pkt 3fpkt"];
1991--2211[label="0.45098;69pkt 69fpkt"];
1991--2278[label="0.0196078;3pkt 3fpkt"];
1991--2544[label="0.111111;1pkt 1fpkt"];
1991--2839[label="0.028169;2pkt 2fpkt"];
1991--2978[label="0.2;1pkt 1fpkt"];
1991--2979[label="0.0261438;4pkt 4fpkt"];
1991--3570[label="0.45098;69pkt 69fpkt"];
1991--3616[label="0.793103;23pkt 23fpkt"];
1991--3650[label="0.00653595;1pkt 1fpkt"];
1991--3668[label="0.0130719;2pkt 2fpkt"];
1991--3816[label="0.0625;2pkt 2fpkt"];
1991--3931[label="0.0212766;1pkt 1fpkt"];
1991--4158[label="0.0384615;3pkt 3fpkt"];
1991--4261[label="0.2;3pkt 3fpkt"];
1991--4272[label="0.0606061;6pkt 6fpkt"];
1991--4584[label="0.0392157;6pkt 6fpkt"];
1991--4726[label="0.1;1pkt 1fpkt"];
1991--4896[label="0.0285714;2pkt 2fpkt"];
1991--5307[label="0.45098;69pkt 69fpkt"];
1991--5347[label="0.00653595;1pkt 1fpkt"];
1991--5431[label="0.0625;2pkt 2fpkt"];
1991--5671[label="0.0606061;6pkt 6fpkt"];
1991--5825[label="0.0392157;6pkt 6fpkt"];
1991--5895[label="0.1;1pkt 1fpkt"];
1991--6145[label="0.45098;69pkt 69fpkt"];
1991--6165[label="0.00653595;1pkt 1fpkt"];
1991--6206[label="0.0625;2pkt 2fpkt"];
1991--6312[label="0.0606061;6pkt 6fpkt"];
1991--6377[label="0.0392157;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="7.219.250.201" src_port="80"/>
      <filter dst_ip="136.93.151.178" src_ip="202.218.102.120" src_port="80"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
698[label="200.145.39.149;s;40pkt 40fpkt", shape=diamond, color=yellow];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.145.39.149:80, 208.18.149.46:*}[22.5%]&lt;BR/&gt;{200.145.39.149:80, 136.93.226.240:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1058: (2.5%)&lt;BR/&gt; 57149: (1.25%)&lt;BR/&gt; 48363: (1.25%)&lt;BR/&gt; 48300: (1.25%)&gt;];
}
698--1038[label="0.025;1pkt 1fpkt"];
698--1433[label="0.225;9pkt 9fpkt"];
698--1463[label="0.025;1pkt 1fpkt"];
698--1478[label="0.0833333;1pkt 1fpkt"];
698--1522[label="0.075;3pkt 3fpkt"];
698--1664[label="0.025;1pkt 1fpkt"];
698--1839[label="0.05;2pkt 2fpkt"];
698--2195[label="0.025;1pkt 1fpkt"];
698--2225[label="0.225;9pkt 9fpkt"];
698--2304[label="0.075;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.149.46" src_ip="200.145.39.149" src_port="80"/>
      <filter dst_ip="136.93.226.240" src_ip="200.145.39.149" src_port="80"/>
    </slice>
    <from sec="1068526946" usec="0"/>
    <to sec="1068527606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
423[label="136.93.58.161;d;9pkt 9fpkt", shape=diamond, color=yellow];
691[label="200.198.194.248;s;3pkt 3fpkt", shape=diamond, color=yellow];
709[label="164.228.172.27;d;21pkt 21fpkt", shape=diamond, color=yellow];
1625[label="200.198.194.248;s;3pkt 3fpkt", shape=hexagon, color=black];
1630[label="164.228.172.27;d;17pkt 17fpkt", shape=hexagon, color=black];
4583[label="200.198.194.248;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5824[label="200.198.194.248;5pkt 5fpkt", shape=invtriangle, color=brown];
6376[label="200.198.194.248;5pkt 5fpkt", shape=invhouse, color=bisque];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.198.194.249:80, 164.228.172.27:*}[60.6061%]&lt;BR/&gt;{200.198.194.249:80, 136.93.58.161:*}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2898: (5.07246%)&lt;BR/&gt; 4093: (4.34783%)&lt;BR/&gt; 4067: (4.34783%)&lt;BR/&gt; 3733: (2.17391%)&gt;];
}
423--691[label="0.666667;2pkt 2fpkt"];
423--1625[label="0.666667;2pkt 2fpkt"];
423--4583[label="0.333333;2pkt 2fpkt"];
423--4592[label="0.777778;7pkt 7fpkt"];
423--5824[label="0.4;2pkt 2fpkt"];
423--5830[label="0.777778;7pkt 7fpkt"];
423--6376[label="0.4;2pkt 2fpkt"];
691--709[label="0.333333;1pkt 1fpkt"];
691--1625[label="1;3pkt 3fpkt"];
691--1630[label="0.333333;1pkt 1fpkt"];
691--4583[label="1;3pkt 3fpkt"];
691--5824[label="1;3pkt 3fpkt"];
691--6376[label="1;3pkt 3fpkt"];
709--1625[label="0.333333;1pkt 1fpkt"];
709--1630[label="1;17pkt 17fpkt"];
709--4583[label="0.166667;1pkt 1fpkt"];
709--4592[label="0.952381;20pkt 20fpkt"];
709--5824[label="0.2;1pkt 1fpkt"];
709--5830[label="0.952381;20pkt 20fpkt"];
709--6376[label="0.2;1pkt 1fpkt"];
1625--1630[label="0.333333;1pkt 1fpkt"];
1625--4583[label="1;3pkt 3fpkt"];
1625--5824[label="1;3pkt 3fpkt"];
1625--6376[label="1;3pkt 3fpkt"];
1630--4583[label="0.166667;1pkt 1fpkt"];
1630--4592[label="0.941176;16pkt 16fpkt"];
1630--5824[label="0.2;1pkt 1fpkt"];
1630--5830[label="0.941176;16pkt 16fpkt"];
1630--6376[label="0.2;1pkt 1fpkt"];
4583--5824[label="1;5pkt 5fpkt"];
4583--6376[label="1;5pkt 5fpkt"];
5824--6376[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="164.228.172.27" src_ip="200.198.194.249" src_port="80"/>
      <filter dst_ip="136.93.58.161" src_ip="200.198.194.249" src_port="80"/>
    </slice>
    <from sec="1068526862" usec="0"/>
    <to sec="1068527625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
742[label="18.12.18.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
830[label="17.125.50.89;s;2pkt 2fpkt", shape=diamond, color=yellow];
1025[label="17.125.173.139;s;2pkt 2fpkt", shape=diamond, color=yellow];
1144[label="1.108.5.93;s;1pkt 1fpkt", shape=diamond, color=yellow];
1262[label="201.17.92.122;s;2pkt 2fpkt", shape=diamond, color=yellow];
1323[label="86.98.70.88;s;1pkt 1fpkt", shape=diamond, color=yellow];
1362[label="147.214.47.150;s;1pkt 1fpkt", shape=diamond, color=yellow];
1369[label="18.10.247.153;s;1pkt 1fpkt", shape=diamond, color=yellow];
1377[label="217.116.5.0;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6884, 143.134.168.140:*}[41.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6884: (20.8333%)&lt;BR/&gt; 6883: (8.33333%)&lt;BR/&gt; 6882: (8.33333%)&lt;BR/&gt; 6881: (8.33333%)&lt;BR/&gt; 6885: (4.16667%)&gt;];
}
742--1634[label="1;1pkt 1fpkt"];
830--1634[label="1;2pkt 2fpkt"];
1025--1634[label="1;2pkt 2fpkt"];
1144--1634[label="1;1pkt 1fpkt"];
1262--1634[label="1;2pkt 2fpkt"];
1323--1634[label="1;1pkt 1fpkt"];
1362--1634[label="1;1pkt 1fpkt"];
1369--1634[label="1;1pkt 1fpkt"];
1377--1634[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.168.140" src_port="6884"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
584[label="208.18.150.71;s;4pkt 4fpkt", shape=diamond, color=yellow];
585[label="193.14.141.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
1637[label="208.18.150.71;s;1pkt 1fpkt", shape=hexagon, color=black];
1725[label="193.14.141.80;d;1pkt 1fpkt", shape=hexagon, color=black];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.18.150.71:1156, 193.14.141.80:554}[25%]&lt;BR/&gt;{208.18.150.71:1441, 193.14.141.106:80}[25%]&lt;BR/&gt;{208.18.150.71:1443, 193.14.141.106:80}[25%]&lt;BR/&gt;{208.18.150.71:1445, 193.14.141.106:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1156: (28.5714%)&lt;BR/&gt; 554: (28.5714%)&lt;BR/&gt; 80: (21.4286%)&lt;BR/&gt; 1445: (7.14286%)&lt;BR/&gt; 1443: (7.14286%)&gt;];
}
584--585[label="1;1pkt 1fpkt"];
584--1637[label="1;1pkt 1fpkt"];
584--1725[label="1;1pkt 1fpkt"];
585--1637[label="1;1pkt 1fpkt"];
585--1725[label="1;1pkt 1fpkt"];
1637--1725[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.14.141.106" dst_port="80" src_ip="208.18.150.71" src_port="1445"/>
      <filter dst_ip="193.14.141.106" dst_port="80" src_ip="208.18.150.71" src_port="1443"/>
      <filter dst_ip="193.14.141.106" dst_port="80" src_ip="208.18.150.71" src_port="1441"/>
      <filter dst_ip="193.14.141.80" dst_port="554" src_ip="208.18.150.71" src_port="1156"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
270[label="208.18.150.71;d;10pkt 10fpkt", shape=diamond, color=yellow];
271[label="193.14.141.80;s;1pkt 1fpkt", shape=diamond, color=yellow];
1638[label="193.14.141.80;s;1pkt 1fpkt", shape=hexagon, color=black];
1927[label="208.18.150.71;d;10pkt 10fpkt", shape=hexagon, color=black];
3464[label="193.14.141.106;29pkt 29fpkt", shape=pentagon, color=darkviolet];
5250[label="193.14.141.106;28pkt 28fpkt", shape=invtriangle, color=brown];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.14.141.106:80, 136.93.253.197:*}[66.6667%]&lt;BR/&gt;{193.14.141.106:80, 208.18.150.71:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4684%)&lt;BR/&gt; 1445: (2.53165%)&lt;BR/&gt; 1443: (2.53165%)&lt;BR/&gt; 1441: (2.53165%)&lt;BR/&gt; 1439: (2.53165%)&gt;];
}
270--271[label="1;1pkt 1fpkt"];
270--1638[label="1;1pkt 1fpkt"];
270--1927[label="1;10pkt 10fpkt"];
270--3464[label="0.9;9pkt 9fpkt"];
270--5250[label="0.9;9pkt 9fpkt"];
271--1638[label="1;1pkt 1fpkt"];
271--1927[label="1;1pkt 1fpkt"];
1638--1927[label="1;1pkt 1fpkt"];
1927--3464[label="0.9;9pkt 9fpkt"];
1927--5250[label="0.9;9pkt 9fpkt"];
3464--5250[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.253.197" src_ip="193.14.141.106" src_port="80"/>
      <filter dst_ip="208.18.150.71" src_ip="193.14.141.106" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
434[label="199.38.42.190;s;2pkt 2fpkt", shape=diamond, color=yellow];
721[label="136.93.215.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
1639[label="136.93.215.164;d;1pkt 1fpkt", shape=hexagon, color=black];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.38.42.190:8292, 136.93.218.11:8277}[50%]&lt;BR/&gt;{199.38.42.190:8292, 136.93.215.164:8277}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (50%)&lt;BR/&gt; 8277: (50%)&gt;];
}
434--589[label="1;1pkt 1fpkt"];
434--721[label="1;1pkt 1fpkt"];
434--1639[label="1;1pkt 1fpkt"];
434--1642[label="1;1pkt 1fpkt"];
721--1639[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.215.164" dst_port="8277" src_ip="199.38.42.190" src_port="8292"/>
      <filter dst_ip="136.93.218.11" dst_port="8277" src_ip="199.38.42.190" src_port="8292"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
589[label="136.93.218.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
1642[label="136.93.218.11;d;1pkt 1fpkt", shape=hexagon, color=black];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.38.42.190:8292, 136.93.218.11:8277}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (50%)&lt;BR/&gt; 8277: (50%)&gt;];
}
589--1642[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.218.11" dst_port="8277" src_ip="199.38.42.190" src_port="8292"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
887[label="215.80.196.191;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.80.196.191:6882, 143.134.213.136:49409}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49409: (50%)&lt;BR/&gt; 6882: (50%)&gt;];
}
887--1444[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.213.136" dst_port="49409" src_ip="215.80.196.191" src_port="6882"/>
    </slice>
    <from sec="1068526813" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
379[label="136.93.37.168;d;89pkt 89fpkt", shape=diamond, color=yellow];
725[label="7.219.198.253;s;92pkt 92fpkt", shape=diamond, color=yellow];
1034[label="143.38.8.220;d;90pkt 90fpkt", shape=diamond, color=yellow];
1530[label="136.93.37.168;d;87pkt 87fpkt", shape=hexagon, color=black];
1645[label="7.219.198.253;s;42pkt 42fpkt", shape=hexagon, color=black];
1722[label="212.30.113.60;s;3pkt 3fpkt", shape=hexagon, color=black];
1900[label="143.38.8.220;d;44pkt 44fpkt", shape=hexagon, color=black];
2943[label="7.211.143.54;78pkt 78fpkt", shape=pentagon, color=darkviolet];
3002[label="212.30.113.60;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4107[label="4.88.74.182;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4430[label="6.24.208.225;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4613[label="7.219.198.253;103pkt 103fpkt", shape=pentagon, color=darkviolet];
5579[label="4.88.74.182;19pkt 19fpkt", shape=invtriangle, color=brown];
5742[label="6.24.208.225;22pkt 22fpkt", shape=invtriangle, color=brown];
6021[label="212.30.113.60;3pkt 3fpkt", shape=invhouse, color=bisque];
6271[label="4.88.74.182;20pkt 20fpkt", shape=invhouse, color=bisque];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.219.198.253:80, *:*}[27.8378%]&lt;BR/&gt;{*:*, 143.38.8.220:*}[24.3243%]&lt;BR/&gt;{*:*, 136.93.37.168:*}[24.0541%]&lt;BR/&gt;{7.211.143.54:80, *:*}[21.0811%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.4119%)&lt;BR/&gt; 443: (3.99729%)&lt;BR/&gt; 1863: (2.37127%)&lt;BR/&gt; 53: (0.813008%)&lt;BR/&gt; 7001: (0.406504%)&gt;];
}
379--457[label="0.011236;1pkt 1fpkt"];
379--485[label="0.0337079;3pkt 3fpkt"];
379--511[label="0.0224719;2pkt 2fpkt"];
379--725[label="0.0898876;8pkt 8fpkt"];
379--803[label="0.666667;2pkt 2fpkt"];
379--1090[label="0.011236;1pkt 1fpkt"];
379--1228[label="0.03125;2pkt 2fpkt"];
379--1243[label="0.0153846;1pkt 1fpkt"];
379--1513[label="0.0337079;3pkt 3fpkt"];
379--1530[label="1;87pkt 87fpkt"];
379--1645[label="0.047619;2pkt 2fpkt"];
379--1722[label="0.666667;2pkt 2fpkt"];
379--1764[label="0.0224719;2pkt 2fpkt"];
379--1847[label="0.011236;1pkt 1fpkt"];
379--2060[label="0.011236;1pkt 1fpkt"];
379--2179[label="0.03125;2pkt 2fpkt"];
379--2278[label="0.011236;1pkt 1fpkt"];
379--2577[label="0.0153846;1pkt 1fpkt"];
379--2586[label="0.0273973;2pkt 2fpkt"];
379--2802[label="0.0333333;2pkt 2fpkt"];
379--2839[label="0.028169;2pkt 2fpkt"];
379--3002[label="0.666667;2pkt 2fpkt"];
379--3303[label="0.1;1pkt 1fpkt"];
379--3650[label="0.011236;1pkt 1fpkt"];
379--3890[label="0.011236;1pkt 1fpkt"];
379--4073[label="0.41573;37pkt 37fpkt"];
379--4404[label="0.2;1pkt 1fpkt"];
379--4430[label="0.0434783;1pkt 1fpkt"];
379--4446[label="0.0909091;1pkt 1fpkt"];
379--4613[label="0.0898876;8pkt 8fpkt"];
379--4896[label="0.0285714;2pkt 2fpkt"];
379--5162[label="0.111111;1pkt 1fpkt"];
379--5347[label="0.011236;1pkt 1fpkt"];
379--5469[label="0.011236;1pkt 1fpkt"];
379--5562[label="0.41573;37pkt 37fpkt"];
379--5742[label="0.0454545;1pkt 1fpkt"];
379--5751[label="0.0909091;1pkt 1fpkt"];
379--6021[label="0.666667;2pkt 2fpkt"];
379--6165[label="0.011236;1pkt 1fpkt"];
379--6264[label="0.41573;37pkt 37fpkt"];
379--6340[label="0.2;1pkt 1fpkt"];
725--1046[label="0.48913;45pkt 45fpkt"];
725--1530[label="0.091954;8pkt 8fpkt"];
725--1645[label="1;42pkt 42fpkt"];
725--1838[label="0.141304;13pkt 13fpkt"];
725--2143[label="0.405405;30pkt 30fpkt"];
725--4613[label="1;92pkt 92fpkt"];
1034--1263[label="0.0144928;1pkt 1fpkt"];
1034--1523[label="0.0222222;2pkt 2fpkt"];
1034--1658[label="0.0333333;3pkt 3fpkt"];
1034--1900[label="1;44pkt 44fpkt"];
1034--2108[label="0.0666667;6pkt 6fpkt"];
1034--2119[label="0.0144928;1pkt 1fpkt"];
1034--2589[label="0.0666667;6pkt 6fpkt"];
1034--2788[label="0.0111111;1pkt 1fpkt"];
1034--2943[label="0.0128205;1pkt 1fpkt"];
1034--3650[label="0.0555556;5pkt 5fpkt"];
1034--3674[label="0.0144928;1pkt 1fpkt"];
1034--3881[label="0.0277778;1pkt 1fpkt"];
1034--3963[label="0.0444444;4pkt 4fpkt"];
1034--4107[label="1;20pkt 20fpkt"];
1034--4430[label="0.173913;4pkt 4fpkt"];
1034--4573[label="0.0178571;1pkt 1fpkt"];
1034--4755[label="0.0666667;6pkt 6fpkt"];
1034--5347[label="0.0555556;5pkt 5fpkt"];
1034--5360[label="0.0147059;1pkt 1fpkt"];
1034--5579[label="1;19pkt 19fpkt"];
1034--5742[label="0.181818;4pkt 4fpkt"];
1034--5820[label="0.0181818;1pkt 1fpkt"];
1034--5905[label="0.0666667;6pkt 6fpkt"];
1034--6165[label="0.0555556;5pkt 5fpkt"];
1034--6172[label="0.0144928;1pkt 1fpkt"];
1034--6271[label="1;20pkt 20fpkt"];
1034--6373[label="0.0181818;1pkt 1fpkt"];
1530--1645[label="0.047619;2pkt 2fpkt"];
1530--1722[label="0.666667;2pkt 2fpkt"];
1530--1764[label="0.0229885;2pkt 2fpkt"];
1530--1847[label="0.0114943;1pkt 1fpkt"];
1530--2060[label="0.0114943;1pkt 1fpkt"];
1530--2179[label="0.03125;2pkt 2fpkt"];
1530--2278[label="0.0114943;1pkt 1fpkt"];
1530--2577[label="0.0153846;1pkt 1fpkt"];
1530--2586[label="0.0273973;2pkt 2fpkt"];
1530--2802[label="0.0333333;2pkt 2fpkt"];
1530--2839[label="0.028169;2pkt 2fpkt"];
1530--3002[label="0.666667;2pkt 2fpkt"];
1530--3303[label="0.1;1pkt 1fpkt"];
1530--3650[label="0.0114943;1pkt 1fpkt"];
1530--3890[label="0.0114943;1pkt 1fpkt"];
1530--4073[label="0.425287;37pkt 37fpkt"];
1530--4404[label="0.2;1pkt 1fpkt"];
1530--4430[label="0.0434783;1pkt 1fpkt"];
1530--4446[label="0.0909091;1pkt 1fpkt"];
1530--4613[label="0.091954;8pkt 8fpkt"];
1530--4896[label="0.0285714;2pkt 2fpkt"];
1530--5162[label="0.111111;1pkt 1fpkt"];
1530--5347[label="0.0114943;1pkt 1fpkt"];
1530--5469[label="0.0114943;1pkt 1fpkt"];
1530--5562[label="0.425287;37pkt 37fpkt"];
1530--5742[label="0.0454545;1pkt 1fpkt"];
1530--5751[label="0.0909091;1pkt 1fpkt"];
1530--6021[label="0.666667;2pkt 2fpkt"];
1530--6165[label="0.0114943;1pkt 1fpkt"];
1530--6264[label="0.425287;37pkt 37fpkt"];
1530--6340[label="0.2;1pkt 1fpkt"];
1645--1838[label="0.142857;6pkt 6fpkt"];
1645--2143[label="0.357143;15pkt 15fpkt"];
1645--4613[label="1;42pkt 42fpkt"];
1722--3002[label="1;3pkt 3fpkt"];
1722--6021[label="1;3pkt 3fpkt"];
1900--2108[label="0.136364;6pkt 6fpkt"];
1900--2119[label="0.0227273;1pkt 1fpkt"];
1900--2589[label="0.136364;6pkt 6fpkt"];
1900--2943[label="0.0227273;1pkt 1fpkt"];
1900--3650[label="0.0909091;4pkt 4fpkt"];
1900--3881[label="0.0277778;1pkt 1fpkt"];
1900--3963[label="0.0454545;2pkt 2fpkt"];
1900--4107[label="1;20pkt 20fpkt"];
1900--4430[label="0.0869565;2pkt 2fpkt"];
1900--4573[label="0.0227273;1pkt 1fpkt"];
1900--4755[label="0.136364;6pkt 6fpkt"];
1900--5347[label="0.0909091;4pkt 4fpkt"];
1900--5579[label="1;19pkt 19fpkt"];
1900--5742[label="0.0909091;2pkt 2fpkt"];
1900--5820[label="0.0227273;1pkt 1fpkt"];
1900--5905[label="0.136364;6pkt 6fpkt"];
1900--6165[label="0.0909091;4pkt 4fpkt"];
1900--6271[label="1;20pkt 20fpkt"];
1900--6373[label="0.0227273;1pkt 1fpkt"];
3002--6021[label="1;3pkt 3fpkt"];
4107--5579[label="1;19pkt 19fpkt"];
4107--6271[label="1;20pkt 20fpkt"];
4430--5742[label="1;22pkt 22fpkt"];
5579--6271[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.8.220"/>
      <filter dst_ip="136.93.37.168"/>
      <filter src_ip="7.219.198.253" src_port="80"/>
      <filter src_ip="7.211.143.54" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
718[label="200.145.39.141;s;309pkt 309fpkt", shape=diamond, color=yellow];
971[label="143.38.242.90;d;6pkt 6fpkt", shape=diamond, color=yellow];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.145.39.141:80, 161.29.54.127:*}[38.2166%]&lt;BR/&gt;{200.145.39.141:80, 161.29.54.126:*}[37.8981%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5238%)&lt;BR/&gt; 35388: (0.31746%)&lt;BR/&gt; 4804: (0.31746%)&lt;BR/&gt; 4229: (0.31746%)&lt;BR/&gt; 3457: (0.31746%)&gt;];
}
718--727[label="0.0275862;4pkt 4fpkt"];
718--764[label="0.0108696;1pkt 1fpkt"];
718--971[label="0.166667;1pkt 1fpkt"];
718--1046[label="0.0520833;5pkt 5fpkt"];
718--1215[label="0.0821918;12pkt 12fpkt"];
718--1427[label="0.00323625;1pkt 1fpkt"];
718--1438[label="0.00970874;3pkt 3fpkt"];
718--1632[label="1;282pkt 282fpkt"];
718--1650[label="0.037037;2pkt 2fpkt"];
718--1838[label="0.00647249;2pkt 2fpkt"];
718--1893[label="0.107143;9pkt 9fpkt"];
718--1930[label="0.0226537;7pkt 7fpkt"];
718--1949[label="0.166667;1pkt 1fpkt"];
718--2143[label="0.0675676;5pkt 5fpkt"];
718--2163[label="0.38835;120pkt 120fpkt"];
718--2164[label="0.00647249;2pkt 2fpkt"];
718--2226[label="0.00970874;3pkt 3fpkt"];
718--2245[label="0.00323625;1pkt 1fpkt"];
971--972[label="0.166667;1pkt 1fpkt"];
971--1632[label="0.166667;1pkt 1fpkt"];
971--1949[label="1;6pkt 6fpkt"];
971--2065[label="0.166667;1pkt 1fpkt"];
971--3161[label="0.166667;1pkt 1fpkt"];
971--5082[label="0.166667;1pkt 1fpkt"];
971--6054[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.54.127" src_ip="200.145.39.141" src_port="80"/>
      <filter dst_ip="161.29.54.126" src_ip="200.145.39.141" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
446[label="136.93.244.128;d;36pkt 36fpkt", shape=diamond, color=yellow];
447[label="96.137.151.214;s;9pkt 9fpkt", shape=diamond, color=yellow];
1651[label="136.93.244.128;d;24pkt 24fpkt", shape=hexagon, color=black];
1842[label="96.137.151.214;s;6pkt 6fpkt", shape=hexagon, color=black];
3116[label="193.14.141.70;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.137.151.214:80, 136.93.244.128:*}[41.6667%]&lt;BR/&gt;{0.38.137.96:80, 136.93.244.128:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.5065%)&lt;BR/&gt; 31512: (1.94805%)&lt;BR/&gt; 6970: (1.94805%)&lt;BR/&gt; 4255: (1.94805%)&lt;BR/&gt; 4254: (1.94805%)&gt;];
}
446--447[label="1;9pkt 9fpkt"];
446--1651[label="1;24pkt 24fpkt"];
446--1842[label="1;6pkt 6fpkt"];
446--3116[label="1;2pkt 2fpkt"];
447--1651[label="0.111111;1pkt 1fpkt"];
1651--1842[label="1;6pkt 6fpkt"];
1651--3116[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.244.128" src_ip="96.137.151.214" src_port="80"/>
      <filter dst_ip="136.93.244.128" src_ip="0.38.137.96" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
319[label="208.18.18.170;d;2pkt 2fpkt", shape=diamond, color=yellow];
320[label="1.88.135.240;s;1pkt 1fpkt", shape=diamond, color=yellow];
1653[label="208.18.18.170;d;2pkt 2fpkt", shape=hexagon, color=black];
4523[label="1.88.135.240;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5793[label="1.88.135.240;1pkt 1fpkt", shape=invtriangle, color=brown];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.30.80.157:4768, 208.18.18.170:2615}[50%]&lt;BR/&gt;{1.88.135.240:2834, 208.18.18.170:2615}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2615: (50%)&lt;BR/&gt; 2834: (35.7143%)&lt;BR/&gt; 4768: (14.2857%)&gt;];
}
319--320[label="1;1pkt 1fpkt"];
319--1653[label="1;2pkt 2fpkt"];
319--4523[label="1;1pkt 1fpkt"];
319--5793[label="1;1pkt 1fpkt"];
320--1653[label="1;1pkt 1fpkt"];
320--4523[label="1;1pkt 1fpkt"];
320--5793[label="1;1pkt 1fpkt"];
1653--4523[label="1;1pkt 1fpkt"];
1653--5793[label="1;1pkt 1fpkt"];
4523--5793[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.18.170" dst_port="2615" src_ip="1.88.135.240" src_port="2834"/>
      <filter dst_ip="208.18.18.170" dst_port="2615" src_ip="4.30.80.157" src_port="4768"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
458[label="4.88.134.186;s;7pkt 7fpkt", shape=diamond, color=yellow];
1657[label="4.88.134.186;s;7pkt 7fpkt", shape=hexagon, color=black];
4137[label="4.88.134.186;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5592[label="4.88.134.186;7pkt 7fpkt", shape=invtriangle, color=brown];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.88.134.186:80, 208.31.231.177:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58233: (7.14286%)&lt;BR/&gt; 54822: (7.14286%)&lt;BR/&gt; 50926: (7.14286%)&lt;BR/&gt; 50916: (7.14286%)&gt;];
}
458--1657[label="1;7pkt 7fpkt"];
458--2164[label="1;7pkt 7fpkt"];
458--4137[label="1;7pkt 7fpkt"];
458--5592[label="1;7pkt 7fpkt"];
1657--2164[label="1;7pkt 7fpkt"];
1657--4137[label="1;7pkt 7fpkt"];
1657--5592[label="1;7pkt 7fpkt"];
4137--5592[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.231.177" src_ip="4.88.134.186" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,501,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
599[label="147.121.30.187;s;1pkt 1fpkt", shape=diamond, color=yellow];
1659[label="147.121.30.187;s;1pkt 1fpkt", shape=hexagon, color=black];
4143[label="147.121.30.187;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.121.30.187:60487, 161.29.13.180:21}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60487: (50%)&lt;BR/&gt; 21: (50%)&gt;];
}
599--1659[label="1;1pkt 1fpkt"];
599--1937[label="1;1pkt 1fpkt"];
599--4143[label="1;1pkt 1fpkt"];
1659--1937[label="1;1pkt 1fpkt"];
1659--4143[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.13.180" dst_port="21" src_ip="147.121.30.187" src_port="60487"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
604[label="199.153.80.125;s;2pkt 2fpkt", shape=diamond, color=yellow];
1660[label="199.153.80.125;s;2pkt 2fpkt", shape=hexagon, color=black];
3603[label="199.153.80.125;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.153.80.125:554, 143.38.213.215:49244}[50%]&lt;BR/&gt;{199.153.80.125:21282, 143.38.213.215:6972}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49244: (25%)&lt;BR/&gt; 21282: (25%)&lt;BR/&gt; 6972: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
604--1660[label="1;2pkt 2fpkt"];
604--2171[label="1;2pkt 2fpkt"];
604--3603[label="1;2pkt 2fpkt"];
604--5325[label="1;2pkt 2fpkt"];
1660--2171[label="1;2pkt 2fpkt"];
1660--3603[label="1;2pkt 2fpkt"];
1660--5325[label="1;2pkt 2fpkt"];
3603--5325[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.213.215" dst_port="6972" src_ip="199.153.80.125" src_port="21282"/>
      <filter dst_ip="143.38.213.215" dst_port="49244" src_ip="199.153.80.125" src_port="554"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
615[label="193.14.150.120;s;1pkt 1fpkt", shape=diamond, color=yellow];
1668[label="193.14.150.120;s;1pkt 1fpkt", shape=hexagon, color=black];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.14.150.120:7070, 208.159.185.117:48088}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48088: (50%)&lt;BR/&gt; 7070: (50%)&gt;];
}
615--1668[label="1;1pkt 1fpkt"];
615--1839[label="1;1pkt 1fpkt"];
1668--1839[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.159.185.117" dst_port="48088" src_ip="193.14.150.120" src_port="7070"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
757[label="209.176.130.68;s;729pkt 729fpkt", shape=diamond, color=yellow];
1686[label="209.176.130.68;s;356pkt 356fpkt", shape=hexagon, color=black];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.176.130.68:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
757--1686[label="1;356pkt 356fpkt"];
</description>
    <slice>
      <filter src_ip="209.176.130.68"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
530[label="164.228.232.44;d;22pkt 22fpkt", shape=diamond, color=yellow];
531[label="197.250.192.123;s;12pkt 12fpkt", shape=diamond, color=yellow];
1605[label="197.250.192.123;s;12pkt 12fpkt", shape=hexagon, color=black];
1690[label="164.228.232.44;d;22pkt 22fpkt", shape=hexagon, color=black];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.250.192.123:80, 164.228.232.44:*}[54.5455%]&lt;BR/&gt;{198.50.150.32:80, 164.228.232.44:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0588%)&lt;BR/&gt; 3718: (2.94118%)&lt;BR/&gt; 3716: (2.94118%)&lt;BR/&gt; 3714: (2.94118%)&lt;BR/&gt; 3712: (2.94118%)&gt;];
}
530--531[label="1;12pkt 12fpkt"];
530--1459[label="0.0454545;1pkt 1fpkt"];
530--1605[label="1;12pkt 12fpkt"];
530--1690[label="1;22pkt 22fpkt"];
531--1605[label="1;12pkt 12fpkt"];
531--1690[label="1;12pkt 12fpkt"];
1605--1690[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="164.228.232.44" src_ip="197.250.192.123" src_port="80"/>
      <filter dst_ip="164.228.232.44" src_ip="198.50.150.32" src_port="80"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
514[label="7.136.246.56;s;101pkt 101fpkt", shape=diamond, color=yellow];
552[label="143.176.79.131;d;64pkt 64fpkt", shape=diamond, color=yellow];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.136.246.56:*, *:80}[52.5%]&lt;BR/&gt;{*:*, 143.176.79.131:80}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 53: (9.09091%)&lt;BR/&gt; 1024: (2.72727%)&lt;BR/&gt; 0: (1.21212%)&lt;BR/&gt; 63206: (0.606061%)&gt;];
}
514--517[label="0.029703;3pkt 3fpkt"];
514--550[label="0.0428571;3pkt 3fpkt"];
514--552[label="0.078125;5pkt 5fpkt"];
514--635[label="0.00990099;1pkt 1fpkt"];
514--651[label="0.0123457;1pkt 1fpkt"];
514--658[label="0.137931;4pkt 4fpkt"];
514--781[label="0.016129;1pkt 1fpkt"];
514--831[label="0.0792079;8pkt 8fpkt"];
514--855[label="0.00990099;1pkt 1fpkt"];
514--956[label="0.0909091;1pkt 1fpkt"];
514--1023[label="0.0238095;1pkt 1fpkt"];
514--1118[label="0.0319149;3pkt 3fpkt"];
514--1158[label="0.0571429;2pkt 2fpkt"];
514--1160[label="0.0131579;1pkt 1fpkt"];
514--1271[label="0.0952381;4pkt 4fpkt"];
514--1380[label="0.038961;3pkt 3fpkt"];
514--1466[label="0.00990099;1pkt 1fpkt"];
514--1507[label="0.0990099;10pkt 10fpkt"];
514--1528[label="0.00990099;1pkt 1fpkt"];
514--1604[label="0.137931;4pkt 4fpkt"];
514--1685[label="0.029703;3pkt 3fpkt"];
514--1704[label="0.016129;1pkt 1fpkt"];
514--1707[label="0.0428571;3pkt 3fpkt"];
514--1708[label="0.0847458;5pkt 5fpkt"];
514--1852[label="0.00990099;1pkt 1fpkt"];
514--1867[label="0.00990099;1pkt 1fpkt"];
514--1874[label="1;86pkt 86fpkt"];
514--1891[label="0.0285714;1pkt 1fpkt"];
514--1921[label="0.0909091;1pkt 1fpkt"];
514--1935[label="0.029703;3pkt 3fpkt"];
514--2006[label="0.0131579;1pkt 1fpkt"];
514--2040[label="0.0246914;2pkt 2fpkt"];
514--2132[label="0.1;3pkt 3fpkt"];
514--2327[label="0.0891089;9pkt 9fpkt"];
514--2336[label="0.00990099;1pkt 1fpkt"];
514--2342[label="0.0891089;9pkt 9fpkt"];
514--2970[label="1;101pkt 101fpkt"];
514--4981[label="0.990099;100pkt 100fpkt"];
552--559[label="0.03125;2pkt 2fpkt"];
552--642[label="0.046875;3pkt 3fpkt"];
552--648[label="0.0625;4pkt 4fpkt"];
552--785[label="0.031746;2pkt 2fpkt"];
552--1275[label="0.0909091;2pkt 2fpkt"];
552--1435[label="0.078125;5pkt 5fpkt"];
552--1540[label="0.046875;3pkt 3fpkt"];
552--1547[label="0.0882353;3pkt 3fpkt"];
552--1555[label="0.0175439;1pkt 1fpkt"];
552--1592[label="0.046875;3pkt 3fpkt"];
552--1603[label="0.04;2pkt 2fpkt"];
552--1698[label="0.046875;3pkt 3fpkt"];
552--1708[label="1;59pkt 59fpkt"];
552--1874[label="0.046875;3pkt 3fpkt"];
552--2137[label="0.0952381;2pkt 2fpkt"];
552--2327[label="0.015625;1pkt 1fpkt"];
552--2342[label="0.015625;1pkt 1fpkt"];
552--2742[label="0.03125;2pkt 2fpkt"];
552--2767[label="0.046875;3pkt 3fpkt"];
552--2889[label="0.046875;3pkt 3fpkt"];
552--2970[label="0.078125;5pkt 5fpkt"];
552--3008[label="0.09375;6pkt 6fpkt"];
552--3027[label="0.078125;5pkt 5fpkt"];
552--3351[label="0.0322581;1pkt 1fpkt"];
552--3734[label="0.125;3pkt 3fpkt"];
552--3874[label="0.0689655;2pkt 2fpkt"];
552--4089[label="0.030303;1pkt 1fpkt"];
552--4469[label="0.047619;1pkt 1fpkt"];
552--4546[label="0.0588235;1pkt 1fpkt"];
552--4842[label="0.03125;2pkt 2fpkt"];
552--4981[label="0.078125;5pkt 5fpkt"];
552--5002[label="0.09375;6pkt 6fpkt"];
552--5943[label="0.03125;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="7.136.246.56"/>
      <filter dst_ip="143.176.79.131" dst_port="80"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
449[label="143.38.15.109;d;590pkt 590fpkt", shape=diamond, color=yellow];
2995[label="7.219.227.58;54pkt 54fpkt", shape=pentagon, color=darkviolet];
4993[label="7.219.227.58;54pkt 54fpkt", shape=invtriangle, color=brown];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.24.172.144:80, 143.38.15.109:*}[45.3795%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9284%)&lt;BR/&gt; 4093: (0.2149%)&lt;BR/&gt; 4092: (0.2149%)&lt;BR/&gt; 4091: (0.2149%)&lt;BR/&gt; 4085: (0.2149%)&gt;];
}
449--519[label="0.731383;275pkt 275fpkt"];
449--772[label="0.557377;102pkt 102fpkt"];
449--850[label="0.38835;40pkt 40fpkt"];
449--1090[label="0.00704225;1pkt 1fpkt"];
449--1154[label="0.893333;67pkt 67fpkt"];
449--1585[label="1;516pkt 516fpkt"];
449--1701[label="0.557377;102pkt 102fpkt"];
449--1869[label="0.364583;35pkt 35fpkt"];
449--2060[label="0.00746269;1pkt 1fpkt"];
449--2612[label="0.744186;32pkt 32fpkt"];
449--2995[label="0.703704;38pkt 38fpkt"];
449--3861[label="0.00595238;1pkt 1fpkt"];
449--3890[label="0.00628931;1pkt 1fpkt"];
449--3992[label="0.797619;67pkt 67fpkt"];
449--4453[label="0.820513;32pkt 32fpkt"];
449--4772[label="0.744186;32pkt 32fpkt"];
449--4993[label="0.703704;38pkt 38fpkt"];
449--5469[label="0.00632911;1pkt 1fpkt"];
449--5517[label="0.807229;67pkt 67fpkt"];
2995--4993[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.15.109" src_ip="6.24.172.144" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
571[label="197.18.131.245;s;1pkt 1fpkt", shape=diamond, color=yellow];
1712[label="197.18.131.245;s;1pkt 1fpkt", shape=hexagon, color=black];
4562[label="197.18.131.245;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.18.131.245:80, 136.93.205.153:1305}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1305: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
571--1493[label="1;1pkt 1fpkt"];
571--1712[label="1;1pkt 1fpkt"];
571--4562[label="1;1pkt 1fpkt"];
1712--4562[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.205.153" dst_port="1305" src_ip="197.18.131.245" src_port="80"/>
    </slice>
    <from sec="1068526889" usec="0"/>
    <to sec="1068527012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
302[label="0.39.56.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.39.56.5:80, 136.93.199.189:1773}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1773: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
302--1641[label="1;1pkt 1fpkt"];
302--1729[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.199.189" dst_port="1773" src_ip="0.39.56.5" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
817[label="218.109.147.32;s;225pkt 225fpkt", shape=diamond, color=yellow];
1731[label="218.109.147.32;s;225pkt 225fpkt", shape=hexagon, color=black];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.109.147.32:6667, *:*}[38.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (19.1111%)&lt;BR/&gt; 113: (9.77778%)&lt;BR/&gt; 1080: (6.66667%)&lt;BR/&gt; 3128: (3.55556%)&lt;BR/&gt; 10080: (3.33333%)&gt;];
}
817--1731[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter src_ip="218.109.147.32" src_port="6667"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
329[label="10.131.25.180;s;13698pkt 13698fpkt", shape=diamond, color=yellow];
1733[label="10.131.25.180;s;12211pkt 12211fpkt", shape=hexagon, color=black];
4085[label="10.131.25.180;14792pkt 14792fpkt", shape=pentagon, color=darkviolet];
5568[label="10.131.25.180;14792pkt 14792fpkt", shape=invtriangle, color=brown];
6267[label="10.131.25.180;14792pkt 14792fpkt", shape=invhouse, color=bisque];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.131.25.180:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
329--1733[label="1;12211pkt 12211fpkt"];
329--4085[label="1;13698pkt 13698fpkt"];
329--5568[label="1;13698pkt 13698fpkt"];
329--6267[label="1;13698pkt 13698fpkt"];
1733--4085[label="1;12211pkt 12211fpkt"];
1733--5568[label="1;12211pkt 12211fpkt"];
1733--6267[label="1;12211pkt 12211fpkt"];
4085--5568[label="1;14792pkt 14792fpkt"];
4085--6267[label="1;14792pkt 14792fpkt"];
5568--6267[label="1;14792pkt 14792fpkt"];
</description>
    <slice>
      <filter src_ip="10.131.25.180"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
347[label="200.193.134.245;s;10pkt 10fpkt", shape=diamond, color=yellow];
367[label="161.29.14.145;d;2pkt 2fpkt", shape=diamond, color=yellow];
1674[label="161.29.14.145;d;2pkt 2fpkt", shape=hexagon, color=black];
1739[label="200.193.134.245;s;10pkt 10fpkt", shape=hexagon, color=black];
4563[label="200.193.134.245;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.193.134.245:110, 136.93.202.36:*}[33.3333%]&lt;BR/&gt;{200.193.134.245:110, 161.29.9.29:*}[22.2222%]&lt;BR/&gt;{200.193.134.245:110, 161.29.5.64:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (47.561%)&lt;BR/&gt; 1088: (6.09756%)&lt;BR/&gt; 61603: (3.65854%)&lt;BR/&gt; 61460: (3.65854%)&lt;BR/&gt; 61061: (3.65854%)&gt;];
}
347--367[label="0.5;1pkt 1fpkt"];
347--610[label="0.3;3pkt 3fpkt"];
347--764[label="0.2;2pkt 2fpkt"];
347--783[label="0.1;1pkt 1fpkt"];
347--1674[label="0.5;1pkt 1fpkt"];
347--1738[label="0.3;3pkt 3fpkt"];
347--1739[label="1;10pkt 10fpkt"];
347--1879[label="0.2;2pkt 2fpkt"];
347--2001[label="0.1;1pkt 1fpkt"];
347--2295[label="0.1;1pkt 1fpkt"];
347--4563[label="1;10pkt 10fpkt"];
367--1674[label="1;2pkt 2fpkt"];
367--1739[label="0.5;1pkt 1fpkt"];
367--4563[label="0.5;1pkt 1fpkt"];
1674--1739[label="0.5;1pkt 1fpkt"];
1674--4563[label="0.5;1pkt 1fpkt"];
1739--1879[label="0.2;2pkt 2fpkt"];
1739--2001[label="0.1;1pkt 1fpkt"];
1739--2295[label="0.1;1pkt 1fpkt"];
1739--4563[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.202.36" src_ip="200.193.134.245" src_port="110"/>
      <filter dst_ip="161.29.5.64" src_ip="200.193.134.245" src_port="110"/>
      <filter dst_ip="161.29.9.29" src_ip="200.193.134.245" src_port="110"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
866[label="17.115.164.78;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.115.164.78:6881, 143.134.168.140:3002}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 3002: (50%)&gt;];
}
866--1634[label="1;1pkt 1fpkt"];
866--1779[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.168.140" dst_port="3002" src_ip="17.115.164.78" src_port="6881"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
318[label="136.93.66.38;d;105pkt 105fpkt", shape=diamond, color=yellow];
594[label="220.1.70.128;s;30pkt 30fpkt", shape=diamond, color=yellow];
886[label="18.77.53.168;s;28pkt 28fpkt", shape=diamond, color=yellow];
1494[label="136.93.66.38;d;102pkt 102fpkt", shape=hexagon, color=black];
1649[label="220.1.70.128;s;24pkt 24fpkt", shape=hexagon, color=black];
1792[label="18.77.53.168;s;28pkt 28fpkt", shape=hexagon, color=black];
3980[label="18.77.53.168;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4744[label="7.219.214.17;152pkt 152fpkt", shape=invtriangle, color=brown];
5509[label="18.77.53.168;31pkt 31fpkt", shape=invtriangle, color=brown];
6240[label="18.77.53.168;30pkt 30fpkt", shape=invhouse, color=bisque];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.219.214.17:80, *:*}[62.2951%]&lt;BR/&gt;{*:*, 136.93.66.38:*}[43.0328%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (21.0339%)&lt;BR/&gt; 1166: (0.713012%)&lt;BR/&gt; 1164: (0.713012%)&lt;BR/&gt; 1137: (0.713012%)&lt;BR/&gt; 1441: (0.623886%)&gt;];
}
318--457[label="0.0761905;8pkt 8fpkt"];
318--492[label="0.114286;12pkt 12fpkt"];
318--548[label="0.12381;13pkt 13fpkt"];
318--594[label="1;30pkt 30fpkt"];
318--886[label="1;28pkt 28fpkt"];
318--894[label="0.0857143;9pkt 9fpkt"];
318--1494[label="1;102pkt 102fpkt"];
318--1550[label="0.12381;13pkt 13fpkt"];
318--1649[label="1;24pkt 24fpkt"];
318--1792[label="1;28pkt 28fpkt"];
318--1847[label="0.0761905;8pkt 8fpkt"];
318--1957[label="0.114286;12pkt 12fpkt"];
318--1998[label="0.0857143;9pkt 9fpkt"];
318--2278[label="0.0761905;8pkt 8fpkt"];
318--2568[label="0.12381;13pkt 13fpkt"];
318--3980[label="1;31pkt 31fpkt"];
318--4744[label="0.12381;13pkt 13fpkt"];
318--5509[label="1;31pkt 31fpkt"];
318--6240[label="1;30pkt 30fpkt"];
594--1494[label="0.966667;29pkt 29fpkt"];
594--1649[label="1;24pkt 24fpkt"];
886--1494[label="1;28pkt 28fpkt"];
886--1792[label="1;28pkt 28fpkt"];
886--3980[label="1;28pkt 28fpkt"];
886--5509[label="1;28pkt 28fpkt"];
886--6240[label="0.964286;27pkt 27fpkt"];
1494--1550[label="0.127451;13pkt 13fpkt"];
1494--1649[label="1;24pkt 24fpkt"];
1494--1792[label="1;28pkt 28fpkt"];
1494--1847[label="0.0784314;8pkt 8fpkt"];
1494--1957[label="0.117647;12pkt 12fpkt"];
1494--1998[label="0.0882353;9pkt 9fpkt"];
1494--2278[label="0.0784314;8pkt 8fpkt"];
1494--2568[label="0.127451;13pkt 13fpkt"];
1494--3980[label="0.935484;29pkt 29fpkt"];
1494--4744[label="0.127451;13pkt 13fpkt"];
1494--5509[label="0.935484;29pkt 29fpkt"];
1494--6240[label="0.933333;28pkt 28fpkt"];
1792--3980[label="1;28pkt 28fpkt"];
1792--5509[label="1;28pkt 28fpkt"];
1792--6240[label="0.964286;27pkt 27fpkt"];
3980--5509[label="1;31pkt 31fpkt"];
3980--6240[label="1;30pkt 30fpkt"];
5509--6240[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.66.38"/>
      <filter src_ip="7.219.214.17" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,011,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
544[label="96.157.184.100;s;1047pkt 1047fpkt", shape=diamond, color=yellow];
1795[label="96.157.184.100;s;775pkt 775fpkt", shape=hexagon, color=black];
3406[label="96.157.184.100;1047pkt 1047fpkt", shape=pentagon, color=darkviolet];
5221[label="96.157.184.100;1046pkt 1046fpkt", shape=invtriangle, color=brown];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.157.184.100:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51097: (0.102171%)&lt;BR/&gt; 48150: (0.102171%)&lt;BR/&gt; 47497: (0.102171%)&lt;BR/&gt; 41846: (0.102171%)&gt;];
}
544--1795[label="1;775pkt 775fpkt"];
544--3406[label="1;1047pkt 1047fpkt"];
544--5221[label="1;1046pkt 1046fpkt"];
1795--3406[label="1;775pkt 775fpkt"];
1795--5221[label="0.99871;774pkt 774fpkt"];
3406--5221[label="1;1046pkt 1046fpkt"];
</description>
    <slice>
      <filter src_ip="96.157.184.100" src_port="80"/>
    </slice>
    <from sec="1068526817" usec="0"/>
    <to sec="1068527556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
658[label="209.176.131.13;d;29pkt 29fpkt", shape=diamond, color=yellow];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 209.176.131.13:80}[96.5517%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2759%)&lt;BR/&gt; 63350: (1.72414%)&lt;BR/&gt; 62665: (1.72414%)&lt;BR/&gt; 60372: (1.72414%)&lt;BR/&gt; 54788: (1.72414%)&gt;];
}
658--785[label="0.0344828;1pkt 1fpkt"];
658--1070[label="0.0344828;1pkt 1fpkt"];
658--1435[label="0.103448;3pkt 3fpkt"];
658--1540[label="0.172414;5pkt 5fpkt"];
658--1555[label="0.0344828;1pkt 1fpkt"];
658--1592[label="0.0344828;1pkt 1fpkt"];
658--1603[label="0.0689655;2pkt 2fpkt"];
658--1604[label="1;29pkt 29fpkt"];
658--1698[label="0.0344828;1pkt 1fpkt"];
658--1874[label="0.103448;3pkt 3fpkt"];
658--2029[label="0.0344828;1pkt 1fpkt"];
658--2327[label="0.0689655;2pkt 2fpkt"];
658--2342[label="0.0689655;2pkt 2fpkt"];
658--2742[label="0.0344828;1pkt 1fpkt"];
658--2767[label="0.0344828;1pkt 1fpkt"];
658--2859[label="0.0344828;1pkt 1fpkt"];
658--2889[label="0.137931;4pkt 4fpkt"];
658--2970[label="0.137931;4pkt 4fpkt"];
658--3027[label="0.103448;3pkt 3fpkt"];
658--3874[label="0.0344828;1pkt 1fpkt"];
658--4028[label="0.0714286;1pkt 1fpkt"];
658--4264[label="0.08;2pkt 2fpkt"];
658--4309[label="0.037037;1pkt 1fpkt"];
658--4435[label="0.047619;1pkt 1fpkt"];
658--4842[label="0.0344828;1pkt 1fpkt"];
658--4913[label="0.0344828;1pkt 1fpkt"];
658--4981[label="0.137931;4pkt 4fpkt"];
658--5533[label="0.0714286;1pkt 1fpkt"];
658--5666[label="0.08;2pkt 2fpkt"];
658--5691[label="0.037037;1pkt 1fpkt"];
658--5943[label="0.0344828;1pkt 1fpkt"];
658--6308[label="0.08;2pkt 2fpkt"];
658--6324[label="0.0384615;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.176.131.13" dst_port="80"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
802[label="7.89.205.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
1814[label="7.89.205.182;s;1pkt 1fpkt", shape=hexagon, color=black];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.89.205.182:80, 209.139.200.177:42488}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42488: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
802--1814[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.139.200.177" dst_port="42488" src_ip="7.89.205.182" src_port="80"/>
    </slice>
    <from sec="1068527066" usec="0"/>
    <to sec="1068527136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
938[label="143.134.233.26;d;6pkt 6fpkt", shape=diamond, color=yellow];
939[label="209.199.105.31;s;6pkt 6fpkt", shape=diamond, color=yellow];
1822[label="209.199.105.31;s;6pkt 6fpkt", shape=hexagon, color=black];
1916[label="143.134.233.26;d;6pkt 6fpkt", shape=hexagon, color=black];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.199.105.31:*, 143.134.233.26:20}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (41.6667%)&lt;BR/&gt; 1737: (8.33333%)&lt;BR/&gt; 1691: (8.33333%)&lt;BR/&gt; 1680: (8.33333%)&lt;BR/&gt; 1679: (8.33333%)&gt;];
}
938--939[label="1;6pkt 6fpkt"];
938--1822[label="1;6pkt 6fpkt"];
938--1916[label="1;6pkt 6fpkt"];
939--1822[label="1;6pkt 6fpkt"];
939--1916[label="1;6pkt 6fpkt"];
1822--1916[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.233.26" dst_port="20" src_ip="209.199.105.31"/>
    </slice>
    <from sec="1068527149" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
813[label="204.39.235.67;s;9pkt 9fpkt", shape=diamond, color=yellow];
1823[label="204.39.235.67;s;9pkt 9fpkt", shape=hexagon, color=black];
3081[label="204.39.235.67;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5037[label="204.39.235.67;8pkt 8fpkt", shape=invtriangle, color=brown];
6034[label="204.39.235.67;8pkt 8fpkt", shape=invhouse, color=bisque];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.39.235.67:80, 136.93.96.175:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4309: (5.81395%)&lt;BR/&gt; 4306: (5.81395%)&lt;BR/&gt; 4301: (5.81395%)&lt;BR/&gt; 4299: (5.81395%)&gt;];
}
813--1823[label="1;9pkt 9fpkt"];
813--1838[label="1;9pkt 9fpkt"];
813--3081[label="1;9pkt 9fpkt"];
813--5037[label="1;8pkt 8fpkt"];
813--6034[label="1;8pkt 8fpkt"];
1823--1838[label="1;9pkt 9fpkt"];
1823--3081[label="1;9pkt 9fpkt"];
1823--5037[label="1;8pkt 8fpkt"];
1823--6034[label="1;8pkt 8fpkt"];
3081--5037[label="1;8pkt 8fpkt"];
3081--6034[label="1;8pkt 8fpkt"];
5037--6034[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.96.175" src_ip="204.39.235.67" src_port="80"/>
    </slice>
    <from sec="1068527155" usec="0"/>
    <to sec="1068527184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
814[label="164.228.153.205;d;20pkt 20fpkt", shape=diamond, color=yellow];
1824[label="164.228.153.205;d;20pkt 20fpkt", shape=hexagon, color=black];
4004[label="204.39.168.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5520[label="204.39.168.170;1pkt 1fpkt", shape=invtriangle, color=brown];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.84.231.165:80, 164.228.153.205:*}[85%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50424: (4.7619%)&lt;BR/&gt; 50437: (2.38095%)&lt;BR/&gt; 50436: (2.38095%)&lt;BR/&gt; 50435: (2.38095%)&gt;];
}
814--1824[label="1;20pkt 20fpkt"];
814--4004[label="1;1pkt 1fpkt"];
814--5520[label="1;1pkt 1fpkt"];
1824--4004[label="1;1pkt 1fpkt"];
1824--5520[label="1;1pkt 1fpkt"];
4004--5520[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.228.153.205" src_ip="96.84.231.165" src_port="80"/>
    </slice>
    <from sec="1068527155" usec="0"/>
    <to sec="1068527353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564047,1.73089,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
427[label="161.29.74.233;d;6pkt 6fpkt", shape=diamond, color=yellow];
3972[label="4.210.186.166;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.4.150.219:143, 161.29.74.233:*}[22.2222%]&lt;BR/&gt;{4.210.186.166:5050, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (15%)&lt;BR/&gt; 49408: (10%)&lt;BR/&gt; 143: (10%)&lt;BR/&gt; 25: (10%)&lt;BR/&gt; 49416: (5%)&gt;];
}
427--428[label="0.166667;1pkt 1fpkt"];
427--1428[label="0.166667;1pkt 1fpkt"];
427--1723[label="1;5pkt 5fpkt"];
427--1830[label="0.333333;1pkt 1fpkt"];
427--2223[label="0.166667;1pkt 1fpkt"];
427--2518[label="0.166667;1pkt 1fpkt"];
427--2530[label="0.166667;1pkt 1fpkt"];
427--3972[label="0.25;1pkt 1fpkt"];
427--4389[label="0.166667;1pkt 1fpkt"];
427--4712[label="0.166667;1pkt 1fpkt"];
427--4717[label="0.166667;1pkt 1fpkt"];
427--5731[label="0.166667;1pkt 1fpkt"];
427--5889[label="0.166667;1pkt 1fpkt"];
427--5892[label="0.166667;1pkt 1fpkt"];
427--6338[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="4.210.186.166" src_port="5050"/>
      <filter dst_ip="161.29.74.233" src_ip="4.4.150.219" src_port="143"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
226[label="136.93.199.81;d;8pkt 8fpkt", shape=diamond, color=yellow];
227[label="99.178.248.219;s;5pkt 5fpkt", shape=diamond, color=yellow];
1831[label="99.178.248.219;s;5pkt 5fpkt", shape=hexagon, color=black];
4393[label="99.178.248.219;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.178.248.219:*, 136.93.199.81:9999}[37.5%]&lt;BR/&gt;{99.147.177.61:*, 136.93.199.81:9999}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9999: (30.4348%)&lt;BR/&gt; 13415: (8.69565%)&lt;BR/&gt; 13414: (8.69565%)&lt;BR/&gt; 13413: (8.69565%)&lt;BR/&gt; 13412: (8.69565%)&gt;];
}
226--227[label="1;5pkt 5fpkt"];
226--244[label="1;1pkt 1fpkt"];
226--1425[label="1;1pkt 1fpkt"];
226--1831[label="1;5pkt 5fpkt"];
226--4393[label="1;5pkt 5fpkt"];
227--1831[label="1;5pkt 5fpkt"];
227--4393[label="1;5pkt 5fpkt"];
1831--4393[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.199.81" dst_port="9999" src_ip="99.178.248.219"/>
      <filter dst_ip="136.93.199.81" dst_port="9999" src_ip="99.147.177.61"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
246[label="7.94.61.225;s;1pkt 1fpkt", shape=diamond, color=yellow];
430[label="143.134.168.140;d;167pkt 167fpkt", shape=diamond, color=yellow];
684[label="215.105.44.9;s;1pkt 1fpkt", shape=diamond, color=yellow];
1634[label="143.134.168.140;d;167pkt 167fpkt", shape=hexagon, color=black];
1779[label="17.115.164.78;s;1pkt 1fpkt", shape=hexagon, color=black];
1835[label="7.94.61.225;s;1pkt 1fpkt", shape=hexagon, color=black];
1854[label="6.20.184.240;s;1pkt 1fpkt", shape=hexagon, color=black];
1889[label="18.65.144.92;s;3pkt 3fpkt", shape=hexagon, color=black];
1947[label="86.132.174.22;s;1pkt 1fpkt", shape=hexagon, color=black];
1983[label="196.16.72.190;s;1pkt 1fpkt", shape=hexagon, color=black];
2000[label="215.105.44.9;s;1pkt 1fpkt", shape=hexagon, color=black];
2071[label="86.90.6.106;s;1pkt 1fpkt", shape=hexagon, color=black];
2112[label="99.192.159.33;s;1pkt 1fpkt", shape=hexagon, color=black];
2441[label="16.110.52.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2691[label="99.164.206.29;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3364[label="99.6.197.96;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3543[label="18.72.164.116;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3555[label="18.9.104.118;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3628[label="16.128.108.127;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4419[label="7.94.61.225;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4525[label="6.20.184.240;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4663[label="16.110.52.8;1pkt 1fpkt", shape=invtriangle, color=brown];
4813[label="99.164.206.29;1pkt 1fpkt", shape=invtriangle, color=brown];
4914[label="17.176.22.45;1pkt 1fpkt", shape=invtriangle, color=brown];
5194[label="99.6.197.96;2pkt 2fpkt", shape=invtriangle, color=brown];
5210[label="210.88.104.99;1pkt 1fpkt", shape=invtriangle, color=brown];
5292[label="18.72.164.116;1pkt 1fpkt", shape=invtriangle, color=brown];
5338[label="16.128.108.127;1pkt 1fpkt", shape=invtriangle, color=brown];
5925[label="99.164.206.29;2pkt 2fpkt", shape=invhouse, color=bisque];
6107[label="99.6.197.96;2pkt 2fpkt", shape=invhouse, color=bisque];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 143.134.168.140:6887}[22.1557%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6887: (10.4054%)&lt;BR/&gt; 6881: (9.32432%)&lt;BR/&gt; 6890: (5.40541%)&lt;BR/&gt; 6888: (5.40541%)&lt;BR/&gt; 6884: (4.45946%)&gt;];
}
246--430[label="1;1pkt 1fpkt"];
246--1634[label="1;1pkt 1fpkt"];
246--1835[label="1;1pkt 1fpkt"];
246--4419[label="1;1pkt 1fpkt"];
430--463[label="1;1pkt 1fpkt"];
430--488[label="1;1pkt 1fpkt"];
430--497[label="1;1pkt 1fpkt"];
430--500[label="1;1pkt 1fpkt"];
430--504[label="1;1pkt 1fpkt"];
430--631[label="1;1pkt 1fpkt"];
430--684[label="1;1pkt 1fpkt"];
430--742[label="1;1pkt 1fpkt"];
430--830[label="1;2pkt 2fpkt"];
430--866[label="1;1pkt 1fpkt"];
430--963[label="1;1pkt 1fpkt"];
430--1000[label="1;1pkt 1fpkt"];
430--1019[label="1;3pkt 3fpkt"];
430--1025[label="1;2pkt 2fpkt"];
430--1091[label="1;1pkt 1fpkt"];
430--1142[label="1;1pkt 1fpkt"];
430--1144[label="1;1pkt 1fpkt"];
430--1262[label="1;2pkt 2fpkt"];
430--1323[label="1;1pkt 1fpkt"];
430--1362[label="1;1pkt 1fpkt"];
430--1369[label="1;1pkt 1fpkt"];
430--1377[label="1;1pkt 1fpkt"];
430--1503[label="1;1pkt 1fpkt"];
430--1514[label="1;1pkt 1fpkt"];
430--1518[label="1;1pkt 1fpkt"];
430--1524[label="1;1pkt 1fpkt"];
430--1598[label="1;1pkt 1fpkt"];
430--1634[label="1;167pkt 167fpkt"];
430--1779[label="1;1pkt 1fpkt"];
430--1835[label="1;1pkt 1fpkt"];
430--1854[label="1;1pkt 1fpkt"];
430--1889[label="1;3pkt 3fpkt"];
430--1947[label="1;1pkt 1fpkt"];
430--1983[label="1;1pkt 1fpkt"];
430--2000[label="1;1pkt 1fpkt"];
430--2071[label="1;1pkt 1fpkt"];
430--2112[label="1;1pkt 1fpkt"];
430--2441[label="1;1pkt 1fpkt"];
430--2691[label="1;1pkt 1fpkt"];
430--2860[label="1;1pkt 1fpkt"];
430--3364[label="1;2pkt 2fpkt"];
430--3543[label="1;1pkt 1fpkt"];
430--3555[label="1;3pkt 3fpkt"];
430--3628[label="1;1pkt 1fpkt"];
430--4419[label="1;1pkt 1fpkt"];
430--4525[label="1;1pkt 1fpkt"];
430--4663[label="1;1pkt 1fpkt"];
430--4813[label="1;1pkt 1fpkt"];
430--4914[label="1;1pkt 1fpkt"];
430--5194[label="1;2pkt 2fpkt"];
430--5210[label="1;1pkt 1fpkt"];
430--5292[label="1;1pkt 1fpkt"];
430--5338[label="1;1pkt 1fpkt"];
430--5925[label="1;2pkt 2fpkt"];
430--6107[label="1;2pkt 2fpkt"];
684--1634[label="1;1pkt 1fpkt"];
684--2000[label="1;1pkt 1fpkt"];
1634--1779[label="1;1pkt 1fpkt"];
1634--1835[label="1;1pkt 1fpkt"];
1634--1854[label="1;1pkt 1fpkt"];
1634--1889[label="1;3pkt 3fpkt"];
1634--1947[label="1;1pkt 1fpkt"];
1634--1983[label="1;1pkt 1fpkt"];
1634--2000[label="1;1pkt 1fpkt"];
1634--2071[label="1;1pkt 1fpkt"];
1634--2112[label="1;1pkt 1fpkt"];
1634--2441[label="1;1pkt 1fpkt"];
1634--2691[label="1;1pkt 1fpkt"];
1634--2860[label="1;1pkt 1fpkt"];
1634--3364[label="1;2pkt 2fpkt"];
1634--3543[label="1;1pkt 1fpkt"];
1634--3555[label="1;3pkt 3fpkt"];
1634--3628[label="1;1pkt 1fpkt"];
1634--4419[label="1;1pkt 1fpkt"];
1634--4525[label="1;1pkt 1fpkt"];
1634--4663[label="1;1pkt 1fpkt"];
1634--4813[label="1;1pkt 1fpkt"];
1634--4914[label="1;1pkt 1fpkt"];
1634--5194[label="1;2pkt 2fpkt"];
1634--5210[label="1;1pkt 1fpkt"];
1634--5292[label="1;1pkt 1fpkt"];
1634--5338[label="1;1pkt 1fpkt"];
1634--5925[label="1;2pkt 2fpkt"];
1634--6107[label="1;2pkt 2fpkt"];
1835--4419[label="1;1pkt 1fpkt"];
1854--4525[label="1;1pkt 1fpkt"];
2441--4663[label="1;1pkt 1fpkt"];
2691--4813[label="1;1pkt 1fpkt"];
2691--5925[label="1;1pkt 1fpkt"];
3364--5194[label="1;2pkt 2fpkt"];
3364--6107[label="1;2pkt 2fpkt"];
3543--5292[label="1;1pkt 1fpkt"];
3628--5338[label="1;1pkt 1fpkt"];
4813--5925[label="1;1pkt 1fpkt"];
5194--6107[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.168.140" dst_port="6887"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
560[label="208.31.231.222;d;19pkt 19fpkt", shape=diamond, color=yellow];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.149.108.226:80, 208.31.231.222:*}[63.1579%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1763: (2.63158%)&lt;BR/&gt; 1762: (2.63158%)&lt;BR/&gt; 1761: (2.63158%)&lt;BR/&gt; 1760: (2.63158%)&gt;];
}
560--633[label="0.0526316;1pkt 1fpkt"];
560--1225[label="0.157895;3pkt 3fpkt"];
560--1624[label="1;17pkt 17fpkt"];
560--1758[label="0.0526316;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.231.222" src_ip="220.149.108.226" src_port="80"/>
    </slice>
    <from sec="1068526854" usec="0"/>
    <to sec="1068527209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
575[label="4.135.48.135;s;29pkt 29fpkt", shape=diamond, color=yellow];
628[label="200.17.93.200;s;181pkt 181fpkt", shape=diamond, color=yellow];
992[label="7.210.224.47;s;72pkt 72fpkt", shape=diamond, color=yellow];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.17.93.200:80, 208.31.228.42:*}[30.4965%]&lt;BR/&gt;{*:*, 208.159.185.117:*}[29.4326%]&lt;BR/&gt;{200.17.93.200:80, 208.31.228.10:*}[26.9504%]&lt;BR/&gt;{7.210.224.47:*, *:*}[25.5319%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.234%)&lt;BR/&gt; 21: (9.57447%)&lt;BR/&gt; 20: (0.531915%)&lt;BR/&gt; 38394: (0.35461%)&lt;BR/&gt; 65396: (0.177305%)&gt;];
}
575--1839[label="1;29pkt 29fpkt"];
575--3695[label="1;29pkt 29fpkt"];
628--659[label="0.0165746;3pkt 3fpkt"];
628--1438[label="0.475138;86pkt 86fpkt"];
628--1675[label="1;103pkt 103fpkt"];
628--1839[label="0.0552486;10pkt 10fpkt"];
628--1930[label="0.00552486;1pkt 1fpkt"];
628--1979[label="0.0165746;3pkt 3fpkt"];
628--2226[label="0.475138;86pkt 86fpkt"];
992--1839[label="0.611111;44pkt 44fpkt"];
992--1972[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter src_ip="7.210.224.47"/>
      <filter dst_ip="208.159.185.117"/>
      <filter dst_ip="208.31.228.42" src_ip="200.17.93.200" src_port="80"/>
      <filter dst_ip="208.31.228.10" src_ip="200.17.93.200" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
296[label="136.93.64.37;d;9pkt 9fpkt", shape=diamond, color=yellow];
297[label="214.158.184.98;s;6pkt 6fpkt", shape=diamond, color=yellow];
1579[label="136.93.64.37;d;9pkt 9fpkt", shape=hexagon, color=black];
1840[label="214.158.184.98;s;6pkt 6fpkt", shape=hexagon, color=black];
3384[label="214.158.184.98;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4156[label="212.30.119.188;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.119.188:1863, *:*}[46.6667%]&lt;BR/&gt;{214.158.184.98:80, 136.93.64.37:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.2093%)&lt;BR/&gt; 1863: (12.7907%)&lt;BR/&gt; 1449: (5.81395%)&lt;BR/&gt; 1448: (5.81395%)&lt;BR/&gt; 1447: (5.81395%)&gt;];
}
296--297[label="1;6pkt 6fpkt"];
296--1579[label="1;9pkt 9fpkt"];
296--1840[label="1;6pkt 6fpkt"];
296--3384[label="1;6pkt 6fpkt"];
296--3650[label="0.111111;1pkt 1fpkt"];
296--4156[label="0.142857;1pkt 1fpkt"];
296--5347[label="0.111111;1pkt 1fpkt"];
296--6165[label="0.111111;1pkt 1fpkt"];
297--1579[label="1;6pkt 6fpkt"];
297--1840[label="1;6pkt 6fpkt"];
297--3384[label="1;6pkt 6fpkt"];
1579--1840[label="1;6pkt 6fpkt"];
1579--3384[label="1;6pkt 6fpkt"];
1579--3650[label="0.111111;1pkt 1fpkt"];
1579--4156[label="0.142857;1pkt 1fpkt"];
1579--5347[label="0.111111;1pkt 1fpkt"];
1579--6165[label="0.111111;1pkt 1fpkt"];
1840--3384[label="1;6pkt 6fpkt"];
4156--5605[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="212.30.119.188" src_port="1863"/>
      <filter dst_ip="136.93.64.37" src_ip="214.158.184.98" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
454[label="208.31.241.244;s;1489pkt 1489fpkt", shape=diamond, color=yellow];
1845[label="208.31.241.244;s;1320pkt 1320fpkt", shape=hexagon, color=black];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.31.241.244:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
454--1845[label="1;1320pkt 1320fpkt"];
</description>
    <slice>
      <filter src_ip="208.31.241.244"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
963[label="6.20.184.240;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.20.184.240:6882, 143.134.168.140:2532}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6882: (50%)&lt;BR/&gt; 2532: (50%)&gt;];
}
963--1634[label="1;1pkt 1fpkt"];
963--1854[label="1;1pkt 1fpkt"];
963--4525[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.168.140" dst_port="2532" src_ip="6.20.184.240" src_port="6882"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
476[label="98.6.104.11;s;2pkt 2fpkt", shape=diamond, color=yellow];
1857[label="98.6.104.11;s;1pkt 1fpkt", shape=hexagon, color=black];
2470[label="98.6.104.11;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4681[label="98.6.104.11;2pkt 2fpkt", shape=invtriangle, color=brown];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.6.104.11:80, 136.93.153.42:33469}[50%]&lt;BR/&gt;{98.6.104.11:80, 136.93.153.42:35307}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33469: (28.5714%)&lt;BR/&gt; 35307: (21.4286%)&gt;];
}
476--1856[label="1;2pkt 2fpkt"];
476--1857[label="1;1pkt 1fpkt"];
476--2470[label="1;2pkt 2fpkt"];
476--4681[label="1;2pkt 2fpkt"];
1857--2470[label="1;1pkt 1fpkt"];
1857--4681[label="1;1pkt 1fpkt"];
2470--4681[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.153.42" dst_port="35307" src_ip="98.6.104.11" src_port="80"/>
      <filter dst_ip="136.93.153.42" dst_port="33469" src_ip="98.6.104.11" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.926873,1.7526,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
635[label="208.31.196.141;d;170pkt 170fpkt", shape=diamond, color=yellow];
980[label="192.179.244.58;s;126pkt 126fpkt", shape=diamond, color=yellow];
1865[label="192.179.244.58;s;100pkt 100fpkt", shape=hexagon, color=black];
2075[label="208.31.196.141;d;166pkt 166fpkt", shape=hexagon, color=black];
4995[label="192.179.244.59;56pkt 56fpkt", shape=invtriangle, color=brown];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.179.244.58:*, 208.31.196.141:80}[60%]&lt;BR/&gt;{192.179.244.59:*, *:80}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6019%)&lt;BR/&gt; 0: (6.47249%)&lt;BR/&gt; 4963: (0.323625%)&lt;BR/&gt; 4788: (0.323625%)&lt;BR/&gt; 4771: (0.323625%)&gt;];
}
635--738[label="0.00588235;1pkt 1fpkt"];
635--780[label="0.0106383;1pkt 1fpkt"];
635--980[label="1;126pkt 126fpkt"];
635--1796[label="0.0106383;1pkt 1fpkt"];
635--1865[label="1;100pkt 100fpkt"];
635--2075[label="1;166pkt 166fpkt"];
635--2327[label="0.0529412;9pkt 9fpkt"];
635--2342[label="0.0529412;9pkt 9fpkt"];
635--2970[label="0.00934579;1pkt 1fpkt"];
635--2984[label="0.0102041;1pkt 1fpkt"];
635--2999[label="0.285714;16pkt 16fpkt"];
635--4981[label="0.00943396;1pkt 1fpkt"];
635--4988[label="0.0102041;1pkt 1fpkt"];
635--4995[label="0.285714;16pkt 16fpkt"];
980--1865[label="1;100pkt 100fpkt"];
980--2075[label="0.992063;125pkt 125fpkt"];
980--2327[label="0.0714286;9pkt 9fpkt"];
980--2342[label="0.0714286;9pkt 9fpkt"];
1865--2075[label="1;100pkt 100fpkt"];
1865--2327[label="0.09;9pkt 9fpkt"];
1865--2342[label="0.09;9pkt 9fpkt"];
2075--2327[label="0.0542169;9pkt 9fpkt"];
2075--2342[label="0.0542169;9pkt 9fpkt"];
2075--2984[label="0.0102041;1pkt 1fpkt"];
2075--2999[label="0.285714;16pkt 16fpkt"];
2075--4988[label="0.0102041;1pkt 1fpkt"];
2075--4995[label="0.285714;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="192.179.244.59"/>
      <filter dst_ip="208.31.196.141" dst_port="80" src_ip="192.179.244.58"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
982[label="208.211.91.39;s;1pkt 1fpkt", shape=diamond, color=yellow];
1868[label="208.211.91.39;s;1pkt 1fpkt", shape=hexagon, color=black];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.211.91.39:2076, 208.18.149.46:55182}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55182: (50%)&lt;BR/&gt; 2076: (50%)&gt;];
}
982--1433[label="1;1pkt 1fpkt"];
982--1868[label="1;1pkt 1fpkt"];
982--2225[label="1;1pkt 1fpkt"];
1868--2225[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.149.46" dst_port="55182" src_ip="208.211.91.39" src_port="2076"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
925[label="199.128.70.246;s;5pkt 5fpkt", shape=diamond, color=yellow];
999[label="209.169.97.223;s;2pkt 2fpkt", shape=diamond, color=yellow];
2203[label="199.128.70.246;s;5pkt 5fpkt", shape=hexagon, color=black];
2404[label="208.107.102.4;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2556[label="208.107.103.17;35pkt 35fpkt", shape=pentagon, color=darkviolet];
4567[label="199.128.70.246;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5817[label="199.128.70.246;1pkt 1fpkt", shape=invtriangle, color=brown];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.107.103.17:80, 208.31.228.65:*}[66.0377%]&lt;BR/&gt;{208.107.102.4:80, 208.31.228.65:*}[20.7547%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 26828: (3.33333%)&lt;BR/&gt; 29116: (1.66667%)&lt;BR/&gt; 26866: (1.66667%)&lt;BR/&gt; 26826: (1.66667%)&gt;];
}
925--1939[label="0.8;4pkt 4fpkt"];
925--2203[label="1;5pkt 5fpkt"];
925--4567[label="1;1pkt 1fpkt"];
925--5817[label="1;1pkt 1fpkt"];
999--1939[label="1;2pkt 2fpkt"];
999--1982[label="1;2pkt 2fpkt"];
999--4408[label="1;1pkt 1fpkt"];
999--5737[label="1;1pkt 1fpkt"];
2203--4567[label="1;1pkt 1fpkt"];
2203--5817[label="1;1pkt 1fpkt"];
2404--4650[label="1;11pkt 11fpkt"];
2404--5856[label="1;11pkt 11fpkt"];
2556--4735[label="1;35pkt 35fpkt"];
2556--5900[label="1;35pkt 35fpkt"];
4567--5817[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.65" src_ip="208.107.103.17" src_port="80"/>
      <filter dst_ip="208.31.228.65" src_ip="208.107.102.4" src_port="80"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
241[label="136.93.89.110;d;1453pkt 1453fpkt", shape=diamond, color=yellow];
1059[label="197.76.29.85;s;2pkt 2fpkt", shape=diamond, color=yellow];
1061[label="197.76.29.86;s;2pkt 2fpkt", shape=diamond, color=yellow];
1192[label="197.76.20.1;s;2pkt 2fpkt", shape=diamond, color=yellow];
1311[label="197.76.19.196;s;2pkt 2fpkt", shape=diamond, color=yellow];
1353[label="164.228.218.52;d;121pkt 121fpkt", shape=diamond, color=yellow];
1424[label="136.93.89.110;d;1029pkt 1029fpkt", shape=hexagon, color=black];
1918[label="197.76.29.84;s;2pkt 2fpkt", shape=hexagon, color=black];
1919[label="197.76.29.86;s;2pkt 2fpkt", shape=hexagon, color=black];
2023[label="197.76.29.85;s;2pkt 2fpkt", shape=hexagon, color=black];
2035[label="197.76.20.5;s;2pkt 2fpkt", shape=hexagon, color=black];
2359[label="6.24.180.0;40pkt 40fpkt", shape=pentagon, color=darkviolet];
2365[label="197.76.20.1;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2423[label="4.88.150.5;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2566[label="4.122.184.17;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2581[label="197.76.2.19;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2604[label="197.76.2.21;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2941[label="197.76.40.54;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2966[label="6.24.128.56;140pkt 140fpkt", shape=pentagon, color=darkviolet];
3231[label="212.30.118.82;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3255[label="197.76.29.85;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3265[label="197.76.29.86;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3292[label="208.105.12.88;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3655[label="212.30.119.131;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3956[label="7.219.193.164;52pkt 52fpkt", shape=pentagon, color=darkviolet];
3977[label="212.30.169.167;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4053[label="200.42.158.176;49pkt 49fpkt", shape=pentagon, color=darkviolet];
4092[label="212.30.119.180;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4164[label="212.30.119.189;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4217[label="197.76.19.196;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4234[label="212.30.119.197;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4305[label="200.42.156.207;40pkt 40fpkt", shape=pentagon, color=darkviolet];
4630[label="6.24.180.0;40pkt 40fpkt", shape=invtriangle, color=brown];
4633[label="197.76.20.1;1pkt 1fpkt", shape=invtriangle, color=brown];
4742[label="4.122.184.17;38pkt 38fpkt", shape=invtriangle, color=brown];
4751[label="197.76.2.19;2pkt 2fpkt", shape=invtriangle, color=brown];
4767[label="197.76.2.21;2pkt 2fpkt", shape=invtriangle, color=brown];
4977[label="6.24.128.56;139pkt 139fpkt", shape=invtriangle, color=brown];
5138[label="197.76.29.85;1pkt 1fpkt", shape=invtriangle, color=brown];
5349[label="212.30.119.131;6pkt 6fpkt", shape=invtriangle, color=brown];
5500[label="7.219.193.164;52pkt 52fpkt", shape=invtriangle, color=brown];
5508[label="212.30.169.167;32pkt 32fpkt", shape=invtriangle, color=brown];
5547[label="200.42.158.176;48pkt 48fpkt", shape=invtriangle, color=brown];
5648[label="212.30.119.197;8pkt 8fpkt", shape=invtriangle, color=brown];
5845[label="197.76.20.1;1pkt 1fpkt", shape=invhouse, color=bisque];
5902[label="4.122.184.17;38pkt 38fpkt", shape=invhouse, color=bisque];
6012[label="6.24.128.56;139pkt 139fpkt", shape=invhouse, color=bisque];
6080[label="197.76.29.85;2pkt 2fpkt", shape=invhouse, color=bisque];
6166[label="212.30.119.131;7pkt 7fpkt", shape=invhouse, color=bisque];
6237[label="7.219.193.164;52pkt 52fpkt", shape=invhouse, color=bisque];
6256[label="200.42.158.176;49pkt 49fpkt", shape=invhouse, color=bisque];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 136.93.89.110:0}[35.9517%]&lt;BR/&gt;{*:80, 136.93.89.110:*}[34.9446%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (32.8499%)&lt;BR/&gt; 80: (22.4013%)&lt;BR/&gt; 53: (8.28633%)&lt;BR/&gt; 7001: (2.12194%)&lt;BR/&gt; 1499: (1.6116%)&gt;];
}
241--328[label="0.0084507;3pkt 3fpkt"];
241--372[label="0.00446927;4pkt 4fpkt"];
241--432[label="0.00896861;2pkt 2fpkt"];
241--444[label="0.00460829;1pkt 1fpkt"];
241--453[label="0.00442478;1pkt 1fpkt"];
241--457[label="0.00119617;1pkt 1fpkt"];
241--485[label="0.004;1pkt 1fpkt"];
241--617[label="0.0160428;3pkt 3fpkt"];
241--633[label="0.00396825;1pkt 1fpkt"];
241--877[label="0.00444444;1pkt 1fpkt"];
241--943[label="1;2pkt 2fpkt"];
241--964[label="0.0123457;1pkt 1fpkt"];
241--987[label="0.0408163;2pkt 2fpkt"];
241--1059[label="1;2pkt 2fpkt"];
241--1060[label="1;2pkt 2fpkt"];
241--1061[label="1;2pkt 2fpkt"];
241--1191[label="1;2pkt 2fpkt"];
241--1192[label="1;2pkt 2fpkt"];
241--1211[label="0.015625;2pkt 2fpkt"];
241--1311[label="1;2pkt 2fpkt"];
241--1424[label="1;1029pkt 1029fpkt"];
241--1498[label="0.0084507;3pkt 3fpkt"];
241--1523[label="0.00309119;2pkt 2fpkt"];
241--1586[label="0.005;1pkt 1fpkt"];
241--1855[label="0.0123457;1pkt 1fpkt"];
241--1872[label="0.0408163;2pkt 2fpkt"];
241--1918[label="1;2pkt 2fpkt"];
241--1919[label="1;2pkt 2fpkt"];
241--1926[label="0.00980392;2pkt 2fpkt"];
241--2023[label="1;2pkt 2fpkt"];
241--2035[label="1;2pkt 2fpkt"];
241--2288[label="0.0112994;2pkt 2fpkt"];
241--2336[label="0.000688231;1pkt 1fpkt"];
241--2359[label="0.025;1pkt 1fpkt"];
241--2365[label="1;2pkt 2fpkt"];
241--2423[label="0.5;4pkt 4fpkt"];
241--2496[label="0.0588235;4pkt 4fpkt"];
241--2566[label="0.0263158;1pkt 1fpkt"];
241--2581[label="0.666667;2pkt 2fpkt"];
241--2604[label="1;2pkt 2fpkt"];
241--2645[label="0.0117647;1pkt 1fpkt"];
241--2788[label="0.00384615;1pkt 1fpkt"];
241--2908[label="0.0163934;1pkt 1fpkt"];
241--2941[label="1;1pkt 1fpkt"];
241--2966[label="0.0142857;2pkt 2fpkt"];
241--3028[label="0.0083682;2pkt 2fpkt"];
241--3231[label="0.2;1pkt 1fpkt"];
241--3255[label="1;2pkt 2fpkt"];
241--3265[label="1;2pkt 2fpkt"];
241--3292[label="0.5;1pkt 1fpkt"];
241--3635[label="0.00403226;1pkt 1fpkt"];
241--3655[label="0.142857;1pkt 1fpkt"];
241--3795[label="0.00373134;1pkt 1fpkt"];
241--3956[label="0.0192308;1pkt 1fpkt"];
241--3959[label="0.0408163;2pkt 2fpkt"];
241--3963[label="0.00826446;1pkt 1fpkt"];
241--3977[label="0.03125;1pkt 1fpkt"];
241--4053[label="0.0204082;1pkt 1fpkt"];
241--4092[label="0.142857;1pkt 1fpkt"];
241--4164[label="0.2;1pkt 1fpkt"];
241--4217[label="1;2pkt 2fpkt"];
241--4229[label="0.0074813;3pkt 3fpkt"];
241--4234[label="0.125;1pkt 1fpkt"];
241--4305[label="0.025;1pkt 1fpkt"];
241--4630[label="0.025;1pkt 1fpkt"];
241--4633[label="1;1pkt 1fpkt"];
241--4699[label="0.057971;4pkt 4fpkt"];
241--4742[label="0.0263158;1pkt 1fpkt"];
241--4751[label="0.5;1pkt 1fpkt"];
241--4767[label="1;2pkt 2fpkt"];
241--4939[label="0.0166667;1pkt 1fpkt"];
241--4977[label="0.0143885;2pkt 2fpkt"];
241--5011[label="0.00840336;2pkt 2fpkt"];
241--5138[label="1;1pkt 1fpkt"];
241--5349[label="0.166667;1pkt 1fpkt"];
241--5423[label="0.00373134;1pkt 1fpkt"];
241--5500[label="0.0192308;1pkt 1fpkt"];
241--5508[label="0.03125;1pkt 1fpkt"];
241--5547[label="0.0208333;1pkt 1fpkt"];
241--5648[label="0.125;1pkt 1fpkt"];
241--5845[label="1;1pkt 1fpkt"];
241--5902[label="0.0263158;1pkt 1fpkt"];
241--5995[label="0.0163934;1pkt 1fpkt"];
241--6012[label="0.0143885;2pkt 2fpkt"];
241--6080[label="1;2pkt 2fpkt"];
241--6166[label="0.142857;1pkt 1fpkt"];
241--6203[label="0.00374532;1pkt 1fpkt"];
241--6237[label="0.0192308;1pkt 1fpkt"];
241--6256[label="0.0204082;1pkt 1fpkt"];
1059--1424[label="1;2pkt 2fpkt"];
1059--2023[label="1;2pkt 2fpkt"];
1059--3255[label="1;2pkt 2fpkt"];
1059--5138[label="1;1pkt 1fpkt"];
1059--6080[label="1;2pkt 2fpkt"];
1061--1424[label="1;2pkt 2fpkt"];
1061--1919[label="1;2pkt 2fpkt"];
1061--3265[label="1;2pkt 2fpkt"];
1192--1424[label="1;2pkt 2fpkt"];
1192--2365[label="1;2pkt 2fpkt"];
1192--4633[label="1;1pkt 1fpkt"];
1192--5845[label="1;1pkt 1fpkt"];
1311--4217[label="1;2pkt 2fpkt"];
1353--1988[label="0.016129;1pkt 1fpkt"];
1353--2185[label="1;121pkt 121fpkt"];
1353--2359[label="0.025;1pkt 1fpkt"];
1353--2702[label="0.0416667;1pkt 1fpkt"];
1353--2872[label="0.025;1pkt 1fpkt"];
1353--2994[label="0.047619;1pkt 1fpkt"];
1353--3053[label="0.0263158;1pkt 1fpkt"];
1353--3067[label="0.0204082;1pkt 1fpkt"];
1353--3251[label="0.016129;1pkt 1fpkt"];
1353--3351[label="0.0322581;1pkt 1fpkt"];
1353--3481[label="0.0175439;1pkt 1fpkt"];
1353--3601[label="0.0188679;1pkt 1fpkt"];
1353--3659[label="0.05;1pkt 1fpkt"];
1353--3688[label="0.0277778;1pkt 1fpkt"];
1353--3784[label="0.02;1pkt 1fpkt"];
1353--3974[label="0.04;1pkt 1fpkt"];
1353--3977[label="0.03125;1pkt 1fpkt"];
1353--4053[label="0.0204082;1pkt 1fpkt"];
1353--4295[label="0.0140845;1pkt 1fpkt"];
1353--4305[label="0.025;1pkt 1fpkt"];
1353--4539[label="0.0151515;1pkt 1fpkt"];
1353--4611[label="0.0625;1pkt 1fpkt"];
1353--4630[label="0.025;1pkt 1fpkt"];
1353--4818[label="0.04;1pkt 1fpkt"];
1353--5023[label="0.0263158;1pkt 1fpkt"];
1353--5135[label="0.016129;1pkt 1fpkt"];
1353--5259[label="0.0178571;1pkt 1fpkt"];
1353--5323[label="0.0188679;1pkt 1fpkt"];
1353--5351[label="0.0526316;1pkt 1fpkt"];
1353--5370[label="0.0277778;1pkt 1fpkt"];
1353--5506[label="0.04;1pkt 1fpkt"];
1353--5508[label="0.03125;1pkt 1fpkt"];
1353--5547[label="0.0208333;1pkt 1fpkt"];
1353--5685[label="0.0142857;1pkt 1fpkt"];
1353--5802[label="0.0151515;1pkt 1fpkt"];
1353--6154[label="0.0188679;1pkt 1fpkt"];
1353--6256[label="0.0204082;1pkt 1fpkt"];
1424--1498[label="0.0028169;1pkt 1fpkt"];
1424--1523[label="0.00309119;2pkt 2fpkt"];
1424--1872[label="0.0408163;2pkt 2fpkt"];
1424--1918[label="1;2pkt 2fpkt"];
1424--1919[label="1;2pkt 2fpkt"];
1424--1926[label="0.00980392;2pkt 2fpkt"];
1424--2023[label="1;2pkt 2fpkt"];
1424--2035[label="1;2pkt 2fpkt"];
1424--2288[label="0.0112994;2pkt 2fpkt"];
1424--2359[label="0.025;1pkt 1fpkt"];
1424--2365[label="1;2pkt 2fpkt"];
1424--2423[label="0.375;3pkt 3fpkt"];
1424--2496[label="0.0588235;4pkt 4fpkt"];
1424--2908[label="0.0163934;1pkt 1fpkt"];
1424--2941[label="1;1pkt 1fpkt"];
1424--3028[label="0.0083682;2pkt 2fpkt"];
1424--3231[label="0.2;1pkt 1fpkt"];
1424--3255[label="1;2pkt 2fpkt"];
1424--3265[label="1;2pkt 2fpkt"];
1424--3635[label="0.00403226;1pkt 1fpkt"];
1424--3655[label="0.142857;1pkt 1fpkt"];
1424--3959[label="0.0408163;2pkt 2fpkt"];
1424--4053[label="0.0204082;1pkt 1fpkt"];
1424--4092[label="0.142857;1pkt 1fpkt"];
1424--4164[label="0.2;1pkt 1fpkt"];
1424--4229[label="0.00249377;1pkt 1fpkt"];
1424--4234[label="0.125;1pkt 1fpkt"];
1424--4305[label="0.025;1pkt 1fpkt"];
1424--4630[label="0.025;1pkt 1fpkt"];
1424--4633[label="1;1pkt 1fpkt"];
1424--4699[label="0.057971;4pkt 4fpkt"];
1424--4939[label="0.0166667;1pkt 1fpkt"];
1424--5011[label="0.00840336;2pkt 2fpkt"];
1424--5138[label="1;1pkt 1fpkt"];
1424--5349[label="0.166667;1pkt 1fpkt"];
1424--5547[label="0.0208333;1pkt 1fpkt"];
1424--5648[label="0.125;1pkt 1fpkt"];
1424--5845[label="1;1pkt 1fpkt"];
1424--5995[label="0.0163934;1pkt 1fpkt"];
1424--6080[label="1;2pkt 2fpkt"];
1424--6166[label="0.142857;1pkt 1fpkt"];
1424--6256[label="0.0204082;1pkt 1fpkt"];
1919--3265[label="1;2pkt 2fpkt"];
2023--3255[label="1;2pkt 2fpkt"];
2023--5138[label="1;1pkt 1fpkt"];
2023--6080[label="1;2pkt 2fpkt"];
2359--4630[label="1;40pkt 40fpkt"];
2365--4633[label="1;1pkt 1fpkt"];
2365--5845[label="1;1pkt 1fpkt"];
2566--4742[label="1;38pkt 38fpkt"];
2566--5902[label="1;38pkt 38fpkt"];
2581--4751[label="1;2pkt 2fpkt"];
2604--4767[label="1;2pkt 2fpkt"];
2966--4977[label="1;139pkt 139fpkt"];
2966--6012[label="1;139pkt 139fpkt"];
3255--5138[label="1;1pkt 1fpkt"];
3255--6080[label="1;2pkt 2fpkt"];
3655--5349[label="1;6pkt 6fpkt"];
3655--6166[label="1;7pkt 7fpkt"];
3956--5500[label="1;52pkt 52fpkt"];
3956--6237[label="1;52pkt 52fpkt"];
3977--5508[label="1;32pkt 32fpkt"];
4053--5547[label="1;48pkt 48fpkt"];
4053--6256[label="1;49pkt 49fpkt"];
4234--5648[label="1;8pkt 8fpkt"];
4633--5845[label="1;1pkt 1fpkt"];
4742--5902[label="1;38pkt 38fpkt"];
4977--6012[label="1;139pkt 139fpkt"];
5138--6080[label="1;1pkt 1fpkt"];
5349--6166[label="1;6pkt 6fpkt"];
5500--6237[label="1;52pkt 52fpkt"];
5547--6256[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.89.110" src_port="80"/>
      <filter dst_ip="136.93.89.110"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
448[label="136.93.203.188;d;225pkt 225fpkt", shape=diamond, color=yellow];
547[label="197.18.159.6;s;173pkt 173fpkt", shape=diamond, color=yellow];
649[label="208.131.129.118;s;111pkt 111fpkt", shape=diamond, color=yellow];
1549[label="197.18.159.6;s;173pkt 173fpkt", shape=hexagon, color=black];
1652[label="136.93.203.188;d;225pkt 225fpkt", shape=hexagon, color=black];
1875[label="208.131.129.118;s;108pkt 108fpkt", shape=hexagon, color=black];
2431[label="197.18.159.6;173pkt 173fpkt", shape=pentagon, color=darkviolet];
3557[label="208.131.129.118;111pkt 111fpkt", shape=pentagon, color=darkviolet];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.18.159.6:80, 136.93.203.188:*}[32.8729%]&lt;BR/&gt;{208.131.129.118:80, *:*}[30.663%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4611%)&lt;BR/&gt; 0: (0.769823%)&lt;BR/&gt; 2626: (0.192456%)&lt;BR/&gt; 2625: (0.192456%)&lt;BR/&gt; 2624: (0.192456%)&gt;];
}
448--467[label="0.00444444;1pkt 1fpkt"];
448--547[label="0.687861;119pkt 119fpkt"];
448--649[label="0.252252;28pkt 28fpkt"];
448--872[label="0.00636943;1pkt 1fpkt"];
448--877[label="0.00444444;1pkt 1fpkt"];
448--1549[label="0.687861;119pkt 119fpkt"];
448--1652[label="1;225pkt 225fpkt"];
448--1875[label="0.259259;28pkt 28fpkt"];
448--1940[label="0.00444444;1pkt 1fpkt"];
448--1986[label="0.00666667;1pkt 1fpkt"];
448--2431[label="0.687861;119pkt 119fpkt"];
448--3314[label="0.416667;5pkt 5fpkt"];
448--3557[label="0.252252;28pkt 28fpkt"];
448--3635[label="0.00444444;1pkt 1fpkt"];
448--3650[label="0.00444444;1pkt 1fpkt"];
448--4087[label="0.418605;18pkt 18fpkt"];
448--4133[label="0.00444444;1pkt 1fpkt"];
448--5347[label="0.00444444;1pkt 1fpkt"];
448--5569[label="0.404762;17pkt 17fpkt"];
448--6165[label="0.00444444;1pkt 1fpkt"];
448--6268[label="0.418605;18pkt 18fpkt"];
547--1549[label="1;173pkt 173fpkt"];
547--1652[label="0.687861;119pkt 119fpkt"];
547--2431[label="1;173pkt 173fpkt"];
649--1652[label="0.252252;28pkt 28fpkt"];
649--1875[label="1;108pkt 108fpkt"];
649--1939[label="0.027027;3pkt 3fpkt"];
649--2164[label="0.0540541;6pkt 6fpkt"];
649--2166[label="0.404494;36pkt 36fpkt"];
649--3557[label="1;111pkt 111fpkt"];
1549--1652[label="0.687861;119pkt 119fpkt"];
1549--2431[label="1;173pkt 173fpkt"];
1652--1875[label="0.259259;28pkt 28fpkt"];
1652--1940[label="0.00444444;1pkt 1fpkt"];
1652--1986[label="0.00666667;1pkt 1fpkt"];
1652--2431[label="0.687861;119pkt 119fpkt"];
1652--3314[label="0.416667;5pkt 5fpkt"];
1652--3557[label="0.252252;28pkt 28fpkt"];
1652--3635[label="0.00444444;1pkt 1fpkt"];
1652--3650[label="0.00444444;1pkt 1fpkt"];
1652--4087[label="0.418605;18pkt 18fpkt"];
1652--4133[label="0.00444444;1pkt 1fpkt"];
1652--5347[label="0.00444444;1pkt 1fpkt"];
1652--5569[label="0.404762;17pkt 17fpkt"];
1652--6165[label="0.00444444;1pkt 1fpkt"];
1652--6268[label="0.418605;18pkt 18fpkt"];
1875--1939[label="0.0277778;3pkt 3fpkt"];
1875--2164[label="0.037037;4pkt 4fpkt"];
1875--2166[label="0.404494;36pkt 36fpkt"];
1875--3557[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter src_ip="208.131.129.118" src_port="80"/>
      <filter dst_ip="136.93.203.188" src_ip="197.18.159.6" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
655[label="198.125.203.196;s;1pkt 1fpkt", shape=diamond, color=yellow];
1877[label="198.125.203.196;s;1pkt 1fpkt", shape=hexagon, color=black];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.125.203.196:80, 208.31.231.177:54890}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54890: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
655--1877[label="1;1pkt 1fpkt"];
655--2164[label="1;1pkt 1fpkt"];
1877--2164[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.231.177" dst_port="54890" src_ip="198.125.203.196" src_port="80"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.926873,1.7526,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
511[label="212.118.37.82;s;268pkt 268fpkt", shape=diamond, color=yellow];
765[label="7.210.224.0;s;194pkt 194fpkt", shape=diamond, color=yellow];
1037[label="208.18.27.33;d;102pkt 102fpkt", shape=diamond, color=yellow];
1879[label="136.93.202.36;d;81pkt 81fpkt", shape=hexagon, color=black];
2005[label="208.18.27.33;d;82pkt 82fpkt", shape=hexagon, color=black];
4632[label="7.210.224.0;202pkt 202fpkt", shape=invtriangle, color=brown];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.118.37.82:80, *:*}[44.2244%]&lt;BR/&gt;{7.210.224.0:80, *:*}[33.4983%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.0484%)&lt;BR/&gt; 0: (7.3197%)&lt;BR/&gt; 135: (0.861141%)&lt;BR/&gt; 1516: (0.269107%)&lt;BR/&gt; 1515: (0.269107%)&gt;];
}
511--516[label="0.0335821;9pkt 9fpkt"];
511--540[label="0.0142857;1pkt 1fpkt"];
511--551[label="0.00847458;1pkt 1fpkt"];
511--644[label="0.0153846;3pkt 3fpkt"];
511--659[label="0.00746269;2pkt 2fpkt"];
511--756[label="0.00746269;2pkt 2fpkt"];
511--764[label="0.076087;7pkt 7fpkt"];
511--853[label="0.0425532;2pkt 2fpkt"];
511--1031[label="0.0689655;4pkt 4fpkt"];
511--1037[label="0.0686275;7pkt 7fpkt"];
511--1071[label="0.0235294;2pkt 2fpkt"];
511--1266[label="0.0465116;2pkt 2fpkt"];
511--1284[label="0.0520833;5pkt 5fpkt"];
511--1295[label="0.0338983;2pkt 2fpkt"];
511--1302[label="0.2;8pkt 8fpkt"];
511--1400[label="0.208955;56pkt 56fpkt"];
511--1427[label="0.0522388;14pkt 14fpkt"];
511--1430[label="0.0149254;4pkt 4fpkt"];
511--1433[label="0.0149254;4pkt 4fpkt"];
511--1438[label="0.011194;3pkt 3fpkt"];
511--1463[label="0.00373134;1pkt 1fpkt"];
511--1493[label="0.00578035;1pkt 1fpkt"];
511--1522[label="0.00373134;1pkt 1fpkt"];
511--1530[label="0.0229885;2pkt 2fpkt"];
511--1546[label="0.0142857;1pkt 1fpkt"];
511--1570[label="0.0149254;4pkt 4fpkt"];
511--1764[label="1;124pkt 124fpkt"];
511--1839[label="0.011194;3pkt 3fpkt"];
511--1879[label="0.0864198;7pkt 7fpkt"];
511--1922[label="0.0235294;2pkt 2fpkt"];
511--1930[label="0.00746269;2pkt 2fpkt"];
511--1939[label="0.00746269;2pkt 2fpkt"];
511--1966[label="0.0168539;3pkt 3fpkt"];
511--1979[label="0.00746269;2pkt 2fpkt"];
511--2002[label="0.00909091;1pkt 1fpkt"];
511--2005[label="0.0853659;7pkt 7fpkt"];
511--2129[label="0.0689655;4pkt 4fpkt"];
511--2163[label="0.011194;3pkt 3fpkt"];
511--2193[label="0.0465116;2pkt 2fpkt"];
511--2214[label="0.208955;56pkt 56fpkt"];
511--2225[label="0.0149254;4pkt 4fpkt"];
511--2226[label="0.011194;3pkt 3fpkt"];
511--2245[label="0.0447761;12pkt 12fpkt"];
511--2265[label="0.011583;3pkt 3fpkt"];
511--2304[label="0.00373134;1pkt 1fpkt"];
511--2322[label="0.208955;56pkt 56fpkt"];
765--1037[label="0.284314;29pkt 29fpkt"];
765--1166[label="0.714286;30pkt 30fpkt"];
765--1284[label="0.302083;29pkt 29fpkt"];
765--1400[label="0.0927835;18pkt 18fpkt"];
765--1427[label="0.0309278;6pkt 6fpkt"];
765--1430[label="0.0618557;12pkt 12fpkt"];
765--1433[label="0.113402;22pkt 22fpkt"];
765--1691[label="1;169pkt 169fpkt"];
765--1879[label="0.0617284;5pkt 5fpkt"];
765--1939[label="0.0103093;2pkt 2fpkt"];
765--2005[label="0.353659;29pkt 29fpkt"];
765--2214[label="0.0927835;18pkt 18fpkt"];
765--2225[label="0.113402;22pkt 22fpkt"];
765--2245[label="0.0309278;6pkt 6fpkt"];
765--2265[label="0.0618557;12pkt 12fpkt"];
765--2322[label="0.0927835;18pkt 18fpkt"];
765--2363[label="0.994845;193pkt 193fpkt"];
765--4632[label="0.994845;193pkt 193fpkt"];
1037--1536[label="0.0294118;3pkt 3fpkt"];
1037--1691[label="0.284314;29pkt 29fpkt"];
1037--1764[label="0.0490196;5pkt 5fpkt"];
1037--2005[label="1;82pkt 82fpkt"];
1037--2272[label="0.03125;3pkt 3fpkt"];
1037--2327[label="0.00980392;1pkt 1fpkt"];
1037--2342[label="0.00980392;1pkt 1fpkt"];
1037--2363[label="0.284314;29pkt 29fpkt"];
1037--3708[label="0.00980392;1pkt 1fpkt"];
1037--4358[label="0.00980392;1pkt 1fpkt"];
1037--4392[label="0.00980392;1pkt 1fpkt"];
1037--4573[label="0.0178571;1pkt 1fpkt"];
1037--4632[label="0.284314;29pkt 29fpkt"];
1037--5713[label="0.00980392;1pkt 1fpkt"];
1037--5732[label="0.00980392;1pkt 1fpkt"];
1037--5820[label="0.0181818;1pkt 1fpkt"];
1037--6332[label="0.00980392;1pkt 1fpkt"];
1037--6373[label="0.0181818;1pkt 1fpkt"];
1879--1985[label="0.0493827;4pkt 4fpkt"];
1879--2126[label="0.0123457;1pkt 1fpkt"];
1879--2246[label="0.015873;1pkt 1fpkt"];
1879--2272[label="0.0617284;5pkt 5fpkt"];
1879--2363[label="0.0617284;5pkt 5fpkt"];
1879--2400[label="0.0493827;4pkt 4fpkt"];
1879--2411[label="0.0493827;4pkt 4fpkt"];
1879--2569[label="0.0493827;4pkt 4fpkt"];
1879--3086[label="0.125;1pkt 1fpkt"];
1879--3381[label="0.0123457;1pkt 1fpkt"];
1879--3650[label="0.0493827;4pkt 4fpkt"];
1879--3668[label="0.0123457;1pkt 1fpkt"];
1879--3713[label="0.0123457;1pkt 1fpkt"];
1879--4007[label="0.0444444;2pkt 2fpkt"];
1879--4563[label="0.235294;4pkt 4fpkt"];
1879--4575[label="0.0123457;1pkt 1fpkt"];
1879--4632[label="0.0617284;5pkt 5fpkt"];
1879--4649[label="0.0493827;4pkt 4fpkt"];
1879--4653[label="0.0493827;4pkt 4fpkt"];
1879--5040[label="0.125;1pkt 1fpkt"];
1879--5206[label="0.0123457;1pkt 1fpkt"];
1879--5347[label="0.0493827;4pkt 4fpkt"];
1879--5522[label="0.0444444;2pkt 2fpkt"];
1879--5857[label="0.0493827;4pkt 4fpkt"];
1879--6111[label="0.0123457;1pkt 1fpkt"];
1879--6165[label="0.0493827;4pkt 4fpkt"];
2005--2272[label="0.0365854;3pkt 3fpkt"];
2005--2327[label="0.0121951;1pkt 1fpkt"];
2005--2342[label="0.0121951;1pkt 1fpkt"];
2005--2363[label="0.353659;29pkt 29fpkt"];
2005--3708[label="0.0121951;1pkt 1fpkt"];
2005--4358[label="0.0121951;1pkt 1fpkt"];
2005--4632[label="0.353659;29pkt 29fpkt"];
2005--5713[label="0.0121951;1pkt 1fpkt"];
2005--6332[label="0.0121951;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="212.118.37.82" src_port="80"/>
      <filter src_ip="7.210.224.0" src_port="80"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.077,1.75861,999,0 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
741[label="161.29.66.133;d;201pkt 201fpkt", shape=diamond, color=yellow];
1001[label="200.193.217.86;s;152pkt 152fpkt", shape=diamond, color=yellow];
1671[label="161.29.66.133;d;158pkt 158fpkt", shape=hexagon, color=black];
1881[label="200.193.217.86;s;86pkt 86fpkt", shape=hexagon, color=black];
5152[label="200.193.217.86;168pkt 168fpkt", shape=invtriangle, color=brown];
6087[label="200.193.217.86;167pkt 167fpkt", shape=invhouse, color=bisque];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.193.217.86:5050, 161.29.66.133:*}[72.6457%]&lt;BR/&gt;{200.193.214.145:5050, 161.29.66.133:*}[24.2152%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (49.3026%)&lt;BR/&gt; 4130: (0.321888%)&lt;BR/&gt; 4129: (0.321888%)&lt;BR/&gt; 4128: (0.321888%)&lt;BR/&gt; 4127: (0.321888%)&gt;];
}
741--1001[label="0.960526;146pkt 146fpkt"];
741--1428[label="0.00497512;1pkt 1fpkt"];
741--1671[label="1;158pkt 158fpkt"];
741--1881[label="0.930233;80pkt 80fpkt"];
741--2223[label="0.00497512;1pkt 1fpkt"];
741--2530[label="0.00497512;1pkt 1fpkt"];
741--3791[label="0.964286;54pkt 54fpkt"];
741--4717[label="0.00497512;1pkt 1fpkt"];
741--5152[label="0.869048;146pkt 146fpkt"];
741--5892[label="0.00497512;1pkt 1fpkt"];
741--6087[label="0.874251;146pkt 146fpkt"];
1001--1650[label="0.0185185;1pkt 1fpkt"];
1001--1671[label="0.684211;104pkt 104fpkt"];
1001--1881[label="1;86pkt 86fpkt"];
1001--2044[label="0.00657895;1pkt 1fpkt"];
1001--5152[label="1;152pkt 152fpkt"];
1001--6087[label="0.993421;151pkt 151fpkt"];
1671--1881[label="0.930233;80pkt 80fpkt"];
1671--3791[label="0.964286;54pkt 54fpkt"];
1671--5152[label="0.658228;104pkt 104fpkt"];
1671--6087[label="0.658228;104pkt 104fpkt"];
1881--2044[label="0.0116279;1pkt 1fpkt"];
1881--5152[label="1;86pkt 86fpkt"];
1881--6087[label="0.988372;85pkt 85fpkt"];
5152--6087[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.66.133" src_ip="200.193.217.86" src_port="5050"/>
      <filter dst_ip="161.29.66.133" src_ip="200.193.214.145" src_port="5050"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
994[label="212.30.114.58;s;5pkt 5fpkt", shape=diamond, color=yellow];
1014[label="143.38.6.78;d;3pkt 3fpkt", shape=diamond, color=yellow];
1289[label="214.82.101.121;s;1pkt 1fpkt", shape=diamond, color=yellow];
1876[label="212.30.114.58;s;5pkt 5fpkt", shape=hexagon, color=black];
1886[label="143.38.6.78;d;3pkt 3fpkt", shape=hexagon, color=black];
2989[label="212.30.114.58;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.114.58:80, 208.31.228.85:*}[28.5714%]&lt;BR/&gt;{*:80, 143.38.6.78:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.1818%)&lt;BR/&gt; 1125: (11.3636%)&lt;BR/&gt; 4683: (6.81818%)&lt;BR/&gt; 2308: (6.81818%)&lt;BR/&gt; 2234: (6.81818%)&gt;];
}
994--1014[label="0.333333;1pkt 1fpkt"];
994--1876[label="1;5pkt 5fpkt"];
994--1886[label="0.333333;1pkt 1fpkt"];
994--2044[label="0.4;2pkt 2fpkt"];
994--2989[label="1;5pkt 5fpkt"];
1014--1289[label="1;1pkt 1fpkt"];
1014--1876[label="0.333333;1pkt 1fpkt"];
1014--1886[label="1;3pkt 3fpkt"];
1014--2989[label="0.333333;1pkt 1fpkt"];
1289--1886[label="1;1pkt 1fpkt"];
1876--1886[label="0.333333;1pkt 1fpkt"];
1876--2044[label="0.4;2pkt 2fpkt"];
1876--2989[label="1;5pkt 5fpkt"];
1886--2989[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.6.78" src_port="80"/>
      <filter dst_ip="208.31.228.85" src_ip="212.30.114.58" src_port="80"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
1019[label="18.65.144.92;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.65.144.92:6881, 143.134.168.140:1479}[33.3333%]&lt;BR/&gt;{18.65.144.92:6883, 143.134.168.140:3438}[33.3333%]&lt;BR/&gt;{18.65.144.92:6884, 143.134.168.140:3059}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6884: (16.6667%)&lt;BR/&gt; 6883: (16.6667%)&lt;BR/&gt; 6881: (16.6667%)&lt;BR/&gt; 3438: (16.6667%)&lt;BR/&gt; 3059: (16.6667%)&gt;];
}
1019--1634[label="1;3pkt 3fpkt"];
1019--1889[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.168.140" dst_port="3059" src_ip="18.65.144.92" src_port="6884"/>
      <filter dst_ip="143.134.168.140" dst_port="3438" src_ip="18.65.144.92" src_port="6883"/>
      <filter dst_ip="143.134.168.140" dst_port="1479" src_ip="18.65.144.92" src_port="6881"/>
    </slice>
    <from sec="1068526811" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
935[label="98.127.150.186;s;3pkt 3fpkt", shape=diamond, color=yellow];
1915[label="98.127.150.186;s;3pkt 3fpkt", shape=hexagon, color=black];
4138[label="98.127.150.186;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5593[label="98.127.150.186;2pkt 2fpkt", shape=invtriangle, color=brown];
6278[label="98.127.150.186;3pkt 3fpkt", shape=invhouse, color=bisque];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.127.150.186:6346, 208.31.196.150:40582}[33.3333%]&lt;BR/&gt;{98.127.150.186:6346, 208.31.196.150:41645}[33.3333%]&lt;BR/&gt;{98.127.150.186:6346, 208.31.196.150:42710}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (50%)&lt;BR/&gt; 42710: (17.8571%)&lt;BR/&gt; 41645: (17.8571%)&lt;BR/&gt; 40582: (14.2857%)&gt;];
}
935--1915[label="1;3pkt 3fpkt"];
935--4138[label="1;3pkt 3fpkt"];
935--5593[label="1;2pkt 2fpkt"];
935--6278[label="1;3pkt 3fpkt"];
1915--4138[label="1;3pkt 3fpkt"];
1915--5593[label="1;2pkt 2fpkt"];
1915--6278[label="1;3pkt 3fpkt"];
4138--5593[label="1;2pkt 2fpkt"];
4138--6278[label="1;3pkt 3fpkt"];
5593--6278[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.196.150" dst_port="42710" src_ip="98.127.150.186" src_port="6346"/>
      <filter dst_ip="208.31.196.150" dst_port="41645" src_ip="98.127.150.186" src_port="6346"/>
      <filter dst_ip="208.31.196.150" dst_port="40582" src_ip="98.127.150.186" src_port="6346"/>
    </slice>
    <from sec="1068527142" usec="0"/>
    <to sec="1068527279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
1060[label="197.76.29.84;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.76.29.84:0, 136.93.89.110:0}[50%]&lt;BR/&gt;{197.76.29.84:80, 136.93.89.110:2776}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 2776: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
1060--1424[label="1;2pkt 2fpkt"];
1060--1918[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.89.110" dst_port="2776" src_ip="197.76.29.84" src_port="80"/>
      <filter dst_ip="136.93.89.110" src_ip="197.76.29.84"/>
    </slice>
    <from sec="1068527184" usec="0"/>
    <to sec="1068527318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,011,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
1079[label="208.214.24.151;s;691pkt 691fpkt", shape=diamond, color=yellow];
1925[label="208.214.24.151;s;691pkt 691fpkt", shape=hexagon, color=black];
3847[label="208.214.24.151;742pkt 742fpkt", shape=pentagon, color=darkviolet];
5448[label="208.214.24.151;741pkt 741fpkt", shape=invtriangle, color=brown];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.214.24.151:110, *:*}[34.5895%]&lt;BR/&gt;{208.214.24.151:5555, *:*}[33.109%]&lt;BR/&gt;{208.214.24.151:5631, *:*}[32.3015%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (17.4171%)&lt;BR/&gt; 5555: (16.4747%)&lt;BR/&gt; 5631: (16.1082%)&lt;BR/&gt; 16872: (0.34904%)&lt;BR/&gt; 63006: (0.209424%)&gt;];
}
1079--1925[label="1;691pkt 691fpkt"];
1079--3847[label="0.998553;690pkt 690fpkt"];
1079--5448[label="0.997106;689pkt 689fpkt"];
1925--3847[label="0.998553;690pkt 690fpkt"];
1925--5448[label="0.997106;689pkt 689fpkt"];
3847--5448[label="1;741pkt 741fpkt"];
</description>
    <slice>
      <filter src_ip="208.214.24.151" src_port="110"/>
      <filter src_ip="208.214.24.151" src_port="5555"/>
      <filter src_ip="208.214.24.151" src_port="5631"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
815[label="5.21.165.215;s;878pkt 878fpkt", shape=diamond, color=yellow];
1934[label="5.21.165.215;s;808pkt 808fpkt", shape=hexagon, color=black];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.21.165.215:0, *:0}[96.1276%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.0854%)&lt;BR/&gt; 80: (1.9573%)&lt;BR/&gt; 63093: (0.059312%)&lt;BR/&gt; 57841: (0.059312%)&lt;BR/&gt; 57626: (0.059312%)&gt;];
}
815--900[label="0.0120482;2pkt 2fpkt"];
815--1118[label="0.0106383;1pkt 1fpkt"];
815--1934[label="1;808pkt 808fpkt"];
815--2327[label="0.00455581;4pkt 4fpkt"];
815--2342[label="0.00455581;4pkt 4fpkt"];
1934--2327[label="0.0049505;4pkt 4fpkt"];
1934--2342[label="0.0049505;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="5.21.165.215"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
487[label="136.93.122.25;d;1178pkt 1178fpkt", shape=diamond, color=yellow];
3403[label="219.179.120.100;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3810[label="215.20.145.147;22pkt 22fpkt", shape=pentagon, color=darkviolet];
5219[label="219.179.120.100;3pkt 3fpkt", shape=invtriangle, color=brown];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.93.122.25:53}[64.7794%]&lt;BR/&gt;{*:53, 136.93.122.25:1039}[30.4746%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.1609%)&lt;BR/&gt; 1039: (15.1741%)&lt;BR/&gt; 0: (3.73134%)&lt;BR/&gt; 32768: (0.953566%)&lt;BR/&gt; 1024: (0.912106%)&gt;];
}
487--600[label="0.166667;1pkt 1fpkt"];
487--642[label="0.0123457;1pkt 1fpkt"];
487--809[label="0.000848896;1pkt 1fpkt"];
487--811[label="0.333333;1pkt 1fpkt"];
487--924[label="0.09375;3pkt 3fpkt"];
487--1002[label="0.0133333;1pkt 1fpkt"];
487--1062[label="0.142857;1pkt 1fpkt"];
487--1063[label="0.111111;1pkt 1fpkt"];
487--1137[label="0.016129;1pkt 1fpkt"];
487--1164[label="0.040404;4pkt 4fpkt"];
487--1223[label="0.0555556;1pkt 1fpkt"];
487--1226[label="0.0555556;1pkt 1fpkt"];
487--1229[label="0.0206186;2pkt 2fpkt"];
487--1238[label="0.0178571;1pkt 1fpkt"];
487--1250[label="0.0470588;4pkt 4fpkt"];
487--1279[label="0.0119048;1pkt 1fpkt"];
487--1329[label="0.0379747;3pkt 3fpkt"];
487--1332[label="0.0188679;1pkt 1fpkt"];
487--1341[label="0.0166667;1pkt 1fpkt"];
487--1351[label="0.0119048;1pkt 1fpkt"];
487--1390[label="0.0166667;1pkt 1fpkt"];
487--1391[label="0.0238095;2pkt 2fpkt"];
487--1399[label="0.0948905;26pkt 26fpkt"];
487--1587[label="0.166667;1pkt 1fpkt"];
487--1910[label="0.000848896;1pkt 1fpkt"];
487--1920[label="0.111111;1pkt 1fpkt"];
487--1988[label="0.016129;1pkt 1fpkt"];
487--2024[label="0.142857;1pkt 1fpkt"];
487--2144[label="0.09375;3pkt 3fpkt"];
487--2198[label="0.0119048;1pkt 1fpkt"];
487--2326[label="0.0254669;30pkt 30fpkt"];
487--2336[label="0.0560272;66pkt 66fpkt"];
487--2341[label="0.0254669;30pkt 30fpkt"];
487--2359[label="0.025;1pkt 1fpkt"];
487--2454[label="0.0344828;1pkt 1fpkt"];
487--2478[label="0.0175439;1pkt 1fpkt"];
487--2484[label="0.333333;1pkt 1fpkt"];
487--2494[label="0.0298507;2pkt 2fpkt"];
487--2536[label="0.0416667;3pkt 3fpkt"];
487--2566[label="0.0263158;1pkt 1fpkt"];
487--2580[label="0.0298507;2pkt 2fpkt"];
487--2702[label="0.0416667;1pkt 1fpkt"];
487--2726[label="0.0377358;4pkt 4fpkt"];
487--2756[label="0.0235294;2pkt 2fpkt"];
487--2764[label="0.0666667;1pkt 1fpkt"];
487--2785[label="0.0212766;1pkt 1fpkt"];
487--2834[label="0.0945455;26pkt 26fpkt"];
487--2872[label="0.025;1pkt 1fpkt"];
487--2889[label="0.0114943;1pkt 1fpkt"];
487--2900[label="0.0645161;4pkt 4fpkt"];
487--2929[label="0.00917431;1pkt 1fpkt"];
487--2969[label="0.0434783;1pkt 1fpkt"];
487--2994[label="0.047619;1pkt 1fpkt"];
487--3018[label="0.166667;1pkt 1fpkt"];
487--3053[label="0.0263158;1pkt 1fpkt"];
487--3057[label="0.0206186;2pkt 2fpkt"];
487--3067[label="0.0204082;1pkt 1fpkt"];
487--3251[label="0.016129;1pkt 1fpkt"];
487--3351[label="0.0322581;1pkt 1fpkt"];
487--3403[label="0.333333;1pkt 1fpkt"];
487--3430[label="0.142857;1pkt 1fpkt"];
487--3459[label="0.0294118;1pkt 1fpkt"];
487--3481[label="0.0175439;1pkt 1fpkt"];
487--3551[label="0.0285714;1pkt 1fpkt"];
487--3601[label="0.0188679;1pkt 1fpkt"];
487--3659[label="0.05;1pkt 1fpkt"];
487--3688[label="0.0277778;1pkt 1fpkt"];
487--3689[label="0.0333333;3pkt 3fpkt"];
487--3703[label="0.0222222;2pkt 2fpkt"];
487--3714[label="0.02;1pkt 1fpkt"];
487--3718[label="0.000848896;1pkt 1fpkt"];
487--3784[label="0.02;1pkt 1fpkt"];
487--3802[label="0.0163934;1pkt 1fpkt"];
487--3804[label="0.294118;10pkt 10fpkt"];
487--3810[label="0.0454545;1pkt 1fpkt"];
487--3825[label="0.0508475;3pkt 3fpkt"];
487--3901[label="0.142857;2pkt 2fpkt"];
487--3974[label="0.04;1pkt 1fpkt"];
487--3985[label="0.0470588;4pkt 4fpkt"];
487--4015[label="0.142857;1pkt 1fpkt"];
487--4028[label="0.0714286;1pkt 1fpkt"];
487--4053[label="0.0204082;1pkt 1fpkt"];
487--4089[label="0.030303;1pkt 1fpkt"];
487--4103[label="0.0967742;3pkt 3fpkt"];
487--4241[label="0.0322581;1pkt 1fpkt"];
487--4248[label="0.0833333;2pkt 2fpkt"];
487--4255[label="0.00238663;1pkt 1fpkt"];
487--4259[label="0.0588235;1pkt 1fpkt"];
487--4264[label="0.08;2pkt 2fpkt"];
487--4281[label="0.05;1pkt 1fpkt"];
487--4295[label="0.0140845;1pkt 1fpkt"];
487--4305[label="0.025;1pkt 1fpkt"];
487--4343[label="0.0125;1pkt 1fpkt"];
487--4349[label="0.166667;2pkt 2fpkt"];
487--4401[label="0.05;1pkt 1fpkt"];
487--4435[label="0.047619;1pkt 1fpkt"];
487--4528[label="0.037037;1pkt 1fpkt"];
487--4539[label="0.0151515;1pkt 1fpkt"];
487--4574[label="0.125;1pkt 1fpkt"];
487--4611[label="0.0625;1pkt 1fpkt"];
487--4630[label="0.025;1pkt 1fpkt"];
487--4687[label="0.0175439;1pkt 1fpkt"];
487--4690[label="0.25;1pkt 1fpkt"];
487--4698[label="0.0294118;2pkt 2fpkt"];
487--4722[label="0.0416667;3pkt 3fpkt"];
487--4742[label="0.0263158;1pkt 1fpkt"];
487--4750[label="0.030303;2pkt 2fpkt"];
487--4818[label="0.04;1pkt 1fpkt"];
487--4865[label="0.0217391;1pkt 1fpkt"];
487--4935[label="0.0655738;4pkt 4fpkt"];
487--4980[label="0.0454545;1pkt 1fpkt"];
487--5023[label="0.0263158;1pkt 1fpkt"];
487--5135[label="0.016129;1pkt 1fpkt"];
487--5219[label="0.333333;1pkt 1fpkt"];
487--5247[label="0.030303;1pkt 1fpkt"];
487--5259[label="0.0178571;1pkt 1fpkt"];
487--5298[label="0.0294118;1pkt 1fpkt"];
487--5323[label="0.0188679;1pkt 1fpkt"];
487--5351[label="0.0526316;1pkt 1fpkt"];
487--5356[label="0.0136986;1pkt 1fpkt"];
487--5370[label="0.0277778;1pkt 1fpkt"];
487--5374[label="0.0222222;2pkt 2fpkt"];
487--5383[label="0.000848896;1pkt 1fpkt"];
487--5426[label="0.0163934;1pkt 1fpkt"];
487--5427[label="0.285714;10pkt 10fpkt"];
487--5435[label="0.0517241;3pkt 3fpkt"];
487--5506[label="0.04;1pkt 1fpkt"];
487--5514[label="0.047619;4pkt 4fpkt"];
487--5533[label="0.0714286;1pkt 1fpkt"];
487--5547[label="0.0208333;1pkt 1fpkt"];
487--5666[label="0.08;2pkt 2fpkt"];
487--5685[label="0.0142857;1pkt 1fpkt"];
487--5795[label="0.0384615;1pkt 1fpkt"];
487--5802[label="0.0151515;1pkt 1fpkt"];
487--5821[label="0.125;1pkt 1fpkt"];
487--5873[label="0.0175439;1pkt 1fpkt"];
487--5876[label="0.25;1pkt 1fpkt"];
487--5893[label="0.0416667;3pkt 3fpkt"];
487--5902[label="0.0263158;1pkt 1fpkt"];
487--5992[label="0.0645161;4pkt 4fpkt"];
487--6013[label="0.0434783;1pkt 1fpkt"];
487--6154[label="0.0188679;1pkt 1fpkt"];
487--6169[label="0.0135135;1pkt 1fpkt"];
487--6244[label="0.0470588;4pkt 4fpkt"];
487--6256[label="0.0204082;1pkt 1fpkt"];
487--6308[label="0.08;2pkt 2fpkt"];
3403--5219[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.122.25" dst_port="53"/>
      <filter dst_ip="136.93.122.25" dst_port="1039" src_port="53"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
1088[label="208.244.130.99;s;20pkt 20fpkt", shape=diamond, color=yellow];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.244.130.99:6667, 161.29.40.41:*}[35%]&lt;BR/&gt;{208.244.130.99:*, 161.29.17.120:113}[20%]&lt;BR/&gt;{208.244.130.99:*, 161.29.0.77:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (25%)&lt;BR/&gt; 113: (15%)&lt;BR/&gt; 6663: (5%)&lt;BR/&gt; 63897: (2.5%)&lt;BR/&gt; 46266: (2.5%)&gt;];
}
1088--1122[label="0.35;7pkt 7fpkt"];
1088--1208[label="0.5;1pkt 1fpkt"];
1088--1942[label="1;19pkt 19fpkt"];
1088--2058[label="0.5;1pkt 1fpkt"];
1088--2183[label="0.35;7pkt 7fpkt"];
1088--3393[label="1;19pkt 19fpkt"];
1088--5213[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.0.77" src_ip="208.244.130.99"/>
      <filter dst_ip="161.29.17.120" dst_port="113" src_ip="208.244.130.99"/>
      <filter dst_ip="161.29.40.41" src_ip="208.244.130.99" src_port="6667"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.908238,1.71153,020,0 0 0 0 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
1943[label="208.31.250.187;s;1993pkt 1993fpkt", shape=hexagon, color=black];
4147[label="208.31.250.187;2791pkt 2791fpkt", shape=pentagon, color=darkviolet];
5599[label="208.31.250.187;2791pkt 2791fpkt", shape=invtriangle, color=brown];
6280[label="208.31.250.187;2791pkt 2791fpkt", shape=invhouse, color=bisque];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.31.250.187:0, *:0}[99.5342%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5273%)&lt;BR/&gt; 135: (0.130233%)&lt;BR/&gt; 80: (0.106116%)&lt;BR/&gt; 37190: (0.0192938%)&lt;BR/&gt; 29610: (0.0192938%)&gt;];
}
1943--4147[label="1;1993pkt 1993fpkt"];
1943--5599[label="1;1993pkt 1993fpkt"];
1943--6280[label="1;1993pkt 1993fpkt"];
4147--5599[label="1;2791pkt 2791fpkt"];
4147--6280[label="1;2791pkt 2791fpkt"];
5599--6280[label="1;2791pkt 2791fpkt"];
</description>
    <slice>
      <filter src_ip="208.31.250.187"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
1091[label="86.132.174.22;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.132.174.22:6884, 143.134.168.140:2892}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6884: (50%)&lt;BR/&gt; 2892: (50%)&gt;];
}
1091--1634[label="1;1pkt 1fpkt"];
1091--1947[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.168.140" dst_port="2892" src_ip="86.132.174.22" src_port="6884"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
622[label="4.117.177.250;s;9pkt 9fpkt", shape=diamond, color=yellow];
1760[label="161.29.36.16;d;1pkt 1fpkt", shape=hexagon, color=black];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.117.177.250:6667, 161.29.40.41:*}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 1370: (10%)&lt;BR/&gt; 1992: (5%)&lt;BR/&gt; 1964: (5%)&lt;BR/&gt; 1926: (5%)&gt;];
}
622--847[label="0.5;1pkt 1fpkt"];
622--974[label="0.5;1pkt 1fpkt"];
622--1122[label="0.777778;7pkt 7fpkt"];
622--1749[label="1;7pkt 7fpkt"];
622--1760[label="1;1pkt 1fpkt"];
622--1952[label="0.5;1pkt 1fpkt"];
622--2183[label="0.777778;7pkt 7fpkt"];
622--2292[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.40.41" src_ip="4.117.177.250" src_port="6667"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
983[label="208.145.14.133;s;201pkt 201fpkt", shape=diamond, color=yellow];
1964[label="208.145.14.133;s;151pkt 151fpkt", shape=hexagon, color=black];
3667[label="208.145.14.133;210pkt 210fpkt", shape=pentagon, color=darkviolet];
5358[label="208.145.14.133;210pkt 210fpkt", shape=invtriangle, color=brown];
6170[label="208.145.14.133;210pkt 210fpkt", shape=invhouse, color=bisque];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.145.14.133:44977, *:53}[45.2381%]&lt;BR/&gt;{208.145.14.133:80, *:*}[39.5238%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (26.3238%)&lt;BR/&gt; 44977: (22.4542%)&lt;BR/&gt; 80: (20.2138%)&lt;BR/&gt; 25: (3.81874%)&lt;BR/&gt; 32769: (0.458248%)&gt;];
}
983--1964[label="1;151pkt 151fpkt"];
983--2326[label="0.0348259;7pkt 7fpkt"];
983--2336[label="0.114428;23pkt 23fpkt"];
983--2341[label="0.0348259;7pkt 7fpkt"];
983--3667[label="1;201pkt 201fpkt"];
983--5358[label="1;201pkt 201fpkt"];
983--6170[label="1;201pkt 201fpkt"];
1964--2326[label="0.0463576;7pkt 7fpkt"];
1964--2336[label="0.0993377;15pkt 15fpkt"];
1964--2341[label="0.0463576;7pkt 7fpkt"];
1964--3667[label="1;151pkt 151fpkt"];
1964--5358[label="1;151pkt 151fpkt"];
1964--6170[label="1;151pkt 151fpkt"];
3667--5358[label="1;210pkt 210fpkt"];
3667--6170[label="1;210pkt 210fpkt"];
5358--6170[label="1;210pkt 210fpkt"];
</description>
    <slice>
      <filter src_ip="208.145.14.133" src_port="80"/>
      <filter dst_port="53" src_ip="208.145.14.133" src_port="44977"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
661[label="7.84.1.200;s;96pkt 96fpkt", shape=diamond, color=yellow];
676[label="200.42.156.201;s;101pkt 101fpkt", shape=diamond, color=yellow];
987[label="7.244.32.165;s;49pkt 49fpkt", shape=diamond, color=yellow];
1966[label="208.18.149.180;d;178pkt 178fpkt", shape=hexagon, color=black];
3111[label="200.17.85.70;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 208.18.149.180:*}[36.165%]&lt;BR/&gt;{200.42.156.201:80, *:*}[24.5146%]&lt;BR/&gt;{7.84.1.200:80, *:*}[23.301%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.697%)&lt;BR/&gt; 0: (3.41686%)&lt;BR/&gt; 32771: (0.455581%)&lt;BR/&gt; 1863: (0.455581%)&lt;BR/&gt; 39845: (0.341686%)&gt;];
}
661--756[label="0.03125;3pkt 3fpkt"];
661--883[label="0.03125;3pkt 3fpkt"];
661--1141[label="0.157895;6pkt 6fpkt"];
661--1430[label="0.0520833;5pkt 5fpkt"];
661--1433[label="0.15625;15pkt 15fpkt"];
661--1463[label="0.0729167;7pkt 7fpkt"];
661--1522[label="0.0104167;1pkt 1fpkt"];
661--1594[label="0.0104167;1pkt 1fpkt"];
661--1781[label="1;63pkt 63fpkt"];
661--1966[label="0.0520833;5pkt 5fpkt"];
661--2120[label="0.03125;3pkt 3fpkt"];
661--2225[label="0.15625;15pkt 15fpkt"];
661--2265[label="0.0520833;5pkt 5fpkt"];
661--2304[label="0.0104167;1pkt 1fpkt"];
661--4256[label="1;96pkt 96fpkt"];
676--1438[label="0.108911;11pkt 11fpkt"];
676--1463[label="0.029703;3pkt 3fpkt"];
676--1522[label="0.039604;4pkt 4fpkt"];
676--1573[label="0.039604;4pkt 4fpkt"];
676--1614[label="1;58pkt 58fpkt"];
676--1930[label="0.00990099;1pkt 1fpkt"];
676--1966[label="0.049505;5pkt 5fpkt"];
676--2044[label="0.019802;2pkt 2fpkt"];
676--2163[label="0.00990099;1pkt 1fpkt"];
676--2164[label="0.00990099;1pkt 1fpkt"];
676--2226[label="0.108911;11pkt 11fpkt"];
676--2304[label="0.039604;4pkt 4fpkt"];
987--1284[label="0.0204082;1pkt 1fpkt"];
987--1424[label="0.0408163;2pkt 2fpkt"];
987--1522[label="0.0204082;1pkt 1fpkt"];
987--1580[label="0.0408163;2pkt 2fpkt"];
987--1872[label="1;49pkt 49fpkt"];
987--1966[label="0.0408163;2pkt 2fpkt"];
987--2002[label="0.0204082;1pkt 1fpkt"];
987--2304[label="0.0204082;1pkt 1fpkt"];
987--3959[label="1;49pkt 49fpkt"];
1966--2004[label="0.0434783;1pkt 1fpkt"];
1966--2039[label="0.00561798;1pkt 1fpkt"];
1966--2126[label="0.00684932;1pkt 1fpkt"];
1966--2267[label="0.00561798;1pkt 1fpkt"];
1966--2504[label="0.0434783;1pkt 1fpkt"];
1966--2851[label="0.181818;2pkt 2fpkt"];
1966--3031[label="0.2;1pkt 1fpkt"];
1966--3111[label="1;15pkt 15fpkt"];
1966--3381[label="0.00617284;1pkt 1fpkt"];
1966--3650[label="0.0449438;8pkt 8fpkt"];
1966--3780[label="0.00561798;1pkt 1fpkt"];
1966--3959[label="0.0408163;2pkt 2fpkt"];
1966--4017[label="0.0714286;1pkt 1fpkt"];
1966--4047[label="0.0438596;5pkt 5fpkt"];
1966--4135[label="0.011236;2pkt 2fpkt"];
1966--4229[label="0.0168539;3pkt 3fpkt"];
1966--4256[label="0.05;5pkt 5fpkt"];
1966--4491[label="0.0114943;1pkt 1fpkt"];
1966--4705[label="0.0416667;1pkt 1fpkt"];
1966--5206[label="0.00621118;1pkt 1fpkt"];
1966--5347[label="0.0449438;8pkt 8fpkt"];
1966--5416[label="0.00561798;1pkt 1fpkt"];
1966--5526[label="0.0769231;1pkt 1fpkt"];
1966--5545[label="0.0353982;4pkt 4fpkt"];
1966--5773[label="0.0116279;1pkt 1fpkt"];
1966--5883[label="0.0416667;1pkt 1fpkt"];
1966--6111[label="0.00617284;1pkt 1fpkt"];
1966--6165[label="0.0449438;8pkt 8fpkt"];
1966--6199[label="0.00561798;1pkt 1fpkt"];
1966--6247[label="0.0714286;1pkt 1fpkt"];
1966--6254[label="0.0438596;5pkt 5fpkt"];
1966--6276[label="0.011236;2pkt 2fpkt"];
1966--6351[label="0.0114943;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="200.42.156.201" src_port="80"/>
      <filter src_ip="7.84.1.200" src_port="80"/>
      <filter dst_ip="208.18.149.180" src_port="80"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
1131[label="96.156.169.178;s;624pkt 624fpkt", shape=diamond, color=yellow];
1978[label="96.156.169.178;s;499pkt 499fpkt", shape=hexagon, color=black];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.156.169.178:0, *:0}[97.7564%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.9519%)&lt;BR/&gt; 80: (1.02404%)&lt;BR/&gt; 64372: (0.0890472%)&lt;BR/&gt; 60494: (0.0890472%)&lt;BR/&gt; 58145: (0.0890472%)&gt;];
}
1131--1978[label="1;499pkt 499fpkt"];
1131--2327[label="0.00320513;2pkt 2fpkt"];
1131--2342[label="0.00320513;2pkt 2fpkt"];
1978--2327[label="0.00400802;2pkt 2fpkt"];
1978--2342[label="0.00400802;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="96.156.169.178"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
997[label="212.30.113.100;s;7pkt 7fpkt", shape=diamond, color=yellow];
1981[label="212.30.113.100;s;7pkt 7fpkt", shape=hexagon, color=black];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.100:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4252: (7.14286%)&lt;BR/&gt; 4066: (7.14286%)&lt;BR/&gt; 3506: (7.14286%)&lt;BR/&gt; 3256: (7.14286%)&gt;];
}
997--1981[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="212.30.113.100" src_port="1863"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
1000[label="196.16.72.190;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.16.72.190:6881, 143.134.168.140:2457}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 2457: (50%)&gt;];
}
1000--1634[label="1;1pkt 1fpkt"];
1000--1983[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.168.140" dst_port="2457" src_ip="196.16.72.190" src_port="6881"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
764[label="136.93.202.36;d;92pkt 92fpkt", shape=diamond, color=yellow];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.93.202.36:*}[91.3043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6522%)&lt;BR/&gt; 110: (2.17391%)&lt;BR/&gt; 1114: (1.08696%)&lt;BR/&gt; 1055: (1.08696%)&lt;BR/&gt; 33436: (0.543478%)&gt;];
}
764--765[label="0.0543478;5pkt 5fpkt"];
764--869[label="0.0543478;5pkt 5fpkt"];
764--873[label="0.0434783;4pkt 4fpkt"];
764--877[label="0.0108696;1pkt 1fpkt"];
764--1004[label="0.0434783;4pkt 4fpkt"];
764--1005[label="0.0434783;4pkt 4fpkt"];
764--1153[label="0.0108696;1pkt 1fpkt"];
764--1358[label="0.0434783;4pkt 4fpkt"];
764--1359[label="0.0333333;3pkt 3fpkt"];
764--1462[label="0.0326087;3pkt 3fpkt"];
764--1523[label="0.0108696;1pkt 1fpkt"];
764--1536[label="0.0652174;6pkt 6fpkt"];
764--1571[label="0.015625;1pkt 1fpkt"];
764--1632[label="0.0108696;1pkt 1fpkt"];
764--1655[label="0.0108696;1pkt 1fpkt"];
764--1691[label="0.0543478;5pkt 5fpkt"];
764--1739[label="0.2;2pkt 2fpkt"];
764--1764[label="0.0543478;5pkt 5fpkt"];
764--1782[label="0.0547945;4pkt 4fpkt"];
764--1879[label="1;81pkt 81fpkt"];
764--1985[label="0.0434783;4pkt 4fpkt"];
764--2126[label="0.0108696;1pkt 1fpkt"];
764--2246[label="0.015873;1pkt 1fpkt"];
764--2272[label="0.0543478;5pkt 5fpkt"];
764--2363[label="0.0543478;5pkt 5fpkt"];
764--2400[label="0.0434783;4pkt 4fpkt"];
764--2411[label="0.0434783;4pkt 4fpkt"];
764--2569[label="0.0434783;4pkt 4fpkt"];
764--3086[label="0.125;1pkt 1fpkt"];
764--3381[label="0.0108696;1pkt 1fpkt"];
764--3635[label="0.0108696;1pkt 1fpkt"];
764--3650[label="0.130435;12pkt 12fpkt"];
764--3668[label="0.0108696;1pkt 1fpkt"];
764--3713[label="0.0108696;1pkt 1fpkt"];
764--4007[label="0.0444444;2pkt 2fpkt"];
764--4563[label="0.235294;4pkt 4fpkt"];
764--4575[label="0.0108696;1pkt 1fpkt"];
764--4632[label="0.0543478;5pkt 5fpkt"];
764--4649[label="0.0434783;4pkt 4fpkt"];
764--4653[label="0.0434783;4pkt 4fpkt"];
764--5040[label="0.125;1pkt 1fpkt"];
764--5206[label="0.0108696;1pkt 1fpkt"];
764--5347[label="0.130435;12pkt 12fpkt"];
764--5522[label="0.0444444;2pkt 2fpkt"];
764--5857[label="0.0434783;4pkt 4fpkt"];
764--6111[label="0.0108696;1pkt 1fpkt"];
764--6165[label="0.130435;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.202.36" src_port="80"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
600[label="196.85.175.61;s;6pkt 6fpkt", shape=diamond, color=yellow];
819[label="136.93.76.142;d;12pkt 12fpkt", shape=diamond, color=yellow];
1062[label="7.136.250.246;s;7pkt 7fpkt", shape=diamond, color=yellow];
1587[label="196.85.175.61;s;6pkt 6fpkt", shape=hexagon, color=black];
2024[label="7.136.250.246;s;7pkt 7fpkt", shape=hexagon, color=black];
4319[label="196.233.103.209;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 136.93.76.142:1135}[25.9259%]&lt;BR/&gt;{7.136.250.246:*, *:*}[25.9259%]&lt;BR/&gt;{196.85.175.61:0, *:0}[22.2222%]&lt;BR/&gt;{*:*, *:53}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (31.7073%)&lt;BR/&gt; 53: (24.3902%)&lt;BR/&gt; 1135: (8.53659%)&lt;BR/&gt; 80: (7.31707%)&lt;BR/&gt; 63126: (2.43902%)&gt;];
}
600--819[label="0.166667;1pkt 1fpkt"];
600--1239[label="0.166667;1pkt 1fpkt"];
600--1587[label="1;6pkt 6fpkt"];
600--1935[label="0.166667;1pkt 1fpkt"];
600--2182[label="0.166667;1pkt 1fpkt"];
600--3018[label="1;6pkt 6fpkt"];
819--832[label="0.0833333;1pkt 1fpkt"];
819--1238[label="0.0833333;1pkt 1fpkt"];
819--1332[label="0.0833333;1pkt 1fpkt"];
819--1587[label="0.166667;1pkt 1fpkt"];
819--3018[label="0.166667;1pkt 1fpkt"];
819--3481[label="0.0833333;1pkt 1fpkt"];
819--3955[label="0.0833333;1pkt 1fpkt"];
819--4401[label="0.0833333;1pkt 1fpkt"];
819--4489[label="0.0833333;1pkt 1fpkt"];
819--5259[label="0.0833333;1pkt 1fpkt"];
1062--1935[label="0.285714;2pkt 2fpkt"];
1062--2024[label="1;7pkt 7fpkt"];
1062--2070[label="0.142857;1pkt 1fpkt"];
1062--4574[label="1;7pkt 7fpkt"];
1062--5821[label="1;7pkt 7fpkt"];
1587--1935[label="0.166667;1pkt 1fpkt"];
1587--2182[label="0.166667;1pkt 1fpkt"];
1587--3018[label="1;6pkt 6fpkt"];
2024--2070[label="0.142857;1pkt 1fpkt"];
2024--4574[label="1;7pkt 7fpkt"];
2024--5821[label="1;7pkt 7fpkt"];
4319--5696[label="1;3pkt 3fpkt"];
4319--6326[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="7.136.250.246"/>
      <filter dst_port="53"/>
      <filter src_ip="196.85.175.61"/>
      <filter dst_ip="136.93.76.142" dst_port="1135" src_port="53"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
554[label="143.38.14.171;d;33pkt 33fpkt", shape=diamond, color=yellow];
580[label="136.93.206.8;d;63pkt 63fpkt", shape=diamond, color=yellow];
706[label="136.93.197.228;d;97pkt 97fpkt", shape=diamond, color=yellow];
921[label="136.93.229.64;d;109pkt 109fpkt", shape=diamond, color=yellow];
1800[label="7.219.210.52;s;179pkt 179fpkt", shape=hexagon, color=black];
3333[label="212.30.113.93;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5178[label="212.30.113.93;4pkt 4fpkt", shape=invtriangle, color=brown];
6099[label="212.30.113.93;4pkt 4fpkt", shape=invhouse, color=bisque];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.219.210.52:80, *:*}[37.605%]&lt;BR/&gt;{*:80, 136.93.229.64:*}[22.6891%]&lt;BR/&gt;{*:80, 136.93.197.228:*}[20.1681%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9716%)&lt;BR/&gt; 1863: (1.72414%)&lt;BR/&gt; 3444: (0.40568%)&lt;BR/&gt; 3247: (0.40568%)&lt;BR/&gt; 3392: (0.30426%)&gt;];
}
554--729[label="0.212121;7pkt 7fpkt"];
554--981[label="0.1;1pkt 1fpkt"];
554--1565[label="0.393939;13pkt 13fpkt"];
554--1623[label="1;33pkt 33fpkt"];
554--1655[label="0.212121;7pkt 7fpkt"];
554--1847[label="0.212121;7pkt 7fpkt"];
554--1961[label="0.1;1pkt 1fpkt"];
554--2278[label="0.212121;7pkt 7fpkt"];
554--2487[label="0.393939;13pkt 13fpkt"];
554--3050[label="0.1;1pkt 1fpkt"];
554--3333[label="0.25;1pkt 1fpkt"];
554--3636[label="0.166667;1pkt 1fpkt"];
554--3668[label="0.212121;7pkt 7fpkt"];
554--4693[label="0.393939;13pkt 13fpkt"];
554--5022[label="0.1;1pkt 1fpkt"];
554--5178[label="0.25;1pkt 1fpkt"];
554--5342[label="0.2;1pkt 1fpkt"];
554--5879[label="0.393939;13pkt 13fpkt"];
554--6099[label="0.25;1pkt 1fpkt"];
580--729[label="0.15873;10pkt 10fpkt"];
580--836[label="0.015873;1pkt 1fpkt"];
580--1523[label="0.15873;10pkt 10fpkt"];
580--1563[label="1;63pkt 63fpkt"];
580--1655[label="0.15873;10pkt 10fpkt"];
580--1800[label="0.126984;8pkt 8fpkt"];
580--2531[label="1;33pkt 33fpkt"];
580--2979[label="0.015873;1pkt 1fpkt"];
580--3668[label="0.15873;10pkt 10fpkt"];
706--729[label="0.164948;16pkt 16fpkt"];
706--836[label="0.0103093;1pkt 1fpkt"];
706--845[label="0.0108696;1pkt 1fpkt"];
706--1090[label="0.0206186;2pkt 2fpkt"];
706--1104[label="0.0454545;2pkt 2fpkt"];
706--1243[label="0.0307692;2pkt 2fpkt"];
706--1260[label="0.0322581;2pkt 2fpkt"];
706--1523[label="0.185567;18pkt 18fpkt"];
706--1571[label="0.234375;15pkt 15fpkt"];
706--1629[label="1;87pkt 87fpkt"];
706--1655[label="0.164948;16pkt 16fpkt"];
706--1750[label="0.28866;28pkt 28fpkt"];
706--2060[label="0.0206186;2pkt 2fpkt"];
706--2115[label="0.0322581;2pkt 2fpkt"];
706--2246[label="0.238095;15pkt 15fpkt"];
706--2577[label="0.0307692;2pkt 2fpkt"];
706--2623[label="0.0103093;1pkt 1fpkt"];
706--2979[label="0.0103093;1pkt 1fpkt"];
706--3668[label="0.164948;16pkt 16fpkt"];
706--3713[label="0.206186;20pkt 20fpkt"];
706--3827[label="0.0333333;2pkt 2fpkt"];
706--3890[label="0.0206186;2pkt 2fpkt"];
706--5469[label="0.0206186;2pkt 2fpkt"];
921--1090[label="0.0183486;2pkt 2fpkt"];
921--1253[label="0.0104167;1pkt 1fpkt"];
921--1260[label="0.0322581;2pkt 2fpkt"];
921--1281[label="0.238532;26pkt 26fpkt"];
921--1523[label="0.146789;16pkt 16fpkt"];
921--1537[label="0.35;14pkt 14fpkt"];
921--1655[label="0.0458716;5pkt 5fpkt"];
921--1957[label="0.00917431;1pkt 1fpkt"];
921--2060[label="0.0183486;2pkt 2fpkt"];
921--2100[label="0.011236;1pkt 1fpkt"];
921--2115[label="0.0322581;2pkt 2fpkt"];
921--2839[label="0.0140845;1pkt 1fpkt"];
921--2906[label="0.238532;26pkt 26fpkt"];
921--2979[label="0.0183486;2pkt 2fpkt"];
921--3668[label="0.119266;13pkt 13fpkt"];
921--3783[label="0.0384615;2pkt 2fpkt"];
921--3890[label="0.0183486;2pkt 2fpkt"];
921--4272[label="0.010101;1pkt 1fpkt"];
921--4937[label="0.229358;25pkt 25fpkt"];
921--5417[label="0.0196078;1pkt 1fpkt"];
921--5469[label="0.00917431;1pkt 1fpkt"];
921--5671[label="0.010101;1pkt 1fpkt"];
921--6312[label="0.010101;1pkt 1fpkt"];
1800--1960[label="0.198113;21pkt 21fpkt"];
1800--2012[label="0.0726257;13pkt 13fpkt"];
1800--2018[label="0.0588235;6pkt 6fpkt"];
1800--2034[label="0.105263;6pkt 6fpkt"];
1800--2163[label="0.0167598;3pkt 3fpkt"];
1800--2193[label="0.0465116;2pkt 2fpkt"];
1800--2225[label="0.0391061;7pkt 7fpkt"];
1800--2262[label="0.194805;15pkt 15fpkt"];
3333--5178[label="1;4pkt 4fpkt"];
3333--6099[label="1;4pkt 4fpkt"];
5178--6099[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="7.219.210.52" src_port="80"/>
      <filter dst_ip="136.93.229.64" src_port="80"/>
      <filter dst_ip="136.93.197.228" src_port="80"/>
    </slice>
    <from sec="1068526839" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
683[label="208.18.150.146;s;19112pkt 19112fpkt", shape=diamond, color=yellow];
1999[label="208.18.150.146;s;13106pkt 13106fpkt", shape=hexagon, color=black];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.18.150.146:0, *:0}[99.9948%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.9938%)&lt;BR/&gt; 2374: (0.00310385%)&lt;BR/&gt; 80: (0.00310385%)&gt;];
}
683--1999[label="1;13106pkt 13106fpkt"];
</description>
    <slice>
      <filter src_ip="208.18.150.146"/>
    </slice>
    <from sec="1068526825" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
918[label="208.213.21.161;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.213.21.161:80, 164.228.194.225:4047}[50%]&lt;BR/&gt;{208.213.21.161:80, 164.228.194.225:4049}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4049: (25%)&lt;BR/&gt; 4047: (25%)&gt;];
}
918--2014[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="164.228.194.225" dst_port="4049" src_ip="208.213.21.161" src_port="80"/>
      <filter dst_ip="164.228.194.225" dst_port="4047" src_ip="208.213.21.161" src_port="80"/>
    </slice>
    <from sec="1068527009" usec="0"/>
    <to sec="1068527612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
942[label="7.81.22.12;s;5pkt 5fpkt", shape=diamond, color=yellow];
2021[label="7.81.22.12;s;5pkt 5fpkt", shape=hexagon, color=black];
2481[label="7.81.22.12;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4688[label="7.81.22.12;4pkt 4fpkt", shape=invtriangle, color=brown];
5874[label="7.81.22.12;5pkt 5fpkt", shape=invhouse, color=bisque];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.81.22.12:80, 208.31.228.65:27395}[20%]&lt;BR/&gt;{7.81.22.12:80, 208.31.228.65:27397}[20%]&lt;BR/&gt;{7.81.22.12:80, 208.31.228.65:27409}[20%]&lt;BR/&gt;{7.81.22.12:80, 208.31.228.65:27410}[20%]&lt;BR/&gt;{7.81.22.12:80, 208.31.228.65:27413}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 27413: (10.4167%)&lt;BR/&gt; 27410: (10.4167%)&lt;BR/&gt; 27409: (10.4167%)&lt;BR/&gt; 27397: (10.4167%)&gt;];
}
942--1939[label="1;5pkt 5fpkt"];
942--2021[label="1;5pkt 5fpkt"];
942--2481[label="1;5pkt 5fpkt"];
942--4688[label="1;4pkt 4fpkt"];
942--5874[label="1;5pkt 5fpkt"];
2021--2481[label="1;5pkt 5fpkt"];
2021--4688[label="1;4pkt 4fpkt"];
2021--5874[label="1;5pkt 5fpkt"];
2481--4688[label="1;4pkt 4fpkt"];
2481--5874[label="1;5pkt 5fpkt"];
4688--5874[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.65" dst_port="27413" src_ip="7.81.22.12" src_port="80"/>
      <filter dst_ip="208.31.228.65" dst_port="27410" src_ip="7.81.22.12" src_port="80"/>
      <filter dst_ip="208.31.228.65" dst_port="27409" src_ip="7.81.22.12" src_port="80"/>
      <filter dst_ip="208.31.228.65" dst_port="27397" src_ip="7.81.22.12" src_port="80"/>
      <filter dst_ip="208.31.228.65" dst_port="27395" src_ip="7.81.22.12" src_port="80"/>
    </slice>
    <from sec="1068527174" usec="0"/>
    <to sec="1068527432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
1183[label="0.43.185.242;s;13pkt 13fpkt", shape=diamond, color=yellow];
2030[label="0.43.185.242;s;13pkt 13fpkt", shape=hexagon, color=black];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.43.185.242:80, 208.31.228.10:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3077: (3.84615%)&lt;BR/&gt; 3076: (3.84615%)&lt;BR/&gt; 3075: (3.84615%)&lt;BR/&gt; 3062: (3.84615%)&gt;];
}
1183--2030[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.10" src_ip="0.43.185.242" src_port="80"/>
    </slice>
    <from sec="1068527297" usec="0"/>
    <to sec="1068527502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
1185[label="98.69.48.47;s;1012pkt 1012fpkt", shape=diamond, color=yellow];
2032[label="98.69.48.47;s;1012pkt 1012fpkt", shape=hexagon, color=black];
2875[label="98.69.48.47;1012pkt 1012fpkt", shape=pentagon, color=darkviolet];
4923[label="98.69.48.47;1012pkt 1012fpkt", shape=invtriangle, color=brown];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.69.48.47:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4221: (0.0494071%)&lt;BR/&gt; 4220: (0.0494071%)&lt;BR/&gt; 4219: (0.0494071%)&lt;BR/&gt; 4218: (0.0494071%)&gt;];
}
1185--2032[label="1;1012pkt 1012fpkt"];
1185--2875[label="1;1012pkt 1012fpkt"];
1185--4923[label="1;1012pkt 1012fpkt"];
2032--2875[label="1;1012pkt 1012fpkt"];
2032--4923[label="1;1012pkt 1012fpkt"];
2875--4923[label="1;1012pkt 1012fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="98.69.48.47"/>
    </slice>
    <from sec="1068527317" usec="0"/>
    <to sec="1068527411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
943[label="197.76.29.80;s;2pkt 2fpkt", shape=diamond, color=yellow];
1191[label="197.76.20.5;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.76.20.5:0, 136.93.89.110:0}[25%]&lt;BR/&gt;{197.76.20.5:80, 136.93.89.110:3895}[25%]&lt;BR/&gt;{197.76.29.80:0, 136.93.89.110:0}[25%]&lt;BR/&gt;{197.76.29.80:80, 136.93.89.110:2774}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 3895: (12.5%)&lt;BR/&gt; 2774: (12.5%)&gt;];
}
943--1424[label="1;2pkt 2fpkt"];
1191--1424[label="1;2pkt 2fpkt"];
1191--2035[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.89.110" dst_port="2774" src_ip="197.76.29.80" src_port="80"/>
      <filter dst_ip="136.93.89.110" src_ip="197.76.29.80"/>
      <filter dst_ip="136.93.89.110" dst_port="3895" src_ip="197.76.20.5" src_port="80"/>
      <filter dst_ip="136.93.89.110" src_ip="197.76.20.5"/>
    </slice>
    <from sec="1068527184" usec="0"/>
    <to sec="1068527442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
280[label="202.138.181.86;d;3pkt 3fpkt", shape=diamond, color=yellow];
281[label="146.153.42.8;s;90pkt 90fpkt", shape=diamond, color=yellow];
2043[label="146.153.42.8;s;69pkt 69fpkt", shape=hexagon, color=black];
2440[label="146.153.42.8;92pkt 92fpkt", shape=pentagon, color=darkviolet];
4662[label="146.153.42.8;92pkt 92fpkt", shape=invtriangle, color=brown];
5860[label="146.153.42.8;93pkt 93fpkt", shape=invhouse, color=bisque];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.42.8:8884, *:*}[35.4839%]&lt;BR/&gt;{146.153.42.8:8883, *:*}[20.4301%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8884: (17.8815%)&lt;BR/&gt; 8883: (9.90888%)&lt;BR/&gt; 8882: (6.71982%)&lt;BR/&gt; 8881: (6.60592%)&lt;BR/&gt; 6881: (3.75854%)&gt;];
}
280--281[label="1;3pkt 3fpkt"];
280--2043[label="0.666667;2pkt 2fpkt"];
280--2440[label="1;3pkt 3fpkt"];
280--4662[label="1;3pkt 3fpkt"];
280--5860[label="1;3pkt 3fpkt"];
281--2043[label="1;69pkt 69fpkt"];
281--2440[label="0.988889;89pkt 89fpkt"];
281--4662[label="0.988889;89pkt 89fpkt"];
281--5860[label="1;90pkt 90fpkt"];
2043--2440[label="1;69pkt 69fpkt"];
2043--4662[label="1;69pkt 69fpkt"];
2043--5860[label="1;69pkt 69fpkt"];
2440--4662[label="1;92pkt 92fpkt"];
2440--5860[label="1;92pkt 92fpkt"];
4662--5860[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter src_ip="146.153.42.8" src_port="8884"/>
      <filter src_ip="146.153.42.8" src_port="8883"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790933,1.81327,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
2048[label="218.109.147.32;d;365pkt 365fpkt", shape=hexagon, color=black];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 218.109.147.32:6667}[35.0685%]&lt;BR/&gt;{*:113, 218.109.147.32:*}[21.3699%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (17.5342%)&lt;BR/&gt; 113: (10.6849%)&lt;BR/&gt; 10080: (3.83562%)&lt;BR/&gt; 8080: (3.83562%)&lt;BR/&gt; 3128: (3.83562%)&gt;];
}
2048--2424[label="0.00395257;1pkt 1fpkt"];
2048--3105[label="0.666667;4pkt 4fpkt"];
2048--3282[label="0.00395257;1pkt 1fpkt"];
2048--3560[label="0.00396825;1pkt 1fpkt"];
2048--4548[label="0.1875;3pkt 3fpkt"];
2048--4655[label="0.00393701;1pkt 1fpkt"];
2048--5154[label="0.00395257;1pkt 1fpkt"];
2048--5303[label="0.00398406;1pkt 1fpkt"];
2048--5807[label="0.1875;3pkt 3fpkt"];
2048--5858[label="0.00393701;1pkt 1fpkt"];
2048--6089[label="0.00396825;1pkt 1fpkt"];
2048--6143[label="0.00396825;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.109.147.32" src_port="113"/>
      <filter dst_ip="218.109.147.32" dst_port="6667"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
818[label="96.186.56.245;s;957pkt 957fpkt", shape=diamond, color=yellow];
2051[label="96.186.56.245;s;859pkt 859fpkt", shape=hexagon, color=black];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.186.56.245:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
818--2051[label="1;859pkt 859fpkt"];
</description>
    <slice>
      <filter src_ip="96.186.56.245"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
456[label="164.228.153.156;d;16pkt 16fpkt", shape=diamond, color=yellow];
597[label="4.88.165.31;s;1pkt 1fpkt", shape=diamond, color=yellow];
1497[label="164.228.153.156;d;12pkt 12fpkt", shape=hexagon, color=black];
2053[label="4.88.165.31;s;1pkt 1fpkt", shape=hexagon, color=black];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.44.4.86:80, 164.228.153.156:*}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1342: (6.66667%)&lt;BR/&gt; 1673: (3.33333%)&lt;BR/&gt; 1672: (3.33333%)&lt;BR/&gt; 1668: (3.33333%)&gt;];
}
456--597[label="1;1pkt 1fpkt"];
456--1497[label="1;12pkt 12fpkt"];
456--2053[label="1;1pkt 1fpkt"];
456--3263[label="0.9375;15pkt 15fpkt"];
456--5143[label="0.9375;15pkt 15fpkt"];
597--1497[label="1;1pkt 1fpkt"];
597--2053[label="1;1pkt 1fpkt"];
1497--2053[label="1;1pkt 1fpkt"];
1497--3263[label="0.916667;11pkt 11fpkt"];
1497--5143[label="0.916667;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="164.228.153.156" src_ip="198.44.4.86" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
733[label="136.93.14.118;d;3pkt 3fpkt", shape=diamond, color=yellow];
734[label="197.0.218.68;s;1pkt 1fpkt", shape=diamond, color=yellow];
2057[label="136.93.14.118;d;3pkt 3fpkt", shape=hexagon, color=black];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.119.34:1863, 136.93.14.118:1893}[33.3333%]&lt;BR/&gt;{212.30.119.40:1863, 136.93.14.118:3018}[33.3333%]&lt;BR/&gt;{197.0.218.68:8600, 136.93.14.118:1954}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (28.5714%)&lt;BR/&gt; 8600: (21.4286%)&lt;BR/&gt; 1954: (21.4286%)&lt;BR/&gt; 3018: (14.2857%)&lt;BR/&gt; 1893: (14.2857%)&gt;];
}
733--734[label="1;1pkt 1fpkt"];
733--2057[label="1;3pkt 3fpkt"];
733--2819[label="0.333333;1pkt 1fpkt"];
734--2057[label="1;1pkt 1fpkt"];
2057--2819[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.14.118" dst_port="1954" src_ip="197.0.218.68" src_port="8600"/>
      <filter dst_ip="136.93.14.118" dst_port="3018" src_ip="212.30.119.40" src_port="1863"/>
      <filter dst_ip="136.93.14.118" dst_port="1893" src_ip="212.30.119.34" src_port="1863"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,501,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
333[label="161.29.13.180;d;71pkt 71fpkt", shape=diamond, color=yellow];
608[label="201.207.210.87;s;2pkt 2fpkt", shape=diamond, color=yellow];
1937[label="161.29.13.180;d;71pkt 71fpkt", shape=hexagon, color=black];
2059[label="201.207.210.87;s;2pkt 2fpkt", shape=hexagon, color=black];
2448[label="201.44.148.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2852[label="99.174.147.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3289[label="201.207.210.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4667[label="201.44.148.8;1pkt 1fpkt", shape=invtriangle, color=brown];
4906[label="99.174.147.44;1pkt 1fpkt", shape=invtriangle, color=brown];
5863[label="201.44.148.8;1pkt 1fpkt", shape=invhouse, color=bisque];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 161.29.13.180:21}[91.5493%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (46.0526%)&lt;BR/&gt; 4672: (9.21053%)&lt;BR/&gt; 21278: (1.64474%)&lt;BR/&gt; 1225: (1.64474%)&lt;BR/&gt; 6667: (1.31579%)&gt;];
}
333--599[label="1;1pkt 1fpkt"];
333--608[label="1;2pkt 2fpkt"];
333--1659[label="1;1pkt 1fpkt"];
333--1937[label="1;71pkt 71fpkt"];
333--2059[label="1;2pkt 2fpkt"];
333--2448[label="1;1pkt 1fpkt"];
333--2852[label="1;1pkt 1fpkt"];
333--3289[label="1;1pkt 1fpkt"];
333--4143[label="1;1pkt 1fpkt"];
333--4667[label="1;1pkt 1fpkt"];
333--4906[label="1;1pkt 1fpkt"];
333--5863[label="1;1pkt 1fpkt"];
608--1937[label="1;2pkt 2fpkt"];
608--2059[label="1;2pkt 2fpkt"];
608--3289[label="1;1pkt 1fpkt"];
1937--2059[label="1;2pkt 2fpkt"];
1937--2448[label="1;1pkt 1fpkt"];
1937--2852[label="1;1pkt 1fpkt"];
1937--3289[label="1;1pkt 1fpkt"];
1937--4143[label="1;1pkt 1fpkt"];
1937--4667[label="1;1pkt 1fpkt"];
1937--4906[label="1;1pkt 1fpkt"];
1937--5863[label="1;1pkt 1fpkt"];
2059--3289[label="1;1pkt 1fpkt"];
2448--4667[label="1;1pkt 1fpkt"];
2448--5863[label="1;1pkt 1fpkt"];
2852--4906[label="1;1pkt 1fpkt"];
4667--5863[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.13.180" dst_port="21"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_240{
style=filled;
color=gray75;
1093[label="155.115.114.238;s;715pkt 715fpkt", shape=diamond, color=yellow];
2064[label="155.115.114.238;s;616pkt 616fpkt", shape=hexagon, color=black];
stat240[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.115.114.238:0, *:0}[96.7832%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.8445%)&lt;BR/&gt; 80: (1.57776%)&lt;BR/&gt; 65339: (0.0751315%)&lt;BR/&gt; 60792: (0.0751315%)&lt;BR/&gt; 60639: (0.0751315%)&gt;];
}
1093--1204[label="0.00865801;2pkt 2fpkt"];
1093--2049[label="0.010582;2pkt 2fpkt"];
1093--2064[label="1;616pkt 616fpkt"];
</description>
    <slice>
      <filter src_ip="155.115.114.238"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
1221[label="208.222.237.195;s;514pkt 514fpkt", shape=diamond, color=yellow];
2066[label="208.222.237.195;s;474pkt 474fpkt", shape=hexagon, color=black];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.222.237.195:0, *:0}[97.4708%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.4696%)&lt;BR/&gt; 80: (1.26518%)&lt;BR/&gt; 57512: (0.101215%)&lt;BR/&gt; 56597: (0.101215%)&lt;BR/&gt; 52665: (0.101215%)&gt;];
}
1221--2066[label="1;474pkt 474fpkt"];
1221--2327[label="0.00194553;1pkt 1fpkt"];
1221--2342[label="0.00194553;1pkt 1fpkt"];
2066--2327[label="0.0021097;1pkt 1fpkt"];
2066--2342[label="0.0021097;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="208.222.237.195"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
631[label="86.90.6.106;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.90.6.106:6881, 143.134.168.140:2419}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 2419: (50%)&gt;];
}
631--1634[label="1;1pkt 1fpkt"];
631--2071[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.168.140" dst_port="2419" src_ip="86.90.6.106" src_port="6881"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
986[label="96.144.97.221;s;604pkt 604fpkt", shape=diamond, color=yellow];
2078[label="96.144.97.221;s;565pkt 565fpkt", shape=hexagon, color=black];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.144.97.221:0, *:0}[94.702%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.6108%)&lt;BR/&gt; 80: (2.69461%)&lt;BR/&gt; 63780: (0.0855432%)&lt;BR/&gt; 62890: (0.0855432%)&lt;BR/&gt; 61603: (0.0855432%)&gt;];
}
986--2078[label="1;565pkt 565fpkt"];
986--2327[label="0.00496689;3pkt 3fpkt"];
986--2342[label="0.00496689;3pkt 3fpkt"];
2078--2327[label="0.00530973;3pkt 3fpkt"];
2078--2342[label="0.00530973;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="96.144.97.221"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
1110[label="209.176.145.141;s;734pkt 734fpkt", shape=diamond, color=yellow];
2079[label="209.176.145.141;s;734pkt 734fpkt", shape=hexagon, color=black];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.176.145.141:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1110--2079[label="1;734pkt 734fpkt"];
</description>
    <slice>
      <filter src_ip="209.176.145.141"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
854[label="96.176.172.135;s;12pkt 12fpkt", shape=diamond, color=yellow];
1114[label="208.18.144.93;d;10pkt 10fpkt", shape=diamond, color=yellow];
1197[label="208.16.171.144;s;961pkt 961fpkt", shape=diamond, color=yellow];
1766[label="96.176.172.135;s;8pkt 8fpkt", shape=hexagon, color=black];
2025[label="208.18.148.75;d;63pkt 63fpkt", shape=hexagon, color=black];
2039[label="208.16.171.144;s;961pkt 961fpkt", shape=hexagon, color=black];
2081[label="208.18.144.93;d;8pkt 8fpkt", shape=hexagon, color=black];
3701[label="96.176.172.135;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3780[label="208.16.171.144;961pkt 961fpkt", shape=pentagon, color=darkviolet];
5416[label="208.16.171.144;961pkt 961fpkt", shape=invtriangle, color=brown];
6199[label="208.16.171.144;960pkt 960fpkt", shape=invhouse, color=bisque];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.16.171.144:0, *:0}[92.5819%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.7629%)&lt;BR/&gt; 80: (0.386414%)&lt;BR/&gt; 3004: (0.213545%)&lt;BR/&gt; 2002: (0.213545%)&lt;BR/&gt; 443: (0.213545%)&gt;];
}
854--1081[label="0.5;6pkt 6fpkt"];
854--1114[label="0.6;6pkt 6fpkt"];
854--1766[label="1;8pkt 8fpkt"];
854--2081[label="0.5;4pkt 4fpkt"];
854--3701[label="1;12pkt 12fpkt"];
1114--1143[label="0.25;2pkt 2fpkt"];
1114--1197[label="0.1;1pkt 1fpkt"];
1114--1766[label="0.5;4pkt 4fpkt"];
1114--2039[label="0.1;1pkt 1fpkt"];
1114--2081[label="1;8pkt 8fpkt"];
1114--2113[label="0.25;2pkt 2fpkt"];
1114--3701[label="0.6;6pkt 6fpkt"];
1114--3780[label="0.1;1pkt 1fpkt"];
1114--5416[label="0.1;1pkt 1fpkt"];
1114--6199[label="0.1;1pkt 1fpkt"];
1197--1213[label="0.00833333;1pkt 1fpkt"];
1197--1389[label="0.111111;1pkt 1fpkt"];
1197--1433[label="0.00104058;1pkt 1fpkt"];
1197--1966[label="0.00561798;1pkt 1fpkt"];
1197--2025[label="0.015873;1pkt 1fpkt"];
1197--2039[label="1;961pkt 961fpkt"];
1197--2081[label="0.125;1pkt 1fpkt"];
1197--2173[label="0.00833333;1pkt 1fpkt"];
1197--2225[label="0.00104058;1pkt 1fpkt"];
1197--3780[label="1;961pkt 961fpkt"];
1197--5416[label="1;961pkt 961fpkt"];
1197--6199[label="1;960pkt 960fpkt"];
1766--2081[label="0.5;4pkt 4fpkt"];
1766--3701[label="1;8pkt 8fpkt"];
2025--2039[label="0.015873;1pkt 1fpkt"];
2025--2060[label="0.047619;3pkt 3fpkt"];
2025--2073[label="0.031746;2pkt 2fpkt"];
2025--2360[label="0.190476;12pkt 12fpkt"];
2025--2577[label="0.015873;1pkt 1fpkt"];
2025--2623[label="0.111111;7pkt 7fpkt"];
2025--2690[label="0.545455;6pkt 6fpkt"];
2025--3087[label="0.111111;1pkt 1fpkt"];
2025--3296[label="0.111111;1pkt 1fpkt"];
2025--3642[label="0.015873;1pkt 1fpkt"];
2025--3780[label="0.015873;1pkt 1fpkt"];
2025--3827[label="0.0333333;2pkt 2fpkt"];
2025--3890[label="0.047619;3pkt 3fpkt"];
2025--4116[label="0.015873;1pkt 1fpkt"];
2025--4254[label="0.5;9pkt 9fpkt"];
2025--4312[label="0.030303;1pkt 1fpkt"];
2025--4631[label="0.190476;12pkt 12fpkt"];
2025--5159[label="0.111111;1pkt 1fpkt"];
2025--5344[label="0.015873;1pkt 1fpkt"];
2025--5416[label="0.015873;1pkt 1fpkt"];
2025--5469[label="0.047619;3pkt 3fpkt"];
2025--5584[label="0.015873;1pkt 1fpkt"];
2025--5663[label="0.529412;9pkt 9fpkt"];
2025--5844[label="0.190476;12pkt 12fpkt"];
2025--6162[label="0.015873;1pkt 1fpkt"];
2025--6199[label="0.015873;1pkt 1fpkt"];
2025--6306[label="0.529412;9pkt 9fpkt"];
2039--2081[label="0.125;1pkt 1fpkt"];
2039--2173[label="0.00833333;1pkt 1fpkt"];
2039--2225[label="0.00104058;1pkt 1fpkt"];
2039--3780[label="1;961pkt 961fpkt"];
2039--5416[label="1;961pkt 961fpkt"];
2039--6199[label="1;960pkt 960fpkt"];
2081--2113[label="0.25;2pkt 2fpkt"];
2081--3701[label="0.5;4pkt 4fpkt"];
2081--3780[label="0.125;1pkt 1fpkt"];
2081--5416[label="0.125;1pkt 1fpkt"];
2081--6199[label="0.125;1pkt 1fpkt"];
3780--5416[label="1;961pkt 961fpkt"];
3780--6199[label="1;960pkt 960fpkt"];
5416--6199[label="1;960pkt 960fpkt"];
</description>
    <slice>
      <filter src_ip="208.16.171.144"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
1237[label="208.222.237.186;s;489pkt 489fpkt", shape=diamond, color=yellow];
2086[label="208.222.237.186;s;443pkt 443fpkt", shape=hexagon, color=black];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.222.237.186:0, *:0}[94.274%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.0987%)&lt;BR/&gt; 80: (2.95064%)&lt;BR/&gt; 63710: (0.107296%)&lt;BR/&gt; 53074: (0.107296%)&lt;BR/&gt; 50985: (0.107296%)&gt;];
}
1237--2086[label="1;443pkt 443fpkt"];
1237--2327[label="0.00408998;2pkt 2fpkt"];
1237--2342[label="0.00408998;2pkt 2fpkt"];
2086--2327[label="0.00451467;2pkt 2fpkt"];
2086--2342[label="0.00451467;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="208.222.237.186"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
850[label="7.219.197.241;s;103pkt 103fpkt", shape=diamond, color=yellow];
1274[label="200.162.131.85;s;42pkt 42fpkt", shape=diamond, color=yellow];
1715[label="143.38.241.172;d;164pkt 164fpkt", shape=hexagon, color=black];
3262[label="200.162.131.85;46pkt 46fpkt", shape=pentagon, color=darkviolet];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 143.38.241.172:*}[54.2662%]&lt;BR/&gt;{7.219.197.241:80, *:*}[35.1536%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2958%)&lt;BR/&gt; 1863: (0.56338%)&lt;BR/&gt; 1306: (0.422535%)&lt;BR/&gt; 1305: (0.422535%)&lt;BR/&gt; 1302: (0.422535%)&gt;];
}
850--955[label="0.75;30pkt 30fpkt"];
850--1125[label="0.107143;3pkt 3fpkt"];
850--1546[label="0.0428571;3pkt 3fpkt"];
850--1585[label="0.339806;35pkt 35fpkt"];
850--1715[label="0.0873786;9pkt 9fpkt"];
850--1838[label="0.126214;13pkt 13fpkt"];
850--1841[label="0.037037;2pkt 2fpkt"];
850--1869[label="1;96pkt 96fpkt"];
850--1939[label="0.00970874;1pkt 1fpkt"];
850--2095[label="0.107143;3pkt 3fpkt"];
850--2303[label="0.037037;2pkt 2fpkt"];
1274--1715[label="0.261905;11pkt 11fpkt"];
1274--1788[label="0.404762;17pkt 17fpkt"];
1274--3262[label="1;42pkt 42fpkt"];
1715--1869[label="0.09375;9pkt 9fpkt"];
1715--2060[label="0.0223881;3pkt 3fpkt"];
1715--2371[label="0.2;1pkt 1fpkt"];
1715--2671[label="0.165217;19pkt 19fpkt"];
1715--2741[label="0.277778;5pkt 5fpkt"];
1715--2802[label="0.1;6pkt 6fpkt"];
1715--2857[label="0.181818;2pkt 2fpkt"];
1715--3262[label="0.23913;11pkt 11fpkt"];
1715--3438[label="0.888889;16pkt 16fpkt"];
1715--3890[label="0.0188679;3pkt 3fpkt"];
1715--3963[label="0.00826446;1pkt 1fpkt"];
1715--4007[label="0.0222222;1pkt 1fpkt"];
1715--4561[label="0.1;1pkt 1fpkt"];
1715--4617[label="0.5;3pkt 3fpkt"];
1715--4635[label="0.2;1pkt 1fpkt"];
1715--4804[label="0.165217;19pkt 19fpkt"];
1715--4841[label="0.277778;5pkt 5fpkt"];
1715--5469[label="0.0189873;3pkt 3fpkt"];
1715--5522[label="0.0222222;1pkt 1fpkt"];
1715--5815[label="0.111111;1pkt 1fpkt"];
1715--5838[label="0.5;3pkt 3fpkt"];
1715--5846[label="0.25;1pkt 1fpkt"];
1715--5872[label="0.333333;1pkt 1fpkt"];
1715--5920[label="0.163793;19pkt 19fpkt"];
1715--6382[label="0.6;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="7.219.197.241" src_port="80"/>
      <filter dst_ip="143.38.241.172" src_port="80"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
1142[label="99.192.159.33;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.192.159.33:6881, 143.134.168.140:4896}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 4896: (50%)&gt;];
}
1142--1634[label="1;1pkt 1fpkt"];
1142--2112[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.168.140" dst_port="4896" src_ip="99.192.159.33" src_port="6881"/>
    </slice>
    <from sec="1068526809" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.765035,1.77753,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
346[label="197.101.124.254;s;4568pkt 4568fpkt", shape=diamond, color=yellow];
5840[label="197.101.124.254;4955pkt 4955fpkt", shape=invtriangle, color=brown];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.101.124.254:2242, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2242: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
346--1043[label="0.0555556;1pkt 1fpkt"];
346--1068[label="0.0135135;1pkt 1fpkt"];
346--1089[label="0.0147059;1pkt 1fpkt"];
346--1641[label="0.0046729;1pkt 1fpkt"];
346--1853[label="1;3076pkt 3076fpkt"];
346--1904[label="0.0555556;1pkt 1fpkt"];
346--2149[label="0.0135135;1pkt 1fpkt"];
346--2330[label="0.172483;257pkt 257fpkt"];
346--2346[label="0.172483;257pkt 257fpkt"];
346--2351[label="0.172483;257pkt 257fpkt"];
346--4619[label="1;4568pkt 4568fpkt"];
346--5840[label="1;4568pkt 4568fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="197.101.124.254" src_port="2242"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
906[label="98.119.97.115;s;85pkt 85fpkt", shape=diamond, color=yellow];
1278[label="136.93.244.197;d;90pkt 90fpkt", shape=diamond, color=yellow];
1801[label="98.119.97.115;s;81pkt 81fpkt", shape=hexagon, color=black];
2142[label="136.93.244.197;d;85pkt 85fpkt", shape=hexagon, color=black];
3532[label="98.119.97.115;85pkt 85fpkt", shape=pentagon, color=darkviolet];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.119.97.115:80, 136.93.244.197:*}[90.2174%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1784%)&lt;BR/&gt; 0: (1.17371%)&lt;BR/&gt; 1260: (0.586854%)&lt;BR/&gt; 1259: (0.586854%)&lt;BR/&gt; 1254: (0.586854%)&gt;];
}
906--1278[label="0.976471;83pkt 83fpkt"];
906--1801[label="1;81pkt 81fpkt"];
906--2142[label="0.929412;79pkt 79fpkt"];
906--3532[label="1;85pkt 85fpkt"];
1278--1801[label="0.975309;79pkt 79fpkt"];
1278--2142[label="1;85pkt 85fpkt"];
1278--2337[label="0.0111111;1pkt 1fpkt"];
1278--3532[label="0.976471;83pkt 83fpkt"];
1801--2142[label="0.975309;79pkt 79fpkt"];
1801--3532[label="1;81pkt 81fpkt"];
2142--2337[label="0.0117647;1pkt 1fpkt"];
2142--3532[label="0.929412;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.244.197" src_ip="98.119.97.115" src_port="80"/>
    </slice>
    <from sec="1068526889" usec="0"/>
    <to sec="1068527622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
389[label="128.29.213.131;s;65pkt 65fpkt", shape=diamond, color=yellow];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.29.213.131:80, 136.93.90.24:*}[50.7692%]&lt;BR/&gt;{128.29.213.131:80, 209.139.200.177:*}[26.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44815: (0.769231%)&lt;BR/&gt; 44799: (0.769231%)&lt;BR/&gt; 44786: (0.769231%)&lt;BR/&gt; 44772: (0.769231%)&gt;];
}
389--390[label="0.0153846;1pkt 1fpkt"];
389--1087[label="0.0923077;6pkt 6fpkt"];
389--1098[label="0.114754;7pkt 7fpkt"];
389--1438[label="0.0153846;1pkt 1fpkt"];
389--1499[label="0.169231;11pkt 11fpkt"];
389--1539[label="1;65pkt 65fpkt"];
389--1953[label="0.145833;7pkt 7fpkt"];
389--1977[label="0.55;33pkt 33fpkt"];
389--2226[label="0.0153846;1pkt 1fpkt"];
389--2306[label="0.659574;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.90.24" src_ip="128.29.213.131" src_port="80"/>
      <filter dst_ip="209.139.200.177" src_ip="128.29.213.131" src_port="80"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_253{
style=filled;
color=gray75;
1132[label="146.153.238.77;s;21pkt 21fpkt", shape=diamond, color=yellow];
1187[label="208.103.210.89;d;2pkt 2fpkt", shape=diamond, color=yellow];
2153[label="208.103.210.89;d;2pkt 2fpkt", shape=hexagon, color=black];
3193[label="146.153.238.77;22pkt 22fpkt", shape=pentagon, color=darkviolet];
stat253[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.238.77:0, *:0}[77.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (70.2128%)&lt;BR/&gt; 3531: (17.0213%)&lt;BR/&gt; 2895: (4.25532%)&lt;BR/&gt; 2879: (4.25532%)&lt;BR/&gt; 1249: (2.12766%)&gt;];
}
1132--1187[label="1;2pkt 2fpkt"];
1132--2153[label="1;2pkt 2fpkt"];
1132--3193[label="1;21pkt 21fpkt"];
1187--2153[label="1;2pkt 2fpkt"];
1187--3193[label="1;2pkt 2fpkt"];
2153--3193[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="146.153.238.77"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
1308[label="96.153.212.176;s;7pkt 7fpkt", shape=diamond, color=yellow];
2158[label="96.153.212.176;s;7pkt 7fpkt", shape=hexagon, color=black];
4056[label="96.153.212.176;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.153.212.176:80, 208.18.149.46:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52248: (7.14286%)&lt;BR/&gt; 52247: (7.14286%)&lt;BR/&gt; 52246: (7.14286%)&lt;BR/&gt; 52245: (7.14286%)&gt;];
}
1308--1433[label="1;7pkt 7fpkt"];
1308--2158[label="1;7pkt 7fpkt"];
1308--2225[label="1;7pkt 7fpkt"];
1308--4056[label="1;7pkt 7fpkt"];
1308--5550[label="1;6pkt 6fpkt"];
1308--6257[label="1;7pkt 7fpkt"];
2158--2225[label="1;7pkt 7fpkt"];
2158--4056[label="1;7pkt 7fpkt"];
2158--5550[label="1;6pkt 6fpkt"];
2158--6257[label="1;7pkt 7fpkt"];
4056--5550[label="1;6pkt 6fpkt"];
4056--6257[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.149.46" src_ip="96.153.212.176" src_port="80"/>
    </slice>
    <from sec="1068527460" usec="0"/>
    <to sec="1068527559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
1314[label="146.153.34.216;s;4pkt 4fpkt", shape=diamond, color=yellow];
1315[label="197.41.147.3;d;4pkt 4fpkt", shape=diamond, color=yellow];
2160[label="146.153.34.216;s;4pkt 4fpkt", shape=hexagon, color=black];
2161[label="197.41.147.3;d;4pkt 4fpkt", shape=hexagon, color=black];
4364[label="146.153.34.216;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5717[label="146.153.34.216;3pkt 3fpkt", shape=invtriangle, color=brown];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.34.216:80, 197.41.147.3:51975}[25%]&lt;BR/&gt;{146.153.34.216:80, 197.41.147.3:51979}[25%]&lt;BR/&gt;{146.153.34.216:80, 197.41.147.3:51980}[25%]&lt;BR/&gt;{146.153.34.216:80, 197.41.147.3:51981}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51981: (13.0435%)&lt;BR/&gt; 51980: (13.0435%)&lt;BR/&gt; 51979: (13.0435%)&lt;BR/&gt; 51975: (10.8696%)&gt;];
}
1314--1315[label="1;4pkt 4fpkt"];
1314--2160[label="1;4pkt 4fpkt"];
1314--2161[label="1;4pkt 4fpkt"];
1314--4364[label="1;4pkt 4fpkt"];
1314--5717[label="1;3pkt 3fpkt"];
1315--2160[label="1;4pkt 4fpkt"];
1315--2161[label="1;4pkt 4fpkt"];
1315--4364[label="1;4pkt 4fpkt"];
1315--5717[label="1;3pkt 3fpkt"];
2160--2161[label="1;4pkt 4fpkt"];
2160--4364[label="1;4pkt 4fpkt"];
2160--5717[label="1;3pkt 3fpkt"];
2161--4364[label="1;4pkt 4fpkt"];
2161--5717[label="1;3pkt 3fpkt"];
4364--5717[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="197.41.147.3" dst_port="51981" src_ip="146.153.34.216" src_port="80"/>
      <filter dst_ip="197.41.147.3" dst_port="51980" src_ip="146.153.34.216" src_port="80"/>
      <filter dst_ip="197.41.147.3" dst_port="51979" src_ip="146.153.34.216" src_port="80"/>
      <filter dst_ip="197.41.147.3" dst_port="51975" src_ip="146.153.34.216" src_port="80"/>
    </slice>
    <from sec="1068527486" usec="0"/>
    <to sec="1068527511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
711[label="200.162.198.84;s;17pkt 17fpkt", shape=diamond, color=yellow];
795[label="209.176.132.252;d;51pkt 51fpkt", shape=diamond, color=yellow];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.170.102.10:80, 209.176.132.252:*}[50%]&lt;BR/&gt;{200.162.198.84:80, *:*}[25%]&lt;BR/&gt;{98.18.164.1:80, 209.176.132.252:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2647%)&lt;BR/&gt; 0: (1.47059%)&lt;BR/&gt; 39988: (0.735294%)&lt;BR/&gt; 39986: (0.735294%)&lt;BR/&gt; 38382: (0.735294%)&gt;];
}
711--774[label="0.588235;10pkt 10fpkt"];
795--1719[label="1;51pkt 51fpkt"];
795--2138[label="0.313725;16pkt 16fpkt"];
795--2261[label="1;51pkt 51fpkt"];
795--2462[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter src_ip="200.162.198.84" src_port="80"/>
      <filter dst_ip="209.176.132.252" src_ip="199.170.102.10" src_port="80"/>
      <filter dst_ip="209.176.132.252" src_ip="98.18.164.1" src_port="80"/>
    </slice>
    <from sec="1068527003" usec="0"/>
    <to sec="1068527169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
350[label="198.192.24.248;s;2pkt 2fpkt", shape=diamond, color=yellow];
2174[label="198.192.24.248;s;2pkt 2fpkt", shape=hexagon, color=black];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.192.24.248:80, 208.31.228.10:32120}[50%]&lt;BR/&gt;{198.192.24.248:80, 208.31.228.10:32269}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32269: (25%)&lt;BR/&gt; 32120: (25%)&gt;];
}
350--2174[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.10" dst_port="32269" src_ip="198.192.24.248" src_port="80"/>
      <filter dst_ip="208.31.228.10" dst_port="32120" src_ip="198.192.24.248" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
976[label="208.145.14.137;d;181pkt 181fpkt", shape=diamond, color=yellow];
2177[label="208.145.14.137;d;181pkt 181fpkt", shape=hexagon, color=black];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 208.145.14.137:25}[50.8287%]&lt;BR/&gt;{*:0, 208.145.14.137:0}[33.7017%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (33.7017%)&lt;BR/&gt; 25: (25.4144%)&lt;BR/&gt; 80: (4.14365%)&lt;BR/&gt; 135: (3.31492%)&lt;BR/&gt; 2752: (0.552486%)&gt;];
}
976--1230[label="0.00552486;1pkt 1fpkt"];
976--1399[label="0.00552486;1pkt 1fpkt"];
976--1940[label="0.00552486;1pkt 1fpkt"];
976--2177[label="1;181pkt 181fpkt"];
976--2337[label="0.00552486;1pkt 1fpkt"];
976--2343[label="0.00552486;1pkt 1fpkt"];
976--2349[label="0.00552486;1pkt 1fpkt"];
976--2790[label="0.00628931;1pkt 1fpkt"];
976--2834[label="0.00552486;1pkt 1fpkt"];
976--3243[label="0.00552486;1pkt 1fpkt"];
976--4133[label="0.00552486;1pkt 1fpkt"];
976--4868[label="0.00632911;1pkt 1fpkt"];
976--5130[label="0.00552486;1pkt 1fpkt"];
976--6076[label="0.00552486;1pkt 1fpkt"];
2177--2337[label="0.00552486;1pkt 1fpkt"];
2177--2343[label="0.00552486;1pkt 1fpkt"];
2177--2349[label="0.00552486;1pkt 1fpkt"];
2177--2790[label="0.00628931;1pkt 1fpkt"];
2177--2834[label="0.00552486;1pkt 1fpkt"];
2177--3243[label="0.00552486;1pkt 1fpkt"];
2177--4133[label="0.00552486;1pkt 1fpkt"];
2177--4868[label="0.00632911;1pkt 1fpkt"];
2177--5130[label="0.00552486;1pkt 1fpkt"];
2177--6076[label="0.00552486;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.145.14.137" dst_port="25"/>
      <filter dst_ip="208.145.14.137"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
1276[label="146.153.70.197;d;20pkt 20fpkt", shape=diamond, color=yellow];
2140[label="146.153.70.197;d;20pkt 20fpkt", shape=hexagon, color=black];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.84.231.156:*, 146.153.70.197:8000}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 60162: (2.5%)&lt;BR/&gt; 58744: (2.5%)&lt;BR/&gt; 55942: (2.5%)&lt;BR/&gt; 54844: (2.5%)&gt;];
}
1276--2140[label="1;20pkt 20fpkt"];
1276--2186[label="0.9;18pkt 18fpkt"];
1276--3896[label="0.9;18pkt 18fpkt"];
1276--5474[label="0.85;17pkt 17fpkt"];
1276--6224[label="0.85;17pkt 17fpkt"];
2140--2186[label="0.9;18pkt 18fpkt"];
2140--3896[label="0.9;18pkt 18fpkt"];
2140--5474[label="0.85;17pkt 17fpkt"];
2140--6224[label="0.85;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="146.153.70.197" dst_port="8000" src_ip="96.84.231.156"/>
    </slice>
    <from sec="1068526857" usec="0"/>
    <to sec="1068527621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
1354[label="96.84.231.156;d;18pkt 18fpkt", shape=diamond, color=yellow];
1384[label="146.153.70.197;s;18pkt 18fpkt", shape=diamond, color=yellow];
2196[label="146.153.70.197;s;18pkt 18fpkt", shape=hexagon, color=black];
4233[label="146.153.70.197;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.70.197:8000, 96.84.231.156:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 60162: (2.77778%)&lt;BR/&gt; 58744: (2.77778%)&lt;BR/&gt; 55942: (2.77778%)&lt;BR/&gt; 54844: (2.77778%)&gt;];
}
1354--1384[label="1;18pkt 18fpkt"];
1354--2196[label="1;18pkt 18fpkt"];
1354--4233[label="1;18pkt 18fpkt"];
1384--2196[label="1;18pkt 18fpkt"];
1384--4233[label="1;18pkt 18fpkt"];
2196--4233[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="96.84.231.156" src_ip="146.153.70.197" src_port="8000"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
1044[label="1.180.177.93;s;6pkt 6fpkt", shape=diamond, color=yellow];
2200[label="1.180.177.93;s;6pkt 6fpkt", shape=hexagon, color=black];
3336[label="1.180.177.93;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.180.177.93:*, 208.31.228.18:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 1987: (8.33333%)&lt;BR/&gt; 1933: (8.33333%)&lt;BR/&gt; 1767: (8.33333%)&lt;BR/&gt; 1753: (8.33333%)&gt;];
}
1044--1486[label="1;6pkt 6fpkt"];
1044--2200[label="1;6pkt 6fpkt"];
1044--3336[label="1;6pkt 6fpkt"];
1044--5180[label="1;5pkt 5fpkt"];
2200--3336[label="1;6pkt 6fpkt"];
2200--5180[label="1;5pkt 5fpkt"];
3336--5180[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.18" dst_port="1214" src_ip="1.180.177.93"/>
    </slice>
    <from sec="1068526954" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
1283[label="86.237.147.67;s;1pkt 1fpkt", shape=diamond, color=yellow];
2205[label="86.237.147.67;s;1pkt 1fpkt", shape=hexagon, color=black];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.237.147.67:1921, 208.31.228.85:3148}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3148: (50%)&lt;BR/&gt; 1921: (50%)&gt;];
}
1283--2044[label="1;1pkt 1fpkt"];
1283--2205[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.85" dst_port="3148" src_ip="86.237.147.67" src_port="1921"/>
    </slice>
    <from sec="1068527183" usec="0"/>
    <to sec="1068527627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
1396[label="136.93.137.182;d;23pkt 23fpkt", shape=diamond, color=yellow];
1397[label="98.138.6.167;s;23pkt 23fpkt", shape=diamond, color=yellow];
2209[label="136.93.137.182;d;23pkt 23fpkt", shape=hexagon, color=black];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.138.6.167:80, 136.93.137.182:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49188: (2.17391%)&lt;BR/&gt; 49187: (2.17391%)&lt;BR/&gt; 49186: (2.17391%)&lt;BR/&gt; 49184: (2.17391%)&gt;];
}
1396--1397[label="1;23pkt 23fpkt"];
1396--2209[label="1;23pkt 23fpkt"];
1397--2209[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.137.182" src_ip="98.138.6.167" src_port="80"/>
    </slice>
    <from sec="1068527309" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
811[label="219.179.120.100;s;3pkt 3fpkt", shape=diamond, color=yellow];
1819[label="219.179.120.100;s;2pkt 2fpkt", shape=hexagon, color=black];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.179.120.100:60141, 136.93.122.25:53}[33.3333%]&lt;BR/&gt;{219.179.120.100:53, 136.93.75.81:32777}[33.3333%]&lt;BR/&gt;{219.179.120.100:80, 136.93.75.128:37765}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (30%)&lt;BR/&gt; 37765: (20%)&lt;BR/&gt; 32777: (20%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 60141: (10%)&gt;];
}
811--1160[label="0.333333;1pkt 1fpkt"];
811--1819[label="1;2pkt 2fpkt"];
811--2006[label="0.333333;1pkt 1fpkt"];
811--3403[label="1;3pkt 3fpkt"];
811--5219[label="1;3pkt 3fpkt"];
1819--2006[label="0.5;1pkt 1fpkt"];
1819--3403[label="1;2pkt 2fpkt"];
1819--5219[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.75.128" dst_port="37765" src_ip="219.179.120.100" src_port="80"/>
      <filter dst_ip="136.93.75.81" dst_port="32777" src_ip="219.179.120.100" src_port="53"/>
      <filter dst_ip="136.93.122.25" dst_port="53" src_ip="219.179.120.100" src_port="60141"/>
    </slice>
    <from sec="1068527100" usec="0"/>
    <to sec="1068527467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
3227[label="146.153.51.82;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5119[label="146.153.51.82;17pkt 17fpkt", shape=invtriangle, color=brown];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.51.82:*, 220.74.35.188:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.1429%)&lt;BR/&gt; 1890: (2.85714%)&lt;BR/&gt; 1889: (2.85714%)&lt;BR/&gt; 1888: (2.85714%)&lt;BR/&gt; 1887: (2.85714%)&gt;];
}
3227--5119[label="1;17pkt 17fpkt"];
3227--6071[label="1;17pkt 17fpkt"];
5119--6071[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="220.74.35.188" dst_port="80" src_ip="146.153.51.82"/>
    </slice>
    <from sec="1068526829" usec="0"/>
    <to sec="1068527688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
749[label="4.10.100.88;s;106pkt 106fpkt", shape=diamond, color=yellow];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.10.100.88:80, 208.169.14.64:*}[36.7925%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1193: (0.943396%)&lt;BR/&gt; 65374: (0.471698%)&lt;BR/&gt; 65155: (0.471698%)&lt;BR/&gt; 65133: (0.471698%)&gt;];
}
749--899[label="0.0188679;2pkt 2fpkt"];
749--991[label="0.285714;8pkt 8fpkt"];
749--1035[label="0.00943396;1pkt 1fpkt"];
749--1135[label="0.0283019;3pkt 3fpkt"];
749--1680[label="1;80pkt 80fpkt"];
749--1827[label="0.25;1pkt 1fpkt"];
749--1899[label="0.0188679;2pkt 2fpkt"];
749--1901[label="0.0104167;1pkt 1fpkt"];
749--1971[label="0.130435;3pkt 3fpkt"];
749--2105[label="0.0283019;3pkt 3fpkt"];
749--2298[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.169.14.64" src_ip="4.10.100.88" src_port="80"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
308[label="7.65.251.43;s;3677pkt 3677fpkt", shape=diamond, color=yellow];
1264[label="161.29.46.236;d;107pkt 107fpkt", shape=diamond, color=yellow];
1647[label="7.65.251.43;s;3378pkt 3378fpkt", shape=hexagon, color=black];
2122[label="161.29.46.236;d;107pkt 107fpkt", shape=hexagon, color=black];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.65.251.43:*, 161.29.149.95:53}[96.3709%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.2116%)&lt;BR/&gt; 25: (1.69212%)&lt;BR/&gt; 0: (0.137571%)&lt;BR/&gt; 60722: (0.0275141%)&lt;BR/&gt; 58598: (0.0275141%)&gt;];
}
308--359[label="0.000604595;1pkt 1fpkt"];
308--507[label="0.0021322;2pkt 2fpkt"];
308--1140[label="0.00299401;1pkt 1fpkt"];
308--1264[label="0.0841121;9pkt 9fpkt"];
308--1322[label="0.00595238;1pkt 1fpkt"];
308--1457[label="0.000604595;1pkt 1fpkt"];
308--1647[label="1;3378pkt 3378fpkt"];
308--1867[label="0.0021322;2pkt 2fpkt"];
308--2047[label="0.908893;3342pkt 3342fpkt"];
308--2122[label="0.0841121;9pkt 9fpkt"];
308--2170[label="0.00595238;1pkt 1fpkt"];
308--2189[label="0.00299401;1pkt 1fpkt"];
308--2309[label="0.119403;8pkt 8fpkt"];
308--2326[label="0.219142;332pkt 332fpkt"];
308--2336[label="0.111932;197pkt 197fpkt"];
308--2341[label="0.219142;332pkt 332fpkt"];
1264--1312[label="0.00934579;1pkt 1fpkt"];
1264--1647[label="0.0747664;8pkt 8fpkt"];
1264--1774[label="0.0470588;4pkt 4fpkt"];
1264--1849[label="0.0277778;2pkt 2fpkt"];
1264--2122[label="1;107pkt 107fpkt"];
1264--2159[label="0.00934579;1pkt 1fpkt"];
1264--2309[label="1;67pkt 67fpkt"];
1264--2321[label="0.00934579;1pkt 1fpkt"];
1264--2511[label="0.1;1pkt 1fpkt"];
1264--3624[label="0.0222222;1pkt 1fpkt"];
1264--3955[label="0.05;1pkt 1fpkt"];
1264--3960[label="0.1;1pkt 1fpkt"];
1264--4150[label="0.0412371;4pkt 4fpkt"];
1264--4489[label="0.0266667;2pkt 2fpkt"];
1264--4521[label="0.236364;13pkt 13fpkt"];
1264--5336[label="0.0227273;1pkt 1fpkt"];
1264--5602[label="0.0412371;4pkt 4fpkt"];
1647--1867[label="0.0021322;2pkt 2fpkt"];
1647--2047[label="0.989343;3342pkt 3342fpkt"];
1647--2122[label="0.0747664;8pkt 8fpkt"];
1647--2170[label="0.00595238;1pkt 1fpkt"];
1647--2189[label="0.00299401;1pkt 1fpkt"];
1647--2309[label="0.119403;8pkt 8fpkt"];
1647--2326[label="0.219142;332pkt 332fpkt"];
1647--2336[label="0.0573864;101pkt 101fpkt"];
1647--2341[label="0.219142;332pkt 332fpkt"];
2122--2159[label="0.00934579;1pkt 1fpkt"];
2122--2309[label="1;67pkt 67fpkt"];
2122--2321[label="0.00934579;1pkt 1fpkt"];
2122--2511[label="0.1;1pkt 1fpkt"];
2122--3624[label="0.0222222;1pkt 1fpkt"];
2122--3955[label="0.05;1pkt 1fpkt"];
2122--3960[label="0.1;1pkt 1fpkt"];
2122--4150[label="0.0412371;4pkt 4fpkt"];
2122--4489[label="0.0266667;2pkt 2fpkt"];
2122--4521[label="0.236364;13pkt 13fpkt"];
2122--5336[label="0.0227273;1pkt 1fpkt"];
2122--5602[label="0.0412371;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.149.95" dst_port="53" src_ip="7.65.251.43"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
1116[label="164.228.125.178;d;307pkt 307fpkt", shape=diamond, color=yellow];
1150[label="4.41.179.177;s;30pkt 30fpkt", shape=diamond, color=yellow];
1204[label="208.31.237.133;d;231pkt 231fpkt", shape=diamond, color=yellow];
1242[label="146.153.30.154;s;157pkt 157fpkt", shape=diamond, color=yellow];
1891[label="146.153.145.176;d;35pkt 35fpkt", shape=hexagon, color=black];
2069[label="208.31.241.196;d;398pkt 398fpkt", shape=hexagon, color=black];
3304[label="193.106.147.89;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3873[label="146.153.30.154;176pkt 176fpkt", shape=pentagon, color=darkviolet];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.228.125.178:*}[26.5571%]&lt;BR/&gt;{*:53, *:*}[25.2595%]&lt;BR/&gt;{*:*, 208.31.241.196:53}[22.4048%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (39.5131%)&lt;BR/&gt; 0: (12.2846%)&lt;BR/&gt; 37742: (11.4607%)&lt;BR/&gt; 1032: (5.80524%)&lt;BR/&gt; 80: (4.0824%)&gt;];
}
1116--1137[label="0.016129;1pkt 1fpkt"];
1116--1164[label="0.010101;1pkt 1fpkt"];
1116--1238[label="0.0178571;1pkt 1fpkt"];
1116--1332[label="0.0188679;1pkt 1fpkt"];
1116--1341[label="0.0166667;1pkt 1fpkt"];
1116--1351[label="0.0119048;1pkt 1fpkt"];
1116--1399[label="0.0218978;6pkt 6fpkt"];
1116--1988[label="0.016129;1pkt 1fpkt"];
1116--2083[label="1;307pkt 307fpkt"];
1116--2326[label="0.0130293;4pkt 4fpkt"];
1116--2336[label="0.0488599;15pkt 15fpkt"];
1116--2341[label="0.0130293;4pkt 4fpkt"];
1116--2359[label="0.025;1pkt 1fpkt"];
1116--2454[label="0.0344828;1pkt 1fpkt"];
1116--2566[label="0.0263158;1pkt 1fpkt"];
1116--2702[label="0.0416667;1pkt 1fpkt"];
1116--2726[label="0.00943396;1pkt 1fpkt"];
1116--2756[label="0.0117647;1pkt 1fpkt"];
1116--2834[label="0.0218182;6pkt 6fpkt"];
1116--2872[label="0.025;1pkt 1fpkt"];
1116--2908[label="0.0163934;1pkt 1fpkt"];
1116--2929[label="0.00917431;1pkt 1fpkt"];
1116--3251[label="0.016129;1pkt 1fpkt"];
1116--3351[label="0.0645161;2pkt 2fpkt"];
1116--3481[label="0.0175439;1pkt 1fpkt"];
1116--3601[label="0.0188679;1pkt 1fpkt"];
1116--3688[label="0.0277778;1pkt 1fpkt"];
1116--3714[label="0.02;1pkt 1fpkt"];
1116--3734[label="0.0416667;1pkt 1fpkt"];
1116--3784[label="0.02;1pkt 1fpkt"];
1116--3825[label="0.0338983;2pkt 2fpkt"];
1116--3874[label="0.0344828;1pkt 1fpkt"];
1116--3974[label="0.04;1pkt 1fpkt"];
1116--3977[label="0.03125;1pkt 1fpkt"];
1116--4053[label="0.0204082;1pkt 1fpkt"];
1116--4188[label="0.0357143;1pkt 1fpkt"];
1116--4206[label="0.0555556;1pkt 1fpkt"];
1116--4241[label="0.0322581;1pkt 1fpkt"];
1116--4295[label="0.0140845;1pkt 1fpkt"];
1116--4539[label="0.0151515;1pkt 1fpkt"];
1116--4630[label="0.025;1pkt 1fpkt"];
1116--4742[label="0.0263158;1pkt 1fpkt"];
1116--4818[label="0.04;1pkt 1fpkt"];
1116--4939[label="0.0166667;1pkt 1fpkt"];
1116--5135[label="0.016129;1pkt 1fpkt"];
1116--5259[label="0.0178571;1pkt 1fpkt"];
1116--5323[label="0.0188679;1pkt 1fpkt"];
1116--5370[label="0.0277778;1pkt 1fpkt"];
1116--5435[label="0.0344828;2pkt 2fpkt"];
1116--5506[label="0.04;1pkt 1fpkt"];
1116--5508[label="0.03125;1pkt 1fpkt"];
1116--5547[label="0.0208333;1pkt 1fpkt"];
1116--5635[label="0.0588235;1pkt 1fpkt"];
1116--5685[label="0.0142857;1pkt 1fpkt"];
1116--5802[label="0.0151515;1pkt 1fpkt"];
1116--5902[label="0.0263158;1pkt 1fpkt"];
1116--5995[label="0.0163934;1pkt 1fpkt"];
1116--6154[label="0.0188679;1pkt 1fpkt"];
1116--6256[label="0.0204082;1pkt 1fpkt"];
1116--6295[label="0.0588235;1pkt 1fpkt"];
1150--1322[label="0.0333333;1pkt 1fpkt"];
1150--1567[label="0.0333333;1pkt 1fpkt"];
1150--1891[label="0.733333;22pkt 22fpkt"];
1150--2069[label="0.0333333;1pkt 1fpkt"];
1150--2070[label="0.0333333;1pkt 1fpkt"];
1150--2170[label="0.0333333;1pkt 1fpkt"];
1150--2327[label="0.0666667;2pkt 2fpkt"];
1150--2336[label="0.1;3pkt 3fpkt"];
1150--2342[label="0.0666667;2pkt 2fpkt"];
1150--4064[label="1;30pkt 30fpkt"];
1204--1229[label="0.0103093;1pkt 1fpkt"];
1204--1332[label="0.0188679;1pkt 1fpkt"];
1204--1849[label="0.0138889;1pkt 1fpkt"];
1204--2049[label="1;189pkt 189fpkt"];
1204--2064[label="0.00865801;2pkt 2fpkt"];
1204--2336[label="0.030303;7pkt 7fpkt"];
1204--2337[label="0.004329;1pkt 1fpkt"];
1204--2343[label="0.004329;1pkt 1fpkt"];
1204--2349[label="0.004329;1pkt 1fpkt"];
1204--3057[label="0.0103093;1pkt 1fpkt"];
1204--3481[label="0.0175439;1pkt 1fpkt"];
1204--3551[label="0.0285714;1pkt 1fpkt"];
1204--3581[label="0.0769231;1pkt 1fpkt"];
1204--3688[label="0.0277778;1pkt 1fpkt"];
1204--3974[label="0.04;1pkt 1fpkt"];
1204--4000[label="0.04;1pkt 1fpkt"];
1204--4199[label="0.0638298;3pkt 3fpkt"];
1204--4295[label="0.0140845;1pkt 1fpkt"];
1204--4435[label="0.047619;1pkt 1fpkt"];
1204--5259[label="0.0178571;1pkt 1fpkt"];
1204--5298[label="0.0294118;1pkt 1fpkt"];
1204--5311[label="0.0833333;1pkt 1fpkt"];
1204--5370[label="0.0277778;1pkt 1fpkt"];
1204--5506[label="0.04;1pkt 1fpkt"];
1204--5630[label="0.0638298;3pkt 3fpkt"];
1204--5685[label="0.0142857;1pkt 1fpkt"];
1242--2094[label="1;150pkt 150fpkt"];
1242--2326[label="0.0700637;11pkt 11fpkt"];
1242--2334[label="0.00636943;1pkt 1fpkt"];
1242--2336[label="0.171975;27pkt 27fpkt"];
1242--2341[label="0.0700637;11pkt 11fpkt"];
1242--3873[label="0.993631;156pkt 156fpkt"];
1891--2327[label="0.0857143;3pkt 3fpkt"];
1891--2342[label="0.0857143;3pkt 3fpkt"];
1891--2767[label="0.0285714;1pkt 1fpkt"];
1891--2837[label="0.0571429;2pkt 2fpkt"];
1891--2929[label="0.0571429;2pkt 2fpkt"];
1891--2970[label="0.0285714;1pkt 1fpkt"];
1891--3985[label="0.0571429;2pkt 2fpkt"];
1891--4064[label="0.6875;22pkt 22fpkt"];
1891--4895[label="0.0571429;2pkt 2fpkt"];
1891--4981[label="0.0285714;1pkt 1fpkt"];
1891--5514[label="0.0571429;2pkt 2fpkt"];
1891--5971[label="0.0571429;2pkt 2fpkt"];
1891--6244[label="0.0571429;2pkt 2fpkt"];
2069--2326[label="0.0502513;20pkt 20fpkt"];
2069--2327[label="0.00502513;2pkt 2fpkt"];
2069--2336[label="0.0477387;19pkt 19fpkt"];
2069--2341[label="0.0502513;20pkt 20fpkt"];
2069--2342[label="0.00502513;2pkt 2fpkt"];
2069--2343[label="0.00502513;2pkt 2fpkt"];
2069--2349[label="0.00502513;2pkt 2fpkt"];
2069--2834[label="0.0181818;5pkt 5fpkt"];
2069--3409[label="0.00793651;1pkt 1fpkt"];
2069--3459[label="0.0294118;1pkt 1fpkt"];
2069--3810[label="0.0454545;1pkt 1fpkt"];
2069--4000[label="0.04;1pkt 1fpkt"];
2069--4064[label="0.03125;1pkt 1fpkt"];
2069--5224[label="0.008;1pkt 1fpkt"];
2069--5247[label="0.030303;1pkt 1fpkt"];
3304--5163[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.228.125.178"/>
      <filter src_port="53"/>
      <filter dst_ip="208.31.241.196" dst_port="53"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
240[label="204.39.144.140;s;132pkt 132fpkt", shape=diamond, color=yellow];
960[label="96.84.231.155;s;30pkt 30fpkt", shape=diamond, color=yellow];
1481[label="204.39.144.140;s;132pkt 132fpkt", shape=hexagon, color=black];
1936[label="96.84.231.155;s;22pkt 22fpkt", shape=hexagon, color=black];
3055[label="7.138.165.65;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3817[label="7.234.117.148;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5025[label="7.138.165.65;13pkt 13fpkt", shape=invtriangle, color=brown];
5432[label="7.234.117.148;9pkt 9fpkt", shape=invtriangle, color=brown];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.39.144.140:*, 208.31.196.142:80}[37.8378%]&lt;BR/&gt;{204.39.144.140:*, 143.38.3.209:80}[33.5135%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60669: (0.277008%)&lt;BR/&gt; 59654: (0.277008%)&lt;BR/&gt; 58482: (0.277008%)&lt;BR/&gt; 56637: (0.277008%)&gt;];
}
240--647[label="0.530303;70pkt 70fpkt"];
240--1481[label="1;132pkt 132fpkt"];
240--1683[label="0.530303;70pkt 70fpkt"];
240--2040[label="0.765432;62pkt 62fpkt"];
240--2327[label="0.181818;24pkt 24fpkt"];
240--2342[label="0.181818;24pkt 24fpkt"];
240--3748[label="1;132pkt 132fpkt"];
240--5399[label="0.992424;131pkt 131fpkt"];
240--6192[label="1;132pkt 132fpkt"];
960--1936[label="1;22pkt 22fpkt"];
960--1968[label="0.966667;29pkt 29fpkt"];
960--2327[label="0.1;3pkt 3fpkt"];
960--2342[label="0.1;3pkt 3fpkt"];
960--3887[label="1;30pkt 30fpkt"];
960--5468[label="1;30pkt 30fpkt"];
960--6222[label="0.966667;29pkt 29fpkt"];
1481--1683[label="0.530303;70pkt 70fpkt"];
1481--2040[label="0.765432;62pkt 62fpkt"];
1481--2327[label="0.181818;24pkt 24fpkt"];
1481--2342[label="0.181818;24pkt 24fpkt"];
1481--3748[label="1;132pkt 132fpkt"];
1481--5399[label="0.992424;131pkt 131fpkt"];
1481--6192[label="1;132pkt 132fpkt"];
1936--1968[label="0.954545;21pkt 21fpkt"];
1936--2327[label="0.136364;3pkt 3fpkt"];
1936--2342[label="0.136364;3pkt 3fpkt"];
1936--3887[label="1;22pkt 22fpkt"];
1936--5468[label="1;22pkt 22fpkt"];
1936--6222[label="0.954545;21pkt 21fpkt"];
3055--5025[label="1;13pkt 13fpkt"];
3055--6030[label="1;12pkt 12fpkt"];
3817--5432[label="1;9pkt 9fpkt"];
3817--6207[label="1;9pkt 9fpkt"];
5025--6030[label="1;12pkt 12fpkt"];
5432--6207[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.196.142" dst_port="80" src_ip="204.39.144.140"/>
      <filter dst_ip="143.38.3.209" dst_port="80" src_ip="204.39.144.140"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
1404[label="197.206.4.71;s;256pkt 256fpkt", shape=diamond, color=yellow];
3122[label="197.206.4.71;256pkt 256fpkt", shape=pentagon, color=darkviolet];
5061[label="197.206.4.71;256pkt 256fpkt", shape=invtriangle, color=brown];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.206.4.71:*, *:139}[99.2188%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.6094%)&lt;BR/&gt; 0: (0.78125%)&lt;BR/&gt; 2511: (0.195312%)&lt;BR/&gt; 2510: (0.195312%)&lt;BR/&gt; 2509: (0.195312%)&gt;];
}
1404--2338[label="0.90625;232pkt 232fpkt"];
1404--3122[label="1;256pkt 256fpkt"];
1404--5061[label="1;256pkt 256fpkt"];
3122--5061[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="197.206.4.71"/>
    </slice>
    <from sec="1068527530" usec="0"/>
    <to sec="1068527580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
102[label="1.183.195.80s;3158pkt 3158fpkt", shape=rectangle, color=red];
110[label="0.62.136.226s;5982pkt 5982fpkt", shape=rectangle, color=red];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.62.136.226:*, *:135}[65.4486%]&lt;BR/&gt;{1.183.195.80:*, *:135}[34.5514%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4869: (0.0164114%)&lt;BR/&gt; 4868: (0.0164114%)&lt;BR/&gt; 4867: (0.0164114%)&lt;BR/&gt; 4866: (0.0164114%)&gt;];
}
102--125[label="0.0376821;119pkt 119fpkt"];
102--126[label="0.0376821;119pkt 119fpkt"];
102--137[label="0.0373654;118pkt 118fpkt"];
102--143[label="0.039582;125pkt 125fpkt"];
102--148[label="0.0376821;119pkt 119fpkt"];
102--173[label="0.0376821;119pkt 119fpkt"];
102--174[label="0.0376821;119pkt 119fpkt"];
102--185[label="0.0373654;118pkt 118fpkt"];
102--191[label="0.039582;125pkt 125fpkt"];
102--196[label="0.0376821;119pkt 119fpkt"];
102--368[label="1;3158pkt 3158fpkt"];
102--1519[label="0.496833;1569pkt 1569fpkt"];
110--113[label="0.0278884;140pkt 140fpkt"];
110--124[label="0.0136395;60pkt 60fpkt"];
110--125[label="0.0258907;117pkt 117fpkt"];
110--126[label="0.0221926;100pkt 100fpkt"];
110--135[label="0.0263158;120pkt 120fpkt"];
110--137[label="0.025226;120pkt 120fpkt"];
110--142[label="0.0297009;139pkt 139fpkt"];
110--143[label="0.0212269;100pkt 100fpkt"];
110--144[label="0.0266241;125pkt 125fpkt"];
110--148[label="0.0232176;99pkt 99fpkt"];
110--165[label="0.0278884;140pkt 140fpkt"];
110--169[label="0.015748;2pkt 2fpkt"];
110--170[label="0.0236446;99pkt 99fpkt"];
110--172[label="0.0136395;60pkt 60fpkt"];
110--173[label="0.0258907;117pkt 117fpkt"];
110--174[label="0.0221926;100pkt 100fpkt"];
110--183[label="0.0263158;120pkt 120fpkt"];
110--185[label="0.025226;120pkt 120fpkt"];
110--190[label="0.0297009;139pkt 139fpkt"];
110--191[label="0.0212269;100pkt 100fpkt"];
110--192[label="0.0266241;125pkt 125fpkt"];
110--196[label="0.0232176;99pkt 99fpkt"];
110--208[label="0.0278884;140pkt 140fpkt"];
110--238[label="1;5982pkt 5982fpkt"];
110--1423[label="0.700936;4193pkt 4193fpkt"];
110--2337[label="0.0834169;499pkt 499fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="0.62.136.226"/>
      <filter dst_port="135" src_ip="1.183.195.80"/>
    </slice>
    <from sec="1068527032" usec="0"/>
    <to sec="1068527623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.116.5.0"/>
    </slice>
    <from sec="1068526818" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.58.21.0"/>
    </slice>
    <from sec="1068527282" usec="0"/>
    <to sec="1068527291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
1305[label="202.201.172.0;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.201.172.0:80, 208.18.149.46:52002}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52002: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1305--1433[label="1;1pkt 1fpkt"];
1305--2225[label="1;1pkt 1fpkt"];
1305--2358[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.149.46" dst_port="52002" src_ip="202.201.172.0" src_port="80"/>
    </slice>
    <from sec="1068527442" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.18.164.1"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
2375[label="204.128.6.2;109pkt 109fpkt", shape=pentagon, color=darkviolet];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.128.6.2:0, *:0}[99.0826%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.0826%)&lt;BR/&gt; 1739: (0.458716%)&lt;BR/&gt; 80: (0.458716%)&gt;];
}
</description>
    <slice>
      <filter src_ip="204.128.6.2"/>
    </slice>
    <from sec="1068526823" usec="0"/>
    <to sec="1068527658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
2377[label="96.136.13.2;189pkt 189fpkt", shape=pentagon, color=darkviolet];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.136.13.2:0, *:0}[96.8254%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.8254%)&lt;BR/&gt; 80: (1.5873%)&lt;BR/&gt; 46023: (0.26455%)&lt;BR/&gt; 42115: (0.26455%)&lt;BR/&gt; 35650: (0.26455%)&gt;];
}
</description>
    <slice>
      <filter src_ip="96.136.13.2"/>
    </slice>
    <from sec="1068526807" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.196.81.2"/>
    </slice>
    <from sec="1068526821" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.152.212.2"/>
    </slice>
    <from sec="1068527293" usec="0"/>
    <to sec="1068527308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
2389[label="197.96.244.2;128pkt 128fpkt", shape=pentagon, color=darkviolet];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.96.244.2:0, *:0}[92.1875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.1875%)&lt;BR/&gt; 80: (3.125%)&lt;BR/&gt; 135: (0.78125%)&lt;BR/&gt; 42894: (0.390625%)&lt;BR/&gt; 42140: (0.390625%)&gt;];
}
</description>
    <slice>
      <filter src_ip="197.96.244.2"/>
    </slice>
    <from sec="1068526840" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_296{
style=filled;
color=gray75;
2394[label="6.115.74.3;308pkt 308fpkt", shape=pentagon, color=darkviolet];
stat296[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.115.74.3:0, *:0}[96.7532%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.7532%)&lt;BR/&gt; 80: (1.62338%)&lt;BR/&gt; 40187: (0.162338%)&lt;BR/&gt; 34004: (0.162338%)&lt;BR/&gt; 30111: (0.162338%)&gt;];
}
</description>
    <slice>
      <filter src_ip="6.115.74.3"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.58.21.4"/>
    </slice>
    <from sec="1068526809" usec="0"/>
    <to sec="1068526831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.210.185.4"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_300{
style=filled;
color=gray75;
2413[label="198.189.20.5;101pkt 101fpkt", shape=pentagon, color=darkviolet];
stat300[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.189.20.5:0, *:0}[95.0495%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.0495%)&lt;BR/&gt; 135: (1.9802%)&lt;BR/&gt; 57454: (0.49505%)&lt;BR/&gt; 57409: (0.49505%)&lt;BR/&gt; 54585: (0.49505%)&gt;];
}
</description>
    <slice>
      <filter src_ip="198.189.20.5"/>
    </slice>
    <from sec="1068526814" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.190.22.5"/>
    </slice>
    <from sec="1068526814" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.16.141.5"/>
    </slice>
    <from sec="1068526833" usec="0"/>
    <to sec="1068527679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.169.72.6"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.21.24.8"/>
    </slice>
    <from sec="1068526890" usec="0"/>
    <to sec="1068527408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.62.90.8"/>
    </slice>
    <from sec="1068526958" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.105.44.9"/>
    </slice>
    <from sec="1068526836" usec="0"/>
    <to sec="1068527695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.188.240.9"/>
    </slice>
    <from sec="1068527295" usec="0"/>
    <to sec="1068527331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.31.240.10"/>
    </slice>
    <from sec="1068526850" usec="0"/>
    <to sec="1068527694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
1125[label="164.228.136.228;d;28pkt 28fpkt", shape=diamond, color=yellow];
2474[label="209.250.192.11;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4684[label="209.250.192.11;7pkt 7fpkt", shape=invtriangle, color=brown];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.250.192.11:80, 164.228.136.228:*}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2461: (3.57143%)&lt;BR/&gt; 2460: (3.57143%)&lt;BR/&gt; 2456: (3.57143%)&lt;BR/&gt; 2455: (3.57143%)&gt;];
}
1125--1869[label="0.107143;3pkt 3fpkt"];
1125--2095[label="1;28pkt 28fpkt"];
1125--2474[label="0.714286;5pkt 5fpkt"];
1125--2665[label="0.166667;2pkt 2fpkt"];
1125--3645[label="0.107143;3pkt 3fpkt"];
1125--3930[label="0.133333;2pkt 2fpkt"];
1125--4323[label="0.05;1pkt 1fpkt"];
1125--4411[label="0.0714286;2pkt 2fpkt"];
1125--4499[label="0.107143;3pkt 3fpkt"];
1125--4684[label="0.714286;5pkt 5fpkt"];
1125--5490[label="0.133333;2pkt 2fpkt"];
1125--5778[label="0.107143;3pkt 3fpkt"];
1125--6233[label="0.142857;2pkt 2fpkt"];
2474--4684[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="164.228.136.228" src_ip="209.250.192.11" src_port="80"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
2479[label="202.210.250.11;132pkt 132fpkt", shape=pentagon, color=darkviolet];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.210.250.11:0, *:0}[97.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.7273%)&lt;BR/&gt; 80: (1.13636%)&lt;BR/&gt; 65375: (0.378788%)&lt;BR/&gt; 65085: (0.378788%)&lt;BR/&gt; 64621: (0.378788%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.210.250.11"/>
    </slice>
    <from sec="1068526807" usec="0"/>
    <to sec="1068527676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
2482[label="197.77.29.12;161pkt 161fpkt", shape=pentagon, color=darkviolet];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.29.12:0, *:0}[98.1366%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.1366%)&lt;BR/&gt; 80: (0.931677%)&lt;BR/&gt; 36282: (0.310559%)&lt;BR/&gt; 32420: (0.310559%)&lt;BR/&gt; 31128: (0.310559%)&gt;];
}
</description>
    <slice>
      <filter src_ip="197.77.29.12"/>
    </slice>
    <from sec="1068526812" usec="0"/>
    <to sec="1068527689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
804[label="202.201.172.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.201.172.12:80, 208.18.149.46:46242}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46242: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
804--1433[label="1;1pkt 1fpkt"];
804--2225[label="1;1pkt 1fpkt"];
804--2492[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.149.46" dst_port="46242" src_ip="202.201.172.12" src_port="80"/>
    </slice>
    <from sec="1068527073" usec="0"/>
    <to sec="1068527249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
0[label="6.24.182.0s;1pkt 1fpkt", shape=rectangle, color=red];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.24.182.0:3260, 136.93.58.209:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3260: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
0--355[label="1;1pkt 1fpkt"];
0--356[label="1;1pkt 1fpkt"];
0--1511[label="1;1pkt 1fpkt"];
0--1665[label="1;1pkt 1fpkt"];
0--2253[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.58.209" dst_port="25" src_ip="6.24.182.0" src_port="3260"/>
    </slice>
    <from sec="1068526841" usec="0"/>
    <to sec="1068526847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.131.5.13"/>
    </slice>
    <from sec="1068527040" usec="0"/>
    <to sec="1068527076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.24.238.13"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_320{
style=filled;
color=gray75;
98[label="5.45.88.14s;222pkt 222fpkt", shape=rectangle, color=red];
stat320[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.44.224.14:*, *:135}[63.964%]&lt;BR/&gt;{5.45.88.14:*, *:135}[36.036%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 2399: (0.45045%)&lt;BR/&gt; 2398: (0.45045%)&lt;BR/&gt; 2397: (0.45045%)&lt;BR/&gt; 2396: (0.45045%)&gt;];
}
98--805[label="0.36036;80pkt 80fpkt"];
98--808[label="0.63964;142pkt 142fpkt"];
98--1816[label="0.36036;80pkt 80fpkt"];
98--1818[label="0.63964;142pkt 142fpkt"];
98--2507[label="0.36036;80pkt 80fpkt"];
98--2519[label="0.63964;142pkt 142fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="99.44.224.14"/>
      <filter dst_port="135" src_ip="5.45.88.14"/>
    </slice>
    <from sec="1068527165" usec="0"/>
    <to sec="1068527171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.240.105.14"/>
    </slice>
    <from sec="1068527375" usec="0"/>
    <to sec="1068527690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
808[label="99.44.224.14;s;2018pkt 2018fpkt", shape=diamond, color=yellow];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.44.224.14:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 2983: (0.049554%)&lt;BR/&gt; 2982: (0.049554%)&lt;BR/&gt; 2981: (0.049554%)&lt;BR/&gt; 2980: (0.049554%)&gt;];
}
808--1818[label="1;2018pkt 2018fpkt"];
808--2519[label="1;2017pkt 2017fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="99.44.224.14"/>
    </slice>
    <from sec="1068527085" usec="0"/>
    <to sec="1068527243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.70.49.15"/>
    </slice>
    <from sec="1068526814" usec="0"/>
    <to sec="1068527633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
2525[label="96.197.78.15;99pkt 99fpkt", shape=pentagon, color=darkviolet];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.197.78.15:0, *:0}[94.9495%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.9495%)&lt;BR/&gt; 80: (2.52525%)&lt;BR/&gt; 65417: (0.505051%)&lt;BR/&gt; 64954: (0.505051%)&lt;BR/&gt; 64917: (0.505051%)&gt;];
}
</description>
    <slice>
      <filter src_ip="96.197.78.15"/>
    </slice>
    <from sec="1068526807" usec="0"/>
    <to sec="1068527686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.17.84.15"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.211.170.15"/>
    </slice>
    <from sec="1068527506" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.193.215.16"/>
    </slice>
    <from sec="1068526808" usec="0"/>
    <to sec="1068527694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.12.18.17"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12377,1.84878,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
46[label="208.172.184.17s;252pkt 252fpkt", shape=rectangle, color=red];
2567[label="208.172.184.17;251pkt 251fpkt", shape=pentagon, color=darkviolet];
4743[label="208.172.184.17;251pkt 251fpkt", shape=invtriangle, color=brown];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.172.184.17:63882, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63882: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
46--2567[label="1;251pkt 251fpkt"];
46--4743[label="1;251pkt 251fpkt"];
2567--4743[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.172.184.17" src_port="63882"/>
    </slice>
    <from sec="1068527161" usec="0"/>
    <to sec="1068527175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
1281[label="6.24.187.50;s;146pkt 146fpkt", shape=diamond, color=yellow];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.24.187.50:80, 143.38.9.148:*}[24.6575%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1382: (0.684932%)&lt;BR/&gt; 1381: (0.684932%)&lt;BR/&gt; 1380: (0.684932%)&lt;BR/&gt; 1379: (0.684932%)&gt;];
}
1281--1291[label="0.0449438;4pkt 4fpkt"];
1281--1979[label="0.171233;25pkt 25fpkt"];
1281--2001[label="0.0178571;1pkt 1fpkt"];
1281--2012[label="0.00684932;1pkt 1fpkt"];
1281--2154[label="0.0449438;4pkt 4fpkt"];
1281--2295[label="0.0178571;1pkt 1fpkt"];
1281--2906[label="1;146pkt 146fpkt"];
1281--4937[label="0.993151;145pkt 145fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.9.148" src_ip="6.24.187.50" src_port="80"/>
    </slice>
    <from sec="1068527086" usec="0"/>
    <to sec="1068527576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.174.167.18"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
1075[label="193.36.115.19;s;2pkt 2fpkt", shape=diamond, color=yellow];
2584[label="193.36.115.19;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4754[label="193.36.115.19;1pkt 1fpkt", shape=invtriangle, color=brown];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.36.115.19:1755, 136.93.64.196:46315}[50%]&lt;BR/&gt;{193.36.115.19:1755, 136.93.64.196:46349}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 46349: (30%)&lt;BR/&gt; 46315: (20%)&gt;];
}
1075--2195[label="1;2pkt 2fpkt"];
1075--2584[label="1;2pkt 2fpkt"];
1075--4754[label="1;1pkt 1fpkt"];
2584--4754[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.64.196" dst_port="46349" src_ip="193.36.115.19" src_port="1755"/>
      <filter dst_ip="136.93.64.196" dst_port="46315" src_ip="193.36.115.19" src_port="1755"/>
    </slice>
    <from sec="1068527302" usec="0"/>
    <to sec="1068527452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.119.19"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.193.215.19"/>
    </slice>
    <from sec="1068526812" usec="0"/>
    <to sec="1068527690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
247[label="143.38.173.15;d;683pkt 683fpkt", shape=diamond, color=yellow];
2593[label="198.50.132.20;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2702[label="214.40.211.30;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3023[label="6.86.87.62;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3318[label="212.251.210.90;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4334[label="221.133.2.211;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4758[label="198.50.132.20;14pkt 14fpkt", shape=invtriangle, color=brown];
4818[label="214.40.211.30;25pkt 25fpkt", shape=invtriangle, color=brown];
5699[label="221.133.2.211;1pkt 1fpkt", shape=invtriangle, color=brown];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 143.38.173.15:25}[90.7231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (43.3036%)&lt;BR/&gt; 53: (5.16582%)&lt;BR/&gt; 80: (1.46684%)&lt;BR/&gt; 1030: (1.27551%)&lt;BR/&gt; 43625: (0.255102%)&gt;];
}
247--2593[label="0.2;3pkt 3fpkt"];
247--2702[label="0.0416667;1pkt 1fpkt"];
247--3023[label="1;5pkt 5fpkt"];
247--3318[label="0.0666667;1pkt 1fpkt"];
247--4334[label="1;2pkt 2fpkt"];
247--4758[label="0.214286;3pkt 3fpkt"];
247--4818[label="0.04;1pkt 1fpkt"];
247--5699[label="1;1pkt 1fpkt"];
2593--4758[label="1;14pkt 14fpkt"];
2702--4818[label="1;24pkt 24fpkt"];
4334--5699[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.173.15" dst_port="25"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
2595[label="208.220.144.20;120pkt 120fpkt", shape=pentagon, color=darkviolet];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.220.144.20:0, *:0}[97.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.5%)&lt;BR/&gt; 80: (1.25%)&lt;BR/&gt; 31672: (0.416667%)&lt;BR/&gt; 30372: (0.416667%)&lt;BR/&gt; 22070: (0.416667%)&gt;];
}
</description>
    <slice>
      <filter src_ip="208.220.144.20"/>
    </slice>
    <from sec="1068526833" usec="0"/>
    <to sec="1068527671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.235.36.21"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.251.149.21"/>
    </slice>
    <from sec="1068526826" usec="0"/>
    <to sec="1068527654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.210.190.21"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.114.22"/>
    </slice>
    <from sec="1068526809" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.132.174.22"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.33.0.23"/>
    </slice>
    <from sec="1068526807" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.129.13.23"/>
    </slice>
    <from sec="1068526882" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.227.25.23"/>
    </slice>
    <from sec="1068527194" usec="0"/>
    <to sec="1068527216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12377,1.84878,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_346{
style=filled;
color=gray75;
91[label="202.198.245.212s;299pkt 299fpkt", shape=rectangle, color=red];
2634[label="86.112.81.23;250pkt 250fpkt", shape=pentagon, color=darkviolet];
4344[label="202.198.245.212;250pkt 250fpkt", shape=pentagon, color=darkviolet];
5703[label="202.198.245.212;249pkt 249fpkt", shape=invtriangle, color=brown];
stat346[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.112.81.23:1032, *:137}[50%]&lt;BR/&gt;{202.198.245.212:1034, *:137}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1034: (33.0153%)&lt;BR/&gt; 1032: (16.9847%)&gt;];
}
91--2634[label="0.424;106pkt 106fpkt"];
91--4344[label="0.772;193pkt 193fpkt"];
91--5703[label="0.771084;192pkt 192fpkt"];
4344--5703[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.198.245.212" src_port="1034"/>
      <filter dst_port="137" src_ip="86.112.81.23" src_port="1032"/>
    </slice>
    <from sec="1068527454" usec="0"/>
    <to sec="1068527478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.25.122.23"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
2643[label="96.131.153.24;132pkt 132fpkt", shape=pentagon, color=darkviolet];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.131.153.24:0, *:0}[96.9697%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.9697%)&lt;BR/&gt; 80: (1.13636%)&lt;BR/&gt; 64605: (0.378788%)&lt;BR/&gt; 63791: (0.378788%)&lt;BR/&gt; 62595: (0.378788%)&gt;];
}
</description>
    <slice>
      <filter src_ip="96.131.153.24"/>
    </slice>
    <from sec="1068526813" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.31.218.24"/>
    </slice>
    <from sec="1068526868" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_350{
style=filled;
color=gray75;
844[label="96.169.105.25;s;757pkt 757fpkt", shape=diamond, color=yellow];
2074[label="96.169.105.25;s;711pkt 711fpkt", shape=hexagon, color=black];
2657[label="96.169.105.25;799pkt 799fpkt", shape=pentagon, color=darkviolet];
4796[label="96.169.105.25;799pkt 799fpkt", shape=invtriangle, color=brown];
stat350[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.169.105.25:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
844--1089[label="0.0147059;1pkt 1fpkt"];
844--2074[label="1;711pkt 711fpkt"];
844--2657[label="0.998679;756pkt 756fpkt"];
844--4796[label="0.998679;756pkt 756fpkt"];
2074--2657[label="0.998594;710pkt 710fpkt"];
2074--4796[label="0.998594;710pkt 710fpkt"];
2657--4796[label="1;799pkt 799fpkt"];
</description>
    <slice>
      <filter src_ip="96.169.105.25"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.132.201.25"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.136.117.26"/>
    </slice>
    <from sec="1068527218" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.177.34.27"/>
    </slice>
    <from sec="1068527210" usec="0"/>
    <to sec="1068527280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.132.40.28"/>
    </slice>
    <from sec="1068526868" usec="0"/>
    <to sec="1068526886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_355{
style=filled;
color=gray75;
2680[label="137.97.52.28;127pkt 127fpkt", shape=pentagon, color=darkviolet];
stat355[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.97.52.28:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="137.97.52.28"/>
    </slice>
    <from sec="1068526811" usec="0"/>
    <to sec="1068527682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564047,1.73089,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_356{
style=filled;
color=gray75;
1219[label="208.31.240.28;s;320pkt 320fpkt", shape=diamond, color=yellow];
2684[label="208.31.240.28;398pkt 398fpkt", shape=pentagon, color=darkviolet];
stat356[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.31.240.28:0, *:0}[98.2412%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.0501%)&lt;BR/&gt; 80: (0.696379%)&lt;BR/&gt; 135: (0.278552%)&lt;BR/&gt; 4619: (0.139276%)&lt;BR/&gt; 4032: (0.139276%)&gt;];
}
1219--2684[label="1;320pkt 320fpkt"];
</description>
    <slice>
      <filter src_ip="208.31.240.28"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_358{
style=filled;
color=gray75;
2695[label="98.67.67.30;100pkt 100fpkt", shape=pentagon, color=darkviolet];
stat358[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.67.67.30:0, *:0}[92%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92%)&lt;BR/&gt; 80: (2.5%)&lt;BR/&gt; 135: (1.5%)&lt;BR/&gt; 64780: (0.5%)&lt;BR/&gt; 64409: (0.5%)&gt;];
}
</description>
    <slice>
      <filter src_ip="98.67.67.30"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.148.135.30"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.88.165.31"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.837732,1.70559,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
621[label="208.18.25.107;d;164pkt 164fpkt", shape=diamond, color=yellow];
2539[label="119.89.49.16;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2708[label="7.84.11.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4823[label="7.84.11.32;1pkt 1fpkt", shape=invtriangle, color=brown];
5507[label="4.88.83.167;12pkt 12fpkt", shape=invtriangle, color=brown];
5932[label="7.84.11.32;2pkt 2fpkt", shape=invhouse, color=bisque];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.88.74.217:80, 208.18.25.107:*}[31.3253%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1026%)&lt;BR/&gt; 0: (11.7949%)&lt;BR/&gt; 4446: (1.02564%)&lt;BR/&gt; 4445: (0.512821%)&lt;BR/&gt; 4379: (0.512821%)&gt;];
}
621--661[label="0.0104167;1pkt 1fpkt"];
621--1045[label="0.666667;52pkt 52fpkt"];
621--1543[label="0.0357143;2pkt 2fpkt"];
621--1594[label="1;102pkt 102fpkt"];
621--1781[label="0.015873;1pkt 1fpkt"];
621--1906[label="0.666667;52pkt 52fpkt"];
621--2539[label="1;15pkt 15fpkt"];
621--2708[label="1;1pkt 1fpkt"];
621--3385[label="0.571429;4pkt 4fpkt"];
621--3975[label="0.769231;10pkt 10fpkt"];
621--4256[label="0.01;1pkt 1fpkt"];
621--4328[label="0.0757576;5pkt 5fpkt"];
621--4376[label="0.541667;52pkt 52fpkt"];
621--4823[label="1;1pkt 1fpkt"];
621--5507[label="0.833333;10pkt 10fpkt"];
621--5697[label="0.0769231;5pkt 5fpkt"];
621--5723[label="0.547368;52pkt 52fpkt"];
621--5932[label="1;2pkt 2fpkt"];
621--6327[label="0.0769231;5pkt 5fpkt"];
2708--4823[label="1;1pkt 1fpkt"];
2708--5932[label="1;1pkt 1fpkt"];
4823--5932[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.25.107" src_ip="4.88.74.217" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.113.32"/>
    </slice>
    <from sec="1068526827" usec="0"/>
    <to sec="1068527688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.50.150.32"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.219.233.32"/>
    </slice>
    <from sec="1068527450" usec="0"/>
    <to sec="1068527456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.1.48.33"/>
    </slice>
    <from sec="1068527561" usec="0"/>
    <to sec="1068527587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.46.148.33"/>
    </slice>
    <from sec="1068526812" usec="0"/>
    <to sec="1068527689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.192.159.33"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.178.109.34"/>
    </slice>
    <from sec="1068527014" usec="0"/>
    <to sec="1068527666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.119.34"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
899[label="208.18.24.57;d;127pkt 127fpkt", shape=diamond, color=yellow];
1680[label="4.10.100.88;s;80pkt 80fpkt", shape=hexagon, color=black];
2757[label="4.158.81.35;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3473[label="200.32.101.107;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4851[label="4.158.81.35;7pkt 7fpkt", shape=invtriangle, color=brown];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 208.18.24.57:*}[34.1772%]&lt;BR/&gt;{4.10.100.88:80, *:*}[33.7553%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.1373%)&lt;BR/&gt; 0: (9.41176%)&lt;BR/&gt; 135: (1.17647%)&lt;BR/&gt; 3066: (0.588235%)&lt;BR/&gt; 3065: (0.588235%)&gt;];
}
899--1680[label="0.025;2pkt 2fpkt"];
899--1899[label="1;109pkt 109fpkt"];
899--2337[label="0.00787402;1pkt 1fpkt"];
899--2380[label="0.00787402;1pkt 1fpkt"];
899--2757[label="0.571429;4pkt 4fpkt"];
899--3473[label="0.147059;5pkt 5fpkt"];
899--3580[label="0.00787402;1pkt 1fpkt"];
899--3881[label="0.0555556;2pkt 2fpkt"];
899--3930[label="0.466667;7pkt 7fpkt"];
899--3963[label="0.00826446;1pkt 1fpkt"];
899--4353[label="0.25;10pkt 10fpkt"];
899--4430[label="0.0434783;1pkt 1fpkt"];
899--4639[label="0.00787402;1pkt 1fpkt"];
899--4851[label="0.571429;4pkt 4fpkt"];
899--5490[label="0.466667;7pkt 7fpkt"];
899--5709[label="0.230769;9pkt 9fpkt"];
899--5849[label="0.00787402;1pkt 1fpkt"];
899--6233[label="0.428571;6pkt 6fpkt"];
1680--1827[label="0.25;1pkt 1fpkt"];
1680--1899[label="0.025;2pkt 2fpkt"];
1680--1901[label="0.0125;1pkt 1fpkt"];
1680--2105[label="0.0375;3pkt 3fpkt"];
1680--2298[label="0.25;1pkt 1fpkt"];
2757--4851[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="4.10.100.88" src_port="80"/>
      <filter dst_ip="208.18.24.57" src_port="80"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.34.152.35"/>
    </slice>
    <from sec="1068526814" usec="0"/>
    <to sec="1068527671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
1133[label="146.153.26.170;d;54pkt 54fpkt", shape=diamond, color=yellow];
3118[label="4.122.164.70;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5059[label="4.122.164.70;12pkt 12fpkt", shape=invtriangle, color=brown];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 146.153.26.170:25}[70.3125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (35.2564%)&lt;BR/&gt; 0: (10.2564%)&lt;BR/&gt; 80: (8.97436%)&lt;BR/&gt; 58535: (1.92308%)&lt;BR/&gt; 58398: (1.92308%)&gt;];
}
1133--2104[label="1;54pkt 54fpkt"];
1133--2764[label="0.0666667;1pkt 1fpkt"];
1133--3118[label="0.166667;2pkt 2fpkt"];
1133--3810[label="0.0454545;1pkt 1fpkt"];
1133--5059[label="0.166667;2pkt 2fpkt"];
3118--5059[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="146.153.26.170" dst_port="25"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_375{
style=filled;
color=gray75;
527[label="136.93.203.117;d;199pkt 199fpkt", shape=diamond, color=yellow];
566[label="197.146.40.54;s;99pkt 99fpkt", shape=diamond, color=yellow];
1560[label="197.146.40.54;s;99pkt 99fpkt", shape=hexagon, color=black];
2771[label="200.162.131.36;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2942[label="197.146.40.54;131pkt 131fpkt", shape=pentagon, color=darkviolet];
3012[label="197.146.41.61;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3892[label="204.39.130.156;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4858[label="200.162.131.36;16pkt 16fpkt", shape=invtriangle, color=brown];
4960[label="197.146.40.54;130pkt 130fpkt", shape=invtriangle, color=brown];
5471[label="204.39.130.156;20pkt 20fpkt", shape=invtriangle, color=brown];
6006[label="197.146.40.54;131pkt 131fpkt", shape=invhouse, color=bisque];
6223[label="204.39.130.156;20pkt 20fpkt", shape=invhouse, color=bisque];
stat375[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.146.40.54:80, 136.93.203.117:*}[64.2157%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1548: (0.331126%)&lt;BR/&gt; 1547: (0.331126%)&lt;BR/&gt; 1546: (0.331126%)&lt;BR/&gt; 1545: (0.331126%)&gt;];
}
527--566[label="1;99pkt 99fpkt"];
527--1560[label="1;99pkt 99fpkt"];
527--2771[label="0.705882;12pkt 12fpkt"];
527--2942[label="1;131pkt 131fpkt"];
527--3012[label="1;24pkt 24fpkt"];
527--3892[label="1;20pkt 20fpkt"];
527--3976[label="0.115385;3pkt 3fpkt"];
527--4858[label="0.75;12pkt 12fpkt"];
527--4960[label="1;130pkt 130fpkt"];
527--5471[label="1;20pkt 20fpkt"];
527--6006[label="1;131pkt 131fpkt"];
527--6223[label="1;20pkt 20fpkt"];
566--1560[label="1;99pkt 99fpkt"];
566--2942[label="1;99pkt 99fpkt"];
566--4960[label="0.989899;98pkt 98fpkt"];
566--6006[label="1;99pkt 99fpkt"];
1560--2942[label="1;99pkt 99fpkt"];
1560--4960[label="0.989899;98pkt 98fpkt"];
1560--6006[label="1;99pkt 99fpkt"];
2771--4858[label="1;16pkt 16fpkt"];
2942--4960[label="1;130pkt 130fpkt"];
2942--6006[label="1;131pkt 131fpkt"];
3892--5471[label="1;20pkt 20fpkt"];
3892--6223[label="1;20pkt 20fpkt"];
4960--6006[label="1;130pkt 130fpkt"];
5471--6223[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.203.117" src_ip="197.146.40.54" src_port="80"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
2774[label="202.210.228.36;129pkt 129fpkt", shape=pentagon, color=darkviolet];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.210.228.36:0, *:0}[97.6744%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.6744%)&lt;BR/&gt; 80: (1.16279%)&lt;BR/&gt; 15662: (0.387597%)&lt;BR/&gt; 14220: (0.387597%)&lt;BR/&gt; 12578: (0.387597%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.210.228.36"/>
    </slice>
    <from sec="1068526821" usec="0"/>
    <to sec="1068527585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.153.69.37"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.42.157.37"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.114.38"/>
    </slice>
    <from sec="1068526812" usec="0"/>
    <to sec="1068527689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.24.162.39"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.212.193.39"/>
    </slice>
    <from sec="1068526819" usec="0"/>
    <to sec="1068527683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.50.60.40"/>
    </slice>
    <from sec="1068527465" usec="0"/>
    <to sec="1068527620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.11.87.41"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.101.125.41"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
2838[label="202.133.202.42;100pkt 100fpkt", shape=pentagon, color=darkviolet];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.133.202.42:0, *:0}[97%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97%)&lt;BR/&gt; 80: (1.5%)&lt;BR/&gt; 4724: (0.5%)&lt;BR/&gt; 4206: (0.5%)&lt;BR/&gt; 2732: (0.5%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.133.202.42"/>
    </slice>
    <from sec="1068526824" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.114.43"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.101.173.43"/>
    </slice>
    <from sec="1068526850" usec="0"/>
    <to sec="1068527684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
1407[label="136.93.52.246;d;28pkt 28fpkt", shape=diamond, color=yellow];
2215[label="136.93.52.246;d;28pkt 28fpkt", shape=hexagon, color=black];
3127[label="200.162.179.71;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4027[label="7.234.78.173;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5532[label="7.234.78.173;14pkt 14fpkt", shape=invtriangle, color=brown];
6250[label="7.234.78.173;15pkt 15fpkt", shape=invhouse, color=bisque];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.93.52.246:*}[67.3913%]&lt;BR/&gt;{7.234.78.173:80, *:*}[32.6087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33598: (2.29358%)&lt;BR/&gt; 33597: (2.29358%)&lt;BR/&gt; 33596: (2.29358%)&lt;BR/&gt; 33589: (2.29358%)&gt;];
}
1407--2215[label="1;28pkt 28fpkt"];
1407--2857[label="0.0909091;1pkt 1fpkt"];
1407--3127[label="0.111111;1pkt 1fpkt"];
1407--3389[label="0.0555556;1pkt 1fpkt"];
1407--3431[label="0.2;1pkt 1fpkt"];
1407--3937[label="0.411765;7pkt 7fpkt"];
1407--4027[label="0.333333;5pkt 5fpkt"];
1407--4131[label="0.2;1pkt 1fpkt"];
1407--5211[label="0.0588235;1pkt 1fpkt"];
1407--5236[label="0.2;1pkt 1fpkt"];
1407--5492[label="0.4375;7pkt 7fpkt"];
1407--5532[label="0.357143;5pkt 5fpkt"];
1407--6114[label="0.0555556;1pkt 1fpkt"];
1407--6250[label="0.333333;5pkt 5fpkt"];
2215--2857[label="0.0909091;1pkt 1fpkt"];
2215--3127[label="0.111111;1pkt 1fpkt"];
2215--3389[label="0.0555556;1pkt 1fpkt"];
2215--3431[label="0.2;1pkt 1fpkt"];
2215--3937[label="0.411765;7pkt 7fpkt"];
2215--4027[label="0.333333;5pkt 5fpkt"];
2215--4131[label="0.2;1pkt 1fpkt"];
2215--5211[label="0.0588235;1pkt 1fpkt"];
2215--5236[label="0.2;1pkt 1fpkt"];
2215--5492[label="0.4375;7pkt 7fpkt"];
2215--5532[label="0.357143;5pkt 5fpkt"];
2215--6114[label="0.0555556;1pkt 1fpkt"];
2215--6250[label="0.333333;5pkt 5fpkt"];
4027--5532[label="1;14pkt 14fpkt"];
4027--6250[label="1;15pkt 15fpkt"];
5532--6250[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="7.234.78.173" src_port="80"/>
      <filter dst_ip="136.93.52.246" src_port="80"/>
    </slice>
    <from sec="1068527001" usec="0"/>
    <to sec="1068527666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.162.156.47"/>
    </slice>
    <from sec="1068526837" usec="0"/>
    <to sec="1068527253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.155.78.49"/>
    </slice>
    <from sec="1068527565" usec="0"/>
    <to sec="1068527657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.837732,1.70559,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_393{
style=filled;
color=gray75;
905[label="143.38.14.90;d;23pkt 23fpkt", shape=diamond, color=yellow];
2894[label="212.30.114.49;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4931[label="212.30.114.49;3pkt 3fpkt", shape=invtriangle, color=brown];
5989[label="212.30.114.49;4pkt 4fpkt", shape=invhouse, color=bisque];
stat393[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.116.78:80, 143.38.14.90:*}[26.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.5882%)&lt;BR/&gt; 1039: (5.88235%)&lt;BR/&gt; 1808: (4.41176%)&lt;BR/&gt; 1807: (4.41176%)&lt;BR/&gt; 4892: (2.94118%)&gt;];
}
905--1523[label="0.0869565;2pkt 2fpkt"];
905--1658[label="0.347826;8pkt 8fpkt"];
905--1903[label="1;20pkt 20fpkt"];
905--2894[label="0.25;1pkt 1fpkt"];
905--3028[label="0.0434783;1pkt 1fpkt"];
905--3650[label="0.0434783;1pkt 1fpkt"];
905--3963[label="0.0434783;1pkt 1fpkt"];
905--4430[label="0.0434783;1pkt 1fpkt"];
905--4931[label="0.333333;1pkt 1fpkt"];
905--5011[label="0.0434783;1pkt 1fpkt"];
905--5347[label="0.0434783;1pkt 1fpkt"];
905--5742[label="0.0454545;1pkt 1fpkt"];
905--5989[label="0.25;1pkt 1fpkt"];
905--6165[label="0.0434783;1pkt 1fpkt"];
2894--4931[label="1;3pkt 3fpkt"];
2894--5989[label="1;4pkt 4fpkt"];
4931--5989[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.14.90" src_ip="212.30.116.78" src_port="80"/>
    </slice>
    <from sec="1068526818" usec="0"/>
    <to sec="1068527692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.119.49"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.203.32.50"/>
    </slice>
    <from sec="1068527510" usec="0"/>
    <to sec="1068527554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.117.142.50"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.182.137.51"/>
    </slice>
    <from sec="1068526814" usec="0"/>
    <to sec="1068527695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_398{
style=filled;
color=gray75;
627[label="136.93.67.144;d;140pkt 140fpkt", shape=diamond, color=yellow];
832[label="7.51.72.236;s;70pkt 70fpkt", shape=diamond, color=yellow];
876[label="164.228.125.163;d;48pkt 48fpkt", shape=diamond, color=yellow];
1072[label="6.24.182.159;s;1pkt 1fpkt", shape=diamond, color=yellow];
1328[label="143.134.233.30;d;119pkt 119fpkt", shape=diamond, color=yellow];
1884[label="164.228.125.163;d;43pkt 43fpkt", shape=hexagon, color=black];
3971[label="200.193.173.166;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5505[label="200.193.173.166;1pkt 1fpkt", shape=invtriangle, color=brown];
stat398[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:25}[31.8182%]&lt;BR/&gt;{*:*, 143.134.233.30:*}[31.8182%]&lt;BR/&gt;{*:25, 136.93.67.144:*}[24.0642%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (39.4799%)&lt;BR/&gt; 53: (10.5201%)&lt;BR/&gt; 47521: (4.25532%)&lt;BR/&gt; 0: (1.18203%)&lt;BR/&gt; 24566: (0.472813%)&gt;];
}
627--777[label="0.0483871;3pkt 3fpkt"];
627--786[label="0.0188679;1pkt 1fpkt"];
627--832[label="0.0285714;2pkt 2fpkt"];
627--860[label="0.0215054;2pkt 2fpkt"];
627--961[label="0.0416667;3pkt 3fpkt"];
627--1017[label="0.03125;1pkt 1fpkt"];
627--1021[label="0.025641;1pkt 1fpkt"];
627--1072[label="1;1pkt 1fpkt"];
627--1702[label="0.0645161;2pkt 2fpkt"];
627--1774[label="0.0235294;2pkt 2fpkt"];
627--1849[label="0.0416667;3pkt 3fpkt"];
627--1864[label="1;119pkt 119fpkt"];
627--2280[label="1;102pkt 102fpkt"];
627--2918[label="0.025641;1pkt 1fpkt"];
627--3567[label="0.0181818;1pkt 1fpkt"];
627--3639[label="0.0483871;3pkt 3fpkt"];
627--3955[label="0.05;1pkt 1fpkt"];
627--4150[label="0.0206186;2pkt 2fpkt"];
627--4283[label="0.0909091;1pkt 1fpkt"];
627--4489[label="0.0266667;2pkt 2fpkt"];
627--5305[label="0.0181818;1pkt 1fpkt"];
627--5343[label="0.0483871;3pkt 3fpkt"];
627--5602[label="0.0206186;2pkt 2fpkt"];
627--6144[label="0.0185185;1pkt 1fpkt"];
627--6161[label="0.0491803;3pkt 3fpkt"];
832--838[label="0.0142857;1pkt 1fpkt"];
832--1050[label="0.174603;11pkt 11fpkt"];
832--1151[label="0.0142857;1pkt 1fpkt"];
832--1205[label="0.0508475;3pkt 3fpkt"];
832--1264[label="0.0285714;2pkt 2fpkt"];
832--1328[label="0.0142857;1pkt 1fpkt"];
832--1670[label="0.0428571;3pkt 3fpkt"];
832--1687[label="0.0142857;1pkt 1fpkt"];
832--1751[label="0.0142857;1pkt 1fpkt"];
832--1864[label="0.0285714;2pkt 2fpkt"];
832--1928[label="0.285714;20pkt 20fpkt"];
832--1993[label="0.0142857;1pkt 1fpkt"];
832--2050[label="0.0508475;3pkt 3fpkt"];
832--2122[label="0.0285714;2pkt 2fpkt"];
832--2169[label="0.228571;16pkt 16fpkt"];
832--2280[label="0.0285714;2pkt 2fpkt"];
832--2309[label="0.0149254;1pkt 1fpkt"];
832--4489[label="1;70pkt 70fpkt"];
876--967[label="0.142857;2pkt 2fpkt"];
876--1002[label="0.270833;13pkt 13fpkt"];
876--1471[label="0.0357143;1pkt 1fpkt"];
876--1884[label="1;43pkt 43fpkt"];
876--1946[label="0.142857;2pkt 2fpkt"];
876--2764[label="0.0666667;1pkt 1fpkt"];
876--2883[label="0.0384615;1pkt 1fpkt"];
876--3034[label="0.2;1pkt 1fpkt"];
876--3363[label="0.0909091;1pkt 1fpkt"];
876--3971[label="1;1pkt 1fpkt"];
876--4343[label="0.270833;13pkt 13fpkt"];
876--5505[label="1;1pkt 1fpkt"];
1072--1864[label="1;1pkt 1fpkt"];
1072--2280[label="1;1pkt 1fpkt"];
1328--1329[label="0.0253165;2pkt 2fpkt"];
1328--1399[label="0.00840336;1pkt 1fpkt"];
1328--1774[label="0.0117647;1pkt 1fpkt"];
1328--2326[label="0.00840336;1pkt 1fpkt"];
1328--2336[label="0.00840336;1pkt 1fpkt"];
1328--2341[label="0.00840336;1pkt 1fpkt"];
1328--2726[label="0.00943396;1pkt 1fpkt"];
1328--2834[label="0.00840336;1pkt 1fpkt"];
1328--3689[label="0.0222222;2pkt 2fpkt"];
1328--4089[label="0.030303;1pkt 1fpkt"];
1328--4150[label="0.0103093;1pkt 1fpkt"];
1328--4259[label="0.0588235;1pkt 1fpkt"];
1328--4295[label="0.0140845;1pkt 1fpkt"];
1328--4309[label="0.037037;1pkt 1fpkt"];
1328--4343[label="0.0375;3pkt 3fpkt"];
1328--4489[label="0.0133333;1pkt 1fpkt"];
1328--5602[label="0.0103093;1pkt 1fpkt"];
1328--5685[label="0.0142857;1pkt 1fpkt"];
1328--5691[label="0.037037;1pkt 1fpkt"];
1328--6324[label="0.0384615;1pkt 1fpkt"];
1884--1946[label="0.142857;2pkt 2fpkt"];
1884--2764[label="0.0666667;1pkt 1fpkt"];
1884--2883[label="0.0384615;1pkt 1fpkt"];
1884--3034[label="0.2;1pkt 1fpkt"];
1884--3363[label="0.0909091;1pkt 1fpkt"];
1884--3971[label="1;1pkt 1fpkt"];
1884--4343[label="0.255814;11pkt 11fpkt"];
1884--5505[label="1;1pkt 1fpkt"];
3971--5505[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.233.30"/>
      <filter dst_port="25"/>
      <filter dst_ip="136.93.67.144" src_port="25"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.64.25.52"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_401{
style=filled;
color=gray75;
654[label="208.169.14.68;d;262pkt 262fpkt", shape=diamond, color=yellow];
1687[label="208.169.14.68;d;262pkt 262fpkt", shape=hexagon, color=black];
stat401[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 208.169.14.68:32775}[58.7786%]&lt;BR/&gt;{*:0, 208.169.14.68:0}[22.5191%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (32.6336%)&lt;BR/&gt; 32775: (29.3893%)&lt;BR/&gt; 0: (22.5191%)&lt;BR/&gt; 80: (3.05344%)&lt;BR/&gt; 25: (1.52672%)&gt;];
}
654--832[label="0.0142857;1pkt 1fpkt"];
654--1026[label="0.0263158;1pkt 1fpkt"];
654--1137[label="0.016129;1pkt 1fpkt"];
654--1223[label="0.0555556;1pkt 1fpkt"];
654--1226[label="0.0555556;1pkt 1fpkt"];
654--1230[label="0.00381679;1pkt 1fpkt"];
654--1238[label="0.0178571;1pkt 1fpkt"];
654--1332[label="0.0188679;1pkt 1fpkt"];
654--1341[label="0.0166667;1pkt 1fpkt"];
654--1399[label="0.0114504;3pkt 3fpkt"];
654--1687[label="1;262pkt 262fpkt"];
654--1895[label="0.0263158;1pkt 1fpkt"];
654--1988[label="0.016129;1pkt 1fpkt"];
654--2076[label="0.00381679;1pkt 1fpkt"];
654--2305[label="0.00381679;1pkt 1fpkt"];
654--2327[label="0.0114504;3pkt 3fpkt"];
654--2336[label="0.0114504;3pkt 3fpkt"];
654--2342[label="0.0114504;3pkt 3fpkt"];
654--2359[label="0.025;1pkt 1fpkt"];
654--2566[label="0.0263158;1pkt 1fpkt"];
654--2702[label="0.0416667;1pkt 1fpkt"];
654--2756[label="0.0117647;1pkt 1fpkt"];
654--2834[label="0.0114504;3pkt 3fpkt"];
654--2928[label="0.0263158;1pkt 1fpkt"];
654--3053[label="0.0263158;1pkt 1fpkt"];
654--3067[label="0.0204082;1pkt 1fpkt"];
654--3243[label="0.00381679;1pkt 1fpkt"];
654--3251[label="0.016129;1pkt 1fpkt"];
654--3481[label="0.0175439;1pkt 1fpkt"];
654--3601[label="0.0188679;1pkt 1fpkt"];
654--3659[label="0.05;1pkt 1fpkt"];
654--3784[label="0.02;1pkt 1fpkt"];
654--4053[label="0.0204082;1pkt 1fpkt"];
654--4295[label="0.0140845;1pkt 1fpkt"];
654--4305[label="0.025;1pkt 1fpkt"];
654--4349[label="0.0833333;1pkt 1fpkt"];
654--4489[label="0.0133333;1pkt 1fpkt"];
654--4528[label="0.037037;1pkt 1fpkt"];
654--4539[label="0.0151515;1pkt 1fpkt"];
654--4630[label="0.025;1pkt 1fpkt"];
654--4742[label="0.0263158;1pkt 1fpkt"];
654--4818[label="0.04;1pkt 1fpkt"];
654--4952[label="0.027027;1pkt 1fpkt"];
654--5023[label="0.0263158;1pkt 1fpkt"];
654--5130[label="0.00381679;1pkt 1fpkt"];
654--5135[label="0.016129;1pkt 1fpkt"];
654--5259[label="0.0178571;1pkt 1fpkt"];
654--5323[label="0.0188679;1pkt 1fpkt"];
654--5351[label="0.0526316;1pkt 1fpkt"];
654--5547[label="0.0208333;1pkt 1fpkt"];
654--5685[label="0.0142857;1pkt 1fpkt"];
654--5795[label="0.0384615;1pkt 1fpkt"];
654--5802[label="0.0151515;1pkt 1fpkt"];
654--5902[label="0.0263158;1pkt 1fpkt"];
654--6076[label="0.00381679;1pkt 1fpkt"];
654--6154[label="0.0188679;1pkt 1fpkt"];
654--6256[label="0.0204082;1pkt 1fpkt"];
1687--1895[label="0.0263158;1pkt 1fpkt"];
1687--1988[label="0.016129;1pkt 1fpkt"];
1687--2076[label="0.00381679;1pkt 1fpkt"];
1687--2305[label="0.00381679;1pkt 1fpkt"];
1687--2327[label="0.0114504;3pkt 3fpkt"];
1687--2336[label="0.0114504;3pkt 3fpkt"];
1687--2342[label="0.0114504;3pkt 3fpkt"];
1687--2359[label="0.025;1pkt 1fpkt"];
1687--2566[label="0.0263158;1pkt 1fpkt"];
1687--2702[label="0.0416667;1pkt 1fpkt"];
1687--2756[label="0.0117647;1pkt 1fpkt"];
1687--2834[label="0.0114504;3pkt 3fpkt"];
1687--2928[label="0.0263158;1pkt 1fpkt"];
1687--3053[label="0.0263158;1pkt 1fpkt"];
1687--3067[label="0.0204082;1pkt 1fpkt"];
1687--3243[label="0.00381679;1pkt 1fpkt"];
1687--3251[label="0.016129;1pkt 1fpkt"];
1687--3481[label="0.0175439;1pkt 1fpkt"];
1687--3601[label="0.0188679;1pkt 1fpkt"];
1687--3659[label="0.05;1pkt 1fpkt"];
1687--3784[label="0.02;1pkt 1fpkt"];
1687--4053[label="0.0204082;1pkt 1fpkt"];
1687--4295[label="0.0140845;1pkt 1fpkt"];
1687--4305[label="0.025;1pkt 1fpkt"];
1687--4349[label="0.0833333;1pkt 1fpkt"];
1687--4489[label="0.0133333;1pkt 1fpkt"];
1687--4528[label="0.037037;1pkt 1fpkt"];
1687--4539[label="0.0151515;1pkt 1fpkt"];
1687--4630[label="0.025;1pkt 1fpkt"];
1687--4742[label="0.0263158;1pkt 1fpkt"];
1687--4818[label="0.04;1pkt 1fpkt"];
1687--4952[label="0.027027;1pkt 1fpkt"];
1687--5023[label="0.0263158;1pkt 1fpkt"];
1687--5130[label="0.00381679;1pkt 1fpkt"];
1687--5135[label="0.016129;1pkt 1fpkt"];
1687--5259[label="0.0178571;1pkt 1fpkt"];
1687--5323[label="0.0188679;1pkt 1fpkt"];
1687--5351[label="0.0526316;1pkt 1fpkt"];
1687--5547[label="0.0208333;1pkt 1fpkt"];
1687--5685[label="0.0142857;1pkt 1fpkt"];
1687--5795[label="0.0384615;1pkt 1fpkt"];
1687--5802[label="0.0151515;1pkt 1fpkt"];
1687--5902[label="0.0263158;1pkt 1fpkt"];
1687--6076[label="0.00381679;1pkt 1fpkt"];
1687--6154[label="0.0188679;1pkt 1fpkt"];
1687--6256[label="0.0204082;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.169.14.68" dst_port="32775" src_port="53"/>
      <filter dst_ip="208.169.14.68"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.50.35.53"/>
    </slice>
    <from sec="1068527639" usec="0"/>
    <to sec="1068527658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.837732,1.70559,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_403{
style=filled;
color=gray75;
1143[label="212.30.113.53;s;8pkt 8fpkt", shape=diamond, color=yellow];
2934[label="212.30.113.53;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4955[label="212.30.113.53;1pkt 1fpkt", shape=invtriangle, color=brown];
6004[label="212.30.113.53;1pkt 1fpkt", shape=invhouse, color=bisque];
stat403[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.53:1863, 208.18.144.93:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1061: (18.1818%)&lt;BR/&gt; 59636: (4.54545%)&lt;BR/&gt; 4446: (4.54545%)&lt;BR/&gt; 1530: (4.54545%)&gt;];
}
1143--1389[label="0.125;1pkt 1fpkt"];
1143--2044[label="0.125;1pkt 1fpkt"];
1143--2081[label="0.25;2pkt 2fpkt"];
1143--2113[label="1;8pkt 8fpkt"];
1143--2934[label="1;1pkt 1fpkt"];
1143--4955[label="1;1pkt 1fpkt"];
1143--6004[label="1;1pkt 1fpkt"];
2934--4955[label="1;1pkt 1fpkt"];
2934--6004[label="1;1pkt 1fpkt"];
4955--6004[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.144.93" src_ip="212.30.113.53" src_port="1863"/>
    </slice>
    <from sec="1068526809" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.26.141.53"/>
    </slice>
    <from sec="1068527097" usec="0"/>
    <to sec="1068527136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_405{
style=filled;
color=gray75;
444[label="200.145.40.38;s;217pkt 217fpkt", shape=diamond, color=yellow];
664[label="7.160.218.53;s;33pkt 33fpkt", shape=diamond, color=yellow];
1693[label="7.160.218.53;s;33pkt 33fpkt", shape=hexagon, color=black];
2938[label="7.160.218.53;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4958[label="7.160.218.53;32pkt 32fpkt", shape=invtriangle, color=brown];
stat405[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.145.40.38:80, *:*}[86.8%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1301: (0.862069%)&lt;BR/&gt; 1333: (0.718391%)&lt;BR/&gt; 1322: (0.718391%)&lt;BR/&gt; 1344: (0.574713%)&gt;];
}
444--473[label="0.00460829;1pkt 1fpkt"];
444--651[label="0.0123457;1pkt 1fpkt"];
444--663[label="0.0634921;4pkt 4fpkt"];
444--882[label="0.0208333;1pkt 1fpkt"];
444--893[label="0.0547945;4pkt 4fpkt"];
444--1046[label="0.0104167;1pkt 1fpkt"];
444--1087[label="0.0294118;2pkt 2fpkt"];
444--1141[label="0.0263158;1pkt 1fpkt"];
444--1244[label="0.0344828;2pkt 2fpkt"];
444--1267[label="0.0127389;2pkt 2fpkt"];
444--1286[label="0.0454545;2pkt 2fpkt"];
444--1427[label="0.0322581;7pkt 7fpkt"];
444--1463[label="0.0138249;3pkt 3fpkt"];
444--1499[label="0.00460829;1pkt 1fpkt"];
444--1522[label="0.0184332;4pkt 4fpkt"];
444--1570[label="0.00460829;1pkt 1fpkt"];
444--1583[label="1;142pkt 142fpkt"];
444--1609[label="0.0909091;3pkt 3fpkt"];
444--1664[label="0.00819672;1pkt 1fpkt"];
444--1838[label="0.00921659;2pkt 2fpkt"];
444--1839[label="0.0276498;6pkt 6fpkt"];
444--1930[label="0.00460829;1pkt 1fpkt"];
444--1939[label="0.0414747;9pkt 9fpkt"];
444--1990[label="0.0208333;1pkt 1fpkt"];
444--2096[label="0.0377358;2pkt 2fpkt"];
444--2143[label="0.0135135;1pkt 1fpkt"];
444--2163[label="0.0184332;4pkt 4fpkt"];
444--2164[label="0.0230415;5pkt 5fpkt"];
444--2194[label="0.0127389;2pkt 2fpkt"];
444--2245[label="0.0230415;5pkt 5fpkt"];
444--2304[label="0.0184332;4pkt 4fpkt"];
444--2788[label="1;217pkt 217fpkt"];
664--1609[label="0.606061;20pkt 20fpkt"];
664--1693[label="1;33pkt 33fpkt"];
664--2938[label="1;33pkt 33fpkt"];
664--4958[label="1;32pkt 32fpkt"];
1693--2938[label="1;33pkt 33fpkt"];
1693--4958[label="1;32pkt 32fpkt"];
2938--4958[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="200.145.40.38" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.113.149.54"/>
    </slice>
    <from sec="1068526828" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.20.176.54"/>
    </slice>
    <from sec="1068527172" usec="0"/>
    <to sec="1068527217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.197.147.55"/>
    </slice>
    <from sec="1068526808" usec="0"/>
    <to sec="1068527176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.76.229.55"/>
    </slice>
    <from sec="1068527135" usec="0"/>
    <to sec="1068527691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.237.8.57"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_412{
style=filled;
color=gray75;
2972[label="202.129.16.57;164pkt 164fpkt", shape=pentagon, color=darkviolet];
stat412[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.129.16.57:0, *:0}[95.7317%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.7317%)&lt;BR/&gt; 80: (2.13415%)&lt;BR/&gt; 4740: (0.304878%)&lt;BR/&gt; 4306: (0.304878%)&lt;BR/&gt; 4111: (0.304878%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.129.16.57"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.251.90.57"/>
    </slice>
    <from sec="1068527159" usec="0"/>
    <to sec="1068527371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.92.150.57"/>
    </slice>
    <from sec="1068526808" usec="0"/>
    <to sec="1068527500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_415{
style=filled;
color=gray75;
2985[label="202.203.54.58;224pkt 224fpkt", shape=pentagon, color=darkviolet];
stat415[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.203.54.58:0, *:0}[96.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.4286%)&lt;BR/&gt; 80: (1.78571%)&lt;BR/&gt; 62219: (0.223214%)&lt;BR/&gt; 22492: (0.223214%)&lt;BR/&gt; 20544: (0.223214%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.203.54.58"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
2993[label="202.205.213.58;163pkt 163fpkt", shape=pentagon, color=darkviolet];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.205.213.58:0, *:0}[98.773%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.773%)&lt;BR/&gt; 80: (0.613497%)&lt;BR/&gt; 43762: (0.306748%)&lt;BR/&gt; 38751: (0.306748%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.205.213.58"/>
    </slice>
    <from sec="1068526822" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0863,1.87777,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_417{
style=filled;
color=gray75;
121[label="196.122.241.59s;138pkt 138fpkt", shape=rectangle, color=red];
2998[label="196.122.241.59;205pkt 205fpkt", shape=pentagon, color=darkviolet];
3059[label="192.169.106.66;157pkt 157fpkt", shape=pentagon, color=darkviolet];
stat417[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.122.241.59:1028, *:137}[47.1264%]&lt;BR/&gt;{192.169.106.66:1031, *:137}[36.092%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1028: (24.4%)&lt;BR/&gt; 1031: (18.3%)&lt;BR/&gt; 1025: (3.8%)&lt;BR/&gt; 1044: (3.5%)&gt;];
}
121--2998[label="0.282609;39pkt 39fpkt"];
121--3059[label="0.188406;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.122.241.59" src_port="1028"/>
      <filter dst_port="137" src_ip="192.169.106.66" src_port="1031"/>
    </slice>
    <from sec="1068527356" usec="0"/>
    <to sec="1068527395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_418{
style=filled;
color=gray75;
803[label="212.30.113.60;s;3pkt 3fpkt", shape=diamond, color=yellow];
1694[label="209.176.132.114;d;6pkt 6fpkt", shape=hexagon, color=black];
stat418[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 209.176.132.114:0}[37.5%]&lt;BR/&gt;{*:1863, 209.176.132.114:*}[37.5%]&lt;BR/&gt;{212.30.113.60:1863, 136.93.37.168:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (33.3333%)&lt;BR/&gt; 0: (33.3333%)&lt;BR/&gt; 4322: (11.1111%)&lt;BR/&gt; 51886: (5.55556%)&lt;BR/&gt; 51885: (5.55556%)&gt;];
}
803--1530[label="0.666667;2pkt 2fpkt"];
803--1694[label="0.333333;1pkt 1fpkt"];
803--1722[label="1;3pkt 3fpkt"];
803--3002[label="1;3pkt 3fpkt"];
803--6021[label="1;3pkt 3fpkt"];
1694--1722[label="0.333333;1pkt 1fpkt"];
1694--2922[label="0.166667;1pkt 1fpkt"];
1694--3002[label="0.333333;1pkt 1fpkt"];
1694--3197[label="0.166667;1pkt 1fpkt"];
1694--6002[label="0.2;1pkt 1fpkt"];
1694--6021[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.176.132.114" src_port="1863"/>
      <filter dst_ip="136.93.37.168" src_ip="212.30.113.60" src_port="1863"/>
      <filter dst_ip="209.176.132.114"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_419{
style=filled;
color=gray75;
968[label="208.31.228.209;d;41pkt 41fpkt", shape=diamond, color=yellow];
2061[label="208.31.228.209;d;33pkt 33fpkt", shape=hexagon, color=black];
3010[label="208.163.20.61;511pkt 511fpkt", shape=pentagon, color=darkviolet];
stat419[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.163.20.61:1145, *:1434}[92.7405%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (43.8462%)&lt;BR/&gt; 1145: (43.8462%)&lt;BR/&gt; 0: (8.37607%)&lt;BR/&gt; 80: (1.36752%)&lt;BR/&gt; 135: (0.598291%)&gt;];
}
968--2061[label="1;33pkt 33fpkt"];
968--2330[label="0.0243902;1pkt 1fpkt"];
968--2343[label="0.0487805;2pkt 2fpkt"];
968--2346[label="0.0243902;1pkt 1fpkt"];
968--2349[label="0.0487805;2pkt 2fpkt"];
968--2351[label="0.0243902;1pkt 1fpkt"];
968--2610[label="1;1pkt 1fpkt"];
968--3010[label="0.0243902;1pkt 1fpkt"];
968--4771[label="1;1pkt 1fpkt"];
968--5910[label="1;1pkt 1fpkt"];
2061--2330[label="0.030303;1pkt 1fpkt"];
2061--2343[label="0.0606061;2pkt 2fpkt"];
2061--2346[label="0.030303;1pkt 1fpkt"];
2061--2349[label="0.0606061;2pkt 2fpkt"];
2061--2351[label="0.030303;1pkt 1fpkt"];
2061--2610[label="1;1pkt 1fpkt"];
2061--3010[label="0.030303;1pkt 1fpkt"];
2061--4771[label="1;1pkt 1fpkt"];
2061--5910[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="208.163.20.61" src_port="1145"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.135.104.61"/>
    </slice>
    <from sec="1068526978" usec="0"/>
    <to sec="1068527609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.176.76.62"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
3032[label="214.42.132.63;112pkt 112fpkt", shape=pentagon, color=darkviolet];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.42.132.63:0, *:0}[94.6429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.6429%)&lt;BR/&gt; 135: (1.33929%)&lt;BR/&gt; 80: (1.33929%)&lt;BR/&gt; 8360: (0.446429%)&lt;BR/&gt; 6268: (0.446429%)&gt;];
}
</description>
    <slice>
      <filter src_ip="214.42.132.63"/>
    </slice>
    <from sec="1068527099" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.18.144.67"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.237.147.67"/>
    </slice>
    <from sec="1068527186" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.101.168.67"/>
    </slice>
    <from sec="1068526852" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_426{
style=filled;
color=gray75;
3082[label="202.208.15.68;106pkt 106fpkt", shape=pentagon, color=darkviolet];
stat426[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.208.15.68:0, *:0}[98.1132%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.1132%)&lt;BR/&gt; 80: (0.943396%)&lt;BR/&gt; 41630: (0.471698%)&lt;BR/&gt; 41420: (0.471698%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.208.15.68"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_427{
style=filled;
color=gray75;
3084[label="6.177.52.68;265pkt 265fpkt", shape=pentagon, color=darkviolet];
stat427[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.177.52.68:0, *:0}[97.7358%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.7358%)&lt;BR/&gt; 80: (1.13208%)&lt;BR/&gt; 61136: (0.188679%)&lt;BR/&gt; 55742: (0.188679%)&lt;BR/&gt; 48100: (0.188679%)&gt;];
}
</description>
    <slice>
      <filter src_ip="6.177.52.68"/>
    </slice>
    <from sec="1068526814" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.86.5.69"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564047,1.73089,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_431{
style=filled;
color=gray75;
443[label="218.109.147.32;d;401pkt 401fpkt", shape=diamond, color=yellow];
3105[label="132.64.217.69;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat431[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 218.109.147.32:6667}[34.2432%]&lt;BR/&gt;{*:113, 218.109.147.32:*}[21.5881%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (17.199%)&lt;BR/&gt; 113: (10.9337%)&lt;BR/&gt; 8080: (3.9312%)&lt;BR/&gt; 10080: (3.6855%)&lt;BR/&gt; 3128: (3.6855%)&gt;];
}
443--2048[label="1;365pkt 365fpkt"];
443--2337[label="0.00249377;1pkt 1fpkt"];
443--2424[label="0.00395257;1pkt 1fpkt"];
443--2824[label="0.00395257;1pkt 1fpkt"];
443--3105[label="0.666667;4pkt 4fpkt"];
443--3282[label="0.00395257;1pkt 1fpkt"];
443--3560[label="0.00396825;1pkt 1fpkt"];
443--3828[label="0.0037037;1pkt 1fpkt"];
443--4548[label="0.1875;3pkt 3fpkt"];
443--4655[label="0.00393701;1pkt 1fpkt"];
443--5154[label="0.00395257;1pkt 1fpkt"];
443--5303[label="0.00398406;1pkt 1fpkt"];
443--5437[label="0.0037037;1pkt 1fpkt"];
443--5807[label="0.1875;3pkt 3fpkt"];
443--5858[label="0.00393701;1pkt 1fpkt"];
443--6089[label="0.00396825;1pkt 1fpkt"];
443--6143[label="0.00396825;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.109.147.32" src_port="113"/>
      <filter dst_ip="218.109.147.32" dst_port="6667"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_432{
style=filled;
color=gray75;
3106[label="86.113.237.69;77pkt 77fpkt", shape=pentagon, color=darkviolet];
stat432[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.113.237.69:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4895: (0.649351%)&lt;BR/&gt; 4894: (0.649351%)&lt;BR/&gt; 4884: (0.649351%)&lt;BR/&gt; 4777: (0.649351%)&gt;];
}
</description>
    <slice>
      <filter dst_port="445" src_ip="86.113.237.69"/>
    </slice>
    <from sec="1068526830" usec="0"/>
    <to sec="1068527661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_433{
style=filled;
color=gray75;
409[label="143.38.14.189;d;11pkt 11fpkt", shape=diamond, color=yellow];
753[label="212.30.113.106;s;13pkt 13fpkt", shape=diamond, color=yellow];
1684[label="212.30.113.106;s;11pkt 11fpkt", shape=hexagon, color=black];
1703[label="143.38.14.189;d;10pkt 10fpkt", shape=hexagon, color=black];
3107[label="208.221.23.70;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3462[label="212.30.113.106;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5248[label="212.30.113.106;13pkt 13fpkt", shape=invtriangle, color=brown];
stat433[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.106:1863, *:*}[54.1667%]&lt;BR/&gt;{208.221.23.70:110, 143.38.14.189:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (35%)&lt;BR/&gt; 110: (15%)&lt;BR/&gt; 1624: (3.75%)&lt;BR/&gt; 4604: (2.5%)&lt;BR/&gt; 4310: (2.5%)&gt;];
}
409--753[label="0.0909091;1pkt 1fpkt"];
409--1469[label="0.142857;1pkt 1fpkt"];
409--1684[label="0.0909091;1pkt 1fpkt"];
409--1703[label="1;10pkt 10fpkt"];
409--3107[label="0.888889;8pkt 8fpkt"];
409--3462[label="0.0909091;1pkt 1fpkt"];
409--5248[label="0.0909091;1pkt 1fpkt"];
753--865[label="0.0769231;1pkt 1fpkt"];
753--1684[label="1;11pkt 11fpkt"];
753--1703[label="0.1;1pkt 1fpkt"];
753--1980[label="0.0769231;1pkt 1fpkt"];
753--3462[label="1;13pkt 13fpkt"];
753--5248[label="1;13pkt 13fpkt"];
1684--1703[label="0.1;1pkt 1fpkt"];
1684--1980[label="0.0909091;1pkt 1fpkt"];
1684--3462[label="1;11pkt 11fpkt"];
1684--5248[label="1;11pkt 11fpkt"];
1703--3107[label="0.777778;7pkt 7fpkt"];
1703--3462[label="0.1;1pkt 1fpkt"];
1703--5248[label="0.1;1pkt 1fpkt"];
3462--5248[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="212.30.113.106" src_port="1863"/>
      <filter dst_ip="143.38.14.189" src_ip="208.221.23.70" src_port="110"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.116.33.70"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_435{
style=filled;
color=gray75;
3114[label="208.214.114.70;201pkt 201fpkt", shape=pentagon, color=darkviolet];
stat435[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.214.114.70:0, *:0}[97.5124%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.5124%)&lt;BR/&gt; 80: (0.995025%)&lt;BR/&gt; 53632: (0.248756%)&lt;BR/&gt; 49135: (0.248756%)&lt;BR/&gt; 32887: (0.248756%)&gt;];
}
</description>
    <slice>
      <filter src_ip="208.214.114.70"/>
    </slice>
    <from sec="1068526815" usec="0"/>
    <to sec="1068527694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_436{
style=filled;
color=gray75;
583[label="146.153.24.71;s;321pkt 321fpkt", shape=diamond, color=yellow];
1633[label="146.153.24.71;s;152pkt 152fpkt", shape=hexagon, color=black];
3123[label="146.153.24.71;341pkt 341fpkt", shape=pentagon, color=darkviolet];
stat436[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.24.71:*, *:25}[99.1202%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6314%)&lt;BR/&gt; 113: (0.36855%)&lt;BR/&gt; 44954: (0.184275%)&lt;BR/&gt; 44951: (0.184275%)&lt;BR/&gt; 44939: (0.184275%)&gt;];
}
583--1633[label="1;152pkt 152fpkt"];
583--3123[label="1;321pkt 321fpkt"];
1633--3123[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="146.153.24.71"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
3128[label="96.182.211.71;369pkt 369fpkt", shape=pentagon, color=darkviolet];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.182.211.71:0, *:0}[94.3089%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.3089%)&lt;BR/&gt; 80: (2.84553%)&lt;BR/&gt; 64403: (0.135501%)&lt;BR/&gt; 53675: (0.135501%)&lt;BR/&gt; 52852: (0.135501%)&gt;];
}
</description>
    <slice>
      <filter src_ip="96.182.211.71"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,002,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
466[label="143.38.213.215;d;4pkt 4fpkt", shape=diamond, color=yellow];
2171[label="143.38.213.215;d;4pkt 4fpkt", shape=hexagon, color=black];
3129[label="202.196.216.71;253pkt 253fpkt", shape=pentagon, color=darkviolet];
5063[label="202.196.216.71;252pkt 252fpkt", shape=invtriangle, color=brown];
5325[label="199.153.80.125;2pkt 2fpkt", shape=invtriangle, color=brown];
6043[label="202.196.216.71;253pkt 253fpkt", shape=invhouse, color=bisque];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.196.216.71:1026, *:137}[98.8281%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (49.4792%)&lt;BR/&gt; 137: (49.4792%)&lt;BR/&gt; 554: (0.325521%)&lt;BR/&gt; 49244: (0.195312%)&lt;BR/&gt; 21282: (0.195312%)&gt;];
}
466--604[label="1;2pkt 2fpkt"];
466--1660[label="1;2pkt 2fpkt"];
466--2171[label="1;4pkt 4fpkt"];
466--3129[label="0.25;1pkt 1fpkt"];
466--3603[label="1;2pkt 2fpkt"];
466--5063[label="0.25;1pkt 1fpkt"];
466--5325[label="1;2pkt 2fpkt"];
466--6043[label="0.25;1pkt 1fpkt"];
2171--3129[label="0.25;1pkt 1fpkt"];
2171--3603[label="1;2pkt 2fpkt"];
2171--5063[label="0.25;1pkt 1fpkt"];
2171--5325[label="1;2pkt 2fpkt"];
2171--6043[label="0.25;1pkt 1fpkt"];
3129--5063[label="1;252pkt 252fpkt"];
3129--6043[label="1;253pkt 253fpkt"];
5063--6043[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.196.216.71" src_port="1026"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.49.66.73"/>
    </slice>
    <from sec="1068526809" usec="0"/>
    <to sec="1068527424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.175.68.73"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
3147[label="203.101.253.73;249pkt 249fpkt", shape=pentagon, color=darkviolet];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.101.253.73:0, *:0}[96.7871%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.7871%)&lt;BR/&gt; 80: (1.60643%)&lt;BR/&gt; 4527: (0.200803%)&lt;BR/&gt; 4071: (0.200803%)&lt;BR/&gt; 3875: (0.200803%)&gt;];
}
</description>
    <slice>
      <filter src_ip="203.101.253.73"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.71.10.74"/>
    </slice>
    <from sec="1068526878" usec="0"/>
    <to sec="1068527667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_443{
style=filled;
color=gray75;
3155[label="96.131.152.74;102pkt 102fpkt", shape=pentagon, color=darkviolet];
stat443[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.131.152.74:0, *:0}[96.0784%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.0784%)&lt;BR/&gt; 80: (1.96078%)&lt;BR/&gt; 65427: (0.490196%)&lt;BR/&gt; 65359: (0.490196%)&lt;BR/&gt; 64802: (0.490196%)&gt;];
}
</description>
    <slice>
      <filter src_ip="96.131.152.74"/>
    </slice>
    <from sec="1068526812" usec="0"/>
    <to sec="1068527687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
972[label="212.30.113.75;s;7pkt 7fpkt", shape=diamond, color=yellow];
1949[label="143.38.242.90;d;6pkt 6fpkt", shape=hexagon, color=black];
2065[label="212.30.113.75;s;6pkt 6fpkt", shape=hexagon, color=black];
3161[label="212.30.113.75;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5082[label="212.30.113.75;7pkt 7fpkt", shape=invtriangle, color=brown];
6054[label="212.30.113.75;7pkt 7fpkt", shape=invhouse, color=bisque];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.75:1863, *:*}[58.3333%]&lt;BR/&gt;{*:80, 143.38.242.90:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (45%)&lt;BR/&gt; 35249: (7.5%)&lt;BR/&gt; 4491: (6.25%)&lt;BR/&gt; 3154: (6.25%)&lt;BR/&gt; 3086: (6.25%)&gt;];
}
972--1949[label="0.166667;1pkt 1fpkt"];
972--2065[label="1;6pkt 6fpkt"];
972--3161[label="1;7pkt 7fpkt"];
972--5082[label="1;7pkt 7fpkt"];
972--6054[label="1;7pkt 7fpkt"];
1949--2065[label="0.166667;1pkt 1fpkt"];
1949--3161[label="0.166667;1pkt 1fpkt"];
1949--5082[label="0.166667;1pkt 1fpkt"];
1949--6054[label="0.166667;1pkt 1fpkt"];
2065--3161[label="1;6pkt 6fpkt"];
2065--5082[label="1;6pkt 6fpkt"];
2065--6054[label="1;6pkt 6fpkt"];
3161--5082[label="1;7pkt 7fpkt"];
3161--6054[label="1;7pkt 7fpkt"];
5082--6054[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="212.30.113.75" src_port="1863"/>
      <filter dst_ip="143.38.242.90" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.205.206.75"/>
    </slice>
    <from sec="1068527658" usec="0"/>
    <to sec="1068527668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_446{
style=filled;
color=gray75;
3171[label="98.127.35.76;156pkt 156fpkt", shape=pentagon, color=darkviolet];
stat446[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.127.35.76:0, *:0}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.6667%)&lt;BR/&gt; 135: (3.20513%)&lt;BR/&gt; 80: (0.961538%)&lt;BR/&gt; 65535: (0.320513%)&lt;BR/&gt; 64447: (0.320513%)&gt;];
}
</description>
    <slice>
      <filter src_ip="98.127.35.76"/>
    </slice>
    <from sec="1068526808" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.6.104.76"/>
    </slice>
    <from sec="1068526895" usec="0"/>
    <to sec="1068527161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.113.77"/>
    </slice>
    <from sec="1068526817" usec="0"/>
    <to sec="1068527621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0863,1.87777,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_449{
style=filled;
color=gray75;
58[label="5.16.32.79s;198pkt 198fpkt", shape=rectangle, color=red];
3201[label="5.16.32.79;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat449[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.16.32.79:1039, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1039: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
58--3201[label="1;198pkt 198fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="5.16.32.79" src_port="1039"/>
    </slice>
    <from sec="1068526949" usec="0"/>
    <to sec="1068526963" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.148.59.79"/>
    </slice>
    <from sec="1068527657" usec="0"/>
    <to sec="1068527693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.118.79"/>
    </slice>
    <from sec="1068526817" usec="0"/>
    <to sec="1068527689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.118.80"/>
    </slice>
    <from sec="1068526808" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.9.168.81"/>
    </slice>
    <from sec="1068527292" usec="0"/>
    <to sec="1068527324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.210.185.81"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.116.152.82"/>
    </slice>
    <from sec="1068527388" usec="0"/>
    <to sec="1068527408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
3234[label="169.5.178.82;289pkt 289fpkt", shape=pentagon, color=darkviolet];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.5.178.82:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="169.5.178.82"/>
    </slice>
    <from sec="1068526808" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_457{
style=filled;
color=gray75;
1153[label="212.30.137.98;s;161pkt 161fpkt", shape=diamond, color=yellow];
2126[label="212.30.137.98;s;146pkt 146fpkt", shape=hexagon, color=black];
stat457[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.137.98:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1393: (0.651466%)&lt;BR/&gt; 1679: (0.488599%)&lt;BR/&gt; 1038: (0.488599%)&lt;BR/&gt; 64550: (0.325733%)&gt;];
}
1153--1433[label="0.00621118;1pkt 1fpkt"];
1153--1463[label="0.0559006;9pkt 9fpkt"];
1153--1493[label="0.00621118;1pkt 1fpkt"];
1153--1522[label="0.0186335;3pkt 3fpkt"];
1153--1534[label="0.00621118;1pkt 1fpkt"];
1153--1570[label="0.0248447;4pkt 4fpkt"];
1153--1580[label="0.0186335;3pkt 3fpkt"];
1153--1838[label="0.0559006;9pkt 9fpkt"];
1153--1839[label="0.0186335;3pkt 3fpkt"];
1153--1879[label="0.0123457;1pkt 1fpkt"];
1153--1953[label="0.0208333;1pkt 1fpkt"];
1153--1966[label="0.00621118;1pkt 1fpkt"];
1153--2012[label="0.00621118;1pkt 1fpkt"];
1153--2126[label="1;146pkt 146fpkt"];
1153--2143[label="0.0135135;1pkt 1fpkt"];
1153--2225[label="0.00621118;1pkt 1fpkt"];
1153--2304[label="0.0186335;3pkt 3fpkt"];
1153--3381[label="1;161pkt 161fpkt"];
1153--5206[label="0.993789;160pkt 160fpkt"];
1153--6111[label="1;161pkt 161fpkt"];
2126--2143[label="0.0135135;1pkt 1fpkt"];
2126--2225[label="0.00684932;1pkt 1fpkt"];
2126--2304[label="0.0205479;3pkt 3fpkt"];
2126--3381[label="1;146pkt 146fpkt"];
2126--5206[label="0.993151;145pkt 145fpkt"];
2126--6111[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter src_ip="212.30.137.98" src_port="80"/>
    </slice>
    <from sec="1068526820" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564047,1.73089,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
936[label="198.208.236.83;s;2pkt 2fpkt", shape=diamond, color=yellow];
3242[label="198.208.236.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.208.236.83:23690, 208.31.196.150:40579}[50%]&lt;BR/&gt;{198.208.236.83:23690, 208.31.196.150:42739}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23690: (50%)&lt;BR/&gt; 42739: (33.3333%)&lt;BR/&gt; 40579: (16.6667%)&gt;];
}
936--3242[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.196.150" dst_port="42739" src_ip="198.208.236.83" src_port="23690"/>
      <filter dst_ip="208.31.196.150" dst_port="40579" src_ip="198.208.236.83" src_port="23690"/>
    </slice>
    <from sec="1068527142" usec="0"/>
    <to sec="1068527283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.86.68.84"/>
    </slice>
    <from sec="1068527687" usec="0"/>
    <to sec="1068527695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.214.84"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.242.223.84"/>
    </slice>
    <from sec="1068526854" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_462{
style=filled;
color=gray75;
1203[label="212.30.114.18;s;52pkt 52fpkt", shape=diamond, color=yellow];
1333[label="143.38.9.48;d;3pkt 3fpkt", shape=diamond, color=yellow];
1841[label="136.93.96.194;d;54pkt 54fpkt", shape=hexagon, color=black];
2583[label="212.30.114.19;50pkt 50fpkt", shape=pentagon, color=darkviolet];
4753[label="212.30.114.19;49pkt 49fpkt", shape=invtriangle, color=brown];
stat462[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.93.96.194:*}[31.8471%]&lt;BR/&gt;{212.30.114.19:80, 208.169.14.64:*}[29.9363%]&lt;BR/&gt;{212.30.114.18:80, 208.169.14.64:*}[28.0255%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7981%)&lt;BR/&gt; 65399: (0.480769%)&lt;BR/&gt; 65210: (0.480769%)&lt;BR/&gt; 64962: (0.480769%)&lt;BR/&gt; 64852: (0.480769%)&gt;];
}
1203--1244[label="0.0961538;5pkt 5fpkt"];
1203--1333[label="0.333333;1pkt 1fpkt"];
1203--1841[label="0.0192308;1pkt 1fpkt"];
1203--2096[label="0.0769231;4pkt 4fpkt"];
1203--2303[label="0.0192308;1pkt 1fpkt"];
1203--2575[label="0.980769;51pkt 51fpkt"];
1203--4746[label="0.980769;51pkt 51fpkt"];
1333--2334[label="0.333333;1pkt 1fpkt"];
1841--1869[label="0.037037;2pkt 2fpkt"];
1841--1994[label="0.037037;2pkt 2fpkt"];
1841--2073[label="0.0185185;1pkt 1fpkt"];
1841--2100[label="0.0185185;1pkt 1fpkt"];
1841--2303[label="1;54pkt 54fpkt"];
1841--2575[label="0.0185185;1pkt 1fpkt"];
1841--2721[label="0.111111;6pkt 6fpkt"];
1841--2839[label="0.0185185;1pkt 1fpkt"];
1841--2979[label="0.0185185;1pkt 1fpkt"];
1841--3083[label="0.166667;1pkt 1fpkt"];
1841--3642[label="0.0185185;1pkt 1fpkt"];
1841--3650[label="0.222222;12pkt 12fpkt"];
1841--3668[label="0.0185185;1pkt 1fpkt"];
1841--3718[label="0.0185185;1pkt 1fpkt"];
1841--3816[label="0.03125;1pkt 1fpkt"];
1841--3885[label="0.203704;11pkt 11fpkt"];
1841--4095[label="0.0322581;1pkt 1fpkt"];
1841--4268[label="0.0322581;1pkt 1fpkt"];
1841--4272[label="0.0185185;1pkt 1fpkt"];
1841--4746[label="0.0185185;1pkt 1fpkt"];
1841--4829[label="0.111111;6pkt 6fpkt"];
1841--4896[label="0.0185185;1pkt 1fpkt"];
1841--5038[label="0.2;1pkt 1fpkt"];
1841--5344[label="0.0185185;1pkt 1fpkt"];
1841--5347[label="0.222222;12pkt 12fpkt"];
1841--5383[label="0.0185185;1pkt 1fpkt"];
1841--5431[label="0.03125;1pkt 1fpkt"];
1841--5572[label="0.0333333;1pkt 1fpkt"];
1841--5669[label="0.0322581;1pkt 1fpkt"];
1841--5671[label="0.0185185;1pkt 1fpkt"];
1841--6162[label="0.0185185;1pkt 1fpkt"];
1841--6165[label="0.222222;12pkt 12fpkt"];
1841--6206[label="0.03125;1pkt 1fpkt"];
1841--6312[label="0.0185185;1pkt 1fpkt"];
2583--4753[label="1;49pkt 49fpkt"];
2583--5904[label="1;49pkt 49fpkt"];
4753--5904[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.96.194" src_port="80"/>
      <filter dst_ip="208.169.14.64" src_ip="212.30.114.18" src_port="80"/>
      <filter dst_ip="208.169.14.64" src_ip="212.30.114.19" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
401[label="143.38.216.165;d;54pkt 54fpkt", shape=diamond, color=yellow];
3270[label="212.30.113.86;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3742[label="4.225.200.139;137pkt 137fpkt", shape=pentagon, color=darkviolet];
5394[label="4.225.200.139;136pkt 136fpkt", shape=invtriangle, color=brown];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.225.200.139:*, *:137}[70.6186%]&lt;BR/&gt;{*:80, 143.38.216.165:*}[25.7732%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (41.1411%)&lt;BR/&gt; 80: (7.50751%)&lt;BR/&gt; 1863: (1.35135%)&lt;BR/&gt; 65139: (0.45045%)&lt;BR/&gt; 65020: (0.45045%)&gt;];
}
401--590[label="0.296296;16pkt 16fpkt"];
401--1441[label="0.277778;15pkt 15fpkt"];
401--1523[label="0.333333;18pkt 18fpkt"];
401--1577[label="0.296296;16pkt 16fpkt"];
401--2116[label="1;54pkt 54fpkt"];
401--3270[label="0.333333;2pkt 2fpkt"];
401--3642[label="0.296296;16pkt 16fpkt"];
401--3742[label="0.0185185;1pkt 1fpkt"];
401--4555[label="0.277778;15pkt 15fpkt"];
401--5344[label="0.296296;16pkt 16fpkt"];
401--5394[label="0.0185185;1pkt 1fpkt"];
401--6162[label="0.296296;16pkt 16fpkt"];
3742--5394[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="4.225.200.139"/>
      <filter dst_ip="143.38.216.165" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.210.191.86"/>
    </slice>
    <from sec="1068527232" usec="0"/>
    <to sec="1068527311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.41.242.86"/>
    </slice>
    <from sec="1068527137" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_466{
style=filled;
color=gray75;
3278[label="7.25.32.87;205pkt 205fpkt", shape=pentagon, color=darkviolet];
stat466[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.25.32.87:0, *:0}[86.8293%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (86.8293%)&lt;BR/&gt; 135: (4.39024%)&lt;BR/&gt; 80: (2.19512%)&lt;BR/&gt; 61430: (0.243902%)&lt;BR/&gt; 56428: (0.243902%)&gt;];
}
</description>
    <slice>
      <filter src_ip="7.25.32.87"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.98.73.87"/>
    </slice>
    <from sec="1068526818" usec="0"/>
    <to sec="1068527686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.118.87"/>
    </slice>
    <from sec="1068526814" usec="0"/>
    <to sec="1068527684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_469{
style=filled;
color=gray75;
3286[label="199.149.138.87;105pkt 105fpkt", shape=pentagon, color=darkviolet];
stat469[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.149.138.87:0, *:0}[89.5238%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (89.5238%)&lt;BR/&gt; 80: (5.2381%)&lt;BR/&gt; 63132: (0.47619%)&lt;BR/&gt; 59517: (0.47619%)&lt;BR/&gt; 58768: (0.47619%)&gt;];
}
</description>
    <slice>
      <filter src_ip="199.149.138.87"/>
    </slice>
    <from sec="1068527043" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
465[label="208.31.231.228;d;226pkt 226fpkt", shape=diamond, color=yellow];
823[label="153.107.155.87;s;1pkt 1fpkt", shape=diamond, color=yellow];
1505[label="208.31.231.228;d;103pkt 103fpkt", shape=hexagon, color=black];
3181[label="4.210.189.76;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3287[label="153.107.155.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3564[label="4.210.188.119;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4405[label="212.30.161.222;23pkt 23fpkt", shape=pentagon, color=darkviolet];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.210.185.0:80, 208.31.231.228:*}[21.9917%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.2258%)&lt;BR/&gt; 0: (12.0968%)&lt;BR/&gt; 53: (6.1828%)&lt;BR/&gt; 1024: (5.91398%)&lt;BR/&gt; 5050: (2.82258%)&gt;];
}
465--633[label="0.00442478;1pkt 1fpkt"];
465--823[label="1;1pkt 1fpkt"];
465--995[label="0.289617;53pkt 53fpkt"];
465--1101[label="0.183673;27pkt 27fpkt"];
465--1137[label="0.016129;1pkt 1fpkt"];
465--1505[label="1;103pkt 103fpkt"];
465--1758[label="0.00694444;1pkt 1fpkt"];
465--1976[label="0.194915;23pkt 23fpkt"];
465--1988[label="0.016129;1pkt 1fpkt"];
465--2327[label="0.00442478;1pkt 1fpkt"];
465--2342[label="0.00442478;1pkt 1fpkt"];
465--2362[label="0.25;52pkt 52fpkt"];
465--2374[label="0.0135135;1pkt 1fpkt"];
465--2399[label="0.169811;27pkt 27fpkt"];
465--3181[label="0.25;2pkt 2fpkt"];
465--3287[label="1;1pkt 1fpkt"];
465--3551[label="0.0285714;1pkt 1fpkt"];
465--3564[label="0.1;1pkt 1fpkt"];
465--3784[label="0.02;1pkt 1fpkt"];
465--4295[label="0.0140845;1pkt 1fpkt"];
465--4405[label="1;23pkt 23fpkt"];
465--4539[label="0.0151515;1pkt 1fpkt"];
465--5298[label="0.0294118;1pkt 1fpkt"];
465--5685[label="0.0142857;1pkt 1fpkt"];
465--5802[label="0.0151515;1pkt 1fpkt"];
823--1505[label="1;1pkt 1fpkt"];
823--3287[label="1;1pkt 1fpkt"];
1505--1758[label="0.00970874;1pkt 1fpkt"];
1505--1976[label="0.126214;13pkt 13fpkt"];
1505--1988[label="0.016129;1pkt 1fpkt"];
1505--2327[label="0.00970874;1pkt 1fpkt"];
1505--2342[label="0.00970874;1pkt 1fpkt"];
1505--2362[label="0.116505;12pkt 12fpkt"];
1505--2374[label="0.0135135;1pkt 1fpkt"];
1505--2399[label="0.116505;12pkt 12fpkt"];
1505--3181[label="0.25;2pkt 2fpkt"];
1505--3287[label="1;1pkt 1fpkt"];
1505--3564[label="0.1;1pkt 1fpkt"];
1505--4405[label="1;23pkt 23fpkt"];
1505--4539[label="0.0151515;1pkt 1fpkt"];
1505--5802[label="0.0151515;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.231.228" src_ip="4.210.185.0" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
3290[label="202.136.0.88;114pkt 114fpkt", shape=pentagon, color=darkviolet];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.136.0.88:0, *:0}[90.3509%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (90.3509%)&lt;BR/&gt; 80: (4.82456%)&lt;BR/&gt; 1025: (2.63158%)&lt;BR/&gt; 2953: (0.438596%)&lt;BR/&gt; 2681: (0.438596%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.136.0.88"/>
    </slice>
    <from sec="1068526810" usec="0"/>
    <to sec="1068527497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.98.70.88"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.140.28.89"/>
    </slice>
    <from sec="1068527357" usec="0"/>
    <to sec="1068527379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.113.89"/>
    </slice>
    <from sec="1068526832" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.211.157.89"/>
    </slice>
    <from sec="1068526817" usec="0"/>
    <to sec="1068527691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.208.233.89"/>
    </slice>
    <from sec="1068526831" usec="0"/>
    <to sec="1068527527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.208.77.91"/>
    </slice>
    <from sec="1068526809" usec="0"/>
    <to sec="1068527658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.216.38.92"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.113.92"/>
    </slice>
    <from sec="1068527345" usec="0"/>
    <to sec="1068527543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.108.5.93"/>
    </slice>
    <from sec="1068526814" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.18.144.93"/>
    </slice>
    <from sec="1068526807" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
3339[label="202.214.116.94;139pkt 139fpkt", shape=pentagon, color=darkviolet];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.214.116.94:0, *:0}[99.2806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.2806%)&lt;BR/&gt; 4425: (0.359712%)&lt;BR/&gt; 80: (0.359712%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.214.116.94"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564047,1.73089,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
1348[label="200.193.215.94;s;14pkt 14fpkt", shape=diamond, color=yellow];
3341[label="200.193.215.94;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.193.215.94:5050, *:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (42.8571%)&lt;BR/&gt; 47740: (3.57143%)&lt;BR/&gt; 3719: (3.57143%)&lt;BR/&gt; 3590: (3.57143%)&lt;BR/&gt; 3270: (3.57143%)&gt;];
}
1348--3341[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="200.193.215.94" src_port="5050"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_485{
style=filled;
color=gray75;
3348[label="96.182.210.95;306pkt 306fpkt", shape=pentagon, color=darkviolet];
stat485[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.182.210.95:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="96.182.210.95"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.162.211.95"/>
    </slice>
    <from sec="1068526818" usec="0"/>
    <to sec="1068527650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.837732,1.70559,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_487{
style=filled;
color=gray75;
1136[label="200.193.213.96;s;14pkt 14fpkt", shape=diamond, color=yellow];
3365[label="200.193.213.96;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5195[label="200.193.213.96;14pkt 14fpkt", shape=invtriangle, color=brown];
6108[label="200.193.213.96;14pkt 14fpkt", shape=invhouse, color=bisque];
stat487[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.193.213.96:80, 161.29.54.127:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4919: (3.57143%)&lt;BR/&gt; 4895: (3.57143%)&lt;BR/&gt; 3841: (3.57143%)&lt;BR/&gt; 3689: (3.57143%)&gt;];
}
1136--2163[label="1;14pkt 14fpkt"];
1136--3365[label="0.928571;13pkt 13fpkt"];
1136--5195[label="0.928571;13pkt 13fpkt"];
1136--6108[label="0.928571;13pkt 13fpkt"];
3365--5195[label="1;14pkt 14fpkt"];
3365--6108[label="1;14pkt 14fpkt"];
5195--6108[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.54.127" src_ip="200.193.213.96" src_port="80"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_488{
style=filled;
color=gray75;
1039[label="201.168.213.121;s;67pkt 67fpkt", shape=diamond, color=yellow];
2007[label="201.168.213.121;s;38pkt 38fpkt", shape=hexagon, color=black];
3579[label="201.168.213.121;71pkt 71fpkt", shape=pentagon, color=darkviolet];
5310[label="201.168.213.121;70pkt 70fpkt", shape=invtriangle, color=brown];
6146[label="201.168.213.121;71pkt 71fpkt", shape=invhouse, color=bisque];
stat488[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.168.213.121:80, 161.29.54.127:*}[76.0563%]&lt;BR/&gt;{201.168.213.121:80, 136.93.74.209:*}[23.9437%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3181: (1.41956%)&lt;BR/&gt; 4923: (0.788644%)&lt;BR/&gt; 4866: (0.788644%)&lt;BR/&gt; 4682: (0.788644%)&gt;];
}
1039--2007[label="1;38pkt 38fpkt"];
1039--2163[label="0.746269;50pkt 50fpkt"];
1039--3579[label="1;67pkt 67fpkt"];
1039--5310[label="0.985075;66pkt 66fpkt"];
1039--6146[label="1;67pkt 67fpkt"];
2007--2163[label="1;38pkt 38fpkt"];
2007--3579[label="1;38pkt 38fpkt"];
2007--5310[label="1;38pkt 38fpkt"];
2007--6146[label="1;38pkt 38fpkt"];
3579--5310[label="1;70pkt 70fpkt"];
3579--6146[label="1;71pkt 71fpkt"];
5310--6146[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.54.127" src_ip="201.168.213.121" src_port="80"/>
      <filter dst_ip="136.93.74.209" src_ip="201.168.213.121" src_port="80"/>
    </slice>
    <from sec="1068526846" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.88.104.99"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.196.113.99"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.139.17.100"/>
    </slice>
    <from sec="1068527118" usec="0"/>
    <to sec="1068527362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.6.118.100"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.184.172.100"/>
    </slice>
    <from sec="1068527416" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.118.101"/>
    </slice>
    <from sec="1068526807" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.77.169.101"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.168.185.101"/>
    </slice>
    <from sec="1068527547" usec="0"/>
    <to sec="1068527691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12377,1.84878,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_500{
style=filled;
color=gray75;
55[label="202.206.216.75s;366pkt 366fpkt", shape=rectangle, color=red];
3168[label="202.206.216.75;254pkt 254fpkt", shape=pentagon, color=darkviolet];
3422[label="1.57.90.102;178pkt 178fpkt", shape=pentagon, color=darkviolet];
5230[label="1.57.90.102;178pkt 178fpkt", shape=invtriangle, color=brown];
stat500[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.206.216.75:1032, *:137}[58.7963%]&lt;BR/&gt;{1.57.90.102:1028, *:137}[41.2037%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1032: (26.0246%)&lt;BR/&gt; 1028: (23.9754%)&gt;];
}
55--3168[label="1;254pkt 254fpkt"];
55--3422[label="0.629213;112pkt 112fpkt"];
55--5230[label="0.629213;112pkt 112fpkt"];
3422--5230[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.206.216.75" src_port="1032"/>
      <filter dst_port="137" src_ip="1.57.90.102" src_port="1028"/>
    </slice>
    <from sec="1068527054" usec="0"/>
    <to sec="1068527081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.225.114.103"/>
    </slice>
    <from sec="1068527135" usec="0"/>
    <to sec="1068527695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.190.236.103"/>
    </slice>
    <from sec="1068526911" usec="0"/>
    <to sec="1068527630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.163.58.104"/>
    </slice>
    <from sec="1068526821" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_504{
style=filled;
color=gray75;
3450[label="208.214.122.105;115pkt 115fpkt", shape=pentagon, color=darkviolet];
stat504[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.214.122.105:0, *:0}[93.0435%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.0435%)&lt;BR/&gt; 80: (3.47826%)&lt;BR/&gt; 41408: (0.434783%)&lt;BR/&gt; 39734: (0.434783%)&lt;BR/&gt; 39718: (0.434783%)&gt;];
}
</description>
    <slice>
      <filter src_ip="208.214.122.105"/>
    </slice>
    <from sec="1068526840" usec="0"/>
    <to sec="1068527667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_505{
style=filled;
color=gray75;
3455[label="96.132.181.105;109pkt 109fpkt", shape=pentagon, color=darkviolet];
stat505[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.132.181.105:0, *:0}[95.4128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.4128%)&lt;BR/&gt; 80: (2.29358%)&lt;BR/&gt; 58838: (0.458716%)&lt;BR/&gt; 58631: (0.458716%)&lt;BR/&gt; 56639: (0.458716%)&gt;];
}
</description>
    <slice>
      <filter src_ip="96.132.181.105"/>
    </slice>
    <from sec="1068526808" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.90.6.106"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.131.198.106"/>
    </slice>
    <from sec="1068526807" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.84.8.107"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_509{
style=filled;
color=gray75;
342[label="10.171.16.107;s;22195pkt 22195fpkt", shape=diamond, color=yellow];
1736[label="10.171.16.107;s;12589pkt 12589fpkt", shape=hexagon, color=black];
3470[label="10.171.16.107;24027pkt 24027fpkt", shape=pentagon, color=darkviolet];
stat509[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.171.16.107:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
342--1736[label="1;12589pkt 12589fpkt"];
342--3470[label="1;22195pkt 22195fpkt"];
1736--3470[label="1;12589pkt 12589fpkt"];
</description>
    <slice>
      <filter src_ip="10.171.16.107"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564047,1.73089,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
539[label="212.30.113.107;s;10pkt 10fpkt", shape=diamond, color=yellow];
3474[label="212.30.113.107;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.107:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 49640: (5%)&lt;BR/&gt; 34326: (5%)&lt;BR/&gt; 4793: (5%)&lt;BR/&gt; 4628: (5%)&gt;];
}
539--1356[label="0.1;1pkt 1fpkt"];
539--1544[label="1;10pkt 10fpkt"];
539--3474[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="212.30.113.107" src_port="1863"/>
    </slice>
    <from sec="1068526811" usec="0"/>
    <to sec="1068527644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_511{
style=filled;
color=gray75;
3484[label="202.212.136.108;105pkt 105fpkt", shape=pentagon, color=darkviolet];
stat511[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.212.136.108:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.212.136.108"/>
    </slice>
    <from sec="1068527013" usec="0"/>
    <to sec="1068527626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.138.185.108"/>
    </slice>
    <from sec="1068527228" usec="0"/>
    <to sec="1068527642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
3490[label="96.245.52.109;278pkt 278fpkt", shape=pentagon, color=darkviolet];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.245.52.109:0, *:0}[91.7266%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.7266%)&lt;BR/&gt; 80: (2.15827%)&lt;BR/&gt; 135: (1.97842%)&lt;BR/&gt; 63702: (0.179856%)&lt;BR/&gt; 63150: (0.179856%)&gt;];
}
</description>
    <slice>
      <filter src_ip="96.245.52.109"/>
    </slice>
    <from sec="1068526832" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.107.4.111"/>
    </slice>
    <from sec="1068526820" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_516{
style=filled;
color=gray75;
3503[label="202.156.173.111;120pkt 120fpkt", shape=pentagon, color=darkviolet];
stat516[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.156.173.111:0, *:0}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.3333%)&lt;BR/&gt; 80: (3.33333%)&lt;BR/&gt; 4922: (0.416667%)&lt;BR/&gt; 4195: (0.416667%)&lt;BR/&gt; 4010: (0.416667%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.156.173.111"/>
    </slice>
    <from sec="1068526940" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.162.219.111"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.108.12.112"/>
    </slice>
    <from sec="1068527114" usec="0"/>
    <to sec="1068527134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.18.150.112"/>
    </slice>
    <from sec="1068526860" usec="0"/>
    <to sec="1068527660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.68.155.112"/>
    </slice>
    <from sec="1068526861" usec="0"/>
    <to sec="1068526887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_521{
style=filled;
color=gray75;
303[label="136.93.240.211;d;341pkt 341fpkt", shape=diamond, color=yellow];
551[label="136.93.229.175;d;118pkt 118fpkt", shape=diamond, color=yellow];
593[label="193.14.141.90;s;2pkt 2fpkt", shape=diamond, color=yellow];
864[label="212.30.113.124;s;12pkt 12fpkt", shape=diamond, color=yellow];
948[label="119.198.135.146;s;2pkt 2fpkt", shape=diamond, color=yellow];
1035[label="208.18.24.14;d;189pkt 189fpkt", shape=diamond, color=yellow];
1265[label="7.244.32.166;s;48pkt 48fpkt", shape=diamond, color=yellow];
1307[label="200.202.43.155;s;8pkt 8fpkt", shape=diamond, color=yellow];
1580[label="136.93.240.211;d;278pkt 278fpkt", shape=hexagon, color=black];
1644[label="193.14.141.90;s;2pkt 2fpkt", shape=hexagon, color=black];
1777[label="212.30.113.124;s;10pkt 10fpkt", shape=hexagon, color=black];
2034[label="136.93.243.88;d;57pkt 57fpkt", shape=hexagon, color=black];
2124[label="7.244.32.166;s;48pkt 48fpkt", shape=hexagon, color=black];
2433[label="7.81.7.7;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2512[label="4.88.158.14;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2836[label="4.136.246.41;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2933[label="4.155.77.53;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2969[label="0.38.156.56;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3495[label="7.10.35.110;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3519[label="212.30.118.113;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3597[label="212.30.113.124;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3796[label="119.198.135.146;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3966[label="7.244.32.166;52pkt 52fpkt", shape=pentagon, color=darkviolet];
4261[label="208.16.160.200;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4328[label="4.88.83.210;66pkt 66fpkt", shape=pentagon, color=darkviolet];
4354[label="4.88.186.214;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4412[label="0.58.3.224;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4708[label="4.88.158.14;2pkt 2fpkt", shape=invtriangle, color=brown];
4894[label="4.136.246.41;1pkt 1fpkt", shape=invtriangle, color=brown];
4954[label="4.155.77.53;2pkt 2fpkt", shape=invtriangle, color=brown];
4980[label="0.38.156.56;22pkt 22fpkt", shape=invtriangle, color=brown];
5279[label="212.30.118.113;5pkt 5fpkt", shape=invtriangle, color=brown];
5321[label="212.30.113.124;11pkt 11fpkt", shape=invtriangle, color=brown];
5424[label="119.198.135.146;3pkt 3fpkt", shape=invtriangle, color=brown];
5697[label="4.88.83.210;65pkt 65fpkt", shape=invtriangle, color=brown];
5739[label="0.58.3.224;33pkt 33fpkt", shape=invtriangle, color=brown];
5886[label="4.88.158.14;2pkt 2fpkt", shape=invhouse, color=bisque];
5970[label="4.136.246.41;1pkt 1fpkt", shape=invhouse, color=bisque];
6013[label="0.38.156.56;23pkt 23fpkt", shape=invhouse, color=bisque];
6204[label="119.198.135.146;2pkt 2fpkt", shape=invhouse, color=bisque];
6327[label="4.88.83.210;65pkt 65fpkt", shape=invhouse, color=bisque];
stat521[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.93.240.211:*}[37.2596%]&lt;BR/&gt;{*:80, 208.18.24.14:*}[22.3558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4828%)&lt;BR/&gt; 1863: (2.47649%)&lt;BR/&gt; 110: (1.19122%)&lt;BR/&gt; 25: (0.689655%)&lt;BR/&gt; 32957: (0.282132%)&gt;];
}
303--382[label="0.0150376;4pkt 4fpkt"];
303--457[label="0.0293255;10pkt 10fpkt"];
303--485[label="0.016;4pkt 4fpkt"];
303--492[label="0.0205279;7pkt 7fpkt"];
303--519[label="0.00879765;3pkt 3fpkt"];
303--565[label="0.0782123;14pkt 14fpkt"];
303--593[label="1;2pkt 2fpkt"];
303--670[label="0.0349345;8pkt 8fpkt"];
303--677[label="0.0162602;4pkt 4fpkt"];
303--864[label="0.166667;2pkt 2fpkt"];
303--869[label="0.0405405;6pkt 6fpkt"];
303--948[label="1;2pkt 2fpkt"];
303--987[label="0.0408163;2pkt 2fpkt"];
303--1080[label="0.0361446;3pkt 3fpkt"];
303--1090[label="0.00704225;1pkt 1fpkt"];
303--1097[label="0.0078125;1pkt 1fpkt"];
303--1107[label="0.00826446;1pkt 1fpkt"];
303--1153[label="0.0186335;3pkt 3fpkt"];
303--1202[label="0.0240964;2pkt 2fpkt"];
303--1211[label="0.0234375;3pkt 3fpkt"];
303--1265[label="0.0625;3pkt 3fpkt"];
303--1307[label="1;8pkt 8fpkt"];
303--1355[label="0.125;1pkt 1fpkt"];
303--1462[label="0.0150376;4pkt 4fpkt"];
303--1513[label="0.0350877;4pkt 4fpkt"];
303--1580[label="1;278pkt 278fpkt"];
303--1644[label="1;2pkt 2fpkt"];
303--1777[label="0.2;2pkt 2fpkt"];
303--1800[label="0.0782123;14pkt 14fpkt"];
303--1847[label="0.0293255;10pkt 10fpkt"];
303--1872[label="0.0408163;2pkt 2fpkt"];
303--1890[label="0.0232558;4pkt 4fpkt"];
303--1957[label="0.0205279;7pkt 7fpkt"];
303--1958[label="0.010989;1pkt 1fpkt"];
303--2060[label="0.00746269;1pkt 1fpkt"];
303--2108[label="0.037037;8pkt 8fpkt"];
303--2124[label="0.0625;3pkt 3fpkt"];
303--2126[label="0.0205479;3pkt 3fpkt"];
303--2278[label="0.0293255;10pkt 10fpkt"];
303--2433[label="0.5;2pkt 2fpkt"];
303--2512[label="1;2pkt 2fpkt"];
303--2564[label="0.0181818;1pkt 1fpkt"];
303--2589[label="0.0333333;8pkt 8fpkt"];
303--2819[label="0.2;1pkt 1fpkt"];
303--2836[label="1;2pkt 2fpkt"];
303--2933[label="1;3pkt 3fpkt"];
303--2966[label="0.0214286;3pkt 3fpkt"];
303--2969[label="0.956522;22pkt 22fpkt"];
303--3381[label="0.0185185;3pkt 3fpkt"];
303--3435[label="0.00746269;1pkt 1fpkt"];
303--3472[label="0.125;1pkt 1fpkt"];
303--3495[label="1;5pkt 5fpkt"];
303--3519[label="0.2;1pkt 1fpkt"];
303--3597[label="0.166667;2pkt 2fpkt"];
303--3655[label="0.142857;1pkt 1fpkt"];
303--3796[label="1;3pkt 3fpkt"];
303--3835[label="0.0645161;2pkt 2fpkt"];
303--3890[label="0.00628931;1pkt 1fpkt"];
303--3956[label="0.0384615;2pkt 2fpkt"];
303--3959[label="0.0408163;2pkt 2fpkt"];
303--3963[label="0.00826446;1pkt 1fpkt"];
303--3966[label="0.0576923;3pkt 3fpkt"];
303--4041[label="0.057508;18pkt 18fpkt"];
303--4116[label="0.032967;3pkt 3fpkt"];
303--4261[label="0.8;12pkt 12fpkt"];
303--4288[label="0.0229885;2pkt 2fpkt"];
303--4323[label="0.05;1pkt 1fpkt"];
303--4328[label="0.0757576;5pkt 5fpkt"];
303--4354[label="1;17pkt 17fpkt"];
303--4412[label="0.970588;33pkt 33fpkt"];
303--4565[label="0.0294118;1pkt 1fpkt"];
303--4581[label="0.25;1pkt 1fpkt"];
303--4589[label="0.125;1pkt 1fpkt"];
303--4708[label="1;2pkt 2fpkt"];
303--4740[label="0.0181818;1pkt 1fpkt"];
303--4755[label="0.0333333;8pkt 8fpkt"];
303--4894[label="1;1pkt 1fpkt"];
303--4954[label="1;2pkt 2fpkt"];
303--4977[label="0.0215827;3pkt 3fpkt"];
303--4980[label="0.954545;21pkt 21fpkt"];
303--5206[label="0.0186335;3pkt 3fpkt"];
303--5238[label="0.00746269;1pkt 1fpkt"];
303--5279[label="0.2;1pkt 1fpkt"];
303--5321[label="0.181818;2pkt 2fpkt"];
303--5424[label="1;3pkt 3fpkt"];
303--5469[label="0.00632911;1pkt 1fpkt"];
303--5500[label="0.0384615;2pkt 2fpkt"];
303--5541[label="0.057508;18pkt 18fpkt"];
303--5584[label="0.0333333;3pkt 3fpkt"];
303--5682[label="0.0229885;2pkt 2fpkt"];
303--5697[label="0.0615385;4pkt 4fpkt"];
303--5739[label="1;33pkt 33fpkt"];
303--5886[label="1;2pkt 2fpkt"];
303--5905[label="0.0334728;8pkt 8fpkt"];
303--5970[label="1;1pkt 1fpkt"];
303--6012[label="0.0215827;3pkt 3fpkt"];
303--6013[label="0.956522;22pkt 22fpkt"];
303--6111[label="0.0185185;3pkt 3fpkt"];
303--6166[label="0.142857;1pkt 1fpkt"];
303--6204[label="1;2pkt 2fpkt"];
303--6237[label="0.0384615;2pkt 2fpkt"];
303--6327[label="0.0615385;4pkt 4fpkt"];
551--590[label="0.0169492;2pkt 2fpkt"];
551--729[label="0.0169492;2pkt 2fpkt"];
551--836[label="0.00847458;1pkt 1fpkt"];
551--892[label="0.0125;1pkt 1fpkt"];
551--961[label="0.0138889;1pkt 1fpkt"];
551--987[label="0.0204082;1pkt 1fpkt"];
551--1021[label="0.025641;1pkt 1fpkt"];
551--1202[label="0.0120482;1pkt 1fpkt"];
551--1265[label="0.0208333;1pkt 1fpkt"];
551--1523[label="0.0254237;3pkt 3fpkt"];
551--1571[label="0.1875;12pkt 12fpkt"];
551--1577[label="0.0169492;2pkt 2fpkt"];
551--1655[label="0.0169492;2pkt 2fpkt"];
551--1750[label="0.135593;16pkt 16fpkt"];
551--1764[label="0.00847458;1pkt 1fpkt"];
551--1847[label="0.0338983;4pkt 4fpkt"];
551--1849[label="0.0138889;1pkt 1fpkt"];
551--1872[label="0.0204082;1pkt 1fpkt"];
551--1957[label="0.0169492;2pkt 2fpkt"];
551--1994[label="0.0138889;1pkt 1fpkt"];
551--2002[label="1;110pkt 110fpkt"];
551--2124[label="0.0208333;1pkt 1fpkt"];
551--2246[label="0.190476;12pkt 12fpkt"];
551--2278[label="0.0338983;4pkt 4fpkt"];
551--2979[label="0.00847458;1pkt 1fpkt"];
551--3363[label="0.0909091;1pkt 1fpkt"];
551--3642[label="0.0169492;2pkt 2fpkt"];
551--3650[label="0.00847458;1pkt 1fpkt"];
551--3668[label="0.0169492;2pkt 2fpkt"];
551--3670[label="0.166667;1pkt 1fpkt"];
551--3713[label="0.101695;12pkt 12fpkt"];
551--3835[label="0.0645161;2pkt 2fpkt"];
551--3959[label="0.0204082;1pkt 1fpkt"];
551--3966[label="0.0192308;1pkt 1fpkt"];
551--4288[label="0.0114943;1pkt 1fpkt"];
551--4573[label="0.0178571;1pkt 1fpkt"];
551--5344[label="0.0169492;2pkt 2fpkt"];
551--5347[label="0.00847458;1pkt 1fpkt"];
551--5682[label="0.0114943;1pkt 1fpkt"];
551--5820[label="0.0181818;1pkt 1fpkt"];
551--6162[label="0.0169492;2pkt 2fpkt"];
551--6165[label="0.00847458;1pkt 1fpkt"];
551--6373[label="0.0181818;1pkt 1fpkt"];
593--1580[label="1;2pkt 2fpkt"];
593--1644[label="1;2pkt 2fpkt"];
864--1580[label="0.166667;2pkt 2fpkt"];
864--1777[label="1;10pkt 10fpkt"];
864--3597[label="1;12pkt 12fpkt"];
864--5321[label="1;11pkt 11fpkt"];
948--1580[label="1;2pkt 2fpkt"];
948--3796[label="1;2pkt 2fpkt"];
948--5424[label="1;2pkt 2fpkt"];
948--6204[label="0.5;1pkt 1fpkt"];
1035--1225[label="0.00729927;1pkt 1fpkt"];
1035--1265[label="0.0416667;2pkt 2fpkt"];
1035--1288[label="0.962264;51pkt 51fpkt"];
1035--1680[label="0.0125;1pkt 1fpkt"];
1035--1901[label="1;96pkt 96fpkt"];
1035--2124[label="0.0416667;2pkt 2fpkt"];
1035--2757[label="0.428571;3pkt 3fpkt"];
1035--3473[label="0.852941;29pkt 29fpkt"];
1035--3608[label="0.2;1pkt 1fpkt"];
1035--3681[label="0.583333;28pkt 28fpkt"];
1035--3966[label="0.0384615;2pkt 2fpkt"];
1035--3982[label="0.0490798;8pkt 8fpkt"];
1035--4017[label="0.0714286;1pkt 1fpkt"];
1035--4341[label="0.0588235;3pkt 3fpkt"];
1035--4353[label="0.15;6pkt 6fpkt"];
1035--4569[label="0.25;8pkt 8fpkt"];
1035--4851[label="0.428571;3pkt 3fpkt"];
1035--5365[label="0.574468;27pkt 27fpkt"];
1035--5511[label="0.0490798;8pkt 8fpkt"];
1035--5526[label="0.0769231;1pkt 1fpkt"];
1035--5700[label="0.0588235;3pkt 3fpkt"];
1035--5709[label="0.153846;6pkt 6fpkt"];
1035--6175[label="0.574468;27pkt 27fpkt"];
1035--6242[label="0.0490798;8pkt 8fpkt"];
1035--6247[label="0.0714286;1pkt 1fpkt"];
1035--6328[label="0.04;2pkt 2fpkt"];
1265--1580[label="0.0416667;2pkt 2fpkt"];
1265--1893[label="0.0208333;1pkt 1fpkt"];
1265--2002[label="0.0208333;1pkt 1fpkt"];
1265--2034[label="0.0208333;1pkt 1fpkt"];
1265--2124[label="1;48pkt 48fpkt"];
1265--3966[label="1;48pkt 48fpkt"];
1307--1580[label="1;8pkt 8fpkt"];
1580--1644[label="1;2pkt 2fpkt"];
1580--1777[label="0.2;2pkt 2fpkt"];
1580--1800[label="0.0782123;14pkt 14fpkt"];
1580--1847[label="0.0359712;10pkt 10fpkt"];
1580--1872[label="0.0408163;2pkt 2fpkt"];
1580--1890[label="0.0232558;4pkt 4fpkt"];
1580--1957[label="0.0251799;7pkt 7fpkt"];
1580--1958[label="0.010989;1pkt 1fpkt"];
1580--2060[label="0.00746269;1pkt 1fpkt"];
1580--2108[label="0.037037;8pkt 8fpkt"];
1580--2124[label="0.0416667;2pkt 2fpkt"];
1580--2126[label="0.0205479;3pkt 3fpkt"];
1580--2278[label="0.0359712;10pkt 10fpkt"];
1580--2512[label="1;2pkt 2fpkt"];
1580--2564[label="0.0181818;1pkt 1fpkt"];
1580--2589[label="0.0333333;8pkt 8fpkt"];
1580--2819[label="0.2;1pkt 1fpkt"];
1580--2966[label="0.0214286;3pkt 3fpkt"];
1580--2969[label="0.956522;22pkt 22fpkt"];
1580--3381[label="0.0185185;3pkt 3fpkt"];
1580--3435[label="0.00746269;1pkt 1fpkt"];
1580--3472[label="0.125;1pkt 1fpkt"];
1580--3495[label="1;5pkt 5fpkt"];
1580--3519[label="0.2;1pkt 1fpkt"];
1580--3597[label="0.166667;2pkt 2fpkt"];
1580--3655[label="0.142857;1pkt 1fpkt"];
1580--3796[label="1;3pkt 3fpkt"];
1580--3835[label="0.0645161;2pkt 2fpkt"];
1580--3890[label="0.00628931;1pkt 1fpkt"];
1580--3956[label="0.0384615;2pkt 2fpkt"];
1580--3959[label="0.0408163;2pkt 2fpkt"];
1580--3963[label="0.00826446;1pkt 1fpkt"];
1580--3966[label="0.0384615;2pkt 2fpkt"];
1580--4041[label="0.0647482;18pkt 18fpkt"];
1580--4116[label="0.032967;3pkt 3fpkt"];
1580--4261[label="0.733333;11pkt 11fpkt"];
1580--4288[label="0.0229885;2pkt 2fpkt"];
1580--4323[label="0.05;1pkt 1fpkt"];
1580--4328[label="0.0757576;5pkt 5fpkt"];
1580--4412[label="0.970588;33pkt 33fpkt"];
1580--4565[label="0.0294118;1pkt 1fpkt"];
1580--4581[label="0.25;1pkt 1fpkt"];
1580--4589[label="0.125;1pkt 1fpkt"];
1580--4708[label="1;2pkt 2fpkt"];
1580--4740[label="0.0181818;1pkt 1fpkt"];
1580--4755[label="0.0333333;8pkt 8fpkt"];
1580--4977[label="0.0215827;3pkt 3fpkt"];
1580--4980[label="0.954545;21pkt 21fpkt"];
1580--5206[label="0.0186335;3pkt 3fpkt"];
1580--5238[label="0.00746269;1pkt 1fpkt"];
1580--5279[label="0.2;1pkt 1fpkt"];
1580--5321[label="0.181818;2pkt 2fpkt"];
1580--5424[label="1;3pkt 3fpkt"];
1580--5469[label="0.00632911;1pkt 1fpkt"];
1580--5500[label="0.0384615;2pkt 2fpkt"];
1580--5541[label="0.0647482;18pkt 18fpkt"];
1580--5584[label="0.0333333;3pkt 3fpkt"];
1580--5682[label="0.0229885;2pkt 2fpkt"];
1580--5697[label="0.0615385;4pkt 4fpkt"];
1580--5739[label="1;33pkt 33fpkt"];
1580--5886[label="1;2pkt 2fpkt"];
1580--5905[label="0.0334728;8pkt 8fpkt"];
1580--6012[label="0.0215827;3pkt 3fpkt"];
1580--6013[label="0.956522;22pkt 22fpkt"];
1580--6111[label="0.0185185;3pkt 3fpkt"];
1580--6166[label="0.142857;1pkt 1fpkt"];
1580--6204[label="1;2pkt 2fpkt"];
1580--6237[label="0.0384615;2pkt 2fpkt"];
1580--6327[label="0.0615385;4pkt 4fpkt"];
1777--3597[label="1;10pkt 10fpkt"];
1777--5321[label="0.9;9pkt 9fpkt"];
2034--2060[label="0.0350877;2pkt 2fpkt"];
2034--2073[label="0.0350877;2pkt 2fpkt"];
2034--2124[label="0.0208333;1pkt 1fpkt"];
2034--2623[label="0.0175439;1pkt 1fpkt"];
2034--2645[label="0.0350877;2pkt 2fpkt"];
2034--2979[label="0.0175439;1pkt 1fpkt"];
2034--3827[label="0.0350877;2pkt 2fpkt"];
2034--3890[label="0.0350877;2pkt 2fpkt"];
2034--3966[label="0.0192308;1pkt 1fpkt"];
2034--4041[label="0.491228;28pkt 28fpkt"];
2034--5469[label="0.0350877;2pkt 2fpkt"];
2034--5541[label="0.491228;28pkt 28fpkt"];
2124--3966[label="1;48pkt 48fpkt"];
2512--4708[label="1;2pkt 2fpkt"];
2512--5886[label="1;2pkt 2fpkt"];
2836--4894[label="1;1pkt 1fpkt"];
2836--5970[label="1;1pkt 1fpkt"];
2933--4954[label="1;2pkt 2fpkt"];
2969--4980[label="1;22pkt 22fpkt"];
2969--6013[label="1;23pkt 23fpkt"];
3519--5279[label="1;5pkt 5fpkt"];
3597--5321[label="1;11pkt 11fpkt"];
3796--5424[label="1;3pkt 3fpkt"];
3796--6204[label="1;2pkt 2fpkt"];
4328--5697[label="1;65pkt 65fpkt"];
4328--6327[label="1;65pkt 65fpkt"];
4412--5739[label="1;33pkt 33fpkt"];
4708--5886[label="1;2pkt 2fpkt"];
4894--5970[label="1;1pkt 1fpkt"];
4980--6013[label="1;22pkt 22fpkt"];
5424--6204[label="1;2pkt 2fpkt"];
5697--6327[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.240.211" src_port="80"/>
      <filter dst_ip="208.18.24.14" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.161.67.114"/>
    </slice>
    <from sec="1068527468" usec="0"/>
    <to sec="1068527487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.136.114"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
493[label="208.31.253.115;s;2509pkt 2509fpkt", shape=diamond, color=yellow];
1672[label="208.31.253.115;s;1158pkt 1158fpkt", shape=hexagon, color=black];
3535[label="208.31.253.115;2701pkt 2701fpkt", shape=pentagon, color=darkviolet];
5287[label="208.31.253.115;2701pkt 2701fpkt", shape=invtriangle, color=brown];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.31.253.115:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
493--1672[label="1;1158pkt 1158fpkt"];
493--3535[label="0.999601;2508pkt 2508fpkt"];
493--5287[label="0.999601;2508pkt 2508fpkt"];
1672--3535[label="0.999136;1157pkt 1157fpkt"];
1672--5287[label="0.999136;1157pkt 1157fpkt"];
3535--5287[label="1;2701pkt 2701fpkt"];
</description>
    <slice>
      <filter src_ip="208.31.253.115"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_525{
style=filled;
color=gray75;
3537[label="199.38.2.116;119pkt 119fpkt", shape=pentagon, color=darkviolet];
stat525[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.38.2.116:0, *:0}[90.7563%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (90.7563%)&lt;BR/&gt; 135: (4.62185%)&lt;BR/&gt; 30538: (0.420168%)&lt;BR/&gt; 30397: (0.420168%)&lt;BR/&gt; 29773: (0.420168%)&gt;];
}
</description>
    <slice>
      <filter src_ip="199.38.2.116"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.153.250.116"/>
    </slice>
    <from sec="1068527430" usec="0"/>
    <to sec="1068527521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.70.135.119"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.149.82.120"/>
    </slice>
    <from sec="1068526830" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.118.120"/>
    </slice>
    <from sec="1068526808" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.82.101.121"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.83.161.121"/>
    </slice>
    <from sec="1068527290" usec="0"/>
    <to sec="1068527306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_532{
style=filled;
color=gray75;
3580[label="197.96.248.121;127pkt 127fpkt", shape=pentagon, color=darkviolet];
stat532[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.96.248.121:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="197.96.248.121"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_533{
style=filled;
color=gray75;
1284[label="136.93.242.152;d;96pkt 96fpkt", shape=diamond, color=yellow];
1872[label="7.244.32.165;s;49pkt 49fpkt", shape=hexagon, color=black];
3183[label="198.181.202.76;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3565[label="198.181.200.119;25pkt 25fpkt", shape=pentagon, color=darkviolet];
stat533[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.244.32.165:80, *:*}[34.0278%]&lt;BR/&gt;{7.210.224.0:80, 136.93.242.152:*}[20.1389%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1463: (0.773196%)&lt;BR/&gt; 1445: (0.773196%)&lt;BR/&gt; 1530: (0.515464%)&lt;BR/&gt; 1466: (0.515464%)&gt;];
}
1284--1462[label="0.0625;6pkt 6fpkt"];
1284--1691[label="0.302083;29pkt 29fpkt"];
1284--1764[label="0.03125;3pkt 3fpkt"];
1284--1872[label="0.0204082;1pkt 1fpkt"];
1284--2363[label="0.302083;29pkt 29fpkt"];
1284--3183[label="1;24pkt 24fpkt"];
1284--3565[label="1;25pkt 25fpkt"];
1284--3593[label="0.030303;1pkt 1fpkt"];
1284--3959[label="0.0204082;1pkt 1fpkt"];
1284--4632[label="0.302083;29pkt 29fpkt"];
1284--6151[label="0.03125;1pkt 1fpkt"];
1872--1966[label="0.0408163;2pkt 2fpkt"];
1872--2002[label="0.0204082;1pkt 1fpkt"];
1872--2304[label="0.0204082;1pkt 1fpkt"];
1872--3959[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter src_ip="7.244.32.165" src_port="80"/>
      <filter dst_ip="136.93.242.152" src_ip="7.210.224.0" src_port="80"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.137.90.124"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_535{
style=filled;
color=gray75;
3599[label="96.186.210.124;126pkt 126fpkt", shape=pentagon, color=darkviolet];
stat535[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.186.210.124:0, *:0}[99.2063%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.2063%)&lt;BR/&gt; 31584: (0.396825%)&lt;BR/&gt; 80: (0.396825%)&gt;];
}
</description>
    <slice>
      <filter src_ip="96.186.210.124"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_537{
style=filled;
color=gray75;
1074[label="136.93.70.145;d;126pkt 126fpkt", shape=diamond, color=yellow];
1181[label="219.162.16.126;s;81pkt 81fpkt", shape=diamond, color=yellow];
2206[label="136.93.70.145;d;126pkt 126fpkt", shape=hexagon, color=black];
3613[label="219.162.16.126;80pkt 80fpkt", shape=pentagon, color=darkviolet];
stat537[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.162.16.126:80, 136.93.70.145:*}[64.2857%]&lt;BR/&gt;{219.162.16.124:80, 136.93.70.145:*}[34.9206%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7579%)&lt;BR/&gt; 3576: (0.484262%)&lt;BR/&gt; 3575: (0.484262%)&lt;BR/&gt; 3559: (0.484262%)&lt;BR/&gt; 3558: (0.484262%)&gt;];
}
1074--1181[label="1;81pkt 81fpkt"];
1074--2206[label="1;126pkt 126fpkt"];
1074--3613[label="1;80pkt 80fpkt"];
1181--2206[label="1;81pkt 81fpkt"];
1181--3613[label="1;80pkt 80fpkt"];
2206--3613[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.70.145" src_ip="219.162.16.126" src_port="80"/>
      <filter dst_ip="136.93.70.145" src_ip="219.162.16.124" src_port="80"/>
    </slice>
    <from sec="1068527289" usec="0"/>
    <to sec="1068527472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.149.30.127"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.138.154.127"/>
    </slice>
    <from sec="1068526979" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.150.202.128"/>
    </slice>
    <from sec="1068527267" usec="0"/>
    <to sec="1068527298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790933,1.81327,020,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_542{
style=filled;
color=gray75;
1488[label="136.93.132.122;d;537pkt 537fpkt", shape=hexagon, color=black];
stat542[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 136.93.132.122:0}[99.8138%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8138%)&lt;BR/&gt; 3972: (0.0931099%)&lt;BR/&gt; 80: (0.0931099%)&gt;];
}
1488--3824[label="0.333333;1pkt 1fpkt"];
1488--5434[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.132.122"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068526998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_543{
style=filled;
color=gray75;
903[label="98.16.159.112;s;51pkt 51fpkt", shape=diamond, color=yellow];
2008[label="98.16.159.112;s;46pkt 46fpkt", shape=hexagon, color=black];
3514[label="98.16.159.112;50pkt 50fpkt", shape=pentagon, color=darkviolet];
5275[label="98.16.159.112;50pkt 50fpkt", shape=invtriangle, color=brown];
6135[label="98.16.159.112;50pkt 50fpkt", shape=invhouse, color=bisque];
stat543[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.16.159.112:80, 143.38.12.85:*}[58.8235%]&lt;BR/&gt;{98.16.159.112:443, 143.38.12.85:*}[41.1765%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.7571%)&lt;BR/&gt; 443: (20.2429%)&lt;BR/&gt; 1590: (1.01215%)&lt;BR/&gt; 1589: (1.01215%)&lt;BR/&gt; 1586: (1.01215%)&gt;];
}
903--1765[label="0.862745;44pkt 44fpkt"];
903--2008[label="1;46pkt 46fpkt"];
903--3514[label="1;50pkt 50fpkt"];
903--5275[label="1;50pkt 50fpkt"];
903--6135[label="1;50pkt 50fpkt"];
2008--3514[label="0.978261;45pkt 45fpkt"];
2008--5275[label="0.978261;45pkt 45fpkt"];
2008--6135[label="0.978261;45pkt 45fpkt"];
3514--5275[label="1;50pkt 50fpkt"];
3514--6135[label="1;50pkt 50fpkt"];
5275--6135[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.12.85" src_ip="98.16.159.112" src_port="80"/>
      <filter dst_ip="143.38.12.85" src_ip="98.16.159.112" src_port="443"/>
    </slice>
    <from sec="1068526847" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.105.199.129"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.140.6.130"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_546{
style=filled;
color=gray75;
3658[label="199.153.209.131;91pkt 91fpkt", shape=pentagon, color=darkviolet];
stat546[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.153.209.131:0, *:0}[90.1099%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (90.1099%)&lt;BR/&gt; 135: (4.94505%)&lt;BR/&gt; 63392: (0.549451%)&lt;BR/&gt; 60859: (0.549451%)&lt;BR/&gt; 56893: (0.549451%)&gt;];
}
</description>
    <slice>
      <filter src_ip="199.153.209.131"/>
    </slice>
    <from sec="1068526822" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_547{
style=filled;
color=gray75;
351[label="10.141.20.132;s;24346pkt 24346fpkt", shape=diamond, color=yellow];
1508[label="10.141.20.132;s;9096pkt 9096fpkt", shape=hexagon, color=black];
3661[label="10.141.20.132;26255pkt 26255fpkt", shape=pentagon, color=darkviolet];
5353[label="10.141.20.132;26254pkt 26254fpkt", shape=invtriangle, color=brown];
stat547[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.141.20.132:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
351--1508[label="1;9096pkt 9096fpkt"];
351--3661[label="1;24346pkt 24346fpkt"];
351--5353[label="0.999959;24345pkt 24345fpkt"];
1508--3661[label="1;9096pkt 9096fpkt"];
1508--5353[label="1;9096pkt 9096fpkt"];
3661--5353[label="1;26254pkt 26254fpkt"];
</description>
    <slice>
      <filter src_ip="10.141.20.132"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.131.123.133"/>
    </slice>
    <from sec="1068526832" usec="0"/>
    <to sec="1068527676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_550{
style=filled;
color=gray75;
3679[label="202.146.90.134;239pkt 239fpkt", shape=pentagon, color=darkviolet];
stat550[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.146.90.134:0, *:0}[98.7448%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.7448%)&lt;BR/&gt; 80: (0.627615%)&lt;BR/&gt; 4612: (0.209205%)&lt;BR/&gt; 4196: (0.209205%)&lt;BR/&gt; 4139: (0.209205%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.146.90.134"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.199.97.134"/>
    </slice>
    <from sec="1068526864" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_552{
style=filled;
color=gray75;
3684[label="202.137.128.134;133pkt 133fpkt", shape=pentagon, color=darkviolet];
stat552[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.137.128.134:0, *:0}[93.985%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.985%)&lt;BR/&gt; 80: (3.00752%)&lt;BR/&gt; 65433: (0.37594%)&lt;BR/&gt; 65051: (0.37594%)&lt;BR/&gt; 64929: (0.37594%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.137.128.134"/>
    </slice>
    <from sec="1068527097" usec="0"/>
    <to sec="1068527691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.153.40.135"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_554{
style=filled;
color=gray75;
3694[label="96.169.43.135;449pkt 449fpkt", shape=pentagon, color=darkviolet];
stat554[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.169.43.135:0, *:0}[95.5457%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.5457%)&lt;BR/&gt; 80: (2.22717%)&lt;BR/&gt; 63739: (0.111359%)&lt;BR/&gt; 60594: (0.111359%)&lt;BR/&gt; 36919: (0.111359%)&gt;];
}
</description>
    <slice>
      <filter src_ip="96.169.43.135"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.172.79.135"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.153.87.135"/>
    </slice>
    <from sec="1068526825" usec="0"/>
    <to sec="1068527378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12377,1.84878,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_557{
style=filled;
color=gray75;
69[label="210.20.28.136s;189pkt 189fpkt", shape=rectangle, color=red];
3705[label="210.20.28.136;254pkt 254fpkt", shape=pentagon, color=darkviolet];
5376[label="210.20.28.136;253pkt 253fpkt", shape=invtriangle, color=brown];
stat557[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.20.28.136:1047, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1047: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
69--3705[label="1;189pkt 189fpkt"];
69--5376[label="0.994709;188pkt 188fpkt"];
3705--5376[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.20.28.136" src_port="1047"/>
    </slice>
    <from sec="1068527446" usec="0"/>
    <to sec="1068527470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_558{
style=filled;
color=gray75;
912[label="7.50.43.136;s;17pkt 17fpkt", shape=diamond, color=yellow];
3707[label="7.50.43.136;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5378[label="7.50.43.136;17pkt 17fpkt", shape=invtriangle, color=brown];
stat558[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.50.43.136:80, 208.159.185.117:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39389: (2.94118%)&lt;BR/&gt; 39382: (2.94118%)&lt;BR/&gt; 39380: (2.94118%)&lt;BR/&gt; 39367: (2.94118%)&gt;];
}
912--1839[label="1;17pkt 17fpkt"];
912--3707[label="1;17pkt 17fpkt"];
912--5378[label="1;17pkt 17fpkt"];
3707--5378[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="208.159.185.117" src_ip="7.50.43.136" src_port="80"/>
    </slice>
    <from sec="1068526945" usec="0"/>
    <to sec="1068527205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_559{
style=filled;
color=gray75;
3708[label="202.203.53.136;139pkt 139fpkt", shape=pentagon, color=darkviolet];
stat559[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.203.53.136:0, *:0}[98.5612%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.5612%)&lt;BR/&gt; 80: (0.719424%)&lt;BR/&gt; 63628: (0.359712%)&lt;BR/&gt; 50705: (0.359712%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.203.53.136"/>
    </slice>
    <from sec="1068526870" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.210.186.136"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
556[label="136.93.203.120;d;23pkt 23fpkt", shape=diamond, color=yellow];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.118.36.132:80, 136.93.203.120:*}[34.7826%]&lt;BR/&gt;{7.219.223.136:80, 136.93.203.120:*}[34.7826%]&lt;BR/&gt;{212.118.38.230:80, 136.93.203.120:*}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1091: (2.17391%)&lt;BR/&gt; 1090: (2.17391%)&lt;BR/&gt; 1089: (2.17391%)&lt;BR/&gt; 1088: (2.17391%)&gt;];
}
556--1523[label="0.26087;6pkt 6fpkt"];
556--1553[label="1;23pkt 23fpkt"];
556--1571[label="0.347826;8pkt 8fpkt"];
556--1750[label="0.0434783;1pkt 1fpkt"];
556--1957[label="0.347826;8pkt 8fpkt"];
556--2246[label="0.347826;8pkt 8fpkt"];
556--3713[label="0.347826;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.203.120" src_ip="7.219.223.136" src_port="80"/>
      <filter dst_ip="136.93.203.120" src_ip="212.118.36.132" src_port="80"/>
      <filter dst_ip="136.93.203.120" src_ip="212.118.38.230" src_port="80"/>
    </slice>
    <from sec="1068526843" usec="0"/>
    <to sec="1068526927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.227.52.137"/>
    </slice>
    <from sec="1068527278" usec="0"/>
    <to sec="1068527301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_563{
style=filled;
color=gray75;
3723[label="202.212.50.138;116pkt 116fpkt", shape=pentagon, color=darkviolet];
stat563[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.212.50.138:0, *:0}[98.2759%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.2759%)&lt;BR/&gt; 80: (0.862069%)&lt;BR/&gt; 63955: (0.431034%)&lt;BR/&gt; 61873: (0.431034%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.212.50.138"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.18.150.138"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.105.151.138"/>
    </slice>
    <from sec="1068526904" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.153.164.138"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564047,1.73089,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
754[label="161.29.74.241;d;568pkt 568fpkt", shape=diamond, color=yellow];
3350[label="200.193.215.95;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 161.29.74.241:21}[96.2069%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (48.7091%)&lt;BR/&gt; 4672: (3.5284%)&lt;BR/&gt; 5050: (0.60241%)&lt;BR/&gt; 4665: (0.258176%)&lt;BR/&gt; 3495: (0.258176%)&gt;];
}
754--917[label="0.0860215;8pkt 8fpkt"];
754--1428[label="0.00176056;1pkt 1fpkt"];
754--2202[label="0.0860215;8pkt 8fpkt"];
754--2223[label="0.00176056;1pkt 1fpkt"];
754--2530[label="0.00176056;1pkt 1fpkt"];
754--3350[label="0.0769231;1pkt 1fpkt"];
754--3735[label="0.0860215;8pkt 8fpkt"];
754--4717[label="0.00176056;1pkt 1fpkt"];
754--5892[label="0.00176056;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.74.241" dst_port="21"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.125.173.139"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564047,1.73089,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_569{
style=filled;
color=gray75;
927[label="197.237.34.131;s;7pkt 7fpkt", shape=diamond, color=yellow];
3746[label="208.209.94.140;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat569[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.237.34.131:80, 208.18.27.25:*}[63.6364%]&lt;BR/&gt;{208.209.94.140:80, 208.18.27.25:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 3683: (4.54545%)&lt;BR/&gt; 3682: (4.54545%)&lt;BR/&gt; 3681: (4.54545%)&lt;BR/&gt; 3677: (4.54545%)&gt;];
}
927--1815[label="1;7pkt 7fpkt"];
927--2180[label="1;7pkt 7fpkt"];
927--3653[label="1;7pkt 7fpkt"];
3746--5397[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.27.25" src_ip="197.237.34.131" src_port="80"/>
      <filter dst_ip="208.18.27.25" src_ip="208.209.94.140" src_port="80"/>
    </slice>
    <from sec="1068527076" usec="0"/>
    <to sec="1068527412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.108.102.144"/>
    </slice>
    <from sec="1068527681" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.119.144"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.19.174.144"/>
    </slice>
    <from sec="1068527593" usec="0"/>
    <to sec="1068527616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_573{
style=filled;
color=gray75;
3790[label="6.126.213.145;119pkt 119fpkt", shape=pentagon, color=darkviolet];
stat573[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.126.213.145:0, *:0}[96.6387%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.6387%)&lt;BR/&gt; 80: (1.68067%)&lt;BR/&gt; 60054: (0.420168%)&lt;BR/&gt; 13265: (0.420168%)&lt;BR/&gt; 10033: (0.420168%)&gt;];
}
</description>
    <slice>
      <filter src_ip="6.126.213.145"/>
    </slice>
    <from sec="1068526816" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_574{
style=filled;
color=gray75;
3807[label="203.107.87.147;180pkt 180fpkt", shape=pentagon, color=darkviolet];
stat574[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.107.87.147:0, *:0}[96.1111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.1111%)&lt;BR/&gt; 80: (1.94444%)&lt;BR/&gt; 52147: (0.277778%)&lt;BR/&gt; 48474: (0.277778%)&lt;BR/&gt; 46254: (0.277778%)&gt;];
}
</description>
    <slice>
      <filter src_ip="203.107.87.147"/>
    </slice>
    <from sec="1068526809" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.250.204.147"/>
    </slice>
    <from sec="1068527191" usec="0"/>
    <to sec="1068527271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.24.172.148"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.164.122.149"/>
    </slice>
    <from sec="1068527522" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.85.138.150"/>
    </slice>
    <from sec="1068527256" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.100.176.150"/>
    </slice>
    <from sec="1068527634" usec="0"/>
    <to sec="1068527674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.173.181.150"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.127.195.150"/>
    </slice>
    <from sec="1068526810" usec="0"/>
    <to sec="1068527595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_582{
style=filled;
color=gray75;
3845[label="204.139.17.151;142pkt 142fpkt", shape=pentagon, color=darkviolet];
stat582[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.139.17.151:0, *:0}[98.5915%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.5915%)&lt;BR/&gt; 80: (0.704225%)&lt;BR/&gt; 4062: (0.352113%)&lt;BR/&gt; 3413: (0.352113%)&gt;];
}
</description>
    <slice>
      <filter src_ip="204.139.17.151"/>
    </slice>
    <from sec="1068526897" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.120.24.151"/>
    </slice>
    <from sec="1068526810" usec="0"/>
    <to sec="1068527690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_584{
style=filled;
color=gray75;
3855[label="160.27.20.152;149pkt 149fpkt", shape=pentagon, color=darkviolet];
stat584[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.27.20.152:0, *:0}[98.6577%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.6577%)&lt;BR/&gt; 80: (0.671141%)&lt;BR/&gt; 60005: (0.33557%)&lt;BR/&gt; 4658: (0.33557%)&gt;];
}
</description>
    <slice>
      <filter src_ip="160.27.20.152"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.67.129.152"/>
    </slice>
    <from sec="1068527311" usec="0"/>
    <to sec="1068527330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_586{
style=filled;
color=gray75;
390[label="209.139.227.43;d;592pkt 592fpkt", shape=diamond, color=yellow];
1539[label="128.29.213.131;s;65pkt 65fpkt", shape=hexagon, color=black];
2600[label="96.81.210.20;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2813[label="98.18.194.39;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3652[label="4.124.12.131;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3787[label="214.17.154.145;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3867[label="201.222.248.152;39pkt 39fpkt", shape=pentagon, color=darkviolet];
4043[label="219.130.251.174;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4249[label="192.205.46.199;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4763[label="96.81.210.20;14pkt 14fpkt", shape=invtriangle, color=brown];
5543[label="219.130.251.174;19pkt 19fpkt", shape=invtriangle, color=brown];
5658[label="192.205.46.199;9pkt 9fpkt", shape=invtriangle, color=brown];
6253[label="219.130.251.174;20pkt 20fpkt", shape=invhouse, color=bisque];
stat586[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 209.139.227.43:*}[74.4413%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.0211%)&lt;BR/&gt; 41170: (2.63775%)&lt;BR/&gt; 443: (2.22743%)&lt;BR/&gt; 0: (0.820633%)&lt;BR/&gt; 43244: (0.7034%)&gt;];
}
390--676[label="0.0990099;10pkt 10fpkt"];
390--728[label="0.0167598;3pkt 3fpkt"];
390--1539[label="0.0153846;1pkt 1fpkt"];
390--1614[label="0.0172414;1pkt 1fpkt"];
390--1844[label="0.0167598;3pkt 3fpkt"];
390--2600[label="1;15pkt 15fpkt"];
390--2787[label="0.125;8pkt 8fpkt"];
390--2813[label="1;16pkt 16fpkt"];
390--2888[label="0.5625;27pkt 27fpkt"];
390--3021[label="1;10pkt 10fpkt"];
390--3212[label="1;21pkt 21fpkt"];
390--3652[label="0.863636;19pkt 19fpkt"];
390--3685[label="0.117647;4pkt 4fpkt"];
390--3787[label="0.923077;12pkt 12fpkt"];
390--3858[label="1;14pkt 14fpkt"];
390--3867[label="0.025641;1pkt 1fpkt"];
390--4003[label="0.15;6pkt 6fpkt"];
390--4043[label="0.15;3pkt 3fpkt"];
390--4249[label="0.888889;8pkt 8fpkt"];
390--4763[label="1;14pkt 14fpkt"];
390--5008[label="1;10pkt 10fpkt"];
390--5110[label="1;21pkt 21fpkt"];
390--5367[label="0.121212;4pkt 4fpkt"];
390--5456[label="1;14pkt 14fpkt"];
390--5519[label="0.15;6pkt 6fpkt"];
390--5543[label="0.157895;3pkt 3fpkt"];
390--5658[label="0.888889;8pkt 8fpkt"];
390--6177[label="0.121212;4pkt 4fpkt"];
390--6253[label="0.15;3pkt 3fpkt"];
1539--1953[label="0.145833;7pkt 7fpkt"];
1539--1977[label="0.55;33pkt 33fpkt"];
1539--2226[label="0.0153846;1pkt 1fpkt"];
1539--2306[label="0.659574;31pkt 31fpkt"];
2600--4763[label="1;14pkt 14fpkt"];
4043--5543[label="1;19pkt 19fpkt"];
4043--6253[label="1;20pkt 20fpkt"];
4249--5658[label="1;9pkt 9fpkt"];
5543--6253[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="209.139.227.43" src_port="80"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_587{
style=filled;
color=gray75;
3872[label="200.196.243.153;362pkt 362fpkt", shape=pentagon, color=darkviolet];
stat587[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.196.243.153:0, *:0}[91.1602%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.1602%)&lt;BR/&gt; 80: (2.76243%)&lt;BR/&gt; 135: (1.65746%)&lt;BR/&gt; 63171: (0.138122%)&lt;BR/&gt; 62270: (0.138122%)&gt;];
}
</description>
    <slice>
      <filter src_ip="200.196.243.153"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_588{
style=filled;
color=gray75;
677[label="200.110.12.4;s;246pkt 246fpkt", shape=diamond, color=yellow];
stat588[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.110.12.4:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65112: (0.203252%)&lt;BR/&gt; 65109: (0.203252%)&lt;BR/&gt; 64636: (0.203252%)&lt;BR/&gt; 60180: (0.203252%)&gt;];
}
677--853[label="0.106383;5pkt 5fpkt"];
677--881[label="0.0322581;4pkt 4fpkt"];
677--893[label="0.0136986;1pkt 1fpkt"];
677--1349[label="0.0285714;1pkt 1fpkt"];
677--1427[label="0.0121951;3pkt 3fpkt"];
677--1433[label="0.0609756;15pkt 15fpkt"];
677--1463[label="0.00406504;1pkt 1fpkt"];
677--1499[label="0.0162602;4pkt 4fpkt"];
677--1580[label="0.0162602;4pkt 4fpkt"];
677--1664[label="0.00819672;1pkt 1fpkt"];
677--1839[label="0.00406504;1pkt 1fpkt"];
677--1890[label="1;172pkt 172fpkt"];
677--1966[label="0.011236;2pkt 2fpkt"];
677--2109[label="0.0322581;4pkt 4fpkt"];
677--2163[label="0.00406504;1pkt 1fpkt"];
677--2184[label="0.0285714;1pkt 1fpkt"];
677--2225[label="0.0609756;15pkt 15fpkt"];
677--2245[label="0.00406504;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="200.110.12.4" src_port="80"/>
    </slice>
    <from sec="1068526813" usec="0"/>
    <to sec="1068527626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
3898[label="197.97.42.157;364pkt 364fpkt", shape=pentagon, color=darkviolet];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.97.42.157:0, *:0}[99.1758%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.1758%)&lt;BR/&gt; 80: (0.412088%)&lt;BR/&gt; 56954: (0.137363%)&lt;BR/&gt; 48766: (0.137363%)&lt;BR/&gt; 33241: (0.137363%)&gt;];
}
</description>
    <slice>
      <filter src_ip="197.97.42.157"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.220.101.158"/>
    </slice>
    <from sec="1068526815" usec="0"/>
    <to sec="1068527677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_592{
style=filled;
color=gray75;
3911[label="203.99.179.158;102pkt 102fpkt", shape=pentagon, color=darkviolet];
stat592[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.99.179.158:0, *:0}[97.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.0588%)&lt;BR/&gt; 80: (1.47059%)&lt;BR/&gt; 51819: (0.490196%)&lt;BR/&gt; 48503: (0.490196%)&lt;BR/&gt; 48107: (0.490196%)&gt;];
}
</description>
    <slice>
      <filter src_ip="203.99.179.158"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_593{
style=filled;
color=gray75;
3920[label="96.246.39.160;439pkt 439fpkt", shape=pentagon, color=darkviolet];
stat593[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.246.39.160:0, *:0}[92.7107%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.7107%)&lt;BR/&gt; 135: (1.93622%)&lt;BR/&gt; 80: (1.59453%)&lt;BR/&gt; 65046: (0.113895%)&lt;BR/&gt; 61886: (0.113895%)&gt;];
}
</description>
    <slice>
      <filter src_ip="96.246.39.160"/>
    </slice>
    <from sec="1068526815" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.116.69.160"/>
    </slice>
    <from sec="1068526855" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.197.90.160"/>
    </slice>
    <from sec="1068527005" usec="0"/>
    <to sec="1068527340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_596{
style=filled;
color=gray75;
3932[label="96.157.193.160;123pkt 123fpkt", shape=pentagon, color=darkviolet];
stat596[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.157.193.160:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="96.157.193.160"/>
    </slice>
    <from sec="1068526836" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0863,1.87777,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_597{
style=filled;
color=gray75;
76[label="1.196.216.160s;223pkt 223fpkt", shape=rectangle, color=red];
3933[label="1.196.216.160;256pkt 256fpkt", shape=pentagon, color=darkviolet];
stat597[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.196.216.160:61150, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61150: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
76--3933[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.196.216.160" src_port="61150"/>
    </slice>
    <from sec="1068527616" usec="0"/>
    <to sec="1068527630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.203.53.161"/>
    </slice>
    <from sec="1068527011" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12377,1.84878,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_599{
style=filled;
color=gray75;
79[label="7.223.65.162s;56pkt 56fpkt", shape=rectangle, color=red];
3940[label="7.223.65.162;251pkt 251fpkt", shape=pentagon, color=darkviolet];
5494[label="7.223.65.162;251pkt 251fpkt", shape=invtriangle, color=brown];
stat599[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.223.65.162:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
79--3940[label="1;56pkt 56fpkt"];
79--5494[label="1;56pkt 56fpkt"];
3940--5494[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="7.223.65.162" src_port="1029"/>
    </slice>
    <from sec="1068527083" usec="0"/>
    <to sec="1068527097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.29.74.162"/>
    </slice>
    <from sec="1068527076" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.95.8.163"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_602{
style=filled;
color=gray75;
3945[label="202.204.54.163;245pkt 245fpkt", shape=pentagon, color=darkviolet];
stat602[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.204.54.163:0, *:0}[95.9184%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.9184%)&lt;BR/&gt; 80: (2.04082%)&lt;BR/&gt; 4663: (0.204082%)&lt;BR/&gt; 3955: (0.204082%)&lt;BR/&gt; 2697: (0.204082%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.204.54.163"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.20.31.164"/>
    </slice>
    <from sec="1068526822" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.153.235.164"/>
    </slice>
    <from sec="1068527025" usec="0"/>
    <to sec="1068527532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.210.186.167"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.221.251.168"/>
    </slice>
    <from sec="1068527468" usec="0"/>
    <to sec="1068527509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.117.153.169"/>
    </slice>
    <from sec="1068527484" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.209.202.169"/>
    </slice>
    <from sec="1068526833" usec="0"/>
    <to sec="1068527682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.153.235.169"/>
    </slice>
    <from sec="1068527106" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.152.25.170"/>
    </slice>
    <from sec="1068527309" usec="0"/>
    <to sec="1068527686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564047,1.73089,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
767[label="146.153.26.170;s;76pkt 76fpkt", shape=diamond, color=yellow];
3998[label="146.153.26.170;78pkt 78fpkt", shape=pentagon, color=darkviolet];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.26.170:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4653: (1.2987%)&lt;BR/&gt; 65387: (0.649351%)&lt;BR/&gt; 59357: (0.649351%)&lt;BR/&gt; 59309: (0.649351%)&gt;];
}
767--3998[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter src_ip="146.153.26.170" src_port="25"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
3062[label="4.210.185.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.210.185.66:80, 208.31.228.65:30014}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30014: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3062--5028[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.65" dst_port="30014" src_ip="4.210.185.66" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.176.248.170"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.25.154.172"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12377,1.84878,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_615{
style=filled;
color=gray75;
87[label="202.201.166.199s;283pkt 283fpkt", shape=rectangle, color=red];
4037[label="209.226.87.174;148pkt 148fpkt", shape=pentagon, color=darkviolet];
4251[label="202.201.166.199;253pkt 253fpkt", shape=pentagon, color=darkviolet];
5660[label="202.201.166.199;252pkt 252fpkt", shape=invtriangle, color=brown];
stat615[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.201.166.199:1030, *:137}[63.0923%]&lt;BR/&gt;{209.226.87.174:1034, *:137}[36.9077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1030: (36.1645%)&lt;BR/&gt; 1034: (13.8355%)&gt;];
}
87--4037[label="0.75;111pkt 111fpkt"];
87--4251[label="0.679842;172pkt 172fpkt"];
87--5660[label="0.68254;172pkt 172fpkt"];
4251--5660[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.201.166.199" src_port="1030"/>
      <filter dst_port="137" src_ip="209.226.87.174" src_port="1034"/>
    </slice>
    <from sec="1068527063" usec="0"/>
    <to sec="1068527086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.211.44.175"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068526811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.88.12.176"/>
    </slice>
    <from sec="1068526899" usec="0"/>
    <to sec="1068527010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_618{
style=filled;
color=gray75;
1410[label="219.130.251.176;s;2pkt 2fpkt", shape=diamond, color=yellow];
4057[label="219.130.251.176;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5551[label="219.130.251.176;1pkt 1fpkt", shape=invtriangle, color=brown];
stat618[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.130.251.176:80, 136.93.75.128:37846}[50%]&lt;BR/&gt;{219.130.251.176:80, 136.93.75.128:37847}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37847: (37.5%)&lt;BR/&gt; 37846: (12.5%)&gt;];
}
1410--4057[label="1;1pkt 1fpkt"];
1410--5551[label="1;1pkt 1fpkt"];
4057--5551[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.75.128" dst_port="37847" src_ip="219.130.251.176" src_port="80"/>
      <filter dst_ip="136.93.75.128" dst_port="37846" src_ip="219.130.251.176" src_port="80"/>
    </slice>
    <from sec="1068527570" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.102.151.177"/>
    </slice>
    <from sec="1068526826" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.214.40.178"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.162.144.178"/>
    </slice>
    <from sec="1068527460" usec="0"/>
    <to sec="1068527495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.102.195.178"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_623{
style=filled;
color=gray75;
812[label="213.6.213.178;s;17pkt 17fpkt", shape=diamond, color=yellow];
4080[label="213.6.213.178;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5566[label="213.6.213.178;16pkt 16fpkt", shape=invtriangle, color=brown];
stat623[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.6.213.178:80, 208.159.185.117:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53186: (3%)&lt;BR/&gt; 53185: (3%)&lt;BR/&gt; 53182: (3%)&lt;BR/&gt; 53181: (3%)&gt;];
}
812--1839[label="1;17pkt 17fpkt"];
812--4080[label="1;17pkt 17fpkt"];
812--5566[label="1;16pkt 16fpkt"];
4080--5566[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="208.159.185.117" src_ip="213.6.213.178" src_port="80"/>
    </slice>
    <from sec="1068527101" usec="0"/>
    <to sec="1068527185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_624{
style=filled;
color=gray75;
989[label="146.153.24.180;s;56pkt 56fpkt", shape=diamond, color=yellow];
2085[label="146.153.24.180;s;47pkt 47fpkt", shape=hexagon, color=black];
4084[label="146.153.24.180;58pkt 58fpkt", shape=pentagon, color=darkviolet];
stat624[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.24.180:80, 204.39.144.72:*}[55.1724%]&lt;BR/&gt;{146.153.24.180:80, 96.84.231.152:*}[32.7586%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60561: (0.931677%)&lt;BR/&gt; 59355: (0.931677%)&lt;BR/&gt; 58188: (0.931677%)&lt;BR/&gt; 55639: (0.931677%)&gt;];
}
989--2085[label="1;47pkt 47fpkt"];
989--4084[label="1;56pkt 56fpkt"];
2085--4084[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="204.39.144.72" src_ip="146.153.24.180" src_port="80"/>
      <filter dst_ip="96.84.231.152" src_ip="146.153.24.180" src_port="80"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.118.40.181"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_627{
style=filled;
color=gray75;
436[label="146.153.42.8;d;180pkt 180fpkt", shape=diamond, color=yellow];
1576[label="146.153.42.8;d;72pkt 72fpkt", shape=hexagon, color=black];
2535[label="202.199.192.15;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4068[label="202.201.72.178;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4101[label="208.216.150.181;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4242[label="7.94.86.198;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4721[label="202.199.192.15;8pkt 8fpkt", shape=invtriangle, color=brown];
5559[label="202.201.72.178;7pkt 7fpkt", shape=invtriangle, color=brown];
5576[label="208.216.150.181;5pkt 5fpkt", shape=invtriangle, color=brown];
stat627[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 146.153.42.8:8884}[25.8065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8884: (14.6382%)&lt;BR/&gt; 8883: (9.375%)&lt;BR/&gt; 8881: (5.09868%)&lt;BR/&gt; 8882: (4.44079%)&lt;BR/&gt; 6969: (3.78289%)&gt;];
}
436--1346[label="0.00555556;1pkt 1fpkt"];
436--1576[label="1;72pkt 72fpkt"];
436--2535[label="0.428571;3pkt 3fpkt"];
436--4068[label="1;7pkt 7fpkt"];
436--4101[label="0.75;3pkt 3fpkt"];
436--4242[label="1;14pkt 14fpkt"];
436--4478[label="0.00555556;1pkt 1fpkt"];
436--4721[label="0.375;3pkt 3fpkt"];
436--5559[label="1;7pkt 7fpkt"];
436--5576[label="0.8;4pkt 4fpkt"];
436--5765[label="0.00555556;1pkt 1fpkt"];
1576--2535[label="0.285714;2pkt 2fpkt"];
1576--4068[label="0.428571;3pkt 3fpkt"];
1576--4242[label="0.428571;6pkt 6fpkt"];
1576--4478[label="0.0138889;1pkt 1fpkt"];
1576--4721[label="0.25;2pkt 2fpkt"];
1576--5559[label="0.428571;3pkt 3fpkt"];
1576--5576[label="0.2;1pkt 1fpkt"];
1576--5765[label="0.0138889;1pkt 1fpkt"];
2535--4721[label="1;7pkt 7fpkt"];
4068--5559[label="1;7pkt 7fpkt"];
4101--5576[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="146.153.42.8" dst_port="8884"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_629{
style=filled;
color=gray75;
4109[label="214.5.126.182;141pkt 141fpkt", shape=pentagon, color=darkviolet];
stat629[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.5.126.182:0, *:0}[94.3262%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.3262%)&lt;BR/&gt; 135: (1.41844%)&lt;BR/&gt; 80: (1.41844%)&lt;BR/&gt; 63830: (0.35461%)&lt;BR/&gt; 57910: (0.35461%)&gt;];
}
</description>
    <slice>
      <filter src_ip="214.5.126.182"/>
    </slice>
    <from sec="1068526820" usec="0"/>
    <to sec="1068527693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.89.205.182"/>
    </slice>
    <from sec="1068527067" usec="0"/>
    <to sec="1068527136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
4113[label="202.149.237.182;193pkt 193fpkt", shape=pentagon, color=darkviolet];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.149.237.182:0, *:0}[98.4456%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.4456%)&lt;BR/&gt; 80: (0.777202%)&lt;BR/&gt; 46048: (0.259067%)&lt;BR/&gt; 43618: (0.259067%)&lt;BR/&gt; 35394: (0.259067%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.149.237.182"/>
    </slice>
    <from sec="1068526811" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_632{
style=filled;
color=gray75;
235[label="208.31.228.10;d;2670pkt 2670fpkt", shape=diamond, color=yellow];
360[label="212.30.214.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
515[label="200.145.36.152;s;182pkt 182fpkt", shape=diamond, color=yellow];
673[label="4.122.164.83;s;90pkt 90fpkt", shape=diamond, color=yellow];
995[label="4.210.185.0;s;183pkt 183fpkt", shape=diamond, color=yellow];
1020[label="200.162.198.87;s;14pkt 14fpkt", shape=diamond, color=yellow];
1033[label="200.1.74.85;s;58pkt 58fpkt", shape=diamond, color=yellow];
1101[label="4.210.185.3;s;147pkt 147fpkt", shape=diamond, color=yellow];
1135[label="218.161.23.226;d;205pkt 205fpkt", shape=diamond, color=yellow];
1146[label="136.93.151.178;d;213pkt 213fpkt", shape=diamond, color=yellow];
1166[label="143.38.73.162;d;42pkt 42fpkt", shape=diamond, color=yellow];
1259[label="4.210.185.13;s;100pkt 100fpkt", shape=diamond, color=yellow];
1363[label="4.210.185.67;s;106pkt 106fpkt", shape=diamond, color=yellow];
1364[label="4.210.185.12;s;98pkt 98fpkt", shape=diamond, color=yellow];
1374[label="4.210.185.14;s;103pkt 103fpkt", shape=diamond, color=yellow];
1532[label="200.145.36.152;s;135pkt 135fpkt", shape=hexagon, color=black];
1536[label="212.118.37.22;s;123pkt 123fpkt", shape=hexagon, color=black];
1664[label="146.153.26.158;d;122pkt 122fpkt", shape=hexagon, color=black];
1783[label="200.145.39.128;s;109pkt 109fpkt", shape=hexagon, color=black];
1856[label="136.93.153.42;d;56pkt 56fpkt", shape=hexagon, color=black];
1861[label="212.30.214.84;s;1pkt 1fpkt", shape=hexagon, color=black];
1878[label="4.162.146.66;s;276pkt 276fpkt", shape=hexagon, color=black];
1976[label="4.210.185.0;s;118pkt 118fpkt", shape=hexagon, color=black];
2095[label="164.228.136.228;d;28pkt 28fpkt", shape=hexagon, color=black];
2105[label="218.161.23.226;d;174pkt 174fpkt", shape=hexagon, color=black];
2130[label="200.1.74.85;s;50pkt 50fpkt", shape=hexagon, color=black];
2362[label="4.210.185.0;208pkt 208fpkt", shape=pentagon, color=darkviolet];
2374[label="4.210.185.1;74pkt 74fpkt", shape=pentagon, color=darkviolet];
2399[label="4.210.185.3;159pkt 159fpkt", shape=pentagon, color=darkviolet];
2425[label="4.210.185.5;84pkt 84fpkt", shape=pentagon, color=darkviolet];
2493[label="4.210.185.12;110pkt 110fpkt", shape=pentagon, color=darkviolet];
2501[label="4.210.185.13;119pkt 119fpkt", shape=pentagon, color=darkviolet];
2554[label="200.17.84.17;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2572[label="200.17.84.18;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2606[label="200.17.84.21;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2665[label="200.17.84.26;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2698[label="200.17.84.30;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2700[label="99.214.179.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2720[label="200.42.157.32;48pkt 48fpkt", shape=pentagon, color=darkviolet];
2868[label="212.30.114.46;22pkt 22fpkt", shape=pentagon, color=darkviolet];
2906[label="6.24.187.50;228pkt 228fpkt", shape=pentagon, color=darkviolet];
2927[label="7.211.143.52;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2940[label="7.84.22.54;37pkt 37fpkt", shape=pentagon, color=darkviolet];
2968[label="4.162.145.56;39pkt 39fpkt", shape=pentagon, color=darkviolet];
3206[label="4.162.146.79;41pkt 41fpkt", shape=pentagon, color=darkviolet];
3252[label="212.30.208.84;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3258[label="200.1.74.85;58pkt 58fpkt", shape=pentagon, color=darkviolet];
3272[label="200.193.174.86;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3288[label="200.162.198.87;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3355[label="212.118.49.96;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3357[label="200.17.84.96;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3366[label="200.193.215.96;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3453[label="198.26.157.105;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3461[label="198.244.85.106;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3496[label="208.221.232.110;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3533[label="98.18.132.115;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3544[label="212.30.215.116;79pkt 79fpkt", shape=pentagon, color=darkviolet];
3645[label="4.122.184.129;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3670[label="212.118.48.133;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3720[label="199.153.135.137;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3782[label="4.122.184.144;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3791[label="200.193.214.145;56pkt 56fpkt", shape=pentagon, color=darkviolet];
3816[label="212.118.54.148;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3835[label="212.118.48.150;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3856[label="200.145.36.152;190pkt 190fpkt", shape=pentagon, color=darkviolet];
3916[label="200.193.213.159;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3925[label="200.17.84.160;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3959[label="7.244.32.165;49pkt 49fpkt", shape=pentagon, color=darkviolet];
4003[label="98.18.136.170;40pkt 40fpkt", shape=pentagon, color=darkviolet];
4012[label="0.43.176.171;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4117[label="4.122.184.183;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4158[label="6.24.170.188;78pkt 78fpkt", shape=pentagon, color=darkviolet];
4297[label="215.2.250.205;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4332[label="4.41.176.210;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4473[label="4.122.184.232;42pkt 42fpkt", shape=pentagon, color=darkviolet];
4491[label="200.17.93.236;87pkt 87fpkt", shape=pentagon, color=darkviolet];
4496[label="198.26.152.236;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4499[label="200.17.93.237;96pkt 96fpkt", shape=pentagon, color=darkviolet];
4577[label="4.122.184.247;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4604[label="212.91.29.252;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4656[label="4.210.185.5;84pkt 84fpkt", shape=invtriangle, color=brown];
4697[label="4.210.185.12;110pkt 110fpkt", shape=invtriangle, color=brown];
4703[label="4.210.185.13;120pkt 120fpkt", shape=invtriangle, color=brown];
4733[label="200.17.84.17;7pkt 7fpkt", shape=invtriangle, color=brown];
4768[label="200.17.84.21;13pkt 13fpkt", shape=invtriangle, color=brown];
4828[label="200.42.157.32;49pkt 49fpkt", shape=invtriangle, color=brown];
4959[label="7.84.22.54;36pkt 36fpkt", shape=invtriangle, color=brown];
4979[label="4.162.145.56;39pkt 39fpkt", shape=invtriangle, color=brown];
5106[label="4.162.146.79;40pkt 40fpkt", shape=invtriangle, color=brown];
5129[label="4.122.164.83;98pkt 98fpkt", shape=invtriangle, color=brown];
5136[label="212.30.208.84;20pkt 20fpkt", shape=invtriangle, color=brown];
5141[label="200.1.74.85;58pkt 58fpkt", shape=invtriangle, color=brown];
5150[label="200.193.174.86;18pkt 18fpkt", shape=invtriangle, color=brown];
5189[label="212.118.49.96;7pkt 7fpkt", shape=invtriangle, color=brown];
5286[label="98.18.132.115;8pkt 8fpkt", shape=invtriangle, color=brown];
5431[label="212.118.54.148;32pkt 32fpkt", shape=invtriangle, color=brown];
5454[label="200.145.36.152;189pkt 189fpkt", shape=invtriangle, color=brown];
5485[label="200.193.213.159;9pkt 9fpkt", shape=invtriangle, color=brown];
5487[label="200.17.84.160;17pkt 17fpkt", shape=invtriangle, color=brown];
5519[label="98.18.136.170;40pkt 40fpkt", shape=invtriangle, color=brown];
5773[label="200.17.93.236;86pkt 86fpkt", shape=invtriangle, color=brown];
5777[label="198.26.152.236;11pkt 11fpkt", shape=invtriangle, color=brown];
5778[label="200.17.93.237;95pkt 95fpkt", shape=invtriangle, color=brown];
5834[label="212.91.29.252;19pkt 19fpkt", shape=invtriangle, color=brown];
5859[label="4.210.185.5;84pkt 84fpkt", shape=invhouse, color=bisque];
5880[label="4.210.185.12;110pkt 110fpkt", shape=invhouse, color=bisque];
5882[label="4.210.185.13;120pkt 120fpkt", shape=invhouse, color=bisque];
5899[label="200.17.84.17;6pkt 6fpkt", shape=invhouse, color=bisque];
6005[label="7.84.22.54;36pkt 36fpkt", shape=invhouse, color=bisque];
6064[label="4.162.146.79;41pkt 41fpkt", shape=invhouse, color=bisque];
6079[label="212.30.214.84;1pkt 1fpkt", shape=invhouse, color=bisque];
6082[label="200.1.74.85;58pkt 58fpkt", shape=invhouse, color=bisque];
6085[label="200.193.174.86;19pkt 19fpkt", shape=invhouse, color=bisque];
6206[label="212.118.54.148;32pkt 32fpkt", shape=invhouse, color=bisque];
6218[label="200.145.36.152;189pkt 189fpkt", shape=invhouse, color=bisque];
6231[label="200.17.84.160;17pkt 17fpkt", shape=invhouse, color=bisque];
6351[label="200.17.93.236;87pkt 87fpkt", shape=invhouse, color=bisque];
stat632[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 208.31.228.10:*}[47.2917%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2131%)&lt;BR/&gt; 5050: (0.292575%)&lt;BR/&gt; 443: (0.257264%)&lt;BR/&gt; 0: (0.171509%)&lt;BR/&gt; 1194: (0.0605327%)&gt;];
}
235--312[label="0.336449;36pkt 36fpkt"];
235--328[label="0.0225352;8pkt 8fpkt"];
235--350[label="1;2pkt 2fpkt"];
235--360[label="1;1pkt 1fpkt"];
235--372[label="0.00111732;1pkt 1fpkt"];
235--432[label="0.0762332;17pkt 17fpkt"];
235--444[label="0.0599078;13pkt 13fpkt"];
235--453[label="0.0707965;16pkt 16fpkt"];
235--457[label="0.00119617;1pkt 1fpkt"];
235--492[label="0.00665188;3pkt 3fpkt"];
235--511[label="0.00373134;1pkt 1fpkt"];
235--515[label="0.0769231;14pkt 14fpkt"];
235--522[label="0.00952381;2pkt 2fpkt"];
235--523[label="0.182796;17pkt 17fpkt"];
235--590[label="0.00550964;2pkt 2fpkt"];
235--613[label="0.108384;53pkt 53fpkt"];
235--614[label="0.0888252;31pkt 31fpkt"];
235--617[label="0.0695187;13pkt 13fpkt"];
235--628[label="0.41989;76pkt 76fpkt"];
235--632[label="0.112903;7pkt 7fpkt"];
235--633[label="0.0436508;11pkt 11fpkt"];
235--645[label="0.141975;46pkt 46fpkt"];
235--650[label="0.0645161;2pkt 2fpkt"];
235--660[label="0.132898;61pkt 61fpkt"];
235--662[label="0.0538244;19pkt 19fpkt"];
235--673[label="0.1;9pkt 9fpkt"];
235--675[label="0.333333;15pkt 15fpkt"];
235--676[label="0.039604;4pkt 4fpkt"];
235--678[label="1;1pkt 1fpkt"];
235--680[label="0.04;2pkt 2fpkt"];
235--711[label="0.411765;7pkt 7fpkt"];
235--718[label="0.0582524;18pkt 18fpkt"];
235--728[label="0.0614525;11pkt 11fpkt"];
235--729[label="0.0100334;3pkt 3fpkt"];
235--771[label="0.270833;39pkt 39fpkt"];
235--822[label="0.04947;14pkt 14fpkt"];
235--828[label="0.0545455;3pkt 3fpkt"];
235--836[label="0.0120482;2pkt 2fpkt"];
235--845[label="0.0108696;1pkt 1fpkt"];
235--856[label="0.335484;52pkt 52fpkt"];
235--857[label="0.110092;12pkt 12fpkt"];
235--859[label="0.385135;57pkt 57fpkt"];
235--874[label="0.406015;54pkt 54fpkt"];
235--875[label="0.378571;53pkt 53fpkt"];
235--877[label="0.0888889;20pkt 20fpkt"];
235--987[label="0.265306;13pkt 13fpkt"];
235--995[label="0.311475;57pkt 57fpkt"];
235--1006[label="0.189189;21pkt 21fpkt"];
235--1008[label="0.0106383;1pkt 1fpkt"];
235--1011[label="0.00952381;2pkt 2fpkt"];
235--1020[label="0.785714;11pkt 11fpkt"];
235--1032[label="0.181818;8pkt 8fpkt"];
235--1033[label="0.465517;27pkt 27fpkt"];
235--1041[label="0.310345;9pkt 9fpkt"];
235--1051[label="0.5;11pkt 11fpkt"];
235--1086[label="0.11976;20pkt 20fpkt"];
235--1090[label="0.00704225;1pkt 1fpkt"];
235--1097[label="0.0625;8pkt 8fpkt"];
235--1101[label="0.482993;71pkt 71fpkt"];
235--1106[label="0.0140845;1pkt 1fpkt"];
235--1107[label="0.0661157;8pkt 8fpkt"];
235--1139[label="0.183333;11pkt 11fpkt"];
235--1148[label="0.440678;52pkt 52fpkt"];
235--1149[label="0.1;4pkt 4fpkt"];
235--1162[label="0.0344828;1pkt 1fpkt"];
235--1183[label="1;13pkt 13fpkt"];
235--1206[label="0.135714;19pkt 19fpkt"];
235--1225[label="0.0437956;6pkt 6fpkt"];
235--1243[label="0.0153846;1pkt 1fpkt"];
235--1255[label="0.171429;18pkt 18fpkt"];
235--1256[label="0.0952381;2pkt 2fpkt"];
235--1259[label="0.49;49pkt 49fpkt"];
235--1265[label="0.229167;11pkt 11fpkt"];
235--1270[label="0.0857143;3pkt 3fpkt"];
235--1280[label="0.047619;1pkt 1fpkt"];
235--1281[label="0.130137;19pkt 19fpkt"];
235--1319[label="0.135417;13pkt 13fpkt"];
235--1320[label="0.137255;14pkt 14fpkt"];
235--1363[label="0.386792;41pkt 41fpkt"];
235--1364[label="0.44898;44pkt 44fpkt"];
235--1368[label="0.0982143;11pkt 11fpkt"];
235--1374[label="0.446602;46pkt 46fpkt"];
235--1375[label="0.163636;18pkt 18fpkt"];
235--1382[label="0.021978;2pkt 2fpkt"];
235--1498[label="0.0225352;8pkt 8fpkt"];
235--1523[label="0.0015456;1pkt 1fpkt"];
235--1532[label="0.103704;14pkt 14fpkt"];
235--1536[label="0.0162602;2pkt 2fpkt"];
235--1577[label="0.00303951;1pkt 1fpkt"];
235--1583[label="0.056338;8pkt 8fpkt"];
235--1586[label="0.08;16pkt 16fpkt"];
235--1593[label="0.0888252;31pkt 31fpkt"];
235--1614[label="0.0172414;1pkt 1fpkt"];
235--1617[label="1;1pkt 1fpkt"];
235--1620[label="0.0408163;2pkt 2fpkt"];
235--1632[label="0.0602837;17pkt 17fpkt"];
235--1648[label="0.285714;22pkt 22fpkt"];
235--1675[label="0.514563;53pkt 53fpkt"];
235--1677[label="0.12069;7pkt 7fpkt"];
235--1700[label="0.270833;39pkt 39fpkt"];
235--1743[label="0.0487805;2pkt 2fpkt"];
235--1758[label="0.0416667;6pkt 6fpkt"];
235--1764[label="0.00806452;1pkt 1fpkt"];
235--1767[label="0.335484;52pkt 52fpkt"];
235--1769[label="0.0645161;2pkt 2fpkt"];
235--1783[label="0.0733945;8pkt 8fpkt"];
235--1789[label="0.169811;9pkt 9fpkt"];
235--1790[label="0.454545;15pkt 15fpkt"];
235--1844[label="0.0614525;11pkt 11fpkt"];
235--1847[label="0.00165017;1pkt 1fpkt"];
235--1861[label="1;1pkt 1fpkt"];
235--1872[label="0.265306;13pkt 13fpkt"];
235--1878[label="0.163043;45pkt 45fpkt"];
235--1882[label="0.0666667;19pkt 19fpkt"];
235--1883[label="0.202247;18pkt 18fpkt"];
235--1902[label="0.310345;9pkt 9fpkt"];
235--1926[label="0.0784314;16pkt 16fpkt"];
235--1957[label="0.0025641;1pkt 1fpkt"];
235--1958[label="0.0879121;8pkt 8fpkt"];
235--1970[label="0.385135;57pkt 57fpkt"];
235--1976[label="0.338983;40pkt 40fpkt"];
235--2003[label="0.166667;7pkt 7fpkt"];
235--2017[label="0.473684;9pkt 9fpkt"];
235--2030[label="1;13pkt 13fpkt"];
235--2052[label="0.0961538;10pkt 10fpkt"];
235--2056[label="0.0604027;9pkt 9fpkt"];
235--2060[label="0.00746269;1pkt 1fpkt"];
235--2063[label="0.117778;53pkt 53fpkt"];
235--2073[label="0.0149254;1pkt 1fpkt"];
235--2089[label="0.07;7pkt 7fpkt"];
235--2106[label="0.378571;53pkt 53fpkt"];
235--2107[label="0.139785;13pkt 13fpkt"];
235--2111[label="0.111111;2pkt 2fpkt"];
235--2121[label="0.105263;4pkt 4fpkt"];
235--2124[label="0.229167;11pkt 11fpkt"];
235--2130[label="0.38;19pkt 19fpkt"];
235--2174[label="1;2pkt 2fpkt"];
235--2188[label="0.406015;54pkt 54fpkt"];
235--2201[label="0.047619;1pkt 1fpkt"];
235--2267[label="0.08;18pkt 18fpkt"];
235--2269[label="0.116279;5pkt 5fpkt"];
235--2272[label="0.0208333;2pkt 2fpkt"];
235--2278[label="0.00165017;1pkt 1fpkt"];
235--2288[label="0.0903955;16pkt 16fpkt"];
235--2337[label="0.000374532;1pkt 1fpkt"];
235--2361[label="0.159292;18pkt 18fpkt"];
235--2362[label="0.274038;57pkt 57fpkt"];
235--2374[label="0.189189;14pkt 14fpkt"];
235--2385[label="0.422764;52pkt 52fpkt"];
235--2399[label="0.446541;71pkt 71fpkt"];
235--2425[label="0.214286;18pkt 18fpkt"];
235--2450[label="0.372549;57pkt 57fpkt"];
235--2457[label="0.365517;53pkt 53fpkt"];
235--2467[label="1;3pkt 3fpkt"];
235--2493[label="0.4;44pkt 44fpkt"];
235--2501[label="0.411765;49pkt 49fpkt"];
235--2515[label="0.418182;46pkt 46fpkt"];
235--2554[label="0.166667;1pkt 1fpkt"];
235--2572[label="0.2;3pkt 3fpkt"];
235--2577[label="0.0153846;1pkt 1fpkt"];
235--2594[label="0.0967742;3pkt 3fpkt"];
235--2606[label="0.357143;5pkt 5fpkt"];
235--2617[label="0.307692;4pkt 4fpkt"];
235--2623[label="0.010101;1pkt 1fpkt"];
235--2636[label="0.461538;6pkt 6fpkt"];
235--2665[label="0.166667;2pkt 2fpkt"];
235--2671[label="0.00869565;1pkt 1fpkt"];
235--2672[label="0.375;54pkt 54fpkt"];
235--2698[label="0.4;4pkt 4fpkt"];
235--2700[label="1;1pkt 1fpkt"];
235--2713[label="0.258278;39pkt 39fpkt"];
235--2720[label="0.270833;13pkt 13fpkt"];
235--2788[label="0.0538462;14pkt 14fpkt"];
235--2800[label="0.127273;14pkt 14fpkt"];
235--2801[label="0.322581;10pkt 10fpkt"];
235--2811[label="0.152542;18pkt 18fpkt"];
235--2823[label="0.157143;11pkt 11fpkt"];
235--2839[label="0.0422535;3pkt 3fpkt"];
235--2845[label="0.097561;4pkt 4fpkt"];
235--2868[label="0.909091;20pkt 20fpkt"];
235--2906[label="0.0833333;19pkt 19fpkt"];
235--2921[label="0.0416667;1pkt 1fpkt"];
235--2927[label="0.458333;11pkt 11fpkt"];
235--2940[label="0.027027;1pkt 1fpkt"];
235--2968[label="0.692308;27pkt 27fpkt"];
235--2979[label="0.0110497;2pkt 2fpkt"];
235--3005[label="0.114286;20pkt 20fpkt"];
235--3028[label="0.0711297;17pkt 17fpkt"];
235--3035[label="0.12381;13pkt 13fpkt"];
235--3052[label="0.105263;4pkt 4fpkt"];
235--3061[label="0.0357143;2pkt 2fpkt"];
235--3076[label="0.0833333;3pkt 3fpkt"];
235--3126[label="0.047619;1pkt 1fpkt"];
235--3134[label="0.0952381;2pkt 2fpkt"];
235--3142[label="0.45;9pkt 9fpkt"];
235--3186[label="0.227273;5pkt 5fpkt"];
235--3206[label="0.97561;40pkt 40fpkt"];
235--3219[label="0.310345;9pkt 9fpkt"];
235--3241[label="0.0909091;9pkt 9fpkt"];
235--3250[label="0.128205;10pkt 10fpkt"];
235--3252[label="0.047619;1pkt 1fpkt"];
235--3258[label="0.465517;27pkt 27fpkt"];
235--3271[label="0.444444;28pkt 28fpkt"];
235--3272[label="0.842105;16pkt 16fpkt"];
235--3288[label="0.75;12pkt 12fpkt"];
235--3307[label="0.0833333;3pkt 3fpkt"];
235--3355[label="0.125;1pkt 1fpkt"];
235--3357[label="0.666667;14pkt 14fpkt"];
235--3366[label="0.555556;5pkt 5fpkt"];
235--3378[label="0.047619;3pkt 3fpkt"];
235--3435[label="0.0597015;8pkt 8fpkt"];
235--3453[label="0.0769231;2pkt 2fpkt"];
235--3461[label="1;2pkt 2fpkt"];
235--3496[label="1;13pkt 13fpkt"];
235--3533[label="1;9pkt 9fpkt"];
235--3544[label="0.0253165;2pkt 2fpkt"];
235--3635[label="0.0806452;20pkt 20fpkt"];
235--3641[label="0.0416667;3pkt 3fpkt"];
235--3642[label="0.00519481;2pkt 2fpkt"];
235--3645[label="0.15625;5pkt 5fpkt"];
235--3668[label="0.00920245;3pkt 3fpkt"];
235--3670[label="0.166667;1pkt 1fpkt"];
235--3685[label="0.0882353;3pkt 3fpkt"];
235--3720[label="1;10pkt 10fpkt"];
235--3782[label="0.3;3pkt 3fpkt"];
235--3791[label="0.0178571;1pkt 1fpkt"];
235--3792[label="0.00884956;2pkt 2fpkt"];
235--3795[label="0.0597015;16pkt 16fpkt"];
235--3816[label="0.03125;1pkt 1fpkt"];
235--3832[label="0.176471;21pkt 21fpkt"];
235--3835[label="0.0645161;2pkt 2fpkt"];
235--3856[label="0.0736842;14pkt 14fpkt"];
235--3881[label="0.0555556;2pkt 2fpkt"];
235--3890[label="0.00628931;1pkt 1fpkt"];
235--3916[label="0.3;3pkt 3fpkt"];
235--3922[label="0.0208333;2pkt 2fpkt"];
235--3925[label="0.529412;9pkt 9fpkt"];
235--3931[label="0.0425532;2pkt 2fpkt"];
235--3959[label="0.265306;13pkt 13fpkt"];
235--3966[label="0.211538;11pkt 11fpkt"];
235--4003[label="0.2;8pkt 8fpkt"];
235--4012[label="1;20pkt 20fpkt"];
235--4018[label="1;1pkt 1fpkt"];
235--4117[label="0.0425532;2pkt 2fpkt"];
235--4118[label="0.170213;8pkt 8fpkt"];
235--4157[label="0.326087;15pkt 15fpkt"];
235--4229[label="0.0199501;8pkt 8fpkt"];
235--4293[label="0.166667;6pkt 6fpkt"];
235--4297[label="0.193548;6pkt 6fpkt"];
235--4311[label="0.62069;18pkt 18fpkt"];
235--4332[label="0.827586;24pkt 24fpkt"];
235--4361[label="0.0344828;1pkt 1fpkt"];
235--4411[label="0.133333;12pkt 12fpkt"];
235--4432[label="0.195122;8pkt 8fpkt"];
235--4473[label="0.0238095;1pkt 1fpkt"];
235--4476[label="0.2;6pkt 6fpkt"];
235--4491[label="0.16092;14pkt 14fpkt"];
235--4496[label="0.5;6pkt 6fpkt"];
235--4499[label="0.166667;16pkt 16fpkt"];
235--4577[label="0.037037;1pkt 1fpkt"];
235--4604[label="0.157895;3pkt 3fpkt"];
235--4656[label="0.214286;18pkt 18fpkt"];
235--4679[label="1;3pkt 3fpkt"];
235--4697[label="0.4;44pkt 44fpkt"];
235--4703[label="0.408333;49pkt 49fpkt"];
235--4710[label="0.414414;46pkt 46fpkt"];
235--4733[label="0.142857;1pkt 1fpkt"];
235--4759[label="0.0967742;3pkt 3fpkt"];
235--4768[label="0.384615;5pkt 5fpkt"];
235--4804[label="0.00869565;1pkt 1fpkt"];
235--4825[label="0.256579;39pkt 39fpkt"];
235--4828[label="0.265306;13pkt 13fpkt"];
235--4875[label="0.127273;14pkt 14fpkt"];
235--4886[label="0.15942;11pkt 11fpkt"];
235--4896[label="0.0428571;3pkt 3fpkt"];
235--4902[label="0.097561;4pkt 4fpkt"];
235--4937[label="0.0837004;19pkt 19fpkt"];
235--4948[label="0.0434783;1pkt 1fpkt"];
235--4959[label="0.0277778;1pkt 1fpkt"];
235--4979[label="0.692308;27pkt 27fpkt"];
235--5000[label="0.114943;20pkt 20fpkt"];
235--5011[label="0.0714286;17pkt 17fpkt"];
235--5013[label="0.12381;13pkt 13fpkt"];
235--5068[label="0.45;9pkt 9fpkt"];
235--5098[label="0.227273;5pkt 5fpkt"];
235--5106[label="0.975;39pkt 39fpkt"];
235--5113[label="0.321429;9pkt 9fpkt"];
235--5129[label="0.0918367;9pkt 9fpkt"];
235--5134[label="0.128205;10pkt 10fpkt"];
235--5136[label="0.05;1pkt 1fpkt"];
235--5141[label="0.465517;27pkt 27fpkt"];
235--5149[label="0.451613;28pkt 28fpkt"];
235--5150[label="0.888889;16pkt 16fpkt"];
235--5189[label="0.142857;1pkt 1fpkt"];
235--5238[label="0.0597015;8pkt 8fpkt"];
235--5286[label="1;8pkt 8fpkt"];
235--5344[label="0.00520833;2pkt 2fpkt"];
235--5367[label="0.0909091;3pkt 3fpkt"];
235--5423[label="0.0597015;16pkt 16fpkt"];
235--5431[label="0.03125;1pkt 1fpkt"];
235--5454[label="0.0740741;14pkt 14fpkt"];
235--5469[label="0.00632911;1pkt 1fpkt"];
235--5485[label="0.333333;3pkt 3fpkt"];
235--5486[label="0.0208333;2pkt 2fpkt"];
235--5487[label="0.529412;9pkt 9fpkt"];
235--5519[label="0.2;8pkt 8fpkt"];
235--5527[label="1;1pkt 1fpkt"];
235--5585[label="0.170213;8pkt 8fpkt"];
235--5606[label="0.326087;15pkt 15fpkt"];
235--5664[label="0.0494792;19pkt 19fpkt"];
235--5684[label="0.166667;6pkt 6fpkt"];
235--5692[label="0.62069;18pkt 18fpkt"];
235--5716[label="0.0344828;1pkt 1fpkt"];
235--5773[label="0.162791;14pkt 14fpkt"];
235--5777[label="0.545455;6pkt 6fpkt"];
235--5778[label="0.168421;16pkt 16fpkt"];
235--5834[label="0.157895;3pkt 3fpkt"];
235--5859[label="0.214286;18pkt 18fpkt"];
235--5880[label="0.4;44pkt 44fpkt"];
235--5882[label="0.408333;49pkt 49fpkt"];
235--5899[label="0.166667;1pkt 1fpkt"];
235--5920[label="0.00862069;1pkt 1fpkt"];
235--5934[label="0.256579;39pkt 39fpkt"];
235--5958[label="0.127273;14pkt 14fpkt"];
235--5965[label="0.157143;11pkt 11fpkt"];
235--5975[label="0.102564;4pkt 4fpkt"];
235--6001[label="0.0434783;1pkt 1fpkt"];
235--6005[label="0.0277778;1pkt 1fpkt"];
235--6022[label="0.114943;20pkt 20fpkt"];
235--6064[label="0.97561;40pkt 40fpkt"];
235--6068[label="0.321429;9pkt 9fpkt"];
235--6078[label="0.128205;10pkt 10fpkt"];
235--6079[label="1;1pkt 1fpkt"];
235--6082[label="0.465517;27pkt 27fpkt"];
235--6085[label="0.842105;16pkt 16fpkt"];
235--6162[label="0.00519481;2pkt 2fpkt"];
235--6177[label="0.0909091;3pkt 3fpkt"];
235--6203[label="0.0599251;16pkt 16fpkt"];
235--6206[label="0.03125;1pkt 1fpkt"];
235--6218[label="0.0740741;14pkt 14fpkt"];
235--6230[label="0.0208333;2pkt 2fpkt"];
235--6231[label="0.529412;9pkt 9fpkt"];
235--6274[label="0.170213;8pkt 8fpkt"];
235--6282[label="0.326087;15pkt 15fpkt"];
235--6307[label="0.0494792;19pkt 19fpkt"];
235--6351[label="0.16092;14pkt 14fpkt"];
360--1861[label="1;1pkt 1fpkt"];
360--6079[label="1;1pkt 1fpkt"];
515--1147[label="0.177419;11pkt 11fpkt"];
515--1532[label="1;135pkt 135fpkt"];
515--1664[label="0.106557;13pkt 13fpkt"];
515--1856[label="0.321429;18pkt 18fpkt"];
515--2118[label="0.176471;9pkt 9fpkt"];
515--2164[label="0.021978;4pkt 4fpkt"];
515--2240[label="1;46pkt 46fpkt"];
515--3856[label="1;182pkt 182fpkt"];
515--5454[label="0.994505;181pkt 181fpkt"];
515--6218[label="0.994505;181pkt 181fpkt"];
673--1427[label="0.2;18pkt 18fpkt"];
673--1438[label="0.277778;25pkt 25fpkt"];
673--1789[label="1;53pkt 53fpkt"];
673--2163[label="0.0222222;2pkt 2fpkt"];
673--2164[label="0.0333333;3pkt 3fpkt"];
673--2226[label="0.277778;25pkt 25fpkt"];
673--2245[label="0.2;18pkt 18fpkt"];
673--3241[label="1;90pkt 90fpkt"];
673--5129[label="0.988889;89pkt 89fpkt"];
995--1135[label="0.0437158;8pkt 8fpkt"];
995--1505[label="0.126214;13pkt 13fpkt"];
995--1939[label="0.245902;45pkt 45fpkt"];
995--1976[label="1;118pkt 118fpkt"];
995--2105[label="0.045977;8pkt 8fpkt"];
995--2362[label="0.994536;182pkt 182fpkt"];
1020--3288[label="1;14pkt 14fpkt"];
1033--1438[label="0.396552;23pkt 23fpkt"];
1033--2130[label="1;50pkt 50fpkt"];
1033--2163[label="0.137931;8pkt 8fpkt"];
1033--2226[label="0.396552;23pkt 23fpkt"];
1033--3258[label="1;58pkt 58fpkt"];
1033--5141[label="1;58pkt 58fpkt"];
1033--6082[label="1;58pkt 58fpkt"];
1101--1505[label="0.116505;12pkt 12fpkt"];
1101--1839[label="0.0204082;3pkt 3fpkt"];
1101--1930[label="0.0204082;3pkt 3fpkt"];
1101--1939[label="0.238095;35pkt 35fpkt"];
1101--2399[label="1;147pkt 147fpkt"];
1135--1148[label="0.144068;17pkt 17fpkt"];
1135--1206[label="0.285714;40pkt 40fpkt"];
1135--1680[label="0.0375;3pkt 3fpkt"];
1135--1700[label="0.0277778;4pkt 4fpkt"];
1135--1883[label="0.011236;1pkt 1fpkt"];
1135--1976[label="0.0677966;8pkt 8fpkt"];
1135--2052[label="0.201923;21pkt 21fpkt"];
1135--2056[label="0.436242;65pkt 65fpkt"];
1135--2105[label="1;174pkt 174fpkt"];
1135--2362[label="0.0390244;8pkt 8fpkt"];
1135--2385[label="0.138211;17pkt 17fpkt"];
1135--2425[label="0.142857;12pkt 12fpkt"];
1135--2713[label="0.0264901;4pkt 4fpkt"];
1135--3005[label="0.371429;65pkt 65fpkt"];
1135--3832[label="0.00840336;1pkt 1fpkt"];
1135--4656[label="0.142857;12pkt 12fpkt"];
1135--4825[label="0.0263158;4pkt 4fpkt"];
1135--5000[label="0.373563;65pkt 65fpkt"];
1135--5859[label="0.142857;12pkt 12fpkt"];
1135--5934[label="0.0263158;4pkt 4fpkt"];
1135--6022[label="0.373563;65pkt 65fpkt"];
1146--1253[label="0.0625;6pkt 6fpkt"];
1146--1293[label="0.720238;121pkt 121fpkt"];
1146--1608[label="0.0123457;2pkt 2fpkt"];
1146--1655[label="0.0136054;2pkt 2fpkt"];
1146--1847[label="0.0140845;3pkt 3fpkt"];
1146--1957[label="0.0187793;4pkt 4fpkt"];
1146--1991[label="1;153pkt 153fpkt"];
1146--2073[label="0.0149254;1pkt 1fpkt"];
1146--2100[label="0.0674157;6pkt 6fpkt"];
1146--2114[label="0.0428571;3pkt 3fpkt"];
1146--2211[label="0.720238;121pkt 121fpkt"];
1146--2278[label="0.0140845;3pkt 3fpkt"];
1146--2544[label="0.111111;1pkt 1fpkt"];
1146--2839[label="0.028169;2pkt 2fpkt"];
1146--2978[label="0.2;1pkt 1fpkt"];
1146--2979[label="0.0220994;4pkt 4fpkt"];
1146--3435[label="0.00746269;1pkt 1fpkt"];
1146--3570[label="0.711765;121pkt 121fpkt"];
1146--3616[label="0.896552;26pkt 26fpkt"];
1146--3650[label="0.00469484;1pkt 1fpkt"];
1146--3668[label="0.00938967;2pkt 2fpkt"];
1146--3816[label="0.0625;2pkt 2fpkt"];
1146--3931[label="0.0212766;1pkt 1fpkt"];
1146--4158[label="0.0384615;3pkt 3fpkt"];
1146--4261[label="0.2;3pkt 3fpkt"];
1146--4272[label="0.0606061;6pkt 6fpkt"];
1146--4584[label="0.028169;6pkt 6fpkt"];
1146--4726[label="0.1;1pkt 1fpkt"];
1146--4896[label="0.0285714;2pkt 2fpkt"];
1146--5238[label="0.00746269;1pkt 1fpkt"];
1146--5307[label="0.715976;121pkt 121fpkt"];
1146--5347[label="0.00469484;1pkt 1fpkt"];
1146--5431[label="0.0625;2pkt 2fpkt"];
1146--5671[label="0.0606061;6pkt 6fpkt"];
1146--5825[label="0.028169;6pkt 6fpkt"];
1146--5895[label="0.1;1pkt 1fpkt"];
1146--6145[label="0.711765;121pkt 121fpkt"];
1146--6165[label="0.00469484;1pkt 1fpkt"];
1146--6206[label="0.0625;2pkt 2fpkt"];
1146--6312[label="0.0606061;6pkt 6fpkt"];
1146--6377[label="0.028169;6pkt 6fpkt"];
1166--1462[label="0.142857;6pkt 6fpkt"];
1166--1536[label="0.0238095;1pkt 1fpkt"];
1166--1691[label="0.714286;30pkt 30fpkt"];
1166--2272[label="0.0238095;1pkt 1fpkt"];
1166--2363[label="0.714286;30pkt 30fpkt"];
1166--3252[label="0.142857;3pkt 3fpkt"];
1166--4632[label="0.714286;30pkt 30fpkt"];
1166--5136[label="0.15;3pkt 3fpkt"];
1259--1839[label="0.03;3pkt 3fpkt"];
1259--1939[label="0.42;42pkt 42fpkt"];
1259--2118[label="0.0196078;1pkt 1fpkt"];
1259--2501[label="1;100pkt 100fpkt"];
1259--4703[label="1;100pkt 100fpkt"];
1259--5882[label="1;100pkt 100fpkt"];
1363--1839[label="0.00943396;1pkt 1fpkt"];
1363--1930[label="0.0188679;2pkt 2fpkt"];
1363--1939[label="0.386792;41pkt 41fpkt"];
1363--2118[label="0.0392157;2pkt 2fpkt"];
1364--1839[label="0.0204082;2pkt 2fpkt"];
1364--1930[label="0.0306122;3pkt 3fpkt"];
1364--1939[label="0.387755;38pkt 38fpkt"];
1364--2493[label="1;98pkt 98fpkt"];
1364--4697[label="1;98pkt 98fpkt"];
1364--5880[label="1;98pkt 98fpkt"];
1374--1839[label="0.00970874;1pkt 1fpkt"];
1374--1939[label="0.359223;37pkt 37fpkt"];
1374--2118[label="0.0196078;1pkt 1fpkt"];
1374--2515[label="0.990291;102pkt 102fpkt"];
1374--4710[label="1;103pkt 103fpkt"];
1532--1664[label="0.106557;13pkt 13fpkt"];
1532--1856[label="0.321429;18pkt 18fpkt"];
1532--2118[label="0.176471;9pkt 9fpkt"];
1532--2164[label="0.0296296;4pkt 4fpkt"];
1532--2240[label="1;46pkt 46fpkt"];
1532--3856[label="1;135pkt 135fpkt"];
1532--5454[label="0.992593;134pkt 134fpkt"];
1532--6218[label="0.992593;134pkt 134fpkt"];
1536--1546[label="0.0285714;2pkt 2fpkt"];
1536--1839[label="0.0243902;3pkt 3fpkt"];
1536--1856[label="0.0357143;2pkt 2fpkt"];
1536--1879[label="0.0740741;6pkt 6fpkt"];
1536--1922[label="0.0235294;2pkt 2fpkt"];
1536--1930[label="0.00813008;1pkt 1fpkt"];
1536--1939[label="0.0162602;2pkt 2fpkt"];
1536--2005[label="0.0365854;3pkt 3fpkt"];
1536--2163[label="0.00813008;1pkt 1fpkt"];
1536--2164[label="0.00813008;1pkt 1fpkt"];
1536--2225[label="0.0325203;4pkt 4fpkt"];
1536--2226[label="0.00813008;1pkt 1fpkt"];
1536--2245[label="0.097561;12pkt 12fpkt"];
1536--2265[label="0.0243902;3pkt 3fpkt"];
1536--2272[label="1;96pkt 96fpkt"];
1664--1758[label="0.0163934;2pkt 2fpkt"];
1664--1783[label="0.00917431;1pkt 1fpkt"];
1664--1844[label="0.00819672;1pkt 1fpkt"];
1664--1890[label="0.00819672;1pkt 1fpkt"];
1664--1926[label="0.00819672;1pkt 1fpkt"];
1664--2108[label="0.0163934;2pkt 2fpkt"];
1664--2240[label="0.173913;8pkt 8fpkt"];
1664--2288[label="0.00819672;1pkt 1fpkt"];
1664--2589[label="0.0163934;2pkt 2fpkt"];
1664--2788[label="0.00819672;1pkt 1fpkt"];
1664--2867[label="0.416667;5pkt 5fpkt"];
1664--3028[label="0.00819672;1pkt 1fpkt"];
1664--3452[label="0.2;4pkt 4fpkt"];
1664--3635[label="0.00819672;1pkt 1fpkt"];
1664--3645[label="0.1875;6pkt 6fpkt"];
1664--3740[label="0.16129;5pkt 5fpkt"];
1664--3795[label="0.00819672;1pkt 1fpkt"];
1664--3856[label="0.106557;13pkt 13fpkt"];
1664--4229[label="0.00819672;1pkt 1fpkt"];
1664--4353[label="0.025;1pkt 1fpkt"];
1664--4577[label="0.0740741;2pkt 2fpkt"];
1664--4591[label="0.0238095;1pkt 1fpkt"];
1664--4755[label="0.0163934;2pkt 2fpkt"];
1664--4920[label="0.416667;5pkt 5fpkt"];
1664--5011[label="0.00819672;1pkt 1fpkt"];
1664--5393[label="0.166667;5pkt 5fpkt"];
1664--5423[label="0.00819672;1pkt 1fpkt"];
1664--5454[label="0.106557;13pkt 13fpkt"];
1664--5709[label="0.025641;1pkt 1fpkt"];
1664--5829[label="0.0238095;1pkt 1fpkt"];
1664--5905[label="0.0163934;2pkt 2fpkt"];
1664--6203[label="0.00819672;1pkt 1fpkt"];
1664--6218[label="0.106557;13pkt 13fpkt"];
1783--1838[label="0.0275229;3pkt 3fpkt"];
1783--1839[label="0.0458716;5pkt 5fpkt"];
1783--1939[label="0.0275229;3pkt 3fpkt"];
1783--2245[label="0.0183486;2pkt 2fpkt"];
1783--2304[label="0.00917431;1pkt 1fpkt"];
1783--3635[label="1;109pkt 109fpkt"];
1856--1857[label="1;1pkt 1fpkt"];
1856--2060[label="0.0535714;3pkt 3fpkt"];
1856--2240[label="0.0869565;4pkt 4fpkt"];
1856--2272[label="0.0357143;2pkt 2fpkt"];
1856--2470[label="1;2pkt 2fpkt"];
1856--2489[label="1;5pkt 5fpkt"];
1856--2802[label="0.0714286;4pkt 4fpkt"];
1856--3252[label="0.0952381;2pkt 2fpkt"];
1856--3483[label="0.0384615;1pkt 1fpkt"];
1856--3650[label="0.0178571;1pkt 1fpkt"];
1856--3856[label="0.321429;18pkt 18fpkt"];
1856--3890[label="0.0535714;3pkt 3fpkt"];
1856--3954[label="0.272727;3pkt 3fpkt"];
1856--3967[label="0.375;3pkt 3fpkt"];
1856--4681[label="1;2pkt 2fpkt"];
1856--4694[label="1;5pkt 5fpkt"];
1856--5136[label="0.1;2pkt 2fpkt"];
1856--5261[label="0.0384615;1pkt 1fpkt"];
1856--5347[label="0.0178571;1pkt 1fpkt"];
1856--5454[label="0.321429;18pkt 18fpkt"];
1856--5469[label="0.0535714;3pkt 3fpkt"];
1856--6130[label="0.0384615;1pkt 1fpkt"];
1856--6165[label="0.0178571;1pkt 1fpkt"];
1856--6218[label="0.321429;18pkt 18fpkt"];
1861--6079[label="1;1pkt 1fpkt"];
1878--1979[label="0.0543478;15pkt 15fpkt"];
1878--2036[label="0.1;1pkt 1fpkt"];
1878--2044[label="0.0507246;14pkt 14fpkt"];
1878--2163[label="0.0108696;3pkt 3fpkt"];
1878--2225[label="0.0724638;20pkt 20fpkt"];
1878--2226[label="0.304348;84pkt 84fpkt"];
1878--2245[label="0.0507246;14pkt 14fpkt"];
1976--2105[label="0.0677966;8pkt 8fpkt"];
1976--2362[label="0.991525;117pkt 117fpkt"];
2095--2474[label="0.714286;5pkt 5fpkt"];
2095--2665[label="0.166667;2pkt 2fpkt"];
2095--3645[label="0.107143;3pkt 3fpkt"];
2095--3930[label="0.133333;2pkt 2fpkt"];
2095--4323[label="0.05;1pkt 1fpkt"];
2095--4411[label="0.0714286;2pkt 2fpkt"];
2095--4499[label="0.107143;3pkt 3fpkt"];
2095--4684[label="0.714286;5pkt 5fpkt"];
2095--5490[label="0.133333;2pkt 2fpkt"];
2095--5778[label="0.107143;3pkt 3fpkt"];
2095--6233[label="0.142857;2pkt 2fpkt"];
2105--2362[label="0.045977;8pkt 8fpkt"];
2105--2385[label="0.138211;17pkt 17fpkt"];
2105--2425[label="0.119048;10pkt 10fpkt"];
2105--2713[label="0.0264901;4pkt 4fpkt"];
2105--3005[label="0.373563;65pkt 65fpkt"];
2105--3832[label="0.00840336;1pkt 1fpkt"];
2105--4656[label="0.119048;10pkt 10fpkt"];
2105--4825[label="0.0263158;4pkt 4fpkt"];
2105--5000[label="0.373563;65pkt 65fpkt"];
2105--5859[label="0.119048;10pkt 10fpkt"];
2105--5934[label="0.0263158;4pkt 4fpkt"];
2105--6022[label="0.373563;65pkt 65fpkt"];
2130--2163[label="0.16;8pkt 8fpkt"];
2130--2226[label="0.46;23pkt 23fpkt"];
2130--3258[label="1;50pkt 50fpkt"];
2130--5141[label="1;50pkt 50fpkt"];
2130--6082[label="1;50pkt 50fpkt"];
2425--4656[label="1;84pkt 84fpkt"];
2425--5859[label="1;84pkt 84fpkt"];
2493--4697[label="1;110pkt 110fpkt"];
2493--5880[label="1;110pkt 110fpkt"];
2501--4703[label="1;119pkt 119fpkt"];
2501--5882[label="1;119pkt 119fpkt"];
2554--4733[label="1;6pkt 6fpkt"];
2554--5899[label="1;6pkt 6fpkt"];
2606--4768[label="1;13pkt 13fpkt"];
2720--4828[label="1;48pkt 48fpkt"];
2906--4937[label="1;227pkt 227fpkt"];
2940--4959[label="1;36pkt 36fpkt"];
2940--6005[label="1;36pkt 36fpkt"];
2968--4979[label="1;39pkt 39fpkt"];
3206--5106[label="1;40pkt 40fpkt"];
3206--6064[label="1;41pkt 41fpkt"];
3252--5136[label="1;20pkt 20fpkt"];
3258--5141[label="1;58pkt 58fpkt"];
3258--6082[label="1;58pkt 58fpkt"];
3272--5150[label="1;18pkt 18fpkt"];
3272--6085[label="1;19pkt 19fpkt"];
3355--5189[label="1;7pkt 7fpkt"];
3533--5286[label="1;8pkt 8fpkt"];
3816--5431[label="1;32pkt 32fpkt"];
3816--6206[label="1;32pkt 32fpkt"];
3856--5454[label="1;189pkt 189fpkt"];
3856--6218[label="1;189pkt 189fpkt"];
3916--5485[label="1;9pkt 9fpkt"];
3925--5487[label="1;17pkt 17fpkt"];
3925--6231[label="1;17pkt 17fpkt"];
4003--5519[label="1;40pkt 40fpkt"];
4491--5773[label="1;86pkt 86fpkt"];
4491--6351[label="1;87pkt 87fpkt"];
4496--5777[label="1;11pkt 11fpkt"];
4499--5778[label="1;95pkt 95fpkt"];
4604--5834[label="1;19pkt 19fpkt"];
4656--5859[label="1;84pkt 84fpkt"];
4697--5880[label="1;110pkt 110fpkt"];
4703--5882[label="1;120pkt 120fpkt"];
4733--5899[label="1;6pkt 6fpkt"];
4959--6005[label="1;36pkt 36fpkt"];
5106--6064[label="1;40pkt 40fpkt"];
5141--6082[label="1;58pkt 58fpkt"];
5150--6085[label="1;18pkt 18fpkt"];
5431--6206[label="1;32pkt 32fpkt"];
5454--6218[label="1;189pkt 189fpkt"];
5487--6231[label="1;17pkt 17fpkt"];
5773--6351[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.10" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_633{
style=filled;
color=gray75;
325[label="209.8.108.184;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat633[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.8.108.184:80, 136.93.96.175:1090}[25%]&lt;BR/&gt;{209.8.108.184:80, 136.93.96.175:1127}[25%]&lt;BR/&gt;{209.8.108.184:80, 136.93.96.175:4653}[25%]&lt;BR/&gt;{209.8.108.184:80, 136.93.96.175:4961}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4961: (12.5%)&lt;BR/&gt; 4653: (12.5%)&lt;BR/&gt; 1127: (12.5%)&lt;BR/&gt; 1090: (12.5%)&gt;];
}
325--438[label="1;4pkt 4fpkt"];
325--1838[label="1;4pkt 4fpkt"];
325--4124[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.96.175" dst_port="4961" src_ip="209.8.108.184" src_port="80"/>
      <filter dst_ip="136.93.96.175" dst_port="4653" src_ip="209.8.108.184" src_port="80"/>
      <filter dst_ip="136.93.96.175" dst_port="1127" src_ip="209.8.108.184" src_port="80"/>
      <filter dst_ip="136.93.96.175" dst_port="1090" src_ip="209.8.108.184" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068526929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.132.117.184"/>
    </slice>
    <from sec="1068526852" usec="0"/>
    <to sec="1068527648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_635{
style=filled;
color=gray75;
4128[label="137.97.170.184;176pkt 176fpkt", shape=pentagon, color=darkviolet];
stat635[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.97.170.184:0, *:0}[98.2955%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.2955%)&lt;BR/&gt; 135: (0.852273%)&lt;BR/&gt; 37755: (0.284091%)&lt;BR/&gt; 37498: (0.284091%)&lt;BR/&gt; 24039: (0.284091%)&gt;];
}
</description>
    <slice>
      <filter src_ip="137.97.170.184"/>
    </slice>
    <from sec="1068526834" usec="0"/>
    <to sec="1068527693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.146.65.185"/>
    </slice>
    <from sec="1068526817" usec="0"/>
    <to sec="1068527691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_637{
style=filled;
color=gray75;
467[label="208.222.237.185;s;1868pkt 1868fpkt", shape=diamond, color=yellow];
1940[label="208.222.237.185;s;1715pkt 1715fpkt", shape=hexagon, color=black];
4133[label="208.222.237.185;2103pkt 2103fpkt", shape=pentagon, color=darkviolet];
stat637[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.222.237.185:0, *:0}[96.6714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.7816%)&lt;BR/&gt; 80: (1.60922%)&lt;BR/&gt; 64809: (0.0263806%)&lt;BR/&gt; 64161: (0.0263806%)&lt;BR/&gt; 62404: (0.0263806%)&gt;];
}
467--517[label="0.0049505;1pkt 1fpkt"];
467--976[label="0.00552486;1pkt 1fpkt"];
467--1652[label="0.00444444;1pkt 1fpkt"];
467--1685[label="0.0049505;1pkt 1fpkt"];
467--1940[label="1;1715pkt 1715fpkt"];
467--2177[label="0.00552486;1pkt 1fpkt"];
467--2327[label="0.00321199;6pkt 6fpkt"];
467--2342[label="0.00321199;6pkt 6fpkt"];
467--4133[label="1;1868pkt 1868fpkt"];
1940--2177[label="0.00552486;1pkt 1fpkt"];
1940--2327[label="0.00349854;6pkt 6fpkt"];
1940--2342[label="0.00349854;6pkt 6fpkt"];
1940--4133[label="1;1715pkt 1715fpkt"];
</description>
    <slice>
      <filter src_ip="208.222.237.185"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.24.170.187"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
470[label="208.31.250.187;s;2562pkt 2562fpkt", shape=diamond, color=yellow];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.31.250.187:0, *:0}[99.5316%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5316%)&lt;BR/&gt; 135: (0.117096%)&lt;BR/&gt; 80: (0.117096%)&lt;BR/&gt; 37190: (0.019516%)&lt;BR/&gt; 29610: (0.019516%)&gt;];
}
470--1943[label="1;1993pkt 1993fpkt"];
470--4147[label="1;2562pkt 2562fpkt"];
470--5599[label="1;2562pkt 2562fpkt"];
470--6280[label="1;2562pkt 2562fpkt"];
</description>
    <slice>
      <filter src_ip="208.31.250.187"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.32.31.188"/>
    </slice>
    <from sec="1068527055" usec="0"/>
    <to sec="1068527081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.138.6.189"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_642{
style=filled;
color=gray75;
4162[label="208.211.112.189;374pkt 374fpkt", shape=pentagon, color=darkviolet];
stat642[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.211.112.189:0, *:0}[96.2567%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.2567%)&lt;BR/&gt; 80: (1.87166%)&lt;BR/&gt; 4354: (0.13369%)&lt;BR/&gt; 4311: (0.13369%)&lt;BR/&gt; 4300: (0.13369%)&gt;];
}
</description>
    <slice>
      <filter src_ip="208.211.112.189"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
4163[label="209.133.118.189;173pkt 173fpkt", shape=pentagon, color=darkviolet];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.133.118.189:0, *:0}[94.2197%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.2197%)&lt;BR/&gt; 80: (2.89017%)&lt;BR/&gt; 58046: (0.289017%)&lt;BR/&gt; 56923: (0.289017%)&lt;BR/&gt; 50209: (0.289017%)&gt;];
}
</description>
    <slice>
      <filter src_ip="209.133.118.189"/>
    </slice>
    <from sec="1068526811" usec="0"/>
    <to sec="1068527677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.16.72.190"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.129.78.190"/>
    </slice>
    <from sec="1068526812" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.119.191"/>
    </slice>
    <from sec="1068526807" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.80.196.191"/>
    </slice>
    <from sec="1068526816" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_648{
style=filled;
color=gray75;
896[label="7.160.221.158;s;22pkt 22fpkt", shape=diamond, color=yellow];
1209[label="198.28.119.200;s;7pkt 7fpkt", shape=diamond, color=yellow];
1898[label="7.160.221.158;s;21pkt 21fpkt", shape=hexagon, color=black];
stat648[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.160.221.158:80, 209.139.200.177:*}[75.8621%]&lt;BR/&gt;{198.28.119.200:*, *:*}[24.1379%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48%)&lt;BR/&gt; 44259: (2%)&lt;BR/&gt; 44218: (2%)&lt;BR/&gt; 44217: (2%)&lt;BR/&gt; 44187: (2%)&gt;];
}
896--1499[label="0.590909;13pkt 13fpkt"];
896--1898[label="1;21pkt 21fpkt"];
1209--1499[label="0.428571;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="198.28.119.200"/>
      <filter dst_ip="209.139.200.177" src_ip="7.160.221.158" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.193.216.193"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_650{
style=filled;
color=gray75;
4207[label="203.100.4.195;414pkt 414fpkt", shape=pentagon, color=darkviolet];
stat650[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.100.4.195:0, *:0}[93.7198%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.7198%)&lt;BR/&gt; 80: (3.1401%)&lt;BR/&gt; 63229: (0.120773%)&lt;BR/&gt; 62102: (0.120773%)&lt;BR/&gt; 58867: (0.120773%)&gt;];
}
</description>
    <slice>
      <filter src_ip="203.100.4.195"/>
    </slice>
    <from sec="1068526811" usec="0"/>
    <to sec="1068527681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.129.146.195"/>
    </slice>
    <from sec="1068526840" usec="0"/>
    <to sec="1068527681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.3.184.195"/>
    </slice>
    <from sec="1068526817" usec="0"/>
    <to sec="1068527682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.102.200.195"/>
    </slice>
    <from sec="1068526851" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.177.162.196"/>
    </slice>
    <from sec="1068527039" usec="0"/>
    <to sec="1068527244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.31.196.196"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.125.203.196"/>
    </slice>
    <from sec="1068526827" usec="0"/>
    <to sec="1068527685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_657{
style=filled;
color=gray75;
722[label="136.93.244.157;d;52pkt 52fpkt", shape=diamond, color=yellow];
1640[label="136.93.244.157;d;45pkt 45fpkt", shape=hexagon, color=black];
3754[label="96.137.151.141;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4236[label="96.137.151.197;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5650[label="96.137.151.197;18pkt 18fpkt", shape=invtriangle, color=brown];
stat657[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.137.151.150:80, 136.93.244.157:*}[33.9623%]&lt;BR/&gt;{96.137.151.197:81, 136.93.244.157:*}[33.9623%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.5362%)&lt;BR/&gt; 81: (22.4638%)&lt;BR/&gt; 1798: (1.44928%)&lt;BR/&gt; 1797: (1.44928%)&lt;BR/&gt; 1796: (1.44928%)&gt;];
}
722--1640[label="1;45pkt 45fpkt"];
722--3754[label="1;5pkt 5fpkt"];
722--4236[label="0.944444;17pkt 17fpkt"];
722--5650[label="0.944444;17pkt 17fpkt"];
1640--3754[label="1;5pkt 5fpkt"];
1640--4236[label="0.611111;11pkt 11fpkt"];
1640--5650[label="0.611111;11pkt 11fpkt"];
4236--5650[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.244.157" src_ip="96.137.151.197" src_port="81"/>
      <filter dst_ip="136.93.244.157" src_ip="96.137.151.150" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_658{
style=filled;
color=gray75;
4255[label="212.171.237.199;419pkt 419fpkt", shape=pentagon, color=darkviolet];
stat658[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.171.237.199:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.2387%)&lt;BR/&gt; 65534: (0.238663%)&lt;BR/&gt; 2557: (0.238663%)&lt;BR/&gt; 2553: (0.238663%)&lt;BR/&gt; 2550: (0.238663%)&gt;];
}
</description>
    <slice>
      <filter src_ip="212.171.237.199" src_port="53"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.219.74.200"/>
    </slice>
    <from sec="1068527317" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.119.200"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.244.170.200"/>
    </slice>
    <from sec="1068526808" usec="0"/>
    <to sec="1068527693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_662{
style=filled;
color=gray75;
1222[label="98.46.87.201;s;8pkt 8fpkt", shape=diamond, color=yellow];
4266[label="98.46.87.201;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5668[label="98.46.87.201;1pkt 1fpkt", shape=invtriangle, color=brown];
stat662[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.46.87.201:*, 208.31.228.18:1214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 3014: (15%)&lt;BR/&gt; 3001: (5%)&lt;BR/&gt; 2988: (5%)&lt;BR/&gt; 2968: (5%)&gt;];
}
1222--1486[label="1;8pkt 8fpkt"];
1222--4266[label="1;1pkt 1fpkt"];
1222--5668[label="1;1pkt 1fpkt"];
1222--6310[label="1;1pkt 1fpkt"];
4266--5668[label="1;1pkt 1fpkt"];
4266--6310[label="1;1pkt 1fpkt"];
5668--6310[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.18" dst_port="1214" src_ip="98.46.87.201"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.169.104.201"/>
    </slice>
    <from sec="1068526816" usec="0"/>
    <to sec="1068527693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0863,1.87777,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_664{
style=filled;
color=gray75;
89[label="96.171.181.201s;253pkt 253fpkt", shape=rectangle, color=red];
4270[label="96.171.181.201;253pkt 253fpkt", shape=pentagon, color=darkviolet];
stat664[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.171.181.201:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
89--4270[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.171.181.201" src_port="1027"/>
    </slice>
    <from sec="1068527588" usec="0"/>
    <to sec="1068527602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_665{
style=filled;
color=gray75;
337[label="10.131.22.202;s;22247pkt 22247fpkt", shape=diamond, color=yellow];
4274[label="10.131.22.202;23996pkt 23996fpkt", shape=pentagon, color=darkviolet];
5673[label="10.131.22.202;23995pkt 23995fpkt", shape=invtriangle, color=brown];
stat665[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.131.22.202:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
337--4274[label="1;22247pkt 22247fpkt"];
337--5673[label="0.999955;22246pkt 22246fpkt"];
4274--5673[label="1;23995pkt 23995fpkt"];
</description>
    <slice>
      <filter src_ip="10.131.22.202"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.184.133.202"/>
    </slice>
    <from sec="1068526816" usec="0"/>
    <to sec="1068527624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
508[label="208.31.249.203;s;2764pkt 2764fpkt", shape=diamond, color=yellow];
1527[label="208.31.249.203;s;2764pkt 2764fpkt", shape=hexagon, color=black];
4289[label="208.31.249.203;2977pkt 2977fpkt", shape=pentagon, color=darkviolet];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.31.249.203:0, *:0}[99.6305%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.612%)&lt;BR/&gt; 80: (0.194004%)&lt;BR/&gt; 60227: (0.0176367%)&lt;BR/&gt; 4622: (0.0176367%)&lt;BR/&gt; 4539: (0.0176367%)&gt;];
}
508--1527[label="1;2764pkt 2764fpkt"];
508--4289[label="1;2764pkt 2764fpkt"];
1527--4289[label="1;2764pkt 2764fpkt"];
</description>
    <slice>
      <filter src_ip="208.31.249.203"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.99.171.206"/>
    </slice>
    <from sec="1068527583" usec="0"/>
    <to sec="1068527618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_669{
style=filled;
color=gray75;
833[label="18.8.105.208;s;1pkt 1fpkt", shape=diamond, color=yellow];
1336[label="209.235.188.201;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat669[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.235.188.201:*, 208.31.228.18:1214}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (50%)&lt;BR/&gt; 3958: (7.14286%)&lt;BR/&gt; 3954: (7.14286%)&lt;BR/&gt; 3952: (7.14286%)&lt;BR/&gt; 3948: (7.14286%)&gt;];
}
833--1486[label="1;1pkt 1fpkt"];
833--4310[label="1;1pkt 1fpkt"];
1336--1486[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.18" dst_port="1214" src_ip="209.235.188.201"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564047,1.73089,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_670{
style=filled;
color=gray75;
1409[label="208.18.13.235;d;10pkt 10fpkt", shape=diamond, color=yellow];
3587[label="202.240.146.122;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4314[label="96.84.231.208;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat670[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.240.146.122:80, 208.18.13.235:*}[58.3333%]&lt;BR/&gt;{96.84.231.208:80, 208.18.13.235:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3384: (4.7619%)&lt;BR/&gt; 3383: (4.7619%)&lt;BR/&gt; 3360: (4.7619%)&lt;BR/&gt; 3359: (4.7619%)&gt;];
}
1409--3587[label="1;7pkt 7fpkt"];
1409--4314[label="0.5;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.13.235" src_ip="202.240.146.122" src_port="80"/>
      <filter dst_ip="208.18.13.235" src_ip="96.84.231.208" src_port="80"/>
    </slice>
    <from sec="1068527348" usec="0"/>
    <to sec="1068527638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.129.49.209"/>
    </slice>
    <from sec="1068526814" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.18.147.209"/>
    </slice>
    <from sec="1068526825" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.202.7.210"/>
    </slice>
    <from sec="1068527348" usec="0"/>
    <to sec="1068527476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.140.150.210"/>
    </slice>
    <from sec="1068527037" usec="0"/>
    <to sec="1068527063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.201.232.210"/>
    </slice>
    <from sec="1068527488" usec="0"/>
    <to sec="1068527550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.17.86.211"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.169.89.216"/>
    </slice>
    <from sec="1068526831" usec="0"/>
    <to sec="1068527021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_678{
style=filled;
color=gray75;
4372[label="202.214.169.216;99pkt 99fpkt", shape=pentagon, color=darkviolet];
stat678[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.214.169.216:0, *:0}[96.9697%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.9697%)&lt;BR/&gt; 80: (1.51515%)&lt;BR/&gt; 30772: (0.505051%)&lt;BR/&gt; 30767: (0.505051%)&lt;BR/&gt; 24776: (0.505051%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.214.169.216"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.82.228.217"/>
    </slice>
    <from sec="1068527578" usec="0"/>
    <to sec="1068527686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.153.101.218"/>
    </slice>
    <from sec="1068526818" usec="0"/>
    <to sec="1068527643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.153.225.219"/>
    </slice>
    <from sec="1068527294" usec="0"/>
    <to sec="1068527312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.39.234.219"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.45.49.220"/>
    </slice>
    <from sec="1068527174" usec="0"/>
    <to sec="1068527191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.32.66.220"/>
    </slice>
    <from sec="1068526878" usec="0"/>
    <to sec="1068527555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.99.118.221"/>
    </slice>
    <from sec="1068527011" usec="0"/>
    <to sec="1068527692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.153.41.223"/>
    </slice>
    <from sec="1068526809" usec="0"/>
    <to sec="1068527667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.211.217.224"/>
    </slice>
    <from sec="1068527578" usec="0"/>
    <to sec="1068527596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_688{
style=filled;
color=gray75;
4418[label="96.136.25.225;102pkt 102fpkt", shape=pentagon, color=darkviolet];
stat688[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.136.25.225:0, *:0}[91.1765%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.1765%)&lt;BR/&gt; 80: (4.41176%)&lt;BR/&gt; 55971: (0.490196%)&lt;BR/&gt; 55970: (0.490196%)&lt;BR/&gt; 55928: (0.490196%)&gt;];
}
</description>
    <slice>
      <filter src_ip="96.136.25.225"/>
    </slice>
    <from sec="1068526813" usec="0"/>
    <to sec="1068527674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.18.144.225"/>
    </slice>
    <from sec="1068527067" usec="0"/>
    <to sec="1068527684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.18.145.225"/>
    </slice>
    <from sec="1068526841" usec="0"/>
    <to sec="1068527585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_691{
style=filled;
color=gray75;
4442[label="6.179.146.227;99pkt 99fpkt", shape=pentagon, color=darkviolet];
stat691[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.179.146.227:0, *:0}[92.9293%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.9293%)&lt;BR/&gt; 80: (3.53535%)&lt;BR/&gt; 44573: (0.505051%)&lt;BR/&gt; 43532: (0.505051%)&lt;BR/&gt; 43407: (0.505051%)&gt;];
}
</description>
    <slice>
      <filter src_ip="6.179.146.227"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
4444[label="215.41.26.228;85pkt 85fpkt", shape=pentagon, color=darkviolet];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.41.26.228:0, *:0}[90.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (90.5882%)&lt;BR/&gt; 80: (4.70588%)&lt;BR/&gt; 61907: (0.588235%)&lt;BR/&gt; 60581: (0.588235%)&lt;BR/&gt; 55320: (0.588235%)&gt;];
}
</description>
    <slice>
      <filter src_ip="215.41.26.228"/>
    </slice>
    <from sec="1068526855" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.120.168.228"/>
    </slice>
    <from sec="1068526812" usec="0"/>
    <to sec="1068527690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.118.38.230"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.84.77.230"/>
    </slice>
    <from sec="1068527102" usec="0"/>
    <to sec="1068527138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.112.21.231"/>
    </slice>
    <from sec="1068526844" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
406[label="136.93.242.128;d;177pkt 177fpkt", shape=diamond, color=yellow];
542[label="143.38.14.48;d;91pkt 91fpkt", shape=diamond, color=yellow];
685[label="6.24.184.0;s;214pkt 214fpkt", shape=diamond, color=yellow];
873[label="7.210.224.3;s;143pkt 143fpkt", shape=diamond, color=yellow];
1004[label="7.210.224.4;s;146pkt 146fpkt", shape=diamond, color=yellow];
1071[label="136.93.243.74;d;85pkt 85fpkt", shape=diamond, color=yellow];
1285[label="212.118.59.186;s;120pkt 120fpkt", shape=diamond, color=yellow];
1300[label="7.134.28.61;s;17pkt 17fpkt", shape=diamond, color=yellow];
1400[label="136.93.251.138;d;418pkt 418fpkt", shape=diamond, color=yellow];
1561[label="136.93.244.154;d;27pkt 27fpkt", shape=hexagon, color=black];
1619[label="136.93.242.128;d;177pkt 177fpkt", shape=hexagon, color=black];
1782[label="7.210.224.3;s;73pkt 73fpkt", shape=hexagon, color=black];
1894[label="143.38.14.48;d;91pkt 91fpkt", shape=hexagon, color=black];
1922[label="136.93.243.74;d;85pkt 85fpkt", shape=hexagon, color=black];
1985[label="7.210.224.4;s;145pkt 145fpkt", shape=hexagon, color=black];
2411[label="7.210.224.4;198pkt 198fpkt", shape=pentagon, color=darkviolet];
4063[label="6.24.170.177;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4584[label="7.219.198.248;250pkt 250fpkt", shape=pentagon, color=darkviolet];
4653[label="7.210.224.4;198pkt 198fpkt", shape=invtriangle, color=brown];
5556[label="6.24.170.177;14pkt 14fpkt", shape=invtriangle, color=brown];
5825[label="7.219.198.248;249pkt 249fpkt", shape=invtriangle, color=brown];
5857[label="7.210.224.4;198pkt 198fpkt", shape=invhouse, color=bisque];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.93.251.138:*}[26.5544%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0776%)&lt;BR/&gt; 443: (2.73076%)&lt;BR/&gt; 1100: (0.207601%)&lt;BR/&gt; 1097: (0.207601%)&lt;BR/&gt; 1096: (0.207601%)&gt;];
}
406--590[label="0.0734463;13pkt 13fpkt"];
406--685[label="0.135593;24pkt 24fpkt"];
406--845[label="0.0652174;6pkt 6fpkt"];
406--1228[label="0.046875;3pkt 3fpkt"];
406--1523[label="0.0508475;9pkt 9fpkt"];
406--1577[label="0.0734463;13pkt 13fpkt"];
406--1607[label="0.306818;54pkt 54fpkt"];
406--1619[label="1;177pkt 177fpkt"];
406--2179[label="0.046875;3pkt 3fpkt"];
406--2248[label="0.306818;54pkt 54fpkt"];
406--2360[label="0.135593;24pkt 24fpkt"];
406--2564[label="0.0181818;1pkt 1fpkt"];
406--2586[label="0.0410959;3pkt 3fpkt"];
406--2623[label="0.0606061;6pkt 6fpkt"];
406--2782[label="0.305085;54pkt 54fpkt"];
406--2992[label="0.259887;46pkt 46fpkt"];
406--3642[label="0.0734463;13pkt 13fpkt"];
406--3654[label="0.0116279;1pkt 1fpkt"];
406--4063[label="1;15pkt 15fpkt"];
406--4631[label="0.135593;24pkt 24fpkt"];
406--4740[label="0.0181818;1pkt 1fpkt"];
406--4863[label="0.305085;54pkt 54fpkt"];
406--5344[label="0.0734463;13pkt 13fpkt"];
406--5556[label="1;14pkt 14fpkt"];
406--5844[label="0.135593;24pkt 24fpkt"];
406--6162[label="0.0734463;13pkt 13fpkt"];
542--543[label="0.549451;50pkt 50fpkt"];
542--729[label="0.0549451;5pkt 5fpkt"];
542--892[label="0.0625;5pkt 5fpkt"];
542--1253[label="0.0549451;5pkt 5fpkt"];
542--1523[label="0.0549451;5pkt 5fpkt"];
542--1608[label="0.21978;20pkt 20fpkt"];
542--1655[label="0.0549451;5pkt 5fpkt"];
542--1894[label="1;91pkt 91fpkt"];
542--1994[label="0.0694444;5pkt 5fpkt"];
542--2100[label="0.0561798;5pkt 5fpkt"];
542--2284[label="1;91pkt 91fpkt"];
542--2946[label="0.549451;50pkt 50fpkt"];
542--3668[label="0.0549451;5pkt 5fpkt"];
542--4272[label="0.0549451;5pkt 5fpkt"];
542--4399[label="0.0769231;1pkt 1fpkt"];
542--4584[label="0.21978;20pkt 20fpkt"];
542--5671[label="0.0549451;5pkt 5fpkt"];
542--5734[label="0.0833333;1pkt 1fpkt"];
542--5825[label="0.21978;20pkt 20fpkt"];
542--6312[label="0.0549451;5pkt 5fpkt"];
542--6377[label="0.21978;20pkt 20fpkt"];
685--787[label="0.00813008;1pkt 1fpkt"];
685--933[label="0.384615;25pkt 25fpkt"];
685--1067[label="0.40625;26pkt 26fpkt"];
685--1266[label="0.0232558;1pkt 1fpkt"];
685--1427[label="0.378505;81pkt 81fpkt"];
685--1438[label="0.0373832;8pkt 8fpkt"];
685--1561[label="0.481481;13pkt 13fpkt"];
685--1619[label="0.135593;24pkt 24fpkt"];
685--1709[label="0.00813008;1pkt 1fpkt"];
685--1821[label="0.384615;25pkt 25fpkt"];
685--1979[label="0.0841121;18pkt 18fpkt"];
685--2044[label="0.0046729;1pkt 1fpkt"];
685--2193[label="0.0232558;1pkt 1fpkt"];
685--2226[label="0.0373832;8pkt 8fpkt"];
685--2245[label="0.378505;81pkt 81fpkt"];
685--2360[label="0.995327;213pkt 213fpkt"];
685--4631[label="0.995327;213pkt 213fpkt"];
685--5844[label="0.995327;213pkt 213fpkt"];
873--1031[label="0.37931;22pkt 22fpkt"];
873--1266[label="0.0232558;1pkt 1fpkt"];
873--1400[label="0.20979;30pkt 30fpkt"];
873--1427[label="0.041958;6pkt 6fpkt"];
873--1430[label="0.0769231;11pkt 11fpkt"];
873--1433[label="0.153846;22pkt 22fpkt"];
873--1782[label="1;73pkt 73fpkt"];
873--1879[label="0.0493827;4pkt 4fpkt"];
873--2129[label="0.37931;22pkt 22fpkt"];
873--2193[label="0.0232558;1pkt 1fpkt"];
873--2214[label="0.20979;30pkt 30fpkt"];
873--2225[label="0.153846;22pkt 22fpkt"];
873--2245[label="0.041958;6pkt 6fpkt"];
873--2265[label="0.0769231;11pkt 11fpkt"];
873--2322[label="0.20979;30pkt 30fpkt"];
873--2400[label="1;143pkt 143fpkt"];
873--4649[label="1;143pkt 143fpkt"];
1004--1071[label="0.929412;79pkt 79fpkt"];
1004--1266[label="0.0232558;1pkt 1fpkt"];
1004--1427[label="0.0410959;6pkt 6fpkt"];
1004--1430[label="0.0821918;12pkt 12fpkt"];
1004--1433[label="0.150685;22pkt 22fpkt"];
1004--1493[label="0.00684932;1pkt 1fpkt"];
1004--1879[label="0.0493827;4pkt 4fpkt"];
1004--1922[label="0.929412;79pkt 79fpkt"];
1004--1985[label="1;145pkt 145fpkt"];
1004--2193[label="0.0232558;1pkt 1fpkt"];
1004--2225[label="0.150685;22pkt 22fpkt"];
1004--2245[label="0.0410959;6pkt 6fpkt"];
1004--2265[label="0.0753425;11pkt 11fpkt"];
1004--2411[label="1;146pkt 146fpkt"];
1004--4653[label="1;146pkt 146fpkt"];
1004--5857[label="1;146pkt 146fpkt"];
1071--1536[label="0.0235294;2pkt 2fpkt"];
1071--1764[label="0.0235294;2pkt 2fpkt"];
1071--1922[label="1;85pkt 85fpkt"];
1071--1985[label="0.929412;79pkt 79fpkt"];
1071--2272[label="0.0235294;2pkt 2fpkt"];
1071--2411[label="0.929412;79pkt 79fpkt"];
1071--4653[label="0.929412;79pkt 79fpkt"];
1071--5857[label="0.929412;79pkt 79fpkt"];
1285--1291[label="0.0449438;4pkt 4fpkt"];
1285--1295[label="0.40678;24pkt 24fpkt"];
1285--1427[label="0.125;15pkt 15fpkt"];
1285--1966[label="0.0166667;2pkt 2fpkt"];
1285--2152[label="0.482143;27pkt 27fpkt"];
1285--2154[label="0.0449438;4pkt 4fpkt"];
1285--4135[label="1;120pkt 120fpkt"];
1285--6276[label="1;120pkt 120fpkt"];
1300--1427[label="0.529412;9pkt 9fpkt"];
1300--3011[label="1;17pkt 17fpkt"];
1300--5003[label="0.941176;16pkt 16fpkt"];
1400--1462[label="0.161654;43pkt 43fpkt"];
1400--1994[label="0.0138889;1pkt 1fpkt"];
1400--2214[label="1;418pkt 418fpkt"];
1400--2322[label="1;418pkt 418fpkt"];
1400--2363[label="0.0891089;18pkt 18fpkt"];
1400--2400[label="0.191083;30pkt 30fpkt"];
1400--2411[label="0.151515;30pkt 30fpkt"];
1400--2569[label="0.171429;18pkt 18fpkt"];
1400--3650[label="0.00478469;2pkt 2fpkt"];
1400--3654[label="0.395349;34pkt 34fpkt"];
1400--3977[label="0.03125;1pkt 1fpkt"];
1400--4295[label="0.0140845;1pkt 1fpkt"];
1400--4305[label="0.025;1pkt 1fpkt"];
1400--4312[label="0.030303;1pkt 1fpkt"];
1400--4575[label="0.00980392;1pkt 1fpkt"];
1400--4632[label="0.0891089;18pkt 18fpkt"];
1400--4649[label="0.191083;30pkt 30fpkt"];
1400--4653[label="0.151515;30pkt 30fpkt"];
1400--5347[label="0.00478469;2pkt 2fpkt"];
1400--5508[label="0.03125;1pkt 1fpkt"];
1400--5685[label="0.0142857;1pkt 1fpkt"];
1400--5857[label="0.151515;30pkt 30fpkt"];
1400--6165[label="0.00478469;2pkt 2fpkt"];
1561--1786[label="0.185185;5pkt 5fpkt"];
1561--1847[label="0.185185;5pkt 5fpkt"];
1561--1957[label="0.148148;4pkt 4fpkt"];
1561--2278[label="0.185185;5pkt 5fpkt"];
1561--2360[label="0.481481;13pkt 13fpkt"];
1561--4631[label="0.481481;13pkt 13fpkt"];
1561--5844[label="0.481481;13pkt 13fpkt"];
1619--2179[label="0.046875;3pkt 3fpkt"];
1619--2248[label="0.306818;54pkt 54fpkt"];
1619--2360[label="0.135593;24pkt 24fpkt"];
1619--2564[label="0.0181818;1pkt 1fpkt"];
1619--2586[label="0.0410959;3pkt 3fpkt"];
1619--2623[label="0.0606061;6pkt 6fpkt"];
1619--2782[label="0.305085;54pkt 54fpkt"];
1619--2992[label="0.259887;46pkt 46fpkt"];
1619--3642[label="0.0734463;13pkt 13fpkt"];
1619--3654[label="0.0116279;1pkt 1fpkt"];
1619--4063[label="1;15pkt 15fpkt"];
1619--4631[label="0.135593;24pkt 24fpkt"];
1619--4740[label="0.0181818;1pkt 1fpkt"];
1619--4863[label="0.305085;54pkt 54fpkt"];
1619--5344[label="0.0734463;13pkt 13fpkt"];
1619--5556[label="1;14pkt 14fpkt"];
1619--5844[label="0.135593;24pkt 24fpkt"];
1619--6162[label="0.0734463;13pkt 13fpkt"];
1782--1879[label="0.0547945;4pkt 4fpkt"];
1782--2129[label="0.189655;11pkt 11fpkt"];
1782--2225[label="0.273973;20pkt 20fpkt"];
1782--2245[label="0.0821918;6pkt 6fpkt"];
1782--2265[label="0.150685;11pkt 11fpkt"];
1782--2400[label="1;73pkt 73fpkt"];
1782--4649[label="1;73pkt 73fpkt"];
1894--1994[label="0.0694444;5pkt 5fpkt"];
1894--2100[label="0.0561798;5pkt 5fpkt"];
1894--2284[label="1;91pkt 91fpkt"];
1894--2946[label="0.549451;50pkt 50fpkt"];
1894--3668[label="0.0549451;5pkt 5fpkt"];
1894--4272[label="0.0549451;5pkt 5fpkt"];
1894--4399[label="0.0769231;1pkt 1fpkt"];
1894--4584[label="0.21978;20pkt 20fpkt"];
1894--5671[label="0.0549451;5pkt 5fpkt"];
1894--5734[label="0.0833333;1pkt 1fpkt"];
1894--5825[label="0.21978;20pkt 20fpkt"];
1894--6312[label="0.0549451;5pkt 5fpkt"];
1894--6377[label="0.21978;20pkt 20fpkt"];
1922--1985[label="0.929412;79pkt 79fpkt"];
1922--2272[label="0.0235294;2pkt 2fpkt"];
1922--2411[label="0.929412;79pkt 79fpkt"];
1922--4653[label="0.929412;79pkt 79fpkt"];
1922--5857[label="0.929412;79pkt 79fpkt"];
1985--2225[label="0.151724;22pkt 22fpkt"];
1985--2245[label="0.0413793;6pkt 6fpkt"];
1985--2265[label="0.0758621;11pkt 11fpkt"];
1985--2411[label="1;145pkt 145fpkt"];
1985--4653[label="1;145pkt 145fpkt"];
1985--5857[label="1;145pkt 145fpkt"];
2411--4653[label="1;198pkt 198fpkt"];
2411--5857[label="1;198pkt 198fpkt"];
4063--5556[label="1;14pkt 14fpkt"];
4584--5825[label="1;249pkt 249fpkt"];
4584--6377[label="1;249pkt 249fpkt"];
4653--5857[label="1;198pkt 198fpkt"];
5825--6377[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.251.138" src_port="80"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.837732,1.70559,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_699{
style=filled;
color=gray75;
1215[label="146.246.223.70;d;146pkt 146fpkt", shape=diamond, color=yellow];
3877[label="220.137.147.154;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4278[label="4.162.153.202;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5675[label="4.162.153.202;26pkt 26fpkt", shape=invtriangle, color=brown];
6315[label="4.162.153.202;26pkt 26fpkt", shape=invhouse, color=bisque];
stat699[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 146.246.223.70:56518}[52.7397%]&lt;BR/&gt;{*:80, 146.246.223.70:*}[30.8219%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.8509%)&lt;BR/&gt; 53: (22.3684%)&lt;BR/&gt; 56518: (16.886%)&lt;BR/&gt; 52681: (0.877193%)&lt;BR/&gt; 52676: (0.877193%)&gt;];
}
1215--1223[label="0.0555556;1pkt 1fpkt"];
1215--1226[label="0.0555556;1pkt 1fpkt"];
1215--1341[label="0.0166667;1pkt 1fpkt"];
1215--1399[label="0.0205479;3pkt 3fpkt"];
1215--1632[label="0.0753425;11pkt 11fpkt"];
1215--2336[label="0.00684932;1pkt 1fpkt"];
1215--2834[label="0.0205479;3pkt 3fpkt"];
1215--2872[label="0.025;1pkt 1fpkt"];
1215--3251[label="0.016129;1pkt 1fpkt"];
1215--3581[label="0.0769231;1pkt 1fpkt"];
1215--3601[label="0.0188679;1pkt 1fpkt"];
1215--3659[label="0.05;1pkt 1fpkt"];
1215--3877[label="1;3pkt 3fpkt"];
1215--4278[label="1;27pkt 27fpkt"];
1215--4469[label="0.047619;1pkt 1fpkt"];
1215--5135[label="0.016129;1pkt 1fpkt"];
1215--5311[label="0.0833333;1pkt 1fpkt"];
1215--5323[label="0.0188679;1pkt 1fpkt"];
1215--5351[label="0.0526316;1pkt 1fpkt"];
1215--5675[label="1;26pkt 26fpkt"];
1215--6154[label="0.0188679;1pkt 1fpkt"];
1215--6315[label="1;26pkt 26fpkt"];
4278--5675[label="1;26pkt 26fpkt"];
4278--6315[label="1;26pkt 26fpkt"];
5675--6315[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="146.246.223.70" src_port="80"/>
      <filter dst_ip="146.246.223.70" dst_port="56518" src_port="53"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.116.60.233"/>
    </slice>
    <from sec="1068526860" usec="0"/>
    <to sec="1068527678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.187.150.235"/>
    </slice>
    <from sec="1068527227" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.98.75.236"/>
    </slice>
    <from sec="1068527529" usec="0"/>
    <to sec="1068527602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564047,1.73089,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_703{
style=filled;
color=gray75;
1345[label="96.184.251.236;s;498pkt 498fpkt", shape=diamond, color=yellow];
4497[label="96.184.251.236;539pkt 539fpkt", shape=pentagon, color=darkviolet];
stat703[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.184.251.236:0, *:0}[98.3302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.3607%)&lt;BR/&gt; 80: (0.819672%)&lt;BR/&gt; 42724: (0.096432%)&lt;BR/&gt; 36884: (0.096432%)&lt;BR/&gt; 21052: (0.096432%)&gt;];
}
1345--1683[label="0.00526316;1pkt 1fpkt"];
1345--4497[label="1;498pkt 498fpkt"];
</description>
    <slice>
      <filter src_ip="96.184.251.236"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.176.178.237"/>
    </slice>
    <from sec="1068526933" usec="0"/>
    <to sec="1068526949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.2.146.238"/>
    </slice>
    <from sec="1068526923" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.190.70.239"/>
    </slice>
    <from sec="1068527223" usec="0"/>
    <to sec="1068527247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_707{
style=filled;
color=gray75;
4518[label="6.180.211.239;166pkt 166fpkt", shape=pentagon, color=darkviolet];
stat707[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.180.211.239:0, *:0}[92.1687%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.1687%)&lt;BR/&gt; 135: (2.71084%)&lt;BR/&gt; 80: (1.20482%)&lt;BR/&gt; 61592: (0.301205%)&lt;BR/&gt; 58979: (0.301205%)&gt;];
}
</description>
    <slice>
      <filter src_ip="6.180.211.239"/>
    </slice>
    <from sec="1068526809" usec="0"/>
    <to sec="1068527659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.84.77.241"/>
    </slice>
    <from sec="1068527097" usec="0"/>
    <to sec="1068527139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.31.167.241"/>
    </slice>
    <from sec="1068527480" usec="0"/>
    <to sec="1068527505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_710{
style=filled;
color=gray75;
441[label="209.139.217.86;d;14pkt 14fpkt", shape=diamond, color=yellow];
4002[label="214.149.134.170;161pkt 161fpkt", shape=pentagon, color=darkviolet];
4537[label="96.158.187.241;225pkt 225fpkt", shape=pentagon, color=darkviolet];
5518[label="214.149.134.170;160pkt 160fpkt", shape=invtriangle, color=brown];
5800[label="96.158.187.241;224pkt 224fpkt", shape=invtriangle, color=brown];
stat710[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.158.187.241:0, *:0}[56.2814%]&lt;BR/&gt;{214.149.134.170:0, *:0}[40.4523%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.4898%)&lt;BR/&gt; 16990: (0.127551%)&lt;BR/&gt; 80: (0.127551%)&lt;BR/&gt; 7573: (0.0637755%)&lt;BR/&gt; 2890: (0.0637755%)&gt;];
}
441--442[label="1;2pkt 2fpkt"];
441--1489[label="1;2pkt 2fpkt"];
441--1581[label="1;6pkt 6fpkt"];
441--4002[label="0.0714286;1pkt 1fpkt"];
441--4385[label="1;2pkt 2fpkt"];
441--4537[label="0.0714286;1pkt 1fpkt"];
441--5518[label="0.0714286;1pkt 1fpkt"];
441--5728[label="1;1pkt 1fpkt"];
441--5800[label="0.0714286;1pkt 1fpkt"];
441--6336[label="1;2pkt 2fpkt"];
4002--5518[label="1;160pkt 160fpkt"];
4537--5800[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter src_ip="96.158.187.241"/>
      <filter src_ip="214.149.134.170"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.116.46.242"/>
    </slice>
    <from sec="1068526885" usec="0"/>
    <to sec="1068527596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,011,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_712{
style=filled;
color=gray75;
841[label="96.157.171.242;s;1068pkt 1068fpkt", shape=diamond, color=yellow];
1756[label="96.157.171.242;s;1068pkt 1068fpkt", shape=hexagon, color=black];
4542[label="96.157.171.242;1147pkt 1147fpkt", shape=pentagon, color=darkviolet];
stat712[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.157.171.242:2258, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2258: (50%)&lt;BR/&gt; 36800: (0.0913798%)&lt;BR/&gt; 35762: (0.0913798%)&lt;BR/&gt; 35328: (0.0913798%)&lt;BR/&gt; 30957: (0.0913798%)&gt;];
}
841--1756[label="1;1068pkt 1068fpkt"];
841--4542[label="1;1068pkt 1068fpkt"];
1756--4542[label="1;1068pkt 1068fpkt"];
</description>
    <slice>
      <filter src_ip="96.157.171.242" src_port="2258"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.154.252.242"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
616[label="218.109.147.36;d;92pkt 92fpkt", shape=diamond, color=yellow];
3828[label="147.115.122.149;270pkt 270fpkt", shape=pentagon, color=darkviolet];
4504[label="196.130.37.238;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5437[label="147.115.122.149;270pkt 270fpkt", shape=invtriangle, color=brown];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{147.115.122.149:*, *:135}[75%]&lt;BR/&gt;{*:*, 218.109.147.36:*}[25.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (43.128%)&lt;BR/&gt; 6667: (2.60664%)&lt;BR/&gt; 6668: (1.10585%)&lt;BR/&gt; 113: (0.473934%)&lt;BR/&gt; 10080: (0.315956%)&gt;];
}
616--1858[label="1;79pkt 79fpkt"];
616--2337[label="0.0108696;1pkt 1fpkt"];
616--2424[label="0.0108696;1pkt 1fpkt"];
616--2710[label="0.5;1pkt 1fpkt"];
616--2824[label="0.0108696;1pkt 1fpkt"];
616--3282[label="0.0108696;1pkt 1fpkt"];
616--3560[label="0.0108696;1pkt 1fpkt"];
616--3828[label="0.0217391;2pkt 2fpkt"];
616--4504[label="1;1pkt 1fpkt"];
616--4548[label="0.5625;9pkt 9fpkt"];
616--4655[label="0.0108696;1pkt 1fpkt"];
616--5154[label="0.0108696;1pkt 1fpkt"];
616--5303[label="0.0108696;1pkt 1fpkt"];
616--5437[label="0.0217391;2pkt 2fpkt"];
616--5807[label="0.5625;9pkt 9fpkt"];
616--5858[label="0.0108696;1pkt 1fpkt"];
616--6089[label="0.0108696;1pkt 1fpkt"];
616--6143[label="0.0108696;1pkt 1fpkt"];
3828--5437[label="1;270pkt 270fpkt"];
</description>
    <slice>
      <filter dst_ip="218.109.147.36"/>
      <filter dst_port="135" src_ip="147.115.122.149"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0863,1.87777,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_715{
style=filled;
color=gray75;
77[label="196.116.246.160s;356pkt 356fpkt", shape=rectangle, color=red];
4549[label="159.108.81.244;175pkt 175fpkt", shape=pentagon, color=darkviolet];
stat715[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.116.246.160:1033, *:137}[44.0265%]&lt;BR/&gt;{159.108.81.244:1026, *:137}[38.7168%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1026: (23.9171%)&lt;BR/&gt; 1033: (18.7382%)&lt;BR/&gt; 1025: (7.34463%)&gt;];
}
77--4549[label="0.451429;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="196.116.246.160" src_port="1033"/>
      <filter dst_port="137" src_ip="159.108.81.244" src_port="1026"/>
    </slice>
    <from sec="1068527136" usec="0"/>
    <to sec="1068527163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.30.162.246"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.184.186.247"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.49.133.248"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.19.12.250"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.17.71.251"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_721{
style=filled;
color=gray75;
4603[label="96.136.188.251;141pkt 141fpkt", shape=pentagon, color=darkviolet];
stat721[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.136.188.251:0, *:0}[97.8723%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.8723%)&lt;BR/&gt; 80: (1.06383%)&lt;BR/&gt; 2250: (0.35461%)&lt;BR/&gt; 2043: (0.35461%)&lt;BR/&gt; 1099: (0.35461%)&gt;];
}
</description>
    <slice>
      <filter src_ip="96.136.188.251"/>
    </slice>
    <from sec="1068526816" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_722{
style=filled;
color=gray75;
4605[label="202.204.150.252;118pkt 118fpkt", shape=pentagon, color=darkviolet];
stat722[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.204.150.252:0, *:0}[97.4576%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.4576%)&lt;BR/&gt; 80: (1.27119%)&lt;BR/&gt; 37756: (0.423729%)&lt;BR/&gt; 22736: (0.423729%)&lt;BR/&gt; 19354: (0.423729%)&gt;];
}
</description>
    <slice>
      <filter src_ip="202.204.150.252"/>
    </slice>
    <from sec="1068526819" usec="0"/>
    <to sec="1068527679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.85.108.253"/>
    </slice>
    <from sec="1068526851" usec="0"/>
    <to sec="1068527664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_724{
style=filled;
color=gray75;
4615[label="214.161.36.254;104pkt 104fpkt", shape=pentagon, color=darkviolet];
stat724[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.161.36.254:0, *:0}[98.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.0769%)&lt;BR/&gt; 135: (0.961538%)&lt;BR/&gt; 40709: (0.480769%)&lt;BR/&gt; 40240: (0.480769%)&gt;];
}
</description>
    <slice>
      <filter src_ip="214.161.36.254"/>
    </slice>
    <from sec="1068526854" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.129.80.254"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.82.163.254"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="152.8.207.254"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.171.243.254"/>
    </slice>
    <from sec="1068526894" usec="0"/>
    <to sec="1068527029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.116.5.0"/>
    </slice>
    <from sec="1068526818" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_730{
style=filled;
color=gray75;
2356[label="197.103.52.0;209pkt 209fpkt", shape=pentagon, color=darkviolet];
4628[label="197.103.52.0;209pkt 209fpkt", shape=invtriangle, color=brown];
5843[label="197.103.52.0;209pkt 209fpkt", shape=invhouse, color=bisque];
stat730[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.103.52.0:0, *:0}[99.5215%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5215%)&lt;BR/&gt; 37322: (0.239234%)&lt;BR/&gt; 80: (0.239234%)&gt;];
}
2356--4628[label="1;209pkt 209fpkt"];
2356--5843[label="1;209pkt 209fpkt"];
4628--5843[label="1;209pkt 209fpkt"];
</description>
    <slice>
      <filter src_ip="197.103.52.0"/>
    </slice>
    <from sec="1068526815" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_731{
style=filled;
color=gray75;
2378[label="86.75.17.2;82pkt 82fpkt", shape=pentagon, color=darkviolet];
4637[label="86.75.17.2;82pkt 82fpkt", shape=invtriangle, color=brown];
5848[label="86.75.17.2;81pkt 81fpkt", shape=invhouse, color=bisque];
stat731[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.75.17.2:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4853: (1.22449%)&lt;BR/&gt; 4958: (0.612245%)&lt;BR/&gt; 4943: (0.612245%)&lt;BR/&gt; 4934: (0.612245%)&gt;];
}
2378--4637[label="1;82pkt 82fpkt"];
2378--5848[label="1;81pkt 81fpkt"];
4637--5848[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="86.75.17.2"/>
    </slice>
    <from sec="1068526837" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_732{
style=filled;
color=gray75;
713[label="197.45.49.2;s;11pkt 11fpkt", shape=diamond, color=yellow];
1631[label="197.45.49.2;s;11pkt 11fpkt", shape=hexagon, color=black];
2379[label="197.45.49.2;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4638[label="197.45.49.2;11pkt 11fpkt", shape=invtriangle, color=brown];
stat732[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.45.49.2:80, 208.18.149.46:*}[81.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 51349: (4.54545%)&lt;BR/&gt; 48645: (4.54545%)&lt;BR/&gt; 45877: (4.54545%)&lt;BR/&gt; 45859: (4.54545%)&gt;];
}
713--1123[label="0.0909091;1pkt 1fpkt"];
713--1433[label="0.818182;9pkt 9fpkt"];
713--1631[label="1;11pkt 11fpkt"];
713--2225[label="0.818182;9pkt 9fpkt"];
713--2379[label="1;11pkt 11fpkt"];
713--4638[label="1;11pkt 11fpkt"];
1631--2225[label="0.818182;9pkt 9fpkt"];
1631--2379[label="1;11pkt 11fpkt"];
1631--4638[label="1;11pkt 11fpkt"];
2379--4638[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.149.46" src_ip="197.45.49.2" src_port="80"/>
    </slice>
    <from sec="1068527016" usec="0"/>
    <to sec="1068527623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_733{
style=filled;
color=gray75;
2380[label="203.117.78.2;261pkt 261fpkt", shape=pentagon, color=darkviolet];
4639[label="203.117.78.2;260pkt 260fpkt", shape=invtriangle, color=brown];
5849[label="203.117.78.2;260pkt 260fpkt", shape=invhouse, color=bisque];
stat733[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.117.78.2:0, *:0}[97.318%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.3111%)&lt;BR/&gt; 80: (1.34443%)&lt;BR/&gt; 61263: (0.192061%)&lt;BR/&gt; 60636: (0.192061%)&lt;BR/&gt; 42785: (0.192061%)&gt;];
}
2380--4639[label="1;260pkt 260fpkt"];
2380--5849[label="1;260pkt 260fpkt"];
4639--5849[label="1;260pkt 260fpkt"];
</description>
    <slice>
      <filter src_ip="203.117.78.2"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_734{
style=filled;
color=gray75;
2384[label="202.204.167.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4641[label="202.204.167.2;1pkt 1fpkt", shape=invtriangle, color=brown];
stat734[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.204.167.2:0, 209.176.192.6:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2384--4641[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.176.192.6" src_ip="202.204.167.2"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_735{
style=filled;
color=gray75;
2396[label="197.41.147.3;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4647[label="197.41.147.3;4pkt 4fpkt", shape=invtriangle, color=brown];
5853[label="197.41.147.3;3pkt 3fpkt", shape=invhouse, color=bisque];
stat735[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.41.147.3:51975, 146.153.34.216:80}[25%]&lt;BR/&gt;{197.41.147.3:51979, 146.153.34.216:80}[25%]&lt;BR/&gt;{197.41.147.3:51980, 146.153.34.216:80}[25%]&lt;BR/&gt;{197.41.147.3:51981, 146.153.34.216:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51981: (13.6364%)&lt;BR/&gt; 51980: (13.6364%)&lt;BR/&gt; 51979: (13.6364%)&lt;BR/&gt; 51975: (9.09091%)&gt;];
}
2396--4647[label="1;4pkt 4fpkt"];
2396--5853[label="1;3pkt 3fpkt"];
4647--5853[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="146.153.34.216" dst_port="80" src_ip="197.41.147.3" src_port="51981"/>
      <filter dst_ip="146.153.34.216" dst_port="80" src_ip="197.41.147.3" src_port="51980"/>
      <filter dst_ip="146.153.34.216" dst_port="80" src_ip="197.41.147.3" src_port="51979"/>
      <filter dst_ip="146.153.34.216" dst_port="80" src_ip="197.41.147.3" src_port="51975"/>
    </slice>
    <from sec="1068527487" usec="0"/>
    <to sec="1068527511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_736{
style=filled;
color=gray75;
2424[label="1.235.181.5;253pkt 253fpkt", shape=pentagon, color=darkviolet];
4655[label="1.235.181.5;254pkt 254fpkt", shape=invtriangle, color=brown];
5858[label="1.235.181.5;254pkt 254fpkt", shape=invhouse, color=bisque];
stat736[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.235.181.5:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 2523: (0.197109%)&lt;BR/&gt; 2522: (0.197109%)&lt;BR/&gt; 2521: (0.197109%)&lt;BR/&gt; 2520: (0.197109%)&gt;];
}
2424--4655[label="1;253pkt 253fpkt"];
2424--5858[label="1;253pkt 253fpkt"];
4655--5858[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="1.235.181.5"/>
    </slice>
    <from sec="1068527426" usec="0"/>
    <to sec="1068527451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_737{
style=filled;
color=gray75;
2434[label="197.77.43.7;110pkt 110fpkt", shape=pentagon, color=darkviolet];
4659[label="197.77.43.7;110pkt 110fpkt", shape=invtriangle, color=brown];
stat737[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.43.7:0, *:0}[96.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.3636%)&lt;BR/&gt; 80: (1.81818%)&lt;BR/&gt; 4706: (0.454545%)&lt;BR/&gt; 4608: (0.454545%)&lt;BR/&gt; 3003: (0.454545%)&gt;];
}
2434--4659[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter src_ip="197.77.43.7"/>
    </slice>
    <from sec="1068526852" usec="0"/>
    <to sec="1068527688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_738{
style=filled;
color=gray75;
2451[label="197.250.192.8;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4668[label="197.250.192.8;3pkt 3fpkt", shape=invtriangle, color=brown];
5865[label="197.250.192.8;3pkt 3fpkt", shape=invhouse, color=bisque];
stat738[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.250.192.8:80, 136.93.150.96:1420}[33.3333%]&lt;BR/&gt;{197.250.192.8:80, 136.93.150.96:1421}[33.3333%]&lt;BR/&gt;{197.250.192.8:80, 136.93.150.96:1423}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1423: (16.6667%)&lt;BR/&gt; 1421: (16.6667%)&lt;BR/&gt; 1420: (16.6667%)&gt;];
}
2451--4668[label="1;3pkt 3fpkt"];
2451--5865[label="1;3pkt 3fpkt"];
4668--5865[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.150.96" dst_port="1423" src_ip="197.250.192.8" src_port="80"/>
      <filter dst_ip="136.93.150.96" dst_port="1421" src_ip="197.250.192.8" src_port="80"/>
      <filter dst_ip="136.93.150.96" dst_port="1420" src_ip="197.250.192.8" src_port="80"/>
    </slice>
    <from sec="1068527197" usec="0"/>
    <to sec="1068527219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_739{
style=filled;
color=gray75;
2452[label="197.100.218.8;149pkt 149fpkt", shape=pentagon, color=darkviolet];
4669[label="197.100.218.8;148pkt 148fpkt", shape=invtriangle, color=brown];
stat739[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.100.218.8:0, *:0}[97.9866%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.9798%)&lt;BR/&gt; 80: (1.0101%)&lt;BR/&gt; 59239: (0.3367%)&lt;BR/&gt; 58395: (0.3367%)&lt;BR/&gt; 48261: (0.3367%)&gt;];
}
2452--4669[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter src_ip="197.100.218.8"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.105.44.9"/>
    </slice>
    <from sec="1068526836" usec="0"/>
    <to sec="1068527695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_741{
style=filled;
color=gray75;
2458[label="4.210.187.9;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4673[label="4.210.187.9;9pkt 9fpkt", shape=invtriangle, color=brown];
stat741[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.210.187.9:5050, *:*}[55.5556%]&lt;BR/&gt;{4.210.187.9:20, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (27.7778%)&lt;BR/&gt; 20: (16.6667%)&lt;BR/&gt; 3663: (5.55556%)&lt;BR/&gt; 3043: (5.55556%)&lt;BR/&gt; 1826: (5.55556%)&gt;];
}
2458--4673[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="4.210.187.9" src_port="5050"/>
      <filter src_ip="4.210.187.9" src_port="20"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_742{
style=filled;
color=gray75;
2459[label="208.246.197.9;157pkt 157fpkt", shape=pentagon, color=darkviolet];
4674[label="208.246.197.9;156pkt 156fpkt", shape=invtriangle, color=brown];
stat742[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.246.197.9:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2459--4674[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.246.197.9" src_port="1029"/>
    </slice>
    <from sec="1068527529" usec="0"/>
    <to sec="1068527556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_743{
style=filled;
color=gray75;
2461[label="208.255.5.10;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4675[label="208.255.5.10;6pkt 6fpkt", shape=invtriangle, color=brown];
stat743[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.255.5.10:80, 209.139.200.183:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39641: (8.33333%)&lt;BR/&gt; 39638: (8.33333%)&lt;BR/&gt; 39634: (8.33333%)&lt;BR/&gt; 39630: (8.33333%)&gt;];
}
2461--4675[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="209.139.200.183" src_ip="208.255.5.10" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_744{
style=filled;
color=gray75;
2467[label="200.157.73.11;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4679[label="200.157.73.11;3pkt 3fpkt", shape=invtriangle, color=brown];
stat744[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.157.73.11:80, 208.31.228.10:2029}[33.3333%]&lt;BR/&gt;{200.157.73.11:80, 208.31.228.10:2866}[33.3333%]&lt;BR/&gt;{200.157.73.11:80, 208.31.228.10:2879}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2879: (16.6667%)&lt;BR/&gt; 2866: (16.6667%)&lt;BR/&gt; 2029: (16.6667%)&gt;];
}
2467--4679[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.10" dst_port="2879" src_ip="200.157.73.11" src_port="80"/>
      <filter dst_ip="208.31.228.10" dst_port="2866" src_ip="200.157.73.11" src_port="80"/>
      <filter dst_ip="208.31.228.10" dst_port="2029" src_ip="200.157.73.11" src_port="80"/>
    </slice>
    <from sec="1068527288" usec="0"/>
    <to sec="1068527439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_745{
style=filled;
color=gray75;
475[label="136.93.153.42;d;67pkt 67fpkt", shape=diamond, color=yellow];
1299[label="98.6.104.12;s;5pkt 5fpkt", shape=diamond, color=yellow];
2489[label="98.6.104.12;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3954[label="139.137.76.164;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3967[label="139.137.76.166;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4694[label="98.6.104.12;5pkt 5fpkt", shape=invtriangle, color=brown];
stat745[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.145.36.152:80, 136.93.153.42:*}[25.3521%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.5743%)&lt;BR/&gt; 50080: (6.93069%)&lt;BR/&gt; 35385: (1.9802%)&lt;BR/&gt; 35372: (1.9802%)&lt;BR/&gt; 35371: (1.9802%)&gt;];
}
475--476[label="1;2pkt 2fpkt"];
475--515[label="0.268657;18pkt 18fpkt"];
475--522[label="0.0298507;2pkt 2fpkt"];
475--1090[label="0.0447761;3pkt 3fpkt"];
475--1299[label="1;5pkt 5fpkt"];
475--1462[label="0.0149254;1pkt 1fpkt"];
475--1532[label="0.268657;18pkt 18fpkt"];
475--1536[label="0.0298507;2pkt 2fpkt"];
475--1856[label="1;56pkt 56fpkt"];
475--1857[label="1;1pkt 1fpkt"];
475--2060[label="0.0447761;3pkt 3fpkt"];
475--2240[label="0.0869565;4pkt 4fpkt"];
475--2272[label="0.0298507;2pkt 2fpkt"];
475--2470[label="1;2pkt 2fpkt"];
475--2489[label="1;5pkt 5fpkt"];
475--2802[label="0.0666667;4pkt 4fpkt"];
475--3252[label="0.0952381;2pkt 2fpkt"];
475--3483[label="0.0384615;1pkt 1fpkt"];
475--3650[label="0.0149254;1pkt 1fpkt"];
475--3856[label="0.268657;18pkt 18fpkt"];
475--3890[label="0.0447761;3pkt 3fpkt"];
475--3954[label="0.636364;7pkt 7fpkt"];
475--3967[label="1;8pkt 8fpkt"];
475--4681[label="1;2pkt 2fpkt"];
475--4694[label="1;5pkt 5fpkt"];
475--5136[label="0.1;2pkt 2fpkt"];
475--5261[label="0.0384615;1pkt 1fpkt"];
475--5347[label="0.0149254;1pkt 1fpkt"];
475--5454[label="0.268657;18pkt 18fpkt"];
475--5469[label="0.0447761;3pkt 3fpkt"];
475--6130[label="0.0384615;1pkt 1fpkt"];
475--6165[label="0.0149254;1pkt 1fpkt"];
475--6218[label="0.268657;18pkt 18fpkt"];
1299--1856[label="1;5pkt 5fpkt"];
1299--2489[label="1;5pkt 5fpkt"];
1299--4694[label="1;5pkt 5fpkt"];
2489--4694[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.153.42" src_ip="200.145.36.152" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_746{
style=filled;
color=gray75;
2491[label="209.176.130.12;75pkt 75fpkt", shape=pentagon, color=darkviolet];
4696[label="209.176.130.12;76pkt 76fpkt", shape=invtriangle, color=brown];
stat746[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.176.130.12:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2491--4696[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter src_ip="209.176.130.12"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_747{
style=filled;
color=gray75;
2498[label="17.87.58.13;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4701[label="17.87.58.13;6pkt 6fpkt", shape=invtriangle, color=brown];
5881[label="17.87.58.13;6pkt 6fpkt", shape=invhouse, color=bisque];
stat747[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.87.58.13:80, 143.38.52.154:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63958: (8.33333%)&lt;BR/&gt; 63956: (8.33333%)&lt;BR/&gt; 63945: (8.33333%)&lt;BR/&gt; 63943: (8.33333%)&gt;];
}
2498--4701[label="1;6pkt 6fpkt"];
2498--5881[label="1;6pkt 6fpkt"];
4701--5881[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.52.154" src_ip="17.87.58.13" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_748{
style=filled;
color=gray75;
2499[label="202.198.162.13;118pkt 118fpkt", shape=pentagon, color=darkviolet];
4702[label="202.198.162.13;118pkt 118fpkt", shape=invtriangle, color=brown];
stat748[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.198.162.13:0, *:0}[98.3051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.3051%)&lt;BR/&gt; 80: (0.847458%)&lt;BR/&gt; 32261: (0.423729%)&lt;BR/&gt; 13366: (0.423729%)&gt;];
}
2499--4702[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter src_ip="202.198.162.13"/>
    </slice>
    <from sec="1068526813" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.24.238.13"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_750{
style=filled;
color=gray75;
2514[label="213.67.169.14;85pkt 85fpkt", shape=pentagon, color=darkviolet];
4709[label="213.67.169.14;86pkt 86fpkt", shape=invtriangle, color=brown];
5887[label="213.67.169.14;86pkt 86fpkt", shape=invhouse, color=bisque];
stat750[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.67.169.14:*, 146.153.249.228:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (1.16732%)&lt;BR/&gt; 445: (1.16732%)&lt;BR/&gt; 443: (1.16732%)&lt;BR/&gt; 143: (1.16732%)&lt;BR/&gt; 139: (1.16732%)&gt;];
}
2514--4709[label="1;85pkt 85fpkt"];
2514--5887[label="1;85pkt 85fpkt"];
4709--5887[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_ip="146.153.249.228" src_ip="213.67.169.14"/>
    </slice>
    <from sec="1068527268" usec="0"/>
    <to sec="1068527322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_751{
style=filled;
color=gray75;
2520[label="217.234.242.14;102pkt 102fpkt", shape=pentagon, color=darkviolet];
4713[label="217.234.242.14;103pkt 103fpkt", shape=invtriangle, color=brown];
stat751[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.234.242.14:0, *:0}[98.0583%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.0488%)&lt;BR/&gt; 80: (0.97561%)&lt;BR/&gt; 64469: (0.487805%)&lt;BR/&gt; 2853: (0.487805%)&gt;];
}
2520--4713[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter src_ip="217.234.242.14"/>
    </slice>
    <from sec="1068526813" usec="0"/>
    <to sec="1068527687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_752{
style=filled;
color=gray75;
2529[label="17.7.120.15;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4716[label="17.7.120.15;4pkt 4fpkt", shape=invtriangle, color=brown];
stat752[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.7.120.15:80, 208.159.185.117:42078}[25%]&lt;BR/&gt;{17.7.120.15:80, 208.159.185.117:42087}[25%]&lt;BR/&gt;{17.7.120.15:80, 208.159.185.117:42109}[25%]&lt;BR/&gt;{17.7.120.15:80, 208.159.185.117:42148}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42148: (12.5%)&lt;BR/&gt; 42109: (12.5%)&lt;BR/&gt; 42087: (12.5%)&lt;BR/&gt; 42078: (12.5%)&gt;];
}
2529--4716[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.159.185.117" dst_port="42148" src_ip="17.7.120.15" src_port="80"/>
      <filter dst_ip="208.159.185.117" dst_port="42109" src_ip="17.7.120.15" src_port="80"/>
      <filter dst_ip="208.159.185.117" dst_port="42087" src_ip="17.7.120.15" src_port="80"/>
      <filter dst_ip="208.159.185.117" dst_port="42078" src_ip="17.7.120.15" src_port="80"/>
    </slice>
    <from sec="1068527643" usec="0"/>
    <to sec="1068527691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.211.170.15"/>
    </slice>
    <from sec="1068527506" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_754{
style=filled;
color=gray75;
2538[label="146.153.41.16;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4723[label="146.153.41.16;10pkt 10fpkt", shape=invtriangle, color=brown];
stat754[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.41.16:6881, 96.225.15.45:*}[20%]&lt;BR/&gt;{146.153.41.16:6881, 96.181.164.75:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 65281: (5.26316%)&lt;BR/&gt; 32848: (5.26316%)&lt;BR/&gt; 4220: (5.26316%)&lt;BR/&gt; 3674: (5.26316%)&gt;];
}
2538--4723[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="96.181.164.75" src_ip="146.153.41.16" src_port="6881"/>
      <filter dst_ip="96.225.15.45" src_ip="146.153.41.16" src_port="6881"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_755{
style=filled;
color=gray75;
2543[label="202.134.132.16;130pkt 130fpkt", shape=pentagon, color=darkviolet];
4725[label="202.134.132.16;131pkt 131fpkt", shape=invtriangle, color=brown];
5894[label="202.134.132.16;131pkt 131fpkt", shape=invhouse, color=bisque];
stat755[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.134.132.16:0, *:0}[98.4733%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.4694%)&lt;BR/&gt; 80: (0.765306%)&lt;BR/&gt; 3110: (0.382653%)&lt;BR/&gt; 2397: (0.382653%)&gt;];
}
2543--4725[label="1;130pkt 130fpkt"];
2543--5894[label="1;130pkt 130fpkt"];
4725--5894[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter src_ip="202.134.132.16"/>
    </slice>
    <from sec="1068526818" usec="0"/>
    <to sec="1068527688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_756{
style=filled;
color=gray75;
2547[label="86.102.205.16;40pkt 40fpkt", shape=pentagon, color=darkviolet];
4728[label="86.102.205.16;41pkt 41fpkt", shape=invtriangle, color=brown];
stat756[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.102.205.16:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4930: (1.23457%)&lt;BR/&gt; 4915: (1.23457%)&lt;BR/&gt; 4807: (1.23457%)&lt;BR/&gt; 4569: (1.23457%)&gt;];
}
2547--4728[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="86.102.205.16"/>
    </slice>
    <from sec="1068526856" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_757{
style=filled;
color=gray75;
2551[label="208.115.12.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4730[label="208.115.12.17;1pkt 1fpkt", shape=invtriangle, color=brown];
stat757[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.115.12.17:80, 208.31.228.42:2294}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2294: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2551--4730[label="1;1pkt 1fpkt"];
2551--5897[label="1;1pkt 1fpkt"];
4730--5897[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.42" dst_port="2294" src_ip="208.115.12.17" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.12.18.17"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="146.174.167.18"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_760{
style=filled;
color=gray75;
2579[label="208.31.240.18;78pkt 78fpkt", shape=pentagon, color=darkviolet];
4749[label="208.31.240.18;77pkt 77fpkt", shape=invtriangle, color=brown];
stat760[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.31.240.18:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2579--4749[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter src_ip="208.31.240.18"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_761{
style=filled;
color=gray75;
2592[label="212.30.118.20;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4757[label="212.30.118.20;3pkt 3fpkt", shape=invtriangle, color=brown];
stat761[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.118.20:1863, 143.38.9.149:1029}[25%]&lt;BR/&gt;{212.30.118.20:1863, 143.38.236.151:49263}[25%]&lt;BR/&gt;{212.30.118.20:1863, 143.38.154.169:1035}[25%]&lt;BR/&gt;{212.30.118.20:1863, 136.93.37.206:34302}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 49263: (14.2857%)&lt;BR/&gt; 1035: (14.2857%)&lt;BR/&gt; 1029: (14.2857%)&lt;BR/&gt; 34302: (7.14286%)&gt;];
}
2592--4757[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.37.206" dst_port="34302" src_ip="212.30.118.20" src_port="1863"/>
      <filter dst_ip="143.38.154.169" dst_port="1035" src_ip="212.30.118.20" src_port="1863"/>
      <filter dst_ip="143.38.236.151" dst_port="49263" src_ip="212.30.118.20" src_port="1863"/>
      <filter dst_ip="143.38.9.149" dst_port="1029" src_ip="212.30.118.20" src_port="1863"/>
    </slice>
    <from sec="1068526839" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
2597[label="96.245.155.20;140pkt 140fpkt", shape=pentagon, color=darkviolet];
4761[label="96.245.155.20;140pkt 140fpkt", shape=invtriangle, color=brown];
5907[label="96.245.155.20;140pkt 140fpkt", shape=invhouse, color=bisque];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.245.155.20:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2597--4761[label="1;140pkt 140fpkt"];
2597--5907[label="1;140pkt 140fpkt"];
4761--5907[label="1;140pkt 140fpkt"];
</description>
    <slice>
      <filter src_ip="96.245.155.20"/>
    </slice>
    <from sec="1068526900" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.201.228.20"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068526803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.251.149.21"/>
    </slice>
    <from sec="1068526826" usec="0"/>
    <to sec="1068527654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.837732,1.70559,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_765{
style=filled;
color=gray75;
829[label="4.162.153.21;s;3pkt 3fpkt", shape=diamond, color=yellow];
2610[label="4.162.153.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4771[label="4.162.153.21;1pkt 1fpkt", shape=invtriangle, color=brown];
5910[label="4.162.153.21;1pkt 1fpkt", shape=invhouse, color=bisque];
stat765[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.162.153.21:0, 208.31.221.108:0}[33.3333%]&lt;BR/&gt;{4.162.153.21:0, 208.31.221.123:0}[33.3333%]&lt;BR/&gt;{4.162.153.21:0, 208.31.228.209:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
829--968[label="0.333333;1pkt 1fpkt"];
829--1860[label="0.333333;1pkt 1fpkt"];
829--2061[label="0.333333;1pkt 1fpkt"];
829--2610[label="1;1pkt 1fpkt"];
829--4771[label="1;1pkt 1fpkt"];
829--5910[label="1;1pkt 1fpkt"];
2610--4771[label="1;1pkt 1fpkt"];
2610--5910[label="1;1pkt 1fpkt"];
4771--5910[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.209" src_ip="4.162.153.21"/>
      <filter dst_ip="208.31.221.123" src_ip="4.162.153.21"/>
      <filter dst_ip="208.31.221.108" src_ip="4.162.153.21"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_766{
style=filled;
color=gray75;
2613[label="212.69.14.22;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4773[label="212.69.14.22;1pkt 1fpkt", shape=invtriangle, color=brown];
5911[label="212.69.14.22;2pkt 2fpkt", shape=invhouse, color=bisque];
stat766[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.69.14.22:80, 136.93.82.42:36002}[50%]&lt;BR/&gt;{212.69.14.22:80, 136.93.82.42:36003}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36003: (37.5%)&lt;BR/&gt; 36002: (12.5%)&gt;];
}
2613--4773[label="1;1pkt 1fpkt"];
2613--5911[label="1;1pkt 1fpkt"];
4773--5911[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.82.42" dst_port="36003" src_ip="212.69.14.22" src_port="80"/>
      <filter dst_ip="136.93.82.42" dst_port="36002" src_ip="212.69.14.22" src_port="80"/>
    </slice>
    <from sec="1068527467" usec="0"/>
    <to sec="1068527488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.769392,1.70528,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_767{
style=filled;
color=gray75;
934[label="208.221.23.22;s;13pkt 13fpkt", shape=diamond, color=yellow];
1913[label="208.221.23.22;s;12pkt 12fpkt", shape=hexagon, color=black];
2615[label="208.221.23.22;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat767[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.221.23.22:80, 208.18.149.46:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53270: (4.05405%)&lt;BR/&gt; 52503: (4.05405%)&lt;BR/&gt; 51501: (4.05405%)&lt;BR/&gt; 51485: (4.05405%)&gt;];
}
934--1433[label="0.923077;12pkt 12fpkt"];
934--1913[label="1;12pkt 12fpkt"];
934--2225[label="0.923077;12pkt 12fpkt"];
934--2615[label="1;12pkt 12fpkt"];
934--4775[label="1;12pkt 12fpkt"];
1913--2225[label="1;12pkt 12fpkt"];
1913--2615[label="0.916667;11pkt 11fpkt"];
1913--4775[label="0.916667;11pkt 11fpkt"];
2615--4775[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.149.46" src_ip="208.221.23.22" src_port="80"/>
    </slice>
    <from sec="1068527129" usec="0"/>
    <to sec="1068527688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_768{
style=filled;
color=gray75;
2626[label="197.41.2.23;97pkt 97fpkt", shape=pentagon, color=darkviolet];
4780[label="197.41.2.23;98pkt 98fpkt", shape=invtriangle, color=brown];
5913[label="197.41.2.23;98pkt 98fpkt", shape=invhouse, color=bisque];
stat768[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.41.2.23:0, *:0}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.8328%)&lt;BR/&gt; 80: (3.58362%)&lt;BR/&gt; 45623: (0.511945%)&lt;BR/&gt; 45497: (0.511945%)&lt;BR/&gt; 44362: (0.511945%)&gt;];
}
2626--4780[label="1;97pkt 97fpkt"];
2626--5913[label="1;97pkt 97fpkt"];
4780--5913[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter src_ip="197.41.2.23"/>
    </slice>
    <from sec="1068526815" usec="0"/>
    <to sec="1068527639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_769{
style=filled;
color=gray75;
2629[label="96.244.15.23;236pkt 236fpkt", shape=pentagon, color=darkviolet];
4782[label="96.244.15.23;236pkt 236fpkt", shape=invtriangle, color=brown];
stat769[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.244.15.23:0, *:0}[93.6441%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.6441%)&lt;BR/&gt; 80: (2.33051%)&lt;BR/&gt; 135: (0.635593%)&lt;BR/&gt; 65233: (0.211864%)&lt;BR/&gt; 59700: (0.211864%)&gt;];
}
2629--4782[label="1;236pkt 236fpkt"];
</description>
    <slice>
      <filter src_ip="96.244.15.23"/>
    </slice>
    <from sec="1068526813" usec="0"/>
    <to sec="1068527694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_770{
style=filled;
color=gray75;
2630[label="197.77.25.23;173pkt 173fpkt", shape=pentagon, color=darkviolet];
4783[label="197.77.25.23;173pkt 173fpkt", shape=invtriangle, color=brown];
stat770[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.25.23:0, *:0}[97.1098%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.1098%)&lt;BR/&gt; 80: (1.44509%)&lt;BR/&gt; 63930: (0.289017%)&lt;BR/&gt; 62748: (0.289017%)&lt;BR/&gt; 61727: (0.289017%)&gt;];
}
2630--4783[label="1;173pkt 173fpkt"];
</description>
    <slice>
      <filter src_ip="197.77.25.23"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_771{
style=filled;
color=gray75;
2639[label="1.164.177.23;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4786[label="1.164.177.23;2pkt 2fpkt", shape=invtriangle, color=brown];
stat771[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.164.177.23:1100, 143.206.165.151:445}[50%]&lt;BR/&gt;{1.164.177.23:1101, 143.206.165.151:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 1101: (25%)&lt;BR/&gt; 1100: (25%)&gt;];
}
2639--4786[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.206.165.151" dst_port="445" src_ip="1.164.177.23" src_port="1101"/>
      <filter dst_ip="143.206.165.151" dst_port="445" src_ip="1.164.177.23" src_port="1100"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_772{
style=filled;
color=gray75;
2654[label="86.102.93.25;74pkt 74fpkt", shape=pentagon, color=darkviolet];
4793[label="86.102.93.25;73pkt 73fpkt", shape=invtriangle, color=brown];
5915[label="86.102.93.25;74pkt 74fpkt", shape=invhouse, color=bisque];
stat772[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.102.93.25:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4989: (0.678733%)&lt;BR/&gt; 4924: (0.678733%)&lt;BR/&gt; 4799: (0.678733%)&lt;BR/&gt; 4777: (0.678733%)&gt;];
}
2654--4793[label="1;73pkt 73fpkt"];
2654--5915[label="1;74pkt 74fpkt"];
4793--5915[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="86.102.93.25"/>
    </slice>
    <from sec="1068526853" usec="0"/>
    <to sec="1068527684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.132.201.25"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_774{
style=filled;
color=gray75;
2677[label="200.193.215.27;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4807[label="200.193.215.27;6pkt 6fpkt", shape=invtriangle, color=brown];
stat774[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.193.215.27:5050, *:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (41.6667%)&lt;BR/&gt; 1920: (8.33333%)&lt;BR/&gt; 1852: (8.33333%)&lt;BR/&gt; 1232: (8.33333%)&lt;BR/&gt; 1059: (8.33333%)&gt;];
}
2677--4807[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="200.193.215.27" src_port="5050"/>
    </slice>
    <from sec="1068526810" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_775{
style=filled;
color=gray75;
2682[label="202.211.153.28;144pkt 144fpkt", shape=pentagon, color=darkviolet];
4809[label="202.211.153.28;143pkt 143fpkt", shape=invtriangle, color=brown];
5923[label="202.211.153.28;144pkt 144fpkt", shape=invhouse, color=bisque];
stat775[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.211.153.28:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2682--4809[label="1;143pkt 143fpkt"];
2682--5923[label="1;144pkt 144fpkt"];
4809--5923[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter src_ip="202.211.153.28"/>
    </slice>
    <from sec="1068526812" usec="0"/>
    <to sec="1068527692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_776{
style=filled;
color=gray75;
2688[label="202.208.125.29;138pkt 138fpkt", shape=pentagon, color=darkviolet];
4811[label="202.208.125.29;137pkt 137fpkt", shape=invtriangle, color=brown];
stat776[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.208.125.29:0, *:0}[94.9275%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.9091%)&lt;BR/&gt; 80: (2.54545%)&lt;BR/&gt; 4962: (0.363636%)&lt;BR/&gt; 4250: (0.363636%)&lt;BR/&gt; 2581: (0.363636%)&gt;];
}
2688--4811[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter src_ip="202.208.125.29"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_777{
style=filled;
color=gray75;
2705[label="209.235.114.31;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4821[label="209.235.114.31;1pkt 1fpkt", shape=invtriangle, color=brown];
5931[label="209.235.114.31;1pkt 1fpkt", shape=invhouse, color=bisque];
stat777[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.235.114.31:3175, 143.178.137.201:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3175: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
2705--4821[label="1;1pkt 1fpkt"];
2705--5931[label="1;1pkt 1fpkt"];
4821--5931[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.178.137.201" dst_port="445" src_ip="209.235.114.31" src_port="3175"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_778{
style=filled;
color=gray75;
529[label="146.153.242.31;s;43pkt 43fpkt", shape=diamond, color=yellow];
1778[label="146.153.242.31;s;43pkt 43fpkt", shape=hexagon, color=black];
2707[label="146.153.242.31;42pkt 42fpkt", shape=pentagon, color=darkviolet];
4822[label="146.153.242.31;43pkt 43fpkt", shape=invtriangle, color=brown];
stat778[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.242.31:10000, *:10000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10000: (100%)&gt;];
}
529--1778[label="1;43pkt 43fpkt"];
529--2707[label="1;42pkt 42fpkt"];
529--4822[label="1;43pkt 43fpkt"];
1778--2707[label="1;42pkt 42fpkt"];
1778--4822[label="1;43pkt 43fpkt"];
2707--4822[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_port="10000" src_ip="146.153.242.31" src_port="10000"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_780{
style=filled;
color=gray75;
2718[label="218.109.147.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4827[label="218.109.147.32;1pkt 1fpkt", shape=invtriangle, color=brown];
5936[label="218.109.147.32;1pkt 1fpkt", shape=invhouse, color=bisque];
stat780[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.109.147.32:6667, 200.84.192.221:1149}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 1149: (50%)&gt;];
}
2718--4827[label="1;1pkt 1fpkt"];
2718--5936[label="1;1pkt 1fpkt"];
4827--5936[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.84.192.221" dst_port="1149" src_ip="218.109.147.32" src_port="6667"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_781{
style=filled;
color=gray75;
2727[label="146.153.6.33;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4832[label="146.153.6.33;23pkt 23fpkt", shape=invtriangle, color=brown];
5939[label="146.153.6.33;23pkt 23fpkt", shape=invhouse, color=bisque];
stat781[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.6.33:*, 212.52.1.32:443}[60.8696%]&lt;BR/&gt;{146.153.6.33:*, 212.52.1.5:443}[34.7826%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (48.5294%)&lt;BR/&gt; 2229: (2.20588%)&lt;BR/&gt; 2228: (2.20588%)&lt;BR/&gt; 2221: (2.20588%)&lt;BR/&gt; 2220: (2.20588%)&gt;];
}
2727--4832[label="1;22pkt 22fpkt"];
2727--5939[label="1;22pkt 22fpkt"];
4832--5939[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="212.52.1.32" dst_port="443" src_ip="146.153.6.33"/>
      <filter dst_ip="212.52.1.5" dst_port="443" src_ip="146.153.6.33"/>
    </slice>
    <from sec="1068526819" usec="0"/>
    <to sec="1068527676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_782{
style=filled;
color=gray75;
2733[label="202.146.50.33;99pkt 99fpkt", shape=pentagon, color=darkviolet];
4835[label="202.146.50.33;100pkt 100fpkt", shape=invtriangle, color=brown];
stat782[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.146.50.33:0, *:0}[95%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.9749%)&lt;BR/&gt; 80: (2.51256%)&lt;BR/&gt; 4019: (0.502513%)&lt;BR/&gt; 3746: (0.502513%)&lt;BR/&gt; 3190: (0.502513%)&gt;];
}
2733--4835[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter src_ip="202.146.50.33"/>
    </slice>
    <from sec="1068526908" usec="0"/>
    <to sec="1068527683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.192.159.33"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_784{
style=filled;
color=gray75;
535[label="7.136.246.35;s;109pkt 109fpkt", shape=diamond, color=yellow];
stat784[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.136.246.35:*, *:80}[79.8165%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.9083%)&lt;BR/&gt; 53: (9.17431%)&lt;BR/&gt; 8888: (0.917431%)&lt;BR/&gt; 65118: (0.458716%)&lt;BR/&gt; 65031: (0.458716%)&gt;];
}
535--550[label="0.0285714;2pkt 2fpkt"];
535--552[label="0.046875;3pkt 3fpkt"];
535--651[label="0.0246914;2pkt 2fpkt"];
535--658[label="0.0344828;1pkt 1fpkt"];
535--751[label="0.0465116;2pkt 2fpkt"];
535--781[label="0.0806452;5pkt 5fpkt"];
535--831[label="0.137615;15pkt 15fpkt"];
535--838[label="0.00917431;1pkt 1fpkt"];
535--855[label="0.0366972;4pkt 4fpkt"];
535--904[label="0.0243902;1pkt 1fpkt"];
535--956[label="0.0909091;1pkt 1fpkt"];
535--988[label="0.00917431;1pkt 1fpkt"];
535--1012[label="0.038961;3pkt 3fpkt"];
535--1023[label="0.0238095;1pkt 1fpkt"];
535--1118[label="0.0212766;2pkt 2fpkt"];
535--1158[label="0.0285714;1pkt 1fpkt"];
535--1271[label="0.0714286;3pkt 3fpkt"];
535--1380[label="0.025974;2pkt 2fpkt"];
535--1496[label="0.0508475;3pkt 3fpkt"];
535--1507[label="0.0550459;6pkt 6fpkt"];
535--1604[label="0.0344828;1pkt 1fpkt"];
535--1685[label="0.0275229;3pkt 3fpkt"];
535--1698[label="0.990826;108pkt 108fpkt"];
535--1704[label="0.0806452;5pkt 5fpkt"];
535--1707[label="0.0285714;2pkt 2fpkt"];
535--1708[label="0.0508475;3pkt 3fpkt"];
535--1751[label="0.00917431;1pkt 1fpkt"];
535--1873[label="0.00917431;1pkt 1fpkt"];
535--1891[label="0.0285714;1pkt 1fpkt"];
535--1921[label="0.0909091;1pkt 1fpkt"];
535--1968[label="0.0465116;2pkt 2fpkt"];
535--2040[label="0.0123457;1pkt 1fpkt"];
535--2132[label="0.1;3pkt 3fpkt"];
535--2139[label="0.027027;1pkt 1fpkt"];
535--2327[label="0.0458716;5pkt 5fpkt"];
535--2342[label="0.0458716;5pkt 5fpkt"];
535--2767[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="7.136.246.35"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_785{
style=filled;
color=gray75;
2752[label="208.218.166.34;243pkt 243fpkt", shape=pentagon, color=darkviolet];
4848[label="208.218.166.34;243pkt 243fpkt", shape=invtriangle, color=brown];
stat785[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.218.166.34:0, *:0}[99.5885%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5885%)&lt;BR/&gt; 53901: (0.205761%)&lt;BR/&gt; 80: (0.205761%)&gt;];
}
2752--4848[label="1;243pkt 243fpkt"];
</description>
    <slice>
      <filter src_ip="208.218.166.34"/>
    </slice>
    <from sec="1068526820" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_786{
style=filled;
color=gray75;
946[label="202.53.27.244;d;82pkt 82fpkt", shape=diamond, color=yellow];
2768[label="146.153.6.36;119pkt 119fpkt", shape=pentagon, color=darkviolet];
4855[label="146.153.6.36;118pkt 118fpkt", shape=invtriangle, color=brown];
stat786[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.6.36:*, 202.53.27.244:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 1563: (0.470219%)&lt;BR/&gt; 1562: (0.470219%)&lt;BR/&gt; 1560: (0.470219%)&lt;BR/&gt; 1557: (0.470219%)&gt;];
}
946--953[label="1;82pkt 82fpkt"];
946--2768[label="1;82pkt 82fpkt"];
946--4855[label="1;82pkt 82fpkt"];
2768--4855[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_ip="202.53.27.244" dst_port="8080" src_ip="146.153.6.36"/>
    </slice>
    <from sec="1068526879" usec="0"/>
    <to sec="1068527688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.21.238.37"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_788{
style=filled;
color=gray75;
2786[label="98.64.27.38;94pkt 94fpkt", shape=pentagon, color=darkviolet];
4866[label="98.64.27.38;93pkt 93fpkt", shape=invtriangle, color=brown];
5952[label="98.64.27.38;94pkt 94fpkt", shape=invhouse, color=bisque];
stat788[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.64.27.38:0, *:0}[94.6809%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.6619%)&lt;BR/&gt; 135: (2.66904%)&lt;BR/&gt; 51591: (0.533808%)&lt;BR/&gt; 51185: (0.533808%)&lt;BR/&gt; 49230: (0.533808%)&gt;];
}
2786--4866[label="1;93pkt 93fpkt"];
2786--5952[label="1;94pkt 94fpkt"];
4866--5952[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter src_ip="98.64.27.38"/>
    </slice>
    <from sec="1068526933" usec="0"/>
    <to sec="1068527676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
2790[label="204.201.76.38;159pkt 159fpkt", shape=pentagon, color=darkviolet];
4868[label="204.201.76.38;158pkt 158fpkt", shape=invtriangle, color=brown];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.201.76.38:0, *:0}[96.2264%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.2145%)&lt;BR/&gt; 80: (1.89274%)&lt;BR/&gt; 32483: (0.315457%)&lt;BR/&gt; 20310: (0.315457%)&lt;BR/&gt; 19115: (0.315457%)&gt;];
}
2790--4868[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter src_ip="204.201.76.38"/>
    </slice>
    <from sec="1068526838" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_790{
style=filled;
color=gray75;
2791[label="199.34.81.38;134pkt 134fpkt", shape=pentagon, color=darkviolet];
4869[label="199.34.81.38;134pkt 134fpkt", shape=invtriangle, color=brown];
stat790[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.34.81.38:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2791--4869[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter src_ip="199.34.81.38"/>
    </slice>
    <from sec="1068526813" usec="0"/>
    <to sec="1068527694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_791{
style=filled;
color=gray75;
2792[label="7.110.98.38;65pkt 65fpkt", shape=pentagon, color=darkviolet];
4870[label="7.110.98.38;65pkt 65fpkt", shape=invtriangle, color=brown];
5954[label="7.110.98.38;65pkt 65fpkt", shape=invhouse, color=bisque];
stat791[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.110.98.38:80, 164.228.191.68:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2040: (0.769231%)&lt;BR/&gt; 2039: (0.769231%)&lt;BR/&gt; 2038: (0.769231%)&lt;BR/&gt; 2037: (0.769231%)&gt;];
}
2792--4870[label="1;65pkt 65fpkt"];
2792--5954[label="1;65pkt 65fpkt"];
4870--5954[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_ip="164.228.191.68" src_ip="7.110.98.38" src_port="80"/>
    </slice>
    <from sec="1068526865" usec="0"/>
    <to sec="1068527510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_792{
style=filled;
color=gray75;
2794[label="212.30.119.38;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4871[label="212.30.119.38;3pkt 3fpkt", shape=invtriangle, color=brown];
stat792[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.119.38:1863, 143.38.12.52:4724}[25%]&lt;BR/&gt;{212.30.119.38:1863, 143.38.9.148:1031}[25%]&lt;BR/&gt;{212.30.119.38:1863, 136.93.144.187:1041}[25%]&lt;BR/&gt;{212.30.119.38:1863, 143.38.9.236:1044}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4724: (14.2857%)&lt;BR/&gt; 1044: (14.2857%)&lt;BR/&gt; 1031: (14.2857%)&lt;BR/&gt; 1041: (7.14286%)&gt;];
}
2794--4871[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.9.236" dst_port="1044" src_ip="212.30.119.38" src_port="1863"/>
      <filter dst_ip="136.93.144.187" dst_port="1041" src_ip="212.30.119.38" src_port="1863"/>
      <filter dst_ip="143.38.9.148" dst_port="1031" src_ip="212.30.119.38" src_port="1863"/>
      <filter dst_ip="143.38.12.52" dst_port="4724" src_ip="212.30.119.38" src_port="1863"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_793{
style=filled;
color=gray75;
2799[label="197.238.181.38;147pkt 147fpkt", shape=pentagon, color=darkviolet];
4874[label="197.238.181.38;146pkt 146fpkt", shape=invtriangle, color=brown];
5957[label="197.238.181.38;147pkt 147fpkt", shape=invhouse, color=bisque];
stat793[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.238.181.38:0, *:0}[95.9184%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.9091%)&lt;BR/&gt; 80: (2.04545%)&lt;BR/&gt; 53781: (0.340909%)&lt;BR/&gt; 44929: (0.340909%)&lt;BR/&gt; 43458: (0.340909%)&gt;];
}
2799--4874[label="1;146pkt 146fpkt"];
2799--5957[label="1;147pkt 147fpkt"];
4874--5957[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter src_ip="197.238.181.38"/>
    </slice>
    <from sec="1068526820" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_794{
style=filled;
color=gray75;
2803[label="200.196.242.38;98pkt 98fpkt", shape=pentagon, color=darkviolet];
4876[label="200.196.242.38;98pkt 98fpkt", shape=invtriangle, color=brown];
stat794[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.196.242.38:0, *:0}[97.9592%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.9592%)&lt;BR/&gt; 52348: (0.510204%)&lt;BR/&gt; 50278: (0.510204%)&lt;BR/&gt; 135: (0.510204%)&lt;BR/&gt; 80: (0.510204%)&gt;];
}
2803--4876[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter src_ip="200.196.242.38"/>
    </slice>
    <from sec="1068526811" usec="0"/>
    <to sec="1068527677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
2805[label="197.43.5.39;222pkt 222fpkt", shape=pentagon, color=darkviolet];
4878[label="197.43.5.39;222pkt 222fpkt", shape=invtriangle, color=brown];
5960[label="197.43.5.39;222pkt 222fpkt", shape=invhouse, color=bisque];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.43.5.39:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2805--4878[label="1;222pkt 222fpkt"];
2805--5960[label="1;222pkt 222fpkt"];
4878--5960[label="1;222pkt 222fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.43.5.39" src_port="1027"/>
    </slice>
    <from sec="1068527567" usec="0"/>
    <to sec="1068527606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.50.60.40"/>
    </slice>
    <from sec="1068527465" usec="0"/>
    <to sec="1068527620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_797{
style=filled;
color=gray75;
2816[label="130.7.64.40;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4883[label="130.7.64.40;1pkt 1fpkt", shape=invtriangle, color=brown];
stat797[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.7.64.40:110, 143.134.208.240:2444}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2444: (50%)&lt;BR/&gt; 110: (50%)&gt;];
}
2816--4883[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.208.240" dst_port="2444" src_ip="130.7.64.40" src_port="110"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_798{
style=filled;
color=gray75;
2827[label="96.131.86.41;137pkt 137fpkt", shape=pentagon, color=darkviolet];
4889[label="96.131.86.41;137pkt 137fpkt", shape=invtriangle, color=brown];
stat798[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.131.86.41:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2827--4889[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter src_ip="96.131.86.41"/>
    </slice>
    <from sec="1068526810" usec="0"/>
    <to sec="1068527598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_799{
style=filled;
color=gray75;
2831[label="132.65.131.41;196pkt 196fpkt", shape=pentagon, color=darkviolet];
4891[label="132.65.131.41;196pkt 196fpkt", shape=invtriangle, color=brown];
stat799[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.65.131.41:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2831--4891[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="132.65.131.41" src_port="1027"/>
    </slice>
    <from sec="1068527094" usec="0"/>
    <to sec="1068527127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.30.114.43"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.49.194.44"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_803{
style=filled;
color=gray75;
2856[label="202.203.210.44;320pkt 320fpkt", shape=pentagon, color=darkviolet];
4911[label="202.203.210.44;320pkt 320fpkt", shape=invtriangle, color=brown];
stat803[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.203.210.44:0, *:0}[95.3125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.3125%)&lt;BR/&gt; 80: (2.34375%)&lt;BR/&gt; 64511: (0.15625%)&lt;BR/&gt; 63240: (0.15625%)&lt;BR/&gt; 62826: (0.15625%)&gt;];
}
2856--4911[label="1;320pkt 320fpkt"];
</description>
    <slice>
      <filter src_ip="202.203.210.44"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
2862[label="197.101.125.45;221pkt 221fpkt", shape=pentagon, color=darkviolet];
4916[label="197.101.125.45;220pkt 220fpkt", shape=invtriangle, color=brown];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.101.125.45:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2862--4916[label="1;220pkt 220fpkt"];
</description>
    <slice>
      <filter src_ip="197.101.125.45"/>
    </slice>
    <from sec="1068526817" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_805{
style=filled;
color=gray75;
2873[label="7.210.224.46;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4922[label="7.210.224.46;2pkt 2fpkt", shape=invtriangle, color=brown];
5985[label="7.210.224.46;2pkt 2fpkt", shape=invhouse, color=bisque];
stat805[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.210.224.46:21, 208.159.185.117:26962}[50%]&lt;BR/&gt;{7.210.224.46:21, 208.159.185.117:26991}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 26991: (25%)&lt;BR/&gt; 26962: (25%)&gt;];
}
2873--4922[label="1;2pkt 2fpkt"];
2873--5985[label="1;2pkt 2fpkt"];
4922--5985[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.159.185.117" dst_port="26991" src_ip="7.210.224.46" src_port="21"/>
      <filter dst_ip="208.159.185.117" dst_port="26962" src_ip="7.210.224.46" src_port="21"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_806{
style=filled;
color=gray75;
2882[label="212.30.113.48;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4926[label="212.30.113.48;7pkt 7fpkt", shape=invtriangle, color=brown];
5988[label="212.30.113.48;7pkt 7fpkt", shape=invhouse, color=bisque];
stat806[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.48:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 64349: (7.14286%)&lt;BR/&gt; 4805: (7.14286%)&lt;BR/&gt; 4687: (7.14286%)&lt;BR/&gt; 3581: (7.14286%)&gt;];
}
2882--4926[label="1;7pkt 7fpkt"];
2882--5988[label="1;7pkt 7fpkt"];
4926--5988[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="212.30.113.48" src_port="1863"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
2884[label="197.77.180.48;156pkt 156fpkt", shape=pentagon, color=darkviolet];
4927[label="197.77.180.48;156pkt 156fpkt", shape=invtriangle, color=brown];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.77.180.48:0, *:0}[95.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.5128%)&lt;BR/&gt; 80: (2.24359%)&lt;BR/&gt; 4233: (0.320513%)&lt;BR/&gt; 4122: (0.320513%)&lt;BR/&gt; 4110: (0.320513%)&gt;];
}
2884--4927[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter src_ip="197.77.180.48"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_808{
style=filled;
color=gray75;
2885[label="217.114.183.48;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4928[label="217.114.183.48;6pkt 6fpkt", shape=invtriangle, color=brown];
stat808[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.114.183.48:80, 136.93.203.123:*}[66.6667%]&lt;BR/&gt;{217.114.183.48:80, 136.93.203.125:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2858: (8.33333%)&lt;BR/&gt; 2857: (8.33333%)&lt;BR/&gt; 2853: (8.33333%)&lt;BR/&gt; 2852: (8.33333%)&gt;];
}
2885--4928[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.203.123" src_ip="217.114.183.48" src_port="80"/>
      <filter dst_ip="136.93.203.125" src_ip="217.114.183.48" src_port="80"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.163.185.48"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_810{
style=filled;
color=gray75;
2897[label="6.178.158.49;262pkt 262fpkt", shape=pentagon, color=darkviolet];
4932[label="6.178.158.49;261pkt 261fpkt", shape=invtriangle, color=brown];
5990[label="6.178.158.49;261pkt 261fpkt", shape=invhouse, color=bisque];
stat810[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.178.158.49:0, *:0}[94.6565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.6429%)&lt;BR/&gt; 80: (1.91327%)&lt;BR/&gt; 135: (0.765306%)&lt;BR/&gt; 60486: (0.191327%)&lt;BR/&gt; 58893: (0.191327%)&gt;];
}
2897--4932[label="1;261pkt 261fpkt"];
2897--5990[label="1;261pkt 261fpkt"];
4932--5990[label="1;261pkt 261fpkt"];
</description>
    <slice>
      <filter src_ip="6.178.158.49"/>
    </slice>
    <from sec="1068526810" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_811{
style=filled;
color=gray75;
2899[label="7.219.210.49;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4934[label="7.219.210.49;2pkt 2fpkt", shape=invtriangle, color=brown];
5991[label="7.219.210.49;2pkt 2fpkt", shape=invhouse, color=bisque];
stat811[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.219.210.49:80, 208.18.149.46:55249}[50%]&lt;BR/&gt;{7.219.210.49:80, 208.18.149.46:55267}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55267: (25%)&lt;BR/&gt; 55249: (25%)&gt;];
}
2899--4934[label="1;2pkt 2fpkt"];
2899--5991[label="1;2pkt 2fpkt"];
4934--5991[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.149.46" dst_port="55267" src_ip="7.219.210.49" src_port="80"/>
      <filter dst_ip="208.18.149.46" dst_port="55249" src_ip="7.219.210.49" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_812{
style=filled;
color=gray75;
2917[label="200.193.138.51;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4945[label="200.193.138.51;21pkt 21fpkt", shape=invtriangle, color=brown];
6000[label="200.193.138.51;22pkt 22fpkt", shape=invhouse, color=bisque];
stat812[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.193.138.51:443, 136.93.134.255:*}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (45.3846%)&lt;BR/&gt; 80: (4.61538%)&lt;BR/&gt; 60621: (2.30769%)&lt;BR/&gt; 60620: (2.30769%)&lt;BR/&gt; 2811: (2.30769%)&gt;];
}
2917--4945[label="1;21pkt 21fpkt"];
2917--6000[label="1;22pkt 22fpkt"];
4945--6000[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.134.255" src_ip="200.193.138.51" src_port="443"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.64.25.52"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_814{
style=filled;
color=gray75;
2923[label="212.30.114.52;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4949[label="212.30.114.52;1pkt 1fpkt", shape=invtriangle, color=brown];
stat814[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.114.52:80, 143.38.8.105:3018}[50%]&lt;BR/&gt;{212.30.114.52:80, 143.38.10.232:1169}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3018: (33.3333%)&lt;BR/&gt; 1169: (16.6667%)&gt;];
}
2923--4949[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.10.232" dst_port="1169" src_ip="212.30.114.52" src_port="80"/>
      <filter dst_ip="143.38.8.105" dst_port="3018" src_ip="212.30.114.52" src_port="80"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.110.98.55"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.197.147.55"/>
    </slice>
    <from sec="1068526808" usec="0"/>
    <to sec="1068527176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_817{
style=filled;
color=gray75;
570[label="146.153.11.52;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat817[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.229.209.55:80, 146.153.11.52:2535}[50%]&lt;BR/&gt;{221.229.209.107:80, 146.153.11.52:2536}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2536: (25%)&lt;BR/&gt; 2535: (25%)&gt;];
}
570--1277[label="0.5;1pkt 1fpkt"];
570--1621[label="0.5;1pkt 1fpkt"];
570--2141[label="0.5;1pkt 1fpkt"];
570--2956[label="0.5;1pkt 1fpkt"];
570--4969[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="146.153.11.52" dst_port="2536" src_ip="221.229.209.107" src_port="80"/>
      <filter dst_ip="146.153.11.52" dst_port="2535" src_ip="221.229.209.55" src_port="80"/>
    </slice>
    <from sec="1068526889" usec="0"/>
    <to sec="1068526957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.76.229.55"/>
    </slice>
    <from sec="1068527135" usec="0"/>
    <to sec="1068527691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.66.244.55"/>
    </slice>
    <from sec="1068527250" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_820{
style=filled;
color=gray75;
2959[label="4.56.251.55;155pkt 155fpkt", shape=pentagon, color=darkviolet];
4973[label="4.56.251.55;154pkt 154fpkt", shape=invtriangle, color=brown];
stat820[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.56.251.55:0, *:0}[92.9032%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.8803%)&lt;BR/&gt; 135: (2.26537%)&lt;BR/&gt; 80: (1.2945%)&lt;BR/&gt; 64612: (0.323625%)&lt;BR/&gt; 13444: (0.323625%)&gt;];
}
2959--4973[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter src_ip="4.56.251.55"/>
    </slice>
    <from sec="1068526815" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_821{
style=filled;
color=gray75;
2965[label="212.30.119.56;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4976[label="212.30.119.56;8pkt 8fpkt", shape=invtriangle, color=brown];
6011[label="212.30.119.56;8pkt 8fpkt", shape=invhouse, color=bisque];
stat821[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.119.56:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 32905: (6.25%)&lt;BR/&gt; 4209: (6.25%)&lt;BR/&gt; 3814: (6.25%)&lt;BR/&gt; 3787: (6.25%)&gt;];
}
2965--4976[label="1;8pkt 8fpkt"];
2965--6011[label="1;8pkt 8fpkt"];
4976--6011[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="212.30.119.56" src_port="1863"/>
    </slice>
    <from sec="1068526808" usec="0"/>
    <to sec="1068527694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_822{
style=filled;
color=gray75;
2689[label="200.90.162.29;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat822[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.90.162.29:80, 136.93.226.218:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2852: (6.25%)&lt;BR/&gt; 2851: (6.25%)&lt;BR/&gt; 2850: (6.25%)&lt;BR/&gt; 2849: (6.25%)&gt;];
}
2689--4812[label="1;8pkt 8fpkt"];
2689--5924[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.226.218" src_ip="200.90.162.29" src_port="80"/>
    </slice>
    <from sec="1068527104" usec="0"/>
    <to sec="1068527109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_823{
style=filled;
color=gray75;
2967[label="196.93.130.56;295pkt 295fpkt", shape=pentagon, color=darkviolet];
4978[label="196.93.130.56;295pkt 295fpkt", shape=invtriangle, color=brown];
stat823[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.93.130.56:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2967--4978[label="1;295pkt 295fpkt"];
</description>
    <slice>
      <filter src_ip="196.93.130.56"/>
    </slice>
    <from sec="1068526848" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_824{
style=filled;
color=gray75;
253[label="4.135.58.58;s;231pkt 231fpkt", shape=diamond, color=yellow];
381[label="17.87.58.13;s;522pkt 522fpkt", shape=diamond, color=yellow];
695[label="197.147.137.117;s;10pkt 10fpkt", shape=diamond, color=yellow];
715[label="199.152.107.163;s;78pkt 78fpkt", shape=diamond, color=yellow];
1028[label="212.30.162.246;s;103pkt 103fpkt", shape=diamond, color=yellow];
1359[label="7.210.224.2;s;90pkt 90fpkt", shape=diamond, color=yellow];
1635[label="4.135.58.58;s;231pkt 231fpkt", shape=hexagon, color=black];
1720[label="199.152.107.163;s;78pkt 78fpkt", shape=hexagon, color=black];
2088[label="17.87.58.13;s;522pkt 522fpkt", shape=hexagon, color=black];
stat824[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.87.58.13:80, 143.38.52.154:*}[50.4836%]&lt;BR/&gt;{4.135.58.58:80, 143.38.52.154:*}[22.3404%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43133: (0.080429%)&lt;BR/&gt; 41790: (0.080429%)&lt;BR/&gt; 61924: (0.0536193%)&lt;BR/&gt; 61877: (0.0536193%)&gt;];
}
253--1427[label="0.922078;213pkt 213fpkt"];
253--1635[label="1;231pkt 231fpkt"];
253--2245[label="0.727273;168pkt 168fpkt"];
253--2986[label="1;231pkt 231fpkt"];
253--4989[label="0.995671;230pkt 230fpkt"];
253--6017[label="1;231pkt 231fpkt"];
381--1427[label="1;522pkt 522fpkt"];
381--2088[label="1;522pkt 522fpkt"];
381--2245[label="0.911877;476pkt 476fpkt"];
695--1427[label="0.1;1pkt 1fpkt"];
695--2245[label="0.1;1pkt 1fpkt"];
715--1427[label="1;78pkt 78fpkt"];
715--1720[label="1;78pkt 78fpkt"];
715--2245[label="1;78pkt 78fpkt"];
715--3947[label="1;78pkt 78fpkt"];
1028--1087[label="0.0294118;2pkt 2fpkt"];
1028--1427[label="0.126214;13pkt 13fpkt"];
1028--1433[label="0.00970874;1pkt 1fpkt"];
1028--1463[label="0.0194175;2pkt 2fpkt"];
1028--1522[label="0.00970874;1pkt 1fpkt"];
1028--1839[label="0.300971;31pkt 31fpkt"];
1028--1896[label="1;67pkt 67fpkt"];
1028--2225[label="0.00970874;1pkt 1fpkt"];
1028--2245[label="0.116505;12pkt 12fpkt"];
1028--2304[label="0.00970874;1pkt 1fpkt"];
1359--1400[label="0.2;18pkt 18fpkt"];
1359--1427[label="0.0777778;7pkt 7fpkt"];
1359--1430[label="0.133333;12pkt 12fpkt"];
1359--1433[label="0.244444;22pkt 22fpkt"];
1359--1493[label="0.0111111;1pkt 1fpkt"];
1359--1879[label="0.037037;3pkt 3fpkt"];
1359--2193[label="0.0232558;1pkt 1fpkt"];
1359--2214[label="0.2;18pkt 18fpkt"];
1359--2225[label="0.244444;22pkt 22fpkt"];
1359--2245[label="0.0777778;7pkt 7fpkt"];
1359--2265[label="0.122222;11pkt 11fpkt"];
1359--2322[label="0.2;18pkt 18fpkt"];
1635--2245[label="0.727273;168pkt 168fpkt"];
1635--2986[label="1;231pkt 231fpkt"];
1635--4989[label="0.995671;230pkt 230fpkt"];
1635--6017[label="1;231pkt 231fpkt"];
1720--2245[label="1;78pkt 78fpkt"];
1720--3947[label="1;78pkt 78fpkt"];
2088--2245[label="0.911877;476pkt 476fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.52.154" src_ip="17.87.58.13" src_port="80"/>
      <filter dst_ip="143.38.52.154" src_ip="4.135.58.58" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12377,1.84878,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_825{
style=filled;
color=gray75;
52[label="192.97.89.58s;254pkt 254fpkt", shape=rectangle, color=red];
2987[label="192.97.89.58;254pkt 254fpkt", shape=pentagon, color=darkviolet];
4990[label="192.97.89.58;254pkt 254fpkt", shape=invtriangle, color=brown];
stat825[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.97.89.58:1042, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1042: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
52--151[label="0.559055;142pkt 142fpkt"];
52--198[label="0.559055;142pkt 142fpkt"];
52--2987[label="1;254pkt 254fpkt"];
52--4990[label="1;254pkt 254fpkt"];
2987--4990[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.97.89.58" src_port="1042"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068526819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_826{
style=filled;
color=gray75;
3021[label="192.205.46.62;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5008[label="192.205.46.62;10pkt 10fpkt", shape=invtriangle, color=brown];
stat826[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.205.46.62:80, 209.139.227.43:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37249: (5%)&lt;BR/&gt; 36853: (5%)&lt;BR/&gt; 36568: (5%)&lt;BR/&gt; 36482: (5%)&gt;];
}
3021--5008[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="209.139.227.43" src_ip="192.205.46.62" src_port="80"/>
    </slice>
    <from sec="1068527313" usec="0"/>
    <to sec="1068527621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_827{
style=filled;
color=gray75;
3025[label="212.30.113.62;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5009[label="212.30.113.62;2pkt 2fpkt", shape=invtriangle, color=brown];
stat827[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.62:1863, 143.38.15.144:4531}[50%]&lt;BR/&gt;{212.30.113.62:1863, 143.38.8.182:3530}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4531: (25%)&lt;BR/&gt; 3530: (25%)&gt;];
}
3025--5009[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.8.182" dst_port="3530" src_ip="212.30.113.62" src_port="1863"/>
      <filter dst_ip="143.38.15.144" dst_port="4531" src_ip="212.30.113.62" src_port="1863"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_828{
style=filled;
color=gray75;
3041[label="209.176.130.64;79pkt 79fpkt", shape=pentagon, color=darkviolet];
5016[label="209.176.130.64;78pkt 78fpkt", shape=invtriangle, color=brown];
6026[label="209.176.130.64;78pkt 78fpkt", shape=invhouse, color=bisque];
stat828[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.176.130.64:0, *:0}[96.2025%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.1702%)&lt;BR/&gt; 135: (1.2766%)&lt;BR/&gt; 4074: (0.638298%)&lt;BR/&gt; 3940: (0.638298%)&lt;BR/&gt; 2396: (0.638298%)&gt;];
}
3041--5016[label="1;78pkt 78fpkt"];
3041--6026[label="1;78pkt 78fpkt"];
5016--6026[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter src_ip="209.176.130.64"/>
    </slice>
    <from sec="1068526815" usec="0"/>
    <to sec="1068527691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_829{
style=filled;
color=gray75;
3045[label="170.84.244.64;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5019[label="170.84.244.64;2pkt 2fpkt", shape=invtriangle, color=brown];
6028[label="170.84.244.64;2pkt 2fpkt", shape=invhouse, color=bisque];
stat829[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.84.244.64:80, 208.31.228.42:2340}[50%]&lt;BR/&gt;{170.84.244.64:80, 208.31.228.42:2343}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2343: (25%)&lt;BR/&gt; 2340: (25%)&gt;];
}
3045--5019[label="1;2pkt 2fpkt"];
3045--6028[label="1;2pkt 2fpkt"];
5019--6028[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.42" dst_port="2343" src_ip="170.84.244.64" src_port="80"/>
      <filter dst_ip="208.31.228.42" dst_port="2340" src_ip="170.84.244.64" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_830{
style=filled;
color=gray75;
3047[label="96.241.4.65;103pkt 103fpkt", shape=pentagon, color=darkviolet];
5021[label="96.241.4.65;103pkt 103fpkt", shape=invtriangle, color=brown];
stat830[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.241.4.65:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3047--5021[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.241.4.65" src_port="1033"/>
    </slice>
    <from sec="1068527459" usec="0"/>
    <to sec="1068527477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_831{
style=filled;
color=gray75;
3058[label="96.184.45.66;114pkt 114fpkt", shape=pentagon, color=darkviolet];
5026[label="96.184.45.66;114pkt 114fpkt", shape=invtriangle, color=brown];
6031[label="96.184.45.66;114pkt 114fpkt", shape=invhouse, color=bisque];
stat831[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.184.45.66:0, *:0}[98.2456%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.2456%)&lt;BR/&gt; 80: (0.877193%)&lt;BR/&gt; 32910: (0.438596%)&lt;BR/&gt; 16595: (0.438596%)&gt;];
}
3058--5026[label="1;114pkt 114fpkt"];
3058--6031[label="1;114pkt 114fpkt"];
5026--6031[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter src_ip="96.184.45.66"/>
    </slice>
    <from sec="1068526831" usec="0"/>
    <to sec="1068527692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_832{
style=filled;
color=gray75;
3071[label="212.30.119.67;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5033[label="212.30.119.67;1pkt 1fpkt", shape=invtriangle, color=brown];
stat832[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.119.67:1863, 143.38.9.148:1041}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1041: (50%)&gt;];
}
3071--5033[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.9.148" dst_port="1041" src_ip="212.30.119.67" src_port="1863"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_833{
style=filled;
color=gray75;
3079[label="7.160.216.67;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5035[label="7.160.216.67;5pkt 5fpkt", shape=invtriangle, color=brown];
6033[label="7.160.216.67;5pkt 5fpkt", shape=invhouse, color=bisque];
stat833[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.160.216.67:80, 208.169.14.64:36968}[20%]&lt;BR/&gt;{7.160.216.67:80, 208.169.14.64:36976}[20%]&lt;BR/&gt;{7.160.216.67:80, 208.169.14.64:37043}[20%]&lt;BR/&gt;{7.160.216.67:80, 208.169.14.64:37180}[20%]&lt;BR/&gt;{7.160.216.67:80, 208.169.14.64:37182}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37182: (10%)&lt;BR/&gt; 37180: (10%)&lt;BR/&gt; 37043: (10%)&lt;BR/&gt; 36976: (10%)&gt;];
}
3079--5035[label="1;5pkt 5fpkt"];
3079--6033[label="1;5pkt 5fpkt"];
5035--6033[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="208.169.14.64" dst_port="37182" src_ip="7.160.216.67" src_port="80"/>
      <filter dst_ip="208.169.14.64" dst_port="37180" src_ip="7.160.216.67" src_port="80"/>
      <filter dst_ip="208.169.14.64" dst_port="37043" src_ip="7.160.216.67" src_port="80"/>
      <filter dst_ip="208.169.14.64" dst_port="36976" src_ip="7.160.216.67" src_port="80"/>
      <filter dst_ip="208.169.14.64" dst_port="36968" src_ip="7.160.216.67" src_port="80"/>
    </slice>
    <from sec="1068527633" usec="0"/>
    <to sec="1068527689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_834{
style=filled;
color=gray75;
3085[label="196.136.81.68;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5039[label="196.136.81.68;5pkt 5fpkt", shape=invtriangle, color=brown];
stat834[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.136.81.68:80, 143.38.8.69:1794}[20%]&lt;BR/&gt;{196.136.81.68:80, 146.246.220.203:12363}[20%]&lt;BR/&gt;{196.136.81.68:80, 136.93.226.241:1371}[20%]&lt;BR/&gt;{196.136.81.68:80, 143.38.8.21:1693}[20%]&lt;BR/&gt;{196.136.81.68:80, 143.38.8.21:1694}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 12363: (10%)&lt;BR/&gt; 1794: (10%)&lt;BR/&gt; 1694: (10%)&lt;BR/&gt; 1693: (10%)&gt;];
}
3085--5039[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.8.21" dst_port="1694" src_ip="196.136.81.68" src_port="80"/>
      <filter dst_ip="143.38.8.21" dst_port="1693" src_ip="196.136.81.68" src_port="80"/>
      <filter dst_ip="136.93.226.241" dst_port="1371" src_ip="196.136.81.68" src_port="80"/>
      <filter dst_ip="146.246.220.203" dst_port="12363" src_ip="196.136.81.68" src_port="80"/>
      <filter dst_ip="143.38.8.69" dst_port="1794" src_ip="196.136.81.68" src_port="80"/>
    </slice>
    <from sec="1068527008" usec="0"/>
    <to sec="1068527598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_835{
style=filled;
color=gray75;
3089[label="4.162.130.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5041[label="4.162.130.68;1pkt 1fpkt", shape=invtriangle, color=brown];
6035[label="4.162.130.68;1pkt 1fpkt", shape=invhouse, color=bisque];
stat835[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.162.130.68:80, 161.29.55.53:56954}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56954: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3089--5041[label="1;1pkt 1fpkt"];
3089--6035[label="1;1pkt 1fpkt"];
5041--6035[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.55.53" dst_port="56954" src_ip="4.162.130.68" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_836{
style=filled;
color=gray75;
3090[label="196.100.132.68;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5042[label="196.100.132.68;3pkt 3fpkt", shape=invtriangle, color=brown];
stat836[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.100.132.68:53, 208.18.22.141:2086}[33.3333%]&lt;BR/&gt;{196.100.132.68:80, 208.18.13.235:3065}[33.3333%]&lt;BR/&gt;{196.100.132.68:80, 208.18.13.235:3066}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 3066: (20%)&lt;BR/&gt; 3065: (20%)&lt;BR/&gt; 2086: (10%)&lt;BR/&gt; 53: (10%)&gt;];
}
3090--5042[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.13.235" dst_port="3066" src_ip="196.100.132.68" src_port="80"/>
      <filter dst_ip="208.18.13.235" dst_port="3065" src_ip="196.100.132.68" src_port="80"/>
      <filter dst_ip="208.18.22.141" dst_port="2086" src_ip="196.100.132.68" src_port="53"/>
    </slice>
    <from sec="1068527053" usec="0"/>
    <to sec="1068527077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_837{
style=filled;
color=gray75;
3094[label="7.166.216.68;137pkt 137fpkt", shape=pentagon, color=darkviolet];
5045[label="7.166.216.68;137pkt 137fpkt", shape=invtriangle, color=brown];
6036[label="7.166.216.68;137pkt 137fpkt", shape=invhouse, color=bisque];
stat837[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.166.216.68:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3094--5045[label="1;137pkt 137fpkt"];
3094--6036[label="1;137pkt 137fpkt"];
5045--6036[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="7.166.216.68" src_port="1025"/>
    </slice>
    <from sec="1068527303" usec="0"/>
    <to sec="1068527324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_838{
style=filled;
color=gray75;
3098[label="198.80.41.69;359pkt 359fpkt", shape=pentagon, color=darkviolet];
5048[label="198.80.41.69;358pkt 358fpkt", shape=invtriangle, color=brown];
6037[label="198.80.41.69;359pkt 359fpkt", shape=invhouse, color=bisque];
stat838[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.80.41.69:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3098--5048[label="1;358pkt 358fpkt"];
3098--6037[label="1;359pkt 359fpkt"];
5048--6037[label="1;358pkt 358fpkt"];
</description>
    <slice>
      <filter src_ip="198.80.41.69"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_839{
style=filled;
color=gray75;
3099[label="212.30.113.69;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5049[label="212.30.113.69;2pkt 2fpkt", shape=invtriangle, color=brown];
6038[label="212.30.113.69;2pkt 2fpkt", shape=invhouse, color=bisque];
stat839[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.69:1863, 143.38.11.86:3146}[33.3333%]&lt;BR/&gt;{212.30.113.69:1863, 143.38.216.107:3171}[33.3333%]&lt;BR/&gt;{212.30.113.69:1863, 143.38.14.170:1068}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3146: (21.4286%)&lt;BR/&gt; 1068: (21.4286%)&lt;BR/&gt; 3171: (7.14286%)&gt;];
}
3099--5049[label="1;2pkt 2fpkt"];
3099--6038[label="1;2pkt 2fpkt"];
5049--6038[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.14.170" dst_port="1068" src_ip="212.30.113.69" src_port="1863"/>
      <filter dst_ip="143.38.216.107" dst_port="3171" src_ip="212.30.113.69" src_port="1863"/>
      <filter dst_ip="143.38.11.86" dst_port="3146" src_ip="212.30.113.69" src_port="1863"/>
    </slice>
    <from sec="1068526840" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_840{
style=filled;
color=gray75;
3101[label="96.136.145.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5051[label="96.136.145.69;1pkt 1fpkt", shape=invtriangle, color=brown];
6039[label="96.136.145.69;1pkt 1fpkt", shape=invhouse, color=bisque];
stat840[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.136.145.69:0, 208.31.220.192:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3101--5051[label="1;1pkt 1fpkt"];
3101--6039[label="1;1pkt 1fpkt"];
5051--6039[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.220.192" src_ip="96.136.145.69"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_841{
style=filled;
color=gray75;
3103[label="4.41.196.69;89pkt 89fpkt", shape=pentagon, color=darkviolet];
5053[label="4.41.196.69;89pkt 89fpkt", shape=invtriangle, color=brown];
stat841[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.41.196.69:80, 136.93.226.213:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1655: (0.561798%)&lt;BR/&gt; 1654: (0.561798%)&lt;BR/&gt; 1653: (0.561798%)&lt;BR/&gt; 1652: (0.561798%)&gt;];
}
3103--5053[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.226.213" src_ip="4.41.196.69" src_port="80"/>
    </slice>
    <from sec="1068527375" usec="0"/>
    <to sec="1068527469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.116.33.70"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_843{
style=filled;
color=gray75;
3110[label="98.28.80.70;139pkt 139fpkt", shape=pentagon, color=darkviolet];
5056[label="98.28.80.70;139pkt 139fpkt", shape=invtriangle, color=brown];
stat843[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.28.80.70:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3110--5056[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter src_ip="98.28.80.70"/>
    </slice>
    <from sec="1068526940" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_844{
style=filled;
color=gray75;
3130[label="4.149.30.72;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5064[label="4.149.30.72;1pkt 1fpkt", shape=invtriangle, color=brown];
stat844[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.149.30.72:80, 143.38.52.154:63980}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63980: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3130--5064[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.52.154" dst_port="63980" src_ip="4.149.30.72" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.99.58.73"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.175.68.73"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_847{
style=filled;
color=gray75;
3143[label="213.169.141.73;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5069[label="213.169.141.73;4pkt 4fpkt", shape=invtriangle, color=brown];
6047[label="213.169.141.73;4pkt 4fpkt", shape=invhouse, color=bisque];
stat847[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.169.141.73:80, 208.31.228.65:29785}[25%]&lt;BR/&gt;{213.169.141.73:80, 208.31.228.65:29787}[25%]&lt;BR/&gt;{213.169.141.73:80, 208.31.228.65:29897}[25%]&lt;BR/&gt;{213.169.141.73:80, 208.31.228.65:29937}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29937: (12.5%)&lt;BR/&gt; 29897: (12.5%)&lt;BR/&gt; 29787: (12.5%)&lt;BR/&gt; 29785: (12.5%)&gt;];
}
3143--5069[label="1;4pkt 4fpkt"];
3143--6047[label="1;4pkt 4fpkt"];
5069--6047[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.65" dst_port="29937" src_ip="213.169.141.73" src_port="80"/>
      <filter dst_ip="208.31.228.65" dst_port="29897" src_ip="213.169.141.73" src_port="80"/>
      <filter dst_ip="208.31.228.65" dst_port="29787" src_ip="213.169.141.73" src_port="80"/>
      <filter dst_ip="208.31.228.65" dst_port="29785" src_ip="213.169.141.73" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_848{
style=filled;
color=gray75;
3149[label="96.186.7.74;144pkt 144fpkt", shape=pentagon, color=darkviolet];
5072[label="96.186.7.74;144pkt 144fpkt", shape=invtriangle, color=brown];
stat848[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.186.7.74:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3149--5072[label="1;144pkt 144fpkt"];
</description>
    <slice>
      <filter src_ip="96.186.7.74"/>
    </slice>
    <from sec="1068526811" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_849{
style=filled;
color=gray75;
3151[label="96.136.18.74;107pkt 107fpkt", shape=pentagon, color=darkviolet];
5073[label="96.136.18.74;107pkt 107fpkt", shape=invtriangle, color=brown];
6050[label="96.136.18.74;107pkt 107fpkt", shape=invhouse, color=bisque];
stat849[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.136.18.74:0, *:0}[96.2617%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.2617%)&lt;BR/&gt; 80: (1.86916%)&lt;BR/&gt; 55837: (0.46729%)&lt;BR/&gt; 55683: (0.46729%)&lt;BR/&gt; 55570: (0.46729%)&gt;];
}
3151--5073[label="1;107pkt 107fpkt"];
3151--6050[label="1;107pkt 107fpkt"];
5073--6050[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter src_ip="96.136.18.74"/>
    </slice>
    <from sec="1068526811" usec="0"/>
    <to sec="1068527692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_850{
style=filled;
color=gray75;
3152[label="146.153.78.74;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5074[label="146.153.78.74;2pkt 2fpkt", shape=invtriangle, color=brown];
stat850[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.78.74:1729, 212.30.113.82:1863}[33.3333%]&lt;BR/&gt;{146.153.78.74:1730, 212.30.113.92:1863}[33.3333%]&lt;BR/&gt;{146.153.78.74:1040, 212.30.118.95:1863}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1730: (20%)&lt;BR/&gt; 1729: (20%)&lt;BR/&gt; 1040: (10%)&gt;];
}
3152--5074[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.30.118.95" dst_port="1863" src_ip="146.153.78.74" src_port="1040"/>
      <filter dst_ip="212.30.113.92" dst_port="1863" src_ip="146.153.78.74" src_port="1730"/>
      <filter dst_ip="212.30.113.82" dst_port="1863" src_ip="146.153.78.74" src_port="1729"/>
    </slice>
    <from sec="1068526851" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_851{
style=filled;
color=gray75;
3154[label="196.93.145.74;149pkt 149fpkt", shape=pentagon, color=darkviolet];
5076[label="196.93.145.74;149pkt 149fpkt", shape=invtriangle, color=brown];
stat851[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.93.145.74:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3154--5076[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter src_ip="196.93.145.74"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
3160[label="202.153.89.75;243pkt 243fpkt", shape=pentagon, color=darkviolet];
5081[label="202.153.89.75;243pkt 243fpkt", shape=invtriangle, color=brown];
6053[label="202.153.89.75;242pkt 242fpkt", shape=invhouse, color=bisque];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.153.89.75:64190, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64190: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3160--5081[label="1;243pkt 243fpkt"];
3160--6053[label="1;242pkt 242fpkt"];
5081--6053[label="1;242pkt 242fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.153.89.75" src_port="64190"/>
    </slice>
    <from sec="1068527083" usec="0"/>
    <to sec="1068527122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_853{
style=filled;
color=gray75;
3162[label="208.18.148.75;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5083[label="208.18.148.75;27pkt 27fpkt", shape=invtriangle, color=brown];
6055[label="208.18.148.75;27pkt 27fpkt", shape=invhouse, color=bisque];
stat853[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.18.148.75:*, *:80}[55.5556%]&lt;BR/&gt;{208.18.148.75:*, *:443}[29.6296%]&lt;BR/&gt;{208.18.148.75:*, 7.219.236.22:*}[25.9259%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.7778%)&lt;BR/&gt; 443: (14.8148%)&lt;BR/&gt; 1863: (7.40741%)&lt;BR/&gt; 1630: (1.85185%)&lt;BR/&gt; 1622: (1.85185%)&gt;];
}
3162--5083[label="1;27pkt 27fpkt"];
3162--6055[label="1;27pkt 27fpkt"];
5083--6055[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="7.219.236.22" src_ip="208.18.148.75"/>
      <filter dst_port="80" src_ip="208.18.148.75"/>
      <filter dst_port="443" src_ip="208.18.148.75"/>
    </slice>
    <from sec="1068526988" usec="0"/>
    <to sec="1068527614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_854{
style=filled;
color=gray75;
3166[label="96.182.211.75;106pkt 106fpkt", shape=pentagon, color=darkviolet];
5085[label="96.182.211.75;106pkt 106fpkt", shape=invtriangle, color=brown];
stat854[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.182.211.75:0, *:0}[97.1698%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.1698%)&lt;BR/&gt; 80: (1.41509%)&lt;BR/&gt; 65029: (0.471698%)&lt;BR/&gt; 63463: (0.471698%)&lt;BR/&gt; 62983: (0.471698%)&gt;];
}
3166--5085[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter src_ip="96.182.211.75"/>
    </slice>
    <from sec="1068526809" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_855{
style=filled;
color=gray75;
3175[label="202.211.97.76;143pkt 143fpkt", shape=pentagon, color=darkviolet];
5090[label="202.211.97.76;142pkt 142fpkt", shape=invtriangle, color=brown];
stat855[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.211.97.76:63353, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63353: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3175--5090[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.211.97.76" src_port="63353"/>
    </slice>
    <from sec="1068527151" usec="0"/>
    <to sec="1068527174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_856{
style=filled;
color=gray75;
3180[label="202.209.184.76;148pkt 148fpkt", shape=pentagon, color=darkviolet];
5094[label="202.209.184.76;147pkt 147fpkt", shape=invtriangle, color=brown];
6059[label="202.209.184.76;148pkt 148fpkt", shape=invhouse, color=bisque];
stat856[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.209.184.76:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3180--5094[label="1;147pkt 147fpkt"];
3180--6059[label="1;148pkt 148fpkt"];
5094--6059[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter src_ip="202.209.184.76"/>
    </slice>
    <from sec="1068526827" usec="0"/>
    <to sec="1068527635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.216.197.76"/>
    </slice>
    <from sec="1068527583" usec="0"/>
    <to sec="1068527615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_858{
style=filled;
color=gray75;
3184[label="202.159.242.76;222pkt 222fpkt", shape=pentagon, color=darkviolet];
5096[label="202.159.242.76;222pkt 222fpkt", shape=invtriangle, color=brown];
stat858[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.159.242.76:0, *:0}[95.045%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.045%)&lt;BR/&gt; 80: (2.47748%)&lt;BR/&gt; 51446: (0.225225%)&lt;BR/&gt; 48518: (0.225225%)&lt;BR/&gt; 47623: (0.225225%)&gt;];
}
3184--5096[label="1;222pkt 222fpkt"];
</description>
    <slice>
      <filter src_ip="202.159.242.76"/>
    </slice>
    <from sec="1068526915" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
3187[label="96.181.93.77;237pkt 237fpkt", shape=pentagon, color=darkviolet];
5099[label="96.181.93.77;236pkt 236fpkt", shape=invtriangle, color=brown];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.181.93.77:49204, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49204: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3187--5099[label="1;236pkt 236fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.181.93.77" src_port="49204"/>
    </slice>
    <from sec="1068527589" usec="0"/>
    <to sec="1068527627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.6.104.78"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068526907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_862{
style=filled;
color=gray75;
3196[label="212.30.116.78;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5103[label="212.30.116.78;1pkt 1fpkt", shape=invtriangle, color=brown];
stat862[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.116.78:1863, 208.159.185.117:43956}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43956: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
3196--5103[label="1;1pkt 1fpkt"];
3196--6061[label="1;1pkt 1fpkt"];
5103--6061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.159.185.117" dst_port="43956" src_ip="212.30.116.78" src_port="1863"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.106.229.78"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.131.199.79"/>
    </slice>
    <from sec="1068527081" usec="0"/>
    <to sec="1068527683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_865{
style=filled;
color=gray75;
3212[label="193.26.235.79;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5110[label="193.26.235.79;21pkt 21fpkt", shape=invtriangle, color=brown];
stat865[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.26.235.79:80, 209.139.227.43:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36087: (2.38095%)&lt;BR/&gt; 36080: (2.38095%)&lt;BR/&gt; 36073: (2.38095%)&lt;BR/&gt; 36072: (2.38095%)&gt;];
}
3212--5110[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="209.139.227.43" src_ip="193.26.235.79" src_port="80"/>
    </slice>
    <from sec="1068527366" usec="0"/>
    <to sec="1068527455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_866{
style=filled;
color=gray75;
3216[label="202.209.119.80;192pkt 192fpkt", shape=pentagon, color=darkviolet];
5112[label="202.209.119.80;191pkt 191fpkt", shape=invtriangle, color=brown];
stat866[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.209.119.80:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3216--5112[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.209.119.80" src_port="1026"/>
    </slice>
    <from sec="1068527346" usec="0"/>
    <to sec="1068527376" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_867{
style=filled;
color=gray75;
3225[label="192.235.10.82;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5117[label="192.235.10.82;5pkt 5fpkt", shape=invtriangle, color=brown];
stat867[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.235.10.82:80, 218.185.104.219:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2870: (9.09091%)&lt;BR/&gt; 2869: (9.09091%)&lt;BR/&gt; 2867: (9.09091%)&lt;BR/&gt; 2866: (9.09091%)&gt;];
}
3225--5117[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="218.185.104.219" src_ip="192.235.10.82" src_port="80"/>
    </slice>
    <from sec="1068527442" usec="0"/>
    <to sec="1068527463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_868{
style=filled;
color=gray75;
3226[label="212.118.37.82;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5118[label="212.118.37.82;2pkt 2fpkt", shape=invtriangle, color=brown];
6070[label="212.118.37.82;2pkt 2fpkt", shape=invhouse, color=bisque];
stat868[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.118.37.82:80, 136.93.38.44:1294}[50%]&lt;BR/&gt;{212.118.37.82:80, 143.38.52.154:63962}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63962: (25%)&lt;BR/&gt; 1294: (25%)&gt;];
}
3226--5118[label="1;2pkt 2fpkt"];
3226--6070[label="1;2pkt 2fpkt"];
5118--6070[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.52.154" dst_port="63962" src_ip="212.118.37.82" src_port="80"/>
      <filter dst_ip="136.93.38.44" dst_port="1294" src_ip="212.118.37.82" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_869{
style=filled;
color=gray75;
3230[label="212.30.113.82;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5122[label="212.30.113.82;7pkt 7fpkt", shape=invtriangle, color=brown];
stat869[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.82:1863, 208.18.24.51:*}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3296: (7.14286%)&lt;BR/&gt; 3028: (7.14286%)&lt;BR/&gt; 3027: (7.14286%)&lt;BR/&gt; 3026: (7.14286%)&gt;];
}
3230--5122[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.24.51" src_ip="212.30.113.82" src_port="1863"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.116.152.82"/>
    </slice>
    <from sec="1068527388" usec="0"/>
    <to sec="1068527408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_871{
style=filled;
color=gray75;
3235[label="16.186.231.82;106pkt 106fpkt", shape=pentagon, color=darkviolet];
5125[label="16.186.231.82;106pkt 106fpkt", shape=invtriangle, color=brown];
6074[label="16.186.231.82;105pkt 105fpkt", shape=invhouse, color=bisque];
stat871[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.186.231.82:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3235--5125[label="1;106pkt 106fpkt"];
3235--6074[label="1;105pkt 105fpkt"];
5125--6074[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="16.186.231.82" src_port="1026"/>
    </slice>
    <from sec="1068527460" usec="0"/>
    <to sec="1068527477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_872{
style=filled;
color=gray75;
3238[label="196.148.32.83;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5127[label="196.148.32.83;11pkt 11fpkt", shape=invtriangle, color=brown];
6075[label="196.148.32.83;11pkt 11fpkt", shape=invhouse, color=bisque];
stat872[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.148.32.83:80, 136.93.203.30:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2506: (4.41176%)&lt;BR/&gt; 2500: (4.41176%)&lt;BR/&gt; 2499: (4.41176%)&lt;BR/&gt; 2498: (4.41176%)&gt;];
}
3238--5127[label="1;11pkt 11fpkt"];
3238--6075[label="1;11pkt 11fpkt"];
5127--6075[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.203.30" src_ip="196.148.32.83" src_port="80"/>
    </slice>
    <from sec="1068527629" usec="0"/>
    <to sec="1068527685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_873{
style=filled;
color=gray75;
3248[label="212.30.118.84;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5132[label="212.30.118.84;3pkt 3fpkt", shape=invtriangle, color=brown];
stat873[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.118.84:1863, 143.38.8.28:1196}[25%]&lt;BR/&gt;{212.30.118.84:1863, 208.18.144.78:1043}[25%]&lt;BR/&gt;{212.30.118.84:1863, 143.38.14.118:4597}[25%]&lt;BR/&gt;{212.30.118.84:1863, 143.38.154.144:3009}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4597: (14.2857%)&lt;BR/&gt; 3009: (14.2857%)&lt;BR/&gt; 1196: (14.2857%)&lt;BR/&gt; 1043: (7.14286%)&gt;];
}
3248--5132[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.154.144" dst_port="3009" src_ip="212.30.118.84" src_port="1863"/>
      <filter dst_ip="143.38.14.118" dst_port="4597" src_ip="212.30.118.84" src_port="1863"/>
      <filter dst_ip="208.18.144.78" dst_port="1043" src_ip="212.30.118.84" src_port="1863"/>
      <filter dst_ip="143.38.8.28" dst_port="1196" src_ip="212.30.118.84" src_port="1863"/>
    </slice>
    <from sec="1068526812" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_874{
style=filled;
color=gray75;
1198[label="7.219.223.140;s;81pkt 81fpkt", shape=diamond, color=yellow];
1341[label="4.162.153.84;s;60pkt 60fpkt", shape=diamond, color=yellow];
1349[label="136.93.101.151;d;35pkt 35fpkt", shape=diamond, color=yellow];
2184[label="136.93.101.151;d;35pkt 35fpkt", shape=hexagon, color=black];
3029[label="6.120.83.63;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3251[label="4.162.153.84;62pkt 62fpkt", shape=pentagon, color=darkviolet];
4126[label="212.30.119.184;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5012[label="6.120.83.63;5pkt 5fpkt", shape=invtriangle, color=brown];
5135[label="4.162.153.84;62pkt 62fpkt", shape=invtriangle, color=brown];
5400[label="7.219.223.140;94pkt 94fpkt", shape=invtriangle, color=brown];
stat874[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.219.223.140:80, *:*}[48.4694%]&lt;BR/&gt;{4.162.153.84:53, *:*}[31.6327%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.8322%)&lt;BR/&gt; 53: (22.7069%)&lt;BR/&gt; 0: (3.13199%)&lt;BR/&gt; 1024: (2.90828%)&lt;BR/&gt; 1863: (1.67785%)&gt;];
}
1198--1349[label="0.0285714;1pkt 1fpkt"];
1198--1411[label="0.375;21pkt 21fpkt"];
1198--1463[label="0.234568;19pkt 19fpkt"];
1198--1522[label="0.209877;17pkt 17fpkt"];
1198--2042[label="1;53pkt 53fpkt"];
1198--2184[label="0.0285714;1pkt 1fpkt"];
1198--2304[label="0.135802;11pkt 11fpkt"];
1198--3750[label="1;81pkt 81fpkt"];
1198--5400[label="0.987654;80pkt 80fpkt"];
1341--1349[label="0.0285714;1pkt 1fpkt"];
1341--1353[label="0.0166667;1pkt 1fpkt"];
1341--1383[label="0.0166667;1pkt 1fpkt"];
1341--1457[label="0.0333333;2pkt 2fpkt"];
1341--1466[label="0.0166667;1pkt 1fpkt"];
1341--1528[label="0.0166667;1pkt 1fpkt"];
1341--1687[label="0.0166667;1pkt 1fpkt"];
1341--1747[label="0.0166667;1pkt 1fpkt"];
1341--1748[label="0.0166667;1pkt 1fpkt"];
1341--1751[label="0.0166667;1pkt 1fpkt"];
1341--1773[label="0.0166667;1pkt 1fpkt"];
1341--1839[label="0.0333333;2pkt 2fpkt"];
1341--1867[label="0.0333333;2pkt 2fpkt"];
1341--1929[label="0.0166667;1pkt 1fpkt"];
1341--1935[label="0.0166667;1pkt 1fpkt"];
1341--1945[label="0.0166667;1pkt 1fpkt"];
1341--1987[label="0.0166667;1pkt 1fpkt"];
1341--2083[label="0.0166667;1pkt 1fpkt"];
1341--2128[label="0.0166667;1pkt 1fpkt"];
1341--2182[label="0.0166667;1pkt 1fpkt"];
1341--2184[label="0.0285714;1pkt 1fpkt"];
1341--2185[label="0.0166667;1pkt 1fpkt"];
1341--2189[label="0.05;3pkt 3fpkt"];
1341--2204[label="0.0166667;1pkt 1fpkt"];
1341--2326[label="0.0166667;1pkt 1fpkt"];
1341--2336[label="0.0333333;2pkt 2fpkt"];
1341--2341[label="0.0166667;1pkt 1fpkt"];
1341--3251[label="1;60pkt 60fpkt"];
1341--5135[label="1;60pkt 60fpkt"];
1349--2184[label="1;35pkt 35fpkt"];
1349--2359[label="0.0285714;1pkt 1fpkt"];
1349--2583[label="0.0285714;1pkt 1fpkt"];
1349--3029[label="1;6pkt 6fpkt"];
1349--3251[label="0.0285714;1pkt 1fpkt"];
1349--3650[label="0.142857;5pkt 5fpkt"];
1349--3750[label="0.0285714;1pkt 1fpkt"];
1349--4126[label="0.142857;1pkt 1fpkt"];
1349--4295[label="0.0285714;1pkt 1fpkt"];
1349--4399[label="0.0769231;1pkt 1fpkt"];
1349--4630[label="0.0285714;1pkt 1fpkt"];
1349--4753[label="0.0285714;1pkt 1fpkt"];
1349--5012[label="1;5pkt 5fpkt"];
1349--5135[label="0.0285714;1pkt 1fpkt"];
1349--5347[label="0.142857;5pkt 5fpkt"];
1349--5400[label="0.0285714;1pkt 1fpkt"];
1349--5685[label="0.0285714;1pkt 1fpkt"];
1349--5734[label="0.0833333;1pkt 1fpkt"];
1349--5904[label="0.0285714;1pkt 1fpkt"];
1349--6165[label="0.142857;5pkt 5fpkt"];
2184--2359[label="0.0285714;1pkt 1fpkt"];
2184--2583[label="0.0285714;1pkt 1fpkt"];
2184--3029[label="1;6pkt 6fpkt"];
2184--3251[label="0.0285714;1pkt 1fpkt"];
2184--3650[label="0.142857;5pkt 5fpkt"];
2184--3750[label="0.0285714;1pkt 1fpkt"];
2184--4126[label="0.142857;1pkt 1fpkt"];
2184--4295[label="0.0285714;1pkt 1fpkt"];
2184--4399[label="0.0769231;1pkt 1fpkt"];
2184--4630[label="0.0285714;1pkt 1fpkt"];
2184--4753[label="0.0285714;1pkt 1fpkt"];
2184--5012[label="1;5pkt 5fpkt"];
2184--5135[label="0.0285714;1pkt 1fpkt"];
2184--5347[label="0.142857;5pkt 5fpkt"];
2184--5400[label="0.0285714;1pkt 1fpkt"];
2184--5685[label="0.0285714;1pkt 1fpkt"];
2184--5734[label="0.0833333;1pkt 1fpkt"];
2184--5904[label="0.0285714;1pkt 1fpkt"];
2184--6165[label="0.142857;5pkt 5fpkt"];
3029--5012[label="1;5pkt 5fpkt"];
3251--5135[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter src_ip="7.219.223.140" src_port="80"/>
      <filter src_ip="4.162.153.84" src_port="53"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.30.214.84"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_876{
style=filled;
color=gray75;
3256[label="212.118.55.85;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5139[label="212.118.55.85;3pkt 3fpkt", shape=invtriangle, color=brown];
6081[label="212.118.55.85;3pkt 3fpkt", shape=invhouse, color=bisque];
stat876[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.118.55.85:80, 208.18.151.161:3244}[33.3333%]&lt;BR/&gt;{212.118.55.85:80, 208.18.151.161:3246}[33.3333%]&lt;BR/&gt;{212.118.55.85:80, 208.18.151.161:3266}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3266: (16.6667%)&lt;BR/&gt; 3246: (16.6667%)&lt;BR/&gt; 3244: (16.6667%)&gt;];
}
3256--5139[label="1;3pkt 3fpkt"];
3256--6081[label="1;3pkt 3fpkt"];
5139--6081[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.151.161" dst_port="3266" src_ip="212.118.55.85" src_port="80"/>
      <filter dst_ip="208.18.151.161" dst_port="3246" src_ip="212.118.55.85" src_port="80"/>
      <filter dst_ip="208.18.151.161" dst_port="3244" src_ip="212.118.55.85" src_port="80"/>
    </slice>
    <from sec="1068527614" usec="0"/>
    <to sec="1068527631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_877{
style=filled;
color=gray75;
3261[label="212.30.113.85;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5142[label="212.30.113.85;7pkt 7fpkt", shape=invtriangle, color=brown];
stat877[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.85:1863, 143.38.12.88:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3132: (7.14286%)&lt;BR/&gt; 3089: (7.14286%)&lt;BR/&gt; 3086: (7.14286%)&lt;BR/&gt; 1315: (7.14286%)&gt;];
}
3261--5142[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.12.88" src_ip="212.30.113.85" src_port="1863"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_878{
style=filled;
color=gray75;
3264[label="208.214.11.86;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5144[label="208.214.11.86;3pkt 3fpkt", shape=invtriangle, color=brown];
6083[label="208.214.11.86;2pkt 2fpkt", shape=invhouse, color=bisque];
stat878[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.214.11.86:0, 208.31.226.101:0}[33.3333%]&lt;BR/&gt;{208.214.11.86:0, 208.31.246.110:0}[33.3333%]&lt;BR/&gt;{208.214.11.86:0, 209.176.137.149:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3264--5144[label="1;2pkt 2fpkt"];
3264--6083[label="1;2pkt 2fpkt"];
5144--6083[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.176.137.149" src_ip="208.214.11.86"/>
      <filter dst_ip="208.31.246.110" src_ip="208.214.11.86"/>
      <filter dst_ip="208.31.226.101" src_ip="208.214.11.86"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_879{
style=filled;
color=gray75;
758[label="6.125.33.86;s;27pkt 27fpkt", shape=diamond, color=yellow];
1122[label="161.29.40.41;d;120pkt 120fpkt", shape=diamond, color=yellow];
1768[label="6.125.33.86;s;25pkt 25fpkt", shape=hexagon, color=black];
1942[label="208.244.130.99;s;19pkt 19fpkt", shape=hexagon, color=black];
2183[label="161.29.40.41;d;120pkt 120fpkt", shape=hexagon, color=black];
2737[label="217.36.142.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3063[label="16.45.226.66;69pkt 69fpkt", shape=pentagon, color=darkviolet];
4838[label="217.36.142.33;2pkt 2fpkt", shape=invtriangle, color=brown];
5029[label="16.45.226.66;69pkt 69fpkt", shape=invtriangle, color=brown];
5145[label="6.125.33.86;26pkt 26fpkt", shape=invtriangle, color=brown];
5942[label="217.36.142.33;1pkt 1fpkt", shape=invhouse, color=bisque];
stat879[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.45.226.66:*, 161.29.40.41:113}[22.5806%]&lt;BR/&gt;{16.45.226.66:6667, 161.29.40.41:*}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (27.6042%)&lt;BR/&gt; 113: (18.9583%)&lt;BR/&gt; 1906: (0.9375%)&lt;BR/&gt; 1860: (0.833333%)&lt;BR/&gt; 1959: (0.729167%)&gt;];
}
758--1122[label="0.444444;12pkt 12fpkt"];
758--1248[label="0.5;1pkt 1fpkt"];
758--1768[label="1;25pkt 25fpkt"];
758--2183[label="0.444444;12pkt 12fpkt"];
758--2327[label="0.0740741;2pkt 2fpkt"];
758--2342[label="0.0740741;2pkt 2fpkt"];
758--3266[label="1;27pkt 27fpkt"];
758--5145[label="1;26pkt 26fpkt"];
1122--1312[label="0.00833333;1pkt 1fpkt"];
1122--1749[label="0.714286;5pkt 5fpkt"];
1122--1768[label="0.4;10pkt 10fpkt"];
1122--1942[label="0.315789;6pkt 6fpkt"];
1122--1965[label="0.172414;5pkt 5fpkt"];
1122--2159[label="0.00833333;1pkt 1fpkt"];
1122--2183[label="1;120pkt 120fpkt"];
1122--2321[label="0.00833333;1pkt 1fpkt"];
1122--2737[label="0.5;1pkt 1fpkt"];
1122--3063[label="0.913043;63pkt 63fpkt"];
1122--3266[label="0.444444;12pkt 12fpkt"];
1122--3393[label="0.368421;7pkt 7fpkt"];
1122--3893[label="0.225806;7pkt 7fpkt"];
1122--4838[label="0.5;1pkt 1fpkt"];
1122--5029[label="0.913043;63pkt 63fpkt"];
1122--5145[label="0.461538;12pkt 12fpkt"];
1122--5213[label="0.368421;7pkt 7fpkt"];
1122--5472[label="0.225806;7pkt 7fpkt"];
1768--2183[label="0.4;10pkt 10fpkt"];
1768--2327[label="0.08;2pkt 2fpkt"];
1768--2342[label="0.08;2pkt 2fpkt"];
1768--3266[label="1;25pkt 25fpkt"];
1768--5145[label="0.96;24pkt 24fpkt"];
1942--2058[label="0.5;1pkt 1fpkt"];
1942--2183[label="0.315789;6pkt 6fpkt"];
1942--3393[label="0.947368;18pkt 18fpkt"];
1942--5213[label="0.947368;18pkt 18fpkt"];
2183--2321[label="0.00833333;1pkt 1fpkt"];
2183--2737[label="0.5;1pkt 1fpkt"];
2183--3063[label="0.913043;63pkt 63fpkt"];
2183--3266[label="0.444444;12pkt 12fpkt"];
2183--3393[label="0.368421;7pkt 7fpkt"];
2183--3893[label="0.225806;7pkt 7fpkt"];
2183--4838[label="0.5;1pkt 1fpkt"];
2183--5029[label="0.913043;63pkt 63fpkt"];
2183--5145[label="0.461538;12pkt 12fpkt"];
2183--5213[label="0.368421;7pkt 7fpkt"];
2183--5472[label="0.225806;7pkt 7fpkt"];
2737--4838[label="1;2pkt 2fpkt"];
2737--5942[label="1;1pkt 1fpkt"];
3063--5029[label="1;69pkt 69fpkt"];
4838--5942[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.40.41" src_ip="16.45.226.66" src_port="6667"/>
      <filter dst_ip="161.29.40.41" dst_port="113" src_ip="16.45.226.66"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_880{
style=filled;
color=gray75;
3267[label="200.4.64.86;115pkt 115fpkt", shape=pentagon, color=darkviolet];
5146[label="200.4.64.86;115pkt 115fpkt", shape=invtriangle, color=brown];
6084[label="200.4.64.86;114pkt 114fpkt", shape=invhouse, color=bisque];
stat880[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.4.64.86:0, *:0}[99.1304%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.1279%)&lt;BR/&gt; 2532: (0.436047%)&lt;BR/&gt; 135: (0.436047%)&gt;];
}
3267--5146[label="1;115pkt 115fpkt"];
3267--6084[label="1;114pkt 114fpkt"];
5146--6084[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter src_ip="200.4.64.86"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.210.191.86"/>
    </slice>
    <from sec="1068527232" usec="0"/>
    <to sec="1068527311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_882{
style=filled;
color=gray75;
3285[label="96.139.118.87;55pkt 55fpkt", shape=pentagon, color=darkviolet];
5156[label="96.139.118.87;55pkt 55fpkt", shape=invtriangle, color=brown];
stat882[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.139.118.87:0, *:0}[87.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (87.2727%)&lt;BR/&gt; 80: (6.36364%)&lt;BR/&gt; 51023: (0.909091%)&lt;BR/&gt; 51020: (0.909091%)&lt;BR/&gt; 51017: (0.909091%)&gt;];
}
3285--5156[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter src_ip="96.139.118.87"/>
    </slice>
    <from sec="1068527072" usec="0"/>
    <to sec="1068527614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_883{
style=filled;
color=gray75;
3293[label="6.21.16.88;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5157[label="6.21.16.88;3pkt 3fpkt", shape=invtriangle, color=brown];
stat883[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.21.16.88:80, 164.228.171.112:2996}[33.3333%]&lt;BR/&gt;{6.21.16.88:80, 164.228.171.112:2997}[33.3333%]&lt;BR/&gt;{6.21.16.88:80, 164.228.171.112:2998}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2998: (16.6667%)&lt;BR/&gt; 2997: (16.6667%)&lt;BR/&gt; 2996: (16.6667%)&gt;];
}
3293--5157[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="164.228.171.112" dst_port="2998" src_ip="6.21.16.88" src_port="80"/>
      <filter dst_ip="164.228.171.112" dst_port="2997" src_ip="6.21.16.88" src_port="80"/>
      <filter dst_ip="164.228.171.112" dst_port="2996" src_ip="6.21.16.88" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.98.70.88"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_885{
style=filled;
color=gray75;
3309[label="17.121.244.89;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5165[label="17.121.244.89;1pkt 1fpkt", shape=invtriangle, color=brown];
stat885[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.121.244.89:2961, 143.93.204.228:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2961: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
3309--5165[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.93.204.228" dst_port="445" src_ip="17.121.244.89" src_port="2961"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_886{
style=filled;
color=gray75;
3310[label="192.66.47.90;226pkt 226fpkt", shape=pentagon, color=darkviolet];
5166[label="192.66.47.90;226pkt 226fpkt", shape=invtriangle, color=brown];
stat886[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.66.47.90:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 60987: (0.221239%)&lt;BR/&gt; 60985: (0.221239%)&lt;BR/&gt; 60983: (0.221239%)&lt;BR/&gt; 60981: (0.221239%)&gt;];
}
3310--5166[label="1;226pkt 226fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="192.66.47.90"/>
    </slice>
    <from sec="1068527551" usec="0"/>
    <to sec="1068527587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_887{
style=filled;
color=gray75;
3315[label="7.178.85.90;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5169[label="7.178.85.90;1pkt 1fpkt", shape=invtriangle, color=brown];
6094[label="7.178.85.90;1pkt 1fpkt", shape=invhouse, color=bisque];
stat887[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.178.85.90:4008, 143.206.104.227:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4008: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
3315--5169[label="1;1pkt 1fpkt"];
3315--6094[label="1;1pkt 1fpkt"];
5169--6094[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.206.104.227" dst_port="445" src_ip="7.178.85.90" src_port="4008"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_888{
style=filled;
color=gray75;
3326[label="98.116.94.92;96pkt 96fpkt", shape=pentagon, color=darkviolet];
5174[label="98.116.94.92;95pkt 95fpkt", shape=invtriangle, color=brown];
6097[label="98.116.94.92;96pkt 96fpkt", shape=invhouse, color=bisque];
stat888[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.116.94.92:0, *:0}[90.625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (90.5923%)&lt;BR/&gt; 135: (2.61324%)&lt;BR/&gt; 80: (2.09059%)&lt;BR/&gt; 61036: (0.522648%)&lt;BR/&gt; 59605: (0.522648%)&gt;];
}
3326--5174[label="1;95pkt 95fpkt"];
3326--6097[label="1;96pkt 96fpkt"];
5174--6097[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter src_ip="98.116.94.92"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_889{
style=filled;
color=gray75;
3331[label="209.216.38.93;256pkt 256fpkt", shape=pentagon, color=darkviolet];
5177[label="209.216.38.93;255pkt 255fpkt", shape=invtriangle, color=brown];
stat889[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.216.38.93:0, *:0}[96.4844%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.4775%)&lt;BR/&gt; 80: (1.76125%)&lt;BR/&gt; 61193: (0.195695%)&lt;BR/&gt; 59618: (0.195695%)&lt;BR/&gt; 58002: (0.195695%)&gt;];
}
3331--5177[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter src_ip="209.216.38.93"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_890{
style=filled;
color=gray75;
3335[label="208.18.148.93;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5179[label="208.18.148.93;11pkt 11fpkt", shape=invtriangle, color=brown];
stat890[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.18.148.93:*, 7.210.224.2:80}[50%]&lt;BR/&gt;{208.18.148.93:*, 212.118.54.149:80}[25%]&lt;BR/&gt;{208.18.148.93:*, 200.152.25.164:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1253: (4.34783%)&lt;BR/&gt; 1251: (4.34783%)&lt;BR/&gt; 1249: (4.34783%)&lt;BR/&gt; 1246: (4.34783%)&gt;];
}
3335--5179[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="7.210.224.2" dst_port="80" src_ip="208.18.148.93"/>
      <filter dst_ip="200.152.25.164" dst_port="80" src_ip="208.18.148.93"/>
      <filter dst_ip="212.118.54.149" dst_port="80" src_ip="208.18.148.93"/>
    </slice>
    <from sec="1068527439" usec="0"/>
    <to sec="1068527512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_891{
style=filled;
color=gray75;
3343[label="86.106.59.95;44pkt 44fpkt", shape=pentagon, color=darkviolet];
5182[label="86.106.59.95;44pkt 44fpkt", shape=invtriangle, color=brown];
6101[label="86.106.59.95;43pkt 43fpkt", shape=invhouse, color=bisque];
stat891[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.106.59.95:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4889: (1.14504%)&lt;BR/&gt; 4855: (1.14504%)&lt;BR/&gt; 4843: (1.14504%)&lt;BR/&gt; 4791: (1.14504%)&gt;];
}
3343--5182[label="1;44pkt 44fpkt"];
3343--6101[label="1;43pkt 43fpkt"];
5182--6101[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="86.106.59.95"/>
    </slice>
    <from sec="1068526851" usec="0"/>
    <to sec="1068527676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_892{
style=filled;
color=gray75;
3353[label="197.100.31.96;281pkt 281fpkt", shape=pentagon, color=darkviolet];
5187[label="197.100.31.96;280pkt 280fpkt", shape=invtriangle, color=brown];
stat892[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.100.31.96:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3353--5187[label="1;280pkt 280fpkt"];
</description>
    <slice>
      <filter src_ip="197.100.31.96"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.837732,1.70559,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_893{
style=filled;
color=gray75;
1120[label="212.30.113.96;s;4pkt 4fpkt", shape=diamond, color=yellow];
3359[label="212.30.113.96;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5192[label="212.30.113.96;3pkt 3fpkt", shape=invtriangle, color=brown];
6105[label="212.30.113.96;4pkt 4fpkt", shape=invhouse, color=bisque];
stat893[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.96:1863, 143.38.9.2:3188}[25%]&lt;BR/&gt;{212.30.113.96:1863, 208.18.148.58:1131}[25%]&lt;BR/&gt;{212.30.113.96:1863, 143.38.11.173:1190}[25%]&lt;BR/&gt;{212.30.113.96:1863, 143.38.14.193:3177}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3188: (13.3333%)&lt;BR/&gt; 1190: (13.3333%)&lt;BR/&gt; 1131: (13.3333%)&lt;BR/&gt; 3177: (10%)&gt;];
}
1120--3359[label="1;4pkt 4fpkt"];
1120--5192[label="1;3pkt 3fpkt"];
1120--6105[label="1;4pkt 4fpkt"];
3359--5192[label="1;3pkt 3fpkt"];
3359--6105[label="1;4pkt 4fpkt"];
5192--6105[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.14.193" dst_port="3177" src_ip="212.30.113.96" src_port="1863"/>
      <filter dst_ip="143.38.11.173" dst_port="1190" src_ip="212.30.113.96" src_port="1863"/>
      <filter dst_ip="208.18.148.58" dst_port="1131" src_ip="212.30.113.96" src_port="1863"/>
      <filter dst_ip="143.38.9.2" dst_port="3188" src_ip="212.30.113.96" src_port="1863"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_894{
style=filled;
color=gray75;
3376[label="198.90.72.98;179pkt 179fpkt", shape=pentagon, color=darkviolet];
5202[label="198.90.72.98;179pkt 179fpkt", shape=invtriangle, color=brown];
stat894[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.90.72.98:0, *:0}[92.7374%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.7374%)&lt;BR/&gt; 80: (2.7933%)&lt;BR/&gt; 135: (0.837989%)&lt;BR/&gt; 55169: (0.27933%)&lt;BR/&gt; 51423: (0.27933%)&gt;];
}
3376--5202[label="1;179pkt 179fpkt"];
</description>
    <slice>
      <filter src_ip="198.90.72.98"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_895{
style=filled;
color=gray75;
3377[label="212.30.113.98;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5203[label="212.30.113.98;6pkt 6fpkt", shape=invtriangle, color=brown];
6110[label="212.30.113.98;7pkt 7fpkt", shape=invhouse, color=bisque];
stat895[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.98:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3256: (7.5%)&lt;BR/&gt; 3097: (7.5%)&lt;BR/&gt; 2552: (7.5%)&lt;BR/&gt; 1359: (7.5%)&gt;];
}
3377--5203[label="1;6pkt 6fpkt"];
3377--6110[label="1;7pkt 7fpkt"];
5203--6110[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="212.30.113.98" src_port="1863"/>
    </slice>
    <from sec="1068526819" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_896{
style=filled;
color=gray75;
3380[label="209.176.131.98;142pkt 142fpkt", shape=pentagon, color=darkviolet];
5205[label="209.176.131.98;141pkt 141fpkt", shape=invtriangle, color=brown];
stat896[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.176.131.98:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3380--5205[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter src_ip="209.176.131.98"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_897{
style=filled;
color=gray75;
3382[label="96.156.146.98;257pkt 257fpkt", shape=pentagon, color=darkviolet];
5207[label="96.156.146.98;257pkt 257fpkt", shape=invtriangle, color=brown];
stat897[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.156.146.98:0, *:0}[98.0545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.0545%)&lt;BR/&gt; 80: (0.972763%)&lt;BR/&gt; 33680: (0.194553%)&lt;BR/&gt; 28166: (0.194553%)&lt;BR/&gt; 25549: (0.194553%)&gt;];
}
3382--5207[label="1;257pkt 257fpkt"];
</description>
    <slice>
      <filter src_ip="96.156.146.98"/>
    </slice>
    <from sec="1068526815" usec="0"/>
    <to sec="1068527682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_898{
style=filled;
color=gray75;
3397[label="202.166.220.99;142pkt 142fpkt", shape=pentagon, color=darkviolet];
5215[label="202.166.220.99;142pkt 142fpkt", shape=invtriangle, color=brown];
6115[label="202.166.220.99;141pkt 141fpkt", shape=invhouse, color=bisque];
stat898[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.166.220.99:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3397--5215[label="1;142pkt 142fpkt"];
3397--6115[label="1;141pkt 141fpkt"];
5215--6115[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter src_ip="202.166.220.99"/>
    </slice>
    <from sec="1068526834" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_899{
style=filled;
color=gray75;
3398[label="197.102.234.99;252pkt 252fpkt", shape=pentagon, color=darkviolet];
5216[label="197.102.234.99;251pkt 251fpkt", shape=invtriangle, color=brown];
6116[label="197.102.234.99;252pkt 252fpkt", shape=invhouse, color=bisque];
stat899[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.102.234.99:1095, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1095: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3398--5216[label="1;251pkt 251fpkt"];
3398--6116[label="1;252pkt 252fpkt"];
5216--6116[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.102.234.99" src_port="1095"/>
    </slice>
    <from sec="1068527142" usec="0"/>
    <to sec="1068527160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_900{
style=filled;
color=gray75;
3409[label="202.133.242.100;126pkt 126fpkt", shape=pentagon, color=darkviolet];
5224[label="202.133.242.100;125pkt 125fpkt", shape=invtriangle, color=brown];
stat900[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.133.242.100:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3409--5224[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter src_ip="202.133.242.100"/>
    </slice>
    <from sec="1068527053" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_901{
style=filled;
color=gray75;
719[label="209.176.134.101;s;596pkt 596fpkt", shape=diamond, color=yellow];
890[label="146.153.145.176;s;29pkt 29fpkt", shape=diamond, color=yellow];
891[label="4.41.179.177;d;27pkt 27fpkt", shape=diamond, color=yellow];
1834[label="209.176.134.101;s;529pkt 529fpkt", shape=hexagon, color=black];
2123[label="146.153.145.176;s;24pkt 24fpkt", shape=hexagon, color=black];
3414[label="209.176.134.101;631pkt 631fpkt", shape=pentagon, color=darkviolet];
4051[label="146.153.145.176;32pkt 32fpkt", shape=pentagon, color=darkviolet];
5227[label="209.176.134.101;631pkt 631fpkt", shape=invtriangle, color=brown];
stat901[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.176.134.101:53, *:*}[93.5241%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (56.1625%)&lt;BR/&gt; 80: (2.12085%)&lt;BR/&gt; 32769: (1.44058%)&lt;BR/&gt; 32768: (1.42057%)&lt;BR/&gt; 9253: (1.30052%)&gt;];
}
719--891[label="0.037037;1pkt 1fpkt"];
719--1834[label="1;529pkt 529fpkt"];
719--2326[label="0.0184564;11pkt 11fpkt"];
719--2336[label="0.0201342;12pkt 12fpkt"];
719--2341[label="0.0184564;11pkt 11fpkt"];
719--3414[label="0.998322;595pkt 595fpkt"];
719--5227[label="0.998322;595pkt 595fpkt"];
890--891[label="0.962963;26pkt 26fpkt"];
890--2123[label="1;24pkt 24fpkt"];
890--4051[label="1;29pkt 29fpkt"];
891--1834[label="0.037037;1pkt 1fpkt"];
891--2123[label="0.916667;22pkt 22fpkt"];
891--3414[label="0.037037;1pkt 1fpkt"];
891--4051[label="0.962963;26pkt 26fpkt"];
891--5227[label="0.037037;1pkt 1fpkt"];
1834--2326[label="0.020794;11pkt 11fpkt"];
1834--2336[label="0.0151229;8pkt 8fpkt"];
1834--2341[label="0.020794;11pkt 11fpkt"];
1834--3414[label="0.99811;528pkt 528fpkt"];
1834--5227[label="0.99811;528pkt 528fpkt"];
2123--4051[label="1;24pkt 24fpkt"];
3414--5227[label="1;631pkt 631fpkt"];
</description>
    <slice>
      <filter src_ip="209.176.134.101" src_port="53"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_902{
style=filled;
color=gray75;
672[label="208.16.160.35;s;41pkt 41fpkt", shape=diamond, color=yellow];
1213[label="208.18.148.86;d;120pkt 120fpkt", shape=diamond, color=yellow];
1309[label="16.47.77.193;s;2pkt 2fpkt", shape=diamond, color=yellow];
1405[label="99.192.185.81;s;2pkt 2fpkt", shape=diamond, color=yellow];
2173[label="208.18.148.86;d;120pkt 120fpkt", shape=hexagon, color=black];
2213[label="16.47.77.193;s;2pkt 2fpkt", shape=hexagon, color=black];
3222[label="99.192.185.81;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5115[label="99.192.185.81;1pkt 1fpkt", shape=invtriangle, color=brown];
6069[label="99.192.185.81;1pkt 1fpkt", shape=invhouse, color=bisque];
stat902[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 208.18.148.86:0}[39.7516%]&lt;BR/&gt;{208.16.160.35:80, *:*}[25.4658%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (43.9863%)&lt;BR/&gt; 80: (23.8832%)&lt;BR/&gt; 135: (4.12371%)&lt;BR/&gt; 1802: (1.03093%)&lt;BR/&gt; 1799: (0.687285%)&gt;];
}
672--1433[label="0.097561;4pkt 4fpkt"];
672--1463[label="0.0487805;2pkt 2fpkt"];
672--1522[label="0.0731707;3pkt 3fpkt"];
672--2151[label="1;41pkt 41fpkt"];
672--2225[label="0.097561;4pkt 4fpkt"];
672--2304[label="0.0731707;3pkt 3fpkt"];
672--2763[label="1;41pkt 41fpkt"];
1213--1309[label="1;2pkt 2fpkt"];
1213--1405[label="1;2pkt 2fpkt"];
1213--1958[label="0.021978;2pkt 2fpkt"];
1213--2039[label="0.00833333;1pkt 1fpkt"];
1213--2173[label="1;120pkt 120fpkt"];
1213--2213[label="1;2pkt 2fpkt"];
1213--2327[label="0.0333333;4pkt 4fpkt"];
1213--2337[label="0.0166667;2pkt 2fpkt"];
1213--2342[label="0.0333333;4pkt 4fpkt"];
1213--2779[label="0.0166667;2pkt 2fpkt"];
1213--3222[label="1;2pkt 2fpkt"];
1213--3239[label="0.075;3pkt 3fpkt"];
1213--3435[label="0.0166667;2pkt 2fpkt"];
1213--3537[label="0.00840336;1pkt 1fpkt"];
1213--3780[label="0.00833333;1pkt 1fpkt"];
1213--4131[label="0.2;1pkt 1fpkt"];
1213--4573[label="0.0357143;2pkt 2fpkt"];
1213--5115[label="1;1pkt 1fpkt"];
1213--5238[label="0.0166667;2pkt 2fpkt"];
1213--5416[label="0.00833333;1pkt 1fpkt"];
1213--5820[label="0.0363636;2pkt 2fpkt"];
1213--6069[label="1;1pkt 1fpkt"];
1213--6199[label="0.00833333;1pkt 1fpkt"];
1213--6373[label="0.0363636;2pkt 2fpkt"];
1309--2173[label="1;2pkt 2fpkt"];
1309--2213[label="1;2pkt 2fpkt"];
1405--2173[label="1;2pkt 2fpkt"];
1405--3222[label="1;2pkt 2fpkt"];
1405--5115[label="1;1pkt 1fpkt"];
1405--6069[label="1;1pkt 1fpkt"];
2173--2213[label="1;2pkt 2fpkt"];
2173--2327[label="0.0333333;4pkt 4fpkt"];
2173--2337[label="0.0166667;2pkt 2fpkt"];
2173--2342[label="0.0333333;4pkt 4fpkt"];
2173--2779[label="0.0166667;2pkt 2fpkt"];
2173--3222[label="1;2pkt 2fpkt"];
2173--3239[label="0.075;3pkt 3fpkt"];
2173--3435[label="0.0166667;2pkt 2fpkt"];
2173--3537[label="0.00840336;1pkt 1fpkt"];
2173--3780[label="0.00833333;1pkt 1fpkt"];
2173--4131[label="0.2;1pkt 1fpkt"];
2173--4573[label="0.0357143;2pkt 2fpkt"];
2173--5115[label="1;1pkt 1fpkt"];
2173--5238[label="0.0166667;2pkt 2fpkt"];
2173--5416[label="0.00833333;1pkt 1fpkt"];
2173--5820[label="0.0363636;2pkt 2fpkt"];
2173--6069[label="1;1pkt 1fpkt"];
2173--6199[label="0.00833333;1pkt 1fpkt"];
2173--6373[label="0.0363636;2pkt 2fpkt"];
3222--5115[label="1;1pkt 1fpkt"];
3222--6069[label="1;1pkt 1fpkt"];
5115--6069[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="208.16.160.35" src_port="80"/>
      <filter dst_ip="208.18.148.86"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_903{
style=filled;
color=gray75;
3444[label="200.42.157.104;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5242[label="200.42.157.104;3pkt 3fpkt", shape=invtriangle, color=brown];
6122[label="200.42.157.104;3pkt 3fpkt", shape=invhouse, color=bisque];
stat903[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.42.157.104:80, 161.29.54.126:3685}[33.3333%]&lt;BR/&gt;{200.42.157.104:80, 161.29.54.127:3377}[33.3333%]&lt;BR/&gt;{200.42.157.104:80, 161.29.54.127:3378}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3685: (16.6667%)&lt;BR/&gt; 3378: (16.6667%)&lt;BR/&gt; 3377: (16.6667%)&gt;];
}
3444--5242[label="1;3pkt 3fpkt"];
3444--6122[label="1;3pkt 3fpkt"];
5242--6122[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.54.127" dst_port="3378" src_ip="200.42.157.104" src_port="80"/>
      <filter dst_ip="161.29.54.127" dst_port="3377" src_ip="200.42.157.104" src_port="80"/>
      <filter dst_ip="161.29.54.126" dst_port="3685" src_ip="200.42.157.104" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_904{
style=filled;
color=gray75;
3451[label="96.130.138.105;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5244[label="96.130.138.105;21pkt 21fpkt", shape=invtriangle, color=brown];
stat904[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.130.138.105:80, 136.93.244.199:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2356: (2.38095%)&lt;BR/&gt; 2355: (2.38095%)&lt;BR/&gt; 2354: (2.38095%)&lt;BR/&gt; 2351: (2.38095%)&gt;];
}
3451--5244[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.244.199" src_ip="96.130.138.105" src_port="80"/>
    </slice>
    <from sec="1068527675" usec="0"/>
    <to sec="1068527683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_905{
style=filled;
color=gray75;
3467[label="197.97.241.106;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5252[label="197.97.241.106;2pkt 2fpkt", shape=invtriangle, color=brown];
6125[label="197.97.241.106;2pkt 2fpkt", shape=invhouse, color=bisque];
stat905[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.97.241.106:40449, 136.93.202.2:8888}[50%]&lt;BR/&gt;{197.97.241.106:40451, 136.93.202.2:8888}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (50%)&lt;BR/&gt; 40451: (25%)&lt;BR/&gt; 40449: (25%)&gt;];
}
3467--5252[label="1;2pkt 2fpkt"];
3467--6125[label="1;2pkt 2fpkt"];
5252--6125[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.202.2" dst_port="8888" src_ip="197.97.241.106" src_port="40451"/>
      <filter dst_ip="136.93.202.2" dst_port="8888" src_ip="197.97.241.106" src_port="40449"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_906{
style=filled;
color=gray75;
3471[label="203.100.43.107;156pkt 156fpkt", shape=pentagon, color=darkviolet];
5254[label="203.100.43.107;156pkt 156fpkt", shape=invtriangle, color=brown];
6126[label="203.100.43.107;156pkt 156fpkt", shape=invhouse, color=bisque];
stat906[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.100.43.107:0, *:0}[94.8718%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.8718%)&lt;BR/&gt; 80: (2.5641%)&lt;BR/&gt; 4794: (0.320513%)&lt;BR/&gt; 4770: (0.320513%)&lt;BR/&gt; 4520: (0.320513%)&gt;];
}
3471--5254[label="1;156pkt 156fpkt"];
3471--6126[label="1;156pkt 156fpkt"];
5254--6126[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter src_ip="203.100.43.107"/>
    </slice>
    <from sec="1068526928" usec="0"/>
    <to sec="1068527692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_907{
style=filled;
color=gray75;
3475[label="212.30.118.107;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5255[label="212.30.118.107;6pkt 6fpkt", shape=invtriangle, color=brown];
6127[label="212.30.118.107;6pkt 6fpkt", shape=invhouse, color=bisque];
stat907[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.118.107:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 22807: (8.33333%)&lt;BR/&gt; 3582: (8.33333%)&lt;BR/&gt; 3007: (8.33333%)&lt;BR/&gt; 1359: (8.33333%)&gt;];
}
3475--5255[label="1;6pkt 6fpkt"];
3475--6127[label="1;6pkt 6fpkt"];
5255--6127[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="212.30.118.107" src_port="1863"/>
    </slice>
    <from sec="1068526810" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_908{
style=filled;
color=gray75;
3478[label="221.229.209.107;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5256[label="221.229.209.107;1pkt 1fpkt", shape=invtriangle, color=brown];
6128[label="221.229.209.107;1pkt 1fpkt", shape=invhouse, color=bisque];
stat908[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.229.209.107:80, 209.176.132.201:3617}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3617: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3478--5256[label="1;1pkt 1fpkt"];
3478--6128[label="1;1pkt 1fpkt"];
5256--6128[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.176.132.201" dst_port="3617" src_ip="221.229.209.107" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_909{
style=filled;
color=gray75;
871[label="143.134.45.153;d;115pkt 115fpkt", shape=diamond, color=yellow];
stat909[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 143.134.45.153:53}[78.2609%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (83.4783%)&lt;BR/&gt; 0: (10.4348%)&lt;BR/&gt; 57420: (0.434783%)&lt;BR/&gt; 54127: (0.434783%)&lt;BR/&gt; 48311: (0.434783%)&gt;];
}
871--1332[label="0.0188679;1pkt 1fpkt"];
871--2103[label="1;113pkt 113fpkt"];
871--2308[label="1;113pkt 113fpkt"];
871--2326[label="0.0608696;7pkt 7fpkt"];
871--2336[label="0.0608696;7pkt 7fpkt"];
871--2341[label="0.0608696;7pkt 7fpkt"];
871--2454[label="0.0344828;1pkt 1fpkt"];
871--2994[label="0.047619;1pkt 1fpkt"];
871--3351[label="0.0322581;1pkt 1fpkt"];
871--3481[label="0.0175439;1pkt 1fpkt"];
871--3551[label="0.0285714;1pkt 1fpkt"];
871--3688[label="0.0277778;1pkt 1fpkt"];
871--4255[label="0.00869565;1pkt 1fpkt"];
871--4295[label="0.0140845;1pkt 1fpkt"];
871--4305[label="0.025;1pkt 1fpkt"];
871--5259[label="0.0178571;1pkt 1fpkt"];
871--5298[label="0.0294118;1pkt 1fpkt"];
871--5370[label="0.0277778;1pkt 1fpkt"];
871--5685[label="0.0142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.134.45.153" dst_port="53" src_port="53"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_910{
style=filled;
color=gray75;
3487[label="219.140.184.108;146pkt 146fpkt", shape=pentagon, color=darkviolet];
5262[label="219.140.184.108;146pkt 146fpkt", shape=invtriangle, color=brown];
6131[label="219.140.184.108;146pkt 146fpkt", shape=invhouse, color=bisque];
stat910[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.140.184.108:0, *:0}[98.6301%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.6301%)&lt;BR/&gt; 80: (0.684932%)&lt;BR/&gt; 64984: (0.342466%)&lt;BR/&gt; 63128: (0.342466%)&gt;];
}
3487--5262[label="1;146pkt 146fpkt"];
3487--6131[label="1;146pkt 146fpkt"];
5262--6131[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter src_ip="219.140.184.108"/>
    </slice>
    <from sec="1068526816" usec="0"/>
    <to sec="1068527618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_911{
style=filled;
color=gray75;
3491[label="212.30.118.109;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5263[label="212.30.118.109;3pkt 3fpkt", shape=invtriangle, color=brown];
stat911[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.118.109:1863, 164.228.227.58:1039}[33.3333%]&lt;BR/&gt;{212.30.118.109:1863, 209.176.132.80:2948}[33.3333%]&lt;BR/&gt;{212.30.118.109:1863, 136.93.64.241:4883}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4883: (16.6667%)&lt;BR/&gt; 2948: (16.6667%)&lt;BR/&gt; 1039: (16.6667%)&gt;];
}
3491--5263[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.64.241" dst_port="4883" src_ip="212.30.118.109" src_port="1863"/>
      <filter dst_ip="209.176.132.80" dst_port="2948" src_ip="212.30.118.109" src_port="1863"/>
      <filter dst_ip="164.228.227.58" dst_port="1039" src_ip="212.30.118.109" src_port="1863"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_912{
style=filled;
color=gray75;
3492[label="167.75.134.109;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5264[label="167.75.134.109;3pkt 3fpkt", shape=invtriangle, color=brown];
stat912[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.75.134.109:3325, 209.176.128.106:80}[25%]&lt;BR/&gt;{167.75.134.109:3326, 209.176.128.106:80}[25%]&lt;BR/&gt;{167.75.134.109:3467, 209.176.128.106:80}[25%]&lt;BR/&gt;{167.75.134.109:3732, 209.176.128.106:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3732: (14.2857%)&lt;BR/&gt; 3467: (14.2857%)&lt;BR/&gt; 3326: (14.2857%)&lt;BR/&gt; 3325: (7.14286%)&gt;];
}
3492--5264[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="209.176.128.106" dst_port="80" src_ip="167.75.134.109" src_port="3732"/>
      <filter dst_ip="209.176.128.106" dst_port="80" src_ip="167.75.134.109" src_port="3467"/>
      <filter dst_ip="209.176.128.106" dst_port="80" src_ip="167.75.134.109" src_port="3326"/>
      <filter dst_ip="209.176.128.106" dst_port="80" src_ip="167.75.134.109" src_port="3325"/>
    </slice>
    <from sec="1068527429" usec="0"/>
    <to sec="1068527467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_913{
style=filled;
color=gray75;
3502[label="197.19.146.111;145pkt 145fpkt", shape=pentagon, color=darkviolet];
5269[label="197.19.146.111;145pkt 145fpkt", shape=invtriangle, color=brown];
stat913[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.19.146.111:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3502--5269[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter src_ip="197.19.146.111"/>
    </slice>
    <from sec="1068526836" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_914{
style=filled;
color=gray75;
941[label="10.151.91.112;s;8072pkt 8072fpkt", shape=diamond, color=yellow];
3509[label="10.151.91.112;8072pkt 8072fpkt", shape=pentagon, color=darkviolet];
5272[label="10.151.91.112;8071pkt 8071fpkt", shape=invtriangle, color=brown];
stat914[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.151.91.112:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
941--3509[label="1;8072pkt 8072fpkt"];
941--5272[label="1;8071pkt 8071fpkt"];
3509--5272[label="1;8071pkt 8071fpkt"];
</description>
    <slice>
      <filter src_ip="10.151.91.112"/>
    </slice>
    <from sec="1068527163" usec="0"/>
    <to sec="1068527505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_915{
style=filled;
color=gray75;
3510[label="212.30.118.112;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5273[label="212.30.118.112;5pkt 5fpkt", shape=invtriangle, color=brown];
stat915[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.118.112:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4163: (9.09091%)&lt;BR/&gt; 1587: (9.09091%)&lt;BR/&gt; 1086: (9.09091%)&lt;BR/&gt; 1034: (9.09091%)&gt;];
}
3510--5273[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="212.30.118.112" src_port="1863"/>
    </slice>
    <from sec="1068526807" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_916{
style=filled;
color=gray75;
3511[label="209.176.135.112;139pkt 139fpkt", shape=pentagon, color=darkviolet];
5274[label="209.176.135.112;138pkt 138fpkt", shape=invtriangle, color=brown];
6134[label="209.176.135.112;139pkt 139fpkt", shape=invhouse, color=bisque];
stat916[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.176.135.112:0, *:0}[93.5252%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.5096%)&lt;BR/&gt; 80: (2.52404%)&lt;BR/&gt; 135: (0.721154%)&lt;BR/&gt; 4934: (0.360577%)&lt;BR/&gt; 4610: (0.360577%)&gt;];
}
3511--5274[label="1;138pkt 138fpkt"];
3511--6134[label="1;139pkt 139fpkt"];
5274--6134[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter src_ip="209.176.135.112"/>
    </slice>
    <from sec="1068526809" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_917{
style=filled;
color=gray75;
901[label="7.138.186.112;s;25pkt 25fpkt", shape=diamond, color=yellow];
1788[label="208.18.149.196;d;52pkt 52fpkt", shape=hexagon, color=black];
3515[label="7.138.186.112;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5276[label="7.138.186.112;25pkt 25fpkt", shape=invtriangle, color=brown];
stat917[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.138.186.112:80, *:*}[33.3333%]&lt;BR/&gt;{200.162.131.85:80, 208.18.149.196:*}[22.6667%]&lt;BR/&gt;{*:0, 208.18.149.196:0}[21.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.5197%)&lt;BR/&gt; 0: (12.5984%)&lt;BR/&gt; 1773: (1.5748%)&lt;BR/&gt; 1771: (1.5748%)&lt;BR/&gt; 3957: (1.1811%)&gt;];
}
901--1788[label="0.08;2pkt 2fpkt"];
901--3515[label="1;25pkt 25fpkt"];
901--5276[label="1;25pkt 25fpkt"];
1788--2327[label="0.0192308;1pkt 1fpkt"];
1788--2342[label="0.0192308;1pkt 1fpkt"];
1788--2343[label="0.0192308;1pkt 1fpkt"];
1788--2349[label="0.0192308;1pkt 1fpkt"];
1788--2858[label="0.0384615;2pkt 2fpkt"];
1788--3055[label="0.384615;5pkt 5fpkt"];
1788--3262[label="0.369565;17pkt 17fpkt"];
1788--3515[label="0.08;2pkt 2fpkt"];
1788--3817[label="0.1;1pkt 1fpkt"];
1788--4912[label="0.0384615;2pkt 2fpkt"];
1788--5025[label="0.384615;5pkt 5fpkt"];
1788--5276[label="0.08;2pkt 2fpkt"];
1788--5432[label="0.111111;1pkt 1fpkt"];
1788--6030[label="0.416667;5pkt 5fpkt"];
1788--6207[label="0.111111;1pkt 1fpkt"];
3515--5276[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="7.138.186.112" src_port="80"/>
      <filter dst_ip="208.18.149.196" src_ip="200.162.131.85" src_port="80"/>
      <filter dst_ip="208.18.149.196"/>
    </slice>
    <from sec="1068526808" usec="0"/>
    <to sec="1068527552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_918{
style=filled;
color=gray75;
3518[label="212.30.113.113;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5278[label="212.30.113.113;3pkt 3fpkt", shape=invtriangle, color=brown];
stat918[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.113:1863, 143.38.11.20:1169}[33.3333%]&lt;BR/&gt;{212.30.113.113:1863, 164.228.91.72:4691}[33.3333%]&lt;BR/&gt;{212.30.113.113:1863, 143.38.10.168:1077}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4691: (16.6667%)&lt;BR/&gt; 1169: (16.6667%)&lt;BR/&gt; 1077: (16.6667%)&gt;];
}
3518--5278[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.10.168" dst_port="1077" src_ip="212.30.113.113" src_port="1863"/>
      <filter dst_ip="164.228.91.72" dst_port="4691" src_ip="212.30.113.113" src_port="1863"/>
      <filter dst_ip="143.38.11.20" dst_port="1169" src_ip="212.30.113.113" src_port="1863"/>
    </slice>
    <from sec="1068526823" usec="0"/>
    <to sec="1068527693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.765035,1.77753,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_919{
style=filled;
color=gray75;
748[label="136.93.146.122;d;160pkt 160fpkt", shape=diamond, color=yellow];
5282[label="212.30.113.114;6pkt 6fpkt", shape=invtriangle, color=brown];
stat919[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.93.146.122:3606}[80.6061%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3606: (40.3614%)&lt;BR/&gt; 80: (5.72289%)&lt;BR/&gt; 1214: (4.21687%)&lt;BR/&gt; 3531: (2.40964%)&lt;BR/&gt; 1863: (2.40964%)&gt;];
}
748--1245[label="0.166667;1pkt 1fpkt"];
748--1871[label="1;117pkt 117fpkt"];
748--2327[label="0.0125;2pkt 2fpkt"];
748--2342[label="0.0125;2pkt 2fpkt"];
748--3526[label="0.166667;1pkt 1fpkt"];
748--3936[label="0.1;1pkt 1fpkt"];
748--5282[label="0.166667;1pkt 1fpkt"];
748--5491[label="0.1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.146.122" dst_port="3606"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_920{
style=filled;
color=gray75;
3529[label="193.14.141.114;35pkt 35fpkt", shape=pentagon, color=darkviolet];
5283[label="193.14.141.114;35pkt 35fpkt", shape=invtriangle, color=brown];
stat920[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.14.141.114:80, 136.93.229.115:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2073: (1.42857%)&lt;BR/&gt; 2072: (1.42857%)&lt;BR/&gt; 2071: (1.42857%)&lt;BR/&gt; 2069: (1.42857%)&gt;];
}
3529--5283[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.229.115" src_ip="193.14.141.114" src_port="80"/>
    </slice>
    <from sec="1068526932" usec="0"/>
    <to sec="1068526987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_921{
style=filled;
color=gray75;
3530[label="216.242.33.115;110pkt 110fpkt", shape=pentagon, color=darkviolet];
5284[label="216.242.33.115;110pkt 110fpkt", shape=invtriangle, color=brown];
6136[label="216.242.33.115;110pkt 110fpkt", shape=invhouse, color=bisque];
stat921[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.242.33.115:53, 161.29.11.133:*}[71.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 4291: (0.909091%)&lt;BR/&gt; 32774: (0.454545%)&lt;BR/&gt; 4560: (0.454545%)&lt;BR/&gt; 4538: (0.454545%)&gt;];
}
3530--5284[label="1;110pkt 110fpkt"];
3530--6136[label="1;110pkt 110fpkt"];
5284--6136[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.11.133" src_ip="216.242.33.115" src_port="53"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_922{
style=filled;
color=gray75;
3531[label="98.68.81.115;129pkt 129fpkt", shape=pentagon, color=darkviolet];
5285[label="98.68.81.115;128pkt 128fpkt", shape=invtriangle, color=brown];
stat922[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.68.81.115:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3531--5285[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter src_ip="98.68.81.115"/>
    </slice>
    <from sec="1068526818" usec="0"/>
    <to sec="1068527687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_923{
style=filled;
color=gray75;
3539[label="98.47.32.116;191pkt 191fpkt", shape=pentagon, color=darkviolet];
5289[label="98.47.32.116;190pkt 190fpkt", shape=invtriangle, color=brown];
6138[label="98.47.32.116;191pkt 191fpkt", shape=invhouse, color=bisque];
stat923[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.47.32.116:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 65420: (0.262238%)&lt;BR/&gt; 64912: (0.262238%)&lt;BR/&gt; 64840: (0.262238%)&lt;BR/&gt; 64708: (0.262238%)&gt;];
}
3539--5289[label="1;190pkt 190fpkt"];
3539--6138[label="1;191pkt 191fpkt"];
5289--6138[label="1;190pkt 190fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="98.47.32.116"/>
    </slice>
    <from sec="1068527145" usec="0"/>
    <to sec="1068527180" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_924{
style=filled;
color=gray75;
3547[label="7.24.49.117;255pkt 255fpkt", shape=pentagon, color=darkviolet];
5294[label="7.24.49.117;254pkt 254fpkt", shape=invtriangle, color=brown];
stat924[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.24.49.117:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3547--5294[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="7.24.49.117" src_port="1026"/>
    </slice>
    <from sec="1068527111" usec="0"/>
    <to sec="1068527155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_925{
style=filled;
color=gray75;
3548[label="197.32.53.117;169pkt 169fpkt", shape=pentagon, color=darkviolet];
5295[label="197.32.53.117;168pkt 168fpkt", shape=invtriangle, color=brown];
stat925[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.32.53.117:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3548--5295[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.32.53.117" src_port="1029"/>
    </slice>
    <from sec="1068527080" usec="0"/>
    <to sec="1068527117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.837732,1.70559,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_926{
style=filled;
color=gray75;
1360[label="212.30.113.117;s;6pkt 6fpkt", shape=diamond, color=yellow];
3549[label="212.30.113.117;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5296[label="212.30.113.117;2pkt 2fpkt", shape=invtriangle, color=brown];
6141[label="212.30.113.117;3pkt 3fpkt", shape=invhouse, color=bisque];
stat926[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.117:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3110: (15.3846%)&lt;BR/&gt; 1462: (15.3846%)&lt;BR/&gt; 1140: (7.69231%)&lt;BR/&gt; 3206: (3.84615%)&gt;];
}
1360--3549[label="1;2pkt 2fpkt"];
1360--5296[label="1;2pkt 2fpkt"];
1360--6141[label="1;3pkt 3fpkt"];
3549--5296[label="1;2pkt 2fpkt"];
3549--6141[label="1;2pkt 2fpkt"];
5296--6141[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="212.30.113.117" src_port="1863"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12377,1.84878,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_927{
style=filled;
color=gray75;
118[label="220.141.77.241s;156pkt 156fpkt", shape=rectangle, color=red];
3554[label="6.191.66.118;213pkt 213fpkt", shape=pentagon, color=darkviolet];
4532[label="220.141.77.241;122pkt 122fpkt", shape=pentagon, color=darkviolet];
5299[label="6.191.66.118;213pkt 213fpkt", shape=invtriangle, color=brown];
stat927[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.191.66.118:1026, *:137}[51.5738%]&lt;BR/&gt;{220.141.77.241:1026, *:137}[29.54%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1026: (44.4602%)&lt;BR/&gt; 1031: (2.84091%)&lt;BR/&gt; 1025: (2.69886%)&gt;];
}
118--3554[label="0.25;39pkt 39fpkt"];
118--4532[label="0.319672;39pkt 39fpkt"];
118--5299[label="0.25;39pkt 39fpkt"];
3554--5299[label="1;213pkt 213fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="6.191.66.118" src_port="1026"/>
      <filter dst_port="137" src_ip="220.141.77.241" src_port="1026"/>
    </slice>
    <from sec="1068527490" usec="0"/>
    <to sec="1068527526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_928{
style=filled;
color=gray75;
3556[label="212.30.113.118;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5300[label="212.30.113.118;3pkt 3fpkt", shape=invtriangle, color=brown];
6142[label="212.30.113.118;4pkt 4fpkt", shape=invhouse, color=bisque];
stat928[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.118:1863, 143.38.11.20:1164}[25%]&lt;BR/&gt;{212.30.113.118:1863, 136.93.51.21:56219}[25%]&lt;BR/&gt;{212.30.113.118:1863, 143.38.7.125:1439}[25%]&lt;BR/&gt;{212.30.113.118:1863, 143.38.11.226:1703}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 56219: (13.6364%)&lt;BR/&gt; 1703: (13.6364%)&lt;BR/&gt; 1439: (13.6364%)&lt;BR/&gt; 1164: (9.09091%)&gt;];
}
3556--5300[label="1;3pkt 3fpkt"];
3556--6142[label="1;4pkt 4fpkt"];
5300--6142[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.11.226" dst_port="1703" src_ip="212.30.113.118" src_port="1863"/>
      <filter dst_ip="143.38.7.125" dst_port="1439" src_ip="212.30.113.118" src_port="1863"/>
      <filter dst_ip="136.93.51.21" dst_port="56219" src_ip="212.30.113.118" src_port="1863"/>
      <filter dst_ip="143.38.11.20" dst_port="1164" src_ip="212.30.113.118" src_port="1863"/>
    </slice>
    <from sec="1068526931" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_929{
style=filled;
color=gray75;
3562[label="212.30.113.119;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5304[label="212.30.113.119;3pkt 3fpkt", shape=invtriangle, color=brown];
stat929[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.119:1863, 143.38.14.44:1294}[25%]&lt;BR/&gt;{212.30.113.119:1863, 143.38.9.116:3296}[25%]&lt;BR/&gt;{212.30.113.119:1863, 143.38.11.161:49245}[25%]&lt;BR/&gt;{212.30.113.119:1863, 143.38.14.200:3078}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 49245: (14.2857%)&lt;BR/&gt; 3078: (14.2857%)&lt;BR/&gt; 1294: (14.2857%)&lt;BR/&gt; 3296: (7.14286%)&gt;];
}
3562--5304[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.14.200" dst_port="3078" src_ip="212.30.113.119" src_port="1863"/>
      <filter dst_ip="143.38.11.161" dst_port="49245" src_ip="212.30.113.119" src_port="1863"/>
      <filter dst_ip="143.38.9.116" dst_port="3296" src_ip="212.30.113.119" src_port="1863"/>
      <filter dst_ip="143.38.14.44" dst_port="1294" src_ip="212.30.113.119" src_port="1863"/>
    </slice>
    <from sec="1068526955" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_930{
style=filled;
color=gray75;
3568[label="0.58.43.120;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5306[label="0.58.43.120;18pkt 18fpkt", shape=invtriangle, color=brown];
stat930[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.58.43.120:80, 136.93.240.211:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1997: (2.77778%)&lt;BR/&gt; 1996: (2.77778%)&lt;BR/&gt; 1993: (2.77778%)&lt;BR/&gt; 1991: (2.77778%)&gt;];
}
3568--5306[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.240.211" src_ip="0.58.43.120" src_port="80"/>
    </slice>
    <from sec="1068527662" usec="0"/>
    <to sec="1068527671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_931{
style=filled;
color=gray75;
747[label="208.18.27.25;d;128pkt 128fpkt", shape=diamond, color=yellow];
1815[label="197.237.34.131;s;7pkt 7fpkt", shape=hexagon, color=black];
3653[label="197.237.34.131;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5397[label="208.209.94.140;4pkt 4fpkt", shape=invtriangle, color=brown];
6316[label="202.205.205.202;3pkt 3fpkt", shape=invhouse, color=bisque];
stat931[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.218.102.120:80, 208.18.27.25:*}[34.375%]&lt;BR/&gt;{*:0, 208.18.27.25:0}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5839%)&lt;BR/&gt; 0: (18.7919%)&lt;BR/&gt; 135: (2.34899%)&lt;BR/&gt; 3638: (1.00671%)&lt;BR/&gt; 3637: (1.00671%)&gt;];
}
747--927[label="1;7pkt 7fpkt"];
747--1097[label="0.0078125;1pkt 1fpkt"];
747--1107[label="0.00826446;1pkt 1fpkt"];
747--1293[label="0.34375;44pkt 44fpkt"];
747--1815[label="1;7pkt 7fpkt"];
747--1958[label="0.010989;1pkt 1fpkt"];
747--2180[label="1;128pkt 128fpkt"];
747--2211[label="0.34375;44pkt 44fpkt"];
747--2327[label="0.0078125;1pkt 1fpkt"];
747--2342[label="0.0078125;1pkt 1fpkt"];
747--3435[label="0.0078125;1pkt 1fpkt"];
747--3570[label="0.34375;44pkt 44fpkt"];
747--3653[label="1;7pkt 7fpkt"];
747--3746[label="1;4pkt 4fpkt"];
747--4279[label="1;4pkt 4fpkt"];
747--5238[label="0.0078125;1pkt 1fpkt"];
747--5307[label="0.335938;43pkt 43fpkt"];
747--5397[label="1;4pkt 4fpkt"];
747--5676[label="1;3pkt 3fpkt"];
747--6145[label="0.34375;44pkt 44fpkt"];
747--6316[label="1;3pkt 3fpkt"];
1815--2180[label="1;7pkt 7fpkt"];
1815--3653[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.27.25" src_ip="202.218.102.120" src_port="80"/>
      <filter dst_ip="208.18.27.25"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_932{
style=filled;
color=gray75;
3571[label="212.30.113.120;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5308[label="212.30.113.120;3pkt 3fpkt", shape=invtriangle, color=brown];
stat932[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.120:1863, 143.38.6.68:3265}[25%]&lt;BR/&gt;{212.30.113.120:1863, 143.38.14.208:1463}[25%]&lt;BR/&gt;{212.30.113.120:1863, 143.38.14.232:1378}[25%]&lt;BR/&gt;{212.30.113.120:1863, 143.38.9.236:1092}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1463: (14.2857%)&lt;BR/&gt; 1378: (14.2857%)&lt;BR/&gt; 1092: (14.2857%)&lt;BR/&gt; 3265: (7.14286%)&gt;];
}
3571--5308[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.9.236" dst_port="1092" src_ip="212.30.113.120" src_port="1863"/>
      <filter dst_ip="143.38.14.232" dst_port="1378" src_ip="212.30.113.120" src_port="1863"/>
      <filter dst_ip="143.38.14.208" dst_port="1463" src_ip="212.30.113.120" src_port="1863"/>
      <filter dst_ip="143.38.6.68" dst_port="3265" src_ip="212.30.113.120" src_port="1863"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.82.101.121"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_934{
style=filled;
color=gray75;
3585[label="212.30.113.122;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5314[label="212.30.113.122;1pkt 1fpkt", shape=invtriangle, color=brown];
6147[label="212.30.113.122;1pkt 1fpkt", shape=invhouse, color=bisque];
stat934[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.113.122:1863, 143.38.9.14:1104}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1104: (50%)&gt;];
}
3585--5314[label="1;1pkt 1fpkt"];
3585--6147[label="1;1pkt 1fpkt"];
5314--6147[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.9.14" dst_port="1104" src_ip="212.30.113.122" src_port="1863"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_935{
style=filled;
color=gray75;
3588[label="202.210.173.122;129pkt 129fpkt", shape=pentagon, color=darkviolet];
5316[label="202.210.173.122;128pkt 128fpkt", shape=invtriangle, color=brown];
6148[label="202.210.173.122;128pkt 128fpkt", shape=invhouse, color=bisque];
stat935[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.210.173.122:0, *:0}[91.4729%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.4286%)&lt;BR/&gt; 80: (4.28571%)&lt;BR/&gt; 53019: (0.38961%)&lt;BR/&gt; 51990: (0.38961%)&lt;BR/&gt; 51977: (0.38961%)&gt;];
}
3588--5316[label="1;128pkt 128fpkt"];
3588--6148[label="1;128pkt 128fpkt"];
5316--6148[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter src_ip="202.210.173.122"/>
    </slice>
    <from sec="1068526824" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_936{
style=filled;
color=gray75;
3589[label="96.188.180.122;131pkt 131fpkt", shape=pentagon, color=darkviolet];
5317[label="96.188.180.122;131pkt 131fpkt", shape=invtriangle, color=brown];
6149[label="96.188.180.122;130pkt 130fpkt", shape=invhouse, color=bisque];
stat936[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.188.180.122:0, *:0}[98.4733%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.4694%)&lt;BR/&gt; 80: (0.765306%)&lt;BR/&gt; 14113: (0.382653%)&lt;BR/&gt; 13416: (0.382653%)&gt;];
}
3589--5317[label="1;131pkt 131fpkt"];
3589--6149[label="1;130pkt 130fpkt"];
5317--6149[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter src_ip="96.188.180.122"/>
    </slice>
    <from sec="1068526813" usec="0"/>
    <to sec="1068527644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_937{
style=filled;
color=gray75;
3592[label="96.181.178.123;99pkt 99fpkt", shape=pentagon, color=darkviolet];
5318[label="96.181.178.123;98pkt 98fpkt", shape=invtriangle, color=brown];
6150[label="96.181.178.123;99pkt 99fpkt", shape=invhouse, color=bisque];
stat937[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.181.178.123:0, *:0}[98.9899%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.9865%)&lt;BR/&gt; 44109: (0.506757%)&lt;BR/&gt; 80: (0.506757%)&gt;];
}
3592--5318[label="1;98pkt 98fpkt"];
3592--6150[label="1;99pkt 99fpkt"];
5318--6150[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter src_ip="96.181.178.123"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_938{
style=filled;
color=gray75;
3595[label="7.147.83.124;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5320[label="7.147.83.124;1pkt 1fpkt", shape=invtriangle, color=brown];
stat938[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.147.83.124:80, 136.93.243.17:1284}[50%]&lt;BR/&gt;{7.147.83.124:80, 136.93.243.17:1285}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1285: (33.3333%)&lt;BR/&gt; 1284: (16.6667%)&gt;];
}
3595--5320[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.243.17" dst_port="1285" src_ip="7.147.83.124" src_port="80"/>
      <filter dst_ip="136.93.243.17" dst_port="1284" src_ip="7.147.83.124" src_port="80"/>
    </slice>
    <from sec="1068527445" usec="0"/>
    <to sec="1068527456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_939{
style=filled;
color=gray75;
3614[label="202.129.18.126;108pkt 108fpkt", shape=pentagon, color=darkviolet];
5330[label="202.129.18.126;107pkt 107fpkt", shape=invtriangle, color=brown];
6157[label="202.129.18.126;108pkt 108fpkt", shape=invhouse, color=bisque];
stat939[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.129.18.126:0, *:0}[97.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.2136%)&lt;BR/&gt; 80: (1.39319%)&lt;BR/&gt; 2584: (0.464396%)&lt;BR/&gt; 1950: (0.464396%)&lt;BR/&gt; 1150: (0.464396%)&gt;];
}
3614--5330[label="1;107pkt 107fpkt"];
3614--6157[label="1;108pkt 108fpkt"];
5330--6157[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter src_ip="202.129.18.126"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_940{
style=filled;
color=gray75;
944[label="192.205.41.126;s;55pkt 55fpkt", shape=diamond, color=yellow];
3615[label="192.205.41.126;71pkt 71fpkt", shape=pentagon, color=darkviolet];
5331[label="192.205.41.126;70pkt 70fpkt", shape=invtriangle, color=brown];
stat940[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.205.41.126:80, 208.159.185.117:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40029: (0.765306%)&lt;BR/&gt; 40014: (0.765306%)&lt;BR/&gt; 40013: (0.765306%)&lt;BR/&gt; 40009: (0.765306%)&gt;];
}
944--1839[label="1;55pkt 55fpkt"];
944--3615[label="1;55pkt 55fpkt"];
944--5331[label="1;55pkt 55fpkt"];
944--6158[label="1;55pkt 55fpkt"];
3615--5331[label="1;70pkt 70fpkt"];
3615--6158[label="1;70pkt 70fpkt"];
5331--6158[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="208.159.185.117" src_ip="192.205.41.126" src_port="80"/>
    </slice>
    <from sec="1068526811" usec="0"/>
    <to sec="1068527468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_941{
style=filled;
color=gray75;
3620[label="202.142.210.126;181pkt 181fpkt", shape=pentagon, color=darkviolet];
5334[label="202.142.210.126;181pkt 181fpkt", shape=invtriangle, color=brown];
stat941[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.142.210.126:0, *:0}[98.895%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.895%)&lt;BR/&gt; 80: (0.552486%)&lt;BR/&gt; 3575: (0.276243%)&lt;BR/&gt; 1732: (0.276243%)&gt;];
}
3620--5334[label="1;181pkt 181fpkt"];
</description>
    <slice>
      <filter src_ip="202.142.210.126"/>
    </slice>
    <from sec="1068526824" usec="0"/>
    <to sec="1068527695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_942{
style=filled;
color=gray75;
3622[label="98.114.238.126;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5335[label="98.114.238.126;3pkt 3fpkt", shape=invtriangle, color=brown];
stat942[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.114.238.126:80, 208.31.231.177:34470}[33.3333%]&lt;BR/&gt;{98.114.238.126:80, 208.31.231.177:34471}[33.3333%]&lt;BR/&gt;{98.114.238.126:80, 208.31.231.177:34674}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34674: (20%)&lt;BR/&gt; 34471: (20%)&lt;BR/&gt; 34470: (10%)&gt;];
}
3622--5335[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.231.177" dst_port="34674" src_ip="98.114.238.126" src_port="80"/>
      <filter dst_ip="208.31.231.177" dst_port="34471" src_ip="98.114.238.126" src_port="80"/>
      <filter dst_ip="208.31.231.177" dst_port="34470" src_ip="98.114.238.126" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.181.62.127"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_944{
style=filled;
color=gray75;
666[label="136.93.253.146;d;133pkt 133fpkt", shape=diamond, color=yellow];
stat944[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.93.253.146:25}[66.1654%]&lt;BR/&gt;{*:25, 136.93.253.146:*}[32.3308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.2481%)&lt;BR/&gt; 60978: (0.75188%)&lt;BR/&gt; 33255: (0.75188%)&lt;BR/&gt; 32848: (0.75188%)&lt;BR/&gt; 2306: (0.75188%)&gt;];
}
666--777[label="0.0483871;3pkt 3fpkt"];
666--786[label="0.0566038;3pkt 3fpkt"];
666--860[label="0.0322581;3pkt 3fpkt"];
666--1017[label="0.03125;1pkt 1fpkt"];
666--1021[label="0.0512821;2pkt 2fpkt"];
666--1026[label="0.0263158;1pkt 1fpkt"];
666--1361[label="0.0540541;2pkt 2fpkt"];
666--1399[label="0.037594;5pkt 5fpkt"];
666--1611[label="1;48pkt 48fpkt"];
666--1702[label="0.0322581;1pkt 1fpkt"];
666--1774[label="0.0352941;3pkt 3fpkt"];
666--1895[label="0.0263158;1pkt 1fpkt"];
666--2834[label="0.037594;5pkt 5fpkt"];
666--2918[label="0.025641;1pkt 1fpkt"];
666--2928[label="0.0263158;1pkt 1fpkt"];
666--3185[label="0.0526316;2pkt 2fpkt"];
666--3567[label="0.0545455;3pkt 3fpkt"];
666--3639[label="0.0483871;3pkt 3fpkt"];
666--3955[label="0.05;1pkt 1fpkt"];
666--4150[label="0.0309278;3pkt 3fpkt"];
666--4952[label="0.027027;1pkt 1fpkt"];
666--5097[label="0.0540541;2pkt 2fpkt"];
666--5305[label="0.0545455;3pkt 3fpkt"];
666--5343[label="0.0483871;3pkt 3fpkt"];
666--5602[label="0.0309278;3pkt 3fpkt"];
666--6144[label="0.0555556;3pkt 3fpkt"];
666--6161[label="0.0327869;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.253.146" src_port="25"/>
      <filter dst_ip="136.93.253.146" dst_port="25"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_945{
style=filled;
color=gray75;
385[label="136.93.156.80;d;165pkt 165fpkt", shape=diamond, color=yellow];
407[label="212.118.62.144;s;390pkt 390fpkt", shape=diamond, color=yellow];
413[label="136.93.226.248;d;156pkt 156fpkt", shape=diamond, color=yellow];
489[label="7.219.223.53;s;236pkt 236fpkt", shape=diamond, color=yellow];
573[label="136.93.206.160;d;76pkt 76fpkt", shape=diamond, color=yellow];
574[label="136.93.206.68;d;57pkt 57fpkt", shape=diamond, color=yellow];
590[label="212.118.36.129;s;363pkt 363fpkt", shape=diamond, color=yellow];
793[label="136.93.242.232;d;301pkt 301fpkt", shape=diamond, color=yellow];
1468[label="212.118.62.144;s;143pkt 143fpkt", shape=hexagon, color=black];
1551[label="136.93.226.248;d;156pkt 156fpkt", shape=hexagon, color=black];
1562[label="136.93.206.68;d;57pkt 57fpkt", shape=hexagon, color=black];
1577[label="212.118.36.129;s;329pkt 329fpkt", shape=hexagon, color=black];
1613[label="136.93.148.199;d;54pkt 54fpkt", shape=hexagon, color=black];
2002[label="136.93.229.175;d;110pkt 110fpkt", shape=hexagon, color=black];
2116[label="143.38.216.165;d;54pkt 54fpkt", shape=hexagon, color=black];
2156[label="136.93.206.44;d;104pkt 104fpkt", shape=hexagon, color=black];
2568[label="7.219.214.17;152pkt 152fpkt", shape=pentagon, color=darkviolet];
3479[label="212.137.21.108;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5257[label="212.137.21.108;20pkt 20fpkt", shape=invtriangle, color=brown];
5344[label="212.118.36.129;384pkt 384fpkt", shape=invtriangle, color=brown];
6129[label="212.137.21.108;20pkt 20fpkt", shape=invhouse, color=bisque];
stat945[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.118.62.144:80, *:*}[21.8855%]&lt;BR/&gt;{212.118.36.129:80, *:*}[21.6611%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4024%)&lt;BR/&gt; 25: (0.268898%)&lt;BR/&gt; 1737: (0.149388%)&lt;BR/&gt; 1263: (0.149388%)&lt;BR/&gt; 1475: (0.134449%)&gt;];
}
385--392[label="0.0242424;4pkt 4fpkt"];
385--457[label="0.0424242;7pkt 7fpkt"];
385--492[label="0.0121212;2pkt 2fpkt"];
385--511[label="0.00606061;1pkt 1fpkt"];
385--519[label="0.00606061;1pkt 1fpkt"];
385--522[label="0.0121212;2pkt 2fpkt"];
385--565[label="0.030303;5pkt 5fpkt"];
385--590[label="0.0181818;3pkt 3fpkt"];
385--661[label="0.03125;3pkt 3fpkt"];
385--677[label="0.00606061;1pkt 1fpkt"];
385--729[label="0.0181818;3pkt 3fpkt"];
385--836[label="0.0121212;2pkt 2fpkt"];
385--845[label="0.0108696;1pkt 1fpkt"];
385--892[label="0.0125;1pkt 1fpkt"];
385--1106[label="0.0140845;1pkt 1fpkt"];
385--1202[label="0.0240964;2pkt 2fpkt"];
385--1253[label="0.0104167;1pkt 1fpkt"];
385--1441[label="0.0394737;6pkt 6fpkt"];
385--1462[label="0.00606061;1pkt 1fpkt"];
385--1523[label="0.0363636;6pkt 6fpkt"];
385--1536[label="0.0162602;2pkt 2fpkt"];
385--1577[label="0.0181818;3pkt 3fpkt"];
385--1607[label="0.0242424;4pkt 4fpkt"];
385--1655[label="0.0136054;2pkt 2fpkt"];
385--1764[label="0.00806452;1pkt 1fpkt"];
385--1781[label="0.047619;3pkt 3fpkt"];
385--1800[label="0.030303;5pkt 5fpkt"];
385--1847[label="0.0424242;7pkt 7fpkt"];
385--1890[label="0.00606061;1pkt 1fpkt"];
385--1957[label="0.0121212;2pkt 2fpkt"];
385--1994[label="0.0138889;1pkt 1fpkt"];
385--2073[label="0.0149254;1pkt 1fpkt"];
385--2100[label="0.011236;1pkt 1fpkt"];
385--2248[label="0.0242424;4pkt 4fpkt"];
385--2272[label="0.0208333;2pkt 2fpkt"];
385--2278[label="0.0424242;7pkt 7fpkt"];
385--2564[label="0.0181818;1pkt 1fpkt"];
385--2623[label="0.010101;1pkt 1fpkt"];
385--2782[label="0.0242424;4pkt 4fpkt"];
385--2839[label="0.0140845;1pkt 1fpkt"];
385--2868[label="0.0454545;1pkt 1fpkt"];
385--2979[label="0.0121212;2pkt 2fpkt"];
385--2992[label="0.212121;35pkt 35fpkt"];
385--3426[label="0.0833333;1pkt 1fpkt"];
385--3479[label="1;20pkt 20fpkt"];
385--3642[label="0.0181818;3pkt 3fpkt"];
385--3650[label="0.181818;30pkt 30fpkt"];
385--3668[label="0.0181818;3pkt 3fpkt"];
385--3976[label="0.0384615;1pkt 1fpkt"];
385--4095[label="0.0322581;1pkt 1fpkt"];
385--4256[label="0.03;3pkt 3fpkt"];
385--4272[label="0.010101;1pkt 1fpkt"];
385--4288[label="0.0229885;2pkt 2fpkt"];
385--4312[label="0.0606061;2pkt 2fpkt"];
385--4555[label="0.0363636;6pkt 6fpkt"];
385--4573[label="0.0178571;1pkt 1fpkt"];
385--4740[label="0.0181818;1pkt 1fpkt"];
385--4863[label="0.0242424;4pkt 4fpkt"];
385--4896[label="0.0142857;1pkt 1fpkt"];
385--5233[label="0.0833333;1pkt 1fpkt"];
385--5257[label="1;20pkt 20fpkt"];
385--5344[label="0.0181818;3pkt 3fpkt"];
385--5347[label="0.181818;30pkt 30fpkt"];
385--5572[label="0.0333333;1pkt 1fpkt"];
385--5671[label="0.010101;1pkt 1fpkt"];
385--5682[label="0.0229885;2pkt 2fpkt"];
385--5820[label="0.0181818;1pkt 1fpkt"];
385--6129[label="1;20pkt 20fpkt"];
385--6162[label="0.0181818;3pkt 3fpkt"];
385--6165[label="0.181818;30pkt 30fpkt"];
385--6312[label="0.010101;1pkt 1fpkt"];
385--6373[label="0.0181818;1pkt 1fpkt"];
407--413[label="0.692308;108pkt 108fpkt"];
407--573[label="0.0921053;7pkt 7fpkt"];
407--787[label="0.0569106;7pkt 7fpkt"];
407--793[label="0.677741;204pkt 204fpkt"];
407--865[label="0.3;6pkt 6fpkt"];
407--1069[label="0.0956522;11pkt 11fpkt"];
407--1268[label="0.197531;16pkt 16fpkt"];
407--1468[label="1;143pkt 143fpkt"];
407--1551[label="0.692308;108pkt 108fpkt"];
407--1709[label="0.0569106;7pkt 7fpkt"];
407--1839[label="0.025641;10pkt 10fpkt"];
407--1939[label="0.0025641;1pkt 1fpkt"];
407--1980[label="0.3;6pkt 6fpkt"];
407--2011[label="0.67623;165pkt 165fpkt"];
407--2150[label="0.0956522;11pkt 11fpkt"];
407--2163[label="0.0102564;4pkt 4fpkt"];
407--2236[label="1;28pkt 28fpkt"];
413--590[label="0.153846;24pkt 24fpkt"];
413--1468[label="0.594406;85pkt 85fpkt"];
413--1523[label="0.153846;24pkt 24fpkt"];
413--1551[label="1;156pkt 156fpkt"];
413--1577[label="0.153846;24pkt 24fpkt"];
413--2236[label="0.821429;23pkt 23fpkt"];
413--3642[label="0.153846;24pkt 24fpkt"];
413--5344[label="0.153846;24pkt 24fpkt"];
413--6162[label="0.153846;24pkt 24fpkt"];
489--551[label="0.135593;16pkt 16fpkt"];
489--556[label="0.0434783;1pkt 1fpkt"];
489--665[label="0.365079;23pkt 23fpkt"];
489--706[label="0.28866;28pkt 28fpkt"];
489--807[label="0.246575;18pkt 18fpkt"];
489--951[label="0.341463;28pkt 28fpkt"];
489--1427[label="0.0762712;18pkt 18fpkt"];
489--1553[label="0.0434783;1pkt 1fpkt"];
489--1610[label="0.370968;23pkt 23fpkt"];
489--1629[label="0.310345;27pkt 27fpkt"];
489--1750[label="1;216pkt 216fpkt"];
489--2002[label="0.145455;16pkt 16fpkt"];
489--2027[label="0.358974;28pkt 28fpkt"];
489--2245[label="0.0762712;18pkt 18fpkt"];
573--590[label="0.0526316;4pkt 4fpkt"];
573--836[label="0.0263158;2pkt 2fpkt"];
573--895[label="0.539474;41pkt 41fpkt"];
573--1090[label="0.0263158;2pkt 2fpkt"];
573--1202[label="0.0131579;1pkt 1fpkt"];
573--1217[label="0.0394737;3pkt 3fpkt"];
573--1243[label="0.0307692;2pkt 2fpkt"];
573--1260[label="0.0322581;2pkt 2fpkt"];
573--1468[label="0.0921053;7pkt 7fpkt"];
573--1577[label="0.0526316;4pkt 4fpkt"];
573--1847[label="0.0789474;6pkt 6fpkt"];
573--2060[label="0.0263158;2pkt 2fpkt"];
573--2115[label="0.0322581;2pkt 2fpkt"];
573--2127[label="0.539474;41pkt 41fpkt"];
573--2278[label="0.0789474;6pkt 6fpkt"];
573--2553[label="0.539474;41pkt 41fpkt"];
573--2577[label="0.0307692;2pkt 2fpkt"];
573--2839[label="0.0140845;1pkt 1fpkt"];
573--2979[label="0.0263158;2pkt 2fpkt"];
573--3017[label="0.0394737;3pkt 3fpkt"];
573--3642[label="0.0526316;4pkt 4fpkt"];
573--3827[label="0.0333333;2pkt 2fpkt"];
573--3890[label="0.0263158;2pkt 2fpkt"];
573--4095[label="0.0645161;2pkt 2fpkt"];
573--4288[label="0.0131579;1pkt 1fpkt"];
573--4732[label="0.539474;41pkt 41fpkt"];
573--4896[label="0.0142857;1pkt 1fpkt"];
573--5344[label="0.0526316;4pkt 4fpkt"];
573--5469[label="0.0263158;2pkt 2fpkt"];
573--5572[label="0.0666667;2pkt 2fpkt"];
573--5682[label="0.0131579;1pkt 1fpkt"];
573--5898[label="0.539474;41pkt 41fpkt"];
573--6162[label="0.0526316;4pkt 4fpkt"];
574--590[label="0.122807;7pkt 7fpkt"];
574--836[label="0.0175439;1pkt 1fpkt"];
574--894[label="0.333333;19pkt 19fpkt"];
574--1145[label="0.0350877;2pkt 2fpkt"];
574--1253[label="0.0350877;2pkt 2fpkt"];
574--1260[label="0.0175439;1pkt 1fpkt"];
574--1523[label="0.140351;8pkt 8fpkt"];
574--1550[label="0.22807;13pkt 13fpkt"];
574--1562[label="1;57pkt 57fpkt"];
574--1577[label="0.122807;7pkt 7fpkt"];
574--1998[label="0.333333;19pkt 19fpkt"];
574--2100[label="0.0350877;2pkt 2fpkt"];
574--2114[label="0.0350877;2pkt 2fpkt"];
574--2115[label="0.0175439;1pkt 1fpkt"];
574--2568[label="0.22807;13pkt 13fpkt"];
574--2979[label="0.0175439;1pkt 1fpkt"];
574--3642[label="0.122807;7pkt 7fpkt"];
574--4158[label="0.0350877;2pkt 2fpkt"];
574--4272[label="0.0350877;2pkt 2fpkt"];
574--4744[label="0.22807;13pkt 13fpkt"];
574--5344[label="0.122807;7pkt 7fpkt"];
574--5671[label="0.0350877;2pkt 2fpkt"];
574--6162[label="0.122807;7pkt 7fpkt"];
574--6312[label="0.0350877;2pkt 2fpkt"];
590--659[label="0.00550964;2pkt 2fpkt"];
590--710[label="0.0597015;4pkt 4fpkt"];
590--716[label="0.116883;9pkt 9fpkt"];
590--726[label="0.0175439;1pkt 1fpkt"];
590--783[label="0.0333333;2pkt 2fpkt"];
590--793[label="0.159468;48pkt 48fpkt"];
590--881[label="0.00806452;1pkt 1fpkt"];
590--882[label="0.0625;3pkt 3fpkt"];
590--929[label="0.237762;34pkt 34fpkt"];
590--1053[label="0.0291262;3pkt 3fpkt"];
590--1066[label="0.0909091;6pkt 6fpkt"];
590--1067[label="0.03125;2pkt 2fpkt"];
590--1073[label="0.121951;10pkt 10fpkt"];
590--1174[label="0.015625;1pkt 1fpkt"];
590--1179[label="0.24;6pkt 6fpkt"];
590--1186[label="0.030303;2pkt 2fpkt"];
590--1267[label="0.00636943;1pkt 1fpkt"];
590--1268[label="0.0123457;1pkt 1fpkt"];
590--1269[label="0.0333333;3pkt 3fpkt"];
590--1296[label="0.0285714;3pkt 3fpkt"];
590--1303[label="0.0555556;6pkt 6fpkt"];
590--1427[label="0.0661157;24pkt 24fpkt"];
590--1433[label="0.0165289;6pkt 6fpkt"];
590--1463[label="0.00550964;2pkt 2fpkt"];
590--1472[label="0.0947368;9pkt 9fpkt"];
590--1493[label="0.0289017;5pkt 5fpkt"];
590--1522[label="0.0110193;4pkt 4fpkt"];
590--1534[label="0.0368421;7pkt 7fpkt"];
590--1551[label="0.153846;24pkt 24fpkt"];
590--1562[label="0.122807;7pkt 7fpkt"];
590--1577[label="1;329pkt 329fpkt"];
590--1613[label="0.0740741;4pkt 4fpkt"];
590--1619[label="0.0734463;13pkt 13fpkt"];
590--1626[label="0.272727;9pkt 9fpkt"];
590--1721[label="0.116883;9pkt 9fpkt"];
590--1841[label="0.0185185;1pkt 1fpkt"];
590--1924[label="0.0666667;4pkt 4fpkt"];
590--1930[label="0.00275482;1pkt 1fpkt"];
590--1939[label="0.00826446;3pkt 3fpkt"];
590--1979[label="0.00550964;2pkt 2fpkt"];
590--1990[label="0.0625;3pkt 3fpkt"];
590--2001[label="0.0357143;2pkt 2fpkt"];
590--2002[label="0.0181818;2pkt 2fpkt"];
590--2011[label="0.159836;39pkt 39fpkt"];
590--2018[label="0.0294118;3pkt 3fpkt"];
590--2025[label="0.015873;1pkt 1fpkt"];
590--2033[label="0.030303;2pkt 2fpkt"];
590--2044[label="0.0220386;8pkt 8fpkt"];
590--2109[label="0.00806452;1pkt 1fpkt"];
590--2116[label="0.296296;16pkt 16fpkt"];
590--2156[label="0.0288462;3pkt 3fpkt"];
590--2163[label="0.00826446;3pkt 3fpkt"];
590--2194[label="0.00636943;1pkt 1fpkt"];
590--2212[label="0.0555556;6pkt 6fpkt"];
590--2225[label="0.0165289;6pkt 6fpkt"];
590--2245[label="0.0523416;19pkt 19fpkt"];
590--2262[label="0.116883;9pkt 9fpkt"];
590--2295[label="0.0357143;2pkt 2fpkt"];
590--2303[label="0.0185185;1pkt 1fpkt"];
590--2304[label="0.0110193;4pkt 4fpkt"];
590--3642[label="0.997245;362pkt 362fpkt"];
590--5344[label="0.99449;361pkt 361fpkt"];
590--6162[label="0.997245;362pkt 362fpkt"];
793--895[label="0.0103093;2pkt 2fpkt"];
793--1468[label="0.237762;34pkt 34fpkt"];
793--1523[label="0.076412;23pkt 23fpkt"];
793--1577[label="0.129568;39pkt 39fpkt"];
793--2011[label="1;244pkt 244fpkt"];
793--2127[label="0.0111111;2pkt 2fpkt"];
793--2553[label="0.00803213;2pkt 2fpkt"];
793--3642[label="0.159468;48pkt 48fpkt"];
793--4732[label="0.008;2pkt 2fpkt"];
793--5344[label="0.159468;48pkt 48fpkt"];
793--5898[label="0.008;2pkt 2fpkt"];
793--6162[label="0.159468;48pkt 48fpkt"];
1468--1551[label="0.594406;85pkt 85fpkt"];
1468--1839[label="0.034965;5pkt 5fpkt"];
1468--1939[label="0.00699301;1pkt 1fpkt"];
1468--2011[label="0.237762;34pkt 34fpkt"];
1468--2163[label="0.020979;3pkt 3fpkt"];
1468--2236[label="1;28pkt 28fpkt"];
1551--1577[label="0.153846;24pkt 24fpkt"];
1551--2236[label="0.821429;23pkt 23fpkt"];
1551--3642[label="0.153846;24pkt 24fpkt"];
1551--5344[label="0.153846;24pkt 24fpkt"];
1551--6162[label="0.153846;24pkt 24fpkt"];
1562--1577[label="0.122807;7pkt 7fpkt"];
1562--1998[label="0.333333;19pkt 19fpkt"];
1562--2100[label="0.0350877;2pkt 2fpkt"];
1562--2114[label="0.0350877;2pkt 2fpkt"];
1562--2115[label="0.0175439;1pkt 1fpkt"];
1562--2568[label="0.22807;13pkt 13fpkt"];
1562--2979[label="0.0175439;1pkt 1fpkt"];
1562--3642[label="0.122807;7pkt 7fpkt"];
1562--4158[label="0.0350877;2pkt 2fpkt"];
1562--4272[label="0.0350877;2pkt 2fpkt"];
1562--4744[label="0.22807;13pkt 13fpkt"];
1562--5344[label="0.122807;7pkt 7fpkt"];
1562--5671[label="0.0350877;2pkt 2fpkt"];
1562--6162[label="0.122807;7pkt 7fpkt"];
1562--6312[label="0.0350877;2pkt 2fpkt"];
1577--1613[label="0.0740741;4pkt 4fpkt"];
1577--1619[label="0.0734463;13pkt 13fpkt"];
1577--1626[label="0.272727;9pkt 9fpkt"];
1577--1721[label="0.116883;9pkt 9fpkt"];
1577--1841[label="0.0185185;1pkt 1fpkt"];
1577--1924[label="0.0666667;4pkt 4fpkt"];
1577--1930[label="0.00303951;1pkt 1fpkt"];
1577--1939[label="0.00911854;3pkt 3fpkt"];
1577--1979[label="0.00303951;1pkt 1fpkt"];
1577--1990[label="0.0625;3pkt 3fpkt"];
1577--2001[label="0.0357143;2pkt 2fpkt"];
1577--2002[label="0.0181818;2pkt 2fpkt"];
1577--2011[label="0.159836;39pkt 39fpkt"];
1577--2018[label="0.0294118;3pkt 3fpkt"];
1577--2025[label="0.015873;1pkt 1fpkt"];
1577--2033[label="0.030303;2pkt 2fpkt"];
1577--2044[label="0.0243161;8pkt 8fpkt"];
1577--2109[label="0.00806452;1pkt 1fpkt"];
1577--2116[label="0.296296;16pkt 16fpkt"];
1577--2156[label="0.0288462;3pkt 3fpkt"];
1577--2163[label="0.00911854;3pkt 3fpkt"];
1577--2212[label="0.0555556;6pkt 6fpkt"];
1577--2225[label="0.0182371;6pkt 6fpkt"];
1577--2245[label="0.0577508;19pkt 19fpkt"];
1577--2262[label="0.116883;9pkt 9fpkt"];
1577--2295[label="0.0357143;2pkt 2fpkt"];
1577--2303[label="0.0185185;1pkt 1fpkt"];
1577--2304[label="0.0121581;4pkt 4fpkt"];
1577--3642[label="0.99696;328pkt 328fpkt"];
1577--5344[label="0.993921;327pkt 327fpkt"];
1577--6162[label="0.99696;328pkt 328fpkt"];
1613--1655[label="0.0740741;4pkt 4fpkt"];
1613--1786[label="0.296296;16pkt 16fpkt"];
1613--1847[label="0.0555556;3pkt 3fpkt"];
1613--2278[label="0.0555556;3pkt 3fpkt"];
1613--3402[label="0.142857;1pkt 1fpkt"];
1613--3642[label="0.0740741;4pkt 4fpkt"];
1613--3650[label="0.0185185;1pkt 1fpkt"];
1613--3668[label="0.0740741;4pkt 4fpkt"];
1613--4110[label="0.0689655;2pkt 2fpkt"];
1613--5218[label="0.166667;1pkt 1fpkt"];
1613--5344[label="0.0740741;4pkt 4fpkt"];
1613--5347[label="0.0185185;1pkt 1fpkt"];
1613--5581[label="0.0357143;1pkt 1fpkt"];
1613--6117[label="0.142857;1pkt 1fpkt"];
1613--6162[label="0.0740741;4pkt 4fpkt"];
1613--6165[label="0.0185185;1pkt 1fpkt"];
2002--2124[label="0.0208333;1pkt 1fpkt"];
2002--2246[label="0.190476;12pkt 12fpkt"];
2002--2278[label="0.0363636;4pkt 4fpkt"];
2002--2979[label="0.00909091;1pkt 1fpkt"];
2002--3642[label="0.0181818;2pkt 2fpkt"];
2002--3650[label="0.00909091;1pkt 1fpkt"];
2002--3668[label="0.0181818;2pkt 2fpkt"];
2002--3670[label="0.166667;1pkt 1fpkt"];
2002--3713[label="0.109091;12pkt 12fpkt"];
2002--3835[label="0.0645161;2pkt 2fpkt"];
2002--3959[label="0.0204082;1pkt 1fpkt"];
2002--3966[label="0.0192308;1pkt 1fpkt"];
2002--4288[label="0.0114943;1pkt 1fpkt"];
2002--4573[label="0.0178571;1pkt 1fpkt"];
2002--5344[label="0.0181818;2pkt 2fpkt"];
2002--5347[label="0.00909091;1pkt 1fpkt"];
2002--5682[label="0.0114943;1pkt 1fpkt"];
2002--5820[label="0.0181818;1pkt 1fpkt"];
2002--6162[label="0.0181818;2pkt 2fpkt"];
2002--6165[label="0.00909091;1pkt 1fpkt"];
2002--6373[label="0.0181818;1pkt 1fpkt"];
2116--3270[label="0.333333;2pkt 2fpkt"];
2116--3642[label="0.296296;16pkt 16fpkt"];
2116--3742[label="0.0185185;1pkt 1fpkt"];
2116--4555[label="0.277778;15pkt 15fpkt"];
2116--5344[label="0.296296;16pkt 16fpkt"];
2116--5394[label="0.0185185;1pkt 1fpkt"];
2116--6162[label="0.296296;16pkt 16fpkt"];
2156--2179[label="0.03125;2pkt 2fpkt"];
2156--2586[label="0.0273973;2pkt 2fpkt"];
2156--2721[label="0.0666667;6pkt 6fpkt"];
2156--2839[label="0.0140845;1pkt 1fpkt"];
2156--2979[label="0.00961538;1pkt 1fpkt"];
2156--3642[label="0.0288462;3pkt 3fpkt"];
2156--3816[label="0.03125;1pkt 1fpkt"];
2156--3885[label="0.788462;82pkt 82fpkt"];
2156--4288[label="0.0229885;2pkt 2fpkt"];
2156--4829[label="0.0659341;6pkt 6fpkt"];
2156--4896[label="0.0142857;1pkt 1fpkt"];
2156--5344[label="0.0288462;3pkt 3fpkt"];
2156--5431[label="0.03125;1pkt 1fpkt"];
2156--5682[label="0.0229885;2pkt 2fpkt"];
2156--6162[label="0.0288462;3pkt 3fpkt"];
2156--6206[label="0.03125;1pkt 1fpkt"];
2568--4744[label="1;152pkt 152fpkt"];
3479--5257[label="1;20pkt 20fpkt"];
3479--6129[label="1;20pkt 20fpkt"];
5257--6129[label="1;20pkt 20fpkt"];
5344--6162[label="1;384pkt 384fpkt"];
</description>
    <slice>
      <filter src_ip="212.118.62.144" src_port="80"/>
      <filter src_ip="212.118.36.129" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.152.19.132"/>
    </slice>
    <from sec="1068526838" usec="0"/>
    <to sec="1068527438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_950{
style=filled;
color=gray75;
3671[label="202.146.121.133;159pkt 159fpkt", shape=pentagon, color=darkviolet];
5359[label="202.146.121.133;159pkt 159fpkt", shape=invtriangle, color=brown];
6171[label="202.146.121.133;158pkt 158fpkt", shape=invhouse, color=bisque];
stat950[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.146.121.133:0, *:0}[99.3711%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.3697%)&lt;BR/&gt; 64963: (0.315126%)&lt;BR/&gt; 80: (0.315126%)&gt;];
}
3671--5359[label="1;159pkt 159fpkt"];
3671--6171[label="1;158pkt 158fpkt"];
5359--6171[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter src_ip="202.146.121.133"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_951{
style=filled;
color=gray75;
3676[label="4.82.52.134;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5362[label="4.82.52.134;3pkt 3fpkt", shape=invtriangle, color=brown];
stat951[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.82.52.134:80, 136.93.242.212:1266}[25%]&lt;BR/&gt;{4.82.52.134:80, 136.93.242.212:1267}[25%]&lt;BR/&gt;{4.82.52.134:80, 136.93.242.212:1269}[25%]&lt;BR/&gt;{4.82.52.134:80, 136.93.242.212:1270}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1270: (14.2857%)&lt;BR/&gt; 1269: (14.2857%)&lt;BR/&gt; 1267: (14.2857%)&lt;BR/&gt; 1266: (7.14286%)&gt;];
}
3676--5362[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.242.212" dst_port="1270" src_ip="4.82.52.134" src_port="80"/>
      <filter dst_ip="136.93.242.212" dst_port="1269" src_ip="4.82.52.134" src_port="80"/>
      <filter dst_ip="136.93.242.212" dst_port="1267" src_ip="4.82.52.134" src_port="80"/>
      <filter dst_ip="136.93.242.212" dst_port="1266" src_ip="4.82.52.134" src_port="80"/>
    </slice>
    <from sec="1068527330" usec="0"/>
    <to sec="1068527354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.64.61.134"/>
    </slice>
    <from sec="1068526807" usec="0"/>
    <to sec="1068527693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_953{
style=filled;
color=gray75;
3678[label="96.31.69.134;247pkt 247fpkt", shape=pentagon, color=darkviolet];
5364[label="96.31.69.134;247pkt 247fpkt", shape=invtriangle, color=brown];
6174[label="96.31.69.134;247pkt 247fpkt", shape=invhouse, color=bisque];
stat953[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.31.69.134:10599, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10599: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3678--5364[label="1;247pkt 247fpkt"];
3678--6174[label="1;247pkt 247fpkt"];
5364--6174[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.31.69.134" src_port="10599"/>
    </slice>
    <from sec="1068527326" usec="0"/>
    <to sec="1068527364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_954{
style=filled;
color=gray75;
3683[label="209.133.124.134;163pkt 163fpkt", shape=pentagon, color=darkviolet];
5366[label="209.133.124.134;162pkt 162fpkt", shape=invtriangle, color=brown];
6176[label="209.133.124.134;162pkt 162fpkt", shape=invhouse, color=bisque];
stat954[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.133.124.134:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3683--5366[label="1;162pkt 162fpkt"];
3683--6176[label="1;162pkt 162fpkt"];
5366--6176[label="1;162pkt 162fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.133.124.134" src_port="1027"/>
    </slice>
    <from sec="1068527560" usec="0"/>
    <to sec="1068527602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_955{
style=filled;
color=gray75;
3690[label="5.35.250.134;251pkt 251fpkt", shape=pentagon, color=darkviolet];
5371[label="5.35.250.134;251pkt 251fpkt", shape=invtriangle, color=brown];
6180[label="5.35.250.134;250pkt 250fpkt", shape=invhouse, color=bisque];
stat955[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.35.250.134:1039, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1039: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3690--5371[label="1;251pkt 251fpkt"];
3690--6180[label="1;250pkt 250fpkt"];
5371--6180[label="1;250pkt 250fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="5.35.250.134" src_port="1039"/>
    </slice>
    <from sec="1068527521" usec="0"/>
    <to sec="1068527560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_956{
style=filled;
color=gray75;
3700[label="202.201.129.135;196pkt 196fpkt", shape=pentagon, color=darkviolet];
5373[label="202.201.129.135;195pkt 195fpkt", shape=invtriangle, color=brown];
6181[label="202.201.129.135;196pkt 196fpkt", shape=invhouse, color=bisque];
stat956[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.201.129.135:0, *:0}[99.4898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.4889%)&lt;BR/&gt; 50258: (0.255537%)&lt;BR/&gt; 80: (0.255537%)&gt;];
}
3700--5373[label="1;195pkt 195fpkt"];
3700--6181[label="1;196pkt 196fpkt"];
5373--6181[label="1;195pkt 195fpkt"];
</description>
    <slice>
      <filter src_ip="202.201.129.135"/>
    </slice>
    <from sec="1068527060" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.221.250.135"/>
    </slice>
    <from sec="1068527341" usec="0"/>
    <to sec="1068527352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_958{
style=filled;
color=gray75;
3709[label="200.145.58.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5379[label="200.145.58.136;1pkt 1fpkt", shape=invtriangle, color=brown];
6184[label="200.145.58.136;1pkt 1fpkt", shape=invhouse, color=bisque];
stat958[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.145.58.136:80, 136.93.64.20:1455}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1455: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3709--5379[label="1;1pkt 1fpkt"];
3709--6184[label="1;1pkt 1fpkt"];
5379--6184[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.64.20" dst_port="1455" src_ip="200.145.58.136" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_959{
style=filled;
color=gray75;
3719[label="212.30.119.137;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5384[label="212.30.119.137;1pkt 1fpkt", shape=invtriangle, color=brown];
6186[label="212.30.119.137;1pkt 1fpkt", shape=invhouse, color=bisque];
stat959[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.119.137:1863, 136.93.26.34:24294}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24294: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
3719--5384[label="1;1pkt 1fpkt"];
3719--6186[label="1;1pkt 1fpkt"];
5384--6186[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.26.34" dst_port="24294" src_ip="212.30.119.137" src_port="1863"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_960{
style=filled;
color=gray75;
3724[label="199.153.87.138;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5386[label="199.153.87.138;1pkt 1fpkt", shape=invtriangle, color=brown];
stat960[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.153.87.138:15069, 208.159.185.117:43773}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43773: (50%)&lt;BR/&gt; 15069: (50%)&gt;];
}
3724--5386[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.159.185.117" dst_port="43773" src_ip="199.153.87.138" src_port="15069"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.125.173.139"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_962{
style=filled;
color=gray75;
3744[label="208.145.14.140;85pkt 85fpkt", shape=pentagon, color=darkviolet];
5395[label="208.145.14.140;85pkt 85fpkt", shape=invtriangle, color=brown];
6191[label="208.145.14.140;84pkt 84fpkt", shape=invhouse, color=bisque];
stat962[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.145.14.140:80, *:*}[61.1765%]&lt;BR/&gt;{208.145.14.140:0, *:0}[38.8235%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (38.5827%)&lt;BR/&gt; 80: (30.7087%)&lt;BR/&gt; 64776: (0.590551%)&lt;BR/&gt; 50668: (0.590551%)&lt;BR/&gt; 35983: (0.590551%)&gt;];
}
3744--5395[label="1;85pkt 85fpkt"];
3744--6191[label="1;84pkt 84fpkt"];
5395--6191[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter src_ip="208.145.14.140" src_port="80"/>
      <filter src_ip="208.145.14.140"/>
    </slice>
    <from sec="1068526831" usec="0"/>
    <to sec="1068527679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_963{
style=filled;
color=gray75;
3745[label="166.3.75.140;232pkt 232fpkt", shape=pentagon, color=darkviolet];
5396[label="166.3.75.140;232pkt 232fpkt", shape=invtriangle, color=brown];
stat963[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.3.75.140:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3745--5396[label="1;232pkt 232fpkt"];
</description>
    <slice>
      <filter src_ip="166.3.75.140"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_964{
style=filled;
color=gray75;
3762[label="10.141.19.143;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5405[label="10.141.19.143;19pkt 19fpkt", shape=invtriangle, color=brown];
6195[label="10.141.19.143;19pkt 19fpkt", shape=invhouse, color=bisque];
stat964[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.141.19.143:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3762--5405[label="1;19pkt 19fpkt"];
3762--6195[label="1;19pkt 19fpkt"];
5405--6195[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter src_ip="10.141.19.143"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_965{
style=filled;
color=gray75;
3764[label="214.76.45.143;93pkt 93fpkt", shape=pentagon, color=darkviolet];
5406[label="214.76.45.143;93pkt 93fpkt", shape=invtriangle, color=brown];
stat965[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.76.45.143:0, *:0}[90.3226%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (90.3226%)&lt;BR/&gt; 135: (4.30108%)&lt;BR/&gt; 60147: (0.537634%)&lt;BR/&gt; 58569: (0.537634%)&lt;BR/&gt; 55963: (0.537634%)&gt;];
}
3764--5406[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter src_ip="214.76.45.143"/>
    </slice>
    <from sec="1068526820" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.113.114.143"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_967{
style=filled;
color=gray75;
3771[label="212.30.132.143;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5412[label="212.30.132.143;1pkt 1fpkt", shape=invtriangle, color=brown];
stat967[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.132.143:80, 143.38.12.26:1143}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1143: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3771--5412[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.12.26" dst_port="1143" src_ip="212.30.132.143" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_968{
style=filled;
color=gray75;
3772[label="210.65.132.143;107pkt 107fpkt", shape=pentagon, color=darkviolet];
5413[label="210.65.132.143;107pkt 107fpkt", shape=invtriangle, color=brown];
6198[label="210.65.132.143;106pkt 106fpkt", shape=invhouse, color=bisque];
stat968[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.65.132.143:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 61995: (0.46875%)&lt;BR/&gt; 61988: (0.46875%)&lt;BR/&gt; 61978: (0.46875%)&lt;BR/&gt; 61973: (0.46875%)&gt;];
}
3772--5413[label="1;107pkt 107fpkt"];
3772--6198[label="1;106pkt 106fpkt"];
5413--6198[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.65.132.143"/>
    </slice>
    <from sec="1068527589" usec="0"/>
    <to sec="1068527606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_969{
style=filled;
color=gray75;
3773[label="98.64.143.143;229pkt 229fpkt", shape=pentagon, color=darkviolet];
5414[label="98.64.143.143;229pkt 229fpkt", shape=invtriangle, color=brown];
stat969[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.64.143.143:0, *:0}[93.4498%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.4498%)&lt;BR/&gt; 80: (2.83843%)&lt;BR/&gt; 135: (0.436681%)&lt;BR/&gt; 45968: (0.218341%)&lt;BR/&gt; 44514: (0.218341%)&gt;];
}
3773--5414[label="1;229pkt 229fpkt"];
</description>
    <slice>
      <filter src_ip="98.64.143.143"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_970{
style=filled;
color=gray75;
1174[label="208.18.148.75;d;64pkt 64fpkt", shape=diamond, color=yellow];
3087[label="212.30.119.68;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3296[label="212.30.113.88;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5159[label="212.30.113.88;9pkt 9fpkt", shape=invtriangle, color=brown];
stat970[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 208.18.148.75:*}[47.5%]&lt;BR/&gt;{*:443, 208.18.148.75:*}[26.25%]&lt;BR/&gt;{*:1863, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.8791%)&lt;BR/&gt; 1863: (17.033%)&lt;BR/&gt; 443: (11.5385%)&lt;BR/&gt; 1369: (1.64835%)&lt;BR/&gt; 3151: (1.0989%)&gt;];
}
1174--1197[label="0.015625;1pkt 1fpkt"];
1174--1243[label="0.015625;1pkt 1fpkt"];
1174--1523[label="0.015625;1pkt 1fpkt"];
1174--1577[label="0.015625;1pkt 1fpkt"];
1174--1658[label="0.015625;1pkt 1fpkt"];
1174--2025[label="1;63pkt 63fpkt"];
1174--2039[label="0.015625;1pkt 1fpkt"];
1174--2060[label="0.046875;3pkt 3fpkt"];
1174--2073[label="0.03125;2pkt 2fpkt"];
1174--2360[label="0.1875;12pkt 12fpkt"];
1174--2577[label="0.015625;1pkt 1fpkt"];
1174--2623[label="0.109375;7pkt 7fpkt"];
1174--2690[label="0.545455;6pkt 6fpkt"];
1174--3087[label="0.111111;1pkt 1fpkt"];
1174--3296[label="0.111111;1pkt 1fpkt"];
1174--3642[label="0.015625;1pkt 1fpkt"];
1174--3780[label="0.015625;1pkt 1fpkt"];
1174--3827[label="0.0333333;2pkt 2fpkt"];
1174--3890[label="0.046875;3pkt 3fpkt"];
1174--4116[label="0.015625;1pkt 1fpkt"];
1174--4254[label="0.5;9pkt 9fpkt"];
1174--4312[label="0.030303;1pkt 1fpkt"];
1174--4631[label="0.1875;12pkt 12fpkt"];
1174--5159[label="0.111111;1pkt 1fpkt"];
1174--5344[label="0.015625;1pkt 1fpkt"];
1174--5416[label="0.015625;1pkt 1fpkt"];
1174--5469[label="0.046875;3pkt 3fpkt"];
1174--5584[label="0.015625;1pkt 1fpkt"];
1174--5663[label="0.529412;9pkt 9fpkt"];
1174--5844[label="0.1875;12pkt 12fpkt"];
1174--6162[label="0.015625;1pkt 1fpkt"];
1174--6199[label="0.015625;1pkt 1fpkt"];
1174--6306[label="0.529412;9pkt 9fpkt"];
3296--5159[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_port="1863"/>
      <filter dst_ip="208.18.148.75" src_port="80"/>
      <filter dst_ip="208.18.148.75" src_port="443"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_971{
style=filled;
color=gray75;
3788[label="208.31.196.145;54pkt 54fpkt", shape=pentagon, color=darkviolet];
5419[label="208.31.196.145;53pkt 53fpkt", shape=invtriangle, color=brown];
stat971[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.31.196.145:80, *:*}[59.2593%]&lt;BR/&gt;{208.31.196.145:0, *:0}[40.7407%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (41.1215%)&lt;BR/&gt; 80: (29.4393%)&lt;BR/&gt; 61338: (0.934579%)&lt;BR/&gt; 55500: (0.934579%)&lt;BR/&gt; 53388: (0.934579%)&gt;];
}
3788--5419[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter src_ip="208.31.196.145" src_port="80"/>
      <filter src_ip="208.31.196.145"/>
    </slice>
    <from sec="1068526839" usec="0"/>
    <to sec="1068527688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.216.204.145"/>
    </slice>
    <from sec="1068527566" usec="0"/>
    <to sec="1068527577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_973{
style=filled;
color=gray75;
3793[label="1.87.242.145;125pkt 125fpkt", shape=pentagon, color=darkviolet];
5421[label="1.87.242.145;124pkt 124fpkt", shape=invtriangle, color=brown];
6201[label="1.87.242.145;125pkt 125fpkt", shape=invhouse, color=bisque];
stat973[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.87.242.145:60906, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60906: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3793--5421[label="1;124pkt 124fpkt"];
3793--6201[label="1;125pkt 125fpkt"];
5421--6201[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="1.87.242.145" src_port="60906"/>
    </slice>
    <from sec="1068527666" usec="0"/>
    <to sec="1068527688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_974{
style=filled;
color=gray75;
3794[label="208.145.14.146;95pkt 95fpkt", shape=pentagon, color=darkviolet];
5422[label="208.145.14.146;94pkt 94fpkt", shape=invtriangle, color=brown];
6202[label="208.145.14.146;95pkt 95fpkt", shape=invhouse, color=bisque];
stat974[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.145.14.146:80, *:*}[60%]&lt;BR/&gt;{208.145.14.146:0, *:0}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (39.7887%)&lt;BR/&gt; 80: (30.1056%)&lt;BR/&gt; 4835: (1.05634%)&lt;BR/&gt; 4955: (0.528169%)&lt;BR/&gt; 4860: (0.528169%)&gt;];
}
3794--5422[label="1;94pkt 94fpkt"];
3794--6202[label="1;95pkt 95fpkt"];
5422--6202[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter src_ip="208.145.14.146" src_port="80"/>
      <filter src_ip="208.145.14.146"/>
    </slice>
    <from sec="1068526862" usec="0"/>
    <to sec="1068527692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_975{
style=filled;
color=gray75;
3819[label="193.241.136.148;30pkt 30fpkt", shape=pentagon, color=darkviolet];
5433[label="193.241.136.148;30pkt 30fpkt", shape=invtriangle, color=brown];
stat975[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.241.136.148:80, 208.31.228.42:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2322: (1.66667%)&lt;BR/&gt; 2317: (1.66667%)&lt;BR/&gt; 2300: (1.66667%)&lt;BR/&gt; 2289: (1.66667%)&gt;];
}
3819--5433[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.42" src_ip="193.241.136.148" src_port="80"/>
    </slice>
    <from sec="1068527626" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_976{
style=filled;
color=gray75;
3826[label="202.204.38.149;167pkt 167fpkt", shape=pentagon, color=darkviolet];
5436[label="202.204.38.149;166pkt 166fpkt", shape=invtriangle, color=brown];
6209[label="202.204.38.149;167pkt 167fpkt", shape=invhouse, color=bisque];
stat976[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.204.38.149:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3826--5436[label="1;166pkt 166fpkt"];
3826--6209[label="1;167pkt 167fpkt"];
5436--6209[label="1;166pkt 166fpkt"];
</description>
    <slice>
      <filter src_ip="202.204.38.149"/>
    </slice>
    <from sec="1068526814" usec="0"/>
    <to sec="1068527690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_977{
style=filled;
color=gray75;
3831[label="96.130.180.149;122pkt 122fpkt", shape=pentagon, color=darkviolet];
5438[label="96.130.180.149;122pkt 122fpkt", shape=invtriangle, color=brown];
6210[label="96.130.180.149;121pkt 121fpkt", shape=invhouse, color=bisque];
stat977[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.130.180.149:0, *:0}[99.1803%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.1781%)&lt;BR/&gt; 60045: (0.410959%)&lt;BR/&gt; 80: (0.410959%)&gt;];
}
3831--5438[label="1;122pkt 122fpkt"];
3831--6210[label="1;121pkt 121fpkt"];
5438--6210[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter src_ip="96.130.180.149"/>
    </slice>
    <from sec="1068526848" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_978{
style=filled;
color=gray75;
3839[label="212.244.175.150;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5444[label="212.244.175.150;6pkt 6fpkt", shape=invtriangle, color=brown];
stat978[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.244.175.150:443, *:*}[57.1429%]&lt;BR/&gt;{212.244.175.150:80, *:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (26.9231%)&lt;BR/&gt; 80: (23.0769%)&lt;BR/&gt; 4923: (7.69231%)&lt;BR/&gt; 1806: (7.69231%)&lt;BR/&gt; 1701: (7.69231%)&gt;];
}
3839--5444[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="212.244.175.150" src_port="443"/>
      <filter src_ip="212.244.175.150" src_port="80"/>
    </slice>
    <from sec="1068527540" usec="0"/>
    <to sec="1068527661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.173.181.150"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_980{
style=filled;
color=gray75;
3848[label="202.146.121.151;138pkt 138fpkt", shape=pentagon, color=darkviolet];
5449[label="202.146.121.151;138pkt 138fpkt", shape=invtriangle, color=brown];
6215[label="202.146.121.151;138pkt 138fpkt", shape=invhouse, color=bisque];
stat980[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.146.121.151:0, *:0}[95.6522%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.6522%)&lt;BR/&gt; 80: (2.17391%)&lt;BR/&gt; 4634: (0.362319%)&lt;BR/&gt; 4267: (0.362319%)&lt;BR/&gt; 4003: (0.362319%)&gt;];
}
3848--5449[label="1;138pkt 138fpkt"];
3848--6215[label="1;138pkt 138fpkt"];
5449--6215[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter src_ip="202.146.121.151"/>
    </slice>
    <from sec="1068526807" usec="0"/>
    <to sec="1068527685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_981{
style=filled;
color=gray75;
3853[label="6.116.2.152;169pkt 169fpkt", shape=pentagon, color=darkviolet];
5452[label="6.116.2.152;169pkt 169fpkt", shape=invtriangle, color=brown];
stat981[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.116.2.152:0, *:0}[92.8994%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.8994%)&lt;BR/&gt; 135: (2.07101%)&lt;BR/&gt; 80: (1.47929%)&lt;BR/&gt; 22432: (0.295858%)&lt;BR/&gt; 19676: (0.295858%)&gt;];
}
3853--5452[label="1;169pkt 169fpkt"];
</description>
    <slice>
      <filter src_ip="6.116.2.152"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_982{
style=filled;
color=gray75;
645[label="198.44.9.91;s;324pkt 324fpkt", shape=diamond, color=yellow];
stat982[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.44.9.91:80, 208.31.228.42:*}[38.2716%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4374: (0.308642%)&lt;BR/&gt; 4291: (0.308642%)&lt;BR/&gt; 3786: (0.308642%)&lt;BR/&gt; 1339: (0.308642%)&gt;];
}
645--693[label="0.0434783;1pkt 1fpkt"];
645--696[label="0.00609756;1pkt 1fpkt"];
645--756[label="0.0154321;5pkt 5fpkt"];
645--763[label="0.0227273;1pkt 1fpkt"];
645--764[label="0.0108696;1pkt 1fpkt"];
645--796[label="0.095679;31pkt 31fpkt"];
645--899[label="0.0314961;4pkt 4fpkt"];
645--1031[label="0.0172414;1pkt 1fpkt"];
645--1034[label="0.0111111;1pkt 1fpkt"];
645--1035[label="0.010582;2pkt 2fpkt"];
645--1046[label="0.0104167;1pkt 1fpkt"];
645--1069[label="0.0173913;2pkt 2fpkt"];
645--1135[label="0.00487805;1pkt 1fpkt"];
645--1433[label="0.00925926;3pkt 3fpkt"];
645--1438[label="0.382716;124pkt 124fpkt"];
645--1499[label="0.00367647;1pkt 1fpkt"];
645--1570[label="0.00617284;2pkt 2fpkt"];
645--1573[label="0.0125523;3pkt 3fpkt"];
645--1664[label="0.0163934;2pkt 2fpkt"];
645--1714[label="0.0434783;1pkt 1fpkt"];
645--1715[label="0.00609756;1pkt 1fpkt"];
645--1838[label="0.00308642;1pkt 1fpkt"];
645--1839[label="0.00617284;2pkt 2fpkt"];
645--1879[label="0.0123457;1pkt 1fpkt"];
645--1899[label="0.0366972;4pkt 4fpkt"];
645--1939[label="0.00925926;3pkt 3fpkt"];
645--2014[label="0.0789474;21pkt 21fpkt"];
645--2105[label="0.00574713;1pkt 1fpkt"];
645--2129[label="0.0172414;1pkt 1fpkt"];
645--2143[label="0.0135135;1pkt 1fpkt"];
645--2150[label="0.0173913;2pkt 2fpkt"];
645--2164[label="0.0648148;21pkt 21fpkt"];
645--2225[label="0.00925926;3pkt 3fpkt"];
645--2226[label="0.382716;124pkt 124fpkt"];
645--2310[label="0.0434783;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.42" src_ip="198.44.9.91" src_port="80"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_983{
style=filled;
color=gray75;
1178[label="146.153.48.152;s;108pkt 108fpkt", shape=diamond, color=yellow];
2148[label="146.153.48.152;s;108pkt 108fpkt", shape=hexagon, color=black];
3857[label="146.153.48.152;109pkt 109fpkt", shape=pentagon, color=darkviolet];
5455[label="146.153.48.152;108pkt 108fpkt", shape=invtriangle, color=brown];
6219[label="146.153.48.152;108pkt 108fpkt", shape=invhouse, color=bisque];
stat983[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.153.48.152:*, 212.193.128.239:80}[75.2294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3824: (0.462107%)&lt;BR/&gt; 3820: (0.462107%)&lt;BR/&gt; 3819: (0.462107%)&lt;BR/&gt; 3816: (0.462107%)&gt;];
}
1178--2148[label="1;108pkt 108fpkt"];
1178--3857[label="1;108pkt 108fpkt"];
1178--5455[label="0.990741;107pkt 107fpkt"];
1178--6219[label="0.990741;107pkt 107fpkt"];
2148--3857[label="1;108pkt 108fpkt"];
2148--5455[label="0.990741;107pkt 107fpkt"];
2148--6219[label="0.990741;107pkt 107fpkt"];
3857--5455[label="1;108pkt 108fpkt"];
3857--6219[label="1;108pkt 108fpkt"];
5455--6219[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_ip="212.193.128.239" dst_port="80" src_ip="146.153.48.152"/>
    </slice>
    <from sec="1068527229" usec="0"/>
    <to sec="1068527692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_984{
style=filled;
color=gray75;
3858[label="99.22.66.152;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5456[label="99.22.66.152;14pkt 14fpkt", shape=invtriangle, color=brown];
stat984[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.22.66.152:80, 209.139.227.43:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34527: (3.57143%)&lt;BR/&gt; 34526: (3.57143%)&lt;BR/&gt; 34391: (3.57143%)&lt;BR/&gt; 34006: (3.57143%)&gt;];
}
3858--5456[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="209.139.227.43" src_ip="99.22.66.152" src_port="80"/>
    </slice>
    <from sec="1068526940" usec="0"/>
    <to sec="1068527308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_985{
style=filled;
color=gray75;
3859[label="197.212.86.152;113pkt 113fpkt", shape=pentagon, color=darkviolet];
5457[label="197.212.86.152;112pkt 112fpkt", shape=invtriangle, color=brown];
stat985[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.212.86.152:0, *:0}[95.5752%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.5556%)&lt;BR/&gt; 80: (2.22222%)&lt;BR/&gt; 55523: (0.444444%)&lt;BR/&gt; 42726: (0.444444%)&lt;BR/&gt; 39145: (0.444444%)&gt;];
}
3859--5457[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter src_ip="197.212.86.152"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.67.129.152"/>
    </slice>
    <from sec="1068527311" usec="0"/>
    <to sec="1068527330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_987{
style=filled;
color=gray75;
643[label="143.38.12.85;d;67pkt 67fpkt", shape=diamond, color=yellow];
659[label="136.93.218.140;d;408pkt 408fpkt", shape=diamond, color=yellow];
892[label="6.24.172.148;s;80pkt 80fpkt", shape=diamond, color=yellow];
894[label="7.219.214.237;s;197pkt 197fpkt", shape=diamond, color=yellow];
900[label="208.18.148.73;d;166pkt 166fpkt", shape=diamond, color=yellow];
955[label="136.93.244.106;d;40pkt 40fpkt", shape=diamond, color=yellow];
1053[label="143.38.61.0;d;103pkt 103fpkt", shape=diamond, color=yellow];
1073[label="136.93.203.110;d;82pkt 82fpkt", shape=diamond, color=yellow];
1134[label="7.84.1.228;s;100pkt 100fpkt", shape=diamond, color=yellow];
1154[label="6.24.184.169;s;75pkt 75fpkt", shape=diamond, color=yellow];
1675[label="200.17.93.200;s;103pkt 103fpkt", shape=hexagon, color=black];
2109[label="136.93.246.138;d;124pkt 124fpkt", shape=hexagon, color=black];
2601[label="7.219.212.20;445pkt 445fpkt", shape=pentagon, color=darkviolet];
2690[label="6.24.173.29;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3649[label="217.211.45.130;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3749[label="7.162.212.140;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5469[label="212.118.48.156;158pkt 158fpkt", shape=invtriangle, color=brown];
stat987[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.219.212.20:80, *:*}[21.6019%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.9465%)&lt;BR/&gt; 443: (3.20073%)&lt;BR/&gt; 10001: (2.35482%)&lt;BR/&gt; 0: (2.28624%)&lt;BR/&gt; 25: (1.5775%)&gt;];
}
643--903[label="1;51pkt 51fpkt"];
643--1090[label="0.0149254;1pkt 1fpkt"];
643--1154[label="0.0447761;3pkt 3fpkt"];
643--1270[label="0.0285714;1pkt 1fpkt"];
643--1765[label="1;60pkt 60fpkt"];
643--2008[label="1;46pkt 46fpkt"];
643--2060[label="0.0149254;1pkt 1fpkt"];
643--2802[label="0.0333333;2pkt 2fpkt"];
643--3514[label="1;50pkt 50fpkt"];
643--3645[label="0.09375;3pkt 3fpkt"];
643--3890[label="0.0149254;1pkt 1fpkt"];
643--3992[label="0.0447761;3pkt 3fpkt"];
643--4323[label="0.05;1pkt 1fpkt"];
643--4577[label="0.037037;1pkt 1fpkt"];
643--5275[label="1;50pkt 50fpkt"];
643--5469[label="0.0149254;1pkt 1fpkt"];
643--5517[label="0.0298507;2pkt 2fpkt"];
643--6135[label="1;50pkt 50fpkt"];
659--660[label="0.0367647;15pkt 15fpkt"];
659--685[label="0.0841121;18pkt 18fpkt"];
659--729[label="0.0133779;4pkt 4fpkt"];
659--786[label="0.0188679;1pkt 1fpkt"];
659--788[label="0.0107527;2pkt 2fpkt"];
659--836[label="0.0240964;4pkt 4fpkt"];
659--845[label="0.0108696;1pkt 1fpkt"];
659--860[label="0.0215054;2pkt 2fpkt"];
659--892[label="0.0125;1pkt 1fpkt"];
659--961[label="0.0138889;1pkt 1fpkt"];
659--964[label="0.0123457;1pkt 1fpkt"];
659--1008[label="0.0106383;1pkt 1fpkt"];
659--1080[label="0.0120482;1pkt 1fpkt"];
659--1090[label="0.0140845;2pkt 2fpkt"];
659--1104[label="0.0227273;1pkt 1fpkt"];
659--1106[label="0.0140845;1pkt 1fpkt"];
659--1121[label="0.08;18pkt 18fpkt"];
659--1134[label="0.08;8pkt 8fpkt"];
659--1145[label="0.0142857;1pkt 1fpkt"];
659--1202[label="0.0120482;1pkt 1fpkt"];
659--1211[label="0.0078125;1pkt 1fpkt"];
659--1228[label="0.015625;1pkt 1fpkt"];
659--1243[label="0.0153846;1pkt 1fpkt"];
659--1253[label="0.0208333;2pkt 2fpkt"];
659--1260[label="0.0322581;2pkt 2fpkt"];
659--1281[label="0.171233;25pkt 25fpkt"];
659--1368[label="0.0446429;5pkt 5fpkt"];
659--1462[label="0.0037594;1pkt 1fpkt"];
659--1523[label="0.00490196;2pkt 2fpkt"];
659--1577[label="0.00303951;1pkt 1fpkt"];
659--1590[label="0.0645161;4pkt 4fpkt"];
659--1593[label="0.00286533;1pkt 1fpkt"];
659--1655[label="0.00680272;1pkt 1fpkt"];
659--1675[label="0.0291262;3pkt 3fpkt"];
659--1764[label="0.00806452;1pkt 1fpkt"];
659--1769[label="0.258065;8pkt 8fpkt"];
659--1774[label="0.0235294;2pkt 2fpkt"];
659--1786[label="0.0307692;4pkt 4fpkt"];
659--1847[label="0.00980392;4pkt 4fpkt"];
659--1849[label="0.0138889;1pkt 1fpkt"];
659--1855[label="0.0123457;1pkt 1fpkt"];
659--1878[label="0.0543478;15pkt 15fpkt"];
659--1979[label="1;408pkt 408fpkt"];
659--2060[label="0.0149254;2pkt 2fpkt"];
659--2063[label="0.00245098;1pkt 1fpkt"];
659--2073[label="0.0149254;1pkt 1fpkt"];
659--2100[label="0.011236;1pkt 1fpkt"];
659--2114[label="0.0142857;1pkt 1fpkt"];
659--2115[label="0.0322581;2pkt 2fpkt"];
659--2138[label="0.0124224;2pkt 2fpkt"];
659--2179[label="0.015625;1pkt 1fpkt"];
659--2267[label="0.00444444;1pkt 1fpkt"];
659--2278[label="0.00980392;4pkt 4fpkt"];
659--2360[label="0.0692308;18pkt 18fpkt"];
659--2577[label="0.0153846;1pkt 1fpkt"];
659--2586[label="0.0136986;1pkt 1fpkt"];
659--2601[label="0.0441176;18pkt 18fpkt"];
659--2623[label="0.010101;1pkt 1fpkt"];
659--2645[label="0.0117647;1pkt 1fpkt"];
659--2671[label="0.00869565;1pkt 1fpkt"];
659--2721[label="0.0444444;4pkt 4fpkt"];
659--2839[label="0.0140845;1pkt 1fpkt"];
659--2906[label="0.109649;25pkt 25fpkt"];
659--2953[label="0.0163934;1pkt 1fpkt"];
659--2966[label="0.00714286;1pkt 1fpkt"];
659--2979[label="0.0220994;4pkt 4fpkt"];
659--3052[label="0.210526;8pkt 8fpkt"];
659--3250[label="0.0512821;4pkt 4fpkt"];
659--3355[label="0.125;1pkt 1fpkt"];
659--3472[label="0.125;1pkt 1fpkt"];
659--3567[label="0.0181818;1pkt 1fpkt"];
659--3642[label="0.00519481;2pkt 2fpkt"];
659--3649[label="1;25pkt 25fpkt"];
659--3650[label="0.0392157;16pkt 16fpkt"];
659--3668[label="0.0122699;4pkt 4fpkt"];
659--3783[label="0.0192308;1pkt 1fpkt"];
659--3827[label="0.0333333;2pkt 2fpkt"];
659--3835[label="0.129032;4pkt 4fpkt"];
659--3881[label="0.0833333;3pkt 3fpkt"];
659--3885[label="0.0633803;18pkt 18fpkt"];
659--3890[label="0.0125786;2pkt 2fpkt"];
659--4095[label="0.0322581;1pkt 1fpkt"];
659--4116[label="0.010989;1pkt 1fpkt"];
659--4150[label="0.0206186;2pkt 2fpkt"];
659--4158[label="0.0128205;1pkt 1fpkt"];
659--4272[label="0.020202;2pkt 2fpkt"];
659--4288[label="0.0114943;1pkt 1fpkt"];
659--4499[label="0.0104167;1pkt 1fpkt"];
659--4631[label="0.0692308;18pkt 18fpkt"];
659--4764[label="0.0441176;18pkt 18fpkt"];
659--4804[label="0.00869565;1pkt 1fpkt"];
659--4829[label="0.043956;4pkt 4fpkt"];
659--4896[label="0.0142857;1pkt 1fpkt"];
659--4937[label="0.110132;25pkt 25fpkt"];
659--4977[label="0.00719424;1pkt 1fpkt"];
659--5134[label="0.0512821;4pkt 4fpkt"];
659--5189[label="0.142857;1pkt 1fpkt"];
659--5305[label="0.0181818;1pkt 1fpkt"];
659--5344[label="0.00520833;2pkt 2fpkt"];
659--5347[label="0.0392157;16pkt 16fpkt"];
659--5417[label="0.0196078;1pkt 1fpkt"];
659--5469[label="0.0126582;2pkt 2fpkt"];
659--5572[label="0.0333333;1pkt 1fpkt"];
659--5584[label="0.0111111;1pkt 1fpkt"];
659--5602[label="0.0206186;2pkt 2fpkt"];
659--5671[label="0.020202;2pkt 2fpkt"];
659--5682[label="0.0114943;1pkt 1fpkt"];
659--5778[label="0.0105263;1pkt 1fpkt"];
659--5844[label="0.0692308;18pkt 18fpkt"];
659--5920[label="0.00862069;1pkt 1fpkt"];
659--6012[label="0.00719424;1pkt 1fpkt"];
659--6078[label="0.0512821;4pkt 4fpkt"];
659--6144[label="0.0185185;1pkt 1fpkt"];
659--6162[label="0.00519481;2pkt 2fpkt"];
659--6165[label="0.0392157;16pkt 16fpkt"];
659--6312[label="0.020202;2pkt 2fpkt"];
892--902[label="0.0149254;1pkt 1fpkt"];
892--951[label="0.025;2pkt 2fpkt"];
892--1046[label="0.025;2pkt 2fpkt"];
892--1138[label="0.0263158;2pkt 2fpkt"];
892--1400[label="0.0125;1pkt 1fpkt"];
892--1427[label="0.0375;3pkt 3fpkt"];
892--1433[label="0.0125;1pkt 1fpkt"];
892--1463[label="0.0375;3pkt 3fpkt"];
892--1493[label="0.0375;3pkt 3fpkt"];
892--1522[label="0.025;2pkt 2fpkt"];
892--1548[label="0.025;2pkt 2fpkt"];
892--1650[label="0.111111;6pkt 6fpkt"];
892--1839[label="0.0375;3pkt 3fpkt"];
892--1841[label="0.037037;2pkt 2fpkt"];
892--1894[label="0.0625;5pkt 5fpkt"];
892--1930[label="0.0125;1pkt 1fpkt"];
892--1939[label="0.0125;1pkt 1fpkt"];
892--1979[label="0.0125;1pkt 1fpkt"];
892--1989[label="0.0298507;2pkt 2fpkt"];
892--1994[label="1;72pkt 72fpkt"];
892--2002[label="0.0125;1pkt 1fpkt"];
892--2027[label="0.025641;2pkt 2fpkt"];
892--2044[label="0.05;4pkt 4fpkt"];
892--2163[label="0.0125;1pkt 1fpkt"];
892--2214[label="0.0125;1pkt 1fpkt"];
892--2225[label="0.0125;1pkt 1fpkt"];
892--2245[label="0.025;2pkt 2fpkt"];
892--2284[label="0.0625;5pkt 5fpkt"];
892--2303[label="0.037037;2pkt 2fpkt"];
892--2304[label="0.0125;1pkt 1fpkt"];
892--2322[label="0.0125;1pkt 1fpkt"];
894--929[label="0.188811;27pkt 27fpkt"];
894--1053[label="0.174757;18pkt 18fpkt"];
894--1267[label="0.159236;25pkt 25fpkt"];
894--1291[label="0.0786517;7pkt 7fpkt"];
894--1438[label="0.0152284;3pkt 3fpkt"];
894--1494[label="0.0882353;9pkt 9fpkt"];
894--1562[label="0.333333;19pkt 19fpkt"];
894--1606[label="0.0913706;18pkt 18fpkt"];
894--1709[label="0.203252;25pkt 25fpkt"];
894--1998[label="1;146pkt 146fpkt"];
894--2018[label="0.176471;18pkt 18fpkt"];
894--2109[label="0.217742;27pkt 27fpkt"];
894--2154[label="0.0786517;7pkt 7fpkt"];
894--2194[label="0.159236;25pkt 25fpkt"];
894--2226[label="0.0152284;3pkt 3fpkt"];
900--931[label="1;35pkt 35fpkt"];
900--1080[label="0.0120482;1pkt 1fpkt"];
900--1090[label="0.0211268;3pkt 3fpkt"];
900--1202[label="0.060241;5pkt 5fpkt"];
900--1260[label="0.0322581;2pkt 2fpkt"];
900--1281[label="0.0821918;12pkt 12fpkt"];
900--1797[label="1;71pkt 71fpkt"];
900--1820[label="1;35pkt 35fpkt"];
900--1934[label="0.0120482;2pkt 2fpkt"];
900--2060[label="0.0223881;3pkt 3fpkt"];
900--2115[label="0.0322581;2pkt 2fpkt"];
900--2275[label="1;35pkt 35fpkt"];
900--2327[label="0.0060241;1pkt 1fpkt"];
900--2337[label="0.0060241;1pkt 1fpkt"];
900--2342[label="0.0060241;1pkt 1fpkt"];
900--2343[label="0.0060241;1pkt 1fpkt"];
900--2349[label="0.0060241;1pkt 1fpkt"];
900--2564[label="0.0181818;1pkt 1fpkt"];
900--2599[label="0.0666667;2pkt 2fpkt"];
900--2623[label="0.020202;2pkt 2fpkt"];
900--2690[label="0.454545;5pkt 5fpkt"];
900--2906[label="0.0722892;12pkt 12fpkt"];
900--3236[label="0.0120482;2pkt 2fpkt"];
900--3827[label="0.0333333;2pkt 2fpkt"];
900--3890[label="0.0188679;3pkt 3fpkt"];
900--4020[label="0.0206186;2pkt 2fpkt"];
900--4116[label="0.010989;1pkt 1fpkt"];
900--4288[label="0.0574713;5pkt 5fpkt"];
900--4438[label="1;34pkt 34fpkt"];
900--4740[label="0.0181818;1pkt 1fpkt"];
900--4762[label="0.0666667;2pkt 2fpkt"];
900--4937[label="0.0722892;12pkt 12fpkt"];
900--5126[label="0.0120482;2pkt 2fpkt"];
900--5469[label="0.0189873;3pkt 3fpkt"];
900--5528[label="0.0208333;2pkt 2fpkt"];
900--5584[label="0.0111111;1pkt 1fpkt"];
900--5682[label="0.0574713;5pkt 5fpkt"];
900--5746[label="1;34pkt 34fpkt"];
900--6248[label="0.0208333;2pkt 2fpkt"];
900--6344[label="1;34pkt 34fpkt"];
955--1090[label="0.05;2pkt 2fpkt"];
955--1145[label="0.075;3pkt 3fpkt"];
955--1869[label="0.75;30pkt 30fpkt"];
955--2060[label="0.05;2pkt 2fpkt"];
955--2114[label="0.075;3pkt 3fpkt"];
955--2802[label="0.1;4pkt 4fpkt"];
955--3650[label="0.025;1pkt 1fpkt"];
955--3890[label="0.05;2pkt 2fpkt"];
955--4158[label="0.075;3pkt 3fpkt"];
955--5347[label="0.025;1pkt 1fpkt"];
955--5469[label="0.05;2pkt 2fpkt"];
955--6165[label="0.025;1pkt 1fpkt"];
1053--1090[label="0.038835;4pkt 4fpkt"];
1053--1243[label="0.0307692;2pkt 2fpkt"];
1053--1253[label="0.0520833;5pkt 5fpkt"];
1053--1550[label="0.038835;4pkt 4fpkt"];
1053--1577[label="0.0291262;3pkt 3fpkt"];
1053--1800[label="0.0582524;6pkt 6fpkt"];
1053--1847[label="0.0679612;7pkt 7fpkt"];
1053--1998[label="0.174757;18pkt 18fpkt"];
1053--2018[label="1;102pkt 102fpkt"];
1053--2060[label="0.038835;4pkt 4fpkt"];
1053--2100[label="0.0561798;5pkt 5fpkt"];
1053--2278[label="0.0679612;7pkt 7fpkt"];
1053--2568[label="0.038835;4pkt 4fpkt"];
1053--2577[label="0.0307692;2pkt 2fpkt"];
1053--2671[label="0.0291262;3pkt 3fpkt"];
1053--2839[label="0.028169;2pkt 2fpkt"];
1053--2979[label="0.0291262;3pkt 3fpkt"];
1053--3642[label="0.0291262;3pkt 3fpkt"];
1053--3650[label="0.0291262;3pkt 3fpkt"];
1053--3783[label="0.0769231;4pkt 4fpkt"];
1053--3816[label="0.0625;2pkt 2fpkt"];
1053--3890[label="0.038835;4pkt 4fpkt"];
1053--4041[label="0.203883;21pkt 21fpkt"];
1053--4272[label="0.0505051;5pkt 5fpkt"];
1053--4312[label="0.030303;1pkt 1fpkt"];
1053--4744[label="0.038835;4pkt 4fpkt"];
1053--4804[label="0.0291262;3pkt 3fpkt"];
1053--4896[label="0.0285714;2pkt 2fpkt"];
1053--5344[label="0.0291262;3pkt 3fpkt"];
1053--5347[label="0.0291262;3pkt 3fpkt"];
1053--5417[label="0.0784314;4pkt 4fpkt"];
1053--5431[label="0.0625;2pkt 2fpkt"];
1053--5469[label="0.038835;4pkt 4fpkt"];
1053--5541[label="0.203883;21pkt 21fpkt"];
1053--5671[label="0.0505051;5pkt 5fpkt"];
1053--5920[label="0.0291262;3pkt 3fpkt"];
1053--6162[label="0.0291262;3pkt 3fpkt"];
1053--6165[label="0.0291262;3pkt 3fpkt"];
1053--6206[label="0.0625;2pkt 2fpkt"];
1053--6312[label="0.0505051;5pkt 5fpkt"];
1073--1090[label="0.0243902;2pkt 2fpkt"];
1073--1145[label="0.0285714;2pkt 2fpkt"];
1073--1253[label="0.0121951;1pkt 1fpkt"];
1073--1260[label="0.0322581;2pkt 2fpkt"];
1073--1523[label="0.0487805;4pkt 4fpkt"];
1073--1577[label="0.097561;8pkt 8fpkt"];
1073--1924[label="1;60pkt 60fpkt"];
1073--2060[label="0.0243902;2pkt 2fpkt"];
1073--2100[label="0.0121951;1pkt 1fpkt"];
1073--2114[label="0.0285714;2pkt 2fpkt"];
1073--2115[label="0.0322581;2pkt 2fpkt"];
1073--2623[label="0.0121951;1pkt 1fpkt"];
1073--2946[label="0.329268;27pkt 27fpkt"];
1073--2979[label="0.0121951;1pkt 1fpkt"];
1073--3642[label="0.121951;10pkt 10fpkt"];
1073--3783[label="0.0384615;2pkt 2fpkt"];
1073--3890[label="0.0243902;2pkt 2fpkt"];
1073--4158[label="0.025641;2pkt 2fpkt"];
1073--4272[label="0.0121951;1pkt 1fpkt"];
1073--4584[label="0.219512;18pkt 18fpkt"];
1073--5344[label="0.121951;10pkt 10fpkt"];
1073--5417[label="0.0392157;2pkt 2fpkt"];
1073--5469[label="0.0243902;2pkt 2fpkt"];
1073--5671[label="0.0121951;1pkt 1fpkt"];
1073--5825[label="0.219512;18pkt 18fpkt"];
1073--6162[label="0.121951;10pkt 10fpkt"];
1073--6312[label="0.0121951;1pkt 1fpkt"];
1073--6377[label="0.219512;18pkt 18fpkt"];
1134--1430[label="0.01;1pkt 1fpkt"];
1134--1433[label="0.1;10pkt 10fpkt"];
1134--1522[label="0.01;1pkt 1fpkt"];
1134--1542[label="0.47619;10pkt 10fpkt"];
1134--1966[label="0.01;1pkt 1fpkt"];
1134--1979[label="0.08;8pkt 8fpkt"];
1134--2225[label="0.1;10pkt 10fpkt"];
1134--2265[label="0.01;1pkt 1fpkt"];
1134--2304[label="0.01;1pkt 1fpkt"];
1154--1585[label="0.773333;58pkt 58fpkt"];
1154--1765[label="0.05;3pkt 3fpkt"];
1154--1939[label="0.04;3pkt 3fpkt"];
1154--3992[label="1;75pkt 75fpkt"];
1154--5517[label="0.986667;74pkt 74fpkt"];
1675--1839[label="0.0291262;3pkt 3fpkt"];
1675--1979[label="0.0291262;3pkt 3fpkt"];
1675--2226[label="0.427184;44pkt 44fpkt"];
2109--2278[label="0.016129;2pkt 2fpkt"];
2109--2568[label="0.0322581;4pkt 4fpkt"];
2109--2577[label="0.0153846;1pkt 1fpkt"];
2109--2589[label="0.0483871;6pkt 6fpkt"];
2109--2623[label="0.010101;1pkt 1fpkt"];
2109--2666[label="0.444444;40pkt 40fpkt"];
2109--2671[label="0.0173913;2pkt 2fpkt"];
2109--2802[label="0.0333333;2pkt 2fpkt"];
2109--3642[label="0.00806452;1pkt 1fpkt"];
2109--3749[label="1;3pkt 3fpkt"];
2109--3890[label="0.016129;2pkt 2fpkt"];
2109--3937[label="0.176471;3pkt 3fpkt"];
2109--4117[label="0.0638298;3pkt 3fpkt"];
2109--4189[label="0.125;3pkt 3fpkt"];
2109--4312[label="0.030303;1pkt 1fpkt"];
2109--4744[label="0.0322581;4pkt 4fpkt"];
2109--4755[label="0.0483871;6pkt 6fpkt"];
2109--4801[label="0.444444;40pkt 40fpkt"];
2109--4804[label="0.0173913;2pkt 2fpkt"];
2109--5344[label="0.00806452;1pkt 1fpkt"];
2109--5469[label="0.016129;2pkt 2fpkt"];
2109--5492[label="0.1875;3pkt 3fpkt"];
2109--5624[label="0.125;3pkt 3fpkt"];
2109--5905[label="0.0483871;6pkt 6fpkt"];
2109--5920[label="0.0172414;2pkt 2fpkt"];
2109--6162[label="0.00806452;1pkt 1fpkt"];
2109--6291[label="0.130435;3pkt 3fpkt"];
2601--4764[label="1;445pkt 445fpkt"];
</description>
    <slice>
      <filter src_ip="7.219.212.20" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_989{
style=filled;
color=gray75;
3899[label="199.153.87.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5476[label="199.153.87.157;1pkt 1fpkt", shape=invtriangle, color=brown];
6226[label="199.153.87.157;1pkt 1fpkt", shape=invhouse, color=bisque];
stat989[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.153.87.157:80, 143.38.14.56:1440}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1440: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3899--5476[label="1;1pkt 1fpkt"];
3899--6226[label="1;1pkt 1fpkt"];
5476--6226[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.14.56" dst_port="1440" src_ip="199.153.87.157" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_990{
style=filled;
color=gray75;
3437[label="200.5.165.103;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat990[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.5.165.103:80, 143.38.9.73:1639}[25%]&lt;BR/&gt;{200.5.165.103:80, 143.38.9.73:1640}[25%]&lt;BR/&gt;{200.5.165.103:80, 143.38.9.73:1664}[25%]&lt;BR/&gt;{200.5.165.103:80, 143.38.9.73:1665}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1665: (12.5%)&lt;BR/&gt; 1664: (12.5%)&lt;BR/&gt; 1640: (12.5%)&lt;BR/&gt; 1639: (12.5%)&gt;];
}
3437--5240[label="1;3pkt 3fpkt"];
3437--6120[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.9.73" dst_port="1665" src_ip="200.5.165.103" src_port="80"/>
      <filter dst_ip="143.38.9.73" dst_port="1664" src_ip="200.5.165.103" src_port="80"/>
      <filter dst_ip="143.38.9.73" dst_port="1640" src_ip="200.5.165.103" src_port="80"/>
      <filter dst_ip="143.38.9.73" dst_port="1639" src_ip="200.5.165.103" src_port="80"/>
    </slice>
    <from sec="1068526919" usec="0"/>
    <to sec="1068527103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_991{
style=filled;
color=gray75;
3910[label="204.131.146.158;195pkt 195fpkt", shape=pentagon, color=darkviolet];
5480[label="204.131.146.158;195pkt 195fpkt", shape=invtriangle, color=brown];
6228[label="204.131.146.158;193pkt 193fpkt", shape=invhouse, color=bisque];
stat991[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.131.146.158:0, *:0}[96.4103%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.3979%)&lt;BR/&gt; 80: (1.80103%)&lt;BR/&gt; 64739: (0.25729%)&lt;BR/&gt; 63807: (0.25729%)&lt;BR/&gt; 4718: (0.25729%)&gt;];
}
3910--5480[label="1;195pkt 195fpkt"];
3910--6228[label="1;193pkt 193fpkt"];
5480--6228[label="1;193pkt 193fpkt"];
</description>
    <slice>
      <filter src_ip="204.131.146.158"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_992{
style=filled;
color=gray75;
3915[label="219.62.14.159;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5484[label="219.62.14.159;2pkt 2fpkt", shape=invtriangle, color=brown];
stat992[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.62.14.159:80, 136.93.37.41:1987}[50%]&lt;BR/&gt;{219.62.14.159:80, 136.93.37.41:1988}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1988: (25%)&lt;BR/&gt; 1987: (25%)&gt;];
}
3915--5484[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.37.41" dst_port="1988" src_ip="219.62.14.159" src_port="80"/>
      <filter dst_ip="136.93.37.41" dst_port="1987" src_ip="219.62.14.159" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068526807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881072,1.78316,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_993{
style=filled;
color=gray75;
528[label="212.30.162.244;s;114pkt 114fpkt", shape=diamond, color=yellow];
633[label="200.145.58.136;s;252pkt 252fpkt", shape=diamond, color=yellow];
877[label="200.145.39.128;s;225pkt 225fpkt", shape=diamond, color=yellow];
889[label="212.30.161.193;s;123pkt 123fpkt", shape=diamond, color=yellow];
1624[label="208.31.231.222;d;17pkt 17fpkt", shape=hexagon, color=black];
stat993[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.145.58.136:80, *:*}[34.5205%]&lt;BR/&gt;{200.145.39.128:80, *:*}[30.8219%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1210: (0.205198%)&lt;BR/&gt; 3542: (0.136799%)&lt;BR/&gt; 3353: (0.136799%)&lt;BR/&gt; 3352: (0.136799%)&gt;];
}
528--644[label="0.0175439;2pkt 2fpkt"];
528--761[label="0.5;2pkt 2fpkt"];
528--1087[label="0.0147059;1pkt 1fpkt"];
528--1427[label="0.184211;21pkt 21fpkt"];
528--1430[label="0.00877193;1pkt 1fpkt"];
528--1433[label="0.00877193;1pkt 1fpkt"];
528--1463[label="0.0175439;2pkt 2fpkt"];
528--1538[label="1;76pkt 76fpkt"];
528--1838[label="0.0175439;2pkt 2fpkt"];
528--1839[label="0.236842;27pkt 27fpkt"];
528--1893[label="0.0238095;2pkt 2fpkt"];
528--1930[label="0.00877193;1pkt 1fpkt"];
528--2225[label="0.00877193;1pkt 1fpkt"];
528--2245[label="0.105263;12pkt 12fpkt"];
528--2265[label="0.00877193;1pkt 1fpkt"];
633--663[label="0.047619;3pkt 3fpkt"];
633--756[label="0.00793651;2pkt 2fpkt"];
633--763[label="0.136364;6pkt 6fpkt"];
633--796[label="0.00793651;2pkt 2fpkt"];
633--853[label="0.0212766;1pkt 1fpkt"];
633--882[label="0.0416667;2pkt 2fpkt"];
633--893[label="0.0410959;3pkt 3fpkt"];
633--1031[label="0.0172414;1pkt 1fpkt"];
633--1046[label="0.0208333;2pkt 2fpkt"];
633--1087[label="0.0294118;2pkt 2fpkt"];
633--1141[label="0.0263158;1pkt 1fpkt"];
633--1244[label="0.0344828;2pkt 2fpkt"];
633--1286[label="0.0454545;2pkt 2fpkt"];
633--1427[label="0.0674603;17pkt 17fpkt"];
633--1430[label="0.015873;4pkt 4fpkt"];
633--1438[label="0.00396825;1pkt 1fpkt"];
633--1439[label="0.2;1pkt 1fpkt"];
633--1463[label="0.031746;8pkt 8fpkt"];
633--1505[label="0.00970874;1pkt 1fpkt"];
633--1522[label="0.031746;8pkt 8fpkt"];
633--1570[label="0.00793651;2pkt 2fpkt"];
633--1609[label="0.0606061;2pkt 2fpkt"];
633--1624[label="0.0588235;1pkt 1fpkt"];
633--1664[label="0.0163934;2pkt 2fpkt"];
633--1758[label="1;144pkt 144fpkt"];
633--1838[label="0.015873;4pkt 4fpkt"];
633--1839[label="0.015873;4pkt 4fpkt"];
633--1930[label="0.0119048;3pkt 3fpkt"];
633--1939[label="0.015873;4pkt 4fpkt"];
633--1990[label="0.0416667;2pkt 2fpkt"];
633--2014[label="0.00396825;1pkt 1fpkt"];
633--2096[label="0.0377358;2pkt 2fpkt"];
633--2129[label="0.0172414;1pkt 1fpkt"];
633--2143[label="0.027027;2pkt 2fpkt"];
633--2163[label="0.0238095;6pkt 6fpkt"];
633--2164[label="0.00396825;1pkt 1fpkt"];
633--2226[label="0.00396825;1pkt 1fpkt"];
633--2245[label="0.0595238;15pkt 15fpkt"];
633--2265[label="0.015873;4pkt 4fpkt"];
633--2304[label="0.0277778;7pkt 7fpkt"];
877--882[label="0.0416667;2pkt 2fpkt"];
877--893[label="0.0547945;4pkt 4fpkt"];
877--1046[label="0.0104167;1pkt 1fpkt"];
877--1087[label="0.0147059;1pkt 1fpkt"];
877--1141[label="0.0263158;1pkt 1fpkt"];
877--1268[label="0.0123457;1pkt 1fpkt"];
877--1286[label="0.0681818;3pkt 3fpkt"];
877--1424[label="0.00444444;1pkt 1fpkt"];
877--1427[label="0.08;18pkt 18fpkt"];
877--1463[label="0.0311111;7pkt 7fpkt"];
877--1522[label="0.0222222;5pkt 5fpkt"];
877--1570[label="0.00444444;1pkt 1fpkt"];
877--1573[label="0.00444444;1pkt 1fpkt"];
877--1609[label="0.0606061;2pkt 2fpkt"];
877--1652[label="0.00444444;1pkt 1fpkt"];
877--1664[label="0.00819672;1pkt 1fpkt"];
877--1783[label="1;109pkt 109fpkt"];
877--1838[label="0.0222222;5pkt 5fpkt"];
877--1839[label="0.0222222;5pkt 5fpkt"];
877--1930[label="0.00444444;1pkt 1fpkt"];
877--1939[label="0.0222222;5pkt 5fpkt"];
877--1990[label="0.0416667;2pkt 2fpkt"];
877--2143[label="0.0135135;1pkt 1fpkt"];
877--2163[label="0.0444444;10pkt 10fpkt"];
877--2245[label="0.0133333;3pkt 3fpkt"];
877--2304[label="0.00888889;2pkt 2fpkt"];
877--3635[label="1;225pkt 225fpkt"];
889--1427[label="0.097561;12pkt 12fpkt"];
889--1433[label="0.00813008;1pkt 1fpkt"];
889--1463[label="0.0162602;2pkt 2fpkt"];
889--1522[label="0.00813008;1pkt 1fpkt"];
889--1794[label="1;84pkt 84fpkt"];
889--1838[label="0.0162602;2pkt 2fpkt"];
889--1839[label="0.252033;31pkt 31fpkt"];
889--2225[label="0.00813008;1pkt 1fpkt"];
889--2245[label="0.0894309;11pkt 11fpkt"];
889--2304[label="0.00813008;1pkt 1fpkt"];
889--4194[label="1;123pkt 123fpkt"];
1624--1758[label="0.0588235;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="200.145.58.136" src_port="80"/>
      <filter src_ip="200.145.39.128" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_994{
style=filled;
color=gray75;
3939[label="6.82.64.162;153pkt 153fpkt", shape=pentagon, color=darkviolet];
5493[label="6.82.64.162;152pkt 152fpkt", shape=invtriangle, color=brown];
stat994[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.82.64.162:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3939--5493[label="1;152pkt 152fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="6.82.64.162" src_port="1028"/>
    </slice>
    <from sec="1068527478" usec="0"/>
    <to sec="1068527502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_995{
style=filled;
color=gray75;
3942[label="202.129.164.162;148pkt 148fpkt", shape=pentagon, color=darkviolet];
5495[label="202.129.164.162;148pkt 148fpkt", shape=invtriangle, color=brown];
6234[label="202.129.164.162;147pkt 147fpkt", shape=invhouse, color=bisque];
stat995[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.129.164.162:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3942--5495[label="1;148pkt 148fpkt"];
3942--6234[label="1;147pkt 147fpkt"];
5495--6234[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter src_ip="202.129.164.162"/>
    </slice>
    <from sec="1068526813" usec="0"/>
    <to sec="1068527611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.95.8.163"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_997{
style=filled;
color=gray75;
3970[label="212.30.119.166;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5504[label="212.30.119.166;3pkt 3fpkt", shape=invtriangle, color=brown];
stat997[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.119.166:1863, 143.38.15.162:1035}[33.3333%]&lt;BR/&gt;{212.30.119.166:1863, 143.38.14.164:1106}[33.3333%]&lt;BR/&gt;{212.30.119.166:1863, 143.38.15.219:3449}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3449: (16.6667%)&lt;BR/&gt; 1106: (16.6667%)&lt;BR/&gt; 1035: (16.6667%)&gt;];
}
3970--5504[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.15.219" dst_port="3449" src_ip="212.30.119.166" src_port="1863"/>
      <filter dst_ip="143.38.14.164" dst_port="1106" src_ip="212.30.119.166" src_port="1863"/>
      <filter dst_ip="143.38.15.162" dst_port="1035" src_ip="212.30.119.166" src_port="1863"/>
    </slice>
    <from sec="1068526833" usec="0"/>
    <to sec="1068527692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_998{
style=filled;
color=gray75;
3983[label="98.15.166.168;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5512[label="98.15.166.168;11pkt 11fpkt", shape=invtriangle, color=brown];
6243[label="98.15.166.168;10pkt 10fpkt", shape=invhouse, color=bisque];
stat998[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.15.166.168:80, 161.29.55.38:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4804: (4.83871%)&lt;BR/&gt; 4636: (4.83871%)&lt;BR/&gt; 4567: (4.83871%)&lt;BR/&gt; 4503: (4.83871%)&gt;];
}
3983--5512[label="1;10pkt 10fpkt"];
3983--6243[label="1;10pkt 10fpkt"];
5512--6243[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.55.38" src_ip="98.15.166.168" src_port="80"/>
    </slice>
    <from sec="1068526819" usec="0"/>
    <to sec="1068527561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.117.153.169"/>
    </slice>
    <from sec="1068527484" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1000{
style=filled;
color=gray75;
4013[label="96.227.216.171;162pkt 162fpkt", shape=pentagon, color=darkviolet];
5524[label="96.227.216.171;161pkt 161fpkt", shape=invtriangle, color=brown];
stat1000[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.227.216.171:61036, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61036: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4013--5524[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.227.216.171" src_port="61036"/>
    </slice>
    <from sec="1068527475" usec="0"/>
    <to sec="1068527501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1001{
style=filled;
color=gray75;
4024[label="209.50.18.173;105pkt 105fpkt", shape=pentagon, color=darkviolet];
5530[label="209.50.18.173;104pkt 104fpkt", shape=invtriangle, color=brown];
6249[label="209.50.18.173;105pkt 105fpkt", shape=invhouse, color=bisque];
stat1001[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.50.18.173:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4024--5530[label="1;104pkt 104fpkt"];
4024--6249[label="1;105pkt 105fpkt"];
5530--6249[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter src_ip="209.50.18.173"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1002{
style=filled;
color=gray75;
4029[label="208.215.89.173;248pkt 248fpkt", shape=pentagon, color=darkviolet];
5534[label="208.215.89.173;248pkt 248fpkt", shape=invtriangle, color=brown];
stat1002[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.215.89.173:0, *:0}[99.5968%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5968%)&lt;BR/&gt; 55311: (0.201613%)&lt;BR/&gt; 53: (0.201613%)&gt;];
}
4029--5534[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter src_ip="208.215.89.173"/>
    </slice>
    <from sec="1068526809" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1003{
style=filled;
color=gray75;
4033[label="202.206.254.173;122pkt 122fpkt", shape=pentagon, color=darkviolet];
5536[label="202.206.254.173;122pkt 122fpkt", shape=invtriangle, color=brown];
6251[label="202.206.254.173;122pkt 122fpkt", shape=invhouse, color=bisque];
stat1003[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.206.254.173:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4033--5536[label="1;122pkt 122fpkt"];
4033--6251[label="1;122pkt 122fpkt"];
5536--6251[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.206.254.173" src_port="1031"/>
    </slice>
    <from sec="1068527179" usec="0"/>
    <to sec="1068527206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1004{
style=filled;
color=gray75;
4039[label="209.244.176.174;125pkt 125fpkt", shape=pentagon, color=darkviolet];
5539[label="209.244.176.174;125pkt 125fpkt", shape=invtriangle, color=brown];
stat1004[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.244.176.174:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4039--5539[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.244.176.174" src_port="1028"/>
    </slice>
    <from sec="1068527666" usec="0"/>
    <to sec="1068527686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12377,1.84878,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1005{
style=filled;
color=gray75;
93[label="215.25.132.234s;466pkt 466fpkt", shape=rectangle, color=red];
4040[label="203.251.187.174;138pkt 138fpkt", shape=pentagon, color=darkviolet];
4482[label="215.25.132.234;250pkt 250fpkt", shape=pentagon, color=darkviolet];
5540[label="203.251.187.174;138pkt 138fpkt", shape=invtriangle, color=brown];
5768[label="215.25.132.234;249pkt 249fpkt", shape=invtriangle, color=brown];
stat1005[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.25.132.234:1026, *:137}[48.3559%]&lt;BR/&gt;{203.251.187.174:1028, *:137}[26.6925%]&lt;BR/&gt;{198.66.228.8:1030, *:137}[24.9516%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1026: (29.4521%)&lt;BR/&gt; 1028: (15.3505%)&lt;BR/&gt; 1030: (5.19742%)&gt;];
}
93--129[label="0.409871;191pkt 191fpkt"];
93--177[label="0.409871;191pkt 191fpkt"];
93--4040[label="0.76087;105pkt 105fpkt"];
93--4482[label="0.928;232pkt 232fpkt"];
93--5540[label="0.76087;105pkt 105fpkt"];
93--5768[label="0.927711;231pkt 231fpkt"];
4040--5540[label="1;138pkt 138fpkt"];
4482--5768[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="215.25.132.234" src_port="1026"/>
      <filter dst_port="137" src_ip="203.251.187.174" src_port="1028"/>
      <filter dst_port="137" src_ip="198.66.228.8" src_port="1030"/>
    </slice>
    <from sec="1068526948" usec="0"/>
    <to sec="1068526979" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1006{
style=filled;
color=gray75;
4046[label="202.201.107.175;211pkt 211fpkt", shape=pentagon, color=darkviolet];
5544[label="202.201.107.175;210pkt 210fpkt", shape=invtriangle, color=brown];
stat1006[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.201.107.175:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4046--5544[label="1;210pkt 210fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.201.107.175" src_port="1029"/>
    </slice>
    <from sec="1068527502" usec="0"/>
    <to sec="1068527535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1007{
style=filled;
color=gray75;
4052[label="4.122.146.176;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5546[label="4.122.146.176;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1007[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.122.146.176:80, 136.93.245.43:1303}[33.3333%]&lt;BR/&gt;{4.122.146.176:80, 136.93.245.43:1304}[33.3333%]&lt;BR/&gt;{4.122.146.176:80, 136.93.245.43:1305}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1305: (16.6667%)&lt;BR/&gt; 1304: (16.6667%)&lt;BR/&gt; 1303: (16.6667%)&gt;];
}
4052--5546[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.245.43" dst_port="1305" src_ip="4.122.146.176" src_port="80"/>
      <filter dst_ip="136.93.245.43" dst_port="1304" src_ip="4.122.146.176" src_port="80"/>
      <filter dst_ip="136.93.245.43" dst_port="1303" src_ip="4.122.146.176" src_port="80"/>
    </slice>
    <from sec="1068527263" usec="0"/>
    <to sec="1068527299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1008{
style=filled;
color=gray75;
4058[label="98.138.6.177;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5552[label="98.138.6.177;14pkt 14fpkt", shape=invtriangle, color=brown];
6258[label="98.138.6.177;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1008[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.138.6.177:80, 146.153.78.22:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59378: (3.57143%)&lt;BR/&gt; 59377: (3.57143%)&lt;BR/&gt; 59376: (3.57143%)&lt;BR/&gt; 59375: (3.57143%)&gt;];
}
4058--5552[label="1;14pkt 14fpkt"];
4058--6258[label="1;14pkt 14fpkt"];
5552--6258[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="146.153.78.22" src_ip="98.138.6.177" src_port="80"/>
    </slice>
    <from sec="1068527173" usec="0"/>
    <to sec="1068527347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1009{
style=filled;
color=gray75;
555[label="149.132.109.177;s;6pkt 6fpkt", shape=diamond, color=yellow];
1552[label="149.132.109.177;s;6pkt 6fpkt", shape=hexagon, color=black];
4059[label="149.132.109.177;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5553[label="149.132.109.177;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1009[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.132.109.177:80, 208.31.228.42:*}[76.4706%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4681: (4.44444%)&lt;BR/&gt; 4433: (4.44444%)&lt;BR/&gt; 4211: (4.44444%)&lt;BR/&gt; 2681: (4.44444%)&gt;];
}
555--1438[label="0.833333;5pkt 5fpkt"];
555--1552[label="1;6pkt 6fpkt"];
555--2163[label="0.166667;1pkt 1fpkt"];
555--2226[label="0.833333;5pkt 5fpkt"];
555--4059[label="1;6pkt 6fpkt"];
555--5553[label="0.833333;5pkt 5fpkt"];
1552--2163[label="0.166667;1pkt 1fpkt"];
1552--2226[label="0.833333;5pkt 5fpkt"];
1552--4059[label="1;6pkt 6fpkt"];
1552--5553[label="0.833333;5pkt 5fpkt"];
4059--5553[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.42" src_ip="149.132.109.177" src_port="80"/>
    </slice>
    <from sec="1068526840" usec="0"/>
    <to sec="1068527573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1010{
style=filled;
color=gray75;
4071[label="209.176.131.178;64pkt 64fpkt", shape=pentagon, color=darkviolet];
5560[label="209.176.131.178;64pkt 64fpkt", shape=invtriangle, color=brown];
6263[label="209.176.131.178;64pkt 64fpkt", shape=invhouse, color=bisque];
stat1010[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.176.131.178:0, *:0}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (87.5%)&lt;BR/&gt; 80: (4.6875%)&lt;BR/&gt; 135: (1.5625%)&lt;BR/&gt; 7643: (0.78125%)&lt;BR/&gt; 5435: (0.78125%)&gt;];
}
4071--5560[label="1;64pkt 64fpkt"];
4071--6263[label="1;64pkt 64fpkt"];
5560--6263[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter src_ip="209.176.131.178"/>
    </slice>
    <from sec="1068526844" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.162.144.178"/>
    </slice>
    <from sec="1068527460" usec="0"/>
    <to sec="1068527495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1013{
style=filled;
color=gray75;
4091[label="209.0.110.180;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5571[label="209.0.110.180;3pkt 3fpkt", shape=invtriangle, color=brown];
6269[label="209.0.110.180;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1013[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.0.110.180:62944, 143.176.41.0:445}[33.3333%]&lt;BR/&gt;{209.0.110.180:62948, 143.176.41.0:445}[33.3333%]&lt;BR/&gt;{209.0.110.180:62952, 143.176.41.0:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 62952: (16.6667%)&lt;BR/&gt; 62948: (16.6667%)&lt;BR/&gt; 62944: (16.6667%)&gt;];
}
4091--5571[label="1;3pkt 3fpkt"];
4091--6269[label="1;3pkt 3fpkt"];
5571--6269[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.176.41.0" dst_port="445" src_ip="209.0.110.180" src_port="62952"/>
      <filter dst_ip="143.176.41.0" dst_port="445" src_ip="209.0.110.180" src_port="62948"/>
      <filter dst_ip="143.176.41.0" dst_port="445" src_ip="209.0.110.180" src_port="62944"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1014{
style=filled;
color=gray75;
4104[label="203.120.6.182;158pkt 158fpkt", shape=pentagon, color=darkviolet];
5577[label="203.120.6.182;157pkt 157fpkt", shape=invtriangle, color=brown];
stat1014[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.120.6.182:3114, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3114: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4104--5577[label="1;157pkt 157fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="203.120.6.182" src_port="3114"/>
    </slice>
    <from sec="1068526859" usec="0"/>
    <to sec="1068526887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1015{
style=filled;
color=gray75;
4106[label="6.184.35.182;215pkt 215fpkt", shape=pentagon, color=darkviolet];
5578[label="6.184.35.182;215pkt 215fpkt", shape=invtriangle, color=brown];
stat1015[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.184.35.182:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4106--5578[label="1;215pkt 215fpkt"];
</description>
    <slice>
      <filter src_ip="6.184.35.182"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1016{
style=filled;
color=gray75;
4115[label="208.211.111.183;211pkt 211fpkt", shape=pentagon, color=darkviolet];
5583[label="208.211.111.183;211pkt 211fpkt", shape=invtriangle, color=brown];
stat1016[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.211.111.183:0, *:0}[95.2607%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.2607%)&lt;BR/&gt; 80: (2.36967%)&lt;BR/&gt; 24399: (0.236967%)&lt;BR/&gt; 21727: (0.236967%)&lt;BR/&gt; 21335: (0.236967%)&gt;];
}
4115--5583[label="1;211pkt 211fpkt"];
</description>
    <slice>
      <filter src_ip="208.211.111.183"/>
    </slice>
    <from sec="1068526807" usec="0"/>
    <to sec="1068527693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1017{
style=filled;
color=gray75;
1106[label="212.118.48.147;s;71pkt 71fpkt", shape=diamond, color=yellow];
stat1017[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.118.48.147:80, *:*}[98.5915%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2958%)&lt;BR/&gt; 61798: (0.704225%)&lt;BR/&gt; 60809: (0.704225%)&lt;BR/&gt; 60808: (0.704225%)&lt;BR/&gt; 60032: (0.704225%)&gt;];
}
1106--1146[label="0.0140845;1pkt 1fpkt"];
1106--1174[label="0.03125;2pkt 2fpkt"];
1106--1188[label="0.0350877;2pkt 2fpkt"];
1106--1269[label="0.0140845;1pkt 1fpkt"];
1106--1291[label="0.126761;9pkt 9fpkt"];
1106--1296[label="0.0140845;1pkt 1fpkt"];
1106--1381[label="0.0212766;1pkt 1fpkt"];
1106--1427[label="0.140845;10pkt 10fpkt"];
1106--1433[label="0.0140845;1pkt 1fpkt"];
1106--1493[label="0.028169;2pkt 2fpkt"];
1106--1522[label="0.0140845;1pkt 1fpkt"];
1106--1596[label="0.028169;2pkt 2fpkt"];
1106--1841[label="0.0185185;1pkt 1fpkt"];
1106--1893[label="0.028169;2pkt 2fpkt"];
1106--1939[label="0.028169;2pkt 2fpkt"];
1106--1979[label="0.0140845;1pkt 1fpkt"];
1106--1991[label="0.0140845;1pkt 1fpkt"];
1106--2012[label="0.028169;2pkt 2fpkt"];
1106--2025[label="0.031746;2pkt 2fpkt"];
1106--2034[label="0.0350877;2pkt 2fpkt"];
1106--2044[label="0.028169;2pkt 2fpkt"];
1106--2073[label="1;67pkt 67fpkt"];
1106--2149[label="0.028169;2pkt 2fpkt"];
1106--2154[label="0.126761;9pkt 9fpkt"];
1106--2156[label="0.0140845;1pkt 1fpkt"];
1106--2163[label="0.028169;2pkt 2fpkt"];
1106--2164[label="0.0140845;1pkt 1fpkt"];
1106--2225[label="0.0140845;1pkt 1fpkt"];
1106--2245[label="0.084507;6pkt 6fpkt"];
1106--2303[label="0.0185185;1pkt 1fpkt"];
1106--2304[label="0.0140845;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="212.118.48.147" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1018{
style=filled;
color=gray75;
4120[label="0.38.25.184;204pkt 204fpkt", shape=pentagon, color=darkviolet];
5586[label="0.38.25.184;203pkt 203fpkt", shape=invtriangle, color=brown];
6275[label="0.38.25.184;204pkt 204fpkt", shape=invhouse, color=bisque];
stat1018[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.38.25.184:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4120--5586[label="1;203pkt 203fpkt"];
4120--6275[label="1;204pkt 204fpkt"];
5586--6275[label="1;203pkt 203fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="0.38.25.184" src_port="1026"/>
    </slice>
    <from sec="1068527074" usec="0"/>
    <to sec="1068527106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1019{
style=filled;
color=gray75;
4134[label="7.84.1.186;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5590[label="7.84.1.186;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1019[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.84.1.186:80, 208.31.196.150:51226}[50%]&lt;BR/&gt;{7.84.1.186:80, 208.31.196.150:51718}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51718: (25%)&lt;BR/&gt; 51226: (25%)&gt;];
}
4134--5590[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.196.150" dst_port="51718" src_ip="7.84.1.186" src_port="80"/>
      <filter dst_ip="208.31.196.150" dst_port="51226" src_ip="7.84.1.186" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.837732,1.70559,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1020{
style=filled;
color=gray75;
579[label="1.85.67.186;s;256pkt 256fpkt", shape=diamond, color=yellow];
4136[label="1.85.67.186;256pkt 256fpkt", shape=pentagon, color=darkviolet];
5591[label="1.85.67.186;256pkt 256fpkt", shape=invtriangle, color=brown];
6277[label="1.85.67.186;256pkt 256fpkt", shape=invhouse, color=bisque];
stat1020[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.85.67.186:*, *:139}[99.2188%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.6094%)&lt;BR/&gt; 0: (0.78125%)&lt;BR/&gt; 1395: (0.195312%)&lt;BR/&gt; 1394: (0.195312%)&lt;BR/&gt; 1393: (0.195312%)&gt;];
}
579--4136[label="1;256pkt 256fpkt"];
579--5591[label="1;256pkt 256fpkt"];
579--6277[label="1;256pkt 256fpkt"];
4136--5591[label="1;256pkt 256fpkt"];
4136--6277[label="1;256pkt 256fpkt"];
5591--6277[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="1.85.67.186"/>
    </slice>
    <from sec="1068526946" usec="0"/>
    <to sec="1068526999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1021{
style=filled;
color=gray75;
4139[label="199.134.160.186;90pkt 90fpkt", shape=pentagon, color=darkviolet];
5594[label="199.134.160.186;89pkt 89fpkt", shape=invtriangle, color=brown];
6279[label="199.134.160.186;90pkt 90fpkt", shape=invhouse, color=bisque];
stat1021[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.134.160.186:0, *:0}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (89.9628%)&lt;BR/&gt; 135: (5.01859%)&lt;BR/&gt; 62322: (0.557621%)&lt;BR/&gt; 62021: (0.557621%)&lt;BR/&gt; 59055: (0.557621%)&gt;];
}
4139--5594[label="1;89pkt 89fpkt"];
4139--6279[label="1;90pkt 90fpkt"];
5594--6279[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter src_ip="199.134.160.186"/>
    </slice>
    <from sec="1068526812" usec="0"/>
    <to sec="1068527686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1022{
style=filled;
color=gray75;
4140[label="202.212.172.186;105pkt 105fpkt", shape=pentagon, color=darkviolet];
5595[label="202.212.172.186;105pkt 105fpkt", shape=invtriangle, color=brown];
stat1022[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.212.172.186:0, *:0}[96.1905%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.1905%)&lt;BR/&gt; 80: (1.90476%)&lt;BR/&gt; 4719: (0.47619%)&lt;BR/&gt; 4589: (0.47619%)&lt;BR/&gt; 1692: (0.47619%)&gt;];
}
4140--5595[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter src_ip="202.212.172.186"/>
    </slice>
    <from sec="1068526816" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1023{
style=filled;
color=gray75;
4141[label="197.101.16.187;349pkt 349fpkt", shape=pentagon, color=darkviolet];
5596[label="197.101.16.187;348pkt 348fpkt", shape=invtriangle, color=brown];
stat1023[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.101.16.187:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4141--5596[label="1;348pkt 348fpkt"];
</description>
    <slice>
      <filter src_ip="197.101.16.187"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564047,1.73089,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1024{
style=filled;
color=gray75;
377[label="161.29.49.169;d;16pkt 16fpkt", shape=diamond, color=yellow];
2511[label="4.162.156.14;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat1024[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 161.29.49.169:25}[48%]&lt;BR/&gt;{4.162.156.14:*, *:25}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.0769%)&lt;BR/&gt; 35391: (3.84615%)&lt;BR/&gt; 65263: (1.92308%)&lt;BR/&gt; 62578: (1.92308%)&lt;BR/&gt; 51423: (1.92308%)&gt;];
}
377--653[label="0.5;2pkt 2fpkt"];
377--860[label="0.0625;1pkt 1fpkt"];
377--1529[label="1;16pkt 16fpkt"];
377--1774[label="0.0625;1pkt 1fpkt"];
377--2372[label="0.0625;1pkt 1fpkt"];
377--2511[label="0.1;1pkt 1fpkt"];
377--3960[label="0.1;1pkt 1fpkt"];
377--4150[label="0.0625;1pkt 1fpkt"];
377--4420[label="0.125;2pkt 2fpkt"];
377--5602[label="0.0625;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="4.162.156.14"/>
      <filter dst_ip="161.29.49.169" dst_port="25"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1025{
style=filled;
color=gray75;
4165[label="202.140.212.189;137pkt 137fpkt", shape=pentagon, color=darkviolet];
5609[label="202.140.212.189;137pkt 137fpkt", shape=invtriangle, color=brown];
stat1025[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.140.212.189:0, *:0}[95.6204%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.6204%)&lt;BR/&gt; 80: (2.18978%)&lt;BR/&gt; 53891: (0.364964%)&lt;BR/&gt; 52508: (0.364964%)&lt;BR/&gt; 49779: (0.364964%)&gt;];
}
4165--5609[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter src_ip="202.140.212.189"/>
    </slice>
    <from sec="1068526807" usec="0"/>
    <to sec="1068527679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564047,1.73089,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1026{
style=filled;
color=gray75;
512[label="161.29.8.148;d;317pkt 317fpkt", shape=diamond, color=yellow];
838[label="209.176.129.170;d;256pkt 256fpkt", shape=diamond, color=yellow];
4521[label="208.113.21.240;55pkt 55fpkt", shape=pentagon, color=darkviolet];
stat1026[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.113.141.68:*, 161.29.8.148:80}[42.9032%]&lt;BR/&gt;{*:53, 209.176.129.170:4069}[20.9677%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.6465%)&lt;BR/&gt; 53: (13.7739%)&lt;BR/&gt; 25: (10.7484%)&lt;BR/&gt; 4069: (10.3503%)&lt;BR/&gt; 0: (3.02548%)&gt;];
}
512--679[label="1;266pkt 266fpkt"];
512--860[label="0.0107527;1pkt 1fpkt"];
512--961[label="0.0138889;1pkt 1fpkt"];
512--967[label="0.0714286;1pkt 1fpkt"];
512--1312[label="0.00315457;1pkt 1fpkt"];
512--1618[label="1;266pkt 266fpkt"];
512--1774[label="0.0117647;1pkt 1fpkt"];
512--1849[label="0.0138889;1pkt 1fpkt"];
512--1946[label="0.0714286;1pkt 1fpkt"];
512--2080[label="1;285pkt 285fpkt"];
512--2159[label="0.00315457;1pkt 1fpkt"];
512--2321[label="0.00315457;1pkt 1fpkt"];
512--2327[label="0.0189274;6pkt 6fpkt"];
512--2342[label="0.0189274;6pkt 6fpkt"];
512--2772[label="0.047619;1pkt 1fpkt"];
512--2847[label="0.0344828;1pkt 1fpkt"];
512--2883[label="0.0384615;1pkt 1fpkt"];
512--2991[label="0.107143;3pkt 3fpkt"];
512--3036[label="0.392857;22pkt 22fpkt"];
512--3091[label="1;265pkt 265fpkt"];
512--3734[label="0.0833333;2pkt 2fpkt"];
512--4146[label="0.03125;1pkt 1fpkt"];
512--4150[label="0.0103093;1pkt 1fpkt"];
512--4521[label="0.145455;8pkt 8fpkt"];
512--4859[label="0.05;1pkt 1fpkt"];
512--4904[label="0.0344828;1pkt 1fpkt"];
512--5014[label="0.392857;22pkt 22fpkt"];
512--5043[label="1;265pkt 265fpkt"];
512--5598[label="0.03125;1pkt 1fpkt"];
512--5602[label="0.0103093;1pkt 1fpkt"];
512--5949[label="0.047619;1pkt 1fpkt"];
512--5976[label="0.0357143;1pkt 1fpkt"];
838--961[label="0.0138889;1pkt 1fpkt"];
838--1002[label="0.186667;14pkt 14fpkt"];
838--1026[label="0.0263158;1pkt 1fpkt"];
838--1070[label="0.00390625;1pkt 1fpkt"];
838--1137[label="0.016129;1pkt 1fpkt"];
838--1332[label="0.0188679;1pkt 1fpkt"];
838--1341[label="0.0166667;1pkt 1fpkt"];
838--1592[label="0.0123457;1pkt 1fpkt"];
838--1698[label="0.00917431;1pkt 1fpkt"];
838--1751[label="1;127pkt 127fpkt"];
838--1849[label="0.0138889;1pkt 1fpkt"];
838--1895[label="0.0263158;1pkt 1fpkt"];
838--1988[label="0.016129;1pkt 1fpkt"];
838--2029[label="0.00390625;1pkt 1fpkt"];
838--2326[label="0.0195312;5pkt 5fpkt"];
838--2336[label="0.015625;4pkt 4fpkt"];
838--2341[label="0.0195312;5pkt 5fpkt"];
838--2343[label="0.00390625;1pkt 1fpkt"];
838--2349[label="0.00390625;1pkt 1fpkt"];
838--2454[label="0.0344828;1pkt 1fpkt"];
838--2702[label="0.0416667;1pkt 1fpkt"];
838--2728[label="0.0434783;1pkt 1fpkt"];
838--2767[label="0.00840336;1pkt 1fpkt"];
838--2859[label="0.00390625;1pkt 1fpkt"];
838--2872[label="0.025;1pkt 1fpkt"];
838--2908[label="0.0163934;1pkt 1fpkt"];
838--2928[label="0.0263158;1pkt 1fpkt"];
838--3251[label="0.016129;1pkt 1fpkt"];
838--3351[label="0.0322581;1pkt 1fpkt"];
838--3363[label="0.0909091;1pkt 1fpkt"];
838--3459[label="0.0588235;2pkt 2fpkt"];
838--3481[label="0.0175439;1pkt 1fpkt"];
838--3485[label="0.0625;1pkt 1fpkt"];
838--3551[label="0.0285714;1pkt 1fpkt"];
838--3688[label="0.0277778;1pkt 1fpkt"];
838--3784[label="0.02;1pkt 1fpkt"];
838--3955[label="0.05;1pkt 1fpkt"];
838--4053[label="0.0204082;1pkt 1fpkt"];
838--4255[label="0.00390625;1pkt 1fpkt"];
838--4343[label="0.175;14pkt 14fpkt"];
838--4489[label="0.0133333;1pkt 1fpkt"];
838--4528[label="0.037037;1pkt 1fpkt"];
838--4539[label="0.0151515;1pkt 1fpkt"];
838--4818[label="0.04;1pkt 1fpkt"];
838--4913[label="0.00390625;1pkt 1fpkt"];
838--4952[label="0.027027;1pkt 1fpkt"];
838--5135[label="0.016129;1pkt 1fpkt"];
838--5247[label="0.030303;1pkt 1fpkt"];
838--5259[label="0.0178571;1pkt 1fpkt"];
838--5370[label="0.0277778;1pkt 1fpkt"];
838--5547[label="0.0208333;1pkt 1fpkt"];
838--5802[label="0.0151515;1pkt 1fpkt"];
838--5995[label="0.0163934;1pkt 1fpkt"];
838--6256[label="0.0204082;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.8.148" dst_port="80" src_ip="208.113.141.68"/>
      <filter dst_ip="209.176.129.170" dst_port="4069" src_port="53"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.16.72.190"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1028{
style=filled;
color=gray75;
4175[label="193.50.24.191;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5616[label="193.50.24.191;12pkt 12fpkt", shape=invtriangle, color=brown];
6287[label="193.50.24.191;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1028[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.50.24.191:110, 143.38.8.36:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 4980: (4.16667%)&lt;BR/&gt; 4973: (4.16667%)&lt;BR/&gt; 4966: (4.16667%)&lt;BR/&gt; 4959: (4.16667%)&gt;];
}
4175--5616[label="1;12pkt 12fpkt"];
4175--6287[label="1;12pkt 12fpkt"];
5616--6287[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.8.36" src_ip="193.50.24.191" src_port="110"/>
    </slice>
    <from sec="1068526857" usec="0"/>
    <to sec="1068527652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1029{
style=filled;
color=gray75;
4185[label="6.186.89.192;107pkt 107fpkt", shape=pentagon, color=darkviolet];
5621[label="6.186.89.192;106pkt 106fpkt", shape=invtriangle, color=brown];
stat1029[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.186.89.192:0, *:0}[95.3271%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.3052%)&lt;BR/&gt; 135: (2.34742%)&lt;BR/&gt; 32963: (0.469484%)&lt;BR/&gt; 32363: (0.469484%)&lt;BR/&gt; 31750: (0.469484%)&gt;];
}
4185--5621[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter src_ip="6.186.89.192"/>
    </slice>
    <from sec="1068526822" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1030{
style=filled;
color=gray75;
4191[label="96.130.96.193;108pkt 108fpkt", shape=pentagon, color=darkviolet];
5626[label="96.130.96.193;108pkt 108fpkt", shape=invtriangle, color=brown];
stat1030[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.130.96.193:0, *:0}[97.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.2222%)&lt;BR/&gt; 80: (1.38889%)&lt;BR/&gt; 65435: (0.462963%)&lt;BR/&gt; 64431: (0.462963%)&lt;BR/&gt; 64201: (0.462963%)&gt;];
}
4191--5626[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter src_ip="96.130.96.193"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1031{
style=filled;
color=gray75;
4193[label="212.30.119.193;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5628[label="212.30.119.193;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1031[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.119.193:1863, 143.38.154.0:3911}[20%]&lt;BR/&gt;{212.30.119.193:1863, 208.18.26.6:4895}[20%]&lt;BR/&gt;{212.30.119.193:1863, 164.228.248.24:3033}[20%]&lt;BR/&gt;{212.30.119.193:1863, 136.93.77.111:1856}[20%]&lt;BR/&gt;{212.30.119.193:1863, 136.93.47.155:2791}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4895: (10%)&lt;BR/&gt; 3911: (10%)&lt;BR/&gt; 3033: (10%)&lt;BR/&gt; 2791: (10%)&gt;];
}
4193--5628[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.47.155" dst_port="2791" src_ip="212.30.119.193" src_port="1863"/>
      <filter dst_ip="136.93.77.111" dst_port="1856" src_ip="212.30.119.193" src_port="1863"/>
      <filter dst_ip="164.228.248.24" dst_port="3033" src_ip="212.30.119.193" src_port="1863"/>
      <filter dst_ip="208.18.26.6" dst_port="4895" src_ip="212.30.119.193" src_port="1863"/>
      <filter dst_ip="143.38.154.0" dst_port="3911" src_ip="212.30.119.193" src_port="1863"/>
    </slice>
    <from sec="1068526815" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1032{
style=filled;
color=gray75;
4203[label="196.233.97.194;59pkt 59fpkt", shape=pentagon, color=darkviolet];
5633[label="196.233.97.194;59pkt 59fpkt", shape=invtriangle, color=brown];
6294[label="196.233.97.194;59pkt 59fpkt", shape=invhouse, color=bisque];
stat1032[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.233.97.194:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4203--5633[label="1;59pkt 59fpkt"];
4203--6294[label="1;59pkt 59fpkt"];
5633--6294[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter src_ip="196.233.97.194"/>
    </slice>
    <from sec="1068526815" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.129.146.195"/>
    </slice>
    <from sec="1068526840" usec="0"/>
    <to sec="1068527681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1034{
style=filled;
color=gray75;
4219[label="5.50.77.196;114pkt 114fpkt", shape=pentagon, color=darkviolet];
5642[label="5.50.77.196;113pkt 113fpkt", shape=invtriangle, color=brown];
stat1034[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.50.77.196:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4219--5642[label="1;113pkt 113fpkt"];
</description>
    <slice>
      <filter src_ip="5.50.77.196"/>
    </slice>
    <from sec="1068526813" usec="0"/>
    <to sec="1068527690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1035{
style=filled;
color=gray75;
4221[label="96.169.104.196;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5643[label="96.169.104.196;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1035[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.169.104.196:0, 209.139.129.65:0}[50%]&lt;BR/&gt;{96.169.104.196:0, 136.93.205.128:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4221--5643[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.205.128" src_ip="96.169.104.196"/>
      <filter dst_ip="209.139.129.65" src_ip="96.169.104.196"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1036{
style=filled;
color=gray75;
4222[label="212.30.119.196;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5644[label="212.30.119.196;2pkt 2fpkt", shape=invtriangle, color=brown];
6299[label="212.30.119.196;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1036[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.119.196:1863, 136.93.40.2:2108}[50%]&lt;BR/&gt;{212.30.119.196:1863, 143.38.9.96:3008}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3008: (30%)&lt;BR/&gt; 2108: (20%)&gt;];
}
4222--5644[label="1;1pkt 1fpkt"];
4222--6299[label="1;1pkt 1fpkt"];
5644--6299[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.9.96" dst_port="3008" src_ip="212.30.119.196" src_port="1863"/>
      <filter dst_ip="136.93.40.2" dst_port="2108" src_ip="212.30.119.196" src_port="1863"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1037{
style=filled;
color=gray75;
4238[label="217.158.203.197;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5652[label="217.158.203.197;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1037[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.158.203.197:2830, 161.29.0.77:113}[33.3333%]&lt;BR/&gt;{217.158.203.197:2831, 161.29.0.77:113}[33.3333%]&lt;BR/&gt;{217.158.203.197:6667, 161.29.0.77:25671}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (33.3333%)&lt;BR/&gt; 25671: (16.6667%)&lt;BR/&gt; 6667: (16.6667%)&lt;BR/&gt; 2831: (16.6667%)&lt;BR/&gt; 2830: (16.6667%)&gt;];
}
4238--5652[label="1;3pkt 3fpkt"];
4238--6303[label="1;3pkt 3fpkt"];
5652--6303[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.0.77" dst_port="25671" src_ip="217.158.203.197" src_port="6667"/>
      <filter dst_ip="161.29.0.77" dst_port="113" src_ip="217.158.203.197" src_port="2831"/>
      <filter dst_ip="161.29.0.77" dst_port="113" src_ip="217.158.203.197" src_port="2830"/>
    </slice>
    <from sec="1068527446" usec="0"/>
    <to sec="1068527470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.244.170.200"/>
    </slice>
    <from sec="1068526808" usec="0"/>
    <to sec="1068527693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1039{
style=filled;
color=gray75;
4271[label="202.203.192.201;129pkt 129fpkt", shape=pentagon, color=darkviolet];
5670[label="202.203.192.201;128pkt 128fpkt", shape=invtriangle, color=brown];
6311[label="202.203.192.201;128pkt 128fpkt", shape=invhouse, color=bisque];
stat1039[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.203.192.201:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4271--5670[label="1;128pkt 128fpkt"];
4271--6311[label="1;128pkt 128fpkt"];
5670--6311[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter src_ip="202.203.192.201"/>
    </slice>
    <from sec="1068526827" usec="0"/>
    <to sec="1068527689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1040{
style=filled;
color=gray75;
4273[label="200.177.8.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5672[label="200.177.8.202;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1040[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.177.8.202:80, 209.139.200.177:48450}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48450: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4273--5672[label="1;1pkt 1fpkt"];
4273--6313[label="1;1pkt 1fpkt"];
5672--6313[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.139.200.177" dst_port="48450" src_ip="200.177.8.202" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1041{
style=filled;
color=gray75;
4279[label="202.205.205.202;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5676[label="202.205.205.202;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1041[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.205.205.202:80, 208.18.27.25:3690}[25%]&lt;BR/&gt;{202.205.205.202:80, 208.18.27.25:3691}[25%]&lt;BR/&gt;{202.205.205.202:80, 208.18.27.25:3714}[25%]&lt;BR/&gt;{202.205.205.202:80, 208.18.27.25:3753}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3753: (14.2857%)&lt;BR/&gt; 3714: (14.2857%)&lt;BR/&gt; 3691: (14.2857%)&lt;BR/&gt; 3690: (7.14286%)&gt;];
}
4279--5676[label="1;3pkt 3fpkt"];
4279--6316[label="1;3pkt 3fpkt"];
5676--6316[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.27.25" dst_port="3753" src_ip="202.205.205.202" src_port="80"/>
      <filter dst_ip="208.18.27.25" dst_port="3714" src_ip="202.205.205.202" src_port="80"/>
      <filter dst_ip="208.18.27.25" dst_port="3691" src_ip="202.205.205.202" src_port="80"/>
      <filter dst_ip="208.18.27.25" dst_port="3690" src_ip="202.205.205.202" src_port="80"/>
    </slice>
    <from sec="1068527424" usec="0"/>
    <to sec="1068527477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1042{
style=filled;
color=gray75;
359[label="161.29.54.102;d;1654pkt 1654fpkt", shape=diamond, color=yellow];
975[label="1.238.203.151;s;122pkt 122fpkt", shape=diamond, color=yellow];
1137[label="218.189.227.241;s;62pkt 62fpkt", shape=diamond, color=yellow];
1155[label="208.169.14.69;d;99pkt 99fpkt", shape=diamond, color=yellow];
1670[label="161.29.54.113;d;190pkt 190fpkt", shape=hexagon, color=black];
1681[label="218.164.73.54;d;545pkt 545fpkt", shape=hexagon, color=black];
1747[label="136.93.246.228;d;237pkt 237fpkt", shape=hexagon, color=black];
1748[label="136.93.200.74;d;377pkt 377fpkt", shape=hexagon, color=black];
1867[label="161.29.55.60;d;938pkt 938fpkt", shape=hexagon, color=black];
1929[label="143.176.79.9;d;159pkt 159fpkt", shape=hexagon, color=black];
1931[label="143.176.76.61;d;229pkt 229fpkt", shape=hexagon, color=black];
1987[label="208.31.228.49;d;333pkt 333fpkt", shape=hexagon, color=black];
1988[label="218.189.227.241;s;62pkt 62fpkt", shape=hexagon, color=black];
2006[label="136.93.75.81;d;76pkt 76fpkt", shape=hexagon, color=black];
2067[label="1.238.203.151;s;109pkt 109fpkt", shape=hexagon, color=black];
2083[label="164.228.125.178;d;307pkt 307fpkt", shape=hexagon, color=black];
2128[label="208.169.14.69;d;90pkt 90fpkt", shape=hexagon, color=black];
2185[label="164.228.218.52;d;121pkt 121fpkt", shape=hexagon, color=black];
2669[label="200.252.139.26;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3351[label="214.40.221.95;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3581[label="7.160.39.122;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3624[label="208.116.10.127;45pkt 45fpkt", shape=pentagon, color=darkviolet];
3710[label="208.117.96.136;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3851[label="1.238.203.151;131pkt 131fpkt", shape=pentagon, color=darkviolet];
3901[label="210.30.112.157;14pkt 14fpkt", shape=pentagon, color=darkviolet];
3974[label="197.145.76.167;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4015[label="119.90.80.172;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4028[label="200.105.81.173;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4539[label="218.189.227.241;66pkt 66fpkt", shape=pentagon, color=darkviolet];
4611[label="96.130.136.253;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4803[label="200.252.139.26;10pkt 10fpkt", shape=invtriangle, color=brown];
5311[label="7.160.39.122;12pkt 12fpkt", shape=invtriangle, color=brown];
5336[label="208.116.10.127;44pkt 44fpkt", shape=invtriangle, color=brown];
5380[label="208.117.96.136;9pkt 9fpkt", shape=invtriangle, color=brown];
5506[label="197.145.76.167;25pkt 25fpkt", shape=invtriangle, color=brown];
5533[label="200.105.81.173;14pkt 14fpkt", shape=invtriangle, color=brown];
5802[label="218.189.227.241;66pkt 66fpkt", shape=invtriangle, color=brown];
stat1042[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 161.29.54.102:*}[25.0457%]&lt;BR/&gt;{*:*, *:53}[23.8208%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (43.9582%)&lt;BR/&gt; 2862: (5.99394%)&lt;BR/&gt; 25: (5.22876%)&lt;BR/&gt; 2842: (4.9737%)&lt;BR/&gt; 0: (3.23609%)&gt;];
}
359--363[label="0.0217573;26pkt 26fpkt"];
359--924[label="0.03125;1pkt 1fpkt"];
359--1013[label="0.0217391;1pkt 1fpkt"];
359--1137[label="0.0322581;2pkt 2fpkt"];
359--1184[label="0.333333;1pkt 1fpkt"];
359--1212[label="0.12;3pkt 3fpkt"];
359--1229[label="0.103093;10pkt 10fpkt"];
359--1238[label="0.0357143;2pkt 2fpkt"];
359--1312[label="0.000604595;1pkt 1fpkt"];
359--1332[label="0.0377358;2pkt 2fpkt"];
359--1341[label="0.0333333;2pkt 2fpkt"];
359--1351[label="0.0119048;1pkt 1fpkt"];
359--1386[label="0.0212766;1pkt 1fpkt"];
359--1435[label="0.00900901;1pkt 1fpkt"];
359--1457[label="1;1654pkt 1654fpkt"];
359--1647[label="0.000604595;1pkt 1fpkt"];
359--1752[label="0.0284414;25pkt 25fpkt"];
359--1988[label="0.0322581;2pkt 2fpkt"];
359--2031[label="0.333333;1pkt 1fpkt"];
359--2144[label="0.03125;1pkt 1fpkt"];
359--2159[label="0.000604595;1pkt 1fpkt"];
359--2321[label="0.000604595;1pkt 1fpkt"];
359--2326[label="0.0112211;17pkt 17fpkt"];
359--2336[label="0.0114873;19pkt 19fpkt"];
359--2341[label="0.0112211;17pkt 17fpkt"];
359--2359[label="0.05;2pkt 2fpkt"];
359--2454[label="0.0344828;1pkt 1fpkt"];
359--2478[label="0.0175439;1pkt 1fpkt"];
359--2494[label="0.0149254;1pkt 1fpkt"];
359--2509[label="0.2;1pkt 1fpkt"];
359--2566[label="0.0526316;2pkt 2fpkt"];
359--2573[label="0.111111;1pkt 1fpkt"];
359--2580[label="0.0149254;1pkt 1fpkt"];
359--2669[label="0.0909091;1pkt 1fpkt"];
359--2693[label="0.0162866;5pkt 5fpkt"];
359--2702[label="0.0416667;1pkt 1fpkt"];
359--2709[label="0.0833333;2pkt 2fpkt"];
359--2723[label="0.0188679;4pkt 4fpkt"];
359--2756[label="0.0117647;1pkt 1fpkt"];
359--2822[label="0.0208333;1pkt 1fpkt"];
359--2872[label="0.05;2pkt 2fpkt"];
359--2909[label="0.5;1pkt 1fpkt"];
359--2929[label="0.00917431;1pkt 1fpkt"];
359--2994[label="0.047619;1pkt 1fpkt"];
359--3027[label="0.00877193;1pkt 1fpkt"];
359--3053[label="0.0526316;2pkt 2fpkt"];
359--3057[label="0.103093;10pkt 10fpkt"];
359--3067[label="0.0408163;2pkt 2fpkt"];
359--3251[label="0.0322581;2pkt 2fpkt"];
359--3351[label="0.0322581;1pkt 1fpkt"];
359--3368[label="0.2;2pkt 2fpkt"];
359--3432[label="0.027027;1pkt 1fpkt"];
359--3459[label="0.0588235;2pkt 2fpkt"];
359--3481[label="0.0350877;2pkt 2fpkt"];
359--3551[label="0.0571429;2pkt 2fpkt"];
359--3581[label="0.153846;2pkt 2fpkt"];
359--3590[label="0.173913;4pkt 4fpkt"];
359--3601[label="0.0377358;2pkt 2fpkt"];
359--3607[label="0.0540541;2pkt 2fpkt"];
359--3624[label="0.0222222;1pkt 1fpkt"];
359--3688[label="0.0555556;2pkt 2fpkt"];
359--3710[label="0.1;1pkt 1fpkt"];
359--3752[label="0.0416667;1pkt 1fpkt"];
359--3784[label="0.04;2pkt 2fpkt"];
359--3822[label="0.0714286;1pkt 1fpkt"];
359--3838[label="0.0909091;1pkt 1fpkt"];
359--3866[label="0.117647;2pkt 2fpkt"];
359--3901[label="0.142857;2pkt 2fpkt"];
359--3974[label="0.04;1pkt 1fpkt"];
359--3977[label="0.0625;2pkt 2fpkt"];
359--4000[label="0.12;3pkt 3fpkt"];
359--4015[label="0.142857;1pkt 1fpkt"];
359--4028[label="0.0714286;1pkt 1fpkt"];
359--4053[label="0.0408163;2pkt 2fpkt"];
359--4070[label="0.115385;3pkt 3fpkt"];
359--4255[label="0.00477327;2pkt 2fpkt"];
359--4281[label="0.05;1pkt 1fpkt"];
359--4285[label="0.0203443;26pkt 26fpkt"];
359--4295[label="0.028169;2pkt 2fpkt"];
359--4305[label="0.05;2pkt 2fpkt"];
359--4528[label="0.0740741;2pkt 2fpkt"];
359--4539[label="0.030303;2pkt 2fpkt"];
359--4611[label="0.125;2pkt 2fpkt"];
359--4630[label="0.05;2pkt 2fpkt"];
359--4687[label="0.0175439;1pkt 1fpkt"];
359--4698[label="0.0147059;1pkt 1fpkt"];
359--4707[label="0.2;1pkt 1fpkt"];
359--4742[label="0.0526316;2pkt 2fpkt"];
359--4750[label="0.0151515;1pkt 1fpkt"];
359--4803[label="0.1;1pkt 1fpkt"];
359--4815[label="0.0162338;5pkt 5fpkt"];
359--4818[label="0.04;1pkt 1fpkt"];
359--4824[label="0.08;2pkt 2fpkt"];
359--5023[label="0.0526316;2pkt 2fpkt"];
359--5135[label="0.0322581;2pkt 2fpkt"];
359--5196[label="0.222222;2pkt 2fpkt"];
359--5237[label="0.0277778;1pkt 1fpkt"];
359--5247[label="0.0606061;2pkt 2fpkt"];
359--5259[label="0.0357143;2pkt 2fpkt"];
359--5298[label="0.0588235;2pkt 2fpkt"];
359--5311[label="0.166667;2pkt 2fpkt"];
359--5323[label="0.0377358;2pkt 2fpkt"];
359--5336[label="0.0227273;1pkt 1fpkt"];
359--5370[label="0.0555556;2pkt 2fpkt"];
359--5380[label="0.111111;1pkt 1fpkt"];
359--5443[label="0.0909091;1pkt 1fpkt"];
359--5463[label="0.125;2pkt 2fpkt"];
359--5506[label="0.04;1pkt 1fpkt"];
359--5508[label="0.0625;2pkt 2fpkt"];
359--5533[label="0.0714286;1pkt 1fpkt"];
359--5547[label="0.0416667;2pkt 2fpkt"];
359--5680[label="0.0203602;26pkt 26fpkt"];
359--5685[label="0.0285714;2pkt 2fpkt"];
359--5795[label="0.0769231;2pkt 2fpkt"];
359--5802[label="0.030303;2pkt 2fpkt"];
359--5873[label="0.0175439;1pkt 1fpkt"];
359--5885[label="0.2;1pkt 1fpkt"];
359--5902[label="0.0526316;2pkt 2fpkt"];
359--5933[label="0.08;2pkt 2fpkt"];
359--5964[label="0.0208333;1pkt 1fpkt"];
359--6109[label="0.2;2pkt 2fpkt"];
359--6154[label="0.0377358;2pkt 2fpkt"];
359--6212[label="0.0909091;1pkt 1fpkt"];
359--6256[label="0.0408163;2pkt 2fpkt"];
975--1670[label="0.991803;121pkt 121fpkt"];
975--2067[label="1;109pkt 109fpkt"];
975--3851[label="1;122pkt 122fpkt"];
1137--1140[label="0.0483871;3pkt 3fpkt"];
1137--1155[label="0.016129;1pkt 1fpkt"];
1137--1160[label="0.016129;1pkt 1fpkt"];
1137--1239[label="0.016129;1pkt 1fpkt"];
1137--1353[label="0.016129;1pkt 1fpkt"];
1137--1383[label="0.016129;1pkt 1fpkt"];
1137--1457[label="0.0322581;2pkt 2fpkt"];
1137--1466[label="0.016129;1pkt 1fpkt"];
1137--1505[label="0.016129;1pkt 1fpkt"];
1137--1528[label="0.016129;1pkt 1fpkt"];
1137--1570[label="0.0483871;3pkt 3fpkt"];
1137--1681[label="0.016129;1pkt 1fpkt"];
1137--1687[label="0.016129;1pkt 1fpkt"];
1137--1737[label="0.016129;1pkt 1fpkt"];
1137--1747[label="0.016129;1pkt 1fpkt"];
1137--1748[label="0.016129;1pkt 1fpkt"];
1137--1751[label="0.016129;1pkt 1fpkt"];
1137--1773[label="0.016129;1pkt 1fpkt"];
1137--1839[label="0.0483871;3pkt 3fpkt"];
1137--1867[label="0.0322581;2pkt 2fpkt"];
1137--1873[label="0.016129;1pkt 1fpkt"];
1137--1893[label="0.016129;1pkt 1fpkt"];
1137--1929[label="0.016129;1pkt 1fpkt"];
1137--1931[label="0.016129;1pkt 1fpkt"];
1137--1935[label="0.016129;1pkt 1fpkt"];
1137--1987[label="0.016129;1pkt 1fpkt"];
1137--1988[label="1;62pkt 62fpkt"];
1137--2006[label="0.016129;1pkt 1fpkt"];
1137--2083[label="0.016129;1pkt 1fpkt"];
1137--2128[label="0.016129;1pkt 1fpkt"];
1137--2182[label="0.016129;1pkt 1fpkt"];
1137--2185[label="0.016129;1pkt 1fpkt"];
1137--2189[label="0.0483871;3pkt 3fpkt"];
1137--2234[label="0.016129;1pkt 1fpkt"];
1137--4539[label="1;62pkt 62fpkt"];
1137--5802[label="1;62pkt 62fpkt"];
1155--1223[label="0.0555556;1pkt 1fpkt"];
1155--1226[label="0.0555556;1pkt 1fpkt"];
1155--1238[label="0.0178571;1pkt 1fpkt"];
1155--1332[label="0.0188679;1pkt 1fpkt"];
1155--1341[label="0.0166667;1pkt 1fpkt"];
1155--1988[label="0.016129;1pkt 1fpkt"];
1155--2128[label="1;90pkt 90fpkt"];
1155--2337[label="0.010101;1pkt 1fpkt"];
1155--2454[label="0.0344828;1pkt 1fpkt"];
1155--2872[label="0.025;1pkt 1fpkt"];
1155--3053[label="0.0263158;1pkt 1fpkt"];
1155--3251[label="0.016129;1pkt 1fpkt"];
1155--3481[label="0.0175439;1pkt 1fpkt"];
1155--3659[label="0.05;1pkt 1fpkt"];
1155--3784[label="0.02;1pkt 1fpkt"];
1155--3974[label="0.04;1pkt 1fpkt"];
1155--4053[label="0.0204082;1pkt 1fpkt"];
1155--4295[label="0.0140845;1pkt 1fpkt"];
1155--4539[label="0.0151515;1pkt 1fpkt"];
1155--5023[label="0.0263158;1pkt 1fpkt"];
1155--5135[label="0.016129;1pkt 1fpkt"];
1155--5506[label="0.04;1pkt 1fpkt"];
1155--5696[label="0.25;1pkt 1fpkt"];
1155--5802[label="0.0151515;1pkt 1fpkt"];
1155--6256[label="0.0204082;1pkt 1fpkt"];
1670--1752[label="0.0157895;3pkt 3fpkt"];
1670--2067[label="0.990826;108pkt 108fpkt"];
1670--2159[label="0.00526316;1pkt 1fpkt"];
1670--2321[label="0.00526316;1pkt 1fpkt"];
1670--2327[label="0.0105263;2pkt 2fpkt"];
1670--2342[label="0.0105263;2pkt 2fpkt"];
1670--2883[label="0.0384615;1pkt 1fpkt"];
1670--3624[label="0.0444444;2pkt 2fpkt"];
1670--3851[label="0.923664;121pkt 121fpkt"];
1670--4285[label="0.0210526;4pkt 4fpkt"];
1670--4469[label="0.0952381;2pkt 2fpkt"];
1670--4489[label="0.04;3pkt 3fpkt"];
1670--5336[label="0.0454545;2pkt 2fpkt"];
1670--5680[label="0.0210526;4pkt 4fpkt"];
1681--1988[label="0.016129;1pkt 1fpkt"];
1681--2326[label="0.066055;36pkt 36fpkt"];
1681--2336[label="0.0513761;28pkt 28fpkt"];
1681--2341[label="0.066055;36pkt 36fpkt"];
1681--2369[label="0.142857;1pkt 1fpkt"];
1681--2693[label="0.0228013;7pkt 7fpkt"];
1681--2723[label="0.0235849;5pkt 5fpkt"];
1681--2834[label="0.0363636;10pkt 10fpkt"];
1681--3810[label="0.0454545;1pkt 1fpkt"];
1681--4449[label="0.0526316;1pkt 1fpkt"];
1681--4533[label="0.166667;1pkt 1fpkt"];
1681--4539[label="0.0151515;1pkt 1fpkt"];
1681--4815[label="0.0227273;7pkt 7fpkt"];
1681--5797[label="0.166667;1pkt 1fpkt"];
1681--5802[label="0.0151515;1pkt 1fpkt"];
1747--1988[label="0.016129;1pkt 1fpkt"];
1747--2326[label="0.00843882;2pkt 2fpkt"];
1747--2336[label="0.00421941;1pkt 1fpkt"];
1747--2341[label="0.00843882;2pkt 2fpkt"];
1747--2454[label="0.0344828;1pkt 1fpkt"];
1747--2566[label="0.0263158;1pkt 1fpkt"];
1747--2872[label="0.025;1pkt 1fpkt"];
1747--3067[label="0.0204082;1pkt 1fpkt"];
1747--3251[label="0.016129;1pkt 1fpkt"];
1747--3459[label="0.0294118;1pkt 1fpkt"];
1747--3481[label="0.0175439;1pkt 1fpkt"];
1747--3551[label="0.0285714;1pkt 1fpkt"];
1747--3601[label="0.0188679;1pkt 1fpkt"];
1747--3659[label="0.05;1pkt 1fpkt"];
1747--3688[label="0.0277778;1pkt 1fpkt"];
1747--3784[label="0.02;1pkt 1fpkt"];
1747--4053[label="0.0204082;1pkt 1fpkt"];
1747--4295[label="0.0140845;1pkt 1fpkt"];
1747--4528[label="0.037037;1pkt 1fpkt"];
1747--4539[label="0.0151515;1pkt 1fpkt"];
1747--4611[label="0.0625;1pkt 1fpkt"];
1747--4690[label="0.25;1pkt 1fpkt"];
1747--4742[label="0.0263158;1pkt 1fpkt"];
1747--5135[label="0.016129;1pkt 1fpkt"];
1747--5247[label="0.030303;1pkt 1fpkt"];
1747--5259[label="0.0178571;1pkt 1fpkt"];
1747--5298[label="0.0294118;1pkt 1fpkt"];
1747--5323[label="0.0188679;1pkt 1fpkt"];
1747--5351[label="0.0526316;1pkt 1fpkt"];
1747--5370[label="0.0277778;1pkt 1fpkt"];
1747--5547[label="0.0208333;1pkt 1fpkt"];
1747--5685[label="0.0142857;1pkt 1fpkt"];
1747--5795[label="0.0384615;1pkt 1fpkt"];
1747--5802[label="0.0151515;1pkt 1fpkt"];
1747--5876[label="0.25;1pkt 1fpkt"];
1747--5902[label="0.0263158;1pkt 1fpkt"];
1747--6154[label="0.0188679;1pkt 1fpkt"];
1747--6256[label="0.0204082;1pkt 1fpkt"];
1748--1988[label="0.016129;1pkt 1fpkt"];
1748--2326[label="0.00265252;1pkt 1fpkt"];
1748--2336[label="0.0185676;7pkt 7fpkt"];
1748--2341[label="0.00265252;1pkt 1fpkt"];
1748--2359[label="0.025;1pkt 1fpkt"];
1748--2454[label="0.0344828;1pkt 1fpkt"];
1748--2566[label="0.0263158;1pkt 1fpkt"];
1748--2580[label="0.0149254;1pkt 1fpkt"];
1748--2702[label="0.0416667;1pkt 1fpkt"];
1748--2785[label="0.0212766;1pkt 1fpkt"];
1748--2834[label="0.0181818;5pkt 5fpkt"];
1748--2872[label="0.025;1pkt 1fpkt"];
1748--2994[label="0.047619;1pkt 1fpkt"];
1748--3053[label="0.0263158;1pkt 1fpkt"];
1748--3057[label="0.0103093;1pkt 1fpkt"];
1748--3067[label="0.0204082;1pkt 1fpkt"];
1748--3251[label="0.016129;1pkt 1fpkt"];
1748--3351[label="0.0322581;1pkt 1fpkt"];
1748--3481[label="0.0175439;1pkt 1fpkt"];
1748--3581[label="0.0769231;1pkt 1fpkt"];
1748--3601[label="0.0188679;1pkt 1fpkt"];
1748--3688[label="0.0277778;1pkt 1fpkt"];
1748--3784[label="0.02;1pkt 1fpkt"];
1748--3806[label="0.0555556;1pkt 1fpkt"];
1748--3974[label="0.04;1pkt 1fpkt"];
1748--3977[label="0.03125;1pkt 1fpkt"];
1748--4015[label="0.142857;1pkt 1fpkt"];
1748--4028[label="0.0714286;1pkt 1fpkt"];
1748--4053[label="0.0204082;1pkt 1fpkt"];
1748--4255[label="0.00265252;1pkt 1fpkt"];
1748--4295[label="0.0140845;1pkt 1fpkt"];
1748--4305[label="0.025;1pkt 1fpkt"];
1748--4528[label="0.037037;1pkt 1fpkt"];
1748--4539[label="0.0151515;1pkt 1fpkt"];
1748--4611[label="0.0625;1pkt 1fpkt"];
1748--4630[label="0.025;1pkt 1fpkt"];
1748--4742[label="0.0263158;1pkt 1fpkt"];
1748--4750[label="0.0151515;1pkt 1fpkt"];
1748--4818[label="0.04;1pkt 1fpkt"];
1748--4865[label="0.0217391;1pkt 1fpkt"];
1748--5023[label="0.0263158;1pkt 1fpkt"];
1748--5135[label="0.016129;1pkt 1fpkt"];
1748--5259[label="0.0178571;1pkt 1fpkt"];
1748--5311[label="0.0833333;1pkt 1fpkt"];
1748--5323[label="0.0188679;1pkt 1fpkt"];
1748--5370[label="0.0277778;1pkt 1fpkt"];
1748--5506[label="0.04;1pkt 1fpkt"];
1748--5508[label="0.03125;1pkt 1fpkt"];
1748--5533[label="0.0714286;1pkt 1fpkt"];
1748--5547[label="0.0208333;1pkt 1fpkt"];
1748--5685[label="0.0142857;1pkt 1fpkt"];
1748--5795[label="0.0384615;1pkt 1fpkt"];
1748--5802[label="0.0151515;1pkt 1fpkt"];
1748--5902[label="0.0263158;1pkt 1fpkt"];
1748--6154[label="0.0188679;1pkt 1fpkt"];
1748--6256[label="0.0204082;1pkt 1fpkt"];
1867--1874[label="0.0116279;1pkt 1fpkt"];
1867--1988[label="0.0322581;2pkt 2fpkt"];
1867--2159[label="0.0010661;1pkt 1fpkt"];
1867--2321[label="0.0010661;1pkt 1fpkt"];
1867--2326[label="0.0159915;15pkt 15fpkt"];
1867--2336[label="0.0127932;12pkt 12fpkt"];
1867--2341[label="0.0159915;15pkt 15fpkt"];
1867--2359[label="0.05;2pkt 2fpkt"];
1867--2454[label="0.0344828;1pkt 1fpkt"];
1867--2566[label="0.0263158;1pkt 1fpkt"];
1867--2669[label="0.181818;2pkt 2fpkt"];
1867--2693[label="0.0358306;11pkt 11fpkt"];
1867--2723[label="0.0377358;8pkt 8fpkt"];
1867--2756[label="0.0235294;2pkt 2fpkt"];
1867--2785[label="0.0212766;1pkt 1fpkt"];
1867--2872[label="0.05;2pkt 2fpkt"];
1867--2900[label="0.016129;1pkt 1fpkt"];
1867--2970[label="0.00934579;1pkt 1fpkt"];
1867--2994[label="0.047619;1pkt 1fpkt"];
1867--3067[label="0.0204082;1pkt 1fpkt"];
1867--3251[label="0.0322581;2pkt 2fpkt"];
1867--3368[label="0.2;2pkt 2fpkt"];
1867--3481[label="0.0350877;2pkt 2fpkt"];
1867--3530[label="0.00909091;1pkt 1fpkt"];
1867--3551[label="0.0571429;2pkt 2fpkt"];
1867--3581[label="0.0769231;1pkt 1fpkt"];
1867--3590[label="0.0869565;2pkt 2fpkt"];
1867--3601[label="0.0188679;1pkt 1fpkt"];
1867--3607[label="0.0540541;2pkt 2fpkt"];
1867--3703[label="0.0222222;2pkt 2fpkt"];
1867--3784[label="0.04;2pkt 2fpkt"];
1867--3825[label="0.0338983;2pkt 2fpkt"];
1867--3866[label="0.176471;3pkt 3fpkt"];
1867--3901[label="0.142857;2pkt 2fpkt"];
1867--3974[label="0.08;2pkt 2fpkt"];
1867--3977[label="0.0625;2pkt 2fpkt"];
1867--3985[label="0.0117647;1pkt 1fpkt"];
1867--4000[label="0.16;4pkt 4fpkt"];
1867--4015[label="0.142857;1pkt 1fpkt"];
1867--4053[label="0.0204082;1pkt 1fpkt"];
1867--4070[label="0.115385;3pkt 3fpkt"];
1867--4255[label="0.00238663;1pkt 1fpkt"];
1867--4264[label="0.04;1pkt 1fpkt"];
1867--4285[label="0.00959488;9pkt 9fpkt"];
1867--4295[label="0.028169;2pkt 2fpkt"];
1867--4305[label="0.025;1pkt 1fpkt"];
1867--4528[label="0.037037;1pkt 1fpkt"];
1867--4539[label="0.030303;2pkt 2fpkt"];
1867--4611[label="0.0625;1pkt 1fpkt"];
1867--4630[label="0.05;2pkt 2fpkt"];
1867--4742[label="0.0263158;1pkt 1fpkt"];
1867--4803[label="0.2;2pkt 2fpkt"];
1867--4815[label="0.0357143;11pkt 11fpkt"];
1867--4865[label="0.0217391;1pkt 1fpkt"];
1867--4935[label="0.0163934;1pkt 1fpkt"];
1867--4981[label="0.00943396;1pkt 1fpkt"];
1867--5135[label="0.0322581;2pkt 2fpkt"];
1867--5196[label="0.222222;2pkt 2fpkt"];
1867--5259[label="0.0357143;2pkt 2fpkt"];
1867--5284[label="0.00909091;1pkt 1fpkt"];
1867--5298[label="0.0588235;2pkt 2fpkt"];
1867--5311[label="0.0833333;1pkt 1fpkt"];
1867--5323[label="0.0188679;1pkt 1fpkt"];
1867--5374[label="0.0222222;2pkt 2fpkt"];
1867--5435[label="0.0344828;2pkt 2fpkt"];
1867--5463[label="0.1875;3pkt 3fpkt"];
1867--5506[label="0.08;2pkt 2fpkt"];
1867--5508[label="0.0625;2pkt 2fpkt"];
1867--5514[label="0.0119048;1pkt 1fpkt"];
1867--5547[label="0.0208333;1pkt 1fpkt"];
1867--5666[label="0.04;1pkt 1fpkt"];
1867--5680[label="0.00959488;9pkt 9fpkt"];
1867--5685[label="0.0285714;2pkt 2fpkt"];
1867--5795[label="0.0384615;1pkt 1fpkt"];
1867--5802[label="0.030303;2pkt 2fpkt"];
1867--5902[label="0.0263158;1pkt 1fpkt"];
1867--5992[label="0.016129;1pkt 1fpkt"];
1867--6109[label="0.2;2pkt 2fpkt"];
1867--6136[label="0.00909091;1pkt 1fpkt"];
1867--6154[label="0.0188679;1pkt 1fpkt"];
1867--6244[label="0.0117647;1pkt 1fpkt"];
1867--6256[label="0.0204082;1pkt 1fpkt"];
1867--6308[label="0.04;1pkt 1fpkt"];
1929--1988[label="0.016129;1pkt 1fpkt"];
1929--2326[label="0.0377358;6pkt 6fpkt"];
1929--2336[label="0.00628931;1pkt 1fpkt"];
1929--2341[label="0.0377358;6pkt 6fpkt"];
1929--2359[label="0.025;1pkt 1fpkt"];
1929--2454[label="0.0344828;1pkt 1fpkt"];
1929--2702[label="0.0416667;1pkt 1fpkt"];
1929--2994[label="0.047619;1pkt 1fpkt"];
1929--3053[label="0.0263158;1pkt 1fpkt"];
1929--3067[label="0.0204082;1pkt 1fpkt"];
1929--3200[label="0.166667;1pkt 1fpkt"];
1929--3251[label="0.016129;1pkt 1fpkt"];
1929--3459[label="0.0294118;1pkt 1fpkt"];
1929--3551[label="0.0285714;1pkt 1fpkt"];
1929--3601[label="0.0188679;1pkt 1fpkt"];
1929--3784[label="0.02;1pkt 1fpkt"];
1929--3974[label="0.04;1pkt 1fpkt"];
1929--4248[label="0.0416667;1pkt 1fpkt"];
1929--4295[label="0.0140845;1pkt 1fpkt"];
1929--4305[label="0.025;1pkt 1fpkt"];
1929--4319[label="0.333333;1pkt 1fpkt"];
1929--4343[label="0.0375;3pkt 3fpkt"];
1929--4528[label="0.037037;1pkt 1fpkt"];
1929--4539[label="0.0151515;1pkt 1fpkt"];
1929--4630[label="0.025;1pkt 1fpkt"];
1929--4818[label="0.04;1pkt 1fpkt"];
1929--5023[label="0.0263158;1pkt 1fpkt"];
1929--5135[label="0.016129;1pkt 1fpkt"];
1929--5247[label="0.030303;1pkt 1fpkt"];
1929--5298[label="0.0294118;1pkt 1fpkt"];
1929--5323[label="0.0188679;1pkt 1fpkt"];
1929--5506[label="0.04;1pkt 1fpkt"];
1929--5685[label="0.0142857;1pkt 1fpkt"];
1929--5696[label="0.25;1pkt 1fpkt"];
1929--5795[label="0.0384615;1pkt 1fpkt"];
1929--5802[label="0.0151515;1pkt 1fpkt"];
1929--6154[label="0.0188679;1pkt 1fpkt"];
1929--6326[label="0.333333;1pkt 1fpkt"];
1931--1988[label="0.016129;1pkt 1fpkt"];
1931--2454[label="0.0344828;1pkt 1fpkt"];
1931--2702[label="0.0416667;1pkt 1fpkt"];
1931--2994[label="0.047619;1pkt 1fpkt"];
1931--3067[label="0.0204082;1pkt 1fpkt"];
1931--3351[label="0.0322581;1pkt 1fpkt"];
1931--3459[label="0.0294118;1pkt 1fpkt"];
1931--3551[label="0.0285714;1pkt 1fpkt"];
1931--3601[label="0.0188679;1pkt 1fpkt"];
1931--3688[label="0.0277778;1pkt 1fpkt"];
1931--3974[label="0.04;1pkt 1fpkt"];
1931--4295[label="0.0140845;1pkt 1fpkt"];
1931--4528[label="0.037037;1pkt 1fpkt"];
1931--4539[label="0.0151515;1pkt 1fpkt"];
1931--4611[label="0.0625;1pkt 1fpkt"];
1931--4818[label="0.04;1pkt 1fpkt"];
1931--5247[label="0.030303;1pkt 1fpkt"];
1931--5298[label="0.0294118;1pkt 1fpkt"];
1931--5323[label="0.0188679;1pkt 1fpkt"];
1931--5370[label="0.0277778;1pkt 1fpkt"];
1931--5506[label="0.04;1pkt 1fpkt"];
1931--5685[label="0.0142857;1pkt 1fpkt"];
1931--5795[label="0.0384615;1pkt 1fpkt"];
1931--5802[label="0.0151515;1pkt 1fpkt"];
1931--6154[label="0.0188679;1pkt 1fpkt"];
1987--1988[label="0.016129;1pkt 1fpkt"];
1987--2031[label="0.333333;1pkt 1fpkt"];
1987--2336[label="0.003003;1pkt 1fpkt"];
1987--2359[label="0.025;1pkt 1fpkt"];
1987--2369[label="0.142857;1pkt 1fpkt"];
1987--2412[label="0.5;1pkt 1fpkt"];
1987--2566[label="0.0263158;1pkt 1fpkt"];
1987--2573[label="0.111111;1pkt 1fpkt"];
1987--2728[label="0.0434783;1pkt 1fpkt"];
1987--2872[label="0.025;1pkt 1fpkt"];
1987--3067[label="0.0204082;1pkt 1fpkt"];
1987--3251[label="0.016129;1pkt 1fpkt"];
1987--3481[label="0.0175439;1pkt 1fpkt"];
1987--3784[label="0.02;1pkt 1fpkt"];
1987--3838[label="0.0909091;1pkt 1fpkt"];
1987--3866[label="0.0588235;1pkt 1fpkt"];
1987--4000[label="0.04;1pkt 1fpkt"];
1987--4053[label="0.0204082;1pkt 1fpkt"];
1987--4070[label="0.0384615;1pkt 1fpkt"];
1987--4295[label="0.0140845;1pkt 1fpkt"];
1987--4528[label="0.037037;1pkt 1fpkt"];
1987--4539[label="0.0151515;1pkt 1fpkt"];
1987--4630[label="0.025;1pkt 1fpkt"];
1987--4742[label="0.0263158;1pkt 1fpkt"];
1987--4824[label="0.04;1pkt 1fpkt"];
1987--5135[label="0.016129;1pkt 1fpkt"];
1987--5259[label="0.0178571;1pkt 1fpkt"];
1987--5443[label="0.0909091;1pkt 1fpkt"];
1987--5547[label="0.0208333;1pkt 1fpkt"];
1987--5685[label="0.0142857;1pkt 1fpkt"];
1987--5795[label="0.0384615;1pkt 1fpkt"];
1987--5802[label="0.0151515;1pkt 1fpkt"];
1987--5902[label="0.0263158;1pkt 1fpkt"];
1987--5933[label="0.04;1pkt 1fpkt"];
1987--6212[label="0.0909091;1pkt 1fpkt"];
1987--6256[label="0.0204082;1pkt 1fpkt"];
1988--2006[label="0.016129;1pkt 1fpkt"];
1988--2083[label="0.016129;1pkt 1fpkt"];
1988--2128[label="0.016129;1pkt 1fpkt"];
1988--2182[label="0.016129;1pkt 1fpkt"];
1988--2185[label="0.016129;1pkt 1fpkt"];
1988--2189[label="0.0483871;3pkt 3fpkt"];
1988--2234[label="0.016129;1pkt 1fpkt"];
1988--4539[label="1;62pkt 62fpkt"];
1988--5802[label="1;62pkt 62fpkt"];
2006--2241[label="0.0588235;1pkt 1fpkt"];
2006--2336[label="0.0131579;1pkt 1fpkt"];
2006--2580[label="0.0149254;1pkt 1fpkt"];
2006--2702[label="0.0416667;1pkt 1fpkt"];
2006--2889[label="0.0131579;1pkt 1fpkt"];
2006--2970[label="0.0131579;1pkt 1fpkt"];
2006--3053[label="0.0263158;1pkt 1fpkt"];
2006--3067[label="0.0204082;1pkt 1fpkt"];
2006--3403[label="0.333333;1pkt 1fpkt"];
2006--3551[label="0.0285714;1pkt 1fpkt"];
2006--3581[label="0.0769231;1pkt 1fpkt"];
2006--3601[label="0.0188679;1pkt 1fpkt"];
2006--3714[label="0.02;1pkt 1fpkt"];
2006--4053[label="0.0204082;1pkt 1fpkt"];
2006--4539[label="0.0151515;1pkt 1fpkt"];
2006--4750[label="0.0151515;1pkt 1fpkt"];
2006--4818[label="0.04;1pkt 1fpkt"];
2006--4981[label="0.0131579;1pkt 1fpkt"];
2006--5023[label="0.0263158;1pkt 1fpkt"];
2006--5219[label="0.333333;1pkt 1fpkt"];
2006--5298[label="0.0294118;1pkt 1fpkt"];
2006--5311[label="0.0833333;1pkt 1fpkt"];
2006--5323[label="0.0188679;1pkt 1fpkt"];
2006--5547[label="0.0208333;1pkt 1fpkt"];
2006--5802[label="0.0151515;1pkt 1fpkt"];
2006--6154[label="0.0188679;1pkt 1fpkt"];
2006--6256[label="0.0204082;1pkt 1fpkt"];
2067--3851[label="1;109pkt 109fpkt"];
2083--2326[label="0.0130293;4pkt 4fpkt"];
2083--2336[label="0.0488599;15pkt 15fpkt"];
2083--2341[label="0.0130293;4pkt 4fpkt"];
2083--2359[label="0.025;1pkt 1fpkt"];
2083--2454[label="0.0344828;1pkt 1fpkt"];
2083--2566[label="0.0263158;1pkt 1fpkt"];
2083--2702[label="0.0416667;1pkt 1fpkt"];
2083--2726[label="0.00943396;1pkt 1fpkt"];
2083--2756[label="0.0117647;1pkt 1fpkt"];
2083--2834[label="0.0218182;6pkt 6fpkt"];
2083--2872[label="0.025;1pkt 1fpkt"];
2083--2908[label="0.0163934;1pkt 1fpkt"];
2083--2929[label="0.00917431;1pkt 1fpkt"];
2083--3251[label="0.016129;1pkt 1fpkt"];
2083--3351[label="0.0645161;2pkt 2fpkt"];
2083--3481[label="0.0175439;1pkt 1fpkt"];
2083--3601[label="0.0188679;1pkt 1fpkt"];
2083--3688[label="0.0277778;1pkt 1fpkt"];
2083--3714[label="0.02;1pkt 1fpkt"];
2083--3734[label="0.0416667;1pkt 1fpkt"];
2083--3784[label="0.02;1pkt 1fpkt"];
2083--3825[label="0.0338983;2pkt 2fpkt"];
2083--3874[label="0.0344828;1pkt 1fpkt"];
2083--3974[label="0.04;1pkt 1fpkt"];
2083--3977[label="0.03125;1pkt 1fpkt"];
2083--4053[label="0.0204082;1pkt 1fpkt"];
2083--4188[label="0.0357143;1pkt 1fpkt"];
2083--4206[label="0.0555556;1pkt 1fpkt"];
2083--4241[label="0.0322581;1pkt 1fpkt"];
2083--4295[label="0.0140845;1pkt 1fpkt"];
2083--4539[label="0.0151515;1pkt 1fpkt"];
2083--4630[label="0.025;1pkt 1fpkt"];
2083--4742[label="0.0263158;1pkt 1fpkt"];
2083--4818[label="0.04;1pkt 1fpkt"];
2083--4939[label="0.0166667;1pkt 1fpkt"];
2083--5135[label="0.016129;1pkt 1fpkt"];
2083--5259[label="0.0178571;1pkt 1fpkt"];
2083--5323[label="0.0188679;1pkt 1fpkt"];
2083--5370[label="0.0277778;1pkt 1fpkt"];
2083--5435[label="0.0344828;2pkt 2fpkt"];
2083--5506[label="0.04;1pkt 1fpkt"];
2083--5508[label="0.03125;1pkt 1fpkt"];
2083--5547[label="0.0208333;1pkt 1fpkt"];
2083--5635[label="0.0588235;1pkt 1fpkt"];
2083--5685[label="0.0142857;1pkt 1fpkt"];
2083--5802[label="0.0151515;1pkt 1fpkt"];
2083--5902[label="0.0263158;1pkt 1fpkt"];
2083--5995[label="0.0163934;1pkt 1fpkt"];
2083--6154[label="0.0188679;1pkt 1fpkt"];
2083--6256[label="0.0204082;1pkt 1fpkt"];
2083--6295[label="0.0588235;1pkt 1fpkt"];
2128--2454[label="0.0344828;1pkt 1fpkt"];
2128--2872[label="0.025;1pkt 1fpkt"];
2128--3053[label="0.0263158;1pkt 1fpkt"];
2128--3251[label="0.016129;1pkt 1fpkt"];
2128--3481[label="0.0175439;1pkt 1fpkt"];
2128--3659[label="0.05;1pkt 1fpkt"];
2128--3784[label="0.02;1pkt 1fpkt"];
2128--3974[label="0.04;1pkt 1fpkt"];
2128--4053[label="0.0204082;1pkt 1fpkt"];
2128--4295[label="0.0140845;1pkt 1fpkt"];
2128--4539[label="0.0151515;1pkt 1fpkt"];
2128--5023[label="0.0263158;1pkt 1fpkt"];
2128--5135[label="0.016129;1pkt 1fpkt"];
2128--5506[label="0.04;1pkt 1fpkt"];
2128--5696[label="0.25;1pkt 1fpkt"];
2128--5802[label="0.0151515;1pkt 1fpkt"];
2128--6256[label="0.0204082;1pkt 1fpkt"];
2185--2359[label="0.025;1pkt 1fpkt"];
2185--2702[label="0.0416667;1pkt 1fpkt"];
2185--2872[label="0.025;1pkt 1fpkt"];
2185--2994[label="0.047619;1pkt 1fpkt"];
2185--3053[label="0.0263158;1pkt 1fpkt"];
2185--3067[label="0.0204082;1pkt 1fpkt"];
2185--3251[label="0.016129;1pkt 1fpkt"];
2185--3351[label="0.0322581;1pkt 1fpkt"];
2185--3481[label="0.0175439;1pkt 1fpkt"];
2185--3601[label="0.0188679;1pkt 1fpkt"];
2185--3659[label="0.05;1pkt 1fpkt"];
2185--3688[label="0.0277778;1pkt 1fpkt"];
2185--3784[label="0.02;1pkt 1fpkt"];
2185--3974[label="0.04;1pkt 1fpkt"];
2185--3977[label="0.03125;1pkt 1fpkt"];
2185--4053[label="0.0204082;1pkt 1fpkt"];
2185--4295[label="0.0140845;1pkt 1fpkt"];
2185--4305[label="0.025;1pkt 1fpkt"];
2185--4539[label="0.0151515;1pkt 1fpkt"];
2185--4611[label="0.0625;1pkt 1fpkt"];
2185--4630[label="0.025;1pkt 1fpkt"];
2185--4818[label="0.04;1pkt 1fpkt"];
2185--5023[label="0.0263158;1pkt 1fpkt"];
2185--5135[label="0.016129;1pkt 1fpkt"];
2185--5259[label="0.0178571;1pkt 1fpkt"];
2185--5323[label="0.0188679;1pkt 1fpkt"];
2185--5351[label="0.0526316;1pkt 1fpkt"];
2185--5370[label="0.0277778;1pkt 1fpkt"];
2185--5506[label="0.04;1pkt 1fpkt"];
2185--5508[label="0.03125;1pkt 1fpkt"];
2185--5547[label="0.0208333;1pkt 1fpkt"];
2185--5685[label="0.0142857;1pkt 1fpkt"];
2185--5802[label="0.0151515;1pkt 1fpkt"];
2185--6154[label="0.0188679;1pkt 1fpkt"];
2185--6256[label="0.0204082;1pkt 1fpkt"];
2669--4803[label="1;10pkt 10fpkt"];
3581--5311[label="1;12pkt 12fpkt"];
3624--5336[label="1;44pkt 44fpkt"];
3710--5380[label="1;9pkt 9fpkt"];
3974--5506[label="1;25pkt 25fpkt"];
4028--5533[label="1;14pkt 14fpkt"];
4539--5802[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="53"/>
      <filter dst_ip="161.29.54.102" src_port="53"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1043{
style=filled;
color=gray75;
4287[label="197.250.196.203;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5681[label="197.250.196.203;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1043[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.250.196.203:80, 136.93.203.178:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1827: (8.33333%)&lt;BR/&gt; 1826: (8.33333%)&lt;BR/&gt; 1825: (8.33333%)&lt;BR/&gt; 1824: (8.33333%)&gt;];
}
4287--5681[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.203.178" src_ip="197.250.196.203" src_port="80"/>
    </slice>
    <from sec="1068527634" usec="0"/>
    <to sec="1068527689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1044{
style=filled;
color=gray75;
4290[label="144.218.37.204;190pkt 190fpkt", shape=pentagon, color=darkviolet];
5683[label="144.218.37.204;189pkt 189fpkt", shape=invtriangle, color=brown];
6319[label="144.218.37.204;190pkt 190fpkt", shape=invhouse, color=bisque];
stat1044[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.218.37.204:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4290--5683[label="1;189pkt 189fpkt"];
4290--6319[label="1;190pkt 190fpkt"];
5683--6319[label="1;189pkt 189fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="144.218.37.204" src_port="1030"/>
    </slice>
    <from sec="1068527202" usec="0"/>
    <to sec="1068527239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1045{
style=filled;
color=gray75;
4306[label="96.138.187.207;144pkt 144fpkt", shape=pentagon, color=darkviolet];
5689[label="96.138.187.207;144pkt 144fpkt", shape=invtriangle, color=brown];
6322[label="96.138.187.207;143pkt 143fpkt", shape=invhouse, color=bisque];
stat1045[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.138.187.207:63429, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63429: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4306--5689[label="1;144pkt 144fpkt"];
4306--6322[label="1;143pkt 143fpkt"];
5689--6322[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.138.187.207" src_port="63429"/>
    </slice>
    <from sec="1068527434" usec="0"/>
    <to sec="1068527458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1046{
style=filled;
color=gray75;
1356[label="208.18.9.8;d;99pkt 99fpkt", shape=diamond, color=yellow];
1544[label="212.30.113.107;s;10pkt 10fpkt", shape=hexagon, color=black];
4346[label="200.92.29.213;58pkt 58fpkt", shape=pentagon, color=darkviolet];
5704[label="200.92.29.213;58pkt 58fpkt", shape=invtriangle, color=brown];
stat1046[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.92.29.213:80, 208.18.9.8:*}[51.7857%]&lt;BR/&gt;{*:0, 208.18.9.8:0}[32.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.3333%)&lt;BR/&gt; 0: (16%)&lt;BR/&gt; 1863: (2.66667%)&lt;BR/&gt; 3878: (0.666667%)&lt;BR/&gt; 3876: (0.666667%)&gt;];
}
1356--1544[label="0.1;1pkt 1fpkt"];
1356--2367[label="0.010101;1pkt 1fpkt"];
1356--3474[label="0.1;1pkt 1fpkt"];
1356--3932[label="0.010101;1pkt 1fpkt"];
1356--4073[label="0.010101;1pkt 1fpkt"];
1356--4346[label="0.931034;54pkt 54fpkt"];
1356--5562[label="0.010101;1pkt 1fpkt"];
1356--5704[label="0.931034;54pkt 54fpkt"];
1356--6264[label="0.010101;1pkt 1fpkt"];
1544--3474[label="1;10pkt 10fpkt"];
4346--5704[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.9.8" src_ip="200.92.29.213" src_port="80"/>
      <filter dst_ip="208.18.9.8"/>
    </slice>
    <from sec="1068526804" usec="0"/>
    <to sec="1068527692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1047{
style=filled;
color=gray75;
4347[label="6.98.82.213;133pkt 133fpkt", shape=pentagon, color=darkviolet];
5705[label="6.98.82.213;133pkt 133fpkt", shape=invtriangle, color=brown];
6329[label="6.98.82.213;132pkt 132fpkt", shape=invhouse, color=bisque];
stat1047[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.98.82.213:0, *:0}[93.2331%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.2161%)&lt;BR/&gt; 135: (2.26131%)&lt;BR/&gt; 80: (1.13065%)&lt;BR/&gt; 64687: (0.376884%)&lt;BR/&gt; 62647: (0.376884%)&gt;];
}
4347--5705[label="1;133pkt 133fpkt"];
4347--6329[label="1;132pkt 132fpkt"];
5705--6329[label="1;132pkt 132fpkt"];
</description>
    <slice>
      <filter src_ip="6.98.82.213"/>
    </slice>
    <from sec="1068526808" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1048{
style=filled;
color=gray75;
4355[label="6.189.200.214;335pkt 335fpkt", shape=pentagon, color=darkviolet];
5710[label="6.189.200.214;335pkt 335fpkt", shape=invtriangle, color=brown];
6331[label="6.189.200.214;335pkt 335fpkt", shape=invhouse, color=bisque];
stat1048[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.189.200.214:0, *:0}[94.0299%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.0299%)&lt;BR/&gt; 80: (2.23881%)&lt;BR/&gt; 135: (0.746269%)&lt;BR/&gt; 63325: (0.149254%)&lt;BR/&gt; 62853: (0.149254%)&gt;];
}
4355--5710[label="1;335pkt 335fpkt"];
4355--6331[label="1;335pkt 335fpkt"];
5710--6331[label="1;335pkt 335fpkt"];
</description>
    <slice>
      <filter src_ip="6.189.200.214"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1049{
style=filled;
color=gray75;
4378[label="210.88.122.217;149pkt 149fpkt", shape=pentagon, color=darkviolet];
5724[label="210.88.122.217;149pkt 149fpkt", shape=invtriangle, color=brown];
stat1049[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.88.122.217:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4378--5724[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.88.122.217" src_port="1025"/>
    </slice>
    <from sec="1068527197" usec="0"/>
    <to sec="1068527238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1050{
style=filled;
color=gray75;
4381[label="197.96.241.217;109pkt 109fpkt", shape=pentagon, color=darkviolet];
5725[label="197.96.241.217;108pkt 108fpkt", shape=invtriangle, color=brown];
stat1050[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.96.241.217:0, *:0}[95.4128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.3917%)&lt;BR/&gt; 80: (1.84332%)&lt;BR/&gt; 37395: (0.460829%)&lt;BR/&gt; 33990: (0.460829%)&lt;BR/&gt; 25661: (0.460829%)&gt;];
}
4381--5725[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter src_ip="197.96.241.217"/>
    </slice>
    <from sec="1068526831" usec="0"/>
    <to sec="1068527695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1051{
style=filled;
color=gray75;
4383[label="4.216.87.218;178pkt 178fpkt", shape=pentagon, color=darkviolet];
5727[label="4.216.87.218;178pkt 178fpkt", shape=invtriangle, color=brown];
stat1051[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.216.87.218:0, *:0}[89.3258%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (89.3258%)&lt;BR/&gt; 135: (3.65169%)&lt;BR/&gt; 80: (1.68539%)&lt;BR/&gt; 61032: (0.280899%)&lt;BR/&gt; 58838: (0.280899%)&gt;];
}
4383--5727[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter src_ip="4.216.87.218"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1052{
style=filled;
color=gray75;
4392[label="202.196.237.219;347pkt 347fpkt", shape=pentagon, color=darkviolet];
5732[label="202.196.237.219;347pkt 347fpkt", shape=invtriangle, color=brown];
stat1052[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.196.237.219:0, *:0}[95.1009%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.1009%)&lt;BR/&gt; 80: (2.44957%)&lt;BR/&gt; 64848: (0.144092%)&lt;BR/&gt; 57269: (0.144092%)&lt;BR/&gt; 55895: (0.144092%)&gt;];
}
4392--5732[label="1;347pkt 347fpkt"];
</description>
    <slice>
      <filter src_ip="202.196.237.219"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1053{
style=filled;
color=gray75;
4425[label="200.108.155.225;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5741[label="200.108.155.225;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1053[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.108.155.225:80, 143.38.52.154:63188}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63188: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4425--5741[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.52.154" dst_port="63188" src_ip="200.108.155.225" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1054{
style=filled;
color=gray75;
4439[label="208.31.240.226;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5747[label="208.31.240.226;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1054[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.31.240.226:53, 218.53.177.51:53}[20%]&lt;BR/&gt;{208.31.240.226:53, 4.41.193.94:53}[20%]&lt;BR/&gt;{208.31.240.226:3599, 198.118.66.210:443}[20%]&lt;BR/&gt;{208.31.240.226:3600, 198.118.66.210:443}[20%]&lt;BR/&gt;{208.31.240.226:3601, 198.118.66.210:443}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (40%)&lt;BR/&gt; 443: (30%)&lt;BR/&gt; 3601: (10%)&lt;BR/&gt; 3600: (10%)&lt;BR/&gt; 3599: (10%)&gt;];
}
4439--5747[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="198.118.66.210" dst_port="443" src_ip="208.31.240.226" src_port="3601"/>
      <filter dst_ip="198.118.66.210" dst_port="443" src_ip="208.31.240.226" src_port="3600"/>
      <filter dst_ip="198.118.66.210" dst_port="443" src_ip="208.31.240.226" src_port="3599"/>
      <filter dst_ip="4.41.193.94" dst_port="53" src_ip="208.31.240.226" src_port="53"/>
      <filter dst_ip="218.53.177.51" dst_port="53" src_ip="208.31.240.226" src_port="53"/>
    </slice>
    <from sec="1068526824" usec="0"/>
    <to sec="1068527074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1055{
style=filled;
color=gray75;
5748[label="197.76.75.227;291pkt 291fpkt", shape=invtriangle, color=brown];
stat1055[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.76.75.227:0, *:0}[97.5945%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.5945%)&lt;BR/&gt; 80: (1.20275%)&lt;BR/&gt; 3940: (0.171821%)&lt;BR/&gt; 3542: (0.171821%)&lt;BR/&gt; 3267: (0.171821%)&gt;];
}
</description>
    <slice>
      <filter src_ip="197.76.75.227"/>
    </slice>
    <from sec="1068526807" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1056{
style=filled;
color=gray75;
4451[label="208.174.61.229;31pkt 31fpkt", shape=pentagon, color=darkviolet];
5754[label="208.174.61.229;31pkt 31fpkt", shape=invtriangle, color=brown];
6347[label="208.174.61.229;31pkt 31fpkt", shape=invhouse, color=bisque];
stat1056[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.174.61.229:443, 209.139.221.153:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4136: (1.6129%)&lt;BR/&gt; 4126: (1.6129%)&lt;BR/&gt; 4116: (1.6129%)&lt;BR/&gt; 4094: (1.6129%)&gt;];
}
4451--5754[label="1;31pkt 31fpkt"];
4451--6347[label="1;31pkt 31fpkt"];
5754--6347[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="209.139.221.153" src_ip="208.174.61.229" src_port="443"/>
    </slice>
    <from sec="1068527127" usec="0"/>
    <to sec="1068527678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1057{
style=filled;
color=gray75;
4464[label="217.130.178.231;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5759[label="217.130.178.231;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1057[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.130.178.231:80, 136.93.117.164:2036}[33.3333%]&lt;BR/&gt;{217.130.178.231:80, 136.93.117.164:2037}[33.3333%]&lt;BR/&gt;{217.130.178.231:80, 136.93.117.164:2047}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2047: (16.6667%)&lt;BR/&gt; 2037: (16.6667%)&lt;BR/&gt; 2036: (16.6667%)&gt;];
}
4464--5759[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.117.164" dst_port="2047" src_ip="217.130.178.231" src_port="80"/>
      <filter dst_ip="136.93.117.164" dst_port="2037" src_ip="217.130.178.231" src_port="80"/>
      <filter dst_ip="136.93.117.164" dst_port="2036" src_ip="217.130.178.231" src_port="80"/>
    </slice>
    <from sec="1068527103" usec="0"/>
    <to sec="1068527161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1058{
style=filled;
color=gray75;
4475[label="5.48.49.233;103pkt 103fpkt", shape=pentagon, color=darkviolet];
5764[label="5.48.49.233;102pkt 102fpkt", shape=invtriangle, color=brown];
stat1058[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.48.49.233:0, *:0}[98.0583%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.0488%)&lt;BR/&gt; 80: (0.97561%)&lt;BR/&gt; 15801: (0.487805%)&lt;BR/&gt; 13725: (0.487805%)&gt;];
}
4475--5764[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter src_ip="5.48.49.233"/>
    </slice>
    <from sec="1068526818" usec="0"/>
    <to sec="1068527685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.63321,1.69939,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1059{
style=filled;
color=gray75;
1346[label="208.213.89.233;s;535pkt 535fpkt", shape=diamond, color=yellow];
4478[label="208.213.89.233;590pkt 590fpkt", shape=pentagon, color=darkviolet];
5765[label="208.213.89.233;589pkt 589fpkt", shape=invtriangle, color=brown];
stat1059[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.213.89.233:0, *:0}[97.9661%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.958%)&lt;BR/&gt; 80: (0.933489%)&lt;BR/&gt; 60396: (0.0875146%)&lt;BR/&gt; 58503: (0.0875146%)&lt;BR/&gt; 54239: (0.0875146%)&gt;];
}
1346--1576[label="0.0138889;1pkt 1fpkt"];
1346--4478[label="1;535pkt 535fpkt"];
1346--5765[label="0.998131;534pkt 534fpkt"];
4478--5765[label="1;589pkt 589fpkt"];
</description>
    <slice>
      <filter src_ip="208.213.89.233"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1060{
style=filled;
color=gray75;
4479[label="209.181.214.233;102pkt 102fpkt", shape=pentagon, color=darkviolet];
5766[label="209.181.214.233;101pkt 101fpkt", shape=invtriangle, color=brown];
stat1060[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.181.214.233:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4479--5766[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter src_ip="209.181.214.233"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12377,1.84878,020,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1061{
style=filled;
color=gray75;
94[label="208.130.2.235s;160pkt 160fpkt", shape=rectangle, color=red];
4483[label="208.130.2.235;160pkt 160fpkt", shape=pentagon, color=darkviolet];
5769[label="208.130.2.235;160pkt 160fpkt", shape=invtriangle, color=brown];
stat1061[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.130.2.235:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
94--4483[label="1;160pkt 160fpkt"];
94--5769[label="1;160pkt 160fpkt"];
4483--5769[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter src_ip="208.130.2.235"/>
    </slice>
    <from sec="1068527522" usec="0"/>
    <to sec="1068527525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1062{
style=filled;
color=gray75;
4485[label="200.25.119.235;115pkt 115fpkt", shape=pentagon, color=darkviolet];
5770[label="200.25.119.235;114pkt 114fpkt", shape=invtriangle, color=brown];
stat1062[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.25.119.235:0, *:0}[92.1739%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.1397%)&lt;BR/&gt; 135: (3.05677%)&lt;BR/&gt; 80: (0.873362%)&lt;BR/&gt; 13549: (0.436681%)&lt;BR/&gt; 12677: (0.436681%)&gt;];
}
4485--5770[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter src_ip="200.25.119.235"/>
    </slice>
    <from sec="1068526841" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1063{
style=filled;
color=gray75;
4488[label="202.157.52.236;407pkt 407fpkt", shape=pentagon, color=darkviolet];
5772[label="202.157.52.236;406pkt 406fpkt", shape=invtriangle, color=brown];
stat1063[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.157.52.236:0, *:0}[97.2973%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.294%)&lt;BR/&gt; 80: (1.35301%)&lt;BR/&gt; 64250: (0.123001%)&lt;BR/&gt; 42281: (0.123001%)&lt;BR/&gt; 32682: (0.123001%)&gt;];
}
4488--5772[label="1;406pkt 406fpkt"];
</description>
    <slice>
      <filter src_ip="202.157.52.236"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1064{
style=filled;
color=gray75;
494[label="155.115.114.236;s;3002pkt 3002fpkt", shape=diamond, color=yellow];
1516[label="155.115.114.236;s;3002pkt 3002fpkt", shape=hexagon, color=black];
1897[label="208.31.196.145;d;104pkt 104fpkt", shape=hexagon, color=black];
4492[label="155.115.114.236;3258pkt 3258fpkt", shape=pentagon, color=darkviolet];
5774[label="155.115.114.236;3258pkt 3258fpkt", shape=invtriangle, color=brown];
stat1064[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.115.114.236:0, *:0}[93.9845%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.467%)&lt;BR/&gt; 80: (1.74667%)&lt;BR/&gt; 53388: (0.0198035%)&lt;BR/&gt; 52256: (0.0198035%)&lt;BR/&gt; 51968: (0.0198035%)&gt;];
}
494--1029[label="0.03125;4pkt 4fpkt"];
494--1516[label="1;3002pkt 3002fpkt"];
494--1897[label="0.0384615;4pkt 4fpkt"];
494--2164[label="0.000691563;1pkt 1fpkt"];
494--2327[label="0.00233178;7pkt 7fpkt"];
494--2342[label="0.00233178;7pkt 7fpkt"];
494--4492[label="1;3002pkt 3002fpkt"];
494--5774[label="1;3002pkt 3002fpkt"];
1516--1897[label="0.0384615;4pkt 4fpkt"];
1516--2164[label="0.000691563;1pkt 1fpkt"];
1516--2327[label="0.00233178;7pkt 7fpkt"];
1516--2342[label="0.00233178;7pkt 7fpkt"];
1516--4492[label="1;3002pkt 3002fpkt"];
1516--5774[label="1;3002pkt 3002fpkt"];
1897--2327[label="0.0288462;3pkt 3fpkt"];
1897--2342[label="0.0288462;3pkt 3fpkt"];
1897--2343[label="0.00961538;1pkt 1fpkt"];
1897--2349[label="0.00961538;1pkt 1fpkt"];
1897--3484[label="0.00961538;1pkt 1fpkt"];
1897--4492[label="0.0384615;4pkt 4fpkt"];
1897--5774[label="0.0384615;4pkt 4fpkt"];
4492--5774[label="1;3258pkt 3258fpkt"];
</description>
    <slice>
      <filter src_ip="155.115.114.236"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1065{
style=filled;
color=gray75;
4495[label="212.48.151.236;154pkt 154fpkt", shape=pentagon, color=darkviolet];
5776[label="212.48.151.236;154pkt 154fpkt", shape=invtriangle, color=brown];
stat1065[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.48.151.236:0, *:0}[97.4026%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.4026%)&lt;BR/&gt; 135: (1.2987%)&lt;BR/&gt; 57131: (0.324675%)&lt;BR/&gt; 55555: (0.324675%)&lt;BR/&gt; 51973: (0.324675%)&gt;];
}
4495--5776[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter src_ip="212.48.151.236"/>
    </slice>
    <from sec="1068526808" usec="0"/>
    <to sec="1068527698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1066{
style=filled;
color=gray75;
4506[label="155.115.114.238;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5782[label="155.115.114.238;1pkt 1fpkt", shape=invtriangle, color=brown];
6355[label="155.115.114.238;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1066[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.115.114.238:0, 208.31.229.34:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4506--5782[label="1;1pkt 1fpkt"];
4506--6355[label="1;1pkt 1fpkt"];
5782--6355[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.229.34" src_ip="155.115.114.238"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.2.146.238"/>
    </slice>
    <from sec="1068526923" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1068{
style=filled;
color=gray75;
4509[label="198.26.152.238;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5785[label="198.26.152.238;1pkt 1fpkt", shape=invtriangle, color=brown];
6357[label="198.26.152.238;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1068[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.26.152.238:80, 161.29.55.53:56951}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56951: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4509--5785[label="1;1pkt 1fpkt"];
4509--6357[label="1;1pkt 1fpkt"];
5785--6357[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.55.53" dst_port="56951" src_ip="198.26.152.238" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1069{
style=filled;
color=gray75;
4513[label="143.176.79.239;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5786[label="143.176.79.239;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1069[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.176.79.239:548, 6.200.16.22:49338}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49338: (50%)&lt;BR/&gt; 548: (50%)&gt;];
}
4513--5786[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="6.200.16.22" dst_port="49338" src_ip="143.176.79.239" src_port="548"/>
    </slice>
    <from sec="1068526880" usec="0"/>
    <to sec="1068527693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1070{
style=filled;
color=gray75;
4515[label="96.186.120.239;184pkt 184fpkt", shape=pentagon, color=darkviolet];
5787[label="96.186.120.239;184pkt 184fpkt", shape=invtriangle, color=brown];
6358[label="96.186.120.239;184pkt 184fpkt", shape=invhouse, color=bisque];
stat1070[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.186.120.239:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4515--5787[label="1;184pkt 184fpkt"];
4515--6358[label="1;184pkt 184fpkt"];
5787--6358[label="1;184pkt 184fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="96.186.120.239" src_port="1028"/>
    </slice>
    <from sec="1068527481" usec="0"/>
    <to sec="1068527496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1071{
style=filled;
color=gray75;
4516[label="16.94.140.239;193pkt 193fpkt", shape=pentagon, color=darkviolet];
5788[label="16.94.140.239;192pkt 192fpkt", shape=invtriangle, color=brown];
6359[label="16.94.140.239;192pkt 192fpkt", shape=invhouse, color=bisque];
stat1071[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.94.140.239:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 65523: (0.259965%)&lt;BR/&gt; 65298: (0.259965%)&lt;BR/&gt; 65135: (0.259965%)&lt;BR/&gt; 64692: (0.259965%)&gt;];
}
4516--5788[label="1;192pkt 192fpkt"];
4516--6359[label="1;192pkt 192fpkt"];
5788--6359[label="1;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="16.94.140.239"/>
    </slice>
    <from sec="1068527157" usec="0"/>
    <to sec="1068527245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.16806,1.94877,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1072{
style=filled;
color=gray75;
95[label="202.199.144.239s;253pkt 253fpkt", shape=rectangle, color=red];
stat1072[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.199.144.239:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
95--163[label="0.0237154;6pkt 6fpkt"];
95--206[label="0.0237154;6pkt 6fpkt"];
95--4517[label="1;253pkt 253fpkt"];
95--5789[label="1;253pkt 253fpkt"];
95--6360[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.199.144.239" src_port="1033"/>
    </slice>
    <from sec="1068526846" usec="0"/>
    <to sec="1068526859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1073{
style=filled;
color=gray75;
4520[label="208.31.220.239;150pkt 150fpkt", shape=pentagon, color=darkviolet];
5791[label="208.31.220.239;149pkt 149fpkt", shape=invtriangle, color=brown];
6361[label="208.31.220.239;149pkt 149fpkt", shape=invhouse, color=bisque];
stat1073[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.31.220.239:0, *:0}[99.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.3304%)&lt;BR/&gt; 1703: (0.334821%)&lt;BR/&gt; 135: (0.334821%)&gt;];
}
4520--5791[label="1;149pkt 149fpkt"];
4520--6361[label="1;149pkt 149fpkt"];
5791--6361[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter src_ip="208.31.220.239"/>
    </slice>
    <from sec="1068526832" usec="0"/>
    <to sec="1068527695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.36.183.240"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1075{
style=filled;
color=gray75;
4538[label="98.122.193.241;87pkt 87fpkt", shape=pentagon, color=darkviolet];
5801[label="98.122.193.241;87pkt 87fpkt", shape=invtriangle, color=brown];
6367[label="98.122.193.241;86pkt 86fpkt", shape=invhouse, color=bisque];
stat1075[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.122.193.241:0, *:0}[89.6552%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (89.6154%)&lt;BR/&gt; 135: (5.19231%)&lt;BR/&gt; 26566: (0.576923%)&lt;BR/&gt; 25769: (0.576923%)&lt;BR/&gt; 25433: (0.576923%)&gt;];
}
4538--5801[label="1;87pkt 87fpkt"];
4538--6367[label="1;86pkt 86fpkt"];
5801--6367[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter src_ip="98.122.193.241"/>
    </slice>
    <from sec="1068526810" usec="0"/>
    <to sec="1068527691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1076{
style=filled;
color=gray75;
452[label="143.38.52.9;d;1575pkt 1575fpkt", shape=diamond, color=yellow];
507[label="161.29.55.60;d;938pkt 938fpkt", shape=diamond, color=yellow];
525[label="143.38.52.82;d;541pkt 541fpkt", shape=diamond, color=yellow];
752[label="218.164.73.54;d;545pkt 545fpkt", shape=diamond, color=yellow];
824[label="146.153.29.237;d;351pkt 351fpkt", shape=diamond, color=yellow];
835[label="136.93.246.228;d;403pkt 403fpkt", shape=diamond, color=yellow];
837[label="136.93.200.74;d;377pkt 377fpkt", shape=diamond, color=yellow];
959[label="143.176.76.61;d;229pkt 229fpkt", shape=diamond, color=yellow];
1007[label="208.31.228.49;d;333pkt 333fpkt", shape=diamond, color=yellow];
1082[label="143.176.79.9;d;192pkt 192fpkt", shape=diamond, color=yellow];
1226[label="7.84.1.134;s;18pkt 18fpkt", shape=diamond, color=yellow];
1737[label="146.153.29.237;d;351pkt 351fpkt", shape=hexagon, color=black];
1935[label="143.38.52.9;d;1262pkt 1262fpkt", shape=hexagon, color=black];
2484[label="217.211.40.12;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3018[label="196.85.175.61;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3163[label="16.86.159.75;121pkt 121fpkt", shape=pentagon, color=darkviolet];
3566[label="193.26.202.119;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3804[label="162.20.77.147;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3806[label="198.244.84.147;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4574[label="7.136.250.246;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4690[label="217.211.40.12;4pkt 4fpkt", shape=invtriangle, color=brown];
5427[label="162.20.77.147;35pkt 35fpkt", shape=invtriangle, color=brown];
5696[label="196.233.103.209;4pkt 4fpkt", shape=invtriangle, color=brown];
5821[label="7.136.250.246;8pkt 8fpkt", shape=invtriangle, color=brown];
5876[label="217.211.40.12;4pkt 4fpkt", shape=invhouse, color=bisque];
6326[label="196.233.103.209;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1076[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, *:*}[61.9526%]&lt;BR/&gt;{*:*, *:53}[37.5808%]&lt;BR/&gt;{*:*, 143.38.52.9:*}[28.4637%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.7354%)&lt;BR/&gt; 57426: (6.7232%)&lt;BR/&gt; 53695: (3.57531%)&lt;BR/&gt; 43625: (2.97151%)&lt;BR/&gt; 1848: (2.36092%)&gt;];
}
452--514[label="0.029703;3pkt 3fpkt"];
452--600[label="0.166667;1pkt 1fpkt"];
452--642[label="0.0123457;1pkt 1fpkt"];
452--712[label="0.0384615;1pkt 1fpkt"];
452--924[label="0.03125;1pkt 1fpkt"];
452--1002[label="0.0133333;1pkt 1fpkt"];
452--1062[label="0.285714;2pkt 2fpkt"];
452--1137[label="0.016129;1pkt 1fpkt"];
452--1164[label="0.0505051;5pkt 5fpkt"];
452--1223[label="0.0555556;1pkt 1fpkt"];
452--1226[label="0.0555556;1pkt 1fpkt"];
452--1229[label="0.0206186;2pkt 2fpkt"];
452--1238[label="0.0178571;1pkt 1fpkt"];
452--1250[label="0.0352941;3pkt 3fpkt"];
452--1275[label="0.0454545;1pkt 1fpkt"];
452--1329[label="0.0759494;6pkt 6fpkt"];
452--1332[label="0.0188679;1pkt 1fpkt"];
452--1341[label="0.0166667;1pkt 1fpkt"];
452--1351[label="0.0119048;1pkt 1fpkt"];
452--1391[label="0.0119048;1pkt 1fpkt"];
452--1399[label="0.124088;34pkt 34fpkt"];
452--1435[label="0.00900901;1pkt 1fpkt"];
452--1587[label="0.166667;1pkt 1fpkt"];
452--1874[label="0.0348837;3pkt 3fpkt"];
452--1935[label="1;1262pkt 1262fpkt"];
452--1988[label="0.016129;1pkt 1fpkt"];
452--2024[label="0.285714;2pkt 2fpkt"];
452--2137[label="0.047619;1pkt 1fpkt"];
452--2144[label="0.03125;1pkt 1fpkt"];
452--2326[label="0.030363;46pkt 46fpkt"];
452--2336[label="0.0590476;93pkt 93fpkt"];
452--2341[label="0.030363;46pkt 46fpkt"];
452--2359[label="0.025;1pkt 1fpkt"];
452--2454[label="0.0344828;1pkt 1fpkt"];
452--2484[label="0.333333;1pkt 1fpkt"];
452--2494[label="0.0447761;3pkt 3fpkt"];
452--2536[label="0.0138889;1pkt 1fpkt"];
452--2566[label="0.0263158;1pkt 1fpkt"];
452--2573[label="0.111111;1pkt 1fpkt"];
452--2580[label="0.0447761;3pkt 3fpkt"];
452--2702[label="0.0416667;1pkt 1fpkt"];
452--2726[label="0.0471698;5pkt 5fpkt"];
452--2756[label="0.0117647;1pkt 1fpkt"];
452--2764[label="0.0666667;1pkt 1fpkt"];
452--2785[label="0.0425532;2pkt 2fpkt"];
452--2834[label="0.123636;34pkt 34fpkt"];
452--2872[label="0.025;1pkt 1fpkt"];
452--2889[label="0.0114943;1pkt 1fpkt"];
452--2900[label="0.016129;1pkt 1fpkt"];
452--2908[label="0.0163934;1pkt 1fpkt"];
452--2929[label="0.00917431;1pkt 1fpkt"];
452--2970[label="0.0280374;3pkt 3fpkt"];
452--2994[label="0.047619;1pkt 1fpkt"];
452--3018[label="0.166667;1pkt 1fpkt"];
452--3027[label="0.00877193;1pkt 1fpkt"];
452--3057[label="0.0206186;2pkt 2fpkt"];
452--3067[label="0.0204082;1pkt 1fpkt"];
452--3163[label="0.917355;111pkt 111fpkt"];
452--3251[label="0.016129;1pkt 1fpkt"];
452--3318[label="0.0666667;1pkt 1fpkt"];
452--3351[label="0.0645161;2pkt 2fpkt"];
452--3459[label="0.0588235;2pkt 2fpkt"];
452--3481[label="0.0175439;1pkt 1fpkt"];
452--3551[label="0.0285714;1pkt 1fpkt"];
452--3601[label="0.0188679;1pkt 1fpkt"];
452--3657[label="0.111111;1pkt 1fpkt"];
452--3659[label="0.05;1pkt 1fpkt"];
452--3688[label="0.0277778;1pkt 1fpkt"];
452--3689[label="0.0666667;6pkt 6fpkt"];
452--3703[label="0.0111111;1pkt 1fpkt"];
452--3714[label="0.02;1pkt 1fpkt"];
452--3734[label="0.0416667;1pkt 1fpkt"];
452--3784[label="0.02;1pkt 1fpkt"];
452--3802[label="0.0163934;1pkt 1fpkt"];
452--3804[label="0.294118;10pkt 10fpkt"];
452--3825[label="0.0338983;2pkt 2fpkt"];
452--3874[label="0.0344828;1pkt 1fpkt"];
452--3901[label="0.0714286;1pkt 1fpkt"];
452--3974[label="0.04;1pkt 1fpkt"];
452--3977[label="0.03125;1pkt 1fpkt"];
452--3985[label="0.0470588;4pkt 4fpkt"];
452--4015[label="0.142857;1pkt 1fpkt"];
452--4028[label="0.0714286;1pkt 1fpkt"];
452--4053[label="0.0204082;1pkt 1fpkt"];
452--4089[label="0.030303;1pkt 1fpkt"];
452--4103[label="0.16129;5pkt 5fpkt"];
452--4241[label="0.0645161;2pkt 2fpkt"];
452--4264[label="0.04;1pkt 1fpkt"];
452--4281[label="0.15;3pkt 3fpkt"];
452--4295[label="0.0140845;1pkt 1fpkt"];
452--4305[label="0.025;1pkt 1fpkt"];
452--4343[label="0.0125;1pkt 1fpkt"];
452--4435[label="0.047619;1pkt 1fpkt"];
452--4469[label="0.047619;1pkt 1fpkt"];
452--4528[label="0.037037;1pkt 1fpkt"];
452--4539[label="0.0151515;1pkt 1fpkt"];
452--4546[label="0.0588235;1pkt 1fpkt"];
452--4574[label="0.25;2pkt 2fpkt"];
452--4630[label="0.025;1pkt 1fpkt"];
452--4690[label="0.25;1pkt 1fpkt"];
452--4698[label="0.0441176;3pkt 3fpkt"];
452--4722[label="0.0138889;1pkt 1fpkt"];
452--4742[label="0.0263158;1pkt 1fpkt"];
452--4750[label="0.0454545;3pkt 3fpkt"];
452--4818[label="0.04;1pkt 1fpkt"];
452--4865[label="0.0434783;2pkt 2fpkt"];
452--4935[label="0.0163934;1pkt 1fpkt"];
452--4939[label="0.0166667;1pkt 1fpkt"];
452--4981[label="0.0283019;3pkt 3fpkt"];
452--5135[label="0.016129;1pkt 1fpkt"];
452--5247[label="0.0606061;2pkt 2fpkt"];
452--5259[label="0.0178571;1pkt 1fpkt"];
452--5298[label="0.0294118;1pkt 1fpkt"];
452--5323[label="0.0188679;1pkt 1fpkt"];
452--5350[label="0.125;1pkt 1fpkt"];
452--5351[label="0.0526316;1pkt 1fpkt"];
452--5370[label="0.0277778;1pkt 1fpkt"];
452--5374[label="0.0111111;1pkt 1fpkt"];
452--5426[label="0.0163934;1pkt 1fpkt"];
452--5427[label="0.314286;11pkt 11fpkt"];
452--5435[label="0.0344828;2pkt 2fpkt"];
452--5506[label="0.04;1pkt 1fpkt"];
452--5508[label="0.03125;1pkt 1fpkt"];
452--5514[label="0.047619;4pkt 4fpkt"];
452--5533[label="0.0714286;1pkt 1fpkt"];
452--5547[label="0.0208333;1pkt 1fpkt"];
452--5666[label="0.04;1pkt 1fpkt"];
452--5685[label="0.0142857;1pkt 1fpkt"];
452--5795[label="0.0384615;1pkt 1fpkt"];
452--5802[label="0.0151515;1pkt 1fpkt"];
452--5821[label="0.25;2pkt 2fpkt"];
452--5876[label="0.25;1pkt 1fpkt"];
452--5893[label="0.0138889;1pkt 1fpkt"];
452--5902[label="0.0263158;1pkt 1fpkt"];
452--5992[label="0.016129;1pkt 1fpkt"];
452--5995[label="0.0163934;1pkt 1fpkt"];
452--6154[label="0.0188679;1pkt 1fpkt"];
452--6244[label="0.0470588;4pkt 4fpkt"];
452--6256[label="0.0204082;1pkt 1fpkt"];
452--6308[label="0.04;1pkt 1fpkt"];
507--514[label="0.00990099;1pkt 1fpkt"];
507--648[label="0.0117647;1pkt 1fpkt"];
507--1137[label="0.0322581;2pkt 2fpkt"];
507--1212[label="0.12;3pkt 3fpkt"];
507--1238[label="0.0357143;2pkt 2fpkt"];
507--1250[label="0.0117647;1pkt 1fpkt"];
507--1312[label="0.0010661;1pkt 1fpkt"];
507--1332[label="0.0377358;2pkt 2fpkt"];
507--1341[label="0.0333333;2pkt 2fpkt"];
507--1391[label="0.0238095;2pkt 2fpkt"];
507--1647[label="0.0021322;2pkt 2fpkt"];
507--1752[label="0.0102389;9pkt 9fpkt"];
507--1867[label="1;938pkt 938fpkt"];
507--1874[label="0.0116279;1pkt 1fpkt"];
507--1988[label="0.0322581;2pkt 2fpkt"];
507--2159[label="0.0010661;1pkt 1fpkt"];
507--2321[label="0.0010661;1pkt 1fpkt"];
507--2326[label="0.0159915;15pkt 15fpkt"];
507--2336[label="0.0127932;12pkt 12fpkt"];
507--2341[label="0.0159915;15pkt 15fpkt"];
507--2359[label="0.05;2pkt 2fpkt"];
507--2454[label="0.0344828;1pkt 1fpkt"];
507--2566[label="0.0263158;1pkt 1fpkt"];
507--2669[label="0.181818;2pkt 2fpkt"];
507--2693[label="0.0358306;11pkt 11fpkt"];
507--2723[label="0.0377358;8pkt 8fpkt"];
507--2756[label="0.0235294;2pkt 2fpkt"];
507--2785[label="0.0212766;1pkt 1fpkt"];
507--2872[label="0.05;2pkt 2fpkt"];
507--2900[label="0.016129;1pkt 1fpkt"];
507--2970[label="0.00934579;1pkt 1fpkt"];
507--2994[label="0.047619;1pkt 1fpkt"];
507--3067[label="0.0204082;1pkt 1fpkt"];
507--3251[label="0.0322581;2pkt 2fpkt"];
507--3368[label="0.2;2pkt 2fpkt"];
507--3481[label="0.0350877;2pkt 2fpkt"];
507--3530[label="0.00909091;1pkt 1fpkt"];
507--3551[label="0.0571429;2pkt 2fpkt"];
507--3581[label="0.0769231;1pkt 1fpkt"];
507--3590[label="0.0869565;2pkt 2fpkt"];
507--3601[label="0.0188679;1pkt 1fpkt"];
507--3607[label="0.0540541;2pkt 2fpkt"];
507--3703[label="0.0222222;2pkt 2fpkt"];
507--3784[label="0.04;2pkt 2fpkt"];
507--3825[label="0.0338983;2pkt 2fpkt"];
507--3866[label="0.176471;3pkt 3fpkt"];
507--3901[label="0.142857;2pkt 2fpkt"];
507--3974[label="0.08;2pkt 2fpkt"];
507--3977[label="0.0625;2pkt 2fpkt"];
507--3985[label="0.0117647;1pkt 1fpkt"];
507--4000[label="0.16;4pkt 4fpkt"];
507--4015[label="0.142857;1pkt 1fpkt"];
507--4053[label="0.0204082;1pkt 1fpkt"];
507--4070[label="0.115385;3pkt 3fpkt"];
507--4255[label="0.00238663;1pkt 1fpkt"];
507--4264[label="0.04;1pkt 1fpkt"];
507--4285[label="0.00959488;9pkt 9fpkt"];
507--4295[label="0.028169;2pkt 2fpkt"];
507--4305[label="0.025;1pkt 1fpkt"];
507--4528[label="0.037037;1pkt 1fpkt"];
507--4539[label="0.030303;2pkt 2fpkt"];
507--4611[label="0.0625;1pkt 1fpkt"];
507--4630[label="0.05;2pkt 2fpkt"];
507--4742[label="0.0263158;1pkt 1fpkt"];
507--4803[label="0.2;2pkt 2fpkt"];
507--4815[label="0.0357143;11pkt 11fpkt"];
507--4865[label="0.0217391;1pkt 1fpkt"];
507--4935[label="0.0163934;1pkt 1fpkt"];
507--4981[label="0.00943396;1pkt 1fpkt"];
507--5135[label="0.0322581;2pkt 2fpkt"];
507--5196[label="0.222222;2pkt 2fpkt"];
507--5259[label="0.0357143;2pkt 2fpkt"];
507--5284[label="0.00909091;1pkt 1fpkt"];
507--5298[label="0.0588235;2pkt 2fpkt"];
507--5311[label="0.0833333;1pkt 1fpkt"];
507--5323[label="0.0188679;1pkt 1fpkt"];
507--5374[label="0.0222222;2pkt 2fpkt"];
507--5435[label="0.0344828;2pkt 2fpkt"];
507--5463[label="0.1875;3pkt 3fpkt"];
507--5506[label="0.08;2pkt 2fpkt"];
507--5508[label="0.0625;2pkt 2fpkt"];
507--5514[label="0.0119048;1pkt 1fpkt"];
507--5547[label="0.0208333;1pkt 1fpkt"];
507--5666[label="0.04;1pkt 1fpkt"];
507--5680[label="0.00959488;9pkt 9fpkt"];
507--5685[label="0.0285714;2pkt 2fpkt"];
507--5795[label="0.0384615;1pkt 1fpkt"];
507--5802[label="0.030303;2pkt 2fpkt"];
507--5902[label="0.0263158;1pkt 1fpkt"];
507--5992[label="0.016129;1pkt 1fpkt"];
507--6109[label="0.2;2pkt 2fpkt"];
507--6136[label="0.00909091;1pkt 1fpkt"];
507--6154[label="0.0188679;1pkt 1fpkt"];
507--6244[label="0.0117647;1pkt 1fpkt"];
507--6256[label="0.0204082;1pkt 1fpkt"];
507--6308[label="0.04;1pkt 1fpkt"];
525--924[label="0.03125;1pkt 1fpkt"];
525--1137[label="0.016129;1pkt 1fpkt"];
525--1223[label="0.0555556;1pkt 1fpkt"];
525--1226[label="0.0555556;1pkt 1fpkt"];
525--1238[label="0.0178571;1pkt 1fpkt"];
525--1275[label="0.0454545;1pkt 1fpkt"];
525--1332[label="0.0188679;1pkt 1fpkt"];
525--1341[label="0.0166667;1pkt 1fpkt"];
525--1773[label="1;296pkt 296fpkt"];
525--1988[label="0.016129;1pkt 1fpkt"];
525--2137[label="0.047619;1pkt 1fpkt"];
525--2144[label="0.03125;1pkt 1fpkt"];
525--2326[label="0.0110906;6pkt 6fpkt"];
525--2336[label="0.00739372;4pkt 4fpkt"];
525--2341[label="0.0110906;6pkt 6fpkt"];
525--2359[label="0.025;1pkt 1fpkt"];
525--2454[label="0.0344828;1pkt 1fpkt"];
525--2566[label="0.0263158;1pkt 1fpkt"];
525--2573[label="0.111111;1pkt 1fpkt"];
525--2702[label="0.0416667;1pkt 1fpkt"];
525--2756[label="0.0117647;1pkt 1fpkt"];
525--2872[label="0.025;1pkt 1fpkt"];
525--3053[label="0.0263158;1pkt 1fpkt"];
525--3067[label="0.0204082;1pkt 1fpkt"];
525--3251[label="0.016129;1pkt 1fpkt"];
525--3318[label="0.0666667;1pkt 1fpkt"];
525--3351[label="0.0322581;1pkt 1fpkt"];
525--3370[label="0.0555556;1pkt 1fpkt"];
525--3481[label="0.0175439;1pkt 1fpkt"];
525--3551[label="0.0285714;1pkt 1fpkt"];
525--3601[label="0.0188679;1pkt 1fpkt"];
525--3657[label="0.111111;1pkt 1fpkt"];
525--3659[label="0.05;1pkt 1fpkt"];
525--3688[label="0.0277778;1pkt 1fpkt"];
525--3784[label="0.02;1pkt 1fpkt"];
525--3901[label="0.0714286;1pkt 1fpkt"];
525--3974[label="0.04;1pkt 1fpkt"];
525--3977[label="0.03125;1pkt 1fpkt"];
525--4053[label="0.0204082;1pkt 1fpkt"];
525--4089[label="0.030303;1pkt 1fpkt"];
525--4295[label="0.0140845;1pkt 1fpkt"];
525--4305[label="0.025;1pkt 1fpkt"];
525--4528[label="0.037037;1pkt 1fpkt"];
525--4539[label="0.0151515;1pkt 1fpkt"];
525--4611[label="0.0625;1pkt 1fpkt"];
525--4630[label="0.025;1pkt 1fpkt"];
525--4742[label="0.0263158;1pkt 1fpkt"];
525--4818[label="0.04;1pkt 1fpkt"];
525--5023[label="0.0263158;1pkt 1fpkt"];
525--5135[label="0.016129;1pkt 1fpkt"];
525--5198[label="0.0588235;1pkt 1fpkt"];
525--5259[label="0.0178571;1pkt 1fpkt"];
525--5298[label="0.0294118;1pkt 1fpkt"];
525--5323[label="0.0188679;1pkt 1fpkt"];
525--5351[label="0.0526316;1pkt 1fpkt"];
525--5370[label="0.0277778;1pkt 1fpkt"];
525--5506[label="0.04;1pkt 1fpkt"];
525--5508[label="0.03125;1pkt 1fpkt"];
525--5547[label="0.0208333;1pkt 1fpkt"];
525--5685[label="0.0142857;1pkt 1fpkt"];
525--5795[label="0.0384615;1pkt 1fpkt"];
525--5802[label="0.0151515;1pkt 1fpkt"];
525--5902[label="0.0263158;1pkt 1fpkt"];
525--6154[label="0.0188679;1pkt 1fpkt"];
525--6256[label="0.0204082;1pkt 1fpkt"];
752--1137[label="0.016129;1pkt 1fpkt"];
752--1399[label="0.0364964;10pkt 10fpkt"];
752--1681[label="1;545pkt 545fpkt"];
752--1988[label="0.016129;1pkt 1fpkt"];
752--2326[label="0.066055;36pkt 36fpkt"];
752--2336[label="0.0513761;28pkt 28fpkt"];
752--2341[label="0.066055;36pkt 36fpkt"];
752--2369[label="0.142857;1pkt 1fpkt"];
752--2693[label="0.0228013;7pkt 7fpkt"];
752--2723[label="0.0235849;5pkt 5fpkt"];
752--2834[label="0.0363636;10pkt 10fpkt"];
752--3810[label="0.0454545;1pkt 1fpkt"];
752--4449[label="0.0526316;1pkt 1fpkt"];
752--4533[label="0.166667;1pkt 1fpkt"];
752--4539[label="0.0151515;1pkt 1fpkt"];
752--4815[label="0.0227273;7pkt 7fpkt"];
752--5797[label="0.166667;1pkt 1fpkt"];
752--5802[label="0.0151515;1pkt 1fpkt"];
824--924[label="0.03125;1pkt 1fpkt"];
824--1137[label="0.016129;1pkt 1fpkt"];
824--1164[label="0.010101;1pkt 1fpkt"];
824--1229[label="0.0103093;1pkt 1fpkt"];
824--1332[label="0.0188679;1pkt 1fpkt"];
824--1399[label="0.00364964;1pkt 1fpkt"];
824--1737[label="1;351pkt 351fpkt"];
824--1988[label="0.016129;1pkt 1fpkt"];
824--2144[label="0.03125;1pkt 1fpkt"];
824--2326[label="0.00569801;2pkt 2fpkt"];
824--2336[label="0.011396;4pkt 4fpkt"];
824--2341[label="0.00569801;2pkt 2fpkt"];
824--2454[label="0.0344828;1pkt 1fpkt"];
824--2566[label="0.0263158;1pkt 1fpkt"];
824--2702[label="0.0416667;1pkt 1fpkt"];
824--2726[label="0.00943396;1pkt 1fpkt"];
824--2834[label="0.00363636;1pkt 1fpkt"];
824--2872[label="0.025;1pkt 1fpkt"];
824--3053[label="0.0263158;1pkt 1fpkt"];
824--3057[label="0.0103093;1pkt 1fpkt"];
824--3067[label="0.0204082;1pkt 1fpkt"];
824--3459[label="0.0294118;1pkt 1fpkt"];
824--3481[label="0.0175439;1pkt 1fpkt"];
824--3551[label="0.0285714;1pkt 1fpkt"];
824--3566[label="0.142857;1pkt 1fpkt"];
824--3581[label="0.0769231;1pkt 1fpkt"];
824--3688[label="0.0277778;1pkt 1fpkt"];
824--4053[label="0.0204082;1pkt 1fpkt"];
824--4295[label="0.0140845;1pkt 1fpkt"];
824--4539[label="0.0151515;1pkt 1fpkt"];
824--4611[label="0.0625;1pkt 1fpkt"];
824--4742[label="0.0263158;1pkt 1fpkt"];
824--4818[label="0.04;1pkt 1fpkt"];
824--5023[label="0.0263158;1pkt 1fpkt"];
824--5247[label="0.030303;1pkt 1fpkt"];
824--5259[label="0.0178571;1pkt 1fpkt"];
824--5298[label="0.0294118;1pkt 1fpkt"];
824--5311[label="0.0833333;1pkt 1fpkt"];
824--5370[label="0.0277778;1pkt 1fpkt"];
824--5547[label="0.0208333;1pkt 1fpkt"];
824--5685[label="0.0142857;1pkt 1fpkt"];
824--5802[label="0.0151515;1pkt 1fpkt"];
824--5902[label="0.0263158;1pkt 1fpkt"];
824--6256[label="0.0204082;1pkt 1fpkt"];
835--1137[label="0.016129;1pkt 1fpkt"];
835--1223[label="0.0555556;1pkt 1fpkt"];
835--1226[label="0.0555556;1pkt 1fpkt"];
835--1238[label="0.0178571;1pkt 1fpkt"];
835--1332[label="0.0188679;1pkt 1fpkt"];
835--1341[label="0.0166667;1pkt 1fpkt"];
835--1747[label="1;237pkt 237fpkt"];
835--1988[label="0.016129;1pkt 1fpkt"];
835--2326[label="0.00496278;2pkt 2fpkt"];
835--2336[label="0.0173697;7pkt 7fpkt"];
835--2341[label="0.00496278;2pkt 2fpkt"];
835--2454[label="0.0344828;1pkt 1fpkt"];
835--2536[label="0.0138889;1pkt 1fpkt"];
835--2566[label="0.0263158;1pkt 1fpkt"];
835--2580[label="0.0149254;1pkt 1fpkt"];
835--2702[label="0.0416667;1pkt 1fpkt"];
835--2872[label="0.025;1pkt 1fpkt"];
835--2900[label="0.016129;1pkt 1fpkt"];
835--2908[label="0.0327869;2pkt 2fpkt"];
835--3053[label="0.0263158;1pkt 1fpkt"];
835--3067[label="0.0204082;1pkt 1fpkt"];
835--3124[label="0.5;1pkt 1fpkt"];
835--3251[label="0.016129;1pkt 1fpkt"];
835--3351[label="0.0322581;1pkt 1fpkt"];
835--3459[label="0.0294118;1pkt 1fpkt"];
835--3481[label="0.0175439;1pkt 1fpkt"];
835--3551[label="0.0285714;1pkt 1fpkt"];
835--3601[label="0.0188679;1pkt 1fpkt"];
835--3659[label="0.05;1pkt 1fpkt"];
835--3688[label="0.0277778;1pkt 1fpkt"];
835--3784[label="0.02;1pkt 1fpkt"];
835--3901[label="0.0714286;1pkt 1fpkt"];
835--4015[label="0.142857;1pkt 1fpkt"];
835--4053[label="0.0204082;1pkt 1fpkt"];
835--4295[label="0.0140845;1pkt 1fpkt"];
835--4305[label="0.025;1pkt 1fpkt"];
835--4412[label="0.0294118;1pkt 1fpkt"];
835--4528[label="0.037037;1pkt 1fpkt"];
835--4539[label="0.0151515;1pkt 1fpkt"];
835--4611[label="0.0625;1pkt 1fpkt"];
835--4690[label="0.25;1pkt 1fpkt"];
835--4722[label="0.0138889;1pkt 1fpkt"];
835--4742[label="0.0263158;1pkt 1fpkt"];
835--4750[label="0.0151515;1pkt 1fpkt"];
835--4818[label="0.04;1pkt 1fpkt"];
835--4935[label="0.0163934;1pkt 1fpkt"];
835--4939[label="0.0333333;2pkt 2fpkt"];
835--5023[label="0.0263158;1pkt 1fpkt"];
835--5135[label="0.016129;1pkt 1fpkt"];
835--5247[label="0.030303;1pkt 1fpkt"];
835--5259[label="0.0178571;1pkt 1fpkt"];
835--5298[label="0.0294118;1pkt 1fpkt"];
835--5323[label="0.0188679;1pkt 1fpkt"];
835--5351[label="0.0526316;1pkt 1fpkt"];
835--5370[label="0.0277778;1pkt 1fpkt"];
835--5547[label="0.0208333;1pkt 1fpkt"];
835--5685[label="0.0142857;1pkt 1fpkt"];
835--5795[label="0.0384615;1pkt 1fpkt"];
835--5802[label="0.0151515;1pkt 1fpkt"];
835--5876[label="0.25;1pkt 1fpkt"];
835--5893[label="0.0138889;1pkt 1fpkt"];
835--5902[label="0.0263158;1pkt 1fpkt"];
835--5992[label="0.016129;1pkt 1fpkt"];
835--5995[label="0.0327869;2pkt 2fpkt"];
835--6154[label="0.0188679;1pkt 1fpkt"];
835--6256[label="0.0204082;1pkt 1fpkt"];
837--1137[label="0.016129;1pkt 1fpkt"];
837--1229[label="0.0103093;1pkt 1fpkt"];
837--1238[label="0.0178571;1pkt 1fpkt"];
837--1332[label="0.0188679;1pkt 1fpkt"];
837--1341[label="0.0166667;1pkt 1fpkt"];
837--1399[label="0.0182482;5pkt 5fpkt"];
837--1748[label="1;377pkt 377fpkt"];
837--1988[label="0.016129;1pkt 1fpkt"];
837--2326[label="0.00265252;1pkt 1fpkt"];
837--2336[label="0.0185676;7pkt 7fpkt"];
837--2341[label="0.00265252;1pkt 1fpkt"];
837--2359[label="0.025;1pkt 1fpkt"];
837--2454[label="0.0344828;1pkt 1fpkt"];
837--2566[label="0.0263158;1pkt 1fpkt"];
837--2580[label="0.0149254;1pkt 1fpkt"];
837--2702[label="0.0416667;1pkt 1fpkt"];
837--2785[label="0.0212766;1pkt 1fpkt"];
837--2834[label="0.0181818;5pkt 5fpkt"];
837--2872[label="0.025;1pkt 1fpkt"];
837--2994[label="0.047619;1pkt 1fpkt"];
837--3053[label="0.0263158;1pkt 1fpkt"];
837--3057[label="0.0103093;1pkt 1fpkt"];
837--3067[label="0.0204082;1pkt 1fpkt"];
837--3251[label="0.016129;1pkt 1fpkt"];
837--3351[label="0.0322581;1pkt 1fpkt"];
837--3481[label="0.0175439;1pkt 1fpkt"];
837--3581[label="0.0769231;1pkt 1fpkt"];
837--3601[label="0.0188679;1pkt 1fpkt"];
837--3688[label="0.0277778;1pkt 1fpkt"];
837--3784[label="0.02;1pkt 1fpkt"];
837--3806[label="0.0555556;1pkt 1fpkt"];
837--3974[label="0.04;1pkt 1fpkt"];
837--3977[label="0.03125;1pkt 1fpkt"];
837--4015[label="0.142857;1pkt 1fpkt"];
837--4028[label="0.0714286;1pkt 1fpkt"];
837--4053[label="0.0204082;1pkt 1fpkt"];
837--4255[label="0.00265252;1pkt 1fpkt"];
837--4295[label="0.0140845;1pkt 1fpkt"];
837--4305[label="0.025;1pkt 1fpkt"];
837--4528[label="0.037037;1pkt 1fpkt"];
837--4539[label="0.0151515;1pkt 1fpkt"];
837--4611[label="0.0625;1pkt 1fpkt"];
837--4630[label="0.025;1pkt 1fpkt"];
837--4742[label="0.0263158;1pkt 1fpkt"];
837--4750[label="0.0151515;1pkt 1fpkt"];
837--4818[label="0.04;1pkt 1fpkt"];
837--4865[label="0.0217391;1pkt 1fpkt"];
837--5023[label="0.0263158;1pkt 1fpkt"];
837--5135[label="0.016129;1pkt 1fpkt"];
837--5259[label="0.0178571;1pkt 1fpkt"];
837--5311[label="0.0833333;1pkt 1fpkt"];
837--5323[label="0.0188679;1pkt 1fpkt"];
837--5370[label="0.0277778;1pkt 1fpkt"];
837--5506[label="0.04;1pkt 1fpkt"];
837--5508[label="0.03125;1pkt 1fpkt"];
837--5533[label="0.0714286;1pkt 1fpkt"];
837--5547[label="0.0208333;1pkt 1fpkt"];
837--5685[label="0.0142857;1pkt 1fpkt"];
837--5795[label="0.0384615;1pkt 1fpkt"];
837--5802[label="0.0151515;1pkt 1fpkt"];
837--5902[label="0.0263158;1pkt 1fpkt"];
837--6154[label="0.0188679;1pkt 1fpkt"];
837--6256[label="0.0204082;1pkt 1fpkt"];
959--1137[label="0.016129;1pkt 1fpkt"];
959--1931[label="1;229pkt 229fpkt"];
959--1988[label="0.016129;1pkt 1fpkt"];
959--2454[label="0.0344828;1pkt 1fpkt"];
959--2702[label="0.0416667;1pkt 1fpkt"];
959--2994[label="0.047619;1pkt 1fpkt"];
959--3067[label="0.0204082;1pkt 1fpkt"];
959--3351[label="0.0322581;1pkt 1fpkt"];
959--3459[label="0.0294118;1pkt 1fpkt"];
959--3551[label="0.0285714;1pkt 1fpkt"];
959--3601[label="0.0188679;1pkt 1fpkt"];
959--3688[label="0.0277778;1pkt 1fpkt"];
959--3974[label="0.04;1pkt 1fpkt"];
959--4295[label="0.0140845;1pkt 1fpkt"];
959--4528[label="0.037037;1pkt 1fpkt"];
959--4539[label="0.0151515;1pkt 1fpkt"];
959--4611[label="0.0625;1pkt 1fpkt"];
959--4818[label="0.04;1pkt 1fpkt"];
959--5247[label="0.030303;1pkt 1fpkt"];
959--5298[label="0.0294118;1pkt 1fpkt"];
959--5323[label="0.0188679;1pkt 1fpkt"];
959--5370[label="0.0277778;1pkt 1fpkt"];
959--5506[label="0.04;1pkt 1fpkt"];
959--5685[label="0.0142857;1pkt 1fpkt"];
959--5795[label="0.0384615;1pkt 1fpkt"];
959--5802[label="0.0151515;1pkt 1fpkt"];
959--6154[label="0.0188679;1pkt 1fpkt"];
1007--1137[label="0.016129;1pkt 1fpkt"];
1007--1184[label="0.333333;1pkt 1fpkt"];
1007--1212[label="0.04;1pkt 1fpkt"];
1007--1238[label="0.0178571;1pkt 1fpkt"];
1007--1332[label="0.0188679;1pkt 1fpkt"];
1007--1341[label="0.0166667;1pkt 1fpkt"];
1007--1987[label="1;333pkt 333fpkt"];
1007--1988[label="0.016129;1pkt 1fpkt"];
1007--2031[label="0.333333;1pkt 1fpkt"];
1007--2336[label="0.003003;1pkt 1fpkt"];
1007--2359[label="0.025;1pkt 1fpkt"];
1007--2369[label="0.142857;1pkt 1fpkt"];
1007--2412[label="0.5;1pkt 1fpkt"];
1007--2566[label="0.0263158;1pkt 1fpkt"];
1007--2573[label="0.111111;1pkt 1fpkt"];
1007--2728[label="0.0434783;1pkt 1fpkt"];
1007--2872[label="0.025;1pkt 1fpkt"];
1007--3067[label="0.0204082;1pkt 1fpkt"];
1007--3251[label="0.016129;1pkt 1fpkt"];
1007--3481[label="0.0175439;1pkt 1fpkt"];
1007--3784[label="0.02;1pkt 1fpkt"];
1007--3838[label="0.0909091;1pkt 1fpkt"];
1007--3866[label="0.0588235;1pkt 1fpkt"];
1007--4000[label="0.04;1pkt 1fpkt"];
1007--4053[label="0.0204082;1pkt 1fpkt"];
1007--4070[label="0.0384615;1pkt 1fpkt"];
1007--4295[label="0.0140845;1pkt 1fpkt"];
1007--4528[label="0.037037;1pkt 1fpkt"];
1007--4539[label="0.0151515;1pkt 1fpkt"];
1007--4630[label="0.025;1pkt 1fpkt"];
1007--4742[label="0.0263158;1pkt 1fpkt"];
1007--4824[label="0.04;1pkt 1fpkt"];
1007--5135[label="0.016129;1pkt 1fpkt"];
1007--5259[label="0.0178571;1pkt 1fpkt"];
1007--5443[label="0.0909091;1pkt 1fpkt"];
1007--5547[label="0.0208333;1pkt 1fpkt"];
1007--5685[label="0.0142857;1pkt 1fpkt"];
1007--5795[label="0.0384615;1pkt 1fpkt"];
1007--5802[label="0.0151515;1pkt 1fpkt"];
1007--5902[label="0.0263158;1pkt 1fpkt"];
1007--5933[label="0.04;1pkt 1fpkt"];
1007--6212[label="0.0909091;1pkt 1fpkt"];
1007--6256[label="0.0204082;1pkt 1fpkt"];
1082--1137[label="0.016129;1pkt 1fpkt"];
1082--1238[label="0.0178571;1pkt 1fpkt"];
1082--1332[label="0.0188679;1pkt 1fpkt"];
1082--1341[label="0.0166667;1pkt 1fpkt"];
1082--1399[label="0.00520833;1pkt 1fpkt"];
1082--1929[label="1;159pkt 159fpkt"];
1082--1988[label="0.016129;1pkt 1fpkt"];
1082--2326[label="0.03125;6pkt 6fpkt"];
1082--2336[label="0.0104167;2pkt 2fpkt"];
1082--2341[label="0.03125;6pkt 6fpkt"];
1082--2359[label="0.025;1pkt 1fpkt"];
1082--2454[label="0.0344828;1pkt 1fpkt"];
1082--2702[label="0.0416667;1pkt 1fpkt"];
1082--2834[label="0.00520833;1pkt 1fpkt"];
1082--2994[label="0.047619;1pkt 1fpkt"];
1082--3053[label="0.0263158;1pkt 1fpkt"];
1082--3067[label="0.0204082;1pkt 1fpkt"];
1082--3200[label="0.166667;1pkt 1fpkt"];
1082--3251[label="0.016129;1pkt 1fpkt"];
1082--3351[label="0.0322581;1pkt 1fpkt"];
1082--3459[label="0.0294118;1pkt 1fpkt"];
1082--3481[label="0.0175439;1pkt 1fpkt"];
1082--3551[label="0.0285714;1pkt 1fpkt"];
1082--3601[label="0.0188679;1pkt 1fpkt"];
1082--3784[label="0.02;1pkt 1fpkt"];
1082--3974[label="0.04;1pkt 1fpkt"];
1082--4248[label="0.0416667;1pkt 1fpkt"];
1082--4295[label="0.0140845;1pkt 1fpkt"];
1082--4305[label="0.025;1pkt 1fpkt"];
1082--4319[label="0.333333;1pkt 1fpkt"];
1082--4343[label="0.0625;5pkt 5fpkt"];
1082--4528[label="0.037037;1pkt 1fpkt"];
1082--4539[label="0.0151515;1pkt 1fpkt"];
1082--4630[label="0.025;1pkt 1fpkt"];
1082--4818[label="0.04;1pkt 1fpkt"];
1082--5023[label="0.0263158;1pkt 1fpkt"];
1082--5135[label="0.016129;1pkt 1fpkt"];
1082--5247[label="0.030303;1pkt 1fpkt"];
1082--5259[label="0.0178571;1pkt 1fpkt"];
1082--5298[label="0.0294118;1pkt 1fpkt"];
1082--5323[label="0.0188679;1pkt 1fpkt"];
1082--5506[label="0.04;1pkt 1fpkt"];
1082--5685[label="0.0142857;1pkt 1fpkt"];
1082--5696[label="0.25;1pkt 1fpkt"];
1082--5795[label="0.0384615;1pkt 1fpkt"];
1082--5802[label="0.0151515;1pkt 1fpkt"];
1082--6154[label="0.0188679;1pkt 1fpkt"];
1082--6326[label="0.333333;1pkt 1fpkt"];
1226--1353[label="0.0555556;1pkt 1fpkt"];
1226--1534[label="0.0555556;1pkt 1fpkt"];
1226--1570[label="0.111111;2pkt 2fpkt"];
1226--1687[label="0.0555556;1pkt 1fpkt"];
1226--1747[label="0.0555556;1pkt 1fpkt"];
1226--1773[label="0.0555556;1pkt 1fpkt"];
1226--2128[label="0.0555556;1pkt 1fpkt"];
1226--2185[label="0.0555556;1pkt 1fpkt"];
1737--1988[label="0.016129;1pkt 1fpkt"];
1737--2144[label="0.03125;1pkt 1fpkt"];
1737--2326[label="0.00569801;2pkt 2fpkt"];
1737--2336[label="0.011396;4pkt 4fpkt"];
1737--2341[label="0.00569801;2pkt 2fpkt"];
1737--2454[label="0.0344828;1pkt 1fpkt"];
1737--2566[label="0.0263158;1pkt 1fpkt"];
1737--2702[label="0.0416667;1pkt 1fpkt"];
1737--2726[label="0.00943396;1pkt 1fpkt"];
1737--2834[label="0.00363636;1pkt 1fpkt"];
1737--2872[label="0.025;1pkt 1fpkt"];
1737--3053[label="0.0263158;1pkt 1fpkt"];
1737--3057[label="0.0103093;1pkt 1fpkt"];
1737--3067[label="0.0204082;1pkt 1fpkt"];
1737--3459[label="0.0294118;1pkt 1fpkt"];
1737--3481[label="0.0175439;1pkt 1fpkt"];
1737--3551[label="0.0285714;1pkt 1fpkt"];
1737--3566[label="0.142857;1pkt 1fpkt"];
1737--3581[label="0.0769231;1pkt 1fpkt"];
1737--3688[label="0.0277778;1pkt 1fpkt"];
1737--4053[label="0.0204082;1pkt 1fpkt"];
1737--4295[label="0.0140845;1pkt 1fpkt"];
1737--4539[label="0.0151515;1pkt 1fpkt"];
1737--4611[label="0.0625;1pkt 1fpkt"];
1737--4742[label="0.0263158;1pkt 1fpkt"];
1737--4818[label="0.04;1pkt 1fpkt"];
1737--5023[label="0.0263158;1pkt 1fpkt"];
1737--5247[label="0.030303;1pkt 1fpkt"];
1737--5259[label="0.0178571;1pkt 1fpkt"];
1737--5298[label="0.0294118;1pkt 1fpkt"];
1737--5311[label="0.0833333;1pkt 1fpkt"];
1737--5370[label="0.0277778;1pkt 1fpkt"];
1737--5547[label="0.0208333;1pkt 1fpkt"];
1737--5685[label="0.0142857;1pkt 1fpkt"];
1737--5802[label="0.0151515;1pkt 1fpkt"];
1737--5902[label="0.0263158;1pkt 1fpkt"];
1737--6256[label="0.0204082;1pkt 1fpkt"];
1935--1988[label="0.016129;1pkt 1fpkt"];
1935--2024[label="0.285714;2pkt 2fpkt"];
1935--2137[label="0.047619;1pkt 1fpkt"];
1935--2144[label="0.03125;1pkt 1fpkt"];
1935--2326[label="0.0364501;46pkt 46fpkt"];
1935--2336[label="0.0213946;27pkt 27fpkt"];
1935--2341[label="0.0364501;46pkt 46fpkt"];
1935--2359[label="0.025;1pkt 1fpkt"];
1935--2454[label="0.0344828;1pkt 1fpkt"];
1935--2484[label="0.333333;1pkt 1fpkt"];
1935--2494[label="0.0447761;3pkt 3fpkt"];
1935--2536[label="0.0138889;1pkt 1fpkt"];
1935--2566[label="0.0263158;1pkt 1fpkt"];
1935--2573[label="0.111111;1pkt 1fpkt"];
1935--2580[label="0.0447761;3pkt 3fpkt"];
1935--2702[label="0.0416667;1pkt 1fpkt"];
1935--2726[label="0.0471698;5pkt 5fpkt"];
1935--2756[label="0.0117647;1pkt 1fpkt"];
1935--2764[label="0.0666667;1pkt 1fpkt"];
1935--2785[label="0.0425532;2pkt 2fpkt"];
1935--2872[label="0.025;1pkt 1fpkt"];
1935--2889[label="0.0114943;1pkt 1fpkt"];
1935--2970[label="0.0280374;3pkt 3fpkt"];
1935--2994[label="0.047619;1pkt 1fpkt"];
1935--3018[label="0.166667;1pkt 1fpkt"];
1935--3057[label="0.0206186;2pkt 2fpkt"];
1935--3163[label="0.727273;88pkt 88fpkt"];
1935--3251[label="0.016129;1pkt 1fpkt"];
1935--3318[label="0.0666667;1pkt 1fpkt"];
1935--3351[label="0.0645161;2pkt 2fpkt"];
1935--3459[label="0.0588235;2pkt 2fpkt"];
1935--3481[label="0.0175439;1pkt 1fpkt"];
1935--3551[label="0.0285714;1pkt 1fpkt"];
1935--3601[label="0.0188679;1pkt 1fpkt"];
1935--3688[label="0.0277778;1pkt 1fpkt"];
1935--3689[label="0.0666667;6pkt 6fpkt"];
1935--3703[label="0.0111111;1pkt 1fpkt"];
1935--3714[label="0.02;1pkt 1fpkt"];
1935--3734[label="0.0416667;1pkt 1fpkt"];
1935--3784[label="0.02;1pkt 1fpkt"];
1935--3804[label="0.205882;7pkt 7fpkt"];
1935--3825[label="0.0338983;2pkt 2fpkt"];
1935--3874[label="0.0344828;1pkt 1fpkt"];
1935--3901[label="0.0714286;1pkt 1fpkt"];
1935--3974[label="0.04;1pkt 1fpkt"];
1935--3977[label="0.03125;1pkt 1fpkt"];
1935--3985[label="0.0352941;3pkt 3fpkt"];
1935--4015[label="0.142857;1pkt 1fpkt"];
1935--4028[label="0.0714286;1pkt 1fpkt"];
1935--4053[label="0.0204082;1pkt 1fpkt"];
1935--4089[label="0.030303;1pkt 1fpkt"];
1935--4103[label="0.0322581;1pkt 1fpkt"];
1935--4241[label="0.0645161;2pkt 2fpkt"];
1935--4264[label="0.04;1pkt 1fpkt"];
1935--4281[label="0.15;3pkt 3fpkt"];
1935--4295[label="0.0140845;1pkt 1fpkt"];
1935--4305[label="0.025;1pkt 1fpkt"];
1935--4435[label="0.047619;1pkt 1fpkt"];
1935--4469[label="0.047619;1pkt 1fpkt"];
1935--4528[label="0.037037;1pkt 1fpkt"];
1935--4539[label="0.0151515;1pkt 1fpkt"];
1935--4546[label="0.0588235;1pkt 1fpkt"];
1935--4574[label="0.25;2pkt 2fpkt"];
1935--4630[label="0.025;1pkt 1fpkt"];
1935--4690[label="0.25;1pkt 1fpkt"];
1935--4698[label="0.0441176;3pkt 3fpkt"];
1935--4722[label="0.0138889;1pkt 1fpkt"];
1935--4742[label="0.0263158;1pkt 1fpkt"];
1935--4750[label="0.0454545;3pkt 3fpkt"];
1935--4818[label="0.04;1pkt 1fpkt"];
1935--4865[label="0.0434783;2pkt 2fpkt"];
1935--4981[label="0.0283019;3pkt 3fpkt"];
1935--5135[label="0.016129;1pkt 1fpkt"];
1935--5247[label="0.0606061;2pkt 2fpkt"];
1935--5259[label="0.0178571;1pkt 1fpkt"];
1935--5298[label="0.0294118;1pkt 1fpkt"];
1935--5323[label="0.0188679;1pkt 1fpkt"];
1935--5370[label="0.0277778;1pkt 1fpkt"];
1935--5374[label="0.0111111;1pkt 1fpkt"];
1935--5427[label="0.228571;8pkt 8fpkt"];
1935--5435[label="0.0344828;2pkt 2fpkt"];
1935--5506[label="0.04;1pkt 1fpkt"];
1935--5508[label="0.03125;1pkt 1fpkt"];
1935--5514[label="0.0357143;3pkt 3fpkt"];
1935--5533[label="0.0714286;1pkt 1fpkt"];
1935--5547[label="0.0208333;1pkt 1fpkt"];
1935--5666[label="0.04;1pkt 1fpkt"];
1935--5685[label="0.0142857;1pkt 1fpkt"];
1935--5795[label="0.0384615;1pkt 1fpkt"];
1935--5802[label="0.0151515;1pkt 1fpkt"];
1935--5821[label="0.25;2pkt 2fpkt"];
1935--5876[label="0.25;1pkt 1fpkt"];
1935--5893[label="0.0138889;1pkt 1fpkt"];
1935--5902[label="0.0263158;1pkt 1fpkt"];
1935--6154[label="0.0188679;1pkt 1fpkt"];
1935--6244[label="0.0352941;3pkt 3fpkt"];
1935--6256[label="0.0204082;1pkt 1fpkt"];
1935--6308[label="0.04;1pkt 1fpkt"];
2484--4690[label="1;3pkt 3fpkt"];
2484--5876[label="1;3pkt 3fpkt"];
3804--5427[label="1;34pkt 34fpkt"];
4574--5821[label="1;8pkt 8fpkt"];
4690--5876[label="1;4pkt 4fpkt"];
5696--6326[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.52.9"/>
      <filter src_port="53"/>
      <filter dst_port="53"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1077{
style=filled;
color=gray75;
4545[label="96.185.65.243;284pkt 284fpkt", shape=pentagon, color=darkviolet];
5805[label="96.185.65.243;283pkt 283fpkt", shape=invtriangle, color=brown];
stat1077[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.185.65.243:0, *:0}[96.831%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.8254%)&lt;BR/&gt; 80: (1.5873%)&lt;BR/&gt; 43428: (0.176367%)&lt;BR/&gt; 29252: (0.176367%)&lt;BR/&gt; 23808: (0.176367%)&gt;];
}
4545--5805[label="1;283pkt 283fpkt"];
</description>
    <slice>
      <filter src_ip="96.185.65.243"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1078{
style=filled;
color=gray75;
4547[label="202.153.135.243;149pkt 149fpkt", shape=pentagon, color=darkviolet];
5806[label="202.153.135.243;148pkt 148fpkt", shape=invtriangle, color=brown];
stat1078[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.153.135.243:0, *:0}[92.6174%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.5926%)&lt;BR/&gt; 80: (3.7037%)&lt;BR/&gt; 64698: (0.3367%)&lt;BR/&gt; 62823: (0.3367%)&lt;BR/&gt; 61086: (0.3367%)&gt;];
}
4547--5806[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter src_ip="202.153.135.243"/>
    </slice>
    <from sec="1068526838" usec="0"/>
    <to sec="1068527618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.659217,1.80773,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.18.131.245"/>
    </slice>
    <from sec="1068526890" usec="0"/>
    <to sec="1068527012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1080{
style=filled;
color=gray75;
4568[label="166.3.96.246;74pkt 74fpkt", shape=pentagon, color=darkviolet];
5818[label="166.3.96.246;73pkt 73fpkt", shape=invtriangle, color=brown];
6371[label="166.3.96.246;73pkt 73fpkt", shape=invhouse, color=bisque];
stat1080[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.3.96.246:80, 202.53.27.208:*}[95.9459%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55332: (0.681818%)&lt;BR/&gt; 54915: (0.681818%)&lt;BR/&gt; 54366: (0.681818%)&lt;BR/&gt; 53905: (0.681818%)&gt;];
}
4568--5818[label="1;73pkt 73fpkt"];
4568--6371[label="1;73pkt 73fpkt"];
5818--6371[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="202.53.27.208" src_ip="166.3.96.246" src_port="80"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1081{
style=filled;
color=gray75;
4571[label="203.100.158.246;189pkt 189fpkt", shape=pentagon, color=darkviolet];
5819[label="203.100.158.246;189pkt 189fpkt", shape=invtriangle, color=brown];
6372[label="203.100.158.246;188pkt 188fpkt", shape=invhouse, color=bisque];
stat1081[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.100.158.246:0, *:0}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.2297%)&lt;BR/&gt; 80: (2.38516%)&lt;BR/&gt; 58326: (0.265018%)&lt;BR/&gt; 58217: (0.265018%)&lt;BR/&gt; 54161: (0.265018%)&gt;];
}
4571--5819[label="1;189pkt 189fpkt"];
4571--6372[label="1;188pkt 188fpkt"];
5819--6372[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter src_ip="203.100.158.246"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1082{
style=filled;
color=gray75;
450[label="208.31.241.247;s;1478pkt 1478fpkt", shape=diamond, color=yellow];
1843[label="208.31.241.247;s;1328pkt 1328fpkt", shape=hexagon, color=black];
4579[label="208.31.241.247;1601pkt 1601fpkt", shape=pentagon, color=darkviolet];
5823[label="208.31.241.247;1600pkt 1600fpkt", shape=invtriangle, color=brown];
6375[label="208.31.241.247;1600pkt 1600fpkt", shape=invhouse, color=bisque];
stat1082[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.31.241.247:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
450--1843[label="1;1328pkt 1328fpkt"];
450--4579[label="1;1478pkt 1478fpkt"];
450--5823[label="0.999323;1477pkt 1477fpkt"];
450--6375[label="0.999323;1477pkt 1477fpkt"];
1843--4579[label="1;1328pkt 1328fpkt"];
1843--5823[label="0.999247;1327pkt 1327fpkt"];
1843--6375[label="0.999247;1327pkt 1327fpkt"];
4579--5823[label="1;1600pkt 1600fpkt"];
4579--6375[label="1;1600pkt 1600fpkt"];
5823--6375[label="1;1600pkt 1600fpkt"];
</description>
    <slice>
      <filter src_ip="208.31.241.247"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.500242,1.73096,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1083{
style=filled;
color=gray75;
4590[label="16.112.147.249;59pkt 59fpkt", shape=pentagon, color=darkviolet];
5828[label="16.112.147.249;59pkt 59fpkt", shape=invtriangle, color=brown];
stat1083[shape=component, label=&lt;Rules:&lt;BR/&gt;{16.112.147.249:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3625: (0.847458%)&lt;BR/&gt; 3624: (0.847458%)&lt;BR/&gt; 3623: (0.847458%)&lt;BR/&gt; 3622: (0.847458%)&gt;];
}
4590--5828[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="16.112.147.249"/>
    </slice>
    <from sec="1068527231" usec="0"/>
    <to sec="1068527262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.742349,1.73704,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1084{
style=filled;
color=gray75;
4593[label="7.219.194.249;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5831[label="7.219.194.249;2pkt 2fpkt", shape=invtriangle, color=brown];
6380[label="7.219.194.249;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1084[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.219.194.249:80, 143.38.15.109:4180}[50%]&lt;BR/&gt;{7.219.194.249:80, 143.38.15.109:4181}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4181: (25%)&lt;BR/&gt; 4180: (25%)&gt;];
}
4593--5831[label="1;2pkt 2fpkt"];
4593--6380[label="1;2pkt 2fpkt"];
5831--6380[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.15.109" dst_port="4181" src_ip="7.219.194.249" src_port="80"/>
      <filter dst_ip="143.38.15.109" dst_port="4180" src_ip="7.219.194.249" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.684307,1.76787,002,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1086{
style=filled;
color=gray75;
2476[label="209.0.223.11;254pkt 254fpkt", shape=pentagon, color=darkviolet];
5871[label="209.0.223.11;175pkt 175fpkt", shape=invhouse, color=bisque];
stat1086[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.0.223.11:65072, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65072: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2476--5871[label="0.994286;174pkt 174fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.0.223.11" src_port="65072"/>
    </slice>
    <from sec="1068527086" usec="0"/>
    <to sec="1068527100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.684307,1.76787,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1087{
style=filled;
color=gray75;
2485[label="208.118.41.12;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5877[label="208.118.41.12;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1087[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.118.41.12:80, 208.31.228.65:29913}[50%]&lt;BR/&gt;{208.118.41.12:80, 208.31.228.65:29914}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29914: (25%)&lt;BR/&gt; 29913: (25%)&gt;];
}
2485--4691[label="1;2pkt 2fpkt"];
2485--5877[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.228.65" dst_port="29914" src_ip="208.118.41.12" src_port="80"/>
      <filter dst_ip="208.31.228.65" dst_port="29913" src_ip="208.118.41.12" src_port="80"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.8.54.12"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068526899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1089{
style=filled;
color=gray75;
358[label="4.162.148.166;s;509pkt 509fpkt", shape=diamond, color=yellow];
856[label="4.210.185.80;s;155pkt 155fpkt", shape=diamond, color=yellow];
1249[label="4.210.185.11;s;110pkt 110fpkt", shape=diamond, color=yellow];
1385[label="208.115.20.207;s;11pkt 11fpkt", shape=diamond, color=yellow];
stat1089[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.162.148.166:80, 161.29.54.126:*}[21.6561%]&lt;BR/&gt;{4.162.148.166:80, 161.29.54.127:*}[21.5287%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9618%)&lt;BR/&gt; 443: (1.97452%)&lt;BR/&gt; 3939: (0.191083%)&lt;BR/&gt; 4911: (0.127389%)&lt;BR/&gt; 4870: (0.127389%)&gt;];
}
358--439[label="0.0412574;21pkt 21fpkt"];
358--1087[label="0.0735294;5pkt 5fpkt"];
358--1438[label="0.0314342;16pkt 16fpkt"];
358--1591[label="1;509pkt 509fpkt"];
358--1930[label="0.0373281;19pkt 19fpkt"];
358--1939[label="0.147348;75pkt 75fpkt"];
358--2044[label="0.00392927;2pkt 2fpkt"];
358--2163[label="0.361493;184pkt 184fpkt"];
358--2226[label="0.0314342;16pkt 16fpkt"];
856--1147[label="0.0322581;2pkt 2fpkt"];
856--1767[label="1;155pkt 155fpkt"];
856--1839[label="0.00645161;1pkt 1fpkt"];
856--1930[label="0.0451613;7pkt 7fpkt"];
856--2044[label="0.0903226;14pkt 14fpkt"];
856--2118[label="0.0392157;2pkt 2fpkt"];
856--2163[label="0.232258;36pkt 36fpkt"];
1249--1839[label="0.00909091;1pkt 1fpkt"];
1249--1930[label="0.1;11pkt 11fpkt"];
1249--2044[label="0.2;22pkt 22fpkt"];
1249--2118[label="0.0196078;1pkt 1fpkt"];
1249--2163[label="0.327273;36pkt 36fpkt"];
1249--2473[label="0.981818;108pkt 108fpkt"];
1249--4683[label="0.981818;108pkt 108fpkt"];
1385--1930[label="0.636364;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="161.29.54.127" src_ip="4.162.148.166" src_port="80"/>
      <filter dst_ip="161.29.54.126" src_ip="4.162.148.166" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.684307,1.76787,999,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1090{
style=filled;
color=gray75;
2603[label="203.201.228.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5908[label="203.201.228.20;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1090[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.201.228.20:1628, 208.18.26.1:2022}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2022: (50%)&lt;BR/&gt; 1628: (50%)&gt;];
}
2603--5908[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.18.26.1" dst_port="2022" src_ip="203.201.228.20" src_port="1628"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068526803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.251.149.21"/>
    </slice>
    <from sec="1068526826" usec="0"/>
    <to sec="1068527654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.132.201.25"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.150.72.34"/>
    </slice>
    <from sec="1068526858" usec="0"/>
    <to sec="1068526864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.21.238.37"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.50.60.40"/>
    </slice>
    <from sec="1068527465" usec="0"/>
    <to sec="1068527620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821443,1.6733,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1096{
style=filled;
color=gray75;
387[label="209.176.131.1;d;332pkt 332fpkt", shape=diamond, color=yellow];
1466[label="209.176.131.1;d;332pkt 332fpkt", shape=hexagon, color=black];
2745[label="4.150.72.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4530[label="213.117.18.241;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4844[label="4.150.72.34;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1096[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 209.176.131.1:4186}[26.8072%]&lt;BR/&gt;{*:*, 209.176.131.1:80}[25.3012%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (17.6642%)&lt;BR/&gt; 4186: (12.9927%)&lt;BR/&gt; 80: (12.7007%)&lt;BR/&gt; 25: (10.8029%)&lt;BR/&gt; 0: (4.08759%)&gt;];
}
387--393[label="0.0594059;6pkt 6fpkt"];
387--414[label="0.025;1pkt 1fpkt"];
387--481[label="0.0327869;4pkt 4fpkt"];
387--514[label="0.00990099;1pkt 1fpkt"];
387--545[label="0.0759494;6pkt 6fpkt"];
387--559[label="0.0675676;5pkt 5fpkt"];
387--642[label="0.037037;3pkt 3fpkt"];
387--648[label="0.0235294;2pkt 2fpkt"];
387--780[label="0.0212766;2pkt 2fpkt"];
387--785[label="0.031746;2pkt 2fpkt"];
387--860[label="0.0107527;1pkt 1fpkt"];
387--919[label="0.0588235;1pkt 1fpkt"];
387--961[label="0.0138889;1pkt 1fpkt"];
387--1002[label="0.106667;8pkt 8fpkt"];
387--1070[label="0.00301205;1pkt 1fpkt"];
387--1137[label="0.016129;1pkt 1fpkt"];
387--1164[label="0.020202;2pkt 2fpkt"];
387--1190[label="0.00301205;1pkt 1fpkt"];
387--1238[label="0.0178571;1pkt 1fpkt"];
387--1250[label="0.0235294;2pkt 2fpkt"];
387--1332[label="0.0188679;1pkt 1fpkt"];
387--1341[label="0.0166667;1pkt 1fpkt"];
387--1351[label="0.0357143;3pkt 3fpkt"];
387--1391[label="0.0119048;1pkt 1fpkt"];
387--1435[label="0.036036;4pkt 4fpkt"];
387--1466[label="1;332pkt 332fpkt"];
387--1540[label="0.0594059;6pkt 6fpkt"];
387--1547[label="0.0882353;3pkt 3fpkt"];
387--1555[label="0.0701754;4pkt 4fpkt"];
387--1592[label="0.037037;3pkt 3fpkt"];
387--1603[label="0.02;1pkt 1fpkt"];
387--1774[label="0.0117647;1pkt 1fpkt"];
387--1796[label="0.0212766;2pkt 2fpkt"];
387--1808[label="0.0588235;1pkt 1fpkt"];
387--1849[label="0.0138889;1pkt 1fpkt"];
387--1874[label="0.0116279;1pkt 1fpkt"];
387--1988[label="0.016129;1pkt 1fpkt"];
387--2029[label="0.00301205;1pkt 1fpkt"];
387--2234[label="1;72pkt 72fpkt"];
387--2241[label="0.117647;2pkt 2fpkt"];
387--2326[label="0.0150602;5pkt 5fpkt"];
387--2327[label="0.0060241;2pkt 2fpkt"];
387--2341[label="0.0150602;5pkt 5fpkt"];
387--2342[label="0.0060241;2pkt 2fpkt"];
387--2343[label="0.00301205;1pkt 1fpkt"];
387--2349[label="0.00301205;1pkt 1fpkt"];
387--2454[label="0.0344828;1pkt 1fpkt"];
387--2702[label="0.0416667;1pkt 1fpkt"];
387--2726[label="0.0188679;2pkt 2fpkt"];
387--2742[label="0.028169;2pkt 2fpkt"];
387--2745[label="1;1pkt 1fpkt"];
387--2837[label="0.0289855;2pkt 2fpkt"];
387--2859[label="0.00301205;1pkt 1fpkt"];
387--2889[label="0.0344828;3pkt 3fpkt"];
387--2908[label="0.0327869;2pkt 2fpkt"];
387--2929[label="0.0275229;3pkt 3fpkt"];
387--2970[label="0.00934579;1pkt 1fpkt"];
387--2984[label="0.0204082;2pkt 2fpkt"];
387--2994[label="0.047619;1pkt 1fpkt"];
387--3008[label="0.0674157;6pkt 6fpkt"];
387--3027[label="0.0350877;4pkt 4fpkt"];
387--3251[label="0.016129;1pkt 1fpkt"];
387--3351[label="0.0322581;1pkt 1fpkt"];
387--3420[label="0.0769231;2pkt 2fpkt"];
387--3481[label="0.0175439;1pkt 1fpkt"];
387--3485[label="0.0625;1pkt 1fpkt"];
387--3551[label="0.0285714;1pkt 1fpkt"];
387--3581[label="0.0769231;1pkt 1fpkt"];
387--3703[label="0.0111111;1pkt 1fpkt"];
387--3784[label="0.02;1pkt 1fpkt"];
387--3874[label="0.0689655;2pkt 2fpkt"];
387--3974[label="0.04;1pkt 1fpkt"];
387--4089[label="0.030303;1pkt 1fpkt"];
387--4150[label="0.0103093;1pkt 1fpkt"];
387--4206[label="0.0555556;1pkt 1fpkt"];
387--4259[label="0.0588235;1pkt 1fpkt"];
387--4264[label="0.04;1pkt 1fpkt"];
387--4295[label="0.0140845;1pkt 1fpkt"];
387--4309[label="0.037037;1pkt 1fpkt"];
387--4343[label="0.1;8pkt 8fpkt"];
387--4469[label="0.142857;3pkt 3fpkt"];
387--4530[label="1;19pkt 19fpkt"];
387--4539[label="0.0151515;1pkt 1fpkt"];
387--4546[label="0.176471;3pkt 3fpkt"];
387--4611[label="0.0625;1pkt 1fpkt"];
387--4818[label="0.04;1pkt 1fpkt"];
387--4842[label="0.028169;2pkt 2fpkt"];
387--4844[label="1;1pkt 1fpkt"];
387--4895[label="0.0294118;2pkt 2fpkt"];
387--4913[label="0.00301205;1pkt 1fpkt"];
387--4939[label="0.0333333;2pkt 2fpkt"];
387--4981[label="0.00943396;1pkt 1fpkt"];
387--4988[label="0.0204082;2pkt 2fpkt"];
387--5002[label="0.0674157;6pkt 6fpkt"];
387--5135[label="0.016129;1pkt 1fpkt"];
387--5229[label="0.08;2pkt 2fpkt"];
387--5259[label="0.0178571;1pkt 1fpkt"];
387--5298[label="0.0294118;1pkt 1fpkt"];
387--5311[label="0.0833333;1pkt 1fpkt"];
387--5374[label="0.0111111;1pkt 1fpkt"];
387--5506[label="0.04;1pkt 1fpkt"];
387--5602[label="0.0103093;1pkt 1fpkt"];
387--5635[label="0.0588235;1pkt 1fpkt"];
387--5666[label="0.04;1pkt 1fpkt"];
387--5685[label="0.0142857;1pkt 1fpkt"];
387--5691[label="0.037037;1pkt 1fpkt"];
387--5802[label="0.0151515;1pkt 1fpkt"];
387--5943[label="0.0285714;2pkt 2fpkt"];
387--5971[label="0.0289855;2pkt 2fpkt"];
387--5995[label="0.0327869;2pkt 2fpkt"];
387--6295[label="0.0588235;1pkt 1fpkt"];
387--6308[label="0.04;1pkt 1fpkt"];
387--6324[label="0.0384615;1pkt 1fpkt"];
1466--1540[label="0.0594059;6pkt 6fpkt"];
1466--1547[label="0.0882353;3pkt 3fpkt"];
1466--1555[label="0.0701754;4pkt 4fpkt"];
1466--1592[label="0.037037;3pkt 3fpkt"];
1466--1603[label="0.02;1pkt 1fpkt"];
1466--1774[label="0.0117647;1pkt 1fpkt"];
1466--1796[label="0.0212766;2pkt 2fpkt"];
1466--1808[label="0.0588235;1pkt 1fpkt"];
1466--1849[label="0.0138889;1pkt 1fpkt"];
1466--1874[label="0.0116279;1pkt 1fpkt"];
1466--1988[label="0.016129;1pkt 1fpkt"];
1466--2029[label="0.00301205;1pkt 1fpkt"];
1466--2234[label="1;72pkt 72fpkt"];
1466--2241[label="0.117647;2pkt 2fpkt"];
1466--2326[label="0.0150602;5pkt 5fpkt"];
1466--2327[label="0.0060241;2pkt 2fpkt"];
1466--2341[label="0.0150602;5pkt 5fpkt"];
1466--2342[label="0.0060241;2pkt 2fpkt"];
1466--2343[label="0.00301205;1pkt 1fpkt"];
1466--2349[label="0.00301205;1pkt 1fpkt"];
1466--2454[label="0.0344828;1pkt 1fpkt"];
1466--2702[label="0.0416667;1pkt 1fpkt"];
1466--2726[label="0.0188679;2pkt 2fpkt"];
1466--2742[label="0.028169;2pkt 2fpkt"];
1466--2745[label="1;1pkt 1fpkt"];
1466--2837[label="0.0289855;2pkt 2fpkt"];
1466--2859[label="0.00301205;1pkt 1fpkt"];
1466--2889[label="0.0344828;3pkt 3fpkt"];
1466--2908[label="0.0327869;2pkt 2fpkt"];
1466--2929[label="0.0275229;3pkt 3fpkt"];
1466--2970[label="0.00934579;1pkt 1fpkt"];
1466--2984[label="0.0204082;2pkt 2fpkt"];
1466--2994[label="0.047619;1pkt 1fpkt"];
1466--3008[label="0.0674157;6pkt 6fpkt"];
1466--3027[label="0.0350877;4pkt 4fpkt"];
1466--3251[label="0.016129;1pkt 1fpkt"];
1466--3351[label="0.0322581;1pkt 1fpkt"];
1466--3420[label="0.0769231;2pkt 2fpkt"];
1466--3481[label="0.0175439;1pkt 1fpkt"];
1466--3485[label="0.0625;1pkt 1fpkt"];
1466--3551[label="0.0285714;1pkt 1fpkt"];
1466--3581[label="0.0769231;1pkt 1fpkt"];
1466--3703[label="0.0111111;1pkt 1fpkt"];
1466--3784[label="0.02;1pkt 1fpkt"];
1466--3874[label="0.0689655;2pkt 2fpkt"];
1466--3974[label="0.04;1pkt 1fpkt"];
1466--4089[label="0.030303;1pkt 1fpkt"];
1466--4150[label="0.0103093;1pkt 1fpkt"];
1466--4206[label="0.0555556;1pkt 1fpkt"];
1466--4259[label="0.0588235;1pkt 1fpkt"];
1466--4264[label="0.04;1pkt 1fpkt"];
1466--4295[label="0.0140845;1pkt 1fpkt"];
1466--4309[label="0.037037;1pkt 1fpkt"];
1466--4343[label="0.1;8pkt 8fpkt"];
1466--4469[label="0.142857;3pkt 3fpkt"];
1466--4530[label="1;19pkt 19fpkt"];
1466--4539[label="0.0151515;1pkt 1fpkt"];
1466--4546[label="0.176471;3pkt 3fpkt"];
1466--4611[label="0.0625;1pkt 1fpkt"];
1466--4818[label="0.04;1pkt 1fpkt"];
1466--4842[label="0.028169;2pkt 2fpkt"];
1466--4844[label="1;1pkt 1fpkt"];
1466--4895[label="0.0294118;2pkt 2fpkt"];
1466--4913[label="0.00301205;1pkt 1fpkt"];
1466--4939[label="0.0333333;2pkt 2fpkt"];
1466--4981[label="0.00943396;1pkt 1fpkt"];
1466--4988[label="0.0204082;2pkt 2fpkt"];
1466--5002[label="0.0674157;6pkt 6fpkt"];
1466--5135[label="0.016129;1pkt 1fpkt"];
1466--5229[label="0.08;2pkt 2fpkt"];
1466--5259[label="0.0178571;1pkt 1fpkt"];
1466--5298[label="0.0294118;1pkt 1fpkt"];
1466--5311[label="0.0833333;1pkt 1fpkt"];
1466--5374[label="0.0111111;1pkt 1fpkt"];
1466--5506[label="0.04;1pkt 1fpkt"];
1466--5602[label="0.0103093;1pkt 1fpkt"];
1466--5635[label="0.0588235;1pkt 1fpkt"];
1466--5666[label="0.04;1pkt 1fpkt"];
1466--5685[label="0.0142857;1pkt 1fpkt"];
1466--5691[label="0.037037;1pkt 1fpkt"];
1466--5802[label="0.0151515;1pkt 1fpkt"];
1466--5943[label="0.0285714;2pkt 2fpkt"];
1466--5971[label="0.0289855;2pkt 2fpkt"];
1466--5995[label="0.0327869;2pkt 2fpkt"];
1466--6295[label="0.0588235;1pkt 1fpkt"];
1466--6308[label="0.04;1pkt 1fpkt"];
1466--6324[label="0.0384615;1pkt 1fpkt"];
2745--4844[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.176.131.1" dst_port="80"/>
      <filter dst_ip="209.176.131.1" dst_port="4186" src_port="53"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,501,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.174.147.44"/>
    </slice>
    <from sec="1068527526" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.49.194.44"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.987729,1.6796,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1099{
style=filled;
color=gray75;
690[label="136.93.62.209;d;14pkt 14fpkt", shape=diamond, color=yellow];
750[label="143.38.8.230;d;20pkt 20fpkt", shape=diamond, color=yellow];
756[label="136.93.219.62;d;327pkt 327fpkt", shape=diamond, color=yellow];
863[label="212.30.114.4;s;5pkt 5fpkt", shape=diamond, color=yellow];
1031[label="136.93.226.218;d;58pkt 58fpkt", shape=diamond, color=yellow];
1211[label="6.24.128.56;s;128pkt 128fpkt", shape=diamond, color=yellow];
1378[label="143.38.8.217;d;6pkt 6fpkt", shape=diamond, color=yellow];
1663[label="143.38.15.96;d;39pkt 39fpkt", shape=hexagon, color=black];
1967[label="143.38.8.230;d;20pkt 20fpkt", shape=hexagon, color=black];
2009[label="136.93.62.209;d;14pkt 14fpkt", shape=hexagon, color=black];
2129[label="136.93.226.218;d;58pkt 58fpkt", shape=hexagon, color=black];
2192[label="143.38.8.217;d;6pkt 6fpkt", shape=hexagon, color=black];
2730[label="4.121.40.33;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3550[label="212.30.118.117;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4649[label="7.210.224.3;157pkt 157fpkt", shape=invtriangle, color=brown];
4812[label="200.90.162.29;8pkt 8fpkt", shape=invtriangle, color=brown];
4833[label="4.121.40.33;5pkt 5fpkt", shape=invtriangle, color=brown];
5297[label="212.30.118.117;6pkt 6fpkt", shape=invtriangle, color=brown];
5924[label="200.90.162.29;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1099[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.93.219.62:*}[46.2411%]&lt;BR/&gt;{7.210.224.3:80, *:*}[22.2695%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4157%)&lt;BR/&gt; 1863: (1.46067%)&lt;BR/&gt; 0: (1.34831%)&lt;BR/&gt; 2852: (0.224719%)&lt;BR/&gt; 2851: (0.224719%)&gt;];
}
690--863[label="0.2;1pkt 1fpkt"];
690--1211[label="0.0714286;1pkt 1fpkt"];
690--1513[label="0.285714;4pkt 4fpkt"];
690--1523[label="0.142857;2pkt 2fpkt"];
690--1658[label="0.142857;2pkt 2fpkt"];
690--2009[label="1;14pkt 14fpkt"];
690--2966[label="0.0714286;1pkt 1fpkt"];
690--3963[label="0.0714286;1pkt 1fpkt"];
750--1211[label="0.05;1pkt 1fpkt"];
750--1441[label="0.05;1pkt 1fpkt"];
750--1513[label="0.15;3pkt 3fpkt"];
750--1523[label="0.05;1pkt 1fpkt"];
750--1727[label="0.166667;1pkt 1fpkt"];
750--1957[label="0.05;1pkt 1fpkt"];
750--1967[label="1;20pkt 20fpkt"];
750--2966[label="0.05;1pkt 1fpkt"];
750--2988[label="0.166667;1pkt 1fpkt"];
750--3500[label="0.0769231;1pkt 1fpkt"];
750--3550[label="0.142857;1pkt 1fpkt"];
750--4555[label="0.05;1pkt 1fpkt"];
750--4977[label="0.05;1pkt 1fpkt"];
750--4991[label="0.2;1pkt 1fpkt"];
750--5267[label="0.0833333;1pkt 1fpkt"];
750--5297[label="0.166667;1pkt 1fpkt"];
750--6012[label="0.05;1pkt 1fpkt"];
750--6018[label="0.166667;1pkt 1fpkt"];
756--1011[label="0.0142857;3pkt 3fpkt"];
756--1097[label="0.132812;17pkt 17fpkt"];
756--1107[label="0.115702;14pkt 14fpkt"];
756--1211[label="0.195312;25pkt 25fpkt"];
756--1225[label="0.00729927;1pkt 1fpkt"];
756--1263[label="0.0289855;2pkt 2fpkt"];
756--1335[label="0.0618557;6pkt 6fpkt"];
756--1368[label="0.0267857;3pkt 3fpkt"];
756--1382[label="0.230769;21pkt 21fpkt"];
756--1462[label="0.0413534;11pkt 11fpkt"];
756--1498[label="0.0642202;21pkt 21fpkt"];
756--1543[label="0.0178571;1pkt 1fpkt"];
756--1593[label="0.0030581;1pkt 1fpkt"];
756--1764[label="0.016129;2pkt 2fpkt"];
756--1781[label="0.031746;2pkt 2fpkt"];
756--1847[label="0.0030581;1pkt 1fpkt"];
756--1958[label="0.142857;13pkt 13fpkt"];
756--2108[label="0.00462963;1pkt 1fpkt"];
756--2119[label="0.0289855;2pkt 2fpkt"];
756--2278[label="0.0030581;1pkt 1fpkt"];
756--2589[label="0.00416667;1pkt 1fpkt"];
756--2730[label="1;4pkt 4fpkt"];
756--2943[label="0.025641;2pkt 2fpkt"];
756--2966[label="0.178571;25pkt 25fpkt"];
756--3239[label="0.05;2pkt 2fpkt"];
756--3250[label="0.0384615;3pkt 3fpkt"];
756--3435[label="0.104478;14pkt 14fpkt"];
756--3650[label="0.058104;19pkt 19fpkt"];
756--3654[label="0.0232558;2pkt 2fpkt"];
756--3695[label="0.0454545;2pkt 2fpkt"];
756--3792[label="0.0132743;3pkt 3fpkt"];
756--3922[label="0.21875;21pkt 21fpkt"];
756--3961[label="0.125;4pkt 4fpkt"];
756--3982[label="0.190184;31pkt 31fpkt"];
756--4229[label="0.0642202;21pkt 21fpkt"];
756--4256[label="0.03;3pkt 3fpkt"];
756--4268[label="0.0322581;1pkt 1fpkt"];
756--4362[label="0.0555556;6pkt 6fpkt"];
756--4573[label="0.0178571;1pkt 1fpkt"];
756--4755[label="0.00416667;1pkt 1fpkt"];
756--4833[label="1;5pkt 5fpkt"];
756--4977[label="0.179856;25pkt 25fpkt"];
756--5134[label="0.0384615;3pkt 3fpkt"];
756--5238[label="0.104478;14pkt 14fpkt"];
756--5347[label="0.058104;19pkt 19fpkt"];
756--5486[label="0.21875;21pkt 21fpkt"];
756--5511[label="0.190184;31pkt 31fpkt"];
756--5669[label="0.0322581;1pkt 1fpkt"];
756--5905[label="0.0041841;1pkt 1fpkt"];
756--6012[label="0.179856;25pkt 25fpkt"];
756--6078[label="0.0384615;3pkt 3fpkt"];
756--6165[label="0.058104;19pkt 19fpkt"];
756--6230[label="0.21875;21pkt 21fpkt"];
756--6242[label="0.190184;31pkt 31fpkt"];
863--1244[label="0.6;3pkt 3fpkt"];
863--2009[label="0.2;1pkt 1fpkt"];
863--2096[label="0.6;3pkt 3fpkt"];
1031--1211[label="0.0344828;2pkt 2fpkt"];
1031--1358[label="0.206897;12pkt 12fpkt"];
1031--1462[label="0.12069;7pkt 7fpkt"];
1031--1758[label="0.0172414;1pkt 1fpkt"];
1031--1764[label="0.0344828;2pkt 2fpkt"];
1031--1782[label="0.189655;11pkt 11fpkt"];
1031--2129[label="1;58pkt 58fpkt"];
1031--2400[label="0.37931;22pkt 22fpkt"];
1031--2689[label="1;8pkt 8fpkt"];
1031--2966[label="0.0344828;2pkt 2fpkt"];
1031--4649[label="0.37931;22pkt 22fpkt"];
1031--4812[label="1;8pkt 8fpkt"];
1031--4977[label="0.0344828;2pkt 2fpkt"];
1031--5924[label="1;8pkt 8fpkt"];
1031--6012[label="0.0344828;2pkt 2fpkt"];
1211--1268[label="0.0246914;2pkt 2fpkt"];
1211--1291[label="0.0224719;2pkt 2fpkt"];
1211--1295[label="0.0169492;1pkt 1fpkt"];
1211--1378[label="0.166667;1pkt 1fpkt"];
1211--1427[label="0.0078125;1pkt 1fpkt"];
1211--1433[label="0.171875;22pkt 22fpkt"];
1211--1438[label="0.0078125;1pkt 1fpkt"];
1211--1580[label="0.0234375;3pkt 3fpkt"];
1211--1663[label="0.0512821;2pkt 2fpkt"];
1211--1839[label="0.015625;2pkt 2fpkt"];
1211--1930[label="0.0078125;1pkt 1fpkt"];
1211--1959[label="0.0434783;1pkt 1fpkt"];
1211--1967[label="0.05;1pkt 1fpkt"];
1211--1979[label="0.0078125;1pkt 1fpkt"];
1211--2009[label="0.0714286;1pkt 1fpkt"];
1211--2044[label="0.0078125;1pkt 1fpkt"];
1211--2129[label="0.0344828;2pkt 2fpkt"];
1211--2154[label="0.0224719;2pkt 2fpkt"];
1211--2192[label="0.166667;1pkt 1fpkt"];
1211--2225[label="0.171875;22pkt 22fpkt"];
1211--2226[label="0.0078125;1pkt 1fpkt"];
1211--2966[label="1;128pkt 128fpkt"];
1211--4977[label="0.992188;127pkt 127fpkt"];
1211--6012[label="0.992188;127pkt 127fpkt"];
1378--2192[label="1;6pkt 6fpkt"];
1378--2966[label="0.166667;1pkt 1fpkt"];
1378--4399[label="0.166667;1pkt 1fpkt"];
1378--4977[label="0.166667;1pkt 1fpkt"];
1378--5734[label="0.166667;1pkt 1fpkt"];
1378--6012[label="0.166667;1pkt 1fpkt"];
1663--1847[label="0.025641;1pkt 1fpkt"];
1663--2278[label="0.025641;1pkt 1fpkt"];
1663--2557[label="0.125;1pkt 1fpkt"];
1663--2966[label="0.0512821;2pkt 2fpkt"];
1663--3372[label="0.166667;1pkt 1fpkt"];
1663--3650[label="0.0769231;3pkt 3fpkt"];
1663--3861[label="0.025641;1pkt 1fpkt"];
1663--4117[label="0.0769231;3pkt 3fpkt"];
1663--4577[label="0.037037;1pkt 1fpkt"];
1663--4977[label="0.0512821;2pkt 2fpkt"];
1663--5347[label="0.0769231;3pkt 3fpkt"];
1663--6012[label="0.0512821;2pkt 2fpkt"];
1663--6165[label="0.0769231;3pkt 3fpkt"];
1967--2966[label="0.05;1pkt 1fpkt"];
1967--2988[label="0.166667;1pkt 1fpkt"];
1967--3500[label="0.0769231;1pkt 1fpkt"];
1967--3550[label="0.142857;1pkt 1fpkt"];
1967--4555[label="0.05;1pkt 1fpkt"];
1967--4977[label="0.05;1pkt 1fpkt"];
1967--4991[label="0.2;1pkt 1fpkt"];
1967--5267[label="0.0833333;1pkt 1fpkt"];
1967--5297[label="0.166667;1pkt 1fpkt"];
1967--6012[label="0.05;1pkt 1fpkt"];
1967--6018[label="0.166667;1pkt 1fpkt"];
2009--2966[label="0.0714286;1pkt 1fpkt"];
2009--3963[label="0.0714286;1pkt 1fpkt"];
2129--2400[label="0.37931;22pkt 22fpkt"];
2129--2689[label="1;8pkt 8fpkt"];
2129--2966[label="0.0344828;2pkt 2fpkt"];
2129--4649[label="0.37931;22pkt 22fpkt"];
2129--4812[label="1;8pkt 8fpkt"];
2129--4977[label="0.0344828;2pkt 2fpkt"];
2129--5924[label="1;8pkt 8fpkt"];
2129--6012[label="0.0344828;2pkt 2fpkt"];
2192--2966[label="0.166667;1pkt 1fpkt"];
2192--4399[label="0.166667;1pkt 1fpkt"];
2192--4977[label="0.166667;1pkt 1fpkt"];
2192--5734[label="0.166667;1pkt 1fpkt"];
2192--6012[label="0.166667;1pkt 1fpkt"];
2730--4833[label="1;4pkt 4fpkt"];
3550--5297[label="1;6pkt 6fpkt"];
4812--5924[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="7.210.224.3" src_port="80"/>
      <filter dst_ip="136.93.219.62" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.175.68.73"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="98.6.104.76"/>
    </slice>
    <from sec="1068526895" usec="0"/>
    <to sec="1068527161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.216.197.79"/>
    </slice>
    <from sec="1068527604" usec="0"/>
    <to sec="1068527615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1103{
style=filled;
color=gray75;
4352[label="212.30.119.214;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat1103[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.30.119.214:1863, 143.134.168.26:1214}[33.3333%]&lt;BR/&gt;{212.30.119.214:1863, 143.38.32.89:1066}[33.3333%]&lt;BR/&gt;{212.30.119.214:1863, 143.38.15.128:1035}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1214: (16.6667%)&lt;BR/&gt; 1066: (16.6667%)&lt;BR/&gt; 1035: (16.6667%)&gt;];
}
4352--5708[label="1;2pkt 2fpkt"];
4352--6330[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="143.38.15.128" dst_port="1035" src_ip="212.30.119.214" src_port="1863"/>
      <filter dst_ip="143.38.32.89" dst_port="1066" src_ip="212.30.119.214" src_port="1863"/>
      <filter dst_ip="143.134.168.26" dst_port="1214" src_ip="212.30.119.214" src_port="1863"/>
    </slice>
    <from sec="1068526805" usec="0"/>
    <to sec="1068527666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.210.191.86"/>
    </slice>
    <from sec="1068527232" usec="0"/>
    <to sec="1068527311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="86.98.70.88"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.88.104.99"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.221.210.100"/>
    </slice>
    <from sec="1068527354" usec="0"/>
    <to sec="1068527366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.409191,1.76189,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1108{
style=filled;
color=gray75;
3337[label="221.138.215.93;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat1108[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.138.215.93:80, 143.38.11.41:1279}[25%]&lt;BR/&gt;{221.138.215.93:80, 136.93.197.199:1181}[25%]&lt;BR/&gt;{221.138.215.93:80, 136.93.197.199:1182}[25%]&lt;BR/&gt;{221.138.215.93:80, 136.93.197.199:1189}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1279: (12.5%)&lt;BR/&gt; 1189: (12.5%)&lt;BR/&gt; 1182: (12.5%)&lt;BR/&gt; 1181: (12.5%)&gt;];
}
3337--5181[label="1;4pkt 4fpkt"];
3337--6100[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.93.197.199" dst_port="1189" src_ip="221.138.215.93" src_port="80"/>
      <filter dst_ip="136.93.197.199" dst_port="1182" src_ip="221.138.215.93" src_port="80"/>
      <filter dst_ip="136.93.197.199" dst_port="1181" src_ip="221.138.215.93" src_port="80"/>
      <filter dst_ip="143.38.11.41" dst_port="1279" src_ip="221.138.215.93" src_port="80"/>
    </slice>
    <from sec="1068526863" usec="0"/>
    <to sec="1068527440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.684307,1.76787,020,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1109{
style=filled;
color=gray75;
3660[label="200.152.19.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6167[label="200.152.19.132;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1109[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.152.19.132:0, 208.169.14.112:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3660--6167[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.169.14.112" src_ip="200.152.19.132"/>
    </slice>
    <from sec="1068526838" usec="0"/>
    <to sec="1068527438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.39.234.134"/>
    </slice>
    <from sec="1068527358" usec="0"/>
    <to sec="1068527423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.221.250.135"/>
    </slice>
    <from sec="1068527341" usec="0"/>
    <to sec="1068527352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="98.6.97.136"/>
    </slice>
    <from sec="1068526803" usec="0"/>
    <to sec="1068527425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.39.234.138"/>
    </slice>
    <from sec="1068527617" usec="0"/>
    <to sec="1068527691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.125.173.139"/>
    </slice>
    <from sec="1068527700" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.113.114.143"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1116{
style=filled;
color=gray75;
453[label="200.145.36.146;s;226pkt 226fpkt", shape=diamond, color=yellow];
stat1116[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.145.36.146:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3073: (0.442478%)&lt;BR/&gt; 2810: (0.442478%)&lt;BR/&gt; 2610: (0.442478%)&lt;BR/&gt; 1580: (0.442478%)&gt;];
}
453--473[label="0.00442478;1pkt 1fpkt"];
453--663[label="0.031746;2pkt 2fpkt"];
453--882[label="0.0208333;1pkt 1fpkt"];
453--893[label="0.0547945;4pkt 4fpkt"];
453--1046[label="0.0208333;2pkt 2fpkt"];
453--1087[label="0.0294118;2pkt 2fpkt"];
453--1141[label="0.0263158;1pkt 1fpkt"];
453--1147[label="0.0322581;2pkt 2fpkt"];
453--1244[label="0.0172414;1pkt 1fpkt"];
453--1286[label="0.0454545;2pkt 2fpkt"];
453--1427[label="0.0309735;7pkt 7fpkt"];
453--1463[label="0.0132743;3pkt 3fpkt"];
453--1499[label="0.00442478;1pkt 1fpkt"];
453--1522[label="0.0132743;3pkt 3fpkt"];
453--1586[label="1;200pkt 200fpkt"];
453--1609[label="0.030303;1pkt 1fpkt"];
453--1664[label="0.00819672;1pkt 1fpkt"];
453--1838[label="0.0132743;3pkt 3fpkt"];
453--1839[label="0.00884956;2pkt 2fpkt"];
453--1930[label="0.00442478;1pkt 1fpkt"];
453--1939[label="0.0176991;4pkt 4fpkt"];
453--1990[label="0.0208333;1pkt 1fpkt"];
453--2044[label="0.00442478;1pkt 1fpkt"];
453--2096[label="0.0188679;1pkt 1fpkt"];
453--2118[label="0.0392157;2pkt 2fpkt"];
453--2143[label="0.027027;2pkt 2fpkt"];
453--2163[label="0.141593;32pkt 32fpkt"];
453--2164[label="0.0176991;4pkt 4fpkt"];
453--2245[label="0.0221239;5pkt 5fpkt"];
453--2304[label="0.0132743;3pkt 3fpkt"];
453--3795[label="1;226pkt 226fpkt"];
453--5423[label="1;226pkt 226fpkt"];
453--6203[label="0.995575;225pkt 225fpkt"];
</description>
    <slice>
      <filter src_ip="200.145.36.146" src_port="80"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.216.204.146"/>
    </slice>
    <from sec="1068527566" usec="0"/>
    <to sec="1068527577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.173.181.150"/>
    </slice>
    <from sec="1068526806" usec="0"/>
    <to sec="1068527689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.201.250.158"/>
    </slice>
    <from sec="1068526802" usec="0"/>
    <to sec="1068527700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.193.173.166"/>
    </slice>
    <from sec="1068527177" usec="0"/>
    <to sec="1068527186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.88.12.176"/>
    </slice>
    <from sec="1068526905" usec="0"/>
    <to sec="1068527010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.162.144.178"/>
    </slice>
    <from sec="1068527460" usec="0"/>
    <to sec="1068527495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.38.36.191"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1124{
style=filled;
color=gray75;
1370[label="208.31.241.202;s;43pkt 43fpkt", shape=diamond, color=yellow];
stat1124[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.31.241.202:*, 215.92.26.84:80}[27.907%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.186%)&lt;BR/&gt; 0: (11.6279%)&lt;BR/&gt; 49959: (1.16279%)&lt;BR/&gt; 49958: (1.16279%)&lt;BR/&gt; 49951: (1.16279%)&gt;];
}
1370--4280[label="0.976744;42pkt 42fpkt"];
1370--5677[label="0.97619;41pkt 41fpkt"];
1370--6317[label="0.976744;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="215.92.26.84" dst_port="80" src_ip="208.31.241.202"/>
    </slice>
    <from sec="1068526811" usec="0"/>
    <to sec="1068527628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.807837,1.8431,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.88.135.240"/>
    </slice>
    <from sec="1068526800" usec="0"/>
    <to sec="1068527032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708854,1.80767,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1126{
style=filled;
color=gray75;
1227[label="7.16.71.245;s;232pkt 232fpkt", shape=diamond, color=yellow];
stat1126[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.16.71.245:*, *:445}[50.431%]&lt;BR/&gt;{7.16.71.245:*, *:135}[49.569%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.2155%)&lt;BR/&gt; 135: (24.7845%)&lt;BR/&gt; 4791: (0.431034%)&lt;BR/&gt; 4183: (0.431034%)&lt;BR/&gt; 3652: (0.431034%)&gt;];
}
1227--2329[label="0.0431034;10pkt 10fpkt"];
1227--2337[label="0.00862069;2pkt 2fpkt"];
1227--2343[label="0.0258621;6pkt 6fpkt"];
1227--2345[label="0.0431034;10pkt 10fpkt"];
1227--2349[label="0.0258621;6pkt 6fpkt"];
1227--4560[label="1;232pkt 232fpkt"];
1227--5814[label="1;232pkt 232fpkt"];
1227--6370[label="0.99569;231pkt 231fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="7.16.71.245"/>
      <filter dst_port="135" src_ip="7.16.71.245"/>
    </slice>
    <from sec="1068526801" usec="0"/>
    <to sec="1068527626" usec="0"/>
  </anomaly>

</admd:annotation>
