<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.885431,1.68051,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.166.138.135" dst_port="80" proto="tcp" src_ip="200.219.218.106" src_port="50293"/>
      <filter dst_ip="145.166.138.135" dst_port="80" proto="tcp" src_ip="200.219.218.106" src_port="50294"/>
      <from sec="1071206064" usec="0"/>
      <to sec="1071206065" usec="0"/>
    </slice>
    <from sec="1071206063" usec="0"/>
    <to sec="1071206065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="45381896" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="45437512" usec="0"/>
    <to sec="45374216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="149.206.232.32" dst_port="25" proto="tcp" src_ip="218.61.165.182" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="25" proto="tcp" src_ip="218.61.165.182" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="25" proto="tcp" src_ip="218.61.165.182" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="25" proto="tcp" src_ip="218.61.165.182" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="80" proto="tcp" src_ip="218.61.165.182" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="80" proto="tcp" src_ip="218.61.165.182" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="80" proto="tcp" src_ip="218.61.165.182" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="80" proto="tcp" src_ip="218.61.165.182" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="25" proto="tcp" src_ip="218.61.165.180" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="25" proto="tcp" src_ip="218.61.165.180" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="25" proto="tcp" src_ip="218.61.165.180" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="25" proto="tcp" src_ip="218.61.165.180" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="80" proto="tcp" src_ip="218.61.165.180" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="80" proto="tcp" src_ip="218.61.165.180" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="80" proto="tcp" src_ip="218.61.165.180" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="80" proto="tcp" src_ip="218.61.165.180" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="80" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="80" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="80" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.232.32" dst_port="80" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <from sec="1071205950" usec="0"/>
      <to sec="1071205969" usec="0"/>
    </slice>
    <from sec="1071205948" usec="0"/>
    <to sec="1071205969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.118.239.33" dst_port="135" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="201.118.239.33" dst_port="135" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="201.118.239.33" dst_port="135" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="201.118.239.33" dst_port="135" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="201.118.239.33" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="201.118.239.33" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="201.118.239.33" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="201.118.239.33" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <from sec="1071205262" usec="0"/>
      <to sec="1071205922" usec="0"/>
    </slice>
    <from sec="1071205262" usec="0"/>
    <to sec="1071205923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="udp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="udp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="udp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="udp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="udp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="udp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="udp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="udp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="tcp" src_ip="58.67.133.150" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="udp" src_ip="58.67.133.150" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="tcp" src_ip="58.67.133.150" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="udp" src_ip="58.67.133.150" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="tcp" src_ip="58.67.133.150" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="udp" src_ip="58.67.133.150" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="tcp" src_ip="58.67.133.150" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="udp" src_ip="58.67.133.150" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="tcp" src_ip="58.67.133.150" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="udp" src_ip="58.67.133.150" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="tcp" src_ip="58.67.133.150" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="udp" src_ip="58.67.133.150" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="tcp" src_ip="58.67.133.150" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="udp" src_ip="58.67.133.150" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="tcp" src_ip="58.67.133.150" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="udp" src_ip="58.67.133.150" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="tcp" src_ip="58.67.133.32" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="udp" src_ip="58.67.133.32" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="tcp" src_ip="58.67.133.32" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="udp" src_ip="58.67.133.32" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="tcp" src_ip="58.67.133.32" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="udp" src_ip="58.67.133.32" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="tcp" src_ip="58.67.133.32" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="25" proto="udp" src_ip="58.67.133.32" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="tcp" src_ip="58.67.133.32" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="udp" src_ip="58.67.133.32" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="tcp" src_ip="58.67.133.32" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="udp" src_ip="58.67.133.32" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="tcp" src_ip="58.67.133.32" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="udp" src_ip="58.67.133.32" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="tcp" src_ip="58.67.133.32" src_port="80"/>
      <filter dst_ip="149.206.236.165" dst_port="135" proto="udp" src_ip="58.67.133.32" src_port="80"/>
      <from sec="1071205449" usec="0"/>
      <to sec="1071205458" usec="0"/>
    </slice>
    <from sec="1071205446" usec="0"/>
    <to sec="1071205458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="149.206.39.182" dst_port="135" proto="tcp" src_ip="154.32.67.150" src_port="80"/>
      <filter dst_ip="149.206.74.6" dst_port="135" proto="tcp" src_ip="154.32.67.150" src_port="80"/>
      <from sec="1071205786" usec="0"/>
      <to sec="1071205852" usec="0"/>
    </slice>
    <from sec="1071205786" usec="0"/>
    <to sec="1071205852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="149.206.20.17" dst_port="25" proto="tcp" src_ip="221.219.224.72"/>
      <filter dst_ip="149.206.20.17" dst_port="25" proto="udp" src_ip="221.219.224.72"/>
      <filter dst_ip="149.206.20.17" dst_port="25" proto="tcp" src_ip="221.219.224.72"/>
      <filter dst_ip="149.206.20.17" dst_port="25" proto="udp" src_ip="221.219.224.72"/>
      <filter dst_ip="149.206.20.17" dst_port="25" proto="tcp" src_ip="221.219.224.72"/>
      <filter dst_ip="149.206.20.17" dst_port="25" proto="udp" src_ip="221.219.224.72"/>
      <filter dst_ip="149.206.20.17" dst_port="25" proto="tcp" src_ip="221.219.224.72"/>
      <filter dst_ip="149.206.20.17" dst_port="25" proto="udp" src_ip="221.219.224.72"/>
      <filter dst_ip="149.206.20.17" dst_port="53" proto="tcp" src_ip="221.219.224.72"/>
      <filter dst_ip="149.206.20.17" dst_port="53" proto="udp" src_ip="221.219.224.72"/>
      <filter dst_ip="149.206.20.17" dst_port="53" proto="tcp" src_ip="221.219.224.72"/>
      <filter dst_ip="149.206.20.17" dst_port="53" proto="udp" src_ip="221.219.224.72"/>
      <filter dst_ip="149.206.20.17" dst_port="53" proto="tcp" src_ip="221.219.224.72"/>
      <filter dst_ip="149.206.20.17" dst_port="53" proto="udp" src_ip="221.219.224.72"/>
      <filter dst_ip="149.206.20.17" dst_port="53" proto="tcp" src_ip="221.219.224.72"/>
      <filter dst_ip="149.206.20.17" dst_port="53" proto="udp" src_ip="221.219.224.72"/>
      <filter dst_ip="149.206.20.17" dst_port="25" proto="tcp" src_ip="149.206.20.17"/>
      <filter dst_ip="149.206.20.17" dst_port="25" proto="udp" src_ip="149.206.20.17"/>
      <filter dst_ip="149.206.20.17" dst_port="25" proto="tcp" src_ip="149.206.20.17"/>
      <filter dst_ip="149.206.20.17" dst_port="25" proto="udp" src_ip="149.206.20.17"/>
      <filter dst_ip="149.206.20.17" dst_port="25" proto="tcp" src_ip="149.206.20.17"/>
      <filter dst_ip="149.206.20.17" dst_port="25" proto="udp" src_ip="149.206.20.17"/>
      <filter dst_ip="149.206.20.17" dst_port="25" proto="tcp" src_ip="149.206.20.17"/>
      <filter dst_ip="149.206.20.17" dst_port="25" proto="udp" src_ip="149.206.20.17"/>
      <filter dst_ip="149.206.20.17" dst_port="53" proto="tcp" src_ip="149.206.20.17"/>
      <filter dst_ip="149.206.20.17" dst_port="53" proto="udp" src_ip="149.206.20.17"/>
      <filter dst_ip="149.206.20.17" dst_port="53" proto="tcp" src_ip="149.206.20.17"/>
      <filter dst_ip="149.206.20.17" dst_port="53" proto="udp" src_ip="149.206.20.17"/>
      <filter dst_ip="149.206.20.17" dst_port="53" proto="tcp" src_ip="149.206.20.17"/>
      <filter dst_ip="149.206.20.17" dst_port="53" proto="udp" src_ip="149.206.20.17"/>
      <filter dst_ip="149.206.20.17" dst_port="53" proto="tcp" src_ip="149.206.20.17"/>
      <filter dst_ip="149.206.20.17" dst_port="53" proto="udp" src_ip="149.206.20.17"/>
      <from sec="1071205457" usec="0"/>
      <to sec="1071205512" usec="0"/>
    </slice>
    <from sec="1071205457" usec="0"/>
    <to sec="1071205512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="219.91.152.17" src_port="1031"/>
      <filter dst_port="137" proto="udp" src_ip="219.91.152.17" src_port="1031"/>
      <filter dst_port="137" proto="icmp" src_ip="219.91.152.17" src_port="1031"/>
      <from sec="1071205554" usec="0"/>
      <to sec="1071205557" usec="0"/>
    </slice>
    <from sec="1071205554" usec="0"/>
    <to sec="1071205557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="58.144.180.37" src_port="1028"/>
      <filter dst_port="137" proto="udp" src_ip="58.144.180.37" src_port="1028"/>
      <from sec="1071205402" usec="0"/>
      <to sec="1071205410" usec="0"/>
    </slice>
    <from sec="1071205402" usec="0"/>
    <to sec="1071205410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="219.187.90.55" src_port="1025"/>
      <from sec="1071205818" usec="0"/>
      <to sec="1071205823" usec="0"/>
    </slice>
    <from sec="1071205818" usec="0"/>
    <to sec="1071205823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="201.161.33.76" src_port="1029"/>
      <from sec="1071205480" usec="0"/>
      <to sec="1071205487" usec="0"/>
    </slice>
    <from sec="1071205480" usec="0"/>
    <to sec="1071205487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="218.78.30.101" src_port="1030"/>
      <from sec="1071205443" usec="0"/>
      <to sec="1071205464" usec="0"/>
    </slice>
    <from sec="1071205443" usec="0"/>
    <to sec="1071205464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="34.197.207.130" src_port="10000"/>
      <from sec="1071205888" usec="0"/>
      <to sec="1071205900" usec="0"/>
    </slice>
    <from sec="1071205888" usec="0"/>
    <to sec="1071205900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="218.79.245.140" src_port="1030"/>
      <from sec="1071205655" usec="0"/>
      <to sec="1071205659" usec="0"/>
    </slice>
    <from sec="1071205655" usec="0"/>
    <to sec="1071205659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="60.51.199.142" src_port="1029"/>
      <from sec="1071205205" usec="0"/>
      <to sec="1071205207" usec="0"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071205207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="78.56.246.167" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="78.56.246.167" src_port="1028"/>
      <from sec="1071205606" usec="0"/>
      <to sec="1071205611" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="137" proto="udp" src_ip="61.188.185.132" src_port="1025"/>
      <filter dst_port="137" proto="udp" src_ip="61.188.185.132" src_port="1028"/>
      <from sec="1071205606" usec="0"/>
      <to sec="1071205611" usec="0"/>
    </slice>
    <from sec="1071205606" usec="0"/>
    <to sec="1071205611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="219.88.151.170" src_port="65053"/>
      <from sec="1071205483" usec="0"/>
      <to sec="1071205498" usec="0"/>
    </slice>
    <from sec="1071205483" usec="0"/>
    <to sec="1071205498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06292,1.66934,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_19{
style=filled;
color=gray75;
118[label="59.77.33.186s;668pkt 668fpkt", shape=rectangle, color=red];
124[label="61.149.2.210s;344pkt 344fpkt", shape=rectangle, color=red];
2702[label="204.194.196.71;215pkt 215fpkt", shape=pentagon, color=darkviolet];
3185[label="59.8.45.146;215pkt 215fpkt", shape=pentagon, color=darkviolet];
3762[label="60.16.124.230;163pkt 163fpkt", shape=pentagon, color=darkviolet];
4224[label="204.194.196.71;215pkt 215fpkt", shape=invtriangle, color=brown];
4462[label="59.8.45.146;215pkt 215fpkt", shape=invtriangle, color=brown];
4791[label="60.16.124.230;163pkt 163fpkt", shape=invtriangle, color=brown];
5034[label="204.194.196.71;215pkt 215fpkt", shape=invhouse, color=bisque];
5132[label="59.8.45.146;215pkt 215fpkt", shape=invhouse, color=bisque];
stat19[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1026, *:137}[37.9832%]&lt;BR/&gt;{*:1029, *:137}[33.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1026: (19.5015%)&lt;BR/&gt; 1032: (14.5738%)&lt;BR/&gt; 1029: (13.5654%)&lt;BR/&gt; 1025: (2.35921%)&gt;];
}
118--124[label="0.0348837;12pkt 12fpkt"];
118--2702[label="0.665116;143pkt 143fpkt"];
118--3185[label="0.562791;121pkt 121fpkt"];
118--3762[label="0.269939;44pkt 44fpkt"];
118--4224[label="0.665116;143pkt 143fpkt"];
118--4462[label="0.562791;121pkt 121fpkt"];
118--4791[label="0.269939;44pkt 44fpkt"];
118--5034[label="0.665116;143pkt 143fpkt"];
118--5132[label="0.562791;121pkt 121fpkt"];
124--3762[label="0.656442;107pkt 107fpkt"];
124--4791[label="0.656442;107pkt 107fpkt"];
2702--4224[label="1;215pkt 215fpkt"];
2702--5034[label="1;215pkt 215fpkt"];
3185--4462[label="1;215pkt 215fpkt"];
3185--5132[label="1;215pkt 215fpkt"];
3762--4791[label="1;163pkt 163fpkt"];
4224--5034[label="1;215pkt 215fpkt"];
4462--5132[label="1;215pkt 215fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_port="1026"/>
      <filter dst_port="137" src_port="1029"/>
    </slice>
    <from sec="1071205351" usec="0"/>
    <to sec="1071205407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="135" proto="tcp" src_ip="204.132.64.5"/>
      <from sec="1071205262" usec="0"/>
      <to sec="1071205277" usec="0"/>
    </slice>
    <from sec="1071205262" usec="0"/>
    <to sec="1071205277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="135" proto="tcp" src_ip="212.59.178.118"/>
      <from sec="1071205542" usec="0"/>
      <to sec="1071205549" usec="0"/>
    </slice>
    <from sec="1071205542" usec="0"/>
    <to sec="1071205549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="135" proto="tcp" src_ip="210.117.134.156" src_port="80"/>
      <from sec="1071205722" usec="0"/>
      <to sec="1071205735" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="135" proto="tcp" src_ip="58.67.134.156" src_port="80"/>
      <from sec="1071205723" usec="0"/>
      <to sec="1071205735" usec="0"/>
    </slice>
    <from sec="1071205722" usec="0"/>
    <to sec="1071205735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="135" proto="tcp" src_ip="198.122.69.184"/>
      <from sec="1071205622" usec="0"/>
      <to sec="1071205636" usec="0"/>
    </slice>
    <from sec="1071205622" usec="0"/>
    <to sec="1071205636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.188.106.197" dst_port="25" proto="tcp" src_ip="216.115.229.21" src_port="1494"/>
      <filter dst_ip="160.188.106.197" dst_port="25" proto="udp" src_ip="216.115.229.21" src_port="1494"/>
      <filter dst_ip="160.188.106.197" dst_port="135" proto="tcp" src_ip="216.115.229.21" src_port="1494"/>
      <filter dst_ip="160.188.106.197" dst_port="135" proto="udp" src_ip="216.115.229.21" src_port="1494"/>
      <filter dst_ip="160.188.106.197" dst_port="445" proto="tcp" src_ip="216.115.229.21" src_port="1494"/>
      <filter dst_ip="160.188.106.197" dst_port="445" proto="udp" src_ip="216.115.229.21" src_port="1494"/>
      <filter dst_ip="160.188.106.197" dst_port="80" proto="tcp" src_ip="216.115.229.21" src_port="1494"/>
      <filter dst_ip="160.188.106.197" dst_port="80" proto="udp" src_ip="216.115.229.21" src_port="1494"/>
      <from sec="1071205747" usec="0"/>
      <to sec="1071205758" usec="0"/>
    </slice>
    <from sec="1071205747" usec="0"/>
    <to sec="1071205758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="149.206.51.186" dst_port="135" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.51.186" dst_port="135" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.51.186" dst_port="135" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.51.186" dst_port="135" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.51.186" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.51.186" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.51.186" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <filter dst_ip="149.206.51.186" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="80"/>
      <from sec="1071205789" usec="0"/>
      <to sec="1071205798" usec="0"/>
    </slice>
    <from sec="1071205789" usec="0"/>
    <to sec="1071205801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.188.107.7" dst_port="137" proto="tcp" src_ip="199.163.158.103" src_port="80"/>
      <filter dst_ip="160.188.107.7" dst_port="137" proto="udp" src_ip="199.163.158.103" src_port="80"/>
      <filter dst_ip="160.188.107.7" dst_port="137" proto="tcp" src_ip="199.163.158.103" src_port="80"/>
      <filter dst_ip="160.188.107.7" dst_port="137" proto="udp" src_ip="199.163.158.103" src_port="80"/>
      <filter dst_ip="160.188.107.7" dst_port="137" proto="tcp" src_ip="199.163.158.103" src_port="80"/>
      <filter dst_ip="160.188.107.7" dst_port="137" proto="udp" src_ip="199.163.158.103" src_port="80"/>
      <filter dst_ip="160.188.107.7" dst_port="137" proto="tcp" src_ip="199.163.158.103" src_port="80"/>
      <filter dst_ip="160.188.107.7" dst_port="137" proto="udp" src_ip="199.163.158.103" src_port="80"/>
      <from sec="1071205811" usec="0"/>
      <to sec="1071205820" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="145.71.79.226" dst_port="137" proto="tcp" src_ip="199.163.158.103" src_port="80"/>
      <filter dst_ip="145.71.79.226" dst_port="137" proto="udp" src_ip="199.163.158.103" src_port="80"/>
      <filter dst_ip="145.71.79.226" dst_port="137" proto="tcp" src_ip="199.163.158.103" src_port="80"/>
      <filter dst_ip="145.71.79.226" dst_port="137" proto="udp" src_ip="199.163.158.103" src_port="80"/>
      <filter dst_ip="145.71.79.226" dst_port="137" proto="tcp" src_ip="199.163.158.103" src_port="80"/>
      <filter dst_ip="145.71.79.226" dst_port="137" proto="udp" src_ip="199.163.158.103" src_port="80"/>
      <filter dst_ip="145.71.79.226" dst_port="137" proto="tcp" src_ip="199.163.158.103" src_port="80"/>
      <filter dst_ip="145.71.79.226" dst_port="137" proto="udp" src_ip="199.163.158.103" src_port="80"/>
      <from sec="1071205811" usec="0"/>
      <to sec="1071205819" usec="0"/>
    </slice>
    <from sec="1071205811" usec="0"/>
    <to sec="1071205820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="166.55.179.47" dst_port="80" proto="tcp" src_ip="211.156.174.42" src_port="4662"/>
      <filter dst_ip="166.55.179.47" dst_port="80" proto="tcp" src_ip="211.156.174.42" src_port="4662"/>
      <filter dst_ip="166.55.179.47" dst_port="80" proto="tcp" src_ip="211.156.174.42" src_port="4662"/>
      <filter dst_ip="166.55.179.47" dst_port="80" proto="tcp" src_ip="211.156.174.42" src_port="4662"/>
      <filter dst_ip="166.55.179.47" dst_port="135" proto="tcp" src_ip="211.156.174.42" src_port="4662"/>
      <filter dst_ip="166.55.179.47" dst_port="135" proto="tcp" src_ip="211.156.174.42" src_port="4662"/>
      <filter dst_ip="166.55.179.47" dst_port="135" proto="tcp" src_ip="211.156.174.42" src_port="4662"/>
      <filter dst_ip="166.55.179.47" dst_port="135" proto="tcp" src_ip="211.156.174.42" src_port="4662"/>
      <from sec="1071205688" usec="0"/>
      <to sec="1071205696" usec="0"/>
    </slice>
    <from sec="1071205688" usec="0"/>
    <to sec="1071205696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="166.55.235.214" dst_port="135" proto="tcp" src_ip="216.20.65.49" src_port="80"/>
      <filter dst_ip="166.55.235.214" dst_port="135" proto="udp" src_ip="216.20.65.49" src_port="80"/>
      <filter dst_ip="166.55.235.214" dst_port="137" proto="tcp" src_ip="216.20.65.49" src_port="80"/>
      <filter dst_ip="166.55.235.214" dst_port="137" proto="udp" src_ip="216.20.65.49" src_port="80"/>
      <filter dst_ip="166.55.235.214" dst_port="53" proto="tcp" src_ip="216.20.65.49" src_port="80"/>
      <filter dst_ip="166.55.235.214" dst_port="53" proto="udp" src_ip="216.20.65.49" src_port="80"/>
      <filter dst_ip="166.55.235.214" dst_port="135" proto="tcp" src_ip="216.20.65.49" src_port="53"/>
      <filter dst_ip="166.55.235.214" dst_port="135" proto="udp" src_ip="216.20.65.49" src_port="53"/>
      <filter dst_ip="166.55.235.214" dst_port="137" proto="tcp" src_ip="216.20.65.49" src_port="53"/>
      <filter dst_ip="166.55.235.214" dst_port="137" proto="udp" src_ip="216.20.65.49" src_port="53"/>
      <filter dst_ip="166.55.235.214" dst_port="53" proto="tcp" src_ip="216.20.65.49" src_port="53"/>
      <filter dst_ip="166.55.235.214" dst_port="53" proto="udp" src_ip="216.20.65.49" src_port="53"/>
      <from sec="1071205855" usec="0"/>
      <to sec="1071205863" usec="0"/>
    </slice>
    <from sec="1071205851" usec="0"/>
    <to sec="1071205863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,504,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.193.141.22" dst_port="135" proto="tcp" src_ip="131.233.176.82" src_port="3805"/>
      <filter dst_ip="205.193.141.22" dst_port="443" proto="tcp" src_ip="131.233.176.82" src_port="3805"/>
      <filter dst_ip="205.193.141.22" dst_port="80" proto="tcp" src_ip="131.233.176.82" src_port="3805"/>
      <filter dst_ip="205.193.141.22" dst_port="135" proto="tcp" src_ip="131.233.176.82" src_port="3804"/>
      <filter dst_ip="205.193.141.22" dst_port="443" proto="tcp" src_ip="131.233.176.82" src_port="3804"/>
      <filter dst_ip="205.193.141.22" dst_port="80" proto="tcp" src_ip="131.233.176.82" src_port="3804"/>
      <from sec="1071205695" usec="0"/>
      <to sec="1071205704" usec="0"/>
    </slice>
    <from sec="1071205695" usec="0"/>
    <to sec="1071205705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="149.206.51.186" dst_port="80" proto="tcp" src_ip="205.1.205.157" src_port="80"/>
      <filter dst_ip="149.206.51.186" dst_port="135" proto="tcp" src_ip="205.1.205.157" src_port="80"/>
      <filter dst_ip="149.206.51.186" dst_port="445" proto="tcp" src_ip="205.1.205.157" src_port="80"/>
      <from sec="1071205695" usec="0"/>
      <to sec="1071205701" usec="0"/>
    </slice>
    <from sec="1071205684" usec="0"/>
    <to sec="1071205705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.166.4.101" dst_port="80" proto="tcp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="80" proto="udp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="80" proto="tcp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="80" proto="udp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="80" proto="tcp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="80" proto="udp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="80" proto="tcp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="80" proto="udp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="135" proto="tcp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="135" proto="udp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="135" proto="tcp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="135" proto="udp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="135" proto="tcp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="135" proto="udp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="135" proto="tcp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="135" proto="udp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="25" proto="tcp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="25" proto="udp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="25" proto="tcp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="25" proto="udp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="25" proto="tcp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="25" proto="udp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="25" proto="tcp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="25" proto="udp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="1043" proto="tcp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="1043" proto="udp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="1043" proto="tcp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="1043" proto="udp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="1043" proto="tcp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="1043" proto="udp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="1043" proto="tcp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="1043" proto="udp" src_ip="205.1.41.187" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="80" proto="tcp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="80" proto="udp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="80" proto="tcp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="80" proto="udp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="80" proto="tcp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="80" proto="udp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="80" proto="tcp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="80" proto="udp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="135" proto="tcp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="135" proto="udp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="135" proto="tcp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="135" proto="udp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="135" proto="tcp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="135" proto="udp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="135" proto="tcp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="135" proto="udp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="25" proto="udp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="25" proto="udp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="25" proto="udp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="25" proto="tcp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="25" proto="udp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="1043" proto="tcp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="1043" proto="udp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="1043" proto="tcp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="1043" proto="udp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="1043" proto="tcp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="1043" proto="udp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="1043" proto="tcp" src_ip="221.219.224.72" src_port="1863"/>
      <filter dst_ip="145.166.4.101" dst_port="1043" proto="udp" src_ip="221.219.224.72" src_port="1863"/>
      <from sec="1071205668" usec="0"/>
      <to sec="1071205673" usec="0"/>
    </slice>
    <from sec="1071205665" usec="0"/>
    <to sec="1071205674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
111[label="76.48.156.168s;255pkt 255fpkt", shape=rectangle, color=red];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.48.156.168:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
111--208[label="0.479675;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="76.48.156.168" src_port="1027"/>
    </slice>
    <from sec="1071205459" usec="0"/>
    <to sec="1071205472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="10.131.22.202"/>
      <from sec="1071205201" usec="0"/>
      <to sec="1071206029" usec="0"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
284[label="131.233.16.253;s;1pkt 1fpkt", shape=diamond, color=yellow];
285[label="216.20.64.223;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.16.253:49164, 216.20.64.223:20000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49164: (50%)&lt;BR/&gt; 20000: (50%)&gt;];
}
284--285[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.20.64.223" dst_port="20000" src_ip="131.233.16.253" src_port="49164"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
301[label="218.33.217.28;d;2pkt 2fpkt", shape=diamond, color=yellow];
302[label="131.233.162.2;s;5pkt 5fpkt", shape=diamond, color=yellow];
1879[label="131.233.162.2;s;5pkt 5fpkt", shape=hexagon, color=black];
1930[label="218.33.217.28;d;2pkt 2fpkt", shape=hexagon, color=black];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.162.2:1144, 205.1.45.33:1863}[20%]&lt;BR/&gt;{131.233.162.2:0, 101.233.2.38:0}[20%]&lt;BR/&gt;{131.233.162.2:0, 101.235.9.194:0}[20%]&lt;BR/&gt;{131.233.162.2:37154, 218.33.217.28:33798}[20%]&lt;BR/&gt;{131.233.162.2:37155, 218.33.217.28:33799}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (28.5714%)&lt;BR/&gt; 37155: (14.2857%)&lt;BR/&gt; 37154: (14.2857%)&lt;BR/&gt; 33799: (14.2857%)&lt;BR/&gt; 33798: (14.2857%)&gt;];
}
301--302[label="1;2pkt 2fpkt"];
301--1879[label="1;2pkt 2fpkt"];
301--1930[label="1;2pkt 2fpkt"];
302--1879[label="1;5pkt 5fpkt"];
302--1930[label="1;2pkt 2fpkt"];
1879--1930[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="218.33.217.28" dst_port="33799" src_ip="131.233.162.2" src_port="37155"/>
      <filter dst_ip="218.33.217.28" dst_port="33798" src_ip="131.233.162.2" src_port="37154"/>
      <filter dst_ip="101.235.9.194" src_ip="131.233.162.2"/>
      <filter dst_ip="101.233.2.38" src_ip="131.233.162.2"/>
      <filter dst_ip="205.1.45.33" dst_port="1863" src_ip="131.233.162.2" src_port="1144"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.942883,1.628,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
12[label="210.169.228.63s;1pkt 1fpkt", shape=rectangle, color=red];
323[label="210.169.228.63;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.169.228.63:1100, 149.207.88.223:47447}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47447: (50%)&lt;BR/&gt; 1100: (50%)&gt;];
}
12--323[label="1;1pkt 1fpkt"];
12--844[label="1;1pkt 1fpkt"];
323--844[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.88.223" dst_port="47447" src_ip="210.169.228.63" src_port="1100"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
336[label="131.233.47.30;s;11pkt 11fpkt", shape=diamond, color=yellow];
337[label="221.246.91.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
1932[label="131.233.47.30;s;11pkt 11fpkt", shape=hexagon, color=black];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.47.30:*, 208.207.20.210:15044}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15044: (13.0435%)&lt;BR/&gt; 15094: (8.69565%)&lt;BR/&gt; 15030: (8.69565%)&lt;BR/&gt; 0: (8.69565%)&lt;BR/&gt; 15096: (6.52174%)&gt;];
}
336--337[label="1;1pkt 1fpkt"];
336--1932[label="1;11pkt 11fpkt"];
337--1932[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.207.20.210" dst_port="15044" src_ip="131.233.47.30"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
343[label="145.166.210.239;d;5pkt 5fpkt", shape=diamond, color=yellow];
344[label="206.103.138.123;s;5pkt 5fpkt", shape=diamond, color=yellow];
1987[label="206.103.138.123;s;5pkt 5fpkt", shape=hexagon, color=black];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.103.138.123:80, 145.166.210.239:10017}[20%]&lt;BR/&gt;{206.103.138.123:80, 145.166.210.239:10018}[20%]&lt;BR/&gt;{206.103.138.123:80, 145.166.210.239:10019}[20%]&lt;BR/&gt;{206.103.138.123:80, 145.166.210.239:10020}[20%]&lt;BR/&gt;{206.103.138.123:80, 145.166.210.239:10021}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10021: (10%)&lt;BR/&gt; 10020: (10%)&lt;BR/&gt; 10019: (10%)&lt;BR/&gt; 10018: (10%)&gt;];
}
343--344[label="1;5pkt 5fpkt"];
343--1987[label="1;5pkt 5fpkt"];
343--2103[label="1;5pkt 5fpkt"];
344--1987[label="1;5pkt 5fpkt"];
344--2103[label="1;5pkt 5fpkt"];
1987--2103[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.210.239" dst_port="10021" src_ip="206.103.138.123" src_port="80"/>
      <filter dst_ip="145.166.210.239" dst_port="10020" src_ip="206.103.138.123" src_port="80"/>
      <filter dst_ip="145.166.210.239" dst_port="10019" src_ip="206.103.138.123" src_port="80"/>
      <filter dst_ip="145.166.210.239" dst_port="10018" src_ip="206.103.138.123" src_port="80"/>
      <filter dst_ip="145.166.210.239" dst_port="10017" src_ip="206.103.138.123" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
352[label="166.55.75.94;d;3pkt 3fpkt", shape=diamond, color=yellow];
353[label="210.160.93.5;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.160.93.5:21, 166.55.75.94:2379}[33.3333%]&lt;BR/&gt;{210.160.93.5:1097, 166.55.75.94:2380}[33.3333%]&lt;BR/&gt;{210.160.93.5:1098, 166.55.75.94:2402}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2402: (16.6667%)&lt;BR/&gt; 2380: (16.6667%)&lt;BR/&gt; 2379: (16.6667%)&lt;BR/&gt; 1098: (16.6667%)&lt;BR/&gt; 1097: (16.6667%)&gt;];
}
352--353[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.75.94" dst_port="2402" src_ip="210.160.93.5" src_port="1098"/>
      <filter dst_ip="166.55.75.94" dst_port="2380" src_ip="210.160.93.5" src_port="1097"/>
      <filter dst_ip="166.55.75.94" dst_port="2379" src_ip="210.160.93.5" src_port="21"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.888426,1.57451,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
9[label="60.50.10.56s;4pkt 4fpkt", shape=rectangle, color=red];
1622[label="60.50.10.56;s;25pkt 25fpkt", shape=diamond, color=yellow];
2583[label="60.50.10.56;32pkt 32fpkt", shape=pentagon, color=darkviolet];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.50.10.56:80, 149.206.200.107:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3373: (2.45902%)&lt;BR/&gt; 3116: (2.45902%)&lt;BR/&gt; 3109: (2.45902%)&lt;BR/&gt; 3384: (1.63934%)&gt;];
}
9--359[label="0.75;3pkt 3fpkt"];
9--1622[label="0.75;3pkt 3fpkt"];
9--2583[label="1;4pkt 4fpkt"];
1622--2583[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.200.107" src_ip="60.50.10.56" src_port="80"/>
    </slice>
    <from sec="1071205924" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.942883,1.628,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
74[label="201.152.208.5s;1pkt 1fpkt", shape=rectangle, color=red];
392[label="200.180.4.147;d;3pkt 3fpkt", shape=diamond, color=yellow];
393[label="217.67.104.5;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.67.104.5:61491, 200.180.4.147:21}[33.3333%]&lt;BR/&gt;{217.67.104.5:61664, 200.180.4.147:20}[33.3333%]&lt;BR/&gt;{217.67.104.5:61669, 200.180.4.147:20}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (35.7143%)&lt;BR/&gt; 61664: (21.4286%)&lt;BR/&gt; 61669: (14.2857%)&lt;BR/&gt; 61491: (14.2857%)&lt;BR/&gt; 21: (14.2857%)&gt;];
}
74--392[label="1;1pkt 1fpkt"];
74--393[label="1;1pkt 1fpkt"];
392--393[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.180.4.147" dst_port="20" src_ip="217.67.104.5" src_port="61669"/>
      <filter dst_ip="200.180.4.147" dst_port="20" src_ip="217.67.104.5" src_port="61664"/>
      <filter dst_ip="200.180.4.147" dst_port="21" src_ip="217.67.104.5" src_port="61491"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.888426,1.57451,010,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
150[label="199.173.110.167s;7858pkt 7858fpkt", shape=rectangle, color=red];
400[label="199.173.110.167;s;8939pkt 8939fpkt", shape=diamond, color=yellow];
3331[label="199.173.110.167;9545pkt 9545fpkt", shape=pentagon, color=darkviolet];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.173.110.167:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4171: (0.0151849%)&lt;BR/&gt; 4161: (0.0151849%)&lt;BR/&gt; 4160: (0.0151849%)&lt;BR/&gt; 4159: (0.0151849%)&gt;];
}
150--400[label="0.933571;7336pkt 7336fpkt"];
150--2106[label="0.0656656;516pkt 516fpkt"];
150--2111[label="0.0656656;516pkt 516fpkt"];
150--2125[label="0.0656656;516pkt 516fpkt"];
150--2131[label="0.0656656;516pkt 516fpkt"];
150--3331[label="1;7858pkt 7858fpkt"];
400--2106[label="0.0577246;516pkt 516fpkt"];
400--2111[label="0.0577246;516pkt 516fpkt"];
400--2125[label="0.0577246;516pkt 516fpkt"];
400--2131[label="0.0577246;516pkt 516fpkt"];
400--3331[label="1;8939pkt 8939fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="199.173.110.167"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.942883,1.628,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
38[label="78.9.67.200s;1pkt 1fpkt", shape=rectangle, color=red];
419[label="78.9.67.200;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.9.67.200:6881, 149.207.217.197:3782}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 3782: (50%)&gt;];
}
38--289[label="1;1pkt 1fpkt"];
38--419[label="1;1pkt 1fpkt"];
38--1644[label="1;1pkt 1fpkt"];
38--2061[label="1;1pkt 1fpkt"];
419--1644[label="1;1pkt 1fpkt"];
419--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="3782" src_ip="78.9.67.200" src_port="6881"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
433[label="218.91.143.209;d;1pkt 1fpkt", shape=diamond, color=yellow];
723[label="131.233.21.39;s;2pkt 2fpkt", shape=diamond, color=yellow];
2456[label="131.233.21.39;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4086[label="131.233.21.39;2pkt 2fpkt", shape=invtriangle, color=brown];
4961[label="131.233.21.39;2pkt 2fpkt", shape=invhouse, color=bisque];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.21.39:0, 218.38.130.68:0}[50%]&lt;BR/&gt;{131.233.21.39:35285, 218.91.143.209:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (44.4444%)&lt;BR/&gt; 35285: (27.7778%)&lt;BR/&gt; 80: (27.7778%)&gt;];
}
433--723[label="1;1pkt 1fpkt"];
433--2105[label="1;1pkt 1fpkt"];
433--2107[label="1;1pkt 1fpkt"];
433--2456[label="1;1pkt 1fpkt"];
433--4086[label="1;1pkt 1fpkt"];
433--4961[label="1;1pkt 1fpkt"];
723--2105[label="0.5;1pkt 1fpkt"];
723--2107[label="0.5;1pkt 1fpkt"];
723--2456[label="1;2pkt 2fpkt"];
723--4086[label="1;2pkt 2fpkt"];
723--4961[label="1;2pkt 2fpkt"];
2456--4086[label="1;2pkt 2fpkt"];
2456--4961[label="1;2pkt 2fpkt"];
4086--4961[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="218.91.143.209" dst_port="80" src_ip="131.233.21.39" src_port="35285"/>
      <filter dst_ip="218.38.130.68" src_ip="131.233.21.39"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
133[label="101.150.118.20s;9494pkt 9494fpkt", shape=rectangle, color=red];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.150.118.20:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3591: (0.0315989%)&lt;BR/&gt; 3590: (0.0315989%)&lt;BR/&gt; 3589: (0.0315989%)&lt;BR/&gt; 3587: (0.0315989%)&gt;];
}
133--446[label="0.973673;8802pkt 8802fpkt"];
133--1727[label="0.973673;8802pkt 8802fpkt"];
133--2106[label="0.0543501;516pkt 516fpkt"];
133--2111[label="0.0552981;525pkt 525fpkt"];
133--2125[label="0.0552981;525pkt 525fpkt"];
133--2131[label="0.0552981;525pkt 525fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="101.150.118.20"/>
    </slice>
    <from sec="1071205223" usec="0"/>
    <to sec="1071206091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
479[label="57.98.196.163;s;23pkt 23fpkt", shape=diamond, color=yellow];
490[label="149.206.51.202;d;18pkt 18fpkt", shape=diamond, color=yellow];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.98.196.163:80, 149.206.51.202:*}[78.2609%]&lt;BR/&gt;{57.98.196.163:80, 149.206.5.118:*}[21.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2686: (2.43902%)&lt;BR/&gt; 2685: (2.43902%)&lt;BR/&gt; 2684: (2.43902%)&lt;BR/&gt; 2683: (2.43902%)&gt;];
}
479--490[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.51.202" src_ip="57.98.196.163" src_port="80"/>
      <filter dst_ip="149.206.5.118" src_ip="57.98.196.163" src_port="80"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071205366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="10.131.25.180"/>
      <from sec="1071205218" usec="0"/>
      <to sec="1071206029" usec="0"/>
    </slice>
    <from sec="1071205218" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
507[label="131.233.218.122;s;155pkt 155fpkt", shape=diamond, color=yellow];
513[label="60.36.64.181;d;148pkt 148fpkt", shape=diamond, color=yellow];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.218.122:*, 60.36.64.181:80}[95.4839%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.835%)&lt;BR/&gt; 1614: (0.330033%)&lt;BR/&gt; 1613: (0.330033%)&lt;BR/&gt; 1612: (0.330033%)&lt;BR/&gt; 1611: (0.330033%)&gt;];
}
507--513[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_ip="60.36.64.181" dst_port="80" src_ip="131.233.218.122"/>
    </slice>
    <from sec="1071205240" usec="0"/>
    <to sec="1071205460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
265[label="201.118.239.12;d;1433pkt 1433fpkt", shape=diamond, color=yellow];
346[label="201.118.220.90;d;123pkt 123fpkt", shape=diamond, color=yellow];
532[label="57.216.80.227;s;61pkt 61fpkt", shape=diamond, color=yellow];
578[label="57.216.90.59;s;328pkt 328fpkt", shape=diamond, color=yellow];
752[label="59.26.105.7;s;56pkt 56fpkt", shape=diamond, color=yellow];
756[label="216.16.177.40;s;72pkt 72fpkt", shape=diamond, color=yellow];
757[label="149.206.251.106;d;58pkt 58fpkt", shape=diamond, color=yellow];
792[label="149.206.240.200;d;30pkt 30fpkt", shape=diamond, color=yellow];
843[label="201.118.239.196;d;1783pkt 1783fpkt", shape=diamond, color=yellow];
897[label="57.190.250.198;s;293pkt 293fpkt", shape=diamond, color=yellow];
905[label="216.187.196.2;s;39pkt 39fpkt", shape=diamond, color=yellow];
912[label="216.216.134.113;s;277pkt 277fpkt", shape=diamond, color=yellow];
915[label="57.216.80.138;s;127pkt 127fpkt", shape=diamond, color=yellow];
921[label="216.187.199.71;s;19pkt 19fpkt", shape=diamond, color=yellow];
1015[label="209.161.21.172;s;138pkt 138fpkt", shape=diamond, color=yellow];
1230[label="57.190.252.178;s;111pkt 111fpkt", shape=diamond, color=yellow];
1235[label="57.190.252.187;s;137pkt 137fpkt", shape=diamond, color=yellow];
1255[label="149.207.98.233;d;91pkt 91fpkt", shape=diamond, color=yellow];
1392[label="207.3.160.148;s;134pkt 134fpkt", shape=diamond, color=yellow];
1530[label="216.115.149.146;s;141pkt 141fpkt", shape=diamond, color=yellow];
1546[label="57.190.252.185;s;91pkt 91fpkt", shape=diamond, color=yellow];
1595[label="216.115.153.140;s;17pkt 17fpkt", shape=diamond, color=yellow];
1744[label="149.206.240.200;d;30pkt 30fpkt", shape=hexagon, color=black];
1801[label="57.190.250.198;s;293pkt 293fpkt", shape=hexagon, color=black];
1880[label="57.216.80.227;s;42pkt 42fpkt", shape=hexagon, color=black];
1986[label="201.118.239.12;d;1297pkt 1297fpkt", shape=hexagon, color=black];
2145[label="204.196.38.1;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2199[label="59.26.105.7;56pkt 56fpkt", shape=pentagon, color=darkviolet];
2240[label="57.216.81.12;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2256[label="77.118.246.15;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2355[label="57.216.80.28;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2389[label="57.216.80.32;39pkt 39fpkt", shape=pentagon, color=darkviolet];
2395[label="216.16.177.32;81pkt 81fpkt", shape=pentagon, color=darkviolet];
2473[label="57.216.80.41;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2486[label="57.216.80.43;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2506[label="57.190.255.45;76pkt 76fpkt", shape=pentagon, color=darkviolet];
2612[label="57.216.90.59;361pkt 361fpkt", shape=pentagon, color=darkviolet];
2685[label="205.1.44.69;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2771[label="57.190.253.81;87pkt 87fpkt", shape=pentagon, color=darkviolet];
2782[label="57.190.253.82;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2898[label="209.113.73.99;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2990[label="216.216.134.113;290pkt 290fpkt", shape=pentagon, color=darkviolet];
3076[label="216.187.203.128;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3139[label="57.223.82.137;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3144[label="216.141.20.138;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3158[label="216.115.153.140;38pkt 38fpkt", shape=pentagon, color=darkviolet];
3177[label="201.153.88.144;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3182[label="209.160.204.145;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3190[label="216.115.149.146;148pkt 148fpkt", shape=pentagon, color=darkviolet];
3215[label="162.129.125.149;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3236[label="216.142.2.152;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3307[label="207.3.160.162;79pkt 79fpkt", shape=pentagon, color=darkviolet];
3385[label="58.255.170.174;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3402[label="57.190.252.176;71pkt 71fpkt", shape=pentagon, color=darkviolet];
3425[label="57.190.252.178;136pkt 136fpkt", shape=pentagon, color=darkviolet];
3433[label="205.87.50.180;51pkt 51fpkt", shape=pentagon, color=darkviolet];
3452[label="216.129.121.183;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3475[label="57.190.252.186;88pkt 88fpkt", shape=pentagon, color=darkviolet];
3605[label="77.55.176.208;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3626[label="77.55.162.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3739[label="162.129.125.225;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3797[label="162.129.125.235;42pkt 42fpkt", shape=pentagon, color=darkviolet];
3891[label="208.184.221.254;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3906[label="204.196.38.1;4pkt 4fpkt", shape=invtriangle, color=brown];
3944[label="59.26.105.7;56pkt 56fpkt", shape=invtriangle, color=brown];
4031[label="57.216.80.28;12pkt 12fpkt", shape=invtriangle, color=brown];
4051[label="57.216.80.32;38pkt 38fpkt", shape=invtriangle, color=brown];
4054[label="216.16.177.32;80pkt 80fpkt", shape=invtriangle, color=brown];
4094[label="57.216.80.41;13pkt 13fpkt", shape=invtriangle, color=brown];
4103[label="57.216.80.43;12pkt 12fpkt", shape=invtriangle, color=brown];
4117[label="57.190.255.45;75pkt 75fpkt", shape=invtriangle, color=brown];
4176[label="57.216.90.59;360pkt 360fpkt", shape=invtriangle, color=brown];
4261[label="57.190.253.81;87pkt 87fpkt", shape=invtriangle, color=brown];
4267[label="57.190.253.82;14pkt 14fpkt", shape=invtriangle, color=brown];
4367[label="216.216.134.113;290pkt 290fpkt", shape=invtriangle, color=brown];
4446[label="216.141.20.138;8pkt 8fpkt", shape=invtriangle, color=brown];
4453[label="216.115.153.140;38pkt 38fpkt", shape=invtriangle, color=brown];
4464[label="216.115.149.146;148pkt 148fpkt", shape=invtriangle, color=brown];
4488[label="216.142.2.152;31pkt 31fpkt", shape=invtriangle, color=brown];
4534[label="207.3.160.162;79pkt 79fpkt", shape=invtriangle, color=brown];
4577[label="58.255.170.174;25pkt 25fpkt", shape=invtriangle, color=brown];
4587[label="57.190.252.176;71pkt 71fpkt", shape=invtriangle, color=brown];
4598[label="57.190.252.178;136pkt 136fpkt", shape=invtriangle, color=brown];
4604[label="205.87.50.180;51pkt 51fpkt", shape=invtriangle, color=brown];
4613[label="216.129.121.183;4pkt 4fpkt", shape=invtriangle, color=brown];
4624[label="57.190.252.186;88pkt 88fpkt", shape=invtriangle, color=brown];
4694[label="77.55.176.208;24pkt 24fpkt", shape=invtriangle, color=brown];
4705[label="77.55.162.211;1pkt 1fpkt", shape=invtriangle, color=brown];
4718[label="208.184.221.213;30pkt 30fpkt", shape=invtriangle, color=brown];
4772[label="162.129.125.225;12pkt 12fpkt", shape=invtriangle, color=brown];
4809[label="162.129.125.235;42pkt 42fpkt", shape=invtriangle, color=brown];
4862[label="208.184.221.254;2pkt 2fpkt", shape=invtriangle, color=brown];
4868[label="204.196.38.1;4pkt 4fpkt", shape=invhouse, color=bisque];
4889[label="59.26.105.7;56pkt 56fpkt", shape=invhouse, color=bisque];
4936[label="57.216.80.28;12pkt 12fpkt", shape=invhouse, color=bisque];
4947[label="57.216.80.32;39pkt 39fpkt", shape=invhouse, color=bisque];
4970[label="57.216.80.43;13pkt 13fpkt", shape=invhouse, color=bisque];
4979[label="57.190.255.45;75pkt 75fpkt", shape=invhouse, color=bisque];
5008[label="57.216.90.59;361pkt 361fpkt", shape=invhouse, color=bisque];
5129[label="216.115.153.140;38pkt 38fpkt", shape=invhouse, color=bisque];
5134[label="216.115.149.146;148pkt 148fpkt", shape=invhouse, color=bisque];
5168[label="207.3.160.162;79pkt 79fpkt", shape=invhouse, color=bisque];
5194[label="57.190.252.176;71pkt 71fpkt", shape=invhouse, color=bisque];
5200[label="57.190.252.178;136pkt 136fpkt", shape=invhouse, color=bisque];
5210[label="57.190.252.186;88pkt 88fpkt", shape=invhouse, color=bisque];
5251[label="77.55.176.208;24pkt 24fpkt", shape=invhouse, color=bisque];
5255[label="77.55.162.211;1pkt 1fpkt", shape=invhouse, color=bisque];
5262[label="208.184.221.213;30pkt 30fpkt", shape=invhouse, color=bisque];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 201.118.239.196:0}[27.3308%]&lt;BR/&gt;{*:80, 201.118.239.12:*}[23.4147%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.9832%)&lt;BR/&gt; 0: (14.8719%)&lt;BR/&gt; 443: (0.547911%)&lt;BR/&gt; 1938: (0.0576749%)&lt;BR/&gt; 1638: (0.045316%)&gt;];
}
265--306[label="0.00195122;2pkt 2fpkt"];
265--361[label="0.00159744;1pkt 1fpkt"];
265--532[label="0.180328;11pkt 11fpkt"];
265--578[label="0.0365854;12pkt 12fpkt"];
265--617[label="0.0121212;2pkt 2fpkt"];
265--687[label="0.00653595;2pkt 2fpkt"];
265--689[label="0.005;1pkt 1fpkt"];
265--690[label="0.000697837;1pkt 1fpkt"];
265--717[label="0.00518135;1pkt 1fpkt"];
265--752[label="0.0357143;2pkt 2fpkt"];
265--755[label="0.0153061;3pkt 3fpkt"];
265--787[label="0.0035461;1pkt 1fpkt"];
265--790[label="0.00793651;2pkt 2fpkt"];
265--897[label="0.129693;38pkt 38fpkt"];
265--905[label="0.512821;20pkt 20fpkt"];
265--912[label="0.0252708;7pkt 7fpkt"];
265--915[label="0.0314961;4pkt 4fpkt"];
265--1015[label="0.173913;24pkt 24fpkt"];
265--1056[label="0.000697837;1pkt 1fpkt"];
265--1094[label="0.603175;76pkt 76fpkt"];
265--1230[label="0.477477;53pkt 53fpkt"];
265--1235[label="0.20438;28pkt 28fpkt"];
265--1266[label="0.639344;78pkt 78fpkt"];
265--1378[label="0.298387;37pkt 37fpkt"];
265--1392[label="0.0447761;6pkt 6fpkt"];
265--1474[label="0.887755;87pkt 87fpkt"];
265--1530[label="0.0567376;8pkt 8fpkt"];
265--1546[label="0.252747;23pkt 23fpkt"];
265--1574[label="0.0113636;1pkt 1fpkt"];
265--1595[label="0.588235;10pkt 10fpkt"];
265--1721[label="0.0075188;1pkt 1fpkt"];
265--1735[label="0.0253165;2pkt 2fpkt"];
265--1801[label="0.129693;38pkt 38fpkt"];
265--1804[label="0.0182927;3pkt 3fpkt"];
265--1880[label="0.142857;6pkt 6fpkt"];
265--1986[label="1;1297pkt 1297fpkt"];
265--2034[label="0.0447761;6pkt 6fpkt"];
265--2103[label="0.0530356;76pkt 76fpkt"];
265--2145[label="0.4;2pkt 2fpkt"];
265--2155[label="0.00332226;1pkt 1fpkt"];
265--2159[label="0.47619;20pkt 20fpkt"];
265--2199[label="0.0357143;2pkt 2fpkt"];
265--2240[label="0.0833333;1pkt 1fpkt"];
265--2355[label="0.0909091;1pkt 1fpkt"];
265--2389[label="0.025641;1pkt 1fpkt"];
265--2395[label="0.0493827;4pkt 4fpkt"];
265--2473[label="0.142857;2pkt 2fpkt"];
265--2486[label="0.307692;4pkt 4fpkt"];
265--2506[label="0.0394737;3pkt 3fpkt"];
265--2612[label="0.033241;12pkt 12fpkt"];
265--2771[label="0.0689655;6pkt 6fpkt"];
265--2782[label="0.214286;3pkt 3fpkt"];
265--2990[label="0.0241379;7pkt 7fpkt"];
265--3076[label="0.947368;18pkt 18fpkt"];
265--3137[label="0.00490196;1pkt 1fpkt"];
265--3139[label="0.5;2pkt 2fpkt"];
265--3144[label="0.125;1pkt 1fpkt"];
265--3158[label="0.263158;10pkt 10fpkt"];
265--3190[label="0.0540541;8pkt 8fpkt"];
265--3205[label="0.0384615;6pkt 6fpkt"];
265--3210[label="0.871429;61pkt 61fpkt"];
265--3215[label="0.0714286;2pkt 2fpkt"];
265--3236[label="0.0322581;1pkt 1fpkt"];
265--3307[label="0.0506329;4pkt 4fpkt"];
265--3364[label="0.0144928;3pkt 3fpkt"];
265--3367[label="0.164384;24pkt 24fpkt"];
265--3385[label="1;25pkt 25fpkt"];
265--3402[label="0.774648;55pkt 55fpkt"];
265--3404[label="0.000697837;1pkt 1fpkt"];
265--3425[label="0.389706;53pkt 53fpkt"];
265--3433[label="0.0196078;1pkt 1fpkt"];
265--3475[label="0.284091;25pkt 25fpkt"];
265--3605[label="0.0833333;2pkt 2fpkt"];
265--3613[label="0.00150376;1pkt 1fpkt"];
265--3626[label="1;1pkt 1fpkt"];
265--3722[label="0.00177305;2pkt 2fpkt"];
265--3739[label="0.166667;2pkt 2fpkt"];
265--3797[label="0.047619;2pkt 2fpkt"];
265--3835[label="0.00473934;1pkt 1fpkt"];
265--3906[label="0.5;2pkt 2fpkt"];
265--3913[label="0.00333333;1pkt 1fpkt"];
265--3944[label="0.0357143;2pkt 2fpkt"];
265--4031[label="0.0833333;1pkt 1fpkt"];
265--4051[label="0.0263158;1pkt 1fpkt"];
265--4054[label="0.05;4pkt 4fpkt"];
265--4094[label="0.153846;2pkt 2fpkt"];
265--4103[label="0.333333;4pkt 4fpkt"];
265--4117[label="0.04;3pkt 3fpkt"];
265--4176[label="0.0333333;12pkt 12fpkt"];
265--4261[label="0.0689655;6pkt 6fpkt"];
265--4267[label="0.214286;3pkt 3fpkt"];
265--4367[label="0.0241379;7pkt 7fpkt"];
265--4441[label="0.00490196;1pkt 1fpkt"];
265--4446[label="0.125;1pkt 1fpkt"];
265--4453[label="0.263158;10pkt 10fpkt"];
265--4464[label="0.0540541;8pkt 8fpkt"];
265--4471[label="0.871429;61pkt 61fpkt"];
265--4488[label="0.0322581;1pkt 1fpkt"];
265--4534[label="0.0506329;4pkt 4fpkt"];
265--4577[label="1;25pkt 25fpkt"];
265--4587[label="0.774648;55pkt 55fpkt"];
265--4598[label="0.389706;53pkt 53fpkt"];
265--4604[label="0.0196078;1pkt 1fpkt"];
265--4624[label="0.284091;25pkt 25fpkt"];
265--4694[label="0.0833333;2pkt 2fpkt"];
265--4698[label="0.00150376;1pkt 1fpkt"];
265--4705[label="1;1pkt 1fpkt"];
265--4772[label="0.166667;2pkt 2fpkt"];
265--4809[label="0.047619;2pkt 2fpkt"];
265--4832[label="0.00473934;1pkt 1fpkt"];
265--4868[label="0.5;2pkt 2fpkt"];
265--4871[label="0.00333333;1pkt 1fpkt"];
265--4889[label="0.0357143;2pkt 2fpkt"];
265--4936[label="0.0833333;1pkt 1fpkt"];
265--4947[label="0.025641;1pkt 1fpkt"];
265--4970[label="0.307692;4pkt 4fpkt"];
265--4979[label="0.04;3pkt 3fpkt"];
265--5008[label="0.033241;12pkt 12fpkt"];
265--5122[label="0.00490196;1pkt 1fpkt"];
265--5129[label="0.263158;10pkt 10fpkt"];
265--5134[label="0.0540541;8pkt 8fpkt"];
265--5168[label="0.0506329;4pkt 4fpkt"];
265--5194[label="0.774648;55pkt 55fpkt"];
265--5200[label="0.389706;53pkt 53fpkt"];
265--5210[label="0.284091;25pkt 25fpkt"];
265--5251[label="0.0833333;2pkt 2fpkt"];
265--5255[label="1;1pkt 1fpkt"];
265--5318[label="0.00473934;1pkt 1fpkt"];
346--711[label="0.00813008;1pkt 1fpkt"];
346--756[label="0.0138889;1pkt 1fpkt"];
346--1521[label="0.0333333;1pkt 1fpkt"];
346--2281[label="0.125;1pkt 1fpkt"];
346--2342[label="0.1;1pkt 1fpkt"];
346--2355[label="0.0909091;1pkt 1fpkt"];
346--2372[label="0.111111;1pkt 1fpkt"];
346--2731[label="0.00813008;1pkt 1fpkt"];
346--3644[label="0.0333333;1pkt 1fpkt"];
346--3653[label="0.142857;1pkt 1fpkt"];
346--3891[label="0.5;1pkt 1fpkt"];
346--4031[label="0.0833333;1pkt 1fpkt"];
346--4718[label="0.0333333;1pkt 1fpkt"];
346--4721[label="0.142857;1pkt 1fpkt"];
346--4862[label="0.5;1pkt 1fpkt"];
346--4936[label="0.0833333;1pkt 1fpkt"];
346--5262[label="0.0333333;1pkt 1fpkt"];
346--5264[label="0.142857;1pkt 1fpkt"];
532--843[label="0.0327869;2pkt 2fpkt"];
532--1254[label="0.0655738;4pkt 4fpkt"];
532--1656[label="0.0163934;1pkt 1fpkt"];
532--1880[label="1;42pkt 42fpkt"];
532--1937[label="0.0819672;5pkt 5fpkt"];
532--1986[label="0.180328;11pkt 11fpkt"];
532--2065[label="0.0163934;1pkt 1fpkt"];
578--1270[label="0.0230769;3pkt 3fpkt"];
578--1645[label="0.00609756;2pkt 2fpkt"];
578--1937[label="0.176829;58pkt 58fpkt"];
578--1986[label="0.0365854;12pkt 12fpkt"];
578--2024[label="0.0213415;7pkt 7fpkt"];
578--2102[label="0.00304878;1pkt 1fpkt"];
578--2103[label="0.0579268;19pkt 19fpkt"];
578--2122[label="0.00304878;1pkt 1fpkt"];
578--2612[label="1;328pkt 328fpkt"];
578--4176[label="0.996951;327pkt 327fpkt"];
578--5008[label="1;328pkt 328fpkt"];
752--1025[label="0.107143;6pkt 6fpkt"];
752--1399[label="0.304348;7pkt 7fpkt"];
752--2024[label="0.107143;6pkt 6fpkt"];
752--2103[label="0.0178571;1pkt 1fpkt"];
752--2199[label="1;56pkt 56fpkt"];
752--3944[label="1;56pkt 56fpkt"];
752--4889[label="1;56pkt 56fpkt"];
756--786[label="0.166667;12pkt 12fpkt"];
756--808[label="0.0277778;2pkt 2fpkt"];
756--1407[label="0.111111;1pkt 1fpkt"];
756--1410[label="0.644444;29pkt 29fpkt"];
756--1740[label="0.166667;12pkt 12fpkt"];
756--1819[label="0.0277778;2pkt 2fpkt"];
756--2103[label="0.0694444;5pkt 5fpkt"];
757--912[label="0.0344828;2pkt 2fpkt"];
757--1721[label="0.0344828;2pkt 2fpkt"];
757--2420[label="0.333333;2pkt 2fpkt"];
757--2497[label="0.111111;1pkt 1fpkt"];
757--2898[label="1;3pkt 3fpkt"];
757--2990[label="0.0344828;2pkt 2fpkt"];
757--3137[label="0.0344828;2pkt 2fpkt"];
757--4067[label="0.285714;2pkt 2fpkt"];
757--4110[label="0.111111;1pkt 1fpkt"];
757--4367[label="0.0344828;2pkt 2fpkt"];
757--4441[label="0.0344828;2pkt 2fpkt"];
757--4974[label="0.125;1pkt 1fpkt"];
757--5122[label="0.0344828;2pkt 2fpkt"];
792--1744[label="1;30pkt 30fpkt"];
792--3236[label="0.0333333;1pkt 1fpkt"];
792--3452[label="1;4pkt 4fpkt"];
792--3722[label="0.266667;8pkt 8fpkt"];
792--3881[label="0.0869565;2pkt 2fpkt"];
792--4488[label="0.0333333;1pkt 1fpkt"];
792--4613[label="1;4pkt 4fpkt"];
843--847[label="0.0100503;2pkt 2fpkt"];
843--851[label="0.114286;8pkt 8fpkt"];
843--1009[label="0.010989;1pkt 1fpkt"];
843--1018[label="0.0550459;6pkt 6fpkt"];
843--1876[label="0.0100503;2pkt 2fpkt"];
843--1880[label="0.047619;2pkt 2fpkt"];
843--2103[label="0.0011217;2pkt 2fpkt"];
843--2685[label="0.333333;1pkt 1fpkt"];
843--2730[label="0.0666667;1pkt 1fpkt"];
843--2782[label="0.0714286;1pkt 1fpkt"];
843--2952[label="0.0898876;8pkt 8fpkt"];
843--3108[label="0.0232558;1pkt 1fpkt"];
843--3117[label="0.0465116;6pkt 6fpkt"];
843--3182[label="0.736842;14pkt 14fpkt"];
843--3466[label="0.166667;1pkt 1fpkt"];
843--3642[label="0.125;1pkt 1fpkt"];
843--3722[label="0.00443262;5pkt 5fpkt"];
843--4240[label="0.0666667;1pkt 1fpkt"];
843--4267[label="0.0714286;1pkt 1fpkt"];
843--4431[label="0.0465116;6pkt 6fpkt"];
843--4619[label="0.166667;1pkt 1fpkt"];
843--4716[label="0.125;1pkt 1fpkt"];
843--5117[label="0.0465116;6pkt 6fpkt"];
843--5261[label="0.125;1pkt 1fpkt"];
897--1645[label="0.00682594;2pkt 2fpkt"];
897--1801[label="1;293pkt 293fpkt"];
897--1937[label="0.180887;53pkt 53fpkt"];
897--1986[label="0.129693;38pkt 38fpkt"];
897--2024[label="0.0102389;3pkt 3fpkt"];
897--2103[label="0.0546075;16pkt 16fpkt"];
905--1937[label="0.0512821;2pkt 2fpkt"];
905--1986[label="0.512821;20pkt 20fpkt"];
905--2103[label="0.0512821;2pkt 2fpkt"];
905--2159[label="1;39pkt 39fpkt"];
912--926[label="0.05;2pkt 2fpkt"];
912--1165[label="0.0333333;1pkt 1fpkt"];
912--1986[label="0.0252708;7pkt 7fpkt"];
912--2102[label="0.00722022;2pkt 2fpkt"];
912--2103[label="0.0216606;6pkt 6fpkt"];
912--2122[label="0.00722022;2pkt 2fpkt"];
912--2990[label="1;277pkt 277fpkt"];
912--4367[label="1;277pkt 277fpkt"];
915--967[label="0.015748;2pkt 2fpkt"];
915--1937[label="0.212598;27pkt 27fpkt"];
915--1986[label="0.023622;3pkt 3fpkt"];
915--2024[label="0.00787402;1pkt 1fpkt"];
915--2103[label="0.0787402;10pkt 10fpkt"];
921--1816[label="1;14pkt 14fpkt"];
921--1937[label="0.0526316;1pkt 1fpkt"];
921--2103[label="0.157895;3pkt 3fpkt"];
1015--1022[label="0.0217391;3pkt 3fpkt"];
1015--1293[label="0.133333;4pkt 4fpkt"];
1015--1937[label="0.115942;16pkt 16fpkt"];
1015--1966[label="0.08;2pkt 2fpkt"];
1015--1986[label="0.173913;24pkt 24fpkt"];
1015--2103[label="0.057971;8pkt 8fpkt"];
1015--3367[label="1;138pkt 138fpkt"];
1230--1937[label="0.126126;14pkt 14fpkt"];
1230--1986[label="0.477477;53pkt 53fpkt"];
1230--2103[label="0.0540541;6pkt 6fpkt"];
1230--3425[label="0.990991;110pkt 110fpkt"];
1230--4598[label="0.990991;110pkt 110fpkt"];
1230--5200[label="0.990991;110pkt 110fpkt"];
1235--1937[label="0.0948905;13pkt 13fpkt"];
1235--1986[label="0.138686;19pkt 19fpkt"];
1235--2103[label="0.0510949;7pkt 7fpkt"];
1255--1298[label="0.0697674;3pkt 3fpkt"];
1255--1919[label="0.021978;2pkt 2fpkt"];
1255--2103[label="0.043956;4pkt 4fpkt"];
1255--2256[label="1;3pkt 3fpkt"];
1255--2395[label="0.0864198;7pkt 7fpkt"];
1255--2675[label="0.0144928;1pkt 1fpkt"];
1255--2795[label="0.06;3pkt 3fpkt"];
1255--2916[label="0.021978;2pkt 2fpkt"];
1255--2993[label="0.010989;1pkt 1fpkt"];
1255--3177[label="1;12pkt 12fpkt"];
1255--3337[label="0.0549451;5pkt 5fpkt"];
1255--3364[label="0.010989;1pkt 1fpkt"];
1255--3525[label="0.181818;4pkt 4fpkt"];
1255--3678[label="0.021978;2pkt 2fpkt"];
1255--3712[label="0.25;5pkt 5fpkt"];
1255--4054[label="0.0875;7pkt 7fpkt"];
1255--4208[label="0.0144928;1pkt 1fpkt"];
1255--4273[label="0.06;3pkt 3fpkt"];
1255--4370[label="0.010989;1pkt 1fpkt"];
1255--4736[label="0.021978;2pkt 2fpkt"];
1255--4755[label="0.25;5pkt 5fpkt"];
1255--5092[label="0.010989;1pkt 1fpkt"];
1255--5224[label="0.2;4pkt 4fpkt"];
1392--1937[label="0.11194;15pkt 15fpkt"];
1392--1986[label="0.0447761;6pkt 6fpkt"];
1392--2034[label="1;134pkt 134fpkt"];
1392--2103[label="0.0298507;4pkt 4fpkt"];
1392--3205[label="1;134pkt 134fpkt"];
1530--1656[label="0.0283688;4pkt 4fpkt"];
1530--1937[label="0.219858;31pkt 31fpkt"];
1530--1986[label="0.035461;5pkt 5fpkt"];
1530--2024[label="0.0141844;2pkt 2fpkt"];
1530--2065[label="0.0212766;3pkt 3fpkt"];
1530--2103[label="0.0780142;11pkt 11fpkt"];
1530--3190[label="1;141pkt 141fpkt"];
1530--4464[label="1;141pkt 141fpkt"];
1530--5134[label="1;141pkt 141fpkt"];
1546--1937[label="0.153846;14pkt 14fpkt"];
1546--1986[label="0.230769;21pkt 21fpkt"];
1546--2103[label="0.021978;2pkt 2fpkt"];
1595--1937[label="0.176471;3pkt 3fpkt"];
1595--1986[label="0.588235;10pkt 10fpkt"];
1595--2103[label="0.235294;4pkt 4fpkt"];
1595--3158[label="1;17pkt 17fpkt"];
1595--4453[label="1;17pkt 17fpkt"];
1595--5129[label="1;17pkt 17fpkt"];
1744--3236[label="0.0333333;1pkt 1fpkt"];
1744--3452[label="1;4pkt 4fpkt"];
1744--3722[label="0.266667;8pkt 8fpkt"];
1744--3881[label="0.0869565;2pkt 2fpkt"];
1744--4488[label="0.0333333;1pkt 1fpkt"];
1744--4613[label="1;4pkt 4fpkt"];
1801--1937[label="0.180887;53pkt 53fpkt"];
1801--1986[label="0.129693;38pkt 38fpkt"];
1801--2024[label="0.0102389;3pkt 3fpkt"];
1801--2103[label="0.0546075;16pkt 16fpkt"];
1880--1937[label="0.0714286;3pkt 3fpkt"];
1880--1986[label="0.142857;6pkt 6fpkt"];
1880--2065[label="0.0238095;1pkt 1fpkt"];
1986--2034[label="0.0447761;6pkt 6fpkt"];
1986--2103[label="0.0585968;76pkt 76fpkt"];
1986--2145[label="0.4;2pkt 2fpkt"];
1986--2155[label="0.00332226;1pkt 1fpkt"];
1986--2159[label="0.47619;20pkt 20fpkt"];
1986--2240[label="0.0833333;1pkt 1fpkt"];
1986--2355[label="0.0909091;1pkt 1fpkt"];
1986--2389[label="0.025641;1pkt 1fpkt"];
1986--2395[label="0.0493827;4pkt 4fpkt"];
1986--2473[label="0.142857;2pkt 2fpkt"];
1986--2486[label="0.307692;4pkt 4fpkt"];
1986--2506[label="0.0394737;3pkt 3fpkt"];
1986--2612[label="0.033241;12pkt 12fpkt"];
1986--2771[label="0.0689655;6pkt 6fpkt"];
1986--2782[label="0.214286;3pkt 3fpkt"];
1986--2990[label="0.0241379;7pkt 7fpkt"];
1986--3076[label="0.789474;15pkt 15fpkt"];
1986--3137[label="0.00490196;1pkt 1fpkt"];
1986--3139[label="0.5;2pkt 2fpkt"];
1986--3144[label="0.125;1pkt 1fpkt"];
1986--3158[label="0.263158;10pkt 10fpkt"];
1986--3190[label="0.0337838;5pkt 5fpkt"];
1986--3205[label="0.0384615;6pkt 6fpkt"];
1986--3210[label="0.871429;61pkt 61fpkt"];
1986--3215[label="0.0714286;2pkt 2fpkt"];
1986--3236[label="0.0322581;1pkt 1fpkt"];
1986--3307[label="0.0253165;2pkt 2fpkt"];
1986--3364[label="0.0144928;3pkt 3fpkt"];
1986--3367[label="0.164384;24pkt 24fpkt"];
1986--3385[label="1;25pkt 25fpkt"];
1986--3402[label="0.774648;55pkt 55fpkt"];
1986--3425[label="0.389706;53pkt 53fpkt"];
1986--3475[label="0.227273;20pkt 20fpkt"];
1986--3605[label="0.0833333;2pkt 2fpkt"];
1986--3626[label="1;1pkt 1fpkt"];
1986--3722[label="0.000886525;1pkt 1fpkt"];
1986--3739[label="0.166667;2pkt 2fpkt"];
1986--3797[label="0.047619;2pkt 2fpkt"];
1986--3835[label="0.00473934;1pkt 1fpkt"];
1986--3906[label="0.5;2pkt 2fpkt"];
1986--3913[label="0.00333333;1pkt 1fpkt"];
1986--4031[label="0.0833333;1pkt 1fpkt"];
1986--4051[label="0.0263158;1pkt 1fpkt"];
1986--4054[label="0.05;4pkt 4fpkt"];
1986--4094[label="0.153846;2pkt 2fpkt"];
1986--4103[label="0.333333;4pkt 4fpkt"];
1986--4117[label="0.04;3pkt 3fpkt"];
1986--4176[label="0.0333333;12pkt 12fpkt"];
1986--4261[label="0.0689655;6pkt 6fpkt"];
1986--4267[label="0.214286;3pkt 3fpkt"];
1986--4367[label="0.0241379;7pkt 7fpkt"];
1986--4441[label="0.00490196;1pkt 1fpkt"];
1986--4446[label="0.125;1pkt 1fpkt"];
1986--4453[label="0.263158;10pkt 10fpkt"];
1986--4464[label="0.0337838;5pkt 5fpkt"];
1986--4471[label="0.871429;61pkt 61fpkt"];
1986--4488[label="0.0322581;1pkt 1fpkt"];
1986--4534[label="0.0253165;2pkt 2fpkt"];
1986--4577[label="1;25pkt 25fpkt"];
1986--4587[label="0.774648;55pkt 55fpkt"];
1986--4598[label="0.389706;53pkt 53fpkt"];
1986--4624[label="0.227273;20pkt 20fpkt"];
1986--4694[label="0.0833333;2pkt 2fpkt"];
1986--4705[label="1;1pkt 1fpkt"];
1986--4772[label="0.166667;2pkt 2fpkt"];
1986--4809[label="0.047619;2pkt 2fpkt"];
1986--4832[label="0.00473934;1pkt 1fpkt"];
1986--4868[label="0.5;2pkt 2fpkt"];
1986--4871[label="0.00333333;1pkt 1fpkt"];
1986--4936[label="0.0833333;1pkt 1fpkt"];
1986--4947[label="0.025641;1pkt 1fpkt"];
1986--4970[label="0.307692;4pkt 4fpkt"];
1986--4979[label="0.04;3pkt 3fpkt"];
1986--5008[label="0.033241;12pkt 12fpkt"];
1986--5122[label="0.00490196;1pkt 1fpkt"];
1986--5129[label="0.263158;10pkt 10fpkt"];
1986--5134[label="0.0337838;5pkt 5fpkt"];
1986--5168[label="0.0253165;2pkt 2fpkt"];
1986--5194[label="0.774648;55pkt 55fpkt"];
1986--5200[label="0.389706;53pkt 53fpkt"];
1986--5210[label="0.227273;20pkt 20fpkt"];
1986--5251[label="0.0833333;2pkt 2fpkt"];
1986--5255[label="1;1pkt 1fpkt"];
1986--5318[label="0.00473934;1pkt 1fpkt"];
2145--3906[label="1;4pkt 4fpkt"];
2145--4868[label="1;4pkt 4fpkt"];
2199--3944[label="1;56pkt 56fpkt"];
2199--4889[label="1;56pkt 56fpkt"];
2355--4031[label="1;11pkt 11fpkt"];
2355--4936[label="1;11pkt 11fpkt"];
2389--4051[label="1;38pkt 38fpkt"];
2389--4947[label="1;39pkt 39fpkt"];
2395--4054[label="1;80pkt 80fpkt"];
2473--4094[label="1;13pkt 13fpkt"];
2486--4103[label="1;12pkt 12fpkt"];
2486--4970[label="1;13pkt 13fpkt"];
2506--4117[label="1;75pkt 75fpkt"];
2506--4979[label="1;75pkt 75fpkt"];
2612--4176[label="1;360pkt 360fpkt"];
2612--5008[label="1;361pkt 361fpkt"];
2771--4261[label="1;87pkt 87fpkt"];
2782--4267[label="1;14pkt 14fpkt"];
2990--4367[label="1;290pkt 290fpkt"];
3144--4446[label="1;8pkt 8fpkt"];
3158--4453[label="1;38pkt 38fpkt"];
3158--5129[label="1;38pkt 38fpkt"];
3190--4464[label="1;148pkt 148fpkt"];
3190--5134[label="1;148pkt 148fpkt"];
3236--4488[label="1;31pkt 31fpkt"];
3307--4534[label="1;79pkt 79fpkt"];
3307--5168[label="1;79pkt 79fpkt"];
3385--4577[label="1;25pkt 25fpkt"];
3402--4587[label="1;71pkt 71fpkt"];
3402--5194[label="1;71pkt 71fpkt"];
3425--4598[label="1;136pkt 136fpkt"];
3425--5200[label="1;136pkt 136fpkt"];
3433--4604[label="1;51pkt 51fpkt"];
3452--4613[label="1;4pkt 4fpkt"];
3475--4624[label="1;88pkt 88fpkt"];
3475--5210[label="1;88pkt 88fpkt"];
3605--4694[label="1;24pkt 24fpkt"];
3605--5251[label="1;24pkt 24fpkt"];
3626--4705[label="1;1pkt 1fpkt"];
3626--5255[label="1;1pkt 1fpkt"];
3739--4772[label="1;12pkt 12fpkt"];
3797--4809[label="1;42pkt 42fpkt"];
3891--4862[label="1;2pkt 2fpkt"];
3906--4868[label="1;4pkt 4fpkt"];
3944--4889[label="1;56pkt 56fpkt"];
4031--4936[label="1;12pkt 12fpkt"];
4051--4947[label="1;38pkt 38fpkt"];
4103--4970[label="1;12pkt 12fpkt"];
4117--4979[label="1;75pkt 75fpkt"];
4176--5008[label="1;360pkt 360fpkt"];
4453--5129[label="1;38pkt 38fpkt"];
4464--5134[label="1;148pkt 148fpkt"];
4534--5168[label="1;79pkt 79fpkt"];
4587--5194[label="1;71pkt 71fpkt"];
4598--5200[label="1;136pkt 136fpkt"];
4624--5210[label="1;88pkt 88fpkt"];
4694--5251[label="1;24pkt 24fpkt"];
4705--5255[label="1;1pkt 1fpkt"];
4718--5262[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="201.118.239.12" src_port="80"/>
      <filter dst_ip="201.118.239.196"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
587[label="145.166.35.106;d;2pkt 2fpkt", shape=diamond, color=yellow];
2003[label="145.166.35.106;d;2pkt 2fpkt", shape=hexagon, color=black];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.232.72.156:80, 145.166.35.106:4675}[50%]&lt;BR/&gt;{58.232.72.156:6080, 145.166.35.106:4513}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6080: (25%)&lt;BR/&gt; 4675: (25%)&lt;BR/&gt; 4513: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
587--2003[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.35.106" dst_port="4513" src_ip="58.232.72.156" src_port="6080"/>
      <filter dst_ip="145.166.35.106" dst_port="4675" src_ip="58.232.72.156" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
552[label="60.36.25.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
553[label="131.233.21.31;s;1pkt 1fpkt", shape=diamond, color=yellow];
2377[label="131.233.21.31;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.21.31:49169, 60.36.25.89:8170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49169: (50%)&lt;BR/&gt; 8170: (50%)&gt;];
}
552--553[label="1;1pkt 1fpkt"];
552--2377[label="1;1pkt 1fpkt"];
553--2377[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="60.36.25.89" dst_port="8170" src_ip="131.233.21.31" src_port="49169"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
555[label="216.20.64.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.20.64.148:15004, 149.207.72.236:49158}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49158: (50%)&lt;BR/&gt; 15004: (50%)&gt;];
}
555--3203[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.72.236" dst_port="49158" src_ip="216.20.64.148" src_port="15004"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
567[label="145.166.218.105;d;3pkt 3fpkt", shape=diamond, color=yellow];
568[label="209.160.202.29;s;2pkt 2fpkt", shape=diamond, color=yellow];
2365[label="209.160.202.29;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4039[label="209.160.202.29;1pkt 1fpkt", shape=invtriangle, color=brown];
4940[label="209.160.202.29;2pkt 2fpkt", shape=invhouse, color=bisque];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.160.204.133:554, 145.166.218.105:49246}[33.3333%]&lt;BR/&gt;{209.160.202.29:16946, 145.166.218.105:6974}[33.3333%]&lt;BR/&gt;{209.160.202.29:554, 145.166.218.105:49247}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (30%)&lt;BR/&gt; 49247: (25%)&lt;BR/&gt; 16946: (20%)&lt;BR/&gt; 6974: (20%)&lt;BR/&gt; 49246: (5%)&gt;];
}
567--568[label="1;2pkt 2fpkt"];
567--2365[label="1;2pkt 2fpkt"];
567--4039[label="1;1pkt 1fpkt"];
567--4940[label="1;2pkt 2fpkt"];
568--2365[label="1;2pkt 2fpkt"];
568--4039[label="1;1pkt 1fpkt"];
568--4940[label="1;2pkt 2fpkt"];
2365--4039[label="1;1pkt 1fpkt"];
2365--4940[label="1;2pkt 2fpkt"];
4039--4940[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.218.105" dst_port="49247" src_ip="209.160.202.29" src_port="554"/>
      <filter dst_ip="145.166.218.105" dst_port="6974" src_ip="209.160.202.29" src_port="16946"/>
      <filter dst_ip="145.166.218.105" dst_port="49246" src_ip="209.160.204.133" src_port="554"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
570[label="201.118.242.74;s;2416pkt 2416fpkt", shape=diamond, color=yellow];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.118.242.74:0, *:0}[99.8758%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8758%)&lt;BR/&gt; 80: (0.0620861%)&lt;BR/&gt; 64243: (0.0206954%)&lt;BR/&gt; 18690: (0.0206954%)&lt;BR/&gt; 4633: (0.0206954%)&gt;];
}
570--2103[label="0.000413907;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="201.118.242.74"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06292,1.66934,999,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
32[label="57.245.11.184s;1pkt 1fpkt", shape=rectangle, color=red];
3455[label="57.245.11.184;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4614[label="57.245.11.184;2pkt 2fpkt", shape=invtriangle, color=brown];
5206[label="57.245.11.184;2pkt 2fpkt", shape=invhouse, color=bisque];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.245.11.184:19693, 200.180.1.69:53}[50%]&lt;BR/&gt;{57.245.11.184:19693, 200.180.1.70:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19693: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
32--574[label="1;1pkt 1fpkt"];
32--3455[label="1;1pkt 1fpkt"];
32--4614[label="1;1pkt 1fpkt"];
32--5206[label="1;1pkt 1fpkt"];
3455--4614[label="1;2pkt 2fpkt"];
3455--5206[label="1;2pkt 2fpkt"];
4614--5206[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.180.1.70" dst_port="53" src_ip="57.245.11.184" src_port="19693"/>
      <filter dst_ip="200.180.1.69" dst_port="53" src_ip="57.245.11.184" src_port="19693"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071205218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
382[label="57.232.11.80;s;130pkt 130fpkt", shape=diamond, color=yellow];
737[label="160.188.107.25;d;592pkt 592fpkt", shape=diamond, color=yellow];
889[label="201.118.238.26;d;535pkt 535fpkt", shape=diamond, color=yellow];
1030[label="58.10.76.3;s;65pkt 65fpkt", shape=diamond, color=yellow];
1105[label="160.188.122.86;d;111pkt 111fpkt", shape=diamond, color=yellow];
1261[label="160.188.213.137;d;106pkt 106fpkt", shape=diamond, color=yellow];
1726[label="160.188.107.25;d;478pkt 478fpkt", shape=hexagon, color=black];
1898[label="201.118.238.102;d;587pkt 587fpkt", shape=hexagon, color=black];
1954[label="201.118.238.26;d;439pkt 439fpkt", shape=hexagon, color=black];
1958[label="160.188.213.137;d;86pkt 86fpkt", shape=hexagon, color=black];
2004[label="160.188.122.86;d;98pkt 98fpkt", shape=hexagon, color=black];
2754[label="57.232.11.80;132pkt 132fpkt", shape=pentagon, color=darkviolet];
3879[label="218.162.55.252;103pkt 103fpkt", shape=pentagon, color=darkviolet];
4175[label="58.10.76.59;35pkt 35fpkt", shape=invtriangle, color=brown];
4856[label="218.162.55.252;103pkt 103fpkt", shape=invtriangle, color=brown];
5333[label="218.162.55.252;103pkt 103fpkt", shape=invhouse, color=bisque];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 160.188.107.25:*}[27.5734%]&lt;BR/&gt;{*:*, 201.118.238.26:53}[23.6143%]&lt;BR/&gt;{*:53, 201.118.238.102:1498}[20.5869%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (39.8866%)&lt;BR/&gt; 1068: (10.0459%)&lt;BR/&gt; 25: (9.65433%)&lt;BR/&gt; 1498: (5.96813%)&lt;BR/&gt; 0: (2.59249%)&gt;];
}
382--588[label="0.0153846;2pkt 2fpkt"];
382--737[label="0.0461538;6pkt 6fpkt"];
382--889[label="0.0153846;2pkt 2fpkt"];
382--973[label="0.0566038;3pkt 3fpkt"];
382--978[label="0.238095;10pkt 10fpkt"];
382--1092[label="0.214286;9pkt 9fpkt"];
382--1105[label="0.0720721;8pkt 8fpkt"];
382--1261[label="0.0188679;2pkt 2fpkt"];
382--1291[label="0.0833333;2pkt 2fpkt"];
382--1726[label="0.0461538;6pkt 6fpkt"];
382--1888[label="0.0666667;3pkt 3fpkt"];
382--1898[label="0.0153846;2pkt 2fpkt"];
382--1954[label="0.0153846;2pkt 2fpkt"];
382--1958[label="0.0232558;2pkt 2fpkt"];
382--1992[label="0.214286;9pkt 9fpkt"];
382--2004[label="0.0816327;8pkt 8fpkt"];
382--2754[label="1;130pkt 130fpkt"];
737--1030[label="0.0153846;1pkt 1fpkt"];
737--1263[label="0.00925926;1pkt 1fpkt"];
737--1283[label="0.011236;1pkt 1fpkt"];
737--1290[label="0.012987;1pkt 1fpkt"];
737--1314[label="0.0212766;1pkt 1fpkt"];
737--1524[label="0.0188679;1pkt 1fpkt"];
737--1651[label="0.00168919;1pkt 1fpkt"];
737--1726[label="1;478pkt 478fpkt"];
737--1971[label="0.00168919;1pkt 1fpkt"];
737--2013[label="0.011236;1pkt 1fpkt"];
737--2062[label="0.00168919;1pkt 1fpkt"];
737--2294[label="0.0149254;1pkt 1fpkt"];
737--2298[label="0.0416667;1pkt 1fpkt"];
737--2301[label="0.0277778;1pkt 1fpkt"];
737--2356[label="0.027027;1pkt 1fpkt"];
737--2585[label="0.00168919;1pkt 1fpkt"];
737--2611[label="0.0555556;2pkt 2fpkt"];
737--2674[label="0.04;1pkt 1fpkt"];
737--2705[label="0.0185185;1pkt 1fpkt"];
737--2714[label="0.0142857;1pkt 1fpkt"];
737--2754[label="0.0454545;6pkt 6fpkt"];
737--2765[label="0.025;1pkt 1fpkt"];
737--2808[label="0.0217391;1pkt 1fpkt"];
737--2866[label="0.012987;1pkt 1fpkt"];
737--3015[label="0.02;1pkt 1fpkt"];
737--3282[label="0.0384615;1pkt 1fpkt"];
737--3633[label="0.0769231;1pkt 1fpkt"];
737--3770[label="0.0121951;1pkt 1fpkt"];
737--3782[label="0.0384615;1pkt 1fpkt"];
737--3802[label="0.037037;1pkt 1fpkt"];
737--3858[label="0.0172414;1pkt 1fpkt"];
737--3998[label="0.0147059;1pkt 1fpkt"];
737--4032[label="0.027027;1pkt 1fpkt"];
737--4162[label="0.00168919;1pkt 1fpkt"];
737--4175[label="0.0571429;2pkt 2fpkt"];
737--4226[label="0.0185185;1pkt 1fpkt"];
737--4280[label="0.0217391;1pkt 1fpkt"];
737--4312[label="0.012987;1pkt 1fpkt"];
737--4381[label="0.02;1pkt 1fpkt"];
737--4518[label="0.0384615;1pkt 1fpkt"];
737--4800[label="0.0384615;1pkt 1fpkt"];
737--4847[label="0.0172414;1pkt 1fpkt"];
737--4919[label="0.0149254;1pkt 1fpkt"];
737--4937[label="0.0277778;1pkt 1fpkt"];
737--5097[label="0.02;1pkt 1fpkt"];
737--5161[label="0.0384615;1pkt 1fpkt"];
737--5306[label="0.0384615;1pkt 1fpkt"];
737--5328[label="0.0172414;1pkt 1fpkt"];
889--904[label="0.0119048;1pkt 1fpkt"];
889--974[label="0.00970874;1pkt 1fpkt"];
889--1030[label="0.0153846;1pkt 1fpkt"];
889--1056[label="0.00186916;1pkt 1fpkt"];
889--1179[label="0.333333;1pkt 1fpkt"];
889--1285[label="0.0212766;1pkt 1fpkt"];
889--1533[label="0.0240964;2pkt 2fpkt"];
889--1954[label="1;439pkt 439fpkt"];
889--2104[label="0.00373832;2pkt 2fpkt"];
889--2105[label="0.00373832;2pkt 2fpkt"];
889--2107[label="0.00186916;1pkt 1fpkt"];
889--2111[label="0.00186916;1pkt 1fpkt"];
889--2125[label="0.00186916;1pkt 1fpkt"];
889--2131[label="0.00186916;1pkt 1fpkt"];
889--2197[label="0.00854701;1pkt 1fpkt"];
889--2233[label="0.0208333;1pkt 1fpkt"];
889--2327[label="0.00980392;1pkt 1fpkt"];
889--2344[label="0.0357143;1pkt 1fpkt"];
889--2538[label="0.0144928;1pkt 1fpkt"];
889--2754[label="0.0151515;2pkt 2fpkt"];
889--3404[label="0.00186916;1pkt 1fpkt"];
889--3469[label="0.00490196;1pkt 1fpkt"];
889--3706[label="0.0208333;2pkt 2fpkt"];
889--3943[label="0.00847458;1pkt 1fpkt"];
889--3962[label="0.0208333;1pkt 1fpkt"];
889--4620[label="0.00490196;1pkt 1fpkt"];
889--4751[label="0.0208333;2pkt 2fpkt"];
889--4888[label="0.00847458;1pkt 1fpkt"];
889--4902[label="0.0208333;1pkt 1fpkt"];
889--5280[label="0.0208333;2pkt 2fpkt"];
1030--1111[label="0.0307692;2pkt 2fpkt"];
1030--1726[label="0.0153846;1pkt 1fpkt"];
1030--1898[label="0.0153846;1pkt 1fpkt"];
1030--1954[label="0.0153846;1pkt 1fpkt"];
1030--2105[label="0.0461538;3pkt 3fpkt"];
1030--2107[label="0.0461538;3pkt 3fpkt"];
1030--2110[label="0.0153846;1pkt 1fpkt"];
1105--1375[label="1;95pkt 95fpkt"];
1105--1633[label="0.00900901;1pkt 1fpkt"];
1105--1971[label="0.00900901;1pkt 1fpkt"];
1105--2004[label="1;98pkt 98fpkt"];
1105--2109[label="0.00900901;1pkt 1fpkt"];
1105--2124[label="0.00900901;1pkt 1fpkt"];
1105--2510[label="0.030303;1pkt 1fpkt"];
1105--2754[label="0.0720721;8pkt 8fpkt"];
1105--2894[label="0.00900901;1pkt 1fpkt"];
1105--3879[label="0.912621;94pkt 94fpkt"];
1105--4327[label="0.00900901;1pkt 1fpkt"];
1105--4856[label="0.912621;94pkt 94fpkt"];
1105--5077[label="0.00900901;1pkt 1fpkt"];
1105--5333[label="0.912621;94pkt 94fpkt"];
1261--1958[label="1;86pkt 86fpkt"];
1261--1971[label="0.00943396;1pkt 1fpkt"];
1261--2754[label="0.0188679;2pkt 2fpkt"];
1726--1971[label="0.00209205;1pkt 1fpkt"];
1726--2013[label="0.011236;1pkt 1fpkt"];
1726--2062[label="0.00209205;1pkt 1fpkt"];
1726--2294[label="0.0149254;1pkt 1fpkt"];
1726--2298[label="0.0416667;1pkt 1fpkt"];
1726--2301[label="0.0277778;1pkt 1fpkt"];
1726--2356[label="0.027027;1pkt 1fpkt"];
1726--2585[label="0.00209205;1pkt 1fpkt"];
1726--2674[label="0.04;1pkt 1fpkt"];
1726--2705[label="0.0185185;1pkt 1fpkt"];
1726--2714[label="0.0142857;1pkt 1fpkt"];
1726--2754[label="0.0454545;6pkt 6fpkt"];
1726--2765[label="0.025;1pkt 1fpkt"];
1726--2808[label="0.0217391;1pkt 1fpkt"];
1726--2866[label="0.012987;1pkt 1fpkt"];
1726--3015[label="0.02;1pkt 1fpkt"];
1726--3282[label="0.0384615;1pkt 1fpkt"];
1726--3633[label="0.0769231;1pkt 1fpkt"];
1726--3770[label="0.0121951;1pkt 1fpkt"];
1726--3782[label="0.0384615;1pkt 1fpkt"];
1726--3802[label="0.037037;1pkt 1fpkt"];
1726--3858[label="0.0172414;1pkt 1fpkt"];
1726--3998[label="0.0147059;1pkt 1fpkt"];
1726--4032[label="0.027027;1pkt 1fpkt"];
1726--4162[label="0.00209205;1pkt 1fpkt"];
1726--4226[label="0.0185185;1pkt 1fpkt"];
1726--4280[label="0.0217391;1pkt 1fpkt"];
1726--4312[label="0.012987;1pkt 1fpkt"];
1726--4381[label="0.02;1pkt 1fpkt"];
1726--4518[label="0.0384615;1pkt 1fpkt"];
1726--4800[label="0.0384615;1pkt 1fpkt"];
1726--4847[label="0.0172414;1pkt 1fpkt"];
1726--4919[label="0.0149254;1pkt 1fpkt"];
1726--4937[label="0.0277778;1pkt 1fpkt"];
1726--5097[label="0.02;1pkt 1fpkt"];
1726--5161[label="0.0384615;1pkt 1fpkt"];
1726--5306[label="0.0384615;1pkt 1fpkt"];
1726--5328[label="0.0172414;1pkt 1fpkt"];
1898--2013[label="0.011236;1pkt 1fpkt"];
1898--2142[label="0.025;1pkt 1fpkt"];
1898--2294[label="0.0149254;1pkt 1fpkt"];
1898--2301[label="0.0277778;1pkt 1fpkt"];
1898--2344[label="0.0714286;2pkt 2fpkt"];
1898--2356[label="0.0540541;2pkt 2fpkt"];
1898--2362[label="0.04;1pkt 1fpkt"];
1898--2396[label="0.111111;1pkt 1fpkt"];
1898--2611[label="0.0277778;1pkt 1fpkt"];
1898--2668[label="0.0263158;1pkt 1fpkt"];
1898--2674[label="0.04;1pkt 1fpkt"];
1898--2705[label="0.0185185;1pkt 1fpkt"];
1898--2714[label="0.0142857;1pkt 1fpkt"];
1898--2754[label="0.0151515;2pkt 2fpkt"];
1898--2765[label="0.025;1pkt 1fpkt"];
1898--2808[label="0.0217391;1pkt 1fpkt"];
1898--2866[label="0.025974;2pkt 2fpkt"];
1898--3282[label="0.0384615;1pkt 1fpkt"];
1898--3323[label="0.0588235;1pkt 1fpkt"];
1898--3802[label="0.037037;1pkt 1fpkt"];
1898--3858[label="0.0172414;1pkt 1fpkt"];
1898--3998[label="0.0147059;1pkt 1fpkt"];
1898--4032[label="0.0540541;2pkt 2fpkt"];
1898--4037[label="0.04;1pkt 1fpkt"];
1898--4226[label="0.0185185;1pkt 1fpkt"];
1898--4280[label="0.0217391;1pkt 1fpkt"];
1898--4312[label="0.025974;2pkt 2fpkt"];
1898--4518[label="0.0384615;1pkt 1fpkt"];
1898--4542[label="0.0588235;1pkt 1fpkt"];
1898--4847[label="0.0172414;1pkt 1fpkt"];
1898--4919[label="0.0149254;1pkt 1fpkt"];
1898--4937[label="0.0277778;1pkt 1fpkt"];
1898--4939[label="0.04;1pkt 1fpkt"];
1898--5161[label="0.0384615;1pkt 1fpkt"];
1898--5328[label="0.0172414;1pkt 1fpkt"];
1954--2104[label="0.00455581;2pkt 2fpkt"];
1954--2105[label="0.00455581;2pkt 2fpkt"];
1954--2107[label="0.0022779;1pkt 1fpkt"];
1954--2197[label="0.00854701;1pkt 1fpkt"];
1954--2233[label="0.0208333;1pkt 1fpkt"];
1954--2327[label="0.00980392;1pkt 1fpkt"];
1954--2538[label="0.0144928;1pkt 1fpkt"];
1954--2754[label="0.0151515;2pkt 2fpkt"];
1954--3469[label="0.00490196;1pkt 1fpkt"];
1954--3706[label="0.0208333;2pkt 2fpkt"];
1954--3943[label="0.00847458;1pkt 1fpkt"];
1954--3962[label="0.0208333;1pkt 1fpkt"];
1954--4620[label="0.00490196;1pkt 1fpkt"];
1954--4751[label="0.0208333;2pkt 2fpkt"];
1954--4888[label="0.00847458;1pkt 1fpkt"];
1954--4902[label="0.0208333;1pkt 1fpkt"];
1954--5280[label="0.0208333;2pkt 2fpkt"];
1958--2754[label="0.0232558;2pkt 2fpkt"];
2004--2754[label="0.0816327;8pkt 8fpkt"];
2004--3879[label="0.846939;83pkt 83fpkt"];
2004--4856[label="0.846939;83pkt 83fpkt"];
2004--5333[label="0.846939;83pkt 83fpkt"];
3879--4856[label="1;103pkt 103fpkt"];
3879--5333[label="1;103pkt 103fpkt"];
4856--5333[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.107.25"/>
      <filter dst_ip="201.118.238.26" dst_port="53"/>
      <filter dst_ip="201.118.238.102" dst_port="1498" src_port="53"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889707,1.5466,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
560[label="149.207.73.117;d;42pkt 42fpkt", shape=diamond, color=yellow];
600[label="77.55.162.208;s;5pkt 5fpkt", shape=diamond, color=yellow];
835[label="77.55.176.197;s;84pkt 84fpkt", shape=diamond, color=yellow];
1054[label="77.55.161.90;s;1pkt 1fpkt", shape=diamond, color=yellow];
1313[label="77.55.162.213;s;1pkt 1fpkt", shape=diamond, color=yellow];
1825[label="77.55.176.197;s;74pkt 74fpkt", shape=hexagon, color=black];
1843[label="149.207.73.117;d;24pkt 24fpkt", shape=hexagon, color=black];
1920[label="77.55.161.90;s;1pkt 1fpkt", shape=hexagon, color=black];
3010[label="77.55.161.116;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4379[label="77.55.161.116;1pkt 1fpkt", shape=invtriangle, color=brown];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.55.176.197:80, 149.207.84.19:*}[55.2%]&lt;BR/&gt;{*:80, 149.207.73.117:*}[33.6%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 11286: (0.854701%)&lt;BR/&gt; 11285: (0.854701%)&lt;BR/&gt; 11278: (0.854701%)&lt;BR/&gt; 11270: (0.854701%)&gt;];
}
560--600[label="0.2;1pkt 1fpkt"];
560--835[label="0.119048;5pkt 5fpkt"];
560--1054[label="1;1pkt 1fpkt"];
560--1313[label="1;1pkt 1fpkt"];
560--1825[label="0.0714286;3pkt 3fpkt"];
560--1843[label="1;24pkt 24fpkt"];
560--1920[label="1;1pkt 1fpkt"];
560--2103[label="0.0238095;1pkt 1fpkt"];
560--2919[label="0.25;1pkt 1fpkt"];
560--3010[label="1;1pkt 1fpkt"];
560--3517[label="0.214286;9pkt 9fpkt"];
560--3605[label="0.166667;4pkt 4fpkt"];
560--4337[label="0.25;1pkt 1fpkt"];
560--4379[label="1;1pkt 1fpkt"];
560--4694[label="0.166667;4pkt 4fpkt"];
560--5251[label="0.166667;4pkt 4fpkt"];
600--1255[label="0.2;1pkt 1fpkt"];
600--1717[label="0.4;2pkt 2fpkt"];
600--1843[label="0.2;1pkt 1fpkt"];
600--2103[label="0.4;2pkt 2fpkt"];
835--844[label="0.047619;4pkt 4fpkt"];
835--1717[label="0.797619;67pkt 67fpkt"];
835--1825[label="1;74pkt 74fpkt"];
835--1843[label="0.125;3pkt 3fpkt"];
835--2103[label="0.0357143;3pkt 3fpkt"];
1054--1843[label="1;1pkt 1fpkt"];
1054--1920[label="1;1pkt 1fpkt"];
1054--2103[label="1;1pkt 1fpkt"];
1313--1843[label="1;1pkt 1fpkt"];
1825--1843[label="0.125;3pkt 3fpkt"];
1843--1920[label="1;1pkt 1fpkt"];
1843--2103[label="0.0416667;1pkt 1fpkt"];
1843--2919[label="0.25;1pkt 1fpkt"];
1843--3517[label="0.208333;5pkt 5fpkt"];
1843--3605[label="0.0833333;2pkt 2fpkt"];
1843--4337[label="0.25;1pkt 1fpkt"];
1843--4694[label="0.0833333;2pkt 2fpkt"];
1843--5251[label="0.0833333;2pkt 2fpkt"];
1920--2103[label="1;1pkt 1fpkt"];
3010--4379[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.73.117" src_port="80"/>
      <filter dst_ip="149.207.84.19" src_ip="77.55.176.197" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
467[label="149.206.18.84;d;187pkt 187fpkt", shape=diamond, color=yellow];
3289[label="57.252.118.160;59pkt 59fpkt", shape=pentagon, color=darkviolet];
3807[label="57.224.232.236;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3937[label="205.1.44.6;2pkt 2fpkt", shape=invtriangle, color=brown];
4816[label="57.224.232.236;26pkt 26fpkt", shape=invtriangle, color=brown];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.252.118.160:80, 149.206.18.84:*}[31.383%]&lt;BR/&gt;{57.252.118.29:80, 149.206.18.84:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47%)&lt;BR/&gt; 0: (1.66667%)&lt;BR/&gt; 1863: (1.5%)&lt;BR/&gt; 443: (0.666667%)&lt;BR/&gt; 65377: (0.5%)&gt;];
}
467--614[label="0.00534759;1pkt 1fpkt"];
467--615[label="1;47pkt 47fpkt"];
467--635[label="0.02;3pkt 3fpkt"];
467--687[label="0.0106952;2pkt 2fpkt"];
467--706[label="0.0333333;2pkt 2fpkt"];
467--766[label="0.0106952;2pkt 2fpkt"];
467--770[label="0.0141844;2pkt 2fpkt"];
467--791[label="0.00534759;1pkt 1fpkt"];
467--1015[label="0.0652174;9pkt 9fpkt"];
467--1143[label="0.013986;2pkt 2fpkt"];
467--1564[label="0.028169;2pkt 2fpkt"];
467--1844[label="0.0465116;2pkt 2fpkt"];
467--2103[label="0.00534759;1pkt 1fpkt"];
467--2188[label="0.333333;1pkt 1fpkt"];
467--2291[label="0.027027;2pkt 2fpkt"];
467--2303[label="0.0588235;2pkt 2fpkt"];
467--2445[label="0.00534759;1pkt 1fpkt"];
467--2508[label="0.0123457;2pkt 2fpkt"];
467--2658[label="0.0127389;2pkt 2fpkt"];
467--2789[label="0.1;1pkt 1fpkt"];
467--2811[label="0.0106952;2pkt 2fpkt"];
467--3237[label="0.00534759;1pkt 1fpkt"];
467--3289[label="1;59pkt 59fpkt"];
467--3367[label="0.0616438;9pkt 9fpkt"];
467--3722[label="0.00534759;1pkt 1fpkt"];
467--3807[label="1;26pkt 26fpkt"];
467--3937[label="0.5;1pkt 1fpkt"];
467--4003[label="0.0571429;2pkt 2fpkt"];
467--4078[label="0.00534759;1pkt 1fpkt"];
467--4201[label="0.0127389;2pkt 2fpkt"];
467--4816[label="1;26pkt 26fpkt"];
467--4957[label="0.00534759;1pkt 1fpkt"];
467--5025[label="0.0127389;2pkt 2fpkt"];
3807--4816[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.18.84" src_ip="57.252.118.160" src_port="80"/>
      <filter dst_ip="149.206.18.84" src_ip="57.252.118.29" src_port="80"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
583[label="200.180.1.70;d;466pkt 466fpkt", shape=diamond, color=yellow];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 200.180.1.70:53}[86.9099%]&lt;BR/&gt;{*:53, 200.180.1.70:*}[25.7511%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (56.3305%)&lt;BR/&gt; 65534: (5.90129%)&lt;BR/&gt; 0: (1.28755%)&lt;BR/&gt; 32768: (0.965665%)&lt;BR/&gt; 1024: (0.858369%)&gt;];
}
583--904[label="0.0238095;2pkt 2fpkt"];
583--1001[label="0.00740741;1pkt 1fpkt"];
583--1263[label="0.00925926;1pkt 1fpkt"];
583--1280[label="0.0116279;1pkt 1fpkt"];
583--1283[label="0.011236;1pkt 1fpkt"];
583--1413[label="0.025;1pkt 1fpkt"];
583--1533[label="0.0240964;2pkt 2fpkt"];
583--2013[label="0.011236;1pkt 1fpkt"];
583--2299[label="0.00641026;1pkt 1fpkt"];
583--2327[label="0.0196078;2pkt 2fpkt"];
583--2344[label="0.0357143;1pkt 1fpkt"];
583--2362[label="0.04;1pkt 1fpkt"];
583--2467[label="0.0555556;1pkt 1fpkt"];
583--2674[label="0.04;1pkt 1fpkt"];
583--2765[label="0.025;1pkt 1fpkt"];
583--2967[label="0.0454545;1pkt 1fpkt"];
583--3015[label="0.02;1pkt 1fpkt"];
583--3455[label="0.5;1pkt 1fpkt"];
583--3469[label="0.0392157;8pkt 8fpkt"];
583--3533[label="0.0555556;1pkt 1fpkt"];
583--3706[label="0.0208333;2pkt 2fpkt"];
583--4002[label="0.00636943;1pkt 1fpkt"];
583--4037[label="0.04;1pkt 1fpkt"];
583--4090[label="0.0588235;1pkt 1fpkt"];
583--4358[label="0.0454545;1pkt 1fpkt"];
583--4381[label="0.02;1pkt 1fpkt"];
583--4614[label="0.5;1pkt 1fpkt"];
583--4620[label="0.0392157;8pkt 8fpkt"];
583--4654[label="0.0555556;1pkt 1fpkt"];
583--4751[label="0.0208333;2pkt 2fpkt"];
583--4920[label="0.00636943;1pkt 1fpkt"];
583--4939[label="0.04;1pkt 1fpkt"];
583--5097[label="0.02;1pkt 1fpkt"];
583--5206[label="0.5;1pkt 1fpkt"];
583--5228[label="0.0555556;1pkt 1fpkt"];
583--5280[label="0.0208333;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.180.1.70" src_port="53"/>
      <filter dst_ip="200.180.1.70" dst_port="53"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
499[label="58.67.154.60;s;120pkt 120fpkt", shape=diamond, color=yellow];
931[label="149.206.195.49;d;25pkt 25fpkt", shape=diamond, color=yellow];
1079[label="149.206.203.43;d;31pkt 31fpkt", shape=diamond, color=yellow];
1619[label="149.206.96.134;d;55pkt 55fpkt", shape=diamond, color=yellow];
1864[label="149.206.195.49;d;25pkt 25fpkt", shape=hexagon, color=black];
1965[label="58.67.154.60;s;120pkt 120fpkt", shape=hexagon, color=black];
2616[label="58.67.154.60;124pkt 124fpkt", shape=pentagon, color=darkviolet];
3740[label="58.67.154.225;239pkt 239fpkt", shape=pentagon, color=darkviolet];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.67.154.225:80, *:*}[58.1907%]&lt;BR/&gt;{58.67.154.60:80, *:*}[30.3178%]&lt;BR/&gt;{*:80, 149.206.203.43:*}[22.4939%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8647%)&lt;BR/&gt; 4252: (0.338295%)&lt;BR/&gt; 4251: (0.338295%)&lt;BR/&gt; 4249: (0.338295%)&lt;BR/&gt; 4245: (0.338295%)&gt;];
}
499--621[label="0.0847458;10pkt 10fpkt"];
499--781[label="0.319444;23pkt 23fpkt"];
499--931[label="0.44;11pkt 11fpkt"];
499--1044[label="0.158333;19pkt 19fpkt"];
499--1079[label="0.290323;9pkt 9fpkt"];
499--1619[label="0.163636;9pkt 9fpkt"];
499--1864[label="0.44;11pkt 11fpkt"];
499--1874[label="0.107692;7pkt 7fpkt"];
499--1965[label="1;120pkt 120fpkt"];
499--2103[label="0.0666667;8pkt 8fpkt"];
499--2616[label="1;120pkt 120fpkt"];
931--1864[label="1;25pkt 25fpkt"];
931--1965[label="0.44;11pkt 11fpkt"];
931--2616[label="0.44;11pkt 11fpkt"];
931--2811[label="0.44;11pkt 11fpkt"];
1079--1965[label="0.290323;9pkt 9fpkt"];
1079--2616[label="0.290323;9pkt 9fpkt"];
1079--2811[label="0.290323;9pkt 9fpkt"];
1079--3740[label="0.322581;10pkt 10fpkt"];
1079--4773[label="0.322581;10pkt 10fpkt"];
1619--1965[label="0.163636;9pkt 9fpkt"];
1619--2268[label="0.0545455;3pkt 3fpkt"];
1619--2616[label="0.163636;9pkt 9fpkt"];
1619--3339[label="0.0196078;1pkt 1fpkt"];
1619--3441[label="0.0363636;2pkt 2fpkt"];
1619--3471[label="0.0208333;1pkt 1fpkt"];
1619--3740[label="0.472727;26pkt 26fpkt"];
1619--4547[label="0.0196078;1pkt 1fpkt"];
1619--4622[label="0.0208333;1pkt 1fpkt"];
1619--4773[label="0.472727;26pkt 26fpkt"];
1619--5209[label="0.0208333;1pkt 1fpkt"];
1864--1965[label="0.44;11pkt 11fpkt"];
1864--2616[label="0.44;11pkt 11fpkt"];
1864--2811[label="0.44;11pkt 11fpkt"];
1965--2103[label="0.0666667;8pkt 8fpkt"];
1965--2616[label="1;120pkt 120fpkt"];
3740--4773[label="1;239pkt 239fpkt"];
</description>
    <slice>
      <filter src_ip="58.67.154.225" src_port="80"/>
      <filter src_ip="58.67.154.60" src_port="80"/>
      <filter dst_ip="149.206.203.43" src_port="80"/>
    </slice>
    <from sec="1071205226" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
626[label="205.1.195.5;s;19pkt 19fpkt", shape=diamond, color=yellow];
1811[label="205.1.195.5;s;16pkt 16fpkt", shape=hexagon, color=black];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.195.5:80, 149.206.223.126:*}[31.5789%]&lt;BR/&gt;{205.1.195.5:443, *:*}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.2857%)&lt;BR/&gt; 443: (15.7143%)&lt;BR/&gt; 61093: (2.85714%)&lt;BR/&gt; 60993: (2.85714%)&lt;BR/&gt; 60909: (2.85714%)&gt;];
}
626--1000[label="0.0526316;1pkt 1fpkt"];
626--1690[label="0.421053;8pkt 8fpkt"];
626--1811[label="1;16pkt 16fpkt"];
626--2103[label="0.0526316;1pkt 1fpkt"];
626--2184[label="1;18pkt 18fpkt"];
626--3934[label="1;18pkt 18fpkt"];
626--4885[label="1;18pkt 18fpkt"];
1811--2103[label="0.0625;1pkt 1fpkt"];
1811--2184[label="0.9375;15pkt 15fpkt"];
1811--3934[label="0.9375;15pkt 15fpkt"];
1811--4885[label="0.9375;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="205.1.195.5" src_port="443"/>
      <filter dst_ip="149.206.223.126" src_ip="205.1.195.5" src_port="80"/>
    </slice>
    <from sec="1071205214" usec="0"/>
    <to sec="1071205808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889707,1.5466,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
638[label="149.206.228.227;d;99pkt 99fpkt", shape=diamond, color=yellow];
801[label="58.134.49.215;s;16pkt 16fpkt", shape=diamond, color=yellow];
1747[label="149.206.228.227;d;93pkt 93fpkt", shape=hexagon, color=black];
1817[label="58.134.49.215;s;16pkt 16fpkt", shape=hexagon, color=black];
2867[label="208.10.131.95;66pkt 66fpkt", shape=pentagon, color=darkviolet];
3655[label="58.134.49.215;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4313[label="208.10.131.95;66pkt 66fpkt", shape=invtriangle, color=brown];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.10.131.95:80, 149.206.228.227:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5215%)&lt;BR/&gt; 0: (2.95699%)&lt;BR/&gt; 1614: (0.672043%)&lt;BR/&gt; 1613: (0.672043%)&lt;BR/&gt; 1612: (0.672043%)&gt;];
}
638--641[label="0.0240964;2pkt 2fpkt"];
638--753[label="0.010101;1pkt 1fpkt"];
638--801[label="1;16pkt 16fpkt"];
638--1729[label="0.010101;1pkt 1fpkt"];
638--1747[label="1;93pkt 93fpkt"];
638--1750[label="0.0357143;2pkt 2fpkt"];
638--1800[label="0.010101;1pkt 1fpkt"];
638--1817[label="1;16pkt 16fpkt"];
638--2103[label="0.030303;3pkt 3fpkt"];
638--2867[label="1;66pkt 66fpkt"];
638--3237[label="0.010101;1pkt 1fpkt"];
638--3317[label="0.0210526;2pkt 2fpkt"];
638--3655[label="1;16pkt 16fpkt"];
638--4313[label="1;66pkt 66fpkt"];
801--1747[label="1;16pkt 16fpkt"];
801--1817[label="1;16pkt 16fpkt"];
801--2103[label="0.125;2pkt 2fpkt"];
801--3655[label="1;16pkt 16fpkt"];
1747--1750[label="0.0357143;2pkt 2fpkt"];
1747--1800[label="0.0107527;1pkt 1fpkt"];
1747--1817[label="1;16pkt 16fpkt"];
1747--2103[label="0.0322581;3pkt 3fpkt"];
1747--2867[label="1;66pkt 66fpkt"];
1747--3237[label="0.0107527;1pkt 1fpkt"];
1747--3317[label="0.0215054;2pkt 2fpkt"];
1747--3655[label="1;16pkt 16fpkt"];
1747--4313[label="1;66pkt 66fpkt"];
1817--2103[label="0.125;2pkt 2fpkt"];
1817--3655[label="1;16pkt 16fpkt"];
2867--4313[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.228.227" src_ip="208.10.131.95" src_port="80"/>
    </slice>
    <from sec="1071205229" usec="0"/>
    <to sec="1071205938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
669[label="145.71.52.68;d;2pkt 2fpkt", shape=diamond, color=yellow];
670[label="149.210.231.0;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.210.231.0:21, 145.71.52.68:2259}[50%]&lt;BR/&gt;{149.210.231.0:9382, 145.71.52.68:2260}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9382: (25%)&lt;BR/&gt; 2260: (25%)&lt;BR/&gt; 2259: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
669--670[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.71.52.68" dst_port="2260" src_ip="149.210.231.0" src_port="9382"/>
      <filter dst_ip="145.71.52.68" dst_port="2259" src_ip="149.210.231.0" src_port="21"/>
    </slice>
    <from sec="1071205354" usec="0"/>
    <to sec="1071205497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
329[label="149.207.229.2;d;17pkt 17fpkt", shape=diamond, color=yellow];
330[label="211.165.94.242;s;1pkt 1fpkt", shape=diamond, color=yellow];
362[label="220.80.206.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
3832[label="211.165.94.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4830[label="211.165.94.242;1pkt 1fpkt", shape=invtriangle, color=brown];
5317[label="211.165.94.242;1pkt 1fpkt", shape=invhouse, color=bisque];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.53.213.151:80, 149.207.229.2:*}[52.9412%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.0909%)&lt;BR/&gt; 33744: (11.3636%)&lt;BR/&gt; 15049: (11.3636%)&lt;BR/&gt; 33465: (4.54545%)&lt;BR/&gt; 15043: (4.54545%)&gt;];
}
329--330[label="1;1pkt 1fpkt"];
329--362[label="1;1pkt 1fpkt"];
329--687[label="0.117647;2pkt 2fpkt"];
329--2103[label="0.0588235;1pkt 1fpkt"];
329--2795[label="0.117647;2pkt 2fpkt"];
329--3235[label="0.529412;9pkt 9fpkt"];
329--3832[label="1;1pkt 1fpkt"];
329--4273[label="0.117647;2pkt 2fpkt"];
329--4830[label="1;1pkt 1fpkt"];
329--5317[label="1;1pkt 1fpkt"];
330--3832[label="1;1pkt 1fpkt"];
330--4830[label="1;1pkt 1fpkt"];
330--5317[label="1;1pkt 1fpkt"];
3832--4830[label="1;1pkt 1fpkt"];
3832--5317[label="1;1pkt 1fpkt"];
4830--5317[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.229.2" src_ip="217.53.213.151" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
700[label="139.123.75.78;s;1171pkt 1171fpkt", shape=diamond, color=yellow];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.123.75.78:0, *:0}[96.9257%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.9257%)&lt;BR/&gt; 80: (1.53715%)&lt;BR/&gt; 64490: (0.0426985%)&lt;BR/&gt; 62492: (0.0426985%)&lt;BR/&gt; 60617: (0.0426985%)&gt;];
}
700--2105[label="0.00170794;2pkt 2fpkt"];
700--2107[label="0.0059778;7pkt 7fpkt"];
</description>
    <slice>
      <filter src_ip="139.123.75.78"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
171[label="213.59.23.51s;2pkt 2fpkt", shape=rectangle, color=red];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.21.39:35285, 218.91.143.209:80}[50%]&lt;BR/&gt;{213.59.23.51:80, 149.206.254.29:1055}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35285: (25%)&lt;BR/&gt; 1055: (25%)&gt;];
}
171--433[label="1;1pkt 1fpkt"];
171--654[label="0.5;1pkt 1fpkt"];
171--655[label="0.5;1pkt 1fpkt"];
171--723[label="0.5;1pkt 1fpkt"];
171--1863[label="0.5;1pkt 1fpkt"];
171--2103[label="0.5;1pkt 1fpkt"];
171--2105[label="0.5;1pkt 1fpkt"];
171--2107[label="0.5;1pkt 1fpkt"];
171--2456[label="0.5;1pkt 1fpkt"];
171--4086[label="0.5;1pkt 1fpkt"];
171--4961[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.254.29" dst_port="1055" src_ip="213.59.23.51" src_port="80"/>
      <filter dst_ip="218.91.143.209" dst_port="80" src_ip="131.233.21.39" src_port="35285"/>
    </slice>
    <from sec="1071205635" usec="0"/>
    <to sec="1071205644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
528[label="131.233.160.136;d;49pkt 49fpkt", shape=diamond, color=yellow];
725[label="34.200.50.6;s;1pkt 1fpkt", shape=diamond, color=yellow];
811[label="35.39.212.25;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 131.233.160.136:*}[65.3061%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (33.3333%)&lt;BR/&gt; 4482: (4.90196%)&lt;BR/&gt; 0: (3.92157%)&lt;BR/&gt; 4666: (2.94118%)&lt;BR/&gt; 4246: (2.94118%)&gt;];
}
528--725[label="1;1pkt 1fpkt"];
528--811[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.233.160.136" src_port="4662"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
426[label="149.207.112.69;d;151pkt 151fpkt", shape=diamond, color=yellow];
768[label="192.108.226.4;s;287pkt 287fpkt", shape=diamond, color=yellow];
833[label="169.99.193.144;s;1pkt 1fpkt", shape=diamond, color=yellow];
922[label="145.71.33.234;d;195pkt 195fpkt", shape=diamond, color=yellow];
1764[label="169.99.193.144;s;1pkt 1fpkt", shape=hexagon, color=black];
2174[label="192.108.226.4;307pkt 307fpkt", shape=pentagon, color=darkviolet];
3181[label="169.99.193.144;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3193[label="192.108.226.146;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3272[label="192.108.226.157;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3586[label="192.108.226.204;92pkt 92fpkt", shape=pentagon, color=darkviolet];
3928[label="192.108.226.4;307pkt 307fpkt", shape=invtriangle, color=brown];
4466[label="192.108.226.146;21pkt 21fpkt", shape=invtriangle, color=brown];
4683[label="192.108.226.204;92pkt 92fpkt", shape=invtriangle, color=brown];
4883[label="192.108.226.4;307pkt 307fpkt", shape=invhouse, color=bisque];
5245[label="192.108.226.204;92pkt 92fpkt", shape=invhouse, color=bisque];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 145.71.33.234:*}[32.1767%]&lt;BR/&gt;{192.108.226.4:80, 145.71.33.206:*}[30.1262%]&lt;BR/&gt;{*:80, 149.207.112.69:*}[22.7129%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7886%)&lt;BR/&gt; 1269: (0.184989%)&lt;BR/&gt; 63070: (0.132135%)&lt;BR/&gt; 62295: (0.132135%)&lt;BR/&gt; 62071: (0.132135%)&gt;];
}
426--439[label="0.00662252;1pkt 1fpkt"];
426--606[label="0.00662252;1pkt 1fpkt"];
426--687[label="0.00662252;1pkt 1fpkt"];
426--738[label="0.0860927;13pkt 13fpkt"];
426--755[label="0.0463576;7pkt 7fpkt"];
426--768[label="0.0596026;9pkt 9fpkt"];
426--787[label="0.0596026;9pkt 9fpkt"];
426--833[label="1;1pkt 1fpkt"];
426--911[label="0.0689655;2pkt 2fpkt"];
426--1155[label="0.129032;4pkt 4fpkt"];
426--1420[label="0.0606061;2pkt 2fpkt"];
426--1764[label="1;1pkt 1fpkt"];
426--1772[label="0.00662252;1pkt 1fpkt"];
426--1804[label="0.0397351;6pkt 6fpkt"];
426--2103[label="0.13245;20pkt 20fpkt"];
426--2155[label="0.0596026;9pkt 9fpkt"];
426--2174[label="0.0529801;8pkt 8fpkt"];
426--2430[label="0.103448;3pkt 3fpkt"];
426--3181[label="1;2pkt 2fpkt"];
426--3193[label="0.190476;4pkt 4fpkt"];
426--3272[label="0.375;6pkt 6fpkt"];
426--3337[label="0.00662252;1pkt 1fpkt"];
426--3364[label="0.0463576;7pkt 7fpkt"];
426--3586[label="0.0652174;6pkt 6fpkt"];
426--3613[label="0.00662252;1pkt 1fpkt"];
426--3678[label="0.00662252;1pkt 1fpkt"];
426--3799[label="0.0327869;2pkt 2fpkt"];
426--3913[label="0.0596026;9pkt 9fpkt"];
426--3928[label="0.0529801;8pkt 8fpkt"];
426--4466[label="0.190476;4pkt 4fpkt"];
426--4683[label="0.0652174;6pkt 6fpkt"];
426--4698[label="0.00662252;1pkt 1fpkt"];
426--4736[label="0.00662252;1pkt 1fpkt"];
426--4810[label="0.0327869;2pkt 2fpkt"];
426--4871[label="0.0596026;9pkt 9fpkt"];
426--4883[label="0.0529801;8pkt 8fpkt"];
426--5245[label="0.0652174;6pkt 6fpkt"];
426--5310[label="0.0327869;2pkt 2fpkt"];
768--922[label="0.507692;99pkt 99fpkt"];
768--926[label="0.025;1pkt 1fpkt"];
768--1803[label="0.553299;109pkt 109fpkt"];
768--2103[label="0.0836237;24pkt 24fpkt"];
768--2174[label="0.996516;286pkt 286fpkt"];
768--3928[label="0.996516;286pkt 286fpkt"];
768--4883[label="0.996516;286pkt 286fpkt"];
833--1764[label="1;1pkt 1fpkt"];
833--3181[label="1;1pkt 1fpkt"];
922--1264[label="0.480769;25pkt 25fpkt"];
922--2103[label="0.0923077;18pkt 18fpkt"];
922--2174[label="0.507692;99pkt 99fpkt"];
922--3193[label="0.571429;12pkt 12fpkt"];
922--3586[label="0.141304;13pkt 13fpkt"];
922--3756[label="0.214286;12pkt 12fpkt"];
922--3928[label="0.507692;99pkt 99fpkt"];
922--4466[label="0.571429;12pkt 12fpkt"];
922--4683[label="0.141304;13pkt 13fpkt"];
922--4786[label="0.214286;12pkt 12fpkt"];
922--4883[label="0.507692;99pkt 99fpkt"];
922--5245[label="0.141304;13pkt 13fpkt"];
1764--3181[label="1;1pkt 1fpkt"];
2174--3928[label="1;307pkt 307fpkt"];
2174--4883[label="1;307pkt 307fpkt"];
3193--4466[label="1;21pkt 21fpkt"];
3586--4683[label="1;92pkt 92fpkt"];
3586--5245[label="1;92pkt 92fpkt"];
3928--4883[label="1;307pkt 307fpkt"];
4683--5245[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter dst_ip="145.71.33.234" src_port="80"/>
      <filter dst_ip="149.207.112.69" src_port="80"/>
      <filter dst_ip="145.71.33.206" src_ip="192.108.226.4" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.942883,1.628,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
2[label="131.233.162.11s;2pkt 2fpkt", shape=rectangle, color=red];
746[label="131.233.162.11;s;115pkt 115fpkt", shape=diamond, color=yellow];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.162.11:*, 211.245.253.174:80}[50.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7179%)&lt;BR/&gt; 1026: (1.28205%)&lt;BR/&gt; 161: (1.28205%)&lt;BR/&gt; 4389: (0.854701%)&lt;BR/&gt; 4388: (0.854701%)&gt;];
}
2--746[label="1;2pkt 2fpkt"];
746--1177[label="1;17pkt 17fpkt"];
746--2105[label="0.0608696;7pkt 7fpkt"];
746--2107[label="0.00869565;1pkt 1fpkt"];
746--2110[label="0.0173913;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.245.253.174" dst_port="80" src_ip="131.233.162.11"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
348[label="166.55.163.35;d;6pkt 6fpkt", shape=diamond, color=yellow];
349[label="60.36.18.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
1771[label="60.36.18.5;s;1pkt 1fpkt", shape=hexagon, color=black];
2177[label="60.36.18.5;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2806[label="58.113.84.86;4725pkt 4725fpkt", shape=pentagon, color=darkviolet];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.113.84.86:*, *:135}[99.8943%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (49.9155%)&lt;BR/&gt; 80: (0.0844951%)&lt;BR/&gt; 3514: (0.0739332%)&lt;BR/&gt; 4865: (0.0633714%)&lt;BR/&gt; 4864: (0.0633714%)&gt;];
}
348--349[label="1;1pkt 1fpkt"];
348--747[label="0.166667;1pkt 1fpkt"];
348--1771[label="1;1pkt 1fpkt"];
348--2103[label="0.5;3pkt 3fpkt"];
348--2177[label="1;1pkt 1fpkt"];
348--2806[label="0.166667;1pkt 1fpkt"];
349--1771[label="1;1pkt 1fpkt"];
349--2103[label="1;1pkt 1fpkt"];
349--2177[label="1;1pkt 1fpkt"];
1771--2103[label="1;1pkt 1fpkt"];
1771--2177[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="58.113.84.86"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
750[label="218.243.163.210;d;1pkt 1fpkt", shape=diamond, color=yellow];
751[label="153.57.13.63;s;2pkt 2fpkt", shape=diamond, color=yellow];
1599[label="218.242.76.77;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.57.13.63:6881, 218.242.76.77:4649}[50%]&lt;BR/&gt;{153.57.13.63:1131, 218.243.163.210:6882}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6882: (25%)&lt;BR/&gt; 6881: (25%)&lt;BR/&gt; 4649: (25%)&lt;BR/&gt; 1131: (25%)&gt;];
}
750--751[label="1;1pkt 1fpkt"];
751--1599[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.243.163.210" dst_port="6882" src_ip="153.57.13.63" src_port="1131"/>
      <filter dst_ip="218.242.76.77" dst_port="4649" src_ip="153.57.13.63" src_port="6881"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
759[label="160.188.27.214;d;212pkt 212fpkt", shape=diamond, color=yellow];
760[label="216.115.155.7;s;213pkt 213fpkt", shape=diamond, color=yellow];
2011[label="160.188.27.214;d;194pkt 194fpkt", shape=hexagon, color=black];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.115.155.7:5050, 160.188.27.214:*}[98.5981%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (49.8384%)&lt;BR/&gt; 0: (0.323102%)&lt;BR/&gt; 4826: (0.242326%)&lt;BR/&gt; 4825: (0.242326%)&lt;BR/&gt; 4824: (0.242326%)&gt;];
}
759--760[label="0.995283;211pkt 211fpkt"];
759--1971[label="0.00471698;1pkt 1fpkt"];
759--2011[label="1;194pkt 194fpkt"];
760--2011[label="0.994845;193pkt 193fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.27.214" src_ip="216.115.155.7" src_port="5050"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
468[label="149.206.30.242;d;82pkt 82fpkt", shape=diamond, color=yellow];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.158.52.185:80, 149.206.30.242:*}[89.0244%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1707%)&lt;BR/&gt; 1863: (1.82927%)&lt;BR/&gt; 1324: (0.609756%)&lt;BR/&gt; 1323: (0.609756%)&lt;BR/&gt; 1320: (0.609756%)&gt;];
}
468--486[label="0.972222;70pkt 70fpkt"];
468--614[label="0.0121951;1pkt 1fpkt"];
468--1686[label="1;79pkt 79fpkt"];
468--2103[label="0.0243902;2pkt 2fpkt"];
468--3548[label="0.166667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.30.242" src_ip="57.158.52.185" src_port="80"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
3516[label="57.83.167.194;44pkt 44fpkt", shape=pentagon, color=darkviolet];
4646[label="57.83.167.194;44pkt 44fpkt", shape=invtriangle, color=brown];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.83.167.194:80, 149.207.5.47:*}[65.9091%]&lt;BR/&gt;{57.83.167.194:80, 145.71.113.197:*}[31.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39139: (1.13636%)&lt;BR/&gt; 39138: (1.13636%)&lt;BR/&gt; 39137: (1.13636%)&lt;BR/&gt; 39136: (1.13636%)&gt;];
}
3516--4646[label="1;44pkt 44fpkt"];
3516--5222[label="1;44pkt 44fpkt"];
4646--5222[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.5.47" src_ip="57.83.167.194" src_port="80"/>
      <filter dst_ip="145.71.113.197" src_ip="57.83.167.194" src_port="80"/>
    </slice>
    <from sec="1071205513" usec="0"/>
    <to sec="1071205910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
664[label="56.33.193.95;s;3pkt 3fpkt", shape=diamond, color=yellow];
800[label="131.233.146.145;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.33.193.95:55050, 131.233.146.145:21}[33.3333%]&lt;BR/&gt;{56.33.193.95:55185, 131.233.146.145:53082}[33.3333%]&lt;BR/&gt;{56.33.193.95:55269, 131.233.146.145:53140}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55269: (16.6667%)&lt;BR/&gt; 55185: (16.6667%)&lt;BR/&gt; 55050: (16.6667%)&lt;BR/&gt; 53140: (16.6667%)&lt;BR/&gt; 53082: (16.6667%)&gt;];
}
664--800[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="131.233.146.145" dst_port="53140" src_ip="56.33.193.95" src_port="55269"/>
      <filter dst_ip="131.233.146.145" dst_port="53082" src_ip="56.33.193.95" src_port="55185"/>
      <filter dst_ip="131.233.146.145" dst_port="21" src_ip="56.33.193.95" src_port="55050"/>
    </slice>
    <from sec="1071205255" usec="0"/>
    <to sec="1071205567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
806[label="196.207.9.34;d;25pkt 25fpkt", shape=diamond, color=yellow];
807[label="57.83.180.81;s;25pkt 25fpkt", shape=diamond, color=yellow];
2769[label="57.83.180.81;25pkt 25fpkt", shape=pentagon, color=darkviolet];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.83.180.81:80, 196.207.9.34:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2517: (2%)&lt;BR/&gt; 2516: (2%)&lt;BR/&gt; 2515: (2%)&lt;BR/&gt; 2514: (2%)&gt;];
}
806--807[label="1;25pkt 25fpkt"];
806--2769[label="1;25pkt 25fpkt"];
807--2769[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="196.207.9.34" src_ip="57.83.180.81" src_port="80"/>
    </slice>
    <from sec="1071205276" usec="0"/>
    <to sec="1071205526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
665[label="149.206.124.38;d;134pkt 134fpkt", shape=diamond, color=yellow];
816[label="216.119.11.189;s;4pkt 4fpkt", shape=diamond, color=yellow];
929[label="149.206.6.4;d;2pkt 2fpkt", shape=diamond, color=yellow];
1583[label="149.206.62.82;d;82pkt 82fpkt", shape=diamond, color=yellow];
1760[label="216.119.11.188;s;131pkt 131fpkt", shape=hexagon, color=black];
1821[label="216.119.11.189;s;4pkt 4fpkt", shape=hexagon, color=black];
3492[label="216.119.11.189;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4633[label="216.119.11.189;10pkt 10fpkt", shape=invtriangle, color=brown];
5212[label="216.119.11.189;10pkt 10fpkt", shape=invhouse, color=bisque];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.119.11.188:80, 149.206.124.38:*}[59.3607%]&lt;BR/&gt;{216.119.11.188:80, 149.206.62.82:*}[31.5068%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8708%)&lt;BR/&gt; 51381: (0.775194%)&lt;BR/&gt; 2248: (0.775194%)&lt;BR/&gt; 2153: (0.775194%)&lt;BR/&gt; 2081: (0.775194%)&gt;];
}
665--816[label="0.75;3pkt 3fpkt"];
665--1729[label="0.00746269;1pkt 1fpkt"];
665--1760[label="0.992366;130pkt 130fpkt"];
665--1821[label="0.75;3pkt 3fpkt"];
665--2103[label="0.00746269;1pkt 1fpkt"];
665--3237[label="0.00746269;1pkt 1fpkt"];
665--3492[label="0.3;3pkt 3fpkt"];
665--4633[label="0.3;3pkt 3fpkt"];
665--5212[label="0.3;3pkt 3fpkt"];
816--929[label="0.5;1pkt 1fpkt"];
816--1821[label="1;4pkt 4fpkt"];
816--3492[label="1;4pkt 4fpkt"];
816--4633[label="1;4pkt 4fpkt"];
816--5212[label="1;4pkt 4fpkt"];
929--1760[label="0.5;1pkt 1fpkt"];
929--1821[label="0.5;1pkt 1fpkt"];
929--3492[label="0.5;1pkt 1fpkt"];
929--4633[label="0.5;1pkt 1fpkt"];
929--5212[label="0.5;1pkt 1fpkt"];
1583--2103[label="0.0487805;4pkt 4fpkt"];
1583--3492[label="0.5;5pkt 5fpkt"];
1583--4633[label="0.5;5pkt 5fpkt"];
1583--5212[label="0.5;5pkt 5fpkt"];
1760--2103[label="0.00763359;1pkt 1fpkt"];
1821--3492[label="1;4pkt 4fpkt"];
1821--4633[label="1;4pkt 4fpkt"];
1821--5212[label="1;4pkt 4fpkt"];
3492--4633[label="1;10pkt 10fpkt"];
3492--5212[label="1;10pkt 10fpkt"];
4633--5212[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.124.38" src_ip="216.119.11.188" src_port="80"/>
      <filter dst_ip="149.206.62.82" src_ip="216.119.11.188" src_port="80"/>
    </slice>
    <from sec="1071205289" usec="0"/>
    <to sec="1071206094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945324,1.56671,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
70[label="193.98.139.89s;40pkt 40fpkt", shape=rectangle, color=red];
817[label="193.98.139.89;s;190pkt 190fpkt", shape=diamond, color=yellow];
2822[label="193.98.139.89;190pkt 190fpkt", shape=pentagon, color=darkviolet];
4285[label="193.98.139.89;190pkt 190fpkt", shape=invtriangle, color=brown];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.98.139.89:*, 145.166.50.196:80}[61.0526%]&lt;BR/&gt;{193.98.139.89:*, 145.166.35.74:80}[22.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 6994: (0.327869%)&lt;BR/&gt; 6992: (0.327869%)&lt;BR/&gt; 6990: (0.327869%)&lt;BR/&gt; 6989: (0.327869%)&gt;];
}
70--817[label="1;40pkt 40fpkt"];
70--2822[label="1;40pkt 40fpkt"];
70--4285[label="1;40pkt 40fpkt"];
817--1990[label="0.610526;116pkt 116fpkt"];
817--2822[label="1;190pkt 190fpkt"];
817--4285[label="1;190pkt 190fpkt"];
2822--4285[label="1;190pkt 190fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.50.196" dst_port="80" src_ip="193.98.139.89"/>
      <filter dst_ip="145.166.35.74" dst_port="80" src_ip="193.98.139.89"/>
    </slice>
    <from sec="1071205320" usec="0"/>
    <to sec="1071205654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="57.192.167.59"/>
      <from sec="1071205367" usec="0"/>
      <to sec="1071205547" usec="0"/>
    </slice>
    <from sec="1071205367" usec="0"/>
    <to sec="1071205547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.825791,1.66178,020,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
1646[label="201.120.101.28;d;253pkt 253fpkt", shape=hexagon, color=black];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 201.120.101.28:0}[69.5652%]&lt;BR/&gt;{*:80, 201.120.101.28:*}[30.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (69.5652%)&lt;BR/&gt; 80: (15.2174%)&lt;BR/&gt; 37242: (0.197628%)&lt;BR/&gt; 37232: (0.197628%)&lt;BR/&gt; 37214: (0.197628%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="201.120.101.28" src_port="80"/>
      <filter dst_ip="201.120.101.28"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="149.206.104.78"/>
      <from sec="1071205378" usec="0"/>
      <to sec="1071205477" usec="0"/>
    </slice>
    <from sec="1071205378" usec="0"/>
    <to sec="1071205477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
830[label="149.206.218.233;d;172pkt 172fpkt", shape=diamond, color=yellow];
831[label="57.98.34.137;s;168pkt 168fpkt", shape=diamond, color=yellow];
2019[label="149.206.218.233;d;172pkt 172fpkt", shape=hexagon, color=black];
3136[label="57.98.34.137;169pkt 169fpkt", shape=pentagon, color=darkviolet];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.98.34.137:80, 149.206.218.233:*}[97.1098%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1347: (0.293686%)&lt;BR/&gt; 1346: (0.293686%)&lt;BR/&gt; 1345: (0.293686%)&lt;BR/&gt; 1344: (0.293686%)&gt;];
}
830--831[label="1;168pkt 168fpkt"];
830--2019[label="1;172pkt 172fpkt"];
830--2103[label="0.00581395;1pkt 1fpkt"];
830--3136[label="0.994083;168pkt 168fpkt"];
831--2019[label="1;168pkt 168fpkt"];
831--2103[label="0.00595238;1pkt 1fpkt"];
831--3136[label="1;168pkt 168fpkt"];
2019--2103[label="0.00581395;1pkt 1fpkt"];
2019--3136[label="0.994083;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.218.233" src_ip="57.98.34.137" src_port="80"/>
    </slice>
    <from sec="1071205232" usec="0"/>
    <to sec="1071205823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
842[label="149.206.236.212;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.95.135.224:80, 149.206.236.212:1247}[50%]&lt;BR/&gt;{216.95.135.224:80, 149.206.236.212:1249}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1249: (25%)&lt;BR/&gt; 1247: (25%)&gt;];
}
842--1767[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.236.212" dst_port="1249" src_ip="216.95.135.224" src_port="80"/>
      <filter dst_ip="149.206.236.212" dst_port="1247" src_ip="216.95.135.224" src_port="80"/>
    </slice>
    <from sec="1071205466" usec="0"/>
    <to sec="1071205490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.888426,1.57451,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
176[label="196.57.66.99s;1pkt 1fpkt", shape=rectangle, color=red];
849[label="196.57.66.99;s;138pkt 138fpkt", shape=diamond, color=yellow];
2897[label="196.57.66.99;144pkt 144fpkt", shape=pentagon, color=darkviolet];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.57.66.99:6667, *:*}[48.6111%]&lt;BR/&gt;{196.57.66.99:*, *:113}[36.8056%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (24.2049%)&lt;BR/&gt; 113: (18.1979%)&lt;BR/&gt; 1080: (2.12014%)&lt;BR/&gt; 80: (1.76678%)&lt;BR/&gt; 8080: (1.41343%)&gt;];
}
176--849[label="1;1pkt 1fpkt"];
176--2897[label="1;1pkt 1fpkt"];
849--2105[label="0.0144928;2pkt 2fpkt"];
849--2897[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter src_ip="196.57.66.99" src_port="6667"/>
      <filter dst_port="113" src_ip="196.57.66.99"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
370[label="200.180.6.64;d;328pkt 328fpkt", shape=diamond, color=yellow];
698[label="56.48.146.124;s;2pkt 2fpkt", shape=diamond, color=yellow];
1356[label="217.156.78.250;s;72pkt 72fpkt", shape=diamond, color=yellow];
1838[label="200.180.6.64;d;221pkt 221fpkt", shape=hexagon, color=black];
2170[label="57.98.73.4;17pkt 17fpkt", shape=pentagon, color=darkviolet];
2293[label="217.171.169.20;26pkt 26fpkt", shape=pentagon, color=darkviolet];
2666[label="205.28.89.67;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2873[label="213.0.4.96;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3003[label="213.3.78.116;39pkt 39fpkt", shape=pentagon, color=darkviolet];
3057[label="56.48.146.124;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3314[label="34.101.216.163;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3676[label="217.224.48.218;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3870[label="217.156.78.250;78pkt 78fpkt", shape=pentagon, color=darkviolet];
3924[label="57.98.73.4;18pkt 18fpkt", shape=invtriangle, color=brown];
3997[label="217.171.169.20;26pkt 26fpkt", shape=invtriangle, color=brown];
4203[label="205.28.89.67;21pkt 21fpkt", shape=invtriangle, color=brown];
4405[label="56.48.146.124;2pkt 2fpkt", shape=invtriangle, color=brown];
4734[label="217.224.48.218;3pkt 3fpkt", shape=invtriangle, color=brown];
4881[label="57.98.73.4;17pkt 17fpkt", shape=invhouse, color=bisque];
5109[label="56.48.146.124;2pkt 2fpkt", shape=invhouse, color=bisque];
5272[label="217.224.48.218;3pkt 3fpkt", shape=invhouse, color=bisque];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 200.180.6.64:20572}[37.6812%]&lt;BR/&gt;{217.156.78.250:8284, 200.180.6.64:*}[22.6087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20572: (16.044%)&lt;BR/&gt; 8284: (14.7802%)&lt;BR/&gt; 29003: (5.05495%)&lt;BR/&gt; 17078: (2.8022%)&lt;BR/&gt; 23200: (1.53846%)&gt;];
}
370--698[label="1;2pkt 2fpkt"];
370--854[label="1;11pkt 11fpkt"];
370--1356[label="1;72pkt 72fpkt"];
370--1838[label="1;221pkt 221fpkt"];
370--2170[label="1;17pkt 17fpkt"];
370--2293[label="1;26pkt 26fpkt"];
370--2666[label="0.761905;16pkt 16fpkt"];
370--2873[label="1;3pkt 3fpkt"];
370--3003[label="0.846154;33pkt 33fpkt"];
370--3057[label="1;2pkt 2fpkt"];
370--3314[label="1;6pkt 6fpkt"];
370--3676[label="1;3pkt 3fpkt"];
370--3870[label="0.923077;72pkt 72fpkt"];
370--3924[label="1;18pkt 18fpkt"];
370--3997[label="1;26pkt 26fpkt"];
370--4203[label="0.761905;16pkt 16fpkt"];
370--4405[label="1;2pkt 2fpkt"];
370--4734[label="1;3pkt 3fpkt"];
370--4881[label="1;17pkt 17fpkt"];
370--5109[label="1;2pkt 2fpkt"];
370--5272[label="1;3pkt 3fpkt"];
698--1838[label="1;2pkt 2fpkt"];
698--3057[label="1;2pkt 2fpkt"];
698--4405[label="1;2pkt 2fpkt"];
698--5109[label="1;2pkt 2fpkt"];
1356--1838[label="0.652778;47pkt 47fpkt"];
1356--3870[label="1;72pkt 72fpkt"];
1838--2170[label="0.470588;8pkt 8fpkt"];
1838--2293[label="0.461538;12pkt 12fpkt"];
1838--2666[label="0.47619;10pkt 10fpkt"];
1838--2873[label="1;3pkt 3fpkt"];
1838--3003[label="0.435897;17pkt 17fpkt"];
1838--3057[label="1;2pkt 2fpkt"];
1838--3314[label="1;6pkt 6fpkt"];
1838--3676[label="1;3pkt 3fpkt"];
1838--3870[label="0.602564;47pkt 47fpkt"];
1838--3924[label="0.5;9pkt 9fpkt"];
1838--3997[label="0.461538;12pkt 12fpkt"];
1838--4203[label="0.47619;10pkt 10fpkt"];
1838--4405[label="1;2pkt 2fpkt"];
1838--4734[label="1;3pkt 3fpkt"];
1838--4881[label="0.470588;8pkt 8fpkt"];
1838--5109[label="1;2pkt 2fpkt"];
1838--5272[label="1;3pkt 3fpkt"];
2170--3924[label="1;17pkt 17fpkt"];
2170--4881[label="1;17pkt 17fpkt"];
2293--3997[label="1;26pkt 26fpkt"];
2666--4203[label="1;21pkt 21fpkt"];
3057--4405[label="1;2pkt 2fpkt"];
3057--5109[label="1;2pkt 2fpkt"];
3676--4734[label="1;3pkt 3fpkt"];
3676--5272[label="1;3pkt 3fpkt"];
3924--4881[label="1;17pkt 17fpkt"];
4405--5109[label="1;2pkt 2fpkt"];
4734--5272[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.180.6.64" dst_port="20572"/>
      <filter dst_ip="200.180.6.64" src_ip="217.156.78.250" src_port="8284"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="200.180.1.69"/>
      <from sec="1071205201" usec="0"/>
      <to sec="1071206029" usec="0"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
734[label="201.26.204.138;s;109pkt 109fpkt", shape=diamond, color=yellow];
883[label="160.188.20.88;d;117pkt 117fpkt", shape=diamond, color=yellow];
1794[label="201.26.204.138;s;108pkt 108fpkt", shape=hexagon, color=black];
3147[label="201.26.204.138;111pkt 111fpkt", shape=pentagon, color=darkviolet];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.26.204.138:*, 160.188.20.88:80}[88.4298%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8876%)&lt;BR/&gt; 46652: (0.449438%)&lt;BR/&gt; 46651: (0.449438%)&lt;BR/&gt; 46650: (0.449438%)&lt;BR/&gt; 46649: (0.449438%)&gt;];
}
734--883[label="0.981651;107pkt 107fpkt"];
734--1794[label="1;108pkt 108fpkt"];
734--2105[label="0.00917431;1pkt 1fpkt"];
734--2107[label="0.00917431;1pkt 1fpkt"];
734--2110[label="0.0183486;2pkt 2fpkt"];
734--3147[label="1;109pkt 109fpkt"];
883--1794[label="0.990741;107pkt 107fpkt"];
883--1971[label="0.00854701;1pkt 1fpkt"];
883--2105[label="0.017094;2pkt 2fpkt"];
883--2107[label="0.025641;3pkt 3fpkt"];
883--2110[label="0.00854701;1pkt 1fpkt"];
883--3147[label="0.963964;107pkt 107fpkt"];
883--3369[label="0.00854701;1pkt 1fpkt"];
883--3853[label="1;5pkt 5fpkt"];
883--4568[label="0.00854701;1pkt 1fpkt"];
1794--2105[label="0.00925926;1pkt 1fpkt"];
1794--2107[label="0.00925926;1pkt 1fpkt"];
1794--2110[label="0.00925926;1pkt 1fpkt"];
1794--3147[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.20.88" dst_port="80" src_ip="201.26.204.138"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
278[label="201.123.55.27;s;126pkt 126fpkt", shape=diamond, color=yellow];
423[label="145.166.34.62;d;290pkt 290fpkt", shape=diamond, color=yellow];
590[label="201.120.165.149;d;264pkt 264fpkt", shape=diamond, color=yellow];
821[label="58.253.214.65;s;32pkt 32fpkt", shape=diamond, color=yellow];
1296[label="205.1.41.160;s;7pkt 7fpkt", shape=diamond, color=yellow];
1563[label="205.1.41.142;s;4pkt 4fpkt", shape=diamond, color=yellow];
2161[label="205.1.42.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2491[label="205.1.45.44;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2563[label="205.1.44.53;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2584[label="205.1.45.56;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2598[label="205.1.44.57;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2846[label="205.1.45.92;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2944[label="205.1.45.106;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3288[label="205.1.41.160;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3407[label="205.1.41.177;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3497[label="211.133.48.190;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3526[label="219.138.166.195;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3592[label="144.65.59.206;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4106[label="205.1.45.44;4pkt 4fpkt", shape=invtriangle, color=brown];
4161[label="205.1.45.56;4pkt 4fpkt", shape=invtriangle, color=brown];
4301[label="205.1.45.92;7pkt 7fpkt", shape=invtriangle, color=brown];
4521[label="205.1.41.160;7pkt 7fpkt", shape=invtriangle, color=brown];
4589[label="205.1.41.177;3pkt 3fpkt", shape=invtriangle, color=brown];
4650[label="219.138.166.195;9pkt 9fpkt", shape=invtriangle, color=brown];
4972[label="205.1.45.44;4pkt 4fpkt", shape=invhouse, color=bisque];
5163[label="205.1.41.160;7pkt 7fpkt", shape=invhouse, color=bisque];
5225[label="219.138.166.195;9pkt 9fpkt", shape=invhouse, color=bisque];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 145.166.34.62:*}[34.7756%]&lt;BR/&gt;{*:80, 201.120.165.149:*}[34.2949%]&lt;BR/&gt;{201.123.55.27:80, *:*}[20.1923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.5965%)&lt;BR/&gt; 1863: (7.25146%)&lt;BR/&gt; 0: (3.97661%)&lt;BR/&gt; 53: (0.818713%)&lt;BR/&gt; 32770: (0.643275%)&gt;];
}
278--299[label="0.00793651;1pkt 1fpkt"];
278--423[label="0.0396825;5pkt 5fpkt"];
278--460[label="0.015873;2pkt 2fpkt"];
278--461[label="0.00793651;1pkt 1fpkt"];
278--533[label="0.00793651;1pkt 1fpkt"];
278--590[label="0.690476;87pkt 87fpkt"];
278--761[label="0.031746;4pkt 4fpkt"];
278--1645[label="0.00793651;1pkt 1fpkt"];
278--1656[label="0.00793651;1pkt 1fpkt"];
278--1671[label="0.00877193;1pkt 1fpkt"];
278--1698[label="0.00793651;1pkt 1fpkt"];
278--2065[label="0.00793651;1pkt 1fpkt"];
278--2103[label="0.0793651;10pkt 10fpkt"];
423--454[label="0.0172414;5pkt 5fpkt"];
423--524[label="0.0257732;5pkt 5fpkt"];
423--606[label="0.00344828;1pkt 1fpkt"];
423--614[label="0.00689655;2pkt 2fpkt"];
423--738[label="0.00344828;1pkt 1fpkt"];
423--770[label="0.0283688;4pkt 4fpkt"];
423--815[label="0.0151515;2pkt 2fpkt"];
423--821[label="1;32pkt 32fpkt"];
423--898[label="0.0229885;2pkt 2fpkt"];
423--918[label="0.056962;9pkt 9fpkt"];
423--1009[label="0.043956;4pkt 4fpkt"];
423--1097[label="0.166667;1pkt 1fpkt"];
423--1142[label="0.0515464;5pkt 5fpkt"];
423--1279[label="0.0128205;1pkt 1fpkt"];
423--1296[label="0.285714;2pkt 2fpkt"];
423--1563[label="0.5;2pkt 2fpkt"];
423--1570[label="0.04;2pkt 2fpkt"];
423--1729[label="0.0265957;5pkt 5fpkt"];
423--1772[label="0.0482759;14pkt 14fpkt"];
423--2016[label="0.04;6pkt 6fpkt"];
423--2027[label="0.166667;1pkt 1fpkt"];
423--2103[label="0.117241;34pkt 34fpkt"];
423--2152[label="0.0217391;1pkt 1fpkt"];
423--2161[label="1;1pkt 1fpkt"];
423--2257[label="0.2;1pkt 1fpkt"];
423--2491[label="0.25;1pkt 1fpkt"];
423--2508[label="0.0246914;4pkt 4fpkt"];
423--2563[label="0.25;1pkt 1fpkt"];
423--2584[label="0.2;1pkt 1fpkt"];
423--2598[label="0.333333;1pkt 1fpkt"];
423--2604[label="0.382353;26pkt 26fpkt"];
423--2777[label="0.0149254;1pkt 1fpkt"];
423--2781[label="0.021978;2pkt 2fpkt"];
423--2815[label="0.0363636;2pkt 2fpkt"];
423--2846[label="0.142857;1pkt 1fpkt"];
423--2856[label="0.142857;1pkt 1fpkt"];
423--2905[label="0.322917;31pkt 31fpkt"];
423--2914[label="0.166667;1pkt 1fpkt"];
423--2944[label="0.333333;2pkt 2fpkt"];
423--3015[label="0.02;1pkt 1fpkt"];
423--3059[label="0.166667;1pkt 1fpkt"];
423--3075[label="0.046729;5pkt 5fpkt"];
423--3132[label="0.0505618;9pkt 9fpkt"];
423--3237[label="0.0172414;5pkt 5fpkt"];
423--3288[label="0.285714;2pkt 2fpkt"];
423--3342[label="0.0148148;2pkt 2fpkt"];
423--3407[label="0.333333;1pkt 1fpkt"];
423--3432[label="0.2;1pkt 1fpkt"];
423--3526[label="0.444444;4pkt 4fpkt"];
423--3585[label="0.0487805;2pkt 2fpkt"];
423--3592[label="1;18pkt 18fpkt"];
423--3613[label="0.0724138;21pkt 21fpkt"];
423--3678[label="0.00344828;1pkt 1fpkt"];
423--3722[label="0.0517241;15pkt 15fpkt"];
423--3871[label="0.0140845;1pkt 1fpkt"];
423--4106[label="0.25;1pkt 1fpkt"];
423--4161[label="0.25;1pkt 1fpkt"];
423--4266[label="0.021978;2pkt 2fpkt"];
423--4301[label="0.142857;1pkt 1fpkt"];
423--4331[label="0.322917;31pkt 31fpkt"];
423--4335[label="0.166667;1pkt 1fpkt"];
423--4381[label="0.02;1pkt 1fpkt"];
423--4406[label="0.166667;1pkt 1fpkt"];
423--4439[label="0.0505618;9pkt 9fpkt"];
423--4521[label="0.285714;2pkt 2fpkt"];
423--4549[label="0.0148148;2pkt 2fpkt"];
423--4589[label="0.333333;1pkt 1fpkt"];
423--4603[label="0.2;1pkt 1fpkt"];
423--4650[label="0.444444;4pkt 4fpkt"];
423--4682[label="0.0487805;2pkt 2fpkt"];
423--4698[label="0.0724138;21pkt 21fpkt"];
423--4736[label="0.00344828;1pkt 1fpkt"];
423--4972[label="0.25;1pkt 1fpkt"];
423--5053[label="0.021978;2pkt 2fpkt"];
423--5078[label="0.322917;31pkt 31fpkt"];
423--5097[label="0.02;1pkt 1fpkt"];
423--5121[label="0.0505618;9pkt 9fpkt"];
423--5163[label="0.285714;2pkt 2fpkt"];
423--5176[label="0.0148148;2pkt 2fpkt"];
423--5225[label="0.444444;4pkt 4fpkt"];
423--5244[label="0.0487805;2pkt 2fpkt"];
590--690[label="0.00378788;1pkt 1fpkt"];
590--787[label="0.00757576;2pkt 2fpkt"];
590--1209[label="0.00378788;1pkt 1fpkt"];
590--1251[label="0.0235294;2pkt 2fpkt"];
590--1337[label="0.00378788;1pkt 1fpkt"];
590--1723[label="1;115pkt 115fpkt"];
590--1985[label="0.00378788;1pkt 1fpkt"];
590--2047[label="0.00378788;1pkt 1fpkt"];
590--2090[label="0.00378788;1pkt 1fpkt"];
590--2103[label="0.00757576;2pkt 2fpkt"];
590--2105[label="0.00378788;1pkt 1fpkt"];
590--2106[label="0.00757576;2pkt 2fpkt"];
590--2155[label="0.00757576;2pkt 2fpkt"];
590--2480[label="0.0131579;1pkt 1fpkt"];
590--2813[label="0.166667;2pkt 2fpkt"];
590--2889[label="0.00378788;1pkt 1fpkt"];
590--3226[label="0.0106383;1pkt 1fpkt"];
590--3311[label="0.744186;64pkt 64fpkt"];
590--3468[label="0.0333333;1pkt 1fpkt"];
590--3497[label="1;11pkt 11fpkt"];
590--3913[label="0.00757576;2pkt 2fpkt"];
590--4099[label="0.0133333;1pkt 1fpkt"];
590--4325[label="0.00378788;1pkt 1fpkt"];
590--4480[label="0.0106383;1pkt 1fpkt"];
590--4537[label="0.744186;64pkt 64fpkt"];
590--4871[label="0.00757576;2pkt 2fpkt"];
590--5170[label="0.744186;64pkt 64fpkt"];
1296--3288[label="1;7pkt 7fpkt"];
1296--4521[label="1;7pkt 7fpkt"];
1296--5163[label="1;7pkt 7fpkt"];
2491--4106[label="1;4pkt 4fpkt"];
2491--4972[label="1;4pkt 4fpkt"];
2584--4161[label="1;4pkt 4fpkt"];
2846--4301[label="1;7pkt 7fpkt"];
3288--4521[label="1;7pkt 7fpkt"];
3288--5163[label="1;7pkt 7fpkt"];
3407--4589[label="1;3pkt 3fpkt"];
3526--4650[label="1;9pkt 9fpkt"];
3526--5225[label="1;9pkt 9fpkt"];
4106--4972[label="1;4pkt 4fpkt"];
4521--5163[label="1;7pkt 7fpkt"];
4650--5225[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="201.123.55.27" src_port="80"/>
      <filter dst_ip="145.166.34.62" src_port="80"/>
      <filter dst_ip="201.120.165.149" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
540[label="217.49.137.64;s;1964pkt 1964fpkt", shape=diamond, color=yellow];
906[label="201.118.220.68;d;29pkt 29fpkt", shape=diamond, color=yellow];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.49.137.64:*, *:*}[98.5944%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (1.40492%)&lt;BR/&gt; 40336: (0.0752634%)&lt;BR/&gt; 31895: (0.0752634%)&lt;BR/&gt; 27011: (0.0752634%)&lt;BR/&gt; 63248: (0.0501756%)&gt;];
}
540--906[label="0.0344828;1pkt 1fpkt"];
906--2250[label="0.0833333;1pkt 1fpkt"];
906--2342[label="0.1;1pkt 1fpkt"];
906--2355[label="0.0909091;1pkt 1fpkt"];
906--2372[label="0.111111;1pkt 1fpkt"];
906--2380[label="0.0909091;1pkt 1fpkt"];
906--3972[label="0.0833333;1pkt 1fpkt"];
906--4031[label="0.0833333;1pkt 1fpkt"];
906--4044[label="0.0909091;1pkt 1fpkt"];
906--4907[label="0.0833333;1pkt 1fpkt"];
906--4936[label="0.0833333;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="217.49.137.64"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,053,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
646[label="145.166.211.247;d;156pkt 156fpkt", shape=diamond, color=yellow];
802[label="192.108.225.132;s;25pkt 25fpkt", shape=diamond, color=yellow];
2913[label="82.26.8.102;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.108.226.204:80, 145.166.211.247:*}[24.2236%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3949: (0.534759%)&lt;BR/&gt; 3795: (0.534759%)&lt;BR/&gt; 3792: (0.534759%)&lt;BR/&gt; 3787: (0.534759%)&gt;];
}
646--675[label="0.00694444;1pkt 1fpkt"];
646--802[label="1;25pkt 25fpkt"];
646--911[label="0.0344828;1pkt 1fpkt"];
646--924[label="0.0188679;1pkt 1fpkt"];
646--1141[label="0.0434783;6pkt 6fpkt"];
646--1143[label="0.041958;6pkt 6fpkt"];
646--1227[label="0.00961538;1pkt 1fpkt"];
646--1264[label="0.0576923;3pkt 3fpkt"];
646--1297[label="0.0384615;2pkt 2fpkt"];
646--1991[label="0.00961538;1pkt 1fpkt"];
646--2018[label="0.0384615;2pkt 2fpkt"];
646--2658[label="0.0384615;6pkt 6fpkt"];
646--2817[label="0.0408163;6pkt 6fpkt"];
646--2913[label="0.166667;1pkt 1fpkt"];
646--3193[label="0.047619;1pkt 1fpkt"];
646--3236[label="0.0967742;3pkt 3fpkt"];
646--3272[label="0.625;10pkt 10fpkt"];
646--3374[label="0.016129;1pkt 1fpkt"];
646--3468[label="0.0333333;1pkt 1fpkt"];
646--3586[label="0.423913;39pkt 39fpkt"];
646--3887[label="0.00641026;1pkt 1fpkt"];
646--4201[label="0.0384615;6pkt 6fpkt"];
646--4466[label="0.047619;1pkt 1fpkt"];
646--4488[label="0.0967742;3pkt 3fpkt"];
646--4571[label="0.016129;1pkt 1fpkt"];
646--4683[label="0.423913;39pkt 39fpkt"];
646--4860[label="0.00641026;1pkt 1fpkt"];
646--5025[label="0.0384615;6pkt 6fpkt"];
646--5187[label="0.016129;1pkt 1fpkt"];
646--5245[label="0.423913;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.211.247" src_ip="192.108.226.204" src_port="80"/>
    </slice>
    <from sec="1071205252" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
860[label="149.207.88.171;d;106pkt 106fpkt", shape=diamond, color=yellow];
1784[label="149.207.88.171;d;54pkt 54fpkt", shape=hexagon, color=black];
3841[label="148.45.221.244;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 149.207.88.171:25}[81.3084%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 56910: (0.621118%)&lt;BR/&gt; 56612: (0.621118%)&lt;BR/&gt; 56366: (0.621118%)&lt;BR/&gt; 56355: (0.621118%)&gt;];
}
860--985[label="0.027027;2pkt 2fpkt"];
860--1784[label="1;54pkt 54fpkt"];
860--3896[label="0.0224719;2pkt 2fpkt"];
1784--3896[label="0.0185185;1pkt 1fpkt"];
3841--4835[label="1;1pkt 1fpkt"];
3841--5320[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.88.171" dst_port="25"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
60[label="160.188.109.175d;1pkt 1fpkt", shape=rectangle, color=red];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.216.86.40:41623, 160.188.109.175:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41623: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
60--941[label="1;1pkt 1fpkt"];
60--1291[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.109.175" dst_port="25" src_ip="57.216.86.40" src_port="41623"/>
    </slice>
    <from sec="1071205768" usec="0"/>
    <to sec="1071205780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="61.208.165.152"/>
      <from sec="1071205406" usec="0"/>
      <to sec="1071205679" usec="0"/>
    </slice>
    <from sec="1071205406" usec="0"/>
    <to sec="1071205679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
950[label="201.118.193.74;d;73pkt 73fpkt", shape=diamond, color=yellow];
951[label="216.175.2.41;s;78pkt 78fpkt", shape=diamond, color=yellow];
2471[label="216.175.2.41;78pkt 78fpkt", shape=pentagon, color=darkviolet];
4092[label="216.175.2.41;77pkt 77fpkt", shape=invtriangle, color=brown];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.175.2.41:80, 201.118.193.74:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1949: (0.653595%)&lt;BR/&gt; 1948: (0.653595%)&lt;BR/&gt; 1947: (0.653595%)&lt;BR/&gt; 1946: (0.653595%)&gt;];
}
950--951[label="1;73pkt 73fpkt"];
950--2471[label="1;73pkt 73fpkt"];
950--4092[label="0.986301;72pkt 72fpkt"];
951--2103[label="0.0512821;4pkt 4fpkt"];
951--2471[label="1;78pkt 78fpkt"];
951--4092[label="1;77pkt 77fpkt"];
2471--4092[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="201.118.193.74" src_ip="216.175.2.41" src_port="80"/>
    </slice>
    <from sec="1071205466" usec="0"/>
    <to sec="1071205649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
378[label="145.71.96.213;d;56pkt 56fpkt", shape=diamond, color=yellow];
691[label="76.0.106.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
701[label="217.152.14.155;s;1pkt 1fpkt", shape=diamond, color=yellow];
869[label="213.29.187.230;s;1pkt 1fpkt", shape=diamond, color=yellow];
971[label="76.88.221.231;s;1pkt 1fpkt", shape=diamond, color=yellow];
982[label="76.133.146.248;s;1pkt 1fpkt", shape=diamond, color=yellow];
1715[label="217.152.14.155;s;1pkt 1fpkt", shape=hexagon, color=black];
2722[label="213.29.203.74;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3256[label="217.152.14.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3771[label="76.88.221.231;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4499[label="217.152.14.155;1pkt 1fpkt", shape=invtriangle, color=brown];
5152[label="217.152.14.155;1pkt 1fpkt", shape=invhouse, color=bisque];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 145.71.96.213:*}[64.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (34.3284%)&lt;BR/&gt; 3351: (4.47761%)&lt;BR/&gt; 9662: (2.23881%)&lt;BR/&gt; 3157: (2.23881%)&lt;BR/&gt; 80: (2.23881%)&gt;];
}
378--690[label="0.0357143;2pkt 2fpkt"];
378--691[label="1;1pkt 1fpkt"];
378--701[label="1;1pkt 1fpkt"];
378--869[label="1;1pkt 1fpkt"];
378--971[label="1;1pkt 1fpkt"];
378--982[label="1;1pkt 1fpkt"];
378--1715[label="1;1pkt 1fpkt"];
378--2722[label="1;1pkt 1fpkt"];
378--3256[label="1;1pkt 1fpkt"];
378--3771[label="1;1pkt 1fpkt"];
378--4499[label="1;1pkt 1fpkt"];
378--5152[label="1;1pkt 1fpkt"];
701--1715[label="1;1pkt 1fpkt"];
701--3256[label="1;1pkt 1fpkt"];
701--4499[label="1;1pkt 1fpkt"];
701--5152[label="1;1pkt 1fpkt"];
971--3771[label="1;1pkt 1fpkt"];
1715--3256[label="1;1pkt 1fpkt"];
1715--4499[label="1;1pkt 1fpkt"];
1715--5152[label="1;1pkt 1fpkt"];
3256--4499[label="1;1pkt 1fpkt"];
3256--5152[label="1;1pkt 1fpkt"];
4499--5152[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.71.96.213" src_port="4662"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
455[label="160.188.106.10;d;1031pkt 1031fpkt", shape=diamond, color=yellow];
978[label="160.188.72.65;d;42pkt 42fpkt", shape=diamond, color=yellow];
1041[label="59.26.97.138;s;51pkt 51fpkt", shape=diamond, color=yellow];
1126[label="201.29.205.201;s;251pkt 251fpkt", shape=diamond, color=yellow];
1419[label="59.26.1.82;s;39pkt 39fpkt", shape=diamond, color=yellow];
1851[label="145.166.56.104;d;46pkt 46fpkt", shape=hexagon, color=black];
2139[label="57.216.86.0;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2241[label="57.216.86.12;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2446[label="57.216.86.38;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2548[label="58.32.23.51;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2559[label="57.216.86.52;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2623[label="201.26.211.61;13pkt 13fpkt", shape=pentagon, color=darkviolet];
2772[label="59.26.1.82;40pkt 40fpkt", shape=pentagon, color=darkviolet];
2955[label="216.50.174.108;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3563[label="201.29.205.201;271pkt 271fpkt", shape=pentagon, color=darkviolet];
3729[label="201.25.102.224;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3747[label="208.184.216.226;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3782[label="201.181.100.233;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3803[label="200.45.140.236;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3904[label="57.216.86.0;15pkt 15fpkt", shape=invtriangle, color=brown];
3966[label="57.216.86.12;9pkt 9fpkt", shape=invtriangle, color=brown];
4079[label="57.216.86.38;12pkt 12fpkt", shape=invtriangle, color=brown];
4180[label="201.26.211.61;13pkt 13fpkt", shape=invtriangle, color=brown];
4262[label="59.26.1.82;40pkt 40fpkt", shape=invtriangle, color=brown];
4351[label="216.50.174.108;34pkt 34fpkt", shape=invtriangle, color=brown];
4671[label="201.29.205.201;271pkt 271fpkt", shape=invtriangle, color=brown];
4779[label="208.184.216.226;12pkt 12fpkt", shape=invtriangle, color=brown];
4800[label="201.181.100.233;26pkt 26fpkt", shape=invtriangle, color=brown];
4812[label="200.45.140.236;3pkt 3fpkt", shape=invtriangle, color=brown];
4893[label="57.216.86.8;3pkt 3fpkt", shape=invhouse, color=bisque];
4904[label="57.216.86.12;9pkt 9fpkt", shape=invhouse, color=bisque];
5010[label="201.26.211.61;13pkt 13fpkt", shape=invhouse, color=bisque];
5020[label="58.67.188.63;43pkt 43fpkt", shape=invhouse, color=bisque];
5050[label="59.26.1.82;40pkt 40fpkt", shape=invhouse, color=bisque];
5085[label="216.50.174.108;34pkt 34fpkt", shape=invhouse, color=bisque];
5237[label="201.29.205.201;271pkt 271fpkt", shape=invhouse, color=bisque];
5294[label="208.184.216.226;12pkt 12fpkt", shape=invhouse, color=bisque];
5306[label="201.181.100.233;26pkt 26fpkt", shape=invhouse, color=bisque];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 160.188.106.10:*}[51.1145%]&lt;BR/&gt;{201.29.205.201:*, 160.188.106.10:80}[20.8301%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (24.5661%)&lt;BR/&gt; 80: (24.3181%)&lt;BR/&gt; 113: (0.903294%)&lt;BR/&gt; 4647: (0.141693%)&lt;BR/&gt; 0: (0.141693%)&gt;];
}
455--522[label="0.000969932;1pkt 1fpkt"];
455--985[label="0.0540541;4pkt 4fpkt"];
455--1026[label="0.448276;26pkt 26fpkt"];
455--1038[label="0.326923;17pkt 17fpkt"];
455--1041[label="0.54902;28pkt 28fpkt"];
455--1113[label="0.407407;22pkt 22fpkt"];
455--1126[label="1;251pkt 251fpkt"];
455--1159[label="0.326531;16pkt 16fpkt"];
455--1164[label="0.321429;9pkt 9fpkt"];
455--1169[label="0.581818;32pkt 32fpkt"];
455--1414[label="0.518519;14pkt 14fpkt"];
455--1418[label="0.447368;17pkt 17fpkt"];
455--1419[label="0.333333;13pkt 13fpkt"];
455--1651[label="0.000969932;1pkt 1fpkt"];
455--1967[label="0.64;32pkt 32fpkt"];
455--1971[label="0.000969932;1pkt 1fpkt"];
455--2017[label="0.583333;14pkt 14fpkt"];
455--2043[label="0.326923;17pkt 17fpkt"];
455--2062[label="0.000969932;1pkt 1fpkt"];
455--2105[label="0.0184287;19pkt 19fpkt"];
455--2107[label="0.0213385;22pkt 22fpkt"];
455--2110[label="0.0203686;21pkt 21fpkt"];
455--2238[label="0.785714;11pkt 11fpkt"];
455--2241[label="0.111111;1pkt 1fpkt"];
455--2339[label="0.518519;14pkt 14fpkt"];
455--2356[label="0.378378;14pkt 14fpkt"];
455--2448[label="0.575758;19pkt 19fpkt"];
455--2516[label="0.333333;7pkt 7fpkt"];
455--2548[label="1;6pkt 6fpkt"];
455--2559[label="0.0909091;1pkt 1fpkt"];
455--2585[label="0.000969932;1pkt 1fpkt"];
455--2623[label="1;13pkt 13fpkt"];
455--2633[label="0.25;3pkt 3fpkt"];
455--2772[label="0.325;13pkt 13fpkt"];
455--2955[label="0.0882353;3pkt 3fpkt"];
455--2981[label="0.277778;5pkt 5fpkt"];
455--2991[label="0.313725;16pkt 16fpkt"];
455--3085[label="0.321429;9pkt 9fpkt"];
455--3249[label="0.392857;22pkt 22fpkt"];
455--3267[label="0.1;2pkt 2fpkt"];
455--3420[label="0.42623;26pkt 26fpkt"];
455--3563[label="0.926199;251pkt 251fpkt"];
455--3614[label="0.303571;17pkt 17fpkt"];
455--3729[label="1;26pkt 26fpkt"];
455--3747[label="0.333333;4pkt 4fpkt"];
455--3782[label="0.923077;24pkt 24fpkt"];
455--3803[label="0.333333;1pkt 1fpkt"];
455--3855[label="0.142857;2pkt 2fpkt"];
455--3896[label="0.0449438;4pkt 4fpkt"];
455--3966[label="0.111111;1pkt 1fpkt"];
455--4032[label="0.378378;14pkt 14fpkt"];
455--4081[label="0.558824;19pkt 19fpkt"];
455--4121[label="0.333333;7pkt 7fpkt"];
455--4162[label="0.000969932;1pkt 1fpkt"];
455--4180[label="1;13pkt 13fpkt"];
455--4262[label="0.325;13pkt 13fpkt"];
455--4351[label="0.0882353;3pkt 3fpkt"];
455--4368[label="0.313725;16pkt 16fpkt"];
455--4417[label="0.321429;9pkt 9fpkt"];
455--4506[label="0.1;2pkt 2fpkt"];
455--4671[label="0.926199;251pkt 251fpkt"];
455--4779[label="0.333333;4pkt 4fpkt"];
455--4800[label="0.923077;24pkt 24fpkt"];
455--4812[label="0.333333;1pkt 1fpkt"];
455--4904[label="0.111111;1pkt 1fpkt"];
455--4937[label="0.388889;14pkt 14fpkt"];
455--4958[label="0.575758;19pkt 19fpkt"];
455--4982[label="0.333333;7pkt 7fpkt"];
455--5010[label="1;13pkt 13fpkt"];
455--5020[label="0.372093;16pkt 16fpkt"];
455--5050[label="0.325;13pkt 13fpkt"];
455--5085[label="0.0882353;3pkt 3fpkt"];
455--5111[label="0.321429;9pkt 9fpkt"];
455--5156[label="0.1;2pkt 2fpkt"];
455--5237[label="0.926199;251pkt 251fpkt"];
455--5294[label="0.333333;4pkt 4fpkt"];
455--5306[label="0.923077;24pkt 24fpkt"];
978--1971[label="0.0238095;1pkt 1fpkt"];
978--2139[label="0.0666667;1pkt 1fpkt"];
978--2210[label="0.5;1pkt 1fpkt"];
978--2241[label="0.111111;1pkt 1fpkt"];
978--2446[label="0.181818;2pkt 2fpkt"];
978--2510[label="0.0909091;3pkt 3fpkt"];
978--2585[label="0.0238095;1pkt 1fpkt"];
978--2754[label="0.238095;10pkt 10fpkt"];
978--3904[label="0.0666667;1pkt 1fpkt"];
978--3949[label="0.333333;1pkt 1fpkt"];
978--3966[label="0.111111;1pkt 1fpkt"];
978--4079[label="0.166667;2pkt 2fpkt"];
978--4162[label="0.0238095;1pkt 1fpkt"];
978--4893[label="0.333333;1pkt 1fpkt"];
978--4904[label="0.111111;1pkt 1fpkt"];
1041--1397[label="0.06;3pkt 3fpkt"];
1041--1851[label="0.0217391;1pkt 1fpkt"];
1041--1855[label="0.0196078;1pkt 1fpkt"];
1041--1896[label="0.0784314;4pkt 4fpkt"];
1041--2078[label="0.0196078;1pkt 1fpkt"];
1126--2105[label="0.0717131;18pkt 18fpkt"];
1126--2107[label="0.0836653;21pkt 21fpkt"];
1126--2110[label="0.0796813;20pkt 20fpkt"];
1126--3563[label="1;251pkt 251fpkt"];
1126--4671[label="1;251pkt 251fpkt"];
1126--5237[label="1;251pkt 251fpkt"];
1419--1692[label="0.0512821;2pkt 2fpkt"];
1419--1896[label="0.025641;1pkt 1fpkt"];
1419--2772[label="1;39pkt 39fpkt"];
1419--4262[label="1;39pkt 39fpkt"];
1419--5050[label="1;39pkt 39fpkt"];
1851--1962[label="0.0869565;4pkt 4fpkt"];
1851--2103[label="0.195652;9pkt 9fpkt"];
1851--2230[label="0.0869565;4pkt 4fpkt"];
1851--3066[label="0.47619;10pkt 10fpkt"];
1851--3249[label="0.0217391;1pkt 1fpkt"];
1851--3959[label="0.0869565;4pkt 4fpkt"];
2139--3904[label="1;15pkt 15fpkt"];
2241--3966[label="1;9pkt 9fpkt"];
2241--4904[label="1;9pkt 9fpkt"];
2446--4079[label="1;11pkt 11fpkt"];
2623--4180[label="1;13pkt 13fpkt"];
2623--5010[label="1;13pkt 13fpkt"];
2772--4262[label="1;40pkt 40fpkt"];
2772--5050[label="1;40pkt 40fpkt"];
2955--4351[label="1;34pkt 34fpkt"];
2955--5085[label="1;34pkt 34fpkt"];
3563--4671[label="1;271pkt 271fpkt"];
3563--5237[label="1;271pkt 271fpkt"];
3747--4779[label="1;12pkt 12fpkt"];
3747--5294[label="1;12pkt 12fpkt"];
3782--4800[label="1;26pkt 26fpkt"];
3782--5306[label="1;26pkt 26fpkt"];
3803--4812[label="1;3pkt 3fpkt"];
3966--4904[label="1;9pkt 9fpkt"];
4180--5010[label="1;13pkt 13fpkt"];
4262--5050[label="1;40pkt 40fpkt"];
4351--5085[label="1;34pkt 34fpkt"];
4671--5237[label="1;271pkt 271fpkt"];
4779--5294[label="1;12pkt 12fpkt"];
4800--5306[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.106.10" src_port="25"/>
      <filter dst_ip="160.188.106.10" dst_port="80" src_ip="201.29.205.201"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
387[label="166.55.179.47;d;589pkt 589fpkt", shape=diamond, color=yellow];
579[label="34.201.189.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
695[label="211.196.67.81;s;1pkt 1fpkt", shape=diamond, color=yellow];
726[label="34.84.59.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
993[label="76.185.35.107;s;1pkt 1fpkt", shape=diamond, color=yellow];
1110[label="32.6.196.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
1681[label="34.201.189.46;s;1pkt 1fpkt", shape=hexagon, color=black];
1792[label="34.84.59.5;s;1pkt 1fpkt", shape=hexagon, color=black];
1993[label="166.55.179.47;d;589pkt 589fpkt", shape=hexagon, color=black];
2513[label="34.201.189.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3888[label="76.0.121.254;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 166.55.179.47:*}[82.6825%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (41.4141%)&lt;BR/&gt; 4661: (1.51515%)&lt;BR/&gt; 4663: (0.673401%)&lt;BR/&gt; 3306: (0.420875%)&lt;BR/&gt; 80: (0.420875%)&gt;];
}
387--579[label="1;1pkt 1fpkt"];
387--695[label="1;1pkt 1fpkt"];
387--726[label="1;1pkt 1fpkt"];
387--993[label="1;1pkt 1fpkt"];
387--1110[label="1;1pkt 1fpkt"];
387--1681[label="1;1pkt 1fpkt"];
387--1792[label="1;1pkt 1fpkt"];
387--1993[label="1;589pkt 589fpkt"];
387--2513[label="1;1pkt 1fpkt"];
387--3888[label="1;2pkt 2fpkt"];
579--1681[label="1;1pkt 1fpkt"];
579--1993[label="1;1pkt 1fpkt"];
579--2513[label="1;1pkt 1fpkt"];
695--1993[label="1;1pkt 1fpkt"];
726--1792[label="1;1pkt 1fpkt"];
726--1993[label="1;1pkt 1fpkt"];
993--1993[label="1;1pkt 1fpkt"];
1110--1993[label="1;1pkt 1fpkt"];
1681--1993[label="1;1pkt 1fpkt"];
1681--2513[label="1;1pkt 1fpkt"];
1792--1993[label="1;1pkt 1fpkt"];
1993--2513[label="1;1pkt 1fpkt"];
1993--3888[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.179.47" src_port="4662"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
1008[label="196.214.30.127;d;549pkt 549fpkt", shape=diamond, color=yellow];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 196.214.30.127:53}[98.725%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.1002%)&lt;BR/&gt; 32768: (2.09472%)&lt;BR/&gt; 1024: (1.36612%)&lt;BR/&gt; 32769: (1.18397%)&lt;BR/&gt; 1028: (0.546448%)&gt;];
}
1008--1531[label="0.010989;5pkt 5fpkt"];
1008--2104[label="0.00182149;1pkt 1fpkt"];
1008--2107[label="0.00182149;1pkt 1fpkt"];
1008--2460[label="0.00996016;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="196.214.30.127" dst_port="53"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
612[label="145.166.6.141;d;238pkt 238fpkt", shape=diamond, color=yellow];
1034[label="77.122.73.36;s;120pkt 120fpkt", shape=diamond, color=yellow];
1157[label="77.122.73.58;s;38pkt 38fpkt", shape=diamond, color=yellow];
2424[label="77.122.73.36;205pkt 205fpkt", shape=pentagon, color=darkviolet];
4069[label="77.122.73.36;205pkt 205fpkt", shape=invtriangle, color=brown];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.122.73.36:80, 145.166.6.141:*}[84.0816%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.938%)&lt;BR/&gt; 1676: (0.248139%)&lt;BR/&gt; 1674: (0.248139%)&lt;BR/&gt; 1673: (0.248139%)&lt;BR/&gt; 1672: (0.248139%)&gt;];
}
612--1034[label="1;120pkt 120fpkt"];
612--1157[label="1;38pkt 38fpkt"];
612--2103[label="0.0168067;4pkt 4fpkt"];
612--2424[label="0.965854;198pkt 198fpkt"];
612--4069[label="0.965854;198pkt 198fpkt"];
1034--2424[label="0.991667;119pkt 119fpkt"];
1034--4069[label="0.991667;119pkt 119fpkt"];
1157--2103[label="0.105263;4pkt 4fpkt"];
2424--4069[label="1;205pkt 205fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.6.141" src_ip="77.122.73.36" src_port="80"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945324,1.56671,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
98[label="221.45.39.99s;1pkt 1fpkt", shape=rectangle, color=red];
1045[label="58.74.87.99;s;6pkt 6fpkt", shape=diamond, color=yellow];
2899[label="58.74.87.99;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4330[label="58.74.87.99;5pkt 5fpkt", shape=invtriangle, color=brown];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.74.87.99:80, 201.118.239.88:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 23261: (11.7647%)&lt;BR/&gt; 24041: (8.82353%)&lt;BR/&gt; 23958: (8.82353%)&lt;BR/&gt; 23808: (8.82353%)&gt;];
}
98--373[label="1;1pkt 1fpkt"];
98--1045[label="1;1pkt 1fpkt"];
98--2899[label="1;1pkt 1fpkt"];
98--4330[label="1;1pkt 1fpkt"];
1045--2103[label="0.333333;2pkt 2fpkt"];
1045--2899[label="1;5pkt 5fpkt"];
1045--4330[label="1;5pkt 5fpkt"];
2899--4330[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="201.118.239.88" src_ip="58.74.87.99" src_port="80"/>
    </slice>
    <from sec="1071205316" usec="0"/>
    <to sec="1071205627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
964[label="149.206.250.187;d;9pkt 9fpkt", shape=diamond, color=yellow];
965[label="82.29.42.177;s;2pkt 2fpkt", shape=diamond, color=yellow];
3408[label="82.29.42.177;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4590[label="82.29.42.177;2pkt 2fpkt", shape=invtriangle, color=brown];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.21.20.42:80, 149.206.250.187:*}[77.7778%]&lt;BR/&gt;{82.29.42.177:80, 149.206.250.187:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1716: (13.3333%)&lt;BR/&gt; 1715: (13.3333%)&lt;BR/&gt; 1723: (3.33333%)&lt;BR/&gt; 1722: (3.33333%)&gt;];
}
964--965[label="1;2pkt 2fpkt"];
964--1071[label="1;7pkt 7fpkt"];
964--2103[label="0.111111;1pkt 1fpkt"];
964--2475[label="0.875;7pkt 7fpkt"];
964--3408[label="1;2pkt 2fpkt"];
964--4590[label="1;2pkt 2fpkt"];
964--4965[label="0.857143;6pkt 6fpkt"];
965--3408[label="1;2pkt 2fpkt"];
965--4590[label="1;2pkt 2fpkt"];
3408--4590[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.250.187" src_ip="78.21.20.42" src_port="80"/>
      <filter dst_ip="149.206.250.187" src_ip="82.29.42.177" src_port="80"/>
    </slice>
    <from sec="1071205537" usec="0"/>
    <to sec="1071205720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
1108[label="149.207.124.205;d;2pkt 2fpkt", shape=diamond, color=yellow];
1109[label="153.174.24.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
1900[label="153.174.24.170;s;1pkt 1fpkt", shape=hexagon, color=black];
3350[label="153.174.24.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4557[label="153.174.24.170;1pkt 1fpkt", shape=invtriangle, color=brown];
5181[label="153.174.24.170;1pkt 1fpkt", shape=invhouse, color=bisque];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.207.15.88:14298, 149.207.124.205:1092}[50%]&lt;BR/&gt;{153.174.24.170:33042, 149.207.124.205:1228}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33042: (42.8571%)&lt;BR/&gt; 1228: (42.8571%)&lt;BR/&gt; 14298: (7.14286%)&lt;BR/&gt; 1092: (7.14286%)&gt;];
}
1108--1109[label="1;1pkt 1fpkt"];
1108--1900[label="1;1pkt 1fpkt"];
1108--3350[label="1;1pkt 1fpkt"];
1108--4557[label="1;1pkt 1fpkt"];
1108--5181[label="1;1pkt 1fpkt"];
1109--1900[label="1;1pkt 1fpkt"];
1109--3350[label="1;1pkt 1fpkt"];
1109--4557[label="1;1pkt 1fpkt"];
1109--5181[label="1;1pkt 1fpkt"];
1900--3350[label="1;1pkt 1fpkt"];
1900--4557[label="1;1pkt 1fpkt"];
1900--5181[label="1;1pkt 1fpkt"];
3350--4557[label="1;1pkt 1fpkt"];
3350--5181[label="1;1pkt 1fpkt"];
4557--5181[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.124.205" dst_port="1228" src_ip="153.174.24.170" src_port="33042"/>
      <filter dst_ip="149.207.124.205" dst_port="1092" src_ip="216.207.15.88" src_port="14298"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
438[label="160.188.106.21;d;204pkt 204fpkt", shape=diamond, color=yellow];
562[label="145.166.50.12;d;168pkt 168fpkt", shape=diamond, color=yellow];
985[label="209.96.189.255;s;74pkt 74fpkt", shape=diamond, color=yellow];
1026[label="59.26.96.178;s;58pkt 58fpkt", shape=diamond, color=yellow];
1115[label="160.188.114.240;d;81pkt 81fpkt", shape=diamond, color=yellow];
1159[label="58.176.141.113;s;49pkt 49fpkt", shape=diamond, color=yellow];
1164[label="59.26.0.130;s;28pkt 28fpkt", shape=diamond, color=yellow];
1169[label="58.177.45.152;s;55pkt 55fpkt", shape=diamond, color=yellow];
1174[label="160.188.100.111;d;72pkt 72fpkt", shape=diamond, color=yellow];
1397[label="145.108.142.72;d;50pkt 50fpkt", shape=diamond, color=yellow];
1400[label="160.188.64.116;d;42pkt 42fpkt", shape=diamond, color=yellow];
1418[label="58.67.188.63;s;38pkt 38fpkt", shape=diamond, color=yellow];
1967[label="58.177.45.152;s;50pkt 50fpkt", shape=hexagon, color=black];
2001[label="160.188.106.21;d;156pkt 156fpkt", shape=hexagon, color=black];
2043[label="58.67.188.209;s;52pkt 52fpkt", shape=hexagon, color=black];
2238[label="201.25.45.12;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2356[label="201.25.105.28;37pkt 37fpkt", shape=pentagon, color=darkviolet];
2443[label="201.25.35.38;72pkt 72fpkt", shape=pentagon, color=darkviolet];
2448[label="201.25.91.38;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2516[label="201.16.112.47;21pkt 21fpkt", shape=pentagon, color=darkviolet];
2633[label="208.184.216.62;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2740[label="201.24.96.77;15pkt 15fpkt", shape=pentagon, color=darkviolet];
2779[label="213.210.156.82;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2983[label="201.30.203.112;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2991[label="58.176.141.113;51pkt 51fpkt", shape=pentagon, color=darkviolet];
3085[label="59.26.0.130;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3189[label="206.119.136.146;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3249[label="58.177.45.154;56pkt 56fpkt", shape=pentagon, color=darkviolet];
3420[label="59.26.96.178;61pkt 61fpkt", shape=pentagon, color=darkviolet];
3614[label="58.67.188.209;56pkt 56fpkt", shape=pentagon, color=darkviolet];
4032[label="201.25.105.28;37pkt 37fpkt", shape=invtriangle, color=brown];
4081[label="201.25.91.38;34pkt 34fpkt", shape=invtriangle, color=brown];
4121[label="201.16.112.47;21pkt 21fpkt", shape=invtriangle, color=brown];
4368[label="58.176.141.113;51pkt 51fpkt", shape=invtriangle, color=brown];
4417[label="59.26.0.130;28pkt 28fpkt", shape=invtriangle, color=brown];
4835[label="148.45.221.244;1pkt 1fpkt", shape=invtriangle, color=brown];
4937[label="201.25.105.28;36pkt 36fpkt", shape=invhouse, color=bisque];
4958[label="201.25.91.38;33pkt 33fpkt", shape=invhouse, color=bisque];
4982[label="201.16.112.47;21pkt 21fpkt", shape=invhouse, color=bisque];
5111[label="59.26.0.130;28pkt 28fpkt", shape=invhouse, color=bisque];
5320[label="148.45.221.244;1pkt 1fpkt", shape=invhouse, color=bisque];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, *:*}[74.2167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.4452%)&lt;BR/&gt; 53: (2.27738%)&lt;BR/&gt; 80: (1.04913%)&lt;BR/&gt; 0: (0.87001%)&lt;BR/&gt; 113: (0.435005%)&gt;];
}
438--522[label="0.00490196;1pkt 1fpkt"];
438--1113[label="0.0555556;3pkt 3fpkt"];
438--1159[label="0.102041;5pkt 5fpkt"];
438--1164[label="0.0357143;1pkt 1fpkt"];
438--1169[label="0.0363636;2pkt 2fpkt"];
438--1651[label="0.00490196;1pkt 1fpkt"];
438--1967[label="0.02;1pkt 1fpkt"];
438--1971[label="0.00490196;1pkt 1fpkt"];
438--2001[label="1;156pkt 156fpkt"];
438--2062[label="0.00490196;1pkt 1fpkt"];
438--2105[label="0.00980392;2pkt 2fpkt"];
438--2107[label="0.00490196;1pkt 1fpkt"];
438--2110[label="0.0147059;3pkt 3fpkt"];
438--2238[label="0.0714286;1pkt 1fpkt"];
438--2356[label="0.027027;1pkt 1fpkt"];
438--2448[label="0.212121;7pkt 7fpkt"];
438--2516[label="0.333333;7pkt 7fpkt"];
438--2585[label="0.00490196;1pkt 1fpkt"];
438--2633[label="0.0833333;1pkt 1fpkt"];
438--2740[label="0.133333;2pkt 2fpkt"];
438--2779[label="0.111111;1pkt 1fpkt"];
438--2981[label="0.111111;2pkt 2fpkt"];
438--2991[label="0.0980392;5pkt 5fpkt"];
438--3085[label="0.0357143;1pkt 1fpkt"];
438--3189[label="0.0588235;1pkt 1fpkt"];
438--3249[label="0.0535714;3pkt 3fpkt"];
438--4032[label="0.027027;1pkt 1fpkt"];
438--4081[label="0.205882;7pkt 7fpkt"];
438--4121[label="0.333333;7pkt 7fpkt"];
438--4162[label="0.00490196;1pkt 1fpkt"];
438--4368[label="0.0980392;5pkt 5fpkt"];
438--4417[label="0.0357143;1pkt 1fpkt"];
438--4937[label="0.0277778;1pkt 1fpkt"];
438--4958[label="0.212121;7pkt 7fpkt"];
438--4982[label="0.333333;7pkt 7fpkt"];
438--5111[label="0.0357143;1pkt 1fpkt"];
562--924[label="0.0188679;1pkt 1fpkt"];
562--985[label="0.0135135;1pkt 1fpkt"];
562--1026[label="0.224138;13pkt 13fpkt"];
562--1038[label="0.307692;16pkt 16fpkt"];
562--1041[label="0.137255;7pkt 7fpkt"];
562--1159[label="0.0816327;4pkt 4fpkt"];
562--1164[label="0.0714286;2pkt 2fpkt"];
562--1169[label="0.0727273;4pkt 4fpkt"];
562--1418[label="0.157895;6pkt 6fpkt"];
562--1967[label="0.08;4pkt 4fpkt"];
562--2043[label="0.307692;16pkt 16fpkt"];
562--2983[label="0.25;1pkt 1fpkt"];
562--2991[label="0.0784314;4pkt 4fpkt"];
562--3085[label="0.0714286;2pkt 2fpkt"];
562--3374[label="0.016129;1pkt 1fpkt"];
562--3420[label="0.213115;13pkt 13fpkt"];
562--3614[label="0.285714;16pkt 16fpkt"];
562--3747[label="0.166667;2pkt 2fpkt"];
562--3841[label="1;1pkt 1fpkt"];
562--3896[label="0.011236;1pkt 1fpkt"];
562--4368[label="0.0784314;4pkt 4fpkt"];
562--4417[label="0.0714286;2pkt 2fpkt"];
562--4571[label="0.016129;1pkt 1fpkt"];
562--4779[label="0.166667;2pkt 2fpkt"];
562--4835[label="1;1pkt 1fpkt"];
562--5020[label="0.139535;6pkt 6fpkt"];
562--5111[label="0.0714286;2pkt 2fpkt"];
562--5187[label="0.016129;1pkt 1fpkt"];
562--5294[label="0.166667;2pkt 2fpkt"];
562--5320[label="1;1pkt 1fpkt"];
985--1685[label="0.0945946;7pkt 7fpkt"];
985--1692[label="0.202703;15pkt 15fpkt"];
985--1784[label="0.0185185;1pkt 1fpkt"];
985--3896[label="0.986486;73pkt 73fpkt"];
1026--1397[label="0.02;1pkt 1fpkt"];
1026--1501[label="0.0172414;1pkt 1fpkt"];
1026--3420[label="1;58pkt 58fpkt"];
1115--1159[label="0.0204082;1pkt 1fpkt"];
1115--1164[label="0.0357143;1pkt 1fpkt"];
1115--1169[label="0.0363636;2pkt 2fpkt"];
1115--1633[label="0.0123457;1pkt 1fpkt"];
1115--1967[label="0.02;1pkt 1fpkt"];
1115--1971[label="0.0123457;1pkt 1fpkt"];
1115--2109[label="0.0123457;1pkt 1fpkt"];
1115--2124[label="0.0123457;1pkt 1fpkt"];
1115--2443[label="0.180556;13pkt 13fpkt"];
1115--2448[label="0.030303;1pkt 1fpkt"];
1115--2633[label="0.166667;2pkt 2fpkt"];
1115--2894[label="0.0123457;1pkt 1fpkt"];
1115--2981[label="0.0555556;1pkt 1fpkt"];
1115--2991[label="0.0196078;1pkt 1fpkt"];
1115--3085[label="0.0357143;1pkt 1fpkt"];
1115--3249[label="0.0357143;2pkt 2fpkt"];
1115--3267[label="0.1;2pkt 2fpkt"];
1115--3803[label="0.666667;2pkt 2fpkt"];
1115--4081[label="0.0588235;2pkt 2fpkt"];
1115--4327[label="0.0123457;1pkt 1fpkt"];
1115--4368[label="0.0196078;1pkt 1fpkt"];
1115--4417[label="0.0357143;1pkt 1fpkt"];
1115--4506[label="0.1;2pkt 2fpkt"];
1115--4812[label="0.666667;2pkt 2fpkt"];
1115--4958[label="0.030303;1pkt 1fpkt"];
1115--5077[label="0.0123457;1pkt 1fpkt"];
1115--5111[label="0.0357143;1pkt 1fpkt"];
1115--5156[label="0.1;2pkt 2fpkt"];
1159--1174[label="0.163265;8pkt 8fpkt"];
1159--1332[label="0.125;1pkt 1fpkt"];
1159--1397[label="0.0204082;1pkt 1fpkt"];
1159--1400[label="0.0238095;1pkt 1fpkt"];
1159--1692[label="0.0408163;2pkt 2fpkt"];
1159--1738[label="0.0204082;1pkt 1fpkt"];
1159--2001[label="0.0816327;4pkt 4fpkt"];
1159--2991[label="1;49pkt 49fpkt"];
1159--4368[label="1;49pkt 49fpkt"];
1164--1579[label="0.0357143;1pkt 1fpkt"];
1164--1855[label="0.0714286;2pkt 2fpkt"];
1164--1896[label="0.0714286;2pkt 2fpkt"];
1164--2078[label="0.0714286;2pkt 2fpkt"];
1164--3085[label="1;28pkt 28fpkt"];
1164--4417[label="1;28pkt 28fpkt"];
1164--5111[label="1;28pkt 28fpkt"];
1169--1174[label="0.0909091;5pkt 5fpkt"];
1169--1650[label="0.0363636;2pkt 2fpkt"];
1169--1797[label="0.0181818;1pkt 1fpkt"];
1169--1967[label="1;50pkt 50fpkt"];
1169--2001[label="0.0181818;1pkt 1fpkt"];
1174--1967[label="0.1;5pkt 5fpkt"];
1174--1971[label="0.0138889;1pkt 1fpkt"];
1174--2516[label="0.047619;1pkt 1fpkt"];
1174--2585[label="0.0138889;1pkt 1fpkt"];
1174--2740[label="0.666667;10pkt 10fpkt"];
1174--2777[label="0.0149254;1pkt 1fpkt"];
1174--2981[label="0.111111;2pkt 2fpkt"];
1174--2991[label="0.156863;8pkt 8fpkt"];
1174--3249[label="0.160714;9pkt 9fpkt"];
1174--3871[label="0.0140845;1pkt 1fpkt"];
1174--4121[label="0.047619;1pkt 1fpkt"];
1174--4162[label="0.0138889;1pkt 1fpkt"];
1174--4368[label="0.156863;8pkt 8fpkt"];
1174--4982[label="0.047619;1pkt 1fpkt"];
1397--1414[label="0.037037;1pkt 1fpkt"];
1397--1418[label="0.0263158;1pkt 1fpkt"];
1397--1419[label="0.153846;6pkt 6fpkt"];
1397--2017[label="0.0416667;1pkt 1fpkt"];
1397--2043[label="0.04;2pkt 2fpkt"];
1397--2339[label="0.037037;1pkt 1fpkt"];
1397--2772[label="0.15;6pkt 6fpkt"];
1397--2991[label="0.02;1pkt 1fpkt"];
1397--3006[label="0.173913;8pkt 8fpkt"];
1397--3420[label="0.02;1pkt 1fpkt"];
1397--3614[label="0.04;2pkt 2fpkt"];
1397--4262[label="0.15;6pkt 6fpkt"];
1397--4368[label="0.02;1pkt 1fpkt"];
1397--5020[label="0.0465116;2pkt 2fpkt"];
1397--5050[label="0.15;6pkt 6fpkt"];
1400--1822[label="0.0238095;1pkt 1fpkt"];
1400--1971[label="0.0238095;1pkt 1fpkt"];
1400--2107[label="0.333333;14pkt 14fpkt"];
1400--2139[label="0.133333;2pkt 2fpkt"];
1400--2241[label="0.111111;1pkt 1fpkt"];
1400--2443[label="0.285714;12pkt 12fpkt"];
1400--2484[label="0.333333;14pkt 14fpkt"];
1400--2516[label="0.047619;1pkt 1fpkt"];
1400--2525[label="0.111111;1pkt 1fpkt"];
1400--2559[label="0.0909091;1pkt 1fpkt"];
1400--2585[label="0.0238095;1pkt 1fpkt"];
1400--2991[label="0.0238095;1pkt 1fpkt"];
1400--3904[label="0.133333;2pkt 2fpkt"];
1400--3966[label="0.111111;1pkt 1fpkt"];
1400--4121[label="0.047619;1pkt 1fpkt"];
1400--4127[label="0.125;1pkt 1fpkt"];
1400--4162[label="0.0238095;1pkt 1fpkt"];
1400--4368[label="0.0238095;1pkt 1fpkt"];
1400--4904[label="0.111111;1pkt 1fpkt"];
1400--4982[label="0.047619;1pkt 1fpkt"];
1400--4985[label="0.125;1pkt 1fpkt"];
1418--1738[label="0.0263158;1pkt 1fpkt"];
1418--1896[label="0.0263158;1pkt 1fpkt"];
1418--5020[label="0.973684;37pkt 37fpkt"];
1967--2001[label="0.02;1pkt 1fpkt"];
2001--2062[label="0.00641026;1pkt 1fpkt"];
2001--2105[label="0.0128205;2pkt 2fpkt"];
2001--2107[label="0.00641026;1pkt 1fpkt"];
2001--2110[label="0.00641026;1pkt 1fpkt"];
2001--2356[label="0.027027;1pkt 1fpkt"];
2001--2448[label="0.181818;6pkt 6fpkt"];
2001--2516[label="0.333333;7pkt 7fpkt"];
2001--2585[label="0.00641026;1pkt 1fpkt"];
2001--2740[label="0.133333;2pkt 2fpkt"];
2001--2981[label="0.111111;2pkt 2fpkt"];
2001--2991[label="0.0784314;4pkt 4fpkt"];
2001--3189[label="0.0588235;1pkt 1fpkt"];
2001--3249[label="0.0535714;3pkt 3fpkt"];
2001--4032[label="0.027027;1pkt 1fpkt"];
2001--4081[label="0.176471;6pkt 6fpkt"];
2001--4121[label="0.333333;7pkt 7fpkt"];
2001--4162[label="0.00641026;1pkt 1fpkt"];
2001--4368[label="0.0784314;4pkt 4fpkt"];
2001--4937[label="0.0277778;1pkt 1fpkt"];
2001--4958[label="0.181818;6pkt 6fpkt"];
2001--4982[label="0.333333;7pkt 7fpkt"];
2043--3614[label="1;52pkt 52fpkt"];
2356--4032[label="1;37pkt 37fpkt"];
2356--4937[label="1;36pkt 36fpkt"];
2448--4081[label="1;33pkt 33fpkt"];
2448--4958[label="1;33pkt 33fpkt"];
2516--4121[label="1;21pkt 21fpkt"];
2516--4982[label="1;21pkt 21fpkt"];
2991--4368[label="1;51pkt 51fpkt"];
3085--4417[label="1;28pkt 28fpkt"];
3085--5111[label="1;28pkt 28fpkt"];
4032--4937[label="1;36pkt 36fpkt"];
4081--4958[label="1;33pkt 33fpkt"];
4121--4982[label="1;21pkt 21fpkt"];
4417--5111[label="1;28pkt 28fpkt"];
4835--5320[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_port="25"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
3281[label="201.140.133.159;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.140.133.159:3109, 200.180.2.108:8080}[33.3333%]&lt;BR/&gt;{201.140.133.159:3110, 200.180.2.108:8080}[33.3333%]&lt;BR/&gt;{201.140.133.159:3122, 200.180.2.108:7070}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (33.3333%)&lt;BR/&gt; 7070: (16.6667%)&lt;BR/&gt; 3122: (16.6667%)&lt;BR/&gt; 3110: (16.6667%)&lt;BR/&gt; 3109: (16.6667%)&gt;];
}
3281--4517[label="1;3pkt 3fpkt"];
3281--5160[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.180.2.108" dst_port="7070" src_ip="201.140.133.159" src_port="3122"/>
      <filter dst_ip="200.180.2.108" dst_port="8080" src_ip="201.140.133.159" src_port="3110"/>
      <filter dst_ip="200.180.2.108" dst_port="8080" src_ip="201.140.133.159" src_port="3109"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071206042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
1089[label="200.180.6.138;d;8pkt 8fpkt", shape=diamond, color=yellow];
1140[label="208.168.69.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 200.180.6.138:0}[62.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (55.5556%)&lt;BR/&gt; 9896: (11.1111%)&lt;BR/&gt; 1733: (11.1111%)&lt;BR/&gt; 16012: (5.55556%)&lt;BR/&gt; 2089: (5.55556%)&gt;];
}
1089--1140[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.180.6.138"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
412[label="56.21.18.81;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.21.18.81:80, 149.206.12.19:63876}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63876: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
412--2103[label="1;1pkt 1fpkt"];
412--2764[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.12.19" dst_port="63876" src_ip="56.21.18.81" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
422[label="201.118.254.160;s;2334pkt 2334fpkt", shape=diamond, color=yellow];
593[label="201.118.249.76;s;1290pkt 1290fpkt", shape=diamond, color=yellow];
1182[label="217.69.8.177;d;61pkt 61fpkt", shape=diamond, color=yellow];
1477[label="201.118.248.193;s;321pkt 321fpkt", shape=diamond, color=yellow];
1724[label="201.118.249.76;s;449pkt 449fpkt", shape=hexagon, color=black];
2738[label="201.118.249.76;1406pkt 1406fpkt", shape=pentagon, color=darkviolet];
2753[label="201.118.254.79;105pkt 105fpkt", shape=pentagon, color=darkviolet];
3423[label="201.118.224.178;163pkt 163fpkt", shape=pentagon, color=darkviolet];
3579[label="201.118.248.203;84pkt 84fpkt", shape=pentagon, color=darkviolet];
4252[label="201.118.254.79;105pkt 105fpkt", shape=invtriangle, color=brown];
4597[label="201.118.224.178;163pkt 163fpkt", shape=invtriangle, color=brown];
5199[label="201.118.224.178;163pkt 163fpkt", shape=invhouse, color=bisque];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.118.254.160:0, *:0}[52.1613%]&lt;BR/&gt;{201.118.249.76:0, *:0}[31.4894%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.1132%)&lt;BR/&gt; 53: (2.50602%)&lt;BR/&gt; 55731: (1.71583%)&lt;BR/&gt; 135: (0.541842%)&lt;BR/&gt; 80: (0.466586%)&gt;];
}
422--1182[label="0.0327869;2pkt 2fpkt"];
593--1182[label="0.0327869;2pkt 2fpkt"];
593--1724[label="1;449pkt 449fpkt"];
593--2738[label="0.999225;1289pkt 1289fpkt"];
1182--1477[label="0.0163934;1pkt 1fpkt"];
1182--2738[label="0.0327869;2pkt 2fpkt"];
1182--2750[label="0.0327869;2pkt 2fpkt"];
1182--2753[label="0.0327869;2pkt 2fpkt"];
1182--3423[label="0.0163934;1pkt 1fpkt"];
1182--3579[label="0.0327869;2pkt 2fpkt"];
1182--4250[label="0.0327869;2pkt 2fpkt"];
1182--4252[label="0.0327869;2pkt 2fpkt"];
1182--4597[label="0.0163934;1pkt 1fpkt"];
1182--5044[label="0.0327869;2pkt 2fpkt"];
1182--5199[label="0.0163934;1pkt 1fpkt"];
1724--2738[label="0.997773;448pkt 448fpkt"];
2753--4252[label="1;105pkt 105fpkt"];
3423--4597[label="1;163pkt 163fpkt"];
3423--5199[label="1;163pkt 163fpkt"];
4597--5199[label="1;163pkt 163fpkt"];
</description>
    <slice>
      <filter src_ip="201.118.254.160"/>
      <filter src_ip="201.118.249.76"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.942883,1.628,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
140[label="56.88.88.89s;59pkt 59fpkt", shape=rectangle, color=red];
1189[label="56.88.88.89;s;2029pkt 2029fpkt", shape=diamond, color=yellow];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.88.88.89:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 61641: (0.0478927%)&lt;BR/&gt; 61640: (0.0478927%)&lt;BR/&gt; 61639: (0.0478927%)&lt;BR/&gt; 61638: (0.0478927%)&gt;];
}
140--1189[label="1;59pkt 59fpkt"];
1189--2106[label="0.0142928;29pkt 29fpkt"];
1189--2111[label="0.0064071;13pkt 13fpkt"];
1189--2125[label="0.0064071;13pkt 13fpkt"];
1189--2131[label="0.0064071;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="56.88.88.89"/>
    </slice>
    <from sec="1071205533" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="130.218.253.197"/>
      <from sec="1071205676" usec="0"/>
      <to sec="1071206029" usec="0"/>
    </slice>
    <from sec="1071205676" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945324,1.56671,010,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
153[label="210.129.93.179s;205pkt 205fpkt", shape=rectangle, color=red];
1216[label="210.129.93.179;s;253pkt 253fpkt", shape=diamond, color=yellow];
3426[label="210.129.93.179;253pkt 253fpkt", shape=pentagon, color=darkviolet];
4599[label="210.129.93.179;253pkt 253fpkt", shape=invtriangle, color=brown];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.129.93.179:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 2841: (0.207469%)&lt;BR/&gt; 2840: (0.207469%)&lt;BR/&gt; 2839: (0.207469%)&lt;BR/&gt; 2838: (0.207469%)&gt;];
}
153--1216[label="1;205pkt 205fpkt"];
153--2106[label="1;205pkt 205fpkt"];
153--3426[label="1;205pkt 205fpkt"];
153--4599[label="1;205pkt 205fpkt"];
1216--2106[label="1;253pkt 253fpkt"];
1216--3426[label="1;253pkt 253fpkt"];
1216--4599[label="1;253pkt 253fpkt"];
3426--4599[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="210.129.93.179"/>
    </slice>
    <from sec="1071205720" usec="0"/>
    <to sec="1071205738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="216.242.29.253"/>
      <from sec="1071205201" usec="0"/>
      <to sec="1071206027" usec="0"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
1091[label="216.20.64.220;d;1pkt 1fpkt", shape=diamond, color=yellow];
1248[label="77.14.146.245;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.118.207.19:29296, 216.20.64.220:20656}[50%]&lt;BR/&gt;{201.118.207.19:50319, 77.14.146.245:6881}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50319: (25%)&lt;BR/&gt; 29296: (25%)&lt;BR/&gt; 20656: (25%)&lt;BR/&gt; 6881: (25%)&gt;];
}
1091--1929[label="1;1pkt 1fpkt"];
1248--1929[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="77.14.146.245" dst_port="6881" src_ip="201.118.207.19" src_port="50319"/>
      <filter dst_ip="216.20.64.220" dst_port="20656" src_ip="201.118.207.19" src_port="29296"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
1252[label="145.166.138.134;d;327pkt 327fpkt", shape=diamond, color=yellow];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.166.138.134:53}[99.3884%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (54.7401%)&lt;BR/&gt; 32768: (1.98777%)&lt;BR/&gt; 32769: (1.22324%)&lt;BR/&gt; 1024: (1.22324%)&lt;BR/&gt; 1025: (0.917431%)&gt;];
}
1252--3088[label="0.0030581;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.138.134" dst_port="53"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
1267[label="201.118.238.229;d;165pkt 165fpkt", shape=diamond, color=yellow];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 201.118.238.229:0}[97.5758%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.5758%)&lt;BR/&gt; 135: (0.909091%)&lt;BR/&gt; 4144: (0.30303%)&lt;BR/&gt; 3927: (0.30303%)&lt;BR/&gt; 3892: (0.30303%)&gt;];
}
1267--2111[label="0.00606061;1pkt 1fpkt"];
1267--2125[label="0.00606061;1pkt 1fpkt"];
1267--2131[label="0.00606061;1pkt 1fpkt"];
1267--3404[label="0.00606061;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.118.238.229"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,002,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
1287[label="166.58.203.23;s;539pkt 539fpkt", shape=diamond, color=yellow];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.58.203.23:1028, *:137}[98.3302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (49.1651%)&lt;BR/&gt; 137: (49.1651%)&lt;BR/&gt; 80: (0.834879%)&lt;BR/&gt; 1245: (0.0927644%)&lt;BR/&gt; 1244: (0.0927644%)&gt;];
}
1287--2105[label="0.00185529;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="166.58.203.23" src_port="1028"/>
    </slice>
    <from sec="1071205220" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.942883,1.628,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
3[label="58.33.182.20s;2pkt 2fpkt", shape=rectangle, color=red];
504[label="58.33.182.20;s;9pkt 9fpkt", shape=diamond, color=yellow];
1319[label="149.206.22.8;d;12pkt 12fpkt", shape=diamond, color=yellow];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.33.182.20:80, 149.206.22.113:*}[29.4118%]&lt;BR/&gt;{129.80.229.124:80, 149.206.22.8:*}[23.5294%]&lt;BR/&gt;{58.33.182.20:80, 149.206.22.8:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.4783%)&lt;BR/&gt; 1602: (6.52174%)&lt;BR/&gt; 1601: (6.52174%)&lt;BR/&gt; 1863: (4.34783%)&lt;BR/&gt; 1600: (4.34783%)&gt;];
}
3--504[label="1;2pkt 2fpkt"];
3--1319[label="1;2pkt 2fpkt"];
504--1319[label="0.444444;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.22.8" src_ip="58.33.182.20" src_port="80"/>
      <filter dst_ip="149.206.22.113" src_ip="58.33.182.20" src_port="80"/>
      <filter dst_ip="149.206.22.8" src_ip="129.80.229.124" src_port="80"/>
    </slice>
    <from sec="1071205710" usec="0"/>
    <to sec="1071205982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
1305[label="201.118.239.112;d;18pkt 18fpkt", shape=diamond, color=yellow];
1328[label="200.172.162.160;s;19pkt 19fpkt", shape=diamond, color=yellow];
3291[label="200.172.162.160;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4523[label="200.172.162.160;19pkt 19fpkt", shape=invtriangle, color=brown];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.172.162.160:80, 201.118.239.112:*}[85%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3333%)&lt;BR/&gt; 2739: (2.66667%)&lt;BR/&gt; 2738: (2.66667%)&lt;BR/&gt; 2737: (2.66667%)&lt;BR/&gt; 2736: (2.66667%)&gt;];
}
1305--1328[label="0.944444;17pkt 17fpkt"];
1305--2405[label="0.125;1pkt 1fpkt"];
1305--3291[label="0.944444;17pkt 17fpkt"];
1305--4523[label="0.944444;17pkt 17fpkt"];
1328--1561[label="0.105263;2pkt 2fpkt"];
1328--3291[label="1;19pkt 19fpkt"];
1328--4523[label="1;19pkt 19fpkt"];
3291--4523[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="201.118.239.112" src_ip="200.172.162.160" src_port="80"/>
    </slice>
    <from sec="1071205505" usec="0"/>
    <to sec="1071206025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="212.27.202.244"/>
      <from sec="1071205201" usec="0"/>
      <to sec="1071206029" usec="0"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="131.233.146.233"/>
      <from sec="1071205216" usec="0"/>
      <to sec="1071206027" usec="0"/>
    </slice>
    <from sec="1071205216" usec="0"/>
    <to sec="1071206027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
747[label="58.113.84.86;s;4665pkt 4665fpkt", shape=diamond, color=yellow];
1405[label="166.55.174.1;d;9pkt 9fpkt", shape=diamond, color=yellow];
3638[label="205.1.41.213;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.113.84.86:*, *:135}[99.8074%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (49.8931%)&lt;BR/&gt; 4865: (0.0641574%)&lt;BR/&gt; 4864: (0.0641574%)&lt;BR/&gt; 4363: (0.0641574%)&lt;BR/&gt; 4362: (0.0641574%)&gt;];
}
747--1405[label="0.111111;1pkt 1fpkt"];
747--2106[label="0.066881;312pkt 312fpkt"];
747--2806[label="1;4665pkt 4665fpkt"];
1405--1465[label="1;6pkt 6fpkt"];
1405--2458[label="1;6pkt 6fpkt"];
1405--2806[label="0.111111;1pkt 1fpkt"];
1405--2890[label="0.142857;1pkt 1fpkt"];
1405--3638[label="0.5;1pkt 1fpkt"];
1405--4326[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="58.113.84.86"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
441[label="200.133.121.164;d;369pkt 369fpkt", shape=diamond, color=yellow];
1049[label="58.245.2.204;s;48pkt 48fpkt", shape=diamond, color=yellow];
1408[label="77.118.200.207;s;54pkt 54fpkt", shape=diamond, color=yellow];
2254[label="199.132.168.15;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2288[label="213.218.18.20;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2940[label="212.80.156.105;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3096[label="58.11.133.131;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3389[label="217.36.22.175;50pkt 50fpkt", shape=pentagon, color=darkviolet];
3438[label="212.68.229.180;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3450[label="34.189.217.182;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3558[label="58.245.2.201;50pkt 50fpkt", shape=pentagon, color=darkviolet];
3580[label="58.245.2.204;47pkt 47fpkt", shape=pentagon, color=darkviolet];
3692[label="216.221.113.220;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3897[label="206.1.205.255;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3974[label="199.132.168.15;35pkt 35fpkt", shape=invtriangle, color=brown];
4606[label="212.68.229.180;6pkt 6fpkt", shape=invtriangle, color=brown];
4666[label="58.245.2.201;50pkt 50fpkt", shape=invtriangle, color=brown];
4679[label="58.245.2.204;47pkt 47fpkt", shape=invtriangle, color=brown];
4865[label="206.1.205.255;9pkt 9fpkt", shape=invtriangle, color=brown];
5338[label="206.1.205.255;9pkt 9fpkt", shape=invhouse, color=bisque];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 200.133.121.164:*}[86.4679%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.187%)&lt;BR/&gt; 0: (0.696864%)&lt;BR/&gt; 6883: (0.522648%)&lt;BR/&gt; 54556: (0.232288%)&lt;BR/&gt; 54347: (0.232288%)&gt;];
}
441--524[label="0.0103093;2pkt 2fpkt"];
441--1049[label="1;48pkt 48fpkt"];
441--1408[label="0.166667;9pkt 9fpkt"];
441--2103[label="0.0352304;13pkt 13fpkt"];
441--2254[label="1;34pkt 34fpkt"];
441--2288[label="1;6pkt 6fpkt"];
441--2940[label="1;10pkt 10fpkt"];
441--3096[label="1;4pkt 4fpkt"];
441--3389[label="1;50pkt 50fpkt"];
441--3438[label="1;6pkt 6fpkt"];
441--3450[label="1;16pkt 16fpkt"];
441--3558[label="0.56;28pkt 28fpkt"];
441--3580[label="1;47pkt 47fpkt"];
441--3647[label="0.571429;4pkt 4fpkt"];
441--3692[label="1;2pkt 2fpkt"];
441--3897[label="1;9pkt 9fpkt"];
441--3974[label="1;35pkt 35fpkt"];
441--4606[label="1;6pkt 6fpkt"];
441--4666[label="0.56;28pkt 28fpkt"];
441--4679[label="1;47pkt 47fpkt"];
441--4719[label="0.571429;4pkt 4fpkt"];
441--4865[label="1;9pkt 9fpkt"];
441--5338[label="1;9pkt 9fpkt"];
1049--2103[label="0.0625;3pkt 3fpkt"];
1049--3580[label="1;47pkt 47fpkt"];
1049--4679[label="1;47pkt 47fpkt"];
2254--3974[label="1;34pkt 34fpkt"];
3438--4606[label="1;6pkt 6fpkt"];
3558--4666[label="1;50pkt 50fpkt"];
3580--4679[label="1;47pkt 47fpkt"];
3897--4865[label="1;9pkt 9fpkt"];
3897--5338[label="1;9pkt 9fpkt"];
4865--5338[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="200.133.121.164" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
174[label="58.10.76.45s;1pkt 1fpkt", shape=rectangle, color=red];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.10.76.45:49621, 149.207.5.190:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49621: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
174--1417[label="1;1pkt 1fpkt"];
174--1459[label="1;1pkt 1fpkt"];
174--2107[label="1;1pkt 1fpkt"];
174--2110[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.5.190" dst_port="80" src_ip="58.10.76.45" src_port="49621"/>
    </slice>
    <from sec="1071205937" usec="0"/>
    <to sec="1071205949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889707,1.5466,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
1062[label="58.144.167.136;s;651pkt 651fpkt", shape=diamond, color=yellow];
1063[label="82.240.134.199;s;1146pkt 1146fpkt", shape=diamond, color=yellow];
1065[label="205.167.24.35;s;626pkt 626fpkt", shape=diamond, color=yellow];
1224[label="149.206.41.125;d;255pkt 255fpkt", shape=diamond, color=yellow];
1429[label="149.206.40.13;d;203pkt 203fpkt", shape=diamond, color=yellow];
1430[label="149.206.40.12;d;202pkt 202fpkt", shape=diamond, color=yellow];
1431[label="149.206.40.14;d;216pkt 216fpkt", shape=diamond, color=yellow];
1870[label="82.240.134.199;s;1146pkt 1146fpkt", shape=hexagon, color=black];
3131[label="58.144.167.136;732pkt 732fpkt", shape=pentagon, color=darkviolet];
3549[label="82.240.134.199;1306pkt 1306fpkt", shape=pentagon, color=darkviolet];
4662[label="82.240.134.199;1306pkt 1306fpkt", shape=invtriangle, color=brown];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.240.134.199:*, *:524}[25.0861%]&lt;BR/&gt;{58.144.167.136:0, *:0}[22.9841%]&lt;BR/&gt;{205.167.24.35:0, *:0}[20.193%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (38.1435%)&lt;BR/&gt; 524: (20.2786%)&lt;BR/&gt; 139: (4.47426%)&lt;BR/&gt; 445: (4.29452%)&lt;BR/&gt; 53: (1.43151%)&gt;];
}
1062--1224[label="0.0117647;3pkt 3fpkt"];
1062--1429[label="0.0197044;4pkt 4fpkt"];
1062--1430[label="0.019802;4pkt 4fpkt"];
1062--1431[label="0.0185185;4pkt 4fpkt"];
1062--3131[label="1;651pkt 651fpkt"];
1063--1224[label="0.0470588;12pkt 12fpkt"];
1063--1429[label="0.965517;196pkt 196fpkt"];
1063--1430[label="0.965347;195pkt 195fpkt"];
1063--1431[label="0.967593;209pkt 209fpkt"];
1063--1870[label="1;1146pkt 1146fpkt"];
1063--2108[label="0.0165794;19pkt 19fpkt"];
1063--2123[label="0.0165794;19pkt 19fpkt"];
1063--2130[label="0.0165794;19pkt 19fpkt"];
1063--3549[label="1;1146pkt 1146fpkt"];
1063--4662[label="1;1146pkt 1146fpkt"];
1065--1224[label="0.00784314;2pkt 2fpkt"];
1065--1429[label="0.0147783;3pkt 3fpkt"];
1065--1430[label="0.0148515;3pkt 3fpkt"];
1065--1431[label="0.0138889;3pkt 3fpkt"];
1224--1263[label="0.00925926;1pkt 1fpkt"];
1224--1283[label="0.011236;1pkt 1fpkt"];
1224--1464[label="0.00515464;1pkt 1fpkt"];
1224--1524[label="0.0188679;1pkt 1fpkt"];
1224--1567[label="0.0625;1pkt 1fpkt"];
1224--1568[label="0.0625;1pkt 1fpkt"];
1224--1870[label="0.0470588;12pkt 12fpkt"];
1224--2013[label="0.011236;1pkt 1fpkt"];
1224--2039[label="0.0625;1pkt 1fpkt"];
1224--2104[label="0.00392157;1pkt 1fpkt"];
1224--2108[label="0.00784314;2pkt 2fpkt"];
1224--2123[label="0.00784314;2pkt 2fpkt"];
1224--2130[label="0.00784314;2pkt 2fpkt"];
1224--2142[label="0.025;1pkt 1fpkt"];
1224--2593[label="0.166667;1pkt 1fpkt"];
1224--2668[label="0.0263158;1pkt 1fpkt"];
1224--2674[label="0.04;1pkt 1fpkt"];
1224--2705[label="0.0185185;1pkt 1fpkt"];
1224--2714[label="0.0142857;1pkt 1fpkt"];
1224--2765[label="0.025;1pkt 1fpkt"];
1224--2777[label="0.0149254;1pkt 1fpkt"];
1224--2808[label="0.0217391;1pkt 1fpkt"];
1224--3131[label="0.0117647;3pkt 3fpkt"];
1224--3224[label="0.05;1pkt 1fpkt"];
1224--3282[label="0.0384615;1pkt 1fpkt"];
1224--3323[label="0.0588235;1pkt 1fpkt"];
1224--3549[label="0.0470588;12pkt 12fpkt"];
1224--3802[label="0.037037;1pkt 1fpkt"];
1224--3858[label="0.0172414;1pkt 1fpkt"];
1224--3871[label="0.0140845;1pkt 1fpkt"];
1224--4226[label="0.0185185;1pkt 1fpkt"];
1224--4280[label="0.0217391;1pkt 1fpkt"];
1224--4479[label="0.05;1pkt 1fpkt"];
1224--4518[label="0.0384615;1pkt 1fpkt"];
1224--4542[label="0.0588235;1pkt 1fpkt"];
1224--4662[label="0.0470588;12pkt 12fpkt"];
1224--4847[label="0.0172414;1pkt 1fpkt"];
1224--5161[label="0.0384615;1pkt 1fpkt"];
1224--5328[label="0.0172414;1pkt 1fpkt"];
1429--1870[label="0.965517;196pkt 196fpkt"];
1429--2108[label="0.0147783;3pkt 3fpkt"];
1429--2123[label="0.0147783;3pkt 3fpkt"];
1429--2130[label="0.0147783;3pkt 3fpkt"];
1429--3131[label="0.0197044;4pkt 4fpkt"];
1429--3549[label="0.965517;196pkt 196fpkt"];
1429--4662[label="0.965517;196pkt 196fpkt"];
1430--1870[label="0.965347;195pkt 195fpkt"];
1430--2108[label="0.0148515;3pkt 3fpkt"];
1430--2123[label="0.0148515;3pkt 3fpkt"];
1430--2130[label="0.0148515;3pkt 3fpkt"];
1430--3131[label="0.019802;4pkt 4fpkt"];
1430--3549[label="0.965347;195pkt 195fpkt"];
1430--4662[label="0.965347;195pkt 195fpkt"];
1431--1870[label="0.967593;209pkt 209fpkt"];
1431--2108[label="0.0138889;3pkt 3fpkt"];
1431--2123[label="0.0138889;3pkt 3fpkt"];
1431--2130[label="0.0138889;3pkt 3fpkt"];
1431--3131[label="0.0185185;4pkt 4fpkt"];
1431--3549[label="0.967593;209pkt 209fpkt"];
1431--4662[label="0.967593;209pkt 209fpkt"];
1870--2108[label="0.0165794;19pkt 19fpkt"];
1870--2123[label="0.0165794;19pkt 19fpkt"];
1870--2130[label="0.0165794;19pkt 19fpkt"];
1870--3549[label="1;1146pkt 1146fpkt"];
1870--4662[label="1;1146pkt 1146fpkt"];
3549--4662[label="1;1306pkt 1306fpkt"];
</description>
    <slice>
      <filter dst_port="524" src_ip="82.240.134.199"/>
      <filter src_ip="58.144.167.136"/>
      <filter src_ip="205.167.24.35"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
898[label="58.240.77.134;s;87pkt 87fpkt", shape=diamond, color=yellow];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.240.77.134:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4272: (1.14943%)&lt;BR/&gt; 61261: (0.574713%)&lt;BR/&gt; 60702: (0.574713%)&lt;BR/&gt; 60699: (0.574713%)&gt;];
}
898--913[label="0.0555556;4pkt 4fpkt"];
898--1023[label="0.0344828;3pkt 3fpkt"];
898--1043[label="0.0645161;2pkt 2fpkt"];
898--1176[label="0.176471;6pkt 6fpkt"];
898--1448[label="0.0229885;2pkt 2fpkt"];
898--1645[label="0.0689655;6pkt 6fpkt"];
898--1656[label="0.103448;9pkt 9fpkt"];
898--1740[label="0.0114943;1pkt 1fpkt"];
898--2065[label="0.103448;9pkt 9fpkt"];
898--2103[label="0.114943;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="58.240.77.134" src_port="80"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
546[label="149.207.88.158;d;453pkt 453fpkt", shape=diamond, color=yellow];
1449[label="217.201.158.15;s;3pkt 3fpkt", shape=diamond, color=yellow];
2344[label="201.25.101.27;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2396[label="208.69.244.32;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3730[label="57.121.104.224;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4767[label="57.121.104.224;7pkt 7fpkt", shape=invtriangle, color=brown];
4826[label="60.59.24.240;3pkt 3fpkt", shape=invtriangle, color=brown];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 149.207.88.158:3233}[85.3414%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (47.6471%)&lt;BR/&gt; 3233: (42.2549%)&lt;BR/&gt; 0: (4.11765%)&lt;BR/&gt; 8196: (1.56863%)&lt;BR/&gt; 80: (0.392157%)&gt;];
}
546--1120[label="0.0119048;1pkt 1fpkt"];
546--1263[label="0.00925926;1pkt 1fpkt"];
546--1283[label="0.011236;1pkt 1fpkt"];
546--1449[label="0.333333;1pkt 1fpkt"];
546--1567[label="0.0625;1pkt 1fpkt"];
546--1568[label="0.0625;1pkt 1fpkt"];
546--2013[label="0.011236;1pkt 1fpkt"];
546--2039[label="0.0625;1pkt 1fpkt"];
546--2142[label="0.025;1pkt 1fpkt"];
546--2294[label="0.0149254;1pkt 1fpkt"];
546--2298[label="0.0416667;1pkt 1fpkt"];
546--2344[label="0.0357143;1pkt 1fpkt"];
546--2396[label="0.111111;1pkt 1fpkt"];
546--2467[label="0.0555556;1pkt 1fpkt"];
546--2674[label="0.04;1pkt 1fpkt"];
546--2714[label="0.0142857;1pkt 1fpkt"];
546--2765[label="0.025;1pkt 1fpkt"];
546--2777[label="0.0149254;1pkt 1fpkt"];
546--2988[label="0.0263158;1pkt 1fpkt"];
546--3015[label="0.02;1pkt 1fpkt"];
546--3224[label="0.05;1pkt 1fpkt"];
546--3260[label="0.0263158;1pkt 1fpkt"];
546--3323[label="0.0588235;1pkt 1fpkt"];
546--3338[label="0.0238095;1pkt 1fpkt"];
546--3633[label="0.0769231;1pkt 1fpkt"];
546--3730[label="0.142857;1pkt 1fpkt"];
546--3858[label="0.0172414;1pkt 1fpkt"];
546--3871[label="0.0140845;1pkt 1fpkt"];
546--3998[label="0.0147059;1pkt 1fpkt"];
546--4090[label="0.0588235;1pkt 1fpkt"];
546--4381[label="0.02;1pkt 1fpkt"];
546--4479[label="0.05;1pkt 1fpkt"];
546--4542[label="0.0588235;1pkt 1fpkt"];
546--4767[label="0.142857;1pkt 1fpkt"];
546--4826[label="0.333333;1pkt 1fpkt"];
546--4847[label="0.0172414;1pkt 1fpkt"];
546--4919[label="0.0149254;1pkt 1fpkt"];
546--5097[label="0.02;1pkt 1fpkt"];
546--5328[label="0.0172414;1pkt 1fpkt"];
3730--4767[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.88.158" dst_port="3233" src_port="53"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945324,1.56671,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
34[label="57.86.76.195s;1pkt 1fpkt", shape=rectangle, color=red];
1452[label="57.86.76.195;s;1pkt 1fpkt", shape=diamond, color=yellow];
3523[label="57.86.76.195;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4648[label="57.86.76.195;1pkt 1fpkt", shape=invtriangle, color=brown];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.86.76.195:80, 166.55.97.209:2233}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2233: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
34--1165[label="1;1pkt 1fpkt"];
34--1452[label="1;1pkt 1fpkt"];
34--3523[label="1;1pkt 1fpkt"];
34--4648[label="1;1pkt 1fpkt"];
1452--3523[label="1;1pkt 1fpkt"];
1452--4648[label="1;1pkt 1fpkt"];
3523--4648[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.97.209" dst_port="2233" src_ip="57.86.76.195" src_port="80"/>
    </slice>
    <from sec="1071205801" usec="0"/>
    <to sec="1071206009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
1480[label="57.204.72.114;s;466pkt 466fpkt", shape=diamond, color=yellow];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.204.72.114:0, *:0}[95.0644%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.0644%)&lt;BR/&gt; 80: (1.39485%)&lt;BR/&gt; 135: (1.07296%)&lt;BR/&gt; 64959: (0.107296%)&lt;BR/&gt; 56445: (0.107296%)&gt;];
}
1480--2105[label="0.00429185;2pkt 2fpkt"];
1480--2107[label="0.00214592;1pkt 1fpkt"];
1480--2110[label="0.00214592;1pkt 1fpkt"];
1480--2111[label="0.00214592;1pkt 1fpkt"];
1480--2125[label="0.00214592;1pkt 1fpkt"];
1480--2131[label="0.00214592;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="57.204.72.114"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
1032[label="58.67.154.225;s;137pkt 137fpkt", shape=diamond, color=yellow];
3277[label="205.1.45.159;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4514[label="205.1.45.159;3pkt 3fpkt", shape=invtriangle, color=brown];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.67.154.225:80, 149.206.203.43:*}[32.8571%]&lt;BR/&gt;{58.67.154.225:80, 149.206.74.218:*}[27.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.5524%)&lt;BR/&gt; 1863: (2.0979%)&lt;BR/&gt; 3010: (0.699301%)&lt;BR/&gt; 2630: (0.699301%)&lt;BR/&gt; 1426: (0.699301%)&gt;];
}
1032--1874[label="0.707692;46pkt 46fpkt"];
1032--1937[label="0.00729927;1pkt 1fpkt"];
1032--2103[label="0.335766;46pkt 46fpkt"];
1032--3740[label="1;137pkt 137fpkt"];
1032--4773[label="1;137pkt 137fpkt"];
3277--4514[label="1;3pkt 3fpkt"];
3277--5159[label="1;3pkt 3fpkt"];
4514--5159[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.203.43" src_ip="58.67.154.225" src_port="80"/>
      <filter dst_ip="149.206.74.218" src_ip="58.67.154.225" src_port="80"/>
    </slice>
    <from sec="1071205228" usec="0"/>
    <to sec="1071206087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="200.180.2.220"/>
      <from sec="1071205201" usec="0"/>
      <to sec="1071206029" usec="0"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
1496[label="200.133.73.58;d;1pkt 1fpkt", shape=diamond, color=yellow];
1497[label="60.17.75.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.17.75.17:6667, 200.133.73.58:60493}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60493: (50%)&lt;BR/&gt; 6667: (50%)&gt;];
}
1496--1497[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.133.73.58" dst_port="60493" src_ip="60.17.75.17" src_port="6667"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
321[label="131.233.146.219;d;244pkt 244fpkt", shape=diamond, color=yellow];
435[label="149.207.58.89;d;9pkt 9fpkt", shape=diamond, color=yellow];
893[label="149.207.204.50;d;172pkt 172fpkt", shape=diamond, color=yellow];
1426[label="216.141.20.227;s;81pkt 81fpkt", shape=diamond, color=yellow];
1457[label="218.46.186.104;s;1pkt 1fpkt", shape=diamond, color=yellow];
1682[label="149.207.58.89;d;3pkt 3fpkt", shape=hexagon, color=black];
2178[label="216.141.21.5;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2303[label="209.96.189.21;34pkt 34fpkt", shape=pentagon, color=darkviolet];
2329[label="218.55.145.25;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2540[label="78.45.136.50;28pkt 28fpkt", shape=pentagon, color=darkviolet];
2975[label="218.46.186.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2995[label="219.94.176.114;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3458[label="211.245.82.184;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3470[label="211.245.82.186;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3749[label="216.141.20.227;96pkt 96fpkt", shape=pentagon, color=darkviolet];
3930[label="216.141.21.5;9pkt 9fpkt", shape=invtriangle, color=brown];
4003[label="209.96.189.21;35pkt 35fpkt", shape=invtriangle, color=brown];
4017[label="218.55.145.25;6pkt 6fpkt", shape=invtriangle, color=brown];
4621[label="211.245.82.186;27pkt 27fpkt", shape=invtriangle, color=brown];
4730[label="216.20.64.217;1pkt 1fpkt", shape=invtriangle, color=brown];
4780[label="216.141.20.227;96pkt 96fpkt", shape=invtriangle, color=brown];
4884[label="216.141.21.5;10pkt 10fpkt", shape=invhouse, color=bisque];
4926[label="218.55.145.25;6pkt 6fpkt", shape=invhouse, color=bisque];
5208[label="211.245.82.186;27pkt 27fpkt", shape=invhouse, color=bisque];
5269[label="216.20.64.217;1pkt 1fpkt", shape=invhouse, color=bisque];
5295[label="216.141.20.227;96pkt 96fpkt", shape=invhouse, color=bisque];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 131.233.146.219:*}[37.5204%]&lt;BR/&gt;{*:80, 149.207.204.50:*}[24.1436%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.9651%)&lt;BR/&gt; 8080: (6.61001%)&lt;BR/&gt; 29565: (0.283286%)&lt;BR/&gt; 49878: (0.236072%)&lt;BR/&gt; 46964: (0.236072%)&gt;];
}
321--442[label="0.0151515;1pkt 1fpkt"];
321--477[label="0.0614754;15pkt 15fpkt"];
321--512[label="0.00819672;1pkt 1fpkt"];
321--687[label="0.00409836;1pkt 1fpkt"];
321--738[label="0.00409836;1pkt 1fpkt"];
321--778[label="0.00409836;1pkt 1fpkt"];
321--787[label="0.00409836;1pkt 1fpkt"];
321--898[label="0.0344828;3pkt 3fpkt"];
321--1227[label="0.0192308;2pkt 2fpkt"];
321--1251[label="0.0235294;2pkt 2fpkt"];
321--1426[label="0.0246914;2pkt 2fpkt"];
321--1457[label="1;1pkt 1fpkt"];
321--1500[label="0.0142857;1pkt 1fpkt"];
321--1578[label="0.0114943;1pkt 1fpkt"];
321--1626[label="0.00653595;1pkt 1fpkt"];
321--1737[label="0.00900901;1pkt 1fpkt"];
321--1991[label="0.0192308;2pkt 2fpkt"];
321--2103[label="0.0614754;15pkt 15fpkt"];
321--2155[label="0.00409836;1pkt 1fpkt"];
321--2178[label="0.1;1pkt 1fpkt"];
321--2278[label="0.00409836;1pkt 1fpkt"];
321--2303[label="0.0588235;2pkt 2fpkt"];
321--2329[label="0.142857;1pkt 1fpkt"];
321--2395[label="0.0123457;1pkt 1fpkt"];
321--2540[label="0.321429;9pkt 9fpkt"];
321--2675[label="0.0144928;1pkt 1fpkt"];
321--2781[label="0.010989;1pkt 1fpkt"];
321--2975[label="1;1pkt 1fpkt"];
321--2995[label="1;7pkt 7fpkt"];
321--3144[label="0.125;1pkt 1fpkt"];
321--3268[label="0.0512821;2pkt 2fpkt"];
321--3297[label="0.0142857;1pkt 1fpkt"];
321--3414[label="0.0133333;1pkt 1fpkt"];
321--3429[label="0.1;1pkt 1fpkt"];
321--3442[label="0.0114943;1pkt 1fpkt"];
321--3448[label="0.0184049;3pkt 3fpkt"];
321--3458[label="0.04;1pkt 1fpkt"];
321--3461[label="0.0909091;1pkt 1fpkt"];
321--3470[label="0.185185;5pkt 5fpkt"];
321--3716[label="0.111111;2pkt 2fpkt"];
321--3722[label="0.0163934;4pkt 4fpkt"];
321--3749[label="0.0208333;2pkt 2fpkt"];
321--3775[label="0.263158;5pkt 5fpkt"];
321--3913[label="0.00409836;1pkt 1fpkt"];
321--3930[label="0.111111;1pkt 1fpkt"];
321--3989[label="0.00409836;1pkt 1fpkt"];
321--4003[label="0.0571429;2pkt 2fpkt"];
321--4017[label="0.166667;1pkt 1fpkt"];
321--4054[label="0.0125;1pkt 1fpkt"];
321--4208[label="0.0144928;1pkt 1fpkt"];
321--4266[label="0.010989;1pkt 1fpkt"];
321--4315[label="0.012987;1pkt 1fpkt"];
321--4446[label="0.125;1pkt 1fpkt"];
321--4507[label="0.0512821;2pkt 2fpkt"];
321--4527[label="0.0142857;1pkt 1fpkt"];
321--4602[label="0.1;1pkt 1fpkt"];
321--4609[label="0.0114943;1pkt 1fpkt"];
321--4612[label="0.0184049;3pkt 3fpkt"];
321--4621[label="0.185185;5pkt 5fpkt"];
321--4757[label="0.111111;2pkt 2fpkt"];
321--4780[label="0.0208333;2pkt 2fpkt"];
321--4871[label="0.00409836;1pkt 1fpkt"];
321--4884[label="0.1;1pkt 1fpkt"];
321--4918[label="0.00409836;1pkt 1fpkt"];
321--4926[label="0.166667;1pkt 1fpkt"];
321--5053[label="0.010989;1pkt 1fpkt"];
321--5072[label="0.012987;1pkt 1fpkt"];
321--5201[label="0.1;1pkt 1fpkt"];
321--5204[label="0.0114943;1pkt 1fpkt"];
321--5205[label="0.0184049;3pkt 3fpkt"];
321--5208[label="0.185185;5pkt 5fpkt"];
321--5284[label="0.111111;2pkt 2fpkt"];
321--5295[label="0.0208333;2pkt 2fpkt"];
435--436[label="1;1pkt 1fpkt"];
435--439[label="0.222222;2pkt 2fpkt"];
435--477[label="0.333333;3pkt 3fpkt"];
435--755[label="0.111111;1pkt 1fpkt"];
435--1426[label="0.222222;2pkt 2fpkt"];
435--1682[label="1;3pkt 3fpkt"];
435--1804[label="0.111111;1pkt 1fpkt"];
435--3337[label="0.222222;2pkt 2fpkt"];
435--3364[label="0.111111;1pkt 1fpkt"];
435--3669[label="1;1pkt 1fpkt"];
435--3749[label="0.222222;2pkt 2fpkt"];
435--4730[label="1;1pkt 1fpkt"];
435--4780[label="0.222222;2pkt 2fpkt"];
435--5269[label="1;1pkt 1fpkt"];
435--5295[label="0.222222;2pkt 2fpkt"];
893--1500[label="0.457143;32pkt 32fpkt"];
893--1693[label="0.326733;33pkt 33fpkt"];
893--1708[label="0.00581395;1pkt 1fpkt"];
893--1772[label="0.0232558;4pkt 4fpkt"];
893--1835[label="0.0116279;2pkt 2fpkt"];
893--2103[label="0.0755814;13pkt 13fpkt"];
893--3175[label="0.00581395;1pkt 1fpkt"];
893--3458[label="0.4;10pkt 10fpkt"];
893--3470[label="0.259259;7pkt 7fpkt"];
893--3613[label="0.0232558;4pkt 4fpkt"];
893--3678[label="0.162791;28pkt 28fpkt"];
893--4315[label="0.454545;35pkt 35fpkt"];
893--4621[label="0.259259;7pkt 7fpkt"];
893--4698[label="0.0232558;4pkt 4fpkt"];
893--4736[label="0.162791;28pkt 28fpkt"];
893--5072[label="0.454545;35pkt 35fpkt"];
893--5208[label="0.259259;7pkt 7fpkt"];
1426--1682[label="0.333333;1pkt 1fpkt"];
1426--1806[label="0.0123457;1pkt 1fpkt"];
1426--1937[label="0.0246914;2pkt 2fpkt"];
1426--2103[label="0.0246914;2pkt 2fpkt"];
1426--3749[label="1;81pkt 81fpkt"];
1426--4780[label="1;81pkt 81fpkt"];
1426--5295[label="1;81pkt 81fpkt"];
1682--1804[label="0.333333;1pkt 1fpkt"];
1682--3364[label="0.333333;1pkt 1fpkt"];
1682--3669[label="1;1pkt 1fpkt"];
1682--3749[label="0.333333;1pkt 1fpkt"];
1682--4730[label="1;1pkt 1fpkt"];
1682--4780[label="0.333333;1pkt 1fpkt"];
1682--5269[label="1;1pkt 1fpkt"];
1682--5295[label="0.333333;1pkt 1fpkt"];
2178--3930[label="1;9pkt 9fpkt"];
2178--4884[label="1;10pkt 10fpkt"];
2303--4003[label="1;34pkt 34fpkt"];
2329--4017[label="1;6pkt 6fpkt"];
2329--4926[label="1;6pkt 6fpkt"];
3470--4621[label="1;27pkt 27fpkt"];
3470--5208[label="1;27pkt 27fpkt"];
3749--4780[label="1;96pkt 96fpkt"];
3749--5295[label="1;96pkt 96fpkt"];
3930--4884[label="1;9pkt 9fpkt"];
4017--4926[label="1;6pkt 6fpkt"];
4621--5208[label="1;27pkt 27fpkt"];
4730--5269[label="1;1pkt 1fpkt"];
4780--5295[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_ip="131.233.146.219" src_port="80"/>
      <filter dst_ip="149.207.204.50" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
585[label="149.207.96.41;d;37pkt 37fpkt", shape=diamond, color=yellow];
1512[label="59.78.11.224;s;2pkt 2fpkt", shape=diamond, color=yellow];
3725[label="59.78.11.224;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4764[label="59.78.11.224;1pkt 1fpkt", shape=invtriangle, color=brown];
5288[label="59.78.11.224;1pkt 1fpkt", shape=invhouse, color=bisque];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6881, 149.207.96.41:*}[37.8378%]&lt;BR/&gt;{*:*, 149.207.96.41:62085}[32.4324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62085: (19.0476%)&lt;BR/&gt; 6881: (16.6667%)&lt;BR/&gt; 6883: (10.7143%)&lt;BR/&gt; 62073: (8.33333%)&lt;BR/&gt; 6882: (8.33333%)&gt;];
}
585--1512[label="1;2pkt 2fpkt"];
585--3725[label="1;1pkt 1fpkt"];
585--4764[label="1;1pkt 1fpkt"];
585--5288[label="1;1pkt 1fpkt"];
1512--3725[label="1;1pkt 1fpkt"];
1512--4764[label="1;1pkt 1fpkt"];
1512--5288[label="1;1pkt 1fpkt"];
3725--4764[label="1;1pkt 1fpkt"];
3725--5288[label="1;1pkt 1fpkt"];
4764--5288[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.96.41" src_port="6881"/>
      <filter dst_ip="149.207.96.41" dst_port="62085"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
741[label="200.133.97.160;d;6pkt 6fpkt", shape=diamond, color=yellow];
1386[label="212.241.109.231;s;1pkt 1fpkt", shape=diamond, color=yellow];
1503[label="213.244.63.176;s;1pkt 1fpkt", shape=diamond, color=yellow];
1514[label="76.58.82.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
2226[label="76.58.82.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 200.133.97.160:0}[66.6667%]&lt;BR/&gt;{198.248.62.178:6667, 200.133.97.160:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (80%)&lt;BR/&gt; 6667: (10%)&lt;BR/&gt; 2352: (5%)&lt;BR/&gt; 1806: (5%)&gt;];
}
741--1386[label="1;1pkt 1fpkt"];
741--1503[label="1;1pkt 1fpkt"];
741--1514[label="1;1pkt 1fpkt"];
741--2226[label="1;1pkt 1fpkt"];
1514--2226[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.133.97.160" src_ip="198.248.62.178" src_port="6667"/>
      <filter dst_ip="200.133.97.160"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="200.180.27.204"/>
      <from sec="1071205203" usec="0"/>
      <to sec="1071206028" usec="0"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
1228[label="201.118.249.103;d;428pkt 428fpkt", shape=diamond, color=yellow];
1265[label="200.180.0.139;d;330pkt 330fpkt", shape=diamond, color=yellow];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 201.118.249.103:53}[41.4248%]&lt;BR/&gt;{*:*, 200.180.0.139:53}[40.2375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.9657%)&lt;BR/&gt; 0: (10.0264%)&lt;BR/&gt; 80: (2.11082%)&lt;BR/&gt; 32768: (1.2533%)&lt;BR/&gt; 56045: (0.923483%)&gt;];
}
1228--1263[label="0.00925926;1pkt 1fpkt"];
1228--1413[label="0.025;1pkt 1fpkt"];
1228--1417[label="0.05;2pkt 2fpkt"];
1228--1533[label="0.0120482;1pkt 1fpkt"];
1228--1940[label="1;351pkt 351fpkt"];
1228--2104[label="0.00233645;1pkt 1fpkt"];
1228--2105[label="0.00233645;1pkt 1fpkt"];
1228--2110[label="0.00700935;3pkt 3fpkt"];
1228--2111[label="0.00233645;1pkt 1fpkt"];
1228--2125[label="0.00233645;1pkt 1fpkt"];
1228--2131[label="0.00233645;1pkt 1fpkt"];
1228--2606[label="0.2;1pkt 1fpkt"];
1228--2808[label="0.0217391;1pkt 1fpkt"];
1228--2830[label="0.0769231;1pkt 1fpkt"];
1228--3201[label="0.0526316;1pkt 1fpkt"];
1228--3404[label="0.00233645;1pkt 1fpkt"];
1228--3706[label="0.0104167;1pkt 1fpkt"];
1228--4280[label="0.0217391;1pkt 1fpkt"];
1228--4751[label="0.0104167;1pkt 1fpkt"];
1228--5280[label="0.0104167;1pkt 1fpkt"];
1265--1283[label="0.011236;1pkt 1fpkt"];
1265--1568[label="0.0625;1pkt 1fpkt"];
1265--2013[label="0.011236;1pkt 1fpkt"];
1265--2039[label="0.0625;1pkt 1fpkt"];
1265--2106[label="0.0030303;1pkt 1fpkt"];
1265--2538[label="0.231884;16pkt 16fpkt"];
1265--2606[label="0.2;1pkt 1fpkt"];
1265--2674[label="0.04;1pkt 1fpkt"];
1265--3224[label="0.05;1pkt 1fpkt"];
1265--3802[label="0.037037;1pkt 1fpkt"];
1265--4479[label="0.05;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.118.249.103" dst_port="53"/>
      <filter dst_ip="200.180.0.139" dst_port="53"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
1002[label="149.207.58.80;d;113pkt 113fpkt", shape=diamond, color=yellow];
1534[label="32.167.215.156;s;1pkt 1fpkt", shape=diamond, color=yellow];
3478[label="101.43.28.187;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 149.207.58.80:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1674: (3.04348%)&lt;BR/&gt; 3500: (2.6087%)&lt;BR/&gt; 2779: (2.17391%)&lt;BR/&gt; 2197: (2.17391%)&lt;BR/&gt; 1609: (2.17391%)&gt;];
}
1002--1534[label="1;1pkt 1fpkt"];
1002--3478[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.58.80"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
1550[label="131.233.4.91;d;32pkt 32fpkt", shape=diamond, color=yellow];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.152.1.197:80, 131.233.4.91:*}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4375%)&lt;BR/&gt; 2889: (1.5625%)&lt;BR/&gt; 1656: (1.5625%)&lt;BR/&gt; 1653: (1.5625%)&lt;BR/&gt; 1652: (1.5625%)&gt;];
}
1550--1952[label="0.03125;1pkt 1fpkt"];
1550--2103[label="0.03125;1pkt 1fpkt"];
1550--2178[label="0.1;1pkt 1fpkt"];
1550--3453[label="0.03125;1pkt 1fpkt"];
1550--3930[label="0.111111;1pkt 1fpkt"];
1550--4884[label="0.1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.233.4.91" src_ip="208.152.1.197" src_port="80"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071205979" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="150.160.191.91"/>
      <from sec="1071205208" usec="0"/>
      <to sec="1071206028" usec="0"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="131.233.146.233"/>
      <from sec="1071205216" usec="0"/>
      <to sec="1071206027" usec="0"/>
    </slice>
    <from sec="1071205216" usec="0"/>
    <to sec="1071206027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
1607[label="216.200.130.191;s;17pkt 17fpkt", shape=diamond, color=yellow];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.200.130.191:21, 131.140.128.103:*}[41.1765%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (23.5294%)&lt;BR/&gt; 58810: (2.94118%)&lt;BR/&gt; 34911: (2.94118%)&lt;BR/&gt; 34907: (2.94118%)&lt;BR/&gt; 34901: (2.94118%)&gt;];
}
1607--3501[label="1;17pkt 17fpkt"];
1607--4636[label="1;17pkt 17fpkt"];
1607--5215[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="131.140.128.103" src_ip="216.200.130.191" src_port="21"/>
    </slice>
    <from sec="1071205803" usec="0"/>
    <to sec="1071206018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
1476[label="199.26.25.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.26.25.171:0, 200.180.4.46:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="200.180.4.46" src_ip="199.26.25.171"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
900[label="149.207.217.214;d;855pkt 855fpkt", shape=diamond, color=yellow];
3080[label="211.59.81.129;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.54.185.175:3030, 149.207.217.214:*}[47.7804%]&lt;BR/&gt;{218.54.185.175:*, 149.207.217.214:113}[46.9626%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3030: (23.8345%)&lt;BR/&gt; 113: (23.4266%)&lt;BR/&gt; 80: (2.331%)&lt;BR/&gt; 3531: (0.174825%)&lt;BR/&gt; 3464: (0.11655%)&gt;];
}
900--1574[label="0.0227273;2pkt 2fpkt"];
900--1697[label="1;77pkt 77fpkt"];
900--2103[label="0.00116959;1pkt 1fpkt"];
900--3080[label="0.666667;2pkt 2fpkt"];
900--3163[label="0.3;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.214" src_ip="218.54.185.175" src_port="3030"/>
      <filter dst_ip="149.207.217.214" dst_port="113" src_ip="218.54.185.175"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889707,1.5466,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
308[label="166.55.179.5;d;369pkt 369fpkt", shape=diamond, color=yellow];
315[label="213.142.236.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
318[label="34.189.46.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
398[label="130.106.247.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
413[label="59.28.229.85;s;1pkt 1fpkt", shape=diamond, color=yellow];
573[label="166.146.177.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
576[label="34.0.131.34;s;1pkt 1fpkt", shape=diamond, color=yellow];
586[label="35.42.236.154;s;1pkt 1fpkt", shape=diamond, color=yellow];
748[label="34.52.91.173;s;1pkt 1fpkt", shape=diamond, color=yellow];
1146[label="212.56.129.186;s;1pkt 1fpkt", shape=diamond, color=yellow];
1621[label="76.133.205.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
1680[label="166.146.177.41;s;1pkt 1fpkt", shape=hexagon, color=black];
1938[label="130.106.247.38;s;1pkt 1fpkt", shape=hexagon, color=black];
2408[label="34.0.131.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3255[label="35.42.236.154;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4085[label="130.106.247.38;1pkt 1fpkt", shape=invtriangle, color=brown];
4498[label="35.42.236.154;1pkt 1fpkt", shape=invtriangle, color=brown];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 166.55.179.5:*}[54.7425%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (28.0519%)&lt;BR/&gt; 7994: (9.48052%)&lt;BR/&gt; 80: (1.81818%)&lt;BR/&gt; 5662: (0.909091%)&lt;BR/&gt; 3029: (0.909091%)&gt;];
}
308--309[label="1;1pkt 1fpkt"];
308--315[label="1;1pkt 1fpkt"];
308--318[label="1;1pkt 1fpkt"];
308--398[label="1;1pkt 1fpkt"];
308--413[label="1;1pkt 1fpkt"];
308--573[label="1;1pkt 1fpkt"];
308--576[label="1;1pkt 1fpkt"];
308--577[label="1;1pkt 1fpkt"];
308--586[label="1;1pkt 1fpkt"];
308--712[label="1;1pkt 1fpkt"];
308--748[label="1;1pkt 1fpkt"];
308--1146[label="1;1pkt 1fpkt"];
308--1586[label="1;1pkt 1fpkt"];
308--1621[label="1;1pkt 1fpkt"];
308--1680[label="1;1pkt 1fpkt"];
308--1890[label="1;1pkt 1fpkt"];
308--1893[label="1;1pkt 1fpkt"];
308--1938[label="1;1pkt 1fpkt"];
308--2025[label="1;1pkt 1fpkt"];
308--2103[label="0.00271003;1pkt 1fpkt"];
308--2408[label="1;1pkt 1fpkt"];
308--2463[label="1;1pkt 1fpkt"];
308--3255[label="1;1pkt 1fpkt"];
308--4085[label="1;1pkt 1fpkt"];
308--4498[label="1;1pkt 1fpkt"];
398--1938[label="1;1pkt 1fpkt"];
398--4085[label="1;1pkt 1fpkt"];
573--1680[label="1;1pkt 1fpkt"];
576--2408[label="1;1pkt 1fpkt"];
586--3255[label="1;1pkt 1fpkt"];
586--4498[label="1;1pkt 1fpkt"];
1938--4085[label="1;1pkt 1fpkt"];
3255--4498[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.179.5" src_port="4662"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
1427[label="198.143.226.103;s;31pkt 31fpkt", shape=diamond, color=yellow];
1591[label="149.206.228.234;d;31pkt 31fpkt", shape=diamond, color=yellow];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.143.226.103:80, 149.206.228.234:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1671: (1.6129%)&lt;BR/&gt; 1670: (1.6129%)&lt;BR/&gt; 1669: (1.6129%)&lt;BR/&gt; 1668: (1.6129%)&gt;];
}
1427--1591[label="1;31pkt 31fpkt"];
1427--2103[label="0.0967742;3pkt 3fpkt"];
1591--2103[label="0.0967742;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.228.234" src_ip="198.143.226.103" src_port="80"/>
    </slice>
    <from sec="1071205504" usec="0"/>
    <to sec="1071205976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
836[label="149.206.205.29;d;172pkt 172fpkt", shape=diamond, color=yellow];
2518[label="218.166.133.47;60pkt 60fpkt", shape=pentagon, color=darkviolet];
2679[label="218.166.133.68;50pkt 50fpkt", shape=pentagon, color=darkviolet];
4210[label="218.166.133.68;50pkt 50fpkt", shape=invtriangle, color=brown];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.166.133.47:80, 149.206.205.29:*}[30.5263%]&lt;BR/&gt;{218.166.133.68:80, 149.206.205.29:*}[26.3158%]&lt;BR/&gt;{211.38.138.32:80, 149.206.205.29:*}[21.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1822: (0.451807%)&lt;BR/&gt; 1820: (0.451807%)&lt;BR/&gt; 1819: (0.451807%)&lt;BR/&gt; 1771: (0.451807%)&gt;];
}
836--837[label="0.95122;39pkt 39fpkt"];
836--1053[label="1;25pkt 25fpkt"];
836--1605[label="0.953488;41pkt 41fpkt"];
836--1867[label="1;113pkt 113fpkt"];
836--2045[label="1;25pkt 25fpkt"];
836--2103[label="0.0406977;7pkt 7fpkt"];
836--2392[label="0.953488;41pkt 41fpkt"];
836--2518[label="0.766667;46pkt 46fpkt"];
836--2679[label="0.92;46pkt 46fpkt"];
836--3716[label="0.111111;2pkt 2fpkt"];
836--4053[label="0.97619;41pkt 41fpkt"];
836--4122[label="0.779661;46pkt 46fpkt"];
836--4210[label="0.92;46pkt 46fpkt"];
836--4757[label="0.111111;2pkt 2fpkt"];
836--4949[label="0.97619;41pkt 41fpkt"];
836--5284[label="0.111111;2pkt 2fpkt"];
2518--4122[label="1;59pkt 59fpkt"];
2679--4210[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.205.29" src_ip="218.166.133.47" src_port="80"/>
      <filter dst_ip="149.206.205.29" src_ip="218.166.133.68" src_port="80"/>
      <filter dst_ip="149.206.205.29" src_ip="211.38.138.32" src_port="80"/>
    </slice>
    <from sec="1071205416" usec="0"/>
    <to sec="1071206040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="207.161.245.67"/>
      <from sec="1071205899" usec="0"/>
      <to sec="1071206029" usec="0"/>
    </slice>
    <from sec="1071205899" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="200.217.33.102"/>
      <from sec="1071205926" usec="0"/>
      <to sec="1071206029" usec="0"/>
    </slice>
    <from sec="1071205926" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
1625[label="212.147.50.2;s;24pkt 24fpkt", shape=diamond, color=yellow];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.147.50.2:80, 149.206.251.73:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1692: (2.08333%)&lt;BR/&gt; 1691: (2.08333%)&lt;BR/&gt; 1690: (2.08333%)&lt;BR/&gt; 1689: (2.08333%)&gt;];
}
1625--2052[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.251.73" src_ip="212.147.50.2" src_port="80"/>
    </slice>
    <from sec="1071205930" usec="0"/>
    <to sec="1071205992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
299[label="201.120.165.63;d;878pkt 878fpkt", shape=diamond, color=yellow];
416[label="149.206.203.30;d;7pkt 7fpkt", shape=diamond, color=yellow];
496[label="149.206.228.247;d;58pkt 58fpkt", shape=diamond, color=yellow];
509[label="58.67.129.164;s;97pkt 97fpkt", shape=diamond, color=yellow];
642[label="58.67.129.20;s;274pkt 274fpkt", shape=diamond, color=yellow];
650[label="59.26.102.3;s;74pkt 74fpkt", shape=diamond, color=yellow];
659[label="149.206.203.20;d;65pkt 65fpkt", shape=diamond, color=yellow];
787[label="216.217.77.2;s;282pkt 282fpkt", shape=diamond, color=yellow];
924[label="58.240.77.173;s;53pkt 53fpkt", shape=diamond, color=yellow];
936[label="145.71.97.2;d;66pkt 66fpkt", shape=diamond, color=yellow];
1043[label="149.206.251.201;d;31pkt 31fpkt", shape=diamond, color=yellow];
1073[label="149.206.203.28;d;3pkt 3fpkt", shape=diamond, color=yellow];
1141[label="205.1.232.88;s;138pkt 138fpkt", shape=diamond, color=yellow];
1162[label="145.166.243.45;d;57pkt 57fpkt", shape=diamond, color=yellow];
1183[label="211.21.138.220;s;13pkt 13fpkt", shape=diamond, color=yellow];
1185[label="149.207.244.44;d;200pkt 200fpkt", shape=diamond, color=yellow];
1195[label="82.25.121.144;s;4pkt 4fpkt", shape=diamond, color=yellow];
1197[label="149.206.203.8;d;230pkt 230fpkt", shape=diamond, color=yellow];
1199[label="149.206.30.197;d;73pkt 73fpkt", shape=diamond, color=yellow];
1308[label="149.206.203.26;d;31pkt 31fpkt", shape=diamond, color=yellow];
1321[label="218.61.165.175;s;158pkt 158fpkt", shape=diamond, color=yellow];
1561[label="201.118.239.116;d;60pkt 60fpkt", shape=diamond, color=yellow];
1564[label="59.26.116.20;s;71pkt 71fpkt", shape=diamond, color=yellow];
1570[label="205.1.204.87;s;50pkt 50fpkt", shape=diamond, color=yellow];
1575[label="149.206.16.1;d;132pkt 132fpkt", shape=diamond, color=yellow];
1576[label="58.67.185.98;s;73pkt 73fpkt", shape=diamond, color=yellow];
1626[label="218.61.165.182;s;153pkt 153fpkt", shape=diamond, color=yellow];
1627[label="149.206.232.32;d;197pkt 197fpkt", shape=diamond, color=yellow];
1645[label="201.120.165.63;d;878pkt 878fpkt", shape=hexagon, color=black];
1664[label="58.67.129.164;s;24pkt 24fpkt", shape=hexagon, color=black];
1700[label="58.240.77.254;s;46pkt 46fpkt", shape=hexagon, color=black];
1740[label="149.207.103.36;d;185pkt 185fpkt", shape=hexagon, color=black];
1741[label="216.217.77.2;s;83pkt 83fpkt", shape=hexagon, color=black];
1757[label="216.189.12.169;s;64pkt 64fpkt", shape=hexagon, color=black];
1921[label="211.21.138.220;s;7pkt 7fpkt", shape=hexagon, color=black];
1962[label="205.1.233.92;s;118pkt 118fpkt", shape=hexagon, color=black];
1970[label="59.26.102.3;s;58pkt 58fpkt", shape=hexagon, color=black];
1991[label="57.224.149.189;s;104pkt 104fpkt", shape=hexagon, color=black];
2155[label="216.217.77.2;301pkt 301fpkt", shape=pentagon, color=darkviolet];
2164[label="59.26.102.3;74pkt 74fpkt", shape=pentagon, color=darkviolet];
2203[label="82.26.249.7;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2243[label="57.216.94.12;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2291[label="59.26.116.20;74pkt 74fpkt", shape=pentagon, color=darkviolet];
2292[label="58.67.129.20;278pkt 278fpkt", shape=pentagon, color=darkviolet];
2379[label="57.223.49.31;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2426[label="58.240.85.36;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2646[label="216.24.83.64;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2813[label="208.142.133.87;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2817[label="205.1.232.88;147pkt 147fpkt", shape=pentagon, color=darkviolet];
2859[label="216.115.234.93;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2956[label="212.188.46.109;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3016[label="205.1.44.118;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3178[label="82.25.121.144;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3320[label="58.67.129.164;106pkt 106fpkt", shape=pentagon, color=darkviolet];
3342[label="216.189.12.169;135pkt 135fpkt", shape=pentagon, color=darkviolet];
3374[label="58.240.77.173;62pkt 62fpkt", shape=pentagon, color=darkviolet];
3400[label="218.61.165.176;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3414[label="218.61.165.177;75pkt 75fpkt", shape=pentagon, color=darkviolet];
3429[label="218.61.165.179;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3448[label="218.61.165.182;163pkt 163fpkt", shape=pentagon, color=darkviolet];
3461[label="218.61.165.184;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3493[label="59.26.15.189;40pkt 40fpkt", shape=pentagon, color=darkviolet];
3585[label="216.207.222.204;41pkt 41fpkt", shape=pentagon, color=darkviolet];
3628[label="57.98.34.212;52pkt 52fpkt", shape=pentagon, color=darkviolet];
3632[label="59.26.117.212;56pkt 56fpkt", shape=pentagon, color=darkviolet];
3694[label="211.21.138.220;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3722[label="216.16.168.223;1128pkt 1128fpkt", shape=pentagon, color=darkviolet];
3738[label="57.246.91.225;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3774[label="57.246.91.232;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3775[label="78.45.136.232;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3799[label="78.45.136.235;61pkt 61fpkt", shape=pentagon, color=darkviolet];
3913[label="216.217.77.2;300pkt 300fpkt", shape=invtriangle, color=brown];
3918[label="59.26.102.3;74pkt 74fpkt", shape=invtriangle, color=brown];
3968[label="57.216.94.12;28pkt 28fpkt", shape=invtriangle, color=brown];
3996[label="58.67.129.20;279pkt 279fpkt", shape=invtriangle, color=brown];
4071[label="58.240.85.36;11pkt 11fpkt", shape=invtriangle, color=brown];
4191[label="210.67.181.63;13pkt 13fpkt", shape=invtriangle, color=brown];
4307[label="216.115.234.93;6pkt 6fpkt", shape=invtriangle, color=brown];
4458[label="82.25.121.144;4pkt 4fpkt", shape=invtriangle, color=brown];
4539[label="58.67.129.164;106pkt 106fpkt", shape=invtriangle, color=brown];
4549[label="216.189.12.169;135pkt 135fpkt", shape=invtriangle, color=brown];
4571[label="58.240.77.173;62pkt 62fpkt", shape=invtriangle, color=brown];
4586[label="218.61.165.176;23pkt 23fpkt", shape=invtriangle, color=brown];
4602[label="218.61.165.179;10pkt 10fpkt", shape=invtriangle, color=brown];
4612[label="218.61.165.182;163pkt 163fpkt", shape=invtriangle, color=brown];
4682[label="216.207.222.204;41pkt 41fpkt", shape=invtriangle, color=brown];
4707[label="57.98.34.212;52pkt 52fpkt", shape=invtriangle, color=brown];
4710[label="59.26.117.212;56pkt 56fpkt", shape=invtriangle, color=brown];
4745[label="211.21.138.220;24pkt 24fpkt", shape=invtriangle, color=brown];
4771[label="57.246.91.225;1pkt 1fpkt", shape=invtriangle, color=brown];
4795[label="57.246.91.232;1pkt 1fpkt", shape=invtriangle, color=brown];
4810[label="78.45.136.235;61pkt 61fpkt", shape=invtriangle, color=brown];
4871[label="216.217.77.2;300pkt 300fpkt", shape=invhouse, color=bisque];
4876[label="59.26.102.3;74pkt 74fpkt", shape=invhouse, color=bisque];
4952[label="58.240.85.36;11pkt 11fpkt", shape=invhouse, color=bisque];
5069[label="216.115.234.93;6pkt 6fpkt", shape=invhouse, color=bisque];
5172[label="58.67.129.164;106pkt 106fpkt", shape=invhouse, color=bisque];
5176[label="216.189.12.169;135pkt 135fpkt", shape=invhouse, color=bisque];
5187[label="58.240.77.173;62pkt 62fpkt", shape=invhouse, color=bisque];
5193[label="218.61.165.176;23pkt 23fpkt", shape=invhouse, color=bisque];
5201[label="218.61.165.179;10pkt 10fpkt", shape=invhouse, color=bisque];
5205[label="218.61.165.182;163pkt 163fpkt", shape=invhouse, color=bisque];
5244[label="216.207.222.204;41pkt 41fpkt", shape=invhouse, color=bisque];
5257[label="57.98.34.212;52pkt 52fpkt", shape=invhouse, color=bisque];
5258[label="59.26.117.212;56pkt 56fpkt", shape=invhouse, color=bisque];
5278[label="211.21.138.220;24pkt 24fpkt", shape=invhouse, color=bisque];
5292[label="57.246.91.225;1pkt 1fpkt", shape=invhouse, color=bisque];
5304[label="57.246.91.232;1pkt 1fpkt", shape=invhouse, color=bisque];
5310[label="78.45.136.235;61pkt 61fpkt", shape=invhouse, color=bisque];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.16.168.223:80, *:*}[22.3543%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.6188%)&lt;BR/&gt; 443: (1.42307%)&lt;BR/&gt; 0: (0.591772%)&lt;BR/&gt; 53: (0.159684%)&lt;BR/&gt; 63171: (0.150291%)&gt;];
}
299--306[label="0.047836;42pkt 42fpkt"];
299--442[label="0.0909091;6pkt 6fpkt"];
299--454[label="0.032345;12pkt 12fpkt"];
299--466[label="0.117647;16pkt 16fpkt"];
299--473[label="0.0967742;15pkt 15fpkt"];
299--476[label="0.099768;43pkt 43fpkt"];
299--502[label="0.0362319;5pkt 5fpkt"];
299--509[label="0.0309278;3pkt 3fpkt"];
299--524[label="0.0463918;9pkt 9fpkt"];
299--578[label="0.00609756;2pkt 2fpkt"];
299--605[label="0.0222222;1pkt 1fpkt"];
299--614[label="0.0080429;3pkt 3fpkt"];
299--617[label="0.0181818;3pkt 3fpkt"];
299--635[label="0.00666667;1pkt 1fpkt"];
299--650[label="0.0405405;3pkt 3fpkt"];
299--675[label="0.319444;46pkt 46fpkt"];
299--680[label="0.0138889;1pkt 1fpkt"];
299--687[label="0.00326797;1pkt 1fpkt"];
299--689[label="0.015;3pkt 3fpkt"];
299--690[label="0.00113895;1pkt 1fpkt"];
299--717[label="0.0466321;9pkt 9fpkt"];
299--738[label="0.0341365;17pkt 17fpkt"];
299--753[label="0.0163488;6pkt 6fpkt"];
299--766[label="0.0102249;5pkt 5fpkt"];
299--778[label="0.145062;47pkt 47fpkt"];
299--787[label="0.0567376;16pkt 16fpkt"];
299--790[label="0.00396825;1pkt 1fpkt"];
299--815[label="0.0757576;10pkt 10fpkt"];
299--847[label="0.00502513;1pkt 1fpkt"];
299--897[label="0.00682594;2pkt 2fpkt"];
299--898[label="0.0689655;6pkt 6fpkt"];
299--907[label="0.0588235;4pkt 4fpkt"];
299--924[label="0.245283;13pkt 13fpkt"];
299--990[label="0.0104167;1pkt 1fpkt"];
299--1009[label="0.0659341;6pkt 6fpkt"];
299--1039[label="0.017341;3pkt 3fpkt"];
299--1141[label="0.0797101;11pkt 11fpkt"];
299--1143[label="0.027972;4pkt 4fpkt"];
299--1153[label="0.02;1pkt 1fpkt"];
299--1158[label="0.00757576;1pkt 1fpkt"];
299--1190[label="1;5pkt 5fpkt"];
299--1195[label="1;4pkt 4fpkt"];
299--1209[label="0.00113895;1pkt 1fpkt"];
299--1227[label="0.182692;19pkt 19fpkt"];
299--1251[label="0.0823529;7pkt 7fpkt"];
299--1271[label="0.0263158;2pkt 2fpkt"];
299--1321[label="0.00632911;1pkt 1fpkt"];
299--1337[label="0.00113895;1pkt 1fpkt"];
299--1355[label="0.00877193;1pkt 1fpkt"];
299--1520[label="0.031746;2pkt 2fpkt"];
299--1529[label="0.0172414;1pkt 1fpkt"];
299--1549[label="0.0136986;1pkt 1fpkt"];
299--1564[label="0.0140845;1pkt 1fpkt"];
299--1570[label="0.02;1pkt 1fpkt"];
299--1571[label="0.00537634;1pkt 1fpkt"];
299--1576[label="0.0547945;4pkt 4fpkt"];
299--1578[label="0.0689655;6pkt 6fpkt"];
299--1604[label="1;2pkt 2fpkt"];
299--1626[label="0.0130719;2pkt 2fpkt"];
299--1628[label="0.025641;2pkt 2fpkt"];
299--1645[label="1;878pkt 878fpkt"];
299--1700[label="0.108696;5pkt 5fpkt"];
299--1721[label="0.037594;5pkt 5fpkt"];
299--1729[label="0.0531915;10pkt 10fpkt"];
299--1735[label="0.0379747;3pkt 3fpkt"];
299--1737[label="0.027027;3pkt 3fpkt"];
299--1741[label="0.13253;11pkt 11fpkt"];
299--1757[label="0.109375;7pkt 7fpkt"];
299--1800[label="0.0127389;2pkt 2fpkt"];
299--1801[label="0.00682594;2pkt 2fpkt"];
299--1858[label="0.0362319;5pkt 5fpkt"];
299--1876[label="0.00502513;1pkt 1fpkt"];
299--1897[label="0.0104167;1pkt 1fpkt"];
299--1921[label="0.571429;4pkt 4fpkt"];
299--1970[label="0.0517241;3pkt 3fpkt"];
299--1985[label="0.00113895;1pkt 1fpkt"];
299--1991[label="0.182692;19pkt 19fpkt"];
299--2002[label="0.00970874;1pkt 1fpkt"];
299--2047[label="0.00113895;1pkt 1fpkt"];
299--2090[label="0.00113895;1pkt 1fpkt"];
299--2103[label="0.0990888;87pkt 87fpkt"];
299--2106[label="0.00113895;1pkt 1fpkt"];
299--2155[label="0.0531561;16pkt 16fpkt"];
299--2164[label="0.0405405;3pkt 3fpkt"];
299--2203[label="0.75;6pkt 6fpkt"];
299--2230[label="0.00465116;1pkt 1fpkt"];
299--2243[label="0.148148;4pkt 4fpkt"];
299--2268[label="0.016129;1pkt 1fpkt"];
299--2278[label="0.125668;47pkt 47fpkt"];
299--2291[label="0.0135135;1pkt 1fpkt"];
299--2342[label="0.1;1pkt 1fpkt"];
299--2379[label="1;3pkt 3fpkt"];
299--2380[label="0.0909091;1pkt 1fpkt"];
299--2390[label="0.0157895;3pkt 3fpkt"];
299--2426[label="0.3;3pkt 3fpkt"];
299--2473[label="0.0714286;1pkt 1fpkt"];
299--2543[label="0.030303;2pkt 2fpkt"];
299--2553[label="0.0217391;2pkt 2fpkt"];
299--2612[label="0.00554017;2pkt 2fpkt"];
299--2640[label="0.285714;4pkt 4fpkt"];
299--2646[label="0.210526;4pkt 4fpkt"];
299--2658[label="0.0254777;4pkt 4fpkt"];
299--2686[label="0.134831;12pkt 12fpkt"];
299--2811[label="0.00961538;5pkt 5fpkt"];
299--2813[label="0.0833333;1pkt 1fpkt"];
299--2815[label="0.0181818;1pkt 1fpkt"];
299--2817[label="0.0748299;11pkt 11fpkt"];
299--2840[label="0.06;3pkt 3fpkt"];
299--2858[label="0.00819672;1pkt 1fpkt"];
299--2859[label="0.166667;1pkt 1fpkt"];
299--2889[label="0.00113895;1pkt 1fpkt"];
299--2956[label="1;1pkt 1fpkt"];
299--3137[label="0.0441176;9pkt 9fpkt"];
299--3178[label="1;4pkt 4fpkt"];
299--3195[label="0.0277778;2pkt 2fpkt"];
299--3225[label="0.0987654;16pkt 16fpkt"];
299--3226[label="0.0957447;9pkt 9fpkt"];
299--3237[label="0.0304569;12pkt 12fpkt"];
299--3297[label="0.0857143;6pkt 6fpkt"];
299--3320[label="0.0283019;3pkt 3fpkt"];
299--3339[label="0.0196078;1pkt 1fpkt"];
299--3342[label="0.0740741;10pkt 10fpkt"];
299--3374[label="0.209677;13pkt 13fpkt"];
299--3400[label="0.217391;5pkt 5fpkt"];
299--3414[label="0.04;3pkt 3fpkt"];
299--3429[label="0.3;3pkt 3fpkt"];
299--3433[label="0.0196078;1pkt 1fpkt"];
299--3434[label="0.0714286;2pkt 2fpkt"];
299--3441[label="0.00704225;1pkt 1fpkt"];
299--3442[label="0.0689655;6pkt 6fpkt"];
299--3448[label="0.0368098;6pkt 6fpkt"];
299--3461[label="0.181818;2pkt 2fpkt"];
299--3493[label="0.025;1pkt 1fpkt"];
299--3512[label="0.0128205;1pkt 1fpkt"];
299--3585[label="0.097561;4pkt 4fpkt"];
299--3586[label="0.0108696;1pkt 1fpkt"];
299--3591[label="0.0141844;2pkt 2fpkt"];
299--3628[label="0.115385;6pkt 6fpkt"];
299--3632[label="0.107143;6pkt 6fpkt"];
299--3662[label="0.0222222;1pkt 1fpkt"];
299--3664[label="0.025;2pkt 2fpkt"];
299--3694[label="0.166667;4pkt 4fpkt"];
299--3722[label="0.047836;42pkt 42fpkt"];
299--3738[label="1;1pkt 1fpkt"];
299--3774[label="1;1pkt 1fpkt"];
299--3775[label="0.263158;5pkt 5fpkt"];
299--3799[label="0.0819672;5pkt 5fpkt"];
299--3835[label="0.014218;3pkt 3fpkt"];
299--3887[label="0.275449;46pkt 46fpkt"];
299--3913[label="0.0533333;16pkt 16fpkt"];
299--3918[label="0.0405405;3pkt 3fpkt"];
299--3959[label="0.00465116;1pkt 1fpkt"];
299--3968[label="0.178571;5pkt 5fpkt"];
299--3989[label="0.125668;47pkt 47fpkt"];
299--4044[label="0.0909091;1pkt 1fpkt"];
299--4071[label="0.272727;3pkt 3fpkt"];
299--4094[label="0.0769231;1pkt 1fpkt"];
299--4138[label="0.0153846;1pkt 1fpkt"];
299--4147[label="0.021978;2pkt 2fpkt"];
299--4176[label="0.00555556;2pkt 2fpkt"];
299--4191[label="0.307692;4pkt 4fpkt"];
299--4201[label="0.0254777;4pkt 4fpkt"];
299--4214[label="0.134831;12pkt 12fpkt"];
299--4307[label="0.166667;1pkt 1fpkt"];
299--4325[label="0.00113895;1pkt 1fpkt"];
299--4441[label="0.0441176;9pkt 9fpkt"];
299--4458[label="1;4pkt 4fpkt"];
299--4467[label="0.0277778;2pkt 2fpkt"];
299--4480[label="0.0957447;9pkt 9fpkt"];
299--4527[label="0.0857143;6pkt 6fpkt"];
299--4539[label="0.0283019;3pkt 3fpkt"];
299--4547[label="0.0196078;1pkt 1fpkt"];
299--4549[label="0.0740741;10pkt 10fpkt"];
299--4571[label="0.209677;13pkt 13fpkt"];
299--4586[label="0.217391;5pkt 5fpkt"];
299--4602[label="0.3;3pkt 3fpkt"];
299--4604[label="0.0196078;1pkt 1fpkt"];
299--4605[label="0.0714286;2pkt 2fpkt"];
299--4609[label="0.0689655;6pkt 6fpkt"];
299--4612[label="0.0368098;6pkt 6fpkt"];
299--4682[label="0.097561;4pkt 4fpkt"];
299--4683[label="0.0108696;1pkt 1fpkt"];
299--4707[label="0.115385;6pkt 6fpkt"];
299--4710[label="0.107143;6pkt 6fpkt"];
299--4726[label="0.0222222;1pkt 1fpkt"];
299--4745[label="0.166667;4pkt 4fpkt"];
299--4771[label="1;1pkt 1fpkt"];
299--4795[label="1;1pkt 1fpkt"];
299--4810[label="0.0819672;5pkt 5fpkt"];
299--4832[label="0.014218;3pkt 3fpkt"];
299--4860[label="0.275449;46pkt 46fpkt"];
299--4871[label="0.0533333;16pkt 16fpkt"];
299--4876[label="0.0405405;3pkt 3fpkt"];
299--4918[label="0.125333;47pkt 47fpkt"];
299--4952[label="0.272727;3pkt 3fpkt"];
299--4989[label="0.030303;2pkt 2fpkt"];
299--5008[label="0.00554017;2pkt 2fpkt"];
299--5019[label="0.285714;4pkt 4fpkt"];
299--5025[label="0.0254777;4pkt 4fpkt"];
299--5069[label="0.166667;1pkt 1fpkt"];
299--5122[label="0.0441176;9pkt 9fpkt"];
299--5172[label="0.0283019;3pkt 3fpkt"];
299--5176[label="0.0740741;10pkt 10fpkt"];
299--5187[label="0.209677;13pkt 13fpkt"];
299--5193[label="0.217391;5pkt 5fpkt"];
299--5201[label="0.3;3pkt 3fpkt"];
299--5202[label="0.0714286;2pkt 2fpkt"];
299--5204[label="0.0689655;6pkt 6fpkt"];
299--5205[label="0.0368098;6pkt 6fpkt"];
299--5244[label="0.097561;4pkt 4fpkt"];
299--5245[label="0.0108696;1pkt 1fpkt"];
299--5257[label="0.115385;6pkt 6fpkt"];
299--5258[label="0.107143;6pkt 6fpkt"];
299--5278[label="0.166667;4pkt 4fpkt"];
299--5292[label="1;1pkt 1fpkt"];
299--5304[label="1;1pkt 1fpkt"];
299--5310[label="0.0819672;5pkt 5fpkt"];
299--5318[label="0.014218;3pkt 3fpkt"];
416--1183[label="1;7pkt 7fpkt"];
416--3694[label="1;7pkt 7fpkt"];
416--4745[label="1;7pkt 7fpkt"];
416--5278[label="1;7pkt 7fpkt"];
496--509[label="0.172414;10pkt 10fpkt"];
496--614[label="0.0517241;3pkt 3fpkt"];
496--642[label="0.431034;25pkt 25fpkt"];
496--753[label="0.12069;7pkt 7fpkt"];
496--1152[label="0.02;1pkt 1fpkt"];
496--1158[label="0.0172414;1pkt 1fpkt"];
496--1566[label="0.0172414;1pkt 1fpkt"];
496--2012[label="0.0232558;1pkt 1fpkt"];
496--2183[label="0.0185185;1pkt 1fpkt"];
496--2292[label="0.431034;25pkt 25fpkt"];
496--3041[label="0.0227273;1pkt 1fpkt"];
496--3320[label="0.172414;10pkt 10fpkt"];
496--3418[label="0.0172414;1pkt 1fpkt"];
496--3441[label="0.0172414;1pkt 1fpkt"];
496--3664[label="0.0344828;2pkt 2fpkt"];
496--3756[label="0.0178571;1pkt 1fpkt"];
496--3996[label="0.431034;25pkt 25fpkt"];
496--4539[label="0.172414;10pkt 10fpkt"];
496--4595[label="0.0172414;1pkt 1fpkt"];
496--4786[label="0.0178571;1pkt 1fpkt"];
496--5172[label="0.172414;10pkt 10fpkt"];
509--659[label="0.261538;17pkt 17fpkt"];
509--936[label="0.0606061;4pkt 4fpkt"];
509--952[label="0.08;6pkt 6fpkt"];
509--1082[label="0.315789;12pkt 12fpkt"];
509--1308[label="0.483871;15pkt 15fpkt"];
509--1645[label="0.0309278;3pkt 3fpkt"];
509--1664[label="1;24pkt 24fpkt"];
509--1869[label="0.08;6pkt 6fpkt"];
509--1925[label="0.315789;12pkt 12fpkt"];
509--2103[label="0.123711;12pkt 12fpkt"];
509--3320[label="1;97pkt 97fpkt"];
509--4539[label="1;97pkt 97fpkt"];
509--5172[label="1;97pkt 97fpkt"];
642--659[label="0.276923;18pkt 18fpkt"];
642--936[label="0.69697;46pkt 46fpkt"];
642--952[label="0.6;45pkt 45fpkt"];
642--1082[label="0.0263158;1pkt 1fpkt"];
642--1184[label="0.00729927;2pkt 2fpkt"];
642--1199[label="0.0136986;1pkt 1fpkt"];
642--1308[label="0.0967742;3pkt 3fpkt"];
642--1318[label="0.0196078;1pkt 1fpkt"];
642--1461[label="0.0120482;1pkt 1fpkt"];
642--1869[label="0.6;45pkt 45fpkt"];
642--1925[label="0.0263158;1pkt 1fpkt"];
642--1937[label="0.00364964;1pkt 1fpkt"];
642--1977[label="0.0136986;1pkt 1fpkt"];
642--1979[label="0.0196078;1pkt 1fpkt"];
642--2103[label="0.0109489;3pkt 3fpkt"];
642--2292[label="0.99635;273pkt 273fpkt"];
642--3996[label="1;274pkt 274fpkt"];
650--1023[label="0.027027;2pkt 2fpkt"];
650--1067[label="0.121212;4pkt 4fpkt"];
650--1561[label="0.05;3pkt 3fpkt"];
650--1645[label="0.0405405;3pkt 3fpkt"];
650--1690[label="0.243243;18pkt 18fpkt"];
650--1970[label="1;58pkt 58fpkt"];
650--2103[label="0.162162;12pkt 12fpkt"];
650--2164[label="1;74pkt 74fpkt"];
650--3918[label="1;74pkt 74fpkt"];
650--4876[label="1;74pkt 74fpkt"];
659--766[label="0.184615;12pkt 12fpkt"];
659--1158[label="0.0153846;1pkt 1fpkt"];
659--1549[label="0.0461538;3pkt 3fpkt"];
659--1566[label="0.016129;1pkt 1fpkt"];
659--1576[label="0.0461538;3pkt 3fpkt"];
659--1664[label="0.375;9pkt 9fpkt"];
659--2292[label="0.276923;18pkt 18fpkt"];
659--2345[label="0.115385;3pkt 3fpkt"];
659--2811[label="0.184615;12pkt 12fpkt"];
659--3320[label="0.261538;17pkt 17fpkt"];
659--3339[label="0.0196078;1pkt 1fpkt"];
659--3418[label="0.0153846;1pkt 1fpkt"];
659--3441[label="0.0153846;1pkt 1fpkt"];
659--3512[label="0.0461538;3pkt 3fpkt"];
659--3996[label="0.276923;18pkt 18fpkt"];
659--4539[label="0.261538;17pkt 17fpkt"];
659--4547[label="0.0196078;1pkt 1fpkt"];
659--4595[label="0.0153846;1pkt 1fpkt"];
659--5172[label="0.261538;17pkt 17fpkt"];
787--804[label="0.0113636;1pkt 1fpkt"];
787--844[label="0.0460993;13pkt 13fpkt"];
787--886[label="0.0299145;7pkt 7fpkt"];
787--892[label="0.0263158;3pkt 3fpkt"];
787--913[label="0.0138889;1pkt 1fpkt"];
787--991[label="0.148148;12pkt 12fpkt"];
787--1010[label="0.0325203;4pkt 4fpkt"];
787--1461[label="0.0120482;1pkt 1fpkt"];
787--1589[label="0.0681818;3pkt 3fpkt"];
787--1645[label="0.0567376;16pkt 16fpkt"];
787--1656[label="0.0283688;8pkt 8fpkt"];
787--1671[label="0.00877193;1pkt 1fpkt"];
787--1740[label="0.0540541;10pkt 10fpkt"];
787--1741[label="1;83pkt 83fpkt"];
787--1797[label="0.0299145;7pkt 7fpkt"];
787--1849[label="0.148148;12pkt 12fpkt"];
787--1852[label="0.0701754;4pkt 4fpkt"];
787--1937[label="0.0070922;2pkt 2fpkt"];
787--1986[label="0.0035461;1pkt 1fpkt"];
787--2065[label="0.0283688;8pkt 8fpkt"];
787--2103[label="0.070922;20pkt 20fpkt"];
787--2155[label="1;282pkt 282fpkt"];
787--3913[label="0.996454;281pkt 281fpkt"];
787--4871[label="0.996454;281pkt 281fpkt"];
924--991[label="0.0188679;1pkt 1fpkt"];
924--1043[label="0.0645161;2pkt 2fpkt"];
924--1173[label="0.0377358;2pkt 2fpkt"];
924--1645[label="0.245283;13pkt 13fpkt"];
924--1753[label="0.294118;5pkt 5fpkt"];
924--1849[label="0.0188679;1pkt 1fpkt"];
924--1989[label="0.0322581;1pkt 1fpkt"];
924--2103[label="0.0566038;3pkt 3fpkt"];
924--3374[label="1;53pkt 53fpkt"];
924--4571[label="1;53pkt 53fpkt"];
924--5187[label="1;53pkt 53fpkt"];
936--1158[label="0.0151515;1pkt 1fpkt"];
936--1529[label="0.0172414;1pkt 1fpkt"];
936--1576[label="0.0151515;1pkt 1fpkt"];
936--2292[label="0.69697;46pkt 46fpkt"];
936--2811[label="0.0454545;3pkt 3fpkt"];
936--3320[label="0.0606061;4pkt 4fpkt"];
936--3339[label="0.0196078;1pkt 1fpkt"];
936--3441[label="0.0151515;1pkt 1fpkt"];
936--3471[label="0.0208333;1pkt 1fpkt"];
936--3996[label="0.69697;46pkt 46fpkt"];
936--4539[label="0.0606061;4pkt 4fpkt"];
936--4547[label="0.0196078;1pkt 1fpkt"];
936--4622[label="0.0208333;1pkt 1fpkt"];
936--5172[label="0.0606061;4pkt 4fpkt"];
936--5209[label="0.0208333;1pkt 1fpkt"];
1043--1700[label="0.0645161;2pkt 2fpkt"];
1043--2103[label="0.16129;5pkt 5fpkt"];
1043--3374[label="0.0645161;2pkt 2fpkt"];
1043--3434[label="0.0357143;1pkt 1fpkt"];
1043--3722[label="0.0645161;2pkt 2fpkt"];
1043--3887[label="0.322581;10pkt 10fpkt"];
1043--4571[label="0.0645161;2pkt 2fpkt"];
1043--4605[label="0.0357143;1pkt 1fpkt"];
1043--4860[label="0.322581;10pkt 10fpkt"];
1043--5187[label="0.0645161;2pkt 2fpkt"];
1043--5202[label="0.0357143;1pkt 1fpkt"];
1073--1921[label="1;3pkt 3fpkt"];
1073--2103[label="0.666667;2pkt 2fpkt"];
1073--3694[label="1;3pkt 3fpkt"];
1073--4745[label="1;3pkt 3fpkt"];
1073--5278[label="1;3pkt 3fpkt"];
1141--1288[label="0.0102041;1pkt 1fpkt"];
1141--1645[label="0.0797101;11pkt 11fpkt"];
1141--1650[label="0.0144928;2pkt 2fpkt"];
1141--1656[label="0.00724638;1pkt 1fpkt"];
1141--1803[label="0.101449;14pkt 14fpkt"];
1141--1937[label="0.0217391;3pkt 3fpkt"];
1141--2065[label="0.00724638;1pkt 1fpkt"];
1141--2103[label="0.0869565;12pkt 12fpkt"];
1141--2817[label="1;138pkt 138fpkt"];
1162--1564[label="0.0175439;1pkt 1fpkt"];
1162--1576[label="0.0175439;1pkt 1fpkt"];
1162--2016[label="0.0175439;1pkt 1fpkt"];
1162--2027[label="0.166667;1pkt 1fpkt"];
1162--2156[label="0.719298;41pkt 41fpkt"];
1162--2291[label="0.0175439;1pkt 1fpkt"];
1162--2811[label="0.0350877;2pkt 2fpkt"];
1162--2965[label="0.0175439;1pkt 1fpkt"];
1162--3107[label="0.0877193;5pkt 5fpkt"];
1162--3132[label="0.0175439;1pkt 1fpkt"];
1162--3237[label="0.0350877;2pkt 2fpkt"];
1162--3914[label="0.719298;41pkt 41fpkt"];
1162--4439[label="0.0175439;1pkt 1fpkt"];
1162--4872[label="0.719298;41pkt 41fpkt"];
1162--5115[label="0.0877193;5pkt 5fpkt"];
1162--5121[label="0.0175439;1pkt 1fpkt"];
1183--3694[label="1;13pkt 13fpkt"];
1183--4745[label="1;13pkt 13fpkt"];
1183--5278[label="1;13pkt 13fpkt"];
1185--1321[label="0.0126582;2pkt 2fpkt"];
1185--1578[label="0.045977;4pkt 4fpkt"];
1185--1626[label="0.0522876;8pkt 8fpkt"];
1185--1628[label="0.025641;2pkt 2fpkt"];
1185--1858[label="0.0362319;5pkt 5fpkt"];
1185--2021[label="1;89pkt 89fpkt"];
1185--2103[label="0.045;9pkt 9fpkt"];
1185--2527[label="0.117647;2pkt 2fpkt"];
1185--2540[label="0.178571;5pkt 5fpkt"];
1185--3338[label="0.0238095;1pkt 1fpkt"];
1185--3400[label="0.173913;4pkt 4fpkt"];
1185--3414[label="0.266667;20pkt 20fpkt"];
1185--3429[label="0.6;6pkt 6fpkt"];
1185--3442[label="0.045977;4pkt 4fpkt"];
1185--3448[label="0.0552147;9pkt 9fpkt"];
1185--3461[label="0.545455;6pkt 6fpkt"];
1185--3678[label="0.005;1pkt 1fpkt"];
1185--3722[label="0.01;2pkt 2fpkt"];
1185--3775[label="0.421053;8pkt 8fpkt"];
1185--3799[label="0.196721;12pkt 12fpkt"];
1185--4129[label="0.117647;2pkt 2fpkt"];
1185--4586[label="0.173913;4pkt 4fpkt"];
1185--4602[label="0.6;6pkt 6fpkt"];
1185--4609[label="0.045977;4pkt 4fpkt"];
1185--4612[label="0.0552147;9pkt 9fpkt"];
1185--4736[label="0.005;1pkt 1fpkt"];
1185--4810[label="0.196721;12pkt 12fpkt"];
1185--5193[label="0.173913;4pkt 4fpkt"];
1185--5201[label="0.6;6pkt 6fpkt"];
1185--5204[label="0.045977;4pkt 4fpkt"];
1185--5205[label="0.0552147;9pkt 9fpkt"];
1185--5310[label="0.196721;12pkt 12fpkt"];
1195--1645[label="1;4pkt 4fpkt"];
1195--2103[label="0.5;2pkt 2fpkt"];
1195--3178[label="1;4pkt 4fpkt"];
1195--4458[label="1;4pkt 4fpkt"];
1197--1321[label="0.968354;153pkt 153fpkt"];
1197--1564[label="0.028169;2pkt 2fpkt"];
1197--2291[label="0.027027;2pkt 2fpkt"];
1197--2527[label="0.117647;2pkt 2fpkt"];
1197--2540[label="0.142857;4pkt 4fpkt"];
1197--2793[label="0.0322581;2pkt 2fpkt"];
1197--2811[label="0.00869565;2pkt 2fpkt"];
1197--3339[label="0.0196078;1pkt 1fpkt"];
1197--3433[label="0.0392157;2pkt 2fpkt"];
1197--3441[label="0.00704225;1pkt 1fpkt"];
1197--3471[label="0.0208333;1pkt 1fpkt"];
1197--4129[label="0.117647;2pkt 2fpkt"];
1197--4272[label="0.0322581;2pkt 2fpkt"];
1197--4547[label="0.0196078;1pkt 1fpkt"];
1197--4604[label="0.0392157;2pkt 2fpkt"];
1197--4622[label="0.0208333;1pkt 1fpkt"];
1197--5056[label="0.0322581;2pkt 2fpkt"];
1197--5209[label="0.0208333;1pkt 1fpkt"];
1199--1279[label="0.0547945;4pkt 4fpkt"];
1199--1576[label="0.0410959;3pkt 3fpkt"];
1199--1977[label="1;73pkt 73fpkt"];
1199--2103[label="0.561644;41pkt 41fpkt"];
1199--2292[label="0.0136986;1pkt 1fpkt"];
1199--3041[label="0.0227273;1pkt 1fpkt"];
1199--3075[label="0.0136986;1pkt 1fpkt"];
1199--3756[label="0.0357143;2pkt 2fpkt"];
1199--3996[label="0.0136986;1pkt 1fpkt"];
1199--4786[label="0.0357143;2pkt 2fpkt"];
1308--2103[label="0.258065;8pkt 8fpkt"];
1308--2292[label="0.0967742;3pkt 3fpkt"];
1308--2811[label="0.322581;10pkt 10fpkt"];
1308--3237[label="0.0967742;3pkt 3fpkt"];
1308--3320[label="0.483871;15pkt 15fpkt"];
1308--3996[label="0.0967742;3pkt 3fpkt"];
1308--4539[label="0.483871;15pkt 15fpkt"];
1308--5172[label="0.483871;15pkt 15fpkt"];
1321--1627[label="0.0126582;2pkt 2fpkt"];
1321--1645[label="0.00632911;1pkt 1fpkt"];
1561--1962[label="0.0333333;2pkt 2fpkt"];
1561--1970[label="0.0517241;3pkt 3fpkt"];
1561--2107[label="0.0166667;1pkt 1fpkt"];
1561--2164[label="0.05;3pkt 3fpkt"];
1561--2450[label="0.0909091;2pkt 2fpkt"];
1561--2508[label="0.0333333;2pkt 2fpkt"];
1561--3291[label="0.105263;2pkt 2fpkt"];
1561--3351[label="0.125;1pkt 1fpkt"];
1561--3632[label="0.0535714;3pkt 3fpkt"];
1561--3690[label="0.1;1pkt 1fpkt"];
1561--3804[label="0.0384615;2pkt 2fpkt"];
1561--3918[label="0.05;3pkt 3fpkt"];
1561--4082[label="0.0869565;2pkt 2fpkt"];
1561--4523[label="0.105263;2pkt 2fpkt"];
1561--4558[label="0.125;1pkt 1fpkt"];
1561--4710[label="0.0535714;3pkt 3fpkt"];
1561--4743[label="0.1;1pkt 1fpkt"];
1561--4813[label="0.0384615;2pkt 2fpkt"];
1561--4876[label="0.05;3pkt 3fpkt"];
1561--4959[label="0.0909091;2pkt 2fpkt"];
1561--5258[label="0.0535714;3pkt 3fpkt"];
1561--5277[label="0.1;1pkt 1fpkt"];
1564--1575[label="0.0140845;1pkt 1fpkt"];
1564--1631[label="0.0645161;2pkt 2fpkt"];
1564--1645[label="0.0140845;1pkt 1fpkt"];
1564--1656[label="0.028169;2pkt 2fpkt"];
1564--1765[label="0.028169;2pkt 2fpkt"];
1564--1874[label="0.0307692;2pkt 2fpkt"];
1564--1937[label="0.0140845;1pkt 1fpkt"];
1564--1961[label="0.0422535;3pkt 3fpkt"];
1564--2065[label="0.028169;2pkt 2fpkt"];
1564--2103[label="0.028169;2pkt 2fpkt"];
1564--2291[label="0.985915;70pkt 70fpkt"];
1570--1645[label="0.02;1pkt 1fpkt"];
1570--1656[label="0.06;3pkt 3fpkt"];
1570--1849[label="0.02;1pkt 1fpkt"];
1570--1852[label="0.02;1pkt 1fpkt"];
1570--1874[label="0.02;1pkt 1fpkt"];
1570--2065[label="0.02;1pkt 1fpkt"];
1570--2103[label="0.02;1pkt 1fpkt"];
1570--2815[label="1;50pkt 50fpkt"];
1575--1576[label="0.0410959;3pkt 3fpkt"];
1575--1729[label="0.00757576;1pkt 1fpkt"];
1575--1749[label="0.307692;12pkt 12fpkt"];
1575--2103[label="0.00757576;1pkt 1fpkt"];
1575--2291[label="0.0135135;1pkt 1fpkt"];
1575--2811[label="0.030303;4pkt 4fpkt"];
1575--3016[label="0.333333;1pkt 1fpkt"];
1575--3237[label="0.030303;4pkt 4fpkt"];
1575--3591[label="0.0909091;12pkt 12fpkt"];
1576--1645[label="0.0547945;4pkt 4fpkt"];
1576--1648[label="0.0136986;1pkt 1fpkt"];
1576--1656[label="0.0410959;3pkt 3fpkt"];
1576--1665[label="0.0136986;1pkt 1fpkt"];
1576--1671[label="0.0136986;1pkt 1fpkt"];
1576--1732[label="0.0136986;1pkt 1fpkt"];
1576--1751[label="0.0136986;1pkt 1fpkt"];
1576--1937[label="0.0136986;1pkt 1fpkt"];
1576--1977[label="0.0410959;3pkt 3fpkt"];
1576--1979[label="0.0588235;3pkt 3fpkt"];
1576--2065[label="0.0410959;3pkt 3fpkt"];
1576--2103[label="0.0958904;7pkt 7fpkt"];
1626--1627[label="0.928105;142pkt 142fpkt"];
1626--1645[label="0.0130719;2pkt 2fpkt"];
1626--3448[label="1;153pkt 153fpkt"];
1626--4612[label="1;153pkt 153fpkt"];
1626--5205[label="1;153pkt 153fpkt"];
1627--1628[label="0.538462;42pkt 42fpkt"];
1627--2540[label="0.25;7pkt 7fpkt"];
1627--3448[label="0.871166;142pkt 142fpkt"];
1627--4612[label="0.871166;142pkt 142fpkt"];
1627--5205[label="0.871166;142pkt 142fpkt"];
1645--1700[label="0.108696;5pkt 5fpkt"];
1645--1721[label="0.037594;5pkt 5fpkt"];
1645--1729[label="0.0531915;10pkt 10fpkt"];
1645--1735[label="0.0379747;3pkt 3fpkt"];
1645--1737[label="0.027027;3pkt 3fpkt"];
1645--1741[label="0.13253;11pkt 11fpkt"];
1645--1757[label="0.109375;7pkt 7fpkt"];
1645--1800[label="0.0127389;2pkt 2fpkt"];
1645--1801[label="0.00682594;2pkt 2fpkt"];
1645--1858[label="0.0362319;5pkt 5fpkt"];
1645--1876[label="0.00502513;1pkt 1fpkt"];
1645--1897[label="0.0104167;1pkt 1fpkt"];
1645--1921[label="0.571429;4pkt 4fpkt"];
1645--1970[label="0.0517241;3pkt 3fpkt"];
1645--1985[label="0.00113895;1pkt 1fpkt"];
1645--1991[label="0.182692;19pkt 19fpkt"];
1645--2002[label="0.00970874;1pkt 1fpkt"];
1645--2047[label="0.00113895;1pkt 1fpkt"];
1645--2090[label="0.00113895;1pkt 1fpkt"];
1645--2103[label="0.0990888;87pkt 87fpkt"];
1645--2106[label="0.00113895;1pkt 1fpkt"];
1645--2155[label="0.0531561;16pkt 16fpkt"];
1645--2164[label="0.0405405;3pkt 3fpkt"];
1645--2203[label="0.75;6pkt 6fpkt"];
1645--2230[label="0.00465116;1pkt 1fpkt"];
1645--2243[label="0.148148;4pkt 4fpkt"];
1645--2268[label="0.016129;1pkt 1fpkt"];
1645--2278[label="0.125668;47pkt 47fpkt"];
1645--2291[label="0.0135135;1pkt 1fpkt"];
1645--2342[label="0.1;1pkt 1fpkt"];
1645--2379[label="1;3pkt 3fpkt"];
1645--2380[label="0.0909091;1pkt 1fpkt"];
1645--2390[label="0.0157895;3pkt 3fpkt"];
1645--2426[label="0.3;3pkt 3fpkt"];
1645--2473[label="0.0714286;1pkt 1fpkt"];
1645--2543[label="0.030303;2pkt 2fpkt"];
1645--2553[label="0.0217391;2pkt 2fpkt"];
1645--2612[label="0.00554017;2pkt 2fpkt"];
1645--2640[label="0.285714;4pkt 4fpkt"];
1645--2646[label="0.210526;4pkt 4fpkt"];
1645--2658[label="0.0254777;4pkt 4fpkt"];
1645--2686[label="0.134831;12pkt 12fpkt"];
1645--2811[label="0.00961538;5pkt 5fpkt"];
1645--2813[label="0.0833333;1pkt 1fpkt"];
1645--2815[label="0.0181818;1pkt 1fpkt"];
1645--2817[label="0.0748299;11pkt 11fpkt"];
1645--2840[label="0.06;3pkt 3fpkt"];
1645--2858[label="0.00819672;1pkt 1fpkt"];
1645--2859[label="0.166667;1pkt 1fpkt"];
1645--2889[label="0.00113895;1pkt 1fpkt"];
1645--2956[label="1;1pkt 1fpkt"];
1645--3137[label="0.0441176;9pkt 9fpkt"];
1645--3178[label="1;4pkt 4fpkt"];
1645--3195[label="0.0277778;2pkt 2fpkt"];
1645--3225[label="0.0987654;16pkt 16fpkt"];
1645--3226[label="0.0957447;9pkt 9fpkt"];
1645--3237[label="0.0304569;12pkt 12fpkt"];
1645--3297[label="0.0857143;6pkt 6fpkt"];
1645--3320[label="0.0283019;3pkt 3fpkt"];
1645--3339[label="0.0196078;1pkt 1fpkt"];
1645--3342[label="0.0740741;10pkt 10fpkt"];
1645--3374[label="0.209677;13pkt 13fpkt"];
1645--3400[label="0.217391;5pkt 5fpkt"];
1645--3414[label="0.04;3pkt 3fpkt"];
1645--3429[label="0.3;3pkt 3fpkt"];
1645--3433[label="0.0196078;1pkt 1fpkt"];
1645--3434[label="0.0714286;2pkt 2fpkt"];
1645--3441[label="0.00704225;1pkt 1fpkt"];
1645--3442[label="0.0689655;6pkt 6fpkt"];
1645--3448[label="0.0368098;6pkt 6fpkt"];
1645--3461[label="0.181818;2pkt 2fpkt"];
1645--3493[label="0.025;1pkt 1fpkt"];
1645--3512[label="0.0128205;1pkt 1fpkt"];
1645--3585[label="0.097561;4pkt 4fpkt"];
1645--3586[label="0.0108696;1pkt 1fpkt"];
1645--3591[label="0.0141844;2pkt 2fpkt"];
1645--3628[label="0.115385;6pkt 6fpkt"];
1645--3632[label="0.107143;6pkt 6fpkt"];
1645--3662[label="0.0222222;1pkt 1fpkt"];
1645--3664[label="0.025;2pkt 2fpkt"];
1645--3694[label="0.166667;4pkt 4fpkt"];
1645--3722[label="0.047836;42pkt 42fpkt"];
1645--3738[label="1;1pkt 1fpkt"];
1645--3774[label="1;1pkt 1fpkt"];
1645--3775[label="0.263158;5pkt 5fpkt"];
1645--3799[label="0.0819672;5pkt 5fpkt"];
1645--3835[label="0.014218;3pkt 3fpkt"];
1645--3887[label="0.275449;46pkt 46fpkt"];
1645--3913[label="0.0533333;16pkt 16fpkt"];
1645--3918[label="0.0405405;3pkt 3fpkt"];
1645--3959[label="0.00465116;1pkt 1fpkt"];
1645--3968[label="0.178571;5pkt 5fpkt"];
1645--3989[label="0.125668;47pkt 47fpkt"];
1645--4044[label="0.0909091;1pkt 1fpkt"];
1645--4071[label="0.272727;3pkt 3fpkt"];
1645--4094[label="0.0769231;1pkt 1fpkt"];
1645--4138[label="0.0153846;1pkt 1fpkt"];
1645--4147[label="0.021978;2pkt 2fpkt"];
1645--4176[label="0.00555556;2pkt 2fpkt"];
1645--4191[label="0.307692;4pkt 4fpkt"];
1645--4201[label="0.0254777;4pkt 4fpkt"];
1645--4214[label="0.134831;12pkt 12fpkt"];
1645--4307[label="0.166667;1pkt 1fpkt"];
1645--4325[label="0.00113895;1pkt 1fpkt"];
1645--4441[label="0.0441176;9pkt 9fpkt"];
1645--4458[label="1;4pkt 4fpkt"];
1645--4467[label="0.0277778;2pkt 2fpkt"];
1645--4480[label="0.0957447;9pkt 9fpkt"];
1645--4527[label="0.0857143;6pkt 6fpkt"];
1645--4539[label="0.0283019;3pkt 3fpkt"];
1645--4547[label="0.0196078;1pkt 1fpkt"];
1645--4549[label="0.0740741;10pkt 10fpkt"];
1645--4571[label="0.209677;13pkt 13fpkt"];
1645--4586[label="0.217391;5pkt 5fpkt"];
1645--4602[label="0.3;3pkt 3fpkt"];
1645--4604[label="0.0196078;1pkt 1fpkt"];
1645--4605[label="0.0714286;2pkt 2fpkt"];
1645--4609[label="0.0689655;6pkt 6fpkt"];
1645--4612[label="0.0368098;6pkt 6fpkt"];
1645--4682[label="0.097561;4pkt 4fpkt"];
1645--4683[label="0.0108696;1pkt 1fpkt"];
1645--4707[label="0.115385;6pkt 6fpkt"];
1645--4710[label="0.107143;6pkt 6fpkt"];
1645--4726[label="0.0222222;1pkt 1fpkt"];
1645--4745[label="0.166667;4pkt 4fpkt"];
1645--4771[label="1;1pkt 1fpkt"];
1645--4795[label="1;1pkt 1fpkt"];
1645--4810[label="0.0819672;5pkt 5fpkt"];
1645--4832[label="0.014218;3pkt 3fpkt"];
1645--4860[label="0.275449;46pkt 46fpkt"];
1645--4871[label="0.0533333;16pkt 16fpkt"];
1645--4876[label="0.0405405;3pkt 3fpkt"];
1645--4918[label="0.125333;47pkt 47fpkt"];
1645--4952[label="0.272727;3pkt 3fpkt"];
1645--4989[label="0.030303;2pkt 2fpkt"];
1645--5008[label="0.00554017;2pkt 2fpkt"];
1645--5019[label="0.285714;4pkt 4fpkt"];
1645--5025[label="0.0254777;4pkt 4fpkt"];
1645--5069[label="0.166667;1pkt 1fpkt"];
1645--5122[label="0.0441176;9pkt 9fpkt"];
1645--5172[label="0.0283019;3pkt 3fpkt"];
1645--5176[label="0.0740741;10pkt 10fpkt"];
1645--5187[label="0.209677;13pkt 13fpkt"];
1645--5193[label="0.217391;5pkt 5fpkt"];
1645--5201[label="0.3;3pkt 3fpkt"];
1645--5202[label="0.0714286;2pkt 2fpkt"];
1645--5204[label="0.0689655;6pkt 6fpkt"];
1645--5205[label="0.0368098;6pkt 6fpkt"];
1645--5244[label="0.097561;4pkt 4fpkt"];
1645--5245[label="0.0108696;1pkt 1fpkt"];
1645--5257[label="0.115385;6pkt 6fpkt"];
1645--5258[label="0.107143;6pkt 6fpkt"];
1645--5278[label="0.166667;4pkt 4fpkt"];
1645--5292[label="1;1pkt 1fpkt"];
1645--5304[label="1;1pkt 1fpkt"];
1645--5310[label="0.0819672;5pkt 5fpkt"];
1645--5318[label="0.014218;3pkt 3fpkt"];
1664--3320[label="1;24pkt 24fpkt"];
1664--4539[label="1;24pkt 24fpkt"];
1664--5172[label="1;24pkt 24fpkt"];
1700--1989[label="0.0322581;1pkt 1fpkt"];
1700--3887[label="1;46pkt 46fpkt"];
1700--4860[label="1;46pkt 46fpkt"];
1740--1741[label="0.120482;10pkt 10fpkt"];
1740--2103[label="0.027027;5pkt 5fpkt"];
1740--2142[label="0.025;1pkt 1fpkt"];
1740--2155[label="0.0540541;10pkt 10fpkt"];
1740--2294[label="0.0149254;1pkt 1fpkt"];
1740--2301[label="0.0277778;1pkt 1fpkt"];
1740--2714[label="0.0142857;1pkt 1fpkt"];
1740--2781[label="0.010989;1pkt 1fpkt"];
1740--2988[label="0.0263158;1pkt 1fpkt"];
1740--3260[label="0.0263158;1pkt 1fpkt"];
1740--3858[label="0.0172414;1pkt 1fpkt"];
1740--3913[label="0.0540541;10pkt 10fpkt"];
1740--3998[label="0.0147059;1pkt 1fpkt"];
1740--4266[label="0.010989;1pkt 1fpkt"];
1740--4847[label="0.0172414;1pkt 1fpkt"];
1740--4871[label="0.0540541;10pkt 10fpkt"];
1740--4919[label="0.0149254;1pkt 1fpkt"];
1740--5053[label="0.010989;1pkt 1fpkt"];
1740--5328[label="0.0172414;1pkt 1fpkt"];
1741--2065[label="0.0120482;1pkt 1fpkt"];
1741--2155[label="1;83pkt 83fpkt"];
1741--3913[label="1;83pkt 83fpkt"];
1741--4871[label="1;83pkt 83fpkt"];
1757--3342[label="1;64pkt 64fpkt"];
1757--4549[label="1;64pkt 64fpkt"];
1757--5176[label="1;64pkt 64fpkt"];
1921--2103[label="0.285714;2pkt 2fpkt"];
1921--3694[label="1;7pkt 7fpkt"];
1921--4745[label="1;7pkt 7fpkt"];
1921--5278[label="1;7pkt 7fpkt"];
1962--2103[label="0.144068;17pkt 17fpkt"];
1970--2103[label="0.206897;12pkt 12fpkt"];
1970--2164[label="1;58pkt 58fpkt"];
1970--3918[label="1;58pkt 58fpkt"];
1970--4876[label="1;58pkt 58fpkt"];
1991--2103[label="0.0769231;8pkt 8fpkt"];
2155--3913[label="1;300pkt 300fpkt"];
2155--4871[label="1;300pkt 300fpkt"];
2164--3918[label="1;74pkt 74fpkt"];
2164--4876[label="1;74pkt 74fpkt"];
2243--3968[label="1;27pkt 27fpkt"];
2292--3996[label="1;278pkt 278fpkt"];
2426--4071[label="1;10pkt 10fpkt"];
2426--4952[label="1;10pkt 10fpkt"];
2859--4307[label="1;6pkt 6fpkt"];
2859--5069[label="1;6pkt 6fpkt"];
3178--4458[label="1;4pkt 4fpkt"];
3320--4539[label="1;106pkt 106fpkt"];
3320--5172[label="1;106pkt 106fpkt"];
3342--4549[label="1;135pkt 135fpkt"];
3342--5176[label="1;135pkt 135fpkt"];
3374--4571[label="1;62pkt 62fpkt"];
3374--5187[label="1;62pkt 62fpkt"];
3400--4586[label="1;23pkt 23fpkt"];
3400--5193[label="1;23pkt 23fpkt"];
3429--4602[label="1;10pkt 10fpkt"];
3429--5201[label="1;10pkt 10fpkt"];
3448--4612[label="1;163pkt 163fpkt"];
3448--5205[label="1;163pkt 163fpkt"];
3585--4682[label="1;41pkt 41fpkt"];
3585--5244[label="1;41pkt 41fpkt"];
3628--4707[label="1;52pkt 52fpkt"];
3628--5257[label="1;52pkt 52fpkt"];
3632--4710[label="1;56pkt 56fpkt"];
3632--5258[label="1;56pkt 56fpkt"];
3694--4745[label="1;24pkt 24fpkt"];
3694--5278[label="1;24pkt 24fpkt"];
3738--4771[label="1;1pkt 1fpkt"];
3738--5292[label="1;1pkt 1fpkt"];
3774--4795[label="1;1pkt 1fpkt"];
3774--5304[label="1;1pkt 1fpkt"];
3799--4810[label="1;61pkt 61fpkt"];
3799--5310[label="1;61pkt 61fpkt"];
3913--4871[label="1;300pkt 300fpkt"];
3918--4876[label="1;74pkt 74fpkt"];
4071--4952[label="1;11pkt 11fpkt"];
4191--5019[label="1;13pkt 13fpkt"];
4307--5069[label="1;6pkt 6fpkt"];
4539--5172[label="1;106pkt 106fpkt"];
4549--5176[label="1;135pkt 135fpkt"];
4571--5187[label="1;62pkt 62fpkt"];
4586--5193[label="1;23pkt 23fpkt"];
4602--5201[label="1;10pkt 10fpkt"];
4612--5205[label="1;163pkt 163fpkt"];
4682--5244[label="1;41pkt 41fpkt"];
4707--5257[label="1;52pkt 52fpkt"];
4710--5258[label="1;56pkt 56fpkt"];
4745--5278[label="1;24pkt 24fpkt"];
4771--5292[label="1;1pkt 1fpkt"];
4795--5304[label="1;1pkt 1fpkt"];
4810--5310[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter src_ip="216.16.168.223" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
1589[label="166.55.235.21;d;44pkt 44fpkt", shape=diamond, color=yellow];
1629[label="216.218.218.112;s;2pkt 2fpkt", shape=diamond, color=yellow];
1632[label="133.163.168.238;s;2pkt 2fpkt", shape=diamond, color=yellow];
2663[label="205.1.44.67;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2984[label="216.218.218.112;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 166.55.235.21:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.2308%)&lt;BR/&gt; 1863: (3.84615%)&lt;BR/&gt; 3245: (2.88462%)&lt;BR/&gt; 3244: (2.88462%)&lt;BR/&gt; 3283: (1.92308%)&gt;];
}
1589--1629[label="1;2pkt 2fpkt"];
1589--1632[label="1;2pkt 2fpkt"];
1589--2103[label="0.0227273;1pkt 1fpkt"];
1589--2155[label="0.0681818;3pkt 3fpkt"];
1589--2508[label="0.0227273;1pkt 1fpkt"];
1589--2663[label="0.5;1pkt 1fpkt"];
1589--2984[label="1;2pkt 2fpkt"];
1589--3114[label="0.0454545;2pkt 2fpkt"];
1589--3236[label="0.0645161;2pkt 2fpkt"];
1589--3821[label="0.0555556;1pkt 1fpkt"];
1589--3913[label="0.0454545;2pkt 2fpkt"];
1589--4430[label="0.0454545;2pkt 2fpkt"];
1589--4488[label="0.0645161;2pkt 2fpkt"];
1589--4824[label="0.0555556;1pkt 1fpkt"];
1589--4871[label="0.0454545;2pkt 2fpkt"];
1589--5116[label="0.0454545;2pkt 2fpkt"];
1589--5315[label="0.0555556;1pkt 1fpkt"];
1629--2984[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.235.21" src_port="80"/>
    </slice>
    <from sec="1071205213" usec="0"/>
    <to sec="1071206079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
376[label="218.158.108.228;s;1pkt 1fpkt", shape=diamond, color=yellow];
529[label="221.8.34.13;s;1pkt 1fpkt", shape=diamond, color=yellow];
582[label="221.2.146.94;s;1pkt 1fpkt", shape=diamond, color=yellow];
710[label="218.36.248.176;s;1pkt 1fpkt", shape=diamond, color=yellow];
733[label="218.76.95.195;s;2pkt 2fpkt", shape=diamond, color=yellow];
744[label="219.83.122.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
878[label="101.10.74.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
888[label="218.78.35.159;s;1pkt 1fpkt", shape=diamond, color=yellow];
968[label="56.36.83.174;s;1pkt 1fpkt", shape=diamond, color=yellow];
1011[label="218.83.11.190;s;1pkt 1fpkt", shape=diamond, color=yellow];
1102[label="218.44.240.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
1231[label="78.61.81.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
1348[label="78.71.72.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
1379[label="78.40.183.184;s;1pkt 1fpkt", shape=diamond, color=yellow];
1388[label="218.66.38.44;s;2pkt 2fpkt", shape=diamond, color=yellow];
1612[label="78.53.218.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
1615[label="78.58.227.48;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8881, 149.207.217.197:*}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8881: (13.1579%)&lt;BR/&gt; 8882: (7.89474%)&lt;BR/&gt; 6882: (7.89474%)&lt;BR/&gt; 6884: (5.26316%)&lt;BR/&gt; 6881: (5.26316%)&gt;];
}
376--1644[label="1;1pkt 1fpkt"];
376--2061[label="1;1pkt 1fpkt"];
529--1644[label="1;1pkt 1fpkt"];
529--2061[label="1;1pkt 1fpkt"];
582--1644[label="1;1pkt 1fpkt"];
582--2061[label="1;1pkt 1fpkt"];
710--1644[label="1;1pkt 1fpkt"];
710--2061[label="1;1pkt 1fpkt"];
733--1644[label="1;2pkt 2fpkt"];
733--2061[label="1;2pkt 2fpkt"];
744--1644[label="1;1pkt 1fpkt"];
744--2061[label="1;1pkt 1fpkt"];
878--1644[label="1;1pkt 1fpkt"];
878--2061[label="1;1pkt 1fpkt"];
888--1644[label="1;1pkt 1fpkt"];
888--2061[label="1;1pkt 1fpkt"];
968--1644[label="1;1pkt 1fpkt"];
968--2061[label="1;1pkt 1fpkt"];
1011--1644[label="1;1pkt 1fpkt"];
1011--2061[label="1;1pkt 1fpkt"];
1102--1644[label="1;1pkt 1fpkt"];
1102--2061[label="1;1pkt 1fpkt"];
1231--1644[label="1;1pkt 1fpkt"];
1231--2061[label="1;1pkt 1fpkt"];
1348--1644[label="1;1pkt 1fpkt"];
1348--2061[label="1;1pkt 1fpkt"];
1379--1644[label="1;1pkt 1fpkt"];
1379--2061[label="1;1pkt 1fpkt"];
1388--1644[label="1;2pkt 2fpkt"];
1388--2061[label="1;2pkt 2fpkt"];
1612--1644[label="1;1pkt 1fpkt"];
1612--2061[label="1;1pkt 1fpkt"];
1615--1644[label="1;1pkt 1fpkt"];
1615--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" src_port="8881"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
358[label="218.166.242.5;s;6pkt 6fpkt", shape=diamond, color=yellow];
1934[label="218.166.242.5;s;6pkt 6fpkt", shape=hexagon, color=black];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.166.242.5:80, 149.206.206.80:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2787: (8.33333%)&lt;BR/&gt; 2782: (8.33333%)&lt;BR/&gt; 2480: (8.33333%)&lt;BR/&gt; 2478: (8.33333%)&gt;];
}
358--1648[label="0.666667;4pkt 4fpkt"];
358--1934[label="1;6pkt 6fpkt"];
358--2103[label="0.166667;1pkt 1fpkt"];
1934--2103[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.206.80" src_ip="218.166.242.5" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
371[label="149.206.84.87;d;203pkt 203fpkt", shape=diamond, color=yellow];
372[label="58.8.193.110;s;2pkt 2fpkt", shape=diamond, color=yellow];
1650[label="149.206.84.87;d;159pkt 159fpkt", shape=hexagon, color=black];
2981[label="58.176.141.112;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.145.106.4:80, 149.206.84.87:*}[60.181%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.8953%)&lt;BR/&gt; 25: (4.31937%)&lt;BR/&gt; 0: (0.78534%)&lt;BR/&gt; 44011: (0.39267%)&lt;BR/&gt; 43570: (0.39267%)&gt;];
}
371--372[label="0.5;1pkt 1fpkt"];
371--454[label="0.00492611;1pkt 1fpkt"];
371--611[label="0.0684932;10pkt 10fpkt"];
371--614[label="0.00492611;1pkt 1fpkt"];
371--617[label="0.00606061;1pkt 1fpkt"];
371--653[label="1;133pkt 133fpkt"];
371--753[label="0.0147783;3pkt 3fpkt"];
371--766[label="0.00985222;2pkt 2fpkt"];
371--1141[label="0.0144928;2pkt 2fpkt"];
371--1143[label="0.013986;2pkt 2fpkt"];
371--1158[label="0.00757576;1pkt 1fpkt"];
371--1169[label="0.0363636;2pkt 2fpkt"];
371--1279[label="0.0128205;1pkt 1fpkt"];
371--1529[label="0.0172414;1pkt 1fpkt"];
371--1650[label="1;159pkt 159fpkt"];
371--1967[label="0.04;2pkt 2fpkt"];
371--2103[label="0.00492611;1pkt 1fpkt"];
371--2146[label="0.0653595;10pkt 10fpkt"];
371--2171[label="1;132pkt 132fpkt"];
371--2345[label="0.0384615;1pkt 1fpkt"];
371--2600[label="0.0740741;2pkt 2fpkt"];
371--2658[label="0.0127389;2pkt 2fpkt"];
371--2793[label="0.016129;1pkt 1fpkt"];
371--2811[label="0.00985222;2pkt 2fpkt"];
371--2817[label="0.0136054;2pkt 2fpkt"];
371--2981[label="0.0555556;1pkt 1fpkt"];
371--3237[label="0.00492611;1pkt 1fpkt"];
371--3339[label="0.0196078;1pkt 1fpkt"];
371--3441[label="0.00704225;1pkt 1fpkt"];
371--3479[label="0.0837438;17pkt 17fpkt"];
371--3907[label="0.0653595;10pkt 10fpkt"];
371--3925[label="1;133pkt 133fpkt"];
371--4201[label="0.0127389;2pkt 2fpkt"];
371--4272[label="0.016129;1pkt 1fpkt"];
371--4547[label="0.0196078;1pkt 1fpkt"];
371--5025[label="0.0127389;2pkt 2fpkt"];
371--5056[label="0.016129;1pkt 1fpkt"];
372--1650[label="0.5;1pkt 1fpkt"];
1650--1967[label="0.04;2pkt 2fpkt"];
1650--2103[label="0.00628931;1pkt 1fpkt"];
1650--2171[label="1;132pkt 132fpkt"];
1650--2600[label="0.0740741;2pkt 2fpkt"];
1650--2658[label="0.0127389;2pkt 2fpkt"];
1650--2817[label="0.0136054;2pkt 2fpkt"];
1650--2981[label="0.0555556;1pkt 1fpkt"];
1650--3925[label="1;133pkt 133fpkt"];
1650--4201[label="0.0127389;2pkt 2fpkt"];
1650--5025[label="0.0127389;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.84.87" src_ip="211.145.106.4" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
447[label="78.8.35.56;s;4pkt 4fpkt", shape=diamond, color=yellow];
1654[label="78.8.35.56;s;4pkt 4fpkt", shape=hexagon, color=black];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.8.35.56:80, 160.188.106.27:50281}[25%]&lt;BR/&gt;{78.8.35.56:80, 160.188.106.27:50296}[25%]&lt;BR/&gt;{78.8.35.56:80, 160.188.106.27:50819}[25%]&lt;BR/&gt;{78.8.35.56:80, 160.188.106.27:52984}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52984: (12.5%)&lt;BR/&gt; 50819: (12.5%)&lt;BR/&gt; 50296: (12.5%)&lt;BR/&gt; 50281: (12.5%)&gt;];
}
447--1654[label="1;4pkt 4fpkt"];
447--2103[label="1;4pkt 4fpkt"];
1654--2103[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.106.27" dst_port="52984" src_ip="78.8.35.56" src_port="80"/>
      <filter dst_ip="160.188.106.27" dst_port="50819" src_ip="78.8.35.56" src_port="80"/>
      <filter dst_ip="160.188.106.27" dst_port="50296" src_ip="78.8.35.56" src_port="80"/>
      <filter dst_ip="160.188.106.27" dst_port="50281" src_ip="78.8.35.56" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
526[label="219.87.250.200;s;1pkt 1fpkt", shape=diamond, color=yellow];
1668[label="219.87.250.200;s;1pkt 1fpkt", shape=hexagon, color=black];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.87.250.200:443, 149.207.88.223:27681}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27681: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
526--844[label="1;1pkt 1fpkt"];
526--1668[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.88.223" dst_port="27681" src_ip="219.87.250.200" src_port="443"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
550[label="77.55.161.89;s;2pkt 2fpkt", shape=diamond, color=yellow];
1676[label="77.55.161.89;s;2pkt 2fpkt", shape=hexagon, color=black];
2823[label="77.55.161.89;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4286[label="77.55.161.89;2pkt 2fpkt", shape=invtriangle, color=brown];
5061[label="77.55.161.89;2pkt 2fpkt", shape=invhouse, color=bisque];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.55.161.89:80, 149.207.88.223:28296}[50%]&lt;BR/&gt;{77.55.161.89:80, 149.207.88.223:38227}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38227: (25%)&lt;BR/&gt; 28296: (25%)&gt;];
}
550--844[label="1;2pkt 2fpkt"];
550--1676[label="1;2pkt 2fpkt"];
550--2823[label="1;2pkt 2fpkt"];
550--4286[label="1;2pkt 2fpkt"];
550--5061[label="1;2pkt 2fpkt"];
1676--2823[label="1;2pkt 2fpkt"];
1676--4286[label="1;2pkt 2fpkt"];
1676--5061[label="1;2pkt 2fpkt"];
2823--4286[label="1;2pkt 2fpkt"];
2823--5061[label="1;2pkt 2fpkt"];
4286--5061[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.88.223" dst_port="38227" src_ip="77.55.161.89" src_port="80"/>
      <filter dst_ip="149.207.88.223" dst_port="28296" src_ip="77.55.161.89" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
563[label="218.78.11.6;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.78.11.6:8882, 149.207.217.197:3579}[50%]&lt;BR/&gt;{218.78.11.6:8883, 149.207.217.197:3768}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8883: (25%)&lt;BR/&gt; 8882: (25%)&lt;BR/&gt; 3768: (25%)&lt;BR/&gt; 3579: (25%)&gt;];
}
563--1644[label="1;2pkt 2fpkt"];
563--1678[label="1;2pkt 2fpkt"];
563--2061[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="3768" src_ip="218.78.11.6" src_port="8883"/>
      <filter dst_ip="149.207.217.197" dst_port="3579" src_ip="218.78.11.6" src_port="8882"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
571[label="200.133.74.217;d;29pkt 29fpkt", shape=diamond, color=yellow];
572[label="151.121.221.175;s;24pkt 24fpkt", shape=diamond, color=yellow];
1679[label="200.133.74.217;d;8pkt 8fpkt", shape=hexagon, color=black];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.121.221.175:40143, 200.133.74.217:*}[82.7586%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40143: (44.2623%)&lt;BR/&gt; 37617: (4.91803%)&lt;BR/&gt; 2844: (2.45902%)&lt;BR/&gt; 2838: (2.45902%)&lt;BR/&gt; 2812: (2.45902%)&gt;];
}
571--572[label="1;24pkt 24fpkt"];
571--1679[label="1;8pkt 8fpkt"];
572--1679[label="0.75;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="200.133.74.217" src_ip="151.121.221.175" src_port="40143"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
444[label="200.180.0.37;s;767pkt 767fpkt", shape=diamond, color=yellow];
521[label="213.153.110.47;d;761pkt 761fpkt", shape=diamond, color=yellow];
1684[label="200.180.0.37;s;288pkt 288fpkt", shape=hexagon, color=black];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.180.0.37:*, 213.153.110.47:*}[99.2177%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (0.440529%)&lt;BR/&gt; 21: (0.247797%)&lt;BR/&gt; 61852: (0.137665%)&lt;BR/&gt; 62378: (0.0825991%)&lt;BR/&gt; 62377: (0.0825991%)&gt;];
}
444--521[label="1;761pkt 761fpkt"];
444--1684[label="1;288pkt 288fpkt"];
521--1684[label="0.993056;286pkt 286fpkt"];
</description>
    <slice>
      <filter dst_ip="213.153.110.47" src_ip="200.180.0.37"/>
    </slice>
    <from sec="1071205518" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
652[label="58.165.252.181;s;15pkt 15fpkt", shape=diamond, color=yellow];
813[label="149.206.232.109;d;15pkt 15fpkt", shape=diamond, color=yellow];
1694[label="58.165.252.181;s;15pkt 15fpkt", shape=hexagon, color=black];
3444[label="58.165.252.181;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.165.252.181:80, 149.206.232.109:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2301: (3.33333%)&lt;BR/&gt; 2300: (3.33333%)&lt;BR/&gt; 2299: (3.33333%)&lt;BR/&gt; 2298: (3.33333%)&gt;];
}
652--813[label="1;15pkt 15fpkt"];
652--1694[label="1;15pkt 15fpkt"];
652--3444[label="1;15pkt 15fpkt"];
813--1694[label="1;15pkt 15fpkt"];
813--3444[label="1;15pkt 15fpkt"];
1694--3444[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.232.109" src_ip="58.165.252.181" src_port="80"/>
    </slice>
    <from sec="1071205291" usec="0"/>
    <to sec="1071205454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
657[label="211.38.148.223;s;2pkt 2fpkt", shape=diamond, color=yellow];
1695[label="211.38.148.223;s;2pkt 2fpkt", shape=hexagon, color=black];
3721[label="211.38.148.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.38.148.223:80, 149.207.88.220:19417}[50%]&lt;BR/&gt;{211.38.148.223:80, 149.207.88.220:19750}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 19750: (30%)&lt;BR/&gt; 19417: (20%)&gt;];
}
657--1695[label="1;2pkt 2fpkt"];
657--2103[label="0.5;1pkt 1fpkt"];
657--3721[label="1;1pkt 1fpkt"];
1695--2103[label="0.5;1pkt 1fpkt"];
1695--3721[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.88.220" dst_port="19750" src_ip="211.38.148.223" src_port="80"/>
      <filter dst_ip="149.207.88.220" dst_port="19417" src_ip="211.38.148.223" src_port="80"/>
    </slice>
    <from sec="1071205303" usec="0"/>
    <to sec="1071205611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
666[label="77.55.162.222;s;1pkt 1fpkt", shape=diamond, color=yellow];
956[label="145.166.44.44;d;8pkt 8fpkt", shape=diamond, color=yellow];
957[label="77.55.162.176;s;3pkt 3fpkt", shape=diamond, color=yellow];
1696[label="77.55.162.222;s;5pkt 5fpkt", shape=hexagon, color=black];
1830[label="77.55.162.176;s;3pkt 3fpkt", shape=hexagon, color=black];
3435[label="77.55.162.180;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3711[label="77.55.162.222;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.55.162.222:80, 149.207.84.19:*}[33.3333%]&lt;BR/&gt;{*:80, 145.166.44.44:*}[33.3333%]&lt;BR/&gt;{77.55.162.176:*, 145.166.44.44:*}[25%]&lt;BR/&gt;{77.55.162.184:*, 145.166.44.44:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.6154%)&lt;BR/&gt; 2299: (7.69231%)&lt;BR/&gt; 1755: (7.69231%)&lt;BR/&gt; 554: (7.69231%)&lt;BR/&gt; 2249: (5.76923%)&gt;];
}
666--956[label="1;1pkt 1fpkt"];
666--1696[label="1;1pkt 1fpkt"];
666--3711[label="1;1pkt 1fpkt"];
956--957[label="1;3pkt 3fpkt"];
956--1696[label="0.2;1pkt 1fpkt"];
956--1830[label="1;3pkt 3fpkt"];
956--2103[label="0.125;1pkt 1fpkt"];
956--3435[label="1;1pkt 1fpkt"];
956--3711[label="0.2;1pkt 1fpkt"];
957--1830[label="1;3pkt 3fpkt"];
957--2103[label="0.333333;1pkt 1fpkt"];
1696--1717[label="0.8;4pkt 4fpkt"];
1696--3711[label="1;5pkt 5fpkt"];
1830--2103[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.44.44" src_ip="77.55.162.184"/>
      <filter dst_ip="145.166.44.44" src_ip="77.55.162.176"/>
      <filter dst_ip="145.166.44.44" src_port="80"/>
      <filter dst_ip="149.207.84.19" src_ip="77.55.162.222" src_port="80"/>
    </slice>
    <from sec="1071205340" usec="0"/>
    <to sec="1071206087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
668[label="218.54.185.175;s;815pkt 815fpkt", shape=diamond, color=yellow];
1697[label="218.54.185.175;s;77pkt 77fpkt", shape=hexagon, color=black];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.54.185.175:3030, 149.207.217.214:*}[50.184%]&lt;BR/&gt;{218.54.185.175:*, 149.207.217.214:113}[49.3252%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3030: (25.1121%)&lt;BR/&gt; 113: (24.5516%)&lt;BR/&gt; 60931: (0.112108%)&lt;BR/&gt; 55819: (0.112108%)&lt;BR/&gt; 55285: (0.112108%)&gt;];
}
668--900[label="1;815pkt 815fpkt"];
668--1697[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.214" src_ip="218.54.185.175" src_port="3030"/>
      <filter dst_ip="149.207.217.214" dst_port="113" src_ip="218.54.185.175"/>
    </slice>
    <from sec="1071205345" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
296[label="204.75.124.6;s;1pkt 1fpkt", shape=diamond, color=yellow];
1699[label="204.75.124.6;s;1pkt 1fpkt", shape=hexagon, color=black];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.75.124.6:194, 196.57.66.99:58254}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58254: (50%)&lt;BR/&gt; 194: (50%)&gt;];
}
296--1699[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.57.66.99" dst_port="58254" src_ip="204.75.124.6" src_port="194"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
328[label="78.101.117.176;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.101.117.176:6882, 149.207.217.197:4292}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6882: (50%)&lt;BR/&gt; 4292: (50%)&gt;];
}
328--1644[label="1;1pkt 1fpkt"];
328--1703[label="1;1pkt 1fpkt"];
328--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="4292" src_ip="78.101.117.176" src_port="6882"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
342[label="58.33.173.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
1705[label="58.33.173.8;s;1pkt 1fpkt", shape=hexagon, color=black];
2211[label="58.33.173.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3950[label="58.33.173.8;1pkt 1fpkt", shape=invtriangle, color=brown];
4894[label="58.33.173.8;1pkt 1fpkt", shape=invhouse, color=bisque];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.33.173.8:80, 149.207.4.113:6714}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6714: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
342--1705[label="1;1pkt 1fpkt"];
342--2103[label="1;1pkt 1fpkt"];
342--2211[label="1;1pkt 1fpkt"];
342--3950[label="1;1pkt 1fpkt"];
342--4894[label="1;1pkt 1fpkt"];
1705--2103[label="1;1pkt 1fpkt"];
1705--2211[label="1;1pkt 1fpkt"];
1705--3950[label="1;1pkt 1fpkt"];
1705--4894[label="1;1pkt 1fpkt"];
2211--3950[label="1;1pkt 1fpkt"];
2211--4894[label="1;1pkt 1fpkt"];
3950--4894[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.4.113" dst_port="6714" src_ip="58.33.173.8" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
683[label="219.90.63.143;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.90.63.143:8882, 149.207.217.197:3984}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8882: (50%)&lt;BR/&gt; 3984: (50%)&gt;];
}
683--1644[label="1;1pkt 1fpkt"];
683--1706[label="1;1pkt 1fpkt"];
683--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="3984" src_ip="219.90.63.143" src_port="8882"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
363[label="149.206.132.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
364[label="216.20.64.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
1709[label="216.20.64.198;s;1pkt 1fpkt", shape=hexagon, color=black];
3540[label="216.20.64.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4656[label="216.20.64.198;1pkt 1fpkt", shape=invtriangle, color=brown];
5230[label="216.20.64.198;1pkt 1fpkt", shape=invhouse, color=bisque];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.20.64.198:20384, 149.206.132.193:49200}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49200: (50%)&lt;BR/&gt; 20384: (50%)&gt;];
}
363--364[label="1;1pkt 1fpkt"];
363--1709[label="1;1pkt 1fpkt"];
363--3540[label="1;1pkt 1fpkt"];
363--4656[label="1;1pkt 1fpkt"];
363--5230[label="1;1pkt 1fpkt"];
364--1709[label="1;1pkt 1fpkt"];
364--3540[label="1;1pkt 1fpkt"];
364--4656[label="1;1pkt 1fpkt"];
364--5230[label="1;1pkt 1fpkt"];
1709--3540[label="1;1pkt 1fpkt"];
1709--4656[label="1;1pkt 1fpkt"];
1709--5230[label="1;1pkt 1fpkt"];
3540--4656[label="1;1pkt 1fpkt"];
3540--5230[label="1;1pkt 1fpkt"];
4656--5230[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.132.193" dst_port="49200" src_ip="216.20.64.198" src_port="20384"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
709[label="35.145.35.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
1718[label="35.145.35.1;s;1pkt 1fpkt", shape=hexagon, color=black];
2144[label="35.145.35.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.145.35.1:12004, 201.118.239.70:3345}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12004: (50%)&lt;BR/&gt; 3345: (50%)&gt;];
}
709--1718[label="1;1pkt 1fpkt"];
709--2024[label="1;1pkt 1fpkt"];
709--2144[label="1;1pkt 1fpkt"];
1718--2024[label="1;1pkt 1fpkt"];
1718--2144[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.118.239.70" dst_port="3345" src_ip="35.145.35.1" src_port="12004"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
589[label="101.50.24.39;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.50.24.39:6881, 149.207.217.197:4010}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 4010: (50%)&gt;];
}
589--1644[label="1;1pkt 1fpkt"];
589--1722[label="1;1pkt 1fpkt"];
589--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="4010" src_ip="101.50.24.39" src_port="6881"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
736[label="131.233.150.183;s;577pkt 577fpkt", shape=diamond, color=yellow];
1725[label="131.233.150.183;s;324pkt 324fpkt", shape=hexagon, color=black];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.150.183:53695, *:53}[74.6967%]&lt;BR/&gt;{131.233.150.183:53, *:*}[21.8371%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.4451%)&lt;BR/&gt; 53695: (37.4584%)&lt;BR/&gt; 0: (3.55161%)&lt;BR/&gt; 32768: (0.388457%)&lt;BR/&gt; 32769: (0.332963%)&gt;];
}
736--1725[label="1;324pkt 324fpkt"];
</description>
    <slice>
      <filter src_ip="131.233.150.183" src_port="53"/>
      <filter dst_port="53" src_ip="131.233.150.183" src_port="53695"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
620[label="149.206.236.112;d;107pkt 107fpkt", shape=diamond, color=yellow];
630[label="58.67.168.2;s;67pkt 67fpkt", shape=diamond, color=yellow];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.67.168.2:80, *:*}[41.358%]&lt;BR/&gt;{58.67.168.134:80, 149.206.236.112:*}[33.9506%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.5402%)&lt;BR/&gt; 25: (3.44828%)&lt;BR/&gt; 53: (1.43678%)&lt;BR/&gt; 113: (0.862069%)&lt;BR/&gt; 57969: (0.574713%)&gt;];
}
620--630[label="0.179104;12pkt 12fpkt"];
620--633[label="0.514019;55pkt 55fpkt"];
620--753[label="0.0373832;4pkt 4fpkt"];
620--766[label="0.0373832;4pkt 4fpkt"];
620--1113[label="0.0185185;1pkt 1fpkt"];
620--1576[label="0.0273973;2pkt 2fpkt"];
620--1729[label="0.00934579;1pkt 1fpkt"];
620--1800[label="0.0373832;4pkt 4fpkt"];
620--1814[label="0.514019;55pkt 55fpkt"];
620--2158[label="0.162162;12pkt 12fpkt"];
620--2793[label="0.016129;1pkt 1fpkt"];
620--2811[label="0.0373832;4pkt 4fpkt"];
620--3116[label="0.514019;55pkt 55fpkt"];
620--3237[label="0.00934579;1pkt 1fpkt"];
620--3249[label="0.0178571;1pkt 1fpkt"];
620--3915[label="0.164384;12pkt 12fpkt"];
620--4272[label="0.016129;1pkt 1fpkt"];
620--4873[label="0.164384;12pkt 12fpkt"];
620--5056[label="0.016129;1pkt 1fpkt"];
630--945[label="0.0746269;5pkt 5fpkt"];
630--1044[label="0.238806;16pkt 16fpkt"];
630--1052[label="0.0895522;6pkt 6fpkt"];
630--1482[label="0.104478;7pkt 7fpkt"];
630--1656[label="0.0298507;2pkt 2fpkt"];
630--1673[label="0.179104;12pkt 12fpkt"];
630--1826[label="0.0746269;5pkt 5fpkt"];
630--1937[label="0.0597015;4pkt 4fpkt"];
630--2065[label="0.0298507;2pkt 2fpkt"];
630--2103[label="0.0149254;1pkt 1fpkt"];
630--2158[label="1;67pkt 67fpkt"];
630--3915[label="0.985075;66pkt 66fpkt"];
630--4873[label="0.985075;66pkt 66fpkt"];
</description>
    <slice>
      <filter src_ip="58.67.168.2" src_port="80"/>
      <filter dst_ip="149.206.236.112" src_ip="58.67.168.134" src_port="80"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
415[label="149.206.39.140;d;60pkt 60fpkt", shape=diamond, color=yellow];
454[label="205.87.36.152;s;371pkt 371fpkt", shape=diamond, color=yellow];
476[label="59.26.106.150;s;431pkt 431fpkt", shape=diamond, color=yellow];
477[label="208.152.1.197;s;508pkt 508fpkt", shape=diamond, color=yellow];
486[label="57.158.52.185;s;72pkt 72fpkt", shape=diamond, color=yellow];
514[label="145.166.244.198;d;55pkt 55fpkt", shape=diamond, color=yellow];
538[label="149.206.228.246;d;20pkt 20fpkt", shape=diamond, color=yellow];
544[label="145.166.4.156;d;120pkt 120fpkt", shape=diamond, color=yellow];
596[label="58.67.161.44;s;105pkt 105fpkt", shape=diamond, color=yellow];
618[label="166.55.58.57;d;45pkt 45fpkt", shape=diamond, color=yellow];
627[label="149.206.18.75;d;139pkt 139fpkt", shape=diamond, color=yellow];
633[label="58.67.168.134;s;147pkt 147fpkt", shape=diamond, color=yellow];
641[label="205.87.56.164;s;83pkt 83fpkt", shape=diamond, color=yellow];
651[label="149.206.203.16;d;52pkt 52fpkt", shape=diamond, color=yellow];
671[label="149.206.203.6;d;140pkt 140fpkt", shape=diamond, color=yellow];
753[label="205.87.38.86;s;367pkt 367fpkt", shape=diamond, color=yellow];
764[label="149.206.18.192;d;59pkt 59fpkt", shape=diamond, color=yellow];
910[label="149.206.21.15;d;76pkt 76fpkt", shape=diamond, color=yellow];
925[label="58.67.149.177;s;223pkt 223fpkt", shape=diamond, color=yellow];
939[label="149.206.147.34;d;54pkt 54fpkt", shape=diamond, color=yellow];
959[label="58.67.150.37;s;44pkt 44fpkt", shape=diamond, color=yellow];
963[label="149.206.205.120;d;86pkt 86fpkt", shape=diamond, color=yellow];
1082[label="145.71.43.219;d;38pkt 38fpkt", shape=diamond, color=yellow];
1158[label="59.26.90.181;s;132pkt 132fpkt", shape=diamond, color=yellow];
1208[label="149.206.104.0;d;60pkt 60fpkt", shape=diamond, color=yellow];
1214[label="149.206.205.0;d;91pkt 91fpkt", shape=diamond, color=yellow];
1239[label="205.1.41.164;s;9pkt 9fpkt", shape=diamond, color=yellow];
1275[label="201.120.127.135;d;107pkt 107fpkt", shape=diamond, color=yellow];
1298[label="216.141.18.85;s;43pkt 43fpkt", shape=diamond, color=yellow];
1369[label="205.1.156.34;s;78pkt 78fpkt", shape=diamond, color=yellow];
1407[label="166.55.0.244;d;9pkt 9fpkt", shape=diamond, color=yellow];
1545[label="205.1.41.132;s;7pkt 7fpkt", shape=diamond, color=yellow];
1584[label="145.71.142.147;d;63pkt 63fpkt", shape=diamond, color=yellow];
1613[label="145.166.154.32;d;60pkt 60fpkt", shape=diamond, color=yellow];
1630[label="149.206.205.162;d;72pkt 72fpkt", shape=diamond, color=yellow];
1673[label="149.206.205.6;d;90pkt 90fpkt", shape=hexagon, color=black];
1686[label="149.206.30.242;d;79pkt 79fpkt", shape=hexagon, color=black];
1732[label="149.206.232.8;d;217pkt 217fpkt", shape=hexagon, color=black];
1751[label="145.166.244.198;d;79pkt 79fpkt", shape=hexagon, color=black];
1765[label="149.206.232.73;d;103pkt 103fpkt", shape=hexagon, color=black];
1795[label="58.67.161.44;s;37pkt 37fpkt", shape=hexagon, color=black];
1814[label="58.67.168.134;s;141pkt 141fpkt", shape=hexagon, color=black];
1818[label="58.67.149.177;s;223pkt 223fpkt", shape=hexagon, color=black];
1826[label="149.206.39.34;d;72pkt 72fpkt", shape=hexagon, color=black];
1833[label="149.206.205.120;d;75pkt 75fpkt", shape=hexagon, color=black];
1871[label="166.55.0.252;d;84pkt 84fpkt", shape=hexagon, color=black];
1923[label="149.206.228.246;d;16pkt 16fpkt", shape=hexagon, color=black];
1925[label="145.71.43.219;d;38pkt 38fpkt", shape=hexagon, color=black];
1976[label="149.206.232.50;d;82pkt 82fpkt", shape=hexagon, color=black];
2014[label="149.206.21.15;d;76pkt 76fpkt", shape=hexagon, color=black];
2297[label="205.1.45.21;7pkt 7fpkt", shape=pentagon, color=darkviolet];
2637[label="211.145.103.63;53pkt 53fpkt", shape=pentagon, color=darkviolet];
2937[label="34.230.53.105;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3116[label="58.67.168.134;221pkt 221fpkt", shape=pentagon, color=darkviolet];
3237[label="205.87.36.152;394pkt 394fpkt", shape=pentagon, color=darkviolet];
3412[label="58.67.149.177;223pkt 223fpkt", shape=pentagon, color=darkviolet];
4001[label="205.1.45.21;8pkt 8fpkt", shape=invtriangle, color=brown];
4273[label="216.141.18.85;50pkt 50fpkt", shape=invtriangle, color=brown];
4436[label="205.1.41.136;1pkt 1fpkt", shape=invtriangle, color=brown];
5119[label="205.1.41.136;1pkt 1fpkt", shape=invhouse, color=bisque];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[95.6181%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3315%)&lt;BR/&gt; 0: (0.60814%)&lt;BR/&gt; 1863: (0.576953%)&lt;BR/&gt; 443: (0.32746%)&lt;BR/&gt; 2051: (0.265087%)&gt;];
}
415--454[label="0.0166667;1pkt 1fpkt"];
415--487[label="1;2pkt 2fpkt"];
415--614[label="0.0166667;1pkt 1fpkt"];
415--753[label="0.0166667;1pkt 1fpkt"];
415--766[label="0.0666667;4pkt 4fpkt"];
415--959[label="0.0227273;1pkt 1fpkt"];
415--1659[label="1;2pkt 2fpkt"];
415--1677[label="1;32pkt 32fpkt"];
415--2103[label="0.0333333;2pkt 2fpkt"];
415--2487[label="0.666667;4pkt 4fpkt"];
415--2811[label="0.0666667;4pkt 4fpkt"];
415--3237[label="0.0166667;1pkt 1fpkt"];
415--3269[label="0.15;9pkt 9fpkt"];
415--4104[label="0.6;3pkt 3fpkt"];
415--4508[label="0.15;9pkt 9fpkt"];
415--4971[label="0.666667;4pkt 4fpkt"];
454--461[label="0.107817;40pkt 40fpkt"];
454--464[label="0.0174672;4pkt 4fpkt"];
454--467[label="0.00534759;1pkt 1fpkt"];
454--472[label="0.0103806;3pkt 3fpkt"];
454--491[label="0.0512821;2pkt 2fpkt"];
454--511[label="0.028169;2pkt 2fpkt"];
454--514[label="0.0181818;1pkt 1fpkt"];
454--533[label="0.00784314;2pkt 2fpkt"];
454--538[label="0.15;3pkt 3fpkt"];
454--620[label="0.00934579;1pkt 1fpkt"];
454--621[label="0.00847458;1pkt 1fpkt"];
454--627[label="0.028777;4pkt 4fpkt"];
454--638[label="0.010101;1pkt 1fpkt"];
454--651[label="0.0384615;2pkt 2fpkt"];
454--665[label="0.00746269;1pkt 1fpkt"];
454--754[label="0.003125;1pkt 1fpkt"];
454--761[label="0.0118343;2pkt 2fpkt"];
454--764[label="0.0169492;1pkt 1fpkt"];
454--769[label="0.0166667;2pkt 2fpkt"];
454--781[label="0.0694444;5pkt 5fpkt"];
454--793[label="0.0294118;2pkt 2fpkt"];
454--838[label="0.0202703;3pkt 3fpkt"];
454--886[label="0.00854701;2pkt 2fpkt"];
454--910[label="0.0526316;4pkt 4fpkt"];
454--939[label="0.111111;6pkt 6fpkt"];
454--954[label="0.0344828;3pkt 3fpkt"];
454--960[label="0.0238095;2pkt 2fpkt"];
454--963[label="0.0232558;2pkt 2fpkt"];
454--991[label="0.0123457;1pkt 1fpkt"];
454--1010[label="0.0162602;2pkt 2fpkt"];
454--1023[label="0.010989;1pkt 1fpkt"];
454--1025[label="0.0149254;1pkt 1fpkt"];
454--1042[label="0.0246914;2pkt 2fpkt"];
454--1044[label="0.0112782;3pkt 3fpkt"];
454--1052[label="0.00819672;1pkt 1fpkt"];
454--1082[label="0.0789474;3pkt 3fpkt"];
454--1162[label="0.0350877;2pkt 2fpkt"];
454--1170[label="0.016129;1pkt 1fpkt"];
454--1208[label="0.0333333;2pkt 2fpkt"];
454--1214[label="0.021978;2pkt 2fpkt"];
454--1249[label="0.0215054;2pkt 2fpkt"];
454--1254[label="0.00925926;1pkt 1fpkt"];
454--1270[label="0.00769231;1pkt 1fpkt"];
454--1275[label="0.00934579;1pkt 1fpkt"];
454--1288[label="0.0102041;1pkt 1fpkt"];
454--1308[label="0.0967742;3pkt 3fpkt"];
454--1333[label="0.03125;2pkt 2fpkt"];
454--1399[label="0.0434783;1pkt 1fpkt"];
454--1407[label="0.222222;2pkt 2fpkt"];
454--1443[label="0.027027;2pkt 2fpkt"];
454--1461[label="0.0240964;2pkt 2fpkt"];
454--1482[label="0.0232558;2pkt 2fpkt"];
454--1575[label="0.030303;4pkt 4fpkt"];
454--1584[label="0.15873;10pkt 10fpkt"];
454--1613[label="0.0666667;4pkt 4fpkt"];
454--1630[label="0.0277778;2pkt 2fpkt"];
454--1631[label="0.0322581;1pkt 1fpkt"];
454--1645[label="0.032345;12pkt 12fpkt"];
454--1648[label="0.00793651;1pkt 1fpkt"];
454--1656[label="0.107817;40pkt 40fpkt"];
454--1671[label="0.00877193;1pkt 1fpkt"];
454--1673[label="0.0333333;3pkt 3fpkt"];
454--1729[label="1;188pkt 188fpkt"];
454--1732[label="0.0184332;4pkt 4fpkt"];
454--1746[label="0.0350877;2pkt 2fpkt"];
454--1747[label="0.0107527;1pkt 1fpkt"];
454--1751[label="0.0253165;2pkt 2fpkt"];
454--1765[label="0.0291262;3pkt 3fpkt"];
454--1797[label="0.00854701;2pkt 2fpkt"];
454--1803[label="0.00507614;1pkt 1fpkt"];
454--1833[label="0.0266667;2pkt 2fpkt"];
454--1849[label="0.0123457;1pkt 1fpkt"];
454--1852[label="0.0175439;1pkt 1fpkt"];
454--1871[label="0.0238095;2pkt 2fpkt"];
454--1923[label="0.1875;3pkt 3fpkt"];
454--1925[label="0.0789474;3pkt 3fpkt"];
454--1937[label="0.00539084;2pkt 2fpkt"];
454--1961[label="0.0169492;2pkt 2fpkt"];
454--2014[label="0.0526316;4pkt 4fpkt"];
454--2024[label="0.0215633;8pkt 8fpkt"];
454--2065[label="0.105121;39pkt 39fpkt"];
454--2103[label="0.15903;59pkt 59fpkt"];
454--3237[label="1;371pkt 371fpkt"];
476--511[label="0.464789;33pkt 33fpkt"];
476--514[label="0.763636;42pkt 42fpkt"];
476--618[label="0.0888889;4pkt 4fpkt"];
476--771[label="0.109375;42pkt 42fpkt"];
476--939[label="0.0555556;3pkt 3fpkt"];
476--1072[label="0.736842;42pkt 42fpkt"];
476--1082[label="0.0263158;1pkt 1fpkt"];
476--1645[label="0.099768;43pkt 43fpkt"];
476--1656[label="0.00232019;1pkt 1fpkt"];
476--1751[label="0.607595;48pkt 48fpkt"];
476--1925[label="0.0263158;1pkt 1fpkt"];
477--771[label="0.00520833;2pkt 2fpkt"];
477--783[label="0.0941176;8pkt 8fpkt"];
477--1022[label="0.029304;8pkt 8fpkt"];
477--1288[label="0.153061;15pkt 15fpkt"];
477--1421[label="0.0955882;13pkt 13fpkt"];
477--1550[label="0.9375;30pkt 30fpkt"];
477--1584[label="0.0952381;6pkt 6fpkt"];
477--1853[label="0.0130719;2pkt 2fpkt"];
477--1857[label="0.0941176;8pkt 8fpkt"];
477--2103[label="0.0511811;26pkt 26fpkt"];
486--764[label="0.0338983;2pkt 2fpkt"];
486--1686[label="0.972222;70pkt 70fpkt"];
486--2103[label="0.0277778;2pkt 2fpkt"];
514--753[label="0.0727273;4pkt 4fpkt"];
514--2103[label="0.0727273;4pkt 4fpkt"];
514--3237[label="0.0181818;1pkt 1fpkt"];
538--596[label="0.5;10pkt 10fpkt"];
538--753[label="0.35;7pkt 7fpkt"];
538--1729[label="0.05;1pkt 1fpkt"];
538--1795[label="0.15;3pkt 3fpkt"];
538--1800[label="0.1;2pkt 2fpkt"];
538--1923[label="1;16pkt 16fpkt"];
538--3237[label="0.15;3pkt 3fpkt"];
544--614[label="0.00833333;1pkt 1fpkt"];
544--641[label="0.0722892;6pkt 6fpkt"];
544--675[label="0.0333333;4pkt 4fpkt"];
544--766[label="0.0166667;2pkt 2fpkt"];
544--898[label="0.0229885;2pkt 2fpkt"];
544--924[label="0.0188679;1pkt 1fpkt"];
544--930[label="0.333333;40pkt 40fpkt"];
544--1576[label="0.0136986;1pkt 1fpkt"];
544--1700[label="0.0434783;2pkt 2fpkt"];
544--1750[label="0.107143;6pkt 6fpkt"];
544--1972[label="0.333333;40pkt 40fpkt"];
544--2103[label="0.00833333;1pkt 1fpkt"];
544--2268[label="0.016129;1pkt 1fpkt"];
544--2297[label="0.142857;1pkt 1fpkt"];
544--2399[label="0.333333;40pkt 40fpkt"];
544--2629[label="0.0285714;2pkt 2fpkt"];
544--2637[label="1;53pkt 53fpkt"];
544--2811[label="0.0166667;2pkt 2fpkt"];
544--3317[label="0.0631579;6pkt 6fpkt"];
544--3374[label="0.016129;1pkt 1fpkt"];
544--3526[label="0.222222;2pkt 2fpkt"];
544--3887[label="0.0333333;4pkt 4fpkt"];
544--4001[label="0.125;1pkt 1fpkt"];
544--4186[label="0.0144928;1pkt 1fpkt"];
544--4571[label="0.016129;1pkt 1fpkt"];
544--4650[label="0.222222;2pkt 2fpkt"];
544--4860[label="0.0333333;4pkt 4fpkt"];
544--5015[label="0.0144928;1pkt 1fpkt"];
544--5187[label="0.016129;1pkt 1fpkt"];
544--5225[label="0.222222;2pkt 2fpkt"];
596--671[label="0.4;42pkt 42fpkt"];
596--793[label="0.117647;8pkt 8fpkt"];
596--1042[label="0.123457;10pkt 10fpkt"];
596--1080[label="0.109756;9pkt 9fpkt"];
596--1630[label="0.0972222;7pkt 7fpkt"];
596--1656[label="0.00952381;1pkt 1fpkt"];
596--1795[label="1;37pkt 37fpkt"];
596--1923[label="0.5;8pkt 8fpkt"];
596--1937[label="0.00952381;1pkt 1fpkt"];
596--1976[label="0.109756;9pkt 9fpkt"];
596--2065[label="0.00952381;1pkt 1fpkt"];
596--2103[label="0.142857;15pkt 15fpkt"];
618--766[label="0.311111;14pkt 14fpkt"];
618--2103[label="0.155556;7pkt 7fpkt"];
618--2811[label="0.311111;14pkt 14fpkt"];
627--766[label="0.0503597;7pkt 7fpkt"];
627--770[label="0.00719424;1pkt 1fpkt"];
627--787[label="0.0935252;13pkt 13fpkt"];
627--847[label="0.0143885;2pkt 2fpkt"];
627--907[label="0.0147059;1pkt 1fpkt"];
627--1142[label="0.0103093;1pkt 1fpkt"];
627--1156[label="0.158273;22pkt 22fpkt"];
627--1158[label="0.0151515;2pkt 2fpkt"];
627--1198[label="0.112903;7pkt 7fpkt"];
627--1281[label="0.00719424;1pkt 1fpkt"];
627--1369[label="0.025641;2pkt 2fpkt"];
627--1500[label="0.114286;8pkt 8fpkt"];
627--1549[label="0.0273973;2pkt 2fpkt"];
627--1571[label="0.00719424;1pkt 1fpkt"];
627--1729[label="0.0143885;2pkt 2fpkt"];
627--1876[label="0.0143885;2pkt 2fpkt"];
627--1910[label="0.0769231;7pkt 7fpkt"];
627--1962[label="0.00847458;1pkt 1fpkt"];
627--2103[label="0.0647482;9pkt 9fpkt"];
627--2146[label="0.0503597;7pkt 7fpkt"];
627--2155[label="0.0935252;13pkt 13fpkt"];
627--2230[label="0.00719424;1pkt 1fpkt"];
627--2409[label="0.025;2pkt 2fpkt"];
627--2508[label="0.00719424;1pkt 1fpkt"];
627--2607[label="0.416667;5pkt 5fpkt"];
627--2641[label="0.0273973;2pkt 2fpkt"];
627--2686[label="0.011236;1pkt 1fpkt"];
627--2793[label="0.016129;1pkt 1fpkt"];
627--2811[label="0.0503597;7pkt 7fpkt"];
627--2972[label="0.0777778;7pkt 7fpkt"];
627--3030[label="0.166667;1pkt 1fpkt"];
627--3041[label="0.0227273;1pkt 1fpkt"];
627--3075[label="0.00934579;1pkt 1fpkt"];
627--3237[label="0.028777;4pkt 4fpkt"];
627--3441[label="0.0143885;2pkt 2fpkt"];
627--3458[label="0.12;3pkt 3fpkt"];
627--3470[label="0.111111;3pkt 3fpkt"];
627--3479[label="0.158273;22pkt 22fpkt"];
627--3512[label="0.025641;2pkt 2fpkt"];
627--3652[label="0.031746;2pkt 2fpkt"];
627--3756[label="0.0178571;1pkt 1fpkt"];
627--3907[label="0.0503597;7pkt 7fpkt"];
627--3913[label="0.0935252;13pkt 13fpkt"];
627--3959[label="0.00719424;1pkt 1fpkt"];
627--4192[label="0.0277778;2pkt 2fpkt"];
627--4214[label="0.011236;1pkt 1fpkt"];
627--4272[label="0.016129;1pkt 1fpkt"];
627--4315[label="0.233766;18pkt 18fpkt"];
627--4361[label="0.0777778;7pkt 7fpkt"];
627--4387[label="0.166667;1pkt 1fpkt"];
627--4621[label="0.111111;3pkt 3fpkt"];
627--4786[label="0.0178571;1pkt 1fpkt"];
627--4871[label="0.0935252;13pkt 13fpkt"];
627--5056[label="0.016129;1pkt 1fpkt"];
627--5072[label="0.233766;18pkt 18fpkt"];
627--5208[label="0.111111;3pkt 3fpkt"];
633--945[label="0.236111;17pkt 17fpkt"];
633--1044[label="0.0408163;6pkt 6fpkt"];
633--1052[label="0.139344;17pkt 17fpkt"];
633--1673[label="0.544444;49pkt 49fpkt"];
633--1814[label="1;141pkt 141fpkt"];
633--1826[label="0.236111;17pkt 17fpkt"];
633--2102[label="0.00680272;1pkt 1fpkt"];
633--2103[label="0.0408163;6pkt 6fpkt"];
633--2122[label="0.00680272;1pkt 1fpkt"];
633--3116[label="1;147pkt 147fpkt"];
641--954[label="0.13253;11pkt 11fpkt"];
641--960[label="0.168675;14pkt 14fpkt"];
641--1057[label="0.136364;6pkt 6fpkt"];
641--1747[label="0.0240964;2pkt 2fpkt"];
641--1750[label="1;56pkt 56fpkt"];
641--1871[label="0.168675;14pkt 14fpkt"];
641--2103[label="0.060241;5pkt 5fpkt"];
641--3317[label="1;83pkt 83fpkt"];
651--753[label="0.211538;11pkt 11fpkt"];
651--925[label="0.326923;17pkt 17fpkt"];
651--1158[label="0.0192308;1pkt 1fpkt"];
651--1564[label="0.0384615;2pkt 2fpkt"];
651--1576[label="0.0384615;2pkt 2fpkt"];
651--1662[label="0.333333;10pkt 10fpkt"];
651--1729[label="0.0384615;2pkt 2fpkt"];
651--1800[label="0.211538;11pkt 11fpkt"];
651--1818[label="0.326923;17pkt 17fpkt"];
651--2291[label="0.0384615;2pkt 2fpkt"];
651--2345[label="0.115385;3pkt 3fpkt"];
651--2886[label="0.192308;10pkt 10fpkt"];
651--3237[label="0.0384615;2pkt 2fpkt"];
651--3339[label="0.0196078;1pkt 1fpkt"];
651--3412[label="0.326923;17pkt 17fpkt"];
651--3441[label="0.0192308;1pkt 1fpkt"];
651--3756[label="0.0192308;1pkt 1fpkt"];
651--4322[label="0.192308;10pkt 10fpkt"];
651--4547[label="0.0196078;1pkt 1fpkt"];
651--4786[label="0.0192308;1pkt 1fpkt"];
651--5075[label="0.192308;10pkt 10fpkt"];
671--753[label="0.235714;33pkt 33fpkt"];
671--969[label="0.378571;53pkt 53fpkt"];
671--1153[label="0.02;1pkt 1fpkt"];
671--1549[label="0.0273973;2pkt 2fpkt"];
671--1795[label="0.459459;17pkt 17fpkt"];
671--1800[label="0.0785714;11pkt 11fpkt"];
671--1837[label="0.378571;53pkt 53fpkt"];
671--2103[label="0.0714286;10pkt 10fpkt"];
671--2793[label="0.016129;1pkt 1fpkt"];
671--3512[label="0.025641;2pkt 2fpkt"];
671--4272[label="0.016129;1pkt 1fpkt"];
671--5056[label="0.016129;1pkt 1fpkt"];
753--761[label="0.0177515;3pkt 3fpkt"];
753--764[label="0.0169492;1pkt 1fpkt"];
753--769[label="0.025;3pkt 3fpkt"];
753--771[label="0.00544959;2pkt 2fpkt"];
753--793[label="0.147059;10pkt 10fpkt"];
753--910[label="0.0921053;7pkt 7fpkt"];
753--935[label="0.285714;6pkt 6fpkt"];
753--991[label="0.0246914;2pkt 2fpkt"];
753--1042[label="0.0617284;5pkt 5fpkt"];
753--1044[label="0.018797;5pkt 5fpkt"];
753--1052[label="0.0163934;2pkt 2fpkt"];
753--1072[label="0.0350877;2pkt 2fpkt"];
753--1077[label="0.313433;21pkt 21fpkt"];
753--1082[label="0.0789474;3pkt 3fpkt"];
753--1170[label="0.0645161;4pkt 4fpkt"];
753--1184[label="0.0243902;7pkt 7fpkt"];
753--1199[label="0.0136986;1pkt 1fpkt"];
753--1254[label="0.00925926;1pkt 1fpkt"];
753--1275[label="0.0280374;3pkt 3fpkt"];
753--1318[label="0.0588235;3pkt 3fpkt"];
753--1333[label="0.0625;4pkt 4fpkt"];
753--1443[label="0.0810811;6pkt 6fpkt"];
753--1461[label="0.0361446;3pkt 3fpkt"];
753--1619[label="0.0363636;2pkt 2fpkt"];
753--1631[label="0.0322581;1pkt 1fpkt"];
753--1645[label="0.0163488;6pkt 6fpkt"];
753--1648[label="0.015873;2pkt 2fpkt"];
753--1656[label="0.0490463;18pkt 18fpkt"];
753--1657[label="0.25;4pkt 4fpkt"];
753--1671[label="0.0175439;2pkt 2fpkt"];
753--1747[label="0.0107527;1pkt 1fpkt"];
753--1751[label="0.0506329;4pkt 4fpkt"];
753--1800[label="1;157pkt 157fpkt"];
753--1823[label="0.285714;6pkt 6fpkt"];
753--1849[label="0.0246914;2pkt 2fpkt"];
753--1872[label="0.313433;21pkt 21fpkt"];
753--1923[label="0.3125;5pkt 5fpkt"];
753--1925[label="0.0789474;3pkt 3fpkt"];
753--1937[label="0.0108992;4pkt 4fpkt"];
753--1961[label="0.0254237;3pkt 3fpkt"];
753--1977[label="0.0136986;1pkt 1fpkt"];
753--1979[label="0.0588235;3pkt 3fpkt"];
753--2014[label="0.0921053;7pkt 7fpkt"];
753--2024[label="0.0326975;12pkt 12fpkt"];
753--2049[label="0.45;9pkt 9fpkt"];
753--2065[label="0.0490463;18pkt 18fpkt"];
753--2103[label="0.0762943;28pkt 28fpkt"];
764--791[label="0.457627;27pkt 27fpkt"];
764--1158[label="0.0338983;2pkt 2fpkt"];
764--1279[label="0.0338983;2pkt 2fpkt"];
764--1520[label="0.0169492;1pkt 1fpkt"];
764--1576[label="0.0338983;2pkt 2fpkt"];
764--1729[label="0.0169492;1pkt 1fpkt"];
764--1800[label="0.0169492;1pkt 1fpkt"];
764--2103[label="0.0338983;2pkt 2fpkt"];
764--2445[label="0.457627;27pkt 27fpkt"];
764--2543[label="0.0169492;1pkt 1fpkt"];
764--2788[label="0.0178571;1pkt 1fpkt"];
764--3114[label="0.0338983;2pkt 2fpkt"];
764--3237[label="0.0169492;1pkt 1fpkt"];
764--3441[label="0.0338983;2pkt 2fpkt"];
764--3471[label="0.0416667;2pkt 2fpkt"];
764--4078[label="0.457627;27pkt 27fpkt"];
764--4138[label="0.0169492;1pkt 1fpkt"];
764--4430[label="0.0338983;2pkt 2fpkt"];
764--4622[label="0.0416667;2pkt 2fpkt"];
764--4957[label="0.457627;27pkt 27fpkt"];
764--4989[label="0.0169492;1pkt 1fpkt"];
764--5116[label="0.0338983;2pkt 2fpkt"];
764--5209[label="0.0416667;2pkt 2fpkt"];
910--959[label="0.227273;10pkt 10fpkt"];
910--1009[label="0.0263158;2pkt 2fpkt"];
910--1239[label="0.222222;2pkt 2fpkt"];
910--1729[label="0.0131579;1pkt 1fpkt"];
910--1800[label="0.0131579;1pkt 1fpkt"];
910--2014[label="1;76pkt 76fpkt"];
910--2103[label="0.0657895;5pkt 5fpkt"];
910--2169[label="0.25;1pkt 1fpkt"];
910--2793[label="0.016129;1pkt 1fpkt"];
910--3125[label="1;1pkt 1fpkt"];
910--3237[label="0.0526316;4pkt 4fpkt"];
910--3269[label="0.434211;33pkt 33fpkt"];
910--3923[label="0.25;1pkt 1fpkt"];
910--4272[label="0.016129;1pkt 1fpkt"];
910--4436[label="1;1pkt 1fpkt"];
910--4508[label="0.434211;33pkt 33fpkt"];
910--4880[label="0.25;1pkt 1fpkt"];
910--5056[label="0.016129;1pkt 1fpkt"];
910--5119[label="1;1pkt 1fpkt"];
925--963[label="0.639535;55pkt 55fpkt"];
925--1333[label="0.4375;28pkt 28fpkt"];
925--1818[label="1;223pkt 223fpkt"];
925--1833[label="0.706667;53pkt 53fpkt"];
925--1937[label="0.0044843;1pkt 1fpkt"];
925--2103[label="0.0134529;3pkt 3fpkt"];
925--3412[label="1;223pkt 223fpkt"];
939--1158[label="0.037037;2pkt 2fpkt"];
939--1566[label="0.0555556;3pkt 3fpkt"];
939--1729[label="0.0740741;4pkt 4fpkt"];
939--2103[label="0.0925926;5pkt 5fpkt"];
939--2268[label="0.0185185;1pkt 1fpkt"];
939--2788[label="0.0185185;1pkt 1fpkt"];
939--2793[label="0.0555556;3pkt 3fpkt"];
939--2811[label="0.0925926;5pkt 5fpkt"];
939--3041[label="0.0227273;1pkt 1fpkt"];
939--3237[label="0.111111;6pkt 6fpkt"];
939--3418[label="0.0555556;3pkt 3fpkt"];
939--3441[label="0.037037;2pkt 2fpkt"];
939--3535[label="0.285714;6pkt 6fpkt"];
939--3664[label="0.0185185;1pkt 1fpkt"];
939--3756[label="0.037037;2pkt 2fpkt"];
939--4272[label="0.0555556;3pkt 3fpkt"];
939--4595[label="0.0555556;3pkt 3fpkt"];
939--4786[label="0.037037;2pkt 2fpkt"];
939--5056[label="0.0555556;3pkt 3fpkt"];
959--1275[label="0.136364;6pkt 6fpkt"];
959--1648[label="0.25;11pkt 11fpkt"];
959--2014[label="0.227273;10pkt 10fpkt"];
959--2103[label="0.0227273;1pkt 1fpkt"];
963--1158[label="0.0348837;3pkt 3fpkt"];
963--1818[label="0.639535;55pkt 55fpkt"];
963--1833[label="1;75pkt 75fpkt"];
963--2103[label="0.0930233;8pkt 8fpkt"];
963--2793[label="0.0322581;2pkt 2fpkt"];
963--2811[label="0.127907;11pkt 11fpkt"];
963--2886[label="0.104651;9pkt 9fpkt"];
963--3237[label="0.0232558;2pkt 2fpkt"];
963--3412[label="0.639535;55pkt 55fpkt"];
963--3441[label="0.0348837;3pkt 3fpkt"];
963--4272[label="0.0322581;2pkt 2fpkt"];
963--4322[label="0.104651;9pkt 9fpkt"];
963--5056[label="0.0322581;2pkt 2fpkt"];
963--5075[label="0.104651;9pkt 9fpkt"];
1082--1158[label="0.0526316;2pkt 2fpkt"];
1082--1549[label="0.105263;4pkt 4fpkt"];
1082--1566[label="0.0263158;1pkt 1fpkt"];
1082--1925[label="1;38pkt 38fpkt"];
1082--2103[label="0.526316;20pkt 20fpkt"];
1082--2292[label="0.0263158;1pkt 1fpkt"];
1082--2915[label="0.0263158;1pkt 1fpkt"];
1082--3041[label="0.0263158;1pkt 1fpkt"];
1082--3237[label="0.0789474;3pkt 3fpkt"];
1082--3320[label="0.315789;12pkt 12fpkt"];
1082--3339[label="0.0526316;2pkt 2fpkt"];
1082--3418[label="0.0263158;1pkt 1fpkt"];
1082--3441[label="0.0526316;2pkt 2fpkt"];
1082--3466[label="0.166667;1pkt 1fpkt"];
1082--3512[label="0.105263;4pkt 4fpkt"];
1082--3996[label="0.0263158;1pkt 1fpkt"];
1082--4336[label="0.0263158;1pkt 1fpkt"];
1082--4539[label="0.315789;12pkt 12fpkt"];
1082--4547[label="0.0526316;2pkt 2fpkt"];
1082--4595[label="0.0263158;1pkt 1fpkt"];
1082--4619[label="0.166667;1pkt 1fpkt"];
1082--5081[label="0.0263158;1pkt 1fpkt"];
1082--5172[label="0.315789;12pkt 12fpkt"];
1158--1184[label="0.030303;4pkt 4fpkt"];
1158--1197[label="0.00757576;1pkt 1fpkt"];
1158--1214[label="0.021978;2pkt 2fpkt"];
1158--1318[label="0.0196078;1pkt 1fpkt"];
1158--1333[label="0.015625;1pkt 1fpkt"];
1158--1461[label="0.0120482;1pkt 1fpkt"];
1158--1470[label="0.0344828;1pkt 1fpkt"];
1158--1482[label="0.0232558;2pkt 2fpkt"];
1158--1619[label="0.0363636;2pkt 2fpkt"];
1158--1630[label="0.0138889;1pkt 1fpkt"];
1158--1631[label="0.0645161;2pkt 2fpkt"];
1158--1645[label="0.00757576;1pkt 1fpkt"];
1158--1648[label="0.015873;2pkt 2fpkt"];
1158--1656[label="0.0681818;9pkt 9fpkt"];
1158--1665[label="0.00769231;1pkt 1fpkt"];
1158--1671[label="0.00877193;1pkt 1fpkt"];
1158--1673[label="0.0222222;2pkt 2fpkt"];
1158--1732[label="0.0151515;2pkt 2fpkt"];
1158--1746[label="0.0175439;1pkt 1fpkt"];
1158--1751[label="0.0126582;1pkt 1fpkt"];
1158--1765[label="0.0291262;3pkt 3fpkt"];
1158--1826[label="0.0277778;2pkt 2fpkt"];
1158--1833[label="0.0266667;2pkt 2fpkt"];
1158--1857[label="0.0117647;1pkt 1fpkt"];
1158--1869[label="0.0266667;2pkt 2fpkt"];
1158--1871[label="0.0238095;2pkt 2fpkt"];
1158--1874[label="0.0153846;1pkt 1fpkt"];
1158--1925[label="0.0526316;2pkt 2fpkt"];
1158--1937[label="0.00757576;1pkt 1fpkt"];
1158--1961[label="0.00847458;1pkt 1fpkt"];
1158--1976[label="0.0243902;2pkt 2fpkt"];
1158--1979[label="0.0196078;1pkt 1fpkt"];
1158--2024[label="0.0151515;2pkt 2fpkt"];
1158--2065[label="0.0681818;9pkt 9fpkt"];
1158--2103[label="0.0757576;10pkt 10fpkt"];
1158--3441[label="1;132pkt 132fpkt"];
1208--2508[label="0.0166667;1pkt 1fpkt"];
1208--2811[label="0.0333333;2pkt 2fpkt"];
1208--3237[label="0.0333333;2pkt 2fpkt"];
1208--3690[label="0.1;1pkt 1fpkt"];
1208--4743[label="0.1;1pkt 1fpkt"];
1208--5277[label="0.1;1pkt 1fpkt"];
1214--1564[label="0.0422535;3pkt 3fpkt"];
1214--1566[label="0.0322581;2pkt 2fpkt"];
1214--2012[label="0.0232558;1pkt 1fpkt"];
1214--2183[label="0.0185185;1pkt 1fpkt"];
1214--2291[label="0.0405405;3pkt 3fpkt"];
1214--2316[label="0.05;2pkt 2fpkt"];
1214--2390[label="0.549451;50pkt 50fpkt"];
1214--2788[label="0.0178571;1pkt 1fpkt"];
1214--2811[label="0.120879;11pkt 11fpkt"];
1214--3225[label="0.10989;10pkt 10fpkt"];
1214--3237[label="0.021978;2pkt 2fpkt"];
1214--3418[label="0.0289855;2pkt 2fpkt"];
1214--3433[label="0.0392157;2pkt 2fpkt"];
1214--3441[label="0.021978;2pkt 2fpkt"];
1214--3471[label="0.0208333;1pkt 1fpkt"];
1214--4010[label="0.05;2pkt 2fpkt"];
1214--4595[label="0.0289855;2pkt 2fpkt"];
1214--4604[label="0.0392157;2pkt 2fpkt"];
1214--4622[label="0.0208333;1pkt 1fpkt"];
1214--5209[label="0.0208333;1pkt 1fpkt"];
1239--2014[label="0.222222;2pkt 2fpkt"];
1275--2105[label="0.00934579;1pkt 1fpkt"];
1275--3237[label="0.00934579;1pkt 1fpkt"];
1275--3269[label="0.383178;41pkt 41fpkt"];
1275--3664[label="0.0125;1pkt 1fpkt"];
1275--4508[label="0.383178;41pkt 41fpkt"];
1298--1584[label="0.27907;12pkt 12fpkt"];
1298--1937[label="0.0232558;1pkt 1fpkt"];
1298--2103[label="0.0465116;2pkt 2fpkt"];
1298--2795[label="1;43pkt 43fpkt"];
1298--4273[label="1;43pkt 43fpkt"];
1369--1656[label="0.025641;2pkt 2fpkt"];
1369--1658[label="0.25641;20pkt 20fpkt"];
1369--1698[label="0.0128205;1pkt 1fpkt"];
1369--2065[label="0.0128205;1pkt 1fpkt"];
1369--2074[label="0.214286;12pkt 12fpkt"];
1369--2103[label="0.0384615;3pkt 3fpkt"];
1369--2409[label="0.987179;77pkt 77fpkt"];
1407--1545[label="0.142857;1pkt 1fpkt"];
1407--1729[label="0.111111;1pkt 1fpkt"];
1407--2103[label="0.111111;1pkt 1fpkt"];
1407--2841[label="0.125;1pkt 1fpkt"];
1407--3237[label="0.222222;2pkt 2fpkt"];
1407--3548[label="0.111111;1pkt 1fpkt"];
1407--4296[label="0.125;1pkt 1fpkt"];
1407--5067[label="0.125;1pkt 1fpkt"];
1584--1729[label="0.15873;10pkt 10fpkt"];
1584--2012[label="0.0465116;2pkt 2fpkt"];
1584--2103[label="0.126984;8pkt 8fpkt"];
1584--2183[label="0.037037;2pkt 2fpkt"];
1584--2795[label="0.32;16pkt 16fpkt"];
1584--3237[label="0.15873;10pkt 10fpkt"];
1584--3835[label="0.031746;2pkt 2fpkt"];
1584--4273[label="0.32;16pkt 16fpkt"];
1584--4832[label="0.031746;2pkt 2fpkt"];
1584--5318[label="0.031746;2pkt 2fpkt"];
1613--2146[label="0.1;6pkt 6fpkt"];
1613--2316[label="0.025;1pkt 1fpkt"];
1613--2508[label="0.0166667;1pkt 1fpkt"];
1613--2811[label="0.0333333;2pkt 2fpkt"];
1613--3237[label="0.0666667;4pkt 4fpkt"];
1613--3479[label="0.633333;38pkt 38fpkt"];
1613--3907[label="0.1;6pkt 6fpkt"];
1613--4010[label="0.025;1pkt 1fpkt"];
1630--2811[label="0.0833333;6pkt 6fpkt"];
1630--3237[label="0.0277778;2pkt 2fpkt"];
1630--3441[label="0.0138889;1pkt 1fpkt"];
1673--1729[label="0.0333333;3pkt 3fpkt"];
1673--1814[label="0.544444;49pkt 49fpkt"];
1673--2158[label="0.162162;12pkt 12fpkt"];
1673--2316[label="0.125;5pkt 5fpkt"];
1673--2811[label="0.0555556;5pkt 5fpkt"];
1673--3116[label="0.544444;49pkt 49fpkt"];
1673--3237[label="0.0333333;3pkt 3fpkt"];
1673--3339[label="0.0196078;1pkt 1fpkt"];
1673--3433[label="0.0392157;2pkt 2fpkt"];
1673--3441[label="0.0222222;2pkt 2fpkt"];
1673--3664[label="0.05;4pkt 4fpkt"];
1673--3756[label="0.0357143;2pkt 2fpkt"];
1673--3915[label="0.164384;12pkt 12fpkt"];
1673--4010[label="0.125;5pkt 5fpkt"];
1673--4547[label="0.0196078;1pkt 1fpkt"];
1673--4604[label="0.0392157;2pkt 2fpkt"];
1673--4786[label="0.0357143;2pkt 2fpkt"];
1673--4873[label="0.164384;12pkt 12fpkt"];
1686--2103[label="0.0253165;2pkt 2fpkt"];
1686--3548[label="0.166667;2pkt 2fpkt"];
1732--1910[label="0.406593;37pkt 37fpkt"];
1732--2103[label="0.0552995;12pkt 12fpkt"];
1732--2146[label="0.24183;37pkt 37fpkt"];
1732--2710[label="1;29pkt 29fpkt"];
1732--2788[label="0.0178571;1pkt 1fpkt"];
1732--2811[label="0.133641;29pkt 29fpkt"];
1732--2937[label="1;17pkt 17fpkt"];
1732--3237[label="0.0184332;4pkt 4fpkt"];
1732--3433[label="0.0392157;2pkt 2fpkt"];
1732--3441[label="0.0140845;2pkt 2fpkt"];
1732--3471[label="0.0208333;1pkt 1fpkt"];
1732--3479[label="0.235023;51pkt 51fpkt"];
1732--3535[label="0.0952381;2pkt 2fpkt"];
1732--3664[label="0.025;2pkt 2fpkt"];
1732--3907[label="0.24183;37pkt 37fpkt"];
1732--4230[label="1;29pkt 29fpkt"];
1732--4604[label="0.0392157;2pkt 2fpkt"];
1732--4622[label="0.0208333;1pkt 1fpkt"];
1732--5209[label="0.0208333;1pkt 1fpkt"];
1751--1800[label="0.0506329;4pkt 4fpkt"];
1751--2915[label="0.03125;2pkt 2fpkt"];
1751--2965[label="0.0126582;1pkt 1fpkt"];
1751--3237[label="0.0253165;2pkt 2fpkt"];
1751--3339[label="0.0196078;1pkt 1fpkt"];
1751--3441[label="0.0126582;1pkt 1fpkt"];
1751--4336[label="0.03125;2pkt 2fpkt"];
1751--4547[label="0.0196078;1pkt 1fpkt"];
1751--5081[label="0.03125;2pkt 2fpkt"];
1765--2291[label="0.027027;2pkt 2fpkt"];
1765--2788[label="0.0178571;1pkt 1fpkt"];
1765--2811[label="0.0485437;5pkt 5fpkt"];
1765--3108[label="0.0232558;1pkt 1fpkt"];
1765--3237[label="0.0291262;3pkt 3fpkt"];
1765--3418[label="0.0289855;2pkt 2fpkt"];
1765--3433[label="0.0392157;2pkt 2fpkt"];
1765--3441[label="0.0291262;3pkt 3fpkt"];
1765--3756[label="0.0178571;1pkt 1fpkt"];
1765--4595[label="0.0289855;2pkt 2fpkt"];
1765--4604[label="0.0392157;2pkt 2fpkt"];
1765--4786[label="0.0178571;1pkt 1fpkt"];
1795--1923[label="0.1875;3pkt 3fpkt"];
1795--1937[label="0.027027;1pkt 1fpkt"];
1795--2065[label="0.027027;1pkt 1fpkt"];
1814--1826[label="0.236111;17pkt 17fpkt"];
1814--2102[label="0.0070922;1pkt 1fpkt"];
1814--2122[label="0.0070922;1pkt 1fpkt"];
1814--3116[label="1;141pkt 141fpkt"];
1818--1833[label="0.706667;53pkt 53fpkt"];
1818--1937[label="0.0044843;1pkt 1fpkt"];
1818--2103[label="0.0134529;3pkt 3fpkt"];
1818--3412[label="1;223pkt 223fpkt"];
1826--2158[label="0.0694444;5pkt 5fpkt"];
1826--2788[label="0.0178571;1pkt 1fpkt"];
1826--2793[label="0.016129;1pkt 1fpkt"];
1826--2811[label="0.0138889;1pkt 1fpkt"];
1826--2915[label="0.03125;2pkt 2fpkt"];
1826--3116[label="0.236111;17pkt 17fpkt"];
1826--3137[label="0.0277778;2pkt 2fpkt"];
1826--3418[label="0.115942;8pkt 8fpkt"];
1826--3441[label="0.0277778;2pkt 2fpkt"];
1826--3756[label="0.0357143;2pkt 2fpkt"];
1826--3915[label="0.0694444;5pkt 5fpkt"];
1826--4272[label="0.016129;1pkt 1fpkt"];
1826--4336[label="0.03125;2pkt 2fpkt"];
1826--4441[label="0.0277778;2pkt 2fpkt"];
1826--4595[label="0.115942;8pkt 8fpkt"];
1826--4786[label="0.0357143;2pkt 2fpkt"];
1826--4873[label="0.0694444;5pkt 5fpkt"];
1826--5056[label="0.016129;1pkt 1fpkt"];
1826--5081[label="0.03125;2pkt 2fpkt"];
1826--5122[label="0.0277778;2pkt 2fpkt"];
1833--2103[label="0.0266667;2pkt 2fpkt"];
1833--2793[label="0.0322581;2pkt 2fpkt"];
1833--2811[label="0.08;6pkt 6fpkt"];
1833--2886[label="0.08;6pkt 6fpkt"];
1833--3237[label="0.0266667;2pkt 2fpkt"];
1833--3412[label="0.706667;53pkt 53fpkt"];
1833--3441[label="0.0266667;2pkt 2fpkt"];
1833--4272[label="0.0322581;2pkt 2fpkt"];
1833--4322[label="0.08;6pkt 6fpkt"];
1833--5056[label="0.0322581;2pkt 2fpkt"];
1833--5075[label="0.08;6pkt 6fpkt"];
1871--1972[label="0.607143;51pkt 51fpkt"];
1871--2399[label="0.607143;51pkt 51fpkt"];
1871--2811[label="0.047619;4pkt 4fpkt"];
1871--3237[label="0.0238095;2pkt 2fpkt"];
1871--3317[label="0.166667;14pkt 14fpkt"];
1871--3339[label="0.0196078;1pkt 1fpkt"];
1871--3433[label="0.0392157;2pkt 2fpkt"];
1871--3441[label="0.0238095;2pkt 2fpkt"];
1871--3756[label="0.0178571;1pkt 1fpkt"];
1871--4547[label="0.0196078;1pkt 1fpkt"];
1871--4604[label="0.0392157;2pkt 2fpkt"];
1871--4786[label="0.0178571;1pkt 1fpkt"];
1923--3237[label="0.1875;3pkt 3fpkt"];
1925--2103[label="0.526316;20pkt 20fpkt"];
1925--2292[label="0.0263158;1pkt 1fpkt"];
1925--2915[label="0.0263158;1pkt 1fpkt"];
1925--3041[label="0.0263158;1pkt 1fpkt"];
1925--3237[label="0.0789474;3pkt 3fpkt"];
1925--3320[label="0.315789;12pkt 12fpkt"];
1925--3339[label="0.0526316;2pkt 2fpkt"];
1925--3418[label="0.0263158;1pkt 1fpkt"];
1925--3441[label="0.0526316;2pkt 2fpkt"];
1925--3466[label="0.166667;1pkt 1fpkt"];
1925--3512[label="0.105263;4pkt 4fpkt"];
1925--3996[label="0.0263158;1pkt 1fpkt"];
1925--4336[label="0.0263158;1pkt 1fpkt"];
1925--4539[label="0.315789;12pkt 12fpkt"];
1925--4547[label="0.0526316;2pkt 2fpkt"];
1925--4595[label="0.0263158;1pkt 1fpkt"];
1925--4619[label="0.166667;1pkt 1fpkt"];
1925--5081[label="0.0263158;1pkt 1fpkt"];
1925--5172[label="0.315789;12pkt 12fpkt"];
1976--2103[label="0.865854;71pkt 71fpkt"];
1976--2268[label="0.0322581;2pkt 2fpkt"];
1976--2788[label="0.0178571;1pkt 1fpkt"];
1976--2811[label="0.109756;9pkt 9fpkt"];
1976--3433[label="0.0392157;2pkt 2fpkt"];
1976--3441[label="0.0243902;2pkt 2fpkt"];
1976--3471[label="0.0208333;1pkt 1fpkt"];
1976--3535[label="0.0952381;2pkt 2fpkt"];
1976--4604[label="0.0392157;2pkt 2fpkt"];
1976--4622[label="0.0208333;1pkt 1fpkt"];
1976--5209[label="0.0208333;1pkt 1fpkt"];
2014--2103[label="0.0657895;5pkt 5fpkt"];
2014--2169[label="0.25;1pkt 1fpkt"];
2014--2793[label="0.016129;1pkt 1fpkt"];
2014--3125[label="1;1pkt 1fpkt"];
2014--3237[label="0.0526316;4pkt 4fpkt"];
2014--3269[label="0.434211;33pkt 33fpkt"];
2014--3923[label="0.25;1pkt 1fpkt"];
2014--4272[label="0.016129;1pkt 1fpkt"];
2014--4436[label="1;1pkt 1fpkt"];
2014--4508[label="0.434211;33pkt 33fpkt"];
2014--4880[label="0.25;1pkt 1fpkt"];
2014--5056[label="0.016129;1pkt 1fpkt"];
2014--5119[label="1;1pkt 1fpkt"];
2297--4001[label="1;7pkt 7fpkt"];
4436--5119[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
640[label="218.80.112.168;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.80.112.168:8881, 149.207.217.197:3890}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8881: (50%)&lt;BR/&gt; 3890: (50%)&gt;];
}
640--1644[label="1;1pkt 1fpkt"];
640--1748[label="1;1pkt 1fpkt"];
640--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="3890" src_ip="218.80.112.168" src_port="8881"/>
    </slice>
    <from sec="1071205232" usec="0"/>
    <to sec="1071205986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
648[label="131.233.146.145;s;219pkt 219fpkt", shape=diamond, color=yellow];
1437[label="57.178.200.116;d;203pkt 203fpkt", shape=diamond, color=yellow];
1752[label="131.233.146.145;s;143pkt 143fpkt", shape=hexagon, color=black];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.146.145:*, 57.178.200.116:*}[92.6941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (1.50442%)&lt;BR/&gt; 18616: (0.353982%)&lt;BR/&gt; 53350: (0.265487%)&lt;BR/&gt; 53349: (0.265487%)&lt;BR/&gt; 53348: (0.265487%)&gt;];
}
648--1437[label="1;203pkt 203fpkt"];
648--1752[label="1;143pkt 143fpkt"];
1437--1752[label="0.902098;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_ip="57.178.200.116" src_ip="131.233.146.145"/>
    </slice>
    <from sec="1071205720" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
841[label="57.206.70.120;s;1pkt 1fpkt", shape=diamond, color=yellow];
1766[label="57.206.70.120;s;1pkt 1fpkt", shape=hexagon, color=black];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.206.70.120:59192, 145.166.12.161:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59192: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
841--1766[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.12.161" dst_port="80" src_ip="57.206.70.120" src_port="59192"/>
    </slice>
    <from sec="1071205429" usec="0"/>
    <to sec="1071205464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
846[label="200.180.4.46;s;146pkt 146fpkt", shape=diamond, color=yellow];
1769[label="200.180.4.46;s;56pkt 56fpkt", shape=hexagon, color=black];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.180.4.46:25, *:*}[46.5753%]&lt;BR/&gt;{200.180.4.46:4394, *:53}[34.2466%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (23.5149%)&lt;BR/&gt; 53: (21.5347%)&lt;BR/&gt; 4394: (15.8416%)&lt;BR/&gt; 0: (5.44554%)&lt;BR/&gt; 80: (2.47525%)&gt;];
}
846--1769[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter src_ip="200.180.4.46" src_port="25"/>
      <filter dst_port="53" src_ip="200.180.4.46" src_port="4394"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_240{
style=filled;
color=gray75;
1468[label="216.248.171.90;s;203pkt 203fpkt", shape=diamond, color=yellow];
stat240[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.248.171.90:80, 166.55.113.203:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2234: (0.246305%)&lt;BR/&gt; 2233: (0.246305%)&lt;BR/&gt; 2232: (0.246305%)&lt;BR/&gt; 2231: (0.246305%)&gt;];
}
1468--1577[label="1;203pkt 203fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.113.203" src_ip="216.248.171.90" src_port="80"/>
    </slice>
    <from sec="1071205889" usec="0"/>
    <to sec="1071206011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
688[label="145.108.140.67;s;186pkt 186fpkt", shape=diamond, color=yellow];
1775[label="145.108.140.67;s;186pkt 186fpkt", shape=hexagon, color=black];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.108.140.67:3315, *:53}[68.8172%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (45.6989%)&lt;BR/&gt; 3315: (34.4086%)&lt;BR/&gt; 0: (5.37634%)&lt;BR/&gt; 25: (3.49462%)&lt;BR/&gt; 9253: (0.806452%)&gt;];
}
688--1775[label="1;186pkt 186fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="145.108.140.67" src_port="3315"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
395[label="149.207.92.225;d;3pkt 3fpkt", shape=diamond, color=yellow];
396[label="197.80.120.102;s;3pkt 3fpkt", shape=diamond, color=yellow];
1777[label="197.80.120.102;s;3pkt 3fpkt", shape=hexagon, color=black];
2918[label="197.80.120.102;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.80.120.102:7999, 149.207.92.225:1827}[33.3333%]&lt;BR/&gt;{197.80.120.102:7999, 149.207.92.225:1855}[33.3333%]&lt;BR/&gt;{197.80.120.102:7999, 149.207.92.225:1896}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7999: (50%)&lt;BR/&gt; 1896: (16.6667%)&lt;BR/&gt; 1855: (16.6667%)&lt;BR/&gt; 1827: (16.6667%)&gt;];
}
395--396[label="1;3pkt 3fpkt"];
395--1777[label="1;3pkt 3fpkt"];
395--2918[label="1;3pkt 3fpkt"];
396--1777[label="1;3pkt 3fpkt"];
396--2918[label="1;3pkt 3fpkt"];
1777--2918[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.92.225" dst_port="1896" src_ip="197.80.120.102" src_port="7999"/>
      <filter dst_ip="149.207.92.225" dst_port="1855" src_ip="197.80.120.102" src_port="7999"/>
      <filter dst_ip="149.207.92.225" dst_port="1827" src_ip="197.80.120.102" src_port="7999"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
402[label="149.206.96.250;d;1pkt 1fpkt", shape=diamond, color=yellow];
403[label="216.20.64.150;s;1pkt 1fpkt", shape=diamond, color=yellow];
1779[label="216.20.64.150;s;1pkt 1fpkt", shape=hexagon, color=black];
1842[label="149.206.96.250;d;1pkt 1fpkt", shape=hexagon, color=black];
3223[label="216.20.64.150;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.20.64.150:9004, 149.206.96.250:49184}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49184: (50%)&lt;BR/&gt; 9004: (50%)&gt;];
}
402--403[label="1;1pkt 1fpkt"];
402--1779[label="1;1pkt 1fpkt"];
402--1842[label="1;1pkt 1fpkt"];
402--3223[label="1;1pkt 1fpkt"];
403--1779[label="1;1pkt 1fpkt"];
403--1842[label="1;1pkt 1fpkt"];
403--3223[label="1;1pkt 1fpkt"];
1779--1842[label="1;1pkt 1fpkt"];
1779--3223[label="1;1pkt 1fpkt"];
1842--3223[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.96.250" dst_port="49184" src_ip="216.20.64.150" src_port="9004"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
405[label="219.66.171.108;s;2pkt 2fpkt", shape=diamond, color=yellow];
1781[label="219.66.171.108;s;2pkt 2fpkt", shape=hexagon, color=black];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.66.171.108:8881, 149.207.217.197:1895}[50%]&lt;BR/&gt;{219.66.171.108:8882, 149.207.217.197:1853}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8882: (25%)&lt;BR/&gt; 8881: (25%)&lt;BR/&gt; 1895: (25%)&lt;BR/&gt; 1853: (25%)&gt;];
}
405--1644[label="1;2pkt 2fpkt"];
405--1781[label="1;2pkt 2fpkt"];
405--2061[label="1;2pkt 2fpkt"];
1781--2061[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="1853" src_ip="219.66.171.108" src_port="8882"/>
      <filter dst_ip="149.207.217.197" dst_port="1895" src_ip="219.66.171.108" src_port="8881"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
705[label="204.196.59.92;s;8pkt 8fpkt", shape=diamond, color=yellow];
1782[label="204.196.59.92;s;6pkt 6fpkt", shape=hexagon, color=black];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.196.59.92:80, 201.118.239.88:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 23181: (7.14286%)&lt;BR/&gt; 22932: (7.14286%)&lt;BR/&gt; 22931: (7.14286%)&lt;BR/&gt; 22760: (7.14286%)&gt;];
}
705--1782[label="1;6pkt 6fpkt"];
705--2103[label="0.375;3pkt 3fpkt"];
1782--2103[label="0.5;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="201.118.239.88" src_ip="204.196.59.92" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
721[label="131.233.144.162;s;290pkt 290fpkt", shape=diamond, color=yellow];
1789[label="131.233.144.162;s;290pkt 290fpkt", shape=hexagon, color=black];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.144.162:*, *:25}[98.9655%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.4828%)&lt;BR/&gt; 113: (0.517241%)&lt;BR/&gt; 64604: (0.172414%)&lt;BR/&gt; 52067: (0.172414%)&lt;BR/&gt; 35920: (0.172414%)&gt;];
}
721--1789[label="1;290pkt 290fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="131.233.144.162"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
874[label="219.91.104.22;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.91.104.22:8881, 149.207.217.197:3554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8881: (50%)&lt;BR/&gt; 3554: (50%)&gt;];
}
874--1644[label="1;1pkt 1fpkt"];
874--1793[label="1;1pkt 1fpkt"];
874--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="3554" src_ip="219.91.104.22" src_port="8881"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
483[label="59.99.217.12;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.99.217.12:80, 149.206.202.107:1610}[50%]&lt;BR/&gt;{59.99.217.12:80, 149.206.202.107:1611}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1611: (25%)&lt;BR/&gt; 1610: (25%)&gt;];
}
483--1658[label="1;2pkt 2fpkt"];
483--2074[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.202.107" dst_port="1611" src_ip="59.99.217.12" src_port="80"/>
      <filter dst_ip="149.206.202.107" dst_port="1610" src_ip="59.99.217.12" src_port="80"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071205293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
891[label="101.36.24.218;s;1pkt 1fpkt", shape=diamond, color=yellow];
1798[label="101.36.24.218;s;1pkt 1fpkt", shape=hexagon, color=black];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.36.24.218:6000, 149.207.217.197:3885}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6000: (50%)&lt;BR/&gt; 3885: (50%)&gt;];
}
891--1644[label="1;1pkt 1fpkt"];
891--1798[label="1;1pkt 1fpkt"];
891--2061[label="1;1pkt 1fpkt"];
1798--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="3885" src_ip="101.36.24.218" src_port="6000"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
431[label="216.16.178.71;s;114pkt 114fpkt", shape=diamond, color=yellow];
3720[label="201.170.137.223;26pkt 26fpkt", shape=pentagon, color=darkviolet];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.16.178.71:80, 160.188.107.6:*}[40%]&lt;BR/&gt;{216.16.178.71:80, 160.188.107.7:*}[33.5714%]&lt;BR/&gt;{*:80, 160.188.106.27:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2475: (0.714286%)&lt;BR/&gt; 57584: (0.357143%)&lt;BR/&gt; 57218: (0.357143%)&lt;BR/&gt; 57056: (0.357143%)&gt;];
}
431--1937[label="0.412281;47pkt 47fpkt"];
431--2103[label="0.0263158;3pkt 3fpkt"];
431--2701[label="1;114pkt 114fpkt"];
431--4223[label="1;114pkt 114fpkt"];
431--5033[label="1;114pkt 114fpkt"];
3720--4761[label="1;26pkt 26fpkt"];
3720--5286[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.106.27" src_port="80"/>
      <filter dst_ip="160.188.107.6" src_ip="216.16.178.71" src_port="80"/>
      <filter dst_ip="160.188.107.7" src_ip="216.16.178.71" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_253{
style=filled;
color=gray75;
608[label="218.94.128.118;s;1pkt 1fpkt", shape=diamond, color=yellow];
1802[label="218.94.128.118;s;1pkt 1fpkt", shape=hexagon, color=black];
stat253[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.94.128.118:8882, 149.207.217.197:2279}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8882: (50%)&lt;BR/&gt; 2279: (50%)&gt;];
}
608--1644[label="1;1pkt 1fpkt"];
608--1802[label="1;1pkt 1fpkt"];
608--2061[label="1;1pkt 1fpkt"];
1802--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="2279" src_ip="218.94.128.118" src_port="8882"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
436[label="216.20.64.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
784[label="149.207.52.95;d;17pkt 17fpkt", shape=diamond, color=yellow];
1610[label="197.120.102.95;s;3pkt 3fpkt", shape=diamond, color=yellow];
1804[label="216.16.186.171;s;164pkt 164fpkt", shape=hexagon, color=black];
1806[label="149.207.51.27;d;108pkt 108fpkt", shape=hexagon, color=black];
2051[label="197.120.102.95;s;3pkt 3fpkt", shape=hexagon, color=black];
3364[label="216.16.186.171;207pkt 207fpkt", shape=pentagon, color=darkviolet];
3669[label="216.20.64.217;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.16.186.171:80, *:*}[63.8889%]&lt;BR/&gt;{216.16.186.167:80, 149.207.51.27:*}[23.4568%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7103%)&lt;BR/&gt; 554: (0.595238%)&lt;BR/&gt; 57499: (0.297619%)&lt;BR/&gt; 57434: (0.297619%)&lt;BR/&gt; 57244: (0.297619%)&gt;];
}
436--1682[label="1;1pkt 1fpkt"];
436--3669[label="1;1pkt 1fpkt"];
436--4730[label="1;1pkt 1fpkt"];
436--5269[label="1;1pkt 1fpkt"];
784--1610[label="1;3pkt 3fpkt"];
784--1804[label="0.0588235;1pkt 1fpkt"];
784--2051[label="1;3pkt 3fpkt"];
784--2103[label="0.0588235;1pkt 1fpkt"];
784--3364[label="0.0588235;1pkt 1fpkt"];
1610--2051[label="1;3pkt 3fpkt"];
1804--1806[label="0.0462963;5pkt 5fpkt"];
1804--1986[label="0.0182927;3pkt 3fpkt"];
1804--2103[label="0.103659;17pkt 17fpkt"];
1804--3364[label="1;164pkt 164fpkt"];
1806--2103[label="0.0925926;10pkt 10fpkt"];
1806--2303[label="0.0294118;1pkt 1fpkt"];
1806--3337[label="0.703704;76pkt 76fpkt"];
1806--3364[label="0.0740741;8pkt 8fpkt"];
1806--3749[label="0.0104167;1pkt 1fpkt"];
1806--3890[label="0.0428571;3pkt 3fpkt"];
1806--4003[label="0.0285714;1pkt 1fpkt"];
1806--4780[label="0.0104167;1pkt 1fpkt"];
1806--5295[label="0.0104167;1pkt 1fpkt"];
3669--4730[label="1;1pkt 1fpkt"];
3669--5269[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="216.16.186.171" src_port="80"/>
      <filter dst_ip="149.207.51.27" src_ip="216.16.186.167" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
772[label="101.35.193.7;s;1pkt 1fpkt", shape=diamond, color=yellow];
1807[label="101.35.193.7;s;1pkt 1fpkt", shape=hexagon, color=black];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.35.193.7:8882, 149.207.217.197:2211}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8882: (50%)&lt;BR/&gt; 2211: (50%)&gt;];
}
772--1644[label="1;1pkt 1fpkt"];
772--1807[label="1;1pkt 1fpkt"];
772--2061[label="1;1pkt 1fpkt"];
772--3945[label="1;1pkt 1fpkt"];
1807--2061[label="1;1pkt 1fpkt"];
1807--3945[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="2211" src_ip="101.35.193.7" src_port="8882"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
628[label="145.166.6.46;d;281pkt 281fpkt", shape=diamond, color=yellow];
629[label="208.110.146.131;s;52pkt 52fpkt", shape=diamond, color=yellow];
1458[label="57.18.171.67;s;18pkt 18fpkt", shape=diamond, color=yellow];
1812[label="208.110.146.131;s;48pkt 48fpkt", shape=hexagon, color=black];
2050[label="57.18.171.67;s;18pkt 18fpkt", shape=hexagon, color=black];
2151[label="58.245.4.2;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2669[label="57.18.171.67;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3090[label="57.248.122.130;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3097[label="208.110.146.131;54pkt 54fpkt", shape=pentagon, color=darkviolet];
3576[label="57.248.122.203;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3910[label="58.245.4.2;2pkt 2fpkt", shape=invtriangle, color=brown];
4205[label="57.18.171.67;19pkt 19fpkt", shape=invtriangle, color=brown];
4419[label="57.248.122.130;16pkt 16fpkt", shape=invtriangle, color=brown];
4678[label="57.248.122.203;9pkt 9fpkt", shape=invtriangle, color=brown];
5242[label="57.248.122.203;9pkt 9fpkt", shape=invhouse, color=bisque];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 145.166.6.46:*}[99.654%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9126%)&lt;BR/&gt; 3455: (0.437063%)&lt;BR/&gt; 3454: (0.437063%)&lt;BR/&gt; 3404: (0.437063%)&lt;BR/&gt; 3403: (0.437063%)&gt;];
}
628--629[label="1;52pkt 52fpkt"];
628--1211[label="0.0263158;2pkt 2fpkt"];
628--1458[label="1;18pkt 18fpkt"];
628--1812[label="1;48pkt 48fpkt"];
628--2050[label="1;18pkt 18fpkt"];
628--2103[label="0.0106762;3pkt 3fpkt"];
628--2151[label="1;2pkt 2fpkt"];
628--2669[label="0.947368;18pkt 18fpkt"];
628--3090[label="0.625;10pkt 10fpkt"];
628--3097[label="1;54pkt 54fpkt"];
628--3409[label="0.0263158;2pkt 2fpkt"];
628--3576[label="0.888889;8pkt 8fpkt"];
628--3628[label="0.884615;46pkt 46fpkt"];
628--3821[label="0.0555556;1pkt 1fpkt"];
628--3910[label="1;2pkt 2fpkt"];
628--4205[label="0.947368;18pkt 18fpkt"];
628--4419[label="0.625;10pkt 10fpkt"];
628--4591[label="0.0263158;2pkt 2fpkt"];
628--4678[label="0.888889;8pkt 8fpkt"];
628--4707[label="0.884615;46pkt 46fpkt"];
628--4824[label="0.0555556;1pkt 1fpkt"];
628--5242[label="0.888889;8pkt 8fpkt"];
628--5257[label="0.884615;46pkt 46fpkt"];
628--5315[label="0.0555556;1pkt 1fpkt"];
629--1812[label="1;48pkt 48fpkt"];
629--2103[label="0.0384615;2pkt 2fpkt"];
629--3097[label="1;52pkt 52fpkt"];
1458--2050[label="1;18pkt 18fpkt"];
1458--2669[label="1;18pkt 18fpkt"];
1458--4205[label="1;18pkt 18fpkt"];
1812--3097[label="1;48pkt 48fpkt"];
2050--2669[label="1;18pkt 18fpkt"];
2050--4205[label="1;18pkt 18fpkt"];
2151--3910[label="1;2pkt 2fpkt"];
2669--4205[label="1;19pkt 19fpkt"];
3090--4419[label="1;16pkt 16fpkt"];
3576--4678[label="1;9pkt 9fpkt"];
3576--5242[label="1;9pkt 9fpkt"];
4678--5242[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.6.46" src_port="80"/>
    </slice>
    <from sec="1071205214" usec="0"/>
    <to sec="1071206049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
511[label="149.206.205.160;d;71pkt 71fpkt", shape=diamond, color=yellow];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.26.106.150:80, 149.206.205.160:*}[46.4789%]&lt;BR/&gt;{59.26.106.105:80, 149.206.205.160:*}[23.9437%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2958%)&lt;BR/&gt; 2751: (0.704225%)&lt;BR/&gt; 2750: (0.704225%)&lt;BR/&gt; 2749: (0.704225%)&lt;BR/&gt; 2748: (0.704225%)&gt;];
}
511--753[label="0.0704225;5pkt 5fpkt"];
511--1158[label="0.028169;2pkt 2fpkt"];
511--1484[label="0.0188679;1pkt 1fpkt"];
511--1729[label="0.028169;2pkt 2fpkt"];
511--1800[label="0.0704225;5pkt 5fpkt"];
511--2788[label="0.0178571;1pkt 1fpkt"];
511--2793[label="0.016129;1pkt 1fpkt"];
511--3237[label="0.028169;2pkt 2fpkt"];
511--3441[label="0.028169;2pkt 2fpkt"];
511--3471[label="0.0208333;1pkt 1fpkt"];
511--4272[label="0.016129;1pkt 1fpkt"];
511--4622[label="0.0208333;1pkt 1fpkt"];
511--5056[label="0.016129;1pkt 1fpkt"];
511--5209[label="0.0208333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.205.160" src_ip="59.26.106.150" src_port="80"/>
      <filter dst_ip="149.206.205.160" src_ip="59.26.106.105" src_port="80"/>
    </slice>
    <from sec="1071205247" usec="0"/>
    <to sec="1071205342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
955[label="201.120.118.101;d;760pkt 760fpkt", shape=diamond, color=yellow];
1829[label="201.120.118.101;d;760pkt 760fpkt", shape=hexagon, color=black];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 201.120.118.101:*}[65.2632%]&lt;BR/&gt;{*:0, 201.120.118.101:0}[34.7368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (34.7368%)&lt;BR/&gt; 80: (32.6316%)&lt;BR/&gt; 55192: (1.57895%)&lt;BR/&gt; 55184: (1.57895%)&lt;BR/&gt; 55114: (1.51316%)&gt;];
}
955--1829[label="1;760pkt 760fpkt"];
</description>
    <slice>
      <filter dst_ip="201.120.118.101" src_port="80"/>
      <filter dst_ip="201.120.118.101"/>
    </slice>
    <from sec="1071205672" usec="0"/>
    <to sec="1071205722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
961[label="149.206.205.148;d;30pkt 30fpkt", shape=diamond, color=yellow];
962[label="205.229.50.76;s;12pkt 12fpkt", shape=diamond, color=yellow];
1831[label="149.206.205.148;d;4pkt 4fpkt", shape=hexagon, color=black];
1832[label="205.229.50.76;s;2pkt 2fpkt", shape=hexagon, color=black];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.229.50.76:80, 149.206.205.148:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9167%)&lt;BR/&gt; 2784: (4.16667%)&lt;BR/&gt; 2783: (4.16667%)&lt;BR/&gt; 2821: (2.08333%)&lt;BR/&gt; 2819: (2.08333%)&gt;];
}
961--962[label="1;12pkt 12fpkt"];
961--1831[label="1;4pkt 4fpkt"];
961--1832[label="1;2pkt 2fpkt"];
961--2103[label="0.0666667;2pkt 2fpkt"];
962--1831[label="0.5;2pkt 2fpkt"];
962--1832[label="1;2pkt 2fpkt"];
962--2103[label="0.166667;2pkt 2fpkt"];
1831--1832[label="1;2pkt 2fpkt"];
1831--2103[label="0.5;2pkt 2fpkt"];
1832--2103[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.205.148" src_ip="205.229.50.76" src_port="80"/>
    </slice>
    <from sec="1071205528" usec="0"/>
    <to sec="1071206027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
854[label="59.0.56.206;s;11pkt 11fpkt", shape=diamond, color=yellow];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.0.56.206:11326, 200.180.6.64:*}[63.6364%]&lt;BR/&gt;{59.0.56.206:*, 200.180.6.64:20572}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11326: (31.8182%)&lt;BR/&gt; 20572: (18.1818%)&lt;BR/&gt; 58711: (4.54545%)&lt;BR/&gt; 58433: (4.54545%)&lt;BR/&gt; 57937: (4.54545%)&gt;];
}
854--1838[label="0.909091;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="200.180.6.64" src_ip="59.0.56.206" src_port="11326"/>
      <filter dst_ip="200.180.6.64" dst_port="20572" src_ip="59.0.56.206"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889707,1.5466,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
559[label="35.40.48.137;s;1pkt 1fpkt", shape=diamond, color=yellow];
1841[label="35.40.48.137;s;1pkt 1fpkt", shape=hexagon, color=black];
3138[label="35.40.48.137;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4442[label="35.40.48.137;1pkt 1fpkt", shape=invtriangle, color=brown];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.40.48.137:6881, 149.207.217.197:4533}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 4533: (50%)&gt;];
}
559--1644[label="1;1pkt 1fpkt"];
559--1841[label="1;1pkt 1fpkt"];
559--2061[label="1;1pkt 1fpkt"];
559--3138[label="1;1pkt 1fpkt"];
559--4442[label="1;1pkt 1fpkt"];
559--5123[label="1;1pkt 1fpkt"];
1841--2061[label="1;1pkt 1fpkt"];
1841--3138[label="1;1pkt 1fpkt"];
1841--4442[label="1;1pkt 1fpkt"];
1841--5123[label="1;1pkt 1fpkt"];
3138--4442[label="1;1pkt 1fpkt"];
3138--5123[label="1;1pkt 1fpkt"];
4442--5123[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="4533" src_ip="35.40.48.137" src_port="6881"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
569[label="149.207.96.17;d;41pkt 41fpkt", shape=diamond, color=yellow];
715[label="34.147.242.13;s;5pkt 5fpkt", shape=diamond, color=yellow];
1845[label="34.147.242.13;s;3pkt 3fpkt", shape=hexagon, color=black];
2249[label="34.147.242.13;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 149.207.96.17:2235}[53.6585%]&lt;BR/&gt;{*:2234, 149.207.96.17:*}[46.3415%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2234: (29.6296%)&lt;BR/&gt; 2235: (20.3704%)&lt;BR/&gt; 30492: (3.7037%)&lt;BR/&gt; 30491: (3.7037%)&lt;BR/&gt; 30484: (3.7037%)&gt;];
}
569--715[label="1;5pkt 5fpkt"];
569--1845[label="1;3pkt 3fpkt"];
569--2249[label="1;5pkt 5fpkt"];
715--1845[label="1;3pkt 3fpkt"];
715--2249[label="1;5pkt 5fpkt"];
1845--2249[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.96.17" src_port="2234"/>
      <filter dst_ip="149.207.96.17" dst_port="2235"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
716[label="218.73.210.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.73.210.1:6883, 149.207.217.197:3714}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6883: (50%)&lt;BR/&gt; 3714: (50%)&gt;];
}
716--1644[label="1;1pkt 1fpkt"];
716--1847[label="1;1pkt 1fpkt"];
716--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="3714" src_ip="218.73.210.1" src_port="6883"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
989[label="196.11.28.212;s;78pkt 78fpkt", shape=diamond, color=yellow];
1848[label="196.11.28.212;s;71pkt 71fpkt", shape=hexagon, color=black];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.11.28.212:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (58.0537%)&lt;BR/&gt; 32768: (4.36242%)&lt;BR/&gt; 32772: (3.3557%)&lt;BR/&gt; 32769: (2.68456%)&lt;BR/&gt; 32780: (2.01342%)&gt;];
}
989--1848[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter src_ip="196.11.28.212" src_port="53"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
473[label="59.26.106.105;s;155pkt 155fpkt", shape=diamond, color=yellow];
771[label="149.206.240.204;d;384pkt 384fpkt", shape=diamond, color=yellow];
1072[label="149.206.203.115;d;57pkt 57fpkt", shape=diamond, color=yellow];
1254[label="166.55.138.37;d;108pkt 108fpkt", shape=diamond, color=yellow];
1598[label="58.252.86.141;s;12pkt 12fpkt", shape=diamond, color=yellow];
1853[label="149.206.240.204;d;153pkt 153fpkt", shape=hexagon, color=black];
2152[label="205.1.42.2;46pkt 46fpkt", shape=pentagon, color=darkviolet];
2237[label="205.1.42.12;50pkt 50fpkt", shape=pentagon, color=darkviolet];
2397[label="205.1.42.33;68pkt 68fpkt", shape=pentagon, color=darkviolet];
2490[label="205.1.42.44;90pkt 90fpkt", shape=pentagon, color=darkviolet];
3159[label="58.252.86.141;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3911[label="205.1.42.2;45pkt 45fpkt", shape=invtriangle, color=brown];
3964[label="205.1.42.12;49pkt 49fpkt", shape=invtriangle, color=brown];
4454[label="58.252.86.141;12pkt 12fpkt", shape=invtriangle, color=brown];
4870[label="205.1.42.2;45pkt 45fpkt", shape=invhouse, color=bisque];
5130[label="58.252.86.141;12pkt 12fpkt", shape=invhouse, color=bisque];
5222[label="57.83.167.194;44pkt 44fpkt", shape=invhouse, color=bisque];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 149.206.240.204:*}[50.7042%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7019%)&lt;BR/&gt; 3310: (0.223547%)&lt;BR/&gt; 3309: (0.223547%)&lt;BR/&gt; 3308: (0.223547%)&lt;BR/&gt; 3304: (0.223547%)&gt;];
}
473--511[label="0.239437;17pkt 17fpkt"];
473--514[label="0.127273;7pkt 7fpkt"];
473--618[label="0.466667;21pkt 21fpkt"];
473--771[label="0.0451613;7pkt 7fpkt"];
473--939[label="0.277778;15pkt 15fpkt"];
473--1072[label="0.0877193;5pkt 5fpkt"];
473--1254[label="0.0277778;3pkt 3fpkt"];
473--1645[label="0.0967742;15pkt 15fpkt"];
473--1751[label="0.139241;11pkt 11fpkt"];
473--2024[label="0.083871;13pkt 13fpkt"];
473--2103[label="0.0709677;11pkt 11fpkt"];
771--1009[label="0.021978;2pkt 2fpkt"];
771--1281[label="0.00684932;1pkt 1fpkt"];
771--1598[label="1;12pkt 12fpkt"];
771--1853[label="1;153pkt 153fpkt"];
771--2103[label="0.0494792;19pkt 19fpkt"];
771--2152[label="0.913043;42pkt 42fpkt"];
771--2237[label="0.9;45pkt 45fpkt"];
771--2397[label="0.588235;40pkt 40fpkt"];
771--2490[label="0.877778;79pkt 79fpkt"];
771--2508[label="0.0185185;3pkt 3fpkt"];
771--2556[label="0.742857;26pkt 26fpkt"];
771--2811[label="0.00520833;2pkt 2fpkt"];
771--3159[label="0.916667;11pkt 11fpkt"];
771--3468[label="0.3;9pkt 9fpkt"];
771--3613[label="0.00260417;1pkt 1fpkt"];
771--3664[label="0.025;2pkt 2fpkt"];
771--3722[label="0.0416667;16pkt 16fpkt"];
771--3911[label="0.933333;42pkt 42fpkt"];
771--3964[label="0.918367;45pkt 45fpkt"];
771--4454[label="0.916667;11pkt 11fpkt"];
771--4698[label="0.00260417;1pkt 1fpkt"];
771--4870[label="0.933333;42pkt 42fpkt"];
771--5130[label="0.916667;11pkt 11fpkt"];
1072--1158[label="0.0175439;1pkt 1fpkt"];
1072--1369[label="0.0175439;1pkt 1fpkt"];
1072--1564[label="0.0350877;2pkt 2fpkt"];
1072--1576[label="0.0175439;1pkt 1fpkt"];
1072--1800[label="0.0350877;2pkt 2fpkt"];
1072--2291[label="0.0350877;2pkt 2fpkt"];
1072--2409[label="0.0175439;1pkt 1fpkt"];
1072--3441[label="0.0175439;1pkt 1fpkt"];
1254--1529[label="0.0172414;1pkt 1fpkt"];
1254--1880[label="0.0952381;4pkt 4fpkt"];
1254--1910[label="0.0769231;7pkt 7fpkt"];
1254--2103[label="0.0833333;9pkt 9fpkt"];
1254--2146[label="0.0648148;7pkt 7fpkt"];
1254--2268[label="0.016129;1pkt 1fpkt"];
1254--2389[label="0.0512821;2pkt 2fpkt"];
1254--2496[label="0.0120482;1pkt 1fpkt"];
1254--2659[label="0.25;4pkt 4fpkt"];
1254--2793[label="0.016129;1pkt 1fpkt"];
1254--2811[label="0.0277778;3pkt 3fpkt"];
1254--3237[label="0.00925926;1pkt 1fpkt"];
1254--3414[label="0.0133333;1pkt 1fpkt"];
1254--3461[label="0.0909091;1pkt 1fpkt"];
1254--3468[label="0.0333333;1pkt 1fpkt"];
1254--3479[label="0.157407;17pkt 17fpkt"];
1254--3516[label="0.0227273;1pkt 1fpkt"];
1254--3722[label="0.00925926;1pkt 1fpkt"];
1254--3907[label="0.0648148;7pkt 7fpkt"];
1254--4051[label="0.0526316;2pkt 2fpkt"];
1254--4272[label="0.016129;1pkt 1fpkt"];
1254--4646[label="0.0227273;1pkt 1fpkt"];
1254--4947[label="0.0512821;2pkt 2fpkt"];
1254--5056[label="0.016129;1pkt 1fpkt"];
1254--5222[label="0.0227273;1pkt 1fpkt"];
1598--1853[label="0.583333;7pkt 7fpkt"];
1598--2103[label="0.583333;7pkt 7fpkt"];
1598--3159[label="0.916667;11pkt 11fpkt"];
1598--4454[label="0.916667;11pkt 11fpkt"];
1598--5130[label="0.916667;11pkt 11fpkt"];
1853--2103[label="0.124183;19pkt 19fpkt"];
1853--2152[label="0.521739;24pkt 24fpkt"];
1853--2237[label="0.52;26pkt 26fpkt"];
1853--2397[label="0.588235;40pkt 40fpkt"];
1853--3159[label="0.5;6pkt 6fpkt"];
1853--3468[label="0.3;9pkt 9fpkt"];
1853--3722[label="0.0718954;11pkt 11fpkt"];
1853--3911[label="0.533333;24pkt 24fpkt"];
1853--3964[label="0.530612;26pkt 26fpkt"];
1853--4454[label="0.5;6pkt 6fpkt"];
1853--4870[label="0.533333;24pkt 24fpkt"];
1853--5130[label="0.5;6pkt 6fpkt"];
2152--3911[label="1;45pkt 45fpkt"];
2152--4870[label="1;45pkt 45fpkt"];
2237--3964[label="1;49pkt 49fpkt"];
3159--4454[label="1;12pkt 12fpkt"];
3159--5130[label="1;12pkt 12fpkt"];
3911--4870[label="1;45pkt 45fpkt"];
4454--5130[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.240.204" src_port="80"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
767[label="200.172.35.226;s;94pkt 94fpkt", shape=diamond, color=yellow];
1733[label="200.172.35.226;s;64pkt 64fpkt", shape=hexagon, color=black];
1854[label="149.206.55.164;d;40pkt 40fpkt", shape=hexagon, color=black];
3745[label="200.172.35.226;111pkt 111fpkt", shape=pentagon, color=darkviolet];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.172.35.226:80, 201.118.239.88:*}[71.4286%]&lt;BR/&gt;{*:80, 149.206.55.164:*}[23.1293%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0291%)&lt;BR/&gt; 1863: (0.809061%)&lt;BR/&gt; 3483: (0.647249%)&lt;BR/&gt; 3482: (0.647249%)&lt;BR/&gt; 3481: (0.647249%)&gt;];
}
767--1165[label="0.0666667;2pkt 2fpkt"];
767--1733[label="1;64pkt 64fpkt"];
767--1854[label="0.125;5pkt 5fpkt"];
767--2103[label="0.0744681;7pkt 7fpkt"];
767--3745[label="0.989362;93pkt 93fpkt"];
1733--1854[label="0.125;5pkt 5fpkt"];
1733--2103[label="0.109375;7pkt 7fpkt"];
1733--3745[label="0.984375;63pkt 63fpkt"];
1854--1974[label="0.580645;18pkt 18fpkt"];
1854--2088[label="0.580645;18pkt 18fpkt"];
1854--2103[label="0.1;4pkt 4fpkt"];
1854--2224[label="0.2;1pkt 1fpkt"];
1854--2553[label="0.1;4pkt 4fpkt"];
1854--2818[label="0.285714;2pkt 2fpkt"];
1854--2914[label="0.166667;1pkt 1fpkt"];
1854--3117[label="0.1;4pkt 4fpkt"];
1854--3697[label="0.5;1pkt 1fpkt"];
1854--3745[label="0.125;5pkt 5fpkt"];
1854--4147[label="0.1;4pkt 4fpkt"];
1854--4283[label="0.285714;2pkt 2fpkt"];
1854--4335[label="0.166667;1pkt 1fpkt"];
1854--4431[label="0.1;4pkt 4fpkt"];
1854--5117[label="0.1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.55.164" src_port="80"/>
      <filter dst_ip="201.118.239.88" src_ip="200.172.35.226" src_port="80"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
1017[label="218.89.182.150;s;1pkt 1fpkt", shape=diamond, color=yellow];
1856[label="218.89.182.150;s;1pkt 1fpkt", shape=hexagon, color=black];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.89.182.150:6894, 149.207.217.197:3184}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6894: (50%)&lt;BR/&gt; 3184: (50%)&gt;];
}
1017--1644[label="1;1pkt 1fpkt"];
1017--1856[label="1;1pkt 1fpkt"];
1017--2061[label="1;1pkt 1fpkt"];
1856--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="3184" src_ip="218.89.182.150" src_port="6894"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
654[label="149.206.254.29;d;4pkt 4fpkt", shape=diamond, color=yellow];
655[label="213.59.23.51;s;4pkt 4fpkt", shape=diamond, color=yellow];
1863[label="213.59.23.51;s;4pkt 4fpkt", shape=hexagon, color=black];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.59.23.51:80, 149.206.254.29:1054}[25%]&lt;BR/&gt;{213.59.23.51:80, 149.206.254.29:1055}[25%]&lt;BR/&gt;{213.59.23.51:80, 149.206.254.29:1056}[25%]&lt;BR/&gt;{213.59.23.51:80, 149.206.254.29:1057}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1057: (12.5%)&lt;BR/&gt; 1056: (12.5%)&lt;BR/&gt; 1055: (12.5%)&lt;BR/&gt; 1054: (12.5%)&gt;];
}
654--655[label="1;4pkt 4fpkt"];
654--1863[label="1;4pkt 4fpkt"];
654--2103[label="0.5;2pkt 2fpkt"];
655--1863[label="1;4pkt 4fpkt"];
655--2103[label="0.5;2pkt 2fpkt"];
1863--2103[label="0.5;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.254.29" dst_port="1057" src_ip="213.59.23.51" src_port="80"/>
      <filter dst_ip="149.206.254.29" dst_port="1056" src_ip="213.59.23.51" src_port="80"/>
      <filter dst_ip="149.206.254.29" dst_port="1055" src_ip="213.59.23.51" src_port="80"/>
      <filter dst_ip="149.206.254.29" dst_port="1054" src_ip="213.59.23.51" src_port="80"/>
    </slice>
    <from sec="1071205294" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
674[label="192.108.225.104;s;70pkt 70fpkt", shape=diamond, color=yellow];
832[label="149.206.193.173;d;13pkt 13fpkt", shape=diamond, color=yellow];
1012[label="149.206.193.123;d;9pkt 9fpkt", shape=diamond, color=yellow];
1834[label="192.108.225.104;s;70pkt 70fpkt", shape=hexagon, color=black];
1866[label="149.206.193.173;d;13pkt 13fpkt", shape=hexagon, color=black];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.108.225.104:80, 145.166.58.98:*}[46.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4633: (1.14286%)&lt;BR/&gt; 4632: (1.14286%)&lt;BR/&gt; 4618: (1.14286%)&lt;BR/&gt; 4617: (1.14286%)&gt;];
}
674--832[label="0.307692;4pkt 4fpkt"];
674--1012[label="0.888889;8pkt 8fpkt"];
674--1671[label="0.171429;12pkt 12fpkt"];
674--1834[label="1;70pkt 70fpkt"];
674--1866[label="0.307692;4pkt 4fpkt"];
674--2103[label="0.0428571;3pkt 3fpkt"];
832--1834[label="0.307692;4pkt 4fpkt"];
832--1866[label="1;13pkt 13fpkt"];
832--2103[label="0.230769;3pkt 3fpkt"];
832--2915[label="0.0769231;1pkt 1fpkt"];
832--3835[label="0.461538;6pkt 6fpkt"];
832--4336[label="0.0769231;1pkt 1fpkt"];
832--4832[label="0.461538;6pkt 6fpkt"];
832--5081[label="0.0769231;1pkt 1fpkt"];
832--5318[label="0.461538;6pkt 6fpkt"];
1012--1834[label="0.888889;8pkt 8fpkt"];
1012--2103[label="0.111111;1pkt 1fpkt"];
1834--1866[label="0.307692;4pkt 4fpkt"];
1834--2103[label="0.0428571;3pkt 3fpkt"];
1866--2103[label="0.230769;3pkt 3fpkt"];
1866--2915[label="0.0769231;1pkt 1fpkt"];
1866--3835[label="0.461538;6pkt 6fpkt"];
1866--4336[label="0.0769231;1pkt 1fpkt"];
1866--4832[label="0.461538;6pkt 6fpkt"];
1866--5081[label="0.0769231;1pkt 1fpkt"];
1866--5318[label="0.461538;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.58.98" src_ip="192.108.225.104" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.825791,1.66178,020,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
1875[label="10.131.13.198;s;13866pkt 13866fpkt", shape=hexagon, color=black];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.131.13.198:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1875--3539[label="1;13866pkt 13866fpkt"];
</description>
    <slice>
      <filter src_ip="10.131.13.198"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_273{
style=filled;
color=gray75;
394[label="145.166.50.13;d;1610pkt 1610fpkt", shape=diamond, color=yellow];
1531[label="57.75.127.39;s;455pkt 455fpkt", shape=diamond, color=yellow];
1572[label="58.10.76.92;s;49pkt 49fpkt", shape=diamond, color=yellow];
2460[label="57.75.127.39;502pkt 502fpkt", shape=pentagon, color=darkviolet];
2467[label="58.33.41.40;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2538[label="57.206.89.50;69pkt 69fpkt", shape=pentagon, color=darkviolet];
2593[label="205.196.9.57;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2698[label="78.5.114.71;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2976[label="198.44.1.112;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3201[label="205.224.4.148;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3323[label="205.141.224.165;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3469[label="57.86.65.186;204pkt 204fpkt", shape=pentagon, color=darkviolet];
3633[label="205.86.141.212;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3802[label="208.201.106.236;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4090[label="58.33.41.40;17pkt 17fpkt", shape=invtriangle, color=brown];
4222[label="78.5.114.71;5pkt 5fpkt", shape=invtriangle, color=brown];
4364[label="198.44.1.112;8pkt 8fpkt", shape=invtriangle, color=brown];
4542[label="205.141.224.165;17pkt 17fpkt", shape=invtriangle, color=brown];
4620[label="57.86.65.186;204pkt 204fpkt", shape=invtriangle, color=brown];
stat273[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.166.50.13:53}[42.446%]&lt;BR/&gt;{*:53, 145.166.50.13:32812}[24.8836%]&lt;BR/&gt;{57.75.127.39:*, *:53}[21.1172%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.585%)&lt;BR/&gt; 32812: (9.17615%)&lt;BR/&gt; 0: (1.16815%)&lt;BR/&gt; 80: (0.783892%)&lt;BR/&gt; 1024: (0.476483%)&gt;];
}
394--616[label="0.0300752;4pkt 4fpkt"];
394--677[label="0.00854701;1pkt 1fpkt"];
394--974[label="0.00970874;1pkt 1fpkt"];
394--1001[label="0.0444444;6pkt 6fpkt"];
394--1030[label="0.0307692;2pkt 2fpkt"];
394--1120[label="0.0119048;1pkt 1fpkt"];
394--1263[label="0.00925926;1pkt 1fpkt"];
394--1283[label="0.011236;1pkt 1fpkt"];
394--1285[label="0.0212766;1pkt 1fpkt"];
394--1464[label="0.00515464;1pkt 1fpkt"];
394--1524[label="0.0188679;1pkt 1fpkt"];
394--1531[label="0.349451;159pkt 159fpkt"];
394--1567[label="0.0625;1pkt 1fpkt"];
394--1568[label="0.0625;1pkt 1fpkt"];
394--1572[label="0.183673;9pkt 9fpkt"];
394--2013[label="0.011236;1pkt 1fpkt"];
394--2039[label="0.0625;1pkt 1fpkt"];
394--2104[label="0.00151976;1pkt 1fpkt"];
394--2142[label="0.025;1pkt 1fpkt"];
394--2197[label="0.00854701;1pkt 1fpkt"];
394--2233[label="0.0208333;1pkt 1fpkt"];
394--2267[label="0.09375;3pkt 3fpkt"];
394--2294[label="0.0149254;1pkt 1fpkt"];
394--2298[label="0.0416667;1pkt 1fpkt"];
394--2299[label="0.0384615;6pkt 6fpkt"];
394--2362[label="0.04;1pkt 1fpkt"];
394--2460[label="0.316733;159pkt 159fpkt"];
394--2467[label="0.0555556;1pkt 1fpkt"];
394--2538[label="0.057971;4pkt 4fpkt"];
394--2593[label="0.166667;1pkt 1fpkt"];
394--2668[label="0.0263158;1pkt 1fpkt"];
394--2698[label="0.2;1pkt 1fpkt"];
394--2705[label="0.0185185;1pkt 1fpkt"];
394--2714[label="0.0142857;1pkt 1fpkt"];
394--2765[label="0.025;1pkt 1fpkt"];
394--2808[label="0.0217391;1pkt 1fpkt"];
394--2967[label="0.0454545;1pkt 1fpkt"];
394--2976[label="0.125;1pkt 1fpkt"];
394--3015[label="0.02;1pkt 1fpkt"];
394--3201[label="0.0526316;1pkt 1fpkt"];
394--3224[label="0.05;1pkt 1fpkt"];
394--3282[label="0.0384615;1pkt 1fpkt"];
394--3323[label="0.0588235;1pkt 1fpkt"];
394--3469[label="0.0196078;4pkt 4fpkt"];
394--3533[label="0.0555556;1pkt 1fpkt"];
394--3633[label="0.0769231;1pkt 1fpkt"];
394--3802[label="0.037037;1pkt 1fpkt"];
394--3858[label="0.0172414;1pkt 1fpkt"];
394--3943[label="0.00847458;1pkt 1fpkt"];
394--3962[label="0.0208333;1pkt 1fpkt"];
394--3982[label="0.0967742;3pkt 3fpkt"];
394--3998[label="0.0147059;1pkt 1fpkt"];
394--4002[label="0.0382166;6pkt 6fpkt"];
394--4037[label="0.04;1pkt 1fpkt"];
394--4090[label="0.0588235;1pkt 1fpkt"];
394--4222[label="0.2;1pkt 1fpkt"];
394--4226[label="0.0185185;1pkt 1fpkt"];
394--4280[label="0.0217391;1pkt 1fpkt"];
394--4358[label="0.0454545;1pkt 1fpkt"];
394--4364[label="0.125;1pkt 1fpkt"];
394--4381[label="0.02;1pkt 1fpkt"];
394--4479[label="0.05;1pkt 1fpkt"];
394--4518[label="0.0384615;1pkt 1fpkt"];
394--4542[label="0.0588235;1pkt 1fpkt"];
394--4620[label="0.0196078;4pkt 4fpkt"];
394--4654[label="0.0555556;1pkt 1fpkt"];
394--4847[label="0.0172414;1pkt 1fpkt"];
394--4888[label="0.00847458;1pkt 1fpkt"];
394--4902[label="0.0208333;1pkt 1fpkt"];
394--4919[label="0.0149254;1pkt 1fpkt"];
394--4920[label="0.0382166;6pkt 6fpkt"];
394--4939[label="0.04;1pkt 1fpkt"];
394--5097[label="0.02;1pkt 1fpkt"];
394--5161[label="0.0384615;1pkt 1fpkt"];
394--5228[label="0.0555556;1pkt 1fpkt"];
394--5328[label="0.0172414;1pkt 1fpkt"];
1531--2460[label="1;455pkt 455fpkt"];
1572--1898[label="0.0204082;1pkt 1fpkt"];
1572--2107[label="0.0408163;2pkt 2fpkt"];
1572--2110[label="0.0612245;3pkt 3fpkt"];
2467--4090[label="1;17pkt 17fpkt"];
2698--4222[label="1;5pkt 5fpkt"];
2976--4364[label="1;8pkt 8fpkt"];
3323--4542[label="1;17pkt 17fpkt"];
3469--4620[label="1;204pkt 204fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="57.75.127.39"/>
      <filter dst_ip="145.166.50.13" dst_port="53"/>
      <filter dst_ip="145.166.50.13" dst_port="32812" src_port="53"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
853[label="211.28.88.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
1884[label="211.28.88.37;s;1pkt 1fpkt", shape=hexagon, color=black];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.28.88.37:3024, 145.166.4.238:3259}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3259: (50%)&lt;BR/&gt; 3024: (50%)&gt;];
}
853--1884[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.4.238" dst_port="3259" src_ip="211.28.88.37" src_port="3024"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
385[label="149.206.45.106;d;1pkt 1fpkt", shape=diamond, color=yellow];
386[label="210.12.7.13;s;1pkt 1fpkt", shape=diamond, color=yellow];
1776[label="210.12.7.13;s;1pkt 1fpkt", shape=hexagon, color=black];
1886[label="149.206.45.106;d;1pkt 1fpkt", shape=hexagon, color=black];
2246[label="210.12.7.13;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3970[label="210.12.7.13;1pkt 1fpkt", shape=invtriangle, color=brown];
4905[label="210.12.7.13;1pkt 1fpkt", shape=invhouse, color=bisque];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.12.7.13:54203, 149.206.45.106:3464}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54203: (50%)&lt;BR/&gt; 3464: (50%)&gt;];
}
385--386[label="1;1pkt 1fpkt"];
385--1776[label="1;1pkt 1fpkt"];
385--1886[label="1;1pkt 1fpkt"];
385--2246[label="1;1pkt 1fpkt"];
385--3970[label="1;1pkt 1fpkt"];
385--4905[label="1;1pkt 1fpkt"];
386--1776[label="1;1pkt 1fpkt"];
386--1886[label="1;1pkt 1fpkt"];
386--2246[label="1;1pkt 1fpkt"];
386--3970[label="1;1pkt 1fpkt"];
386--4905[label="1;1pkt 1fpkt"];
1776--1886[label="1;1pkt 1fpkt"];
1776--2246[label="1;1pkt 1fpkt"];
1776--3970[label="1;1pkt 1fpkt"];
1776--4905[label="1;1pkt 1fpkt"];
1886--2246[label="1;1pkt 1fpkt"];
1886--3970[label="1;1pkt 1fpkt"];
1886--4905[label="1;1pkt 1fpkt"];
2246--3970[label="1;1pkt 1fpkt"];
2246--4905[label="1;1pkt 1fpkt"];
3970--4905[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.45.106" dst_port="3464" src_ip="210.12.7.13" src_port="54203"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
564[label="218.73.75.189;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.73.75.189:8882, 149.207.217.197:3683}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8882: (50%)&lt;BR/&gt; 3683: (50%)&gt;];
}
564--1644[label="1;1pkt 1fpkt"];
564--1889[label="1;1pkt 1fpkt"];
564--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="3683" src_ip="218.73.75.189" src_port="8882"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
712[label="217.67.177.39;s;1pkt 1fpkt", shape=diamond, color=yellow];
1890[label="217.67.177.39;s;1pkt 1fpkt", shape=hexagon, color=black];
2463[label="217.67.177.39;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.67.177.39:6658, 166.55.179.5:3155}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6658: (50%)&lt;BR/&gt; 3155: (50%)&gt;];
}
712--1890[label="1;1pkt 1fpkt"];
712--2463[label="1;1pkt 1fpkt"];
1890--2463[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.179.5" dst_port="3155" src_ip="217.67.177.39" src_port="6658"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
980[label="136.24.156.56;s;5pkt 5fpkt", shape=diamond, color=yellow];
1891[label="136.24.156.56;s;5pkt 5fpkt", shape=hexagon, color=black];
2589[label="136.24.156.56;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4166[label="136.24.156.56;4pkt 4fpkt", shape=invtriangle, color=brown];
5002[label="136.24.156.56;4pkt 4fpkt", shape=invhouse, color=bisque];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.24.156.56:21, 160.188.116.5:2157}[20%]&lt;BR/&gt;{136.24.156.56:21, 160.188.116.5:2309}[20%]&lt;BR/&gt;{136.24.156.56:20, 160.188.116.5:2086}[20%]&lt;BR/&gt;{136.24.156.56:20, 160.188.116.5:2158}[20%]&lt;BR/&gt;{136.24.156.56:20, 160.188.116.5:2312}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (27.2727%)&lt;BR/&gt; 21: (22.7273%)&lt;BR/&gt; 2312: (11.3636%)&lt;BR/&gt; 2309: (11.3636%)&lt;BR/&gt; 2157: (11.3636%)&gt;];
}
980--1891[label="1;5pkt 5fpkt"];
980--2589[label="1;4pkt 4fpkt"];
980--4166[label="1;4pkt 4fpkt"];
980--5002[label="1;4pkt 4fpkt"];
1891--2589[label="1;4pkt 4fpkt"];
1891--4166[label="1;4pkt 4fpkt"];
1891--5002[label="1;4pkt 4fpkt"];
2589--4166[label="1;4pkt 4fpkt"];
2589--5002[label="1;4pkt 4fpkt"];
4166--5002[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.116.5" dst_port="2312" src_ip="136.24.156.56" src_port="20"/>
      <filter dst_ip="160.188.116.5" dst_port="2158" src_ip="136.24.156.56" src_port="20"/>
      <filter dst_ip="160.188.116.5" dst_port="2086" src_ip="136.24.156.56" src_port="20"/>
      <filter dst_ip="160.188.116.5" dst_port="2309" src_ip="136.24.156.56" src_port="21"/>
      <filter dst_ip="160.188.116.5" dst_port="2157" src_ip="136.24.156.56" src_port="21"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
577[label="35.131.233.255;s;1pkt 1fpkt", shape=diamond, color=yellow];
1893[label="35.131.233.255;s;1pkt 1fpkt", shape=hexagon, color=black];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.131.233.255:4662, 166.55.179.5:4503}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 4503: (50%)&gt;];
}
577--1893[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.179.5" dst_port="4503" src_ip="35.131.233.255" src_port="4662"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
1104[label="205.1.41.198;s;5pkt 5fpkt", shape=diamond, color=yellow];
1895[label="205.1.41.198;s;5pkt 5fpkt", shape=hexagon, color=black];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.41.198:1863, 145.166.1.105:1067}[20%]&lt;BR/&gt;{205.1.41.198:1863, 145.166.1.172:1208}[20%]&lt;BR/&gt;{205.1.41.198:1863, 145.166.6.252:1083}[20%]&lt;BR/&gt;{205.1.41.198:1863, 145.166.6.160:3051}[20%]&lt;BR/&gt;{205.1.41.198:1863, 145.166.6.160:3106}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3106: (10%)&lt;BR/&gt; 3051: (10%)&lt;BR/&gt; 1208: (10%)&lt;BR/&gt; 1083: (10%)&gt;];
}
1104--1895[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.6.160" dst_port="3106" src_ip="205.1.41.198" src_port="1863"/>
      <filter dst_ip="145.166.6.160" dst_port="3051" src_ip="205.1.41.198" src_port="1863"/>
      <filter dst_ip="145.166.6.252" dst_port="1083" src_ip="205.1.41.198" src_port="1863"/>
      <filter dst_ip="145.166.1.172" dst_port="1208" src_ip="205.1.41.198" src_port="1863"/>
      <filter dst_ip="145.166.1.105" dst_port="1067" src_ip="205.1.41.198" src_port="1863"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889707,1.5466,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
547[label="149.206.145.198;d;15pkt 15fpkt", shape=diamond, color=yellow];
1596[label="60.36.21.51;s;8pkt 8fpkt", shape=diamond, color=yellow];
2046[label="149.206.145.198;d;15pkt 15fpkt", shape=hexagon, color=black];
2185[label="58.214.195.5;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2352[label="60.36.25.28;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2547[label="60.36.21.51;14pkt 14fpkt", shape=pentagon, color=darkviolet];
2870[label="58.214.195.95;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3935[label="58.214.195.5;3pkt 3fpkt", shape=invtriangle, color=brown];
4142[label="60.36.21.51;14pkt 14fpkt", shape=invtriangle, color=brown];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 149.206.145.198:*}[34.2857%]&lt;BR/&gt;{*:5004, 149.206.145.198:*}[25.7143%]&lt;BR/&gt;{60.36.25.28:*, 149.206.145.198:*}[25.7143%]&lt;BR/&gt;{60.36.21.51:554, 149.206.145.198:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (18.1818%)&lt;BR/&gt; 5004: (15.3409%)&lt;BR/&gt; 80: (14.2045%)&lt;BR/&gt; 1349: (2.84091%)&lt;BR/&gt; 1348: (2.84091%)&gt;];
}
547--990[label="0.0666667;1pkt 1fpkt"];
547--1018[label="0.0666667;1pkt 1fpkt"];
547--1596[label="1;8pkt 8fpkt"];
547--1897[label="0.0666667;1pkt 1fpkt"];
547--2046[label="1;15pkt 15fpkt"];
547--2103[label="0.133333;2pkt 2fpkt"];
547--2185[label="0.25;1pkt 1fpkt"];
547--2352[label="0.111111;1pkt 1fpkt"];
547--2547[label="0.571429;8pkt 8fpkt"];
547--2870[label="0.5;3pkt 3fpkt"];
547--3117[label="0.0666667;1pkt 1fpkt"];
547--4142[label="0.571429;8pkt 8fpkt"];
547--4431[label="0.0666667;1pkt 1fpkt"];
547--5117[label="0.0666667;1pkt 1fpkt"];
1596--2046[label="1;8pkt 8fpkt"];
1596--2547[label="1;8pkt 8fpkt"];
1596--4142[label="1;8pkt 8fpkt"];
2046--2103[label="0.133333;2pkt 2fpkt"];
2046--2185[label="0.25;1pkt 1fpkt"];
2046--2352[label="0.111111;1pkt 1fpkt"];
2046--2547[label="0.571429;8pkt 8fpkt"];
2046--2870[label="0.5;3pkt 3fpkt"];
2046--3117[label="0.0666667;1pkt 1fpkt"];
2046--4142[label="0.571429;8pkt 8fpkt"];
2046--4431[label="0.0666667;1pkt 1fpkt"];
2046--5117[label="0.0666667;1pkt 1fpkt"];
2185--3935[label="1;3pkt 3fpkt"];
2547--4142[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.145.198" src_ip="60.36.25.28"/>
      <filter dst_ip="149.206.145.198" src_port="80"/>
      <filter dst_ip="149.206.145.198" src_port="5004"/>
      <filter dst_ip="149.206.145.198" src_ip="60.36.21.51" src_port="554"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
592[label="218.90.159.92;s;1pkt 1fpkt", shape=diamond, color=yellow];
1899[label="218.90.159.92;s;1pkt 1fpkt", shape=hexagon, color=black];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.90.159.92:8881, 149.207.217.197:2105}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8881: (50%)&lt;BR/&gt; 2105: (50%)&gt;];
}
592--1644[label="1;1pkt 1fpkt"];
592--1899[label="1;1pkt 1fpkt"];
592--2061[label="1;1pkt 1fpkt"];
592--2850[label="1;1pkt 1fpkt"];
1899--2061[label="1;1pkt 1fpkt"];
1899--2850[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="2105" src_ip="218.90.159.92" src_port="8881"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01378,1.65048,020,0 0 0 0 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
1902[label="201.118.244.138;s;1529pkt 1529fpkt", shape=hexagon, color=black];
3149[label="201.118.244.138;2353pkt 2353fpkt", shape=pentagon, color=darkviolet];
4448[label="201.118.244.138;2353pkt 2353fpkt", shape=invtriangle, color=brown];
5126[label="201.118.244.138;2353pkt 2353fpkt", shape=invhouse, color=bisque];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.118.244.138:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1902--3149[label="1;1529pkt 1529fpkt"];
1902--4448[label="1;1529pkt 1529fpkt"];
1902--5126[label="1;1529pkt 1529fpkt"];
3149--4448[label="1;2353pkt 2353fpkt"];
3149--5126[label="1;2353pkt 2353fpkt"];
4448--5126[label="1;2353pkt 2353fpkt"];
</description>
    <slice>
      <filter src_ip="201.118.244.138"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
743[label="221.5.3.119;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.5.3.119:8882, 149.207.217.197:2207}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8882: (50%)&lt;BR/&gt; 2207: (50%)&gt;];
}
743--1644[label="1;1pkt 1fpkt"];
743--1903[label="1;1pkt 1fpkt"];
743--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="2207" src_ip="221.5.3.119" src_port="8882"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071205953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
1125[label="35.218.29.34;s;713pkt 713fpkt", shape=diamond, color=yellow];
1904[label="35.218.29.34;s;507pkt 507fpkt", shape=hexagon, color=black];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.218.29.34:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1125--1904[label="1;507pkt 507fpkt"];
</description>
    <slice>
      <filter src_ip="35.218.29.34"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
1004[label="57.4.45.88;s;224pkt 224fpkt", shape=diamond, color=yellow];
1906[label="57.4.45.88;s;192pkt 192fpkt", shape=hexagon, color=black];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.4.45.88:*, *:445}[51.3393%]&lt;BR/&gt;{57.4.45.88:*, *:135}[48.6607%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.8413%)&lt;BR/&gt; 135: (24.1587%)&lt;BR/&gt; 3566: (0.480769%)&lt;BR/&gt; 2195: (0.480769%)&lt;BR/&gt; 2077: (0.480769%)&gt;];
}
1004--1906[label="1;192pkt 192fpkt"];
1004--2106[label="0.0223214;5pkt 5fpkt"];
1004--2108[label="0.00446429;1pkt 1fpkt"];
1004--2111[label="0.00446429;1pkt 1fpkt"];
1004--2123[label="0.00446429;1pkt 1fpkt"];
1004--2125[label="0.00446429;1pkt 1fpkt"];
1004--2130[label="0.00446429;1pkt 1fpkt"];
1004--2131[label="0.00446429;1pkt 1fpkt"];
1906--2106[label="0.0260417;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="57.4.45.88"/>
      <filter dst_port="135" src_ip="57.4.45.88"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889707,1.5466,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
1006[label="78.70.113.62;s;3pkt 3fpkt", shape=diamond, color=yellow];
1908[label="78.70.113.62;s;3pkt 3fpkt", shape=hexagon, color=black];
2630[label="78.70.113.62;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4187[label="78.70.113.62;2pkt 2fpkt", shape=invtriangle, color=brown];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.70.113.62:8881, 149.207.217.197:1876}[33.3333%]&lt;BR/&gt;{78.70.113.62:8882, 149.207.217.197:1916}[33.3333%]&lt;BR/&gt;{78.70.113.62:8883, 149.207.217.197:4287}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8883: (20%)&lt;BR/&gt; 8882: (20%)&lt;BR/&gt; 4287: (20%)&lt;BR/&gt; 1916: (20%)&lt;BR/&gt; 8881: (10%)&gt;];
}
1006--1644[label="1;3pkt 3fpkt"];
1006--1908[label="1;3pkt 3fpkt"];
1006--2061[label="1;3pkt 3fpkt"];
1006--2630[label="1;2pkt 2fpkt"];
1006--4187[label="1;2pkt 2fpkt"];
1006--5016[label="1;2pkt 2fpkt"];
1908--2061[label="1;3pkt 3fpkt"];
1908--2630[label="1;2pkt 2fpkt"];
1908--4187[label="1;2pkt 2fpkt"];
1908--5016[label="1;2pkt 2fpkt"];
2630--4187[label="1;2pkt 2fpkt"];
2630--5016[label="1;2pkt 2fpkt"];
4187--5016[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="4287" src_ip="78.70.113.62" src_port="8883"/>
      <filter dst_ip="149.207.217.197" dst_port="1916" src_ip="78.70.113.62" src_port="8882"/>
      <filter dst_ip="149.207.217.197" dst_port="1876" src_ip="78.70.113.62" src_port="8881"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
1021[label="78.71.162.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.71.162.134:6882, 149.207.217.197:1973}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6882: (50%)&lt;BR/&gt; 1973: (50%)&gt;];
}
1021--1644[label="1;1pkt 1fpkt"];
1021--1912[label="1;1pkt 1fpkt"];
1021--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="1973" src_ip="78.71.162.134" src_port="6882"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
938[label="57.216.76.34;s;5pkt 5fpkt", shape=diamond, color=yellow];
1865[label="149.206.250.184;d;7pkt 7fpkt", shape=hexagon, color=black];
1918[label="57.216.76.34;s;5pkt 5fpkt", shape=hexagon, color=black];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.216.76.34:80, 149.206.250.184:*}[71.4286%]&lt;BR/&gt;{201.229.90.38:80, 149.206.250.184:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1205: (8.82353%)&lt;BR/&gt; 1204: (8.82353%)&lt;BR/&gt; 1203: (8.82353%)&lt;BR/&gt; 1202: (8.82353%)&gt;];
}
938--1865[label="1;5pkt 5fpkt"];
938--1918[label="1;5pkt 5fpkt"];
938--2103[label="0.4;2pkt 2fpkt"];
1865--1918[label="1;5pkt 5fpkt"];
1865--2103[label="0.285714;2pkt 2fpkt"];
1865--2447[label="1;2pkt 2fpkt"];
1865--4080[label="1;2pkt 2fpkt"];
1918--2103[label="0.4;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.250.184" src_ip="57.216.76.34" src_port="80"/>
      <filter dst_ip="149.206.250.184" src_ip="201.229.90.38" src_port="80"/>
    </slice>
    <from sec="1071205380" usec="0"/>
    <to sec="1071206002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
808[label="149.207.81.208;d;140pkt 140fpkt", shape=diamond, color=yellow];
1202[label="149.207.118.141;d;17pkt 17fpkt", shape=diamond, color=yellow];
1819[label="149.207.81.208;d;98pkt 98fpkt", shape=hexagon, color=black];
1919[label="201.153.90.102;s;102pkt 102fpkt", shape=hexagon, color=black];
2916[label="201.153.90.102;104pkt 104fpkt", shape=pentagon, color=darkviolet];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.153.90.102:80, 149.207.81.208:*}[54.7619%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0239%)&lt;BR/&gt; 3531: (0.867679%)&lt;BR/&gt; 2853: (0.433839%)&lt;BR/&gt; 2852: (0.433839%)&lt;BR/&gt; 2851: (0.433839%)&gt;];
}
808--1051[label="0.901961;92pkt 92fpkt"];
808--1819[label="1;98pkt 98fpkt"];
808--1919[label="0.901961;92pkt 92fpkt"];
808--2103[label="0.05;7pkt 7fpkt"];
808--2916[label="0.884615;92pkt 92fpkt"];
808--3525[label="0.136364;3pkt 3fpkt"];
808--3890[label="0.1;7pkt 7fpkt"];
808--5224[label="0.15;3pkt 3fpkt"];
1202--1203[label="1;6pkt 6fpkt"];
1202--1919[label="0.0588235;1pkt 1fpkt"];
1202--2916[label="0.0588235;1pkt 1fpkt"];
1202--3525[label="0.117647;2pkt 2fpkt"];
1202--3567[label="0.352941;6pkt 6fpkt"];
1202--5224[label="0.117647;2pkt 2fpkt"];
1819--1919[label="0.72449;71pkt 71fpkt"];
1819--2916[label="0.72449;71pkt 71fpkt"];
1819--3525[label="0.136364;3pkt 3fpkt"];
1819--5224[label="0.15;3pkt 3fpkt"];
1919--1989[label="0.0322581;1pkt 1fpkt"];
1919--2103[label="0.0490196;5pkt 5fpkt"];
1919--2916[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.81.208" src_ip="201.153.90.102" src_port="80"/>
    </slice>
    <from sec="1071205286" usec="0"/>
    <to sec="1071206066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
1027[label="145.71.50.76;d;11pkt 11fpkt", shape=diamond, color=yellow];
1081[label="216.104.117.255;s;5pkt 5fpkt", shape=diamond, color=yellow];
1453[label="217.50.64.214;s;3pkt 3fpkt", shape=diamond, color=yellow];
1924[label="216.104.117.255;s;5pkt 5fpkt", shape=hexagon, color=black];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 145.71.50.76:*}[42.8571%]&lt;BR/&gt;{216.104.117.255:*, 145.71.50.76:*}[28.5714%]&lt;BR/&gt;{217.50.64.214:*, *:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (14.5833%)&lt;BR/&gt; 1755: (12.5%)&lt;BR/&gt; 0: (12.5%)&lt;BR/&gt; 4651: (6.25%)&lt;BR/&gt; 2842: (6.25%)&gt;];
}
1027--1081[label="0.8;4pkt 4fpkt"];
1027--1453[label="0.333333;1pkt 1fpkt"];
1027--1924[label="0.8;4pkt 4fpkt"];
1027--2103[label="0.0909091;1pkt 1fpkt"];
1081--1924[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="217.50.64.214"/>
      <filter dst_ip="145.71.50.76" src_ip="216.104.117.255"/>
      <filter dst_ip="145.71.50.76" src_port="80"/>
    </slice>
    <from sec="1071205216" usec="0"/>
    <to sec="1071205997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889707,1.5466,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_293{
style=filled;
color=gray75;
685[label="166.55.96.220;d;1pkt 1fpkt", shape=diamond, color=yellow];
686[label="218.72.97.220;s;1pkt 1fpkt", shape=diamond, color=yellow];
1711[label="166.55.96.220;d;1pkt 1fpkt", shape=hexagon, color=black];
1935[label="218.72.97.220;s;1pkt 1fpkt", shape=hexagon, color=black];
3691[label="218.72.97.220;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4744[label="218.72.97.220;1pkt 1fpkt", shape=invtriangle, color=brown];
stat293[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.72.97.220:6100, 166.55.96.220:1086}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6100: (50%)&lt;BR/&gt; 1086: (50%)&gt;];
}
685--686[label="1;1pkt 1fpkt"];
685--1711[label="1;1pkt 1fpkt"];
685--1935[label="1;1pkt 1fpkt"];
685--3691[label="1;1pkt 1fpkt"];
685--4744[label="1;1pkt 1fpkt"];
686--1711[label="1;1pkt 1fpkt"];
686--1935[label="1;1pkt 1fpkt"];
686--3691[label="1;1pkt 1fpkt"];
686--4744[label="1;1pkt 1fpkt"];
1711--1935[label="1;1pkt 1fpkt"];
1711--3691[label="1;1pkt 1fpkt"];
1711--4744[label="1;1pkt 1fpkt"];
1935--3691[label="1;1pkt 1fpkt"];
1935--4744[label="1;1pkt 1fpkt"];
3691--4744[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.96.220" dst_port="1086" src_ip="218.72.97.220" src_port="6100"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
1226[label="35.145.223.80;s;251pkt 251fpkt", shape=diamond, color=yellow];
1936[label="35.145.223.80;s;187pkt 187fpkt", shape=hexagon, color=black];
2761[label="35.145.223.80;257pkt 257fpkt", shape=pentagon, color=darkviolet];
4257[label="35.145.223.80;257pkt 257fpkt", shape=invtriangle, color=brown];
5048[label="35.145.223.80;257pkt 257fpkt", shape=invhouse, color=bisque];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.145.223.80:*, *:445}[50.1946%]&lt;BR/&gt;{35.145.223.80:*, *:135}[49.8054%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.3102%)&lt;BR/&gt; 135: (24.6898%)&lt;BR/&gt; 4978: (0.413565%)&lt;BR/&gt; 2764: (0.413565%)&lt;BR/&gt; 1527: (0.413565%)&gt;];
}
1226--1936[label="1;187pkt 187fpkt"];
1226--2106[label="0.0478088;12pkt 12fpkt"];
1226--2108[label="0.0278884;7pkt 7fpkt"];
1226--2111[label="0.00398406;1pkt 1fpkt"];
1226--2123[label="0.0278884;7pkt 7fpkt"];
1226--2125[label="0.00398406;1pkt 1fpkt"];
1226--2130[label="0.0278884;7pkt 7fpkt"];
1226--2131[label="0.00398406;1pkt 1fpkt"];
1226--2761[label="1;251pkt 251fpkt"];
1226--4257[label="1;251pkt 251fpkt"];
1226--5048[label="1;251pkt 251fpkt"];
1936--2106[label="0.0641711;12pkt 12fpkt"];
1936--2108[label="0.0213904;4pkt 4fpkt"];
1936--2123[label="0.0213904;4pkt 4fpkt"];
1936--2130[label="0.0213904;4pkt 4fpkt"];
1936--2761[label="1;187pkt 187fpkt"];
1936--4257[label="1;187pkt 187fpkt"];
1936--5048[label="1;187pkt 187fpkt"];
2761--4257[label="1;257pkt 257fpkt"];
2761--5048[label="1;257pkt 257fpkt"];
4257--5048[label="1;257pkt 257fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="35.145.223.80"/>
      <filter dst_port="135" src_ip="35.145.223.80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
305[label="160.188.106.27;d;771pkt 771fpkt", shape=diamond, color=yellow];
896[label="57.190.249.157;s;68pkt 68fpkt", shape=diamond, color=yellow];
1504[label="57.190.252.198;s;96pkt 96fpkt", shape=diamond, color=yellow];
2262[label="201.25.121.16;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2440[label="57.190.249.37;19pkt 19fpkt", shape=pentagon, color=darkviolet];
2675[label="216.141.18.68;69pkt 69fpkt", shape=pentagon, color=darkviolet];
2701[label="216.16.178.71;114pkt 114fpkt", shape=pentagon, color=darkviolet];
3235[label="217.53.213.151;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3445[label="57.190.252.181;88pkt 88fpkt", shape=pentagon, color=darkviolet];
3451[label="57.190.252.182;82pkt 82fpkt", shape=pentagon, color=darkviolet];
3555[label="216.115.154.200;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3687[label="57.190.252.219;57pkt 57fpkt", shape=pentagon, color=darkviolet];
3978[label="201.25.121.16;4pkt 4fpkt", shape=invtriangle, color=brown];
4076[label="57.190.249.37;19pkt 19fpkt", shape=invtriangle, color=brown];
4208[label="216.141.18.68;69pkt 69fpkt", shape=invtriangle, color=brown];
4223[label="216.16.178.71;114pkt 114fpkt", shape=invtriangle, color=brown];
4665[label="216.115.154.200;20pkt 20fpkt", shape=invtriangle, color=brown];
4761[label="201.170.137.223;26pkt 26fpkt", shape=invtriangle, color=brown];
4955[label="57.190.249.37;20pkt 20fpkt", shape=invhouse, color=bisque];
5033[label="216.16.178.71;114pkt 114fpkt", shape=invhouse, color=bisque];
5286[label="201.170.137.223;26pkt 26fpkt", shape=invhouse, color=bisque];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 160.188.106.27:*}[38.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.6963%)&lt;BR/&gt; 21: (6.37013%)&lt;BR/&gt; 443: (0.741351%)&lt;BR/&gt; 2475: (0.164745%)&lt;BR/&gt; 1318: (0.137287%)&gt;];
}
305--379[label="0.00129702;1pkt 1fpkt"];
305--431[label="0.0877193;10pkt 10fpkt"];
305--445[label="0.575243;237pkt 237fpkt"];
305--447[label="1;4pkt 4fpkt"];
305--522[label="0.00129702;1pkt 1fpkt"];
305--532[label="0.0983607;6pkt 6fpkt"];
305--578[label="0.0182927;6pkt 6fpkt"];
305--687[label="0.00326797;1pkt 1fpkt"];
305--896[label="0.0882353;6pkt 6fpkt"];
305--897[label="0.0204778;6pkt 6fpkt"];
305--905[label="0.025641;1pkt 1fpkt"];
305--907[label="0.0294118;2pkt 2fpkt"];
305--915[label="0.110236;14pkt 14fpkt"];
305--921[label="0.578947;11pkt 11fpkt"];
305--923[label="0.52;39pkt 39fpkt"];
305--1015[label="0.00724638;1pkt 1fpkt"];
305--1141[label="0.00724638;1pkt 1fpkt"];
305--1230[label="0.036036;4pkt 4fpkt"];
305--1235[label="0.0583942;8pkt 8fpkt"];
305--1238[label="0.0512821;8pkt 8fpkt"];
305--1298[label="0.0232558;1pkt 1fpkt"];
305--1301[label="0.111111;1pkt 1fpkt"];
305--1309[label="0.0126582;1pkt 1fpkt"];
305--1338[label="0.142857;1pkt 1fpkt"];
305--1378[label="0.0725806;9pkt 9fpkt"];
305--1504[label="0.09375;9pkt 9fpkt"];
305--1530[label="0.113475;16pkt 16fpkt"];
305--1546[label="0.0769231;7pkt 7fpkt"];
305--1574[label="0.0454545;4pkt 4fpkt"];
305--1651[label="0.00129702;1pkt 1fpkt"];
305--1654[label="1;4pkt 4fpkt"];
305--1801[label="0.0204778;6pkt 6fpkt"];
305--1808[label="0.0227273;1pkt 1fpkt"];
305--1816[label="0.571429;8pkt 8fpkt"];
305--1877[label="0.916667;66pkt 66fpkt"];
305--1880[label="0.142857;6pkt 6fpkt"];
305--1943[label="0.0601504;8pkt 8fpkt"];
305--1971[label="0.00129702;1pkt 1fpkt"];
305--2062[label="0.00129702;1pkt 1fpkt"];
305--2103[label="0.080415;62pkt 62fpkt"];
305--2159[label="0.0238095;1pkt 1fpkt"];
305--2262[label="0.2;1pkt 1fpkt"];
305--2330[label="0.137931;4pkt 4fpkt"];
305--2372[label="0.111111;1pkt 1fpkt"];
305--2380[label="0.0909091;1pkt 1fpkt"];
305--2440[label="0.105263;2pkt 2fpkt"];
305--2473[label="0.0714286;1pkt 1fpkt"];
305--2486[label="0.0769231;1pkt 1fpkt"];
305--2506[label="0.0263158;2pkt 2fpkt"];
305--2585[label="0.00129702;1pkt 1fpkt"];
305--2612[label="0.0166205;6pkt 6fpkt"];
305--2675[label="0.0144928;1pkt 1fpkt"];
305--2701[label="0.0877193;10pkt 10fpkt"];
305--2771[label="0.045977;4pkt 4fpkt"];
305--2795[label="0.02;1pkt 1fpkt"];
305--2817[label="0.00680272;1pkt 1fpkt"];
305--2963[label="0.563246;236pkt 236fpkt"];
305--2999[label="0.0555556;1pkt 1fpkt"];
305--3190[label="0.108108;16pkt 16fpkt"];
305--3215[label="0.107143;3pkt 3fpkt"];
305--3235[label="0.1;2pkt 2fpkt"];
305--3300[label="0.0384615;1pkt 1fpkt"];
305--3307[label="0.0253165;2pkt 2fpkt"];
305--3367[label="0.00684932;1pkt 1fpkt"];
305--3425[label="0.0294118;4pkt 4fpkt"];
305--3445[label="0.136364;12pkt 12fpkt"];
305--3451[label="0.0853659;7pkt 7fpkt"];
305--3475[label="0.0795455;7pkt 7fpkt"];
305--3485[label="0.6;3pkt 3fpkt"];
305--3555[label="0.1;2pkt 2fpkt"];
305--3687[label="0.192982;11pkt 11fpkt"];
305--3720[label="0.5;13pkt 13fpkt"];
305--3797[label="0.238095;10pkt 10fpkt"];
305--3833[label="0.0102041;1pkt 1fpkt"];
305--4018[label="0.107143;3pkt 3fpkt"];
305--4044[label="0.0909091;1pkt 1fpkt"];
305--4076[label="0.105263;2pkt 2fpkt"];
305--4117[label="0.0266667;2pkt 2fpkt"];
305--4162[label="0.00129702;1pkt 1fpkt"];
305--4176[label="0.0166667;6pkt 6fpkt"];
305--4208[label="0.0144928;1pkt 1fpkt"];
305--4223[label="0.0877193;10pkt 10fpkt"];
305--4261[label="0.045977;4pkt 4fpkt"];
305--4273[label="0.02;1pkt 1fpkt"];
305--4373[label="0.0555556;1pkt 1fpkt"];
305--4464[label="0.108108;16pkt 16fpkt"];
305--4530[label="0.0384615;1pkt 1fpkt"];
305--4534[label="0.0253165;2pkt 2fpkt"];
305--4598[label="0.0294118;4pkt 4fpkt"];
305--4624[label="0.0795455;7pkt 7fpkt"];
305--4665[label="0.1;2pkt 2fpkt"];
305--4761[label="0.5;13pkt 13fpkt"];
305--4809[label="0.238095;10pkt 10fpkt"];
305--4831[label="0.0102041;1pkt 1fpkt"];
305--4955[label="0.1;2pkt 2fpkt"];
305--4970[label="0.0769231;1pkt 1fpkt"];
305--4979[label="0.0266667;2pkt 2fpkt"];
305--5008[label="0.0166205;6pkt 6fpkt"];
305--5033[label="0.0877193;10pkt 10fpkt"];
305--5134[label="0.108108;16pkt 16fpkt"];
305--5167[label="0.0384615;1pkt 1fpkt"];
305--5168[label="0.0253165;2pkt 2fpkt"];
305--5200[label="0.0294118;4pkt 4fpkt"];
305--5210[label="0.0795455;7pkt 7fpkt"];
305--5286[label="0.5;13pkt 13fpkt"];
896--1937[label="0.294118;20pkt 20fpkt"];
896--2103[label="0.205882;14pkt 14fpkt"];
1504--1937[label="0.145833;14pkt 14fpkt"];
1504--2103[label="0.0208333;2pkt 2fpkt"];
2262--3978[label="1;4pkt 4fpkt"];
2440--4076[label="1;19pkt 19fpkt"];
2440--4955[label="1;19pkt 19fpkt"];
2675--4208[label="1;69pkt 69fpkt"];
2701--4223[label="1;114pkt 114fpkt"];
2701--5033[label="1;114pkt 114fpkt"];
3555--4665[label="1;20pkt 20fpkt"];
4076--4955[label="1;19pkt 19fpkt"];
4223--5033[label="1;114pkt 114fpkt"];
4761--5286[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.106.27" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_296{
style=filled;
color=gray75;
1233[label="218.73.213.169;s;1pkt 1fpkt", shape=diamond, color=yellow];
1941[label="218.73.213.169;s;1pkt 1fpkt", shape=hexagon, color=black];
stat296[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.73.213.169:6883, 149.207.217.197:2100}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6883: (50%)&lt;BR/&gt; 2100: (50%)&gt;];
}
1233--1644[label="1;1pkt 1fpkt"];
1233--1941[label="1;1pkt 1fpkt"];
1233--2061[label="1;1pkt 1fpkt"];
1941--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="2100" src_ip="218.73.213.169" src_port="6883"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
1234[label="61.138.102.154;s;242pkt 242fpkt", shape=diamond, color=yellow];
1942[label="61.138.102.154;s;222pkt 222fpkt", shape=hexagon, color=black];
3251[label="61.138.102.154;258pkt 258fpkt", shape=pentagon, color=darkviolet];
4496[label="61.138.102.154;258pkt 258fpkt", shape=invtriangle, color=brown];
5150[label="61.138.102.154;258pkt 258fpkt", shape=invhouse, color=bisque];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.138.102.154:*, *:445}[51.5504%]&lt;BR/&gt;{61.138.102.154:*, *:135}[48.4496%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.7674%)&lt;BR/&gt; 135: (24.2326%)&lt;BR/&gt; 2898: (0.605816%)&lt;BR/&gt; 2504: (0.403877%)&lt;BR/&gt; 1594: (0.403877%)&gt;];
}
1234--1942[label="1;222pkt 222fpkt"];
1234--2106[label="0.0619835;15pkt 15fpkt"];
1234--2108[label="0.0289256;7pkt 7fpkt"];
1234--2111[label="0.00826446;2pkt 2fpkt"];
1234--2123[label="0.0289256;7pkt 7fpkt"];
1234--2125[label="0.00826446;2pkt 2fpkt"];
1234--2130[label="0.0289256;7pkt 7fpkt"];
1234--2131[label="0.00826446;2pkt 2fpkt"];
1234--3251[label="1;242pkt 242fpkt"];
1234--4496[label="1;242pkt 242fpkt"];
1234--5150[label="1;242pkt 242fpkt"];
1942--2106[label="0.0675676;15pkt 15fpkt"];
1942--2108[label="0.018018;4pkt 4fpkt"];
1942--2123[label="0.018018;4pkt 4fpkt"];
1942--2130[label="0.018018;4pkt 4fpkt"];
1942--3251[label="1;222pkt 222fpkt"];
1942--4496[label="1;222pkt 222fpkt"];
1942--5150[label="1;222pkt 222fpkt"];
3251--4496[label="1;258pkt 258fpkt"];
3251--5150[label="1;258pkt 258fpkt"];
4496--5150[label="1;258pkt 258fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="61.138.102.154"/>
      <filter dst_port="135" src_ip="61.138.102.154"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
3267[label="77.0.81.157;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4506[label="77.0.81.157;20pkt 20fpkt", shape=invtriangle, color=brown];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.0.81.157:*, 160.188.98.56:25}[40%]&lt;BR/&gt;{77.0.81.157:25, 160.188.114.245:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (42.5%)&lt;BR/&gt; 53: (5%)&lt;BR/&gt; 53102: (2.5%)&lt;BR/&gt; 53101: (2.5%)&lt;BR/&gt; 53100: (2.5%)&gt;];
}
3267--4506[label="1;20pkt 20fpkt"];
3267--5156[label="1;20pkt 20fpkt"];
4506--5156[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.98.56" dst_port="25" src_ip="77.0.81.157"/>
      <filter dst_ip="160.188.114.245" src_ip="77.0.81.157" src_port="25"/>
    </slice>
    <from sec="1071205360" usec="0"/>
    <to sec="1071206065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
294[label="131.233.160.136;s;110pkt 110fpkt", shape=diamond, color=yellow];
724[label="34.200.50.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
810[label="35.39.212.25;d;1pkt 1fpkt", shape=diamond, color=yellow];
881[label="217.134.57.210;d;1pkt 1fpkt", shape=diamond, color=yellow];
1302[label="213.104.49.143;d;1pkt 1fpkt", shape=diamond, color=yellow];
1878[label="131.233.160.136;s;89pkt 89fpkt", shape=hexagon, color=black];
1944[label="34.200.50.6;d;1pkt 1fpkt", shape=hexagon, color=black];
3130[label="131.233.160.136;126pkt 126fpkt", shape=pentagon, color=darkviolet];
4438[label="131.233.160.136;126pkt 126fpkt", shape=invtriangle, color=brown];
5120[label="131.233.160.136;126pkt 126fpkt", shape=invhouse, color=bisque];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.160.136:*, *:4662}[63.4921%]&lt;BR/&gt;{131.233.160.136:4482, *:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (33.5052%)&lt;BR/&gt; 4482: (8.41924%)&lt;BR/&gt; 4665: (2.57732%)&lt;BR/&gt; 4246: (2.4055%)&lt;BR/&gt; 4896: (1.28866%)&gt;];
}
294--724[label="1;1pkt 1fpkt"];
294--810[label="1;1pkt 1fpkt"];
294--881[label="1;1pkt 1fpkt"];
294--1302[label="1;1pkt 1fpkt"];
294--1878[label="1;89pkt 89fpkt"];
294--1944[label="1;1pkt 1fpkt"];
294--3130[label="1;110pkt 110fpkt"];
294--4438[label="1;110pkt 110fpkt"];
294--5120[label="1;110pkt 110fpkt"];
724--1878[label="1;1pkt 1fpkt"];
724--1944[label="1;1pkt 1fpkt"];
724--3130[label="1;1pkt 1fpkt"];
724--4438[label="1;1pkt 1fpkt"];
724--5120[label="1;1pkt 1fpkt"];
810--1878[label="1;1pkt 1fpkt"];
810--3130[label="1;1pkt 1fpkt"];
810--4438[label="1;1pkt 1fpkt"];
810--5120[label="1;1pkt 1fpkt"];
881--1878[label="1;1pkt 1fpkt"];
881--3130[label="1;1pkt 1fpkt"];
881--4438[label="1;1pkt 1fpkt"];
881--5120[label="1;1pkt 1fpkt"];
1302--1878[label="1;1pkt 1fpkt"];
1302--3130[label="1;1pkt 1fpkt"];
1302--4438[label="1;1pkt 1fpkt"];
1302--5120[label="1;1pkt 1fpkt"];
1878--1944[label="1;1pkt 1fpkt"];
1878--3130[label="1;89pkt 89fpkt"];
1878--4438[label="1;89pkt 89fpkt"];
1878--5120[label="1;89pkt 89fpkt"];
1944--3130[label="1;1pkt 1fpkt"];
1944--4438[label="1;1pkt 1fpkt"];
1944--5120[label="1;1pkt 1fpkt"];
3130--4438[label="1;126pkt 126fpkt"];
3130--5120[label="1;126pkt 126fpkt"];
4438--5120[label="1;126pkt 126fpkt"];
</description>
    <slice>
      <filter src_ip="131.233.160.136" src_port="4482"/>
      <filter dst_port="4662" src_ip="131.233.160.136"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_300{
style=filled;
color=gray75;
986[label="145.71.97.150;d;22pkt 22fpkt", shape=diamond, color=yellow];
1945[label="145.71.97.150;d;22pkt 22fpkt", shape=hexagon, color=black];
stat300[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.98.108.80:80, 145.71.97.150:*}[40.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.6364%)&lt;BR/&gt; 14714: (6.81818%)&lt;BR/&gt; 33439: (2.27273%)&lt;BR/&gt; 33438: (2.27273%)&lt;BR/&gt; 33436: (2.27273%)&gt;];
}
986--1945[label="1;22pkt 22fpkt"];
986--2103[label="0.0454545;1pkt 1fpkt"];
1945--2103[label="0.0454545;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.71.97.150" src_ip="57.98.108.80" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
584[label="218.80.49.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
1946[label="218.80.49.20;s;1pkt 1fpkt", shape=hexagon, color=black];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.80.49.20:8881, 149.207.217.197:3555}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8881: (50%)&lt;BR/&gt; 3555: (50%)&gt;];
}
584--1644[label="1;1pkt 1fpkt"];
584--1946[label="1;1pkt 1fpkt"];
584--2061[label="1;1pkt 1fpkt"];
1946--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="3555" src_ip="218.80.49.20" src_port="8881"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
1107[label="56.33.159.162;s;667pkt 667fpkt", shape=diamond, color=yellow];
1948[label="56.33.159.162;s;549pkt 549fpkt", shape=hexagon, color=black];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.33.159.162:0, *:0}[97.1514%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.2862%)&lt;BR/&gt; 80: (1.35691%)&lt;BR/&gt; 63566: (0.0822368%)&lt;BR/&gt; 45887: (0.0822368%)&lt;BR/&gt; 42793: (0.0822368%)&gt;];
}
1107--1948[label="1;549pkt 549fpkt"];
1107--2105[label="0.00149925;1pkt 1fpkt"];
1107--2107[label="0.0029985;2pkt 2fpkt"];
1107--2110[label="0.00149925;1pkt 1fpkt"];
1948--2105[label="0.00182149;1pkt 1fpkt"];
1948--2107[label="0.00182149;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="56.33.159.162"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
884[label="61.228.183.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.228.183.179:6881, 149.207.217.197:1600}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 1600: (50%)&gt;];
}
884--1644[label="1;1pkt 1fpkt"];
884--1950[label="1;1pkt 1fpkt"];
884--2061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="1600" src_ip="61.228.183.179" src_port="6881"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
1180[label="149.207.236.210;d;48pkt 48fpkt", shape=diamond, color=yellow];
1181[label="129.80.229.114;s;48pkt 48fpkt", shape=diamond, color=yellow];
1973[label="149.207.236.210;d;48pkt 48fpkt", shape=hexagon, color=black];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.80.229.114:80, 149.207.236.210:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64642: (1.04167%)&lt;BR/&gt; 64641: (1.04167%)&lt;BR/&gt; 64640: (1.04167%)&lt;BR/&gt; 64639: (1.04167%)&gt;];
}
1180--1181[label="1;48pkt 48fpkt"];
1180--1973[label="1;48pkt 48fpkt"];
1180--2103[label="0.104167;5pkt 5fpkt"];
1181--1973[label="1;48pkt 48fpkt"];
1181--2103[label="0.104167;5pkt 5fpkt"];
1973--2103[label="0.104167;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.236.210" src_ip="129.80.229.114" src_port="80"/>
    </slice>
    <from sec="1071205407" usec="0"/>
    <to sec="1071205770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
1191[label="219.45.84.20;d;6pkt 6fpkt", shape=diamond, color=yellow];
1192[label="153.114.143.229;s;7pkt 7fpkt", shape=diamond, color=yellow];
1975[label="219.45.84.20;d;6pkt 6fpkt", shape=hexagon, color=black];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.114.143.229:80, 219.45.84.20:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1988: (7.89474%)&lt;BR/&gt; 1987: (7.89474%)&lt;BR/&gt; 1968: (7.89474%)&lt;BR/&gt; 1921: (7.89474%)&gt;];
}
1191--1192[label="1;6pkt 6fpkt"];
1191--1975[label="1;6pkt 6fpkt"];
1191--2103[label="0.333333;2pkt 2fpkt"];
1192--1975[label="1;6pkt 6fpkt"];
1192--2103[label="0.285714;2pkt 2fpkt"];
1975--2103[label="0.333333;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.45.84.20" src_ip="153.114.143.229" src_port="80"/>
    </slice>
    <from sec="1071205547" usec="0"/>
    <to sec="1071205999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01378,1.65048,010,0 0 0 0 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
1978[label="219.75.32.131;s;255pkt 255fpkt", shape=hexagon, color=black];
3095[label="219.75.32.131;255pkt 255fpkt", shape=pentagon, color=darkviolet];
4422[label="219.75.32.131;255pkt 255fpkt", shape=invtriangle, color=brown];
5112[label="219.75.32.131;255pkt 255fpkt", shape=invhouse, color=bisque];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.75.32.131:*, *:139}[99.6078%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.8039%)&lt;BR/&gt; 0: (0.392157%)&lt;BR/&gt; 2123: (0.196078%)&lt;BR/&gt; 2121: (0.196078%)&lt;BR/&gt; 2119: (0.196078%)&gt;];
}
1978--3095[label="1;255pkt 255fpkt"];
1978--4422[label="1;255pkt 255fpkt"];
1978--5112[label="1;255pkt 255fpkt"];
3095--4422[label="1;255pkt 255fpkt"];
3095--5112[label="1;255pkt 255fpkt"];
4422--5112[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="219.75.32.131"/>
    </slice>
    <from sec="1071205696" usec="0"/>
    <to sec="1071205744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
675[label="58.240.77.254;s;144pkt 144fpkt", shape=diamond, color=yellow];
1051[label="201.153.90.102;s;102pkt 102fpkt", shape=diamond, color=yellow];
1989[label="149.207.194.47;d;31pkt 31fpkt", shape=hexagon, color=black];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.240.77.254:80, *:*}[52.3636%]&lt;BR/&gt;{201.153.90.102:80, 149.207.81.208:*}[33.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.639%)&lt;BR/&gt; 3644: (0.361011%)&lt;BR/&gt; 3500: (0.361011%)&lt;BR/&gt; 64642: (0.180505%)&lt;BR/&gt; 61127: (0.180505%)&gt;];
}
675--761[label="0.0555556;8pkt 8fpkt"];
675--1043[label="0.322581;10pkt 10fpkt"];
675--1176[label="0.0588235;2pkt 2fpkt"];
675--1294[label="0.00694444;1pkt 1fpkt"];
675--1645[label="0.319444;46pkt 46fpkt"];
675--1656[label="0.0138889;2pkt 2fpkt"];
675--1700[label="1;46pkt 46fpkt"];
675--1989[label="0.0322581;1pkt 1fpkt"];
675--2065[label="0.0138889;2pkt 2fpkt"];
675--2103[label="0.159722;23pkt 23fpkt"];
675--3887[label="1;144pkt 144fpkt"];
675--4860[label="1;144pkt 144fpkt"];
1051--1202[label="0.0588235;1pkt 1fpkt"];
1051--1255[label="0.021978;2pkt 2fpkt"];
1051--1819[label="0.72449;71pkt 71fpkt"];
1051--1919[label="1;102pkt 102fpkt"];
1051--1989[label="0.0322581;1pkt 1fpkt"];
1051--2103[label="0.0490196;5pkt 5fpkt"];
1051--2916[label="1;102pkt 102fpkt"];
1989--1991[label="0.0322581;1pkt 1fpkt"];
1989--2916[label="0.0322581;1pkt 1fpkt"];
1989--3374[label="0.0322581;1pkt 1fpkt"];
1989--3525[label="0.0909091;2pkt 2fpkt"];
1989--3567[label="0.684211;13pkt 13fpkt"];
1989--3887[label="0.0322581;1pkt 1fpkt"];
1989--4571[label="0.0322581;1pkt 1fpkt"];
1989--4860[label="0.0322581;1pkt 1fpkt"];
1989--5187[label="0.0322581;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="58.240.77.254" src_port="80"/>
      <filter dst_ip="149.207.81.208" src_ip="201.153.90.102" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
367[label="58.232.72.156;s;3pkt 3fpkt", shape=diamond, color=yellow];
542[label="149.207.194.47;d;31pkt 31fpkt", shape=diamond, color=yellow];
1203[label="201.229.57.202;s;6pkt 6fpkt", shape=diamond, color=yellow];
3567[label="201.229.57.202;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.229.57.202:80, 149.207.194.47:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6102%)&lt;BR/&gt; 6080: (2.54237%)&lt;BR/&gt; 64663: (1.69492%)&lt;BR/&gt; 64659: (1.69492%)&lt;BR/&gt; 64653: (1.69492%)&gt;];
}
367--542[label="0.333333;1pkt 1fpkt"];
367--587[label="1;2pkt 2fpkt"];
367--1989[label="0.333333;1pkt 1fpkt"];
367--2003[label="1;2pkt 2fpkt"];
542--675[label="0.0322581;1pkt 1fpkt"];
542--924[label="0.0322581;1pkt 1fpkt"];
542--1051[label="0.0322581;1pkt 1fpkt"];
542--1227[label="0.0322581;1pkt 1fpkt"];
542--1700[label="0.0322581;1pkt 1fpkt"];
542--1919[label="0.0322581;1pkt 1fpkt"];
542--1989[label="1;31pkt 31fpkt"];
542--1991[label="0.0322581;1pkt 1fpkt"];
542--2916[label="0.0322581;1pkt 1fpkt"];
542--3374[label="0.0322581;1pkt 1fpkt"];
542--3525[label="0.0909091;2pkt 2fpkt"];
542--3567[label="0.684211;13pkt 13fpkt"];
542--3887[label="0.0322581;1pkt 1fpkt"];
542--4571[label="0.0322581;1pkt 1fpkt"];
542--4860[label="0.0322581;1pkt 1fpkt"];
542--5187[label="0.0322581;1pkt 1fpkt"];
1203--3567[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.194.47" src_ip="201.229.57.202" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
408[label="201.118.251.52;s;2838pkt 2838fpkt", shape=diamond, color=yellow];
1995[label="201.118.251.52;s;2550pkt 2550fpkt", shape=hexagon, color=black];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.118.251.52:0, *:0}[99.8238%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8144%)&lt;BR/&gt; 80: (0.074239%)&lt;BR/&gt; 4673: (0.0185598%)&lt;BR/&gt; 4358: (0.0185598%)&lt;BR/&gt; 4325: (0.0185598%)&gt;];
}
408--1995[label="1;2550pkt 2550fpkt"];
</description>
    <slice>
      <filter src_ip="201.118.251.52"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
1345[label="210.214.193.175;s;1pkt 1fpkt", shape=diamond, color=yellow];
1998[label="210.214.193.175;s;1pkt 1fpkt", shape=hexagon, color=black];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.214.193.175:3852, 201.118.239.70:4687}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4687: (50%)&lt;BR/&gt; 3852: (50%)&gt;];
}
1345--1998[label="1;1pkt 1fpkt"];
1345--2024[label="1;1pkt 1fpkt"];
1998--2024[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.118.239.70" dst_port="4687" src_ip="210.214.193.175" src_port="3852"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06216,1.65715,010,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
718[label="149.207.117.170;d;29pkt 29fpkt", shape=diamond, color=yellow];
1349[label="32.167.215.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
1617[label="61.162.245.141;s;1pkt 1fpkt", shape=diamond, color=yellow];
2000[label="32.167.215.8;s;1pkt 1fpkt", shape=hexagon, color=black];
4895[label="32.167.215.8;1pkt 1fpkt", shape=invhouse, color=bisque];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 149.207.117.170:6882}[20.6897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6882: (16.6667%)&lt;BR/&gt; 0: (9.09091%)&lt;BR/&gt; 56417: (6.06061%)&lt;BR/&gt; 6969: (6.06061%)&lt;BR/&gt; 6921: (6.06061%)&gt;];
}
718--1349[label="1;1pkt 1fpkt"];
718--1617[label="1;1pkt 1fpkt"];
718--2000[label="1;1pkt 1fpkt"];
718--2103[label="0.0344828;1pkt 1fpkt"];
718--4895[label="1;1pkt 1fpkt"];
1349--2000[label="1;1pkt 1fpkt"];
1349--4895[label="1;1pkt 1fpkt"];
2000--4895[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.117.170" dst_port="6882"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
1099[label="201.175.60.154;d;208pkt 208fpkt", shape=diamond, color=yellow];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 201.175.60.154:33251}[62.9808%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (37.5%)&lt;BR/&gt; 33251: (31.4904%)&lt;BR/&gt; 0: (17.3077%)&lt;BR/&gt; 25: (2.16346%)&lt;BR/&gt; 80: (1.44231%)&gt;];
}
1099--1169[label="0.0181818;1pkt 1fpkt"];
1099--1263[label="0.00925926;1pkt 1fpkt"];
1099--1283[label="0.011236;1pkt 1fpkt"];
1099--1567[label="0.0625;1pkt 1fpkt"];
1099--1568[label="0.0625;1pkt 1fpkt"];
1099--1967[label="0.02;1pkt 1fpkt"];
1099--2013[label="0.011236;1pkt 1fpkt"];
1099--2039[label="0.0625;1pkt 1fpkt"];
1099--2294[label="0.0149254;1pkt 1fpkt"];
1099--2298[label="0.0416667;1pkt 1fpkt"];
1099--2301[label="0.0277778;1pkt 1fpkt"];
1099--2668[label="0.0263158;1pkt 1fpkt"];
1099--2705[label="0.0185185;1pkt 1fpkt"];
1099--2714[label="0.0142857;1pkt 1fpkt"];
1099--2765[label="0.025;1pkt 1fpkt"];
1099--2808[label="0.0217391;1pkt 1fpkt"];
1099--3015[label="0.02;1pkt 1fpkt"];
1099--3224[label="0.05;1pkt 1fpkt"];
1099--3802[label="0.037037;1pkt 1fpkt"];
1099--3858[label="0.0172414;1pkt 1fpkt"];
1099--3998[label="0.0147059;1pkt 1fpkt"];
1099--4079[label="0.0833333;1pkt 1fpkt"];
1099--4226[label="0.0185185;1pkt 1fpkt"];
1099--4280[label="0.0217391;1pkt 1fpkt"];
1099--4381[label="0.02;1pkt 1fpkt"];
1099--4479[label="0.05;1pkt 1fpkt"];
1099--4847[label="0.0172414;1pkt 1fpkt"];
1099--4919[label="0.0149254;1pkt 1fpkt"];
1099--5097[label="0.02;1pkt 1fpkt"];
1099--5328[label="0.0172414;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.175.60.154" dst_port="33251" src_port="53"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
1359[label="153.54.7.56;s;1pkt 1fpkt", shape=diamond, color=yellow];
2005[label="153.54.7.56;s;1pkt 1fpkt", shape=hexagon, color=black];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.54.7.56:6000, 211.106.15.15:3471}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6000: (50%)&lt;BR/&gt; 3471: (50%)&gt;];
}
1359--2005[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.106.15.15" dst_port="3471" src_ip="153.54.7.56" src_port="6000"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889707,1.5466,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
740[label="213.53.190.122;s;2pkt 2fpkt", shape=diamond, color=yellow];
2007[label="213.53.190.122;s;2pkt 2fpkt", shape=hexagon, color=black];
3045[label="213.53.190.122;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4395[label="213.53.190.122;1pkt 1fpkt", shape=invtriangle, color=brown];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.53.190.122:9240, 149.207.40.88:1763}[50%]&lt;BR/&gt;{213.53.190.122:9240, 149.207.40.88:4495}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9240: (50%)&lt;BR/&gt; 1763: (33.3333%)&lt;BR/&gt; 4495: (16.6667%)&gt;];
}
740--2007[label="1;2pkt 2fpkt"];
740--3045[label="1;1pkt 1fpkt"];
740--4395[label="1;1pkt 1fpkt"];
2007--3045[label="1;1pkt 1fpkt"];
2007--4395[label="1;1pkt 1fpkt"];
3045--4395[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.40.88" dst_port="4495" src_ip="213.53.190.122" src_port="9240"/>
      <filter dst_ip="149.207.40.88" dst_port="1763" src_ip="213.53.190.122" src_port="9240"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
1007[label="209.164.177.192;s;279pkt 279fpkt", shape=diamond, color=yellow];
2010[label="209.164.177.192;s;278pkt 278fpkt", shape=hexagon, color=black];
3508[label="209.164.177.192;286pkt 286fpkt", shape=pentagon, color=darkviolet];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.164.177.192:*, *:135}[50%]&lt;BR/&gt;{209.164.177.192:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.0297%)&lt;BR/&gt; 445: (24.9703%)&lt;BR/&gt; 4821: (0.355872%)&lt;BR/&gt; 2529: (0.355872%)&lt;BR/&gt; 2096: (0.355872%)&gt;];
}
1007--2010[label="1;278pkt 278fpkt"];
1007--2106[label="0.0286738;8pkt 8fpkt"];
1007--2108[label="0.0537634;15pkt 15fpkt"];
1007--2111[label="0.00358423;1pkt 1fpkt"];
1007--2123[label="0.0537634;15pkt 15fpkt"];
1007--2125[label="0.00358423;1pkt 1fpkt"];
1007--2130[label="0.0537634;15pkt 15fpkt"];
1007--2131[label="0.00358423;1pkt 1fpkt"];
1007--3508[label="1;279pkt 279fpkt"];
2010--2106[label="0.028777;8pkt 8fpkt"];
2010--2108[label="0.0539568;15pkt 15fpkt"];
2010--2123[label="0.0539568;15pkt 15fpkt"];
2010--2130[label="0.0539568;15pkt 15fpkt"];
2010--3508[label="1;278pkt 278fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="209.164.177.192"/>
      <filter dst_port="135" src_ip="209.164.177.192"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_320{
style=filled;
color=gray75;
1163[label="149.206.104.33;d;11pkt 11fpkt", shape=diamond, color=yellow];
stat320[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.67.144.200:80, 149.206.104.33:*}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 2105: (4.54545%)&lt;BR/&gt; 2104: (4.54545%)&lt;BR/&gt; 2103: (4.54545%)&lt;BR/&gt; 2102: (4.54545%)&gt;];
}
1163--2015[label="0.909091;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.104.33" src_ip="58.67.144.200" src_port="80"/>
    </slice>
    <from sec="1071205224" usec="0"/>
    <to sec="1071206020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
1264[label="192.108.226.156;s;52pkt 52fpkt", shape=diamond, color=yellow];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.108.226.156:80, 145.71.33.234:*}[48.0769%]&lt;BR/&gt;{192.108.226.156:80, 145.71.33.206:*}[42.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 26992: (0.961538%)&lt;BR/&gt; 3690: (0.961538%)&lt;BR/&gt; 3648: (0.961538%)&lt;BR/&gt; 3632: (0.961538%)&gt;];
}
1264--1803[label="0.269231;14pkt 14fpkt"];
1264--2103[label="0.0961538;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="145.71.33.234" src_ip="192.108.226.156" src_port="80"/>
      <filter dst_ip="145.71.33.206" src_ip="192.108.226.156" src_port="80"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
500[label="145.166.3.193;d;635pkt 635fpkt", shape=diamond, color=yellow];
777[label="149.207.88.172;d;162pkt 162fpkt", shape=diamond, color=yellow];
1123[label="149.207.210.16;d;65pkt 65fpkt", shape=diamond, color=yellow];
1166[label="207.130.97.26;s;165pkt 165fpkt", shape=diamond, color=yellow];
1414[label="59.26.0.27;s;27pkt 27fpkt", shape=diamond, color=yellow];
1692[label="145.166.3.193;d;274pkt 274fpkt", shape=hexagon, color=black];
2017[label="59.26.0.27;s;24pkt 24fpkt", shape=hexagon, color=black];
2337[label="207.130.97.26;188pkt 188fpkt", shape=pentagon, color=darkviolet];
2339[label="59.26.0.27;27pkt 27fpkt", shape=pentagon, color=darkviolet];
2524[label="208.137.77.48;32pkt 32fpkt", shape=pentagon, color=darkviolet];
2560[label="205.86.141.52;30pkt 30fpkt", shape=pentagon, color=darkviolet];
2615[label="208.137.77.60;36pkt 36fpkt", shape=pentagon, color=darkviolet];
2650[label="205.96.216.64;33pkt 33fpkt", shape=pentagon, color=darkviolet];
3630[label="217.195.41.212;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3778[label="57.62.33.233;43pkt 43fpkt", shape=pentagon, color=darkviolet];
4023[label="207.130.97.26;188pkt 188fpkt", shape=invtriangle, color=brown];
4126[label="208.137.77.48;32pkt 32fpkt", shape=invtriangle, color=brown];
4177[label="208.137.77.60;35pkt 35fpkt", shape=invtriangle, color=brown];
4798[label="57.62.33.233;43pkt 43fpkt", shape=invtriangle, color=brown];
4930[label="207.130.97.26;187pkt 187fpkt", shape=invhouse, color=bisque];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 145.166.3.193:*}[55.0483%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.8368%)&lt;BR/&gt; 113: (0.914362%)&lt;BR/&gt; 0: (0.267618%)&lt;BR/&gt; 1131: (0.245317%)&lt;BR/&gt; 1458: (0.223015%)&gt;];
}
500--985[label="0.486486;36pkt 36fpkt"];
500--1159[label="0.0408163;2pkt 2fpkt"];
500--1166[label="0.278788;46pkt 46fpkt"];
500--1414[label="0.037037;1pkt 1fpkt"];
500--1419[label="0.282051;11pkt 11fpkt"];
500--1692[label="1;274pkt 274fpkt"];
500--2017[label="0.0416667;1pkt 1fpkt"];
500--2337[label="0.244681;46pkt 46fpkt"];
500--2339[label="0.037037;1pkt 1fpkt"];
500--2524[label="0.21875;7pkt 7fpkt"];
500--2560[label="0.966667;29pkt 29fpkt"];
500--2615[label="0.305556;11pkt 11fpkt"];
500--2650[label="0.151515;5pkt 5fpkt"];
500--2772[label="0.275;11pkt 11fpkt"];
500--2955[label="0.205882;7pkt 7fpkt"];
500--2991[label="0.0392157;2pkt 2fpkt"];
500--3189[label="0.0588235;1pkt 1fpkt"];
500--3201[label="0.0526316;1pkt 1fpkt"];
500--3630[label="0.4375;7pkt 7fpkt"];
500--3778[label="0.418605;18pkt 18fpkt"];
500--3882[label="0.012987;1pkt 1fpkt"];
500--3896[label="0.404494;36pkt 36fpkt"];
500--4023[label="0.244681;46pkt 46fpkt"];
500--4126[label="0.21875;7pkt 7fpkt"];
500--4177[label="0.314286;11pkt 11fpkt"];
500--4262[label="0.275;11pkt 11fpkt"];
500--4351[label="0.205882;7pkt 7fpkt"];
500--4368[label="0.0392157;2pkt 2fpkt"];
500--4798[label="0.418605;18pkt 18fpkt"];
500--4930[label="0.245989;46pkt 46fpkt"];
500--5050[label="0.275;11pkt 11fpkt"];
500--5085[label="0.205882;7pkt 7fpkt"];
777--2615[label="0.0833333;3pkt 3fpkt"];
777--2779[label="0.111111;1pkt 1fpkt"];
777--4177[label="0.0857143;3pkt 3fpkt"];
1123--2615[label="0.0277778;1pkt 1fpkt"];
1123--4177[label="0.0285714;1pkt 1fpkt"];
1166--1685[label="0.10303;17pkt 17fpkt"];
1166--1692[label="0.133333;22pkt 22fpkt"];
1166--2337[label="1;165pkt 165fpkt"];
1166--4023[label="1;165pkt 165fpkt"];
1166--4930[label="0.993939;164pkt 164fpkt"];
1414--1692[label="0.037037;1pkt 1fpkt"];
1414--1896[label="0.185185;5pkt 5fpkt"];
1414--2017[label="1;24pkt 24fpkt"];
1414--2339[label="1;27pkt 27fpkt"];
1692--2017[label="0.0416667;1pkt 1fpkt"];
1692--2337[label="0.117021;22pkt 22fpkt"];
1692--2339[label="0.037037;1pkt 1fpkt"];
1692--2524[label="0.125;4pkt 4fpkt"];
1692--2560[label="0.966667;29pkt 29fpkt"];
1692--2615[label="0.0833333;3pkt 3fpkt"];
1692--2650[label="0.0909091;3pkt 3fpkt"];
1692--2772[label="0.05;2pkt 2fpkt"];
1692--2955[label="0.0588235;2pkt 2fpkt"];
1692--2991[label="0.0392157;2pkt 2fpkt"];
1692--3189[label="0.0588235;1pkt 1fpkt"];
1692--3201[label="0.0526316;1pkt 1fpkt"];
1692--3630[label="0.125;2pkt 2fpkt"];
1692--3778[label="0.232558;10pkt 10fpkt"];
1692--3896[label="0.168539;15pkt 15fpkt"];
1692--4023[label="0.117021;22pkt 22fpkt"];
1692--4126[label="0.125;4pkt 4fpkt"];
1692--4177[label="0.0857143;3pkt 3fpkt"];
1692--4262[label="0.05;2pkt 2fpkt"];
1692--4351[label="0.0588235;2pkt 2fpkt"];
1692--4368[label="0.0392157;2pkt 2fpkt"];
1692--4798[label="0.232558;10pkt 10fpkt"];
1692--4930[label="0.117647;22pkt 22fpkt"];
1692--5050[label="0.05;2pkt 2fpkt"];
1692--5085[label="0.0588235;2pkt 2fpkt"];
2017--2339[label="1;24pkt 24fpkt"];
2337--4023[label="1;188pkt 188fpkt"];
2337--4930[label="1;187pkt 187fpkt"];
2524--4126[label="1;32pkt 32fpkt"];
2615--4177[label="1;35pkt 35fpkt"];
3778--4798[label="1;43pkt 43fpkt"];
4023--4930[label="1;187pkt 187fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.3.193" src_port="25"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889707,1.5466,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
497[label="149.207.6.92;d;153pkt 153fpkt", shape=diamond, color=yellow];
502[label="78.45.136.210;s;138pkt 138fpkt", shape=diamond, color=yellow];
1743[label="149.207.6.92;d;153pkt 153fpkt", shape=hexagon, color=black];
1858[label="78.45.136.210;s;138pkt 138fpkt", shape=hexagon, color=black];
2021[label="149.207.244.44;d;89pkt 89fpkt", shape=hexagon, color=black];
2527[label="78.45.136.48;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4129[label="78.45.136.48;17pkt 17fpkt", shape=invtriangle, color=brown];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.45.136.210:80, 149.207.6.92:*}[48.8372%]&lt;BR/&gt;{*:80, 149.207.244.44:*}[34.4961%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.078%)&lt;BR/&gt; 53: (1.77305%)&lt;BR/&gt; 1582: (0.496454%)&lt;BR/&gt; 1556: (0.496454%)&lt;BR/&gt; 1502: (0.496454%)&gt;];
}
497--502[label="0.913043;126pkt 126fpkt"];
497--1120[label="0.0119048;1pkt 1fpkt"];
497--1263[label="0.00925926;1pkt 1fpkt"];
497--1420[label="0.0606061;2pkt 2fpkt"];
497--1743[label="1;153pkt 153fpkt"];
497--1858[label="0.913043;126pkt 126fpkt"];
497--2527[label="0.411765;7pkt 7fpkt"];
497--2988[label="0.0263158;1pkt 1fpkt"];
497--4129[label="0.411765;7pkt 7fpkt"];
502--1185[label="0.0362319;5pkt 5fpkt"];
502--1645[label="0.0362319;5pkt 5fpkt"];
502--1743[label="0.913043;126pkt 126fpkt"];
502--1858[label="1;138pkt 138fpkt"];
502--2021[label="0.0561798;5pkt 5fpkt"];
1743--1858[label="0.913043;126pkt 126fpkt"];
1743--2527[label="0.411765;7pkt 7fpkt"];
1743--2988[label="0.0263158;1pkt 1fpkt"];
1743--4129[label="0.411765;7pkt 7fpkt"];
1858--2021[label="0.0561798;5pkt 5fpkt"];
2021--2103[label="0.101124;9pkt 9fpkt"];
2021--2527[label="0.0588235;1pkt 1fpkt"];
2021--2540[label="0.0357143;1pkt 1fpkt"];
2021--3442[label="0.0114943;1pkt 1fpkt"];
2021--3448[label="0.011236;1pkt 1fpkt"];
2021--3461[label="0.454545;5pkt 5fpkt"];
2021--3678[label="0.011236;1pkt 1fpkt"];
2021--3722[label="0.0224719;2pkt 2fpkt"];
2021--3775[label="0.105263;2pkt 2fpkt"];
2021--3799[label="0.0163934;1pkt 1fpkt"];
2021--4129[label="0.0588235;1pkt 1fpkt"];
2021--4609[label="0.0114943;1pkt 1fpkt"];
2021--4612[label="0.011236;1pkt 1fpkt"];
2021--4736[label="0.011236;1pkt 1fpkt"];
2021--4810[label="0.0163934;1pkt 1fpkt"];
2021--5204[label="0.0114943;1pkt 1fpkt"];
2021--5205[label="0.011236;1pkt 1fpkt"];
2021--5310[label="0.0163934;1pkt 1fpkt"];
2527--4129[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.244.44" src_port="80"/>
      <filter dst_ip="149.207.6.92" src_ip="78.45.136.210" src_port="80"/>
    </slice>
    <from sec="1071205224" usec="0"/>
    <to sec="1071205950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
1201[label="149.206.203.44;d;18pkt 18fpkt", shape=diamond, color=yellow];
1204[label="204.25.10.5;s;9pkt 9fpkt", shape=diamond, color=yellow];
2022[label="149.206.203.44;d;18pkt 18fpkt", shape=hexagon, color=black];
3325[label="57.0.170.166;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.25.10.5:80, 149.206.203.44:*}[50%]&lt;BR/&gt;{77.73.11.181:80, 149.206.203.44:*}[38.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4633: (3.19149%)&lt;BR/&gt; 4632: (3.19149%)&lt;BR/&gt; 4631: (3.19149%)&lt;BR/&gt; 4627: (3.19149%)&gt;];
}
1201--1204[label="1;9pkt 9fpkt"];
1201--2022[label="1;18pkt 18fpkt"];
1201--2103[label="0.111111;2pkt 2fpkt"];
1201--3325[label="1;2pkt 2fpkt"];
1204--2022[label="1;9pkt 9fpkt"];
2022--2103[label="0.111111;2pkt 2fpkt"];
2022--3325[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.203.44" src_ip="204.25.10.5" src_port="80"/>
      <filter dst_ip="149.206.203.44" src_ip="77.73.11.181" src_port="80"/>
    </slice>
    <from sec="1071205645" usec="0"/>
    <to sec="1071205817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_325{
style=filled;
color=gray75;
309[label="213.97.224.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
2025[label="213.97.224.111;s;1pkt 1fpkt", shape=hexagon, color=black];
stat325[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.97.224.111:4662, 166.55.179.5:3548}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 3548: (50%)&gt;];
}
309--2025[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.179.5" dst_port="3548" src_ip="213.97.224.111" src_port="4662"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
437[label="145.108.141.42;s;5621pkt 5621fpkt", shape=diamond, color=yellow];
848[label="59.144.133.77;d;1pkt 1fpkt", shape=diamond, color=yellow];
2030[label="145.108.141.42;s;5621pkt 5621fpkt", shape=hexagon, color=black];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.108.141.42:0, *:0}[99.8577%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8577%)&lt;BR/&gt; 49612: (0.0711554%)&lt;BR/&gt; 53: (0.0711554%)&gt;];
}
437--848[label="1;1pkt 1fpkt"];
437--2030[label="1;5621pkt 5621fpkt"];
848--2030[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="145.108.141.42"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
1245[label="198.246.176.202;d;26pkt 26fpkt", shape=diamond, color=yellow];
2031[label="131.233.180.6;s;28pkt 28fpkt", shape=hexagon, color=black];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.180.6:*, 198.246.176.202:80}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54785: (1.85185%)&lt;BR/&gt; 54784: (1.85185%)&lt;BR/&gt; 54783: (1.85185%)&lt;BR/&gt; 54782: (1.85185%)&gt;];
}
1245--1246[label="1;26pkt 26fpkt"];
1245--2031[label="1;26pkt 26fpkt"];
1245--2105[label="0.115385;3pkt 3fpkt"];
1245--2107[label="0.0384615;1pkt 1fpkt"];
2031--2105[label="0.107143;3pkt 3fpkt"];
2031--2107[label="0.0357143;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.246.176.202" dst_port="80" src_ip="131.233.180.6"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.763022,1.60942,999,0 0 0 0 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
1738[label="149.206.20.17;d;188pkt 188fpkt", shape=hexagon, color=black];
3430[label="78.219.173.179;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3744[label="101.171.2.226;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 149.206.20.17:25}[60.1064%]&lt;BR/&gt;{*:25, 149.206.20.17:*}[36.1702%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.2927%)&lt;BR/&gt; 52702: (0.97561%)&lt;BR/&gt; 53: (0.97561%)&lt;BR/&gt; 4410: (0.731707%)&lt;BR/&gt; 113: (0.731707%)&gt;];
}
1738--2400[label="1;10pkt 10fpkt"];
1738--2690[label="0.833333;5pkt 5fpkt"];
1738--2981[label="0.111111;2pkt 2fpkt"];
1738--2991[label="0.0196078;1pkt 1fpkt"];
1738--3201[label="0.0526316;1pkt 1fpkt"];
1738--3249[label="0.0535714;3pkt 3fpkt"];
1738--3430[label="1;3pkt 3fpkt"];
1738--3533[label="0.0555556;1pkt 1fpkt"];
1738--3744[label="1;14pkt 14fpkt"];
1738--4056[label="1;10pkt 10fpkt"];
1738--4217[label="0.833333;5pkt 5fpkt"];
1738--4368[label="0.0196078;1pkt 1fpkt"];
1738--4654[label="0.0555556;1pkt 1fpkt"];
1738--4777[label="1;14pkt 14fpkt"];
1738--5020[label="0.0232558;1pkt 1fpkt"];
1738--5228[label="0.0555556;1pkt 1fpkt"];
3744--4777[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.20.17" src_port="25"/>
      <filter dst_ip="149.206.20.17" dst_port="25"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071205508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
990[label="205.1.232.84;s;96pkt 96fpkt", shape=diamond, color=yellow];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.232.84:80, 201.120.100.98:*}[29.1667%]&lt;BR/&gt;{205.1.232.84:80, 201.136.96.131:*}[29.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64176: (0.520833%)&lt;BR/&gt; 64060: (0.520833%)&lt;BR/&gt; 64055: (0.520833%)&lt;BR/&gt; 64051: (0.520833%)&gt;];
}
990--1645[label="0.0104167;1pkt 1fpkt"];
990--1656[label="0.125;12pkt 12fpkt"];
990--1698[label="0.0104167;1pkt 1fpkt"];
990--1897[label="1;96pkt 96fpkt"];
990--2046[label="0.0666667;1pkt 1fpkt"];
990--2065[label="0.0208333;2pkt 2fpkt"];
990--2103[label="0.0520833;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="201.136.96.131" src_ip="205.1.232.84" src_port="80"/>
      <filter dst_ip="201.120.100.98" src_ip="205.1.232.84" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
1624[label="149.206.251.73;d;25pkt 25fpkt", shape=diamond, color=yellow];
2052[label="149.206.251.73;d;25pkt 25fpkt", shape=hexagon, color=black];
2221[label="77.42.229.9;53pkt 53fpkt", shape=pentagon, color=darkviolet];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.42.229.9:80, 166.55.49.145:*}[67.5325%]&lt;BR/&gt;{212.147.50.2:80, 149.206.251.73:*}[31.1688%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1697: (1.45631%)&lt;BR/&gt; 1692: (0.970874%)&lt;BR/&gt; 1691: (0.970874%)&lt;BR/&gt; 1690: (0.970874%)&gt;];
}
1624--1625[label="1;24pkt 24fpkt"];
1624--2052[label="1;25pkt 25fpkt"];
1624--2221[label="0.04;1pkt 1fpkt"];
2052--2221[label="0.04;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.49.145" src_ip="77.42.229.9" src_port="80"/>
      <filter dst_ip="149.206.251.73" src_ip="212.147.50.2" src_port="80"/>
    </slice>
    <from sec="1071205272" usec="0"/>
    <to sec="1071206055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
380[label="78.45.49.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
566[label="78.40.138.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
679[label="218.157.13.150;s;1pkt 1fpkt", shape=diamond, color=yellow];
703[label="220.25.74.205;s;1pkt 1fpkt", shape=diamond, color=yellow];
731[label="211.114.71.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
735[label="78.45.194.28;s;1pkt 1fpkt", shape=diamond, color=yellow];
858[label="221.12.212.45;s;1pkt 1fpkt", shape=diamond, color=yellow];
865[label="218.53.87.102;s;1pkt 1fpkt", shape=diamond, color=yellow];
887[label="218.89.132.118;s;1pkt 1fpkt", shape=diamond, color=yellow];
901[label="218.77.198.6;s;1pkt 1fpkt", shape=diamond, color=yellow];
975[label="218.64.30.23;s;1pkt 1fpkt", shape=diamond, color=yellow];
1122[label="218.159.20.151;s;1pkt 1fpkt", shape=diamond, color=yellow];
1128[label="221.0.125.128;s;1pkt 1fpkt", shape=diamond, color=yellow];
1137[label="219.75.42.47;s;7pkt 7fpkt", shape=diamond, color=yellow];
1376[label="78.116.11.175;s;1pkt 1fpkt", shape=diamond, color=yellow];
1381[label="218.146.148.93;s;1pkt 1fpkt", shape=diamond, color=yellow];
1538[label="78.56.235.87;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6881, 149.207.217.197:*}[33.3333%]&lt;BR/&gt;{219.75.42.47:0, *:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (25%)&lt;BR/&gt; 6881: (16.6667%)&lt;BR/&gt; 8881: (8.33333%)&lt;BR/&gt; 8885: (4.16667%)&lt;BR/&gt; 8886: (2.08333%)&gt;];
}
380--1644[label="1;1pkt 1fpkt"];
380--2061[label="1;1pkt 1fpkt"];
566--1644[label="1;1pkt 1fpkt"];
566--2061[label="1;1pkt 1fpkt"];
679--1644[label="1;1pkt 1fpkt"];
679--2061[label="1;1pkt 1fpkt"];
703--1644[label="1;1pkt 1fpkt"];
703--2061[label="1;1pkt 1fpkt"];
731--1644[label="1;1pkt 1fpkt"];
731--2061[label="1;1pkt 1fpkt"];
735--1644[label="1;1pkt 1fpkt"];
735--2061[label="1;1pkt 1fpkt"];
858--1644[label="1;1pkt 1fpkt"];
858--2061[label="1;1pkt 1fpkt"];
865--1644[label="1;1pkt 1fpkt"];
865--2061[label="1;1pkt 1fpkt"];
887--1644[label="1;1pkt 1fpkt"];
887--2061[label="1;1pkt 1fpkt"];
901--1644[label="1;1pkt 1fpkt"];
901--2061[label="1;1pkt 1fpkt"];
975--1644[label="1;1pkt 1fpkt"];
975--2061[label="1;1pkt 1fpkt"];
1122--1644[label="1;1pkt 1fpkt"];
1122--2061[label="1;1pkt 1fpkt"];
1128--1644[label="1;1pkt 1fpkt"];
1128--2061[label="1;1pkt 1fpkt"];
1137--1644[label="0.142857;1pkt 1fpkt"];
1137--1909[label="1;7pkt 7fpkt"];
1137--2061[label="0.142857;1pkt 1fpkt"];
1376--1644[label="1;1pkt 1fpkt"];
1376--2061[label="1;1pkt 1fpkt"];
1381--1644[label="1;1pkt 1fpkt"];
1381--2061[label="1;1pkt 1fpkt"];
1538--1644[label="1;2pkt 2fpkt"];
1538--2061[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" src_port="6881"/>
      <filter src_ip="219.75.42.47"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
796[label="154.227.86.84;s;67pkt 67fpkt", shape=diamond, color=yellow];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.227.86.84:80, 149.206.22.49:*}[53.7313%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64785: (0.746269%)&lt;BR/&gt; 64784: (0.746269%)&lt;BR/&gt; 64750: (0.746269%)&lt;BR/&gt; 64745: (0.746269%)&gt;];
}
796--844[label="0.164179;11pkt 11fpkt"];
796--1687[label="0.0895522;6pkt 6fpkt"];
796--1688[label="0.0597015;4pkt 4fpkt"];
796--1915[label="1;56pkt 56fpkt"];
796--2068[label="0.0597015;4pkt 4fpkt"];
796--2103[label="0.313433;21pkt 21fpkt"];
796--2792[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.22.49" src_ip="154.227.86.84" src_port="80"/>
    </slice>
    <from sec="1071205230" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,011,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_346{
style=filled;
color=gray75;
531[label="78.45.131.61;s;3054pkt 3054fpkt", shape=diamond, color=yellow];
615[label="57.252.118.29;s;47pkt 47fpkt", shape=diamond, color=yellow];
632[label="205.87.56.163;s;35pkt 35fpkt", shape=diamond, color=yellow];
635[label="205.87.61.224;s;150pkt 150fpkt", shape=diamond, color=yellow];
636[label="166.55.55.10;d;43pkt 43fpkt", shape=diamond, color=yellow];
662[label="212.147.37.33;s;2pkt 2fpkt", shape=diamond, color=yellow];
903[label="149.207.51.27;d;112pkt 112fpkt", shape=diamond, color=yellow];
908[label="200.172.237.8;s;5pkt 5fpkt", shape=diamond, color=yellow];
909[label="149.207.40.64;d;59pkt 59fpkt", shape=diamond, color=yellow];
935[label="149.206.250.157;d;21pkt 21fpkt", shape=diamond, color=yellow];
969[label="58.67.161.179;s;191pkt 191fpkt", shape=diamond, color=yellow];
991[label="149.206.51.196;d;81pkt 81fpkt", shape=diamond, color=yellow];
1014[label="145.166.3.99;d;52pkt 52fpkt", shape=diamond, color=yellow];
1031[label="57.216.94.228;s;21pkt 21fpkt", shape=diamond, color=yellow];
1042[label="149.206.203.96;d;81pkt 81fpkt", shape=diamond, color=yellow];
1061[label="212.33.119.228;s;59pkt 59fpkt", shape=diamond, color=yellow];
1077[label="149.206.203.25;d;67pkt 67fpkt", shape=diamond, color=yellow];
1080[label="149.206.232.50;d;82pkt 82fpkt", shape=diamond, color=yellow];
1124[label="209.182.30.147;s;3pkt 3fpkt", shape=diamond, color=yellow];
1173[label="149.207.6.110;d;65pkt 65fpkt", shape=diamond, color=yellow];
1200[label="149.207.118.140;d;204pkt 204fpkt", shape=diamond, color=yellow];
1238[label="57.190.252.218;s;156pkt 156fpkt", shape=diamond, color=yellow];
1241[label="145.166.4.197;d;11pkt 11fpkt", shape=diamond, color=yellow];
1281[label="205.1.233.92;s;146pkt 146fpkt", shape=diamond, color=yellow];
1286[label="201.120.102.4;d;136pkt 136fpkt", shape=diamond, color=yellow];
1500[label="211.245.82.190;s;70pkt 70fpkt", shape=diamond, color=yellow];
1532[label="205.1.226.64;s;6pkt 6fpkt", shape=diamond, color=yellow];
1547[label="207.3.32.57;s;52pkt 52fpkt", shape=diamond, color=yellow];
1586[label="198.106.181.18;s;1pkt 1fpkt", shape=diamond, color=yellow];
1597[label="149.207.6.32;d;16pkt 16fpkt", shape=diamond, color=yellow];
1813[label="205.87.56.163;s;30pkt 30fpkt", shape=hexagon, color=black];
1835[label="78.45.131.61;s;2067pkt 2067fpkt", shape=hexagon, color=black];
1837[label="58.67.161.179;s;191pkt 191fpkt", shape=hexagon, color=black];
1872[label="149.206.203.25;d;67pkt 67fpkt", shape=hexagon, color=black];
2354[label="212.147.50.28;24pkt 24fpkt", shape=pentagon, color=darkviolet];
2468[label="205.1.42.40;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2496[label="218.61.165.44;83pkt 83fpkt", shape=pentagon, color=darkviolet];
2651[label="205.1.226.64;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2688[label="57.190.248.69;11pkt 11fpkt", shape=pentagon, color=darkviolet];
2695[label="59.118.34.71;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3312[label="219.81.119.163;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3554[label="58.240.77.200;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3602[label="198.104.119.208;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3878[label="205.1.41.252;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4216[label="57.190.248.69;11pkt 11fpkt", shape=invtriangle, color=brown];
5029[label="57.190.248.69;11pkt 11fpkt", shape=invhouse, color=bisque];
stat346[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.45.131.61:7000, *:*}[30.7832%]&lt;BR/&gt;{78.45.131.61:80, *:*}[30.7026%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.5744%)&lt;BR/&gt; 7000: (16.9058%)&lt;BR/&gt; 5050: (0.138194%)&lt;BR/&gt; 0: (0.105291%)&lt;BR/&gt; 50980: (0.0658068%)&gt;];
}
531--621[label="0.00847458;1pkt 1fpkt"];
531--893[label="0.0116279;2pkt 2fpkt"];
531--1835[label="1;2067pkt 2067fpkt"];
531--2103[label="0.0242305;74pkt 74fpkt"];
615--2103[label="0.0212766;1pkt 1fpkt"];
632--1813[label="1;30pkt 30fpkt"];
632--2103[label="0.0857143;3pkt 3fpkt"];
635--764[label="0.0847458;5pkt 5fpkt"];
635--769[label="0.1;12pkt 12fpkt"];
635--818[label="0.21374;28pkt 28fpkt"];
635--935[label="0.571429;12pkt 12fpkt"];
635--1010[label="0.0325203;4pkt 4fpkt"];
635--1077[label="0.41791;28pkt 28fpkt"];
635--1470[label="0.310345;9pkt 9fpkt"];
635--1631[label="0.129032;4pkt 4fpkt"];
635--1645[label="0.00666667;1pkt 1fpkt"];
635--1746[label="0.210526;12pkt 12fpkt"];
635--1823[label="0.571429;12pkt 12fpkt"];
635--1872[label="0.41791;28pkt 28fpkt"];
635--1961[label="0.101695;12pkt 12fpkt"];
635--2103[label="0.153333;23pkt 23fpkt"];
636--662[label="1;2pkt 2fpkt"];
636--2103[label="0.139535;6pkt 6fpkt"];
636--2354[label="0.916667;22pkt 22fpkt"];
903--1426[label="0.0123457;1pkt 1fpkt"];
903--1804[label="0.0446429;5pkt 5fpkt"];
903--1806[label="1;108pkt 108fpkt"];
903--2103[label="0.0892857;10pkt 10fpkt"];
903--2303[label="0.0588235;2pkt 2fpkt"];
903--3337[label="0.6875;77pkt 77fpkt"];
903--3364[label="0.0714286;8pkt 8fpkt"];
903--3749[label="0.0104167;1pkt 1fpkt"];
903--3890[label="0.0428571;3pkt 3fpkt"];
903--4003[label="0.0571429;2pkt 2fpkt"];
903--4780[label="0.0104167;1pkt 1fpkt"];
903--5295[label="0.0104167;1pkt 1fpkt"];
908--2103[label="0.4;2pkt 2fpkt"];
909--1574[label="0.0169492;1pkt 1fpkt"];
909--1887[label="0.40678;24pkt 24fpkt"];
909--1913[label="1;59pkt 59fpkt"];
909--2103[label="0.0338983;2pkt 2fpkt"];
909--3704[label="0.894737;34pkt 34fpkt"];
909--4749[label="0.894737;34pkt 34fpkt"];
935--1800[label="0.190476;4pkt 4fpkt"];
935--1823[label="1;21pkt 21fpkt"];
935--2103[label="0.190476;4pkt 4fpkt"];
969--1042[label="0.654321;53pkt 53fpkt"];
969--1080[label="0.573171;47pkt 47fpkt"];
969--1837[label="1;191pkt 191fpkt"];
969--1976[label="0.573171;47pkt 47fpkt"];
969--2103[label="0.277487;53pkt 53fpkt"];
991--1120[label="0.0123457;1pkt 1fpkt"];
991--1227[label="0.0123457;1pkt 1fpkt"];
991--1279[label="0.0128205;1pkt 1fpkt"];
991--1490[label="0.0123457;1pkt 1fpkt"];
991--1532[label="0.166667;1pkt 1fpkt"];
991--1570[label="0.02;1pkt 1fpkt"];
991--1800[label="0.0123457;1pkt 1fpkt"];
991--1849[label="1;81pkt 81fpkt"];
991--1991[label="0.0123457;1pkt 1fpkt"];
991--2103[label="0.111111;9pkt 9fpkt"];
991--2155[label="0.148148;12pkt 12fpkt"];
991--2231[label="0.5;1pkt 1fpkt"];
991--2490[label="0.0123457;1pkt 1fpkt"];
991--2508[label="0.0123457;1pkt 1fpkt"];
991--2556[label="0.0285714;1pkt 1fpkt"];
991--2651[label="0.166667;1pkt 1fpkt"];
991--2688[label="0.0909091;1pkt 1fpkt"];
991--2793[label="0.016129;1pkt 1fpkt"];
991--2811[label="0.0123457;1pkt 1fpkt"];
991--2815[label="0.0181818;1pkt 1fpkt"];
991--3106[label="0.0123457;1pkt 1fpkt"];
991--3237[label="0.0123457;1pkt 1fpkt"];
991--3374[label="0.016129;1pkt 1fpkt"];
991--3434[label="0.0357143;1pkt 1fpkt"];
991--3468[label="0.0333333;1pkt 1fpkt"];
991--3554[label="0.166667;1pkt 1fpkt"];
991--3591[label="0.0740741;6pkt 6fpkt"];
991--3722[label="0.246914;20pkt 20fpkt"];
991--3758[label="0.0714286;1pkt 1fpkt"];
991--3913[label="0.148148;12pkt 12fpkt"];
991--4216[label="0.0909091;1pkt 1fpkt"];
991--4272[label="0.016129;1pkt 1fpkt"];
991--4427[label="0.0123457;1pkt 1fpkt"];
991--4571[label="0.016129;1pkt 1fpkt"];
991--4605[label="0.0357143;1pkt 1fpkt"];
991--4788[label="0.0714286;1pkt 1fpkt"];
991--4871[label="0.148148;12pkt 12fpkt"];
991--5029[label="0.0909091;1pkt 1fpkt"];
991--5056[label="0.016129;1pkt 1fpkt"];
991--5114[label="0.0123457;1pkt 1fpkt"];
991--5187[label="0.016129;1pkt 1fpkt"];
991--5202[label="0.0357143;1pkt 1fpkt"];
991--5300[label="0.0714286;1pkt 1fpkt"];
1014--1553[label="0.0384615;2pkt 2fpkt"];
1014--1887[label="0.5;26pkt 26fpkt"];
1014--1911[label="1;48pkt 48fpkt"];
1014--2103[label="0.480769;25pkt 25fpkt"];
1014--2952[label="0.0961538;5pkt 5fpkt"];
1014--3868[label="0.25;13pkt 13fpkt"];
1014--4850[label="0.25;13pkt 13fpkt"];
1031--1937[label="0.571429;12pkt 12fpkt"];
1031--2103[label="0.0952381;2pkt 2fpkt"];
1042--1158[label="0.0123457;1pkt 1fpkt"];
1042--1549[label="0.0273973;2pkt 2fpkt"];
1042--1795[label="0.108108;4pkt 4fpkt"];
1042--1800[label="0.0123457;1pkt 1fpkt"];
1042--1837[label="0.654321;53pkt 53fpkt"];
1042--2103[label="0.135802;11pkt 11fpkt"];
1042--2793[label="0.016129;1pkt 1fpkt"];
1042--3237[label="0.0246914;2pkt 2fpkt"];
1042--3441[label="0.0123457;1pkt 1fpkt"];
1042--3512[label="0.025641;2pkt 2fpkt"];
1042--4272[label="0.016129;1pkt 1fpkt"];
1042--5056[label="0.016129;1pkt 1fpkt"];
1061--2103[label="0.322034;19pkt 19fpkt"];
1077--1872[label="1;67pkt 67fpkt"];
1077--2103[label="0.238806;16pkt 16fpkt"];
1077--3722[label="0.0597015;4pkt 4fpkt"];
1080--1158[label="0.0243902;2pkt 2fpkt"];
1080--1837[label="0.573171;47pkt 47fpkt"];
1080--1976[label="1;82pkt 82fpkt"];
1080--2103[label="0.865854;71pkt 71fpkt"];
1080--2268[label="0.0322581;2pkt 2fpkt"];
1080--2788[label="0.0178571;1pkt 1fpkt"];
1080--2811[label="0.109756;9pkt 9fpkt"];
1080--3433[label="0.0392157;2pkt 2fpkt"];
1080--3441[label="0.0243902;2pkt 2fpkt"];
1080--3471[label="0.0208333;1pkt 1fpkt"];
1080--3535[label="0.0952381;2pkt 2fpkt"];
1080--4604[label="0.0392157;2pkt 2fpkt"];
1080--4622[label="0.0208333;1pkt 1fpkt"];
1080--5209[label="0.0208333;1pkt 1fpkt"];
1124--2103[label="0.333333;1pkt 1fpkt"];
1173--1969[label="1;56pkt 56fpkt"];
1173--2103[label="0.0307692;2pkt 2fpkt"];
1173--2868[label="0.333333;2pkt 2fpkt"];
1173--3337[label="0.353846;23pkt 23fpkt"];
1173--3374[label="0.0322581;2pkt 2fpkt"];
1173--3395[label="0.0153846;1pkt 1fpkt"];
1173--3653[label="0.285714;2pkt 2fpkt"];
1173--4314[label="0.333333;2pkt 2fpkt"];
1173--4571[label="0.0322581;2pkt 2fpkt"];
1173--4721[label="0.285714;2pkt 2fpkt"];
1173--5187[label="0.0322581;2pkt 2fpkt"];
1173--5264[label="0.285714;2pkt 2fpkt"];
1200--2103[label="0.338235;69pkt 69fpkt"];
1238--1937[label="0.0897436;14pkt 14fpkt"];
1238--1943[label="1;133pkt 133fpkt"];
1238--2103[label="0.0512821;8pkt 8fpkt"];
1241--1532[label="0.333333;2pkt 2fpkt"];
1241--2103[label="0.181818;2pkt 2fpkt"];
1241--2651[label="0.333333;2pkt 2fpkt"];
1241--3878[label="0.166667;1pkt 1fpkt"];
1281--1561[label="0.0333333;2pkt 2fpkt"];
1281--1573[label="0.084507;6pkt 6fpkt"];
1281--1671[label="0.00877193;1pkt 1fpkt"];
1281--1690[label="0.204225;29pkt 29fpkt"];
1281--1851[label="0.0869565;4pkt 4fpkt"];
1281--1962[label="1;118pkt 118fpkt"];
1281--2103[label="0.116438;17pkt 17fpkt"];
1286--1337[label="0.00735294;1pkt 1fpkt"];
1286--1985[label="0.00735294;1pkt 1fpkt"];
1286--2090[label="0.00735294;1pkt 1fpkt"];
1286--2103[label="0.0441176;6pkt 6fpkt"];
1286--2176[label="0.818182;27pkt 27fpkt"];
1286--2496[label="0.674699;56pkt 56fpkt"];
1286--2889[label="0.00735294;1pkt 1fpkt"];
1286--3312[label="0.84;21pkt 21fpkt"];
1286--4325[label="0.00735294;1pkt 1fpkt"];
1500--2103[label="0.0714286;5pkt 5fpkt"];
1532--1849[label="0.166667;1pkt 1fpkt"];
1532--2103[label="0.333333;2pkt 2fpkt"];
1532--2651[label="1;6pkt 6fpkt"];
1547--2103[label="0.0384615;2pkt 2fpkt"];
1547--2596[label="1;52pkt 52fpkt"];
1586--2103[label="1;1pkt 1fpkt"];
1597--2103[label="0.25;4pkt 4fpkt"];
1597--3602[label="1;1pkt 1fpkt"];
1813--2103[label="0.1;3pkt 3fpkt"];
1835--2103[label="0.0358007;74pkt 74fpkt"];
1837--1976[label="0.573171;47pkt 47fpkt"];
1837--2103[label="0.277487;53pkt 53fpkt"];
1872--2103[label="0.238806;16pkt 16fpkt"];
1872--3722[label="0.0597015;4pkt 4fpkt"];
2468--4091[label="1;5pkt 5fpkt"];
2468--4964[label="1;5pkt 5fpkt"];
2688--4216[label="1;11pkt 11fpkt"];
2688--5029[label="1;11pkt 11fpkt"];
2695--4220[label="1;25pkt 25fpkt"];
2695--5031[label="1;25pkt 25fpkt"];
4216--5029[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="78.45.131.61" src_port="80"/>
      <filter src_ip="78.45.131.61" src_port="7000"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_347{
style=filled;
color=gray75;
895[label="218.166.128.239;s;236pkt 236fpkt", shape=diamond, color=yellow];
1060[label="196.214.30.176;d;125pkt 125fpkt", shape=diamond, color=yellow];
1799[label="218.166.128.239;s;107pkt 107fpkt", shape=hexagon, color=black];
stat347[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.166.128.239:*, 149.207.10.74:80}[64.8199%]&lt;BR/&gt;{59.187.176.163:*, 196.214.30.176:80}[31.856%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8932%)&lt;BR/&gt; 40808: (0.213675%)&lt;BR/&gt; 40461: (0.213675%)&lt;BR/&gt; 40075: (0.213675%)&lt;BR/&gt; 39761: (0.213675%)&gt;];
}
895--1799[label="1;107pkt 107fpkt"];
895--2105[label="0.059322;14pkt 14fpkt"];
895--2107[label="0.0550847;13pkt 13fpkt"];
895--2110[label="0.059322;14pkt 14fpkt"];
895--3820[label="1;236pkt 236fpkt"];
895--4823[label="1;236pkt 236fpkt"];
1060--1307[label="1;115pkt 115fpkt"];
1060--2105[label="0.032;4pkt 4fpkt"];
1060--2107[label="0.104;13pkt 13fpkt"];
1060--2110[label="0.056;7pkt 7fpkt"];
1799--3820[label="1;107pkt 107fpkt"];
1799--4823[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.10.74" dst_port="80" src_ip="218.166.128.239"/>
      <filter dst_ip="196.214.30.176" dst_port="80" src_ip="59.187.176.163"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
707[label="217.171.169.158;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.171.169.158:3818, 201.120.118.252:3447}[33.3333%]&lt;BR/&gt;{217.171.169.158:3873, 201.120.118.252:3447}[33.3333%]&lt;BR/&gt;{217.171.169.158:21622, 201.120.118.252:4691}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3447: (33.3333%)&lt;BR/&gt; 21622: (16.6667%)&lt;BR/&gt; 4691: (16.6667%)&lt;BR/&gt; 3873: (16.6667%)&lt;BR/&gt; 3818: (16.6667%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="201.120.118.252" dst_port="4691" src_ip="217.171.169.158" src_port="21622"/>
      <filter dst_ip="201.120.118.252" dst_port="3447" src_ip="217.171.169.158" src_port="3873"/>
      <filter dst_ip="201.120.118.252" dst_port="3447" src_ip="217.171.169.158" src_port="3818"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.94.0.0"/>
    </slice>
    <from sec="1071205264" usec="0"/>
    <to sec="1071205297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.83.131.0"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071206094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.96.223.1"/>
    </slice>
    <from sec="1071205234" usec="0"/>
    <to sec="1071206087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.168.69.3"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.237.197.3"/>
    </slice>
    <from sec="1071205537" usec="0"/>
    <to sec="1071205778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_358{
style=filled;
color=gray75;
653[label="211.145.106.4;s;133pkt 133fpkt", shape=diamond, color=yellow];
2171[label="211.145.106.4;132pkt 132fpkt", shape=pentagon, color=darkviolet];
3925[label="211.145.106.4;133pkt 133fpkt", shape=invtriangle, color=brown];
stat358[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.145.106.4:80, 149.206.84.87:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43890: (0.376884%)&lt;BR/&gt; 43889: (0.376884%)&lt;BR/&gt; 43888: (0.376884%)&lt;BR/&gt; 43887: (0.376884%)&gt;];
}
653--1650[label="1;133pkt 133fpkt"];
653--2171[label="1;132pkt 132fpkt"];
653--3925[label="1;133pkt 133fpkt"];
2171--3925[label="1;132pkt 132fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.84.87" src_ip="211.145.106.4" src_port="80"/>
    </slice>
    <from sec="1071205294" usec="0"/>
    <to sec="1071205428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.62.154.5"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071206093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.36.22.6"/>
    </slice>
    <from sec="1071205245" usec="0"/>
    <to sec="1071206073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.141.179.6"/>
    </slice>
    <from sec="1071205308" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.158.34.7"/>
    </slice>
    <from sec="1071205267" usec="0"/>
    <to sec="1071206087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.102.174.7"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071205755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.35.193.7"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.42.8"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.167.215.8"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
1454[label="149.207.43.150;d;5pkt 5fpkt", shape=diamond, color=yellow];
2218[label="208.102.166.9;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3954[label="208.102.166.9;5pkt 5fpkt", shape=invtriangle, color=brown];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.102.166.9:80, 149.207.43.150:3138}[20%]&lt;BR/&gt;{208.102.166.9:80, 149.207.43.150:3155}[20%]&lt;BR/&gt;{208.102.166.9:80, 149.207.43.150:3174}[20%]&lt;BR/&gt;{208.102.166.9:80, 149.207.43.150:4201}[20%]&lt;BR/&gt;{208.102.166.9:80, 149.207.43.150:4203}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4203: (10%)&lt;BR/&gt; 4201: (10%)&lt;BR/&gt; 3174: (10%)&lt;BR/&gt; 3155: (10%)&gt;];
}
1454--2218[label="1;5pkt 5fpkt"];
1454--3954[label="1;5pkt 5fpkt"];
2218--3954[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.43.150" dst_port="4203" src_ip="208.102.166.9" src_port="80"/>
      <filter dst_ip="149.207.43.150" dst_port="4201" src_ip="208.102.166.9" src_port="80"/>
      <filter dst_ip="149.207.43.150" dst_port="3174" src_ip="208.102.166.9" src_port="80"/>
      <filter dst_ip="149.207.43.150" dst_port="3155" src_ip="208.102.166.9" src_port="80"/>
      <filter dst_ip="149.207.43.150" dst_port="3138" src_ip="208.102.166.9" src_port="80"/>
    </slice>
    <from sec="1071205807" usec="0"/>
    <to sec="1071205912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.148.200.9"/>
    </slice>
    <from sec="1071205786" usec="0"/>
    <to sec="1071205831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.61.81.10"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.115.228.10"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,054,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.233.3.12"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
2210[label="57.216.86.8;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3949[label="57.216.86.8;3pkt 3fpkt", shape=invtriangle, color=brown];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.216.86.8:27080, 160.188.64.1:25}[33.3333%]&lt;BR/&gt;{57.216.86.8:28844, 160.188.72.65:25}[33.3333%]&lt;BR/&gt;{57.216.86.8:28158, 160.188.23.77:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 28844: (20%)&lt;BR/&gt; 27080: (20%)&lt;BR/&gt; 28158: (10%)&gt;];
}
2210--3949[label="1;2pkt 2fpkt"];
2210--4893[label="1;2pkt 2fpkt"];
3949--4893[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.23.77" dst_port="25" src_ip="57.216.86.8" src_port="28158"/>
      <filter dst_ip="160.188.72.65" dst_port="25" src_ip="57.216.86.8" src_port="28844"/>
      <filter dst_ip="160.188.64.1" dst_port="25" src_ip="57.216.86.8" src_port="27080"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889707,1.5466,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
745[label="192.100.224.52;s;27pkt 27fpkt", shape=diamond, color=yellow];
973[label="160.188.177.211;d;53pkt 53fpkt", shape=diamond, color=yellow];
1509[label="213.119.174.12;s;4pkt 4fpkt", shape=diamond, color=yellow];
1888[label="160.188.177.211;d;45pkt 45fpkt", shape=hexagon, color=black];
2244[label="213.119.174.12;3pkt 3fpkt", shape=pentagon, color=darkviolet];
2562[label="192.100.224.52;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3309[label="57.98.224.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3726[label="76.49.20.224;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4150[label="192.100.224.52;26pkt 26fpkt", shape=invtriangle, color=brown];
4536[label="57.98.224.162;1pkt 1fpkt", shape=invtriangle, color=brown];
4765[label="76.49.20.224;1pkt 1fpkt", shape=invtriangle, color=brown];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.100.224.52:*, *:*}[33.75%]&lt;BR/&gt;{*:6667, *:*}[27.5%]&lt;BR/&gt;{*:53, 160.188.177.211:53}[23.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (19.8413%)&lt;BR/&gt; 6667: (16.9312%)&lt;BR/&gt; 113: (9.52381%)&lt;BR/&gt; 0: (4.7619%)&lt;BR/&gt; 6666: (2.1164%)&gt;];
}
745--973[label="0.111111;3pkt 3fpkt"];
745--1127[label="0.25;1pkt 1fpkt"];
745--1149[label="0.148148;4pkt 4fpkt"];
745--1372[label="0.333333;1pkt 1fpkt"];
745--1888[label="0.111111;3pkt 3fpkt"];
745--2562[label="1;27pkt 27fpkt"];
745--4150[label="1;26pkt 26fpkt"];
973--1509[label="0.25;1pkt 1fpkt"];
973--1888[label="1;45pkt 45fpkt"];
973--2244[label="0.333333;1pkt 1fpkt"];
973--2301[label="0.0277778;1pkt 1fpkt"];
973--2562[label="0.111111;3pkt 3fpkt"];
973--2754[label="0.0566038;3pkt 3fpkt"];
973--3309[label="1;1pkt 1fpkt"];
973--3726[label="1;1pkt 1fpkt"];
973--4150[label="0.115385;3pkt 3fpkt"];
973--4536[label="1;1pkt 1fpkt"];
973--4765[label="1;1pkt 1fpkt"];
1509--1888[label="0.25;1pkt 1fpkt"];
1509--2244[label="1;3pkt 3fpkt"];
1888--2244[label="0.333333;1pkt 1fpkt"];
1888--2301[label="0.0277778;1pkt 1fpkt"];
1888--2562[label="0.111111;3pkt 3fpkt"];
1888--2754[label="0.0666667;3pkt 3fpkt"];
1888--3309[label="1;1pkt 1fpkt"];
1888--3726[label="1;1pkt 1fpkt"];
1888--4150[label="0.115385;3pkt 3fpkt"];
1888--4536[label="1;1pkt 1fpkt"];
1888--4765[label="1;1pkt 1fpkt"];
2562--4150[label="1;26pkt 26fpkt"];
3309--4536[label="1;1pkt 1fpkt"];
3726--4765[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="192.100.224.52"/>
      <filter src_port="6667"/>
      <filter dst_ip="160.188.177.211" dst_port="53" src_port="53"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_374{
style=filled;
color=gray75;
1249[label="149.206.54.69;d;93pkt 93fpkt", shape=diamond, color=yellow];
2247[label="216.26.94.13;38pkt 38fpkt", shape=pentagon, color=darkviolet];
2537[label="205.1.45.50;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4136[label="205.1.45.50;4pkt 4fpkt", shape=invtriangle, color=brown];
4988[label="205.1.45.50;4pkt 4fpkt", shape=invhouse, color=bisque];
stat374[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.26.94.12:80, 149.206.54.69:*}[42.7083%]&lt;BR/&gt;{216.26.94.13:80, 149.206.54.69:*}[39.5833%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.007%)&lt;BR/&gt; 1863: (6.99301%)&lt;BR/&gt; 3005: (1.3986%)&lt;BR/&gt; 2260: (1.04895%)&lt;BR/&gt; 1052: (1.04895%)&gt;];
}
1249--1520[label="0.031746;2pkt 2fpkt"];
1249--1729[label="0.0215054;2pkt 2fpkt"];
1249--2103[label="0.0322581;3pkt 3fpkt"];
1249--2242[label="1;40pkt 40fpkt"];
1249--2247[label="1;38pkt 38fpkt"];
1249--2537[label="0.25;1pkt 1fpkt"];
1249--2543[label="0.030303;2pkt 2fpkt"];
1249--3039[label="0.2;1pkt 1fpkt"];
1249--3237[label="0.0215054;2pkt 2fpkt"];
1249--3304[label="0.142857;1pkt 1fpkt"];
1249--3967[label="1;41pkt 41fpkt"];
1249--4136[label="0.25;1pkt 1fpkt"];
1249--4138[label="0.0307692;2pkt 2fpkt"];
1249--4988[label="0.25;1pkt 1fpkt"];
1249--4989[label="0.030303;2pkt 2fpkt"];
2537--4136[label="1;4pkt 4fpkt"];
2537--4988[label="1;4pkt 4fpkt"];
4136--4988[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.54.69" src_ip="216.26.94.12" src_port="80"/>
      <filter dst_ip="149.206.54.69" src_ip="216.26.94.13" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.24.142.15"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.17.75.17"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_378{
style=filled;
color=gray75;
1178[label="149.206.251.67;d;57pkt 57fpkt", shape=diamond, color=yellow];
1207[label="212.214.22.18;s;16pkt 16fpkt", shape=diamond, color=yellow];
2270[label="212.214.22.18;23pkt 23fpkt", shape=pentagon, color=darkviolet];
3984[label="212.214.22.18;22pkt 22fpkt", shape=invtriangle, color=brown];
4913[label="212.214.22.18;23pkt 23fpkt", shape=invhouse, color=bisque];
stat378[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.147.50.144:80, 149.206.251.67:*}[39.0625%]&lt;BR/&gt;{212.214.22.18:80, 149.206.251.67:*}[34.375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6454%)&lt;BR/&gt; 3884: (1.77305%)&lt;BR/&gt; 3883: (1.77305%)&lt;BR/&gt; 3881: (1.77305%)&lt;BR/&gt; 3880: (1.77305%)&gt;];
}
1178--1207[label="1;16pkt 16fpkt"];
1178--2270[label="0.695652;16pkt 16fpkt"];
1178--3984[label="0.727273;16pkt 16fpkt"];
1178--4913[label="0.695652;16pkt 16fpkt"];
1207--2270[label="1;16pkt 16fpkt"];
1207--3984[label="1;16pkt 16fpkt"];
1207--4913[label="1;16pkt 16fpkt"];
2270--3984[label="1;22pkt 22fpkt"];
2270--4913[label="1;23pkt 23fpkt"];
3984--4913[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.251.67" src_ip="212.147.50.144" src_port="80"/>
      <filter dst_ip="149.206.251.67" src_ip="212.214.22.18" src_port="80"/>
    </slice>
    <from sec="1071205279" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.233.161.18"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071206094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.106.181.18"/>
    </slice>
    <from sec="1071205374" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.37.145.19"/>
    </slice>
    <from sec="1071205872" usec="0"/>
    <to sec="1071205876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.149.163.19"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.88.8.20"/>
    </slice>
    <from sec="1071205336" usec="0"/>
    <to sec="1071205457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.80.49.20"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.827201,1.62875,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_385{
style=filled;
color=gray75;
78[label="56.87.88.21s;241pkt 241fpkt", shape=rectangle, color=red];
2300[label="56.87.88.21;250pkt 250fpkt", shape=pentagon, color=darkviolet];
stat385[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.87.88.21:1028, *:137}[75.9878%]&lt;BR/&gt;{210.148.137.13:1027, *:137}[24.0122%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1028: (41.9552%)&lt;BR/&gt; 1027: (8.04481%)&gt;];
}
78--2300[label="0.672199;162pkt 162fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="56.87.88.21" src_port="1028"/>
      <filter dst_port="137" src_ip="210.148.137.13" src_port="1027"/>
    </slice>
    <from sec="1071205223" usec="0"/>
    <to sec="1071205240" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.146.148.21"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.115.229.21"/>
    </slice>
    <from sec="1071205727" usec="0"/>
    <to sec="1071205779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.45.22"/>
    </slice>
    <from sec="1071205216" usec="0"/>
    <to sec="1071206084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.91.104.22"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.187.160.22"/>
    </slice>
    <from sec="1071205721" usec="0"/>
    <to sec="1071205746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.89.166.22"/>
    </slice>
    <from sec="1071205614" usec="0"/>
    <to sec="1071205637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_392{
style=filled;
color=gray75;
599[label="145.166.4.169;d;1175pkt 1175fpkt", shape=diamond, color=yellow];
1113[label="58.177.45.154;s;54pkt 54fpkt", shape=diamond, color=yellow];
1685[label="145.166.4.169;d;242pkt 242fpkt", shape=hexagon, color=black];
2314[label="57.47.23.23;211pkt 211fpkt", shape=pentagon, color=darkviolet];
2622[label="78.45.169.61;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3882[label="101.72.20.253;77pkt 77fpkt", shape=pentagon, color=darkviolet];
3896[label="209.96.189.255;89pkt 89fpkt", shape=pentagon, color=darkviolet];
stat392[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 145.166.4.169:*}[70.8702%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (36.6057%)&lt;BR/&gt; 113: (1.15654%)&lt;BR/&gt; 1131: (0.591716%)&lt;BR/&gt; 33436: (0.457235%)&lt;BR/&gt; 1080: (0.376547%)&gt;];
}
599--985[label="0.283784;21pkt 21fpkt"];
599--1113[label="0.0185185;1pkt 1fpkt"];
599--1159[label="0.0204082;1pkt 1fpkt"];
599--1166[label="0.630303;104pkt 104fpkt"];
599--1685[label="1;242pkt 242fpkt"];
599--2314[label="1;211pkt 211fpkt"];
599--2337[label="0.553191;104pkt 104fpkt"];
599--2524[label="0.5625;18pkt 18fpkt"];
599--2560[label="0.0333333;1pkt 1fpkt"];
599--2615[label="0.388889;14pkt 14fpkt"];
599--2622[label="0.818182;9pkt 9fpkt"];
599--2633[label="0.0833333;1pkt 1fpkt"];
599--2650[label="0.515152;17pkt 17fpkt"];
599--2779[label="0.555556;5pkt 5fpkt"];
599--2955[label="0.529412;18pkt 18fpkt"];
599--2991[label="0.0196078;1pkt 1fpkt"];
599--3189[label="0.647059;11pkt 11fpkt"];
599--3249[label="0.0178571;1pkt 1fpkt"];
599--3630[label="0.4375;7pkt 7fpkt"];
599--3747[label="0.0833333;1pkt 1fpkt"];
599--3778[label="0.44186;19pkt 19fpkt"];
599--3882[label="0.220779;17pkt 17fpkt"];
599--3896[label="0.258427;23pkt 23fpkt"];
599--4023[label="0.553191;104pkt 104fpkt"];
599--4126[label="0.5625;18pkt 18fpkt"];
599--4177[label="0.4;14pkt 14fpkt"];
599--4351[label="0.529412;18pkt 18fpkt"];
599--4368[label="0.0196078;1pkt 1fpkt"];
599--4779[label="0.0833333;1pkt 1fpkt"];
599--4798[label="0.44186;19pkt 19fpkt"];
599--4930[label="0.550802;103pkt 103fpkt"];
599--5085[label="0.529412;18pkt 18fpkt"];
599--5294[label="0.0833333;1pkt 1fpkt"];
1113--1115[label="0.037037;2pkt 2fpkt"];
1113--1174[label="0.166667;9pkt 9fpkt"];
1113--1738[label="0.0555556;3pkt 3fpkt"];
1113--1797[label="0.0185185;1pkt 1fpkt"];
1113--1851[label="0.0217391;1pkt 1fpkt"];
1113--1896[label="0.037037;2pkt 2fpkt"];
1113--2001[label="0.0555556;3pkt 3fpkt"];
1113--3249[label="1;54pkt 54fpkt"];
1685--2337[label="0.0904255;17pkt 17fpkt"];
1685--2524[label="0.0625;2pkt 2fpkt"];
1685--2615[label="0.222222;8pkt 8fpkt"];
1685--2622[label="0.181818;2pkt 2fpkt"];
1685--2633[label="0.0833333;1pkt 1fpkt"];
1685--2650[label="0.212121;7pkt 7fpkt"];
1685--2955[label="0.235294;8pkt 8fpkt"];
1685--3189[label="0.235294;4pkt 4fpkt"];
1685--3630[label="0.125;2pkt 2fpkt"];
1685--3747[label="0.0833333;1pkt 1fpkt"];
1685--3778[label="0.232558;10pkt 10fpkt"];
1685--3896[label="0.0786517;7pkt 7fpkt"];
1685--4023[label="0.0904255;17pkt 17fpkt"];
1685--4126[label="0.0625;2pkt 2fpkt"];
1685--4177[label="0.228571;8pkt 8fpkt"];
1685--4351[label="0.235294;8pkt 8fpkt"];
1685--4779[label="0.0833333;1pkt 1fpkt"];
1685--4798[label="0.232558;10pkt 10fpkt"];
1685--4930[label="0.0855615;16pkt 16fpkt"];
1685--5085[label="0.235294;8pkt 8fpkt"];
1685--5294[label="0.0833333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.4.169" src_port="25"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.115.228.23"/>
    </slice>
    <from sec="1071205225" usec="0"/>
    <to sec="1071206086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.45.24"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071206093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.233.4.25"/>
    </slice>
    <from sec="1071205301" usec="0"/>
    <to sec="1071205611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.97.97.25"/>
    </slice>
    <from sec="1071205215" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.39.212.25"/>
    </slice>
    <from sec="1071205291" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.74.215.25"/>
    </slice>
    <from sec="1071205226" usec="0"/>
    <to sec="1071206068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.87.20.27"/>
    </slice>
    <from sec="1071206015" usec="0"/>
    <to sec="1071206032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.9.197.27"/>
    </slice>
    <from sec="1071205612" usec="0"/>
    <to sec="1071205906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.80.206.27"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.128.224.27"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.232.27"/>
    </slice>
    <from sec="1071205394" usec="0"/>
    <to sec="1071205550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.118.221.28"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_405{
style=filled;
color=gray75;
1016[label="145.71.67.64;d;135pkt 135fpkt", shape=diamond, color=yellow];
stat405[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 145.71.67.64:52122}[50.3704%]&lt;BR/&gt;{*:*, 145.71.67.64:53}[31.8519%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (42.963%)&lt;BR/&gt; 52122: (25.1852%)&lt;BR/&gt; 25: (8.88889%)&lt;BR/&gt; 65000: (0.37037%)&lt;BR/&gt; 64517: (0.37037%)&gt;];
}
1016--1041[label="0.0196078;1pkt 1fpkt"];
1016--1164[label="0.0714286;2pkt 2fpkt"];
1016--1263[label="0.00925926;1pkt 1fpkt"];
1016--1283[label="0.011236;1pkt 1fpkt"];
1016--1855[label="1;135pkt 135fpkt"];
1016--2013[label="0.011236;1pkt 1fpkt"];
1016--2078[label="1;135pkt 135fpkt"];
1016--2362[label="0.04;1pkt 1fpkt"];
1016--2808[label="0.0217391;1pkt 1fpkt"];
1016--2981[label="0.0555556;1pkt 1fpkt"];
1016--3085[label="0.0714286;2pkt 2fpkt"];
1016--3282[label="0.0384615;1pkt 1fpkt"];
1016--3802[label="0.037037;1pkt 1fpkt"];
1016--4037[label="0.04;1pkt 1fpkt"];
1016--4280[label="0.0217391;1pkt 1fpkt"];
1016--4417[label="0.0714286;2pkt 2fpkt"];
1016--4518[label="0.0384615;1pkt 1fpkt"];
1016--4939[label="0.04;1pkt 1fpkt"];
1016--5111[label="0.0714286;2pkt 2fpkt"];
1016--5161[label="0.0384615;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.71.67.64" dst_port="53"/>
      <filter dst_ip="145.71.67.64" dst_port="52122" src_port="53"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.144.4.30"/>
    </slice>
    <from sec="1071205213" usec="0"/>
    <to sec="1071206043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.209.11.30"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071206086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.7.74.30"/>
    </slice>
    <from sec="1071205325" usec="0"/>
    <to sec="1071205352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_409{
style=filled;
color=gray75;
1371[label="77.40.81.30;s;574pkt 574fpkt", shape=diamond, color=yellow];
2373[label="77.40.81.30;624pkt 624fpkt", shape=pentagon, color=darkviolet];
4042[label="77.40.81.30;623pkt 623fpkt", shape=invtriangle, color=brown];
stat409[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.40.81.30:4555, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4555: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1371--2373[label="0.998258;573pkt 573fpkt"];
1371--4042[label="0.996516;572pkt 572fpkt"];
2373--4042[label="1;623pkt 623fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="77.40.81.30" src_port="4555"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.76.199.30"/>
    </slice>
    <from sec="1071206072" usec="0"/>
    <to sec="1071206094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.136.236.30"/>
    </slice>
    <from sec="1071205214" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.125.38.31"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071205956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.208.167.31"/>
    </slice>
    <from sec="1071205226" usec="0"/>
    <to sec="1071206092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.827201,1.62875,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_414{
style=filled;
color=gray75;
82[label="198.17.207.31s;118pkt 118fpkt", shape=rectangle, color=red];
2384[label="198.17.207.31;250pkt 250fpkt", shape=pentagon, color=darkviolet];
stat414[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.17.207.31:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
82--2384[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="198.17.207.31" src_port="1029"/>
    </slice>
    <from sec="1071205237" usec="0"/>
    <to sec="1071205251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.87.59.32"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
2407[label="78.101.65.34;123pkt 123fpkt", shape=pentagon, color=darkviolet];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.101.65.34:0, *:0}[98.374%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.374%)&lt;BR/&gt; 80: (0.813008%)&lt;BR/&gt; 63922: (0.406504%)&lt;BR/&gt; 62899: (0.406504%)&gt;];
}
</description>
    <slice>
      <filter src_ip="78.101.65.34"/>
    </slice>
    <from sec="1071205223" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.88803,1.62121,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_417{
style=filled;
color=gray75;
84[label="205.86.27.35s;119pkt 119fpkt", shape=rectangle, color=red];
2412[label="205.86.27.35;249pkt 249fpkt", shape=pentagon, color=darkviolet];
4063[label="205.86.27.35;250pkt 250fpkt", shape=invtriangle, color=brown];
stat417[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.86.27.35:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
84--2412[label="0.991597;118pkt 118fpkt"];
84--4063[label="1;119pkt 119fpkt"];
2412--4063[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="205.86.27.35" src_port="1026"/>
    </slice>
    <from sec="1071205692" usec="0"/>
    <to sec="1071205707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.88803,1.62121,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_418{
style=filled;
color=gray75;
85[label="219.93.74.35s;199pkt 199fpkt", shape=rectangle, color=red];
2415[label="219.93.74.35;249pkt 249fpkt", shape=pentagon, color=darkviolet];
4064[label="219.93.74.35;250pkt 250fpkt", shape=invtriangle, color=brown];
stat418[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.93.74.35:1024, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1024: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
85--2415[label="1;199pkt 199fpkt"];
85--4064[label="1;199pkt 199fpkt"];
2415--4064[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.93.74.35" src_port="1024"/>
    </slice>
    <from sec="1071205454" usec="0"/>
    <to sec="1071205468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.73.82.35"/>
    </slice>
    <from sec="1071205738" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.165.35"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071205549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.161.73.36"/>
    </slice>
    <from sec="1071205259" usec="0"/>
    <to sec="1071205292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.116.91.36"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.44.154.36"/>
    </slice>
    <from sec="1071205385" usec="0"/>
    <to sec="1071205404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.45.37"/>
    </slice>
    <from sec="1071205216" usec="0"/>
    <to sec="1071206095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.246.91.37"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.90.95.37"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071205626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.173.29.38"/>
    </slice>
    <from sec="1071205296" usec="0"/>
    <to sec="1071205521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.8.126.38"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.53.218.38"/>
    </slice>
    <from sec="1071205872" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.106.247.38"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_431{
style=filled;
color=gray75;
1465[label="35.131.72.39;s;6pkt 6fpkt", shape=diamond, color=yellow];
2458[label="35.131.72.39;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat431[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.131.72.39:*, 166.55.174.1:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (16.6667%)&lt;BR/&gt; 56797: (8.33333%)&lt;BR/&gt; 56796: (8.33333%)&lt;BR/&gt; 28517: (8.33333%)&lt;BR/&gt; 28516: (8.33333%)&gt;];
}
1465--2458[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.174.1" src_ip="35.131.72.39"/>
    </slice>
    <from sec="1071205872" usec="0"/>
    <to sec="1071205935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.827201,1.62875,504,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_432{
style=filled;
color=gray75;
117[label="218.36.50.185s;1pkt 1fpkt", shape=rectangle, color=red];
2465[label="131.233.3.40;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat432[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.3.40:*, 205.1.195.5:80}[54.5455%]&lt;BR/&gt;{131.233.3.40:*, 205.1.195.5:443}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 443: (16.6667%)&lt;BR/&gt; 1049: (8.33333%)&lt;BR/&gt; 1089: (4.16667%)&lt;BR/&gt; 1087: (4.16667%)&gt;];
}
117--2465[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.1.195.5" dst_port="80" src_ip="131.233.3.40"/>
      <filter dst_ip="205.1.195.5" dst_port="443" src_ip="131.233.3.40"/>
    </slice>
    <from sec="1071205323" usec="0"/>
    <to sec="1071205767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.185.134.40"/>
    </slice>
    <from sec="1071205221" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_434{
style=filled;
color=gray75;
937[label="149.206.250.184;d;8pkt 8fpkt", shape=diamond, color=yellow];
1071[label="78.21.20.42;s;7pkt 7fpkt", shape=diamond, color=yellow];
2447[label="201.229.90.38;2pkt 2fpkt", shape=pentagon, color=darkviolet];
2475[label="78.21.20.42;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4080[label="201.229.90.38;2pkt 2fpkt", shape=invtriangle, color=brown];
4965[label="78.21.20.42;7pkt 7fpkt", shape=invhouse, color=bisque];
stat434[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.21.20.42:80, 149.206.250.187:*}[46.6667%]&lt;BR/&gt;{57.216.76.34:80, 149.206.250.184:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1723: (4.41176%)&lt;BR/&gt; 1722: (4.41176%)&lt;BR/&gt; 1721: (4.41176%)&lt;BR/&gt; 1720: (4.41176%)&gt;];
}
937--938[label="1;5pkt 5fpkt"];
937--1865[label="1;7pkt 7fpkt"];
937--1918[label="1;5pkt 5fpkt"];
937--2103[label="0.25;2pkt 2fpkt"];
937--2447[label="1;2pkt 2fpkt"];
937--2475[label="0.125;1pkt 1fpkt"];
937--4080[label="1;2pkt 2fpkt"];
937--4965[label="0.142857;1pkt 1fpkt"];
1071--2103[label="0.142857;1pkt 1fpkt"];
1071--2475[label="1;7pkt 7fpkt"];
1071--4965[label="0.857143;6pkt 6fpkt"];
2447--4080[label="1;2pkt 2fpkt"];
2475--4965[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.250.187" src_ip="78.21.20.42" src_port="80"/>
      <filter dst_ip="149.206.250.184" src_ip="57.216.76.34" src_port="80"/>
    </slice>
    <from sec="1071205380" usec="0"/>
    <to sec="1071206002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.216.77.42"/>
    </slice>
    <from sec="1071205585" usec="0"/>
    <to sec="1071205594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_436{
style=filled;
color=gray75;
557[label="149.206.139.163;d;5pkt 5fpkt", shape=diamond, color=yellow];
558[label="35.84.115.42;s;1pkt 1fpkt", shape=diamond, color=yellow];
2479[label="35.84.115.42;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat436[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.84.115.42:18230, 149.206.139.163:2310}[20%]&lt;BR/&gt;{216.16.168.209:80, 149.206.139.163:2684}[20%]&lt;BR/&gt;{216.16.168.209:80, 149.206.139.163:2711}[20%]&lt;BR/&gt;{216.16.168.209:80, 149.206.139.163:2712}[20%]&lt;BR/&gt;{216.16.168.209:80, 149.206.139.163:2723}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.5714%)&lt;BR/&gt; 18230: (21.4286%)&lt;BR/&gt; 2310: (21.4286%)&lt;BR/&gt; 2723: (7.14286%)&lt;BR/&gt; 2712: (7.14286%)&gt;];
}
557--558[label="1;1pkt 1fpkt"];
557--1772[label="0.8;4pkt 4fpkt"];
557--2479[label="1;1pkt 1fpkt"];
557--3613[label="0.8;4pkt 4fpkt"];
557--4698[label="0.8;4pkt 4fpkt"];
558--2479[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.139.163" dst_port="2723" src_ip="216.16.168.209" src_port="80"/>
      <filter dst_ip="149.206.139.163" dst_port="2712" src_ip="216.16.168.209" src_port="80"/>
      <filter dst_ip="149.206.139.163" dst_port="2711" src_ip="216.16.168.209" src_port="80"/>
      <filter dst_ip="149.206.139.163" dst_port="2684" src_ip="216.16.168.209" src_port="80"/>
      <filter dst_ip="149.206.139.163" dst_port="2310" src_ip="35.84.115.42" src_port="18230"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
2498[label="221.64.206.44;265pkt 265fpkt", shape=pentagon, color=darkviolet];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.64.206.44:0, *:0}[95.8491%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.8491%)&lt;BR/&gt; 80: (2.07547%)&lt;BR/&gt; 63728: (0.188679%)&lt;BR/&gt; 52687: (0.188679%)&lt;BR/&gt; 34795: (0.188679%)&gt;];
}
</description>
    <slice>
      <filter src_ip="221.64.206.44"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
660[label="149.207.217.245;d;71pkt 71fpkt", shape=diamond, color=yellow];
661[label="212.80.144.178;s;60pkt 60fpkt", shape=diamond, color=yellow];
1758[label="212.80.144.178;s;60pkt 60fpkt", shape=hexagon, color=black];
2500[label="213.217.8.45;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3422[label="212.80.144.178;59pkt 59fpkt", shape=pentagon, color=darkviolet];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.80.144.178:80, 149.207.217.245:*}[84.507%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1432: (0.78125%)&lt;BR/&gt; 1431: (0.78125%)&lt;BR/&gt; 1430: (0.78125%)&lt;BR/&gt; 1429: (0.78125%)&gt;];
}
660--661[label="1;60pkt 60fpkt"];
660--690[label="0.056338;4pkt 4fpkt"];
660--1758[label="1;60pkt 60fpkt"];
660--2500[label="1;6pkt 6fpkt"];
660--3422[label="1;59pkt 59fpkt"];
661--1758[label="1;60pkt 60fpkt"];
661--3422[label="1;59pkt 59fpkt"];
1758--3422[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.245" src_ip="212.80.144.178" src_port="80"/>
    </slice>
    <from sec="1071205329" usec="0"/>
    <to sec="1071205390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.8.0.46"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.168.69.46"/>
    </slice>
    <from sec="1071205792" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
1375[label="218.162.55.252;s;95pkt 95fpkt", shape=diamond, color=yellow];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.162.55.252:*, 160.188.122.86:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4254: (0.526316%)&lt;BR/&gt; 4253: (0.526316%)&lt;BR/&gt; 4252: (0.526316%)&lt;BR/&gt; 4251: (0.526316%)&gt;];
}
1375--2004[label="0.884211;84pkt 84fpkt"];
1375--3879[label="0.989474;94pkt 94fpkt"];
1375--4856[label="0.989474;94pkt 94fpkt"];
1375--5333[label="0.989474;94pkt 94fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.122.86" dst_port="25" src_ip="218.162.55.252"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.100.72.48"/>
    </slice>
    <from sec="1071205216" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.58.227.48"/>
    </slice>
    <from sec="1071205882" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889707,1.5466,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
1479[label="200.180.27.51;s;553pkt 553fpkt", shape=diamond, color=yellow];
2026[label="200.180.27.51;s;553pkt 553fpkt", shape=hexagon, color=black];
2549[label="200.180.27.51;589pkt 589fpkt", shape=pentagon, color=darkviolet];
4143[label="200.180.27.51;589pkt 589fpkt", shape=invtriangle, color=brown];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.180.27.51:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1479--2026[label="1;553pkt 553fpkt"];
1479--2549[label="0.998192;552pkt 552fpkt"];
1479--4143[label="0.998192;552pkt 552fpkt"];
2026--2549[label="0.998192;552pkt 552fpkt"];
2026--4143[label="0.998192;552pkt 552fpkt"];
2549--4143[label="1;589pkt 589fpkt"];
</description>
    <slice>
      <filter src_ip="200.180.27.51"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_445{
style=filled;
color=gray75;
2554[label="201.129.214.51;121pkt 121fpkt", shape=pentagon, color=darkviolet];
stat445[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.129.214.51:44977, *:53}[55.3719%]&lt;BR/&gt;{201.129.214.51:80, *:*}[20.6612%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (35.5372%)&lt;BR/&gt; 44977: (27.686%)&lt;BR/&gt; 80: (10.3306%)&lt;BR/&gt; 25: (5.3719%)&lt;BR/&gt; 62069: (0.413223%)&gt;];
}
</description>
    <slice>
      <filter src_ip="201.129.214.51" src_port="80"/>
      <filter dst_port="53" src_ip="201.129.214.51" src_port="44977"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.150.247.53"/>
    </slice>
    <from sec="1071205887" usec="0"/>
    <to sec="1071205937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.827201,1.62875,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
87[label="78.157.146.54s;244pkt 244fpkt", shape=rectangle, color=red];
2573[label="78.157.146.54;253pkt 253fpkt", shape=pentagon, color=darkviolet];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.157.146.54:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
87--2573[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="78.157.146.54" src_port="1028"/>
    </slice>
    <from sec="1071205685" usec="0"/>
    <to sec="1071205699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.153.15.55"/>
    </slice>
    <from sec="1071205312" usec="0"/>
    <to sec="1071205339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.196.36.55"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.827201,1.62875,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_450{
style=filled;
color=gray75;
10[label="58.67.154.57s;2pkt 2fpkt", shape=rectangle, color=red];
2604[label="58.67.154.57;68pkt 68fpkt", shape=pentagon, color=darkviolet];
stat450[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.67.154.57:80, 145.166.34.62:*}[38.2353%]&lt;BR/&gt;{58.67.154.57:80, 145.166.0.166:*}[23.5294%]&lt;BR/&gt;{58.67.154.57:80, 166.55.53.182:*}[20.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3391: (1.42857%)&lt;BR/&gt; 3390: (1.42857%)&lt;BR/&gt; 58418: (0.714286%)&lt;BR/&gt; 58416: (0.714286%)&gt;];
}
10--423[label="1;2pkt 2fpkt"];
10--2604[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.34.62" src_ip="58.67.154.57" src_port="80"/>
      <filter dst_ip="145.166.0.166" src_ip="58.67.154.57" src_port="80"/>
      <filter dst_ip="166.55.53.182" src_ip="58.67.154.57" src_port="80"/>
    </slice>
    <from sec="1071205244" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.98.172.59"/>
    </slice>
    <from sec="1071205826" usec="0"/>
    <to sec="1071205873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.91.101.62"/>
    </slice>
    <from sec="1071205218" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.221.118.62"/>
    </slice>
    <from sec="1071205222" usec="0"/>
    <to sec="1071206095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.80.132.62"/>
    </slice>
    <from sec="1071206005" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_455{
style=filled;
color=gray75;
694[label="196.57.66.96;d;119pkt 119fpkt", shape=diamond, color=yellow];
1229[label="198.136.65.118;s;5pkt 5fpkt", shape=diamond, color=yellow];
1713[label="196.57.66.96;d;72pkt 72fpkt", shape=hexagon, color=black];
3018[label="198.136.65.118;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3656[label="198.137.83.215;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4722[label="198.137.83.215;30pkt 30fpkt", shape=invtriangle, color=brown];
5265[label="198.137.83.215;30pkt 30fpkt", shape=invhouse, color=bisque];
stat455[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 196.57.66.96:6667}[51.2%]&lt;BR/&gt;{76.221.9.66:*, 196.57.66.96:*}[30.4%]&lt;BR/&gt;{*:113, 196.57.66.96:*}[27.2%]&lt;BR/&gt;{198.137.83.215:*, 196.57.66.96:*}[24%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (21.3058%)&lt;BR/&gt; 113: (15.2921%)&lt;BR/&gt; 6668: (11.6838%)&lt;BR/&gt; 4955: (0.859107%)&lt;BR/&gt; 1387: (0.859107%)&gt;];
}
694--1229[label="0.2;1pkt 1fpkt"];
694--1713[label="1;72pkt 72fpkt"];
694--2635[label="0.5;1pkt 1fpkt"];
694--3018[label="0.2;1pkt 1fpkt"];
694--3127[label="0.272727;3pkt 3fpkt"];
694--3656[label="0.933333;28pkt 28fpkt"];
694--3661[label="0.0714286;1pkt 1fpkt"];
694--3838[label="0.00840336;1pkt 1fpkt"];
694--4722[label="0.933333;28pkt 28fpkt"];
694--5265[label="0.933333;28pkt 28fpkt"];
1229--1713[label="0.2;1pkt 1fpkt"];
1229--3018[label="1;5pkt 5fpkt"];
1713--2635[label="0.5;1pkt 1fpkt"];
1713--3018[label="0.2;1pkt 1fpkt"];
1713--3127[label="0.272727;3pkt 3fpkt"];
1713--3656[label="0.333333;10pkt 10fpkt"];
1713--3661[label="0.0714286;1pkt 1fpkt"];
1713--4722[label="0.333333;10pkt 10fpkt"];
1713--5265[label="0.333333;10pkt 10fpkt"];
3656--4722[label="1;30pkt 30fpkt"];
3656--5265[label="1;30pkt 30fpkt"];
4722--5265[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="196.57.66.96" src_ip="76.221.9.66"/>
      <filter dst_ip="196.57.66.96" src_ip="198.137.83.215"/>
      <filter dst_ip="196.57.66.96" src_port="113"/>
      <filter dst_ip="196.57.66.96" dst_port="6667"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.115.97.63"/>
    </slice>
    <from sec="1071205255" usec="0"/>
    <to sec="1071205694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.44.64"/>
    </slice>
    <from sec="1071205211" usec="0"/>
    <to sec="1071206093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.109.110.64"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.115.148.65"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.115.208.67"/>
    </slice>
    <from sec="1071205672" usec="0"/>
    <to sec="1071205724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_461{
style=filled;
color=gray75;
332[label="131.233.161.18;d;3pkt 3fpkt", shape=diamond, color=yellow];
333[label="57.83.131.68;s;1pkt 1fpkt", shape=diamond, color=yellow];
2678[label="57.83.131.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4209[label="57.83.131.68;1pkt 1fpkt", shape=invtriangle, color=brown];
stat461[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.83.131.0:51720, 131.233.161.18:3058}[33.3333%]&lt;BR/&gt;{57.83.131.11:51719, 131.233.161.18:1810}[33.3333%]&lt;BR/&gt;{57.83.131.68:1800, 131.233.161.18:1809}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1809: (33.3333%)&lt;BR/&gt; 1800: (33.3333%)&lt;BR/&gt; 51720: (8.33333%)&lt;BR/&gt; 51719: (8.33333%)&lt;BR/&gt; 3058: (8.33333%)&gt;];
}
332--333[label="1;1pkt 1fpkt"];
332--2678[label="1;1pkt 1fpkt"];
332--4209[label="1;1pkt 1fpkt"];
333--2678[label="1;1pkt 1fpkt"];
333--4209[label="1;1pkt 1fpkt"];
2678--4209[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.233.161.18" dst_port="1809" src_ip="57.83.131.68" src_port="1800"/>
      <filter dst_ip="131.233.161.18" dst_port="1810" src_ip="57.83.131.11" src_port="51719"/>
      <filter dst_ip="131.233.161.18" dst_port="3058" src_ip="57.83.131.0" src_port="51720"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_462{
style=filled;
color=gray75;
885[label="200.180.5.69;s;841pkt 841fpkt", shape=diamond, color=yellow];
1796[label="200.180.5.69;s;392pkt 392fpkt", shape=hexagon, color=black];
2684[label="200.180.5.69;924pkt 924fpkt", shape=pentagon, color=darkviolet];
stat462[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.180.5.69:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
885--1796[label="1;392pkt 392fpkt"];
885--2684[label="0.998811;840pkt 840fpkt"];
1796--2684[label="0.997449;391pkt 391fpkt"];
</description>
    <slice>
      <filter src_ip="200.180.5.69"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.81.199.70"/>
    </slice>
    <from sec="1071205292" usec="0"/>
    <to sec="1071205996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.43.85.71"/>
    </slice>
    <from sec="1071205936" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.176.139.71"/>
    </slice>
    <from sec="1071205292" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.184.142.72"/>
    </slice>
    <from sec="1071205527" usec="0"/>
    <to sec="1071205818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.192.62.73"/>
    </slice>
    <from sec="1071205217" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.25.92.73"/>
    </slice>
    <from sec="1071205406" usec="0"/>
    <to sec="1071205435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.172.137.73"/>
    </slice>
    <from sec="1071205239" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.6.113.74"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071205229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
711[label="139.123.75.76;s;2005pkt 2005fpkt", shape=diamond, color=yellow];
2731[label="139.123.75.76;2201pkt 2201fpkt", shape=pentagon, color=darkviolet];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.123.75.76:0, *:0}[97.1377%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.1945%)&lt;BR/&gt; 80: (1.40276%)&lt;BR/&gt; 63845: (0.0237756%)&lt;BR/&gt; 63437: (0.0237756%)&lt;BR/&gt; 62580: (0.0237756%)&gt;];
}
711--2105[label="0.00149626;3pkt 3fpkt"];
711--2107[label="0.000997506;2pkt 2fpkt"];
711--2110[label="0.00349127;7pkt 7fpkt"];
711--2731[label="1;2005pkt 2005fpkt"];
</description>
    <slice>
      <filter src_ip="139.123.75.76"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.87.154.76"/>
    </slice>
    <from sec="1071206101" usec="0"/>
    <to sec="1071206102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.158.32.77"/>
    </slice>
    <from sec="1071205323" usec="0"/>
    <to sec="1071205497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.0.184.77"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.230.247.77"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_476{
style=filled;
color=gray75;
1438[label="151.184.142.71;s;12pkt 12fpkt", shape=diamond, color=yellow];
stat476[shape=component, label=&lt;Rules:&lt;BR/&gt;{151.184.142.71:80, 149.207.237.21:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41257: (4.16667%)&lt;BR/&gt; 41246: (4.16667%)&lt;BR/&gt; 41245: (4.16667%)&lt;BR/&gt; 41244: (4.16667%)&gt;];
}
1438--1442[label="0.833333;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.237.21" src_ip="151.184.142.71" src_port="80"/>
    </slice>
    <from sec="1071205722" usec="0"/>
    <to sec="1071205958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.172.17.82"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071205465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_478{
style=filled;
color=gray75;
2774[label="216.14.19.82;96pkt 96fpkt", shape=pentagon, color=darkviolet];
stat478[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.14.19.82:0, *:0}[88.5417%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (88.5417%)&lt;BR/&gt; 135: (3.125%)&lt;BR/&gt; 80: (2.60417%)&lt;BR/&gt; 59024: (0.520833%)&lt;BR/&gt; 58635: (0.520833%)&gt;];
}
</description>
    <slice>
      <filter src_ip="216.14.19.82"/>
    </slice>
    <from sec="1071205229" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_479{
style=filled;
color=gray75;
512[label="211.245.170.95;s;122pkt 122fpkt", shape=diamond, color=yellow];
1693[label="211.245.170.95;s;101pkt 101fpkt", shape=hexagon, color=black];
stat479[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.245.170.95:80, 149.207.64.135:*}[55.7377%]&lt;BR/&gt;{211.245.170.95:80, 149.207.204.50:*}[28.6885%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43443: (0.44843%)&lt;BR/&gt; 43442: (0.44843%)&lt;BR/&gt; 43441: (0.44843%)&lt;BR/&gt; 43440: (0.44843%)&gt;];
}
512--627[label="0.147541;18pkt 18fpkt"];
512--893[label="0.286885;35pkt 35fpkt"];
512--1693[label="1;101pkt 101fpkt"];
512--2103[label="0.0409836;5pkt 5fpkt"];
512--4315[label="0.961039;74pkt 74fpkt"];
512--5072[label="0.961039;74pkt 74fpkt"];
1693--2103[label="0.049505;5pkt 5fpkt"];
1693--4315[label="0.688312;53pkt 53fpkt"];
1693--5072[label="0.688312;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.64.135" src_ip="211.245.170.95" src_port="80"/>
      <filter dst_ip="149.207.204.50" src_ip="211.245.170.95" src_port="80"/>
    </slice>
    <from sec="1071205247" usec="0"/>
    <to sec="1071206021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_480{
style=filled;
color=gray75;
645[label="57.88.83.83;s;170pkt 170fpkt", shape=diamond, color=yellow];
958[label="213.91.84.227;s;201pkt 201fpkt", shape=diamond, color=yellow];
stat480[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.91.84.227:80, 149.207.16.59:*}[53.9084%]&lt;BR/&gt;{57.88.83.83:80, 149.207.16.59:*}[45.8221%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64051: (0.134771%)&lt;BR/&gt; 64037: (0.134771%)&lt;BR/&gt; 64036: (0.134771%)&lt;BR/&gt; 64030: (0.134771%)&gt;];
}
645--1660[label="1;170pkt 170fpkt"];
645--2784[label="1;170pkt 170fpkt"];
958--1660[label="0.517413;104pkt 104fpkt"];
958--2103[label="0.0248756;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.16.59" src_ip="213.91.84.227" src_port="80"/>
      <filter dst_ip="149.207.16.59" src_ip="57.88.83.83" src_port="80"/>
    </slice>
    <from sec="1071205250" usec="0"/>
    <to sec="1071206021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.827201,1.62875,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_481{
style=filled;
color=gray75;
92[label="200.4.72.84s;255pkt 255fpkt", shape=rectangle, color=red];
2790[label="200.4.72.84;255pkt 255fpkt", shape=pentagon, color=darkviolet];
stat481[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.4.72.84:64688, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64688: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
92--2790[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.4.72.84" src_port="64688"/>
    </slice>
    <from sec="1071205635" usec="0"/>
    <to sec="1071205651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.149.162.85"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.827201,1.62875,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
95[label="61.67.74.87s;234pkt 234fpkt", shape=rectangle, color=red];
2812[label="61.67.74.87;251pkt 251fpkt", shape=pentagon, color=darkviolet];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.67.74.87:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
95--2812[label="1;234pkt 234fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="61.67.74.87" src_port="1032"/>
    </slice>
    <from sec="1071206049" usec="0"/>
    <to sec="1071206066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
1606[label="149.207.50.234;d;49pkt 49fpkt", shape=diamond, color=yellow];
2411[label="192.57.209.34;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3743[label="192.57.209.225;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4062[label="192.57.209.34;25pkt 25fpkt", shape=invtriangle, color=brown];
4776[label="192.57.209.225;12pkt 12fpkt", shape=invtriangle, color=brown];
4951[label="192.57.209.34;25pkt 25fpkt", shape=invhouse, color=bisque];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.57.209.34:80, 149.207.50.234:*}[50%]&lt;BR/&gt;{192.57.209.225:80, *:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57251: (1.35135%)&lt;BR/&gt; 57230: (1.35135%)&lt;BR/&gt; 57229: (1.35135%)&lt;BR/&gt; 57228: (1.35135%)&gt;];
}
1606--2411[label="1;25pkt 25fpkt"];
1606--2813[label="0.416667;5pkt 5fpkt"];
1606--3743[label="0.75;9pkt 9fpkt"];
1606--4062[label="1;25pkt 25fpkt"];
1606--4776[label="0.75;9pkt 9fpkt"];
1606--4951[label="1;25pkt 25fpkt"];
2411--4062[label="1;25pkt 25fpkt"];
2411--4951[label="1;25pkt 25fpkt"];
3743--4776[label="1;12pkt 12fpkt"];
4062--4951[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="192.57.209.225" src_port="80"/>
      <filter dst_ip="149.207.50.234" src_ip="192.57.209.34" src_port="80"/>
    </slice>
    <from sec="1071205800" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.148.208.87"/>
    </slice>
    <from sec="1071205372" usec="0"/>
    <to sec="1071205410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.138.13.90"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071205624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.128.150.90"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.55.161.90"/>
    </slice>
    <from sec="1071205426" usec="0"/>
    <to sec="1071205670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.43.165.90"/>
    </slice>
    <from sec="1071206043" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_490{
style=filled;
color=gray75;
347[label="201.118.220.90;s;156pkt 156fpkt", shape=diamond, color=yellow];
1988[label="201.118.220.90;s;156pkt 156fpkt", shape=hexagon, color=black];
2838[label="201.118.220.90;156pkt 156fpkt", shape=pentagon, color=darkviolet];
stat490[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.118.220.90:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
347--1988[label="1;156pkt 156fpkt"];
347--2838[label="1;156pkt 156fpkt"];
1988--2838[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter src_ip="201.118.220.90"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06292,1.66934,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
96[label="218.89.11.91s;232pkt 232fpkt", shape=rectangle, color=red];
2839[label="218.89.11.91;254pkt 254fpkt", shape=pentagon, color=darkviolet];
4295[label="218.89.11.91;254pkt 254fpkt", shape=invtriangle, color=brown];
5066[label="218.89.11.91;254pkt 254fpkt", shape=invhouse, color=bisque];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.89.11.91:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
96--2839[label="1;232pkt 232fpkt"];
96--4295[label="1;232pkt 232fpkt"];
96--5066[label="1;232pkt 232fpkt"];
2839--4295[label="1;254pkt 254fpkt"];
2839--5066[label="1;254pkt 254fpkt"];
4295--5066[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.89.11.91" src_port="1025"/>
    </slice>
    <from sec="1071205525" usec="0"/>
    <to sec="1071205540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.160.191.91"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.146.148.93"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.233.177.95"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06292,1.66934,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_495{
style=filled;
color=gray75;
97[label="78.231.84.96s;106pkt 106fpkt", shape=rectangle, color=red];
2878[label="78.231.84.96;248pkt 248fpkt", shape=pentagon, color=darkviolet];
4320[label="78.231.84.96;248pkt 248fpkt", shape=invtriangle, color=brown];
5074[label="78.231.84.96;248pkt 248fpkt", shape=invhouse, color=bisque];
stat495[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.231.84.96:1453, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1453: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
97--2878[label="1;106pkt 106fpkt"];
97--4320[label="1;106pkt 106fpkt"];
97--5074[label="1;106pkt 106fpkt"];
2878--4320[label="1;248pkt 248fpkt"];
2878--5074[label="1;248pkt 248fpkt"];
4320--5074[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="78.231.84.96" src_port="1453"/>
    </slice>
    <from sec="1071205981" usec="0"/>
    <to sec="1071205995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.216.134.96"/>
    </slice>
    <from sec="1071205266" usec="0"/>
    <to sec="1071206052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_497{
style=filled;
color=gray75;
1064[label="78.69.198.96;s;669pkt 669fpkt", shape=diamond, color=yellow];
2881[label="78.69.198.96;759pkt 759fpkt", shape=pentagon, color=darkviolet];
stat497[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.69.198.96:0, *:0}[97.4967%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.3389%)&lt;BR/&gt; 445: (0.630252%)&lt;BR/&gt; 139: (0.630252%)&lt;BR/&gt; 137: (0.140056%)&lt;BR/&gt; 3437: (0.070028%)&gt;];
}
1064--2881[label="1;669pkt 669fpkt"];
</description>
    <slice>
      <filter src_ip="78.69.198.96"/>
    </slice>
    <from sec="1071205504" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,011,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_498{
style=filled;
color=gray75;
890[label="78.21.2.97;s;1080pkt 1080fpkt", shape=diamond, color=yellow];
1905[label="78.21.2.97;s;727pkt 727fpkt", shape=hexagon, color=black];
2882[label="78.21.2.97;1175pkt 1175fpkt", shape=pentagon, color=darkviolet];
stat498[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.21.2.97:22581, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22581: (50%)&lt;BR/&gt; 40988: (0.100604%)&lt;BR/&gt; 36641: (0.100604%)&lt;BR/&gt; 29381: (0.100604%)&lt;BR/&gt; 28904: (0.100604%)&gt;];
}
890--1905[label="1;727pkt 727fpkt"];
890--2882[label="0.999074;1079pkt 1079fpkt"];
1905--2882[label="0.998624;726pkt 726fpkt"];
</description>
    <slice>
      <filter src_ip="78.21.2.97" src_port="22581"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.118.174.97"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071205758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.59.85.98"/>
    </slice>
    <from sec="1071205716" usec="0"/>
    <to sec="1071205815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_501{
style=filled;
color=gray75;
693[label="145.71.33.159;d;85pkt 85fpkt", shape=diamond, color=yellow];
2828[label="219.173.16.90;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4290[label="219.173.16.90;2pkt 2fpkt", shape=invtriangle, color=brown];
5063[label="219.173.16.90;2pkt 2fpkt", shape=invhouse, color=bisque];
stat501[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.115.148.94:1214, 145.71.33.159:*}[27.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1214: (26.9231%)&lt;BR/&gt; 2761: (6.04396%)&lt;BR/&gt; 1989: (4.3956%)&lt;BR/&gt; 1720: (4.3956%)&lt;BR/&gt; 3241: (2.1978%)&gt;];
}
693--2828[label="1;2pkt 2fpkt"];
693--2895[label="1;3pkt 3fpkt"];
693--4290[label="1;2pkt 2fpkt"];
693--4328[label="1;3pkt 3fpkt"];
693--5063[label="1;2pkt 2fpkt"];
2828--4290[label="1;2pkt 2fpkt"];
2828--5063[label="1;2pkt 2fpkt"];
4290--5063[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.71.33.159" src_ip="153.115.148.94" src_port="1214"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.206.189.99"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.32.202.99"/>
    </slice>
    <from sec="1071205262" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.21.130.101"/>
    </slice>
    <from sec="1071205215" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.32.105.102"/>
    </slice>
    <from sec="1071206090" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.141.21.103"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071205642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.174.111.103"/>
    </slice>
    <from sec="1071205221" usec="0"/>
    <to sec="1071206073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.163.158.103"/>
    </slice>
    <from sec="1071205803" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.147.44.104"/>
    </slice>
    <from sec="1071205302" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.142.148.104"/>
    </slice>
    <from sec="1071205361" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.166.153.104"/>
    </slice>
    <from sec="1071205423" usec="0"/>
    <to sec="1071205444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.225.200.104"/>
    </slice>
    <from sec="1071205915" usec="0"/>
    <to sec="1071205944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.36.210.106"/>
    </slice>
    <from sec="1071205213" usec="0"/>
    <to sec="1071206066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06292,1.66934,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_514{
style=filled;
color=gray75;
100[label="216.84.103.109s;173pkt 173fpkt", shape=rectangle, color=red];
2954[label="219.187.101.108;303pkt 303fpkt", shape=pentagon, color=darkviolet];
2957[label="216.84.103.109;180pkt 180fpkt", shape=pentagon, color=darkviolet];
4352[label="216.84.103.109;180pkt 180fpkt", shape=invtriangle, color=brown];
5086[label="216.84.103.109;180pkt 180fpkt", shape=invhouse, color=bisque];
stat514[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.187.101.108:1026, *:137}[52.8796%]&lt;BR/&gt;{216.84.103.109:1026, *:137}[31.4136%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1026: (45.5709%)&lt;BR/&gt; 1033: (2.26378%)&lt;BR/&gt; 1027: (2.16535%)&gt;];
}
100--2954[label="0.208092;36pkt 36fpkt"];
100--2957[label="0.271676;47pkt 47fpkt"];
100--4352[label="0.271676;47pkt 47fpkt"];
100--5086[label="0.271676;47pkt 47fpkt"];
2957--4352[label="1;180pkt 180fpkt"];
2957--5086[label="1;180pkt 180fpkt"];
4352--5086[label="1;180pkt 180fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.187.101.108" src_port="1026"/>
      <filter dst_port="137" src_ip="216.84.103.109" src_port="1026"/>
    </slice>
    <from sec="1071205797" usec="0"/>
    <to sec="1071206023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_515{
style=filled;
color=gray75;
676[label="201.118.236.168;d;67pkt 67fpkt", shape=diamond, color=yellow];
682[label="58.33.173.58;s;10pkt 10fpkt", shape=diamond, color=yellow];
2608[label="58.33.173.58;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2968[label="205.1.44.111;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4173[label="58.33.173.58;9pkt 9fpkt", shape=invtriangle, color=brown];
5006[label="58.33.173.58;10pkt 10fpkt", shape=invhouse, color=bisque];
stat515[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 201.118.236.168:0}[44.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (28.1818%)&lt;BR/&gt; 80: (27.7273%)&lt;BR/&gt; 135: (5.90909%)&lt;BR/&gt; 36042: (2.27273%)&lt;BR/&gt; 35949: (2.27273%)&gt;];
}
676--682[label="1;10pkt 10fpkt"];
676--2103[label="0.149254;10pkt 10fpkt"];
676--2106[label="0.0149254;1pkt 1fpkt"];
676--2107[label="0.0149254;1pkt 1fpkt"];
676--2110[label="0.0149254;1pkt 1fpkt"];
676--2608[label="1;10pkt 10fpkt"];
676--2968[label="0.25;1pkt 1fpkt"];
676--4173[label="1;9pkt 9fpkt"];
676--5006[label="1;10pkt 10fpkt"];
682--2103[label="1;10pkt 10fpkt"];
682--2608[label="1;10pkt 10fpkt"];
682--4173[label="1;9pkt 9fpkt"];
682--5006[label="1;10pkt 10fpkt"];
2608--4173[label="1;9pkt 9fpkt"];
2608--5006[label="1;10pkt 10fpkt"];
4173--5006[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="201.118.236.168"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_516{
style=filled;
color=gray75;
417[label="212.147.50.111;s;2pkt 2fpkt", shape=diamond, color=yellow];
2969[label="212.147.50.111;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4359[label="212.147.50.111;2pkt 2fpkt", shape=invtriangle, color=brown];
5089[label="212.147.50.111;2pkt 2fpkt", shape=invhouse, color=bisque];
stat516[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.147.50.111:554, 149.206.203.30:2628}[50%]&lt;BR/&gt;{212.147.50.111:24756, 149.206.203.30:6970}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24756: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 2628: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
417--2969[label="1;2pkt 2fpkt"];
417--4359[label="1;2pkt 2fpkt"];
417--5089[label="1;2pkt 2fpkt"];
2969--4359[label="1;2pkt 2fpkt"];
2969--5089[label="1;2pkt 2fpkt"];
4359--5089[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.203.30" dst_port="6970" src_ip="212.147.50.111" src_port="24756"/>
      <filter dst_ip="149.206.203.30" dst_port="2628" src_ip="212.147.50.111" src_port="554"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.229.72.111"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,002,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_518{
style=filled;
color=gray75;
1495[label="145.166.0.69;d;5pkt 5fpkt", shape=diamond, color=yellow];
2973[label="200.235.130.111;154pkt 154fpkt", shape=pentagon, color=darkviolet];
stat518[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.235.130.111:*, *:137}[97.4684%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (48.7421%)&lt;BR/&gt; 80: (1.25786%)&lt;BR/&gt; 51014: (0.628931%)&lt;BR/&gt; 50966: (0.628931%)&lt;BR/&gt; 50908: (0.628931%)&gt;];
}
1495--2103[label="0.4;2pkt 2fpkt"];
1495--2508[label="0.2;1pkt 1fpkt"];
1495--2556[label="0.2;1pkt 1fpkt"];
1495--2973[label="0.2;1pkt 1fpkt"];
1495--4362[label="0.2;1pkt 1fpkt"];
1495--5090[label="0.2;1pkt 1fpkt"];
2973--4362[label="1;154pkt 154fpkt"];
2973--5090[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.235.130.111"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.137.43.112"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_520{
style=filled;
color=gray75;
465[label="131.233.51.112;s;88pkt 88fpkt", shape=diamond, color=yellow];
2979[label="131.233.51.112;88pkt 88fpkt", shape=pentagon, color=darkviolet];
stat520[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.51.112:10000, *:10000}[73.8636%]&lt;BR/&gt;{131.233.51.112:*, 172.25.182.1:1199}[26.1364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10000: (73.8636%)&lt;BR/&gt; 1199: (13.0682%)&lt;BR/&gt; 52257: (0.568182%)&lt;BR/&gt; 52256: (0.568182%)&lt;BR/&gt; 52251: (0.568182%)&gt;];
}
465--2979[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_ip="172.25.182.1" dst_port="1199" src_ip="131.233.51.112"/>
      <filter dst_port="10000" src_ip="131.233.51.112" src_port="10000"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.44.113"/>
    </slice>
    <from sec="1071205233" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.54.68.113"/>
    </slice>
    <from sec="1071205329" usec="0"/>
    <to sec="1071205344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.96.129.113"/>
    </slice>
    <from sec="1071205295" usec="0"/>
    <to sec="1071205310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
469[label="145.71.51.151;d;26pkt 26fpkt", shape=diamond, color=yellow];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.67.133.150:80, 145.71.51.151:*}[42.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4998: (1.92308%)&lt;BR/&gt; 4992: (1.92308%)&lt;BR/&gt; 4990: (1.92308%)&lt;BR/&gt; 4988: (1.92308%)&gt;];
}
469--614[label="0.0384615;1pkt 1fpkt"];
469--717[label="0.0769231;2pkt 2fpkt"];
469--753[label="0.192308;5pkt 5fpkt"];
469--1657[label="1;16pkt 16fpkt"];
469--1721[label="0.0769231;2pkt 2fpkt"];
469--1800[label="0.192308;5pkt 5fpkt"];
469--2268[label="0.0384615;1pkt 1fpkt"];
469--3041[label="0.0384615;1pkt 1fpkt"];
469--3137[label="0.0769231;2pkt 2fpkt"];
469--3225[label="0.423077;11pkt 11fpkt"];
469--3339[label="0.0384615;1pkt 1fpkt"];
469--3535[label="0.047619;1pkt 1fpkt"];
469--4441[label="0.0769231;2pkt 2fpkt"];
469--4547[label="0.0384615;1pkt 1fpkt"];
469--5122[label="0.0769231;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.71.51.151" src_ip="58.67.133.150" src_port="80"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071205347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_525{
style=filled;
color=gray75;
1523[label="78.101.181.113;s;668pkt 668fpkt", shape=diamond, color=yellow];
2992[label="78.101.181.113;752pkt 752fpkt", shape=pentagon, color=darkviolet];
4369[label="78.101.181.113;752pkt 752fpkt", shape=invtriangle, color=brown];
5091[label="78.101.181.113;752pkt 752fpkt", shape=invhouse, color=bisque];
stat525[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.101.181.113:0, *:0}[96.0106%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.0328%)&lt;BR/&gt; 80: (1.02599%)&lt;BR/&gt; 135: (0.957592%)&lt;BR/&gt; 62126: (0.0683995%)&lt;BR/&gt; 61085: (0.0683995%)&gt;];
}
1523--2105[label="0.00149701;1pkt 1fpkt"];
1523--2107[label="0.00748503;5pkt 5fpkt"];
1523--2110[label="0.00299401;2pkt 2fpkt"];
1523--2111[label="0.00299401;2pkt 2fpkt"];
1523--2125[label="0.00299401;2pkt 2fpkt"];
1523--2131[label="0.00299401;2pkt 2fpkt"];
1523--2992[label="1;668pkt 668fpkt"];
1523--4369[label="1;668pkt 668fpkt"];
1523--5091[label="1;668pkt 668fpkt"];
2992--4369[label="1;752pkt 752fpkt"];
2992--5091[label="1;752pkt 752fpkt"];
4369--5091[label="1;752pkt 752fpkt"];
</description>
    <slice>
      <filter src_ip="78.101.181.113"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.41.97.117"/>
    </slice>
    <from sec="1071205221" usec="0"/>
    <to sec="1071205662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06292,1.66934,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_527{
style=filled;
color=gray75;
102[label="200.201.107.117s;249pkt 249fpkt", shape=rectangle, color=red];
3013[label="200.201.107.117;253pkt 253fpkt", shape=pentagon, color=darkviolet];
4380[label="200.201.107.117;253pkt 253fpkt", shape=invtriangle, color=brown];
5096[label="200.201.107.117;253pkt 253fpkt", shape=invhouse, color=bisque];
stat527[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.201.107.117:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
102--3013[label="1;249pkt 249fpkt"];
102--4380[label="1;249pkt 249fpkt"];
102--5096[label="1;249pkt 249fpkt"];
3013--4380[label="1;253pkt 253fpkt"];
3013--5096[label="1;253pkt 253fpkt"];
4380--5096[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.201.107.117" src_port="1030"/>
    </slice>
    <from sec="1071205894" usec="0"/>
    <to sec="1071205908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.94.128.118"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.8.131.119"/>
    </slice>
    <from sec="1071205749" usec="0"/>
    <to sec="1071205777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.45.120"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_531{
style=filled;
color=gray75;
3032[label="206.5.128.121;179pkt 179fpkt", shape=pentagon, color=darkviolet];
stat531[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.5.128.121:0, *:0}[96.0894%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.0894%)&lt;BR/&gt; 80: (1.95531%)&lt;BR/&gt; 51085: (0.27933%)&lt;BR/&gt; 49794: (0.27933%)&lt;BR/&gt; 46749: (0.27933%)&gt;];
}
</description>
    <slice>
      <filter src_ip="206.5.128.121"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.248.176.121"/>
    </slice>
    <from sec="1071205211" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_533{
style=filled;
color=gray75;
1221[label="59.104.212.121;s;636pkt 636fpkt", shape=diamond, color=yellow];
1931[label="59.104.212.121;s;490pkt 490fpkt", shape=hexagon, color=black];
3036[label="59.104.212.121;684pkt 684fpkt", shape=pentagon, color=darkviolet];
4390[label="59.104.212.121;684pkt 684fpkt", shape=invtriangle, color=brown];
5103[label="59.104.212.121;684pkt 684fpkt", shape=invhouse, color=bisque];
stat533[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.104.212.121:0, *:0}[96.3504%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.287%)&lt;BR/&gt; 80: (1.85651%)&lt;BR/&gt; 63723: (0.0786658%)&lt;BR/&gt; 50685: (0.0786658%)&lt;BR/&gt; 49263: (0.0786658%)&gt;];
}
1221--1931[label="1;490pkt 490fpkt"];
1221--2105[label="0.00157233;1pkt 1fpkt"];
1221--2107[label="0.00628931;4pkt 4fpkt"];
1221--2110[label="0.00157233;1pkt 1fpkt"];
1221--3036[label="0.998428;635pkt 635fpkt"];
1221--4390[label="0.998428;635pkt 635fpkt"];
1221--5103[label="0.998428;635pkt 635fpkt"];
1931--2105[label="0.00204082;1pkt 1fpkt"];
1931--2107[label="0.00612245;3pkt 3fpkt"];
1931--3036[label="0.997959;489pkt 489fpkt"];
1931--4390[label="0.997959;489pkt 489fpkt"];
1931--5103[label="0.997959;489pkt 489fpkt"];
3036--4390[label="1;684pkt 684fpkt"];
3036--5103[label="1;684pkt 684fpkt"];
4390--5103[label="1;684pkt 684fpkt"];
</description>
    <slice>
      <filter src_ip="59.104.212.121"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.196.124.122"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_535{
style=filled;
color=gray75;
1357[label="131.233.149.122;s;175pkt 175fpkt", shape=diamond, color=yellow];
3043[label="131.233.149.122;194pkt 194fpkt", shape=pentagon, color=darkviolet];
4393[label="131.233.149.122;194pkt 194fpkt", shape=invtriangle, color=brown];
stat535[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.149.122:37742, *:53}[87.6289%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (44.4938%)&lt;BR/&gt; 37742: (43.9609%)&lt;BR/&gt; 0: (11.0124%)&lt;BR/&gt; 137: (0.53286%)&gt;];
}
1357--3043[label="1;175pkt 175fpkt"];
1357--4393[label="1;175pkt 175fpkt"];
3043--4393[label="1;194pkt 194fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="131.233.149.122" src_port="37742"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_536{
style=filled;
color=gray75;
1317[label="149.206.132.157;d;7pkt 7fpkt", shape=diamond, color=yellow];
1435[label="207.157.173.122;s;7pkt 7fpkt", shape=diamond, color=yellow];
3044[label="207.157.173.122;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4394[label="207.157.173.122;6pkt 6fpkt", shape=invtriangle, color=brown];
stat536[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.157.173.122:80, 149.206.132.157:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2064: (7.69231%)&lt;BR/&gt; 2063: (7.69231%)&lt;BR/&gt; 2062: (7.69231%)&lt;BR/&gt; 2061: (7.69231%)&gt;];
}
1317--1435[label="1;7pkt 7fpkt"];
1317--3044[label="1;6pkt 6fpkt"];
1317--4394[label="1;6pkt 6fpkt"];
1435--3044[label="1;6pkt 6fpkt"];
1435--4394[label="1;6pkt 6fpkt"];
3044--4394[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.132.157" src_ip="207.157.173.122" src_port="80"/>
    </slice>
    <from sec="1071205695" usec="0"/>
    <to sec="1071205787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.88803,1.62121,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_537{
style=filled;
color=gray75;
103[label="218.48.244.122s;73pkt 73fpkt", shape=rectangle, color=red];
3046[label="218.48.244.122;237pkt 237fpkt", shape=pentagon, color=darkviolet];
4396[label="218.48.244.122;237pkt 237fpkt", shape=invtriangle, color=brown];
stat537[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.48.244.122:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
103--3046[label="1;73pkt 73fpkt"];
103--4396[label="1;73pkt 73fpkt"];
3046--4396[label="1;237pkt 237fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.48.244.122" src_port="1026"/>
    </slice>
    <from sec="1071205807" usec="0"/>
    <to sec="1071205822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.54.18.123"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.139.67.124"/>
    </slice>
    <from sec="1071205222" usec="0"/>
    <to sec="1071206085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.98.70.124"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071205788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.45.126"/>
    </slice>
    <from sec="1071205215" usec="0"/>
    <to sec="1071206082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.25.116.126"/>
    </slice>
    <from sec="1071205309" usec="0"/>
    <to sec="1071206093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.44.127"/>
    </slice>
    <from sec="1071205225" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.29.112.128"/>
    </slice>
    <from sec="1071205235" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.0.125.128"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_546{
style=filled;
color=gray75;
3074[label="56.165.152.128;170pkt 170fpkt", shape=pentagon, color=darkviolet];
stat546[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.165.152.128:0, *:0}[92.9412%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (92.9412%)&lt;BR/&gt; 80: (2.64706%)&lt;BR/&gt; 135: (0.882353%)&lt;BR/&gt; 26633: (0.294118%)&lt;BR/&gt; 25124: (0.294118%)&gt;];
}
</description>
    <slice>
      <filter src_ip="56.165.152.128"/>
    </slice>
    <from sec="1071205473" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.142.241.128"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071205739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.162.169.129"/>
    </slice>
    <from sec="1071206006" usec="0"/>
    <to sec="1071206094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
3084[label="196.16.198.129;123pkt 123fpkt", shape=pentagon, color=darkviolet];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.16.198.129:0, *:0}[91.0569%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.0569%)&lt;BR/&gt; 80: (2.43902%)&lt;BR/&gt; 135: (2.03252%)&lt;BR/&gt; 53582: (0.406504%)&lt;BR/&gt; 52720: (0.406504%)&gt;];
}
</description>
    <slice>
      <filter src_ip="196.16.198.129"/>
    </slice>
    <from sec="1071205237" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_550{
style=filled;
color=gray75;
3087[label="211.100.80.130;312pkt 312fpkt", shape=pentagon, color=darkviolet];
stat550[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.100.80.130:0, *:0}[93.5897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.5897%)&lt;BR/&gt; 80: (2.88462%)&lt;BR/&gt; 135: (0.320513%)&lt;BR/&gt; 65483: (0.160256%)&lt;BR/&gt; 65166: (0.160256%)&gt;];
}
</description>
    <slice>
      <filter src_ip="211.100.80.130"/>
    </slice>
    <from sec="1071205219" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_551{
style=filled;
color=gray75;
1168[label="201.120.98.249;d;51pkt 51fpkt", shape=diamond, color=yellow];
2517[label="101.21.120.47;129pkt 129fpkt", shape=pentagon, color=darkviolet];
3091[label="58.67.146.130;54pkt 54fpkt", shape=pentagon, color=darkviolet];
stat551[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.21.120.47:0, *:0}[59.1743%]&lt;BR/&gt;{58.67.146.130:80, *:*}[24.7706%]&lt;BR/&gt;{*:*, 201.120.98.249:*}[23.3945%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (58.1197%)&lt;BR/&gt; 80: (20.2991%)&lt;BR/&gt; 2558: (0.42735%)&lt;BR/&gt; 2556: (0.42735%)&lt;BR/&gt; 2554: (0.42735%)&gt;];
}
1168--1337[label="0.0196078;1pkt 1fpkt"];
1168--1985[label="0.0196078;1pkt 1fpkt"];
1168--2090[label="0.0196078;1pkt 1fpkt"];
1168--2103[label="0.176471;9pkt 9fpkt"];
1168--2517[label="0.0196078;1pkt 1fpkt"];
1168--2889[label="0.0196078;1pkt 1fpkt"];
1168--3025[label="0.611111;11pkt 11fpkt"];
1168--3091[label="0.294118;15pkt 15fpkt"];
1168--3236[label="0.0322581;1pkt 1fpkt"];
1168--3433[label="0.0392157;2pkt 2fpkt"];
1168--3664[label="0.0980392;5pkt 5fpkt"];
1168--3722[label="0.0196078;1pkt 1fpkt"];
1168--4325[label="0.0196078;1pkt 1fpkt"];
1168--4488[label="0.0322581;1pkt 1fpkt"];
1168--4604[label="0.0392157;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="201.120.98.249"/>
      <filter src_ip="58.67.146.130" src_port="80"/>
      <filter src_ip="101.21.120.47"/>
    </slice>
    <from sec="1071205222" usec="0"/>
    <to sec="1071206071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.130"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_553{
style=filled;
color=gray75;
1212[label="219.75.32.131;s;255pkt 255fpkt", shape=diamond, color=yellow];
stat553[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.75.32.131:*, *:139}[99.6078%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.8039%)&lt;BR/&gt; 0: (0.392157%)&lt;BR/&gt; 2123: (0.196078%)&lt;BR/&gt; 2121: (0.196078%)&lt;BR/&gt; 2119: (0.196078%)&gt;];
}
1212--1978[label="1;255pkt 255fpkt"];
1212--3095[label="1;255pkt 255fpkt"];
1212--4422[label="1;255pkt 255fpkt"];
1212--5112[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="219.75.32.131"/>
    </slice>
    <from sec="1071205696" usec="0"/>
    <to sec="1071205743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.131"/>
    </slice>
    <from sec="1071205211" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.73.72.134"/>
    </slice>
    <from sec="1071205223" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.71.162.134"/>
    </slice>
    <from sec="1071205211" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.56.101.135"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.135"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.154.255.135"/>
    </slice>
    <from sec="1071205387" usec="0"/>
    <to sec="1071206006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.45.136"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.49.103.136"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.88803,1.62121,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_563{
style=filled;
color=gray75;
106[label="78.46.193.136s;137pkt 137fpkt", shape=rectangle, color=red];
3133[label="78.46.193.136;253pkt 253fpkt", shape=pentagon, color=darkviolet];
4440[label="78.46.193.136;253pkt 253fpkt", shape=invtriangle, color=brown];
stat563[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.46.193.136:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
106--3133[label="1;137pkt 137fpkt"];
106--4440[label="1;137pkt 137fpkt"];
3133--4440[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="78.46.193.136" src_port="1027"/>
    </slice>
    <from sec="1071205388" usec="0"/>
    <to sec="1071205404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945324,1.56671,501,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_564{
style=filled;
color=gray75;
179[label="160.188.21.39d;6pkt 6fpkt", shape=rectangle, color=red];
713[label="56.103.28.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
1188[label="61.239.212.137;s;2pkt 2fpkt", shape=diamond, color=yellow];
3143[label="61.239.212.137;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4445[label="61.239.212.137;1pkt 1fpkt", shape=invtriangle, color=brown];
stat564[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.239.212.137:*, 160.188.21.39:21}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 1859: (18.1818%)&lt;BR/&gt; 61470: (9.09091%)&lt;BR/&gt; 64726: (4.54545%)&lt;BR/&gt; 4672: (4.54545%)&gt;];
}
179--565[label="1;6pkt 6fpkt"];
179--713[label="1;1pkt 1fpkt"];
179--1188[label="0.5;1pkt 1fpkt"];
179--3143[label="1;1pkt 1fpkt"];
179--4445[label="1;1pkt 1fpkt"];
1188--3143[label="1;1pkt 1fpkt"];
1188--4445[label="1;1pkt 1fpkt"];
3143--4445[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.21.39" dst_port="21" src_ip="61.239.212.137"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.172.85.138"/>
    </slice>
    <from sec="1071205490" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_566{
style=filled;
color=gray75;
598[label="201.118.244.138;s;2198pkt 2198fpkt", shape=diamond, color=yellow];
stat566[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.118.244.138:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
598--1902[label="1;1529pkt 1529fpkt"];
598--3149[label="1;2198pkt 2198fpkt"];
598--4448[label="1;2198pkt 2198fpkt"];
598--5126[label="1;2198pkt 2198fpkt"];
</description>
    <slice>
      <filter src_ip="201.118.244.138"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.11.78.140"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071205718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.141"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.162.245.141"/>
    </slice>
    <from sec="1071205905" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,011,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_570{
style=filled;
color=gray75;
684[label="78.9.120.143;s;1336pkt 1336fpkt", shape=diamond, color=yellow];
1708[label="78.9.120.143;s;541pkt 541fpkt", shape=hexagon, color=black];
3175[label="78.9.120.143;1637pkt 1637fpkt", shape=pentagon, color=darkviolet];
stat570[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.9.120.143:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 55161: (0.0853728%)&lt;BR/&gt; 50980: (0.0853728%)&lt;BR/&gt; 40497: (0.0853728%)&lt;BR/&gt; 29786: (0.0853728%)&gt;];
}
684--893[label="0.00581395;1pkt 1fpkt"];
684--1708[label="1;541pkt 541fpkt"];
684--3175[label="1;1336pkt 1336fpkt"];
1708--3175[label="1;541pkt 541fpkt"];
</description>
    <slice>
      <filter src_ip="78.9.120.143" src_port="7000"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.145"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.168.162.146"/>
    </slice>
    <from sec="1071205774" usec="0"/>
    <to sec="1071205815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.146"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.251.0.147"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071205245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="166.73.106.147"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.227.161.147"/>
    </slice>
    <from sec="1071205239" usec="0"/>
    <to sec="1071206082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.190.254.147"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.175.3.148"/>
    </slice>
    <from sec="1071205863" usec="0"/>
    <to sec="1071205879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_579{
style=filled;
color=gray75;
554[label="149.207.72.236;d;2pkt 2fpkt", shape=diamond, color=yellow];
3203[label="216.20.64.148;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat579[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.20.64.148:15004, 149.207.72.236:49158}[50%]&lt;BR/&gt;{216.16.160.218:80, 149.207.72.236:1378}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49158: (33.3333%)&lt;BR/&gt; 15004: (33.3333%)&lt;BR/&gt; 1378: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
554--555[label="1;1pkt 1fpkt"];
554--606[label="0.5;1pkt 1fpkt"];
554--3203[label="1;1pkt 1fpkt"];
554--3678[label="0.5;1pkt 1fpkt"];
554--4736[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.72.236" dst_port="1378" src_ip="216.16.160.218" src_port="80"/>
      <filter dst_ip="149.207.72.236" dst_port="49158" src_ip="216.20.64.148" src_port="15004"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.148"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_581{
style=filled;
color=gray75;
1331[label="57.98.34.149;s;4pkt 4fpkt", shape=diamond, color=yellow];
3212[label="57.98.34.149;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat581[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.98.34.149:80, 149.206.150.116:40687}[25%]&lt;BR/&gt;{57.98.34.149:80, 149.206.150.116:40753}[25%]&lt;BR/&gt;{57.98.34.149:80, 149.206.150.116:40851}[25%]&lt;BR/&gt;{57.98.34.149:80, 149.206.150.116:41113}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41113: (14.2857%)&lt;BR/&gt; 40851: (14.2857%)&lt;BR/&gt; 40753: (14.2857%)&lt;BR/&gt; 40687: (7.14286%)&gt;];
}
1331--3212[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.150.116" dst_port="41113" src_ip="57.98.34.149" src_port="80"/>
      <filter dst_ip="149.206.150.116" dst_port="40851" src_ip="57.98.34.149" src_port="80"/>
      <filter dst_ip="149.206.150.116" dst_port="40753" src_ip="57.98.34.149" src_port="80"/>
      <filter dst_ip="149.206.150.116" dst_port="40687" src_ip="57.98.34.149" src_port="80"/>
    </slice>
    <from sec="1071205776" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_582{
style=filled;
color=gray75;
1614[label="149.206.136.142;d;50pkt 50fpkt", shape=diamond, color=yellow];
1618[label="57.46.200.149;s;48pkt 48fpkt", shape=diamond, color=yellow];
3218[label="57.46.200.149;48pkt 48fpkt", shape=pentagon, color=darkviolet];
4476[label="57.46.200.149;48pkt 48fpkt", shape=invtriangle, color=brown];
5138[label="57.46.200.149;48pkt 48fpkt", shape=invhouse, color=bisque];
stat582[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.46.200.149:443, 149.206.136.142:*}[96%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.5868%)&lt;BR/&gt; 1363: (1.03306%)&lt;BR/&gt; 1362: (1.03306%)&lt;BR/&gt; 1361: (1.03306%)&lt;BR/&gt; 1360: (1.03306%)&gt;];
}
1614--1618[label="1;48pkt 48fpkt"];
1614--3218[label="1;48pkt 48fpkt"];
1614--4476[label="1;48pkt 48fpkt"];
1614--5138[label="1;48pkt 48fpkt"];
1618--3218[label="1;48pkt 48fpkt"];
1618--4476[label="1;48pkt 48fpkt"];
1618--5138[label="1;48pkt 48fpkt"];
3218--4476[label="1;48pkt 48fpkt"];
3218--5138[label="1;48pkt 48fpkt"];
4476--5138[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.136.142" src_ip="57.46.200.149" src_port="443"/>
    </slice>
    <from sec="1071205881" usec="0"/>
    <to sec="1071206030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.108.31.150"/>
    </slice>
    <from sec="1071205217" usec="0"/>
    <to sec="1071206091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.89.182.150"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.888426,1.57451,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_585{
style=filled;
color=gray75;
26[label="208.169.67.152s;1pkt 1fpkt", shape=rectangle, color=red];
1462[label="208.169.67.152;s;1pkt 1fpkt", shape=diamond, color=yellow];
3239[label="208.169.67.152;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat585[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.169.67.152:80, 149.206.74.218:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1142: (18.75%)&lt;BR/&gt; 1610: (6.25%)&lt;BR/&gt; 1097: (6.25%)&lt;BR/&gt; 1078: (6.25%)&gt;];
}
26--621[label="1;1pkt 1fpkt"];
26--1462[label="1;1pkt 1fpkt"];
26--3239[label="1;1pkt 1fpkt"];
1462--3239[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.74.218" src_ip="208.169.67.152" src_port="80"/>
    </slice>
    <from sec="1071205395" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_586{
style=filled;
color=gray75;
1620[label="218.22.71.153;s;2pkt 2fpkt", shape=diamond, color=yellow];
3242[label="218.22.71.153;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4492[label="218.22.71.153;2pkt 2fpkt", shape=invtriangle, color=brown];
stat586[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.22.71.153:80, 149.207.88.223:9541}[50%]&lt;BR/&gt;{218.22.71.153:80, 149.207.88.223:9567}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 9567: (25%)&lt;BR/&gt; 9541: (25%)&gt;];
}
1620--3242[label="1;2pkt 2fpkt"];
1620--4492[label="1;2pkt 2fpkt"];
3242--4492[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.88.223" dst_port="9567" src_ip="218.22.71.153" src_port="80"/>
      <filter dst_ip="149.207.88.223" dst_port="9541" src_ip="218.22.71.153" src_port="80"/>
    </slice>
    <from sec="1071205914" usec="0"/>
    <to sec="1071206008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_587{
style=filled;
color=gray75;
789[label="149.206.212.51;d;79pkt 79fpkt", shape=diamond, color=yellow];
1464[label="200.213.98.28;s;194pkt 194fpkt", shape=diamond, color=yellow];
1611[label="149.206.212.57;d;128pkt 128fpkt", shape=diamond, color=yellow];
2023[label="149.206.212.51;d;76pkt 76fpkt", shape=hexagon, color=black];
2865[label="61.187.49.94;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3243[label="78.100.72.153;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4311[label="61.187.49.94;2pkt 2fpkt", shape=invtriangle, color=brown];
4493[label="78.100.72.153;4pkt 4fpkt", shape=invtriangle, color=brown];
5071[label="61.187.49.94;2pkt 2fpkt", shape=invhouse, color=bisque];
5147[label="78.100.72.153;4pkt 4fpkt", shape=invhouse, color=bisque];
stat587[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.213.98.28:*, 149.206.212.57:80}[57.0755%]&lt;BR/&gt;{200.213.98.28:*, 149.206.212.51:80}[32.0755%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.596%)&lt;BR/&gt; 1394: (0.505051%)&lt;BR/&gt; 1393: (0.505051%)&lt;BR/&gt; 1391: (0.505051%)&lt;BR/&gt; 1390: (0.505051%)&gt;];
}
789--1088[label="0.0126582;1pkt 1fpkt"];
789--1464[label="0.860759;68pkt 68fpkt"];
789--2023[label="1;76pkt 76fpkt"];
789--2105[label="0.0379747;3pkt 3fpkt"];
789--2107[label="0.898734;71pkt 71fpkt"];
789--2110[label="0.0379747;3pkt 3fpkt"];
789--2485[label="0.0126582;1pkt 1fpkt"];
789--2865[label="1;2pkt 2fpkt"];
789--3243[label="1;4pkt 4fpkt"];
789--4311[label="1;2pkt 2fpkt"];
789--4493[label="1;4pkt 4fpkt"];
789--5071[label="1;2pkt 2fpkt"];
789--5147[label="1;4pkt 4fpkt"];
1464--1543[label="0.00552486;1pkt 1fpkt"];
1464--1611[label="0.945312;121pkt 121fpkt"];
1464--2023[label="0.894737;68pkt 68fpkt"];
1464--2107[label="0.350515;68pkt 68fpkt"];
1464--2110[label="0.350515;68pkt 68fpkt"];
1611--2107[label="0.015625;2pkt 2fpkt"];
1611--2110[label="0.53125;68pkt 68fpkt"];
1611--2299[label="0.0078125;1pkt 1fpkt"];
1611--4002[label="0.0078125;1pkt 1fpkt"];
1611--4920[label="0.0078125;1pkt 1fpkt"];
2023--2105[label="0.0394737;3pkt 3fpkt"];
2023--2107[label="0.934211;71pkt 71fpkt"];
2023--2110[label="0.0131579;1pkt 1fpkt"];
2023--2485[label="0.0131579;1pkt 1fpkt"];
2023--3243[label="1;4pkt 4fpkt"];
2023--4493[label="1;4pkt 4fpkt"];
2023--5147[label="1;4pkt 4fpkt"];
2865--4311[label="1;2pkt 2fpkt"];
2865--5071[label="1;2pkt 2fpkt"];
3243--4493[label="1;4pkt 4fpkt"];
3243--5147[label="1;4pkt 4fpkt"];
4311--5071[label="1;2pkt 2fpkt"];
4493--5147[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.212.57" dst_port="80" src_ip="200.213.98.28"/>
      <filter dst_ip="149.206.212.51" dst_port="80" src_ip="200.213.98.28"/>
    </slice>
    <from sec="1071205738" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.93.129.154"/>
    </slice>
    <from sec="1071205563" usec="0"/>
    <to sec="1071205585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.155"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_592{
style=filled;
color=gray75;
3263[label="216.66.197.156;124pkt 124fpkt", shape=pentagon, color=darkviolet];
stat592[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.66.197.156:0, *:0}[93.5484%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.5484%)&lt;BR/&gt; 135: (1.6129%)&lt;BR/&gt; 80: (1.6129%)&lt;BR/&gt; 38035: (0.403226%)&lt;BR/&gt; 30973: (0.403226%)&gt;];
}
</description>
    <slice>
      <filter src_ip="216.66.197.156"/>
    </slice>
    <from sec="1071205293" usec="0"/>
    <to sec="1071206093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.827201,1.62875,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_593{
style=filled;
color=gray75;
73[label="213.10.191.3s;263pkt 263fpkt", shape=rectangle, color=red];
3270[label="78.65.197.157;117pkt 117fpkt", shape=pentagon, color=darkviolet];
stat593[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.10.191.3:1044, *:137}[62.9747%]&lt;BR/&gt;{78.65.197.157:1030, *:137}[37.0253%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1044: (26.1842%)&lt;BR/&gt; 1030: (23.8158%)&gt;];
}
73--3270[label="0.547009;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.10.191.3" src_port="1044"/>
      <filter dst_port="137" src_ip="78.65.197.157" src_port="1030"/>
    </slice>
    <from sec="1071205711" usec="0"/>
    <to sec="1071205730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.158"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.827201,1.62875,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_595{
style=filled;
color=gray75;
178[label="101.92.196.159s;1pkt 1fpkt", shape=rectangle, color=red];
3285[label="101.92.196.159;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat595[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.92.196.159:1535, 166.55.243.90:80}[50%]&lt;BR/&gt;{101.92.196.159:1536, 166.55.243.90:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1535: (33.3333%)&lt;BR/&gt; 1536: (16.6667%)&gt;];
}
178--3285[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.243.90" dst_port="80" src_ip="101.92.196.159" src_port="1536"/>
      <filter dst_ip="166.55.243.90" dst_port="80" src_ip="101.92.196.159" src_port="1535"/>
    </slice>
    <from sec="1071205446" usec="0"/>
    <to sec="1071205474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.87.173.160"/>
    </slice>
    <from sec="1071205286" usec="0"/>
    <to sec="1071205316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.166.240.160"/>
    </slice>
    <from sec="1071206091" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.161"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_599{
style=filled;
color=gray75;
3306[label="211.66.92.162;201pkt 201fpkt", shape=pentagon, color=darkviolet];
stat599[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.66.92.162:0, *:0}[99.005%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.005%)&lt;BR/&gt; 135: (0.497512%)&lt;BR/&gt; 34111: (0.248756%)&lt;BR/&gt; 29796: (0.248756%)&gt;];
}
</description>
    <slice>
      <filter src_ip="211.66.92.162"/>
    </slice>
    <from sec="1071205217" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.253.16.163"/>
    </slice>
    <from sec="1071205929" usec="0"/>
    <to sec="1071206075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.68.74.164"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.165"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.49.134.166"/>
    </slice>
    <from sec="1071205265" usec="0"/>
    <to sec="1071205285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.41.176.166"/>
    </slice>
    <from sec="1071205587" usec="0"/>
    <to sec="1071205617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_605{
style=filled;
color=gray75;
696[label="219.65.91.167;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat605[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.65.91.167:6881, 149.207.217.197:4278}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 4278: (50%)&gt;];
}
696--1644[label="1;1pkt 1fpkt"];
696--2061[label="1;1pkt 1fpkt"];
696--3329[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="4278" src_ip="219.65.91.167" src_port="6881"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.89.93.167"/>
    </slice>
    <from sec="1071205904" usec="0"/>
    <to sec="1071205926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.73.213.169"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.169"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
3356[label="59.185.24.171;161pkt 161fpkt", shape=pentagon, color=darkviolet];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.185.24.171:*, *:135}[51.5528%]&lt;BR/&gt;{59.185.24.171:*, *:445}[48.4472%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.7764%)&lt;BR/&gt; 445: (24.2236%)&lt;BR/&gt; 4362: (0.621118%)&lt;BR/&gt; 4293: (0.621118%)&lt;BR/&gt; 4290: (0.621118%)&gt;];
}
</description>
    <slice>
      <filter dst_port="135" src_ip="59.185.24.171"/>
      <filter dst_port="445" src_ip="59.185.24.171"/>
    </slice>
    <from sec="1071205216" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.26.25.171"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06292,1.66934,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_613{
style=filled;
color=gray75;
113[label="196.204.27.171s;1pkt 1fpkt", shape=rectangle, color=red];
3358[label="196.204.27.171;80pkt 80fpkt", shape=pentagon, color=darkviolet];
4562[label="196.204.27.171;80pkt 80fpkt", shape=invtriangle, color=brown];
5183[label="196.204.27.171;80pkt 80fpkt", shape=invhouse, color=bisque];
stat613[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.204.27.171:80, 149.206.70.57:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4559: (0.829876%)&lt;BR/&gt; 4589: (0.622407%)&lt;BR/&gt; 4588: (0.622407%)&lt;BR/&gt; 4587: (0.622407%)&gt;];
}
113--3358[label="1;1pkt 1fpkt"];
113--4562[label="1;1pkt 1fpkt"];
113--5183[label="1;1pkt 1fpkt"];
3358--4562[label="1;80pkt 80fpkt"];
3358--5183[label="1;80pkt 80fpkt"];
4562--5183[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.70.57" src_ip="196.204.27.171" src_port="80"/>
    </slice>
    <from sec="1071206038" usec="0"/>
    <to sec="1071206091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06292,1.66934,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_614{
style=filled;
color=gray75;
114[label="219.91.102.171s;303pkt 303fpkt", shape=rectangle, color=red];
3359[label="219.91.102.171;254pkt 254fpkt", shape=pentagon, color=darkviolet];
3416[label="216.32.34.178;174pkt 174fpkt", shape=pentagon, color=darkviolet];
4594[label="216.32.34.178;174pkt 174fpkt", shape=invtriangle, color=brown];
5198[label="216.32.34.178;174pkt 174fpkt", shape=invhouse, color=bisque];
stat614[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.91.102.171:1029, *:137}[59.3458%]&lt;BR/&gt;{216.32.34.178:1031, *:137}[40.6542%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1031: (28.1742%)&lt;BR/&gt; 1029: (21.8258%)&gt;];
}
114--3359[label="0.854331;217pkt 217fpkt"];
114--3416[label="0.494253;86pkt 86fpkt"];
114--4594[label="0.494253;86pkt 86fpkt"];
114--5198[label="0.494253;86pkt 86fpkt"];
3416--4594[label="1;174pkt 174fpkt"];
3416--5198[label="1;174pkt 174fpkt"];
4594--5198[label="1;174pkt 174fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.91.102.171" src_port="1029"/>
      <filter dst_port="137" src_ip="216.32.34.178" src_port="1031"/>
    </slice>
    <from sec="1071205278" usec="0"/>
    <to sec="1071205307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.0.106.171"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.136.118.171"/>
    </slice>
    <from sec="1071205557" usec="0"/>
    <to sec="1071205590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.73.151.171"/>
    </slice>
    <from sec="1071206058" usec="0"/>
    <to sec="1071206074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.171"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.88803,1.62121,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
115[label="219.75.51.172s;69pkt 69fpkt", shape=rectangle, color=red];
3368[label="219.75.51.172;250pkt 250fpkt", shape=pentagon, color=darkviolet];
4567[label="219.75.51.172;112pkt 112fpkt", shape=invtriangle, color=brown];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.75.51.172:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
115--3368[label="1;69pkt 69fpkt"];
3368--4567[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.75.51.172" src_port="1026"/>
    </slice>
    <from sec="1071205721" usec="0"/>
    <to sec="1071205735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.172"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="10.10.15.173"/>
    </slice>
    <from sec="1071205705" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.52.91.173"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.173"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.6.0.174"/>
    </slice>
    <from sec="1071205214" usec="0"/>
    <to sec="1071206085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.36.83.174"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_626{
style=filled;
color=gray75;
1329[label="218.167.1.175;s;129pkt 129fpkt", shape=diamond, color=yellow];
3387[label="218.167.1.175;130pkt 130fpkt", shape=pentagon, color=darkviolet];
4579[label="218.167.1.175;129pkt 129fpkt", shape=invtriangle, color=brown];
stat626[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.167.1.175:*, *:139}[97.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.0979%)&lt;BR/&gt; 0: (1.54639%)&lt;BR/&gt; 65425: (0.386598%)&lt;BR/&gt; 65027: (0.386598%)&lt;BR/&gt; 64941: (0.386598%)&gt;];
}
1329--3387[label="1;129pkt 129fpkt"];
1329--4579[label="1;129pkt 129fpkt"];
3387--4579[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="218.167.1.175"/>
    </slice>
    <from sec="1071205753" usec="0"/>
    <to sec="1071206009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.116.11.175"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.40.30.175"/>
    </slice>
    <from sec="1071205316" usec="0"/>
    <to sec="1071205344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889707,1.5466,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_629{
style=filled;
color=gray75;
658[label="212.80.47.175;s;156pkt 156fpkt", shape=diamond, color=yellow];
1917[label="212.80.47.175;s;156pkt 156fpkt", shape=hexagon, color=black];
3392[label="212.80.47.175;192pkt 192fpkt", shape=pentagon, color=darkviolet];
4582[label="212.80.47.175;188pkt 188fpkt", shape=invtriangle, color=brown];
stat629[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.80.47.175:80, 131.233.18.63:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3915: (0.289017%)&lt;BR/&gt; 3914: (0.289017%)&lt;BR/&gt; 3913: (0.289017%)&lt;BR/&gt; 3912: (0.289017%)&gt;];
}
658--1917[label="1;156pkt 156fpkt"];
658--2103[label="0.00641026;1pkt 1fpkt"];
658--3392[label="0.99359;155pkt 155fpkt"];
658--4582[label="0.99359;155pkt 155fpkt"];
1917--2103[label="0.00641026;1pkt 1fpkt"];
1917--3392[label="0.99359;155pkt 155fpkt"];
1917--4582[label="0.99359;155pkt 155fpkt"];
3392--4582[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_ip="131.233.18.63" src_ip="212.80.47.175" src_port="80"/>
    </slice>
    <from sec="1071205306" usec="0"/>
    <to sec="1071205976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_630{
style=filled;
color=gray75;
605[label="59.26.85.216;s;45pkt 45fpkt", shape=diamond, color=yellow];
765[label="205.1.156.175;s;38pkt 38fpkt", shape=diamond, color=yellow];
1304[label="149.206.192.133;d;18pkt 18fpkt", shape=diamond, color=yellow];
3142[label="211.245.169.137;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4444[label="211.245.169.137;2pkt 2fpkt", shape=invtriangle, color=brown];
5125[label="211.245.169.137;2pkt 2fpkt", shape=invhouse, color=bisque];
stat630[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.156.175:80, *:*}[25.2525%]&lt;BR/&gt;{59.26.85.216:80, 201.120.105.4:*}[20.202%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.4579%)&lt;BR/&gt; 443: (6.54206%)&lt;BR/&gt; 2644: (1.86916%)&lt;BR/&gt; 2643: (1.86916%)&lt;BR/&gt; 2575: (0.934579%)&gt;];
}
605--1044[label="0.0666667;3pkt 3fpkt"];
605--1645[label="0.0222222;1pkt 1fpkt"];
605--1698[label="0.0222222;1pkt 1fpkt"];
605--1937[label="0.177778;8pkt 8fpkt"];
605--2102[label="0.0444444;2pkt 2fpkt"];
605--2103[label="0.244444;11pkt 11fpkt"];
605--2122[label="0.0444444;2pkt 2fpkt"];
605--3662[label="1;45pkt 45fpkt"];
605--4726[label="1;45pkt 45fpkt"];
765--1044[label="0.0526316;2pkt 2fpkt"];
765--1304[label="0.111111;2pkt 2fpkt"];
765--1690[label="0.289474;11pkt 11fpkt"];
765--2103[label="0.289474;11pkt 11fpkt"];
765--3393[label="1;38pkt 38fpkt"];
1304--1335[label="0.3;3pkt 3fpkt"];
1304--1571[label="0.0555556;1pkt 1fpkt"];
1304--2103[label="0.0555556;1pkt 1fpkt"];
1304--2230[label="0.0555556;1pkt 1fpkt"];
1304--2759[label="0.166667;3pkt 3fpkt"];
1304--3142[label="1;2pkt 2fpkt"];
1304--3393[label="0.111111;2pkt 2fpkt"];
1304--3783[label="0.0555556;1pkt 1fpkt"];
1304--3959[label="0.0555556;1pkt 1fpkt"];
1304--4444[label="1;2pkt 2fpkt"];
1304--4801[label="0.0555556;1pkt 1fpkt"];
1304--5125[label="1;2pkt 2fpkt"];
3142--4444[label="1;2pkt 2fpkt"];
3142--5125[label="1;2pkt 2fpkt"];
4444--5125[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="205.1.156.175" src_port="80"/>
      <filter dst_ip="201.120.105.4" src_ip="59.26.85.216" src_port="80"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.214.193.175"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.244.63.176"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.230.4.177"/>
    </slice>
    <from sec="1071205396" usec="0"/>
    <to sec="1071205466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.131.21.178"/>
    </slice>
    <from sec="1071205807" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.41.178"/>
    </slice>
    <from sec="1071205320" usec="0"/>
    <to sec="1071206087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_638{
style=filled;
color=gray75;
1038[label="58.67.188.209;s;52pkt 52fpkt", shape=diamond, color=yellow];
stat638[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.67.188.209:25, 145.166.50.12:*}[46.1538%]&lt;BR/&gt;{58.67.188.209:25, 160.188.106.10:*}[32.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64431: (0.961538%)&lt;BR/&gt; 63791: (0.961538%)&lt;BR/&gt; 63693: (0.961538%)&lt;BR/&gt; 63399: (0.961538%)&gt;];
}
1038--1397[label="0.04;2pkt 2fpkt"];
1038--1579[label="0.0192308;1pkt 1fpkt"];
1038--2043[label="1;52pkt 52fpkt"];
1038--3614[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.50.12" src_ip="58.67.188.209" src_port="25"/>
      <filter dst_ip="160.188.106.10" src_ip="58.67.188.209" src_port="25"/>
    </slice>
    <from sec="1071205245" usec="0"/>
    <to sec="1071205996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.151.234.178"/>
    </slice>
    <from sec="1071205682" usec="0"/>
    <to sec="1071205696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.41.180"/>
    </slice>
    <from sec="1071205294" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.4.182.180"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071206088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.33.186.182"/>
    </slice>
    <from sec="1071205220" usec="0"/>
    <to sec="1071205249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.238.196.183"/>
    </slice>
    <from sec="1071205281" usec="0"/>
    <to sec="1071205405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.41.184"/>
    </slice>
    <from sec="1071205403" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.116.141.184"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.37.167.184"/>
    </slice>
    <from sec="1071205234" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.36.50.185"/>
    </slice>
    <from sec="1071205335" usec="0"/>
    <to sec="1071205352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.1.172.186"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.14.24.188"/>
    </slice>
    <from sec="1071205422" usec="0"/>
    <to sec="1071205433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="152.38.132.188"/>
    </slice>
    <from sec="1071205225" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.45.204.188"/>
    </slice>
    <from sec="1071205217" usec="0"/>
    <to sec="1071206092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.827201,1.62875,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_653{
style=filled;
color=gray75;
120[label="218.39.248.190s;48pkt 48fpkt", shape=rectangle, color=red];
3500[label="218.39.248.190;252pkt 252fpkt", shape=pentagon, color=darkviolet];
stat653[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.39.248.190:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
120--3500[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.39.248.190" src_port="1028"/>
    </slice>
    <from sec="1071205645" usec="0"/>
    <to sec="1071205664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.73.162.191"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.29.206.193"/>
    </slice>
    <from sec="1071205224" usec="0"/>
    <to sec="1071206086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_656{
style=filled;
color=gray75;
409[label="149.207.84.19;d;600pkt 600fpkt", shape=diamond, color=yellow];
410[label="77.55.162.179;s;4pkt 4fpkt", shape=diamond, color=yellow];
803[label="211.49.239.180;s;24pkt 24fpkt", shape=diamond, color=yellow];
1211[label="57.88.66.177;s;76pkt 76fpkt", shape=diamond, color=yellow];
1717[label="149.207.84.19;d;255pkt 255fpkt", shape=hexagon, color=black];
2466[label="209.161.7.40;10pkt 10fpkt", shape=pentagon, color=darkviolet];
2521[label="58.245.9.48;5pkt 5fpkt", shape=pentagon, color=darkviolet];
2595[label="213.102.11.57;9pkt 9fpkt", shape=pentagon, color=darkviolet];
2607[label="218.166.130.58;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2751[label="205.168.74.79;6pkt 6fpkt", shape=pentagon, color=darkviolet];
2925[label="77.55.161.103;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3327[label="150.111.227.166;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3409[label="57.88.66.177;76pkt 76fpkt", shape=pentagon, color=darkviolet];
3440[label="211.49.239.180;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3498[label="57.248.115.190;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3507[label="77.55.162.192;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4124[label="58.245.9.48;5pkt 5fpkt", shape=invtriangle, color=brown];
4168[label="213.102.11.57;8pkt 8fpkt", shape=invtriangle, color=brown];
4543[label="150.111.227.166;8pkt 8fpkt", shape=invtriangle, color=brown];
4591[label="57.88.66.177;76pkt 76fpkt", shape=invtriangle, color=brown];
4608[label="211.49.239.180;25pkt 25fpkt", shape=invtriangle, color=brown];
4641[label="77.55.162.192;2pkt 2fpkt", shape=invtriangle, color=brown];
4984[label="58.245.9.48;6pkt 6fpkt", shape=invhouse, color=bisque];
5203[label="211.49.239.180;25pkt 25fpkt", shape=invhouse, color=bisque];
5218[label="77.55.162.192;2pkt 2fpkt", shape=invhouse, color=bisque];
stat656[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 149.207.84.19:*}[95.6661%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8834%)&lt;BR/&gt; 2189: (0.233281%)&lt;BR/&gt; 1956: (0.233281%)&lt;BR/&gt; 1872: (0.233281%)&lt;BR/&gt; 1871: (0.233281%)&gt;];
}
409--410[label="1;4pkt 4fpkt"];
409--439[label="0.0216667;13pkt 13fpkt"];
409--477[label="0.00590551;3pkt 3fpkt"];
409--524[label="0.0206186;4pkt 4fpkt"];
409--600[label="0.6;3pkt 3fpkt"];
409--606[label="0.083499;42pkt 42fpkt"];
409--687[label="0.00326797;1pkt 1fpkt"];
409--690[label="0.015;9pkt 9fpkt"];
409--738[label="0.0140562;7pkt 7fpkt"];
409--755[label="0.0612245;12pkt 12fpkt"];
409--787[label="0.0248227;7pkt 7fpkt"];
409--803[label="1;24pkt 24fpkt"];
409--835[label="0.821429;69pkt 69fpkt"];
409--1142[label="0.0412371;4pkt 4fpkt"];
409--1211[label="0.973684;74pkt 74fpkt"];
409--1298[label="0.0232558;1pkt 1fpkt"];
409--1312[label="1;3pkt 3fpkt"];
409--1574[label="0.0113636;1pkt 1fpkt"];
409--1696[label="0.8;4pkt 4fpkt"];
409--1717[label="1;255pkt 255fpkt"];
409--1804[label="0.0731707;12pkt 12fpkt"];
409--1825[label="0.905405;67pkt 67fpkt"];
409--2103[label="0.0816667;49pkt 49fpkt"];
409--2155[label="0.0232558;7pkt 7fpkt"];
409--2466[label="0.2;2pkt 2fpkt"];
409--2521[label="1;5pkt 5fpkt"];
409--2595[label="1;9pkt 9fpkt"];
409--2607[label="0.166667;2pkt 2fpkt"];
409--2675[label="0.0144928;1pkt 1fpkt"];
409--2751[label="1;6pkt 6fpkt"];
409--2795[label="0.02;1pkt 1fpkt"];
409--2925[label="0.571429;4pkt 4fpkt"];
409--3075[label="0.0373832;4pkt 4fpkt"];
409--3103[label="0.521739;12pkt 12fpkt"];
409--3140[label="0.5;3pkt 3fpkt"];
409--3226[label="0.0106383;1pkt 1fpkt"];
409--3260[label="0.0263158;1pkt 1fpkt"];
409--3327[label="1;8pkt 8fpkt"];
409--3337[label="0.0216667;13pkt 13fpkt"];
409--3364[label="0.057971;12pkt 12fpkt"];
409--3409[label="0.973684;74pkt 74fpkt"];
409--3440[label="1;25pkt 25fpkt"];
409--3498[label="1;10pkt 10fpkt"];
409--3507[label="1;2pkt 2fpkt"];
409--3517[label="0.214286;12pkt 12fpkt"];
409--3586[label="0.0108696;1pkt 1fpkt"];
409--3605[label="0.291667;7pkt 7fpkt"];
409--3673[label="1;3pkt 3fpkt"];
409--3678[label="0.0752688;42pkt 42fpkt"];
409--3711[label="0.8;4pkt 4fpkt"];
409--3821[label="0.111111;2pkt 2fpkt"];
409--3913[label="0.0233333;7pkt 7fpkt"];
409--4124[label="1;5pkt 5fpkt"];
409--4168[label="1;8pkt 8fpkt"];
409--4208[label="0.0144928;1pkt 1fpkt"];
409--4273[label="0.02;1pkt 1fpkt"];
409--4480[label="0.0106383;1pkt 1fpkt"];
409--4543[label="1;8pkt 8fpkt"];
409--4591[label="0.973684;74pkt 74fpkt"];
409--4608[label="1;25pkt 25fpkt"];
409--4641[label="1;2pkt 2fpkt"];
409--4683[label="0.0108696;1pkt 1fpkt"];
409--4694[label="0.291667;7pkt 7fpkt"];
409--4736[label="0.0752688;42pkt 42fpkt"];
409--4824[label="0.111111;2pkt 2fpkt"];
409--4871[label="0.0233333;7pkt 7fpkt"];
409--4984[label="1;6pkt 6fpkt"];
409--5203[label="1;25pkt 25fpkt"];
409--5218[label="1;2pkt 2fpkt"];
409--5245[label="0.0108696;1pkt 1fpkt"];
409--5251[label="0.291667;7pkt 7fpkt"];
409--5315[label="0.111111;2pkt 2fpkt"];
410--1717[label="1;4pkt 4fpkt"];
803--1717[label="0.833333;20pkt 20fpkt"];
803--3440[label="1;24pkt 24fpkt"];
803--4608[label="1;24pkt 24fpkt"];
803--5203[label="1;24pkt 24fpkt"];
1211--3409[label="1;76pkt 76fpkt"];
1211--4591[label="1;76pkt 76fpkt"];
1717--1804[label="0.0609756;10pkt 10fpkt"];
1717--1825[label="0.905405;67pkt 67fpkt"];
1717--2103[label="0.00392157;1pkt 1fpkt"];
1717--2466[label="0.2;2pkt 2fpkt"];
1717--2595[label="0.444444;4pkt 4fpkt"];
1717--2607[label="0.0833333;1pkt 1fpkt"];
1717--2675[label="0.0144928;1pkt 1fpkt"];
1717--2925[label="0.571429;4pkt 4fpkt"];
1717--3327[label="1;8pkt 8fpkt"];
1717--3364[label="0.0483092;10pkt 10fpkt"];
1717--3440[label="0.8;20pkt 20fpkt"];
1717--3517[label="0.107143;6pkt 6fpkt"];
1717--3605[label="0.166667;4pkt 4fpkt"];
1717--3678[label="0.0352941;9pkt 9fpkt"];
1717--3711[label="0.8;4pkt 4fpkt"];
1717--4168[label="0.375;3pkt 3fpkt"];
1717--4208[label="0.0144928;1pkt 1fpkt"];
1717--4543[label="1;8pkt 8fpkt"];
1717--4608[label="0.8;20pkt 20fpkt"];
1717--4694[label="0.166667;4pkt 4fpkt"];
1717--4736[label="0.0352941;9pkt 9fpkt"];
1717--5203[label="0.8;20pkt 20fpkt"];
1717--5251[label="0.166667;4pkt 4fpkt"];
2521--4124[label="1;5pkt 5fpkt"];
2521--4984[label="1;5pkt 5fpkt"];
2595--4168[label="1;8pkt 8fpkt"];
3327--4543[label="1;8pkt 8fpkt"];
3409--4591[label="1;76pkt 76fpkt"];
3440--4608[label="1;25pkt 25fpkt"];
3440--5203[label="1;25pkt 25fpkt"];
3507--4641[label="1;2pkt 2fpkt"];
3507--5218[label="1;2pkt 2fpkt"];
4124--4984[label="1;5pkt 5fpkt"];
4608--5203[label="1;25pkt 25fpkt"];
4641--5218[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.84.19" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_657{
style=filled;
color=gray75;
3518[label="56.10.213.194;154pkt 154fpkt", shape=pentagon, color=darkviolet];
stat657[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.10.213.194:*, *:445}[51.9481%]&lt;BR/&gt;{56.10.213.194:*, *:135}[48.0519%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.974%)&lt;BR/&gt; 135: (24.026%)&lt;BR/&gt; 4478: (0.649351%)&lt;BR/&gt; 2424: (0.649351%)&lt;BR/&gt; 1112: (0.649351%)&gt;];
}
</description>
    <slice>
      <filter dst_port="445" src_ip="56.10.213.194"/>
      <filter dst_port="135" src_ip="56.10.213.194"/>
    </slice>
    <from sec="1071205251" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.5.29.195"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071205855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_659{
style=filled;
color=gray75;
3521[label="58.249.50.195;105pkt 105fpkt", shape=pentagon, color=darkviolet];
stat659[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.249.50.195:0, *:0}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.2381%)&lt;BR/&gt; 135: (1.42857%)&lt;BR/&gt; 80: (0.952381%)&lt;BR/&gt; 65048: (0.47619%)&lt;BR/&gt; 65000: (0.47619%)&gt;];
}
</description>
    <slice>
      <filter src_ip="58.249.50.195"/>
    </slice>
    <from sec="1071205412" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_660{
style=filled;
color=gray75;
1196[label="149.207.92.184;d;89pkt 89fpkt", shape=diamond, color=yellow];
2831[label="216.16.110.90;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3233[label="208.201.87.151;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3524[label="208.201.87.195;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4649[label="208.201.87.195;21pkt 21fpkt", shape=invtriangle, color=brown];
stat660[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.201.87.227:80, 149.207.92.184:*}[32.2581%]&lt;BR/&gt;{208.201.87.195:80, 149.207.92.184:*}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8806%)&lt;BR/&gt; 1783: (1.1194%)&lt;BR/&gt; 1782: (1.1194%)&lt;BR/&gt; 1760: (1.1194%)&lt;BR/&gt; 1743: (1.1194%)&gt;];
}
1196--2103[label="0.0224719;2pkt 2fpkt"];
1196--2831[label="1;1pkt 1fpkt"];
1196--3233[label="1;2pkt 2fpkt"];
1196--3524[label="0.809524;17pkt 17fpkt"];
1196--3575[label="0.363636;8pkt 8fpkt"];
1196--3751[label="0.337079;30pkt 30fpkt"];
1196--4649[label="0.809524;17pkt 17fpkt"];
1196--4782[label="0.337079;30pkt 30fpkt"];
3524--4649[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.92.184" src_ip="208.201.87.227" src_port="80"/>
      <filter dst_ip="149.207.92.184" src_ip="208.201.87.195" src_port="80"/>
    </slice>
    <from sec="1071205573" usec="0"/>
    <to sec="1071206084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.128.227.195"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.98.218.196"/>
    </slice>
    <from sec="1071205545" usec="0"/>
    <to sec="1071205717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.103.94.197"/>
    </slice>
    <from sec="1071205328" usec="0"/>
    <to sec="1071205366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.100.130.197"/>
    </slice>
    <from sec="1071205222" usec="0"/>
    <to sec="1071206059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.25.245.197"/>
    </slice>
    <from sec="1071205707" usec="0"/>
    <to sec="1071205727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_666{
style=filled;
color=gray75;
280[label="10.131.13.198;s;21220pkt 21220fpkt", shape=diamond, color=yellow];
3539[label="10.131.13.198;23312pkt 23312fpkt", shape=pentagon, color=darkviolet];
stat666[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.131.13.198:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
280--1875[label="1;13866pkt 13866fpkt"];
280--3539[label="1;21220pkt 21220fpkt"];
</description>
    <slice>
      <filter src_ip="10.131.13.198"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.34.72.198"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.54.144.198"/>
    </slice>
    <from sec="1071205497" usec="0"/>
    <to sec="1071205527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.147.204.198"/>
    </slice>
    <from sec="1071205409" usec="0"/>
    <to sec="1071205428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.3.217.198"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_671{
style=filled;
color=gray75;
873[label="145.71.40.130;d;3pkt 3fpkt", shape=diamond, color=yellow];
987[label="58.251.8.200;s;1pkt 1fpkt", shape=diamond, color=yellow];
3553[label="58.251.8.200;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat671[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.43.85.71:3526, 145.71.40.130:1320}[33.3333%]&lt;BR/&gt;{213.59.72.109:2060, 145.71.40.130:1310}[33.3333%]&lt;BR/&gt;{58.251.8.200:3170, 145.71.40.130:1301}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3170: (30%)&lt;BR/&gt; 1301: (30%)&lt;BR/&gt; 3526: (10%)&lt;BR/&gt; 2060: (10%)&lt;BR/&gt; 1320: (10%)&gt;];
}
873--987[label="1;1pkt 1fpkt"];
873--3553[label="1;1pkt 1fpkt"];
987--3553[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.71.40.130" dst_port="1301" src_ip="58.251.8.200" src_port="3170"/>
      <filter dst_ip="145.71.40.130" dst_port="1310" src_ip="213.59.72.109" src_port="2060"/>
      <filter dst_ip="145.71.40.130" dst_port="1320" src_ip="129.43.85.71" src_port="3526"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.200"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.201"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.83.122.202"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.74.6.203"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071205562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.157.31.203"/>
    </slice>
    <from sec="1071205574" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.90.223.203"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_679{
style=filled;
color=gray75;
3589[label="200.172.28.205;111pkt 111fpkt", shape=pentagon, color=darkviolet];
stat679[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.172.28.205:0, *:0}[90.991%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (90.991%)&lt;BR/&gt; 80: (2.7027%)&lt;BR/&gt; 135: (1.8018%)&lt;BR/&gt; 60717: (0.45045%)&lt;BR/&gt; 43457: (0.45045%)&gt;];
}
</description>
    <slice>
      <filter src_ip="200.172.28.205"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_680{
style=filled;
color=gray75;
1343[label="218.77.117.207;s;1pkt 1fpkt", shape=diamond, color=yellow];
3598[label="218.77.117.207;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4691[label="218.77.117.207;1pkt 1fpkt", shape=invtriangle, color=brown];
stat680[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.77.117.207:8881, 149.207.217.197:3637}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8881: (50%)&lt;BR/&gt; 3637: (50%)&gt;];
}
1343--1644[label="1;1pkt 1fpkt"];
1343--2061[label="1;1pkt 1fpkt"];
1343--3598[label="1;1pkt 1fpkt"];
1343--4691[label="1;1pkt 1fpkt"];
1343--5248[label="1;1pkt 1fpkt"];
3598--4691[label="1;1pkt 1fpkt"];
3598--5248[label="1;1pkt 1fpkt"];
4691--5248[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="3637" src_ip="218.77.117.207" src_port="8881"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.56.212.207"/>
    </slice>
    <from sec="1071205475" usec="0"/>
    <to sec="1071205490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.254.122.208"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_683{
style=filled;
color=gray75;
1525[label="213.30.245.208;s;519pkt 519fpkt", shape=diamond, color=yellow];
3606[label="213.30.245.208;563pkt 563fpkt", shape=pentagon, color=darkviolet];
stat683[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.30.245.208:1263, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1263: (50%)&gt;];
}
1525--3606[label="0.998073;518pkt 518fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="213.30.245.208" src_port="1263"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.170.11.209"/>
    </slice>
    <from sec="1071205230" usec="0"/>
    <to sec="1071206093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.190.132.209"/>
    </slice>
    <from sec="1071205234" usec="0"/>
    <to sec="1071205241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.9.234.210"/>
    </slice>
    <from sec="1071205332" usec="0"/>
    <to sec="1071205371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.211"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_688{
style=filled;
color=gray75;
1000[label="145.166.56.104;d;73pkt 73fpkt", shape=diamond, color=yellow];
3066[label="210.49.28.127;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat688[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.49.28.127:80, 145.166.56.104:*}[28.7671%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.3617%)&lt;BR/&gt; 25: (7.97872%)&lt;BR/&gt; 113: (1.59574%)&lt;BR/&gt; 40385: (1.06383%)&lt;BR/&gt; 40384: (1.06383%)&gt;];
}
1000--1041[label="0.0196078;1pkt 1fpkt"];
1000--1113[label="0.0185185;1pkt 1fpkt"];
1000--1152[label="0.02;1pkt 1fpkt"];
1000--1281[label="0.0821918;6pkt 6fpkt"];
1000--1571[label="0.0821918;6pkt 6fpkt"];
1000--1851[label="1;46pkt 46fpkt"];
1000--1962[label="0.0684932;5pkt 5fpkt"];
1000--2103[label="0.123288;9pkt 9fpkt"];
1000--2183[label="0.0185185;1pkt 1fpkt"];
1000--2184[label="0.0555556;1pkt 1fpkt"];
1000--2230[label="0.0821918;6pkt 6fpkt"];
1000--3066[label="1;21pkt 21fpkt"];
1000--3249[label="0.0178571;1pkt 1fpkt"];
1000--3297[label="0.0285714;2pkt 2fpkt"];
1000--3934[label="0.0555556;1pkt 1fpkt"];
1000--3959[label="0.0821918;6pkt 6fpkt"];
1000--4527[label="0.0285714;2pkt 2fpkt"];
1000--4885[label="0.0555556;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.56.104" src_ip="210.49.28.127" src_port="80"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071205992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.142.204.212"/>
    </slice>
    <from sec="1071205240" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.161.78.213"/>
    </slice>
    <from sec="1071205216" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.55.162.213"/>
    </slice>
    <from sec="1071205668" usec="0"/>
    <to sec="1071205955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.3.234.213"/>
    </slice>
    <from sec="1071205759" usec="0"/>
    <to sec="1071205799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.100.128.214"/>
    </slice>
    <from sec="1071205339" usec="0"/>
    <to sec="1071206094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_694{
style=filled;
color=gray75;
3654[label="77.13.232.214;139pkt 139fpkt", shape=pentagon, color=darkviolet];
stat694[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.13.232.214:0, *:0}[89.9281%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (89.9281%)&lt;BR/&gt; 80: (5.03597%)&lt;BR/&gt; 65094: (0.359712%)&lt;BR/&gt; 63127: (0.359712%)&lt;BR/&gt; 62395: (0.359712%)&gt;];
}
</description>
    <slice>
      <filter src_ip="77.13.232.214"/>
    </slice>
    <from sec="1071205219" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
864[label="56.50.164.215;s;1pkt 1fpkt", shape=diamond, color=yellow];
3657[label="56.50.164.215;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4723[label="56.50.164.215;1pkt 1fpkt", shape=invtriangle, color=brown];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.50.164.215:6883, 149.207.217.197:3605}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6883: (50%)&lt;BR/&gt; 3605: (50%)&gt;];
}
864--1644[label="1;1pkt 1fpkt"];
864--2061[label="1;1pkt 1fpkt"];
864--3657[label="1;1pkt 1fpkt"];
864--4723[label="1;1pkt 1fpkt"];
864--5266[label="1;1pkt 1fpkt"];
3657--4723[label="1;1pkt 1fpkt"];
3657--5266[label="1;1pkt 1fpkt"];
4723--5266[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="3605" src_ip="56.50.164.215" src_port="6883"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.50.96.216"/>
    </slice>
    <from sec="1071205216" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.111.5.217"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.41.108.217"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_699{
style=filled;
color=gray75;
1312[label="77.55.162.217;s;3pkt 3fpkt", shape=diamond, color=yellow];
3673[label="77.55.162.217;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat699[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.55.162.217:80, 149.207.84.19:2678}[33.3333%]&lt;BR/&gt;{77.55.162.217:80, 149.207.84.19:2713}[33.3333%]&lt;BR/&gt;{77.55.162.217:80, 149.207.84.19:3301}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3301: (16.6667%)&lt;BR/&gt; 2713: (16.6667%)&lt;BR/&gt; 2678: (16.6667%)&gt;];
}
1312--3673[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.84.19" dst_port="3301" src_ip="77.55.162.217" src_port="80"/>
      <filter dst_ip="149.207.84.19" dst_port="2713" src_ip="77.55.162.217" src_port="80"/>
      <filter dst_ip="149.207.84.19" dst_port="2678" src_ip="77.55.162.217" src_port="80"/>
    </slice>
    <from sec="1071205653" usec="0"/>
    <to sec="1071205909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_700{
style=filled;
color=gray75;
1502[label="218.47.22.218;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat700[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.47.22.218:8881, 149.207.217.197:1915}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8881: (50%)&lt;BR/&gt; 1915: (50%)&gt;];
}
1502--1644[label="1;1pkt 1fpkt"];
1502--2061[label="1;1pkt 1fpkt"];
1502--3675[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="1915" src_ip="218.47.22.218" src_port="8881"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_701{
style=filled;
color=gray75;
505[label="218.22.71.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat701[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.22.71.82:554, 149.207.108.172:2511}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2511: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
505--2778[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.108.172" dst_port="2511" src_ip="218.22.71.82" src_port="554"/>
    </slice>
    <from sec="1071205232" usec="0"/>
    <to sec="1071205477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.827201,1.62875,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
122[label="218.38.179.204s;468pkt 468fpkt", shape=rectangle, color=red];
3583[label="218.38.179.204;255pkt 255fpkt", shape=pentagon, color=darkviolet];
3683[label="221.5.193.219;206pkt 206fpkt", shape=pentagon, color=darkviolet];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.38.179.204:1028, *:137}[45.053%]&lt;BR/&gt;{221.5.193.219:1029, *:137}[36.3958%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1028: (27.4489%)&lt;BR/&gt; 1029: (16.8999%)&lt;BR/&gt; 1027: (5.65124%)&gt;];
}
122--3583[label="1;255pkt 255fpkt"];
122--3683[label="0.524272;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.38.179.204" src_port="1028"/>
      <filter dst_port="137" src_ip="221.5.193.219" src_port="1029"/>
    </slice>
    <from sec="1071206028" usec="0"/>
    <to sec="1071206060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.78.4.220"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071205919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.41.220"/>
    </slice>
    <from sec="1071205249" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.80.141.220"/>
    </slice>
    <from sec="1071205242" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.221"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.52.125.222"/>
    </slice>
    <from sec="1071205324" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.222"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889707,1.5466,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
1210[label="208.212.118.223;s;5pkt 5fpkt", shape=diamond, color=yellow];
1927[label="208.212.118.223;s;5pkt 5fpkt", shape=hexagon, color=black];
3719[label="208.212.118.223;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4760[label="208.212.118.223;4pkt 4fpkt", shape=invtriangle, color=brown];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.212.118.223:80, 149.206.51.186:1438}[20%]&lt;BR/&gt;{208.212.118.223:80, 149.206.51.186:1441}[20%]&lt;BR/&gt;{208.212.118.223:80, 149.206.51.186:1442}[20%]&lt;BR/&gt;{208.212.118.223:80, 149.206.51.186:1454}[20%]&lt;BR/&gt;{208.212.118.223:80, 149.206.51.186:1456}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1456: (11.1111%)&lt;BR/&gt; 1454: (11.1111%)&lt;BR/&gt; 1442: (11.1111%)&lt;BR/&gt; 1438: (11.1111%)&gt;];
}
1210--1927[label="1;5pkt 5fpkt"];
1210--3719[label="1;4pkt 4fpkt"];
1210--4760[label="1;4pkt 4fpkt"];
1927--3719[label="1;4pkt 4fpkt"];
1927--4760[label="1;4pkt 4fpkt"];
3719--4760[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.51.186" dst_port="1456" src_ip="208.212.118.223" src_port="80"/>
      <filter dst_ip="149.206.51.186" dst_port="1454" src_ip="208.212.118.223" src_port="80"/>
      <filter dst_ip="149.206.51.186" dst_port="1442" src_ip="208.212.118.223" src_port="80"/>
      <filter dst_ip="149.206.51.186" dst_port="1441" src_ip="208.212.118.223" src_port="80"/>
      <filter dst_ip="149.206.51.186" dst_port="1438" src_ip="208.212.118.223" src_port="80"/>
    </slice>
    <from sec="1071205683" usec="0"/>
    <to sec="1071205923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.223"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.148.23.224"/>
    </slice>
    <from sec="1071205230" usec="0"/>
    <to sec="1071205994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.180.4.225"/>
    </slice>
    <from sec="1071205225" usec="0"/>
    <to sec="1071206078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_713{
style=filled;
color=gray75;
1106[label="218.157.73.225;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat713[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.157.73.225:8881, 149.207.217.197:2699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8881: (50%)&lt;BR/&gt; 2699: (50%)&gt;];
}
1106--1644[label="1;1pkt 1fpkt"];
1106--2061[label="1;1pkt 1fpkt"];
1106--3737[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.217.197" dst_port="2699" src_ip="218.157.73.225" src_port="8881"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06292,1.66934,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
126[label="56.113.225.227s;109pkt 109fpkt", shape=rectangle, color=red];
3753[label="56.113.225.227;251pkt 251fpkt", shape=pentagon, color=darkviolet];
4784[label="56.113.225.227;251pkt 251fpkt", shape=invtriangle, color=brown];
5298[label="56.113.225.227;251pkt 251fpkt", shape=invhouse, color=bisque];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.113.225.227:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
126--3753[label="1;109pkt 109fpkt"];
126--4784[label="1;109pkt 109fpkt"];
126--5298[label="1;109pkt 109fpkt"];
3753--4784[label="1;251pkt 251fpkt"];
3753--5298[label="1;251pkt 251fpkt"];
4784--5298[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="56.113.225.227" src_port="1031"/>
    </slice>
    <from sec="1071205924" usec="0"/>
    <to sec="1071205939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.90.211.228"/>
    </slice>
    <from sec="1071205527" usec="0"/>
    <to sec="1071205562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.229"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.230"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.212.83.231"/>
    </slice>
    <from sec="1071205230" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.80.141.231"/>
    </slice>
    <from sec="1071205507" usec="0"/>
    <to sec="1071205545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.231"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.88803,1.62121,010,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_721{
style=filled;
color=gray75;
158[label="32.25.204.233s;242pkt 242fpkt", shape=rectangle, color=red];
3785[label="32.25.204.233;253pkt 253fpkt", shape=pentagon, color=darkviolet];
4802[label="32.25.204.233;253pkt 253fpkt", shape=invtriangle, color=brown];
stat721[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.25.204.233:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 1037: (0.40107%)&lt;BR/&gt; 1036: (0.40107%)&lt;BR/&gt; 4996: (0.200535%)&lt;BR/&gt; 4995: (0.200535%)&gt;];
}
158--2106[label="1;242pkt 242fpkt"];
158--3785[label="1;242pkt 242fpkt"];
158--4802[label="1;242pkt 242fpkt"];
3785--4802[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="32.25.204.233"/>
    </slice>
    <from sec="1071205725" usec="0"/>
    <to sec="1071205744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.233"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.10.233.234"/>
    </slice>
    <from sec="1071205353" usec="0"/>
    <to sec="1071205377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.236"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829001,1.5545,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_726{
style=filled;
color=gray75;
279[label="10.131.22.237;s;21531pkt 21531fpkt", shape=diamond, color=yellow];
1641[label="10.131.22.237;s;3213pkt 3213fpkt", shape=hexagon, color=black];
3808[label="10.131.22.237;23667pkt 23667fpkt", shape=pentagon, color=darkviolet];
stat726[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.131.22.237:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
279--1641[label="1;3213pkt 3213fpkt"];
279--3808[label="1;21531pkt 21531fpkt"];
1641--3808[label="1;3213pkt 3213fpkt"];
</description>
    <slice>
      <filter src_ip="10.131.22.237"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.209.36.237"/>
    </slice>
    <from sec="1071205994" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.57.171.237"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.237"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.238"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.206.129.240"/>
    </slice>
    <from sec="1071205926" usec="0"/>
    <to sec="1071206037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_732{
style=filled;
color=gray75;
609[label="145.166.0.4;d;17pkt 17fpkt", shape=diamond, color=yellow];
610[label="197.44.178.240;s;14pkt 14fpkt", shape=diamond, color=yellow];
stat732[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.44.178.240:80, 145.166.0.4:*}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3871%)&lt;BR/&gt; 1367: (3.22581%)&lt;BR/&gt; 1366: (3.22581%)&lt;BR/&gt; 1365: (3.22581%)&lt;BR/&gt; 1364: (3.22581%)&gt;];
}
609--610[label="1;14pkt 14fpkt"];
609--3827[label="0.941176;16pkt 16fpkt"];
610--3827[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.0.4" src_ip="197.44.178.240" src_port="80"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.117.187.240"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.242"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_735{
style=filled;
color=gray75;
857[label="196.57.66.100;d;58pkt 58fpkt", shape=diamond, color=yellow];
3838[label="56.81.26.244;250pkt 250fpkt", shape=pentagon, color=darkviolet];
stat735[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.81.26.244:*, *:135}[81.4332%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (41.0714%)&lt;BR/&gt; 6667: (3.8961%)&lt;BR/&gt; 6668: (1.46104%)&lt;BR/&gt; 113: (0.974026%)&lt;BR/&gt; 0: (0.649351%)&gt;];
}
857--1229[label="0.2;1pkt 1fpkt"];
857--3018[label="0.2;1pkt 1fpkt"];
857--3127[label="0.272727;3pkt 3fpkt"];
857--3838[label="0.0172414;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="56.81.26.244"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.245"/>
    </slice>
    <from sec="1071205213" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.229.236.245"/>
    </slice>
    <from sec="1071205217" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.41.246"/>
    </slice>
    <from sec="1071205382" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.49.26.247"/>
    </slice>
    <from sec="1071205826" usec="0"/>
    <to sec="1071206087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.248"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.178.9.249"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071205792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.1.41.250"/>
    </slice>
    <from sec="1071205363" usec="0"/>
    <to sec="1071205942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.67.139.250"/>
    </slice>
    <from sec="1071205215" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.184.221.250"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_745{
style=filled;
color=gray75;
545[label="201.118.236.173;d;357pkt 357fpkt", shape=diamond, color=yellow];
2783[label="201.25.48.83;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3336[label="205.114.177.167;109pkt 109fpkt", shape=pentagon, color=darkviolet];
3658[label="208.184.221.215;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3889[label="60.40.148.254;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3890[label="205.111.220.254;70pkt 70fpkt", shape=pentagon, color=darkviolet];
4268[label="201.25.48.83;10pkt 10fpkt", shape=invtriangle, color=brown];
4861[label="60.40.148.254;1pkt 1fpkt", shape=invtriangle, color=brown];
5054[label="201.25.48.83;10pkt 10fpkt", shape=invhouse, color=bisque];
5336[label="60.40.148.254;1pkt 1fpkt", shape=invhouse, color=bisque];
stat745[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 201.118.236.173:*}[66.2791%]&lt;BR/&gt;{*:0, *:0}[21.3178%]&lt;BR/&gt;{205.114.177.167:*, *:*}[21.124%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.6522%)&lt;BR/&gt; 0: (19.3043%)&lt;BR/&gt; 135: (0.695652%)&lt;BR/&gt; 48245: (0.347826%)&lt;BR/&gt; 48240: (0.347826%)&gt;];
}
545--606[label="0.103641;37pkt 37fpkt"];
545--617[label="0.0121212;2pkt 2fpkt"];
545--689[label="0.005;1pkt 1fpkt"];
545--690[label="0.022409;8pkt 8fpkt"];
545--717[label="0.015544;3pkt 3fpkt"];
545--851[label="0.0714286;5pkt 5fpkt"];
545--912[label="0.00722022;2pkt 2fpkt"];
545--1158[label="0.0227273;3pkt 3fpkt"];
545--1355[label="0.0701754;8pkt 8fpkt"];
545--1392[label="0.447761;60pkt 60fpkt"];
545--1469[label="0.857143;6pkt 6fpkt"];
545--1521[label="0.166667;5pkt 5fpkt"];
545--1721[label="0.0225564;3pkt 3fpkt"];
545--1735[label="0.0126582;1pkt 1fpkt"];
545--2002[label="0.0776699;8pkt 8fpkt"];
545--2034[label="0.447761;60pkt 60fpkt"];
545--2103[label="0.0756303;27pkt 27fpkt"];
545--2426[label="0.1;1pkt 1fpkt"];
545--2656[label="0.857143;6pkt 6fpkt"];
545--2783[label="1;10pkt 10fpkt"];
545--2840[label="0.04;2pkt 2fpkt"];
545--2858[label="0.0655738;8pkt 8fpkt"];
545--2952[label="0.0561798;5pkt 5fpkt"];
545--2990[label="0.00689655;2pkt 2fpkt"];
545--2993[label="0.0909091;11pkt 11fpkt"];
545--3137[label="0.0147059;3pkt 3fpkt"];
545--3195[label="0.0972222;7pkt 7fpkt"];
545--3205[label="0.384615;60pkt 60fpkt"];
545--3336[label="0.0183486;2pkt 2fpkt"];
545--3441[label="0.0211268;3pkt 3fpkt"];
545--3644[label="0.166667;5pkt 5fpkt"];
545--3653[label="0.142857;1pkt 1fpkt"];
545--3658[label="1;6pkt 6fpkt"];
545--3678[label="0.103641;37pkt 37fpkt"];
545--3804[label="0.0192308;1pkt 1fpkt"];
545--3835[label="0.00473934;1pkt 1fpkt"];
545--3889[label="1;1pkt 1fpkt"];
545--3890[label="0.257143;18pkt 18fpkt"];
545--4071[label="0.0909091;1pkt 1fpkt"];
545--4200[label="1;6pkt 6fpkt"];
545--4268[label="1;10pkt 10fpkt"];
545--4367[label="0.00689655;2pkt 2fpkt"];
545--4370[label="0.0909091;11pkt 11fpkt"];
545--4441[label="0.0147059;3pkt 3fpkt"];
545--4467[label="0.0972222;7pkt 7fpkt"];
545--4718[label="0.166667;5pkt 5fpkt"];
545--4721[label="0.142857;1pkt 1fpkt"];
545--4736[label="0.103641;37pkt 37fpkt"];
545--4813[label="0.0192308;1pkt 1fpkt"];
545--4832[label="0.00473934;1pkt 1fpkt"];
545--4861[label="1;1pkt 1fpkt"];
545--4952[label="0.0909091;1pkt 1fpkt"];
545--5054[label="1;10pkt 10fpkt"];
545--5092[label="0.0909091;11pkt 11fpkt"];
545--5122[label="0.0147059;3pkt 3fpkt"];
545--5262[label="0.166667;5pkt 5fpkt"];
545--5264[label="0.142857;1pkt 1fpkt"];
545--5318[label="0.00473934;1pkt 1fpkt"];
545--5336[label="1;1pkt 1fpkt"];
2783--4268[label="1;10pkt 10fpkt"];
2783--5054[label="1;10pkt 10fpkt"];
3889--4861[label="1;1pkt 1fpkt"];
3889--5336[label="1;1pkt 1fpkt"];
4268--5054[label="1;10pkt 10fpkt"];
4861--5336[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="205.114.177.167"/>
      <filter dst_ip="201.118.236.173" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.141.11.255"/>
    </slice>
    <from sec="1071205346" usec="0"/>
    <to sec="1071205373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.145.209.255"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071205495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_748{
style=filled;
color=gray75;
2133[label="169.230.36.0;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3900[label="169.230.36.0;2pkt 2fpkt", shape=invtriangle, color=brown];
stat748[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.230.36.0:80, 149.207.64.135:3306}[50%]&lt;BR/&gt;{169.230.36.0:80, 149.207.64.135:3307}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3307: (25%)&lt;BR/&gt; 3306: (25%)&gt;];
}
2133--3900[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.64.135" dst_port="3307" src_ip="169.230.36.0" src_port="80"/>
      <filter dst_ip="149.207.64.135" dst_port="3306" src_ip="169.230.36.0" src_port="80"/>
    </slice>
    <from sec="1071205834" usec="0"/>
    <to sec="1071205982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_749{
style=filled;
color=gray75;
738[label="216.217.77.25;s;498pkt 498fpkt", shape=diamond, color=yellow];
stat749[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.217.77.25:80, 149.207.118.140:*}[40.9639%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8996%)&lt;BR/&gt; 14146: (0.200803%)&lt;BR/&gt; 0: (0.200803%)&lt;BR/&gt; 64620: (0.100402%)&lt;BR/&gt; 64616: (0.100402%)&gt;];
}
738--761[label="0.0177515;3pkt 3fpkt"];
738--844[label="0.0321285;16pkt 16fpkt"];
738--886[label="0.0213675;5pkt 5fpkt"];
738--892[label="0.0350877;4pkt 4fpkt"];
738--991[label="0.135802;11pkt 11fpkt"];
738--1023[label="0.153846;14pkt 14fpkt"];
738--1200[label="1;204pkt 204fpkt"];
738--1294[label="0.00595238;1pkt 1fpkt"];
738--1421[label="0.117647;16pkt 16fpkt"];
738--1645[label="0.0341365;17pkt 17fpkt"];
738--1656[label="0.0180723;9pkt 9fpkt"];
738--1797[label="0.0213675;5pkt 5fpkt"];
738--1849[label="0.135802;11pkt 11fpkt"];
738--1937[label="0.00200803;1pkt 1fpkt"];
738--2065[label="0.0160643;8pkt 8fpkt"];
738--2103[label="0.150602;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.118.140" src_ip="216.217.77.25" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_750{
style=filled;
color=gray75;
2138[label="216.24.82.0;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3903[label="216.24.82.0;17pkt 17fpkt", shape=invtriangle, color=brown];
stat750[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.24.82.0:80, 201.120.114.208:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1846: (2.94118%)&lt;BR/&gt; 1845: (2.94118%)&lt;BR/&gt; 1844: (2.94118%)&lt;BR/&gt; 1843: (2.94118%)&gt;];
}
2138--3903[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="201.120.114.208" src_ip="216.24.82.0" src_port="80"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071205373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_751{
style=filled;
color=gray75;
2143[label="209.65.19.1;156pkt 156fpkt", shape=pentagon, color=darkviolet];
3905[label="209.65.19.1;156pkt 156fpkt", shape=invtriangle, color=brown];
4867[label="209.65.19.1;155pkt 155fpkt", shape=invhouse, color=bisque];
stat751[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.65.19.1:0, *:0}[94.8718%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.8608%)&lt;BR/&gt; 80: (1.606%)&lt;BR/&gt; 135: (0.963597%)&lt;BR/&gt; 62449: (0.321199%)&lt;BR/&gt; 61737: (0.321199%)&gt;];
}
2143--3905[label="1;156pkt 156fpkt"];
2143--4867[label="1;155pkt 155fpkt"];
3905--4867[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter src_ip="209.65.19.1"/>
    </slice>
    <from sec="1071205230" usec="0"/>
    <to sec="1071206088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_752{
style=filled;
color=gray75;
786[label="149.207.103.36;d;185pkt 185fpkt", shape=diamond, color=yellow];
1050[label="58.207.6.234;s;9pkt 9fpkt", shape=diamond, color=yellow];
stat752[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.244.86.193:80, 149.207.103.36:*}[39.4595%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.3402%)&lt;BR/&gt; 63171: (8.24742%)&lt;BR/&gt; 53: (8.24742%)&lt;BR/&gt; 25: (4.38144%)&lt;BR/&gt; 113: (0.773196%)&gt;];
}
786--787[label="0.0540541;10pkt 10fpkt"];
786--898[label="0.0114943;1pkt 1fpkt"];
786--1050[label="1;9pkt 9fpkt"];
786--1120[label="0.0119048;1pkt 1fpkt"];
786--1263[label="0.00925926;1pkt 1fpkt"];
786--1587[label="0.68;17pkt 17fpkt"];
786--1740[label="1;185pkt 185fpkt"];
786--1741[label="0.120482;10pkt 10fpkt"];
786--2103[label="0.027027;5pkt 5fpkt"];
786--2142[label="0.025;1pkt 1fpkt"];
786--2155[label="0.0540541;10pkt 10fpkt"];
786--2294[label="0.0149254;1pkt 1fpkt"];
786--2301[label="0.0277778;1pkt 1fpkt"];
786--2714[label="0.0142857;1pkt 1fpkt"];
786--2781[label="0.010989;1pkt 1fpkt"];
786--2988[label="0.0263158;1pkt 1fpkt"];
786--3260[label="0.0263158;1pkt 1fpkt"];
786--3858[label="0.0172414;1pkt 1fpkt"];
786--3913[label="0.0540541;10pkt 10fpkt"];
786--3998[label="0.0147059;1pkt 1fpkt"];
786--4266[label="0.010989;1pkt 1fpkt"];
786--4847[label="0.0172414;1pkt 1fpkt"];
786--4871[label="0.0540541;10pkt 10fpkt"];
786--4919[label="0.0149254;1pkt 1fpkt"];
786--5053[label="0.010989;1pkt 1fpkt"];
786--5328[label="0.0172414;1pkt 1fpkt"];
1050--1740[label="1;9pkt 9fpkt"];
1050--2103[label="0.222222;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.103.36" src_ip="200.244.86.193" src_port="80"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_753{
style=filled;
color=gray75;
472[label="145.166.58.98;d;289pkt 289fpkt", shape=diamond, color=yellow];
3399[label="216.200.130.176;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat753[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.16.168.209:80, 145.166.58.98:*}[31.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0066%)&lt;BR/&gt; 443: (1.16279%)&lt;BR/&gt; 10000: (0.664452%)&lt;BR/&gt; 47310: (0.332226%)&lt;BR/&gt; 58021: (0.166113%)&gt;];
}
472--495[label="0.0208333;1pkt 1fpkt"];
472--614[label="0.00346021;1pkt 1fpkt"];
472--632[label="0.114286;4pkt 4fpkt"];
472--641[label="0.060241;5pkt 5fpkt"];
472--650[label="0.027027;2pkt 2fpkt"];
472--674[label="0.528571;37pkt 37fpkt"];
472--687[label="0.00346021;1pkt 1fpkt"];
472--738[label="0.00692042;2pkt 2fpkt"];
472--753[label="0.0138408;4pkt 4fpkt"];
472--765[label="0.0789474;3pkt 3fpkt"];
472--766[label="0.00692042;2pkt 2fpkt"];
472--774[label="0.0882353;3pkt 3fpkt"];
472--787[label="0.0035461;1pkt 1fpkt"];
472--809[label="0.05;6pkt 6fpkt"];
472--815[label="0.0227273;3pkt 3fpkt"];
472--898[label="0.0114943;1pkt 1fpkt"];
472--930[label="0.0482456;11pkt 11fpkt"];
472--1009[label="0.010989;1pkt 1fpkt"];
472--1047[label="0.017301;5pkt 5fpkt"];
472--1152[label="0.02;1pkt 1fpkt"];
472--1158[label="0.0151515;2pkt 2fpkt"];
472--1251[label="0.0352941;3pkt 3fpkt"];
472--1279[label="0.025641;2pkt 2fpkt"];
472--1281[label="0.00684932;1pkt 1fpkt"];
472--1484[label="0.0188679;1pkt 1fpkt"];
472--1490[label="0.0116279;1pkt 1fpkt"];
472--1549[label="0.0410959;3pkt 3fpkt"];
472--1564[label="0.0422535;3pkt 3fpkt"];
472--1571[label="0.0107527;2pkt 2fpkt"];
472--1576[label="0.0136986;1pkt 1fpkt"];
472--1691[label="0.0217391;1pkt 1fpkt"];
472--1729[label="0.0106383;2pkt 2fpkt"];
472--1741[label="0.0120482;1pkt 1fpkt"];
472--1750[label="0.0892857;5pkt 5fpkt"];
472--1754[label="0.162162;6pkt 6fpkt"];
472--1772[label="0.145329;42pkt 42fpkt"];
472--1800[label="0.0127389;2pkt 2fpkt"];
472--1813[label="0.133333;4pkt 4fpkt"];
472--1834[label="0.528571;37pkt 37fpkt"];
472--1962[label="0.00847458;1pkt 1fpkt"];
472--1970[label="0.0344828;2pkt 2fpkt"];
472--1972[label="0.05;11pkt 11fpkt"];
472--2012[label="0.0232558;1pkt 1fpkt"];
472--2103[label="0.017301;5pkt 5fpkt"];
472--2155[label="0.00346021;1pkt 1fpkt"];
472--2164[label="0.027027;2pkt 2fpkt"];
472--2183[label="0.0185185;1pkt 1fpkt"];
472--2230[label="0.00930233;2pkt 2fpkt"];
472--2268[label="0.0483871;3pkt 3fpkt"];
472--2291[label="0.0405405;3pkt 3fpkt"];
472--2399[label="0.0405904;11pkt 11fpkt"];
472--2641[label="0.0410959;3pkt 3fpkt"];
472--2781[label="0.010989;1pkt 1fpkt"];
472--2811[label="0.00692042;2pkt 2fpkt"];
472--2905[label="0.0208333;2pkt 2fpkt"];
472--3040[label="0.0208333;1pkt 1fpkt"];
472--3106[label="0.0105263;1pkt 1fpkt"];
472--3225[label="0.0123457;2pkt 2fpkt"];
472--3226[label="0.0425532;4pkt 4fpkt"];
472--3237[label="0.0103806;3pkt 3fpkt"];
472--3297[label="0.0142857;1pkt 1fpkt"];
472--3317[label="0.0526316;5pkt 5fpkt"];
472--3342[label="0.0222222;3pkt 3fpkt"];
472--3393[label="0.0652174;3pkt 3fpkt"];
472--3399[label="0.0833333;1pkt 1fpkt"];
472--3441[label="0.0140845;2pkt 2fpkt"];
472--3512[label="0.0384615;3pkt 3fpkt"];
472--3586[label="0.0326087;3pkt 3fpkt"];
472--3613[label="0.32526;94pkt 94fpkt"];
472--3632[label="0.0535714;3pkt 3fpkt"];
472--3664[label="0.0375;3pkt 3fpkt"];
472--3722[label="0.0657439;19pkt 19fpkt"];
472--3804[label="0.0192308;1pkt 1fpkt"];
472--3913[label="0.00346021;1pkt 1fpkt"];
472--3918[label="0.027027;2pkt 2fpkt"];
472--3959[label="0.00930233;2pkt 2fpkt"];
472--4192[label="0.0277778;2pkt 2fpkt"];
472--4266[label="0.010989;1pkt 1fpkt"];
472--4331[label="0.0208333;2pkt 2fpkt"];
472--4392[label="0.0208333;1pkt 1fpkt"];
472--4427[label="0.0105263;1pkt 1fpkt"];
472--4480[label="0.0425532;4pkt 4fpkt"];
472--4527[label="0.0142857;1pkt 1fpkt"];
472--4549[label="0.0222222;3pkt 3fpkt"];
472--4683[label="0.0326087;3pkt 3fpkt"];
472--4698[label="0.32526;94pkt 94fpkt"];
472--4710[label="0.0535714;3pkt 3fpkt"];
472--4813[label="0.0192308;1pkt 1fpkt"];
472--4871[label="0.00346021;1pkt 1fpkt"];
472--4876[label="0.027027;2pkt 2fpkt"];
472--5053[label="0.010989;1pkt 1fpkt"];
472--5078[label="0.0208333;2pkt 2fpkt"];
472--5114[label="0.0105263;1pkt 1fpkt"];
472--5176[label="0.0222222;3pkt 3fpkt"];
472--5245[label="0.0326087;3pkt 3fpkt"];
472--5258[label="0.0535714;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.58.98" src_ip="216.16.168.209" src_port="80"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071206068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.237.197.3"/>
    </slice>
    <from sec="1071205537" usec="0"/>
    <to sec="1071205778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_755{
style=filled;
color=gray75;
2168[label="59.146.208.3;234pkt 234fpkt", shape=pentagon, color=darkviolet];
3922[label="59.146.208.3;220pkt 220fpkt", shape=invtriangle, color=brown];
4879[label="59.146.208.3;220pkt 220fpkt", shape=invhouse, color=bisque];
stat755[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.146.208.3:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2168--3922[label="1;220pkt 220fpkt"];
2168--4879[label="1;220pkt 220fpkt"];
3922--4879[label="1;220pkt 220fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="59.146.208.3" src_port="1025"/>
    </slice>
    <from sec="1071205669" usec="0"/>
    <to sec="1071205705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_756{
style=filled;
color=gray75;
926[label="149.207.233.161;d;40pkt 40fpkt", shape=diamond, color=yellow];
2160[label="204.120.19.3;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3844[label="209.161.7.245;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3916[label="204.120.19.3;1pkt 1fpkt", shape=invtriangle, color=brown];
4838[label="209.161.7.245;5pkt 5fpkt", shape=invtriangle, color=brown];
4874[label="204.120.19.3;1pkt 1fpkt", shape=invhouse, color=bisque];
5323[label="209.161.7.245;5pkt 5fpkt", shape=invhouse, color=bisque];
stat756[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.108.226.1:80, 149.207.233.161:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1266: (3.38983%)&lt;BR/&gt; 1263: (3.38983%)&lt;BR/&gt; 1260: (3.38983%)&lt;BR/&gt; 1256: (3.38983%)&gt;];
}
926--2103[label="0.025;1pkt 1fpkt"];
926--2160[label="1;2pkt 2fpkt"];
926--2174[label="0.025;1pkt 1fpkt"];
926--2675[label="0.05;2pkt 2fpkt"];
926--2990[label="0.05;2pkt 2fpkt"];
926--3586[label="0.05;2pkt 2fpkt"];
926--3678[label="0.075;3pkt 3fpkt"];
926--3844[label="1;5pkt 5fpkt"];
926--3916[label="1;1pkt 1fpkt"];
926--3928[label="0.025;1pkt 1fpkt"];
926--4208[label="0.05;2pkt 2fpkt"];
926--4367[label="0.05;2pkt 2fpkt"];
926--4683[label="0.05;2pkt 2fpkt"];
926--4736[label="0.075;3pkt 3fpkt"];
926--4838[label="1;5pkt 5fpkt"];
926--4874[label="1;1pkt 1fpkt"];
926--4883[label="0.025;1pkt 1fpkt"];
926--5245[label="0.05;2pkt 2fpkt"];
926--5323[label="1;5pkt 5fpkt"];
2160--3916[label="1;1pkt 1fpkt"];
2160--4874[label="1;1pkt 1fpkt"];
3844--4838[label="1;5pkt 5fpkt"];
3844--5323[label="1;5pkt 5fpkt"];
3916--4874[label="1;1pkt 1fpkt"];
4838--5323[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.233.161" src_ip="192.108.226.1" src_port="80"/>
    </slice>
    <from sec="1071205285" usec="0"/>
    <to sec="1071205929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.36.18.5"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_758{
style=filled;
color=gray75;
2180[label="59.9.55.5;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3931[label="59.9.55.5;2pkt 2fpkt", shape=invtriangle, color=brown];
stat758[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.9.55.5:80, 149.206.203.98:2049}[50%]&lt;BR/&gt;{59.9.55.5:80, 149.206.203.98:2050}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2050: (25%)&lt;BR/&gt; 2049: (25%)&gt;];
}
2180--3931[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.203.98" dst_port="2050" src_ip="59.9.55.5" src_port="80"/>
      <filter dst_ip="149.206.203.98" dst_port="2049" src_ip="59.9.55.5" src_port="80"/>
    </slice>
    <from sec="1071205675" usec="0"/>
    <to sec="1071205731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_759{
style=filled;
color=gray75;
2181[label="58.32.134.5;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3932[label="58.32.134.5;6pkt 6fpkt", shape=invtriangle, color=brown];
stat759[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.32.134.5:80, 149.207.255.241:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33699: (8.33333%)&lt;BR/&gt; 33561: (8.33333%)&lt;BR/&gt; 33506: (8.33333%)&lt;BR/&gt; 33496: (8.33333%)&gt;];
}
2181--3932[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.255.241" src_ip="58.32.134.5" src_port="80"/>
    </slice>
    <from sec="1071205796" usec="0"/>
    <to sec="1071205865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.62.154.5"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071206093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_761{
style=filled;
color=gray75;
2189[label="205.1.45.6;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3938[label="205.1.45.6;4pkt 4fpkt", shape=invtriangle, color=brown];
stat761[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.45.6:1863, 145.71.220.49:1102}[25%]&lt;BR/&gt;{205.1.45.6:1863, 145.166.18.106:1027}[25%]&lt;BR/&gt;{205.1.45.6:1863, 145.166.4.113:2943}[25%]&lt;BR/&gt;{205.1.45.6:1863, 200.180.3.168:1593}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 2943: (14.2857%)&lt;BR/&gt; 1593: (14.2857%)&lt;BR/&gt; 1102: (14.2857%)&lt;BR/&gt; 1027: (7.14286%)&gt;];
}
2189--3938[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.180.3.168" dst_port="1593" src_ip="205.1.45.6" src_port="1863"/>
      <filter dst_ip="145.166.4.113" dst_port="2943" src_ip="205.1.45.6" src_port="1863"/>
      <filter dst_ip="145.166.18.106" dst_port="1027" src_ip="205.1.45.6" src_port="1863"/>
      <filter dst_ip="145.71.220.49" dst_port="1102" src_ip="205.1.45.6" src_port="1863"/>
    </slice>
    <from sec="1071205214" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.1.42.8"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.167.215.8"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_764{
style=filled;
color=gray75;
1558[label="61.137.20.9;s;191pkt 191fpkt", shape=diamond, color=yellow];
2214[label="61.137.20.9;230pkt 230fpkt", shape=pentagon, color=darkviolet];
3952[label="61.137.20.9;230pkt 230fpkt", shape=invtriangle, color=brown];
4896[label="61.137.20.9;229pkt 229fpkt", shape=invhouse, color=bisque];
stat764[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.137.20.9:*, *:135}[50%]&lt;BR/&gt;{61.137.20.9:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.2841%)&lt;BR/&gt; 445: (24.7159%)&lt;BR/&gt; 4873: (0.454545%)&lt;BR/&gt; 4635: (0.397727%)&lt;BR/&gt; 1830: (0.397727%)&gt;];
}
1558--2106[label="0.0314136;6pkt 6fpkt"];
1558--2108[label="0.0314136;6pkt 6fpkt"];
1558--2111[label="0.0157068;3pkt 3fpkt"];
1558--2123[label="0.0314136;6pkt 6fpkt"];
1558--2125[label="0.0157068;3pkt 3fpkt"];
1558--2130[label="0.0314136;6pkt 6fpkt"];
1558--2131[label="0.0157068;3pkt 3fpkt"];
1558--2214[label="1;191pkt 191fpkt"];
1558--3952[label="1;191pkt 191fpkt"];
1558--4896[label="0.994764;190pkt 190fpkt"];
2214--3952[label="1;230pkt 230fpkt"];
2214--4896[label="1;229pkt 229fpkt"];
3952--4896[label="1;229pkt 229fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="61.137.20.9"/>
      <filter dst_port="135" src_ip="61.137.20.9"/>
    </slice>
    <from sec="1071205215" usec="0"/>
    <to sec="1071206090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_765{
style=filled;
color=gray75;
2222[label="162.26.7.10;144pkt 144fpkt", shape=pentagon, color=darkviolet];
3956[label="162.26.7.10;143pkt 143fpkt", shape=invtriangle, color=brown];
4898[label="162.26.7.10;144pkt 144fpkt", shape=invhouse, color=bisque];
stat765[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.26.7.10:0, *:0}[95.1389%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.1276%)&lt;BR/&gt; 80: (1.39211%)&lt;BR/&gt; 135: (1.04408%)&lt;BR/&gt; 25015: (0.348028%)&lt;BR/&gt; 24712: (0.348028%)&gt;];
}
2222--3956[label="1;143pkt 143fpkt"];
2222--4898[label="1;144pkt 144fpkt"];
3956--4898[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter src_ip="162.26.7.10"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_766{
style=filled;
color=gray75;
2223[label="205.1.42.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3957[label="205.1.42.10;1pkt 1fpkt", shape=invtriangle, color=brown];
stat766[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.42.10:80, 149.206.86.150:15822}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15822: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2223--3957[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.86.150" dst_port="15822" src_ip="205.1.42.10" src_port="80"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_767{
style=filled;
color=gray75;
972[label="166.55.243.64;d;378pkt 378fpkt", shape=diamond, color=yellow];
1885[label="166.55.243.64;d;281pkt 281fpkt", shape=hexagon, color=black];
stat767[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 166.55.243.64:4412}[50.2646%]&lt;BR/&gt;{*:*, 166.55.243.64:53}[46.2963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.0759%)&lt;BR/&gt; 4412: (25.9484%)&lt;BR/&gt; 0: (3.33839%)&lt;BR/&gt; 1025: (0.531108%)&lt;BR/&gt; 1030: (0.455235%)&gt;];
}
972--1001[label="0.00740741;1pkt 1fpkt"];
972--1088[label="0.0105263;1pkt 1fpkt"];
972--1263[label="0.00925926;1pkt 1fpkt"];
972--1283[label="0.011236;1pkt 1fpkt"];
972--1285[label="0.0212766;1pkt 1fpkt"];
972--1413[label="0.025;1pkt 1fpkt"];
972--1524[label="0.0188679;1pkt 1fpkt"];
972--1572[label="0.0204082;1pkt 1fpkt"];
972--1885[label="1;281pkt 281fpkt"];
972--2013[label="0.011236;1pkt 1fpkt"];
972--2233[label="0.0208333;1pkt 1fpkt"];
972--2294[label="0.0149254;1pkt 1fpkt"];
972--2299[label="0.00641026;1pkt 1fpkt"];
972--2301[label="0.0277778;1pkt 1fpkt"];
972--2362[label="0.04;1pkt 1fpkt"];
972--2485[label="0.00943396;1pkt 1fpkt"];
972--2538[label="0.0144928;1pkt 1fpkt"];
972--2668[label="0.0263158;1pkt 1fpkt"];
972--2705[label="0.0185185;1pkt 1fpkt"];
972--2714[label="0.0142857;1pkt 1fpkt"];
972--2765[label="0.025;1pkt 1fpkt"];
972--3015[label="0.02;1pkt 1fpkt"];
972--3282[label="0.0384615;1pkt 1fpkt"];
972--3338[label="0.0238095;1pkt 1fpkt"];
972--3369[label="0.00840336;1pkt 1fpkt"];
972--3858[label="0.0172414;1pkt 1fpkt"];
972--3962[label="0.0208333;1pkt 1fpkt"];
972--3998[label="0.0147059;1pkt 1fpkt"];
972--4002[label="0.00636943;1pkt 1fpkt"];
972--4037[label="0.04;1pkt 1fpkt"];
972--4226[label="0.0185185;1pkt 1fpkt"];
972--4381[label="0.02;1pkt 1fpkt"];
972--4518[label="0.0384615;1pkt 1fpkt"];
972--4568[label="0.00840336;1pkt 1fpkt"];
972--4847[label="0.0172414;1pkt 1fpkt"];
972--4902[label="0.0208333;1pkt 1fpkt"];
972--4919[label="0.0149254;1pkt 1fpkt"];
972--4920[label="0.00636943;1pkt 1fpkt"];
972--4939[label="0.04;1pkt 1fpkt"];
972--5097[label="0.02;1pkt 1fpkt"];
972--5161[label="0.0384615;1pkt 1fpkt"];
972--5328[label="0.0172414;1pkt 1fpkt"];
1885--2013[label="0.011236;1pkt 1fpkt"];
1885--2233[label="0.0208333;1pkt 1fpkt"];
1885--2294[label="0.0149254;1pkt 1fpkt"];
1885--2299[label="0.00641026;1pkt 1fpkt"];
1885--2301[label="0.0277778;1pkt 1fpkt"];
1885--2362[label="0.04;1pkt 1fpkt"];
1885--2485[label="0.00943396;1pkt 1fpkt"];
1885--2538[label="0.0144928;1pkt 1fpkt"];
1885--2668[label="0.0263158;1pkt 1fpkt"];
1885--2705[label="0.0185185;1pkt 1fpkt"];
1885--2714[label="0.0142857;1pkt 1fpkt"];
1885--2765[label="0.025;1pkt 1fpkt"];
1885--3015[label="0.02;1pkt 1fpkt"];
1885--3282[label="0.0384615;1pkt 1fpkt"];
1885--3338[label="0.0238095;1pkt 1fpkt"];
1885--3858[label="0.0172414;1pkt 1fpkt"];
1885--3962[label="0.0208333;1pkt 1fpkt"];
1885--3998[label="0.0147059;1pkt 1fpkt"];
1885--4002[label="0.00636943;1pkt 1fpkt"];
1885--4037[label="0.04;1pkt 1fpkt"];
1885--4226[label="0.0185185;1pkt 1fpkt"];
1885--4381[label="0.02;1pkt 1fpkt"];
1885--4518[label="0.0384615;1pkt 1fpkt"];
1885--4847[label="0.0172414;1pkt 1fpkt"];
1885--4902[label="0.0208333;1pkt 1fpkt"];
1885--4919[label="0.0149254;1pkt 1fpkt"];
1885--4920[label="0.00636943;1pkt 1fpkt"];
1885--4939[label="0.04;1pkt 1fpkt"];
1885--5097[label="0.02;1pkt 1fpkt"];
1885--5161[label="0.0384615;1pkt 1fpkt"];
1885--5328[label="0.0172414;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.243.64" dst_port="53"/>
      <filter dst_ip="166.55.243.64" dst_port="4412" src_port="53"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_768{
style=filled;
color=gray75;
2234[label="61.186.230.11;89pkt 89fpkt", shape=pentagon, color=darkviolet];
3963[label="61.186.230.11;89pkt 89fpkt", shape=invtriangle, color=brown];
stat768[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.186.230.11:*, 149.206.168.75:135}[29.2135%]&lt;BR/&gt;{61.186.230.11:*, 149.206.168.75:445}[29.2135%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.2809%)&lt;BR/&gt; 135: (24.7191%)&lt;BR/&gt; 4982: (0.561798%)&lt;BR/&gt; 4978: (0.561798%)&lt;BR/&gt; 4739: (0.561798%)&gt;];
}
2234--3963[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.168.75" dst_port="445" src_ip="61.186.230.11"/>
      <filter dst_ip="149.206.168.75" dst_port="135" src_ip="61.186.230.11"/>
    </slice>
    <from sec="1071205340" usec="0"/>
    <to sec="1071205701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_769{
style=filled;
color=gray75;
2242[label="216.26.94.12;40pkt 40fpkt", shape=pentagon, color=darkviolet];
3967[label="216.26.94.12;41pkt 41fpkt", shape=invtriangle, color=brown];
stat769[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.26.94.12:80, 149.206.54.69:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55140: (1.23457%)&lt;BR/&gt; 55138: (1.23457%)&lt;BR/&gt; 55136: (1.23457%)&lt;BR/&gt; 55134: (1.23457%)&gt;];
}
2242--3967[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.54.69" src_ip="216.26.94.12" src_port="80"/>
    </slice>
    <from sec="1071205747" usec="0"/>
    <to sec="1071205792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_770{
style=filled;
color=gray75;
2245[label="208.178.1.13;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3969[label="208.178.1.13;4pkt 4fpkt", shape=invtriangle, color=brown];
stat770[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.178.1.13:80, 149.206.244.102:1071}[25%]&lt;BR/&gt;{208.178.1.13:80, 149.206.244.102:1072}[25%]&lt;BR/&gt;{208.178.1.13:80, 149.206.244.102:1101}[25%]&lt;BR/&gt;{208.178.1.13:80, 149.206.244.102:1102}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1102: (14.2857%)&lt;BR/&gt; 1101: (14.2857%)&lt;BR/&gt; 1072: (14.2857%)&lt;BR/&gt; 1071: (7.14286%)&gt;];
}
2245--3969[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.244.102" dst_port="1102" src_ip="208.178.1.13" src_port="80"/>
      <filter dst_ip="149.206.244.102" dst_port="1101" src_ip="208.178.1.13" src_port="80"/>
      <filter dst_ip="149.206.244.102" dst_port="1072" src_ip="208.178.1.13" src_port="80"/>
      <filter dst_ip="149.206.244.102" dst_port="1071" src_ip="208.178.1.13" src_port="80"/>
    </slice>
    <from sec="1071205858" usec="0"/>
    <to sec="1071205965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_771{
style=filled;
color=gray75;
2248[label="61.247.138.13;104pkt 104fpkt", shape=pentagon, color=darkviolet];
3971[label="61.247.138.13;104pkt 104fpkt", shape=invtriangle, color=brown];
4906[label="61.247.138.13;104pkt 104fpkt", shape=invhouse, color=bisque];
stat771[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.247.138.13:*, *:445}[51.9231%]&lt;BR/&gt;{61.247.138.13:*, *:135}[48.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.9615%)&lt;BR/&gt; 135: (24.0385%)&lt;BR/&gt; 4585: (0.961538%)&lt;BR/&gt; 3066: (0.961538%)&lt;BR/&gt; 4950: (0.480769%)&gt;];
}
2248--3971[label="1;104pkt 104fpkt"];
2248--4906[label="1;104pkt 104fpkt"];
3971--4906[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="61.247.138.13"/>
      <filter dst_port="135" src_ip="61.247.138.13"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_772{
style=filled;
color=gray75;
2255[label="198.150.208.15;153pkt 153fpkt", shape=pentagon, color=darkviolet];
3975[label="198.150.208.15;154pkt 154fpkt", shape=invtriangle, color=brown];
stat772[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.150.208.15:0, *:0}[93.5065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.4853%)&lt;BR/&gt; 135: (2.9316%)&lt;BR/&gt; 36333: (0.325733%)&lt;BR/&gt; 33485: (0.325733%)&lt;BR/&gt; 29575: (0.325733%)&gt;];
}
2255--3975[label="1;153pkt 153fpkt"];
</description>
    <slice>
      <filter src_ip="198.150.208.15"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.58.43.17"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.17.75.17"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_775{
style=filled;
color=gray75;
2271[label="205.1.45.18;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3985[label="205.1.45.18;4pkt 4fpkt", shape=invtriangle, color=brown];
4914[label="205.1.45.18;4pkt 4fpkt", shape=invhouse, color=bisque];
stat775[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.45.18:1863, 149.206.205.85:3792}[25%]&lt;BR/&gt;{205.1.45.18:1863, 149.206.248.95:1033}[25%]&lt;BR/&gt;{205.1.45.18:1863, 145.166.4.193:1034}[25%]&lt;BR/&gt;{205.1.45.18:1863, 166.55.97.200:1028}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3792: (12.5%)&lt;BR/&gt; 1034: (12.5%)&lt;BR/&gt; 1033: (12.5%)&lt;BR/&gt; 1028: (12.5%)&gt;];
}
2271--3985[label="1;4pkt 4fpkt"];
2271--4914[label="1;4pkt 4fpkt"];
3985--4914[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.97.200" dst_port="1028" src_ip="205.1.45.18" src_port="1863"/>
      <filter dst_ip="145.166.4.193" dst_port="1034" src_ip="205.1.45.18" src_port="1863"/>
      <filter dst_ip="149.206.248.95" dst_port="1033" src_ip="205.1.45.18" src_port="1863"/>
      <filter dst_ip="149.206.205.85" dst_port="3792" src_ip="205.1.45.18" src_port="1863"/>
    </slice>
    <from sec="1071205217" usec="0"/>
    <to sec="1071206078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.106.181.18"/>
    </slice>
    <from sec="1071205374" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.888426,1.57451,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_777{
style=filled;
color=gray75;
17[label="216.16.173.105s;2pkt 2fpkt", shape=rectangle, color=red];
539[label="145.166.4.238;d;28pkt 28fpkt", shape=diamond, color=yellow];
727[label="149.206.74.6;d;91pkt 91fpkt", shape=diamond, color=yellow];
1086[label="78.18.183.110;s;10pkt 10fpkt", shape=diamond, color=yellow];
1447[label="154.32.67.150;s;218pkt 218fpkt", shape=diamond, color=yellow];
1460[label="149.206.39.182;d;95pkt 95fpkt", shape=diamond, color=yellow];
3248[label="205.1.45.154;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3779[label="205.1.41.233;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat777[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.32.67.150:80, 149.206.39.182:*}[40.4682%]&lt;BR/&gt;{*:80, 149.206.74.6:*}[25.7525%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.2637%)&lt;BR/&gt; 1863: (2.85714%)&lt;BR/&gt; 3259: (0.549451%)&lt;BR/&gt; 1150: (0.32967%)&lt;BR/&gt; 1131: (0.32967%)&gt;];
}
17--524[label="1;2pkt 2fpkt"];
17--637[label="1;2pkt 2fpkt"];
539--778[label="0.107143;3pkt 3fpkt"];
539--853[label="1;1pkt 1fpkt"];
539--1737[label="0.107143;3pkt 3fpkt"];
539--1884[label="1;1pkt 1fpkt"];
539--2278[label="0.107143;3pkt 3fpkt"];
539--2279[label="0.15;3pkt 3fpkt"];
539--2497[label="0.111111;1pkt 1fpkt"];
539--3989[label="0.107143;3pkt 3fpkt"];
539--3990[label="0.15;3pkt 3fpkt"];
539--4110[label="0.111111;1pkt 1fpkt"];
539--4918[label="0.107143;3pkt 3fpkt"];
539--4974[label="0.125;1pkt 1fpkt"];
727--778[label="0.021978;2pkt 2fpkt"];
727--918[label="0.021978;2pkt 2fpkt"];
727--1018[label="0.0659341;6pkt 6fpkt"];
727--1447[label="0.648352;59pkt 59fpkt"];
727--1520[label="0.047619;3pkt 3fpkt"];
727--2016[label="0.021978;2pkt 2fpkt"];
727--2103[label="0.032967;3pkt 3fpkt"];
727--2278[label="0.021978;2pkt 2fpkt"];
727--2543[label="0.0454545;3pkt 3fpkt"];
727--2781[label="0.010989;1pkt 1fpkt"];
727--3117[label="0.0659341;6pkt 6fpkt"];
727--3132[label="0.021978;2pkt 2fpkt"];
727--3248[label="0.25;1pkt 1fpkt"];
727--3613[label="0.010989;1pkt 1fpkt"];
727--3722[label="0.010989;1pkt 1fpkt"];
727--3779[label="0.142857;1pkt 1fpkt"];
727--3989[label="0.021978;2pkt 2fpkt"];
727--4138[label="0.0461538;3pkt 3fpkt"];
727--4266[label="0.010989;1pkt 1fpkt"];
727--4431[label="0.0659341;6pkt 6fpkt"];
727--4439[label="0.021978;2pkt 2fpkt"];
727--4698[label="0.010989;1pkt 1fpkt"];
727--4918[label="0.021978;2pkt 2fpkt"];
727--4989[label="0.0454545;3pkt 3fpkt"];
727--5053[label="0.010989;1pkt 1fpkt"];
727--5117[label="0.0659341;6pkt 6fpkt"];
727--5121[label="0.021978;2pkt 2fpkt"];
1086--1860[label="1;10pkt 10fpkt"];
1086--2103[label="0.8;8pkt 8fpkt"];
1086--2966[label="1;10pkt 10fpkt"];
1086--4357[label="1;10pkt 10fpkt"];
1447--1460[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.74.6" src_port="80"/>
      <filter dst_ip="149.206.39.182" src_ip="154.32.67.150" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_778{
style=filled;
color=gray75;
2280[label="205.1.45.19;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3991[label="205.1.45.19;2pkt 2fpkt", shape=invtriangle, color=brown];
stat778[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.45.19:1863, 201.120.100.83:1068}[50%]&lt;BR/&gt;{205.1.45.19:1863, 145.166.1.214:1137}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1137: (25%)&lt;BR/&gt; 1068: (25%)&gt;];
}
2280--3991[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.1.214" dst_port="1137" src_ip="205.1.45.19" src_port="1863"/>
      <filter dst_ip="201.120.100.83" dst_port="1068" src_ip="205.1.45.19" src_port="1863"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_779{
style=filled;
color=gray75;
819[label="136.81.143.19;s;143pkt 143fpkt", shape=diamond, color=yellow];
2283[label="136.81.143.19;142pkt 142fpkt", shape=pentagon, color=darkviolet];
3993[label="136.81.143.19;142pkt 142fpkt", shape=invtriangle, color=brown];
stat779[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.81.143.19:*, 149.206.212.51:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63055: (0.351288%)&lt;BR/&gt; 63054: (0.351288%)&lt;BR/&gt; 63053: (0.351288%)&lt;BR/&gt; 63052: (0.351288%)&gt;];
}
819--2283[label="1;142pkt 142fpkt"];
819--3993[label="1;142pkt 142fpkt"];
2283--3993[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.212.51" dst_port="80" src_ip="136.81.143.19"/>
    </slice>
    <from sec="1071205323" usec="0"/>
    <to sec="1071205458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.80.49.20"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.887113,1.60866,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_781{
style=filled;
color=gray75;
556[label="78.9.130.163;s;2333pkt 2333fpkt", shape=diamond, color=yellow];
1994[label="78.9.130.163;s;2065pkt 2065fpkt", shape=hexagon, color=black];
stat781[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.9.130.163:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61995: (0.0682128%)&lt;BR/&gt; 37229: (0.0682128%)&lt;BR/&gt; 61545: (0.0454752%)&lt;BR/&gt; 61009: (0.0454752%)&gt;];
}
556--1112[label="0.0212766;1pkt 1fpkt"];
556--1994[label="1;2065pkt 2065fpkt"];
556--2103[label="0.0574368;134pkt 134fpkt"];
1994--2103[label="0.064891;134pkt 134fpkt"];
</description>
    <slice>
      <filter src_ip="78.9.130.163" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.885431,1.68051,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_782{
style=filled;
color=gray75;
127[label="78.62.241.232s;137pkt 137fpkt", shape=rectangle, color=red];
stat782[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.62.241.232:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
127--2104[label="0.605839;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="78.62.241.232" src_port="1030"/>
    </slice>
    <from sec="1071205603" usec="0"/>
    <to sec="1071205611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_783{
style=filled;
color=gray75;
2304[label="201.118.207.21;43pkt 43fpkt", shape=pentagon, color=darkviolet];
4004[label="201.118.207.21;44pkt 44fpkt", shape=invtriangle, color=brown];
stat783[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.118.207.21:0, *:0}[54.5455%]&lt;BR/&gt;{201.118.207.21:80, *:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (55.1724%)&lt;BR/&gt; 80: (22.4138%)&lt;BR/&gt; 4515: (1.14943%)&lt;BR/&gt; 4451: (1.14943%)&lt;BR/&gt; 4449: (1.14943%)&gt;];
}
2304--4004[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter src_ip="201.118.207.21" src_port="80"/>
      <filter src_ip="201.118.207.21"/>
    </slice>
    <from sec="1071205214" usec="0"/>
    <to sec="1071206015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_784{
style=filled;
color=gray75;
2312[label="208.76.213.22;221pkt 221fpkt", shape=pentagon, color=darkviolet];
4007[label="208.76.213.22;221pkt 221fpkt", shape=invtriangle, color=brown];
stat784[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.76.213.22:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2312--4007[label="1;221pkt 221fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.76.213.22" src_port="1025"/>
    </slice>
    <from sec="1071205418" usec="0"/>
    <to sec="1071205458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_785{
style=filled;
color=gray75;
2315[label="218.52.82.23;252pkt 252fpkt", shape=pentagon, color=darkviolet];
4009[label="218.52.82.23;252pkt 252fpkt", shape=invtriangle, color=brown];
stat785[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.52.82.23:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2315--4009[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.52.82.23" src_port="1025"/>
    </slice>
    <from sec="1071205320" usec="0"/>
    <to sec="1071205335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06292,1.66934,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_786{
style=filled;
color=gray75;
81[label="218.54.182.24s;72pkt 72fpkt", shape=rectangle, color=red];
2322[label="218.54.182.24;250pkt 250fpkt", shape=pentagon, color=darkviolet];
4013[label="218.54.182.24;250pkt 250fpkt", shape=invtriangle, color=brown];
4925[label="218.54.182.24;249pkt 249fpkt", shape=invhouse, color=bisque];
stat786[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.54.182.24:21022, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21022: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
81--2322[label="1;72pkt 72fpkt"];
81--4013[label="1;72pkt 72fpkt"];
81--4925[label="1;72pkt 72fpkt"];
2322--4013[label="1;250pkt 250fpkt"];
2322--4925[label="1;249pkt 249fpkt"];
4013--4925[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.54.182.24" src_port="21022"/>
    </slice>
    <from sec="1071205471" usec="0"/>
    <to sec="1071205486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_787{
style=filled;
color=gray75;
2323[label="201.118.207.24;130pkt 130fpkt", shape=pentagon, color=darkviolet];
4014[label="201.118.207.24;129pkt 129fpkt", shape=invtriangle, color=brown];
stat787[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.118.207.24:32839, *:53}[50%]&lt;BR/&gt;{201.118.207.24:53, *:*}[47.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.3166%)&lt;BR/&gt; 32839: (24.9035%)&lt;BR/&gt; 123: (2.3166%)&lt;BR/&gt; 32768: (1.9305%)&lt;BR/&gt; 9254: (1.5444%)&gt;];
}
2323--4014[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter src_ip="201.118.207.24" src_port="53"/>
      <filter dst_port="53" src_ip="201.118.207.24" src_port="32839"/>
    </slice>
    <from sec="1071205217" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_788{
style=filled;
color=gray75;
2324[label="208.110.239.24;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4015[label="208.110.239.24;21pkt 21fpkt", shape=invtriangle, color=brown];
stat788[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.110.239.24:80, 149.206.146.188:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 5580: (2.38095%)&lt;BR/&gt; 5579: (2.38095%)&lt;BR/&gt; 5570: (2.38095%)&lt;BR/&gt; 5569: (2.38095%)&gt;];
}
2324--4015[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.146.188" src_ip="208.110.239.24" src_port="80"/>
    </slice>
    <from sec="1071205956" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
591[label="201.118.240.24;s;2336pkt 2336fpkt", shape=diamond, color=yellow];
2325[label="201.118.240.24;2517pkt 2517fpkt", shape=pentagon, color=darkviolet];
4016[label="201.118.240.24;2516pkt 2516fpkt", shape=invtriangle, color=brown];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.118.240.24:0, *:0}[99.9603%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.9593%)&lt;BR/&gt; 2114: (0.0203555%)&lt;BR/&gt; 135: (0.0203555%)&gt;];
}
591--2325[label="1;2336pkt 2336fpkt"];
591--4016[label="0.999572;2335pkt 2335fpkt"];
2325--4016[label="1;2516pkt 2516fpkt"];
</description>
    <slice>
      <filter src_ip="201.118.240.24"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_790{
style=filled;
color=gray75;
2332[label="77.8.172.25;85pkt 85fpkt", shape=pentagon, color=darkviolet];
4020[label="77.8.172.25;85pkt 85fpkt", shape=invtriangle, color=brown];
4927[label="77.8.172.25;84pkt 84fpkt", shape=invhouse, color=bisque];
stat790[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.8.172.25:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4485: (1.1811%)&lt;BR/&gt; 4992: (0.590551%)&lt;BR/&gt; 4971: (0.590551%)&lt;BR/&gt; 4970: (0.590551%)&gt;];
}
2332--4020[label="1;85pkt 85fpkt"];
2332--4927[label="1;84pkt 84fpkt"];
4020--4927[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="77.8.172.25"/>
    </slice>
    <from sec="1071205238" usec="0"/>
    <to sec="1071206071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.39.212.25"/>
    </slice>
    <from sec="1071205291" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_792{
style=filled;
color=gray75;
2336[label="59.138.87.26;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4022[label="59.138.87.26;1pkt 1fpkt", shape=invtriangle, color=brown];
stat792[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.138.87.26:80, 131.233.164.103:1408}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1408: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2336--4022[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.233.164.103" dst_port="1408" src_ip="59.138.87.26" src_port="80"/>
    </slice>
    <from sec="1071205430" usec="0"/>
    <to sec="1071205440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.9.197.27"/>
    </slice>
    <from sec="1071205612" usec="0"/>
    <to sec="1071205906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.80.206.27"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_796{
style=filled;
color=gray75;
2351[label="56.208.13.28;187pkt 187fpkt", shape=pentagon, color=darkviolet];
4029[label="56.208.13.28;188pkt 188fpkt", shape=invtriangle, color=brown];
4934[label="56.208.13.28;188pkt 188fpkt", shape=invhouse, color=bisque];
stat796[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.208.13.28:0, *:1182}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1182: (50%)&lt;BR/&gt; 0: (50%)&gt;];
}
2351--4029[label="1;187pkt 187fpkt"];
2351--4934[label="1;187pkt 187fpkt"];
4029--4934[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_port="1182" src_ip="56.208.13.28"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071206086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_797{
style=filled;
color=gray75;
1521[label="208.184.221.213;s;30pkt 30fpkt", shape=diamond, color=yellow];
3644[label="208.184.221.213;30pkt 30fpkt", shape=pentagon, color=darkviolet];
stat797[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.184.221.213:80, 160.188.107.7:*}[43.3333%]&lt;BR/&gt;{208.184.221.213:80, 160.188.107.6:*}[36.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3333%)&lt;BR/&gt; 1134: (3.33333%)&lt;BR/&gt; 0: (3.33333%)&lt;BR/&gt; 48543: (1.66667%)&lt;BR/&gt; 48535: (1.66667%)&gt;];
}
1521--1937[label="0.433333;13pkt 13fpkt"];
1521--3644[label="1;30pkt 30fpkt"];
1521--4718[label="1;30pkt 30fpkt"];
1521--5262[label="1;30pkt 30fpkt"];
3644--4718[label="1;30pkt 30fpkt"];
3644--5262[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.107.7" src_ip="208.184.221.213" src_port="80"/>
      <filter dst_ip="160.188.107.6" src_ip="208.184.221.213" src_port="80"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_798{
style=filled;
color=gray75;
2357[label="219.91.112.28;252pkt 252fpkt", shape=pentagon, color=darkviolet];
4033[label="219.91.112.28;252pkt 252fpkt", shape=invtriangle, color=brown];
4938[label="219.91.112.28;252pkt 252fpkt", shape=invhouse, color=bisque];
stat798[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.91.112.28:1044, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1044: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2357--4033[label="1;252pkt 252fpkt"];
2357--4938[label="1;252pkt 252fpkt"];
4033--4938[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.91.112.28" src_port="1044"/>
    </slice>
    <from sec="1071205438" usec="0"/>
    <to sec="1071205459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_799{
style=filled;
color=gray75;
527[label="149.206.193.118;d;71pkt 71fpkt", shape=diamond, color=yellow];
825[label="208.110.213.28;s;6pkt 6fpkt", shape=diamond, color=yellow];
2360[label="208.110.213.28;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3050[label="221.218.72.123;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4036[label="208.110.213.28;9pkt 9fpkt", shape=invtriangle, color=brown];
4399[label="221.218.72.123;47pkt 47fpkt", shape=invtriangle, color=brown];
5107[label="221.218.72.123;47pkt 47fpkt", shape=invhouse, color=bisque];
stat799[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.218.72.123:80, 149.206.193.118:*}[62.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3644%)&lt;BR/&gt; 4926: (0.847458%)&lt;BR/&gt; 4925: (0.847458%)&lt;BR/&gt; 4924: (0.847458%)&lt;BR/&gt; 4923: (0.847458%)&gt;];
}
527--738[label="0.084507;6pkt 6fpkt"];
527--825[label="0.833333;5pkt 5fpkt"];
527--2360[label="0.555556;5pkt 5fpkt"];
527--3050[label="1;47pkt 47fpkt"];
527--4036[label="0.555556;5pkt 5fpkt"];
527--4399[label="1;47pkt 47fpkt"];
527--5107[label="1;47pkt 47fpkt"];
825--999[label="0.166667;1pkt 1fpkt"];
825--2360[label="1;6pkt 6fpkt"];
825--4036[label="1;6pkt 6fpkt"];
2360--4036[label="1;9pkt 9fpkt"];
3050--4399[label="1;47pkt 47fpkt"];
3050--5107[label="1;47pkt 47fpkt"];
4399--5107[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.193.118" src_ip="221.218.72.123" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_800{
style=filled;
color=gray75;
2374[label="213.123.148.30;41pkt 41fpkt", shape=pentagon, color=darkviolet];
4043[label="213.123.148.30;40pkt 40fpkt", shape=invtriangle, color=brown];
4942[label="213.123.148.30;41pkt 41fpkt", shape=invhouse, color=bisque];
stat800[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.123.148.30:21, 160.188.21.132:*}[48.7805%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (48.7705%)&lt;BR/&gt; 4687: (1.22951%)&lt;BR/&gt; 4686: (1.22951%)&lt;BR/&gt; 4684: (1.22951%)&lt;BR/&gt; 4682: (1.22951%)&gt;];
}
2374--4043[label="1;40pkt 40fpkt"];
2374--4942[label="1;41pkt 41fpkt"];
4043--4942[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.21.132" src_ip="213.123.148.30" src_port="21"/>
    </slice>
    <from sec="1071205413" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_801{
style=filled;
color=gray75;
2381[label="78.208.93.31;195pkt 195fpkt", shape=pentagon, color=darkviolet];
4045[label="78.208.93.31;195pkt 195fpkt", shape=invtriangle, color=brown];
stat801[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.208.93.31:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2381--4045[label="1;195pkt 195fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="78.208.93.31" src_port="1028"/>
    </slice>
    <from sec="1071205622" usec="0"/>
    <to sec="1071205655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.87.59.32"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_803{
style=filled;
color=gray75;
1605[label="211.38.138.32;s;43pkt 43fpkt", shape=diamond, color=yellow];
2392[label="211.38.138.32;43pkt 43fpkt", shape=pentagon, color=darkviolet];
4053[label="211.38.138.32;42pkt 42fpkt", shape=invtriangle, color=brown];
4949[label="211.38.138.32;42pkt 42fpkt", shape=invhouse, color=bisque];
stat803[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.38.138.32:80, 149.206.205.29:*}[95.3488%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44620: (1.17647%)&lt;BR/&gt; 1816: (1.17647%)&lt;BR/&gt; 1815: (1.17647%)&lt;BR/&gt; 1814: (1.17647%)&gt;];
}
1605--2392[label="1;43pkt 43fpkt"];
1605--4053[label="1;42pkt 42fpkt"];
1605--4949[label="1;42pkt 42fpkt"];
2392--4053[label="1;42pkt 42fpkt"];
2392--4949[label="1;42pkt 42fpkt"];
4053--4949[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.205.29" src_ip="211.38.138.32" src_port="80"/>
    </slice>
    <from sec="1071205791" usec="0"/>
    <to sec="1071206016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
2401[label="218.73.125.33;251pkt 251fpkt", shape=pentagon, color=darkviolet];
4057[label="218.73.125.33;251pkt 251fpkt", shape=invtriangle, color=brown];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.73.125.33:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2401--4057[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.73.125.33" src_port="1027"/>
    </slice>
    <from sec="1071205211" usec="0"/>
    <to sec="1071205225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_805{
style=filled;
color=gray75;
2403[label="145.206.219.33;218pkt 218fpkt", shape=pentagon, color=darkviolet];
4058[label="145.206.219.33;217pkt 217fpkt", shape=invtriangle, color=brown];
stat805[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.206.219.33:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2403--4058[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter src_ip="145.206.219.33"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.73.82.35"/>
    </slice>
    <from sec="1071205738" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
2418[label="59.107.110.35;112pkt 112fpkt", shape=pentagon, color=darkviolet];
4066[label="59.107.110.35;113pkt 113fpkt", shape=invtriangle, color=brown];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.107.110.35:0, *:0}[93.8053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.7778%)&lt;BR/&gt; 135: (2.66667%)&lt;BR/&gt; 55572: (0.444444%)&lt;BR/&gt; 54488: (0.444444%)&lt;BR/&gt; 51571: (0.444444%)&gt;];
}
2418--4066[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter src_ip="59.107.110.35"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.161.73.36"/>
    </slice>
    <from sec="1071205259" usec="0"/>
    <to sec="1071205292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_809{
style=filled;
color=gray75;
2432[label="57.232.24.37;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4072[label="57.232.24.37;14pkt 14fpkt", shape=invtriangle, color=brown];
4953[label="57.232.24.37;13pkt 13fpkt", shape=invhouse, color=bisque];
stat809[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.232.24.37:80, 149.206.18.84:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65157: (3.75%)&lt;BR/&gt; 65111: (3.75%)&lt;BR/&gt; 64985: (3.75%)&lt;BR/&gt; 64837: (3.75%)&gt;];
}
2432--4072[label="1;13pkt 13fpkt"];
2432--4953[label="1;13pkt 13fpkt"];
4072--4953[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.18.84" src_ip="57.232.24.37" src_port="80"/>
    </slice>
    <from sec="1071206077" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_810{
style=filled;
color=gray75;
1295[label="58.198.116.37;s;220pkt 220fpkt", shape=diamond, color=yellow];
2438[label="58.198.116.37;241pkt 241fpkt", shape=pentagon, color=darkviolet];
4075[label="58.198.116.37;241pkt 241fpkt", shape=invtriangle, color=brown];
stat810[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.198.116.37:*, *:135}[50.4132%]&lt;BR/&gt;{58.198.116.37:*, *:445}[49.5868%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.0712%)&lt;BR/&gt; 445: (24.9288%)&lt;BR/&gt; 3811: (0.42735%)&lt;BR/&gt; 3448: (0.42735%)&lt;BR/&gt; 1540: (0.42735%)&gt;];
}
1295--2106[label="0.00909091;2pkt 2fpkt"];
1295--2108[label="0.0181818;4pkt 4fpkt"];
1295--2123[label="0.0181818;4pkt 4fpkt"];
1295--2130[label="0.0181818;4pkt 4fpkt"];
1295--2438[label="0.995455;219pkt 219fpkt"];
1295--4075[label="0.995455;219pkt 219fpkt"];
2438--4075[label="1;241pkt 241fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="58.198.116.37"/>
      <filter dst_port="445" src_ip="58.198.116.37"/>
    </slice>
    <from sec="1071205243" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_811{
style=filled;
color=gray75;
2441[label="56.9.10.38;98pkt 98fpkt", shape=pentagon, color=darkviolet];
4077[label="56.9.10.38;99pkt 99fpkt", shape=invtriangle, color=brown];
4956[label="56.9.10.38;99pkt 99fpkt", shape=invhouse, color=bisque];
stat811[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.9.10.38:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4998: (0.506757%)&lt;BR/&gt; 4981: (0.506757%)&lt;BR/&gt; 4969: (0.506757%)&lt;BR/&gt; 4763: (0.506757%)&gt;];
}
2441--4077[label="1;98pkt 98fpkt"];
2441--4956[label="1;98pkt 98fpkt"];
4077--4956[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="56.9.10.38"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_812{
style=filled;
color=gray75;
1131[label="221.64.200.38;s;844pkt 844fpkt", shape=diamond, color=yellow];
2451[label="221.64.200.38;907pkt 907fpkt", shape=pentagon, color=darkviolet];
4083[label="221.64.200.38;908pkt 908fpkt", shape=invtriangle, color=brown];
stat812[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.64.200.38:3011, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3011: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1131--2451[label="0.998815;843pkt 843fpkt"];
1131--4083[label="0.998815;843pkt 843fpkt"];
2451--4083[label="1;907pkt 907fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="221.64.200.38" src_port="3011"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.53.218.38"/>
    </slice>
    <from sec="1071205872" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_814{
style=filled;
color=gray75;
2457[label="61.138.25.39;146pkt 146fpkt", shape=pentagon, color=darkviolet];
4087[label="61.138.25.39;146pkt 146fpkt", shape=invtriangle, color=brown];
4962[label="61.138.25.39;146pkt 146fpkt", shape=invhouse, color=bisque];
stat814[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.138.25.39:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2457--4087[label="1;146pkt 146fpkt"];
2457--4962[label="1;146pkt 146fpkt"];
4087--4962[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="61.138.25.39" src_port="1026"/>
    </slice>
    <from sec="1071206037" usec="0"/>
    <to sec="1071206063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.69909,1.5995,010,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_815{
style=filled;
color=gray75;
1528[label="77.8.34.41;s;196pkt 196fpkt", shape=diamond, color=yellow];
4093[label="77.8.34.41;209pkt 209fpkt", shape=invtriangle, color=brown];
stat815[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.8.34.41:*, *:135}[50%]&lt;BR/&gt;{77.8.34.41:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.0617%)&lt;BR/&gt; 135: (24.9383%)&lt;BR/&gt; 4317: (0.493827%)&lt;BR/&gt; 3751: (0.493827%)&lt;BR/&gt; 2283: (0.493827%)&gt;];
}
1528--2106[label="0.0867347;17pkt 17fpkt"];
1528--2108[label="0.0459184;9pkt 9fpkt"];
1528--2111[label="0.0612245;12pkt 12fpkt"];
1528--2123[label="0.0459184;9pkt 9fpkt"];
1528--2125[label="0.0612245;12pkt 12fpkt"];
1528--2130[label="0.0459184;9pkt 9fpkt"];
1528--2131[label="0.0612245;12pkt 12fpkt"];
1528--2472[label="1;196pkt 196fpkt"];
1528--4093[label="0.994898;195pkt 195fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="77.8.34.41"/>
      <filter dst_port="135" src_ip="77.8.34.41"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_816{
style=filled;
color=gray75;
2474[label="58.196.125.41;156pkt 156fpkt", shape=pentagon, color=darkviolet];
4095[label="58.196.125.41;155pkt 155fpkt", shape=invtriangle, color=brown];
stat816[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.196.125.41:0, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 0: (50%)&gt;];
}
2474--4095[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="58.196.125.41"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_817{
style=filled;
color=gray75;
2476[label="57.158.34.42;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4096[label="57.158.34.42;46pkt 46fpkt", shape=invtriangle, color=brown];
stat817[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.158.34.42:2703, 200.180.7.147:*}[68.0851%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (50%)&lt;BR/&gt; 61488: (1.07527%)&lt;BR/&gt; 61482: (1.07527%)&lt;BR/&gt; 61471: (1.07527%)&lt;BR/&gt; 61464: (1.07527%)&gt;];
}
2476--4096[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="200.180.7.147" src_ip="57.158.34.42" src_port="2703"/>
    </slice>
    <from sec="1071205265" usec="0"/>
    <to sec="1071206086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_818{
style=filled;
color=gray75;
2478[label="201.96.82.42;107pkt 107fpkt", shape=pentagon, color=darkviolet];
4097[label="201.96.82.42;106pkt 106fpkt", shape=invtriangle, color=brown];
4966[label="201.96.82.42;107pkt 107fpkt", shape=invhouse, color=bisque];
stat818[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.96.82.42:*, 200.180.7.48:80}[92.5234%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 19988: (0.46875%)&lt;BR/&gt; 19716: (0.46875%)&lt;BR/&gt; 19715: (0.46875%)&lt;BR/&gt; 19714: (0.46875%)&gt;];
}
2478--4097[label="1;106pkt 106fpkt"];
2478--4966[label="1;107pkt 107fpkt"];
4097--4966[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_ip="200.180.7.48" dst_port="80" src_ip="201.96.82.42"/>
    </slice>
    <from sec="1071205517" usec="0"/>
    <to sec="1071205566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.84.115.42"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.67.148.42"/>
    </slice>
    <from sec="1071205284" usec="0"/>
    <to sec="1071205302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_821{
style=filled;
color=gray75;
487[label="201.229.1.44;s;2pkt 2fpkt", shape=diamond, color=yellow];
1659[label="201.229.1.44;s;2pkt 2fpkt", shape=hexagon, color=black];
1677[label="149.206.39.140;d;32pkt 32fpkt", shape=hexagon, color=black];
2487[label="201.229.1.44;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4104[label="201.229.1.44;5pkt 5fpkt", shape=invtriangle, color=brown];
4971[label="201.229.1.44;6pkt 6fpkt", shape=invhouse, color=bisque];
stat821[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.228.31.65:2051, 149.206.39.140:*}[26.4706%]&lt;BR/&gt;{58.67.150.157:80, 149.206.39.140:*}[26.4706%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.5094%)&lt;BR/&gt; 2051: (8.49057%)&lt;BR/&gt; 2513: (5.66038%)&lt;BR/&gt; 2512: (5.66038%)&lt;BR/&gt; 2469: (3.77358%)&gt;];
}
487--1659[label="1;2pkt 2fpkt"];
487--1677[label="1;2pkt 2fpkt"];
487--2103[label="1;2pkt 2fpkt"];
487--2487[label="1;2pkt 2fpkt"];
487--4104[label="1;2pkt 2fpkt"];
487--4971[label="1;2pkt 2fpkt"];
1659--1677[label="1;2pkt 2fpkt"];
1659--2103[label="1;2pkt 2fpkt"];
1659--2487[label="1;2pkt 2fpkt"];
1659--4104[label="1;2pkt 2fpkt"];
1659--4971[label="1;2pkt 2fpkt"];
1677--2103[label="0.0625;2pkt 2fpkt"];
1677--2487[label="0.666667;4pkt 4fpkt"];
1677--2811[label="0.125;4pkt 4fpkt"];
1677--3269[label="0.28125;9pkt 9fpkt"];
1677--4104[label="0.6;3pkt 3fpkt"];
1677--4508[label="0.28125;9pkt 9fpkt"];
1677--4971[label="0.666667;4pkt 4fpkt"];
2487--4104[label="1;5pkt 5fpkt"];
2487--4971[label="1;6pkt 6fpkt"];
4104--4971[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.39.140" src_ip="58.67.150.157" src_port="80"/>
      <filter dst_ip="149.206.39.140" src_ip="201.228.31.65" src_port="2051"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_822{
style=filled;
color=gray75;
2489[label="211.99.24.44;312pkt 312fpkt", shape=pentagon, color=darkviolet];
4105[label="211.99.24.44;311pkt 311fpkt", shape=invtriangle, color=brown];
stat822[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.99.24.44:0, *:0}[91.3462%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.3323%)&lt;BR/&gt; 80: (3.37079%)&lt;BR/&gt; 135: (0.963082%)&lt;BR/&gt; 64943: (0.160514%)&lt;BR/&gt; 62939: (0.160514%)&gt;];
}
2489--4105[label="1;311pkt 311fpkt"];
</description>
    <slice>
      <filter src_ip="211.99.24.44"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_823{
style=filled;
color=gray75;
2492[label="213.152.50.44;41pkt 41fpkt", shape=pentagon, color=darkviolet];
4107[label="213.152.50.44;40pkt 40fpkt", shape=invtriangle, color=brown];
stat823[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.152.50.44:80, 145.166.244.135:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3783: (1.23457%)&lt;BR/&gt; 3782: (1.23457%)&lt;BR/&gt; 3769: (1.23457%)&lt;BR/&gt; 3768: (1.23457%)&gt;];
}
2492--4107[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.244.135" src_ip="213.152.50.44" src_port="80"/>
    </slice>
    <from sec="1071205214" usec="0"/>
    <to sec="1071205541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_824{
style=filled;
color=gray75;
2495[label="200.235.155.44;366pkt 366fpkt", shape=pentagon, color=darkviolet];
4109[label="200.235.155.44;366pkt 366fpkt", shape=invtriangle, color=brown];
stat824[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.235.155.44:41419, *:137}[20.4918%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 41419: (10.2459%)&lt;BR/&gt; 41411: (7.9235%)&lt;BR/&gt; 41273: (5.46448%)&lt;BR/&gt; 41274: (4.37158%)&gt;];
}
2495--4109[label="1;366pkt 366fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.235.155.44" src_port="41419"/>
    </slice>
    <from sec="1071205718" usec="0"/>
    <to sec="1071206022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_825{
style=filled;
color=gray75;
1364[label="61.144.213.44;s;244pkt 244fpkt", shape=diamond, color=yellow];
2499[label="61.144.213.44;292pkt 292fpkt", shape=pentagon, color=darkviolet];
4111[label="61.144.213.44;291pkt 291fpkt", shape=invtriangle, color=brown];
4975[label="61.144.213.44;291pkt 291fpkt", shape=invhouse, color=bisque];
stat825[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.144.213.44:*, *:445}[50.3425%]&lt;BR/&gt;{61.144.213.44:*, *:135}[49.6575%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.2683%)&lt;BR/&gt; 135: (24.7317%)&lt;BR/&gt; 2075: (0.536673%)&lt;BR/&gt; 4742: (0.357782%)&lt;BR/&gt; 3429: (0.357782%)&gt;];
}
1364--2108[label="0.0737705;18pkt 18fpkt"];
1364--2111[label="0.00819672;2pkt 2fpkt"];
1364--2123[label="0.0737705;18pkt 18fpkt"];
1364--2125[label="0.00819672;2pkt 2fpkt"];
1364--2130[label="0.0737705;18pkt 18fpkt"];
1364--2131[label="0.00819672;2pkt 2fpkt"];
1364--2499[label="1;244pkt 244fpkt"];
1364--4111[label="0.995902;243pkt 243fpkt"];
1364--4975[label="0.995902;243pkt 243fpkt"];
2499--4111[label="1;291pkt 291fpkt"];
2499--4975[label="1;291pkt 291fpkt"];
4111--4975[label="1;291pkt 291fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="61.144.213.44"/>
      <filter dst_port="135" src_ip="61.144.213.44"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_826{
style=filled;
color=gray75;
2504[label="56.208.148.45;134pkt 134fpkt", shape=pentagon, color=darkviolet];
4115[label="56.208.148.45;134pkt 134fpkt", shape=invtriangle, color=brown];
stat826[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.208.148.45:0, *:1182}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1182: (50%)&lt;BR/&gt; 0: (50%)&gt;];
}
2504--4115[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_port="1182" src_ip="56.208.148.45"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.168.69.46"/>
    </slice>
    <from sec="1071205792" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.94409,1.60102,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_828{
style=filled;
color=gray75;
837[label="218.166.133.47;s;41pkt 41fpkt", shape=diamond, color=yellow];
1053[label="218.166.133.70;s;25pkt 25fpkt", shape=diamond, color=yellow];
1867[label="149.206.205.29;d;113pkt 113fpkt", shape=hexagon, color=black];
2045[label="218.166.133.70;s;25pkt 25fpkt", shape=hexagon, color=black];
4122[label="218.166.133.47;59pkt 59fpkt", shape=invtriangle, color=brown];
stat828[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.166.133.47:80, 149.206.205.29:*}[42.3358%]&lt;BR/&gt;{218.166.133.68:80, 149.206.205.29:*}[27.7372%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1763: (0.570342%)&lt;BR/&gt; 1762: (0.570342%)&lt;BR/&gt; 1761: (0.570342%)&lt;BR/&gt; 1758: (0.570342%)&gt;];
}
837--1867[label="0.95122;39pkt 39fpkt"];
837--2103[label="0.0731707;3pkt 3fpkt"];
837--2518[label="1;41pkt 41fpkt"];
837--4122[label="0.97561;40pkt 40fpkt"];
1053--1867[label="0.88;22pkt 22fpkt"];
1053--2045[label="1;25pkt 25fpkt"];
1053--2103[label="0.04;1pkt 1fpkt"];
1867--2045[label="0.88;22pkt 22fpkt"];
1867--2103[label="0.0619469;7pkt 7fpkt"];
1867--2518[label="0.65;39pkt 39fpkt"];
1867--2679[label="0.76;38pkt 38fpkt"];
1867--3716[label="0.111111;2pkt 2fpkt"];
1867--4122[label="0.661017;39pkt 39fpkt"];
1867--4210[label="0.76;38pkt 38fpkt"];
1867--4757[label="0.111111;2pkt 2fpkt"];
1867--5284[label="0.111111;2pkt 2fpkt"];
2045--2103[label="0.04;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.205.29" src_ip="218.166.133.47" src_port="80"/>
      <filter dst_ip="149.206.205.29" src_ip="218.166.133.68" src_port="80"/>
    </slice>
    <from sec="1071205416" usec="0"/>
    <to sec="1071206040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_829{
style=filled;
color=gray75;
2522[label="57.180.20.48;156pkt 156fpkt", shape=pentagon, color=darkviolet];
4125[label="57.180.20.48;156pkt 156fpkt", shape=invtriangle, color=brown];
stat829[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.180.20.48:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2522--4125[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter src_ip="57.180.20.48"/>
    </slice>
    <from sec="1071205214" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_830{
style=filled;
color=gray75;
2526[label="78.145.112.48;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4128[label="78.145.112.48;1pkt 1fpkt", shape=invtriangle, color=brown];
stat830[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.145.112.48:80, 131.233.162.11:4418}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4418: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2526--4128[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.233.162.11" dst_port="4418" src_ip="78.145.112.48" src_port="80"/>
    </slice>
    <from sec="1071205652" usec="0"/>
    <to sec="1071206076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.58.227.48"/>
    </slice>
    <from sec="1071205882" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_832{
style=filled;
color=gray75;
2530[label="166.58.3.49;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4132[label="166.58.3.49;10pkt 10fpkt", shape=invtriangle, color=brown];
stat832[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.58.3.49:53, *:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (100%)&gt;];
}
2530--4132[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="166.58.3.49" src_port="53"/>
    </slice>
    <from sec="1071205262" usec="0"/>
    <to sec="1071206089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_833{
style=filled;
color=gray75;
2533[label="61.185.183.49;80pkt 80fpkt", shape=pentagon, color=darkviolet];
4134[label="61.185.183.49;80pkt 80fpkt", shape=invtriangle, color=brown];
stat833[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.185.183.49:*, *:135}[50%]&lt;BR/&gt;{61.185.183.49:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 135: (25%)&lt;BR/&gt; 4579: (1.25%)&lt;BR/&gt; 4167: (1.25%)&lt;BR/&gt; 3872: (1.25%)&gt;];
}
2533--4134[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="61.185.183.49"/>
      <filter dst_port="135" src_ip="61.185.183.49"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071205496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_834{
style=filled;
color=gray75;
2535[label="34.134.40.50;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4135[label="34.134.40.50;25pkt 25fpkt", shape=invtriangle, color=brown];
4987[label="34.134.40.50;24pkt 24fpkt", shape=invhouse, color=bisque];
stat834[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.134.40.50:80, 149.206.232.104:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1262: (2.05479%)&lt;BR/&gt; 1261: (2.05479%)&lt;BR/&gt; 1260: (2.05479%)&lt;BR/&gt; 1259: (2.05479%)&gt;];
}
2535--4135[label="1;24pkt 24fpkt"];
2535--4987[label="1;24pkt 24fpkt"];
4135--4987[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.232.104" src_ip="34.134.40.50" src_port="80"/>
    </slice>
    <from sec="1071205439" usec="0"/>
    <to sec="1071205540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_835{
style=filled;
color=gray75;
2544[label="201.152.206.50;149pkt 149fpkt", shape=pentagon, color=darkviolet];
4139[label="201.152.206.50;148pkt 148fpkt", shape=invtriangle, color=brown];
stat835[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.152.206.50:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1616: (1.0101%)&lt;BR/&gt; 1145: (1.0101%)&lt;BR/&gt; 2937: (0.673401%)&lt;BR/&gt; 2539: (0.673401%)&lt;BR/&gt; 2535: (0.673401%)&gt;];
}
2544--4139[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter src_ip="201.152.206.50"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_836{
style=filled;
color=gray75;
2546[label="76.45.18.51;104pkt 104fpkt", shape=pentagon, color=darkviolet];
4141[label="76.45.18.51;103pkt 103fpkt", shape=invtriangle, color=brown];
stat836[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.45.18.51:0, *:0}[98.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.0676%)&lt;BR/&gt; 135: (0.966184%)&lt;BR/&gt; 31221: (0.483092%)&lt;BR/&gt; 29166: (0.483092%)&gt;];
}
2546--4141[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter src_ip="76.45.18.51"/>
    </slice>
    <from sec="1071205368" usec="0"/>
    <to sec="1071206091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_837{
style=filled;
color=gray75;
2567[label="202.152.144.53;431pkt 431fpkt", shape=pentagon, color=darkviolet];
4151[label="202.152.144.53;431pkt 431fpkt", shape=invtriangle, color=brown];
stat837[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.152.144.53:1025, *:137}[54.9884%]&lt;BR/&gt;{202.152.144.53:1026, *:137}[45.0116%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1025: (27.4942%)&lt;BR/&gt; 1026: (22.5058%)&gt;];
}
2567--4151[label="1;431pkt 431fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="202.152.144.53" src_port="1025"/>
      <filter dst_port="137" src_ip="202.152.144.53" src_port="1026"/>
    </slice>
    <from sec="1071205439" usec="0"/>
    <to sec="1071206033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_838{
style=filled;
color=gray75;
2568[label="154.2.208.53;196pkt 196fpkt", shape=pentagon, color=darkviolet];
4152[label="154.2.208.53;195pkt 195fpkt", shape=invtriangle, color=brown];
stat838[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.2.208.53:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2568--4152[label="1;195pkt 195fpkt"];
</description>
    <slice>
      <filter src_ip="154.2.208.53"/>
    </slice>
    <from sec="1071205296" usec="0"/>
    <to sec="1071205637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_839{
style=filled;
color=gray75;
2574[label="200.230.212.54;175pkt 175fpkt", shape=pentagon, color=darkviolet];
4155[label="200.230.212.54;175pkt 175fpkt", shape=invtriangle, color=brown];
stat839[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.230.212.54:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2574--4155[label="1;175pkt 175fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.230.212.54" src_port="1025"/>
    </slice>
    <from sec="1071205506" usec="0"/>
    <to sec="1071205535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_840{
style=filled;
color=gray75;
2577[label="61.186.94.55;115pkt 115fpkt", shape=pentagon, color=darkviolet];
4156[label="61.186.94.55;115pkt 115fpkt", shape=invtriangle, color=brown];
4996[label="61.186.94.55;114pkt 114fpkt", shape=invhouse, color=bisque];
stat840[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.186.94.55:*, *:135}[50.4348%]&lt;BR/&gt;{61.186.94.55:*, *:445}[49.5652%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.1453%)&lt;BR/&gt; 445: (24.8547%)&lt;BR/&gt; 4958: (0.436047%)&lt;BR/&gt; 4834: (0.436047%)&lt;BR/&gt; 4827: (0.436047%)&gt;];
}
2577--4156[label="1;115pkt 115fpkt"];
2577--4996[label="1;114pkt 114fpkt"];
4156--4996[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="61.186.94.55"/>
      <filter dst_port="445" src_ip="61.186.94.55"/>
    </slice>
    <from sec="1071205219" usec="0"/>
    <to sec="1071205523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_841{
style=filled;
color=gray75;
2579[label="57.188.117.55;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4157[label="57.188.117.55;19pkt 19fpkt", shape=invtriangle, color=brown];
4997[label="57.188.117.55;19pkt 19fpkt", shape=invhouse, color=bisque];
stat841[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.188.117.55:80, 149.207.124.195:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2591: (2.63158%)&lt;BR/&gt; 2590: (2.63158%)&lt;BR/&gt; 2589: (2.63158%)&lt;BR/&gt; 2587: (2.63158%)&gt;];
}
2579--4157[label="1;19pkt 19fpkt"];
2579--4997[label="1;19pkt 19fpkt"];
4157--4997[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.124.195" src_ip="57.188.117.55" src_port="80"/>
    </slice>
    <from sec="1071206052" usec="0"/>
    <to sec="1071206061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_842{
style=filled;
color=gray75;
1066[label="101.49.10.56;s;389pkt 389fpkt", shape=diamond, color=yellow];
2582[label="101.49.10.56;679pkt 679fpkt", shape=pentagon, color=darkviolet];
4160[label="101.49.10.56;678pkt 678fpkt", shape=invtriangle, color=brown];
4999[label="101.49.10.56;678pkt 678fpkt", shape=invhouse, color=bisque];
stat842[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.49.10.56:0, *:0}[97.2018%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.6485%)&lt;BR/&gt; 445: (0.556931%)&lt;BR/&gt; 139: (0.556931%)&lt;BR/&gt; 137: (0.123762%)&lt;BR/&gt; 1270: (0.0618812%)&gt;];
}
1066--2582[label="1;389pkt 389fpkt"];
1066--4160[label="1;389pkt 389fpkt"];
1066--4999[label="1;389pkt 389fpkt"];
2582--4160[label="1;678pkt 678fpkt"];
2582--4999[label="1;678pkt 678fpkt"];
4160--4999[label="1;678pkt 678fpkt"];
</description>
    <slice>
      <filter src_ip="101.49.10.56"/>
    </slice>
    <from sec="1071205505" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.64.148.56"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_844{
style=filled;
color=gray75;
2590[label="78.212.191.56;196pkt 196fpkt", shape=pentagon, color=darkviolet];
4167[label="78.212.191.56;195pkt 195fpkt", shape=invtriangle, color=brown];
5003[label="78.212.191.56;195pkt 195fpkt", shape=invhouse, color=bisque];
stat844[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.212.191.56:*, *:445}[50.5102%]&lt;BR/&gt;{78.212.191.56:*, *:135}[49.4898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.3413%)&lt;BR/&gt; 135: (24.6587%)&lt;BR/&gt; 2172: (0.511945%)&lt;BR/&gt; 1829: (0.511945%)&lt;BR/&gt; 1770: (0.511945%)&gt;];
}
2590--4167[label="1;195pkt 195fpkt"];
2590--5003[label="1;195pkt 195fpkt"];
4167--5003[label="1;195pkt 195fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="78.212.191.56"/>
      <filter dst_port="135" src_ip="78.212.191.56"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_845{
style=filled;
color=gray75;
1515[label="61.244.40.57;s;215pkt 215fpkt", shape=diamond, color=yellow];
2597[label="61.244.40.57;235pkt 235fpkt", shape=pentagon, color=darkviolet];
4169[label="61.244.40.57;234pkt 234fpkt", shape=invtriangle, color=brown];
5004[label="61.244.40.57;234pkt 234fpkt", shape=invhouse, color=bisque];
stat845[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.244.40.57:*, *:445}[51.4894%]&lt;BR/&gt;{61.244.40.57:*, *:135}[48.5106%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.817%)&lt;BR/&gt; 135: (24.183%)&lt;BR/&gt; 4596: (0.43573%)&lt;BR/&gt; 4477: (0.43573%)&lt;BR/&gt; 4411: (0.43573%)&gt;];
}
1515--2106[label="0.00465116;1pkt 1fpkt"];
1515--2108[label="0.0418605;9pkt 9fpkt"];
1515--2123[label="0.0418605;9pkt 9fpkt"];
1515--2130[label="0.0418605;9pkt 9fpkt"];
1515--2597[label="1;215pkt 215fpkt"];
1515--4169[label="0.995349;214pkt 214fpkt"];
1515--5004[label="0.995349;214pkt 214fpkt"];
2597--4169[label="1;234pkt 234fpkt"];
2597--5004[label="1;234pkt 234fpkt"];
4169--5004[label="1;234pkt 234fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="61.244.40.57"/>
      <filter dst_port="135" src_ip="61.244.40.57"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_846{
style=filled;
color=gray75;
2602[label="59.143.81.57;171pkt 171fpkt", shape=pentagon, color=darkviolet];
4171[label="59.143.81.57;170pkt 170fpkt", shape=invtriangle, color=brown];
stat846[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.143.81.57:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2602--4171[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter src_ip="59.143.81.57"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_847{
style=filled;
color=gray75;
2618[label="78.56.171.60;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4178[label="78.56.171.60;18pkt 18fpkt", shape=invtriangle, color=brown];
5009[label="78.56.171.60;19pkt 19fpkt", shape=invhouse, color=bisque];
stat847[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.56.171.60:80, 201.120.114.201:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4595: (2.67857%)&lt;BR/&gt; 4586: (2.67857%)&lt;BR/&gt; 4584: (2.67857%)&lt;BR/&gt; 4583: (2.67857%)&gt;];
}
2618--4178[label="1;18pkt 18fpkt"];
2618--5009[label="1;19pkt 19fpkt"];
4178--5009[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="201.120.114.201" src_ip="78.56.171.60" src_port="80"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071205429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_848{
style=filled;
color=gray75;
374[label="149.206.51.186;d;671pkt 671fpkt", shape=diamond, color=yellow];
401[label="211.38.143.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
478[label="149.206.5.118;d;37pkt 37fpkt", shape=diamond, color=yellow];
943[label="218.54.189.57;s;43pkt 43fpkt", shape=diamond, color=yellow];
1394[label="58.67.134.154;s;36pkt 36fpkt", shape=diamond, color=yellow];
2027[label="205.1.41.210;s;6pkt 6fpkt", shape=hexagon, color=black];
2169[label="205.1.44.4;4pkt 4fpkt", shape=pentagon, color=darkviolet];
2184[label="205.1.195.5;18pkt 18fpkt", shape=pentagon, color=darkviolet];
2207[label="205.1.45.8;8pkt 8fpkt", shape=pentagon, color=darkviolet];
2419[label="78.145.112.35;20pkt 20fpkt", shape=pentagon, color=darkviolet];
2461[label="211.38.136.39;12pkt 12fpkt", shape=pentagon, color=darkviolet];
2617[label="78.52.164.60;25pkt 25fpkt", shape=pentagon, color=darkviolet];
2625[label="78.3.1.62;1pkt 1fpkt", shape=pentagon, color=darkviolet];
2626[label="205.1.44.62;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3163[label="211.38.143.141;100pkt 100fpkt", shape=pentagon, color=darkviolet];
3304[label="205.1.45.162;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3332[label="78.45.132.167;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3393[label="205.1.156.175;46pkt 46fpkt", shape=pentagon, color=darkviolet];
3447[label="205.1.45.182;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3548[label="205.1.41.199;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3804[label="205.1.156.236;52pkt 52fpkt", shape=pentagon, color=darkviolet];
3923[label="205.1.44.4;4pkt 4fpkt", shape=invtriangle, color=brown];
3934[label="205.1.195.5;18pkt 18fpkt", shape=invtriangle, color=brown];
4182[label="78.3.1.62;1pkt 1fpkt", shape=invtriangle, color=brown];
4183[label="205.1.44.62;3pkt 3fpkt", shape=invtriangle, color=brown];
4545[label="78.45.132.167;17pkt 17fpkt", shape=invtriangle, color=brown];
4813[label="205.1.156.236;52pkt 52fpkt", shape=invtriangle, color=brown];
4880[label="205.1.44.4;4pkt 4fpkt", shape=invhouse, color=bisque];
4885[label="205.1.195.5;18pkt 18fpkt", shape=invhouse, color=bisque];
5011[label="78.3.1.62;1pkt 1fpkt", shape=invhouse, color=bisque];
5012[label="205.1.44.62;4pkt 4fpkt", shape=invhouse, color=bisque];
stat848[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 149.206.51.186:*}[62.8844%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.6501%)&lt;BR/&gt; 1863: (4.81541%)&lt;BR/&gt; 443: (1.80578%)&lt;BR/&gt; 8000: (0.76244%)&lt;BR/&gt; 8080: (0.682183%)&gt;];
}
374--401[label="1;1pkt 1fpkt"];
374--454[label="0.0269542;10pkt 10fpkt"];
374--476[label="0.00232019;1pkt 1fpkt"];
374--578[label="0.0121951;4pkt 4fpkt"];
374--614[label="0.00268097;1pkt 1fpkt"];
374--632[label="0.4;14pkt 14fpkt"];
374--635[label="0.146667;22pkt 22fpkt"];
374--641[label="0.0361446;3pkt 3fpkt"];
374--674[label="0.0285714;2pkt 2fpkt"];
374--687[label="0.00326797;1pkt 1fpkt"];
374--753[label="0.0299728;11pkt 11fpkt"];
374--765[label="0.131579;5pkt 5fpkt"];
374--770[label="0.0070922;1pkt 1fpkt"];
374--791[label="0.122449;36pkt 36fpkt"];
374--930[label="0.00438596;1pkt 1fpkt"];
374--943[label="0.813953;35pkt 35fpkt"];
374--1009[label="0.010989;1pkt 1fpkt"];
374--1097[label="0.166667;1pkt 1fpkt"];
374--1141[label="0.0217391;3pkt 3fpkt"];
374--1143[label="0.020979;3pkt 3fpkt"];
374--1158[label="0.0378788;5pkt 5fpkt"];
374--1210[label="0.8;4pkt 4fpkt"];
374--1279[label="0.0641026;5pkt 5fpkt"];
374--1281[label="0.0410959;6pkt 6fpkt"];
374--1355[label="0.0614035;7pkt 7fpkt"];
374--1394[label="0.305556;11pkt 11fpkt"];
374--1549[label="0.0547945;4pkt 4fpkt"];
374--1564[label="0.028169;2pkt 2fpkt"];
374--1566[label="0.0483871;3pkt 3fpkt"];
374--1570[label="0.06;3pkt 3fpkt"];
374--1576[label="0.0273973;2pkt 2fpkt"];
374--1729[label="0.037234;7pkt 7fpkt"];
374--1772[label="0.00911854;3pkt 3fpkt"];
374--1800[label="0.0382166;6pkt 6fpkt"];
374--1813[label="0.466667;14pkt 14fpkt"];
374--1834[label="0.0285714;2pkt 2fpkt"];
374--1927[label="0.8;4pkt 4fpkt"];
374--1962[label="0.0508475;6pkt 6fpkt"];
374--1972[label="0.00454545;1pkt 1fpkt"];
374--2002[label="0.0679612;7pkt 7fpkt"];
374--2027[label="0.166667;1pkt 1fpkt"];
374--2103[label="0.0819672;55pkt 55fpkt"];
374--2169[label="0.25;1pkt 1fpkt"];
374--2207[label="0.125;1pkt 1fpkt"];
374--2291[label="0.027027;2pkt 2fpkt"];
374--2345[label="0.115385;3pkt 3fpkt"];
374--2370[label="0.1;1pkt 1fpkt"];
374--2399[label="0.00369004;1pkt 1fpkt"];
374--2419[label="1;20pkt 20fpkt"];
374--2445[label="0.0923077;36pkt 36fpkt"];
374--2461[label="1;12pkt 12fpkt"];
374--2508[label="0.00617284;1pkt 1fpkt"];
374--2612[label="0.0110803;4pkt 4fpkt"];
374--2617[label="0.16;4pkt 4fpkt"];
374--2625[label="1;1pkt 1fpkt"];
374--2626[label="0.5;2pkt 2fpkt"];
374--2658[label="0.0191083;3pkt 3fpkt"];
374--2767[label="0.2;1pkt 1fpkt"];
374--2781[label="0.010989;1pkt 1fpkt"];
374--2788[label="0.0357143;2pkt 2fpkt"];
374--2815[label="0.0545455;3pkt 3fpkt"];
374--2817[label="0.0204082;3pkt 3fpkt"];
374--2858[label="0.057377;7pkt 7fpkt"];
374--2884[label="0.333333;1pkt 1fpkt"];
374--2905[label="0.03125;3pkt 3fpkt"];
374--3030[label="0.166667;1pkt 1fpkt"];
374--3041[label="0.0227273;1pkt 1fpkt"];
374--3049[label="0.2;1pkt 1fpkt"];
374--3079[label="0.2;1pkt 1fpkt"];
374--3108[label="0.0232558;1pkt 1fpkt"];
374--3158[label="0.131579;5pkt 5fpkt"];
374--3163[label="0.63;63pkt 63fpkt"];
374--3179[label="0.297297;11pkt 11fpkt"];
374--3231[label="0.2;1pkt 1fpkt"];
374--3237[label="0.0253807;10pkt 10fpkt"];
374--3241[label="0.166667;1pkt 1fpkt"];
374--3304[label="0.142857;1pkt 1fpkt"];
374--3317[label="0.0315789;3pkt 3fpkt"];
374--3332[label="0.705882;12pkt 12fpkt"];
374--3339[label="0.0392157;2pkt 2fpkt"];
374--3393[label="0.108696;5pkt 5fpkt"];
374--3418[label="0.0434783;3pkt 3fpkt"];
374--3441[label="0.0352113;5pkt 5fpkt"];
374--3447[label="0.25;1pkt 1fpkt"];
374--3512[label="0.0512821;4pkt 4fpkt"];
374--3548[label="0.416667;5pkt 5fpkt"];
374--3613[label="0.0075188;5pkt 5fpkt"];
374--3652[label="0.047619;3pkt 3fpkt"];
374--3712[label="0.35;7pkt 7fpkt"];
374--3719[label="0.75;3pkt 3fpkt"];
374--3722[label="0.00298063;2pkt 2fpkt"];
374--3804[label="0.0192308;1pkt 1fpkt"];
374--3923[label="0.25;1pkt 1fpkt"];
374--4041[label="0.1;1pkt 1fpkt"];
374--4078[label="0.0920716;36pkt 36fpkt"];
374--4176[label="0.0111111;4pkt 4fpkt"];
374--4182[label="1;1pkt 1fpkt"];
374--4183[label="0.333333;1pkt 1fpkt"];
374--4201[label="0.0191083;3pkt 3fpkt"];
374--4260[label="0.2;1pkt 1fpkt"];
374--4266[label="0.010989;1pkt 1fpkt"];
374--4331[label="0.03125;3pkt 3fpkt"];
374--4387[label="0.166667;1pkt 1fpkt"];
374--4398[label="0.2;1pkt 1fpkt"];
374--4415[label="0.2;1pkt 1fpkt"];
374--4453[label="0.131579;5pkt 5fpkt"];
374--4459[label="0.297297;11pkt 11fpkt"];
374--4485[label="0.2;1pkt 1fpkt"];
374--4491[label="0.166667;1pkt 1fpkt"];
374--4545[label="0.705882;12pkt 12fpkt"];
374--4547[label="0.0392157;2pkt 2fpkt"];
374--4595[label="0.0434783;3pkt 3fpkt"];
374--4698[label="0.0075188;5pkt 5fpkt"];
374--4755[label="0.35;7pkt 7fpkt"];
374--4760[label="0.75;3pkt 3fpkt"];
374--4813[label="0.0192308;1pkt 1fpkt"];
374--4880[label="0.25;1pkt 1fpkt"];
374--4957[label="0.0923077;36pkt 36fpkt"];
374--5008[label="0.0110803;4pkt 4fpkt"];
374--5011[label="1;1pkt 1fpkt"];
374--5012[label="0.5;2pkt 2fpkt"];
374--5025[label="0.0191083;3pkt 3fpkt"];
374--5053[label="0.010989;1pkt 1fpkt"];
374--5078[label="0.03125;3pkt 3fpkt"];
374--5106[label="0.2;1pkt 1fpkt"];
374--5129[label="0.131579;5pkt 5fpkt"];
374--5143[label="0.2;1pkt 1fpkt"];
374--5146[label="0.166667;1pkt 1fpkt"];
478--479[label="0.217391;5pkt 5fpkt"];
478--626[label="0.157895;3pkt 3fpkt"];
478--1120[label="0.0540541;2pkt 2fpkt"];
478--1263[label="0.027027;1pkt 1fpkt"];
478--1281[label="0.027027;1pkt 1fpkt"];
478--1811[label="0.1875;3pkt 3fpkt"];
478--1962[label="0.027027;1pkt 1fpkt"];
478--2184[label="0.166667;3pkt 3fpkt"];
478--2584[label="0.2;1pkt 1fpkt"];
478--2755[label="0.2;1pkt 1fpkt"];
478--3804[label="0.027027;1pkt 1fpkt"];
478--3934[label="0.166667;3pkt 3fpkt"];
478--4253[label="0.2;1pkt 1fpkt"];
478--4813[label="0.027027;1pkt 1fpkt"];
478--4885[label="0.166667;3pkt 3fpkt"];
943--2103[label="0.232558;10pkt 10fpkt"];
2169--3923[label="1;4pkt 4fpkt"];
2169--4880[label="1;4pkt 4fpkt"];
2184--3934[label="1;18pkt 18fpkt"];
2184--4885[label="1;18pkt 18fpkt"];
2625--4182[label="1;1pkt 1fpkt"];
2625--5011[label="1;1pkt 1fpkt"];
2626--4183[label="1;3pkt 3fpkt"];
2626--5012[label="1;4pkt 4fpkt"];
3332--4545[label="1;17pkt 17fpkt"];
3804--4813[label="1;52pkt 52fpkt"];
3923--4880[label="1;4pkt 4fpkt"];
3934--4885[label="1;18pkt 18fpkt"];
4182--5011[label="1;1pkt 1fpkt"];
4183--5012[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.51.186" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.81.46.62"/>
    </slice>
    <from sec="1071206079" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.91.101.62"/>
    </slice>
    <from sec="1071205218" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_851{
style=filled;
color=gray75;
2634[label="57.71.253.62;205pkt 205fpkt", shape=pentagon, color=darkviolet];
4188[label="57.71.253.62;204pkt 204fpkt", shape=invtriangle, color=brown];
5017[label="57.71.253.62;205pkt 205fpkt", shape=invhouse, color=bisque];
stat851[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.71.253.62:0, *:0}[94.1463%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.1368%)&lt;BR/&gt; 135: (1.9544%)&lt;BR/&gt; 80: (0.977199%)&lt;BR/&gt; 62208: (0.2443%)&lt;BR/&gt; 56623: (0.2443%)&gt;];
}
2634--4188[label="1;204pkt 204fpkt"];
2634--5017[label="1;205pkt 205fpkt"];
4188--5017[label="1;204pkt 204fpkt"];
</description>
    <slice>
      <filter src_ip="57.71.253.62"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
2638[label="56.85.144.63;160pkt 160fpkt", shape=pentagon, color=darkviolet];
4189[label="56.85.144.63;159pkt 159fpkt", shape=invtriangle, color=brown];
5018[label="56.85.144.63;159pkt 159fpkt", shape=invhouse, color=bisque];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.85.144.63:*, *:135}[50%]&lt;BR/&gt;{56.85.144.63:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.1046%)&lt;BR/&gt; 135: (24.8954%)&lt;BR/&gt; 4380: (0.627615%)&lt;BR/&gt; 3803: (0.627615%)&lt;BR/&gt; 3728: (0.627615%)&gt;];
}
2638--4189[label="1;159pkt 159fpkt"];
2638--5018[label="1;159pkt 159fpkt"];
4189--5018[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="56.85.144.63"/>
      <filter dst_port="135" src_ip="56.85.144.63"/>
    </slice>
    <from sec="1071205215" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_853{
style=filled;
color=gray75;
2648[label="218.53.153.64;171pkt 171fpkt", shape=pentagon, color=darkviolet];
4196[label="218.53.153.64;170pkt 170fpkt", shape=invtriangle, color=brown];
5021[label="218.53.153.64;171pkt 171fpkt", shape=invhouse, color=bisque];
stat853[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.53.153.64:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2648--4196[label="1;170pkt 170fpkt"];
2648--5021[label="1;171pkt 171fpkt"];
4196--5021[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.53.153.64" src_port="1026"/>
    </slice>
    <from sec="1071205884" usec="0"/>
    <to sec="1071205911" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.188.237.64"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_855{
style=filled;
color=gray75;
1469[label="201.25.118.65;s;7pkt 7fpkt", shape=diamond, color=yellow];
2656[label="201.25.118.65;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4200[label="201.25.118.65;6pkt 6fpkt", shape=invtriangle, color=brown];
stat855[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.25.118.65:80, 201.118.236.173:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48813: (7.5%)&lt;BR/&gt; 48811: (7.5%)&lt;BR/&gt; 48810: (7.5%)&lt;BR/&gt; 48809: (7.5%)&gt;];
}
1469--2656[label="1;7pkt 7fpkt"];
1469--4200[label="1;6pkt 6fpkt"];
2656--4200[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="201.118.236.173" src_ip="201.25.118.65" src_port="80"/>
    </slice>
    <from sec="1071205893" usec="0"/>
    <to sec="1071206089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_856{
style=filled;
color=gray75;
732[label="216.115.152.147;s;74pkt 74fpkt", shape=diamond, color=yellow];
1309[label="216.16.162.242;s;79pkt 79fpkt", shape=diamond, color=yellow];
1448[label="149.206.232.108;d;103pkt 103fpkt", shape=diamond, color=yellow];
2353[label="59.11.36.28;76pkt 76fpkt", shape=pentagon, color=darkviolet];
2655[label="57.216.94.65;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3471[label="59.26.113.186;48pkt 48fpkt", shape=pentagon, color=darkviolet];
4030[label="59.11.36.28;76pkt 76fpkt", shape=invtriangle, color=brown];
4199[label="57.216.94.65;5pkt 5fpkt", shape=invtriangle, color=brown];
4622[label="59.26.113.186;48pkt 48fpkt", shape=invtriangle, color=brown];
4935[label="59.11.36.28;77pkt 77fpkt", shape=invhouse, color=bisque];
stat856[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 160.188.107.6:*}[25.4019%]&lt;BR/&gt;{216.16.162.242:80, *:*}[25.4019%]&lt;BR/&gt;{59.11.36.28:80, 149.206.232.108:*}[24.4373%]&lt;BR/&gt;{216.115.152.147:80, *:*}[23.7942%]&lt;BR/&gt;{*:80, 160.188.107.7:*}[22.8296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2399%)&lt;BR/&gt; 443: (0.506757%)&lt;BR/&gt; 3236: (0.422297%)&lt;BR/&gt; 3227: (0.422297%)&lt;BR/&gt; 3225: (0.422297%)&gt;];
}
732--1937[label="0.405405;30pkt 30fpkt"];
732--2103[label="0.0810811;6pkt 6fpkt"];
732--3197[label="1;74pkt 74fpkt"];
732--4468[label="1;74pkt 74fpkt"];
732--5135[label="1;74pkt 74fpkt"];
1309--1937[label="0.316456;25pkt 25fpkt"];
1309--2103[label="0.177215;14pkt 14fpkt"];
1309--3833[label="1;79pkt 79fpkt"];
1309--4831[label="1;79pkt 79fpkt"];
1448--2353[label="1;76pkt 76fpkt"];
1448--2497[label="0.111111;1pkt 1fpkt"];
1448--2662[label="0.157895;3pkt 3fpkt"];
1448--4030[label="1;76pkt 76fpkt"];
1448--4110[label="0.111111;1pkt 1fpkt"];
1448--4935[label="0.987013;76pkt 76fpkt"];
1448--4974[label="0.125;1pkt 1fpkt"];
2353--4030[label="1;76pkt 76fpkt"];
2353--4935[label="1;76pkt 76fpkt"];
2655--4199[label="1;5pkt 5fpkt"];
2655--5024[label="1;6pkt 6fpkt"];
3471--4622[label="1;48pkt 48fpkt"];
3471--5209[label="1;48pkt 48fpkt"];
4030--4935[label="1;76pkt 76fpkt"];
4199--5024[label="1;5pkt 5fpkt"];
4622--5209[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter src_ip="216.16.162.242" src_port="80"/>
      <filter src_ip="216.115.152.147" src_port="80"/>
      <filter dst_ip="160.188.107.6" src_port="80"/>
      <filter dst_ip="160.188.107.7" src_port="80"/>
      <filter dst_ip="149.206.232.108" src_ip="59.11.36.28" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_857{
style=filled;
color=gray75;
2661[label="200.180.5.67;80pkt 80fpkt", shape=pentagon, color=darkviolet];
4202[label="200.180.5.67;80pkt 80fpkt", shape=invtriangle, color=brown];
5026[label="200.180.5.67;80pkt 80fpkt", shape=invhouse, color=bisque];
stat857[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.180.5.67:0, *:0}[97.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.5%)&lt;BR/&gt; 80: (1.25%)&lt;BR/&gt; 4612: (0.625%)&lt;BR/&gt; 1211: (0.625%)&gt;];
}
2661--4202[label="1;80pkt 80fpkt"];
2661--5026[label="1;80pkt 80fpkt"];
4202--5026[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter src_ip="200.180.5.67"/>
    </slice>
    <from sec="1071205240" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_858{
style=filled;
color=gray75;
2670[label="59.76.202.67;106pkt 106fpkt", shape=pentagon, color=darkviolet];
4206[label="59.76.202.67;105pkt 105fpkt", shape=invtriangle, color=brown];
stat858[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.76.202.67:0, *:0}[95.283%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.2607%)&lt;BR/&gt; 80: (2.36967%)&lt;BR/&gt; 64783: (0.473934%)&lt;BR/&gt; 63015: (0.473934%)&lt;BR/&gt; 61469: (0.473934%)&gt;];
}
2670--4206[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter src_ip="59.76.202.67"/>
    </slice>
    <from sec="1071205432" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.115.208.67"/>
    </slice>
    <from sec="1071205672" usec="0"/>
    <to sec="1071205724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_860{
style=filled;
color=gray75;
2682[label="201.118.207.68;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4212[label="201.118.207.68;25pkt 25fpkt", shape=invtriangle, color=brown];
stat860[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.118.207.68:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 24742: (2%)&lt;BR/&gt; 4857: (2%)&lt;BR/&gt; 4809: (2%)&lt;BR/&gt; 4796: (2%)&gt;];
}
2682--4212[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="201.118.207.68" src_port="80"/>
    </slice>
    <from sec="1071205462" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_861{
style=filled;
color=gray75;
2694[label="205.142.238.70;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4219[label="205.142.238.70;11pkt 11fpkt", shape=invtriangle, color=brown];
stat861[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.142.238.70:80, 149.206.51.186:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1504: (4.54545%)&lt;BR/&gt; 1503: (4.54545%)&lt;BR/&gt; 1500: (4.54545%)&lt;BR/&gt; 1498: (4.54545%)&gt;];
}
2694--4219[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.51.186" src_ip="205.142.238.70" src_port="80"/>
    </slice>
    <from sec="1071206040" usec="0"/>
    <to sec="1071206068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_862{
style=filled;
color=gray75;
2703[label="218.148.200.71;173pkt 173fpkt", shape=pentagon, color=darkviolet];
4225[label="218.148.200.71;173pkt 173fpkt", shape=invtriangle, color=brown];
5035[label="218.148.200.71;173pkt 173fpkt", shape=invhouse, color=bisque];
stat862[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.148.200.71:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2703--4225[label="1;173pkt 173fpkt"];
2703--5035[label="1;173pkt 173fpkt"];
4225--5035[label="1;173pkt 173fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.148.200.71" src_port="1026"/>
    </slice>
    <from sec="1071205424" usec="0"/>
    <to sec="1071205452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_863{
style=filled;
color=gray75;
2708[label="219.93.144.72;147pkt 147fpkt", shape=pentagon, color=darkviolet];
4228[label="219.93.144.72;147pkt 147fpkt", shape=invtriangle, color=brown];
stat863[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.93.144.72:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2708--4228[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.93.144.72" src_port="1026"/>
    </slice>
    <from sec="1071205943" usec="0"/>
    <to sec="1071205967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_864{
style=filled;
color=gray75;
2710[label="197.180.45.73;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4230[label="197.180.45.73;29pkt 29fpkt", shape=invtriangle, color=brown];
stat864[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.180.45.73:80, 149.206.232.8:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2599: (1.72414%)&lt;BR/&gt; 2598: (1.72414%)&lt;BR/&gt; 2597: (1.72414%)&lt;BR/&gt; 2596: (1.72414%)&gt;];
}
2710--4230[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.232.8" src_ip="197.180.45.73" src_port="80"/>
    </slice>
    <from sec="1071205333" usec="0"/>
    <to sec="1071205400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.172.137.73"/>
    </slice>
    <from sec="1071205239" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_866{
style=filled;
color=gray75;
2724[label="208.8.231.74;241pkt 241fpkt", shape=pentagon, color=darkviolet];
4236[label="208.8.231.74;241pkt 241fpkt", shape=invtriangle, color=brown];
stat866[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.8.231.74:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2724--4236[label="1;241pkt 241fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.8.231.74" src_port="1030"/>
    </slice>
    <from sec="1071205955" usec="0"/>
    <to sec="1071205999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06292,1.66934,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_867{
style=filled;
color=gray75;
90[label="213.164.1.75s;187pkt 187fpkt", shape=rectangle, color=red];
2726[label="213.164.1.75;249pkt 249fpkt", shape=pentagon, color=darkviolet];
4237[label="213.164.1.75;249pkt 249fpkt", shape=invtriangle, color=brown];
5039[label="213.164.1.75;249pkt 249fpkt", shape=invhouse, color=bisque];
stat867[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.164.1.75:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
90--2726[label="1;187pkt 187fpkt"];
90--4237[label="1;187pkt 187fpkt"];
90--5039[label="1;187pkt 187fpkt"];
2726--4237[label="1;249pkt 249fpkt"];
2726--5039[label="1;249pkt 249fpkt"];
4237--5039[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.164.1.75" src_port="1031"/>
    </slice>
    <from sec="1071206003" usec="0"/>
    <to sec="1071206017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_868{
style=filled;
color=gray75;
2734[label="57.191.153.76;115pkt 115fpkt", shape=pentagon, color=darkviolet];
4242[label="57.191.153.76;115pkt 115fpkt", shape=invtriangle, color=brown];
stat868[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.191.153.76:0, *:0}[99.1304%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.1304%)&lt;BR/&gt; 1702: (0.434783%)&lt;BR/&gt; 135: (0.434783%)&gt;];
}
2734--4242[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter src_ip="57.191.153.76"/>
    </slice>
    <from sec="1071205252" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_869{
style=filled;
color=gray75;
2737[label="198.67.221.76;159pkt 159fpkt", shape=pentagon, color=darkviolet];
4244[label="198.67.221.76;159pkt 159fpkt", shape=invtriangle, color=brown];
5041[label="198.67.221.76;159pkt 159fpkt", shape=invhouse, color=bisque];
stat869[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.67.221.76:0, *:0}[98.7421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.7421%)&lt;BR/&gt; 80: (0.628931%)&lt;BR/&gt; 11821: (0.314465%)&lt;BR/&gt; 8747: (0.314465%)&gt;];
}
2737--4244[label="1;159pkt 159fpkt"];
2737--5041[label="1;159pkt 159fpkt"];
4244--5041[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter src_ip="198.67.221.76"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_870{
style=filled;
color=gray75;
2745[label="207.89.15.78;154pkt 154fpkt", shape=pentagon, color=darkviolet];
4246[label="207.89.15.78;154pkt 154fpkt", shape=invtriangle, color=brown];
stat870[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.89.15.78:0, *:0}[94.1558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.1558%)&lt;BR/&gt; 135: (1.94805%)&lt;BR/&gt; 80: (0.974026%)&lt;BR/&gt; 62109: (0.324675%)&lt;BR/&gt; 61126: (0.324675%)&gt;];
}
2745--4246[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter src_ip="207.89.15.78"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_871{
style=filled;
color=gray75;
548[label="201.118.249.78;s;1384pkt 1384fpkt", shape=diamond, color=yellow];
2750[label="201.118.249.78;1488pkt 1488fpkt", shape=pentagon, color=darkviolet];
4250[label="201.118.249.78;1488pkt 1488fpkt", shape=invtriangle, color=brown];
5044[label="201.118.249.78;1488pkt 1488fpkt", shape=invhouse, color=bisque];
stat871[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.118.249.78:0, *:0}[99.9328%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.9316%)&lt;BR/&gt; 4289: (0.0341997%)&lt;BR/&gt; 135: (0.0341997%)&gt;];
}
548--1182[label="0.0327869;2pkt 2fpkt"];
548--2750[label="1;1384pkt 1384fpkt"];
548--4250[label="1;1384pkt 1384fpkt"];
548--5044[label="1;1384pkt 1384fpkt"];
2750--4250[label="1;1488pkt 1488fpkt"];
2750--5044[label="1;1488pkt 1488fpkt"];
4250--5044[label="1;1488pkt 1488fpkt"];
</description>
    <slice>
      <filter src_ip="201.118.249.78"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_872{
style=filled;
color=gray75;
2758[label="56.1.146.80;106pkt 106fpkt", shape=pentagon, color=darkviolet];
4255[label="56.1.146.80;106pkt 106fpkt", shape=invtriangle, color=brown];
5046[label="56.1.146.80;106pkt 106fpkt", shape=invhouse, color=bisque];
stat872[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.1.146.80:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3742: (0.943396%)&lt;BR/&gt; 1256: (0.943396%)&lt;BR/&gt; 4974: (0.471698%)&lt;BR/&gt; 4929: (0.471698%)&gt;];
}
2758--4255[label="1;106pkt 106fpkt"];
2758--5046[label="1;106pkt 106fpkt"];
4255--5046[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="56.1.146.80"/>
    </slice>
    <from sec="1071205227" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.172.17.82"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071205465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_874{
style=filled;
color=gray75;
2786[label="218.80.242.83;215pkt 215fpkt", shape=pentagon, color=darkviolet];
4270[label="218.80.242.83;215pkt 215fpkt", shape=invtriangle, color=brown];
5055[label="218.80.242.83;215pkt 215fpkt", shape=invhouse, color=bisque];
stat874[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.80.242.83:8733, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8733: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2786--4270[label="1;215pkt 215fpkt"];
2786--5055[label="1;215pkt 215fpkt"];
4270--5055[label="1;215pkt 215fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.80.242.83" src_port="8733"/>
    </slice>
    <from sec="1071206001" usec="0"/>
    <to sec="1071206048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_875{
style=filled;
color=gray75;
2799[label="78.2.112.85;251pkt 251fpkt", shape=pentagon, color=darkviolet];
4276[label="78.2.112.85;251pkt 251fpkt", shape=invtriangle, color=brown];
stat875[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.2.112.85:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2799--4276[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="78.2.112.85" src_port="1027"/>
    </slice>
    <from sec="1071205833" usec="0"/>
    <to sec="1071205849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_876{
style=filled;
color=gray75;
2801[label="219.187.137.85;249pkt 249fpkt", shape=pentagon, color=darkviolet];
4277[label="219.187.137.85;249pkt 249fpkt", shape=invtriangle, color=brown];
5058[label="219.187.137.85;249pkt 249fpkt", shape=invhouse, color=bisque];
stat876[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.187.137.85:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2801--4277[label="1;249pkt 249fpkt"];
2801--5058[label="1;249pkt 249fpkt"];
4277--5058[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.187.137.85" src_port="1026"/>
    </slice>
    <from sec="1071205914" usec="0"/>
    <to sec="1071205929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.149.162.85"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_878{
style=filled;
color=gray75;
2804[label="58.214.194.85;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4279[label="58.214.194.85;31pkt 31fpkt", shape=invtriangle, color=brown];
stat878[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.214.194.85:80, 166.55.50.113:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49543: (1.6129%)&lt;BR/&gt; 49542: (1.6129%)&lt;BR/&gt; 49541: (1.6129%)&lt;BR/&gt; 49540: (1.6129%)&gt;];
}
2804--4279[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.50.113" src_ip="58.214.194.85" src_port="80"/>
    </slice>
    <from sec="1071205710" usec="0"/>
    <to sec="1071205751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_879{
style=filled;
color=gray75;
2826[label="207.161.245.89;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4289[label="207.161.245.89;33pkt 33fpkt", shape=invtriangle, color=brown];
stat879[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.161.245.89:80, 149.207.51.173:*}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64064: (1.51515%)&lt;BR/&gt; 63924: (1.51515%)&lt;BR/&gt; 63876: (1.51515%)&lt;BR/&gt; 63850: (1.51515%)&gt;];
}
2826--4289[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.51.173" src_ip="207.161.245.89" src_port="80"/>
    </slice>
    <from sec="1071205243" usec="0"/>
    <to sec="1071205958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_880{
style=filled;
color=gray75;
2829[label="210.49.27.90;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4291[label="210.49.27.90;2pkt 2fpkt", shape=invtriangle, color=brown];
5064[label="210.49.27.90;2pkt 2fpkt", shape=invhouse, color=bisque];
stat880[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.49.27.90:80, 149.206.203.114:2227}[50%]&lt;BR/&gt;{210.49.27.90:80, 149.206.203.114:2228}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2228: (25%)&lt;BR/&gt; 2227: (25%)&gt;];
}
2829--4291[label="1;2pkt 2fpkt"];
2829--5064[label="1;2pkt 2fpkt"];
4291--5064[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.203.114" dst_port="2228" src_ip="210.49.27.90" src_port="80"/>
      <filter dst_ip="149.206.203.114" dst_port="2227" src_ip="210.49.27.90" src_port="80"/>
    </slice>
    <from sec="1071205433" usec="0"/>
    <to sec="1071205452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.55.161.90"/>
    </slice>
    <from sec="1071205426" usec="0"/>
    <to sec="1071205670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="150.160.191.91"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_883{
style=filled;
color=gray75;
2845[label="200.180.5.92;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4300[label="200.180.5.92;7pkt 7fpkt", shape=invtriangle, color=brown];
stat883[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.180.5.92:0, *:0}[85.7143%]&lt;BR/&gt;{200.180.5.92:*, 208.16.148.139:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (85.7143%)&lt;BR/&gt; 56814: (7.14286%)&lt;BR/&gt; 80: (7.14286%)&gt;];
}
2845--4300[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="208.16.148.139" src_ip="200.180.5.92"/>
      <filter src_ip="200.180.5.92"/>
    </slice>
    <from sec="1071205215" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.146.148.93"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_885{
style=filled;
color=gray75;
2862[label="131.233.20.94;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4309[label="131.233.20.94;16pkt 16fpkt", shape=invtriangle, color=brown];
stat885[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.20.94:*, 58.72.160.246:80}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37471: (3.125%)&lt;BR/&gt; 37470: (3.125%)&lt;BR/&gt; 37468: (3.125%)&lt;BR/&gt; 37467: (3.125%)&gt;];
}
2862--4309[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="58.72.160.246" dst_port="80" src_ip="131.233.20.94"/>
    </slice>
    <from sec="1071205578" usec="0"/>
    <to sec="1071205643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_886{
style=filled;
color=gray75;
2864[label="205.1.45.94;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4310[label="205.1.45.94;4pkt 4fpkt", shape=invtriangle, color=brown];
stat886[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.45.94:1863, 149.206.219.10:1062}[25%]&lt;BR/&gt;{205.1.45.94:1863, 145.166.1.47:1850}[25%]&lt;BR/&gt;{205.1.45.94:1863, 201.120.160.195:1599}[25%]&lt;BR/&gt;{205.1.45.94:1863, 149.206.124.225:61688}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 61688: (12.5%)&lt;BR/&gt; 1850: (12.5%)&lt;BR/&gt; 1599: (12.5%)&lt;BR/&gt; 1062: (12.5%)&gt;];
}
2864--4310[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.124.225" dst_port="61688" src_ip="205.1.45.94" src_port="1863"/>
      <filter dst_ip="201.120.160.195" dst_port="1599" src_ip="205.1.45.94" src_port="1863"/>
      <filter dst_ip="145.166.1.47" dst_port="1850" src_ip="205.1.45.94" src_port="1863"/>
      <filter dst_ip="149.206.219.10" dst_port="1062" src_ip="205.1.45.94" src_port="1863"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_887{
style=filled;
color=gray75;
2875[label="77.77.29.96;190pkt 190fpkt", shape=pentagon, color=darkviolet];
4317[label="77.77.29.96;190pkt 190fpkt", shape=invtriangle, color=brown];
stat887[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.77.29.96:0, *:0}[96.8421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.8421%)&lt;BR/&gt; 80: (1.05263%)&lt;BR/&gt; 135: (0.526316%)&lt;BR/&gt; 33105: (0.263158%)&lt;BR/&gt; 29513: (0.263158%)&gt;];
}
2875--4317[label="1;190pkt 190fpkt"];
</description>
    <slice>
      <filter src_ip="77.77.29.96"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.118.174.97"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071205758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_890{
style=filled;
color=gray75;
2895[label="219.172.22.99;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4328[label="219.172.22.99;3pkt 3fpkt", shape=invtriangle, color=brown];
stat890[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.172.22.99:2137, 145.71.33.159:3090}[33.3333%]&lt;BR/&gt;{219.172.22.99:2137, 145.71.33.159:3316}[33.3333%]&lt;BR/&gt;{219.172.22.99:2137, 145.71.33.159:3336}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2137: (50%)&lt;BR/&gt; 3336: (16.6667%)&lt;BR/&gt; 3316: (16.6667%)&lt;BR/&gt; 3090: (16.6667%)&gt;];
}
2895--4328[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.71.33.159" dst_port="3336" src_ip="219.172.22.99" src_port="2137"/>
      <filter dst_ip="145.71.33.159" dst_port="3316" src_ip="219.172.22.99" src_port="2137"/>
      <filter dst_ip="145.71.33.159" dst_port="3090" src_ip="219.172.22.99" src_port="2137"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_891{
style=filled;
color=gray75;
2896[label="56.17.41.99;121pkt 121fpkt", shape=pentagon, color=darkviolet];
4329[label="56.17.41.99;121pkt 121fpkt", shape=invtriangle, color=brown];
stat891[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.17.41.99:0, *:0}[93.3884%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (93.3884%)&lt;BR/&gt; 80: (2.06612%)&lt;BR/&gt; 135: (1.23967%)&lt;BR/&gt; 64526: (0.413223%)&lt;BR/&gt; 64373: (0.413223%)&gt;];
}
2896--4329[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter src_ip="56.17.41.99"/>
    </slice>
    <from sec="1071205236" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06292,1.66934,503,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_892{
style=filled;
color=gray75;
172[label="58.67.149.100s;1pkt 1fpkt", shape=rectangle, color=red];
2905[label="58.67.149.100;96pkt 96fpkt", shape=pentagon, color=darkviolet];
4331[label="58.67.149.100;96pkt 96fpkt", shape=invtriangle, color=brown];
5078[label="58.67.149.100;96pkt 96fpkt", shape=invhouse, color=bisque];
stat892[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.67.149.100:80, 145.166.34.62:*}[35.4167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1090: (0.692042%)&lt;BR/&gt; 58440: (0.519031%)&lt;BR/&gt; 58438: (0.519031%)&lt;BR/&gt; 58422: (0.519031%)&gt;];
}
172--2905[label="1;1pkt 1fpkt"];
172--4331[label="1;1pkt 1fpkt"];
172--5078[label="1;1pkt 1fpkt"];
2905--4331[label="1;96pkt 96fpkt"];
2905--5078[label="1;96pkt 96fpkt"];
4331--5078[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.34.62" src_ip="58.67.149.100" src_port="80"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_893{
style=filled;
color=gray75;
2906[label="218.53.236.100;167pkt 167fpkt", shape=pentagon, color=darkviolet];
4332[label="218.53.236.100;167pkt 167fpkt", shape=invtriangle, color=brown];
5079[label="218.53.236.100;167pkt 167fpkt", shape=invhouse, color=bisque];
stat893[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.53.236.100:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 50588: (0.598802%)&lt;BR/&gt; 50508: (0.598802%)&lt;BR/&gt; 50500: (0.598802%)&lt;BR/&gt; 50452: (0.598802%)&gt;];
}
2906--4332[label="1;167pkt 167fpkt"];
2906--5079[label="1;167pkt 167fpkt"];
4332--5079[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.53.236.100"/>
    </slice>
    <from sec="1071205302" usec="0"/>
    <to sec="1071205329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_894{
style=filled;
color=gray75;
2912[label="207.169.232.101;141pkt 141fpkt", shape=pentagon, color=darkviolet];
4334[label="207.169.232.101;141pkt 141fpkt", shape=invtriangle, color=brown];
5080[label="207.169.232.101;141pkt 141fpkt", shape=invhouse, color=bisque];
stat894[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.169.232.101:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2912--4334[label="1;141pkt 141fpkt"];
2912--5080[label="1;141pkt 141fpkt"];
4334--5080[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter src_ip="207.169.232.101"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071205917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_895{
style=filled;
color=gray75;
2920[label="219.138.170.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4338[label="219.138.170.102;1pkt 1fpkt", shape=invtriangle, color=brown];
stat895[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.138.170.102:65123, 200.180.6.84:8106}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65123: (50%)&lt;BR/&gt; 8106: (50%)&gt;];
}
2920--4338[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.180.6.84" dst_port="8106" src_ip="219.138.170.102" src_port="65123"/>
    </slice>
    <from sec="1071205994" usec="0"/>
    <to sec="1071206026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_896{
style=filled;
color=gray75;
2922[label="57.200.98.103;252pkt 252fpkt", shape=pentagon, color=darkviolet];
4339[label="57.200.98.103;252pkt 252fpkt", shape=invtriangle, color=brown];
stat896[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.200.98.103:2732, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2732: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
2922--4339[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="57.200.98.103" src_port="2732"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_897{
style=filled;
color=gray75;
2927[label="59.99.175.103;126pkt 126fpkt", shape=pentagon, color=darkviolet];
4340[label="59.99.175.103;126pkt 126fpkt", shape=invtriangle, color=brown];
stat897[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.99.175.103:0, *:0}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.2381%)&lt;BR/&gt; 80: (2.38095%)&lt;BR/&gt; 62681: (0.396825%)&lt;BR/&gt; 62466: (0.396825%)&lt;BR/&gt; 60847: (0.396825%)&gt;];
}
2927--4340[label="1;126pkt 126fpkt"];
</description>
    <slice>
      <filter src_ip="59.99.175.103"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_898{
style=filled;
color=gray75;
2936[label="78.118.26.105;169pkt 169fpkt", shape=pentagon, color=darkviolet];
4341[label="78.118.26.105;169pkt 169fpkt", shape=invtriangle, color=brown];
stat898[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.118.26.105:63953, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63953: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2936--4341[label="1;169pkt 169fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="78.118.26.105" src_port="63953"/>
    </slice>
    <from sec="1071205754" usec="0"/>
    <to sec="1071205783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_899{
style=filled;
color=gray75;
2946[label="211.66.58.106;127pkt 127fpkt", shape=pentagon, color=darkviolet];
4345[label="211.66.58.106;127pkt 127fpkt", shape=invtriangle, color=brown];
stat899[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.66.58.106:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2946--4345[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter src_ip="211.66.58.106"/>
    </slice>
    <from sec="1071205267" usec="0"/>
    <to sec="1071206049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_900{
style=filled;
color=gray75;
2947[label="77.55.161.106;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4346[label="77.55.161.106;2pkt 2fpkt", shape=invtriangle, color=brown];
stat900[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.55.161.106:80, 149.207.88.220:1105}[50%]&lt;BR/&gt;{77.55.161.106:80, 149.207.88.223:14995}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 14995: (25%)&lt;BR/&gt; 1105: (25%)&gt;];
}
2947--4346[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.88.223" dst_port="14995" src_ip="77.55.161.106" src_port="80"/>
      <filter dst_ip="149.207.88.220" dst_port="1105" src_ip="77.55.161.106" src_port="80"/>
    </slice>
    <from sec="1071206045" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_901{
style=filled;
color=gray75;
312[label="10.171.16.107;s;20042pkt 20042fpkt", shape=diamond, color=yellow];
2949[label="10.171.16.107;24573pkt 24573fpkt", shape=pentagon, color=darkviolet];
4347[label="10.171.16.107;24573pkt 24573fpkt", shape=invtriangle, color=brown];
5083[label="10.171.16.107;24573pkt 24573fpkt", shape=invhouse, color=bisque];
stat901[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.171.16.107:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
312--2949[label="1;20042pkt 20042fpkt"];
312--4347[label="1;20042pkt 20042fpkt"];
312--5083[label="1;20042pkt 20042fpkt"];
2949--4347[label="1;24573pkt 24573fpkt"];
2949--5083[label="1;24573pkt 24573fpkt"];
4347--5083[label="1;24573pkt 24573fpkt"];
</description>
    <slice>
      <filter src_ip="10.171.16.107"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_902{
style=filled;
color=gray75;
794[label="199.250.186.109;s;27pkt 27fpkt", shape=diamond, color=yellow];
stat902[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.250.186.109:80, 201.118.239.33:*}[62.963%]&lt;BR/&gt;{199.250.186.109:80, 149.206.250.11:*}[29.6296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4872: (1.85185%)&lt;BR/&gt; 4571: (1.85185%)&lt;BR/&gt; 4422: (1.85185%)&lt;BR/&gt; 3423: (1.85185%)&gt;];
}
794--1914[label="1;25pkt 25fpkt"];
794--1937[label="0.037037;1pkt 1fpkt"];
794--2102[label="0.185185;5pkt 5fpkt"];
794--2103[label="0.222222;6pkt 6fpkt"];
794--2122[label="0.185185;5pkt 5fpkt"];
794--2958[label="1;26pkt 26fpkt"];
794--4353[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="201.118.239.33" src_ip="199.250.186.109" src_port="80"/>
      <filter dst_ip="149.206.250.11" src_ip="199.250.186.109" src_port="80"/>
    </slice>
    <from sec="1071205228" usec="0"/>
    <to sec="1071206002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_903{
style=filled;
color=gray75;
2959[label="218.52.211.109;223pkt 223fpkt", shape=pentagon, color=darkviolet];
4354[label="218.52.211.109;223pkt 223fpkt", shape=invtriangle, color=brown];
5087[label="218.52.211.109;223pkt 223fpkt", shape=invhouse, color=bisque];
stat903[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.52.211.109:23786, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23786: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2959--4354[label="1;223pkt 223fpkt"];
2959--5087[label="1;223pkt 223fpkt"];
4354--5087[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.52.211.109" src_port="23786"/>
    </slice>
    <from sec="1071205682" usec="0"/>
    <to sec="1071205753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_904{
style=filled;
color=gray75;
2960[label="217.235.213.109;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4355[label="217.235.213.109;20pkt 20fpkt", shape=invtriangle, color=brown];
stat904[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.235.213.109:80, 201.118.239.33:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4976: (2.5%)&lt;BR/&gt; 4913: (2.5%)&lt;BR/&gt; 4908: (2.5%)&lt;BR/&gt; 4870: (2.5%)&gt;];
}
2960--4355[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="201.118.239.33" src_ip="217.235.213.109" src_port="80"/>
    </slice>
    <from sec="1071205211" usec="0"/>
    <to sec="1071205329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_905{
style=filled;
color=gray75;
2977[label="78.47.27.112;178pkt 178fpkt", shape=pentagon, color=darkviolet];
4365[label="78.47.27.112;178pkt 178fpkt", shape=invtriangle, color=brown];
stat905[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.47.27.112:64557, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64557: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
2977--4365[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="78.47.27.112" src_port="64557"/>
    </slice>
    <from sec="1071205601" usec="0"/>
    <to sec="1071205630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_906{
style=filled;
color=gray75;
2997[label="58.158.195.114;431pkt 431fpkt", shape=pentagon, color=darkviolet];
4371[label="58.158.195.114;431pkt 431fpkt", shape=invtriangle, color=brown];
stat906[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.158.195.114:1027, *:137}[52.2042%]&lt;BR/&gt;{58.158.195.114:1025, *:137}[47.7958%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 1027: (26.1021%)&lt;BR/&gt; 1025: (23.8979%)&gt;];
}
2997--4371[label="1;431pkt 431fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="58.158.195.114" src_port="1027"/>
      <filter dst_port="137" src_ip="58.158.195.114" src_port="1025"/>
    </slice>
    <from sec="1071206054" usec="0"/>
    <to sec="1071206092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_907{
style=filled;
color=gray75;
2998[label="211.100.12.115;171pkt 171fpkt", shape=pentagon, color=darkviolet];
4372[label="211.100.12.115;171pkt 171fpkt", shape=invtriangle, color=brown];
5093[label="211.100.12.115;171pkt 171fpkt", shape=invhouse, color=bisque];
stat907[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.100.12.115:0, *:0}[91.8129%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.8129%)&lt;BR/&gt; 80: (3.50877%)&lt;BR/&gt; 135: (0.584795%)&lt;BR/&gt; 64816: (0.292398%)&lt;BR/&gt; 63228: (0.292398%)&gt;];
}
2998--4372[label="1;171pkt 171fpkt"];
2998--5093[label="1;171pkt 171fpkt"];
4372--5093[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter src_ip="211.100.12.115"/>
    </slice>
    <from sec="1071205238" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_908{
style=filled;
color=gray75;
3004[label="61.149.89.116;247pkt 247fpkt", shape=pentagon, color=darkviolet];
4376[label="61.149.89.116;247pkt 247fpkt", shape=invtriangle, color=brown];
5094[label="61.149.89.116;247pkt 247fpkt", shape=invhouse, color=bisque];
stat908[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.149.89.116:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3004--4376[label="1;247pkt 247fpkt"];
3004--5094[label="1;247pkt 247fpkt"];
4376--5094[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="61.149.89.116" src_port="1031"/>
    </slice>
    <from sec="1071205915" usec="0"/>
    <to sec="1071205953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_909{
style=filled;
color=gray75;
3009[label="212.183.148.116;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4378[label="212.183.148.116;4pkt 4fpkt", shape=invtriangle, color=brown];
stat909[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.183.148.116:80, 201.118.239.88:25331}[25%]&lt;BR/&gt;{212.183.148.116:80, 201.118.239.88:25332}[25%]&lt;BR/&gt;{212.183.148.116:80, 201.118.239.88:25337}[25%]&lt;BR/&gt;{212.183.148.116:80, 201.118.239.88:25695}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 25695: (12.5%)&lt;BR/&gt; 25337: (12.5%)&lt;BR/&gt; 25332: (12.5%)&lt;BR/&gt; 25331: (12.5%)&gt;];
}
3009--4378[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="201.118.239.88" dst_port="25695" src_ip="212.183.148.116" src_port="80"/>
      <filter dst_ip="201.118.239.88" dst_port="25337" src_ip="212.183.148.116" src_port="80"/>
      <filter dst_ip="201.118.239.88" dst_port="25332" src_ip="212.183.148.116" src_port="80"/>
      <filter dst_ip="201.118.239.88" dst_port="25331" src_ip="212.183.148.116" src_port="80"/>
    </slice>
    <from sec="1071205835" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_910{
style=filled;
color=gray75;
3022[label="201.118.207.118;87pkt 87fpkt", shape=pentagon, color=darkviolet];
4384[label="201.118.207.118;87pkt 87fpkt", shape=invtriangle, color=brown];
5099[label="201.118.207.118;87pkt 87fpkt", shape=invhouse, color=bisque];
stat910[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.118.207.118:25, *:*}[33.3333%]&lt;BR/&gt;{201.118.207.118:*, *:113}[28.7356%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (26.4368%)&lt;BR/&gt; 113: (14.3678%)&lt;BR/&gt; 0: (11.4943%)&lt;BR/&gt; 80: (3.44828%)&lt;BR/&gt; 58342: (0.574713%)&gt;];
}
3022--4384[label="1;87pkt 87fpkt"];
3022--5099[label="1;87pkt 87fpkt"];
4384--5099[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter src_ip="201.118.207.118" src_port="25"/>
      <filter dst_port="113" src_ip="201.118.207.118"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_911{
style=filled;
color=gray75;
533[label="145.166.58.96;d;255pkt 255fpkt", shape=diamond, color=yellow];
stat911[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.16.168.209:80, 145.166.58.96:*}[30.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.451%)&lt;BR/&gt; 443: (2.15686%)&lt;BR/&gt; 59097: (0.196078%)&lt;BR/&gt; 59093: (0.196078%)&lt;BR/&gt; 59084: (0.196078%)&gt;];
}
533--614[label="0.00392157;1pkt 1fpkt"];
533--617[label="0.00606061;1pkt 1fpkt"];
533--641[label="0.0240964;2pkt 2fpkt"];
533--650[label="0.0135135;1pkt 1fpkt"];
533--674[label="0.171429;12pkt 12fpkt"];
533--675[label="0.00694444;1pkt 1fpkt"];
533--680[label="0.0138889;1pkt 1fpkt"];
533--687[label="0.00392157;1pkt 1fpkt"];
533--689[label="0.005;1pkt 1fpkt"];
533--717[label="0.00518135;1pkt 1fpkt"];
533--753[label="0.0117647;3pkt 3fpkt"];
533--766[label="0.0117647;3pkt 3fpkt"];
533--774[label="0.0294118;1pkt 1fpkt"];
533--787[label="0.00784314;2pkt 2fpkt"];
533--809[label="0.025;3pkt 3fpkt"];
533--907[label="0.0147059;1pkt 1fpkt"];
533--930[label="0.0307018;7pkt 7fpkt"];
533--1009[label="0.021978;2pkt 2fpkt"];
533--1039[label="0.00578035;1pkt 1fpkt"];
533--1047[label="0.0470588;12pkt 12fpkt"];
533--1153[label="0.02;1pkt 1fpkt"];
533--1158[label="0.00757576;1pkt 1fpkt"];
533--1227[label="0.00961538;1pkt 1fpkt"];
533--1251[label="0.0117647;1pkt 1fpkt"];
533--1279[label="0.0384615;3pkt 3fpkt"];
533--1281[label="0.0342466;5pkt 5fpkt"];
533--1549[label="0.0273973;2pkt 2fpkt"];
533--1564[label="0.028169;2pkt 2fpkt"];
533--1566[label="0.016129;1pkt 1fpkt"];
533--1571[label="0.0268817;5pkt 5fpkt"];
533--1576[label="0.0136986;1pkt 1fpkt"];
533--1671[label="1;114pkt 114fpkt"];
533--1691[label="0.0217391;1pkt 1fpkt"];
533--1721[label="0.0075188;1pkt 1fpkt"];
533--1729[label="0.00531915;1pkt 1fpkt"];
533--1735[label="0.0126582;1pkt 1fpkt"];
533--1741[label="0.0120482;1pkt 1fpkt"];
533--1750[label="0.0357143;2pkt 2fpkt"];
533--1754[label="0.0810811;3pkt 3fpkt"];
533--1772[label="0.121569;31pkt 31fpkt"];
533--1800[label="0.0127389;2pkt 2fpkt"];
533--1834[label="0.171429;12pkt 12fpkt"];
533--1962[label="0.00847458;1pkt 1fpkt"];
533--1970[label="0.0172414;1pkt 1fpkt"];
533--1972[label="0.0318182;7pkt 7fpkt"];
533--1991[label="0.00961538;1pkt 1fpkt"];
533--2103[label="0.0784314;20pkt 20fpkt"];
533--2155[label="0.00784314;2pkt 2fpkt"];
533--2164[label="0.0135135;1pkt 1fpkt"];
533--2230[label="0.0232558;5pkt 5fpkt"];
533--2268[label="0.0322581;2pkt 2fpkt"];
533--2291[label="0.027027;2pkt 2fpkt"];
533--2390[label="0.00526316;1pkt 1fpkt"];
533--2399[label="0.027451;7pkt 7fpkt"];
533--2604[label="0.0588235;4pkt 4fpkt"];
533--2641[label="0.0273973;2pkt 2fpkt"];
533--2811[label="0.0117647;3pkt 3fpkt"];
533--2905[label="0.0729167;7pkt 7fpkt"];
533--3040[label="0.0208333;1pkt 1fpkt"];
533--3041[label="0.0227273;1pkt 1fpkt"];
533--3108[label="0.0232558;1pkt 1fpkt"];
533--3137[label="0.00490196;1pkt 1fpkt"];
533--3225[label="0.0493827;8pkt 8fpkt"];
533--3226[label="0.0106383;1pkt 1fpkt"];
533--3237[label="0.00784314;2pkt 2fpkt"];
533--3317[label="0.0210526;2pkt 2fpkt"];
533--3339[label="0.0196078;1pkt 1fpkt"];
533--3399[label="0.166667;2pkt 2fpkt"];
533--3418[label="0.0144928;1pkt 1fpkt"];
533--3441[label="0.00704225;1pkt 1fpkt"];
533--3512[label="0.025641;2pkt 2fpkt"];
533--3613[label="0.305882;78pkt 78fpkt"];
533--3632[label="0.0535714;3pkt 3fpkt"];
533--3652[label="0.015873;1pkt 1fpkt"];
533--3664[label="0.025;2pkt 2fpkt"];
533--3722[label="0.0941176;24pkt 24fpkt"];
533--3835[label="0.00473934;1pkt 1fpkt"];
533--3887[label="0.00598802;1pkt 1fpkt"];
533--3913[label="0.00784314;2pkt 2fpkt"];
533--3918[label="0.0135135;1pkt 1fpkt"];
533--3959[label="0.0232558;5pkt 5fpkt"];
533--4192[label="0.0277778;2pkt 2fpkt"];
533--4331[label="0.0729167;7pkt 7fpkt"];
533--4392[label="0.0208333;1pkt 1fpkt"];
533--4441[label="0.00490196;1pkt 1fpkt"];
533--4480[label="0.0106383;1pkt 1fpkt"];
533--4547[label="0.0196078;1pkt 1fpkt"];
533--4595[label="0.0144928;1pkt 1fpkt"];
533--4698[label="0.305882;78pkt 78fpkt"];
533--4710[label="0.0535714;3pkt 3fpkt"];
533--4832[label="0.00473934;1pkt 1fpkt"];
533--4860[label="0.00598802;1pkt 1fpkt"];
533--4871[label="0.00784314;2pkt 2fpkt"];
533--4876[label="0.0135135;1pkt 1fpkt"];
533--5078[label="0.0729167;7pkt 7fpkt"];
533--5122[label="0.00490196;1pkt 1fpkt"];
533--5258[label="0.0535714;3pkt 3fpkt"];
533--5318[label="0.00473934;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.58.96" src_ip="216.16.168.209" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_912{
style=filled;
color=gray75;
525[label="160.188.72.72;d;147pkt 147fpkt", shape=diamond, color=yellow];
981[label="201.25.66.194;s;40pkt 40fpkt", shape=diamond, color=yellow];
2510[label="57.216.86.46;33pkt 33fpkt", shape=pentagon, color=darkviolet];
2770[label="197.126.200.81;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3051[label="212.77.78.123;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3781[label="217.91.99.233;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4400[label="212.77.78.123;8pkt 8fpkt", shape=invtriangle, color=brown];
stat912[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.26.204.129:*, 160.188.72.72:80}[24.6231%]&lt;BR/&gt;{201.25.66.194:*, 160.188.72.72:80}[20.1005%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8287%)&lt;BR/&gt; 25: (6.77291%)&lt;BR/&gt; 36989: (0.59761%)&lt;BR/&gt; 59973: (0.398406%)&lt;BR/&gt; 48119: (0.398406%)&gt;];
}
525--981[label="0.75;30pkt 30fpkt"];
525--1971[label="0.00680272;1pkt 1fpkt"];
525--2105[label="0.231293;34pkt 34fpkt"];
525--2107[label="0.0204082;3pkt 3fpkt"];
525--2510[label="0.030303;1pkt 1fpkt"];
525--2585[label="0.00680272;1pkt 1fpkt"];
525--2770[label="0.25;1pkt 1fpkt"];
525--3051[label="0.125;1pkt 1fpkt"];
525--3781[label="1;11pkt 11fpkt"];
525--4162[label="0.00680272;1pkt 1fpkt"];
525--4400[label="0.125;1pkt 1fpkt"];
981--2105[label="0.2;8pkt 8fpkt"];
981--2107[label="0.075;3pkt 3fpkt"];
981--2110[label="0.025;1pkt 1fpkt"];
3051--4400[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.72.72" dst_port="80" src_ip="201.26.204.129"/>
      <filter dst_ip="160.188.72.72" dst_port="80" src_ip="201.25.66.194"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_913{
style=filled;
color=gray75;
3053[label="211.101.222.123;112pkt 112fpkt", shape=pentagon, color=darkviolet];
4402[label="211.101.222.123;112pkt 112fpkt", shape=invtriangle, color=brown];
stat913[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.101.222.123:0, *:0}[96.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.4286%)&lt;BR/&gt; 80: (1.78571%)&lt;BR/&gt; 65153: (0.446429%)&lt;BR/&gt; 64401: (0.446429%)&lt;BR/&gt; 64181: (0.446429%)&gt;];
}
3053--4402[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter src_ip="211.101.222.123"/>
    </slice>
    <from sec="1071205211" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.98.70.124"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071205788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_915{
style=filled;
color=gray75;
3056[label="58.196.124.124;174pkt 174fpkt", shape=pentagon, color=darkviolet];
4404[label="58.196.124.124;174pkt 174fpkt", shape=invtriangle, color=brown];
stat915[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.196.124.124:0, *:1182}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1182: (50%)&lt;BR/&gt; 0: (50%)&gt;];
}
3056--4404[label="1;174pkt 174fpkt"];
</description>
    <slice>
      <filter dst_port="1182" src_ip="58.196.124.124"/>
    </slice>
    <from sec="1071205221" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.25.116.126"/>
    </slice>
    <from sec="1071205309" usec="0"/>
    <to sec="1071206093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.0.125.128"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_918{
style=filled;
color=gray75;
3083[label="131.233.192.129;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4416[label="131.233.192.129;5pkt 5fpkt", shape=invtriangle, color=brown];
stat918[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.192.129:2528, 205.1.232.84:80}[20%]&lt;BR/&gt;{131.233.192.129:2529, 205.1.232.84:80}[20%]&lt;BR/&gt;{131.233.192.129:2530, 205.1.232.84:80}[20%]&lt;BR/&gt;{131.233.192.129:2532, 205.1.232.84:80}[20%]&lt;BR/&gt;{131.233.192.129:2533, 205.1.232.84:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2533: (10%)&lt;BR/&gt; 2532: (10%)&lt;BR/&gt; 2530: (10%)&lt;BR/&gt; 2529: (10%)&gt;];
}
3083--4416[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="205.1.232.84" dst_port="80" src_ip="131.233.192.129" src_port="2533"/>
      <filter dst_ip="205.1.232.84" dst_port="80" src_ip="131.233.192.129" src_port="2532"/>
      <filter dst_ip="205.1.232.84" dst_port="80" src_ip="131.233.192.129" src_port="2530"/>
      <filter dst_ip="205.1.232.84" dst_port="80" src_ip="131.233.192.129" src_port="2529"/>
      <filter dst_ip="205.1.232.84" dst_port="80" src_ip="131.233.192.129" src_port="2528"/>
    </slice>
    <from sec="1071205399" usec="0"/>
    <to sec="1071205470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_919{
style=filled;
color=gray75;
3089[label="78.70.109.130;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4418[label="78.70.109.130;5pkt 5fpkt", shape=invtriangle, color=brown];
stat919[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.70.109.130:1461, 160.188.84.210:80}[20%]&lt;BR/&gt;{78.70.109.130:2237, 160.188.84.210:80}[20%]&lt;BR/&gt;{78.70.109.130:2431, 160.188.84.210:80}[20%]&lt;BR/&gt;{78.70.109.130:2866, 160.188.84.210:80}[20%]&lt;BR/&gt;{78.70.109.130:2968, 160.188.84.210:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2968: (10%)&lt;BR/&gt; 2866: (10%)&lt;BR/&gt; 2431: (10%)&lt;BR/&gt; 2237: (10%)&gt;];
}
3089--4418[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.84.210" dst_port="80" src_ip="78.70.109.130" src_port="2968"/>
      <filter dst_ip="160.188.84.210" dst_port="80" src_ip="78.70.109.130" src_port="2866"/>
      <filter dst_ip="160.188.84.210" dst_port="80" src_ip="78.70.109.130" src_port="2431"/>
      <filter dst_ip="160.188.84.210" dst_port="80" src_ip="78.70.109.130" src_port="2237"/>
      <filter dst_ip="160.188.84.210" dst_port="80" src_ip="78.70.109.130" src_port="1461"/>
    </slice>
    <from sec="1071205377" usec="0"/>
    <to sec="1071205461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.130"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_921{
style=filled;
color=gray75;
3094[label="10.10.17.131;369pkt 369fpkt", shape=pentagon, color=darkviolet];
4421[label="10.10.17.131;369pkt 369fpkt", shape=invtriangle, color=brown];
stat921[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.10.17.131:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3094--4421[label="1;369pkt 369fpkt"];
</description>
    <slice>
      <filter src_ip="10.10.17.131"/>
    </slice>
    <from sec="1071205320" usec="0"/>
    <to sec="1071205854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_922{
style=filled;
color=gray75;
617[label="205.87.41.9;s;165pkt 165fpkt", shape=diamond, color=yellow];
913[label="149.206.193.165;d;72pkt 72fpkt", shape=diamond, color=yellow];
stat922[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.87.41.9:80, *:*}[70.8155%]&lt;BR/&gt;{*:80, 149.206.193.165:*}[31.3305%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1561%)&lt;BR/&gt; 10001: (0.843882%)&lt;BR/&gt; 1491: (0.421941%)&lt;BR/&gt; 1489: (0.421941%)&lt;BR/&gt; 1347: (0.421941%)&gt;];
}
617--761[label="0.00606061;1pkt 1fpkt"];
617--762[label="0.0188679;1pkt 1fpkt"];
617--886[label="0.030303;5pkt 5fpkt"];
617--913[label="0.0555556;4pkt 4fpkt"];
617--1010[label="0.0162602;2pkt 2fpkt"];
617--1095[label="0.0266667;2pkt 2fpkt"];
617--1288[label="0.0102041;1pkt 1fpkt"];
617--1584[label="0.031746;2pkt 2fpkt"];
617--1645[label="0.0181818;3pkt 3fpkt"];
617--1650[label="0.00628931;1pkt 1fpkt"];
617--1656[label="0.0181818;3pkt 3fpkt"];
617--1658[label="0.02;2pkt 2fpkt"];
617--1671[label="0.00877193;1pkt 1fpkt"];
617--1735[label="1;79pkt 79fpkt"];
617--1797[label="0.030303;5pkt 5fpkt"];
617--1852[label="0.0350877;2pkt 2fpkt"];
617--1986[label="0.0121212;2pkt 2fpkt"];
617--2065[label="0.0121212;2pkt 2fpkt"];
617--2103[label="0.121212;20pkt 20fpkt"];
913--1251[label="0.0555556;4pkt 4fpkt"];
913--1490[label="0.0555556;4pkt 4fpkt"];
913--1735[label="0.0555556;4pkt 4fpkt"];
913--1741[label="0.0138889;1pkt 1fpkt"];
913--2155[label="0.0138889;1pkt 1fpkt"];
913--2840[label="0.7;35pkt 35fpkt"];
913--3106[label="0.0555556;4pkt 4fpkt"];
913--3434[label="0.0714286;2pkt 2fpkt"];
913--3814[label="0.166667;12pkt 12fpkt"];
913--3913[label="0.0138889;1pkt 1fpkt"];
913--4427[label="0.0555556;4pkt 4fpkt"];
913--4605[label="0.0714286;2pkt 2fpkt"];
913--4871[label="0.0138889;1pkt 1fpkt"];
913--5114[label="0.0555556;4pkt 4fpkt"];
913--5202[label="0.0714286;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="205.87.41.9" src_port="80"/>
      <filter dst_ip="149.206.193.165" src_port="80"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_923{
style=filled;
color=gray75;
3104[label="201.142.242.132;162pkt 162fpkt", shape=pentagon, color=darkviolet];
4426[label="201.142.242.132;162pkt 162fpkt", shape=invtriangle, color=brown];
stat923[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.142.242.132:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3104--4426[label="1;162pkt 162fpkt"];
</description>
    <slice>
      <filter src_ip="201.142.242.132"/>
    </slice>
    <from sec="1071205862" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.135"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_925{
style=filled;
color=gray75;
3124[label="217.195.39.136;112pkt 112fpkt", shape=pentagon, color=darkviolet];
4435[label="217.195.39.136;112pkt 112fpkt", shape=invtriangle, color=brown];
stat925[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.195.39.136:0, *:0}[97.3214%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.3214%)&lt;BR/&gt; 80: (1.33929%)&lt;BR/&gt; 64892: (0.446429%)&lt;BR/&gt; 64492: (0.446429%)&lt;BR/&gt; 5986: (0.446429%)&gt;];
}
3124--4435[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter src_ip="217.195.39.136"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071205977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_926{
style=filled;
color=gray75;
3129[label="211.59.114.136;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4437[label="211.59.114.136;4pkt 4fpkt", shape=invtriangle, color=brown];
stat926[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.59.114.136:80, 149.207.124.195:2593}[25%]&lt;BR/&gt;{211.59.114.136:80, 149.207.124.195:2612}[25%]&lt;BR/&gt;{211.59.114.136:80, 149.207.124.195:2613}[25%]&lt;BR/&gt;{211.59.114.136:80, 149.207.124.195:2614}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2614: (12.5%)&lt;BR/&gt; 2613: (12.5%)&lt;BR/&gt; 2612: (12.5%)&lt;BR/&gt; 2593: (12.5%)&gt;];
}
3129--4437[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.124.195" dst_port="2614" src_ip="211.59.114.136" src_port="80"/>
      <filter dst_ip="149.207.124.195" dst_port="2613" src_ip="211.59.114.136" src_port="80"/>
      <filter dst_ip="149.207.124.195" dst_port="2612" src_ip="211.59.114.136" src_port="80"/>
      <filter dst_ip="149.207.124.195" dst_port="2593" src_ip="211.59.114.136" src_port="80"/>
    </slice>
    <from sec="1071206060" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_927{
style=filled;
color=gray75;
3150[label="200.180.0.139;227pkt 227fpkt", shape=pentagon, color=darkviolet];
4449[label="200.180.0.139;227pkt 227fpkt", shape=invtriangle, color=brown];
5127[label="200.180.0.139;227pkt 227fpkt", shape=invhouse, color=bisque];
stat927[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.180.0.139:53, *:53}[21.5859%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (56.3877%)&lt;BR/&gt; 0: (6.60793%)&lt;BR/&gt; 32768: (1.54185%)&lt;BR/&gt; 9253: (0.881057%)&lt;BR/&gt; 80: (0.881057%)&gt;];
}
3150--4449[label="1;227pkt 227fpkt"];
3150--5127[label="1;227pkt 227fpkt"];
4449--5127[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="200.180.0.139" src_port="53"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.945324,1.56671,010,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_928{
style=filled;
color=gray75;
143[label="56.13.148.110s;7253pkt 7253fpkt", shape=rectangle, color=red];
451[label="56.13.148.110;s;8303pkt 8303fpkt", shape=diamond, color=yellow];
942[label="145.166.243.179;d;2pkt 2fpkt", shape=diamond, color=yellow];
953[label="208.254.5.140;s;1pkt 1fpkt", shape=diamond, color=yellow];
1057[label="145.166.235.166;d;44pkt 44fpkt", shape=diamond, color=yellow];
2965[label="56.13.148.110;9033pkt 9033fpkt", shape=pentagon, color=darkviolet];
3153[label="208.254.5.140;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4451[label="208.254.5.140;1pkt 1fpkt", shape=invtriangle, color=brown];
stat928[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.13.148.110:*, *:135}[99.5153%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (49.9046%)&lt;BR/&gt; 80: (0.0913223%)&lt;BR/&gt; 4217: (0.0304408%)&lt;BR/&gt; 4615: (0.0284114%)&lt;BR/&gt; 4614: (0.0284114%)&gt;];
}
143--451[label="1;7253pkt 7253fpkt"];
143--942[label="0.5;1pkt 1fpkt"];
143--1057[label="0.0227273;1pkt 1fpkt"];
143--1162[label="0.0175439;1pkt 1fpkt"];
143--1751[label="0.0126582;1pkt 1fpkt"];
143--2106[label="0.0653523;474pkt 474fpkt"];
143--2111[label="0.0653523;474pkt 474fpkt"];
143--2125[label="0.0653523;474pkt 474fpkt"];
143--2131[label="0.0653523;474pkt 474fpkt"];
143--2965[label="1;7253pkt 7253fpkt"];
451--942[label="0.5;1pkt 1fpkt"];
451--1057[label="0.0227273;1pkt 1fpkt"];
451--1162[label="0.0175439;1pkt 1fpkt"];
451--1751[label="0.0126582;1pkt 1fpkt"];
451--2106[label="0.0570878;474pkt 474fpkt"];
451--2111[label="0.0570878;474pkt 474fpkt"];
451--2125[label="0.0570878;474pkt 474fpkt"];
451--2131[label="0.0570878;474pkt 474fpkt"];
451--2965[label="1;8303pkt 8303fpkt"];
942--953[label="1;1pkt 1fpkt"];
942--2103[label="0.5;1pkt 1fpkt"];
942--2965[label="0.5;1pkt 1fpkt"];
942--3153[label="1;1pkt 1fpkt"];
942--4451[label="1;1pkt 1fpkt"];
953--2103[label="1;1pkt 1fpkt"];
953--3153[label="1;1pkt 1fpkt"];
953--4451[label="1;1pkt 1fpkt"];
1057--1158[label="0.0227273;1pkt 1fpkt"];
1057--1564[label="0.0454545;2pkt 2fpkt"];
1057--1576[label="0.0454545;2pkt 2fpkt"];
1057--1750[label="0.136364;6pkt 6fpkt"];
1057--1972[label="0.386364;17pkt 17fpkt"];
1057--2103[label="0.636364;28pkt 28fpkt"];
1057--2291[label="0.0454545;2pkt 2fpkt"];
1057--2399[label="0.386364;17pkt 17fpkt"];
1057--2811[label="0.0681818;3pkt 3fpkt"];
1057--2965[label="0.0227273;1pkt 1fpkt"];
1057--3317[label="0.136364;6pkt 6fpkt"];
1057--3339[label="0.0227273;1pkt 1fpkt"];
1057--3441[label="0.0227273;1pkt 1fpkt"];
1057--4547[label="0.0227273;1pkt 1fpkt"];
3153--4451[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="56.13.148.110"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_930{
style=filled;
color=gray75;
3174[label="211.100.97.143;326pkt 326fpkt", shape=pentagon, color=darkviolet];
4456[label="211.100.97.143;326pkt 326fpkt", shape=invtriangle, color=brown];
5131[label="211.100.97.143;326pkt 326fpkt", shape=invhouse, color=bisque];
stat930[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.100.97.143:0, *:0}[96.319%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.319%)&lt;BR/&gt; 80: (1.07362%)&lt;BR/&gt; 135: (0.766871%)&lt;BR/&gt; 64853: (0.153374%)&lt;BR/&gt; 61250: (0.153374%)&gt;];
}
3174--4456[label="1;326pkt 326fpkt"];
3174--5131[label="1;326pkt 326fpkt"];
4456--5131[label="1;326pkt 326fpkt"];
</description>
    <slice>
      <filter src_ip="211.100.97.143"/>
    </slice>
    <from sec="1071205235" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_931{
style=filled;
color=gray75;
3176[label="201.118.221.143;182pkt 182fpkt", shape=pentagon, color=darkviolet];
4457[label="201.118.221.143;182pkt 182fpkt", shape=invtriangle, color=brown];
stat931[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.118.221.143:0, *:0}[97.8022%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.8022%)&lt;BR/&gt; 80: (1.0989%)&lt;BR/&gt; 4143: (0.274725%)&lt;BR/&gt; 3332: (0.274725%)&lt;BR/&gt; 3139: (0.274725%)&gt;];
}
3176--4457[label="1;182pkt 182fpkt"];
</description>
    <slice>
      <filter src_ip="201.118.221.143"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_932{
style=filled;
color=gray75;
1190[label="82.25.121.142;s;5pkt 5fpkt", shape=diamond, color=yellow];
1604[label="78.45.173.168;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat932[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.25.121.142:80, 201.120.165.63:*}[71.4286%]&lt;BR/&gt;{78.45.173.168:80, 201.120.165.63:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51406: (7.14286%)&lt;BR/&gt; 48283: (7.14286%)&lt;BR/&gt; 48004: (7.14286%)&lt;BR/&gt; 47870: (7.14286%)&gt;];
}
1190--1645[label="1;5pkt 5fpkt"];
1190--2103[label="0.6;3pkt 3fpkt"];
1604--1645[label="1;2pkt 2fpkt"];
1604--2103[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.120.165.63" src_ip="82.25.121.142" src_port="80"/>
      <filter dst_ip="201.120.165.63" src_ip="78.45.173.168" src_port="80"/>
    </slice>
    <from sec="1071205546" usec="0"/>
    <to sec="1071206029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.145"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_934{
style=filled;
color=gray75;
1519[label="200.180.26.146;s;757pkt 757fpkt", shape=diamond, color=yellow];
3184[label="200.180.26.146;820pkt 820fpkt", shape=pentagon, color=darkviolet];
4461[label="200.180.26.146;820pkt 820fpkt", shape=invtriangle, color=brown];
stat934[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.180.26.146:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1519--3184[label="0.998679;756pkt 756fpkt"];
1519--4461[label="0.998679;756pkt 756fpkt"];
3184--4461[label="1;820pkt 820fpkt"];
</description>
    <slice>
      <filter src_ip="200.180.26.146"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_935{
style=filled;
color=gray75;
3188[label="58.196.125.146;170pkt 170fpkt", shape=pentagon, color=darkviolet];
4463[label="58.196.125.146;170pkt 170fpkt", shape=invtriangle, color=brown];
5133[label="58.196.125.146;170pkt 170fpkt", shape=invhouse, color=bisque];
stat935[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.196.125.146:0, *:1182}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1182: (50%)&lt;BR/&gt; 0: (50%)&gt;];
}
3188--4463[label="1;170pkt 170fpkt"];
3188--5133[label="1;170pkt 170fpkt"];
4463--5133[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_port="1182" src_ip="58.196.125.146"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.146"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_937{
style=filled;
color=gray75;
3204[label="200.136.141.148;103pkt 103fpkt", shape=pentagon, color=darkviolet];
4469[label="200.136.141.148;103pkt 103fpkt", shape=invtriangle, color=brown];
stat937[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.136.141.148:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3204--4469[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.136.141.148" src_port="1025"/>
    </slice>
    <from sec="1071205942" usec="0"/>
    <to sec="1071205953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_938{
style=filled;
color=gray75;
3209[label="201.142.241.148;283pkt 283fpkt", shape=pentagon, color=darkviolet];
4470[label="201.142.241.148;283pkt 283fpkt", shape=invtriangle, color=brown];
5136[label="201.142.241.148;283pkt 283fpkt", shape=invhouse, color=bisque];
stat938[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.142.241.148:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3209--4470[label="1;283pkt 283fpkt"];
3209--5136[label="1;283pkt 283fpkt"];
4470--5136[label="1;283pkt 283fpkt"];
</description>
    <slice>
      <filter src_ip="201.142.241.148"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071205886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_939{
style=filled;
color=gray75;
3211[label="76.82.13.149;118pkt 118fpkt", shape=pentagon, color=darkviolet];
4472[label="76.82.13.149;118pkt 118fpkt", shape=invtriangle, color=brown];
stat939[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.82.13.149:1036, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1036: (50%)&gt;];
}
3211--4472[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="76.82.13.149" src_port="1036"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_940{
style=filled;
color=gray75;
3214[label="205.1.45.149;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4473[label="205.1.45.149;8pkt 8fpkt", shape=invtriangle, color=brown];
stat940[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.45.149:1863, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 33548: (6.25%)&lt;BR/&gt; 4496: (6.25%)&lt;BR/&gt; 2032: (6.25%)&lt;BR/&gt; 1905: (6.25%)&gt;];
}
3214--4473[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="205.1.45.149" src_port="1863"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_941{
style=filled;
color=gray75;
3216[label="200.235.131.149;189pkt 189fpkt", shape=pentagon, color=darkviolet];
4474[label="200.235.131.149;189pkt 189fpkt", shape=invtriangle, color=brown];
5137[label="200.235.131.149;189pkt 189fpkt", shape=invhouse, color=bisque];
stat941[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.235.131.149:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3216--4474[label="1;189pkt 189fpkt"];
3216--5137[label="1;189pkt 189fpkt"];
4474--5137[label="1;189pkt 189fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.235.131.149" src_port="1025"/>
    </slice>
    <from sec="1071205293" usec="0"/>
    <to sec="1071205306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_942{
style=filled;
color=gray75;
3220[label="200.180.2.150;135pkt 135fpkt", shape=pentagon, color=darkviolet];
4477[label="200.180.2.150;135pkt 135fpkt", shape=invtriangle, color=brown];
5139[label="200.180.2.150;135pkt 135fpkt", shape=invhouse, color=bisque];
stat942[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.180.2.150:0, *:0}[95.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.5556%)&lt;BR/&gt; 80: (1.85185%)&lt;BR/&gt; 33148: (0.37037%)&lt;BR/&gt; 14008: (0.37037%)&lt;BR/&gt; 4384: (0.37037%)&gt;];
}
3220--4477[label="1;135pkt 135fpkt"];
3220--5139[label="1;135pkt 135fpkt"];
4477--5139[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter src_ip="200.180.2.150"/>
    </slice>
    <from sec="1071205213" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_943{
style=filled;
color=gray75;
604[label="145.166.50.87;d;622pkt 622fpkt", shape=diamond, color=yellow];
1498[label="131.140.128.103;d;88pkt 88fpkt", shape=diamond, color=yellow];
3501[label="216.200.130.191;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4636[label="216.200.130.191;26pkt 26fpkt", shape=invtriangle, color=brown];
5215[label="216.200.130.191;26pkt 26fpkt", shape=invhouse, color=bisque];
stat943[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 145.166.50.87:32780}[62.8809%]&lt;BR/&gt;{*:*, *:53}[20.6371%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (42.7665%)&lt;BR/&gt; 32780: (28.8706%)&lt;BR/&gt; 56518: (3.10914%)&lt;BR/&gt; 0: (2.91878%)&lt;BR/&gt; 21: (2.72843%)&gt;];
}
604--1120[label="0.0119048;1pkt 1fpkt"];
604--1263[label="0.00925926;1pkt 1fpkt"];
604--1283[label="0.011236;1pkt 1fpkt"];
604--1524[label="0.0188679;1pkt 1fpkt"];
604--1567[label="0.0625;1pkt 1fpkt"];
604--1568[label="0.0625;1pkt 1fpkt"];
604--1730[label="1;435pkt 435fpkt"];
604--2013[label="0.011236;1pkt 1fpkt"];
604--2039[label="0.0625;1pkt 1fpkt"];
604--2142[label="0.025;1pkt 1fpkt"];
604--2294[label="0.0149254;1pkt 1fpkt"];
604--2298[label="0.0416667;1pkt 1fpkt"];
604--2301[label="0.0277778;1pkt 1fpkt"];
604--2344[label="0.0357143;1pkt 1fpkt"];
604--2362[label="0.04;1pkt 1fpkt"];
604--2586[label="0.166667;1pkt 1fpkt"];
604--2668[label="0.0263158;1pkt 1fpkt"];
604--2674[label="0.04;1pkt 1fpkt"];
604--2705[label="0.0185185;1pkt 1fpkt"];
604--2714[label="0.0142857;1pkt 1fpkt"];
604--2765[label="0.025;1pkt 1fpkt"];
604--2808[label="0.0217391;1pkt 1fpkt"];
604--2967[label="0.0454545;1pkt 1fpkt"];
604--3015[label="0.02;1pkt 1fpkt"];
604--3224[label="0.05;1pkt 1fpkt"];
604--3282[label="0.0384615;1pkt 1fpkt"];
604--3323[label="0.0588235;1pkt 1fpkt"];
604--3469[label="0.00490196;1pkt 1fpkt"];
604--3633[label="0.0769231;1pkt 1fpkt"];
604--3802[label="0.037037;1pkt 1fpkt"];
604--3858[label="0.0172414;1pkt 1fpkt"];
604--3998[label="0.0147059;1pkt 1fpkt"];
604--4037[label="0.04;1pkt 1fpkt"];
604--4226[label="0.0185185;1pkt 1fpkt"];
604--4280[label="0.0217391;1pkt 1fpkt"];
604--4358[label="0.0454545;1pkt 1fpkt"];
604--4381[label="0.02;1pkt 1fpkt"];
604--4479[label="0.05;1pkt 1fpkt"];
604--4518[label="0.0384615;1pkt 1fpkt"];
604--4542[label="0.0588235;1pkt 1fpkt"];
604--4620[label="0.00490196;1pkt 1fpkt"];
604--4847[label="0.0172414;1pkt 1fpkt"];
604--4919[label="0.0149254;1pkt 1fpkt"];
604--4939[label="0.04;1pkt 1fpkt"];
604--5097[label="0.02;1pkt 1fpkt"];
604--5161[label="0.0384615;1pkt 1fpkt"];
604--5328[label="0.0172414;1pkt 1fpkt"];
1498--1568[label="0.0625;1pkt 1fpkt"];
1498--1607[label="0.823529;14pkt 14fpkt"];
1498--2039[label="0.0625;1pkt 1fpkt"];
1498--2467[label="0.0555556;1pkt 1fpkt"];
1498--2705[label="0.0185185;1pkt 1fpkt"];
1498--2714[label="0.0142857;1pkt 1fpkt"];
1498--3224[label="0.05;1pkt 1fpkt"];
1498--3501[label="0.538462;14pkt 14fpkt"];
1498--3858[label="0.0172414;1pkt 1fpkt"];
1498--4090[label="0.0588235;1pkt 1fpkt"];
1498--4226[label="0.0185185;1pkt 1fpkt"];
1498--4479[label="0.05;1pkt 1fpkt"];
1498--4636[label="0.538462;14pkt 14fpkt"];
1498--4847[label="0.0172414;1pkt 1fpkt"];
1498--5215[label="0.538462;14pkt 14fpkt"];
1498--5328[label="0.0172414;1pkt 1fpkt"];
3501--4636[label="1;26pkt 26fpkt"];
3501--5215[label="1;26pkt 26fpkt"];
4636--5215[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_port="53"/>
      <filter dst_ip="145.166.50.87" dst_port="32780" src_port="53"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.89.182.150"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_945{
style=filled;
color=gray75;
3246[label="192.108.226.153;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4494[label="192.108.226.153;17pkt 17fpkt", shape=invtriangle, color=brown];
5148[label="192.108.226.153;17pkt 17fpkt", shape=invhouse, color=bisque];
stat945[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.108.226.153:80, 149.207.88.220:*}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 15776: (2.94118%)&lt;BR/&gt; 1949: (2.94118%)&lt;BR/&gt; 1940: (2.94118%)&lt;BR/&gt; 1920: (2.94118%)&gt;];
}
3246--4494[label="1;17pkt 17fpkt"];
3246--5148[label="1;17pkt 17fpkt"];
4494--5148[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.88.220" src_ip="192.108.226.153" src_port="80"/>
    </slice>
    <from sec="1071206047" usec="0"/>
    <to sec="1071206068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_946{
style=filled;
color=gray75;
3247[label="78.102.34.154;236pkt 236fpkt", shape=pentagon, color=darkviolet];
4495[label="78.102.34.154;236pkt 236fpkt", shape=invtriangle, color=brown];
5149[label="78.102.34.154;236pkt 236fpkt", shape=invhouse, color=bisque];
stat946[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.102.34.154:0, *:0}[98.7288%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.7288%)&lt;BR/&gt; 80: (0.635593%)&lt;BR/&gt; 48937: (0.211864%)&lt;BR/&gt; 46638: (0.211864%)&lt;BR/&gt; 19509: (0.211864%)&gt;];
}
3247--4495[label="1;236pkt 236fpkt"];
3247--5149[label="1;236pkt 236fpkt"];
4495--5149[label="1;236pkt 236fpkt"];
</description>
    <slice>
      <filter src_ip="78.102.34.154"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.423822,1.60791,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_947{
style=filled;
color=gray75;
3125[label="205.1.41.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat947[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.41.136:1863, 149.206.21.15:3985}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3985: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
3125--4436[label="1;1pkt 1fpkt"];
3125--5119[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.21.15" dst_port="3985" src_ip="205.1.41.136" src_port="1863"/>
    </slice>
    <from sec="1071205896" usec="0"/>
    <to sec="1071206016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_948{
style=filled;
color=gray75;
3273[label="218.49.15.158;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4510[label="218.49.15.158;26pkt 26fpkt", shape=invtriangle, color=brown];
stat948[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.49.15.158:80, 145.71.51.41:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2228: (1.92308%)&lt;BR/&gt; 2227: (1.92308%)&lt;BR/&gt; 2226: (1.92308%)&lt;BR/&gt; 2225: (1.92308%)&gt;];
}
3273--4510[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="145.71.51.41" src_ip="218.49.15.158" src_port="80"/>
    </slice>
    <from sec="1071205771" usec="0"/>
    <to sec="1071205782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.158"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_950{
style=filled;
color=gray75;
3283[label="206.103.140.159;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4519[label="206.103.140.159;15pkt 15fpkt", shape=invtriangle, color=brown];
stat950[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.103.140.159:80, 149.207.113.144:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49963: (3.33333%)&lt;BR/&gt; 49962: (3.33333%)&lt;BR/&gt; 49961: (3.33333%)&lt;BR/&gt; 49960: (3.33333%)&gt;];
}
3283--4519[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.113.144" src_ip="206.103.140.159" src_port="80"/>
    </slice>
    <from sec="1071205529" usec="0"/>
    <to sec="1071205537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_951{
style=filled;
color=gray75;
3287[label="58.253.231.159;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4520[label="58.253.231.159;7pkt 7fpkt", shape=invtriangle, color=brown];
5162[label="58.253.231.159;7pkt 7fpkt", shape=invhouse, color=bisque];
stat951[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.253.231.159:80, 149.206.203.130:*}[71.4286%]&lt;BR/&gt;{58.253.231.159:80, 149.206.205.30:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2241: (7.14286%)&lt;BR/&gt; 2240: (7.14286%)&lt;BR/&gt; 1532: (7.14286%)&lt;BR/&gt; 1531: (7.14286%)&gt;];
}
3287--4520[label="1;7pkt 7fpkt"];
3287--5162[label="1;7pkt 7fpkt"];
4520--5162[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.203.130" src_ip="58.253.231.159" src_port="80"/>
      <filter dst_ip="149.206.205.30" src_ip="58.253.231.159" src_port="80"/>
    </slice>
    <from sec="1071205354" usec="0"/>
    <to sec="1071206006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_952{
style=filled;
color=gray75;
3296[label="160.190.3.161;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4526[label="160.190.3.161;2pkt 2fpkt", shape=invtriangle, color=brown];
stat952[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.190.3.161:0, 160.188.172.0:0}[50%]&lt;BR/&gt;{160.190.3.161:0, 160.188.172.2:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3296--4526[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.172.2" src_ip="160.190.3.161"/>
      <filter dst_ip="160.188.172.0" src_ip="160.190.3.161"/>
    </slice>
    <from sec="1071206101" usec="0"/>
    <to sec="1071206102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_953{
style=filled;
color=gray75;
430[label="200.133.121.160;d;386pkt 386fpkt", shape=diamond, color=yellow];
3151[label="58.245.2.139;68pkt 68fpkt", shape=pentagon, color=darkviolet];
stat953[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 200.133.121.160:*}[92.228%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.696%)&lt;BR/&gt; 6881: (1.87225%)&lt;BR/&gt; 6882: (1.10132%)&lt;BR/&gt; 45851: (0.220264%)&lt;BR/&gt; 45846: (0.220264%)&gt;];
}
430--442[label="0.0757576;5pkt 5fpkt"];
430--502[label="0.00724638;1pkt 1fpkt"];
430--815[label="0.0227273;3pkt 3fpkt"];
430--1015[label="0.0144928;2pkt 2fpkt"];
430--1605[label="0.0465116;2pkt 2fpkt"];
430--1757[label="0.015625;1pkt 1fpkt"];
430--1858[label="0.00724638;1pkt 1fpkt"];
430--2103[label="0.015544;6pkt 6fpkt"];
430--2279[label="0.1;2pkt 2fpkt"];
430--2392[label="0.0465116;2pkt 2fpkt"];
430--2781[label="0.010989;1pkt 1fpkt"];
430--2938[label="0.0408163;2pkt 2fpkt"];
430--3151[label="1;68pkt 68fpkt"];
430--3195[label="0.0416667;3pkt 3fpkt"];
430--3297[label="0.0714286;5pkt 5fpkt"];
430--3342[label="0.0222222;3pkt 3fpkt"];
430--3367[label="0.0136986;2pkt 2fpkt"];
430--3448[label="0.00613497;1pkt 1fpkt"];
430--3461[label="0.0909091;1pkt 1fpkt"];
430--3775[label="0.0526316;1pkt 1fpkt"];
430--3799[label="0.0163934;1pkt 1fpkt"];
430--3881[label="0.0869565;2pkt 2fpkt"];
430--3990[label="0.1;2pkt 2fpkt"];
430--4053[label="0.0238095;1pkt 1fpkt"];
430--4266[label="0.010989;1pkt 1fpkt"];
430--4467[label="0.0416667;3pkt 3fpkt"];
430--4527[label="0.0714286;5pkt 5fpkt"];
430--4549[label="0.0222222;3pkt 3fpkt"];
430--4612[label="0.00613497;1pkt 1fpkt"];
430--4810[label="0.0163934;1pkt 1fpkt"];
430--4949[label="0.0238095;1pkt 1fpkt"];
430--5053[label="0.010989;1pkt 1fpkt"];
430--5176[label="0.0222222;3pkt 3fpkt"];
430--5205[label="0.00613497;1pkt 1fpkt"];
430--5310[label="0.0163934;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.133.121.160" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_954{
style=filled;
color=gray75;
3298[label="207.131.50.161;178pkt 178fpkt", shape=pentagon, color=darkviolet];
4528[label="207.131.50.161;178pkt 178fpkt", shape=invtriangle, color=brown];
stat954[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.131.50.161:0, *:0}[94.382%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.382%)&lt;BR/&gt; 80: (1.96629%)&lt;BR/&gt; 135: (0.842697%)&lt;BR/&gt; 63680: (0.280899%)&lt;BR/&gt; 57131: (0.280899%)&gt;];
}
3298--4528[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter src_ip="207.131.50.161"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.161"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_956{
style=filled;
color=gray75;
3303[label="205.1.41.162;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4532[label="205.1.41.162;3pkt 3fpkt", shape=invtriangle, color=brown];
stat956[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.41.162:1863, 145.166.2.41:3727}[33.3333%]&lt;BR/&gt;{205.1.41.162:1863, 145.166.7.42:3184}[33.3333%]&lt;BR/&gt;{205.1.41.162:1863, 200.180.29.168:4140}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4140: (16.6667%)&lt;BR/&gt; 3727: (16.6667%)&lt;BR/&gt; 3184: (16.6667%)&gt;];
}
3303--4532[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.180.29.168" dst_port="4140" src_ip="205.1.41.162" src_port="1863"/>
      <filter dst_ip="145.166.7.42" dst_port="3184" src_ip="205.1.41.162" src_port="1863"/>
      <filter dst_ip="145.166.2.41" dst_port="3727" src_ip="205.1.41.162" src_port="1863"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.165"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_959{
style=filled;
color=gray75;
3328[label="200.232.32.167;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4544[label="200.232.32.167;2pkt 2fpkt", shape=invtriangle, color=brown];
5174[label="200.232.32.167;2pkt 2fpkt", shape=invhouse, color=bisque];
stat959[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.232.32.167:80, 149.206.39.35:1413}[50%]&lt;BR/&gt;{200.232.32.167:80, 149.206.39.35:1414}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1414: (25%)&lt;BR/&gt; 1413: (25%)&gt;];
}
3328--4544[label="1;2pkt 2fpkt"];
3328--5174[label="1;2pkt 2fpkt"];
4544--5174[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.39.35" dst_port="1414" src_ip="200.232.32.167" src_port="80"/>
      <filter dst_ip="149.206.39.35" dst_port="1413" src_ip="200.232.32.167" src_port="80"/>
    </slice>
    <from sec="1071206088" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_960{
style=filled;
color=gray75;
815[label="216.189.12.169;s;132pkt 132fpkt", shape=diamond, color=yellow];
1450[label="149.206.203.109;d;21pkt 21fpkt", shape=diamond, color=yellow];
stat960[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.189.12.169:80, 145.71.67.30:*}[28.8732%]&lt;BR/&gt;{216.189.12.169:80, 149.207.88.223:*}[28.169%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6732%)&lt;BR/&gt; 3280: (0.653595%)&lt;BR/&gt; 3279: (0.653595%)&lt;BR/&gt; 3278: (0.653595%)&lt;BR/&gt; 3276: (0.653595%)&gt;];
}
815--844[label="0.30303;40pkt 40fpkt"];
815--1450[label="0.52381;11pkt 11fpkt"];
815--1645[label="0.0757576;10pkt 10fpkt"];
815--1757[label="1;64pkt 64fpkt"];
815--2103[label="0.00757576;1pkt 1fpkt"];
815--3342[label="1;132pkt 132fpkt"];
815--4549[label="1;132pkt 132fpkt"];
815--5176[label="1;132pkt 132fpkt"];
1450--2952[label="0.0952381;2pkt 2fpkt"];
1450--3342[label="0.52381;11pkt 11fpkt"];
1450--3585[label="0.380952;8pkt 8fpkt"];
1450--4549[label="0.52381;11pkt 11fpkt"];
1450--4682[label="0.380952;8pkt 8fpkt"];
1450--5176[label="0.52381;11pkt 11fpkt"];
1450--5244[label="0.380952;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="145.71.67.30" src_ip="216.189.12.169" src_port="80"/>
      <filter dst_ip="149.207.88.223" src_ip="216.189.12.169" src_port="80"/>
    </slice>
    <from sec="1071205304" usec="0"/>
    <to sec="1071206018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_961{
style=filled;
color=gray75;
3344[label="145.108.140.169;28pkt 28fpkt", shape=pentagon, color=darkviolet];
4551[label="145.108.140.169;28pkt 28fpkt", shape=invtriangle, color=brown];
stat961[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.108.140.169:80, 57.0.158.27:*}[35.7143%]&lt;BR/&gt;{145.108.140.169:*, *:53}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.3571%)&lt;BR/&gt; 53: (16.0714%)&lt;BR/&gt; 1024: (10.7143%)&lt;BR/&gt; 25: (3.57143%)&lt;BR/&gt; 0: (3.57143%)&gt;];
}
3344--4551[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="145.108.140.169"/>
      <filter dst_ip="57.0.158.27" src_ip="145.108.140.169" src_port="80"/>
    </slice>
    <from sec="1071205267" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_962{
style=filled;
color=gray75;
1294[label="149.207.106.166;d;168pkt 168fpkt", shape=diamond, color=yellow];
1335[label="211.245.168.80;s;10pkt 10fpkt", shape=diamond, color=yellow];
2643[label="221.240.31.64;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3345[label="211.245.169.169;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4194[label="221.240.31.64;5pkt 5fpkt", shape=invtriangle, color=brown];
4552[label="211.245.169.169;5pkt 5fpkt", shape=invtriangle, color=brown];
stat962[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 149.207.106.166:*}[76.2162%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.2161%)&lt;BR/&gt; 0: (4.52261%)&lt;BR/&gt; 53: (4.0201%)&lt;BR/&gt; 32778: (3.76884%)&lt;BR/&gt; 51501: (0.753769%)&gt;];
}
1294--1335[label="0.1;1pkt 1fpkt"];
1294--1700[label="0.0217391;1pkt 1fpkt"];
1294--2277[label="0.166667;1pkt 1fpkt"];
1294--2294[label="0.0149254;1pkt 1fpkt"];
1294--2643[label="0.333333;2pkt 2fpkt"];
1294--2759[label="0.0384615;1pkt 1fpkt"];
1294--2777[label="0.0149254;1pkt 1fpkt"];
1294--3135[label="0.166667;1pkt 1fpkt"];
1294--3180[label="0.18;9pkt 9fpkt"];
1294--3226[label="0.0106383;1pkt 1fpkt"];
1294--3337[label="0.077381;13pkt 13fpkt"];
1294--3345[label="0.2;1pkt 1fpkt"];
1294--3386[label="0.3;6pkt 6fpkt"];
1294--3399[label="0.0833333;1pkt 1fpkt"];
1294--3871[label="0.0140845;1pkt 1fpkt"];
1294--3887[label="0.00598802;1pkt 1fpkt"];
1294--3998[label="0.0147059;1pkt 1fpkt"];
1294--4194[label="0.4;2pkt 2fpkt"];
1294--4480[label="0.0106383;1pkt 1fpkt"];
1294--4552[label="0.2;1pkt 1fpkt"];
1294--4578[label="0.3;6pkt 6fpkt"];
1294--4860[label="0.00598802;1pkt 1fpkt"];
1294--4919[label="0.0149254;1pkt 1fpkt"];
1294--5128[label="0.333333;3pkt 3fpkt"];
1294--5189[label="0.3;6pkt 6fpkt"];
1335--2759[label="1;10pkt 10fpkt"];
2643--4194[label="1;5pkt 5fpkt"];
3345--4552[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.106.166" src_port="80"/>
    </slice>
    <from sec="1071205231" usec="0"/>
    <to sec="1071206075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.73.213.169"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.169"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_965{
style=filled;
color=gray75;
3349[label="201.123.16.170;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4556[label="201.123.16.170;6pkt 6fpkt", shape=invtriangle, color=brown];
5180[label="201.123.16.170;6pkt 6fpkt", shape=invhouse, color=bisque];
stat965[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.123.16.170:80, 149.206.72.159:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63203: (8.33333%)&lt;BR/&gt; 63202: (8.33333%)&lt;BR/&gt; 63195: (8.33333%)&lt;BR/&gt; 63194: (8.33333%)&gt;];
}
3349--4556[label="1;6pkt 6fpkt"];
3349--5180[label="1;6pkt 6fpkt"];
4556--5180[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.72.159" src_ip="201.123.16.170" src_port="80"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071205259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_966{
style=filled;
color=gray75;
3352[label="218.90.66.170;211pkt 211fpkt", shape=pentagon, color=darkviolet];
4559[label="218.90.66.170;211pkt 211fpkt", shape=invtriangle, color=brown];
5182[label="218.90.66.170;211pkt 211fpkt", shape=invhouse, color=bisque];
stat966[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.90.66.170:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3352--4559[label="1;211pkt 211fpkt"];
3352--5182[label="1;211pkt 211fpkt"];
4559--5182[label="1;211pkt 211fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.90.66.170" src_port="1025"/>
    </slice>
    <from sec="1071205372" usec="0"/>
    <to sec="1071205413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_967{
style=filled;
color=gray75;
3355[label="212.33.17.171;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4561[label="212.33.17.171;10pkt 10fpkt", shape=invtriangle, color=brown];
stat967[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.33.17.171:80, 131.233.178.139:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1131: (5%)&lt;BR/&gt; 1129: (5%)&lt;BR/&gt; 1128: (5%)&lt;BR/&gt; 1127: (5%)&gt;];
}
3355--4561[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="131.233.178.139" src_ip="212.33.17.171" src_port="80"/>
    </slice>
    <from sec="1071205371" usec="0"/>
    <to sec="1071205403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.0.106.171"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.171"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_970{
style=filled;
color=gray75;
1544[label="56.12.18.172;s;216pkt 216fpkt", shape=diamond, color=yellow];
3366[label="56.12.18.172;243pkt 243fpkt", shape=pentagon, color=darkviolet];
4566[label="56.12.18.172;243pkt 243fpkt", shape=invtriangle, color=brown];
stat970[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.12.18.172:*, *:445}[51.4403%]&lt;BR/&gt;{56.12.18.172:*, *:135}[48.5597%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.7835%)&lt;BR/&gt; 135: (24.2165%)&lt;BR/&gt; 2096: (0.42735%)&lt;BR/&gt; 2086: (0.42735%)&lt;BR/&gt; 1989: (0.42735%)&gt;];
}
1544--2106[label="0.037037;8pkt 8fpkt"];
1544--2108[label="0.0277778;6pkt 6fpkt"];
1544--2111[label="0.0462963;10pkt 10fpkt"];
1544--2123[label="0.0277778;6pkt 6fpkt"];
1544--2125[label="0.0462963;10pkt 10fpkt"];
1544--2130[label="0.0277778;6pkt 6fpkt"];
1544--2131[label="0.0462963;10pkt 10fpkt"];
1544--3366[label="1;216pkt 216fpkt"];
1544--4566[label="1;216pkt 216fpkt"];
3366--4566[label="1;243pkt 243fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="56.12.18.172"/>
      <filter dst_port="135" src_ip="56.12.18.172"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.889707,1.5466,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_971{
style=filled;
color=gray75;
804[label="149.207.124.195;d;88pkt 88fpkt", shape=diamond, color=yellow];
1753[label="149.207.124.195;d;17pkt 17fpkt", shape=hexagon, color=black];
3102[label="207.45.192.132;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4425[label="207.45.192.132;2pkt 2fpkt", shape=invtriangle, color=brown];
stat971[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.163.127.111:80, 149.207.124.195:*}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1332: (1.83486%)&lt;BR/&gt; 1333: (1.37615%)&lt;BR/&gt; 2367: (0.917431%)&lt;BR/&gt; 2366: (0.917431%)&gt;];
}
804--924[label="0.0943396;5pkt 5fpkt"];
804--1198[label="0.322581;20pkt 20fpkt"];
804--1227[label="0.0340909;3pkt 3fpkt"];
804--1753[label="1;17pkt 17fpkt"];
804--1991[label="0.0340909;3pkt 3fpkt"];
804--2103[label="0.0681818;6pkt 6fpkt"];
804--2155[label="0.0113636;1pkt 1fpkt"];
804--2607[label="0.416667;5pkt 5fpkt"];
804--2972[label="0.227273;20pkt 20fpkt"];
804--3102[label="1;2pkt 2fpkt"];
804--3337[label="0.0113636;1pkt 1fpkt"];
804--3374[label="0.0806452;5pkt 5fpkt"];
804--3434[label="0.0357143;1pkt 1fpkt"];
804--3716[label="0.0555556;1pkt 1fpkt"];
804--3913[label="0.0113636;1pkt 1fpkt"];
804--4361[label="0.227273;20pkt 20fpkt"];
804--4425[label="1;2pkt 2fpkt"];
804--4571[label="0.0806452;5pkt 5fpkt"];
804--4605[label="0.0357143;1pkt 1fpkt"];
804--4757[label="0.0555556;1pkt 1fpkt"];
804--4871[label="0.0113636;1pkt 1fpkt"];
804--5187[label="0.0806452;5pkt 5fpkt"];
804--5202[label="0.0357143;1pkt 1fpkt"];
804--5284[label="0.0555556;1pkt 1fpkt"];
1753--1991[label="0.176471;3pkt 3fpkt"];
1753--2103[label="0.0588235;1pkt 1fpkt"];
1753--3102[label="0.5;1pkt 1fpkt"];
1753--3374[label="0.294118;5pkt 5fpkt"];
1753--3434[label="0.0588235;1pkt 1fpkt"];
1753--4425[label="0.5;1pkt 1fpkt"];
1753--4571[label="0.294118;5pkt 5fpkt"];
1753--4605[label="0.0588235;1pkt 1fpkt"];
1753--5187[label="0.294118;5pkt 5fpkt"];
1753--5202[label="0.0588235;1pkt 1fpkt"];
3102--4425[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.124.195" src_ip="210.163.127.111" src_port="80"/>
    </slice>
    <from sec="1071205266" usec="0"/>
    <to sec="1071205936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.52.91.173"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_973{
style=filled;
color=gray75;
1150[label="61.138.120.173;s;252pkt 252fpkt", shape=diamond, color=yellow];
3376[label="61.138.120.173;265pkt 265fpkt", shape=pentagon, color=darkviolet];
4573[label="61.138.120.173;265pkt 265fpkt", shape=invtriangle, color=brown];
stat973[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.138.120.173:*, *:445}[50.9434%]&lt;BR/&gt;{61.138.120.173:*, *:135}[49.0566%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.3836%)&lt;BR/&gt; 135: (24.6164%)&lt;BR/&gt; 4123: (0.575448%)&lt;BR/&gt; 4999: (0.383632%)&lt;BR/&gt; 4718: (0.383632%)&gt;];
}
1150--2106[label="0.0277778;7pkt 7fpkt"];
1150--2108[label="0.0277778;7pkt 7fpkt"];
1150--2111[label="0.00793651;2pkt 2fpkt"];
1150--2123[label="0.0277778;7pkt 7fpkt"];
1150--2125[label="0.00793651;2pkt 2fpkt"];
1150--2130[label="0.0277778;7pkt 7fpkt"];
1150--2131[label="0.00793651;2pkt 2fpkt"];
1150--3376[label="1;252pkt 252fpkt"];
1150--4573[label="1;252pkt 252fpkt"];
3376--4573[label="1;265pkt 265fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="61.138.120.173"/>
      <filter dst_port="135" src_ip="61.138.120.173"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_974{
style=filled;
color=gray75;
672[label="201.214.226.173;s;36pkt 36fpkt", shape=diamond, color=yellow];
1149[label="160.188.107.170;d;148pkt 148fpkt", shape=diamond, color=yellow];
2175[label="59.98.5.5;34pkt 34fpkt", shape=pentagon, color=darkviolet];
3380[label="201.214.226.173;42pkt 42fpkt", shape=pentagon, color=darkviolet];
3588[label="32.47.22.205;67pkt 67fpkt", shape=pentagon, color=darkviolet];
3707[label="76.180.92.222;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4574[label="201.214.226.173;42pkt 42fpkt", shape=invtriangle, color=brown];
4752[label="76.180.92.222;22pkt 22fpkt", shape=invtriangle, color=brown];
5281[label="76.180.92.222;22pkt 22fpkt", shape=invhouse, color=bisque];
stat974[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6667, 160.188.107.170:*}[50.6912%]&lt;BR/&gt;{32.47.22.205:*, 160.188.107.170:*}[30.8756%]&lt;BR/&gt;{*:*, 160.188.116.37:*}[23.9631%]&lt;BR/&gt;{*:*, 160.188.107.170:113}[21.1982%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (31.954%)&lt;BR/&gt; 113: (15.977%)&lt;BR/&gt; 64824: (1.49425%)&lt;BR/&gt; 64817: (1.26437%)&lt;BR/&gt; 64812: (1.14943%)&gt;];
}
672--966[label="0.4;2pkt 2fpkt"];
672--1127[label="0.25;1pkt 1fpkt"];
672--1149[label="0.111111;4pkt 4fpkt"];
672--1346[label="0.333333;1pkt 1fpkt"];
672--3380[label="1;36pkt 36fpkt"];
672--4574[label="1;36pkt 36fpkt"];
1149--1651[label="0.00675676;1pkt 1fpkt"];
1149--1971[label="0.00675676;1pkt 1fpkt"];
1149--2062[label="0.00675676;1pkt 1fpkt"];
1149--2175[label="0.352941;12pkt 12fpkt"];
1149--2562[label="0.148148;4pkt 4fpkt"];
1149--2585[label="0.00675676;1pkt 1fpkt"];
1149--3380[label="0.0952381;4pkt 4fpkt"];
1149--3588[label="0.910448;61pkt 61fpkt"];
1149--3707[label="0.863636;19pkt 19fpkt"];
1149--4150[label="0.153846;4pkt 4fpkt"];
1149--4162[label="0.00675676;1pkt 1fpkt"];
1149--4574[label="0.0952381;4pkt 4fpkt"];
1149--4752[label="0.863636;19pkt 19fpkt"];
1149--5281[label="0.863636;19pkt 19fpkt"];
3380--4574[label="1;42pkt 42fpkt"];
3707--4752[label="1;22pkt 22fpkt"];
3707--5281[label="1;22pkt 22fpkt"];
4752--5281[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.116.37"/>
      <filter dst_ip="160.188.107.170" src_ip="32.47.22.205"/>
      <filter dst_ip="160.188.107.170" src_port="6667"/>
      <filter dst_ip="160.188.107.170" dst_port="113"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.36.83.174"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.116.11.175"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.214.193.175"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_978{
style=filled;
color=gray75;
3427[label="211.66.162.179;149pkt 149fpkt", shape=pentagon, color=darkviolet];
4600[label="211.66.162.179;149pkt 149fpkt", shape=invtriangle, color=brown];
stat978[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.66.162.179:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3427--4600[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter src_ip="211.66.162.179"/>
    </slice>
    <from sec="1071205213" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_979{
style=filled;
color=gray75;
3443[label="56.5.205.181;153pkt 153fpkt", shape=pentagon, color=darkviolet];
4610[label="56.5.205.181;153pkt 153fpkt", shape=invtriangle, color=brown];
stat979[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.5.205.181:1037, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1037: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3443--4610[label="1;153pkt 153fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="56.5.205.181" src_port="1037"/>
    </slice>
    <from sec="1071205399" usec="0"/>
    <to sec="1071205424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_980{
style=filled;
color=gray75;
3446[label="61.145.16.182;142pkt 142fpkt", shape=pentagon, color=darkviolet];
4611[label="61.145.16.182;142pkt 142fpkt", shape=invtriangle, color=brown];
stat980[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.145.16.182:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4923: (0.704225%)&lt;BR/&gt; 3798: (0.704225%)&lt;BR/&gt; 3646: (0.704225%)&lt;BR/&gt; 3509: (0.704225%)&gt;];
}
3446--4611[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="61.145.16.182"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_981{
style=filled;
color=gray75;
3457[label="218.41.67.184;175pkt 175fpkt", shape=pentagon, color=darkviolet];
4615[label="218.41.67.184;175pkt 175fpkt", shape=invtriangle, color=brown];
stat981[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.41.67.184:10062, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10062: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3457--4615[label="1;175pkt 175fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.41.67.184" src_port="10062"/>
    </slice>
    <from sec="1071205292" usec="0"/>
    <to sec="1071205320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.116.141.184"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_983{
style=filled;
color=gray75;
3476[label="221.86.23.187;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4625[label="221.86.23.187;5pkt 5fpkt", shape=invtriangle, color=brown];
stat983[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.86.23.187:80, 145.166.6.97:2003}[20%]&lt;BR/&gt;{221.86.23.187:80, 149.206.13.12:1467}[20%]&lt;BR/&gt;{221.86.23.187:80, 149.206.13.12:1468}[20%]&lt;BR/&gt;{221.86.23.187:80, 149.206.250.219:1354}[20%]&lt;BR/&gt;{221.86.23.187:80, 149.206.250.219:1355}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2003: (10%)&lt;BR/&gt; 1468: (10%)&lt;BR/&gt; 1467: (10%)&lt;BR/&gt; 1355: (10%)&gt;];
}
3476--4625[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.250.219" dst_port="1355" src_ip="221.86.23.187" src_port="80"/>
      <filter dst_ip="149.206.250.219" dst_port="1354" src_ip="221.86.23.187" src_port="80"/>
      <filter dst_ip="149.206.13.12" dst_port="1468" src_ip="221.86.23.187" src_port="80"/>
      <filter dst_ip="149.206.13.12" dst_port="1467" src_ip="221.86.23.187" src_port="80"/>
      <filter dst_ip="145.166.6.97" dst_port="2003" src_ip="221.86.23.187" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_984{
style=filled;
color=gray75;
3484[label="101.155.98.188;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4629[label="101.155.98.188;2pkt 2fpkt", shape=invtriangle, color=brown];
stat984[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.155.98.188:49220, 145.166.26.123:8000}[50%]&lt;BR/&gt;{101.155.98.188:49221, 145.166.26.123:8000}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 49221: (25%)&lt;BR/&gt; 49220: (25%)&gt;];
}
3484--4629[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.26.123" dst_port="8000" src_ip="101.155.98.188" src_port="49221"/>
      <filter dst_ip="145.166.26.123" dst_port="8000" src_ip="101.155.98.188" src_port="49220"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071205289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_985{
style=filled;
color=gray75;
1100[label="60.16.129.188;s;215pkt 215fpkt", shape=diamond, color=yellow];
3486[label="60.16.129.188;296pkt 296fpkt", shape=pentagon, color=darkviolet];
4630[label="60.16.129.188;296pkt 296fpkt", shape=invtriangle, color=brown];
stat985[shape=component, label=&lt;Rules:&lt;BR/&gt;{60.16.129.188:*, *:445}[50.5051%]&lt;BR/&gt;{60.16.129.188:*, *:135}[49.4949%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.2169%)&lt;BR/&gt; 135: (24.7831%)&lt;BR/&gt; 4344: (0.371747%)&lt;BR/&gt; 2480: (0.371747%)&lt;BR/&gt; 2157: (0.371747%)&gt;];
}
1100--2106[label="0.0790698;17pkt 17fpkt"];
1100--3486[label="0.995349;214pkt 214fpkt"];
1100--4630[label="0.995349;214pkt 214fpkt"];
3486--4630[label="1;296pkt 296fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="60.16.129.188"/>
      <filter dst_port="135" src_ip="60.16.129.188"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_986{
style=filled;
color=gray75;
3491[label="216.117.4.189;208pkt 208fpkt", shape=pentagon, color=darkviolet];
4632[label="216.117.4.189;208pkt 208fpkt", shape=invtriangle, color=brown];
stat986[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.117.4.189:0, *:0}[91.3462%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.3462%)&lt;BR/&gt; 135: (2.88462%)&lt;BR/&gt; 80: (1.44231%)&lt;BR/&gt; 43606: (0.240385%)&lt;BR/&gt; 42868: (0.240385%)&gt;];
}
3491--4632[label="1;208pkt 208fpkt"];
</description>
    <slice>
      <filter src_ip="216.117.4.189"/>
    </slice>
    <from sec="1071205215" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06292,1.66934,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_987{
style=filled;
color=gray75;
119[label="219.93.136.189s;58pkt 58fpkt", shape=rectangle, color=red];
3494[label="219.93.136.189;248pkt 248fpkt", shape=pentagon, color=darkviolet];
4634[label="219.93.136.189;248pkt 248fpkt", shape=invtriangle, color=brown];
5213[label="219.93.136.189;248pkt 248fpkt", shape=invhouse, color=bisque];
stat987[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.93.136.189:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
119--3494[label="1;58pkt 58fpkt"];
119--4634[label="1;58pkt 58fpkt"];
119--5213[label="1;58pkt 58fpkt"];
3494--4634[label="1;248pkt 248fpkt"];
3494--5213[label="1;248pkt 248fpkt"];
4634--5213[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.93.136.189" src_port="1025"/>
    </slice>
    <from sec="1071205409" usec="0"/>
    <to sec="1071205424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_988{
style=filled;
color=gray75;
3495[label="57.54.147.189;180pkt 180fpkt", shape=pentagon, color=darkviolet];
4635[label="57.54.147.189;180pkt 180fpkt", shape=invtriangle, color=brown];
5214[label="57.54.147.189;180pkt 180fpkt", shape=invhouse, color=bisque];
stat988[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.54.147.189:0, *:0}[97.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.7778%)&lt;BR/&gt; 80: (1.11111%)&lt;BR/&gt; 60003: (0.277778%)&lt;BR/&gt; 58392: (0.277778%)&lt;BR/&gt; 57003: (0.277778%)&gt;];
}
3495--4635[label="1;180pkt 180fpkt"];
3495--5214[label="1;180pkt 180fpkt"];
4635--5214[label="1;180pkt 180fpkt"];
</description>
    <slice>
      <filter src_ip="57.54.147.189"/>
    </slice>
    <from sec="1071205247" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.73.162.191"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_990{
style=filled;
color=gray75;
3504[label="211.145.110.192;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4639[label="211.145.110.192;8pkt 8fpkt", shape=invtriangle, color=brown];
stat990[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.145.110.192:80, 201.175.60.157:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45281: (6.25%)&lt;BR/&gt; 45259: (6.25%)&lt;BR/&gt; 45258: (6.25%)&lt;BR/&gt; 45256: (6.25%)&gt;];
}
3504--4639[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="201.175.60.157" src_ip="211.145.110.192" src_port="80"/>
    </slice>
    <from sec="1071205467" usec="0"/>
    <to sec="1071205538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_991{
style=filled;
color=gray75;
3510[label="77.8.96.193;78pkt 78fpkt", shape=pentagon, color=darkviolet];
4642[label="77.8.96.193;78pkt 78fpkt", shape=invtriangle, color=brown];
5219[label="77.8.96.193;78pkt 78fpkt", shape=invhouse, color=bisque];
stat991[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.8.96.193:*, 149.206.38.107:135}[20.5128%]&lt;BR/&gt;{77.8.96.193:*, 149.206.38.107:445}[20.5128%]&lt;BR/&gt;{77.8.96.193:*, 149.206.19.196:135}[20.5128%]&lt;BR/&gt;{77.8.96.193:*, 149.206.19.196:445}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 135: (25%)&lt;BR/&gt; 4350: (0.641026%)&lt;BR/&gt; 4337: (0.641026%)&lt;BR/&gt; 4147: (0.641026%)&gt;];
}
3510--4642[label="1;78pkt 78fpkt"];
3510--5219[label="1;78pkt 78fpkt"];
4642--5219[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.19.196" dst_port="445" src_ip="77.8.96.193"/>
      <filter dst_ip="149.206.19.196" dst_port="135" src_ip="77.8.96.193"/>
      <filter dst_ip="149.206.38.107" dst_port="445" src_ip="77.8.96.193"/>
      <filter dst_ip="149.206.38.107" dst_port="135" src_ip="77.8.96.193"/>
    </slice>
    <from sec="1071205227" usec="0"/>
    <to sec="1071205949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_992{
style=filled;
color=gray75;
1024[label="209.113.100.193;s;3pkt 3fpkt", shape=diamond, color=yellow];
3511[label="209.113.100.193;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4643[label="209.113.100.193;2pkt 2fpkt", shape=invtriangle, color=brown];
stat992[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.113.100.193:80, 201.118.239.33:1765}[33.3333%]&lt;BR/&gt;{209.113.100.193:80, 201.118.239.33:3536}[33.3333%]&lt;BR/&gt;{209.113.100.193:80, 201.118.239.33:3705}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3705: (21.4286%)&lt;BR/&gt; 1765: (21.4286%)&lt;BR/&gt; 3536: (7.14286%)&gt;];
}
1024--2102[label="0.333333;1pkt 1fpkt"];
1024--2103[label="0.333333;1pkt 1fpkt"];
1024--2122[label="0.333333;1pkt 1fpkt"];
1024--3511[label="1;2pkt 2fpkt"];
1024--4643[label="1;2pkt 2fpkt"];
3511--4643[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="201.118.239.33" dst_port="3705" src_ip="209.113.100.193" src_port="80"/>
      <filter dst_ip="201.118.239.33" dst_port="3536" src_ip="209.113.100.193" src_port="80"/>
      <filter dst_ip="201.118.239.33" dst_port="1765" src_ip="209.113.100.193" src_port="80"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071205846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_993{
style=filled;
color=gray75;
3515[label="57.14.116.194;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4645[label="57.14.116.194;2pkt 2fpkt", shape=invtriangle, color=brown];
5221[label="57.14.116.194;2pkt 2fpkt", shape=invhouse, color=bisque];
stat993[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.14.116.194:80, 149.206.39.79:2511}[50%]&lt;BR/&gt;{57.14.116.194:80, 149.206.39.79:2512}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2512: (25%)&lt;BR/&gt; 2511: (25%)&gt;];
}
3515--4645[label="1;2pkt 2fpkt"];
3515--5221[label="1;2pkt 2fpkt"];
4645--5221[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.39.79" dst_port="2512" src_ip="57.14.116.194" src_port="80"/>
      <filter dst_ip="149.206.39.79" dst_port="2511" src_ip="57.14.116.194" src_port="80"/>
    </slice>
    <from sec="1071205521" usec="0"/>
    <to sec="1071205542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.34.72.198"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.0.195.198"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071205213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.3.217.198"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_997{
style=filled;
color=gray75;
3559[label="205.1.41.201;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4667[label="205.1.41.201;4pkt 4fpkt", shape=invtriangle, color=brown];
5234[label="205.1.41.201;4pkt 4fpkt", shape=invhouse, color=bisque];
stat997[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.41.201:1863, 145.166.82.64:2999}[25%]&lt;BR/&gt;{205.1.41.201:1863, 145.166.6.89:1206}[25%]&lt;BR/&gt;{205.1.41.201:1863, 145.166.1.198:3071}[25%]&lt;BR/&gt;{205.1.41.201:1863, 201.120.161.223:1084}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 3071: (12.5%)&lt;BR/&gt; 2999: (12.5%)&lt;BR/&gt; 1206: (12.5%)&lt;BR/&gt; 1084: (12.5%)&gt;];
}
3559--4667[label="1;4pkt 4fpkt"];
3559--5234[label="1;4pkt 4fpkt"];
4667--5234[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="201.120.161.223" dst_port="1084" src_ip="205.1.41.201" src_port="1863"/>
      <filter dst_ip="145.166.1.198" dst_port="3071" src_ip="205.1.41.201" src_port="1863"/>
      <filter dst_ip="145.166.6.89" dst_port="1206" src_ip="205.1.41.201" src_port="1863"/>
      <filter dst_ip="145.166.82.64" dst_port="2999" src_ip="205.1.41.201" src_port="1863"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071206075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,501,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_998{
style=filled;
color=gray75;
1425[label="58.74.73.201;s;35pkt 35fpkt", shape=diamond, color=yellow];
3560[label="58.74.73.201;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4668[label="58.74.73.201;34pkt 34fpkt", shape=invtriangle, color=brown];
5235[label="58.74.73.201;34pkt 34fpkt", shape=invhouse, color=bisque];
stat998[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.74.73.201:21, 201.136.96.131:*}[34.2857%]&lt;BR/&gt;{58.74.73.201:21, 160.188.12.93:*}[22.8571%]&lt;BR/&gt;{58.74.73.201:21, 160.188.106.142:*}[22.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (39.781%)&lt;BR/&gt; 64396: (1.45985%)&lt;BR/&gt; 64344: (1.45985%)&lt;BR/&gt; 64305: (1.45985%)&lt;BR/&gt; 64265: (1.45985%)&gt;];
}
1425--3560[label="1;34pkt 34fpkt"];
1425--4668[label="1;34pkt 34fpkt"];
1425--5235[label="1;34pkt 34fpkt"];
3560--4668[label="1;34pkt 34fpkt"];
3560--5235[label="1;34pkt 34fpkt"];
4668--5235[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="201.136.96.131" src_ip="58.74.73.201" src_port="21"/>
      <filter dst_ip="160.188.106.142" src_ip="58.74.73.201" src_port="21"/>
      <filter dst_ip="160.188.12.93" src_ip="58.74.73.201" src_port="21"/>
    </slice>
    <from sec="1071205472" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.201"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.83.122.202"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1001{
style=filled;
color=gray75;
3570[label="131.233.138.202;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4675[label="131.233.138.202;11pkt 11fpkt", shape=invtriangle, color=brown];
5240[label="131.233.138.202;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1001[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.233.138.202:*, *:1863}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (22.7273%)&lt;BR/&gt; 7001: (9.09091%)&lt;BR/&gt; 1122: (9.09091%)&lt;BR/&gt; 80: (9.09091%)&lt;BR/&gt; 1146: (4.54545%)&gt;];
}
3570--4675[label="1;11pkt 11fpkt"];
3570--5240[label="1;11pkt 11fpkt"];
4675--5240[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="131.233.138.202"/>
    </slice>
    <from sec="1071205564" usec="0"/>
    <to sec="1071206085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.74.6.203"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071205562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1003{
style=filled;
color=gray75;
3574[label="205.1.41.203;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4677[label="205.1.41.203;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1003[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.41.203:1863, 201.120.115.92:2737}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2737: (50%)&lt;BR/&gt; 1863: (50%)&gt;];
}
3574--4677[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.120.115.92" dst_port="2737" src_ip="205.1.41.203" src_port="1863"/>
    </slice>
    <from sec="1071205380" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1004{
style=filled;
color=gray75;
3582[label="200.235.130.204;194pkt 194fpkt", shape=pentagon, color=darkviolet];
4680[label="200.235.130.204;194pkt 194fpkt", shape=invtriangle, color=brown];
stat1004[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.235.130.204:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3582--4680[label="1;194pkt 194fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.235.130.204" src_port="1027"/>
    </slice>
    <from sec="1071205286" usec="0"/>
    <to sec="1071205303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1005{
style=filled;
color=gray75;
3593[label="201.57.86.206;225pkt 225fpkt", shape=pentagon, color=darkviolet];
4686[label="201.57.86.206;225pkt 225fpkt", shape=invtriangle, color=brown];
stat1005[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.57.86.206:3087, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3087: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
3593--4686[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="201.57.86.206" src_port="3087"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1006{
style=filled;
color=gray75;
3599[label="201.143.136.207;183pkt 183fpkt", shape=pentagon, color=darkviolet];
4692[label="201.143.136.207;183pkt 183fpkt", shape=invtriangle, color=brown];
5249[label="201.143.136.207;183pkt 183fpkt", shape=invhouse, color=bisque];
stat1006[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.143.136.207:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3599--4692[label="1;183pkt 183fpkt"];
3599--5249[label="1;183pkt 183fpkt"];
4692--5249[label="1;183pkt 183fpkt"];
</description>
    <slice>
      <filter src_ip="201.143.136.207"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071205653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1007{
style=filled;
color=gray75;
3604[label="211.38.148.208;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4693[label="211.38.148.208;2pkt 2fpkt", shape=invtriangle, color=brown];
5250[label="211.38.148.208;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1007[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.38.148.208:80, 149.207.88.220:1395}[50%]&lt;BR/&gt;{211.38.148.208:80, 149.207.88.223:14943}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 14943: (25%)&lt;BR/&gt; 1395: (25%)&gt;];
}
3604--4693[label="1;2pkt 2fpkt"];
3604--5250[label="1;2pkt 2fpkt"];
4693--5250[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.88.223" dst_port="14943" src_ip="211.38.148.208" src_port="80"/>
      <filter dst_ip="149.207.88.220" dst_port="1395" src_ip="211.38.148.208" src_port="80"/>
    </slice>
    <from sec="1071206044" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.190.132.209"/>
    </slice>
    <from sec="1071205234" usec="0"/>
    <to sec="1071205241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1009{
style=filled;
color=gray75;
1577[label="166.55.113.203;d;217pkt 217fpkt", shape=diamond, color=yellow];
stat1009[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.248.171.90:80, 166.55.113.203:*}[93.5484%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3871%)&lt;BR/&gt; 13945: (0.691244%)&lt;BR/&gt; 11087: (0.691244%)&lt;BR/&gt; 33439: (0.460829%)&lt;BR/&gt; 33438: (0.460829%)&gt;];
}
1577--1772[label="0.0184332;4pkt 4fpkt"];
1577--3613[label="0.0230415;5pkt 5fpkt"];
1577--3722[label="0.00921659;2pkt 2fpkt"];
1577--4698[label="0.0230415;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="166.55.113.203" src_ip="216.248.171.90" src_port="80"/>
    </slice>
    <from sec="1071205244" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1010{
style=filled;
color=gray75;
3622[label="210.189.10.211;404pkt 404fpkt", shape=pentagon, color=darkviolet];
4702[label="210.189.10.211;404pkt 404fpkt", shape=invtriangle, color=brown];
stat1010[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.189.10.211:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3622--4702[label="1;404pkt 404fpkt"];
</description>
    <slice>
      <filter src_ip="210.189.10.211"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.211"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1012{
style=filled;
color=gray75;
3629[label="61.188.36.212;219pkt 219fpkt", shape=pentagon, color=darkviolet];
4708[label="61.188.36.212;219pkt 219fpkt", shape=invtriangle, color=brown];
stat1012[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.188.36.212:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3629--4708[label="1;219pkt 219fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="61.188.36.212" src_port="1027"/>
    </slice>
    <from sec="1071205824" usec="0"/>
    <to sec="1071205858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.142.204.212"/>
    </slice>
    <from sec="1071205240" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.55.162.213"/>
    </slice>
    <from sec="1071205668" usec="0"/>
    <to sec="1071205955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1015{
style=filled;
color=gray75;
3650[label="204.19.182.214;145pkt 145fpkt", shape=pentagon, color=darkviolet];
4720[label="204.19.182.214;145pkt 145fpkt", shape=invtriangle, color=brown];
5263[label="204.19.182.214;145pkt 145fpkt", shape=invhouse, color=bisque];
stat1015[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.19.182.214:0, *:0}[95.8621%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.8621%)&lt;BR/&gt; 80: (2.06897%)&lt;BR/&gt; 63829: (0.344828%)&lt;BR/&gt; 52739: (0.344828%)&lt;BR/&gt; 29696: (0.344828%)&gt;];
}
3650--4720[label="1;145pkt 145fpkt"];
3650--5263[label="1;145pkt 145fpkt"];
4720--5263[label="1;145pkt 145fpkt"];
</description>
    <slice>
      <filter src_ip="204.19.182.214"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1016{
style=filled;
color=gray75;
3659[label="57.16.72.216;224pkt 224fpkt", shape=pentagon, color=darkviolet];
4724[label="57.16.72.216;224pkt 224fpkt", shape=invtriangle, color=brown];
stat1016[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.16.72.216:1038, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1038: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3659--4724[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="57.16.72.216" src_port="1038"/>
    </slice>
    <from sec="1071205952" usec="0"/>
    <to sec="1071205987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.111.5.217"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1018{
style=filled;
color=gray75;
3668[label="205.1.41.217;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4729[label="205.1.41.217;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1018[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.41.217:1863, 201.120.100.74:2572}[33.3333%]&lt;BR/&gt;{205.1.41.217:1863, 201.120.98.80:3705}[33.3333%]&lt;BR/&gt;{205.1.41.217:1863, 145.166.4.158:4842}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4842: (16.6667%)&lt;BR/&gt; 3705: (16.6667%)&lt;BR/&gt; 2572: (16.6667%)&gt;];
}
3668--4729[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.4.158" dst_port="4842" src_ip="205.1.41.217" src_port="1863"/>
      <filter dst_ip="201.120.98.80" dst_port="3705" src_ip="205.1.41.217" src_port="1863"/>
      <filter dst_ip="201.120.100.74" dst_port="2572" src_ip="205.1.41.217" src_port="1863"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1019{
style=filled;
color=gray75;
1223[label="211.100.157.217;s;661pkt 661fpkt", shape=diamond, color=yellow];
3672[label="211.100.157.217;706pkt 706fpkt", shape=pentagon, color=darkviolet];
4732[label="211.100.157.217;706pkt 706fpkt", shape=invtriangle, color=brown];
5270[label="211.100.157.217;706pkt 706fpkt", shape=invhouse, color=bisque];
stat1019[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.100.157.217:0, *:0}[95.8982%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.8618%)&lt;BR/&gt; 80: (2.06909%)&lt;BR/&gt; 63751: (0.0719683%)&lt;BR/&gt; 59852: (0.0719683%)&lt;BR/&gt; 58392: (0.0719683%)&gt;];
}
1223--2105[label="0.00151286;1pkt 1fpkt"];
1223--2107[label="0.00605144;4pkt 4fpkt"];
1223--2110[label="0.00151286;1pkt 1fpkt"];
1223--3672[label="0.998487;660pkt 660fpkt"];
1223--4732[label="0.998487;660pkt 660fpkt"];
1223--5270[label="0.998487;660pkt 660fpkt"];
3672--4732[label="1;706pkt 706fpkt"];
3672--5270[label="1;706pkt 706fpkt"];
4732--5270[label="1;706pkt 706fpkt"];
</description>
    <slice>
      <filter src_ip="211.100.157.217"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1020{
style=filled;
color=gray75;
3674[label="59.132.4.218;408pkt 408fpkt", shape=pentagon, color=darkviolet];
4733[label="59.132.4.218;408pkt 408fpkt", shape=invtriangle, color=brown];
5271[label="59.132.4.218;408pkt 408fpkt", shape=invhouse, color=bisque];
stat1020[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.132.4.218:0, *:0}[91.9118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.9118%)&lt;BR/&gt; 135: (3.30882%)&lt;BR/&gt; 80: (0.735294%)&lt;BR/&gt; 62684: (0.122549%)&lt;BR/&gt; 58493: (0.122549%)&gt;];
}
3674--4733[label="1;408pkt 408fpkt"];
3674--5271[label="1;408pkt 408fpkt"];
4733--5271[label="1;408pkt 408fpkt"];
</description>
    <slice>
      <filter src_ip="59.132.4.218"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1021{
style=filled;
color=gray75;
456[label="149.207.108.172;d;12pkt 12fpkt", shape=diamond, color=yellow];
2778[label="218.22.71.82;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1021[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 149.207.108.172:*}[50%]&lt;BR/&gt;{218.22.71.80:*, 149.207.108.172:*}[50%]&lt;BR/&gt;{*:554, 149.207.108.172:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.0769%)&lt;BR/&gt; 554: (19.2308%)&lt;BR/&gt; 2511: (7.69231%)&lt;BR/&gt; 1755: (7.69231%)&lt;BR/&gt; 2521: (3.84615%)&gt;];
}
456--505[label="1;1pkt 1fpkt"];
456--606[label="0.0833333;1pkt 1fpkt"];
456--2778[label="1;1pkt 1fpkt"];
456--3678[label="0.0833333;1pkt 1fpkt"];
456--4736[label="0.0833333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.108.172" src_ip="218.22.71.80"/>
      <filter dst_ip="149.207.108.172" src_port="80"/>
      <filter dst_ip="149.207.108.172" src_port="554"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071205478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1022{
style=filled;
color=gray75;
1592[label="61.244.214.218;s;236pkt 236fpkt", shape=diamond, color=yellow];
3679[label="61.244.214.218;287pkt 287fpkt", shape=pentagon, color=darkviolet];
4737[label="61.244.214.218;287pkt 287fpkt", shape=invtriangle, color=brown];
5273[label="61.244.214.218;287pkt 287fpkt", shape=invhouse, color=bisque];
stat1022[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.244.214.218:*, *:135}[50.5226%]&lt;BR/&gt;{61.244.214.218:*, *:445}[49.4774%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.2507%)&lt;BR/&gt; 445: (24.7493%)&lt;BR/&gt; 2229: (0.364631%)&lt;BR/&gt; 1977: (0.364631%)&lt;BR/&gt; 1731: (0.364631%)&gt;];
}
1592--2106[label="0.0381356;9pkt 9fpkt"];
1592--2108[label="0.0720339;17pkt 17fpkt"];
1592--2111[label="0.0423729;10pkt 10fpkt"];
1592--2123[label="0.0720339;17pkt 17fpkt"];
1592--2125[label="0.0423729;10pkt 10fpkt"];
1592--2130[label="0.0720339;17pkt 17fpkt"];
1592--2131[label="0.0423729;10pkt 10fpkt"];
1592--3679[label="1;236pkt 236fpkt"];
1592--4737[label="1;236pkt 236fpkt"];
1592--5273[label="1;236pkt 236fpkt"];
3679--4737[label="1;287pkt 287fpkt"];
3679--5273[label="1;287pkt 287fpkt"];
4737--5273[label="1;287pkt 287fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="61.244.214.218"/>
      <filter dst_port="445" src_ip="61.244.214.218"/>
    </slice>
    <from sec="1071205241" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1023{
style=filled;
color=gray75;
3682[label="78.45.161.219;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4740[label="78.45.161.219;17pkt 17fpkt", shape=invtriangle, color=brown];
stat1023[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.45.161.219:80, 149.207.88.220:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39700: (2.94118%)&lt;BR/&gt; 38103: (2.94118%)&lt;BR/&gt; 29685: (2.94118%)&lt;BR/&gt; 26599: (2.94118%)&gt;];
}
3682--4740[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.88.220" src_ip="78.45.161.219" src_port="80"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071205829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1024{
style=filled;
color=gray75;
3685[label="219.91.226.219;236pkt 236fpkt", shape=pentagon, color=darkviolet];
4741[label="219.91.226.219;236pkt 236fpkt", shape=invtriangle, color=brown];
stat1024[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.91.226.219:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3685--4741[label="1;236pkt 236fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="219.91.226.219" src_port="1028"/>
    </slice>
    <from sec="1071205362" usec="0"/>
    <to sec="1071205425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.1.41.220"/>
    </slice>
    <from sec="1071205249" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.80.141.220"/>
    </slice>
    <from sec="1071205242" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1027{
style=filled;
color=gray75;
3699[label="154.32.67.221;59pkt 59fpkt", shape=pentagon, color=darkviolet];
4747[label="154.32.67.221;59pkt 59fpkt", shape=invtriangle, color=brown];
stat1027[shape=component, label=&lt;Rules:&lt;BR/&gt;{154.32.67.221:80, 149.206.232.65:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1391: (0.847458%)&lt;BR/&gt; 1390: (0.847458%)&lt;BR/&gt; 1389: (0.847458%)&lt;BR/&gt; 1388: (0.847458%)&gt;];
}
3699--4747[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.232.65" src_ip="154.32.67.221" src_port="80"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071205605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.221"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1029{
style=filled;
color=gray75;
1362[label="61.247.150.222;s;226pkt 226fpkt", shape=diamond, color=yellow];
3710[label="61.247.150.222;239pkt 239fpkt", shape=pentagon, color=darkviolet];
4754[label="61.247.150.222;239pkt 239fpkt", shape=invtriangle, color=brown];
stat1029[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.247.150.222:*, *:445}[51.8828%]&lt;BR/&gt;{61.247.150.222:*, *:135}[48.1172%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.9233%)&lt;BR/&gt; 135: (24.0767%)&lt;BR/&gt; 2517: (0.426136%)&lt;BR/&gt; 2089: (0.426136%)&lt;BR/&gt; 1884: (0.426136%)&gt;];
}
1362--2106[label="0.0265487;6pkt 6fpkt"];
1362--2108[label="0.0221239;5pkt 5fpkt"];
1362--2111[label="0.0221239;5pkt 5fpkt"];
1362--2123[label="0.0221239;5pkt 5fpkt"];
1362--2125[label="0.0221239;5pkt 5fpkt"];
1362--2130[label="0.0221239;5pkt 5fpkt"];
1362--2131[label="0.0221239;5pkt 5fpkt"];
1362--3710[label="1;226pkt 226fpkt"];
1362--4754[label="1;226pkt 226fpkt"];
3710--4754[label="1;239pkt 239fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="61.247.150.222"/>
      <filter dst_port="135" src_ip="61.247.150.222"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1030{
style=filled;
color=gray75;
3717[label="210.145.103.223;223pkt 223fpkt", shape=pentagon, color=darkviolet];
4758[label="210.145.103.223;223pkt 223fpkt", shape=invtriangle, color=brown];
stat1030[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.145.103.223:1034, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3717--4758[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="210.145.103.223" src_port="1034"/>
    </slice>
    <from sec="1071205549" usec="0"/>
    <to sec="1071205583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.223"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1032{
style=filled;
color=gray75;
3728[label="209.97.65.224;107pkt 107fpkt", shape=pentagon, color=darkviolet];
4766[label="209.97.65.224;107pkt 107fpkt", shape=invtriangle, color=brown];
5289[label="209.97.65.224;107pkt 107fpkt", shape=invhouse, color=bisque];
stat1032[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.97.65.224:0, *:0}[91.5888%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.5888%)&lt;BR/&gt; 80: (2.80374%)&lt;BR/&gt; 135: (1.40187%)&lt;BR/&gt; 32051: (0.46729%)&lt;BR/&gt; 31795: (0.46729%)&gt;];
}
3728--4766[label="1;107pkt 107fpkt"];
3728--5289[label="1;107pkt 107fpkt"];
4766--5289[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter src_ip="209.97.65.224"/>
    </slice>
    <from sec="1071205231" usec="0"/>
    <to sec="1071205978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1033{
style=filled;
color=gray75;
995[label="149.206.219.200;d;1pkt 1fpkt", shape=diamond, color=yellow];
996[label="209.84.3.225;s;2pkt 2fpkt", shape=diamond, color=yellow];
3733[label="209.84.3.225;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4769[label="209.84.3.225;2pkt 2fpkt", shape=invtriangle, color=brown];
5291[label="209.84.3.225;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1033[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.84.3.225:8292, 149.206.211.9:8277}[50%]&lt;BR/&gt;{209.84.3.225:8292, 149.206.219.200:8277}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (50%)&lt;BR/&gt; 8277: (50%)&gt;];
}
995--996[label="1;1pkt 1fpkt"];
995--3733[label="1;1pkt 1fpkt"];
995--4769[label="1;1pkt 1fpkt"];
995--5291[label="1;1pkt 1fpkt"];
996--3733[label="1;2pkt 2fpkt"];
996--4769[label="1;2pkt 2fpkt"];
996--5291[label="1;2pkt 2fpkt"];
3733--4769[label="1;2pkt 2fpkt"];
3733--5291[label="1;2pkt 2fpkt"];
4769--5291[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.219.200" dst_port="8277" src_ip="209.84.3.225" src_port="8292"/>
      <filter dst_ip="149.206.211.9" dst_port="8277" src_ip="209.84.3.225" src_port="8292"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1034{
style=filled;
color=gray75;
3741[label="216.192.177.225;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4774[label="216.192.177.225;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1034[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.192.177.225:80, 149.206.106.37:4412}[50%]&lt;BR/&gt;{216.192.177.225:80, 149.206.106.37:4413}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4413: (25%)&lt;BR/&gt; 4412: (25%)&gt;];
}
3741--4774[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.106.37" dst_port="4413" src_ip="216.192.177.225" src_port="80"/>
      <filter dst_ip="149.206.106.37" dst_port="4412" src_ip="216.192.177.225" src_port="80"/>
    </slice>
    <from sec="1071205331" usec="0"/>
    <to sec="1071205345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1035{
style=filled;
color=gray75;
3742[label="77.118.200.225;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4775[label="77.118.200.225;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1035[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.118.200.225:80, 149.207.124.197:2731}[50%]&lt;BR/&gt;{77.118.200.225:80, 149.207.124.197:2736}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2736: (25%)&lt;BR/&gt; 2731: (25%)&gt;];
}
3742--4775[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.124.197" dst_port="2736" src_ip="77.118.200.225" src_port="80"/>
      <filter dst_ip="149.207.124.197" dst_port="2731" src_ip="77.118.200.225" src_port="80"/>
    </slice>
    <from sec="1071205361" usec="0"/>
    <to sec="1071205876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1037{
style=filled;
color=gray75;
3752[label="211.100.115.227;147pkt 147fpkt", shape=pentagon, color=darkviolet];
4783[label="211.100.115.227;147pkt 147fpkt", shape=invtriangle, color=brown];
5297[label="211.100.115.227;147pkt 147fpkt", shape=invhouse, color=bisque];
stat1037[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.100.115.227:0, *:0}[96.5986%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.5986%)&lt;BR/&gt; 80: (1.70068%)&lt;BR/&gt; 26877: (0.340136%)&lt;BR/&gt; 13881: (0.340136%)&lt;BR/&gt; 11353: (0.340136%)&gt;];
}
3752--4783[label="1;147pkt 147fpkt"];
3752--5297[label="1;147pkt 147fpkt"];
4783--5297[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter src_ip="211.100.115.227"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1038{
style=filled;
color=gray75;
3757[label="77.77.44.229;167pkt 167fpkt", shape=pentagon, color=darkviolet];
4787[label="77.77.44.229;167pkt 167fpkt", shape=invtriangle, color=brown];
stat1038[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.77.44.229:0, *:0}[95.2096%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.2096%)&lt;BR/&gt; 80: (1.49701%)&lt;BR/&gt; 135: (0.898204%)&lt;BR/&gt; 40344: (0.299401%)&lt;BR/&gt; 32499: (0.299401%)&gt;];
}
3757--4787[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter src_ip="77.77.44.229"/>
    </slice>
    <from sec="1071205208" usec="0"/>
    <to sec="1071206071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1039{
style=filled;
color=gray75;
3761[label="58.99.3.230;99pkt 99fpkt", shape=pentagon, color=darkviolet];
4790[label="58.99.3.230;99pkt 99fpkt", shape=invtriangle, color=brown];
stat1039[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.99.3.230:0, *:0}[95.9596%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.9596%)&lt;BR/&gt; 135: (1.51515%)&lt;BR/&gt; 3817: (0.505051%)&lt;BR/&gt; 2040: (0.505051%)&lt;BR/&gt; 1826: (0.505051%)&gt;];
}
3761--4790[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter src_ip="58.99.3.230"/>
    </slice>
    <from sec="1071205214" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.231"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1041{
style=filled;
color=gray75;
3776[label="208.201.180.232;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4796[label="208.201.180.232;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1041[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.201.180.232:80, 131.233.160.167:1779}[33.3333%]&lt;BR/&gt;{208.201.180.232:80, 160.188.106.27:56817}[33.3333%]&lt;BR/&gt;{208.201.180.232:80, 160.188.106.27:57610}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57610: (16.6667%)&lt;BR/&gt; 56817: (16.6667%)&lt;BR/&gt; 1779: (16.6667%)&gt;];
}
3776--4796[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.106.27" dst_port="57610" src_ip="208.201.180.232" src_port="80"/>
      <filter dst_ip="160.188.106.27" dst_port="56817" src_ip="208.201.180.232" src_port="80"/>
      <filter dst_ip="131.233.160.167" dst_port="1779" src_ip="208.201.180.232" src_port="80"/>
    </slice>
    <from sec="1071205249" usec="0"/>
    <to sec="1071206072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1042{
style=filled;
color=gray75;
1505[label="56.10.233.232;s;199pkt 199fpkt", shape=diamond, color=yellow];
3777[label="56.10.233.232;224pkt 224fpkt", shape=pentagon, color=darkviolet];
4797[label="56.10.233.232;224pkt 224fpkt", shape=invtriangle, color=brown];
5305[label="56.10.233.232;224pkt 224fpkt", shape=invhouse, color=bisque];
stat1042[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.10.233.232:*, *:135}[50.8929%]&lt;BR/&gt;{56.10.233.232:*, *:445}[49.1071%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.3731%)&lt;BR/&gt; 445: (24.6269%)&lt;BR/&gt; 4759: (0.459242%)&lt;BR/&gt; 4670: (0.459242%)&lt;BR/&gt; 3514: (0.459242%)&gt;];
}
1505--2106[label="0.0552764;11pkt 11fpkt"];
1505--2108[label="0.0452261;9pkt 9fpkt"];
1505--2111[label="0.110553;22pkt 22fpkt"];
1505--2123[label="0.0452261;9pkt 9fpkt"];
1505--2125[label="0.110553;22pkt 22fpkt"];
1505--2130[label="0.0452261;9pkt 9fpkt"];
1505--2131[label="0.110553;22pkt 22fpkt"];
1505--3777[label="1;199pkt 199fpkt"];
1505--4797[label="1;199pkt 199fpkt"];
1505--5305[label="1;199pkt 199fpkt"];
3777--4797[label="1;224pkt 224fpkt"];
3777--5305[label="1;224pkt 224fpkt"];
4797--5305[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="56.10.233.232"/>
      <filter dst_port="445" src_ip="56.10.233.232"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.233"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1044{
style=filled;
color=gray75;
3800[label="205.1.41.236;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4811[label="205.1.41.236;2pkt 2fpkt", shape=invtriangle, color=brown];
5311[label="205.1.41.236;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1044[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.41.236:1863, 145.166.0.0:1077}[50%]&lt;BR/&gt;{205.1.41.236:1863, 145.166.0.149:1192}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 1192: (25%)&lt;BR/&gt; 1077: (25%)&gt;];
}
3800--4811[label="1;2pkt 2fpkt"];
3800--5311[label="1;2pkt 2fpkt"];
4811--5311[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.0.149" dst_port="1192" src_ip="205.1.41.236" src_port="1863"/>
      <filter dst_ip="145.166.0.0" dst_port="1077" src_ip="205.1.41.236" src_port="1863"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.236"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1046{
style=filled;
color=gray75;
3816[label="201.120.160.238;36pkt 36fpkt", shape=pentagon, color=darkviolet];
4820[label="201.120.160.238;36pkt 36fpkt", shape=invtriangle, color=brown];
stat1046[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.120.160.238:0, *:0}[66.6667%]&lt;BR/&gt;{201.120.160.238:80, *:*}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (66.6667%)&lt;BR/&gt; 80: (13.8889%)&lt;BR/&gt; 2001: (2.77778%)&lt;BR/&gt; 43586: (1.38889%)&lt;BR/&gt; 4945: (1.38889%)&gt;];
}
3816--4820[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter src_ip="201.120.160.238" src_port="80"/>
      <filter src_ip="201.120.160.238"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1048{
style=filled;
color=gray75;
1486[label="210.172.241.244;s;177pkt 177fpkt", shape=diamond, color=yellow];
3843[label="210.172.241.244;190pkt 190fpkt", shape=pentagon, color=darkviolet];
4837[label="210.172.241.244;190pkt 190fpkt", shape=invtriangle, color=brown];
5322[label="210.172.241.244;190pkt 190fpkt", shape=invhouse, color=bisque];
stat1048[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.172.241.244:*, *:135}[50.5263%]&lt;BR/&gt;{210.172.241.244:*, *:445}[49.4737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (25.1004%)&lt;BR/&gt; 445: (24.8996%)&lt;BR/&gt; 4683: (0.535475%)&lt;BR/&gt; 3871: (0.535475%)&lt;BR/&gt; 3050: (0.535475%)&gt;];
}
1486--2106[label="0.039548;7pkt 7fpkt"];
1486--2108[label="0.0282486;5pkt 5fpkt"];
1486--2111[label="0.0225989;4pkt 4fpkt"];
1486--2123[label="0.0282486;5pkt 5fpkt"];
1486--2125[label="0.0225989;4pkt 4fpkt"];
1486--2130[label="0.0282486;5pkt 5fpkt"];
1486--2131[label="0.0225989;4pkt 4fpkt"];
1486--3843[label="1;177pkt 177fpkt"];
1486--4837[label="1;177pkt 177fpkt"];
1486--5322[label="1;177pkt 177fpkt"];
3843--4837[label="1;190pkt 190fpkt"];
3843--5322[label="1;190pkt 190fpkt"];
4837--5322[label="1;190pkt 190fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="210.172.241.244"/>
      <filter dst_port="445" src_ip="210.172.241.244"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1049{
style=filled;
color=gray75;
3846[label="61.65.161.245;122pkt 122fpkt", shape=pentagon, color=darkviolet];
4839[label="61.65.161.245;122pkt 122fpkt", shape=invtriangle, color=brown];
stat1049[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.65.161.245:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3682: (0.819672%)&lt;BR/&gt; 1795: (0.819672%)&lt;BR/&gt; 4582: (0.409836%)&lt;BR/&gt; 4533: (0.409836%)&gt;];
}
3846--4839[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="61.65.161.245"/>
    </slice>
    <from sec="1071205239" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.245"/>
    </slice>
    <from sec="1071205213" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.229.236.245"/>
    </slice>
    <from sec="1071205217" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06432,1.59698,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1052{
style=filled;
color=gray75;
561[label="218.91.100.246;s;1213pkt 1213fpkt", shape=diamond, color=yellow];
1716[label="218.91.100.246;s;953pkt 953fpkt", shape=hexagon, color=black];
3854[label="218.91.100.246;1310pkt 1310fpkt", shape=pentagon, color=darkviolet];
4845[label="218.91.100.246;1310pkt 1310fpkt", shape=invtriangle, color=brown];
5327[label="218.91.100.246;1310pkt 1310fpkt", shape=invhouse, color=bisque];
stat1052[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.91.100.246:8868, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8868: (50%)&lt;BR/&gt; 52008: (0.082021%)&lt;BR/&gt; 48020: (0.082021%)&lt;BR/&gt; 39200: (0.082021%)&lt;BR/&gt; 35253: (0.082021%)&gt;];
}
561--1716[label="1;953pkt 953fpkt"];
561--3854[label="1;1213pkt 1213fpkt"];
561--4845[label="1;1213pkt 1213fpkt"];
561--5327[label="1;1213pkt 1213fpkt"];
1716--3854[label="1;953pkt 953fpkt"];
1716--4845[label="1;953pkt 953fpkt"];
1716--5327[label="1;953pkt 953fpkt"];
3854--4845[label="1;1310pkt 1310fpkt"];
3854--5327[label="1;1310pkt 1310fpkt"];
4845--5327[label="1;1310pkt 1310fpkt"];
</description>
    <slice>
      <filter src_ip="218.91.100.246" src_port="8868"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1053{
style=filled;
color=gray75;
3857[label="78.96.135.247;160pkt 160fpkt", shape=pentagon, color=darkviolet];
4846[label="78.96.135.247;160pkt 160fpkt", shape=invtriangle, color=brown];
stat1053[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.96.135.247:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3857--4846[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="78.96.135.247" src_port="1027"/>
    </slice>
    <from sec="1071205277" usec="0"/>
    <to sec="1071205315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1054{
style=filled;
color=gray75;
3860[label="205.1.41.248;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4848[label="205.1.41.248;4pkt 4fpkt", shape=invtriangle, color=brown];
5329[label="205.1.41.248;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1054[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.1.41.248:1863, 200.180.3.71:4227}[25%]&lt;BR/&gt;{205.1.41.248:1863, 149.206.22.64:1247}[25%]&lt;BR/&gt;{205.1.41.248:1863, 149.206.22.64:1248}[25%]&lt;BR/&gt;{205.1.41.248:1863, 149.206.22.64:1363}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4227: (12.5%)&lt;BR/&gt; 1363: (12.5%)&lt;BR/&gt; 1248: (12.5%)&lt;BR/&gt; 1247: (12.5%)&gt;];
}
3860--4848[label="1;4pkt 4fpkt"];
3860--5329[label="1;4pkt 4fpkt"];
4848--5329[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.22.64" dst_port="1363" src_ip="205.1.41.248" src_port="1863"/>
      <filter dst_ip="149.206.22.64" dst_port="1248" src_ip="205.1.41.248" src_port="1863"/>
      <filter dst_ip="149.206.22.64" dst_port="1247" src_ip="205.1.41.248" src_port="1863"/>
      <filter dst_ip="200.180.3.71" dst_port="4227" src_ip="205.1.41.248" src_port="1863"/>
    </slice>
    <from sec="1071205324" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619426,1.65292,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.184.221.250"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.790676,1.649,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1056{
style=filled;
color=gray75;
3875[label="35.215.126.251;113pkt 113fpkt", shape=pentagon, color=darkviolet];
4853[label="35.215.126.251;113pkt 113fpkt", shape=invtriangle, color=brown];
5332[label="35.215.126.251;113pkt 113fpkt", shape=invhouse, color=bisque];
stat1056[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.215.126.251:1034, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3875--4853[label="1;113pkt 113fpkt"];
3875--5332[label="1;113pkt 113fpkt"];
4853--5332[label="1;113pkt 113fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="35.215.126.251" src_port="1034"/>
    </slice>
    <from sec="1071205318" usec="0"/>
    <to sec="1071205349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1057{
style=filled;
color=gray75;
3876[label="216.170.191.251;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4854[label="216.170.191.251;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1057[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.170.191.251:80, 201.118.239.88:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 22705: (3.125%)&lt;BR/&gt; 22700: (3.125%)&lt;BR/&gt; 22653: (3.125%)&lt;BR/&gt; 22614: (3.125%)&gt;];
}
3876--4854[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="201.118.239.88" src_ip="216.170.191.251" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1058{
style=filled;
color=gray75;
3877[label="219.66.201.251;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4855[label="219.66.201.251;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1058[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.66.201.251:80, 131.233.163.27:12997}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12997: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3877--4855[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.233.163.27" dst_port="12997" src_ip="219.66.201.251" src_port="80"/>
    </slice>
    <from sec="1071206062" usec="0"/>
    <to sec="1071206088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.53288,1.60027,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1059{
style=filled;
color=gray75;
3893[label="32.219.85.255;128pkt 128fpkt", shape=pentagon, color=darkviolet];
4863[label="32.219.85.255;128pkt 128fpkt", shape=invtriangle, color=brown];
stat1059[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.219.85.255:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63412: (0.78125%)&lt;BR/&gt; 65368: (0.390625%)&lt;BR/&gt; 65353: (0.390625%)&lt;BR/&gt; 64807: (0.390625%)&lt;BR/&gt; 64375: (0.390625%)&gt;];
}
3893--4863[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter src_ip="32.219.85.255"/>
    </slice>
    <from sec="1071205215" usec="0"/>
    <to sec="1071205338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.237.197.3"/>
    </slice>
    <from sec="1071205537" usec="0"/>
    <to sec="1071205778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="101.35.193.7"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.17.75.17"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.106.181.18"/>
    </slice>
    <from sec="1071205374" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1064{
style=filled;
color=gray75;
1278[label="145.71.142.216;d;172pkt 172fpkt", shape=diamond, color=yellow];
1516[label="149.207.80.124;d;83pkt 83fpkt", shape=diamond, color=yellow];
stat1064[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 145.71.142.216:53}[61.9608%]&lt;BR/&gt;{*:53, 149.207.80.124:58667}[26.2745%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (77.6471%)&lt;BR/&gt; 58667: (13.1373%)&lt;BR/&gt; 0: (3.52941%)&lt;BR/&gt; 25: (1.56863%)&lt;BR/&gt; 113: (0.588235%)&gt;];
}
1278--1453[label="0.333333;1pkt 1fpkt"];
1278--2294[label="0.0149254;1pkt 1fpkt"];
1278--2298[label="0.0416667;1pkt 1fpkt"];
1278--2301[label="0.0277778;1pkt 1fpkt"];
1278--2396[label="0.111111;1pkt 1fpkt"];
1278--2714[label="0.0142857;1pkt 1fpkt"];
1278--2765[label="0.025;1pkt 1fpkt"];
1278--3015[label="0.02;1pkt 1fpkt"];
1278--3998[label="0.0147059;1pkt 1fpkt"];
1278--4381[label="0.02;1pkt 1fpkt"];
1278--4919[label="0.0149254;1pkt 1fpkt"];
1278--5097[label="0.02;1pkt 1fpkt"];
1516--2013[label="0.0120482;1pkt 1fpkt"];
1516--2294[label="0.0149254;1pkt 1fpkt"];
1516--2301[label="0.0277778;1pkt 1fpkt"];
1516--2396[label="0.111111;1pkt 1fpkt"];
1516--2467[label="0.0555556;1pkt 1fpkt"];
1516--2674[label="0.04;1pkt 1fpkt"];
1516--2714[label="0.0142857;1pkt 1fpkt"];
1516--2765[label="0.025;1pkt 1fpkt"];
1516--2988[label="0.0263158;1pkt 1fpkt"];
1516--3015[label="0.02;1pkt 1fpkt"];
1516--3260[label="0.0263158;1pkt 1fpkt"];
1516--3338[label="0.0238095;1pkt 1fpkt"];
1516--3730[label="0.142857;1pkt 1fpkt"];
1516--3858[label="0.0172414;1pkt 1fpkt"];
1516--3998[label="0.0147059;1pkt 1fpkt"];
1516--4090[label="0.0588235;1pkt 1fpkt"];
1516--4381[label="0.02;1pkt 1fpkt"];
1516--4767[label="0.142857;1pkt 1fpkt"];
1516--4847[label="0.0172414;1pkt 1fpkt"];
1516--4919[label="0.0149254;1pkt 1fpkt"];
1516--5097[label="0.02;1pkt 1fpkt"];
1516--5328[label="0.0172414;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.71.142.216" dst_port="53" src_port="53"/>
      <filter dst_ip="149.207.80.124" dst_port="58667" src_port="53"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.188.73.24"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.39.212.25"/>
    </slice>
    <from sec="1071205291" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="59.138.87.26"/>
    </slice>
    <from sec="1071205430" usec="0"/>
    <to sec="1071205440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.87.59.32"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.246.91.37"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071205521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="130.106.247.38"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.84.115.42"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.168.69.46"/>
    </slice>
    <from sec="1071205792" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="78.145.112.48"/>
    </slice>
    <from sec="1071205652" usec="0"/>
    <to sec="1071206076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.79112,1.60311,010,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1074{
style=filled;
color=gray75;
1370[label="57.140.99.53;s;205pkt 205fpkt", shape=diamond, color=yellow];
2564[label="57.140.99.53;228pkt 228fpkt", shape=pentagon, color=darkviolet];
4993[label="57.140.99.53;222pkt 222fpkt", shape=invhouse, color=bisque];
stat1074[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.140.99.53:*, *:135}[50%]&lt;BR/&gt;{57.140.99.53:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.2672%)&lt;BR/&gt; 135: (24.7328%)&lt;BR/&gt; 1679: (0.458015%)&lt;BR/&gt; 1903: (0.381679%)&lt;BR/&gt; 4925: (0.229008%)&gt;];
}
1370--2106[label="0.0243902;5pkt 5fpkt"];
1370--2108[label="0.0292683;6pkt 6fpkt"];
1370--2111[label="0.00487805;1pkt 1fpkt"];
1370--2123[label="0.0292683;6pkt 6fpkt"];
1370--2125[label="0.00487805;1pkt 1fpkt"];
1370--2130[label="0.0292683;6pkt 6fpkt"];
1370--2131[label="0.00487805;1pkt 1fpkt"];
1370--2564[label="1;205pkt 205fpkt"];
1370--4993[label="1;205pkt 205fpkt"];
2564--4993[label="1;222pkt 222fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="57.140.99.53"/>
      <filter dst_port="135" src_ip="57.140.99.53"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.721687,1.65642,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1075{
style=filled;
color=gray75;
2627[label="57.81.46.62;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5013[label="57.81.46.62;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1075[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.81.46.62:80, 201.120.165.63:54823}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54823: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2627--5013[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.120.165.63" dst_port="54823" src_ip="57.81.46.62" src_port="80"/>
    </slice>
    <from sec="1071206079" usec="0"/>
    <to sec="1071206096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.91.101.62"/>
    </slice>
    <from sec="1071205218" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.115.208.67"/>
    </slice>
    <from sec="1071205672" usec="0"/>
    <to sec="1071205724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1078{
style=filled;
color=gray75;
1406[label="145.166.4.40;d;32pkt 32fpkt", shape=diamond, color=yellow];
2717[label="78.21.20.74;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4233[label="78.21.20.74;9pkt 9fpkt", shape=invtriangle, color=brown];
5038[label="78.21.20.74;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1078[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.21.20.74:80, 145.166.4.40:*}[28.125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.9153%)&lt;BR/&gt; 8000: (4.23729%)&lt;BR/&gt; 4000: (4.23729%)&lt;BR/&gt; 1534: (3.38983%)&lt;BR/&gt; 1532: (3.38983%)&gt;];
}
1406--2103[label="0.03125;1pkt 1fpkt"];
1406--2176[label="0.03125;1pkt 1fpkt"];
1406--2370[label="0.1;1pkt 1fpkt"];
1406--2717[label="1;9pkt 9fpkt"];
1406--3722[label="0.09375;3pkt 3fpkt"];
1406--4041[label="0.1;1pkt 1fpkt"];
1406--4233[label="1;9pkt 9fpkt"];
1406--5038[label="1;9pkt 9fpkt"];
2717--4233[label="1;9pkt 9fpkt"];
2717--5038[label="1;9pkt 9fpkt"];
4233--5038[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="145.166.4.40" src_ip="78.21.20.74" src_port="80"/>
    </slice>
    <from sec="1071205219" usec="0"/>
    <to sec="1071206025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.172.17.82"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071205465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.533539,1.55293,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1080{
style=filled;
color=gray75;
482[label="149.207.51.173;d;526pkt 526fpkt", shape=diamond, color=yellow];
488[label="212.80.144.187;s;544pkt 544fpkt", shape=diamond, color=yellow];
3481[label="212.80.144.187;544pkt 544fpkt", shape=pentagon, color=darkviolet];
stat1080[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.80.144.187:80, 149.207.51.173:*}[96.7972%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64092: (0.0929368%)&lt;BR/&gt; 64086: (0.0929368%)&lt;BR/&gt; 64080: (0.0929368%)&lt;BR/&gt; 64078: (0.0929368%)&gt;];
}
482--488[label="0.965779;508pkt 508fpkt"];
482--755[label="0.0204082;4pkt 4fpkt"];
482--1449[label="0.666667;2pkt 2fpkt"];
482--1804[label="0.0243902;4pkt 4fpkt"];
482--2103[label="0.0209125;11pkt 11fpkt"];
482--2781[label="0.032967;3pkt 3fpkt"];
482--3337[label="0.0171103;9pkt 9fpkt"];
482--3364[label="0.0193237;4pkt 4fpkt"];
482--3481[label="0.965779;508pkt 508fpkt"];
482--4266[label="0.032967;3pkt 3fpkt"];
482--5053[label="0.032967;3pkt 3fpkt"];
488--2103[label="0.00735294;4pkt 4fpkt"];
488--3481[label="1;544pkt 544fpkt"];
</description>
    <slice>
      <filter dst_ip="149.207.51.173" src_ip="212.80.144.187" src_port="80"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071205941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.149.162.85"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.55.161.90"/>
    </slice>
    <from sec="1071205426" usec="0"/>
    <to sec="1071205670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.146.148.93"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="78.118.174.97"/>
    </slice>
    <from sec="1071205206" usec="0"/>
    <to sec="1071205758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,002,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1085{
style=filled;
color=gray75;
1161[label="145.166.0.164;d;33pkt 33fpkt", shape=diamond, color=yellow];
2444[label="198.214.48.38;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3145[label="205.1.41.138;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3839[label="205.1.41.244;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4362[label="200.235.130.111;154pkt 154fpkt", shape=invtriangle, color=brown];
4833[label="205.1.41.244;5pkt 5fpkt", shape=invtriangle, color=brown];
5090[label="200.235.130.111;154pkt 154fpkt", shape=invhouse, color=bisque];
5319[label="205.1.41.244;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1085[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.235.130.111:*, *:137}[79.3814%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (40.9814%)&lt;BR/&gt; 80: (5.57029%)&lt;BR/&gt; 1863: (3.31565%)&lt;BR/&gt; 1088: (0.928382%)&lt;BR/&gt; 51014: (0.530504%)&gt;];
}
1161--1281[label="0.0606061;2pkt 2fpkt"];
1161--1691[label="0.0909091;3pkt 3fpkt"];
1161--1772[label="0.030303;1pkt 1fpkt"];
1161--1962[label="0.0606061;2pkt 2fpkt"];
1161--2232[label="0.142857;1pkt 1fpkt"];
1161--2444[label="1;16pkt 16fpkt"];
1161--2973[label="0.030303;1pkt 1fpkt"];
1161--3040[label="0.0909091;3pkt 3fpkt"];
1161--3145[label="0.2;1pkt 1fpkt"];
1161--3613[label="0.030303;1pkt 1fpkt"];
1161--3839[label="0.2;1pkt 1fpkt"];
1161--3961[label="0.142857;1pkt 1fpkt"];
1161--4362[label="0.030303;1pkt 1fpkt"];
1161--4392[label="0.0909091;3pkt 3fpkt"];
1161--4698[label="0.030303;1pkt 1fpkt"];
1161--4833[label="0.2;1pkt 1fpkt"];
1161--4901[label="0.142857;1pkt 1fpkt"];
1161--5090[label="0.030303;1pkt 1fpkt"];
1161--5319[label="0.2;1pkt 1fpkt"];
3839--4833[label="1;5pkt 5fpkt"];
3839--5319[label="1;5pkt 5fpkt"];
4362--5090[label="1;154pkt 154fpkt"];
4833--5319[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="200.235.130.111"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.54.18.123"/>
    </slice>
    <from sec="1071205211" usec="0"/>
    <to sec="1071206085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.0.125.128"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.854522,1.59545,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1088{
style=filled;
color=gray75;
510[label="149.206.205.68;d;189pkt 189fpkt", shape=diamond, color=yellow];
519[label="58.67.146.2;s;113pkt 113fpkt", shape=diamond, color=yellow];
1097[label="205.1.41.210;s;6pkt 6fpkt", shape=diamond, color=yellow];
2156[label="58.67.146.2;248pkt 248fpkt", shape=pentagon, color=darkviolet];
3914[label="58.67.146.2;248pkt 248fpkt", shape=invtriangle, color=brown];
4872[label="58.67.146.2;249pkt 249fpkt", shape=invhouse, color=bisque];
stat1088[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.67.146.2:80, *:*}[63.7532%]&lt;BR/&gt;{58.67.146.133:80, 149.206.205.68:*}[22.6221%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6201%)&lt;BR/&gt; 1863: (0.42735%)&lt;BR/&gt; 61463: (0.189934%)&lt;BR/&gt; 61462: (0.189934%)&lt;BR/&gt; 61459: (0.189934%)&gt;];
}
510--518[label="0.704;88pkt 88fpkt"];
510--614[label="0.026455;5pkt 5fpkt"];
510--766[label="0.116402;22pkt 22fpkt"];
510--1158[label="0.00757576;1pkt 1fpkt"];
510--1576[label="0.0136986;1pkt 1fpkt"];
510--1665[label="1;130pkt 130fpkt"];
510--2103[label="0.111111;21pkt 21fpkt"];
510--2156[label="0.291005;55pkt 55fpkt"];
510--2811[label="0.116402;22pkt 22fpkt"];
510--3107[label="0.633094;88pkt 88fpkt"];
510--3339[label="0.0196078;1pkt 1fpkt"];
510--3433[label="0.0392157;2pkt 2fpkt"];
510--3441[label="0.00704225;1pkt 1fpkt"];
510--3471[label="0.0208333;1pkt 1fpkt"];
510--3535[label="0.0952381;2pkt 2fpkt"];
510--3632[label="0.0357143;2pkt 2fpkt"];
510--3914[label="0.291005;55pkt 55fpkt"];
510--4547[label="0.0196078;1pkt 1fpkt"];
510--4604[label="0.0392157;2pkt 2fpkt"];
510--4622[label="0.0208333;1pkt 1fpkt"];
510--4710[label="0.0357143;2pkt 2fpkt"];
510--4872[label="0.291005;55pkt 55fpkt"];
510--5115[label="0.637681;88pkt 88fpkt"];
510--5209[label="0.0208333;1pkt 1fpkt"];
510--5258[label="0.0357143;2pkt 2fpkt"];
519--1162[label="0.719298;41pkt 41fpkt"];
519--1170[label="0.693548;43pkt 43fpkt"];
519--2156[label="1;113pkt 113fpkt"];
519--3914[label="1;113pkt 113fpkt"];
519--4872[label="1;113pkt 113fpkt"];
1097--1162[label="0.166667;1pkt 1fpkt"];
1097--1961[label="0.166667;1pkt 1fpkt"];
1097--2027[label="1;6pkt 6fpkt"];
2156--3914[label="1;248pkt 248fpkt"];
2156--4872[label="1;248pkt 248fpkt"];
3914--4872[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter src_ip="58.67.146.2" src_port="80"/>
      <filter dst_ip="149.206.205.68" src_ip="58.67.146.133" src_port="80"/>
    </slice>
    <from sec="1071205201" usec="0"/>
    <to sec="1071206064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.89.182.150"/>
    </slice>
    <from sec="1071205209" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.184.221.158"/>
    </slice>
    <from sec="1071205205" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.184.221.165"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.73.213.169"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="76.0.106.171"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.184.221.171"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.52.91.173"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="78.116.11.175"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.214.193.175"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.73.162.191"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="78.34.72.198"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071206098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.83.122.202"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.74.6.203"/>
    </slice>
    <from sec="1071205204" usec="0"/>
    <to sec="1071205562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.623699,1.54502,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1102{
style=filled;
color=gray75;
460[label="201.175.60.157;d;418pkt 418fpkt", shape=diamond, color=yellow];
2423[label="205.1.42.36;45pkt 45fpkt", shape=pentagon, color=darkviolet];
3702[label="210.67.176.221;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4068[label="205.1.42.36;46pkt 46fpkt", shape=invtriangle, color=brown];
stat1102[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 201.175.60.157:*}[91.6859%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0843%)&lt;BR/&gt; 0: (2.10728%)&lt;BR/&gt; 135: (0.574713%)&lt;BR/&gt; 47763: (0.287356%)&lt;BR/&gt; 47698: (0.287356%)&gt;];
}
460--473[label="0.00645161;1pkt 1fpkt"];
460--477[label="0.062201;26pkt 26fpkt"];
460--524[label="0.0824742;16pkt 16fpkt"];
460--606[label="0.0813397;34pkt 34fpkt"];
460--617[label="0.0606061;10pkt 10fpkt"];
460--675[label="0.0138889;2pkt 2fpkt"];
460--689[label="0.05;10pkt 10fpkt"];
460--690[label="0.00239234;1pkt 1fpkt"];
460--717[label="0.0569948;11pkt 11fpkt"];
460--778[label="0.0339506;11pkt 11fpkt"];
460--787[label="0.0070922;2pkt 2fpkt"];
460--918[label="0.0189873;3pkt 3fpkt"];
460--1141[label="0.101449;14pkt 14fpkt"];
460--1143[label="0.0979021;14pkt 14fpkt"];
460--1152[label="0.02;1pkt 1fpkt"];
460--1153[label="0.02;1pkt 1fpkt"];
460--1227[label="0.00961538;1pkt 1fpkt"];
460--1235[label="0.0145985;2pkt 2fpkt"];
460--1251[label="0.0117647;1pkt 1fpkt"];
460--1279[label="0.0128205;1pkt 1fpkt"];
460--1412[label="0.114286;8pkt 8fpkt"];
460--1504[label="0.03125;3pkt 3fpkt"];
460--1546[label="0.032967;3pkt 3fpkt"];
460--1549[label="0.0136986;1pkt 1fpkt"];
460--1566[label="0.016129;1pkt 1fpkt"];
460--1570[label="0.02;1pkt 1fpkt"];
460--1576[label="0.0136986;1pkt 1fpkt"];
460--1721[label="0.075188;10pkt 10fpkt"];
460--1735[label="0.0886076;7pkt 7fpkt"];
460--1991[label="0.00961538;1pkt 1fpkt"];
460--2016[label="0.02;3pkt 3fpkt"];
460--2103[label="0.114833;48pkt 48fpkt"];
460--2155[label="0.00664452;2pkt 2fpkt"];
460--2183[label="0.0185185;1pkt 1fpkt"];
460--2278[label="0.0294118;11pkt 11fpkt"];
460--2423[label="0.933333;42pkt 42fpkt"];
460--2506[label="0.0131579;1pkt 1fpkt"];
460--2658[label="0.089172;14pkt 14fpkt"];
460--2781[label="0.010989;1pkt 1fpkt"];
460--2788[label="0.0178571;1pkt 1fpkt"];
460--2815[label="0.0181818;1pkt 1fpkt"];
460--2817[label="0.0952381;14pkt 14fpkt"];
460--3041[label="0.0227273;1pkt 1fpkt"];
460--3132[label="0.0168539;3pkt 3fpkt"];
460--3137[label="0.0539216;11pkt 11fpkt"];
460--3226[label="0.0106383;1pkt 1fpkt"];
460--3258[label="0.357143;5pkt 5fpkt"];
460--3264[label="0.210526;4pkt 4fpkt"];
460--3418[label="0.0144928;1pkt 1fpkt"];
460--3445[label="0.0227273;2pkt 2fpkt"];
460--3451[label="0.0121951;1pkt 1fpkt"];
460--3468[label="0.0333333;1pkt 1fpkt"];
460--3475[label="0.0113636;1pkt 1fpkt"];
460--3504[label="1;8pkt 8fpkt"];
460--3512[label="0.0128205;1pkt 1fpkt"];
460--3585[label="0.121951;5pkt 5fpkt"];
460--3678[label="0.0813397;34pkt 34fpkt"];
460--3702[label="0.153846;2pkt 2fpkt"];
460--3722[label="0.0167464;7pkt 7fpkt"];
460--3780[label="0.285714;8pkt 8fpkt"];
460--3795[label="0.183673;9pkt 9fpkt"];
460--3814[label="0.0958904;7pkt 7fpkt"];
460--3835[label="0.0473934;10pkt 10fpkt"];
460--3887[label="0.011976;2pkt 2fpkt"];
460--3913[label="0.00666667;2pkt 2fpkt"];
460--3989[label="0.0294118;11pkt 11fpkt"];
460--4068[label="0.913043;42pkt 42fpkt"];
460--4117[label="0.0133333;1pkt 1fpkt"];
460--4201[label="0.089172;14pkt 14fpkt"];
460--4266[label="0.010989;1pkt 1fpkt"];
460--4439[label="0.0168539;3pkt 3fpkt"];
460--4441[label="0.0539216;11pkt 11fpkt"];
460--4480[label="0.0106383;1pkt 1fpkt"];
460--4501[label="0.357143;5pkt 5fpkt"];
460--4504[label="0.210526;4pkt 4fpkt"];
460--4595[label="0.0144928;1pkt 1fpkt"];
460--4624[label="0.0113636;1pkt 1fpkt"];
460--4639[label="1;8pkt 8fpkt"];
460--4682[label="0.121951;5pkt 5fpkt"];
460--4736[label="0.0813397;34pkt 34fpkt"];
460--4799[label="0.285714;8pkt 8fpkt"];
460--4808[label="0.183673;9pkt 9fpkt"];
460--4832[label="0.0473934;10pkt 10fpkt"];
460--4860[label="0.011976;2pkt 2fpkt"];
460--4871[label="0.00666667;2pkt 2fpkt"];
460--4918[label="0.0293333;11pkt 11fpkt"];
460--4979[label="0.0133333;1pkt 1fpkt"];
460--5025[label="0.089172;14pkt 14fpkt"];
460--5053[label="0.010989;1pkt 1fpkt"];
460--5121[label="0.0168539;3pkt 3fpkt"];
460--5122[label="0.0539216;11pkt 11fpkt"];
460--5154[label="0.210526;4pkt 4fpkt"];
460--5210[label="0.0113636;1pkt 1fpkt"];
460--5244[label="0.121951;5pkt 5fpkt"];
460--5312[label="0.0952381;8pkt 8fpkt"];
460--5318[label="0.0473934;10pkt 10fpkt"];
2423--4068[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="201.175.60.157" src_port="80"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.184.221.211"/>
    </slice>
    <from sec="1071205210" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.142.204.212"/>
    </slice>
    <from sec="1071205240" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.111.5.217"/>
    </slice>
    <from sec="1071205202" usec="0"/>
    <to sec="1071206080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.1.41.220"/>
    </slice>
    <from sec="1071205249" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.80.141.220"/>
    </slice>
    <from sec="1071205242" usec="0"/>
    <to sec="1071206101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.184.221.223"/>
    </slice>
    <from sec="1071205212" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.619993,1.60714,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1109{
style=filled;
color=gray75;
607[label="149.206.220.40;d;142pkt 142fpkt", shape=diamond, color=yellow];
stat1109[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 149.206.220.40:25}[92.9577%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.9437%)&lt;BR/&gt; 113: (1.05634%)&lt;BR/&gt; 65320: (0.352113%)&lt;BR/&gt; 65213: (0.352113%)&lt;BR/&gt; 65205: (0.352113%)&gt;];
}
607--3747[label="0.25;3pkt 3fpkt"];
607--4779[label="0.25;3pkt 3fpkt"];
607--5294[label="0.25;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="149.206.220.40" dst_port="25"/>
    </slice>
    <from sec="1071205203" usec="0"/>
    <to sec="1071206026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.184.221.231"/>
    </slice>
    <from sec="1071205207" usec="0"/>
    <to sec="1071206100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787756,1.70734,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.184.221.245"/>
    </slice>
    <from sec="1071205213" usec="0"/>
    <to sec="1071206097" usec="0"/>
  </anomaly>

</admd:annotation>
